@codemem/core 0.22.0-alpha.0 → 0.22.0-alpha.2

package/dist/coordinator-api-By9BNOCL.js

@@ -0,0 +1,2397 @@
+import { createHash as e, createPrivateKey as t, createPublicKey as n, generateKeyPairSync as r, randomBytes as i, randomUUID as a, sign as o, verify as s } from "node:crypto";
+import { copyFileSync as c, existsSync as l, mkdirSync as u, readFileSync as d, renameSync as f, unlinkSync as p, writeFileSync as m } from "node:fs";
+import { homedir as h } from "node:os";
+import { dirname as g, join as _ } from "node:path";
+import v from "better-sqlite3";
+import { eq as ee, lt as te } from "drizzle-orm";
+import { drizzle as y } from "drizzle-orm/better-sqlite3";
+import { index as b, integer as x, primaryKey as ne, real as re, sqliteTable as S, text as C, uniqueIndex as ie } from "drizzle-orm/sqlite-core";
+import { execFileSync as w } from "node:child_process";
+import * as ae from "sqlite-vec";
+//#region \0rolldown/runtime.js
+var oe = Object.defineProperty, se = (e, t) => {
+	let n = {};
+	for (var r in e) oe(n, r, {
+		get: e[r],
+		enumerable: !0
+	});
+	return t || oe(n, Symbol.toStringTag, { value: "Module" }), n;
+}, ce = (e, t, n) => (r, i) => {
+	let a = -1;
+	return o(0);
+	async function o(s) {
+		if (s <= a) throw Error("next() called multiple times");
+		a = s;
+		let c, l = !1, u;
+		if (e[s] ? (u = e[s][0][0], r.req.routeIndex = s) : u = s === e.length && i || void 0, u) try {
+			c = await u(r, () => o(s + 1));
+		} catch (e) {
+			if (e instanceof Error && t) r.error = e, c = await t(e, r), l = !0;
+			else throw e;
+		}
+		else r.finalized === !1 && n && (c = await n(r));
+		return c && (r.finalized === !1 || l) && (r.res = c), r;
+	}
+}, le = /* @__PURE__ */ Symbol(), ue = async (e, t = /* @__PURE__ */ Object.create(null)) => {
+	let { all: n = !1, dot: r = !1 } = t, i = (e instanceof je ? e.raw.headers : e.headers).get("Content-Type");
+	return i?.startsWith("multipart/form-data") || i?.startsWith("application/x-www-form-urlencoded") ? de(e, {
+		all: n,
+		dot: r
+	}) : {};
+};
+async function de(e, t) {
+	let n = await e.formData();
+	return n ? fe(n, t) : {};
+}
+function fe(e, t) {
+	let n = /* @__PURE__ */ Object.create(null);
+	return e.forEach((e, r) => {
+		t.all || r.endsWith("[]") ? pe(n, r, e) : n[r] = e;
+	}), t.dot && Object.entries(n).forEach(([e, t]) => {
+		e.includes(".") && (me(n, e, t), delete n[e]);
+	}), n;
+}
+var pe = (e, t, n) => {
+	e[t] === void 0 ? t.endsWith("[]") ? e[t] = [n] : e[t] = n : Array.isArray(e[t]) ? e[t].push(n) : e[t] = [e[t], n];
+}, me = (e, t, n) => {
+	if (/(?:^|\.)__proto__\./.test(t)) return;
+	let r = e, i = t.split(".");
+	i.forEach((e, t) => {
+		t === i.length - 1 ? r[e] = n : ((!r[e] || typeof r[e] != "object" || Array.isArray(r[e]) || r[e] instanceof File) && (r[e] = /* @__PURE__ */ Object.create(null)), r = r[e]);
+	});
+}, he = (e) => {
+	let t = e.split("/");
+	return t[0] === "" && t.shift(), t;
+}, ge = (e) => {
+	let { groups: t, path: n } = _e(e);
+	return ve(he(n), t);
+}, _e = (e) => {
+	let t = [];
+	return e = e.replace(/\{[^}]+\}/g, (e, n) => {
+		let r = `@${n}`;
+		return t.push([r, e]), r;
+	}), {
+		groups: t,
+		path: e
+	};
+}, ve = (e, t) => {
+	for (let n = t.length - 1; n >= 0; n--) {
+		let [r] = t[n];
+		for (let i = e.length - 1; i >= 0; i--) if (e[i].includes(r)) {
+			e[i] = e[i].replace(r, t[n][1]);
+			break;
+		}
+	}
+	return e;
+}, T = {}, ye = (e, t) => {
+	if (e === "*") return "*";
+	let n = e.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/);
+	if (n) {
+		let r = `${e}#${t}`;
+		return T[r] || (n[2] ? T[r] = t && t[0] !== ":" && t[0] !== "*" ? [
+			r,
+			n[1],
+			RegExp(`^${n[2]}(?=/${t})`)
+		] : [
+			e,
+			n[1],
+			RegExp(`^${n[2]}$`)
+		] : T[r] = [
+			e,
+			n[1],
+			!0
+		]), T[r];
+	}
+	return null;
+}, be = (e, t) => {
+	try {
+		return t(e);
+	} catch {
+		return e.replace(/(?:%[0-9A-Fa-f]{2})+/g, (e) => {
+			try {
+				return t(e);
+			} catch {
+				return e;
+			}
+		});
+	}
+}, xe = (e) => be(e, decodeURI), Se = (e) => {
+	let t = e.url, n = t.indexOf("/", t.indexOf(":") + 4), r = n;
+	for (; r < t.length; r++) {
+		let e = t.charCodeAt(r);
+		if (e === 37) {
+			let e = t.indexOf("?", r), i = t.indexOf("#", r), a = e === -1 ? i === -1 ? void 0 : i : i === -1 ? e : Math.min(e, i), o = t.slice(n, a);
+			return xe(o.includes("%25") ? o.replace(/%25/g, "%2525") : o);
+		} else if (e === 63 || e === 35) break;
+	}
+	return t.slice(n, r);
+}, Ce = (e) => {
+	let t = Se(e);
+	return t.length > 1 && t.at(-1) === "/" ? t.slice(0, -1) : t;
+}, E = (e, t, ...n) => (n.length && (t = E(t, ...n)), `${e?.[0] === "/" ? "" : "/"}${e}${t === "/" ? "" : `${e?.at(-1) === "/" ? "" : "/"}${t?.[0] === "/" ? t.slice(1) : t}`}`), we = (e) => {
+	if (e.charCodeAt(e.length - 1) !== 63 || !e.includes(":")) return null;
+	let t = e.split("/"), n = [], r = "";
+	return t.forEach((e) => {
+		if (e !== "" && !/\:/.test(e)) r += "/" + e;
+		else if (/\:/.test(e)) if (/\?/.test(e)) {
+			n.length === 0 && r === "" ? n.push("/") : n.push(r);
+			let t = e.replace("?", "");
+			r += "/" + t, n.push(r);
+		} else r += "/" + e;
+	}), n.filter((e, t, n) => n.indexOf(e) === t);
+}, Te = (e) => /[%+]/.test(e) ? (e.indexOf("+") !== -1 && (e = e.replace(/\+/g, " ")), e.indexOf("%") === -1 ? e : be(e, ke)) : e, Ee = (e, t, n) => {
+	let r;
+	if (!n && t && !/[%+]/.test(t)) {
+		let n = e.indexOf("?", 8);
+		if (n === -1) return;
+		for (e.startsWith(t, n + 1) || (n = e.indexOf(`&${t}`, n + 1)); n !== -1;) {
+			let r = e.charCodeAt(n + t.length + 1);
+			if (r === 61) {
+				let r = n + t.length + 2, i = e.indexOf("&", r);
+				return Te(e.slice(r, i === -1 ? void 0 : i));
+			} else if (r == 38 || isNaN(r)) return "";
+			n = e.indexOf(`&${t}`, n + 1);
+		}
+		if (r = /[%+]/.test(e), !r) return;
+	}
+	let i = {};
+	r ??= /[%+]/.test(e);
+	let a = e.indexOf("?", 8);
+	for (; a !== -1;) {
+		let t = e.indexOf("&", a + 1), o = e.indexOf("=", a);
+		o > t && t !== -1 && (o = -1);
+		let s = e.slice(a + 1, o === -1 ? t === -1 ? void 0 : t : o);
+		if (r && (s = Te(s)), a = t, s === "") continue;
+		let c;
+		o === -1 ? c = "" : (c = e.slice(o + 1, t === -1 ? void 0 : t), r && (c = Te(c))), n ? (i[s] && Array.isArray(i[s]) || (i[s] = []), i[s].push(c)) : i[s] ??= c;
+	}
+	return t ? i[t] : i;
+}, De = Ee, Oe = (e, t) => Ee(e, t, !0), ke = decodeURIComponent, Ae = (e) => be(e, ke), je = class {
+	raw;
+	#e;
+	#t;
+	routeIndex = 0;
+	path;
+	bodyCache = {};
+	constructor(e, t = "/", n = [[]]) {
+		this.raw = e, this.path = t, this.#t = n, this.#e = {};
+	}
+	param(e) {
+		return e ? this.#n(e) : this.#r();
+	}
+	#n(e) {
+		let t = this.#t[0][this.routeIndex][1][e], n = this.#i(t);
+		return n && /\%/.test(n) ? Ae(n) : n;
+	}
+	#r() {
+		let e = {}, t = Object.keys(this.#t[0][this.routeIndex][1]);
+		for (let n of t) {
+			let t = this.#i(this.#t[0][this.routeIndex][1][n]);
+			t !== void 0 && (e[n] = /\%/.test(t) ? Ae(t) : t);
+		}
+		return e;
+	}
+	#i(e) {
+		return this.#t[1] ? this.#t[1][e] : e;
+	}
+	query(e) {
+		return De(this.url, e);
+	}
+	queries(e) {
+		return Oe(this.url, e);
+	}
+	header(e) {
+		if (e) return this.raw.headers.get(e) ?? void 0;
+		let t = {};
+		return this.raw.headers.forEach((e, n) => {
+			t[n] = e;
+		}), t;
+	}
+	async parseBody(e) {
+		return this.bodyCache.parsedBody ??= await ue(this, e);
+	}
+	#a = (e) => {
+		let { bodyCache: t, raw: n } = this, r = t[e];
+		if (r) return r;
+		let i = Object.keys(t)[0];
+		return i ? t[i].then((t) => (i === "json" && (t = JSON.stringify(t)), new Response(t)[e]())) : t[e] = n[e]();
+	};
+	json() {
+		return this.#a("text").then((e) => JSON.parse(e));
+	}
+	text() {
+		return this.#a("text");
+	}
+	arrayBuffer() {
+		return this.#a("arrayBuffer");
+	}
+	blob() {
+		return this.#a("blob");
+	}
+	formData() {
+		return this.#a("formData");
+	}
+	addValidatedData(e, t) {
+		this.#e[e] = t;
+	}
+	valid(e) {
+		return this.#e[e];
+	}
+	get url() {
+		return this.raw.url;
+	}
+	get method() {
+		return this.raw.method;
+	}
+	get [le]() {
+		return this.#t;
+	}
+	get matchedRoutes() {
+		return this.#t[0].map(([[, e]]) => e);
+	}
+	get routePath() {
+		return this.#t[0].map(([[, e]]) => e)[this.routeIndex].path;
+	}
+}, Me = {
+	Stringify: 1,
+	BeforeStream: 2,
+	Stream: 3
+}, Ne = (e, t) => {
+	let n = new String(e);
+	return n.isEscaped = !0, n.callbacks = t, n;
+}, Pe = async (e, t, n, r, i) => {
+	typeof e == "object" && !(e instanceof String) && (e instanceof Promise || (e = e.toString()), e instanceof Promise && (e = await e));
+	let a = e.callbacks;
+	if (!a?.length) return Promise.resolve(e);
+	i ? i[0] += e : i = [e];
+	let o = Promise.all(a.map((e) => e({
+		phase: t,
+		buffer: i,
+		context: r
+	}))).then((e) => Promise.all(e.filter(Boolean).map((e) => Pe(e, t, !1, r, i))).then(() => i[0]));
+	return n ? Ne(await o, a) : o;
+}, Fe = "text/plain; charset=UTF-8", D = (e, t) => ({
+	"Content-Type": e,
+	...t
+}), O = (e, t) => new Response(e, t), Ie = class {
+	#e;
+	#t;
+	env = {};
+	#n;
+	finalized = !1;
+	error;
+	#r;
+	#i;
+	#a;
+	#o;
+	#s;
+	#c;
+	#l;
+	#u;
+	#d;
+	constructor(e, t) {
+		this.#e = e, t && (this.#i = t.executionCtx, this.env = t.env, this.#c = t.notFoundHandler, this.#d = t.path, this.#u = t.matchResult);
+	}
+	get req() {
+		return this.#t ??= new je(this.#e, this.#d, this.#u), this.#t;
