@goondocks/myco 0.19.0 → 0.19.2

package/dist/chunk-PLYWR5D7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../myco-team/src/cli.ts","../src/config/secrets.ts","../../myco-deploy/src/cloudflare.ts","../../myco-deploy/src/local-config.ts"],"sourcesContent":["/**\n * CLI team commands — provision and manage Cloudflare team sync infrastructure.\n *\n * `myco team init`    — Provision D1 database, Vectorize index, deploy worker.\n * `myco team upgrade` — Redeploy worker with updated source.\n */\n\nimport crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { CONFIG_FILENAME, loadConfig, updateTeamConfig } from '@myco/config/loader.js';\nimport { writeSecret, readSecrets } from '@myco/config/secrets.js';\nimport { WRANGLER_COMMAND_TIMEOUT_MS, TEAM_API_KEY_SECRET, TEAM_MCP_TOKEN_SECRET } from '@myco/constants.js';\nimport { SCHEMA_VERSION } from '@myco/db/schema.js';\nimport {\n  extractJsonArray,\n  installDeploymentDeps,\n  maskSecret,\n  parseD1Id,\n  parseKvNamespaceId,\n  parseWorkerUrl,\n  readJsonConfig,\n  resolveHomeConfigPath,\n  resolveVaultConfigPath,\n  runWrangler,\n  stageDeploymentDir,\n  writeJsonConfig,\n} from '@myco-deploy/index.js';\n\ndeclare const __MYCO_TEAM_VERSION__: string;\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Number of random bytes for API key generation. */\nconst API_KEY_BYTES = 32;\n\n/** Vectorize index dimensions (must match the embedding model). */\nconst VECTORIZE_DIMENSIONS = '1024';\n\n/** Vectorize distance metric. */\nconst VECTORIZE_METRIC = 'cosine';\n\n/** Prefix for team resource names. */\nconst TEAM_RESOURCE_PREFIX = 'myco-team';\n\n/** Length of the project hash suffix for unique resource naming. */\nconst PROJECT_HASH_LENGTH = 8;\n\n\n/** Source directory for worker files (relative to package root). */\nconst WORKER_SOURCE_DIR = 'worker';\n\n/** Team sync state directory within the vault. */\nconst TEAM_STATE_DIR = 'team';\nconst TEAM_DEPLOY_DIR = 'worker';\nconst TEAM_CONFIG_FILE = 'config.json';\nconst LEGACY_TEAM_CONFIG_DIR = '.myco-team';\nconst LEGACY_TEAM_DEPLOY_DIR = '.team-worker';\nconst TEAM_CONFIG_VERSION = 1;\nconst TEAM_MCP_ROTATION_RETRY_ATTEMPTS = 10;\nconst TEAM_MCP_ROTATION_RETRY_DELAY_MS = 1500;\n\n/** Regex to match wrangler.toml name field. */\nconst TOML_NAME_REGEX = /^name\\s*=\\s*\"[^\"]*\"/m;\n\n/** Regex to match wrangler.toml D1 placeholder. */\nconst TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;\n\n/** Regex to match wrangler.toml database_name field. */\nconst TOML_DB_NAME_REGEX = /database_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml index_name field. */\nconst TOML_INDEX_NAME_REGEX = /index_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml team package version placeholder. */\nconst TOML_TEAM_PACKAGE_VERSION_REGEX = /MYCO_TEAM_PACKAGE_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml Myco schema version placeholder. */\nconst TOML_MYCO_SCHEMA_VERSION_REGEX = /MYCO_SCHEMA_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match database_id in existing wrangler.toml. */\nconst TOML_DB_ID_REGEX = /database_id\\s*=\\s*\"([^\"]+)\"/;\n\n/** Regex to match wrangler.toml KV namespace placeholder. */\nconst TOML_KV_PLACEHOLDER_REGEX = /<YOUR_KV_NAMESPACE_ID>/g;\n\n/** Regex to extract the KV namespace ID from an existing wrangler.toml. */\nconst TOML_KV_ID_REGEX = /\\[\\[kv_namespaces\\]\\][\\s\\S]*?id\\s*=\\s*\"([0-9a-f]+)\"/;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Generate a project hash from vault dir for unique resource naming. */\nfunction projectHash(vaultDir: string): string {\n  const hash = crypto.createHash('sha256').update(vaultDir).digest('hex');\n  return hash.slice(0, PROJECT_HASH_LENGTH);\n}\n\n/** Build the unique resource name for this project's team infrastructure. */\nfunction resourceName(vaultDir: string): string {\n  return `${TEAM_RESOURCE_PREFIX}-${projectHash(vaultDir)}`;\n}\n\nfunction resolvePackageRoot(): string {\n  const override = process.env.MYCO_TEAM_PACKAGE_ROOT?.trim();\n  if (override) return override;\n  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');\n}\n\nexport function getTeamPackageVersion(): string {\n  if (typeof __MYCO_TEAM_VERSION__ !== 'undefined') {\n    return __MYCO_TEAM_VERSION__;\n  }\n\n  const packageRoot = resolvePackageRoot();\n  const candidatePaths = [\n    path.join(packageRoot, 'package.json'),\n    path.join(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'), 'package.json'),\n  ];\n\n  for (const candidatePath of candidatePaths) {\n    if (!fs.existsSync(candidatePath)) continue;\n    const packageJson = JSON.parse(fs.readFileSync(candidatePath, 'utf-8')) as { version?: string };\n    if (packageJson.version) return packageJson.version;\n  }\n\n  return '0.1.0';\n}\n\nfunction getMycoSchemaVersion(): string {\n  return String(SCHEMA_VERSION);\n}\n\nexport interface TeamLocalConfig {\n  worker_name: string;\n  worker_url: string;\n  package_version: string;\n  created_at: string;\n  last_upgraded: string;\n  config_version: number;\n}\n\ninterface LegacyTeamLocalConfig extends TeamLocalConfig {\n  api_key?: string;\n  mcp_token?: string | null;\n  vault_dir?: string;\n}\n\nfunction resolveLocalConfigPath(vaultDir: string): string {\n  return resolveVaultConfigPath(vaultDir, TEAM_STATE_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveLegacyLocalConfigPath(): string {\n  return resolveHomeConfigPath(LEGACY_TEAM_CONFIG_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, TEAM_STATE_DIR, TEAM_DEPLOY_DIR);\n}\n\nfunction resolveLegacyDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, LEGACY_TEAM_DEPLOY_DIR);\n}\n\nfunction writeLocalConfig(vaultDir: string, config: TeamLocalConfig): void {\n  writeJsonConfig(resolveLocalConfigPath(vaultDir), config);\n}\n\nfunction migrateLegacyDeployDir(vaultDir: string): void {\n  const legacyDeployDir = resolveLegacyDeployDir(vaultDir);\n  const nextDeployDir = resolveDeployDir(vaultDir);\n  if (!fs.existsSync(legacyDeployDir) || fs.existsSync(nextDeployDir)) return;\n\n  fs.mkdirSync(path.dirname(nextDeployDir), { recursive: true });\n  fs.renameSync(legacyDeployDir, nextDeployDir);\n}\n\nfunction readLocalConfig(vaultDir: string): TeamLocalConfig | null {\n  const config = readJsonConfig<TeamLocalConfig>(resolveLocalConfigPath(vaultDir));\n  if (config) {\n    migrateLegacyDeployDir(vaultDir);\n    return config;\n  }\n\n  const legacyConfig = readJsonConfig<LegacyTeamLocalConfig>(resolveLegacyLocalConfigPath());\n  if (!legacyConfig) return null;\n  if (legacyConfig.vault_dir && legacyConfig.vault_dir !== vaultDir) return null;\n\n  const migrated: TeamLocalConfig = {\n    worker_name: legacyConfig.worker_name,\n    worker_url: legacyConfig.worker_url,\n    package_version: legacyConfig.package_version,\n    created_at: legacyConfig.created_at,\n    last_upgraded: legacyConfig.last_upgraded,\n    config_version: legacyConfig.config_version ?? TEAM_CONFIG_VERSION,\n  };\n  writeLocalConfig(vaultDir, migrated);\n  if (legacyConfig.api_key) writeSecret(vaultDir, TEAM_API_KEY_SECRET, legacyConfig.api_key);\n  if (legacyConfig.mcp_token) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, legacyConfig.mcp_token);\n  migrateLegacyDeployDir(vaultDir);\n  return migrated;\n}\n\nfunction requireLocalConfig(vaultDir: string): TeamLocalConfig {\n  const config = readLocalConfig(vaultDir);\n  if (config) return config;\n\n  console.error(`No local myco-team config found at ${resolveLocalConfigPath(vaultDir)}`);\n  process.exit(1);\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function rotateMcpTokenWithRetry(workerUrl: string, apiKey: string): Promise<string> {\n  let lastError: Error | null = null;\n\n  for (let attempt = 1; attempt <= TEAM_MCP_ROTATION_RETRY_ATTEMPTS; attempt += 1) {\n    try {\n      return await rotateMcpTokenForWorker(workerUrl, apiKey);\n    } catch (error) {\n      lastError = error as Error;\n      const isRetryable =\n        lastError.message.includes('401') &&\n        lastError.message.includes('Invalid API key') &&\n        attempt < TEAM_MCP_ROTATION_RETRY_ATTEMPTS;\n      if (!isRetryable) {\n        throw lastError;\n      }\n      await delay(TEAM_MCP_ROTATION_RETRY_DELAY_MS);\n    }\n  }\n\n  throw lastError ?? new Error('MCP token rotation failed');\n}\n\n/** Run a wrangler command and return stdout. Throws on failure, surfacing stderr. */\nfunction wrangler(args: string[], options?: { cwd?: string }): string {\n  return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });\n}\n\n/** Find the worker source directory. Checks dist layout first (installed), then source layout (dev). */\nfunction locateWorkerSource(): string {\n  const root = resolvePackageRoot();\n  const distPath = path.join(root, 'dist', WORKER_SOURCE_DIR);\n  if (fs.existsSync(distPath)) return distPath;\n  const srcPath = path.join(root, WORKER_SOURCE_DIR);\n  if (fs.existsSync(srcPath)) return srcPath;\n  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} — are you running from the myco-team package?`);\n}\n\n/**\n * Copy worker source to the vault deployment directory and patch wrangler.toml\n * with actual D1 database ID and resource names.