@aitne/daemon 0.1.0

package/dist/core/agent-core.js

@@ -0,0 +1,102 @@
+/**
+ * Sentinel used by the delegated-proxy invoker's wall-clock timer when it
+ * aborts the per-call AbortController. Backends use `instanceof` against
+ * `abortSignal.reason` to distinguish wall-clock timeout from caller-side
+ * cancellation, which is recorded as a separate `errorClass` so the
+ * dashboard can tell "Gemini was slow" apart from "session was cancelled".
+ *
+ * Stronger than message-string matching: a future refactor of the message
+ * literal cannot silently break the classifier, and unrelated libraries
+ * cannot accidentally collide with the sentinel by emitting an Error
+ * whose message happens to contain "timeout".
+ */
+export class DelegatedProxyTimeoutError extends Error {
+    constructor(message = "delegated proxy wall-clock timeout") {
+        super(message);
+        this.name = "DelegatedProxyTimeoutError";
+    }
+}
+/**
+ * Map an `AbortSignal.reason` to the right `errorClass` enum value.
+ * Use the result for the `errorClass` field on the failure return path
+ * after `abortSignal?.aborted` (or the equivalent claude `aborted.value`)
+ * is observed true.
+ */
+export function classifyAbortReason(reason) {
+    return reason instanceof DelegatedProxyTimeoutError ? "timeout" : "cancelled";
+}
+/**
+ * Thrown by `IAgentCore.runDelegatedTool()` implementations that have not
+ * yet been wired to the per-backend stream-event extractor (Phase A ships
+ * the contract; Phase B fills it in for Claude / Codex / Gemini). The
+ * invoker treats this as a 501-class failure and records it in
+ * `agent_actions.detail.errorClass = "unimplemented"`.
+ */
+export class DelegatedToolUnsupportedError extends Error {
+    backendId;
+    constructor(backendId, reason) {
+        super(`${backendId}: runDelegatedTool not implemented — ${reason}`);
+        this.backendId = backendId;
+        this.name = "DelegatedToolUnsupportedError";
+    }
+}
+/**
+ * DELEGATED-TASK-MODE-DESIGN.md §9.2 — historically thrown by the Codex
+ * core when task mode wasn't yet wired (Phase 1). Phase 1.5 (2026-05-01)
+ * landed `runDelegatedTask` on Codex via daemon-side stream pre-emption,
+ * so this error class is no longer thrown by any current core. The
+ * sentinel + the `task_mode_unsupported` errorClass enum value are kept
+ * so a future backend that ships before its task-mode wiring can reuse
+ * the contract instead of inventing a new one.
+ */
+export class TaskModeUnsupportedError extends Error {
+    backendId;
+    constructor(backendId) {
+        super(`${backendId}: task mode (runDelegatedTask) is not implemented on this backend yet. Reactivation surface: implement runDelegatedTask on the core and the invoker will route /exec calls through it like Claude / Codex / Gemini.`);
+        this.backendId = backendId;
+        this.name = "TaskModeUnsupportedError";
+    }
+}
+/**
+ * Thrown by `IAgentCore.probeTools()` implementations that cannot
+ * enumerate their MCP tool manifest. The API route surfaces this as a
+ * 501 so the dashboard can render a targeted "live probe not available
+ * on this backend" message. Currently no production core throws this;
+ * it stays in place for cores that may land in the future without a
+ * tool-enumeration path.
