@brainmcp/brainmcp 0.1.18 → 0.1.19

package/dist/lib/oauth-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../src/lib/oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,UAAU,gBAAgB,CAAC,SAAmB,EAAE,UAAmB;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,2BAA2B,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,KAAK,GAAG,KAA6B,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QAC9E,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;QACnF,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/G,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAC9D,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9I,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA0BD,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,MAAM,OAAO,WAAW;IACN,MAAM,CAAS;IACf,QAAQ,CAAS;IACzB,OAAO,CAAe;IACtB,SAAS,CAAS;IAE1B,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAoB;QAC1C,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,yCAAyC,CAAC;QAC7E,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;gBACvC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,SAAS,GAAG;wBAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;wBAClC,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,IAAI,GAAG,IAAI,CAAC,MAAM,4BAA4B;wBAChG,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG,IAAI,CAAC,MAAM,wBAAwB;wBAC5E,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,IAAI,GAAG,IAAI,CAAC,MAAM,yBAAyB;qBACxF,CAAC;oBACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;wBAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxF,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC1F,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,qBAAqB,EAAE,GAAG,IAAI,CAAC,MAAM,4BAA4B;gBACjE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,wBAAwB;gBACrD,kBAAkB,EAAE,GAAG,IAAI,CAAC,MAAM,yBAAyB;aAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CAAC,KAKrB;QACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,2BAA2B,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAM3B;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE;gBAClD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAIxB;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE;gBAClD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAIjB;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE;gBACvD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../src/lib/oauth-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEjE,MAAM,UAAU,gBAAgB,CAAC,SAAmB,EAAE,UAAmB;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,2BAA2B,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,KAAK,GAAG,KAA6B,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QAC9E,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,QAAQ;QACnF,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/G,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC;QAC9D,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9I,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEpG,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,MAAM,CAAS;IACf,UAAU,CAAS;IAE5B,YAAY,MAAc,EAAE,UAAkB;QAC5C,KAAK,CAAC,kCAAkC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;CACF;AAED,+EAA+E;AAC/E,KAAK,UAAU,kBAAkB,CAAC,GAAa;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA+B,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC;QACzB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AA0BD,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,MAAM,OAAO,WAAW;IACN,MAAM,CAAS;IACf,QAAQ,CAAS;IACzB,OAAO,CAAe;IACtB,SAAS,CAAS;IAE1B,YAAY,UAA8B,EAAE;QAC1C,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;QAC7C,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAoB;QAC1C,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,MAAM,yCAAyC,CAAC;QAC7E,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;YACzE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3F,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAC;gBACvC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,MAAM,SAAS,GAAG;wBAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM;wBAClC,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,IAAI,GAAG,IAAI,CAAC,MAAM,4BAA4B;wBAChG,aAAa,EAAE,IAAI,CAAC,cAAc,IAAI,GAAG,IAAI,CAAC,MAAM,wBAAwB;wBAC5E,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,IAAI,GAAG,IAAI,CAAC,MAAM,yBAAyB;qBACxF,CAAC;oBACF,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;wBAAE,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxF,OAAO,SAAS,CAAC;gBACnB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC1F,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,qBAAqB,EAAE,GAAG,IAAI,CAAC,MAAM,4BAA4B;gBACjE,aAAa,EAAE,GAAG,IAAI,CAAC,MAAM,wBAAwB;gBACrD,kBAAkB,EAAE,GAAG,IAAI,CAAC,MAAM,yBAAyB;aAC1D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB,CAAC,KAKrB;QACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,2BAA2B,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACrD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,KAM3B;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE;gBAClD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAIxB;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,QAAQ,EAAE,kBAAkB;SAC7B,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE;gBAClD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC7C,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;oBAC3C,IAAI,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,uBAAuB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACrG,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAClE,CAAC;YAED,OAAO,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAIjB;QACC,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;QAEH,eAAe,CAAC,KAAK,CAAC,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE;gBACvD,MAAM;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/runtime/brainmcp-hook-runtime.mjs

@@ -598,6 +598,12 @@ function removeQueueItem(digestId, baseDir) {
   return false;
 }
 
+// ../api-client/src/index.ts
+function apiPathSegment(value) {
+  const encoded = encodeURIComponent(value);
+  return /^\.+$/.test(encoded) ? encoded.replaceAll(".", "%2E") : encoded;
+}
+
 // src/runtime/diagnostics.ts
 import fs3 from "node:fs";
 import path3 from "node:path";
@@ -809,7 +815,7 @@ function canEnqueueCapture(baseDir) {
 }
 async function postDigest(apiClient, item, signal, beforeSend) {
   try {
-    await apiClient.request(`/api/workspaces/${item.workspaceId}/digests`, {
+    await apiClient.request(`/api/workspaces/${apiPathSegment(item.workspaceId)}/digests`, {
       method: "POST",
       body: {
         clientDigestId: item.digestId,
@@ -1921,6 +1927,9 @@ function isCaptureEligible(event, prefs, projectPolicy) {
 import fs9 from "node:fs";
 import path9 from "node:path";
 
+// src/lib/api-client.ts
+import { randomUUID as randomUUID3 } from "node:crypto";
+
 // src/lib/endpoints.ts
 var COMPANION_WORKSPACES_PATH = "/api/mcp/workspaces";
 var MCP_REST_HOSTS = /* @__PURE__ */ new Set(["mcp.brainmcp.ai", "dash.brainmcp.ai"]);
@@ -1946,220 +1955,6 @@ function describeMisdirectedCompanionApi(apiUrl) {
   return `Companion REST must use ${BRAIN_API_ORIGIN}, not ${apiUrl}. Unset BRAINMCP_API_URL or point it at the API origin.`;
 }
 
-// src/runtime/orient.ts
-var ORIENT_CACHE_TTL_MS = 10 * 60 * 1e3;
-var ORIENT_CONTEXT_MAX_CHARS = 2400;
-var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var SESSION_START_EVENTS = /* @__PURE__ */ new Set([
-  "SessionStart",
-  "sessionStart",
-  "session_start",
-  "startup"
-]);
-function isSessionStartEvent(event) {
-  return SESSION_START_EVENTS.has(event);
-}
-function isUserPromptEvent(event) {
-  return event === "UserPromptSubmit" || event === "UserPrompt" || event === "prompt" || event === "beforeSubmitPrompt";
-}
-function resolveOrientWorkspaceId(creds, listed) {
-  if (!creds || creds.authType !== "oauth" || !creds.accessToken) {
-    return { workspaceId: null, reason: "login" };
-  }
-  if (creds.defaultWorkspaceId && UUID_RE2.test(creds.defaultWorkspaceId)) {
-    return { workspaceId: creds.defaultWorkspaceId, reason: "ok" };
-  }
-  const fromCreds = (creds.workspaces ?? []).filter((id) => UUID_RE2.test(id));
-  if (fromCreds.length === 1) {
-    return { workspaceId: fromCreds[0], reason: "ok" };
-  }
-  if (listed) {
-    const defaults = listed.filter((ws) => ws.isDefault);
-    if (defaults.length === 1 && UUID_RE2.test(defaults[0].id)) {
-      return { workspaceId: defaults[0].id, reason: "ok" };
-    }
-    if (listed.length === 1 && UUID_RE2.test(listed[0].id)) {
-      return { workspaceId: listed[0].id, reason: "ok" };
-    }
-    if (listed.length !== 1) {
-      return { workspaceId: null, reason: "select" };
-    }
-  }
-  if (fromCreds.length !== 1) {
-    return { workspaceId: null, reason: fromCreds.length === 0 ? "select" : "select" };
-  }
-  return { workspaceId: null, reason: "select" };
-}
-var ORIENT_PACKET_HEADER = [
-  "BrainMCP orientation (no user prompt was sent).",
-  ANSWER_GROUNDING_BRIEF_GUIDANCE,
-  "This hook packet is bounded; call brain_workspace_overview for full Rules and current project context before dependent work. Clipped or omitted workspace details are incomplete."
