strikethroo 4.0.0 → 4.1.1

package/dist/serve/events.d.ts

@@ -3,15 +3,30 @@
  *
  * Provides `GET /api/events`: a `text/event-stream` that broadcasts a single
  * coalesced `changed` ping whenever the workspace mutates on disk. The event
- * carries no diff payload — clients refetch the affected API data (the browser
- * consumer is a later plan).
+ * carries no diff payload — clients refetch the affected API data.
  *
  * Exposes an {@link EventsHub} that owns the connected-client set and the
  * workspace watcher, plus an `ApiHandler` the server registers so this module
- * stays decoupled from routing. Connections are cleaned up on disconnect so no
- * listeners or sockets leak. Node built-ins only.
+ * stays decoupled from routing. Delivery is bounded per session: at most
+ * {@link MAX_SSE_CLIENTS} streams are admitted, a client whose socket stops
+ * accepting data is written to only once more (one coalesced `changed` on
+ * `drain`), and one still blocked after {@link BLOCKED_TIMEOUT_MS} is ended and
+ * removed. Disconnect and {@link EventsHub.close} release every per-client
+ * timer and listener so nothing leaks. Node built-ins only.
  */
 import * as http from 'http';
+/** Keep-alive comment interval (ms) to hold idle proxies/streams open. */
+export declare const KEEP_ALIVE_MS = 15000;
+/** Upper bound on concurrently connected SSE clients per hub. */
+export declare const MAX_SSE_CLIENTS = 16;
+/** How long (ms) a client may stay blocked on backpressure before it is dropped. */
+export declare const BLOCKED_TIMEOUT_MS = 30000;
+/** The compiled bounds; tests shorten them through the constructor. */
+export interface EventsHubLimits {
+    maxClients: number;
+    blockedTimeoutMs: number;
+    keepAliveMs: number;
+}
 /**
  * Owns the SSE client set and the workspace watcher. One hub per server. Start
  * the watcher with {@link start} after the server is listening; release it with
@@ -22,16 +37,30 @@ export declare class EventsHub {
     private readonly debounceMs?;
     private readonly clients;
     private watcher;
-    constructor(workspaceDir: string, debounceMs?: number | undefined);
+    private readonly limits;
+    constructor(workspaceDir: string, debounceMs?: number | undefined, limits?: Partial<EventsHubLimits>);
     /** Begins watching the workspace; coalesced changes broadcast to all clients. */
     start(): void;
     /** Stops the watcher and ends every open client connection. */
     close(): void;
     /** Number of currently connected SSE clients (used by tests). */
     get clientCount(): number;
-    /** Sends a single coalesced `changed` event to every connected client. */
-    private broadcast;
-    /** Attaches an SSE response: writes headers, registers cleanup on close. */
+    /** Number of connected clients currently held back by backpressure. */
+    get blockedClientCount(): number;
+    /**
+     * Sends a single coalesced `changed` event to every connected client. A
+     * blocked client is owed exactly one `changed` on `drain`, however many
+     * broadcasts it misses. Called by the watcher; public so tests can drive the
+     * stream without touching disk.
+     */
+    broadcast(): void;
+    /**
+     * Writes one chunk, honoring backpressure: when `write()` returns `false` the
+     * client is marked blocked, further writes are skipped, a `drain` listener is
+     * armed to resume, and the slow timer starts.
