waterplane 0.0.1 → 0.1.6

package/packages/host/dist/notifyprefs.js

@@ -0,0 +1,60 @@
+/**
+ * Which notification KINDS this user wants to hear about.
+ *
+ * Every alert the daemon fires goes two places at once — the in-app feed and,
+ * when subscribed, an OS push — and until now every one of them went to both,
+ * unconditionally. That is fine for the kinds that need a human (a question
+ * waiting, a usage limit) and wrong for `idle`, the "Turn finished" ping: it
+ * fires once per turn per session, so a handful of agents working a backlog
+ * produce a notification a minute and the feed becomes a wall of identical
+ * rows with the two urgent kinds buried in it.
+ *
+ * The gate lives on the HOST rather than in the client's synced settings for
+ * one reason: the push is sent from here, and muting a kind the phone hides
+ * afterwards still buzzes the phone. `settings.ts` cannot hold it either — it
+ * stores opaque strings the daemon never parses, by design.
+ *
+ * Persisted to <STATE_DIR>/notify.json, tmp+rename, same shape as the other
+ * small stores here. Sparse on purpose (see `NotifyPrefs`): a kind added in a
+ * later version arrives with its own default instead of being silently muted
+ * by a file written before it existed.
+ */
+import { existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { cleanNotifyPrefs, notifyEnabled } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+export class NotifyPrefsStore {
+    path;
+    prefs = {};
+    constructor(root) {
+        const dir = hostStateDir(root);
+        mkdirSync(dir, { recursive: true });
+        this.path = join(dir, "notify.json");
+        try {
+            if (existsSync(this.path))
+                this.prefs = cleanNotifyPrefs(readJsonGuarded(this.path, null));
+        }
+        catch { /* corrupt or unreadable → defaults, never throw on boot */ }
+    }
+    get() {
+        return { ...this.prefs };
+    }
+    /** Whether a kind may be published at all (feed AND push). */
+    enabled(kind) {
+        return notifyEnabled(this.prefs, kind);
+    }
+    /** Merge a sparse patch in — a client sends only what it changed. */
+    set(patch) {
+        this.prefs = { ...this.prefs, ...cleanNotifyPrefs(patch) };
+        this.save();
+        return this.get();
+    }
+    save() {
+        try {
+            writeJsonAtomic(this.path, this.prefs, { space: 2 });
+        }
+        catch { /* a lost preference is not worth taking the daemon down for */ }
+    }
+}
+//# sourceMappingURL=notifyprefs.js.map

package/packages/host/dist/notifyprefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifyprefs.js","sourceRoot":"","sources":["../src/notifyprefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAA2C,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAS;IACb,KAAK,GAAgB,EAAE,CAAC;IAEhC,YAAY,IAAY;QACtB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACzE,CAAC;IAED,GAAG;QACD,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,8DAA8D;IAC9D,OAAO,CAAC,IAAsB;QAC5B,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,GAAG,CAAC,KAAkB;QACpB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/packages/host/dist/ocrlocal.d.ts

@@ -0,0 +1,46 @@
+export type OcrEngine = "vision" | "windows" | "tesseract";
+export type OcrStatus = {
+    available: true;
+    engine: OcrEngine;
+} | {
+    available: false;
+    reason: string;
+};
+export type OcrAnswer = {
+    text: string;
+    engine: string;
+    ms: number;
+} | {
+    error: string;
+};
+/** A photo of a screen is a few thousand characters at most; past this the
+ *  engine is reading wallpaper, and the phone's box would be unusable anyway. */
+export declare const OCR_MAX_CHARS = 40000;
+/** The Swift helper: one image path in, recognised lines out, in reading order.
