askvireo 0.0.0-stage → 0.1.3

package/dist/access.js

@@ -0,0 +1,33 @@
+import { createPublicKey, verify } from "node:crypto";
+const HEADER = Buffer.from(JSON.stringify({ alg: "EdDSA", typ: "JWT" })).toString("base64url");
+const keys = new Map();
+/**
+ * Checks an access token from the app: signed by the cloud this node is
+ * linked to, issued for this node, for its owner, and not expired. The same
+ * check applies whether the request came through the relay or straight over
+ * the tailnet, so the relay is never trusted to decide who gets in.
+ */
+export function verifyAccess(token, identity) {
+    if (!token || !identity)
+        return undefined;
+    const [header, payload, sig] = token.split(".");
+    if (header !== HEADER || !payload || !sig)
+        return undefined;
+    let key = keys.get(identity.publicKey);
+    if (!key) {
+        key = createPublicKey(identity.publicKey);
+        keys.set(identity.publicKey, key);
+    }
+    if (!verify(null, Buffer.from(`${header}.${payload}`), key, Buffer.from(sig, "base64url")))
+        return undefined;
+    let claims;
+    try {
+        claims = JSON.parse(Buffer.from(payload, "base64url").toString());
+    }
+    catch {
+        return undefined;
+    }
+    const ok = claims.aud === identity.nodeId && claims.sub === identity.owner.id && claims.exp * 1000 > Date.now();
+    return ok ? claims : undefined;
+}
+//# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAItE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/F,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB,EAAE,QAAkC;IACxF,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7G,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChH,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjC,CAAC"}

package/dist/acp.js

@@ -0,0 +1,257 @@
+import { spawn } from "node:child_process";
+import { createRequire } from "node:module";
+import { dirname, join } from "node:path";
+/**
+ * Coding agents over the Agent Client Protocol.
+ *
+ * `acpx` (openclaw/acpx) is a headless ACP client: it starts a coding agent,
+ * keeps its session, and mediates permission requests. Vireo drives it as a
+ * child process and reads its JSON-RPC stream, so every agent acpx knows
+ * (Claude Code, Codex, opencode, pi, …) works without more code.
+ */
+const require = createRequire(import.meta.url);
+/** acpx's CLI entry, from this package's own dependency: nothing to install globally. */
+export function acpxEntry() {
+    return join(dirname(require.resolve("acpx/package.json")), "dist", "cli.js");
+}
+const READ_KINDS = ["read", "search", "think", "fetch"];
+const WRITE_KINDS = ["edit", "move"];
+const DANGEROUS_KINDS = ["delete", "execute", "other"];
+export function permissionArgs(mode) {
+    if (mode === "full")
+        return ["--approve-all", "--permission-policy", JSON.stringify({ defaultAction: "approve" }), "--non-interactive-permissions", "deny"];
+    const policy = mode === "read-only"
+        ? { autoApprove: READ_KINDS, autoDeny: [...WRITE_KINDS, ...DANGEROUS_KINDS], defaultAction: "deny" }
+        : { autoApprove: [...READ_KINDS, ...WRITE_KINDS], autoDeny: DANGEROUS_KINDS, defaultAction: "deny" };
+    // The client's own filesystem and terminal capabilities let an agent act without asking for
+    // permission at all, so they are what makes a mode mean anything: without the terminal an agent has
+    // to ask before running a command, and without the filesystem (read-only) it cannot write at all.
+    const args = ["--deny-all", "--permission-policy", JSON.stringify(policy), "--non-interactive-permissions", "deny", "--no-terminal"];
+    if (mode === "read-only")
+        args.push("--no-fs");
+    return args;
+}
+/** Global flags, which acpx requires before the agent name. */
+export function globalArgs(o) {
+    const args = ["--cwd", o.cwd, "--format", "json", "--json-strict", "--timeout", String(o.timeoutSeconds), "--ttl", String(o.ttlSeconds), ...permissionArgs(o.mode)];
+    if (o.agentCommand)
+        args.push("--agent", o.agentCommand);
+    if (o.model)
+        args.push("--model", o.model);
+    return args;
+}
+/**
+ * The agent's name, unless the setup runs a command of its own: acpx refuses a positional agent
+ * next to --agent, and reads the command's words as the subcommand instead.
