draken 0.1.6 → 0.3.0

package/dist/server-state.js

@@ -0,0 +1,113 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rememberServer = rememberServer;
+exports.configuredServerTarget = configuredServerTarget;
+exports.recordedServerTarget = recordedServerTarget;
+exports.serverTarget = serverTarget;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const net_1 = require("net");
+const crypto_1 = require("crypto");
+const schema_1 = require("./db/schema");
+const stateFile = () => path_1.default.join((0, schema_1.getDataDir)(), 'server-state.json');
+const idPattern = /^[a-f0-9]{8}-(?:[a-f0-9]{4}-){3}[a-f0-9]{12}$/;
+function endpoint(host, port, secure = false) {
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('Invalid status port');
+    const local = host === '0.0.0.0' ? '127.0.0.1' : host === '::' ? '::1' : host;
+    const address = local.includes(':') && !local.startsWith('[') ? `[${local}]` : local;
+    const value = new URL(`${secure ? 'https' : 'http'}://${address}:${port}`);
+    if (value.username || value.password || value.pathname !== '/' || value.search || value.hash)
+        throw new Error('Invalid status address');
+    return value.origin;
+}
+function readState() {
+    let fd;
+    try {
+        if (fs_1.default.lstatSync(stateFile()).isSymbolicLink())
+            throw new Error('Invalid server record');
+        fd = fs_1.default.openSync(stateFile(), fs_1.default.constants.O_RDONLY | (fs_1.default.constants.O_NOFOLLOW || 0));
+        const stat = fs_1.default.fstatSync(fd);
+        if (!stat.isFile() || stat.size > 4096)
+            throw new Error('Invalid server record');
+        const bytes = Buffer.alloc(4097), length = fs_1.default.readSync(fd, bytes, 0, bytes.length, 0);
+        if (length > 4096)
+            throw new Error('Invalid server record');
+        const value = JSON.parse(bytes.subarray(0, length).toString('utf8'));
+        if (value.version !== 1 || typeof value.instance !== 'string' || !idPattern.test(value.instance) || !Number.isSafeInteger(value.pid) || value.pid < 1
+            || typeof value.started_at !== 'string' || !Number.isFinite(Date.parse(value.started_at)))
+            throw new Error('Invalid server record');
+        for (const [key, protocol] of [['http_url', 'http:'], ['https_url', 'https:']]) {
+            if (key === 'https_url' && value[key] === null)
+                continue;
+            if (typeof value[key] !== 'string' || value[key].length > 256)
+                throw new Error('Invalid server record');
+            const url = new URL(value[key]);
+            // Saved addresses come from the actual bound sockets, never arbitrary URLs
+            // or dashboard input. Explicit operator overrides may still use DNS names.
+            if (url.protocol !== protocol || url.port === '0' || !(0, net_1.isIP)(url.hostname.replace(/^\[|\]$/g, '')) || url.origin !== value[key])
+                throw new Error('Invalid server record');
+        }
+        return value;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw new Error('The saved server address is invalid. Check server-state.json in DRAKEN_DATA_DIR, or supply an explicit DRAKEN_HOST/DRAKEN_PORT override.');
+    }
+    finally {
+        if (fd !== undefined)
+            fs_1.default.closeSync(fd);
+    }
+}
+/** Last successful bind, not a claim that the process is still alive. Kept after
+ * shutdown so status can check the same address; a live instance match is required. */
+function rememberServer(instance, http, https) {
+    const state = { version: 1, instance, pid: process.pid, http_url: endpoint(http.address, http.port),
+        https_url: https ? endpoint(https.address, https.port, true) : null, started_at: new Date().toISOString() };
+    const temp = path_1.default.join((0, schema_1.getDataDir)(), `.server-state-${(0, crypto_1.randomUUID)()}.tmp`);
+    try {
+        fs_1.default.writeFileSync(temp, JSON.stringify(state) + '\n', { mode: 0o600, flag: 'wx' });
+        fs_1.default.renameSync(temp, stateFile());
+    }
+    finally {
+        fs_1.default.rmSync(temp, { force: true });
+    }
+    return { url: state.http_url, open: state.https_url || state.http_url, instance };
+}
+/** Where a new server would bind with this process's environment, not saved state. */
+function configuredServerTarget() {
+    const host = process.env.DRAKEN_HOST || '127.0.0.1';
+    const url = endpoint(host, Number(process.env.DRAKEN_PORT || 40333));
+    return { url, open: process.env.DRAKEN_HTTPS_PORT && process.env.DRAKEN_HTTPS_PORT !== '0'
+            ? endpoint(host, Number(process.env.DRAKEN_HTTPS_PORT), true) : url, instance: undefined };
+}
+function recordedServerTarget() {
+    const saved = readState();
+    return saved ? { url: saved.http_url, open: saved.https_url || saved.http_url, instance: saved.instance } : undefined;
+}
+function serverTarget() {
+    const explicit = Boolean(process.env.DRAKEN_HOST || process.env.DRAKEN_PORT);
+    let saved;
+    try {
+        saved = readState();
+    }
+    catch (error) {
+        if (!explicit)
+            throw error;
+    }
+    if (explicit) {
+        const last = saved && new URL(saved.http_url);
+        const host = process.env.DRAKEN_HOST || last?.hostname || '127.0.0.1';
+        const port = Number(process.env.DRAKEN_PORT || last?.port || (last ? '80' : '40333'));
+        const url = endpoint(host, port), same = url === saved?.http_url;
+        return { url, open: same ? saved.https_url || url : url, instance: same ? saved.instance : undefined };
+    }
+    if (saved)
+        return { url: saved.http_url, open: saved.https_url || saved.http_url, instance: saved.instance };
+    return { url: 'http://127.0.0.1:40333', open: 'http://127.0.0.1:40333', instance: undefined };
+}
+//# sourceMappingURL=server-state.js.map

