humanish 0.105.0 → 0.106.0

package/dist/comms-inbox.d.ts

@@ -1,66 +0,0 @@
-import type { CommsMessage } from "./comms-types.js";
-/** [fromOrigin, toOrigin] pairs: rewrite a link/href whose origin is the app's in-sandbox origin into a
- *  lane-reachable origin, so the persona's browser can actually follow the verify link when it clicks. */
-export type OriginMap = Array<[string, string]>;
-export interface InboxRenderOptions {
-    originMap?: OriginMap;
-    /** Runtime recipient for this view; omission deliberately renders the operator's shared inbox. */
-    recipient?: string;
-    /** Declared addresses also receive empty scopes before the first delivery. */
-    recipients?: string[];
-}
-/** One served file: a route path (no leading slash) + its body + content type. The host writes each to
- *  `<servedDir>/<path>`; the catch serves `<servedDir>/<pathname>` verbatim. */
-export interface InboxSurfaceFile {
-    path: string;
-    contentType: "text/html; charset=utf-8" | "application/json; charset=utf-8";
-    body: string;
-}
-export declare function inboxRecipientScope(address: string): string;
-export declare function recipientInboxUrl(inboxUrl: string, address: string): string;
-/** Rewrite a URL's origin per the map (origins are exact strings the harness minted). Leaves
- *  non-matching URLs — including sibling origins sharing a prefix — untouched. */
-export declare function rewriteOrigin(url: string, originMap?: OriginMap): string;
-/**
- * Build the [internalOrigin → reachableOrigin] rewrite rows for a run. The app-under-test bakes ITS OWN
- * origin into the verify links it emails (usually its loopback serve origin); the persona reaches the
- * app at a possibly-different origin — the same loopback on the CUA route (identity, a no-op), the
- * harness-minted getHost URL on the shared-world route (where the rewrite is REQUIRED). Emits the serve
- * origin plus its loopback aliases at the serve port (127.0.0.1 / localhost / 0.0.0.0) so an app that
- * stamps `localhost` still rewrites, and — because the harness cannot infer an absolute PUBLIC base URL
- * an app was configured with — an operator-declared `linkOrigin` escape hatch, matched first. Origins
- * only (no trailing slash, no path), so replaceOriginBoundary matches on a URL boundary.
- */
-export declare function buildOriginMap(args: {
-    internalServeUrl?: string | undefined;
-    reachableBaseUrl?: string | undefined;
-    linkOrigin?: string | undefined;
-}): OriginMap;
-/** Best-guess primary call-to-action: the first verify/confirm-looking link, else the first link. */
-export declare function pickVerifyUrl(links: string[]): string | undefined;
-/** The surface CSP — the browser-enforced, load-bearing protection against the app-authored email running
- *  script or hijacking navigation on the surface page. `script-src 'none'` blocks inline handlers,
- *  `javascript:` URLs, and any injected <script>; `object-src`/`frame-src 'none'` block plugins/frames;
- *  `base-uri 'none'` blocks <base> reroot. Images/styles stay permissive so the real email still renders.
- *  Set BOTH as a page() meta (covers direct render use) and as a catch response header (covers serving). */
-export declare const INBOX_SURFACE_CSP = "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'; frame-src 'none'; img-src * data:; style-src 'unsafe-inline'; font-src * data:";
-/** The inbox LIST page (semantic table; each row links to its message). */
-export declare function renderInboxList(messages: CommsMessage[], options?: InboxRenderOptions): string;
-/** One message, DEFAULT view: the app's real captured email in a minimal high-contrast shell. */
-export declare function renderInboxMessage(message: CommsMessage, options?: InboxRenderOptions): string;
-/** One message, SYNTHESIZED view: a guaranteed-legible reading pane (big verify button + big OTP). The
- *  reliability fallback when the app's real email is a vision minefield; opt-in, never the default. */
-export declare function renderInboxMessageSynth(message: CommsMessage, options?: InboxRenderOptions): string;
-/** JSON projection of one message (the programmatic/CLI actor surface + the reliability backstop). Raw
- *  runtime values (served in-sandbox only); links/verifyUrl origin-rewritten so a consumer can follow. */
-export declare function inboxMessageJson(message: CommsMessage, options?: InboxRenderOptions): Record<string, unknown>;
-/**
- * Build every served file for the inbox surface from the normalized messages. The host writes each to
- * `<servedDir>/<path>`; the in-sandbox catch serves `<servedDir>/<pathname>`, falling back to
- * `<pathname>/index` (so a URL like `/inbox` maps to the `inbox/index` file while `/inbox/{id}` stays a
- * directory) — standard web-server index semantics that avoid a file-vs-directory path collision. The
- * URLs the persona actually sees stay clean (`/inbox`, `/inbox/{id}`, `/inbox/{id}/synth`). Content type
- * is inferred from the `/api/` prefix. Message ids are `comms-NNNN` (never `index`/`latest`), so leaf
- * filenames never collide with an id.
