waterplane 0.0.1 → 0.1.11

package/packages/host/dist/screenlog.js

@@ -0,0 +1,249 @@
+/**
+ * What a session's terminal has SHOWN, recorded as it happens.
+ *
+ * ## Why this cannot be read back
+ *
+ * The obvious implementation is to keep the PTY bytes (the daemon already does)
+ * and replay them through a headless VT when somebody asks. That is what
+ * `render.ts` is for, and for one SCREEN it is exactly right. It cannot answer
+ * "what scrolled off", because measured on claude 2.1.267, on every live pane
+ * of this desktop:
+ *
+ *     history_size=0   alternate_on=1
+ *
+ * The CLI draws in the ALTERNATE screen buffer, which by definition has no
+ * scrollback: a line that leaves the top of the grid is overwritten, not
+ * pushed anywhere. So a replay of the whole ring reads back one screen —
+ * measured, 31 lines for a session that had been running for hours — and tmux,
+ * which is the substrate here, has nothing either (`capture-pane -S -` returns
+ * the same 31 rows, because the pane's history belongs to the NORMAL buffer
+ * the CLI is not using).
+ *
+ * That is the answer to "can the server just replay it": no, and no amount of
+ * buffer is the fix. Every line that ever scrolled away was only ever visible
+ * for as long as it was on the grid. It has to be written down THEN.
+ *
+ * ## Why the host and not the phone
+ *
+ * The phone already does this (`web/screenlog.ts`): after each repaint settles
+ * it diffs the visible grid against the last one and keeps what fell off the
+ * top. Same rule, same pure function — `@waterplane/shared`'s `absorbScreen`, which
+ * is why it is in `shared` — but the phone is the wrong machine for it, and the
+ * report says how it reads: "a copy-paste result of random moments that
+ * duplicate lines and misses some as well."
+ *
+ * Both halves of that are the phone's vantage point, not the rule:
+ *
+ *  - **Missing lines.** The phone only sees a session while it is ON SCREEN and
+ *    the app is in the foreground. Everything painted while it was closed,
+ *    backgrounded, or looking at another session never passed through it.
+ *  - **Duplicated blocks.** A jump too large to anchor reads as a full repaint,
+ *    and the outgoing screen is then archived WHOLE — correct, because dropping
+ *    it would lose content, but it means the same conversation lands twice when
+ *    you come back. Gaps CAUSE those jumps, so the missing lines and the
+ *    duplicated ones are the same defect seen twice.
+ *
+ * The daemon has neither problem: it is the process the bytes arrive at, it is
+ * watching every session at once, and it never stops. Same rule, no gaps, so
+ * far fewer unanchorable jumps.
+ *
+ * ## Cost
+ *
+ * One live headless VT per session, fed incrementally. That is cheaper than it
+ * sounds and much cheaper than the alternative: `checkPrompt` already buys a
+ * FULL replay of the ring about twice a second while a box is up, and this
+ * parses each byte once, as it arrives. The grid is read on a debounce after
+ * the writes settle, never per chunk — a spinner repainting at 10 Hz must cost
+ * one read, not ten.
+ *
+ * Memory is bounded per session (`SCREENLOG_MAX_LINES` archived lines, the VT
+ * itself given no scrollback of its own — there would be nothing in it).
+ */
+import xtermHeadless from "@xterm/headless";
+import { absorbScreen, newScreenLog, screenLogLines, SCREENLOG_MAX_LINES } from "@waterplane/shared";
+import { cellRows } from "./render.js";
+const { Terminal } = xtermHeadless;
+/**
+ * Quiet time before the grid is read.
+ *
+ * The phone uses 400 ms for the same job and for the same reason: a grid read
+ * mid-repaint is a half-drawn screen, and `absorbScreen` would archive the torn
+ * half as content. Long enough to sit past one repaint, short enough that a
+ * fast scroll is still sampled often enough to anchor.
+ */
+const SETTLE_MS = 400;
+/**
+ * A CEILING on the quiet window, for the same reason `checkPrompt` has one: a
+ * TUI that repaints continuously (a spinner, a streaming answer) never goes
+ * quiet, and a pure debounce would then never read the grid at all — which is
+ * exactly the stretch where the most content is scrolling past.
