@raidiant/notifai 11.7.1 → 12.0.0-beta.13

package/dist/config.d.ts

@@ -1,181 +0,0 @@
-import { INTERRUPTION_LEVELS } from '@raidiant/notifai-protocol';
-/**
- * Layered configuration with provenance. Most specific wins:
- *
- *   flag > session > project-local > project > machine-global > default
- *
- * `session` holds what the user told the agent in conversation ("stop
- * notifying me for now"). It lives on disk keyed by harness session id rather
- * than in the agent's context, because context is lost to compaction and a
- * preference that evaporates mid-session is worse than none.
- *
- * `project-local` is a personal file under the user's config directory, keyed
- * by the Project root so a checkout does not have to gitignore anything. Shared
- * `.notifai/config.toml` stays in the tree for committed Project identity.
- *
- * `config show --explain` surfaces the winning layer per key.
- */
-export type ConfigSource = 'flag' | 'env' | `session:${string}` | `project-local:${string}` | `project:${string}` | `global:${string}` | 'default';
-export interface ResolvedValue<T> {
-    value: T;
-    source: ConfigSource;
-}
-type CliInterruptionLevel = (typeof INTERRUPTION_LEVELS)[number];
-/**
- * How much the local log records. Defined here rather than in `logging.ts`
- * because it is a configuration vocabulary first — `logging.ts` reads config,
- * so the dependency has to point this way.
- */
-export declare const LOG_LEVELS: readonly ["off", "error", "info", "debug"];
-export type LogLevel = (typeof LOG_LEVELS)[number];
-export interface CliConfig {
-    base_url: ResolvedValue<string>;
-    wait_seconds: ResolvedValue<number>;
-    ttl_seconds: ResolvedValue<number>;
-    collapse_key: ResolvedValue<string | null>;
-    devices: ResolvedValue<string[] | null>;
-    sound: ResolvedValue<string | null>;
-    interruption_level: ResolvedValue<CliInterruptionLevel | null>;
-    /** Project identifier stamped on sends; inferred unless explicitly shared in .notifai/config.toml. */
-    project: ResolvedValue<string | null>;
-    /** Whether a registered agent question may reach companion devices at all. */
-    ask_notifications: ResolvedValue<boolean>;
-    /**
-     * Terminal-first grace window, measured from the moment the question was
-     * sent: the agent asks in the terminal and starts a timer, and only once it
-     * elapses does the question reach companion devices.
-     *
-     * A timer, and only a timer. Whether the user happens to be at this keyboard
-     * decides nothing; the harness-specific owner continues waiting either in
-     * the held turn or out of band.
-     */
-    ask_grace_seconds: ResolvedValue<number>;
-    /**
-     * How much of what this CLI does is recorded to the local log.
-     *
-     * The log exists for agents: a hook runs headless and its most consequential
-     * act is usually a decision to do nothing, which leaves no other trace. `off`
-     * disables the sink entirely; `debug` adds config resolution and request
-     * detail, which is verbose enough to want a reason.
-     */
-    log_level: ResolvedValue<LogLevel>;
-    /**
-     * Bytes the active log file may reach before it is rotated. With
-     * `log_max_files` this is the whole disk budget — nothing here grows without
-     * a ceiling, because a log that fills a disk is a bug that outlives its
-     * usefulness.
-     */
-    log_max_bytes: ResolvedValue<number>;
-    /** How long the server accepts an answer and Question Routing owns its return path. */
-    reply_window_seconds: ResolvedValue<number>;
-    /** Log files kept in total, the active one included. */
-    log_max_files: ResolvedValue<number>;
-    /**
-     * Extra origins remote `--image` URLs may use beyond the default public
-     * HTTPS policy — the self-host and intranet escape hatch. User-owned: the
-     * repository layer cannot supply it (see `USER_OWNED_CONFIG_KEYS`).
-     */
-    media_origins: ResolvedValue<string[]>;
-    /**
-     * Extra dashboard origins a pairing approval URL may open, for self-hosts
-     * whose dashboard lives on a different origin than the API. User-owned.
