@creezio/electron-shell 0.22.0

package/dist/host/meili/index-schema.js

@@ -0,0 +1,70 @@
+/**
+ * Schéma logique des index Meili catalogue.
+ *
+ * Le descripteur SoT est le `BrandMeiliFeed` de la marque (UIDs `catalog_*`
+ * via `configureMeiliBrandFeed` / `runFeedIndexation`). Ce module fournit :
+ * - les clés meta fingerprint / in-progress (partagées feed ↔ cohérence) ;
+ * - les UIDs génériques par défaut (`catalog_products` / `catalog_sites`)
+ *   utilisés par la cohérence quand aucun feed n'est configuré ;
+ * - les tables SQL comptées (`configureMeiliCatalogSqlTables`).
+ *
+ * Aucun UID marque ne vit dans le kit — une marque avec des UIDs
+ * historiques les porte dans SON feed.
+ *
+ * Bumper INDEX_SCHEMA_VERSION (ou feed.schemaVersion) à chaque changement
+ * d'indexes / settings / docs pour forcer une réindexation au boot.
+ */
+/** v1 = produits / sites (descripteur générique catalog_*). */
+export const INDEX_SCHEMA_VERSION = 1;
+export const MEILI_FINGERPRINT_META_KEY = "meili_index_fingerprint";
+/** Clé meta : indexation en cours (posée au start, effacée à la fin). */
+export const MEILI_INDEX_IN_PROGRESS_KEY = "meili_index_in_progress";
+export const CATALOG_INDEXES = [
+    "catalog_products",
+    "catalog_sites",
+];
+/** Alias historique (API cohérence GED) — liste catalogue. */
+export const GED_INDEXES = CATALOG_INDEXES;
+const DEFAULT_CATALOG_SQL_TABLES = {
+    produits: "produits",
+    sites: "fournisseurs",
+};
+let catalogSqlTables = { ...DEFAULT_CATALOG_SQL_TABLES };
+/** Configure les tables SQL comptées pour la cohérence Meili (défaut TF). */
+export function configureMeiliCatalogSqlTables(next) {
+    catalogSqlTables = { ...catalogSqlTables, ...next };
+}
+export function getMeiliCatalogSqlTables() {
+    return catalogSqlTables;
+}
+/** Tests uniquement. */
+export function resetMeiliCatalogSqlTablesForTests() {
+    catalogSqlTables = { ...DEFAULT_CATALOG_SQL_TABLES };
+}
+export function expectedMeiliCounts(sql) {
+    return {
+        catalog_products: sql.produits,
+        catalog_sites: sql.fournisseurs,
+    };
+}
+export function parseFingerprint(raw) {
+    if (!raw?.trim())
+        return null;
+    try {
+        const data = JSON.parse(raw);
+        if (typeof data.indexSchema !== "number" ||
+            typeof data.sqliteSchema !== "number" ||
+            !data.counts ||
+            typeof data.builtAt !== "string") {
+            return null;
+        }
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+export function serializeFingerprint(fp) {
+    return JSON.stringify(fp);
+}
+//# sourceMappingURL=index-schema.js.map

package/dist/host/meili/index-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-schema.js","sourceRoot":"","sources":["../../../src/host/meili/index-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,CAAC,MAAM,0BAA0B,GAAG,yBAAyB,CAAC;AAEpE,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAErE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,kBAAkB;IAClB,eAAe;CACP,CAAC;AAIX,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAmB3C,MAAM,0BAA0B,GAA0B;IACxD,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,cAAc;CACtB,CAAC;AAEF,IAAI,gBAAgB,GAA0B,EAAE,GAAG,0BAA0B,EAAE,CAAC;AAEhF,6EAA6E;AAC7E,MAAM,UAAU,8BAA8B,CAC5C,IAAoC;IAEpC,gBAAgB,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,wBAAwB;AACxB,MAAM,UAAU,kCAAkC;IAChD,gBAAgB,GAAG,EAAE,GAAG,0BAA0B,EAAE,CAAC;AACvD,CAAC;AAmBD,MAAM,UAAU,mBAAmB,CACjC,GAAqB;IAErB,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,QAAQ;QAC9B,aAAa,EAAE,GAAG,CAAC,YAAY;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAA8B;IAC7D,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACjD,IACE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACpC,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,CAAC,IAAI,CAAC,MAAM;YACZ,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAChC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAoB;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/host/meili/index.d.ts