package/dist/server-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-state.js","sourceRoot":"","sources":["../src/server-state.ts"],"names":[],"mappings":";;;;;AAuDA,wCAOC;AAGD,wDAKC;AAED,oDAGC;AAED,oCAaC;AA1FD,4CAAoB;AACpB,gDAAwB;AACxB,6BAA2B;AAC3B,mCAAoC;AACpC,wCAAyC;AAUzC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,cAAI,CAAC,IAAI,CAAC,IAAA,mBAAU,GAAE,EAAE,mBAAmB,CAAC,CAAC;AACrE,MAAM,SAAS,GAAG,+CAA+C,CAAC;AAElE,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,MAAM,GAAG,KAAK;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxI,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,IAAI,YAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzF,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,YAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,YAAE,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACjF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtF,IAAI,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC;eAChJ,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/E,IAAI,GAAG,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,SAAS;YACzD,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACxG,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,2EAA2E;YAC3E,2EAA2E;YAC3E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,IAAA,UAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC1K,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC/D,MAAM,IAAI,KAAK,CAAC,0IAA0I,CAAC,CAAC;IAC9J,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACvD,CAAC;AAED;uFACuF;AACvF,SAAgB,cAAc,CAAC,QAAgB,EAAE,IAAuC,EAAE,KAAyC;IACjI,MAAM,KAAK,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC;QAC9G,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9G,MAAM,IAAI,GAAG,cAAI,CAAC,IAAI,CAAC,IAAA,mBAAU,GAAE,EAAE,iBAAiB,IAAA,mBAAU,GAAE,MAAM,CAAC,CAAC;IAC1E,IAAI,CAAC;QAAC,YAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,YAAE,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;YACpH,CAAC;QAAC,YAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7C,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACpF,CAAC;AAED,sFAAsF;AACtF,SAAgB,sBAAsB;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,GAAG;YACxF,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAC/F,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxH,CAAC;AAED,SAAgB,YAAY;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7E,IAAI,KAA8B,CAAC;IACnC,IAAI,CAAC;QAAC,KAAK,GAAG,SAAS,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IAC1E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,QAAQ,IAAI,WAAW,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,KAAK,KAAK,EAAE,QAAQ,CAAC;QACjE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAM,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC3G,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC7G,OAAO,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChG,CAAC"}

package/dist/server-status.d.ts

@@ -0,0 +1,7 @@
+import { serverTarget } from './server-state';
+export type ServerTarget = ReturnType<typeof serverTarget>;
+/** Connectivity only. Never obtains credentials, follows redirects, or calls models. */
+export declare function probeServer(target: ServerTarget): Promise<{
+    instance?: string;
+}>;
+//# sourceMappingURL=server-status.d.ts.map

package/dist/server-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-status.d.ts","sourceRoot":"","sources":["../src/server-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AAE3D,wFAAwF;AACxF,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBtF"}

package/dist/server-status.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.probeServer = probeServer;
+/** Connectivity only. Never obtains credentials, follows redirects, or calls models. */
+async function probeServer(target) {
+    const response = await fetch(target.url + '/api/auth/status', { signal: AbortSignal.timeout(2500), redirect: 'error' });
+    if (!response.ok || !response.body) {
+        await response.body?.cancel();
+        throw new Error('Server did not respond as Draken');
+    }
+    const reader = response.body.getReader(), chunks = [];
+    let size = 0;
+    try {
+        for (;;) {
+            const part = await reader.read();
+            if (part.done)
+                break;
+            size += part.value.byteLength;
+            if (size > 8192)
+                throw new Error('Oversized server status');
+            chunks.push(part.value);
+        }
+        const identity = JSON.parse(Buffer.concat(chunks).toString('utf8'));
+        if (identity.application !== 'draken')
+            throw new Error('Server did not respond as Draken');
+        if (target.instance && identity.instance !== target.instance)
+            throw new Error('Different server instance');
+        return { instance: typeof identity.instance === 'string' ? identity.instance : undefined };
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+    }
+}
+//# sourceMappingURL=server-status.js.map

package/dist/server-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-status.js","sourceRoot":"","sources":["../src/server-status.ts"],"names":[],"mappings":";;AAKA,kCAgBC;AAjBD,wFAAwF;AACjF,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,kBAAkB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxH,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,GAAiB,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACvD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC9B,IAAI,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3G,OAAO,EAAE,QAAQ,EAAE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC7F,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAAC,CAAC;AACtD,CAAC"}

