humanish 0.104.3 → 0.106.0

package/dist/comms-receiving-inbox.js

@@ -1,410 +0,0 @@
-/** Participant-local real email. Raw content stays in memory and the participant's desktop. */
-import { randomUUID } from "node:crypto";
-import { parseFragment } from "parse5";
-import { capturedInlineImages, inlineImageData, MAX_INLINE_IMAGES, MAX_INLINE_IMAGES_BYTES } from "./comms-images.js";
-import { extractLinks, extractOtpCodes } from "./comms-fake-inbox.js";
-export const RECEIVING_INBOX_CSP = "default-src 'none'; script-src 'none'; connect-src 'none'; img-src data:; style-src 'unsafe-inline'; font-src 'none'; object-src 'none'; frame-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'";
-const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
-const MAX_MESSAGE_BYTES = 256 * 1024;
-const ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
-const ROUTE = /^inbox(?:\.json|\/(?:[a-zA-Z0-9][a-zA-Z0-9_-]{0,63})(?:\/plain|\.json)?)?$/;
-const TAGS = new Set("a abbr b blockquote br caption center code col colgroup dd div dl dt em h1 h2 h3 h4 h5 h6 hr i img li ol p pre s small span strong sub sup table tbody td th thead tfoot tr u ul".split(" "));
-const DROP = new Set("script style iframe frame frameset object embed svg math template noscript textarea select button input video audio source track canvas meta base link".split(" "));
-const VOID = new Set(["br", "hr", "col", "img"]);
-const CSS = "body{font:16px/1.55 system-ui,-apple-system,Segoe UI,Roboto,sans-serif;color:#111;background:#fff;margin:0}a{color:#0645ad;text-underline-offset:3px}a:focus-visible{outline:3px solid #225acb;outline-offset:4px}.bar{padding:12px 20px;background:#f4f4f4;border-bottom:1px solid #ccc;font-size:14px}.bar a{display:inline-block;margin-right:20px;min-height:28px}.hdr{padding:16px 20px;border-bottom:3px solid #111;overflow-wrap:anywhere}.hdr h1{font-size:24px;line-height:1.25;margin:0 0 10px}.hdr div{margin:2px 0}.hdr b{display:inline-block;min-width:70px;color:#444}.body{padding:20px;max-width:860px;overflow-wrap:anywhere}img{max-width:100%;height:auto}pre{white-space:pre-wrap;overflow-wrap:anywhere}table{border-collapse:collapse;max-width:100%;width:100%}th,td{text-align:left;padding:12px 16px;border-bottom:1px solid #ddd;overflow-wrap:anywhere}th{border-bottom:2px solid #111}.inbox-list a{display:inline-block;min-height:32px;font-weight:600}.notice,.blocked-image{display:block;padding:12px;border:1px solid #bbb;background:#f7f7f7;color:#444;font-size:14px}.blocked-link{color:#444}.muted{color:#555;font-size:14px}.email-body{isolation:isolate}.email-body table{width:auto}.email-body img{object-fit:contain}.otp{font:28px/1.4 ui-monospace,monospace;letter-spacing:4px;background:#f0f0f0;padding:8px 12px;display:inline-block}.cta{display:inline-block;padding:12px 20px;color:white;background:#111;border-radius:6px;text-decoration:none}@media(max-width:560px){.inbox-list thead{display:none}.inbox-list,.inbox-list tbody,.inbox-list tr,.inbox-list td{display:block}.inbox-list tr{padding:10px 0;border-bottom:1px solid #ddd}.inbox-list td{border:0;padding:2px 0}.body{padding:16px}.hdr,.bar{padding:12px 16px}}";
-function esc(value) {
-    return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
-}
-function page(title, body) {
-    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="no-referrer"><meta http-equiv="Content-Security-Policy" content="${RECEIVING_INBOX_CSP}"><title>${esc(title)}</title><style>${CSS}</style></head><body>${body}</body></html>`;
-}
-function origin(value) {
-    try {
-        const u = new URL(value);
-        return /^(https?:)$/.test(u.protocol) && !u.username && !u.password ? u.origin : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Allowlisted presentation values only. No CSS escapes, functions (except rgb), positioning or URLs. */
-function safeStyle(style) {
-    const declarations = [];
-    for (const item of style.split(";")) {
-        const colon = item.indexOf(":");
-        if (colon < 1)
-            continue;
-        let name = item.slice(0, colon).trim().toLowerCase();
-        const value = item.slice(colon + 1).trim().toLowerCase();
-        if (value.length > 120)
-            continue;
-        const color = /^(?:#[a-f0-9]{3,8}|[a-z]{3,20}|rgba?\([\d.,% ]{1,35}\))$/;
-        const size = /^(?:0|\d{1,3}(?:\.\d{1,2})?(?:px|em|rem|%))(?: (?:0|\d{1,3}(?:\.\d{1,2})?(?:px|em|rem|%))){0,3}$/;
-        // A color-only shorthand is common on email CTAs. Dropping it while retaining white text
-        // makes a working confirmation link invisible. Complex/image backgrounds remain unsupported.
