@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/cli/prompt.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CliInputError = void 0;
+exports.requireTTY = requireTTY;
+exports.createTerminalPrompt = createTerminalPrompt;
+exports.nonblankLine = nonblankLine;
+const node_readline_1 = require("node:readline");
+const node_stream_1 = require("node:stream");
+class CliInputError extends Error {
+}
+exports.CliInputError = CliInputError;
+function requireTTY(prompt) {
+    if (!prompt.stdinIsTTY || !prompt.stdoutIsTTY) {
+        throw new CliInputError('This command requires a TTY on both stdin and stdout. Run it yourself in a terminal.');
+    }
+}
+/** readline disables terminal echo in raw mode; hidden output is discarded, including redraws. */
+function createTerminalPrompt(input = process.stdin, output = process.stdout) {
+    const question = async (label, hidden) => {
+        requireTTY(adapter);
+        const wasRaw = input.isRaw;
+        const muted = new node_stream_1.Writable({ write: (_chunk, _encoding, done) => done() });
+        const rl = (0, node_readline_1.createInterface)({
+            input,
+            output: hidden ? muted : output,
+            terminal: true,
+            historySize: 0,
+        });
+        try {
+            if (hidden)
+                output.write(`${label}: `);
+            return await new Promise((resolve, reject) => {
+                rl.once('close', () => reject(new CliInputError('Input cancelled; no value saved.')));
+                rl.once('SIGINT', () => rl.close());
+                rl.question(hidden ? '' : `${label}: `, resolve);
+            });
+        }
+        finally {
+            rl.close();
+            input.setRawMode(wasRaw);
+            muted.destroy();
+            if (hidden)
+                output.write('\n');
+        }
+    };
+    const adapter = {
+        stdinIsTTY: input.isTTY === true,
+        stdoutIsTTY: output.isTTY === true,
+        text: (label) => question(label, false),
+        secret: (label) => question(label, true),
+        write: (line) => {
+            output.write(`${line}\n`);
+        },
+    };
+    return adapter;
+}
+function nonblankLine(value) {
+    if (!value.trim() ||
+        [...value].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127)) {
+        throw new CliInputError('Input must be nonblank text on a single line.');
+    }
+    return value;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/cli/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/cli/prompt.ts"],"names":[],"mappings":";;;AAcA,gCAMC;AAGD,oDAsCC;AAED,oCAQC;AAvED,iDAAgD;AAChD,6CAAuC;AAGvC,MAAa,aAAc,SAAQ,KAAK;CAAG;AAA3C,sCAA2C;AAU3C,SAAgB,UAAU,CAAC,MAAqB;IAC9C,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,aAAa,CACrB,sFAAsF,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,SAAgB,oBAAoB,CAClC,QAAoB,OAAO,CAAC,KAAK,EACjC,SAAsB,OAAO,CAAC,MAAM;IAEpC,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAa,EAAE,MAAe,EAAmB,EAAE;QACzE,UAAU,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,sBAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3E,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC;YACzB,KAAK;YACL,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAC/B,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;YACvC,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACnD,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC;gBACtF,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;gBACpC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACzB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,IAAI,MAAM;gBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAkB;QAC7B,UAAU,EAAE,KAAK,CAAC,KAAK,KAAK,IAAI;QAChC,WAAW,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI;QAClC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACvC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACd,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa;IACxC,IACE,CAAC,KAAK,CAAC,IAAI,EAAE;QACb,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAChF,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,+CAA+C,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cli/runtime/action-mcp-config.d.ts

