waterplane 0.0.1 → 0.1.6

package/packages/host/dist/intents/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/intents/write.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,UAAU,GAUX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAEzE;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAqD;IAChF,OAAO,IAAI,CAAC,QAAQ,EAAE,IAAI,2BAA2B,IAAI,CAAC,cAAc,EAAE,IAAI,kBAAkB,uBAAuB,CAAC;AAC1H,CAAC;AAED,MAAM,OAAO,UAAU;IACQ;IAA7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,6EAA6E;IAE7E;;;;;;;;OAQG;IACH,IAAI,CAAC,KAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACpE,sEAAsE;QACtE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzC,uEAAuE;QACvE,0EAA0E;QAC1E,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,gDAAgD;QAChD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,SAAS;YACtB,cAAc,EAAE,SAAS;YACzB,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,SAAS;SACpB,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QAC7E,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YAC9C,oCAAoC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,WAAW,4DAA4D,EAAE,CAAC;QACxI,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI;YAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,2EAA2E;QAC3E,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACK,YAAY,CAAC,GAAW,EAAE,IAAa;QAC7C,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO;QACrE,MAAM,OAAO,GAAG,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS;YAC/F,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY;YAC1B,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC;QACxF,IAAI,MAAM;YAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,MAAM,CAAC,KAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAChC,CAAC;IAED,uGAAuG;IACvG,YAAY,CAAC,KAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC/C,0EAA0E;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,GAAG,KAAK;YACR,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACxD,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG;YACjC,cAAc,EAAE,IAAI,EAAE,cAAc;YACpC,MAAM,EAAE,IAAI,EAAE,MAAM;YACpB,SAAS,EAAE,IAAI,EAAE,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;gBAC9B,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE;gBAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YAC/D,0EAA0E;YAC1E,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,wEAAwE;YACxE,sBAAsB;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK;YACjC,wEAAwE;YACxE,uDAAuD;YACvD,WAAW,EAAE,IAAI,EAAE,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,QAAQ;YAC1C,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,YAAY,EAAE,IAAI,EAAE,YAAY;YAChC,uEAAuE;YACvE,oEAAoE;YACpE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;YAChD,qEAAqE;YACrE,iEAAiE;YACjE,8EAA8E;YAC9E,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;YAChD,kEAAkE;YAClE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU;YAChD,sEAAsE;YACtE,qEAAqE;YACrE,uEAAuE;YACvE,4BAA4B;YAC5B,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,aAAa;YACzD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,EAAE,YAAY;YACtD,wEAAwE;YACxE,yEAAyE;YACzE,oEAAoE;YACpE,yDAAyD;YACzD,MAAM,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,EAAE,MAAM;SACzE,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,WAAW,4DAA4D,EAAE,CAAC;QACxI,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI;gBACrC,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC;oBAC5E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAChH,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC1H,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,EAAU,EAAE,IAAY,EAAE,EAAW;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC9D,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QAClI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC7I,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;QAChF,IAAI,IAA8B,CAAC;QACnC,IAAI,EAAE,EAAE,CAAC;YACP,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;YAClG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,uEAAuE;YACvE,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;gBAClB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,IAAI,CAAC,MAAM;wBACjB,CAAC,CAAC,yGAAyG;wBAC3G,CAAC,CAAC,kBAAkB;iBACvB,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,QAAQ,KAAK,IAAI,EAAE,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzJ,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,MAAM,CAAC,EAAU,EAAE,KAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC9D,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kFAAkF,EAAE,CAAC;QAC1K,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;QAC9F,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7F;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACH,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,GAAG,GAAG;YACN,GAAG,KAAK;YACR,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,SAAS;YACtB,WAAW,EAAE,SAAS;YACtB,GAAG,CAAC,QAAQ;gBACV,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE;gBACnH,CAAC,CAAC,EAAE,CAAC;SACR,EAAE,GAAG,CAAC,CAAC;QACR,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QAC/E,0EAA0E;QAC1E,2EAA2E;QAC3E,2CAA2C;QAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,yEAAyE;YACzE,yEAAyE;YACzE,qEAAqE;YACrE,wEAAwE;YACxE,wBAAwB;YACxB,EAAE;YACF,0EAA0E;YAC1E,sEAAsE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;YAC1B,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACvC,CAAC;aAAM,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACzF,0EAA0E;YAC1E,wEAAwE;YACxE,0EAA0E;YAC1E,wEAAwE;YACxE,iDAAiD;YACjD,mEAAmE;YACnE,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,qEAAqE;YACrE,4DAA4D;YAC5D,EAAE;YACF,yEAAyE;YACzE,+EAA+E;YAC/E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,MAAM,CAAC,cAAc,GAAG,SAAS,CAAC;gBAAC,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;YAAC,CAAC;YAC3F,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,4EAA4E;QAC5E,EAAE;QACF,6EAA6E;QAC7E,wEAAwE;QACxE,4EAA4E;QAC5E,sFAAsF;QACtF,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,2DAA2D;QAC3D,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED;;0EAEsE;IACtE,QAAQ,CAAC,EAAU,EAAE,MAAoB,EAAE,GAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC9D,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QAC/G,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;QAChF,0EAA0E;QAC1E,sEAAsE;QACtE,0EAA0E;QAC1E,mDAAmD;QACnD,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC;QACnK,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;QAChF,2EAA2E;QAC3E,0EAA0E;QAC1E,2CAA2C;QAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,IAAI,CAAC,EAAU,EAAE,KAchB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7F,0EAA0E;QAC1E,sEAAsE;QACtE,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACnG,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,SAAS,CAAC;QACpF,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;QACvF,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;aACjF,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;YAAE,GAAG,CAAC,aAAa,GAAG,SAAS,CAAC;QACrE,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;YAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;aACpD,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI;YAAE,GAAG,CAAC,YAAY,GAAG,SAAS,CAAC;QAEnG,yEAAyE;QACzE,EAAE;QACF,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,yDAAyD;QACzD,EAAE;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,qEAAqE;QACrE,sDAAsD;QACtD,EAAE;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,0EAA0E;QAC1E,gDAAgD;QAChD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;YAAC,CAAC;iBAChF,CAAC;gBACJ,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACjD,IAAI,CAAC,EAAE,CAAC;oBAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;gBAAC,CAAC;;oBAChD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC;gBAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;YAAC,CAAC;iBAChF,CAAC;gBACJ,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,CAAC,EAAE,CAAC;oBAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;gBAAC,CAAC;;oBAChD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,+DAA+D;QAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;iBACpI,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;gBAAE,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC;;gBAClD,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,4EAA4E;QAC5E,mEAAmE;QACnE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC;YAAC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;YAAC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;QAAC,CAAC;QAChI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,0EAA0E;QAC1E,2EAA2E;QAC3E,4BAA4B;QAC5B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,IAAI,CAAC,EAAU,EAAE,CAAW,EAAE,EAA+B;QAC3D,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAEjD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1D,yEAAyE;YACzE,yEAAyE;YACzE,oDAAoD;YACpD,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/packages/host/dist/jsonstore.d.ts