+     */
+    private send;
+    /** Attaches an SSE response, or refuses it with `503` when at capacity. */
     handleConnection(req: http.IncomingMessage, res: http.ServerResponse): void;
     /** An {@link ApiHandler} for `GET /api/events`; returns false otherwise. */
     apiHandler: (req: http.IncomingMessage, res: http.ServerResponse, ctx: {

package/dist/serve/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAM7B;;;;GAIG;AACH,qBAAa,SAAS;IAKlB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAL9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D,OAAO,CAAC,OAAO,CAAiC;gBAG7B,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,YAAA;IAGtC,iFAAiF;IACjF,KAAK,IAAI,IAAI;IASb,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAWb,iEAAiE;IACjE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,0EAA0E;IAC1E,OAAO,CAAC,SAAS;IAMjB,4EAA4E;IAC5E,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;IAyB3E,4EAA4E;IAC5E,UAAU,GACR,KAAK,IAAI,CAAC,eAAe,EACzB,KAAK,IAAI,CAAC,cAAc,EACxB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KACxB,OAAO,CAMR;CACH"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,0EAA0E;AAC1E,eAAO,MAAM,aAAa,QAAQ,CAAC;AAEnC,iEAAiE;AACjE,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAQxC,uEAAuE;AACvE,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAeD;;;;GAIG;AACH,qBAAa,SAAS;IAMlB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAN9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+C;IACvE,OAAO,CAAC,OAAO,CAAiC;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;gBAGtB,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,YAAA,EACpC,MAAM,GAAE,OAAO,CAAC,eAAe,CAAM;IASvC,iFAAiF;IACjF,KAAK,IAAI,IAAI;IASb,+DAA+D;IAC/D,KAAK,IAAI,IAAI;IAab,iEAAiE;IACjE,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,uEAAuE;IACvE,IAAI,kBAAkB,IAAI,MAAM,CAI/B;IAED;;;;;OAKG;IACH,SAAS,IAAI,IAAI;IAOjB;;;;OAIG;IACH,OAAO,CAAC,IAAI;IAYZ,2EAA2E;IAC3E,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI;IAyD3E,4EAA4E;IAC5E,UAAU,GACR,KAAK,IAAI,CAAC,eAAe,EACzB,KAAK,IAAI,CAAC,cAAc,EACxB,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,KACxB,OAAO,CAMR;CACH"}

package/dist/serve/events.js

@@ -4,29 +4,40 @@
  *
  * Provides `GET /api/events`: a `text/event-stream` that broadcasts a single
  * coalesced `changed` ping whenever the workspace mutates on disk. The event
- * carries no diff payload — clients refetch the affected API data (the browser
- * consumer is a later plan).
+ * carries no diff payload — clients refetch the affected API data.
  *
  * Exposes an {@link EventsHub} that owns the connected-client set and the
  * workspace watcher, plus an `ApiHandler` the server registers so this module
- * stays decoupled from routing. Connections are cleaned up on disconnect so no
- * listeners or sockets leak. Node built-ins only.
+ * stays decoupled from routing. Delivery is bounded per session: at most
+ * {@link MAX_SSE_CLIENTS} streams are admitted, a client whose socket stops
+ * accepting data is written to only once more (one coalesced `changed` on
+ * `drain`), and one still blocked after {@link BLOCKED_TIMEOUT_MS} is ended and
+ * removed. Disconnect and {@link EventsHub.close} release every per-client
+ * timer and listener so nothing leaks. Node built-ins only.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.EventsHub = void 0;
+exports.EventsHub = exports.BLOCKED_TIMEOUT_MS = exports.MAX_SSE_CLIENTS = exports.KEEP_ALIVE_MS = void 0;
 const watcher_1 = require("./watcher");
 /** Keep-alive comment interval (ms) to hold idle proxies/streams open. */
-const KEEP_ALIVE_MS = 15000;
+exports.KEEP_ALIVE_MS = 15000;
+/** Upper bound on concurrently connected SSE clients per hub. */
+exports.MAX_SSE_CLIENTS = 16;
+/** How long (ms) a client may stay blocked on backpressure before it is dropped. */
+exports.BLOCKED_TIMEOUT_MS = 30000;
+/** `Retry-After` (seconds) sent with the `503` for a refused connection. */
+const RETRY_AFTER_SECONDS = 5;
+const CHANGED_EVENT = 'event: changed\ndata: {}\n\n';
+const KEEP_ALIVE_COMMENT = ': keep-alive\n\n';
 /**
  * Owns the SSE client set and the workspace watcher. One hub per server. Start
  * the watcher with {@link start} after the server is listening; release it with
  * {@link close} when the server closes.
  */
 class EventsHub {
-    constructor(workspaceDir, debounceMs) {
+    constructor(workspaceDir, debounceMs, limits = {}) {
         this.workspaceDir = workspaceDir;
         this.debounceMs = debounceMs;
-        this.clients = new Set();
+        this.clients = new Map();
         this.watcher = null;
         /** An {@link ApiHandler} for `GET /api/events`; returns false otherwise. */
         this.apiHandler = (req, res, ctx) => {
@@ -36,6 +47,11 @@ class EventsHub {
             }
             return false;
         };
+        this.limits = {
+            maxClients: limits.maxClients ?? exports.MAX_SSE_CLIENTS,
+            blockedTimeoutMs: limits.blockedTimeoutMs ?? exports.BLOCKED_TIMEOUT_MS,
+            keepAliveMs: limits.keepAliveMs ?? exports.KEEP_ALIVE_MS,
+        };
     }
     /** Begins watching the workspace; coalesced changes broadcast to all clients. */
     start() {
@@ -49,42 +65,112 @@ class EventsHub {
             this.watcher.close();
             this.watcher = null;
         }
-        for (const res of this.clients) {
-            res.end();
+        for (const [res, state] of [...this.clients]) {
+            state.cleanup();
+            // A blocked socket cannot flush an `end()`; drop it instead.