@@ -0,0 +1,15 @@
+export interface EnsureMamaMcpConfigOptions {
+    mcpConfigPath: string;
+    serverPath?: string;
+    mamaHome: string;
+}
+export interface EnsureMamaMcpConfigResult {
+    changed: boolean;
+    serverPath: string;
+}
+export declare const MAMA_MCP_SERVER_NAME = "mama";
+/** The built action MCP server beside this module (dist/runtime/action-mcp-server.js). */
+export declare function resolveActionServerPath(): string;
+/** Keep Claude's one MCP registration pointed at the shared action socket. */
+export declare function ensureMamaMcpConfig(options: EnsureMamaMcpConfigOptions): EnsureMamaMcpConfigResult;
+//# sourceMappingURL=action-mcp-config.d.ts.map

package/dist/cli/runtime/action-mcp-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-mcp-config.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/action-mcp-config.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,0BAA0B;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAE3C,0FAA0F;AAC1F,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAeD,8EAA8E;AAC9E,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,yBAAyB,CAqC3B"}

package/dist/cli/runtime/action-mcp-config.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAMA_MCP_SERVER_NAME = void 0;
+exports.resolveActionServerPath = resolveActionServerPath;
+exports.ensureMamaMcpConfig = ensureMamaMcpConfig;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.MAMA_MCP_SERVER_NAME = 'mama';
+/** The built action MCP server beside this module (dist/runtime/action-mcp-server.js). */
+function resolveActionServerPath() {
+    return (0, node_path_1.join)(__dirname, '..', '..', 'runtime', 'action-mcp-server.js');
+}
+function validEntry(value, serverPath, mamaHome) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const entry = value;
+    const env = entry.env;
+    return (entry.command === process.execPath &&
+        Array.isArray(entry.args) &&
+        entry.args.length === 1 &&
+        entry.args[0] === serverPath &&
+        env?.MAMA_HOME === mamaHome);
+}
+/** Keep Claude's one MCP registration pointed at the shared action socket. */
+function ensureMamaMcpConfig(options) {
+    const serverPath = options.serverPath ?? resolveActionServerPath();
+    let parsed = {};
+    if ((0, node_fs_1.existsSync)(options.mcpConfigPath)) {
+        const value = JSON.parse((0, node_fs_1.readFileSync)(options.mcpConfigPath, 'utf8'));
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            parsed = value;
+        }
+    }
+    const servers = parsed.mcpServers;
+    if (servers &&
+        typeof servers === 'object' &&
+        !Array.isArray(servers) &&
+        validEntry(servers[exports.MAMA_MCP_SERVER_NAME], serverPath, options.mamaHome) &&
+        !Object.hasOwn(servers, 'code-act')) {
+        return { changed: false, serverPath };
+    }
+    const nextServers = servers && typeof servers === 'object' && !Array.isArray(servers)
+        ? { ...servers }
+        : {};
+    delete nextServers['code-act'];
+    nextServers[exports.MAMA_MCP_SERVER_NAME] = {
+        command: process.execPath,
+        args: [serverPath],
+        env: { MAMA_HOME: options.mamaHome },
+    };
+    parsed.mcpServers = nextServers;
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(options.mcpConfigPath), { recursive: true });
+    (0, node_fs_1.writeFileSync)(options.mcpConfigPath, `${JSON.stringify(parsed, null, 2)}\n`, 'utf8');
+    return { changed: true, serverPath };
+}
+//# sourceMappingURL=action-mcp-config.js.map

