npm - humanish - Versions diffs - 0.94.0 → 0.96.0 - Mend

humanish 0.94.0 → 0.96.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (95) hide show

package/README.md +10 -0
package/dist/comms-agentmail.d.ts +25 -0
package/dist/comms-agentmail.js +418 -0
package/dist/comms-agentmail.js.map +1 -0
package/dist/comms-connections.d.ts +52 -0
package/dist/comms-connections.js +123 -0
package/dist/comms-connections.js.map +1 -0
package/dist/comms-lease-store.d.ts +90 -0
package/dist/comms-lease-store.js +489 -0
package/dist/comms-lease-store.js.map +1 -0
package/dist/comms-receiving-evidence.d.ts +46 -0
package/dist/comms-receiving-evidence.js +35 -0
package/dist/comms-receiving-evidence.js.map +1 -0
package/dist/comms-receiving-inbox.d.ts +16 -0
package/dist/comms-receiving-inbox.js +410 -0
package/dist/comms-receiving-inbox.js.map +1 -0
package/dist/comms-receiving-runtime.d.ts +25 -0
package/dist/comms-receiving-runtime.js +45 -0
package/dist/comms-receiving-runtime.js.map +1 -0
package/dist/comms-receiving-types.d.ts +98 -0
package/dist/comms-receiving-types.js +2 -0
package/dist/comms-receiving-types.js.map +1 -0
package/dist/comms-receiving.d.ts +58 -0
package/dist/comms-receiving.js +554 -0
package/dist/comms-receiving.js.map +1 -0
package/dist/comms-setup.d.ts +40 -0
package/dist/comms-setup.js +121 -0
package/dist/comms-setup.js.map +1 -0
package/dist/concurrent-shared-world-lab.js +662 -624
package/dist/concurrent-shared-world-lab.js.map +1 -1
package/dist/cua-actor-lab.d.ts +4 -1
package/dist/cua-actor-lab.js +98 -17
package/dist/cua-actor-lab.js.map +1 -1
package/dist/doctor-lab.d.ts +7 -0
package/dist/doctor-lab.js +26 -7
package/dist/doctor-lab.js.map +1 -1
package/dist/e2b-terminal-lab.js +3 -0
package/dist/e2b-terminal-lab.js.map +1 -1
package/dist/index.d.ts +2 -0
package/dist/index.js +1 -0
package/dist/index.js.map +1 -1
package/dist/key-resolution.d.ts +1 -1
package/dist/key-resolution.js +6 -4
package/dist/key-resolution.js.map +1 -1
package/dist/lab-config.d.ts +20 -3
package/dist/lab-config.js +65 -3
package/dist/lab-config.js.map +1 -1
package/dist/lab-engine.js +8 -3
package/dist/lab-engine.js.map +1 -1
package/dist/lab-summary.d.ts +3 -2
package/dist/lab-summary.js +17 -7
package/dist/lab-summary.js.map +1 -1
package/dist/observer-app.html +1 -1
package/dist/observer-data.js +14 -1
package/dist/observer-data.js.map +1 -1
package/dist/oss-lab.d.ts +1 -1
package/dist/oss-lab.js.map +1 -1
package/dist/oss-meta-lab.d.ts +1 -1
package/dist/oss-meta-lab.js.map +1 -1
package/dist/program.d.ts +4 -0
package/dist/program.js +231 -74
package/dist/program.js.map +1 -1
package/dist/run-narration-secrets.d.ts +5 -0
package/dist/run-narration-secrets.js +68 -0
package/dist/run-narration-secrets.js.map +1 -0
package/dist/run.d.ts +7 -2
package/dist/run.js +25 -3
package/dist/run.js.map +1 -1
package/dist/scripted-browser-lab.js +7 -0
package/dist/scripted-browser-lab.js.map +1 -1
package/dist/secret-prompt.d.ts +2 -0
package/dist/secret-prompt.js +36 -0
package/dist/secret-prompt.js.map +1 -0
package/dist/shared-world-lab.js +4 -0
package/dist/shared-world-lab.js.map +1 -1
package/dist/study-analysis-engine.js +30 -1
package/dist/study-analysis-engine.js.map +1 -1
package/dist/study-analysis-evidence.js +9 -1
package/dist/study-analysis-evidence.js.map +1 -1
package/dist/tui-app.js +135 -135
package/dist/tui-contract.d.ts +26 -1
package/dist/tui-contract.js.map +1 -1
package/dist/tui-launch.d.ts +2 -0
package/dist/tui-launch.js +9 -1
package/dist/tui-launch.js.map +1 -1
package/docs/architecture/comms-inbox.md +4 -0
package/docs/architecture/real-email-receiving.md +135 -0
package/docs/contracts/run-bundle.md +9 -1
package/docs/contracts/schemas.md +50 -5
package/docs/goals/current.md +5 -5
package/docs/ramp/README.md +13 -3
package/docs/release/0.95.0-connections-setup.md +38 -0
package/docs/release/0.96.0-real-email-receiving.md +47 -0
package/package.json +4 -2
package/skills/humanish/SKILL.md +55 -14

package/dist/comms-receiving-inbox.js ADDED Viewed

@@ -0,0 +1,410 @@
+/** Participant-local real email. Raw content stays in memory and the participant's desktop. */
+import { randomUUID } from "node:crypto";
+import { parseFragment } from "parse5";
+import { capturedInlineImages, inlineImageData, MAX_INLINE_IMAGES, MAX_INLINE_IMAGES_BYTES } from "./comms-images.js";
+import { extractLinks, extractOtpCodes } from "./comms-fake-inbox.js";
+export const RECEIVING_INBOX_CSP = "default-src 'none'; script-src 'none'; connect-src 'none'; img-src data:; style-src 'unsafe-inline'; font-src 'none'; object-src 'none'; frame-src 'none'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'";
+const MAX_SNAPSHOT_BYTES = 32 * 1024 * 1024;
+const MAX_MESSAGE_BYTES = 256 * 1024;
+const ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/;
+const ROUTE = /^inbox(?:\.json|\/(?:[a-zA-Z0-9][a-zA-Z0-9_-]{0,63})(?:\/plain|\.json)?)?$/;
+const TAGS = new Set("a abbr b blockquote br caption center code col colgroup dd div dl dt em h1 h2 h3 h4 h5 h6 hr i img li ol p pre s small span strong sub sup table tbody td th thead tfoot tr u ul".split(" "));
+const DROP = new Set("script style iframe frame frameset object embed svg math template noscript textarea select button input video audio source track canvas meta base link".split(" "));
+const VOID = new Set(["br", "hr", "col", "img"]);
