libre-webui 0.26.0 → 0.28.0

package/backend/dist/services/webauthnService.js

@@ -0,0 +1,301 @@
+/*
+ * Libre WebUI
+ * Copyright (C) 2025 Kroonen AI, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at:
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Passkey (WebAuthn) registration and passwordless sign-in.
+ *
+ * Attestation policy is 'none' (statements are not evaluated), credentials
+ * are discoverable with user verification required, and ES256/EdDSA are the
+ * accepted algorithms. Credential ids are stored as keyed one-way lookup
+ * tokens with the key material encrypted at rest. Challenges are one-use
+ * through the coordinator cache and carried in a signed token using a secret
+ * derived from (but distinct from) the session JWT secret.
+ */
+import jwt from 'jsonwebtoken';
+import { createHmac, randomBytes, randomUUID } from 'node:crypto';
+import { getPersistence } from '../persistence/index.js';
+import { encryptionService } from './encryptionService.js';
+import { JWT_SECRET } from './authService.js';
+import { getCoordinator } from '../platform/coordination/service.js';
+import { WebAuthnError, extractPublicKey, originMatchesRpId, parseAttestationObject, parseAuthenticatorData, parseClientDataJson, sha256, verifyAssertionSignature, } from '../utils/webauthn.js';
+const credentialRepository = () => getPersistence(encryptionService).repositories.security.webauthnCredentials;
+const CHALLENGE_TTL_MS = 5 * 60 * 1000;
+const MAX_CREDENTIALS_PER_USER = 10;
+const CHALLENGE_SECRET = createHmac('sha256', JWT_SECRET)
+    .update('libre:webauthn-challenge:v1')
+    .digest();
+export class PasskeyError extends Error {
+    constructor(message, statusCode = 400) {
+        super(message);
+        this.statusCode = statusCode;
+    }
+}
+const credentialLookup = (credentialIdBase64Url) => encryptionService.purposeLookupToken('webauthn-credential', credentialIdBase64Url);
+const decodeBase64Url = (value, name) => {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value.length > 200000) {
+        throw new PasskeyError(`${name} is required`);
+    }
+    return Buffer.from(value, 'base64url');
+};
+/** The relying-party id and origin policy for a request host. */
+export const resolveRelyingParty = (requestHost) => {
+    const pinned = process.env.WEBAUTHN_RP_ID?.trim();
+    if (pinned)
+        return { rpId: pinned };
+    const hostname = requestHost.split(':')[0]?.trim().toLowerCase();
+    if (!hostname) {
+        throw new PasskeyError('Cannot determine the relying-party id', 500);
+    }
+    return { rpId: hostname };
+};
+const assertAcceptableOrigin = (origin, rpId) => {
+    if (!originMatchesRpId(origin, rpId)) {
+        throw new PasskeyError('This passkey response came from another site', 401);
+    }
+    let url;
+    try {
+        url = new URL(origin);
+    }
+    catch {
+        throw new PasskeyError('This passkey response came from another site', 401);
+    }
+    const localhost = url.hostname === 'localhost' || url.hostname === '127.0.0.1';
+    if (url.protocol !== 'https:' && !localhost) {
+        throw new PasskeyError('Passkeys require a secure (HTTPS) origin', 401);
+    }
+};
+const issueChallenge = async (purpose, userId) => {
+    const challenge = randomBytes(32).toString('base64url');
+    const jti = randomUUID();
+    await getCoordinator().setCache(`webauthn-challenge:${jti}`, { purpose }, CHALLENGE_TTL_MS);
+    const token = jwt.sign({ sub: userId, purpose, challenge, jti }, CHALLENGE_SECRET, { expiresIn: Math.floor(CHALLENGE_TTL_MS / 1000) });
+    return { token, challenge };
+};
+/** Verify and burn a challenge token; each token authorizes one ceremony. */
+const consumeChallenge = async (token, purpose) => {
+    let claims;
+    try {
+        claims = jwt.verify(token, CHALLENGE_SECRET);
+    }
+    catch {
+        throw new PasskeyError('This passkey challenge has expired', 401);
+    }
+    if (claims.purpose !== purpose || !claims.challenge || !claims.jti) {
+        throw new PasskeyError('This passkey challenge is not valid', 401);
+    }
+    const cached = await getCoordinator().consumeCache(`webauthn-challenge:${claims.jti}`);
+    if (!cached) {
+        throw new PasskeyError('This passkey challenge was already used', 401);
+    }
+    return {
+        ...(claims.sub ? { userId: claims.sub } : {}),
+        challenge: claims.challenge,
+    };
+};
+const toPublic = (record) => ({
+    id: record.id,
+    name: record.name,
+    createdAt: record.created_at,
+    lastUsedAt: record.last_used_at,
+});
+export const listPasskeys = async (userId) => (await credentialRepository().listByUser(userId)).map(toPublic);
+export const deletePasskey = async (userId, passkeyId) => credentialRepository().delete(passkeyId, userId);
+export const deleteAllPasskeys = async (userId) => credentialRepository().deleteForUser(userId);
+export const registrationOptions = async (user, requestHost) => {
+    const { rpId } = resolveRelyingParty(requestHost);
+    const { token, challenge } = await issueChallenge('webauthn-register', user.id);
+    const existing = await credentialRepository().listByUser(user.id);
+    const excludeCredentials = existing
+        .map(record => {
+        try {
+            const data = encryptionService.decryptObject(record.credential_data);
+            return { type: 'public-key', id: data.credentialId };
+        }
+        catch {
+            return null;
+        }
+    })
+        .filter(Boolean);
+    return {
+        challengeToken: token,
+        publicKey: {
+            challenge,
+            rp: { id: rpId, name: 'Libre WebUI' },
+            user: {
+                id: Buffer.from(user.id, 'utf8').toString('base64url'),
+                name: user.username,
+                displayName: user.username,
+            },
+            pubKeyCredParams: [
+                { type: 'public-key', alg: -7 },
+                { type: 'public-key', alg: -8 },
+                { type: 'public-key', alg: -257 },
+            ],
+            authenticatorSelection: {
+                residentKey: 'required',
+                userVerification: 'required',
+            },
+            attestation: 'none',
+            timeout: 120000,
+            excludeCredentials,
+        },
+    };
+};