+ */
+const agentPart = (agent, o) => (o.agentCommand ? [] : [agent]);
+export const execArgs = (agent, prompt, o) => [...globalArgs(o), ...agentPart(agent, o), "exec", prompt];
+export const sessionPromptArgs = (agent, session, prompt, o) => [...globalArgs(o), ...agentPart(agent, o), "-s", session, "prompt", prompt];
+export const sessionEnsureArgs = (agent, session, o) => [...globalArgs(o), ...agentPart(agent, o), "sessions", "ensure", "--name", session];
+export const sessionListArgs = (agent, o) => [...globalArgs(o), ...agentPart(agent, o), "sessions", "list", "--local"];
+export const sessionCloseArgs = (agent, session, o) => [...globalArgs(o), ...agentPart(agent, o), "sessions", "close", session];
+const OUTPUT_CAP = 4 << 20;
+/**
+ * Vireo's own settings and credentials stay with Vireo; the agent gets the rest of the environment
+ * (PATH, HOME, its own provider keys) plus what its setup adds.
+ */
+export function agentEnv(base, extra = {}) {
+    const env = {};
+    for (const [k, v] of Object.entries(base))
+        if (!/^(VIREO_|GOOGLE_CLIENT_)/.test(k))
+            env[k] = v;
+    return { ...env, ...extra };
+}
+/**
+ * Runs acpx and collects its output. `onLine` sees every stdout line however long the run, while
+ * `stdout` keeps only the first few megabytes; stderr keeps its tail, where the failure is.
+ * Stopping a run kills acpx's whole process group, so the agent it started goes too.
+ */
+export function runAcpx(args, opts) {
+    return new Promise((resolve) => {
+        const child = spawn(process.execPath, [acpxEntry(), ...args], {
+            cwd: opts.cwd,
+            env: agentEnv(process.env, opts.env),
+            stdio: ["ignore", "pipe", "pipe"],
+            detached: process.platform !== "win32",
+        });
+        let stdout = "";
+        let stderr = "";
+        let pending = "";
+        let timedOut = false;
+        let aborted = false;
+        let done = false;
+        const kill = () => {
+            try {
+                if (child.pid && process.platform !== "win32")
+                    process.kill(-child.pid, "SIGKILL");
+                else
+                    child.kill("SIGKILL");
+            }
+            catch {
+                child.kill("SIGKILL");
+            }
+        };
+        const finish = (code) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            opts.signal?.removeEventListener("abort", onAbort);
+            if (pending)
+                opts.onLine?.(pending);
+            resolve({ code, stdout, stderr, timedOut, aborted });
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            kill();
+        }, opts.timeoutMs);
+        const onAbort = () => {
+            aborted = true;
+            kill();
+        };
+        if (opts.signal?.aborted)
+            onAbort();
+        else
+            opts.signal?.addEventListener("abort", onAbort, { once: true });
+        child.stdout.on("data", (chunk) => {
+            const text = chunk.toString("utf8");
+            if (stdout.length < OUTPUT_CAP)
+                stdout += text;
+            if (!opts.onLine)
+                return;
+            const lines = (pending + text).split("\n");
+            pending = lines.pop() ?? "";
+            for (const line of lines)
+                opts.onLine(line);
+        });
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString("utf8");
+            if (stderr.length > OUTPUT_CAP)
+                stderr = stderr.slice(-OUTPUT_CAP / 2);
+        });
+        child.on("error", (err) => {
+            stderr += `${stderr ? "\n" : ""}${err.message}`;
+            finish(-1);
+        });
+        child.on("close", (code) => finish(code ?? -1));
+    });
+}
+const MAX_TOOLS = 60;
+const MAX_TEXT = 200_000;
+const str = (v) => (typeof v === "string" ? v : undefined);
+function toolSteps(update, turn) {
+    const id = str(update.toolCallId);
+    if (!id)
+        return;
+    let step = turn.tools.find((t) => t.id === id);
+    if (!step) {
+        // Past the cap new calls are left out, but the ones listed still get their updates.
