@goondocks/myco 0.18.1 → 0.19.1

package/dist/chunk-CDM6ZLMZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../myco-team/src/cli.ts","../src/config/secrets.ts","../../myco-deploy/src/cloudflare.ts","../../myco-deploy/src/local-config.ts"],"sourcesContent":["/**\n * CLI team commands — provision and manage Cloudflare team sync infrastructure.\n *\n * `myco team init`    — Provision D1 database, Vectorize index, deploy worker.\n * `myco team upgrade` — Redeploy worker with updated source.\n */\n\nimport crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { CONFIG_FILENAME, loadConfig, updateTeamConfig } from '@myco/config/loader.js';\nimport { writeSecret, readSecrets } from '@myco/config/secrets.js';\nimport { WRANGLER_COMMAND_TIMEOUT_MS, TEAM_API_KEY_SECRET, TEAM_MCP_TOKEN_SECRET } from '@myco/constants.js';\nimport { SCHEMA_VERSION } from '@myco/db/schema.js';\nimport {\n  extractJsonArray,\n  installDeploymentDeps,\n  maskSecret,\n  parseD1Id,\n  parseKvNamespaceId,\n  parseWorkerUrl,\n  readJsonConfig,\n  resolveHomeConfigPath,\n  resolveVaultConfigPath,\n  runWrangler,\n  stageDeploymentDir,\n  writeJsonConfig,\n} from '@myco-deploy/index.js';\n\ndeclare const __MYCO_TEAM_VERSION__: string;\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Number of random bytes for API key generation. */\nconst API_KEY_BYTES = 32;\n\n/** Vectorize index dimensions (must match the embedding model). */\nconst VECTORIZE_DIMENSIONS = '1024';\n\n/** Vectorize distance metric. */\nconst VECTORIZE_METRIC = 'cosine';\n\n/** Prefix for team resource names. */\nconst TEAM_RESOURCE_PREFIX = 'myco-team';\n\n/** Length of the project hash suffix for unique resource naming. */\nconst PROJECT_HASH_LENGTH = 8;\n\n\n/** Source directory for worker files (relative to package root). */\nconst WORKER_SOURCE_DIR = 'worker';\n\n/** Team sync state directory within the vault. */\nconst TEAM_STATE_DIR = 'team';\nconst TEAM_DEPLOY_DIR = 'worker';\nconst TEAM_CONFIG_FILE = 'config.json';\nconst LEGACY_TEAM_CONFIG_DIR = '.myco-team';\nconst LEGACY_TEAM_DEPLOY_DIR = '.team-worker';\nconst TEAM_CONFIG_VERSION = 1;\nconst TEAM_MCP_ROTATION_RETRY_ATTEMPTS = 10;\nconst TEAM_MCP_ROTATION_RETRY_DELAY_MS = 1500;\n\n/** Regex to match wrangler.toml name field. */\nconst TOML_NAME_REGEX = /^name\\s*=\\s*\"[^\"]*\"/m;\n\n/** Regex to match wrangler.toml D1 placeholder. */\nconst TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;\n\n/** Regex to match wrangler.toml database_name field. */\nconst TOML_DB_NAME_REGEX = /database_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml index_name field. */\nconst TOML_INDEX_NAME_REGEX = /index_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml team package version placeholder. */\nconst TOML_TEAM_PACKAGE_VERSION_REGEX = /MYCO_TEAM_PACKAGE_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml Myco schema version placeholder. */\nconst TOML_MYCO_SCHEMA_VERSION_REGEX = /MYCO_SCHEMA_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match database_id in existing wrangler.toml. */\nconst TOML_DB_ID_REGEX = /database_id\\s*=\\s*\"([^\"]+)\"/;\n\n/** Regex to match wrangler.toml KV namespace placeholder. */\nconst TOML_KV_PLACEHOLDER_REGEX = /<YOUR_KV_NAMESPACE_ID>/g;\n\n/** Regex to extract the KV namespace ID from an existing wrangler.toml. */\nconst TOML_KV_ID_REGEX = /\\[\\[kv_namespaces\\]\\][\\s\\S]*?id\\s*=\\s*\"([0-9a-f]+)\"/;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Generate a project hash from vault dir for unique resource naming. */\nfunction projectHash(vaultDir: string): string {\n  const hash = crypto.createHash('sha256').update(vaultDir).digest('hex');\n  return hash.slice(0, PROJECT_HASH_LENGTH);\n}\n\n/** Build the unique resource name for this project's team infrastructure. */\nfunction resourceName(vaultDir: string): string {\n  return `${TEAM_RESOURCE_PREFIX}-${projectHash(vaultDir)}`;\n}\n\nfunction resolvePackageRoot(): string {\n  const override = process.env.MYCO_TEAM_PACKAGE_ROOT?.trim();\n  if (override) return override;\n  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');\n}\n\nexport function getTeamPackageVersion(): string {\n  if (typeof __MYCO_TEAM_VERSION__ !== 'undefined') {\n    return __MYCO_TEAM_VERSION__;\n  }\n\n  const packageRoot = resolvePackageRoot();\n  const candidatePaths = [\n    path.join(packageRoot, 'package.json'),\n    path.join(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'), 'package.json'),\n  ];\n\n  for (const candidatePath of candidatePaths) {\n    if (!fs.existsSync(candidatePath)) continue;\n    const packageJson = JSON.parse(fs.readFileSync(candidatePath, 'utf-8')) as { version?: string };\n    if (packageJson.version) return packageJson.version;\n  }\n\n  return '0.1.0';\n}\n\nfunction getMycoSchemaVersion(): string {\n  return String(SCHEMA_VERSION);\n}\n\nexport interface TeamLocalConfig {\n  worker_name: string;\n  worker_url: string;\n  package_version: string;\n  created_at: string;\n  last_upgraded: string;\n  config_version: number;\n}\n\ninterface LegacyTeamLocalConfig extends TeamLocalConfig {\n  api_key?: string;\n  mcp_token?: string | null;\n  vault_dir?: string;\n}\n\nfunction resolveLocalConfigPath(vaultDir: string): string {\n  return resolveVaultConfigPath(vaultDir, TEAM_STATE_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveLegacyLocalConfigPath(): string {\n  return resolveHomeConfigPath(LEGACY_TEAM_CONFIG_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, TEAM_STATE_DIR, TEAM_DEPLOY_DIR);\n}\n\nfunction resolveLegacyDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, LEGACY_TEAM_DEPLOY_DIR);\n}\n\nfunction writeLocalConfig(vaultDir: string, config: TeamLocalConfig): void {\n  writeJsonConfig(resolveLocalConfigPath(vaultDir), config);\n}\n\nfunction migrateLegacyDeployDir(vaultDir: string): void {\n  const legacyDeployDir = resolveLegacyDeployDir(vaultDir);\n  const nextDeployDir = resolveDeployDir(vaultDir);\n  if (!fs.existsSync(legacyDeployDir) || fs.existsSync(nextDeployDir)) return;\n\n  fs.mkdirSync(path.dirname(nextDeployDir), { recursive: true });\n  fs.renameSync(legacyDeployDir, nextDeployDir);\n}\n\nfunction readLocalConfig(vaultDir: string): TeamLocalConfig | null {\n  const config = readJsonConfig<TeamLocalConfig>(resolveLocalConfigPath(vaultDir));\n  if (config) {\n    migrateLegacyDeployDir(vaultDir);\n    return config;\n  }\n\n  const legacyConfig = readJsonConfig<LegacyTeamLocalConfig>(resolveLegacyLocalConfigPath());\n  if (!legacyConfig) return null;\n  if (legacyConfig.vault_dir && legacyConfig.vault_dir !== vaultDir) return null;\n\n  const migrated: TeamLocalConfig = {\n    worker_name: legacyConfig.worker_name,\n    worker_url: legacyConfig.worker_url,\n    package_version: legacyConfig.package_version,\n    created_at: legacyConfig.created_at,\n    last_upgraded: legacyConfig.last_upgraded,\n    config_version: legacyConfig.config_version ?? TEAM_CONFIG_VERSION,\n  };\n  writeLocalConfig(vaultDir, migrated);\n  if (legacyConfig.api_key) writeSecret(vaultDir, TEAM_API_KEY_SECRET, legacyConfig.api_key);\n  if (legacyConfig.mcp_token) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, legacyConfig.mcp_token);\n  migrateLegacyDeployDir(vaultDir);\n  return migrated;\n}\n\nfunction requireLocalConfig(vaultDir: string): TeamLocalConfig {\n  const config = readLocalConfig(vaultDir);\n  if (config) return config;\n\n  console.error(`No local myco-team config found at ${resolveLocalConfigPath(vaultDir)}`);\n  process.exit(1);\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function rotateMcpTokenWithRetry(workerUrl: string, apiKey: string): Promise<string> {\n  let lastError: Error | null = null;\n\n  for (let attempt = 1; attempt <= TEAM_MCP_ROTATION_RETRY_ATTEMPTS; attempt += 1) {\n    try {\n      return await rotateMcpTokenForWorker(workerUrl, apiKey);\n    } catch (error) {\n      lastError = error as Error;\n      const isRetryable =\n        lastError.message.includes('401') &&\n        lastError.message.includes('Invalid API key') &&\n        attempt < TEAM_MCP_ROTATION_RETRY_ATTEMPTS;\n      if (!isRetryable) {\n        throw lastError;\n      }\n      await delay(TEAM_MCP_ROTATION_RETRY_DELAY_MS);\n    }\n  }\n\n  throw lastError ?? new Error('MCP token rotation failed');\n}\n\n/** Run a wrangler command and return stdout. Throws on failure, surfacing stderr. */\nfunction wrangler(args: string[], options?: { cwd?: string }): string {\n  return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });\n}\n\n/** Find the worker source directory. Checks dist layout first (installed), then source layout (dev). */\nfunction locateWorkerSource(): string {\n  const root = resolvePackageRoot();\n  const distPath = path.join(root, 'dist', WORKER_SOURCE_DIR);\n  if (fs.existsSync(distPath)) return distPath;\n  const srcPath = path.join(root, WORKER_SOURCE_DIR);\n  if (fs.existsSync(srcPath)) return srcPath;\n  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} — are you running from the myco-team package?`);\n}\n\n/**\n * Copy worker source to the vault deployment directory and patch wrangler.toml\n * with actual D1 database ID and resource names.\n */\nfunction prepareDeployDir(vaultDir: string, d1Id: string, kvId: string): string {\n  const srcDir = locateWorkerSource();\n  const deployDir = resolveDeployDir(vaultDir);\n  const name = resourceName(vaultDir);\n  return stageDeploymentDir({\n    sourceDir: srcDir,\n    deployDir,\n    reset: true,\n    textPatches: [{\n      filePath: 'wrangler.toml',\n      transforms: [\n        (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${name}\"`),\n        (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n        (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${name}\"`),\n        (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${name}-vectors\"`),\n        (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n        (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n        (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n      ],\n    }],\n    installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n  });\n}\n\n/** Ensure a KV namespace exists for this project. Returns the namespace ID. */\nfunction ensureKvNamespace(name: string): string {\n  const kvName = `${name}-secrets`;\n  const lookupExisting = (): string => {\n    const listOutput = wrangler(['kv', 'namespace', 'list']);\n    const namespaces = extractJsonArray(listOutput) as Array<{ id: string; title: string }>;\n    // Wrangler sometimes rewrites hyphens to underscores in titles\n    const normalize = (s: string) => s.replace(/[-_]/g, '');\n    const target = normalize(kvName);\n    const existing = namespaces.find((ns) => normalize(ns.title) === target || normalize(ns.title).endsWith(target));\n    if (!existing) throw new Error(`KV namespace \"${kvName}\" not found in list of ${namespaces.length} namespaces`);\n    return existing.id;\n  };\n\n  try {\n    const output = wrangler(['kv', 'namespace', 'create', kvName]);\n    return parseKvNamespaceId(output);\n    // Created successfully but we couldn't parse — fall back to list lookup\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate') || errMsg.includes('same title')) {\n      return lookupExisting();\n    }\n    throw err;\n  }\n}\n\nasync function rotateMcpTokenForWorker(workerUrl: string, apiKey: string): Promise<string> {\n  const response = await fetch(`${workerUrl}/mcp/rotate`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      'Content-Type': 'application/json',\n    },\n  });\n  if (!response.ok) {\n    throw new Error(`MCP token rotation failed: ${response.status} ${await response.text()}`);\n  }\n  const body = await response.json() as { token?: string };\n  if (!body.token) {\n    throw new Error('MCP token rotation response did not include a token');\n  }\n  return body.token;\n}\n\n// ---------------------------------------------------------------------------\n// Commands\n// ---------------------------------------------------------------------------\n\nexport async function teamInit(vaultDir: string): Promise<void> {\n  console.log('Provisioning team sync infrastructure...