@braidhq/server 0.1.0 → 0.2.0

package/dist/infrastructure/agent/mcpConfig.d.ts

@@ -1,38 +0,0 @@
-import type { Workspace } from '@braidhq/core';
-import type { McpServerConfig } from '@braidhq/schema';
-export interface McpConfigFile {
-    readonly mcpServers: Readonly<Record<string, McpServerEntry>>;
-}
-/**
- * Shape claude expects in `--mcp-config <file>`.
- *
- * The Streamable HTTP transport is `type: 'http'` (the claude CLI's
- * legacy name; predates the rename in the MCP 2025-06-18 spec). We
- * use the new name in PRODUCT.md to match the spec and emit the
- * legacy name here so claude understands.
- */
-interface McpStreamableHttpEntry {
-    readonly type: 'http';
-    readonly url: string;
-    readonly headers?: Record<string, string>;
-}
-interface McpStdioEntry {
-    readonly type: 'stdio';
-    readonly command: string;
-    readonly args?: readonly string[];
-    readonly env?: Record<string, string>;
-}
-type McpServerEntry = McpStreamableHttpEntry | McpStdioEntry;
-export interface BuildMcpConfigOptions {
-    /**
-     * Extra MCP server entries injected on top of the workspace's own
-     * `mcpServers`. Used to wire the built-in `braid-core` gateway —
-     * see `SubprocessSkillRunner`. Workspace entries with the same id
-     * take precedence (so a workspace can override a built-in).
-     */
-    extraServers?: readonly McpServerConfig[];
-}
-export declare function buildMcpConfig(workspace: Workspace, options?: BuildMcpConfigOptions): McpConfigFile;
-export declare function writeMcpConfigFile(workspace: Workspace, targetDir: string, options?: BuildMcpConfigOptions): Promise<string>;
-export {};
-//# sourceMappingURL=mcpConfig.d.ts.map

package/dist/infrastructure/agent/mcpConfig.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcpConfig.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/agent/mcpConfig.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAKtD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;CAC9D;AAED;;;;;;;GAOG;AACH,UAAU,sBAAsB;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC1C;AAED,UAAU,aAAa;IACrB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACtC;AAED,KAAK,cAAc,GAAG,sBAAsB,GAAG,aAAa,CAAA;AAE5D,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;CAC1C;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,GAAE,qBAA0B,GAAG,aAAa,CASvG;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/infrastructure/agent/mcpConfig.js

@@ -1,55 +0,0 @@
-import { mkdir, writeFile } from 'node:fs/promises';
-import { dirname, join } from 'node:path';
-import process from 'node:process';
-export function buildMcpConfig(workspace, options = {}) {
-    const entries = {};
-    for (const server of options.extraServers ?? []) {
-        entries[server.id] = toEntry(server);
-    }
-    for (const server of workspace.mcpServers) {
-        entries[server.id] = toEntry(server);
-    }
-    return { mcpServers: entries };
-}
-export async function writeMcpConfigFile(workspace, targetDir, options = {}) {
-    const config = buildMcpConfig(workspace, options);
-    const targetPath = join(targetDir, `.braid-mcp-${workspace.id}.json`);
-    await mkdir(dirname(targetPath), { recursive: true });
-    await writeFile(targetPath, `${JSON.stringify(config, null, 2)}\n`, 'utf-8');
-    return targetPath;
-}
-function toEntry(server) {
-    if (server.transport === 'stdio') {
-        return {
-            type: 'stdio',
-            command: server.command,
-            ...(server.args ? { args: [...server.args] } : {}),
-            ...(server.env ? { env: resolveEnv(server.env) } : {}),
-        };
-    }
-    return {
-        type: 'http',
-        url: server.url,
-        ...(server.headers ? { headers: resolveEnv(server.headers) } : {}),
-    };
-}
-/**
- * Replace `${VAR}` references in header / env values with the matching
- * parent-process env var. Throws if a referenced var is missing so the
- * user gets a clear error at config-write time rather than a confusing
- * 401 from the MCP server or a silently-misconfigured subprocess.
- */
-function resolveEnv(values) {
-    const out = {};
-    for (const [name, value] of Object.entries(values)) {
-        out[name] = value.replace(/\$\{([A-Z_][A-Z0-9_]*)\}/g, (_match, varName) => {
-            const resolved = process.env[varName];
-            if (resolved === undefined) {
-                throw new Error(`MCP entry "${name}": environment variable "${varName}" is not set`);
-            }
-            return resolved;
-        });
-    }
-    return out;
-}
-//# sourceMappingURL=mcpConfig.js.map

