@aitne/daemon 0.1.0

package/dist/api/directory-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory-picker.js","sourceRoot":"","sources":["../../src/api/directory-picker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,SAAS,IAAI,WAAW,EACxB,UAAU,EACV,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AA4ClC,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,yBAAyB,CAAC,OAA2B;IAC5D,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7D,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD;+DACuD;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oBAAoB;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC;AAC1F,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC;AACjE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;SAC7B,KAAK,CAAC,SAAS,CAAC;SAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEvC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9E,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACvE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACT,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC;gBAC/C,IAAI,CAAC;oBACH,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;oBACxC,OAAO,SAAS,CAAC;gBACnB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAA2B,EAC3B,UAGI,EAAE;IAEN,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC;IACnD,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAEhE,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,UAAU;YAC9B,CAAC,CAAC,iCAAiC,iBAAiB,CAAC,UAAU,CAAC,GAAG;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG;YACb,mDAAmD,iBAAiB,CAAC,KAAK,CAAC,GAAG,aAAa,EAAE;YAC7F,8BAA8B;SAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO;YACL,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;YACpB,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG;YACb,6CAA6C;YAC7C,+DAA+D;YAC/D,yBAAyB,gBAAgB,CAAC,KAAK,CAAC,EAAE;YAClD,qCAAqC;YACrC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,0BAA0B,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,gCAAgC;YAChC,yGAAyG;SAC1G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,qEAAqE;QACrE,uEAAuE;QACvE,gEAAgE;QAChE,kDAAkD;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,CAAC;YAC9C,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC;gBACzB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,gBAAgB,CAAC;QACvB,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;YAChD,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;YACzC,OAAO;gBACL,WAAW,EACT,wEAAwE;aAC3E,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,oBAAoB,CAAC;QAC9D,MAAM,QAAQ,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE;oBACJ,kBAAkB;oBAClB,aAAa;oBACb,SAAS;oBACT,KAAK;oBACL,cAAc,WAAW,CAAC,QAAQ,CAAC,EAAE;iBACtC;gBACD,MAAM,EAAE,QAAQ;aACjB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,QAAQ,CAAC;gBAC5D,MAAM,EAAE,SAAS;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO;gBACL,OAAO,EAAE,GAAG;gBACZ,IAAI,EAAE;oBACJ,kBAAkB;oBAClB,aAAa;oBACb,SAAS;oBACT,KAAK;oBACL,cAAc,WAAW,CAAC,QAAQ,CAAC,EAAE;iBACtC;gBACD,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW,EACT,2FAA2F;SAC9F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,8CAA8C,QAAQ,GAAG;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,OAAe,EACf,IAAc,EACd,SAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,KAAK;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,MAAM,GAAG,CAAC,MAAqB,EAAE,EAAE;YACvC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACjD,MAAM,CAAC;gBACL,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9C,QAAQ;gBACR,KAAK;aACN,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,CAAC;gBACL,IAAI;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAC9C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACpC,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAAsB,EAAE,MAAqB;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,OAAO,CAAC,MAAM,KAAK,WAAW;WAC3B,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;WACvB,OAAO,CAAC,MAAM,KAAK,SAAS;WAC5B,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;WAC3B,MAAM,CAAC,IAAI,KAAK,CAAC;WACjB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,aAAa,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,SAAS,IAAI,kBAAkB,CACxC,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EACL,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAC5B,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,oCAAoC;gBACxD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,0BAA0B;SACpC,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,aAAa,MAAM,CAAC,IAAI,EAAE,CAAC;QAClE,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,yBAAyB,MAAM,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACtE,OAAO;QACL,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC;QACrC,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC"}

package/dist/api/env-writer.d.ts

@@ -0,0 +1,25 @@
+import type Database from "better-sqlite3";
+import { type AgentConfig } from "../config.js";
+import type { SettingsStore } from "../settings/settings-store.js";
+export declare function ensureEnvFilePermissions(envPath: string): void;
+export declare function getEnvFilePath(): string;
+export interface ConfigUpdateResult {
+    updated: string[];
+    requiresRestart: string[];
+    errors: Record<string, string>;
+}
+export interface ApplyConfigUpdatesOptions {
+    /**
+     * SQLite handle. Required for the §6.2 Note Sources side-effect — when
+     * `externalObsidianVaultPath` / `externalObsidianWatch` lands in the
+     * patch, `applyConfigUpdates` re-renders `<dataDir>/integrations.md`
+     * via `writeManagementMd(dataDir, readIntegrations(db), {...})` so the
+     * section never drifts. Callers without a DB (test harnesses, the
+     * boot-time owner-id pairing in `index.ts`) may omit this — Note
+     * Sources keys never appear on those paths, so the regeneration is a
+     * no-op anyway.
