strikethroo 4.0.0 → 4.1.0

package/dist/serve/config-write.js

@@ -15,9 +15,12 @@
  * to the workspace's structured configuration file `config/config.yaml` (the
  * file behind the Customize section's Config form). In every case the target
  * file must ALREADY exist (this never creates a new file). When the guards
- * pass it overwrites the file content verbatim. It never deletes or renames.
- * Expected guard failures are returned as a typed result, not thrown; only an
- * unexpected filesystem error surfaces as `fs-error`. Node built-ins only.
+ * pass it overwrites the file content verbatim through the shared containment
+ * helper, so a symlinked file or directory anywhere below the workspace root
+ * (or a non-regular file at the target) is refused as `not-found` rather than
+ * followed. It never deletes or renames the target itself. Expected guard
+ * failures are returned as a typed result, not thrown; only an unexpected
+ * filesystem error surfaces as `fs-error`. Node built-ins only.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -54,8 +57,8 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.writeConfigFile = void 0;
-const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+const safe_fs_1 = require("../skill-scripts/shared/safe-fs");
 /** The directory-backed config kinds that may be written. */
 const KINDS = new Set(['hooks', 'templates']);
 /**
@@ -66,14 +69,15 @@ const KINDS = new Set(['hooks', 'templates']);
  * performs zero filesystem changes on any guard failure.
  */
 const writeConfigFile = async (root, kind, id, content) => {
-    let target;
+    /** Target path relative to `root`; the helper does the on-disk containment. */
+    let relTarget;
     if (kind === 'workspace') {
         // The workspace's single structured config file. No id namespace exists
         // here — `config` is the only valid id, fixed to config/config.yaml.
         if (id !== 'config') {
             return { ok: false, reason: 'invalid-id', message: 'Invalid config file id.' };
         }
-        target = path.resolve(root, 'config', 'config.yaml');
+        relTarget = path.join('config', 'config.yaml');
     }
     else {
         if (!KINDS.has(kind)) {
@@ -84,30 +88,25 @@ const writeConfigFile = async (root, kind, id, content) => {
             return { ok: false, reason: 'invalid-id', message: 'Invalid config file id.' };
         }
         const dir = path.resolve(root, 'config', kind);
-        target = path.resolve(dir, `${id}.md`);
-        // Containment: the resolved target must be a direct, flat child of `dir`.
+        const target = path.resolve(dir, `${id}.md`);
+        // Lexical containment: the resolved target must be a direct, flat child of
+        // `dir`. The on-disk walk below is what rejects links and special files.
         const withinDir = target.startsWith(dir + path.sep);
         const isFlatChild = path.dirname(target) === dir;
         if (!withinDir || !isFlatChild) {
             return { ok: false, reason: 'invalid-id', message: 'Invalid config file id.' };
         }
+        relTarget = path.join('config', kind, `${id}.md`);
     }
-    try {
-        const stat = await fs.promises.stat(target);
-        if (!stat.isFile()) {
-            return { ok: false, reason: 'not-found', message: 'Config file not found.' };
-        }
-    }
-    catch {
-        return { ok: false, reason: 'not-found', message: 'Config file not found.' };
-    }
-    try {
-        await fs.promises.writeFile(target, content, 'utf8');
+    const written = await (0, safe_fs_1.writeFileAtomic)(root, relTarget, content, { mustExist: true });
+    if (!('error' in written))
         return { ok: true };
-    }
-    catch {
+    // Anything the helper refused to resolve (missing, linked, special, escaped)
+    // is reported as absent; only a genuine I/O failure is an fs-error.
+    if (written.error === 'fs-error' || written.error === 'too-large') {
         return { ok: false, reason: 'fs-error', message: 'Failed to write config file.' };
     }
+    return { ok: false, reason: 'not-found', message: 'Config file not found.' };
 };
 exports.writeConfigFile = writeConfigFile;
 //# sourceMappingURL=config-write.js.map