+const CSS = "body{font:16px/1.55 system-ui,-apple-system,Segoe UI,Roboto,sans-serif;color:#111;background:#fff;margin:0}a{color:#0645ad;text-underline-offset:3px}a:focus-visible{outline:3px solid #225acb;outline-offset:4px}.bar{padding:12px 20px;background:#f4f4f4;border-bottom:1px solid #ccc;font-size:14px}.bar a{display:inline-block;margin-right:20px;min-height:28px}.hdr{padding:16px 20px;border-bottom:3px solid #111;overflow-wrap:anywhere}.hdr h1{font-size:24px;line-height:1.25;margin:0 0 10px}.hdr div{margin:2px 0}.hdr b{display:inline-block;min-width:70px;color:#444}.body{padding:20px;max-width:860px;overflow-wrap:anywhere}img{max-width:100%;height:auto}pre{white-space:pre-wrap;overflow-wrap:anywhere}table{border-collapse:collapse;max-width:100%;width:100%}th,td{text-align:left;padding:12px 16px;border-bottom:1px solid #ddd;overflow-wrap:anywhere}th{border-bottom:2px solid #111}.inbox-list a{display:inline-block;min-height:32px;font-weight:600}.notice,.blocked-image{display:block;padding:12px;border:1px solid #bbb;background:#f7f7f7;color:#444;font-size:14px}.blocked-link{color:#444}.muted{color:#555;font-size:14px}.email-body{isolation:isolate}.email-body table{width:auto}.email-body img{object-fit:contain}.otp{font:28px/1.4 ui-monospace,monospace;letter-spacing:4px;background:#f0f0f0;padding:8px 12px;display:inline-block}.cta{display:inline-block;padding:12px 20px;color:white;background:#111;border-radius:6px;text-decoration:none}@media(max-width:560px){.inbox-list thead{display:none}.inbox-list,.inbox-list tbody,.inbox-list tr,.inbox-list td{display:block}.inbox-list tr{padding:10px 0;border-bottom:1px solid #ddd}.inbox-list td{border:0;padding:2px 0}.body{padding:16px}.hdr,.bar{padding:12px 16px}}";
+function esc(value) {
+    return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+function page(title, body) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="referrer" content="no-referrer"><meta http-equiv="Content-Security-Policy" content="${RECEIVING_INBOX_CSP}"><title>${esc(title)}</title><style>${CSS}</style></head><body>${body}</body></html>`;
+}
+function origin(value) {
+    try {
+        const u = new URL(value);
+        return /^(https?:)$/.test(u.protocol) && !u.username && !u.password ? u.origin : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Allowlisted presentation values only. No CSS escapes, functions (except rgb), positioning or URLs. */
+function safeStyle(style) {
+    const declarations = [];
+    for (const item of style.split(";")) {
+        const colon = item.indexOf(":");
+        if (colon < 1)
+            continue;
+        let name = item.slice(0, colon).trim().toLowerCase();
+        const value = item.slice(colon + 1).trim().toLowerCase();
+        if (value.length > 120)
+            continue;
+        const color = /^(?:#[a-f0-9]{3,8}|[a-z]{3,20}|rgba?\([\d.,% ]{1,35}\))$/;
+        const size = /^(?:0|\d{1,3}(?:\.\d{1,2})?(?:px|em|rem|%))(?: (?:0|\d{1,3}(?:\.\d{1,2})?(?:px|em|rem|%))){0,3}$/;
+        // A color-only shorthand is common on email CTAs. Dropping it while retaining white text
+        // makes a working confirmation link invisible. Complex/image backgrounds remain unsupported.
+        if (name === "background" && color.test(value))
+            name = "background-color";
+        if ((["color", "background-color", "border-color"].includes(name) && color.test(value)) ||
+            (["padding", "padding-top", "padding-bottom", "padding-left", "padding-right", "margin", "margin-top", "margin-bottom", "margin-left", "margin-right", "font-size", "border-radius", "border-width", "max-width", "width", "height"].includes(name) && size.test(value)) ||
+            (name === "text-align" && /^(left|right|center|justify)$/.test(value)) ||
+            (name === "display" && /^(inline|inline-block|block)$/.test(value)) ||
+            (name === "font-weight" && /^(normal|bold|[1-9]00)$/.test(value)) ||
+            (name === "font-style" && /^(normal|italic)$/.test(value)) ||
+            (name === "text-decoration" && /^(none|underline|line-through)$/.test(value)) ||
+            (name === "line-height" && /^(?:[12](?:\.\d{1,2})?|normal)$/.test(value)) ||
+            (name === "border-style" && /^(none|solid|dashed|dotted)$/.test(value)) ||
+            (name === "font-family" && /^[a-z ,'-]{1,90}$/.test(value)))
+            declarations.push(`${name}:${value}`);
+    }
+    return declarations.join(";");
+}
+/** Totals describe the whole snapshot (not increments). Register secrets BEFORE publishing files. */
+export function renderReceivingInbox(options) {
+    if (!options.address || options.address.length > 512 || options.messages.length > 100)
+        throw new Error("Receiving inbox input exceeds limits.");
+    const allowed = new Set(options.allowedOrigins.map(origin).filter((o) => !!o));
+    const rewrites = (options.originMap ?? []).map(([from, to]) => [origin(from), origin(to)]);
+    const secrets = new Set([options.address]);
+    const allLinks = new Set(), allCodes = new Set();
+    const ids = new Set();
+    let blockedAssetCount = 0, blockedLinkCount = 0;
+    function link(raw) {
+        if (raw)
+            secrets.add(raw);
+        if (raw.length > 8192 || /[\u0000-\u0020\u007f\\]/.test(raw))
+            return undefined;
+        try {
+            const u = new URL(raw);
+            if (!/^(https?:)$/.test(u.protocol) || u.username || u.password)
+                return undefined;
+            secrets.add(u.href);
+            for (const [key, value] of u.searchParams)
+                if (/token|code|secret|password|auth|invite|verification|key/i.test(key) && value.length >= 4)
+                    secrets.add(value);
+            const mapped = rewrites.find(([from, to]) => from === u.origin && to !== undefined)?.[1];
+            const target = mapped ? new URL(u.pathname + u.search + u.hash, `${mapped}/`) : u;
+            // Never decode paths/queries into a second navigation target or follow redirects here.