+     */
+    db?: Database.Database;
+}
+export declare function applyConfigUpdates(config: AgentConfig, settingsStore: SettingsStore, updates: Record<string, unknown>, options?: ApplyConfigUpdatesOptions): Promise<ConfigUpdateResult>;
+//# sourceMappingURL=env-writer.d.ts.map

package/dist/api/env-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-writer.d.ts","sourceRoot":"","sources":["../../src/api/env-writer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AA8BnE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAO9D;AA2MD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAuCD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC;;;;;;;;;OASG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACxB;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAyM7B"}

package/dist/api/env-writer.js

@@ -0,0 +1,421 @@
+/**
+ * Utilities for `.env` persistence paths.
+ *
+ * Runtime settings live in SQLite; `.env` is reserved for bootstrap fields.
+ */
+import { chmodSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { homedir } from "node:os";
+import { pickRuntimeSettings, validateExternalObsidianVaultPath, validatePrimaryVaultPath, } from "../config.js";
+import { createLogger } from "../logging.js";
+const logger = createLogger("env-writer");
+/**
+ * SETUP-FLOW-REDESIGN-PLAN §6.2 — keys that, when patched via
+ * `applyConfigUpdates`, must trigger a `<dataDir>/integrations.md`
+ * re-render so the `Note Sources` section reflects the new value. The
+ * section's content is derived from the integrations DB plus these
+ * runtime-settings fields, so a write to either side has to flow through
+ * the renderer.
+ */
+const NOTE_SOURCES_KEYS = new Set([
+    "externalObsidianVaultPath",
+    "externalObsidianVaultName",
+    "externalObsidianWatch",
+]);
+import { runtimeSettingsSchema } from "../settings/runtime-settings.js";
+import { isNotificationDestinationPlatform } from "../messaging/constants.js";
+import { APP_NAME, normalizeAgentDisplayName, validateAgentDisplayName, EDITABLE_RUNTIME_KEY_TUPLE, EDITABLE_BOOTSTRAP_KEY_TUPLE, RESTART_REQUIRED_KEY_TUPLE, } from "@aitne/shared";
+export function ensureEnvFilePermissions(envPath) {
+    try {
+        chmodSync(envPath, 0o600);
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return;
+        throw err;
+    }
+}
+const CONFIG_TO_ENV = {
+    apiPort: "PA_API_PORT",
+};
+const EDITABLE_RUNTIME_KEYS = new Set(EDITABLE_RUNTIME_KEY_TUPLE);
+const EDITABLE_BOOTSTRAP_KEYS = new Set(EDITABLE_BOOTSTRAP_KEY_TUPLE);
+const RESTART_REQUIRED_KEYS = new Set(RESTART_REQUIRED_KEY_TUPLE);
+const SECRET_KEYS = new Set([
+    "slackBotToken",
+    "slackAppToken",
+    "telegramBotToken",
+    "discordBotToken",
+    "notionApiKey",
+    "githubToken",
+    "githubWebhookSecret",
+    "googleCredentialsJson",
+    "googleTokenJson",
+    "googleMapsApiKey",
+    "appleCalendarCredentials",
+    "apiToken",
+]);
+function isEditableRuntimeKey(key) {
+    return EDITABLE_RUNTIME_KEYS.has(key);
+}
+function isEditableBootstrapKey(key) {
+    return EDITABLE_BOOTSTRAP_KEYS.has(key);
+}
+function isRestartRequiredKey(key) {
+    return RESTART_REQUIRED_KEYS.has(key);
+}
+const NUMERIC_RANGE = {
+    dayBoundaryHour: { min: 0, max: 9, label: "0–9 (before 10:00)" },
+    executeTimeoutMinutes: { min: 1, max: 1440, label: "1–1440 minutes" },
+    hourlyCheckActiveStartHour: { min: 0, max: 23, label: "0–23" },
+    hourlyCheckActiveEndHour: { min: 1, max: 24, label: "1–24" },
+    // Any positive integer up to one day. Intervals that evenly divide 60
+    // produce a tight cron; arbitrary intervals run a minute-tick cron with an
+    // in-callback modulo gate anchored at activeStartHour. See
+    // scheduler.ts:buildHourlyCronExpr / shouldFireHourlyTickAt.
+    hourlyCheckIntervalMinutes: { min: 1, max: 1440, label: "1–1440 minutes" },
+    hourlyCheckMinObservations: { min: 0, max: 1000, label: "0–1000" },
+    gitPollIntervalSeconds: { min: 60, max: 86400, label: "60–86400 seconds" },
+    githubPollIntervalSeconds: { min: 60, max: 86400, label: "60–86400 seconds" },
+    // 0 disables the observer; 20160 min = 14 days which is already well past
+    // useful cadence territory. The Zod schema enforces nonnegative int; this
+    // adds an upper bound so a typo doesn't silently stall probes for months.