\n */\nfunction prepareDeployDir(vaultDir: string, d1Id: string, kvId: string): string {\n  const srcDir = locateWorkerSource();\n  const deployDir = resolveDeployDir(vaultDir);\n  const name = resourceName(vaultDir);\n  return stageDeploymentDir({\n    sourceDir: srcDir,\n    deployDir,\n    reset: true,\n    textPatches: [{\n      filePath: 'wrangler.toml',\n      transforms: [\n        (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${name}\"`),\n        (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n        (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${name}\"`),\n        (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${name}-vectors\"`),\n        (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n        (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n        (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n      ],\n    }],\n    installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n  });\n}\n\n/** Ensure a KV namespace exists for this project. Returns the namespace ID. */\nfunction ensureKvNamespace(name: string): string {\n  const kvName = `${name}-secrets`;\n  const lookupExisting = (): string => {\n    const listOutput = wrangler(['kv', 'namespace', 'list']);\n    const namespaces = extractJsonArray(listOutput) as Array<{ id: string; title: string }>;\n    // Wrangler sometimes rewrites hyphens to underscores in titles\n    const normalize = (s: string) => s.replace(/[-_]/g, '');\n    const target = normalize(kvName);\n    const existing = namespaces.find((ns) => normalize(ns.title) === target || normalize(ns.title).endsWith(target));\n    if (!existing) throw new Error(`KV namespace \"${kvName}\" not found in list of ${namespaces.length} namespaces`);\n    return existing.id;\n  };\n\n  try {\n    const output = wrangler(['kv', 'namespace', 'create', kvName]);\n    return parseKvNamespaceId(output);\n    // Created successfully but we couldn't parse — fall back to list lookup\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate') || errMsg.includes('same title')) {\n      return lookupExisting();\n    }\n    throw err;\n  }\n}\n\nasync function rotateMcpTokenForWorker(workerUrl: string, apiKey: string): Promise<string> {\n  const response = await fetch(`${workerUrl}/mcp/rotate`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      'Content-Type': 'application/json',\n    },\n  });\n  if (!response.ok) {\n    throw new Error(`MCP token rotation failed: ${response.status} ${await response.text()}`);\n  }\n  const body = await response.json() as { token?: string };\n  if (!body.token) {\n    throw new Error('MCP token rotation response did not include a token');\n  }\n  return body.token;\n}\n\n// ---------------------------------------------------------------------------\n// Commands\n// ---------------------------------------------------------------------------\n\nexport async function teamInit(vaultDir: string): Promise<void> {\n  console.log('Provisioning team sync infrastructure...\\n');\n\n  // 1. Check for wrangler\n  try {\n    const version = wrangler(['--version']).trim();\n    console.log(`wrangler: ${version}`);\n  } catch {\n    console.error('Error: wrangler CLI not found. Install it with: npm install -g wrangler');\n    process.exit(1);\n  }\n\n  // 2. Check auth\n  try {\n    wrangler(['whoami']);\n    console.log('Cloudflare auth: OK\\n');\n  } catch {\n    console.error('Error: Not authenticated with Cloudflare. Run: wrangler login');\n    process.exit(1);\n  }\n\n  const name = resourceName(vaultDir);\n  console.log(`Resource name: ${name}\\n`);\n\n  // 3. Create D1 database (or reuse existing)\n  console.log('Creating D1 database...');\n  let d1Id: string;\n  try {\n    const d1Output = wrangler(['d1', 'create', name]);\n    d1Id = parseD1Id(d1Output);\n    console.log(`D1 database created: ${d1Id}\\n`);\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists')) {\n      console.log('D1 database already exists, looking up ID...');\n      const listOutput = wrangler(['d1', 'list', '--json']);\n      const databases = JSON.parse(listOutput) as Array<{ name: string; uuid: string }>;\n      const existing = databases.find((db) => db.name === name);\n      if (!existing) {\n        console.error(`D1 database \"${name}\" reported as existing but not found in list`);\n        process.exit(1);\n      }\n      d1Id = existing.uuid;\n      console.log(`Reusing D1 database: ${d1Id}\\n`);\n    } else {\n      console.error(`Failed to create D1 database: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 4. Create Vectorize index (or reuse existing)\n  console.log('Creating Vectorize index...');\n  try {\n    wrangler(['vectorize', 'create', `${name}-vectors`, '--dimensions', VECTORIZE_DIMENSIONS, '--metric', VECTORIZE_METRIC]);\n    console.log('Vectorize index created\\n');\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate_name')) {\n      console.log('Vectorize index already exists, reusing\\n');\n    } else {\n      console.error(`Failed to create Vectorize index: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 5. Create KV namespace for runtime secrets (MCP tokens)\n  console.log('Creating KV namespace for secrets...');\n  let kvId: string;\n  try {\n    kvId = ensureKvNamespace(name);\n    console.log(`KV namespace ready: ${kvId}\\n`);\n  } catch (err) {\n    console.error(`Failed to create KV namespace: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 6. Generate API key\n  const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n\n  // 7. Prepare deployment directory\n  console.log('Preparing worker deployment...');\n  const deployDir = prepareDeployDir(vaultDir, d1Id, kvId);\n\n  // 7. Set API key secret via wrangler\n  console.log('Setting API key secret...');\n  try {\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', name], {\n      cwd: deployDir,\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    console.log('Secret set\\n');\n  } catch (err) {\n    console.error(`Failed to set API key secret: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 8. Deploy worker\n  console.log('Deploying worker...');\n  let workerUrl: string;\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    workerUrl = parseWorkerUrl(deployOutput);\n    console.log(`Worker deployed: ${workerUrl}\\n`);\n  } catch (err) {\n    console.error(`Failed to deploy worker: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 9. Seed team config in the Worker\n  console.log('Setting team configuration...');\n  try {\n    const { getMachineId } = await import('@myco/daemon/machine-id.js');\n    const creatorMachineId = await getMachineId(vaultDir);\n    await fetch(`${workerUrl}/config`, {\n      method: 'PUT',\n      headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        team_name: name,\n        embedding_model: '@cf/baai/bge-m3',\n        embedding_dimensions: '1024',\n        created_at: String(Math.floor(Date.now() / 1000)),\n        created_by: creatorMachineId,\n      }),\n    });\n    console.log('Team config saved\\n');\n  } catch {\n    console.log('Warning: could not seed team config (non-fatal)\\n');\n  }\n\n  let mcpToken: string | null = null;\n  try {\n    mcpToken = await rotateMcpTokenForWorker(workerUrl, apiKey);\n  } catch {\n    // Non-fatal. The daemon can also fetch the token later through /connect.\n  }\n\n  // 10. Save config and API key locally\n  updateTeamConfig(vaultDir, {\n    enabled: true,\n    worker_url: workerUrl,\n  });\n  writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n  if (mcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, mcpToken);\n  writeLocalConfig(vaultDir, {\n    worker_name: name,\n    worker_url: workerUrl,\n    package_version: getTeamPackageVersion(),\n    created_at: new Date().toISOString(),\n    last_upgraded: new Date().toISOString(),\n    config_version: TEAM_CONFIG_VERSION,\n  });\n\n  console.log('Team sync configured!\\n');\n  console.log(`  URL:     ${workerUrl}`);\n  console.log(`  API Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`);\n  if (mcpToken) {\n    console.log(`  MCP:     ${mcpToken.slice(0, 8)}...${mcpToken.slice(-4)}`);\n  }\n  console.log('\\nShare the URL and API key with teammates so they can connect.');\n}\n\n// ---------------------------------------------------------------------------\n// Shared upgrade logic (used by CLI and daemon API)\n// ---------------------------------------------------------------------------\n\nexport interface UpgradeResult {\n  success: boolean;\n  worker_url?: string;\n  version?: string;\n  error?: string;\n}\n\n/**\n * Upgrade the team sync worker: re-copy source, patch config, redeploy.\n * Returns a result instead of calling process.exit — safe for both CLI and daemon.\n */\nexport function upgradeWorker(vaultDir: string): UpgradeResult {\n  const config = loadConfig(vaultDir);\n  if (!config.team.worker_url) {\n    return { success: false, error: 'No team sync configured. Run: myco team init' };\n  }\n\n  migrateLegacyDeployDir(vaultDir);\n  const deployDir = resolveDeployDir(vaultDir);\n  const tomlPath = path.join(deployDir, 'wrangler.toml');\n\n  if (!fs.existsSync(tomlPath)) {\n    return { success: false, error: 'No deployment directory found. Run: myco team init' };\n  }\n\n  // Read ALL existing resource identifiers from current wrangler.toml.\n  const existingToml = fs.readFileSync(tomlPath, 'utf-8');\n  const d1Match = existingToml.match(TOML_DB_ID_REGEX);\n  if (!d1Match || d1Match[1] === '<YOUR_D1_DATABASE_ID>') {\n    return { success: false, error: 'Cannot determine D1 database ID from existing deployment. Run: myco team init' };\n  }\n  const d1Id = d1Match[1];\n\n  const nameMatch = existingToml.match(/^name\\s*=\\s*\"([^\"]*)\"/m);\n  const dbNameMatch = existingToml.match(/database_name\\s*=\\s*\"([^\"]*)\"/);\n  const indexNameMatch = existingToml.match(/index_name\\s*=\\s*\"([^\"]*)\"/);\n  const workerName = nameMatch?.[1] ?? resourceName(vaultDir);\n\n  // KV namespace may not exist on older deployments — create or reuse.\n  const kvMatch = existingToml.match(TOML_KV_ID_REGEX);\n  let kvId: string;\n  if (kvMatch) {\n    kvId = kvMatch[1];\n  } else {\n    try {\n      kvId = ensureKvNamespace(workerName);\n    } catch (err) {\n      return { success: false, error: `Failed to provision KV namespace: ${(err as Error).message}` };\n    }\n  }\n\n  try {\n    stageDeploymentDir({\n      sourceDir: locateWorkerSource(),\n      deployDir,\n      textPatches: [{\n        filePath: 'wrangler.toml',\n        transforms: [\n          (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${workerName}\"`),\n          (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n          (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${dbNameMatch?.