chat-recall 0.0.1 → 0.4.8

package/dist/service-installer.d.ts

@@ -0,0 +1,32 @@
+export type Platform = 'linux' | 'darwin' | 'win32' | 'other';
+export interface ServicePaths {
+    /** Absolute path to the unit/plist/task definition (or null on Windows). */
+    definitionPath: string | null;
+    /** Absolute path to the log file the service writes stdout+stderr to. */
+    logFile: string;
+}
+/** Detect whether the per-user service is currently installed+running. */
+export declare function isServiceRunning(): boolean;
+/**
+ * Install + start the per-user background service. Returns the paths written
+ * (for status messaging) or throws on platform/manager failure.
+ */
+export declare function installService(): ServicePaths;
+/** Render the systemd --user unit file body (pure — no FS, no exec). */
+export declare function renderSystemdUnit(watchJs: string, node: string, logFile: string): string;
+/** Render the launchd plist body (pure — no FS, no exec). */
+export declare function renderLaunchdPlist(watchJs: string, node: string, logFile: string, label?: string): string;
+/** Render the schtasks /create command (pure — no exec). */
+export declare function renderWindowsTaskCommand(watchJs: string, node: string, taskName?: string): string;
+/**
+ * Stop + remove the per-user background service. Idempotent — no error if
+ * the service isn't installed. Returns true if something was removed.
+ */
+export declare function uninstallService(): boolean;
+/** Human-readable platform name for messaging. */
+export declare function platformName(): string;
+export declare class ServiceInstallError extends Error {
+    hint?: string;
+    constructor(message: string, hint?: string);
+}
+//# sourceMappingURL=service-installer.d.ts.map

package/dist/service-installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-installer.d.ts","sourceRoot":"","sources":["../src/service-installer.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;CACjB;AAiBD,0EAA0E;AAC1E,wBAAgB,gBAAgB,IAAI,OAAO,CAe1C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,YAAY,CAiB7C;AAsBD,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAgBxF;AAmBD,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,SAA0B,GAAG,MAAM,CAa1H;AAeD,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAsB,GAAG,MAAM,CAG9G;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAoB1C;AAED,kDAAkD;AAClD,wBAAgB,YAAY,IAAI,MAAM,CAKrC;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM;CAI3C"}

package/dist/service-installer.js

@@ -0,0 +1,231 @@
+/**
+ * Platform-native background-service installer for the watch daemon.
+ *
+ * `chat-recall init` and `chat-recall watch --install-service` both route
+ * through here so there is ONE place that knows how to install, uninstall,
+ * and detect the per-user service across Linux (systemd --user), macOS
+ * (launchd), and Windows (Scheduled Task). No admin rights needed.
+ *
+ * The daemon entry is resolved next to this file (dist/watch.js) so the
+ * service survives `npm prefix` moves better than relying on PATH at boot.
+ */
+import { execSync } from 'child_process';
+import { existsSync, mkdirSync, rmSync, writeFileSync } from 'fs';
+import { homedir } from 'os';
+import { join } from 'path';
+import { fileURLToPath } from 'url';
+/** Resolve the watch.js entry next to this file and the log file path. */
+function resolveDaemonPaths() {
+    const watchJs = fileURLToPath(new URL('./watch.js', import.meta.url));
+    const node = process.execPath;
+    const dataDir = join(homedir(), '.chat-recall');
+    const logFile = join(dataDir, 'watch.log');
+    return { watchJs, node, logFile, dataDir };
+}
+/** Best-effort command runner — swallows errors, returns stdout string. */
+function tryCmd(cmd) {
+    try {
+        return execSync(cmd, { stdio: ['ignore', 'pipe', 'ignore'] }).toString();
+    }
+    catch {
+        return '';
+    }
+}
+/** Detect whether the per-user service is currently installed+running. */
+export function isServiceRunning() {
+    if (process.platform === 'win32') {
+        if (/Running/i.test(tryCmd('schtasks /query /tn chat-recall-watch /fo LIST /v 2>nul')))
+            return true;
+        return /watch\.js/i.test(tryCmd('wmic process where "name=\'node.exe\'" get commandline 2>nul'));
+    }
+    if (process.platform === 'darwin') {
+        // launchctl list shows the label when the agent is loaded.