@@ -0,0 +1,13 @@
+export { CATALOG_INDEXES, GED_INDEXES, INDEX_SCHEMA_VERSION, MEILI_FINGERPRINT_META_KEY, MEILI_INDEX_IN_PROGRESS_KEY, configureMeiliCatalogSqlTables, expectedMeiliCounts, getMeiliCatalogSqlTables, parseFingerprint, resetMeiliCatalogSqlTablesForTests, serializeFingerprint, } from "./index-schema.js";
+export type { CatalogIndexUid, CatalogSqlCounts, GedIndexUid, GedSqlCounts, MeiliCatalogSqlTables, MeiliFingerprint, } from "./index-schema.js";
+export { GENERIC_CATALOG_INDEXES, configureMeiliBrandFeed, createChrCatalogMeiliFeed, expectedCountsForFeed, getMeiliBrandFeed, resetMeiliBrandFeedForTests, } from "./feed.js";
+export type { BrandMeiliDocument, BrandMeiliFeed, BrandMeiliIndexSpec, GenericCatalogIndexUid, MeiliFeedSqliteDb, } from "./feed.js";
+export { buildFingerprint, countCatalogSql, countGedSql, readCoherenceDbSnapshot, readFingerprintFromDb, readIndexInProgress, readSqliteSchemaVersion, writeFingerprintToDb, } from "./coherence-db.js";
+export type { CoherenceDbSnapshot, MeiliIndexInProgress, } from "./coherence-db.js";
+export type { MeiliCoherencePaths, MeiliReadyDecision } from "./coherence.js";
+export { configureMeiliCoherencePaths, decideMeiliReady, meiliCoherenceScriptPath, } from "./coherence.js";
+export { runIndexation } from "./indexer.js";
+export { runFeedIndexation, searchMeiliIndexes } from "./generic-indexer.js";
+export { browseMeiliIndex, browseMeiliIndexOutcome, meiliFilterEq, } from "./browse.js";
+export type { MeiliBrowseOutcome, MeiliBrowseRequest, MeiliBrowseResult, } from "./browse.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/host/meili/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/host/meili/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,aAAa,CAAC"}

package/dist/host/meili/index.js

@@ -0,0 +1,8 @@
+export { CATALOG_INDEXES, GED_INDEXES, INDEX_SCHEMA_VERSION, MEILI_FINGERPRINT_META_KEY, MEILI_INDEX_IN_PROGRESS_KEY, configureMeiliCatalogSqlTables, expectedMeiliCounts, getMeiliCatalogSqlTables, parseFingerprint, resetMeiliCatalogSqlTablesForTests, serializeFingerprint, } from "./index-schema.js";
+export { GENERIC_CATALOG_INDEXES, configureMeiliBrandFeed, createChrCatalogMeiliFeed, expectedCountsForFeed, getMeiliBrandFeed, resetMeiliBrandFeedForTests, } from "./feed.js";
+export { buildFingerprint, countCatalogSql, countGedSql, readCoherenceDbSnapshot, readFingerprintFromDb, readIndexInProgress, readSqliteSchemaVersion, writeFingerprintToDb, } from "./coherence-db.js";
+export { configureMeiliCoherencePaths, decideMeiliReady, meiliCoherenceScriptPath, } from "./coherence.js";
+export { runIndexation } from "./indexer.js";
+export { runFeedIndexation, searchMeiliIndexes } from "./generic-indexer.js";
+export { browseMeiliIndex, browseMeiliIndexOutcome, meiliFilterEq, } from "./browse.js";
+//# sourceMappingURL=index.js.map