-     */
-    approve_origins: ResolvedValue<string[]>;
-}
-export declare const CONFIG_KEYS: readonly ["wait_seconds", "ttl_seconds", "collapse_key", "devices", "sound", "interruption_level", "project", "ask_notifications", "ask_grace_seconds", "reply_window_seconds", "log_level", "log_max_bytes", "log_max_files", "media_origins", "approve_origins"];
-export type ConfigKey = (typeof CONFIG_KEYS)[number];
-/**
- * Keys only the User may set. The shared `.notifai/config.toml` arrives with
- * a clone, so for most keys an unwanted value is at worst a clamped nuisance —
- * but these keys widen which network destinations this machine will touch,
- * and a hostile repository must not be able to widen them. Resolution skips
- * the repository layer for them entirely.
- */
-export declare const USER_OWNED_CONFIG_KEYS: readonly ConfigKey[];
-/** Keys whose TOML value must be a list of normalized http(s) origins. */
-export declare const ORIGIN_LIST_CONFIG_KEYS: readonly ConfigKey[];
-/** Keys whose TOML value must parse as a boolean; used by `config set`. */
-export declare const BOOLEAN_CONFIG_KEYS: readonly ConfigKey[];
-/** Keys whose TOML value must parse as an integer within its configured bounds. */
-export declare const NUMERIC_CONFIG_KEYS: readonly ConfigKey[];
-/**
- * Keys whose value must be one of a fixed set.
- *
- * Config is readable from a repository, so an unrecognised value is untrusted
- * input rather than a typo — `coerce` drops it and the layer below wins, which
- * is the same discipline the numeric bounds follow.
- */
-export declare const ENUM_CONFIG_VALUES: Partial<Record<ConfigKey, readonly string[]>>;
-/** Compiled service origin. Not a user-facing setting; login may override with `--base-url` or `NOTIFAI_BASE_URL`. */
-export declare const DEFAULT_BASE_URL = "https://api.notifai.sh";
-/** The shipped value beneath every user-controlled configuration layer. */
-export declare function configDefaultValue(key: ConfigKey): unknown;
-export declare function globalConfigDir(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
-export declare function globalConfigPath(env?: NodeJS.ProcessEnv): string;
-/**
- * Machine-local mutable state: presence markers, pending questions, frozen
- * session names, and session config overrides. Separate from the config dir
- * because none of it should ever be synced or committed.
- */
-export declare function stateDir(env?: NodeJS.ProcessEnv, platform?: NodeJS.Platform): string;
-/** Per-harness-session override file; see the ConfigSource doc comment. */
-export declare function sessionConfigPath(sessionId: string, env?: NodeJS.ProcessEnv): string;
-/**
- * Session ids come from harness JSON, so they reach the filesystem from
- * outside. Hash rather than merely sanitising: replacing unsafe characters
- * collapsed distinct ids onto one file — `a/b` and `a?b` both became `a_b`, and
- * two sessions would then share presence, pending questions and overrides.
- * A readable prefix is kept only so the directory is debuggable.
- */
-export declare function sanitizeSessionId(sessionId: string): string;
-/**
- * Pointer from a Project directory to the Agent Session currently working in
- * it, written by the UserPromptSubmit hook. Without it `notifai ask` has no way
- * to learn its own Agent Session id: an ordinary agent shell command receives no hook
- * payload, and no harness exports one into the environment.
- */
-export declare function projectSessionPointerPath(cwd: string, env?: NodeJS.ProcessEnv): string;
-/** Git-owned anchor shared by every linked worktree of one local checkout. */
-export declare function gitCommonDirectory(cwd: string): string | null;
-export declare function findProjectConfigPath(startDir: string): string | null;
-/** Explicit shared configuration is authored in this checkout and merged through Git. */
-export declare function sharedProjectConfigPath(cwd: string): string;
-/**
- * The directory one Project is identified by, from anywhere inside it.
- *
- * Prefer the directory that owns the shared `.notifai/config.toml`, then the
- * git checkout root, then cwd. Subdirectories of one project therefore resolve
- * to one root, and nothing is written inside the repository.
- *
- * Everything keyed per Project — personal preferences, Project Enablement —
- * uses this one answer, so enabling a Project from its root and running a hook
- * from a nested directory cannot disagree about which Project they are in.