+ */
+const MAX_STALE_MS = 1200;
+export class SessionScreenLog {
+    term;
+    state = newScreenLog();
+    timer = null;
+    dueAt = 0;
+    lastReadAt = 0;
+    dirty = false;
+    disposed = false;
+    constructor(cols, rows) {
+        this.term = new Terminal({
+            cols: Math.max(20, cols || 80),
+            rows: Math.max(4, rows || 24),
+            // No scrollback on purpose: the CLI is in the alternate buffer, where
+            // nothing is ever pushed into one. Asking for 5000 rows would reserve
+            // memory per session for a buffer that stays empty.
+            scrollback: 0,
+            allowProposedApi: true,
+        });
+    }
+    /** Feed the same bytes the phone's terminal gets. */
+    write(data) {
+        if (this.disposed || !data)
+            return;
+        this.term.write(data);
+        this.dirty = true;
+        // Earliest-wins, with a ceiling — `sessions.armPromptCheck`'s rule, and it
+        // is here for the same failure: a later chunk may pull the read forward but
+        // must never push a pending one back, or constant output starves it.
+        const ceiling = this.lastReadAt + MAX_STALE_MS - Date.now();
+        this.arm(Math.max(0, Math.min(SETTLE_MS, ceiling)));
+    }
+    /**
+     * **The grid as it stands, read straight off the live VT.**
+     *
+     * The recorder already holds a headless terminal fed with every byte, so the
+     * CURRENT screen costs a buffer read — no replay, no diff, no state change.
+     * That is what makes it usable on the per-frame paths (`checkTurnWatch`),
+     * where a `renderCapture()` of the whole ring would not be.
+     *
+     * It exists because the raw byte tail is NOT text. A TUI repaint is
+     * interleaved with cursor moves and charset escapes, so a phrase plainly on
+     * screen arrives as `C\x1b(Bo\x1b(Bm\x1b(Bp…` spliced through a second,
+     * overlapping repaint — measured on claude 2.1.267 during a `/compact`, where
+     * "Compacting conversation…" was on screen for two minutes and matched
+     * nothing in the bytes. The grid has one copy of each character, in order.
+     */
+    gridText(rows = 0) {
+        if (this.disposed)
+            return "";
+        try {
+            const buf = this.term.buffer.active;
+            const take = rows > 0 ? Math.min(rows, this.term.rows) : this.term.rows;
+            const from = buf.viewportY + this.term.rows - take;
+            const out = [];
+            for (let i = from; i < buf.viewportY + this.term.rows; i++) {
+                const line = buf.getLine(i);
+                out.push(line ? line.translateToString(true).replace(/\s+$/, "") : "");
+            }
+            return out.join("\n");
+        }
+        catch {
+            return "";
+        } // a read that throws costs one sample, never the session
+    }
+    /**
+     * The same grid WITH attributes (`render.ts`'s `RenderRow`), last `rows` rows.
+     *
+     * Why the readers that decide a delivery ask this rather than a replay of the
+     * byte ring: the ring carries no record of a resize. A phone's keyboard
+     * opening and closing reshapes the pane all session long — measured on one
+     * session: scroll regions `1;13r` through `1;45r` in a single ring — and a
+     * replay into ONE fixed 50-row VT applies every one of those repaints to the
+     * wrong grid. The live composer came back with its closing rule overdrawn by
+     * the mode row (`──⏵⏵ auto mode on …───`), read as text someone had typed,
+     * and every send to that session was refused as "the input box already holds
+     * text" while the real box was empty. This VT is resized in step
+     * (`drive.ts`'s `resize`), so its grid is the pane's.
