@mono-agent/agent-app 0.6.2 → 0.8.0

package/dist/modules/catalog.js

@@ -1,4 +1,5 @@
-import { DEFAULT_MODEL, memoryBlock } from "./base.js";
+import { validateCronExpression } from "@mono-agent/cron-adapter";
+import { DEFAULT_PI_MEMORY_MODEL, memoryBlock } from "./base.js";
 /** Split a comma-separated input value into trimmed, non-empty entries. */
 function splitCsv(v) {
     return v ? v.split(",").map((s) => s.trim()).filter(Boolean) : [];
@@ -61,9 +62,10 @@ const channelTelegram = {
         {
             id: "telegramToken",
             label: "Telegram bot token",
-            description: "BotFather token. Externalized to .env.example; never written into JSON.",
+            description: "BotFather token. Saved to .env; .env.example contains only a placeholder. Never written into JSON.",
             secret: true,
-            envVar: "MONO_AGENT_TELEGRAM_TOKEN",
+            envVar: "MONO_AGENT_TELEGRAM_BOT_TOKEN",
+            required: true,
         },
     ],
     configFragment: (values) => {
@@ -75,10 +77,10 @@ const channelTelegram = {
             },
         };
     },
-    envExampleLines: () => ["# Telegram bot token from @BotFather", "MONO_AGENT_TELEGRAM_TOKEN="],
+    envExampleLines: () => ["# Telegram bot token from @BotFather", "MONO_AGENT_TELEGRAM_BOT_TOKEN="],
     recommendedTools: ["TelegramSendMessage", "TelegramAskButtons"],
     validateExpectations: [
-        { sectionId: "channel:telegram", mustBe: "ok", note: "Set MONO_AGENT_TELEGRAM_TOKEN in .env." },
+        { sectionId: "channel:telegram", mustBe: "ok", note: "Set MONO_AGENT_TELEGRAM_BOT_TOKEN in .env." },
     ],
 };
 const channelSlack = {
@@ -96,16 +98,18 @@ const channelSlack = {
         {
             id: "botToken",
             label: "Slack bot token",
-            description: "xoxb-… token. Externalized to .env.example.",
+            description: "xoxb-… token. Saved to .env; .env.example contains only a placeholder.",
             secret: true,
             envVar: "MONO_AGENT_SLACK_BOT_TOKEN",
+            required: true,
         },
         {
             id: "appToken",
             label: "Slack app token",
-            description: "xapp-… connections:write token for Socket Mode.",
+            description: "xapp-… connections:write token for Socket Mode. Saved to .env only.",
             secret: true,
             envVar: "MONO_AGENT_SLACK_APP_TOKEN",
+            required: true,
         },
     ],
     configFragment: (values) => {
@@ -141,9 +145,10 @@ const channelOpenaiApi = {
         {
             id: "apiKey",
             label: "Client bearer key",
-            description: "Optional bearer clients must present (sk-…). Externalized to .env.example.",
+            description: "Optional bearer clients must present (sk-…). Saved to .env; .env.example contains only a placeholder.",
             secret: true,
             envVar: "MONO_AGENT_OPENAI_API_KEY",
+            required: false,
         },
     ],
     configFragment: () => ({ openaiApi: { enabled: true } }),
@@ -160,11 +165,26 @@ const channelCron = {
         {
             id: "cronExpression",
             label: "Cron expression",
-            description: "When the digest runs (default 08:00 daily).",
+            description: "Five-field UTC schedule for the digest (default 08:00 UTC daily).",
             default: "0 8 * * *",
+            validate: (value) => {
+                const result = validateCronExpression(value);
+                if (result.ok)
+                    return undefined;
+                if (result.code === "required") {
+                    return "Enter a cron expression using five fields: minute hour day-of-month month day-of-week.";
+                }
+                if (result.code === "field_count") {
+                    return "Use exactly five fields: minute hour day-of-month month day-of-week (for example, 0 8 * * *).";
+                }
+                return `Invalid cron expression: ${result.reason}`;
+            },
         },
     ],
-    configFragment: () => ({ cron: { enabled: true } }),
+    // Directory-backed jobs are active by being present and enabled in cron/*.md.
+    // Setting cron.enabled would select the legacy single-job form, which also
+    // requires inline expression/prompt fields and prevents folder jobs loading.
+    configFragment: () => ({ cron: { dir: "cron" } }),
     files: (values) => [
         {
             path: "cron/digest.md",
@@ -182,7 +202,7 @@ const channelCron = {
         },
     ],
     validateExpectations: [
-        { sectionId: "channel:cron", mustBe: "ok", note: "Author at least one cron/*.md job." },
+        { sectionId: "channel:cron", mustBe: "ok", note: "Use at least one valid enabled cron/*.md job." },
     ],
 };
 const channelA2a = {
@@ -191,13 +211,15 @@ const channelA2a = {
     title: "A2A provider",
     summary: "Expose the agent over A2A (Agent Card + provider endpoint).",
     riskLevel: "medium",
+    wizardSelectable: false,
     inputs: [
         {
             id: "bearerToken",
             label: "A2A bearer token",
-            description: "Bearer required from A2A consumers when requireBearer is set. Externalized to .env.example.",
+            description: "Bearer required from A2A consumers when requireBearer is set. Saved to .env; never written into JSON.",
             secret: true,
             envVar: "MONO_AGENT_A2A_BEARER_TOKEN",
+            required: false,
         },
     ],
     configFragment: () => a2aProviderPluginSection(),
@@ -217,7 +239,7 @@ const memoryLite = {
     summary: "SQLite full-text recall, zero external dependencies.",
     riskLevel: "low",
     inputs: [],
-    configFragment: () => ({ memory: memoryBlock("lite") }),
+    configFragment: () => ({ memory: { ...memoryBlock("lite"), recallTool: { enabled: true } } }),
     validateExpectations: [{ sectionId: "memory", mustBe: "ok" }],
 };
 const memoryJournal = {
@@ -230,7 +252,7 @@ const memoryJournal = {
     configFragment: () => ({
         memory: {
             ...memoryBlock("journal"),
-            embeddings: { provider: "ollama", model: "nomic-embed-text" },
+            embeddings: { provider: "ollama", model: "nomic-embed-text:v1.5" },
             recallTool: { enabled: true },
         },
     }),
@@ -238,7 +260,7 @@ const memoryJournal = {
         {
             sectionId: "memory",
             mustBe: "ok",
-            note: "Start ollama (or configure embeddings) so memory leaves `waiting`.",
+            note: "Ollama must be reachable and contain nomic-embed-text:v1.5; if the model is missing, run `ollama pull nomic-embed-text:v1.5`.",
         },
     ],
 };
@@ -252,8 +274,14 @@ const memoryBujo = {
     configFragment: (values) => ({
         memory: {
             ...memoryBlock("bujo"),
-            embeddings: { provider: "ollama", model: "nomic-embed-text" },
-            llm: { provider: "agent-host", model: values.model ?? DEFAULT_MODEL },
+            embeddings: { provider: "ollama", model: "nomic-embed-text:v1.5" },
+            // Direct Codex is CLI-only, while the memory LLM has an SDK-only safety
+            // contract. Route every direct Codex primary through the equivalent Pi
+            // Terra model for this internal call, not only the default candidate.
+            llm: {
+                provider: "agent-host",
+                model: values.model?.startsWith("codex:") ? DEFAULT_PI_MEMORY_MODEL : values.model ?? DEFAULT_PI_MEMORY_MODEL,
+            },
             recallTool: { enabled: true },
         },
     }),
@@ -261,7 +289,7 @@ const memoryBujo = {
         {
             sectionId: "memory",
             mustBe: "ok",
-            note: "Start ollama (or configure embeddings) so memory leaves `waiting`.",
+            note: "Ollama must be reachable and contain nomic-embed-text:v1.5; if the model is missing, run `ollama pull nomic-embed-text:v1.5`.",
         },
     ],
 };
@@ -271,6 +299,11 @@ const memorySupermemory = {
     title: "Supermemory (external server)",
     summary: "External Supermemory instance for server-side extraction + recall.",
     riskLevel: "medium",
+    // The package is optional and no longer part of agent-app's dependency
+    // closure. Existing presets/config composition can still resolve the module
+    // explicitly, but the core interactive wizard must not advertise an
+    // unavailable backend as though it were built in.
+    wizardSelectable: false,
     inputs: [
         {
             id: "supermemoryBaseUrl",
@@ -280,10 +313,11 @@ const memorySupermemory = {
         },
         {
             id: "supermemoryApiKey",
-            label: "Supermemory API key",
-            description: "Bearer key printed by supermemory-server on first boot. Externalized to .env.example.",
+            label: "Supermemory API key (optional)",
+            description: "Bearer key for hosted or authenticated instances. Omit it for a keyless local service. Saved to .env; .env.example contains only a placeholder.",
             secret: true,
             envVar: "MONO_AGENT_MEMORY_SUPERMEMORY_API_KEY",
+            required: false,
         },
     ],
     configFragment: (values) => ({