+            if (state.blocked)
+                res.destroy();
+            else
+                res.end();
         }
-        this.clients.clear();
     }
     /** Number of currently connected SSE clients (used by tests). */
     get clientCount() {
         return this.clients.size;
     }
-    /** Sends a single coalesced `changed` event to every connected client. */
+    /** Number of connected clients currently held back by backpressure. */
+    get blockedClientCount() {
+        let count = 0;
+        for (const state of this.clients.values())
+            if (state.blocked)
+                count += 1;
+        return count;
+    }
+    /**
+     * Sends a single coalesced `changed` event to every connected client. A
+     * blocked client is owed exactly one `changed` on `drain`, however many
+     * broadcasts it misses. Called by the watcher; public so tests can drive the
+     * stream without touching disk.
+     */
     broadcast() {
-        for (const res of this.clients) {
-            res.write('event: changed\ndata: {}\n\n');
+        for (const [res, state] of this.clients) {
+            if (state.blocked)
+                state.pending = true;
+            else
+                this.send(res, state, CHANGED_EVENT);
         }
     }
-    /** Attaches an SSE response: writes headers, registers cleanup on close. */
+    /**
+     * Writes one chunk, honoring backpressure: when `write()` returns `false` the
+     * client is marked blocked, further writes are skipped, a `drain` listener is
+     * armed to resume, and the slow timer starts.
+     */
+    send(res, state, chunk) {
+        if (state.blocked)
+            return;
+        if (res.write(chunk))
+            return;
+        state.blocked = true;
+        res.once('drain', state.onDrain);
+        state.slowTimer = setTimeout(() => {
+            state.cleanup();
+            res.destroy();
+        }, this.limits.blockedTimeoutMs);
+        state.slowTimer.unref?.();
+    }
+    /** Attaches an SSE response, or refuses it with `503` when at capacity. */
     handleConnection(req, res) {
+        if (this.clients.size >= this.limits.maxClients) {
+            const body = JSON.stringify({ error: 'Too many event-stream clients.' });
+            res.writeHead(503, {
+                'Content-Type': 'application/json; charset=utf-8',
+                'Content-Length': Buffer.byteLength(body),
+                'Retry-After': String(RETRY_AFTER_SECONDS),
+            });
+            res.end(body);
+            return;
+        }
         res.writeHead(200, {
             'Content-Type': 'text/event-stream',
             'Cache-Control': 'no-cache',
             Connection: 'keep-alive',
         });
-        // Initial comment opens the stream and flushes headers to the client.
-        res.write(': connected\n\n');
-        this.clients.add(res);
-        const keepAlive = setInterval(() => {
-            res.write(': keep-alive\n\n');
-        }, KEEP_ALIVE_MS);
-        // Don't let the keep-alive timer hold the event loop / process open.
-        keepAlive.unref?.();
-        const cleanup = () => {
-            clearInterval(keepAlive);
-            this.clients.delete(res);
+        const state = {
+            blocked: false,
+            pending: false,
+            keepAlive: setInterval(() => this.send(res, state, KEEP_ALIVE_COMMENT), this.limits.keepAliveMs),
+            slowTimer: null,
+            onDrain: () => {
+                if (!this.clients.has(res))
+                    return;
+                state.blocked = false;
+                if (state.slowTimer) {
+                    clearTimeout(state.slowTimer);
+                    state.slowTimer = null;
+                }
+                if (state.pending) {
+                    state.pending = false;
+                    this.send(res, state, CHANGED_EVENT);
+                }
+            },
+            cleanup: () => {
+                if (!this.clients.delete(res))
+                    return;
+                clearInterval(state.keepAlive);
+                if (state.slowTimer)
+                    clearTimeout(state.slowTimer);
+                res.removeListener('drain', state.onDrain);
+                req.removeListener('close', state.cleanup);
+                res.removeListener('close', state.cleanup);
+            },
         };
-        req.on('close', cleanup);
-        res.on('close', cleanup);
+        // Don't let the keep-alive timer hold the event loop / process open.