+    mcpAutoProbeIntervalMinutes: { min: 0, max: 20160, label: "0–20160 minutes (0 disables)" },
+};
+const NUMERIC_ENUM = {};
+const STRING_VALIDATORS = {
+    timezone: (v) => {
+        if (!v)
+            return null;
+        try {
+            Intl.DateTimeFormat(undefined, { timeZone: v });
+            return null;
+        }
+        catch {
+            return "Invalid IANA timezone (e.g., 'America/New_York', 'UTC')";
+        }
+    },
+    whatsappOwnerPhone: (v) => {
+        if (!v)
+            return null;
+        return /^\+\d{8,15}$/.test(v)
+            ? null
+            : "Expected E.164 format (e.g. +818012345678)";
+    },
+    agentDisplayName: (v) => validateAgentDisplayName(v),
+};
+const ARRAY_VALIDATORS = {
+    defaultNotificationPlatforms: (v) => {
+        const invalid = v.filter((item) => typeof item !== "string" || !isNotificationDestinationPlatform(item));
+        if (invalid.length === 0)
+            return null;
+        return "Default notification destinations must be slack, telegram, discord, or whatsapp";
+    },
+    enabledMailProviders: (v) => {
+        const allowed = new Set(["gmail", "outlook", "yahoo", "icloud"]);
+        const invalid = v.filter((item) => typeof item !== "string" || !allowed.has(item));
+        if (invalid.length > 0) {
+            return "enabledMailProviders must contain only gmail, outlook, yahoo, or icloud";
+        }
+        if (new Set(v).size !== v.length) {
+            return "enabledMailProviders must not contain duplicates";
+        }
+        return null;
+    },
+    githubRepos: (v) => {
+        const invalid = v.filter((item) => typeof item !== "string" ||
+            !/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(item));
+        if (invalid.length > 0) {
+            return "githubRepos must contain only owner/repo strings";
+        }
+        const normalized = v.map((item) => typeof item === "string" ? item.toLowerCase() : String(item));
+        if (new Set(normalized).size !== v.length) {
+            return "githubRepos must not contain duplicates";
+        }
+        return null;
+    },
+    gitWatchedRepos: (v) => {
+        const seenPaths = new Set();
+        const seenSlugs = new Set();
+        for (const item of v) {
+            if (!item || typeof item !== "object" || Array.isArray(item)) {
+                return "gitWatchedRepos entries must be objects";
+            }
+            const repo = item;
+            if (typeof repo.path !== "string" || repo.path.trim() === "") {
+                return "gitWatchedRepos entries require a non-empty path";
+            }
+            const normalizedPath = expandHome(repo.path);
+            if (seenPaths.has(normalizedPath)) {
+                return "gitWatchedRepos must not contain duplicate paths";
+            }
+            seenPaths.add(normalizedPath);
+            if (repo.slug !== undefined
+                && (typeof repo.slug !== "string" || repo.slug.trim() === "")) {
+                return "gitWatchedRepos.slug must be a non-empty string when provided";
+            }
+            if (typeof repo.slug === "string") {
+                const slugKey = repo.slug.toLowerCase();
+                if (seenSlugs.has(slugKey)) {
+                    return "gitWatchedRepos must not contain duplicate slugs";
+                }
+                seenSlugs.add(slugKey);
+            }
+            if (repo.classification !== undefined
+                && repo.classification !== "project"
+                && repo.classification !== "repo-only") {
+                return "gitWatchedRepos.classification must be project or repo-only";
+            }
+        }
+        return null;
+    },
+};
+function validateBootstrapValue(key, value) {
+    switch (key) {
+        case "apiPort":
+            if (!Number.isInteger(value) || value < 1 || value > 65535) {
+                return "Value must be an integer between 1 and 65535";
+            }
+            return null;
+        default: {
+            // Compile-time exhaustiveness: adding a new EditableBootstrapKey
+            // without a switch arm fails the type check here, preventing a
+            // bootstrap field from silently bypassing validation.
+            const _exhaustive = key;
+            void _exhaustive;
+            return `Validation not implemented for bootstrap key: ${String(key)}`;
+        }
+    }
+}
+function expandHome(p) {
+    if (p.startsWith("~/") || p.startsWith("~\\")) {
+        return resolve(homedir(), p.slice(2));
+    }
+    return resolve(p);
+}
+function expandHomePreservingRelative(p) {
+    if (p.startsWith("~/") || p.startsWith("~\\")) {
+        return resolve(homedir(), p.slice(2));
+    }
+    return p;
+}
+function serializeForEnv(value) {
+    if (Array.isArray(value) || (typeof value === "object" && value !== null)) {
+        return JSON.stringify(value);
+    }
+    return String(value ?? "");
+}
+export function getEnvFilePath() {
+    return resolve(process.cwd(), ".env");
+}
+function updateEnvFile(envPath, updates) {
+    let content;
+    try {
+        content = readFileSync(envPath, "utf-8");
+    }
+    catch {
+        content = `# === ${APP_NAME} Configuration ===\n`;
+    }
+    const lines = content.split("\n");
+    const updatedKeys = new Set();
+    const newLines = lines.map((line) => {
+        const match = line.match(/^([A-Z][A-Z0-9_]*)\s*=/);
+        if (match) {
+            const envKey = match[1];
+            if (envKey in updates) {
+                updatedKeys.add(envKey);
+                return `${envKey}=${updates[envKey]}`;
+            }
+        }
+        return line;
+    });
+    for (const [key, value] of Object.entries(updates)) {
+        if (!updatedKeys.has(key)) {
+            newLines.push(`${key}=${value}`);
+        }
+    }
+    writeFileSync(envPath, newLines.join("\n"), { mode: 0o600 });
+    try {
+        ensureEnvFilePermissions(envPath);
+    }
+    catch {
+        // Best-effort.