package/dist/host/meili/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/host/meili/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,WAAW,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,EAC3B,8BAA8B,EAC9B,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAU3B,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AASnB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAO3B,OAAO,EACL,4BAA4B,EAC5B,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,GACd,MAAM,aAAa,CAAC"}

package/dist/host/meili/indexer.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Indexeur Meilisearch catalogue — point d'entrée `runIndexation`.
+ *
+ * Exécuté comme script Node autonome (PAS dans Electron) :
+ *   DB_PATH=… MEILI_HOST=… node build/electron/meili-indexer.js
+ *
+ * Le descripteur `BrandMeiliFeed` est OBLIGATOIRE : la marque le passe en
+ * option (`opts.feed`) ou le configure au préalable via
+ * `configureMeiliBrandFeed` (voir `feed.ts`). L'indexation elle-même
+ * (streaming SQLite → lots Meili → swap atomique `<uid>_new`) vit dans
+ * `generic-indexer.ts` — aucun schéma marque hardcodé dans le kit.
+ *
+ * Historique : l'ancien chemin d'indexation legacy TempoFlow (UIDs marque,
+ * SQL agrégateurs) a été retiré du package natif. Une marque qui en a besoin
+ * porte ce descripteur chez elle (feed avec ses UIDs) — le kit n'embarque
+ * plus de vocabulaire marque.
+ */
+export type RunIndexationOptions = {
+    dbPath?: string;
+    meiliHost?: string;
+    masterKey?: string;
+    log?: (line: string) => void;
+    feed?: import("./feed.js").BrandMeiliFeed;
+    appVersion?: string;
+};
+/**
+ * Lance l'indexation pilotée par le `BrandMeiliFeed` (option ou configuré).
+ * Sans feed → erreur explicite (pas de défaut marque dans le kit).
+ */
+export declare function runIndexation(opts?: RunIndexationOptions): Promise<void>;
+//# sourceMappingURL=indexer.d.ts.map

package/dist/host/meili/indexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../../../src/host/meili/indexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,WAAW,EAAE,cAAc,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB9E"}

package/dist/host/meili/indexer.js

@@ -0,0 +1,49 @@
+/**
+ * Indexeur Meilisearch catalogue — point d'entrée `runIndexation`.
+ *
+ * Exécuté comme script Node autonome (PAS dans Electron) :
+ *   DB_PATH=… MEILI_HOST=… node build/electron/meili-indexer.js
+ *
+ * Le descripteur `BrandMeiliFeed` est OBLIGATOIRE : la marque le passe en
+ * option (`opts.feed`) ou le configure au préalable via
+ * `configureMeiliBrandFeed` (voir `feed.ts`). L'indexation elle-même
+ * (streaming SQLite → lots Meili → swap atomique `<uid>_new`) vit dans
+ * `generic-indexer.ts` — aucun schéma marque hardcodé dans le kit.
+ *
+ * Historique : l'ancien chemin d'indexation legacy TempoFlow (UIDs marque,
+ * SQL agrégateurs) a été retiré du package natif. Une marque qui en a besoin
+ * porte ce descripteur chez elle (feed avec ses UIDs) — le kit n'embarque
+ * plus de vocabulaire marque.
+ */
+/**
+ * Lance l'indexation pilotée par le `BrandMeiliFeed` (option ou configuré).
+ * Sans feed → erreur explicite (pas de défaut marque dans le kit).
+ */
+export async function runIndexation(opts) {
+    const log = opts?.log ?? ((line) => console.log(line));
+    const { getMeiliBrandFeed } = await import("./feed.js");
+    const feed = opts?.feed ?? getMeiliBrandFeed();
+    if (!feed) {
+        throw new Error("runIndexation: aucun BrandMeiliFeed — passer opts.feed ou appeler " +
+            "configureMeiliBrandFeed(brandMeiliFeed) avant l'indexation " +
+            "(voir @creezio/electron-shell/meili feed.ts).");
+    }
+    const { runFeedIndexation } = await import("./generic-indexer.js");
+    await runFeedIndexation({
+        feed,
+        dbPath: opts?.dbPath,
+        meiliHost: opts?.meiliHost,
+        masterKey: opts?.masterKey,
+        log,
+        appVersion: opts?.appVersion,
+    });
+}
+/** CLI dual-build safe (pas d'`import.meta` — CJS Electron). */
+const cliEntry = process.argv[1] || "";
+if (/(^|[\\/])meili-indexer\.(c?js|mjs)$/.test(cliEntry)) {
+    void runIndexation().catch((e) => {
+        console.error(`[meili] échec indexation: ${e instanceof Error ? e.message : e}`);
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=indexer.js.map