\\n');\n\n  // 1. Check for wrangler\n  try {\n    const version = wrangler(['--version']).trim();\n    console.log(`wrangler: ${version}`);\n  } catch {\n    console.error('Error: wrangler CLI not found. Install it with: npm install -g wrangler');\n    process.exit(1);\n  }\n\n  // 2. Check auth\n  try {\n    wrangler(['whoami']);\n    console.log('Cloudflare auth: OK\\n');\n  } catch {\n    console.error('Error: Not authenticated with Cloudflare. Run: wrangler login');\n    process.exit(1);\n  }\n\n  const name = resourceName(vaultDir);\n  console.log(`Resource name: ${name}\\n`);\n\n  // 3. Create D1 database (or reuse existing)\n  console.log('Creating D1 database...');\n  let d1Id: string;\n  try {\n    const d1Output = wrangler(['d1', 'create', name]);\n    d1Id = parseD1Id(d1Output);\n    console.log(`D1 database created: ${d1Id}\\n`);\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists')) {\n      console.log('D1 database already exists, looking up ID...');\n      const listOutput = wrangler(['d1', 'list', '--json']);\n      const databases = JSON.parse(listOutput) as Array<{ name: string; uuid: string }>;\n      const existing = databases.find((db) => db.name === name);\n      if (!existing) {\n        console.error(`D1 database \"${name}\" reported as existing but not found in list`);\n        process.exit(1);\n      }\n      d1Id = existing.uuid;\n      console.log(`Reusing D1 database: ${d1Id}\\n`);\n    } else {\n      console.error(`Failed to create D1 database: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 4. Create Vectorize index (or reuse existing)\n  console.log('Creating Vectorize index...');\n  try {\n    wrangler(['vectorize', 'create', `${name}-vectors`, '--dimensions', VECTORIZE_DIMENSIONS, '--metric', VECTORIZE_METRIC]);\n    console.log('Vectorize index created\\n');\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate_name')) {\n      console.log('Vectorize index already exists, reusing\\n');\n    } else {\n      console.error(`Failed to create Vectorize index: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 5. Create KV namespace for runtime secrets (MCP tokens)\n  console.log('Creating KV namespace for secrets...');\n  let kvId: string;\n  try {\n    kvId = ensureKvNamespace(name);\n    console.log(`KV namespace ready: ${kvId}\\n`);\n  } catch (err) {\n    console.error(`Failed to create KV namespace: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 6. Generate API key\n  const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n\n  // 7. Prepare deployment directory\n  console.log('Preparing worker deployment...');\n  const deployDir = prepareDeployDir(vaultDir, d1Id, kvId);\n\n  // 7. Set API key secret via wrangler\n  console.log('Setting API key secret...');\n  try {\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', name], {\n      cwd: deployDir,\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    console.log('Secret set\\n');\n  } catch (err) {\n    console.error(`Failed to set API key secret: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 8. Deploy worker\n  console.log('Deploying worker...');\n  let workerUrl: string;\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    workerUrl = parseWorkerUrl(deployOutput);\n    console.log(`Worker deployed: ${workerUrl}\\n`);\n  } catch (err) {\n    console.error(`Failed to deploy worker: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 9. Seed team config in the Worker\n  console.log('Setting team configuration...');\n  try {\n    const { getMachineId } = await import('@myco/daemon/machine-id.js');\n    const creatorMachineId = await getMachineId(vaultDir);\n    await fetch(`${workerUrl}/config`, {\n      method: 'PUT',\n      headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        team_name: name,\n        embedding_model: '@cf/baai/bge-m3',\n        embedding_dimensions: '1024',\n        created_at: String(Math.floor(Date.now() / 1000)),\n        created_by: creatorMachineId,\n      }),\n    });\n    console.log('Team config saved\\n');\n  } catch {\n    console.log('Warning: could not seed team config (non-fatal)\\n');\n  }\n\n  let mcpToken: string | null = null;\n  try {\n    mcpToken = await rotateMcpTokenForWorker(workerUrl, apiKey);\n  } catch {\n    // Non-fatal. The daemon can also fetch the token later through /connect.\n  }\n\n  // 10. Save config and API key locally\n  updateTeamConfig(vaultDir, {\n    enabled: true,\n    worker_url: workerUrl,\n  });\n  writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n  if (mcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, mcpToken);\n  writeLocalConfig(vaultDir, {\n    worker_name: name,\n    worker_url: workerUrl,\n    package_version: getTeamPackageVersion(),\n    created_at: new Date().toISOString(),\n    last_upgraded: new Date().toISOString(),\n    config_version: TEAM_CONFIG_VERSION,\n  });\n\n  console.log('Team sync configured!\\n');\n  console.log(`  URL:     ${workerUrl}`);\n  console.log(`  API Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`);\n  if (mcpToken) {\n    console.log(`  MCP:     ${mcpToken.slice(0, 8)}...${mcpToken.slice(-4)}`);\n  }\n  console.log('\\nShare the URL and API key with teammates so they can connect.');\n}\n\n// ---------------------------------------------------------------------------\n// Shared upgrade logic (used by CLI and daemon API)\n// ---------------------------------------------------------------------------\n\nexport interface UpgradeResult {\n  success: boolean;\n  worker_url?: string;\n  version?: string;\n  error?: string;\n}\n\n/**\n * Upgrade the team sync worker: re-copy source, patch config, redeploy.\n * Returns a result instead of calling process.exit — safe for both CLI and daemon.\n */\nexport function upgradeWorker(vaultDir: string): UpgradeResult {\n  const config = loadConfig(vaultDir);\n  if (!config.team.worker_url) {\n    return { success: false, error: 'No team sync configured. Run: myco team init' };\n  }\n\n  migrateLegacyDeployDir(vaultDir);\n  const deployDir = resolveDeployDir(vaultDir);\n  const tomlPath = path.join(deployDir, 'wrangler.toml');\n\n  if (!fs.existsSync(tomlPath)) {\n    return { success: false, error: 'No deployment directory found. Run: myco team init' };\n  }\n\n  // Read ALL existing resource identifiers from current wrangler.toml.\n  const existingToml = fs.readFileSync(tomlPath, 'utf-8');\n  const d1Match = existingToml.match(TOML_DB_ID_REGEX);\n  if (!d1Match || d1Match[1] === '<YOUR_D1_DATABASE_ID>') {\n    return { success: false, error: 'Cannot determine D1 database ID from existing deployment. Run: myco team init' };\n  }\n  const d1Id = d1Match[1];\n\n  const nameMatch = existingToml.match(/^name\\s*=\\s*\"([^\"]*)\"/m);\n  const dbNameMatch = existingToml.match(/database_name\\s*=\\s*\"([^\"]*)\"/);\n  const indexNameMatch = existingToml.match(/index_name\\s*=\\s*\"([^\"]*)\"/);\n  const workerName = nameMatch?.[1] ?? resourceName(vaultDir);\n\n  // KV namespace may not exist on older deployments — create or reuse.\n  const kvMatch = existingToml.match(TOML_KV_ID_REGEX);\n  let kvId: string;\n  if (kvMatch) {\n    kvId = kvMatch[1];\n  } else {\n    try {\n      kvId = ensureKvNamespace(workerName);\n    } catch (err) {\n      return { success: false, error: `Failed to provision KV namespace: ${(err as Error).message}` };\n    }\n  }\n\n  try {\n    stageDeploymentDir({\n      sourceDir: locateWorkerSource(),\n      deployDir,\n      textPatches: [{\n        filePath: 'wrangler.toml',\n        transforms: [\n          (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${workerName}\"`),\n          (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n          (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${dbNameMatch?.[1] ?? workerName}\"`),\n          (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${indexNameMatch?.[1] ?? `${workerName}-vectors`}\"`),\n          (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n          (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n          (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n        ],\n      }],\n      installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n    });\n  } catch (err) {\n    return { success: false, error: `Failed to install worker dependencies: ${(err as Error).message}` };\n  }\n\n  // Re-set API key secret before deploy (deploy can wipe secrets)\n  const secrets = readSecrets(vaultDir);\n  const apiKey = secrets[TEAM_API_KEY_SECRET];\n  if (apiKey) {\n    try {\n      runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', workerName], {\n        cwd: deployDir,\n        input: apiKey,\n        timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n      });\n    } catch {\n      // Non-fatal — secret may already be set\n    }\n  }\n\n  // Redeploy\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    const workerUrl = parseWorkerUrl(deployOutput);\n    const version = getTeamPackageVersion();\n\n    updateTeamConfig(vaultDir, {\n      worker_url: workerUrl,\n    });\n    const localConfig = readLocalConfig(vaultDir);\n    if (localConfig) {\n      writeLocalConfig(vaultDir, {\n        ...localConfig,\n        worker_name: workerName,\n        worker_url: workerUrl,\n        package_version: version,\n        last_upgraded: new Date().toISOString(),\n      });\n    }\n\n    return { success: true, worker_url: workerUrl, version };\n  } catch (err) {\n    return { success: false, error: `Failed to deploy worker: ${(err as Error).message}` };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// CLI wrapper\n// ---------------------------------------------------------------------------\n\nexport async function teamUpgrade(vaultDir: string): Promise<void> {\n  console.log('Upgrading team sync worker...\\n');\n  const result = upgradeWorker(vaultDir);\n  if (!result.success) {\n    console.error(result.error);\n    process.exit(1);\n  }\n  console.log(`Worker deployed: ${result.worker_url}`);\n  console.log(`Version: ${result.version}`);\n  console.log('\\nUpgrade complete.');\n}\n\nexport async function teamStatus(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n\n  console.log(`Worker:      ${config.worker_name}`);\n  console.log(`URL:         ${config.worker_url}`);\n  console.log(`API Key:     ${maskSecret(secrets[TEAM_API_KEY_SECRET] ?? null)}`);\n  console.log(`MCP Token:   ${maskSecret(secrets[TEAM_MCP_TOKEN_SECRET] ?? null)}`);\n  console.log(`Package v:   ${config.package_version}`);\n  console.log(`Created:     ${config.created_at}`);\n  console.log(`Upgraded:    ${config.last_upgraded}`);\n  console.log(`Config v:    ${config.config_version}`);\n}\n\nexport async function teamRotateTokens(vaultDir: string, which: 'api' | 'mcp' | 'all' = 'all'): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n  let currentApiKey = secrets[TEAM_API_KEY_SECRET] ?? '';\n  let currentMcpToken = secrets[TEAM_MCP_TOKEN_SECRET] ?? null;\n\n  let nextConfig = { ...config };\n\n  if (which === 'api' || which === 'all') {\n    const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', config.worker_name], {\n      cwd: resolveDeployDir(vaultDir),\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n    currentApiKey = apiKey;\n    nextConfig = {\n      ...nextConfig,\n      package_version: getTeamPackageVersion(),\n      last_upgraded: new Date().toISOString(),\n    };\n    writeLocalConfig(vaultDir, nextConfig);\n  }\n\n  if (which === 'mcp' || which === 'all') {\n    try {\n      currentMcpToken = await rotateMcpTokenWithRetry(config.worker_url, currentApiKey);\n      if (currentMcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, currentMcpToken);\n    } catch (error) {\n      writeLocalConfig(vaultDir, {\n        ...nextConfig,\n        last_upgraded: new Date().toISOString(),\n      });\n      throw new Error(\n        `API key rotation completed, but MCP token rotation failed. Local config was updated to the new API key.