waterplane 0.0.1 → 0.1.6

package/packages/host/dist/sentlog.js

@@ -0,0 +1,186 @@
+/**
+ * The sent-command audit log — "what did waterplane type into my agent, and when?".
+ *
+ * The app drives sessions from a lot of places (a backlog item firing, a
+ * fan-out target, a follow-up, the compose bar, a plugin's gated answer, a
+ * usage-limit `continue`), and in the terminal every one of them looks exactly
+ * like a human typing: bytes appear in the composer with nothing saying who put
+ * them there. That is fine while you are watching and useless afterwards, which
+ * is precisely when the question gets asked — a session that ran something
+ * nobody remembers asking for is the one case where the scrollback cannot
+ * answer, because the scrollback IS the thing under suspicion.
+ *
+ * Two rules make it worth reading:
+ *  - **One entry per semantic command, not per PTY write.** `deliver.ts` writes
+ *    the text and the Return separately and may re-press Return up to five
+ *    times; a per-write log would show six rows for one prompt. The entry is
+ *    recorded when delivery SETTLES, so it carries the verdict.
+ *  - **The verdict is kept, not flattened.** `unsubmitted` (text sitting in the
+ *    composer, Return swallowed) and `ok` are opposite facts, and a log that
+ *    called both "sent" would state the exact thing that is untrue.
+ *
+ * Persisted to <STATE_DIR>/sent.json — tmp+rename and a debounced write (same
+ * shape as `acks.ts`/`netstats.ts`), flushed on shutdown. On disk because
+ * `npm run restart` is routine and an in-memory trail would be empty every time
+ * something surprising happened before the last restart. Every I/O failure
+ * degrades to in-memory; nothing here may throw into a delivery path.
+ */
+import { existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+/** Ring size. Entries are small (a capped text plus labels). */
+const LOG_LIMIT = 1000;
+/** Per-entry text cap — a pasted file must not turn the log into the file. */
+const TEXT_MAX = 2000;
+const SAVE_DEBOUNCE_MS = 500;
+export class SentLog {
+    facts;
+    onAdd;
+    path;
+    entries = [];
+    timer = null;
+    seq = 0;
+    /** `onAdd` is how a new entry reaches connected phones (main.ts broadcasts
+     *  it): the log is written from inside a delivery, and re-fetching the whole
+     *  list on every send would be pointless traffic on the link this app spends
+     *  its life apologising for. */
+    constructor(root, facts = () => null, onAdd) {
+        this.facts = facts;
+        this.onAdd = onAdd;
+        this.path = join(hostStateDir(root), "sent.json");
+        try {
+            if (existsSync(this.path)) {
+                const parsed = readJsonGuarded(this.path, null);
+                if (Array.isArray(parsed))
+                    this.entries = parsed;
+            }
+        }
+        catch { /* corrupt or unreadable → start empty rather than throw */ }
+    }
+    /** Record one settled command. Returns the stored entry (for broadcasting). */
+    add(rec) {
+        const f = this.facts(rec.sessionId);
+        const text = rec.text ?? "";
+        const entry = {
+            id: `snd_${Date.now().toString(36)}_${(this.seq++).toString(36)}`,
+            ts: Date.now(),
+            sessionId: rec.sessionId,
+            sessionTitle: f?.title ?? rec.sessionId,
+            repoDir: f?.repoDir ?? "",
+            actor: rec.actor,
+            source: rec.source,
+            kind: rec.kind,
+            text: text.length > TEXT_MAX ? text.slice(0, TEXT_MAX) : text,
+            ...(text.length > TEXT_MAX ? { truncated: true } : {}),
+            result: rec.result,
+            ...(rec.detail ? { detail: rec.detail } : {}),
+            ...(rec.shape ? { shape: rec.shape } : {}),
+        };
+        this.entries.unshift(entry);
+        if (this.entries.length > LOG_LIMIT)
+            this.entries.length = LOG_LIMIT;
+        this.schedule();
+        try {
+            this.onAdd?.(entry);
+        }
+        catch { /* a broadcast failure must not fail the send */ }
+        return entry;
+    }
+    /**
+     * Write a LATER verdict onto a row that was recorded ambiguous.