package/dist/server.d.ts

@@ -1,2 +1,6 @@
-export {};
+export declare function createApp(options?: {
+    staticDir?: string;
+    instanceId?: string;
+}): import("express-serve-static-core").Express;
+export declare function startServer(trayOwned?: boolean): void;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAoBA,wBAAgB,SAAS,CAAC,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,+CAkClF;AAED,wBAAgB,WAAW,CAAC,SAAS,UAAQ,GAAG,IAAI,CA8DnD"}

package/dist/server.js

@@ -3,58 +3,160 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApp = createApp;
+exports.startServer = startServer;
 const express_1 = __importDefault(require("express"));
 const path_1 = __importDefault(require("path"));
+const fs_1 = __importDefault(require("fs"));
+const https_1 = __importDefault(require("https"));
+const crypto_1 = require("crypto");
+const server_state_1 = require("./server-state");
 const schema_1 = require("./db/schema");
 const middleware_1 = require("./auth/middleware");
-const manager_1 = require("./docker/manager");
 const auth_1 = __importDefault(require("./routes/auth"));
-const projects_1 = __importDefault(require("./routes/projects"));
-const tasks_1 = __importDefault(require("./routes/tasks"));
-const browse_1 = __importDefault(require("./routes/browse"));
-const git_1 = __importDefault(require("./routes/git"));
-const PORT = 40333;
-// Validate configurations early - will throw if required vars are missing
-try {
-    // Validate Draken web auth (DRAKEN_USERNAME, DRAKEN_PASSWORD, DRAKEN_JWT_SECRET)
+const sync_1 = __importDefault(require("./routes/sync"));
+const memory_1 = __importDefault(require("./routes/memory"));
+const service_1 = require("./memory/service");
+const automatic_1 = require("./memory/automatic");
+const voice_1 = __importDefault(require("./routes/voice"));
+const legacy_history_1 = require("./voice/legacy-history");
+const live_1 = require("./voice/live");
+const store_1 = require("./sync/store");
+const manager_1 = require("./sync/manager");
+const runtime_1 = require("./pi/runtime");
+function createApp(options = {}) {
+    const app = (0, express_1.default)();
+    app.locals.drakenInstance = options.instanceId;
+    const staticDir = options.staticDir || path_1.default.join(__dirname, '../public');
+    app.disable('x-powered-by');
+    app.use(express_1.default.json({ limit: '32kb' }));
+    app.use('/api', (req, res, next) => {
+        // This local application exposes private transcripts. No cross-origin API access.
+        if (req.headers.origin) {
+            try {
+                if (new URL(req.headers.origin).host !== req.headers.host)
+                    return res.status(403).json({ error: 'Cross-origin requests are not allowed' });
+            }
+            catch {
+                return res.status(403).json({ error: 'Invalid origin' });
+            }
+        }
+        if (req.headers['sec-fetch-site'] === 'cross-site')
+            return res.status(403).json({ error: 'Cross-site requests are not allowed' });
+        if ((0, middleware_1.isNoAuthMode)()) {
+            const hostname = (req.headers.host || '').replace(/:\d+$/, '');
+            if (!['localhost', '127.0.0.1', '[::1]'].includes(hostname))
+                return res.status(403).json({ error: 'Local mode requires a loopback host' });
+        }
+        res.setHeader('Cache-Control', 'no-store');
+        next();
+    });
+    app.use('/api/auth', auth_1.default);
+    app.use('/api/voice', middleware_1.authMiddleware, voice_1.default);
+    app.use('/api/memory', middleware_1.authMiddleware, memory_1.default);
+    app.use('/api', middleware_1.authMiddleware, sync_1.default);
+    app.use('/api', (_req, res) => res.status(404).json({ error: 'API route not found' }));
+    app.use(express_1.default.static(staticDir));
+    app.get('*', (_req, res) => res.sendFile(path_1.default.join(staticDir, 'index.html')));
+    app.use((error, _req, res, _next) => {
+        const status = error instanceof store_1.HttpError ? error.status : error.status === 400 || error.status === 413 ? error.status : 500;
+        if (status === 500)
+            console.error('Draken request failed:', error.message);
+        res.status(status).json({ error: status === 500 ? 'Internal error. See the local server log.' : error.message });
+    });
+    return app;
+}
+function startServer(trayOwned = false) {
+    if (trayOwned && (!process.send || !process.connected))
+        throw new Error('The tray launcher disconnected. No server was started.');
     (0, middleware_1.validateAuthConfig)();
-    // Validate Claude auth (OAuth credentials or ANTHROPIC_API_KEY)
-    (0, manager_1.validateClaudeAuth)();
+    (0, live_1.validateVoiceConfig)();
+    const host = process.env.DRAKEN_HOST || '127.0.0.1';
+    const port = Number(process.env.DRAKEN_PORT || 40333);
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new Error('DRAKEN_PORT must be between 1 and 65535');
+    if ((0, middleware_1.isNoAuthMode)() && !(0, middleware_1.isLoopbackHost)(host)) {
+        throw new Error('No-auth mode may only bind to loopback. Configure authentication before exposing Draken.');
+    }
+    const httpsPort = Number(process.env.DRAKEN_HTTPS_PORT || 0);
+    if (!Number.isInteger(httpsPort) || httpsPort < 0 || httpsPort > 65535 || (httpsPort !== 0 && httpsPort === port))
+        throw new Error('DRAKEN_HTTPS_PORT must be a different valid port');
+    const tls = httpsPort ? { cert: fs_1.default.readFileSync(process.env.DRAKEN_TLS_CERT || ''), key: fs_1.default.readFileSync(process.env.DRAKEN_TLS_KEY || '') } : null;
+    // Bind before recovery: a second launch on an occupied port must not mark the
+    // actual server's active runs/calls interrupted or mutate its database.