+export const registerPasskey = async (userId, submission, requestHost) => {
+    const { rpId } = resolveRelyingParty(requestHost);
+    const consumed = await consumeChallenge(submission.challengeToken, 'webauthn-register');
+    if (consumed.userId !== userId) {
+        throw new PasskeyError('This passkey challenge belongs to another sign-in', 401);
+    }
+    const clientDataJson = decodeBase64Url(submission.credential?.response?.clientDataJSON, 'clientDataJSON');
+    const clientData = parseClientDataJson(clientDataJson);
+    if (clientData.type !== 'webauthn.create') {
+        throw new PasskeyError('Unexpected passkey ceremony type', 401);
+    }
+    if (clientData.challenge !== consumed.challenge) {
+        throw new PasskeyError('Passkey challenge mismatch', 401);
+    }
+    assertAcceptableOrigin(clientData.origin, rpId);
+    let authData;
+    let parsed;
+    let publicKey;
+    try {
+        authData = parseAttestationObject(decodeBase64Url(submission.credential?.response?.attestationObject, 'attestationObject'));
+        parsed = parseAuthenticatorData(authData);
+        if (!parsed.publicKey || !parsed.credentialId) {
+            throw new WebAuthnError('Attested credential data is missing');
+        }
+        publicKey = extractPublicKey(parsed.publicKey);
+    }
+    catch (error) {
+        if (error instanceof WebAuthnError) {
+            throw new PasskeyError(`Passkey registration failed: ${error.message}`);
+        }
+        throw error;
+    }
+    if (!parsed.rpIdHash.equals(sha256(rpId))) {
+        throw new PasskeyError('This passkey was created for another site', 401);
+    }
+    if (!parsed.userPresent || !parsed.userVerified) {
+        throw new PasskeyError('Passkeys require user verification', 401);
+    }
+    const credentialId = parsed.credentialId.toString('base64url');
+    const rawId = submission.credential.rawId;
+    if (typeof rawId === 'string' && rawId !== credentialId) {
+        throw new PasskeyError('Credential id mismatch', 401);
+    }
+    const lookup = credentialLookup(credentialId);
+    if (await credentialRepository().findByLookup(lookup)) {
+        throw new PasskeyError('This passkey is already registered', 409);
+    }
+    if ((await credentialRepository().countForUser(userId)) >=
+        MAX_CREDENTIALS_PER_USER) {
+        throw new PasskeyError(`You can register at most ${MAX_CREDENTIALS_PER_USER} passkeys`, 409);
+    }
+    const transports = Array.isArray(submission.credential.response.transports)
+        ? submission.credential.response.transports
+            .filter((entry) => typeof entry === 'string')
+            .slice(0, 8)
+        : [];
+    const name = submission.name?.trim().slice(0, 64) || null;
+    const record = {
+        id: randomUUID(),
+        user_id: userId,
+        credential_lookup: lookup,
+        credential_data: encryptionService.encryptObject({
+            credentialId,
+            publicKey,
+            transports,
+        }),
+        name,
+        sign_count: parsed.signCount,
+        created_at: Date.now(),
+        last_used_at: null,
+    };
+    await credentialRepository().insert(record);
+    return toPublic(record);
+};
+export const loginOptions = async (requestHost) => {
+    const { rpId } = resolveRelyingParty(requestHost);
+    const { token, challenge } = await issueChallenge('webauthn-login');
+    return {
+        challengeToken: token,
+        publicKey: {
+            challenge,
+            rpId,
+            userVerification: 'required',
+            timeout: 120000,
+        },
+    };
+};
+/** Verify a passwordless sign-in assertion; returns the credential owner. */
+export const verifyPasskeyLogin = async (submission, requestHost) => {
+    const { rpId } = resolveRelyingParty(requestHost);
+    const consumed = await consumeChallenge(submission.challengeToken, 'webauthn-login');
+    const clientDataJson = decodeBase64Url(submission.credential?.response?.clientDataJSON, 'clientDataJSON');
+    const clientData = parseClientDataJson(clientDataJson);
+    if (clientData.type !== 'webauthn.get') {
+        throw new PasskeyError('Unexpected passkey ceremony type', 401);
+    }
+    if (clientData.challenge !== consumed.challenge) {
+        throw new PasskeyError('Passkey challenge mismatch', 401);
+    }
+    assertAcceptableOrigin(clientData.origin, rpId);
+    const rawId = decodeBase64Url(submission.credential?.rawId, 'credential id');
+    const record = await credentialRepository().findByLookup(credentialLookup(rawId.toString('base64url')));
+    if (!record) {
+        throw new PasskeyError('This passkey is not registered here', 401);
+    }
+    let data;
+    try {
+        data = encryptionService.decryptObject(record.credential_data);
+    }
+    catch {
+        throw new PasskeyError('This passkey is not usable', 401);
+    }
+    const authData = decodeBase64Url(submission.credential?.response?.authenticatorData, 'authenticatorData');
+    let parsed;
+    try {
+        parsed = parseAuthenticatorData(authData);
+    }
+    catch (error) {
+        if (error instanceof WebAuthnError) {
+            throw new PasskeyError(`Passkey sign-in failed: ${error.message}`, 401);
+        }
+        throw error;
+    }
+    if (!parsed.rpIdHash.equals(sha256(rpId))) {
+        throw new PasskeyError('This passkey belongs to another site', 401);
+    }
+    if (!parsed.userPresent || !parsed.userVerified) {
+        throw new PasskeyError('Passkeys require user verification', 401);
+    }
+    const signature = decodeBase64Url(submission.credential?.response?.signature, 'signature');
+    if (!verifyAssertionSignature(data.publicKey, authData, clientDataJson, signature)) {
+        throw new PasskeyError('Passkey signature verification failed', 401);
+    }
+    // A nonzero counter that does not advance suggests a cloned authenticator.
+    if (parsed.signCount !== 0 &&
+        record.sign_count !== 0 &&
+        parsed.signCount <= record.sign_count) {
+        throw new PasskeyError('This passkey failed a clone check', 401);
+    }
+    await credentialRepository().updateSignCount(record.id, Math.max(parsed.signCount, record.sign_count), Date.now());
+    return { userId: record.user_id, passkeyId: record.id };
+};
+//# sourceMappingURL=webauthnService.js.map