+     *
+     * The two rules above say the entry is written when delivery SETTLES and that
+     * the verdict is kept rather than flattened. Both were true and both were
+     * quietly incomplete: `unconfirmed` and `unsubmitted` are not outcomes, they
+     * are open questions (`opendeliveries.ts`), and this log had no way to hear
+     * the answer. So a delivery the host had proved `landed` minutes later still
+     * read `"result":"unconfirmed"` on disk for ever — and this file is what a
+     * person, and the measurement behind this rework, reads as "what happened to
+     * my deliveries". A log that only ever records the pessimistic half of an
+     * open question does not merely lose detail; it manufactures a failure rate.
+     *
+     * Additive, never destructive: `result` stays exactly as delivery reported
+     * it. Returns the updated entry so the caller can push it to whoever is
+     * looking (the row is keyed by id and clients replace by id).
+     */
+    settle(id, verdict, detail) {
+        const e = this.entries.find((x) => x.id === id);
+        if (!e)
+            return null; // rolled out of the ring — nothing to correct
+        if (e.settled === verdict && e.settledDetail === detail)
+            return null;
+        e.settled = verdict;
+        e.settledAt = Date.now();
+        if (detail)
+            e.settledDetail = detail;
+        this.schedule();
+        try {
+            this.onAdd?.(e);
+        }
+        catch { /* a broadcast failure must not fail the sweep */ }
+        return e;
+    }
+    /** Newest first, optionally filtered to one session. */
+    list(sessionId, limit = 200) {
+        const rows = sessionId ? this.entries.filter((e) => e.sessionId === sessionId) : this.entries;
+        return rows.slice(0, limit);
+    }
+    /** Total kept (the list is capped for the wire). */
+    count(sessionId) {
+        return sessionId ? this.entries.filter((e) => e.sessionId === sessionId).length : this.entries.length;
+    }
+    clear() {
+        this.entries = [];
+        this.flush();
+    }
+    flush() {
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+        this.persist();
+    }
+    schedule() {
+        if (this.timer)
+            return;
+        this.timer = setTimeout(() => { this.timer = null; this.persist(); }, SAVE_DEBOUNCE_MS);
+    }
+    /** tmp + rename: a kill mid-write must not leave truncated JSON that the
+     *  constructor's catch silently turns into an empty audit trail. */
+    persist() {
+        try {
+            mkdirSync(join(this.path, ".."), { recursive: true });
+            writeJsonAtomic(this.path, this.entries);
+        }
+        catch { /* non-fatal — keep serving from memory */ }
+    }
+}
+/**
+ * Module-level singleton, set once at boot by `main.ts`.
+ *
+ * `deliver.ts` and `sessions.ts` are the two chokepoints every command passes
+ * through, and threading a log handle through every caller of both (the
+ * backlog, the fan-out, follow-ups, creates, the compose path, the limit
+ * scheduler) would mean a new call site could forget it and go unrecorded —
+ * which is the one failure an audit trail cannot have. Reading it here instead
+ * makes recording the default. Unset (e.g. a unit import) = a silent no-op.
+ */
+let current = null;
+export function setSentLog(log) { current = log; }
+export function sentLog() { return current; }
+/** Record + hand back the entry, or null when no log is installed. */
+export function recordSent(rec) {
+    return current ? current.add(rec) : null;
+}
+/**
+ * Correct a row once the host has PROVED what became of the delivery.
+ *
+ * Same singleton argument as `recordSent`: the sweep that settles an open
+ * question has no business holding a log handle, and a call site that could
+ * forget to correct the trail is a call site that leaves it lying.
