@runeya/runeya 2.0.120 → 2.0.122

package/{chunk-22RJM654.js → chunk-BVBK2WII.js}

@@ -31,8 +31,9 @@ import {
   runCompanionNow,
   syncConversationFromClaudeTranscript,
   verifyJwt
-} from "./chunk-NYKFDU76.js";
+} from "./chunk-VNLIA5PV.js";
 import {
+  StoreDiskCoordinator,
   agentManager,
   agentStore,
   decryptValue,
@@ -43,18 +44,25 @@ import {
   environmentStore,
   extractEncryptedVariableSlots,
   getEncryptionKey,
-  hasChangedSinceRead,
   hasEncryptionKey,
   isCiMode,
   isEncryptedValue,
   refsOfProjectId,
-  rememberFile,
-  serviceStore,
-  wasRead
-} from "./chunk-2WXQIUVC.js";
+  serviceStore
+} from "./chunk-XTLQOYLT.js";
 import {
   settingsManager
-} from "./chunk-GIHR3BGT.js";
+} from "./chunk-NIU3CN5A.js";
+import {
+  atomicWriteJsonSecure,
+  atomicWriteSecure,
+  fingerprintFiles,
+  hasChangedSinceRead,
+  readJsonFileSafe,
+  rememberFile,
+  resolveConversationRunDir,
+  wasRead
+} from "./chunk-GL7WA5K3.js";
 import {
   AGENT_STOP_FETCH_TIMEOUT,
   ApiKeysFileSchema,
@@ -77,7 +85,7 @@ import {
   serviceUrlValues,
   urlHostFor,
   withDeprecatedAliases
-} from "./chunk-H6VIS4OY.js";
+} from "./chunk-T2BV5WZE.js";
 import {
   allVaultRoots,
   env,
@@ -205,8 +213,8 @@ import { initTRPC, TRPCError } from "@trpc/server";
 
 // ../server/src/services/api-key-store.ts
 import { randomBytes, randomUUID, timingSafeEqual } from "crypto";
-import { readFile, writeFile, rename, mkdir, chmod } from "fs/promises";
-import { dirname, join as join2 } from "path";
+import { readFile } from "fs/promises";
+import { join as join2 } from "path";
 function maskApiKey(apiKey) {
   const { key, ...rest } = apiKey;
   return { ...rest, keyPreview: key.slice(-4) };
@@ -231,6 +239,15 @@ var ApiKeyStore = class {
    */
   unreadable = /* @__PURE__ */ new Map();
   loaded = false;
+  /**
+   * L'état du disque au dernier chargement — voir `ProjectStore.fingerprint`.
+   *
+   * Les clés d'un propriétaire tiennent dans un fichier unique, réécrit en
+   * entier à chaque sauvegarde : sans relecture, une seconde Runeya partageant
+   * cette racine machine efface la clé que la première vient de créer.
+   */
+  fingerprint = "";
+  disk = new StoreDiskCoordinator();
   /**
    * Encrypted at rest, so the file sits beside the key that opens it — read
    * under a different key it would decrypt to blanks, then be saved back blank.
@@ -252,16 +269,13 @@ var ApiKeyStore = class {
       );
       return;
     }
-    await mkdir(dirname(path), { recursive: true });
     const keys = Array.from(this.keys.values()).filter((k) => k.isPublic === isPublic && (this.owners.get(k.id) ?? null) === owner).map((k) => ({ ...k, key: encryptValue(k.key, owner ?? void 0) }));
     for (const raw of this.unreadable.get(owner)?.values() ?? []) {
       if (raw.isPublic === isPublic) keys.push(raw);
     }
-    const tmp = path + ".tmp";
-    await writeFile(tmp, JSON.stringify({ keys }, null, 2), "utf-8");
-    await rename(tmp, path);
-    await chmod(path, 384);
+    await atomicWriteSecure(path, JSON.stringify({ keys }, null, 2));
     await rememberFile(path);
+    this.fingerprint = await this.diskFingerprint();
   }
   /**
    * Réécrire ce fichier pour chaque propriétaire connu.
@@ -269,10 +283,12 @@ var ApiKeyStore = class {
    * Y compris ceux qui n'ont plus de clé : sinon une clé supprimée — ou dont le
    * propriétaire a changé — survivrait dans son ancien coffre.
