@goondocks/myco 0.21.1 → 0.21.2

package/dist/{chunk-NFO7BRCO.js → chunk-IMW5TJ3O.js}

@@ -10,8 +10,9 @@ import {
   resolveVaultDir
 } from "./chunk-TSM6VESW.js";
 import {
-  DaemonClient
-} from "./chunk-KTTSXYEK.js";
+  DaemonClient,
+  isIgnoredEventResponse
+} from "./chunk-6FBLL7MD.js";
 
 // src/hooks/send-event.ts
 import fs from "fs";
@@ -29,7 +30,7 @@ async function sendEvent(hookName, buildEvent) {
     };
     const client = new DaemonClient(VAULT_DIR);
     const result = await client.post("/events", { ...eventWithContext, session_id: input.sessionId, agent: input.agent });
-    if (!result.ok) {
+    if (!result.ok || isIgnoredEventResponse(result.data)) {
       const buffer = new EventBuffer(path.join(VAULT_DIR, "buffer"), input.sessionId);
       buffer.append(eventWithContext);
     }
@@ -42,4 +43,4 @@ async function sendEvent(hookName, buildEvent) {
 export {
   sendEvent
 };
-//# sourceMappingURL=chunk-NFO7BRCO.js.map
+//# sourceMappingURL=chunk-IMW5TJ3O.js.map

package/dist/chunk-IMW5TJ3O.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/hooks/send-event.ts"],"sourcesContent":["/**\n * Shared hook helper — sends an event to the daemon, buffers on failure.\n *\n * Every hook follows the same pattern: read stdin, POST to daemon /events,\n * buffer to disk if the daemon is unreachable. This helper extracts that\n * skeleton so each hook is a one-liner mapping input fields to event fields.\n */\n\nimport { DaemonClient, isIgnoredEventResponse } from './client.js';\nimport { readStdin } from './read-stdin.js';\nimport { normalizeHookInput, type NormalizedHookInput } from './normalize.js';\nimport { EventBuffer } from '../capture/buffer.js';\nimport { resolveVaultDir } from '../vault/resolve.js';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\n/**\n * Read hook stdin, POST event to daemon, buffer on failure.\n *\n * @param hookName — used for error logging (e.g., 'subagent-start')\n * @param buildEvent — maps the normalized hook input to the event payload.\n *   Receives a NormalizedHookInput with canonical field names.\n *   Return the full event object (must include `type`).\n */\nexport async function sendEvent(\n  hookName: string,\n  buildEvent: (input: NormalizedHookInput) => Record<string, unknown>,\n): Promise<void> {\n  const VAULT_DIR = resolveVaultDir();\n  if (!fs.existsSync(path.join(VAULT_DIR, 'myco.yaml'))) return;\n\n  try {\n    const rawInput = JSON.parse(await readStdin()) as Record<string, unknown>;\n    const input = normalizeHookInput(rawInput);\n\n    const event = buildEvent(input);\n    const eventWithContext = {\n      ...event,\n      transcript_path: input.transcriptPath,\n    };\n\n    const client = new DaemonClient(VAULT_DIR);\n    const result = await client.post('/events', { ...eventWithContext, session_id: input.sessionId, agent: input.agent });\n\n    // Two buffer paths: transport failure (daemon unreachable) and server-side\n    // drop (HTTP 200 with `{ ignored: reason }`). The second case catches\n    // capture-rule misfires that would otherwise silently discard live session\n    // events — `reconcileBufferBatches` replays the buffer on next startup.\n    if (!result.ok || isIgnoredEventResponse(result.data)) {\n      const buffer = new EventBuffer(path.join(VAULT_DIR, 'buffer'), input.sessionId);\n      buffer.append(eventWithContext);\n    }\n  } catch (error) {\n    process.stderr.write(`[myco] ${hookName} error: ${(error as Error).message}\\n`);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAaA,OAAO,QAAQ;AACf,OAAO,UAAU;AAUjB,eAAsB,UACpB,UACA,YACe;AACf,QAAM,YAAY,gBAAgB;AAClC,MAAI,CAAC,GAAG,WAAW,KAAK,KAAK,WAAW,WAAW,CAAC,EAAG;AAEvD,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,MAAM,UAAU,CAAC;AAC7C,UAAM,QAAQ,mBAAmB,QAAQ;AAEzC,UAAM,QAAQ,WAAW,KAAK;AAC9B,UAAM,mBAAmB;AAAA,MACvB,GAAG;AAAA,MACH,iBAAiB,MAAM;AAAA,IACzB;AAEA,UAAM,SAAS,IAAI,aAAa,SAAS;AACzC,UAAM,SAAS,MAAM,OAAO,KAAK,WAAW,EAAE,GAAG,kBAAkB,YAAY,MAAM,WAAW,OAAO,MAAM,MAAM,CAAC;AAMpH,QAAI,CAAC,OAAO,MAAM,uBAAuB,OAAO,IAAI,GAAG;AACrD,YAAM,SAAS,IAAI,YAAY,KAAK,KAAK,WAAW,QAAQ,GAAG,MAAM,SAAS;AAC9E,aAAO,OAAO,gBAAgB;AAAA,IAChC;AAAA,EACF,SAAS,OAAO;AACd,YAAQ,OAAO,MAAM,UAAU,QAAQ,WAAY,MAAgB,OAAO;AAAA,CAAI;AAAA,EAChF;AACF;","names":[]}

package/dist/{chunk-OZ3FBAK5.js → chunk-TFRUDNLI.js}

@@ -2,7 +2,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   getDigestExtract,
   shouldInjectCortex
-} from "./chunk-N7Z3LUEZ.js";
+} from "./chunk-DBBO6FHE.js";
 import {
   DEFAULT_AGENT_ID,
   DIGEST_FALLBACK_TIER
@@ -47,4 +47,4 @@ export {
   shouldInjectSessionStartDigest,
   composeSessionStartContext
 };
-//# sourceMappingURL=chunk-OZ3FBAK5.js.map
+//# sourceMappingURL=chunk-TFRUDNLI.js.map

package/dist/{chunk-6ALVMIB4.js → chunk-TMAXWERS.js}

@@ -200,6 +200,11 @@ var TEAM_CONFIG_FILE = "config.json";
 var LEGACY_TEAM_CONFIG_DIR = ".myco-team";
 var LEGACY_TEAM_DEPLOY_DIR = ".team-worker";
 var TEAM_CONFIG_VERSION = 1;
+var TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS = 10;
+var TEAM_VECTOR_REINDEX_RETRY_DELAY_MS = 1500;
+var TEAM_VECTOR_REINDEX_BATCH_SIZE = 20;
+var TEAM_VECTOR_REINDEX_REQUEST_TIMEOUT_MS = WRANGLER_COMMAND_TIMEOUT_MS * 6;
+var TEAM_VECTOR_REINDEX_TABLES = ["spores", "sessions", "plans", "artifacts", "skill_records"];
 var TOML_NAME_REGEX = /^name\s*=\s*"[^"]*"/m;
 var TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;
 var TOML_DB_NAME_REGEX = /database_name\s*=\s*"[^"]*"/g;
@@ -285,6 +290,80 @@ function readLocalConfig(vaultDir) {
   migrateLegacyDeployDir(vaultDir);
   return migrated;
 }
+function requireLocalConfig(vaultDir) {
+  const config = readLocalConfig(vaultDir);
+  if (config) return config;
+  console.error(`No local myco-team config found at ${resolveLocalConfigPath(vaultDir)}`);
+  process.exit(1);
+}
+function delay(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function reindexWorkerVectors(vaultDir, workerUrlOverride) {
+  const config = workerUrlOverride ? null : requireLocalConfig(vaultDir);
+  const secrets = readSecrets(vaultDir);
+  const apiKey = secrets[TEAM_API_KEY_SECRET];
+  if (!apiKey) {
+    throw new Error(`Missing ${TEAM_API_KEY_SECRET} secret in ${vaultDir}`);
+  }
+  const workerUrl = workerUrlOverride ?? config?.worker_url;
+  if (!workerUrl) {
+    throw new Error("No team worker URL configured");
+  }
+  for (const table of TEAM_VECTOR_REINDEX_TABLES) {
+    let cursor = null;
+    let processed = 0;
+    let reindexed = 0;
+    let deleted = 0;
+    while (true) {
+      let response = null;
+      let retryableError = null;
+      for (let attempt = 1; attempt <= TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS; attempt += 1) {
+        try {
+          response = await fetch(`${workerUrl.replace(/\/+$/, "")}/vectors/reindex`, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/json",
+              "Authorization": `Bearer ${apiKey}`
+            },
+            body: JSON.stringify({ table, limit: TEAM_VECTOR_REINDEX_BATCH_SIZE, cursor }),
+            signal: AbortSignal.timeout(TEAM_VECTOR_REINDEX_REQUEST_TIMEOUT_MS)
+          });
+        } catch (error) {
+          const message = error instanceof Error ? error.message : String(error);
+          const isTimeout = message.includes("timeout");
+          if (!isTimeout || attempt >= TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS) {
+            throw error;
+          }
+          retryableError = new Error(`Worker vector reindex timed out for ${table} (attempt ${attempt}/${TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS})`);
+          await delay(TEAM_VECTOR_REINDEX_RETRY_DELAY_MS);
+          continue;
+        }
+        if (response.ok) {
+          retryableError = null;
+          break;
+        }
+        const body2 = await response.text();
+        const isRetryable = response.status === 404 && body2.includes("Not found") && attempt < TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS;
+        if (!isRetryable) {
+          throw new Error(`Worker vector reindex failed for ${table}: ${response.status} ${body2}`);
+        }
+        retryableError = new Error(`Worker vector reindex route not ready for ${table} yet (attempt ${attempt}/${TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS})`);
+        await delay(TEAM_VECTOR_REINDEX_RETRY_DELAY_MS);
+      }
+      if (!response?.ok) {
+        throw retryableError ?? new Error(`Worker vector reindex failed for ${table}`);
+      }
+      const body = await response.json();
+      processed += body.processed;
+      reindexed += body.reindexed;
+      deleted += body.deleted;
+      cursor = body.next_cursor;
+      if (!cursor) break;
+    }
+    console.log(`  \u2713 Reindexed ${table}: ${reindexed} upserted, ${deleted} deleted (${processed} processed)`);
+  }
+}
 function wrangler(args, options) {
   return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });
 }
@@ -585,7 +664,7 @@ function upgradeWorker(vaultDir) {
     return { success: false, error: `Failed to deploy worker: ${err.message}` };
   }
 }
-async function teamUpgrade(vaultDir) {
+async function teamUpgrade(vaultDir, options = {}) {
   console.log("Upgrading team sync worker...\n");
   const result = upgradeWorker(vaultDir);
   if (!result.success) {
@@ -594,6 +673,10 @@ async function teamUpgrade(vaultDir) {
   }
   console.log(`Worker deployed: ${result.worker_url}`);
   console.log(`Version: ${result.version}`);
+  if (options.reindexVectors) {
+    console.log("Refreshing remote Vectorize metadata...");
+    await reindexWorkerVectors(vaultDir, result.worker_url);
+  }
   console.log("\nUpgrade complete.");
 }
 