- */
-export declare function projectIdentityRoot(cwd: string): string;
-/** Stable identity for personal project preferences. */
-export declare function personalProjectIdentity(cwd: string): string;
-/** Personal project layer: `$XDG_CONFIG_HOME/notifai/projects/<identity>.toml`. */
-export declare function personalProjectConfigPath(cwd: string, env?: NodeJS.ProcessEnv): string;
-/** Existing personal project file, or null when this checkout has none. */
-export declare function findProjectLocalConfigPath(startDir: string, env?: NodeJS.ProcessEnv): string | null;
-export declare function configBounds(key: ConfigKey): {
-    min: number;
-    max: number;
-} | undefined;
-export interface FlagOverrides {
-    base_url?: string;
-    wait_seconds?: number;
-    ttl_seconds?: number;
-    collapse_key?: string | null;
-    devices?: string[];
-    sound?: string;
-    interruption_level?: CliInterruptionLevel;
-}
-export declare function loadConfig(options: {
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-    flags?: FlagOverrides;
-    /** Agent Session id; enables the Agent Session override layer when present. */
-    sessionId?: string | undefined;
-}): CliConfig;
-export {};

package/dist/config.js

@@ -1,357 +0,0 @@
-import { INTERRUPTION_LEVELS, REPLY_MAX_WINDOW_SECONDS, } from '@raidiant/notifai-protocol';
-import { execFileSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { existsSync, readFileSync } from 'node:fs';
-import path from 'node:path';
-import { canonicalPath } from './local-path.js';
-import { parse as parseToml } from 'smol-toml';
-import { configHome, stateHome } from './platform.js';
-import { isCliSoundRef } from './sound-ref.js';
-import { normalizeOrigin } from './url-policy.js';
-/**
- * How much the local log records. Defined here rather than in `logging.ts`
- * because it is a configuration vocabulary first — `logging.ts` reads config,
- * so the dependency has to point this way.
- */
-export const LOG_LEVELS = ['off', 'error', 'info', 'debug'];
-export const CONFIG_KEYS = [
-    'wait_seconds',
-    'ttl_seconds',
-    'collapse_key',
-    'devices',
-    'sound',
-    'interruption_level',
-    'project',
-    'ask_notifications',
-    'ask_grace_seconds',
-    'reply_window_seconds',
-    'log_level',
-    'log_max_bytes',
-    'log_max_files',
-    'media_origins',
-    'approve_origins',
-];
-/**
- * Keys only the User may set. The shared `.notifai/config.toml` arrives with
- * a clone, so for most keys an unwanted value is at worst a clamped nuisance —
- * but these keys widen which network destinations this machine will touch,
- * and a hostile repository must not be able to widen them. Resolution skips
- * the repository layer for them entirely.
- */
-export const USER_OWNED_CONFIG_KEYS = ['media_origins', 'approve_origins'];
-/** Keys whose TOML value must be a list of normalized http(s) origins. */
-export const ORIGIN_LIST_CONFIG_KEYS = ['media_origins', 'approve_origins'];
-/** Keys whose TOML value must parse as a boolean; used by `config set`. */
-export const BOOLEAN_CONFIG_KEYS = ['ask_notifications'];
-/** Keys whose TOML value must parse as an integer within its configured bounds. */
-export const NUMERIC_CONFIG_KEYS = [
-    'wait_seconds',
-    'ttl_seconds',
-    'ask_grace_seconds',
-    'reply_window_seconds',
-    'log_max_bytes',
-    'log_max_files',
-];
-/**
- * Keys whose value must be one of a fixed set.
- *
- * Config is readable from a repository, so an unrecognised value is untrusted
- * input rather than a typo — `coerce` drops it and the layer below wins, which
- * is the same discipline the numeric bounds follow.
- */
-export const ENUM_CONFIG_VALUES = {
-    interruption_level: INTERRUPTION_LEVELS,
-    log_level: LOG_LEVELS,
-};
-/** Compiled service origin. Not a user-facing setting; login may override with `--base-url` or `NOTIFAI_BASE_URL`. */
-export const DEFAULT_BASE_URL = 'https://api.notifai.sh';
-const DEFAULTS = {
-    wait_seconds: 10,
-    ttl_seconds: 86400,
-    collapse_key: null,
-    devices: null,
-    sound: null,
-    interruption_level: null,
-    project: null,
-    // Installing the hooks is the opt-in; these exist to switch the behaviour
-    // back off for a project or a session without uninstalling anything.
-    ask_notifications: true,
-    // Questions reach devices as soon as the turn ends. A terminal-first grace
-    // window is an opt-in delay on top of that.
-    ask_grace_seconds: 0,
-    // A day. The wire contract's own default, and long enough that a question
-    // asked before someone steps away is still answerable when they come back.