+        if (turn.tools.length >= MAX_TOOLS)
+            return;
+        step = { title: str(update.title) ?? id, id };
+        turn.tools.push(step);
+    }
+    const title = str(update.title);
+    if (title)
+        step.title = title;
+    const kind = str(update.kind);
+    if (kind)
+        step.kind = kind;
+    const status = str(update.status);
+    if (status)
+        step.status = status;
+    const raw = update.rawInput;
+    if (raw && typeof raw === "object") {
+        const input = raw;
+        const detail = str(input.command) ?? str(input.path) ?? str(input.file_path) ?? str(input.pattern);
+        if (detail)
+            step.detail = detail;
+    }
+    const content = update.content;
+    if (Array.isArray(content)) {
+        for (const c of content) {
+            if (c.type === "diff" && typeof c.path === "string" && !turn.files.includes(c.path))
+                turn.files.push(c.path);
+        }
+    }
+    if (Array.isArray(update.locations)) {
+        for (const l of update.locations) {
+            if (typeof l.path === "string" && !turn.files.includes(l.path))
+                turn.files.push(l.path);
+        }
+    }
+}
+/** Reads acpx's JSON-RPC stream, line by line, into what the owner (and the model) needs to see. */
+export class TurnReader {
+    turn = { text: "", tools: [], files: [], plans: [], errors: [], refused: [], frames: 0 };
+    push(line) {
+        const turn = this.turn;
+        const trimmed = line.trim();
+        if (!trimmed.startsWith("{"))
+            return;
+        let msg;
+        try {
+            msg = JSON.parse(trimmed);
+        }
+        catch {
+            return;
+        }
+        turn.frames += 1;
+        const error = msg.error;
+        if (error)
+            turn.errors.push(str(error.message) ?? JSON.stringify(error));
+        const result = msg.result;
+        if (result) {
+            const stop = str(result.stopReason);
+            if (stop)
+                turn.stopReason = stop;
+            const outcome = result.outcome;
+            if (outcome?.outcome === "selected" && !/allow/i.test(String(outcome.optionId)))
+                turn.refused.push("a permission request was declined");
+            const meta = result._meta;
+            const escalation = meta?.acpx;
+            if (escalation?.permissionEscalation)
+                turn.refused.push("a permission request was escalated but could not be approved here");
+        }
+        if (msg.method !== "session/update")
+            return;
+        const params = msg.params;
+        const update = params?.update;
+        const tag = str(update?.sessionUpdate);
+        if (!update || !tag)
+            return;
+        if (tag === "agent_message_chunk") {
+            const content = update.content;
+            if (content?.type === "text" && typeof content.text === "string" && turn.text.length < MAX_TEXT)
+                turn.text += content.text;
+        }
+        else if (tag === "tool_call" || tag === "tool_call_update") {
+            toolSteps(update, turn);
+        }
+        else if (tag === "plan") {
+            // Each plan update is the whole plan, not an addition to it.
+            const entries = update.entries;
+            if (Array.isArray(entries)) {
+                turn.plans = [];
+                for (const e of entries) {
+                    const content = str(e.content);
+                    if (content)
+                        turn.plans.push(`${str(e.status) ?? "pending"}: ${content}`);
+                }
+            }
+        }
+    }
+    finish() {
+        this.turn.text = this.turn.text.trim();
+        this.turn.files = [...new Set(this.turn.files)];
+        return this.turn;
+    }
+}
+export function parseTurn(stdout) {
+    const reader = new TurnReader();
+    for (const line of stdout.split("\n"))
+        reader.push(line);
+    return reader.finish();
+}
+//# sourceMappingURL=acp.js.map

package/dist/acp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acp.js","sourceRoot":"","sources":["../src/acp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;;;GAOG;AAEH,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAE/C,yFAAyF;AACzF,MAAM,UAAU,SAAS;IACvB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAKD,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACxD,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAEvD,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,eAAe,EAAE,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,EAAE,+BAA+B,EAAE,MAAM,CAAC,CAAC;IAE5J,MAAM,MAAM,GACV,IAAI,KAAK,WAAW;QAClB,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,WAAW,EAAE,GAAG,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE;QACpG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACzG,4FAA4F;IAC5F,oGAAoG;IACpG,kGAAkG;IAClG,MAAM,IAAI,GAAG,CAAC,YAAY,EAAE,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,+BAA+B,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IACrI,IAAI,IAAI,KAAK,WAAW;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/C,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,CAAa;IACtC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpK,IAAI,CAAC,CAAC,YAAY;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9F,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/I,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC1L,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAClL,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAa,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;AACrJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAE,OAAe,EAAE,CAAa,EAAY,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAUtK,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