@@ -609,4 +692,4 @@ export {
   upgradeWorker,
   teamUpgrade
 };
-//# sourceMappingURL=chunk-6ALVMIB4.js.map
+//# sourceMappingURL=chunk-TMAXWERS.js.map

package/dist/chunk-TMAXWERS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../myco-team/src/cli.ts","../src/config/secrets.ts","../../myco-deploy/src/cloudflare.ts","../../myco-deploy/src/local-config.ts"],"sourcesContent":["/**\n * CLI team commands — provision and manage Cloudflare team sync infrastructure.\n *\n * `myco team init`    — Provision D1 database, Vectorize index, deploy worker.\n * `myco team upgrade` — Redeploy worker with updated source.\n */\n\nimport crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { CONFIG_FILENAME, loadConfig, updateTeamConfig } from '@myco/config/loader.js';\nimport { writeSecret, readSecrets } from '@myco/config/secrets.js';\nimport { WRANGLER_COMMAND_TIMEOUT_MS, TEAM_API_KEY_SECRET, TEAM_MCP_TOKEN_SECRET } from '@myco/constants.js';\nimport { SCHEMA_VERSION } from '@myco/db/schema.js';\nimport {\n  extractJsonArray,\n  installDeploymentDeps,\n  maskSecret,\n  parseD1Id,\n  parseKvNamespaceId,\n  parseWorkerUrl,\n  readJsonConfig,\n  resolveHomeConfigPath,\n  resolveVaultConfigPath,\n  runWrangler,\n  stageDeploymentDir,\n  writeJsonConfig,\n} from '@myco-deploy/index.js';\n\ndeclare const __MYCO_TEAM_VERSION__: string;\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Number of random bytes for API key generation. */\nconst API_KEY_BYTES = 32;\n\n/** Vectorize index dimensions (must match the embedding model). */\nconst VECTORIZE_DIMENSIONS = '1024';\n\n/** Vectorize distance metric. */\nconst VECTORIZE_METRIC = 'cosine';\n\n/** Prefix for team resource names. */\nconst TEAM_RESOURCE_PREFIX = 'myco-team';\n\n/** Length of the project hash suffix for unique resource naming. */\nconst PROJECT_HASH_LENGTH = 8;\n\n\n/** Source directory for worker files (relative to package root). */\nconst WORKER_SOURCE_DIR = 'worker';\n\n/** Team sync state directory within the vault. */\nconst TEAM_STATE_DIR = 'team';\nconst TEAM_DEPLOY_DIR = 'worker';\nconst TEAM_CONFIG_FILE = 'config.json';\nconst LEGACY_TEAM_CONFIG_DIR = '.myco-team';\nconst LEGACY_TEAM_DEPLOY_DIR = '.team-worker';\nconst TEAM_CONFIG_VERSION = 1;\nconst TEAM_MCP_ROTATION_RETRY_ATTEMPTS = 10;\nconst TEAM_MCP_ROTATION_RETRY_DELAY_MS = 1500;\nconst TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS = 10;\nconst TEAM_VECTOR_REINDEX_RETRY_DELAY_MS = 1500;\nconst TEAM_VECTOR_REINDEX_BATCH_SIZE = 20;\nconst TEAM_VECTOR_REINDEX_REQUEST_TIMEOUT_MS = WRANGLER_COMMAND_TIMEOUT_MS * 6;\nconst TEAM_VECTOR_REINDEX_TABLES = ['spores', 'sessions', 'plans', 'artifacts', 'skill_records'] as const;\n\n/** Regex to match wrangler.toml name field. */\nconst TOML_NAME_REGEX = /^name\\s*=\\s*\"[^\"]*\"/m;\n\n/** Regex to match wrangler.toml D1 placeholder. */\nconst TOML_D1_PLACEHOLDER_REGEX = /<YOUR_D1_DATABASE_ID>/g;\n\n/** Regex to match wrangler.toml database_name field. */\nconst TOML_DB_NAME_REGEX = /database_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml index_name field. */\nconst TOML_INDEX_NAME_REGEX = /index_name\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml team package version placeholder. */\nconst TOML_TEAM_PACKAGE_VERSION_REGEX = /MYCO_TEAM_PACKAGE_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match wrangler.toml Myco schema version placeholder. */\nconst TOML_MYCO_SCHEMA_VERSION_REGEX = /MYCO_SCHEMA_VERSION\\s*=\\s*\"[^\"]*\"/g;\n\n/** Regex to match database_id in existing wrangler.toml. */\nconst TOML_DB_ID_REGEX = /database_id\\s*=\\s*\"([^\"]+)\"/;\n\n/** Regex to match wrangler.toml KV namespace placeholder. */\nconst TOML_KV_PLACEHOLDER_REGEX = /<YOUR_KV_NAMESPACE_ID>/g;\n\n/** Regex to extract the KV namespace ID from an existing wrangler.toml. */\nconst TOML_KV_ID_REGEX = /\\[\\[kv_namespaces\\]\\][\\s\\S]*?id\\s*=\\s*\"([0-9a-f]+)\"/;\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Generate a project hash from vault dir for unique resource naming. */\nfunction projectHash(vaultDir: string): string {\n  const hash = crypto.createHash('sha256').update(vaultDir).digest('hex');\n  return hash.slice(0, PROJECT_HASH_LENGTH);\n}\n\n/** Build the unique resource name for this project's team infrastructure. */\nfunction resourceName(vaultDir: string): string {\n  return `${TEAM_RESOURCE_PREFIX}-${projectHash(vaultDir)}`;\n}\n\nfunction resolvePackageRoot(): string {\n  const override = process.env.MYCO_TEAM_PACKAGE_ROOT?.trim();\n  if (override) return override;\n  return path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');\n}\n\nexport function getTeamPackageVersion(): string {\n  if (typeof __MYCO_TEAM_VERSION__ !== 'undefined') {\n    return __MYCO_TEAM_VERSION__;\n  }\n\n  const packageRoot = resolvePackageRoot();\n  const candidatePaths = [\n    path.join(packageRoot, 'package.json'),\n    path.join(path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'), 'package.json'),\n  ];\n\n  for (const candidatePath of candidatePaths) {\n    if (!fs.existsSync(candidatePath)) continue;\n    const packageJson = JSON.parse(fs.readFileSync(candidatePath, 'utf-8')) as { version?: string };\n    if (packageJson.version) return packageJson.version;\n  }\n\n  return '0.1.0';\n}\n\nfunction getMycoSchemaVersion(): string {\n  return String(SCHEMA_VERSION);\n}\n\nexport interface TeamLocalConfig {\n  worker_name: string;\n  worker_url: string;\n  package_version: string;\n  created_at: string;\n  last_upgraded: string;\n  config_version: number;\n}\n\ninterface LegacyTeamLocalConfig extends TeamLocalConfig {\n  api_key?: string;\n  mcp_token?: string | null;\n  vault_dir?: string;\n}\n\nfunction resolveLocalConfigPath(vaultDir: string): string {\n  return resolveVaultConfigPath(vaultDir, TEAM_STATE_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveLegacyLocalConfigPath(): string {\n  return resolveHomeConfigPath(LEGACY_TEAM_CONFIG_DIR, TEAM_CONFIG_FILE);\n}\n\nfunction resolveDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, TEAM_STATE_DIR, TEAM_DEPLOY_DIR);\n}\n\nfunction resolveLegacyDeployDir(vaultDir: string): string {\n  return path.join(vaultDir, LEGACY_TEAM_DEPLOY_DIR);\n}\n\nfunction writeLocalConfig(vaultDir: string, config: TeamLocalConfig): void {\n  writeJsonConfig(resolveLocalConfigPath(vaultDir), config);\n}\n\nfunction migrateLegacyDeployDir(vaultDir: string): void {\n  const legacyDeployDir = resolveLegacyDeployDir(vaultDir);\n  const nextDeployDir = resolveDeployDir(vaultDir);\n  if (!fs.existsSync(legacyDeployDir) || fs.existsSync(nextDeployDir)) return;\n\n  fs.mkdirSync(path.dirname(nextDeployDir), { recursive: true });\n  fs.renameSync(legacyDeployDir, nextDeployDir);\n}\n\nfunction readLocalConfig(vaultDir: string): TeamLocalConfig | null {\n  const config = readJsonConfig<TeamLocalConfig>(resolveLocalConfigPath(vaultDir));\n  if (config) {\n    migrateLegacyDeployDir(vaultDir);\n    return config;\n  }\n\n  const legacyConfig = readJsonConfig<LegacyTeamLocalConfig>(resolveLegacyLocalConfigPath());\n  if (!legacyConfig) return null;\n  if (legacyConfig.vault_dir && legacyConfig.vault_dir !== vaultDir) return null;\n\n  const migrated: TeamLocalConfig = {\n    worker_name: legacyConfig.worker_name,\n    worker_url: legacyConfig.worker_url,\n    package_version: legacyConfig.package_version,\n    created_at: legacyConfig.created_at,\n    last_upgraded: legacyConfig.last_upgraded,\n    config_version: legacyConfig.config_version ?? TEAM_CONFIG_VERSION,\n  };\n  writeLocalConfig(vaultDir, migrated);\n  if (legacyConfig.api_key) writeSecret(vaultDir, TEAM_API_KEY_SECRET, legacyConfig.api_key);\n  if (legacyConfig.mcp_token) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, legacyConfig.mcp_token);\n  migrateLegacyDeployDir(vaultDir);\n  return migrated;\n}\n\nfunction requireLocalConfig(vaultDir: string): TeamLocalConfig {\n  const config = readLocalConfig(vaultDir);\n  if (config) return config;\n\n  console.error(`No local myco-team config found at ${resolveLocalConfigPath(vaultDir)}`);\n  process.exit(1);\n}\n\nfunction delay(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nasync function rotateMcpTokenWithRetry(workerUrl: string, apiKey: string): Promise<string> {\n  let lastError: Error | null = null;\n\n  for (let attempt = 1; attempt <= TEAM_MCP_ROTATION_RETRY_ATTEMPTS; attempt += 1) {\n    try {\n      return await rotateMcpTokenForWorker(workerUrl, apiKey);\n    } catch (error) {\n      lastError = error as Error;\n      const isRetryable =\n        lastError.message.includes('401') &&\n        lastError.message.includes('Invalid API key') &&\n        attempt < TEAM_MCP_ROTATION_RETRY_ATTEMPTS;\n      if (!isRetryable) {\n        throw lastError;\n      }\n      await delay(TEAM_MCP_ROTATION_RETRY_DELAY_MS);\n    }\n  }\n\n  throw lastError ?? new Error('MCP token rotation failed');\n}\n\nasync function reindexWorkerVectors(vaultDir: string, workerUrlOverride?: string): Promise<void> {\n  const config = workerUrlOverride ? null : requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n  const apiKey = secrets[TEAM_API_KEY_SECRET];\n  if (!apiKey) {\n    throw new Error(`Missing ${TEAM_API_KEY_SECRET} secret in ${vaultDir}`);\n  }\n  const workerUrl = workerUrlOverride ?? config?.worker_url;\n  if (!workerUrl) {\n    throw new Error('No team worker URL