@maincode-ai/channel-base 0.18.3

package/dist/GroupGate.js

@@ -0,0 +1,41 @@
+export class GroupGate {
+    policy;
+    groups;
+    constructor(policy = 'disabled', groups = {}) {
+        this.policy = policy;
+        this.groups = groups;
+    }
+    /**
+     * Full group check: policy + allowlist + mention gating.
+     * Evaluation order:
+     *   1. groupPolicy (disabled → drop)
+     *   2. group allowlist (allowlist mode, no match → drop)
+     *   3. mention gating (requireMention + not mentioned → drop silently)
+     *
+     * Mention gating runs before sender gate so that unmentioned messages
+     * in groups don't trigger pairing flows.
+     */
+    check(envelope) {
+        if (!envelope.isGroup) {
+            return { allowed: true };
+        }
+        if (this.policy === 'disabled') {
+            return { allowed: false, reason: 'disabled' };
+        }
+        if (this.policy === 'allowlist') {
+            // In allowlist mode, "*" is only a default config — not a wildcard allow.
+            // The group must be explicitly listed by ID.
+            if (!this.groups[envelope.chatId]) {
+                return { allowed: false, reason: 'not_allowlisted' };
+            }
+        }
+        // Per-group config, falling back to "*" defaults, then built-in defaults
+        const groupConfig = this.groups[envelope.chatId] || this.groups['*'] || {};
+        const requireMention = groupConfig.requireMention ?? true;
+        if (requireMention && !envelope.isMentioned && !envelope.isReplyToBot) {
+            return { allowed: false, reason: 'mention_required' };
+        }
+        return { allowed: true };
+    }
+}
+//# sourceMappingURL=GroupGate.js.map

package/dist/GroupGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GroupGate.js","sourceRoot":"","sources":["../src/GroupGate.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,SAAS;IACZ,MAAM,CAAc;IACpB,MAAM,CAA8B;IAE5C,YACE,SAAsB,UAAU,EAChC,SAAsC,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,QAAkB;QACtB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAChD,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,0EAA0E;YAC1E,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;YACvD,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3E,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,IAAI,IAAI,CAAC;QAE1D,IAAI,cAAc,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACxD,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/PairingStore.d.ts

@@ -0,0 +1,31 @@
+export interface PairingRequest {
+    senderId: string;
+    senderName: string;
+    code: string;
+    createdAt: number;
+}
+export declare class PairingStore {
+    private dir;
+    private pendingPath;
+    private allowlistPath;
+    constructor(channelName: string);
+    isApproved(senderId: string): boolean;
+    /**
+     * Create a pairing request for an unknown sender.
+     * Returns the code if created, or null if the pending cap is reached.
+     * If the sender already has a non-expired pending request, returns that code.
+     */
+    createRequest(senderId: string, senderName: string): string | null;
+    /**
+     * Approve a pairing request by code.
+     * Returns the sender ID if found, or null if not found / expired.
+     */
+    approve(code: string): PairingRequest | null;
+    listPending(): PairingRequest[];
+    getAllowlist(): string[];
+    private ensureDir;
+    private readPending;
+    private writePending;
+    private readAllowlist;
+    private writeAllowlist;
+}