@@ -0,0 +1,50 @@
+export interface WriteJsonOpts {
+    /** File mode for the result (e.g. 0o600 for a key). Default: the umask's. */
+    mode?: number;
+    /** Indentation for `JSON.stringify`. Default: compact. */
+    space?: number;
+    /** End the file with a newline (for files a person may open in an editor). */
+    newline?: boolean;
+}
+/** Atomic, durable JSON write. Throws on failure; the tmp file never lingers. */
+export declare function writeJsonAtomic(path: string, value: unknown, opts?: WriteJsonOpts): void;
+/** The same tmp + fsync + rename for a body the caller already rendered (a JSONL ledger, an opaque state blob). */
+export declare function writeTextAtomic(path: string, body: string, opts?: Pick<WriteJsonOpts, "mode">): void;
+/**
+ * `writeTextAtomic` for a file that BELONGS TO SOMEONE ELSE — a repo's `.gitignore`
+ * or `CLAUDE.md`, rewritten to add a block. Two things a store's own file never
+ * needs: the existing mode is carried over (a rename would otherwise swap in the
+ * umask's mode, silently loosening 0600 or dropping an executable bit), and a
+ * symlink is written THROUGH (a rename over the link would replace it with a
+ * regular file and orphan the real one). A file that does not exist yet gets the
+ * same mode a plain `writeFileSync` would have given it.
+ *
+ * Writing THROUGH a link is also how a committed `.gitignore -> ~/.gitconfig`
+ * would rewrite a file outside the repo, so a caller rewriting a file inside a
+ * worktree names it as `within`: a target that resolves outside it is refused,
+ * in words, before any byte is written (`inRoot`, realpath on both sides).
+ * In-repo links keep working.
+ */
+export declare function writeTextAtomicKeepMode(path: string, body: string, within?: string): void;
+/** Rotate a JSONL ledger: keep the newest `keep` lines, via the atomic write (a kill mid-rotation leaves the old file whole). */
+export declare function keepLastLines(path: string, keep: number): void;
+/** What `readJsonGuarded` found, for a caller that must act on a loss (acks.ts). */
+export interface GuardedRead<T> {
+    value: T;
+    /** Set only when a file was PRESENT and unreadable: where its bytes went
+     *  (null when even the move failed), and why it was refused. */
+    corrupt?: {
+        movedTo: string | null;
+        error: string;
+    };
+}
+/** The path a corrupt file is moved to. Exported for tests and messages. */
+export declare function corruptPathFor(path: string, at?: number): string;
+/**
+ * Read and parse `path`, or return `fallback`. Absent ⇒ fallback, silently.
+ * Present but unparseable (or failing `accept`) ⇒ moved aside, logged once,
+ * fallback. Never throws.
+ */
+export declare function readJsonGuardedDetail<T>(path: string, fallback: T, accept?: (v: unknown) => boolean): GuardedRead<T>;
+/** `readJsonGuardedDetail`, value only. */
+export declare function readJsonGuarded<T>(path: string, fallback: T, accept?: (v: unknown) => boolean): T;