-].join("\n");
-function isRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function clipContext(text, maxChars) {
-  if (text.length <= maxChars) return text;
-  return `${text.slice(0, maxChars - 1).replace(/[\uD800-\uDBFF]$/, "")}\u2026`;
-}
-function formatOrientDetails(payload, expectedWorkspaceId) {
-  const workspace = isRecord(payload) && isRecord(payload.workspace) ? payload.workspace : void 0;
-  if (!workspace || typeof workspace.id !== "string" || !workspace.id.trim() || typeof workspace.name !== "string" || !workspace.name.trim() || expectedWorkspaceId && workspace.id !== expectedWorkspaceId) {
-    return `${expectedWorkspaceId ? `Workspace ${expectedWorkspaceId}: ` : ""}BrainMCP orientation returned no usable context. Call brain_workspace_overview for this workspace before dependent work.`;
-  }
-  const data = payload;
-  const lines = [`Workspace ${clipContext(workspace.id, 80)}: ${clipContext(workspace.name.trim(), 120)}`];
-  const activeRef = isRecord(data.activeRef) ? data.activeRef : void 0;
-  if (activeRef?.type === "live") lines.push("Active ref: live.");
-  if (activeRef?.type === "branch" && typeof activeRef.branchId === "string") {
-    lines.push(`Active ref: branch ${clipContext(activeRef.branchId, 80)}.`);
-  }
-  const authorization = isRecord(data.authorization) ? data.authorization : void 0;
-  const scopes = Array.isArray(authorization?.scopes) && authorization.scopes.every((scope) => typeof scope === "string") ? authorization.scopes : void 0;
-  const canWrite = scopes?.some((scope) => scope === "*" || scope === "changes:write") === true;
-  if (!canWrite) {
-    lines.push(scopes ? "Companion authorization lacks changes:write. Host MCP permissions are independent; check its overview before proposing changes." : "Companion write access is unknown. Check host MCP permissions in overview before proposing changes.");
-  }
-  const review = isRecord(data.review) ? data.review : void 0;
-  if (canWrite && typeof review?.writePath === "string") {
-    lines.push(`Write path: ${clipContext(review.writePath, 80)}`);
-  }
-  if (review?.humanReviewRequired === true) {
-    lines.push("Human review is required before graph writes apply.");
-  }
-  for (const [field, label] of [["pendingProposalCount", "Pending proposals"], ["dueWorkflowCount", "Due workflows"]]) {
-    const count = data[field];
-    if (typeof count === "number" && Number.isSafeInteger(count) && count > 0) lines.push(`${label}: ${count}`);
-  }
-  const rules = isRecord(data.rules) ? data.rules : void 0;
-  const items = Array.isArray(rules?.items) ? rules.items : [];
-  const validRules = items.filter((rule) => isRecord(rule) && typeof rule.body === "string" && Boolean(rule.body.trim()));
-  const responseCap = isRecord(data.responseCap) ? data.responseCap : void 0;
-  if (!rules || !Array.isArray(rules.items) || validRules.length !== items.length || items.length > 3 || rules.truncated === true || Array.isArray(rules.omittedRules) && rules.omittedRules.length > 0 || responseCap?.applied === true) {
-    lines.push("Rules or other context are incomplete; recover omitted content through brain_workspace_overview and exact reads.");
-  }
-  for (const rule of validRules.slice(0, 3)) {
-    const body = rule.body.trim();
-    lines.push(body.length > 280 ? `Rule excerpt (incomplete): ${clipContext(body, 281)}` : `Rule: ${body}`);
-  }
-  if (canWrite) {
-    lines.push(typeof data.writeBackHint === "string" && data.writeBackHint.trim() ? data.writeBackHint.trim() : "During authorized project work, propose only new durable knowledge through available Brain tools. Honor read-only requests and workspace permissions.");
-  }
-  return lines.join("\n");
-}
-function loginOrientationMessage() {
-  return "BrainMCP CLI is not signed in. No remote request was made. Host MCP access is independent: use the host brain_* tools to orient if connected. Run `brainmcp login` to enable companion orientation.";
-}
-function selectWorkspaceOrientationMessage() {
-  return `Companion orientation has no resolved workspace. Continue through the host brain_* tools. ${WORKSPACE_INFERENCE_GUIDANCE}`;
-}
-function readProjectWorkspaceId(startDir) {
-  if (!startDir) return { kind: "none" };
-  let dir = path9.resolve(startDir);
-  for (let depth = 0; depth < 16; depth += 1) {