package/dist/PairingStore.js

@@ -0,0 +1,115 @@
+import * as crypto from 'node:crypto';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { getGlobalMatildaDir } from './paths.js';
+// Alphabet without ambiguous chars: 0/O, 1/I
+const SAFE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
+const CODE_LENGTH = 8;
+const EXPIRY_MS = 60 * 60 * 1000; // 1 hour
+const MAX_PENDING = 3;
+export class PairingStore {
+    dir;
+    pendingPath;
+    allowlistPath;
+    constructor(channelName) {
+        this.dir = path.join(getGlobalMatildaDir(), 'channels');
+        this.pendingPath = path.join(this.dir, `${channelName}-pairing.json`);
+        this.allowlistPath = path.join(this.dir, `${channelName}-allowlist.json`);
+    }
+    isApproved(senderId) {
+        const list = this.readAllowlist();
+        return list.includes(senderId);
+    }
+    /**
+     * Create a pairing request for an unknown sender.
+     * Returns the code if created, or null if the pending cap is reached.
+     * If the sender already has a non-expired pending request, returns that code.
+     */
+    createRequest(senderId, senderName) {
+        const pending = this.readPending();
+        // Purge expired
+        const now = Date.now();
+        const active = pending.filter((r) => now - r.createdAt < EXPIRY_MS);
+        // Check if sender already has a pending request
+        const existing = active.find((r) => r.senderId === senderId);
+        if (existing) {
+            return existing.code;
+        }
+        // Cap check
+        if (active.length >= MAX_PENDING) {
+            return null;
+        }
+        const code = generateCode();
+        active.push({ senderId, senderName, code, createdAt: now });
+        this.writePending(active);
+        return code;
+    }
+    /**
+     * Approve a pairing request by code.
+     * Returns the sender ID if found, or null if not found / expired.
+     */
+    approve(code) {
+        const pending = this.readPending();
+        const now = Date.now();
+        const idx = pending.findIndex((r) => r.code === code.toUpperCase() && now - r.createdAt < EXPIRY_MS);
+        if (idx === -1)
+            return null;
+        const request = pending[idx];
+        pending.splice(idx, 1);
+        this.writePending(pending);
+        // Add to allowlist
+        const list = this.readAllowlist();
+        if (!list.includes(request.senderId)) {
+            list.push(request.senderId);
+            this.writeAllowlist(list);
+        }
+        return request;
+    }
+    listPending() {
+        const pending = this.readPending();
+        const now = Date.now();
+        return pending.filter((r) => now - r.createdAt < EXPIRY_MS);
+    }
+    getAllowlist() {
+        return this.readAllowlist();
+    }
+    ensureDir() {
+        if (!fs.existsSync(this.dir)) {
+            fs.mkdirSync(this.dir, { recursive: true });
+        }
+    }
+    readPending() {
+        try {
+            const data = fs.readFileSync(this.pendingPath, 'utf-8');
+            return JSON.parse(data);
+        }
+        catch {
+            return [];
+        }
+    }
+    writePending(requests) {
+        this.ensureDir();
+        fs.writeFileSync(this.pendingPath, JSON.stringify(requests, null, 2));
+    }
+    readAllowlist() {
+        try {
+            const data = fs.readFileSync(this.allowlistPath, 'utf-8');
+            return JSON.parse(data);
+        }
+        catch {
+            return [];
+        }
+    }
+    writeAllowlist(list) {
+        this.ensureDir();
+        fs.writeFileSync(this.allowlistPath, JSON.stringify(list, null, 2));
+    }
+}
+function generateCode() {
+    let code = '';
+    for (let i = 0; i < CODE_LENGTH; i++) {
+        code += SAFE_ALPHABET[crypto.randomInt(SAFE_ALPHABET.length)];
+    }
+    return code;
+}
+//# sourceMappingURL=PairingStore.js.map

package/dist/PairingStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PairingStore.js","sourceRoot":"","sources":["../src/PairingStore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,6CAA6C;AAC7C,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAC3C,MAAM,WAAW,GAAG,CAAC,CAAC;AAStB,MAAM,OAAO,YAAY;IACf,GAAG,CAAS;IACZ,WAAW,CAAS;IACpB,aAAa,CAAS;IAE9B,YAAY,WAAmB;QAC7B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU,CAAC,QAAgB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,aAAa,CAAC,QAAgB,EAAE,UAAkB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEnC,gBAAgB;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;QAEpE,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7D,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,CAAC;QAED,YAAY;QACZ,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAY;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,SAAS,CACtE,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAE3B,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,WAAW;QACT,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC9B,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAA0B;QAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,IAAc;QACnC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;CACF;AAED,SAAS,YAAY;IACnB,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/SenderGate.d.ts

@@ -0,0 +1,13 @@
+import type { SenderPolicy } from './types.js';
+import type { PairingStore } from './PairingStore.js';
+export interface SenderCheckResult {
+    allowed: boolean;
+    pairingCode?: string | null;
+}
+export declare class SenderGate {
+    private policy;
+    private allowedUsers;
+    private pairingStore;
+    constructor(policy: SenderPolicy, allowedUsers?: string[], pairingStore?: PairingStore);
+    check(senderId: string, senderName?: string): SenderCheckResult;
+}