    */
-  async persist(isPublic) {
-    for (const owner of this.knownOwners) await this.persistFile(isPublic, owner);
+  persist(isPublic) {
+    return this.disk.save(async () => {
+      for (const owner of this.knownOwners) await this.persistFile(isPublic, owner);
+    });
   }
-  async loadFile(path, owner) {
+  async loadFile(path, owner, into) {
     try {
       const raw = await readFile(path, "utf-8");
       await rememberFile(path);
@@ -282,29 +298,49 @@ var ApiKeyStore = class {
         for (const k of parsed.data.keys) {
           try {
             const key = isEncryptedValue(k.key) ? decryptValue(k.key, owner ?? void 0) : k.key;
-            this.keys.set(k.id, { ...k, key });
-            this.owners.set(k.id, owner);
+            into.keys.set(k.id, { ...k, key });
+            into.owners.set(k.id, owner);
           } catch {
             console.error(`[api-key-store] Cl\xE9 d'API ${k.id} illisible sous la cl\xE9 de ce coffre \u2014 conserv\xE9e telle quelle sur le disque`);
-            const bucket = this.unreadable.get(owner) ?? /* @__PURE__ */ new Map();
+            const bucket = into.unreadable.get(owner) ?? /* @__PURE__ */ new Map();
             bucket.set(k.id, k);
-            this.unreadable.set(owner, bucket);
+            into.unreadable.set(owner, bucket);
           }
         }
       }
     } catch {
     }
   }
-  /** La machine, puis chaque organisation dont un coffre existe sur ce disque. */
-  async load() {
-    if (this.loaded) return;
-    this.loaded = true;
-    this.unreadable.clear();
+  /** Tous les fichiers de clés du disque : ceux de la machine et des coffres. */
+  async sourcePaths() {
     const owners = [null, ...await listOrgVaults()];
+    const paths = [];
     for (const owner of owners) {
-      await this.loadFile(await this.filePath(true, owner), owner);
-      await this.loadFile(await this.filePath(false, owner), owner);
+      paths.push(await this.filePath(true, owner), await this.filePath(false, owner));
     }
+    return paths;
+  }
+  async diskFingerprint() {
+    return fingerprintFiles(await this.sourcePaths());
+  }
+  /** La machine, puis chaque organisation dont un coffre existe sur ce disque. */
+  async load() {
+    await this.disk.load(async () => {
+      const fingerprint = await this.diskFingerprint();
+      if (this.loaded && fingerprint === this.fingerprint) return null;
+      const next = { keys: /* @__PURE__ */ new Map(), owners: /* @__PURE__ */ new Map(), unreadable: /* @__PURE__ */ new Map() };
+      for (const owner of [null, ...await listOrgVaults()]) {
+        await this.loadFile(await this.filePath(true, owner), owner, next);
+        await this.loadFile(await this.filePath(false, owner), owner, next);
+      }
+      return () => {
+        this.keys = next.keys;
+        this.owners = next.owners;
+        this.unreadable = next.unreadable;
+        this.fingerprint = fingerprint;
+        this.loaded = true;
+      };
+    });
   }
   /**
    * Oublier ce qui a été lu, pour tout relire sous la clé courante.
@@ -539,7 +575,7 @@ var DescriptionSchema = z2.string().max(2e3);
 var OptionalProviderIdSchema = Id128Schema.optional();
 
 // ../server/src/services/workspace-cwd.ts
-import { isAbsolute, join as join3, dirname as dirname2 } from "path";
+import { isAbsolute, join as join3, dirname } from "path";
 async function projectRoot(ref) {
   const project = await projectStore.get(ref);
   if (!project?.orgId) return null;
@@ -570,7 +606,7 @@ function anchor(base, raw) {
   return join3(base, raw);
 }
 function localVaultRootParent() {
-  return dirname2(localVaultRoot());
+  return dirname(localVaultRoot());
 }
 async function resolveAgentCwd(target) {
   if (target.serviceId) {
@@ -598,8 +634,8 @@ async function resolveConversationCwd(conversationId) {
 }
 
 // ../server/src/services/environment-overrides-store.ts
-import { readFile as readFile2, writeFile as writeFile2, rename as rename2, mkdir as mkdir2, chmod as chmod2 } from "fs/promises";
-import { dirname as dirname3, join as join4 } from "path";
+import { readFile as readFile2, writeFile, rename, mkdir, chmod } from "fs/promises";
+import { dirname as dirname2, join as join4 } from "path";
 var FILENAME = "environment-overrides.json";
 var EnvironmentOverridesStore = class {
   data = {};
@@ -632,7 +668,7 @@ var EnvironmentOverridesStore = class {
   async rootFor(variableId) {