+ */
+export class LiveProbeUnsupportedError extends Error {
+    backendId;
+    reason;
+    constructor(backendId, reason) {
+        super(`${backendId}: live probe not supported — ${reason}`);
+        this.backendId = backendId;
+        this.reason = reason;
+        this.name = "LiveProbeUnsupportedError";
+    }
+}
+export class BackendQuotaError extends Error {
+    backendId;
+    originalCode;
+    resetHint;
+    constructor(backendId, originalCode, resetHint, message) {
+        super(message);
+        this.backendId = backendId;
+        this.originalCode = originalCode;
+        this.resetHint = resetHint;
+        this.name = "BackendQuotaError";
+    }
+}
+export class BackendDecisiveFailure extends Error {
+    backendId;
+    kind;
+    cause;
+    constructor(backendId, kind, cause) {
+        super(`${backendId} decisive failure: ${kind}`);
+        this.backendId = backendId;
+        this.kind = kind;
+        this.cause = cause;
+        this.name = "BackendDecisiveFailure";
+    }
+}
+//# sourceMappingURL=agent-core.js.map

package/dist/core/agent-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-core.js","sourceRoot":"","sources":["../../src/core/agent-core.ts"],"names":[],"mappings":"AAsVA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAO,GAAG,oCAAoC;QACxD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAe;IAEf,OAAO,MAAM,YAAY,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AAChF,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAC1B;IAA5B,YAA4B,SAAoB,EAAE,MAAc;QAC9D,KAAK,CAAC,GAAG,SAAS,wCAAwC,MAAM,EAAE,CAAC,CAAC;QAD1C,cAAS,GAAT,SAAS,CAAW;QAE9C,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAoKD;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB;IAA5B,YAA4B,SAAoB;QAC9C,KAAK,CACH,GAAG,SAAS,qNAAqN,CAClO,CAAC;QAHwB,cAAS,GAAT,SAAS,CAAW;QAI9C,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAEhC;IACA;IAFlB,YACkB,SAAoB,EACpB,MAAc;QAE9B,KAAK,CAAC,GAAG,SAAS,gCAAgC,MAAM,EAAE,CAAC,CAAC;QAH5C,cAAS,GAAT,SAAS,CAAW;QACpB,WAAM,GAAN,MAAM,CAAQ;QAG9B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IACA;IACA;IAHlB,YACkB,SAAoB,EACpB,YAAoB,EACpB,SAAuC,EACvD,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,cAAS,GAAT,SAAS,CAAW;QACpB,iBAAY,GAAZ,YAAY,CAAQ;QACpB,cAAS,GAAT,SAAS,CAA8B;QAIvD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAE7B;IACA;IAOA;IATlB,YACkB,SAAoB,EACpB,IAMS,EACT,KAAc;QAE9B,KAAK,CAAC,GAAG,SAAS,sBAAsB,IAAI,EAAE,CAAC,CAAC;QAVhC,cAAS,GAAT,SAAS,CAAW;QACpB,SAAI,GAAJ,IAAI,CAMK;QACT,UAAK,GAAL,KAAK,CAAS;QAG9B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF"}

package/dist/core/alerts.d.ts

@@ -0,0 +1,86 @@
+import type { Alert } from "@aitne/shared";
+/**
+ * Notifications Center — pure alert aggregator.
+ *
+ * See docs/design/20-notifications-center.md.
+ *
+ * The /api/health route extracts the signals listed in `AlertInputs`
+ * from the daemon's existing observation surface (db tables, in-memory
+ * health, integration probes) and passes them here. This file performs
+ * no I/O — every detector is pure and unit-testable.
+ *
+ * Severity policy:
+ *  - error   → broken right now, agent cannot fully function
+ *  - warning → reduced functionality or near-limit
+ *  - info    → discoverability nudge
+ *
+ * Adding a new alert type:
+ *  1. Add the input field(s) to `AlertInputs`.
+ *  2. Add a detector function below following the existing pattern.
+ *  3. Append it to `aggregateAlerts` and add a unit test.
+ *
+ * `href` policy: each alert points to where the user can actually act
+ * on the underlying issue. The dashboard route `/health` is a
+ * body-health skeleton (steps / sleep / habits), not system
+ * diagnostics — system signals route to `/settings*` instead. The
+ * notifications panel renders the link label by inspecting the href
+ * prefix (see `getActionLabel` in `notifications-panel.tsx`), so a
+ * mismatch between cause and target shows up as a wrong-verb button.
+ */
+export type MailAccountAuthStatus = "healthy" | "requires_consent" | "degraded";
+export interface MailAccountSignal {
+    id: string;
+    kind: "gmail" | "outlook" | "yahoo" | "icloud";
+    email: string;
+    authStatus: MailAccountAuthStatus;
+    active: boolean;
+}
+export interface BackendAuthSignal {
+    id: string;
+    enabled: boolean;
+    authStatus: string;
+    lastError: string | null;
+    cliInstalled: boolean;
+}
+export interface AlertInputs {
+    now: Date;
+    degradedMode: {
+        reason: string;
+        path: string | null;
+        since: string;
+    } | null;
+    missingContextFiles: string[];
+    mailAccounts: MailAccountSignal[];
+    /**
+     * When Gmail is delegated to the backend connector, the daemon is not
+     * polling Gmail accounts directly so per-account `requires_consent` /
+     * `degraded` signals on Gmail rows refer to accounts that are out of
+     * the observation loop. Filter them out at the alert layer to mirror
+     * MailAttentionAlert's existing behavior.