,CAAC;AAE3B;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAuB,EAAE,KAAK,GAA2B,EAAE;IAClF,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/F,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CACrB,IAAc,EACd,IAA6H;IAE7H,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE;YAC5D,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YACpC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,GAAG,KAAK,CAAC;QAEjB,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;oBAC9E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,OAAO;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YACpC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,CAAC;QACT,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;;YAC/B,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;gBAAE,MAAM,IAAI,IAAI,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACzB,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;gBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAwBD,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAExF,SAAS,SAAS,CAAC,MAA+B,EAAE,IAAU;IAC5D,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,oFAAoF;QACpF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS;YAAE,OAAO;QAC3C,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC5B,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAA8B,CAAC;QAC7C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnG,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACnC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,OAAoC,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,SAAsC,EAAE,CAAC;YAC9D,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,OAAO,UAAU;IACZ,IAAI,GAAS,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAExG,IAAI,CAAC,IAAY;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QACrC,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAEjB,MAAM,KAAK,GAAG,GAAG,CAAC,KAA4C,CAAC;QAC/D,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;QACjE,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACpC,IAAI,IAAI;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;YACtE,IAAI,OAAO,EAAE,OAAO,KAAK,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;YACxI,MAAM,IAAI,GAAG,MAAM,CAAC,KAA4C,CAAC;YACjE,MAAM,UAAU,GAAG,IAAI,EAAE,IAA2C,CAAC;YACrE,IAAI,UAAU,EAAE,oBAAoB;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAC/H,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB;YAAE,OAAO;QAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,EAAE,MAA6C,CAAC;QACrE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;YAAE,OAAO;QAE5B,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;YACtE,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ;gBAAE,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;QAC7H,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,kBAAkB,EAAE,CAAC;YAC7D,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAC1B,6DAA6D;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAChB,KAAK,MAAM,CAAC,IAAI,OAAoC,EAAE,CAAC;oBACrD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC/B,IAAI,OAAO;wBAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/actions.js

@@ -0,0 +1,141 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+import { forModel } from "./tools/types.js";
+import { errorMessage, newId, now, safeJson, truncate } from "./util.js";
+function toAction(r) {
+    return {
+        id: r.id,
+        threadId: r.thread_id,
+        tool: r.tool,
+        args: safeJson(r.args, {}),
+        summary: r.summary,
+        status: r.status,
+        result: r.result,
+        display: r.display ? safeJson(r.display, null) : null,
+        createdAt: r.created_at,
+        resolvedAt: r.resolved_at,
+    };
+}
+export class Actions {
+    app;
+    constructor(app) {
+        this.app = app;
+        // An action interrupted mid-execution is not retried automatically: it may
+        // already have taken effect, so the owner decides.
+        app.db.run("UPDATE actions SET status = 'failed', result = 'Interrupted by a restart; check whether it took effect before retrying.' WHERE status = 'executing'");
+    }
+    create(threadId, tool, args, summary) {
+        const id = newId("act");
+        this.app.db.run("INSERT INTO actions (id, thread_id, tool, args, summary, status, created_at) VALUES (?, ?, ?, ?, ?, 'pending', ?)", id, threadId, tool, JSON.stringify(args), summary, now());
+        this.app.threads.addNotice(threadId, "action", summary, { data: { actionId: id } });
+        this.app.bus.publish({ type: "action.updated", threadId, actionId: id });
+        const thread = this.app.threads.get(threadId);
+        void this.app.push.notify({
+            title: thread ? `Confirm: ${thread.title}` : "Vireo needs your confirmation",
+            body: summary,
+            url: `/#thread/${threadId}`,
+            tag: `action-${id}`,
+            decide: { confirm: this.decisionUrl(id, "confirm"), cancel: this.decisionUrl(id, "cancel") },
+        });
+        return this.get(id);
+    }
+    /** The key that signs one-tap decision links; made once, kept in the database. */
+    decisionKey() {
+        let key = this.app.db.getKv("actions.decision_key");
+        if (!key) {
+            key = randomBytes(32).toString("base64url");
+            this.app.db.setKv("actions.decision_key", key);
+        }
+        return key;
+    }
+    signature(id, decision) {
+        return createHmac("sha256", this.decisionKey()).update(`${id}:${decision}`).digest("base64url");
+    }
+    /**
+     * A link that confirms or declines one pending action with no sign-in, for
+     * the buttons on a push notification. It is signed for that action and that
+     * decision, and only reaches the owner inside their encrypted push.