package/dist/infrastructure/agent/mcpConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcpConfig.js","sourceRoot":"","sources":["../../../src/infrastructure/agent/mcpConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,OAAO,MAAM,cAAc,CAAA;AAuClC,MAAM,UAAU,cAAc,CAAC,SAAoB,EAAE,UAAiC,EAAE;IACtF,MAAM,OAAO,GAAmC,EAAE,CAAA;IAClD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAoB,EACpB,SAAiB,EACjB,UAAiC,EAAE;IAEnC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACjD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,SAAS,CAAC,EAAE,OAAO,CAAC,CAAA;IACrE,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACrD,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC5E,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB;IACtC,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAA;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,MAA8B;IAChD,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC,MAAM,EAAE,OAAe,EAAE,EAAE;YACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,4BAA4B,OAAO,cAAc,CAAC,CAAA;YACtF,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/infrastructure/agent/streamJsonParser.d.ts

@@ -1,20 +0,0 @@
-export type LineHandler = (line: string) => void;
-/**
- * Splits a chunked text stream into newline-delimited lines, invoking the
- * handler exactly once per complete line. Partial lines are buffered until
- * the next chunk completes them. Call `flush()` after the source closes to
- * release any trailing line without a terminator.
- */
-export declare class LineBuffer {
-    private readonly onLine;
-    private buffer;
-    constructor(onLine: LineHandler);
-    append(chunk: string): void;
-    flush(): void;
-}
-export interface StreamJsonEvent {
-    readonly type: string;
-    readonly [key: string]: unknown;
-}
-export declare function parseJsonLine(line: string): StreamJsonEvent | undefined;
-//# sourceMappingURL=streamJsonParser.d.ts.map

package/dist/infrastructure/agent/streamJsonParser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"streamJsonParser.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/agent/streamJsonParser.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;AAEhD;;;;;GAKG;AACH,qBAAa,UAAU;IAGT,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,MAAM,CAAK;gBAEU,MAAM,EAAE,WAAW;IAEhD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAY3B,KAAK,IAAI,IAAI;CAOd;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAChC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAWvE"}

package/dist/infrastructure/agent/streamJsonParser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"streamJsonParser.js","sourceRoot":"","sources":["../../../src/infrastructure/agent/streamJsonParser.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IAGQ;IAFrB,MAAM,GAAG,EAAE,CAAA;IAEnB,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAEpD,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,MAAM,IAAI,KAAK,CAAA;QACpB,IAAI,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5C,OAAO,YAAY,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAA;YACjD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACnB,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,OAAM;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACxB,CAAC;CACF;AAOD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,SAAS,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAA;QACrD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,MAAM,CAAC;QACL,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/infrastructure/agent/subprocessEventStream.d.ts