\\n${(error as Error).message}`,\n      );\n    }\n  }\n\n  nextConfig.last_upgraded = new Date().toISOString();\n  writeLocalConfig(vaultDir, nextConfig);\n\n  console.log(`API Key:   ${maskSecret(currentApiKey)}`);\n  console.log(`MCP Token: ${maskSecret(currentMcpToken)}`);\n}\n\nexport async function teamDestroy(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const errors: string[] = [];\n  const deployDir = resolveDeployDir(vaultDir);\n\n  try {\n    wrangler(['delete', config.worker_name], { cwd: deployDir });\n  } catch (error) {\n    errors.push(`worker delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    wrangler(['vectorize', 'delete', `${config.worker_name}-vectors`]);\n  } catch (error) {\n    errors.push(`vectorize delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const databases = JSON.parse(wrangler(['d1', 'list', '--json'])) as Array<{ name: string; uuid: string }>;\n    const database = databases.find((entry) => entry.name === config.worker_name);\n    if (database) {\n      wrangler(['d1', 'delete', database.name, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`d1 delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const namespaces = extractJsonArray(wrangler(['kv', 'namespace', 'list'])) as Array<{ id: string; title: string }>;\n    const namespace = namespaces.find((entry) => entry.title === `${config.worker_name}-secrets`);\n    if (namespace) {\n      wrangler(['kv', 'namespace', 'delete', '--namespace-id', namespace.id, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`kv delete failed: ${(error as Error).message}`);\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Team destroy incomplete. Local state preserved for retry.\\n${errors.join('\\n')}`);\n  }\n\n  fs.rmSync(path.join(vaultDir, TEAM_STATE_DIR), { recursive: true, force: true });\n  console.log(`Destroyed local myco-team state for ${config.worker_name}.`);\n}\n","/**\n * Secrets file utilities for API key storage outside git.\n *\n * Secrets are stored in `secrets.env` inside the vault directory.\n * This file is gitignored (see VAULT_GITIGNORE) and never committed.\n * Format: KEY=value, one per line (same as .env).\n */\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst SECRETS_FILE = 'secrets.env';\n\n/** Read all secrets from <vault>/secrets.env as key-value pairs. */\nexport function readSecrets(vaultDir: string): Record<string, string> {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return {};\n\n  const secrets: Record<string, string> = {};\n  for (const line of fs.readFileSync(secretsPath, 'utf-8').split('\\n')) {\n    const match = line.match(/^\\s*([^#=]+?)\\s*=\\s*(.*?)\\s*$/);\n    if (match) {\n      secrets[match[1]] = match[2];\n    }\n  }\n  return secrets;\n}\n\n/** Write a secret to <vault>/secrets.env, preserving existing entries. */\nexport function writeSecret(vaultDir: string, key: string, value: string): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  const existing = readSecrets(vaultDir);\n  existing[key] = value;\n\n  const content = Object.entries(existing)\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Remove one or more secrets from <vault>/secrets.env, preserving remaining entries. */\nexport function deleteSecrets(vaultDir: string, keys: string[]): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return;\n\n  const existing = readSecrets(vaultDir);\n  for (const key of keys) delete existing[key];\n\n  const entries = Object.entries(existing);\n  if (entries.length === 0) {\n    fs.rmSync(secretsPath, { force: true });\n    return;\n  }\n\n  const content = entries\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Load secrets from <vault>/secrets.env into process.env (without overwriting existing vars). */\nexport function loadSecrets(vaultDir: string): void {\n  const secrets = readSecrets(vaultDir);\n  for (const [key, value] of Object.entries(secrets)) {\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n","import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst WORKER_URL_REGEX = /(https:\\/\\/[^\\s]+\\.workers\\.dev)/;\nconst D1_ID_JSON_REGEX = /\"database_id\"\\s*:\\s*\"([0-9a-f-]{36})\"/i;\nconst D1_ID_TEXT_REGEX = /id:\\s*([0-9a-f-]{36})/i;\nconst KV_ID_REGEX = /\"id\":\\s*\"([0-9a-f]+)\"/i;\n\nexport interface WranglerOptions {\n  cwd?: string;\n  input?: string;\n  timeoutMs: number;\n}\n\nexport interface TextPatch {\n  filePath: string;\n  transforms: Array<(text: string) => string>;\n}\n\nexport interface StageDeploymentDirOptions {\n  sourceDir: string;\n  deployDir: string;\n  reset?: boolean;\n  extraCopies?: Array<{ sourceDir: string; destinationSubdir: string }>;\n  textPatches?: TextPatch[];\n  installDepsTimeoutMs?: number | null;\n}\n\nexport function buildCommandEnv(): NodeJS.ProcessEnv {\n  const nodeBinDir = path.dirname(process.execPath);\n  const pathValue = process.env.PATH\n    ? `${nodeBinDir}${path.delimiter}${process.env.PATH}`\n    : nodeBinDir;\n  return { ...process.env, PATH: pathValue };\n}\n\nexport function runWrangler(args: string[], options: WranglerOptions): string {\n  try {\n    return execFileSync('wrangler', args, {\n      cwd: options.cwd,\n      env: buildCommandEnv(),\n      input: options.input,\n      encoding: 'utf-8',\n      timeout: options.timeoutMs,\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n  } catch (error) {\n    const execError = error as Error & { stderr?: Buffer | string; stdout?: Buffer | string };\n    const stderr = execError.stderr?.toString() ?? '';\n    const stdout = execError.stdout?.toString() ?? '';\n    const detail = [stderr, stdout].filter(Boolean).join('\\n').trim();\n    throw new Error(detail || execError.message);\n  }\n}\n\nexport function installDeploymentDeps(deployDir: string, timeoutMs: number): void {\n  const packageJsonPath = path.join(deployDir, 'package.json');\n  if (!fs.existsSync(packageJsonPath)) return;\n\n  execFileSync('npm', ['install', '--silent', '--no-audit', '--no-fund'], {\n    cwd: deployDir,\n    env: buildCommandEnv(),\n    encoding: 'utf-8',\n    timeout: timeoutMs,\n    stdio: ['pipe', 'pipe', 'pipe'],\n  });\n}\n\nexport function parseWorkerUrl(output: string): string {\n  const workerUrl = output.match(WORKER_URL_REGEX)?.[1];\n  if (!workerUrl) {\n    throw new Error(`Could not parse worker URL from deploy output:\\n${output}`);\n  }\n  return workerUrl;\n}\n\nexport function parseD1Id(output: string): string {\n  const jsonMatch = output.match(D1_ID_JSON_REGEX);\n  if (jsonMatch) return jsonMatch[1];\n\n  const textMatch = output.match(D1_ID_TEXT_REGEX);\n  if (textMatch) return textMatch[1];\n\n  throw new Error(`Could not parse D1 database ID from wrangler output:\\n${output}`);\n}\n\nexport function parseKvNamespaceId(output: string): string {\n  const kvId = output.match(KV_ID_REGEX)?.[1];\n  if (!kvId) {\n    throw new Error(`Could not parse KV namespace ID from wrangler output:\\n${output}`);\n  }\n  return kvId;\n}\n\nexport function extractJsonArray(output: string): unknown[] {\n  const start = output.indexOf('[');\n  const end = output.lastIndexOf(']');\n  if (start === -1 || end === -1 || end < start) {\n    throw new Error(`No JSON array found in output:\\n${output}`);\n  }\n  return JSON.parse(output.slice(start, end + 1)) as unknown[];\n}\n\nexport function stageDeploymentDir(options: StageDeploymentDirOptions): string {\n  if (options.reset) {\n    fs.rmSync(options.deployDir, { recursive: true, force: true });\n  }\n  fs.mkdirSync(options.deployDir, { recursive: true });\n  fs.cpSync(options.sourceDir, options.deployDir, { recursive: true });\n\n  for (const copy of options.extraCopies ?? []) {\n    fs.cpSync(copy.sourceDir, path.join(options.deployDir, copy.destinationSubdir), { recursive: true });\n  }\n\n  for (const patch of options.textPatches ?? []) {\n    const absolutePath = path.join(options.deployDir, patch.filePath);\n    let nextText = fs.readFileSync(absolutePath, 'utf-8');\n    for (const transform of patch.transforms) {\n      nextText = transform(nextText);\n    }\n    fs.writeFileSync(absolutePath, nextText, 'utf-8');\n  }\n\n  if (options.installDepsTimeoutMs) {\n    installDeploymentDeps(options.deployDir, options.installDepsTimeoutMs);\n  }\n\n  return options.deployDir;\n}\n","import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nconst MYCO_HOME_OVERRIDE_ENV = 'MYCO_HOME_OVERRIDE';\n\nexport function resolveHomeDir(): string {\n  return process.env[MYCO_HOME_OVERRIDE_ENV]?.trim() || os.homedir();\n}\n\nexport function resolveHomeConfigPath(configDir: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, fileName);\n}\n\nexport function resolveNamedHomeConfigPath(configDir: string, name: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, name, fileName);\n}\n\nexport function resolveVaultConfigPath(vaultDir: string, configDir: string, fileName: string): string {\n  return path.join(vaultDir, configDir, fileName);\n}\n\nexport function readJsonConfig<T>(configPath: string): T | null {\n  if (!fs.existsSync(configPath)) return null;\n  return JSON.parse(fs.readFileSync(configPath, 'utf-8')) as T;\n}\n\nexport function writeJsonConfig(configPath: string, value: unknown): void {\n  fs.mkdirSync(path.dirname(configPath), { recursive: true });\n  fs.writeFileSync(configPath, `${JSON.stringify(value, null, 2)}\\n`, { encoding: 'utf-8', mode: 0o600 });\n  fs.chmodSync(configPath, 0o600);\n}\n\nexport function maskSecret(secret: string | null): string | null {\n  if (!secret) return null;\n  if (secret.length <= 8) return secret;\n  return `${secret.slice(0, 4)}...${secret.slice(-4)}`;\n}\n\nexport function createHexToken(byteLength: number): string {\n  return crypto.randomBytes(byteLength).toString('hex');\n}\n"],"mappings":";;;;;;;;;;;;;;;AAOA,OAAOA,aAAY;AACnB,OAAOC,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACH9B,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,eAAe;AAGd,SAAS,YAAY,UAA0C;AACpE,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,MAAI,CAAC,GAAG,WAAW,WAAW,EAAG,QAAO,CAAC;AAEzC,QAAM,UAAkC,CAAC;AACzC,aAAW,QAAQ,GAAG,aAAa,aAAa,OAAO,EAAE,MAAM,IAAI,GAAG;AACpE,UAAM,QAAQ,KAAK,MAAM,+BAA+B;AACxD,QAAI,OAAO;AACT,cAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,YAAY,UAAkB,KAAa,OAAqB;AAC9E,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,QAAM,WAAW,YAAY,QAAQ;AACrC,WAAS,GAAG,IAAI;AAEhB,QAAM,UAAU,OAAO,QAAQ,QAAQ,EACpC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,IAAI,IAAI;AAEhB,KAAG,cAAc,aAAa,SAAS,OAAO;AAChD;AAwBO,SAAS,YAAY,UAAwB;AAClD,QAAM,UAAU,YAAY,QAAQ;AACpC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,EACF;AACF;;;ACrEA,SAAS,oBAAoB;AAC7B,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,cAAc;AAsBb,SAAS,kBAAqC;AACnD,QAAM,aAAaA,MAAK,QAAQ,QAAQ,QAAQ;AAChD,QAAM,YAAY,QAAQ,IAAI,OAC1B,GAAG,UAAU,GAAGA,MAAK,SAAS,GAAG,QAAQ,IAAI,IAAI,KACjD;AACJ,SAAO,EAAE,GAAG,QAAQ,KAAK,MAAM,UAAU;AAC3C;AAEO,SAAS,YAAY,MAAgB,SAAkC;AAC5E,MAAI;AACF,WAAO,aAAa,YAAY,MAAM;AAAA,MACpC,KAAK,QAAQ;AAAA,MACb,KAAK,gBAAgB;AAAA,MACrB,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,MACV,SAAS,QAAQ;AAAA,MACjB,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,YAAY;AAClB,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,CAAC,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK;AAChE,UAAM,IAAI,MAAM,UAAU,UAAU,OAAO;AAAA,EAC7C;AACF;AAEO,SAAS,sBAAsB,WAAmB,WAAyB;AAChF,QAAM,kBAAkBA,MAAK,KAAK,WAAW,cAAc;AAC3D,MAAI,CAACD,IAAG,WAAW,eAAe,EAAG;AAErC,eAAa,OAAO,CAAC,WAAW,YAAY,cAAc,WAAW,GAAG;AAAA,IACtE,KAAK;AAAA,IACL,KAAK,gBAAgB;AAAA,IACrB,UAAU;AAAA,IACV,SAAS;AAAA,IACT,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AACH;AAEO,SAAS,eAAe,QAAwB;AACrD,QAAM,YAAY,OAAO,MAAM,gBAAgB,IAAI,CAAC;AACpD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM;AAAA,EAAmD,MAAM,EAAE;AAAA,EAC7E;AACA,SAAO;AACT;AAEO,SAAS,UAAU,QAAwB;AAChD,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,IAAI,MAAM;AAAA,EAAyD,MAAM,EAAE;AACnF;AAEO,SAAS,mBAAmB,QAAwB;AACzD,QAAM,OAAO,OAAO,MAAM,WAAW,IAAI,CAAC;AAC1C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM;AAAA,EAA0D,MAAM,EAAE;AAAA,EACpF;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,QAA2B;AAC1D,QAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO;AAC7C,UAAM,IAAI,MAAM;AAAA,EAAmC,MAAM,EAAE;AAAA,EAC7D;AACA,SAAO,KAAK,MAAM,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAChD;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,MAAI,QAAQ,OAAO;AACjB,IAAAA,IAAG,OAAO,QAAQ,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/D;AACA,EAAAA,IAAG,UAAU,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AACnD,EAAAA,IAAG,OAAO,QAAQ,WAAW,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAEnE,aAAW,QAAQ,QAAQ,eAAe,CAAC,GAAG;AAC5C,IAAAA,IAAG,OAAO,KAAK,WAAWC,MAAK,KAAK,QAAQ,WAAW,KAAK,iBAAiB,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACrG;AAEA,aAAW,SAAS,QAAQ,eAAe,CAAC,GAAG;AAC7C,UAAM,eAAeA,MAAK,KAAK,QAAQ,WAAW,MAAM,QAAQ;AAChE,QAAI,WAAWD,IAAG,aAAa,cAAc,OAAO;AACpD,eAAW,aAAa,MAAM,YAAY;AACxC,iBAAW,UAAU,QAAQ;AAAA,IAC/B;AACA,IAAAA,IAAG,cAAc,cAAc,UAAU,OAAO;AAAA,EAClD;AAEA,MAAI,QAAQ,sBAAsB;AAChC,0BAAsB,QAAQ,WAAW,QAAQ,oBAAoB;AAAA,EACvE;AAEA,SAAO,QAAQ;AACjB;;;ACjIA,OAAO,YAAY;AACnB,OAAOE,SAAQ;AACf,OAAO,QAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,yBAAyB;AAExB,SAAS,iBAAyB;AACvC,SAAO,QAAQ,IAAI,sBAAsB,GAAG,KAAK,KAAK,GAAG,QAAQ;AACnE;AAEO,SAAS,sBAAsB,WAAmB,UAA0B;AACjF,SAAOA,MAAK,KAAK,eAAe,GAAG,WAAW,QAAQ;AACxD;AAMO,SAAS,uBAAuB,UAAkB,WAAmB,UAA0B;AACpG,SAAOC,MAAK,KAAK,UAAU,WAAW,QAAQ;AAChD;AAEO,SAAS,eAAkB,YAA8B;AAC9D,MAAI,CAACC,IAAG,WAAW,UAAU,EAAG,QAAO;AACvC,SAAO,KAAK,MAAMA,IAAG,aAAa,YAAY,OAAO,CAAC;AACxD;AAEO,SAAS,gBAAgB,YAAoB,OAAsB;AACxE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,EAAAC,IAAG,cAAc,YAAY,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,SAAS,MAAM,IAAM,CAAC;AACtG,EAAAA,IAAG,UAAU,YAAY,GAAK;AAChC;;;AHKA,IAAM,gBAAgB;AAGtB,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AAGzB,IAAM,uBAAuB;AAG7B,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAG1B,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,sBAAsB;AAK5B,IAAM,kBAAkB;AAGxB,IAAM,4BAA4B;AAGlC,IAAM,qBAAqB;AAG3B,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAGxC,IAAM,iCAAiC;AAGvC,IAAM,mBAAmB;AAGzB,IAAM,4BAA4B;AAGlC,IAAM,mBAAmB;AAOzB,SAAS,YAAY,UAA0B;AAC7C,QAAM,OAAOC,QAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACtE,SAAO,KAAK,MAAM,GAAG,mBAAmB;AAC1C;AAGA,SAAS,aAAa,UAA0B;AAC9C,SAAO,GAAG,oBAAoB,IAAI,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,qBAA6B;AACpC,QAAM,WAAW,QAAQ,IAAI,wBAAwB,KAAK;AAC1D,MAAI,SAAU,QAAO;AACrB,SAAOC,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI;AACxE;AAEO,SAAS,wBAAgC;AAC9C,MAAI,MAA8C;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,mBAAmB;AACvC,QAAM,iBAAiB;AAAA,IACrBA,MAAK,KAAK,aAAa,cAAc;AAAA,IACrCA,MAAK,KAAKA,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,cAAc;AAAA,EAC5F;AAEA,aAAW,iBAAiB,gBAAgB;AAC1C,QAAI,CAACC,IAAG,WAAW,aAAa,EAAG;AACnC,UAAM,cAAc,KAAK,MAAMA,IAAG,aAAa,eAAe,OAAO,CAAC;AACtE,QAAI,YAAY,QAAS,QAAO,YAAY;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,uBAA+B;AACtC,SAAO,OAAO,cAAc;AAC9B;AAiBA,SAAS,uBAAuB,UAA0B;AACxD,SAAO,uBAAuB,UAAU,gBAAgB,gBAAgB;AAC1E;AAEA,SAAS,+BAAuC;AAC9C,SAAO,sBAAsB,wBAAwB,gBAAgB;AACvE;AAEA,SAAS,iBAAiB,UAA0B;AAClD,SAAOD,MAAK,KAAK,UAAU,gBAAgB,eAAe;AAC5D;AAEA,SAAS,uBAAuB,UAA0B;AACxD,SAAOA,MAAK,KAAK,UAAU,sBAAsB;AACnD;AAEA,SAAS,iBAAiB,UAAkB,QAA+B;AACzE,kBAAgB,uBAAuB,QAAQ,GAAG,MAAM;AAC1D;AAEA,SAAS,uBAAuB,UAAwB;AACtD,QAAM,kBAAkB,uBAAuB,QAAQ;AACvD,QAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,MAAI,CAACC,IAAG,WAAW,eAAe,KAAKA,IAAG,WAAW,aAAa,EAAG;AAErE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;AAC7D,EAAAC,IAAG,WAAW,iBAAiB,aAAa;AAC9C;AAEA,SAAS,gBAAgB,UAA0C;AACjE,QAAM,SAAS,eAAgC,uBAAuB,QAAQ,CAAC;AAC/E,MAAI,QAAQ;AACV,2BAAuB,QAAQ;AAC/B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,eAAsC,6BAA6B,CAAC;AACzF,MAAI,CAAC,aAAc,QAAO;AAC1B,MAAI,aAAa,aAAa,aAAa,cAAc,SAAU,QAAO;AAE1E,QAAM,WAA4B;AAAA,IAChC,aAAa,aAAa;AAAA,IAC1B,YAAY,aAAa;AAAA,IACzB,iBAAiB,aAAa;AAAA,IAC9B,YAAY,aAAa;AAAA,IACzB,eAAe,aAAa;AAAA,IAC5B,gBAAgB,aAAa,kBAAkB;AAAA,EACjD;AACA,mBAAiB,UAAU,QAAQ;AACnC,MAAI,aAAa,QAAS,aAAY,UAAU,qBAAqB,aAAa,OAAO;AACzF,MAAI,aAAa,UAAW,aAAY,UAAU,uBAAuB,aAAa,SAAS;AAC/F,yBAAuB,QAAQ;AAC/B,SAAO;AACT;AAqCA,SAAS,SAAS,MAAgB,SAAoC;AACpE,SAAO,YAAY,MAAM,EAAE,KAAK,SAAS,KAAK,WAAW,4BAA4B,CAAC;AACxF;AAGA,SAAS,qBAA6B;AACpC,QAAM,OAAO,mBAAmB;AAChC,QAAM,WAAWC,MAAK,KAAK,MAAM,QAAQ,iBAAiB;AAC1D,MAAIC,IAAG,WAAW,QAAQ,EAAG,QAAO;AACpC,QAAM,UAAUD,MAAK,KAAK,MAAM,iBAAiB;AACjD,MAAIC,IAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,IAAI,MAAM,eAAe,iBAAiB,qDAAgD;AAClG;AAMA,SAAS,iBAAiB,UAAkB,MAAc,MAAsB;AAC9E,QAAM,SAAS,mBAAmB;AAClC,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,OAAO,aAAa,QAAQ;AAClC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX;AAAA,IACA,OAAO;AAAA,IACP,aAAa,CAAC;AAAA,MACZ,UAAU;AAAA,MACV,YAAY;AAAA,QACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,IAAI,GAAG;AAAA,QAC1D,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,IAAI,GAAG;AAAA,QACtE,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,IAAI,WAAW;AAAA,QAC9E,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,QAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,IACD,sBAAsB,8BAA8B;AAAA,EACtD,CAAC;AACH;AAGA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,iBAAiB,MAAc;AACnC,UAAM,aAAa,SAAS,CAAC,MAAM,aAAa,MAAM,CAAC;AACvD,UAAM,aAAa,iBAAiB,UAAU;AAE9C,UAAM,YAAY,CAAC,MAAc,EAAE,QAAQ,SAAS,EAAE;AACtD,UAAM,SAAS,UAAU,MAAM;AAC/B,UAAM,WAAW,WAAW,KAAK,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,UAAU,UAAU,GAAG,KAAK,EAAE,SAAS,MAAM,CAAC;AAC/G,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iBAAiB,MAAM,0BAA0B,WAAW,MAAM,aAAa;AAC9G,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,SAAS,SAAS,CAAC,MAAM,aAAa,UAAU,MAAM,CAAC;AAC7D,WAAO,mBAAmB,MAAM;AAAA,EAElC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,YAAY,GAAG;AACtG,aAAO,eAAe;AAAA,IACxB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,wBAAwB,WAAmB,QAAiC;AACzF,QAAM,WAAW,MAAM,MAAM,GAAG,SAAS,eAAe;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,MAAM;AAAA,MAC/B,gBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,IAAI,MAAM,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1F;AACA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,KAAK,OAAO;AACf,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,SAAO,KAAK;AACd;AAMA,eAAsB,SAAS,UAAiC;AAC9D,UAAQ,IAAI,4CAA4C;AAGxD,MAAI;AACF,UAAM,UAAU,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK;AAC7C,YAAQ,IAAI,aAAa,OAAO,EAAE;AAAA,EACpC,QAAQ;AACN,YAAQ,MAAM,yEAAyE;AACvF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI;AACF,aAAS,CAAC,QAAQ,CAAC;AACnB,YAAQ,IAAI,uBAAuB;AAAA,EACrC,QAAQ;AACN,YAAQ,MAAM,+DAA+D;AAC7E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,aAAa,QAAQ;AAClC,UAAQ,IAAI,kBAAkB,IAAI;AAAA,CAAI;AAGtC,UAAQ,IAAI,yBAAyB;AACrC,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC;AAChD,WAAO,UAAU,QAAQ;AACzB,YAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,GAAG;AACrC,cAAQ,IAAI,8CAA8C;AAC1D,YAAM,aAAa,SAAS,CAAC,MAAM,QAAQ,QAAQ,CAAC;AACpD,YAAM,YAAY,KAAK,MAAM,UAAU;AACvC,YAAM,WAAW,UAAU,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI;AACxD,UAAI,CAAC,UAAU;AACb,gBAAQ,MAAM,gBAAgB,IAAI,8CAA8C;AAChF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,SAAS;AAChB,cAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,IAC9C,OAAO;AACL,cAAQ,MAAM,iCAAiC,MAAM,EAAE;AACvD,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,6BAA6B;AACzC,MAAI;AACF,aAAS,CAAC,aAAa,UAAU,GAAG,IAAI,YAAY,gBAAgB,sBAAsB,YAAY,gBAAgB,CAAC;AACvH,YAAQ,IAAI,2BAA2B;AAAA,EACzC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,gBAAgB,GAAG;AAC1E,cAAQ,IAAI,2CAA2C;AAAA,IACzD,OAAO;AACL,cAAQ,MAAM,qCAAqC,MAAM,EAAE;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,sCAAsC;AAClD,MAAI;AACJ,MAAI;AACF,WAAO,kBAAkB,IAAI;AAC7B,YAAQ,IAAI,uBAAuB,IAAI;AAAA,CAAI;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAmC,IAAc,OAAO,EAAE;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,SAASC,QAAO,YAAY,aAAa,EAAE,SAAS,KAAK;AAG/D,UAAQ,IAAI,gCAAgC;AAC5C,QAAM,YAAY,iBAAiB,UAAU,MAAM,IAAI;AAGvD,UAAQ,IAAI,2BAA2B;AACvC,MAAI;AACF,gBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,IAAI,GAAG;AAAA,MAClE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,WAAW;AAAA,IACb,CAAC;AACD,YAAQ,IAAI,cAAc;AAAA,EAC5B,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAkC,IAAc,OAAO,EAAE;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,qBAAqB;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,gBAAY,eAAe,YAAY;AACvC,YAAQ,IAAI,oBAAoB,SAAS;AAAA,CAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA6B,IAAc,OAAO,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,+BAA+B;AAC3C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,0BAA4B;AAClE,UAAM,mBAAmB,MAAM,aAAa,QAAQ;AACpD,UAAM,MAAM,GAAG,SAAS,WAAW;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,MACnF,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAAA,QAChD,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AACD,YAAQ,IAAI,qBAAqB;AAAA,EACnC,QAAQ;AACN,YAAQ,IAAI,mDAAmD;AAAA,EACjE;AAEA,MAAI,WAA0B;AAC9B,MAAI;AACF,eAAW,MAAM,wBAAwB,WAAW,MAAM;AAAA,EAC5D,QAAQ;AAAA,EAER;AAGA,mBAAiB,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY;AAAA,EACd,CAAC;AACD,cAAY,UAAU,qBAAqB,MAAM;AACjD,MAAI,SAAU,aAAY,UAAU,uBAAuB,QAAQ;AACnE,mBAAiB,UAAU;AAAA,IACzB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,sBAAsB;AAAA,IACvC,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC,gBAAgB;AAAA,EAClB,CAAC;AAED,UAAQ,IAAI,yBAAyB;AACrC,UAAQ,IAAI,cAAc,SAAS,EAAE;AACrC,UAAQ,IAAI,cAAc,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,EAAE;AACpE,MAAI,UAAU;AACZ,YAAQ,IAAI,cAAc,SAAS,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,EAAE;AAAA,EAC1E;AACA,UAAQ,IAAI,iEAAiE;AAC/E;AAiBO,SAAS,cAAc,UAAiC;AAC7D,QAAM,SAAS,WAAW,QAAQ;AAClC,MAAI,CAAC,OAAO,KAAK,YAAY;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,+CAA+C;AAAA,EACjF;AAEA,yBAAuB,QAAQ;AAC/B,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,WAAWF,MAAK,KAAK,WAAW,eAAe;AAErD,MAAI,CAACC,IAAG,WAAW,QAAQ,GAAG;AAC5B,WAAO,EAAE,SAAS,OAAO,OAAO,qDAAqD;AAAA,EACvF;AAGA,QAAM,eAAeA,IAAG,aAAa,UAAU,OAAO;AACtD,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,yBAAyB;AACtD,WAAO,EAAE,SAAS,OAAO,OAAO,gFAAgF;AAAA,EAClH;AACA,QAAM,OAAO,QAAQ,CAAC;AAEtB,QAAM,YAAY,aAAa,MAAM,wBAAwB;AAC7D,QAAM,cAAc,aAAa,MAAM,+BAA+B;AACtE,QAAM,iBAAiB,aAAa,MAAM,4BAA4B;AACtE,QAAM,aAAa,YAAY,CAAC,KAAK,aAAa,QAAQ;AAG1D,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI;AACJ,MAAI,SAAS;AACX,WAAO,QAAQ,CAAC;AAAA,EAClB,OAAO;AACL,QAAI;AACF,aAAO,kBAAkB,UAAU;AAAA,IACrC,SAAS,KAAK;AACZ,aAAO,EAAE,SAAS,OAAO,OAAO,qCAAsC,IAAc,OAAO,GAAG;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACF,uBAAmB;AAAA,MACjB,WAAW,mBAAmB;AAAA,MAC9B;AAAA,MACA,aAAa,CAAC;AAAA,QACZ,UAAU;AAAA,QACV,YAAY;AAAA,UACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,UAAU,GAAG;AAAA,UAChE,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,cAAc,CAAC,KAAK,UAAU,GAAG;AAAA,UAChG,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,iBAAiB,CAAC,KAAK,GAAG,UAAU,UAAU,GAAG;AAAA,UAChH,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,UAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,QAC5G;AAAA,MACF,CAAC;AAAA,MACD,sBAAsB,8BAA8B;AAAA,IACtD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,0CAA2C,IAAc,OAAO,GAAG;AAAA,EACrG;AAGA,QAAM,UAAU,YAAY,QAAQ;AACpC,QAAM,SAAS,QAAQ,mBAAmB;AAC1C,MAAI,QAAQ;AACV,QAAI;AACF,kBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,UAAU,GAAG;AAAA,QACxE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,UAAM,YAAY,eAAe,YAAY;AAC7C,UAAM,UAAU,sBAAsB;AAEtC,qBAAiB,UAAU;AAAA,MACzB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,cAAc,gBAAgB,QAAQ;AAC5C,QAAI,aAAa;AACf,uBAAiB,UAAU;AAAA,QACzB,GAAG;AAAA,QACH,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,iBAAiB;AAAA,QACjB,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,YAAY,WAAW,QAAQ;AAAA,EACzD,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA6B,IAAc,OAAO,GAAG;AAAA,EACvF;AACF;AAMA,eAAsB,YAAY,UAAiC;AACjE,UAAQ,IAAI,iCAAiC;AAC7C,QAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,CAAC,OAAO,SAAS;AACnB,YAAQ,MAAM,OAAO,KAAK;AAC1B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,OAAO,UAAU,EAAE;AACnD,UAAQ,IAAI,YAAY,OAAO,OAAO,EAAE;AACxC,UAAQ,IAAI,qBAAqB;AACnC;","names":["crypto","fs","path","fs","path","fs","path","path","fs","crypto","path","fs","path","fs","crypto"]}