+     */
+    decisionUrl(id, decision) {
+        return `${this.app.address.publicUrl().replace(/\/$/, "")}/public/decide/${id}/${decision}?sig=${this.signature(id, decision)}`;
+    }
+    verifyDecision(id, decision, sig) {
+        if ((decision !== "confirm" && decision !== "cancel") || !sig)
+            return false;
+        const want = Buffer.from(this.signature(id, decision));
+        const got = Buffer.from(sig);
+        return want.length === got.length && timingSafeEqual(want, got);
+    }
+    get(id) {
+        const r = this.app.db.get("SELECT * FROM actions WHERE id = ?", id);
+        return r ? toAction(r) : undefined;
+    }
+    forThread(threadId) {
+        return this.app.db.all("SELECT * FROM actions WHERE thread_id = ? ORDER BY created_at", threadId).map(toAction);
+    }
+    pending() {
+        return this.app.db.all("SELECT * FROM actions WHERE status = 'pending' ORDER BY created_at").map(toAction);
+    }
+    setStatus(id, status, result, display) {
+        this.app.db.run("UPDATE actions SET status = ?, result = ?, display = ?, resolved_at = ? WHERE id = ?", status, result ?? null, display ? JSON.stringify(display) : null, now(), id);
+        const a = this.get(id);
+        if (a) {
+            this.app.bus.publish({ type: "action.updated", threadId: a.threadId, actionId: id });
+            this.app.threads.changed(a.threadId);
+        }
+    }
+    /** Runs the confirmed action and resumes the thread. */
+    async confirm(id, editedArgs) {
+        const claimed = this.app.db.run("UPDATE actions SET status = 'executing' WHERE id = ? AND status = 'pending'", id);
+        const action = this.get(id);
+        if (!action)
+            throw new Error("Action not found");
+        if (claimed.changes === 0)
+            return action; // already handled on another device
+        const tool = this.app.tools.get(action.tool);
+        const thread = this.app.threads.get(action.threadId);
+        if (!tool || !thread) {
+            this.setStatus(id, "failed", "Tool or thread no longer exists");
+            return this.get(id);
+        }
+        const args = editedArgs ? { ...action.args, ...editedArgs } : action.args;
+        const edited = Boolean(editedArgs && JSON.stringify(args) !== JSON.stringify(action.args));
+        if (edited)
+            this.app.db.run("UPDATE actions SET args = ? WHERE id = ?", JSON.stringify(args), id);
+        const audit = this.app.audit.start(action.threadId, { tool: action.tool, agent: "owner", args });
+        // What the model is told the call returned, framed as outside content when it is.
+        let forAgent;
+        try {
+            const out = await tool.run(args, { app: this.app, thread, agent: "owner", confirmed: true });
+            const clip = (v) => this.app.vault.redact(truncate(v, 4000));
+            const display = out.display && { output: out.display.output && clip(out.display.output), note: out.display.note && clip(out.display.note) };
+            this.setStatus(id, out.failed ? "failed" : "done", clip(out.text), display);
+            this.app.audit.end(audit, out.failed ? "error" : "ok", out.text);
+            forAgent = forModel(truncate(this.app.vault.redact(out.text), 3000), out.source);
+        }
+        catch (err) {
+            forAgent = `Failed: ${this.app.vault.redact(errorMessage(err))}`;
+            this.setStatus(id, "failed", forAgent);
+            this.app.audit.end(audit, "error", forAgent);
+        }
+        this.app.threads.addNotice(action.threadId, "action_result", `The owner ${edited ? "edited and confirmed" : "confirmed"}: ${action.summary}${edited ? ` (final arguments: ${JSON.stringify(args)})` : ""}. Result: ${forAgent}\nContinue the task from here.`, { llm: true, data: { actionId: id } });
+        this.app.threads.update(action.threadId, { needs_you: 0 });
+        if (!tool.settles)
+            this.app.runner.schedule(action.threadId);
+        return this.get(id);
+    }
+    cancel(id, reason) {
+        const claimed = this.app.db.run("UPDATE actions SET status = 'cancelled', resolved_at = ? WHERE id = ? AND status = 'pending'", now(), id);
+        const action = this.get(id);
+        if (!action)
+            throw new Error("Action not found");
+        if (claimed.changes === 0)
+            return action;
+        this.app.bus.publish({ type: "action.updated", threadId: action.threadId, actionId: id });
+        this.app.threads.addNotice(action.threadId, "action_result", `The owner cancelled: ${action.summary}${reason ? `. Reason: ${reason}` : ""}. Do not retry it unless the owner asks.`, { llm: true, data: { actionId: id } });
+        this.app.threads.update(action.threadId, { needs_you: 0 });