@@ -1,26 +0,0 @@
-import type { SkillEvent } from '@braidhq/schema';
-import type { ChildProcess } from 'node:child_process';
-interface RawEvent {
-    readonly type: string;
-    readonly [key: string]: unknown;
-}
-/**
- * Wires a child's stdout / stderr to a single SkillEvent callback.
- * Returns `flush` so callers can drain the final un-terminated line on
- * `close`.
- */
-export declare function attachOutputBuffers(child: ChildProcess, onEvent: (event: SkillEvent) => void, now: () => string): {
-    flush: () => void;
-};
-/**
- * Maps a single `claude --output-format stream-json` line into zero or more
- * `SkillEvent`s. Claude emits these envelope shapes today: `system` (init
- * meta, ignored except for `session_id`), `assistant` (text / tool_use
- * content parts), `user` (echoed tool_result, only `is_error` surfaced),
- * `rate_limit_*` (ignored), `result` (final outcome). Legacy flat shapes
- * (`text`, `tool_use`, `artifact-written`, `error`) are kept for tests and
- * older tools.
- */
-export declare function mapSubprocessEvents(raw: RawEvent, now: string): SkillEvent[];
-export {};
-//# sourceMappingURL=subprocessEventStream.d.ts.map

package/dist/infrastructure/agent/subprocessEventStream.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"subprocessEventStream.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/agent/subprocessEventStream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAItD,UAAU,QAAQ;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE;AAG7E;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,EACpC,GAAG,EAAE,MAAM,MAAM,GAChB;IAAE,KAAK,EAAE,MAAM,IAAI,CAAA;CAAE,CAyBvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,EAAE,CAyE5E"}

package/dist/infrastructure/agent/subprocessEventStream.js

@@ -1,112 +0,0 @@
-import { SkillEvent as SkillEventSchema } from '@braidhq/schema';
-import { LineBuffer, parseJsonLine } from './streamJsonParser.js';
-/**
- * Wires a child's stdout / stderr to a single SkillEvent callback.
- * Returns `flush` so callers can drain the final un-terminated line on
- * `close`.
- */
-export function attachOutputBuffers(child, onEvent, now) {
-    const stdout = new LineBuffer((line) => {
-        const parsed = parseJsonLine(line);
-        if (parsed === undefined)
-            return;
-        for (const event of mapSubprocessEvents(parsed, now()))
-            onEvent(event);
-    });
-    // stderr is wrapped verbatim into a `[stderr]` message event so it
-    // shows up in the transcript alongside model output.
-    const stderr = new LineBuffer((line) => {
-        onEvent(SkillEventSchema.parse({ type: 'message', text: `[stderr] ${line}` }));
-    });
-    child.stdout?.setEncoding('utf-8');
-    child.stdout?.on('data', (chunk) => stdout.append(chunk));
-    child.stderr?.setEncoding('utf-8');
-    child.stderr?.on('data', (chunk) => stderr.append(chunk));
-    return {
-        flush: () => {
-            stdout.flush();
-            stderr.flush();
-        },
-    };
-}
-/**
- * Maps a single `claude --output-format stream-json` line into zero or more
- * `SkillEvent`s. Claude emits these envelope shapes today: `system` (init
- * meta, ignored except for `session_id`), `assistant` (text / tool_use
- * content parts), `user` (echoed tool_result, only `is_error` surfaced),
- * `rate_limit_*` (ignored), `result` (final outcome). Legacy flat shapes
- * (`text`, `tool_use`, `artifact-written`, `error`) are kept for tests and
- * older tools.
- */
-export function mapSubprocessEvents(raw, now) {
-    const out = [];
-    if (raw.type === 'system' && raw.subtype === 'init' && typeof raw.session_id === 'string') {
-        out.push(SkillEventSchema.parse({ type: 'session-started', sessionId: raw.session_id }));
-        return out;
-    }
-    if (raw.type === 'assistant') {
-        for (const part of readContent(raw)) {
-            if (part?.type === 'text' && typeof part.text === 'string' && part.text.length > 0) {
-                out.push(SkillEventSchema.parse({ type: 'message', text: part.text }));
-            }
-            else if (part?.type === 'tool_use' && typeof part.name === 'string') {
-                const event = {
-                    type: 'tool-call',
-                    tool: part.name,
-                    args: part.input ?? null,
-                };
-                if (typeof part.id === 'string' && part.id.length > 0)
-                    event.toolCallId = part.id;
-                out.push(SkillEventSchema.parse(event));
-            }
-        }
-        return out;
-    }
-    if (raw.type === 'user') {
-        for (const part of readContent(raw)) {
-            if (part?.type === 'tool_result' && typeof part.tool_use_id === 'string') {
-                const output = typeof part.content === 'string'
-                    ? part.content
-                    : JSON.stringify(part.content ?? '');
-                out.push(SkillEventSchema.parse({
-                    type: 'tool-result',
-                    toolCallId: part.tool_use_id,
-                    output,
-                    isError: part.is_error === true,
-                }));
-            }
-        }
-        return out;
-    }
-    if (raw.type === 'result') {
-        const isError = raw.is_error === true;
-        const text = typeof raw.result === 'string' ? raw.result : '';
-        if (isError)
-            out.push(SkillEventSchema.parse({ type: 'error', message: text || 'skill run failed', at: now }));
-        else if (text.length > 0)
-            out.push(SkillEventSchema.parse({ type: 'message', text }));
-        return out;
-    }
-    if (raw.type === 'text' && typeof raw.text === 'string')
-        return [SkillEventSchema.parse({ type: 'message', text: raw.text })];
-    if (raw.type === 'tool_use' && typeof raw.name === 'string')
-        return [SkillEventSchema.parse({ type: 'tool-call', tool: raw.name, args: raw.input ?? null })];
-    if (raw.type === 'artifact-written' && typeof raw.artifactKind === 'string') {
-        return [SkillEventSchema.parse({
-                type: 'artifact-written',
-                artifactKind: raw.artifactKind,
-                artifactId: raw.artifactId,
-                path: raw.path,
-            })];
-    }
-    if (raw.type === 'error' && typeof raw.message === 'string')
-        return [SkillEventSchema.parse({ type: 'error', message: raw.message, at: now })];
-    return out;
-}
-function readContent(raw) {
-    const message = raw.message;
-    if (!message || !Array.isArray(message.content))
-        return [];
-    return message.content;
-}
-//# sourceMappingURL=subprocessEventStream.js.map