package/dist/cli/runtime/action-mcp-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-mcp-config.js","sourceRoot":"","sources":["../../../src/cli/runtime/action-mcp-config.ts"],"names":[],"mappings":";;;AAiBA,0DAEC;AAgBD,kDAuCC;AA1ED,qCAA6E;AAC7E,yCAA0C;AAa7B,QAAA,oBAAoB,GAAG,MAAM,CAAC;AAE3C,0FAA0F;AAC1F,SAAgB,uBAAuB;IACrC,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,UAAkB,EAAE,QAAgB;IACtE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,KAAK,GAAG,KAA6D,CAAC;IAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,GAA0C,CAAC;IAC7D,OAAO,CACL,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,QAAQ;QAClC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU;QAC5B,GAAG,EAAE,SAAS,KAAK,QAAQ,CAC5B,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAgB,mBAAmB,CACjC,OAAmC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,uBAAuB,EAAE,CAAC;IACnE,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,IAAA,oBAAU,EAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,GAAG,KAAgC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;IAClC,IACE,OAAO;QACP,OAAO,OAAO,KAAK,QAAQ;QAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,UAAU,CACP,OAAmC,CAAC,4BAAoB,CAAC,EAC1D,UAAU,EACV,OAAO,CAAC,QAAQ,CACjB;QACD,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,EACnC,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IACD,MAAM,WAAW,GACf,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/D,CAAC,CAAC,EAAE,GAAI,OAAmC,EAAE;QAC7C,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/B,WAAW,CAAC,4BAAoB,CAAC,GAAG;QAClC,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC;QAClB,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE;KACrC,CAAC;IACF,MAAM,CAAC,UAAU,GAAG,WAAW,CAAC;IAChC,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,IAAA,uBAAa,EAAC,OAAO,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACvC,CAAC"}

package/dist/cli/runtime/claude-caller-config.d.ts

@@ -0,0 +1,4 @@
+export declare function resolveCallerHookPath(): string;
+/** Owner workspace project settings; the CLI still reads project,local only. */
+export declare function ensureClaudeCallerHook(workspaceDir: string, deniedReadPaths?: readonly string[]): void;
+//# sourceMappingURL=claude-caller-config.d.ts.map

package/dist/cli/runtime/claude-caller-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-caller-config.d.ts","sourceRoot":"","sources":["../../../src/cli/runtime/claude-caller-config.ts"],"names":[],"mappings":"AAGA,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,IAAI,CAkCN"}

package/dist/cli/runtime/claude-caller-config.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveCallerHookPath = resolveCallerHookPath;
+exports.ensureClaudeCallerHook = ensureClaudeCallerHook;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function resolveCallerHookPath() {
+    return (0, node_path_1.join)(__dirname, '..', '..', 'runtime', 'claude-caller-hook.js');
+}
+/** Owner workspace project settings; the CLI still reads project,local only. */
+function ensureClaudeCallerHook(workspaceDir, deniedReadPaths = []) {
+    workspaceDir = (0, node_path_1.resolve)(workspaceDir);
+    const directory = (0, node_path_1.join)(workspaceDir, '.claude');
+    const quote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    const command = `${quote(process.execPath)} ${quote(resolveCallerHookPath())}`;
+    const settings = {
+        hooks: {
+            PreToolUse: [{ matcher: 'mcp__mama__.*', hooks: [{ type: 'command', command }] }],
+        },
+        sandbox: {
+            enabled: true,
+            failIfUnavailable: true,
+            autoAllowBashIfSandboxed: true,
+            allowUnsandboxedCommands: false,
+            excludedCommands: [],
+            filesystem: {
+                allowWrite: [workspaceDir],
+                denyRead: [...deniedReadPaths],
+                denyWrite: [directory],
+            },
+        },
+        env: {
+            CLAUDE_CODE_TMPDIR: (0, node_path_1.join)(workspaceDir, '.tmp'),
+            // Children complete inside the owner turn, while their host calls have an active run.
+            CLAUDE_CODE_DISABLE_BACKGROUND_TASKS: '1',
+        },
+    };
+    (0, node_fs_1.mkdirSync)(directory, { recursive: true });
+    (0, node_fs_1.mkdirSync)((0, node_path_1.join)(workspaceDir, '.tmp'), { recursive: true, mode: 0o700 });
+    // Both loaded scopes are host-owned. Never retain hooks or environment from prior contents.
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(directory, 'settings.json'), `${JSON.stringify(settings, null, 2)}\n`, {
+        mode: 0o600,
+    });
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(directory, 'settings.local.json'), '{}\n', { mode: 0o600 });
+}
+//# sourceMappingURL=claude-caller-config.js.map

