@lawrencehui/citio 0.2.0

package/dist/core/skills.js

@@ -0,0 +1,111 @@
+import { execSync } from "child_process";
+import { cpSync, existsSync, mkdirSync, mkdtempSync, rmSync } from "fs";
+import os from "os";
+import path from "path";
+// Curated for Citio's job (investigate bugs, read logs, fix code, open PRs).
+// Every install command below is verified working with `npx skills add`.
+export const SKILL_REGISTRY = {
+    "systematic-debugging": {
+        url: "obra/superpowers --skill systematic-debugging",
+        description: "Root-cause debugging discipline — find the bug before patching it",
+        installMethod: "npx-skills",
+    },
+    "code-review": {
+        url: "obra/superpowers --skill receiving-code-review",
+        description: "Systematic code-review discipline — respond to and act on review feedback",
+        installMethod: "npx-skills",
+    },
+    "webapp-testing": {
+        url: "anthropics/skills --skill webapp-testing",
+        description: "Official Anthropic: verify fixes by driving the web app in a browser",
+        installMethod: "npx-skills",
+    },
+    "frontend-design": {
+        url: "anthropics/claude-code --skill frontend-design",
+        description: "Production-grade UI generation, avoids default design patterns",
+        installMethod: "npx-skills",
+    },
+    "skill-creator": {
+        url: "anthropics/skills --skill skill-creator",
+        description: "Official Anthropic: turn your team's own processes into custom skills",
+        installMethod: "npx-skills",
+    },
+    gstack: {
+        url: "https://github.com/garrytan/gstack.git",
+        description: "QA, shipping, investigation, deploy, design review",
+        installMethod: "git",
+    },
+};
+/**
+ * Install skills into `skillsDir` so the runtime's loadSkills() (which reads
+ * `<skillsDir>/<name>/SKILL.md`) actually finds them. Idempotent: skills whose
+ * SKILL.md already exists are skipped — safe to run on every container boot.
+ *
+ * npx-skills entries are installed via `npx skills add` into a temp directory
+ * (the skills CLI writes to `./.agents/skills/`) and then copied into place,
+ * because the skills CLI's layout is not the layout Citio reads.
+ */
+export function installSkillsTo(skillNames, skillsDir, options = {}) {
+    const results = [];
+    if (skillNames.length === 0)
+        return results;
+    mkdirSync(skillsDir, { recursive: true });
+    for (const skill of skillNames) {
+        const info = SKILL_REGISTRY[skill];
+        if (!info) {
+            results.push({ skill, status: "unknown-skill" });
+            continue;
+        }
+        const targetPath = path.join(skillsDir, skill);
+        if (existsSync(path.join(targetPath, "SKILL.md"))) {
+            results.push({ skill, status: "already-present" });
+            continue;
+        }
+        try {
+            if (info.installMethod === "git") {
+                const authedUrl = options.ghToken
+                    ? info.url.replace("https://github.com/", `https://${options.ghToken}@github.com/`)
+                    : info.url;
+                execSync(`git clone --depth 1 "${authedUrl}" "${targetPath}"`, {
+                    stdio: "pipe",
+                    timeout: 120000,
+                    env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+                });
+            }
+            else {
+                // npx-skills and legacy npx entries both go through the skills CLI in a
+                // sandbox dir, then the produced skill folder is copied into skillsDir.
+                const tempDir = mkdtempSync(path.join(os.tmpdir(), "citio-skill-"));
+                try {
+                    execSync(`npx -y skills add ${info.url} -y`, {
+                        stdio: "pipe",
+                        cwd: tempDir,
+                        timeout: 180000,
+                    });
+                    const produced = path.join(tempDir, ".agents", "skills", skill);
+                    if (!existsSync(path.join(produced, "SKILL.md"))) {
+                        throw new Error(`skills CLI did not produce ${produced}`);
+                    }
+                    cpSync(produced, targetPath, { recursive: true });
+                }
+                finally {
+                    rmSync(tempDir, { recursive: true, force: true });
+                }
+            }
+            results.push({ skill, status: "installed" });
+        }
+        catch (err) {
+            // execSync throws with stdout/stderr buffers when stdio is piped — surface
+            // stderr so failures aren't masked by npm's notice noise on stdout.
+            const e = err;
+            const stderr = e?.stderr ? String(e.stderr).trim().split("\n").filter(Boolean).slice(-3).join(" | ") : "";
+            results.push({
+                skill,
+                status: "failed",
+                error: [e?.message, stderr].filter(Boolean).join(" — ").slice(0, 400),
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=skills.js.map