package/backend/dist/services/webauthnService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthnService.js","sourceRoot":"","sources":["../../src/services/webauthnService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;;;;;GASG;AAEH,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,mBAAmB,EACnB,MAAM,EACN,wBAAwB,GAEzB,MAAM,sBAAsB,CAAC;AAG9B,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAChC,cAAc,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;AAE9E,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACvC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;KACtD,MAAM,CAAC,6BAA6B,CAAC;KACrC,MAAM,EAAE,CAAC;AAEZ,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YACE,OAAe,EACC,UAAU,GAAG,GAAG;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFC,UAAU;IAG5B,CAAC;CACF;AAQD,MAAM,gBAAgB,GAAG,CAAC,qBAA6B,EAAU,EAAE,CACjE,iBAAiB,CAAC,kBAAkB,CAClC,qBAAqB,EACrB,qBAAqB,CACtB,CAAC;AAEJ,MAAM,eAAe,GAAG,CAAC,KAAc,EAAE,IAAY,EAAU,EAAE;IAC/D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,MAAO,EACtB,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,WAAmB,EAAoB,EAAE;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC;IAClD,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAAE,IAAY,EAAQ,EAAE;IACpE,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,YAAY,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GACb,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC;IAC/D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC,CAAC;AASF,MAAM,cAAc,GAAG,KAAK,EAC1B,OAA+C,EAC/C,MAAe,EACgC,EAAE;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,cAAc,EAAE,CAAC,QAAQ,CAC7B,sBAAsB,GAAG,EAAE,EAC3B,EAAE,OAAO,EAAE,EACX,gBAAgB,CACjB,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EACxC,gBAAgB,EAChB,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,EAAE,CACnD,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,KAAK,EAC5B,KAAa,EACb,OAA+C,EACE,EAAE;IACnD,IAAI,MAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAoB,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QACnE,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAE,CAAC,YAAY,CAChD,sBAAsB,MAAM,CAAC,GAAG,EAAE,CACnC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC,CAAC;AASF,MAAM,QAAQ,GAAG,CAAC,MAAsC,EAAiB,EAAE,CAAC,CAAC;IAC3E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,SAAS,EAAE,MAAM,CAAC,UAAU;IAC5B,UAAU,EAAE,MAAM,CAAC,YAAY;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAA4B,EAAE,CAC7E,CAAC,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,MAAc,EACd,SAAiB,EACC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAc,EAAmB,EAAE,CACzE,oBAAoB,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,IAAsC,EACtC,WAAmB,EACsD,EAAE;IAC3E,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAC/C,mBAAmB,EACnB,IAAI,CAAC,EAAE,CACR,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,oBAAoB,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAG,QAAQ;SAChC,GAAG,CAAC,MAAM,CAAC,EAAE;QACZ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,aAAa,CAC1C,MAAM,CAAC,eAAe,CACvB,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,SAAS,EAAE;YACT,SAAS;YACT,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;YACrC,IAAI,EAAE;gBACJ,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACtD,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,WAAW,EAAE,IAAI,CAAC,QAAQ;aAC3B;YACD,gBAAgB,EAAE;gBAChB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;aAClC;YACD,sBAAsB,EAAE;gBACtB,WAAW,EAAE,UAAU;gBACvB,gBAAgB,EAAE,UAAU;aAC7B;YACD,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,MAAO;YAChB,kBAAkB;SACnB;KACF,CAAC;AACJ,CAAC,CAAC;AAeF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAClC,MAAc,EACd,UAAkC,EAClC,WAAmB,EACK,EAAE;IAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,UAAU,CAAC,cAAc,EACzB,mBAAmB,CACpB,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,YAAY,CACpB,mDAAmD,EACnD,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,eAAe,CACpC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAC/C,gBAAgB,CACjB,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhD,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAiD,CAAC;IACtD,IAAI,SAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG,sBAAsB,CAC/B,eAAe,CACb,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAClD,mBAAmB,CACpB,CACF,CAAC;QACF,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,aAAa,CAAC,qCAAqC,CAAC,CAAC;QACjE,CAAC;QACD,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,gCAAgC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QACxD,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,MAAM,oBAAoB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,IACE,CAAC,MAAM,oBAAoB,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACnD,wBAAwB,EACxB,CAAC;QACD,MAAM,IAAI,YAAY,CACpB,4BAA4B,wBAAwB,WAAW,EAC/D,GAAG,CACJ,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzE,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU;aACtC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;aAC7D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAmC;QAC7C,EAAE,EAAE,UAAU,EAAE;QAChB,OAAO,EAAE,MAAM;QACf,iBAAiB,EAAE,MAAM;QACzB,eAAe,EAAE,iBAAiB,CAAC,aAAa,CAAC;YAC/C,YAAY;YACZ,SAAS;YACT,UAAU;SACc,CAAC;QAC3B,IAAI;QACJ,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;QACtB,YAAY,EAAE,IAAI;KACnB,CAAC;IACF,MAAM,oBAAoB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,WAAmB,EACsD,EAAE;IAC3E,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACpE,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,SAAS,EAAE;YACT,SAAS;YACT,IAAI;YACJ,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE,MAAO;SACjB;KACF,CAAC;AACJ,CAAC,CAAC;AAcF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,UAA+B,EAC/B,WAAmB,EAC6B,EAAE;IAClD,MAAM,EAAE,IAAI,EAAE,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,UAAU,CAAC,cAAc,EACzB,gBAAgB,CACjB,CAAC;IAEF,MAAM,cAAc,GAAG,eAAe,CACpC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,EAC/C,gBAAgB,CACjB,CAAC;IACF,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACvC,MAAM,IAAI,YAAY,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,sBAAsB,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,oBAAoB,EAAE,CAAC,YAAY,CACtD,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAC9C,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAoB,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,aAAa,CACpC,MAAM,CAAC,eAAe,CACvB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAC9B,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAClD,mBAAmB,CACpB,CAAC;IACF,IAAI,MAAiD,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,YAAY,CAAC,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,YAAY,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAC/B,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAC1C,WAAW,CACZ,CAAC;IACF,IACE,CAAC,wBAAwB,CACvB,IAAI,CAAC,SAAS,EACd,QAAQ,EACR,cAAc,EACd,SAAS,CACV,EACD,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,2EAA2E;IAC3E,IACE,MAAM,CAAC,SAAS,KAAK,CAAC;QACtB,MAAM,CAAC,UAAU,KAAK,CAAC;QACvB,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,EACrC,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,oBAAoB,EAAE,CAAC,eAAe,CAC1C,MAAM,CAAC,EAAE,EACT,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,EAC7C,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;AAC1D,CAAC,CAAC"}

