@aitne/daemon 0.1.8 → 0.1.10

package/dist/services/browser-task/browser-task-transition-events.js

@@ -0,0 +1,80 @@
+/**
+ * Browser-task SSE transition emitter — BROWSER_TASK_REDESIGN_PLAN.md §9a.5
+ * (Shape B). Phase 7a wires `browser_task` as a named event on the global
+ * `/api/events/stream` so every state transition invalidates exactly three
+ * dashboard React Query keys: `["browser-tasks"]`, `["browser-tasks", id]`,
+ * and `["browser-tasks", "awaiting-count"]`.
+ *
+ * The emitter is intentionally a thin, narrow interface separate from
+ * `BrowserTaskNotifier` (which fans out user-facing DMs) and from
+ * `BrowserTaskMcpNotifier` (which is the per-tool DM dispatcher). The
+ * Shape B event is a telemetry concern — payload is bounded and never
+ * carries user prose past the 80-char `brief` truncation.
+ *
+ * Wired into four surfaces, each of which is a state-transition site:
+ *   1. `POST /api/browser-task` route (pending insert + fallback failed)
+ *   2. `POST /api/browser-task/:id/cancel` route (cancelled-in-queue +
+ *      no-runner fallback)
+ *   3. `BrowserTaskRunner` (markRunning, markTerminal, markRunningFromParked,
+ *      reconcileDriverOutcome's terminal branch)
+ *   4. `BrowserTaskRuntime` tool layer (ask_user → markAwaitingUser,
+ *      final-confirm gate → markFinalConfirm + markRunningFromParked on
+ *      proceed, finish → markTerminal=completed)
+ *   5. Boot-recovery sweep in `bootstrap/db.ts` (one fan-out per flipped
+ *      row).
+ *
+ * Pure-logic shape lives here; the broadcaster glue is one method call.
+ */
+/** No-op emitter — Phase 1 wiring, test harnesses, and any code path
+ *  that doesn't have a broadcaster handy. Production wires the real one
+ *  via `createBrowserTaskTransitionEmitter`. */
+export const noopBrowserTaskTransitionEmitter = {
+    emit() {
+        /* no-op */
+    },
+    emitFromRow(row, transitionedAt) {
+        if (!row)
+            return null;
+        return briefPayload(row, transitionedAt);
+    },
+};
+/** Match ASCII control characters (0x00-0x1f) and DEL (0x7f). Constructed
+ *  via the RegExp constructor so the source carries the escapes as
+ *  string literals — embedding the actual control characters would make
+ *  the file unreadable and confuse linters. */
+const CONTROL_CHAR_REGEX = new RegExp("[\\x00-\\x1f\\x7f]", "g");
+/** Compose a payload from a row. Bounded brief truncation + control-char
+ *  scrub so a stray newline / NUL in the description does not corrupt
+ *  the SSE frame. */
+export function briefPayload(row, transitionedAt) {
+    const brief = row.description.replace(CONTROL_CHAR_REGEX, " ").slice(0, 80);
+    return {
+        taskId: row.id,
+        state: row.state,
+        transitionedAt,
+        brief,
+        outcomeDetail: row.outcomeDetail,
+        originatingChannel: row.originatingChannel,
+    };
+}
+/** Production factory — wraps `EventBroadcaster.broadcastNamedEvent`. */
+export function createBrowserTaskTransitionEmitter(sink) {
+    if (!sink)
+        return noopBrowserTaskTransitionEmitter;
+    return {
+        emit(payload) {
+            // Fire-and-forget. The broadcaster's iterate-all-clients-and-write
+            // surface already swallows per-client failures; we don't need an
+            // extra await here, and the await would otherwise block the SQL
+            // transaction the emit usually trails.
+            void sink.broadcastNamedEvent("browser_task", payload);
+        },
+        emitFromRow(row, transitionedAt) {
+            if (!row)
+                return null;
+            const payload = briefPayload(row, transitionedAt);
+            void sink.broadcastNamedEvent("browser_task", payload);
+            return payload;
+        },
+    };
+}

package/dist/services/calendar/outlook/graph-calendar-client.d.ts

@@ -111,4 +111,3 @@ export declare class OutlookGraphCalendarClient {
      */
     listEvents(range: ListEventsRange, options?: ListEventsOptions): Promise<OutlookCalendarEvent[]>;
 }
-//# sourceMappingURL=graph-calendar-client.d.ts.map

