@hasna/contacts 0.6.18 → 0.6.20

package/dist/cli/index.js

@@ -1011,7 +1011,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          } else {}
+          }
         };
       }
       return this;
@@ -2103,24 +2103,24 @@ var require_commander = __commonJS((exports) => {
 import { createRequire } from "module";
 import { Database } from "bun:sqlite";
 import {
-  existsSync,
+  existsSync as existsSync2,
   mkdirSync,
   readdirSync,
   copyFileSync
 } from "fs";
-import { homedir } from "os";
-import { join, relative } from "path";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
-import { readdirSync as readdirSync2, existsSync as existsSync3 } from "fs";
-import { join as join3 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join2, relative } from "path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "fs";
+import { homedir as homedir22 } from "os";
+import { join as join22 } from "path";
+import { readdirSync as readdirSync3, existsSync as existsSync6 } from "fs";
+import { join as join6 } from "path";
+import { homedir as homedir5 } from "os";
 import { hostname } from "os";
-import { homedir as homedir4 } from "os";
-import { join as join4 } from "path";
-import { join as join6, dirname } from "path";
-import { homedir as homedir5, platform } from "os";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
+import { join as join5, dirname } from "path";
+import { homedir as homedir4, platform } from "os";
 function __accessProp2(key) {
   return this[key];
 }
@@ -2991,13 +2991,13 @@ function custom(check, _params = {}, fatal) {
   return ZodAny.create();
 }
 function getDataDir(serviceName) {
-  const dir = join(HASNA_DIR, serviceName);
+  const dir = join2(HASNA_DIR, serviceName);
   mkdirSync(dir, { recursive: true });
   return dir;
 }
 function getDbPath(serviceName) {
   const dir = getDataDir(serviceName);
-  return join(dir, `${serviceName}.db`);
+  return join2(dir, `${serviceName}.db`);
 }
 function getConfigDir() {
   return CONFIG_DIR;
@@ -3006,7 +3006,7 @@ function getConfigPath() {
   return CONFIG_PATH;
 }
 function getCloudConfig() {
-  if (!existsSync2(CONFIG_PATH)) {
+  if (!existsSync22(CONFIG_PATH)) {
     return CloudConfigSchema.parse({});
   }
   try {
@@ -3048,11 +3048,11 @@ function isSyncExcludedTable(table) {
   return SYNC_EXCLUDED_TABLE_PATTERNS.some((p) => p.test(table));
 }
 function discoverServices() {
-  const dataDir = join3(homedir3(), ".hasna");
-  if (!existsSync3(dataDir))
+  const dataDir = join6(homedir5(), ".hasna");
+  if (!existsSync6(dataDir))
     return [];
   try {
-    const entries = readdirSync2(dataDir, { withFileTypes: true });
+    const entries = readdirSync3(dataDir, { withFileTypes: true });
     return entries.filter((e) => {
       if (!e.isDirectory())
         return false;
@@ -3064,30 +3064,30 @@ function discoverServices() {
     return [];
   }
 }
-function discoverSyncableServices() {
+function discoverSyncableServices2() {
   const local = discoverServices();
   const pgSet = new Set(KNOWN_PG_SERVICES);
   return local.filter((s) => pgSet.has(s));
 }
 function getServiceDbPath(service) {
-  const dataDir = join3(homedir3(), ".hasna", service);
-  if (!existsSync3(dataDir))
+  const dataDir = join6(homedir5(), ".hasna", service);
+  if (!existsSync6(dataDir))
     return null;
   const candidates = [
-    join3(dataDir, `${service}.db`),
-    join3(dataDir, "data.db"),
-    join3(dataDir, "database.db")
+    join6(dataDir, `${service}.db`),
+    join6(dataDir, "data.db"),
+    join6(dataDir, "database.db")
   ];
   try {
-    const files = readdirSync2(dataDir);
+    const files = readdirSync3(dataDir);
     for (const f of files) {
       if (f.endsWith(".db") && !f.endsWith("-wal") && !f.endsWith("-shm")) {
-        candidates.push(join3(dataDir, f));
+        candidates.push(join6(dataDir, f));
       }
     }
   } catch {}
   for (const p of candidates) {
-    if (existsSync3(p))
+    if (existsSync6(p))
       return p;
   }
   return null;
@@ -3394,9 +3394,9 @@ async function syncTransfer(source, target, options, _direction) {
           const batch = rows.slice(offset, offset + batchSize);
           try {
             if (isAsyncAdapter(target)) {
-              await batchUpsertPg(target, table, columns, updateCols, pkColumns, batch, columns.includes(conflictColumn) ? conflictColumn : undefined);
+              await batchUpsertPg(target, table, columns, updateCols, pkColumns, batch);
             } else {
-              batchUpsertSqlite(target, table, columns, updateCols, pkColumns, batch, columns.includes(conflictColumn) ? conflictColumn : undefined);
+              batchUpsertSqlite(target, table, columns, updateCols, pkColumns, batch);
             }
             result.rowsWritten += batch.length;
           } catch (err) {
@@ -3443,7 +3443,7 @@ async function syncTransfer(source, target, options, _direction) {
   }
   return results;
 }
-async function batchUpsertPg(target, table, columns, updateCols, primaryKeys, batch, conflictColumn) {
+async function batchUpsertPg(target, table, columns, updateCols, primaryKeys, batch) {
   if (batch.length === 0)
     return;
   const colList = columns.map((c) => `"${c}"`).join(", ");
@@ -3453,22 +3453,20 @@ async function batchUpsertPg(target, table, columns, updateCols, primaryKeys, ba
   }).join(", ");
   const pkList = primaryKeys.map((c) => `"${c}"`).join(", ");
   const setClause = updateCols.length > 0 ? updateCols.map((c) => `"${c}" = EXCLUDED."${c}"`).join(", ") : `"${primaryKeys[0]}" = EXCLUDED."${primaryKeys[0]}"`;
-  const whereClause = conflictColumn && updateCols.includes(conflictColumn) ? ` WHERE "${table}"."${conflictColumn}" IS NULL OR EXCLUDED."${conflictColumn}" >= "${table}"."${conflictColumn}"` : "";
   const sql = `INSERT INTO "${table}" (${colList}) VALUES ${valuePlaceholders}
-    ON CONFLICT (${pkList}) DO UPDATE SET ${setClause}${whereClause}`;
+    ON CONFLICT (${pkList}) DO UPDATE SET ${setClause}`;
   const params = batch.flatMap((row) => columns.map((c) => row[c] ?? null));
   await target.run(sql, ...params);
 }
-function batchUpsertSqlite(target, table, columns, updateCols, primaryKeys, batch, conflictColumn) {
+function batchUpsertSqlite(target, table, columns, updateCols, primaryKeys, batch) {
   if (batch.length === 0)
     return;
   const colList = columns.map((c) => `"${c}"`).join(", ");
   const valuePlaceholders = batch.map(() => `(${columns.map(() => "?").join(", ")})`).join(", ");
   const pkList = primaryKeys.map((c) => `"${c}"`).join(", ");
   const setClause = updateCols.length > 0 ? updateCols.map((c) => `"${c}" = EXCLUDED."${c}"`).join(", ") : `"${primaryKeys[0]}" = EXCLUDED."${primaryKeys[0]}"`;
-  const whereClause = conflictColumn && updateCols.includes(conflictColumn) ? ` WHERE "${table}"."${conflictColumn}" IS NULL OR EXCLUDED."${conflictColumn}" >= "${table}"."${conflictColumn}"` : "";
   const sql = `INSERT INTO "${table}" (${colList}) VALUES ${valuePlaceholders}
-    ON CONFLICT (${pkList}) DO UPDATE SET ${setClause}${whereClause}`;
+    ON CONFLICT (${pkList}) DO UPDATE SET ${setClause}`;
   const params = batch.flatMap((row) => columns.map((c) => coerceForSqlite(row[c])));
   target.run(sql, ...params);
 }
@@ -3527,17 +3525,17 @@ function ensureFeedbackTable(db) {
 function saveFeedback(db, feedback) {
   ensureFeedbackTable(db);
   const id = feedback.id ?? Math.random().toString(36).slice(2) + Date.now().toString(36);
-  const now = new Date().toISOString();
+  const now2 = new Date().toISOString();
   const machineId = feedback.machine_id ?? hostname();
   db.run(`INSERT INTO feedback (id, service, version, message, email, machine_id, created_at)
-     VALUES (?, ?, ?, ?, ?, ?, ?)`, id, feedback.service, feedback.version ?? "", feedback.message, feedback.email ?? "", machineId, feedback.created_at ?? now);
+     VALUES (?, ?, ?, ?, ?, ?, ?)`, id, feedback.service, feedback.version ?? "", feedback.message, feedback.email ?? "", machineId, feedback.created_at ?? now2);
   return id;
 }
 async function sendFeedback(feedback, db) {
   const config = getCloudConfig();
   const id = feedback.id ?? Math.random().toString(36).slice(2) + Date.now().toString(36);
   const machineId = feedback.machine_id ?? hostname();
-  const now = new Date().toISOString();
+  const now2 = new Date().toISOString();
   const payload = {
     id,
     service: feedback.service,
@@ -3545,7 +3543,7 @@ async function sendFeedback(feedback, db) {
     message: feedback.message,
     email: feedback.email ?? "",
     machine_id: machineId,
-    created_at: feedback.created_at ?? now
+    created_at: feedback.created_at ?? now2
   };
   try {
     const res = await fetch(config.feedback_endpoint, {
@@ -3597,8 +3595,8 @@ class SyncProgressTracker {
   }
   start(table, total, direction) {
     const resumed = this.canResume(table);
-    const now = Date.now();
-    this.startTimes.set(table, now);
+    const now2 = Date.now();
+    this.startTimes.set(table, now2);
     const status = resumed ? "resumed" : "in_progress";
     const info = {
       table,
@@ -3693,7 +3691,7 @@ class SyncProgressTracker {
     }
   }
 }
-function registerCloudTools(server, serviceName, opts = {}) {
+function registerCloudTools(server, serviceName) {
   server.tool(`${serviceName}_cloud_status`, "Show cloud configuration and connection health", {}, async () => {
     const config = getCloudConfig();
     const lines = [
@@ -3726,13 +3724,8 @@ function registerCloudTools(server, serviceName, opts = {}) {
         isError: true
       };
     }
-    const local = new SqliteAdapter(opts.dbPath ?? getDbPath(serviceName));