+ *  Exit 2 = the image could not be decoded (a reason, not a crash). */
+export declare const VISION_SWIFT = "import Foundation\nimport Vision\nimport AppKit\nlet path = CommandLine.arguments[1]\nguard let img = NSImage(contentsOfFile: path),\n      let cg = img.cgImage(forProposedRect: nil, context: nil, hints: nil) else {\n  FileHandle.standardError.write(\"cannot decode image\\n\".data(using: .utf8)!)\n  exit(2)\n}\nlet req = VNRecognizeTextRequest()\nreq.recognitionLevel = .accurate\nreq.usesLanguageCorrection = true\nif #available(macOS 13.0, *) { req.automaticallyDetectsLanguage = true }\ndo { try VNImageRequestHandler(cgImage: cg, options: [:]).perform([req]) } catch {\n  FileHandle.standardError.write(\"vision failed: \\(error)\\n\".data(using: .utf8)!)\n  exit(3)\n}\nfor o in (req.results ?? []) { if let c = o.topCandidates(1).first { print(c.string) } }\n";
+/** Whether this Linux is WSL — the Windows side (and its OCR) is one
+ *  `powershell.exe` away through interop. */
+export declare function isWsl(e?: NodeJS.ProcessEnv, procVersion?: string): boolean;
+/** A string literal PowerShell takes verbatim: single quotes, doubled inside. */
+export declare function psQuote(s: string): string;
+/**
+ * The Windows reader, as one PowerShell 5.1 script (`-EncodedCommand`, so no
+ * script file, no execution-policy prompt and no quoting through two shells).
+ * Exit codes mirror the Vision helper's: 2 = not decodable, 4 = no OCR
+ * language installed, 5 = past `OcrEngine.MaxImageDimension`.
+ */
+export declare function windowsOcrScript(winPath: string): string;
+/** The script, encoded the way `-EncodedCommand` takes it: base64 of UTF-16LE. */
+export declare function encodePs(script: string): string;
+export declare const WINDOWS_OCR_LANG_HINT = "Windows has no OCR language installed: Settings \u2192 Time & language \u2192 Language & region \u2192 add a language, then tick its optical character recognition feature";
+/** Which engine would answer, without reading anything. Asked BEFORE the phone
+ *  offers the verb, so a button is never shown for a reader that is not there. */
+export declare function ocrStatus(platform?: string): Promise<OcrStatus>;
+export declare function ocrInstallHint(platform?: string, wsl?: boolean): string;
+/** Tidy the engine's lines: trim trailing spaces, collapse runs of blank lines. */
+export declare function tidyOcr(raw: string): string;
+/** Every word in one image, read on this desktop. Never throws. */
+export declare function readImageLocal(image: Buffer, mime: string): Promise<OcrAnswer>;
+/** Tests only: forget what `which` answered. */
+export declare function _resetOcrProbe(): void;

package/packages/host/dist/ocrlocal.js

@@ -0,0 +1,297 @@
+/**
+ * The whole picture's words, read ON THIS DESKTOP — the "send the text, not the
+ * photo" path of the annotator (`POST /api/host/ocr`).
+ *
+ * ── Why it is local ─────────────────────────────────────────────────────────
+ *
+ * The case that asked for this: a PHOTO of another screen — an error a person cannot
+ * copy, on a machine they cannot screenshot — taken with their own face, room
+ * or colleague in the frame. What they want an agent to see is the words; what
+ * they do not want is the picture leaving the house, to an agent OR to a second
+ * cloud model. So the reading is local and nothing else is:
+ *
+ *  - macOS: Apple's Vision framework (`VNRecognizeTextRequest`, accurate +
+ *    language correction), through a tiny Swift helper compiled ONCE with
+ *    `swiftc` into the state dir. Measured on a 1.4 MB phone photo: the
+ *    interpreted `swift file.swift` took ~29 s (compile every time); the
+ *    compiled helper is the read alone.
+ *  - Windows (WSL2, the supported route, or a native host): the OS's own
+ *    `Windows.Media.Ocr`, driven through `powershell.exe` — on-device, nothing
+ *    to install beyond a language with OCR, which most installs already have.
+ *    From WSL the picture is copied to the Windows %TEMP% by PowerShell itself
+ *    and deleted there in its own `finally`.
+ *  - elsewhere, or when Windows OCR has no language: `tesseract` on PATH.
+ *  - neither: a SENTENCE naming what to install, as a 200.
+ *
+ * Same posture as `dictate.ts`: it DECIDES nothing. The text
+ * goes back to the phone, which shows it in an editable box; the person edits or
+ * drops it, and only what they then send reaches an agent. There is no repo in
+ * this module, nothing is written anywhere but a `tmpdir()` file removed in a
+ * `finally`, and the failure log never carries the words.
