@creezio/electron-shell 0.22.0

package/dist/host/hermes/crm-key.js

@@ -0,0 +1,126 @@
+/**
+ * Clé API CRM dédiée à Hermes — fichier local + upsert SQLite via sous-process.
+ * Gold TempoFlow paramétré (prefix / file / env keys / paths injectés).
+ */
+import { spawn } from "node:child_process";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { getN8nBridgeEnv } from "../n8n/api-key.js";
+import { getPluginControlBridgeEnv } from "../plugins/control-extras.js";
+import { envForNodeScriptSpawn } from "../node-runtime.js";
+export function hermesCrmKeyPath(brand, paths) {
+    return path.join(paths.userDataDir, brand.fileName);
+}
+export function readHermesCrmApiKey(brand, paths) {
+    try {
+        const raw = JSON.parse(fs.readFileSync(hermesCrmKeyPath(brand, paths), "utf8"));
+        if (raw &&
+            typeof raw.apiKey === "string" &&
+            raw.apiKey.startsWith(brand.apiKeyPrefix) &&
+            raw.apiKey.length > brand.apiKeyPrefix.length + 8) {
+            return raw;
+        }
+    }
+    catch {
+        /* absent */
+    }
+    return null;
+}
+export function writeHermesCrmApiKey(brand, paths, data) {
+    fs.writeFileSync(hermesCrmKeyPath(brand, paths), `${JSON.stringify(data, null, 2)}\n`, { mode: 0o600 });
+}
+export function generateHermesCrmApiKey(brand) {
+    const secret = crypto.randomBytes(24).toString("base64url");
+    const apiKey = `${brand.apiKeyPrefix}${secret}`;
+    return {
+        apiKey,
+        prefix: apiKey.slice(0, brand.apiKeyPrefix.length + 6),
+        createdAt: new Date().toISOString(),
+    };
+}
+export function getHermesFullBridgeEnv(opts) {
+    const out = getN8nBridgeEnv({
+        homeDir: opts.paths.n8nHomeDir,
+        localUiUrl: opts.n8nUiUrl,
+        brand: opts.n8nBrand,
+    });
+    const crm = readHermesCrmApiKey(opts.brand, opts.paths);
+    if (crm?.apiKey)
+        out[opts.brand.apiKeyEnv] = crm.apiKey;
+    if (opts.crmPort && opts.crmPort > 0) {
+        out[opts.brand.apiUrlEnv] = `http://127.0.0.1:${opts.crmPort}`;
+    }
+    try {
+        Object.assign(out, getPluginControlBridgeEnv());
+    }
+    catch {
+        /* control plane pas encore chargé */
+    }
+    return out;
+}
+export async function ensureHermesCrmApiKey(opts) {
+    const log = opts.log || (() => { });
+    let stored = readHermesCrmApiKey(opts.brand, opts.paths);
+    if (!stored) {
+        stored = generateHermesCrmApiKey(opts.brand);
+        writeHermesCrmApiKey(opts.brand, opts.paths, stored);
+        log("crm-key: générée pour Hermes");
+    }
+    else {
+        log("crm-key: réutilise clé locale Hermes");
+    }
+    const script = opts.paths.ensureDbScriptPath;
+    if (!fs.existsSync(script)) {
+        return {
+            ok: false,
+            apiKey: stored.apiKey,
+            detail: `script DB absent: ${script}`,
+        };
+    }
+    return new Promise((resolve) => {
+        const bin = opts.paths.nodeBinary;
+        const env = {
+            ...envForNodeScriptSpawn(bin),
+            DB_PATH: opts.paths.dbPath,
+        };
+        delete env.ELECTRON_BINARY;
+        if (opts.paths.nodeModulesPathForScripts) {
+            env.NODE_PATH = opts.paths.nodeModulesPathForScripts;
+        }
+        const child = spawn(bin, [script, opts.paths.dbPath, stored.apiKey, opts.brand.keyName], { env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+        let out = "";
+        let err = "";
+        child.stdout?.on("data", (d) => {
+            out += d.toString();
+        });
+        child.stderr?.on("data", (d) => {
+            err += d.toString();
+        });
+        child.on("error", (e) => {
+            resolve({
+                ok: false,
+                apiKey: stored.apiKey,
+                detail: e.message,
+            });
+        });
+        child.on("exit", (code) => {
+            if (code === 0) {
+                log(`crm-key: DB OK (${out.trim() || "upsert"})`);
+                resolve({
+                    ok: true,
+                    apiKey: stored.apiKey,
+                    detail: out.trim() || "ok",
+                });
+            }
+            else {
+                resolve({
+                    ok: false,
+                    apiKey: stored.apiKey,
+                    detail: err.trim() || `exit ${code}`,
+                });
+            }
+        });
+    });
+}
+//# sourceMappingURL=crm-key.js.map