-        if (name === "background" && color.test(value))
-            name = "background-color";
-        if ((["color", "background-color", "border-color"].includes(name) && color.test(value)) ||
-            (["padding", "padding-top", "padding-bottom", "padding-left", "padding-right", "margin", "margin-top", "margin-bottom", "margin-left", "margin-right", "font-size", "border-radius", "border-width", "max-width", "width", "height"].includes(name) && size.test(value)) ||
-            (name === "text-align" && /^(left|right|center|justify)$/.test(value)) ||
-            (name === "display" && /^(inline|inline-block|block)$/.test(value)) ||
-            (name === "font-weight" && /^(normal|bold|[1-9]00)$/.test(value)) ||
-            (name === "font-style" && /^(normal|italic)$/.test(value)) ||
-            (name === "text-decoration" && /^(none|underline|line-through)$/.test(value)) ||
-            (name === "line-height" && /^(?:[12](?:\.\d{1,2})?|normal)$/.test(value)) ||
-            (name === "border-style" && /^(none|solid|dashed|dotted)$/.test(value)) ||
-            (name === "font-family" && /^[a-z ,'-]{1,90}$/.test(value)))
-            declarations.push(`${name}:${value}`);
-    }
-    return declarations.join(";");
-}
-/** Totals describe the whole snapshot (not increments). Register secrets BEFORE publishing files. */
-export function renderReceivingInbox(options) {
-    if (!options.address || options.address.length > 512 || options.messages.length > 100)
-        throw new Error("Receiving inbox input exceeds limits.");
-    const allowed = new Set(options.allowedOrigins.map(origin).filter((o) => !!o));
-    const rewrites = (options.originMap ?? []).map(([from, to]) => [origin(from), origin(to)]);
-    const secrets = new Set([options.address]);
-    const allLinks = new Set(), allCodes = new Set();
-    const ids = new Set();
-    let blockedAssetCount = 0, blockedLinkCount = 0;
-    function link(raw) {
-        if (raw)
-            secrets.add(raw);
-        if (raw.length > 8192 || /[\u0000-\u0020\u007f\\]/.test(raw))
-            return undefined;
-        try {
-            const u = new URL(raw);
-            if (!/^(https?:)$/.test(u.protocol) || u.username || u.password)
-                return undefined;
-            secrets.add(u.href);
-            for (const [key, value] of u.searchParams)
-                if (/token|code|secret|password|auth|invite|verification|key/i.test(key) && value.length >= 4)
-                    secrets.add(value);
-            const mapped = rewrites.find(([from, to]) => from === u.origin && to !== undefined)?.[1];
-            const target = mapped ? new URL(u.pathname + u.search + u.hash, `${mapped}/`) : u;
-            // Never decode paths/queries into a second navigation target or follow redirects here.
-            secrets.add(target.href);
-            if (!allowed.has(target.origin))
-                return undefined;
-            return target.href;
-        }
-        catch {
-            return undefined;
-        }
-    }
-    function content(message) {
-        for (const value of [message.text, message.html ?? ""])
-            if (Buffer.byteLength(value) > MAX_MESSAGE_BYTES)
-                throw new Error("Receiving inbox message exceeds limits.");
-        if (message.from.length > 2048 || (message.subject?.length ?? 0) > 4096)
-            throw new Error("Receiving inbox metadata exceeds limits.");
-        secrets.add(message.from);
-        if (message.subject)
-            secrets.add(message.subject);
-        for (const match of `${message.from}\n${message.subject ?? ""}\n${message.text}\n${message.html ?? ""}`.matchAll(/[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g))
-            secrets.add(match[0]);
-        const images = capturedInlineImages(message.inlineImages);
-        const links = new Set(), blocked = new Set();
-        let assets = 0, nodes = 0, displayedImages = 0, displayedImageBytes = 0;
-        const parsed = parseFragment(message.html ?? "");
-        const visibleText = [];
-        function render(node, depth) {
-            if (++nodes > 20000 || depth > 100)
-                throw new Error("Receiving inbox HTML exceeds limits.");
-            if ("value" in node) {
-                visibleText.push(node.value);
-                for (const match of node.value.matchAll(/https?:\/\/[^\s"'<>]+/gi))
-                    secrets.add(match[0]);
-                return esc(node.value);
-            }
-            if (!("tagName" in node))
-                return "";
-            const tag = node.tagName;
-            const attrs = new Map(node.attrs.map((a) => [a.name, a.value]));
-            // These strings become scrub targets even when the element is dropped.
-            for (const attr of node.attrs)
-                for (const url of extractLinks(attr.value))
-                    secrets.add(url);
-            if (attrs.get("style")?.match(/url\s*\(|@import/i))
-                assets++;
-            for (const name of ["background", "srcset", "poster"])
-                if (attrs.get(name))
-                    assets++;
-            if (node.namespaceURI !== "http://www.w3.org/1999/xhtml" || DROP.has(tag)) {
-                if (["iframe", "frame", "object", "embed", "source", "video", "audio", "link", "style", "svg"].includes(tag))
-                    assets++;
-                return "";
-            }
-            if (tag === "img") {
-                const src = (attrs.get("src") ?? "").trim();
-                let data;
-                if (/^cid:/i.test(src)) {
-                    let cid = "";
-                    try {
-                        cid = decodeURIComponent(src.slice(4)).replace(/^<|>$/g, "");
-                    }
-                    catch { /* unsupported content id */ }
-                    const matches = images.filter((image) => image.contentId === cid);
-                    if (matches.length === 1)
-                        data = inlineImageData(matches[0]);
-                }
-                else {
-                    const match = /^data:(image\/[a-z]+);base64,([A-Za-z0-9+/=]+)$/i.exec(src);
-                    if (match)
-                        data = inlineImageData({ contentId: "inline", contentType: match[1].toLowerCase(), base64: match[2] });
-                }
-                if (data) {
-                    displayedImages++;
-                    displayedImageBytes += Buffer.byteLength(data);
-                    if (displayedImages > MAX_INLINE_IMAGES || displayedImageBytes > Math.ceil(MAX_INLINE_IMAGES_BYTES / 3) * 4 + 1024)
-                        data = undefined;
-                }
-                const alt = attrs.get("alt")?.slice(0, 1024) || "Email image";
-                if (!data) {
-                    assets++;
-                    return `<span class="blocked-image" role="img" aria-label="${esc(alt)}">${esc(alt)} — Image unavailable. Remote images are blocked; embedded images must be supported and within the size limit.</span>`;
-                }
-                // srcset, background and all network-bearing image attributes are deliberately absent.