+    let ready = false, listening = 0, stopping = false;
+    const instanceId = (0, crypto_1.randomUUID)();
+    const app = (0, express_1.default)();
+    app.use((_req, res, next) => ready ? next() : res.status(503).json({ error: 'Draken is starting or stopping.' }));
+    app.use(createApp({ instanceId }));
+    const bound = () => {
+        if (++listening !== (tls ? 2 : 1) || stopping)
+            return;
+        try {
+            (0, schema_1.getDb)();
+            (0, store_1.recoverInterruptedRuns)();
+            (0, legacy_history_1.recoverLegacyCalls)();
+            (0, live_1.recoverLiveCalls)();
+            const httpAddress = server.address(), secureAddress = secureServer?.address();
+            if (!httpAddress || typeof httpAddress === 'string' || typeof secureAddress === 'string')
+                throw new Error('Cannot record the listening address');
+            const target = (0, server_state_1.rememberServer)(instanceId, httpAddress, secureAddress || undefined);
+            ready = true;
+            if (trayOwned)
+                process.send({ type: 'draken-ready', target }, error => { if (error)
+                    shutdown(1); });
+            const display = host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+            console.log(`Draken sync running at http://${display}:${port}`);
+            if (tls)
+                console.log(`Draken voice page: https://${display}:${httpsPort}`);
+            console.log((trayOwned ? 'Managed by Draken tray. Use its menu to stop the server; closing the browser does not.\n' : 'Keep this terminal open. Ctrl+C stops the server; closing the browser does not.\n') + 'First use / missing pi: draken setup → draken login (inside pi, type /login, then /quit).\nAlready have pi? Keep your configured installation; draken doctor checks summary setup.\nVoice: draken voice setup → draken voice login (separate ChatGPT sign-in).\nUse the same server user and environment for these commands. Select history in Settings → Agents & sessions, then Sync with Draken.\nCheck server connectivity with draken status. No startup login, model download, provider call or microphone capture is performed.');
+            (0, automatic_1.startBackgroundIndexing)();
+        }
+        catch (error) {
+            console.error(error instanceof Error ? error.message : 'Draken startup failed');
+            shutdown(1);
+        }
+    };
+    const secureServer = tls ? https_1.default.createServer(tls, app).listen(httpsPort, host, bound) : null;
+    const server = app.listen(port, host, bound);
+    const shutdown = (code = 0) => {
+        if (stopping)
+            return;
+        stopping = true;
+        ready = false;
+        const backgroundStopped = (0, automatic_1.stopBackgroundIndexing)();
+        (0, manager_1.stopManagerProcesses)();
+        (0, service_1.stopHistory)();
+        secureServer?.close();
+        const closed = new Promise(resolve => server.close(() => resolve()));
+        void Promise.all([closed, (0, live_1.stopLiveCalls)(), backgroundStopped, (0, runtime_1.stopPiChecks)()]).finally(() => { (0, schema_1.closeDb)(); process.exit(code); });
+        setTimeout(() => process.exit(code), 6500).unref();
+    };
+    const failed = (error) => {
+        console.error(error.code === 'EADDRINUSE' ? 'Draken could not bind: a configured port is already in use. Run draken status; do not start a second server.' : `Draken could not listen (${error.code || 'unknown error'}). Check the bind address, ports and server log.`);
+        shutdown(1);
+    };
+    server.once('error', failed);
+    secureServer?.once('error', failed);
+    if (trayOwned) {
+        // Only the owning child-process IPC channel can request this. There is no
+        // HTTP shutdown endpoint, PID-file kill, or Windows forced termination.
+        process.on('message', (message) => {
+            if (message?.type === 'draken-shutdown' && message.instance === instanceId)
+                shutdown();
+        });
+        process.once('disconnect', () => shutdown());
+    }
+    process.once('SIGINT', () => shutdown());
+    process.once('SIGTERM', () => shutdown());
 }
-catch (err) {
-    console.error('\n' + err.message + '\n');
-    process.exit(1);
+if (require.main === module) {
+    try {
+        startServer();
+    }
+    catch (error) {
+        console.error(error instanceof Error ? error.message : error);
+        process.exitCode = 1;
+    }
 }
-const app = (0, express_1.default)();
-// Middleware
-app.use(express_1.default.json());
-app.use(express_1.default.static(path_1.default.join(__dirname, '../public')));
-// Auth routes (public - no auth required)
-app.use('/api/auth', auth_1.default);
-// Protected API Routes (auth required if configured)
-app.use('/api/projects', middleware_1.authMiddleware, projects_1.default);
-app.use('/api/tasks', middleware_1.authMiddleware, tasks_1.default);
-app.use('/api/browse', middleware_1.authMiddleware, browse_1.default);
-app.use('/api/git', middleware_1.authMiddleware, git_1.default);
-// Client-side routing - serve index.html for all non-API routes
-app.get('*', (req, res) => {
-    res.sendFile(path_1.default.join(__dirname, '../public/index.html'));
-});
-// Initialize database
-(0, schema_1.getDb)();
-// Graceful shutdown
-process.on('SIGINT', () => {
-    console.log('\nShutting down...');
-    (0, schema_1.closeDb)();
-    process.exit(0);
-});
-process.on('SIGTERM', () => {
-    console.log('\nShutting down...');
-    (0, schema_1.closeDb)();
-    process.exit(0);
-});
-// Start server
-app.listen(PORT, () => {
-    console.log(`Draken dashboard running at http://localhost:${PORT}`);
-});