+     */
+    gridCells(rows = 0) {
+        if (this.disposed)
+            return [];
+        try {
+            const top = this.term.buffer.active.viewportY;
+            const take = rows > 0 ? Math.min(rows, this.term.rows) : this.term.rows;
+            return cellRows(this.term, top + this.term.rows - take, top + this.term.rows);
+        }
+        catch {
+            return [];
+        }
+    }
+    /** Is the program drawing in the ALTERNATE screen? Only there is the grid
+     *  the whole truth — a normal-buffer program (a shell) has scrollback this
+     *  VT does not keep, and its readers still need the replay. */
+    alternate() {
+        if (this.disposed)
+            return false;
+        try {
+            return this.term.buffer.active.type === "alternate";
+        }
+        catch {
+            return false;
+        }
+    }
+    /** A SIGWINCH reshapes the grid, so the VT has to follow or every line wraps
+     *  at the wrong column and nothing anchors against what came before. */
+    resize(cols, rows) {
+        if (this.disposed)
+            return;
+        try {
+            this.term.resize(Math.max(20, cols || 80), Math.max(4, rows || 24));
+        }
+        catch { /* best-effort */ }
+    }
+    /** Everything readable, oldest first: what scrolled away, then what is on
+     *  screen. Reads the grid first, so a caller never sees a stale tail. */
+    lines() {
+        this.absorb();
+        return screenLogLines(this.state);
+    }
+    /** Has anything beyond the visible grid been recorded? The difference
+     *  between "here is the history" and "here is the screen, there is no
+     *  history yet" — two different sentences on the phone. */
+    hasHistory() {
+        return this.state.archived.length > 0;
+    }
+    dispose() {
+        if (this.disposed)
+            return;
+        this.disposed = true;
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        try {
+            this.term.dispose();
+        }
+        catch { /* already gone */ }
+    }
+    arm(delayMs) {
+        const due = Date.now() + delayMs;
+        if (this.timer && this.dueAt <= due)
+            return;
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.dueAt = due;
+        this.timer = setTimeout(() => { this.timer = null; this.absorb(); }, delayMs);
+        this.timer.unref?.();
+    }
+    /** Read the grid and fold it in. Idempotent: `absorbScreen` returns the SAME
+     *  state when nothing moved, so a read that races a caller costs nothing. */
+    absorb() {
+        if (this.disposed || !this.dirty)
+            return;
+        this.dirty = false;
+        this.lastReadAt = Date.now();
+        try {
+            const buf = this.term.buffer.active;
+            const grid = [];
+            for (let i = buf.viewportY; i < buf.viewportY + this.term.rows; i++) {
+                const line = buf.getLine(i);
+                grid.push(line ? line.translateToString(true).replace(/\s+$/, "") : "");
+            }
+            this.state = absorbScreen(this.state, grid, SCREENLOG_MAX_LINES);
+        }
+        catch { /* a read that throws costs one sample, never the session */ }
+    }
+}
+//# sourceMappingURL=screenlog.js.map

package/packages/host/dist/screenlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"screenlog.js","sourceRoot":"","sources":["../src/screenlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAuB,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,QAAQ,EAAkB,MAAM,aAAa,CAAC;AAEvD,MAAM,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB;;;;;GAKG;AACH,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAgC;IACpC,KAAK,GAAmB,YAAY,EAAE,CAAC;IACvC,KAAK,GAA0B,IAAI,CAAC;IACpC,KAAK,GAAG,CAAC,CAAC;IACV,UAAU,GAAG,CAAC,CAAC;IACf,KAAK,GAAG,KAAK,CAAC;IACd,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,IAAY,EAAE,IAAY;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,QAAQ,CAAC;YACvB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;YAC7B,sEAAsE;YACtE,sEAAsE;YACtE,oDAAoD;YACpD,UAAU,EAAE,CAAC;YACb,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,IAAY;QAChB,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI;YAAE,OAAO;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,2EAA2E;QAC3E,4EAA4E;QAC5E,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,IAAI,GAAG,CAAC;QACf,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACnD,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC,CAAG,yDAAyD;IACpF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,IAAI,GAAG,CAAC;QAChB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;YAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YACxE,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxB,CAAC;IAED;;mEAE+D;IAC/D,SAAS;QACP,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACtF,CAAC;IAED;4EACwE;IACxE,MAAM,CAAC,IAAY,EAAE,IAAY;QAC/B,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC1G,CAAC;IAED;6EACyE;IACzE,KAAK;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED;;+DAE2D;IAC3D,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAChE,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IAEO,GAAG,CAAC,OAAe;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG;YAAE,OAAO;QAC5C,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAED;iFAC6E;IACrE,MAAM;QACZ,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC,CAAC,4DAA4D,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/packages/host/dist/secrets.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Fixed per-user dir for the daemon's own (host-scope) secrets, independent of
+ * the root. Precedence: the `CONFIG_DIR` knob (test/override) →
+ * `$XDG_CONFIG_HOME/<name>` → `~/.config/<name>` — `branddirs.ts`' `configDir`,
+ * which also answers a legacy-named dir the boot move could not rename.