-                const width = /^\d{1,3}$/.test(attrs.get("width") ?? "") ? ` width="${attrs.get("width")}"` : "";
-                const style = safeStyle(attrs.get("style") ?? "");
-                return `<img src="${data}" alt="${esc(alt)}"${width}${style ? ` style="${esc(style)}"` : ""}>`;
-            }
-            const children = node.childNodes.map((child) => render(child, depth + 1)).join("");
-            if (!TAGS.has(tag))
-                return children; // forms are unwrapped; their controls are dropped
-            if (tag === "a") {
-                const raw = attrs.get("href") ?? "";
-                const href = link(raw.trim());
-                if (!href) {
-                    if (raw)
-                        blocked.add(raw);
-                    return `<span class="blocked-link">${children} <small>(link unavailable: destination is outside this study or unsupported)</small></span>`;
-                }
-                links.add(href);
-                const style = safeStyle(attrs.get("style") ?? "");
-                return `<a href="${esc(href)}" rel="noreferrer noopener" referrerpolicy="no-referrer"${style ? ` style="${esc(style)}"` : ""}>${children || esc(href)}</a>`;
-            }
-            const style = safeStyle(attrs.get("style") ?? "");
-            let safeAttrs = style ? ` style="${esc(style)}"` : "";
-            for (const name of ["colspan", "rowspan"])
-                if ((tag === "td" || tag === "th") && /^[1-9]\d?$/.test(attrs.get(name) ?? ""))
-                    safeAttrs += ` ${name}="${attrs.get(name)}"`;
-            if (tag === "td" || tag === "th") {
-                const background = attrs.get("bgcolor");
-                if (background && /^(#[a-f\d]{3,8}|[a-z]{3,20})$/i.test(background))
-                    safeAttrs += ` bgcolor="${esc(background)}"`;
-            }
-            return `<${tag}${safeAttrs}>${children}${VOID.has(tag) ? "" : `</${tag}>`}`;
-        }
-        const html = parsed.childNodes.map((node) => render(node, 0)).join("");
-        const text = message.text || visibleText.join(" ");
-        // Ports, numeric host labels and token/query fragments are not OTP evidence. Full links and
-        // token query values still enter the scrub registry through link(), independently of codes.
-        const codeSource = `${message.subject ?? ""}\n${text}\n${visibleText.join(" ")}`.replace(/https?:\/\/[^\s<>"']+/gi, " ");
-        const codes = extractOtpCodes(esc(codeSource));
-        for (const code of codes) {
-            secrets.add(code);
-            secrets.add(code.toLowerCase());
-            allCodes.add(code);
-            for (const match of codeSource.matchAll(new RegExp(code, "gi")))
-                secrets.add(match[0]);
-        }
-        for (const raw of extractLinks(message.html ?? ""))
-            secrets.add(raw);
-        let cursor = 0, plainHtml = "", normalizedText = "";
-        // One parsing policy governs plain links, original anchors and JSON's actionable links.
-        const matcher = /https?:\/\/[^\s<>"'\])]+/gi;
-        for (const match of text.matchAll(matcher)) {
-            const raw = match[0].replace(/[.,;!?]+$/, ""), start = match.index;
-            plainHtml += esc(text.slice(cursor, start));
-            normalizedText += text.slice(cursor, start);
-            const href = link(raw);
-            if (href) {
-                links.add(href);
-                plainHtml += `<a href="${esc(href)}" rel="noreferrer noopener" referrerpolicy="no-referrer">${esc(href)}</a>`;
-                normalizedText += href;
-            }
-            else {
-                blocked.add(raw);
-                plainHtml += '<span class="blocked-link">[link unavailable: destination is outside this study or unsupported]</span>';
-                normalizedText += "[link unavailable: destination is outside this study or unsupported]";
-            }
-            cursor = start + raw.length;
-        }
-        plainHtml += esc(text.slice(cursor));
-        normalizedText += text.slice(cursor);
-        for (const href of links)
-            allLinks.add(href);
-        return { html, plainHtml, text: normalizedText, links: [...links], codes, blockedAssetCount: assets, blockedLinkCount: blocked.size };
-    }
-    const files = [];
-    let fileBytes = 0;
-    const add = (path, body, json = false) => {
-        fileBytes += Buffer.byteLength(body);
-        if (fileBytes > MAX_SNAPSHOT_BYTES)
-            throw new Error("Receiving inbox snapshot exceeds limits.");
-        files.push({ path, body, contentType: json ? "application/json; charset=utf-8" : "text/html; charset=utf-8" });
-    };
-    const rendered = options.messages.map((message) => {
-        if (!ID.test(message.id) || message.id === "latest" || ids.has(message.id))
-            throw new Error("Receiving inbox requires unique local message IDs.");
-        ids.add(message.id);
-        const c = content(message);
-        blockedAssetCount += c.blockedAssetCount;
