waterplane 0.0.1 → 0.1.6

package/packages/host/dist/routes/apisystem.js

@@ -0,0 +1,389 @@
+/**
+ * HTTP routes about the daemon and the link rather than any repo: health, the
+ * fork's theme, the web bundle, the two hook sinks, the four delegating
+ * route modules (peers, the agent's intents, onboarding), the speed test, the
+ * two telemetry roll-ups and Web Push. Moved out of `api.ts`
+ * (host-architecture.md, "api.ts — the HTTP routes as tables").
+ */
+import { readFile } from "node:fs/promises";
+import { extname } from "node:path";
+import { monitorEventLoopDelay } from "node:perf_hooks";
+import { PLUGIN_ROUTE_BODY_MAX, PROTOCOL_VERSION } from "@waterplane/shared";
+import { findTarget } from "../repos.js";
+import { handleOnboardRoutes } from "../onboardroutes.js";
+import { claudeSignInState } from "../doctor.js";
+import { themeOverlayState, wireThemeOverlay } from "../themeoverlay.js";
+import { collectDebug, drainUpload, serveDownload } from "../speedtest.js";
+import { sendBody, notModified, statTag } from "../httpio.js";
+import { webBundleFile, webBundleManifest } from "../webbundle.js";
+import { claudeBin } from "../backends/index.js";
+import { handleAgentIntents } from "../agentintents.js";
+import { handleAgentFollowUp } from "../agentfollowup.js";
+import { handlePeerRoutes } from "../peers/routes.js";
+import { PeerClient } from "../peers/client.js";
+import { handlePeerAgent } from "../peers/agentpeer.js";
+import { ownPtys } from "../ptycap.js";
+import { ACK_WRITE_FAILED } from "../acks.js";
+import { BadBody, MIME, json, readBody, readJson, serveFileStream } from "./apiio.js";
+import { rangeLastByte } from "../plugins/pluginfiles.js";
+import { localProcessRefusal } from "../net.js";
+import { setRestartNote } from "../restartnote.js";
+import { mount, route } from "./apitable.js";
+/** The phone's "is that desktop signed in" asks (`/api/peers/<name>/status`), never cached. */
+const peerAsker = new PeerClient();
+/**
+ * How late the event loop's timers fire. ONE loop pumps every PTY, so a
+ * blocking call anywhere (a sync `ps`, a sync tmux query) shows up as every
+ * session's output stalling at once — and nothing else on `/api/health` could
+ * say so. Enabled when this module loads (host start) and read-and-reset by
+ * each health call, so the figure is "the worst 1% since the last probe", not a
+ * lifetime average that buries a stall that has just begun.
+ */
+const loopDelay = monitorEventLoopDelay({ resolution: 10 });
+loopDelay.enable();
+/** p99 loop delay in whole ms since the previous call; 0 when nothing was sampled. */
+function takeLoopDelayP99Ms() {
+    const ms = loopDelay.count > 0 ? Math.round(loopDelay.percentile(99) / 1e6) : 0;
+    loopDelay.reset();
+    return ms;
+}
+/** A plugin id in a hook-sink path — the registry's own rule. */
+const PLUGIN_HOOK_ID = /^[a-z][a-z0-9-]{1,39}$/;
+export const SYSTEM_ROUTES = [
+    // ── Simple GETs ─────────────────────────────────────────────────────
+    route("*", "/api/health", ({ res }, ctx) => {
+        // `ptys` is the leak gauge: masters this process holds vs PTYs it should
+        // (one per live session, plus running builds) — see `ownPtys()`.
+        // `writeErrors`: a durable store whose last write did NOT reach the disk,
+        // in the error's own words — present only while one is failing. The ack
+        // ledger's means a retry after a restart may run twice; the intent
+        // store's means new work is being refused (`acks.ts`, `intents/disk.ts`).
+        const acksErr = ctx.acks?.lastWriteError() ?? null;
+        const intentsErr = ctx.intents.lastWriteError();
+        const writeErrors = acksErr || intentsErr
+            ? { ...(acksErr ? { acks: `${ACK_WRITE_FAILED} (${acksErr})` } : {}), ...(intentsErr ? { intents: `could not save to disk: ${intentsErr}` } : {}) }
+            : undefined;
+        json(res, { ok: true, protocol: PROTOCOL_VERSION, root: ctx.root, ptys: ownPtys(), sessions: ctx.sessions.list().length, loopDelayP99Ms: takeLoopDelayP99Ms(), ...(writeErrors ? { writeErrors } : {}) });
+        return true;
+    }),
+    // A fork's `<config dir>/theme.json`, CLEANED (`themeoverlay.ts`): colour
+    // tokens, the terminal palette, the display name. `{}` when there is none —
+    // the phone then applies nothing. Read-only; origin-gated like every /api.