+    }
+}
+export async function applyConfigUpdates(config, settingsStore, updates, options = {}) {
+    const result = {
+        updated: [],
+        requiresRestart: [],
+        errors: {},
+    };
+    const runtimeUpdates = {};
+    const bootstrapConfigUpdates = {};
+    const envUpdates = {};
+    const currentRuntimeSettings = pickRuntimeSettings(config);
+    const aliasedUpdates = { ...updates };
+    // Management Mode Phase 2 — steer callers away from bypassing the
+    // migration endpoint. `vaultMode` and `primaryVaultPath` both control
+    // where the primary context directory lives; editing either via
+    // PATCH /api/config without moving the files strands data in the old
+    // location and breaks subsequent reads. Callers must go through
+    // `POST /api/setup/migrate-context`, which runs the move + DB rewrite +
+    // settings update atomically.
+    //
+    // `primaryVaultName` is just a display string — still allowed here.
+    const MIGRATION_ONLY_KEYS = new Set(["vaultMode", "primaryVaultPath"]);
+    for (const [key, value] of Object.entries(aliasedUpdates)) {
+        if (MIGRATION_ONLY_KEYS.has(key)) {
+            result.errors[key] =
+                `Field "${key}" may only be changed via POST /api/setup/migrate-context (Management Mode Phase 2).`;
+            continue;
+        }
+        const editable = isEditableRuntimeKey(key)
+            || isEditableBootstrapKey(key);
+        if (!editable) {
+            if (SECRET_KEYS.has(key)) {
+                result.errors[key] =
+                    "Secret fields have moved to PUT /api/secrets/* — please reload the dashboard.";
+                continue;
+            }
+            result.errors[key] = `Field "${key}" is not editable via dashboard`;
+            continue;
+        }
+        const currentValue = config[key];
+        if (currentValue !== undefined && currentValue !== null) {
+            const currentType = Array.isArray(currentValue) ? "array" : typeof currentValue;
+            const newType = Array.isArray(value) ? "array" : typeof value;
+            if (currentType !== newType && value !== null && value !== "") {
+                result.errors[key] = `Type mismatch: expected ${currentType}, got ${newType}`;
+                continue;
+            }
+        }
+        const range = NUMERIC_RANGE[key];
+        if (range && typeof value === "number") {
+            if (value < range.min || value > range.max) {
+                result.errors[key] = `Value must be ${range.label}`;
+                continue;
+            }
+        }
+        const numericEnum = NUMERIC_ENUM[key];
+        if (numericEnum && typeof value === "number") {
+            if (!numericEnum.values.includes(value)) {
+                result.errors[key] = `Value ${numericEnum.label}`;
+                continue;
+            }
+        }
+        const stringValidator = STRING_VALIDATORS[key];
+        if (stringValidator && typeof value === "string") {
+            const error = stringValidator(value);
+            if (error) {
+                result.errors[key] = error;
+                continue;
+            }
+        }
+        const arrayValidator = ARRAY_VALIDATORS[key];
+        if (arrayValidator && Array.isArray(value)) {
+            const error = arrayValidator(value);
+            if (error) {
+                result.errors[key] = error;
+                continue;
+            }
+        }
+        let processedValue = value;
+        if (key === "externalObsidianVaultPath" && typeof value === "string" && value) {
+            const validation = validateExternalObsidianVaultPath(value, {
+                dataDir: config.dataDir,
+                primaryVaultPath: config.primaryVaultPath,
+            });
+            if (!validation.ok) {
+                result.errors[key] = validation.message ?? "Invalid external Obsidian vault path";
+                continue;
+            }
+            processedValue = expandHomePreservingRelative(value);
+        }
+        if (key === "primaryVaultPath" && typeof value === "string" && value) {
+            const validation = validatePrimaryVaultPath(value, {
+                dataDir: config.dataDir,
+            });
+            if (!validation.ok) {
+                result.errors[key] = validation.message ?? "Invalid primary vault path";
+                continue;
+            }
+            processedValue = expandHomePreservingRelative(value);
+        }
+        if (key === "whatsappAuthDir" && typeof value === "string" && value) {
+            processedValue = expandHome(value);
+        }
+        if (key === "agentDisplayName" && typeof value === "string") {
+            processedValue = normalizeAgentDisplayName(value);
+        }
+        // gitRepos / gitWatchedRepos / githubRepos were removed at the
+        // unified-repositories cutover; their data lives in the
+        // `repositories` DB table now (see
+        // docs/design/appendices/unified-repositories.md). The PATCH path
+        // intentionally cannot edit them — use POST /api/repositories instead.