+            secrets.add(target.href);
+            if (!allowed.has(target.origin))
+                return undefined;
+            return target.href;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    function content(message) {
+        for (const value of [message.text, message.html ?? ""])
+            if (Buffer.byteLength(value) > MAX_MESSAGE_BYTES)
+                throw new Error("Receiving inbox message exceeds limits.");
+        if (message.from.length > 2048 || (message.subject?.length ?? 0) > 4096)
+            throw new Error("Receiving inbox metadata exceeds limits.");
+        secrets.add(message.from);
+        if (message.subject)
+            secrets.add(message.subject);
+        for (const match of `${message.from}\n${message.subject ?? ""}\n${message.text}\n${message.html ?? ""}`.matchAll(/[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g))
+            secrets.add(match[0]);
+        const images = capturedInlineImages(message.inlineImages);
+        const links = new Set(), blocked = new Set();
+        let assets = 0, nodes = 0, displayedImages = 0, displayedImageBytes = 0;
+        const parsed = parseFragment(message.html ?? "");
+        const visibleText = [];
+        function render(node, depth) {
+            if (++nodes > 20000 || depth > 100)
+                throw new Error("Receiving inbox HTML exceeds limits.");
+            if ("value" in node) {
+                visibleText.push(node.value);
+                for (const match of node.value.matchAll(/https?:\/\/[^\s"'<>]+/gi))
+                    secrets.add(match[0]);
+                return esc(node.value);
+            }
+            if (!("tagName" in node))
+                return "";
+            const tag = node.tagName;
+            const attrs = new Map(node.attrs.map((a) => [a.name, a.value]));
+            // These strings become scrub targets even when the element is dropped.
+            for (const attr of node.attrs)
+                for (const url of extractLinks(attr.value))
+                    secrets.add(url);
+            if (attrs.get("style")?.match(/url\s*\(|@import/i))
+                assets++;
+            for (const name of ["background", "srcset", "poster"])
+                if (attrs.get(name))
+                    assets++;
+            if (node.namespaceURI !== "http://www.w3.org/1999/xhtml" || DROP.has(tag)) {
+                if (["iframe", "frame", "object", "embed", "source", "video", "audio", "link", "style", "svg"].includes(tag))
+                    assets++;
+                return "";
+            }
+            if (tag === "img") {
+                const src = (attrs.get("src") ?? "").trim();
+                let data;
+                if (/^cid:/i.test(src)) {
+                    let cid = "";
+                    try {
+                        cid = decodeURIComponent(src.slice(4)).replace(/^<|>$/g, "");
+                    }
+                    catch { /* unsupported content id */ }
+                    const matches = images.filter((image) => image.contentId === cid);
+                    if (matches.length === 1)
+                        data = inlineImageData(matches[0]);
+                }
+                else {
+                    const match = /^data:(image\/[a-z]+);base64,([A-Za-z0-9+/=]+)$/i.exec(src);
+                    if (match)
+                        data = inlineImageData({ contentId: "inline", contentType: match[1].toLowerCase(), base64: match[2] });
+                }
+                if (data) {
+                    displayedImages++;
+                    displayedImageBytes += Buffer.byteLength(data);
+                    if (displayedImages > MAX_INLINE_IMAGES || displayedImageBytes > Math.ceil(MAX_INLINE_IMAGES_BYTES / 3) * 4 + 1024)
+                        data = undefined;
+                }
+                const alt = attrs.get("alt")?.slice(0, 1024) || "Email image";
+                if (!data) {
+                    assets++;
+                    return `<span class="blocked-image" role="img" aria-label="${esc(alt)}">${esc(alt)} — Image unavailable. Remote images are blocked; embedded images must be supported and within the size limit.</span>`;
+                }
+                // srcset, background and all network-bearing image attributes are deliberately absent.
+                const width = /^\d{1,3}$/.test(attrs.get("width") ?? "") ? ` width="${attrs.get("width")}"` : "";
+                const style = safeStyle(attrs.get("style") ?? "");
+                return `<img src="${data}" alt="${esc(alt)}"${width}${style ? ` style="${esc(style)}"` : ""}>`;
+            }
+            const children = node.childNodes.map((child) => render(child, depth + 1)).join("");
+            if (!TAGS.has(tag))
+                return children; // forms are unwrapped; their controls are dropped
+            if (tag === "a") {
+                const raw = attrs.get("href") ?? "";
+                const href = link(raw.trim());
+                if (!href) {
+                    if (raw)
+                        blocked.add(raw);
+                    return `<span class="blocked-link">${children} <small>(link unavailable: destination is outside this study or unsupported)</small></span>`;
+                }
+                links.add(href);
+                const style = safeStyle(attrs.get("style") ?? "");
+                return `<a href="${esc(href)}" rel="noreferrer noopener" referrerpolicy="no-referrer"${style ? ` style="${esc(style)}"` : ""}>${children || esc(href)}</a>`;
+            }
+            const style = safeStyle(attrs.get("style") ?? "");
+            let safeAttrs = style ? ` style="${esc(style)}"` : "";
+            for (const name of ["colspan", "rowspan"])
+                if ((tag === "td" || tag === "th") && /^[1-9]\d?$/.test(attrs.get(name) ?? ""))
+                    safeAttrs += ` ${name}="${attrs.get(name)}"`;
+            if (tag === "td" || tag === "th") {
+                const background = attrs.get("bgcolor");
+                if (background && /^(#[a-f\d]{3,8}|[a-z]{3,20})$/i.test(background))
+                    safeAttrs += ` bgcolor="${esc(background)}"`;
+            }
+            return `<${tag}${safeAttrs}>${children}${VOID.has(tag) ? "" : `</${tag}>`}`;
+        }
+        const html = parsed.childNodes.map((node) => render(node, 0)).join("");
+        const text = message.text || visibleText.join(" ");
+        // Ports, numeric host labels and token/query fragments are not OTP evidence. Full links and
+        // token query values still enter the scrub registry through link(), independently of codes.