+    const local = new SqliteAdapter(getDbPath(serviceName));
     const cloud = new PgAdapterAsync(getConnectionString(serviceName));
-    if (opts.migrations?.length) {
-      for (const sql of opts.migrations) {
-        await cloud.run(sql);
-      }
-    }
     const tableList = tablesStr ? tablesStr.split(",").map((t) => t.trim()) : listSqliteTables(local);
     const results = await syncPush(local, cloud, { tables: tableList });
     local.close();
@@ -3754,7 +3747,7 @@ function registerCloudTools(server, serviceName, opts = {}) {
         isError: true
       };
     }
-    const local = new SqliteAdapter(opts.dbPath ?? getDbPath(serviceName));
+    const local = new SqliteAdapter(getDbPath(serviceName));
     const cloud = new PgAdapterAsync(getConnectionString(serviceName));
     let tableList;
     if (tablesStr) {
@@ -12100,7 +12093,7 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
     init_external();
   });
   init_dotfile = __esm2(() => {
-    HASNA_DIR = join(homedir(), ".hasna");
+    HASNA_DIR = join2(homedir2(), ".hasna");
   });
   exports_config = {};
   __export2(exports_config, {
@@ -12131,14 +12124,14 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
         schedule_minutes: exports_external.number().default(0)
       }).default({})
     });
-    CONFIG_DIR = join2(homedir2(), ".hasna", "cloud");
-    CONFIG_PATH = join2(CONFIG_DIR, "config.json");
+    CONFIG_DIR = join22(homedir22(), ".hasna", "cloud");
+    CONFIG_PATH = join22(CONFIG_DIR, "config.json");
   });
   exports_discover = {};
   __export2(exports_discover, {
     isSyncExcludedTable: () => isSyncExcludedTable,
     getServiceDbPath: () => getServiceDbPath,
-    discoverSyncableServices: () => discoverSyncableServices,
+    discoverSyncableServices: () => discoverSyncableServices2,
     discoverServices: () => discoverServices,
     SYNC_EXCLUDED_TABLE_PATTERNS: () => SYNC_EXCLUDED_TABLE_PATTERNS,
     KNOWN_PG_SERVICES: () => KNOWN_PG_SERVICES
@@ -12193,15 +12186,13 @@ See https://www.postgresql.org/docs/current/libpq-ssl.html for libpq SSL mode de
   init_config();
   init_config();
   init_dotfile();
-  init_adapter();
   init_config();
-  init_discover();
-  AUTO_SYNC_CONFIG_PATH = join4(homedir4(), ".hasna", "cloud", "config.json");
+  AUTO_SYNC_CONFIG_PATH = join3(homedir3(), ".hasna", "cloud", "config.json");
   init_config();
   init_adapter();
   init_dotfile();
   init_config();
-  CONFIG_DIR2 = join6(homedir5(), ".hasna", "cloud");
+  CONFIG_DIR2 = join5(homedir4(), ".hasna", "cloud");
   init_adapter();
   init_config();
   init_discover();
@@ -12248,23 +12239,23 @@ var exports_database = {};
 __export(exports_database, {
   uuid: () => uuid,
   resetDatabase: () => resetDatabase,
-  now: () => now,
+  now: () => now2,
   getDbPath: () => getDbPath2,
   getDatabase: () => getDatabase,
   getDataDir: () => getDataDir2
 });
-import { copyFileSync as copyFileSync2, existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, statSync } from "fs";
-import { dirname as dirname2, join as join5, resolve } from "path";
+import { copyFileSync as copyFileSync2, existsSync as existsSync3, mkdirSync as mkdirSync3, readdirSync as readdirSync2, statSync } from "fs";
+import { dirname as dirname2, join as join4, resolve } from "path";
 function getDataDir2() {
   const home = process.env["HOME"] || process.env["USERPROFILE"] || "~";
-  const newDir = join5(home, ".hasna", "contacts");
-  const oldDir = join5(home, ".contacts");
-  if (existsSync4(oldDir) && !existsSync4(newDir)) {
+  const newDir = join4(home, ".hasna", "contacts");
+  const oldDir = join4(home, ".contacts");
+  if (existsSync3(oldDir) && !existsSync3(newDir)) {
     mkdirSync3(newDir, { recursive: true });
-    for (const file of readdirSync3(oldDir)) {
-      const oldPath = join5(oldDir, file);
+    for (const file of readdirSync2(oldDir)) {
+      const oldPath = join4(oldDir, file);
       if (statSync(oldPath).isFile()) {
-        copyFileSync2(oldPath, join5(newDir, file));
+        copyFileSync2(oldPath, join4(newDir, file));
       }
     }
   }
@@ -12276,13 +12267,13 @@ function getDbPath2() {
     return process.env["HASNA_CONTACTS_DB_PATH"];
   if (process.env["CONTACTS_DB_PATH"])
     return process.env["CONTACTS_DB_PATH"];
-  return join5(getDataDir2(), "contacts.db");
+  return join4(getDataDir2(), "contacts.db");
 }
 function ensureDir(filePath) {
   if (filePath === ":memory:")
     return;
   const dir = dirname2(resolve(filePath));
-  if (!existsSync4(dir))
+  if (!existsSync3(dir))
     mkdirSync3(dir, { recursive: true });
 }
 function getDatabase(path) {
@@ -12306,7 +12297,7 @@ function resetDatabase() {
 function uuid() {
   return crypto.randomUUID();
 }
-function now() {
+function now2() {
   return new Date().toISOString();
 }
 function runMigrations(db) {
@@ -13004,7 +12995,7 @@ function loadContactDetails(db, contact) {
 function createContact(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   const firstName = input.first_name ?? "";
   const lastName = input.last_name ?? "";
   const displayName = input.display_name ?? (firstName || lastName ? `${firstName} ${lastName}`.trim() : "Unnamed Contact");
@@ -13150,7 +13141,7 @@ function updateContact(id, input, db) {
   if (!existing)
     throw new ContactNotFoundError(id);
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.first_name !== undefined) {
     setClauses.push("first_name = ?");
     params.push(input.first_name);
@@ -13344,7 +13335,7 @@ function mergeContacts(keepId, mergeId, db) {
   d.run(`UPDATE activity_log SET contact_id = ? WHERE contact_id = ?`, [keepId, mergeId]);
   d.run(`DELETE FROM contacts WHERE id = ?`, [mergeId]);
   const updates = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (!keepRow.notes && mergeRow.notes) {
     updates.push("notes = ?");
     params.push(mergeRow.notes);
@@ -13418,7 +13409,7 @@ function archiveContact(id, db) {
   const row = d.query(`SELECT * FROM contacts WHERE id = ?`).get(id);
   if (!row)
     throw new ContactNotFoundError(id);
-  d.run(`UPDATE contacts SET archived = 1, updated_at = ? WHERE id = ?`, [now(), id]);
+  d.run(`UPDATE contacts SET archived = 1, updated_at = ? WHERE id = ?`, [now2(), id]);
   logActivity(d, { contact_id: id, action: "contact.archived", details: `Archived contact: ${row.display_name}` });
   const updated = d.query(`SELECT * FROM contacts WHERE id = ?`).get(id);
   return loadContactDetails(d, rowToContact(updated));
@@ -13428,7 +13419,7 @@ function unarchiveContact(id, db) {
   const row = d.query(`SELECT * FROM contacts WHERE id = ?`).get(id);
   if (!row)
     throw new ContactNotFoundError(id);
-  d.run(`UPDATE contacts SET archived = 0, updated_at = ? WHERE id = ?`, [now(), id]);
+  d.run(`UPDATE contacts SET archived = 0, updated_at = ? WHERE id = ?`, [now2(), id]);
   logActivity(d, { contact_id: id, action: "contact.unarchived", details: `Unarchived contact: ${row.display_name}` });
   const updated = d.query(`SELECT * FROM contacts WHERE id = ?`).get(id);
   return loadContactDetails(d, rowToContact(updated));
@@ -13475,7 +13466,7 @@ function autoLinkContactToCompany(contactId, db) {
   const companyRow = d.query(`SELECT id FROM companies WHERE domain = ? LIMIT 1`).get(domain);
   if (!companyRow)
     return null;
-  d.run(`UPDATE contacts SET company_id = ?, updated_at = ? WHERE id = ?`, [companyRow.id, now(), contactId]);
+  d.run(`UPDATE contacts SET company_id = ?, updated_at = ? WHERE id = ?`, [companyRow.id, now2(), contactId]);
   logActivity(d, { contact_id: contactId, action: "contact.auto_linked", details: `Auto-linked to company via email domain: ${domain}` });
   const updated = d.query(`SELECT * FROM contacts WHERE id = ?`).get(contactId);
   return loadContactDetails(d, rowToContact(updated));
@@ -13595,7 +13586,7 @@ function loadCompanyDetails(db, company) {
 function createCompany(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO companies (id, name, domain, logo_url, description, industry, size, founded_year, notes, custom_fields, is_owned_entity, entity_type, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -13684,7 +13675,7 @@ function updateCompany(id, input, db) {
   if (!existing)
     throw new CompanyNotFoundError(id);
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.name !== undefined) {
     setClauses.push("name = ?");
     params.push(input.name);
@@ -13782,7 +13773,7 @@ function archiveCompany(id, db) {
   const row = d.query(`SELECT * FROM companies WHERE id = ?`).get(id);
   if (!row)
     throw new CompanyNotFoundError(id);
-  d.run(`UPDATE companies SET archived = 1, updated_at = ? WHERE id = ?`, [now(), id]);
+  d.run(`UPDATE companies SET archived = 1, updated_at = ? WHERE id = ?`, [now2(), id]);
   logActivity(d, { company_id: id, action: "company.archived", details: `Archived company: ${row.name}` });
   const updated = d.query(`SELECT * FROM companies WHERE id = ?`).get(id);
   return loadCompanyDetails(d, rowToCompany2(updated));
@@ -13792,7 +13783,7 @@ function unarchiveCompany(id, db) {
   const row = d.query(`SELECT * FROM companies WHERE id = ?`).get(id);
   if (!row)
     throw new CompanyNotFoundError(id);
-  d.run(`UPDATE companies SET archived = 0, updated_at = ? WHERE id = ?`, [now(), id]);
+  d.run(`UPDATE companies SET archived = 0, updated_at = ? WHERE id = ?`, [now2(), id]);
   logActivity(d, { company_id: id, action: "company.unarchived", details: `Unarchived company: ${row.name}` });
   const updated = d.query(`SELECT * FROM companies WHERE id = ?`).get(id);
   return loadCompanyDetails(d, rowToCompany2(updated));
@@ -13948,7 +13939,7 @@ var init_tags = __esm(() => {