[1] ?? workerName}\"`),\n          (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${indexNameMatch?.[1] ?? `${workerName}-vectors`}\"`),\n          (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n          (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n          (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n        ],\n      }],\n      installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n    });\n  } catch (err) {\n    return { success: false, error: `Failed to install worker dependencies: ${(err as Error).message}` };\n  }\n\n  // Re-set API key secret before deploy (deploy can wipe secrets)\n  const secrets = readSecrets(vaultDir);\n  const apiKey = secrets[TEAM_API_KEY_SECRET];\n  if (apiKey) {\n    try {\n      runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', workerName], {\n        cwd: deployDir,\n        input: apiKey,\n        timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n      });\n    } catch {\n      // Non-fatal — secret may already be set\n    }\n  }\n\n  // Redeploy\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    const workerUrl = parseWorkerUrl(deployOutput);\n    const version = getTeamPackageVersion();\n\n    updateTeamConfig(vaultDir, {\n      worker_url: workerUrl,\n    });\n    const localConfig = readLocalConfig(vaultDir);\n    if (localConfig) {\n      writeLocalConfig(vaultDir, {\n        ...localConfig,\n        worker_name: workerName,\n        worker_url: workerUrl,\n        package_version: version,\n        last_upgraded: new Date().toISOString(),\n      });\n    }\n\n    return { success: true, worker_url: workerUrl, version };\n  } catch (err) {\n    return { success: false, error: `Failed to deploy worker: ${(err as Error).message}` };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// CLI wrapper\n// ---------------------------------------------------------------------------\n\nexport async function teamUpgrade(vaultDir: string): Promise<void> {\n  console.log('Upgrading team sync worker...\\n');\n  const result = upgradeWorker(vaultDir);\n  if (!result.success) {\n    console.error(result.error);\n    process.exit(1);\n  }\n  console.log(`Worker deployed: ${result.worker_url}`);\n  console.log(`Version: ${result.version}`);\n  console.log('\\nUpgrade complete.');\n}\n\nexport async function teamStatus(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n\n  console.log(`Worker:      ${config.worker_name}`);\n  console.log(`URL:         ${config.worker_url}`);\n  console.log(`API Key:     ${maskSecret(secrets[TEAM_API_KEY_SECRET] ?? null)}`);\n  console.log(`MCP Token:   ${maskSecret(secrets[TEAM_MCP_TOKEN_SECRET] ?? null)}`);\n  console.log(`Package v:   ${config.package_version}`);\n  console.log(`Created:     ${config.created_at}`);\n  console.log(`Upgraded:    ${config.last_upgraded}`);\n  console.log(`Config v:    ${config.config_version}`);\n}\n\nexport async function teamRotateTokens(vaultDir: string, which: 'api' | 'mcp' | 'all' = 'all'): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n  let currentApiKey = secrets[TEAM_API_KEY_SECRET] ?? '';\n  let currentMcpToken = secrets[TEAM_MCP_TOKEN_SECRET] ?? null;\n\n  let nextConfig = { ...config };\n\n  if (which === 'api' || which === 'all') {\n    const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', config.worker_name], {\n      cwd: resolveDeployDir(vaultDir),\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n    currentApiKey = apiKey;\n    nextConfig = {\n      ...nextConfig,\n      package_version: getTeamPackageVersion(),\n      last_upgraded: new Date().toISOString(),\n    };\n    writeLocalConfig(vaultDir, nextConfig);\n  }\n\n  if (which === 'mcp' || which === 'all') {\n    try {\n      currentMcpToken = await rotateMcpTokenWithRetry(config.worker_url, currentApiKey);\n      if (currentMcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, currentMcpToken);\n    } catch (error) {\n      writeLocalConfig(vaultDir, {\n        ...nextConfig,\n        last_upgraded: new Date().toISOString(),\n      });\n      throw new Error(\n        `API key rotation completed, but MCP token rotation failed. Local config was updated to the new API key.\\n${(error as Error).message}`,\n      );\n    }\n  }\n\n  nextConfig.last_upgraded = new Date().toISOString();\n  writeLocalConfig(vaultDir, nextConfig);\n\n  console.log(`API Key:   ${maskSecret(currentApiKey)}`);\n  console.log(`MCP Token: ${maskSecret(currentMcpToken)}`);\n}\n\nexport async function teamDestroy(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const errors: string[] = [];\n  const deployDir = resolveDeployDir(vaultDir);\n\n  try {\n    wrangler(['delete', config.worker_name], { cwd: deployDir });\n  } catch (error) {\n    errors.push(`worker delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    wrangler(['vectorize', 'delete', `${config.worker_name}-vectors`]);\n  } catch (error) {\n    errors.push(`vectorize delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const databases = JSON.parse(wrangler(['d1', 'list', '--json'])) as Array<{ name: string; uuid: string }>;\n    const database = databases.find((entry) => entry.name === config.worker_name);\n    if (database) {\n      wrangler(['d1', 'delete', database.name, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`d1 delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const namespaces = extractJsonArray(wrangler(['kv', 'namespace', 'list'])) as Array<{ id: string; title: string }>;\n    const namespace = namespaces.find((entry) => entry.title === `${config.worker_name}-secrets`);\n    if (namespace) {\n      wrangler(['kv', 'namespace', 'delete', '--namespace-id', namespace.id, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`kv delete failed: ${(error as Error).message}`);\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Team destroy incomplete. Local state preserved for retry.\\n${errors.join('\\n')}`);\n  }\n\n  fs.rmSync(path.join(vaultDir, TEAM_STATE_DIR), { recursive: true, force: true });\n  console.log(`Destroyed local myco-team state for ${config.worker_name}.`);\n}\n","/**\n * Secrets file utilities for API key storage outside git.\n *\n * Secrets are stored in `secrets.env` inside the vault directory.\n * This file is gitignored (see VAULT_GITIGNORE) and never committed.\n * Format: KEY=value, one per line (same as .env).\n */\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst SECRETS_FILE = 'secrets.env';\n\n/** Read all secrets from <vault>/secrets.env as key-value pairs. */\nexport function readSecrets(vaultDir: string): Record<string, string> {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return {};\n\n  const secrets: Record<string, string> = {};\n  for (const line of fs.readFileSync(secretsPath, 'utf-8').split('\\n')) {\n    const match = line.match(/^\\s*([^#=]+?)\\s*=\\s*(.*?)\\s*$/);\n    if (match) {\n      secrets[match[1]] = match[2];\n    }\n  }\n  return secrets;\n}\n\n/** Write a secret to <vault>/secrets.env, preserving existing entries. */\nexport function writeSecret(vaultDir: string, key: string, value: string): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  const existing = readSecrets(vaultDir);\n  existing[key] = value;\n\n  const content = Object.entries(existing)\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Remove one or more secrets from <vault>/secrets.env, preserving remaining entries. */\nexport function deleteSecrets(vaultDir: string, keys: string[]): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return;\n\n  const existing = readSecrets(vaultDir);\n  for (const key of keys) delete existing[key];\n\n  const entries = Object.entries(existing);\n  if (entries.length === 0) {\n    fs.rmSync(secretsPath, { force: true });\n    return;\n  }\n\n  const content = entries\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Load secrets from <vault>/secrets.env into process.env (without overwriting existing vars). */\nexport function loadSecrets(vaultDir: string): void {\n  const secrets = readSecrets(vaultDir);\n  for (const [key, value] of Object.entries(secrets)) {\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n","import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst WORKER_URL_REGEX = /(https:\\/\\/[^\\s]+\\.workers\\.dev)/;\nconst D1_ID_JSON_REGEX = /\"database_id\"\\s*:\\s*\"([0-9a-f-]{36})\"/i;\nconst D1_ID_TEXT_REGEX = /id:\\s*([0-9a-f-]{36})/i;\nconst KV_ID_REGEX = /\"id\":\\s*\"([0-9a-f]+)\"/i;\n\nexport interface WranglerOptions {\n  cwd?: string;\n  input?: string;\n  timeoutMs: number;\n}\n\nexport interface TextPatch {\n  filePath: string;\n  transforms: Array<(text: string) => string>;\n}\n\nexport interface StageDeploymentDirOptions {\n  sourceDir: string;\n  deployDir: string;\n  reset?: boolean;\n  extraCopies?: Array<{ sourceDir: string; destinationSubdir: string }>;\n  textPatches?: TextPatch[];\n  installDepsTimeoutMs?: number | null;\n}\n\nexport function buildCommandEnv(): NodeJS.ProcessEnv {\n  const nodeBinDir = path.dirname(process.execPath);\n  const pathValue = process.env.PATH\n    ? `${nodeBinDir}${path.delimiter}${process.env.PATH}`\n    : nodeBinDir;\n  return { ...process.env, PATH: pathValue };\n}\n\nexport function runWrangler(args: string[], options: WranglerOptions): string {\n  try {\n    return execFileSync('wrangler', args, {\n      cwd: options.cwd,\n      env: buildCommandEnv(),\n      input: options.input,\n      encoding: 'utf-8',\n      timeout: options.timeoutMs,\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n  } catch (error) {\n    const execError = error as Error & { stderr?: Buffer | string; stdout?: Buffer | string };\n    const stderr = execError.stderr?.toString() ?? '';\n    const stdout = execError.stdout?.toString() ?? '';\n    const detail = [stderr, stdout].filter(Boolean).join('\\n').trim();\n    throw new Error(detail || execError.message);\n  }\n}\n\nexport function installDeploymentDeps(deployDir: string, timeoutMs: number): void {\n  const packageJsonPath = path.join(deployDir, 'package.json');\n  if (!fs.existsSync(packageJsonPath)) return;\n\n  execFileSync('npm', ['install', '--silent', '--no-audit', '--no-fund'], {\n    cwd: deployDir,\n    env: buildCommandEnv(),\n    encoding: 'utf-8',\n    timeout: timeoutMs,\n    stdio: ['pipe', 'pipe', 'pipe'],\n  });\n}\n\nexport function parseWorkerUrl(output: string): string {\n  const workerUrl = output.match(WORKER_URL_REGEX)?.