+        const codeSource = `${message.subject ?? ""}\n${text}\n${visibleText.join(" ")}`.replace(/https?:\/\/[^\s<>"']+/gi, " ");
+        const codes = extractOtpCodes(esc(codeSource));
+        for (const code of codes) {
+            secrets.add(code);
+            secrets.add(code.toLowerCase());
+            allCodes.add(code);
+            for (const match of codeSource.matchAll(new RegExp(code, "gi")))
+                secrets.add(match[0]);
+        }
+        for (const raw of extractLinks(message.html ?? ""))
+            secrets.add(raw);
+        let cursor = 0, plainHtml = "", normalizedText = "";
+        // One parsing policy governs plain links, original anchors and JSON's actionable links.
+        const matcher = /https?:\/\/[^\s<>"'\])]+/gi;
+        for (const match of text.matchAll(matcher)) {
+            const raw = match[0].replace(/[.,;!?]+$/, ""), start = match.index;
+            plainHtml += esc(text.slice(cursor, start));
+            normalizedText += text.slice(cursor, start);
+            const href = link(raw);
+            if (href) {
+                links.add(href);
+                plainHtml += `<a href="${esc(href)}" rel="noreferrer noopener" referrerpolicy="no-referrer">${esc(href)}</a>`;
+                normalizedText += href;
+            }
+            else {
+                blocked.add(raw);
+                plainHtml += '<span class="blocked-link">[link unavailable: destination is outside this study or unsupported]</span>';
+                normalizedText += "[link unavailable: destination is outside this study or unsupported]";
+            }
+            cursor = start + raw.length;
+        }
+        plainHtml += esc(text.slice(cursor));
+        normalizedText += text.slice(cursor);
+        for (const href of links)
+            allLinks.add(href);
+        return { html, plainHtml, text: normalizedText, links: [...links], codes, blockedAssetCount: assets, blockedLinkCount: blocked.size };
+    }
+    const files = [];
+    let fileBytes = 0;
+    const add = (path, body, json = false) => {
+        fileBytes += Buffer.byteLength(body);
+        if (fileBytes > MAX_SNAPSHOT_BYTES)
+            throw new Error("Receiving inbox snapshot exceeds limits.");
+        files.push({ path, body, contentType: json ? "application/json; charset=utf-8" : "text/html; charset=utf-8" });
+    };
+    const rendered = options.messages.map((message) => {
+        if (!ID.test(message.id) || message.id === "latest" || ids.has(message.id))
+            throw new Error("Receiving inbox requires unique local message IDs.");
+        ids.add(message.id);
+        const c = content(message);
+        blockedAssetCount += c.blockedAssetCount;
+        blockedLinkCount += c.blockedLinkCount;
+        const head = `<header class="hdr"><h1>${esc(message.subject || "(no subject)")}</h1><div><b>From</b> ${esc(message.from)}</div><div><b>To</b> ${esc(options.address)}</div></header>`;
+        const bar = `<nav class="bar" aria-label="Inbox navigation"><a href="/inbox">← Inbox</a><a href="/inbox/${message.id}">Original email</a><a href="/inbox/${message.id}/plain">Plain view</a></nav>`;
+        const limitations = c.blockedAssetCount || c.blockedLinkCount ? '<p class="notice">Some images or links were blocked by the study’s email safety policy. This may affect how the email appears.</p>' : "";
+        const original = page(message.subject || "Email", bar + head + `<main class="body">${limitations}<div class="email-body">${message.html ? c.html : `<pre>${c.plainHtml}</pre>`}</div></main>`);
+        const plain = page(message.subject || "Email", bar + head + `<main class="body">${limitations}${c.links[0] ? `<p><a class="cta" href="${esc(c.links[0])}" rel="noreferrer noopener" referrerpolicy="no-referrer">Open email link</a></p>` : ""}${c.codes[0] ? `<p>Code: <span class="otp">${esc(c.codes[0])}</span></p>` : ""}<pre>${c.plainHtml}</pre></main>`);
+        const json = { id: message.id, from: message.from, to: options.address, subject: message.subject ?? "", text: c.text, links: c.links, codes: c.codes, blockedAssetCount: c.blockedAssetCount, blockedLinkCount: c.blockedLinkCount };
+        add(`inbox/${message.id}`, original);
+        add(`inbox/${message.id}/plain`, plain);
+        add(`inbox/${message.id}.json`, JSON.stringify(json), true);
+        return { message, original, plain, json };
+    });
+    const rows = [...rendered].reverse().map(({ message }) => `<tr><td><a href="/inbox/${message.id}">${esc(message.subject || "(no subject)")}</a></td><td>${esc(message.from)}</td></tr>`).join("");
+    add("inbox", page("Inbox", `<header class="hdr"><h1>Inbox</h1><div>${esc(options.address)}</div></header><main class="body"><p class="muted">Only messages delivered to your study address appear here. Reload this page to check for new mail.</p>${rows ? `<table class="inbox-list"><thead><tr><th>Subject</th><th>From</th></tr></thead><tbody>${rows}</tbody></table>` : '<p class="notice">No messages yet. Reload after the app sends an email.</p>'}</main>`));
+    add("inbox.json", JSON.stringify({ address: options.address, messages: rendered.map((r) => r.json) }), true);
+    const latest = rendered.at(-1);
+    if (latest) {
+        add("inbox/latest", latest.original);
+        add("inbox/latest/plain", latest.plain);
+        add("inbox/latest.json", JSON.stringify(latest.json), true);
+    }
+    if (Buffer.byteLength(JSON.stringify(files)) > MAX_SNAPSHOT_BYTES)
+        throw new Error("Receiving inbox snapshot exceeds limits.");
+    return { files, blockedAssetCount, blockedLinkCount, secrets: [...secrets].filter(Boolean), linkCount: allLinks.size, codeCount: allCodes.size };
+}
+// JSON route map, not a static directory server. Every request reads one atomic snapshot, so removed
+// messages cannot remain reachable. No ingress, directory listing, aggregate inbox or provider IDs.