 // src/db/groups.ts
 function createGroup(db, input) {
   const id = uuid();
-  db.query(`INSERT INTO groups(id, name, description, project_id, created_at, updated_at) VALUES(?,?,?,?,?,?)`).run(id, input.name, input.description ?? null, input.project_id ?? null, now(), now());
+  db.query(`INSERT INTO groups(id, name, description, project_id, created_at, updated_at) VALUES(?,?,?,?,?,?)`).run(id, input.name, input.description ?? null, input.project_id ?? null, now2(), now2());
   return getGroup(db, id);
 }
 function getGroup(db, id) {
@@ -13978,7 +13969,7 @@ function updateGroup(db, id, input) {
     vals.push(input.project_id ?? null);
   }
   fields.push("updated_at = ?");
-  vals.push(now());
+  vals.push(now2());
   vals.push(id);
   db.query(`UPDATE groups SET ${fields.join(", ")} WHERE id = ?`).run(...vals);
   return getGroup(db, id);
@@ -14568,10 +14559,10 @@ __export(exports_images, {
   getImageAsBase64: () => getImageAsBase64,
   deleteImage: () => deleteImage
 });
-import { existsSync as existsSync7, mkdirSync as mkdirSync6, copyFileSync as copyFileSync3, unlinkSync, readdirSync as readdirSync5, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join8, extname, basename } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync6, copyFileSync as copyFileSync3, unlinkSync, readdirSync as readdirSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join9, extname, basename } from "path";
 function ensureImagesDir() {
-  if (!existsSync7(IMAGES_DIR))
+  if (!existsSync5(IMAGES_DIR))
     mkdirSync6(IMAGES_DIR, { recursive: true });
 }
 function getImagesDir() {
@@ -14586,17 +14577,17 @@ function saveImage(entityId, source, options) {
     const ext2 = base64Match[1] === "jpeg" ? "jpg" : base64Match[1];
     const data = Buffer.from(base64Match[2], "base64");
     const filename2 = `${entityId}.${ext2}`;
-    writeFileSync3(join8(IMAGES_DIR, filename2), data);
+    writeFileSync3(join9(IMAGES_DIR, filename2), data);
     return filename2;
   }
-  if (!existsSync7(source) && /^[A-Za-z0-9+/=\n\r]+$/.test(source.trim()) && source.length > 100) {
+  if (!existsSync5(source) && /^[A-Za-z0-9+/=\n\r]+$/.test(source.trim()) && source.length > 100) {
     const ext2 = options?.format || "jpg";
     const data = Buffer.from(source.trim(), "base64");
     const filename2 = `${entityId}.${ext2}`;
-    writeFileSync3(join8(IMAGES_DIR, filename2), data);
+    writeFileSync3(join9(IMAGES_DIR, filename2), data);
     return filename2;
   }
-  if (!existsSync7(source)) {
+  if (!existsSync5(source)) {
     throw new Error(`Image file not found: ${source}`);
   }
   const ext = extname(source).slice(1).toLowerCase() || "jpg";
@@ -14605,14 +14596,14 @@ function saveImage(entityId, source, options) {
     throw new Error(`Unsupported image format: ${ext}. Supported: ${validExts.join(", ")}`);
   }
   const filename = `${entityId}.${ext === "jpeg" ? "jpg" : ext}`;
-  copyFileSync3(source, join8(IMAGES_DIR, filename));
+  copyFileSync3(source, join9(IMAGES_DIR, filename));
   return filename;
 }
 function getImagePath(entityId) {
   ensureImagesDir();
-  const files = readdirSync5(IMAGES_DIR);
+  const files = readdirSync4(IMAGES_DIR);
   const match = files.find((f) => f.startsWith(`${entityId}.`));
-  return match ? join8(IMAGES_DIR, match) : null;
+  return match ? join9(IMAGES_DIR, match) : null;
 }
 function getImageAsBase64(entityId) {
   const path = getImagePath(entityId);
@@ -14625,11 +14616,11 @@ function getImageAsBase64(entityId) {
 }
 function deleteImage(entityId) {
   ensureImagesDir();
-  const files = readdirSync5(IMAGES_DIR);
+  const files = readdirSync4(IMAGES_DIR);
   let deleted = false;
   for (const f of files) {
     if (f.startsWith(`${entityId}.`)) {
-      unlinkSync(join8(IMAGES_DIR, f));
+      unlinkSync(join9(IMAGES_DIR, f));
       deleted = true;
     }
   }
@@ -14637,17 +14628,17 @@ function deleteImage(entityId) {
 }
 function listImages() {
   ensureImagesDir();
-  const files = readdirSync5(IMAGES_DIR).filter((f) => !f.startsWith("."));
+  const files = readdirSync4(IMAGES_DIR).filter((f) => !f.startsWith("."));
   return files.map((f) => ({
     entity_id: basename(f, extname(f)),
     filename: f,
-    path: join8(IMAGES_DIR, f)
+    path: join9(IMAGES_DIR, f)
   }));
 }
 var IMAGES_DIR;
 var init_images = __esm(() => {
   init_database();
-  IMAGES_DIR = join8(getDataDir2(), "images");
+  IMAGES_DIR = join9(getDataDir2(), "images");
 });
 
 // src/mcp/http.ts
@@ -14699,8 +14690,8 @@ var DEFAULT_MCP_HTTP_PORT = 8809, MCP_HTTP_HOST = "127.0.0.1", MCP_SERVICE_NAME
 var init_http = () => {};
 
 // src/lib/connector.ts
-import { join as join9 } from "path";
-import { existsSync as existsSync8, readFileSync as readFileSync4 } from "fs";
+import { join as join10 } from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync4 } from "fs";
 import { homedir as homedir6 } from "os";
 async function runConnector(name, args, opts = {}) {
   const binary = `connect-${name}`;
@@ -14751,12 +14742,12 @@ async function runConnector(name, args, opts = {}) {
 }
 function getConnectorTokenPath(name, profile = "default") {
   const bases = [
-    join9(homedir6(), ".connectors", `connect-${name}`, "profiles", profile, "tokens.json"),
-    join9(homedir6(), ".connect", `connect-${name}`, "profiles", profile, "tokens.json"),
-    join9(homedir6(), ".connect", `connect-${name}`, "tokens.json")
+    join10(homedir6(), ".connectors", `connect-${name}`, "profiles", profile, "tokens.json"),
+    join10(homedir6(), ".connect", `connect-${name}`, "profiles", profile, "tokens.json"),
+    join10(homedir6(), ".connect", `connect-${name}`, "tokens.json")
   ];
   for (const p of bases) {
-    if (existsSync8(p))
+    if (existsSync7(p))
       return p;
   }
   return null;
@@ -15749,7 +15740,7 @@ function rowToOrgMember(row) {
 function addOrgMember(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO org_members (id, company_id, contact_id, title, specialization, office_phone, response_sla_hours, notes, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -15773,7 +15764,7 @@ function listOrgMembers(companyId, db) {
 function updateOrgMember(id, input, db) {
   const d = db || getDatabase();
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if ("title" in input) {
     setClauses.push("title = ?");
     params.push(input.title ?? null);
@@ -15920,7 +15911,7 @@ function rowToContactTask(row) {
 function createContactTask(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO contact_tasks
       (id, title, description, contact_id, assigned_by, deadline, status, priority,
        entity_id, linked_todos_task_id, escalation_rules, created_at, updated_at)
@@ -15968,7 +15959,7 @@ function listContactTasks(opts = {}, db) {
 function updateContactTask(id, input, db) {
   const d = db || getDatabase();
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.title !== undefined) {
     setClauses.push("title = ?");
     params.push(input.title);
@@ -16066,7 +16057,7 @@ function rowToApplication(row) {
 function createApplication(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO applications
       (id, program_name, provider_company_id, type, value_usd, applicant_contact_id, primary_contact_id,
        status, submitted_date, decision_date, follow_up_date, notes, method, form_url, metadata, created_at, updated_at)
@@ -16118,7 +16109,7 @@ function listApplications(opts = {}, db) {
 function updateApplication(id, input, db) {
   const d = db || getDatabase();
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.program_name !== undefined) {
     setClauses.push("program_name = ?");
     params.push(input.program_name);
@@ -16199,9 +16190,9 @@ __export(exports_upcoming, {
 function getUpcomingItems(days = 7, db) {
   const _db2 = db || getDatabase();
   const items = [];
-  const now3 = new Date;
-  const future = new Date(now3.getTime() + days * 86400000);
-  const todayStr = now3.toISOString().slice(0, 10);
+  const now4 = new Date;
+  const future = new Date(now4.getTime() + days * 86400000);
+  const todayStr = now4.toISOString().slice(0, 10);
   const futureStr = future.toISOString().slice(0, 10);
   const followUps = _db2.query(`SELECT c.id, c.display_name, c.follow_up_at FROM contacts c WHERE c.follow_up_at IS NOT NULL AND c.follow_up_at <= ? AND c.do_not_contact = 0`).all(futureStr);
   for (const r of followUps) {
@@ -16222,8 +16213,8 @@ function getUpcomingItems(days = 7, db) {
   const contacts = _db2.query(`SELECT id, display_name, birthday FROM contacts WHERE birthday IS NOT NULL AND do_not_contact = 0`).all();
   for (const c of contacts) {
     const bday = new Date(c.birthday);
-    const thisYear = new Date(now3.getFullYear(), bday.getMonth(), bday.getDate());
-    const nextBday = thisYear >= now3 ? thisYear : new Date(now3.getFullYear() + 1, bday.getMonth(), bday.getDate());
+    const thisYear = new Date(now4.getFullYear(), bday.getMonth(), bday.getDate());
+    const nextBday = thisYear >= now4 ? thisYear : new Date(now4.getFullYear() + 1, bday.getMonth(), bday.getDate());
     const nextStr = nextBday.toISOString().slice(0, 10);
     if (nextStr <= futureStr) {
       items.push({ date: nextStr, type: "birthday", contact_id: c.id, contact_name: c.display_name, title: `Birthday: ${c.display_name}`, urgency: nextStr === todayStr ? "today" : "upcoming" });
@@ -16364,7 +16355,7 @@ function rowToDeal(row) {
 function createDeal(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO deals (id, title, contact_id, company_id, stage, value_usd, currency, close_date, notes, created_at, updated_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -16412,7 +16403,7 @@ function updateDeal(id, input, db) {