-    reply_window_seconds: 86_400,
-    // On by default: the log is the only account of what a headless hook did, and
-    // a diagnostic nobody switched on before the thing went wrong is not one.
-    log_level: 'info',
-    // 2 MB × 3 files caps the logs at roughly 6 MB, which is weeks of ordinary
-    // agent traffic and small enough that nobody has to think about it.
-    log_max_bytes: 2_000_000,
-    log_max_files: 3,
-    // Empty by default: remote images use public HTTPS and pairing approval
-    // uses the canonical dashboard, the pairing origin, or loopback. Entries
-    // here are the User widening that, never a repository.
-    media_origins: [],
-    approve_origins: [],
-};
-/** The shipped value beneath every user-controlled configuration layer. */
-export function configDefaultValue(key) {
-    return DEFAULTS[key];
-}
-export function globalConfigDir(env = process.env, platform = process.platform) {
-    return path.join(configHome(env, platform), 'notifai');
-}
-export function globalConfigPath(env = process.env) {
-    return path.join(globalConfigDir(env), 'config.toml');
-}
-/**
- * Machine-local mutable state: presence markers, pending questions, frozen
- * session names, and session config overrides. Separate from the config dir
- * because none of it should ever be synced or committed.
- */
-export function stateDir(env = process.env, platform = process.platform) {
-    return path.join(stateHome(env, platform), 'notifai');
-}
-/** Per-harness-session override file; see the ConfigSource doc comment. */
-export function sessionConfigPath(sessionId, env = process.env) {
-    return path.join(stateDir(env), 'sessions', `${sanitizeSessionId(sessionId)}.config.toml`);
-}
-/**
- * Session ids come from harness JSON, so they reach the filesystem from
- * outside. Hash rather than merely sanitising: replacing unsafe characters
- * collapsed distinct ids onto one file — `a/b` and `a?b` both became `a_b`, and
- * two sessions would then share presence, pending questions and overrides.
- * A readable prefix is kept only so the directory is debuggable.
- */
-export function sanitizeSessionId(sessionId) {
-    const digest = createHash('sha256').update(sessionId).digest('hex').slice(0, 16);
-    const readable = sessionId.replace(/[^A-Za-z0-9_-]/g, '_').slice(0, 32);
-    return readable === '' ? digest : `${readable}-${digest}`;
-}
-/**
- * Pointer from a Project directory to the Agent Session currently working in
- * it, written by the UserPromptSubmit hook. Without it `notifai ask` has no way
- * to learn its own Agent Session id: an ordinary agent shell command receives no hook
- * payload, and no harness exports one into the environment.
- */
-export function projectSessionPointerPath(cwd, env = process.env) {
-    const digest = createHash('sha256').update(canonicalDir(cwd)).digest('hex').slice(0, 32);
-    return path.join(stateDir(env), 'projects', `${digest}.json`);
-}
-/**
- * Resolve symlinks before hashing. The harness reports `cwd` as it knows it
- * while a shell reports `process.cwd()` already resolved — on macOS `/tmp` and
- * `/private/tmp` are the same directory, so hashing the unresolved paths gave
- * two different keys and `notifai ask` could never find the pointer the hook
- * had just written.
- */
-function canonicalDir(dir) {
-    return canonicalPath(path.resolve(dir));
-}
-/** Git-owned anchor shared by every linked worktree of one local checkout. */
-export function gitCommonDirectory(cwd) {
-    try {
-        const raw = execFileSync('git', ['-C', cwd, 'rev-parse', '--git-common-dir'], {
-            encoding: 'utf8',
-            stdio: ['ignore', 'pipe', 'ignore'],
-            timeout: 2_000,
-            windowsHide: true,
-        }).trim();
-        if (raw === '')
-            return null;
-        return canonicalDir(path.isAbsolute(raw) ? raw : path.resolve(cwd, raw));
-    }
-    catch {
-        return null;
-    }
-}
-/** Walk up from cwd looking for .notifai/<name> (Project Override). */
-function findProjectFile(startDir, name) {
-    let dir = path.resolve(startDir);
-    for (;;) {
-        const candidate = path.join(dir, '.notifai', name);
-        if (existsSync(candidate))
-            return candidate;
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return null;
-        dir = parent;
-    }
-}
-export function findProjectConfigPath(startDir) {
-    return findProjectFile(startDir, 'config.toml');
-}
-/** Walk up from cwd looking for a `.git` file or directory (worktree or checkout). */
-function findGitRoot(startDir) {
-    let dir = path.resolve(startDir);
-    for (;;) {
-        if (existsSync(path.join(dir, '.git')))
-            return canonicalDir(dir);
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return null;
-        dir = parent;
-    }
-}
-/** Explicit shared configuration is authored in this checkout and merged through Git. */
-export function sharedProjectConfigPath(cwd) {
-    return findProjectConfigPath(cwd) ?? path.join(findGitRoot(cwd) ?? canonicalDir(cwd), '.notifai', 'config.toml');
-}
-/**
- * The directory one Project is identified by, from anywhere inside it.