+ *
+ * Degrades to a REASON, never to a guess: off, no engine, unreadable image,
+ * an engine that failed and a picture with no words are different sentences.
+ */
+import { execFile } from "node:child_process";
+import { existsSync, readFileSync } from "node:fs";
+import { chmod, copyFile, mkdir, mkdtemp, rename, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { BRAND, envName } from "@waterplane/shared";
+import { env, STATE_DIR } from "./env.js";
+const RUN_TIMEOUT_MS = 60_000;
+const COMPILE_TIMEOUT_MS = 180_000;
+/** A photo of a screen is a few thousand characters at most; past this the
+ *  engine is reading wallpaper, and the phone's box would be unusable anyway. */
+export const OCR_MAX_CHARS = 40_000;
+/** Where the compiled Vision helper lives — outside every repo, rebuilt when
+ *  the source below changes (the version is in the name). */
+const HELPER_VERSION = 1;
+function helperPath() { return join(STATE_DIR, "bin", `ocr-vision-v${HELPER_VERSION}`); }
+/** The Swift helper: one image path in, recognised lines out, in reading order.
+ *  Exit 2 = the image could not be decoded (a reason, not a crash). */
+export const VISION_SWIFT = `import Foundation
+import Vision
+import AppKit
+let path = CommandLine.arguments[1]
+guard let img = NSImage(contentsOfFile: path),
+      let cg = img.cgImage(forProposedRect: nil, context: nil, hints: nil) else {
+  FileHandle.standardError.write("cannot decode image\\n".data(using: .utf8)!)
+  exit(2)
+}
+let req = VNRecognizeTextRequest()
+req.recognitionLevel = .accurate
+req.usesLanguageCorrection = true
+if #available(macOS 13.0, *) { req.automaticallyDetectsLanguage = true }
+do { try VNImageRequestHandler(cgImage: cg, options: [:]).perform([req]) } catch {
+  FileHandle.standardError.write("vision failed: \\(error)\\n".data(using: .utf8)!)
+  exit(3)
+}
+for o in (req.results ?? []) { if let c = o.topCandidates(1).first { print(c.string) } }
+`;
+function run(bin, args, timeout) {
+    return new Promise((resolve) => {
+        execFile(bin, args, { timeout, maxBuffer: 8 * 1024 * 1024 }, (err, stdout, stderr) => {
+            const code = err ? (typeof err.code === "number" ? err.code : -1) : 0;
+            resolve({ code, stdout: String(stdout ?? ""), stderr: String(stderr ?? "") || (err && code === -1 ? String(err.message || err) : "") });
+        });
+    });
+}
+let onPath = new Map();
+async function has(bin) {
+    if (!onPath.has(bin)) {
+        const probe = process.platform === "win32" ? run("where", [bin], 5000) : run("/usr/bin/env", ["which", bin], 5000);
+        onPath.set(bin, (await probe).code === 0);
+    }
+    return onPath.get(bin);
+}
+/** One compile at a time, shared by every caller that arrives during it. */
+let compiling = null;
+/** Compile the Vision helper if it is not there yet. Answers the binary path, or
+ *  null with the reason left in `lastCompileError`. */
+async function visionHelper() {
+    const bin = helperPath();
+    if (existsSync(bin))
+        return bin;
+    if (!(await has("swiftc")))
+        return null;
+    compiling ??= (async () => {
+        const dir = await mkdtemp(join(tmpdir(), `${BRAND.slug}-ocrc-`));
+        try {
+            const src = join(dir, "ocr.swift");
+            await writeFile(src, VISION_SWIFT);
+            const out = join(dir, "ocr-vision");
+            const r = await run("swiftc", ["-O", src, "-o", out], COMPILE_TIMEOUT_MS);
+            if (r.code !== 0) {
+                lastCompileError = r.stderr.split("\n").find((l) => l.trim()) || `swiftc exited ${r.code}`;
+                return null;
+            }
+            await mkdir(join(STATE_DIR, "bin"), { recursive: true });
+            // Copy then rename INSIDE the state dir: tmpdir may be another volume
+            // (EXDEV), and a half-copied binary must never sit at the final name.