package/backend/dist/services/websocketTicketService.d.ts

@@ -9,7 +9,7 @@ export interface ConsumedWebSocketTicket {
     /** Auth session backing the ticket; used to close sockets on revocation. */
     sessionId?: string;
 }
-export type WebSocketTicketAudience = 'chat' | 'work-terminal';
+export type WebSocketTicketAudience = 'chat' | 'work-terminal' | 'work-screen';
 export declare class WebSocketTicketRateLimitError extends Error {
     constructor();
 }

package/backend/dist/services/websocketTicketService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"websocketTicketService.d.ts","sourceRoot":"","sources":["../../src/services/websocketTicketService.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAkBrE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,eAAe,CAAC;AAE/D,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,cAGC;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB,YAAY,KAAK,CAAC,EAAE,OAAO,EAI1B;CACF;AAqCD;;;;;GAKG;AACH,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IANrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAE3D,YACmB,KAAK,SAA0B,EAC/B,GAAG,GAAE,MAAM,MAAiB,EAC5B,mBAAmB,CAAC,GAAE,MAAM,WAAW,aAAA,EACvC,kBAAkB,SAA2C,EAC5E;IAEE,KAAK,CACT,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,uBAAuB,EACjC,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CA8DhC;IAEK,OAAO,CACX,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,uBAAuB,EACjC,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA+BzC;IAED,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,iBAAiB;CAa1B;AAED,eAAO,MAAM,sBAAsB,wBAIlC,CAAC"}
+{"version":3,"file":"websocketTicketService.d.ts","sourceRoot":"","sources":["../../src/services/websocketTicketService.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAkBrE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,eAAe,GAAG,aAAa,CAAC;AAE/E,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,cAGC;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IAEzB,YAAY,KAAK,CAAC,EAAE,OAAO,EAI1B;CACF;AAuCD;;;;;GAKG;AACH,qBAAa,sBAAsB;IAI/B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;IANrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAE3D,YACmB,KAAK,SAA0B,EAC/B,GAAG,GAAE,MAAM,MAAiB,EAC5B,mBAAmB,CAAC,GAAE,MAAM,WAAW,aAAA,EACvC,kBAAkB,SAA2C,EAC5E;IAEE,KAAK,CACT,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,uBAAuB,EACjC,UAAU,CAAC,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,qBAAqB,CAAC,CA8DhC;IAEK,OAAO,CACX,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,uBAAuB,EACjC,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CA+BzC;IAED,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,kBAAkB;IAW1B,OAAO,CAAC,iBAAiB;CAa1B;AAED,eAAO,MAAM,sBAAsB,wBAIlC,CAAC"}

package/backend/dist/services/websocketTicketService.js

@@ -48,7 +48,9 @@ const isTicketRecord = (value) => {
     const record = value;
     return (typeof record.userId === 'string' &&
         record.userId.length > 0 &&
-        (record.audience === 'chat' || record.audience === 'work-terminal') &&
+        (record.audience === 'chat' ||
+            record.audience === 'work-terminal' ||
+            record.audience === 'work-screen') &&
         (record.resourceId === undefined ||
             typeof record.resourceId === 'string') &&
         (record.sessionId === undefined || typeof record.sessionId === 'string') &&