- *
- * Prefer the directory that owns the shared `.notifai/config.toml`, then the
- * git checkout root, then cwd. Subdirectories of one project therefore resolve
- * to one root, and nothing is written inside the repository.
- *
- * Everything keyed per Project — personal preferences, Project Enablement —
- * uses this one answer, so enabling a Project from its root and running a hook
- * from a nested directory cannot disagree about which Project they are in.
- */
-export function projectIdentityRoot(cwd) {
-    const projectConfig = findProjectConfigPath(cwd);
-    return canonicalDir(projectConfig !== null ? path.dirname(path.dirname(projectConfig)) : (findGitRoot(cwd) ?? cwd));
-}
-/** Stable identity for personal project preferences. */
-export function personalProjectIdentity(cwd) {
-    const anchor = gitCommonDirectory(cwd) ?? projectIdentityRoot(cwd);
-    return createHash('sha256').update(anchor).digest('hex').slice(0, 32);
-}
-/** Personal project layer: `$XDG_CONFIG_HOME/notifai/projects/<identity>.toml`. */
-export function personalProjectConfigPath(cwd, env = process.env) {
-    return path.join(globalConfigDir(env), 'projects', `${personalProjectIdentity(cwd)}.toml`);
-}
-/** Existing personal project file, or null when this checkout has none. */
-export function findProjectLocalConfigPath(startDir, env = process.env) {
-    const file = personalProjectConfigPath(startDir, env);
-    return existsSync(file) ? file : null;
-}
-/**
- * Ranges every layer is clamped to. Config is readable from a repository, so an
- * out-of-range value is attacker input, not a typo.
- */
-const NUMERIC_BOUNDS = {
-    wait_seconds: { min: 0, max: 300 },
-    ttl_seconds: { min: 0, max: 7 * 24 * 3600 },
-    // Six minutes is the supported terminal-first preference bound. The Stop
-    // owner carries separate startup headroom, so this never shortens the answer
-    // window that begins after submission.
-    ask_grace_seconds: { min: 0, max: 360 },
-    // The floor is the shortest window the wire contract accepts; the ceiling is
-    // the point past which a question would outlive the retained content it
-    // refers to.
-    reply_window_seconds: { min: 60, max: REPLY_MAX_WINDOW_SECONDS },
-    // The floor keeps rotation from thrashing (a file smaller than a handful of
-    // records would rotate on nearly every write); the ceiling is the point past
-    // which "local diagnostics" has become "a database on your disk".
-    log_max_bytes: { min: 64_000, max: 100_000_000 },
-    log_max_files: { min: 1, max: 20 },
-};
-/** Drops values a layer must not be trusted to supply, rather than throwing. */
-function coerce(key, value) {
-    const bounds = NUMERIC_BOUNDS[key];
-    if (bounds !== undefined) {
-        if (typeof value !== 'number' || !Number.isFinite(value))
-            return undefined;
-        return Math.min(bounds.max, Math.max(bounds.min, Math.trunc(value)));
-    }
-    if (BOOLEAN_CONFIG_KEYS.includes(key))
-        return typeof value === 'boolean' ? value : undefined;
-    if (ORIGIN_LIST_CONFIG_KEYS.includes(key)) {
-        // A trust rule is all-or-nothing: one malformed entry drops the whole
-        // value rather than silently enforcing a subset of what was written.
