@geminixiang/mikan 1.0.0-beta.8 → 1.0.0-beta.80

package/dist/cli/sandbox.js

@@ -0,0 +1,80 @@
+import { DockerContainerManager } from "../sandbox/provisioner.js";
+import { cliCommand, commandExitCode, nonEmptyValue } from "./arg-grammar.js";
+import { errorMessage } from "../unknown-values.js";
+export async function runSandboxCommand(argv, createManager = (image) => new DockerContainerManager(image)) {
+    const command = cliCommand("mikan sandbox")
+        .description("Inspect and upgrade managed image:* sandbox containers")
+        .requiredOption("--image <image>", "The image the daemon runs with (image:<image>)", nonEmptyValue);
+    let result = 1;
+    const manager = () => createManager(command.opts().image ?? "");
+    command
+        .command("status")
+        .description("List managed containers with home-volume and image-drift state")
+        .action(async () => {
+        result = await printStatus(manager());
+    });
+    command
+        .command("diff <containerKey>")
+        .description("Show system changes outside /root that an upgrade will discard")
+        .action(async (containerKey) => {
+        result = await printSystemChanges(manager(), containerKey);
+    });
+    command
+        .command("migrate <containerKeys...>")
+        .description("Move legacy containers onto a home volume and the current image")
+        .action(async (containerKeys) => {
+        result = await migrateContainers(manager(), containerKeys);
+    });
+    try {
+        await command.parseAsync(argv, { from: "user" });
+        return result;
+    }
+    catch (error) {
+        return commandExitCode(error, command);
+    }
+}
+async function printStatus(manager) {
+    const entries = await manager.inventory();
+    if (entries.length === 0) {
+        console.log("No managed sandbox containers.");
+        return 0;
+    }
+    for (const entry of entries) {
+        const state = entry.running ? "running" : "stopped";
+        const layout = entry.homeVolume ? "home-volume" : "legacy";
+        const image = entry.imageStale ? "stale-image" : "current-image";
+        console.log(`${entry.containerKey ?? entry.containerName}\t${state}\t${layout}\t${image}`);
+    }
+    const legacy = entries.filter((entry) => !entry.homeVolume).length;
+    const stale = entries.filter((entry) => entry.homeVolume && entry.imageStale).length;
+    console.log(`${entries.length} container(s): ${legacy} legacy (run \`mikan sandbox migrate\`), ${stale} home-volume on a stale image (replaced on next start after idle stop).`);
+    return 0;
+}
+async function printSystemChanges(manager, containerKey) {
+    const changes = await manager.systemChanges(DockerContainerManager.containerName(containerKey));
+    if (changes.length === 0) {
+        console.log("No system changes outside /root and /workspace.");
+        return 0;
+    }
+    for (const line of changes)
+        console.log(line);
+    console.log(`${changes.length} path(s) outside /root will be discarded by an upgrade.`);
+    return 0;
+}
+async function migrateContainers(manager, containerKeys) {
+    let failed = 0;
+    for (const containerKey of containerKeys) {
+        try {
+            const outcome = await manager.migrateToHomeVolume(containerKey);
+            console.log(`${containerKey}\t${outcome}`);
+            if (outcome === "missing")
+                failed++;
+        }
+        catch (error) {
+            failed++;
+            console.error(`${containerKey}\tfailed\t${errorMessage(error)}`);
+        }
+    }
+    return failed === 0 ? 0 : 1;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/cli/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../src/cli/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAMpD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EACd,aAAa,GAA8C,CAAC,KAAK,EAAE,EAAE,CACnE,IAAI,sBAAsB,CAAC,KAAK,CAAC;IAEnC,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,CAAC;SACxC,WAAW,CAAC,wDAAwD,CAAC;SACrE,cAAc,CACb,iBAAiB,EACjB,gDAAgD,EAChD,aAAa,CACd,CAAC;IACJ,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,OAAO,GAAG,GAA2B,EAAE,CAC3C,aAAa,CAAC,OAAO,CAAC,IAAI,EAAyB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACL,OAAO;SACJ,OAAO,CAAC,qBAAqB,CAAC;SAC9B,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,KAAK,EAAE,YAAoB,EAAE,EAAE;QACrC,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACL,OAAO;SACJ,OAAO,CAAC,4BAA4B,CAAC;SACrC,WAAW,CAAC,iEAAiE,CAAC;SAC9E,MAAM,CAAC,KAAK,EAAE,aAAuB,EAAE,EAAE;QACxC,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACL,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAA+B;IACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,aAAa,KAAK,KAAK,KAAK,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACrF,OAAO,CAAC,GAAG,CACT,GAAG,OAAO,CAAC,MAAM,kBAAkB,MAAM,4CAA4C,KAAK,yEAAyE,CACpK,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAA+B,EAC/B,YAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,yDAAyD,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAA+B,EAC/B,aAAgC;IAEhC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,OAAO,EAAE,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS;gBAAE,MAAM,EAAE,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,aAAa,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC","sourcesContent":["import { DockerContainerManager } from \"../sandbox/provisioner.js\";\nimport { cliCommand, commandExitCode, nonEmptyValue } from \"./arg-grammar.js\";\nimport { errorMessage } from \"../unknown-values.js\";\n\ninterface SandboxCommandOptions {\n  image?: string;\n}\n\nexport async function runSandboxCommand(\n  argv: string[],\n  createManager: (image: string) => DockerContainerManager = (image) =>\n    new DockerContainerManager(image),\n): Promise<number> {\n  const command = cliCommand(\"mikan sandbox\")\n    .description(\"Inspect and upgrade managed image:* sandbox containers\")\n    .requiredOption(\n      \"--image <image>\",\n      \"The image the daemon runs with (image:<image>)\",\n      nonEmptyValue,\n    );\n  let result = 1;\n  const manager = (): DockerContainerManager =>\n    createManager(command.opts<SandboxCommandOptions>().image ?? \"\");\n  command\n    .command(\"status\")\n    .description(\"List managed containers with home-volume and image-drift state\")\n    .action(async () => {\n      result = await printStatus(manager());\n    });\n  command\n    .command(\"diff <containerKey>\")\n    .description(\"Show system changes outside /root that an upgrade will discard\")\n    .action(async (containerKey: string) => {\n      result = await printSystemChanges(manager(), containerKey);\n    });\n  command\n    .command(\"migrate <containerKeys...