+    // `icons` stays on the desktop: the served shell already links them.
+    route("GET", "/api/theme", ({ res }) => {
+        json(res, { overlay: wireThemeOverlay(themeOverlayState().overlay) });
+        return true;
+    }),
+    // ── Web bundle: what the Android shell updates itself from ──────────
+    // The APK carries the UI so a dead tunnel can't take the app away; these two
+    // routes are what stop that from also freezing it at APK build time. See
+    // webbundle.ts. Read-only, and they expose nothing `serveStatic` doesn't
+    // already hand out at `/` — this is the same tree, described instead of served.
+    route("*", "/api/webbundle", ({ res }) => {
+        json(res, webBundleManifest());
+        return true;
+    }),
+    route("*", "/api/webbundle/file", async ({ req, res, url }) => {
+        const hit = webBundleFile(url.searchParams.get("path") || "");
+        if (!hit) {
+            json(res, { ok: false, error: "not found" }, 404);
+            return true;
+        }
+        const etag = statTag(hit.size, hit.mtimeMs);
+        // The client asks with `&v=<buildId>`, so a URL is stable exactly as long as
+        // its contents are — an unchanged file costs a 304, a changed build a fetch.
+        if (notModified(req, res, etag, "no-cache"))
+            return true;
+        const body = await readFile(hit.abs);
+        sendBody(req, res, 200, body, {
+            "content-type": MIME[extname(hit.abs)] || "application/octet-stream",
+            "cache-control": "no-cache",
+            etag,
+        });
+        return true;
+    }),
+    // ── claude hook lifecycle sink ──────────────────────────────────────
+    // waterplane-spawned `claude` sessions POST their hook events here (injected via
+    // `--settings`): the positive turn-boundary signal — Stop = turn finished,
+    // SessionStart = conversation id, UserPromptSubmit = turn started. LOCAL ONLY:
+    // hooks always run on this machine, so refuse anything not from loopback even
+    // though a Tailscale peer could otherwise reach it (Tailscale is the app-wide
+    // boundary, but this endpoint has no reason to accept remote callers) — and
+    // refuse a PROXIED one too: behind `tailscale serve` every tailnet request
+    // arrives from 127.0.0.1, so loopback alone proves nothing (`net.ts`,
+    // `localProcessRefusal`, the one predicate all three sinks below share).
+    route("POST", "/api/hook", async ({ req, res }, ctx) => {
+        {
+            const refused = localProcessRefusal(req.socket.remoteAddress, req.headers);
+            if (refused) {
+                json(res, { ok: false, error: refused }, 403);
+                return true;
+            }
+        }
+        // Keeps reading a bad body as `{}` (so do the two plugin sinks below): its caller is the
+        // CLI's own hook command, which has nobody to show a 400 to, and the sink's
+        // contract is "no-op on anything it cannot use" (an unknown session included).
+        const body = await readJson(req, { optional: true }).catch(() => ({}));
+        try {
+            ctx.sessions.onHookEvent(body);
+        }
+        catch { /* a bad hook must never break the host */ }
+        res.writeHead(204).end();
+        return true;
+    }),
+    // ── a shell session's `$BROWSER` (`backends/shell.ts`'s shim) ──────
+    // Same loopback rule as /api/hook: the shim runs on this machine, inside the
+    // session's pane. Form-urlencoded `session` + `url`. Anything it cannot use —
+    // an unknown or ended session, not a shell, not an http(s) URL, over 4 KB —
+    // is 204 with nothing stored (`sessions/links.ts`): the shim exits 0 either
+    // way, and a caller learns nothing about which sessions exist. Never GET.
+    route("POST", "/api/shell/open", async ({ req, res }, ctx) => {
+        {
+            const refused = localProcessRefusal(req.socket.remoteAddress, req.headers);
+            if (refused) {
+                json(res, { ok: false, error: refused }, 403);
+                return true;
+            }
+        }
+        let form = null;
+        try {
+            form = new URLSearchParams((await readBody(req, 16 * 1024)).toString("utf8"));
+        }
+        catch { /* too large ⇒ nothing */ }
+        if (form) {
+            try {
+                ctx.sessions.addBrowserLink(form.get("session") ?? "", form.get("url"));
+            }
+            catch { /* never break the host */ }
+        }
+        res.writeHead(204).end();
+        return true;
+    }),
+    // ── why the next restart is coming (`restartnote.ts`) ────────────────
+    // `npm run restart` and `update` post one sentence before they signal the
+    // daemon, so `host.restarting` can say why. Same loopback rule as /api/hook:
+    // only a process on this machine restarts the host. JSON `{ reason }`; 204
+    // either way — the restart goes ahead with or without a note.