package/dist/modules/catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/modules/catalog.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGvD,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB;IAC/B,OAAO;QACL,QAAQ,EAAE;YACR,OAAO,EAAE;gBACP;oBACE,OAAO,EAAE,yBAAyB;oBAClC,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE;4BACL,IAAI,EAAE,YAAY;4BAClB,WAAW,EAAE,yCAAyC;4BACtD,OAAO,EAAE,OAAO;yBACjB;wBACD,KAAK,EAAE;4BACL,EAAE,EAAE,SAAS;4BACb,IAAI,EAAE,qBAAqB;4BAC3B,WAAW,EAAE,0DAA0D;4BACvE,IAAI,EAAE,CAAC,OAAO,CAAC;yBAChB;qBACF;iBACF;aACF;SACF;KACwD,CAAC;AAC9D,CAAC;AAED,MAAM,+BAA+B,GACnC,+IAA+I,CAAC;AAElJ,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,cAAc,GAAqB;IACvC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,6DAA6D;IACtE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACtD,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACvE,CAAC;AAEF,MAAM,eAAe,GAAqB;IACxC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,0CAA0C;IACnD,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,kFAAkF;SAChG;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,yEAAyE;YACtF,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,2BAA2B;SACpC;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,OAAO;YACL,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;IACD,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,sCAAsC,EAAE,4BAA4B,CAAC;IAC7F,gBAAgB,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;IAC/D,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,wCAAwC,EAAE;KAChG;CACF,CAAC;AAEF,MAAM,YAAY,GAAqB;IACrC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,sDAAsD;IAC/D,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,8DAA8D;SAC5E;QACD;YACE,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,6CAA6C;YAC1D,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,4BAA4B;SACrC;QACD;YACE,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,iDAAiD;YAC9D,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,4BAA4B;SACrC;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,OAAO;YACL,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;SACF,CAAC;IACJ,CAAC;IACD,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,4BAA4B;QAC5B,6BAA6B;QAC7B,6BAA6B;KAC9B;IACD,gBAAgB,EAAE,CAAC,kBAAkB,CAAC;IACtC,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,wEAAwE;SAC/E;KACF;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,+DAA+D;IACxE,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,4EAA4E;YACzF,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,2BAA2B;SACpC;KACF;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACxD,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,oDAAoD,EAAE,4BAA4B,CAAC;IAC3G,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC1E,CAAC;AAEF,MAAM,WAAW,GAAqB;IACpC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,6CAA6C;YAC1D,OAAO,EAAE,WAAW;SACrB;KACF;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACnD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE;gBACR,KAAK;gBACL,gBAAgB,MAAM,CAAC,cAAc,IAAI,WAAW,GAAG;gBACvD,6BAA6B;gBAC7B,cAAc;gBACd,KAAK;gBACL,EAAE;gBACF,qEAAqE;gBACrE,6LAA6L;gBAC7L,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC;SACb;KACF;IACD,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oCAAoC,EAAE;KACxF;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,6DAA6D;IACtE,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,6FAA6F;YAC1G,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6BAA6B;SACtC;KACF;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,wBAAwB,EAAE;IAChD,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,uEAAuE;QACvE,8BAA8B;KAC/B;IACD,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACnE,CAAC;AAEF,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,sDAAsD;IAC/D,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IACvD,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC9D,CAAC;AAEF,MAAM,aAAa,GAAqB;IACtC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,2BAA2B;IAClC,OAAO,EAAE,8CAA8C;IACvD,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,MAAM,EAAE;YACN,GAAG,WAAW,CAAC,SAAS,CAAC;YACzB,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE;YAC7D,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,oEAAoE;SAC3E;KACF;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE;YACN,GAAG,WAAW,CAAC,MAAM,CAAC;YACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE;YAC7D,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa,EAAE;YACrE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,oEAAoE;SAC3E;KACF;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAqB;IAC1C,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,+BAA+B;IACtC,OAAO,EAAE,oEAAoE;IAC7E,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,oBAAoB;YACxB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,gGAAgG;YAC7G,OAAO,EAAE,uBAAuB;SACjC;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,uFAAuF;YACpG,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uCAAuC;SAChD;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE;YACN,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,kBAAkB,IAAI,uBAAuB,EAAE;YAC9E,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,wEAAwE;QACxE,wCAAwC;KACzC;IACD,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,oFAAoF;SAC3F;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,GAAqB;IAChC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,yEAAyE;IAClF,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,QAAQ,EAAE,aAAa;SACxB;KACF,CAAC;IACF,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;IACnE,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;CACtG,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,oBAAoB,GAAqB;IAC7C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,2DAA2D;IACpE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE;KACjF,CAAC;IACF,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,EAAE;KAC/F;CACF,CAAC;AAEF,8EAA8E;AAC9E,wFAAwF;AACxF,8EAA8E;AAE9E,MAAM,cAAc,GAAqB;IACvC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,gEAAgE;IACzE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;KAC3G,CAAC;IACF,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,6CAA6C,EAAE;KAC5F;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,0BAA0B;IACjC,OAAO,EAAE,qEAAqE;IAC9E,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;KAC9G,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,+DAA+D;SACtE;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,cAAc;IACd,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,UAAU;IACV,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,OAAO;IACP,oBAAoB;IACpB,cAAc;IACd,gBAAgB;CACjB,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../../src/modules/catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGjE,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB;IAC/B,OAAO;QACL,QAAQ,EAAE;YACR,OAAO,EAAE;gBACP;oBACE,OAAO,EAAE,yBAAyB;oBAClC,MAAM,EAAE;wBACN,OAAO,EAAE,IAAI;wBACb,KAAK,EAAE;4BACL,IAAI,EAAE,YAAY;4BAClB,WAAW,EAAE,yCAAyC;4BACtD,OAAO,EAAE,OAAO;yBACjB;wBACD,KAAK,EAAE;4BACL,EAAE,EAAE,SAAS;4BACb,IAAI,EAAE,qBAAqB;4BAC3B,WAAW,EAAE,0DAA0D;4BACvE,IAAI,EAAE,CAAC,OAAO,CAAC;yBAChB;qBACF;iBACF;aACF;SACF;KACwD,CAAC;AAC9D,CAAC;AAED,MAAM,+BAA+B,GACnC,+IAA+I,CAAC;AAElJ,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,cAAc,GAAqB;IACvC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,6DAA6D;IACtE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACtD,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACvE,CAAC;AAEF,MAAM,eAAe,GAAqB;IACxC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,UAAU;IACjB,OAAO,EAAE,0CAA0C;IACnD,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,kFAAkF;SAChG;QACD;YACE,EAAE,EAAE,eAAe;YACnB,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,oGAAoG;YACjH,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,+BAA+B;YACvC,QAAQ,EAAE,IAAI;SACf;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAChD,OAAO;YACL,QAAQ,EAAE;gBACR,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D;SACF,CAAC;IACJ,CAAC;IACD,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,sCAAsC,EAAE,gCAAgC,CAAC;IACjG,gBAAgB,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;IAC/D,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,4CAA4C,EAAE;KACpG;CACF,CAAC;AAEF,MAAM,YAAY,GAAqB;IACrC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,sDAAsD;IAC/D,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,8DAA8D;SAC5E;QACD;YACE,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,wEAAwE;YACrF,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,IAAI;SACf;QACD;YACE,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,qEAAqE;YAClF,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,4BAA4B;YACpC,QAAQ,EAAE,IAAI;SACf;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE;QACzB,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACtD,OAAO;YACL,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI;gBACb,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;SACF,CAAC;IACJ,CAAC;IACD,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,4BAA4B;QAC5B,6BAA6B;QAC7B,6BAA6B;KAC9B;IACD,gBAAgB,EAAE,CAAC,kBAAkB,CAAC;IACtC,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,wEAAwE;SAC/E;KACF;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,+DAA+D;IACxE,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,uGAAuG;YACpH,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,2BAA2B;YACnC,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACxD,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,oDAAoD,EAAE,4BAA4B,CAAC;IAC3G,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC1E,CAAC;AAEF,MAAM,WAAW,GAAqB;IACpC,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,gBAAgB;YACpB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,mEAAmE;YAChF,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,MAAM,CAAC,EAAE;oBAAE,OAAO,SAAS,CAAC;gBAChC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,wFAAwF,CAAC;gBAClG,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAClC,OAAO,+FAA+F,CAAC;gBACzG,CAAC;gBACD,OAAO,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,CAAC;SACF;KACF;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;IACjD,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QACjB;YACE,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE;gBACR,KAAK;gBACL,gBAAgB,MAAM,CAAC,cAAc,IAAI,WAAW,GAAG;gBACvD,6BAA6B;gBAC7B,cAAc;gBACd,KAAK;gBACL,EAAE;gBACF,qEAAqE;gBACrE,6LAA6L;gBAC7L,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC;SACb;KACF;IACD,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,+CAA+C,EAAE;KACnG;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,6DAA6D;IACtE,SAAS,EAAE,QAAQ;IACnB,gBAAgB,EAAE,KAAK;IACvB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,aAAa;YACjB,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,uGAAuG;YACpH,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,6BAA6B;YACrC,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,cAAc,EAAE,GAAG,EAAE,CAAC,wBAAwB,EAAE;IAChD,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,uEAAuE;QACvE,8BAA8B;KAC/B;IACD,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACnE,CAAC;AAEF,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,sDAAsD;IAC/D,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC7F,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC9D,CAAC;AAEF,MAAM,aAAa,GAAqB;IACtC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,2BAA2B;IAClC,OAAO,EAAE,8CAA8C;IACvD,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,MAAM,EAAE;YACN,GAAG,WAAW,CAAC,SAAS,CAAC;YACzB,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE;YAClE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EACF,+HAA+H;SAClI;KACF;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,yBAAyB;IAChC,OAAO,EAAE,wDAAwD;IACjE,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE;YACN,GAAG,WAAW,CAAC,MAAM,CAAC;YACtB,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE;YAClE,wEAAwE;YACxE,uEAAuE;YACvE,sEAAsE;YACtE,GAAG,EAAE;gBACH,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,uBAAuB;aAC9G;YACD,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EACF,+HAA+H;SAClI;KACF;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAqB;IAC1C,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,+BAA+B;IACtC,OAAO,EAAE,oEAAoE;IAC7E,SAAS,EAAE,QAAQ;IACnB,uEAAuE;IACvE,4EAA4E;IAC5E,oEAAoE;IACpE,kDAAkD;IAClD,gBAAgB,EAAE,KAAK;IACvB,MAAM,EAAE;QACN;YACE,EAAE,EAAE,oBAAoB;YACxB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,gGAAgG;YAC7G,OAAO,EAAE,uBAAuB;SACjC;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,KAAK,EAAE,gCAAgC;YACvC,WAAW,EAAE,iJAAiJ;YAC9J,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,uCAAuC;YAC/C,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,EAAE;YACN,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,kBAAkB,IAAI,uBAAuB,EAAE;YAC9E,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;SAC9B;KACF,CAAC;IACF,eAAe,EAAE,GAAG,EAAE,CAAC;QACrB,wEAAwE;QACxE,wCAAwC;KACzC;IACD,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,oFAAoF;SAC3F;KACF;CACF,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,OAAO,GAAqB;IAChC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,yEAAyE;IAClF,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,aAAa,EAAE,CAAC,GAAG,CAAC;YACpB,QAAQ,EAAE,aAAa;SACxB;KACF,CAAC;IACF,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;IACnE,oBAAoB,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;CACtG,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,oBAAoB,GAAqB;IAC7C,EAAE,EAAE,uBAAuB;IAC3B,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,2DAA2D;IACpE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE;KACjF,CAAC;IACF,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,0CAA0C,EAAE;KAC/F;CACF,CAAC;AAEF,8EAA8E;AAC9E,wFAAwF;AACxF,8EAA8E;AAE9E,MAAM,cAAc,GAAqB;IACvC,EAAE,EAAE,iBAAiB;IACrB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,uBAAuB;IAC9B,OAAO,EAAE,gEAAgE;IACzE,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;KAC3G,CAAC;IACF,oBAAoB,EAAE;QACpB,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,6CAA6C,EAAE;KAC5F;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,0BAA0B;IACjC,OAAO,EAAE,qEAAqE;IAC9E,SAAS,EAAE,KAAK;IAChB,MAAM,EAAE,EAAE;IACV,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACrB,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE;KAC9G,CAAC;IACF,oBAAoB,EAAE;QACpB;YACE,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,+DAA+D;SACtE;KACF;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,cAAc;IACd,eAAe;IACf,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,UAAU;IACV,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,OAAO;IACP,oBAAoB;IACpB,cAAc;IACd,gBAAgB;CACjB,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,EAAU;IACnC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/dist/modules/index.d.ts