>\")\n    .description(\"Move legacy containers onto a home volume and the current image\")\n    .action(async (containerKeys: string[]) => {\n      result = await migrateContainers(manager(), containerKeys);\n    });\n  try {\n    await command.parseAsync(argv, { from: \"user\" });\n    return result;\n  } catch (error) {\n    return commandExitCode(error, command);\n  }\n}\n\nasync function printStatus(manager: DockerContainerManager): Promise<number> {\n  const entries = await manager.inventory();\n  if (entries.length === 0) {\n    console.log(\"No managed sandbox containers.\");\n    return 0;\n  }\n  for (const entry of entries) {\n    const state = entry.running ? \"running\" : \"stopped\";\n    const layout = entry.homeVolume ? \"home-volume\" : \"legacy\";\n    const image = entry.imageStale ? \"stale-image\" : \"current-image\";\n    console.log(`${entry.containerKey ?? entry.containerName}\\t${state}\\t${layout}\\t${image}`);\n  }\n  const legacy = entries.filter((entry) => !entry.homeVolume).length;\n  const stale = entries.filter((entry) => entry.homeVolume && entry.imageStale).length;\n  console.log(\n    `${entries.length} container(s): ${legacy} legacy (run \\`mikan sandbox migrate\\`), ${stale} home-volume on a stale image (replaced on next start after idle stop).`,\n  );\n  return 0;\n}\n\nasync function printSystemChanges(\n  manager: DockerContainerManager,\n  containerKey: string,\n): Promise<number> {\n  const changes = await manager.systemChanges(DockerContainerManager.containerName(containerKey));\n  if (changes.length === 0) {\n    console.log(\"No system changes outside /root and /workspace.\");\n    return 0;\n  }\n  for (const line of changes) console.log(line);\n  console.log(`${changes.length} path(s) outside /root will be discarded by an upgrade.`);\n  return 0;\n}\n\nasync function migrateContainers(\n  manager: DockerContainerManager,\n  containerKeys: readonly string[],\n): Promise<number> {\n  let failed = 0;\n  for (const containerKey of containerKeys) {\n    try {\n      const outcome = await manager.migrateToHomeVolume(containerKey);\n      console.log(`${containerKey}\\t${outcome}`);\n      if (outcome === \"missing\") failed++;\n    } catch (error) {\n      failed++;\n      console.error(`${containerKey}\\tfailed\\t${errorMessage(error)}`);\n    }\n  }\n  return failed === 0 ? 0 : 1;\n}\n"]}

package/dist/cli/sessions.d.ts

@@ -0,0 +1,2 @@
+export declare function runSessionsCommand(argv: string[]): Promise<number>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/cli/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/cli/sessions.ts"],"names":[],"mappings":"AAWA,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAuBxE"}

package/dist/cli/sessions.js

@@ -0,0 +1,78 @@
+import { join, resolve } from "node:path";
+import { findPi084SessionFiles, migratePi084SessionFile } from "../sessions/migrate-pi-084.js";
+import { findV3SessionFiles, migrateSessionFile } from "../sessions/migrate-v3.js";
+import { cliCommand, commandExitCode, nonEmptyValue, resolveStateDir } from "./arg-grammar.js";
+import { errorMessage } from "../unknown-values.js";
+export async function runSessionsCommand(argv) {
+    const command = cliCommand("mikan sessions")
+        .description("Session-file maintenance (stop the daemon first)")
+        .option("--state-dir <dir>", "State directory", nonEmptyValue)
+        .option("--workspace <dir>", "Workspace directory", nonEmptyValue);
+    let result = 1;
+    command
+        .command("migrate")
+        .description("Migrate legacy sessions, preserving backups")
+        .option("--dry-run", "Preview migration without writing")
+        .action(async (options) => {
+        const { workspace } = command.opts();
+        const workspaceRoot = workspace
+            ? resolve(workspace)
+            : join(resolveStateDir(argv), "workspace");
+        result = await migrateWorkspace(workspaceRoot, options.dryRun ?? false);
+    });
+    try {
+        await command.parseAsync(argv, { from: "user" });
+        return result;
+    }
+    catch (error) {
+        return commandExitCode(error, command);
+    }
+}
+async function migrateWorkspace(workspaceRoot, dryRun) {
+    const candidates = findCandidates(workspaceRoot);
+    if (candidates.length === 0) {
+        console.log(`No legacy session files found under ${workspaceRoot}`);
+        return 0;
+    }
+    console.log(`Found ${candidates.length} legacy session file(s) under ${workspaceRoot}`);
+    const { migrated, failed } = await migrateCandidates(candidates, dryRun);
+    console.log(dryRun
+        ? `Dry run: ${migrated} file(s) would be migrated, ${failed} failed to read.`
+        : `Migrated ${migrated} file(s), ${failed} failure(s). Originals kept as *.v3.bak or *.pi-084.bak.`);
+    return failed === 0 ? 0 : 1;
+}
+function findCandidates(workspaceRoot) {
+    return [
+        ...findV3SessionFiles(workspaceRoot).map((file) => ({ file, format: "v3" })),
+        ...findPi084SessionFiles(workspaceRoot).map((file) => ({ file, format: "pi-084" })),
+    ].toSorted((left, right) => left.file.localeCompare(right.file));
+}
+async function migrateCandidates(candidates, dryRun) {
+    let migrated = 0;
+    let failed = 0;
+    for (const candidate of candidates) {
+        const outcome = await migrateCandidate(candidate, dryRun);
+        if (outcome === "migrated")
+            migrated++;
+        if (outcome === "failed")
+            failed++;
+    }
+    return { migrated, failed };
+}
+async function migrateCandidate({ file, format }, dryRun) {
+    try {
+        const result = format === "v3"
+            ? await migrateSessionFile(file, { dryRun })