+ */
+export declare function hostSecretDir(): string;
+/** Absolute path to the host-scope .env file. */
+export declare function hostSecretEnvPath(): string;
+/**
+ * Write-only target: a host-side file the phone may WRITE but never read back.
+ *  - mode "dotenv": KEY=value is spliced into the file (the original behaviour).
+ *  - mode "json":   the pasted value IS the whole file content; it must parse as
+ *                   JSON. No key — the file is a single JSON blob (e.g. a cookie
+ *                   jar), not a dotenv.
+ * The built-in `env` target is the daemon's own .env; extra targets are declared in a
+ * gitignored, host-only config file (see writeTargetsConfigPath) so the list is
+ * maintained out-of-tree, never checked in.
+ */
+export interface WriteTargetDef {
+    id: string;
+    label: string;
+    mode: "dotenv" | "json";
+    /** Absolute path on the host. */
+    path: string;
+    /** Built-in env target also hot-reloads process.env (no restart). */
+    hotReload?: boolean;
+}
+/** Path to the host-only config that declares extra write-only targets. */
+export declare function writeTargetsConfigPath(): string;
+/**
+ * The full list of write-only targets: the built-in `env` dotenv first, then any
+ * valid entries from write-targets.json. Malformed/duplicate/invalid entries are
+ * skipped (the built-in env id always wins). Never throws.
+ */
+export declare function listWriteTargets(): WriteTargetDef[];
+export interface SecretResult {
+    ok: boolean;
+    key?: string;
+    /** Repo- (or state-dir-) relative file written. */
+    file?: string;
+    action?: "created" | "replaced";
+    /** "••••" + last 4 chars, only when long enough to keep 4 hidden. */
+    masked?: string;
+    gitignored?: boolean;
+    addedToGitignore?: boolean;
+    error?: string;
+}
+export interface EnvFileInfo {
+    name: string;
+    gitignored: boolean;
+    tracked: boolean;
+    /** Template dotenv (.env.example etc) — committed by design, holds no secret. */
+    template: boolean;
+}
+/** Mask for display: last 4 chars only when ≥8 long, else fully hidden. */
+export declare function maskSecret(v: string): string;
+export interface SetSecretOpts {
+    root: string;
+    scope: "host" | "repo";
+    /** Worktree path for repo scope; ignored for host scope. */
+    worktree?: string;
+    file?: string;
+    /** Required for dotenv writes; ignored for json-mode host targets. */
+    key?: string;
+    value: string;
+    /** Host scope: which write-only target (defaults to the built-in `env`). */
+    targetId?: string;
+}
+export declare function setSecret(opts: SetSecretOpts): SecretResult;
+/** List dotenv files in the worktree root (names + git flags only — NO contents). */
+export declare function listEnvFiles(worktree: string): EnvFileInfo[];

package/packages/host/dist/secrets.js

@@ -0,0 +1,258 @@
+/**
+ * Write-only secret setter — splice KEY=value into a gitignored dotenv file.
+ *
+ * ONE-DIRECTIONAL from the app's side: there is no read path here, so a value
+ * written cannot be surfaced back to the phone, a transcript, or a plugin's
+ * context — it is never logged or returned, callers get only a masked
+ * tail for confirmation. NOTE this is not at-rest secrecy: the value is stored
+ * as plaintext in a file on the host, so anything running there (including the
+ * Claude CLI) can read it. The guarantee is "won't leak through the daemon", not
+ * "Claude can never see it".
+ *
+ * Two scopes:
+ *  - host  → a WRITE-ONLY TARGET (see below), a FIXED per-user location that
+ *            does NOT move with the root — so secrets don't "vanish" when the
+ *            repo-scan dir changes. Override the config dir with the
+ *            `CONFIG_DIR` env knob (used by tests).