     const root = await environmentStore.rootOfVariable(variableId);
     if (root) return root;
-    return this.roots.get(variableId) ?? dirname3(await keyedFilePath(FILENAME));
+    return this.roots.get(variableId) ?? dirname2(await keyedFilePath(FILENAME));
   }
   /** Where earlier versions kept them: read once, rewritten to their vaults. */
   getLegacyFilePath() {
@@ -670,11 +706,11 @@ var EnvironmentOverridesStore = class {
         parsed,
         "environment-overrides",
         (variableId) => this.unreadableSecrets.add(variableId),
-        vaultIdOfRoot(dirname3(path))
+        vaultIdOfRoot(dirname2(path))
       );
       for (const [id, override] of Object.entries(decrypted)) {
         this.data[id] = { value: override.value };
-        this.roots.set(id, dirname3(path));
+        this.roots.set(id, dirname2(path));
       }
     }
   }
@@ -709,12 +745,12 @@ var EnvironmentOverridesStore = class {
         this.diskEncryptedSlots,
         extractEncryptedVariableSlots(encrypted)
       );
-      await mkdir2(root, { recursive: true });
+      await mkdir(root, { recursive: true });
       const path = join4(root, FILENAME);
       const tmpPath = path + ".tmp";
-      await writeFile2(tmpPath, JSON.stringify(encrypted, null, 2), "utf-8");
-      await rename2(tmpPath, path);
-      await chmod2(path, 384);
+      await writeFile(tmpPath, JSON.stringify(encrypted, null, 2), "utf-8");
+      await rename(tmpPath, path);
+      await chmod(path, 384);
     }
   }
   /**
@@ -2211,7 +2247,7 @@ import { z as z3 } from "zod";
 import { TRPCError as TRPCError2 } from "@trpc/server";
 
 // ../server/src/services/audit-service.ts
-import { appendFile, readFile as readFile3, stat, rename as rename3, unlink, readdir as readdir2, mkdir as mkdir3 } from "fs/promises";
+import { appendFile, readFile as readFile3, stat, rename as rename2, unlink, readdir as readdir2, mkdir as mkdir2 } from "fs/promises";
 var AUDIT_FILENAME = "audit.log";
 var MAX_FILE_SIZE = 10 * 1024 * 1024;
 var MAX_AGE_DAYS = 30;
@@ -2231,7 +2267,7 @@ var AuditService = class {
     const line = JSON.stringify(record) + "\n";
     const filepath = this.getFilePath();
     try {
-      await mkdir3(machineRoot(), { recursive: true });
+      await mkdir2(machineRoot(), { recursive: true });
       await appendFile(filepath, line, "utf-8");
       await this.rotateIfNeeded();
     } catch (err) {
@@ -2277,7 +2313,7 @@ var AuditService = class {
     try {
       const stats = await stat(filepath);
       if (stats.size > MAX_FILE_SIZE) {
-        await rename3(filepath, this.getRotatedPath());
+        await rename2(filepath, this.getRotatedPath());
       }
     } catch {
     }
@@ -2976,7 +3012,7 @@ function parse(text) {
   return result;
 }
 function getClaudeUsage() {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve2, reject) => {
     const env2 = { ...process.env };
     delete env2["CLAUDECODE"];
     let claudeBin = "claude";
@@ -3009,7 +3045,7 @@ function getClaudeUsage() {
       clearTimeout(hardTimeout);
       term?.kill();
       const clean = buffer.replaceAll(/\x1b\[[0-9;]*X/g, "\n").replaceAll(/\x1b\[[0-9;]*[mGKHFABCDJsu]/g, "").replaceAll(/\x1b[^a-zA-Z]*[a-zA-Z]/g, "").replaceAll("\r", "");
-      resolve3(parse(clean));
+      resolve2(parse(clean));
     }
     const hardTimeout = setTimeout(() => {
       if (!done) finish();
@@ -3143,7 +3179,7 @@ function parseCodexStatusText(text) {
   return entries;
 }
 function getCodexUsageEntries() {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve2, reject) => {
     let term = null;
     try {
       const invocation = resolveCliInvocation("codex", []);
@@ -3174,7 +3210,7 @@ function getCodexUsageEntries() {
         const debugClean = stripAnsi(buffer).slice(-6e3);
         process.stdout.write("[codex-usage] raw tail:\n" + debugClean + "\n");
       }
-      resolve3(parseCodexStatusText(buffer));
+      resolve2(parseCodexStatusText(buffer));
     };
     const hardTimeout = setTimeout(() => {
       finish();
@@ -3377,44 +3413,8 @@ var ScenarioStore = class {
 var scenarioStore = new ScenarioStore();
 
 // ../server/src/services/scenario-run-store.ts
-import { mkdir as mkdir5, rm, readFile as readFile5 } from "fs/promises";
+import { mkdir as mkdir3, rm, readFile as readFile4 } from "fs/promises";
 import { join as join5 } from "path";
-
-// ../server/src/services/run-store-utils.ts