+ */
+export function recordSettled(id, verdict, detail) {
+    return current ? current.settle(id, verdict, detail) : null;
+}
+//# sourceMappingURL=sentlog.js.map

package/packages/host/dist/sentlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentlog.js","sourceRoot":"","sources":["../src/sentlog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,gEAAgE;AAChE,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,8EAA8E;AAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AA2B7B,MAAM,OAAO,OAAO;IAUgB;IAA0C;IATpE,IAAI,CAAS;IACb,OAAO,GAAkB,EAAE,CAAC;IAC5B,KAAK,GAA0B,IAAI,CAAC;IACpC,GAAG,GAAG,CAAC,CAAC;IAEhB;;;oCAGgC;IAChC,YAAY,IAAY,EAAU,QAAsB,GAAG,EAAE,CAAC,IAAI,EAAU,KAAgC;QAA1E,UAAK,GAAL,KAAK,CAA2B;QAAU,UAAK,GAAL,KAAK,CAA2B;QAC1G,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;IACzE,CAAC;IAED,+EAA+E;IAC/E,GAAG,CAAC,GAAe;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAgB;YACzB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;YACjE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,YAAY,EAAE,CAAC,EAAE,KAAK,IAAI,GAAG,CAAC,SAAS;YACvC,OAAO,EAAE,CAAC,EAAE,OAAO,IAAI,EAAE;YACzB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QACvF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,CAAC,EAAU,EAAE,OAA4C,EAAE,MAAe;QAC9E,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAyB,8CAA8C;QAC3F,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACrE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,MAAM;YAAE,CAAC,CAAC,aAAa,GAAG,MAAM,CAAC;QACrC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;QACpF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wDAAwD;IACxD,IAAI,CAAC,SAAkB,EAAE,KAAK,GAAG,GAAG;QAClC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9F,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,SAAkB;QACtB,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACxG,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC1F,CAAC;IAED;wEACoE;IAC5D,OAAO;QACb,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACxD,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,IAAI,OAAO,GAAmB,IAAI,CAAC;AACnC,MAAM,UAAU,UAAU,CAAC,GAAmB,IAAU,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACxE,MAAM,UAAU,OAAO,KAAqB,OAAO,OAAO,CAAC,CAAC,CAAC;AAE7D,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,GAAe;IACxC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAU,EACV,OAA4C,EAC5C,MAAe;IAEf,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC"}

package/packages/host/dist/server/billingwire.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The billing profile and the dollar periods, wired - `main.ts`'s pieces of the
+ * account model (`billing.ts`, `periodspend.ts`, `burnwatch.ts`'s pace push).
+ *
+ * `createBillingWire(ctx)`: the profile store (probed once at boot, override on
+ * disk), the period-to-date dollars the budget judges `usd` ceilings against, and
+ * the "$ vs pace" push for an account with no weekly window. A factory over
+ * `ServerCtx`: every `ctx.<x>` is read at CALL time (the budget, the usage
+ * poll switch and `publishBudget` are assigned after this runs), and nothing
+ * starts at import - the fold's timer runs only while a dollar period exists.
+ */
+import { type BudgetSpend } from "@waterplane/shared";
+import { BillingStore } from "../billing.js";
+import type { ServerCtx } from "./ctx.js";
+export declare function createBillingWire(ctx: ServerCtx): {
+    billing: BillingStore;
+    /** Tell clients the verdict (and the periods, when any), but only when it actually moved. */
+    publishBudget(force?: boolean): void;
+    /** Whether `session`/`weekly` mean anything here; `unknown` counts as yes (today's behaviour). */
+    scraped: () => boolean;
+    spend: () => BudgetSpend;
+    /** Run the ledger fold only while a dollar period exists: once now, then every minute. */
+    syncSpendFold(): void;
+};

package/packages/host/dist/server/billingwire.js

@@ -0,0 +1,73 @@
+/**
+ * The billing profile and the dollar periods, wired - `main.ts`'s pieces of the
+ * account model (`billing.ts`, `periodspend.ts`, `burnwatch.ts`'s pace push).
+ *
+ * `createBillingWire(ctx)`: the profile store (probed once at boot, override on
+ * disk), the period-to-date dollars the budget judges `usd` ceilings against, and
+ * the "$ vs pace" push for an account with no weekly window. A factory over
+ * `ServerCtx`: every `ctx.<x>` is read at CALL time (the budget, the usage
+ * poll switch and `publishBudget` are assigned after this runs), and nothing
+ * starts at import - the fold's timer runs only while a dollar period exists.
+ */
+import { hasScrapedWindows } from "@waterplane/shared";
+import { BillingStore, runAuthStatus } from "../billing.js";
+import { createPaceWatch } from "../burnwatch.js";
+import { hostStateDir } from "../branddirs.js";
+import { claudeBackend } from "../backends/index.js";
+import { costMeta } from "../costwindow.js";
+import { PeriodSpend, SPEND_REFRESH_MS, foldTotal } from "../periodspend.js";
+export function createBillingWire(ctx) {
+    /** A change of answer re-syncs the `/usage` poll and tells every phone, budget included. */
+    const billing = new BillingStore(ctx.ROOT, {
+        authStatus: () => runAuthStatus(claudeBackend.bin()),
+        onChange: (s) => { ctx.broadcast({ t: "billing.status", ...s }); ctx.syncUsagePolling(); ctx.publishBudget(true); },
+    });
+    /** List price, this desktop: the local ledger folded over each dollar period (`periodspend.ts`). */
+    const periodSpend = new PeriodSpend({
+        periods: () => ctx.budget.usdPeriods(),
+        fold: async (from, to) => {
+            const doc = await ctx.tokenStats.costWindow(from, to, costMeta(ctx.sessions, ctx.intents), SPEND_REFRESH_MS);
+            // A ledger never scanned folds to an empty (zero) document, and a stalled scan to an old one: "nobody measured", not $0.