@@ -2,7 +2,7 @@ export type { CapabilityModule, GeneratedFile, ModuleInput, ModuleInputValues, M
 export { resolveModuleInputs } from "./types.js";
 export type { BaseConfigContext } from "./base.js";
 export { baseConfig, DEFAULT_MODEL, memoryBlock, MODEL_INPUT } from "./base.js";
-export type { AdapterSendToolName, BuiltinToolName } from "./known-tools.js";
-export { ADAPTER_SEND_TOOL_NAMES, ALLOW_ALL_TOOLS, BUILTIN_TOOL_NAMES, canonicalToolName, DEFAULT_SAFE_TOOLS, isAllowAllTools, isKnownToolName, isMcpToolName, LEGACY_TOOL_ALIASES, suggestToolName, } from "./known-tools.js";
+export type { AdapterSendToolName, AppToolName, BuiltinToolName } from "./known-tools.js";
+export { ADAPTER_SEND_TOOL_NAMES, ALLOW_ALL_TOOLS, APP_TOOL_NAMES, BUILTIN_TOOL_NAMES, canonicalToolName, DEFAULT_SAFE_TOOLS, isAllowAllTools, isKnownToolName, isMcpToolName, LEGACY_TOOL_ALIASES, suggestToolName, } from "./known-tools.js";
 export { CAPABILITY_MODULES, findModule, modulesByKind } from "./catalog.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/modules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEhF,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEhF,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/modules/index.js