package/dist/core/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/core/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAQxB,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAA8B;IACvD,sBAAsB,EAAE;QACtB,GAAG,EAAE,+CAA+C;QACpD,WAAW,EAAE,mEAAmE;QAChF,aAAa,EAAE,YAAY;KAC5B;IACD,aAAa,EAAE;QACb,GAAG,EAAE,gDAAgD;QACrD,WAAW,EAAE,2EAA2E;QACxF,aAAa,EAAE,YAAY;KAC5B;IACD,gBAAgB,EAAE;QAChB,GAAG,EAAE,0CAA0C;QAC/C,WAAW,EAAE,sEAAsE;QACnF,aAAa,EAAE,YAAY;KAC5B;IACD,iBAAiB,EAAE;QACjB,GAAG,EAAE,gDAAgD;QACrD,WAAW,EAAE,gEAAgE;QAC7E,aAAa,EAAE,YAAY;KAC5B;IACD,eAAe,EAAE;QACf,GAAG,EAAE,yCAAyC;QAC9C,WAAW,EAAE,uEAAuE;QACpF,aAAa,EAAE,YAAY;KAC5B;IACD,MAAM,EAAE;QACN,GAAG,EAAE,wCAAwC;QAC7C,WAAW,EAAE,oDAAoD;QACjE,aAAa,EAAE,KAAK;KACrB;CACF,CAAC;AAQF;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,UAAoB,EACpB,SAAiB,EACjB,UAAgC,EAAE;IAElC,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAE5C,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO;oBAC/B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,WAAW,OAAO,CAAC,OAAO,cAAc,CAAC;oBACnF,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBACb,QAAQ,CAAC,wBAAwB,SAAS,MAAM,UAAU,GAAG,EAAE;oBAC7D,KAAK,EAAE,MAAM;oBACb,OAAO,EAAE,MAAM;oBACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,wEAAwE;gBACxE,wEAAwE;gBACxE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC;oBACH,QAAQ,CAAC,qBAAqB,IAAI,CAAC,GAAG,KAAK,EAAE;wBAC3C,KAAK,EAAE,MAAM;wBACb,GAAG,EAAE,OAAO;wBACZ,OAAO,EAAE,MAAM;qBAChB,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;wBACjD,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;oBAC5D,CAAC;oBACD,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,oEAAoE;YACpE,MAAM,CAAC,GAAG,GAAqD,CAAC;YAChE,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK;gBACL,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/workspace.d.ts

@@ -0,0 +1,13 @@
+import type { CitioConfig } from "../config/schema.js";
+export declare class WorkspaceManager {
+    private workspacePath;
+    private config;
+    constructor(config: CitioConfig, workspacePath?: string);
+    getMainWorkspacePath(): string;
+    initialize(): Promise<void>;
+    private generateInstructionFiles;
+    private loadSkills;
+    private extractRepoName;
+    cleanupWorktree(worktreePath: string): void;
+}
+//# sourceMappingURL=workspace.d.ts.map

package/dist/core/workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/core/workspace.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAc;gBAEhB,MAAM,EAAE,WAAW,EAAE,aAAa,SAAe;IAK7D,oBAAoB,IAAI,MAAM;IAIxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAiIjC,OAAO,CAAC,wBAAwB;IAqEhC,OAAO,CAAC,UAAU;IAkClB,OAAO,CAAC,eAAe;IAOvB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;CAkB5C"}