+            return foldTotal(doc);
+        },
+    });
+    const scraped = () => hasScrapedWindows(billing.status().profile);
+    const paceWatch = createPaceWatch({
+        stateDir: hostStateDir(ctx.ROOT), notify: (k, p) => ctx.notify(k, p),
+        paces: (now) => scraped() ? [] : ctx.budget.periods(now).flatMap((s) => {
+            const cap = ctx.budget.get().ceilings?.find((l) => l.periodId === s.period.id && l.unit === "usd");
+            return cap && s.active ? [{ id: s.period.id, label: s.period.id, start: s.start, resetAt: s.resetAt, max: cap.max, spentUsd: s.spentUsd ?? null }] : [];
+        }),
+    });
+    let timer = null;
+    return {
+        billing,
+        /** Tell clients the verdict (and the periods, when any), but only when it actually moved. */
+        publishBudget(force = false) {
+            const v = ctx.budget.verdict();
+            if (!ctx.budget.changed(v) && !force)
+                return;
+            const periods = ctx.budget.periods();
+            ctx.broadcast({ t: "budget.state", budget: ctx.budget.get(), verdict: v, ...(periods.length ? { periods } : {}) });
+        },
+        /** Whether `session`/`weekly` mean anything here; `unknown` counts as yes (today's behaviour). */
+        scraped,
+        spend: () => periodSpend.get(),
+        /** Run the ledger fold only while a dollar period exists: once now, then every minute. */
+        syncSpendFold() {
+            if (ctx.DOCTOR || !ctx.budget.usdPeriods().length) {
+                if (timer)
+                    clearInterval(timer);
+                timer = null;
+                return;
+            }
+            const tick = () => void periodSpend.refresh().then((moved) => { ctx.publishBudget(moved); paceWatch.check(); }, () => { });
+            if (!timer) {
+                timer = setInterval(tick, SPEND_REFRESH_MS);
+                timer.unref?.();
+            }
+            tick();
+        },
+    };
+}
+//# sourceMappingURL=billingwire.js.map

package/packages/host/dist/server/billingwire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billingwire.js","sourceRoot":"","sources":["../../src/server/billingwire.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,iBAAiB,EAAuC,MAAM,oBAAoB,CAAC;AAC5F,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG7E,MAAM,UAAU,iBAAiB,CAAC,GAAc;IAC9C,4FAA4F;IAC5F,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;QACzC,UAAU,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;QACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KACpH,CAAC,CAAC;IACH,oGAAoG;IACpG,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,OAAO,EAAE,GAAmB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE;QACtD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;YACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;YAC7G,yHAAyH;YACzH,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;QACpE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACrE,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YACnG,OAAO,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1J,CAAC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,OAAO;QACL,OAAO;QACP,6FAA6F;QAC7F,aAAa,CAAC,KAAK,GAAG,KAAK;YACzB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;gBAAE,OAAO;YAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACrH,CAAC;QACD,kGAAkG;QAClG,OAAO;QACP,KAAK,EAAE,GAAgB,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC3C,0FAA0F;QAC1F,aAAa;YACX,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;gBAClD,IAAI,KAAK;oBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;gBAChC,KAAK,GAAG,IAAI,CAAC;gBACb,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1H,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAAC,CAAC;YAC7E,IAAI,EAAE,CAAC;QACT,CAAC;KACF,CAAC;AACJ,CAAC"}

package/packages/host/dist/server/clients.d.ts

@@ -0,0 +1,52 @@
+import type { WebSocket } from "ws";
+import { type AuthState, type HostMessage, type NotificationItem, type NotificationKind, type PeerKind } from "@waterplane/shared";
+import type { ServerCtx } from "./ctx.js";
+/** What `createClients` needs — the managers constructed ahead of it in main. */
+export type ClientsDeps = Pick<ServerCtx, "auth" | "notifyPrefs" | "push" | "sessions"> & {
+    /** How long a distrusted socket may answer the close frame before `terminate()` (default 1 s; a test seam). */
+    closeGraceMs?: number;
+};
+/** Everything `createClients` built; `main.ts` assigns each into `ctx`. */
+export type Clients = ReturnType<typeof createClients>;
+export declare function createClients(deps: ClientsDeps): {
+    attached: WeakMap<WebSocket, Set<string>>;
+    clients: Set<WebSocket>;
+    wsKind: WeakMap<WebSocket, PeerKind>;
+    wsToken: WeakMap<WebSocket, string>;
+    wsDevice: WeakMap<WebSocket, string>;
+    wsRole: WeakMap<WebSocket, "notify">;
+    closeDevice: (id: string) => number;
+    socketAuthorized: (ws: WebSocket) => boolean;
+    authStateFor: (kind: PeerKind) => AuthState;
+    enforceAuth: () => void;
+    broadcastAuthState: () => void;
+    recomputeWatched: () => void;
+    attachedIds: () => Set<string>;
+    isAttachedToSomeone: (id: string) => boolean;
+    send: (ws: WebSocket, msg: HostMessage) => void;
+    broadcast: (msg: HostMessage) => void;
+    notifications: NotificationItem[];
+    notify: (kind: NotificationKind, p: {
+        title: string;
+        body: string;
+        sessionId?: string;
+        tag?: string;
+        image?: {
+            repoId: string;
+            relPath: string;
+        };
+        file?: {
+            repoId: string;
+            relPath: string;
+            name: string;
+            size: number;
+            mtime?: number;
+        };
+        pull?: string;
+        backlog?: {
+            cwd: string;
+            ids: string[];
+        };
+        plugin?: string;
+    }) => void;
+};

package/packages/host/dist/server/clients.js

@@ -0,0 +1,178 @@
+/**
+ * Who is connected, and how anything reaches them: the socket bookkeeping,
+ * `send`/`broadcast`, the auth re-evaluation of open sockets, the "watched"
+ * union, and the notification feed with `notify()`.
+ *
+ * Moved verbatim out of `main.ts` (M1 of the host split, see
+ * docs/notes/host-architecture.md). The bodies close over the four managers
+ * below exactly as they closed over main's module-level `const`s. Taking them
+ * by value at construction is safe — and is the one exception to `ServerCtx`'s
+ * call-time rule — because all four are constructed in `main.ts` BEFORE
+ * `createClients` is called, and none is ever reassigned.
+ */
+import { randomUUID } from "node:crypto";
+import { encode, roleAllows, } from "@waterplane/shared";
+import { WIRE, recordWireFrame } from "../wirerecord.js";
+export function createClients(deps) {
+    const { auth, notifyPrefs, push, sessions } = deps;
+    /** Each socket tracks which sessions it is viewing, so we only stream those. */
+    const attached = new WeakMap();
+    const clients = new Set();
+    /** Per-socket trust tier + the token it presented, for auth re-evaluation when
+     *  the password changes (the socket is already open by then). */
+    const wsKind = new WeakMap();
+    const wsToken = new WeakMap();
+    /** The ledger device a socket authenticated as (only when it presented a
+     *  valid token), so a revoke can close exactly that device's sockets. */
+    const wsDevice = new WeakMap();
+    /** A socket's declared role (`shared/wire/notifylink.ts`): set at the upgrade
+     *  off the User-Agent, overridden by `hello.role`. Absent ⇒ a full client. */
+    const wsRole = new WeakMap();
+    function authStateFor(kind) {
+        return { enabled: auth.isEnabled(), gateTailscale: auth.gateTailscale(), canManage: auth.canManage(kind) };
+    }
+    /** How long a socket the host no longer trusts gets to answer the close frame
+     *  before it is torn down. `ws.close()` alone keeps parsing and dispatching
+     *  the peer's frames until the handshake completes — or for 30 s if the peer
+     *  never answers it. */
+    const CLOSE_GRACE_MS = deps.closeGraceMs ?? 1000;
+    /** Close a socket the host no longer trusts: the close frame first (the phone
+     *  reads its reason), then `terminate()` whatever the peer did with it. */
+    function drop(ws) {
+        try {
+            ws.close();
+        }
+        catch { /* already closing */ }
+        const t = setTimeout(() => { try {
+            ws.terminate();
+        }
+        catch { /* already gone */ } }, CLOSE_GRACE_MS);
+        t.unref?.();
+    }
+    /**
+     * Is this socket still one the host would accept a frame from? Decided at the
+     * upgrade once; asked again for every frame (`server/wsops.ts`), because a
+     * revoke, a relock or a password change happens while the socket is open and
+     * its close is asynchronous. The same two questions `enforceAuth` asks, so
+     * the two never disagree: the token it presented must still be valid WHERE
+     * ONE IS NEEDED (on a trusted kind a vanished row changes nothing — the same
+     * phone could reconnect tokenless and be accepted, so refusing its frames
+     * would only freeze the owner's phone after a password change), and the
+     * device it is must not be a locked passive row.