package/dist/serve/config-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-write.js","sourceRoot":"","sources":["../../src/serve/config-write.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAe7B,6DAA6D;AAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9C;;;;;;GAMG;AACI,MAAM,eAAe,GAAG,KAAK,EAClC,IAAY,EACZ,IAAY,EACZ,EAAU,EACV,OAAe,EACa,EAAE;IAC9B,IAAI,MAAc,CAAC;IACnB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;QACzF,CAAC;QAED,yEAAyE;QACzE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAEvC,0EAA0E;QAC1E,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QACjD,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACpF,CAAC;AACH,CAAC,CAAC;AAlDW,QAAA,eAAe,mBAkD1B"}
+{"version":3,"file":"config-write.js","sourceRoot":"","sources":["../../src/serve/config-write.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,6DAAkE;AAelE,6DAA6D;AAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9C;;;;;;GAMG;AACI,MAAM,eAAe,GAAG,KAAK,EAClC,IAAY,EACZ,IAAY,EACZ,EAAU,EACV,OAAe,EACa,EAAE;IAC9B,+EAA+E;IAC/E,IAAI,SAAiB,CAAC;IACtB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;QACD,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;QACzF,CAAC;QAED,yEAAyE;QACzE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAE7C,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QACjD,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QACjF,CAAC;QACD,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,IAAA,yBAAe,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/C,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;AAC/E,CAAC,CAAC;AA9CW,QAAA,eAAe,mBA8C1B"}

package/dist/serve/events.d.ts

@@ -3,15 +3,30 @@
  *
  * Provides `GET /api/events`: a `text/event-stream` that broadcasts a single
  * coalesced `changed` ping whenever the workspace mutates on disk. The event
- * carries no diff payload — clients refetch the affected API data (the browser
- * consumer is a later plan).
+ * carries no diff payload — clients refetch the affected API data.
  *
  * Exposes an {@link EventsHub} that owns the connected-client set and the
  * workspace watcher, plus an `ApiHandler` the server registers so this module
- * stays decoupled from routing. Connections are cleaned up on disconnect so no
- * listeners or sockets leak. Node built-ins only.
+ * stays decoupled from routing. Delivery is bounded per session: at most
+ * {@link MAX_SSE_CLIENTS} streams are admitted, a client whose socket stops
+ * accepting data is written to only once more (one coalesced `changed` on
+ * `drain`), and one still blocked after {@link BLOCKED_TIMEOUT_MS} is ended and
+ * removed. Disconnect and {@link EventsHub.close} release every per-client
+ * timer and listener so nothing leaks. Node built-ins only.
  */
 import * as http from 'http';
+/** Keep-alive comment interval (ms) to hold idle proxies/streams open. */
+export declare const KEEP_ALIVE_MS = 15000;
+/** Upper bound on concurrently connected SSE clients per hub. */
+export declare const MAX_SSE_CLIENTS = 16;
+/** How long (ms) a client may stay blocked on backpressure before it is dropped. */
+export declare const BLOCKED_TIMEOUT_MS = 30000;
+/** The compiled bounds; tests shorten them through the constructor. */
+export interface EventsHubLimits {
+    maxClients: number;
+    blockedTimeoutMs: number;
+    keepAliveMs: number;
+}
 /**
  * Owns the SSE client set and the workspace watcher. One hub per server. Start
  * the watcher with {@link start} after the server is listening; release it with
@@ -22,16 +37,30 @@ export declare class EventsHub {
     private readonly debounceMs?;
     private readonly clients;
     private watcher;
-    constructor(workspaceDir: string, debounceMs?: number | undefined);
+    private readonly limits;
+    constructor(workspaceDir: string, debounceMs?: number | undefined, limits?: Partial<EventsHubLimits>);
     /** Begins watching the workspace; coalesced changes broadcast to all clients. */
     start(): void;
     /** Stops the watcher and ends every open client connection. */
     close(): void;
     /** Number of currently connected SSE clients (used by tests). */
     get clientCount(): number;
-    /** Sends a single coalesced `changed` event to every connected client. */
-    private broadcast;
-    /** Attaches an SSE response: writes headers, registers cleanup on close. */
+    /** Number of connected clients currently held back by backpressure. */
+    get blockedClientCount(): number;
+    /**
+     * Sends a single coalesced `changed` event to every connected client. A
+     * blocked client is owed exactly one `changed` on `drain`, however many
+     * broadcasts it misses. Called by the watcher; public so tests can drive the
+     * stream without touching disk.
+     */
+    broadcast(): void;
+    /**
+     * Writes one chunk, honoring backpressure: when `write()` returns `false` the
+     * client is marked blocked, further writes are skipped, a `drain` listener is
+     * armed to resume, and the slow timer starts.
+     */
+    private send;
+    /** Attaches an SSE response, or refuses it with `503` when at capacity. */
     handleConnection(req: http.IncomingMessage, res: http.ServerResponse): void;
     /** An {@link ApiHandler} for `GET /api/events`; returns false otherwise. */
     apiHandler: (req: http.IncomingMessage, res: http.ServerResponse, ctx: {

