@goondocks/myco 0.18.0 → 0.19.0

package/dist/{stop-YGHODSP7.js → stop-WNKCMCGO.js}

@@ -2,21 +2,21 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   normalizeHookInput,
   readStdin
-} from "./chunk-PFWIPRF6.js";
+} from "./chunk-MS6FDV45.js";
 import {
   resolveVaultDir
 } from "./chunk-5ZT2Q6P5.js";
 import {
   DaemonClient
-} from "./chunk-BUIR3JWM.js";
-import "./chunk-EO2RQW4S.js";
-import "./chunk-FABWUX5G.js";
+} from "./chunk-CYBC2HZ3.js";
+import "./chunk-2CKDAFSX.js";
+import "./chunk-UVKQ62II.js";
 import "./chunk-LPUQPDC2.js";
-import "./chunk-CKJAWZQE.js";
+import "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
 // src/hooks/stop.ts
@@ -45,4 +45,4 @@ async function main() {
 export {
   main
 };
-//# sourceMappingURL=stop-YGHODSP7.js.map
+//# sourceMappingURL=stop-WNKCMCGO.js.map

package/dist/{stop-failure-7IJTPJ6W.js → stop-failure-6GTOBVTN.js}

@@ -1,19 +1,19 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   sendEvent
-} from "./chunk-VOCGURV7.js";
+} from "./chunk-UW6DGPSV.js";
 import "./chunk-V7XG6V6C.js";
-import "./chunk-PFWIPRF6.js";
+import "./chunk-MS6FDV45.js";
 import "./chunk-5ZT2Q6P5.js";
-import "./chunk-BUIR3JWM.js";
-import "./chunk-EO2RQW4S.js";
-import "./chunk-FABWUX5G.js";
+import "./chunk-CYBC2HZ3.js";
+import "./chunk-2CKDAFSX.js";
+import "./chunk-UVKQ62II.js";
 import "./chunk-LPUQPDC2.js";
-import "./chunk-CKJAWZQE.js";
+import "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
 // src/hooks/stop-failure.ts
@@ -27,4 +27,4 @@ async function main() {
 export {
   main
 };
-//# sourceMappingURL=stop-failure-7IJTPJ6W.js.map
+//# sourceMappingURL=stop-failure-6GTOBVTN.js.map

package/dist/{subagent-start-ZBQ5PJB5.js → subagent-start-VJF5YKVX.js}

@@ -1,19 +1,19 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   sendEvent
-} from "./chunk-VOCGURV7.js";
+} from "./chunk-UW6DGPSV.js";
 import "./chunk-V7XG6V6C.js";
-import "./chunk-PFWIPRF6.js";
+import "./chunk-MS6FDV45.js";
 import "./chunk-5ZT2Q6P5.js";
-import "./chunk-BUIR3JWM.js";
-import "./chunk-EO2RQW4S.js";
-import "./chunk-FABWUX5G.js";
+import "./chunk-CYBC2HZ3.js";
+import "./chunk-2CKDAFSX.js";
+import "./chunk-UVKQ62II.js";
 import "./chunk-LPUQPDC2.js";
-import "./chunk-CKJAWZQE.js";
+import "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
 // src/hooks/subagent-start.ts
@@ -27,4 +27,4 @@ async function main() {
 export {
   main
 };
-//# sourceMappingURL=subagent-start-ZBQ5PJB5.js.map
+//# sourceMappingURL=subagent-start-VJF5YKVX.js.map

package/dist/{subagent-stop-N2TDQU2D.js → subagent-stop-UW6HMICY.js}

@@ -1,19 +1,19 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   sendEvent
-} from "./chunk-VOCGURV7.js";
+} from "./chunk-UW6DGPSV.js";
 import "./chunk-V7XG6V6C.js";
-import "./chunk-PFWIPRF6.js";
+import "./chunk-MS6FDV45.js";
 import "./chunk-5ZT2Q6P5.js";
-import "./chunk-BUIR3JWM.js";
-import "./chunk-EO2RQW4S.js";
-import "./chunk-FABWUX5G.js";
+import "./chunk-CYBC2HZ3.js";
+import "./chunk-2CKDAFSX.js";
+import "./chunk-UVKQ62II.js";
 import "./chunk-LPUQPDC2.js";
-import "./chunk-CKJAWZQE.js";
+import "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
 // src/hooks/subagent-stop.ts
@@ -29,4 +29,4 @@ async function main() {
 export {
   main
 };
-//# sourceMappingURL=subagent-stop-N2TDQU2D.js.map
+//# sourceMappingURL=subagent-stop-UW6HMICY.js.map

package/dist/{task-completed-BDLMRSBB.js → task-completed-U4Q3XXLX.js}

@@ -1,19 +1,19 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   sendEvent
-} from "./chunk-VOCGURV7.js";
+} from "./chunk-UW6DGPSV.js";
 import "./chunk-V7XG6V6C.js";
-import "./chunk-PFWIPRF6.js";
+import "./chunk-MS6FDV45.js";
 import "./chunk-5ZT2Q6P5.js";
-import "./chunk-BUIR3JWM.js";
-import "./chunk-EO2RQW4S.js";
-import "./chunk-FABWUX5G.js";
+import "./chunk-CYBC2HZ3.js";
+import "./chunk-2CKDAFSX.js";
+import "./chunk-UVKQ62II.js";
 import "./chunk-LPUQPDC2.js";
-import "./chunk-CKJAWZQE.js";
+import "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
 // src/hooks/task-completed.ts
@@ -28,4 +28,4 @@ async function main() {
 export {
   main
 };
-//# sourceMappingURL=task-completed-BDLMRSBB.js.map
+//# sourceMappingURL=task-completed-U4Q3XXLX.js.map

package/dist/{team-2ZFGTSIN.js → team-N6TXS2PF.js}

@@ -1,52 +1,58 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
+  extractJsonArray,
+  parseD1Id,
+  parseKvNamespaceId,
+  parseWorkerUrl,
+  readJsonConfig,
   readSecrets,
+  resolveHomeConfigPath,
+  runWrangler,
+  stageDeploymentDir,
+  writeJsonConfig,
   writeSecret
-} from "./chunk-RJMXDUMA.js";
+} from "./chunk-EM63ZFKA.js";
+import {
+  SCHEMA_VERSION
+} from "./chunk-2LN2BBKA.js";
 import {
   loadConfig,
   updateTeamConfig
-} from "./chunk-2V7HR7HB.js";
-import {
-  getPluginVersion
-} from "./chunk-EO2RQW4S.js";
-import {
-  resolvePackageRoot
-} from "./chunk-FABWUX5G.js";
-import "./chunk-LPUQPDC2.js";
+} from "./chunk-MDEUXYJG.js";
 import {
   TEAM_API_KEY_SECRET,
   WRANGLER_COMMAND_TIMEOUT_MS
-} from "./chunk-CKJAWZQE.js";
+} from "./chunk-W4VHC2ES.js";
 import "./chunk-E7NUADTQ.js";
-import "./chunk-D7TYRPRM.js";
-import "./chunk-E4VLWIJC.js";
-import "./chunk-GDY63YAW.js";
+import "./chunk-6LQIMRTC.js";
+import "./chunk-ODXLRR4U.js";
+import "./chunk-U6PF3YII.js";
 import "./chunk-PZUWP5VK.js";
 
-// src/cli/team.ts
-import { execFileSync } from "child_process";
+// ../myco-team/src/cli.ts
 import crypto from "crypto";
 import fs from "fs";
 import path from "path";
+import { fileURLToPath } from "url";
 var API_KEY_BYTES = 32;
 var VECTORIZE_DIMENSIONS = "1024";
 var VECTORIZE_METRIC = "cosine";
 var TEAM_RESOURCE_PREFIX = "myco-team";
 var PROJECT_HASH_LENGTH = 8;
-var WORKER_SOURCE_DIR = "src/worker";
+var WORKER_SOURCE_DIR = "worker";
 var TEAM_WORKER_DIR = ".team-worker";
-var D1_ID_JSON_REGEX = /"database_id"\s*:\s*"([0-9a-f-]{36})"/i;
-var D1_ID_TEXT_REGEX = /id:\s*([0-9a-f-]{36})/i;
-var WORKER_URL_REGEX = /(https:\/\/[^\s]+\.workers\.dev)/;
+var TEAM_CONFIG_DIR = ".myco-team";
+var TEAM_CONFIG_FILE = "config.json";
+var TEAM_CONFIG_VERSION = 1;
 var TOML_NAME_REGEX = /^name\s*=\s*"[^"]*"/m;
 var TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;
 var TOML_DB_NAME_REGEX = /database_name\s*=\s*"[^"]*"/g;
 var TOML_INDEX_NAME_REGEX = /index_name\s*=\s*"[^"]*"/g;
+var TOML_TEAM_PACKAGE_VERSION_REGEX = /MYCO_TEAM_PACKAGE_VERSION\s*=\s*"[^"]*"/g;
+var TOML_MYCO_SCHEMA_VERSION_REGEX = /MYCO_SCHEMA_VERSION\s*=\s*"[^"]*"/g;
 var TOML_DB_ID_REGEX = /database_id\s*=\s*"([^"]+)"/;
 var TOML_KV_PLACEHOLDER_REGEX = /<YOUR_KV_NAMESPACE_ID>/g;
 var TOML_KV_ID_REGEX = /\[\[kv_namespaces\]\][\s\S]*?id\s*=\s*"([0-9a-f]+)"/;