+        return /com\.chat-recall\.watch/.test(tryCmd('launchctl list 2>/dev/null'));
+    }
+    if (process.platform === 'linux') {
+        // systemd is-active is authoritative; skip the pgrep fallback (it
+        // self-matches the bash -c that runs the check, causing false positives).
+        return /active/.test(tryCmd('systemctl --user is-active chat-recall-watch.service 2>/dev/null'));
+    }
+    return false;
+}
+/**
+ * Install + start the per-user background service. Returns the paths written
+ * (for status messaging) or throws on platform/manager failure.
+ */
+export function installService() {
+    const { watchJs, node, logFile, dataDir } = resolveDaemonPaths();
+    mkdirSync(dataDir, { recursive: true });
+    if (process.platform === 'linux') {
+        return installSystemd(watchJs, node, logFile);
+    }
+    if (process.platform === 'darwin') {
+        return installLaunchd(watchJs, node, logFile);
+    }
+    if (process.platform === 'win32') {
+        return installWindowsTask(watchJs, node, logFile);
+    }
+    throw new ServiceInstallError(`--install-service: unsupported platform '${process.platform}'.`, 'Run `chat-recall watch` in the foreground, or point your OS scheduler at `chat-recall-watch`.');
+}
+function installSystemd(watchJs, node, logFile) {
+    const unitDir = join(homedir(), '.config', 'systemd', 'user');
+    const unitPath = join(unitDir, 'chat-recall-watch.service');
+    const unit = renderSystemdUnit(watchJs, node, logFile);
+    mkdirSync(unitDir, { recursive: true });
+    writeFileSync(unitPath, unit);
+    try {
+        // `restart` (not `enable --now`) so an upgrade reload actually replaces a
+        // running daemon — `--now` no-ops on an already-running unit, leaving the
+        // old binary in memory. restart starts it if stopped, restarts if running.
+        execSync('systemctl --user daemon-reload && systemctl --user enable chat-recall-watch.service && systemctl --user restart chat-recall-watch.service', { stdio: 'inherit' });
+        // Survive logout/reboot when no session is open (best-effort; needs the
+        // user's password once on some distros).
+        try {
+            execSync('loginctl enable-linger "$USER" 2>/dev/null', { stdio: 'ignore' });
+        }
+        catch { /* optional */ }
+    }
+    catch (err) {
+        throw new ServiceInstallError('Unit written but systemctl failed.', `Unit: ${unitPath}`);
+    }
+    return { definitionPath: unitPath, logFile };
+}
+/** Render the systemd --user unit file body (pure — no FS, no exec). */
+export function renderSystemdUnit(watchJs, node, logFile) {
+    return [
+        '[Unit]', 'Description=chat-recall live indexer (sessions → local index, optional server sync)', 'After=default.target', '',
+        '[Service]',
+        // Bounded heap: the daemon does bursty batch work (transcript parse,
+        // base64 payloads); V8's default old-space on a big-RAM box is ~4GB and
+        // GC only gets aggressive near the ceiling — observed as a multi-GB RSS
+        // sawtooth. 1536MB keeps GC honest (768 OOMed on the largest subagent-fanout session) with plenty of headroom for the
+        // largest transcripts.
+        `ExecStart=${node} --max-old-space-size=1536 ${watchJs}`,
+        'Restart=on-failure', 'RestartSec=10', 'Nice=10',
+        // Keep the service's own stdout/stderr out of the journal noise but
+        // available for `chat-recall service status` without paging journald.
+        `StandardOutput=append:${logFile}`, `StandardError=append:${logFile}`, '',
+        '[Install]', 'WantedBy=default.target', '',
+    ].join('\n');
+}
+function installLaunchd(watchJs, node, logFile) {
+    const label = 'com.chat-recall.watch';
+    const plistDir = join(homedir(), 'Library', 'LaunchAgents');
+    const plistPath = join(plistDir, `${label}.plist`);
+    const plist = renderLaunchdPlist(watchJs, node, logFile, label);
+    mkdirSync(plistDir, { recursive: true });
+    writeFileSync(plistPath, plist);
+    try {
+        // Reload idempotently: unload an old copy first, ignore "not loaded".
