@geminixiang/mikan 1.0.0-beta.47 → 1.0.0-beta.49

package/dist/harness/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAiCA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Core types for the mikan agent harness.\n *\n * The harness is built directly on pi-agent-core and pi-ai. Sessions use\n * pi's v4 entry model and JSONL format; mikan adds only the header\n * conventions carried in the v4 header `metadata`. Legacy v3 files are\n * handled exclusively by the migration module (`sessions/migrate-v3.ts`).\n */\nimport type {\n  AgentEvent,\n  AgentTool,\n  BranchSummaryEntry,\n  CompactionEntry,\n  CustomEntry,\n  Entry,\n  MessageEntry,\n  SessionContext,\n  ThinkingLevel,\n  CompactionSettings,\n} from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model, Usage } from \"@earendil-works/pi-ai\";\nimport type { MikanModels } from \"./models.js\";\nimport type { SessionStore } from \"./session-store.js\";\nimport type { Static, TSchema } from \"@sinclair/typebox\";\n\nexport type { BranchSummaryEntry, CompactionEntry, CustomEntry, SessionContext };\n\n/** Message entry as stored in mikan session files (pi v4). */\nexport type SessionMessageEntry = MessageEntry;\n\n/** Union of entry types mikan reads and writes. Alias of pi's v4 entry. */\nexport type SessionEntry = Entry;\n\nexport const CURRENT_SESSION_VERSION = 4;\n\nexport interface SessionCreateInfo {\n  id?: string;\n  parentSession?: string;\n  parentSessionId?: string;\n}\n\n/** Immutable session queries available to portals, admin, and migration code. */\nexport interface SessionInspection {\n  getHeader(): SessionHeader;\n  getEntries(): Promise<Entry[]>;\n  getSessionName(): Promise<string | undefined>;\n  getBranch(fromId?: string): Promise<Entry[]>;\n  buildSessionContext(): Promise<SessionContext>;\n}\n\nexport interface SubagentModelSpec {\n  provider: string;\n  id: string;\n}\n\n/**\n * A curated capability set a subagent can be launched with. Built-ins ship\n * with the harness; `<workspaceDir>/agents/<name>.md` patches them per\n * installation. Turn, cost, and duration fields are caps — an explicit\n * `request.budget` may tighten them but never raise them. Token budgets use the\n * larger of the profile default and the request value.\n */\nexport interface SubagentProfile {\n  name: string;\n  description: string;\n  systemPrompt: string;\n  tools: string[];\n  requiredTools: string[];\n  model?: SubagentModelSpec;\n  thinkingLevel?: ThinkingLevel;\n  maxTurns?: number;\n  maxTokens?: number;\n  maxCostUsd?: number;\n  maxDurationMs?: number;\n}\n\nexport interface SubagentRunBudget {\n  /** Maximum assistant/model calls in the subagent run. */\n  maxTurns?: number;\n  /** Maximum cumulative input/output/cache tokens. */\n  maxTokens?: number;\n  /** Maximum provider cost in USD. */\n  maxCostUsd?: number;\n  /** Maximum wall-clock duration. */\n  maxDurationMs?: number;\n}\n\nexport type SubagentRunStatus =\n  | \"completed\"\n  | \"failed\"\n  | \"cancelled\"\n  | \"timeout\"\n  | \"budget_exceeded\"\n  | \"invalid_output\";\n\nexport interface SubagentParentContext {\n  mode: \"normalized\";\n  /** Number of recent user/assistant turns to include. Defaults to 3. */\n  recentTurns?: number;\n}\n\n/** Aggregated model usage across every assistant turn in a subagent run. */\nexport type SubagentUsage = Usage;\n\n/** Receives usage from a subagent run, including after detached cleanup settles. */\nexport type SubagentUsageSink = (usage: SubagentUsage) => void | Promise<void>;\n\n/** A fresh, isolated subagent run. */\nexport interface SubagentRunRequest<TOutputSchema extends TSchema | undefined = undefined> {\n  task: string;\n  /** Named profile: a harness built-in, patched by `<workspaceDir>/agents/<name>.md`. */\n  profile?: string;\n  /** Opt in to a normalized textual snapshot of the active parent run. Defaults to fresh. */\n  parentContext?: SubagentParentContext;\n  systemPrompt?: string;\n  /** JSON-serializable input appended to the task. */\n  input?: unknown;\n  /** Defaults to the parent runner's configured model. */\n  model?: SubagentModelSpec;\n  /** Tool names explicitly granted to the subagent. Defaults to no tools. */\n  tools?: string[];\n  /** Tool names that must each be invoked at least once before completion. */\n  requiredTools?: string[];\n  /** Per-profile thinking override. */\n  thinkingLevel?: ThinkingLevel;\n  /** When present, the final response must be JSON matching this schema. */\n  outputSchema?: TOutputSchema;\n  budget?: SubagentRunBudget;\n  signal?: AbortSignal;\n}\n\nexport type SubagentRunOutput<TSchemaOrUndefined extends TSchema | undefined> =\n  TSchemaOrUndefined extends TSchema ? Static<TSchemaOrUndefined> : string;\n\ninterface SubagentRunMetadata {\n  runId: string;\n  /** Raw final assistant text, including when structured validation failed. */\n  text?: string;\n  model: SubagentModelSpec;\n  turns: number;\n  toolCalls: number;\n  toolCallCounts: Record<string, number>;\n  /** Full token and cost breakdown across the run. */\n  usage: SubagentUsage;\n  /** Aggregate token count; equivalent to `usage.totalTokens`. */\n  tokens: number;\n  /** Aggregate provider cost; equivalent to `usage.cost.total`. */\n  costUsd: number;\n  durationMs: number;\n  /**\n   * The caller received a terminal result before the underlying run settled.\n   * When true, `usage`, `tokens`, and `costUsd` are provisional snapshots;\n   * final usage is delivered later through the run's bound usage sink. The\n   * global slot remains held until cleanup settles because in-process work\n   * cannot be safely reclaimed without a killable execution boundary.\n   */\n  cleanupPending?: boolean;\n}\n\ninterface SubagentRunCompletedResult<TOutput> extends SubagentRunMetadata {\n  status: \"completed\";\n  output: TOutput;\n  error?: never;\n}\n\ninterface SubagentRunIncompleteResult extends SubagentRunMetadata {\n  status: Exclude<SubagentRunStatus, \"completed\">;\n  output?: never;\n  error?: string;\n}\n\nexport type SubagentRunResult<TOutput = string> =\n  | SubagentRunCompletedResult<TOutput>\n  | SubagentRunIncompleteResult;\n\n/**\n * Compatibility header view synthesized from the v4 file header for callers\n * that read mikan session lineage. `metadata` carries mikan header extras (for\n * example `parentSessionPath` and the legacy `source` marker preserved by\n * the v3 migration).\n */\nexport interface SessionHeader {\n  type: \"session\";\n  version?: number;\n  id: string;\n  timestamp: string;\n  cwd: string;\n  parentSession?: string;\n  parentSessionId?: string;\n  [extra: string]: unknown;\n}\n\nexport interface CreateMikanModelsOptions {\n  modelsJsonPath?: string;\n}\n\nexport type EventConversationKind = \"direct\" | \"shared\";\n\nexport type EventType = \"immediate\" | \"one-shot\" | \"periodic\";\n\ninterface EventPayloadBase {\n  /** Target platform; may be omitted when only one platform is running. */\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  /** Self-contained task text; event runs do not inherit conversation history. */\n  text: string;\n}\n\nexport interface ImmediateEventPayload extends EventPayloadBase {\n  type: \"immediate\";\n}\n\nexport interface OneShotEventPayload extends EventPayloadBase {\n  type: \"one-shot\";\n  /** ISO 8601 timestamp with offset. */\n  at: string;\n}\n\nexport interface PeriodicEventPayload extends EventPayloadBase {\n  type: \"periodic\";\n  /** Cron expression (croner syntax). */\n  schedule: string;\n  /** IANA timezone, e.g. \"Asia/Taipei\". */\n  timezone: string;\n}\n\n/** Wire shape of one event file. */\nexport type EventFilePayload = ImmediateEventPayload | OneShotEventPayload | PeriodicEventPayload;\n\nexport interface EventPayloadInput {\n  type: EventType;\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n}\n\n/** A loaded skill. `baseDir` is the directory containing the skill file. */\nexport interface MikanSkill {\n  name: string;\n  description: string;\n  /** Full skill instructions (file content without frontmatter). */\n  content: string;\n  filePath: string;\n  baseDir: string;\n  /** Where the skill was loaded from (e.g. \"workspace\", \"channel\"). */\n  source: string;\n  /** Exclude from model-visible skill lists. */\n  disableModelInvocation?: boolean;\n  /** Embed the skill body in the prompt instead of referencing its file path. */\n  inline?: boolean;\n}\n\nexport interface SkillDiagnostic {\n  type: \"warning\";\n  message: string;\n  path: string;\n  /** Set when the entry was skipped because it is a symlink on a rejecting load. */\n  code?: \"symlink\";\n}\n\nexport interface LoadSkillsResult {\n  skills: MikanSkill[];\n  diagnostics: SkillDiagnostic[];\n}\n\nexport interface RetrySettings {\n  enabled: boolean;\n  maxRetries: number;\n  baseDelayMs: number;\n}\n\nexport interface BudgetSettings {\n  /** Max cumulative tokens processed this run (input + output + cache read/write). */\n  maxTokens?: number;\n  /** Max cumulative provider cost (USD) this run. Requires a populated model cost table. */\n  maxCostUsd?: number;\n  /** Max wall-clock duration for the run, in milliseconds. */\n  maxDurationMs?: number;\n  /** Max number of LLM calls (assistant turns) this run. */\n  maxLlmCalls?: number;\n}\n\nexport interface HarnessSettings {\n  compaction: CompactionSettings;\n  retry: RetrySettings;\n  budget: BudgetSettings;\n}\n\nexport interface SubagentProfileDiagnostic {\n  type: \"warning\";\n  message: string;\n  path: string;\n}\n\nexport interface LoadSubagentProfilesResult {\n  profiles: Map<string, SubagentProfile>;\n  diagnostics: SubagentProfileDiagnostic[];\n}\n\nexport type CompactionReason = \"threshold\" | \"overflow\" | \"manual\";\n\ninterface CompactionResultSummary {\n  summary: string;\n  /** Number of recent messages retained inline on the compaction entry. */\n  retainedMessages: number;\n  tokensBefore: number;\n}\n\nexport type HarnessEvent =\n  | AgentEvent\n  | { type: \"compaction_start\"; reason: CompactionReason }\n  | {\n      type: \"compaction_end\";\n      reason: CompactionReason;\n      result?: CompactionResultSummary;\n      aborted: boolean;\n      errorMessage?: string;\n    }\n  | {\n      type: \"auto_retry_start\";\n      attempt: number;\n      maxAttempts: number;\n      delayMs: number;\n      errorMessage: string;\n    }\n  | { type: \"auto_retry_end\"; success: boolean; attempt: number; finalError?: string }\n  | {\n      type: \"budget_exceeded\";\n      /** Which cap was hit, e.g. \"cost 2.01 USD > 2 USD limit\". */\n      reason: string;\n      tokens: number;\n      costUsd: number;\n      llmCalls: number;\n      durationMs: number;\n    };\n\nexport type HarnessEventListener = (event: HarnessEvent) => void | Promise<void>;\n\nexport interface MikanAgentSessionOptions {\n  systemPrompt: string;\n  model: Model<Api>;\n  thinkingLevel: ThinkingLevel;\n  tools: AgentTool[];\n  models: MikanModels;\n  sessionStore: SessionStore;\n  settings?: {\n    compaction?: Partial<CompactionSettings>;\n    retry?: Partial<RetrySettings>;\n    budget?: Partial<BudgetSettings>;\n  };\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/harness/types.ts"],"names":[],"mappings":"AAsCA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC","sourcesContent":["/**\n * Core types for the mikan agent harness.\n *\n * The harness is built directly on pi-agent-core and pi-ai. Sessions use\n * pi's current v4 entry model and JSONL storage format. mikan-owned\n * metadata uses a namespaced durable value; legacy v3 and Pi 0.84 v4 files\n * are handled exclusively by the offline session migrations.\n */\nimport type {\n  AgentEvent,\n  AgentMessage,\n  AgentTool,\n  BranchSummaryEntry,\n  CompactionEntry,\n  CustomEntry,\n  Entry,\n  MessageEntry,\n  ThinkingLevel,\n  CompactionSettings,\n} from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model, RetryPolicy, Usage } from \"@earendil-works/pi-ai\";\nimport type { MikanModels } from \"./models.js\";\nimport type { SessionStore } from \"./session-store.js\";\nimport type { Static, TSchema } from \"@sinclair/typebox\";\n\nexport type { BranchSummaryEntry, CompactionEntry, CustomEntry };\n\n/** Model-visible messages reconstructed from the active session branch. */\nexport interface SessionContext {\n  messages: AgentMessage[];\n}\n\n/** Message entry as stored in mikan session files (pi v4). */\nexport type SessionMessageEntry = MessageEntry;\n\n/** Union of entry types mikan reads and writes. Alias of pi's v4 entry. */\nexport type SessionEntry = Entry;\n\nexport const CURRENT_SESSION_VERSION = 4;\n\nexport interface SessionCreateInfo {\n  id?: string;\n  parentSession?: string;\n  parentSessionId?: string;\n}\n\n/** Immutable session queries available to portals, admin, and migration code. */\nexport interface SessionInspection {\n  getHeader(): SessionHeader;\n  getEntries(): Promise<Entry[]>;\n  getSessionName(): Promise<string | undefined>;\n  getBranch(fromId?: string): Promise<Entry[]>;\n  buildSessionContext(): Promise<SessionContext>;\n}\n\nexport interface SubagentModelSpec {\n  provider: string;\n  id: string;\n}\n\n/**\n * A curated capability set a subagent can be launched with. Built-ins ship\n * with the harness; `<workspaceDir>/agents/<name>.md` patches them per\n * installation. Turn, cost, and duration fields are caps — an explicit\n * `request.budget` may tighten them but never raise them. Token budgets use the\n * larger of the profile default and the request value.\n */\nexport interface SubagentProfile {\n  name: string;\n  description: string;\n  systemPrompt: string;\n  tools: string[];\n  requiredTools: string[];\n  model?: SubagentModelSpec;\n  thinkingLevel?: ThinkingLevel;\n  maxTurns?: number;\n  maxTokens?: number;\n  maxCostUsd?: number;\n  maxDurationMs?: number;\n}\n\nexport interface SubagentRunBudget {\n  /** Maximum assistant/model calls in the subagent run. */\n  maxTurns?: number;\n  /** Maximum cumulative input/output/cache tokens. */\n  maxTokens?: number;\n  /** Maximum provider cost in USD. */\n  maxCostUsd?: number;\n  /** Maximum wall-clock duration. */\n  maxDurationMs?: number;\n}\n\nexport type SubagentRunStatus =\n  | \"completed\"\n  | \"failed\"\n  | \"cancelled\"\n  | \"timeout\"\n  | \"budget_exceeded\"\n  | \"invalid_output\";\n\nexport interface SubagentParentContext {\n  mode: \"normalized\";\n  /** Number of recent user/assistant turns to include. Defaults to 3. */\n  recentTurns?: number;\n}\n\n/** Aggregated model usage across every assistant turn in a subagent run. */\nexport type SubagentUsage = Usage;\n\n/** Receives usage from a subagent run, including after detached cleanup settles. */\nexport type SubagentUsageSink = (usage: SubagentUsage) => void | Promise<void>;\n\n/** A fresh, isolated subagent run. */\nexport interface SubagentRunRequest<TOutputSchema extends TSchema | undefined = undefined> {\n  task: string;\n  /** Named profile: a harness built-in, patched by `<workspaceDir>/agents/<name>.md`. */\n  profile?: string;\n  /** Opt in to a normalized textual snapshot of the active parent run. Defaults to fresh. */\n  parentContext?: SubagentParentContext;\n  systemPrompt?: string;\n  /** JSON-serializable input appended to the task. */\n  input?: unknown;\n  /** Defaults to the parent runner's configured model. */\n  model?: SubagentModelSpec;\n  /** Tool names explicitly granted to the subagent. Defaults to no tools. */\n  tools?: string[];\n  /** Tool names that must each be invoked at least once before completion. */\n  requiredTools?: string[];\n  /** Per-profile thinking override. */\n  thinkingLevel?: ThinkingLevel;\n  /** When present, the final response must be JSON matching this schema. */\n  outputSchema?: TOutputSchema;\n  budget?: SubagentRunBudget;\n  signal?: AbortSignal;\n}\n\nexport type SubagentRunOutput<TSchemaOrUndefined extends TSchema | undefined> =\n  TSchemaOrUndefined extends TSchema ? Static<TSchemaOrUndefined> : string;\n\ninterface SubagentRunMetadata {\n  runId: string;\n  /** Raw final assistant text, including when structured validation failed. */\n  text?: string;\n  model: SubagentModelSpec;\n  turns: number;\n  toolCalls: number;\n  toolCallCounts: Record<string, number>;\n  /** Full token and cost breakdown across the run. */\n  usage: SubagentUsage;\n  /** Aggregate token count; equivalent to `usage.totalTokens`. */\n  tokens: number;\n  /** Aggregate provider cost; equivalent to `usage.cost.total`. */\n  costUsd: number;\n  durationMs: number;\n  /**\n   * The caller received a terminal result before the underlying run settled.