+            await copyFile(out, `${bin}.tmp`);
+            await chmod(`${bin}.tmp`, 0o755);
+            await rename(`${bin}.tmp`, bin);
+            return bin;
+        }
+        catch (e) {
+            lastCompileError = String(e?.message || e);
+            return null;
+        }
+        finally {
+            await rm(dir, { recursive: true, force: true }).catch(() => { });
+            compiling = null;
+        }
+    })();
+    return compiling;
+}
+let lastCompileError = "";
+/** Whether this Linux is WSL — the Windows side (and its OCR) is one
+ *  `powershell.exe` away through interop. */
+export function isWsl(e = process.env, procVersion) {
+    if (e.WSL_DISTRO_NAME || e.WSL_INTEROP)
+        return true;
+    try {
+        return /microsoft/i.test(procVersion ?? readFileSync("/proc/version", "utf8"));
+    }
+    catch {
+        return false;
+    }
+}
+/** Windows' own OCR is reachable: a native Windows host, or WSL with interop on. */
+async function windowsOcrReachable(platform) {
+    if (platform === "win32")
+        return true;
+    return platform === "linux" && isWsl() && (await has("powershell.exe"));
+}
+/** A string literal PowerShell takes verbatim: single quotes, doubled inside. */
+export function psQuote(s) {
+    // PowerShell reads U+2018 U+2019 U+201A U+201B as single quotes too.
+    return `'${s.replace(/['\u2018\u2019\u201A\u201B]/g, (c) => c + c)}'`;
+}
+/**
+ * The Windows reader, as one PowerShell 5.1 script (`-EncodedCommand`, so no
+ * script file, no execution-policy prompt and no quoting through two shells).
+ * Exit codes mirror the Vision helper's: 2 = not decodable, 4 = no OCR
+ * language installed, 5 = past `OcrEngine.MaxImageDimension`.
+ */
+export function windowsOcrScript(winPath) {
+    return `$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [System.Text.Encoding]::UTF8
+Add-Type -AssemblyName System.Runtime.WindowsRuntime
+$null = [Windows.Storage.StorageFile, Windows.Storage, ContentType = WindowsRuntime]
+$null = [Windows.Media.Ocr.OcrEngine, Windows.Foundation, ContentType = WindowsRuntime]
+$null = [Windows.Graphics.Imaging.BitmapDecoder, Windows.Graphics, ContentType = WindowsRuntime]
+$asTask = ([System.WindowsRuntimeSystemExtensions].GetMethods() | Where-Object { $_.Name -eq 'AsTask' -and $_.GetParameters().Count -eq 1 -and $_.GetParameters()[0].ParameterType.Name -eq 'IAsyncOperation\`1' })[0]
+function Await($op, [Type]$t) { $task = $asTask.MakeGenericMethod($t).Invoke($null, @($op)); $null = $task.Wait(-1); $task.Result }
+$engine = [Windows.Media.Ocr.OcrEngine]::TryCreateFromUserProfileLanguages()
+if ($null -eq $engine) { [Console]::Error.WriteLine('no OCR language installed'); exit 4 }
+$src = ${psQuote(winPath)}
+$local = Join-Path $env:TEMP ('${BRAND.slug}-ocr-' + [guid]::NewGuid().ToString('N') + [IO.Path]::GetExtension($src))
+$code = 0
+$stream = $null
+try {
+  Copy-Item -LiteralPath $src -Destination $local
+  $bitmap = $null
+  try {
+    $file = Await ([Windows.Storage.StorageFile]::GetFileFromPathAsync($local)) ([Windows.Storage.StorageFile])
+    $stream = Await ($file.OpenAsync([Windows.Storage.FileAccessMode]::Read)) ([Windows.Storage.Streams.IRandomAccessStream])
+    $decoder = Await ([Windows.Graphics.Imaging.BitmapDecoder]::CreateAsync($stream)) ([Windows.Graphics.Imaging.BitmapDecoder])
+    $bitmap = Await ($decoder.GetSoftwareBitmapAsync()) ([Windows.Graphics.Imaging.SoftwareBitmap])
+  } catch { [Console]::Error.WriteLine("cannot decode image: $_"); $code = 2 }
+  $max = [Windows.Media.Ocr.OcrEngine]::MaxImageDimension
+  if ($code -eq 0 -and ($bitmap.PixelWidth -gt $max -or $bitmap.PixelHeight -gt $max)) { [Console]::Error.WriteLine("larger than $max px"); $code = 5 }
+  if ($code -eq 0) {
+    $result = Await ($engine.RecognizeAsync($bitmap)) ([Windows.Media.Ocr.OcrResult])
+    foreach ($line in $result.Lines) { [Console]::Out.WriteLine($line.Text) }
+  }
+} catch { [Console]::Error.WriteLine("windows ocr failed: $_"); $code = 3 }
+finally {
+  if ($stream) { $stream.Dispose() }
+  Remove-Item -LiteralPath $local -Force -ErrorAction SilentlyContinue