-    const configPath = path9.join(dir, ".brainmcp.json");
-    if (fs9.existsSync(configPath)) {
-      try {
-        const stat = fs9.lstatSync(configPath);
-        if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 64 * 1024) {
-          return { kind: "invalid", configPath };
-        }
-        const parsed = JSON.parse(fs9.readFileSync(configPath, "utf8"));
-        const workspaceId = typeof parsed.workspaceId === "string" ? parsed.workspaceId.trim() : "";
-        return UUID_RE2.test(workspaceId) ? { kind: "workspace", configPath, workspaceId } : { kind: "invalid", configPath };
-      } catch {
-        return { kind: "invalid", configPath };
-      }
-    }
-    const parent = path9.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return { kind: "none" };
-}
-function invalidProjectWorkspaceMessage() {
-  return "BrainMCP found an invalid nearest `.brainmcp.json` workspaceId and did not guess another workspace. Fix or remove that project policy file.";
-}
-async function fetchSessionStartOrientation(input) {
-  const initial = resolveOrientWorkspaceId(input.creds);
-  if (initial.reason === "login") {
-    return loginOrientationMessage();
-  }
-  const roots = (input.workspaceRoots?.length ? input.workspaceRoots : input.cwd ? [input.cwd] : []).filter((root, index, all) => Boolean(root) && all.indexOf(root) === index);
-  const projectResolutions = roots.map((root) => readProjectWorkspaceId(root));
-  if (projectResolutions.some((resolution) => resolution.kind === "invalid")) {
-    return invalidProjectWorkspaceMessage();
-  }
-  const projectWorkspaceIds = projectResolutions.filter((resolution) => resolution.kind === "workspace").map((resolution) => resolution.workspaceId);
-  const hasUnboundRoot = roots.length === 0 || projectResolutions.some((resolution) => resolution.kind === "none");
-  let fallbackWorkspaceId = initial.workspaceId;
-  if (hasUnboundRoot && !fallbackWorkspaceId) {
-    try {
-      const listed = await input.apiClient.request(
-        COMPANION_WORKSPACES_PATH,
-        { timeoutMs: 800, signal: input.signal }
-      );
-      const next = resolveOrientWorkspaceId(input.creds, listed.workspaces ?? []);
-      fallbackWorkspaceId = next.workspaceId;
-    } catch {
-      fallbackWorkspaceId = null;
-    }
-  }
-  const workspaceIds = [.../* @__PURE__ */ new Set([
-    ...projectWorkspaceIds,
-    ...hasUnboundRoot && fallbackWorkspaceId ? [fallbackWorkspaceId] : []
-  ])];
-  if (workspaceIds.length === 0) return selectWorkspaceOrientationMessage();
-  const results = await Promise.allSettled(
-    workspaceIds.map(async (workspaceId) => {
-      const payload = await input.apiClient.request(
-        `/api/workspaces/${workspaceId}/orient`,
-        { timeoutMs: 800, signal: input.signal }
-      );
-      return formatOrientDetails(payload, workspaceId);
-    })
-  );
-  const failedCount = results.filter((result) => result.status === "rejected").length;
-  if (failedCount === results.length) {
-    throw new Error("No project workspace orientation request succeeded.");
-  }
-  const header = [ORIENT_PACKET_HEADER];
-  if (failedCount > 0) header.push(`${failedCount} workspace request(s) failed; their Brain context was not loaded. Retry those workspaces through host MCP; do not substitute another workspace.`);
-  if (hasUnboundRoot && !fallbackWorkspaceId) header.push(selectWorkspaceOrientationMessage());
-  const visibleResults = results.slice(0, 8);
-  if (results.length > visibleResults.length) {
-    header.push(`${results.length - visibleResults.length} additional workspace results omitted. Orient those projects separately through host MCP.`);
-  }
-  const prefix = header.join("\n");
-  const separator = "\n\n---\n\n";
-  const perWorkspaceBudget = Math.floor((ORIENT_CONTEXT_MAX_CHARS - prefix.length - 1 - separator.length * (visibleResults.length - 1)) / visibleResults.length);
-  const contexts = visibleResults.map((result, index) => clipContext(
-    result.status === "fulfilled" ? result.value : `Workspace ${workspaceIds[index]}: orientation unavailable. Call brain_workspace_overview with this workspaceId before dependent work.`,
-    perWorkspaceBudget
-  ));
-  return `${prefix}
-${contexts.join(separator)}`;
-}
-async function safeSessionStartOrientation(input) {
-  if (!input.apiClient) {