package/dist/services/calendar/outlook/graph-calendar-client.js

@@ -143,4 +143,3 @@ function toIsoUtc(dateContainer) {
     const parsed = new Date(raw.endsWith("Z") ? raw : `${raw}Z`);
     return Number.isNaN(parsed.getTime()) ? raw : parsed.toISOString();
 }
-//# sourceMappingURL=graph-calendar-client.js.map

package/dist/services/calendar.d.ts

@@ -112,4 +112,3 @@ export declare class CalendarService {
     listCalendars(): Promise<CalendarListEntry[]>;
     queryFreeBusy(timeMin: string, timeMax: string, calendarIds?: string[]): Promise<FreeBusyResult>;
 }
-//# sourceMappingURL=calendar.d.ts.map

package/dist/services/calendar.js

@@ -82,7 +82,6 @@ function buildEventTimeFields(params) {
         result.end = toGoogleTime(params.end);
     return result;
 }
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function parseCalendarEvent(item) {
     const startValue = item.start?.dateTime ?? item.start?.date ?? null;
     return {
@@ -95,11 +94,9 @@ function parseCalendarEvent(item) {
         allDay: !item.start?.dateTime && !!item.start?.date,
     };
 }
-// eslint-disable-next-line @typescript-eslint/no-explicit-any
 function parseCalendarEventDetail(item) {
     // Sanitize attendees to only include defined interface fields
     const attendees = Array.isArray(item.attendees)
-        // eslint-disable-next-line @typescript-eslint/no-explicit-any
         ? item.attendees.map((a) => ({
             email: a.email ?? "",
             ...(a.displayName != null && { displayName: a.displayName }),
@@ -116,7 +113,21 @@ function parseCalendarEventDetail(item) {
         attendees,
         recurrence: item.recurrence ?? null,
         recurringEventId: item.recurringEventId ?? null,
-        reminders: item.reminders ?? null,
+        // Google Calendar API contract: `useDefault: true` ↔ no overrides;
+        // `useDefault: false` ↔ overrides apply. The response normally sets the
+        // boolean explicitly, but if it's omitted we derive it from the
+        // overrides field so the two never disagree.
+        reminders: item.reminders
+            ? {
+                useDefault: item.reminders.useDefault ?? !item.reminders.overrides?.length,
+                ...(item.reminders.overrides && {
+                    overrides: item.reminders.overrides.map((o) => ({
+                        method: o.method ?? "popup",
+                        minutes: o.minutes ?? 0,
+                    })),
+                }),
+            }
+            : null,
         visibility: item.visibility ?? null,
         created: item.created ?? null,
         updated: item.updated ?? null,
@@ -124,16 +135,14 @@ function parseCalendarEventDetail(item) {
 }
 async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
     const credentials = parseGoogleCredentialsJson(credentialsRaw);
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let google;
     try {
-        const mod = await import("googleapis");
+        const mod = (await import("googleapis"));
         google = mod.google;
     }
     catch {
         throw new Error("googleapis package not installed. Run: pnpm --filter @aitne/daemon add googleapis");
     }
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
     let auth;
     if (credentials.type === "service_account") {
         auth = new google.auth.GoogleAuth({
@@ -151,9 +160,9 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
         if (!clientConfig) {
             throw new Error("Invalid Google Calendar credentials format");
         }
-        auth = new google.auth.OAuth2(clientConfig.client_id, clientConfig.client_secret, clientConfig.redirect_uris?.[0]);
-        auth.setCredentials(token);
-        auth.on("tokens", async (tokens) => {
+        const oauth2 = new google.auth.OAuth2(clientConfig.client_id, clientConfig.client_secret, clientConfig.redirect_uris?.[0]);
+        oauth2.setCredentials(token);
+        oauth2.on("tokens", async (tokens) => {
             try {
                 const existingRaw = await secretBroker.getGoogleTokenJson();
                 const merged = mergeGoogleTokenPayload(existingRaw, tokens);
@@ -163,6 +172,7 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
                 logger.error({ err: error }, "Failed to persist refreshed Google Calendar token");
             }
         });
+        auth = oauth2;
     }
     const calendar = google.calendar({ version: "v3", auth });
     return {
@@ -178,7 +188,6 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
             if (query)
                 params.q = query;
             const res = await calendar.events.list(params);
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             return (res.data.items ?? []).map((item) => parseCalendarEvent(item));
         },
         async getEvent(calendarId, eventId) {
@@ -244,7 +253,6 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
         },
         async listCalendars() {
             const res = await calendar.calendarList.list({ maxResults: 250 });
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
             return (res.data.items ?? []).map((item) => ({
                 id: item.id ?? "",
                 summary: item.summary ?? "",
@@ -265,10 +273,8 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
             const calendars = {};
             const rawCalendars = res.data.calendars ?? {};
             for (const [id, data] of Object.entries(rawCalendars)) {
-                // eslint-disable-next-line @typescript-eslint/no-explicit-any
-                const d = data;
                 calendars[id] = {
-                    busy: (d.busy ?? []).map((b) => ({
+                    busy: (data.busy ?? []).map((b) => ({
                         start: b.start ?? "",
                         end: b.end ?? "",
                     })),
@@ -278,4 +284,3 @@ async function createGoogleCalendarApi(credentialsRaw, secretBroker) {
         },
     };
 }
-//# sourceMappingURL=calendar.js.map