+}
+exit $code
+`;
+}
+/** The script, encoded the way `-EncodedCommand` takes it: base64 of UTF-16LE. */
+export function encodePs(script) { return Buffer.from(script, "utf16le").toString("base64"); }
+async function runWindowsOcr(file, platform) {
+    let winPath = file;
+    if (platform !== "win32") {
+        const w = await run("wslpath", ["-w", file], 5000);
+        if (w.code !== 0)
+            return { code: -1, stdout: "", stderr: "wslpath could not translate the image path" };
+        winPath = w.stdout.trim();
+    }
+    return run("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", encodePs(windowsOcrScript(winPath))], RUN_TIMEOUT_MS);
+}
+export const WINDOWS_OCR_LANG_HINT = "Windows has no OCR language installed: Settings → Time & language → Language & region → add a language, then tick its optical character recognition feature";
+/** Which engine would answer, without reading anything. Asked BEFORE the phone
+ *  offers the verb, so a button is never shown for a reader that is not there. */
+export async function ocrStatus(platform = process.platform) {
+    if (env("LOCAL_OCR") === "0")
+        return { available: false, reason: `on-device text reading is off on this host (${envName("LOCAL_OCR")}=0)` };
+    if (platform === "darwin" && existsSync(helperPath()))
+        return { available: true, engine: "vision" };
+    if (platform === "darwin" && (await has("swiftc"))) {
+        // The first compile is ~27 s (measured); start it the moment the phone asks
+        // whether the verb exists, so the read that follows pays only the read (~0.7 s).
+        void visionHelper();
+        return { available: true, engine: "vision" };
+    }
+    if (await windowsOcrReachable(platform))
+        return { available: true, engine: "windows" };
+    if (await has("tesseract"))
+        return { available: true, engine: "tesseract" };
+    return { available: false, reason: ocrInstallHint(platform) };
+}
+export function ocrInstallHint(platform = process.platform, wsl = platform === "linux" && isWsl()) {
+    if (platform === "darwin")
+        return "this Mac cannot read images on-device yet: install the Xcode command line tools (xcode-select --install) or tesseract (brew install tesseract)";
+    if (wsl)
+        return "this WSL host cannot reach Windows' own text reader (powershell.exe is not on PATH — WSL interop is off): turn interop on, or install tesseract (sudo apt install tesseract-ocr)";
+    return "this desktop cannot read images on-device: install tesseract (e.g. apt install tesseract-ocr)";
+}
+/** Tidy the engine's lines: trim trailing spaces, collapse runs of blank lines. */
+export function tidyOcr(raw) {
+    return raw.replace(/\r/g, "").split("\n").map((l) => l.replace(/\s+$/, "")).join("\n").replace(/\n{3,}/g, "\n\n").trim();
+}
+/** Every word in one image, read on this desktop. Never throws. */
+export async function readImageLocal(image, mime) {
+    const st = await ocrStatus();
+    if (!st.available)
+        return { error: st.reason };
+    const t0 = Date.now();
+    const ext = /png/.test(mime) ? "png" : /webp/.test(mime) ? "webp" : /heic|heif/.test(mime) ? "heic" : "jpg";
+    const dir = await mkdtemp(join(tmpdir(), `${BRAND.slug}-ocr-`));
+    try {
+        const file = join(dir, `in.${ext}`);
+        await writeFile(file, image);
+        let r = null;
+        let engine = st.engine;
+        /** Why the preferred engine could not answer, said if nothing after it can. */
+        let why = "";
+        if (st.engine === "vision") {
+            const bin = await visionHelper();
+            if (bin)
+                r = await run(bin, [file], RUN_TIMEOUT_MS);
+            else
+                why = `the on-device reader could not be built${lastCompileError ? `: ${lastCompileError}` : ""}`;
+        }
+        else if (st.engine === "windows") {
+            r = await runWindowsOcr(file, process.platform);
+            // No OCR language on Windows is a setup gap, not a verdict on the picture:
+            // tesseract, when present, still answers.