+	}
+	get event() {
+		if (this.#i && "respondWith" in this.#i) return this.#i;
+		throw Error("This context has no FetchEvent");
+	}
+	get executionCtx() {
+		if (this.#i) return this.#i;
+		throw Error("This context has no ExecutionContext");
+	}
+	get res() {
+		return this.#a ||= O(null, { headers: this.#l ??= new Headers() });
+	}
+	set res(e) {
+		if (this.#a && e) {
+			e = O(e.body, e);
+			for (let [t, n] of this.#a.headers.entries()) if (t !== "content-type") if (t === "set-cookie") {
+				let t = this.#a.headers.getSetCookie();
+				e.headers.delete("set-cookie");
+				for (let n of t) e.headers.append("set-cookie", n);
+			} else e.headers.set(t, n);
+		}
+		this.#a = e, this.finalized = !0;
+	}
+	render = (...e) => (this.#s ??= (e) => this.html(e), this.#s(...e));
+	setLayout = (e) => this.#o = e;
+	getLayout = () => this.#o;
+	setRenderer = (e) => {
+		this.#s = e;
+	};
+	header = (e, t, n) => {
+		this.finalized && (this.#a = O(this.#a.body, this.#a));
+		let r = this.#a ? this.#a.headers : this.#l ??= new Headers();
+		t === void 0 ? r.delete(e) : n?.append ? r.append(e, t) : r.set(e, t);
+	};
+	status = (e) => {
+		this.#r = e;
+	};
+	set = (e, t) => {
+		this.#n ??= /* @__PURE__ */ new Map(), this.#n.set(e, t);
+	};
+	get = (e) => this.#n ? this.#n.get(e) : void 0;
+	get var() {
+		return this.#n ? Object.fromEntries(this.#n) : {};
+	}
+	#f(e, t, n) {
+		let r = this.#a ? new Headers(this.#a.headers) : this.#l ?? new Headers();
+		if (typeof t == "object" && "headers" in t) {
+			let e = t.headers instanceof Headers ? t.headers : new Headers(t.headers);
+			for (let [t, n] of e) t.toLowerCase() === "set-cookie" ? r.append(t, n) : r.set(t, n);
+		}
+		if (n) for (let [e, t] of Object.entries(n)) if (typeof t == "string") r.set(e, t);
+		else {
+			r.delete(e);
+			for (let n of t) r.append(e, n);
+		}
+		return O(e, {
+			status: typeof t == "number" ? t : t?.status ?? this.#r,
+			headers: r
+		});
+	}
+	newResponse = (...e) => this.#f(...e);
+	body = (e, t, n) => this.#f(e, t, n);
+	text = (e, t, n) => !this.#l && !this.#r && !t && !n && !this.finalized ? new Response(e) : this.#f(e, t, D(Fe, n));
+	json = (e, t, n) => this.#f(JSON.stringify(e), t, D("application/json", n));
+	html = (e, t, n) => {
+		let r = (e) => this.#f(e, t, D("text/html; charset=UTF-8", n));
+		return typeof e == "object" ? Pe(e, Me.Stringify, !1, {}).then(r) : r(e);
+	};
+	redirect = (e, t) => {
+		let n = String(e);
+		return this.header("Location", /[^\x00-\xFF]/.test(n) ? encodeURI(n) : n), this.newResponse(null, t ?? 302);
+	};
+	notFound = () => (this.#c ??= () => O(), this.#c(this));
+}, Le = [
+	"get",
+	"post",
+	"put",
+	"delete",
+	"options",
+	"patch"
+], Re = "Can not add a route since the matcher is already built.", ze = class extends Error {}, Be = "__COMPOSED_HANDLER", Ve = (e) => e.text("404 Not Found", 404), He = (e, t) => {
+	if ("getResponse" in e) {
+		let n = e.getResponse();
+		return t.newResponse(n.body, n);
+	}
+	return console.error(e), t.text("Internal Server Error", 500);
+}, Ue = class e {
+	get;
+	post;
+	put;
+	delete;
+	options;
+	patch;
+	all;
+	on;
+	use;
+	router;
+	getPath;
+	_basePath = "/";
+	#e = "/";
+	routes = [];
+	constructor(e = {}) {
+		[...Le, "all"].forEach((e) => {
+			this[e] = (t, ...n) => (typeof t == "string" ? this.#e = t : this.#r(e, this.#e, t), n.forEach((t) => {
+				this.#r(e, this.#e, t);
+			}), this);
+		}), this.on = (e, t, ...n) => {
+			for (let r of [t].flat()) {
+				this.#e = r;
+				for (let t of [e].flat()) n.map((e) => {
+					this.#r(t.toUpperCase(), this.#e, e);
+				});
+			}
+			return this;
+		}, this.use = (e, ...t) => (typeof e == "string" ? this.#e = e : (this.#e = "*", t.unshift(e)), t.forEach((e) => {
+			this.#r("ALL", this.#e, e);
+		}), this);
+		let { strict: t, ...n } = e;
+		Object.assign(this, n), this.getPath = t ?? !0 ? e.getPath ?? Se : Ce;
+	}
+	#t() {
+		let t = new e({
+			router: this.router,
+			getPath: this.getPath
+		});
+		return t.errorHandler = this.errorHandler, t.#n = this.#n, t.routes = this.routes, t;
+	}
+	#n = Ve;
+	errorHandler = He;
+	route(e, t) {
+		let n = this.basePath(e);
+		return t.routes.map((e) => {
+			let r;
+			t.errorHandler === He ? r = e.handler : (r = async (n, r) => (await ce([], t.errorHandler)(n, () => e.handler(n, r))).res, r[Be] = e.handler), n.#r(e.method, e.path, r);
+		}), this;
+	}
+	basePath(e) {
+		let t = this.#t();
+		return t._basePath = E(this._basePath, e), t;
+	}
+	onError = (e) => (this.errorHandler = e, this);
+	notFound = (e) => (this.#n = e, this);
+	mount(e, t, n) {
+		let r, i;
+		n && (typeof n == "function" ? i = n : (i = n.optionHandler, r = n.replaceRequest === !1 ? (e) => e : n.replaceRequest));
+		let a = i ? (e) => {
+			let t = i(e);
+			return Array.isArray(t) ? t : [t];
+		} : (e) => {
+			let t;
+			try {
+				t = e.executionCtx;
+			} catch {}
+			return [e.env, t];
+		};
+		return r ||= (() => {
+			let t = E(this._basePath, e), n = t === "/" ? 0 : t.length;
+			return (e) => {
+				let t = new URL(e.url);
+				return t.pathname = t.pathname.slice(n) || "/", new Request(t, e);
+			};
+		})(), this.#r("ALL", E(e, "*"), async (e, n) => {
+			let i = await t(r(e.req.raw), ...a(e));
+			if (i) return i;
+			await n();
+		}), this;
+	}
+	#r(e, t, n) {
+		e = e.toUpperCase(), t = E(this._basePath, t);
+		let r = {
+			basePath: this._basePath,
+			path: t,
+			method: e,
+			handler: n
+		};
+		this.router.add(e, t, [n, r]), this.routes.push(r);
+	}
+	#i(e, t) {
+		if (e instanceof Error) return this.errorHandler(e, t);
+		throw e;
+	}
+	#a(e, t, n, r) {
+		if (r === "HEAD") return (async () => new Response(null, await this.#a(e, t, n, "GET")))();
+		let i = this.getPath(e, { env: n }), a = this.router.match(r, i), o = new Ie(e, {
+			path: i,
+			matchResult: a,
+			env: n,
+			executionCtx: t,
+			notFoundHandler: this.#n
+		});
+		if (a[0].length === 1) {
+			let e;
+			try {
+				e = a[0][0][0][0](o, async () => {
+					o.res = await this.#n(o);
+				});
+			} catch (e) {
+				return this.#i(e, o);
+			}
+			return e instanceof Promise ? e.then((e) => e || (o.finalized ? o.res : this.#n(o))).catch((e) => this.#i(e, o)) : e ?? this.#n(o);
+		}
+		let s = ce(a[0], this.errorHandler, this.#n);
+		return (async () => {
+			try {
+				let e = await s(o);
+				if (!e.finalized) throw Error("Context is not finalized. Did you forget to return a Response object or `await next()`?");
+				return e.res;
+			} catch (e) {
+				return this.#i(e, o);
+			}
+		})();
+	}
+	fetch = (e, ...t) => this.#a(e, t[1], t[0], e.method);
+	request = (e, t, n, r) => e instanceof Request ? this.fetch(t ? new Request(e, t) : e, n, r) : (e = e.toString(), this.fetch(new Request(/^https?:\/\//.test(e) ? e : `http://localhost${E("/", e)}`, t), n, r));
+	fire = () => {
+		addEventListener("fetch", (e) => {
+			e.respondWith(this.#a(e.request, e, void 0, e.request.method));
+		});
+	};
+}, We = [];
+function Ge(e, t) {
+	let n = this.buildAllMatchers(), r = ((e, t) => {
+		let r = n[e] || n.ALL, i = r[2][t];
+		if (i) return i;
+		let a = t.match(r[0]);
+		if (!a) return [[], We];
+		let o = a.indexOf("", 1);
+		return [r[1][o], a];
+	});
+	return this.match = r, r(e, t);
+}
+//#endregion
+//#region ../../node_modules/.pnpm/hono@4.12.8/node_modules/hono/dist/router/reg-exp-router/node.js
+var k = "[^/]+", A = ".*", j = "(?:|/.*)", M = /* @__PURE__ */ Symbol(), Ke = /* @__PURE__ */ new Set(".\\+*[^]$()");
+function qe(e, t) {
+	return e.length === 1 ? t.length === 1 ? e < t ? -1 : 1 : -1 : t.length === 1 || e === A || e === j ? 1 : t === A || t === j ? -1 : e === k ? 1 : t === k ? -1 : e.length === t.length ? e < t ? -1 : 1 : t.length - e.length;
+}
+var Je = class e {
+	#e;
+	#t;
+	#n = /* @__PURE__ */ Object.create(null);
+	insert(t, n, r, i, a) {
+		if (t.length === 0) {
+			if (this.#e !== void 0) throw M;
+			if (a) return;
+			this.#e = n;
+			return;
+		}
+		let [o, ...s] = t, c = o === "*" ? s.length === 0 ? [
+			"",
+			"",
+			A
+		] : [
+			"",
+			"",
+			k
+		] : o === "/*" ? [
+			"",
+			"",
+			j
+		] : o.match(/^\:([^\{\}]+)(?:\{(.+)\})?$/), l;
+		if (c) {
+			let t = c[1], n = c[2] || k;
+			if (t && c[2] && (n === ".*" || (n = n.replace(/^\((?!\?:)(?=[^)]+\)$)/, "(?:"), /\((?!\?:)/.test(n)))) throw M;
+			if (l = this.#n[n], !l) {
+				if (Object.keys(this.#n).some((e) => e !== A && e !== j)) throw M;
+				if (a) return;
+				l = this.#n[n] = new e(), t !== "" && (l.#t = i.varIndex++);
+			}
+			!a && t !== "" && r.push([t, l.#t]);
+		} else if (l = this.#n[o], !l) {
+			if (Object.keys(this.#n).some((e) => e.length > 1 && e !== A && e !== j)) throw M;
+			if (a) return;
+			l = this.#n[o] = new e();
+		}
+		l.insert(s, n, r, i, a);
+	}
+	buildRegExpStr() {
+		let e = Object.keys(this.#n).sort(qe).map((e) => {
+			let t = this.#n[e];
+			return (typeof t.#t == "number" ? `(${e})@${t.#t}` : Ke.has(e) ? `\\${e}` : e) + t.buildRegExpStr();
+		});
+		return typeof this.#e == "number" && e.unshift(`#${this.#e}`), e.length === 0 ? "" : e.length === 1 ? e[0] : "(?:" + e.join("|") + ")";
+	}
+}, Ye = class {
+	#e = { varIndex: 0 };
+	#t = new Je();
+	insert(e, t, n) {
+		let r = [], i = [];
+		for (let t = 0;;) {
+			let n = !1;
+			if (e = e.replace(/\{[^}]+\}/g, (e) => {
+				let r = `@\\${t}`;
+				return i[t] = [r, e], t++, n = !0, r;