+    route("POST", "/api/host/restart-note", async ({ req, res }) => {
+        {
+            const refused = localProcessRefusal(req.socket.remoteAddress, req.headers);
+            if (refused) {
+                json(res, { ok: false, error: refused }, 403);
+                return true;
+            }
+        }
+        const body = await readJson(req, { optional: true }).catch(() => ({}));
+        setRestartNote(body?.reason);
+        res.writeHead(204).end();
+        return true;
+    }),
+    // ── a PLUGIN backend's hook sink (`api.hookSink()`) ─────────────────
+    // The same loopback rule as /api/hook. The body goes to the plugin's
+    // `onHook`; the response is its answer, HELD while that is pending and `{}`
+    // once the hold runs out (`PluginRegistry.hook`).
+    route("POST", "/api/plugin/:id/hook", async ({ req, res, params }, ctx) => {
+        if (!PLUGIN_HOOK_ID.test(params.id))
+            return false;
+        {
+            const refused = localProcessRefusal(req.socket.remoteAddress, req.headers);
+            if (refused) {
+                json(res, { ok: false, error: refused }, 403);
+                return true;
+            }
+        }
+        if (!ctx.pluginHook) {
+            json(res, { ok: false, error: "this host runs no plugins" }, 404);
+            return true;
+        }
+        // Tolerant like `/api/hook`: the CLI's hook command is the caller.
+        const r = await ctx.pluginHook(params.id, await readJson(req, { optional: true, anyJson: true }).catch(() => ({})));
+        json(res, r.body, r.status);
+        return true;
+    }),
+    // ── a file a plugin OFFERED (`api.offerFile()`, plugin API 1.5) ──────
+    // Its own prefix, so no plugin route pattern shadows it. Bytes (ranges for a resumed download),
+    // never cached; the core deletes the file once a response delivered its LAST byte
+    // (`pluginfiles.ts`). Gone — fetched, expired, or never offered — is a 404 in words.
+    route("GET", "/api/plugin-file/:id/:token", ({ req, res, params }, ctx) => {
+        if (!PLUGIN_HOOK_ID.test(params.id))
+            return false;
+        const f = ctx.pluginFile?.(params.id, params.token) ?? null;
+        if (!f) {
+            json(res, { error: "that file is gone from the desktop — it is deleted once fetched, or when its time runs out; ask for it again" }, 404);
+            return true;
+        }
+        const etag = `"o-${f.token.slice(0, 12)}-${f.size}"`;
+        const ifRange = req.headers["if-range"];
+        if (ifRange && ifRange !== etag)
+            delete req.headers.range;
+        const last = rangeLastByte(req.headers.range, f.size);
+        const mime = MIME[extname(f.name).toLowerCase()] || "application/octet-stream";
+        serveFileStream(req, res, f.file, f.size, mime, {
+            "content-disposition": `attachment; filename="${f.name.replace(/[^\w. -]/g, "_")}"`, "cache-control": "no-store", etag,
+        });
+        // Delivered = the response that ends at the last byte FINISHED (every byte handed to the socket).
+        if (last === f.size - 1)
+            res.on("finish", () => f.delivered());
+        return true;
+    }),
+    // ── a plugin's static ASSETS (`manifest.assets`) ─────────────────────
+    // GET|HEAD only (any other verb falls through to the plugin's own routes), ahead of
+    // `* /api/plugin/:id/*` so no plugin route shadows it. Same gates as every /api route; NOT an
+    // OPAQUE_READ_ROUTE and not in `passive.ts`. Streamed (multi-MB wasm), ranges honoured, ETag.