package/packages/host/dist/jsonstore.js

@@ -0,0 +1,158 @@
+/**
+ * The two halves of a persisted JSON store that every store gets wrong alone.
+ *
+ * `writeJsonAtomic` — full contents into a sibling tmp file, fsync, rename over
+ * the real one. A plain `writeFileSync` truncates first, so a SIGTERM (launchd's
+ * `kickstart -k` on every `npm run restart`) landing mid-write leaves half a JSON
+ * document. Rename is atomic within a directory, so a reader only ever sees the
+ * old document or the new one; the fsync is there so a power loss after the
+ * rename cannot surface a zero-length file under the real name. `mode` is applied
+ * to the tmp file BEFORE any byte is written and survives the rename, so a secret
+ * is never readable by anyone else, not even for the length of one write. Throws
+ * on failure (after removing the tmp file): whether a failed write is fatal is
+ * the CALLER'S decision, never this helper's.
+ *
+ * `readJsonGuarded` — the boot path. A file that is absent is the fallback,
+ * silently. A file that is PRESENT and does not parse is moved aside to
+ * `<name>.corrupt-<ts>` and logged once, and the fallback is returned: the
+ * daemon boots, and the bytes are kept for a person to look at, never
+ * overwritten by the next write. That is the difference from the
+ * `try { JSON.parse } catch { fresh }` most stores hand-roll — that shape boots
+ * too, but the very next save erases the only evidence that anything was lost.
+ * A `.corrupt-*` copy is `unknown` to `hoststore.ts`: counted, shown, never
+ * cleared by it.
+ */
+import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { basename, dirname, join } from "node:path";
+import { inRoot } from "./paths.js";
+/** Atomic, durable JSON write. Throws on failure; the tmp file never lingers. */
+export function writeJsonAtomic(path, value, opts = {}) {
+    writeTextAtomic(path, JSON.stringify(value, null, opts.space) + (opts.newline ? "\n" : ""), opts);
+}
+/** The same tmp + fsync + rename for a body the caller already rendered (a JSONL ledger, an opaque state blob). */
+export function writeTextAtomic(path, body, opts = {}) {
+    const dir = dirname(path);
+    mkdirSync(dir, { recursive: true });
+    const tmp = join(dir, `.${basename(path)}.${process.pid}.${Date.now().toString(36)}.tmp`);
+    let fd = null;
+    try {
+        fd = openSync(tmp, "wx", opts.mode ?? 0o666);
+        writeFileSync(fd, body); // loops until every byte is written
+        try {
+            fsyncSync(fd);
+        }
+        catch { /* a filesystem that cannot fsync still gets the rename */ }
+        closeSync(fd);
+        fd = null;
+        renameSync(tmp, path);
+    }
+    catch (e) {
+        if (fd !== null) {
+            try {
+                closeSync(fd);
+            }
+            catch { /* already closed */ }
+        }
+        try {
+            unlinkSync(tmp);
+        }
+        catch { /* nothing to clean up */ }
+        throw e;
+    }
+    // The rename itself is durable only once the directory entry is. Best effort:
+    // not every platform lets a directory be opened for fsync.
+    try {
+        const d = openSync(dir, "r");
+        try {
+            fsyncSync(d);
+        }
+        finally {
+            closeSync(d);
+        }
+    }
+    catch { /* best effort */ }
+}
+/**
+ * `writeTextAtomic` for a file that BELONGS TO SOMEONE ELSE — a repo's `.gitignore`
+ * or `CLAUDE.md`, rewritten to add a block. Two things a store's own file never
+ * needs: the existing mode is carried over (a rename would otherwise swap in the
+ * umask's mode, silently loosening 0600 or dropping an executable bit), and a
+ * symlink is written THROUGH (a rename over the link would replace it with a
+ * regular file and orphan the real one). A file that does not exist yet gets the
+ * same mode a plain `writeFileSync` would have given it.
+ *
+ * Writing THROUGH a link is also how a committed `.gitignore -> ~/.gitconfig`
+ * would rewrite a file outside the repo, so a caller rewriting a file inside a
+ * worktree names it as `within`: a target that resolves outside it is refused,
+ * in words, before any byte is written (`inRoot`, realpath on both sides).
+ * In-repo links keep working.
+ */
+export function writeTextAtomicKeepMode(path, body, within) {
+    let target = path;
+    let mode;
+    try {
+        target = realpathSync(path);
+        mode = statSync(target).mode & 0o7777;
+    }
+    catch { /* absent: a new file, today's default mode */ }
+    if (within !== undefined && inRoot(within, target) === null) {
+        throw new Error(`${basename(path)} is a link out of the repo — not written through`);
+    }
+    writeTextAtomic(target, body, { mode });
+}
+/** Rotate a JSONL ledger: keep the newest `keep` lines, via the atomic write (a kill mid-rotation leaves the old file whole). */
+export function keepLastLines(path, keep) {
+    const lines = readFileSync(path, "utf8").trimEnd().split("\n");
+    writeTextAtomic(path, lines.slice(-keep).join("\n") + "\n");
+}
+/** The path a corrupt file is moved to. Exported for tests and messages. */
+export function corruptPathFor(path, at = Date.now()) {
+    return `${path}.corrupt-${new Date(at).toISOString().replace(/[:.]/g, "-")}`;
+}
+/**
+ * Read and parse `path`, or return `fallback`. Absent ⇒ fallback, silently.
+ * Present but unparseable (or failing `accept`) ⇒ moved aside, logged once,
+ * fallback. Never throws.
+ */
+export function readJsonGuardedDetail(path, fallback, accept) {
+    let raw;
+    try {
+        if (!existsSync(path))
+            return { value: fallback };
+        raw = readFileSync(path, "utf8");
+    }
+    catch (e) {
+        // Unreadable (permissions, EIO): leave it where it is — moving a file we
+        // cannot read is not ours to decide — but say so.
+        console.error(`[jsonstore] ${path} could not be read (${e.message}); starting from defaults`);
+        return { value: fallback, corrupt: { movedTo: null, error: String(e.message) } };
+    }
+    let parsed;
+    let error = null;
+    try {
+        parsed = JSON.parse(raw);
+        if (accept && !accept(parsed))
+            error = "unexpected shape";
+    }
+    catch (e) {
+        error = String(e.message);
+    }
+    if (error === null)
+        return { value: parsed };
+    let movedTo = corruptPathFor(path);
+    try {
+        renameSync(path, movedTo);
+    }
+    catch {
+        movedTo = null;
+    }
+    console.error(`[jsonstore] ${path} is corrupt (${error}); ` +
+        (movedTo ? `kept as ${movedTo}` : "could not move it aside") +
+        "; starting from defaults");
+    return { value: fallback, corrupt: { movedTo, error } };
+}
+/** `readJsonGuardedDetail`, value only. */
+export function readJsonGuarded(path, fallback, accept) {
+    return readJsonGuardedDetail(path, fallback, accept).value;
+}
+//# sourceMappingURL=jsonstore.js.map