+        if (isEditableRuntimeKey(key)) {
+            const candidateRuntimeState = {
+                ...currentRuntimeSettings,
+                ...runtimeUpdates,
+                [key]: processedValue,
+            };
+            const validated = runtimeSettingsSchema.safeParse(candidateRuntimeState);
+            if (!validated.success) {
+                const matchingIssue = validated.error.issues.find((issue) => issue.path[0] === key);
+                result.errors[key] = matchingIssue?.message ?? "Invalid value";
+                continue;
+            }
+            runtimeUpdates[key] = validated.data[key];
+        }
+        else {
+            const bootstrapError = validateBootstrapValue(key, processedValue);
+            if (bootstrapError) {
+                result.errors[key] = bootstrapError;
+                continue;
+            }
+            bootstrapConfigUpdates[key] = processedValue;
+            const envKey = CONFIG_TO_ENV[key];
+            if (!envKey) {
+                result.errors[key] = `Unknown config key: ${key}`;
+                continue;
+            }
+            envUpdates[envKey] = serializeForEnv(processedValue);
+        }
+        result.updated.push(key);
+        if (isRestartRequiredKey(key)) {
+            result.requiresRestart.push(key);
+        }
+    }
+    settingsStore.transaction(() => {
+        if (Object.keys(runtimeUpdates).length > 0) {
+            settingsStore.setMany(runtimeUpdates);
+        }
+        if (Object.keys(envUpdates).length > 0) {
+            updateEnvFile(getEnvFilePath(), envUpdates);
+        }
+    });
+    Object.assign(config, runtimeUpdates);
+    Object.assign(config, bootstrapConfigUpdates);
+    // SETUP-FLOW-REDESIGN-PLAN §6.2 — single chokepoint for Note Sources
+    // regeneration. Centralizing it here means *any* future caller of
+    // `applyConfigUpdates` carrying these keys gets a fresh render rather
+    // than silently skipping. The dashboard PATCH /api/config handler used
+    // to duplicate this hook inline; it now relies on this trigger.
+    // Self-write suppression in `markSelfWrite` prevents the chokidar
+    // feedback loop. Best-effort: failures log and move on so a transient
+    // filesystem hiccup never strands the user's config write.
+    if (options.db && result.updated.some((k) => NOTE_SOURCES_KEYS.has(k))) {
+        try {
+            const { writeManagementMd } = await import("../core/management-md.js");
+            const { readIntegrations } = await import("../db/integrations-store.js");
+            await writeManagementMd(config.dataDir, readIntegrations(options.db), {
+                externalObsidianVaultPath: config.externalObsidianVaultPath,
+                externalObsidianWatch: config.externalObsidianWatch,
+            });
+        }
+        catch (err) {
+            logger.warn({ err }, "writeManagementMd failed after Note Sources config change");
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=env-writer.js.map

package/dist/api/env-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-writer.js","sourceRoot":"","sources":["../../src/api/env-writer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,iCAAiC,EACjC,wBAAwB,GAEzB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACxC,2BAA2B;IAC3B,2BAA2B;IAC3B,uBAAuB;CACxB,CAAC,CAAC;AACH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EACL,QAAQ,EACR,yBAAyB,EACzB,wBAAwB,EACxB,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AAGvB,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC7D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,aAAa;CACvB,CAAC;AAEF,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAqB,0BAA0B,CAAC,CAAC;AACtF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAuB,4BAA4B,CAAC,CAAC;AAC5F,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAqB,0BAA0B,CAAC,CAAC;AAStF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,iBAAiB;IACjB,cAAc;IACd,aAAa;IACb,qBAAqB;IACrB,uBAAuB;IACvB,iBAAiB;IACjB,kBAAkB;IAClB,0BAA0B;IAC1B,UAAU;CACF,CAAC,CAAC;AAEZ,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,qBAAqB,CAAC,GAAG,CAAC,GAAyB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAA2B,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,qBAAqB,CAAC,GAAG,CAAC,GAAyB,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,aAAa,GAAgE;IACjF,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE;IAChE,qBAAqB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACrE,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;IAC9D,wBAAwB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;IAC5D,sEAAsE;IACtE,2EAA2E;IAC3E,2DAA2D;IAC3D,6DAA6D;IAC7D,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC1E,0BAA0B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE;IAClE,sBAAsB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC1E,yBAAyB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,0EAA0E;IAC1E,2BAA2B,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE;CAC3F,CAAC;AAEF,MAAM,YAAY,GAAwD,EAAE,CAAC;AAE7E,MAAM,iBAAiB,GAAiD;IACtE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,yDAAyD,CAAC;QACnE,CAAC;IACH,CAAC;IACD,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,4CAA4C,CAAC;IACnD,CAAC;IACD,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,gBAAgB,GAAoD;IACxE,4BAA4B,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CACtB,CAAC,IAAI,EAAmB,EAAE,CACxB,