package/dist/{chunk-TOER6RNC.js → chunk-GVBVHYOT.js}

@@ -5,7 +5,7 @@ import {
 import {
   SEARCH_PREVIEW_CHARS,
   SEARCH_RESULTS_DEFAULT_LIMIT
-} from "./chunk-CKJAWZQE.js";
+} from "./chunk-I54KLC6H.js";
 
 // src/db/queries/search.ts
 function fullTextSearch(query, options = {}) {
@@ -223,4 +223,4 @@ export {
   fullTextSearch,
   hydrateSearchResults
 };
-//# sourceMappingURL=chunk-TOER6RNC.js.map
+//# sourceMappingURL=chunk-GVBVHYOT.js.map

package/dist/{chunk-RIDSOQDR.js → chunk-HQLPB346.js}

@@ -2,7 +2,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   getTeamMachineId,
   syncRow
-} from "./chunk-O3TRN3RC.js";
+} from "./chunk-AULBWINA.js";
 import {
   getDatabase
 } from "./chunk-MYX5NCRH.js";
@@ -316,4 +316,4 @@ export {
   getSessionImpact,
   deleteSessionCascade
 };
-//# sourceMappingURL=chunk-RIDSOQDR.js.map
+//# sourceMappingURL=chunk-HQLPB346.js.map