package/dist/host/meili/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../../src/host/meili/indexer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAWH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAA2B;IAC7D,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,iBAAiB,EAAE,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,oEAAoE;YAClE,6DAA6D;YAC7D,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnE,MAAM,iBAAiB,CAAC;QACtB,IAAI;QACJ,MAAM,EAAE,IAAI,EAAE,MAAM;QACpB,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,GAAG;QACH,UAAU,EAAE,IAAI,EAAE,UAAU;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,IAAI,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzD,KAAK,aAAa,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/host/meili-launcher.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Meilisearch local OPTIONNEL — launcher générique (injecte chemins).
+ * Port de electron/meili-launcher.ts sans dépendances marque.
+ */
+import { type ChildProcess } from "node:child_process";
+export type RunningMeili = {
+    host: string;
+    masterKey: string;
+    child: ChildProcess;
+    stop: () => void;
+};
+export type StartMeiliOptions = {
+    /** Chemin binaire meilisearch (ou null → skip). */
+    binaryPath: string | null;
+    dataDir: string;
+    userDataDir: string;
+    log?: (line: string) => void;
+    /**
+     * Transforme l'env du child (sandbox OS optionnel côté app).
+     * Défaut : process.env tel quel.
+     */
+    buildEnv?: (base: NodeJS.ProcessEnv) => NodeJS.ProcessEnv;
+    onCrash?: (info: Record<string, unknown>) => void;
+};
+/**
+ * Démarre Meilisearch si le binaire est disponible.
+ * Retourne null (sans throw) si absent ou en échec.
+ */
+export declare function startMeili(opts: StartMeiliOptions): Promise<RunningMeili | null>;
+//# sourceMappingURL=meili-launcher.d.ts.map

package/dist/host/meili-launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meili-launcher.d.ts","sourceRoot":"","sources":["../../src/host/meili-launcher.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAS9D,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,YAAY,CAAC;IACpB,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,mDAAmD;IACnD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC;IAC1D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACnD,CAAC;AAeF;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAoG9B"}