[1];\n  if (!workerUrl) {\n    throw new Error(`Could not parse worker URL from deploy output:\\n${output}`);\n  }\n  return workerUrl;\n}\n\nexport function parseD1Id(output: string): string {\n  const jsonMatch = output.match(D1_ID_JSON_REGEX);\n  if (jsonMatch) return jsonMatch[1];\n\n  const textMatch = output.match(D1_ID_TEXT_REGEX);\n  if (textMatch) return textMatch[1];\n\n  throw new Error(`Could not parse D1 database ID from wrangler output:\\n${output}`);\n}\n\nexport function parseKvNamespaceId(output: string): string {\n  const kvId = output.match(KV_ID_REGEX)?.[1];\n  if (!kvId) {\n    throw new Error(`Could not parse KV namespace ID from wrangler output:\\n${output}`);\n  }\n  return kvId;\n}\n\nexport function extractJsonArray(output: string): unknown[] {\n  const start = output.indexOf('[');\n  const end = output.lastIndexOf(']');\n  if (start === -1 || end === -1 || end < start) {\n    throw new Error(`No JSON array found in output:\\n${output}`);\n  }\n  return JSON.parse(output.slice(start, end + 1)) as unknown[];\n}\n\nexport function stageDeploymentDir(options: StageDeploymentDirOptions): string {\n  if (options.reset) {\n    fs.rmSync(options.deployDir, { recursive: true, force: true });\n  }\n  fs.mkdirSync(options.deployDir, { recursive: true });\n  fs.cpSync(options.sourceDir, options.deployDir, { recursive: true });\n\n  for (const copy of options.extraCopies ?? []) {\n    fs.cpSync(copy.sourceDir, path.join(options.deployDir, copy.destinationSubdir), { recursive: true });\n  }\n\n  for (const patch of options.textPatches ?? []) {\n    const absolutePath = path.join(options.deployDir, patch.filePath);\n    let nextText = fs.readFileSync(absolutePath, 'utf-8');\n    for (const transform of patch.transforms) {\n      nextText = transform(nextText);\n    }\n    fs.writeFileSync(absolutePath, nextText, 'utf-8');\n  }\n\n  if (options.installDepsTimeoutMs) {\n    installDeploymentDeps(options.deployDir, options.installDepsTimeoutMs);\n  }\n\n  return options.deployDir;\n}\n","import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nconst MYCO_HOME_OVERRIDE_ENV = 'MYCO_HOME_OVERRIDE';\n\nexport function resolveHomeDir(): string {\n  return process.env[MYCO_HOME_OVERRIDE_ENV]?.trim() || os.homedir();\n}\n\nexport function resolveHomeConfigPath(configDir: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, fileName);\n}\n\nexport function resolveNamedHomeConfigPath(configDir: string, name: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, name, fileName);\n}\n\nexport function resolveVaultConfigPath(vaultDir: string, configDir: string, fileName: string): string {\n  return path.join(vaultDir, configDir, fileName);\n}\n\nexport function readJsonConfig<T>(configPath: string): T | null {\n  if (!fs.existsSync(configPath)) return null;\n  return JSON.parse(fs.readFileSync(configPath, 'utf-8')) as T;\n}\n\nexport function writeJsonConfig(configPath: string, value: unknown): void {\n  fs.mkdirSync(path.dirname(configPath), { recursive: true });\n  fs.writeFileSync(configPath, `${JSON.stringify(value, null, 2)}\\n`, { encoding: 'utf-8', mode: 0o600 });\n  fs.chmodSync(configPath, 0o600);\n}\n\nexport function maskSecret(secret: string | null): string | null {\n  if (!secret) return null;\n  if (secret.length <= 8) return secret;\n  return `${secret.slice(0, 4)}...${secret.slice(-4)}`;\n}\n\nexport function createHexToken(byteLength: number): string {\n  return crypto.randomBytes(byteLength).toString('hex');\n}\n"],"mappings":";;;;;;;;;;;;;;;AAOA,OAAOA,aAAY;AACnB,OAAOC,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACH9B,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,eAAe;AAGd,SAAS,YAAY,UAA0C;AACpE,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,MAAI,CAAC,GAAG,WAAW,WAAW,EAAG,QAAO,CAAC;AAEzC,QAAM,UAAkC,CAAC;AACzC,aAAW,QAAQ,GAAG,aAAa,aAAa,OAAO,EAAE,MAAM,IAAI,GAAG;AACpE,UAAM,QAAQ,KAAK,MAAM,+BAA+B;AACxD,QAAI,OAAO;AACT,cAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,YAAY,UAAkB,KAAa,OAAqB;AAC9E,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,QAAM,WAAW,YAAY,QAAQ;AACrC,WAAS,GAAG,IAAI;AAEhB,QAAM,UAAU,OAAO,QAAQ,QAAQ,EACpC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,IAAI,IAAI;AAEhB,KAAG,cAAc,aAAa,SAAS,OAAO;AAChD;AAwBO,SAAS,YAAY,UAAwB;AAClD,QAAM,UAAU,YAAY,QAAQ;AACpC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,EACF;AACF;;;ACrEA,SAAS,oBAAoB;AAC7B,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,cAAc;AAsBb,SAAS,kBAAqC;AACnD,QAAM,aAAaA,MAAK,QAAQ,QAAQ,QAAQ;AAChD,QAAM,YAAY,QAAQ,IAAI,OAC1B,GAAG,UAAU,GAAGA,MAAK,SAAS,GAAG,QAAQ,IAAI,IAAI,KACjD;AACJ,SAAO,EAAE,GAAG,QAAQ,KAAK,MAAM,UAAU;AAC3C;AAEO,SAAS,YAAY,MAAgB,SAAkC;AAC5E,MAAI;AACF,WAAO,aAAa,YAAY,MAAM;AAAA,MACpC,KAAK,QAAQ;AAAA,MACb,KAAK,gBAAgB;AAAA,MACrB,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,MACV,SAAS,QAAQ;AAAA,MACjB,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,YAAY;AAClB,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,CAAC,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK;AAChE,UAAM,IAAI,MAAM,UAAU,UAAU,OAAO;AAAA,EAC7C;AACF;AAEO,SAAS,sBAAsB,WAAmB,WAAyB;AAChF,QAAM,kBAAkBA,MAAK,KAAK,WAAW,cAAc;AAC3D,MAAI,CAACD,IAAG,WAAW,eAAe,EAAG;AAErC,eAAa,OAAO,CAAC,WAAW,YAAY,cAAc,WAAW,GAAG;AAAA,IACtE,KAAK;AAAA,IACL,KAAK,gBAAgB;AAAA,IACrB,UAAU;AAAA,IACV,SAAS;AAAA,IACT,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AACH;AAEO,SAAS,eAAe,QAAwB;AACrD,QAAM,YAAY,OAAO,MAAM,gBAAgB,IAAI,CAAC;AACpD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM;AAAA,EAAmD,MAAM,EAAE;AAAA,EAC7E;AACA,SAAO;AACT;AAEO,SAAS,UAAU,QAAwB;AAChD,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,IAAI,MAAM;AAAA,EAAyD,MAAM,EAAE;AACnF;AAEO,SAAS,mBAAmB,QAAwB;AACzD,QAAM,OAAO,OAAO,MAAM,WAAW,IAAI,CAAC;AAC1C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM;AAAA,EAA0D,MAAM,EAAE;AAAA,EACpF;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,QAA2B;AAC1D,QAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO;AAC7C,UAAM,IAAI,MAAM;AAAA,EAAmC,MAAM,EAAE;AAAA,EAC7D;AACA,SAAO,KAAK,MAAM,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAChD;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,MAAI,QAAQ,OAAO;AACjB,IAAAA,IAAG,OAAO,QAAQ,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/D;AACA,EAAAA,IAAG,UAAU,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AACnD,EAAAA,IAAG,OAAO,QAAQ,WAAW,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAEnE,aAAW,QAAQ,QAAQ,eAAe,CAAC,GAAG;AAC5C,IAAAA,IAAG,OAAO,KAAK,WAAWC,MAAK,KAAK,QAAQ,WAAW,KAAK,iBAAiB,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACrG;AAEA,aAAW,SAAS,QAAQ,eAAe,CAAC,GAAG;AAC7C,UAAM,eAAeA,MAAK,KAAK,QAAQ,WAAW,MAAM,QAAQ;AAChE,QAAI,WAAWD,IAAG,aAAa,cAAc,OAAO;AACpD,eAAW,aAAa,MAAM,YAAY;AACxC,iBAAW,UAAU,QAAQ;AAAA,IAC/B;AACA,IAAAA,IAAG,cAAc,cAAc,UAAU,OAAO;AAAA,EAClD;AAEA,MAAI,QAAQ,sBAAsB;AAChC,0BAAsB,QAAQ,WAAW,QAAQ,oBAAoB;AAAA,EACvE;AAEA,SAAO,QAAQ;AACjB;;;ACjIA,OAAO,YAAY;AACnB,OAAOE,SAAQ;AACf,OAAO,QAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,yBAAyB;AAExB,SAAS,iBAAyB;AACvC,SAAO,QAAQ,IAAI,sBAAsB,GAAG,KAAK,KAAK,GAAG,QAAQ;AACnE;AAEO,SAAS,sBAAsB,WAAmB,UAA0B;AACjF,SAAOA,MAAK,KAAK,eAAe,GAAG,WAAW,QAAQ;AACxD;AAMO,SAAS,uBAAuB,UAAkB,WAAmB,UAA0B;AACpG,SAAOC,MAAK,KAAK,UAAU,WAAW,QAAQ;AAChD;AAEO,SAAS,eAAkB,YAA8B;AAC9D,MAAI,CAACC,IAAG,WAAW,UAAU,EAAG,QAAO;AACvC,SAAO,KAAK,MAAMA,IAAG,aAAa,YAAY,OAAO,CAAC;AACxD;AAEO,SAAS,gBAAgB,YAAoB,OAAsB;AACxE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,EAAAC,IAAG,cAAc,YAAY,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,SAAS,MAAM,IAAM,CAAC;AACtG,EAAAA,IAAG,UAAU,YAAY,GAAK;AAChC;;;AHKA,IAAM,gBAAgB;AAGtB,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AAGzB,IAAM,uBAAuB;AAG7B,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAG1B,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,sBAAsB;AAK5B,IAAM,kBAAkB;AAGxB,IAAM,4BAA4B;AAGlC,IAAM,qBAAqB;AAG3B,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAGxC,IAAM,iCAAiC;AAGvC,IAAM,mBAAmB;AAGzB,IAAM,4BAA4B;AAGlC,IAAM,mBAAmB;AAOzB,SAAS,YAAY,UAA0B;AAC7C,QAAM,OAAOC,QAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACtE,SAAO,KAAK,MAAM,GAAG,mBAAmB;AAC1C;AAGA,SAAS,aAAa,UAA0B;AAC9C,SAAO,GAAG,oBAAoB,IAAI,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,qBAA6B;AACpC,QAAM,WAAW,QAAQ,IAAI,wBAAwB,KAAK;AAC1D,MAAI,SAAU,QAAO;AACrB,SAAOC,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI;AACxE;AAEO,SAAS,wBAAgC;AAC9C,MAAI,MAA8C;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,mBAAmB;AACvC,QAAM,iBAAiB;AAAA,IACrBA,MAAK,KAAK,aAAa,cAAc;AAAA,IACrCA,MAAK,KAAKA,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,cAAc;AAAA,EAC5F;AAEA,aAAW,iBAAiB,gBAAgB;AAC1C,QAAI,CAACC,IAAG,WAAW,aAAa,EAAG;AACnC,UAAM,cAAc,KAAK,MAAMA,IAAG,aAAa,eAAe,OAAO,CAAC;AACtE,QAAI,YAAY,QAAS,QAAO,YAAY;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,uBAA+B;AACtC,SAAO,OAAO,cAAc;AAC9B;AAiBA,SAAS,uBAAuB,UAA0B;AACxD,SAAO,uBAAuB,UAAU,gBAAgB,gBAAgB;AAC1E;AAEA,SAAS,+BAAuC;AAC9C,SAAO,sBAAsB,wBAAwB,gBAAgB;AACvE;AAEA,SAAS,iBAAiB,UAA0B;AAClD,SAAOD,MAAK,KAAK,UAAU,gBAAgB,eAAe;AAC5D;AAEA,SAAS,uBAAuB,UAA0B;AACxD,SAAOA,MAAK,KAAK,UAAU,sBAAsB;AACnD;AAEA,SAAS,iBAAiB,UAAkB,QAA+B;AACzE,kBAAgB,uBAAuB,QAAQ,GAAG,MAAM;AAC1D;AAEA,SAAS,uBAAuB,UAAwB;AACtD,QAAM,kBAAkB,uBAAuB,QAAQ;AACvD,QAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,MAAI,CAACC,IAAG,WAAW,eAAe,KAAKA,IAAG,WAAW,aAAa,EAAG;AAErE