+ *  - repo  → <worktree>/<file> (default .env). A gitignore GATE runs first: it
+ *            REFUSES to write into a git-tracked file (that would stage the
+ *            secret for commit) and auto-adds the file to .gitignore when it is
+ *            neither ignored nor tracked, so a secret can never land in history.
+ */
+import { execFileSync } from "node:child_process";
+import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { basename, join, resolve } from "node:path";
+import { BRAND } from "@waterplane/shared";
+import { configDir } from "./branddirs.js";
+import { contained, containedReal } from "./paths.js";
+import { expandHome } from "./pathx.js";
+import { writeTextAtomic, writeTextAtomicKeepMode } from "./jsonstore.js";
+/**
+ * Fixed per-user dir for the daemon's own (host-scope) secrets, independent of
+ * the root. Precedence: the `CONFIG_DIR` knob (test/override) →
+ * `$XDG_CONFIG_HOME/<name>` → `~/.config/<name>` — `branddirs.ts`' `configDir`,
+ * which also answers a legacy-named dir the boot move could not rename.
+ */
+export function hostSecretDir() {
+    return configDir();
+}
+/** Absolute path to the host-scope .env file. */
+export function hostSecretEnvPath() {
+    return join(hostSecretDir(), ".env");
+}
+/** Path to the host-only config that declares extra write-only targets. */
+export function writeTargetsConfigPath() {
+    return join(hostSecretDir(), "write-targets.json");
+}
+// A target id: short slug used by the phone to pick a target.
+const TARGET_ID_RE = /^[a-z0-9][a-z0-9_-]*$/i;
+/**
+ * The full list of write-only targets: the built-in `env` dotenv first, then any
+ * valid entries from write-targets.json. Malformed/duplicate/invalid entries are
+ * skipped (the built-in env id always wins). Never throws.
+ */
+export function listWriteTargets() {
+    const out = [
+        { id: "env", label: `${BRAND.displayName} .env (host)`, mode: "dotenv", path: hostSecretEnvPath(), hotReload: true },
+    ];
+    const seen = new Set(out.map((t) => t.id));
+    const cfg = writeTargetsConfigPath();
+    try {
+        if (!existsSync(cfg))
+            return out;
+        const parsed = JSON.parse(readFileSync(cfg, "utf8"));
+        if (!Array.isArray(parsed))
+            return out;
+        for (const e of parsed) {
+            if (!e || typeof e !== "object")
+                continue;
+            const id = String(e.id || "").trim();
+            const mode = e.mode === "json" ? "json" : e.mode === "dotenv" ? "dotenv" : null;
+            const rawPath = String(e.path || "").trim();
+            if (!TARGET_ID_RE.test(id) || seen.has(id) || !mode || !rawPath)
+                continue;
+            seen.add(id);
+            out.push({ id, label: String(e.label || id), mode, path: resolve(expandHome(rawPath)) });
+        }
+    }
+    catch {
+        /* bad config → just the built-in target */
+    }
+    return out;
+}
+/** Resolve a target by id (defaults to the built-in `env`). */
+function resolveTarget(id) {
+    const targets = listWriteTargets();
+    return targets.find((t) => t.id === (id || "env")) ?? null;
+}
+/** Atomically write `body` to `full` at mode 0600, creating parent dirs. */
+function atomicWrite(full, body) {
+    const existed = existsSync(full);
+    mkdirSync(resolve(full, ".."), { recursive: true, mode: 0o700 });
+    writeTextAtomic(full, body, { mode: 0o600 });
+    try {
+        chmodSync(full, 0o600);
+    }
+    catch {
+        /* best effort */
+    }
+    return existed ? "replaced" : "created";
+}
+// A dotenv key: starts with a letter/underscore, then word chars. No spaces.
+const KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+// An env-file name: `.env` or `.env.<suffix>` — keeps the target a dotenv.
+const ENVFILE_RE = /^\.env(\.[A-Za-z0-9_.-]+)?$/;
+// Template dotenvs (committed on purpose, hold placeholders not secrets) — never warn.