+			}), !n) break;
+		}
+		let a = e.match(/(?::[^\/]+)|(?:\/\*$)|./g) || [];
+		for (let e = i.length - 1; e >= 0; e--) {
+			let [t] = i[e];
+			for (let n = a.length - 1; n >= 0; n--) if (a[n].indexOf(t) !== -1) {
+				a[n] = a[n].replace(t, i[e][1]);
+				break;
+			}
+		}
+		return this.#t.insert(a, t, r, this.#e, n), r;
+	}
+	buildRegExp() {
+		let e = this.#t.buildRegExpStr();
+		if (e === "") return [
+			/^$/,
+			[],
+			[]
+		];
+		let t = 0, n = [], r = [];
+		return e = e.replace(/#(\d+)|@(\d+)|\.\*\$/g, (e, i, a) => i === void 0 ? (a === void 0 || (r[Number(a)] = ++t), "") : (n[++t] = Number(i), "$()")), [
+			RegExp(`^${e}`),
+			n,
+			r
+		];
+	}
+}, Xe = [
+	/^$/,
+	[],
+	/* @__PURE__ */ Object.create(null)
+], Ze = /* @__PURE__ */ Object.create(null);
+function Qe(e) {
+	return Ze[e] ??= RegExp(e === "*" ? "" : `^${e.replace(/\/\*$|([.\\+*[^\]$()])/g, (e, t) => t ? `\\${t}` : "(?:|/.*)")}$`);
+}
+function $e() {
+	Ze = /* @__PURE__ */ Object.create(null);
+}
+function et(e) {
+	let t = new Ye(), n = [];
+	if (e.length === 0) return Xe;
+	let r = e.map((e) => [!/\*|\/:/.test(e[0]), ...e]).sort(([e, t], [n, r]) => e ? 1 : n ? -1 : t.length - r.length), i = /* @__PURE__ */ Object.create(null);
+	for (let e = 0, a = -1, o = r.length; e < o; e++) {
+		let [o, s, c] = r[e];
+		o ? i[s] = [c.map(([e]) => [e, /* @__PURE__ */ Object.create(null)]), We] : a++;
+		let l;
+		try {
+			l = t.insert(s, a, o);
+		} catch (e) {
+			throw e === M ? new ze(s) : e;
+		}
+		o || (n[a] = c.map(([e, t]) => {
+			let n = /* @__PURE__ */ Object.create(null);
+			for (--t; t >= 0; t--) {
+				let [e, r] = l[t];
+				n[e] = r;
+			}
+			return [e, n];
+		}));
+	}
+	let [a, o, s] = t.buildRegExp();
+	for (let e = 0, t = n.length; e < t; e++) for (let t = 0, r = n[e].length; t < r; t++) {
+		let r = n[e][t]?.[1];
+		if (!r) continue;
+		let i = Object.keys(r);
+		for (let e = 0, t = i.length; e < t; e++) r[i[e]] = s[r[i[e]]];
+	}
+	let c = [];
+	for (let e in o) c[e] = n[o[e]];
+	return [
+		a,
+		c,
+		i
+	];
+}
+function N(e, t) {
+	if (e) {
+		for (let n of Object.keys(e).sort((e, t) => t.length - e.length)) if (Qe(n).test(t)) return [...e[n]];
+	}
+}
+var tt = class {
+	name = "RegExpRouter";
+	#e;
+	#t;
+	constructor() {
+		this.#e = { ALL: /* @__PURE__ */ Object.create(null) }, this.#t = { ALL: /* @__PURE__ */ Object.create(null) };
+	}
+	add(e, t, n) {
+		let r = this.#e, i = this.#t;
+		if (!r || !i) throw Error(Re);
+		r[e] || [r, i].forEach((t) => {
+			t[e] = /* @__PURE__ */ Object.create(null), Object.keys(t.ALL).forEach((n) => {
+				t[e][n] = [...t.ALL[n]];
+			});
+		}), t === "/*" && (t = "*");
+		let a = (t.match(/\/:/g) || []).length;
+		if (/\*$/.test(t)) {
+			let o = Qe(t);
+			e === "ALL" ? Object.keys(r).forEach((e) => {
+				r[e][t] ||= N(r[e], t) || N(r.ALL, t) || [];
+			}) : r[e][t] ||= N(r[e], t) || N(r.ALL, t) || [], Object.keys(r).forEach((t) => {
+				(e === "ALL" || e === t) && Object.keys(r[t]).forEach((e) => {
+					o.test(e) && r[t][e].push([n, a]);
+				});
+			}), Object.keys(i).forEach((t) => {
+				(e === "ALL" || e === t) && Object.keys(i[t]).forEach((e) => o.test(e) && i[t][e].push([n, a]));
+			});
+			return;
+		}
+		let o = we(t) || [t];
+		for (let t = 0, s = o.length; t < s; t++) {
+			let c = o[t];
+			Object.keys(i).forEach((o) => {
+				(e === "ALL" || e === o) && (i[o][c] ||= [...N(r[o], c) || N(r.ALL, c) || []], i[o][c].push([n, a - s + t + 1]));
+			});
+		}
+	}
+	match = Ge;
+	buildAllMatchers() {
+		let e = /* @__PURE__ */ Object.create(null);
+		return Object.keys(this.#t).concat(Object.keys(this.#e)).forEach((t) => {
+			e[t] ||= this.#n(t);
+		}), this.#e = this.#t = void 0, $e(), e;
+	}
+	#n(e) {
+		let t = [], n = e === "ALL";
+		return [this.#e, this.#t].forEach((r) => {
+			let i = r[e] ? Object.keys(r[e]).map((t) => [t, r[e][t]]) : [];
+			i.length === 0 ? e !== "ALL" && t.push(...Object.keys(r.ALL).map((e) => [e, r.ALL[e]])) : (n ||= !0, t.push(...i));
+		}), n ? et(t) : null;
+	}
+}, nt = class {
+	name = "SmartRouter";
+	#e = [];
+	#t = [];
+	constructor(e) {
+		this.#e = e.routers;
+	}
+	add(e, t, n) {
+		if (!this.#t) throw Error(Re);
+		this.#t.push([
+			e,
+			t,
+			n
+		]);
+	}
+	match(e, t) {
+		if (!this.#t) throw Error("Fatal error");
+		let n = this.#e, r = this.#t, i = n.length, a = 0, o;
+		for (; a < i; a++) {
+			let i = n[a];
+			try {
+				for (let e = 0, t = r.length; e < t; e++) i.add(...r[e]);
+				o = i.match(e, t);
+			} catch (e) {
+				if (e instanceof ze) continue;
+				throw e;
+			}
+			this.match = i.match.bind(i), this.#e = [i], this.#t = void 0;
+			break;
+		}
+		if (a === i) throw Error("Fatal error");
+		return this.name = `SmartRouter + ${this.activeRouter.name}`, o;
+	}
+	get activeRouter() {
+		if (this.#t || this.#e.length !== 1) throw Error("No active router has been determined yet.");
+		return this.#e[0];
+	}
+}, P = /* @__PURE__ */ Object.create(null), rt = (e) => {
+	for (let t in e) return !0;
+	return !1;
+}, it = class e {
+	#e;
+	#t;
+	#n;
+	#r = 0;
+	#i = P;
+	constructor(e, t, n) {
+		if (this.#t = n || /* @__PURE__ */ Object.create(null), this.#e = [], e && t) {
+			let n = /* @__PURE__ */ Object.create(null);
+			n[e] = {
+				handler: t,
+				possibleKeys: [],
+				score: 0
+			}, this.#e = [n];
+		}
+		this.#n = [];
+	}
+	insert(t, n, r) {
+		this.#r = ++this.#r;
+		let i = this, a = ge(n), o = [];
+		for (let t = 0, n = a.length; t < n; t++) {
+			let n = a[t], r = a[t + 1], s = ye(n, r), c = Array.isArray(s) ? s[0] : n;
+			if (c in i.#t) {
+				i = i.#t[c], s && o.push(s[1]);
+				continue;
+			}
+			i.#t[c] = new e(), s && (i.#n.push(s), o.push(s[1])), i = i.#t[c];
+		}
+		return i.#e.push({ [t]: {
+			handler: r,
+			possibleKeys: o.filter((e, t, n) => n.indexOf(e) === t),
+			score: this.#r
+		} }), i;
+	}
+	#a(e, t, n, r, i) {
+		for (let a = 0, o = t.#e.length; a < o; a++) {
+			let o = t.#e[a], s = o[n] || o.ALL, c = {};
+			if (s !== void 0 && (s.params = /* @__PURE__ */ Object.create(null), e.push(s), r !== P || i && i !== P)) for (let e = 0, t = s.possibleKeys.length; e < t; e++) {
+				let t = s.possibleKeys[e], n = c[s.score];
+				s.params[t] = i?.[t] && !n ? i[t] : r[t] ?? i?.[t], c[s.score] = !0;
+			}
+		}
+	}
+	search(e, t) {
+		let n = [];
+		this.#i = P;
+		let r = [this], i = he(t), a = [], o = i.length, s = null;
+		for (let c = 0; c < o; c++) {
+			let l = i[c], u = c === o - 1, d = [];
+			for (let f = 0, p = r.length; f < p; f++) {
+				let p = r[f], m = p.#t[l];
+				m && (m.#i = p.#i, u ? (m.#t["*"] && this.#a(n, m.#t["*"], e, p.#i), this.#a(n, m, e, p.#i)) : d.push(m));
+				for (let r = 0, f = p.#n.length; r < f; r++) {
+					let f = p.#n[r], m = p.#i === P ? {} : { ...p.#i };
+					if (f === "*") {
+						let t = p.#t["*"];
+						t && (this.#a(n, t, e, p.#i), t.#i = m, d.push(t));
+						continue;
+					}
+					let [h, g, _] = f;
+					if (!l && !(_ instanceof RegExp)) continue;
+					let v = p.#t[h];
+					if (_ instanceof RegExp) {
+						if (s === null) {
+							s = Array(o);
+							let e = t[0] === "/" ? 1 : 0;
+							for (let t = 0; t < o; t++) s[t] = e, e += i[t].length + 1;
+						}
+						let r = t.substring(s[c]), l = _.exec(r);
+						if (l) {
+							if (m[g] = l[0], this.#a(n, v, e, p.#i, m), rt(v.#t)) {
+								v.#i = m;
+								let e = l[0].match(/\//)?.length ?? 0;
+								(a[e] ||= []).push(v);
+							}
+							continue;
+						}
+					}
+					(_ === !0 || _.test(l)) && (m[g] = l, u ? (this.#a(n, v, e, m, p.#i), v.#t["*"] && this.#a(n, v.#t["*"], e, m, p.#i)) : (v.#i = m, d.push(v)));
+				}
+			}
+			let f = a.shift();
+			r = f ? d.concat(f) : d;
+		}
+		return n.length > 1 && n.sort((e, t) => e.score - t.score), [n.map(({ handler: e, params: t }) => [e, t])];
+	}
+}, at = class {
+	name = "TrieRouter";
+	#e;
+	constructor() {
+		this.#e = new it();
+	}
+	add(e, t, n) {
+		let r = we(t);
+		if (r) {
+			for (let t = 0, i = r.length; t < i; t++) this.#e.insert(e, r[t], n);
+			return;
+		}
+		this.#e.insert(e, t, n);
+	}
+	match(e, t) {
+		return this.#e.search(e, t);
+	}
+}, ot = class extends Ue {
+	constructor(e = {}) {
+		super(e), this.router = e.router ?? new nt({ routers: [new tt(), new at()] });
+	}
+};
+//#endregion
+//#region src/coordinator-invites.ts
+function st(e) {
+	let t = JSON.stringify(e), n = new TextEncoder().encode(t);
+	return Buffer.from(n).toString("base64url").replace(/=+$/, "");
+}
+function ct(e) {
+	let t = e + "=".repeat((4 - e.length % 4) % 4), n = Buffer.from(t, "base64url").toString("utf-8"), r = JSON.parse(n);
+	if (typeof r != "object" || !r) throw Error("invalid invite payload");
+	return r;
+}
+function lt(e) {
+	return `codemem://join?invite=${encodeURIComponent(e)}`;
+}
+function ut(e) {
+	let t = e.trim();
+	if (t.startsWith("codemem://")) {
+		let e = new URL(t).searchParams.get("invite") ?? "";
+		if (!e) throw Error("invite payload missing from link");
+		return e;
+	}
+	return t;
+}
+//#endregion
+//#region src/schema.ts
+var F = /* @__PURE__ */ se({
+	actors: () => Ot,
+	artifacts: () => dt,
+	memoryItems: () => ft,
+	opencodeSessions: () => gt,
+	rawEventFlushBatches: () => _t,
+	rawEventIngestSamples: () => z,
+	rawEventIngestStats: () => Dt,
+	rawEventSessions: () => ht,
+	rawEvents: () => mt,
+	replicationCursors: () => xt,