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;AAC7D,EAAAC,IAAG,WAAW,iBAAiB,aAAa;AAC9C;AAEA,SAAS,gBAAgB,UAA0C;AACjE,QAAM,SAAS,eAAgC,uBAAuB,QAAQ,CAAC;AAC/E,MAAI,QAAQ;AACV,2BAAuB,QAAQ;AAC/B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,eAAsC,6BAA6B,CAAC;AACzF,MAAI,CAAC,aAAc,QAAO;AAC1B,MAAI,aAAa,aAAa,aAAa,cAAc,SAAU,QAAO;AAE1E,QAAM,WAA4B;AAAA,IAChC,aAAa,aAAa;AAAA,IAC1B,YAAY,aAAa;AAAA,IACzB,iBAAiB,aAAa;AAAA,IAC9B,YAAY,aAAa;AAAA,IACzB,eAAe,aAAa;AAAA,IAC5B,gBAAgB,aAAa,kBAAkB;AAAA,EACjD;AACA,mBAAiB,UAAU,QAAQ;AACnC,MAAI,aAAa,QAAS,aAAY,UAAU,qBAAqB,aAAa,OAAO;AACzF,MAAI,aAAa,UAAW,aAAY,UAAU,uBAAuB,aAAa,SAAS;AAC/F,yBAAuB,QAAQ;AAC/B,SAAO;AACT;AAqCA,SAAS,SAAS,MAAgB,SAAoC;AACpE,SAAO,YAAY,MAAM,EAAE,KAAK,SAAS,KAAK,WAAW,4BAA4B,CAAC;AACxF;AAGA,SAAS,qBAA6B;AACpC,QAAM,OAAO,mBAAmB;AAChC,QAAM,WAAWC,MAAK,KAAK,MAAM,QAAQ,iBAAiB;AAC1D,MAAIC,IAAG,WAAW,QAAQ,EAAG,QAAO;AACpC,QAAM,UAAUD,MAAK,KAAK,MAAM,iBAAiB;AACjD,MAAIC,IAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,IAAI,MAAM,eAAe,iBAAiB,qDAAgD;AAClG;AAMA,SAAS,iBAAiB,UAAkB,MAAc,MAAsB;AAC9E,QAAM,SAAS,mBAAmB;AAClC,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,OAAO,aAAa,QAAQ;AAClC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX;AAAA,IACA,OAAO;AAAA,IACP,aAAa,CAAC;AAAA,MACZ,UAAU;AAAA,MACV,YAAY;AAAA,QACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,IAAI,GAAG;AAAA,QAC1D,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,IAAI,GAAG;AAAA,QACtE,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,IAAI,WAAW;AAAA,QAC9E,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,QAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,IACD,sBAAsB,8BAA8B;AAAA,EACtD,CAAC;AACH;AAGA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,iBAAiB,MAAc;AACnC,UAAM,aAAa,SAAS,CAAC,MAAM,aAAa,MAAM,CAAC;AACvD,UAAM,aAAa,iBAAiB,UAAU;AAE9C,UAAM,YAAY,CAAC,MAAc,EAAE,QAAQ,SAAS,EAAE;AACtD,UAAM,SAAS,UAAU,MAAM;AAC/B,UAAM,WAAW,WAAW,KAAK,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,UAAU,UAAU,GAAG,KAAK,EAAE,SAAS,MAAM,CAAC;AAC/G,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iBAAiB,MAAM,0BAA0B,WAAW,MAAM,aAAa;AAC9G,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,SAAS,SAAS,CAAC,MAAM,aAAa,UAAU,MAAM,CAAC;AAC7D,WAAO,mBAAmB,MAAM;AAAA,EAElC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,YAAY,GAAG;AACtG,aAAO,eAAe;AAAA,IACxB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,wBAAwB,WAAmB,QAAiC;AACzF,QAAM,WAAW,MAAM,MAAM,GAAG,SAAS,eAAe;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,MAAM;AAAA,MAC/B,gBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,IAAI,MAAM,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1F;AACA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,KAAK,OAAO;AACf,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,SAAO,KAAK;AACd;AAMA,eAAsB,SAAS,UAAiC;AAC9D,UAAQ,IAAI,4CAA4C;AAGxD,MAAI;AACF,UAAM,UAAU,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK;AAC7C,YAAQ,IAAI,aAAa,OAAO,EAAE;AAAA,EACpC,QAAQ;AACN,YAAQ,MAAM,yEAAyE;AACvF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI;AACF,aAAS,CAAC,QAAQ,CAAC;AACnB,YAAQ,IAAI,uBAAuB;AAAA,EACrC,QAAQ;AACN,YAAQ,MAAM,+DAA+D;AAC7E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,aAAa,QAAQ;AAClC,UAAQ,IAAI,kBAAkB,IAAI;AAAA,CAAI;AAGtC,UAAQ,IAAI,yBAAyB;AACrC,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC;AAChD,WAAO,UAAU,QAAQ;AACzB,YAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,GAAG;AACrC,cAAQ,IAAI,8CAA8C;AAC1D,YAAM,aAAa,SAAS,CAAC,MAAM,QAAQ,QAAQ,CAAC;AACpD,YAAM,YAAY,KAAK,MAAM,UAAU;AACvC,YAAM,WAAW,UAAU,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI;AACxD,UAAI,CAAC,UAAU;AACb,gBAAQ,MAAM,gBAAgB,IAAI,8CAA8C;AAChF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,SAAS;AAChB,cAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,IAC9C,OAAO;AACL,cAAQ,MAAM,iCAAiC,MAAM,EAAE;AACvD,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,6BAA6B;AACzC,MAAI;AACF,aAAS,CAAC,aAAa,UAAU,GAAG,IAAI,YAAY,gBAAgB,sBAAsB,YAAY,gBAAgB,CAAC;AACvH,YAAQ,IAAI,2BAA2B;AAAA,EACzC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,gBAAgB,GAAG;AAC1E,cAAQ,IAAI,2CAA2C;AAAA,IACzD,OAAO;AACL,cAAQ,MAAM,qCAAqC,MAAM,EAAE;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,sCAAsC;AAClD,MAAI;AACJ,MAAI;AACF,WAAO,kBAAkB,IAAI;AAC7B,YAAQ,IAAI,uBAAuB,IAAI;AAAA,CAAI;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAmC,IAAc,OAAO,EAAE;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,SAASC,QAAO,YAAY,aAAa,EAAE,SAAS,KAAK;AAG/D,UAAQ,IAAI,gCAAgC;AAC5C,QAAM,YAAY,iBAAiB,UAAU,MAAM,IAAI;AAGvD,UAAQ,IAAI,2BAA2B;AACvC,MAAI;AACF,gBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,IAAI,GAAG;AAAA,MAClE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,WAAW;AAAA,IACb,CAAC;AACD,YAAQ,IAAI,cAAc;AAAA,EAC5B,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAkC,IAAc,OAAO,EAAE;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,qBAAqB;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,gBAAY,eAAe,YAAY;AACvC,YAAQ,IAAI,oBAAoB,SAAS;AAAA,CAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA6B,IAAc,OAAO,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,+BAA+B;AAC3C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,0BAA4B;AAClE,UAAM,mBAAmB,MAAM,aAAa,QAAQ;AACpD,UAAM,MAAM,GAAG,SAAS,WAAW;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,MACnF,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAAA,QAChD,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AACD,YAAQ,IAAI,qBAAqB;AAAA,EACnC,QAAQ;AACN,YAAQ,IAAI,mDAAmD;AAAA,EACjE;AAEA,MAAI,WAA0B;AAC9B,MAAI;AACF,eAAW,MAAM,wBAAwB,WAAW,MAAM;AAAA,EAC5D,QAAQ;AAAA,EAER;AAGA,mBAAiB,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY;AAAA,EACd,CAAC;AACD,cAAY,UAAU,qBAAqB,MAAM;AACjD,MAAI,SAAU,aAAY,UAAU,uBAAuB,QAAQ;AACnE,mBAAiB,UAAU;AAAA,IACzB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,sBAAsB;AAAA,IACvC,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC,gBAAgB;AAAA,EAClB,CAAC;AAED,UAAQ,IAAI,yBAAyB;AACrC,UAAQ,IAAI,cAAc,SAAS,EAAE;AACrC,UAAQ,IAAI,cAAc,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,EAAE;AACpE,MAAI,UAAU;AACZ,YAAQ,IAAI,cAAc,SAAS,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,EAAE;AAAA,EAC1E;AACA,UAAQ,IAAI,iEAAiE;AAC/E;AAiBO,SAAS,cAAc,UAAiC;AAC7D,QAAM,SAAS,WAAW,QAAQ;AAClC,MAAI,CAAC,OAAO,KAAK,YAAY;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,+CAA+C;AAAA,EACjF;AAEA,yBAAuB,QAAQ;AAC/B,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,WAAWF,MAAK,KAAK,WAAW,eAAe;AAErD,MAAI,CAACC,IAAG,WAAW,QAAQ,GAAG;AAC5B,WAAO,EAAE,SAAS,OAAO,OAAO,qDAAqD;AAAA,EACvF;AAGA,QAAM,eAAeA,IAAG,aAAa,UAAU,OAAO;AACtD,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,yBAAyB;AACtD,WAAO,EAAE,SAAS,OAAO,OAAO,gFAAgF;AAAA,EAClH;AACA,QAAM,OAAO,QAAQ,CAAC;AAEtB,QAAM,YAAY,aAAa,MAAM,wBAAwB;AAC7D,QAAM,cAAc,aAAa,MAAM,+BAA+B;AACtE,QAAM,iBAAiB,aAAa,MAAM,4BAA4B;AACtE,QAAM,aAAa,YAAY,CAAC,KAAK,aAAa,QAAQ;AAG1D,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI;AACJ,MAAI,SAAS;AACX,WAAO,QAAQ,CAAC;AAAA,EAClB,OAAO;AACL,QAAI;AACF,aAAO,kBAAkB,UAAU;AAAA,IACrC,SAAS,KAAK;AACZ,aAAO,EAAE,SAAS,OAAO,OAAO,qCAAsC,IAAc,OAAO,GAAG;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACF,uBAAmB;AAAA,MACjB,WAAW,mBAAmB;AAAA,MAC9B;AAAA,MACA,aAAa,CAAC;AAAA,QACZ,UAAU;AAAA,QACV,YAAY;AAAA,UACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,UAAU,GAAG;AAAA,UAChE,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,cAAc,CAAC,KAAK,UAAU,GAAG;AAAA,UAChG,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,iBAAiB,CAAC,KAAK,GAAG,UAAU,UAAU,GAAG;AAAA,UAChH,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,UAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,QAC5G;AAAA,MACF,CAAC;AAAA,MACD,sBAAsB,8BAA8B;AAAA,IACtD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,0CAA2C,IAAc,OAAO,GAAG;AAAA,EACrG;AAGA,QAAM,UAAU,YAAY,QAAQ;AACpC,QAAM,SAAS,QAAQ,mBAAmB;AAC1C,MAAI,QAAQ;AACV,QAAI;AACF,kBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,UAAU,GAAG;AAAA,QACxE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,UAAM,YAAY,eAAe,YAAY;AAC7C,UAAM,UAAU,sBAAsB;AAEtC,qBAAiB,UAAU;AAAA,MACzB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,cAAc,gBAAgB,QAAQ;AAC5C,QAAI,aAAa;AACf,uBAAiB,UAAU;AAAA,QACzB,GAAG;AAAA,QACH,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,iBAAiB;AAAA,QACjB,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,YAAY,WAAW,QAAQ;AAAA,EACzD,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA6B,IAAc,OAAO,GAAG;AAAA,EACvF;AACF;AAMA,eAAsB,YAAY,UAAiC;AACjE,UAAQ,IAAI,iCAAiC;AAC7C,QAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,CAAC,OAAO,SAAS;AACnB,YAAQ,MAAM,OAAO,KAAK;AAC1B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,OAAO,UAAU,EAAE;AACnD,UAAQ,IAAI,YAAY,OAAO,OAAO,EAAE;AACxC,UAAQ,IAAI,qBAAqB;AACnC;","names":["crypto","fs","path","fs","path","fs","path","path","fs","crypto","path","fs","path","fs","crypto"]}

package/dist/{chunk-KSXTNYXO.js → chunk-PMT2LSTQ.js}

@@ -3,7 +3,7 @@ import {
   DAEMON_CLIENT_TIMEOUT_MS,
   EMBEDDING_REQUEST_TIMEOUT_MS,
   LLM_REQUEST_TIMEOUT_MS
-} from "./chunk-W4VHC2ES.js";
+} from "./chunk-I54KLC6H.js";
 
 // src/intelligence/ollama.ts
 var ENDPOINT_GENERATE = "/api/generate";
@@ -325,4 +325,4 @@ export {
   OllamaBackend,
   LmStudioBackend
 };
-//# sourceMappingURL=chunk-KSXTNYXO.js.map
+//# sourceMappingURL=chunk-PMT2LSTQ.js.map

package/dist/{chunk-AELJ4PS5.js → chunk-Q4QD6LJT.js}

@@ -11,7 +11,7 @@ import {
   SCHEDULABLE_POWER_STATES,
   USER_TASK_SOURCE,
   epochSeconds
-} from "./chunk-W4VHC2ES.js";
+} from "./chunk-I54KLC6H.js";
 import {
   require_dist
 } from "./chunk-6LQIMRTC.js";
@@ -464,7 +464,7 @@ async function registerBuiltInAgentsAndTasks(definitionsDir, vaultDir) {
     ).run(BUILT_IN_SOURCE, definition.name, ...validTaskIds);
   }
   if (vaultDir) {
-    const { loadAllTasks } = await import("./registry-X5FDGYXT.js");
+    const { loadAllTasks } = await import("./registry-OCM4WAPJ.js");
     const allTasks = loadAllTasks(definitionsDir, vaultDir);
     for (const [name, task] of allTasks) {
       if (task.source === USER_TASK_SOURCE) {