-    return input.creds?.authType === "oauth" ? selectWorkspaceOrientationMessage() : loginOrientationMessage();
-  }
-  try {
-    return await fetchSessionStartOrientation(input);
-  } catch (error) {
-    logRuntimeEvent(
-      "warn",
-      "orient_fetch_failed",
-      { error: error instanceof Error ? error.message : String(error) },
-      input.baseDir
-    );
-    return "BrainMCP orientation is temporarily unavailable. Continue locally and retry brain_workspace_overview when possible.";
-  }
-}
-
-// src/lib/api-client.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
-
 // src/lib/oauth-client.ts
 function grantedCliScopes(requested, tokenScope) {
   const allowed = new Set(BRAINMCP_CLI_ALLOWED_SCOPES);
@@ -2180,6 +1975,26 @@ function validateTokenResponse(value) {
   }
   return token;
 }
+var DEFINITIVE_GRANT_ERRORS = /* @__PURE__ */ new Set(["invalid_grant", "invalid_client", "unauthorized_client"]);
+var OAuthGrantRejectedError = class extends Error {
+  status;
+  oauthError;
+  constructor(status, oauthError) {
+    super(`Token refresh rejected (status ${status}, ${oauthError}).`);
+    this.name = "OAuthGrantRejectedError";
+    this.status = status;
+    this.oauthError = oauthError;
+  }
+};
+async function readOAuthErrorCode(res) {
+  try {
+    const body = await res.json();
+    const code = body?.error;
+    return typeof code === "string" && /^[a-z_]{1,64}$/.test(code) ? code : null;
+  } catch {
+    return null;
+  }
+}
 var OAuthClient = class {
   issuer;
   clientId;
@@ -2280,6 +2095,10 @@ var OAuthClient = class {
         body: body.toString()
       });
       if (!res.ok) {
+        if (res.status === 400 || res.status === 401) {
+          const code = await readOAuthErrorCode(res);
+          if (code && DEFINITIVE_GRANT_ERRORS.has(code)) throw new OAuthGrantRejectedError(res.status, code);
+        }
         throw new Error(`Token refresh failed (status ${res.status}).`);
       }
       return validateTokenResponse(await res.json());
@@ -2307,6 +2126,14 @@ var OAuthClient = class {
 };
 
 // src/lib/api-client.ts
+var CompanionReauthRequiredError = class extends Error {
+  status = 401;
+  code = "reauth_required";
+  constructor() {
+    super("BrainMCP CLI sign-in expired or was revoked. Run `brainmcp login` to sign in again.");
+    this.name = "CompanionReauthRequiredError";
+  }
+};
 var ApiClient = class {
   apiUrl;
   store;
@@ -2347,6 +2174,9 @@ var ApiClient = class {
       if (options.expectedAuthorizationId && creds?.authorizationId !== options.expectedAuthorizationId) {
         throw new Error("Companion authorization changed before the request.");
       }
+      if (creds?.authType === "oauth" && creds.reauthRequired) {
+        throw new CompanionReauthRequiredError();
+      }
       const url = new URL(path12, `${this.apiUrl}/`);
       if (url.origin !== new URL(this.apiUrl).origin || url.username || url.password) {
         throw new Error("API requests must use the configured API origin.");
@@ -2446,13 +2276,12 @@ var ApiClient = class {
     if (!refreshToken) return null;
     try {
       const endpoints = await this.oauthClient.discoverEndpoints(signal);
+      signal.throwIfAborted();
       const tokenResponse = await this.oauthClient.refreshAccessToken({
         tokenEndpoint: endpoints.tokenEndpoint,
-        refreshToken,
-        signal
+        refreshToken
       });
       return await this.store.withRefreshLock(async (current) => {
-        signal.throwIfAborted();
         if (!current || current.authType !== "oauth" || current.authorizationId !== original.authorizationId || current.userId !== original.userId) return null;
         if (current.refreshLease?.leaseHolder !== leaseHolder) {
           return current.accessToken !== failedAccessToken ? current : null;
@@ -2477,20 +2306,274 @@ var ApiClient = class {
         return updated;
       });
     } catch (error) {
+      const rejection = error instanceof OAuthGrantRejectedError ? error : null;
       await this.store.withRefreshLock(async (current) => {
         if (current?.authType === "oauth" && current.refreshLease?.leaseHolder === leaseHolder) {
           await this.store.set({
             ...current,
             refreshLease: void 0,
+            // Mark the grant dead only if no other process rotated it meanwhile.