+     */
+    gmailDelegated: boolean;
+    templatesPending: Array<{
+        path: string;
+        from: number;
+        to: number;
+    }>;
+    docsAssetConflicts: string[];
+    skillConflicts: string[];
+    builtInCommandNames: string[];
+    userCommands: Array<{
+        id: number;
+        name: string;
+        command: string;
+    }>;
+    backends: BackendAuthSignal[];
+    todayCostUsd: number;
+    monthCostUsd: number;
+    dailyCapUsd: number | null;
+    monthlyCapUsd: number | null;
+    googleConfigured: boolean;
+    googleConnected: boolean;
+    /** Any Google-family integration in direct mode (delegation upgrade nudge). */
+    delegationUpgradeAvailable: boolean;
+}
+export declare function aggregateAlerts(inputs: AlertInputs): Alert[];
+//# sourceMappingURL=alerts.d.ts.map

package/dist/core/alerts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.d.ts","sourceRoot":"","sources":["../../src/core/alerts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAiB,MAAM,eAAe,CAAC;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAEhF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,qBAAqB,CAAC;IAClC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,IAAI,CAAC;IAGV,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC5E,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAG9B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,cAAc,EAAE,OAAO,CAAC;IAGxB,gBAAgB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGnE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAG9B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,+EAA+E;IAC/E,0BAA0B,EAAE,OAAO,CAAC;CACrC;AAkSD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,KAAK,EAAE,CAqB5D"}

package/dist/core/alerts.js

@@ -0,0 +1,304 @@
+const COST_WARN_THRESHOLD = 0.8;
+function iso(now) {
+    return now.toISOString();
+}
+function detectDegradedMode(inputs) {
+    const d = inputs.degradedMode;
+    if (!d)
+        return [];
+    return [
+        {
+            id: "system.degraded",
+            severity: "error",
+            title: "Daemon is in degraded mode",
+            description: `Reason: ${d.reason}${d.path ? ` (${d.path})` : ""}. Some writes are paused until the underlying issue is resolved.`,
+            // Vault path is fixed via ManagementModeSection on /settings.
+            href: "/settings",
+            source: "system",
+            dismissable: false,
+            detectedAt: d.since,
+            fingerprint: `${d.reason}:${d.path ?? ""}`,
+        },
+    ];
+}
+function detectContextFilesMissing(inputs) {
+    if (inputs.missingContextFiles.length === 0)
+        return [];
+    const sorted = [...inputs.missingContextFiles].sort();
+    return [
+        {
+            id: "system.context.missing",
+            severity: "error",
+            title: `${sorted.length} context file${sorted.length === 1 ? "" : "s"} missing`,
+            description: `Missing: ${sorted.slice(0, 3).join(", ")}${sorted.length > 3 ? `, and ${sorted.length - 3} more` : ""}. The agent cannot read or write these until they are recreated.`,
+            // Recovery: "Reinstall context" on /settings/advanced (tarball
+            // backup + re-seed from templates on next restart).
+            href: "/settings/advanced",
+            source: "system",
+            dismissable: false,
+            detectedAt: iso(inputs.now),
+            fingerprint: sorted.join("|"),
+        },
+    ];
+}
+const MAIL_KIND_LABEL = {
+    gmail: "Gmail",
+    outlook: "Outlook",
+    yahoo: "Yahoo",
+    icloud: "iCloud",
+};
+function detectMailAttention(inputs) {
+    const visible = inputs.mailAccounts
+        .filter((a) => a.active)
+        .filter((a) => !(inputs.gmailDelegated && a.kind === "gmail"))
+        .filter((a) => a.authStatus !== "healthy");
+    if (visible.length === 0)
+        return [];
+    const out = [];
+    for (const a of visible) {
+        const reconsent = a.authStatus === "requires_consent";
+        out.push({
+            id: `mail.${a.authStatus}.${a.id}`,
+            severity: reconsent ? "error" : "warning",
+            title: reconsent
+                ? `${MAIL_KIND_LABEL[a.kind]} (${a.email}) needs re-authentication`
+                : `${MAIL_KIND_LABEL[a.kind]} (${a.email}) is degraded`,
+            description: reconsent
+                ? "Re-authorize the account to resume mail polling."