package/backend/dist/services/websocketTicketService.js.map

@@ -1 +1 @@
-{"version":3,"file":"websocketTicketService.js","sourceRoot":"","sources":["../../src/services/websocketTicketService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EACL,wCAAwC,EACxC,uBAAuB,GACxB,MAAM,6CAA6C,CAAC;AAGrD,MAAM,qBAAqB,GAAG,KAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,KAAM,CAAC;AACjC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAC3C,MAAM,uBAAuB,GAAG,KAAM,CAAC;AACvC,MAAM,mCAAmC,GAAG,GAAG,CAAC;AA0BhD,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAGzD,YAAY,KAAe;QACzB,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,eAAe,GAAG,CACtB,KAAyB,EACzB,QAAgB,EACR,EAAE;IACV,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,GAAW,EAAE,CACzC,IAAI,CAAC,GAAG,CACN,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,EAC3E,iBAAiB,CAClB,CAAC;AAEJ,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE,CAC9C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC;AAE1E,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC/D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAA8B,CAAC;IAC9C,OAAO,CACL,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,eAAe,CAAC;QACnE,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;QACxE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CACtC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAGjC,YACmB,KAAK,GAAG,qBAAqB,EAAE,EAC/B,GAAG,GAAiB,IAAI,CAAC,GAAG,EAC5B,mBAAuC,EACvC,kBAAkB,GAAG,wCAAwC;QAH7D,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAAyB;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAoB;QACvC,uBAAkB,GAAlB,kBAAkB,CAA2C;QAN/D,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAOxD,CAAC;IAEJ,KAAK,CAAC,KAAK,CACT,MAAc,EACd,gBAAwB,EACxB,QAAiC,EACjC,UAAmB,EACnB,SAAkB;QAElB,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAiB;YAC3B,MAAM,EAAE,gBAAgB;YACxB,QAAQ;YACR,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS;YACT,gBAAgB;YAChB,QAAQ,EAAE,GAAG;SACd,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,uBAAuB,CAC5D,OAAO,CAAC,GAAG,CAAC;gBACV,WAAW,CAAC,gBAAgB,CAC1B,yBAAyB,gBAAgB,EAAE,EAC3C,mCAAmC,EACnC,IAAI,CAAC,KAAK,CACX;gBACD,WAAW,CAAC,gBAAgB,CAC1B,yBAAyB,EACzB,uBAAuB,EACvB,IAAI,CAAC,KAAK,CACX;aACF,CAAC,EACF,IAAI,CAAC,kBAAkB,CACxB,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,6BAA6B,EAAE,CAAC;YAC5C,CAAC;YACD,MAAM,uBAAuB,CAC3B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,EAC/D,IAAI,CAAC,kBAAkB,CACxB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,OAAO;YACL,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,QAAiC,EACjC,UAAmB;QAEnB,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/D,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjD,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,WAAW;gBAClB,CAAC,CAAC,MAAM,uBAAuB,CAC3B,WAAW,CAAC,YAAY,CAAe,QAAQ,CAAC,MAAM,CAAC,CAAC,EACxD,IAAI,CAAC,kBAAkB,CACxB;gBACH,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IACE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,IAAI,EAAE,EACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QAChD,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACvC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;aAChD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,QAAQ,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,uBAAuB;YAAE,OAAO;QAExD,IAAI,YAAgC,CAAC;QACrC,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;gBACrC,YAAY,GAAG,MAAM,CAAC;gBACtB,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,YAAY;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CAC9D,qBAAqB,EAAE,EACvB,IAAI,CAAC,GAAG,EACR,cAAc,CACf,CAAC"}
+{"version":3,"file":"websocketTicketService.js","sourceRoot":"","sources":["../../src/services/websocketTicketService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EACL,wCAAwC,EACxC,uBAAuB,GACxB,MAAM,6CAA6C,CAAC;AAGrD,MAAM,qBAAqB,GAAG,KAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,KAAM,CAAC;AACjC,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAC3C,MAAM,uBAAuB,GAAG,KAAM,CAAC;AACvC,MAAM,mCAAmC,GAAG,GAAG,CAAC;AA0BhD,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD;QACE,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAGzD,YAAY,KAAe;QACzB,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,eAAe,GAAG,CACtB,KAAyB,EACzB,QAAgB,EACR,EAAE;IACV,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,GAAW,EAAE,CACzC,IAAI,CAAC,GAAG,CACN,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,EAC3E,iBAAiB,CAClB,CAAC;AAEJ,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE,CAC9C,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,oBAAoB,MAAM,EAAE,CAAC;AAE1E,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE;IAC/D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAA8B,CAAC;IAC9C,OAAO,CACL,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACxB,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM;YACzB,MAAM,CAAC,QAAQ,KAAK,eAAe;YACnC,MAAM,CAAC,QAAQ,KAAK,aAAa,CAAC;QACpC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxC,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;QACxE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CACtC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,OAAO,sBAAsB;IAGjC,YACmB,KAAK,GAAG,qBAAqB,EAAE,EAC/B,GAAG,GAAiB,IAAI,CAAC,GAAG,EAC5B,mBAAuC,EACvC,kBAAkB,GAAG,wCAAwC;QAH7D,UAAK,GAAL,KAAK,CAA0B;QAC/B,QAAG,GAAH,GAAG,CAAyB;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAoB;QACvC,uBAAkB,GAAlB,kBAAkB,CAA2C;QAN/D,YAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAOxD,CAAC;IAEJ,KAAK,CAAC,KAAK,CACT,MAAc,EACd,gBAAwB,EACxB,QAAiC,EACjC,UAAmB,EACnB,SAAkB;QAElB,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,IAAI,GAAG,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAiB;YAC3B,MAAM,EAAE,gBAAgB;YACxB,QAAQ;YACR,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,SAAS;YACT,gBAAgB;YAChB,QAAQ,EAAE,GAAG;SACd,CAAC;QACF,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,uBAAuB,CAC5D,OAAO,CAAC,GAAG,CAAC;gBACV,WAAW,CAAC,gBAAgB,CAC1B,yBAAyB,gBAAgB,EAAE,EAC3C,mCAAmC,EACnC,IAAI,CAAC,KAAK,CACX;gBACD,WAAW,CAAC,gBAAgB,CAC1B,yBAAyB,EACzB,uBAAuB,EACvB,IAAI,CAAC,KAAK,CACX;aACF,CAAC,EACF,IAAI,CAAC,kBAAkB,CACxB,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC/C,MAAM,IAAI,6BAA6B,EAAE,CAAC;YAC5C,CAAC;YACD,MAAM,uBAAuB,CAC3B,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,GAAG,CAAC,EAC/D,IAAI,CAAC,kBAAkB,CACxB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAC1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,CAAC;QAED,OAAO;YACL,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,QAAiC,EACjC,UAAmB;QAEnB,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,gBAAgB,CAAC;YAAE,OAAO,IAAI,CAAC;QAE/D,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;QACjD,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,WAAW;gBAClB,CAAC,CAAC,MAAM,uBAAuB,CAC3B,WAAW,CAAC,YAAY,CAAe,QAAQ,CAAC,MAAM,CAAC,CAAC,EACxD,IAAI,CAAC,kBAAkB,CACxB;gBACH,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,IACE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAC9B,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAC5B,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,IAAI,EAAE,EACxC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAc;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QAChD,yEAAyE;QACzE,kEAAkE;QAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,MAAc;QACvC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC;aAChD,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,QAAQ,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,uBAAuB;YAAE,OAAO;QAExD,IAAI,YAAgC,CAAC;QACrC,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5C,IAAI,MAAM,CAAC,QAAQ,GAAG,cAAc,EAAE,CAAC;gBACrC,YAAY,GAAG,MAAM,CAAC;gBACtB,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,CAAC;QACH,CAAC;QACD,IAAI,YAAY;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;CACF;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,sBAAsB,CAC9D,qBAAqB,EAAE,EACvB,IAAI,CAAC,GAAG,EACR,cAAc,CACf,CAAC"}