package/dist/core/workspace.js

@@ -0,0 +1,238 @@
+import { execFileSync, execSync } from "child_process";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "fs";
+import path from "path";
+import { installSkillsTo } from "./skills.js";
+export class WorkspaceManager {
+    workspacePath;
+    config;
+    constructor(config, workspacePath = "/workspace") {
+        this.config = config;
+        this.workspacePath = workspacePath;
+    }
+    getMainWorkspacePath() {
+        return this.workspacePath;
+    }
+    async initialize() {
+        mkdirSync(this.workspacePath, { recursive: true });
+        try {
+            execFileSync("git", ["config", "--global", "user.name", this.config.workspace.git.user_name], {
+                stdio: "pipe",
+                encoding: "utf-8",
+            });
+            if (this.config.workspace.git.user_email) {
+                execFileSync("git", ["config", "--global", "user.email", this.config.workspace.git.user_email], {
+                    stdio: "pipe",
+                    encoding: "utf-8",
+                });
+            }
+            console.log(JSON.stringify({
+                type: "git_identity_configured",
+                userName: this.config.workspace.git.user_name,
+                userEmail: this.config.workspace.git.user_email || null,
+            }));
+        }
+        catch (err) {
+            console.log(JSON.stringify({
+                type: "git_identity_configuration_failed",
+                error: err instanceof Error ? err.message : String(err),
+            }));
+        }
+        // Configure git to use GH_TOKEN for HTTPS clones
+        const ghToken = process.env.GH_TOKEN;
+        if (ghToken) {
+            try {
+                execFileSync("git", ["config", "--global", "credential.helper", `!f() { echo "username=oauth2"; echo "password=${ghToken}"; }; f`], {
+                    stdio: "pipe",
+                    encoding: "utf-8",
+                });
+                console.log(JSON.stringify({ type: "git_credential_configured" }));
+            }
+            catch {
+                // Non-fatal, try URL injection as fallback
+            }
+        }
+        // Ensure workspace is a git repo (Codex requires it)
+        if (!existsSync(path.join(this.workspacePath, ".git"))) {
+            try {
+                execSync("git init", { cwd: this.workspacePath, stdio: "pipe" });
+                console.log(JSON.stringify({ type: "workspace_git_init" }));
+            }
+            catch {
+                // Non-fatal
+            }
+        }
+        for (const repo of this.config.workspace.repos) {
+            const repoName = this.extractRepoName(repo.url);
+            const repoPath = path.join(this.workspacePath, repoName);
+            // Inject token into URL as fallback for credential helper
+            const cloneUrl = ghToken
+                ? repo.url.replace("https://github.com/", `https://${ghToken}@github.com/`)
+                : repo.url;
+            if (existsSync(repoPath)) {
+                console.log(JSON.stringify({
+                    type: "workspace_pull",
+                    repo: repoName,
+                }));
+                try {
+                    execSync(`git pull --ff-only`, {
+                        cwd: repoPath,
+                        encoding: "utf-8",
+                        timeout: 60000,
+                    });
+                }
+                catch (err) {
+                    console.log(JSON.stringify({
+                        type: "workspace_pull_failed",
+                        repo: repoName,
+                        error: err instanceof Error ? err.message : String(err),
+                    }));
+                }
+            }
+            else {
+                console.log(JSON.stringify({
+                    type: "workspace_clone",
+                    repo: repoName,
+                    url: repo.url,
+                }));
+                try {
+                    execSync(`git clone --depth 1 --branch "${repo.branch}" "${cloneUrl}" "${repoPath}"`, {
+                        encoding: "utf-8",
+                        timeout: 300000,
+                        env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+                    });
+                }
+                catch (err) {
+                    console.log(JSON.stringify({
+                        type: "workspace_clone_failed",
+                        repo: repoName,
+                        error: err instanceof Error ? err.message : String(err),
+                    }));
+                    // Don't crash — continue with other repos
+                    continue;
+                }
+            }
+        }
+        // Install configured skills into the directory loadSkills() reads.
+        // Idempotent (skips already-present skills), non-fatal on failure —
+        // this is how skills reach the container, which local installs cannot.
+        const configuredSkills = this.config.skills?.installed ?? [];
+        if (configuredSkills.length > 0) {
+            const results = installSkillsTo(configuredSkills, this.config.skills.directory, { ghToken });
+            for (const result of results) {
+                console.log(JSON.stringify({ type: "skill_install", ...result }));
+            }
+        }
+        this.generateInstructionFiles();
+    }
+    generateInstructionFiles() {
+        const skills = this.loadSkills();