+        try {
+            execSync(`launchctl unload "${plistPath}"`, { stdio: 'ignore' });
+        }
+        catch { /* not loaded yet */ }
+        execSync(`launchctl load "${plistPath}"`, { stdio: 'inherit' });
+    }
+    catch {
+        throw new ServiceInstallError('Plist written but launchctl failed.', `Plist: ${plistPath}`);
+    }
+    return { definitionPath: plistPath, logFile };
+}
+/** Render the launchd plist body (pure — no FS, no exec). */
+export function renderLaunchdPlist(watchJs, node, logFile, label = 'com.chat-recall.watch') {
+    return [
+        '<?xml version="1.0" encoding="UTF-8"?>',
+        '<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">',
+        '<plist version="1.0"><dict>',
+        `  <key>Label</key><string>${label}</string>`,
+        `  <key>ProgramArguments</key><array><string>${node}</string><string>--max-old-space-size=1536</string><string>${watchJs}</string></array>`,
+        '  <key>RunAtLoad</key><true/>',
+        '  <key>KeepAlive</key><true/>',
+        `  <key>StandardOutPath</key><string>${logFile}</string>`,
+        `  <key>StandardErrorPath</key><string>${logFile}</string>`,
+        '</dict></plist>', '',
+    ].join('\n');
+}
+function installWindowsTask(watchJs, node, logFile) {
+    const taskName = 'chat-recall-watch';
+    const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+    try {
+        execSync(`schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`, { stdio: 'inherit' });
+        // Start now too (best-effort — starts next logon if /run unsupported).
+        try {
+            execSync(`schtasks /run /tn "${taskName}"`, { stdio: 'inherit' });
+        }
+        catch { /* starts next logon */ }
+    }
+    catch {
+        throw new ServiceInstallError('Scheduled Task creation failed (schtasks).', '');
+    }
+    return { definitionPath: null, logFile };
+}
+/** Render the schtasks /create command (pure — no exec). */
+export function renderWindowsTaskCommand(watchJs, node, taskName = 'chat-recall-watch') {
+    const tr = `\\"${node}\\" --max-old-space-size=1536 \\"${watchJs}\\"`;
+    return `schtasks /create /tn "${taskName}" /tr "${tr}" /sc onlogon /rl LIMITED /f`;
+}
+/**
+ * Stop + remove the per-user background service. Idempotent — no error if
+ * the service isn't installed. Returns true if something was removed.
+ */
+export function uninstallService() {
+    if (process.platform === 'linux') {
+        let removed = false;
+        try {
+            execSync('systemctl --user disable --now chat-recall-watch.service 2>/dev/null', { stdio: 'ignore' });
+            removed = true;
+        }
+        catch { /* not installed */ }
+        const unitPath = join(homedir(), '.config', 'systemd', 'user', 'chat-recall-watch.service');
+        if (existsSync(unitPath)) {
+            rmSync(unitPath, { force: true });
+            removed = true;
+        }
+        try {
+            execSync('systemctl --user daemon-reload 2>/dev/null', { stdio: 'ignore' });
+        }
+        catch { /* tolerate */ }
+        return removed;
+    }
+    if (process.platform === 'darwin') {
+        const plistPath = join(homedir(), 'Library', 'LaunchAgents', 'com.chat-recall.watch.plist');
+        try {
+            execSync(`launchctl unload "${plistPath}" 2>/dev/null`, { stdio: 'ignore' });
+        }
+        catch { /* not loaded */ }
+        let removed = false;
+        if (existsSync(plistPath)) {
+            rmSync(plistPath, { force: true });
+            removed = true;
+        }
+        return removed;
+    }
+    if (process.platform === 'win32') {
+        try {
+            execSync('schtasks /delete /tn chat-recall-watch /f 2>nul', { stdio: 'ignore' });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    return false;
+}
+/** Human-readable platform name for messaging. */
+export function platformName() {
+    if (process.platform === 'linux')
+        return 'systemd --user';
+    if (process.platform === 'darwin')
+        return 'launchd';
+    if (process.platform === 'win32')
+        return 'Scheduled Task';
+    return process.platform;
+}
+export class ServiceInstallError extends Error {
+    hint;
+    constructor(message, hint) {
+        super(message);
+        this.hint = hint;
+    }
+}
+//# sourceMappingURL=service-installer.js.map