 //# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;;;;AAAA,sDAA8B;AAC9B,gDAAwB;AACxB,wCAA6C;AAC7C,kDAAuE;AACvE,8CAAsD;AACtD,yDAAuC;AACvC,iEAA+C;AAC/C,2DAAyC;AACzC,6DAA2C;AAC3C,uDAAqC;AAErC,MAAM,IAAI,GAAG,KAAK,CAAC;AAEnB,0EAA0E;AAC1E,IAAI,CAAC;IACH,iFAAiF;IACjF,IAAA,+BAAkB,GAAE,CAAC;IAErB,gEAAgE;IAChE,IAAA,4BAAkB,GAAE,CAAC;AACvB,CAAC;AAAC,OAAO,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,KAAK,CAAC,IAAI,GAAI,GAAa,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;AAEtB,aAAa;AACb,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AACxB,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAE3D,0CAA0C;AAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,cAAU,CAAC,CAAC;AAEjC,qDAAqD;AACrD,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,2BAAc,EAAE,kBAAc,CAAC,CAAC;AACzD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,2BAAc,EAAE,eAAW,CAAC,CAAC;AACnD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,2BAAc,EAAE,gBAAY,CAAC,CAAC;AACrD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,2BAAc,EAAE,aAAS,CAAC,CAAC;AAE/C,gEAAgE;AAChE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IACxB,GAAG,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEH,sBAAsB;AACtB,IAAA,cAAK,GAAE,CAAC;AAER,oBAAoB;AACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;IACxB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,IAAA,gBAAO,GAAE,CAAC;IACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;IACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,IAAA,gBAAO,GAAE,CAAC;IACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,eAAe;AACf,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IACpB,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;;;;AAoBA,8BAkCC;AAED,kCA8DC;AAtHD,sDAAmE;AACnE,gDAAwB;AACxB,4CAAoB;AACpB,kDAA0B;AAC1B,mCAAoC;AACpC,iDAAgD;AAChD,wCAA6C;AAC7C,kDAAqG;AACrG,yDAAuC;AACvC,yDAAuC;AACvC,6DAA2C;AAC3C,8CAA+C;AAC/C,kDAAqF;AACrF,2DAAyC;AACzC,2DAA4D;AAC5D,uCAAoF;AACpF,wCAAiE;AACjE,4CAAsD;AACtD,0CAA4C;AAE5C,SAAgB,SAAS,CAAC,UAAuD,EAAE;IACjF,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAClE,kFAAkF;QAClF,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;YAC7I,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAAC,CAAC;QACvE,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,YAAY;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAClI,IAAI,IAAA,yBAAY,GAAE,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;QAC7I,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;QAC3C,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,cAAU,CAAC,CAAC;IACjC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,2BAAc,EAAE,eAAW,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,2BAAc,EAAE,gBAAY,CAAC,CAAC;IACrD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,2BAAc,EAAE,cAAU,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACvF,GAAG,CAAC,GAAG,CAAC,iBAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9E,GAAG,CAAC,GAAG,CAAC,CAAC,KAAU,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QACxE,MAAM,MAAM,GAAG,KAAK,YAAY,iBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QAC7H,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,WAAW,CAAC,SAAS,GAAG,KAAK;IAC3C,IAAI,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAClI,IAAA,+BAAkB,GAAE,CAAC;IACrB,IAAA,0BAAmB,GAAE,CAAC;IACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,WAAW,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpH,IAAI,IAAA,yBAAY,GAAE,IAAI,CAAC,IAAA,2BAAc,EAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,KAAK,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACvL,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,YAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACpJ,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC;IACnD,MAAM,UAAU,GAAG,IAAA,mBAAU,GAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC;IAClH,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,EAAE,SAAS,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ;YAAE,OAAO;QACtD,IAAI,CAAC;YACH,IAAA,cAAK,GAAE,CAAC;YAAC,IAAA,8BAAsB,GAAE,CAAC;YAAC,IAAA,mCAAkB,GAAE,CAAC;YAAC,IAAA,uBAAgB,GAAE,CAAC;YAC5E,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,EAAE,aAAa,GAAG,YAAY,EAAE,OAAO,EAAE,CAAC;YAC9E,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,aAAa,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACjJ,MAAM,MAAM,GAAG,IAAA,6BAAc,EAAC,UAAU,EAAE,WAAW,EAAE,aAAa,IAAI,SAAS,CAAC,CAAC;YACnF,KAAK,GAAG,IAAI,CAAC;YACb,IAAI,SAAS;gBAAE,OAAO,CAAC,IAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK;oBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0FAA0F,CAAC,CAAC,CAAC,mFAAmF,CAAC,GAAG,wgBAAwgB,CAAC,CAAC;YACvtB,IAAA,mCAAuB,GAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;YAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACnH,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,eAAK,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE;QAC5B,IAAI,QAAQ;YAAE,OAAO;QAAC,QAAQ,GAAG,IAAI,CAAC;QAAC,KAAK,GAAG,KAAK,CAAC;QACrD,MAAM,iBAAiB,GAAG,IAAA,kCAAsB,GAAE,CAAC;QACnD,IAAA,8BAAoB,GAAE,CAAC;QAAC,IAAA,qBAAW,GAAE,CAAC;QACtC,YAAY,EAAE,KAAK,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,IAAA,oBAAa,GAAE,EAAE,iBAAiB,EAAE,IAAA,sBAAY,GAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAA,gBAAO,GAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjI,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAA4B,EAAE,EAAE;QAC9C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,8GAA8G,CAAC,CAAC,CAAC,4BAA4B,KAAK,CAAC,IAAI,IAAI,eAAe,kDAAkD,CAAC,CAAC;QAC1Q,QAAQ,CAAC,CAAC,CAAC,CAAC;IACd,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAY,EAAE,EAAE;YACrC,IAAI,OAAO,EAAE,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU;gBAAE,QAAQ,EAAE,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC;QAAC,WAAW,EAAE,CAAC;IAAC,CAAC;IACtB,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAAC,CAAC;AACxG,CAAC"}