@@ -1,5 +1,5 @@
 export { resolveModuleInputs } from "./types.js";
 export { baseConfig, DEFAULT_MODEL, memoryBlock, MODEL_INPUT } from "./base.js";
-export { ADAPTER_SEND_TOOL_NAMES, ALLOW_ALL_TOOLS, BUILTIN_TOOL_NAMES, canonicalToolName, DEFAULT_SAFE_TOOLS, isAllowAllTools, isKnownToolName, isMcpToolName, LEGACY_TOOL_ALIASES, suggestToolName, } from "./known-tools.js";
+export { ADAPTER_SEND_TOOL_NAMES, ALLOW_ALL_TOOLS, APP_TOOL_NAMES, BUILTIN_TOOL_NAMES, canonicalToolName, DEFAULT_SAFE_TOOLS, isAllowAllTools, isKnownToolName, isMcpToolName, LEGACY_TOOL_ALIASES, suggestToolName, } from "./known-tools.js";
 export { CAPABILITY_MODULES, findModule, modulesByKind } from "./catalog.js";
 //# sourceMappingURL=index.js.map

package/dist/modules/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGhF,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/modules/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGhF,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC"}

package/dist/modules/known-tools.d.ts

@@ -8,6 +8,8 @@ import { ALLOW_ALL_TOOLS } from "@mono-agent/config";
 export { ALLOW_ALL_TOOLS };
 /** Built-in tools gated by `tools.allowedTools` (pi-bridge.js). */
 export declare const BUILTIN_TOOL_NAMES: readonly ["Read", "Write", "Edit", "Glob", "Grep", "Bash", "WebFetch", "WebSearch"];
+/** App-owned tools injected by the configured host and governed by tool policy. */
+export declare const APP_TOOL_NAMES: readonly ["RunHistory"];
 /** Adapter send tools — require BOTH an `allowedTools` entry AND an enabled channel. */
 export declare const ADAPTER_SEND_TOOL_NAMES: readonly ["SlackSendMessage", "TelegramSendMessage", "TelegramAskButtons", "TelegramSendFile", "AskUser"];
 /**
@@ -24,6 +26,7 @@ export declare function canonicalToolName(name: string): string;
 /** Safe read-only default pre-checked for every new agent. */
 export declare const DEFAULT_SAFE_TOOLS: readonly ["Read", "Glob", "Grep"];
 export type BuiltinToolName = (typeof BUILTIN_TOOL_NAMES)[number];
+export type AppToolName = (typeof APP_TOOL_NAMES)[number];
 export type AdapterSendToolName = (typeof ADAPTER_SEND_TOOL_NAMES)[number];
 /**
  * True when `name` is a built-in, an adapter send tool, or a canonical alias-value

package/dist/modules/known-tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"known-tools.d.ts","sourceRoot":"","sources":["../../src/modules/known-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,uFAAuF;AACvF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,qFASrB,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,uBAAuB,2GAM1B,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAUtD,CAAC;AAEF,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,mCAAoC,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAa3E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEhE;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhE"}
+{"version":3,"file":"known-tools.d.ts","sourceRoot":"","sources":["../../src/modules/known-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,uFAAuF;AACvF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,qFASrB,CAAC;AAEX,mFAAmF;AACnF,eAAO,MAAM,cAAc,yBAEjB,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,uBAAuB,2GAM1B,CAAC;AAEX;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAWtD,CAAC;AAEF,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,mCAAoC,CAAC;AAEpE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAkB3E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAEhE;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhE"}