+	replicationOps: () => bt,
+	schema: () => kt,
+	sessionSummaries: () => yt,
+	sessions: () => I,
+	syncAttempts: () => Ct,
+	syncDaemonState: () => wt,
+	syncDevice: () => R,
+	syncNonces: () => L,
+	syncPeers: () => St,
+	syncResetState: () => Tt,
+	syncRetentionState: () => Et,
+	usageEvents: () => pt,
+	userPrompts: () => vt
+}), I = S("sessions", {
+	id: x("id").primaryKey(),
+	started_at: C("started_at").notNull(),
+	ended_at: C("ended_at"),
+	cwd: C("cwd"),
+	project: C("project"),
+	git_remote: C("git_remote"),
+	git_branch: C("git_branch"),
+	user: C("user"),
+	tool_version: C("tool_version"),
+	metadata_json: C("metadata_json"),
+	import_key: C("import_key")
+}), dt = S("artifacts", {
+	id: x("id").primaryKey(),
+	session_id: x("session_id").notNull().references(() => I.id, { onDelete: "cascade" }),
+	kind: C("kind").notNull(),
+	path: C("path"),
+	content_text: C("content_text"),
+	content_hash: C("content_hash"),
+	created_at: C("created_at").notNull(),
+	metadata_json: C("metadata_json")
+}, (e) => [b("idx_artifacts_session_kind").on(e.session_id, e.kind)]), ft = S("memory_items", {
+	id: x("id").primaryKey(),
+	session_id: x("session_id").notNull().references(() => I.id, { onDelete: "cascade" }),
+	kind: C("kind").notNull(),
+	title: C("title").notNull(),
+	subtitle: C("subtitle"),
+	body_text: C("body_text").notNull(),
+	confidence: re("confidence").default(.5),
+	tags_text: C("tags_text").default(""),
+	active: x("active").default(1),
+	created_at: C("created_at").notNull(),
+	updated_at: C("updated_at").notNull(),
+	metadata_json: C("metadata_json"),
+	actor_id: C("actor_id"),
+	actor_display_name: C("actor_display_name"),
+	visibility: C("visibility"),
+	workspace_id: C("workspace_id"),
+	workspace_kind: C("workspace_kind"),
+	origin_device_id: C("origin_device_id"),
+	origin_source: C("origin_source"),
+	trust_state: C("trust_state"),
+	facts: C("facts"),
+	narrative: C("narrative"),
+	concepts: C("concepts"),
+	files_read: C("files_read"),
+	files_modified: C("files_modified"),
+	user_prompt_id: x("user_prompt_id"),
+	prompt_number: x("prompt_number"),
+	deleted_at: C("deleted_at"),
+	rev: x("rev").default(0),
+	import_key: C("import_key")
+}, (e) => [b("idx_memory_items_active_created").on(e.active, e.created_at), b("idx_memory_items_session").on(e.session_id)]), pt = S("usage_events", {
+	id: x("id").primaryKey(),
+	session_id: x("session_id").references(() => I.id, { onDelete: "set null" }),
+	event: C("event").notNull(),
+	tokens_read: x("tokens_read").default(0),
+	tokens_written: x("tokens_written").default(0),
+	tokens_saved: x("tokens_saved").default(0),
+	created_at: C("created_at").notNull(),
+	metadata_json: C("metadata_json")
+}, (e) => [b("idx_usage_events_event_created").on(e.event, e.created_at), b("idx_usage_events_session").on(e.session_id)]), mt = S("raw_events", {
+	id: x("id").primaryKey(),
+	source: C("source").notNull().default("opencode"),
+	stream_id: C("stream_id").notNull().default(""),
+	opencode_session_id: C("opencode_session_id").notNull(),
+	event_id: C("event_id"),
+	event_seq: x("event_seq").notNull(),
+	event_type: C("event_type").notNull(),
+	ts_wall_ms: x("ts_wall_ms"),
+	ts_mono_ms: re("ts_mono_ms"),
+	payload_json: C("payload_json").notNull(),
+	created_at: C("created_at").notNull()
+}, (e) => [
+	ie("idx_raw_events_source_stream_seq").on(e.source, e.stream_id, e.event_seq),
+	ie("idx_raw_events_source_stream_event_id").on(e.source, e.stream_id, e.event_id),
+	b("idx_raw_events_session_seq").on(e.opencode_session_id, e.event_seq),
+	b("idx_raw_events_created").on(e.created_at)
+]), ht = S("raw_event_sessions", {
+	source: C("source").notNull().default("opencode"),
+	stream_id: C("stream_id").notNull().default(""),
+	opencode_session_id: C("opencode_session_id").notNull(),
+	cwd: C("cwd"),
+	project: C("project"),
+	started_at: C("started_at"),
+	last_seen_ts_wall_ms: x("last_seen_ts_wall_ms"),
+	last_received_event_seq: x("last_received_event_seq").notNull().default(-1),
+	last_flushed_event_seq: x("last_flushed_event_seq").notNull().default(-1),
+	updated_at: C("updated_at").notNull()
+}, (e) => [ne({ columns: [e.source, e.stream_id] })]), gt = S("opencode_sessions", {
+	source: C("source").notNull().default("opencode"),
+	stream_id: C("stream_id").notNull().default(""),
+	opencode_session_id: C("opencode_session_id").notNull(),
+	session_id: x("session_id").references(() => I.id, { onDelete: "cascade" }),
+	created_at: C("created_at").notNull()
+}, (e) => [ne({ columns: [e.source, e.stream_id] }), b("idx_opencode_sessions_session").on(e.session_id)]), _t = S("raw_event_flush_batches", {
+	id: x("id").primaryKey(),
+	source: C("source").notNull().default("opencode"),
+	stream_id: C("stream_id").notNull().default(""),
+	opencode_session_id: C("opencode_session_id").notNull(),
+	start_event_seq: x("start_event_seq").notNull(),
+	end_event_seq: x("end_event_seq").notNull(),
+	extractor_version: C("extractor_version").notNull(),
+	status: C("status").notNull(),
+	error_message: C("error_message"),
+	error_type: C("error_type"),
+	observer_provider: C("observer_provider"),
+	observer_model: C("observer_model"),
+	observer_runtime: C("observer_runtime"),
+	attempt_count: x("attempt_count").notNull().default(0),
+	created_at: C("created_at").notNull(),
+	updated_at: C("updated_at").notNull()
+}, (e) => [
+	ie("idx_flush_batches_source_stream_seq_ver").on(e.source, e.stream_id, e.start_event_seq, e.end_event_seq, e.extractor_version),
+	b("idx_flush_batches_session_created").on(e.opencode_session_id, e.created_at),
+	b("idx_flush_batches_status_updated").on(e.status, e.updated_at)
+]), vt = S("user_prompts", {
+	id: x("id").primaryKey(),
+	session_id: x("session_id").references(() => I.id, { onDelete: "cascade" }),
+	project: C("project"),
+	prompt_text: C("prompt_text").notNull(),
+	prompt_number: x("prompt_number"),
+	created_at: C("created_at").notNull(),
+	created_at_epoch: x("created_at_epoch").notNull(),
+	metadata_json: C("metadata_json"),
+	import_key: C("import_key")
+}, (e) => [
+	b("idx_user_prompts_session").on(e.session_id),
+	b("idx_user_prompts_project").on(e.project),
+	b("idx_user_prompts_epoch").on(e.created_at_epoch)
+]), yt = S("session_summaries", {
+	id: x("id").primaryKey(),
+	session_id: x("session_id").references(() => I.id, { onDelete: "cascade" }),
+	project: C("project"),
+	request: C("request"),
+	investigated: C("investigated"),
+	learned: C("learned"),
+	completed: C("completed"),
+	next_steps: C("next_steps"),
+	notes: C("notes"),
+	files_read: C("files_read"),
+	files_edited: C("files_edited"),
+	prompt_number: x("prompt_number"),
+	created_at: C("created_at").notNull(),
+	created_at_epoch: x("created_at_epoch").notNull(),
+	metadata_json: C("metadata_json"),
+	import_key: C("import_key")
+}, (e) => [
+	b("idx_session_summaries_session").on(e.session_id),
+	b("idx_session_summaries_project").on(e.project),
+	b("idx_session_summaries_epoch").on(e.created_at_epoch)
+]), bt = S("replication_ops", {
+	op_id: C("op_id").primaryKey(),
+	entity_type: C("entity_type").notNull(),
+	entity_id: C("entity_id").notNull(),
+	op_type: C("op_type").notNull(),
+	payload_json: C("payload_json"),
+	clock_rev: x("clock_rev").notNull(),
+	clock_updated_at: C("clock_updated_at").notNull(),
+	clock_device_id: C("clock_device_id").notNull(),
+	device_id: C("device_id").notNull(),
+	created_at: C("created_at").notNull()
+}, (e) => [b("idx_replication_ops_created").on(e.created_at, e.op_id), b("idx_replication_ops_entity").on(e.entity_type, e.entity_id)]), xt = S("replication_cursors", {
+	peer_device_id: C("peer_device_id").primaryKey(),
+	last_applied_cursor: C("last_applied_cursor"),
+	last_acked_cursor: C("last_acked_cursor"),
+	updated_at: C("updated_at").notNull()
+}), St = S("sync_peers", {
+	peer_device_id: C("peer_device_id").primaryKey(),
+	name: C("name"),
+	pinned_fingerprint: C("pinned_fingerprint"),
+	public_key: C("public_key"),
+	addresses_json: C("addresses_json"),
+	claimed_local_actor: x("claimed_local_actor").notNull().default(0),
+	actor_id: C("actor_id"),
+	projects_include_json: C("projects_include_json"),
+	projects_exclude_json: C("projects_exclude_json"),
+	created_at: C("created_at").notNull(),
+	last_seen_at: C("last_seen_at"),
+	last_sync_at: C("last_sync_at"),
+	last_error: C("last_error")
+}), L = S("sync_nonces", {
+	nonce: C("nonce").primaryKey(),
+	device_id: C("device_id").notNull(),
+	created_at: C("created_at").notNull()
+}), R = S("sync_device", {
+	device_id: C("device_id").primaryKey(),
+	public_key: C("public_key").notNull(),
+	fingerprint: C("fingerprint").notNull(),
+	created_at: C("created_at").notNull()
+}), Ct = S("sync_attempts", {
+	id: x("id").primaryKey({ autoIncrement: !0 }),
+	peer_device_id: C("peer_device_id").notNull(),
+	started_at: C("started_at").notNull(),
+	finished_at: C("finished_at"),
+	ok: x("ok").notNull(),
+	ops_in: x("ops_in").notNull(),
+	ops_out: x("ops_out").notNull(),
+	error: C("error")
+}, (e) => [b("idx_sync_attempts_peer_started").on(e.peer_device_id, e.started_at)]), wt = S("sync_daemon_state", {
+	id: x("id").primaryKey(),
+	last_error: C("last_error"),
+	last_traceback: C("last_traceback"),
+	last_error_at: C("last_error_at"),
+	last_ok_at: C("last_ok_at"),
+	phase: C("phase")
+}), Tt = S("sync_reset_state", {
+	id: x("id").primaryKey(),