\n   * When true, `usage`, `tokens`, and `costUsd` are provisional snapshots;\n   * final usage is delivered later through the run's bound usage sink. The\n   * global slot remains held until cleanup settles because in-process work\n   * cannot be safely reclaimed without a killable execution boundary.\n   */\n  cleanupPending?: boolean;\n}\n\ninterface SubagentRunCompletedResult<TOutput> extends SubagentRunMetadata {\n  status: \"completed\";\n  output: TOutput;\n  error?: never;\n}\n\ninterface SubagentRunIncompleteResult extends SubagentRunMetadata {\n  status: Exclude<SubagentRunStatus, \"completed\">;\n  output?: never;\n  error?: string;\n}\n\nexport type SubagentRunResult<TOutput = string> =\n  | SubagentRunCompletedResult<TOutput>\n  | SubagentRunIncompleteResult;\n\n/**\n * Compatibility header view synthesized from the v4 file header for callers\n * that read mikan session lineage. `metadata` carries mikan header extras (for\n * example `parentSessionPath` and the legacy `source` marker preserved by\n * the v3 migration).\n */\nexport interface SessionHeader {\n  type: \"session\";\n  version?: number;\n  id: string;\n  timestamp: string;\n  cwd: string;\n  parentSession?: string;\n  parentSessionId?: string;\n  [extra: string]: unknown;\n}\n\nexport interface CreateMikanModelsOptions {\n  modelsJsonPath?: string;\n}\n\nexport type EventConversationKind = \"direct\" | \"shared\";\n\nexport type EventType = \"immediate\" | \"one-shot\" | \"periodic\";\n\ninterface EventPayloadBase {\n  /** Target platform; may be omitted when only one platform is running. */\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  /** Self-contained task text; event runs do not inherit conversation history. */\n  text: string;\n}\n\nexport interface ImmediateEventPayload extends EventPayloadBase {\n  type: \"immediate\";\n}\n\nexport interface OneShotEventPayload extends EventPayloadBase {\n  type: \"one-shot\";\n  /** ISO 8601 timestamp with offset. */\n  at: string;\n}\n\nexport interface PeriodicEventPayload extends EventPayloadBase {\n  type: \"periodic\";\n  /** Cron expression (croner syntax). */\n  schedule: string;\n  /** IANA timezone, e.g. \"Asia/Taipei\". */\n  timezone: string;\n}\n\n/** Wire shape of one event file. */\nexport type EventFilePayload = ImmediateEventPayload | OneShotEventPayload | PeriodicEventPayload;\n\nexport interface EventPayloadInput {\n  type: EventType;\n  platform?: string;\n  conversationId: string;\n  conversationKind?: EventConversationKind;\n  userId?: string;\n  text: string;\n  at?: string;\n  schedule?: string;\n  timezone?: string;\n}\n\n/** A loaded skill. `baseDir` is the directory containing the skill file. */\nexport interface MikanSkill {\n  name: string;\n  description: string;\n  /** Full skill instructions (file content without frontmatter). */\n  content: string;\n  filePath: string;\n  baseDir: string;\n  /** Where the skill was loaded from (e.g. \"workspace\", \"channel\"). */\n  source: string;\n  /** Exclude from model-visible skill lists. */\n  disableModelInvocation?: boolean;\n  /** Embed the skill body in the prompt instead of referencing its file path. */\n  inline?: boolean;\n}\n\nexport interface SkillDiagnostic {\n  type: \"warning\";\n  message: string;\n  path: string;\n  /** Set when the entry was skipped because it is a symlink on a rejecting load. */\n  code?: \"symlink\";\n}\n\nexport interface LoadSkillsResult {\n  skills: MikanSkill[];\n  diagnostics: SkillDiagnostic[];\n}\n\nexport type RetrySettings = RetryPolicy;\n\nexport interface BudgetSettings {\n  /** Max cumulative tokens processed this run (input + output + cache read/write). */\n  maxTokens?: number;\n  /** Max cumulative provider cost (USD) this run. Requires a populated model cost table. */\n  maxCostUsd?: number;\n  /** Max wall-clock duration for the run, in milliseconds. */\n  maxDurationMs?: number;\n  /** Max number of LLM calls (assistant turns) this run. */\n  maxLlmCalls?: number;\n}\n\nexport interface HarnessSettings {\n  compaction: CompactionSettings;\n  retry: RetrySettings;\n  budget: BudgetSettings;\n}\n\nexport interface SubagentProfileDiagnostic {\n  type: \"warning\";\n  message: string;\n  path: string;\n}\n\nexport interface LoadSubagentProfilesResult {\n  profiles: Map<string, SubagentProfile>;\n  diagnostics: SubagentProfileDiagnostic[];\n}\n\nexport type CompactionReason = \"threshold\" | \"overflow\" | \"manual\";\n\ninterface CompactionResultSummary {\n  summary: string;\n  /** Number of recent messages retained inline on the compaction entry. */\n  retainedMessages: number;\n  tokensBefore: number;\n}\n\nexport type HarnessEvent =\n  | AgentEvent\n  | { type: \"compaction_start\"; reason: CompactionReason }\n  | {\n      type: \"compaction_end\";\n      reason: CompactionReason;\n      result?: CompactionResultSummary;\n      aborted: boolean;\n      errorMessage?: string;\n    }\n  | {\n      type: \"auto_retry_start\";\n      attempt: number;\n      maxAttempts: number;\n      delayMs: number;\n      errorMessage: string;\n    }\n  | { type: \"auto_retry_end\"; success: boolean; attempt: number; finalError?: string }\n  | {\n      type: \"budget_exceeded\";\n      /** Which cap was hit, e.g. \"cost 2.01 USD > 2 USD limit\". */\n      reason: string;\n      tokens: number;\n      costUsd: number;\n      llmCalls: number;\n      durationMs: number;\n    };\n\nexport type HarnessEventListener = (event: HarnessEvent) => void | Promise<void>;\n\nexport interface MikanAgentSessionOptions {\n  systemPrompt: string;\n  model: Model<Api>;\n  thinkingLevel: ThinkingLevel;\n  tools: AgentTool[];\n  models: MikanModels;\n  sessionStore: SessionStore;\n  settings?: {\n    compaction?: Partial<CompactionSettings>;\n    retry?: Partial<RetrySettings>;\n    budget?: Partial<BudgetSettings>;\n  };\n}\n"]}

package/dist/main.js

@@ -64,6 +64,10 @@ const GITHUB_WEBHOOK_SECRET = readEnv("GITHUB_WEBHOOK_SECRET");
 const LINK_BASE_URL = resolveLinkBaseUrl();
 const LINK_PORT_RAW = readEnv("LINK_PORT");
 const LINK_PORT = LINK_PORT_RAW ? parseInt(LINK_PORT_RAW, 10) : LINK_BASE_URL ? 8181 : undefined;
+const OPENCONNECTOR_ENDPOINT = readEnv("OPENCONNECTOR_ENDPOINT");
+const openConnector = OPENCONNECTOR_ENDPOINT
+    ? { url: OPENCONNECTOR_ENDPOINT }
+    : undefined;
 const WORLD_WRITABLE_MODE = 0o002;
 const INTAKE_DRAIN_TIMEOUT_MS = 30_000;
 function ensureSecureStateDir(path) {
@@ -384,6 +388,7 @@ const handler = createConversationRuntime({
     linkTokenStore,
     sessionViewTokenStore,
     adminTokenStore,
+    openConnector,
     portalBaseUrl: portalBaseUrl(),
     platformToolPackFactories: buildPlatformToolPackFactories(),
 });

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,+BAA+B,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,iBAAiB,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,eAAe,EACf,4BAA4B,EAC5B,oBAAoB,EACpB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,SAAS,UAAU;IACjB,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG;QACpB,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;KACpC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,oBAAoB,CAC9B,OAAO,EACP,CAAC,KAAK,EAAkC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC1D,GAAG,EAAE,CAAC,+CAA+C,CACtD,CAAC;QACF,IAAI,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACnD,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACnD,MAAM,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACvD,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC/C,MAAM,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjE,MAAM,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAC7C,MAAM,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC7D,MAAM,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAC/D,yEAAyE;AACzE,kEAAkE;AAClE,MAAM,aAAa,GAAG,kBAAkB,EAAE,CAAC;AAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAC3C,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAEjG,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,gCAAgC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CACX,sBAAsB,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACxF,kEAAkE;YAClE,wBAAwB,IAAI,EAAE,CACjC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CACX,sBAAsB,IAAI,oBAAoB,IAAI,CAAC,GAAG,gCAAgC,IAAI,IAAI;YAC5F,+EAA+E,CAClF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAc,CAAC;AACnB,IAAI,CAAC;IACH,IAAI,GAAG,WAAW,EAAE,CAAC;AACvB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,mEAAmE;AACnE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,iEAAiE;AACjE,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAC/E,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;AAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,sBAAsB;AACtB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;IACrD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;AAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;AAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;AACnC,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACrC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC7B,eAAe,CAAC,UAAU,CAAC,CAAC;AAC9B,CAAC;AACD,IAAI,CAAC;IACH,8BAA8B,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,yCAAyC;AACzC,MAAM,gBAAgB,GAAmB;IACvC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,UAAU,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,SAAS,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5C,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,IACE,eAAe,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;IAClC,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;IACjC,eAAe,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;IACzC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAC5C,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,GAAG,CACT,8BAA8B,eAAe,CAAC,QAAQ,CAAC,MAAM,UAAU;QACrE,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,aAAa,CACnD,CAAC;AACJ,CAAC;AACD,IAAI,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,yCAAyC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;AACpG,CAAC;AACD,IAAI,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CACT,8CAA8C,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAC1F,CAAC;AACJ,CAAC;AAED,IAAI,CAAC;IACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAElE,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACpD,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,iDAAiD;QACnD,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YACzD,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,8DAA8D,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE;IAC1B,IAAI,CAAC;QACH,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC;AAC9C,MAAM,aAAa,GACjB,eAAe,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM;IAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;IAClE,CAAC,CAAC,SAAS,CAAC;AAChB,MAAM,kBAAkB,GACtB,eAAe,EAAE,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,EAAE,MAAM;IAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE;IAChF,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,OAAO;IACtB,CAAC,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE;QACxC,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,kBAAkB;KAChC,CAAC;IACJ,CAAC,CAAC,SAAS,CAAC;AAChB,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,wBAAwB;AACxB,MAAM,eAAe,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;AAClE,IAAI,WAAW,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC9C,WAAW,CAAC,2BAA2B,CACrC,4BAA4B,CAAC;QAC3B,OAAO,EAAE,eAAe;QACxB,aAAa,EAAE,UAAU;QACzB,QAAQ;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9E,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;IAC7B,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,sBAAsB,EAAE,CAAC;AACpD,MAAM,qBAAqB,GAAG,IAAI,6BAA6B,EAAE,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;AACtD,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AACjE,WAAW,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AACxE,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAElE,SAAS,aAAa;IACpB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,oBAAoB,SAAS,EAAE,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,sDAAsD;AACtD,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC;IAC9B,MAAM,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC5D,WAAW,CACT,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAC3D,+BAA+B,CAChC,CAAC,KAAK,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,cAAc,GAAiC,EAAE,CAAC;AAExD,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAwC,CAAC;IACpE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,EAAU;IACjC,MAAM,GAAG,GAAG,cAAc,CAAC,KAA2C,CAAC;IACvE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,8BAA8B;IACrC,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,gBAAgB,GAAqB;YACzC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC/D,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,MAAM,EAAE,GAAG,QAAQ;oBACjB,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC;oBACtE,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9D,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACrE,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,MAAM,GAAG,CAAC,mBAAmB,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChE,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,mBAAmB,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CACpD,eAAe,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC;SACtF,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,iBAAiB,GAAsB;QAC3C,eAAe,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAC3C,gBAAgB,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC;QAC5E,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CACpC,gBAAgB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC;QACzE,SAAS,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CACnC,gBAAgB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;QACxE,mBAAmB,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACvD,gBAAgB,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAC7D,cAAc,EACd,SAAS,EACT,IAAI,CACL;QACH,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CACnC,gBAAgB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QACtE,UAAU,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CACtC,gBAAgB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC;QACzE,WAAW,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CACvC,gBAAgB,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC;KAC5E,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,GAAG,yBAAyB,CAAC;IACxC,SAAS;IACT,OAAO;IACP,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,aAAa,EAAE,aAAa,EAAE;IAC9B,yBAAyB,EAAE,8BAA8B,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,MAAM;IACrB,CAAC,CAAC,MAAM;IACR,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;QAC5B,CAAC,CAAC,aAAa,OAAO,CAAC,SAAS,EAAE;QAClC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,CAAC,CAAC,SAAS,OAAO,CAAC,KAAK,EAAE;YAC1B,CAAC,CAAC,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC;AAC5C,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACxC,wBAAwB,EAAE,CAAC;AAE3B;;;;GAIG;AACH,SAAS,wBAAwB;IAC/B,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzB,GAAG,CAAC,OAAO,CACT,iCAAiC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CACnG,CAAC;IAEF,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,GAAG,CAAC,OAAO,CACT,UAAU,CAAC,UAAU,CAAC;QACpB,CAAC,CAAC,wBAAwB,UAAU,EAAE;QACtC,CAAC,CAAC,8BAA8B,UAAU,6BAA6B,CAC1E,CAAC;AACJ,CAAC;AAED,IAAI,QAAQ,EAAE,CAAC;IACb,MAAM,sBAAsB,GAAG,eAAe,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC;IACtC,IAAI,CAAC,sBAAsB,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,sBAAsB,CAAC,OAAO,EAAE;QAC5D,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,sBAAsB;QAChC,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,GAAG,iBAAiB,CAAC;IACzC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC;AACD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,aAAa,GAAG,kBAAkB,CAAC;IACzC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE;QAC7D,KAAK,EAAE,aAAa;QACpB,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,QAAQ,GAAG,oBAAoB,CAAC;IAC/C,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACpC,CAAC;AACD,IAAI,UAAU,EAAE,CAAC;IACf,MAAM,YAAY,GAAG,iBAAiB,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,OAAO,EAAE;QAC3D,KAAK,EAAE,YAAY;QACnB,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,OAAO,GAAG,mBAAmB,CAAC;IAC7C,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC;AACD,IAAI,SAAS,EAAE,CAAC;IACd,IAAI,CAAC,aAAa,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,2BAA2B;QAClD,CAAC,CAAC,YAAY,CAAC,2BAA2B,EAAE,OAAO,CAAC;QACpD,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5F,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE;QACzD,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,gBAAgB;QAC5B,cAAc,EAAE,sBAAsB;QACtC,KAAK,EAAE,YAAY;YACjB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;iBACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,EAAE;QACN,cAAc,EACZ,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,IAAI;QACN,SAAS;QACT,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;KAClD,CAAC,CAAC;IACH,cAAc,CAAC,MAAM,GAAG,kBAAkB,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,mBAAmB,GAAG,cAAc,CAAC,MAAwC,CAAC;AACpF,IAAI,qBAAqB,IAAI,CAAC,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IAClE,GAAG,CAAC,UAAU,CACZ,mCAAmC;QACjC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oCAAoC,CAAC;QACjF,4CAA4C,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,SAAS;IACzB,CAAC,CAAC,cAAc,CAAC;QACb,IAAI,EAAE,SAAS;QACf,cAAc;QACd,YAAY;QACZ,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,GAAG;gBAAE,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,qBAAqB;QACrB,sBAAsB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QACnD,YAAY,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QACvF,aAAa,EACX,qBAAqB,IAAI,mBAAmB;YAC1C,CAAC,CAAC;gBACE,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE;aAChD;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;IACJ,CAAC,CAAC,SAAS,CAAC;AAEd,SAAS,cAAc;IACrB,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACvC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzD,cAAc,EAAE;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAuB;IACzD,IAAI,OAAmC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACtB,IAAI,OAAO,CAAQ,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,OAAO;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAyB;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAc;YAC1B,IAAI,KAAK,CAAC,0CAA0C,uBAAuB,IAAI,CAAC;YAChF,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC5F,CAAC;QACF,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,MAAM,aAAa,CAAC;QACxB,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;KAC3E,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;AACnG,CAAC;AAED,sDAAsD;AACtD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,cAAc,CAAC,KAA2C,CAAC;AACrF,IAAI,iBAAiB,EAAE,CAAC;IACtB,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AACpD,CAAC;AACD,aAAa,CAAC,KAAK,EAAE,CAAC;AACtB,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC9D,cAAc,CAAC,KAAK,EAAE,CAAC;AAEvB,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,4BAA4B,CAAC;IAC5C,IAAI,EAAE,GAAG,EAAE;QACT,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;QAC5C,OAAO,gBAAgB,CAAC;YACtB;gBACE,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,aAAa,CAAC,IAAI,EAAE,CAAC;gBACvB,CAAC;aACF;YACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;QACtB,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,EAAE,GAAG,CAAC,UAAU;IACpB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAEtD,iBAAiB;AACjB,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACxC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACxB,GAAG,CAAC,UAAU,CAAC,qBAAqB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CACH,CACF,CAAC;AAEF,uEAAuE;AACvE,uEAAuE;AACvE,IAAI,WAAW,EAAE,CAAC;IAChB,KAAK,WAAW,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7D,GAAG,CAAC,UAAU,CACZ,+BAA+B,EAC/B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["#!/usr/bin/env node\n\nimport \"./observability/instrument.js\";\n\nimport { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type { MessagingBot, PlatformName } from \"./adapter.js\";\nimport { DiscordMessagingBot } from \"./adapters/discord/bot.js\";\nimport { GithubMessagingBot } from \"./adapters/github/bot.js\";\nimport { createGithubToolPack } from \"./adapters/github/tool-pack.js\";\nimport type { PlatformGithubOps } from \"./adapters/github/types.js\";\nimport { TelegramMessagingBot } from \"./adapters/telegram/bot.js\";\nimport { SlackMessagingBot as SlackMessagingBotClass } from \"./adapters/slack/bot.js\";\nimport { createSlackToolPack } from \"./adapters/slack/tool-pack.js\";\nimport type { PlatformSlackOps } from \"./adapters/slack/types.js\";\nimport type { PlatformToolPackFactory } from \"./tools/types.js\";\nimport { downloadChannel } from \"./cli/download.js\";\nimport { DreamScheduler } from \"./dream/index.js\";\nimport { EventsWatcher } from \"./events.js\";\nimport * as log from \"./log.js\";\nimport { createProcessShutdownHandler, runShutdownSteps } from \"./process-lifecycle.js\";\nimport { startWebServer } from \"./web/server.js\";\nimport { InMemoryAdminTokenStore } from \"./web/admin/portal.js\";\nimport { InMemoryLinkTokenStore } from \"./web/login/portal.js\";\nimport { InMemorySessionViewTokenStore } from \"./web/session-view/portal.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport {\n  assertStateDirOutsideWorkspace,\n  loadGlobalSettings,\n  MissingGlobalSettingsError,\n  resolveLinkBaseUrl,\n} from \"./config.js\";\nimport {\n  configureHttpDispatcher,\n  defaultModelsJsonPath,\n  parseHttpIdleTimeoutMs,\n} from \"./harness/index.js\";\nimport { readEnv, setEnvAliases } from \"./env-manifest.js\";\nimport { ensureDirExists, isRecord, readJsonFileIfExists } from \"./utils/file-guards.js\";\nimport { SandboxError, validateSandbox } from \"./sandbox/index.js\";\nimport { helpText, resolveBoot, type BootPlan } from \"./cli/boot.js\";\nimport { runOnboardCommand } from \"./cli/onboard.js\";\nimport { envReport, noPlatformsMessage, platformIsActive } from \"./env-manifest.js\";\nimport { FileVaultManager } from \"./vault/index.js\";\nimport { runOfficeCommand } from \"./cli/office.js\";\nimport { runSessionsCommand } from \"./cli/sessions.js\";\nimport {\n  buildContainerBindTranslator,\n  createWorkspace,\n  formatUnmigratedOfficesError,\n  migrateLegacyOffices,\n  OfficeRegistry,\n} from \"./office/index.js\";\nimport { createConversationRuntime } from \"./runtime/conversation-runtime.js\";\nimport * as Sentry from \"@sentry/node\";\n\nfunction getVersion(): string {\n  // Try to find package.json in the dist directory or parent\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const possiblePaths = [\n    join(moduleDir, \"package.json\"),\n    join(dirname(moduleDir), \"package.json\"),\n    join(process.cwd(), \"package.json\"),\n  ];\n\n  for (const pkgPath of possiblePaths) {\n    const pkg = readJsonFileIfExists(\n      pkgPath,\n      (value): value is { version?: unknown } => isRecord(value),\n      () => \"Ignoring package.json while resolving version\",\n    );\n    if (typeof pkg?.version === \"string\" && pkg.version) return pkg.version;\n  }\n  return \"unknown\";\n}\n\nconst SLACK_APP_TOKEN = readEnv(\"SLACK_APP_TOKEN\");\nconst SLACK_BOT_TOKEN = readEnv(\"SLACK_BOT_TOKEN\");\nconst TELEGRAM_BOT_TOKEN = readEnv(\"TELEGRAM_BOT_TOKEN\");\nconst DISCORD_BOT_TOKEN = readEnv(\"DISCORD_BOT_TOKEN\");\nconst GITHUB_APP_ID = readEnv(\"GITHUB_APP_ID\");\nconst GITHUB_APP_PRIVATE_KEY = readEnv(\"GITHUB_APP_PRIVATE_KEY\");\nconst GITHUB_APP_PRIVATE_KEY_PATH = readEnv(\"GITHUB_APP_PRIVATE_KEY_PATH\");\nconst GITHUB_INSTALLATION_ID = readEnv(\"GITHUB_INSTALLATION_ID\");\nconst GITHUB_REPOS = readEnv(\"GITHUB_REPOS\");\nconst GITHUB_POLL_INTERVAL = readEnv(\"GITHUB_POLL_INTERVAL\");\nconst GITHUB_WEBHOOK_SECRET = readEnv(\"GITHUB_WEBHOOK_SECRET\");\n// Externally-visible base URL of the link/OAuth server; the env read and\n// trailing-slash normalization live in config.resolveLinkBaseUrl.\nconst LINK_BASE_URL = resolveLinkBaseUrl();\nconst LINK_PORT_RAW = readEnv(\"LINK_PORT\");\nconst LINK_PORT = LINK_PORT_RAW ? parseInt(LINK_PORT_RAW, 10) : LINK_BASE_URL ? 8181 : undefined;\n\nconst WORLD_WRITABLE_MODE = 0o002;\nconst INTAKE_DRAIN_TIMEOUT_MS = 30_000;\n\nfunction ensureSecureStateDir(path: string): void {\n  let stat;\n  try {\n    stat = statSync(path);\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code === \"ENOENT\") {\n      mkdirSync(path, { recursive: true, mode: 0o700 });\n      return;\n    }\n    console.error(`Error: cannot access --state-dir ${path}: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  if (!stat.isDirectory()) {\n    console.error(`Error: --state-dir ${path} exists but is not a directory`);\n    process.exit(1);\n  }\n\n  if (stat.mode & WORLD_WRITABLE_MODE) {\n    console.error(\n      `Error: --state-dir ${path} is world-writable (mode ${(stat.mode & 0o777).toString(8)}). ` +\n        `Credentials stored there would be exposed to other local users. ` +\n        `Fix with: chmod 0700 ${path}`,\n    );\n    process.exit(1);\n  }\n\n  const euid = typeof process.geteuid === \"function\" ? process.geteuid() : undefined;\n  if (euid !== undefined && stat.uid !== euid) {\n    console.error(\n      `Error: --state-dir ${path} is owned by uid ${stat.uid} but mikan is running as uid ${euid}. ` +\n        `Run mikan as the directory owner or point --state-dir at a directory you own.`,\n    );\n    process.exit(1);\n  }\n}\n\nfunction handleStartupError(error: unknown): never {\n  if (error instanceof SandboxError) {\n    for (const line of error.formatForCli()) {\n      console.error(line);\n    }\n    process.exit(1);\n  }\n  if (error instanceof MissingGlobalSettingsError) {\n    console.error(`Missing global settings: ${error.settingsPath}`);\n    console.error(\"\");\n    console.error(\"Run onboarding to create it:\");\n    console.error(`  mikan --onboard --state-dir ${stateDir}`);\n    console.error(\"\");\n    console.error(\"Then review the generated settings.json and start mikan again.\");\n    process.exit(1);\n  }\n  if (error instanceof Error) {\n    console.error(`Error: ${error.message}`);\n    process.exit(1);\n  }\n  console.error(String(error));\n  process.exit(1);\n}\n\nlet plan: BootPlan;\ntry {\n  plan = resolveBoot();\n} catch (error) {\n  handleStartupError(error);\n}\n\n// `mikan office …` inspects/claims conversation offices and exits.\nif (plan.mode === \"office\") {\n  process.exit(runOfficeCommand(plan.officeArgs ?? []));\n}\n\n// `mikan sessions …` migrates/maintains session files and exits.\nif (plan.mode === \"sessions\") {\n  process.exit(await runSessionsCommand(plan.sessionsArgs ?? []));\n}\n\n// Global fetch: proxy support (HTTP_PROXY/HTTPS_PROXY/NO_PROXY) and idle\n// timeouts so a stalled LLM stream errors out instead of hanging a session.\nconst httpIdleTimeoutMs = parseHttpIdleTimeoutMs(readEnv(\"HTTP_IDLE_TIMEOUT\"));\nconfigureHttpDispatcher(httpIdleTimeoutMs);\n\nif (plan.mode === \"help\") {\n  console.log(helpText());\n  process.exit(0);\n}\n\nif (plan.mode === \"env\") {\n  console.log(envReport());\n  process.exit(0);\n}\n\nif (plan.mode === \"version\") {\n  console.log(getVersion());\n  process.exit(0);\n}\n\n// Handle onboard mode\nif (plan.mode === \"onboard\") {\n  const stateDir = plan.stateDir;\n  setEnvAliases(\"STATE_DIR\", stateDir);\n  ensureSecureStateDir(stateDir);\n  try {\n    process.exit(await runOnboardCommand(stateDir));\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    process.exit(1);\n  }\n}\n\n// Handle --download mode (Slack only)\nif (plan.mode === \"download\" && plan.downloadChannel) {\n  if (!SLACK_BOT_TOKEN) {\n    console.error(\"Missing env: SLACK_BOT_TOKEN\");\n    process.exit(1);\n  }\n  await downloadChannel(plan.downloadChannel, SLACK_BOT_TOKEN);\n  process.exit(0);\n}\n\n// Normal bot mode - working dir is optional and defaults under the state dir\nconst sandbox = plan.sandbox;\nconst stateDir = plan.stateDir;\nconst workingDir = plan.workingDir;\nsetEnvAliases(\"STATE_DIR\", stateDir);\nensureSecureStateDir(stateDir);\nif (!plan.workingDirExplicit) {\n  ensureDirExists(workingDir);\n}\ntry {\n  assertStateDirOutsideWorkspace(stateDir, workingDir, sandbox.type);\n} catch (error) {\n  handleStartupError(error);\n}\n\n// Validate platform tokens — activation rules live in the env manifest.\nconst hasSlack = platformIsActive(\"slack\");\nconst hasTelegram = platformIsActive(\"telegram\");\nconst hasDiscord = platformIsActive(\"discord\");\nconst hasGithub = platformIsActive(\"github\");\n\nif (!hasSlack && !hasTelegram && !hasDiscord && !hasGithub) {\n  console.error(noPlatformsMessage());\n  process.exit(1);\n}\n\n// Move legacy raw-id conversation directories to the office-key layout before\n// anything touches the workspace. Runs every boot; a completed migration is a\n// no-op. Unowned or failed offices are fatal: after the layout flip a legacy\n// directory is invisible to the runtime, and booting anyway would present\n// those conversations as silently empty.\nconst enabledPlatforms: PlatformName[] = [\n  ...(hasSlack ? ([\"slack\"] as const) : []),\n  ...(hasTelegram ? ([\"telegram\"] as const) : []),\n  ...(hasDiscord ? ([\"discord\"] as const) : []),\n  ...(hasGithub ? ([\"github\"] as const) : []),\n];\nconst officeMigration = (() => {\n  try {\n    return migrateLegacyOffices({ workspaceRoot: workingDir, stateDir, enabledPlatforms });\n  } catch (error) {\n    handleStartupError(error);\n  }\n})();\nif (\n  officeMigration.unowned.length > 0 ||\n  officeMigration.failed.length > 0 ||\n  officeMigration.vaultConflicts.length > 0 ||\n  officeMigration.stateDirConflicts.length > 0\n) {\n  console.error(formatUnmigratedOfficesError(officeMigration));\n  process.exit(1);\n}\nif (officeMigration.migrated.length > 0 || officeMigration.recovered.length > 0) {\n  console.log(\n    `  Office layout migration: ${officeMigration.migrated.length} moved, ` +\n      `${officeMigration.recovered.length} recovered.`,\n  );\n}\nif (officeMigration.vaultKeysMigrated.length > 0) {\n  console.log(`  Vault keys migrated to office keys: ${officeMigration.vaultKeysMigrated.length}.`);\n}\nif (officeMigration.stateDirsMigrated.length > 0) {\n  console.log(\n    `  Host state dirs migrated to office keys: ${officeMigration.stateDirsMigrated.length}.`,\n  );\n}\n\ntry {\n  await validateSandbox(sandbox);\n} catch (error) {\n  handleStartupError(error);\n}\n\n// The one Workspace value for this process: workspace-global paths plus the\n// per-conversation Office factory. Constructed after the office migration so\n// every office it materializes lands in the office-key layout.\nconst workspace = createWorkspace({ root: workingDir, stateDir });\n\nconst vaultManager = new FileVaultManager(stateDir);\nif (vaultManager.isEnabled()) {\n  console.log(\n    sandbox.type === \"container\"\n      ? \"  Vault system enabled. Container vault active.\"\n      : sandbox.type === \"image\" || sandbox.type === \"cloudflare\"\n        ? \"  Vault system enabled. Conversation-scoped credential routing active.\"\n        : \"  Vault system enabled. Host mode will not inject vault env.