+            if (r.code === 4) {
+                why = WINDOWS_OCR_LANG_HINT;
+                r = null;
+            }
+        }
+        if (!r && (await has("tesseract"))) {
+            engine = "tesseract";
+            r = await run("tesseract", [file, "-", "--psm", "3"], RUN_TIMEOUT_MS);
+        }
+        if (!r)
+            return { error: why || ocrInstallHint() };
+        if (r.code === 2)
+            return { error: "that image could not be decoded on the desktop" };
+        if (r.code === 5)
+            return { error: "that picture is larger than Windows' text reader takes — crop it first" };
+        if (r.code !== 0) {
+            console.warn(`[ocr] ${engine} exited ${r.code} after ${Date.now() - t0}ms (${image.length} bytes)`);
+            return { error: `the on-device reader failed (${engine}, exit ${r.code})` };
+        }
+        const text = tidyOcr(r.stdout);
+        if (!text)
+            return { error: "no readable text in that picture" };
+        if (text.length > OCR_MAX_CHARS)
+            return { error: `that picture held more than ${OCR_MAX_CHARS.toLocaleString("en")} characters — crop it first` };
+        return { text, engine, ms: Date.now() - t0 };
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true }).catch(() => { });
+    }
+}
+/** Tests only: forget what `which` answered. */
+export function _resetOcrProbe() { onPath = new Map(); }
+//# sourceMappingURL=ocrlocal.js.map

package/packages/host/dist/ocrlocal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocrlocal.js","sourceRoot":"","sources":["../src/ocrlocal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAM1C,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC;iFACiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAEpC;6DAC6D;AAC7D,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,SAAS,UAAU,KAAa,OAAO,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;AAEjG;uEACuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;CAkB3B,CAAC;AAEF,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,OAAe;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;AACxC,KAAK,UAAU,GAAG,CAAC,GAAW;IAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACnH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;AAC1B,CAAC;AAED,4EAA4E;AAC5E,IAAI,SAAS,GAAkC,IAAI,CAAC;AACpD;uDACuD;AACvD,KAAK,UAAU,YAAY;IACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,SAAS,KAAK,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YACnC,MAAM,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,kBAAkB,CAAC,CAAC;YAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAC,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAC9H,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,sEAAsE;YACtE,sEAAsE;YACtE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC,GAAG,GAAG,MAAM,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,MAAM,CAAC,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,gBAAgB,GAAG,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChE,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,IAAI,gBAAgB,GAAG,EAAE,CAAC;AAE1B;6CAC6C;AAC7C,MAAM,UAAU,KAAK,CAAC,IAAuB,OAAO,CAAC,GAAG,EAAE,WAAoB;IAC5E,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACjH,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,mBAAmB,CAAC,QAAgB;IACjD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,OAAO,CAAC,CAAS;IAC/B,qEAAqE;IACrE,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO;;;;;;;;;;SAUA,OAAO,CAAC,OAAO,CAAC;iCACQ,KAAK,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;CAwB1C,CAAC;AACF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,QAAQ,CAAC,MAAc,IAAY,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAE9G,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,QAAgB;IACzD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QACxG,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AACxK,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAChC,6JAA6J,CAAC;AAEhK;kFACkF;AAClF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,WAAmB,OAAO,CAAC,QAAQ;IACjE,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,+CAA+C,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC5I,IAAI,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpG,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnD,4EAA4E;QAC5E,iFAAiF;QACjF,KAAK,YAAY,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACvF,IAAI,MAAM,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5E,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,WAAmB,OAAO,CAAC,QAAQ,EAAE,MAAe,QAAQ,KAAK,OAAO,IAAI,KAAK,EAAE;IAChH,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,gJAAgJ,CAAC;IACnL,IAAI,GAAG;QAAE,OAAO,kLAAkL,CAAC;IACnM,OAAO,+FAA+F,CAAC;AACzG,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3H,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;IAC9D,MAAM,EAAE,GAAG,MAAM,SAAS,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5G,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