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CACvE,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,iFAAiF,CAAC;IAC3F,CAAC;IACD,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CACtB,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CACzD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,yEAAyE,CAAC;QACnF,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,kDAAkD,CAAC;QAC5D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACjB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CACtB,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;YACxB,CAAC,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnD,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,kDAAkD,CAAC;QAC5D,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAChC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAC7D,CAAC;QACF,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,yCAAyC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,OAAO,yCAAyC,CAAC;YACnD,CAAC;YACD,MAAM,IAAI,GAAG,IAA+B,CAAC;YAC7C,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC7D,OAAO,kDAAkD,CAAC;YAC5D,CAAC;YACD,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,OAAO,kDAAkD,CAAC;YAC5D,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC9B,IACE,IAAI,CAAC,IAAI,KAAK,SAAS;mBACpB,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAC7D,CAAC;gBACD,OAAO,+DAA+D,CAAC;YACzE,CAAC;YACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACxC,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,OAAO,kDAAkD,CAAC;gBAC5D,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;YACD,IACE,IAAI,CAAC,cAAc,KAAK,SAAS;mBAC9B,IAAI,CAAC,cAAc,KAAK,SAAS;mBACjC,IAAI,CAAC,cAAc,KAAK,WAAW,EACtC,CAAC;gBACD,OAAO,6DAA6D,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC;AAEF,SAAS,sBAAsB,CAAC,GAAyB,EAAE,KAAc;IACvE,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAK,KAAgB,GAAG,KAAK,EAAE,CAAC;gBACnF,OAAO,8CAA8C,CAAC;YACxD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,OAAO,CAAC,CAAC,CAAC;YACR,iEAAiE;YACjE,+DAA+D;YAC/D,sDAAsD;YACtD,MAAM,WAAW,GAAU,GAAG,CAAC;YAC/B,KAAK,WAAW,CAAC;YACjB,OAAO,iDAAiD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,4BAA4B,CAAC,CAAS;IAC7C,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,OAA+B;IACrE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,SAAS,QAAQ,sBAAsB,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;gBACtB,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxB,OAAO,GAAG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC;QACH,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAmB,EACnB,aAA4B,EAC5B,OAAgC,EAChC,UAAqC,EAAE;IAEvC,MAAM,MAAM,GAAuB;QACjC,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,EAAE;QACnB,MAAM,EAAE,EAAE;KACX,CAAC;IAEF,MAAM,cAAc,GAA4B,EAAE,CAAC;IACnD,MAAM,sBAAsB,GAA4B,EAAE,CAAC;IAC3D,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,MAAM,sBAAsB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE3D,MAAM,cAAc,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IAE/D,kEAAkE;IAClE,sEAAsE;IACtE,gEAAgE;IAChE,qEAAqE;IACrE,gEAAgE;IAChE,wEAAwE;IACxE,8BAA8B;IAC9B,EAAE;IACF,oEAAoE;IACpE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAEvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;gBAChB,UAAU,GAAG,sFAAsF,CAAC;YACtG,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GACZ,oBAAoB,CAAC,GAAG,CAAC;eACtB,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,WAAW,CAAC,GAAG,CAAC,GAAY,CAAC,EAAE,CAAC;gBAClC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;oBAChB,+EAA+E,CAAC;gBAClF,SAAS;YACX,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,iCAAiC,CAAC;YACpE,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAI,MAAkC,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,YAAY,CAAC;YAChF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;YAC9D,IAAI,WAAW,KAAK,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBAC9D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,2BAA2B,WAAW,SAAS,OAAO,EAAE,CAAC;gBAC9E,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,iBAAiB,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,WAAW,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,WAAW,CAAC,KAAK,EAAE,CAAC;gBAClD,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,eAAe,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC3B,SAAS;YACX,CAAC;QACH,CAAC;QAED,MAAM,cAAc,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,cAAc,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC3B,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,cAAc,GAAY,KAAK,CAAC;QACpC,IAAI,GAAG,KAAK,2BAA2B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC9E,MAAM,UAAU,GAAG,iCAAiC,CAAC,KAAK,EAAE;gBAC1D,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,IAAI,sCAAsC,CAAC;gBAClF,SAAS;YACX,CAAC;YACD,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,KAAK,kBAAkB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YACrE,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE;gBACjD,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,IAAI,4BAA4B,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,cAAc,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,GAAG,KAAK,iBAAiB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,EAAE,CAAC;YACpE,cAAc,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,KAAK,kBAAkB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,cAAc,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,+DAA+D;QAC/D,wDAAwD;QACxD,mCAAmC;QACnC,kEAAkE;QAClE,uEAAuE;QAEvE,