+    route("*", "/api/plugin/:id/asset/:file", ({ req, res, method, params }, ctx) => {
+        if ((method !== "GET" && method !== "HEAD") || !PLUGIN_HOOK_ID.test(params.id) || !ctx.pluginAsset)
+            return false;
+        const a = ctx.pluginAsset(params.id, params.file);
+        if (!a.ok) {
+            json(res, { error: a.error }, a.status);
+            return true;
+        }
+        const etag = `"a-${a.size.toString(36)}-${Math.floor(a.mtimeMs).toString(36)}"`;
+        const headers = { etag, "cache-control": "no-cache", "x-content-type-options": "nosniff" };
+        if (notModified(req, res, etag, "no-cache"))
+            return true;
+        const ifRange = req.headers["if-range"];
+        if (ifRange && ifRange !== etag)
+            delete req.headers.range;
+        if (method === "HEAD") {
+            res.writeHead(200, { "content-type": a.mime, "content-length": String(a.size), "accept-ranges": "bytes", ...headers });
+            res.end();
+            return true;
+        }
+        serveFileStream(req, res, a.file, a.size, a.mime, headers);
+        return true;
+    }),
+    // ── a plugin's OWN routes (`api.route()`, plugin API 1.2) ────────────
+    // Namespaced under its id, and served HERE — so behind the same origin/Host
+    // and token gates as every route in this file; not loopback-only, never in
+    // `OPAQUE_READ_ROUTES`. Nothing served ⇒ `false`, the plain 404.
+    route("*", "/api/plugin/:id/*", async ({ req, res, url, method, params, rest }, ctx) => {
+        if (!PLUGIN_HOOK_ID.test(params.id) || !ctx.pluginRoute)
+            return false;
+        const run = ctx.pluginRoute(params.id, method, rest);
+        if (!run)
+            return false;
+        // A null-prototype object: `?constructor=` or `?__proto__=` is a plain key, first value wins.
+        const query = Object.create(null);
+        for (const [k, v] of url.searchParams)
+            if (!Object.hasOwn(query, k))
+                query[k] = v;
+        // Any method, so usually no body (a GET); any JSON value, since the payload is
+        // the plugin's own. Over the cap ⇒ `BadBody` 413, answered by `handleApi`. Not
+        // JSON ⇒ `{}`, because that is the published plugin API (`shared/plugin.ts`'s
+        // `route`: "`{}` when there is none or it is not JSON") — changing it is a
+        // plugin-API decision, not this edge's.
+        const body = await readJson(req, { limit: PLUGIN_ROUTE_BODY_MAX, optional: true, anyJson: true })
+            .catch((e) => { if (e instanceof BadBody && e.status === 400)
+            return {}; throw e; });
+        const r = await run({ query, body });
+        json(res, r.body, r.status);
+        return true;
+    }),
+    // ── Peer desktops: pairing (phone, trusted path) and the peer API (`peers/routes.ts`) ──
+    mount("peers/routes", async ({ req, res, path, url }, ctx) => !!(ctx.peers && ctx.canManage && await handlePeerRoutes(req, res, path, url, {
+        store: ctx.peers, canManage: ctx.canManage, json, readJson: (r) => readJson(r),
+        signedIn: () => claudeSignInState(claudeBin()),
+        askPeer: (t) => peerAsker.helloFresh(t),
+    }))),
+    // `/api/agent/peer/<peer>/intents`: the agentintents twin that hands a job to a peer (`peers/agentpeer.ts`).
+    mount("peers/agentpeer", ({ req, res, path, url }) => handlePeerAgent(req, res, path, url, { json, readJson: (r) => readJson(r) })),
+    // ── Later work posted by an AGENT on this desktop ───────────────────
+    // `POST|GET|DELETE /api/agent/intents[/<id>]` — loopback-only, never a
+    // browser, never proxied (`agentCallerRefusal`), and one path into the store
+    // with the phone's `intent.post` (`postClientDraft`). See agentintents.ts.
+    mount("agentintents", ({ req, res, path, url }, ctx) => handleAgentIntents(req, res, path, url, {
+        intents: ctx.intents,
+        backlog: ctx.backlog,
+        periods: ctx.periods,
+        containRepoDir: (d) => ctx.containRepoDir(d),
+        sessionCwd: (id) => { const s = ctx.sessions.get(id); return s && s.running ? s.cwd : null; },
+        repoDir: async (id) => (await findTarget(ctx.root, id))?.worktreePath ?? null,
+        json,
+        readJson: (r) => readJson(r),
+    })),
+    // `POST /api/agent/followup` — an agent flags its OWN session for follow up; sets, never clears (`agentfollowup.ts`).