+            : await migratePi084SessionFile(file, { dryRun });
+        if (result.status !== "migrated")
+            return "skipped";
+        console.log(`${dryRun ? "would migrate" : "migrated"}  ${file}`);
+        return "migrated";
+    }
+    catch (error) {
+        const cause = error instanceof Error && error.cause ? ` (${String(error.cause)})` : "";
+        console.error(`FAILED     ${file}: ${errorMessage(error)}${cause}`);
+        return "failed";
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/cli/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/cli/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAOpD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAc;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC;SACzC,WAAW,CAAC,kDAAkD,CAAC;SAC/D,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,aAAa,CAAC;SAC7D,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,EAAE,aAAa,CAAC,CAAC;IACrE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,WAAW,EAAE,mCAAmC,CAAC;SACxD,MAAM,CAAC,KAAK,EAAE,OAA6B,EAAE,EAAE;QAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,EAA0B,CAAC;QAC7D,MAAM,aAAa,GAAG,SAAS;YAC7B,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YACpB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACL,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,aAAqB,EAAE,MAAe;IACpE,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uCAAuC,aAAa,EAAE,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,MAAM,iCAAiC,aAAa,EAAE,CAAC,CAAC;IACxF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzE,OAAO,CAAC,GAAG,CACT,MAAM;QACJ,CAAC,CAAC,YAAY,QAAQ,+BAA+B,MAAM,kBAAkB;QAC7E,CAAC,CAAC,YAAY,QAAQ,aAAa,MAAM,0DAA0D,CACtG,CAAC;IACF,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,aAAqB;IAC3C,OAAO;QACL,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAa,EAAE,CAAC,CAAC;QACrF,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC;KAC7F,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,UAAgC,EAChC,MAAe;IAEf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,OAAO,KAAK,UAAU;YAAE,QAAQ,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,QAAQ;YAAE,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,EAAE,IAAI,EAAE,MAAM,EAAa,EAC3B,MAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GACV,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;YAC5C,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,YAAY,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;QACpE,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC","sourcesContent":["import { join, resolve } from \"node:path\";\nimport { findPi084SessionFiles, migratePi084SessionFile } from \"../sessions/migrate-pi-084.js\";\nimport { findV3SessionFiles, migrateSessionFile } from \"../sessions/migrate-v3.js\";\nimport { cliCommand, commandExitCode, nonEmptyValue, resolveStateDir } from \"./arg-grammar.js\";\nimport { errorMessage } from \"../unknown-values.js\";\n\ninterface Candidate {\n  file: string;\n  format: \"v3\" | \"pi-084\";\n}\n\nexport async function runSessionsCommand(argv: string[]): Promise<number> {\n  const command = cliCommand(\"mikan sessions\")\n    .description(\"Session-file maintenance (stop the daemon first)\")\n    .option(\"--state-dir <dir>\", \"State directory\", nonEmptyValue)\n    .option(\"--workspace <dir>\", \"Workspace directory\", nonEmptyValue);\n  let result = 1;\n  command\n    .command(\"migrate\")\n    .description(\"Migrate legacy sessions, preserving backups\")\n    .option(\"--dry-run\", \"Preview migration without writing\")\n    .action(async (options: { dryRun?: boolean }) => {\n      const { workspace } = command.opts<{ workspace?: string }>();\n      const workspaceRoot = workspace\n        ? resolve(workspace)\n        : join(resolveStateDir(argv), \"workspace\");\n      result = await migrateWorkspace(workspaceRoot, options.dryRun ?? false);\n    });\n  try {\n    await command.parseAsync(argv, { from: \"user\" });\n    return result;\n  } catch (error) {\n    return commandExitCode(error, command);\n  }\n}\n\nasync function migrateWorkspace(workspaceRoot: string, dryRun: boolean): Promise<number> {\n  const candidates = findCandidates(workspaceRoot);\n  if (candidates.length === 0) {\n    console.log(`No legacy session files found under ${workspaceRoot}`);\n    return 0;\n  }\n\n  console.log(`Found ${candidates.length} legacy session file(s) under ${workspaceRoot}`);\n  const { migrated, failed } = await migrateCandidates(candidates, dryRun);\n  console.log(\n    dryRun\n      ? `Dry run: ${migrated} file(s) would be migrated, ${failed} failed to read.`\n      : `Migrated ${migrated} file(s), ${failed} failure(s). Originals kept as *.v3.bak or *.pi-084.bak.`,\n  );\n  return failed === 0 ? 0 : 1;\n}\n\nfunction findCandidates(workspaceRoot: string): Candidate[] {\n  return [\n    ...findV3SessionFiles(workspaceRoot).map((file) => ({ file, format: \"v3\" as const })),\n    ...findPi084SessionFiles(workspaceRoot).map((file) => ({ file, format: \"pi-084\" as const })),\n  ].toSorted((left, right) => left.file.localeCompare(right.file));\n}\n\nasync function migrateCandidates(\n  candidates: readonly Candidate[],\n  dryRun: boolean,\n): Promise<{ migrated: number; failed: number }> {\n  let migrated = 0;\n  let failed = 0;\n  for (const candidate of candidates) {\n    const outcome = await migrateCandidate(candidate, dryRun);\n    if (outcome === \"migrated\") migrated++;\n    if (outcome === \"failed\") failed++;\n  }\n  return { migrated, failed };\n}\n\nasync function migrateCandidate(\n  { file, format }: Candidate,\n  dryRun: boolean,\n): Promise<\"migrated\" | \"skipped\" | \"failed\"> {\n  try {\n    const result =\n      format === \"v3\"\n        ? await migrateSessionFile(file, { dryRun })\n        : await migratePi084SessionFile(file, { dryRun });\n    if (result.status !== \"migrated\") return \"skipped\";\n    console.log(`${dryRun ? \"would migrate\" : \"migrated\"}  ${file}`);\n    return \"migrated\";\n  } catch (error) {\n    const cause = error instanceof Error && error.cause ? ` (${String(error.cause)})` : \"\";\n    console.error(`FAILED     ${file}: ${errorMessage(error)}${cause}`);\n    return \"failed\";\n  }\n}\n"]}

package/dist/cli/types.d.ts