package/dist/sources/adapters.d.ts

@@ -0,0 +1,15 @@
+import type { AgentKind } from '../types';
+import type { PointerRecord } from '../sync/jsonl';
+import { type NormalizedEntry, type NormalizationVersion } from '../sync/normalize';
+import { type SourceIdentity } from './registry';
+export interface SourceHeader extends SourceIdentity {
+    id: string;
+    cwd: string;
+}
+/** Bounded header/identity discovery. Never read credentials, history.jsonl,
+ * request dumps or tool definitions as session headers. */
+export declare function identifySource(agent: AgentKind, records: Iterable<PointerRecord>): SourceHeader;
+/** v1 adapter recipes are immutable: live and frozen pointers use the same
+ * normalizer. One physical record projects to at most one evidence entry. */
+export declare function normalizeSource(source: SourceIdentity, record: PointerRecord, version?: NormalizationVersion): NormalizedEntry | null;
+//# sourceMappingURL=adapters.d.ts.map

package/dist/sources/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/sources/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAqC,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvH,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5D,MAAM,WAAW,YAAa,SAAQ,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEhF;2DAC2D;AAC3D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,YAAY,CA0B/F;AAYD;6EAC6E;AAC7E,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,oBAAwB,GAAG,eAAe,GAAG,IAAI,CAkDxI"}