   if (!existing)
     return null;
   const setClauses = ["updated_at = ?"];
-  const params = [now()];
+  const params = [now2()];
   if (input.title !== undefined) {
     setClauses.push("title = ?");
     params.push(input.title);
@@ -16500,7 +16491,7 @@ function rowToEvent(row) {
 function logEvent(input, db) {
   const d = db || getDatabase();
   const id = uuid();
-  const timestamp = now();
+  const timestamp = now2();
   d.run(`INSERT INTO events (id, title, type, event_date, duration_min, contact_ids, company_id, notes, outcome, deal_id, created_at)
      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
     id,
@@ -17212,7 +17203,7 @@ __export(exports_field_history, {
 });
 function recordFieldChange(contactId, fieldName, oldValue, newValue, source, createdBy, db) {
   const _db2 = db || getDatabase();
-  _db2.query(`INSERT INTO contact_field_history(id,contact_id,field_name,old_value,new_value,valid_from,source,created_by,created_at) VALUES(?,?,?,?,?,?,?,?,?)`).run(uuid(), contactId, fieldName, oldValue != null ? String(oldValue) : null, newValue != null ? String(newValue) : null, now(), source || null, createdBy || null, now());
+  _db2.query(`INSERT INTO contact_field_history(id,contact_id,field_name,old_value,new_value,valid_from,source,created_by,created_at) VALUES(?,?,?,?,?,?,?,?,?)`).run(uuid(), contactId, fieldName, oldValue != null ? String(oldValue) : null, newValue != null ? String(newValue) : null, now2(), source || null, createdBy || null, now2());
 }
 function getFieldHistory(contactId, fieldName, db) {
   const _db2 = db || getDatabase();
@@ -17245,7 +17236,7 @@ function addJobEntry(contactId, input, db) {
     _db2.query(`UPDATE job_history SET is_current=0, end_date=COALESCE(end_date,?) WHERE contact_id=? AND is_current=1`).run(new Date().toISOString().slice(0, 10), contactId);
   }
   const id = uuid();
-  _db2.query(`INSERT INTO job_history(id,contact_id,company_id,company_name,title,start_date,end_date,is_current,inferred,source,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.company_id || null, input.company_name, input.title || null, input.start_date || null, input.end_date || null, input.is_current ? 1 : 0, input.inferred ? 1 : 0, input.source || null, now());
+  _db2.query(`INSERT INTO job_history(id,contact_id,company_id,company_name,title,start_date,end_date,is_current,inferred,source,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.company_id || null, input.company_name, input.title || null, input.start_date || null, input.end_date || null, input.is_current ? 1 : 0, input.inferred ? 1 : 0, input.source || null, now2());
   return rowToJob(_db2.query(`SELECT * FROM job_history WHERE id=?`).get(id));
 }
 function getJobHistory(contactId, db) {
@@ -17272,7 +17263,7 @@ function rowToLearning(r) {
 function saveLearning(contactId, input, db) {
   const _db2 = db || getDatabase();
   const id = uuid();
-  _db2.query(`INSERT INTO contact_learnings(id,contact_id,content,type,confidence,importance,learned_by,session_id,visibility,tags,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.content, input.type || "fact", input.confidence ?? 70, input.importance ?? 5, input.learned_by || null, input.session_id || null, input.visibility || "shared", JSON.stringify(input.tags || []), now(), now());
+  _db2.query(`INSERT INTO contact_learnings(id,contact_id,content,type,confidence,importance,learned_by,session_id,visibility,tags,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.content, input.type || "fact", input.confidence ?? 70, input.importance ?? 5, input.learned_by || null, input.session_id || null, input.visibility || "shared", JSON.stringify(input.tags || []), now2(), now2());
   return rowToLearning(_db2.query(`SELECT * FROM contact_learnings WHERE id=?`).get(id));
 }
 function getLearnings(contactId, opts = {}, db) {
@@ -17311,12 +17302,12 @@ function searchLearnings(query, opts = {}, db) {
 }
 function confirmLearning(learningId, _agentName, db) {
   const _db2 = db || getDatabase();
-  _db2.query(`UPDATE contact_learnings SET confirmed_count=confirmed_count+1, confidence=MIN(100,confidence+10), updated_at=? WHERE id=?`).run(now(), learningId);
+  _db2.query(`UPDATE contact_learnings SET confirmed_count=confirmed_count+1, confidence=MIN(100,confidence+10), updated_at=? WHERE id=?`).run(now2(), learningId);
 }
 function decayLearnings(db) {
   const _db2 = db || getDatabase();
   const cutoff = new Date(Date.now() - 30 * 86400000).toISOString();
-  const result = _db2.query(`UPDATE contact_learnings SET confidence=MAX(10,confidence-5), updated_at=? WHERE confirmed_count=0 AND created_at<? AND confidence>10`).run(now(), cutoff);
+  const result = _db2.query(`UPDATE contact_learnings SET confidence=MAX(10,confidence-5), updated_at=? WHERE confirmed_count=0 AND created_at<? AND confidence>10`).run(now2(), cutoff);
   return result.changes || 0;
 }
 function deleteLearning(learningId, db) {
@@ -17336,7 +17327,7 @@ function acquireLock(contactId, agentName, ttlSeconds = 300, reason, sessionId,
     return { acquired: false, held_by: existing.agent_name, lock: existing };
   const id = uuid();
   const expiresAt = new Date(Date.now() + ttlSeconds * 1000).toISOString();
-  _db2.query(`INSERT INTO contact_locks(id,contact_id,agent_name,reason,acquired_at,expires_at,session_id) VALUES(?,?,?,?,?,?,?)`).run(id, contactId, agentName, reason || null, now(), expiresAt, sessionId || null);
+  _db2.query(`INSERT INTO contact_locks(id,contact_id,agent_name,reason,acquired_at,expires_at,session_id) VALUES(?,?,?,?,?,?,?)`).run(id, contactId, agentName, reason || null, now2(), expiresAt, sessionId || null);
   return {
     acquired: true,
     lock: _db2.query(`SELECT * FROM contact_locks WHERE id=?`).get(id)
@@ -17354,11 +17345,11 @@ function checkLock(contactId, db) {
 }
 function cleanExpiredLocks(db) {
   const _db2 = db || getDatabase();
-  _db2.query(`DELETE FROM contact_locks WHERE expires_at<?`).run(now());
+  _db2.query(`DELETE FROM contact_locks WHERE expires_at<?`).run(now2());
 }
 function logAgentActivity(contactId, agentName, action, details, sessionId, db) {
   const _db2 = db || getDatabase();
-  _db2.query(`INSERT INTO contact_agent_activity(id,contact_id,agent_name,action,details,session_id,created_at) VALUES(?,?,?,?,?,?,?)`).run(uuid(), contactId, agentName, action, details || null, sessionId || null, now());
+  _db2.query(`INSERT INTO contact_agent_activity(id,contact_id,agent_name,action,details,session_id,created_at) VALUES(?,?,?,?,?,?,?)`).run(uuid(), contactId, agentName, action, details || null, sessionId || null, now2());
 }
 function getAgentActivity(contactId, limit = 20, db) {
   const _db2 = db || getDatabase();
@@ -17443,7 +17434,7 @@ __export(exports_identity, {
 function addIdentity(contactId, system, externalId, externalUrl, confidence = "inferred", db) {
   const _db2 = db || getDatabase();
   const id = uuid();
-  _db2.query(`INSERT OR REPLACE INTO contact_identities(id,contact_id,system,external_id,external_url,confidence,created_at) VALUES(?,?,?,?,?,?,?)`).run(id, contactId, system, externalId, externalUrl || null, confidence, now());
+  _db2.query(`INSERT OR REPLACE INTO contact_identities(id,contact_id,system,external_id,external_url,confidence,created_at) VALUES(?,?,?,?,?,?,?)`).run(id, contactId, system, externalId, externalUrl || null, confidence, now2());
   return _db2.query(`SELECT * FROM contact_identities WHERE id=?`).get(id);
 }
 function resolveIdentity(system, externalId, db) {
@@ -17542,7 +17533,7 @@ async function embedContact(contactId, db) {
   const tokens = tokenize(text);
   const tfidf = buildTfIdf(tokens);
   const embedding = JSON.stringify(Array.from(tfidf.entries()).sort((a, b) => b[1] - a[1]).slice(0, 100));
-  _db2.query(`INSERT OR REPLACE INTO contact_embeddings(contact_id, embedding, model, embedded_text, created_at, updated_at) VALUES(?,?,'tfidf',?,?,?)`).run(contactId, embedding, text.slice(0, 500), now(), now());
+  _db2.query(`INSERT OR REPLACE INTO contact_embeddings(contact_id, embedding, model, embedded_text, created_at, updated_at) VALUES(?,?,'tfidf',?,?,?)`).run(contactId, embedding, text.slice(0, 500), now2(), now2());
 }
 async function embedAllContacts(db) {
   const _db2 = db || getDatabase();
@@ -17907,9 +17898,9 @@ function getStaleContacts(threshold = 40, db) {
 function markFieldVerified(contactId, fieldName, source, db) {
   const _db2 = db || getDatabase();
   try {
-    _db2.query(`INSERT OR REPLACE INTO field_verifications(contact_id,field_name,verified_at,source) VALUES(?,?,?,?)`).run(contactId, fieldName, now(), source || null);
+    _db2.query(`INSERT OR REPLACE INTO field_verifications(contact_id,field_name,verified_at,source) VALUES(?,?,?,?)`).run(contactId, fieldName, now2(), source || null);
   } catch {
-    _db2.query(`INSERT INTO activity_log(id,contact_id,action,details,created_at) VALUES(?,?,?,?,?)`).run(crypto.randomUUID(), contactId, "field.verified", JSON.stringify({ field_name: fieldName, source }), now());
+    _db2.query(`INSERT INTO activity_log(id,contact_id,action,details,created_at) VALUES(?,?,?,?,?)`).run(crypto.randomUUID(), contactId, "field.verified", JSON.stringify({ field_name: fieldName, source }), now2());
   }
 }
 var SCORED_FIELDS;
@@ -17930,7 +17921,7 @@ __export(exports_org_chart, {
 function addOrgChartEdge(companyId, contactAId, contactBId, edgeType, inferred = false, db) {
   const _db2 = db || getDatabase();
   const id = uuid();
-  _db2.query(`INSERT OR IGNORE INTO org_chart_edges(id,company_id,contact_a_id,contact_b_id,edge_type,inferred,created_at) VALUES(?,?,?,?,?,?,?)`).run(id, companyId, contactAId, contactBId, edgeType, inferred ? 1 : 0, now());