-        blockedLinkCount += c.blockedLinkCount;
-        const head = `<header class="hdr"><h1>${esc(message.subject || "(no subject)")}</h1><div><b>From</b> ${esc(message.from)}</div><div><b>To</b> ${esc(options.address)}</div></header>`;
-        const bar = `<nav class="bar" aria-label="Inbox navigation"><a href="/inbox">← Inbox</a><a href="/inbox/${message.id}">Original email</a><a href="/inbox/${message.id}/plain">Plain view</a></nav>`;
-        const limitations = c.blockedAssetCount || c.blockedLinkCount ? '<p class="notice">Some images or links were blocked by the study’s email safety policy. This may affect how the email appears.</p>' : "";
-        const original = page(message.subject || "Email", bar + head + `<main class="body">${limitations}<div class="email-body">${message.html ? c.html : `<pre>${c.plainHtml}</pre>`}</div></main>`);
-        const plain = page(message.subject || "Email", bar + head + `<main class="body">${limitations}${c.links[0] ? `<p><a class="cta" href="${esc(c.links[0])}" rel="noreferrer noopener" referrerpolicy="no-referrer">Open email link</a></p>` : ""}${c.codes[0] ? `<p>Code: <span class="otp">${esc(c.codes[0])}</span></p>` : ""}<pre>${c.plainHtml}</pre></main>`);
-        const json = { id: message.id, from: message.from, to: options.address, subject: message.subject ?? "", text: c.text, links: c.links, codes: c.codes, blockedAssetCount: c.blockedAssetCount, blockedLinkCount: c.blockedLinkCount };
-        add(`inbox/${message.id}`, original);
-        add(`inbox/${message.id}/plain`, plain);
-        add(`inbox/${message.id}.json`, JSON.stringify(json), true);
-        return { message, original, plain, json };
-    });
-    const rows = [...rendered].reverse().map(({ message }) => `<tr><td><a href="/inbox/${message.id}">${esc(message.subject || "(no subject)")}</a></td><td>${esc(message.from)}</td></tr>`).join("");
-    add("inbox", page("Inbox", `<header class="hdr"><h1>Inbox</h1><div>${esc(options.address)}</div></header><main class="body"><p class="muted">Only messages delivered to your study address appear here. Reload this page to check for new mail.</p>${rows ? `<table class="inbox-list"><thead><tr><th>Subject</th><th>From</th></tr></thead><tbody>${rows}</tbody></table>` : '<p class="notice">No messages yet. Reload after the app sends an email.</p>'}</main>`));
-    add("inbox.json", JSON.stringify({ address: options.address, messages: rendered.map((r) => r.json) }), true);
-    const latest = rendered.at(-1);
-    if (latest) {
-        add("inbox/latest", latest.original);
-        add("inbox/latest/plain", latest.plain);
-        add("inbox/latest.json", JSON.stringify(latest.json), true);
-    }
-    if (Buffer.byteLength(JSON.stringify(files)) > MAX_SNAPSHOT_BYTES)
-        throw new Error("Receiving inbox snapshot exceeds limits.");
-    return { files, blockedAssetCount, blockedLinkCount, secrets: [...secrets].filter(Boolean), linkCount: allLinks.size, codeCount: allCodes.size };
-}
-// JSON route map, not a static directory server. Every request reads one atomic snapshot, so removed
-// messages cannot remain reachable. No ingress, directory listing, aggregate inbox or provider IDs.
-const SERVER = `import http.server, json, os, re, sys, socket
-from pathlib import Path
-root, port, nonce, csp = Path(sys.argv[1]), int(sys.argv[2]), sys.argv[3], sys.argv[4]
-class Handler(http.server.BaseHTTPRequestHandler):
-  def log_message(self, *args): pass
-  def end_headers(self):
-    self.send_header('Content-Security-Policy', csp)
-    self.send_header('X-Content-Type-Options', 'nosniff')
-    self.send_header('Referrer-Policy', 'no-referrer')
-    self.send_header('Cache-Control', 'no-store')
-    super().end_headers()
-  def do_HEAD(self): self.respond(False)
-  def do_GET(self): self.respond(True)
-  def do_POST(self): self.send_error(405)
-  def do_PUT(self): self.send_error(405)
-  def do_DELETE(self): self.send_error(405)
-  def respond(self, send_body):
-    route = self.path
-    if self.headers.get('Host') not in ['127.0.0.1:'+str(port), 'localhost:'+str(port)]:
-      self.send_error(421); return
-    if route == '/health': body, mime = nonce, 'text/plain; charset=utf-8'
-    else:
-      if route == '/': route = '/inbox'
-      try:
-        with (root / 'snapshot.json').open('r') as f: snapshot = json.load(f)
-        item = snapshot.get('routes', {}).get(route)
-        if item is None: self.send_error(404); return
-        body, mime = item['body'], item['contentType']
-      except Exception:
-        self.send_error(503); return
-    data = body.encode('utf-8')
-    self.send_response(200)
-    self.send_header('Content-Type', mime)
-    self.send_header('Content-Length', str(len(data)))
-    self.end_headers()
-    if send_body: self.wfile.write(data)
-class Server(http.server.HTTPServer):
-  def get_request(self):
-    connection, address = super().get_request(); connection.settimeout(2); return connection, address