+const ENV_TEMPLATE_RE = /^\.env\.(example|sample|template|dist)$/;
+/** Mask for display: last 4 chars only when ≥8 long, else fully hidden. */
+export function maskSecret(v) {
+    return v.length >= 8 ? "••••" + v.slice(-4) : "••••";
+}
+/** Resolve `file` inside `dir`, refusing traversal. Returns abs path or null. */
+const inDir = (dir, file) => contained(dir, file);
+/** git check-ignore / ls-files probes (both return false outside a repo). */
+function gitChecks(wt, relFile) {
+    const run = (args) => {
+        try {
+            execFileSync("git", args, { cwd: wt, stdio: "ignore" });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+    return {
+        ignored: run(["check-ignore", "-q", "--", relFile]),
+        tracked: run(["ls-files", "--error-unmatch", "--", relFile]),
+    };
+}
+/** Splice KEY=value into `full` (replace any existing KEY= lines, else append). */
+function spliceWrite(full, key, value) {
+    const raw = existsSync(full) ? readFileSync(full, "utf8") : "";
+    const prefix = key + "=";
+    const lines = raw.split("\n");
+    const kept = lines.filter((l) => !l.startsWith(prefix)).join("\n").replace(/\n+$/, "");
+    const body = (kept ? kept + "\n" : "") + prefix + value + "\n";
+    return atomicWrite(full, body);
+}
+export function setSecret(opts) {
+    if (!opts.value)
+        return { ok: false, error: "empty value" };
+    // ── host scope: a write-only target (dotenv or whole-file json) ─────────
+    if (opts.scope === "host") {
+        const target = resolveTarget(opts.targetId);
+        if (!target)
+            return { ok: false, error: "unknown target" };
+        if (target.mode === "json") {
+            // The pasted value IS the file — must be valid JSON, no key needed.
+            try {
+                JSON.parse(opts.value);
+            }
+            catch {
+                return { ok: false, error: "value must be valid JSON" };
+            }
+            const action = atomicWrite(target.path, opts.value);
+            return { ok: true, file: target.path, action, masked: maskSecret(opts.value), gitignored: true };
+        }
+        // dotenv mode
+        const key = (opts.key || "").trim();
+        if (!key || !KEY_RE.test(key)) {
+            return { ok: false, error: "invalid key — use A-Z, 0-9, _ and start with a letter or _" };
+        }
+        if (/[\r\n]/.test(opts.value))
+            return { ok: false, error: "value must be a single line" };
+        mkdirSync(resolve(target.path, ".."), { recursive: true, mode: 0o700 });
+        const action = spliceWrite(target.path, key, opts.value);
+        // Hot-reload: the daemon reads process.env live (e.g. GEMINI_API_KEY for a plugin).
+        if (target.hotReload)
+            process.env[key] = opts.value;
+        return { ok: true, key, file: target.path, action, masked: maskSecret(opts.value), gitignored: true };
+    }
+    // ── repo scope ──────────────────────────────────────────────────────
+    const key = (opts.key || "").trim();
+    if (!key || !KEY_RE.test(key)) {
+        return { ok: false, error: "invalid key — use A-Z, 0-9, _ and start with a letter or _" };
+    }
+    if (/[\r\n]/.test(opts.value))
+        return { ok: false, error: "value must be a single line" };
+    if (!opts.worktree)
+        return { ok: false, error: "unknown repo" };
+    const file = (opts.file || ".env").trim();
+    if (file.includes("..") || file.includes("/") || !ENVFILE_RE.test(basename(file))) {
+        return { ok: false, error: "target must be a .env file in the repo root" };
+    }
+    const full = inDir(opts.worktree, file);
+    if (!full)
+        return { ok: false, error: "path escapes repo" };
+    // A committed `.env -> ~/.ssh/config` would be read AND rewritten through the link.
+    try {
+        if (lstatSync(full).isSymbolicLink())
+            return { ok: false, error: `${file} is a link, not a file` };
+    }
+    catch { /* absent — created below */ }
+    const { ignored, tracked } = gitChecks(opts.worktree, file);
+    if (!ignored && tracked) {
+        // Committed file → writing here would stage the secret for commit. Refuse.
+        return {
+            ok: false,
+            error: `${file} is tracked by git — a secret there risks being committed. Untrack it first (git rm --cached ${file}) or choose a gitignored file.`,
+        };
+    }
+    let addedToGitignore = false;
+    if (!ignored) {
+        // Untracked & unignored → guarantee it can never be committed before writing.