package/dist/serve/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAM7B;;;;GAIG;AACH,qBAAa,SAAS;IAKlB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAL9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,OAAO,CAAiC;gBAG7B,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,YAAA;IAGtC,iFAAiF;IACjF,KAAK,IAAI,IAAI;IASb,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAWb,iEAAiE;IACjE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,0EAA0E;IAC1E,OAAO,CAAC,SAAS;IAMjB,4EAA4E;IAC5E,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;IAyB3E,4EAA4E;IAC5E,UAAU,GACR,KAAK,IAAI,CAAC,eAAe,EACzB,KAAK,IAAI,CAAC,cAAc,EACxB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KACxB,OAAO,CAMR;CACH"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,0EAA0E;AAC1E,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,iEAAiE;AACjE,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAQxC,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAeD;;;;GAIG;AACH,qBAAa,SAAS;IAMlB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAN9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAGtB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,YAAA,EACpC,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IASvC,iFAAiF;IACjF,KAAK,IAAI,IAAI;IASb,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAab,iEAAiE;IACjE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,uEAAuE;IACvE,IAAI,kBAAkB,IAAI,MAAM,CAI/B;IAED;;;;;OAKG;IACH,SAAS,IAAI,IAAI;IAOjB;;;;OAIG;IACH,OAAO,CAAC,IAAI;IAYZ,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;IAyD3E,4EAA4E;IAC5E,UAAU,GACR,KAAK,IAAI,CAAC,eAAe,EACzB,KAAK,IAAI,CAAC,cAAc,EACxB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KACxB,OAAO,CAMR;CACH"}