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,qBAAqB,GAAG;gBAC5B,GAAG,sBAAsB;gBACzB,GAAG,cAAc;gBACjB,CAAC,GAAG,CAAC,EAAE,cAAc;aACtB,CAAC;YACF,MAAM,SAAS,GAAG,qBAAqB,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACzE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAC/C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CACjC,CAAC;gBACF,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,EAAE,OAAO,IAAI,eAAe,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACnE,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;gBACpC,SAAS;YACX,CAAC;YACD,sBAAsB,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;YAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,uBAAuB,GAAG,EAAE,CAAC;gBAClD,SAAS;YACX,CAAC;YACD,UAAU,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,aAAa,CAAC,OAAO,CAAC,cAAyD,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,aAAa,CAAC,cAAc,EAAE,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAE9C,qEAAqE;IACrE,kEAAkE;IAClE,sEAAsE;IACtE,uEAAuE;IACvE,gEAAgE;IAChE,kEAAkE;IAClE,sEAAsE;IACtE,2DAA2D;IAC3D,IAAI,OAAO,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACvE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;YACzE,MAAM,iBAAiB,CACrB,MAAM,CAAC,OAAO,EACd,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,EAC5B;gBACE,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;gBAC3D,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;aACpD,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/api/integration-route-gate.d.ts

@@ -0,0 +1,60 @@
+import type { MiddlewareHandler } from "hono";
+import type Database from "better-sqlite3";
+import { type IntegrationDescriptor, type IntegrationKey } from "@aitne/shared";
+/**
+ * Integration delegation framework — registry-driven 410 middleware (§4.5.2).
+ *
+ * For each request, resolves the URL path to its governing integration via
+ * the registry's `apiRoutesTouched` field. When that integration is in
+ * `delegated` mode the middleware returns the §4.5.2 410 JSON body and
+ * the route handler is never invoked. `direct` and `disabled` flow
+ * through unchanged — `disabled` keeps producing the existing
+ * service-not-configured errors from the route handlers themselves.
+ *
+ * Multi-provider routes (Gmail under `/api/mail/*`) are explicitly NOT
+ * gated here — `gmail.apiRoutesTouched` is empty because prefix matching
+ * would also block iCloud / Outlook / IMAP accounts. Those routes do
+ * per-account 410s inside their handlers (DELEGATED-MODE-V2-DESIGN.md
+ * §6.3).
+ *
+ * Resolution rule: the longest matching `apiRoutesTouched` prefix wins.
+ * That keeps future surgical paths like `/api/calendar/admin` ahead of
+ * a coarser `/api/calendar` if both ever coexist for different
+ * integrations.
+ *
+ * DELEGATED-MODE-V2-DESIGN.md §6.3 — the gate is now defense-in-depth
+ * for delegated integrations: cross-backend skill prose directs the
+ * agent at `POST /api/integrations/:key/invoke`, and same-backend skill
+ * is not provisioned at all. The 410 here interdicts hallucinated calls
+ * to legacy paths the variant prose did not teach.
+ */
+export interface IntegrationRouteGateOptions {
+    db: Database.Database;
+    /**
+     * Integration descriptors to consult, mostly so tests can inject a
+     * narrow set without depending on the global registry. Defaults to the
+     * production registry.
+     */
+    descriptors?: readonly IntegrationDescriptor[];
+}
+interface PrefixEntry {
+    prefix: string;
+    key: IntegrationKey;
+}
+/**
+ * Walk the prefix index and return the integration key whose
+ * `apiRoutesTouched` covers `pathname`, or null if none. A prefix
+ * matches when the path is exactly equal to it OR continues with `/`
+ * (so `/api/calendar` matches `/api/calendar/events` but not
+ * `/api/calendar-extras`).
+ */
+export declare function resolveIntegrationForPath(pathname: string, index: readonly PrefixEntry[]): IntegrationKey | null;
+/**
+ * Build the Hono middleware. Mount it after the auth middleware so
+ * unauthenticated requests get 401 (current behavior) rather than a
+ * 410 that leaks integration state. Mount it before any route handler
+ * so the 410 short-circuits the work.
+ */
+export declare function createIntegrationRouteGate(opts: IntegrationRouteGateOptions): MiddlewareHandler;
+export {};
+//# sourceMappingURL=integration-route-gate.d.ts.map

package/dist/api/integration-route-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-route-gate.d.ts","sourceRoot":"","sources":["../../src/api/integration-route-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAGvB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAChD;AAED,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,cAAc,CAAC;CACrB;AAeD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,WAAW,EAAE,GAC5B,cAAc,GAAG,IAAI,CAMvB;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,2BAA2B,GAChC,iBAAiB,CAoDnB"}

package/dist/api/integration-route-gate.js

@@ -0,0 +1,83 @@
+import { INTEGRATION_DESCRIPTORS, } from "@aitne/shared";
+import { readIntegrations } from "../db/integrations-store.js";
+function buildPrefixIndex(descriptors) {
+    const entries = [];
+    for (const descriptor of descriptors) {
+        for (const prefix of descriptor.apiRoutesTouched) {
+            entries.push({ prefix, key: descriptor.key });
+        }
+    }
+    // Longest prefix first — the matcher returns the first hit.