\",\n  );\n}\n\nconst startupConfig = (() => {\n  try {\n    return loadGlobalSettings();\n  } catch (error) {\n    handleStartupError(error);\n  }\n})();\nconst sandboxSettings = startupConfig.sandbox;\nconst sandboxLimits =\n  sandboxSettings?.cpus || sandboxSettings?.memory\n    ? { cpus: sandboxSettings?.cpus, memory: sandboxSettings?.memory }\n    : undefined;\nconst sandboxBoostLimits =\n  sandboxSettings?.boost?.cpus || sandboxSettings?.boost?.memory\n    ? { cpus: sandboxSettings?.boost?.cpus, memory: sandboxSettings?.boost?.memory }\n    : undefined;\n\nconst provisioner =\n  sandbox.type === \"image\"\n    ? new DockerContainerManager(sandbox.image, {\n        limits: sandboxLimits,\n        boostLimits: sandboxBoostLimits,\n      })\n    : undefined;\n// Containers provisioned before the office migration mount the renamed\n// legacy paths. Their writable layers (everything installed inside) are\n// preserved: each container is committed and recreated with translated\n// mounts — on demand before its next message, and via a background sweep\n// after the bots start.\nconst registryOffices = new OfficeRegistry(stateDir).getOffices();\nif (provisioner && registryOffices.length > 0) {\n  provisioner.armContainerLayoutMigration(\n    buildContainerBindTranslator({\n      offices: registryOffices,\n      workspaceRoot: workingDir,\n      stateDir,\n    }),\n  );\n}\nconst resourceController = sandbox.type === \"image\" ? provisioner : undefined;\n\nif (sandbox.type === \"image\") {\n  ensureDirExists(workspace.skillsDir);\n  ensureDirExists(workspace.eventsDir);\n  ensureDirExists(workspace.agentsDir);\n  try {\n    writeFileSync(workspace.memoryPath, \"\", { flag: \"wx\" });\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"EEXIST\") throw err;\n  }\n}\n\nconst linkTokenStore = new InMemoryLinkTokenStore();\nconst sessionViewTokenStore = new InMemorySessionViewTokenStore();\nconst adminTokenStore = new InMemoryAdminTokenStore();\nsetInterval(() => linkTokenStore.purge(), 5 * 60 * 1000).unref();\nsetInterval(() => sessionViewTokenStore.purge(), 5 * 60 * 1000).unref();\nsetInterval(() => adminTokenStore.purge(), 5 * 60 * 1000).unref();\n\nfunction portalBaseUrl(): string | undefined {\n  if (LINK_BASE_URL) return LINK_BASE_URL;\n  if (LINK_PORT) return `http://localhost:${LINK_PORT}`;\n  return undefined;\n}\n/** Idle timeout for managed sandboxes (10 minutes) */\nconst MANAGED_SANDBOX_IDLE_TIMEOUT_MS = 10 * 60 * 1000;\n\nif (provisioner) {\n  await provisioner.reconcile();\n  await provisioner.stopIdle(MANAGED_SANDBOX_IDLE_TIMEOUT_MS);\n  setInterval(\n    () => provisioner.stopIdle(MANAGED_SANDBOX_IDLE_TIMEOUT_MS),\n    MANAGED_SANDBOX_IDLE_TIMEOUT_MS,\n  ).unref();\n}\n\nconst botsByPlatform: Record<string, MessagingBot> = {};\n\n/** github_* tool backends: PR push/create and CI checks, host-side. */\nfunction requireGithubBot(op: string): GithubMessagingBot {\n  const bot = botsByPlatform.github as GithubMessagingBot | undefined;\n  if (!bot) {\n    throw new Error(`${op}: the GitHub platform is not running`);\n  }\n  return bot;\n}\n\n/** slack_* tool backends: Block Kit posting/updating, host-side. */\nfunction requireSlackBot(op: string): SlackMessagingBotClass {\n  const bot = botsByPlatform.slack as SlackMessagingBotClass | undefined;\n  if (!bot) {\n    throw new Error(`${op}: the Slack platform is not running`);\n  }\n  return bot;\n}\n\n/**\n * Platform capability pack factories — only when the corresponding bot is\n * configured. Factories, not instances: each runner materializes its own\n * pack so per-run bind state never crosses conversations.\n */\nfunction buildPlatformToolPackFactories(): PlatformToolPackFactory[] {\n  const factories: PlatformToolPackFactory[] = [];\n  if (hasSlack) {\n    const platformSlackOps: PlatformSlackOps = {\n      postBlocks: async (conversationId, { text, blocks, threadTs }) => {\n        const bot = requireSlackBot(\"slack_blockkit\");\n        const ts = threadTs\n          ? await bot.postInThreadBlocks(conversationId, threadTs, text, blocks)\n          : await bot.postMessageBlocks(conversationId, text, blocks);\n        bot.logBotResponse(conversationId, text, ts, threadTs, blocks);\n        return { ts };\n      },\n      updateBlocks: async (conversationId, { ts, text, blocks, threadTs }) => {\n        const bot = requireSlackBot(\"slack_blockkit\");\n        await bot.updateMessageBlocks(conversationId, ts, text, blocks);\n        bot.logBotResponse(conversationId, text, ts, threadTs, blocks);\n      },\n      ownsBlockKitMessage: (conversationId, ts, threadTs) =>\n        requireSlackBot(\"slack_blockkit\").ownsBlockKitMessage(conversationId, ts, threadTs),\n    };\n    factories.push(() => createSlackToolPack(platformSlackOps));\n  }\n  if (!hasGithub) return factories;\n  const platformGithubOps: PlatformGithubOps = {\n    pushAndCreatePr: (conversationId, request) =>\n      requireGithubBot(\"github_pr\").ops.pushAndCreatePr(conversationId, request),\n    getChecks: (conversationId, branch) =>\n      requireGithubBot(\"github_checks\").ops.getChecks(conversationId, branch),\n    getJobLog: (conversationId, jobId) =>\n      requireGithubBot(\"github_checks\").ops.getJobLog(conversationId, jobId),\n    replyToReviewThread: (conversationId, commentId, body) =>\n      requireGithubBot(\"github_review_reply\").ops.replyToReviewThread(\n        conversationId,\n        commentId,\n        body,\n      ),\n    syncRepo: (conversationId, branch) =>\n      requireGithubBot(\"github_sync\").ops.syncRepo(conversationId, branch),\n    readGithub: (conversationId, request) =>\n      requireGithubBot(\"github_read\").ops.readGithub(conversationId, request),\n    manageIssue: (conversationId, request) =>\n      requireGithubBot(\"github_issue\").ops.manageIssue(conversationId, request),\n  };\n  factories.push(() => createGithubToolPack(platformGithubOps));\n  return factories;\n}\n\nconst handler = createConversationRuntime({\n  workspace,\n  sandbox,\n  vaultManager,\n  provisioner,\n  resourceController,\n  linkTokenStore,\n  sessionViewTokenStore,\n  adminTokenStore,\n  portalBaseUrl: portalBaseUrl(),\n  platformToolPackFactories: buildPlatformToolPackFactories(),\n});\n\nconst sandboxDesc =\n  sandbox.type === \"host\"\n    ? \"host\"\n    : sandbox.type === \"container\"\n      ? `container:${sandbox.container}`\n      : sandbox.type === \"image\"\n        ? `image:${sandbox.image}`\n        : `cloudflare:${sandbox.sandboxId}`;\nlog.logStartup(workingDir, sandboxDesc);\nlogHarnessStartupSummary();\n\n/**\n * One-look confirmation of the harness runtime surface, aimed at upgrade\n * verification: config moved from ~/.pi to ~/.mikan with no fallback, so a\n * missing auth.json here is the first thing to check when runs fail.\n */\nfunction logHarnessStartupSummary(): void {\n  const proxy =\n    process.env.HTTPS_PROXY ??\n    process.env.https_proxy ??\n    process.env.HTTP_PROXY ??\n    process.env.http_proxy;\n  log.logInfo(\n    `HTTP dispatcher: idle timeout ${httpIdleTimeoutMs}ms${proxy ? `, proxy ${proxy}` : \", no proxy\"}`,\n  );\n\n  const modelsPath = defaultModelsJsonPath();\n  log.logInfo(\n    existsSync(modelsPath)\n      ? `Harness models.json: ${modelsPath}`\n      : `Harness models.json: none (${modelsPath}) — built-in providers only`,\n  );\n}\n\nif (hasSlack) {\n  const slackMessagingBotToken = SLACK_BOT_TOKEN;\n  const slackAppToken = SLACK_APP_TOKEN;\n  if (!slackMessagingBotToken || !slackAppToken) {\n    throw new Error(\"Slack startup requires both SLACK_APP_TOKEN and SLACK_BOT_TOKEN\");\n  }\n  const slackMessagingBot = new SlackMessagingBotClass(handler, {\n    appToken: slackAppToken,\n    botToken: slackMessagingBotToken,\n    workspace,\n  });\n  botsByPlatform.slack = slackMessagingBot;\n  log.logInfo(\"Platform: Slack\");\n}\nif (hasTelegram) {\n  const telegramToken = TELEGRAM_BOT_TOKEN;\n  if (!telegramToken) {\n    throw new Error(\"Telegram startup requires TELEGRAM_BOT_TOKEN\");\n  }\n  const telegramMessagingBot = new TelegramMessagingBot(handler, {\n    token: telegramToken,\n    workspace,\n  });\n  botsByPlatform.telegram = telegramMessagingBot;\n  log.logInfo(\"Platform: Telegram\");\n}\nif (hasDiscord) {\n  const discordToken = DISCORD_BOT_TOKEN;\n  if (!discordToken) {\n    throw new Error(\"Discord startup requires DISCORD_BOT_TOKEN\");\n  }\n  const discordMessagingBot = new DiscordMessagingBot(handler, {\n    token: discordToken,\n    workspace,\n  });\n  botsByPlatform.discord = discordMessagingBot;\n  log.logInfo(\"Platform: Discord\");\n}\nif (hasGithub) {\n  if (!GITHUB_APP_ID || !GITHUB_INSTALLATION_ID) {\n    throw new Error(\"GitHub startup requires GITHUB_APP_ID and GITHUB_INSTALLATION_ID\");\n  }\n  // Env vars flatten PEM newlines to literal `\\n`; a key file avoids that.\n  const githubPrivateKey = GITHUB_APP_PRIVATE_KEY_PATH\n    ? readFileSync(GITHUB_APP_PRIVATE_KEY_PATH, \"utf-8\")\n    : GITHUB_APP_PRIVATE_KEY?.replace(/\\\\n/g, \"\\n\");\n  if (!githubPrivateKey) {\n    throw new Error(\n      \"GitHub startup requires GITHUB_APP_PRIVATE_KEY or GITHUB_APP_PRIVATE_KEY_PATH\",\n    );\n  }\n  const pollIntervalSeconds = GITHUB_POLL_INTERVAL ? parseInt(GITHUB_POLL_INTERVAL, 10) : NaN;\n  const githubMessagingBot = new GithubMessagingBot(handler, {\n    appId: GITHUB_APP_ID,\n    privateKey: githubPrivateKey,\n    installationId: GITHUB_INSTALLATION_ID,\n    repos: GITHUB_REPOS\n      ? GITHUB_REPOS.split(\",\")\n          .map((repo) => repo.trim())\n          .filter(Boolean)\n      : [],\n    pollIntervalMs:\n      (Number.isFinite(pollIntervalSeconds) && pollIntervalSeconds > 0 ? pollIntervalSeconds : 60) *\n      1000,\n    workspace,\n    syncStatePath: join(stateDir, \"github-sync.json\"),\n  });\n  botsByPlatform.github = githubMessagingBot;\n  log.logInfo(\"Platform: GitHub\");\n}\n\nconst githubBotForWebhook = botsByPlatform.github as GithubMessagingBot | undefined;\nif (GITHUB_WEBHOOK_SECRET && (!githubBotForWebhook || !LINK_PORT)) {\n  log.logWarning(\n    \"GITHUB_WEBHOOK_SECRET is set but \" +\n      (githubBotForWebhook ? \"LINK_PORT is not\" : \"the GitHub platform is not enabled\") +\n      \" — the webhook endpoint will not be served\",\n  );\n}\n\nconst webServer = LINK_PORT\n  ? startWebServer({\n      port: LINK_PORT,\n      linkTokenStore,\n      vaultManager,\n      notify: async (platform, conversationId, message) => {\n        const bot = botsByPlatform[platform];\n        if (bot) await bot.postMessage(conversationId, message);\n      },\n      sessionViewTokenStore,\n      sessionViewInteractive: { handler, botsByPlatform },\n      adminOptions: { adminTokenStore, workspace, runtime: handler, sandbox, botsByPlatform },\n      githubWebhook:\n        GITHUB_WEBHOOK_SECRET && githubBotForWebhook\n          ? {\n              secret: GITHUB_WEBHOOK_SECRET,\n              onPoke: () => githubBotForWebhook.requestPoll(),\n            }\n          : undefined,\n    })\n  : undefined;\n\nfunction closeWebServer(): Promise<void> {\n  if (!webServer) return Promise.resolve();\n  return new Promise((resolve, reject) => {\n    webServer.close((error) => (error ? reject(error) : resolve()));\n  });\n}\n\nasync function stopConversationIntake(): Promise<void> {\n  const results = await Promise.allSettled([\n    ...Object.values(botsByPlatform).map((bot) => bot.stop()),\n    closeWebServer(),\n  ]);\n  const failures = results.flatMap((result) =>\n    result.status === \"rejected\" ? [result.reason] : [],\n  );\n  if (failures.length > 0) throw new AggregateError(failures, \"Failed to stop conversation intake\");\n}\n\nasync function waitForGracefulDrain(drain: Promise<unknown>): Promise<boolean> {\n  let timeout: NodeJS.Timeout | undefined;\n  const settled = await Promise.race([\n    drain.then(() => true),\n    new Promise<false>((resolve) => {\n      timeout = setTimeout(() => resolve(false), INTAKE_DRAIN_TIMEOUT_MS);\n    }),\n  ]);\n  if (timeout) clearTimeout(timeout);\n  return settled;\n}\n\nasync function drainConversationWork(intakeStop: Promise<void>): Promise<void> {\n  const dreamStop = dreamScheduler.stop();\n  const gracefulDrain = Promise.allSettled([intakeStop, dreamStop]);\n  if (!(await waitForGracefulDrain(gracefulDrain))) {\n    const runtimeResult = await Promise.allSettled([handler.shutdown(0)]);\n    const failures: unknown[] = [\n      new Error(`Conversation work did not drain within ${INTAKE_DRAIN_TIMEOUT_MS}ms`),\n      ...runtimeResult.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : [])),\n    ];\n    throw new AggregateError(failures, \"Failed to drain conversation work\");\n  }\n\n  const results = [\n    ...(await gracefulDrain),\n    ...(await Promise.allSettled([handler.shutdown(INTAKE_DRAIN_TIMEOUT_MS)])),\n  ];\n  const failures = results.flatMap((result) =>\n    result.status === \"rejected\" ? [result.reason] : [],\n  );\n  if (failures.length > 0) throw new AggregateError(failures, \"Failed to drain conversation work\");\n}\n\n// Start events watcher with explicit platform routing\nconst eventsWatcher = new EventsWatcher(workspace.eventsDir, botsByPlatform);\nconst slackMessagingBot = botsByPlatform.slack as SlackMessagingBotClass | undefined;\nif (slackMessagingBot) {\n  slackMessagingBot.setEventsWatcher(eventsWatcher);\n}\neventsWatcher.start();\nconst dreamScheduler = new DreamScheduler(workspace, handler);\ndreamScheduler.start();\n\n// Handle shutdown. A second signal is an explicit request to stop waiting.\nconst shutdown = createProcessShutdownHandler({\n  stop: () => {\n    const intakeStop = stopConversationIntake();\n    return runShutdownSteps([\n      {\n        name: \"event watcher\",\n        run: async () => {\n          eventsWatcher.stop();\n        },\n      },\n      { name: \"conversation work\", run: () => drainConversationWork(intakeStop) },\n    ]);\n  },\n  flush: () => Sentry.close(5000),\n  captureError: (error) => {\n    Sentry.captureException(error);\n  },\n  warn: log.logWarning,\n  exit: (code) => process.exit(code),\n});\n\nprocess.on(\"SIGINT\", () => void shutdown(\"SIGINT\"));\nprocess.on(\"SIGTERM\", () => void shutdown(\"SIGTERM\"));\n\n// Start all bots\nawait Promise.all(\n  Object.values(botsByPlatform).map((bot) =>\n    bot.start().catch((err) => {\n      log.logWarning(\"Failed to start bot\", err instanceof Error ? err.message : String(err));\n      process.exit(1);\n    }),\n  ),\n);\n\n// Drain the container layout migration off the hot path; every unit is\n// idempotent, so an interrupted sweep simply resumes on the next boot.