+	generation: x("generation").notNull(),
+	snapshot_id: C("snapshot_id").notNull(),
+	baseline_cursor: C("baseline_cursor"),
+	retained_floor_cursor: C("retained_floor_cursor"),
+	updated_at: C("updated_at").notNull()
+}), Et = S("sync_retention_state", {
+	id: x("id").primaryKey(),
+	last_run_at: C("last_run_at"),
+	last_duration_ms: x("last_duration_ms"),
+	last_deleted_ops: x("last_deleted_ops").notNull().default(0),
+	last_estimated_bytes_before: x("last_estimated_bytes_before"),
+	last_estimated_bytes_after: x("last_estimated_bytes_after"),
+	retained_floor_cursor: C("retained_floor_cursor"),
+	last_error: C("last_error"),
+	last_error_at: C("last_error_at")
+}), z = S("raw_event_ingest_samples", {
+	id: x("id").primaryKey({ autoIncrement: !0 }),
+	created_at: C("created_at").notNull(),
+	inserted_events: x("inserted_events").notNull().default(0),
+	skipped_invalid: x("skipped_invalid").notNull().default(0),
+	skipped_duplicate: x("skipped_duplicate").notNull().default(0),
+	skipped_conflict: x("skipped_conflict").notNull().default(0)
+}), Dt = S("raw_event_ingest_stats", {
+	id: x("id").primaryKey(),
+	inserted_events: x("inserted_events").notNull().default(0),
+	skipped_events: x("skipped_events").notNull().default(0),
+	skipped_invalid: x("skipped_invalid").notNull().default(0),
+	skipped_duplicate: x("skipped_duplicate").notNull().default(0),
+	skipped_conflict: x("skipped_conflict").notNull().default(0),
+	updated_at: C("updated_at").notNull()
+}), Ot = S("actors", {
+	actor_id: C("actor_id").primaryKey(),
+	display_name: C("display_name").notNull(),
+	is_local: x("is_local").notNull().default(0),
+	status: C("status").notNull().default("active"),
+	merged_into_actor_id: C("merged_into_actor_id"),
+	created_at: C("created_at").notNull(),
+	updated_at: C("updated_at").notNull()
+}, (e) => ({
+	isLocalIdx: b("idx_actors_is_local").on(e.is_local),
+	statusIdx: b("idx_actors_status").on(e.status)
+})), kt = {
+	sessions: I,
+	artifacts: dt,
+	memoryItems: ft,
+	usageEvents: pt,
+	rawEvents: mt,
+	rawEventSessions: ht,
+	opencodeSessions: gt,
+	rawEventFlushBatches: _t,
+	userPrompts: vt,
+	sessionSummaries: yt,
+	replicationOps: bt,
+	replicationCursors: xt,
+	syncPeers: St,
+	syncNonces: L,
+	syncDevice: R,
+	syncAttempts: Ct,
+	syncDaemonState: wt,
+	syncResetState: Tt,
+	rawEventIngestSamples: z,
+	rawEventIngestStats: Dt,
+	actors: Ot
+};
+//#endregion
+//#region src/observer-config.ts
+function At(e) {
+	let t = [], n = !1, r = !1;
+	for (let i = 0; i < e.length; i++) {
+		let a = e.charAt(i);
+		if (r) {
+			t.push(a), r = !1;
+			continue;
+		}
+		if (a === "\\" && n) {
+			t.push(a), r = !0;
+			continue;
+		}
+		if (a === "\"") {
+			n = !n, t.push(a);
+			continue;
+		}
+		if (!n && a === "/" && i + 1 < e.length) {
+			let t = e.charAt(i + 1);
+			if (t === "/") {
+				let t = i + 2;
+				for (; t < e.length && e.charAt(t) !== "\n";) t++;
+				i = t - 1;
+				continue;
+			}
+			if (t === "*") {
+				let t = i + 2;
+				for (; t < e.length - 1;) {
+					if (e.charAt(t) === "*" && e.charAt(t + 1) === "/") {
+						t += 2;
+						break;
+					}
+					t++;
+				}
+				i = t - 1;
+				continue;
+			}
+		}
+		t.push(a);
+	}
+	return t.join("");
+}
+function jt(e) {
+	let t = [], n = !1, r = !1;
+	for (let i = 0; i < e.length; i++) {
+		let a = e.charAt(i);
+		if (r) {
+			t.push(a), r = !1;
+			continue;
+		}
+		if (a === "\\" && n) {
+			t.push(a), r = !0;
+			continue;
+		}
+		if (a === "\"") {
+			n = !n, t.push(a);
+			continue;
+		}
+		if (!n && a === ",") {
+			let t = i + 1;
+			for (; t < e.length && /\s/.test(e.charAt(t));) t++;
+			if (t < e.length && (e.charAt(t) === "]" || e.charAt(t) === "}")) continue;
+		}
+		t.push(a);
+	}
+	return t.join("");
+}
+function B() {
+	let e = _(h(), ".config", "opencode"), t = [_(e, "opencode.json"), _(e, "opencode.jsonc")].find((e) => l(e));
+	if (!t) return {};
+	let n;
+	try {
+		n = d(t, "utf-8");
+	} catch {
+		return {};
+	}
+	try {
+		return JSON.parse(n);
+	} catch {}
+	try {
+		let e = jt(At(n));
+		return JSON.parse(e);
+	} catch {
+		return {};
+	}
+}
+function V(e) {
+	return e.startsWith("~/") ? _(h(), e.slice(2)) : e;
+}
+var Mt = {
+	actor_id: "CODEMEM_ACTOR_ID",
+	actor_display_name: "CODEMEM_ACTOR_DISPLAY_NAME",
+	claude_command: "CODEMEM_CLAUDE_COMMAND",
+	observer_provider: "CODEMEM_OBSERVER_PROVIDER",
+	observer_model: "CODEMEM_OBSERVER_MODEL",
+	observer_base_url: "CODEMEM_OBSERVER_BASE_URL",
+	observer_runtime: "CODEMEM_OBSERVER_RUNTIME",
+	observer_auth_source: "CODEMEM_OBSERVER_AUTH_SOURCE",
+	observer_auth_file: "CODEMEM_OBSERVER_AUTH_FILE",
+	observer_auth_command: "CODEMEM_OBSERVER_AUTH_COMMAND",
+	observer_auth_timeout_ms: "CODEMEM_OBSERVER_AUTH_TIMEOUT_MS",
+	observer_auth_cache_ttl_s: "CODEMEM_OBSERVER_AUTH_CACHE_TTL_S",
+	observer_headers: "CODEMEM_OBSERVER_HEADERS",
+	observer_max_chars: "CODEMEM_OBSERVER_MAX_CHARS",
+	pack_observation_limit: "CODEMEM_PACK_OBSERVATION_LIMIT",
+	pack_session_limit: "CODEMEM_PACK_SESSION_LIMIT",
+	sync_enabled: "CODEMEM_SYNC_ENABLED",
+	sync_host: "CODEMEM_SYNC_HOST",
+	sync_port: "CODEMEM_SYNC_PORT",
+	sync_interval_s: "CODEMEM_SYNC_INTERVAL_S",
+	sync_mdns: "CODEMEM_SYNC_MDNS",
+	sync_advertise: "CODEMEM_SYNC_ADVERTISE",
+	sync_coordinator_url: "CODEMEM_SYNC_COORDINATOR_URL",
+	sync_coordinator_group: "CODEMEM_SYNC_COORDINATOR_GROUP",
+	sync_coordinator_groups: "CODEMEM_SYNC_COORDINATOR_GROUPS",
+	sync_coordinator_timeout_s: "CODEMEM_SYNC_COORDINATOR_TIMEOUT_S",
+	sync_coordinator_presence_ttl_s: "CODEMEM_SYNC_COORDINATOR_PRESENCE_TTL_S",
+	sync_coordinator_admin_secret: "CODEMEM_SYNC_COORDINATOR_ADMIN_SECRET",
+	sync_retention_enabled: "CODEMEM_SYNC_RETENTION_ENABLED",
+	sync_retention_max_age_days: "CODEMEM_SYNC_RETENTION_MAX_AGE_DAYS",
+	sync_retention_max_size_mb: "CODEMEM_SYNC_RETENTION_MAX_SIZE_MB",
+	sync_retention_interval_s: "CODEMEM_SYNC_RETENTION_INTERVAL_S",
+	sync_retention_max_runtime_ms: "CODEMEM_SYNC_RETENTION_MAX_RUNTIME_MS",
+	sync_retention_max_ops_per_pass: "CODEMEM_SYNC_RETENTION_MAX_OPS_PER_PASS",
+	sync_projects_include: "CODEMEM_SYNC_PROJECTS_INCLUDE",
+	sync_projects_exclude: "CODEMEM_SYNC_PROJECTS_EXCLUDE",
+	raw_events_sweeper_interval_s: "CODEMEM_RAW_EVENTS_SWEEPER_INTERVAL_S"
+};
+function Nt() {
+	let e = process.env.CODEMEM_CONFIG?.trim();
+	if (e) return V(e);
+	let t = _(h(), ".config", "codemem");
+	return [_(t, "config.json"), _(t, "config.jsonc")].find((e) => l(e)) ?? _(t, "config.json");
+}
+function Pt() {
+	let e = Nt();
+	if (!l(e)) return {};
+	let t;
+	try {
+		t = d(e, "utf-8");
+	} catch {
+		return {};
+	}
+	if (!t.trim()) return {};
+	try {
+		let e = JSON.parse(t);
+		return typeof e == "object" && e && !Array.isArray(e) ? e : {};
+	} catch {}
+	try {
+		let e = jt(At(t)), n = JSON.parse(e);
+		return typeof n == "object" && n && !Array.isArray(n) ? n : {};
+	} catch {
+		return {};
+	}
+}
+function Ft(e, t) {
+	let n = t ? V(t) : Nt();
+	return u(g(n), { recursive: !0 }), m(n, `${JSON.stringify(e, null, 2)}\n`, "utf8"), n;
+}
+function It() {
+	let e = {};
+	for (let [t, n] of Object.entries(Mt)) {
+		let r = process.env[n];
+		r != null && r !== "" && (e[t] = n);
+	}
+	return e;
+}
+function H(e) {
+	return typeof e == "object" && e && !Array.isArray(e) ? e : null;
+}
+function Lt(e) {
+	let t = H(B().provider);
+	return t ? H(t[e]) ?? {} : {};
+}
+function Rt() {
+	let e = H(B().provider);
+	return e ? new Set(Object.keys(e)) : /* @__PURE__ */ new Set();
+}
+var zt = new Set([
+	"openai",
+	"anthropic",
+	"opencode"
+]);
+function Bt(e) {
+	return typeof e != "string" || !e.includes("/") ? null : e.split("/")[0]?.trim().toLowerCase() || null;
+}
+function Vt() {
+	let e = Rt(), t = B();
+	for (let n of ["model", "small_model"]) {
+		let r = Bt(t[n]);
+		r && e.add(r);
+	}
+	return e;
+}
+function Ht() {
+	let e = Vt();
+	for (let t of zt) e.add(t);
+	return Array.from(e).sort((e, t) => e.localeCompare(t));
+}
+function Ut(e) {
+	let t = Bt(e);
+	return t && zt.has(t) ? t : null;
+}
+function Wt(e) {
+	return e === "openai" ? "gpt-5.1-codex-mini" : e === "anthropic" ? "claude-sonnet-4-20250514" : e === "opencode" ? "opencode/gpt-5.1-codex-mini" : null;
+}
+function Gt(e, t) {
+	if (e !== "opencode") return [
+		null,
+		t || Wt(e),
+		{}
+	];
+	let n = t || Wt(e) || "", r = `${e}/`;
+	return [
+		"https://opencode.ai/zen/v1",
+		(n.startsWith(r) ? n.slice(r.length) : n) || null,
+		{}
+	];
+}
+function Kt(e, t) {
+	if (!e || !e.includes("/")) return null;
+	let n = e.split("/")[0] ?? "";
+	return n && t.has(n) ? n : null;
+}
+function qt(e) {
+	return Yt(Jt(e));
+}
+function Jt(e) {
+	return e.replace(/\$\{([^}]+)\}|\$([A-Za-z_][A-Za-z0-9_]*)/g, (e, t, n) => {
+		let r = t ?? n;
+		return process.env[r] ?? e;
+	});
+}
+function Yt(e) {
+	return e.includes("{file:") ? e.replace(/\{file:([^}]+)\}/g, (e, t) => {
+		let n = t.trim();
+		if (!n) return e;
+		let r = Jt(n).replace(/^~/, h());
+		try {
+			return d(r, "utf-8").trim();
+		} catch {
+			return e;
+		}
+	}) : e;
+}
+function U(e) {
+	return H(e.options) ?? {};
+}
+function Xt(e) {
+	let t = U(e), n = t.baseURL || t.baseUrl || t.base_url || e.base_url;
+	return typeof n == "string" && n ? n : null;
+}
+function Zt(e) {
+	let t = H(U(e).headers);
+	if (!t) return {};
+	let n = {};