+    return entries.sort((a, b) => b.prefix.length - a.prefix.length);
+}
+/**
+ * Walk the prefix index and return the integration key whose
+ * `apiRoutesTouched` covers `pathname`, or null if none. A prefix
+ * matches when the path is exactly equal to it OR continues with `/`
+ * (so `/api/calendar` matches `/api/calendar/events` but not
+ * `/api/calendar-extras`).
+ */
+export function resolveIntegrationForPath(pathname, index) {
+    for (const { prefix, key } of index) {
+        if (pathname === prefix)
+            return key;
+        if (pathname.startsWith(prefix + "/"))
+            return key;
+    }
+    return null;
+}
+/**
+ * Build the Hono middleware. Mount it after the auth middleware so
+ * unauthenticated requests get 401 (current behavior) rather than a
+ * 410 that leaks integration state. Mount it before any route handler
+ * so the 410 short-circuits the work.
+ */
+export function createIntegrationRouteGate(opts) {
+    const descriptors = opts.descriptors ??
+        Object.values(INTEGRATION_DESCRIPTORS);
+    const index = buildPrefixIndex(descriptors);
+    const db = opts.db;
+    return async (c, next) => {
+        if (index.length === 0) {
+            await next();
+            return;
+        }
+        const pathname = new URL(c.req.url).pathname;
+        const key = resolveIntegrationForPath(pathname, index);
+        if (!key) {
+            await next();
+            return;
+        }
+        const state = readIntegrations(db)[key];
+        if (state.mode !== "delegated") {
+            await next();
+            return;
+        }
+        // Zod guarantees delegatedBackend is set when mode === "delegated".
+        const delegatedBackend = state.delegatedBackend;
+        const descriptor = INTEGRATION_DESCRIPTORS[key];
+        const displayName = descriptor.displayName;
+        // User-managed connectors (Outlook today): there is no daemon-side
+        // proxy at `/api/integrations/:key/invoke`, so the message must
+        // point the agent at the user-installed MCP / connector on the
+        // chosen backend instead of suggesting an /invoke fallback.
+        const message = descriptor.userManagedConnector
+            ? `${displayName} is in delegated mode (delegated to ${delegatedBackend}). The user has registered an ${displayName} MCP / connector on the ${delegatedBackend} backend; use those tools directly. The daemon does not proxy this integration.`
+            : `${displayName} is in delegated mode (delegated to ${delegatedBackend}). Same-backend sessions: use the connector's native MCP tools. Cross-backend sessions: call POST /api/integrations/${key}/invoke. See the touched skill for the per-mode body.`;
+        return c.json({
+            error: "integration_delegated",
+            integration: key,
+            backend: delegatedBackend,
+            mode: "delegated",
+            // The route gate doesn't know which backend the *calling agent* is
+            // running on, so the message can't say "your backend's tool" with
+            // confidence — that's correct only in same-backend delegation. For
+            // descriptor-driven integrations (Gmail / Calendar / Notion) both
+            // same-backend and cross-backend paths exist and the message points
+            // at both. For user-managed connectors there is no /invoke
+            // fallback — the user's MCP is the only access path.
+            message,
+        }, 410);
+    };
+}
+//# sourceMappingURL=integration-route-gate.js.map

package/dist/api/integration-route-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-route-gate.js","sourceRoot":"","sources":["../../src/api/integration-route-gate.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,uBAAuB,GAGxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AA6C/D,SAAS,gBAAgB,CACvB,WAA6C;IAE7C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,4DAA4D;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,KAA6B;IAE7B,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,KAAK,EAAE,CAAC;QACpC,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;QACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAAiC;IAEjC,MAAM,WAAW,GACf,IAAI,CAAC,WAAW;QAChB,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAqC,CAAC;IAC7E,MAAM,KAAK,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IAEnB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,yBAAyB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAChD,MAAM,UAAU,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC3C,mEAAmE;QACnE,gEAAgE;QAChE,+DAA+D;QAC/D,4DAA4D;QAC5D,MAAM,OAAO,GAAG,UAAU,CAAC,oBAAoB;YAC7C,CAAC,CAAC,GAAG,WAAW,uCAAuC,gBAAgB,iCAAiC,WAAW,2BAA2B,gBAAgB,iFAAiF;YAC/O,CAAC,CAAC,GAAG,WAAW,uCAAuC,gBAAgB,uHAAuH,GAAG,uDAAuD,CAAC;QAC3P,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE,uBAAuB;YAC9B,WAAW,EAAE,GAAG;YAChB,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,WAAW;YACjB,mEAAmE;YACnE,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,2DAA2D;YAC3D,qDAAqD;YACrD,OAAO;SACR,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}