@@ -492,10 +492,10 @@ async function registerBuiltInAgentsAndTasks(definitionsDir, vaultDir) {
 }
 
 export {
-  registerAgent,
-  getAgent,
   getTask,
   getDefaultTask,
+  registerAgent,
+  getAgent,
   AgentTaskSchema,
   resolveDefinitionsDir,
   loadAgentDefinition,
@@ -505,4 +505,4 @@ export {
   resolveEffectiveConfig,
   registerBuiltInAgentsAndTasks
 };
-//# sourceMappingURL=chunk-AELJ4PS5.js.map
+//# sourceMappingURL=chunk-Q4QD6LJT.js.map

package/dist/{chunk-2OO3BRFK.js → chunk-Q6OEZM3S.js}

@@ -2,7 +2,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   getTeamMachineId,
   syncRow
-} from "./chunk-INWD6AIQ.js";
+} from "./chunk-AULBWINA.js";
 import {
   getDatabase
 } from "./chunk-MYX5NCRH.js";
@@ -153,6 +153,9 @@ function buildSessionsWhere(options) {
     conditions.push("created_at > ?");
     params.push(options.since);
   }
+  if (options.includeActive === false && options.status === void 0) {
+    conditions.push(`status != 'active'`);
+  }
   return {
     where: conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "",
     params
@@ -181,6 +184,25 @@ function countSessions(options = {}) {
   ).get(...params);
   return row.count;
 }
+function getActiveSessionIds() {
+  const db = getDatabase();
+  const rows = db.prepare(
+    `SELECT id FROM sessions WHERE status = 'active'`
+  ).all();
+  return new Set(rows.map((r) => r.id));
+}
+function reactivateSessionIfCompleted(id) {
+  const db = getDatabase();
+  const info = db.prepare(
+    `UPDATE sessions SET status = 'active' WHERE id = ? AND status = 'completed'`
+  ).run(id);
+  if (info.changes === 0) return false;
+  const row = db.prepare(
+    `SELECT ${SELECT_COLUMNS} FROM sessions WHERE id = ?`
+  ).get(id);
+  if (row) syncRow("sessions", toSessionRow(row));
+  return true;
+}
 function updateSession(id, updates) {
   const db = getDatabase();
   const setClauses = [];
@@ -310,10 +332,12 @@ export {
   getSession,
   listSessions,
   countSessions,
+  getActiveSessionIds,
+  reactivateSessionIfCompleted,
   updateSession,
   incrementSessionToolCount,
   closeSession,
   getSessionImpact,
   deleteSessionCascade
 };
-//# sourceMappingURL=chunk-2OO3BRFK.js.map
+//# sourceMappingURL=chunk-Q6OEZM3S.js.map

package/dist/chunk-Q6OEZM3S.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/queries/sessions.ts"],"sourcesContent":["/**\n * Session CRUD query helpers.\n *\n * All functions obtain the SQLite instance internally via `getDatabase()`.\n * Queries use positional `?` placeholders throughout (better-sqlite3).\n */\n\nimport { getDatabase } from '@myco/db/client.js';\nimport { getTeamMachineId } from '@myco/daemon/team-context.js';\nimport { syncRow } from '@myco/db/queries/team-outbox.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Default number of sessions returned by listSessions when no limit given. */\nconst DEFAULT_LIST_LIMIT = 100;\n\n/** Session status value when a session is closed normally. */\nconst STATUS_COMPLETED = 'completed';\n\n/** Default session status for new sessions. */\nconst DEFAULT_STATUS = 'active';\n\n/** Default prompt count for new sessions. */\nconst DEFAULT_PROMPT_COUNT = 0;\n\n/** Default tool count for new sessions. */\nconst DEFAULT_TOOL_COUNT = 0;\n\n/** Default processed flag for new sessions. */\nconst DEFAULT_PROCESSED = 0;\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\n/** Fields required (or optional) when inserting/upserting a session. */\nexport interface SessionInsert {\n  id: string;\n  agent: string;\n  started_at: number;\n  created_at: number;\n  user?: string | null;\n  project_root?: string | null;\n  branch?: string | null;\n  ended_at?: number | null;\n  status?: string;\n  prompt_count?: number;\n  tool_count?: number;\n  title?: string | null;\n  summary?: string | null;\n  transcript_path?: string | null;\n  parent_session_id?: string | null;\n  parent_session_reason?: string | null;\n  processed?: number;\n  content_hash?: string | null;\n  machine_id?: string;\n}\n\n/** Row shape returned from session queries (all columns). */\nexport interface SessionRow {\n  id: string;\n  agent: string;\n  user: string | null;\n  project_root: string | null;\n  branch: string | null;\n  started_at: number;\n  ended_at: number | null;\n  status: string;\n  prompt_count: number;\n  tool_count: number;\n  title: string | null;\n  summary: string | null;\n  transcript_path: string | null;\n  parent_session_id: string | null;\n  parent_session_reason: string | null;\n  processed: number;\n  content_hash: string | null;\n  embedded: number;\n  created_at: number;\n  machine_id: string;\n  synced_at: number | null;\n}\n\n/** Updatable fields for `updateSession`. */\nexport interface SessionUpdate {\n  agent?: string;\n  user?: string | null;\n  project_root?: string | null;\n  branch?: string | null;\n  ended_at?: number | null;\n  status?: string;\n  prompt_count?: number;\n  tool_count?: number;\n  title?: string | null;\n  summary?: string | null;\n  transcript_path?: string | null;\n  parent_session_id?: string | null;\n  parent_session_reason?: string | null;\n  processed?: number;\n  content_hash?: string | null;\n}\n\n/** Filter options for `listSessions`. */\nexport interface ListSessionsOptions {\n  limit?: number;\n  offset?: number;\n  status?: string;\n  agent?: string;\n  search?: string;\n  /** Only return sessions created after this epoch-seconds timestamp. */\n  since?: number;\n  /**\n   * When explicitly `false` and no `status` filter is set, exclude sessions\n   * still in `status = 'active'` — intelligence-task reads opt in to this.\n   * Defaults permissive so UI listings keep showing in-flight sessions.\n   */\n  includeActive?: boolean;\n}\n\n// ---------------------------------------------------------------------------\n// Column list\n// ---------------------------------------------------------------------------\n\nconst SESSION_COLUMNS = [\n  'id',\n  'agent',\n  '\"user\"',\n  'project_root',\n  'branch',\n  'started_at',\n  'ended_at',\n  'status',\n  'prompt_count',\n  'tool_count',\n  'title',\n  'summary',\n  'transcript_path',\n  'parent_session_id',\n  'parent_session_reason',\n  'processed',\n  'content_hash',\n  'embedded',\n  'created_at',\n  'machine_id',\n  'synced_at',\n] as const;\n\nconst SELECT_COLUMNS = SESSION_COLUMNS.join(', ');\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Normalize a SQLite result row into a typed SessionRow.\n *\n * The quoted \"user\" column comes back as `user` in the result object.\n */\nfunction toSessionRow(row: Record<string, unknown>): SessionRow {\n  return {\n    id: row.id as string,\n    agent: row.agent as string,\n    user: (row.user as string) ?? null,\n    project_root: (row.project_root as string) ?? null,\n    branch: (row.branch as string) ?? null,\n    started_at: row.started_at as number,\n    ended_at: (row.ended_at as number) ?? null,\n    status: row.status as string,\n    prompt_count: row.prompt_count as number,\n    tool_count: row.tool_count as number,\n    title: (row.title as string) ?? null,\n    summary: (row.summary as string) ?? null,\n    transcript_path: (row.transcript_path as string) ?? null,\n    parent_session_id: (row.parent_session_id as string) ?? null,\n    parent_session_reason: (row.parent_session_reason as string) ?? null,\n    processed: row.processed as number,\n    content_hash: (row.content_hash as string) ?? null,\n    embedded: (row.embedded as number) ?? 0,\n    created_at: row.created_at as number,\n    machine_id: (row.machine_id as string) ?? 'local',\n    synced_at: (row.synced_at as number) ?? null,\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Insert a session or update it if the id already exists.\n *\n * On conflict the row is updated with the values from `data`, preserving\n * any columns not supplied via COALESCE with EXCLUDED values.\n */\nexport function upsertSession(data: SessionInsert): SessionRow {\n  const db = getDatabase();\n\n  db.prepare(\n    `INSERT INTO sessions (\n       id, agent, \"user\", project_root, branch,\n       started_at, ended_at, status, prompt_count, tool_count,\n       title, summary, transcript_path,\n       parent_session_id, parent_session_reason,\n       processed, content_hash, created_at, machine_id\n     ) VALUES (\n       ?, ?, ?, ?, ?,\n       ?, ?, ?, ?, ?,\n       ?, ?, ?,\n       ?, ?,\n       ?, ?, ?, ?\n     )\n     ON CONFLICT (id) DO UPDATE SET\n       agent                 = EXCLUDED.agent,\n       \"user\"                = EXCLUDED.\"user\",\n       project_root          = EXCLUDED.project_root,\n       branch                = EXCLUDED.branch,\n       started_at            = EXCLUDED.started_at,\n       ended_at              = COALESCE(EXCLUDED.ended_at, sessions.ended_at),\n       status                = COALESCE(EXCLUDED.status, sessions.status),\n       prompt_count          = CASE WHEN ? THEN EXCLUDED.prompt_count ELSE sessions.prompt_count END,\n       tool_count            = CASE WHEN ? THEN EXCLUDED.tool_count ELSE sessions.tool_count END,\n       title                 = COALESCE(EXCLUDED.title, sessions.title),\n       summary               = COALESCE(EXCLUDED.summary, sessions.summary),\n       transcript_path       = COALESCE(EXCLUDED.transcript_path, sessions.transcript_path),\n       parent_session_id     = EXCLUDED.parent_session_id,\n       parent_session_reason = EXCLUDED.parent_session_reason,\n       processed             = COALESCE(EXCLUDED.processed, sessions.processed),\n       content_hash          = EXCLUDED.content_hash`,\n  ).run(\n    data.id,\n    data.agent,\n    data.user ?? null,\n    data.project_root ?? null,\n    data.branch ?? null,\n    data.started_at,\n    data.ended_at ?? null,\n    data.status ?? DEFAULT_STATUS,\n    data.prompt_count ?? DEFAULT_PROMPT_COUNT,\n    data.tool_count ?? DEFAULT_TOOL_COUNT,\n    data.title ?? null,\n    data.summary ?? null,\n    data.transcript_path ?? null,\n    data.parent_session_id ?? null,\n    data.parent_session_reason ?? null,\n    data.processed ?? DEFAULT_PROCESSED,\n    data.content_hash ?? null,\n    data.created_at,\n    data.machine_id ?? getTeamMachineId(),\n    data.prompt_count !