\nif (provisioner) {\n  void provisioner.sweepContainerLayoutMigration().catch((err) => {\n    log.logWarning(\n      \"Container layout sweep failed\",\n      err instanceof Error ? err.message : String(err),\n    );\n  });\n}\n"]}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AAEA,OAAO,+BAA+B,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,iBAAiB,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,4BAA4B,EAC5B,eAAe,EACf,4BAA4B,EAC5B,oBAAoB,EACpB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAE9E,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AAEvC,SAAS,UAAU;IACjB,2DAA2D;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG;QACpB,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC;KACpC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,oBAAoB,CAC9B,OAAO,EACP,CAAC,KAAK,EAAkC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC1D,GAAG,EAAE,CAAC,+CAA+C,CACtD,CAAC;QACF,IAAI,OAAO,GAAG,EAAE,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACnD,MAAM,eAAe,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACnD,MAAM,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACzD,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACvD,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAC/C,MAAM,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjE,MAAM,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AAC3E,MAAM,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAC7C,MAAM,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAC7D,MAAM,qBAAqB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;AAC/D,yEAAyE;AACzE,kEAAkE;AAClE,MAAM,aAAa,GAAG,kBAAkB,EAAE,CAAC;AAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAC3C,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,MAAM,sBAAsB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AACjE,MAAM,aAAa,GAAgC,sBAAsB;IACvE,CAAC,CAAC,EAAE,GAAG,EAAE,sBAAsB,EAAE;IACjC,CAAC,CAAC,SAAS,CAAC;AAEd,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,oCAAoC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,sBAAsB,IAAI,gCAAgC,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CACX,sBAAsB,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;YACxF,kEAAkE;YAClE,wBAAwB,IAAI,EAAE,CACjC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CACX,sBAAsB,IAAI,oBAAoB,IAAI,CAAC,GAAG,gCAAgC,IAAI,IAAI;YAC5F,+EAA+E,CAClF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;QAChD,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAc,CAAC;AACnB,IAAI,CAAC;IACH,IAAI,GAAG,WAAW,EAAE,CAAC;AACvB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,mEAAmE;AACnE,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;IAC3B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,iEAAiE;AACjE,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAC/E,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;AAE3C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;IACxB,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,sBAAsB;AACtB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;IACrD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,6EAA6E;AAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;AAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;AAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;AACnC,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACrC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AAC/B,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC7B,eAAe,CAAC,UAAU,CAAC,CAAC;AAC9B,CAAC;AACD,IAAI,CAAC;IACH,8BAA8B,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;AACjD,MAAM,UAAU,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAE7C,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,yCAAyC;AACzC,MAAM,gBAAgB,GAAmB;IACvC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,UAAU,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,SAAS,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;CAC5C,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE;IAC5B,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,IACE,eAAe,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;IAClC,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;IACjC,eAAe,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC;IACzC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAC5C,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC,eAAe,CAAC,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AACD,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,GAAG,CACT,8BAA8B,eAAe,CAAC,QAAQ,CAAC,MAAM,UAAU;QACrE,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,aAAa,CACnD,CAAC;AACJ,CAAC;AACD,IAAI,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,yCAAyC,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;AACpG,CAAC;AACD,IAAI,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CACT,8CAA8C,eAAe,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAC1F,CAAC;AACJ,CAAC;AAED,IAAI,CAAC;IACH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,+DAA+D;AAC/D,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAElE,MAAM,YAAY,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AACpD,IAAI,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,IAAI,KAAK,WAAW;QAC1B,CAAC,CAAC,iDAAiD;QACnD,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;YACzD,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,8DAA8D,CACrE,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE;IAC1B,IAAI,CAAC;QACH,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AACL,MAAM,eAAe,GAAG,aAAa,CAAC,OAAO,CAAC;AAC9C,MAAM,aAAa,GACjB,eAAe,EAAE,IAAI,IAAI,eAAe,EAAE,MAAM;IAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE;IAClE,CAAC,CAAC,SAAS,CAAC;AAChB,MAAM,kBAAkB,GACtB,eAAe,EAAE,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,KAAK,EAAE,MAAM;IAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE;IAChF,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,OAAO;IACtB,CAAC,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE;QACxC,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,kBAAkB;KAChC,CAAC;IACJ,CAAC,CAAC,SAAS,CAAC;AAChB,uEAAuE;AACvE,wEAAwE;AACxE,uEAAuE;AACvE,yEAAyE;AACzE,wBAAwB;AACxB,MAAM,eAAe,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;AAClE,IAAI,WAAW,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IAC9C,WAAW,CAAC,2BAA2B,CACrC,4BAA4B,CAAC;QAC3B,OAAO,EAAE,eAAe;QACxB,aAAa,EAAE,UAAU;QACzB,QAAQ;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AACD,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9E,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;IAC7B,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,sBAAsB,EAAE,CAAC;AACpD,MAAM,qBAAqB,GAAG,IAAI,6BAA6B,EAAE,CAAC;AAClE,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;AACtD,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AACjE,WAAW,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AACxE,WAAW,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;AAElE,SAAS,aAAa;IACpB,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,oBAAoB,SAAS,EAAE,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC;AACD,sDAAsD;AACtD,MAAM,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,WAAW,CAAC,SAAS,EAAE,CAAC;IAC9B,MAAM,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;IAC5D,WAAW,CACT,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAC3D,+BAA+B,CAChC,CAAC,KAAK,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,cAAc,GAAiC,EAAE,CAAC;AAExD,uEAAuE;AACvE,SAAS,gBAAgB,CAAC,EAAU;IAClC,MAAM,GAAG,GAAG,cAAc,CAAC,MAAwC,CAAC;IACpE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,EAAU;IACjC,MAAM,GAAG,GAAG,cAAc,CAAC,KAA2C,CAAC;IACvE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,8BAA8B;IACrC,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,gBAAgB,GAAqB;YACzC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAC/D,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,MAAM,EAAE,GAAG,QAAQ;oBACjB,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC;oBACtE,CAAC,CAAC,MAAM,GAAG,CAAC,iBAAiB,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAC9D,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,CAAC;YAChB,CAAC;YACD,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACrE,MAAM,GAAG,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;gBAC9C,MAAM,GAAG,CAAC,mBAAmB,CAAC,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAChE,GAAG,CAAC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjE,CAAC;YACD,mBAAmB,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CACpD,eAAe,CAAC,gBAAgB,CAAC,CAAC,mBAAmB,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC;SACtF,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,iBAAiB,GAAsB;QAC3C,eAAe,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAC3C,gBAAgB,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC;QAC5E,SAAS,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CACpC,gBAAgB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC;QACzE,SAAS,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,CACnC,gBAAgB,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC;QACxE,mBAAmB,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CACvD,gBAAgB,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAC7D,cAAc,EACd,SAAS,EACT,IAAI,CACL;QACH,QAAQ,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,CACnC,gBAAgB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QACtE,UAAU,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CACtC,gBAAgB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,EAAE,OAAO,CAAC;QACzE,WAAW,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CACvC,gBAAgB,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC;KAC5E,CAAC;IACF,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,OAAO,GAAG,yBAAyB,CAAC;IACxC,SAAS;IACT,OAAO;IACP,YAAY;IACZ,WAAW;IACX,kBAAkB;IAClB,cAAc;IACd,qBAAqB;IACrB,eAAe;IACf,aAAa;IACb,aAAa,EAAE,aAAa,EAAE;IAC9B,yBAAyB,EAAE,8BAA8B,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,MAAM;IACrB,CAAC,CAAC,MAAM;IACR,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;QAC5B,CAAC,CAAC,aAAa,OAAO,CAAC,SAAS,EAAE;QAClC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO;YACxB,CAAC,CAAC,SAAS,OAAO,CAAC,KAAK,EAAE;YAC1B,CAAC,CAAC,cAAc,OAAO,CAAC,SAAS,EAAE,CAAC;AAC5C,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACxC,wBAAwB,EAAE,CAAC;AAE3B;;;;GAIG;AACH,SAAS,wBAAwB;IAC/B,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzB,GAAG,CAAC,OAAO,CACT,iCAAiC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,CACnG,CAAC;IAEF,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,GAAG,CAAC,OAAO,CACT,UAAU,CAAC,UAAU,CAAC;QACpB,CAAC,CAAC,wBAAwB,UAAU,EAAE;QACtC,CAAC,CAAC,8BAA8B,UAAU,6BAA6B,CAC1E,CAAC;AACJ,CAAC;AAED,IAAI,QAAQ,EAAE,CAAC;IACb,MAAM,sBAAsB,GAAG,eAAe,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC;IACtC,IAAI,CAAC,sBAAsB,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,sBAAsB,CAAC,OAAO,EAAE;QAC5D,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,sBAAsB;QAChC,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,GAAG,iBAAiB,CAAC;IACzC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC;AACD,IAAI,WAAW,EAAE,CAAC;IAChB,MAAM,aAAa,GAAG,kBAAkB,CAAC;IACzC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE;QAC7D,KAAK,EAAE,aAAa;QACpB,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,QAAQ,GAAG,oBAAoB,CAAC;IAC/C,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AACpC,CAAC;AACD,IAAI,UAAU,EAAE,CAAC;IACf,MAAM,YAAY,GAAG,iBAAiB,CAAC;IACvC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,OAAO,EAAE;QAC3D,KAAK,EAAE,YAAY;QACnB,SAAS;KACV,CAAC,CAAC;IACH,cAAc,CAAC,OAAO,GAAG,mBAAmB,CAAC;IAC7C,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACnC,CAAC;AACD,IAAI,SAAS,EAAE,CAAC;IACd,IAAI,CAAC,aAAa,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,2BAA2B;QAClD,CAAC,CAAC,YAAY,CAAC,2BAA2B,EAAE,OAAO,CAAC;QACpD,CAAC,CAAC,sBAAsB,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5F,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,OAAO,EAAE;QACzD,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,gBAAgB;QAC5B,cAAc,EAAE,sBAAsB;QACtC,KAAK,EAAE,YAAY;YACjB,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC;iBACpB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,EAAE;QACN,cAAc,EACZ,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,mBAAmB,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,IAAI;QACN,SAAS;QACT,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC;KAClD,CAAC,CAAC;IACH,cAAc,CAAC,MAAM,GAAG,kBAAkB,CAAC;IAC3C,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,mBAAmB,GAAG,cAAc,CAAC,MAAwC,CAAC;AACpF,IAAI,qBAAqB,IAAI,CAAC,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;IAClE,GAAG,CAAC,UAAU,CACZ,mCAAmC;QACjC,CAAC,mBAAmB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,oCAAoC,CAAC;QACjF,4CAA4C,CAC/C,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,SAAS;IACzB,CAAC,CAAC,cAAc,CAAC;QACb,IAAI,EAAE,SAAS;QACf,cAAc;QACd,YAAY;QACZ,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE;YAClD,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,GAAG;gBAAE,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,qBAAqB;QACrB,sBAAsB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;QACnD,YAAY,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE;QACvF,aAAa,EACX,qBAAqB,IAAI,mBAAmB;YAC1C,CAAC,CAAC;gBACE,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE;aAChD;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;IACJ,CAAC,CAAC,SAAS,CAAC;AAEd,SAAS,cAAc;IACrB,IAAI,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,sBAAsB;IACnC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACvC,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACzD,cAAc,EAAE;KACjB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAuB;IACzD,IAAI,OAAmC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACtB,IAAI,OAAO,CAAQ,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACtE,CAAC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,OAAO;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAyB;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC,MAAM,oBAAoB,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAc;YAC1B,IAAI,KAAK,CAAC,0CAA0C,uBAAuB,IAAI,CAAC;YAChF,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAC5F,CAAC;QACF,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,MAAM,aAAa,CAAC;QACxB,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;KAC3E,CAAC;IACF,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;AACnG,CAAC;AAED,sDAAsD;AACtD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,cAAc,CAAC,KAA2C,CAAC;AACrF,IAAI,iBAAiB,EAAE,CAAC;IACtB,iBAAiB,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;AACpD,CAAC;AACD,aAAa,CAAC,KAAK,EAAE,CAAC;AACtB,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAC9D,cAAc,CAAC,KAAK,EAAE,CAAC;AAEvB,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,4BAA4B,CAAC;IAC5C,IAAI,EAAE,GAAG,EAAE;QACT,MAAM,UAAU,GAAG,sBAAsB,EAAE,CAAC;QAC5C,OAAO,gBAAgB,CAAC;YACtB;gBACE,IAAI,EAAE,eAAe;gBACrB,GAAG,EAAE,KAAK,IAAI,EAAE;oBACd,aAAa,CAAC,IAAI,EAAE,CAAC;gBACvB,CAAC;aACF;YACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE;SAC5E,CAAC,CAAC;IACL,CAAC;IACD,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAC/B,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;QACtB,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,EAAE,GAAG,CAAC,UAAU;IACpB,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAEtD,iBAAiB;AACjB,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACxC,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACxB,GAAG,CAAC,UAAU,CAAC,qBAAqB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CACH,CACF,CAAC;AAEF,uEAAuE;AACvE,uEAAuE;AACvE,IAAI,WAAW,EAAE,CAAC;IAChB,KAAK,WAAW,CAAC,6BAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC7D,GAAG,CAAC,UAAU,CACZ,+BAA+B,EAC/B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["#!