+                : "The provider is returning persistent errors. Mail polling may be partial until the issue clears.",
+            href: `/connections/mail#${a.id}`,
+            source: "mail",
+            dismissable: !reconsent,
+            detectedAt: iso(inputs.now),
+            fingerprint: `${a.authStatus}:${a.id}`,
+        });
+    }
+    return out;
+}
+function detectTemplateUpgrades(inputs) {
+    if (inputs.templatesPending.length === 0)
+        return [];
+    const fingerprint = inputs.templatesPending
+        .map((t) => `${t.path}:${t.from}->${t.to}`)
+        .sort()
+        .join("|");
+    const count = inputs.templatesPending.length;
+    return [
+        {
+            id: "config.templates.pending",
+            severity: "warning",
+            title: `${count} template upgrade${count === 1 ? "" : "s"} pending`,
+            description: "Newer template versions ship with this release. Review and merge to pick up format changes.",
+            // Acceptance path: "Reinstall context" on /settings/advanced.
+            href: "/settings/advanced",
+            source: "config",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint,
+        },
+    ];
+}
+function detectDocsAssetConflicts(inputs) {
+    if (inputs.docsAssetConflicts.length === 0)
+        return [];
+    const sorted = [...inputs.docsAssetConflicts].sort();
+    const count = sorted.length;
+    return [
+        {
+            id: "config.docs.conflicts",
+            severity: "warning",
+            title: `${count} doc${count === 1 ? "" : "s"} need update review`,
+            description: `User-edited docs were preserved during release sync: ${sorted.slice(0, 3).join(", ")}${count > 3 ? `, and ${count - 3} more` : ""}.`,
+            href: "/docs",
+            source: "config",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint: sorted.join("|"),
+        },
+    ];
+}
+function detectSkillConflicts(inputs) {
+    if (inputs.skillConflicts.length === 0)
+        return [];
+    const sorted = [...inputs.skillConflicts].sort();
+    const count = sorted.length;
+    return [
+        {
+            id: "config.skills.conflicts",
+            severity: "warning",
+            title: `${count} user skill${count === 1 ? "" : "s"} conflict with built-ins`,
+            description: `${sorted.slice(0, 3).join(", ")}${count > 3 ? `, and ${count - 3} more` : ""}. Built-in skills take precedence in session workdirs; rename the user skill to restore custom behavior.`,
+            href: "/knowledge?tab=skills",
+            source: "config",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint: sorted.join("|"),
+        },
+    ];
+}
+function detectCommandConflicts(inputs) {
+    const reserved = new Set(inputs.builtInCommandNames);
+    const conflicting = inputs.userCommands.filter((c) => reserved.has(c.command));
+    if (conflicting.length === 0)
+        return [];
+    const fingerprint = conflicting
+        .map((c) => `${c.id}:${c.command}`)
+        .sort()
+        .join("|");
+    const count = conflicting.length;
+    const sample = conflicting.slice(0, 3).map((c) => c.command).join(", ");
+    return [
+        {
+            id: "config.command.conflicts",
+            severity: "warning",
+            title: `${count} custom command${count === 1 ? "" : "s"} conflict with built-ins`,
+            description: `${sample}${count > 3 ? `, and ${count - 3} more` : ""}. Built-in commands take precedence at dispatch — rename to restore your custom behavior.`,
+            href: "/settings/commands",
+            source: "config",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint,
+        },
+    ];
+}
+function detectAuthHealth(inputs) {
+    const out = [];
+    for (const b of inputs.backends) {
+        if (!b.enabled)
+            continue;
+        if (!b.cliInstalled) {
+            out.push({
+                id: `auth.${b.id}.cli_missing`,
+                severity: "error",
+                title: `${b.id} CLI not found on PATH`,
+                description: "Install the CLI or disable this backend so it doesn't get scheduled.",
+                href: "/settings/backends",
+                source: "auth",
+                dismissable: false,
+                detectedAt: iso(inputs.now),
+                fingerprint: `cli_missing:${b.id}`,
+            });
+            continue;
+        }
+        const broken = b.authStatus === "expired"
+            || b.authStatus === "missing"
+            || b.authStatus === "error";
+        if (!broken)
+            continue;
+        out.push({
+            id: `auth.${b.id}.${b.authStatus}`,
+            severity: "error",
+            title: `${b.id} backend authentication ${b.authStatus}`,
+            description: b.lastError
+                ? `Last error: ${b.lastError}.`
+                : "Re-authenticate to resume sessions on this backend.",
+            href: "/settings/backends",
+            source: "auth",
+            dismissable: false,
+            detectedAt: iso(inputs.now),
+            fingerprint: `${b.authStatus}:${b.id}`,
+        });
+    }
+    return out;
+}
+function detectCostCap(inputs, scope) {
+    const cap = scope === "daily" ? inputs.dailyCapUsd : inputs.monthlyCapUsd;
+    const spend = scope === "daily" ? inputs.todayCostUsd : inputs.monthCostUsd;
+    // Loose null check covers both `null` (cap disabled) and `undefined`
+    // (test config that didn't seed the field). Also guards against zero
+    // and negative caps which would produce NaN/Infinity ratios.