+        // User-configured rules from citio.yaml, falling back to the defaults.
+        const configuredRules = this.config.workspace?.rules ?? [];
+        const rules = configuredRules.length > 0 ? configuredRules : [
+            "Always create PRs for code changes. Never push directly to main.",
+            "When investigating bugs, check logs first before making code changes.",
+            "Report findings back to the team with clear summaries.",
+        ];
+        const baseInstructionContent = `# Citio Agent Instructions
+
+## Rules
+${rules.map((rule) => `- ${rule}`).join("\n")}
+- After any update or change pushed to a PR, always quote the PR link in your response.
+
+## Available MCP Tools
+You have access to these tools via the MCP server:
+- investigate_codebase: Search code for patterns
+- read_file: Read file contents
+- write_file: Create or edit files
+- create_branch: Create a git branch with isolated worktree
+- create_pr: Open a pull request on GitHub
+- run_command: Run allowlisted commands (git, npm, tsc, etc.)
+- check_ci_status: Check CI/CD status of a PR
+- save_finding: Save learnings to org memory
+- recall_context: Search saved org memory for prior findings
+- query_logs: Query CloudWatch logs from the task role
+- post_update: Record a progress update for the current Slack thread
+- query_audit_log: Search the recorded MCP tool audit trail
+
+## Workflow
+0. For simple status/info questions (what's running, service health, quick lookups):
+   answer with MINIMAL tool calls (1-3) — skip recall_context, skip query_audit_log,
+   don't chain tools you don't need. Speed matters more than ceremony.
+0b. When asked about a resource BY NAME (a service, cluster, app) and you don't find
+   an exact match: enumerate before asking back — e.g. list all ECS clusters, then
+   list services in each, and fuzzy-match ("Aegis" ~ aegis-bastion, "Bifrost" ~
+   bifrost-app). People use short names; infrastructure uses long ones. Only ask
+   the user when enumeration genuinely finds no plausible match.
+1. When asked to investigate a bug, use investigate_codebase and read_file first
+2. For CloudWatch or AWS checks, use query_logs first and only use run_command when query_logs is not enough
+3. Prefer these MCP tools over native Bash/Grep/Glob/Read tools whenever possible
+4. Use post_update for meaningful progress checkpoints, not every trivial step
+5. Use recall_context before starting non-trivial investigations, not for simple questions
+6. Create a branch before making changes
+7. Create a PR when your fix is ready
+8. Save any important findings with save_finding`;
+        const instructionContent = skills
+            ? `${baseInstructionContent}\n\n${skills}\n`
+            : `${baseInstructionContent}\n`;
+        // Write CLAUDE.md for Claude Code
+        writeFileSync(path.join(this.workspacePath, "CLAUDE.md"), instructionContent, "utf-8");
+        // Write AGENTS.md for Codex
+        writeFileSync(path.join(this.workspacePath, "AGENTS.md"), instructionContent, "utf-8");
+    }
+    loadSkills() {
+        const skillsDir = this.config.skills.directory;
+        if (!existsSync(skillsDir))
+            return "";
+        const entries = readdirSync(skillsDir, { withFileTypes: true });
+        const index = [];
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const skillPath = path.join(skillsDir, entry.name, "SKILL.md");
+            if (!existsSync(skillPath))
+                continue;
+            // Progressive disclosure: inlining full SKILL.md bodies added ~60KB to
+            // EVERY agent request (verified: multi-minute responses). Give the agent
+            // a one-line index and let it read the file when the task matches.
+            const content = readFileSync(skillPath, "utf-8");
+            let description = "";
+            const fmMatch = content.match(/^---\n[\s\S]*?\bdescription:\s*(.+)/m);
+            if (fmMatch)
+                description = fmMatch[1].trim().replace(/^["']|["']$/g, "");
+            if (!description) {
+                const body = content.replace(/^---\n[\s\S]*?\n---\n?/, "");
+                description = (body.split("\n").find((line) => line.trim() && !line.trim().startsWith("#")) || "").trim().slice(0, 200);
+            }
+            index.push(`- **${entry.name}** — ${description}\n  Full instructions: read \`${skillPath}\``);
+        }
+        if (index.length === 0)
+            return "";
+        return (`\n# Installed Skills\n\n` +
+            `These skills are installed on disk. When a task matches one, READ its SKILL.md (path below) and follow it — do not guess its contents:\n\n` +
+            index.join("\n"));
+    }
+    extractRepoName(url) {
+        return url
+            .split("/")
+            .pop()
+            .replace(/\.git$/, "");
+    }
+    cleanupWorktree(worktreePath) {
+        try {
+            const repoDir = path.dirname(worktreePath);
+            execSync(`git worktree remove "${worktreePath}" --force`, {
+                cwd: repoDir,
+                encoding: "utf-8",
+                timeout: 30000,
+            });
+        }
+        catch (err) {
+            console.log(JSON.stringify({
+                type: "worktree_cleanup_failed",
+                path: worktreePath,
+                error: err instanceof Error ? err.message : String(err),
+            }));
+        }
+    }
+}
+//# sourceMappingURL=workspace.js.map