- */
-export declare function buildInboxSurface(messages: CommsMessage[], options?: InboxRenderOptions): InboxSurfaceFile[];

package/dist/comms-inbox.js

@@ -1,389 +0,0 @@
-// The persona-facing INBOX SURFACE (#297, slice B): a minimal, dependency-free, high-contrast set of
-// pages a computer-use persona opens to read a captured verification email and click its link — the
-// last step of the off-app comms funnel (redirect → capture → drain → evidence → SURFACE).
-//
-// Design (research-backed, 2026-08-04): agent/CUA benchmarks hand agents either NO ui or a DELIBERATELY
-// simplified inbox (MiniWoB email-inbox); nobody hands a vision agent a chrome-heavy webmail client.
-// Anthropic computer-use guidance: high contrast, single column, big hit-targets, minimal state. So the
-// surface is minimal SEMANTIC HTML (native <a>/<table>, black-on-white, large targets) — NOT a component
-// UI (shadcn/Base UI break both the no-build ethos AND vision-agent reliability). We render the app's
-// REAL captured email by default (faithful to the app-under-test — an honest signal if its email is a
-// legibility mess), with a synthesized clean view one path away, plus a JSON twin for programmatic
-// actors. Route shape mirrors Mailpit/Inbucket (list, message, `latest` alias, JSON with pre-extracted
-// links/otp).
-//
-// This module is PURE + typed + tested; it consumes the already-normalized CommsMessage[] the tested
-// drain/route path produces (links + codes already extracted), and emits the route→content files the
-// in-sandbox catch serves statically. Raw content here is runtime-only (rendered in-sandbox, served to
-// the in-sandbox browser); it is never persisted — the persisted evidence stays digest-only.
-import { createHash } from "node:crypto";
-import { capturedInlineImages, inlineImageData } from "./comms-images.js";
-export function inboxRecipientScope(address) {
-    const normalized = address.trim().toLowerCase();
-    if (!normalized)
-        throw new Error("Inbox recipient must not be empty");
-    return createHash("sha256").update(normalized).digest("hex");
-}
-export function recipientInboxUrl(inboxUrl, address) {
-    const url = new URL(inboxUrl);
-    url.pathname = `${url.pathname.replace(/\/$/, "")}/for/${inboxRecipientScope(address)}`;
-    return url.toString();
-}
-function inboxPath(options) {
-    return options.recipient === undefined ? "/inbox" : `/inbox/for/${inboxRecipientScope(options.recipient)}`;
-}
-const VERIFY_HINT = /verify|confirm|activate|validate|magic|token|account|sign[\s-]?up/i;
-/** Replace `from` with `to` everywhere it ends on an ORIGIN BOUNDARY — end-of-string or one of the URL
- *  delimiters `/ ? # " ' <space> > \`. A bare prefix replace would mangle a sibling origin that shares
- *  `from` as a numeric prefix (`:30000` vs `:3000`) or a suffix-domain (`:3000.evil`); the boundary
- *  check prevents that. Works both for a single URL and inside a blob of email HTML. */
-function replaceOriginBoundary(text, from, to) {
-    if (!from)
-        return text;
-    let out = "";
-    let i = 0;
-    for (;;) {
-        const idx = text.indexOf(from, i);
-        if (idx === -1)
-            return out + text.slice(i);
-        const after = text.charAt(idx + from.length); // "" past end-of-string
-        const atBoundary = after === "" || "/?#\"' >\\".includes(after);
-        out += text.slice(i, idx) + (atBoundary ? to : from);
-        i = idx + from.length;
-    }
-}
-/** Rewrite a URL's origin per the map (origins are exact strings the harness minted). Leaves
- *  non-matching URLs — including sibling origins sharing a prefix — untouched. */
-export function rewriteOrigin(url, originMap = []) {
-    let out = url;
-    for (const [from, to] of originMap)
-        out = replaceOriginBoundary(out, from, to);
-    return out;
-}
-function safeOrigin(url) {
-    if (!url)
-        return undefined;
-    try {
-        return new URL(url).origin;
-    }
-    catch {
-        return undefined;
-    }
-}
-function safePort(url) {
-    if (!url)
-        return undefined;
-    try {
-        return new URL(url).port || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Build the [internalOrigin → reachableOrigin] rewrite rows for a run. The app-under-test bakes ITS OWN
- * origin into the verify links it emails (usually its loopback serve origin); the persona reaches the
- * app at a possibly-different origin — the same loopback on the CUA route (identity, a no-op), the
- * harness-minted getHost URL on the shared-world route (where the rewrite is REQUIRED). Emits the serve
- * origin plus its loopback aliases at the serve port (127.0.0.1 / localhost / 0.0.0.0) so an app that
- * stamps `localhost` still rewrites, and — because the harness cannot infer an absolute PUBLIC base URL
- * an app was configured with — an operator-declared `linkOrigin` escape hatch, matched first. Origins
- * only (no trailing slash, no path), so replaceOriginBoundary matches on a URL boundary.