+        state.keepAlive.unref?.();
+        this.clients.set(res, state);
+        req.on('close', state.cleanup);
+        res.on('close', state.cleanup);
+        // Initial comment opens the stream and flushes headers to the client.
+        this.send(res, state, ': connected\n\n');
     }
 }
 exports.EventsHub = EventsHub;

package/dist/serve/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAGH,uCAAqE;AAErE,0EAA0E;AAC1E,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;GAIG;AACH,MAAa,SAAS;IAIpB,YACmB,YAAoB,EACpB,UAAmB;QADnB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAS;QALrB,YAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;QAClD,YAAO,GAA4B,IAAI,CAAC;QAmEhD,4EAA4E;QAC5E,eAAU,GAAG,CACX,GAAyB,EACzB,GAAwB,EACxB,GAAyB,EAChB,EAAE;YACX,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;IAzEC,CAAC;IAEJ,iFAAiF;IACjF,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAA,gCAAsB,EACnC,IAAI,CAAC,YAAY,EACjB,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EACtB,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAClE,SAAS;QACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,gBAAgB,CAAC,GAAyB,EAAE,GAAwB;QAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,sEAAsE;QACtE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE7B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChC,CAAC,EAAE,aAAa,CAAC,CAAC;QAClB,qEAAqE;QACrE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3B,CAAC;CAcF;AAjFD,8BAiFC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/serve/events.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAGH,uCAAqE;AAErE,0EAA0E;AAC7D,QAAA,aAAa,GAAG,KAAK,CAAC;AAEnC,iEAAiE;AACpD,QAAA,eAAe,GAAG,EAAE,CAAC;AAElC,oFAAoF;AACvE,QAAA,kBAAkB,GAAG,KAAK,CAAC;AAExC,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,aAAa,GAAG,8BAA8B,CAAC;AACrD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAsB9C;;;;GAIG;AACH,MAAa,SAAS;IAKpB,YACmB,YAAoB,EACpB,UAAmB,EACpC,SAAmC,EAAE;QAFpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,eAAU,GAAV,UAAU,CAAS;QANrB,YAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC/D,YAAO,GAA4B,IAAI,CAAC;QA2IhD,4EAA4E;QAC5E,eAAU,GAAG,CACX,GAAyB,EACzB,GAAwB,EACxB,GAAyB,EAChB,EAAE;YACX,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACtE,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QA9IA,IAAI,CAAC,MAAM,GAAG;YACZ,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,uBAAe;YAChD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,0BAAkB;YAC/D,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,qBAAa;SACjD,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAA,gCAAsB,EACnC,IAAI,CAAC,YAAY,EACjB,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EACtB,IAAI,CAAC,UAAU,CAChB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,6DAA6D;YAC7D,IAAI,KAAK,CAAC,OAAO;gBAAE,GAAG,CAAC,OAAO,EAAE,CAAC;;gBAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,uEAAuE;IACvE,IAAI,kBAAkB;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,KAAK,CAAC,OAAO;gBAAE,KAAK,IAAI,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,SAAS;QACP,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO;gBAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;;gBACnC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,IAAI,CAAC,GAAwB,EAAE,KAAkB,EAAE,KAAa;QACtE,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,KAAK,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACjC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,gBAAgB,CAAC,GAAyB,EAAE,GAAwB;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,iCAAiC;gBACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;gBACzC,aAAa,EAAE,MAAM,CAAC,mBAAmB,CAAC;aAC3C,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QAEH,MAAM,KAAK,GAAgB;YACzB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,WAAW,CACpB,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,kBAAkB,CAAC,EAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,CACxB;YACD,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,OAAO;gBACnC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpB,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC9B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACzB,CAAC;gBACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAClB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YACD,OAAO,EAAE,GAAG,EAAE;gBACZ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;oBAAE,OAAO;gBACtC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,SAAS;oBAAE,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACnD,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;SACF,CAAC;QACF,qEAAqE;QACrE,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAE/B,sEAAsE;QACtE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAC3C,CAAC;CAcF;AAzJD,8BAyJC"}

package/dist/serve/self-review.d.ts

@@ -14,9 +14,17 @@
  * Untrusted input (the path string) is never passed to the shell: `spawn` is
  * invoked with an argv array, and the path is rejected before spawning unless it
  * resolves to an existing file under `plans/` or `archive/`. Node built-ins only.
+ *
+ * Launches are bounded: a {@link LaunchRegistry} tracks the plans whose child is
+ * still running, refusing a duplicate for the same plan and anything past
+ * {@link MAX_CONCURRENT_SELF_REVIEWS}. The registry is in-memory and per server
+ * instance: a restart resets the accounting, and the detached children — which
+ * the viewer never waits on — can outlive it. It is not a job manager.