package/dist/cli/runtime/claude-caller-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-caller-config.js","sourceRoot":"","sources":["../../../src/cli/runtime/claude-caller-config.ts"],"names":[],"mappings":";;AAGA,sDAEC;AAGD,wDAqCC;AA7CD,qCAAmD;AACnD,yCAA0C;AAE1C,SAAgB,qBAAqB;IACnC,OAAO,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACzE,CAAC;AAED,gFAAgF;AAChF,SAAgB,sBAAsB,CACpC,YAAoB,EACpB,kBAAqC,EAAE;IAEvC,YAAY,GAAG,IAAA,mBAAO,EAAC,YAAY,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;IAC/E,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE;YACL,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;SAClF;QACD,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;YACvB,wBAAwB,EAAE,IAAI;YAC9B,wBAAwB,EAAE,KAAK;YAC/B,gBAAgB,EAAE,EAAE;YACpB,UAAU,EAAE;gBACV,UAAU,EAAE,CAAC,YAAY,CAAC;gBAC1B,QAAQ,EAAE,CAAC,GAAG,eAAe,CAAC;gBAC9B,SAAS,EAAE,CAAC,SAAS,CAAC;aACvB;SACF;QACD,GAAG,EAAE;YACH,kBAAkB,EAAE,IAAA,gBAAI,EAAC,YAAY,EAAE,MAAM,CAAC;YAC9C,sFAAsF;YACtF,oCAAoC,EAAE,GAAG;SAC1C;KACF,CAAC;IACF,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,4FAA4F;IAC5F,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACxF,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,SAAS,EAAE,qBAAqB,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/cli/secrets.d.ts

@@ -0,0 +1,9 @@
+export declare const SECRET_NAMES: readonly ["MAMA_TELEGRAM_TOKEN", "MAMA_TELEGRAM_SOURCE_TOKEN", "MAMA_SLACK_TOKEN", "MAMA_SLACK_APP_TOKEN", "MAMA_CHATWORK_TOKEN", "MAMA_DISCORD_TOKEN", "MAMA_NOTION_TOKEN", "MAMA_TRELLO_KEY", "MAMA_TRELLO_TOKEN", "MAMA_AUTH_TOKEN"];
+export type SecretName = (typeof SECRET_NAMES)[number] | `MAMA_ICAL_URL_${string}`;
+export declare function isIcalSecret(name: string | undefined): name is `MAMA_ICAL_URL_${string}`;
+export declare function secretName(name: string | undefined): SecretName;
+export declare function shellQuote(value: string): string;
+export declare function listSecrets(home: string): string[];
+/** Stage inside runtime/, which both owner backends deny reading, then atomically replace auth.env. */
+export declare function updateSecrets(home: string, values: Partial<Record<SecretName, string>>): void;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/cli/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/cli/secrets.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,YAAY,yOAWf,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,iBAAiB,MAAM,EAAE,CAAC;AAEnF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,IAAI,iBAAiB,MAAM,EAAE,CAExF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAK/D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD;AAeD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMlD;AAED,uGAAuG;AACvG,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAmC7F"}