package/dist/modules/known-tools.js

@@ -17,6 +17,10 @@ export const BUILTIN_TOOL_NAMES = [
     "WebFetch",
     "WebSearch",
 ];
+/** App-owned tools injected by the configured host and governed by tool policy. */
+export const APP_TOOL_NAMES = [
+    "RunHistory",
+];
 /** Adapter send tools — require BOTH an `allowedTools` entry AND an enabled channel. */
 export const ADAPTER_SEND_TOOL_NAMES = [
     "SlackSendMessage",
@@ -40,6 +44,7 @@ export const LEGACY_TOOL_ALIASES = {
     telegram_send_document: "TelegramSendFile",
     telegram_send_photo: "TelegramSendFile",
     ask_user: "AskUser",
+    run_history: "RunHistory",
     memory_recall: "MemoryRecall",
     read_skill: "ReadSkill",
     ask_collaborator: "AskCollaborator",
@@ -58,7 +63,12 @@ export const DEFAULT_SAFE_TOOLS = ["Read", "Glob", "Grep"];
  * config listing `ReadSkill` must validate as cleanly as one listing `read_skill`.
  */
 const KNOWN_TOOL_NAMES = [
-    ...new Set([...BUILTIN_TOOL_NAMES, ...ADAPTER_SEND_TOOL_NAMES, ...Object.values(LEGACY_TOOL_ALIASES)]),
+    ...new Set([
+        ...BUILTIN_TOOL_NAMES,
+        ...APP_TOOL_NAMES,
+        ...ADAPTER_SEND_TOOL_NAMES,
+        ...Object.values(LEGACY_TOOL_ALIASES),
+    ]),
 ];
 /**
  * True when `name` is a built-in, an adapter send tool, or a canonical alias-value

package/dist/modules/known-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-tools.js","sourceRoot":"","sources":["../../src/modules/known-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,uFAAuF;AACvF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,WAAW;CACH,CAAC;AAEX,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,SAAS;CACD,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,kBAAkB,EAAE,kBAAkB;IACtC,qBAAqB,EAAE,qBAAqB;IAC5C,YAAY,EAAE,oBAAoB;IAClC,sBAAsB,EAAE,kBAAkB;IAC1C,mBAAmB,EAAE,kBAAkB;IACvC,QAAQ,EAAE,SAAS;IACnB,aAAa,EAAE,cAAc;IAC7B,UAAU,EAAE,WAAW;IACvB,gBAAgB,EAAE,iBAAiB;CACpC,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAKpE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,kBAAkB,EAAE,GAAG,uBAAuB,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;CAC/G,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,eAAe,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,mBAAmB,CAAC;AACpG,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC;AAC3E,CAAC"}
+{"version":3,"file":"known-tools.js","sourceRoot":"","sources":["../../src/modules/known-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,uFAAuF;AACvF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,WAAW;CACH,CAAC;AAEX,mFAAmF;AACnF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,YAAY;CACJ,CAAC;AAEX,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,kBAAkB;IAClB,SAAS;CACD,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA2B;IACzD,kBAAkB,EAAE,kBAAkB;IACtC,qBAAqB,EAAE,qBAAqB;IAC5C,YAAY,EAAE,oBAAoB;IAClC,sBAAsB,EAAE,kBAAkB;IAC1C,mBAAmB,EAAE,kBAAkB;IACvC,QAAQ,EAAE,SAAS;IACnB,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,cAAc;IAC7B,UAAU,EAAE,WAAW;IACvB,gBAAgB,EAAE,iBAAiB;CACpC,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAMpE;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAsB;IAC1C,GAAG,IAAI,GAAG,CAAS;QACjB,GAAG,kBAAkB;QACrB,GAAG,cAAc;QACjB,GAAG,uBAAuB;QAC1B,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;KACtC,CAAC;CACH,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,KAAK,eAAe,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,mBAAmB,CAAC;AACpG,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACnC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,CAAC;AAC3E,CAAC"}

package/dist/modules/types.d.ts

@@ -8,17 +8,28 @@ export type ModuleKind = "channel" | "memory" | "sandbox" | "observability" | "p
  * they only emit a `.env.example` placeholder via {@link CapabilityModule.envExampleLines}.
  * (Same shape as the old `RecipeInput`.)
  */
-export interface ModuleInput {
+interface ModuleInputBase {
     readonly id: string;
     readonly label: string;
     readonly description: string;
     /** Default used when the wizard/CLI does not override the input. */
     readonly default?: string;
-    /** Secret inputs are externalized to `.env.example`, never inlined in JSON. */
-    readonly secret?: boolean;
-    /** The `MONO_AGENT_*` env var a secret input maps to (for `.env.example`). */
-    readonly envVar?: string;
 }
+/** A non-secret module input, safe to store in the composed JSON fragment. */
+export interface PublicModuleInput extends ModuleInputBase {
+    readonly secret?: false;
+    /** Return a user-facing validation error, or undefined when the value is valid. */
+    readonly validate?: (value: string | undefined) => string | undefined;
+}
+/** A secret module input, always externalized and never included in config JSON. */
+export interface SecretModuleInput extends ModuleInputBase {
+    readonly secret: true;
+    /** The `MONO_AGENT_*` env var this secret maps to. */
+    readonly envVar: string;
+    /** Whether this capability cannot operate until the value is supplied. */
+    readonly required?: boolean;
+}
+export type ModuleInput = PublicModuleInput | SecretModuleInput;
 /** Resolved input values keyed by {@link ModuleInput.id}. */
 export type ModuleInputValues = Readonly<Record<string, string | undefined>>;
 /** An auxiliary file a module scaffolds beside the config (e.g. a cron job markdown). */
@@ -33,7 +44,7 @@ export interface GeneratedFile {
  * incomplete when a required section is not yet at the promised status.
  */
 export interface ModuleValidateExpectation {
-    /** Doctor section id: `runtime|memory|sandbox|tools|observability|channel:<driver>`. */
+    /** Doctor section id: `runtime|credentials|memory|sandbox|tools|observability|channel:<driver>`. */
     readonly sectionId: string;
     /** The status the section must reach for the module to be considered live. */
     readonly mustBe: ValidationStatus;
@@ -54,6 +65,8 @@ export interface CapabilityModule {
     /** One-line wizard hint. */
     readonly summary: string;
     readonly riskLevel: "low" | "medium" | "high";
+    /** False for optional plugin capabilities that are not installed by the app. */
+    readonly wizardSelectable?: boolean;
     /** The `docs/playbooks/<file>` this module mirrors, parity-checked to exist. */
     readonly playbook?: string;
     readonly inputs: readonly ModuleInput[];
@@ -70,4 +83,5 @@ export interface CapabilityModule {
 }
 /** Resolve declared input defaults, then layer overrides on top. */
 export declare function resolveModuleInputs(module: CapabilityModule, overrides?: ModuleInputValues): ModuleInputValues;
+export {};
 //# sourceMappingURL=types.d.ts.map