,GAA4D,IAAI,CAAC;QACtE,IAAI,MAAM,GAAW,EAAE,CAAC,MAAM,CAAC;QAC/B,+EAA+E;QAC/E,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAC;YACjC,IAAI,GAAG;gBAAE,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,CAAC;;gBAC/C,GAAG,GAAG,0CAA0C,gBAAgB,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzG,CAAC;aAAM,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChD,2EAA2E;YAC3E,0CAA0C;YAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAAC,GAAG,GAAG,qBAAqB,CAAC;gBAAC,CAAC,GAAG,IAAI,CAAC;YAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,GAAG,WAAW,CAAC;YACrB,CAAC,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,IAAI,cAAc,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,wEAAwE,EAAE,CAAC;QAC7G,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,SAAS,MAAM,WAAW,CAAC,CAAC,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC;YACpG,OAAO,EAAE,KAAK,EAAE,gCAAgC,MAAM,UAAU,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;YAAE,OAAO,EAAE,KAAK,EAAE,+BAA+B,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAClJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,cAAc,KAAW,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC"}

package/packages/host/dist/onboard.d.ts

@@ -0,0 +1,182 @@
+import { type BuildConfig, type Intent, type IntentDraft, type BuildRun, type OnboardConsent, type OnboardJob, type OnboardPath, type OnboardPlan } from "@waterplane/shared";
+import { type AndroidEnvReport } from "./androidenv.js";
+import { type ToolchainPlan, type ToolchainResult } from "./toolchain.js";
+import { type EnsureResult, type LinkResult } from "./signkey.js";
+import { type NewRepoOpts, type NewRepoResult } from "./scaffold.js";
+/** Cold Gradle build measured in WP1: 323 s. Said up front so the wait is explained. */
+export declare const ANDROID_FIRST_BUILD_WORDS = "First build: the slow one, about 5 minutes (Gradle fetches its own dependencies once; later builds take seconds)";
+/** How long the job waits on a build before it stops waiting (the build itself keeps running). */
+export declare const BUILD_WAIT_MS: number;
+/** How long the session step waits for the store to open the session before it reports the intent. */
+export declare const SESSION_WAIT_MS = 60000;
+export declare const SUGGESTED_PROMPT: Record<OnboardPath, string>;
+export interface OnboardDeps {
+    root: string;
+    /**
+     * The desktop's home folder, for WORDS only: a path under it is said `~/dev/hello-otter`, the
+     * way a terminal says it, instead of the full `/Users/<name>/…` a phone row wraps three times.
+     * Never used to decide anything — `folder` and every path the job acts on stay absolute.
+     */
+    home?: string;
+    now(): number;
+    /** The persisted job (null when none) and its writer. */
+    readState(): string | null;
+    writeState(text: string): void;
+    /** A job transition, for the socket. */
+    emit(job: OnboardJob): void;
+    /** The host's own environment (is `JAVA_HOME` / `ANDROID_HOME` already set for builds?). */
+    env: Record<string, string | undefined>;
+    exists(path: string): boolean;
+    readText(path: string): string | null;
+    writeText(path: string, text: string): void;
+    sleep(ms: number): Promise<void>;
+    probe(): AndroidEnvReport;
+    planToolchain(r: AndroidEnvReport): ToolchainPlan;
+    runToolchain(opts: {
+        acceptLicences: boolean;
+    }): Promise<ToolchainResult>;
+    /** Is the desktop key there (and is it intact)? */
+    key(): {
+        exists: boolean;
+        broken: boolean;
+        jks: string;
+        dir: string;
+    };
+    ensureKey(opts: {
+        keytool?: string;
+    }): EnsureResult;
+    linkKey(repo: string): LinkResult;
+    newRepo(root: string, parent: string, name: string, opts: NewRepoOpts): Promise<NewRepoResult | {
+        error: string;
+    }>;
+    repoId(dir: string): string;
+    /** The setup checklist's one-tap fixes (never the confirm-gated ones), applied. */
+    setup(repoDir: string): {
+        ok: boolean;
+        applied: string[];
+        notes: string[];
+        error?: string;
+    };
+    builds: {
+        list(repoDir: string): BuildConfig[];
+        /** `local`: the ids kept in this desktop's own file (absent ⇒ where each lives, new ⇒ shared). */
+        save(repoDir: string, builds: BuildConfig[], local?: string[]): BuildConfig[];
+        /** The ids this desktop's own (gitignored) file holds. Absent in a fake: none. */
+        localIds?(repoDir: string): string[];
+        run(repoDir: string, buildId: string): BuildRun | {
+            error: string;
+        };
+        /** The run as the store holds it now, or null when it is unknown. */
+        get(runId: string): BuildRun | null;
+    };
+    /**
+     * Open the session in the new repo. With `prompt`, through the intent store under `intentId`
+     * (at-most-once); without, adopt a live session in `repoDir` or create one.