@@ -0,0 +1,21 @@
+import type { SandboxConfig } from "../sandbox/types.js";
+export interface OnboardIo {
+    ask(query: string): Promise<string>;
+    askSecret(query: string): Promise<string>;
+    select(query: string, labels: string[]): Promise<number>;
+    confirm(query: string): Promise<boolean>;
+    print(line: string): void;
+    close(): void;
+}
+export interface BootPlan {
+    mode: "office" | "sessions" | "sandbox" | "env" | "help" | "version" | "onboard" | "download" | "run";
+    officeArgs?: string[];
+    sessionsArgs?: string[];
+    sandboxArgs?: string[];
+    stateDir: string;
+    workingDir: string;
+    workingDirExplicit: boolean;
+    sandbox: SandboxConfig;
+    downloadChannel?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cli/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,SAAS;IACxB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EACA,QAAQ,GACR,UAAU,GACV,SAAS,GACT,KAAK,GACL,MAAM,GACN,SAAS,GACT,SAAS,GACT,UAAU,GACV,KAAK,CAAC;IACV,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/cli/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SandboxConfig } from \"../sandbox/types.js\";\n\nexport interface OnboardIo {\n  ask(query: string): Promise<string>;\n  askSecret(query: string): Promise<string>;\n  select(query: string, labels: string[]): Promise<number>;\n  confirm(query: string): Promise<boolean>;\n  print(line: string): void;\n  close(): void;\n}\n\nexport interface BootPlan {\n  mode:\n    | \"office\"\n    | \"sessions\"\n    | \"sandbox\"\n    | \"env\"\n    | \"help\"\n    | \"version\"\n    | \"onboard\"\n    | \"download\"\n    | \"run\";\n  officeArgs?: string[];\n  sessionsArgs?: string[];\n  sandboxArgs?: string[];\n  stateDir: string;\n  workingDir: string;\n  workingDirExplicit: boolean;\n  sandbox: SandboxConfig;\n  downloadChannel?: string;\n}\n"]}

package/dist/env-manifest.d.ts

@@ -0,0 +1,17 @@
+import type { EnvGroup } from "./types.js";
+export declare function readEnv(name: string): string | undefined;
+export declare function readStandardEnv(name: string): string | undefined;
+export declare function setEnvAliases(name: string, value: string): void;
+export declare const ENV_MANIFEST: readonly EnvGroup[];
+type EnvLookup = (name: string) => string | undefined;
+export declare function platformIsActive(key: string, env?: EnvLookup): boolean;
+export declare function activePlatformKeys(env?: EnvLookup): string[];
+export declare function noPlatformsMessage(): string;
+export declare function envSummaryLines(): string[];
+export declare function manifestVarNames(options?: {
+    deployOnly?: boolean;
+}): string[];
+export declare function envReport(env?: EnvLookup): string;
+export declare function resolveLinkBaseUrl(): string | undefined;
+export {};
+//# sourceMappingURL=env-manifest.d.ts.map

package/dist/env-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-manifest.d.ts","sourceRoot":"","sources":["../src/env-manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMxD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEhE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAG/D;AAED,eAAO,MAAM,YAAY,EAAE,SAAS,QAAQ,EA6K3C,CAAC;AAEF,KAAK,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AAEtD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,SAAmB,GAAG,OAAO,CAO/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,SAAmB,GAAG,MAAM,EAAE,CAIrE;AAQD,wBAAgB,kBAAkB,IAAI,MAAM,CAK3C;AAED,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAI1C;AAED,wBAAgB,gBAAgB,CAAC,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,EAAE,CAM7E;AAED,wBAAgB,SAAS,CAAC,GAAG,GAAE,SAAmB,GAAG,MAAM,CAuB1D;AAED,wBAAgB,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAIvD"}

package/dist/env-manifest.js

@@ -0,0 +1,249 @@
+export function readEnv(name) {
+    const raw = process.env[name]?.trim();
+    if (raw)
+        return raw;
+    const prefixed = process.env[`MIKAN_${name}`]?.trim();
+    return prefixed || undefined;
+}
+export function readStandardEnv(name) {
+    return process.env[name]?.trim() || undefined;
+}
+export function setEnvAliases(name, value) {
+    process.env[name] = value;
+    process.env[`MIKAN_${name}`] = value;
+}
+export const ENV_MANIFEST = [
+    {
+        key: "slack",
+        title: "Slack",
+        kind: "platform",
+        vars: [
+            {
+                name: "SLACK_APP_TOKEN",
+                required: true,
+                secret: true,
+                doc: "Socket-mode app token (xapp-…)",
+            },
+            { name: "SLACK_BOT_TOKEN", required: true, secret: true, doc: "Bot token (xoxb-…)" },
+        ],
+    },
+    {
+        key: "telegram",
+        title: "Telegram",
+        kind: "platform",
+        vars: [{ name: "TELEGRAM_BOT_TOKEN", required: true, secret: true, doc: "BotFather token" }],
+    },
+    {
+        key: "discord",
+        title: "Discord",
+        kind: "platform",
+        vars: [{ name: "DISCORD_BOT_TOKEN", required: true, secret: true, doc: "Bot token" }],
+    },
+    {
+        key: "github",
+        title: "GitHub",
+        kind: "platform",
+        doc: "Issue/PR conversations via a GitHub App (polling; optional webhook poke)",
+        vars: [
+            { name: "GITHUB_APP_ID", required: true, doc: "GitHub App id" },
+            { name: "GITHUB_INSTALLATION_ID", required: true, doc: "App installation id" },
+            {
+                name: "GITHUB_APP_PRIVATE_KEY_PATH",
+                doc: "Path to the App private key .pem (preferred; keep outside any repo)",
+            },
+            {
+                name: "GITHUB_APP_PRIVATE_KEY",
+                secret: true,
+                deploy: false,
+                doc: "App private key PEM with literal \\n newlines (fallback)",
+            },
+            {
+                name: "GITHUB_REPOS",
+                doc: "Comma-separated owner/repo allowlist (default: all installed)",
+            },
+            { name: "GITHUB_POLL_INTERVAL", doc: "Poll interval in seconds (default 60)" },
+            {
+                name: "GITHUB_WEBHOOK_SECRET",
+                secret: true,
+                doc: "Webhook secret; when set, deliveries to /github/webhook trigger an immediate poll (needs LINK_PORT)",