package/dist/service-installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-installer.js","sourceRoot":"","sources":["../src/service-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AAWpC,0EAA0E;AAC1E,SAAS,kBAAkB;IACzB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,2EAA2E;AAC3E,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QAAC,OAAO,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAAC,CAAC;IACjF,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACtB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpG,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,2DAA2D;QAC3D,OAAO,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,kEAAkE;QAClE,0EAA0E;QAC1E,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,kEAAkE,CAAC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACjE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,mBAAmB,CAC3B,4CAA4C,OAAO,CAAC,QAAQ,IAAI,EAChE,+FAA+F,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,QAAQ,CAAC,2IAA2I,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5K,wEAAwE;QACxE,yCAAyC;QACzC,IAAI,CAAC;YAAC,QAAQ,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC/G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,mBAAmB,CAAC,oCAAoC,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IAC9E,OAAO;QACL,QAAQ,EAAE,qFAAqF,EAAE,sBAAsB,EAAE,EAAE;QAC3H,WAAW;QACX,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,sHAAsH;QACtH,uBAAuB;QACvB,aAAa,IAAI,8BAA8B,OAAO,EAAE;QACxD,oBAAoB,EAAE,eAAe,EAAE,SAAS;QAChD,oEAAoE;QACpE,sEAAsE;QACtE,yBAAyB,OAAO,EAAE,EAAE,wBAAwB,OAAO,EAAE,EAAE,EAAE;QACzE,WAAW,EAAE,yBAAyB,EAAE,EAAE;KAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACpE,MAAM,KAAK,GAAG,uBAAuB,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAChE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,sEAAsE;QACtE,IAAI,CAAC;YAAC,QAAQ,CAAC,qBAAqB,SAAS,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACxG,QAAQ,CAAC,mBAAmB,SAAS,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,EAAE,UAAU,SAAS,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe,EAAE,KAAK,GAAG,uBAAuB;IAChH,OAAO;QACL,wCAAwC;QACxC,wGAAwG;QACxG,6BAA6B;QAC7B,6BAA6B,KAAK,WAAW;QAC7C,+CAA+C,IAAI,8DAA8D,OAAO,mBAAmB;QAC3I,+BAA+B;QAC/B,+BAA+B;QAC/B,uCAAuC,OAAO,WAAW;QACzD,yCAAyC,OAAO,WAAW;QAC3D,iBAAiB,EAAE,EAAE;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAE,OAAe;IACxE,MAAM,QAAQ,GAAG,mBAAmB,CAAC;IACrC,MAAM,EAAE,GAAG,MAAM,IAAI,oCAAoC,OAAO,KAAK,CAAC;IACtE,IAAI,CAAC;QACH,QAAQ,CAAC,yBAAyB,QAAQ,UAAU,EAAE,8BAA8B,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5G,uEAAuE;QACvE,IAAI,CAAC;YAAC,QAAQ,CAAC,sBAAsB,QAAQ,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,IAAY,EAAE,QAAQ,GAAG,mBAAmB;IACpG,MAAM,EAAE,GAAG,MAAM,IAAI,oCAAoC,OAAO,KAAK,CAAC;IACtE,OAAO,yBAAyB,QAAQ,UAAU,EAAE,8BAA8B,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YAAC,QAAQ,CAAC,sEAAsE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC5J,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,CAAC,CAAC;QAC5F,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;QAChF,IAAI,CAAC;YAAC,QAAQ,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAC7G,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,6BAA6B,CAAC,CAAC;QAC5F,IAAI,CAAC;YAAC,QAAQ,CAAC,qBAAqB,SAAS,eAAe,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAChH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;QAClF,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YAAC,QAAQ,CAAC,iDAAiD,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAChI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,YAAY;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC;IAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,IAAI,CAAU;IACd,YAAY,OAAe,EAAE,IAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/sync-client.d.ts

@@ -0,0 +1,234 @@
+import { type ScanFinding, type DirScanFinding } from '@chat-recall/engine/core/secret-scanner.js';
+import { type SessionRef } from '@chat-recall/engine/core/tool-backend.js';
+import '@chat-recall/engine/core/backends/index.js';
+export interface Credentials {
+    serverUrl: string;
+    token: string;
+}
+/**
+ * Multi-target: logging in ADDS a server (or updates its token). Every
+ * sync pushes to ALL targets; the per-server ledger keeps coverage
+ * independent. File shape is {targets:[...]} with the legacy single-object
+ * form still readable.