+    mount("agentfollowup", ({ req, res, path }, ctx) => handleAgentFollowUp(req, res, path, { sessions: ctx.sessions, json, readJson: (r) => readJson(r) })),
+    // ── First app: plan, start, resume, read back (`onboardroutes.ts`) ──
+    mount("onboardroutes", ({ req, res, path, url }, ctx) => handleOnboardRoutes(req, res, path, url, { onboard: ctx.onboard, json, readJson: (r) => readJson(r, { optional: true }), signedIn: () => claudeSignInState(claudeBin()) })),
+    // ── Speed test (bidirectional throughput + connection diagnostics) ──
+    // Not repo-scoped: it measures the transport, not any repo. Traffic rides
+    // whatever origin the phone loaded (Tailscale IP or LAN IP), so the numbers
+    // reflect the real path in use.
+    route("GET", "/api/speedtest/download", ({ res, url }) => {
+        serveDownload(res, Number(url.searchParams.get("bytes") || 0));
+        return true;
+    }),
+    route("POST", "/api/speedtest/upload", async ({ req, res }) => {
+        try {
+            json(res, { ok: true, ...(await drainUpload(req)) });
+        }
+        catch (e) {
+            json(res, { ok: false, error: String(e.message || e) }, 413);
+        }
+        return true;
+    }),
+    route("GET", "/api/speedtest/debug", async ({ req, res }) => {
+        json(res, await collectDebug(req));
+        return true;
+    }),
+    // ── UI feature-usage counters ───────────────────────────────────────
+    // POST a delta ({ counts: { "toolbar:diff": 3 } }) — the phone batches its
+    // local tracking and flushes here (fetch keepalive / sendBeacon on hide), so
+    // this must stay cheap and never fail the client. GET returns the whole doc
+    // (Settings → feature usage); DELETE resets the window.
+    route("POST", "/api/ui-usage", async ({ req, res }, ctx) => {
+        const body = await readJson(req, { optional: true });
+        const n = ctx.uiStats.merge(body?.counts ?? body);
+        json(res, { ok: true, merged: n });
+        return true;
+    }),
+    route("GET", "/api/ui-usage", ({ res }, ctx) => {
+        json(res, ctx.uiStats.get());
+        return true;
+    }),
+    route("DELETE", "/api/ui-usage", ({ res }, ctx) => {
+        ctx.uiStats.reset();
+        json(res, { ok: true });
+        return true;
+    }),
+    // Connectivity + delivery telemetry (netstats.ts). The phone POSTs a small
+    // roll-up of its OWN side of the link — socket RTT, reconnects, how long text
+    // sat queued — which the host cannot observe; the host contributes the socket
+    // lifecycle and the outcome of every verified compose delivery. Same shape of
+    // contract as /api/ui-usage: cheap, never fails the client, DELETE resets the
+    // window. Nothing here leaves the machine.
+    route("POST", "/api/netstats", async ({ req, res }, ctx) => {
+        const body = await readJson(req, { optional: true });
+        ctx.netstats.putClientReport(String(body?.deviceId ?? ""), body?.report ?? body);
+        json(res, { ok: true });
+        return true;
+    }),
+    route("GET", "/api/netstats", ({ res }, ctx) => {
+        json(res, ctx.netstats.snapshot());
+        return true;
+    }),
+    route("DELETE", "/api/netstats", ({ res }, ctx) => {
+        json(res, ctx.netstats.reset());
+        return true;
+    }),
+    // ── Web Push ────────────────────────────────────────────────────────
+    route("GET", "/api/push/key", ({ res }, ctx) => {
+        json(res, { key: ctx.push.publicKey });
+        return true;
+    }),
+    route("POST", "/api/push/subscribe", async ({ req, res }, ctx) => {
+        const sub = await readJson(req);
+        ctx.push.subscribe(sub);
+        json(res, { ok: true });
+        return true;
+    }),
+    route("POST", "/api/push/unsubscribe", async ({ req, res }, ctx) => {
+        const { endpoint } = await readJson(req, { optional: true });
+        if (endpoint)
+            ctx.push.unsubscribe(String(endpoint));
+        json(res, { ok: true });
+        return true;
+    }),
+];
+//# sourceMappingURL=apisystem.js.map

package/packages/host/dist/routes/apisystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apisystem.js","sourceRoot":"","sources":["../../src/routes/apisystem.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAiB,MAAM,eAAe,CAAC;AAE5D,+FAA+F;AAC/F,MAAM,SAAS,GAAG,IAAI,UAAU,EAAE,CAAC;AAEnC;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,qBAAqB,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,SAAS,CAAC,MAAM,EAAE,CAAC;AAEnB,sFAAsF;AACtF,SAAS,kBAAkB;IACzB,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iEAAiE;AACjE,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD,uEAAuE;IACvE,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QACzC,yEAAyE;QACzE,iEAAiE;QACjE,0EAA0E;QAC1E,wEAAwE;QACxE,mEAAmE;QACnE,0EAA0E;QAC1E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC;QACnD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,OAAO,IAAI,UAAU;YACvC,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,gBAAgB,KAAK,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,2BAA2B,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACnJ,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1M,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,qEAAqE;IACrE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,uEAAuE;IACvE,6EAA6E;IAC7E,yEAAyE;IACzE,yEAAyE;IACzE,gFAAgF;IAChF,KAAK,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;QACvC,