+            },
+        ],
+        anyOf: ["GITHUB_APP_PRIVATE_KEY", "GITHUB_APP_PRIVATE_KEY_PATH"],
+    },
+    {
+        key: "llm",
+        title: "LLM providers",
+        kind: "feature",
+        vars: [
+            { name: "ANTHROPIC_API_KEY", secret: true, doc: "Anthropic API key" },
+            { name: "OPENAI_API_KEY", secret: true, doc: "OpenAI API key" },
+            {
+                name: "OPENROUTER_API_KEY",
+                secret: true,
+                doc: "OpenRouter API key (chat models routed through OpenRouter, and harness/jev.ts's Jev client via @geminixiang/jev)",
+            },
+        ],
+    },
+    {
+        key: "link",
+        title: "Link/OAuth server",
+        kind: "feature",
+        doc: "Credential onboarding links, session view, and the Admin portal",
+        vars: [
+            { name: "LINK_URL", doc: "Externally visible base URL, e.g. https://mikan.example.com" },
+            { name: "LINK_PORT", doc: "Listen port (default 8181 when LINK_URL is set)" },
+            { name: "GITHUB_OAUTH_CLIENT_ID", doc: "GitHub OAuth app for /login linking" },
+            { name: "GITHUB_OAUTH_CLIENT_SECRET", secret: true, doc: "GitHub OAuth app secret" },
+            { name: "GOOGLE_WORKSPACE_CLI_CLIENT_ID", doc: "Google Workspace OAuth client for /login" },
+            {
+                name: "GOOGLE_WORKSPACE_CLI_CLIENT_SECRET",
+                secret: true,
+                doc: "Google Workspace OAuth secret",
+            },
+            { name: "GOOGLE_CLOUD_SDK_CLIENT_ID", doc: "Google Cloud SDK OAuth client for /login" },
+            {
+                name: "GOOGLE_CLOUD_SDK_CLIENT_SECRET",
+                secret: true,
+                doc: "Google Cloud SDK OAuth secret",
+            },
+        ],
+    },
+    {
+        key: "openconnector",
+        title: "OpenConnector",
+        kind: "feature",
+        doc: "Default open-connector MCP server and the admin token that mints per-conversation runtime tokens",
+        vars: [
+            {
+                name: "OPENCONNECTOR_ENDPOINT",
+                doc: "Default MCP endpoint used when a conversation does not declare open-connector",
+            },
+            {
+                name: "OPENCONNECTOR_ADMIN_TOKEN",
+                secret: true,
+                doc: "Host-only admin token used to mint one runtime token per conversation for the default server",
+            },
+        ],
+    },
+    {
+        key: "cloudflare",
+        title: "Cloudflare sandbox",
+        kind: "feature",
+        doc: "For --sandbox=cloudflare:<id> via the bridge worker",
+        vars: [
+            { name: "CLOUDFLARE_SANDBOX_URL", doc: "Bridge worker URL" },
+            { name: "CLOUDFLARE_SANDBOX_TOKEN", secret: true, doc: "Bridge worker auth token" },
+        ],
+    },
+    {
+        key: "observability",
+        title: "Observability",
+        kind: "feature",
+        vars: [
+            { name: "SENTRY_DSN", secret: true, doc: "Sentry DSN (settings.json sentry.dsn wins)" },
+            {
+                name: "SENTRY_ENVIRONMENT",
+                deploy: false,
+                doc: "Sentry environment tag (default production)",
+            },
+            { name: "SENTRY_ENABLED", deploy: false, doc: "Set to false to disable Sentry errors" },
+            { name: "OTEL_SDK_DISABLED", doc: "Set to true to disable OpenTelemetry" },
+            { name: "OTEL_SERVICE_NAME", doc: "OTLP service name (default mikan)" },
+            {
+                name: "OTEL_RESOURCE_ATTRIBUTES",
+                secret: true,
+                doc: "Comma-separated safe resource attrs",
+            },
+            { name: "OTEL_TRACES_EXPORTER", doc: "Trace exporter: otlp or none" },
+            { name: "OTEL_METRICS_EXPORTER", doc: "Metrics exporter: otlp or none" },
+            { name: "OTEL_EXPORTER_OTLP_ENDPOINT", secret: true, doc: "Base OTLP HTTP endpoint" },
+            { name: "OTEL_EXPORTER_OTLP_TRACES_ENDPOINT", secret: true, doc: "OTLP traces endpoint" },
+            { name: "OTEL_EXPORTER_OTLP_METRICS_ENDPOINT", secret: true, doc: "OTLP metrics endpoint" },
+            { name: "OTEL_EXPORTER_OTLP_HEADERS", secret: true, doc: "Shared OTLP auth headers" },
+            { name: "OTEL_EXPORTER_OTLP_TRACES_HEADERS", secret: true, doc: "OTLP trace headers" },
+            { name: "OTEL_EXPORTER_OTLP_METRICS_HEADERS", secret: true, doc: "OTLP metric headers" },
+            { name: "OTEL_EXPORTER_OTLP_PROTOCOL", doc: "OTLP protocol; http/protobuf supported" },
+            { name: "OTEL_EXPORTER_OTLP_TRACES_PROTOCOL", doc: "Trace protocol override" },
+            { name: "OTEL_EXPORTER_OTLP_METRICS_PROTOCOL", doc: "Metric protocol override" },
+            { name: "OTEL_EXPORTER_OTLP_TIMEOUT", doc: "Shared OTLP timeout in milliseconds" },
+            { name: "OTEL_EXPORTER_OTLP_TRACES_TIMEOUT", doc: "Trace timeout in milliseconds" },
+            { name: "OTEL_EXPORTER_OTLP_METRICS_TIMEOUT", doc: "Metric timeout in milliseconds" },
+            { name: "OTEL_METRIC_EXPORT_INTERVAL", doc: "Metric export interval in milliseconds" },
+            { name: "OTEL_METRIC_EXPORT_TIMEOUT", doc: "Metric export timeout in milliseconds" },
+        ],
+    },
+    {
+        key: "runtime",
+        title: "Runtime",
+        kind: "feature",
+        vars: [
+            { name: "STATE_DIR", deploy: false, doc: "State dir override (same as --state-dir)" },
+            {
+                name: "HTTP_IDLE_TIMEOUT",
+                deploy: false,
+                doc: "Idle timeout in ms for outbound HTTP streams",
+            },
+        ],
+    },
+];
+export function platformIsActive(key, env = readEnv) {
+    const group = ENV_MANIFEST.find((candidate) => candidate.key === key);
+    if (!group)
+        throw new Error(`Unknown env-manifest group: ${key}`);
+    const required = group.vars.filter((spec) => spec.required);
+    if (!required.every((spec) => env(spec.name)))
+        return false;
+    if (group.anyOf && !group.anyOf.some((name) => env(name)))
+        return false;
+    return true;
+}
+export function activePlatformKeys(env = readEnv) {