- */
-export function buildOriginMap(args) {
-    const to = safeOrigin(args.reachableBaseUrl);
-    if (to === undefined)
-        return [];
-    const froms = [];
-    const declared = safeOrigin(args.linkOrigin);
-    if (declared !== undefined)
-        froms.push(declared); // operator-declared origin wins (matched first)
-    const serve = safeOrigin(args.internalServeUrl);
-    if (serve !== undefined) {
-        froms.push(serve);
-        const port = safePort(args.internalServeUrl);
-        if (port !== undefined)
-            for (const host of ["127.0.0.1", "localhost", "0.0.0.0"])
-                froms.push(`http://${host}:${port}`);
-    }
-    const seen = new Set();
-    const map = [];
-    for (const from of froms) {
-        if (from !== to && !seen.has(from)) {
-            seen.add(from);
-            map.push([from, to]);
-        }
-    }
-    return map;
-}
-/** Best-guess primary call-to-action: the first verify/confirm-looking link, else the first link. */
-export function pickVerifyUrl(links) {
-    return links.find((link) => VERIFY_HINT.test(link)) ?? links[0];
-}
-function esc(value) {
-    return value
-        .replace(/&/g, "&amp;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;");
-}
-/** Defense-in-depth stripping before rendering the app's real email HTML. The LOAD-BEARING protection is
- *  the page CSP (`script-src 'none'`, set both as a page() meta and as a catch response header), which is
- *  browser-enforced and neuters inline handlers, `javascript:` URLs, and injected <script> regardless of
- *  what this misses. This strip additionally removes elements CSP does not cover (a redirecting
- *  <meta http-equiv=refresh>, a nav-rerooting <base>) and the obvious active tags, so the two layers
- *  together stop the app-authored (untrusted) email from executing script or redirecting the surface. */
-function neutralizeEmailHtml(html, originMap) {
-    let out = html
-        // paired dangerous/framing elements + their content
-        .replace(/<(script|style|iframe|object|embed|svg|math|template)\b[\s\S]*?<\/\1\s*>/gi, "")
-        // stray or void dangerous tags, incl. unclosed openers and redirect/reroot tags
-        .replace(/<\/?(script|style|iframe|object|embed|svg|math|base|meta|link|form)\b[^>]*>/gi, "")
-        // inline event handlers, whether preceded by whitespace OR a "/" attribute separator
-        .replace(/[\s/]on[a-z]+\s*=\s*("[^"]*"|'[^']*'|[^\s>]+)/gi, " ")
-        // javascript:/vbscript: in nav/resource attrs — quoted OR unquoted (data: is left for inline images)
-        .replace(/(href|src|xlink:href|formaction|action)\s*=\s*(?:"(?:javascript|vbscript):[^"]*"|'(?:javascript|vbscript):[^']*'|(?:javascript|vbscript):[^\s>]*)/gi, '$1="#"');
-    // Rewrite the app's origin inside the (now-neutralized) HTML so its own links resolve to a reachable host.
-    for (const [from, to] of originMap)
-        out = replaceOriginBoundary(out, from, to);
-    return out;
-}
-function decodeAttribute(value) {
-    return value.replace(/&(#x[0-9a-f]+|#[0-9]+|amp|quot|apos|lt|gt|colon);?/gi, (match, entity) => {
-        const named = { amp: "&", quot: '"', apos: "'", lt: "<", gt: ">", colon: ":" };
-        if (!entity.startsWith("#"))
-            return named[entity.toLowerCase()] ?? match;
-        const point = entity[1]?.toLowerCase() === "x" ? parseInt(entity.slice(2), 16) : Number(entity.slice(1));
-        return point > 0 && point <= 0x10ffff ? String.fromCodePoint(point) : "�";
-    });
-}
-function renderEmailImages(html, message, originMap) {
-    const images = capturedInlineImages(message.inlineImages);
-    // A source/srcset can otherwise override the validated primary image source.