+const SERVER = `import http.server, json, os, re, sys, socket
+from pathlib import Path
+root, port, nonce, csp = Path(sys.argv[1]), int(sys.argv[2]), sys.argv[3], sys.argv[4]
+class Handler(http.server.BaseHTTPRequestHandler):
+  def log_message(self, *args): pass
+  def end_headers(self):
+    self.send_header('Content-Security-Policy', csp)
+    self.send_header('X-Content-Type-Options', 'nosniff')
+    self.send_header('Referrer-Policy', 'no-referrer')
+    self.send_header('Cache-Control', 'no-store')
+    super().end_headers()
+  def do_HEAD(self): self.respond(False)
+  def do_GET(self): self.respond(True)
+  def do_POST(self): self.send_error(405)
+  def do_PUT(self): self.send_error(405)
+  def do_DELETE(self): self.send_error(405)
+  def respond(self, send_body):
+    route = self.path
+    if self.headers.get('Host') not in ['127.0.0.1:'+str(port), 'localhost:'+str(port)]:
+      self.send_error(421); return
+    if route == '/health': body, mime = nonce, 'text/plain; charset=utf-8'
+    else:
+      if route == '/': route = '/inbox'
+      try:
+        with (root / 'snapshot.json').open('r') as f: snapshot = json.load(f)
+        item = snapshot.get('routes', {}).get(route)
+        if item is None: self.send_error(404); return
+        body, mime = item['body'], item['contentType']
+      except Exception:
+        self.send_error(503); return
+    data = body.encode('utf-8')
+    self.send_response(200)
+    self.send_header('Content-Type', mime)
+    self.send_header('Content-Length', str(len(data)))
+    self.end_headers()
+    if send_body: self.wfile.write(data)
+class Server(http.server.HTTPServer):
+  def get_request(self):
+    connection, address = super().get_request(); connection.settimeout(2); return connection, address
+server = Server(('127.0.0.1', port), Handler)
+server.timeout = 0.2
+(root / 'pid').write_text(str(os.getpid()))
+try:
+  while not (root / 'stop').exists(): server.handle_request()
+finally: server.server_close()
+`;
+function shq(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
+/** Desktop SDK transport only; never opens a host/public listener or sends management credentials. */
+export async function deployReceivingInbox(desktop, options) {
+    const port = options.port ?? 8026, timeout = options.requestTimeoutMs ?? 15000;
+    if (!ID.test(options.leaseId) || !Number.isInteger(port) || port < 1024 || port > 65535 || !Number.isInteger(timeout) || timeout < 100 || timeout > 30000)
+        throw new Error("Invalid receiving inbox deployment options.");
+    const nonce = randomUUID(), dir = `/tmp/humanish-mail-${options.leaseId}-${nonce}`, url = `http://127.0.0.1:${port}/inbox`;
+    let stopped = false, generation = 0, tail = Promise.resolve();
+    async function bounded(operation) {
+        let timer;
+        try {
+            return await Promise.race([operation, new Promise((_, reject) => { timer = setTimeout(() => reject(new Error("Receiving inbox transport timed out.")), timeout); })]);
+        }
+        catch {
+            throw new Error("Receiving inbox transport failed or timed out.");
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+    async function command(cmd) {
+        const result = await bounded(desktop.commands.run(cmd, { requestTimeoutMs: timeout, timeoutMs: timeout }));
+        if (result.exitCode !== 0)
+            throw new Error("Receiving inbox desktop command failed.");
+        return result.stdout ?? "";
+    }
+    const write = async (path, data) => { await bounded(desktop.files.write(path, data, { requestTimeoutMs: timeout })); };
+    const stop = async () => {
+        stopped = true;
+        await tail.catch(() => undefined);
+        // The server owns its process lifetime. A file signal avoids PID-reuse deletion authority.
+        await command(`python3 -c ${shq("import pathlib,time,sys,shutil\np=pathlib.Path(sys.argv[1])\nif not p.exists(): sys.exit(0)\n(p/'stop').touch()\nend=time.monotonic()+4\nwhile time.monotonic()<end:\n try:\n  pid=int((p/'pid').read_text()); cmd=pathlib.Path('/proc/'+str(pid)+'/cmdline').read_bytes()\n except (FileNotFoundError,ProcessLookupError): break\n if str(p/'server.py').encode() not in cmd: break\n time.sleep(.1)\nelse: sys.exit(1)\nshutil.rmtree(p)\n")} ${shq(dir)}`);
+    };
+    try {
+        await command(`mkdir -m 700 ${shq(dir)}`);
+        await write(`${dir}/snapshot.json`, '{"generation":0,"routes":{}}');
+        await write(`${dir}/server.py`, SERVER);
+        await command(`setsid -f python3 ${shq(`${dir}/server.py`)} ${shq(dir)} ${port} ${shq(nonce)} ${shq(RECEIVING_INBOX_CSP)} < /dev/null > /dev/null 2>&1`);
+        const ready = await command(`python3 -c ${shq("import sys,time,urllib.request\nend=time.monotonic()+float(sys.argv[3])\nwhile time.monotonic()<end:\n try:\n  response=urllib.request.urlopen(sys.argv[1],timeout=.5)\n  if response.read(128).decode()==sys.argv[2]: sys.exit(0)\n except Exception: pass\n time.sleep(.1)\nsys.exit(1)\n")} ${shq(`http://127.0.0.1:${port}/health`)} ${shq(nonce)} ${Math.max(0.1, timeout / 1000 - 0.2)}`);
+        void ready;
+    }
+    catch {
+        await stop().catch(() => undefined);
+        throw new Error("Receiving inbox could not start.");
+    }
+    return {
+        url,
+        publish(files) {
+            if (stopped)
+                return Promise.reject(new Error("Receiving inbox is stopped."));
+            const routes = Object.create(null);
+            for (const file of files) {
+                if (!ROUTE.test(file.path) || routes[`/${file.path}`] || !["text/html; charset=utf-8", "application/json; charset=utf-8"].includes(file.contentType) || typeof file.body !== "string")
+                    return Promise.reject(new Error("Invalid receiving inbox snapshot."));
+                routes[`/${file.path}`] = { ...file };
+            }
+            const snapshot = JSON.stringify({ generation: ++generation, routes });
+            if (files.length > 305 || Buffer.byteLength(snapshot) > MAX_SNAPSHOT_BYTES)
+                return Promise.reject(new Error("Receiving inbox snapshot exceeds limits."));
+            const next = tail.then(async () => {
+                if (stopped)
+                    throw new Error("Receiving inbox is stopped.");
+                const temporary = `${dir}/snapshot-${randomUUID()}.json`;
+                try {
+                    await write(temporary, snapshot);
+                    if (stopped)
+                        throw new Error("Receiving inbox is stopped.");
+                    // Monotonic generations also reject an SDK operation that completes after its caller's
+                    // timeout. The desktop-side lock covers read/compare/rename; transport timeouts do not.