  */
 /** The binary name looked up on PATH and spawned. */
 export declare const SELF_REVIEW_BINARY = "self-review";
+/** Upper bound on self-review children running at once per server instance. */
+export declare const MAX_CONCURRENT_SELF_REVIEWS = 2;
 /** Where to obtain self-review; surfaced by the SPA when it is not installed. */
 export declare const SELF_REVIEW_URL = "https://github.com/e0ipso/self-review";
 /**
@@ -40,11 +48,26 @@ export interface LaunchResult {
         ok: false;
         error: string;
     };
+    /** Extra response headers (e.g. `Retry-After` on a busy refusal). */
+    headers?: Record<string, string>;
+}
+/**
+ * The plans (by canonical absolute path) whose self-review child is running.
+ * One per server instance; see the module comment for what it is not.
+ */
+export type LaunchRegistry = Set<string>;
+/** Creates an empty {@link LaunchRegistry}. */
+export declare const createLaunchRegistry: () => LaunchRegistry;
+/** The slice of `ChildProcess` the launcher relies on; fakes implement it. */
+export interface SpawnedChild {
+    once(event: string, listener: (...args: never[]) => void): unknown;
+    unref(): void;
 }
-/** Seams for testing: availability probe and the detached spawn. */
+/** Seams for testing: availability probe, the spawn, and the registry. */
 export interface LaunchDeps {
     available?: () => boolean;
-    spawnDetached?: (command: string, args: string[]) => void;
+    spawn?: (command: string, args: string[]) => SpawnedChild;
+    registry?: LaunchRegistry;
 }
 /**
  * Resolves a client-supplied plan path to an absolute path, requiring it to be
@@ -54,7 +77,10 @@ export interface LaunchDeps {
  * `root` is the absolute `.ai/strikethroo` directory; client paths are the
  * workspace-relative form the SPA shows (e.g. `.ai/strikethroo/plans/NN--s/…`),
  * so they are resolved against the project root (`root/../..`). Absolute client
- * paths are accepted too — the containment check is what enforces safety.
+ * paths are accepted too — the containment check is what enforces safety: the
+ * lexical check below picks the subtree, and the shared helper walks the real
+ * components so a symlinked plan file or directory is refused rather than
+ * followed out of the workspace.
  */
 export declare const resolveReviewPath: (root: string, clientPath: string) => {
     absPath: string;
@@ -63,9 +89,13 @@ export declare const resolveReviewPath: (root: string, clientPath: string) => {
     status: number;
 };
 /**
- * Validates `clientPath` and, if the binary is available, launches
- * `self-review <absolutePath>` detached. Pure of HTTP concerns: returns the
- * status/body the endpoint should send so it stays unit-testable.
+ * Validates `clientPath` and, if the binary is available and a slot is free,
+ * launches `self-review <absolutePath>` detached. Resolves `200` only after the
+ * child's `spawn` event; a launch `error` (e.g. `ENOENT`) is a fixed `500`. The
+ * plan's slot is taken synchronously before the spawn, so two simultaneous
+ * requests for one plan cannot both launch, and is released — idempotently —
+ * when the child exits, errors, or fails to launch. Pure of HTTP concerns:
+ * returns the status/body the endpoint should send so it stays unit-testable.
  */
-export declare const launchSelfReview: (root: string, clientPath: string, deps?: LaunchDeps) => LaunchResult;
+export declare const launchSelfReview: (root: string, clientPath: string, deps?: LaunchDeps) => Promise<LaunchResult>;
 //# sourceMappingURL=self-review.d.ts.map

package/dist/serve/self-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"self-review.d.ts","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,iFAAiF;AACjF,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAmCvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,KACpD,OAQF,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;CAC3D;AAWD;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EACZ,YAAY,MAAM,KACjB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CA4BvD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,YAAY,MAAM,EAClB,OAAM,UAAe,KACpB,YAwBF,CAAC"}
+{"version":3,"file":"self-review.d.ts","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAOH,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAK7C,iFAAiF;AACjF,eAAO,MAAM,eAAe,0CAA0C,CAAC;AAmCvE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAK,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,KACpD,OAQF,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,YAAY;IAC3B,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;AAEzC,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,QAAO,cAAmC,CAAC;AAK5E,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC;IACnE,KAAK,IAAI,IAAI,CAAC;CACf;AAED,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,YAAY,CAAC;IAC1D,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAkBD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EACZ,YAAY,MAAM,KACjB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAqCvD,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EACZ,YAAY,MAAM,EAClB,OAAM,UAAe,KACpB,OAAO,CAAC,YAAY,CAmDtB,CAAC"}

package/dist/serve/self-review.js

@@ -15,6 +15,12 @@
  * Untrusted input (the path string) is never passed to the shell: `spawn` is
  * invoked with an argv array, and the path is rejected before spawning unless it
  * resolves to an existing file under `plans/` or `archive/`. Node built-ins only.