package/dist/host/meili-launcher.js

@@ -0,0 +1,115 @@
+/**
+ * Meilisearch local OPTIONNEL — launcher générique (injecte chemins).
+ * Port de electron/meili-launcher.ts sans dépendances marque.
+ */
+import { spawn } from "node:child_process";
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { findFreePort, waitForMeiliHealth, } from "@creezio/platform-core";
+function ensureMasterKey(dataDir) {
+    const keyFile = path.join(dataDir, ".master-key");
+    try {
+        const existing = fs.readFileSync(keyFile, "utf8").trim();
+        if (existing.length >= 16)
+            return existing;
+    }
+    catch {
+        /* première exécution */
+    }
+    const key = crypto.randomBytes(24).toString("base64url");
+    fs.writeFileSync(keyFile, key, { mode: 0o600 });
+    return key;
+}
+/**
+ * Démarre Meilisearch si le binaire est disponible.
+ * Retourne null (sans throw) si absent ou en échec.
+ */
+export async function startMeili(opts) {
+    const log = opts.log ?? ((l) => console.log(`[meili] ${l}`));
+    const bin = opts.binaryPath;
+    if (!bin || !fs.existsSync(bin)) {
+        log("binaire Meilisearch absent — le boot fail-closed décide " +
+            "(maybeBootBrandMeili : throw si le feed déclare des index).");
+        return null;
+    }
+    try {
+        fs.mkdirSync(opts.dataDir, { recursive: true });
+        const masterKey = ensureMasterKey(opts.dataDir);
+        const port = await findFreePort();
+        const host = `http://127.0.0.1:${port}`;
+        log(`spawn ${bin} (port ${port}, data ${path.join(opts.dataDir, "data.ms")})`);
+        const env = opts.buildEnv?.({ ...process.env }) ?? { ...process.env };
+        const child = spawn(bin, [
+            "--http-addr",
+            `127.0.0.1:${port}`,
+            "--db-path",
+            path.join(opts.dataDir, "data.ms"),
+            "--master-key",
+            masterKey,
+            "--no-analytics",
+            "--env",
+            "production",
+        ], {
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+            env,
+        });
+        const errTail = [];
+        const keepTail = (line) => {
+            errTail.push(line);
+            if (errTail.length > 25)
+                errTail.shift();
+        };
+        child.stdout?.on("data", (d) => d
+            .toString()
+            .split("\n")
+            .filter(Boolean)
+            .forEach((l) => {
+            keepTail(l);
+            log(l);
+        }));
+        child.stderr?.on("data", (d) => d
+            .toString()
+            .split("\n")
+            .filter(Boolean)
+            .forEach((l) => {
+            keepTail(l);
+            log(`stderr: ${l}`);
+        }));
+        child.on("error", (e) => {
+            log(`spawn error: ${e.message}`);
+            opts.onCrash?.({ child: "meilisearch", spawnError: e.message });
+        });
+        child.on("exit", (code) => {
+            if (code !== 0 && code !== null) {
+                log(`meilisearch terminé (code ${code})`);
+                opts.onCrash?.({
+                    child: "meilisearch",
+                    code,
+                    output: errTail.join("\n"),
+                });
+            }
+        });
+        await waitForMeiliHealth(host);
+        log(`Meilisearch local démarré sur ${host}`);
+        return {
+            host,
+            masterKey,
+            child,
+            stop: () => {
+                try {
+                    child.kill();
+                }
+                catch {
+                    /* déjà mort */
+                }
+            },
+        };
+    }
+    catch (e) {
+        log(`démarrage Meilisearch échoué (${e instanceof Error ? e.message : e}).`);
+        return null;
+    }
+}
+//# sourceMappingURL=meili-launcher.js.map