/usr/bin/env node\n\nimport \"./observability/instrument.js\";\n\nimport { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport type { MessagingBot, PlatformName } from \"./adapter.js\";\nimport { DiscordMessagingBot } from \"./adapters/discord/bot.js\";\nimport { GithubMessagingBot } from \"./adapters/github/bot.js\";\nimport { createGithubToolPack } from \"./adapters/github/tool-pack.js\";\nimport type { PlatformGithubOps } from \"./adapters/github/types.js\";\nimport { TelegramMessagingBot } from \"./adapters/telegram/bot.js\";\nimport { SlackMessagingBot as SlackMessagingBotClass } from \"./adapters/slack/bot.js\";\nimport { createSlackToolPack } from \"./adapters/slack/tool-pack.js\";\nimport type { PlatformSlackOps } from \"./adapters/slack/types.js\";\nimport type { PlatformToolPackFactory } from \"./tools/types.js\";\nimport { downloadChannel } from \"./cli/download.js\";\nimport { DreamScheduler } from \"./dream/index.js\";\nimport { EventsWatcher } from \"./events.js\";\nimport * as log from \"./log.js\";\nimport { createProcessShutdownHandler, runShutdownSteps } from \"./process-lifecycle.js\";\nimport { startWebServer } from \"./web/server.js\";\nimport { InMemoryAdminTokenStore } from \"./web/admin/portal.js\";\nimport { InMemoryLinkTokenStore } from \"./web/login/portal.js\";\nimport { InMemorySessionViewTokenStore } from \"./web/session-view/portal.js\";\nimport { DockerContainerManager } from \"./provisioner.js\";\nimport {\n  assertStateDirOutsideWorkspace,\n  loadGlobalSettings,\n  MissingGlobalSettingsError,\n  resolveLinkBaseUrl,\n} from \"./config.js\";\nimport {\n  configureHttpDispatcher,\n  defaultModelsJsonPath,\n  parseHttpIdleTimeoutMs,\n} from \"./harness/index.js\";\nimport { readEnv, setEnvAliases } from \"./env-manifest.js\";\nimport { ensureDirExists, isRecord, readJsonFileIfExists } from \"./utils/file-guards.js\";\nimport { SandboxError, validateSandbox } from \"./sandbox/index.js\";\nimport { helpText, resolveBoot, type BootPlan } from \"./cli/boot.js\";\nimport { runOnboardCommand } from \"./cli/onboard.js\";\nimport { envReport, noPlatformsMessage, platformIsActive } from \"./env-manifest.js\";\nimport { FileVaultManager } from \"./vault/index.js\";\nimport { runOfficeCommand } from \"./cli/office.js\";\nimport { runSessionsCommand } from \"./cli/sessions.js\";\nimport {\n  buildContainerBindTranslator,\n  createWorkspace,\n  formatUnmigratedOfficesError,\n  migrateLegacyOffices,\n  OfficeRegistry,\n} from \"./office/index.js\";\nimport { createConversationRuntime } from \"./runtime/conversation-runtime.js\";\nimport type { McpServerConfig } from \"./mcp/types.js\";\nimport * as Sentry from \"@sentry/node\";\n\nfunction getVersion(): string {\n  // Try to find package.json in the dist directory or parent\n  const moduleDir = dirname(fileURLToPath(import.meta.url));\n  const possiblePaths = [\n    join(moduleDir, \"package.json\"),\n    join(dirname(moduleDir), \"package.json\"),\n    join(process.cwd(), \"package.json\"),\n  ];\n\n  for (const pkgPath of possiblePaths) {\n    const pkg = readJsonFileIfExists(\n      pkgPath,\n      (value): value is { version?: unknown } => isRecord(value),\n      () => \"Ignoring package.json while resolving version\",\n    );\n    if (typeof pkg?.version === \"string\" && pkg.version) return pkg.version;\n  }\n  return \"unknown\";\n}\n\nconst SLACK_APP_TOKEN = readEnv(\"SLACK_APP_TOKEN\");\nconst SLACK_BOT_TOKEN = readEnv(\"SLACK_BOT_TOKEN\");\nconst TELEGRAM_BOT_TOKEN = readEnv(\"TELEGRAM_BOT_TOKEN\");\nconst DISCORD_BOT_TOKEN = readEnv(\"DISCORD_BOT_TOKEN\");\nconst GITHUB_APP_ID = readEnv(\"GITHUB_APP_ID\");\nconst GITHUB_APP_PRIVATE_KEY = readEnv(\"GITHUB_APP_PRIVATE_KEY\");\nconst GITHUB_APP_PRIVATE_KEY_PATH = readEnv(\"GITHUB_APP_PRIVATE_KEY_PATH\");\nconst GITHUB_INSTALLATION_ID = readEnv(\"GITHUB_INSTALLATION_ID\");\nconst GITHUB_REPOS = readEnv(\"GITHUB_REPOS\");\nconst GITHUB_POLL_INTERVAL = readEnv(\"GITHUB_POLL_INTERVAL\");\nconst GITHUB_WEBHOOK_SECRET = readEnv(\"GITHUB_WEBHOOK_SECRET\");\n// Externally-visible base URL of the link/OAuth server; the env read and\n// trailing-slash normalization live in config.resolveLinkBaseUrl.\nconst LINK_BASE_URL = resolveLinkBaseUrl();\nconst LINK_PORT_RAW = readEnv(\"LINK_PORT\");\nconst LINK_PORT = LINK_PORT_RAW ? parseInt(LINK_PORT_RAW, 10) : LINK_BASE_URL ? 8181 : undefined;\nconst OPENCONNECTOR_ENDPOINT = readEnv(\"OPENCONNECTOR_ENDPOINT\");\nconst openConnector: McpServerConfig | undefined = OPENCONNECTOR_ENDPOINT\n  ? { url: OPENCONNECTOR_ENDPOINT }\n  : undefined;\n\nconst WORLD_WRITABLE_MODE = 0o002;\nconst INTAKE_DRAIN_TIMEOUT_MS = 30_000;\n\nfunction ensureSecureStateDir(path: string): void {\n  let stat;\n  try {\n    stat = statSync(path);\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException).code;\n    if (code === \"ENOENT\") {\n      mkdirSync(path, { recursive: true, mode: 0o700 });\n      return;\n    }\n    console.error(`Error: cannot access --state-dir ${path}: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  if (!stat.isDirectory()) {\n    console.error(`Error: --state-dir ${path} exists but is not a directory`);\n    process.exit(1);\n  }\n\n  if (stat.mode & WORLD_WRITABLE_MODE) {\n    console.error(\n      `Error: --state-dir ${path} is world-writable (mode ${(stat.mode & 0o777).toString(8)}). ` +\n        `Credentials stored there would be exposed to other local users. ` +\n        `Fix with: chmod 0700 ${path}`,\n    );\n    process.exit(1);\n  }\n\n  const euid = typeof process.geteuid === \"function\" ? process.geteuid() : undefined;\n  if (euid !== undefined && stat.uid !== euid) {\n    console.error(\n      `Error: --state-dir ${path} is owned by uid ${stat.uid} but mikan is running as uid ${euid}. ` +\n        `Run mikan as the directory owner or point --state-dir at a directory you own.`,\n    );\n    process.exit(1);\n  }\n}\n\nfunction handleStartupError(error: unknown): never {\n  if (error instanceof SandboxError) {\n    for (const line of error.formatForCli()) {\n      console.error(line);\n    }\n    process.exit(1);\n  }\n  if (error instanceof MissingGlobalSettingsError) {\n    console.error(`Missing global settings: ${error.settingsPath}`);\n    console.error(\"\");\n    console.error(\"Run onboarding to create it:\");\n    console.error(`  mikan --onboard --state-dir ${stateDir}`);\n    console.error(\"\");\n    console.error(\"Then review the generated settings.json and start mikan again.\");\n    process.exit(1);\n  }\n  if (error instanceof Error) {\n    console.error(`Error: ${error.message}`);\n    process.exit(1);\n  }\n  console.error(String(error));\n  process.exit(1);\n}\n\nlet plan: BootPlan;\ntry {\n  plan = resolveBoot();\n} catch (error) {\n  handleStartupError(error);\n}\n\n// `mikan office …` inspects/claims conversation offices and exits.\nif (plan.mode === \"office\") {\n  process.exit(runOfficeCommand(plan.officeArgs ?? []));\n}\n\n// `mikan sessions …` migrates/maintains session files and exits.\nif (plan.mode === \"sessions\") {\n  process.exit(await runSessionsCommand(plan.sessionsArgs ?? []));\n}\n\n// Global fetch: proxy support (HTTP_PROXY/HTTPS_PROXY/NO_PROXY) and idle\n// timeouts so a stalled LLM stream errors out instead of hanging a session.\nconst httpIdleTimeoutMs = parseHttpIdleTimeoutMs(readEnv(\"HTTP_IDLE_TIMEOUT\"));\nconfigureHttpDispatcher(httpIdleTimeoutMs);\n\nif (plan.mode === \"help\") {\n  console.log(helpText());\n  process.exit(0);\n}\n\nif (plan.mode === \"env\") {\n  console.log(envReport());\n  process.exit(0);\n}\n\nif (plan.mode === \"version\") {\n  console.log(getVersion());\n  process.exit(0);\n}\n\n// Handle onboard mode\nif (plan.mode === \"onboard\") {\n  const stateDir = plan.stateDir;\n  setEnvAliases(\"STATE_DIR\", stateDir);\n  ensureSecureStateDir(stateDir);\n  try {\n    process.exit(await runOnboardCommand(stateDir));\n  } catch (err) {\n    console.error(err instanceof Error ? err.message : String(err));\n    process.exit(1);\n  }\n}\n\n// Handle --download mode (Slack only)\nif (plan.mode === \"download\" && plan.downloadChannel) {\n  if (!SLACK_BOT_TOKEN) {\n    console.error(\"Missing env: SLACK_BOT_TOKEN\");\n    process.exit(1);\n  }\n  await downloadChannel(plan.downloadChannel, SLACK_BOT_TOKEN);\n  process.exit(0);\n}\n\n// Normal bot mode - working dir is optional and defaults under the state dir\nconst sandbox = plan.sandbox;\nconst stateDir = plan.stateDir;\nconst workingDir = plan.workingDir;\nsetEnvAliases(\"STATE_DIR\", stateDir);\nensureSecureStateDir(stateDir);\nif (!plan.workingDirExplicit) {\n  ensureDirExists(workingDir);\n}\ntry {\n  assertStateDirOutsideWorkspace(stateDir, workingDir, sandbox.type);\n} catch (error) {\n  handleStartupError(error);\n}\n\n// Validate platform tokens — activation rules live in the env manifest.\nconst hasSlack = platformIsActive(\"slack\");\nconst hasTelegram = platformIsActive(\"telegram\");\nconst hasDiscord = platformIsActive(\"discord\");\nconst hasGithub = platformIsActive(\"github\");\n\nif (!hasSlack && !hasTelegram && !hasDiscord && !hasGithub) {\n  console.error(noPlatformsMessage());\n  process.exit(1);\n}\n\n// Move legacy raw-id conversation directories to the office-key layout before\n// anything touches the workspace. Runs every boot; a completed migration is a\n// no-op. Unowned or failed offices are fatal: after the layout flip a legacy\n// directory is invisible to the runtime, and booting anyway would present\n// those conversations as silently empty.\nconst enabledPlatforms: PlatformName[] = [\n  ...(hasSlack ? ([\"slack\"] as const) : []),\n  ...(hasTelegram ? ([\"telegram\"] as const) : []),\n  ...(hasDiscord ? ([\"discord\"] as const) : []),\n  ...(hasGithub ? ([\"github\"] as const) : []),\n];\nconst officeMigration = (() => {\n  try {\n    return migrateLegacyOffices({ workspaceRoot: workingDir, stateDir, enabledPlatforms });\n  } catch (error) {\n    handleStartupError(error);\n  }\n})();\nif (\n  officeMigration.unowned.length > 0 ||\n  officeMigration.failed.length > 0 ||\n  officeMigration.vaultConflicts.length > 0 ||\n  officeMigration.stateDirConflicts.length > 0\n) {\n  console.error(formatUnmigratedOfficesError(officeMigration));\n  process.exit(1);\n}\nif (officeMigration.migrated.length > 0 || officeMigration.recovered.length > 0) {\n  console.log(\n    `  Office layout migration: ${officeMigration.migrated.length} moved, ` +\n      `${officeMigration.recovered.length} recovered.`,\n  );\n}\nif (officeMigration.vaultKeysMigrated.length > 0) {\n  console.log(`  Vault keys migrated to office keys: ${officeMigration.vaultKeysMigrated.length}.`);\n}\nif (officeMigration.stateDirsMigrated.length > 0) {\n  console.log(\n    `  Host state dirs migrated to office keys: ${officeMigration.stateDirsMigrated.length}.`,\n  );\n}\n\ntry {\n  await validateSandbox(sandbox);\n} catch (error) {\n  handleStartupError(error);\n}\n\n// The one Workspace value for this process: workspace-global paths plus the\n// per-conversation Office factory. Constructed after the office migration so\n// every office it materializes lands in the office-key layout.\nconst workspace = createWorkspace({ root: workingDir, stateDir });\n\nconst vaultManager = new FileVaultManager(stateDir);\nif (vaultManager.isEnabled()) {\n  console.log(\n    sandbox.type === \"container\"\n      ? \"  Vault system enabled. Container vault active.\"\n      : sandbox.type === \"image\" || sandbox.type === \"cloudflare\"\n        ? \"  Vault system enabled. Conversation-scoped credential routing active.\"\n        : \"  Vault system enabled. Host mode will not inject vault env.\",\n  );\n}\n\nconst startupConfig = (() => {\n  try {\n    return loadGlobalSettings();\n  } catch (error) {\n    handleStartupError(error);\n  }\n})();\nconst sandboxSettings = startupConfig.sandbox;\nconst sandboxLimits =\n  sandboxSettings?.cpus || sandboxSettings?.memory\n    ? { cpus: sandboxSettings?.cpus, memory: sandboxSettings?.memory }\n    : undefined;\nconst sandboxBoostLimits =\n  sandboxSettings?.boost?.cpus || sandboxSettings?.boost?.memory\n    ? { cpus: sandboxSettings?.boost?.cpus, memory: sandboxSettings?.boost?.memory }\n    : undefined;\n\nconst provisioner =\n  sandbox.type === \"image\"\n    ? new DockerContainerManager(sandbox.image, {\n        limits: sandboxLimits,\n        boostLimits: sandboxBoostLimits,\n      })\n    : undefined;\n// Containers provisioned before the office migration mount the renamed\n// legacy paths. Their writable layers (everything installed inside) are\n// preserved: each container is committed and recreated with translated\n// mounts — on demand before its next message, and via a background sweep\n// after the bots start.\nconst registryOffices = new OfficeRegistry(stateDir).getOffices();\nif (provisioner && registryOffices.length > 0) {\n  provisioner.armContainerLayoutMigration(\n    buildContainerBindTranslator({\n      offices: registryOffices,\n      workspaceRoot: workingDir,\n      stateDir,\n    }),\n  );\n}\nconst resourceController = sandbox.type === \"image\" ? provisioner : undefined;\n\nif (sandbox.type === \"image\") {\n  ensureDirExists(workspace.skillsDir);\n  ensureDirExists(workspace.eventsDir);\n  ensureDirExists(workspace.agentsDir);\n  try {\n    writeFileSync(workspace.memoryPath, \"\", { flag: \"wx\" });\n  } catch (err) {\n    if ((err as NodeJS.ErrnoException).code !== \"EEXIST\") throw err;\n  }\n}\n\nconst linkTokenStore = new InMemoryLinkTokenStore();\nconst sessionViewTokenStore = new InMemorySessionViewTokenStore();\nconst adminTokenStore = new InMemoryAdminTokenStore();\nsetInterval(() => linkTokenStore.purge(), 5 * 60 * 1000).unref();\nsetInterval(() => sessionViewTokenStore.purge(), 5 * 60 * 1000).unref();\nsetInterval(() => adminTokenStore.purge(), 5 * 60 * 1000).unref();\n\nfunction portalBaseUrl(): string | undefined {\n  if (LINK_BASE_URL) return LINK_BASE_URL;\n  if (LINK_PORT) return `http://localhost:${LINK_PORT}`;\n  return undefined;\n}\n/** Idle timeout for managed sandboxes (10 minutes) */\nconst MANAGED_SANDBOX_IDLE_TIMEOUT_MS = 10 * 60 * 1000;\n\nif (provisioner) {\n  await provisioner.reconcile();\n  await provisioner.stopIdle(MANAGED_SANDBOX_IDLE_TIMEOUT_MS);\n  setInterval(\n    () => provisioner.stopIdle(MANAGED_SANDBOX_IDLE_TIMEOUT_MS),\n    MANAGED_SANDBOX_IDLE_TIMEOUT_MS,\n  ).unref();\n}\n\nconst botsByPlatform: Record<string, MessagingBot> = {};\n\n/** github_* tool backends: PR push/create and CI checks, host-side. */\nfunction requireGithubBot(op: string): GithubMessagingBot {\n  const bot = botsByPlatform.github as GithubMessagingBot | undefined;\n  if (!bot) {\n    throw new Error(`${op}: the GitHub platform is not running`);\n  }\n  return bot;\n}\n\n/** slack_* tool backends: Block Kit posting/updating, host-side. */\nfunction requireSlackBot(op: string): SlackMessagingBotClass {\n  const bot = botsByPlatform.slack as SlackMessagingBotClass | undefined;\n  if (!bot) {\n    throw new Error(`${op}: the Slack platform is not running`);\n  }\n  return bot;\n}\n\n/**\n * Platform capability pack factories — only when the corresponding bot is\n * configured. Factories, not instances: each runner materializes its own\n * pack so per-run bind state never crosses conversations.\n */\nfunction buildPlatformToolPackFactories(): PlatformToolPackFactory[] {\n  const factories: PlatformToolPackFactory[] = [];\n  if (hasSlack) {\n    const platformSlackOps: PlatformSlackOps = {\n      postBlocks: async (conversationId, { text, blocks, threadTs }) => {\n        const bot = requireSlackBot(\"slack_blockkit\");\n        const ts = threadTs\n          ? await bot.postInThreadBlocks(conversationId, threadTs, text, blocks)\n          : await bot.postMessageBlocks(conversationId, text, blocks);\n        bot.logBotResponse(conversationId, text, ts, threadTs, blocks);\n        return { ts };\n      },\n      updateBlocks: async (conversationId, { ts, text, blocks, threadTs }) => {\n        const bot = requireSlackBot(\"slack_blockkit\");\n        await bot.updateMessageBlocks(conversationId, ts, text, blocks);\n        bot.logBotResponse(conversationId, text, ts, threadTs, blocks);\n      },\n      ownsBlockKitMessage: (conversationId, ts, threadTs) =>\n        requireSlackBot(\"slack_blockkit\").ownsBlockKitMessage(conversationId, ts, threadTs),\n    };\n    factories.push(() => createSlackToolPack(platformSlackOps));\n  }\n  if (!hasGithub) return factories;\n  const platformGithubOps: PlatformGithubOps = {\n    pushAndCreatePr: (conversationId, request) =>\n      requireGithubBot(\"github_pr\").ops.pushAndCreatePr(conversationId, request),\n    getChecks: (conversationId, branch) =>\n      requireGithubBot(\"github_checks\").ops.getChecks(conversationId, branch),\n    getJobLog: (conversationId, jobId) =>\n      requireGithubBot(\"github_checks\").ops.getJobLog(conversationId, jobId),\n    replyToReviewThread: (conversationId, commentId, body) =>\n      requireGithubBot(\"github_review_reply\").ops.replyToReviewThread(\n        conversationId,\n        commentId,\n        body,\n      ),\n    syncRepo: (conversationId, branch) =>\n      requireGithubBot(\"github_sync\").ops.syncRepo(conversationId, branch),\n    readGithub: (conversationId, request) =>\n      requireGithubBot(\"github_read\").ops.readGithub(conversationId, request),\n    manageIssue: (conversationId, request) =>\n      requireGithubBot(\"github_issue\").ops.manageIssue(conversationId, request),\n  };\n  factories.push(() => createGithubToolPack(platformGithubOps));\n  return factories;\n}\n\nconst handler = createConversationRuntime({\n  workspace,\n  sandbox,\n  vaultManager,\n  provisioner,\n  resourceController,\n  linkTokenStore,\n  sessionViewTokenStore,\n  adminTokenStore,\n  openConnector,\n  portalBaseUrl: portalBaseUrl(),\n  platformToolPackFactories: buildPlatformToolPackFactories(),\n});\n\nconst sandboxDesc =\n  sandbox.type === \"host\"\n    ? \"host\"\n    : sandbox.type === \"container\"\n      ? `container:${sandbox.container}`\n      : sandbox.type === \"image\"\n        ? `image:${sandbox.image}`\n        : `cloudflare:${sandbox.sandboxId}`;\nlog.logStartup(workingDir, sandboxDesc);\nlogHarnessStartupSummary();\n\n/**\n * One-look confirmation of the harness runtime surface, aimed at upgrade\n * verification: config moved from ~/.pi to ~/.mikan with no fallback, so a\n * missing auth.json here is the first thing to check when runs fail.