+ *
+ * Launches are bounded: a {@link LaunchRegistry} tracks the plans whose child is
+ * still running, refusing a duplicate for the same plan and anything past
+ * {@link MAX_CONCURRENT_SELF_REVIEWS}. The registry is in-memory and per server
+ * instance: a restart resets the accounting, and the detached children — which
+ * the viewer never waits on — can outlive it. It is not a job manager.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -50,12 +56,17 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.launchSelfReview = exports.resolveReviewPath = exports.isSelfReviewAvailable = exports.SELF_REVIEW_URL = exports.SELF_REVIEW_BINARY = void 0;
+exports.launchSelfReview = exports.resolveReviewPath = exports.createLaunchRegistry = exports.isSelfReviewAvailable = exports.SELF_REVIEW_URL = exports.MAX_CONCURRENT_SELF_REVIEWS = exports.SELF_REVIEW_BINARY = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
+const safe_fs_1 = require("../skill-scripts/shared/safe-fs");
 /** The binary name looked up on PATH and spawned. */
 exports.SELF_REVIEW_BINARY = 'self-review';
+/** Upper bound on self-review children running at once per server instance. */
+exports.MAX_CONCURRENT_SELF_REVIEWS = 2;
+/** Seconds a client should wait before retrying a `429` launch. */
+const BUSY_RETRY_AFTER_SECONDS = 30;
 /** Where to obtain self-review; surfaced by the SPA when it is not installed. */
 exports.SELF_REVIEW_URL = 'https://github.com/e0ipso/self-review';
 /** Cache key derived from the environment inputs that affect the PATH scan. */
@@ -104,13 +115,21 @@ const isSelfReviewAvailable = (env = process.env) => {
     return result;
 };
 exports.isSelfReviewAvailable = isSelfReviewAvailable;
-/** Spawns the binary detached and unref'd so it outlives the request. */
-const spawnDetached = (command, args) => {
-    const child = (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
-    child.on('error', () => {
-        /* a failed launch must not crash the server */
-    });
-    child.unref();
+/** Creates an empty {@link LaunchRegistry}. */
+const createLaunchRegistry = () => new Set();
+exports.createLaunchRegistry = createLaunchRegistry;
+/** Fallback registry for callers that do not own one (tests pass their own). */
+const defaultRegistry = (0, exports.createLaunchRegistry)();
+/** Spawns the binary detached with no stdio so it can outlive the request. */
+const spawnDetached = (command, args) => (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
+/** Resolves once the child reports `spawn`; rejects on a launch `error`. */
+const awaitSpawn = (child) => new Promise((resolve, reject) => {
+    child.once('spawn', () => resolve());
+    child.once('error', (err) => reject(err));
+});
+const LAUNCH_FAILED = {
+    status: 500,
+    body: { ok: false, error: 'Failed to launch self-review.' },
 };
 /**
  * Resolves a client-supplied plan path to an absolute path, requiring it to be
@@ -120,40 +139,56 @@ const spawnDetached = (command, args) => {
  * `root` is the absolute `.ai/strikethroo` directory; client paths are the
  * workspace-relative form the SPA shows (e.g. `.ai/strikethroo/plans/NN--s/…`),
  * so they are resolved against the project root (`root/../..`). Absolute client
- * paths are accepted too — the containment check is what enforces safety.
+ * paths are accepted too — the containment check is what enforces safety: the
+ * lexical check below picks the subtree, and the shared helper walks the real
+ * components so a symlinked plan file or directory is refused rather than
+ * followed out of the workspace.