+            ...rejection && current.refreshToken === refreshToken ? { reauthRequired: { reason: "refresh_rejected", oauthError: rejection.oauthError, detectedAt: (/* @__PURE__ */ new Date()).toISOString() } } : {},
             updatedAt: (/* @__PURE__ */ new Date()).toISOString()
           });
         }
       });
-      throw error;
+      throw rejection ? new CompanionReauthRequiredError() : error;
     }
   }
 };
 
+// src/runtime/orient.ts
+var ORIENT_CACHE_TTL_MS = 10 * 60 * 1e3;
+var ORIENT_CONTEXT_MAX_CHARS = 2400;
+var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var SESSION_START_EVENTS = /* @__PURE__ */ new Set([
+  "SessionStart",
+  "sessionStart",
+  "session_start",
+  "startup"
+]);
+function isSessionStartEvent(event) {
+  return SESSION_START_EVENTS.has(event);
+}
+function isUserPromptEvent(event) {
+  return event === "UserPromptSubmit" || event === "UserPrompt" || event === "prompt" || event === "beforeSubmitPrompt";
+}
+function resolveOrientWorkspaceId(creds, listed) {
+  if (!creds || creds.authType !== "oauth" || !creds.accessToken) {
+    return { workspaceId: null, reason: "login" };
+  }
+  if (creds.defaultWorkspaceId && UUID_RE2.test(creds.defaultWorkspaceId)) {
+    return { workspaceId: creds.defaultWorkspaceId, reason: "ok" };
+  }
+  const fromCreds = (creds.workspaces ?? []).filter((id) => UUID_RE2.test(id));
+  if (fromCreds.length === 1) {
+    return { workspaceId: fromCreds[0], reason: "ok" };
+  }
+  if (listed) {
+    const defaults = listed.filter((ws) => ws.isDefault);
+    if (defaults.length === 1 && UUID_RE2.test(defaults[0].id)) {
+      return { workspaceId: defaults[0].id, reason: "ok" };
+    }
+    if (listed.length === 1 && UUID_RE2.test(listed[0].id)) {
+      return { workspaceId: listed[0].id, reason: "ok" };
+    }
+    if (listed.length !== 1) {
+      return { workspaceId: null, reason: "select" };
+    }
+  }
+  if (fromCreds.length !== 1) {
+    return { workspaceId: null, reason: fromCreds.length === 0 ? "select" : "select" };
+  }
+  return { workspaceId: null, reason: "select" };
+}
+var ORIENT_PACKET_HEADER = [
+  "BrainMCP orientation (no user prompt was sent).",
+  ANSWER_GROUNDING_BRIEF_GUIDANCE,
+  "This hook packet is bounded; call brain_workspace_overview for full Rules and current project context before dependent work. Clipped or omitted workspace details are incomplete."
+].join("\n");
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function clipContext(text, maxChars) {
+  if (text.length <= maxChars) return text;
+  return `${text.slice(0, maxChars - 1).replace(/[\uD800-\uDBFF]$/, "")}\u2026`;
+}
+function formatOrientDetails(payload, expectedWorkspaceId) {
+  const workspace = isRecord(payload) && isRecord(payload.workspace) ? payload.workspace : void 0;
+  if (!workspace || typeof workspace.id !== "string" || !workspace.id.trim() || typeof workspace.name !== "string" || !workspace.name.trim() || expectedWorkspaceId && workspace.id !== expectedWorkspaceId) {
+    return `${expectedWorkspaceId ? `Workspace ${expectedWorkspaceId}: ` : ""}BrainMCP orientation returned no usable context. Call brain_workspace_overview for this workspace before dependent work.`;
+  }
+  const data = payload;
+  const lines = [`Workspace ${clipContext(workspace.id, 80)}: ${clipContext(workspace.name.trim(), 120)}`];
+  const activeRef = isRecord(data.activeRef) ? data.activeRef : void 0;
+  if (activeRef?.type === "live") lines.push("Active ref: live.");
+  if (activeRef?.type === "branch" && typeof activeRef.branchId === "string") {
+    lines.push(`Active ref: branch ${clipContext(activeRef.branchId, 80)}.`);
+  }
+  const authorization = isRecord(data.authorization) ? data.authorization : void 0;
+  const scopes = Array.isArray(authorization?.scopes) && authorization.scopes.every((scope) => typeof scope === "string") ? authorization.scopes : void 0;
+  const canWrite = scopes?.some((scope) => scope === "*" || scope === "changes:write") === true;
+  if (!canWrite) {
+    lines.push(scopes ? "Companion authorization lacks changes:write. Host MCP permissions are independent; check its overview before proposing changes." : "Companion write access is unknown. Check host MCP permissions in overview before proposing changes.");
+  }
+  const review = isRecord(data.review) ? data.review : void 0;
+  if (canWrite && typeof review?.writePath === "string") {
+    lines.push(`Write path: ${clipContext(review.writePath, 80)}`);
+  }
+  if (review?.humanReviewRequired === true) {
+    lines.push("Human review is required before graph writes apply.");
+  }
+  for (const [field, label] of [["pendingProposalCount", "Pending proposals"], ["dueWorkflowCount", "Due workflows"]]) {