package/dist/modules/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/modules/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,GAAG,UAAU,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,6DAA6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE7E,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,wFAAwF;IACxF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/G,iGAAiG;IACjG,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,SAAS,MAAM,EAAE,CAAC;IAC5E,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,SAAS,aAAa,EAAE,CAAC;IACzE,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACrE;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE,iBAAsB,GAChC,iBAAiB,CAYnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/modules/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,GAAG,UAAU,CAAC;AAEzF;;;;;GAKG;AACH,UAAU,eAAe;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,KAAK,MAAM,GAAG,SAAS,CAAC;CACvE;AAED,oFAAoF;AACpF,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,MAAM,WAAW,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;AAEhE,6DAA6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE7E,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,oGAAoG;IACpG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,oEAAoE;IACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4BAA4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/G,iGAAiG;IACjG,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,SAAS,MAAM,EAAE,CAAC;IAC5E,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,yDAAyD;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,SAAS,aAAa,EAAE,CAAC;IACzE,kEAAkE;IAClE,QAAQ,CAAC,oBAAoB,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACrE;AAED,oEAAoE;AACpE,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE,iBAAsB,GAChC,iBAAiB,CAYnB"}

package/dist/modules/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/modules/types.ts"],"names":[],"mappings":"AA8EA,oEAAoE;AACpE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,YAA+B,EAAE;IAEjC,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC;IAC1D,CAAC;IACD,iFAAiF;IACjF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/modules/types.ts"],"names":[],"mappings":"AA8FA,oEAAoE;AACpE,MAAM,UAAU,mBAAmB,CACjC,MAAwB,EACxB,YAA+B,EAAE;IAEjC,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC;IAC1D,CAAC;IACD,iFAAiF;IACjF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/package-version.d.ts

@@ -0,0 +1,3 @@
+/** The installed agent-app version, used for exact lockstep plugin guidance. */
+export declare function agentAppPackageVersion(): string | undefined;
+//# sourceMappingURL=package-version.d.ts.map

package/dist/package-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.d.ts","sourceRoot":"","sources":["../src/package-version.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,wBAAgB,sBAAsB,IAAI,MAAM,GAAG,SAAS,CAS3D"}

package/dist/package-version.js

@@ -0,0 +1,14 @@
+import { createRequire } from "node:module";
+/** The installed agent-app version, used for exact lockstep plugin guidance. */
+export function agentAppPackageVersion() {
+    try {
+        const pkg = createRequire(import.meta.url)("../package.json");
+        return typeof pkg.version === "string" && pkg.version.trim().length > 0
+            ? pkg.version.trim()
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=package-version.js.map

package/dist/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../src/package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,gFAAgF;AAChF,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAmC,CAAC;QAChG,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YACpB,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/pi-auth-store-inspection.d.ts

@@ -0,0 +1,21 @@
+export declare const MAX_PI_AUTH_STORE_BYTES = 1048576;
+export type PiAuthStoreUnsafeReason = "owner-check-unavailable" | "symbolic-link" | "not-regular-file" | "multiple-hard-links" | "oversized" | "foreign-owner" | "not-owner-only" | "changed-during-read" | "malformed-json" | "unreadable";
+export type PiAuthStoreInspection = {
+    readonly status: "ok";
+    readonly auth: Readonly<Record<string, unknown>>;
+} | {
+    readonly status: "missing";
+} | {
+    readonly status: "unsafe";
+    readonly reason: PiAuthStoreUnsafeReason;
+};
+/**
+ * Inspect an existing Pi credential store without following aliases or reading
+ * unbounded input. Credential discovery is deliberately stricter than the
+ * explicit, locked repair flow: discovery accepts only a current-user,
+ * owner-only, single-link regular file. The repair flow may read a
+ * current-user, non-writable 0644 file under its exclusive lock solely so it
+ * can atomically replace that file with a hardened 0600 store.
+ */
+export declare function inspectPiAuthStore(path: string): Promise<PiAuthStoreInspection>;
+//# sourceMappingURL=pi-auth-store-inspection.d.ts.map

package/dist/pi-auth-store-inspection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-auth-store-inspection.d.ts","sourceRoot":"","sources":["../src/pi-auth-store-inspection.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,uBAAuB,UAAY,CAAC;AAEjD,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,eAAe,GACf,kBAAkB,GAClB,qBAAqB,GACrB,WAAW,GACX,eAAe,GACf,gBAAgB,GAChB,qBAAqB,GACrB,gBAAgB,GAChB,YAAY,CAAC;AAEjB,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,GAC3E;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE5E;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA6DrF"}