-var KV_ID_REGEX = /"id":\s*"([0-9a-f]+)"/i;
 function projectHash(vaultDir) {
   const hash = crypto.createHash("sha256").update(vaultDir).digest("hex");
   return hash.slice(0, PROJECT_HASH_LENGTH);
@@ -54,21 +60,38 @@ function projectHash(vaultDir) {
 function resourceName(vaultDir) {
   return `${TEAM_RESOURCE_PREFIX}-${projectHash(vaultDir)}`;
 }
-function wrangler(args, options) {
-  try {
-    return execFileSync("wrangler", args, {
-      encoding: "utf-8",
-      timeout: WRANGLER_COMMAND_TIMEOUT_MS,
-      stdio: ["pipe", "pipe", "pipe"],
-      ...options
-    });
-  } catch (err) {
-    const execErr = err;
-    const stderr = execErr.stderr?.toString() ?? "";
-    const stdout = execErr.stdout?.toString() ?? "";
-    const detail = [stderr, stdout].filter(Boolean).join("\n").trim();
-    throw new Error(detail || execErr.message);
+function resolvePackageRoot() {
+  const override = process.env.MYCO_TEAM_PACKAGE_ROOT?.trim();
+  if (override) return override;
+  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+}
+function getTeamPackageVersion() {
+  const packageRoot = resolvePackageRoot();
+  const candidatePaths = [
+    path.join(packageRoot, "package.json"),
+    path.join(path.resolve(path.dirname(fileURLToPath(import.meta.url)), ".."), "package.json")
+  ];
+  for (const candidatePath of candidatePaths) {
+    if (!fs.existsSync(candidatePath)) continue;
+    const packageJson = JSON.parse(fs.readFileSync(candidatePath, "utf-8"));
+    if (packageJson.version) return packageJson.version;
   }
+  return "0.1.0";
+}
+function getMycoSchemaVersion() {
+  return String(SCHEMA_VERSION);
+}
+function resolveLocalConfigPath() {
+  return resolveHomeConfigPath(TEAM_CONFIG_DIR, TEAM_CONFIG_FILE);
+}
+function readLocalConfig() {
+  return readJsonConfig(resolveLocalConfigPath());
+}
+function writeLocalConfig(config) {
+  writeJsonConfig(resolveLocalConfigPath(), config);
+}
+function wrangler(args, options) {
+  return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });
 }
 function locateWorkerSource() {
   const root = resolvePackageRoot();
@@ -76,32 +99,30 @@ function locateWorkerSource() {
   if (fs.existsSync(distPath)) return distPath;
   const srcPath = path.join(root, WORKER_SOURCE_DIR);
   if (fs.existsSync(srcPath)) return srcPath;
-  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} \u2014 are you running from the myco package?`);
+  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} \u2014 are you running from the myco-team package?`);
 }
 function prepareDeployDir(vaultDir, d1Id, kvId) {
   const srcDir = locateWorkerSource();
   const deployDir = path.join(vaultDir, TEAM_WORKER_DIR);
-  fs.cpSync(srcDir, deployDir, { recursive: true });
-  const tomlPath = path.join(deployDir, "wrangler.toml");
-  let toml = fs.readFileSync(tomlPath, "utf-8");
   const name = resourceName(vaultDir);
-  toml = toml.replace(TOML_NAME_REGEX, `name = "${name}"`);
-  toml = toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id);
-  toml = toml.replace(TOML_DB_NAME_REGEX, `database_name = "${name}"`);
-  toml = toml.replace(TOML_INDEX_NAME_REGEX, `index_name = "${name}-vectors"`);
-  toml = toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId);
-  fs.writeFileSync(tomlPath, toml, "utf-8");
-  installDeploymentDeps(deployDir);
-  return deployDir;
-}
-function extractJsonArray(output) {
-  const start = output.indexOf("[");
-  const end = output.lastIndexOf("]");
-  if (start === -1 || end === -1 || end < start) {
-    throw new Error(`No JSON array found in output:
-${output}`);
-  }
-  return JSON.parse(output.slice(start, end + 1));
+  return stageDeploymentDir({
+    sourceDir: srcDir,
+    deployDir,
+    reset: true,
+    textPatches: [{
+      filePath: "wrangler.toml",
+      transforms: [
+        (toml) => toml.replace(TOML_NAME_REGEX, `name = "${name}"`),
+        (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),
+        (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = "${name}"`),
+        (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = "${name}-vectors"`),
+        (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),
+        (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = "${getTeamPackageVersion()}"`),
+        (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = "${getMycoSchemaVersion()}"`)
+      ]
+    }],
+    installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3
+  });
 }
 function ensureKvNamespace(name) {
   const kvName = `${name}-secrets`;
@@ -116,9 +137,7 @@ function ensureKvNamespace(name) {
   };
   try {
     const output = wrangler(["kv", "namespace", "create", kvName]);
-    const match = output.match(KV_ID_REGEX);
-    if (match) return match[1];
-    return lookupExisting();
+    return parseKvNamespaceId(output);
   } catch (err) {
     const errMsg = err.message;
     if (errMsg.includes("already exists") || errMsg.includes("duplicate") || errMsg.includes("same title")) {
@@ -127,29 +146,22 @@ function ensureKvNamespace(name) {
     throw err;
   }
 }
-function installDeploymentDeps(deployDir) {
-  const packageJsonPath = path.join(deployDir, "package.json");
-  if (!fs.existsSync(packageJsonPath)) return;
-  execFileSync("npm", ["install", "--silent", "--no-audit", "--no-fund"], {
-    encoding: "utf-8",
-    timeout: WRANGLER_COMMAND_TIMEOUT_MS * 3,
-    stdio: ["pipe", "pipe", "pipe"],
-    cwd: deployDir
+async function rotateMcpTokenForWorker(workerUrl, apiKey) {
+  const response = await fetch(`${workerUrl}/mcp/rotate`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${apiKey}`,
+      "Content-Type": "application/json"
+    }
   });
-}
-function parseD1Id(output) {
-  const jsonMatch = output.match(D1_ID_JSON_REGEX);
-  if (jsonMatch) return jsonMatch[1];
-  const textMatch = output.match(D1_ID_TEXT_REGEX);
-  if (textMatch) return textMatch[1];
-  throw new Error(`Could not parse D1 database ID from wrangler output:
-${output}`);
-}
-function parseWorkerUrl(output) {
-  const match = output.match(WORKER_URL_REGEX);
-  if (!match) throw new Error(`Could not parse worker URL from deploy output:
-${output}`);
-  return match[1];
+  if (!response.ok) {
+    throw new Error(`MCP token rotation failed: ${response.status} ${await response.text()}`);
+  }
+  const body = await response.json();
+  if (!body.token) {
+    throw new Error("MCP token rotation response did not include a token");
+  }
+  return body.token;
 }
 async function teamInit(vaultDir) {
   console.log("Provisioning team sync infrastructure...\n");
@@ -224,12 +236,10 @@ async function teamInit(vaultDir) {