-    return html.replace(/<source\b(?:[^"'<>]|"[^"]*"|'[^']*')*>/gi, "")
-        .replace(/<img\b(?:[^"'<>]|"[^"]*"|'[^']*')*>/gi, (tag) => {
-        const attributes = new Map();
-        const matcher = /([^\s/=]+)\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s>]+))/g;
-        for (const match of tag.slice(4, -1).matchAll(matcher)) {
-            const name = match[1].toLowerCase();
-            if (!attributes.has(name))
-                attributes.set(name, decodeAttribute(match[2] ?? match[3] ?? match[4] ?? ""));
-        }
-        const source = (attributes.get("src") ?? "").trim();
-        const alt = attributes.get("alt") ?? "Email image";
-        let src;
-        let unavailable = "Image unavailable: unsupported or missing source.";
-        if (/^cid:/i.test(source)) {
-            let cid = source.slice(4);
-            try {
-                cid = decodeURIComponent(cid);
-            }
-            catch {
-                cid = "";
-            }
-            const matches = images.filter((image) => image.contentId === cid);
-            if (matches.length === 1)
-                src = inlineImageData(matches[0]);
-            unavailable = "Image unavailable: this embedded attachment was missing, unsupported, ambiguous, or exceeded the capture limit.";
-        }
-        else if (/^data:/i.test(source)) {
-            const match = /^data:(image\/[a-z]+);base64,([A-Za-z0-9+/=]+)$/i.exec(source);
-            if (match)
-                src = inlineImageData({ contentId: "inline", contentType: match[1].toLowerCase(), base64: match[2] });
-            unavailable = "Image unavailable: unsupported or oversized inline image.";
-        }
-        else if (source && source !== "#") {
-            try {
-                const base = originMap[0]?.[1];
-                const url = new URL(source, source.startsWith("//") && !base ? "https://image-origin.invalid" : base);
-                if ((url.protocol === "http:" || url.protocol === "https:") && !url.username && !url.password)
-                    src = rewriteOrigin(url.href, originMap);
-            }
-            catch {
-                unavailable = "Image unavailable: relative URL without a declared app origin.";
-            }
-        }
-        if (!src)
-            return `<span class="email-image-unavailable" role="img" aria-label="${esc(alt || "Email image")}">${esc(alt ? `${alt} — ${unavailable}` : unavailable)}</span>`;
-        const sizing = ["width", "height"].map((name) => {
-            const value = attributes.get(name);
-            return value && /^\d{1,4}(?:%)?$/.test(value) ? ` ${name}="${value}"` : "";
-        }).join("");
-        const style = attributes.get("style");
-        return `<img src="${esc(src)}" alt="${esc(alt)}" referrerpolicy="no-referrer"${sizing}${style ? ` style="${esc(style)}"` : ""}>`;
-    });
-}
-const PAGE_CSS = "body{font:16px/1.55 system-ui,-apple-system,Segoe UI,Roboto,sans-serif;color:#111;background:#fff;margin:0}" +
-    "a{color:#0645ad}" +
-    ".bar,.hdr{overflow-wrap:anywhere}" +
-    ".bar{padding:10px 20px;background:#f4f4f4;border-bottom:1px solid #ccc;font-size:14px}" +
-    ".hdr{padding:16px 20px;border-bottom:3px solid #111}" +
-    ".hdr div{margin:2px 0}.hdr b{display:inline-block;min-width:72px;color:#444;font-weight:600}" +
-    ".body{padding:20px;max-width:820px;overflow-wrap:anywhere}img{max-width:100%;height:auto}.email-image-unavailable{display:inline-block;padding:8px;border:1px solid #aaa;color:#555;font:13px/1.4 system-ui}" +
-    "table{border-collapse:collapse;width:100%;max-width:900px}" +
-    "th,td{text-align:left;padding:12px 16px;border-bottom:1px solid #ddd;font-size:16px}" +
-    "th{border-bottom:2px solid #111}" +
-    "tr:hover{background:#f7f7f7}" +
-    ".verify{display:inline-block;padding:16px 32px;background:#111;color:#fff;text-decoration:none;font-size:18px;font-weight:600;border-radius:6px}" +
-    ".otp{font:32px/1 ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:8px;background:#f0f0f0;padding:12px 18px;display:inline-block;border-radius:6px}" +
-    ".muted{color:#666;font-size:13px}" +
-    "@media(max-width:560px){.inbox-list thead{display:none}.inbox-list,.inbox-list tbody,.inbox-list tr,.inbox-list td{display:block}" +
-    ".inbox-list tr{padding:12px 0;border-bottom:1px solid #ddd}.inbox-list td{padding:3px 0;border:0}" +
-    ".inbox-list td:first-child a{display:block;min-height:32px;font-weight:600}.inbox-list td[data-label]::before{content:attr(data-label) ': ';font-size:13px;color:#666}}";
-/** The surface CSP — the browser-enforced, load-bearing protection against the app-authored email running
- *  script or hijacking navigation on the surface page. `script-src 'none'` blocks inline handlers,
- *  `javascript:` URLs, and any injected <script>; `object-src`/`frame-src 'none'` block plugins/frames;
- *  `base-uri 'none'` blocks <base> reroot. Images/styles stay permissive so the real email still renders.