+  _db2.query(`INSERT OR IGNORE INTO org_chart_edges(id,company_id,contact_a_id,contact_b_id,edge_type,inferred,created_at) VALUES(?,?,?,?,?,?,?)`).run(id, companyId, contactAId, contactBId, edgeType, inferred ? 1 : 0, now2());
   return _db2.query(`SELECT * FROM org_chart_edges WHERE company_id=? AND contact_a_id=? AND contact_b_id=? AND edge_type=?`).get(companyId, contactAId, contactBId, edgeType);
 }
 function listOrgChart(companyId, db) {
@@ -17940,7 +17931,7 @@ function listOrgChart(companyId, db) {
 function setDealContactRole(dealId, contactId, accountRole, db) {
   const _db2 = db || getDatabase();
   const id = uuid();
-  _db2.query(`INSERT OR REPLACE INTO deal_contact_roles(id,deal_id,contact_id,account_role,created_at) VALUES(?,?,?,?,?)`).run(id, dealId, contactId, accountRole, now());
+  _db2.query(`INSERT OR REPLACE INTO deal_contact_roles(id,deal_id,contact_id,account_role,created_at) VALUES(?,?,?,?,?)`).run(id, dealId, contactId, accountRole, now2());
   return _db2.query(`SELECT * FROM deal_contact_roles WHERE deal_id=? AND contact_id=?`).get(dealId, contactId);
 }
 function getDealTeam(dealId, db) {
@@ -17987,7 +17978,7 @@ __export(exports_vault, {
   decrypt: () => decrypt
 });
 import { existsSync as existsSync9, readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync7, unlinkSync as unlinkSync2 } from "fs";
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 import { createCipheriv, createDecipheriv, randomBytes, pbkdf2Sync, createHash } from "crypto";
 function deriveKey(passphrase, salt) {
   return pbkdf2Sync(passphrase, salt, 1e5, 32, "sha512");
@@ -18098,7 +18089,7 @@ function storeFile(sourcePath, entityId) {
   if (!existsSync9(DOCUMENTS_DIR))
     mkdirSync7(DOCUMENTS_DIR, { recursive: true });
   const ext = sourcePath.split(".").pop() || "bin";
-  const destPath = join10(DOCUMENTS_DIR, `${entityId}.${ext}`);
+  const destPath = join11(DOCUMENTS_DIR, `${entityId}.${ext}`);
   const data = readFileSync5(sourcePath);
   writeFileSync4(destPath, data);
   return destPath;
@@ -18106,10 +18097,10 @@ function storeFile(sourcePath, entityId) {
 function getDocumentFilePath(entityId) {
   if (!existsSync9(DOCUMENTS_DIR))
     return null;
-  const { readdirSync: readdirSync4 } = __require("fs");
-  const files = readdirSync4(DOCUMENTS_DIR);
+  const { readdirSync: readdirSync5 } = __require("fs");
+  const files = readdirSync5(DOCUMENTS_DIR);
   const match = files.find((f) => f.startsWith(`${entityId}.`) && !f.endsWith(".enc"));
-  return match ? join10(DOCUMENTS_DIR, match) : null;
+  return match ? join11(DOCUMENTS_DIR, match) : null;
 }
 function decryptFile(encPath) {
   const key = requireVault();
@@ -18130,9 +18121,9 @@ var VAULT_DIR, VAULT_CONFIG, VAULT_SESSION, DOCUMENTS_DIR, SESSION_TTL_MS, _deri
 var init_vault = __esm(() => {
   init_database();
   VAULT_DIR = getDataDir2();
-  VAULT_CONFIG = join10(VAULT_DIR, "vault.json");
-  VAULT_SESSION = join10(VAULT_DIR, ".vault-session");
-  DOCUMENTS_DIR = join10(VAULT_DIR, "documents");
+  VAULT_CONFIG = join11(VAULT_DIR, "vault.json");
+  VAULT_SESSION = join11(VAULT_DIR, ".vault-session");
+  DOCUMENTS_DIR = join11(VAULT_DIR, "documents");
   SESSION_TTL_MS = 30 * 60 * 1000;
 });
 
@@ -18155,7 +18146,7 @@ function addDocument(input, db) {
   if (input.file_path) {
     filePath = storeFile(input.file_path, id);
   }
-  _db2.query(`INSERT INTO contact_documents (id, contact_id, doc_type, label, encrypted_value, iv, encrypted_file_path, metadata, expires_at, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)`).run(id, input.contact_id, input.doc_type, input.label ?? null, ciphertext, iv, filePath, JSON.stringify(input.metadata || {}), input.expires_at ?? null, now(), now());
+  _db2.query(`INSERT INTO contact_documents (id, contact_id, doc_type, label, encrypted_value, iv, encrypted_file_path, metadata, expires_at, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)`).run(id, input.contact_id, input.doc_type, input.label ?? null, ciphertext, iv, filePath, JSON.stringify(input.metadata || {}), input.expires_at ?? null, now2(), now2());
   return getDocument(id, _db2);
 }
 function getDocument(id, db) {
@@ -18290,13 +18281,13 @@ function setHealthData(contactId, input, db) {
     }
     if (sets.length) {
       sets.push("updated_at = ?");
-      params.push(now());
+      params.push(now2());
       params.push(contactId);
       _db2.query(`UPDATE contact_health SET ${sets.join(", ")} WHERE contact_id = ?`).run(...params);
     }
   } else {
     const id = uuid();
-    _db2.query(`INSERT INTO contact_health (id, contact_id, blood_type, allergies, medical_conditions, medications, emergency_contacts, health_insurance_provider, health_insurance_id, primary_physician, primary_physician_phone, organ_donor, notes, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.blood_type ?? null, JSON.stringify(input.allergies || []), JSON.stringify(input.medical_conditions || []), JSON.stringify(input.medications || []), JSON.stringify(input.emergency_contacts || []), input.health_insurance_provider ?? null, input.health_insurance_id ?? null, input.primary_physician ?? null, input.primary_physician_phone ?? null, input.organ_donor ? 1 : 0, input.notes ?? null, now(), now());
+    _db2.query(`INSERT INTO contact_health (id, contact_id, blood_type, allergies, medical_conditions, medications, emergency_contacts, health_insurance_provider, health_insurance_id, primary_physician, primary_physician_phone, organ_donor, notes, created_at, updated_at) VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`).run(id, contactId, input.blood_type ?? null, JSON.stringify(input.allergies || []), JSON.stringify(input.medical_conditions || []), JSON.stringify(input.medications || []), JSON.stringify(input.emergency_contacts || []), input.health_insurance_provider ?? null, input.health_insurance_id ?? null, input.primary_physician ?? null, input.primary_physician_phone ?? null, input.organ_donor ? 1 : 0, input.notes ?? null, now2(), now2());
   }
   return getHealthData(contactId, _db2);
 }
@@ -24627,12 +24618,12 @@ var init_register_tools = __esm(() => {
 
 // src/mcp/index.ts
 import { readFileSync as readFileSync7 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 function getServerVersion() {
   try {
-    const packageJsonPath = join11(import.meta.dir, "..", "..", "package.json");
+    const packageJsonPath = join12(import.meta.dir, "..", "..", "package.json");
     const pkg = JSON.parse(readFileSync7(packageJsonPath, "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
@@ -24679,7 +24670,7 @@ __export(exports_serve, {
   startServer: () => startServer
 });
 import { existsSync as existsSync12 } from "fs";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 function json3(data, status = 200) {
   return new Response(JSON.stringify(data), {
     status,
@@ -24925,7 +24916,7 @@ async function handleImages(req, _url, segments) {
         return apiError("No image file in form data");
       const ext = file.name?.split(".").pop() || "jpg";
       const buffer = Buffer.from(await file.arrayBuffer());
-      const tmpPath = join12(getImagesDir(), `_upload_${entityId}.${ext}`);
+      const tmpPath = join13(getImagesDir(), `_upload_${entityId}.${ext}`);
       const { writeFileSync: wfs } = await import("fs");
       wfs(tmpPath, buffer);
       try {
@@ -25012,8 +25003,8 @@ function startServer(port) {
               response = apiError("Not found", 404);
           }
         } else {
-          const filePath = join12(DASHBOARD_DIST, url.pathname === "/" ? "index.html" : url.pathname);
-          response = serveStaticFile(filePath) ?? serveStaticFile(join12(DASHBOARD_DIST, "index.html")) ?? new Response("Not Found", { status: 404 });
+          const filePath = join13(DASHBOARD_DIST, url.pathname === "/" ? "index.html" : url.pathname);
+          response = serveStaticFile(filePath) ?? serveStaticFile(join13(DASHBOARD_DIST, "index.html")) ?? new Response("Not Found", { status: 404 });
         }
       } catch (err) {
         console.error("Request error:", err);
@@ -25037,9 +25028,693 @@ var init_serve = __esm(() => {
   init_images();
   init_http();
   init_mcp();
-  DASHBOARD_DIST = join12(import.meta.dir, "../../dashboard/dist");
+  DASHBOARD_DIST = join13(import.meta.dir, "../../dashboard/dist");
 });
 
+// node_modules/@hasna/events/dist/commander.js
+import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { existsSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { createHmac, timingSafeEqual } from "crypto";
+import { randomUUID } from "crypto";
+import { spawn } from "child_process";
+import { randomUUID as randomUUID2 } from "crypto";
+function getPathValue(input, path) {
+  return path.split(".").reduce((value, part) => {
+    if (value && typeof value === "object" && part in value) {
+      return value[part];
+    }
+    return;
+  }, input);
+}
+function wildcardToRegExp(pattern) {
+  const escaped = pattern.replace(/[|\\{}()[\]^$+?.]/g, "\\$&").replace(/\*/g, ".*");
+  return new RegExp(`^${escaped}$`);
+}
+function matchString(value, matcher) {
+  if (matcher === undefined)
+    return true;
+  if (value === undefined)
+    return false;
+  const matchers = Array.isArray(matcher) ? matcher : [matcher];
+  return matchers.some((item) => wildcardToRegExp(item).test(value));
+}
+function matchRecord(input, matcher) {
+  if (!matcher)
+    return true;
+  return Object.entries(matcher).every(([path, expected]) => {
+    const actual = getPathValue(input, path);