   const deployDir = prepareDeployDir(vaultDir, d1Id, kvId);
   console.log("Setting API key secret...");
   try {
-    execFileSync("wrangler", ["secret", "put", TEAM_API_KEY_SECRET, "--name", name], {
-      encoding: "utf-8",
-      timeout: WRANGLER_COMMAND_TIMEOUT_MS,
+    runWrangler(["secret", "put", TEAM_API_KEY_SECRET, "--name", name], {
+      cwd: deployDir,
       input: apiKey,
-      stdio: ["pipe", "pipe", "pipe"],
-      cwd: deployDir
+      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS
     });
     console.log("Secret set\n");
   } catch (err) {
@@ -266,15 +276,34 @@ async function teamInit(vaultDir) {
   } catch {
     console.log("Warning: could not seed team config (non-fatal)\n");
   }
+  let mcpToken = null;
+  try {
+    mcpToken = await rotateMcpTokenForWorker(workerUrl, apiKey);
+  } catch {
+  }
   updateTeamConfig(vaultDir, {
     enabled: true,
     worker_url: workerUrl,
-    deployed_worker_version: getPluginVersion()
+    deployed_worker_version: getTeamPackageVersion()
   });
   writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);
+  writeLocalConfig({
+    worker_name: name,
+    worker_url: workerUrl,
+    api_key: apiKey,
+    mcp_token: mcpToken,
+    package_version: getTeamPackageVersion(),
+    vault_dir: vaultDir,
+    created_at: (/* @__PURE__ */ new Date()).toISOString(),
+    last_upgraded: (/* @__PURE__ */ new Date()).toISOString(),
+    config_version: TEAM_CONFIG_VERSION
+  });
   console.log("Team sync configured!\n");
   console.log(`  URL:     ${workerUrl}`);
   console.log(`  API Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`);
+  if (mcpToken) {
+    console.log(`  MCP:     ${mcpToken.slice(0, 8)}...${mcpToken.slice(-4)}`);
+  }
   console.log("\nShare the URL and API key with teammates so they can connect.");
 }
 function upgradeWorker(vaultDir) {
@@ -308,17 +337,24 @@ function upgradeWorker(vaultDir) {
       return { success: false, error: `Failed to provision KV namespace: ${err.message}` };
     }
   }
-  const srcDir = locateWorkerSource();
-  fs.cpSync(srcDir, deployDir, { recursive: true });
-  let toml = fs.readFileSync(path.join(deployDir, "wrangler.toml"), "utf-8");
-  toml = toml.replace(TOML_NAME_REGEX, `name = "${workerName}"`);
-  toml = toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id);
-  toml = toml.replace(TOML_DB_NAME_REGEX, `database_name = "${dbNameMatch?.[1] ?? workerName}"`);
-  toml = toml.replace(TOML_INDEX_NAME_REGEX, `index_name = "${indexNameMatch?.[1] ?? `${workerName}-vectors`}"`);
-  toml = toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId);
-  fs.writeFileSync(path.join(deployDir, "wrangler.toml"), toml, "utf-8");
   try {
-    installDeploymentDeps(deployDir);
+    stageDeploymentDir({
+      sourceDir: locateWorkerSource(),
+      deployDir,
+      textPatches: [{
+        filePath: "wrangler.toml",
+        transforms: [
+          (toml) => toml.replace(TOML_NAME_REGEX, `name = "${workerName}"`),
+          (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),
+          (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = "${dbNameMatch?.[1] ?? workerName}"`),
+          (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = "${indexNameMatch?.[1] ?? `${workerName}-vectors`}"`),
+          (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),
+          (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = "${getTeamPackageVersion()}"`),
+          (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = "${getMycoSchemaVersion()}"`)
+        ]
+      }],
+      installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3
+    });
   } catch (err) {
     return { success: false, error: `Failed to install worker dependencies: ${err.message}` };
   }
@@ -326,12 +362,10 @@ function upgradeWorker(vaultDir) {
   const apiKey = secrets[TEAM_API_KEY_SECRET];
   if (apiKey) {
     try {
-      execFileSync("wrangler", ["secret", "put", TEAM_API_KEY_SECRET, "--name", workerName], {
-        encoding: "utf-8",
-        timeout: WRANGLER_COMMAND_TIMEOUT_MS,
+      runWrangler(["secret", "put", TEAM_API_KEY_SECRET, "--name", workerName], {
+        cwd: deployDir,
         input: apiKey,
-        stdio: ["pipe", "pipe", "pipe"],
-        cwd: deployDir
+        timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS
       });
     } catch {
     }
@@ -339,11 +373,22 @@ function upgradeWorker(vaultDir) {
   try {
     const deployOutput = wrangler(["deploy"], { cwd: deployDir });
     const workerUrl = parseWorkerUrl(deployOutput);
-    const version = getPluginVersion();
+    const version = getTeamPackageVersion();
     updateTeamConfig(vaultDir, {
       worker_url: workerUrl,
       deployed_worker_version: version
     });
+    const localConfig = readLocalConfig();
+    if (localConfig) {
+      writeLocalConfig({
+        ...localConfig,
+        worker_name: workerName,
+        worker_url: workerUrl,
+        package_version: version,
+        vault_dir: vaultDir,
+        last_upgraded: (/* @__PURE__ */ new Date()).toISOString()
+      });
+    }
     return { success: true, worker_url: workerUrl, version };
   } catch (err) {
     return { success: false, error: `Failed to deploy worker: ${err.message}` };
@@ -365,4 +410,4 @@ export {
   teamUpgrade,
   upgradeWorker
 };
-//# sourceMappingURL=team-2ZFGTSIN.js.map
+//# sourceMappingURL=team-N6TXS2PF.js.map

package/dist/team-N6TXS2PF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../myco-team/src/cli.ts"],"sourcesContent":["/**\n * CLI team commands — provision and manage Cloudflare team sync infrastructure.\n *\n * `myco team init`    — Provision D1 database, Vectorize index, deploy worker.\n * `myco team upgrade` — Redeploy worker with updated source.\n */\n\nimport crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { CONFIG_FILENAME, loadConfig, updateTeamConfig } from '@myco/config/loader.js';\nimport { writeSecret, readSecrets } from '@myco/config/secrets.js';\nimport { WRANGLER_COMMAND_TIMEOUT_MS, TEAM_API_KEY_SECRET } from '@myco/constants.js';\nimport { SCHEMA_VERSION } from '@myco/db/schema.js';\nimport {\n  extractJsonArray,\n  installDeploymentDeps,\n  maskSecret,\n  parseD1Id,\n  parseKvNamespaceId,\n  parseWorkerUrl,\n  readJsonConfig,\n  resolveHomeConfigPath,\n  runWrangler,\n  stageDeploymentDir,\n  writeJsonConfig,\n} from '@myco-deploy/index.