-import { chmod as chmod3, mkdir as mkdir4, rename as rename4, writeFile as writeFile3, readFile as readFile4 } from "fs/promises";
-import { dirname as dirname4, resolve, sep } from "path";
-var SAFE_PATH_SEGMENT_RE = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
-function resolveConversationRunDir(rootDirName, conversationId) {
-  if (!SAFE_PATH_SEGMENT_RE.test(conversationId)) {
-    throw new Error("Invalid conversationId");
-  }
-  const base = resolve(machineRoot(), rootDirName);
-  const dir = resolve(base, conversationId);
-  if (!dir.startsWith(base + sep)) {
-    throw new Error("Invalid conversationId");
-  }
-  return dir;
-}
-async function atomicWriteSecure(filePath, content) {
-  await mkdir4(dirname4(filePath), { recursive: true });
-  const tmpPath = `${filePath}.tmp`;
-  await writeFile3(tmpPath, content, "utf-8");
-  await rename4(tmpPath, filePath);
-  await chmod3(filePath, 384);
-}
-async function atomicWriteJsonSecure(filePath, data, pretty = false) {
-  await atomicWriteSecure(filePath, JSON.stringify(data, null, pretty ? 2 : 0));
-}
-async function readJsonFileSafe(filePath) {
-  try {
-    const raw = await readFile4(filePath, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-
-// ../server/src/services/scenario-run-store.ts
 function sanitizeSlug(value) {
   return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60) || "member";
 }
@@ -3430,7 +3430,7 @@ var ScenarioRunStore = class _ScenarioRunStore {
   }
   async initializeConversationWorkspace(conversationId, scenario, userInput) {
     const dir = this.getRunDir(conversationId);
-    await mkdir5(dir, { recursive: true });
+    await mkdir3(dir, { recursive: true });
     await this.saveScenarioSnapshot(conversationId, scenario);
     const nodesById = new Map(scenario.nodes.map((p) => [p.id, p]));
     const teamMap = new Map(scenario.groups.map((t2) => [t2.id, t2.name]));
@@ -3542,7 +3542,7 @@ ${userInput.trim() || "(empty)"}
     if (!runState) return;
     try {
       const dir = this.getRunDir(conversationId);
-      await mkdir5(dir, { recursive: true });
+      await mkdir3(dir, { recursive: true });
       const data = {
         nodeStates: { ...runState.nodeStates },
         nodeOutputs: { ...runState.nodeOutputs },
@@ -3561,7 +3561,7 @@ ${userInput.trim() || "(empty)"}
   async readUserRequest(conversationId) {
     try {
       const dir = this.getRunDir(conversationId);
-      const content = await readFile5(join5(dir, "USER_REQUEST.md"), "utf-8");
+      const content = await readFile4(join5(dir, "USER_REQUEST.md"), "utf-8");
       return content.replace(/^#\s*User request\s*\n+/, "").trim() || null;
     } catch {
       return null;
@@ -3570,14 +3570,14 @@ ${userInput.trim() || "(empty)"}
   async readReadme(conversationId) {
     try {
       const dir = this.getRunDir(conversationId);
-      return await readFile5(join5(dir, "README.md"), "utf-8");
+      return await readFile4(join5(dir, "README.md"), "utf-8");
     } catch {
       return null;
     }
   }
   async saveScenarioSnapshot(conversationId, scenario) {
     const dir = this.getRunDir(conversationId);
-    await mkdir5(dir, { recursive: true });
+    await mkdir3(dir, { recursive: true });
     await atomicWriteJsonSecure(
       join5(dir, _ScenarioRunStore.SCENARIO_SNAPSHOT_FILE),
       scenario,
@@ -3641,9 +3641,9 @@ async function vaultOfProject(projectId) {
 
 // ../server/src/services/image-storage.service.ts
 import { randomUUID as randomUUID3 } from "crypto";
-import { mkdir as mkdir6, writeFile as writeFile4, readFile as readFile6, unlink as unlink2, readdir as readdir3 } from "fs/promises";
+import { mkdir as mkdir4, writeFile as writeFile2, readFile as readFile5, unlink as unlink2, readdir as readdir3 } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
-import { join as join6, extname, resolve as resolve2, sep as sep2 } from "path";
+import { join as join6, extname, resolve, sep } from "path";
 var ALLOWED_MIME_TYPES = /* @__PURE__ */ new Set([
   "image/png",
   "image/jpeg",
@@ -3660,7 +3660,7 @@ var ImageStorageService = class {
     this.dir = dir;
   }
   async ensureTmpDir() {
-    await mkdir6(this.dir, { recursive: true, mode: 448 });
+    await mkdir4(this.dir, { recursive: true, mode: 448 });
   }
   async saveImage(buffer, originalName, mimeType, contextId) {
     if (!ALLOWED_MIME_TYPES.has(mimeType)) {