+        try {
+            const gi = join(opts.worktree, ".gitignore");
+            // Refused BEFORE the read: a committed `.gitignore -> ~/.gitconfig` must not even be
+            // consulted (whether it already lists `.env` would be one bit about a file outside the repo).
+            if (containedReal(opts.worktree, ".gitignore") === null)
+                return { ok: false, error: ".gitignore is a link out of the repo — refusing to read or write through it" };
+            const cur = existsSync(gi) ? readFileSync(gi, "utf8") : "";
+            const has = cur.split("\n").some((l) => l.trim() === file || l.trim() === "/" + file);
+            if (!has) {
+                // `opts.worktree`: a committed `.gitignore -> ~/.gitconfig` is refused, not written through.
+                writeTextAtomicKeepMode(gi, (cur && !cur.endsWith("\n") ? cur + "\n" : cur) + file + "\n", opts.worktree);
+                addedToGitignore = true;
+            }
+        }
+        catch (e) {
+            return { ok: false, error: `could not update .gitignore to protect the secret — refusing to write (${e.message})` };
+        }
+    }
+    const action = spliceWrite(full, key, opts.value);
+    return {
+        ok: true,
+        key,
+        file,
+        action,
+        masked: maskSecret(opts.value),
+        gitignored: ignored || addedToGitignore,
+        addedToGitignore,
+    };
+}
+/** List dotenv files in the worktree root (names + git flags only — NO contents). */
+export function listEnvFiles(worktree) {
+    let names;
+    try {
+        names = readdirSync(worktree).filter((n) => {
+            if (!ENVFILE_RE.test(n))
+                return false;
+            try {
+                return statSync(join(worktree, n)).isFile();
+            }
+            catch {
+                return false;
+            }
+        });
+    }
+    catch {
+        return [];
+    }
+    return names
+        .map((name) => {
+        const { ignored, tracked } = gitChecks(worktree, name);
+        return { name, gitignored: ignored, tracked, template: ENV_TEMPLATE_RE.test(name) };
+    })
+        .sort((a, b) => a.name.localeCompare(b.name));
+}
+//# sourceMappingURL=secrets.js.map

package/packages/host/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE1E;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAsBD,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,oBAAoB,CAAC,CAAC;AACrD,CAAC;AAGD,8DAA8D;AAC9D,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,GAAG,GAAqB;QAC5B,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;KACrH,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAChF,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC1E,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+DAA+D;AAC/D,SAAS,aAAa,CAAC,EAAW;IAChC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7D,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,6EAA6E;AAC7E,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAC1C,2EAA2E;AAC3E,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,uFAAuF;AACvF,MAAM,eAAe,GAAG,yCAAyC,CAAC;AAuBlE,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,iFAAiF;AACjF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,IAAY,EAAiB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAEjF,6EAA6E;AAC7E,SAAS,SAAS,CAAC,EAAU,EAAE,OAAe;IAC5C,MAAM,GAAG,GAAG,CAAC,IAAc,EAAW,EAAE;QACtC,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;IAC/D,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAeD,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAE5D,2EAA2E;IAC3E,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QAE3D,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,oEAAoE;YACpE,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;YAC1D,CAAC;YACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACnG,CAAC;QAED,cAAc;QACd,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;QAC5F,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QAC1F,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,oFAAoF;QACpF,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACxG,CAAC;IAED,uEAAuE;IACvE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAE5D,oFAAoF;IACpF,IAAI,CAAC;QAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAElJ,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC;QACxB,2EAA2E;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,IAAI,gGAAgG,IAAI,gCAAgC;SACnJ,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC7C,qFAAqF;YACrF,8FAA8F;YAC9F,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6EAA6E,EAAE,CAAC;YACpK,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC;YACtF,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,6FAA6F;gBAC7F,uBAAuB,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC1G,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0EAA2E,CAAW,CAAC,OAAO,GAAG,EAAE,CAAC;QACjI,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG;QACH,IAAI;QACJ,MAAM;QACN,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,UAAU,EAAE,OAAO,IAAI,gBAAgB;QACvC,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtF,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC"}