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Number of random bytes for API key generation. */\nconst API_KEY_BYTES = 32;\n\n/** Vectorize index dimensions (must match the embedding model). */\nconst VECTORIZE_DIMENSIONS = '1024';\n\n/** Vectorize distance metric. */\nconst VECTORIZE_METRIC = 'cosine';\n\n/** Prefix for team resource names. */\nconst TEAM_RESOURCE_PREFIX = 'myco-team';\n\n/** Length of the project hash suffix for unique resource naming. */\nconst PROJECT_HASH_LENGTH = 8;\n\n\n/** Source directory for worker files (relative to package root). */\nconst WORKER_SOURCE_DIR = 'worker';\n\n/** Deployment directory name within the vault. */\nconst TEAM_WORKER_DIR = '.team-worker';\nconst TEAM_CONFIG_DIR = '.myco-team';\nconst TEAM_CONFIG_FILE = 'config.json';\nconst TEAM_CONFIG_VERSION = 1;\nconst TEAM_MCP_ROTATION_RETRY_ATTEMPTS = 10;\nconst TEAM_MCP_ROTATION_RETRY_DELAY_MS = 1500;\n\n/** Regex to match wrangler.toml name field. */\nconst TOML_NAME_REGEX = /^name\\s*=\\s*\"[^\"]*\"/m;\n\n/** Regex to match wrangler.toml D1 placeholder. */\nconst TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;\n\n/** Regex to match wrangler.toml database_name field. */\nconst TOML_DB_NAME_REGEX = /database_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml index_name field. */\nconst TOML_INDEX_NAME_REGEX = /index_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml team package version placeholder. */\nconst TOML_TEAM_PACKAGE_VERSION_REGEX = /MYCO_TEAM_PACKAGE_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml Myco schema version placeholder. */\nconst TOML_MYCO_SCHEMA_VERSION_REGEX = /MYCO_SCHEMA_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match database_id in existing wrangler.toml. */\nconst TOML_DB_ID_REGEX = /database_id\\s*=\\s*\"([^\"]+)\"/;\n\n/** Regex to match wrangler.toml KV namespace placeholder. */\nconst TOML_KV_PLACEHOLDER_REGEX = /<YOUR_KV_NAMESPACE_ID>/g;\n\n/** Regex to extract the KV namespace ID from an existing wrangler.toml. */\nconst TOML_KV_ID_REGEX = /\\[\\[kv_namespaces\\]\\][\\s\\S]*?id\\s*=\\s*\"([0-9a-f]+)\"/;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Generate a project hash from vault dir for unique resource naming. */\nfunction projectHash(vaultDir: string): string {\n  const hash = crypto.createHash('sha256').update(vaultDir).digest('hex');\n  return hash.slice(0, PROJECT_HASH_LENGTH);\n}\n\n/** Build the unique resource name for this project's team infrastructure. */\nfunction resourceName(vaultDir: string): string {\n  return `${TEAM_RESOURCE_PREFIX}-${projectHash(vaultDir)}`;\n}\n\nfunction resolvePackageRoot(): string {\n  const override = process.env.MYCO_TEAM_PACKAGE_ROOT?.trim();\n  if (override) return override;\n  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');\n}\n\nfunction getTeamPackageVersion(): string {\n  const packageRoot = resolvePackageRoot();\n  const candidatePaths = [\n    path.join(packageRoot, 'package.json'),\n    path.join(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'), 'package.json'),\n  ];\n\n  for (const candidatePath of candidatePaths) {\n    if (!fs.existsSync(candidatePath)) continue;\n    const packageJson = JSON.parse(fs.readFileSync(candidatePath, 'utf-8')) as { version?: string };\n    if (packageJson.version) return packageJson.version;\n  }\n\n  return '0.1.0';\n}\n\nfunction getMycoSchemaVersion(): string {\n  return String(SCHEMA_VERSION);\n}\n\nexport interface TeamLocalConfig {\n  worker_name: string;\n  worker_url: string;\n  api_key: string;\n  mcp_token: string | null;\n  package_version: string;\n  vault_dir?: string;\n  created_at: string;\n  last_upgraded: string;\n  config_version: number;\n}\n\nfunction resolveLocalConfigPath(): string {\n  return resolveHomeConfigPath(TEAM_CONFIG_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction readLocalConfig(): TeamLocalConfig | null {\n  return readJsonConfig<TeamLocalConfig>(resolveLocalConfigPath());\n}\n\nfunction writeLocalConfig(config: TeamLocalConfig): void {\n  writeJsonConfig(resolveLocalConfigPath(), config);\n}\n\nfunction requireLocalConfig(): TeamLocalConfig {\n  const config = readLocalConfig();\n  if (config) return config;\n\n  console.error(`No local myco-team config found at ${resolveLocalConfigPath()}`);\n  process.exit(1);\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function rotateMcpTokenWithRetry(workerUrl: string, apiKey: string): Promise<string> {\n  let lastError: Error | null = null;\n\n  for (let attempt = 1; attempt <= TEAM_MCP_ROTATION_RETRY_ATTEMPTS; attempt += 1) {\n    try {\n      return await rotateMcpTokenForWorker(workerUrl, apiKey);\n    } catch (error) {\n      lastError = error as Error;\n      const isRetryable =\n        lastError.message.includes('401') &&\n        lastError.message.includes('Invalid API key') &&\n        attempt < TEAM_MCP_ROTATION_RETRY_ATTEMPTS;\n      if (!isRetryable) {\n        throw lastError;\n      }\n      await delay(TEAM_MCP_ROTATION_RETRY_DELAY_MS);\n    }\n  }\n\n  throw lastError ?? new Error('MCP token rotation failed');\n}\n\nfunction resolveVaultDirForConfig(config: TeamLocalConfig): string | null {\n  const configuredVaultDir = config.vault_dir?.trim();\n  if (configuredVaultDir && fs.existsSync(path.join(configuredVaultDir, CONFIG_FILENAME))) {\n    return configuredVaultDir;\n  }\n\n  let currentDir = process.cwd();\n  while (true) {\n    const candidateDirs = path.basename(currentDir) === '.myco'\n      ? [currentDir]\n      : [path.join(currentDir, '.myco')];\n\n    for (const candidateDir of candidateDirs) {\n      const configPath = path.join(candidateDir, CONFIG_FILENAME);\n      if (!fs.existsSync(configPath)) continue;\n      try {\n        const candidateConfig = loadConfig(candidateDir);\n        if (candidateConfig.team.worker_url === config.worker_url) {\n          return candidateDir;\n        }\n      } catch {\n        // Ignore unrelated or invalid config candidates while walking upward.\n      }\n    }\n\n    const parentDir = path.dirname(currentDir);\n    if (parentDir === currentDir) break;\n    currentDir = parentDir;\n  }\n\n  return null;\n}\n\n/** Run a wrangler command and return stdout. Throws on failure, surfacing stderr. */\nfunction wrangler(args: string[], options?: { cwd?: string }): string {\n  return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });\n}\n\n/** Find the worker source directory. Checks dist layout first (installed), then source layout (dev). */\nfunction locateWorkerSource(): string {\n  const root = resolvePackageRoot();\n  const distPath = path.join(root, 'dist', WORKER_SOURCE_DIR);\n  if (fs.existsSync(distPath)) return distPath;\n  const srcPath = path.join(root, WORKER_SOURCE_DIR);\n  if (fs.existsSync(srcPath)) return srcPath;\n  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} — are you running from the myco-team package?