@@ -3681,14 +3681,14 @@ var ImageStorageService = class {
     const safeExt = ext.replace(/[^a-z.]/g, "");
     const fileName = `${imageId}${safeExt}`;
     const filePath = join6(this.dir, fileName);
-    const resolvedPath = resolve2(filePath);
-    const resolvedDir = resolve2(this.dir);
-    if (resolvedPath !== resolvedDir && !resolvedPath.startsWith(resolvedDir + sep2)) {
+    const resolvedPath = resolve(filePath);
+    const resolvedDir = resolve(this.dir);
+    if (resolvedPath !== resolvedDir && !resolvedPath.startsWith(resolvedDir + sep)) {
       throw new Error("Invalid file path");
     }
-    await writeFile4(filePath, buffer, { mode: 384 });
+    await writeFile2(filePath, buffer, { mode: 384 });
     const meta = { imageId, filePath, mimeType, originalName, createdAt: Date.now(), contextId };
-    await writeFile4(`${filePath}.meta.json`, JSON.stringify(meta), { encoding: "utf-8", mode: 384 });
+    await writeFile2(`${filePath}.meta.json`, JSON.stringify(meta), { encoding: "utf-8", mode: 384 });
     return meta;
   }
   /**
@@ -3706,7 +3706,7 @@ var ImageStorageService = class {
       const files = await readdir3(this.dir);
       const metaFile = files.find((f) => f.startsWith(imageId) && f.endsWith(".meta.json"));
       if (!metaFile) return null;
-      const raw = JSON.parse(await readFile6(join6(this.dir, metaFile), "utf-8"));
+      const raw = JSON.parse(await readFile5(join6(this.dir, metaFile), "utf-8"));
       if (expectedContextId !== void 0 && raw.contextId !== expectedContextId) return null;
       if (!existsSync2(raw.filePath)) return null;
       return { filePath: raw.filePath, mimeType: raw.mimeType, contextId: raw.contextId };
@@ -3732,7 +3732,7 @@ var ImageStorageService = class {
     await Promise.all(
       files.filter((f) => f.endsWith(".meta.json")).map(async (file) => {
         try {
-          const raw = JSON.parse(await readFile6(join6(this.dir, file), "utf-8"));
+          const raw = JSON.parse(await readFile5(join6(this.dir, file), "utf-8"));
           if (raw.contextId === contextId) {
             await unlink2(raw.filePath).catch(() => {
             });
@@ -3747,7 +3747,7 @@ var ImageStorageService = class {
   async readImageAsBase64(imageId, expectedContextId) {
     const result = await this.getImagePath(imageId, expectedContextId);
     if (!result) return null;
-    const buffer = await readFile6(result.filePath);
+    const buffer = await readFile5(result.filePath);
     return { base64: buffer.toString("base64"), mimeType: result.mimeType };
   }
   async listExpiredImages(ttlMs = IMAGE_TTL_MS) {
@@ -3762,7 +3762,7 @@ var ImageStorageService = class {
     for (const file of files) {
       if (!file.endsWith(".meta.json")) continue;
       try {
-        const raw = JSON.parse(await readFile6(join6(this.dir, file), "utf-8"));
+        const raw = JSON.parse(await readFile5(join6(this.dir, file), "utf-8"));
         if (now - raw.createdAt > ttlMs) expired.push(raw);
       } catch {
       }
@@ -3773,7 +3773,7 @@ var ImageStorageService = class {
 var _singleton;
 function getSingleton() {
   if (!_singleton) {
-    _singleton = new ImageStorageService(resolve2(machineRoot(), "images"));
+    _singleton = new ImageStorageService(resolve(machineRoot(), "images"));
   }
   return _singleton;
 }
@@ -3831,8 +3831,8 @@ import { basename } from "path";
 import { TRPCError as TRPCError3 } from "@trpc/server";
 
 // ../server/src/services/cloud-session-store.ts
-import { readFile as readFile7, writeFile as writeFile5, rename as rename5, mkdir as mkdir7, chmod as chmod4, unlink as unlink3 } from "fs/promises";
-import { dirname as dirname5 } from "path";
+import { readFile as readFile6, writeFile as writeFile3, rename as rename3, mkdir as mkdir5, chmod as chmod2, unlink as unlink3 } from "fs/promises";
+import { dirname as dirname3 } from "path";
 import { randomBytes as randomBytes2, createHash, timingSafeEqual as timingSafeEqual2 } from "crypto";
 var FILENAME2 = "cloud-session.json";
 var STATE_TTL_MS = 5 * 60 * 1e3;
@@ -3863,9 +3863,9 @@ var CloudSessionStore = class {
    */
   async readFromDisk() {
     try {
-      return await readFile7(await this.getFilePath(), "utf-8");
+      return await readFile6(await this.getFilePath(), "utf-8");
     } catch {
-      return readFile7(this.getLegacyFilePath(), "utf-8");
+      return readFile6(this.getLegacyFilePath(), "utf-8");