+     */
+    function socketAuthorized(ws) {
+        const kind = wsKind.get(ws);
+        if (kind && auth.needsToken(kind) && !auth.checkToken(wsToken.get(ws) ?? null))
+            return false;
+        const id = wsDevice.get(ws);
+        const row = id ? auth.devices.get(id) : null;
+        return !(row && auth.passive.restricted(row));
+    }
+    /** Kick any currently-open socket that is no longer authorized (e.g. the password
+     *  was just set/changed, invalidating its token). Sent authRequired, then closed. */
+    function enforceAuth() {
+        for (const ws of [...clients]) {
+            const kind = wsKind.get(ws);
+            if (kind && auth.needsToken(kind) && !auth.checkToken(wsToken.get(ws) ?? null)) {
+                send(ws, { t: "authRequired", enabled: auth.isEnabled(), kind });
+                drop(ws);
+            }
+        }
+    }
+    /** A device was revoked: tell each of its sockets and close it, whatever route
+     *  it came in on (a Tailscale socket that presented the token is that device
+     *  too). Returns how many were closed. */
+    function closeDevice(id) {
+        let n = 0;
+        for (const ws of [...clients]) {
+            if (wsDevice.get(ws) !== id)
+                continue;
+            const kind = wsKind.get(ws) ?? "unknown";
+            send(ws, { t: "authRequired", enabled: auth.isEnabled(), kind });
+            drop(ws);
+            n++;
+        }
+        return n;
+    }
+    /** Push fresh auth state to every still-connected socket (their Settings UI). */
+    function broadcastAuthState() {
+        for (const ws of clients) {
+            const kind = wsKind.get(ws);
+            if (kind)
+                send(ws, { t: "auth.state", auth: authStateFor(kind) });
+        }
+    }
+    /** Recompute the union of all clients' attachments and tell the SessionManager
+     *  which sessions are "watched" (a plugin reads it as `PluginSession.watched`). Call after
+     *  any attach/detach/create/disconnect. */
+    function recomputeWatched() {
+        sessions.setWatched(attachedIds());
+    }
+    /** Every session some client currently has open. */
+    function attachedIds() {
+        const union = new Set();
+        for (const ws of clients)
+            for (const id of attached.get(ws) ?? [])
+                union.add(id);
+        return union;
+    }
+    /**
+     * Is anybody looking at this session right now?
+     *
+     * The exemption that matters for the automatic close (`lingerSweep`): a session with a socket on it is a session somebody has on
+     * screen, and nothing this host does on its own initiative may close one. Asked
+     * fresh each time rather than cached — attachments change with every tap.
+     */
+    function isAttachedToSomeone(id) {
+        return attachedIds().has(id);
+    }
+    /** THE filter for a notify link: every frame to every socket passes here, so
+     *  the background link is sent its allow-list and nothing else — no call site
+     *  has to remember it. Each frame dropped is a radio wakeup the phone keeps. */
+    function send(ws, msg) {
+        if (!roleAllows(wsRole.get(ws), msg.t))
+            return;
+        if (ws.readyState === ws.OPEN) {
+            if (WIRE)
+                recordWireFrame("out", msg);
+            ws.send(encode(msg));
+        }
+    }
+    function broadcast(msg) {
+        for (const ws of clients)
+            send(ws, msg);
+    }
+    /** In-app notification feed (newest first), so alerts work without OS push. */
+    const notifications = [];
+    /** Fire a notification: record it in-app, broadcast it, AND send an OS push.
+     *  The in-app feed is the source of truth; OS push is best-effort on top. */
+    function notify(kind, p) {
+        // A muted kind is dropped WHOLE: no feed row, no broadcast, no push. Recording
+        // it and hiding it client-side would still buzz the phone, and would still
+        // bury the two kinds a person actually has to answer.