+    if (typeof expected === "string" || Array.isArray(expected)) {
+      return matchString(actual === undefined ? undefined : String(actual), expected);
+    }
+    return actual === expected;
+  });
+}
+function eventMatchesFilter(event, filter) {
+  return matchString(event.source, filter.source) && matchString(event.type, filter.type) && matchString(event.subject, filter.subject) && matchString(event.severity, filter.severity) && matchRecord(event.data, filter.data) && matchRecord(event.metadata, filter.metadata);
+}
+function channelMatchesEvent(channel, event) {
+  if (!channel.enabled)
+    return false;
+  if (!channel.filters || channel.filters.length === 0)
+    return true;
+  return channel.filters.some((filter) => eventMatchesFilter(event, filter));
+}
+var HASNA_EVENTS_DIR_ENV = "HASNA_EVENTS_DIR";
+var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
+function getEventsDataDir(override) {
+  return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
+}
+
+class JsonEventsStore {
+  dataDir;
+  channelsPath;
+  eventsPath;
+  deliveriesPath;
+  constructor(dataDir = getEventsDataDir()) {
+    this.dataDir = dataDir;
+    this.channelsPath = join(dataDir, "channels.json");
+    this.eventsPath = join(dataDir, "events.json");
+    this.deliveriesPath = join(dataDir, "deliveries.json");
+  }
+  async init() {
+    await mkdir(this.dataDir, { recursive: true, mode: 448 });
+    await chmod(this.dataDir, 448).catch(() => {
+      return;
+    });
+    await this.ensureArrayFile(this.channelsPath);
+    await this.ensureArrayFile(this.eventsPath);
+    await this.ensureArrayFile(this.deliveriesPath);
+  }
+  async addChannel(channel) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const index = channels.findIndex((item) => item.id === channel.id);
+    if (index >= 0) {
+      channels[index] = { ...channel, createdAt: channels[index].createdAt, updatedAt: new Date().toISOString() };
+    } else {
+      channels.push(channel);
+    }
+    await this.writeJson(this.channelsPath, channels);
+    return index >= 0 ? channels[index] : channel;
+  }
+  async listChannels() {
+    await this.init();
+    return this.readJson(this.channelsPath, []);
+  }
+  async getChannel(id) {
+    const channels = await this.listChannels();
+    return channels.find((channel) => channel.id === id);
+  }
+  async removeChannel(id) {
+    await this.init();
+    const channels = await this.readJson(this.channelsPath, []);
+    const next = channels.filter((channel) => channel.id !== id);
+    await this.writeJson(this.channelsPath, next);
+    return next.length !== channels.length;
+  }
+  async appendEvent(event) {
+    await this.init();
+    const events = await this.readJson(this.eventsPath, []);
+    events.push(event);
+    await this.writeJson(this.eventsPath, events);
+    return event;
+  }
+  async listEvents() {
+    await this.init();
+    return this.readJson(this.eventsPath, []);
+  }
+  async findEventByIdentity(identity) {
+    const events = await this.listEvents();
+    return events.find((event) => identity.id !== undefined && event.id === identity.id || identity.dedupeKey !== undefined && event.dedupeKey === identity.dedupeKey);
+  }
+  async appendDelivery(result) {
+    await this.init();
+    const deliveries = await this.readJson(this.deliveriesPath, []);
+    deliveries.push(result);
+    await this.writeJson(this.deliveriesPath, deliveries);
+    return result;
+  }
+  async listDeliveries() {
+    await this.init();
+    return this.readJson(this.deliveriesPath, []);
+  }
+  async exportData() {
+    return {
+      channels: await this.listChannels(),
+      events: await this.listEvents(),
+      deliveries: await this.listDeliveries()
+    };
+  }
+  async ensureArrayFile(path) {
+    if (!existsSync(path)) {
+      await writeFile(path, `[]
+`, { encoding: "utf-8", mode: 384 });
+    }
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+  async readJson(path, fallback) {
+    try {
+      const raw = await readFile(path, "utf-8");
+      if (!raw.trim())
+        return fallback;
+      return JSON.parse(raw);
+    } catch (error) {
+      if (error.code === "ENOENT")
+        return fallback;
+      throw error;
+    }
+  }
+  async writeJson(path, value) {
+    const tempPath = `${path}.${process.pid}.${Date.now()}.tmp`;
+    await writeFile(tempPath, `${JSON.stringify(value, null, 2)}
+`, { encoding: "utf-8", mode: 384 });
+    await rename(tempPath, path);
+    await chmod(path, 384).catch(() => {
+      return;
+    });
+  }
+}
+var DEFAULT_SIGNATURE_TOLERANCE_MS = 5 * 60 * 1000;
+function buildSignatureBase(timestamp, body) {
+  return `${timestamp}.${body}`;
+}
+function signPayload(secret, timestamp, body) {
+  const digest = createHmac("sha256", secret).update(buildSignatureBase(timestamp, body)).digest("hex");
+  return `sha256=${digest}`;
+}
+function now() {
+  return new Date().toISOString();
+}
+function truncate(value, max = 4096) {
+  return value.length > max ? `${value.slice(0, max)}...` : value;
+}
+function buildWebhookRequest(event, channel) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const body = JSON.stringify(event);
+  const timestamp = event.time;
+  const headers = {
+    "Content-Type": "application/json",
+    "User-Agent": "@hasna/events",
+    "X-Hasna-Event-Id": event.id,
+    "X-Hasna-Event-Type": event.type,
+    "X-Hasna-Timestamp": timestamp,
+    ...channel.webhook.headers
+  };
+  if (channel.webhook.secret) {
+    headers["X-Hasna-Signature"] = signPayload(channel.webhook.secret, timestamp, body);
+  }
+  return { body, headers };
+}
+async function dispatchWebhook(event, channel, options = {}) {
+  if (!channel.webhook)
+    throw new Error(`Channel ${channel.id} has no webhook config`);
+  const startedAt = now();
+  const { body, headers } = buildWebhookRequest(event, channel);
+  const controller = new AbortController;
+  const timeout = setTimeout(() => controller.abort(), channel.webhook.timeoutMs ?? 15000);
+  try {
+    const response = await (options.fetchImpl ?? fetch)(channel.webhook.url, {
+      method: "POST",
+      headers,
+      body,
+      signal: controller.signal
+    });
+    const responseBody = truncate(await response.text());
+    return {
+      attempt: 1,
+      status: response.ok ? "success" : "failed",
+      startedAt,
+      completedAt: now(),
+      responseStatus: response.status,
+      responseBody,
+      error: response.ok ? undefined : `Webhook returned HTTP ${response.status}`
+    };
+  } catch (error) {
+    return {
+      attempt: 1,
+      status: "failed",
+      startedAt,
+      completedAt: now(),
+      error: error instanceof Error ? error.message : String(error)
+    };
+  } finally {
+    clearTimeout(timeout);
+  }
+}
+async function dispatchCommand(event, channel) {
+  if (!channel.command)
+    throw new Error(`Channel ${channel.id} has no command config`);
+  const startedAt = now();
+  const eventJson = JSON.stringify(event);
+  const env = {
+    ...process.env,
+    ...channel.command.env,
+    HASNA_CHANNEL_ID: channel.id,
+    HASNA_EVENT_ID: event.id,
+    HASNA_EVENT_TYPE: event.type,
+    HASNA_EVENT_SOURCE: event.source,
+    HASNA_EVENT_SUBJECT: event.subject ?? "",
+    HASNA_EVENT_SEVERITY: event.severity,
+    HASNA_EVENT_TIME: event.time,
+    HASNA_EVENT_DEDUPE_KEY: event.dedupeKey ?? "",
+    HASNA_EVENT_SCHEMA_VERSION: event.schemaVersion,
+    HASNA_EVENT_JSON: eventJson
+  };
+  return new Promise((resolve) => {
+    const child = spawn(channel.command.command, channel.command.args ?? [], {
+      cwd: channel.command.cwd,
+      env,
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let stdout = "";
+    let stderr = "";
+    const timeout = setTimeout(() => child.kill("SIGTERM"), channel.command.timeoutMs ?? 15000);
+    child.stdin.end(eventJson);
+    child.stdout.on("data", (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr.on("data", (chunk) => {
+      stderr += chunk.toString();
+    });
+    child.on("error", (error) => {
+      clearTimeout(timeout);
+      resolve({
+        attempt: 1,
+        status: "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: error.message
+      });
+    });
+    child.on("close", (code, signal) => {
+      clearTimeout(timeout);
+      const success = code === 0;
+      resolve({
+        attempt: 1,
+        status: success ? "success" : "failed",
+        startedAt,
+        completedAt: now(),
+        stdout: truncate(stdout),
+        stderr: truncate(stderr),
+        error: success ? undefined : `Command exited with ${signal ? `signal ${signal}` : `code ${code}`}`
+      });
+    });
+  });
+}
+async function dispatchChannel(event, channel, options = {}) {
+  if (channel.transport === "webhook")
+    return dispatchWebhook(event, channel, options);
+  if (channel.transport === "command")
+    return dispatchCommand(event, channel);
+  return {
+    attempt: 1,
+    status: "skipped",
+    startedAt: now(),
+    completedAt: now(),
+    error: `Unsupported transport: ${channel.transport}`
+  };
+}
+function createDeliveryResult(event, channel, attempts) {
+  const status = attempts.some((attempt) => attempt.status === "success") ? "success" : attempts.every((attempt) => attempt.status === "skipped") ? "skipped" : "failed";
+  return {
+    id: randomUUID(),
+    eventId: event.id,
+    channelId: channel.id,
+    transport: channel.transport,
+    status,
+    attempts,
+    createdAt: attempts[0]?.startedAt ?? now(),
+    completedAt: attempts.at(-1)?.completedAt ?? now()
+  };
+}
+function createEvent(input) {
+  return {
+    id: input.id ?? randomUUID2(),
+    source: input.source,