+    if (cap == null || cap <= 0)
+        return [];
+    if (typeof spend !== "number" || Number.isNaN(spend))
+        return [];
+    const ratio = spend / cap;
+    if (ratio < COST_WARN_THRESHOLD)
+        return [];
+    const exceeded = ratio >= 1;
+    const severity = exceeded ? "error" : "warning";
+    const pct = Math.floor(ratio * 100);
+    const scopeLabel = scope === "daily" ? "today" : "this month";
+    return [
+        {
+            id: `cost.${scope}_cap`,
+            severity,
+            title: exceeded
+                ? `${scope === "daily" ? "Daily" : "Monthly"} cost cap reached`
+                : `${pct}% of ${scope} cost cap used`,
+            description: `Spent $${spend.toFixed(2)} of $${cap.toFixed(2)} ${scopeLabel}.${exceeded && scope === "daily"
+                ? " Autonomous sessions are being skipped until the next agent day."
+                : ""}`,
+            href: "/settings/models",
+            source: "cost",
+            dismissable: !exceeded,
+            detectedAt: iso(inputs.now),
+            // Bucket by 5% so the same threshold band doesn't keep re-firing as
+            // the user accrues a few more cents of usage.
+            fingerprint: `${scope}:${exceeded ? "exceeded" : `band:${Math.floor(pct / 5) * 5}`}`,
+        },
+    ];
+}
+function detectGcalSetup(inputs) {
+    if (!inputs.googleConfigured)
+        return [];
+    if (inputs.googleConnected)
+        return [];
+    return [
+        {
+            id: "setup.gcal",
+            severity: "info",
+            title: "Google Calendar is configured but not connected",
+            description: "Re-authorize the Google account to resume calendar sync.",
+            href: "/connections/calendar#google",
+            source: "setup",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint: "disconnected",
+        },
+    ];
+}
+function detectDelegationUpgrade(inputs) {
+    if (!inputs.delegationUpgradeAvailable)
+        return [];
+    return [
+        {
+            id: "setup.delegation_upgrade",
+            severity: "info",
+            title: "You can delegate Google access to your backend connector",
+            description: "Zero GCP setup, parity on most Gmail + Calendar tasks. Tokens stay in the keychain so revert is one click.",
+            href: "/connections/calendar#google",
+            source: "setup",
+            dismissable: true,
+            detectedAt: iso(inputs.now),
+            fingerprint: "available",
+        },
+    ];
+}
+const SEVERITY_RANK = {
+    error: 0,
+    warning: 1,
+    info: 2,
+};
+export function aggregateAlerts(inputs) {
+    const all = [
+        ...detectDegradedMode(inputs),
+        ...detectContextFilesMissing(inputs),
+        ...detectMailAttention(inputs),
+        ...detectTemplateUpgrades(inputs),
+        ...detectDocsAssetConflicts(inputs),
+        ...detectSkillConflicts(inputs),
+        ...detectCommandConflicts(inputs),
+        ...detectAuthHealth(inputs),
+        ...detectCostCap(inputs, "daily"),
+        ...detectCostCap(inputs, "monthly"),
+        ...detectGcalSetup(inputs),
+        ...detectDelegationUpgrade(inputs),
+    ];
+    return all.sort((a, b) => {
+        const r = SEVERITY_RANK[a.severity] - SEVERITY_RANK[b.severity];
+        if (r !== 0)
+            return r;
+        return b.detectedAt.localeCompare(a.detectedAt);
+    });
+}
+//# sourceMappingURL=alerts.js.map

package/dist/core/alerts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alerts.js","sourceRoot":"","sources":["../../src/core/alerts.ts"],"names":[],"mappings":"AA0FA,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,GAAG,CAAC,GAAS;IACpB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAmB;IAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;IAC9B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,OAAO;QACL;YACE,EAAE,EAAE,iBAAiB;YACrB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,4BAA4B;YACnC,WAAW,EAAE,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,kEAAkE;YACjI,8DAA8D;YAC9D,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,CAAC,CAAC,KAAK;YACnB,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,MAAmB;IACpD,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO;QACL;YACE,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;YAC/E,WAAW,EAAE,YAAY,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