package/backend/dist/services/workAgentGuidance.d.ts

@@ -1,5 +1,11 @@
 export interface WorkAgentGuidanceContext {
     networkEnabled: boolean;
+    computerAvailable: boolean;
+    /** User-demonstrated Work Computer procedures loaded into this run. */
+    taughtSkills?: readonly {
+        name: string;
+        instructions: string;
+    }[];
     previewPort: number;
     roundBudget: number;
     commandTimeoutMs: number;
@@ -19,7 +25,15 @@ export declare const WORK_WRITE_FILE_RECOMMENDED_CHARS = 8000;
  */
 export declare const WORK_AGENT_SKILLS: readonly WorkAgentSkill[];
 export declare function workToolCallBudget(roundBudget: number): number;
+/**
+ * The skills a specific run actually loads. Guidance for a capability the
+ * task cannot use (a computer without a GUI policy) would only invite the
+ * model to call tools that are not offered.
+ */
+export declare function workAgentSkillsForContext(context: Pick<WorkAgentGuidanceContext, 'computerAvailable'>): readonly WorkAgentSkill[];
 export declare function buildWorkAgentSystemPrompt(context: WorkAgentGuidanceContext): string;
 export declare function buildWorkEmptyRoundNudgePrompt(): string;
+export declare function buildWorkComputerStallPrompt(subgoal?: string): string;
+export declare function buildWorkComputerAmbiguityPrompt(subgoal?: string): string;
 export declare function buildWorkBudgetExhaustionPrompt(): string;
 //# sourceMappingURL=workAgentGuidance.d.ts.map

package/backend/dist/services/workAgentGuidance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentGuidance.d.ts","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAID,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAiD7C,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAChC,MAAM,CA4BR;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAQxD"}
+{"version":3,"file":"workAgentGuidance.d.ts","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,uEAAuE;IACvE,YAAY,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAID,eAAO,MAAM,iCAAiC,OAAQ,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,cAAc,EAgE7C,CAAC;AAEX,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,GAC3D,SAAS,cAAc,EAAE,CAI3B;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAoCR;AAED,wBAAgB,8BAA8B,IAAI,MAAM,CAEvD;AAED,wBAAgB,4BAA4B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,wBAAgB,gCAAgC,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,+BAA+B,IAAI,MAAM,CAQxD"}

package/backend/dist/services/workAgentGuidance.js

@@ -63,6 +63,21 @@ export const WORK_AGENT_SKILLS = [
             'start_preview is the only supported way to keep a process alive. Background processes started by run_command are cleaned up when that command finishes.',
         ],
     },
+    {
+        id: 'computer',
+        title: 'Computer control',
+        instructions: [
+            'This task has a virtual computer with a Chromium browser. computer_observe returns the current screenshot with the cursor position, active window, page URL, and focused element; computer_act performs batched mouse and keyboard actions and returns the screenshot after they settle.',
+            'Coordinates are absolute pixels on the returned screenshot. Observe before the first action, act on what the screenshot actually shows, and re-observe instead of assuming an action worked.',
+            'Batch related actions into one computer_act call: move, click, double_click, right_click, type, key, scroll, scroll_until, wait. The screen settles adaptively after a batch, so results show the finished state. A batch stops early when the window, title, or window count changes mid-batch — that is protection, not an error: the remaining coordinates targeted the previous screen, so observe and continue from what you see.',
+            'Before typing into a specific field, set "focus" on the type action (text the focused element, URL, or window title must contain). If the result says keyboard focus is in the browser UI rather than the page, click the intended field first — typed text would go to the omnibox.',
+            'Declare "expect" on consequential batches (titleContains, urlContains, or regionChanged) so the runtime verifies the outcome, and name each batch\'s "subgoal" so recovery prompts and the run record know what you were doing. A "pending" verdict means not observed before the deadline — re-observe before treating it as failure; asynchronous pages often finish late.',
+            'Read the receipts in each result: a click that reports "NO visible change nearby" probably missed or hit inert space, and the since-last-observation diff tells you whether anything happened at all. To reach something below the fold, use scroll_until with the target text instead of guessing scroll amounts — its receipt says whether the target became visible.',
+            'run_command can stop the sandbox when it finishes unless the screen is being watched; the computer session then restarts on the next computer tool call and the browser profile persists, but open pages are lost — finish a browser workflow before running commands.',
+            'Never enter credentials, complete a CAPTCHA or 2FA challenge, or work around an authentication wall. Call request_takeover with a concrete reason instead — the user drives the real screen, the password never passes through you.',
+            'While the user holds control your computer tools are blocked. When request_takeover reports control was handed back, computer_observe first; if no one takes over in time, report the exact blocker in your response.',
+        ],
+    },
     {
         id: 'budget-discipline',
         title: 'Budget discipline',
@@ -76,13 +91,28 @@ export const WORK_AGENT_SKILLS = [
 export function workToolCallBudget(roundBudget) {
     return Math.max(128, positiveInteger(roundBudget, 'roundBudget') * 8);
 }
+/**
+ * The skills a specific run actually loads. Guidance for a capability the
+ * task cannot use (a computer without a GUI policy) would only invite the
+ * model to call tools that are not offered.
+ */
+export function workAgentSkillsForContext(context) {
+    return WORK_AGENT_SKILLS.filter(skill => skill.id !== 'computer' || context.computerAvailable);
+}
 export function buildWorkAgentSystemPrompt(context) {
     validateGuidanceContext(context);
     const toolBudget = workToolCallBudget(context.roundBudget);
     const networkGuidance = context.networkEnabled
         ? 'Network access is enabled. Download dependencies only when the task needs them and respect the project lockfile.'
         : 'Network access is disabled. Downloads and remote services will fail; do not repeatedly retry them.';
-    const skills = WORK_AGENT_SKILLS.map(skill => `## ${skill.title}\n${skill.instructions.map(item => `- ${item}`).join('\n')}`).join('\n\n');
+    const skills = workAgentSkillsForContext(context)
+        .map(skill => `## ${skill.title}\n${skill.instructions.map(item => `- ${item}`).join('\n')}`)
+        .join('\n\n');
+    const taughtSkills = context.computerAvailable && context.taughtSkills?.length
+        ? `\n\n## Taught procedures\nThe user demonstrated these procedures on this task's computer. When the request matches one, follow its playbook.\n\n${context.taughtSkills
+            .map(skill => `### ${skill.name}\n${skill.instructions}`)
+            .join('\n\n')}`
+        : '';
     return `You are Libre WebUI Work, an autonomous implementation agent.
 Deliver a working result inside this task's isolated workspace, not a plan-only answer.
 