+ */
+export declare function saveCredentials(c: Credentials): void;
+export declare function loadAllCredentials(): Credentials[];
+export declare function _resetTenantSecurityConfigCache(): void;
+export declare function _resetTenantSyncConfigCache(): void;
+/** Legacy single-target accessor — first target. */
+/** The ACTIVE target = most recent login (saveCredentials unshifts). */
+export declare function loadCredentials(): Credentials | null;
+export declare function removeCredentials(serverUrl: string): boolean;
+export interface SyncResult {
+    uploaded: number;
+    skipped: number;
+    redactions: number;
+    items: number;
+    links: number;
+    findings: number;
+    derived: number;
+    kgEntities: number;
+    kgTriples: number;
+    /** Sessions secret-scanned this run. */
+    scanned: number;
+    /** Total wall-clock ms spent scanning this run. */
+    scanMs: number;
+}
+export declare function syncSessions(opts?: {
+    sinceMs?: number;
+    cleartextPaths?: boolean;
+    limit?: number;
+    throttleMs?: number;
+    prune?: boolean;
+    useLedger?: boolean;
+    walk?: 'full' | 'changed';
+}): Promise<SyncResult>;
+export interface ReconcileResult {
+    sessions: number;
+    scanned: number;
+    pushed: number;
+    absent: number;
+    perTarget: Record<string, {
+        pushed: number;
+        absent: number;
+    }>;
+}
+/**
+ * Manual entrypoint (CLI `reconcile`): reconcile derived fields for ALL targets.
+ * Normal `sync` already runs reconciliation each pass; this is the explicit
+ * on-demand backfill / forced re-scan (also what a UI "re-scan this field"
+ * action drives, via forceFieldRescan + a sync).
+ */
+export declare function reconcileFields(opts?: {
+    force?: boolean;
+}): Promise<ReconcileResult>;
+/**
+ * Reap batch-scan temp dirs leaked by a previous run.
+ *
+ * The scan below deletes its dir in a `finally` — which a SIGKILL or the OOM
+ * killer skips entirely, and this loop is exactly the one that has OOM-killed
+ * the daemon before. Each leaked dir holds one file per session: one of them
+ * was found at 3.4GB / 309k files, and together with other cruft it filled a
+ * 31GB tmpfs, at which point *everything* on the box that needed /tmp broke.
+ *
+ * So: before starting a scan, delete our own stale dirs. 6h is far longer than
+ * any real scan, so an in-flight dir from a concurrent process is never at risk.
+ */
+export declare function reapStaleScanDirs(dir?: string, maxAgeMs?: number, now?: number): number;
+/**
+ * Run the optional external detectors (gitleaks/trufflehog) over many sessions
+ * with a BOUNDED amount of pre-redaction text on disk at any one time.
+ *
+ * The detectors take a path, so their input has to be materialized — and that
+ * input is raw session text, i.e. real credentials in cleartext. Writing all of
+ * it at once is what left 3.4GB / 309k such files in /tmp when the daemon was
+ * OOM-killed mid-scan (the `finally` never ran). So we fill a temp dir up to
+ * `maxBytes`, scan it, delete it, and repeat: worst-case exposure — and
+ * worst-case leak if this process is killed — is one slice, not the whole walk.
+ *
+ * Cost of slicing is 2 detector spawns per extra slice, still far below the
+ * 2·N of per-session scanning.
+ *
+ * `text()` returning null (unexportable session) is skipped silently: it just
+ * gets no external findings, the builtin scan still covers it.
+ * `scan` is injectable so tests don't need the binaries installed.
+ */
+export declare function batchScanExternal(items: Array<{
+    id: string;
+    text: () => string | null;
+}>, opts?: {
+    verifyOnly?: boolean;
+    maxBytes?: number;
+    scan?: (dir: string, o: {
+        verifyOnly?: boolean;
+    }) => DirScanFinding[];
+}): {
+    findings: Map<string, ScanFinding[]>;
+    scanned: number;
+    slices: number;
+    scanMs: number;
+};
+/**
+ * Build the live per-session conversation payload — the THIN-COLLECTOR core.