package/dist/SenderGate.js

@@ -0,0 +1,34 @@
+export class SenderGate {
+    policy;
+    allowedUsers;
+    pairingStore;
+    constructor(policy, allowedUsers = [], pairingStore) {
+        this.policy = policy;
+        this.allowedUsers = new Set(allowedUsers);
+        this.pairingStore = pairingStore || null;
+    }
+    check(senderId, senderName) {
+        switch (this.policy) {
+            case 'open':
+                return { allowed: true };
+            case 'allowlist':
+                return { allowed: this.allowedUsers.has(senderId) };
+            case 'pairing': {
+                // Check static allowlist first
+                if (this.allowedUsers.has(senderId)) {
+                    return { allowed: true };
+                }
+                // Check dynamic approved list
+                if (this.pairingStore?.isApproved(senderId)) {
+                    return { allowed: true };
+                }
+                // Generate pairing code
+                const code = this.pairingStore?.createRequest(senderId, senderName || senderId);
+                return { allowed: false, pairingCode: code ?? null };
+            }
+            default:
+                throw new Error(`Unknown sender policy: ${this.policy}`);
+        }
+    }
+}
+//# sourceMappingURL=SenderGate.js.map

package/dist/SenderGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SenderGate.js","sourceRoot":"","sources":["../src/SenderGate.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,UAAU;IACb,MAAM,CAAe;IACrB,YAAY,CAAc;IAC1B,YAAY,CAAsB;IAE1C,YACE,MAAoB,EACpB,eAAyB,EAAE,EAC3B,YAA2B;QAE3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,QAAgB,EAAE,UAAmB;QACzC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM;gBACT,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,KAAK,WAAW;gBACd,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,+BAA+B;gBAC/B,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;gBACD,8BAA8B;gBAC9B,IAAI,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;gBACD,wBAAwB;gBACxB,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,aAAa,CAC3C,QAAQ,EACR,UAAU,IAAI,QAAQ,CACvB,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YACvD,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF"}

package/dist/SessionRouter.d.ts

@@ -0,0 +1,51 @@
+import type { SessionScope, SessionTarget } from './types.js';
+import type { AcpBridge } from './AcpBridge.js';
+export declare class SessionRouter {
+    private toSession;
+    private toTarget;
+    private toCwd;
+    private bridge;
+    private defaultCwd;
+    private defaultScope;
+    private channelScopes;
+    private persistPath;
+    constructor(bridge: AcpBridge, defaultCwd: string, scope?: SessionScope, persistPath?: string);
+    /** Replace the bridge instance (used after crash recovery restart). */
+    setBridge(bridge: AcpBridge): void;
+    /** Set scope override for a specific channel. */
+    setChannelScope(channelName: string, scope: SessionScope): void;
+    private routingKey;
+    /**
+     * Sender-scoped key prefix for by-sender (no chatId) scans. The trailing
+     * ':' delimiter ensures a sender id matches as a whole segment — without it
+     * sender "bob" would also match another sender "bobby"
+     * (key `${channelName}:bobby:${chatId}`).
+     */
+    private senderPrefix;
+    resolve(channelName: string, senderId: string, chatId: string, threadId?: string, cwd?: string): Promise<string>;
+    getTarget(sessionId: string): SessionTarget | undefined;
+    hasSession(channelName: string, senderId: string, chatId?: string): boolean;
+    /**
+     * Remove session(s) for the given sender. Returns the removed session IDs.
+     */
+    removeSession(channelName: string, senderId: string, chatId?: string): string[];
+    private deleteByKey;
+    /** Get all session entries for crash recovery. */
+    getAll(): Array<{
+        key: string;
+        sessionId: string;
+        target: SessionTarget;
+    }>;
+    /**
+     * Restore session mappings from a previous bridge.
+     * Called after bridge restart — attempts loadSession for each saved mapping.
+     * Failed loads are silently dropped (new session on next message).
+     */
+    restoreSessions(): Promise<{
+        restored: number;
+        failed: number;
+    }>;
+    /** Clear in-memory state and delete persist file. Used on clean shutdown. */
+    clearAll(): void;
+    private persist;
+}