`);\n}\n\n/**\n * Copy worker source to the vault deployment directory and patch wrangler.toml\n * with actual D1 database ID and resource names.\n */\nfunction prepareDeployDir(vaultDir: string, d1Id: string, kvId: string): string {\n  const srcDir = locateWorkerSource();\n  const deployDir = path.join(vaultDir, TEAM_WORKER_DIR);\n  const name = resourceName(vaultDir);\n  return stageDeploymentDir({\n    sourceDir: srcDir,\n    deployDir,\n    reset: true,\n    textPatches: [{\n      filePath: 'wrangler.toml',\n      transforms: [\n        (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${name}\"`),\n        (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n        (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${name}\"`),\n        (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${name}-vectors\"`),\n        (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n        (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n        (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n      ],\n    }],\n    installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n  });\n}\n\n/** Ensure a KV namespace exists for this project. Returns the namespace ID. */\nfunction ensureKvNamespace(name: string): string {\n  const kvName = `${name}-secrets`;\n  const lookupExisting = (): string => {\n    const listOutput = wrangler(['kv', 'namespace', 'list']);\n    const namespaces = extractJsonArray(listOutput) as Array<{ id: string; title: string }>;\n    // Wrangler sometimes rewrites hyphens to underscores in titles\n    const normalize = (s: string) => s.replace(/[-_]/g, '');\n    const target = normalize(kvName);\n    const existing = namespaces.find((ns) => normalize(ns.title) === target || normalize(ns.title).endsWith(target));\n    if (!existing) throw new Error(`KV namespace \"${kvName}\" not found in list of ${namespaces.length} namespaces`);\n    return existing.id;\n  };\n\n  try {\n    const output = wrangler(['kv', 'namespace', 'create', kvName]);\n    return parseKvNamespaceId(output);\n    // Created successfully but we couldn't parse — fall back to list lookup\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate') || errMsg.includes('same title')) {\n      return lookupExisting();\n    }\n    throw err;\n  }\n}\n\nasync function rotateMcpTokenForWorker(workerUrl: string, apiKey: string): Promise<string> {\n  const response = await fetch(`${workerUrl}/mcp/rotate`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      'Content-Type': 'application/json',\n    },\n  });\n  if (!response.ok) {\n    throw new Error(`MCP token rotation failed: ${response.status} ${await response.text()}`);\n  }\n  const body = await response.json() as { token?: string };\n  if (!body.token) {\n    throw new Error('MCP token rotation response did not include a token');\n  }\n  return body.token;\n}\n\n// ---------------------------------------------------------------------------\n// Commands\n// ---------------------------------------------------------------------------\n\nexport async function teamInit(vaultDir: string): Promise<void> {\n  console.log('Provisioning team sync infrastructure...\\n');\n\n  // 1. Check for wrangler\n  try {\n    const version = wrangler(['--version']).trim();\n    console.log(`wrangler: ${version}`);\n  } catch {\n    console.error('Error: wrangler CLI not found. Install it with: npm install -g wrangler');\n    process.exit(1);\n  }\n\n  // 2. Check auth\n  try {\n    wrangler(['whoami']);\n    console.log('Cloudflare auth: OK\\n');\n  } catch {\n    console.error('Error: Not authenticated with Cloudflare. Run: wrangler login');\n    process.exit(1);\n  }\n\n  const name = resourceName(vaultDir);\n  console.log(`Resource name: ${name}\\n`);\n\n  // 3. Create D1 database (or reuse existing)\n  console.log('Creating D1 database...');\n  let d1Id: string;\n  try {\n    const d1Output = wrangler(['d1', 'create', name]);\n    d1Id = parseD1Id(d1Output);\n    console.log(`D1 database created: ${d1Id}\\n`);\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists')) {\n      console.log('D1 database already exists, looking up ID...');\n      const listOutput = wrangler(['d1', 'list', '--json']);\n      const databases = JSON.parse(listOutput) as Array<{ name: string; uuid: string }>;\n      const existing = databases.find((db) => db.name === name);\n      if (!existing) {\n        console.error(`D1 database \"${name}\" reported as existing but not found in list`);\n        process.exit(1);\n      }\n      d1Id = existing.uuid;\n      console.log(`Reusing D1 database: ${d1Id}\\n`);\n    } else {\n      console.error(`Failed to create D1 database: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 4. Create Vectorize index (or reuse existing)\n  console.log('Creating Vectorize index...');\n  try {\n    wrangler(['vectorize', 'create', `${name}-vectors`, '--dimensions', VECTORIZE_DIMENSIONS, '--metric', VECTORIZE_METRIC]);\n    console.log('Vectorize index created\\n');\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate_name')) {\n      console.log('Vectorize index already exists, reusing\\n');\n    } else {\n      console.error(`Failed to create Vectorize index: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 5. Create KV namespace for runtime secrets (MCP tokens)\n  console.log('Creating KV namespace for secrets...');\n  let kvId: string;\n  try {\n    kvId = ensureKvNamespace(name);\n    console.log(`KV namespace ready: ${kvId}\\n`);\n  } catch (err) {\n    console.error(`Failed to create KV namespace: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 6. Generate API key\n  const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n\n  // 7. Prepare deployment directory\n  console.log('Preparing worker deployment...');\n  const deployDir = prepareDeployDir(vaultDir, d1Id, kvId);\n\n  // 7. Set API key secret via wrangler\n  console.log('Setting API key secret...');\n  try {\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', name], {\n      cwd: deployDir,\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    console.log('Secret set\\n');\n  } catch (err) {\n    console.error(`Failed to set API key secret: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 8. Deploy worker\n  console.log('Deploying worker...');\n  let workerUrl: string;\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    workerUrl = parseWorkerUrl(deployOutput);\n    console.log(`Worker deployed: ${workerUrl}\\n`);\n  } catch (err) {\n    console.error(`Failed to deploy worker: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 9. Seed team config in the Worker\n  console.log('Setting team configuration...');\n  try {\n    const { getMachineId } = await import('@myco/daemon/machine-id.js');\n    const creatorMachineId = await getMachineId(vaultDir);\n    await fetch(`${workerUrl}/config`, {\n      method: 'PUT',\n      headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        team_name: name,\n        embedding_model: '@cf/baai/bge-m3',\n        embedding_dimensions: '1024',\n        created_at: String(Math.floor(Date.now() / 1000)),\n        created_by: creatorMachineId,\n      }),\n    });\n    console.log('Team config saved\\n');\n  } catch {\n    console.log('Warning: could not seed team config (non-fatal)\\n');\n  }\n\n  let mcpToken: string | null = null;\n  try {\n    mcpToken = await rotateMcpTokenForWorker(workerUrl, apiKey);\n  } catch {\n    // Non-fatal. The daemon can also fetch the token later through /connect.