-        if (!Array.isArray(value))
-            return undefined;
-        const origins = value.map((entry) => (typeof entry === 'string' ? normalizeOrigin(entry) : null));
-        return origins.every((origin) => origin !== null) ? origins : undefined;
-    }
-    if (key === 'sound') {
-        return typeof value === 'string' && isCliSoundRef(value) ? value : undefined;
-    }
-    const allowed = ENUM_CONFIG_VALUES[key];
-    if (allowed !== undefined) {
-        return typeof value === 'string' && allowed.includes(value) ? value : undefined;
-    }
-    return value;
-}
-export function configBounds(key) {
-    return NUMERIC_BOUNDS[key];
-}
-function readTomlFile(filePath) {
-    try {
-        return parseToml(readFileSync(filePath, 'utf8'));
-    }
-    catch (err) {
-        throw new Error(`Could not parse ${filePath}: ${String(err)}`);
-    }
-}
-/**
- * Service origin is not a user setting. Flag and env are pairing/self-host
- * overrides for unsigned-in traffic (login). Signed-in traffic always uses
- * the origin stored with the Machine Credential.
- */
-function resolveServiceUrl(flags, env) {
-    if (typeof flags.base_url === 'string' && flags.base_url !== '') {
-        return { value: flags.base_url, source: 'flag' };
-    }
-    const fromEnv = env['NOTIFAI_BASE_URL'];
-    if (typeof fromEnv === 'string' && fromEnv !== '') {
-        return { value: fromEnv, source: 'env' };
-    }
-    return { value: DEFAULT_BASE_URL, source: 'default' };
-}
-export function loadConfig(options) {
-    const env = options.env ?? process.env;
-    const flags = options.flags ?? {};
-    const globalPath = globalConfigPath(env);
-    const globalRaw = existsSync(globalPath) ? readTomlFile(globalPath) : {};
-    const cwd = options.cwd ?? process.cwd();
-    const projectPath = findProjectConfigPath(cwd);
-    const projectRaw = projectPath ? readTomlFile(projectPath) : {};
-    const projectLocalPath = findProjectLocalConfigPath(cwd, env);
-    const projectLocalRaw = projectLocalPath ? readTomlFile(projectLocalPath) : {};
-    const sessionId = options.sessionId ?? env['NOTIFAI_SESSION_ID'];
-    const sessionPath = sessionId ? sessionConfigPath(sessionId, env) : null;
-    const sessionRaw = sessionPath && existsSync(sessionPath) ? readTomlFile(sessionPath) : {};
-    function resolve(key) {
-        // The shared project file arrives with a clone, so keys that widen
-        // network trust never read from it — whatever a repository writes there.
-        const repositoryLayerReadable = !USER_OWNED_CONFIG_KEYS.includes(key);
-        const layers = [
-            [flags[key], 'flag'],
-            [sessionPath ? sessionRaw[key] : undefined, `session:${sessionPath ?? ''}`],
-            [projectLocalPath ? projectLocalRaw[key] : undefined, `project-local:${projectLocalPath ?? ''}`],
-            [projectPath && repositoryLayerReadable ? projectRaw[key] : undefined, `project:${projectPath ?? ''}`],
-            [globalRaw[key], `global:${globalPath}`],
-        ];
-        for (const [raw, source] of layers) {
-            if (raw === undefined)
-                continue;
-            const coerced = coerce(key, raw);
-            if (coerced === undefined)
-                continue;
-            return { value: coerced, source };
-        }
-        return { value: DEFAULTS[key], source: 'default' };
-    }
-    return {
-        base_url: resolveServiceUrl(flags, env),
-        wait_seconds: resolve('wait_seconds'),
-        ttl_seconds: resolve('ttl_seconds'),
-        collapse_key: resolve('collapse_key'),
-        devices: resolve('devices'),
-        sound: resolve('sound'),
-        interruption_level: resolve('interruption_level'),
-        project: resolve('project'),
-        ask_notifications: resolve('ask_notifications'),
-        ask_grace_seconds: resolve('ask_grace_seconds'),
-        reply_window_seconds: resolve('reply_window_seconds'),
-        log_level: resolve('log_level'),
-        log_max_bytes: resolve('log_max_bytes'),
-        log_max_files: resolve('log_max_files'),
-        media_origins: resolve('media_origins'),
-        approve_origins: resolve('approve_origins'),
-    };
-}