package/dist/serve/events.js

@@ -4,29 +4,40 @@
  *
  * Provides `GET /api/events`: a `text/event-stream` that broadcasts a single
  * coalesced `changed` ping whenever the workspace mutates on disk. The event
- * carries no diff payload — clients refetch the affected API data (the browser
- * consumer is a later plan).
+ * carries no diff payload — clients refetch the affected API data.
  *
  * Exposes an {@link EventsHub} that owns the connected-client set and the
  * workspace watcher, plus an `ApiHandler` the server registers so this module
- * stays decoupled from routing. Connections are cleaned up on disconnect so no
- * listeners or sockets leak. Node built-ins only.
+ * stays decoupled from routing. Delivery is bounded per session: at most
+ * {@link MAX_SSE_CLIENTS} streams are admitted, a client whose socket stops
+ * accepting data is written to only once more (one coalesced `changed` on
+ * `drain`), and one still blocked after {@link BLOCKED_TIMEOUT_MS} is ended and
+ * removed. Disconnect and {@link EventsHub.close} release every per-client
+ * timer and listener so nothing leaks. Node built-ins only.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EventsHub = void 0;
+exports.EventsHub = exports.BLOCKED_TIMEOUT_MS = exports.MAX_SSE_CLIENTS = exports.KEEP_ALIVE_MS = void 0;
 const watcher_1 = require("./watcher");
 /** Keep-alive comment interval (ms) to hold idle proxies/streams open. */
-const KEEP_ALIVE_MS = 15000;
+exports.KEEP_ALIVE_MS = 15000;
+/** Upper bound on concurrently connected SSE clients per hub. */
+exports.MAX_SSE_CLIENTS = 16;
+/** How long (ms) a client may stay blocked on backpressure before it is dropped. */
+exports.BLOCKED_TIMEOUT_MS = 30000;
+/** `Retry-After` (seconds) sent with the `503` for a refused connection. */
+const RETRY_AFTER_SECONDS = 5;
+const CHANGED_EVENT = 'event: changed\ndata: {}\n\n';
+const KEEP_ALIVE_COMMENT = ': keep-alive\n\n';
 /**
  * Owns the SSE client set and the workspace watcher. One hub per server. Start
  * the watcher with {@link start} after the server is listening; release it with
  * {@link close} when the server closes.
  */
 class EventsHub {
-    constructor(workspaceDir, debounceMs) {
+    constructor(workspaceDir, debounceMs, limits = {}) {
         this.workspaceDir = workspaceDir;
         this.debounceMs = debounceMs;
-        this.clients = new Set();
+        this.clients = new Map();
         this.watcher = null;
         /** An {@link ApiHandler} for `GET /api/events`; returns false otherwise. */
         this.apiHandler = (req, res, ctx) => {
@@ -36,6 +47,11 @@ class EventsHub {
             }
             return false;
         };
+        this.limits = {
+            maxClients: limits.maxClients ?? exports.MAX_SSE_CLIENTS,
+            blockedTimeoutMs: limits.blockedTimeoutMs ?? exports.BLOCKED_TIMEOUT_MS,
+            keepAliveMs: limits.keepAliveMs ?? exports.KEEP_ALIVE_MS,
+        };
     }
     /** Begins watching the workspace; coalesced changes broadcast to all clients. */
     start() {
@@ -49,42 +65,112 @@ class EventsHub {
             this.watcher.close();
             this.watcher = null;
         }
-        for (const res of this.clients) {
-            res.end();
+        for (const [res, state] of [...this.clients]) {
+            state.cleanup();
+            // A blocked socket cannot flush an `end()`; drop it instead.
+            if (state.blocked)
+                res.destroy();
+            else
+                res.end();
         }
-        this.clients.clear();
     }
     /** Number of currently connected SSE clients (used by tests). */
     get clientCount() {
         return this.clients.size;
     }
-    /** Sends a single coalesced `changed` event to every connected client. */
+    /** Number of connected clients currently held back by backpressure. */
+    get blockedClientCount() {
+        let count = 0;
+        for (const state of this.clients.values())
+            if (state.blocked)
+                count += 1;
+        return count;
+    }
+    /**
+     * Sends a single coalesced `changed` event to every connected client. A
+     * blocked client is owed exactly one `changed` on `drain`, however many
+     * broadcasts it misses. Called by the watcher; public so tests can drive the
+     * stream without touching disk.
+     */
     broadcast() {
-        for (const res of this.clients) {
-            res.write('event: changed\ndata: {}\n\n');
+        for (const [res, state] of this.clients) {
+            if (state.blocked)
+                state.pending = true;
+            else
+                this.send(res, state, CHANGED_EVENT);
         }
     }
-    /** Attaches an SSE response: writes headers, registers cleanup on close. */
+    /**
+     * Writes one chunk, honoring backpressure: when `write()` returns `false` the
+     * client is marked blocked, further writes are skipped, a `drain` listener is
+     * armed to resume, and the slow timer starts.
+     */
+    send(res, state, chunk) {
+        if (state.blocked)
+            return;
+        if (res.write(chunk))
+            return;
+        state.blocked = true;
+        res.once('drain', state.onDrain);
+        state.slowTimer = setTimeout(() => {
+            state.cleanup();
+            res.destroy();
+        }, this.limits.blockedTimeoutMs);
+        state.slowTimer.unref?.();
+    }
+    /** Attaches an SSE response, or refuses it with `503` when at capacity. */
     handleConnection(req, res) {
+        if (this.clients.size >= this.limits.maxClients) {
+            const body = JSON.stringify({ error: 'Too many event-stream clients.' });
+            res.writeHead(503, {
+                'Content-Type': 'application/json; charset=utf-8',
+                'Content-Length': Buffer.byteLength(body),
+                'Retry-After': String(RETRY_AFTER_SECONDS),
+            });
+            res.end(body);
+            return;
+        }
         res.writeHead(200, {
             'Content-Type': 'text/event-stream',
             'Cache-Control': 'no-cache',
             Connection: 'keep-alive',
         });
-        // Initial comment opens the stream and flushes headers to the client.
-        res.write(': connected\n\n');
-        this.clients.add(res);
-        const keepAlive = setInterval(() => {
-            res.write(': keep-alive\n\n');
-        }, KEEP_ALIVE_MS);
-        // Don't let the keep-alive timer hold the event loop / process open.
-        keepAlive.unref?.();
-        const cleanup = () => {
-            clearInterval(keepAlive);
-            this.clients.delete(res);
+        const state = {
+            blocked: false,
+            pending: false,
+            keepAlive: setInterval(() => this.send(res, state, KEEP_ALIVE_COMMENT), this.limits.keepAliveMs),
+            slowTimer: null,
+            onDrain: () => {
+                if (!this.clients.has(res))
+                    return;
+                state.blocked = false;
+                if (state.slowTimer) {
+                    clearTimeout(state.slowTimer);
+                    state.slowTimer = null;
+                }
+                if (state.pending) {
+                    state.pending = false;
+                    this.send(res, state, CHANGED_EVENT);
+                }
+            },
+            cleanup: () => {
+                if (!this.clients.delete(res))
+                    return;
+                clearInterval(state.keepAlive);
+                if (state.slowTimer)
+                    clearTimeout(state.slowTimer);
+                res.removeListener('drain', state.onDrain);
+                req.removeListener('close', state.cleanup);
+                res.removeListener('close', state.cleanup);
+            },
         };
-        req.on('close', cleanup);
-        res.on('close', cleanup);
+        // Don't let the keep-alive timer hold the event loop / process open.
+        state.keepAlive.unref?.();
+        this.clients.set(res, state);
+        req.on('close', state.cleanup);
+        res.on('close', state.cleanup);
+        // Initial comment opens the stream and flushes headers to the client.
+        this.send(res, state, ': connected\n\n');
     }
 }
 exports.EventsHub = EventsHub;