configured');\n  }\n\n  for (const table of TEAM_VECTOR_REINDEX_TABLES) {\n    let cursor: string | null = null;\n    let processed = 0;\n    let reindexed = 0;\n    let deleted = 0;\n\n    while (true) {\n      let response: Response | null = null;\n      let retryableError: Error | null = null;\n\n      for (let attempt = 1; attempt <= TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS; attempt += 1) {\n        try {\n          response = await fetch(`${workerUrl.replace(/\\/+$/, '')}/vectors/reindex`, {\n            method: 'POST',\n            headers: {\n              'Content-Type': 'application/json',\n              'Authorization': `Bearer ${apiKey}`,\n            },\n            body: JSON.stringify({ table, limit: TEAM_VECTOR_REINDEX_BATCH_SIZE, cursor }),\n            signal: AbortSignal.timeout(TEAM_VECTOR_REINDEX_REQUEST_TIMEOUT_MS),\n          });\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error);\n          const isTimeout = message.includes('timeout');\n          if (!isTimeout || attempt >= TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS) {\n            throw error;\n          }\n          retryableError = new Error(`Worker vector reindex timed out for ${table} (attempt ${attempt}/${TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS})`);\n          await delay(TEAM_VECTOR_REINDEX_RETRY_DELAY_MS);\n          continue;\n        }\n\n        if (response.ok) {\n          retryableError = null;\n          break;\n        }\n\n        const body = await response.text();\n        const isRetryable = response.status === 404 && body.includes('Not found') && attempt < TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS;\n        if (!isRetryable) {\n          throw new Error(`Worker vector reindex failed for ${table}: ${response.status} ${body}`);\n        }\n\n        retryableError = new Error(`Worker vector reindex route not ready for ${table} yet (attempt ${attempt}/${TEAM_VECTOR_REINDEX_RETRY_ATTEMPTS})`);\n        await delay(TEAM_VECTOR_REINDEX_RETRY_DELAY_MS);\n      }\n\n      if (!response?.ok) {\n        throw retryableError ?? new Error(`Worker vector reindex failed for ${table}`);\n      }\n\n      const body = await response.json() as {\n        processed: number;\n        reindexed: number;\n        deleted: number;\n        next_cursor: string | null;\n      };\n      processed += body.processed;\n      reindexed += body.reindexed;\n      deleted += body.deleted;\n      cursor = body.next_cursor;\n      if (!cursor) break;\n    }\n\n    console.log(`  ✓ Reindexed ${table}: ${reindexed} upserted, ${deleted} deleted (${processed} processed)`);\n  }\n}\n\n/** Run a wrangler command and return stdout. Throws on failure, surfacing stderr. */\nfunction wrangler(args: string[], options?: { cwd?: string }): string {\n  return runWrangler(args, { cwd: options?.cwd, timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS });\n}\n\n/** Find the worker source directory. Checks dist layout first (installed), then source layout (dev). */\nfunction locateWorkerSource(): string {\n  const root = resolvePackageRoot();\n  const distPath = path.join(root, 'dist', WORKER_SOURCE_DIR);\n  if (fs.existsSync(distPath)) return distPath;\n  const srcPath = path.join(root, WORKER_SOURCE_DIR);\n  if (fs.existsSync(srcPath)) return srcPath;\n  throw new Error(`Cannot find ${WORKER_SOURCE_DIR} — are you running from the myco-team package?`);\n}\n\n/**\n * Copy worker source to the vault deployment directory and patch wrangler.toml\n * with actual D1 database ID and resource names.\n */\nfunction prepareDeployDir(vaultDir: string, d1Id: string, kvId: string): string {\n  const srcDir = locateWorkerSource();\n  const deployDir = resolveDeployDir(vaultDir);\n  const name = resourceName(vaultDir);\n  return stageDeploymentDir({\n    sourceDir: srcDir,\n    deployDir,\n    reset: true,\n    textPatches: [{\n      filePath: 'wrangler.toml',\n      transforms: [\n        (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${name}\"`),\n        (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n        (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${name}\"`),\n        (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${name}-vectors\"`),\n        (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n        (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n        (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n      ],\n    }],\n    installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n  });\n}\n\n/** Ensure a KV namespace exists for this project. Returns the namespace ID. */\nfunction ensureKvNamespace(name: string): string {\n  const kvName = `${name}-secrets`;\n  const lookupExisting = (): string => {\n    const listOutput = wrangler(['kv', 'namespace', 'list']);\n    const namespaces = extractJsonArray(listOutput) as Array<{ id: string; title: string }>;\n    // Wrangler sometimes rewrites hyphens to underscores in titles\n    const normalize = (s: string) => s.replace(/[-_]/g, '');\n    const target = normalize(kvName);\n    const existing = namespaces.find((ns) => normalize(ns.title) === target || normalize(ns.title).endsWith(target));\n    if (!existing) throw new Error(`KV namespace \"${kvName}\" not found in list of ${namespaces.length} namespaces`);\n    return existing.id;\n  };\n\n  try {\n    const output = wrangler(['kv', 'namespace', 'create', kvName]);\n    return parseKvNamespaceId(output);\n    // Created successfully but we couldn't parse — fall back to list lookup\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate') || errMsg.includes('same title')) {\n      return lookupExisting();\n    }\n    throw err;\n  }\n}\n\nasync function rotateMcpTokenForWorker(workerUrl: string, apiKey: string): Promise<string> {\n  const response = await fetch(`${workerUrl}/mcp/rotate`, {\n    method: 'POST',\n    headers: {\n      Authorization: `Bearer ${apiKey}`,\n      'Content-Type': 'application/json',\n    },\n  });\n  if (!response.ok) {\n    throw new Error(`MCP token rotation failed: ${response.status} ${await response.text()}`);\n  }\n  const body = await response.json() as { token?: string };\n  if (!body.token) {\n    throw new Error('MCP token rotation response did not include a token');\n  }\n  return body.token;\n}\n\n// ---------------------------------------------------------------------------\n// Commands\n// ---------------------------------------------------------------------------\n\nexport async function teamInit(vaultDir: string): Promise<void> {\n  console.log('Provisioning team sync infrastructure...\\n');\n\n  // 1. Check for wrangler\n  try {\n    const version = wrangler(['--version']).trim();\n    console.log(`wrangler: ${version}`);\n  } catch {\n    console.error('Error: wrangler CLI not found. Install it with: npm install -g wrangler');\n    process.exit(1);\n  }\n\n  // 2. Check auth\n  try {\n    wrangler(['whoami']);\n    console.log('Cloudflare auth: OK\\n');\n  } catch {\n    console.error('Error: Not authenticated with Cloudflare. Run: wrangler login');\n    process.exit(1);\n  }\n\n  const name = resourceName(vaultDir);\n  console.log(`Resource name: ${name}\\n`);\n\n  // 3. Create D1 database (or reuse existing)\n  console.log('Creating D1 database...');\n  let d1Id: string;\n  try {\n    const d1Output = wrangler(['d1', 'create', name]);\n    d1Id = parseD1Id(d1Output);\n    console.log(`D1 database created: ${d1Id}\\n`);\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists')) {\n      console.log('D1 database already exists, looking up ID...');\n      const listOutput = wrangler(['d1', 'list', '--json']);\n      const databases = JSON.parse(listOutput) as Array<{ name: string; uuid: string }>;\n      const existing = databases.find((db) => db.name === name);\n      if (!existing) {\n        console.error(`D1 database \"${name}\" reported as existing but not found in list`);\n        process.exit(1);\n      }\n      d1Id = existing.uuid;\n      console.log(`Reusing D1 database: ${d1Id}\\n`);\n    } else {\n      console.error(`Failed to create D1 database: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 4. Create Vectorize index (or reuse existing)\n  console.log('Creating Vectorize index...');\n  try {\n    wrangler(['vectorize', 'create', `${name}-vectors`, '--dimensions', VECTORIZE_DIMENSIONS, '--metric', VECTORIZE_METRIC]);\n    console.log('Vectorize index created\\n');\n  } catch (err) {\n    const errMsg = (err as Error).message;\n    if (errMsg.includes('already exists') || errMsg.includes('duplicate_name')) {\n      console.log('Vectorize index already exists, reusing\\n');\n    } else {\n      console.error(`Failed to create Vectorize index: ${errMsg}`);\n      process.exit(1);\n    }\n  }\n\n  // 5. Create KV namespace for runtime secrets (MCP tokens)\n  console.log('Creating KV namespace for secrets...');\n  let kvId: string;\n  try {\n    kvId = ensureKvNamespace(name);\n    console.log(`KV namespace ready: ${kvId}\\n`);\n  } catch (err) {\n    console.error(`Failed to create KV namespace: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 6. Generate API key\n  const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n\n  // 7. Prepare deployment directory\n  console.log('Preparing worker deployment...');\n  const deployDir = prepareDeployDir(vaultDir, d1Id, kvId);\n\n  // 7. Set API key secret via wrangler\n  console.log('Setting API key secret...');\n  try {\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', name], {\n      cwd: deployDir,\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    console.log('Secret set\\n');\n  } catch (err) {\n    console.error(`Failed to set API key secret: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 8. Deploy worker\n  console.log('Deploying worker...');\n  let workerUrl: string;\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    workerUrl = parseWorkerUrl(deployOutput);\n    console.log(`Worker deployed: ${workerUrl}\\n`);\n  } catch (err) {\n    console.error(`Failed to deploy worker: ${(err as Error).message}`);\n    process.exit(1);\n  }\n\n  // 9. Seed team config in the Worker\n  console.log('Setting team configuration...');\n  try {\n    const { getMachineId } = await import('@myco/daemon/machine-id.js');\n    const creatorMachineId = await getMachineId(vaultDir);\n    await fetch(`${workerUrl}/config`, {\n      method: 'PUT',\n      headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },\n      body: JSON.stringify({\n        team_name: name,\n        embedding_model: '@cf/baai/bge-m3',\n        embedding_dimensions: '1024',\n        created_at: String(Math.floor(Date.now() / 1000)),\n        created_by: creatorMachineId,\n      }),\n    });\n    console.log('Team config saved\\n');\n  } catch {\n    console.log('Warning: could not seed team config (non-fatal)\\n');\n  }\n\n  let mcpToken: string | null = null;\n  try {\n    mcpToken = await rotateMcpTokenForWorker(workerUrl, apiKey);\n  } catch {\n    // Non-fatal. The daemon can also fetch the token later through /connect.\n  }\n\n  // 10. Save config and API key locally\n  updateTeamConfig(vaultDir, {\n    enabled: true,\n    worker_url: workerUrl,\n  });\n  writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n  if (mcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, mcpToken);\n  writeLocalConfig(vaultDir, {\n    worker_name: name,\n    worker_url: workerUrl,\n    package_version: getTeamPackageVersion(),\n    created_at: new Date().toISOString(),\n    last_upgraded: new Date().toISOString(),\n    config_version: TEAM_CONFIG_VERSION,\n  });\n\n  console.log('Team sync configured!\\n');\n  console.log(`  URL:     ${workerUrl}`);\n  console.log(`  API Key: ${apiKey.slice(0, 8)}...${apiKey.slice(-4)}`);\n  if (mcpToken) {\n    console.log(`  MCP:     ${mcpToken.slice(0, 8)}...${mcpToken.slice(-4)}`);\n  }\n  console.log('\\nShare the URL and API key with teammates so they can connect.');\n}\n\n// ---------------------------------------------------------------------------\n// Shared upgrade logic (used by CLI and daemon API)\n// ---------------------------------------------------------------------------\n\nexport interface UpgradeResult {\n  success: boolean;\n  worker_url?: string;\n  version?: string;\n  error?: string;\n}\n\n/**\n * Upgrade the team sync worker: re-copy source, patch config, redeploy.\n * Returns a result instead of calling process.exit — safe for both CLI and daemon.\n */\nexport function upgradeWorker(vaultDir: string): UpgradeResult {\n  const config = loadConfig(vaultDir);\n  if (!config.team.worker_url) {\n    return { success: false, error: 'No team sync configured. Run: myco team init' };\n  }\n\n  migrateLegacyDeployDir(vaultDir);\n  const deployDir = resolveDeployDir(vaultDir);\n  const tomlPath = path.join(deployDir, 'wrangler.toml');\n\n  if (!fs.existsSync(tomlPath)) {\n    return { success: false, error: 'No deployment directory found. Run: myco team init' };\n  }\n\n  // Read ALL existing resource identifiers from current wrangler.toml.\n  const existingToml = fs.readFileSync(tomlPath, 'utf-8');\n  const d1Match = existingToml.match(TOML_DB_ID_REGEX);\n  if (!d1Match || d1Match[1] === '<YOUR_D1_DATABASE_ID>') {\n    return { success: false, error: 'Cannot determine D1 database ID from existing deployment. Run: myco team init' };\n  }\n  const d1Id = d1Match[1];\n\n  const nameMatch = existingToml.match(/^name\\s*=\\s*\"([^\"]*)\"/m);\n  const dbNameMatch = existingToml.match(/database_name\\s*=\\s*\"([^\"]*)\"/);\n  const indexNameMatch = existingToml.match(/index_name\\s*=\\s*\"([^\"]*)\"/);\n  const workerName = nameMatch?.[1] ?? resourceName(vaultDir);\n\n  // KV namespace may not exist on older deployments — create or reuse.\n  const kvMatch = existingToml.match(TOML_KV_ID_REGEX);\n  let kvId: string;\n  if (kvMatch) {\n    kvId = kvMatch[1];\n  } else {\n    try {\n      kvId = ensureKvNamespace(workerName);\n    } catch (err) {\n      return { success: false, error: `Failed to provision KV namespace: ${(err as Error).message}` };\n    }\n  }\n\n  try {\n    stageDeploymentDir({\n      sourceDir: locateWorkerSource(),\n      deployDir,\n      textPatches: [{\n        filePath: 'wrangler.toml',\n        transforms: [\n          (toml) => toml.replace(TOML_NAME_REGEX, `name = \"${workerName}\"`),\n          (toml) => toml.replace(TOML_D1_PLACEHOLDER_REGEX, d1Id),\n          (toml) => toml.replace(TOML_DB_NAME_REGEX, `database_name = \"${dbNameMatch?.[1] ?? workerName}\"`),\n          (toml) => toml.replace(TOML_INDEX_NAME_REGEX, `index_name = \"${indexNameMatch?.[1] ?? `${workerName}-vectors`}\"`),\n          (toml) => toml.replace(TOML_KV_PLACEHOLDER_REGEX, kvId),\n          (toml) => toml.replace(TOML_TEAM_PACKAGE_VERSION_REGEX, `MYCO_TEAM_PACKAGE_VERSION = \"${getTeamPackageVersion()}\"`),\n          (toml) => toml.replace(TOML_MYCO_SCHEMA_VERSION_REGEX, `MYCO_SCHEMA_VERSION = \"${getMycoSchemaVersion()}\"`),\n        ],\n      }],\n      installDepsTimeoutMs: WRANGLER_COMMAND_TIMEOUT_MS * 3,\n    });\n  } catch (err) {\n    return { success: false, error: `Failed to install worker dependencies: ${(err as Error).message}` };\n  }\n\n  // Re-set API key secret before deploy (deploy can wipe secrets)\n  const secrets = readSecrets(vaultDir);\n  const apiKey = secrets[TEAM_API_KEY_SECRET];\n  if (apiKey) {\n    try {\n      runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', workerName], {\n        cwd: deployDir,\n        input: apiKey,\n        timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n      });\n    } catch {\n      // Non-fatal — secret may already be set\n    }\n  }\n\n  // Redeploy\n  try {\n    const deployOutput = wrangler(['deploy'], { cwd: deployDir });\n    const workerUrl = parseWorkerUrl(deployOutput);\n    const version = getTeamPackageVersion();\n\n    updateTeamConfig(vaultDir, {\n      worker_url: workerUrl,\n    });\n    const localConfig = readLocalConfig(vaultDir);\n    if (localConfig) {\n      writeLocalConfig(vaultDir, {\n        ...localConfig,\n        worker_name: workerName,\n        worker_url: workerUrl,\n        package_version: version,\n        last_upgraded: new Date().toISOString(),\n      });\n    }\n\n    return { success: true, worker_url: workerUrl, version };\n  } catch (err) {\n    return { success: false, error: `Failed to deploy worker: ${(err as Error).message}` };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// CLI wrapper\n// ---------------------------------------------------------------------------\n\nexport async function teamUpgrade(vaultDir: string, options: { reindexVectors?: boolean } = {}): Promise<void> {\n  console.log('Upgrading team sync worker...\\n');\n  const result = upgradeWorker(vaultDir);\n  if (!result.success) {\n    console.error(result.error);\n    process.exit(1);\n  }\n  console.log(`Worker deployed: ${result.worker_url}`);\n  console.log(`Version: ${result.version}`);\n  if (options.reindexVectors) {\n    console.log('Refreshing remote Vectorize metadata...');\n    await reindexWorkerVectors(vaultDir, result.worker_url);\n  }\n  console.log('\\nUpgrade complete.');\n}\n\nexport async function teamReindexVectors(vaultDir: string): Promise<void> {\n  console.log('Reindexing remote team vectors...\\n');\n  await reindexWorkerVectors(vaultDir);\n  console.log('\\nRemote vector reindex complete.');\n}\n\nexport async function teamStatus(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n\n  console.log(`Worker:      ${config.worker_name}`);\n  console.log(`URL:         ${config.worker_url}`);\n  console.log(`API Key:     ${maskSecret(secrets[TEAM_API_KEY_SECRET] ?? null)}`);\n  console.log(`MCP Token:   ${maskSecret(secrets[TEAM_MCP_TOKEN_SECRET] ?? null)}`);\n  console.log(`Package v:   ${config.package_version}`);\n  console.log(`Created:     ${config.created_at}`);\n  console.log(`Upgraded:    ${config.last_upgraded}`);\n  console.log(`Config v:    ${config.config_version}`);\n}\n\nexport async function teamRotateTokens(vaultDir: string, which: 'api' | 'mcp' | 'all' = 'all'): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const secrets = readSecrets(vaultDir);\n  let currentApiKey = secrets[TEAM_API_KEY_SECRET] ?? '';\n  let currentMcpToken = secrets[TEAM_MCP_TOKEN_SECRET] ?? null;\n\n  let nextConfig = { ...config };\n\n  if (which === 'api' || which === 'all') {\n    const apiKey = crypto.randomBytes(API_KEY_BYTES).toString('hex');\n    runWrangler(['secret', 'put', TEAM_API_KEY_SECRET, '--name', config.worker_name], {\n      cwd: resolveDeployDir(vaultDir),\n      input: apiKey,\n      timeoutMs: WRANGLER_COMMAND_TIMEOUT_MS,\n    });\n    writeSecret(vaultDir, TEAM_API_KEY_SECRET, apiKey);\n    currentApiKey = apiKey;\n    nextConfig = {\n      ...nextConfig,\n      package_version: getTeamPackageVersion(),\n      last_upgraded: new Date().toISOString(),\n    };\n    writeLocalConfig(vaultDir, nextConfig);\n  }\n\n  if (which === 'mcp' || which === 'all') {\n    try {\n      currentMcpToken = await rotateMcpTokenWithRetry(config.worker_url, currentApiKey);\n      if (currentMcpToken) writeSecret(vaultDir, TEAM_MCP_TOKEN_SECRET, currentMcpToken);\n    } catch (error) {\n      writeLocalConfig(vaultDir, {\n        ...nextConfig,\n        last_upgraded: new Date().toISOString(),\n      });\n      throw new Error(\n        `API key rotation completed, but MCP token rotation failed. Local config was updated to the new API key.