+        if (!this.app.tools.get(action.tool)?.settles)
+            this.app.runner.schedule(action.threadId);
+        return action;
+    }
+}
+//# sourceMappingURL=actions.js.map

package/dist/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEvE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAmBzE,SAAS,QAAQ,CAAC,CAAY;IAC5B,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,QAAQ,EAAE,CAAC,CAAC,SAAS;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACrD,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,UAAU,EAAE,CAAC,CAAC,WAAW;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,OAAO;IACW,GAAG;IAAhC,YAA6B,GAAQ;mBAAR,GAAG;QAC9B,2EAA2E;QAC3E,mDAAmD;QACnD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qJAAqJ,CAAC,CAAC;IACpK,CAAC;IAED,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,IAA6B,EAAE,OAAe;QACnF,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CACb,mHAAmH,EACnH,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,OAAO,EACP,GAAG,EAAE,CACN,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,+BAA+B;YAC5E,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,YAAY,QAAQ,EAAE;YAC3B,GAAG,EAAE,UAAU,EAAE,EAAE;YACnB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE;SAC7F,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IACvB,CAAC;IAED,kFAAkF;IAC1E,WAAW;QACjB,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAS,sBAAsB,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,SAAS,CAAC,EAAU,EAAE,QAA8B;QAC1D,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClG,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,EAAU,EAAE,QAA8B;QACpD,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,EAAE,IAAI,QAAQ,QAAQ,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;IAClI,CAAC;IAED,cAAc,CAAC,EAAU,EAAE,QAAgB,EAAE,GAAuB;QAClE,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAY,oCAAoC,EAAE,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrC,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAY,+DAA+D,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7H,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAY,oEAAoE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxH,CAAC;IAEO,SAAS,CAAC,EAAU,EAAE,MAAwB,EAAE,MAAe,EAAE,OAA2B;QAClG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CACb,sFAAsF,EACtF,MAAM,EACN,MAAM,IAAI,IAAI,EACd,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EACxC,GAAG,EAAE,EACL,EAAE,CACH,CAAC;QACF,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,UAAoC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,6EAA6E,EAAE,EAAE,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,oCAAoC;QAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,iCAAiC,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3F,IAAI,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,0CAA0C,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,kFAAkF;QAClF,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAa,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtG,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5I,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACjE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CACxB,MAAM,CAAC,QAAQ,EACf,eAAe,EACf,aAAa,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,QAAQ,gCAAgC,EAChM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CACtC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,MAAe;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,8FAA8F,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3I,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CACxB,MAAM,CAAC,QAAQ,EACf,eAAe,EACf,wBAAwB,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,0CAA0C,EACtH,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CACtC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/address.js

@@ -0,0 +1,32 @@
+/** Where this node can be reached: by browsers, by itself, and directly when a plugin serves it. */
+export class Address {
+    config;
+    identity;
+    /** Set while a plugin serves this node at a direct address (e.g. https://box.tailnet.ts.net). */
+    directUrl;
+    /** Called when the direct address changes, so the cloud can be told. */
+    onChange = () => undefined;
+    constructor(config, identity) {
+        this.config = config;
+        this.identity = identity;
+    }
+    setDirectUrl(url) {
+        if (url === this.directUrl)
+            return;
+        this.directUrl = url;
+        this.onChange();
+    }
+    /** The node's address on the cloud relay, once linked in relay mode. */
+    relayUrl() {
+        const id = this.identity.get();
+        return id?.mode === "relay" ? `${id.cloudUrl}/n/${id.nodeId}` : undefined;
+    }