package/dist/host/meili-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meili-launcher.js","sourceRoot":"","sources":["../../src/host/meili-launcher.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAuBhC,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,GAAG,CACD,0DAA0D;YACxD,6DAA6D,CAChE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,oBAAoB,IAAI,EAAE,CAAC;QAExC,GAAG,CAAC,SAAS,GAAG,UAAU,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/E,MAAM,GAAG,GACP,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAE5D,MAAM,KAAK,GAAG,KAAK,CACjB,GAAG,EACH;YACE,aAAa;YACb,aAAa,IAAI,EAAE;YACnB,WAAW;YACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;YAClC,cAAc;YACd,SAAS;YACT,gBAAgB;YAChB,OAAO;YACP,YAAY;SACb,EACD;YACE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,WAAW,EAAE,IAAI;YACjB,GAAG;SACJ,CACF,CAAC;QAEF,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3C,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CACrC,CAAC;aACE,QAAQ,EAAE;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,CAAC,CAAC,CAAC;QACT,CAAC,CAAC,CACL,CAAC;QACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CACrC,CAAC;aACE,QAAQ,EAAE;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACb,QAAQ,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC,CAAC,CACL,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,KAAK,EAAE,aAAa;oBACpB,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC7C,OAAO;YACL,IAAI;YACJ,SAAS;YACT,KAAK;YACL,IAAI,EAAE,GAAG,EAAE;gBACT,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,CAAC;gBAAC,MAAM,CAAC;oBACP,eAAe;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CACD,iCAAiC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CACxE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/host/n8n/agent-isolation.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Étanchéité par collaborateur IA (Q2 multi-profils) — gold TempoFlow paramétré.
+ */
+export type N8nAgentIsolationBrand = {
+    /** Fichier sous n8n-home, ex. `.tempoflow-n8n-agent-keys.json`. */
+    keysFileName: string;
+    /** Label API key : `{labelPrefix} {segment}`. */
+    labelPrefix: string;
+    /** Tag workflows : `{tagPrefix}:{segment}`. */
+    tagPrefix: string;
+    /** Nom produit pour README workspace. */
+    productName: string;
+};
+export type N8nAgentKeyStored = {
+    id?: string;
+    label: string;
+    apiKey: string;
+    createdAt: string;
+};
+export type N8nAgentKeysFile = Record<string, N8nAgentKeyStored>;
+export declare function agentIdSegment(aiUserId: string): string;
+export declare function n8nAgentKeyLabel(brand: N8nAgentIsolationBrand, aiUserId: string): string;
+export declare function n8nAgentTag(brand: N8nAgentIsolationBrand, aiUserId: string): string;
+export declare function n8nAgentKeysPath(homeDir: string, brand: N8nAgentIsolationBrand): string;
+export declare function readStoredN8nAgentKeys(homeDir: string, brand: N8nAgentIsolationBrand): N8nAgentKeysFile;
+export declare function writeStoredN8nAgentKeys(homeDir: string, brand: N8nAgentIsolationBrand, keys: N8nAgentKeysFile): void;
+export declare function ensureN8nAgentApiKey(opts: {
+    uiUrl: string;
+    homeDir: string;
+    email: string;
+    password: string;
+    aiUserId: string;
+    brand: N8nAgentIsolationBrand;
+    log?: (line: string) => void;
+    forceNew?: boolean;
+}): Promise<{
+    ok: boolean;
+    apiKey: string | null;
+    detail: string;
+}>;
+export declare function revokeN8nAgentApiKey(opts: {
+    uiUrl: string;
+    homeDir: string;
+    email: string;
+    password: string;
+    aiUserId: string;
+    brand: N8nAgentIsolationBrand;
+    log?: (line: string) => void;
+}): Promise<{
+    ok: boolean;
+    detail: string;
+}>;
+export declare function hermesAgentWorkspaceDir(hermesHome: string, aiUserId: string): string;
+export declare function ensureHermesAgentWorkspace(hermesHome: string, aiUserId: string, brand: Pick<N8nAgentIsolationBrand, "productName">): string;
+//# sourceMappingURL=agent-isolation.d.ts.map

package/dist/host/n8n/agent-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-isolation.d.ts","sourceRoot":"","sources":["../../../src/host/n8n/agent-isolation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAYH,MAAM,MAAM,sBAAsB,GAAG;IACnC,mEAAmE;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAEjE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOvD;AAED,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,sBAAsB,EAC7B,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,sBAAsB,EAC7B,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,sBAAsB,GAC5B,MAAM,CAER;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAsBlB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,sBAAsB,EAC7B,IAAI,EAAE,gBAAgB,GACrB,IAAI,CAON;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiElE;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiC3C;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,MAAM,CAGR;AAED,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,aAAa,CAAC,GACjD,MAAM,CAkBR"}