  */
 const resolveReviewPath = (root, clientPath) => {
     if (typeof clientPath !== 'string' || clientPath.trim() === '') {
         return { error: 'A plan path is required.', status: 400 };
     }
-    const projectRoot = path.resolve(root, '..', '..');
+    const absRoot = path.resolve(root);
+    const projectRoot = path.resolve(absRoot, '..', '..');
     const resolved = path.resolve(projectRoot, clientPath);
-    const plansDir = path.join(root, 'plans');
-    const archiveDir = path.join(root, 'archive');
-    const within = (dir) => resolved === dir || resolved.startsWith(dir + path.sep);
-    if (!within(plansDir) && !within(archiveDir)) {
-        return {
-            error: 'Plan path must be inside the workspace plans/ or archive/ directory.',
-            status: 400,
-        };
+    const rel = path.relative(absRoot, resolved);
+    const first = rel.split(path.sep)[0];
+    const outside = {
+        error: 'Plan path must be inside the workspace plans/ or archive/ directory.',
+        status: 400,
+    };
+    if (path.isAbsolute(rel) || first === '..' || (first !== 'plans' && first !== 'archive')) {
+        return outside;
     }
-    try {
-        if (!fs.statSync(resolved).isFile()) {
-            return { error: 'Plan path does not point to a file.', status: 404 };
+    const contained = (0, safe_fs_1.resolveContained)(absRoot, rel);
+    if ('error' in contained) {
+        switch (contained.error) {
+            case 'not-found':
+                return { error: 'Plan file not found.', status: 404 };
+            case 'not-a-file':
+            case 'not-a-directory':
+                return { error: 'Plan path does not point to a file.', status: 404 };
+            case 'fs-error':
+                return { error: 'Plan path could not be inspected.', status: 500 };
+            default:
+                // invalid-path, outside-root, symlink: the path does not denote a plain
+                // file inside the workspace.
+                return outside;
         }
     }
-    catch {
-        return { error: 'Plan file not found.', status: 404 };
-    }
     return { absPath: resolved };
 };
 exports.resolveReviewPath = resolveReviewPath;
 /**
- * Validates `clientPath` and, if the binary is available, launches
- * `self-review <absolutePath>` detached. Pure of HTTP concerns: returns the
- * status/body the endpoint should send so it stays unit-testable.
+ * Validates `clientPath` and, if the binary is available and a slot is free,
+ * launches `self-review <absolutePath>` detached. Resolves `200` only after the
+ * child's `spawn` event; a launch `error` (e.g. `ENOENT`) is a fixed `500`. The
+ * plan's slot is taken synchronously before the spawn, so two simultaneous
+ * requests for one plan cannot both launch, and is released — idempotently —
+ * when the child exits, errors, or fails to launch. Pure of HTTP concerns:
+ * returns the status/body the endpoint should send so it stays unit-testable.
  */
-const launchSelfReview = (root, clientPath, deps = {}) => {
+const launchSelfReview = async (root, clientPath, deps = {}) => {
     const available = deps.available ?? exports.isSelfReviewAvailable;
     if (!available()) {
         return {
@@ -165,15 +200,40 @@ const launchSelfReview = (root, clientPath, deps = {}) => {
     if ('error' in resolved) {
         return { status: resolved.status, body: { ok: false, error: resolved.error } };
     }
-    try {
-        (deps.spawnDetached ?? spawnDetached)(exports.SELF_REVIEW_BINARY, [resolved.absPath]);
+    const registry = deps.registry ?? defaultRegistry;
+    const key = resolved.absPath;
+    if (registry.has(key)) {
+        return {
+            status: 409,
+            body: { ok: false, error: 'A self-review is already running for this plan.' },
+        };
     }
-    catch (err) {
+    if (registry.size >= exports.MAX_CONCURRENT_SELF_REVIEWS) {
         return {
-            status: 500,
-            body: { ok: false, error: `Failed to launch self-review: ${err.message}` },
+            status: 429,
+            body: {
+                ok: false,
+                error: `Too many self-reviews are running (limit ${exports.MAX_CONCURRENT_SELF_REVIEWS}). Try again when one finishes.`,
+            },
+            headers: { 'Retry-After': String(BUSY_RETRY_AFTER_SECONDS) },
         };
     }
+    registry.add(key);
+    const release = () => {
+        registry.delete(key);
+    };
+    let child;
+    try {
+        child = (deps.spawn ?? spawnDetached)(exports.SELF_REVIEW_BINARY, [key]);
+        await awaitSpawn(child);
+    }
+    catch {
+        release();
+        return LAUNCH_FAILED;
+    }
+    child.once('exit', release);
+    child.once('error', release);
+    child.unref();
     return { status: 200, body: { ok: true } };
 };