     }
   }
   /**
@@ -3939,12 +3939,12 @@ var CloudSessionStore = class {
   }
   async save() {
     const filePath = await this.getFilePath();
-    await mkdir7(dirname5(filePath), { recursive: true });
+    await mkdir5(dirname3(filePath), { recursive: true });
     const payload = { version: 2, accounts: this.accounts };
     const tmpPath = filePath + ".tmp";
-    await writeFile5(tmpPath, JSON.stringify(payload, null, 2), "utf-8");
-    await rename5(tmpPath, filePath);
-    await chmod4(filePath, 384);
+    await writeFile3(tmpPath, JSON.stringify(payload, null, 2), "utf-8");
+    await rename3(tmpPath, filePath);
+    await chmod2(filePath, 384);
   }
   /**
    * Ranger le token obtenu par l'échange de jeton à usage unique.
@@ -4080,7 +4080,7 @@ var cloudSessionStore = new CloudSessionStore();
 
 // ../server/src/services/lan-mode.ts
 import { networkInterfaces } from "os";
-import { readFile as readFile8, writeFile as writeFile6, rename as rename6, mkdir as mkdir8 } from "fs/promises";
+import { readFile as readFile7, writeFile as writeFile4, rename as rename4, mkdir as mkdir6 } from "fs/promises";
 import { join as join7 } from "path";
 import { z as z4 } from "zod";
 var LOOPBACK2 = "127.0.0.1";
@@ -4098,7 +4098,7 @@ function networkFilePath() {
 }
 async function readFileState() {
   try {
-    return NetworkFileSchema.parse(JSON.parse(await readFile8(networkFilePath(), "utf-8")));
+    return NetworkFileSchema.parse(JSON.parse(await readFile7(networkFilePath(), "utf-8")));
   } catch {
     return { instances: {} };
   }
@@ -4109,13 +4109,13 @@ async function readPersisted() {
 }
 async function writePersisted(lanEnabled) {
   const root = machineRoot();
-  await mkdir8(root, { recursive: true });
+  await mkdir6(root, { recursive: true });
   const state = await readFileState();
   state.instances[instanceKey()] = { lanEnabled };
   const filePath = networkFilePath();
   const tmpPath = filePath + ".tmp";
-  await writeFile6(tmpPath, JSON.stringify(state, null, 2), "utf-8");
-  await rename6(tmpPath, filePath);
+  await writeFile4(tmpPath, JSON.stringify(state, null, 2), "utf-8");
+  await rename4(tmpPath, filePath);
 }
 function registerHttpServer(server) {
   httpServer = server;
@@ -4153,14 +4153,14 @@ async function rebind(host, previousHost) {
   const server = httpServer;
   if (!server?.listening) return;
   const port = currentPort();
-  const listenOn = (target) => new Promise((resolve3, reject) => {
+  const listenOn = (target) => new Promise((resolve2, reject) => {
     const onError = (err) => {
       server.removeListener("listening", onListening);
       reject(err);
     };
     const onListening = () => {
       server.removeListener("error", onError);
-      resolve3();
+      resolve2();
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -5248,12 +5248,12 @@ function tailTranscript(opts) {
       const poll = setInterval(() => {
         void readMore();
       }, 500);
-      await new Promise((resolve3) => {
+      await new Promise((resolve2) => {
         const tick = setInterval(() => {
           if (stopped) {
             clearInterval(tick);
             clearInterval(poll);
-            resolve3();
+            resolve2();
           }
         }, 100);
       });
@@ -5272,7 +5272,7 @@ function tailTranscript(opts) {
 
 // ../server/src/services/ai-runners/claude-pty-runner.ts
 async function getAgentManager() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-ACPQWUZ5.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-BSPEFZKZ.js");
   return agentManager2;
 }
 function buildPtyArgs(params, sessionId, opts) {
@@ -5347,7 +5347,7 @@ async function runClaudeViaPty(params) {
     return a;
   });
   params.onCommand?.(`claude ${displayArgs.join(" ")}`);
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve2, reject) => {
     let settled = false;
     let spawnId = null;
     const state = { assistantText: "", tools: /* @__PURE__ */ new Map() };
@@ -5370,7 +5370,7 @@ async function runClaudeViaPty(params) {
       settled = true;
       cleanup();
       void killSpawn();
-      resolve3(result);
+      resolve2(result);
     };
     const fail = (err) => {
       if (settled) return;
@@ -5694,7 +5694,7 @@ var ClaudeCodeRunner = class {
   runLocal(params) {
     const { signal, skipTokenInstructions } = params;
     const { args, env: env2, stdinData, sessionArg, hasImages: _hasImages } = buildClaudeSpawnConfig(params);