+                    await command(`python3 -c ${shq("import fcntl,json,os,pathlib,sys,urllib.request\np=pathlib.Path(sys.argv[1]); pending=pathlib.Path(sys.argv[2])\nwith (p/'publish.lock').open('a') as lock:\n fcntl.flock(lock,fcntl.LOCK_EX)\n if (p/'stop').exists(): sys.exit(1)\n with pending.open() as f: new=json.load(f)\n with (p/'snapshot.json').open() as f: old=json.load(f)\n if new['generation']<=old['generation']: sys.exit(1)\n os.replace(pending,p/'snapshot.json')\nwith urllib.request.urlopen(sys.argv[3],timeout=2) as response:\n if response.read(128).decode()!=sys.argv[4]: sys.exit(1)\n")} ${shq(dir)} ${shq(temporary)} ${shq(`http://127.0.0.1:${port}/health`)} ${shq(nonce)}`);
+                }
+                finally {
+                    await command(`rm -f ${shq(temporary)}`).catch(() => undefined);
+                }
+            });
+            tail = next.catch(() => undefined);
+            return next;
+        },
+        stop
+    };
+}
+//# sourceMappingURL=comms-receiving-inbox.js.map

package/dist/comms-receiving-inbox.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"comms-receiving-inbox.js","sourceRoot":"","sources":["../src/comms-receiving-inbox.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAgC,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAItE,MAAM,CAAC,MAAM,mBAAmB,GAAG,wNAAwN,CAAC;AAC5P,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5C,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,EAAE,GAAG,kCAAkC,CAAC;AAC9C,MAAM,KAAK,GAAG,4EAA4E,CAAC;AAC3F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,kLAAkL,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACpN,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,wJAAwJ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1L,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACjD,MAAM,GAAG,GAAG,4rDAA4rD,CAAC;AAEzsD,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3I,CAAC;AACD,SAAS,IAAI,CAAC,KAAa,EAAE,IAAY;IACvC,OAAO,iOAAiO,mBAAmB,YAAY,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,wBAAwB,IAAI,gBAAgB,CAAC;AACrV,CAAC;AACD,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC3J,CAAC;AAED,yGAAyG;AACzG,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC;YAAE,SAAS;QACxB,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,0DAA0D,CAAC;QACzE,MAAM,IAAI,GAAG,kGAAkG,CAAC;QAChH,yFAAyF;QACzF,6FAA6F;QAC7F,IAAI,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,GAAG,kBAAkB,CAAC;QAC1E,IAAI,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxQ,CAAC,IAAI,KAAK,YAAY,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtE,CAAC,IAAI,KAAK,SAAS,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC,IAAI,KAAK,aAAa,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjE,CAAC,IAAI,KAAK,YAAY,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC,IAAI,KAAK,iBAAiB,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7E,CAAC,IAAI,KAAK,aAAa,IAAI,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzE,CAAC,IAAI,KAAK,cAAc,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC,IAAI,KAAK,aAAa,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC;AAYD,qGAAqG;AACrG,MAAM,UAAU,oBAAoB,CAAC,OAKpC;IACC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChJ,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAU,CAAC,CAAC;IACpG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,iBAAiB,GAAG,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC;IAEhD,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAClF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY;gBAAE,IAAI,0DAA0D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7J,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,uFAAuF;YACvF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,SAAS,OAAO,CAAC,OAAyB;QACxC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACrK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACrI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1M,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7D,IAAI,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,eAAe,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,SAAS,MAAM,CAAC,IAAuC,EAAE,KAAa;YACpE,IAAI,EAAE,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC5F,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;gBACpB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1F,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YACD,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChE,uEAAuE;YACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;gBAAE,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,mBAAmB,CAAC;gBAAE,MAAM,EAAE,CAAC;YAC7D,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;gBAAE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,EAAE,CAAC;YACrF,IAAI,IAAI,CAAC,YAAY,KAAK,8BAA8B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,EAAE,CAAC;gBACvH,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAwB,CAAC;gBAC7B,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,IAAI,GAAG,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC;wBAAC,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;oBAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC;oBAClE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;wBAAE,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChE,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAG,kDAAkD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC3E,IAAI,KAAK;wBAAE,IAAI,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC;gBACtH,CAAC;gBACD,IAAI,IAAI,EAAE,CAAC;oBACT,eAAe,EAAE,CAAC;oBAAC,mBAAmB,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAClE,IAAI,eAAe,GAAG,iBAAiB,IAAI,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI;wBAAE,IAAI,GAAG,SAAS,CAAC;gBACvI,CAAC;gBACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC;gBAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,MAAM,EAAE,CAAC;oBAAC,OAAO,sDAAsD,GAAG,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,sHAAsH,CAAC;gBAAC,CAAC;gBAClO,uFAAuF;gBACvF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,OAAO,aAAa,IAAI,UAAU,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACjG,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC,CAAC,kDAAkD;YACvF,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,GAAG;wBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAAC,OAAO,8BAA8B,QAAQ,6FAA6F,CAAC;gBAAC,CAAC;gBACrL,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClD,OAAO,YAAY,GAAG,CAAC,IAAI,CAAC,2DAA2D,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9J,CAAC;YACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;gBAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAE,SAAS,IAAI,IAAI,IAAI,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YACxK,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjC,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,UAAU,IAAI,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,SAAS,IAAI,aAAa,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YACpH,CAAC;YACD,OAAO,IAAI,GAAG,GAAG,SAAS,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,4FAA4F;QAC5F,4FAA4F;QAC5F,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QACzH,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvE,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrE,IAAI,MAAM,GAAG,CAAC,EAAE,SAAS,GAAG,EAAE,EAAE,cAAc,GAAG,EAAE,CAAC;QACpD,wFAAwF;QACxF,MAAM,OAAO,GAAG,4BAA4B,CAAC;QAC7C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAM,CAAC;YACpE,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACzF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,4DAA4D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAC,cAAc,IAAI,IAAI,CAAC;YAAC,CAAC;iBAChK,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,SAAS,IAAI,wGAAwG,CAAC;gBAAC,cAAc,IAAI,sEAAsE,CAAC;YAAC,CAAC;YAC3O,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;QAC9B,CAAC;QACD,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,cAAc,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACxI,CAAC;IAED,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,IAAI,GAAG,KAAK,EAAQ,EAAE;QAC7D,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,SAAS,GAAG,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACjH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAClJ,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3B,iBAAiB,IAAI,CAAC,CAAC,iBAAiB,CAAC;QAAC,gBAAgB,IAAI,CAAC,CAAC,gBAAgB,CAAC;QACjF,MAAM,IAAI,GAAG,2BAA2B,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,yBAAyB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACtL,MAAM,GAAG,GAAG,8FAA8F,OAAO,CAAC,EAAE,uCAAuC,OAAO,CAAC,EAAE,8BAA8B,CAAC;QACpM,MAAM,WAAW,GAAG,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oIAAoI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1M,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,sBAAsB,WAAW,2BAA2B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,SAAS,QAAQ,eAAe,CAAC,CAAC;QAC/L,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,GAAG,GAAG,IAAI,GAAG,sBAAsB,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kFAAkF,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,SAAS,eAAe,CAAC,CAAC;QACjW,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACrO,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAAC,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAAC,GAAG,CAAC,SAAS,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3I,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,2BAA2B,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,gBAAgB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClM,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,0CAA0C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,4JAA4J,IAAI,CAAC,CAAC,CAAC,yFAAyF,IAAI,kBAAkB,CAAC,CAAC,CAAC,6EAA6E,SAAS,CAAC,CAAC,CAAC;IACvc,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;IAC3J,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC/H,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACnJ,CAAC;AAED,qGAAqG;AACrG,oGAAoG;AACpG,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6Cd,CAAC;AAEF,SAAS,GAAG,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AAErF,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAA0B,EAC1B,OAAsE;IAEtE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,KAAK,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1N,MAAM,KAAK,GAAG,UAAU,EAAE,EAAE,GAAG,GAAG,sBAAsB,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,EAAE,GAAG,GAAG,oBAAoB,IAAI,QAAQ,CAAC;IAC3H,IAAI,OAAO,GAAG,KAAK,EAAE,UAAU,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9D,KAAK,UAAU,OAAO,CAAI,SAAqB;QAC7C,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YAAC,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACrL,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAAC,CAAC;gBACpE,CAAC;YAAC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC7C,CAAC;IACD,KAAK,UAAU,OAAO,CAAC,GAAW;QAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3G,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,IAAY,EAAiB,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtJ,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAClC,2FAA2F;QAC3F,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,8aAA8a,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACje,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,gBAAgB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC,GAAG,GAAG,gBAAgB,EAAE,8BAA8B,CAAC,CAAC;QACpE,MAAM,KAAK,CAAC,GAAG,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,CAAC,qBAAqB,GAAG,CAAC,GAAG,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;QACzJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,6RAA6R,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/a,KAAK,KAAK,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,GAAG;QACH,OAAO,CAAC,KAAK;YACX,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAyC,CAAC;YACjH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,0BAA0B,EAAE,iCAAiC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBAC7P,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACtE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,kBAAkB;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;YACzJ,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,GAAG,GAAG,aAAa,UAAU,EAAE,OAAO,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;oBACjC,IAAI,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;oBAC5D,uFAAuF;oBACvF,wFAAwF;oBACxF,MAAM,OAAO,CAAC,cAAc,GAAG,CAAC,wiBAAwiB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,oBAAoB,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrqB,CAAC;wBAAS,CAAC;oBAAC,MAAM,OAAO,CAAC,SAAS,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;YAChF,CAAC,CAAC,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/comms-receiving-runtime.d.ts ADDED Viewed

@@ -0,0 +1,25 @@
+import type { LabConfig } from "./lab-config.js";
+import type { PreparedRunArtifactPaths } from "./run-paths.js";
+/** Host-only resolution. The returned credential must never cross a desktop or UI boundary. */
+export declare function resolveReceivingConnection(cwd: string, name: string, env: NodeJS.ProcessEnv): Promise<{
+    connection: import("./comms-connections.js").CommsConnection;
+    apiKey: string;
+    adapter: import("./comms-receiving-types.js").ReceivingAdapter;
+}>;
+export declare function prepareReceivingRun(args: {
+    cwd: string;
+    runId: string;
+    config: LabConfig;
+    env: NodeJS.ProcessEnv;
+    participants: string[];
+    runPaths: PreparedRunArtifactPaths;
+    registerSecrets(values: string[]): void;
+}): Promise<import("./comms-receiving.js").CommsReceivingRun | undefined>;
+/** The restriction survives restarts and screenshot redaction; it is not a claim of local processing. */
+export declare function receivingPublication(config: LabConfig, dryRun: boolean): {
+    publication: {
+        restrictions: ["real-communications"];
+    };
+} | {
+    publication?: never;
+};

package/dist/comms-receiving-runtime.js ADDED Viewed

@@ -0,0 +1,45 @@
+import { registerTransientCommsSecrets } from "./run-narration-secrets.js";
+import { readCommsConnections } from "./comms-connections.js";
+import { discoverProviderKeys } from "./key-resolution.js";
+import { createAgentMailReceiver } from "./comms-agentmail.js";
+import { startCommsReceiving } from "./comms-receiving.js";
+import { renderReceivingInbox } from "./comms-receiving-inbox.js";
+import { writeContainedOutputFile } from "./selected-output-paths.js";
+/** Host-only resolution. The returned credential must never cross a desktop or UI boundary. */