== undefined ? 1 : 0,\n    data.tool_count !== undefined ? 1 : 0,\n  );\n\n  const row = toSessionRow(\n    db.prepare(`SELECT ${SELECT_COLUMNS} FROM sessions WHERE id = ?`).get(data.id) as Record<string, unknown>,\n  );\n\n  syncRow('sessions', row);\n\n  return row;\n}\n\n/**\n * Retrieve a single session by id.\n *\n * @returns the session row, or null if not found.\n */\nexport function getSession(id: string): SessionRow | null {\n  const db = getDatabase();\n\n  const row = db.prepare(\n    `SELECT ${SELECT_COLUMNS} FROM sessions WHERE id = ?`,\n  ).get(id) as Record<string, unknown> | undefined;\n\n  if (!row) return null;\n  return toSessionRow(row);\n}\n\n/** Build WHERE clause and bound params from session filter options. */\nfunction buildSessionsWhere(\n  options: Omit<ListSessionsOptions, 'limit' | 'offset'>,\n): { where: string; params: unknown[] } {\n  const conditions: string[] = [];\n  const params: unknown[] = [];\n\n  if (options.status !== undefined) {\n    conditions.push(`status = ?`);\n    params.push(options.status);\n  }\n\n  if (options.agent !== undefined) {\n    conditions.push(`agent = ?`);\n    params.push(options.agent);\n  }\n\n  if (options.search !== undefined && options.search.length > 0) {\n    conditions.push(`(title LIKE ? OR id LIKE ?)`);\n    const pattern = `%${options.search}%`;\n    params.push(pattern, pattern);\n  }\n  if (options.since !== undefined) {\n    conditions.push('created_at > ?');\n    params.push(options.since);\n  }\n\n  // Exclude active sessions only when the caller explicitly opts in and\n  // hasn't already constrained `status`. Intelligence-task reads set this\n  // to avoid picking up in-flight work; UI/CLI leave it unset.\n  if (options.includeActive === false && options.status === undefined) {\n    conditions.push(`status != 'active'`);\n  }\n\n  return {\n    where: conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '',\n    params,\n  };\n}\n\n/**\n * List sessions with optional filters, ordered by created_at DESC.\n */\nexport function listSessions(\n  options: ListSessionsOptions = {},\n): SessionRow[] {\n  const db = getDatabase();\n  const { where, params } = buildSessionsWhere(options);\n  const limit = options.limit ?? DEFAULT_LIST_LIMIT;\n  const offset = options.offset ?? 0;\n\n  const rows = db.prepare(\n    `SELECT ${SELECT_COLUMNS}\n     FROM sessions\n     ${where}\n     ORDER BY created_at DESC\n     LIMIT ?\n     OFFSET ?`,\n  ).all(...params, limit, offset) as Record<string, unknown>[];\n\n  return rows.map(toSessionRow);\n}\n\n/**\n * Count sessions matching optional filters (for pagination totals).\n */\nexport function countSessions(\n  options: Omit<ListSessionsOptions, 'limit' | 'offset'> = {},\n): number {\n  const db = getDatabase();\n  const { where, params } = buildSessionsWhere(options);\n\n  const row = db.prepare(\n    `SELECT COUNT(*) as count FROM sessions ${where}`,\n  ).get(...params) as { count: number };\n\n  return row.count;\n}\n\n/**\n * Return the set of session IDs currently in `status = 'active'`.\n *\n * Used by the semantic-search path, which can't apply a SQL join against\n * session status (the vector store is a separate concern), so it filters\n * results in-memory against this set instead. Bounded by the number of\n * concurrent in-flight sessions — typically small.\n */\nexport function getActiveSessionIds(): Set<string> {\n  const db = getDatabase();\n  const rows = db.prepare(\n    `SELECT id FROM sessions WHERE status = 'active'`,\n  ).all() as Array<{ id: string }>;\n  return new Set(rows.map((r) => r.id));\n}\n\n/**\n * Flip a session back to `status = 'active'` if it's currently `'completed'`.\n *\n * Called on live user activity (`user_prompt` events) so a session that was\n * auto-completed by the stale sweep or manually completed via the API snaps\n * back to active transparently when the user resumes. No-op for sessions\n * that are already active or don't exist.\n *\n * The `ended_at` column is intentionally preserved — it records the most\n * recent completion time, and the next completion will overwrite it.\n *\n * @returns true if a row was updated (session was completed and is now active)\n */\nexport function reactivateSessionIfCompleted(id: string): boolean {\n  const db = getDatabase();\n  const info = db.prepare(\n    `UPDATE sessions SET status = 'active' WHERE id = ? AND status = 'completed'`,\n  ).run(id);\n  if (info.changes === 0) return false;\n\n  const row = db.prepare(\n    `SELECT ${SELECT_COLUMNS} FROM sessions WHERE id = ?`,\n  ).get(id) as Record<string, unknown> | undefined;\n  if (row) syncRow('sessions', toSessionRow(row));\n\n  return true;\n}\n\n/**\n * Update specific fields on an existing session.\n *\n * @returns the updated row, or null if the session does not exist.\n */\nexport function updateSession(\n  id: string,\n  updates: SessionUpdate,\n): SessionRow | null {\n  const db = getDatabase();\n\n  const setClauses: string[] = [];\n  const params: unknown[] = [];\n\n  const fieldMap: Record<string, string> = {\n    agent: 'agent',\n    user: '\"user\"',\n    project_root: 'project_root',\n    branch: 'branch',\n    ended_at: 'ended_at',\n    status: 'status',\n    prompt_count: 'prompt_count',\n    tool_count: 'tool_count',\n    title: 'title',\n    summary: 'summary',\n    transcript_path: 'transcript_path',\n    parent_session_id: 'parent_session_id',\n    parent_session_reason: 'parent_session_reason',\n    processed: 'processed',\n    content_hash: 'content_hash',\n  };\n\n  for (const [key, column] of Object.entries(fieldMap)) {\n    if (key in updates) {\n      setClauses.push(`${column} = ?`);\n      params.push((updates as Record<string, unknown>)[key] ?? null);\n    }\n  }\n\n  if (setClauses.length === 0) return getSession(id);\n\n  params.push(id);\n\n  db.prepare(\n    `UPDATE sessions\n     SET ${setClauses.join(', ')}\n     WHERE id = ?`,\n  ).run(...params);\n\n  const updated = getSession(id);\n\n  if (updated) syncRow('sessions', updated);\n\n  return updated;\n}\n\n/**\n * Atomically increment tool_count for a session.\n *\n * Uses SQL `tool_count + 1` to avoid read-modify-write races.\n */\nexport function incrementSessionToolCount(id: string): void {\n  const db = getDatabase();\n  db.prepare(\n    `UPDATE sessions SET tool_count = COALESCE(tool_count, 0) + 1 WHERE id = ?`,\n  ).run(id);\n}\n\n/**\n * Close a session — set status to 'completed' and record the end time.\n *\n * @returns the updated row, or null if the session does not exist.\n */\nexport function closeSession(\n  id: string,\n  endedAt: number,\n): SessionRow | null {\n  const db = getDatabase();\n\n  db.prepare(\n    `UPDATE sessions\n     SET status = ?, ended_at = ?\n     WHERE id = ?`,\n  ).run(STATUS_COMPLETED, endedAt, id);\n\n  const closed = getSession(id);\n\n  if (closed) syncRow('sessions', closed);\n\n  return closed;\n}\n\n/**\n * Delete a session and all its child rows (batches, activities, attachments).\n *\n * No ON DELETE CASCADE in the schema, so we delete children first.\n * Returns true if the session existed and was deleted.\n */\nexport function deleteSession(id: string): boolean {\n  const db = getDatabase();\n\n  db.prepare(`DELETE FROM activities WHERE session_id = ?`).run(id);\n  db.prepare(`DELETE FROM attachments WHERE session_id = ?`).run(id);\n  db.prepare(`DELETE FROM prompt_batches WHERE session_id = ?`).run(id);\n  const info = db.prepare(`DELETE FROM sessions WHERE id = ?`).run(id);\n\n  return info.changes > 0;\n}\n\n// ---------------------------------------------------------------------------\n// Cascade delete + impact query\n// ---------------------------------------------------------------------------\n\n/** Counts of related data that would be affected by a session delete. */\nexport interface SessionImpact {\n  promptCount: number;\n  sporeCount: number;\n  attachmentCount: number;\n  graphEdgeCount: number;\n}\n\n/** Result of a cascade delete operation. */\nexport interface DeleteCascadeResult {\n  deleted: boolean;\n  counts: {\n    prompts: number;\n    spores: number;\n    attachments: number;\n    graphEdges: number;\n    resolutionEvents: number;\n  };\n  /** Spore IDs that were deleted (needed for vault file + vector cleanup). */\n  deletedSporeIds: string[];\n  /** Attachment file paths that were deleted from DB (needed for disk cleanup). */\n  deletedAttachmentPaths: string[];\n}\n\n/**\n * Get counts of all data related to a session, for pre-delete impact display.\n */\nexport function getSessionImpact(sessionId: string): SessionImpact {\n  const db = getDatabase();\n\n  const row = db.prepare(\n    `SELECT\n       (SELECT COUNT(*) FROM prompt_batches WHERE session_id = ?) AS promptCount,\n       (SELECT COUNT(*) FROM spores WHERE session_id = ?) AS sporeCount,\n       (SELECT COUNT(*) FROM attachments WHERE session_id = ?) AS attachmentCount,\n       (SELECT COUNT(*) FROM graph_edges WHERE session_id = ?) AS graphEdgeCount`,\n  ).get(sessionId, sessionId, sessionId, sessionId) as SessionImpact;\n\n  return row;\n}\n\n/**\n * Delete a session and ALL related data in a single transaction.\n *\n * Returns counts of deleted rows and IDs needed for post-transaction\n * cleanup (vault files, embedding vectors).\n */\nexport function deleteSessionCascade(sessionId: string): DeleteCascadeResult {\n  const db = getDatabase();\n\n  const zeroCounts: DeleteCascadeResult = {\n    deleted: false,\n    counts: { prompts: 0, spores: 0, attachments: 0, graphEdges: 0, resolutionEvents: 0 },\n    deletedSporeIds: [],\n    deletedAttachmentPaths: [],\n  };\n\n  // Check session exists first\n  const exists = db.prepare(`SELECT id FROM sessions WHERE id = ?