package/dist/infrastructure/agent/subprocessEventStream.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"subprocessEventStream.js","sourceRoot":"","sources":["../../../src/infrastructure/agent/subprocessEventStream.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAKjE;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAmB,EACnB,OAAoC,EACpC,GAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;QAClC,IAAI,MAAM,KAAK,SAAS;YACtB,OAAM;QACR,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;IACF,mEAAmE;IACnE,qDAAqD;IACrD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE;QACrC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjE,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;IAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IAEjE,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,CAAC,KAAK,EAAE,CAAA;YACd,MAAM,CAAC,KAAK,EAAE,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAa,EAAE,GAAW;IAC5D,MAAM,GAAG,GAAiB,EAAE,CAAA;IAE5B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC1F,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;QACxF,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACxE,CAAC;iBACI,IAAI,IAAI,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACpE,MAAM,KAAK,GAA4B;oBACrC,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI;iBACzB,CAAA;gBACD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;oBACnD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,EAAE,CAAA;gBAC5B,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,IAAI,IAAI,EAAE,IAAI,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;oBAC7C,CAAC,CAAC,IAAI,CAAC,OAAO;oBACd,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;gBACtC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;oBAC9B,IAAI,EAAE,aAAa;oBACnB,UAAU,EAAE,IAAI,CAAC,WAAW;oBAC5B,MAAM;oBACN,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;iBAChC,CAAC,CAAC,CAAA;YACL,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAA;QACrC,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,IAAI,OAAO;YACT,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,kBAAkB,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;aAC9F,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QAC7D,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QACrD,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAEtE,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QACzD,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;IAEjG,IAAI,GAAG,CAAC,IAAI,KAAK,kBAAkB,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC7B,IAAI,EAAE,kBAAkB;gBACxB,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,IAAI,EAAE,GAAG,CAAC,IAAI;aACf,CAAC,CAAC,CAAA;IACL,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QACzD,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAEnF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,GAAa;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAA4C,CAAA;IAChE,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC7C,OAAO,EAAE,CAAA;IACX,OAAO,OAAO,CAAC,OAA2B,CAAA;AAC5C,CAAC"}