kEAAkE;YACrL,+DAA+D;YAC/D,oDAAoD;YACpD,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAA8C;IACjE,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,SAAS,mBAAmB,CAAC,MAAmB;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY;SAChC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,KAAK,kBAAkB,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,EAAE;YAClC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACzC,KAAK,EAAE,SAAS;gBACd,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,2BAA2B;gBACnE,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,eAAe;YACzD,WAAW,EAAE,SAAS;gBACpB,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,kGAAkG;YACtG,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAAE,EAAE;YACjC,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,SAAS;YACvB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAmB;IACjD,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,gBAAgB;SACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC1C,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC;IAC7C,OAAO;QACL;YACE,EAAE,EAAE,0BAA0B;YAC9B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,GAAG,KAAK,oBAAoB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU;YACnE,WAAW,EAAE,6FAA6F;YAC1G,8DAA8D;YAC9D,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW;SACZ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,MAAmB;IACnD,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,OAAO;QACL;YACE,EAAE,EAAE,uBAAuB;YAC3B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,GAAG,KAAK,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,qBAAqB;YACjE,WAAW,EAAE,wDAAwD,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG;YAClJ,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAmB;IAC/C,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,OAAO;QACL;YACE,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,GAAG,KAAK,cAAc,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0BAA0B;YAC7E,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,0GAA0G;YACpM,IAAI,EAAE,uBAAuB;YAC7B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAmB;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,WAAW;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;SAClC,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,OAAO;QACL;YACE,EAAE,EAAE,0BAA0B;YAC9B,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,GAAG,KAAK,kBAAkB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,0BAA0B;YACjF,WAAW,EAAE,GAAG,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,2FAA2F;YAC9J,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW;SACZ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmB;IAC3C,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACzB,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,cAAc;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,wBAAwB;gBACtC,WAAW,EAAE,sEAAsE;gBACnF,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,KAAK;gBAClB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAC3B,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE;aACnC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,KAAK,SAAS;eACpC,CAAC,CAAC,UAAU,KAAK,SAAS;eAC1B,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE;YAClC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC,CAAC,UAAU,EAAE;YACvD,WAAW,EAAE,CAAC,CAAC,SAAS;gBACtB,CAAC,CAAC,eAAe,CAAC,CAAC,SAAS,GAAG;gBAC/B,CAAC,CAAC,qDAAqD;YACzD,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CACpB,MAAmB,EACnB,KAA0B;IAE1B,MAAM,GAAG,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IAC1E,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAC5E,qEAAqE;IACrE,qEAAqE;IACrE,6DAA6D;IAC7D,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC;IAC1B,IAAI,KAAK,GAAG,mBAAmB;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAkB,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9D,OAAO;QACL;YACE,EAAE,EAAE,QAAQ,KAAK,MAAM;YACvB,QAAQ;YACR,KAAK,EAAE,QAAQ;gBACb,CAAC,CAAC,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,mBAAmB;gBAC/D,CAAC,CAAC,GAAG,GAAG,QAAQ,KAAK,gBAAgB;YACvC,WAAW,EAAE,UAAU,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,UAAU,IACzE,QAAQ,IAAI,KAAK,KAAK,OAAO;gBAC3B,CAAC,CAAC,kEAAkE;gBACpE,CAAC,CAAC,EACN,EAAE;YACF,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,CAAC,QAAQ;YACtB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,oEAAoE;YACpE,8CAA8C;YAC9C,WAAW,EAAE,GAAG,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE;SACrF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,MAAmB;IAC1C,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IACtC,OAAO;QACL;YACE,EAAE,EAAE,YAAY;YAChB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,iDAAiD;YACxD,WAAW,EAAE,0DAA0D;YACvE,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,cAAc;SAC5B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAmB;IAClD,IAAI,CAAC,MAAM,CAAC,0BAA0B;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO;QACL;YACE,EAAE,EAAE,0BAA0B;YAC9B,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,0DAA0D;YACjE,WAAW,EAAE,4GAA4G;YACzH,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAC3B,WAAW,EAAE,WAAW;SACzB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAkC;IACnD,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,MAAM,GAAG,GAAY;QACnB,GAAG,kBAAkB,CAAC,MAAM,CAAC;QAC7B,GAAG,yBAAyB,CAAC,MAAM,CAAC;QACpC,GAAG,mBAAmB,CAAC,MAAM,CAAC;QAC9B,GAAG,sBAAsB,CAAC,MAAM,CAAC;QACjC,GAAG,wBAAwB,CAAC,MAAM,CAAC;QACnC,GAAG,oBAAoB,CAAC,MAAM,CAAC;QAC/B,GAAG,sBAAsB,CAAC,MAAM,CAAC;QACjC,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC3B,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC;QACjC,GAAG,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;QACnC,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,GAAG,uBAAuB,CAAC,MAAM,CAAC;KACnC,CAAC;IAEF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/atomic-write.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Symlink-safe atomic file write.
+ *
+ * Closes the TOCTOU race that exists between a path-validation step
+ * (e.g. `safePath` in the Context API) and the actual `writeFileSync`.
+ * Without this, an attacker who can place a symlink at the validated
+ * destination *after* validation but *before* the write would cause
+ * `writeFileSync` to follow the symlink and overwrite an arbitrary file.
+ *
+ * Two layers of defense:
+ *
+ * 1. **`O_NOFOLLOW` + `O_EXCL` on a fresh temp path.** We never open the
+ *    final destination directly. Instead we open a randomly-suffixed temp
+ *    file in the same directory using `O_NOFOLLOW`, which makes `open(2)`
+ *    fail with `ELOOP` if a symlink ever appears at the temp path, and
+ *    `O_EXCL`, which makes `open(2)` fail with `EEXIST` if anything is
+ *    already there. The random suffix ensures an attacker cannot
+ *    pre-place a target.
+ *
+ * 2. **`rename(2)` over the destination.** POSIX `rename` replaces the
+ *    target atomically *without* dereferencing a symlink that may exist
+ *    at the destination — the symlink itself is replaced by the renamed
+ *    file. Combined with the temp-file open above, this means at no
+ *    point does our process write through a symlink.
+ *
+ * The caller is still responsible for validating that the destination is
+ * inside an allowed root (the Context API does this via `safePath`). This
+ * helper only protects the write step.
+ *
+ * Notes:
+ * - `fsync` is called on the temp fd before rename so a power loss between
+ *   write and rename does not leave a half-written file as the canonical
+ *   one. The directory itself is not fsync'd; the existing context-api
+ *   write path does not do this either, and adding it would be a separate
+ *   durability change beyond the scope of the symlink fix.
+ * - The parent directory is created with `mkdirSync({ recursive: true })`
+ *   if missing — the same behavior as the original write paths. After
+ *   creation we `lstat` it to assert it is a regular directory, not a
+ *   symlink. This is defense-in-depth: the caller should already have
+ *   resolved the parent through realpath, but a TOCTOU swap between
+ *   that resolution and our open is still possible in theory.
+ *
+ * Throws on:
+ * - The destination already exists and is a symlink (`EEXIST`-style error
+ *   thrown explicitly so the caller surfaces a clear message rather than
+ *   silently following the link).
+ * - The parent directory is itself a symlink after `mkdirSync`.
+ * - Any underlying I/O failure from `open` / `write` / `rename`.
+ */
+export declare function writeFileAtomically(fullPath: string, content: string): void;
+//# sourceMappingURL=atomic-write.d.ts.map

package/dist/core/atomic-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic-write.d.ts","sourceRoot":"","sources":["../../src/core/atomic-write.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAqF3E"}