package/packages/host/dist/jsonstore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonstore.js","sourceRoot":"","sources":["../src/jsonstore.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7J,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAWpC,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,OAAsB,EAAE;IACpF,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACpG,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAAoC,EAAE;IAChG,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1F,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;QAC7C,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,oCAAoC;QAC7D,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;QAC3F,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,IAAI,CAAC;QACV,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAAC,CAAC;QAC1E,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC;IACV,CAAC;IACD,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC;YAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACnH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,IAAY,EAAE,MAAe;IACjF,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACvF,CAAC;IACD,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9D,CAAC;AAUD,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE;IAC1D,OAAO,GAAG,IAAI,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAI,IAAY,EAAE,QAAW,EAAE,MAAgC;IAClG,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAClD,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,yEAAyE;QACzE,kDAAkD;QAClD,OAAO,CAAC,KAAK,CAAC,eAAe,IAAI,uBAAwB,CAAW,CAAC,OAAO,2BAA2B,CAAC,CAAC;QACzG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,KAAK,GAAG,kBAAkB,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,KAAK,GAAG,MAAM,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,MAAW,EAAE,CAAC;IAClD,IAAI,OAAO,GAAkB,cAAc,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC;QAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC;IAAC,CAAC;IAC5D,OAAO,CAAC,KAAK,CACX,eAAe,IAAI,gBAAgB,KAAK,KAAK;QAC3C,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC;QAC5D,0BAA0B,CAC7B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,eAAe,CAAI,IAAY,EAAE,QAAW,EAAE,MAAgC;IAC5F,OAAO,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC"}