+        //
+        // One exception, and it is not an alert at all: a payload carrying `pull` is
+        // the TRANSPORT for auto-download — the service worker starts a Background
+        // Fetch from the push handler with the app closed, so dropping it would
+        // silently turn auto-pull off for anyone who muted "artifact".
+        if (!p.pull && !notifyPrefs.enabled(kind))
+            return;
+        const item = { id: randomUUID().slice(0, 8), ts: Date.now(), kind, title: p.title, body: p.body, sessionId: p.sessionId, tag: p.tag, image: p.image, file: p.file, backlog: p.backlog, plugin: p.plugin };
+        notifications.unshift(item);
+        if (notifications.length > 100)
+            notifications.length = 100;
+        broadcast({ t: "notification", item });
+        void push.notify(p);
+    }
+    // A passive device's PIN unlock ending (expiry, "Lock now") closes its
+    // sockets, so an open WebSocket never outlives the unlock (`passive.ts`).
+    auth.passive.onRelock = (id) => { closeDevice(id); };
+    return {
+        attached, clients, wsKind, wsToken, wsDevice, wsRole, closeDevice, socketAuthorized,
+        authStateFor, enforceAuth, broadcastAuthState, recomputeWatched,
+        attachedIds, isAttachedToSomeone,
+        send, broadcast,
+        notifications, notify,
+    };
+}
+//# sourceMappingURL=clients.js.map

package/packages/host/dist/server/clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clients.js","sourceRoot":"","sources":["../../src/server/clients.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,MAAM,EAON,UAAU,GACX,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAWzD,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAEnD,gFAAgF;IAChF,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA0B,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC;qEACiE;IACjE,MAAM,MAAM,GAAG,IAAI,OAAO,EAAuB,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAqB,CAAC;IACjD;6EACyE;IACzE,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAqB,CAAC;IAClD;kFAC8E;IAC9E,MAAM,MAAM,GAAG,IAAI,OAAO,EAAyB,CAAC;IAEpD,SAAS,YAAY,CAAC,IAAc;QAClC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7G,CAAC;IAED;;;4BAGwB;IACxB,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IAEjD;+EAC2E;IAC3E,SAAS,IAAI,CAAC,EAAa;QACzB,IAAI,CAAC;YAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QACrG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACd,CAAC;IAED;;;;;;;;;;OAUG;IACH,SAAS,gBAAgB,CAAC,EAAa;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7F,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7C,OAAO,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;yFACqF;IACrF,SAAS,WAAW;QAClB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,EAAE,CAAC,CAAC;YACX,CAAC;QACH,CAAC;IACH,CAAC;IAED;;8CAE0C;IAC1C,SAAS,WAAW,CAAC,EAAU;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC;YACzC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,CAAC;YACT,CAAC,EAAE,CAAC;QACN,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iFAAiF;IACjF,SAAS,kBAAkB;QACzB,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,IAAI;gBAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;+CAE2C;IAC3C,SAAS,gBAAgB;QACvB,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,oDAAoD;IACpD,SAAS,WAAW;QAClB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;gBAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,SAAS,mBAAmB,CAAC,EAAU;QACrC,OAAO,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED;;oFAEgF;IAChF,SAAS,IAAI,CAAC,EAAa,EAAE,GAAgB;QAC3C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QAC/C,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI;gBAAE,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;IACjG,CAAC;IAED,SAAS,SAAS,CAAC,GAAgB;QACjC,KAAK,MAAM,EAAE,IAAI,OAAO;YAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAED,+EAA+E;IAC/E,MAAM,aAAa,GAAuB,EAAE,CAAC;IAC7C;iFAC6E;IAC7E,SAAS,MAAM,CAAC,IAAsB,EAAE,CAAmR;QACzT,+EAA+E;QAC/E,2EAA2E;QAC3E,sDAAsD;QACtD,EAAE;QACF,6EAA6E;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,+DAA+D;QAC/D,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO;QAClD,MAAM,IAAI,GAAqB,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5N,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,aAAa,CAAC,MAAM,GAAG,GAAG;YAAE,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC;QAC3D,SAAS,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAErD,OAAO;QACL,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB;QACnF,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,gBAAgB;QAC/D,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,SAAS;QACf,aAAa,EAAE,MAAM;KACtB,CAAC;AACJ,CAAC"}