package/dist/SessionRouter.js

@@ -0,0 +1,195 @@
+import { existsSync, readFileSync, writeFileSync, unlinkSync } from 'node:fs';
+export class SessionRouter {
+    toSession = new Map(); // routing key → session ID
+    toTarget = new Map(); // session ID → target
+    toCwd = new Map(); // session ID → cwd
+    bridge;
+    defaultCwd;
+    defaultScope;
+    channelScopes = new Map();
+    persistPath;
+    constructor(bridge, defaultCwd, scope = 'user', persistPath) {
+        this.bridge = bridge;
+        this.defaultCwd = defaultCwd;
+        this.defaultScope = scope;
+        this.persistPath = persistPath;
+    }
+    /** Replace the bridge instance (used after crash recovery restart). */
+    setBridge(bridge) {
+        this.bridge = bridge;
+    }
+    /** Set scope override for a specific channel. */
+    setChannelScope(channelName, scope) {
+        this.channelScopes.set(channelName, scope);
+    }
+    routingKey(channelName, senderId, chatId, threadId) {
+        const scope = this.channelScopes.get(channelName) || this.defaultScope;
+        switch (scope) {
+            case 'thread':
+                return `${channelName}:${threadId || chatId}`;
+            case 'single':
+                return `${channelName}:__single__`;
+            case 'user':
+            default:
+                return `${channelName}:${senderId}:${chatId}`;
+        }
+    }
+    /**
+     * Sender-scoped key prefix for by-sender (no chatId) scans. The trailing
+     * ':' delimiter ensures a sender id matches as a whole segment — without it
+     * sender "bob" would also match another sender "bobby"
+     * (key `${channelName}:bobby:${chatId}`).
+     */
+    senderPrefix(channelName, senderId) {
+        return `${channelName}:${senderId}:`;
+    }
+    async resolve(channelName, senderId, chatId, threadId, cwd) {
+        const key = this.routingKey(channelName, senderId, chatId, threadId);
+        const existing = this.toSession.get(key);
+        if (existing) {
+            return existing;
+        }
+        const sessionCwd = cwd || this.defaultCwd;
+        const sessionId = await this.bridge.newSession(sessionCwd);
+        this.toSession.set(key, sessionId);
+        this.toTarget.set(sessionId, { channelName, senderId, chatId, threadId });
+        this.toCwd.set(sessionId, sessionCwd);
+        this.persist();
+        return sessionId;
+    }
+    getTarget(sessionId) {
+        return this.toTarget.get(sessionId);
+    }
+    hasSession(channelName, senderId, chatId) {
+        // If chatId is provided, do an exact lookup; otherwise prefix-scan for any
+        // session belonging to this sender on this channel.
+        if (chatId) {
+            return this.toSession.has(this.routingKey(channelName, senderId, chatId));
+        }
+        const prefix = this.senderPrefix(channelName, senderId);
+        for (const k of this.toSession.keys()) {
+            if (k.startsWith(prefix))
+                return true;
+        }
+        return false;
+    }
+    /**
+     * Remove session(s) for the given sender. Returns the removed session IDs.
+     */
+    removeSession(channelName, senderId, chatId) {
+        const removedIds = [];
+        if (chatId) {
+            const key = this.routingKey(channelName, senderId, chatId);
+            const sessionId = this.deleteByKey(key);
+            if (sessionId)
+                removedIds.push(sessionId);
+        }
+        else {
+            // No chatId: remove all sessions for this sender on this channel.
+            const prefix = this.senderPrefix(channelName, senderId);
+            for (const k of [...this.toSession.keys()]) {
+                if (k.startsWith(prefix)) {
+                    const sessionId = this.deleteByKey(k);
+                    if (sessionId)
+                        removedIds.push(sessionId);
+                }
+            }
+        }
+        if (removedIds.length > 0)
+            this.persist();
+        return removedIds;
+    }
+    deleteByKey(key) {
+        const sessionId = this.toSession.get(key);
+        if (!sessionId)
+            return null;
+        this.toSession.delete(key);
+        this.toTarget.delete(sessionId);
+        this.toCwd.delete(sessionId);
+        return sessionId;
+    }
+    /** Get all session entries for crash recovery. */
+    getAll() {
+        const entries = [];
+        for (const [key, sessionId] of this.toSession) {
+            const target = this.toTarget.get(sessionId);
+            if (target) {
+                entries.push({ key, sessionId, target });
+            }
+        }
+        return entries;
+    }
+    /**
+     * Restore session mappings from a previous bridge.
+     * Called after bridge restart — attempts loadSession for each saved mapping.
+     * Failed loads are silently dropped (new session on next message).
+     */
+    async restoreSessions() {
+        if (!this.persistPath || !existsSync(this.persistPath)) {
+            return { restored: 0, failed: 0 };
+        }
+        let entries;
+        try {
+            entries = JSON.parse(readFileSync(this.persistPath, 'utf-8'));
+        }
+        catch {
+            return { restored: 0, failed: 0 };
+        }
+        let restored = 0;
+        let failed = 0;
+        for (const [key, entry] of Object.entries(entries)) {
+            try {
+                const sessionId = await this.bridge.loadSession(entry.sessionId, entry.cwd);
+                this.toSession.set(key, sessionId);
+                this.toTarget.set(sessionId, entry.target);
+                this.toCwd.set(sessionId, entry.cwd);
+                restored++;
+            }
+            catch {
+                // Session can't be loaded — will create fresh on next message
+                failed++;
+            }
+        }
+        // Update persist file to only include successfully restored sessions
+        if (failed > 0) {
+            this.persist();
+        }
+        return { restored, failed };
+    }
+    /** Clear in-memory state and delete persist file. Used on clean shutdown. */
+    clearAll() {
+        this.toSession.clear();
+        this.toTarget.clear();
+        this.toCwd.clear();
+        if (this.persistPath && existsSync(this.persistPath)) {
+            try {
+                unlinkSync(this.persistPath);
+            }
+            catch {
+                // best-effort
+            }
+        }
+    }
+    persist() {
+        if (!this.persistPath)
+            return;
+        const data = {};
+        for (const [key, sessionId] of this.toSession) {
+            const target = this.toTarget.get(sessionId);
+            if (target) {
+                data[key] = {
+                    sessionId,
+                    target,
+                    cwd: this.toCwd.get(sessionId) || this.defaultCwd,
+                };
+            }
+        }
+        try {
+            writeFileSync(this.persistPath, JSON.stringify(data, null, 2), 'utf-8');
+        }
+        catch {
+            // best-effort — don't break message flow for persistence failure
+        }
+    }
+}
+//# sourceMappingURL=SessionRouter.js.map