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,6EAA6E;QAC7E,6EAA6E;QAC7E,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE;YAC5B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,0BAA0B;YACpE,eAAe,EAAE,UAAU;YAC3B,IAAI;SACL,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,uEAAuE;IACvE,iFAAiF;IACjF,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,8EAA8E;IAC9E,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QACrD,CAAC;YAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5J,yFAAyF;QACzF,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC;YAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QAC5F,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,sEAAsE;IACtE,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAC3D,CAAC;YAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5J,IAAI,IAAI,GAA2B,IAAI,CAAC;QACxC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,eAAe,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QAC1H,IAAI,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAAC,CAAC;QACnI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,8DAA8D;IAC9D,KAAK,CAAC,MAAM,EAAE,wBAAwB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QAC7D,CAAC;YAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5J,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAyB,CAAC;QAC/F,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,uEAAuE;IACvE,qEAAqE;IACrE,4EAA4E;IAC5E,kDAAkD;IAClD,KAAK,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE;QACxE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,CAAC;YAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAAC,IAAI,OAAO,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5J,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACxG,mEAAmE;QACnE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAG,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrH,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,wEAAwE;IACxE,gGAAgG;IAChG,kFAAkF;IAClF,qFAAqF;IACrF,KAAK,CAAC,KAAK,EAAE,6BAA6B,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE;QACxE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,KAAM,CAAC,IAAI,IAAI,CAAC;QAC9D,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8GAA8G,EAAE,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACnK,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;QACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;QAC/E,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE;YAC9C,qBAAqB,EAAE,yBAAyB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI;SACvH,CAAC,CAAC;QACH,kGAAkG;QAClG,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,wEAAwE;IACxE,oFAAoF;IACpF,8FAA8F;IAC9F,8FAA8F;IAC9F,KAAK,CAAC,GAAG,EAAE,6BAA6B,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE;QAC9E,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAClH,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAG,EAAE,MAAM,CAAC,IAAK,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACpE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;QAChF,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC;QAC3F,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YACvH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QACD,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,wEAAwE;IACxE,4EAA4E;IAC5E,2EAA2E;IAC3E,iEAAiE;IACjE,KAAK,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE;QACrF,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAG,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,EAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,8FAA8F;QAC9F,MAAM,KAAK,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,YAAY;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClF,+EAA+E;QAC/E,+EAA+E;QAC/E,8EAA8E;QAC9E,2EAA2E;QAC3E,wCAAwC;QACxC,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;aACvG,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,0FAA0F;IAC1F,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,SAAS,IAAI,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;QACzI,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9E,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;KACxC,CAAC,CAAC,CAAC;IACJ,6GAA6G;IAC7G,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEnI,uEAAuE;IACvE,uEAAuE;IACvE,6EAA6E;IAC7E,2EAA2E;IAC3E,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE;QAC9F,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,IAAI,IAAI;QAC7E,IAAI;QACJ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;KAC7B,CAAC,CAAC;IAEH,sHAAsH;IACtH,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAExJ,uEAAuE;IACvE,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAEpO,uEAAuE;IACvE,0EAA0E;IAC1E,4EAA4E;IAC5E,gCAAgC;IAChC,KAAK,CAAC,KAAK,EAAE,yBAAyB,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QACvD,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE;QAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,uEAAuE;IACvE,2EAA2E;IAC3E,6EAA6E;IAC7E,4EAA4E;IAC5E,wDAAwD;IACxD,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAChD,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,2CAA2C;IAC3C,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAChD,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,uEAAuE;IACvE,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;CACH,CAAC"}

package/packages/host/dist/routes/apitable.d.ts

@@ -0,0 +1,180 @@
+/**
+ * The HTTP API's registration: `route(method, pattern, handler)` and
+ * `mount(name, fn)`, the matcher, and the context every table is handed.