- *  Set BOTH as a page() meta (covers direct render use) and as a catch response header (covers serving). */
-export const INBOX_SURFACE_CSP = "default-src 'self'; script-src 'none'; object-src 'none'; base-uri 'none'; frame-src 'none'; img-src * data:; style-src 'unsafe-inline'; font-src * data:";
-function page(title, inner) {
-    return ("<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\">" +
-        "<meta http-equiv=\"Content-Security-Policy\" content=\"" + INBOX_SURFACE_CSP + "\">" +
-        "<meta name=\"referrer\" content=\"no-referrer\">" +
-        "<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">" +
-        "<title>" + esc(title) + "</title><style>" + PAGE_CSS + "</style></head><body>" +
-        inner +
-        "</body></html>");
-}
-function fmtTime(ms) {
-    // Deterministic, dependency-free UTC stamp (avoids Date locale/timezone drift in tests + sandbox).
-    if (!Number.isFinite(ms) || ms <= 0)
-        return "";
-    const d = new Date(ms);
-    const p = (n) => String(n).padStart(2, "0");
-    return `${d.getUTCFullYear()}-${p(d.getUTCMonth() + 1)}-${p(d.getUTCDate())} ${p(d.getUTCHours())}:${p(d.getUTCMinutes())} UTC`;
-}
-function toValues(message) {
-    return message.to.map((address) => address.value);
-}
-/** The inbox LIST page (semantic table; each row links to its message). */
-export function renderInboxList(messages, options = {}) {
-    const base = inboxPath(options);
-    const rows = messages
-        .map((message) => "<tr><td><a href=\"" + base + "/" + esc(message.id) + "\">" + esc(message.subject ?? "(no subject)") + "</a></td>" +
-        "<td data-label=\"From\">" + esc(message.from) + "</td>" +
-        "<td data-label=\"To\">" + esc(toValues(message).join(", ")) + "</td>" +
-        "<td data-label=\"Received\" class=\"muted\">" + esc(fmtTime(message.deliveredAt)) + "</td></tr>")
-        .join("");
-    const body = (options.recipient ? "<div class=\"bar\">Inbox for " + esc(options.recipient) + " — " : "<div class=\"bar\">Shared operator inbox — all captured recipients — ") + messages.length + " message" + (messages.length === 1 ? "" : "s") + "</div>" +
-        "<main class=\"body\"><table class=\"inbox-list\"><thead><tr><th>Subject</th><th>From</th><th>To</th><th>Received</th></tr></thead>" +
-        "<tbody>" + (rows || "<tr><td colspan=\"4\" class=\"muted\">No messages yet.</td></tr>") + "</tbody></table></main>";
-    return page("Inbox", body);
-}
-/** One message, DEFAULT view: the app's real captured email in a minimal high-contrast shell. */
-export function renderInboxMessage(message, options = {}) {
-    const originMap = options.originMap ?? [];
-    const base = inboxPath(options);
-    const realHtml = message.body ? renderEmailImages(neutralizeEmailHtml(message.body, originMap), message, originMap) : "";
-    const fallback = realHtml.trim().length > 0 ? realHtml : "<p class=\"muted\">(this message had no HTML body)</p>";
-    const body = "<div class=\"bar\"><a href=\"" + base + "\">&larr; Inbox</a> &middot; <a href=\"" + base + "/" + esc(message.id) + "/synth\">plain view</a></div>" +
-        "<div class=\"hdr\"><div><b>To</b> " + esc(toValues(message).join(", ")) + "</div>" +
-        "<div><b>From</b> " + esc(message.from) + "</div>" +
-        "<div><b>Subject</b> " + esc(message.subject ?? "(no subject)") + "</div></div>" +
-        "<main class=\"body\">" + fallback + "</main>";
-    return page(message.subject ?? "Message", body);
-}
-/** One message, SYNTHESIZED view: a guaranteed-legible reading pane (big verify button + big OTP). The
- *  reliability fallback when the app's real email is a vision minefield; opt-in, never the default. */
-export function renderInboxMessageSynth(message, options = {}) {
-    const originMap = options.originMap ?? [];
-    const base = inboxPath(options);
-    const verify = pickVerifyUrl(message.links);
-    const verifyRewritten = verify ? rewriteOrigin(verify, originMap) : undefined;
-    const otp = message.codes[0];
-    const parts = [
-        "<div class=\"bar\"><a href=\"" + base + "\">&larr; Inbox</a> &middot; <a href=\"" + base + "/" + esc(message.id) + "\">real email</a></div>",
-        "<div class=\"hdr\"><div><b>From</b> " + esc(message.from) + "</div>" +
-            "<div><b>To</b> " + esc(toValues(message).join(", ")) + "</div>" +
-            "<div><b>Subject</b> " + esc(message.subject ?? "(no subject)") + "</div></div>",
-        "<main class=\"body\" style=\"text-align:center\">"
-    ];
-    if (verifyRewritten) {
-        parts.push("<p style=\"margin:32px 0\"><a class=\"verify\" href=\"" + esc(verifyRewritten) + "\">Verify email</a></p>");
-    }
-    if (otp) {
-        parts.push("<p>Your code:</p><p><span class=\"otp\">" + esc(otp) + "</span></p>");
-    }
-    if (!verifyRewritten && !otp) {
-        parts.push("<p class=\"muted\">No verification link or code was found in this message. Open the <a href=\"" + base + "/" + esc(message.id) + "\">real email</a>.</p>");