package/dist/core/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/core/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACrF,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,OAAO,gBAAgB;IACnB,aAAa,CAAS;IACtB,MAAM,CAAc;IAE5B,YAAY,MAAmB,EAAE,aAAa,GAAG,YAAY;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED,oBAAoB;QAClB,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU;QACd,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;gBAC5F,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;gBACzC,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE;oBAC9F,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS;gBAC7C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI;aACxD,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,mCAAmC;gBACzC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC,CAAC;QACN,CAAC;QAED,iDAAiD;QACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,mBAAmB,EAAE,iDAAiD,OAAO,SAAS,CAAC,EAAE;oBAClI,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,OAAO;iBAClB,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACjE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAEzD,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,OAAO;gBACtB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,WAAW,OAAO,cAAc,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAEb,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,QAAQ;iBACf,CAAC,CACH,CAAC;gBACF,IAAI,CAAC;oBACH,QAAQ,CAAC,oBAAoB,EAAE;wBAC7B,GAAG,EAAE,QAAQ;wBACb,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,KAAK;qBACf,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,uBAAuB;wBAC7B,IAAI,EAAE,QAAQ;wBACd,KAAK,EACH,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACnD,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,iBAAiB;oBACvB,IAAI,EAAE,QAAQ;oBACd,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CACH,CAAC;gBACF,IAAI,CAAC;oBACH,QAAQ,CACN,iCAAiC,IAAI,CAAC,MAAM,MAAM,QAAQ,MAAM,QAAQ,GAAG,EAC3E;wBACE,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,MAAM;wBACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;qBAClD,CACF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;wBACb,IAAI,EAAE,wBAAwB;wBAC9B,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CACH,CAAC;oBACF,0CAA0C;oBAC1C,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,uEAAuE;QACvE,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;QAC7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,eAAe,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAEO,wBAAwB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAEjC,uEAAuE;QACvE,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;QAC3D,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YAC3D,kEAAkE;YAClE,uEAAuE;YACvE,wDAAwD;SACzD,CAAC;QAEF,MAAM,sBAAsB,GAAG;;;EAGjC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iDAkCI,CAAC;QAE9C,MAAM,kBAAkB,GAAG,MAAM;YAC/B,CAAC,CAAC,GAAG,sBAAsB,OAAO,MAAM,IAAI;YAC5C,CAAC,CAAC,GAAG,sBAAsB,IAAI,CAAC;QAElC,kCAAkC;QAClC,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAC1C,kBAAkB,EAClB,OAAO,CACR,CAAC;QAEF,4BAA4B;QAC5B,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,EAC1C,kBAAkB,EAClB,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,UAAU;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAErC,uEAAuE;YACvE,yEAAyE;YACzE,mEAAmE;YACnE,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACjD,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACtE,IAAI,OAAO;gBAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YACzE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAC3D,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1H,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,WAAW,iCAAiC,SAAS,IAAI,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,CACL,0BAA0B;YAC1B,4IAA4I;YAC5I,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,OAAO,GAAG;aACP,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,EAAG;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,eAAe,CAAC,YAAoB;QAClC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3C,QAAQ,CAAC,wBAAwB,YAAY,WAAW,EAAE;gBACxD,GAAG,EAAE,OAAO;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,yBAAyB;gBAC/B,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+import "dotenv/config";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,152 @@
+import "dotenv/config";
+import { randomUUID } from "crypto";
+import { readFileSync } from "fs";
+import { parse } from "yaml";
+import { CitioConfigSchema } from "./config/schema.js";
+import { WorkspaceManager } from "./core/workspace.js";
+import { AgentRunner } from "./core/agent-runner.js";
+import { SessionManager } from "./core/session-manager.js";
+import { SlackAdapter } from "./adapters/slack.js";
+import { resolveEnvVars } from "./utils/env.js";
+import { formatCodexAuthHint, getCodexAuthPath, hasCodexCredentials } from "./utils/codex.js";
+import { createServer } from "http";