\\n${(error as Error).message}`,\n      );\n    }\n  }\n\n  nextConfig.last_upgraded = new Date().toISOString();\n  writeLocalConfig(vaultDir, nextConfig);\n\n  console.log(`API Key:   ${maskSecret(currentApiKey)}`);\n  console.log(`MCP Token: ${maskSecret(currentMcpToken)}`);\n}\n\nexport async function teamDestroy(vaultDir: string): Promise<void> {\n  const config = requireLocalConfig(vaultDir);\n  const errors: string[] = [];\n  const deployDir = resolveDeployDir(vaultDir);\n\n  try {\n    wrangler(['delete', config.worker_name], { cwd: deployDir });\n  } catch (error) {\n    errors.push(`worker delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    wrangler(['vectorize', 'delete', `${config.worker_name}-vectors`]);\n  } catch (error) {\n    errors.push(`vectorize delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const databases = JSON.parse(wrangler(['d1', 'list', '--json'])) as Array<{ name: string; uuid: string }>;\n    const database = databases.find((entry) => entry.name === config.worker_name);\n    if (database) {\n      wrangler(['d1', 'delete', database.name, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`d1 delete failed: ${(error as Error).message}`);\n  }\n\n  try {\n    const namespaces = extractJsonArray(wrangler(['kv', 'namespace', 'list'])) as Array<{ id: string; title: string }>;\n    const namespace = namespaces.find((entry) => entry.title === `${config.worker_name}-secrets`);\n    if (namespace) {\n      wrangler(['kv', 'namespace', 'delete', '--namespace-id', namespace.id, '--skip-confirmation']);\n    }\n  } catch (error) {\n    errors.push(`kv delete failed: ${(error as Error).message}`);\n  }\n\n  if (errors.length > 0) {\n    throw new Error(`Team destroy incomplete. Local state preserved for retry.\\n${errors.join('\\n')}`);\n  }\n\n  fs.rmSync(path.join(vaultDir, TEAM_STATE_DIR), { recursive: true, force: true });\n  console.log(`Destroyed local myco-team state for ${config.worker_name}.`);\n}\n","/**\n * Secrets file utilities for API key storage outside git.\n *\n * Secrets are stored in `secrets.env` inside the vault directory.\n * This file is gitignored (see VAULT_GITIGNORE) and never committed.\n * Format: KEY=value, one per line (same as .env).\n */\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst SECRETS_FILE = 'secrets.env';\n\n/** Read all secrets from <vault>/secrets.env as key-value pairs. */\nexport function readSecrets(vaultDir: string): Record<string, string> {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return {};\n\n  const secrets: Record<string, string> = {};\n  for (const line of fs.readFileSync(secretsPath, 'utf-8').split('\\n')) {\n    const match = line.match(/^\\s*([^#=]+?)\\s*=\\s*(.*?)\\s*$/);\n    if (match) {\n      secrets[match[1]] = match[2];\n    }\n  }\n  return secrets;\n}\n\n/** Write a secret to <vault>/secrets.env, preserving existing entries. */\nexport function writeSecret(vaultDir: string, key: string, value: string): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  const existing = readSecrets(vaultDir);\n  existing[key] = value;\n\n  const content = Object.entries(existing)\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Remove one or more secrets from <vault>/secrets.env, preserving remaining entries. */\nexport function deleteSecrets(vaultDir: string, keys: string[]): void {\n  const secretsPath = path.join(vaultDir, SECRETS_FILE);\n  if (!fs.existsSync(secretsPath)) return;\n\n  const existing = readSecrets(vaultDir);\n  for (const key of keys) delete existing[key];\n\n  const entries = Object.entries(existing);\n  if (entries.length === 0) {\n    fs.rmSync(secretsPath, { force: true });\n    return;\n  }\n\n  const content = entries\n    .map(([k, v]) => `${k}=${v}`)\n    .join('\\n') + '\\n';\n\n  fs.writeFileSync(secretsPath, content, 'utf-8');\n}\n\n/** Load secrets from <vault>/secrets.env into process.env (without overwriting existing vars). */\nexport function loadSecrets(vaultDir: string): void {\n  const secrets = readSecrets(vaultDir);\n  for (const [key, value] of Object.entries(secrets)) {\n    if (!process.env[key]) {\n      process.env[key] = value;\n    }\n  }\n}\n","import { execFileSync } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nconst WORKER_URL_REGEX = /(https:\\/\\/[^\\s]+\\.workers\\.dev)/;\nconst D1_ID_JSON_REGEX = /\"database_id\"\\s*:\\s*\"([0-9a-f-]{36})\"/i;\nconst D1_ID_TEXT_REGEX = /id:\\s*([0-9a-f-]{36})/i;\nconst KV_ID_REGEX = /\"id\":\\s*\"([0-9a-f]+)\"/i;\n\nexport interface WranglerOptions {\n  cwd?: string;\n  input?: string;\n  timeoutMs: number;\n}\n\nexport interface TextPatch {\n  filePath: string;\n  transforms: Array<(text: string) => string>;\n}\n\nexport interface StageDeploymentDirOptions {\n  sourceDir: string;\n  deployDir: string;\n  reset?: boolean;\n  extraCopies?: Array<{ sourceDir: string; destinationSubdir: string }>;\n  textPatches?: TextPatch[];\n  installDepsTimeoutMs?: number | null;\n}\n\nexport function buildCommandEnv(): NodeJS.ProcessEnv {\n  const nodeBinDir = path.dirname(process.execPath);\n  const pathValue = process.env.PATH\n    ? `${nodeBinDir}${path.delimiter}${process.env.PATH}`\n    : nodeBinDir;\n  return { ...process.env, PATH: pathValue };\n}\n\nexport function runWrangler(args: string[], options: WranglerOptions): string {\n  try {\n    return execFileSync('wrangler', args, {\n      cwd: options.cwd,\n      env: buildCommandEnv(),\n      input: options.input,\n      encoding: 'utf-8',\n      timeout: options.timeoutMs,\n      stdio: ['pipe', 'pipe', 'pipe'],\n    });\n  } catch (error) {\n    const execError = error as Error & { stderr?: Buffer | string; stdout?: Buffer | string };\n    const stderr = execError.stderr?.toString() ?? '';\n    const stdout = execError.stdout?.toString() ?? '';\n    const detail = [stderr, stdout].filter(Boolean).join('\\n').trim();\n    throw new Error(detail || execError.message);\n  }\n}\n\nexport function installDeploymentDeps(deployDir: string, timeoutMs: number): void {\n  const packageJsonPath = path.join(deployDir, 'package.json');\n  if (!fs.existsSync(packageJsonPath)) return;\n\n  execFileSync('npm', ['install', '--silent', '--no-audit', '--no-fund'], {\n    cwd: deployDir,\n    env: buildCommandEnv(),\n    encoding: 'utf-8',\n    timeout: timeoutMs,\n    stdio: ['pipe', 'pipe', 'pipe'],\n  });\n}\n\nexport function parseWorkerUrl(output: string): string {\n  const workerUrl = output.match(WORKER_URL_REGEX)?.[1];\n  if (!workerUrl) {\n    throw new Error(`Could not parse worker URL from deploy output:\\n${output}`);\n  }\n  return workerUrl;\n}\n\nexport function parseD1Id(output: string): string {\n  const jsonMatch = output.match(D1_ID_JSON_REGEX);\n  if (jsonMatch) return jsonMatch[1];\n\n  const textMatch = output.match(D1_ID_TEXT_REGEX);\n  if (textMatch) return textMatch[1];\n\n  throw new Error(`Could not parse D1 database ID from wrangler output:\\n${output}`);\n}\n\nexport function parseKvNamespaceId(output: string): string {\n  const kvId = output.match(KV_ID_REGEX)?.[1];\n  if (!kvId) {\n    throw new Error(`Could not parse KV namespace ID from wrangler output:\\n${output}`);\n  }\n  return kvId;\n}\n\nexport function extractJsonArray(output: string): unknown[] {\n  const start = output.indexOf('[');\n  const end = output.lastIndexOf(']');\n  if (start === -1 || end === -1 || end < start) {\n    throw new Error(`No JSON array found in output:\\n${output}`);\n  }\n  return JSON.parse(output.slice(start, end + 1)) as unknown[];\n}\n\nexport function stageDeploymentDir(options: StageDeploymentDirOptions): string {\n  if (options.reset) {\n    fs.rmSync(options.deployDir, { recursive: true, force: true });\n  }\n  fs.mkdirSync(options.deployDir, { recursive: true });\n  fs.cpSync(options.sourceDir, options.deployDir, { recursive: true });\n\n  for (const copy of options.extraCopies ?? []) {\n    fs.cpSync(copy.sourceDir, path.join(options.deployDir, copy.destinationSubdir), { recursive: true });\n  }\n\n  for (const patch of options.textPatches ?? []) {\n    const absolutePath = path.join(options.deployDir, patch.filePath);\n    let nextText = fs.readFileSync(absolutePath, 'utf-8');\n    for (const transform of patch.transforms) {\n      nextText = transform(nextText);\n    }\n    fs.writeFileSync(absolutePath, nextText, 'utf-8');\n  }\n\n  if (options.installDepsTimeoutMs) {\n    installDeploymentDeps(options.deployDir, options.installDepsTimeoutMs);\n  }\n\n  return options.deployDir;\n}\n","import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport os from 'node:os';\nimport path from 'node:path';\n\nconst MYCO_HOME_OVERRIDE_ENV = 'MYCO_HOME_OVERRIDE';\n\nexport function resolveHomeDir(): string {\n  return process.env[MYCO_HOME_OVERRIDE_ENV]?.trim() || os.homedir();\n}\n\nexport function resolveHomeConfigPath(configDir: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, fileName);\n}\n\nexport function resolveNamedHomeConfigPath(configDir: string, name: string, fileName: string): string {\n  return path.join(resolveHomeDir(), configDir, name, fileName);\n}\n\nexport function resolveVaultConfigPath(vaultDir: string, configDir: string, fileName: string): string {\n  return path.join(vaultDir, configDir, fileName);\n}\n\nexport function readJsonConfig<T>(configPath: string): T | null {\n  if (!fs.existsSync(configPath)) return null;\n  return JSON.parse(fs.readFileSync(configPath, 'utf-8')) as T;\n}\n\nexport function writeJsonConfig(configPath: string, value: unknown): void {\n  fs.mkdirSync(path.dirname(configPath), { recursive: true });\n  fs.writeFileSync(configPath, `${JSON.stringify(value, null, 2)}\\n`, { encoding: 'utf-8', mode: 0o600 });\n  fs.chmodSync(configPath, 0o600);\n}\n\nexport function maskSecret(secret: string | null): string | null {\n  if (!secret) return null;\n  if (secret.length <= 8) return secret;\n  return `${secret.slice(0, 4)}...