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       const totalArgSize = args.reduce((s, a) => s + a.length + 1, 0);
       console.log(`[claude-code-runner] arg size: ${totalArgSize} bytes (${(totalArgSize / 1024 / 1024).toFixed(2)} MB), session: ${sessionArg.join(" ")}, images: ${params.images?.length ?? 0}`);
       const displayArgs = args.map((a) => {
@@ -5738,7 +5738,7 @@ var ClaudeCodeRunner = class {
       });
       proc.on("close", (code) => {
         if (ctx.earlyResult) {
-          resolve3({ ...ctx.earlyResult, actualSessionId: streamState.actualSessionId });
+          resolve2({ ...ctx.earlyResult, actualSessionId: streamState.actualSessionId });
           return;
         }
         signal.removeEventListener("abort", onAbort);
@@ -5755,7 +5755,7 @@ var ClaudeCodeRunner = class {
           return;
         }
         const { status, message, branchChoice } = skipTokenInstructions ? { status: "none", message: "", branchChoice: void 0 } : parseEndToken(streamState.fullContent);
-        resolve3({ output: streamState.fullContent, tokenStatus: status, tokenMessage: message, branchChoice, actualSessionId: streamState.actualSessionId });
+        resolve2({ output: streamState.fullContent, tokenStatus: status, tokenMessage: message, branchChoice, actualSessionId: streamState.actualSessionId });
       });
       proc.on("error", (err) => {
         if (ctx.settled) return;
@@ -5832,12 +5832,12 @@ var CodexAppServerClient = class extends EventEmitter {
     if (forceId !== void 0 && forceId >= this.nextId) {
       this.nextId = forceId + 1;
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(id);
         reject(new Error(`Request ${method} (id=${id}) timed out after ${this.requestTimeoutMs}ms`));
       }, this.requestTimeoutMs);
-      this.pending.set(id, { resolve: resolve3, reject, timer });
+      this.pending.set(id, { resolve: resolve2, reject, timer });
       this.writeLine({ jsonrpc: "2.0", method, id, params: params ?? {} });
     });
   }
@@ -5869,8 +5869,8 @@ var CodexAppServerClient = class extends EventEmitter {
     this.rl = null;
     const proc = this.proc;
     this.proc = null;
-    return new Promise((resolve3) => {
-      proc.on("exit", () => resolve3());
+    return new Promise((resolve2) => {
+      proc.on("exit", () => resolve2());
       proc.kill("SIGTERM");
       const forceTimer = setTimeout(() => {
         proc.kill("SIGKILL");
@@ -5964,7 +5964,7 @@ async function shutdownCodexAppServer() {
   }
 }
 async function getAgentManager2() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-ACPQWUZ5.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-BSPEFZKZ.js");
   return agentManager2;
 }
 function parseRuneyaCurlCommand(command) {
@@ -6082,7 +6082,7 @@ ${prompt}`;
     }
     input.push({ type: "text", text: fullPrompt });
     const turnRef = { id: null };
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       let settled = false;
       let fullContent = "";
       let thinkingEmitted = false;
@@ -6131,7 +6131,7 @@ ${prompt}`;
               params.onDelta(delta);
               const { status, message, branchChoice } = parseEndToken(fullContent);
               if (status !== "none") {
-                settle(() => resolve3({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
+                settle(() => resolve2({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
               }
             }
           } else if (method === "item/reasoning/summaryTextDelta" || method === "item/reasoning/textDelta") {
@@ -6205,7 +6205,7 @@ ${prompt}`;
               return;
             }
             const { status, message, branchChoice } = parseEndToken(fullContent);
-            settle(() => resolve3({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
+            settle(() => resolve2({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
           } else if (method === "turn/errored") {
             const error = p["error"];
             const msg = typeof error?.["message"] === "string" ? error["message"] : "Codex turn errored";
@@ -6282,7 +6282,7 @@ ${prompt}`;
       sandboxPolicy: { type: "dangerFullAccess" }
     });
     const turnId = turnRes.turn.id;
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve2, reject) => {
       let settled = false;
       let fullContent = "";
       let thinkingEmitted = false;