+async function main() {
+    const configPath = process.env.CITIO_CONFIG || "citio.yaml";
+    let rawConfig;
+    try {
+        let raw;
+        if (process.env.CITIO_CONFIG_B64) {
+            // Config passed as base64 env var (for ECS without volume mounts)
+            raw = Buffer.from(process.env.CITIO_CONFIG_B64, "base64").toString("utf-8");
+        }
+        else {
+            raw = readFileSync(configPath, "utf-8");
+        }
+        rawConfig = resolveEnvVars(parse(raw));
+    }
+    catch (err) {
+        console.error(`Failed to read config at ${configPath}:`, err);
+        process.exit(1);
+    }
+    const config = CitioConfigSchema.parse(rawConfig);
+    const workspacePath = process.env.CITIO_WORKSPACE || "/workspace";
+    console.log(JSON.stringify({
+        type: "startup",
+        name: config.name,
+        provider: config.engine.default_provider,
+        channel: config.slack.channel_id,
+        workspace: workspacePath,
+        repos: config.workspace.repos.length,
+        skills: config.skills.installed.length,
+    }));
+    // Refresh Codex tokens on startup (id_token expires every hour)
+    if (config.engine.default_provider === "codex") {
+        const fs = await import("fs");
+        const home = process.env.HOME || "/home/citio";
+        const authPath = getCodexAuthPath(home);
+        console.log(JSON.stringify({
+            type: "codex_auth_check",
+            home,
+            authPath,
+            hasAuthFile: fs.existsSync(authPath),
+            hasApiKey: Boolean(process.env.OPENAI_API_KEY),
+        }));
+        if (!hasCodexCredentials()) {
+            console.log(JSON.stringify({
+                type: "codex_auth_missing",
+                message: formatCodexAuthHint(home),
+            }));
+        }
+        try {
+            const authData = JSON.parse(fs.readFileSync(authPath, "utf-8"));
+            const refreshToken = authData?.tokens?.refresh_token;
+            if (refreshToken) {
+                console.log(JSON.stringify({ type: "token_refresh", status: "refreshing" }));
+                const { execSync: ex } = await import("child_process");
+                const resp = ex(`curl -s -X POST "https://auth.openai.com/oauth/token" -H "Content-Type: application/json" -d '{"grant_type":"refresh_token","refresh_token":"${refreshToken}","client_id":"app_EMoamEEZ73f0CkXaXp7hrann"}'`, { encoding: "utf-8", timeout: 15000 });
+                const fresh = JSON.parse(resp);
+                if (fresh.id_token && fresh.access_token) {
+                    authData.tokens.id_token = fresh.id_token;
+                    authData.tokens.access_token = fresh.access_token;
+                    if (fresh.refresh_token)
+                        authData.tokens.refresh_token = fresh.refresh_token;
+                    fs.writeFileSync(authPath, JSON.stringify(authData, null, 2));
+                    console.log(JSON.stringify({ type: "token_refresh", status: "success" }));
+                }
+                else {
+                    console.log(JSON.stringify({ type: "token_refresh", status: "failed", error: JSON.stringify(fresh) }));
+                }
+            }
+        }
+        catch (err) {
+            console.log(JSON.stringify({ type: "token_refresh", status: "error", error: err instanceof Error ? err.message : String(err) }));
+        }
+    }
+    if (config.engine.default_provider === "claude" && !process.env.ANTHROPIC_API_KEY) {
+        console.log(JSON.stringify({
+            type: "claude_auth_mode",
+            message: process.env.CLAUDE_CODE_OAUTH_TOKEN
+                ? "Claude will run without --bare using CLAUDE_CODE_OAUTH_TOKEN."
+                : "Claude will run without --bare so it can use non-API-key Claude auth.",
+        }));
+    }
+    // Initialize workspace
+    const workspace = new WorkspaceManager(config, workspacePath);
+    await workspace.initialize();
+    // Initialize agent runner (long-running MCP server for Codex, or -p for Claude)
+    const agentRunner = new AgentRunner(config, workspacePath);
+    await agentRunner.start();
+    const runtimeId = randomUUID();
+    console.log(JSON.stringify({ type: "runtime_session_scope", runtimeId }));
+    const sessionManager = new SessionManager(config.engine.default_provider, process.env.CITIO_MEMORY || "/memory", runtimeId);
+    // Health check server
+    const healthServer = createServer((req, res) => {
+        if (req.url === "/healthz") {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({
+                status: "ok",
+                agentRunning: agentRunner.isRunning,
+                queueLength: agentRunner.queueLength,
+                provider: config.engine.default_provider,
+            }));
+        }
+        else {
+            res.writeHead(404);