-    }
-    parts.push("</main>");
-    return page(message.subject ?? "Message", parts.join(""));
-}
-/** JSON projection of one message (the programmatic/CLI actor surface + the reliability backstop). Raw
- *  runtime values (served in-sandbox only); links/verifyUrl origin-rewritten so a consumer can follow. */
-export function inboxMessageJson(message, options = {}) {
-    const originMap = options.originMap ?? [];
-    const links = message.links.map((link) => rewriteOrigin(link, originMap));
-    const verify = pickVerifyUrl(links);
-    return {
-        id: message.id,
-        from: message.from,
-        to: toValues(message),
-        subject: message.subject ?? null,
-        receivedAt: message.deliveredAt,
-        text: message.body,
-        links,
-        ...(verify === undefined ? {} : { verifyUrl: verify }),
-        ...(message.codes[0] === undefined ? {} : { otp: message.codes[0] })
-    };
-}
-function inboxListJson(messages, options = {}) {
-    const originMap = options.originMap ?? [];
-    return messages.map((message) => {
-        const verify = pickVerifyUrl(message.links.map((link) => rewriteOrigin(link, originMap)));
-        return {
-            id: message.id,
-            from: message.from,
-            to: toValues(message),
-            subject: message.subject ?? null,
-            receivedAt: message.deliveredAt,
-            ...(verify === undefined ? {} : { verifyUrl: verify }),
-            ...(message.codes[0] === undefined ? {} : { otp: message.codes[0] })
-        };
-    });
-}
-/**
- * Build every served file for the inbox surface from the normalized messages. The host writes each to
- * `<servedDir>/<path>`; the in-sandbox catch serves `<servedDir>/<pathname>`, falling back to
- * `<pathname>/index` (so a URL like `/inbox` maps to the `inbox/index` file while `/inbox/{id}` stays a
- * directory) — standard web-server index semantics that avoid a file-vs-directory path collision. The
- * URLs the persona actually sees stay clean (`/inbox`, `/inbox/{id}`, `/inbox/{id}/synth`). Content type
- * is inferred from the `/api/` prefix. Message ids are `comms-NNNN` (never `index`/`latest`), so leaf
- * filenames never collide with an id.
- */
-export function buildInboxSurface(messages, options = {}) {
-    const html = (path, body) => ({ path, contentType: "text/html; charset=utf-8", body });
-    const json = (path, value) => ({
-        path,
-        contentType: "application/json; charset=utf-8",
-        body: JSON.stringify(value, null, 2)
-    });
-    const base = inboxPath(options).slice(1);
-    if (messages.some((message) => !/^comms-[0-9]+$/.test(message.id)))
-        throw new Error("Invalid inbox message identity");
-    if (options.recipient !== undefined)
-        messages = messages.filter((message) => message.to.some((address) => address.value.trim().toLowerCase() === options.recipient.trim().toLowerCase()));
-    const files = [
-        html(base + "/index", renderInboxList(messages, options)),
-        json("api/" + base + "/index", inboxListJson(messages, options))
-    ];
-    const latest = messages[messages.length - 1];
-    for (const message of messages) {
-        files.push(html(base + "/" + message.id + "/index", renderInboxMessage(message, options)));
-        files.push(html(base + "/" + message.id + "/synth", renderInboxMessageSynth(message, options)));
-        files.push(json("api/" + base + "/" + message.id, inboxMessageJson(message, options)));
-    }
-    if (latest) {
-        files.push(html(base + "/latest/index", renderInboxMessage(latest, options)));
-        files.push(html(base + "/latest/synth", renderInboxMessageSynth(latest, options)));
-        files.push(json("api/" + base + "/latest", inboxMessageJson(latest, options)));
-    }
-    if (options.recipient === undefined) {
-        const recipients = new Set([...(options.recipients ?? []), ...messages.flatMap((message) => message.to.map((address) => address.value))].map((address) => address.trim().toLowerCase()).filter(Boolean));
-        for (const recipient of recipients)
-            files.push(...buildInboxSurface(messages, { ...options, recipient }));
-    }
-    return files;
-}
-//# sourceMappingURL=comms-inbox.js.map