-server = Server(('127.0.0.1', port), Handler)
-server.timeout = 0.2
-(root / 'pid').write_text(str(os.getpid()))
-try:
-  while not (root / 'stop').exists(): server.handle_request()
-finally: server.server_close()
-`;
-function shq(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
-/** Desktop SDK transport only; never opens a host/public listener or sends management credentials. */
-export async function deployReceivingInbox(desktop, options) {
-    const port = options.port ?? 8026, timeout = options.requestTimeoutMs ?? 15000;
-    if (!ID.test(options.leaseId) || !Number.isInteger(port) || port < 1024 || port > 65535 || !Number.isInteger(timeout) || timeout < 100 || timeout > 30000)
-        throw new Error("Invalid receiving inbox deployment options.");
-    const nonce = randomUUID(), dir = `/tmp/humanish-mail-${options.leaseId}-${nonce}`, url = `http://127.0.0.1:${port}/inbox`;
-    let stopped = false, generation = 0, tail = Promise.resolve();
-    async function bounded(operation) {
-        let timer;
-        try {
-            return await Promise.race([operation, new Promise((_, reject) => { timer = setTimeout(() => reject(new Error("Receiving inbox transport timed out.")), timeout); })]);
-        }
-        catch {
-            throw new Error("Receiving inbox transport failed or timed out.");
-        }
-        finally {
-            if (timer)
-                clearTimeout(timer);
-        }
-    }
-    async function command(cmd) {
-        const result = await bounded(desktop.commands.run(cmd, { requestTimeoutMs: timeout, timeoutMs: timeout }));
-        if (result.exitCode !== 0)
-            throw new Error("Receiving inbox desktop command failed.");
-        return result.stdout ?? "";
-    }
-    const write = async (path, data) => { await bounded(desktop.files.write(path, data, { requestTimeoutMs: timeout })); };
-    const stop = async () => {
-        stopped = true;
-        await tail.catch(() => undefined);
-        // The server owns its process lifetime. A file signal avoids PID-reuse deletion authority.
-        await command(`python3 -c ${shq("import pathlib,time,sys,shutil\np=pathlib.Path(sys.argv[1])\nif not p.exists(): sys.exit(0)\n(p/'stop').touch()\nend=time.monotonic()+4\nwhile time.monotonic()<end:\n try:\n  pid=int((p/'pid').read_text()); cmd=pathlib.Path('/proc/'+str(pid)+'/cmdline').read_bytes()\n except (FileNotFoundError,ProcessLookupError): break\n if str(p/'server.py').encode() not in cmd: break\n time.sleep(.1)\nelse: sys.exit(1)\nshutil.rmtree(p)\n")} ${shq(dir)}`);
-    };
-    try {
-        await command(`mkdir -m 700 ${shq(dir)}`);
-        await write(`${dir}/snapshot.json`, '{"generation":0,"routes":{}}');
-        await write(`${dir}/server.py`, SERVER);
-        await command(`setsid -f python3 ${shq(`${dir}/server.py`)} ${shq(dir)} ${port} ${shq(nonce)} ${shq(RECEIVING_INBOX_CSP)} < /dev/null > /dev/null 2>&1`);
-        const ready = await command(`python3 -c ${shq("import sys,time,urllib.request\nend=time.monotonic()+float(sys.argv[3])\nwhile time.monotonic()<end:\n try:\n  response=urllib.request.urlopen(sys.argv[1],timeout=.5)\n  if response.read(128).decode()==sys.argv[2]: sys.exit(0)\n except Exception: pass\n time.sleep(.1)\nsys.exit(1)\n")} ${shq(`http://127.0.0.1:${port}/health`)} ${shq(nonce)} ${Math.max(0.1, timeout / 1000 - 0.2)}`);
-        void ready;
-    }
-    catch {
-        await stop().catch(() => undefined);
-        throw new Error("Receiving inbox could not start.");
-    }
-    return {
-        url,
-        publish(files) {
-            if (stopped)
-                return Promise.reject(new Error("Receiving inbox is stopped."));
-            const routes = Object.create(null);
-            for (const file of files) {
-                if (!ROUTE.test(file.path) || routes[`/${file.path}`] || !["text/html; charset=utf-8", "application/json; charset=utf-8"].includes(file.contentType) || typeof file.body !== "string")
-                    return Promise.reject(new Error("Invalid receiving inbox snapshot."));
-                routes[`/${file.path}`] = { ...file };
-            }
-            const snapshot = JSON.stringify({ generation: ++generation, routes });
-            if (files.length > 305 || Buffer.byteLength(snapshot) > MAX_SNAPSHOT_BYTES)
-                return Promise.reject(new Error("Receiving inbox snapshot exceeds limits."));
-            const next = tail.then(async () => {
-                if (stopped)
-                    throw new Error("Receiving inbox is stopped.");
-                const temporary = `${dir}/snapshot-${randomUUID()}.json`;
-                try {
-                    await write(temporary, snapshot);
-                    if (stopped)
-                        throw new Error("Receiving inbox is stopped.");
-                    // Monotonic generations also reject an SDK operation that completes after its caller's
-                    // timeout. The desktop-side lock covers read/compare/rename; transport timeouts do not.