package/dist/services/delegated-backend-invoker.d.ts

@@ -361,4 +361,3 @@ export declare class DelegatedBackendInvoker {
     private incrementTaskCount;
 }
 export { runDelegatedTaskOrphanJanitor, runProxyTempdirJanitor, } from "./delegated-invoker-janitors.js";
-//# sourceMappingURL=delegated-backend-invoker.d.ts.map

package/dist/services/delegated-backend-invoker.js

@@ -1937,4 +1937,3 @@ const DELEGATED_TASK_COUNT_STATE_KEY = "delegated_task_count_today";
 // here so `index.ts` and tests that import from this module keep working
 // without an import-path churn — see file-split-plan.md §6.
 export { runDelegatedTaskOrphanJanitor, runProxyTempdirJanitor, } from "./delegated-invoker-janitors.js";
-//# sourceMappingURL=delegated-backend-invoker.js.map

package/dist/services/delegated-invoker-audit.d.ts

@@ -91,4 +91,3 @@ export declare function recordTaskToolStep(db: Database.Database, args: {
     integrationKey?: IntegrationKey;
     step: DelegatedTaskToolStepRaw;
 }): void;
-//# sourceMappingURL=delegated-invoker-audit.d.ts.map

package/dist/services/delegated-invoker-audit.js

@@ -13,9 +13,9 @@ import { hashTaskArgs } from "./delegated-task-runtime.js";
  * Row lifecycle reference — DELEGATED-TASK-MODE-DESIGN.md §11.1:
  *   - `recordAction` — terminal row for `DelegatedBackendInvoker.invoke()`
  *     (one shot). Today this is reached only via the
- *     `delegated-sync-worker` hourly drift-detection path — the
- *     `/api/integrations/:key/invoke` RPC route that previously also
- *     hit this writer was retired 2026-05-01.
+ *     `delegated-sync-worker` hourly drift-detection path; the legacy
+ *     `/api/integrations/:key/invoke` RPC route that also hit this
+ *     writer has been retired.
  *   - `recordCacheHitAuditRow` — terminal cache-hit row for task / run.
  *   - `recordTaskHeaderInProgress` → `completeTaskHeader` — header for
  *     /exec or /run; step rows FK back to its rowid.
@@ -239,4 +239,3 @@ export function recordTaskToolStep(db, args) {
         logger.warn({ err, parentTaskActionId: args.parentTaskActionId }, "failed to write delegated_task.tool_step row");
     }
 }
-//# sourceMappingURL=delegated-invoker-audit.js.map

package/dist/services/delegated-invoker-cache-hits.d.ts

@@ -31,4 +31,3 @@ export declare function buildCacheHitRunResult(db: Database.Database, args: {
     modelId: string;
     now: () => number;
 }): RunInvokeResult;
-//# sourceMappingURL=delegated-invoker-cache-hits.d.ts.map

package/dist/services/delegated-invoker-cache-hits.js

@@ -101,4 +101,3 @@ export function buildCacheHitRunResult(db, args) {
         retried: false,
     };
 }
-//# sourceMappingURL=delegated-invoker-cache-hits.js.map