package/dist/host/hermes/crm-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crm-key.js","sourceRoot":"","sources":["../../../src/host/hermes/crm-key.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AA4B3D,MAAM,UAAU,gBAAgB,CAC9B,KAAwB,EACxB,KAA6C;IAE7C,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAwB,EACxB,KAA6C;IAE7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAClC,CAAC;QACxB,IACE,GAAG;YACH,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC;YACzC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EACjD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAwB,EACxB,KAA6C,EAC7C,IAAwB;IAExB,EAAE,CAAC,aAAa,CACd,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9B,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAwB;IAExB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC;IAChD,OAAO;QACL,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAMtC;IACC,MAAM,GAAG,GAAG,eAAe,CAAC;QAC1B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;QAC9B,UAAU,EAAE,IAAI,CAAC,QAAQ;QACzB,KAAK,EAAE,IAAI,CAAC,QAAQ;KACrB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,GAAG,EAAE,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACxD,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAI3C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,sCAAsC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,qBAAqB,MAAM,EAAE;SACtC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAClC,MAAM,GAAG,GAAsB;YAC7B,GAAG,qBAAqB,CAAC,GAAG,CAAC;YAC7B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;SAC3B,CAAC;QACF,OAAO,GAAG,CAAC,eAAe,CAAC;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CACjB,GAAG,EACH,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAC/D,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAC9D,CAAC;QACF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACrC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,OAAO,CAAC;gBACN,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,MAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,CAAC,CAAC,OAAO;aAClB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,GAAG,CAAC,CAAC;gBAClD,OAAO,CAAC;oBACN,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,MAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC;oBACN,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,MAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE;iBACrC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/host/hermes/ensure-crm-key-db.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Sous-process Node vanilla — upsert clé service dans api_keys.
+ * Usage : node ensure-crm-key-db.js <dbPath> <apiKey> <name> [scopes]
+ * Ne jamais importer depuis electron/main (ABI better-sqlite3).
+ */
+export {};
+//# sourceMappingURL=ensure-crm-key-db.d.ts.map

package/dist/host/hermes/ensure-crm-key-db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-crm-key-db.d.ts","sourceRoot":"","sources":["../../../src/host/hermes/ensure-crm-key-db.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/host/hermes/ensure-crm-key-db.js

@@ -0,0 +1,84 @@
+/**
+ * Sous-process Node vanilla — upsert clé service dans api_keys.
+ * Usage : node ensure-crm-key-db.js <dbPath> <apiKey> <name> [scopes]
+ * Ne jamais importer depuis electron/main (ABI better-sqlite3).
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import { createAppRequire } from "@creezio/platform-core";
+function loadDatabase() {
+    const req = createAppRequire();
+    return req("better-sqlite3");
+}
+const dbPath = process.argv[2];
+const apiKey = process.argv[3];
+const name = process.argv[4] || "Hermes (service)";
+const scopesRaw = process.argv[5] || "full";
+if (!dbPath || !apiKey) {
+    console.error("usage: ensure-crm-key-db.js <dbPath> <apiKey> [name] [scopes]");
+    process.exit(2);
+}
+if (!fs.existsSync(dbPath)) {
+    console.error(`db absente: ${dbPath}`);
+    process.exit(1);
+}
+function normalizeScopes(raw) {
+    const list = String(raw || "full")
+        .split(/[,\s]+/)
+        .map((s) => s.trim())
+        .filter(Boolean);
+    if (!list.length || list.includes("full") || list.includes("*"))
+        return "full";
+    const out = new Set();
+    for (const s of list) {
+        if (s === "crm:read" || s === "crm:write")
+            out.add(s);
+    }
+    if (out.has("crm:write"))
+        out.add("crm:read");
+    return out.size ? [...out].sort().join(",") : "full";
+}
+function keyPrefix(key) {
+    const m = key.match(/^([a-z0-9]+_live_)/i);
+    const stem = m?.[1];
+    if (stem)
+        return key.slice(0, stem.length + 6);
+    return key.slice(0, 14);
+}
+const scopes = normalizeScopes(scopesRaw);
+const hash = crypto.createHash("sha256").update(apiKey, "utf8").digest("hex");
+const prefix = keyPrefix(apiKey);
+const Database = loadDatabase();
+const db = new Database(dbPath);
+try {
+    const table = db
+        .prepare(`SELECT name FROM sqlite_master WHERE type='table' AND name='api_keys'`)
+        .get();
+    if (!table?.name) {
+        console.error("table api_keys absente — migrations requises");
+        process.exit(1);
+    }
+    const existing = db
+        .prepare(`SELECT id, scopes FROM api_keys WHERE key_hash = ? AND revoked_at IS NULL`)
+        .get(hash);
+    if (existing?.id) {
+        if (existing.scopes !== scopes) {
+            db.prepare(`UPDATE api_keys SET scopes = ? WHERE id = ?`).run(scopes, existing.id);
+            console.log(`updated:${existing.id}:${scopes}`);
+        }
+        else {
+            console.log(`exists:${existing.id}`);
+        }
+        process.exit(0);
+    }
+    const r = db
+        .prepare(`INSERT INTO api_keys (name, key_hash, prefix, scopes, user_id)
+       VALUES (?, ?, ?, ?, NULL)`)
+        .run(name, hash, prefix, scopes);
+    console.log(`created:${r.lastInsertRowid}:${scopes}`);
+    process.exit(0);
+}
+finally {
+    db.close();
+}
+//# sourceMappingURL=ensure-crm-key-db.js.map