package/dist/sources/adapters.js

@@ -0,0 +1,159 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identifySource = identifySource;
+exports.normalizeSource = normalizeSource;
+const normalize_1 = require("../sync/normalize");
+const registry_1 = require("./registry");
+const identifier = (value) => typeof value === 'string' && /^[\w-]{1,128}$/.test(value);
+/** Bounded header/identity discovery. Never read credentials, history.jsonl,
+ * request dumps or tool definitions as session headers. */
+function identifySource(agent, records) {
+    let count = 0;
+    for (const { value: r } of records) {
+        if (++count > 256)
+            break;
+        if (!r || typeof r !== 'object')
+            continue;
+        if (agent === 'pi') {
+            if (r.type === 'session' && r.version !== 3)
+                throw new Error('Unsupported pi session version; only v3 JSONL is supported');
+            if (r.type !== 'session' || typeof r.id !== 'string' || typeof r.cwd !== 'string')
+                break;
+            return { agent, external_id: r.id, parser_version: 1, id: r.id, cwd: r.cwd };
+        }
+        if (agent === 'codex') {
+            const p = r.payload;
+            if (r.type !== 'session_meta' || !identifier(p?.id) || typeof p.cwd !== 'string')
+                break;
+            if (p.history_base)
+                throw new Error('Codex external history-base rollouts are not supported; no inherited evidence was guessed');
+            const source = { agent, external_id: p.id, parser_version: 1 };
+            return { ...source, id: (0, registry_1.sessionId)(source), cwd: p.cwd };
+        }
+        if (identifier(r.sessionId) && identifier(r.uuid) && typeof r.cwd === 'string') {
+            // Subagent files often share their parent's sessionId. A recorded agent ID
+            // (or the first sidechain message UUID) separates them without relying on a filename.
+            const suffix = r.isSidechain === true ? (identifier(r.agentId) ? r.agentId : r.uuid) : undefined;
+            const source = { agent, external_id: r.sessionId + (suffix ? '/' + suffix : ''), parser_version: 1 };
+            return { ...source, id: (0, registry_1.sessionId)(source), cwd: r.cwd };
+        }
+    }
+    throw new Error(`No supported ${agent} session header/identity found`);
+}
+function textBlocks(value) {
+    if (typeof value === 'string')
+        return value;
+    if (!Array.isArray(value))
+        return '';
+    return value.filter(part => part && ['text', 'input_text', 'output_text'].includes(part.type) && typeof part.text === 'string').map(part => part.text).join('\n');
+}
+function tool(name, args) {
+    if (typeof args === 'string') {
+        try {
+            args = JSON.parse(args);
+        }
+        catch {
+            args = {};
+        }
+    }
+    return { type: 'toolCall', name: typeof name === 'string' ? name.slice(0, 100) : 'unknown', arguments: args && typeof args === 'object' ? args : {} };
+}
+const contextOnly = (text) => /^(?:# AGENTS\.md instructions for [^\n]*\n\s*)?<(environment_context|INSTRUCTIONS|permissions instructions)>[\s\S]*<\/\1>\s*$/.test(text.trim());
+/** v1 adapter recipes are immutable: live and frozen pointers use the same
+ * normalizer. One physical record projects to at most one evidence entry. */
+function normalizeSource(source, record, version = 2) {
+    if (source.parser_version !== 1)
+        throw new Error('Unknown agent parser version');
+    if (source.agent === 'pi')
+        return (0, normalize_1.normalizeEntry)(record.value, version);
+    const r = record.value;
+    if (!r || typeof r !== 'object')
+        return null;
+    let value;
+    if (source.agent === 'codex') {
+        const p = r.payload;
+        if (r.type === 'event_msg' && p?.type === 'thread_rolled_back')
+            throw new Error('Codex rollback replay is not supported; scan stopped rather than treating abandoned turns as current');
+        const id = `record-${record.record_offset}`, timestamp = typeof r.timestamp === 'string' ? r.timestamp : '';
+        if (r.type === 'response_item' && p && typeof p === 'object') {
+            let role = '', content = '';
+            if (p.type === 'message' && ['user', 'assistant'].includes(p.role) && p.channel !== 'analysis') {
+                role = p.role;
+                const text = textBlocks(p.content);
+                content = role === 'user' && contextOnly(text) ? '' : text;
+            }
+            else if (p.type === 'function_call') {
+                role = 'assistant';
+                content = [tool(p.name, p.arguments)];
+            }
+            else if (p.type === 'custom_tool_call') {
+                role = 'assistant';
+                content = [tool(p.name, {})];
+            }
+            else if (['function_call_output', 'custom_tool_call_output'].includes(p.type)) {
+                role = 'toolResult';
+                content = textBlocks(p.output);
+            }
+            else if (p.type === 'local_shell_call') {
+                role = 'assistant';
+                content = [tool('shell', { command: Array.isArray(p.action?.command) ? p.action.command.filter((part) => typeof part === 'string').join(' ') : '' })];
+            }
+            if (role)
+                value = { id, timestamp, type: 'message', message: { role, content, toolName: 'Codex tool output; success not inferred', stopReason: p.status === 'incomplete' ? 'length' : undefined } };
+        }
+        else if (r.type === 'compacted' && typeof p?.message === 'string')
+            value = { id, timestamp, type: 'compaction', summary: p.message };
+        else if (r.type === 'event_msg' && p?.type === 'turn_aborted')
+            value = { id, timestamp, type: 'custom_message', content: '[Codex turn aborted. Earlier generated text does not establish completed work.]' };
+        // event_msg user_message/agent_message echo response_item messages; never
+        // import both. Reasoning, token counts, request context and system/developer messages are not evidence.
+    }
+    else {
+        if (!identifier(r.uuid))
+            return null;
+        if (r.sessionId !== undefined && r.sessionId !== source.external_id.split('/')[0])
+            throw new Error('Mixed Claude session identities; scan stopped rather than guessing fork attribution');
+        const parentId = typeof r.parentUuid === 'string' ? r.parentUuid : typeof r.logicalParentUuid === 'string' ? r.logicalParentUuid : null;
+        if (r.type === 'system' && r.subtype === 'compact_boundary' && !parentId)
+            throw new Error('Claude compaction boundary has no verified history link');
+        value = { id: r.uuid, parentId, timestamp: typeof r.timestamp === 'string' ? r.timestamp : '', type: String(r.type || 'metadata') };
+        if (['user', 'assistant'].includes(r.type) && r.message) {
+            if (r.isCompactSummary === true) {
+                value.type = 'compaction';
+                value.summary = textBlocks(r.message.content);
+            }
+            else if (r.isMeta !== true) {
+                if (typeof r.message.role === 'string' && r.message.role !== r.type)
+                    throw new Error('Claude role attribution mismatch');
+                const parts = typeof r.message.content === 'string' ? [{ type: 'text', text: r.message.content }] : Array.isArray(r.message.content) ? r.message.content : [];
+                const blocks = [];
+                let results = 0, ordinary = 0;
+                for (const part of parts) {
+                    if (part?.type === 'text' && typeof part.text === 'string') {
+                        blocks.push(part);
+                        ordinary++;
+                    }
+                    else if (part?.type === 'tool_use') {
+                        blocks.push(tool(part.name, part.input));
+                        ordinary++;
+                    }
+                    else if (part?.type === 'tool_result') {
+                        blocks.push({ type: 'text', text: `Tool result (${(0, normalize_1.cleanText)(String(part.tool_use_id || 'unknown'), 150)}; ${part.is_error === true ? 'error' : 'not flagged as error'}):\n${textBlocks(part.content)}` });
+                        results++;
+                    }
+                }
+                value.type = 'message';
+                value.message = { role: results && !ordinary ? 'toolResult' : r.type, content: blocks, toolName: 'Claude tool output', stopReason: ['max_tokens', 'model_context_window_exceeded'].includes(r.message.stop_reason) ? 'length' : undefined };
+            }
+        }
+    }
+    if (!value)
+        return null;
+    const entry = (0, normalize_1.normalizeEntry)(value, version);
+    if (!entry)
+        return null;
+    // Agent domains prevent identical pi/Claude UUIDs from sharing review coverage.
+    entry.event_key = (0, normalize_1.digest)(JSON.stringify([source.agent, 1, source.agent === 'codex' ? record.record_hash : entry.event_key, entry.type, entry.role, entry.text]));
+    return entry;
+}
+//# sourceMappingURL=adapters.js.map