package/dist/SessionRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SessionRouter.js","sourceRoot":"","sources":["../src/SessionRouter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAU9E,MAAM,OAAO,aAAa;IAChB,SAAS,GAAwB,IAAI,GAAG,EAAE,CAAC,CAAC,2BAA2B;IACvE,QAAQ,GAA+B,IAAI,GAAG,EAAE,CAAC,CAAC,sBAAsB;IACxE,KAAK,GAAwB,IAAI,GAAG,EAAE,CAAC,CAAC,mBAAmB;IAE3D,MAAM,CAAY;IAClB,UAAU,CAAS;IACnB,YAAY,CAAe;IAC3B,aAAa,GAA8B,IAAI,GAAG,EAAE,CAAC;IACrD,WAAW,CAAqB;IAExC,YACE,MAAiB,EACjB,UAAkB,EAClB,QAAsB,MAAM,EAC5B,WAAoB;QAEpB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAiB;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,iDAAiD;IACjD,eAAe,CAAC,WAAmB,EAAE,KAAmB;QACtD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAEO,UAAU,CAChB,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,QAAiB;QAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC;QACvE,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,QAAQ;gBACX,OAAO,GAAG,WAAW,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAChD,KAAK,QAAQ;gBACX,OAAO,GAAG,WAAW,aAAa,CAAC;YACrC,KAAK,MAAM,CAAC;YACZ;gBACE,OAAO,GAAG,WAAW,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,YAAY,CAAC,WAAmB,EAAE,QAAgB;QACxD,OAAO,GAAG,WAAW,IAAI,QAAQ,GAAG,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,QAAiB,EACjB,GAAY;QAEZ,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,UAAU,CAAC,WAAmB,EAAE,QAAgB,EAAE,MAAe;QAC/D,2EAA2E;QAC3E,oDAAoD;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,aAAa,CACX,WAAmB,EACnB,QAAgB,EAChB,MAAe;QAEf,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACxD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;oBACtC,IAAI,SAAS;wBAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,kDAAkD;IAClD,MAAM;QACJ,MAAM,OAAO,GAIR,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QAInB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,OAAuC,CAAC;QAC5C,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpC,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAC7C,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,GAAG,CACV,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,QAAQ,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,6EAA6E;IAC7E,QAAQ;QACN,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO;QAE9B,MAAM,IAAI,GAAmC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,CAAC,GAAG;oBACV,SAAS;oBACT,MAAM;oBACN,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU;iBAClD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;QACnE,CAAC;IACH,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { getGlobalMatildaDir, resolvePath } from './paths.js';
+export { AcpBridge } from './AcpBridge.js';
+export type { AcpBridgeOptions, AvailableCommand, ToolCallEvent, } from './AcpBridge.js';
+export { DaemonChannelBridge } from './DaemonChannelBridge.js';
+export type { DaemonChannelBridgeOptions, DaemonChannelEvent, DaemonChannelSessionClient, DaemonChannelSessionFactory, DaemonChannelSessionFactoryRequest, DaemonPromptCompleteEvent, DaemonPermissionRequestEvent, DaemonPermissionResolvedEvent, } from './DaemonChannelBridge.js';
+export { BlockStreamer } from './BlockStreamer.js';
+export type { BlockStreamerOptions } from './BlockStreamer.js';
+export { ChannelBase } from './ChannelBase.js';
+export type { ChannelBaseOptions } from './ChannelBase.js';
+export { PairingStore } from './PairingStore.js';
+export type { PairingRequest } from './PairingStore.js';
+export { GroupGate } from './GroupGate.js';
+export type { GroupCheckResult } from './GroupGate.js';
+export { SenderGate } from './SenderGate.js';
+export type { SenderCheckResult } from './SenderGate.js';
+export { SessionRouter } from './SessionRouter.js';
+export type { Attachment, BlockStreamingChunkConfig, BlockStreamingCoalesceConfig, ChannelConfig, ChannelPlugin, ChannelType, DispatchMode, Envelope, GroupConfig, GroupPolicy, SenderPolicy, SessionScope, SessionTarget, } from './types.js';