package/dist/services/delegated-invoker-janitors.d.ts

@@ -25,4 +25,3 @@ export declare function runProxyTempdirJanitor(dataDir: string, options?: {
     now?: () => number;
     maxAgeMs?: number;
 }): number;
-//# sourceMappingURL=delegated-invoker-janitors.d.ts.map

package/dist/services/delegated-invoker-janitors.js

@@ -101,4 +101,3 @@ export function runProxyTempdirJanitor(dataDir, options = {}) {
     }
     return removed;
 }
-//# sourceMappingURL=delegated-invoker-janitors.js.map

package/dist/services/delegated-invoker-utils.d.ts

@@ -39,4 +39,3 @@ export declare class LegacyOneShotLease {
     release(): void;
     discard(): void;
 }
-//# sourceMappingURL=delegated-invoker-utils.d.ts.map

package/dist/services/delegated-invoker-utils.js

@@ -97,4 +97,3 @@ export class LegacyOneShotLease {
         this.cleanup();
     }
 }
-//# sourceMappingURL=delegated-invoker-utils.js.map

package/dist/services/delegated-proxy-config.d.ts

@@ -91,4 +91,3 @@ export declare const DELEGATED_PROXY_DEFAULTS: {
     readonly defaultMaxConcurrent: 4;
 };
 export type DelegatedProxyDefaults = typeof DELEGATED_PROXY_DEFAULTS;
-//# sourceMappingURL=delegated-proxy-config.d.ts.map

package/dist/services/delegated-proxy-config.js

@@ -95,4 +95,3 @@ export const DELEGATED_PROXY_DEFAULTS = {
     /** Default concurrent cap — overridden by `AgentConfig.delegatedProxyMaxConcurrent`. */
     defaultMaxConcurrent: 4,
 };
-//# sourceMappingURL=delegated-proxy-config.js.map

package/dist/services/delegated-task-result-cache.d.ts

@@ -173,4 +173,3 @@ export declare function execScope(integrationKey: IntegrationKey): string;
  * surface changed.
  */
 export declare function runScope(allowedTools: readonly string[]): string;
-//# sourceMappingURL=delegated-task-result-cache.d.ts.map

package/dist/services/delegated-task-runtime.d.ts

@@ -343,4 +343,3 @@ export declare function classifyStructuredOutput(parsed: unknown, validator: Val
     value: unknown;
     envelope: "confirmation" | "error" | "result";
 };
-//# sourceMappingURL=delegated-task-runtime.d.ts.map

package/dist/services/delegated-task-runtime.js

@@ -586,4 +586,3 @@ export function classifyStructuredOutput(parsed, validator) {
     }
     return { ok: true, value: parsed, envelope: "result" };
 }
-//# sourceMappingURL=delegated-task-runtime.js.map

package/dist/services/delegated-task-session-pool.d.ts

@@ -179,4 +179,3 @@ export declare function runSessionPoolTempdirJanitor(sessionsRoot: string, optio
     maxAgeMs?: number;
 }): number;
 export {};
-//# sourceMappingURL=delegated-task-session-pool.d.ts.map

package/dist/services/delegated-task-session-pool.js

@@ -289,4 +289,3 @@ export function runSessionPoolTempdirJanitor(sessionsRoot, options = {}) {
     }
     return removed;
 }
-//# sourceMappingURL=delegated-task-session-pool.js.map

package/dist/services/delegated-tool-runtime.d.ts

@@ -47,4 +47,3 @@ export declare function emptyCost(): DelegatedToolCost;
  * `agent_actions.duration_ms` matches the real spend.
  */
 export declare function withDurationMs(cost: DelegatedToolCost, startMs: number, now?: () => number): DelegatedToolCost;
-//# sourceMappingURL=delegated-tool-runtime.d.ts.map

package/dist/services/delegated-tool-runtime.js

@@ -117,4 +117,3 @@ export function emptyCost() {
 export function withDurationMs(cost, startMs, now = Date.now) {
     return { ...cost, durationMs: Math.max(0, now() - startMs) };
 }
-//# sourceMappingURL=delegated-tool-runtime.js.map

package/dist/services/fts5.d.ts

@@ -37,4 +37,3 @@ export declare function buildMatchExpression(query: string): string | null;
  * `buildMatchExpression`'s null return).
  */
 export declare function isAsciiOnlyQuery(q: string): boolean;
-//# sourceMappingURL=fts5.d.ts.map