${secret.slice(-4)}`;\n}\n\nexport function createHexToken(byteLength: number): string {\n  return crypto.randomBytes(byteLength).toString('hex');\n}\n"],"mappings":";;;;;;;;;;;;;;;AAOA,OAAOA,aAAY;AACnB,OAAOC,SAAQ;AACf,OAAOC,WAAU;AACjB,SAAS,qBAAqB;;;ACH9B,OAAO,QAAQ;AACf,OAAO,UAAU;AAEjB,IAAM,eAAe;AAGd,SAAS,YAAY,UAA0C;AACpE,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,MAAI,CAAC,GAAG,WAAW,WAAW,EAAG,QAAO,CAAC;AAEzC,QAAM,UAAkC,CAAC;AACzC,aAAW,QAAQ,GAAG,aAAa,aAAa,OAAO,EAAE,MAAM,IAAI,GAAG;AACpE,UAAM,QAAQ,KAAK,MAAM,+BAA+B;AACxD,QAAI,OAAO;AACT,cAAQ,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAGO,SAAS,YAAY,UAAkB,KAAa,OAAqB;AAC9E,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,QAAM,WAAW,YAAY,QAAQ;AACrC,WAAS,GAAG,IAAI;AAEhB,QAAM,UAAU,OAAO,QAAQ,QAAQ,EACpC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,IAAI,IAAI;AAEhB,KAAG,cAAc,aAAa,SAAS,OAAO;AAChD;AAGO,SAAS,cAAc,UAAkB,MAAsB;AACpE,QAAM,cAAc,KAAK,KAAK,UAAU,YAAY;AACpD,MAAI,CAAC,GAAG,WAAW,WAAW,EAAG;AAEjC,QAAM,WAAW,YAAY,QAAQ;AACrC,aAAW,OAAO,KAAM,QAAO,SAAS,GAAG;AAE3C,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,MAAI,QAAQ,WAAW,GAAG;AACxB,OAAG,OAAO,aAAa,EAAE,OAAO,KAAK,CAAC;AACtC;AAAA,EACF;AAEA,QAAM,UAAU,QACb,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,EAC3B,KAAK,IAAI,IAAI;AAEhB,KAAG,cAAc,aAAa,SAAS,OAAO;AAChD;AAGO,SAAS,YAAY,UAAwB;AAClD,QAAM,UAAU,YAAY,QAAQ;AACpC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,cAAQ,IAAI,GAAG,IAAI;AAAA,IACrB;AAAA,EACF;AACF;;;ACrEA,SAAS,oBAAoB;AAC7B,OAAOC,SAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,mBAAmB;AACzB,IAAM,cAAc;AAsBb,SAAS,kBAAqC;AACnD,QAAM,aAAaA,MAAK,QAAQ,QAAQ,QAAQ;AAChD,QAAM,YAAY,QAAQ,IAAI,OAC1B,GAAG,UAAU,GAAGA,MAAK,SAAS,GAAG,QAAQ,IAAI,IAAI,KACjD;AACJ,SAAO,EAAE,GAAG,QAAQ,KAAK,MAAM,UAAU;AAC3C;AAEO,SAAS,YAAY,MAAgB,SAAkC;AAC5E,MAAI;AACF,WAAO,aAAa,YAAY,MAAM;AAAA,MACpC,KAAK,QAAQ;AAAA,MACb,KAAK,gBAAgB;AAAA,MACrB,OAAO,QAAQ;AAAA,MACf,UAAU;AAAA,MACV,SAAS,QAAQ;AAAA,MACjB,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAAA,EACH,SAAS,OAAO;AACd,UAAM,YAAY;AAClB,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,UAAU,QAAQ,SAAS,KAAK;AAC/C,UAAM,SAAS,CAAC,QAAQ,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAAE,KAAK;AAChE,UAAM,IAAI,MAAM,UAAU,UAAU,OAAO;AAAA,EAC7C;AACF;AAEO,SAAS,sBAAsB,WAAmB,WAAyB;AAChF,QAAM,kBAAkBA,MAAK,KAAK,WAAW,cAAc;AAC3D,MAAI,CAACD,IAAG,WAAW,eAAe,EAAG;AAErC,eAAa,OAAO,CAAC,WAAW,YAAY,cAAc,WAAW,GAAG;AAAA,IACtE,KAAK;AAAA,IACL,KAAK,gBAAgB;AAAA,IACrB,UAAU;AAAA,IACV,SAAS;AAAA,IACT,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AACH;AAEO,SAAS,eAAe,QAAwB;AACrD,QAAM,YAAY,OAAO,MAAM,gBAAgB,IAAI,CAAC;AACpD,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM;AAAA,EAAmD,MAAM,EAAE;AAAA,EAC7E;AACA,SAAO;AACT;AAEO,SAAS,UAAU,QAAwB;AAChD,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,YAAY,OAAO,MAAM,gBAAgB;AAC/C,MAAI,UAAW,QAAO,UAAU,CAAC;AAEjC,QAAM,IAAI,MAAM;AAAA,EAAyD,MAAM,EAAE;AACnF;AAEO,SAAS,mBAAmB,QAAwB;AACzD,QAAM,OAAO,OAAO,MAAM,WAAW,IAAI,CAAC;AAC1C,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,MAAM;AAAA,EAA0D,MAAM,EAAE;AAAA,EACpF;AACA,SAAO;AACT;AAEO,SAAS,iBAAiB,QAA2B;AAC1D,QAAM,QAAQ,OAAO,QAAQ,GAAG;AAChC,QAAM,MAAM,OAAO,YAAY,GAAG;AAClC,MAAI,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO;AAC7C,UAAM,IAAI,MAAM;AAAA,EAAmC,MAAM,EAAE;AAAA,EAC7D;AACA,SAAO,KAAK,MAAM,OAAO,MAAM,OAAO,MAAM,CAAC,CAAC;AAChD;AAEO,SAAS,mBAAmB,SAA4C;AAC7E,MAAI,QAAQ,OAAO;AACjB,IAAAA,IAAG,OAAO,QAAQ,WAAW,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC/D;AACA,EAAAA,IAAG,UAAU,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AACnD,EAAAA,IAAG,OAAO,QAAQ,WAAW,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAEnE,aAAW,QAAQ,QAAQ,eAAe,CAAC,GAAG;AAC5C,IAAAA,IAAG,OAAO,KAAK,WAAWC,MAAK,KAAK,QAAQ,WAAW,KAAK,iBAAiB,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EACrG;AAEA,aAAW,SAAS,QAAQ,eAAe,CAAC,GAAG;AAC7C,UAAM,eAAeA,MAAK,KAAK,QAAQ,WAAW,MAAM,QAAQ;AAChE,QAAI,WAAWD,IAAG,aAAa,cAAc,OAAO;AACpD,eAAW,aAAa,MAAM,YAAY;AACxC,iBAAW,UAAU,QAAQ;AAAA,IAC/B;AACA,IAAAA,IAAG,cAAc,cAAc,UAAU,OAAO;AAAA,EAClD;AAEA,MAAI,QAAQ,sBAAsB;AAChC,0BAAsB,QAAQ,WAAW,QAAQ,oBAAoB;AAAA,EACvE;AAEA,SAAO,QAAQ;AACjB;;;ACjIA,OAAO,YAAY;AACnB,OAAOE,SAAQ;AACf,OAAO,QAAQ;AACf,OAAOC,WAAU;AAEjB,IAAM,yBAAyB;AAExB,SAAS,iBAAyB;AACvC,SAAO,QAAQ,IAAI,sBAAsB,GAAG,KAAK,KAAK,GAAG,QAAQ;AACnE;AAEO,SAAS,sBAAsB,WAAmB,UAA0B;AACjF,SAAOA,MAAK,KAAK,eAAe,GAAG,WAAW,QAAQ;AACxD;AAMO,SAAS,uBAAuB,UAAkB,WAAmB,UAA0B;AACpG,SAAOC,MAAK,KAAK,UAAU,WAAW,QAAQ;AAChD;AAEO,SAAS,eAAkB,YAA8B;AAC9D,MAAI,CAACC,IAAG,WAAW,UAAU,EAAG,QAAO;AACvC,SAAO,KAAK,MAAMA,IAAG,aAAa,YAAY,OAAO,CAAC;AACxD;AAEO,SAAS,gBAAgB,YAAoB,OAAsB;AACxE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AAC1D,EAAAC,IAAG,cAAc,YAAY,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,UAAU,SAAS,MAAM,IAAM,CAAC;AACtG,EAAAA,IAAG,UAAU,YAAY,GAAK;AAChC;;;AHKA,IAAM,gBAAgB;AAGtB,IAAM,uBAAuB;AAG7B,IAAM,mBAAmB;AAGzB,IAAM,uBAAuB;AAG7B,IAAM,sBAAsB;AAI5B,IAAM,oBAAoB;AAG1B,IAAM,iBAAiB;AACvB,IAAM,kBAAkB;AACxB,IAAM,mBAAmB;AACzB,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,sBAAsB;AAG5B,IAAM,qCAAqC;AAC3C,IAAM,qCAAqC;AAC3C,IAAM,iCAAiC;AACvC,IAAM,yCAAyC,8BAA8B;AAC7E,IAAM,6BAA6B,CAAC,UAAU,YAAY,SAAS,aAAa,eAAe;AAG/F,IAAM,kBAAkB;AAGxB,IAAM,4BAA4B;AAGlC,IAAM,qBAAqB;AAG3B,IAAM,wBAAwB;AAG9B,IAAM,kCAAkC;AAGxC,IAAM,iCAAiC;AAGvC,IAAM,mBAAmB;AAGzB,IAAM,4BAA4B;AAGlC,IAAM,mBAAmB;AAOzB,SAAS,YAAY,UAA0B;AAC7C,QAAM,OAAOC,QAAO,WAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,KAAK;AACtE,SAAO,KAAK,MAAM,GAAG,mBAAmB;AAC1C;AAGA,SAAS,aAAa,UAA0B;AAC9C,SAAO,GAAG,oBAAoB,IAAI,YAAY,QAAQ,CAAC;AACzD;AAEA,SAAS,qBAA6B;AACpC,QAAM,WAAW,QAAQ,IAAI,wBAAwB,KAAK;AAC1D,MAAI,SAAU,QAAO;AACrB,SAAOC,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI;AACxE;AAEO,SAAS,wBAAgC;AAC9C,MAAI,MAA8C;AAChD,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,mBAAmB;AACvC,QAAM,iBAAiB;AAAA,IACrBA,MAAK,KAAK,aAAa,cAAc;AAAA,IACrCA,MAAK,KAAKA,MAAK,QAAQA,MAAK,QAAQ,cAAc,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,cAAc;AAAA,EAC5F;AAEA,aAAW,iBAAiB,gBAAgB;AAC1C,QAAI,CAACC,IAAG,WAAW,aAAa,EAAG;AACnC,UAAM,cAAc,KAAK,MAAMA,IAAG,aAAa,eAAe,OAAO,CAAC;AACtE,QAAI,YAAY,QAAS,QAAO,YAAY;AAAA,EAC9C;AAEA,SAAO;AACT;AAEA,SAAS,uBAA+B;AACtC,SAAO,OAAO,cAAc;AAC9B;AAiBA,SAAS,uBAAuB,UAA0B;AACxD,SAAO,uBAAuB,UAAU,gBAAgB,gBAAgB;AAC1E;AAEA,SAAS,+BAAuC;AAC9C,SAAO,sBAAsB,wBAAwB,gBAAgB;AACvE;AAEA,SAAS,iBAAiB,UAA0B;AAClD,SAAOD,MAAK,KAAK,UAAU,gBAAgB,eAAe;AAC5D;AAEA,SAAS,uBAAuB,UAA0B;AACxD,SAAOA,MAAK,KAAK,UAAU,sBAAsB;AACnD;AAEA,SAAS,iBAAiB,UAAkB,QAA+B;AACzE,kBAAgB,uBAAuB,QAAQ,GAAG,MAAM;AAC1D;AAEA,SAAS,uBAAuB,UAAwB;AACtD,QAAM,kBAAkB,uBAAuB,QAAQ;AACvD,QAAM,gBAAgB,iBAAiB,QAAQ;AAC/C,MAAI,CAACC,IAAG,WAAW,eAAe,KAAKA,IAAG,WAAW,aAAa,EAAG;AAErE,EAAAA,IAAG,UAAUD,MAAK,QAAQ,aAAa,GAAG,EAAE,WAAW,KAAK,CAAC;AAC7D,EAAAC,IAAG,WAAW,iBAAiB,aAAa;AAC9C;AAEA,SAAS,gBAAgB,UAA0C;AACjE,QAAM,SAAS,eAAgC,uBAAuB,QAAQ,CAAC;AAC/E,MAAI,QAAQ;AACV,2BAAuB,QAAQ;AAC/B,WAAO;AAAA,EACT;AAEA,QAAM,eAAe,eAAsC,6BAA6B,CAAC;AACzF,MAAI,CAAC,aAAc,QAAO;AAC1B,MAAI,aAAa,aAAa,aAAa,cAAc,SAAU,QAAO;AAE1E,QAAM,WAA4B;AAAA,IAChC,aAAa,aAAa;AAAA,IAC1B,YAAY,aAAa;AAAA,IACzB,iBAAiB,aAAa;AAAA,IAC9B,YAAY,aAAa;AAAA,IACzB,eAAe,aAAa;AAAA,IAC5B,gBAAgB,aAAa,kBAAkB;AAAA,EACjD;AACA,mBAAiB,UAAU,QAAQ;AACnC,MAAI,aAAa,QAAS,aAAY,UAAU,qBAAqB,aAAa,OAAO;AACzF,MAAI,aAAa,UAAW,aAAY,UAAU,uBAAuB,aAAa,SAAS;AAC/F,yBAAuB,QAAQ;AAC/B,SAAO;AACT;AAEA,SAAS,mBAAmB,UAAmC;AAC7D,QAAM,SAAS,gBAAgB,QAAQ;AACvC,MAAI,OAAQ,QAAO;AAEnB,UAAQ,MAAM,sCAAsC,uBAAuB,QAAQ,CAAC,EAAE;AACtF,UAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,MAAM,IAA2B;AACxC,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAwBA,eAAe,qBAAqB,UAAkB,mBAA2C;AAC/F,QAAM,SAAS,oBAAoB,OAAO,mBAAmB,QAAQ;AACrE,QAAM,UAAU,YAAY,QAAQ;AACpC,QAAM,SAAS,QAAQ,mBAAmB;AAC1C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,MAAM,WAAW,mBAAmB,cAAc,QAAQ,EAAE;AAAA,EACxE;AACA,QAAM,YAAY,qBAAqB,QAAQ;AAC/C,MAAI,CAAC,WAAW;AACd,UAAM,IAAI,MAAM,+BAA+B;AAAA,EACjD;AAEA,aAAW,SAAS,4BAA4B;AAC9C,QAAI,SAAwB;AAC5B,QAAI,YAAY;AAChB,QAAI,YAAY;AAChB,QAAI,UAAU;AAEd,WAAO,MAAM;AACX,UAAI,WAA4B;AAChC,UAAI,iBAA+B;AAEnC,eAAS,UAAU,GAAG,WAAW,oCAAoC,WAAW,GAAG;AACjF,YAAI;AACF,qBAAW,MAAM,MAAM,GAAG,UAAU,QAAQ,QAAQ,EAAE,CAAC,oBAAoB;AAAA,YACzE,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,iBAAiB,UAAU,MAAM;AAAA,YACnC;AAAA,YACA,MAAM,KAAK,UAAU,EAAE,OAAO,OAAO,gCAAgC,OAAO,CAAC;AAAA,YAC7E,QAAQ,YAAY,QAAQ,sCAAsC;AAAA,UACpE,CAAC;AAAA,QACH,SAAS,OAAO;AACd,gBAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,gBAAM,YAAY,QAAQ,SAAS,SAAS;AAC5C,cAAI,CAAC,aAAa,WAAW,oCAAoC;AAC/D,kBAAM;AAAA,UACR;AACA,2BAAiB,IAAI,MAAM,uCAAuC,KAAK,aAAa,OAAO,IAAI,kCAAkC,GAAG;AACpI,gBAAM,MAAM,kCAAkC;AAC9C;AAAA,QACF;AAEA,YAAI,SAAS,IAAI;AACf,2BAAiB;AACjB;AAAA,QACF;AAEA,cAAMC,QAAO,MAAM,SAAS,KAAK;AACjC,cAAM,cAAc,SAAS,WAAW,OAAOA,MAAK,SAAS,WAAW,KAAK,UAAU;AACvF,YAAI,CAAC,aAAa;AAChB,gBAAM,IAAI,MAAM,oCAAoC,KAAK,KAAK,SAAS,MAAM,IAAIA,KAAI,EAAE;AAAA,QACzF;AAEA,yBAAiB,IAAI,MAAM,6CAA6C,KAAK,iBAAiB,OAAO,IAAI,kCAAkC,GAAG;AAC9I,cAAM,MAAM,kCAAkC;AAAA,MAChD;AAEA,UAAI,CAAC,UAAU,IAAI;AACjB,cAAM,kBAAkB,IAAI,MAAM,oCAAoC,KAAK,EAAE;AAAA,MAC/E;AAEA,YAAM,OAAO,MAAM,SAAS,KAAK;AAMjC,mBAAa,KAAK;AAClB,mBAAa,KAAK;AAClB,iBAAW,KAAK;AAChB,eAAS,KAAK;AACd,UAAI,CAAC,OAAQ;AAAA,IACf;AAEA,YAAQ,IAAI,sBAAiB,KAAK,KAAK,SAAS,cAAc,OAAO,aAAa,SAAS,aAAa;AAAA,EAC1G;AACF;AAGA,SAAS,SAAS,MAAgB,SAAoC;AACpE,SAAO,YAAY,MAAM,EAAE,KAAK,SAAS,KAAK,WAAW,4BAA4B,CAAC;AACxF;AAGA,SAAS,qBAA6B;AACpC,QAAM,OAAO,mBAAmB;AAChC,QAAM,WAAWC,MAAK,KAAK,MAAM,QAAQ,iBAAiB;AAC1D,MAAIC,IAAG,WAAW,QAAQ,EAAG,QAAO;AACpC,QAAM,UAAUD,MAAK,KAAK,MAAM,iBAAiB;AACjD,MAAIC,IAAG,WAAW,OAAO,EAAG,QAAO;AACnC,QAAM,IAAI,MAAM,eAAe,iBAAiB,qDAAgD;AAClG;AAMA,SAAS,iBAAiB,UAAkB,MAAc,MAAsB;AAC9E,QAAM,SAAS,mBAAmB;AAClC,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,OAAO,aAAa,QAAQ;AAClC,SAAO,mBAAmB;AAAA,IACxB,WAAW;AAAA,IACX;AAAA,IACA,OAAO;AAAA,IACP,aAAa,CAAC;AAAA,MACZ,UAAU;AAAA,MACV,YAAY;AAAA,QACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,IAAI,GAAG;AAAA,QAC1D,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,IAAI,GAAG;AAAA,QACtE,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,IAAI,WAAW;AAAA,QAC9E,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,QACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,QAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,MAC5G;AAAA,IACF,CAAC;AAAA,IACD,sBAAsB,8BAA8B;AAAA,EACtD,CAAC;AACH;AAGA,SAAS,kBAAkB,MAAsB;AAC/C,QAAM,SAAS,GAAG,IAAI;AACtB,QAAM,iBAAiB,MAAc;AACnC,UAAM,aAAa,SAAS,CAAC,MAAM,aAAa,MAAM,CAAC;AACvD,UAAM,aAAa,iBAAiB,UAAU;AAE9C,UAAM,YAAY,CAAC,MAAc,EAAE,QAAQ,SAAS,EAAE;AACtD,UAAM,SAAS,UAAU,MAAM;AAC/B,UAAM,WAAW,WAAW,KAAK,CAAC,OAAO,UAAU,GAAG,KAAK,MAAM,UAAU,UAAU,GAAG,KAAK,EAAE,SAAS,MAAM,CAAC;AAC/G,QAAI,CAAC,SAAU,OAAM,IAAI,MAAM,iBAAiB,MAAM,0BAA0B,WAAW,MAAM,aAAa;AAC9G,WAAO,SAAS;AAAA,EAClB;AAEA,MAAI;AACF,UAAM,SAAS,SAAS,CAAC,MAAM,aAAa,UAAU,MAAM,CAAC;AAC7D,WAAO,mBAAmB,MAAM;AAAA,EAElC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,WAAW,KAAK,OAAO,SAAS,YAAY,GAAG;AACtG,aAAO,eAAe;AAAA,IACxB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAe,wBAAwB,WAAmB,QAAiC;AACzF,QAAM,WAAW,MAAM,MAAM,GAAG,SAAS,eAAe;AAAA,IACtD,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,eAAe,UAAU,MAAM;AAAA,MAC/B,gBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AACD,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,8BAA8B,SAAS,MAAM,IAAI,MAAM,SAAS,KAAK,CAAC,EAAE;AAAA,EAC1F;AACA,QAAM,OAAO,MAAM,SAAS,KAAK;AACjC,MAAI,CAAC,KAAK,OAAO;AACf,UAAM,IAAI,MAAM,qDAAqD;AAAA,EACvE;AACA,SAAO,KAAK;AACd;AAMA,eAAsB,SAAS,UAAiC;AAC9D,UAAQ,IAAI,4CAA4C;AAGxD,MAAI;AACF,UAAM,UAAU,SAAS,CAAC,WAAW,CAAC,EAAE,KAAK;AAC7C,YAAQ,IAAI,aAAa,OAAO,EAAE;AAAA,EACpC,QAAQ;AACN,YAAQ,MAAM,yEAAyE;AACvF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,MAAI;AACF,aAAS,CAAC,QAAQ,CAAC;AACnB,YAAQ,IAAI,uBAAuB;AAAA,EACrC,QAAQ;AACN,YAAQ,MAAM,+DAA+D;AAC7E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAO,aAAa,QAAQ;AAClC,UAAQ,IAAI,kBAAkB,IAAI;AAAA,CAAI;AAGtC,UAAQ,IAAI,yBAAyB;AACrC,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,SAAS,CAAC,MAAM,UAAU,IAAI,CAAC;AAChD,WAAO,UAAU,QAAQ;AACzB,YAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,EAC9C,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,GAAG;AACrC,cAAQ,IAAI,8CAA8C;AAC1D,YAAM,aAAa,SAAS,CAAC,MAAM,QAAQ,QAAQ,CAAC;AACpD,YAAM,YAAY,KAAK,MAAM,UAAU;AACvC,YAAM,WAAW,UAAU,KAAK,CAAC,OAAO,GAAG,SAAS,IAAI;AACxD,UAAI,CAAC,UAAU;AACb,gBAAQ,MAAM,gBAAgB,IAAI,8CAA8C;AAChF,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,SAAS;AAChB,cAAQ,IAAI,wBAAwB,IAAI;AAAA,CAAI;AAAA,IAC9C,OAAO;AACL,cAAQ,MAAM,iCAAiC,MAAM,EAAE;AACvD,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,6BAA6B;AACzC,MAAI;AACF,aAAS,CAAC,aAAa,UAAU,GAAG,IAAI,YAAY,gBAAgB,sBAAsB,YAAY,gBAAgB,CAAC;AACvH,YAAQ,IAAI,2BAA2B;AAAA,EACzC,SAAS,KAAK;AACZ,UAAM,SAAU,IAAc;AAC9B,QAAI,OAAO,SAAS,gBAAgB,KAAK,OAAO,SAAS,gBAAgB,GAAG;AAC1E,cAAQ,IAAI,2CAA2C;AAAA,IACzD,OAAO;AACL,cAAQ,MAAM,qCAAqC,MAAM,EAAE;AAC3D,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAGA,UAAQ,IAAI,sCAAsC;AAClD,MAAI;AACJ,MAAI;AACF,WAAO,kBAAkB,IAAI;AAC7B,YAAQ,IAAI,uBAAuB,IAAI;AAAA,CAAI;AAAA,EAC7C,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAmC,IAAc,OAAO,EAAE;AACxE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,SAASC,QAAO,YAAY,aAAa,EAAE,SAAS,KAAK;AAG/D,UAAQ,IAAI,gCAAgC;AAC5C,QAAM,YAAY,iBAAiB,UAAU,MAAM,IAAI;AAGvD,UAAQ,IAAI,2BAA2B;AACvC,MAAI;AACF,gBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,IAAI,GAAG;AAAA,MAClE,KAAK;AAAA,MACL,OAAO;AAAA,MACP,WAAW;AAAA,IACb,CAAC;AACD,YAAQ,IAAI,cAAc;AAAA,EAC5B,SAAS,KAAK;AACZ,YAAQ,MAAM,iCAAkC,IAAc,OAAO,EAAE;AACvE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,qBAAqB;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,gBAAY,eAAe,YAAY;AACvC,YAAQ,IAAI,oBAAoB,SAAS;AAAA,CAAI;AAAA,EAC/C,SAAS,KAAK;AACZ,YAAQ,MAAM,4BAA6B,IAAc,OAAO,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,UAAQ,IAAI,+BAA+B;AAC3C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,0BAA4B;AAClE,UAAM,mBAAmB,MAAM,aAAa,QAAQ;AACpD,UAAM,MAAM,GAAG,SAAS,WAAW;AAAA,MACjC,QAAQ;AAAA,MACR,SAAS,EAAE,iBAAiB,UAAU,MAAM,IAAI,gBAAgB,mBAAmB;AAAA,MACnF,MAAM,KAAK,UAAU;AAAA,QACnB,WAAW;AAAA,QACX,iBAAiB;AAAA,QACjB,sBAAsB;AAAA,QACtB,YAAY,OAAO,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,CAAC;AAAA,QAChD,YAAY;AAAA,MACd,CAAC;AAAA,IACH,CAAC;AACD,YAAQ,IAAI,qBAAqB;AAAA,EACnC,QAAQ;AACN,YAAQ,IAAI,mDAAmD;AAAA,EACjE;AAEA,MAAI,WAA0B;AAC9B,MAAI;AACF,eAAW,MAAM,wBAAwB,WAAW,MAAM;AAAA,EAC5D,QAAQ;AAAA,EAER;AAGA,mBAAiB,UAAU;AAAA,IACzB,SAAS;AAAA,IACT,YAAY;AAAA,EACd,CAAC;AACD,cAAY,UAAU,qBAAqB,MAAM;AACjD,MAAI,SAAU,aAAY,UAAU,uBAAuB,QAAQ;AACnE,mBAAiB,UAAU;AAAA,IACzB,aAAa;AAAA,IACb,YAAY;AAAA,IACZ,iBAAiB,sBAAsB;AAAA,IACvC,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,IACtC,gBAAgB;AAAA,EAClB,CAAC;AAED,UAAQ,IAAI,yBAAyB;AACrC,UAAQ,IAAI,cAAc,SAAS,EAAE;AACrC,UAAQ,IAAI,cAAc,OAAO,MAAM,GAAG,CAAC,CAAC,MAAM,OAAO,MAAM,EAAE,CAAC,EAAE;AACpE,MAAI,UAAU;AACZ,YAAQ,IAAI,cAAc,SAAS,MAAM,GAAG,CAAC,CAAC,MAAM,SAAS,MAAM,EAAE,CAAC,EAAE;AAAA,EAC1E;AACA,UAAQ,IAAI,iEAAiE;AAC/E;AAiBO,SAAS,cAAc,UAAiC;AAC7D,QAAM,SAAS,WAAW,QAAQ;AAClC,MAAI,CAAC,OAAO,KAAK,YAAY;AAC3B,WAAO,EAAE,SAAS,OAAO,OAAO,+CAA+C;AAAA,EACjF;AAEA,yBAAuB,QAAQ;AAC/B,QAAM,YAAY,iBAAiB,QAAQ;AAC3C,QAAM,WAAWF,MAAK,KAAK,WAAW,eAAe;AAErD,MAAI,CAACC,IAAG,WAAW,QAAQ,GAAG;AAC5B,WAAO,EAAE,SAAS,OAAO,OAAO,qDAAqD;AAAA,EACvF;AAGA,QAAM,eAAeA,IAAG,aAAa,UAAU,OAAO;AACtD,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,yBAAyB;AACtD,WAAO,EAAE,SAAS,OAAO,OAAO,gFAAgF;AAAA,EAClH;AACA,QAAM,OAAO,QAAQ,CAAC;AAEtB,QAAM,YAAY,aAAa,MAAM,wBAAwB;AAC7D,QAAM,cAAc,aAAa,MAAM,+BAA+B;AACtE,QAAM,iBAAiB,aAAa,MAAM,4BAA4B;AACtE,QAAM,aAAa,YAAY,CAAC,KAAK,aAAa,QAAQ;AAG1D,QAAM,UAAU,aAAa,MAAM,gBAAgB;AACnD,MAAI;AACJ,MAAI,SAAS;AACX,WAAO,QAAQ,CAAC;AAAA,EAClB,OAAO;AACL,QAAI;AACF,aAAO,kBAAkB,UAAU;AAAA,IACrC,SAAS,KAAK;AACZ,aAAO,EAAE,SAAS,OAAO,OAAO,qCAAsC,IAAc,OAAO,GAAG;AAAA,IAChG;AAAA,EACF;AAEA,MAAI;AACF,uBAAmB;AAAA,MACjB,WAAW,mBAAmB;AAAA,MAC9B;AAAA,MACA,aAAa,CAAC;AAAA,QACZ,UAAU;AAAA,QACV,YAAY;AAAA,UACV,CAAC,SAAS,KAAK,QAAQ,iBAAiB,WAAW,UAAU,GAAG;AAAA,UAChE,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,oBAAoB,oBAAoB,cAAc,CAAC,KAAK,UAAU,GAAG;AAAA,UAChG,CAAC,SAAS,KAAK,QAAQ,uBAAuB,iBAAiB,iBAAiB,CAAC,KAAK,GAAG,UAAU,UAAU,GAAG;AAAA,UAChH,CAAC,SAAS,KAAK,QAAQ,2BAA2B,IAAI;AAAA,UACtD,CAAC,SAAS,KAAK,QAAQ,iCAAiC,gCAAgC,sBAAsB,CAAC,GAAG;AAAA,UAClH,CAAC,SAAS,KAAK,QAAQ,gCAAgC,0BAA0B,qBAAqB,CAAC,GAAG;AAAA,QAC5G;AAAA,MACF,CAAC;AAAA,MACD,sBAAsB,8BAA8B;AAAA,IACtD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,0CAA2C,IAAc,OAAO,GAAG;AAAA,EACrG;AAGA,QAAM,UAAU,YAAY,QAAQ;AACpC,QAAM,SAAS,QAAQ,mBAAmB;AAC1C,MAAI,QAAQ;AACV,QAAI;AACF,kBAAY,CAAC,UAAU,OAAO,qBAAqB,UAAU,UAAU,GAAG;AAAA,QACxE,KAAK;AAAA,QACL,OAAO;AAAA,QACP,WAAW;AAAA,MACb,CAAC;AAAA,IACH,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,MAAI;AACF,UAAM,eAAe,SAAS,CAAC,QAAQ,GAAG,EAAE,KAAK,UAAU,CAAC;AAC5D,UAAM,YAAY,eAAe,YAAY;AAC7C,UAAM,UAAU,sBAAsB;AAEtC,qBAAiB,UAAU;AAAA,MACzB,YAAY;AAAA,IACd,CAAC;AACD,UAAM,cAAc,gBAAgB,QAAQ;AAC5C,QAAI,aAAa;AACf,uBAAiB,UAAU;AAAA,QACzB,GAAG;AAAA,QACH,aAAa;AAAA,QACb,YAAY;AAAA,QACZ,iBAAiB;AAAA,QACjB,gBAAe,oBAAI,KAAK,GAAE,YAAY;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,WAAO,EAAE,SAAS,MAAM,YAAY,WAAW,QAAQ;AAAA,EACzD,SAAS,KAAK;AACZ,WAAO,EAAE,SAAS,OAAO,OAAO,4BAA6B,IAAc,OAAO,GAAG;AAAA,EACvF;AACF;AAMA,eAAsB,YAAY,UAAkB,UAAwC,CAAC,GAAkB;AAC7G,UAAQ,IAAI,iCAAiC;AAC7C,QAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,CAAC,OAAO,SAAS;AACnB,YAAQ,MAAM,OAAO,KAAK;AAC1B,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,IAAI,oBAAoB,OAAO,UAAU,EAAE;AACnD,UAAQ,IAAI,YAAY,OAAO,OAAO,EAAE;AACxC,MAAI,QAAQ,gBAAgB;AAC1B,YAAQ,IAAI,yCAAyC;AACrD,UAAM,qBAAqB,UAAU,OAAO,UAAU;AAAA,EACxD;AACA,UAAQ,IAAI,qBAAqB;AACnC;","names":["crypto","fs","path","fs","path","fs","path","path","fs","crypto","path","fs","body","path","fs","crypto"]}