+    type: input.type,
+    time: normalizeTime(input.time),
+    subject: input.subject,
+    severity: input.severity ?? "info",
+    data: input.data ?? {},
+    message: input.message,
+    dedupeKey: input.dedupeKey,
+    schemaVersion: input.schemaVersion ?? "1.0",
+    metadata: input.metadata ?? {}
+  };
+}
+
+class EventsClient {
+  store;
+  redactors;
+  transportOptions;
+  constructor(options = {}) {
+    this.store = options.store ?? new JsonEventsStore(options.dataDir);
+    this.redactors = options.redactors ?? [];
+    this.transportOptions = { fetchImpl: options.fetchImpl };
+  }
+  async addChannel(input) {
+    const timestamp = new Date().toISOString();
+    return this.store.addChannel({
+      ...input,
+      createdAt: input.createdAt ?? timestamp,
+      updatedAt: input.updatedAt ?? timestamp
+    });
+  }
+  async listChannels() {
+    return this.store.listChannels();
+  }
+  async removeChannel(id) {
+    return this.store.removeChannel(id);
+  }
+  async emit(input, options = {}) {
+    const event = options.redactSensitiveData === false ? createEvent(input) : redactSensitiveKeys(createEvent(input));
+    if (options.dedupe !== false) {
+      const existing = await this.store.findEventByIdentity({ id: input.id, dedupeKey: event.dedupeKey });
+      if (existing) {
+        return { event: existing, deliveries: [], deduped: true };
+      }
+    }
+    await this.store.appendEvent(event);
+    const deliveries = options.deliver === false ? [] : await this.deliver(event);
+    return { event, deliveries, deduped: false };
+  }
+  async listEvents() {
+    return this.store.listEvents();
+  }
+  async listDeliveries() {
+    return this.store.listDeliveries();
+  }
+  async deliver(event) {
+    const channels = await this.store.listChannels();
+    const selected = channels.filter((channel) => channelMatchesEvent(channel, event));
+    const deliveries = [];
+    for (const channel of selected) {
+      const eventForChannel = await this.applyRedaction(event, channel);
+      const result = await this.deliverWithRetry(eventForChannel, channel);
+      await this.store.appendDelivery(result);
+      deliveries.push(result);
+    }
+    return deliveries;
+  }
+  async testChannel(id, input = {}) {
+    const channel = await this.store.getChannel(id);
+    if (!channel)
+      throw new Error(`Channel not found: ${id}`);
+    const event = createEvent({
+      source: input.source ?? "hasna.events",
+      type: input.type ?? "events.test",
+      subject: input.subject ?? id,
+      severity: input.severity ?? "info",
+      data: input.data ?? { test: true },
+      message: input.message ?? "Hasna events test delivery",
+      dedupeKey: input.dedupeKey,
+      schemaVersion: input.schemaVersion,
+      metadata: input.metadata,
+      time: input.time,
+      id: input.id
+    });
+    const eventForChannel = await this.applyRedaction(event, channel);
+    const result = await this.deliverWithRetry(eventForChannel, channel);
+    await this.store.appendDelivery(result);
+    return result;
+  }
+  async replay(options = {}) {
+    const events = (await this.store.listEvents()).filter((event) => {
+      if (options.eventId && event.id !== options.eventId)
+        return false;
+      if (options.source && event.source !== options.source)
+        return false;
+      if (options.type && event.type !== options.type)
+        return false;
+      return true;
+    });
+    if (options.dryRun)
+      return { events, deliveries: [] };
+    const deliveries = [];
+    for (const event of events) {
+      deliveries.push(...await this.deliver(event));
+    }
+    return { events, deliveries };
+  }
+  async applyRedaction(event, channel) {
+    let next = redactPaths(event, channel.redact?.paths ?? [], channel.redact?.replacement ?? "[REDACTED]");
+    for (const redactor of this.redactors) {
+      next = await redactor(next, channel);
+    }
+    return next;
+  }
+  async deliverWithRetry(event, channel) {
+    const policy = normalizeRetryPolicy(channel.retry);
+    const attempts = [];
+    for (let index = 0;index < policy.maxAttempts; index += 1) {
+      const attempt = await dispatchChannel(event, channel, this.transportOptions);
+      attempt.attempt = index + 1;
+      if (attempt.status === "failed" && index + 1 < policy.maxAttempts) {
+        attempt.nextBackoffMs = Math.round(policy.backoffMs * policy.multiplier ** index);
+      }
+      attempts.push(attempt);
+      if (attempt.status !== "failed")
+        break;
+      if (attempt.nextBackoffMs)
+        await Bun.sleep(attempt.nextBackoffMs);
+    }
+    return createDeliveryResult(event, channel, attempts);
+  }
+}
+function redactPaths(event, paths, replacement = "[REDACTED]") {
+  if (paths.length === 0)
+    return event;
+  const copy = structuredClone(event);
+  for (const path of paths) {
+    setPath(copy, path, replacement);
+  }
+  return copy;
+}
+function sanitizeChannelForOutput(channel) {
+  const copy = structuredClone(channel);
+  if (copy.webhook?.secret)
+    copy.webhook.secret = "[REDACTED]";
+  if (copy.command?.env) {
+    copy.command.env = Object.fromEntries(Object.entries(copy.command.env).map(([key, value]) => [key, shouldRedactKey(key) ? "[REDACTED]" : value]));
+  }
+  return copy;
+}
+function sanitizeChannelsForOutput(channels) {
+  return channels.map(sanitizeChannelForOutput);
+}
+function redactSensitiveKeys(event, replacement = "[REDACTED]") {
+  return redactValue(event, replacement);
+}
+function shouldRedactKey(key) {
+  return /secret|token|password|api[_-]?key|authorization/i.test(key);
+}
+function redactValue(value, replacement) {
+  if (Array.isArray(value))
+    return value.map((item) => redactValue(item, replacement));
+  if (!value || typeof value !== "object")
+    return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    shouldRedactKey(key) ? replacement : redactValue(item, replacement)
+  ]));
+}
+function setPath(input, path, replacement) {
+  const parts = path.split(".");
+  let cursor = input;
+  for (const part of parts.slice(0, -1)) {
+    const next = cursor[part];
+    if (!next || typeof next !== "object")
+      return;
+    cursor = next;
+  }
+  const last = parts.at(-1);
+  if (last && last in cursor)
+    cursor[last] = replacement;
+}
+function normalizeTime(value) {
+  if (!value)
+    return new Date().toISOString();
+  return value instanceof Date ? value.toISOString() : value;
+}
+function normalizeRetryPolicy(policy) {
+  return {
+    maxAttempts: Math.max(1, policy?.maxAttempts ?? 1),
+    backoffMs: Math.max(0, policy?.backoffMs ?? 250),
+    multiplier: Math.max(1, policy?.multiplier ?? 2)
+  };
+}
+function parseJsonObject(value, fallback) {
+  if (!value)
+    return fallback;
+  const parsed = JSON.parse(value);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("Expected a JSON object");
+  }
+  return parsed;
+}
+function parseHeaders(values) {
+  if (!values?.length)
+    return;
+  const headers = {};
+  for (const value of values) {
+    const separator = value.indexOf("=");
+    if (separator === -1)
+      throw new Error(`Invalid header, expected name=value: ${value}`);
+    headers[value.slice(0, separator)] = value.slice(separator + 1);
+  }
+  return headers;
+}
+function parseFilter(options) {
+  const filter2 = {};
+  if (options.source)
+    filter2.source = options.source;
+  if (options.type)
+    filter2.type = options.type;
+  if (options.subject)
+    filter2.subject = options.subject;
+  if (options.severity)
+    filter2.severity = options.severity;
+  return Object.keys(filter2).length > 0 ? [filter2] : undefined;
+}
+function createClient(options) {
+  if (options.createClient)
+    return options.createClient();
+  return new EventsClient({ store: new JsonEventsStore(options.dataDir) });
+}
+function print(value, json, text) {
+  if (json)
+    console.log(JSON.stringify(value, null, 2));
+  else
+    console.log(text);
+}
+function hasJsonOption(options) {
+  return Boolean(options?.json || options?.opts?.().json || options?.optsWithGlobals?.().json || options?.parent?.opts?.().json || options?.parent?.optsWithGlobals?.().json);
+}
+function wantsJson(actionOptions, command) {
+  return hasJsonOption(actionOptions) || hasJsonOption(command);
+}
+function registerWebhookCommands(program, options) {
+  const webhooks = program.command(options.webhooksCommandName ?? "webhooks").description("Manage Hasna event webhook subscriptions");
+  webhooks.command("add").description("Add or replace a webhook or command subscription").argument("<target>", "Webhook URL or command binary").requiredOption("--id <id>", "Subscription/channel identifier").option("--transport <kind>", "Transport kind: webhook or command", "webhook").option("--name <name>", "Display name").option("--type <pattern>", "Event type filter, e.g. todos.task.*").option("--source <pattern>", "Event source filter").option("--subject <pattern>", "Event subject filter").option("--severity <pattern>", "Event severity filter").option("--secret <secret>", "Webhook HMAC secret").option("--header <name=value...>", "Webhook header", collectValues, []).option("--arg <arg...>", "Command argument", collectValues, []).option("--timeout-ms <ms>", "Transport timeout in milliseconds", parseNumber).option("--retry-attempts <n>", "Maximum delivery attempts", parseNumber).option("--retry-backoff-ms <ms>", "Initial retry backoff in milliseconds", parseNumber).option("--redact <path...>", "Event field path to redact before delivery", collectValues, []).option("--disabled", "Create channel disabled", false).option("-j, --json", "Print JSON output", false).action(async (target, actionOptions, command) => {