package/packages/host/dist/keyhints.d.ts

@@ -0,0 +1,45 @@
+/**
+ * The shortcuts claude's TUI tells a person to press, read off the RENDERED
+ * screen (`screenlog.ts`'s `gridText()`), for the phone's key row
+ * (`SessionInfo.keyHints`, `shared/keyhint.ts`).
+ *
+ * Measured on claude 2.1.293 (`test/fixtures/permmode/`):
+ *
+ *   ⏵⏵ auto mode on (shift+tab to cycle) · ← 3 agents       footer
+ *   Enter to set as default · s to use this session only · Esc to cancel   /model
+ *   ←/→ to adjust · Enter to confirm · s for this session only · Esc to cancel   /effort
+ *
+ * Where it reads, and nowhere else:
+ *
+ * - With a composer on screen: the footer under the NEWEST composer frame
+ *   (`permmode.ts`'s `composerFrame`, the same ≤6-row footer). The transcript
+ *   above it is never read — a turn that QUOTES a hint is not the CLI offering
+ *   one.
+ * - With no composer (a picker or a box replaced it): the screen's last
+ *   non-blank rows, where every picker draws its key line.
+ *
+ * A hint is a ` · `-separated segment of one of those rows: `<key> to|for
+ * <verb>`, the key at the segment start or just inside a `(`. Only keys the
+ * phone's row lacks count (`keyHintBytes`). A bare letter is accepted only in
+ * a row that carries at least one other hint — the shape of a key line, never
+ * of a sentence that happens to start "a to …". A verb cut by the grid's
+ * width (`…`) is dropped rather than shown half-read.
+ *
+ * A key line WRAPPED by a narrow grid (the CLI wraps a picker's line rather
+ * than eliding it: `… · s to use this` / `session only · Esc to cancel`)
+ * would read as a half verb with no `…` — so the last hint on a row is
+ * dropped when the next scanned row starts with words that are not a hint.
+ *
+ * The footer scan includes the person's own status line (`[CAVEMAN]` in the
+ * fixtures): a status line that prints `x to … · y to …` becomes chips. Kept
+ * on purpose — the footer cannot tell whose row it is, and such a line is
+ * offering those keys.
+ *
+ * Degrades to an empty list, never to a key the screen did not name.
+ */
+import { type KeyHint } from "@waterplane/shared";
+/**
+ * The hinted keys on a rendered grid, newest row last, deduplicated by key,
+ * at most `KEY_HINT_MAX`. `screen` is rows joined by `\n`.
+ */
+export declare function readKeyHints(screen: string): KeyHint[];