+     */
+    openSession(o: {
+        repoDir: string;
+        title: string;
+        prompt?: string;
+        intentId: string;
+    }): Promise<{
+        sessionId?: string;
+        intentId?: string;
+        note: string;
+    } | {
+        error: string;
+    }>;
+}
+/** `text` with every path under `home` said from `~`. Display only (see `OnboardDeps.home`). */
+export declare function tildeText(text: string, home: string | undefined): string;
+/** What applies on this desktop for these answers, and the consent lines. Writes nothing. */
+export declare function planOnboard(raw: unknown, d: OnboardDeps): OnboardPlan;
+/** The consent line ids the plan requires that were not ticked. */
+export declare function missingConsent(plan: OnboardPlan, c: OnboardConsent): string[];
+export declare class OnboardManager {
+    private d;
+    private job;
+    private running;
+    constructor(d: OnboardDeps);
+    current(): OnboardJob | null;
+    /** `GET /api/onboard/plan`: read-only. */
+    plan(rawAnswers: unknown): OnboardPlan;
+    /** After a host restart: a job that was running carries on from the first step not done. */
+    boot(): boolean;
+    /** Refused in words, or the job (already running in the background). */
+    start(rawAnswers: unknown, rawConsent: unknown): {
+        ok: true;
+        job: OnboardJob;
+    } | {
+        ok: false;
+        error: string;
+        missing?: string[];
+        status: number;
+    };
+    /** Carry on a stopped job (after the person ran the command, or ticked what was missing). */
+    resume(rawConsent: unknown): {
+        ok: true;
+        job: OnboardJob;
+    } | {
+        ok: false;
+        error: string;
+        status: number;
+    };
+    /** Resolves when the background run settles (tests; the routes never wait). */
+    idle(): Promise<void>;
+    private kick;
+    private save;
+    private run;
+    private exec;
+    private probeStep;
+    private toolchainStep;
+    private scaffoldStep;
+    private keyStep;
+    private setupStep;
+    /**
+     * Point an Android build at the toolchain the probe found, when the host's own environment
+     * would not: `sdk.dir` in the repo's gitignored `local.properties`, and `JAVA_HOME` prefixed
+     * onto the repo's (gitignored, per-desktop) build commands. Both only ADD; idempotent.
+     */
+    private bindToolchain;
+    private buildStep;
+    private built;
+    private sessionStep;
+}
+export declare function onboardStateIO(stateDir: string): Pick<OnboardDeps, "readState" | "writeState">;
+export declare const fsDeps: Pick<OnboardDeps, "exists" | "readText" | "writeText" | "sleep">;
+export interface OnboardHost {
+    root: string;
+    stateDir: string;
+    builds: {
+        list(r: string): BuildConfig[];
+        save(r: string, b: BuildConfig[], local?: string[]): BuildConfig[];
+        localIds?(r: string): string[];
+        run(r: string, id: string): BuildRun | {
+            error: string;
+        };
+    };
+    intents: {
+        get(id: string): Intent | undefined;
+        post(draft: IntentDraft, now?: number): {
+            ok: boolean;
+            intent?: Intent;
+            existing?: boolean;
+            reason?: string;
+        };
+    };
+    sessions: {
+        list(): Array<{
+            id: string;
+            cwd: string;
+            running: boolean;
+        }>;
+        create(cwd: string, o: {
+            title?: string;
+        }): Promise<{
+            id: string;
+        }>;
+    };
+    recomputeWatched(): void;
+    broadcast(job: OnboardJob): void;
+}
+export declare function makeOnboardDeps(h: OnboardHost): OnboardDeps;