package/dist/infrastructure/auth/ensureApprovedEmails.d.ts

@@ -1,16 +0,0 @@
-import type { UserRegistryFile } from '../users/UserRegistryFile.js';
-import type { AccessPolicy } from './AccessPolicy.js';
-/**
- * Back-fills `approvedEmails` from existing users.json entries.
- *
- * Without this, accounts created before the approvedEmails feature
- * existed (or while the invite-was-consumed bug was live) would be
- * stuck behind Gate-1 even though they hold a valid user record. Every
- * email we see in the registry must be persistently approved going
- * forward; this is the one-shot reconciliation.
- *
- * Idempotent: AccessPolicy.approveEmail no-ops when the email is
- * already there, so re-running on every boot is cheap.
- */
-export declare function ensureApprovedEmails(userRegistry: UserRegistryFile, accessPolicy: AccessPolicy): Promise<void>;
-//# sourceMappingURL=ensureApprovedEmails.d.ts.map

package/dist/infrastructure/auth/ensureApprovedEmails.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ensureApprovedEmails.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/auth/ensureApprovedEmails.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,gBAAgB,EAC9B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/infrastructure/auth/ensureApprovedEmails.js

@@ -1,20 +0,0 @@
-/**
- * Back-fills `approvedEmails` from existing users.json entries.
- *
- * Without this, accounts created before the approvedEmails feature
- * existed (or while the invite-was-consumed bug was live) would be
- * stuck behind Gate-1 even though they hold a valid user record. Every
- * email we see in the registry must be persistently approved going
- * forward; this is the one-shot reconciliation.
- *
- * Idempotent: AccessPolicy.approveEmail no-ops when the email is
- * already there, so re-running on every boot is cheap.
- */
-export async function ensureApprovedEmails(userRegistry, accessPolicy) {
-    const users = await userRegistry.list();
-    for (const user of users) {
-        if (user.email)
-            await accessPolicy.approveEmail(user.email);
-    }
-}
-//# sourceMappingURL=ensureApprovedEmails.js.map

package/dist/infrastructure/auth/ensureApprovedEmails.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ensureApprovedEmails.js","sourceRoot":"","sources":["../../../src/infrastructure/auth/ensureApprovedEmails.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAA8B,EAC9B,YAA0B;IAE1B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAA;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK;YACZ,MAAM,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC"}

package/dist/infrastructure/env.d.ts

@@ -1,11 +0,0 @@
-/**
- * Parse a boolean env var. Canonical form is `true` / `false`; we also
- * accept the common YAML / shell idioms (`yes` / `no`, `on` / `off`,
- * `1` / `0`) so existing `.env` files don't break on the rename.
- *
- * Returns `defaultValue` when the variable is unset or the literal is
- * unrecognised (silent fall-through — we don't want a typo in env to
- * crash the server boot).
- */
-export declare function parseBoolEnv(value: string | undefined, defaultValue: boolean): boolean;
-//# sourceMappingURL=env.d.ts.map

package/dist/infrastructure/env.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAStF"}

package/dist/infrastructure/env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB,EAAE,YAAqB;IAC3E,IAAI,KAAK,KAAK,SAAS;QACrB,OAAO,YAAY,CAAA;IACrB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACxC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;QACxE,OAAO,IAAI,CAAA;IACb,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK;QACzE,OAAO,KAAK,CAAA;IACd,OAAO,YAAY,CAAA;AACrB,CAAC"}