package/packages/host/dist/keyhints.js

@@ -0,0 +1,117 @@
+/**
+ * The shortcuts claude's TUI tells a person to press, read off the RENDERED
+ * screen (`screenlog.ts`'s `gridText()`), for the phone's key row
+ * (`SessionInfo.keyHints`, `shared/keyhint.ts`).
+ *
+ * Measured on claude 2.1.293 (`test/fixtures/permmode/`):
+ *
+ *   ⏵⏵ auto mode on (shift+tab to cycle) · ← 3 agents       footer
+ *   Enter to set as default · s to use this session only · Esc to cancel   /model
+ *   ←/→ to adjust · Enter to confirm · s for this session only · Esc to cancel   /effort
+ *
+ * Where it reads, and nowhere else:
+ *
+ * - With a composer on screen: the footer under the NEWEST composer frame
+ *   (`permmode.ts`'s `composerFrame`, the same ≤6-row footer). The transcript
+ *   above it is never read — a turn that QUOTES a hint is not the CLI offering
+ *   one.
+ * - With no composer (a picker or a box replaced it): the screen's last
+ *   non-blank rows, where every picker draws its key line.
+ *
+ * A hint is a ` · `-separated segment of one of those rows: `<key> to|for
+ * <verb>`, the key at the segment start or just inside a `(`. Only keys the
+ * phone's row lacks count (`keyHintBytes`). A bare letter is accepted only in
+ * a row that carries at least one other hint — the shape of a key line, never
+ * of a sentence that happens to start "a to …". A verb cut by the grid's
+ * width (`…`) is dropped rather than shown half-read.
+ *
+ * A key line WRAPPED by a narrow grid (the CLI wraps a picker's line rather
+ * than eliding it: `… · s to use this` / `session only · Esc to cancel`)
+ * would read as a half verb with no `…` — so the last hint on a row is
+ * dropped when the next scanned row starts with words that are not a hint.
+ *
+ * The footer scan includes the person's own status line (`[CAVEMAN]` in the
+ * fixtures): a status line that prints `x to … · y to …` becomes chips. Kept
+ * on purpose — the footer cannot tell whose row it is, and such a line is
+ * offering those keys.
+ *
+ * Degrades to an empty list, never to a key the screen did not name.
+ */
+import { KEY_HINT_MAX, keyHintBytes } from "@waterplane/shared";
+import { composerFrame } from "./permmode.js";
+/** Rows under the composer that can still be its footer (`permmode.ts`'s). */
+const MAX_FOOTER_ROWS = 6;
+/** Rows from the bottom a picker's key line can sit in. */
+const PICKER_ROWS = 3;
+const SEGMENT_SPLIT = /\s+·\s+/;
+/** Any `key to|for verb` — used to count a row's hints, whatever the key. */
+const ANY_HINT_RE = /(?:^|\()\s*(\S+)\s+(?:to|for)\s+[a-z]/i;
+/** The key, then the verb up to the segment's end or the closing `)`. */
+const HINT_RE = /(?:^|\()\s*(shift\+tab|ctrl\+[a-z]|[a-z0-9])\s+(?:to|for)\s+([a-z][^()]*?)\s*(?:\)|$)/i;
+/** Words that continue the row above: a lower-case start that is not itself
+ *  a hint (`session only · Esc to cancel`). */
+function continuesAbove(row) {
+    const first = row.trim().split(SEGMENT_SPLIT)[0];
+    return /^[a-z]/.test(first) && !ANY_HINT_RE.test(first);
+}
+/** A row's hints, and whether the last one came from the row's last segment
+ *  (the one a wrap would have cut). */
+function rowHints(row) {
+    const segs = row.trim().split(SEGMENT_SPLIT);
+    const keyLine = segs.filter((s) => ANY_HINT_RE.test(s)).length >= 2;
+    const out = [];
+    let lastAtEnd = false;
+    for (const [i, seg] of segs.entries()) {
+        // A hint inside parentheses rides after the label it belongs to.
+        const at = seg.indexOf("(");
+        const m = HINT_RE.exec(at > 0 ? seg.slice(at) : seg);
+        if (!m)
+            continue;
+        const raw = m[1];
+        const key = raw.toLowerCase();
+        const bare = key.length === 1;
+        // A bare key is drawn lower case by the CLI (`s for …`); a capital is a word.
+        if (bare && (raw !== key || !keyLine))
+            continue;
+        if (!keyHintBytes(key))
+            continue;
+        const verb = m[2].trim();
+        if (!verb || verb.includes("…"))
+            continue;
+        out.push({ key, verb });
+        lastAtEnd = i === segs.length - 1 && !seg.trimEnd().endsWith(")");
+    }
+    return { hints: out, lastAtEnd };
+}
+/**
+ * The hinted keys on a rendered grid, newest row last, deduplicated by key,
+ * at most `KEY_HINT_MAX`. `screen` is rows joined by `\n`.
+ */
+export function readKeyHints(screen) {
+    const rows = screen.split("\n");
+    const frame = composerFrame(rows);
+    let scan;
+    if (frame) {
+        scan = rows.slice(frame.bottom + 1).filter((r) => r.trim());
+        if (scan.length > MAX_FOOTER_ROWS)
+            return [];
+    }
+    else {
+        scan = rows.filter((r) => r.trim()).slice(-PICKER_ROWS);
+    }
+    const seen = new Set();
+    const out = [];
+    for (const [i, row] of scan.entries()) {
+        const { hints, lastAtEnd } = rowHints(row);
+        if (lastAtEnd && i + 1 < scan.length && continuesAbove(scan[i + 1]))
+            hints.pop();
+        for (const h of hints) {
+            if (seen.has(h.key))
+                continue;
+            seen.add(h.key);
+            out.push(h);
+        }
+    }
+    return out.slice(0, KEY_HINT_MAX);
+}
+//# sourceMappingURL=keyhints.js.map