package/dist/comms-inbox.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"comms-inbox.js","sourceRoot":"","sources":["../src/comms-inbox.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,oGAAoG;AACpG,2FAA2F;AAC3F,EAAE;AACF,wGAAwG;AACxG,qGAAqG;AACrG,wGAAwG;AACxG,yGAAyG;AACzG,sGAAsG;AACtG,sGAAsG;AACtG,mGAAmG;AACnG,uGAAuG;AACvG,cAAc;AACd,EAAE;AACF,qGAAqG;AACrG,qGAAqG;AACrG,uGAAuG;AACvG,6FAA6F;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAuB1E,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,GAAG,CAAC,QAAQ,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,SAAS,CAAC,OAA2B;IAC5C,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,MAAM,WAAW,GAAG,oEAAoE,CAAC;AAEzF;;;wFAGwF;AACxF,SAAS,qBAAqB,CAAC,IAAY,EAAE,IAAY,EAAE,EAAU;IACnE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB;QACtE,MAAM,UAAU,GAAG,KAAK,KAAK,EAAE,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;AACH,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,YAAuB,EAAE;IAClE,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;QAAE,GAAG,GAAG,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAuB;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,GAAuB;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC5E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAuH;IACpJ,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gDAAgD;IAClG,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,KAAe;IAC3C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;yGAKyG;AACzG,SAAS,mBAAmB,CAAC,IAAY,EAAE,SAAoB;IAC7D,IAAI,GAAG,GAAG,IAAI;QACZ,oDAAoD;SACnD,OAAO,CAAC,4EAA4E,EAAE,EAAE,CAAC;QAC1F,gFAAgF;SAC/E,OAAO,CAAC,+EAA+E,EAAE,EAAE,CAAC;QAC7F,qFAAqF;SACpF,OAAO,CAAC,iDAAiD,EAAE,GAAG,CAAC;QAChE,qGAAqG;SACpG,OAAO,CAAC,qJAAqJ,EAAE,QAAQ,CAAC,CAAC;IAC5K,2GAA2G;IAC3G,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;QAAE,GAAG,GAAG,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,sDAAsD,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QACrG,MAAM,KAAK,GAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACvG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAqB,EAAE,SAAoB;IAClF,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1D,6EAA6E;IAC7E,OAAO,IAAI,CAAC,OAAO,CAAC,0CAA0C,EAAE,EAAE,CAAC;SAChE,OAAO,CAAC,uCAAuC,EAAE,CAAC,GAAG,EAAE,EAAE;QACxD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,MAAM,OAAO,GAAG,qDAAqD,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC;QACnD,IAAI,GAAuB,CAAC;QAC5B,IAAI,WAAW,GAAG,mDAAmD,CAAC;QACtE,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC;gBAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,GAAG,EAAE,CAAC;YAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;YAC7D,WAAW,GAAG,iHAAiH,CAAC;QAClI,CAAC;aAAM,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9E,IAAI,KAAK;gBAAE,GAAG,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;YACnH,WAAW,GAAG,2DAA2D,CAAC;QAC5E,CAAC;aAAM,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtG,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;oBAAE,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YAC1I,CAAC;YAAC,MAAM,CAAC;gBAAC,WAAW,GAAG,gEAAgE,CAAC;YAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,gEAAgE,GAAG,CAAC,GAAG,IAAI,aAAa,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;QAC3K,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,aAAa,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,iCAAiC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACnI,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,QAAQ,GACZ,6GAA6G;IAC7G,kBAAkB;IAClB,mCAAmC;IACnC,wFAAwF;IACxF,sDAAsD;IACtD,8FAA8F;IAC9F,8MAA8M;IAC9M,4DAA4D;IAC5D,sFAAsF;IACtF,kCAAkC;IAClC,8BAA8B;IAC9B,kJAAkJ;IAClJ,8JAA8J;IAC9J,mCAAmC;IACnC,mIAAmI;IACnI,mGAAmG;IACnG,yKAAyK,CAAC;AAE5K;;;;4GAI4G;AAC5G,MAAM,CAAC,MAAM,iBAAiB,GAC5B,2JAA2J,CAAC;AAE9J,SAAS,IAAI,CAAC,KAAa,EAAE,KAAa;IACxC,OAAO,CACL,iEAAiE;QACjE,yDAAyD,GAAG,iBAAiB,GAAG,KAAK;QACrF,kDAAkD;QAClD,yEAAyE;QACzE,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,iBAAiB,GAAG,QAAQ,GAAG,uBAAuB;QAC/E,KAAK;QACL,gBAAgB,CACjB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IACzB,mGAAmG;IACnG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC;AAClI,CAAC;AAED,SAAS,QAAQ,CAAC,OAAqB;IACrC,OAAO,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,QAAwB,EAAE,UAA8B,EAAE;IACxF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ;SAClB,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,oBAAoB,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,WAAW;QAClH,0BAA0B,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO;QACxD,wBAAwB,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO;QACtE,8CAA8C,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,GAAG,YAAY,CACpG;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,uEAAuE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,QAAQ;QAC/O,oIAAoI;QACpI,SAAS,GAAG,CAAC,IAAI,IAAI,kEAAkE,CAAC,GAAG,yBAAyB,CAAC;IACvH,OAAO,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,OAAqB,EAAE,UAA8B,EAAE;IACxF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzH,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,wDAAwD,CAAC;IAClH,MAAM,IAAI,GACR,+BAA+B,GAAG,IAAI,GAAG,yCAAyC,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,+BAA+B;QACnJ,oCAAoC,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ;QACnF,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ;QAClD,sBAAsB,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,cAAc;QAChF,uBAAuB,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;uGACuG;AACvG,MAAM,UAAU,uBAAuB,CAAC,OAAqB,EAAE,UAA8B,EAAE;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAa;QACtB,+BAA+B,GAAG,IAAI,GAAG,yCAAyC,