+    const count = data[field];
+    if (typeof count === "number" && Number.isSafeInteger(count) && count > 0) lines.push(`${label}: ${count}`);
+  }
+  const rules = isRecord(data.rules) ? data.rules : void 0;
+  const items = Array.isArray(rules?.items) ? rules.items : [];
+  const validRules = items.filter((rule) => isRecord(rule) && typeof rule.body === "string" && Boolean(rule.body.trim()));
+  const responseCap = isRecord(data.responseCap) ? data.responseCap : void 0;
+  if (!rules || !Array.isArray(rules.items) || validRules.length !== items.length || items.length > 3 || rules.truncated === true || Array.isArray(rules.omittedRules) && rules.omittedRules.length > 0 || responseCap?.applied === true) {
+    lines.push("Rules or other context are incomplete; recover omitted content through brain_workspace_overview and exact reads.");
+  }
+  for (const rule of validRules.slice(0, 3)) {
+    const body = rule.body.trim();
+    lines.push(body.length > 280 ? `Rule excerpt (incomplete): ${clipContext(body, 281)}` : `Rule: ${body}`);
+  }
+  if (canWrite) {
+    lines.push(typeof data.writeBackHint === "string" && data.writeBackHint.trim() ? data.writeBackHint.trim() : "During authorized project work, propose only new durable knowledge through available Brain tools. Honor read-only requests and workspace permissions.");
+  }
+  return lines.join("\n");
+}
+function loginOrientationMessage() {
+  return "BrainMCP CLI is not signed in. No remote request was made. Host MCP access is independent: use the host brain_* tools to orient if connected. Run `brainmcp login` to enable companion orientation.";
+}
+function reauthOrientationMessage() {
+  return "BrainMCP CLI sign-in expired or was revoked, so companion orientation is off. Only the brainmcp hook is affected: host MCP access is independent, so orient through the host brain_* tools (brain_workspace_overview) before saying Brain is unavailable. Tell the user to run `brainmcp login` to restore companion orientation.";
+}
+function companionOrientationFailedMessage(kinds) {
+  const reasons = [...new Set(kinds)].join(", ");
+  return `BrainMCP companion orientation failed (${reasons}). Only the brainmcp hook is affected: host MCP access is independent, so orient through the host brain_* tools (brain_workspace_overview) before saying Brain is unavailable.`;
+}
+function classifyOrientFailure(error) {
+  if (error instanceof CompanionReauthRequiredError) return { kind: "reauth_required", status: 401 };
+  const status = error && typeof error === "object" && "status" in error && typeof error.status === "number" ? error.status : void 0;
+  if (status === 401) return { kind: "unauthorized", status };
+  if (status === 403) return { kind: "forbidden", status };
+  if (status !== void 0) return { kind: `http_${status}`, status };
+  const message = error instanceof Error ? error.message : String(error);
+  if (/timed out|cancelled/i.test(message)) return { kind: "timeout" };
+  return { kind: "network" };
+}
+function needsLogin(failure) {
+  return failure.kind === "reauth_required" || failure.kind === "unauthorized";
+}
+var OrientRequestsFailedError = class extends Error {
+  failures;
+  constructor(failures) {
+    super("No project workspace orientation request succeeded.");
+    this.name = "OrientRequestsFailedError";
+    this.failures = failures;
+  }
+};
+function selectWorkspaceOrientationMessage() {
+  return `Companion orientation has no resolved workspace. Continue through the host brain_* tools. ${WORKSPACE_INFERENCE_GUIDANCE}`;
+}
+function readProjectWorkspaceId(startDir) {
+  if (!startDir) return { kind: "none" };
+  let dir = path9.resolve(startDir);
+  for (let depth = 0; depth < 16; depth += 1) {
+    const configPath = path9.join(dir, ".brainmcp.json");
+    if (fs9.existsSync(configPath)) {
+      try {
+        const stat = fs9.lstatSync(configPath);
+        if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 64 * 1024) {
+          return { kind: "invalid", configPath };
+        }
+        const parsed = JSON.parse(fs9.readFileSync(configPath, "utf8"));
+        const workspaceId = typeof parsed.workspaceId === "string" ? parsed.workspaceId.trim() : "";
+        return UUID_RE2.test(workspaceId) ? { kind: "workspace", configPath, workspaceId } : { kind: "invalid", configPath };
+      } catch {
+        return { kind: "invalid", configPath };
+      }
+    }
+    const parent = path9.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return { kind: "none" };
+}
+function invalidProjectWorkspaceMessage() {
+  return "BrainMCP found an invalid nearest `.brainmcp.json` workspaceId and did not guess another workspace. Fix or remove that project policy file.";