package/dist/host/n8n/agent-isolation.js

@@ -0,0 +1,158 @@
+/**
+ * Étanchéité par collaborateur IA (Q2 multi-profils) — gold TempoFlow paramétré.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { cookieHeaderFromSetCookie, n8nHttpJson, extractRawN8nApiKey, fetchN8nApiKeyScopes, } from "./api-key.js";
+import { hermesSandboxPaths } from "../sandbox/embed-sandbox.js";
+export function agentIdSegment(aiUserId) {
+    const cleaned = String(aiUserId || "")
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9._-]+/g, "-")
+        .replace(/^[-.]+|[-.]+$/g, "");
+    return cleaned.slice(0, 64) || "agent";
+}
+export function n8nAgentKeyLabel(brand, aiUserId) {
+    return `${brand.labelPrefix} ${agentIdSegment(aiUserId)}`;
+}
+export function n8nAgentTag(brand, aiUserId) {
+    return `${brand.tagPrefix}:${agentIdSegment(aiUserId)}`;
+}
+export function n8nAgentKeysPath(homeDir, brand) {
+    return path.join(homeDir, brand.keysFileName);
+}
+export function readStoredN8nAgentKeys(homeDir, brand) {
+    try {
+        const raw = JSON.parse(fs.readFileSync(n8nAgentKeysPath(homeDir, brand), "utf8"));
+        if (raw && typeof raw === "object") {
+            const out = {};
+            for (const [userId, entry] of Object.entries(raw)) {
+                if (entry &&
+                    typeof entry.apiKey === "string" &&
+                    entry.apiKey.length >= 16) {
+                    out[userId] = entry;
+                }
+            }
+            return out;
+        }
+    }
+    catch {
+        /* absent */
+    }
+    return {};
+}
+export function writeStoredN8nAgentKeys(homeDir, brand, keys) {
+    fs.mkdirSync(homeDir, { recursive: true });
+    fs.writeFileSync(n8nAgentKeysPath(homeDir, brand), `${JSON.stringify(keys, null, 2)}\n`, { mode: 0o600 });
+}
+export async function ensureN8nAgentApiKey(opts) {
+    const log = opts.log || (() => { });
+    const keys = readStoredN8nAgentKeys(opts.homeDir, opts.brand);
+    const existing = keys[opts.aiUserId];
+    if (existing && !opts.forceNew) {
+        return {
+            ok: true,
+            apiKey: existing.apiKey,
+            detail: "clé n8n agent déjà provisionnée",
+        };
+    }
+    const base = opts.uiUrl.replace(/\/$/, "");
+    const label = n8nAgentKeyLabel(opts.brand, opts.aiUserId);
+    try {
+        const login = await n8nHttpJson("POST", `${base}/rest/login`, {
+            emailOrLdapLoginId: opts.email,
+            password: opts.password,
+        });
+        if (!(login.status >= 200 && login.status < 300)) {
+            return { ok: false, apiKey: null, detail: `login n8n HTTP ${login.status}` };
+        }
+        const cookie = cookieHeaderFromSetCookie(login.headers["set-cookie"]);
+        if (!cookie) {
+            return { ok: false, apiKey: null, detail: "login OK sans cookie" };
+        }
+        const scopes = await fetchN8nApiKeyScopes(base, cookie);
+        const create = await n8nHttpJson("POST", `${base}/rest/api-keys`, { label, expiresAt: null, scopes }, { Cookie: cookie });
+        if (!(create.status >= 200 && create.status < 300)) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: `création API key agent HTTP ${create.status}: ${create.raw.slice(0, 200)}`,
+            };
+        }
+        const parsed = extractRawN8nApiKey(create.json);
+        if (!parsed) {
+            return {
+                ok: false,
+                apiKey: null,
+                detail: "API key créée mais rawApiKey absent",
+            };
+        }
+        keys[opts.aiUserId] = {
+            id: parsed.id,
+            label,
+            apiKey: parsed.apiKey,
+            createdAt: new Date().toISOString(),
+        };
+        writeStoredN8nAgentKeys(opts.homeDir, opts.brand, keys);
+        log(`api-key agent: provisionnée (${label})`);
+        return { ok: true, apiKey: parsed.apiKey, detail: "clé n8n agent créée" };
+    }
+    catch (e) {
+        return {
+            ok: false,
+            apiKey: null,
+            detail: e instanceof Error ? e.message : String(e),
+        };
+    }
+}
+export async function revokeN8nAgentApiKey(opts) {
+    const keys = readStoredN8nAgentKeys(opts.homeDir, opts.brand);
+    const existing = keys[opts.aiUserId];
+    if (!existing)
+        return { ok: true, detail: "aucune clé agent à révoquer" };
+    delete keys[opts.aiUserId];
+    writeStoredN8nAgentKeys(opts.homeDir, opts.brand, keys);
+    if (!existing.id) {
+        return { ok: true, detail: "clé retirée du fichier (id n8n inconnu)" };
+    }
+    const base = opts.uiUrl.replace(/\/$/, "");
+    try {
+        const login = await n8nHttpJson("POST", `${base}/rest/login`, {
+            emailOrLdapLoginId: opts.email,
+            password: opts.password,
+        });
+        const cookie = cookieHeaderFromSetCookie(login.headers["set-cookie"]);
+        if (!cookie)
+            return { ok: false, detail: "login n8n sans cookie" };
+        const del = await n8nHttpJson("DELETE", `${base}/rest/api-keys/${encodeURIComponent(existing.id)}`, undefined, { Cookie: cookie });
+        if (del.status >= 200 && del.status < 300) {
+            opts.log?.(`api-key agent: révoquée (${existing.label})`);
+            return { ok: true, detail: "clé n8n agent révoquée" };
+        }
+        return { ok: false, detail: `révocation HTTP ${del.status}` };
+    }
+    catch (e) {
+        return { ok: false, detail: e instanceof Error ? e.message : String(e) };
+    }
+}
+export function hermesAgentWorkspaceDir(hermesHome, aiUserId) {
+    const { workspace } = hermesSandboxPaths(hermesHome);
+    return path.join(workspace, "agents", agentIdSegment(aiUserId));
+}
+export function ensureHermesAgentWorkspace(hermesHome, aiUserId, brand) {
+    const dir = hermesAgentWorkspaceDir(hermesHome, aiUserId);
+    fs.mkdirSync(dir, { recursive: true });
+    const readme = path.join(dir, "README-AGENT.txt");
+    if (!fs.existsSync(readme)) {
+        fs.writeFileSync(readme, [
+            `${brand.productName} — workspace de l'agent ${agentIdSegment(aiUserId)}`,
+            "",
+            "Espace de travail cloisonné de ce collaborateur IA (fichiers, brouillons).",
+            "Ne pas y stocker de secrets — voir la politique multi-profils (Q2).",
+            "",
+        ].join("\n"), "utf8");
+    }
+    return dir;
+}
+//# sourceMappingURL=agent-isolation.js.map