`).get(sessionId);\n  if (!exists) return zeroCounts;\n\n  // Collect IDs/paths needed for post-transaction cleanup before deleting.\n  // Spores can reference prompt_batches from a different session (cross-session\n  // spore linkage), so we must also collect spores linked via prompt_batch_id.\n  const sporeIds = (db.prepare(\n    `SELECT id FROM spores\n     WHERE session_id = ?\n        OR prompt_batch_id IN (SELECT id FROM prompt_batches WHERE session_id = ?)`,\n  ).all(sessionId, sessionId) as { id: string }[]).map((r) => r.id);\n\n  const attachmentPaths = (db.prepare(\n    `SELECT file_path FROM attachments WHERE session_id = ?`,\n  ).all(sessionId) as { file_path: string }[]).map((r) => r.file_path);\n\n  // Run all deletes in a single transaction.\n  //\n  // Order matters — foreign_keys = ON is set in client.ts, so every DELETE\n  // is checked immediately. Child rows must be removed before their parents:\n  //   - spores.prompt_batch_id     → prompt_batches(id)   [spores BEFORE prompt_batches]\n  //   - plans.prompt_batch_id      → prompt_batches(id)   [plans BEFORE prompt_batches]\n  //   - resolution_events.spore_id → spores(id)           [resolution_events BEFORE spores]\n  //   - skill_usage.session_id     → sessions(id) NOT NULL\n  //   - plans.session_id           → sessions(id)\n  // resolution_events can reference spores across sessions (e.g. a later\n  // session supersedes an earlier session's spore), so we match by either\n  // session_id OR spore_id-in-this-session to catch cross-session references.\n  //\n  // Spores can also reference prompt_batches from a different session\n  // (cross-session prompt_batch_id linkage). We must delete those spores\n  // BEFORE deleting prompt_batches to avoid FK violations.\n  const result = db.transaction(() => {\n    db.prepare(`DELETE FROM activities WHERE session_id = ?`).run(sessionId);\n    const attachments = db.prepare(`DELETE FROM attachments WHERE session_id = ?`).run(sessionId);\n    db.prepare(`DELETE FROM plans WHERE session_id = ?`).run(sessionId);\n    db.prepare(`DELETE FROM skill_usage WHERE session_id = ?`).run(sessionId);\n    const resEvents = db.prepare(\n      `DELETE FROM resolution_events\n       WHERE session_id = ?\n          OR spore_id IN (\n            SELECT id FROM spores\n            WHERE session_id = ?\n               OR prompt_batch_id IN (SELECT id FROM prompt_batches WHERE session_id = ?)\n          )`,\n    ).run(sessionId, sessionId, sessionId);\n    const edges = db.prepare(`DELETE FROM graph_edges WHERE session_id = ?`).run(sessionId);\n    const spores = db.prepare(\n      `DELETE FROM spores\n       WHERE session_id = ?\n          OR prompt_batch_id IN (SELECT id FROM prompt_batches WHERE session_id = ?)`,\n    ).run(sessionId, sessionId);\n    const prompts = db.prepare(`DELETE FROM prompt_batches WHERE session_id = ?`).run(sessionId);\n    const session = db.prepare(`DELETE FROM sessions WHERE id = ?`).run(sessionId);\n\n    return {\n      deleted: session.changes > 0,\n      counts: {\n        prompts: prompts.changes,\n        spores: spores.changes,\n        attachments: attachments.changes,\n        graphEdges: edges.changes,\n        resolutionEvents: resEvents.changes,\n      },\n    };\n  })();\n\n  return {\n    ...result,\n    deletedSporeIds: sporeIds,\n    deletedAttachmentPaths: attachmentPaths,\n  };\n}\n"],"mappings":";;;;;;;;;;AAgBA,IAAM,qBAAqB;AAG3B,IAAM,mBAAmB;AAGzB,IAAM,iBAAiB;AAGvB,IAAM,uBAAuB;AAG7B,IAAM,qBAAqB;AAG3B,IAAM,oBAAoB;AA8F1B,IAAM,kBAAkB;AAAA,EACtB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,iBAAiB,gBAAgB,KAAK,IAAI;AAWhD,SAAS,aAAa,KAA0C;AAC9D,SAAO;AAAA,IACL,IAAI,IAAI;AAAA,IACR,OAAO,IAAI;AAAA,IACX,MAAO,IAAI,QAAmB;AAAA,IAC9B,cAAe,IAAI,gBAA2B;AAAA,IAC9C,QAAS,IAAI,UAAqB;AAAA,IAClC,YAAY,IAAI;AAAA,IAChB,UAAW,IAAI,YAAuB;AAAA,IACtC,QAAQ,IAAI;AAAA,IACZ,cAAc,IAAI;AAAA,IAClB,YAAY,IAAI;AAAA,IAChB,OAAQ,IAAI,SAAoB;AAAA,IAChC,SAAU,IAAI,WAAsB;AAAA,IACpC,iBAAkB,IAAI,mBAA8B;AAAA,IACpD,mBAAoB,IAAI,qBAAgC;AAAA,IACxD,uBAAwB,IAAI,yBAAoC;AAAA,IAChE,WAAW,IAAI;AAAA,IACf,cAAe,IAAI,gBAA2B;AAAA,IAC9C,UAAW,IAAI,YAAuB;AAAA,IACtC,YAAY,IAAI;AAAA,IAChB,YAAa,IAAI,cAAyB;AAAA,IAC1C,WAAY,IAAI,aAAwB;AAAA,EAC1C;AACF;AAYO,SAAS,cAAc,MAAiC;AAC7D,QAAM,KAAK,YAAY;AAEvB,KAAG;AAAA,IACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8BF,EAAE;AAAA,IACA,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK,QAAQ;AAAA,IACb,KAAK,gBAAgB;AAAA,IACrB,KAAK,UAAU;AAAA,IACf,KAAK;AAAA,IACL,KAAK,YAAY;AAAA,IACjB,KAAK,UAAU;AAAA,IACf,KAAK,gBAAgB;AAAA,IACrB,KAAK,cAAc;AAAA,IACnB,KAAK,SAAS;AAAA,IACd,KAAK,WAAW;AAAA,IAChB,KAAK,mBAAmB;AAAA,IACxB,KAAK,qBAAqB;AAAA,IAC1B,KAAK,yBAAyB;AAAA,IAC9B,KAAK,aAAa;AAAA,IAClB,KAAK,gBAAgB;AAAA,IACrB,KAAK;AAAA,IACL,KAAK,cAAc,iBAAiB;AAAA,IACpC,KAAK,iBAAiB,SAAY,IAAI;AAAA,IACtC,KAAK,eAAe,SAAY,IAAI;AAAA,EACtC;AAEA,QAAM,MAAM;AAAA,IACV,GAAG,QAAQ,UAAU,cAAc,6BAA6B,EAAE,IAAI,KAAK,EAAE;AAAA,EAC/E;AAEA,UAAQ,YAAY,GAAG;AAEvB,SAAO;AACT;AAOO,SAAS,WAAW,IAA+B;AACxD,QAAM,KAAK,YAAY;AAEvB,QAAM,MAAM,GAAG;AAAA,IACb,UAAU,cAAc;AAAA,EAC1B,EAAE,IAAI,EAAE;AAER,MAAI,CAAC,IAAK,QAAO;AACjB,SAAO,aAAa,GAAG;AACzB;AAGA,SAAS,mBACP,SACsC;AACtC,QAAM,aAAuB,CAAC;AAC9B,QAAM,SAAoB,CAAC;AAE3B,MAAI,QAAQ,WAAW,QAAW;AAChC,eAAW,KAAK,YAAY;AAC5B,WAAO,KAAK,QAAQ,MAAM;AAAA,EAC5B;AAEA,MAAI,QAAQ,UAAU,QAAW;AAC/B,eAAW,KAAK,WAAW;AAC3B,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC3B;AAEA,MAAI,QAAQ,WAAW,UAAa,QAAQ,OAAO,SAAS,GAAG;AAC7D,eAAW,KAAK,6BAA6B;AAC7C,UAAM,UAAU,IAAI,QAAQ,MAAM;AAClC,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AACA,MAAI,QAAQ,UAAU,QAAW;AAC/B,eAAW,KAAK,gBAAgB;AAChC,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC3B;AAKA,MAAI,QAAQ,kBAAkB,SAAS,QAAQ,WAAW,QAAW;AACnE,eAAW,KAAK,oBAAoB;AAAA,EACtC;AAEA,SAAO;AAAA,IACL,OAAO,WAAW,SAAS,IAAI,SAAS,WAAW,KAAK,OAAO,CAAC,KAAK;AAAA,IACrE;AAAA,EACF;AACF;AAKO,SAAS,aACd,UAA+B,CAAC,GAClB;AACd,QAAM,KAAK,YAAY;AACvB,QAAM,EAAE,OAAO,OAAO,IAAI,mBAAmB,OAAO;AACpD,QAAM,QAAQ,QAAQ,SAAS;AAC/B,QAAM,SAAS,QAAQ,UAAU;AAEjC,QAAM,OAAO,GAAG;AAAA,IACd,UAAU,cAAc;AAAA;AAAA,OAErB,KAAK;AAAA;AAAA;AAAA;AAAA,EAIV,EAAE,IAAI,GAAG,QAAQ,OAAO,MAAM;AAE9B,SAAO,KAAK,IAAI,YAAY;AAC9B;AAKO,SAAS,cACd,UAAyD,CAAC,GAClD;AACR,QAAM,KAAK,YAAY;AACvB,QAAM,EAAE,OAAO,OAAO,IAAI,mBAAmB,OAAO;AAEpD,QAAM,MAAM,GAAG;AAAA,IACb,0CAA0C,KAAK;AAAA,EACjD,EAAE,IAAI,GAAG,MAAM;AAEf,SAAO,IAAI;AACb;AAUO,SAAS,sBAAmC;AACjD,QAAM,KAAK,YAAY;AACvB,QAAM,OAAO,GAAG;AAAA,IACd;AAAA,EACF,EAAE,IAAI;AACN,SAAO,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;AACtC;AAeO,SAAS,6BAA6B,IAAqB;AAChE,QAAM,KAAK,YAAY;AACvB,QAAM,OAAO,GAAG;AAAA,IACd;AAAA,EACF,EAAE,IAAI,EAAE;AACR,MAAI,KAAK,YAAY,EAAG,QAAO;AAE/B,QAAM,MAAM,GAAG;AAAA,IACb,UAAU,cAAc;AAAA,EAC1B,EAAE,IAAI,EAAE;AACR,MAAI,IAAK,SAAQ,YAAY,aAAa,GAAG,CAAC;AAE9C,SAAO;AACT;AAOO,SAAS,cACd,IACA,SACmB;AACnB,QAAM,KAAK,YAAY;AAEvB,QAAM,aAAuB,CAAC;AAC9B,QAAM,SAAoB,CAAC;AAE3B,QAAM,WAAmC;AAAA,IACvC,OAAO;AAAA,IACP,MAAM;AAAA,IACN,cAAc;AAAA,IACd,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,QAAQ;AAAA,IACR,cAAc;AAAA,IACd,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,SAAS;AAAA,IACT,iBAAiB;AAAA,IACjB,mBAAmB;AAAA,IACnB,uBAAuB;AAAA,IACvB,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAEA,aAAW,CAAC,KAAK,MAAM,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACpD,QAAI,OAAO,SAAS;AAClB,iBAAW,KAAK,GAAG,MAAM,MAAM;AAC/B,aAAO,KAAM,QAAoC,GAAG,KAAK,IAAI;AAAA,IAC/D;AAAA,EACF;AAEA,MAAI,WAAW,WAAW,EAAG,QAAO,WAAW,EAAE;AAEjD,SAAO,KAAK,EAAE;AAEd,KAAG;AAAA,IACD;AAAA,WACO,WAAW,KAAK,IAAI,CAAC;AAAA;AAAA,EAE9B,EAAE,IAAI,GAAG,MAAM;AAEf,QAAM,UAAU,WAAW,EAAE;AAE7B,MAAI,QAAS,SAAQ,YAAY,OAAO;AAExC,SAAO;AACT;AAOO,SAAS,0BAA0B,IAAkB;AAC1D,QAAM,KAAK,YAAY;AACvB,KAAG;AAAA,IACD;AAAA,EACF,EAAE,IAAI,EAAE;AACV;AAOO,SAAS,aACd,IACA,SACmB;AACnB,QAAM,KAAK,YAAY;AAEvB,KAAG;AAAA,IACD;AAAA;AAAA;AAAA,EAGF,EAAE,IAAI,kBAAkB,SAAS,EAAE;AAEnC,QAAM,SAAS,WAAW,EAAE;AAE5B,MAAI,OAAQ,SAAQ,YAAY,MAAM;AAEtC,SAAO;AACT;AAkDO,SAAS,iBAAiB,WAAkC;AACjE,QAAM,KAAK,YAAY;AAEvB,QAAM,MAAM,GAAG;AAAA,IACb;AAAA;AAAA;AAAA;AAAA;AAAA,EAKF,EAAE,IAAI,WAAW,WAAW,WAAW,SAAS;AAEhD,SAAO;AACT;AAQO,SAAS,qBAAqB,WAAwC;AAC3E,QAAM,KAAK,YAAY;AAEvB,QAAM,aAAkC;AAAA,IACtC,SAAS;AAAA,IACT,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,YAAY,GAAG,kBAAkB,EAAE;AAAA,IACpF,iBAAiB,CAAC;AAAA,IAClB,wBAAwB,CAAC;AAAA,EAC3B;AAGA,QAAM,SAAS,GAAG,QAAQ,sCAAsC,EAAE,IAAI,SAAS;AAC/E,MAAI,CAAC,OAAQ,QAAO;AAKpB,QAAM,WAAY,GAAG;AAAA,IACnB;AAAA;AAAA;AAAA,EAGF,EAAE,IAAI,WAAW,SAAS,EAAuB,IAAI,CAAC,MAAM,EAAE,EAAE;AAEhE,QAAM,kBAAmB,GAAG;AAAA,IAC1B;AAAA,EACF,EAAE,IAAI,SAAS,EAA8B,IAAI,CAAC,MAAM,EAAE,SAAS;AAkBnE,QAAM,SAAS,GAAG,YAAY,MAAM;AAClC,OAAG,QAAQ,6CAA6C,EAAE,IAAI,SAAS;AACvE,UAAM,cAAc,GAAG,QAAQ,8CAA8C,EAAE,IAAI,SAAS;AAC5F,OAAG,QAAQ,wCAAwC,EAAE,IAAI,SAAS;AAClE,OAAG,QAAQ,8CAA8C,EAAE,IAAI,SAAS;AACxE,UAAM,YAAY,GAAG;AAAA,MACnB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOF,EAAE,IAAI,WAAW,WAAW,SAAS;AACrC,UAAM,QAAQ,GAAG,QAAQ,8CAA8C,EAAE,IAAI,SAAS;AACtF,UAAM,SAAS,GAAG;AAAA,MAChB;AAAA;AAAA;AAAA,IAGF,EAAE,IAAI,WAAW,SAAS;AAC1B,UAAM,UAAU,GAAG,QAAQ,iDAAiD,EAAE,IAAI,SAAS;AAC3F,UAAM,UAAU,GAAG,QAAQ,mCAAmC,EAAE,IAAI,SAAS;AAE7E,WAAO;AAAA,MACL,SAAS,QAAQ,UAAU;AAAA,MAC3B,QAAQ;AAAA,QACN,SAAS,QAAQ;AAAA,QACjB,QAAQ,OAAO;AAAA,QACf,aAAa,YAAY;AAAA,QACzB,YAAY,MAAM;AAAA,QAClB,kBAAkB,UAAU;AAAA,MAC9B;AAAA,IACF;AAAA,EACF,CAAC,EAAE;AAEH,SAAO;AAAA,IACL,GAAG;AAAA,IACH,iBAAiB;AAAA,IACjB,wBAAwB;AAAA,EAC1B;AACF;","names":[]}

package/dist/{chunk-CYBC2HZ3.js → chunk-QMTXVFA7.js}

@@ -1,13 +1,13 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   getPluginVersion
-} from "./chunk-2CKDAFSX.js";
+} from "./chunk-DDOPAV5O.js";
 import {
   DAEMON_CLIENT_TIMEOUT_MS,
   DAEMON_HEALTH_CHECK_TIMEOUT_MS,
   DAEMON_HEALTH_RETRY_DELAYS,
   DAEMON_STALE_GRACE_PERIOD_MS
-} from "./chunk-W4VHC2ES.js";
+} from "./chunk-I54KLC6H.js";
 
 // src/hooks/client.ts
 import fs from "fs";
@@ -185,4 +185,4 @@ export {
   resolveCliEntryPath,
   DaemonClient
 };
-//# sourceMappingURL=chunk-CYBC2HZ3.js.map
+//# sourceMappingURL=chunk-QMTXVFA7.js.map