package/dist/{chunk-CKJAWZQE.js → chunk-I54KLC6H.js}

@@ -3,7 +3,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 // src/constants/update.ts
 import path from "path";
 import os from "os";
-var NPM_REGISTRY_URL = "https://registry.npmjs.org/@goondocks/myco";
+var NPM_REGISTRY_BASE_URL = "https://registry.npmjs.org";
 var MYCO_GLOBAL_DIR = path.join(os.homedir(), ".myco");
 var UPDATE_CHECK_CACHE_PATH = path.join(MYCO_GLOBAL_DIR, "last-update-check.json");
 var UPDATE_CONFIG_PATH = path.join(MYCO_GLOBAL_DIR, "update.yaml");
@@ -13,6 +13,13 @@ var RESTART_REASON_FILENAME = "restart-reason.json";
 var UPDATE_CHECK_INTERVAL_HOURS = 6;
 var MS_PER_HOUR = 36e5;
 var NPM_PACKAGE_NAME = "@goondocks/myco";
+var TEAM_PACKAGE_NAME = "@goondocks/myco-team";
+var COLLECTIVE_PACKAGE_NAME = "@goondocks/myco-collective";
+var UPDATE_PACKAGES = [
+  { id: "myco", packageName: NPM_PACKAGE_NAME, displayName: "Myco" },
+  { id: "myco-team", packageName: TEAM_PACKAGE_NAME, displayName: "Myco Team" },
+  { id: "myco-collective", packageName: COLLECTIVE_PACKAGE_NAME, displayName: "Myco Collective" }
+];
 var UPDATE_SCRIPT_DELAY_SECONDS = 2;
 var RELEASE_CHANNELS = ["stable", "beta"];
 var DEFAULT_RELEASE_CHANNEL = "stable";
@@ -91,11 +98,12 @@ var TEAM_SOURCE_PREFIX = "team:";
 var TEAM_SEARCH_TIMEOUT_MS = 3e3;
 var TEAM_HEALTH_TIMEOUT_MS = 5e3;
 var TEAM_API_KEY_SECRET = "MYCO_TEAM_API_KEY";
+var TEAM_MCP_TOKEN_SECRET = "MYCO_TEAM_MCP_TOKEN";
 var WRANGLER_COMMAND_TIMEOUT_MS = 6e4;
 var RESTART_RESPONSE_FLUSH_MS = 500;
 
 export {
-  NPM_REGISTRY_URL,
+  NPM_REGISTRY_BASE_URL,
   MYCO_GLOBAL_DIR,
   UPDATE_CHECK_CACHE_PATH,
   UPDATE_CONFIG_PATH,
@@ -105,6 +113,7 @@ export {
   UPDATE_CHECK_INTERVAL_HOURS,
   MS_PER_HOUR,
   NPM_PACKAGE_NAME,
+  UPDATE_PACKAGES,
   UPDATE_SCRIPT_DELAY_SECONDS,
   RELEASE_CHANNELS,
   DEFAULT_RELEASE_CHANNEL,
@@ -176,7 +185,8 @@ export {
   TEAM_SEARCH_TIMEOUT_MS,
   TEAM_HEALTH_TIMEOUT_MS,
   TEAM_API_KEY_SECRET,
+  TEAM_MCP_TOKEN_SECRET,
   WRANGLER_COMMAND_TIMEOUT_MS,
   RESTART_RESPONSE_FLUSH_MS
 };
-//# sourceMappingURL=chunk-CKJAWZQE.js.map
+//# sourceMappingURL=chunk-I54KLC6H.js.map