package/dist/{chunk-QDLVIW2O.js → chunk-W5L5IHP5.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-MYX5NCRH.js";
 import {
   DaemonClient
-} from "./chunk-KTTSXYEK.js";
+} from "./chunk-6FBLL7MD.js";
 
 // src/cli/shared.ts
 import fs from "fs";
@@ -126,4 +126,4 @@ export {
   VAULT_GITIGNORE,
   registerSymbionts
 };
-//# sourceMappingURL=chunk-QDLVIW2O.js.map
+//# sourceMappingURL=chunk-W5L5IHP5.js.map

package/dist/{chunk-ENZR5NG7.js → chunk-Z55WGA2J.js}

@@ -11,7 +11,7 @@ var cached;
 function getPluginVersion() {
   if (cached) return cached;
   if (true) {
-    cached = "0.21.1";
+    cached = "0.21.2";
     return cached;
   }
   const root = findPackageRoot(path.dirname(fileURLToPath(import.meta.url)));
@@ -32,4 +32,4 @@ function getPluginVersion() {
 export {
   getPluginVersion
 };
-//# sourceMappingURL=chunk-ENZR5NG7.js.map
+//# sourceMappingURL=chunk-Z55WGA2J.js.map

package/dist/{cli-HSLIG7EX.js → cli-DDHTHU2J.js}

@@ -2,7 +2,7 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   loadEnv
-} from "./chunk-QDLVIW2O.js";
+} from "./chunk-W5L5IHP5.js";
 import "./chunk-SAKJMNSR.js";
 import "./chunk-OTQH5KZW.js";
 import "./chunk-X3IGT5RV.js";
@@ -13,8 +13,8 @@ import "./chunk-MYX5NCRH.js";
 import {
   resolveVaultDir
 } from "./chunk-TSM6VESW.js";
-import "./chunk-KTTSXYEK.js";
-import "./chunk-ENZR5NG7.js";
+import "./chunk-6FBLL7MD.js";
+import "./chunk-Z55WGA2J.js";
 import "./chunk-LPUQPDC2.js";
 import "./chunk-6C6QZ4PM.js";
 import "./chunk-UUHLLQXO.js";
@@ -62,29 +62,29 @@ async function main() {
     process.stdout.write(USAGE);
     return;
   }
-  if (cmd === "init") return (await import("./init-4KVK7W2E.js")).run(args);
+  if (cmd === "init") return (await import("./init-GQPD6HHX.js")).run(args);
   if (cmd === "detect-providers") return (await import("./detect-providers-ILLQZROY.js")).run(args);
   if (cmd === "version" || cmd === "--version" || cmd === "-v") {
-    const { getPluginVersion } = await import("./version-TXPPS3L5.js");
+    const { getPluginVersion } = await import("./version-LDFEALUJ.js");
     console.log(getPluginVersion());
     return;
   }
-  if (cmd === "mcp") return (await import("./server-AZJSTQEK.js")).main();
+  if (cmd === "mcp") return (await import("./server-KRMBRW4T.js")).main();
   if (cmd === "hook") {
     const hookName = args[0];
     const HOOK_DISPATCH = {
-      "session-start": () => import("./session-start-46KPFV2H.js"),
-      "session-end": () => import("./session-end-FS46UARX.js"),
-      "stop": () => import("./stop-OUEX6KA4.js"),
-      "user-prompt-submit": () => import("./user-prompt-submit-APMO6FVU.js"),
-      "post-tool-use": () => import("./post-tool-use-TZINWWDH.js"),
-      "post-tool-use-failure": () => import("./post-tool-use-failure-TCFEU2GI.js"),
-      "subagent-start": () => import("./subagent-start-J4VV6DEE.js"),
-      "subagent-stop": () => import("./subagent-stop-JMLVEPIA.js"),
-      "stop-failure": () => import("./stop-failure-2BWVNZEG.js"),
-      "task-completed": () => import("./task-completed-65CHMMKA.js"),
-      "pre-compact": () => import("./pre-compact-LO2VZCGR.js"),
-      "post-compact": () => import("./post-compact-7AEFVCZS.js")
+      "session-start": () => import("./session-start-RDTXUSYL.js"),
+      "session-end": () => import("./session-end-XD27GRYF.js"),
+      "stop": () => import("./stop-B7XCXEM5.js"),
+      "user-prompt-submit": () => import("./user-prompt-submit-KYO2VGLB.js"),
+      "post-tool-use": () => import("./post-tool-use-QRZMPNYL.js"),
+      "post-tool-use-failure": () => import("./post-tool-use-failure-XNHIKBZG.js"),
+      "subagent-start": () => import("./subagent-start-N7A622F3.js"),
+      "subagent-stop": () => import("./subagent-stop-SVOG5MZJ.js"),
+      "stop-failure": () => import("./stop-failure-R6QZCUOZ.js"),
+      "task-completed": () => import("./task-completed-3DL5LJXF.js"),
+      "pre-compact": () => import("./pre-compact-HDV6X5QM.js"),
+      "post-compact": () => import("./post-compact-QA5LME2J.js")
     };
     const loader = HOOK_DISPATCH[hookName];
     if (!loader) {
@@ -93,13 +93,13 @@ async function main() {
     }
     return (await loader()).main();
   }
-  if (cmd === "daemon") return (await import("./main-4J4QZZTZ.js")).main();
+  if (cmd === "daemon") return (await import("./main-4HKTZFIM.js")).main();
   if (cmd === "doctor") {
     const vaultDir2 = resolveVaultDir();
-    return (await import("./doctor-HJCWHAU4.js")).run(args, vaultDir2);
+    return (await import("./doctor-QK6KFY6H.js")).run(args, vaultDir2);
   }
-  if (cmd === "update") return (await import("./update-ZSHVXWSQ.js")).run(args);
-  if (cmd === "remove") return (await import("./remove-F77AAALE.js")).run(args);
+  if (cmd === "update") return (await import("./update-TVXAUJMZ.js")).run(args);
+  if (cmd === "remove") return (await import("./remove-USQDLGTJ.js")).run(args);
   const vaultDir = resolveVaultDir();
   if (!fs.existsSync(path.join(vaultDir, "myco.yaml"))) {
     console.error(`No myco.yaml found in ${vaultDir}. Run 'myco init' first.`);
@@ -111,37 +111,37 @@ async function main() {
     case "verify":
       return (await import("./verify-R76ZFJSZ.js")).run(args, vaultDir);
     case "stats":
-      return (await import("./stats-MKMETHMA.js")).run(args, vaultDir);
+      return (await import("./stats-JCLZLA5G.js")).run(args, vaultDir);
     case "search":
-      return (await import("./search-NHNVUAQQ.js")).run(args, vaultDir);
+      return (await import("./search-5COKV6TD.js")).run(args, vaultDir);
     case "vectors":
-      return (await import("./search-NHNVUAQQ.js")).runVectors(args, vaultDir);
+      return (await import("./search-5COKV6TD.js")).runVectors(args, vaultDir);
     case "session":
-      return (await import("./session-3HLC5KOD.js")).run(args, vaultDir);
+      return (await import("./session-NJCUW3OX.js")).run(args, vaultDir);
     case "setup-llm":
-      return (await import("./setup-llm-JMWSNQ2C.js")).run(args, vaultDir);
+      return (await import("./setup-llm-FYPPJI6W.js")).run(args, vaultDir);
     case "setup-digest":
       return (await import("./setup-digest-4KDSXAIV.js")).run(args, vaultDir);
     case "agent": {
       if (args[0] === "eval") {
-        return (await import("./agent-eval-YK2VP2S4.js")).run(args.slice(1), vaultDir);
+        return (await import("./agent-eval-2MQKTXX3.js")).run(args.slice(1), vaultDir);
       }
-      return (await import("./agent-run-GEJBD2YD.js")).run(args, vaultDir);
+      return (await import("./agent-run-XJBTSVJR.js")).run(args, vaultDir);
     }
     case "task":
-      return (await import("./agent-tasks-5XSRGTRX.js")).run(args, vaultDir);
+      return (await import("./agent-tasks-7MWBZOC7.js")).run(args, vaultDir);
     case "team": {
       const sub = args[0];
-      if (sub === "init") return (await import("./team-U2LDKIS4.js")).teamInit(vaultDir);
-      if (sub === "upgrade") return (await import("./team-U2LDKIS4.js")).teamUpgrade(vaultDir);
+      if (sub === "init") return (await import("./team-VJ3M263F.js")).teamInit(vaultDir);
+      if (sub === "upgrade") return (await import("./team-VJ3M263F.js")).teamUpgrade(vaultDir);
       console.error("Usage: myco team <init|upgrade>");
       process.exit(1);
       break;
     }
     case "open":
-      return (await import("./open-7TXJQM3H.js")).run(args, vaultDir);
+      return (await import("./open-3P3DDAOA.js")).run(args, vaultDir);
     case "restart":
-      return (await import("./restart-UEFDPMLT.js")).run(args, vaultDir);
+      return (await import("./restart-FQLZE2TW.js")).run(args, vaultDir);
     case "logs":
       return (await import("./logs-7YVGGBIS.js")).run(args, vaultDir);
     default:
@@ -154,4 +154,4 @@ main().catch((err) => {
   console.error(`myco: ${err.message}`);
   process.exit(1);
 });
-//# sourceMappingURL=cli-HSLIG7EX.js.map
+//# sourceMappingURL=cli-DDHTHU2J.js.map

package/dist/{client-Z43DNLJH.js → client-PQU53UQU.js}

@@ -1,15 +1,17 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   DaemonClient,
+  isIgnoredEventResponse,
   resolveCliEntryPath
-} from "./chunk-KTTSXYEK.js";
-import "./chunk-ENZR5NG7.js";
+} from "./chunk-6FBLL7MD.js";
+import "./chunk-Z55WGA2J.js";
 import "./chunk-LPUQPDC2.js";
 import "./chunk-6C6QZ4PM.js";
 import "./chunk-UUHLLQXO.js";
 import "./chunk-PZUWP5VK.js";
 export {
   DaemonClient,
+  isIgnoredEventResponse,
   resolveCliEntryPath
 };
-//# sourceMappingURL=client-Z43DNLJH.js.map
+//# sourceMappingURL=client-PQU53UQU.js.map

package/dist/{doctor-HJCWHAU4.js → doctor-QK6KFY6H.js}

@@ -1,7 +1,7 @@
 import { createRequire as __cr } from 'node:module'; const require = __cr(import.meta.url);
 import {
   isProcessAlive
-} from "./chunk-QDLVIW2O.js";
+} from "./chunk-W5L5IHP5.js";
 import "./chunk-SAKJMNSR.js";
 import {
   MYCO_MCP_SERVER_NAME,
@@ -12,8 +12,8 @@ import "./chunk-53RPGOEN.js";
 import "./chunk-OUJSQSKE.js";
 import "./chunk-POEPHBQK.js";
 import "./chunk-MYX5NCRH.js";
-import "./chunk-KTTSXYEK.js";
-import "./chunk-ENZR5NG7.js";
+import "./chunk-6FBLL7MD.js";
+import "./chunk-Z55WGA2J.js";
 import "./chunk-LPUQPDC2.js";
 import "./chunk-6C6QZ4PM.js";
 import "./chunk-UUHLLQXO.js";
@@ -308,4 +308,4 @@ export {
   run,
   runChecks
 };
-//# sourceMappingURL=doctor-HJCWHAU4.js.map
+//# sourceMappingURL=doctor-QK6KFY6H.js.map

package/dist/{executor-DO6QFC6G.js → executor-FJCMNSXM.js}

@@ -7,7 +7,7 @@ import {
   finalizeOnTaskSuccess,
   resolvePhaseExecution,
   runAgent
-} from "./chunk-X2IRGXGF.js";
+} from "./chunk-HCT7RMM2.js";
 import "./chunk-QATYARI5.js";
 import "./chunk-QLLBJEM7.js";
 import "./chunk-USVFEWYL.js";
@@ -17,15 +17,15 @@ import "./chunk-FCJ5JV54.js";
 import "./chunk-U5EW2VIQ.js";
 import "./chunk-CISWUP5W.js";
 import "./chunk-X3IGT5RV.js";
-import "./chunk-N7Z3LUEZ.js";
+import "./chunk-DBBO6FHE.js";
 import "./chunk-RQSJLWP4.js";
-import "./chunk-EEOJWLMP.js";
+import "./chunk-DMPCC7V6.js";
 import "./chunk-DTWUHHFI.js";
 import "./chunk-53RPGOEN.js";
 import "./chunk-OUJSQSKE.js";
 import "./chunk-POEPHBQK.js";
 import "./chunk-MYX5NCRH.js";
-import "./chunk-ENZR5NG7.js";
+import "./chunk-Z55WGA2J.js";
 import "./chunk-LPUQPDC2.js";
 import "./chunk-6C6QZ4PM.js";
 import "./chunk-UUHLLQXO.js";
@@ -42,4 +42,4 @@ export {
   resolvePhaseExecution,
   runAgent
 };
-//# sourceMappingURL=executor-DO6QFC6G.js.map
+//# sourceMappingURL=executor-FJCMNSXM.js.map

package/dist/{init-4KVK7W2E.js → init-GQPD6HHX.js}

@@ -2,7 +2,7 @@ import { createRequire as __cr } from 'node:module'; const require = __cr(import
 import {
   VAULT_GITIGNORE,
   registerSymbionts
-} from "./chunk-QDLVIW2O.js";
+} from "./chunk-W5L5IHP5.js";
 import {
   parseStringFlag
 } from "./chunk-SAKJMNSR.js";
@@ -26,10 +26,10 @@ import {
 import {
   resolveVaultDir
 } from "./chunk-TSM6VESW.js";
-import "./chunk-KTTSXYEK.js";
+import "./chunk-6FBLL7MD.js";
 import {
   getPluginVersion
-} from "./chunk-ENZR5NG7.js";
+} from "./chunk-Z55WGA2J.js";
 import {
   detectSymbionts,
   loadManifests,
@@ -153,7 +153,7 @@ async function run(args) {
       registerSymbionts(selectedManifests, projectRoot, pkgRoot, "Registered");
     }
   }
-  const { DaemonClient } = await import("./client-Z43DNLJH.js");
+  const { DaemonClient } = await import("./client-PQU53UQU.js");
   const client = new DaemonClient(vaultDir);
   const daemonHealthy = await client.ensureRunning();
   let daemonUrl = "";
@@ -191,4 +191,4 @@ async function run(args) {
 export {
   run
 };
-//# sourceMappingURL=init-4KVK7W2E.js.map
+//# sourceMappingURL=init-GQPD6HHX.js.map