+ * Reads ONLY the raw transcript (via `parseTranscript` + `parseSessionFile`),
+ * never the local store. Returns the conversation row exactly as the server
+ * ingest expects it, plus the redacted plain text (for live KG extraction)
+ * and the redaction count. Returns null when there's nothing worth shipping.
+ *
+ * Exported so the payload can be exercised in tests with no server and no
+ * pre-populated index (see sync-client.test.ts).
+ */
+export interface BuiltConversation {
+    conv: Record<string, unknown>;
+    /** Redacted conversation text — feed to `extractEntities` for the KG. */
+    kgText: string;
+    /** Real project path resolved from the transcript cwd (for KG context). */
+    projectPath: string;
+    redactions: number;
+    /** Masked secret findings from the raw session (built-in regex always, plus
+     *  gitleaks/trufflehog/tenant rules when installed), shipped to the server's secret_findings. */
+    findings: Array<{
+        session_id: string;
+        detector: string;
+        rule: string;
+        line: number;
+        preview: string;
+        verified_at?: string | null;
+    }>;
+    /** Wall-clock ms spent scanning this session (0 if nothing to scan). */
+    scanMs: number;
+    /** Content fingerprint of the transcript this payload was built from
+     *  (containerSrcHash of the raw export). The walk stamps it into the ledger so
+     *  a later mtime-only bump with identical content can skip the whole rebuild.
+     *  Undefined for the oversized-tail path (no full container is materialized). */
+    srcHash?: string;
+}
+/** buildConversationSync's early-out when the caller passed a priorContentHash
+ *  that matches the freshly-exported content: nothing changed since the last
+ *  FULL sync, so the caller just re-stamps the ledger mtime and skips. */
+export interface UnchangedConversation {
+    unchanged: true;
+    srcHash: string;
+}
+/** Transcript bytes beyond which a FULL sync must not materialize the whole
+ *  file. The FULL pipeline copies the transcript ~5× (parse, trim+redact,
+ *  raw export, raw-text join, redacted container) — a 350MB session transiently
+ *  needs >1.5GB of heap, which OOM-killed the watch daemon in a restart loop
+ *  (ledger never acked → same file retried on every startup tick, forever). */
+export declare const FULL_BUILD_MAX_BYTES: number;
+/** Ceiling on PRE-REDACTION session text materialized on disk at any one moment
+ *  by the optional external-detector batch scan. The batch dir is flushed and
+ *  deleted every time it crosses this, so a SIGKILL/OOM mid-scan can strand at
+ *  most this many bytes of cleartext (the incident stranded 3.4GB), and the
+ *  window in which they exist is proportionally short. Raising it buys fewer
+ *  detector spawns; lowering it buys a smaller blast radius. */
+export declare const BATCH_SCAN_MAX_BYTES: number;
+/** Bytes an append-only session occupies on disk (0 for non-AO backends). */
+export declare function sessionFileBytes(ref: SessionRef): number;
+export declare function buildConversationSync(ref: SessionRef, mtime: number, opts?: {
+    mapPath?: (p: string) => string;
+    includeRaw?: boolean;
+    includeMeta?: boolean;
+    scanSecrets?: boolean;
+    verifySecrets?: boolean;
+    tenantRules?: Array<{
+        name: string;
+        regex: string;
+    }>;
+    /** Batch-scan results for THIS session (gitleaks/trufflehog already run
+     *  over a directory). When provided, skip the per-session subprocess scan
+     *  and use these instead — built-in regex + tenant rules still run inline. */
+    precomputedExternal?: ScanFinding[];
+    /** The content hash this target last FULL-synced (ledger `h`). When the
+     *  freshly-exported transcript hashes equal to it, the whole build is
+     *  redundant — we bail immediately with { unchanged, srcHash } so the caller
+     *  just advances the ledger mtime. Only pass it when the ledger row is at the
+     *  current extractor version (else a re-derive is genuinely owed). */
+    priorContentHash?: string;
+}): Promise<BuiltConversation | UnchangedConversation | null>;
+/**
+ * Build the tail-only conversation payload for an APPEND sync (see
+ * docs/SYNC-INCREMENTAL.md). Reads ONLY the new bytes from `fromOffset` via
+ * the backend's `readFromOffset`, parses them into messages, and ships a
+ * minimal append envelope — no raw_b64, no telemetry meta, no title/
+ * first_prompt (all head-derived; the server keeps its prior values), no
+ * derived (deferred to the FULL re-sync when the session goes quiet).