\n */\nfunction logHarnessStartupSummary(): void {\n  const proxy =\n    process.env.HTTPS_PROXY ??\n    process.env.https_proxy ??\n    process.env.HTTP_PROXY ??\n    process.env.http_proxy;\n  log.logInfo(\n    `HTTP dispatcher: idle timeout ${httpIdleTimeoutMs}ms${proxy ? `, proxy ${proxy}` : \", no proxy\"}`,\n  );\n\n  const modelsPath = defaultModelsJsonPath();\n  log.logInfo(\n    existsSync(modelsPath)\n      ? `Harness models.json: ${modelsPath}`\n      : `Harness models.json: none (${modelsPath}) — built-in providers only`,\n  );\n}\n\nif (hasSlack) {\n  const slackMessagingBotToken = SLACK_BOT_TOKEN;\n  const slackAppToken = SLACK_APP_TOKEN;\n  if (!slackMessagingBotToken || !slackAppToken) {\n    throw new Error(\"Slack startup requires both SLACK_APP_TOKEN and SLACK_BOT_TOKEN\");\n  }\n  const slackMessagingBot = new SlackMessagingBotClass(handler, {\n    appToken: slackAppToken,\n    botToken: slackMessagingBotToken,\n    workspace,\n  });\n  botsByPlatform.slack = slackMessagingBot;\n  log.logInfo(\"Platform: Slack\");\n}\nif (hasTelegram) {\n  const telegramToken = TELEGRAM_BOT_TOKEN;\n  if (!telegramToken) {\n    throw new Error(\"Telegram startup requires TELEGRAM_BOT_TOKEN\");\n  }\n  const telegramMessagingBot = new TelegramMessagingBot(handler, {\n    token: telegramToken,\n    workspace,\n  });\n  botsByPlatform.telegram = telegramMessagingBot;\n  log.logInfo(\"Platform: Telegram\");\n}\nif (hasDiscord) {\n  const discordToken = DISCORD_BOT_TOKEN;\n  if (!discordToken) {\n    throw new Error(\"Discord startup requires DISCORD_BOT_TOKEN\");\n  }\n  const discordMessagingBot = new DiscordMessagingBot(handler, {\n    token: discordToken,\n    workspace,\n  });\n  botsByPlatform.discord = discordMessagingBot;\n  log.logInfo(\"Platform: Discord\");\n}\nif (hasGithub) {\n  if (!GITHUB_APP_ID || !GITHUB_INSTALLATION_ID) {\n    throw new Error(\"GitHub startup requires GITHUB_APP_ID and GITHUB_INSTALLATION_ID\");\n  }\n  // Env vars flatten PEM newlines to literal `\\n`; a key file avoids that.\n  const githubPrivateKey = GITHUB_APP_PRIVATE_KEY_PATH\n    ? readFileSync(GITHUB_APP_PRIVATE_KEY_PATH, \"utf-8\")\n    : GITHUB_APP_PRIVATE_KEY?.replace(/\\\\n/g, \"\\n\");\n  if (!githubPrivateKey) {\n    throw new Error(\n      \"GitHub startup requires GITHUB_APP_PRIVATE_KEY or GITHUB_APP_PRIVATE_KEY_PATH\",\n    );\n  }\n  const pollIntervalSeconds = GITHUB_POLL_INTERVAL ? parseInt(GITHUB_POLL_INTERVAL, 10) : NaN;\n  const githubMessagingBot = new GithubMessagingBot(handler, {\n    appId: GITHUB_APP_ID,\n    privateKey: githubPrivateKey,\n    installationId: GITHUB_INSTALLATION_ID,\n    repos: GITHUB_REPOS\n      ? GITHUB_REPOS.split(\",\")\n          .map((repo) => repo.trim())\n          .filter(Boolean)\n      : [],\n    pollIntervalMs:\n      (Number.isFinite(pollIntervalSeconds) && pollIntervalSeconds > 0 ? pollIntervalSeconds : 60) *\n      1000,\n    workspace,\n    syncStatePath: join(stateDir, \"github-sync.json\"),\n  });\n  botsByPlatform.github = githubMessagingBot;\n  log.logInfo(\"Platform: GitHub\");\n}\n\nconst githubBotForWebhook = botsByPlatform.github as GithubMessagingBot | undefined;\nif (GITHUB_WEBHOOK_SECRET && (!githubBotForWebhook || !LINK_PORT)) {\n  log.logWarning(\n    \"GITHUB_WEBHOOK_SECRET is set but \" +\n      (githubBotForWebhook ? \"LINK_PORT is not\" : \"the GitHub platform is not enabled\") +\n      \" — the webhook endpoint will not be served\",\n  );\n}\n\nconst webServer = LINK_PORT\n  ? startWebServer({\n      port: LINK_PORT,\n      linkTokenStore,\n      vaultManager,\n      notify: async (platform, conversationId, message) => {\n        const bot = botsByPlatform[platform];\n        if (bot) await bot.postMessage(conversationId, message);\n      },\n      sessionViewTokenStore,\n      sessionViewInteractive: { handler, botsByPlatform },\n      adminOptions: { adminTokenStore, workspace, runtime: handler, sandbox, botsByPlatform },\n      githubWebhook:\n        GITHUB_WEBHOOK_SECRET && githubBotForWebhook\n          ? {\n              secret: GITHUB_WEBHOOK_SECRET,\n              onPoke: () => githubBotForWebhook.requestPoll(),\n            }\n          : undefined,\n    })\n  : undefined;\n\nfunction closeWebServer(): Promise<void> {\n  if (!webServer) return Promise.resolve();\n  return new Promise((resolve, reject) => {\n    webServer.close((error) => (error ? reject(error) : resolve()));\n  });\n}\n\nasync function stopConversationIntake(): Promise<void> {\n  const results = await Promise.allSettled([\n    ...Object.values(botsByPlatform).map((bot) => bot.stop()),\n    closeWebServer(),\n  ]);\n  const failures = results.flatMap((result) =>\n    result.status === \"rejected\" ? [result.reason] : [],\n  );\n  if (failures.length > 0) throw new AggregateError(failures, \"Failed to stop conversation intake\");\n}\n\nasync function waitForGracefulDrain(drain: Promise<unknown>): Promise<boolean> {\n  let timeout: NodeJS.Timeout | undefined;\n  const settled = await Promise.race([\n    drain.then(() => true),\n    new Promise<false>((resolve) => {\n      timeout = setTimeout(() => resolve(false), INTAKE_DRAIN_TIMEOUT_MS);\n    }),\n  ]);\n  if (timeout) clearTimeout(timeout);\n  return settled;\n}\n\nasync function drainConversationWork(intakeStop: Promise<void>): Promise<void> {\n  const dreamStop = dreamScheduler.stop();\n  const gracefulDrain = Promise.allSettled([intakeStop, dreamStop]);\n  if (!(await waitForGracefulDrain(gracefulDrain))) {\n    const runtimeResult = await Promise.allSettled([handler.shutdown(0)]);\n    const failures: unknown[] = [\n      new Error(`Conversation work did not drain within ${INTAKE_DRAIN_TIMEOUT_MS}ms`),\n      ...runtimeResult.flatMap((result) => (result.status === \"rejected\" ? [result.reason] : [])),\n    ];\n    throw new AggregateError(failures, \"Failed to drain conversation work\");\n  }\n\n  const results = [\n    ...(await gracefulDrain),\n    ...(await Promise.allSettled([handler.shutdown(INTAKE_DRAIN_TIMEOUT_MS)])),\n  ];\n  const failures = results.flatMap((result) =>\n    result.status === \"rejected\" ? [result.reason] : [],\n  );\n  if (failures.length > 0) throw new AggregateError(failures, \"Failed to drain conversation work\");\n}\n\n// Start events watcher with explicit platform routing\nconst eventsWatcher = new EventsWatcher(workspace.eventsDir, botsByPlatform);\nconst slackMessagingBot = botsByPlatform.slack as SlackMessagingBotClass | undefined;\nif (slackMessagingBot) {\n  slackMessagingBot.setEventsWatcher(eventsWatcher);\n}\neventsWatcher.start();\nconst dreamScheduler = new DreamScheduler(workspace, handler);\ndreamScheduler.start();\n\n// Handle shutdown. A second signal is an explicit request to stop waiting.\nconst shutdown = createProcessShutdownHandler({\n  stop: () => {\n    const intakeStop = stopConversationIntake();\n    return runShutdownSteps([\n      {\n        name: \"event watcher\",\n        run: async () => {\n          eventsWatcher.stop();\n        },\n      },\n      { name: \"conversation work\", run: () => drainConversationWork(intakeStop) },\n    ]);\n  },\n  flush: () => Sentry.close(5000),\n  captureError: (error) => {\n    Sentry.captureException(error);\n  },\n  warn: log.logWarning,\n  exit: (code) => process.exit(code),\n});\n\nprocess.on(\"SIGINT\", () => void shutdown(\"SIGINT\"));\nprocess.on(\"SIGTERM\", () => void shutdown(\"SIGTERM\"));\n\n// Start all bots\nawait Promise.all(\n  Object.values(botsByPlatform).map((bot) =>\n    bot.start().catch((err) => {\n      log.logWarning(\"Failed to start bot\", err instanceof Error ? err.message : String(err));\n      process.exit(1);\n    }),\n  ),\n);\n\n// Drain the container layout migration off the hot path; every unit is\n// idempotent, so an interrupted sweep simply resumes on the next boot.\nif (provisioner) {\n  void provisioner.sweepContainerLayoutMigration().catch((err) => {\n    log.logWarning(\n      \"Container layout sweep failed\",\n      err instanceof Error ? err.message : String(err),\n    );\n  });\n}\n"]}

package/dist/mcp/catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/mcp/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA6H7D,wBAAgB,cAAc,IAAI,SAAS,SAAS,EAAE,CAErD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,eAAe,CA2BjB"}
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../../src/mcp/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAmC7D,wBAAgB,cAAc,IAAI,SAAS,SAAS,EAAE,CAErD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAE/D;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,eAAe,CA2BjB"}

package/dist/mcp/catalog.js

@@ -1,46 +1,4 @@
 const MCP_PRESETS = [
-    {
-        id: "github",
-        name: "GitHub",
-        description: "Work with repositories, issues, pull requests, code, and GitHub Actions.",
-        category: "Development",
-        serverName: "github",
-        sourceUrl: "https://github.com/github/github-mcp-server",
-        setupUrl: "https://github.com/github/github-mcp-server#remote-github-mcp-server",
-        server: { url: "https://api.githubcopilot.com/mcp/" },
-        credentials: [
-            {
-                key: "Authorization",
-                label: "GitHub personal access token",
-                description: "A GitHub PAT with only the repository permissions you want mikan to use.",
-                target: "header",
-                required: true,
-                secret: true,
-                valuePrefix: "Bearer ",
-            },
-        ],
-    },
-    {
-        id: "context7",
-        name: "Context7",
-        description: "Look up current, version-specific library and framework documentation.",
-        category: "Documentation",
-        serverName: "context7",
-        sourceUrl: "https://github.com/upstash/context7",
-        setupUrl: "https://context7.com/docs/resources/all-clients",
-        server: { url: "https://mcp.context7.com/mcp" },
-        credentials: [
-            {
-                key: "Authorization",
-                label: "Context7 API key",
-                description: "Create an API key in Context7 and paste the raw key here.",
-                target: "header",
-                required: true,
-                secret: true,
-                valuePrefix: "Bearer ",
-            },
-        ],
-    },
     {
         id: "metabase",
         name: "Metabase",
@@ -69,52 +27,6 @@ const MCP_PRESETS = [
             },
         ],
     },
-    {
-        id: "open-connector",
-        name: "OpenConnector",
-        description: "Use connected services through a self-hosted, host-side action gateway.",
-        category: "Integrations",
-        serverName: "open-connector",
-        sourceUrl: "https://github.com/oomol-lab/open-connector",
-        setupUrl: "https://github.com/oomol-lab/open-connector/blob/main/docs/runtime-api.md",
-        server: { url: "http://127.0.0.1:3737/mcp" },
-        credentials: [
-            {
-                key: "Authorization",
-                label: "Scoped OpenConnector runtime token",
-                description: "Create a persistent runtime token limited to the actions and connections this mikan deployment may use. Do not use the full-access bootstrap token.",
-                target: "header",
-                required: true,
-                secret: true,
-                valuePrefix: "Bearer ",
-            },
-        ],
-    },
-    {
-        id: "playwright",
-        name: "Playwright",
-        description: "Inspect and automate websites through Playwright's accessibility-first tools.",
-        category: "Browser",
-        serverName: "playwright",
-        sourceUrl: "https://github.com/microsoft/playwright-mcp",
-        setupUrl: "https://github.com/microsoft/playwright-mcp#installation",
-        server: { command: "npx", args: ["-y", "@playwright/mcp@0.0.80"] },
-        credentials: [],
-    },
-    {
-        id: "sequential-thinking",
-        name: "Sequential Thinking",
-        description: "Add a structured tool for revising and branching through complex reasoning.",
-        category: "Reasoning",
-        serverName: "sequential-thinking",
-        sourceUrl: "https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking",
-        setupUrl: "https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking#usage-with-claude-desktop",
-        server: {
-            command: "npx",
-            args: ["-y", "@modelcontextprotocol/server-sequential-thinking@2026.8.31"],
-        },
-        credentials: [],
-    },
 ];
 export function listMcpPresets() {
     return MCP_PRESETS;

package/dist/mcp/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/mcp/catalog.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAyB;IACxC;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,0EAA0E;QACvF,QAAQ,EAAE,aAAa;QACvB,UAAU,EAAE,QAAQ;QACpB,SAAS,EAAE,6CAA6C;QACxD,QAAQ,EAAE,sEAAsE;QAChF,MAAM,EAAE,EAAE,GAAG,EAAE,oCAAoC,EAAE;QACrD,WAAW,EAAE;YACX;gBACE,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,8BAA8B;gBACrC,WAAW,EAAE,0EAA0E;gBACvF,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,SAAS;aACvB;SACF;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,wEAAwE;QACrF,QAAQ,EAAE,eAAe;QACzB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,qCAAqC;QAChD,QAAQ,EAAE,iDAAiD;QAC3D,MAAM,EAAE,EAAE,GAAG,EAAE,8BAA8B,EAAE;QAC/C,WAAW,EAAE;YACX;gBACE,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,2DAA2D;gBACxE,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,SAAS;aACvB;SACF;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,sCAAsC;QACjD,QAAQ,EAAE,6CAA6C;QACvD,MAAM,EAAE,EAAE,GAAG,EAAE,sDAAsD,EAAE;QACvE,WAAW,EAAE;YACX;gBACE,GAAG,EAAE,KAAK;gBACV,KAAK,EAAE,yBAAyB;gBAChC,WAAW,EACT,+EAA+E;gBACjF,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;aACd;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EACT,gFAAgF;gBAClF,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;aACb;SACF;KACF;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,yEAAyE;QACtF,QAAQ,EAAE,cAAc;QACxB,UAAU,EAAE,gBAAgB;QAC5B,SAAS,EAAE,6CAA6C;QACxD,QAAQ,EAAE,2EAA2E;QACrF,MAAM,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE;QAC5C,WAAW,EAAE;YACX;gBACE,GAAG,EAAE,eAAe;gBACpB,KAAK,EAAE,oCAAoC;gBAC3C,WAAW,EACT,qJAAqJ;gBACvJ,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,SAAS;aACvB;SACF;KACF;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,+EAA+E;QAC5F,QAAQ,EAAE,SAAS;QACnB,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,6CAA6C;QACxD,QAAQ,EAAE,0DAA0D;QACpE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE;QAClE,WAAW,EAAE,EAAE;KAChB;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,6EAA6E;QAC1F,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,qBAAqB;QACjC,SAAS,EAAE,kFAAkF;QAC7F,QAAQ,EACN,4GAA4G;QAC9G,MAAM,EAAE;YACN,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,CAAC,IAAI,EAAE,4DAA4D,CAAC;SAC3E;QACD,WAAW,EAAE,EAAE;KAChB;CACF,CAAC;AAEF,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,MAA8B;IAE9B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAC5B,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,UAAU,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,cAAc,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;aAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;aACxE,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC","sourcesContent":["import type { McpPreset, McpServerConfig } from \"./types.js\";\n\nconst MCP_PRESETS: readonly McpPreset[] = [\n  {\n    id: \"github\",\n    name: \"GitHub\",\n    description: \"Work with repositories, issues, pull requests, code, and GitHub Actions.