\n  }\n\n  // 10. Save config and API key locally\n  updateTeamConfig(vaultDir, {\n    enabled: true,\n    worker_url: workerUrl,\n    deployed_worker_version: getTeamPackageVersion(),\n  });\n  writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n  writeLocalConfig({\n    worker_name: name,\n    worker_url: workerUrl,\n    api_key: apiKey,\n    mcp_token: mcpToken,\n    package_version: getTeamPackageVersion(),\n    vault_dir: vaultDir,\n    created_at: new Date().toISOString(),\n    last_upgraded: new Date().toISOString(),\n    config_version: TEAM_CONFIG_VERSION,\n  });\n\n  console.log('Team sync configured!\\n');\n  console.log(`  URL:     ${workerUrl}`);\n  console.log(`  API Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`);\n  if (mcpToken) {\n    console.log(`  MCP:     ${mcpToken.slice(0, 8)}...${mcpToken.slice(-4)}`);\n  }\n  console.log('\\nShare the URL and API key with teammates so they can connect.');\n}\n\n// ---------------------------------------------------------------------------\n// Shared upgrade logic (used by CLI and daemon API)\n// ---------------------------------------------------------------------------\n\nexport interface UpgradeResult {\n  success: boolean;\n  worker_url?: string;\n  version?: string;\n  error?: string;\n}\n\n/**\n * Upgrade the team sync worker: re-copy source, patch config, redeploy.\n * Returns a result instead of calling process.exit — safe for both CLI and daemon.\n */\nexport function upgradeWorker(vaultDir: string): UpgradeResult {\n  const config = loadConfig(vaultDir);\n  if (!config.team.worker_url) {\n    return { success: false, error: 'No team sync configured. Run: myco team init' };\n  }\n\n  const deployDir = path.join(vaultDir, TEAM_WORKER_DIR);\n  const tomlPath = path.join(deployDir, 'wrangler.toml');\n\n  if (!fs.existsSync(tomlPath)) {\n    return { success: false, error: 'No deployment directory found. Run: myco team init' };\n  }\n\n  // Read ALL existing resource identifiers from current wrangler.toml.\n  const existingToml = fs.readFileSync(tomlPath, 'utf-8');\n  const d1Match = existingToml.match(TOML_DB_ID_REGEX);\n  if (!d1Match || d1Match[1] === '<YOUR_D1_DATABASE_ID>') {\n    return { success: false, error: 'Cannot determine D1 database ID from existing deployment. Run: myco team init' };\n  }\n  const d1Id = d1Match[1];\n\n  const nameMatch = existingToml.match(/^name\\s*=\\s*\"([^\"]*)\"/m);\n  const dbNameMatch = existingToml.match(/database_name\\s*=\\s*\"([^\"]*)\"/);\n  const indexNameMatch = existingToml.match(/index_name\\s*=\\s*\"([^\"]*)\"/);\n  const workerName = nameMatch?.[1] ?? resourceName(vaultDir);\n\n  // KV namespace may not exist on older deployments — create or reuse.\n  const kvMatch = existingToml.match(TOML_KV_ID_REGEX);\n  let kvId: string;\n  if (kvMatch) {\n    kvId = kvMatch[1];\n  } else {\n    try {\n      kvId = ensureKvNamespace(workerName);\n    } catch (err) {\n      return { success: false, error: `Failed to provision KV namespace: ${(err as Error).message}` };\n    }\n  }\n\n  try {\n    stageDeploymentDir({\n      sourceDir: locateWorkerSource(),\n      deployDir,\n      textPatches: [{\n        filePath: 'wrangler.toml',\n        transforms: [\n          (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${workerName}\"`),\n          (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n          (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${dbNameMatch?.[1] ?? workerName}\"`),\n          (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${indexNameMatch?.[1] ?? `${workerName}-vectors`}\"`),\n          (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n          (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n          (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n        ],\n      }],\n      installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n    });\n  } catch (err) {\n    return { success: false, error: `Failed to install worker dependencies: ${(err as Error).message}` };\n  }\n\n  // Re-set API key secret before deploy (deploy can wipe secrets)\n  const secrets = readSecrets(vaultDir);\n  const apiKey = secrets[TEAM_API_KEY_SECRET];\n  if (apiKey) {\n    try {\n      runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', workerName], {\n        cwd: deployDir,\n        input: apiKey,\n        timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n      });\n    } catch {\n      // Non-fatal — secret may already be set\n    }\n  }\n\n  // Redeploy\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    const workerUrl = parseWorkerUrl(deployOutput);\n    const version = getTeamPackageVersion();\n\n    updateTeamConfig(vaultDir, {\n      worker_url: workerUrl,\n      deployed_worker_version: version,\n    });\n    const localConfig = readLocalConfig();\n    if (localConfig) {\n      writeLocalConfig({\n        ...localConfig,\n        worker_name: workerName,\n        worker_url: workerUrl,\n        package_version: version,\n        vault_dir: vaultDir,\n        last_upgraded: new Date().toISOString(),\n      });\n    }\n\n    return { success: true, worker_url: workerUrl, version };\n  } catch (err) {\n    return { success: false, error: `Failed to deploy worker: ${(err as Error).message}` };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// CLI wrapper\n// ---------------------------------------------------------------------------\n\nexport async function teamUpgrade(vaultDir: string): Promise<void> {\n  console.log('Upgrading team sync worker...