-                    await command(`python3 -c ${shq("import fcntl,json,os,pathlib,sys,urllib.request\np=pathlib.Path(sys.argv[1]); pending=pathlib.Path(sys.argv[2])\nwith (p/'publish.lock').open('a') as lock:\n fcntl.flock(lock,fcntl.LOCK_EX)\n if (p/'stop').exists(): sys.exit(1)\n with pending.open() as f: new=json.load(f)\n with (p/'snapshot.json').open() as f: old=json.load(f)\n if new['generation']<=old['generation']: sys.exit(1)\n os.replace(pending,p/'snapshot.json')\nwith urllib.request.urlopen(sys.argv[3],timeout=2) as response:\n if response.read(128).decode()!=sys.argv[4]: sys.exit(1)\n")} ${shq(dir)} ${shq(temporary)} ${shq(`http://127.0.0.1:${port}/health`)} ${shq(nonce)}`);
-                }
-                finally {
-                    await command(`rm -f ${shq(temporary)}`).catch(() => undefined);
-                }
-            });
-            tail = next.catch(() => undefined);
-            return next;
-        },
-        stop
-    };
-}
-//# sourceMappingURL=comms-receiving-inbox.js.map

package/dist/comms-receiving-inbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"comms-receiving-inbox.js","sourceRoot":"","sources":["../src/comms-receiving-inbox.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAgC,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAItE,MAAM,CAAC,MAAM,mBAAmB,GAAG,wNAAwN,CAAC;AAC5P,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,EAAE,GAAG,kCAAkC,CAAC;AAC9C,MAAM,KAAK,GAAG,4EAA4E,CAAC;AAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,kLAAkL,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACpN,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,wJAAwJ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1L,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,MAAM,GAAG,GAAG,4rDAA4rD,CAAC;AAEzsD,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3I,CAAC;AACD,SAAS,IAAI,CAAC,KAAa,EAAE,IAAY;IACvC,OAAO,iOAAiO,mBAAmB,YAAY,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,wBAAwB,IAAI,gBAAgB,CAAC;AACrV,CAAC;AACD,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC3J,CAAC;AAED,yGAAyG;AACzG,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,0DAA0D,CAAC;QACzE,MAAM,IAAI,GAAG,kGAAkG,CAAC;QAChH,yFAAyF;QACzF,6FAA6F;QAC7F,IAAI,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,GAAG,kBAAkB,CAAC;QAC1E,IAAI,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxQ,CAAC,IAAI,KAAK,YAAY,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtE,CAAC,IAAI,KAAK,SAAS,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC,IAAI,KAAK,aAAa,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC,IAAI,KAAK,YAAY,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC,IAAI,KAAK,iBAAiB,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,CAAC,IAAI,KAAK,aAAa,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC,IAAI,KAAK,cAAc,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC,IAAI,KAAK,aAAa,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAYD,qGAAqG;AACrG,MAAM,UAAU,oBAAoB,CAAC,OAKpC;IACC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAU,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,iBAAiB,GAAG,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC;IAEhD,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY;gBAAE,IAAI,0DAA0D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7J,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,uFAAuF;YACvF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,SAAS,OAAO,CAAC,OAAyB;QACxC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACrK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACrI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1M,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7D,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,eAAe,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,SAAS,MAAM,CAAC,IAAuC,EAAE,KAAa;YACpE,IAAI,EAAE,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC5F,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,uEAAuE;YACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC;gBAAE,MAAM,EAAE,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAAE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,EAAE,CAAC;YACrF,IAAI,IAAI,CAAC,YAAY,KAAK,8BAA8B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,EAAE,CAAC;gBACvH,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAwB,CAAC;gBAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,IAAI,GAAG,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC;wBAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;oBAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;oBAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;wBAAE,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC3E,IAAI,KAAK;wBAAE,IAAI,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;gBACtH,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACT,eAAe,EAAE,CAAC;oBAAC,mBAAmB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAClE,IAAI,eAAe,GAAG,iBAAiB,IAAI,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI;wBAAE,IAAI,GAAG,SAAS,CAAC;gBACvI,CAAC;gBACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC;gBAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,sDAAsD,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,sHAAsH,CAAC;gBAAC,CAAC;gBAClO,uFAAuF;gBACvF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,OAAO,aAAa,IAAI,UAAU,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACjG,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,CAAC,kDAAkD;YACvF,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,GAAG;wBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAC,OAAO,8BAA8B,QAAQ,6FAA6F,CAAC;gBAAC,CAAC;gBACrL,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,OAAO,YAAY,GAAG,CAAC,IAAI,CAAC,2DAA2D,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9J,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;gBAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAE,SAAS,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,UAAU,IAAI,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,SAAS,IAAI,aAAa,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YACpH,CAAC;YACD,OAAO,IAAI,GAAG,GAAG,SAAS,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,4FAA4F;QAC5F,4FAA4F;QAC5F,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QACzH,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvE,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,MAAM,GAAG,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,CAAC;QACpD,wFAAwF;QACxF,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAM,CAAC;YACpE,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,4DAA4D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAC,cAAc,IAAI,IAAI,CAAC;YAAC,CAAC;iBAChK,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,SAAS,IAAI,wGAAwG,CAAC;gBAAC,cAAc,IAAI,sEAAsE,CAAC;YAAC,CAAC;YAC3O,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,CAAC;QACD,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACxI,CAAC;IAED,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,IAAI,GAAG,KAAK,EAAQ,EAAE;QAC7D,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,SAAS,GAAG,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACjH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClJ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3B,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC;QAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB,CAAC;QACjF,MAAM,IAAI,GAAG,2BAA2B,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,yBAAyB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACtL,MAAM,GAAG,GAAG,8FAA8F,OAAO,CAAC,EAAE,uCAAuC,OAAO,CAAC,EAAE,8BAA8B,CAAC;QACpM,MAAM,WAAW,GAAG,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oIAAoI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1M,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,sBAAsB,WAAW,2BAA2B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,QAAQ,eAAe,CAAC,CAAC;QAC/L,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,sBAAsB,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC;QACjW,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrO,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAAC,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAAC,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3I,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,2BAA2B,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,0CAA0C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,4JAA4J,IAAI,CAAC,CAAC,CAAC,yFAAyF,IAAI,kBAAkB,CAAC,CAAC,CAAC,6EAA6E,SAAS,CAAC,CAAC,CAAC;IACvc,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IAC3J,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/H,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACnJ,CAAC;AAED,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6Cd,CAAC;AAEF,SAAS,GAAG,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAErF,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA0B,EAC1B,OAAsE;IAEtE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1N,MAAM,KAAK,GAAG,UAAU,EAAE,EAAE,GAAG,GAAG,sBAAsB,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,EAAE,GAAG,GAAG,oBAAoB,IAAI,QAAQ,CAAC;IAC3H,IAAI,OAAO,GAAG,KAAK,EAAE,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9D,KAAK,UAAU,OAAO,CAAI,SAAqB;QAC7C,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACrL,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAAC,CAAC;gBACpE,CAAC;YAAC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,KAAK,UAAU,OAAO,CAAC,GAAW;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtJ,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClC,2FAA2F;QAC3F,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,8aAA8a,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACje,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,gBAAgB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,GAAG,GAAG,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,CAAC,qBAAqB,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;QACzJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,6RAA6R,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/a,KAAK,KAAK,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,GAAG;QACH,OAAO,CAAC,KAAK;YACX,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAyC,CAAC;YACjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,iCAAiC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBAC7P,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,kBAAkB;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACzJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,GAAG,GAAG,aAAa,UAAU,EAAE,OAAO,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACjC,IAAI,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBAC5D,uFAAuF;oBACvF,wFAAwF;oBACxF,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,wiBAAwiB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrqB,CAAC;wBAAS,CAAC;oBAAC,MAAM,OAAO,CAAC,SAAS,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;YAChF,CAAC,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/comms-receiving-runtime.d.ts

@@ -1,25 +0,0 @@
-import type { LabConfig } from "./lab-config.js";
-import type { PreparedRunArtifactPaths } from "./run-paths.js";
-/** Host-only resolution. The returned credential must never cross a desktop or UI boundary. */
-export declare function resolveReceivingConnection(cwd: string, name: string, env: NodeJS.ProcessEnv): Promise<{
-    connection: import("./comms-connections.js").CommsConnection;
-    apiKey: string;
-    adapter: import("./comms-receiving-types.js").ReceivingAdapter;
-}>;
-export declare function prepareReceivingRun(args: {
-    cwd: string;
-    runId: string;
-    config: LabConfig;
-    env: NodeJS.ProcessEnv;
-    participants: string[];
-    runPaths: PreparedRunArtifactPaths;
-    registerSecrets(values: string[]): void;
-}): Promise<import("./comms-receiving.js").CommsReceivingRun | undefined>;
-/** The restriction survives restarts and screenshot redaction; it is not a claim of local processing. */
-export declare function receivingPublication(config: LabConfig, dryRun: boolean): {
-    publication: {
-        restrictions: ["real-communications"];
-    };
-} | {
-    publication?: never;
-};

package/dist/comms-receiving-runtime.js

@@ -1,45 +0,0 @@
-import { registerTransientCommsSecrets } from "./run-narration-secrets.js";
-import { readCommsConnections } from "./comms-connections.js";
-import { discoverProviderKeys } from "./key-resolution.js";
-import { createAgentMailReceiver } from "./comms-agentmail.js";
-import { startCommsReceiving } from "./comms-receiving.js";
-import { renderReceivingInbox } from "./comms-receiving-inbox.js";
-import { writeContainedOutputFile } from "./selected-output-paths.js";
-/** Host-only resolution. The returned credential must never cross a desktop or UI boundary. */
-export async function resolveReceivingConnection(cwd, name, env) {
-    const connection = (await readCommsConnections(cwd)).connections[name];
-    if (!connection)
-        throw new Error("Email connection is missing. Open Connections in the TUI or run humanish comms connections add.");
-    const resolved = { ...env };
-    await discoverProviderKeys({ cwd, env: resolved, announce: () => { } });
-    const apiKey = resolved[connection.apiKeyEnv]?.trim();
-    if (!apiKey)