+    /** Base URL for OAuth redirects and webhooks: configured, else direct, else the relay, else where the request came from. */
+    publicUrl(req) {
+        return this.config.publicUrl ?? this.directUrl ?? this.relayUrl() ?? req?.origin ?? this.localUrl();
+    }
+    localUrl() {
+        return `http://127.0.0.1:${this.config.port}`;
+    }
+}
+//# sourceMappingURL=address.js.map

package/dist/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAIA,oGAAoG;AACpG,MAAM,OAAO,OAAO;IAOC,MAAM;IACN,QAAQ;IAP3B,iGAAiG;IACjG,SAAS,CAAqB;IAC9B,wEAAwE;IACxE,QAAQ,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IAEvC,YACmB,MAAc,EACd,QAAkB;sBADlB,MAAM;wBACN,QAAQ;IACxB,CAAC;IAEJ,YAAY,CAAC,GAAuB;QAClC,IAAI,GAAG,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO;QACnC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,QAAQ;QACN,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAED,4HAA4H;IAC5H,SAAS,CAAC,GAAiB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;IACtG,CAAC;IAED,QAAQ;QACN,OAAO,oBAAoB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC;CACF"}

package/dist/aftercare.js

@@ -0,0 +1,51 @@
+import { messageText, OVERVIEW_ID } from "./threads.js";
+import { now, truncate } from "./util.js";
+/**
+ * What follows a finished run: the thread's status line, "Needs you" when
+ * Vireo ended on a question, a notification when the owner should know, and
+ * memory upkeep. The runner only announces that a run ended.
+ */
+export class RunAftercare {
+    app;
+    constructor(app) {
+        this.app = app;
+        this.app.bus.subscribe((e) => {
+            if (e.type === "run.finished")
+                this.after(e.threadId, e.startedAt);
+        });
+    }
+    after(threadId, startedAt) {
+        const thread = this.app.threads.get(threadId);
+        if (!thread)
+            return;
+        const last = this.app.threads
+            .messages(threadId, { limit: 6 })
+            .reverse()
+            .find((m) => m.role === "assistant" && messageText(m.body));
+        const text = last ? messageText(last.body) : "";
+        const saidThisRun = Boolean(last && last.createdAt >= startedAt);
+        const patch = {};
+        // A status the agent set during this run wins over the first line of its reply.
+        const statusSetAt = this.app.db.getKv(`thread.status_set.${threadId}`) ?? 0;
+        if (statusSetAt < startedAt) {
+            const firstLine = text
+                .replace(/[*_#>`]/g, "")
+                .split(/\n|(?<=[.!?。！？])\s/)[0]
+                ?.trim();
+            patch.status_line = firstLine ? truncate(firstLine, 100) : thread.statusLine === "Working…" ? "" : thread.statusLine;
+        }
+        const asksOwner = saidThisRun && threadId !== OVERVIEW_ID && /[?？]\s*$/.test(text.trim());
+        if (asksOwner)
+            patch.needs_you = 1;
+        this.app.threads.update(threadId, patch);
+        const title = this.app.threads.get(threadId).title;
+        const notify = { body: truncate(text, 140), url: `/#thread/${threadId}`, tag: threadId };
+        if (asksOwner)
+            void this.app.push.notify({ title, ...notify });
+        else if (saidThisRun && now() - startedAt > 30_000)
+            void this.app.push.notify({ title: `Done: ${title}`, ...notify });
+        if (!thread.temporary)
+            this.app.memoryWorker.afterRun(threadId);
+    }
+}
+//# sourceMappingURL=aftercare.js.map

package/dist/aftercare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aftercare.js","sourceRoot":"","sources":["../src/aftercare.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACM,GAAG;IAAhC,YAA6B,GAAQ;mBAAR,GAAG;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,QAAgB,EAAE,SAAiB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO;aAC1B,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;aAChC,OAAO,EAAE;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,CAAC;QAEjE,MAAM,KAAK,GAA4C,EAAE,CAAC;QAC1D,gFAAgF;QAChF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAS,qBAAqB,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,WAAW,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI;iBACnB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;iBACvB,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;gBAC/B,EAAE,IAAI,EAAE,CAAC;YACX,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACvH,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,KAAK,CAAC;QACpD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,YAAY,QAAQ,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QACzF,IAAI,SAAS;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;aAC1D,IAAI,WAAW,IAAI,GAAG,EAAE,GAAG,SAAS,GAAG,MAAM;YAAE,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAEtH,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;CACF"}