package/dist/cli/secrets.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECRET_NAMES = void 0;
+exports.isIcalSecret = isIcalSecret;
+exports.secretName = secretName;
+exports.shellQuote = shellQuote;
+exports.listSecrets = listSecrets;
+exports.updateSecrets = updateSecrets;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const prompt_js_1 = require("./prompt.js");
+exports.SECRET_NAMES = [
+    'MAMA_TELEGRAM_TOKEN',
+    'MAMA_TELEGRAM_SOURCE_TOKEN',
+    'MAMA_SLACK_TOKEN',
+    'MAMA_SLACK_APP_TOKEN',
+    'MAMA_CHATWORK_TOKEN',
+    'MAMA_DISCORD_TOKEN',
+    'MAMA_NOTION_TOKEN',
+    'MAMA_TRELLO_KEY',
+    'MAMA_TRELLO_TOKEN',
+    'MAMA_AUTH_TOKEN',
+];
+function isIcalSecret(name) {
+    return typeof name === 'string' && /^MAMA_ICAL_URL_[A-Z][A-Z0-9_]*$/.test(name);
+}
+function secretName(name) {
+    if (!exports.SECRET_NAMES.includes(name) && !isIcalSecret(name)) {
+        throw new prompt_js_1.CliInputError(`Allowed secret names: ${exports.SECRET_NAMES.join(', ')}`);
+    }
+    return name;
+}
+function shellQuote(value) {
+    return `'${value.replace(/'/g, `'"'"'`)}'`;
+}
+function authSource(home) {
+    try {
+        return (0, node_fs_1.readFileSync)((0, node_path_1.join)(home, '.mama', 'auth.env'), 'utf8');
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return '';
+        throw new prompt_js_1.CliInputError('Cannot read auth.env. Check its owner and permissions.');
+    }
+}
+function assignmentName(line) {
+    return /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=/.exec(line)?.[1];
+}
+function listSecrets(home) {
+    const names = authSource(home).split('\n').map(assignmentName);
+    return [
+        ...exports.SECRET_NAMES.filter((name) => names.includes(name)),
+        ...names.filter(isIcalSecret),
+    ].sort();
+}
+/** Stage inside runtime/, which both owner backends deny reading, then atomically replace auth.env. */
+function updateSecrets(home, values) {
+    for (const [name, value] of Object.entries(values)) {
+        secretName(name);
+        if (typeof value !== 'string')
+            throw new prompt_js_1.CliInputError(`${name} must have a value`);
+        (0, prompt_js_1.nonblankLine)(value);
+    }
+    const original = authSource(home);
+    const retained = original
+        .split('\n')
+        .filter((line) => !Object.hasOwn(values, assignmentName(line) ?? ''))
+        .join('\n');
+    const source = `${retained}${retained && !retained.endsWith('\n') ? '\n' : ''}${Object.entries(values)
+        .map(([name, value]) => `export ${name}=${shellQuote(value)}`)
+        .join('\n')}\n`;
+    const root = (0, node_path_1.join)(home, '.mama');
+    (0, node_fs_1.mkdirSync)(root, { recursive: true, mode: 0o700 });
+    const runtime = (0, node_path_1.join)(root, 'runtime');
+    (0, node_fs_1.mkdirSync)(runtime, { recursive: true, mode: 0o700 });
+    const staging = (0, node_fs_1.mkdtempSync)((0, node_path_1.join)(runtime, 'secret-'));
+    const path = (0, node_path_1.join)(staging, 'auth.env');
+    try {
+        const fd = (0, node_fs_1.openSync)(path, 'wx', 0o600);
+        try {
+            (0, node_fs_1.fchmodSync)(fd, 0o600);
+            (0, node_fs_1.writeFileSync)(fd, source, 'utf8');
+            (0, node_fs_1.fsyncSync)(fd);
+        }
+        finally {
+            (0, node_fs_1.closeSync)(fd);
+        }
+        (0, node_fs_1.renameSync)(path, (0, node_path_1.join)(root, 'auth.env'));
+    }
+    finally {
+        (0, node_fs_1.rmSync)(staging, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=secrets.js.map