\\n');\n  const result = upgradeWorker(vaultDir);\n  if (!result.success) {\n    console.error(result.error);\n    process.exit(1);\n  }\n  console.log(`Worker deployed: ${result.worker_url}`);\n  console.log(`Version: ${result.version}`);\n  console.log('\\nUpgrade complete.');\n}\n\nexport async function teamStatus(): Promise<void> {\n  const config = requireLocalConfig();\n\n  console.log(`Worker:      ${config.worker_name}`);\n  console.log(`URL:         ${config.worker_url}`);\n  console.log(`API Key:     ${maskSecret(config.api_key)}`);\n  console.log(`MCP Token:   ${maskSecret(config.mcp_token)}`);\n  console.log(`Package v:   ${config.package_version}`);\n  console.log(`Created:     ${config.created_at}`);\n  console.log(`Upgraded:    ${config.last_upgraded}`);\n  console.log(`Config v:    ${config.config_version}`);\n}\n\nexport async function teamRotateTokens(which: 'api' | 'mcp' | 'all' = 'all'): Promise<void> {\n  const config = requireLocalConfig();\n\n  let nextConfig = { ...config };\n\n  if (which === 'api' || which === 'all') {\n    const vaultDir = resolveVaultDirForConfig(config);\n    if (!vaultDir) {\n      throw new Error(\n        'Cannot resolve the project vault for API key rotation. Run this command from the project root or update ~/.myco-team/config.json with vault_dir first.',\n      );\n    }\n    const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', config.worker_name], {\n      cwd: path.join(resolvePackageRoot(), WORKER_SOURCE_DIR),\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n    nextConfig = {\n      ...nextConfig,\n      api_key: apiKey,\n      vault_dir: vaultDir,\n      package_version: getTeamPackageVersion(),\n      last_upgraded: new Date().toISOString(),\n    };\n    writeLocalConfig(nextConfig);\n  }\n\n  if (which === 'mcp' || which === 'all') {\n    try {\n      nextConfig = {\n        ...nextConfig,\n        mcp_token: await rotateMcpTokenWithRetry(config.worker_url, nextConfig.api_key),\n      };\n    } catch (error) {\n      writeLocalConfig({\n        ...nextConfig,\n        last_upgraded: new Date().toISOString(),\n      });\n      throw new Error(\n        `API key rotation completed, but MCP token rotation failed. Local config was updated to the new API key.\\n${(error as Error).message}`,\n      );\n    }\n  }\n\n  nextConfig.last_upgraded = new Date().toISOString();\n  writeLocalConfig(nextConfig);\n\n  console.log(`API Key:   ${maskSecret(nextConfig.api_key)}`);\n  console.log(`MCP Token: ${maskSecret(nextConfig.mcp_token)}`);\n}\n\nexport async function teamDestroy(): Promise<void> {\n  const config = requireLocalConfig();\n  const errors: string[] = [];\n  const workerSourceDir = path.join(resolvePackageRoot(), WORKER_SOURCE_DIR);\n\n  try {\n    wrangler(['delete', config.worker_name], { cwd: workerSourceDir });\n  } catch (error) {\n    errors.push(`worker delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    wrangler(['vectorize', 'delete', `${config.worker_name}-vectors`]);\n  } catch (error) {\n    errors.push(`vectorize delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const databases = JSON.parse(wrangler(['d1', 'list', '--json'])) as Array<{ name: string; uuid: string }>;\n    const database = databases.find((entry) => entry.name === config.worker_name);\n    if (database) {\n      wrangler(['d1', 'delete', database.name, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`d1 delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const namespaces = extractJsonArray(wrangler(['kv', 'namespace', 'list'])) as Array<{ id: string; title: string }>;\n    const namespace = namespaces.find((entry) => entry.title === `${config.worker_name}-secrets`);\n    if (namespace) {\n      wrangler(['kv', 'namespace', 'delete', '--namespace-id', namespace.id, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`kv delete failed: ${(error as Error).message}`);\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Team destroy incomplete. Local state preserved for retry.\\n${errors.join('\\n')}`);\n  }\n\n  fs.rmSync(resolveLocalConfigPath(), { force: true });\n  console.log(`Destroyed local myco-team config for ${config.worker_name}.`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,OAAO,YAAY;AACnB,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,qBAAqB;AAwB9B,IAAM,gBAAgB;AAGtB,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AAGzB,IAAM,uBAAuB;AAG7B,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAG1B,IAAM,kBAAkB;AACxB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAK5B,IAAM,kBAAkB;AAGxB,IAAM,4BAA4B;AAGlC,IAAM,qBAAqB;AAG3B,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAGxC,IAAM,iCAAiC;AAGvC,IAAM,mBAAmB;AAGzB,IAAM,4BAA4B;AAGlC,IAAM,mBAAmB;AAOzB,SAAS,YAAY,UAA0B;AAC7C,QAAM,OAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACtE,SAAO,KAAK,MAAM,GAAG,mBAAmB;AAC1C;AAGA,SAAS,aAAa,UAA0B;AAC9C,SAAO,GAAG,oBAAoB,IAAI,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,qBAA6B;AACpC,QAAM,WAAW,QAAQ,IAAI,wBAAwB,KAAK;AAC1D,MAAI,SAAU,QAAO;AACrB,SAAO,KAAK,QAAQ,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI;AACxE;AAEA,SAAS,wBAAgC;AACvC,QAAM,cAAc,mBAAmB;AACvC,QAAM,iBAAiB;AAAA,IACrB,KAAK,KAAK,aAAa,cAAc;AAAA,IACrC,KAAK,KAAK,KAAK,QAAQ,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,cAAc;AAAA,EAC5F;AAEA,aAAW,iBAAiB,gBAAgB;AAC1C,QAAI,CAAC,GAAG,WAAW,aAAa,EAAG;AACnC,UAAM,cAAc,KAAK,MAAM,GAAG,aAAa,eAAe,OAAO,CAAC;AACtE,QAAI,YAAY,QAAS,QAAO,YAAY;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,uBAA+B;AACtC,SAAO,OAAO,cAAc;AAC9B;AAcA,SAAS,yBAAiC;AACxC,SAAO,sBAAsB,iBAAiB,gBAAgB;AAChE;AAEA,SAAS,kBAA0C;AACjD,SAAO,eAAgC,uBAAuB,CAAC;AACjE;AAEA,SAAS,iBAAiB,QAA+B;AACvD,kBAAgB,uBAAuB,GAAG,MAAM;AAClD;AAsEA,SAAS,SAAS,MAAgB,SAAoC;AACpE,SAAO,YAAY,MAAM,EAAE,KAAK,SAAS,KAAK,WAAW,4BAA4B,CAAC;AACxF;AAGA,SAAS,qBAA6B;AACpC,QAAM,OAAO,mBAAmB;AAChC,QAAM,WAAW,KAAK,KAAK,MAAM,QAAQ,iBAAiB;AAC1D,MAAI,GAAG,WAAW,QAAQ,EAAG,QAAO;AACpC,QAAM,UAAU,KAAK,KAAK,MAAM,iBAAiB;AACjD,MAAI,GAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,IAAI,MAAM,eAAe,iBAAiB,qDAAgD;AAClG;AAMA,SAAS,iBAAiB,UAAkB,MAAc,MAAsB;AAC9E,QAAM,SAAS,mBAAmB;AAClC,QAAM,YAAY,KAAK,KAAK,UAAU,eAAe;AACrD,QAAM,OAAO,aAAa,QAAQ;AAClC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX;AAAA,IACA,OAAO;AAAA,IACP,aAAa,CAAC;AAAA,MACZ,UAAU;AAAA,MACV,YAAY;AAAA,QACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,IAAI,GAAG;AAAA,QAC1D,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,IAAI,GAAG;AAAA,QACtE,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,IAAI,WAAW;AAAA,QAC9E,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,QAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,IACD,sBAAsB,8BAA8B;AAAA,EACtD,CAAC;AACH;AAGA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,iBAAiB,MAAc;AACnC,UAAM,aAAa,SAAS,CAAC,MAAM,aAAa,MAAM,CAAC;AACvD,UAAM,aAAa,iBAAiB,UAAU;AAE9C,UAAM,YAAY,CAAC,MAAc,EAAE,QAAQ,SAAS,EAAE;AACtD,UAAM,SAAS,UAAU,MAAM;AAC/B,UAAM,WAAW,WAAW,KAAK,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