-        throw new Error("Email connection credential is missing. Add it in Connections, or provide the configured key with --env-file.");
-    return { connection, apiKey, adapter: createAgentMailReceiver({ apiKey }) };
-}
-export async function prepareReceivingRun(args) {
-    const email = args.config.comms?.email;
-    if (email?.kind !== "real")
-        return undefined;
-    const resolved = await resolveReceivingConnection(args.cwd, email.connection, args.env);
-    const registerSecrets = (values) => { registerTransientCommsSecrets(values); args.registerSecrets(values); };
-    registerSecrets([resolved.apiKey]);
-    if ((args.config.subject.env ?? []).some(name => name === resolved.connection.apiKeyEnv || args.env[name]?.includes(resolved.apiKey))
-        || Object.entries(args.config.subject.envValues ?? {}).some(([name, value]) => name === resolved.connection.apiKeyEnv || String(value).includes(resolved.apiKey))) {
-        throw new Error("The inbox management credential cannot be forwarded through subject.env or subject.envValues. Use a separate target-app sending credential.");
-    }
-    return startCommsReceiving({
-        cwd: args.cwd, runId: args.runId, connectionName: email.connection,
-        apiKeyEnv: resolved.connection.apiKeyEnv, adapter: resolved.adapter,
-        participants: args.participants, registerSecrets,
-        render: renderReceivingInbox,
-        writeEvidence: evidence => writeContainedOutputFile(args.runPaths, "comms/receiving.json", `${JSON.stringify(evidence, null, 2)}\n`, "utf8")
-    });
-}
-/** The restriction survives restarts and screenshot redaction; it is not a claim of local processing. */
-export function receivingPublication(config, dryRun) {
-    return !dryRun && config.comms?.email?.kind === "real"
-        ? { publication: { restrictions: ["real-communications"] } }
-        : {};
-}
-//# sourceMappingURL=comms-receiving-runtime.js.map

package/dist/comms-receiving-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"comms-receiving-runtime.js","sourceRoot":"","sources":["../src/comms-receiving-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,IAAY,EAAE,GAAsB;IAChG,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5B,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;IAC9I,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAIzC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;IACvC,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,CAAC,MAAgB,EAAQ,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7H,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;WAChI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACpK,MAAM,IAAI,KAAK,CAAC,6IAA6I,CAAC,CAAC;IACjK,CAAC;IACD,OAAO,mBAAmB,CAAC;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU;QAClE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;QACnE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe;QAChD,MAAM,EAAE,oBAAoB;QAC5B,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC;KAC7I,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAe;IACrE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,MAAM;QACpD,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,qBAAqB,CAA4B,EAAE,EAAE;QACvF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/comms-receiving-types.d.ts

@@ -1,98 +0,0 @@
-/** Internal receiving-only contract. Provider identifiers and content are host/runtime-only. */
-import type { CommsInlineImage } from "./comms-types.js";
-export interface ReceivingContext {
-    signal?: AbortSignal;
-    timeoutMs?: number;
-}
-export interface ReceivingIdentity {
-    provider: "agentmail";
-    accountId: string;
-    scopeType: "organization" | "pod" | "inbox";
-    scopeId: string;
-}
-export interface ReceivingLease {
-    resourceId: string;
-    address: string;
-    clientId: string;
-}
-export interface ReceivedEmail {
-    channel: "email";
-    providerMessageId: string;
-    providerTimestamp?: string;
-    from: string;
-    subject?: string;
-    text: string;
-    html?: string;
-    inlineImages: CommsInlineImage[];
-    limitations: string[];
-}
-export interface ReceivingBatch {
-    messages: ReceivedEmail[];
-    complete: boolean;
-    /** Stable safe codes only, never provider error bodies or identifiers. */
-    limitations: string[];
-}
-export interface ReceivingAdapter {
-    readonly provider: "agentmail";
-    authenticate(context?: ReceivingContext): Promise<ReceivingIdentity>;
-    acquire(clientId: string, context?: ReceivingContext): Promise<ReceivingLease>;
-    read(lease: ReceivingLease, context?: ReceivingContext): Promise<ReceivingBatch>;
-    release(lease: ReceivingLease, context?: ReceivingContext): Promise<{
-        status: "absent" | "deleting";
-    }>;
-}
-/** Content provided to a single participant's desktop; no provider identifiers. */
-export interface ParticipantEmail extends Omit<ReceivedEmail, "providerMessageId"> {
-    id: string;
-}
-export interface ReceivingSurfaceFile {
-    path: string;
-    body: string;
-    contentType: "text/html; charset=utf-8" | "application/json; charset=utf-8";
-}
-export interface RenderedReceivingInbox {
-    files: ReceivingSurfaceFile[];
-    blockedAssetCount: number;
-    blockedLinkCount: number;
-    /** Register before publishing; never persist this array. */
-    secrets: string[];
-    linkCount: number;
-    codeCount: number;
-}
-export interface ReceivingSurface {
-    url: string;
-    publish(files: ReceivingSurfaceFile[]): Promise<void>;
-    stop(): Promise<void>;
-}
-export declare const COMMS_RECEIVING_SCHEMA = "humanish.comms-receiving.v2";
-export interface ReceivingMessageEvidence {
-    id: string;
-    firstObservedAt: string;
-    providerTimestamp?: string;
-    publishedAt?: string;
-}
-export interface ReceivingParticipantEvidence {
-    participantId: string;
-    leaseId: string;
-    acquisition: "pending" | "active" | "failed";
-    cleanup: "pending" | "absent" | "deleting" | "unresolved";
-    observed: number;
-    published: number;
-    linkCount: number;
-    codeCount: number;
-    blockedAssetCount: number;
-    blockedLinkCount: number;
-    messages: ReceivingMessageEvidence[];
-    limitations: string[];
-}
-export interface CommsReceivingEvidence {
-    schema: typeof COMMS_RECEIVING_SCHEMA;
-    channel: "email";
-    provider: "agentmail";
-    publication: "restricted-real-communications";
-    state: "acquiring" | "running" | "finished";
-    participants: ReceivingParticipantEvidence[];
-    limitations: string[];
-    /** Inbox links are constrained; the rest of the browser is not network-confined. */
-    browserConfinement: "mail-surface-only";
-}