@@ -6308,7 +6308,7 @@ ${prompt}`;
             params.onDelta(delta);
             const { status, message, branchChoice } = parseEndToken(fullContent);
             if (status !== "none") {
-              settle(() => resolve3({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
+              settle(() => resolve2({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
             }
           }
         } else if (method === "item/reasoning/summaryTextDelta" || method === "item/reasoning/textDelta") {
@@ -6382,7 +6382,7 @@ ${prompt}`;
             return;
           }
           const { status, message, branchChoice } = parseEndToken(fullContent);
-          settle(() => resolve3({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
+          settle(() => resolve2({ output: fullContent, tokenStatus: status, tokenMessage: message, branchChoice }));
         } else if (method === "turn/errored") {
           const error = p["error"];
           const msg = typeof error?.["message"] === "string" ? error["message"] : "Codex turn errored";
@@ -6843,14 +6843,14 @@ var chatRouter = router({
       const initial = (await conversationStore.list()).filter(belongs);
       yield { type: "initial", conversations: initial };
       const queue = [];
-      let resolve3 = null;
+      let resolve2 = null;
       const handler = (event) => {
         if (event.type !== "deleted" && event.type !== "reloaded" && !belongs(event.conversation)) return;
         if (queue.length >= 500) queue.shift();
         queue.push(event);
-        if (resolve3) {
-          resolve3();
-          resolve3 = null;
+        if (resolve2) {
+          resolve2();
+          resolve2 = null;
         }
       };
       conversationStore.onChanged(handler);
@@ -6865,7 +6865,7 @@ var chatRouter = router({
             yield event;
           } else {
             await new Promise((r) => {
-              resolve3 = r;
+              resolve2 = r;
             });
           }
         }
@@ -7008,13 +7008,13 @@ var chatRouter = router({
     onCompanionThinking: protectedProcedure.subscription(async function* () {
       const snapshot = () => ({ thinking: companionThinkingIds(), skipped: companionSkips() });
       const queue = [snapshot()];
-      let resolve3 = null;
+      let resolve2 = null;
       const handler = () => {
         if (queue.length >= 50) queue.shift();
         queue.push(snapshot());
-        if (resolve3) {
-          resolve3();
-          resolve3 = null;
+        if (resolve2) {
+          resolve2();
+          resolve2 = null;
         }
       };
       const unsubscribe = onCompanionThinkingChanged(handler);
@@ -7022,7 +7022,7 @@ var chatRouter = router({
         while (true) {
           if (queue.length > 0) yield queue.shift();
           else await new Promise((r) => {
-            resolve3 = r;
+            resolve2 = r;
           });
         }
       } finally {
@@ -7719,7 +7719,7 @@ Context:
       const tSub = Date.now();
       let firstChunk = true;
       const queue = [];
-      let resolve3 = null;
+      let resolve2 = null;
       let stopped = false;
       const unsub = agentManager.agentSubscribe(
         agentId,
@@ -7733,16 +7733,16 @@ Context:
           const item = data;
           if (typeof item.chunk?.data === "string") observePtyChunk(input.spawnId, item.chunk.data);
           queue.push(item);
-          if (resolve3) {
-            resolve3();
-            resolve3 = null;
+          if (resolve2) {
+            resolve2();
+            resolve2 = null;
           }
         },
         () => {
           stopped = true;
-          if (resolve3) {
-            resolve3();
-            resolve3 = null;
+          if (resolve2) {
+            resolve2();
+            resolve2 = null;
           }
         }
       );
@@ -7759,7 +7759,7 @@ Context:
           }
           if (stopped) break;
           await new Promise((r) => {
-            resolve3 = r;
+            resolve2 = r;
           });
         }
       } finally {
@@ -7983,8 +7983,6 @@ export {
   OptionalProviderIdSchema,
   generateLlmsTxt,
   scenarioStore,
-  resolveConversationRunDir,
-  atomicWriteSecure,
   scenarioRunStore,
   OPENAI_COMPAT_BASE_URLS,
   DEFAULT_MODELS,
@@ -8008,4 +8006,4 @@ export {
   startCliSession,
   chatRouter
 };
-//# sourceMappingURL=chunk-22RJM654.js.map
+//# sourceMappingURL=chunk-BVBK2WII.js.map