+            res.end();
+        }
+    });
+    healthServer.listen(3001, () => {
+        console.log(JSON.stringify({ type: "health_check", port: 3001 }));
+    });
+    // Provider tuning from citio.yaml -> env (explicit env vars still win).
+    const codexProvider = config.engine.providers?.codex;
+    const claudeProvider = config.engine.providers?.claude;
+    if (codexProvider?.model && !process.env.CODEX_MODEL)
+        process.env.CODEX_MODEL = codexProvider.model;
+    if (codexProvider?.reasoning_effort && !process.env.CODEX_REASONING_EFFORT)
+        process.env.CODEX_REASONING_EFFORT = codexProvider.reasoning_effort;
+    if (claudeProvider?.model && !process.env.CLAUDE_MODEL)
+        process.env.CLAUDE_MODEL = claudeProvider.model;
+    // Start Slack adapter
+    const slack = new SlackAdapter(config, agentRunner, sessionManager);
+    await slack.start();
+    console.log(JSON.stringify({ type: "ready" }));
+    // Graceful shutdown
+    const shutdown = async (signal) => {
+        console.log(JSON.stringify({ type: "shutdown", signal }));
+        // Tell any thread with an in-flight task that we're restarting — the
+        // provider process dies with the container and would otherwise go silent.
+        await Promise.race([slack.notifyShutdown(), new Promise((r) => setTimeout(r, 3000))]);
+        await Promise.race([slack.stop(), new Promise((r) => setTimeout(r, 10000))]);
+        healthServer.close();
+        console.log(JSON.stringify({ type: "shutdown_complete" }));
+        process.exit(0);
+    };
+    process.on("SIGTERM", () => shutdown("SIGTERM"));
+    process.on("SIGINT", () => shutdown("SIGINT"));
+}
+main().catch((err) => {
+    console.error("Fatal error:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEpC,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,YAAY,CAAC;IAE5D,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,GAAW,CAAC;QAChB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACjC,kEAAkE;YAClE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,4BAA4B,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,YAAY,CAAC;IAElE,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;QACb,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;QACxC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QAChC,SAAS,EAAE,aAAa;QACxB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;QACpC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM;KACvC,CAAC,CACH,CAAC;IAEF,gEAAgE;IAChE,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,aAAa,CAAC;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,IAAI;YACJ,QAAQ;YACR,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YACpC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;SAC/C,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC;aACnC,CAAC,CAAC,CAAC;QACN,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC;YACrD,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;gBAC7E,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,EAAE,CACb,gJAAgJ,YAAY,gDAAgD,EAC5M,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CACtC,CAAC;gBACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;oBACzC,QAAQ,CAAC,MAAM,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;oBAC1C,QAAQ,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;oBAClD,IAAI,KAAK,CAAC,aAAa;wBAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;oBAC7E,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC9D,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBACzG,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;YACzB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB;gBAC1C,CAAC,CAAC,+DAA+D;gBACjE,CAAC,CAAC,uEAAuE;SAC5E,CAAC,CAAC,CAAC;IACN,CAAC;IAED,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,UAAU,EAAE,CAAC;IAE7B,gFAAgF;IAChF,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC3D,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAC9B,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS,EACrC,SAAS,CACV,CAAC;IAEF,sBAAsB;IACtB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,YAAY,EAAE,WAAW,CAAC,SAAS;gBACnC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB;aACzC,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;IACrD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;IACvD,IAAI,aAAa,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC;IACpG,IAAI,aAAa,EAAE,gBAAgB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IAChJ,IAAI,cAAc,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC;IAExG,sBAAsB;IACtB,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACpE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAEpB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAE/C,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1D,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,YAAY,CAAC,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/utils/app-state.d.ts