 exports.launchSelfReview = launchSelfReview;

package/dist/serve/self-review.js.map

@@ -1 +1 @@
-{"version":3,"file":"self-review.js","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AAEtC,qDAAqD;AACxC,QAAA,kBAAkB,GAAG,aAAa,CAAC;AAEhD,iFAAiF;AACpE,QAAA,eAAe,GAAG,uCAAuC,CAAC;AAEvE,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,CAAC,GAAuC,EAAU,EAAE;IAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;AACrD,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CACjC,GAAuC,EACvC,QAAiC,EACxB,EAAE;IACX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,IAAI,GACR,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAElG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAAkB,GAAG,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,IAAI,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,qBAAqB,GAAG,CACnC,MAA0C,OAAO,CAAC,GAAG,EAC5C,EAAE;IACX,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAgBF,yEAAyE;AACzE,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,IAAc,EAAQ,EAAE;IAC9D,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,+CAA+C;IACjD,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACI,MAAM,iBAAiB,GAAG,CAC/B,IAAY,EACZ,UAAkB,EACuC,EAAE;IAC3D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK,EAAE,sEAAsE;YAC7E,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AA/BW,QAAA,iBAAiB,qBA+B5B;AAEF;;;;GAIG;AACI,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,UAAkB,EAClB,OAAmB,EAAE,EACP,EAAE;IAChB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,6BAAqB,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAiB,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC,0BAAkB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7C,CAAC,CAAC;AA5BW,QAAA,gBAAgB,oBA4B3B"}
+{"version":3,"file":"self-review.js","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AACtC,6DAAmE;AAEnE,qDAAqD;AACxC,QAAA,kBAAkB,GAAG,aAAa,CAAC;AAEhD,+EAA+E;AAClE,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAE7C,mEAAmE;AACnE,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,iFAAiF;AACpE,QAAA,eAAe,GAAG,uCAAuC,CAAC;AAEvE,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,CAAC,GAAuC,EAAU,EAAE;IAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;AACrD,CAAC,CAAC;AAEF,oFAAoF;AACpF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAErD,MAAM,0BAA0B,GAAG,CACjC,GAAuC,EACvC,QAAiC,EACxB,EAAE;IACX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,IAAI,GACR,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAElG,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAAkB,GAAG,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,IAAI,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,qBAAqB,GAAG,CACnC,MAA0C,OAAO,CAAC,GAAG,EAC5C,EAAE;IACX,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjE,iBAAiB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAVW,QAAA,qBAAqB,yBAUhC;AAkBF,+CAA+C;AACxC,MAAM,oBAAoB,GAAG,GAAmB,EAAE,CAAC,IAAI,GAAG,EAAU,CAAC;AAA/D,QAAA,oBAAoB,wBAA2C;AAE5E,gFAAgF;AAChF,MAAM,eAAe,GAAG,IAAA,4BAAoB,GAAE,CAAC;AAe/C,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,IAAc,EAAgB,EAAE,CACtE,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAE5D,4EAA4E;AAC5E,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAiB,EAAE,CACxD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAiB;IAClC,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE;CAC5D,CAAC;AAEF;;;;;;;;;;;;GAYG;AACI,MAAM,iBAAiB,GAAG,CAC/B,IAAY,EACZ,UAAkB,EACuC,EAAE;IAC3D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG;QACd,KAAK,EAAE,sEAAsE;QAC7E,MAAM,EAAE,GAAG;KACZ,CAAC;IAEF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QACzF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,0BAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QACzB,QAAQ,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,KAAK,WAAW;gBACd,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACxD,KAAK,YAAY,CAAC;YAClB,KAAK,iBAAiB;gBACpB,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACvE,KAAK,UAAU;gBACb,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YACrE;gBACE,wEAAwE;gBACxE,6BAA6B;gBAC7B,OAAO,OAAO,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AAxCW,QAAA,iBAAiB,qBAwC5B;AAEF;;;;;;;;GAQG;AACI,MAAM,gBAAgB,GAAG,KAAK,EACnC,IAAY,EACZ,UAAkB,EAClB,OAAmB,EAAE,EACE,EAAE;IACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,6BAAqB,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAiB,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE;SAC9E,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,IAAI,mCAA2B,EAAE,CAAC;QACjD,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4CAA4C,mCAA2B,iCAAiC;aAChH;YACD,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,wBAAwB,CAAC,EAAE;SAC7D,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,0BAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;QACV,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7C,CAAC,CAAC;AAvDW,QAAA,gBAAgB,oBAuD3B"}