package/dist/index.js

@@ -0,0 +1,10 @@
+export { getGlobalMatildaDir, resolvePath } from './paths.js';
+export { AcpBridge } from './AcpBridge.js';
+export { DaemonChannelBridge } from './DaemonChannelBridge.js';
+export { BlockStreamer } from './BlockStreamer.js';
+export { ChannelBase } from './ChannelBase.js';
+export { PairingStore } from './PairingStore.js';
+export { GroupGate } from './GroupGate.js';
+export { SenderGate } from './SenderGate.js';
+export { SessionRouter } from './SessionRouter.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAM3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAW/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Expands tilde and resolves relative paths to absolute.
+ * Mirrors Storage.resolvePath() in packages/core.
+ */
+export declare function resolvePath(dir: string): string;
+/**
+ * Returns the global Matilda home directory (config, credentials, etc.).
+ *
+ * Priority: MATILDA_HOME env var > ~/.matilda
+ *
+ * This mirrors packages/core Storage.getGlobalMatildaDir() without importing
+ * from core to avoid cross-package dependencies.
+ */
+export declare function getGlobalMatildaDir(): string;

package/dist/paths.js

@@ -0,0 +1,43 @@
+import * as path from 'node:path';
+import * as os from 'node:os';
+/**
+ * Expands tilde and resolves relative paths to absolute.
+ * Mirrors Storage.resolvePath() in packages/core.
+ */
+export function resolvePath(dir) {
+    let resolved = dir;
+    if (resolved === '~' ||
+        resolved.startsWith('~/') ||
+        resolved.startsWith('~\\')) {
+        const relativeSegments = resolved === '~'
+            ? []
+            : resolved
+                .slice(2)
+                .split(/[/\\]+/)
+                .filter(Boolean);
+        resolved = path.join(os.homedir(), ...relativeSegments);
+    }
+    if (!path.isAbsolute(resolved)) {
+        resolved = path.resolve(resolved);
+    }
+    return resolved;
+}
+/**
+ * Returns the global Matilda home directory (config, credentials, etc.).
+ *
+ * Priority: MATILDA_HOME env var > ~/.matilda
+ *
+ * This mirrors packages/core Storage.getGlobalMatildaDir() without importing
+ * from core to avoid cross-package dependencies.
+ */
+export function getGlobalMatildaDir() {
+    const envDir = process.env['MATILDA_HOME'];
+    if (envDir) {
+        return resolvePath(envDir);
+    }
+    const homeDir = os.homedir();
+    return homeDir
+        ? path.join(homeDir, '.matilda')
+        : path.join(os.tmpdir(), '.matilda');
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,IACE,QAAQ,KAAK,GAAG;QAChB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;QACzB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,MAAM,gBAAgB,GACpB,QAAQ,KAAK,GAAG;YACd,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,QAAQ;iBACL,KAAK,CAAC,CAAC,CAAC;iBACR,KAAK,CAAC,QAAQ,CAAC;iBACf,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC7B,OAAO,OAAO;QACZ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QAChC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC"}