@@ -97,13 +127,19 @@ Deliver a working result inside this task's isolated workspace, not a plan-only
 - This run has a provider-agnostic budget of ${formatInteger(context.roundBudget)} model rounds and ${formatInteger(toolBudget)} tool calls.
 - A browser preview must listen on 0.0.0.0:${context.previewPort}.
 
-${skills}
+${skills}${taughtSkills}
 
 Finish with a concise summary of what changed and the checks that actually ran.`;
 }
 export function buildWorkEmptyRoundNudgePrompt() {
     return `Your last turn contained no reply and no tool calls, so nothing happened. Continue the task now: either call the tools you need, or reply with your findings and the next step.`;
 }
+export function buildWorkComputerStallPrompt(subgoal) {
+    return `Your last three computer actions were identical and the screen did not change at all (the screenshot hash is unchanged) — the current approach is not working.${subgoal ? ` Your declared subgoal was: "${subgoal}".` : ''} Do not repeat the same action again. Re-observe and reconsider: check the focused element, page URL, and window; try different coordinates or scroll the target into view; take an alternative route to the goal; or call request_takeover if a human needs to intervene. If no alternative exists, stop and state the exact blocker.`;
+}
+export function buildWorkComputerAmbiguityPrompt(subgoal) {
+    return `Several consecutive computer batches ended with their declared expectation still pending — you are acting on outcomes that were never verified, and that uncertainty compounds.${subgoal ? ` Your declared subgoal was: "${subgoal}".` : ''} Stop and re-ground before continuing: computer_observe the current state, verify a different way (check the URL, window title, or a region that must have changed), or reconsider whether the earlier steps actually succeeded. If the state cannot be verified, say exactly what is uncertain instead of continuing optimistically.`;
+}
 export function buildWorkBudgetExhaustionPrompt() {
     return `The autonomous execution budget is exhausted. Do not call any more tools.
 Return a concise final response that states:

package/backend/dist/services/workAgentGuidance.js.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentGuidance.js","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAgBH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AACvC,MAAM,mBAAmB,GAAG,OAAS,CAAC;AACtC,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAK,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE;YACZ,qJAAqJ;YACrJ,uLAAuL;YACvL,kKAAkK;SACnK;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,YAAY,EAAE;YACZ,6FAA6F;YAC7F,gHAAgH;YAChH,6RAA6R;YAC7R,sCAAsC,iCAAiC,CAAC,cAAc,CAAC,OAAO,CAAC,4IAA4I;YAC3O,wIAAwI;SACzI;KACF;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,2BAA2B;QAClC,YAAY,EAAE;YACZ,iIAAiI;YACjI,8HAA8H;YAC9H,wGAAwG;SACzG;KACF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE;YACZ,qGAAqG;YACrG,0JAA0J;YAC1J,iKAAiK;YACjK,yJAAyJ;SAC1J;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE;YACZ,oIAAoI;YACpI,2JAA2J;YAC3J,4JAA4J;SAC7J;KACF;CACO,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAiC;IAEjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc;QAC5C,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,oGAAoG,CAAC;IACzG,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAClC,KAAK,CAAC,EAAE,CACN,MAAM,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEf,OAAO;;;;;;;IAOL,eAAe;oCACiB,aAAa,CAAC,mBAAmB,CAAC;wBAC9C,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,+BAA+B,aAAa,CAAC,sBAAsB,CAAC;4CACvF,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;+CAClC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAqB,aAAa,CAAC,UAAU,CAAC;6CAClF,OAAO,CAAC,WAAW;;EAE9D,MAAM;;gFAEwE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iLAAiL,CAAC;AAC3L,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;;;;;;iFAMwE,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAiC;IAChE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,KAAM,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"workAgentGuidance.js","sourceRoot":"","sources":["../../src/services/workAgentGuidance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmBH,MAAM,sBAAsB,GAAG,MAAO,CAAC;AACvC,MAAM,mBAAmB,GAAG,OAAS,CAAC;AACtC,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAK,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAA8B;IAC1D;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,qBAAqB;QAC5B,YAAY,EAAE;YACZ,qJAAqJ;YACrJ,uLAAuL;YACvL,kKAAkK;SACnK;KACF;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,KAAK,EAAE,wBAAwB;QAC/B,YAAY,EAAE;YACZ,6FAA6F;YAC7F,gHAAgH;YAChH,6RAA6R;YAC7R,sCAAsC,iCAAiC,CAAC,cAAc,CAAC,OAAO,CAAC,4IAA4I;YAC3O,wIAAwI;SACzI;KACF;IACD;QACE,EAAE,EAAE,cAAc;QAClB,KAAK,EAAE,2BAA2B;QAClC,YAAY,EAAE;YACZ,iIAAiI;YACjI,8HAA8H;YAC9H,wGAAwG;SACzG;KACF;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE;YACZ,qGAAqG;YACrG,0JAA0J;YAC1J,iKAAiK;YACjK,yJAAyJ;SAC1J;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,kBAAkB;QACzB,YAAY,EAAE;YACZ,0RAA0R;YAC1R,8LAA8L;YAC9L,waAAwa;YACxa,sRAAsR;YACtR,8WAA8W;YAC9W,yWAAyW;YACzW,wQAAwQ;YACxQ,qOAAqO;YACrO,uNAAuN;SACxN;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,mBAAmB;QAC1B,YAAY,EAAE;YACZ,oIAAoI;YACpI,2JAA2J;YAC3J,4JAA4J;SAC7J;KACF;CACO,CAAC;AAEX,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA4D;IAE5D,OAAO,iBAAiB,CAAC,MAAM,CAC7B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAiC;IAEjC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,OAAO,CAAC,cAAc;QAC5C,CAAC,CAAC,kHAAkH;QACpH,CAAC,CAAC,oGAAoG,CAAC;IACzG,MAAM,MAAM,GAAG,yBAAyB,CAAC,OAAO,CAAC;SAC9C,GAAG,CACF,KAAK,CAAC,EAAE,CACN,MAAM,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF;SACA,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,YAAY,GAChB,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,MAAM;QACvD,CAAC,CAAC,mJAAmJ,OAAO,CAAC,YAAY;aACpK,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;aACxD,IAAI,CAAC,MAAM,CAAC,EAAE;QACnB,CAAC,CAAC,EAAE,CAAC;IAET,OAAO;;;;;;;IAOL,eAAe;oCACiB,aAAa,CAAC,mBAAmB,CAAC;wBAC9C,aAAa,CAAC,OAAO,CAAC,gBAAgB,CAAC,+BAA+B,aAAa,CAAC,sBAAsB,CAAC;4CACvF,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC;+CAClC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,qBAAqB,aAAa,CAAC,UAAU,CAAC;6CAClF,OAAO,CAAC,WAAW;;EAE9D,MAAM,GAAG,YAAY;;gFAEyD,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,OAAO,iLAAiL,CAAC;AAC3L,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAgB;IAC3D,OAAO,iKAAiK,OAAO,CAAC,CAAC,CAAC,gCAAgC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,wUAAwU,CAAC;AAC7iB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,OAAgB;IAC/D,OAAO,kLAAkL,OAAO,CAAC,CAAC,CAAC,gCAAgC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,uUAAuU,CAAC;AAC7jB,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;;;;;;iFAMwE,CAAC;AAClF,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAiC;IAChE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC9D,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACxE,IAAI,WAAW,GAAG,KAAM,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC"}