+	for (let [e, r] of Object.entries(t)) typeof e != "string" || typeof r != "string" || (n[e] = qt(r));
+	return n;
+}
+function Qt(e) {
+	let t = U(e), n = t.apiKey || e.apiKey;
+	if (typeof n == "string" && n) return qt(n);
+	let r = t.apiKeyEnv ?? t.api_key_env;
+	if (typeof r == "string" && r) {
+		let e = process.env[r];
+		if (e) return e;
+	}
+	return null;
+}
+function $t(e) {
+	let t = Lt(e), n = U(t), r = n.defaultModel ?? n.default_model ?? t.defaultModel ?? t.default_model;
+	if (typeof r == "string" && r) return r.startsWith(`${e}/`) ? r : `${e}/${r}`;
+	let i = H(t.models);
+	if (i) {
+		let t = Object.keys(i)[0];
+		if (typeof t == "string" && t) return `${e}/${t}`;
+	}
+	return null;
+}
+function en(e, t) {
+	let n = Lt(e), r = Xt(n), i = Zt(n), a = t;
+	a ||= $t(e) ?? "";
+	let o = `${e}/`, s = a.startsWith(o) ? a.slice(o.length) : a, c = H(n.models), l = s;
+	if (c) {
+		let e = H(c[s]);
+		e && typeof e.id == "string" && (l = e.id);
+	}
+	return (typeof l != "string" || !l) && (l = null), [
+		r,
+		l,
+		i
+	];
+}
+//#endregion
+//#region src/db.ts
+var tn = 6, nn = 6, rn = [
+	"memory_items",
+	"sessions",
+	"artifacts",
+	"raw_events",
+	"raw_event_sessions",
+	"usage_events"
+], W = _(h(), ".codemem", "mem.sqlite");
+function an(e) {
+	if (e) return V(e);
+	let t = process.env.CODEMEM_DB;
+	return t ? V(t) : W;
+}
+var on = [_(h(), ".codemem.sqlite"), _(h(), ".opencode-mem.sqlite")], sn = ["-wal", "-shm"];
+function cn(e, t) {
+	u(g(t), { recursive: !0 });
+	let n = [[e, t], ...sn.map((n) => [e + n, t + n])];
+	for (let [e, t] of n) if (l(e)) try {
+		f(e, t);
+	} catch {
+		try {
+			c(e, t);
+			try {
+				p(e);
+			} catch {}
+		} catch (e) {
+			if (l(t)) continue;
+			throw e;
+		}
+	}
+}
+function ln(e) {
+	if (e === W && !l(e)) {
+		for (let t of on) if (l(t)) {
+			cn(t, e);
+			return;
+		}
+	}
+}
+function un(e = W) {
+	ln(e), u(g(e), { recursive: !0 });
+	let t = new v(e);
+	t.pragma("foreign_keys = ON"), t.pragma("busy_timeout = 5000");
+	let n = t.pragma("journal_mode = WAL", { simple: !0 });
+	return n.toLowerCase() !== "wal" && console.warn(`Failed to enable WAL mode (got ${n}). Concurrent access may not work correctly.`), t.pragma("synchronous = NORMAL"), t;
+}
+function dn(e) {
+	try {
+		return !!e.prepare("SELECT 1 FROM sqlite_stat1 LIMIT 1").pluck().get();
+	} catch {
+		return !1;
+	}
+}
+function fn(e) {
+	e.pragma("optimize"), !dn(e) && (!G(e, "memory_items") || !G(e, "memory_fts") || (e.exec("ANALYZE"), e.pragma("optimize")));
+}
+function pn(e) {
+	if (!mn() && (ae.load(e), !e.prepare("SELECT vec_version() AS v").get()?.v)) throw Error("sqlite-vec loaded but version check failed");
+}
+function mn() {
+	let e = process.env.CODEMEM_EMBEDDING_DISABLED?.toLowerCase();
+	return e === "1" || e === "true" || e === "yes";
+}
+function hn(e) {
+	let t = e.pragma("user_version", { simple: !0 });
+	return typeof t == "number" ? t : 0;
+}
+function gn(e) {
+	let t = hn(e);
+	if (t === 0) throw Error("Database schema is not initialized. Initialize the SQLite database with the current TypeScript runtime before retrying.");
+	if (t < 6) throw Error(`Database schema version ${t} is older than minimum compatible (6). Upgrade the database schema with the current TypeScript runtime before retrying.`);
+	t > 6 && console.warn(`Database schema version ${t} is newer than this TS runtime (6). Running in compatibility mode — additive schema changes are tolerated.`);
+	let n = rn.filter((t) => !G(e, t));
+	if (n.length > 0) throw Error(`Required tables missing: ${n.join(", ")}. The database may be corrupt or from an incompatible version.`);
+	if (!G(e, "memory_fts")) throw Error("FTS5 index (memory_fts) is missing. Rebuild the database schema with the current TypeScript runtime before retrying.");
+}
+function G(e, t) {
+	return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(t) !== void 0;
+}
+function _n(e, t, n) {
+	return G(e, t) ? e.prepare("SELECT 1 FROM pragma_table_info(?) WHERE name = ? LIMIT 1").get(t, n) !== void 0 : !1;
+}
+function vn(e) {
+	try {
+		e.exec("\n			CREATE TABLE IF NOT EXISTS sync_reset_state (\n				id INTEGER PRIMARY KEY,\n				generation INTEGER NOT NULL,\n				snapshot_id TEXT NOT NULL,\n				baseline_cursor TEXT,\n				retained_floor_cursor TEXT,\n				updated_at TEXT NOT NULL\n			)\n		");
+	} catch {}
+	if (G(e, "sync_daemon_state") && !_n(e, "sync_daemon_state", "phase")) try {
+		e.exec("ALTER TABLE sync_daemon_state ADD COLUMN phase TEXT");
+	} catch {}
+	if (G(e, "raw_event_flush_batches")) {
+		for (let { name: t, ddl: n } of [
+			{
+				name: "error_message",
+				ddl: "TEXT"
+			},
+			{
+				name: "error_type",
+				ddl: "TEXT"
+			},
+			{
+				name: "observer_provider",
+				ddl: "TEXT"
+			},
+			{
+				name: "observer_model",
+				ddl: "TEXT"
+			},
+			{
+				name: "observer_runtime",
+				ddl: "TEXT"
+			},
+			{
+				name: "attempt_count",
+				ddl: "INTEGER NOT NULL DEFAULT 0"
+			}
+		]) if (!_n(e, "raw_event_flush_batches", t)) try {
+			e.exec(`ALTER TABLE raw_event_flush_batches ADD COLUMN ${t} ${n}`);
+		} catch (n) {
+			if ((n instanceof Error ? n.message.toLowerCase() : "").includes("duplicate column name") && _n(e, "raw_event_flush_batches", t)) continue;
+			throw n;
+		}
+	}
+}
+function yn(e) {
+	if (!e) return {};
+	try {
+		let t = JSON.parse(e);
+		return typeof t != "object" || !t || Array.isArray(t) ? {} : t;
+	} catch {
+		return console.warn(`[codemem] fromJson: invalid JSON (${e.slice(0, 80)}...)`), {};
+	}
+}
+function bn(e) {
+	if (!e) return {};
+	let t = JSON.parse(e);
+	if (typeof t != "object" || !t || Array.isArray(t)) throw Error(`fromJsonStrict: expected object, got ${Array.isArray(t) ? "array" : typeof t}`);
+	return t;
+}
+function xn(e) {
+	return e == null ? "{}" : JSON.stringify(e);
+}
+function Sn(e) {
+	return e == null || typeof e == "object" && !Array.isArray(e) && Object.keys(e).length === 0 ? null : JSON.stringify(e);
+}
+//#endregion
+//#region src/sync-identity.ts
+var Cn = _(h(), ".config", "codemem", "keys"), wn = "device.key", Tn = "device.key.pub", K = "codemem-sync";
+function En(t) {
+	return e("sha256").update(t, "utf-8").digest("hex");
+}
+function q() {
+	return process.env.CODEMEM_SYNC_KEY_STORE?.toLowerCase() === "keychain" ? "keychain" : "file";
+}
+function J(e) {
+	try {
+		return w("which", [e], { stdio: "pipe" }), !0;
+	} catch {
+		return !1;
+	}
+}
+function Dn() {
+	process.platform === "darwin" && q() === "keychain" && process.env.CODEMEM_SYNC_KEYCHAIN_WARN !== "0" && console.warn("[codemem] keychain storage on macOS uses the `security` CLI and may expose the key in process arguments.");
+}
+function On(e, t) {
+	if (process.platform === "linux") {
+		if (!J("secret-tool")) return !1;
+		try {
+			return w("secret-tool", [
+				"store",
+				"--label",
+				"codemem sync key",
+				"service",
+				K,
+				"account",
+				t
+			], {
+				input: e,
+				stdio: [
+					"pipe",
+					"pipe",
+					"pipe"
+				]
+			}), !0;
+		} catch {
+			return !1;
+		}
+	}
+	if (process.platform === "darwin") {
+		if (!J("security")) return !1;
+		try {
+			return w("security", [
+				"add-generic-password",
+				"-a",
+				t,
+				"-s",
+				K,
+				"-w",
+				e.toString("utf-8"),
+				"-U"
+			], { stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			] }), !0;
+		} catch {
+			return !1;
+		}
+	}
+	return !1;
+}
+function kn(e) {
+	if (process.platform === "linux") {
+		if (!J("secret-tool")) return null;
+		try {
+			let t = w("secret-tool", [
+				"lookup",
+				"service",
+				K,
+				"account",
+				e
+			], { stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			] });
+			return Buffer.from(t);
+		} catch {
+			return null;
+		}
+	}
+	if (process.platform === "darwin") {
+		if (!J("security")) return null;
+		try {
+			let t = w("security", [
+				"find-generic-password",
+				"-a",
+				e,
+				"-s",
+				K,
+				"-w"
+			], { stdio: [
+				"pipe",
+				"pipe",
+				"pipe"
+			] });
+			return Buffer.from(t);
+		} catch {
+			return null;
+		}
+	}
+	return null;
+}
+function Y(e) {
+	let t = e ?? Cn;
+	return [_(t, wn), _(t, Tn)];
+}
+function An(e) {
+	let [, t] = Y(e);
+	return l(t) && d(t, "utf-8").trim() || null;
+}
+function jn(e, t) {
+	if (q() === "keychain") {
+		let e = Mn(t);
+		if (e) {
+			let t = kn(e);
+			if (t) return t;
+		}
+	}
+	let [n] = Y(e);
+	return l(n) ? d(n) : null;
+}
+function Mn(e) {
+	let t = an(e);
+	if (!l(t)) return null;
+	let n = un(t);
+	try {
+		return y(n, { schema: F }).select({ device_id: R.device_id }).from(R).limit(1).get()?.device_id ?? null;
+	} finally {
+		n.close();
+	}
+}
+function Nn(e) {
+	let t = e.trim();
+	return t.startsWith("ssh-ed25519 ") || t.startsWith("ssh-rsa ") || t.startsWith("ecdsa-");
+}
+function Pn(e, t) {
+	l(e) && f(e, e.replace(/([^/]+)$/, `$1.invalid-${t}`));
+}
+function Fn(e, t) {
+	if (u(g(e), { recursive: !0 }), l(e) && l(t)) return;
+	if (l(e) && !l(t)) {
+		try {
+			let r = In(n(Ln(e)).export({
+				type: "spki",
+				format: "der"
+			}));
+			if (r && Nn(r)) {
+				m(t, `${r}\n`, { mode: 420 });
+				return;
+			}
+		} catch {}
+		f(e, `${e}.orphan-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "")}`);
+	}
+	let { publicKey: i, privateKey: a } = r("ed25519");
+	m(e, a.export({
+		type: "pkcs8",
+		format: "pem"
+	}), { mode: 384 });
+	let o = In(i.export({
+		type: "spki",
+		format: "der"
+	}));