+ *
+ * The `api.ts` if-chain as data (host-architecture.md, "api.ts — the HTTP
+ * routes as tables"). First match wins, in table order, and the end of the
+ * table is the caller's 404 — which is what the chain did, now with the order
+ * written down in one place and the routes listable (`listApiRoutes`), so a
+ * pin can hold the list instead of a reader re-deriving it from forty `if`s.
+ *
+ * What a table can NOT do is reach a request before the frame has judged it:
+ * the origin/Host gate and the token gate run in `server/http.ts` before
+ * `handleApi`, and nothing here re-checks, loosens or skips them.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { OnboardManager } from "../onboard.js";
+import type { SetupWatcher } from "../setupwatch.js";
+import type { PeerStore } from "../peers/store.js";
+import type { AppReadinessReport, PeerKind, RepoTarget } from "@waterplane/shared";
+import type { IntentManager } from "../intents/manager.js";
+import type { BacklogManager } from "../backlog.js";
+import type { PushManager } from "../push.js";
+import type { CaptureManager } from "../capture.js";
+import type { SessionManager } from "../sessions.js";
+import type { UiStats } from "../uistats.js";
+import type { NetStats } from "../netstats.js";
+import type { TokenStatsStore } from "../tokenstats.js";
+import type { UsageLog } from "../usagelog.js";
+import type { UsageSourceRegistry } from "../usagesources.js";
+export interface ApiCtx {
+    root: string;
+    push: PushManager;
+    sessions: SessionManager;
+    uiStats: UiStats;
+    netstats: NetStats;
+    /** The host's own setup sweep — repo listings read its verdicts, and the
+     *  checklist routes write theirs back into it. */
+    setup: SetupWatcher;
+    /** The health index cache (`healthwatch.ts`): `/api/repos` reads it, never runs the engine. */
+    health?: import("../healthwatch.js").HealthWatch;
+    /** Build runs in flight — `/api/repos` marks a repo whose build is running. */
+    builds?: Pick<import("../builds.js").BuildManager, "runningIn">;
+    /** Sessions parked until their files arrive. An inbox POST is the event that
+     *  most often opens one, and waiting up to a tick for it would be latency
+     *  nobody asked for — so the upload route kicks the gate directly. */
+    launches: {
+        fileLanded(cwd: string): void;
+    };
+    /** The configured budget periods (an agent's `window` trigger may name one). */
+    periods?: () => readonly import("@waterplane/shared").BudgetPeriod[];
+    /** Token usage across every conversation log on disk — the statistics
+     *  screen's source (`tokenstats.ts`). */
+    tokenStats: TokenStatsStore;
+    /** The `/usage` readings this daemon has taken, kept (`usagelog.ts`). */
+    usageLog: UsageLog;
+    /** The other sources' kept readings (`usagesourcelog.ts`), by source id. */
+    usageSources: Pick<UsageSourceRegistry, "history">;
+    /** The checker's poll period, passed through so the history can say what
+     *  a dense series would have looked like. */
+    usagePollMs: number;
+    /** The account facts the socket pushes, as one read (`GET /api/usagenow`, `UsageNowDoc`). */
+    usageNow?(): import("@waterplane/shared").UsageNowDoc;
+    /**
+     * The verified capture loop, so an AGENT can trigger one without a phone and
+     * without a session (`capture.ts`).
+     *
+     * This is the one caller that gets the verdict in a response body instead of
+     * over the socket, and it is why the whole loop prints a ~50-token line: an
+     * agent that asked for a picture and was handed the picture pays for that
+     * image on every later turn of the conversation it is in.