package/backend/dist/services/workAgentService.d.ts

@@ -4,9 +4,11 @@ export declare const WORK_PROVIDER_STATE_METADATA_KEY = "workProviderState";
 export declare const WORK_EMPTY_MODEL_RESPONSE_METADATA_KEY = "emptyModelResponse";
 export declare const WORK_TOOL_SCHEMAS: Record<string, unknown>[];
 export declare const WORK_WEB_SEARCH_TOOL_SCHEMA: Record<string, unknown>;
+export declare const WORK_COMPUTER_TOOL_SCHEMAS: Record<string, unknown>[];
 export declare function workToolSchemasForTask(task: {
     networkEnabled: boolean;
     userId: string;
+    policyId?: string | null;
 }): Promise<Record<string, unknown>[]>;
 export declare class WorkAgentService {
     private controllers;
@@ -52,6 +54,13 @@ export declare class WorkAgentService {
     private assertStableProviderRouting;
     private contextMessages;
     private executeTool;
+    private assertComputerToolsAvailable;
+    /**
+     * While a human holds the control lease, the agent's eyes and hands are
+     * both off: acting would fight the user's input, and observing could
+     * capture usernames or one-time codes typed during a sign-in.
+     */
+    private assertComputerNotHumanControlled;
     private throwIfCancelled;
 }
 export declare class WorkAgentHttpError extends Error {

package/backend/dist/services/workAgentService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workAgentService.d.ts","sourceRoot":"","sources":["../../src/services/workAgentService.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,OAAO,EACP,cAAc,EAEd,YAAY,EACb,MAAM,kBAAkB,CAAC;AAe1B,eAAO,MAAM,gCAAgC,sBAAsB,CAAC;AACpE,eAAO,MAAM,sCAAsC,uBAAuB,CAAC;AAW3E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EA8EtD,CAAC;AAKF,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAa7D,CAAC;AAEJ,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAMrC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,UAAU,CAAoC;IAEtD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAazD;IAED;;;;;OAKG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAyBf;IAED;;;;;;OAMG;IACG,6BAA6B,CACjC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAsEjB;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGpE;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;YAEa,UAAU;IAiClB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED;;;;OAIG;IACG,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAkBlB;YAEa,6BAA6B;YAW7B,uBAAuB;IA6C/B,uBAAuB,CAAC,CAAC,EAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAIZ;YAEa,6BAA6B;IAqF3C,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE1C;YAEa,kBAAkB;IA2B1B,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAc7D;YAEa,OAAO;YAuuBP,yBAAyB;YA6BzB,2BAA2B;YAuB3B,eAAe;YA0Bf,WAAW;YAsJX,gBAAgB;CAe/B;AAuDD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAKxD;CACF;AAsJD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,EAAE,EACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO,CAAC,EAChE,kBAAkB,CAAC,EAAE,MAAM,GAC1B,iBAAiB,EAAE,CAuLrB;AA4ED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAC3B,YAAY,EAAE,CA+GhB;AA4LD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;eACxC,gBAAgB"}
+{"version":3,"file":"workAgentService.d.ts","sourceRoot":"","sources":["../../src/services/workAgentService.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,WAAW,EACX,OAAO,EACP,cAAc,EAEd,YAAY,EACb,MAAM,kBAAkB,CAAC;AAe1B,eAAO,MAAM,gCAAgC,sBAAsB,CAAC;AACpE,eAAO,MAAM,sCAAsC,uBAAuB,CAAC;AAW3E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EA8EtD,CAAC;AAKF,eAAO,MAAM,2BAA2B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAa7D,CAAC;AAIJ,eAAO,MAAM,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EA0G/D,CAAC;AAEF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAarC;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,WAAW,CAAsC;IACzD,OAAO,CAAC,UAAU,CAAoC;IAEtD,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAazD;IAED;;;;;OAKG;IACG,cAAc,CAClB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAyBf;IAED;;;;;;OAMG;IACG,6BAA6B,CACjC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC,CAsEjB;IAEK,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAGpE;IAEK,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;YAEa,UAAU;IAiClB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED;;;;OAIG;IACG,mBAAmB,CACvB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAkBlB;YAEa,6BAA6B;YAW7B,uBAAuB;IA6C/B,uBAAuB,CAAC,CAAC,EAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAIZ;YAEa,6BAA6B;IAqF3C,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAE1C;YAEa,kBAAkB;IA2B1B,QAAQ,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAc7D;YAEa,OAAO;YA44BP,yBAAyB;YAgCzB,2BAA2B;YAuB3B,eAAe;YA8Bf,WAAW;YA4OX,4BAA4B;IAY1C;;;;OAIG;YACW,gCAAgC;YAYhC,gBAAgB;CAe/B;AAuDD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAKxD;CACF;AAsJD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,WAAW,EAAE,EACvB,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,YAAY,GAAG,OAAO,CAAC,EAChE,kBAAkB,CAAC,EAAE,MAAM,GAC1B,iBAAiB,EAAE,CAuLrB;AA4ED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,kBAAkB,GAC3B,YAAY,EAAE,CA+GhB;AA6YD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;eACxC,gBAAgB"}