package/dist/host/hermes/ensure-crm-key-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-crm-key-db.js","sourceRoot":"","sources":["../../../src/host/hermes/ensure-crm-key-db.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAY1D,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,OAAO,GAAG,CAAC,gBAAgB,CAAiB,CAAC;AAC/C,CAAC;AAED,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;AACnD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAE5C,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,OAAO,CAAC,KAAK,CACX,+DAA+D,CAChE,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC;SAC/B,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,WAAW;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;AAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAEjC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;AAChC,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,IAAI,CAAC;IACH,MAAM,KAAK,GAAG,EAAE;SACb,OAAO,CACN,uEAAuE,CACxE;SACA,GAAG,EAAmC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,EAAE;SAChB,OAAO,CACN,2EAA2E,CAC5E;SACA,GAAG,CAAC,IAAI,CAAiD,CAAC;IAE7D,IAAI,QAAQ,EAAE,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,EAAE,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAC3D,MAAM,EACN,QAAQ,CAAC,EAAE,CACZ,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,CAAC,EAAE,IAAI,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,EAAE;SACT,OAAO,CACN;iCAC2B,CAC5B;SACA,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,eAAe,IAAI,MAAM,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;QAAS,CAAC;IACT,EAAE,CAAC,KAAK,EAAE,CAAC;AACb,CAAC"}