+    return ENV_MANIFEST.filter((group) => group.kind === "platform" && platformIsActive(group.key, env)).map((group) => group.key);
+}
+function platformRecipe(group) {
+    const required = group.vars.filter((spec) => spec.required).map((spec) => spec.name);
+    const alternative = group.anyOf ? ` + ${group.anyOf.join(" | ")}` : "";
+    return `${group.title}: ${required.join(" + ")}${alternative}`;
+}
+export function noPlatformsMessage() {
+    const recipes = ENV_MANIFEST.filter((group) => group.kind === "platform")
+        .map((group) => `  ${platformRecipe(group)}`)
+        .join("\n");
+    return `No platform tokens found. Set one of:\n${recipes}`;
+}
+export function envSummaryLines() {
+    return ENV_MANIFEST.filter((group) => group.kind === "platform").map((group) => `  ${platformRecipe(group)}`);
+}
+export function manifestVarNames(options) {
+    return ENV_MANIFEST.flatMap((group) => group.vars
+        .filter((spec) => !options?.deployOnly || spec.deploy !== false)
+        .map((spec) => spec.name));
+}
+export function envReport(env = readEnv) {
+    const lines = [];
+    for (const group of ENV_MANIFEST) {
+        const active = group.kind === "platform"
+            ? platformIsActive(group.key, env)
+                ? " — active"
+                : " — inactive"
+            : "";
+        lines.push(`${group.title}${active}${group.doc ? ` · ${group.doc}` : ""}`);
+        for (const spec of group.vars) {
+            const status = env(spec.name) ? "set" : "unset";
+            const marks = [spec.required ? "required" : "", spec.secret ? "secret" : ""]
+                .filter(Boolean)
+                .join(", ");
+            lines.push(`  ${spec.name.padEnd(36)} ${status.padEnd(6)}${marks ? ` [${marks}]` : ""}  ${spec.doc}`);
+        }
+        lines.push("");
+    }
+    lines.push("Each var also accepts a MIKAN_-prefixed alias (e.g. MIKAN_LINK_URL).");
+    return lines.join("\n");
+}
+export function resolveLinkBaseUrl() {
+    const raw = readEnv("LINK_URL");
+    if (!raw)
+        return undefined;
+    return raw.replace(/\/+$/, "");
+}
+//# sourceMappingURL=env-manifest.js.map

package/dist/env-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-manifest.js","sourceRoot":"","sources":["../src/env-manifest.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,QAAQ,IAAI,SAAS,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC1B,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAwB;IAC/C;QACE,GAAG,EAAE,OAAO;QACZ,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,gCAAgC;aACtC;YACD,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE;SACrF;KACF;IACD;QACE,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;KAC7F;IACD;QACE,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;KACtF;IACD;QACE,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,0EAA0E;QAC/E,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE;YAC/D,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,qBAAqB,EAAE;YAC9E;gBACE,IAAI,EAAE,6BAA6B;gBACnC,GAAG,EAAE,qEAAqE;aAC3E;YACD;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,0DAA0D;aAChE;YACD;gBACE,IAAI,EAAE,cAAc;gBACpB,GAAG,EAAE,+DAA+D;aACrE;YACD,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC9E;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,qGAAqG;aAC3G;SACF;QACD,KAAK,EAAE,CAAC,wBAAwB,EAAE,6BAA6B,CAAC;KACjE;IACD;QACE,GAAG,EAAE,KAAK;QACV,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,mBAAmB,EAAE;YACrE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE;YAC/D;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,kHAAkH;aACxH;SACF;KACF;IACD;QACE,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,mBAAmB;QAC1B,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,iEAAiE;QACtE,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,6DAA6D,EAAE;YACxF,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC7E,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,qCAAqC,EAAE;YAC9E,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,yBAAyB,EAAE;YACpF,EAAE,IAAI,EAAE,gCAAgC,EAAE,GAAG,EAAE,0CAA0C,EAAE;YAC3F;gBACE,IAAI,EAAE,oCAAoC;gBAC1C,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,+BAA+B;aACrC;YACD,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,0CAA0C,EAAE;YACvF;gBACE,IAAI,EAAE,gCAAgC;gBACtC,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,+BAA+B;aACrC;SACF;KACF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,kGAAkG;QACvG,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE,wBAAwB;gBAC9B,GAAG,EAAE,+EAA+E;aACrF;YACD;gBACE,IAAI,EAAE,2BAA2B;gBACjC,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,8FAA8F;aACpG;SACF;KACF;IACD;QACE,GAAG,EAAE,YAAY;QACjB,KAAK,EAAE,oBAAoB;QAC3B,IAAI,EAAE,SAAS;QACf,GAAG,EAAE,qDAAqD;QAC1D,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,mBAAmB,EAAE;YAC5D,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,0BAA0B,EAAE;SACpF;KACF;IACD;QACE,GAAG,EAAE,eAAe;QACpB,KAAK,EAAE,eAAe;QACtB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,4CAA4C,EAAE;YACvF;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,6CAA6C;aACnD;YACD,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uCAAuC,EAAE;YACvF,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,sCAAsC,EAAE;YAC1E,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,mCAAmC,EAAE;YACvE;gBACE,IAAI,EAAE,0BAA0B;gBAChC,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,qCAAqC;aAC3C;YACD,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,8BAA8B,EAAE;YACrE,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,gCAAgC,EAAE;YACxE,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,yBAAyB,EAAE;YACrF,EAAE,IAAI,EAAE,oCAAoC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACzF,EAAE,IAAI,EAAE,qCAAqC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,uBAAuB,EAAE;YAC3F,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,0BAA0B,EAAE;YACrF,EAAE,IAAI,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE;YACtF,EAAE,IAAI,EAAE,oCAAoC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,qBAAqB,EAAE;YACxF,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,wCAAwC,EAAE;YACtF,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,yBAAyB,EAAE;YAC9E,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