+	if (!o) throw Error("failed to convert public key to SSH format");
+	m(t, `${o}\n`, { mode: 420 });
+}
+function In(e) {
+	if (e.length < 32) return null;
+	let t = e.subarray(e.length - 32), n = Buffer.from("ssh-ed25519"), r = Buffer.alloc(4 + n.length + 4 + t.length), i = 0;
+	return r.writeUInt32BE(n.length, i), i += 4, n.copy(r, i), i += n.length, r.writeUInt32BE(t.length, i), i += 4, t.copy(r, i), `ssh-ed25519 ${r.toString("base64")}`;
+}
+function Ln(e) {
+	let n = d(e);
+	try {
+		return t(n);
+	} catch {
+		return t({
+			key: n,
+			format: "pem",
+			type: "pkcs8"
+		});
+	}
+}
+function Rn(e, t) {
+	if (!l(e) || !l(t)) return !1;
+	let r = d(t, "utf-8").trim();
+	if (!r || !Nn(r)) return !1;
+	try {
+		let i = In(n(Ln(e)).export({
+			type: "spki",
+			format: "der"
+		}));
+		return !i || !Nn(i) ? !1 : (i !== r && m(t, `${i}\n`, "utf-8"), !0);
+	} catch {
+		return !1;
+	}
+}
+function zn(e, t) {
+	let [n, r] = Y(t?.keysDir ?? Cn);
+	Dn();
+	let i = y(e, { schema: F }), o = i.select({
+		device_id: R.device_id,
+		public_key: R.public_key,
+		fingerprint: R.fingerprint
+	}).from(R).limit(1).get(), s = o?.device_id ?? "", c = o?.public_key ?? "", u = o?.fingerprint ?? "", f = l(n) && l(r);
+	if (f && !Rn(n, r)) {
+		let e = (/* @__PURE__ */ new Date()).toISOString().replace(/[-:T.Z]/g, "").slice(0, 20);
+		Pn(n, e), Pn(r, e), f = !1;
+	}
+	f || Fn(n, r);
+	let p = d(r, "utf-8").trim();
+	if (!p) throw Error("public key missing");
+	let m = En(p), h = (/* @__PURE__ */ new Date()).toISOString();
+	if (s) {
+		if ((c !== p || u !== m) && i.update(R).set({
+			public_key: p,
+			fingerprint: m
+		}).where(ee(R.device_id, s)).run(), q() === "keychain") {
+			let e = l(n) ? d(n) : kn(s);
+			e && On(e, s);
+		}
+		return [s, m];
+	}
+	let g = t?.deviceId ?? a();
+	if (i.insert(R).values({
+		device_id: g,
+		public_key: p,
+		fingerprint: m,
+		created_at: h
+	}).run(), q() === "keychain") {
+		let e = l(n) ? d(n) : null;
+		e && On(e, g);
+	}
+	return [g, m];
+}
+//#endregion
+//#region src/sync-auth.ts
+var Bn = "v2", Vn = 300;
+function X(t, n, r, i, a) {
+	let o = e("sha256").update(a).digest("hex"), s = [
+		t.toUpperCase(),
+		n,
+		r,
+		i,
+		o
+	].join("\n");
+	return Buffer.from(s, "utf-8");
+}
+function Hn(e) {
+	let n = e.timestamp ?? String(Math.floor(Date.now() / 1e3)), r = e.nonce ?? i(16).toString("hex"), a = new URL(e.url), s = a.pathname || "/";
+	a.search && (s = `${s}${a.search}`);
+	let c = X(e.method, s, n, r, e.bodyBytes), l = jn(e.keysDir);
+	if (!l) throw Error("private key missing");
+	let u;
+	try {
+		u = t(l);
+	} catch {
+		u = t({
+			key: l,
+			format: "pem",
+			type: "pkcs8"
+		});
+	}
+	let d = o(null, c, u).toString("base64");
+	return {
+		"X-Opencode-Timestamp": n,
+		"X-Opencode-Nonce": r,
+		"X-Opencode-Signature": `v2:${d}`
+	};
+}
+function Un(e) {
+	let t = e.timeWindowS ?? 300;
+	if (!/^\d+$/.test(e.timestamp)) return !1;
+	let n = Number.parseInt(e.timestamp, 10);
+	if (Number.isNaN(n)) return !1;
+	let r = Math.floor(Date.now() / 1e3);
+	if (Math.abs(r - n) > t) return !1;
+	let i = ["v1", "v2"], a = e.signature.indexOf(":");
+	if (a < 1) return !1;
+	let o = e.signature.slice(0, a);
+	if (!i.includes(o)) return !1;
+	let c = e.signature.slice(a + 1);
+	if (!c) return !1;
+	let l;
+	try {
+		if (l = Buffer.from(c, "base64"), l.toString("base64") !== c) return !1;
+	} catch {
+		return !1;
+	}
+	let u = X(e.method, e.pathWithQuery, e.timestamp, e.nonce, e.bodyBytes);
+	try {
+		return s(null, u, Wn(e.publicKey), l);
+	} catch {
+		return !1;
+	}
+}
+function Wn(e) {
+	let t = e.trim().split(/\s+/);
+	if (t.length < 2 || t[0] !== "ssh-ed25519") throw Error("not an ssh-ed25519 key");
+	let r = Buffer.from(t[1], "base64");
+	if (r.length < 4) throw Error("truncated wire format");
+	let i = 4 + r.readUInt32BE(0);
+	if (r.length < i + 4) throw Error("truncated wire format");
+	let a = r.readUInt32BE(i), o = i + 4;
+	if (r.length < o + a) throw Error("truncated wire format");
+	let s = r.subarray(o, o + a);
+	if (s.length !== 32) throw Error(`unexpected Ed25519 key length: ${s.length}`);
+	let c = Buffer.from("302a300506032b6570032100", "hex");
+	return n({
+		key: Buffer.concat([c, s]),
+		format: "der",
+		type: "spki"
+	});
+}
+function Gn(e) {
+	return {
+		"X-Opencode-Device": e.deviceId,
+		...Hn({
+			method: e.method,
+			url: e.url,
+			bodyBytes: e.bodyBytes,
+			keysDir: e.keysDir,
+			timestamp: e.timestamp,
+			nonce: e.nonce
+		})
+	};
+}
+function Kn(e, t, n, r) {
+	let i = y(e, { schema: F });
+	try {
+		return i.insert(L).values({
+			nonce: n,
+			device_id: t,
+			created_at: r
+		}).run(), !0;
+	} catch (e) {
+		if (e instanceof Error && e.message.includes("UNIQUE constraint failed")) return !1;
+		throw e;
+	}
+}
+function qn(e, t) {
+	y(e, { schema: F }).delete(L).where(te(L.created_at, t)).run();
+}
+//#endregion
+//#region src/coordinator-api.ts
+var Z = 64 * 1024, Q = "X-Codemem-Coordinator-Admin";
+function Jn() {
+	return (process.env.CODEMEM_SYNC_COORDINATOR_ADMIN_SECRET ?? "").trim() || null;
+}
+function $(e, t) {
+	let n = t.adminSecret();
+	if (!n) return {
+		ok: !1,
+		error: "admin_not_configured"
+	};
+	let r = (e ?? "").trim();
+	return r ? r === n ? {
+		ok: !0,
+		error: "ok"
+	} : {
+		ok: !1,
+		error: "invalid_admin_secret"
+	} : {
+		ok: !1,
+		error: "missing_admin_header"
+	};
+}
+function Yn(e) {
+	let t = new URL(e);
+	return t.search ? `${t.pathname}${t.search}` : t.pathname;
+}
+async function Xn(e, t, n, r) {
+	return await e.recordNonce(t, n, r);
+}
+async function Zn(e, t) {
+	await e.cleanupNonces(t);
+}
+async function Qn(e, t, n) {
+	let { deviceId: r, signature: i, timestamp: a, nonce: o } = n;
+	if (!r || !i || !a || !o) return {
+		ok: !1,
+		error: "missing_headers",
+		enrollment: null
+	};
+	let s = await e.getEnrollment(n.groupId, r);
+	if (!s) return {
+		ok: !1,
+		error: "unknown_device",
+		enrollment: null
+	};
+	let c;
+	try {
+		c = Un({
+			method: n.method,
+			pathWithQuery: Yn(n.url),
+			bodyBytes: n.body,
+			timestamp: a,
+			nonce: o,
+			signature: i,
+			publicKey: String(s.public_key),
+			deviceId: r
+		});
+	} catch {
+		return {
+			ok: !1,
+			error: "signature_verification_error",
+			enrollment: null
+		};
+	}
+	if (!c) return {
+		ok: !1,
+		error: "invalid_signature",
+		enrollment: null
+	};
+	let l = t.now();
+	return await Xn(e, r, o, l) ? (await Zn(e, (/* @__PURE__ */ new Date(new Date(l).getTime() - 300 * 2 * 1e3)).toISOString()), {
+		ok: !0,
+		error: "ok",
+		enrollment: s
+	}) : {
+		ok: !1,
+		error: "nonce_replay",
+		enrollment: null
+	};
+}
+function $n(e) {
+	let t = e?.runtime ?? {
+		adminSecret: Jn,
+		now: () => (/* @__PURE__ */ new Date()).toISOString()
+	};
+	if (!e?.storeFactory) throw Error("createCoordinatorApp requires a storeFactory.");
+	let n = e.storeFactory, r = new ot();
+	return r.post("/v1/presence", async (e) => {
+		let r = Buffer.from(await e.req.arrayBuffer());
+		if (r.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let i;
+		try {
+			if (i = JSON.parse(r.toString("utf-8")), typeof i != "object" || !i || Array.isArray(i)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let a = String(i.group_id ?? "").trim();
+		if (!a) return e.json({ error: "group_id_required" }, 400);
+		let o = n();
+		try {
+			let n = await Qn(o, t, {
+				method: e.req.method,
+				url: e.req.url,
+				groupId: a,
+				body: r,
+				deviceId: e.req.header("X-Opencode-Device") ?? null,
+				signature: e.req.header("X-Opencode-Signature") ?? null,
+				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
+				nonce: e.req.header("X-Opencode-Nonce") ?? null
+			});
+			if (!n.ok || !n.enrollment) return e.json({ error: n.error }, 401);
+			if (i.fingerprint && String(i.fingerprint) !== String(n.enrollment.fingerprint)) return e.json({ error: "fingerprint_mismatch" }, 401);
+			let s = i.addresses ?? [];
+			if (!Array.isArray(s) || !s.every((e) => typeof e == "string")) return e.json({ error: "addresses_must_be_list_of_strings" }, 400);
+			let c;
+			try {
+				if (c = Math.max(1, Number.parseInt(String(i.ttl_s ?? 180), 10)), Number.isNaN(c)) return e.json({ error: "ttl_s_must_be_int" }, 400);
+			} catch {
+				return e.json({ error: "ttl_s_must_be_int" }, 400);
+			}
+			let l = await o.upsertPresence({
+				groupId: a,
+				deviceId: String(n.enrollment.device_id),
+				addresses: s,
+				ttlS: c,
+				capabilities: typeof i.capabilities == "object" && i.capabilities !== null && !Array.isArray(i.capabilities) ? i.capabilities : void 0
+			});
+			return e.json({
+				ok: !0,
+				...l
+			});
+		} finally {
+			await o.close();
+		}
+	}), r.get("/v1/peers", async (e) => {
+		let r = (e.req.query("group_id") ?? "").trim();
+		if (!r) return e.json({ error: "group_id_required" }, 400);
+		let i = n();
+		try {
+			let n = await Qn(i, t, {
+				method: e.req.method,
+				url: e.req.url,
+				groupId: r,
+				body: Buffer.alloc(0),
+				deviceId: e.req.header("X-Opencode-Device") ?? null,
+				signature: e.req.header("X-Opencode-Signature") ?? null,
+				timestamp: e.req.header("X-Opencode-Timestamp") ?? null,
+				nonce: e.req.header("X-Opencode-Nonce") ?? null
+			});
+			if (!n.ok || !n.enrollment) return e.json({ error: n.error }, 401);
+			let a = await i.listGroupPeers(r, String(n.enrollment.device_id));