package/dist/cli/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/cli/secrets.ts"],"names":[],"mappings":";;;AA6BA,oCAEC;AAED,gCAKC;AAED,gCAEC;AAeD,kCAMC;AAGD,sCAmCC;AArGD,qCAWiB;AACjB,yCAAiC;AACjC,2CAA0D;AAE7C,QAAA,YAAY,GAAG;IAC1B,qBAAqB;IACrB,4BAA4B;IAC5B,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;IACnB,iBAAiB;IACjB,mBAAmB;IACnB,iBAAiB;CACT,CAAC;AAGX,SAAgB,YAAY,CAAC,IAAwB;IACnD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,SAAgB,UAAU,CAAC,IAAwB;IACjD,IAAI,CAAE,oBAAgD,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,yBAAa,CAAC,yBAAyB,oBAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAkB,CAAC;AAC5B,CAAC;AAED,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAClE,MAAM,IAAI,yBAAa,CAAC,wDAAwD,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,oBAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtD,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;KAC9B,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,SAAgB,aAAa,CAAC,IAAY,EAAE,MAA2C;IACrF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,yBAAa,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;QACpF,IAAA,wBAAY,EAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;SACpE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAC5F,MAAM,CACP;SACE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI,UAAU,CAAC,KAAM,CAAC,EAAE,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IAClB,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,IAAA,mBAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAA,qBAAW,EAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtB,IAAA,uBAAa,EAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAClC,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAA,oBAAU,EAAC,IAAI,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/connectors/calendar/index.d.ts

@@ -1,23 +1,24 @@
-/**
- * CalendarConnector — polls Google Calendar via the gws CLI tool.
- * Uses child_process.execSync to call gws CLI commands.
- * Skips "Using keyring backend:" prefix lines before parsing JSON.
- */
-import type { AuthRequirement, ConnectorConfig, ConnectorHealth, IConnector, NormalizedItem } from '../framework/types.js';
+import type { AuthRequirement, ConnectorConfig, ConnectorHealth, IConnector, NormalizedItem, ConnectorPollCursor } from '../framework/types.js';
 export declare class CalendarConnector implements IConnector {
+    private readonly statePath;
     readonly name = "calendar";
     readonly type: "api";
     private lastPollTime;
     private lastPollCount;
     private lastError;
-    constructor(_config: ConnectorConfig);
+    private readonly calendars;
+    /** Calendars whose whole window has been collected once; later polls only ask for changes. */
+    private readonly synced;
+    private pendingSynced;
+    constructor(config: ConnectorConfig, statePath: string);
+    commitPoll(): void;
+    abortPollHandoff(): void;
+    private verifyAccess;
     init(): Promise<void>;
     dispose(): Promise<void>;
     healthCheck(): Promise<ConnectorHealth>;
     getAuthRequirements(): AuthRequirement[];
     authenticate(): Promise<boolean>;
-    private getEventTime;
-    private getEventEndTime;
-    poll(since: Date): Promise<NormalizedItem[]>;
+    poll(since: Date, cursor?: ConnectorPollCursor): Promise<NormalizedItem[]>;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/connectors/calendar/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/calendar/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,UAAU,EACV,cAAc,EACf,MAAM,uBAAuB,CAAC;AAgC/B,qBAAa,iBAAkB,YAAW,UAAU;IAClD,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAE/B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,SAAS,CAAiC;gBAGtC,OAAO,EAAE,eAAe;IAI9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IASrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC;IAS7C,mBAAmB,IAAI,eAAe,EAAE;IAWlC,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;IAStC,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,eAAe;IAIjB,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;CA0FnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/calendar/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,eAAe,EACf,UAAU,EACV,cAAc,EACd,mBAAmB,EACpB,MAAM,uBAAuB,CAAC;AAqC/B,qBAAa,iBAAkB,YAAW,UAAU;IAgBhD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAf5B,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,SAAS,CAAqB;IAItC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAC9E,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,aAAa,CAA4B;gBAG/C,MAAM,EAAE,eAAe,EACN,SAAS,EAAE,MAAM;IAwBpC,UAAU,IAAI,IAAI;IAOlB,gBAAgB,IAAI,IAAI;YAIV,YAAY;IAWpB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAarB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAExB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC;IAS7C,mBAAmB,IAAI,eAAe,EAAE;IAYlC,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC;IAShC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;CAiHjF"}