+    const timestamp = new Date().toISOString();
+    const channel = {
+      id: actionOptions.id,
+      name: actionOptions.name,
+      enabled: !actionOptions.disabled,
+      transport: actionOptions.transport,
+      filters: parseFilter(actionOptions),
+      retry: actionOptions.retryAttempts || actionOptions.retryBackoffMs ? { maxAttempts: actionOptions.retryAttempts, backoffMs: actionOptions.retryBackoffMs } : undefined,
+      redact: actionOptions.redact?.length ? { paths: actionOptions.redact } : undefined,
+      createdAt: timestamp,
+      updatedAt: timestamp
+    };
+    if (actionOptions.transport === "webhook") {
+      channel.webhook = { url: target, secret: actionOptions.secret, headers: parseHeaders(actionOptions.header), timeoutMs: actionOptions.timeoutMs };
+    } else if (actionOptions.transport === "command") {
+      channel.command = { command: target, args: actionOptions.arg ?? [], timeoutMs: actionOptions.timeoutMs };
+    } else {
+      throw new Error(`Transport ${actionOptions.transport} is reserved for future use and cannot be added yet`);
+    }
+    const saved = await createClient(options).addChannel(channel);
+    print(sanitizeChannelForOutput(saved), wantsJson(actionOptions, command), `Added ${saved.transport} channel ${saved.id}`);
+  });
+  webhooks.command("list").description("List configured subscriptions").option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    const channels = await createClient(options).listChannels();
+    if (wantsJson(actionOptions, command)) {
+      console.log(JSON.stringify(sanitizeChannelsForOutput(channels), null, 2));
+      return;
+    }
+    if (!channels.length) {
+      console.log("No channels configured.");
+      return;
+    }
+    for (const channel of channels) {
+      console.log(`${channel.id}	${channel.enabled ? "enabled" : "disabled"}	${channel.transport}	${channel.webhook?.url ?? channel.command?.command ?? channel.transport}`);
+    }
+  });
+  webhooks.command("remove").description("Remove a subscription").argument("<id>", "Subscription/channel identifier").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+    const removed = await createClient(options).removeChannel(id);
+    print({ removed }, wantsJson(actionOptions, command), removed ? `Removed ${id}` : `Channel not found: ${id}`);
+  });
+  webhooks.command("test").description("Send a test event to one subscription").argument("<id>", "Subscription/channel identifier").option("--type <type>", "Event type", "events.test").option("--subject <subject>", "Event subject").option("--message <message>", "Event message", "Hasna events test delivery").option("--data <json>", "Event data JSON object").option("-j, --json", "Print JSON output", false).action(async (id, actionOptions, command) => {
+    const result = await createClient(options).testChannel(id, {
+      source: options.source,
+      type: actionOptions.type,
+      subject: actionOptions.subject ?? id,
+      message: actionOptions.message,
+      data: parseJsonObject(actionOptions.data, { test: true })
+    });
+    print(result, wantsJson(actionOptions, command), `${result.status}: ${result.channelId}`);
+  });
+  return webhooks;
+}
+function registerEventCommands(program, options) {
+  const events = program.command(options.eventsCommandName ?? "events").description("Emit, list, and replay Hasna events");
+  events.command("emit").description("Emit an event from this app").argument("<type>", "Event type").option("--source <source>", "Event source override").option("--subject <subject>", "Event subject").option("--severity <severity>", "Event severity", "info").option("--message <message>", "Event message").option("--dedupe-key <key>", "Dedupe key").option("--data <json>", "Event data JSON object").option("--metadata <json>", "Event metadata JSON object").option("--no-deliver", "Record without delivering").option("--no-dedupe", "Allow duplicate id/dedupeKey events").option("-j, --json", "Print JSON output", false).action(async (type, actionOptions, command) => {
+    const result = await createClient(options).emit({
+      source: actionOptions.source ?? options.source,
+      type,
+      subject: actionOptions.subject,
+      severity: actionOptions.severity,
+      message: actionOptions.message,
+      dedupeKey: actionOptions.dedupeKey,
+      data: parseJsonObject(actionOptions.data, {}),
+      metadata: parseJsonObject(actionOptions.metadata, {})
+    }, { deliver: actionOptions.deliver, dedupe: actionOptions.dedupe });
+    print(result, wantsJson(actionOptions, command), `${result.deduped ? "Deduped" : "Emitted"} ${result.event.id} to ${result.deliveries.length} channel(s)`);
+  });
+  events.command("list").description("List recorded events").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--limit <n>", "Limit results", parseNumber).option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    let rows = await createClient(options).listEvents();
+    if (actionOptions.source)
+      rows = rows.filter((event) => event.source === actionOptions.source);
+    if (actionOptions.type)
+      rows = rows.filter((event) => event.type === actionOptions.type);
+    if (actionOptions.limit)
+      rows = rows.slice(-actionOptions.limit);
+    if (wantsJson(actionOptions, command)) {
+      console.log(JSON.stringify(rows, null, 2));
+      return;
+    }
+    if (!rows.length) {
+      console.log("No events recorded.");
+      return;
+    }
+    for (const event of rows)
+      console.log(`${event.time}	${event.id}	${event.source}	${event.type}	${event.severity}`);
+  });
+  events.command("replay").description("Replay recorded events").option("--id <id>", "Replay one event id").option("--source <source>", "Filter by source").option("--type <type>", "Filter by type").option("--dry-run", "Preview without delivery", false).option("-j, --json", "Print JSON output", false).action(async (actionOptions, command) => {
+    const result = await createClient(options).replay({
+      eventId: actionOptions.id,
+      source: actionOptions.source,
+      type: actionOptions.type,
+      dryRun: actionOptions.dryRun
+    });
+    print(result, wantsJson(actionOptions, command), `Replayed ${result.events.length} event(s), ${result.deliveries.length} delivery result(s)`);
+  });
+  return events;
+}
+function registerEventsCommands(program, options) {
+  registerWebhookCommands(program, options);
+  registerEventCommands(program, options);
+}
+function parseNumber(value) {
+  const parsed = Number(value);
+  if (!Number.isFinite(parsed))
+    throw new Error(`Expected a number, got ${value}`);
+  return parsed;
+}
+function collectValues(value, previous) {
+  previous.push(value);
+  return previous;
+}
+
 // node_modules/commander/esm.mjs
 var import__ = __toESM(require_commander(), 1);
 var {
@@ -25069,12 +25744,12 @@ import chalk2 from "chalk";
 
 // src/lib/config.ts
 init_database();
-import { existsSync as existsSync6, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync5 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync5 } from "fs";
 import { join as join7 } from "path";
 var CONFIG_DIR3 = getDataDir2();
 var CONFIG_FILE = join7(CONFIG_DIR3, "config.json");
 function readConfig() {
-  if (!existsSync6(CONFIG_FILE))
+  if (!existsSync4(CONFIG_FILE))
     return {};
   try {
     return JSON.parse(readFileSync2(CONFIG_FILE, "utf-8"));
@@ -25085,7 +25760,7 @@ function readConfig() {
 
 // src/cli/commands/core.tsx
 import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, existsSync as existsSync13, copyFileSync as copyFileSync4, statSync as statSync2, mkdirSync as mkdirSync8, readdirSync as readdirSync6 } from "fs";
-import { extname as extname3, join as join13 } from "path";
+import { extname as extname3, join as join14 } from "path";
 
 // src/cli/utils.tsx
 import chalk from "chalk";
@@ -25859,7 +26534,7 @@ Group not found: ${groupId}
   });
   program2.command("backup").description("Backup the contacts database").option("--output <path>", "Output path").option("--list", "List existing backups").action((opts) => {
     const { getDataDir: getDataDir3 } = (init_database(), __toCommonJS(exports_database));
-    const backupDir = join13(getDataDir3(), "backups");
+    const backupDir = join14(getDataDir3(), "backups");
     if (opts.list) {
       if (!existsSync13(backupDir)) {
         console.log(chalk2.gray(`
@@ -25878,7 +26553,7 @@ No backups found.
 Existing Backups:
 `));
       for (const f of files) {
-        const filePath = join13(backupDir, f);
+        const filePath = join14(backupDir, f);
         const size2 = statSync2(filePath).size;
         const mtime = statSync2(filePath).mtime.toISOString().slice(0, 19).replace("T", " ");
         console.log(`  ${chalk2.cyan(f)}  ${chalk2.gray(`${(size2 / 1024).toFixed(1)} KB  ${mtime}`)}`);
@@ -25895,7 +26570,7 @@ Database not found: ${src}
     }
     mkdirSync8(backupDir, { recursive: true });
     const ts = new Date().toISOString().replace(/[:.]/g, "-").slice(0, 19);
-    const dest = opts.output || join13(backupDir, `contacts-${ts}.db`);
+    const dest = opts.output || join14(backupDir, `contacts-${ts}.db`);
     copyFileSync4(src, dest);
     const size = statSync2(dest).size;
     console.log(chalk2.green(`
@@ -27577,4 +28252,5 @@ registerCoreCommands(program);
 registerCrmCommands(program);
 registerAdvancedCommands(program);
 registerCloudCommands(program, "contacts");
+registerEventsCommands(program, { source: "contacts", eventsCommandName: "event-bus" });
 program.parse(process.argv);