\",\n    category: \"Development\",\n    serverName: \"github\",\n    sourceUrl: \"https://github.com/github/github-mcp-server\",\n    setupUrl: \"https://github.com/github/github-mcp-server#remote-github-mcp-server\",\n    server: { url: \"https://api.githubcopilot.com/mcp/\" },\n    credentials: [\n      {\n        key: \"Authorization\",\n        label: \"GitHub personal access token\",\n        description: \"A GitHub PAT with only the repository permissions you want mikan to use.\",\n        target: \"header\",\n        required: true,\n        secret: true,\n        valuePrefix: \"Bearer \",\n      },\n    ],\n  },\n  {\n    id: \"context7\",\n    name: \"Context7\",\n    description: \"Look up current, version-specific library and framework documentation.\",\n    category: \"Documentation\",\n    serverName: \"context7\",\n    sourceUrl: \"https://github.com/upstash/context7\",\n    setupUrl: \"https://context7.com/docs/resources/all-clients\",\n    server: { url: \"https://mcp.context7.com/mcp\" },\n    credentials: [\n      {\n        key: \"Authorization\",\n        label: \"Context7 API key\",\n        description: \"Create an API key in Context7 and paste the raw key here.\",\n        target: \"header\",\n        required: true,\n        secret: true,\n        valuePrefix: \"Bearer \",\n      },\n    ],\n  },\n  {\n    id: \"metabase\",\n    name: \"Metabase\",\n    description: \"Query and explore analytics from your Metabase instance.\",\n    category: \"Analytics\",\n    serverName: \"metabase\",\n    sourceUrl: \"https://github.com/metabase/metabase\",\n    setupUrl: \"https://www.metabase.com/docs/latest/ai/mcp\",\n    server: { url: \"https://{your-metabase.example.com}/api/metabase-mcp\" },\n    credentials: [\n      {\n        key: \"url\",\n        label: \"Metabase MCP server URL\",\n        description:\n          \"The full endpoint, for example https://metabase.example.com/api/metabase-mcp.\",\n        target: \"url\",\n        required: true,\n        secret: false,\n      },\n      {\n        key: \"x-api-key\",\n        label: \"Metabase API key\",\n        description:\n          \"An API key whose Metabase permissions match the access you want mikan to have.\",\n        target: \"header\",\n        required: true,\n        secret: true,\n      },\n    ],\n  },\n  {\n    id: \"open-connector\",\n    name: \"OpenConnector\",\n    description: \"Use connected services through a self-hosted, host-side action gateway.\",\n    category: \"Integrations\",\n    serverName: \"open-connector\",\n    sourceUrl: \"https://github.com/oomol-lab/open-connector\",\n    setupUrl: \"https://github.com/oomol-lab/open-connector/blob/main/docs/runtime-api.md\",\n    server: { url: \"http://127.0.0.1:3737/mcp\" },\n    credentials: [\n      {\n        key: \"Authorization\",\n        label: \"Scoped OpenConnector runtime token\",\n        description:\n          \"Create a persistent runtime token limited to the actions and connections this mikan deployment may use. Do not use the full-access bootstrap token.\",\n        target: \"header\",\n        required: true,\n        secret: true,\n        valuePrefix: \"Bearer \",\n      },\n    ],\n  },\n  {\n    id: \"playwright\",\n    name: \"Playwright\",\n    description: \"Inspect and automate websites through Playwright's accessibility-first tools.\",\n    category: \"Browser\",\n    serverName: \"playwright\",\n    sourceUrl: \"https://github.com/microsoft/playwright-mcp\",\n    setupUrl: \"https://github.com/microsoft/playwright-mcp#installation\",\n    server: { command: \"npx\", args: [\"-y\", \"@playwright/mcp@0.0.80\"] },\n    credentials: [],\n  },\n  {\n    id: \"sequential-thinking\",\n    name: \"Sequential Thinking\",\n    description: \"Add a structured tool for revising and branching through complex reasoning.\",\n    category: \"Reasoning\",\n    serverName: \"sequential-thinking\",\n    sourceUrl: \"https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking\",\n    setupUrl:\n      \"https://github.com/modelcontextprotocol/servers/tree/main/src/sequentialthinking#usage-with-claude-desktop\",\n    server: {\n      command: \"npx\",\n      args: [\"-y\", \"@modelcontextprotocol/server-sequential-thinking@2026.8.31\"],\n    },\n    credentials: [],\n  },\n];\n\nexport function listMcpPresets(): readonly McpPreset[] {\n  return MCP_PRESETS;\n}\n\nexport function findMcpPreset(id: string): McpPreset | undefined {\n  return MCP_PRESETS.find((preset) => preset.id === id);\n}\n\nexport function materializeMcpPreset(\n  preset: McpPreset,\n  values: Record<string, string>,\n): McpServerConfig {\n  const env: Record<string, string> = {};\n  const headers: Record<string, string> = {};\n  let url = preset.server.url;\n  for (const credential of preset.credentials) {\n    const value = values[credential.key]?.trim() ?? \"\";\n    if (!value) {\n      if (credential.required) throw new Error(`${credential.label} is required`);\n      continue;\n    }\n    const formatted = `${credential.valuePrefix ?? \"\"}${value}`;\n    if (credential.target === \"env\") env[credential.key] = formatted;\n    else if (credential.target === \"header\") headers[credential.key] = formatted;\n    else {\n      if (!URL.canParse(formatted) || !/^https?:/.test(new URL(formatted).protocol)) {\n        throw new Error(`${credential.label} must be a valid HTTP URL`);\n      }\n      url = formatted;\n    }\n  }\n  return {\n    ...preset.server,\n    ...(preset.server.args ? { args: [...preset.server.args] } : {}),\n    ...(url !== undefined ? { url } : {}),\n    ...(Object.keys(env).length > 0 ? { env } : {}),\n    ...(Object.keys(headers).length > 0 ? { headers } : {}),\n  };\n}\n"]}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/mcp/catalog.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAyB;IACxC;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,0DAA0D;QACvE,QAAQ,EAAE,WAAW;QACrB,UAAU,EAAE,UAAU;QACtB,SAAS,EAAE,sCAAsC;QACjD,QAAQ,EAAE,6CAA6C;QACvD,MAAM,EAAE,EAAE,GAAG,EAAE,sDAAsD,EAAE;QACvE,WAAW,EAAE;YACX;gBACE,GAAG,EAAE,KAAK;gBACV,KAAK,EAAE,yBAAyB;gBAChC,WAAW,EACT,+EAA+E;gBACjF,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,KAAK;aACd;YACD;gBACE,GAAG,EAAE,WAAW;gBAChB,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EACT,gFAAgF;gBAClF,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;aACb;SACF;KACF;CACF,CAAC;AAEF,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,MAA8B;IAE9B,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAC5B,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,UAAU,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,cAAc,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,WAAW,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK;YAAE,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;aAC5D,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;aACxE,CAAC;YACJ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,MAAM,CAAC,MAAM;QAChB,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC","sourcesContent":["import type { McpPreset, McpServerConfig } from \"./types.js\";\n\nconst MCP_PRESETS: readonly McpPreset[] = [\n  {\n    id: \"metabase\",\n    name: \"Metabase\",\n    description: \"Query and explore analytics from your Metabase instance.\",\n    category: \"Analytics\",\n    serverName: \"metabase\",\n    sourceUrl: \"https://github.com/metabase/metabase\",\n    setupUrl: \"https://www.metabase.com/docs/latest/ai/mcp\",\n    server: { url: \"https://{your-metabase.example.com}/api/metabase-mcp\" },\n    credentials: [\n      {\n        key: \"url\",\n        label: \"Metabase MCP server URL\",\n        description:\n          \"The full endpoint, for example https://metabase.example.com/api/metabase-mcp.\",\n        target: \"url\",\n        required: true,\n        secret: false,\n      },\n      {\n        key: \"x-api-key\",\n        label: \"Metabase API key\",\n        description:\n          \"An API key whose Metabase permissions match the access you want mikan to have.\",\n        target: \"header\",\n        required: true,\n        secret: true,\n      },\n    ],\n  },\n];\n\nexport function listMcpPresets(): readonly McpPreset[] {\n  return MCP_PRESETS;\n}\n\nexport function findMcpPreset(id: string): McpPreset | undefined {\n  return MCP_PRESETS.find((preset) => preset.id === id);\n}\n\nexport function materializeMcpPreset(\n  preset: McpPreset,\n  values: Record<string, string>,\n): McpServerConfig {\n  const env: Record<string, string> = {};\n  const headers: Record<string, string> = {};\n  let url = preset.server.url;\n  for (const credential of preset.credentials) {\n    const value = values[credential.key]?.trim() ?? \"\";\n    if (!value) {\n      if (credential.required) throw new Error(`${credential.label} is required`);\n      continue;\n    }\n    const formatted = `${credential.valuePrefix ?? \"\"}${value}`;\n    if (credential.target === \"env\") env[credential.key] = formatted;\n    else if (credential.target === \"header\") headers[credential.key] = formatted;\n    else {\n      if (!URL.canParse(formatted) || !/^https?:/.test(new URL(formatted).protocol)) {\n        throw new Error(`${credential.label} must be a valid HTTP URL`);\n      }\n      url = formatted;\n    }\n  }\n  return {\n    ...preset.server,\n    ...(preset.server.args ? { args: [...preset.server.args] } : {}),\n    ...(url !== undefined ? { url } : {}),\n    ...(Object.keys(env).length > 0 ? { env } : {}),\n    ...(Object.keys(headers).length > 0 ? { headers } : {}),\n  };\n}\n"]}

package/dist/mcp/open-connector.d.ts

@@ -10,5 +10,5 @@ export declare function prepareOpenConnectorToolArguments(client: Pick<Client, "
  * this Slack Conversation office. The privileged admin token is read only at
  * this host boundary and is never written into settings, Vault, or a sandbox.
  */
-export declare function provisionOfficeOpenConnectorToken(office: Office, platformWorkspaceId: string | undefined, servers: Record<string, McpServerConfig> | undefined, signal?: AbortSignal): Promise<Record<string, McpServerConfig> | undefined>;
+export declare function provisionOfficeOpenConnectorToken(office: Office, platformWorkspaceId: string | undefined, servers: Record<string, McpServerConfig> | undefined, openConnector: McpServerConfig | undefined, signal?: AbortSignal): Promise<Record<string, McpServerConfig>>;
 //# sourceMappingURL=open-connector.d.ts.map

package/dist/mcp/open-connector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-connector.d.ts","sourceRoot":"","sources":["../../src/mcp/open-connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAKxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAOjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA4DlD;;8BAE8B;AAC9B,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBlC;AA0HD;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EACpD,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,CAAC,CAmDtD"}
+{"version":3,"file":"open-connector.d.ts","sourceRoot":"","sources":["../../src/mcp/open-connector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAKxE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAOjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA4DlD;;8BAE8B;AAC9B,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAChC,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAkBlC;AAkID;;;;GAIG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,MAAM,EACd,mBAAmB,EAAE,MAAM,GAAG,SAAS,EACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,SAAS,EACpD,aAAa,EAAE,eAAe,GAAG,SAAS,EAC1C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CA6C1C"}

package/dist/mcp/open-connector.js

@@ -121,6 +121,12 @@ async function createRuntimeToken(origin, adminToken, name, signal) {
         token: responseValue.token,
     };
 }
+function withoutReservedServer(servers) {
+    if (!servers)
+        return {};
+    const { [OPEN_CONNECTOR_SERVER]: _reserved, ...settingsServers } = servers;
+    return settingsServers;
+}
 function disabledServer(servers, config) {
     return { ...servers, [OPEN_CONNECTOR_SERVER]: { ...config, disabled: true } };
 }
@@ -160,44 +166,39 @@ async function loadOrCreateRuntimeToken(office, origin, adminToken, name, signal
  * this Slack Conversation office. The privileged admin token is read only at
  * this host boundary and is never written into settings, Vault, or a sandbox.
  */
-export async function provisionOfficeOpenConnectorToken(office, platformWorkspaceId, servers, signal) {
-    const config = servers?.[OPEN_CONNECTOR_SERVER];
+export async function provisionOfficeOpenConnectorToken(office, platformWorkspaceId, servers, openConnector, signal) {
+    const settingsServers = withoutReservedServer(servers);
     const adminToken = readEnv("OPENCONNECTOR_ADMIN_TOKEN");
-    if (!config || config.disabled || !adminToken || office.address.platform !== "slack") {
-        return servers;
-    }
-    const configuredOrigin = readEnv("OPENCONNECTOR_ORIGIN");
-    if (!configuredOrigin || !URL.canParse(configuredOrigin)) {
-        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "OPENCONNECTOR_ORIGIN is missing or invalid");
-        return disabledServer(servers, config);
+    if (!openConnector ||
+        openConnector.disabled ||
+        !adminToken ||
+        office.address.platform !== "slack") {
+        return settingsServers;
     }
     if (!platformWorkspaceId) {
         log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "Slack workspace ID is unavailable");
-        return disabledServer(servers, config);
+        return disabledServer(settingsServers, openConnector);
     }
-    if (!config.url) {
-        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "the open-connector server is not configured for HTTP");
-        return disabledServer(servers, config);
+    if (!openConnector.url) {
+        log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning skipped`, "the startup OpenConnector configuration is not configured for HTTP");
+        return disabledServer(settingsServers, openConnector);
     }
     try {
-        const endpoint = new URL(config.url);
-        const origin = new URL(configuredOrigin).origin;
-        if (endpoint.origin !== origin) {
-            throw new Error("the MCP endpoint does not match the deployment-owned OpenConnector origin");
-        }
+        const endpoint = new URL(openConnector.url);
+        const origin = endpoint.origin;
         const name = `mikan:slack:${platformWorkspaceId}:${office.address.conversationId}`;
         const state = await loadOrCreateRuntimeToken(office, origin, adminToken, name, signal);
         return {
-            ...servers,
+            ...settingsServers,
             [OPEN_CONNECTOR_SERVER]: {
-                ...config,
-                headers: { ...config.headers, Authorization: `Bearer ${state.token}` },
+                ...openConnector,
+                headers: { ...openConnector.headers, Authorization: `Bearer ${state.token}` },
             },
         };
     }
     catch (error) {
         log.logWarning(`[${office.address.conversationId}] OpenConnector token provisioning failed`, error instanceof Error ? error.message : String(error));
-        return disabledServer(servers, config);
+        return disabledServer(settingsServers, openConnector);
     }
 }
 //# sourceMappingURL=open-connector.js.map