+export async function resolveReceivingConnection(cwd, name, env) {
+    const connection = (await readCommsConnections(cwd)).connections[name];
+    if (!connection)
+        throw new Error("Email connection is missing. Open Connections in the TUI or run humanish comms connections add.");
+    const resolved = { ...env };
+    await discoverProviderKeys({ cwd, env: resolved, announce: () => { } });
+    const apiKey = resolved[connection.apiKeyEnv]?.trim();
+    if (!apiKey)
+        throw new Error("Email connection credential is missing. Add it in Connections, or provide the configured key with --env-file.");
+    return { connection, apiKey, adapter: createAgentMailReceiver({ apiKey }) };
+}
+export async function prepareReceivingRun(args) {
+    const email = args.config.comms?.email;
+    if (email?.kind !== "real")
+        return undefined;
+    const resolved = await resolveReceivingConnection(args.cwd, email.connection, args.env);
+    const registerSecrets = (values) => { registerTransientCommsSecrets(values); args.registerSecrets(values); };
+    registerSecrets([resolved.apiKey]);
+    if ((args.config.subject.env ?? []).some(name => name === resolved.connection.apiKeyEnv || args.env[name]?.includes(resolved.apiKey))
+        || Object.entries(args.config.subject.envValues ?? {}).some(([name, value]) => name === resolved.connection.apiKeyEnv || String(value).includes(resolved.apiKey))) {
+        throw new Error("The inbox management credential cannot be forwarded through subject.env or subject.envValues. Use a separate target-app sending credential.");
+    }
+    return startCommsReceiving({
+        cwd: args.cwd, runId: args.runId, connectionName: email.connection,
+        apiKeyEnv: resolved.connection.apiKeyEnv, adapter: resolved.adapter,
+        participants: args.participants, registerSecrets,
+        render: renderReceivingInbox,
+        writeEvidence: evidence => writeContainedOutputFile(args.runPaths, "comms/receiving.json", `${JSON.stringify(evidence, null, 2)}\n`, "utf8")
+    });
+}
+/** The restriction survives restarts and screenshot redaction; it is not a claim of local processing. */
+export function receivingPublication(config, dryRun) {
+    return !dryRun && config.comms?.email?.kind === "real"
+        ? { publication: { restrictions: ["real-communications"] } }
+        : {};
+}
+//# sourceMappingURL=comms-receiving-runtime.js.map

package/dist/comms-receiving-runtime.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"comms-receiving-runtime.js","sourceRoot":"","sources":["../src/comms-receiving-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,IAAY,EAAE,GAAsB;IAChG,MAAM,UAAU,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5B,MAAM,oBAAoB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;IAC9I,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAIzC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;IACvC,IAAI,KAAK,EAAE,IAAI,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,CAAC,MAAgB,EAAQ,EAAE,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7H,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;WAChI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QACpK,MAAM,IAAI,KAAK,CAAC,6IAA6I,CAAC,CAAC;IACjK,CAAC;IACD,OAAO,mBAAmB,CAAC;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU;QAClE,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;QACnE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe;QAChD,MAAM,EAAE,oBAAoB;QAC5B,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC;KAC7I,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,oBAAoB,CAAC,MAAiB,EAAE,MAAe;IACrE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,MAAM;QACpD,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,qBAAqB,CAA4B,EAAE,EAAE;QACvF,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/comms-receiving-types.d.ts ADDED Viewed

@@ -0,0 +1,98 @@
+/** Internal receiving-only contract. Provider identifiers and content are host/runtime-only. */
+import type { CommsInlineImage } from "./comms-types.js";
+export interface ReceivingContext {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}
+export interface ReceivingIdentity {
+    provider: "agentmail";
+    accountId: string;
+    scopeType: "organization" | "pod" | "inbox";
+    scopeId: string;
+}
+export interface ReceivingLease {
+    resourceId: string;
+    address: string;
+    clientId: string;
+}
+export interface ReceivedEmail {
+    channel: "email";
+    providerMessageId: string;
+    providerTimestamp?: string;
+    from: string;
+    subject?: string;
+    text: string;
+    html?: string;
+    inlineImages: CommsInlineImage[];
+    limitations: string[];
+}
+export interface ReceivingBatch {
+    messages: ReceivedEmail[];
+    complete: boolean;
+    /** Stable safe codes only, never provider error bodies or identifiers. */
+    limitations: string[];
+}
+export interface ReceivingAdapter {
+    readonly provider: "agentmail";
+    authenticate(context?: ReceivingContext): Promise<ReceivingIdentity>;
+    acquire(clientId: string, context?: ReceivingContext): Promise<ReceivingLease>;
+    read(lease: ReceivingLease, context?: ReceivingContext): Promise<ReceivingBatch>;
+    release(lease: ReceivingLease, context?: ReceivingContext): Promise<{
+        status: "absent" | "deleting";
+    }>;
+}
+/** Content provided to a single participant's desktop; no provider identifiers. */
+export interface ParticipantEmail extends Omit<ReceivedEmail, "providerMessageId"> {
+    id: string;
+}
+export interface ReceivingSurfaceFile {
+    path: string;
+    body: string;
+    contentType: "text/html; charset=utf-8" | "application/json; charset=utf-8";
+}
+export interface RenderedReceivingInbox {
+    files: ReceivingSurfaceFile[];
+    blockedAssetCount: number;
+    blockedLinkCount: number;
+    /** Register before publishing; never persist this array. */
+    secrets: string[];
+    linkCount: number;
+    codeCount: number;
+}
+export interface ReceivingSurface {
+    url: string;
+    publish(files: ReceivingSurfaceFile[]): Promise<void>;
+    stop(): Promise<void>;
+}
+export declare const COMMS_RECEIVING_SCHEMA = "humanish.comms-receiving.v2";
+export interface ReceivingMessageEvidence {
+    id: string;
+    firstObservedAt: string;
+    providerTimestamp?: string;
+    publishedAt?: string;
+}
+export interface ReceivingParticipantEvidence {
+    participantId: string;
+    leaseId: string;
+    acquisition: "pending" | "active" | "failed";
+    cleanup: "pending" | "absent" | "deleting" | "unresolved";
+    observed: number;
+    published: number;
+    linkCount: number;
+    codeCount: number;
+    blockedAssetCount: number;
+    blockedLinkCount: number;
+    messages: ReceivingMessageEvidence[];
+    limitations: string[];
+}
+export interface CommsReceivingEvidence {
+    schema: typeof COMMS_RECEIVING_SCHEMA;
+    channel: "email";
+    provider: "agentmail";
+    publication: "restricted-real-communications";
+    state: "acquiring" | "running" | "finished";
+    participants: ReceivingParticipantEvidence[];
+    limitations: string[];
+    /** Inbox links are constrained; the rest of the browser is not network-confined. */
+    browserConfinement: "mail-surface-only";
+}