package/packages/host/dist/keyhints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyhints.js","sourceRoot":"","sources":["../src/keyhints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAgB,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,2DAA2D;AAC3D,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,aAAa,GAAG,SAAS,CAAC;AAChC,6EAA6E;AAC7E,MAAM,WAAW,GAAG,wCAAwC,CAAC;AAC7D,yEAAyE;AACzE,MAAM,OAAO,GAAG,wFAAwF,CAAC;AAEzG;+CAC+C;AAC/C,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;uCACuC;AACvC,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IACpE,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,iEAAiE;QACjE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;QAC9B,8EAA8E;QAC9E,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAChD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,SAAS,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,IAAc,CAAC;IACnB,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;YAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AACpC,CAAC"}

package/packages/host/dist/lanid.d.ts

@@ -0,0 +1,21 @@
+export interface LanIdentity {
+    hostId: string;
+    /** base64url, 32 random bytes. Never leaves the trusted path. */
+    secret: string;
+}
+/** Nonce bounds: long enough to be unguessable, short enough to be cheap. */
+export declare const LAN_NONCE_MIN = 16;
+export declare const LAN_NONCE_MAX = 128;
+export declare function lanIdentityFile(root: string): string;
+/** Whether the identity file exists and parses (doctor's question — never creates it). */
+export declare function lanIdentityPresent(root: string): boolean;
+/** The identity, created (0600) the first time anything asks. A corrupt file is
+ *  replaced: every phone then re-learns it over the trusted path, which is the
+ *  same thing that happens the first time. */
+export declare function lanIdentity(root: string): LanIdentity;
+/** A nonce the verify endpoint will answer: a string within the bounds, printable. */
+export declare function validNonce(n: unknown): n is string;
+/** hex HMAC-SHA256(secret, hostId + "\n" + nonce). The phone computes the same. */
+export declare function lanMac(secret: string, hostId: string, nonce: string): string;
+/** For tests: forget the cached identity of `root`. */
+export declare function forgetLanIdentity(root: string): void;

package/packages/host/dist/lanid.js

@@ -0,0 +1,78 @@
+/**
+ * This desktop's LAN identity: a stable `hostId` and a secret that proves it.
+ *
+ * On plain-HTTP Wi-Fi the phone cannot tell `http://192.168.1.20:8770` from any
+ * other box that happens to answer there (a different desktop after a DHCP
+ * shuffle, a hostile device on a café network). So before it sends a token over
+ * LAN it asks `POST /api/lan/verify {nonce}` and checks
+ * `mac = HMAC-SHA256(secret, hostId + "\n" + nonce)` against the secret it
+ * learned over the TRUSTED path (`GET /api/lan/identity`, loopback/Tailscale
+ * only). A box without the secret cannot answer a fresh nonce.
+ *
+ * Stated residual (SECURITY.md): this defeats a wrong or impersonating host, not
+ * an active relay that forwards the probe to the real desktop — plain HTTP on
+ * the person's own Wi-Fi cannot resist that.
+ *
+ * `.waterplane/lan-identity.json`, mode 0600, created on first use.
+ */
+import { createHmac, randomBytes } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { isHostId, newHostId } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { writeJsonAtomic } from "./jsonstore.js";
+/** Nonce bounds: long enough to be unguessable, short enough to be cheap. */
+export const LAN_NONCE_MIN = 16;
+export const LAN_NONCE_MAX = 128;
+const cache = new Map();
+export function lanIdentityFile(root) {
+    return join(hostStateDir(root), "lan-identity.json");
+}
+function readIdentity(file) {
+    try {
+        const j = JSON.parse(readFileSync(file, "utf8"));
+        if (isHostId(j?.hostId) && typeof j?.secret === "string" && /^[A-Za-z0-9_-]{32,}$/.test(j.secret)) {
+            return { hostId: j.hostId, secret: j.secret };
+        }
+    }
+    catch { /* absent or unreadable ⇒ none */ }
+    return null;
+}
+/** Whether the identity file exists and parses (doctor's question — never creates it). */
+export function lanIdentityPresent(root) {
+    return cache.has(root) || readIdentity(lanIdentityFile(root)) !== null;
+}
+/** The identity, created (0600) the first time anything asks. A corrupt file is
+ *  replaced: every phone then re-learns it over the trusted path, which is the
+ *  same thing that happens the first time. */
+export function lanIdentity(root) {
+    const hit = cache.get(root);
+    if (hit)
+        return hit;
+    const file = lanIdentityFile(root);
+    let id = readIdentity(file);
+    if (!id) {
+        id = { hostId: newHostId(), secret: randomBytes(32).toString("base64url") };
+        mkdirSync(dirname(file), { recursive: true });
+        writeJsonAtomic(file, id, { mode: 0o600 });
+    }
+    try {
+        chmodSync(file, 0o600);
+    }
+    catch { /* best effort on odd filesystems */ }
+    cache.set(root, id);
+    return id;
+}
+/** A nonce the verify endpoint will answer: a string within the bounds, printable. */
+export function validNonce(n) {
+    return typeof n === "string" && n.length >= LAN_NONCE_MIN && n.length <= LAN_NONCE_MAX && /^[\x21-\x7e]+$/.test(n);
+}
+/** hex HMAC-SHA256(secret, hostId + "\n" + nonce). The phone computes the same. */
+export function lanMac(secret, hostId, nonce) {
+    return createHmac("sha256", secret).update(`${hostId}\n${nonce}`).digest("hex");
+}
+/** For tests: forget the cached identity of `root`. */
+export function forgetLanIdentity(root) {
+    cache.delete(root);
+}
+//# sourceMappingURL=lanid.js.map