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,yBAAyB;QAC7I,sCAAsC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ;YACnE,iBAAiB,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ;YAChE,sBAAsB,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,GAAG,cAAc;QAClF,mDAAmD;KACpD,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,wDAAwD,GAAG,GAAG,CAAC,eAAe,CAAC,GAAG,yBAAyB,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,CAAC,IAAI,CAAC,0CAA0C,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,gGAAgG,GAAG,IAAI,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,wBAAwB,CAAC,CAAC;IACzK,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;0GAC0G;AAC1G,MAAM,UAAU,gBAAgB,CAAC,OAAqB,EAAE,UAA8B,EAAE;IACtF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;QAChC,UAAU,EAAE,OAAO,CAAC,WAAW;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB,EAAE,UAA8B,EAAE;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAC1C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC;YACrB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YACtD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAwB,EAAE,UAA8B,EAAE;IAC1F,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAY,EAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;IACzH,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAAc,EAAoB,EAAE,CAAC,CAAC;QAChE,IAAI;QACJ,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACtH,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,SAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC3L,MAAM,KAAK,GAAuB;QAChC,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;KACjE,CAAC;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,EAAE,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACzM,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC5G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/comms-lease-store.d.ts

@@ -1,91 +0,0 @@
-import type { ReceivingIdentity, ReceivingLease } from "./comms-receiving-types.js";
-declare const SCHEMA = "humanish.comms-lease-journal.v1";
-type PhysicalIdentity = {
-    path: string;
-    dev: number;
-    ino: number;
-};
-type Owner = {
-    pid: number;
-    host: string;
-    token: string;
-    active: boolean;
-};
-export type CommsLeaseState = "planned" | "intent" | "active" | "closing" | "not-created" | "absent" | "deleting" | "unresolved";
-export interface CommsLeaseRecord {
-    participantId: string;
-    leaseId: string;
-    clientId: string;
-    ownership: "fresh";
-    state: CommsLeaseState;
-    lease?: ReceivingLease;
-}
-export interface CommsLeaseJournal {
-    schema: typeof SCHEMA;
-    project: PhysicalIdentity;
-    runId: string;
-    incarnation: string;
-    connectionName: string;
-    apiKeyEnv: string;
-    identity: ReceivingIdentity;
-    owner: Owner;
-    state: "active" | "closed" | "unresolved";
-    createdAt: string;
-    updatedAt: string;
-    leases: CommsLeaseRecord[];
-}
-export interface CommsRecoveryEntry {
-    id: string;
-    runId: string;
-    connectionName: string;
-    status: "active" | "closed" | "unresolved";
-    participantCount: number;
-    unresolvedCount: number;
-    activeOwner: boolean | null;
-}
-export declare class CommsAuthorityError extends Error {
-    readonly code: "authority_unavailable" | "authority_changed" | "owner_active" | "owner_unknown" | "binding_mismatch";
-    constructor(code: "authority_unavailable" | "authority_changed" | "owner_active" | "owner_unknown" | "binding_mismatch");
-}
-export declare function sameReceivingIdentity(a: ReceivingIdentity, b: ReceivingIdentity): boolean;
-export declare function validReceivingIdentity(value: unknown): value is ReceivingIdentity;
-export declare function validReceivingLease(value: unknown, clientId: string): value is ReceivingLease;
-export declare class CommsLeaseStore {
-    private readonly dir;
-    private readonly name;
-    private readonly lock;
-    private journal;
-    private text;
-    private serial;
-    private released;
-    private constructor();
-    snapshot(): CommsLeaseJournal;
-    assertOwnership(): Promise<void>;
-    private checkOwnership;
-    private update;
-    bind(participantId: string, lease: ReceivingLease): Promise<void>;
-    setState(participantId: string, state: CommsLeaseState): Promise<void>;
-    close(): Promise<void>;
-    releaseLock(): Promise<void>;
-    static create(options: {
-        cwd: string;
-        runId: string;
-        connectionName: string;
-        apiKeyEnv: string;
-        identity: ReceivingIdentity;
-        participants: string[];
-        stateDir?: string;
-    }): Promise<CommsLeaseStore>;
-    static recover(options: {
-        cwd: string;
-        runId: string;
-        connectionName: string;
-        apiKeyEnv: string;
-        stateDir?: string;
-    }): Promise<CommsLeaseStore>;
-}
-export declare function inspectCommsLeaseStore(options: {
-    cwd: string;
-    stateDir?: string;
-}): Promise<CommsRecoveryEntry[]>;
-export {};