+     */
+    capture: CaptureManager;
+    /** The intent store and the containment gate, for the agent's loopback
+     *  route (`agentintents.ts`) — the same `post` the phone's `intent.post`
+     *  reaches, through the same `postClientDraft`. */
+    intents: IntentManager;
+    /** The ack ledger, read-only here: `/api/health` says when its receipts stop
+     *  reaching the disk (`acks.ts`'s `lastWriteError`). */
+    acks?: {
+        lastWriteError(): string | null;
+    };
+    /** …and `backlog.add`, for the agent's backlog add (`addClientBacklogItem`,
+     *  the same path the socket's `backlog.add` takes). */
+    backlog: BacklogManager;
+    containRepoDir(dir: unknown): Promise<string | null>;
+    /** The peer ledger + the trusted-path rule (`peers/routes.ts`): `/api/peers*` and `/api/peer/*`. */
+    peers?: PeerStore;
+    canManage?(kind: PeerKind): boolean;
+    /** The first-app onboarding job (`onboard.ts`, `/api/onboard*`). */
+    onboard?: OnboardManager;
+    /** Every Android app module across the repos, as facts (`apkcheck.ts`' `apkRepoFacts`) —
+     *  `GET /api/apps/readiness`. A closure because the build list and the auto-download rule
+     *  belong to their managers, which this table does not otherwise reach. */
+    appReadiness?(): Promise<AppReadinessReport>;
+    /** A plugin's hook sink (`PluginRegistry.hook`): status + JSON body, possibly HELD. Never rejects. */
+    pluginHook?(pluginId: string, payload: unknown): Promise<{
+        status: number;
+        body: unknown;
+    }>;
+    /** A plugin's own route (`api.route`, `PluginRegistry.route`): the runner, or null when nothing
+     *  is served at `parts` for `method`. Never rejects. */
+    pluginRoute?(pluginId: string, method: string, parts: readonly string[]): ((req: {
+        query: Record<string, string>;
+        body: unknown;
+    }) => Promise<{
+        status: number;
+        body: unknown;
+    }>) | null;
+    /** A plugin's static asset (`manifest.assets`, `PluginRegistry.assetFile`). */
+    pluginAsset?(pluginId: string, file: string): import("../plugins/pluginassets.js").AssetResult;
+    /** A file a plugin offered (`api.offerFile`, `PluginRegistry.offeredFile`); null when gone. */
+    pluginFile?(pluginId: string, token: string): {
+        file: string;
+        name: string;
+        size: number;
+        mtime: number;
+        token: string;
+        delivered(): void;
+    } | null;
+}
+/** One request as a handler sees it. */
+export interface ApiReq {
+    req: IncomingMessage;
+    res: ServerResponse;
+    url: URL;
+    path: string;
+    method: string;
+    /** The pattern's `:name` segments, RAW — the matcher never decodes. */
+    params: Record<string, string>;
+    /** What a trailing `*` matched, one entry per segment (empty for none). */
+    rest: string[];
+}
+/** A request inside the repo scope (`/api/repos/:id/…`): the target is already resolved. */
+export interface RepoReq extends ApiReq {
+    target: RepoTarget;
+    /** `target.worktreePath` — what nearly every repo route acts on. */
+    wt: string;
+}
+/** Answer the request — or return `false`: "not mine", the next entry is asked. */
+export type ApiHandler<R extends ApiReq = ApiReq> = (r: R, ctx: ApiCtx) => unknown;
+export interface ApiRoute<R extends ApiReq = ApiReq> {
+    kind: "route";
+    /** One verb, or `"*"` for any. */
+    method: string;
+    pattern: string;
+    segs: readonly string[];
+    handler: ApiHandler<R>;
+    /** A scope's own table, relative to `prefix` — for `listApiRoutes` only. */
+    sub?: {
+        prefix: string;
+        table: readonly ApiEntry<never>[];
+    };
+}
+/** A delegating handler with its own dispatch: `true` = it answered. */
+export interface ApiMount {
+    kind: "mount";
+    name: string;
+    handler: (r: Omit<ApiReq, "params" | "rest">, ctx: ApiCtx) => Promise<boolean>;
+}
+export type ApiEntry<R extends ApiReq = ApiReq> = ApiRoute<R> | ApiMount;
+/**
+ * Register a route. A pattern is `/`-separated: a literal segment, `:name`
+ * (exactly one segment — any string, the empty one included), and a trailing
+ * `*` (zero or more further segments, handed over as `rest`).
+ */
+export declare function route<R extends ApiReq = ApiReq>(method: string, pattern: string, handler: ApiHandler<R>): ApiRoute<R>;
+export declare function mount(name: string, handler: ApiMount["handler"]): ApiMount;
+/** Match `parts` (a path split on `/`) against a route's segments. */
+export declare function matchSegs(segs: readonly string[], parts: readonly string[]): {
+    params: Record<string, string>;
+    rest: string[];
+} | null;
+/**
+ * Ask each entry in order; `true` once one answered. `base` is everything but
+ * the match; `parts` is what the patterns are matched against (the whole path
+ * for the top table, what follows the scope for a scope's own).
+ */
+export declare function dispatchApi<R extends ApiReq>(table: readonly ApiEntry<R>[], base: Omit<R, "params" | "rest">, parts: readonly string[], ctx: ApiCtx): Promise<boolean>;
+/** Every entry as `METHOD pattern` / `MOUNT name`, scopes expanded, in table order. */
+export declare function listApiRoutes(table: readonly ApiEntry<never>[]): string[];