package/dist/services/fts5.js

@@ -51,4 +51,3 @@ export function isAsciiOnlyQuery(q) {
     }
     return true;
 }
-//# sourceMappingURL=fts5.js.map

package/dist/services/git-account-registry.d.ts

@@ -161,4 +161,3 @@ export declare const __ASKPASS_WINDOWS_BODY_FOR_TEST = "@echo off\r\nif defined
 export declare const __ASKPASS_WINDOWS_RELATIVE_PATH_FOR_TEST = "runtime/git-askpass.cmd";
 /** Existence check for tests that materialize a registry and then assert the file. */
 export declare function askpassFileExists(path: string): boolean;
-//# sourceMappingURL=git-account-registry.d.ts.map

package/dist/services/git-account-registry.js

@@ -294,4 +294,3 @@ export const __ASKPASS_WINDOWS_RELATIVE_PATH_FOR_TEST = ASKPASS_WINDOWS_RELATIVE
 export function askpassFileExists(path) {
     return existsSync(path);
 }
-//# sourceMappingURL=git-account-registry.js.map

package/dist/services/github.d.ts

@@ -1,49 +1,18 @@
-export interface GitHubPullRequest {
-    number: number;
-    title: string;
-    state: string;
-    url: string;
-    author: string;
-    createdAt: string;
-    updatedAt: string;
-    draft: boolean;
-}
-export interface GitHubRepository {
-    owner: string;
-    repo: string;
-    fullName: string;
-    url: string;
-}
 /**
- * GitHubService — wraps @octokit/rest for GitHub API access.
- *
- * Used by:
- * - API route GET /api/github/repos (list monitored repos)
- * - API route GET /api/github/pulls (list PRs)
- * - API route POST /api/github/pulls/comment (comment on PRs)
- * - Webhook handler POST /webhook/github (validate & process webhooks)
+ * GitHubService — thin "configured?" probe that lives in the service
+ * registry. All actual GitHub API calls happen via per-caller @octokit/rest
+ * instances:
+ *   • `api/routes/github.ts` spins up its own Octokit for the proxy routes
+ *     and verifies webhook signatures inline with `verifySignature`.
+ *   • `observers/github-poller.ts` spins up its own per-account Octokit for
+ *     polling.
+ * This class only exposes the configured-state booleans the dashboard /
+ * health surfaces consult — it doesn't wrap any API methods.
  */
 export declare class GitHubService {
     private readonly token;
     private readonly webhookSecret;
-    private octokit;
     constructor(token: string | null, webhookSecret: string | null);
     get available(): boolean;
     get webhookConfigured(): boolean;
-    init(): Promise<void>;
-    /** List pull requests for a repository */
-    listPullRequests(owner: string, repo: string, state?: "open" | "closed" | "all"): Promise<GitHubPullRequest[]>;
-    /** Comment on a pull request */
-    commentOnPull(owner: string, repo: string, pullNumber: number, body: string): Promise<{
-        commentId: number;
-    } | null>;
-    /** Get repository info */
-    getRepo(owner: string, repo: string): Promise<GitHubRepository | null>;
-    /**
-     * Verify a GitHub webhook signature (X-Hub-Signature-256).
-     *
-     * Used by the webhook handler to ensure the payload is from GitHub.
-     */
-    verifyWebhookSignature(payload: string, signature: string): Promise<boolean>;
 }
-//# sourceMappingURL=github.d.ts.map