package/dist/chunk-I54KLC6H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/constants/update.ts","../src/constants.ts"],"sourcesContent":["import path from 'node:path';\nimport os from 'node:os';\n\n/** npm registry base URL for Myco packages. */\nexport const NPM_REGISTRY_BASE_URL = 'https://registry.npmjs.org';\n\n/** Global Myco directory for machine-wide state. */\nexport const MYCO_GLOBAL_DIR = path.join(os.homedir(), '.myco');\n\n/** Path to the cached update check result. */\nexport const UPDATE_CHECK_CACHE_PATH = path.join(MYCO_GLOBAL_DIR, 'last-update-check.json');\n\n/** Path to the update configuration file (channel, interval). */\nexport const UPDATE_CONFIG_PATH = path.join(MYCO_GLOBAL_DIR, 'update.yaml');\n\n/** Path to the update error file (written by update script on failure). */\nexport const UPDATE_ERROR_PATH = path.join(MYCO_GLOBAL_DIR, 'update-error.json');\n\n/** Filename for the version stamp written by `myco update` (lives inside vault .myco/). */\nexport const UPDATE_STAMP_FILENAME = 'last-update-version';\n\n/** Filename for the restart reason signal file (lives inside vault .myco/). */\nexport const RESTART_REASON_FILENAME = 'restart-reason.json';\n\n/** Default check interval in hours. */\nexport const UPDATE_CHECK_INTERVAL_HOURS = 6;\n\n/** Milliseconds per hour. */\nexport const MS_PER_HOUR = 3_600_000;\n\n/** Primary Myco npm package name. */\nexport const NPM_PACKAGE_NAME = '@goondocks/myco';\n\n/** Optional standalone Myco Team package name. */\nexport const TEAM_PACKAGE_NAME = '@goondocks/myco-team';\n\n/** Optional standalone Myco Collective package name. */\nexport const COLLECTIVE_PACKAGE_NAME = '@goondocks/myco-collective';\n\n/** Global-package update targets shown in the Operations UI. */\nexport const UPDATE_PACKAGES = [\n  { id: 'myco', packageName: NPM_PACKAGE_NAME, displayName: 'Myco' },\n  { id: 'myco-team', packageName: TEAM_PACKAGE_NAME, displayName: 'Myco Team' },\n  { id: 'myco-collective', packageName: COLLECTIVE_PACKAGE_NAME, displayName: 'Myco Collective' },\n] as const;\nexport type UpdatePackageId = (typeof UPDATE_PACKAGES)[number]['id'];\n\n/** Delay in seconds before update script starts (allows daemon to exit). */\nexport const UPDATE_SCRIPT_DELAY_SECONDS = 2;\n\n/** Valid release channels. */\nexport const RELEASE_CHANNELS = ['stable', 'beta'] as const;\nexport type ReleaseChannel = (typeof RELEASE_CHANNELS)[number];\n\n/** Default release channel. */\nexport const DEFAULT_RELEASE_CHANNEL: ReleaseChannel = 'stable';\n","/**\n * Shared constants for the Myco codebase.\n * Per CLAUDE.md: \"No Magic Literals — Numeric and string constants\n * MUST NOT appear inline in logic.\"\n */\n\nexport { LOG_KINDS, type LogKind, kindToComponent } from './constants/log-kinds.js';\n\n// --- Agent phase prompt composition ---\n/**\n * Maximum chars per phase summary passed to subsequent phases.\n * Set to 4000 to ensure the digest-assess phase findings pass\n * untruncated to parallel tier phases.\n */\nexport const PHASE_SUMMARY_MAX_CHARS = 4000;\n\n// --- Token estimation ---\n/** Approximate characters per token for the chars/4 heuristic. */\nexport const CHARS_PER_TOKEN = 4;\n\n/** Estimate token count from character length using the CHARS_PER_TOKEN heuristic. */\nexport function estimateTokens(text: string): number {\n  return Math.ceil(text.length / CHARS_PER_TOKEN);\n}\n\n// --- Time (primitives — must precede derived constants) ---\n/** Milliseconds per second. */\nexport const MS_PER_SECOND = 1000;\n\n// --- Embedding ---\n/** Max characters of text sent to the embedding model. */\nexport const EMBEDDING_INPUT_LIMIT = 8000;\n\n/** Max rows per embedding worker cycle. */\nexport const EMBEDDING_BATCH_SIZE = 10;\n\n/** Content hash algorithm for staleness detection. */\nexport const CONTENT_HASH_ALGORITHM = 'sha256';\n\n// --- Truncation limits (display/preview) ---\n/** Max chars for a user prompt preview in event summaries. */\nexport const PROMPT_PREVIEW_CHARS = 300;\n/** Max chars for an AI response preview in event summaries. */\nexport const AI_RESPONSE_PREVIEW_CHARS = 500;\n/** Max chars for a command string preview. */\nexport const COMMAND_PREVIEW_CHARS = 80;\n/** Max chars for a content snippet in search results. */\nexport const CONTENT_SNIPPET_CHARS = 120;\n/** Max chars for a tool output preview in hooks. */\nexport const TOOL_OUTPUT_PREVIEW_CHARS = 200;\n/** Max chars for a session summary preview in MCP tools. */\nexport const SESSION_SUMMARY_PREVIEW_CHARS = 300;\n/** Max chars for a recall summary preview. */\nexport const RECALL_SUMMARY_PREVIEW_CHARS = 200;\n/** Max chars for search result and hydrated context previews. */\nexport const SEARCH_PREVIEW_CHARS = 300;\n\n// --- Log preview limits (short previews for structured log fields) ---\n/** Max chars for a user prompt preview in log entries. */\nexport const LOG_PROMPT_PREVIEW_CHARS = 50;\n/** Max chars for an assistant message preview in log entries. */\nexport const LOG_MESSAGE_PREVIEW_CHARS = 80;\n\n// --- Context injection layer budgets (chars, not tokens — used with .slice()) ---\nexport const CONTEXT_SESSION_PREVIEW_CHARS = 80;\nexport const CONTEXT_SPORE_PREVIEW_CHARS = 80;\n\n// --- Processor maxTokens budgets ---\n/** Response token budget for observation extraction. */\nexport const EXTRACTION_MAX_TOKENS = 2048;\n/** Response token budget for session summary. */\nexport const SUMMARY_MAX_TOKENS = 512;\n/** Response token budget for session title generation. */\nexport const TITLE_MAX_TOKENS = 32;\n\n// --- Timeouts ---\n/** Daemon client HTTP request timeout (ms). */\nexport const DAEMON_CLIENT_TIMEOUT_MS = 2000;\n/** Health check timeout (ms) — fail fast if daemon isn't responding. */\nexport const DAEMON_HEALTH_CHECK_TIMEOUT_MS = 500;\n/** LLM request timeout (ms). All LLM calls are background daemon work — no need to be aggressive. */\nexport const LLM_REQUEST_TIMEOUT_MS = 180_000;\n/** Embedding request timeout (ms). Embeddings run in background batch processing — generous timeout. */\nexport const EMBEDDING_REQUEST_TIMEOUT_MS = 60_000;\n/** Digest LLM request timeout (ms). Digest cycles use large context windows and may need model loading time. */\nexport const DIGEST_LLM_REQUEST_TIMEOUT_MS = 600_000;\n/** Stdin read timeout for hooks (ms). */\nexport const STDIN_TIMEOUT_MS = 100;\n/** Provider detection timeout for detect-providers CLI command (ms). */\nexport const PROVIDER_DETECT_TIMEOUT_MS = 3000;\n\n// --- Time ---\n/** Milliseconds in one day. */\nexport const MS_PER_DAY = 24 * 60 * 60 * 1000;\n\n/** Current Unix epoch in seconds. */\nexport function epochSeconds(): number {\n  return Math.floor(Date.now() / MS_PER_SECOND);\n}\n\n// --- Buffer cleanup ---\n/** Max age for stale buffer files before cleanup (ms). */\nexport const STALE_BUFFER_MAX_AGE_MS = 1 * MS_PER_DAY;\n\n// --- Retry backoff ---\n/** Retry delays for daemon health check (ms). */\nexport const DAEMON_HEALTH_RETRY_DELAYS = [100, 200, 400, 800, 1500];\n\n/** Grace period after daemon.json is written before stale checks can trigger a restart (ms).\n *  Prevents rapid restart loops from concurrent hooks or session reloads. */\nexport const DAEMON_STALE_GRACE_PERIOD_MS = 60_000;\n\n/** Grace period for SIGTERM before escalating to SIGKILL (ms).\n *  Gives the old daemon a chance to shut down cleanly, but force-kills\n *  to guarantee the configured port is reclaimed. */\nexport const DAEMON_EVICT_TIMEOUT_MS = 3000;\n/** Poll interval when waiting for an evicted daemon to die (ms). */\nexport const DAEMON_EVICT_POLL_MS = 100;\n\n// --- Slug limits ---\n/** Max length for slugified artifact IDs. */\n\n// --- Turn rendering ---\n/** Max file paths displayed per turn in session notes. */\nexport const TURN_MAX_FILES_DISPLAYED = 10;\n\n// --- Transcript mining ---\n/** Minimum content length to consider a transcript entry meaningful. */\nexport const MIN_TRANSCRIPT_CONTENT_LENGTH = 10;\n\n// --- Graph edge types (lineage — auto-created by daemon) ---\n/** Spore was extracted during this session. */\nexport const EDGE_TYPE_FROM_SESSION = 'FROM_SESSION';\n/** Spore was extracted from this prompt batch. */\nexport const EDGE_TYPE_EXTRACTED_FROM = 'EXTRACTED_FROM';\n/** Wisdom spore was derived from (consolidated) this source spore. */\nexport const EDGE_TYPE_DERIVED_FROM = 'DERIVED_FROM';\n/** Session contains this prompt batch. */\nexport const EDGE_TYPE_HAS_BATCH = 'HAS_BATCH';\n// --- Query defaults ---\n/** Default row limit for query module list operations. */\nexport const QUERY_DEFAULT_LIST_LIMIT = 100;\n/** Default LIMIT for paginated list queries. */\nexport const DEFAULT_LIST_LIMIT = 50;\n/** Default confidence score for graph edges. */\nexport const GRAPH_EDGE_DEFAULT_CONFIDENCE = 1.0;\n\n// --- Query limits ---\n/** Max recent sessions to check for lineage heuristics. */\nexport const LINEAGE_RECENT_SESSIONS_LIMIT = 5;\n/** Max related spores to query for session notes. */\nexport const RELATED_SPORES_LIMIT = 50;\n\n// --- Context injection ---\n/** Max spores to inject per prompt. */\nexport const PROMPT_CONTEXT_MAX_SPORES = 3;\n/** Minimum similarity score for prompt context injection (0-1). */\nexport const PROMPT_CONTEXT_MIN_SIMILARITY = 0.3;\n/** Max token budget for session-start context injection. */\nexport const SESSION_CONTEXT_MAX_TOKENS = 500;\n/** Max token budget for per-prompt context injection. */\nexport const PROMPT_CONTEXT_MAX_TOKENS = 300;\n/** Minimum prompt length to trigger context search. */\nexport const PROMPT_CONTEXT_MIN_LENGTH = 10;\n\n/** Over-fetch multiplier for vector search to compensate for post-filtering. */\nexport const PROMPT_VECTOR_OVER_FETCH = 2;\n\n// --- Spore status filtering ---\n/** Spore statuses excluded from search results and context injection. */\nexport const EXCLUDED_SPORE_STATUSES = new Set(['superseded', 'archived']);\n\n// --- Agent identity ---\n/** Default agent ID for the built-in intelligence agent. */\nexport const DEFAULT_AGENT_ID = 'myco-agent';\n/** Agent ID for user-initiated MCP operations. */\nexport const USER_AGENT_ID = 'user';\n/** Agent name for user-initiated MCP operations. */\nexport const USER_AGENT_NAME = 'User (MCP)';\n\n// --- MCP tool defaults ---\n/** Default result limit for myco_search. */\nexport const MCP_SEARCH_DEFAULT_LIMIT = 10;\n/** Default result limit for myco_sessions. */\nexport const MCP_SESSIONS_DEFAULT_LIMIT = 20;\n/** Default result limit for myco_logs. */\nexport const MCP_LOGS_DEFAULT_LIMIT = 50;\n/** Default result limit for myco_skills and myco_skill_candidates. */\nexport const MCP_SKILLS_DEFAULT_LIMIT = 50;\n\n// --- Feed ---\n/** Default number of entries returned by the activity feed. */\nexport const FEED_DEFAULT_LIMIT = 50;\n\n// --- Digest — Tiers ---\n/** Available token-budget tiers for digest synthesis. */\nexport const DIGEST_TIERS = [1500, 5000, 10000] as const;\nexport type DigestTier = (typeof DIGEST_TIERS)[number];\n\n// --- Digest — Context window minimums per tier ---\n/** Minimum context window (tokens) required to run a digest at a given tier. */\nexport const DIGEST_TIER_MIN_CONTEXT: Record<number, number> = {\n  1500: 6500,\n  5000: 18500,\n  10000: 30500,\n};\n\n// --- Digest — Substrate ---\n/** Default minimum substrate notes required before a digest cycle runs. */\nexport const DIGEST_MIN_NOTES_FOR_CYCLE = 10;\n\n/** Scoring weights by note type when selecting substrate for synthesis. */\nexport const DIGEST_SUBSTRATE_TYPE_WEIGHTS: Record<string, number> = {\n  session: 3,\n  spore: 3,\n  plan: 2,\n  artifact: 1,\n  team: 1,\n};\n\n// --- LLM reasoning control ---\n/** Reasoning mode for all Myco LLM calls. Suppresses chain-of-thought tokens from reasoning models. */\nexport const LLM_REASONING_MODE = 'off' as const;\n\n// --- Digest — System prompt overhead estimate ---\n\n// --- Vault intelligence ---\n/** Max candidate spores after post-filtering for supersession check. */\nexport const SUPERSESSION_CANDIDATE_LIMIT = 5;\n\n/** Over-fetch from vector index before post-filtering by status/type. */\nexport const SUPERSESSION_VECTOR_FETCH_LIMIT = 20;\n\n/** Max output tokens for supersession LLM evaluation. */\nexport const SUPERSESSION_MAX_TOKENS = 256;\n\n/** Similarity threshold for clustering related spores in batch agent processing. */\nexport const AGENT_CLUSTER_SIMILARITY = 0.75;\n\n// --- Search ---\n/** Default number of results returned by vector search and fullTextSearch. */\nexport const SEARCH_RESULTS_DEFAULT_LIMIT = 20;\n/** Minimum cosine similarity score for semantic search results (0-1). */\nexport const SEARCH_SIMILARITY_THRESHOLD = 0.3;\n\n// --- Pipeline processing ---\n/** Default page size for pipeline items API listing. */\nexport const PIPELINE_ITEMS_DEFAULT_LIMIT = 50;\n\n// --- Pipeline retry ---\n/** Max retries for parse (structural) pipeline failures — fail fast. */\nexport const PIPELINE_PARSE_MAX_RETRIES = 1;\n/** Exponential backoff multiplier for successive pipeline retries. */\nexport const PIPELINE_BACKOFF_MULTIPLIER = 4;\n\n// --- Pipeline stages (ordered) ---\nexport const PIPELINE_STAGES = ['capture', 'extraction', 'embedding', 'consolidation', 'digest'] as const;\nexport type PipelineStage = typeof PIPELINE_STAGES[number];\n\n// --- Pipeline statuses ---\nexport const PIPELINE_STATUSES = ['pending', 'processing', 'succeeded', 'failed', 'blocked', 'skipped', 'poisoned'] as const;\nexport type PipelineStatus = typeof PIPELINE_STATUSES[number];\n\n// --- Provider roles for circuit breakers ---\nexport const PIPELINE_PROVIDER_ROLES = ['llm', 'embedding', 'digest-llm'] as const;\nexport type PipelineProviderRole = typeof PIPELINE_PROVIDER_ROLES[number];\n\n// --- Stage to provider role mapping ---\nexport const STAGE_PROVIDER_MAP: Record<PipelineStage, PipelineProviderRole | null> = {\n  capture: null,\n  extraction: 'llm',\n  embedding: 'embedding',\n  consolidation: 'digest-llm',\n  digest: 'digest-llm',\n};\n\n/**\n * Stages processed by the pipeline tick timer.\n * Capture is handled at registration time, digest is gated by the metabolism timer.\n */\nexport const PIPELINE_TICK_STAGES: PipelineStage[] = ['extraction', 'embedding', 'consolidation'];\n\n// --- Item type to applicable stages ---\n// Sessions skip consolidation — consolidation applies to the spores\n// extracted FROM sessions, not the session work item itself.\n// Lineage detection stays outside the pipeline (fire-and-forget, non-critical).\nexport const ITEM_STAGE_MAP: Record<string, PipelineStage[]> = {\n  session: ['capture', 'extraction', 'embedding', 'digest'],\n  spore: ['capture', 'embedding', 'consolidation', 'digest'],\n  artifact: ['capture', 'embedding', 'digest'],\n};\n\n// --- User task registry ---\n/** Subdirectory within the vault for user-created task YAML files. */\nexport const USER_TASKS_DIR = 'tasks';\n\n/** Source label for user-created tasks. */\nexport const USER_TASK_SOURCE = 'user';\n\n/** Source label for built-in tasks shipped with the package. */\nexport const BUILT_IN_SOURCE = 'built-in';\n\n/** Task name validation pattern (lowercase, hyphens, digits). */\nexport const TASK_NAME_PATTERN = /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/;\n\n/** Maximum length for task names. */\nexport const MAX_TASK_NAME_LENGTH = 50;\n\n// --- Automatic consolidation ---\n/** Minimum cluster size required before asking LLM to consolidate. */\nexport const CONSOLIDATION_MIN_CLUSTER_SIZE = 3;\n\n/** Over-fetch from vector index before post-filtering by status/type. */\nexport const CONSOLIDATION_VECTOR_FETCH_LIMIT = 20;\n\n/** Max output tokens for consolidation LLM synthesis.\n *  Must be large enough for the full JSON response including content field. */\nexport const CONSOLIDATION_MAX_TOKENS = 2048;\n\n// --- Power management ---\n/** PowerManager states valid for task scheduling (excludes deep_sleep which halts all ticks). */\nexport const SCHEDULABLE_POWER_STATES = ['active', 'idle', 'sleep'] as const;\nexport type SchedulablePowerState = typeof SCHEDULABLE_POWER_STATES[number];\n\n/** Time without activity before transitioning to idle (ms). */\nexport const POWER_IDLE_THRESHOLD_MS = 5 * 60 * MS_PER_SECOND;\n/** Time without activity before transitioning to sleep (ms). */\nexport const POWER_SLEEP_THRESHOLD_MS = 30 * 60 * MS_PER_SECOND;\n/** Time without activity before transitioning to deep sleep (ms). */\nexport const POWER_DEEP_SLEEP_THRESHOLD_MS = 90 * 60 * MS_PER_SECOND;\n/** Job cycle interval during active/idle states (ms). */\nexport const POWER_ACTIVE_INTERVAL_MS = 60 * MS_PER_SECOND;\n/** Job cycle interval during sleep state (ms). */\nexport const POWER_SLEEP_INTERVAL_MS = 5 * 60 * MS_PER_SECOND;\n\n// --- Session maintenance ---\n/** Time without new prompts before an active session is auto-completed (ms). */\nexport const STALE_SESSION_THRESHOLD_MS = 60 * 60 * MS_PER_SECOND;\n/**\n * Max prompt count for a session to be considered dead and auto-deleted.\n *\n * Set to 0: only sessions that were registered but never received a prompt\n * are eligible for dead-session cleanup. A session with even ONE real user\n * prompt has produced captured state worth preserving — the user did work,\n * the agent likely responded, tool calls may have happened, code may have\n * changed. Deleting such a session was a real data-loss failure mode seen\n * during opencode testing where a 1-prompt session that made an actual\n * committed code change was auto-deleted within a minute of TUI exit.\n */\nexport const DEAD_SESSION_MAX_PROMPTS = 0;\n\n// --- Init wizard ---\n/** Minimum Node.js major version required by Myco. */\nexport const MIN_NODE_MAJOR_VERSION = 22;\n\n/** Recommended context window for local intelligence models. */\nexport const RECOMMENDED_LOCAL_CONTEXT_WINDOW = 8192;\n\n/** Default Ollama embedding model recommended during init. */\nexport const DEFAULT_OLLAMA_EMBEDDING_MODEL = 'bge-m3';\n\n/** Default OpenAI embedding model recommended during init. */\nexport const DEFAULT_OPENAI_EMBEDDING_MODEL = 'text-embedding-3-small';\n\n// --- Sync protocol ---\n/** Protocol version for backup and team sync wire format. */\nexport const SYNC_PROTOCOL_VERSION = 1;\n\n// --- Team sync ---\n/** Default machine ID for rows created before multi-machine support. */\nexport const DEFAULT_MACHINE_ID = 'local';\n/** Prefix for team search result source attribution. */\nexport const TEAM_SOURCE_PREFIX = 'team:';\n/** Timeout for team search requests (ms). */\nexport const TEAM_SEARCH_TIMEOUT_MS = 3000;\n/** Timeout for team health check requests (ms). */\nexport const TEAM_HEALTH_TIMEOUT_MS = 5000;\n/** Secrets key for the team API key in secrets.env. */\nexport const TEAM_API_KEY_SECRET = 'MYCO_TEAM_API_KEY';\n/** Secrets key for the team MCP token in secrets.env. */\nexport const TEAM_MCP_TOKEN_SECRET = 'MYCO_TEAM_MCP_TOKEN';\n/** Secrets key for the Collective admin token in secrets.env. */\nexport const COLLECTIVE_ADMIN_TOKEN_SECRET = 'MYCO_COLLECTIVE_ADMIN_TOKEN';\n/** Secrets key for the Collective MCP token in secrets.env. */\nexport const COLLECTIVE_MCP_TOKEN_SECRET = 'MYCO_COLLECTIVE_MCP_TOKEN';\n/** Timeout for wrangler CLI commands (ms). */\nexport const WRANGLER_COMMAND_TIMEOUT_MS = 60_000;\n\n// --- HTTP response flush ---\n/** Delay before initiating shutdown — allows the HTTP response to flush. */\nexport const RESTART_RESPONSE_FLUSH_MS = 500;\n\n// --- Self-update ---\nexport {\n  NPM_REGISTRY_BASE_URL,\n  MYCO_GLOBAL_DIR,\n  UPDATE_CHECK_CACHE_PATH,\n  UPDATE_CONFIG_PATH,\n  UPDATE_ERROR_PATH,\n  UPDATE_CHECK_INTERVAL_HOURS,\n  MS_PER_HOUR,\n  NPM_PACKAGE_NAME,\n  UPDATE_SCRIPT_DELAY_SECONDS,\n  RELEASE_CHANNELS,\n  DEFAULT_RELEASE_CHANNEL,\n  type ReleaseChannel,\n} from './constants/update.js';\n"],"mappings":";;;AAAA,OAAO,UAAU;AACjB,OAAO,QAAQ;AAGR,IAAM,wBAAwB;AAG9B,IAAM,kBAAkB,KAAK,KAAK,GAAG,QAAQ,GAAG,OAAO;AAGvD,IAAM,0BAA0B,KAAK,KAAK,iBAAiB,wBAAwB;AAGnF,IAAM,qBAAqB,KAAK,KAAK,iBAAiB,aAAa;AAGnE,IAAM,oBAAoB,KAAK,KAAK,iBAAiB,mBAAmB;AAGxE,IAAM,wBAAwB;AAG9B,IAAM,0BAA0B;AAGhC,IAAM,8BAA8B;AAGpC,IAAM,cAAc;AAGpB,IAAM,mBAAmB;AAGzB,IAAM,oBAAoB;AAG1B,IAAM,0BAA0B;AAGhC,IAAM,kBAAkB;AAAA,EAC7B,EAAE,IAAI,QAAQ,aAAa,kBAAkB,aAAa,OAAO;AAAA,EACjE,EAAE,IAAI,aAAa,aAAa,mBAAmB,aAAa,YAAY;AAAA,EAC5E,EAAE,IAAI,mBAAmB,aAAa,yBAAyB,aAAa,kBAAkB;AAChG;AAIO,IAAM,8BAA8B;AAGpC,IAAM,mBAAmB,CAAC,UAAU,MAAM;AAI1C,IAAM,0BAA0C;;;ACzChD,IAAM,0BAA0B;AAIhC,IAAM,kBAAkB;AAGxB,SAAS,eAAe,MAAsB;AACnD,SAAO,KAAK,KAAK,KAAK,SAAS,eAAe;AAChD;AAIO,IAAM,gBAAgB;AAOtB,IAAM,uBAAuB;AAG7B,IAAM,yBAAyB;AAI/B,IAAM,uBAAuB;AAM7B,IAAM,wBAAwB;AAE9B,IAAM,4BAA4B;AAMlC,IAAM,uBAAuB;AAI7B,IAAM,2BAA2B;AAEjC,IAAM,4BAA4B;AAGlC,IAAM,gCAAgC;AACtC,IAAM,8BAA8B;AAYpC,IAAM,2BAA2B;AAEjC,IAAM,iCAAiC;AAEvC,IAAM,yBAAyB;AAE/B,IAAM,+BAA+B;AAIrC,IAAM,mBAAmB;AAEzB,IAAM,6BAA6B;AAInC,IAAM,aAAa,KAAK,KAAK,KAAK;AAGlC,SAAS,eAAuB;AACrC,SAAO,KAAK,MAAM,KAAK,IAAI,IAAI,aAAa;AAC9C;AAIO,IAAM,0BAA0B,IAAI;AAIpC,IAAM,6BAA6B,CAAC,KAAK,KAAK,KAAK,KAAK,IAAI;AAI5D,IAAM,+BAA+B;AAKrC,IAAM,0BAA0B;AAEhC,IAAM,uBAAuB;AAe7B,IAAM,yBAAyB;AAE/B,IAAM,2BAA2B;AAEjC,IAAM,yBAAyB;AAE/B,IAAM,sBAAsB;AAG5B,IAAM,2BAA2B;AAEjC,IAAM,qBAAqB;AAE3B,IAAM,gCAAgC;AAYtC,IAAM,gCAAgC;AAItC,IAAM,4BAA4B;AAElC,IAAM,4BAA4B;AAGlC,IAAM,2BAA2B;AAIjC,IAAM,0BAA0B,oBAAI,IAAI,CAAC,cAAc,UAAU,CAAC;AAIlE,IAAM,mBAAmB;AAEzB,IAAM,gBAAgB;AAEtB,IAAM,kBAAkB;AAIxB,IAAM,2BAA2B;AAEjC,IAAM,6BAA6B;AAInC,IAAM,2BAA2B;AAIjC,IAAM,qBAAqB;AAI3B,IAAM,eAAe,CAAC,MAAM,KAAM,GAAK;AA6CvC,IAAM,+BAA+B;AAErC,IAAM,8BAA8B;AAmDpC,IAAM,iBAAiB;AAGvB,IAAM,mBAAmB;AAGzB,IAAM,kBAAkB;AAGxB,IAAM,oBAAoB;AAG1B,IAAM,uBAAuB;AAe7B,IAAM,2BAA2B,CAAC,UAAU,QAAQ,OAAO;AAI3D,IAAM,0BAA0B,IAAI,KAAK;AAEzC,IAAM,2BAA2B,KAAK,KAAK;AAE3C,IAAM,gCAAgC,KAAK,KAAK;AAEhD,IAAM,2BAA2B,KAAK;AAEtC,IAAM,0BAA0B,IAAI,KAAK;AAIzC,IAAM,6BAA6B,KAAK,KAAK;AAY7C,IAAM,2BAA2B;AAUjC,IAAM,iCAAiC;AAOvC,IAAM,wBAAwB;AAI9B,IAAM,qBAAqB;AAE3B,IAAM,qBAAqB;AAE3B,IAAM,yBAAyB;AAE/B,IAAM,yBAAyB;AAE/B,IAAM,sBAAsB;AAE5B,IAAM,wBAAwB;AAM9B,IAAM,8BAA8B;AAIpC,IAAM,4BAA4B;","names":[]}