,UAAU,UAAU,GAAG,KAAK,EAAE,SAAS,MAAM,CAAC;AAC/G,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iBAAiB,MAAM,0BAA0B,WAAW,MAAM,aAAa;AAC9G,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,SAAS,SAAS,CAAC,MAAM,aAAa,UAAU,MAAM,CAAC;AAC7D,WAAO,mBAAmB,MAAM;AAAA,EAElC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,YAAY,GAAG;AACtG,aAAO,eAAe;AAAA,IACxB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,wBAAwB,WAAmB,QAAiC;AACzF,QAAM,WAAW,MAAM,MAAM,GAAG,SAAS,eAAe;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,MAAM;AAAA,MAC/B,gBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,IAAI,MAAM,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1F;AACA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,KAAK,OAAO;AACf,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,SAAO,KAAK;AACd;AAMA,eAAsB,SAAS,UAAiC;AAC9D,UAAQ,IAAI,4CAA4C;AAGxD,MAAI;AACF,UAAM,UAAU,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK;AAC7C,YAAQ,IAAI,aAAa,OAAO,EAAE;AAAA,EACpC,QAAQ;AACN,YAAQ,MAAM,yEAAyE;AACvF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI;AACF,aAAS,CAAC,QAAQ,CAAC;AACnB,YAAQ,IAAI,uBAAuB;AAAA,EACrC,QAAQ;AACN,YAAQ,MAAM,+DAA+D;AAC7E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,aAAa,QAAQ;AAClC,UAAQ,IAAI,kBAAkB,IAAI;AAAA,CAAI;AAGtC,UAAQ,IAAI,yBAAyB;AACrC,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC;AAChD,WAAO,UAAU,QAAQ;AACzB,YAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,GAAG;AACrC,cAAQ,IAAI,8CAA8C;AAC1D,YAAM,aAAa,SAAS,CAAC,MAAM,QAAQ,QAAQ,CAAC;AACpD,YAAM,YAAY,KAAK,MAAM,UAAU;AACvC,YAAM,WAAW,UAAU,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI;AACxD,UAAI,CAAC,UAAU;AACb,gBAAQ,MAAM,gBAAgB,IAAI,8CAA8C;AAChF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,SAAS;AAChB,cAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,IAC9C,OAAO;AACL,cAAQ,MAAM,iCAAiC,MAAM,EAAE;AACvD,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,6BAA6B;AACzC,MAAI;AACF,aAAS,CAAC,aAAa,UAAU,GAAG,IAAI,YAAY,gBAAgB,sBAAsB,YAAY,gBAAgB,CAAC;AACvH,YAAQ,IAAI,2BAA2B;AAAA,EACzC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,gBAAgB,GAAG;AAC1E,cAAQ,IAAI,2CAA2C;AAAA,IACzD,OAAO;AACL,cAAQ,MAAM,qCAAqC,MAAM,EAAE;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,sCAAsC;AAClD,MAAI;AACJ,MAAI;AACF,WAAO,kBAAkB,IAAI;AAC7B,YAAQ,IAAI,uBAAuB,IAAI;AAAA,CAAI;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAmC,IAAc,OAAO,EAAE;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,SAAS,OAAO,YAAY,aAAa,EAAE,SAAS,KAAK;AAG/D,UAAQ,IAAI,gCAAgC;AAC5C,QAAM,YAAY,iBAAiB,UAAU,MAAM,IAAI;AAGvD,UAAQ,IAAI,2BAA2B;AACvC,MAAI;AACF,gBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,IAAI,GAAG;AAAA,MAClE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,WAAW;AAAA,IACb,CAAC;AACD,YAAQ,IAAI,cAAc;AAAA,EAC5B,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAkC,IAAc,OAAO,EAAE;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,qBAAqB;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,gBAAY,eAAe,YAAY;AACvC,YAAQ,IAAI,oBAAoB,SAAS;AAAA,CAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA6B,IAAc,OAAO,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,+BAA+B;AAC3C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,0BAA4B;AAClE,UAAM,mBAAmB,MAAM,aAAa,QAAQ;AACpD,UAAM,MAAM,GAAG,SAAS,WAAW;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,MACnF,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAAA,QAChD,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AACD,YAAQ,IAAI,qBAAqB;AAAA,EACnC,QAAQ;AACN,YAAQ,IAAI,mDAAmD;AAAA,EACjE;AAEA,MAAI,WAA0B;AAC9B,MAAI;AACF,eAAW,MAAM,wBAAwB,WAAW,MAAM;AAAA,EAC5D,QAAQ;AAAA,EAER;AAGA,mBAAiB,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,yBAAyB,sBAAsB;AAAA,EACjD,CAAC;AACD,cAAY,UAAU,qBAAqB,MAAM;AACjD,mBAAiB;AAAA,IACf,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,SAAS;AAAA,IACT,WAAW;AAAA,IACX,iBAAiB,sBAAsB;AAAA,IACvC,WAAW;AAAA,IACX,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC,gBAAgB;AAAA,EAClB,CAAC;AAED,UAAQ,IAAI,yBAAyB;AACrC,UAAQ,IAAI,cAAc,SAAS,EAAE;AACrC,UAAQ,IAAI,cAAc,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,EAAE;AACpE,MAAI,UAAU;AACZ,YAAQ,IAAI,cAAc,SAAS,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,EAAE;AAAA,EAC1E;AACA,UAAQ,IAAI,iEAAiE;AAC/E;AAiBO,SAAS,cAAc,UAAiC;AAC7D,QAAM,SAAS,WAAW,QAAQ;AAClC,MAAI,CAAC,OAAO,KAAK,YAAY;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,+CAA+C;AAAA,EACjF;AAEA,QAAM,YAAY,KAAK,KAAK,UAAU,eAAe;AACrD,QAAM,WAAW,KAAK,KAAK,WAAW,eAAe;AAErD,MAAI,CAAC,GAAG,WAAW,QAAQ,GAAG;AAC5B,WAAO,EAAE,SAAS,OAAO,OAAO,qDAAqD;AAAA,EACvF;AAGA,QAAM,eAAe,GAAG,aAAa,UAAU,OAAO;AACtD,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,yBAAyB;AACtD,WAAO,EAAE,SAAS,OAAO,OAAO,gFAAgF;AAAA,EAClH;AACA,QAAM,OAAO,QAAQ,CAAC;AAEtB,QAAM,YAAY,aAAa,MAAM,wBAAwB;AAC7D,QAAM,cAAc,aAAa,MAAM,+BAA+B;AACtE,QAAM,iBAAiB,aAAa,MAAM,4BAA4B;AACtE,QAAM,aAAa,YAAY,CAAC,KAAK,aAAa,QAAQ;AAG1D,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI;AACJ,MAAI,SAAS;AACX,WAAO,QAAQ,CAAC;AAAA,EAClB,OAAO;AACL,QAAI;AACF,aAAO,kBAAkB,UAAU;AAAA,IACrC,SAAS,KAAK;AACZ,aAAO,EAAE,SAAS,OAAO,OAAO,qCAAsC,IAAc,OAAO,GAAG;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACF,uBAAmB;AAAA,MACjB,WAAW,mBAAmB;AAAA,MAC9B;AAAA,MACA,aAAa,CAAC;AAAA,QACZ,UAAU;AAAA,QACV,YAAY;AAAA,UACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,UAAU,GAAG;AAAA,UAChE,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,cAAc,CAAC,KAAK,UAAU,GAAG;AAAA,UAChG,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,iBAAiB,CAAC,KAAK,GAAG,UAAU,UAAU,GAAG;AAAA,UAChH,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,UAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,QAC5G;AAAA,MACF,CAAC;AAAA,MACD,sBAAsB,8BAA8B;AAAA,IACtD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,0CAA2C,IAAc,OAAO,GAAG;AAAA,EACrG;AAGA,QAAM,UAAU,YAAY,QAAQ;AACpC,QAAM,SAAS,QAAQ,mBAAmB;AAC1C,MAAI,QAAQ;AACV,QAAI;AACF,kBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,UAAU,GAAG;AAAA,QACxE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,UAAM,YAAY,eAAe,YAAY;AAC7C,UAAM,UAAU,sBAAsB;AAEtC,qBAAiB,UAAU;AAAA,MACzB,YAAY;AAAA,MACZ,yBAAyB;AAAA,IAC3B,CAAC;AACD,UAAM,cAAc,gBAAgB;AACpC,QAAI,aAAa;AACf,uBAAiB;AAAA,QACf,GAAG;AAAA,QACH,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,iBAAiB;AAAA,QACjB,WAAW;AAAA,QACX,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,YAAY,WAAW,QAAQ;AAAA,EACzD,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA6B,IAAc,OAAO,GAAG;AAAA,EACvF;AACF;AAMA,eAAsB,YAAY,UAAiC;AACjE,UAAQ,IAAI,iCAAiC;AAC7C,QAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,CAAC,OAAO,SAAS;AACnB,YAAQ,MAAM,OAAO,KAAK;AAC1B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,OAAO,UAAU,EAAE;AACnD,UAAQ,IAAI,YAAY,OAAO,OAAO,EAAE;AACxC,UAAQ,IAAI,qBAAqB;AACnC;","names":[]}