-//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AAClD,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAmCjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAU,CAAA;AA0DpE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,cAAc;IACd,aAAa;IACb,cAAc;IACd,SAAS;IACT,OAAO;IACP,oBAAoB;IACpB,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,WAAW;IACX,eAAe;IACf,eAAe;IACf,eAAe;IACf,iBAAiB;CACT,CAAA;AAGV;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAyB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;AAEhG,0EAA0E;AAC1E,MAAM,CAAC,MAAM,uBAAuB,GAAyB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;AAEjG,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAyB,CAAC,mBAAmB,CAAC,CAAA;AAE9E,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACvD,cAAc;IACd,aAAa;IACb,mBAAmB;IACnB,sBAAsB;IACtB,eAAe;IACf,eAAe;CAChB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkD;IAC/E,kBAAkB,EAAE,mBAAmB;IACvC,SAAS,EAAE,UAAU;CACtB,CAAA;AAED,sHAAsH;AACtH,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAA;AAExD,MAAM,QAAQ,GAAG;IACf,YAAY,EAAE,EAAE;IAChB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,IAAI;IAClB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,kBAAkB,EAAE,IAAI;IACxB,OAAO,EAAE,IAAI;IACb,0EAA0E;IAC1E,qEAAqE;IACrE,iBAAiB,EAAE,IAAI;IACvB,2EAA2E;IAC3E,4CAA4C;IAC5C,iBAAiB,EAAE,CAAC;IACpB,0EAA0E;IAC1E,2EAA2E;IAC3E,oBAAoB,EAAE,MAAM;IAC5B,8EAA8E;IAC9E,0EAA0E;IAC1E,SAAS,EAAE,MAAM;IACjB,2EAA2E;IAC3E,oEAAoE;IACpE,aAAa,EAAE,SAAS;IACxB,aAAa,EAAE,CAAC;IAChB,wEAAwE;IACxE,yEAAyE;IACzE,uDAAuD;IACvD,aAAa,EAAE,EAAE;IACjB,eAAe,EAAE,EAAE;CACiB,CAAA;AAEtC,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,GAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,MAAyB,OAAO,CAAC,GAAG,EACpC,WAA4B,OAAO,CAAC,QAAQ;IAE5C,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAA;AACvD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACvF,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChF,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACvE,OAAO,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IACzF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxF,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,CAAC,EAAE;YAC5E,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC,IAAI,EAAE,CAAA;QACT,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA;QAC3B,OAAO,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAY;IACrD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QAClD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC/B,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;AACjD,CAAC;AAED,sFAAsF;AACtF,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAChC,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA;QAC/B,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,OAAO,qBAAqB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;AAClH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,aAAa,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAChD,OAAO,YAAY,CACjB,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAC/F,CAAA;AACH,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,yBAAyB,CACvC,GAAW,EACX,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAC5F,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACrD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,cAAc,GAA6D;IAC/E,YAAY,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;IAClC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE;IAC3C,yEAAyE;IACzE,6EAA6E;IAC7E,uCAAuC;IACvC,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;IACvC,6EAA6E;IAC7E,wEAAwE;IACxE,aAAa;IACb,oBAAoB,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE;IAChE,4EAA4E;IAC5E,6EAA6E;IAC7E,kEAAkE;IAClE,aAAa,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE;IAChD,aAAa,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;CACnC,CAAA;AAED,gFAAgF;AAChF,SAAS,MAAM,CAAC,GAAc,EAAE,KAAc;IAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1E,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC5F,IAAI,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,sEAAsE;QACtE,qEAAqE;QACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACjG,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAoB,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,CAAC;IACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACjF,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAc;IACzC,OAAO,cAAc,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA4B,CAAA;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAChE,CAAC;AACH,CAAC;AAYD;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,KAAoB,EACpB,GAAsB;IAEtB,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAA;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAM1B;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;IACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACxC,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAC9C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC/D,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC7D,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAA;IAChE,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACxE,MAAM,UAAU,GAAG,WAAW,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAE1F,SAAS,OAAO,CAAsB,GAAM;QAC1C,mEAAmE;QACnE,yEAAyE;QACzE,MAAM,uBAAuB,GAAG,CAAC,sBAAsB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACrE,MAAM,MAAM,GAA8B;YACxC,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;YACjD,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,WAAW,IAAI,EAAE,EAAE,CAAC;YAC3E,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,iBAAiB,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAChG,CAAC,WAAW,IAAI,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,WAAW,IAAI,EAAE,EAAE,CAAC;YACtG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,UAAU,UAAU,EAAE,CAAC;SACzC,CAAA;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACnC,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAQ;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAChC,IAAI,OAAO,KAAK,SAAS;gBAAE,SAAQ;YACnC,OAAO,EAAE,KAAK,EAAE,OAAgB,EAAE,MAAM,EAAE,CAAA;QAC5C,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IAC7D,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC;QACvC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;QACrC,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC;QACnC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;QAC3B,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC;QACvB,kBAAkB,EAAE,OAAO,CAAC,oBAAoB,CAAC;QACjD,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;QAC3B,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC;QAC/C,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC;QAC/C,oBAAoB,EAAE,OAAO,CAAC,sBAAsB,CAAC;QACrD,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC;QAC/B,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC;QACvC,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC;QACvC,aAAa,EAAE,OAAO,CAAC,eAAe,CAAC;QACvC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC;KAC5C,CAAA;AACH,CAAC"}

package/dist/credentials.d.ts

@@ -1,96 +0,0 @@
-export interface MachineCredential {
-    machineId: string;
-    secret: string;
-    baseUrl: string;
-    machineName: string;
-}
-/** Non-secret ownership metadata for a frozen authenticated operation. */
-export interface ServiceIdentity {
-    base_url: string;
-    machine_id: string;
-}
-export interface CredentialStore {
-    load(): MachineCredential | null;
-    save(credential: MachineCredential): void;
-    clear(): void;
-    /** Where the secret lives, for `doctor` and docs. */
-    describe(): string;
-}
-export interface RunCommandSpec {
-    command: string;
-    args: readonly string[];
-    input: Buffer;
-    timeoutMs?: number;
-}
-export interface RunCommandResult {
-    status: number;
-    stdout: Buffer;
-}
-/** Injected process seam. Production uses `defaultProcessRunner`. */
-export interface ProcessRunner {
-    run(spec: RunCommandSpec): RunCommandResult;
-}
-export interface CredentialStoreOptions {
-    env?: NodeJS.ProcessEnv;
-    platform?: NodeJS.Platform;
-    run?: ProcessRunner;
-    keychainAvailable?: boolean;
-}
-/** Which DPAPI operation a process invocation asked for. Args never carry secrets. */
-export declare function windowsDpapiOperation(args: readonly string[]): 'protect' | 'unprotect' | null;
-export declare const defaultProcessRunner: ProcessRunner;
-/**
- * macOS Keychain via the first-party `security` Security.framework client.
- *
- * `security add-generic-password -w <value>` puts the value in process argv.
- * Interactive mode instead parses a command from stdin, so the credential
- * crosses the helper boundary only through the pipe. `-X` keeps arbitrary
- * serialized bytes out of the command parser's quoting rules.
- */
-export declare class KeychainStore implements CredentialStore {
-    private readonly run;
-    constructor(options?: CredentialStoreOptions);
-    load(): MachineCredential | null;
-    save(credential: MachineCredential): void;
-    clear(): void;
-    describe(): string;
-}
-/**
- * Explicit plaintext file store.
- *
- * Default on Linux, where mode 0600 is a real ACL. Also the
- * `NOTIFAI_CREDENTIALS=file` development and test escape hatch on every
- * platform. POSIX mode bits are not an NTFS ACL, so this is not a protected
- * Windows store.
- */
-export declare class FileStore implements CredentialStore {
-    private readonly env;
-    private readonly platform;
-    constructor(env?: NodeJS.ProcessEnv, options?: CredentialStoreOptions);
-    private filePath;
-    load(): MachineCredential | null;
-    save(credential: MachineCredential): void;
-    clear(): void;
-    describe(): string;
-}
-/**
- * Windows default: DPAPI CurrentUser via first-party PowerShell.
- *
- * The protected blob lives under LOCALAPPDATA, never roaming APPDATA.
- * Plaintext crosses the process boundary only on stdin/stdout — never as a
- * command-line argument.
- */
-export declare class WindowsDpapiStore implements CredentialStore {
-    private readonly env;
-    private readonly run;
-    constructor(env?: NodeJS.ProcessEnv, options?: CredentialStoreOptions);
-    private filePath;
-    load(): MachineCredential | null;
-    save(credential: MachineCredential): void;
-    clear(): void;
-    describe(): string;
-    private protect;
-    private unprotect;
-    private invoke;
-}
-export declare function defaultCredentialStore(env?: NodeJS.ProcessEnv, options?: CredentialStoreOptions): CredentialStore;