package/dist/host/hermes/launcher.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Sidecar Hermes Agent + WebUI — factory brand-agnostic.
+ * SoT extrait de TempoFlow hermes-launcher.ts (R3.3) — chemins gold intacts.
+ */
+import { type ChildProcess } from "node:child_process";
+import { sanitizeHermesEmbedConfig, type HermesEmbedConfig, type HermesRuntimeStatus, type HermesWebuiStatus } from "@creezio/platform-core";
+import type { HostRuntimeContext } from "../context.js";
+import type { LocalConfigStore } from "../local-config.js";
+import { type BootstrapPhase } from "./runtime-bootstrap.js";
+export type RunningHermes = {
+    apiUrl: string;
+    apiKey: string;
+    webuiUrl: string | null;
+    webuiPassword: string | null;
+    homeDir: string;
+    child: ChildProcess;
+    webuiChild: ChildProcess | null;
+    stop: () => void;
+};
+export type StartHermesOptions = {
+    connectionMode: "local" | "remote";
+    hermesConfig?: HermesEmbedConfig;
+    onLog?: (line: string) => void;
+    autoBootstrap?: boolean;
+    crmPort?: number | null;
+};
+export type HermesStatusPayload = {
+    status: HermesRuntimeStatus;
+    mode: ReturnType<typeof sanitizeHermesEmbedConfig>["mode"];
+    apiUrl: string | null;
+    webuiUrl: string | null;
+    webuiStatus: HermesWebuiStatus;
+    binaryFound: boolean;
+    binaryPath: string | null;
+    version: string | null;
+    detail: string;
+    homeDir: string | null;
+    bootstrapPhase: BootstrapPhase;
+    bootstrapError: string | null;
+    installing: boolean;
+    logs: string[];
+};
+export type HermesHost = {
+    startHermes: (opts: StartHermesOptions) => Promise<RunningHermes | null>;
+    stopHermes: () => void;
+    stopHermesAndWait: (timeoutMs?: number) => Promise<void>;
+    getRunningHermes: () => RunningHermes | null;
+    getHermesStatusPayload: (connectionMode: "local" | "remote", opts?: {
+        remoteCrmOrigin?: string | null;
+    }) => HermesStatusPayload;
+    getHermesNextEnv: (connectionMode: "local" | "remote") => Record<string, string>;
+    getHermesLogs: () => string[];
+    ensureHermesRuntimeFromUi: (opts?: {
+        onLog?: (line: string) => void;
+    }) => Promise<{
+        ok: boolean;
+        detail: string;
+        binaryPath: string | null;
+        webuiDir: string | null;
+        phase: BootstrapPhase;
+    }>;
+    findHermesBinary: () => string | null;
+    getHermesLastStartPath: () => "bootstrap" | "reuse" | null;
+    reapplyHermesLlmKeys: (opts: {
+        connectionMode: "local" | "remote";
+        crmPort?: number | null;
+        onLog?: (line: string) => void;
+    }) => Promise<{
+        restarted: boolean;
+        detail: string;
+    }>;
+    reapplyHermesBridge: (opts: {
+        connectionMode: "local" | "remote";
+        crmPort?: number | null;
+        forceRestart?: boolean;
+        forceReason?: string;
+        onLog?: (line: string) => void;
+    }) => Promise<{
+        restarted: boolean;
+        detail: string;
+    }>;
+    __resetForTests: () => void;
+};
+/**
+ * Password WebUI en mode serveur : `HERMES_WEBUI_PASSWORD` explicite, sinon
+ * superadmin flotte (`CREEZIO_SUPERADMIN_PASSWORD`). null = desktop loopback
+ * (auth off, contrat gold sans prompt).
+ */
+export declare function serverWebuiPassword(): string | null;
+/** Clear legacy generated WebUI password (gold: no login prompt on loopback). */
+export declare function clearGeneratedWebuiPassword(home: string, stateDir: string, secretPrefix?: string): void;
+/** @deprecated gold marker alias */
+export declare function clearTempoflowGeneratedWebuiPassword(home: string, stateDir: string, secretPrefix?: string): void;
+export declare function createHermesHost(opts: {
+    ctx: HostRuntimeContext;
+    store: LocalConfigStore;
+}): HermesHost;
+//# sourceMappingURL=launcher.d.ts.map

package/dist/host/hermes/launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../../src/host/hermes/launcher.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAK9D,OAAO,EAQL,yBAAyB,EAEzB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,OAAO,EAUL,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAGhC,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,UAAU,EAAE,YAAY,GAAG,IAAI,CAAC;IAChC,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,iBAAiB,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,gBAAgB,EAAE,MAAM,aAAa,GAAG,IAAI,CAAC;IAC7C,sBAAsB,EAAE,CACtB,cAAc,EAAE,OAAO,GAAG,QAAQ,EAClC,IAAI,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,KACvC,mBAAmB,CAAC;IACzB,gBAAgB,EAAE,CAAC,cAAc,EAAE,OAAO,GAAG,QAAQ,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjF,aAAa,EAAE,MAAM,MAAM,EAAE,CAAC;IAC9B,yBAAyB,EAAE,CAAC,IAAI,CAAC,EAAE;QACjC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KAChC,KAAK,OAAO,CAAC;QACZ,EAAE,EAAE,OAAO,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,cAAc,CAAC;KACvB,CAAC,CAAC;IACH,gBAAgB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACtC,sBAAsB,EAAE,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC;IAC3D,oBAAoB,EAAE,CAAC,IAAI,EAAE;QAC3B,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KAChC,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,mBAAmB,EAAE,CAAC,IAAI,EAAE;QAC1B,cAAc,EAAE,OAAO,GAAG,QAAQ,CAAC;QACnC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;KAChC,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,IAAI,CAKnD;AAED,iFAAiF;AACjF,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAEN;AACD,oCAAoC;AACpC,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,MAAM,GACpB,IAAI,CAEN;AAsDD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,kBAAkB,CAAC;IACxB,KAAK,EAAE,gBAAgB,CAAC;CACzB,GAAG,UAAU,CA4gCb"}