package/packages/host/dist/lanid.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lanid.js","sourceRoot":"","sources":["../src/lanid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAQjD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,CAAC;AAChC,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;AAE7C,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjD,IAAI,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC;AACzE,CAAC;AAED;;8CAE8C;AAC9C,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5E,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,eAAe,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAC9E,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,IAAI,CAAC,CAAC,MAAM,IAAI,aAAa,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,MAAM,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;IAClE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/packages/host/dist/launchfiles.d.ts

@@ -0,0 +1,64 @@
+import type { BackendDescriptor, LaunchFile, LaunchPlan } from "./backends/types.js";
+/** `session:<name>` — a path inside this session's own launch dir. */
+export declare const SESSION_PREFIX = "session:";
+/** A plan names a handful of files, not a tree. */
+export declare const LAUNCH_FILES_MAX = 16;
+/** One file's text; the repo-facing instructions are ~10 KB. */
+export declare const LAUNCH_FILE_MAX_BYTES: number;
+/** A launch dir outlives its session this long before the boot sweep takes it (as `history/`). */
+export declare const LAUNCH_DIR_MAX_AGE_MS: number;
+/** What an environment variable's NAME may be — a plan's `env` key, a `dropEnv` name (`sessions/tmux.ts`). */
+export declare const ENV_NAME_RE: RegExp;
+/** `<state dir>/launch` — every session's launch dir lives under it. */
+export declare function launchRoot(root: string): string;
+/** `<state dir>/launch/<hostSessionId>` — null for an id that is not a plain id. */
+export declare function launchDir(root: string, hostSessionId: string): string | null;
+/**
+ * Where each file of a plan goes, or the sentence refusing the WHOLE plan. Pure but for
+ * realpath lookups; writes nothing.
+ */
+export declare function resolveLaunchFiles(files: readonly LaunchFile[] | undefined, where: {
+    launchDir: string | null;
+    dataDir?: string;
+    who: string;
+}): {
+    ok: true;
+    writes: {
+        abs: string;
+        content: string;
+        mode: number;
+    }[];
+} | {
+    ok: false;
+    reason: string;
+};
+/** Write what `resolveLaunchFiles` accepted (`writeTextAtomic`: tmp + rename, mode before bytes —
+ *  a rename replaces a planted symlink rather than following it). THROWS on a failed write. */
+export declare function writeLaunchFiles(writes: readonly {
+    abs: string;
+    content: string;
+    mode: number;
+}[], launchDirPath: string | null): void;
+/**
+ * The plan's `env` with every `session:<name>` item (comma-separated) replaced by its absolute
+ * path in the launch dir. An item that would leave the dir THROWS the sentence — the plan is
+ * refused, never half-resolved.
+ */
+export declare function resolveSessionEnv(env: Readonly<Record<string, string>> | undefined, dir: string | null, who: string): Record<string, string> | undefined;
+/**
+ * Delete the launch dirs of sessions that no longer exist, older than `maxAgeMs` — the same rule
+ * `sweepSessionStores` holds for `history/` and `summaries/`: a null `alive` (unanswerable this
+ * boot) deletes nothing.
+ */
+export declare function sweepLaunchDirs(root: string, alive: ReadonlySet<string> | null, now?: number, maxAgeMs?: number): {
+    deleted: number;
+    kept: number;
+    skipped: boolean;
+};
+/**
+ * The plan as the spawn takes it: its files WRITTEN (all checked first — a refused plan writes
+ * nothing and THROWS its sentence) and its `env`'s `session:` items resolved. Synchronous, so a
+ * core backend's create still spawns before its first `await`. Order (risk §6.2): prepare →
+ * files → spawn → persist → register; this is the second step.
+ */
+export declare function finishLaunch(backend: Pick<BackendDescriptor, "label" | "dataDir">, plan: LaunchPlan, root: string, hostSessionId: string): LaunchPlan;