@@ -0,0 +1,5 @@
+export declare function getCitioStateDir(): string;
+export declare function getInstallerStatePath(): string;
+export declare function getFallbackSecretsPath(): string;
+export declare function pathExists(filePath: string): boolean;
+//# sourceMappingURL=app-state.d.ts.map

package/dist/utils/app-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state.d.ts","sourceRoot":"","sources":["../../src/utils/app-state.ts"],"names":[],"mappings":"AAcA,wBAAgB,gBAAgB,IAAI,MAAM,CAczC;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEpD"}

package/dist/utils/app-state.js

@@ -0,0 +1,35 @@
+import { chmodSync, existsSync, mkdirSync } from "fs";
+import os from "os";
+import path from "path";
+function ensureDir(dirPath) {
+    mkdirSync(dirPath, { recursive: true, mode: 0o700 });
+    try {
+        chmodSync(dirPath, 0o700);
+    }
+    catch {
+        // Best-effort only.
+    }
+    return dirPath;
+}
+export function getCitioStateDir() {
+    const homeDir = os.homedir();
+    if (process.platform === "darwin") {
+        return ensureDir(path.join(homeDir, "Library", "Application Support", "Citio"));
+    }
+    if (process.platform === "win32") {
+        const appData = process.env.APPDATA || path.join(homeDir, "AppData", "Roaming");
+        return ensureDir(path.join(appData, "Citio"));
+    }
+    const xdgConfigHome = process.env.XDG_CONFIG_HOME || path.join(homeDir, ".config");
+    return ensureDir(path.join(xdgConfigHome, "citio"));
+}
+export function getInstallerStatePath() {
+    return path.join(getCitioStateDir(), "installer-state.yaml");
+}
+export function getFallbackSecretsPath() {
+    return path.join(getCitioStateDir(), "secrets.json");
+}
+export function pathExists(filePath) {
+    return existsSync(filePath);
+}
+//# sourceMappingURL=app-state.js.map

package/dist/utils/app-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-state.js","sourceRoot":"","sources":["../../src/utils/app-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AACtD,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,SAAS,SAAS,CAAC,OAAe;IAChC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,sBAAsB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}

package/dist/utils/claude.d.ts

@@ -0,0 +1,4 @@
+export declare function normalizeClaudeOauthToken(token: string): string;
+export declare function extractClaudeOauthTokenFromTranscript(transcriptPath: string): string | null;
+export declare function validateClaudeOauthToken(token: string): boolean;
+//# sourceMappingURL=claude.d.ts.map

package/dist/utils/claude.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../src/utils/claude.ts"],"names":[],"mappings":"AAOA,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI/D;AASD,wBAAgB,qCAAqC,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0B3F;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CA4B/D"}