package/dist/serve/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAGH,uCAAqE;AAErE,0EAA0E;AAC1E,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;GAIG;AACH,MAAa,SAAS;IAIpB,YACmB,YAAoB,EACpB,UAAmB;QADnB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAS;QALrB,YAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,YAAO,GAA4B,IAAI,CAAC;QAmEhD,4EAA4E;QAC5E,eAAU,GAAG,CACX,GAAyB,EACzB,GAAwB,EACxB,GAAyB,EAChB,EAAE;YACX,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;IAzEC,CAAC;IAEJ,iFAAiF;IACjF,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAA,gCAAsB,EACnC,IAAI,CAAC,YAAY,EACjB,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EACtB,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAClE,SAAS;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gBAAgB,CAAC,GAAyB,EAAE,GAAwB;QAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,sEAAsE;QACtE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC,EAAE,aAAa,CAAC,CAAC;QAClB,qEAAqE;QACrE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;CAcF;AAjFD,8BAiFC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAGH,uCAAqE;AAErE,0EAA0E;AAC7D,QAAA,aAAa,GAAG,KAAK,CAAC;AAEnC,iEAAiE;AACpD,QAAA,eAAe,GAAG,EAAE,CAAC;AAElC,oFAAoF;AACvE,QAAA,kBAAkB,GAAG,KAAK,CAAC;AAExC,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,aAAa,GAAG,8BAA8B,CAAC;AACrD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAsB9C;;;;GAIG;AACH,MAAa,SAAS;IAKpB,YACmB,YAAoB,EACpB,UAAmB,EACpC,SAAmC,EAAE;QAFpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAS;QANrB,YAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC/D,YAAO,GAA4B,IAAI,CAAC;QA2IhD,4EAA4E;QAC5E,eAAU,GAAG,CACX,GAAyB,EACzB,GAAwB,EACxB,GAAyB,EAChB,EAAE;YACX,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QA9IA,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,uBAAe;YAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,0BAAkB;YAC/D,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,qBAAa;SACjD,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAA,gCAAsB,EACnC,IAAI,CAAC,YAAY,EACjB,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EACtB,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,6DAA6D;YAC7D,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,CAAC,OAAO,EAAE,CAAC;;gBAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,uEAAuE;IACvE,IAAI,kBAAkB;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,KAAK,CAAC,OAAO;gBAAE,KAAK,IAAI,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,SAAS;QACP,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;;gBACnC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,IAAI,CAAC,GAAwB,EAAE,KAAkB,EAAE,KAAa;QACtE,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAyB,EAAE,GAAwB;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,iCAAiC;gBACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzC,aAAa,EAAE,MAAM,CAAC,mBAAmB,CAAC;aAC3C,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAgB;YACzB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,WAAW,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB;YACD,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO;gBACnC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpB,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC9B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACzB,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,OAAO;gBACtC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC;QACF,qEAAqE;QACrE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAE/B,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC3C,CAAC;CAcF;AAzJD,8BAyJC"}