package/dist/sources/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/sources/adapters.ts"],"names":[],"mappings":";;AASA,wCA0BC;AAcD,0CAkDC;AAjGD,iDAAuH;AACvH,yCAA4D;AAG5D,MAAM,UAAU,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAClH;2DAC2D;AAC3D,SAAgB,cAAc,CAAC,KAAgB,EAAE,OAAgC;IAC/E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,EAAE,KAAK,GAAG,GAAG;YAAE,MAAM;QACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAC3H,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBAAE,MAAM;YACzF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;YACpB,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;gBAAE,MAAM;YACxF,IAAI,CAAC,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC;YACjI,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAU,EAAE,CAAC;YACxE,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,IAAA,oBAAS,EAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1D,CAAC;QACD,IAAI,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC/E,2EAA2E;YAC3E,sFAAsF;YACtF,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjG,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,CAAU,EAAE,CAAC;YAC9G,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,EAAE,IAAA,oBAAS,EAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,gCAAgC,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpK,CAAC;AACD,SAAS,IAAI,CAAC,IAAa,EAAE,IAAa;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC;QAAC,CAAC;IAAC,CAAC;IACvF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxJ,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,+HAA+H,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAExL;6EAC6E;AAC7E,SAAgB,eAAe,CAAC,MAAsB,EAAE,MAAqB,EAAE,UAAgC,CAAC;IAC9G,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAA,0BAAc,EAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,KAAU,CAAC;IACf,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,EAAE,IAAI,KAAK,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;QACxL,MAAM,EAAE,GAAG,UAAU,MAAM,CAAC,aAAa,EAAE,EAAE,SAAS,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7D,IAAI,IAAI,GAAG,EAAE,EAAE,OAAO,GAAY,EAAE,CAAC;YACrC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC/F,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAChH,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAAC,IAAI,GAAG,WAAW,CAAC;gBAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAAC,CAAC;iBAChG,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAAC,IAAI,GAAG,WAAW,CAAC;gBAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;iBACxF,IAAI,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9E,IAAI,GAAG,YAAY,CAAC;gBAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtD,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAAC,IAAI,GAAG,WAAW,CAAC;gBAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YACjO,IAAI,IAAI;gBAAE,KAAK,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,yCAAyC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACtM,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,EAAE,OAAO,KAAK,QAAQ;YAAE,KAAK,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;aAClI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,EAAE,IAAI,KAAK,cAAc;YAAE,KAAK,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,iFAAiF,EAAE,CAAC;QAC7M,0EAA0E;QAC1E,wGAAwG;IAC1G,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QAC1L,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC;QACxI,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,kBAAkB,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACrJ,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC;QACpI,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;gBAAC,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;iBACzG,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3B,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACzH,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9J,MAAM,MAAM,GAAU,EAAE,CAAC;gBAAC,IAAI,OAAO,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC;gBACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAAC,QAAQ,EAAE,CAAC;oBAAC,CAAC;yBACzF,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;wBAAC,QAAQ,EAAE,CAAC;oBAAC,CAAC;yBACxF,IAAI,IAAI,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,IAAA,qBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;wBAAC,OAAO,EAAE,CAAC;oBAAC,CAAC;gBAClQ,CAAC;gBACD,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC;gBAAC,KAAK,CAAC,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACtQ,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,KAAK,GAAG,IAAA,0BAAc,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtE,gFAAgF;IAChF,KAAK,CAAC,SAAS,GAAG,IAAA,kBAAM,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjK,OAAO,KAAK,CAAC;AACf,CAAC"}