package/dist/services/github.js

@@ -1,19 +1,17 @@
-import { createLogger } from "../logging.js";
-const logger = createLogger("github-service");
 /**
- * GitHubService — wraps @octokit/rest for GitHub API access.
- *
- * Used by:
- * - API route GET /api/github/repos (list monitored repos)
- * - API route GET /api/github/pulls (list PRs)
- * - API route POST /api/github/pulls/comment (comment on PRs)
- * - Webhook handler POST /webhook/github (validate & process webhooks)
+ * GitHubService — thin "configured?" probe that lives in the service
+ * registry. All actual GitHub API calls happen via per-caller @octokit/rest
+ * instances:
+ *   • `api/routes/github.ts` spins up its own Octokit for the proxy routes
+ *     and verifies webhook signatures inline with `verifySignature`.
+ *   • `observers/github-poller.ts` spins up its own per-account Octokit for
+ *     polling.
+ * This class only exposes the configured-state booleans the dashboard /
+ * health surfaces consult — it doesn't wrap any API methods.
  */
 export class GitHubService {
     token;
     webhookSecret;
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    octokit = null;
     constructor(token, webhookSecret) {
         this.token = token;
         this.webhookSecret = webhookSecret;
@@ -24,100 +22,4 @@ export class GitHubService {
     get webhookConfigured() {
         return !!this.webhookSecret;
     }
-    async init() {
-        if (!this.available) {
-            logger.warn("GitHub token not configured");
-            return;
-        }
-        try {
-            const mod = await import("@octokit/rest");
-            this.octokit = new mod.Octokit({ auth: this.token });
-            logger.info("GitHub service initialized");
-        }
-        catch {
-            throw new Error("@octokit/rest not installed. Run: pnpm --filter @aitne/daemon add @octokit/rest");
-        }
-    }
-    /** List pull requests for a repository */
-    async listPullRequests(owner, repo, state = "open") {
-        if (!this.octokit)
-            return [];
-        try {
-            const { data } = await this.octokit.pulls.list({
-                owner,
-                repo,
-                state,
-                per_page: 20,
-            });
-            // eslint-disable-next-line @typescript-eslint/no-explicit-any
-            return data.map((pr) => ({
-                number: pr.number,
-                title: pr.title,
-                state: pr.state,
-                url: pr.html_url,
-                author: pr.user?.login ?? "",
-                createdAt: pr.created_at,
-                updatedAt: pr.updated_at,
-                draft: pr.draft ?? false,
-            }));
-        }
-        catch (err) {
-            logger.error({ err, owner, repo }, "Failed to list pull requests");
-            return [];
-        }
-    }
-    /** Comment on a pull request */
-    async commentOnPull(owner, repo, pullNumber, body) {
-        if (!this.octokit)
-            return null;
-        try {
-            const { data } = await this.octokit.issues.createComment({
-                owner,
-                repo,
-                issue_number: pullNumber,
-                body,
-            });
-            return { commentId: data.id };
-        }
-        catch (err) {
-            logger.error({ err, owner, repo, pullNumber }, "Failed to comment on pull request");
-            return null;
-        }
-    }
-    /** Get repository info */
-    async getRepo(owner, repo) {
-        if (!this.octokit)
-            return null;
-        try {
-            const { data } = await this.octokit.repos.get({ owner, repo });
-            return {
-                owner: data.owner.login,
-                repo: data.name,
-                fullName: data.full_name,
-                url: data.html_url,
-            };
-        }
-        catch (err) {
-            logger.error({ err, owner, repo }, "Failed to get repository");
-            return null;
-        }
-    }
-    /**
-     * Verify a GitHub webhook signature (X-Hub-Signature-256).
-     *
-     * Used by the webhook handler to ensure the payload is from GitHub.
-     */
-    async verifyWebhookSignature(payload, signature) {
-        if (!this.webhookSecret)
-            return false;
-        const { createHmac } = await import("node:crypto");
-        const expected = "sha256=" +
-            createHmac("sha256", this.webhookSecret).update(payload).digest("hex");
-        // Constant-time comparison
-        if (expected.length !== signature.length)
-            return false;
-        const { timingSafeEqual } = await import("node:crypto");
-        return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
-    }
 }
-//# sourceMappingURL=github.js.map

package/dist/services/gmail-classifier.d.ts

@@ -59,4 +59,3 @@ export declare function extractAmountWithCurrency(text: string): {
     amount: number;
     currency: string;
 } | null;
-//# sourceMappingURL=gmail-classifier.d.ts.map

package/dist/services/gmail-classifier.js

@@ -218,4 +218,3 @@ function extractConfirmationNumber(text) {
     const match = text.match(/(?:confirmation\s*(?:number|code|#|no\.?)|booking\s*(?:number|reference|ref(?:\.|erence)?|#|no\.?)|reservation\s*(?:number|code|#|no\.?)|PNR)[\s:]+([A-Z0-9][\w-]{3,19})/i);
     return match ? match[1].replace(/[-\s]/g, "") : null;
 }
-//# sourceMappingURL=gmail-classifier.js.map

package/dist/services/gmail.d.ts

@@ -189,4 +189,3 @@ export declare class GmailService {
     private extractBody;
     private extractHtmlBody;
 }
-//# sourceMappingURL=gmail.d.ts.map