package/dist/pi-auth-store-inspection.js

@@ -0,0 +1,120 @@
+import { constants as fsConstants } from "node:fs";
+import { lstat, open } from "node:fs/promises";
+export const MAX_PI_AUTH_STORE_BYTES = 1_048_576;
+/**
+ * Inspect an existing Pi credential store without following aliases or reading
+ * unbounded input. Credential discovery is deliberately stricter than the
+ * explicit, locked repair flow: discovery accepts only a current-user,
+ * owner-only, single-link regular file. The repair flow may read a
+ * current-user, non-writable 0644 file under its exclusive lock solely so it
+ * can atomically replace that file with a hardened 0600 store.
+ */
+export async function inspectPiAuthStore(path) {
+    if (typeof process.getuid !== "function") {
+        return { status: "unsafe", reason: "owner-check-unavailable" };
+    }
+    let handle;
+    try {
+        try {
+            handle = await open(path, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK);
+        }
+        catch (error) {
+            if (hasErrorCode(error, "ENOENT"))
+                return { status: "missing" };
+            if (hasErrorCode(error, "ELOOP") || hasErrorCode(error, "EMLINK")) {
+                return { status: "unsafe", reason: "symbolic-link" };
+            }
+            return { status: "unsafe", reason: "unreadable" };
+        }
+        const before = await handle.stat();
+        const unsafeBefore = unsafeStatReason(before, process.getuid());
+        if (unsafeBefore !== undefined)
+            return { status: "unsafe", reason: unsafeBefore };
+        const contents = await readBounded(handle, MAX_PI_AUTH_STORE_BYTES);
+        if (contents === undefined)
+            return { status: "unsafe", reason: "oversized" };
+        const after = await handle.stat();
+        const unsafeAfter = unsafeStatReason(after, process.getuid());
+        if (unsafeAfter !== undefined)
+            return { status: "unsafe", reason: unsafeAfter };
+        if (!sameOpenedFileSnapshot(before, after) || contents.byteLength !== after.size) {
+            return { status: "unsafe", reason: "changed-during-read" };
+        }
+        let pathStat;
+        try {
+            pathStat = await lstat(path);
+        }
+        catch {
+            return { status: "unsafe", reason: "changed-during-read" };
+        }
+        const unsafePath = unsafeStatReason(pathStat, process.getuid());
+        if (unsafePath !== undefined)
+            return { status: "unsafe", reason: unsafePath };
+        if (pathStat.dev !== after.dev || pathStat.ino !== after.ino) {
+            return { status: "unsafe", reason: "changed-during-read" };
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(contents.toString("utf8"));
+        }
+        catch {
+            return { status: "unsafe", reason: "malformed-json" };
+        }
+        if (!isRecord(parsed))
+            return { status: "unsafe", reason: "malformed-json" };
+        return { status: "ok", auth: parsed };
+    }
+    catch {
+        return { status: "unsafe", reason: "unreadable" };
+    }
+    finally {
+        try {
+            await handle?.close();
+        }
+        catch {
+            // Inspection is read-only and already fails closed; a close failure must
+            // not turn an unsafe credential store into an uncaught validation error.
+        }
+    }
+}
+function unsafeStatReason(value, ownerUid) {
+    if (!value.isFile())
+        return "not-regular-file";
+    if (value.nlink !== 1)
+        return "multiple-hard-links";
+    if (value.size > MAX_PI_AUTH_STORE_BYTES)
+        return "oversized";
+    if (value.uid !== ownerUid)
+        return "foreign-owner";
+    if ((value.mode & 0o077) !== 0)
+        return "not-owner-only";
+    return undefined;
+}
+async function readBounded(handle, maxBytes) {
+    const output = Buffer.allocUnsafe(maxBytes + 1);
+    let offset = 0;
+    while (offset < output.byteLength) {
+        const { bytesRead } = await handle.read(output, offset, output.byteLength - offset, null);
+        if (bytesRead === 0)
+            return output.subarray(0, offset);
+        offset += bytesRead;
+    }
+    return undefined;
+}
+function sameOpenedFileSnapshot(left, right) {
+    return left.dev === right.dev
+        && left.ino === right.ino
+        && left.uid === right.uid
+        && left.nlink === right.nlink
+        && left.mode === right.mode
+        && left.size === right.size
+        && left.mtimeMs === right.mtimeMs
+        && left.ctimeMs === right.ctimeMs;
+}
+function hasErrorCode(error, code) {
+    return typeof error === "object" && error !== null && "code" in error && error.code === code;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=pi-auth-store-inspection.js.map

package/dist/pi-auth-store-inspection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-auth-store-inspection.js","sourceRoot":"","sources":["../src/pi-auth-store-inspection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAc,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAmB,MAAM,kBAAkB,CAAC;AAEhE,MAAM,CAAC,MAAM,uBAAuB,GAAG,SAAS,CAAC;AAmBjD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IACjE,CAAC;IAED,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAChE,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAClE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;YACvD,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAElF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;QACpE,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,IAAI,WAAW,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QAChF,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,QAAe,CAAC;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;QACD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9E,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC7E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,yEAAyE;QAC3E,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAY,EAAE,QAAgB;IACtD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpD,IAAI,KAAK,CAAC,IAAI,GAAG,uBAAuB;QAAE,OAAO,WAAW,CAAC;IAC7D,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACxD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,QAAgB;IAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,SAAS,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,SAAS,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAW,EAAE,KAAY;IACvD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACxB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACtB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;WACtB,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;WAC1B,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;WACxB,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;WACxB,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;WAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;AACtC,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;AAC/F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/pi-oauth-login-main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=pi-oauth-login-main.d.ts.map

package/dist/pi-oauth-login-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pi-oauth-login-main.d.ts","sourceRoot":"","sources":["../src/pi-oauth-login-main.ts"],"names":[],"mappings":""}