+}
+async function fetchSessionStartOrientation(input) {
+  const initial = resolveOrientWorkspaceId(input.creds);
+  if (initial.reason === "login") {
+    return loginOrientationMessage();
+  }
+  if (input.creds?.authType === "oauth" && input.creds.reauthRequired) {
+    return reauthOrientationMessage();
+  }
+  const roots = (input.workspaceRoots?.length ? input.workspaceRoots : input.cwd ? [input.cwd] : []).filter((root, index, all) => Boolean(root) && all.indexOf(root) === index);
+  const projectResolutions = roots.map((root) => readProjectWorkspaceId(root));
+  if (projectResolutions.some((resolution) => resolution.kind === "invalid")) {
+    return invalidProjectWorkspaceMessage();
+  }
+  const projectWorkspaceIds = projectResolutions.filter((resolution) => resolution.kind === "workspace").map((resolution) => resolution.workspaceId);
+  const hasUnboundRoot = roots.length === 0 || projectResolutions.some((resolution) => resolution.kind === "none");
+  let fallbackWorkspaceId = initial.workspaceId;
+  if (hasUnboundRoot && !fallbackWorkspaceId) {
+    try {
+      const listed = await input.apiClient.request(
+        COMPANION_WORKSPACES_PATH,
+        { timeoutMs: 800, signal: input.signal }
+      );
+      const next = resolveOrientWorkspaceId(input.creds, listed.workspaces ?? []);
+      fallbackWorkspaceId = next.workspaceId;
+    } catch (error) {
+      const failure = classifyOrientFailure(error);
+      if (needsLogin(failure)) throw new OrientRequestsFailedError([failure]);
+      fallbackWorkspaceId = null;
+    }
+  }
+  const workspaceIds = [.../* @__PURE__ */ new Set([
+    ...projectWorkspaceIds,
+    ...hasUnboundRoot && fallbackWorkspaceId ? [fallbackWorkspaceId] : []
+  ])];
+  if (workspaceIds.length === 0) return selectWorkspaceOrientationMessage();
+  const results = await Promise.allSettled(
+    workspaceIds.map(async (workspaceId) => {
+      const payload = await input.apiClient.request(
+        `/api/workspaces/${apiPathSegment(workspaceId)}/orient`,
+        { timeoutMs: 800, signal: input.signal }
+      );
+      return formatOrientDetails(payload, workspaceId);
+    })
+  );
+  const failures = results.map((result) => result.status === "rejected" ? classifyOrientFailure(result.reason) : null);
+  const failedCount = failures.filter(Boolean).length;
+  if (failedCount === results.length) {
+    throw new OrientRequestsFailedError(failures);
+  }
+  if (failedCount > 0) {
+    logRuntimeEvent("warn", "orient_partial_failure", {
+      failures: failures.filter((failure) => failure !== null)
+    }, input.baseDir);
+  }
+  const header = [ORIENT_PACKET_HEADER];
+  if (failedCount > 0) header.push(`${failedCount} workspace request(s) failed; their Brain context was not loaded. Retry those workspaces through host MCP; do not substitute another workspace.`);
+  if (hasUnboundRoot && !fallbackWorkspaceId) header.push(selectWorkspaceOrientationMessage());
+  const visibleResults = results.slice(0, 8);
+  if (results.length > visibleResults.length) {
+    header.push(`${results.length - visibleResults.length} additional workspace results omitted. Orient those projects separately through host MCP.`);
+  }
+  const prefix = header.join("\n");
+  const separator = "\n\n---\n\n";
+  const perWorkspaceBudget = Math.floor((ORIENT_CONTEXT_MAX_CHARS - prefix.length - 1 - separator.length * (visibleResults.length - 1)) / visibleResults.length);
+  const contexts = visibleResults.map((result, index) => clipContext(
+    result.status === "fulfilled" ? result.value : `Workspace ${workspaceIds[index]}: orientation unavailable (${failures[index]?.kind ?? "network"}). Call brain_workspace_overview with this workspaceId before dependent work.`,
+    perWorkspaceBudget
+  ));
+  return `${prefix}
+${contexts.join(separator)}`;
+}
+async function safeSessionStartOrientation(input) {
+  if (!input.apiClient) {
+    return input.creds?.authType === "oauth" ? selectWorkspaceOrientationMessage() : loginOrientationMessage();
+  }
+  try {
+    return await fetchSessionStartOrientation(input);
+  } catch (error) {
+    const failures = error instanceof OrientRequestsFailedError ? error.failures : [classifyOrientFailure(error)];
+    logRuntimeEvent(
+      "warn",
+      "orient_fetch_failed",
+      { error: error instanceof Error ? error.message : String(error), failures },
+      input.baseDir
+    );
+    return failures.some(needsLogin) ? reauthOrientationMessage() : companionOrientationFailedMessage(failures.map((failure) => failure.kind));
+  }
+}
+
 // src/lib/credentials.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 import {