package/dist/{chunk-XWOQL4XN.js → chunk-NU74DHV3.js}

@@ -1,13 +1,13 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   getPluginVersion
-} from "./chunk-W7WENJ6F.js";
+} from "./chunk-46AQ7D23.js";
 import {
   DAEMON_CLIENT_TIMEOUT_MS,
   DAEMON_HEALTH_CHECK_TIMEOUT_MS,
   DAEMON_HEALTH_RETRY_DELAYS,
   DAEMON_STALE_GRACE_PERIOD_MS
-} from "./chunk-CKJAWZQE.js";
+} from "./chunk-I54KLC6H.js";
 
 // src/hooks/client.ts
 import fs from "fs";
@@ -185,4 +185,4 @@ export {
   resolveCliEntryPath,
   DaemonClient
 };
-//# sourceMappingURL=chunk-XWOQL4XN.js.map
+//# sourceMappingURL=chunk-NU74DHV3.js.map

package/dist/{chunk-E4VLWIJC.js → chunk-ODXLRR4U.js}

@@ -1,2 +1,2 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
-//# sourceMappingURL=chunk-E4VLWIJC.js.map
+//# sourceMappingURL=chunk-ODXLRR4U.js.map

package/dist/{chunk-RAV5YMRU.js → chunk-OR4XUYBJ.js}

@@ -3,17 +3,17 @@ import {
   AgentTaskSchema,
   loadAgentTasks,
   taskFromParsed
-} from "./chunk-NI23QCHB.js";
+} from "./chunk-YDU3AHSW.js";
 import {
   BUILT_IN_SOURCE,
   MAX_TASK_NAME_LENGTH,
   TASK_NAME_PATTERN,
   USER_TASKS_DIR,
   USER_TASK_SOURCE
-} from "./chunk-CKJAWZQE.js";
+} from "./chunk-I54KLC6H.js";
 import {
   require_dist
-} from "./chunk-D7TYRPRM.js";
+} from "./chunk-6LQIMRTC.js";
 import {
   __toESM
 } from "./chunk-PZUWP5VK.js";
@@ -100,4 +100,4 @@ export {
   deleteUserTask,
   copyTaskToUser
 };
-//# sourceMappingURL=chunk-RAV5YMRU.js.map
+//# sourceMappingURL=chunk-OR4XUYBJ.js.map

package/dist/{chunk-CML4MCYF.js → chunk-PMT2LSTQ.js}

@@ -3,7 +3,7 @@ import {
   DAEMON_CLIENT_TIMEOUT_MS,
   EMBEDDING_REQUEST_TIMEOUT_MS,
   LLM_REQUEST_TIMEOUT_MS
-} from "./chunk-CKJAWZQE.js";
+} from "./chunk-I54KLC6H.js";
 
 // src/intelligence/ollama.ts
 var ENDPOINT_GENERATE = "/api/generate";
@@ -325,4 +325,4 @@ export {
   OllamaBackend,
   LmStudioBackend
 };
-//# sourceMappingURL=chunk-CML4MCYF.js.map
+//# sourceMappingURL=chunk-PMT2LSTQ.js.map

package/dist/{chunk-IB76KGBY.js → chunk-POEPHBQK.js}

@@ -1,2 +1,2 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
-//# sourceMappingURL=chunk-IB76KGBY.js.map
+//# sourceMappingURL=chunk-POEPHBQK.js.map

package/dist/{chunk-TZAXQKO6.js → chunk-PZEAO35P.js}

@@ -2,7 +2,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   getTeamMachineId,
   syncRow
-} from "./chunk-O3TRN3RC.js";
+} from "./chunk-AULBWINA.js";
 import {
   getDatabase
 } from "./chunk-MYX5NCRH.js";
@@ -187,4 +187,4 @@ export {
   listSporeIdsSince,
   updateSporeStatus
 };
-//# sourceMappingURL=chunk-TZAXQKO6.js.map
+//# sourceMappingURL=chunk-PZEAO35P.js.map