package/dist/serve/self-review.d.ts

@@ -14,9 +14,17 @@
  * Untrusted input (the path string) is never passed to the shell: `spawn` is
  * invoked with an argv array, and the path is rejected before spawning unless it
  * resolves to an existing file under `plans/` or `archive/`. Node built-ins only.
+ *
+ * Launches are bounded: a {@link LaunchRegistry} tracks the plans whose child is
+ * still running, refusing a duplicate for the same plan and anything past
+ * {@link MAX_CONCURRENT_SELF_REVIEWS}. The registry is in-memory and per server
+ * instance: a restart resets the accounting, and the detached children — which
+ * the viewer never waits on — can outlive it. It is not a job manager.
  */
 /** The binary name looked up on PATH and spawned. */
 export declare const SELF_REVIEW_BINARY = "self-review";
+/** Upper bound on self-review children running at once per server instance. */
+export declare const MAX_CONCURRENT_SELF_REVIEWS = 2;
 /** Where to obtain self-review; surfaced by the SPA when it is not installed. */
 export declare const SELF_REVIEW_URL = "https://github.com/e0ipso/self-review";
 /**
@@ -40,11 +48,26 @@ export interface LaunchResult {
         ok: false;
         error: string;
     };
+    /** Extra response headers (e.g. `Retry-After` on a busy refusal). */
+    headers?: Record<string, string>;
+}
+/**
+ * The plans (by canonical absolute path) whose self-review child is running.
+ * One per server instance; see the module comment for what it is not.
+ */
+export type LaunchRegistry = Set<string>;
+/** Creates an empty {@link LaunchRegistry}. */
+export declare const createLaunchRegistry: () => LaunchRegistry;
+/** The slice of `ChildProcess` the launcher relies on; fakes implement it. */
+export interface SpawnedChild {
+    once(event: string, listener: (...args: never[]) => void): unknown;
+    unref(): void;
 }
-/** Seams for testing: availability probe and the detached spawn. */
+/** Seams for testing: availability probe, the spawn, and the registry. */
 export interface LaunchDeps {
     available?: () => boolean;
-    spawnDetached?: (command: string, args: string[]) => void;
+    spawn?: (command: string, args: string[]) => SpawnedChild;
+    registry?: LaunchRegistry;
 }
 /**
  * Resolves a client-supplied plan path to an absolute path, requiring it to be
@@ -54,7 +77,10 @@ export interface LaunchDeps {
  * `root` is the absolute `.ai/strikethroo` directory; client paths are the
  * workspace-relative form the SPA shows (e.g. `.ai/strikethroo/plans/NN--s/…`),
  * so they are resolved against the project root (`root/../..`). Absolute client
- * paths are accepted too — the containment check is what enforces safety.
+ * paths are accepted too — the containment check is what enforces safety: the
+ * lexical check below picks the subtree, and the shared helper walks the real
+ * components so a symlinked plan file or directory is refused rather than
+ * followed out of the workspace.
  */
 export declare const resolveReviewPath: (root: string, clientPath: string) => {
     absPath: string;
@@ -63,9 +89,13 @@ export declare const resolveReviewPath: (root: string, clientPath: string) => {
     status: number;
 };
 /**
- * Validates `clientPath` and, if the binary is available, launches
- * `self-review <absolutePath>` detached. Pure of HTTP concerns: returns the
- * status/body the endpoint should send so it stays unit-testable.
+ * Validates `clientPath` and, if the binary is available and a slot is free,
+ * launches `self-review <absolutePath>` detached. Resolves `200` only after the
+ * child's `spawn` event; a launch `error` (e.g. `ENOENT`) is a fixed `500`. The
+ * plan's slot is taken synchronously before the spawn, so two simultaneous
+ * requests for one plan cannot both launch, and is released — idempotently —
+ * when the child exits, errors, or fails to launch. Pure of HTTP concerns:
+ * returns the status/body the endpoint should send so it stays unit-testable.
  */
-export declare const launchSelfReview: (root: string, clientPath: string, deps?: LaunchDeps) => LaunchResult;
+export declare const launchSelfReview: (root: string, clientPath: string, deps?: LaunchDeps) => Promise<LaunchResult>;
 //# sourceMappingURL=self-review.d.ts.map

package/dist/serve/self-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-review.d.ts","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,iFAAiF;AACjF,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAmCvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,KACpD,OAQF,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3D;AAWD;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EACZ,YAAY,MAAM,KACjB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CA4BvD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,YAAY,MAAM,EAClB,OAAM,UAAe,KACpB,YAwBF,CAAC"}
+{"version":3,"file":"self-review.d.ts","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAK7C,iFAAiF;AACjF,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAmCvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,KACpD,OAQF,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;AAEzC,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,QAAO,cAAmC,CAAC;AAK5E,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC;IACnE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,CAAC;IAC1D,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAkBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EACZ,YAAY,MAAM,KACjB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAqCvD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,YAAY,MAAM,EAClB,OAAM,UAAe,KACpB,OAAO,CAAC,YAAY,CAmDtB,CAAC"}