package/dist/host/n8n/agent-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-isolation.js","sourceRoot":"","sources":["../../../src/host/n8n/agent-isolation.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAsBjE,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;SACnC,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAA6B,EAC7B,QAAgB;IAEhB,OAAO,GAAG,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAA6B,EAC7B,QAAgB;IAEhB,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,KAA6B;IAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,KAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CACtC,CAAC;QACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,GAAG,GAAqB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClD,IACE,KAAK;oBACL,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;oBAChC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EACzB,CAAC;oBACD,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,KAA6B,EAC7B,IAAsB;IAEtB,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,EAAE,CAAC,aAAa,CACd,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EAChC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACpC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAS1C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,iCAAiC;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAClC,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,+BAA+B,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;aACpF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,qCAAqC;aAC9C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxD,GAAG,CAAC,gCAAgC,KAAK,GAAG,CAAC,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAQ1C;IACC,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IAE1E,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3B,uBAAuB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE;YAC5D,kBAAkB,EAAE,IAAI,CAAC,KAAK;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B,QAAQ,EACR,GAAG,IAAI,kBAAkB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAC1D,SAAS,EACT,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,EAAE,CAAC,4BAA4B,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;YAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,QAAgB;IAEhB,MAAM,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAkB,EAClB,QAAgB,EAChB,KAAkD;IAElD,MAAM,GAAG,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1D,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAClD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,EAAE,CAAC,aAAa,CACd,MAAM,EACN;YACE,GAAG,KAAK,CAAC,WAAW,2BAA2B,cAAc,CAAC,QAAQ,CAAC,EAAE;YACzE,EAAE;YACF,4EAA4E;YAC5E,qEAAqE;YACrE,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}