,0BAA0B,EAAE;YAChF,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,qCAAqC,EAAE;YAClF,EAAE,IAAI,EAAE,mCAAmC,EAAE,GAAG,EAAE,+BAA+B,EAAE;YACnF,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,gCAAgC,EAAE;YACrF,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,wCAAwC,EAAE;YACtF,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,uCAAuC,EAAE;SACrF;KACF;IACD;QACE,GAAG,EAAE,SAAS;QACd,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE;YACJ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,0CAA0C,EAAE;YACrF;gBACE,IAAI,EAAE,mBAAmB;gBACzB,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,8CAA8C;aACpD;SACF;KACF;CACF,CAAC;AAIF,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAG,GAAc,OAAO;IACpE,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAc,OAAO;IACzD,OAAO,YAAY,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CACzE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;SACtE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;SAC5C,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,0CAA0C,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,GAAG,CAClE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,cAAc,CAAC,KAAK,CAAC,EAAE,CACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAkC;IACjE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACpC,KAAK,CAAC,IAAI;SACP,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;SAC/D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAG,GAAc,OAAO;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,KAAK,UAAU;YACvB,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC;gBAChC,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,aAAa;YACjB,CAAC,CAAC,EAAE,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAChD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;iBACzE,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,CAC1F,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC","sourcesContent":["import type { EnvGroup } from \"./types.js\";\n\nexport function readEnv(name: string): string | undefined {\n  const raw = process.env[name]?.trim();\n  if (raw) return raw;\n\n  const prefixed = process.env[`MIKAN_${name}`]?.trim();\n  return prefixed || undefined;\n}\n\nexport function readStandardEnv(name: string): string | undefined {\n  return process.env[name]?.trim() || undefined;\n}\n\nexport function setEnvAliases(name: string, value: string): void {\n  process.env[name] = value;\n  process.env[`MIKAN_${name}`] = value;\n}\n\nexport const ENV_MANIFEST: readonly EnvGroup[] = [\n  {\n    key: \"slack\",\n    title: \"Slack\",\n    kind: \"platform\",\n    vars: [\n      {\n        name: \"SLACK_APP_TOKEN\",\n        required: true,\n        secret: true,\n        doc: \"Socket-mode app token (xapp-…)\",\n      },\n      { name: \"SLACK_BOT_TOKEN\", required: true, secret: true, doc: \"Bot token (xoxb-…)\" },\n    ],\n  },\n  {\n    key: \"telegram\",\n    title: \"Telegram\",\n    kind: \"platform\",\n    vars: [{ name: \"TELEGRAM_BOT_TOKEN\", required: true, secret: true, doc: \"BotFather token\" }],\n  },\n  {\n    key: \"discord\",\n    title: \"Discord\",\n    kind: \"platform\",\n    vars: [{ name: \"DISCORD_BOT_TOKEN\", required: true, secret: true, doc: \"Bot token\" }],\n  },\n  {\n    key: \"github\",\n    title: \"GitHub\",\n    kind: \"platform\",\n    doc: \"Issue/PR conversations via a GitHub App (polling; optional webhook poke)\",\n    vars: [\n      { name: \"GITHUB_APP_ID\", required: true, doc: \"GitHub App id\" },\n      { name: \"GITHUB_INSTALLATION_ID\", required: true, doc: \"App installation id\" },\n      {\n        name: \"GITHUB_APP_PRIVATE_KEY_PATH\",\n        doc: \"Path to the App private key .pem (preferred; keep outside any repo)\",\n      },\n      {\n        name: \"GITHUB_APP_PRIVATE_KEY\",\n        secret: true,\n        deploy: false,\n        doc: \"App private key PEM with literal \\\\n newlines (fallback)\",\n      },\n      {\n        name: \"GITHUB_REPOS\",\n        doc: \"Comma-separated owner/repo allowlist (default: all installed)\",\n      },\n      { name: \"GITHUB_POLL_INTERVAL\", doc: \"Poll interval in seconds (default 60)\" },\n      {\n        name: \"GITHUB_WEBHOOK_SECRET\",\n        secret: true,\n        doc: \"Webhook secret; when set, deliveries to /github/webhook trigger an immediate poll (needs LINK_PORT)\",\n      },\n    ],\n    anyOf: [\"GITHUB_APP_PRIVATE_KEY\", \"GITHUB_APP_PRIVATE_KEY_PATH\"],\n  },\n  {\n    key: \"llm\",\n    title: \"LLM providers\",\n    kind: \"feature\",\n    vars: [\n      { name: \"ANTHROPIC_API_KEY\", secret: true, doc: \"Anthropic API key\" },\n      { name: \"OPENAI_API_KEY\", secret: true, doc: \"OpenAI API key\" },\n      {\n        name: \"OPENROUTER_API_KEY\",\n        secret: true,\n        doc: \"OpenRouter API key (chat models routed through OpenRouter, and harness/jev.ts's Jev client via @geminixiang/jev)\",\n      },\n    ],\n  },\n  {\n    key: \"link\",\n    title: \"Link/OAuth server\",\n    kind: \"feature\",\n    doc: \"Credential onboarding links, session view, and the Admin portal\",\n    vars: [\n      { name: \"LINK_URL\", doc: \"Externally visible base URL, e.g. https://mikan.example.com\" },\n      { name: \"LINK_PORT\", doc: \"Listen port (default 8181 when LINK_URL is set)\" },\n      { name: \"GITHUB_OAUTH_CLIENT_ID\", doc: \"GitHub OAuth app for /login linking\" },\n      { name: \"GITHUB_OAUTH_CLIENT_SECRET\", secret: true, doc: \"GitHub OAuth app secret\" },\n      { name: \"GOOGLE_WORKSPACE_CLI_CLIENT_ID\", doc: \"Google Workspace OAuth client for /login\" },\n      {\n        name: \"GOOGLE_WORKSPACE_CLI_CLIENT_SECRET\",\n        secret: true,\n        doc: \"Google Workspace OAuth secret\",\n      },\n      { name: \"GOOGLE_CLOUD_SDK_CLIENT_ID\", doc: \"Google Cloud SDK OAuth client for /login\" },\n      {\n        name: \"GOOGLE_CLOUD_SDK_CLIENT_SECRET\",\n        secret: true,\n        doc: \"Google Cloud SDK OAuth secret\",\n      },\n    ],\n  },\n  {\n    key: \"openconnector\",\n    title: \"OpenConnector\",\n    kind: \"feature\",\n    doc: \"Default open-connector MCP server and the admin token that mints per-conversation runtime tokens\",\n    vars: [\n      {\n        name: \"OPENCONNECTOR_ENDPOINT\",\n        doc: \"Default MCP endpoint used when a conversation does not declare open-connector\",\n      },\n      {\n        name: \"OPENCONNECTOR_ADMIN_TOKEN\",\n        secret: true,\n        doc: \"Host-only admin token used to mint one runtime token per conversation for the default server\",\n      },\n    ],\n  },\n  {\n    key: \"cloudflare\",\n    title: \"Cloudflare sandbox\",\n    kind: \"feature\",\n    doc: \"For --sandbox=cloudflare:<id> via the bridge worker\",\n    vars: [\n      { name: \"CLOUDFLARE_SANDBOX_URL\", doc: \"Bridge worker URL\" },\n      { name: \"CLOUDFLARE_SANDBOX_TOKEN\", secret: true, doc: \"Bridge worker auth token\" },\n    ],\n  },\n  {\n    key: \"observability\",\n    title: \"Observability\",\n    kind: \"feature\",\n    vars: [\n      { name: \"SENTRY_DSN\", secret: true, doc: \"Sentry DSN (settings.json sentry.dsn wins)\" },\n      {\n        name: \"SENTRY_ENVIRONMENT\",\n        deploy: false,\n        doc: \"Sentry environment tag (default production)\",\n      },\n      { name: \"SENTRY_ENABLED\", deploy: false, doc: \"Set to false to disable Sentry errors\" },\n      { name: \"OTEL_SDK_DISABLED\", doc: \"Set to true to disable OpenTelemetry\" },\n      { name: \"OTEL_SERVICE_NAME\", doc: \"OTLP service name (default mikan)\" },\n      {\n        name: \"OTEL_RESOURCE_ATTRIBUTES\",\n        secret: true,\n        doc: \"Comma-separated safe resource attrs\",\n      },\n      { name: \"OTEL_TRACES_EXPORTER\", doc: \"Trace exporter: otlp or none\" },\n      { name: \"OTEL_METRICS_EXPORTER\", doc: \"Metrics exporter: otlp or none\" },\n      { name: \"OTEL_EXPORTER_OTLP_ENDPOINT\", secret: true, doc: \"Base OTLP HTTP endpoint\" },\n      { name: \"OTEL_EXPORTER_OTLP_TRACES_ENDPOINT\", secret: true, doc: \"OTLP traces endpoint\" },\n      { name: \"OTEL_EXPORTER_OTLP_METRICS_ENDPOINT\", secret: true, doc: \"OTLP metrics endpoint\" },\n      { name: \"OTEL_EXPORTER_OTLP_HEADERS\", secret: true, doc: \"Shared OTLP auth headers\" },\n      { name: \"OTEL_EXPORTER_OTLP_TRACES_HEADERS\", secret: true, doc: \"OTLP trace headers\" },\n      { name: \"OTEL_EXPORTER_OTLP_METRICS_HEADERS\", secret: true, doc: \"OTLP metric headers\" },\n      { name: \"OTEL_EXPORTER_OTLP_PROTOCOL\", doc: \"OTLP protocol; http/protobuf supported\" },\n      { name: \"OTEL_EXPORTER_OTLP_TRACES_PROTOCOL\", doc: \"Trace protocol override\" },\n      { name: \"OTEL_EXPORTER_OTLP_METRICS_PROTOCOL\", doc: \"Metric protocol override\" },\n      { name: \"OTEL_EXPORTER_OTLP_TIMEOUT\", doc: \"Shared OTLP timeout in milliseconds\" },\n      { name: \"OTEL_EXPORTER_OTLP_TRACES_TIMEOUT\", doc: \"Trace timeout in milliseconds\" },\n      { name: \"OTEL_EXPORTER_OTLP_METRICS_TIMEOUT\", doc: \"Metric timeout in milliseconds\" },\n      { name: \"OTEL_METRIC_EXPORT_INTERVAL\", doc: \"Metric export interval in milliseconds\" },\n      { name: \"OTEL_METRIC_EXPORT_TIMEOUT\", doc: \"Metric export timeout in milliseconds\" },\n    ],\n  },\n  {\n    key: \"runtime\",\n    title: \"Runtime\",\n    kind: \"feature\",\n    vars: [\n      { name: \"STATE_DIR\", deploy: false, doc: \"State dir override (same as --state-dir)\" },\n      {\n        name: \"HTTP_IDLE_TIMEOUT\",\n        deploy: false,\n        doc: \"Idle timeout in ms for outbound HTTP streams\",\n      },\n    ],\n  },\n];\n\ntype EnvLookup = (name: string) => string | undefined;\n\nexport function platformIsActive(key: string, env: EnvLookup = readEnv): boolean {\n  const group = ENV_MANIFEST.find((candidate) => candidate.key === key);\n  if (!group) throw new Error(`Unknown env-manifest group: ${key}`);\n  const required = group.vars.filter((spec) => spec.required);\n  if (!required.every((spec) => env(spec.name))) return false;\n  if (group.anyOf && !group.anyOf.some((name) => env(name))) return false;\n  return true;\n}\n\nexport function activePlatformKeys(env: EnvLookup = readEnv): string[] {\n  return ENV_MANIFEST.filter(\n    (group) => group.kind === \"platform\" && platformIsActive(group.key, env),\n  ).map((group) => group.key);\n}\n\nfunction platformRecipe(group: EnvGroup): string {\n  const required = group.vars.filter((spec) => spec.required).map((spec) => spec.name);\n  const alternative = group.anyOf ? ` + ${group.anyOf.join(\" | \")}` : \"\";\n  return `${group.title}: ${required.join(\" + \")}${alternative}`;\n}\n\nexport function noPlatformsMessage(): string {\n  const recipes = ENV_MANIFEST.filter((group) => group.kind === \"platform\")\n    .map((group) => `  ${platformRecipe(group)}`)\n    .join(\"\\n\");\n  return `No platform tokens found. Set one of:\\n${recipes}`;\n}\n\nexport function envSummaryLines(): string[] {\n  return ENV_MANIFEST.filter((group) => group.kind === \"platform\").map(\n    (group) => `  ${platformRecipe(group)}`,\n  );\n}\n\nexport function manifestVarNames(options?: { deployOnly?: boolean }): string[] {\n  return ENV_MANIFEST.flatMap((group) =>\n    group.vars\n      .filter((spec) => !options?.deployOnly || spec.deploy !== false)\n      .map((spec) => spec.name),\n  );\n}\n\nexport function envReport(env: EnvLookup = readEnv): string {\n  const lines: string[] = [];\n  for (const group of ENV_MANIFEST) {\n    const active =\n      group.kind === \"platform\"\n        ? platformIsActive(group.key, env)\n          ? \" — active\"\n          : \" — inactive\"\n        : \"\";\n    lines.push(`${group.title}${active}${group.doc ? ` · ${group.doc}` : \"\"}`);\n    for (const spec of group.vars) {\n      const status = env(spec.name) ? \"set\" : \"unset\";\n      const marks = [spec.required ? \"required\" : \"\", spec.secret ? \"secret\" : \"\"]\n        .filter(Boolean)\n        .join(\", \");\n      lines.push(\n        `  ${spec.name.padEnd(36)} ${status.padEnd(6)}${marks ? ` [${marks}]` : \"\"}  ${spec.doc}`,\n      );\n    }\n    lines.push(\"\");\n  }\n  lines.push(\"Each var also accepts a MIKAN_-prefixed alias (e.g. MIKAN_LINK_URL).\");\n  return lines.join(\"\\n\");\n}\n\nexport function resolveLinkBaseUrl(): string | undefined {\n  const raw = readEnv(\"LINK_URL\");\n  if (!raw) return undefined;\n  return raw.replace(/\\/+$/, \"\");\n}\n"]}