+ *
+ * Returns null when the tail is empty / unparseable / all-internal — the
+ * caller treats that as "nothing to ship this tick" and leaves the ledger
+ * cursor unchanged.
+ */
+export declare function buildConversationTail(ref: SessionRef, fromOffset: number, opts?: {
+    mapPath?: (p: string) => string;
+    tenantRules?: Array<{
+        name: string;
+        regex: string;
+    }>;
+}): Promise<{
+    conv: Record<string, unknown>;
+    redactions: number;
+    newOffset: number;
+    findings: BuiltConversation['findings'];
+} | null>;
+/**
+ * Incremental sync for the watch daemon and parameterless `chat-recall sync`:
+ * push only sessions modified after `settings.sync.lastSyncAt`, then advance
+ * the watermark. The watermark is captured BEFORE the walk so sessions that
+ * change mid-sync are re-pushed next time instead of being skipped forever.
+ *
+ * Returns null when sync isn't configured (no credentials) — callers treat
+ * that as "feature off", not an error.
+ */
+/** Why an incremental sync tick did no work. Distinct outcomes because the
+ *  right reaction differs: 'lock-held' is routine writer election (be quiet),
+ *  'no-credentials'/'paused' are user-actionable. Historically all three were
+ *  a bare `null` and every skip logged as "not logged in" — thousands of
+ *  misleading lines in the watch log. */
+export interface SyncSkip {
+    skipped: 'no-credentials' | 'paused' | 'lock-held';
+}
+export declare function isSyncSkip(r: SyncResult | SyncSkip): r is SyncSkip;
+export declare function syncIncremental(opts?: {
+    scope?: 'full' | 'changed';
+}): Promise<SyncResult | SyncSkip>;
+//# sourceMappingURL=sync-client.d.ts.map

package/dist/sync-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-client.d.ts","sourceRoot":"","sources":["../src/sync-client.ts"],"names":[],"mappings":"AAwCA,OAAO,EAAoF,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAWrL,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,0CAA0C,CAAC;AA0BxG,OAAO,4CAA4C,CAAC;AAMpD,MAAM,WAAW,WAAW;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAAE;AAElE;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAgBpD;AAED,wBAAgB,kBAAkB,IAAI,WAAW,EAAE,CASlD;AAwFD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAiFD,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,oDAAoD;AACpD,wEAAwE;AACxE,wBAAgB,eAAe,IAAI,WAAW,GAAG,IAAI,CAEpD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAM5D;AAoBD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB;AA2BD,wBAAsB,YAAY,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAqBvN;AAED,MAAM,WAAW,eAAe;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AA+ErK;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAc9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAiB,EAAE,QAAQ,SAAe,EAAE,GAAG,SAAa,GAAG,MAAM,CAc3G;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,EACvD,IAAI,GAAE;IACJ,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,cAAc,EAAE,CAAC;CAClE,GACL;IAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAwD3F;AAsyBD;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB;qGACiG;IACjG,QAAQ,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACpI,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf;;;qFAGiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;0EAE0E;AAC1E,MAAM,WAAW,qBAAqB;IAAG,SAAS,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAE5E;;;;+EAI+E;AAC/E,eAAO,MAAM,oBAAoB,QAC2D,CAAC;AAI7F;;;;;gEAKgE;AAChE,eAAO,MAAM,oBAAoB,QAC0D,CAAC;AAE5F,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAIxD;AAED,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzL;;kFAE8E;IAC9E,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC;IACpC;;;;0EAIsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACjC,OAAO,CAAC,iBAAiB,GAAG,qBAAqB,GAAG,IAAI,CAAC,CA8R3D;AAgBD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,UAAU,EACf,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAO,GACnG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CAkEnI;AA6ED;;;;;;;;GAQG;AACH;;;;yCAIyC;AACzC,MAAM,WAAW,QAAQ;IAAG,OAAO,EAAE,gBAAgB,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE;AAEhF,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,QAAQ,GAAG,CAAC,IAAI,QAAQ,CAElE;AAED,wBAAsB,eAAe,CAAC,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAO,GAAG,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CA4C/G"}