+			return e.json({ items: a });
+		} finally {
+			await i.close();
+		}
+	}), r.post("/v1/admin/devices", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = Buffer.from(await e.req.arrayBuffer());
+		if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let a;
+		try {
+			if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let o = String(a.group_id ?? "").trim(), s = String(a.device_id ?? "").trim(), c = String(a.fingerprint ?? "").trim(), l = String(a.public_key ?? "").trim(), u = String(a.display_name ?? "").trim() || null;
+		if (!o || !s || !c || !l) return e.json({ error: "group_id_device_id_fingerprint_public_key_required" }, 400);
+		let d = n();
+		try {
+			await d.createGroup(o), await d.enrollDevice(o, {
+				deviceId: s,
+				fingerprint: c,
+				publicKey: l,
+				displayName: u
+			});
+		} finally {
+			await d.close();
+		}
+		return e.json({ ok: !0 });
+	}), r.get("/v1/admin/devices", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = (e.req.query("group_id") ?? "").trim();
+		if (!i) return e.json({ error: "group_id_required" }, 400);
+		let a = [
+			"1",
+			"true",
+			"yes"
+		].includes((e.req.query("include_disabled") ?? "0").trim().toLowerCase()), o = n();
+		try {
+			return e.json({ items: await o.listEnrolledDevices(i, a) });
+		} finally {
+			await o.close();
+		}
+	}), r.post("/v1/admin/devices/rename", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = Buffer.from(await e.req.arrayBuffer());
+		if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let a;
+		try {
+			if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let o = String(a.group_id ?? "").trim(), s = String(a.device_id ?? "").trim(), c = String(a.display_name ?? "").trim();
+		if (!o || !s) return e.json({ error: "group_id_and_device_id_required" }, 400);
+		if (!c) return e.json({ error: "display_name_required" }, 400);
+		let l = n();
+		try {
+			return await l.renameDevice(o, s, c) ? e.json({ ok: !0 }) : e.json({ error: "device_not_found" }, 404);
+		} finally {
+			await l.close();
+		}
+	}), r.post("/v1/admin/devices/disable", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = Buffer.from(await e.req.arrayBuffer());
+		if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let a;
+		try {
+			if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let o = String(a.group_id ?? "").trim(), s = String(a.device_id ?? "").trim();
+		if (!o || !s) return e.json({ error: "group_id_and_device_id_required" }, 400);
+		let c = n();
+		try {
+			return await c.setDeviceEnabled(o, s, !1) ? e.json({ ok: !0 }) : e.json({ error: "device_not_found" }, 404);
+		} finally {
+			await c.close();
+		}
+	}), r.post("/v1/admin/devices/remove", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = Buffer.from(await e.req.arrayBuffer());
+		if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let a;
+		try {
+			if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let o = String(a.group_id ?? "").trim(), s = String(a.device_id ?? "").trim();
+		if (!o || !s) return e.json({ error: "group_id_and_device_id_required" }, 400);
+		let c = n();
+		try {
+			return await c.removeDevice(o, s) ? e.json({ ok: !0 }) : e.json({ error: "device_not_found" }, 404);
+		} finally {
+			await c.close();
+		}
+	}), r.post("/v1/admin/invites", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = Buffer.from(await e.req.arrayBuffer());
+		if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let a;
+		try {
+			if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let o = String(a.group_id ?? "").trim(), s = String(a.policy ?? "auto_admit").trim(), c = String(a.expires_at ?? "").trim(), l = String(a.created_by ?? "").trim() || null;
+		if (!o || !["auto_admit", "approval_required"].includes(s) || !c) return e.json({ error: "group_id_policy_and_expires_at_required" }, 400);
+		let u = n();
+		try {
+			if (!await u.getGroup(o)) return e.json({ error: "group_not_found" }, 404);
+			let t = await u.createInvite({
+				groupId: o,
+				policy: s,
+				expiresAt: c,
+				createdBy: l
+			}), n = {
+				v: 1,
+				kind: "coordinator_team_invite",
+				coordinator_url: String(a.coordinator_url ?? "").trim(),
+				group_id: o,
+				policy: s,
+				token: String(t.token ?? ""),
+				expires_at: c,
+				team_name: t.team_name_snapshot ?? null
+			}, r = st(n), { token: i, ...d } = t;
+			return e.json({
+				ok: !0,
+				invite: d,
+				payload: n,
+				encoded: r,
+				link: lt(r)
+			});
+		} finally {
+			await u.close();
+		}
+	}), r.get("/v1/admin/invites", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = (e.req.query("group_id") ?? "").trim();
+		if (!i) return e.json({ error: "group_id_required" }, 400);
+		let a = n();
+		try {
+			let t = (await a.listInvites(i)).map(({ token: e, ...t }) => t);
+			return e.json({ items: t });
+		} finally {
+			await a.close();
+		}
+	}), r.post("/v1/admin/join-requests/approve", async (e) => er(e, !0, {
+		createStore: n,
+		runtime: t
+	})), r.post("/v1/admin/join-requests/deny", async (e) => er(e, !1, {
+		createStore: n,
+		runtime: t
+	})), r.get("/v1/admin/join-requests", async (e) => {
+		let r = $(e.req.header(Q), t);
+		if (!r.ok) return e.json({ error: r.error }, 401);
+		let i = (e.req.query("group_id") ?? "").trim();
+		if (!i) return e.json({ error: "group_id_required" }, 400);
+		let a = n();
+		try {
+			return e.json({ items: await a.listJoinRequests(i) });
+		} finally {
+			await a.close();
+		}
+	}), r.post("/v1/join", async (e) => {
+		let r = Buffer.from(await e.req.arrayBuffer());
+		if (r.length > Z) return e.json({ error: "body_too_large" }, 413);
+		let i;
+		try {
+			if (i = JSON.parse(r.toString("utf-8")), typeof i != "object" || !i || Array.isArray(i)) return e.json({ error: "invalid_json" }, 400);
+		} catch {
+			return e.json({ error: "invalid_json" }, 400);
+		}
+		let a = String(i.token ?? "").trim(), o = String(i.device_id ?? "").trim(), s = String(i.fingerprint ?? "").trim(), c = String(i.public_key ?? "").trim(), l = String(i.display_name ?? "").trim() || null;
+		if (!a || !o || !s || !c) return e.json({ error: "token_device_id_fingerprint_public_key_required" }, 400);
+		let u = n();
+		try {
+			let n = await u.getInviteByToken(a);
+			if (!n) return e.json({ error: "invalid_token" }, 404);
+			if (n.revoked_at) return e.json({ error: "revoked_token" }, 400);
+			let r = String(n.expires_at ?? "");
+			if (r && new Date(r.replace("Z", "+00:00")) <= new Date(t.now())) return e.json({ error: "expired_token" }, 400);
+			let i = String(n.group_id);
+			if (await u.getEnrollment(i, o)) return e.json({
+				ok: !0,
+				status: "already_enrolled",
+				group_id: n.group_id,
+				policy: n.policy
+			});
+			let d = String(n.policy);
+			if (!["auto_admit", "approval_required"].includes(d)) return e.json({ error: `unknown invite policy: ${d}` }, 400);
+			if (d === "approval_required") {
+				let t = await u.createJoinRequest({
+					groupId: i,
+					deviceId: o,
+					publicKey: c,
+					fingerprint: s,
+					displayName: l,
+					token: a
+				});
+				return e.json({
+					ok: !0,
+					status: "pending",
+					group_id: n.group_id,
+					policy: n.policy,
+					request_id: t.request_id
+				});
+			}
+			return await u.enrollDevice(i, {
+				deviceId: o,
+				fingerprint: s,
+				publicKey: c,
+				displayName: l
+			}), e.json({
+				ok: !0,
+				status: "enrolled",
+				group_id: n.group_id,
+				policy: n.policy
+			});
+		} finally {
+			await u.close();
+		}
+	}), r;
+}
+async function er(e, t, n) {
+	let r = $(e.req.header(Q), n.runtime);
+	if (!r.ok) return e.json({ error: r.error }, 401);
+	let i = Buffer.from(await e.req.arrayBuffer());
+	if (i.length > Z) return e.json({ error: "body_too_large" }, 413);
+	let a;
+	try {
+		if (a = JSON.parse(i.toString("utf-8")), typeof a != "object" || !a || Array.isArray(a)) return e.json({ error: "invalid_json" }, 400);
+	} catch {
+		return e.json({ error: "invalid_json" }, 400);
+	}
+	let o = String(a.request_id ?? "").trim(), s = String(a.reviewed_by ?? "").trim() || null;
+	if (!o) return e.json({ error: "request_id_required" }, 400);
+	let c = n.createStore();
+	try {
+		let n = await c.reviewJoinRequest({
+			requestId: o,
+			approved: t,
+			reviewedBy: s
+		});
+		return n ? n._no_transition ? e.json({
+			error: "request_not_pending",
+			status: n.status
+		}, 409) : e.json({
+			ok: !0,
+			request: n
+		}) : e.json({ error: "request_not_found" }, 404);
+	} finally {
+		await c.close();
+	}
+}
+//#endregion
+export { $t as $, pn as A, lt as At, Lt as B, un as C, Tt as Ct, bn as D, ct as Dt, yn as E, vt as Et, Sn as F, Vt as G, Xt as H, Mt as I, B as J, Rt as K, V as L, an as M, G as N, hn as O, st as Ot, xn as P, Gt as Q, Nt as R, gn as S, St, fn as T, pt as Tt, Zt as U, Qt as V, U as W, Wt as X, Pt as Y, Ut as Z, On as _, yt as _t, X as a, Ft as at, nn as b, wt as bt, Hn as c, ft as ct, En as d, Dt as dt, Kt as et, Fn as f, ht as ft, Y as g, F as gt, An as h, bt as ht, Gn as i, jt as it, ln as j, se as jt, mn as k, ut as kt, Un as l, _t as lt, kn as m, xt as mt, Vn as n, qt as nt, qn as o, Ot as ot, jn as p, mt as pt, Ht as q, Bn as r, At as rt, Kn as s, dt as st, $n as t, en as tt, zn as u, z as ut, Rn as v, I as vt, vn as w, Et as wt, tn as x, R as xt, W as y, Ct as yt, It as z };
+
+//# sourceMappingURL=coordinator-api-By9BNOCL.js.map