@runeya/runeya 2.0.124 → 2.0.126

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runeya/runeya",
-  "version": "2.0.124",
+  "version": "2.0.126",
   "type": "module",
   "bin": {
     "runeya": "./index.js"

package/{settings-manager-MAVD4GAS.js → settings-manager-E3L56VAY.js}

@@ -1,10 +1,10 @@
 import {
   settingsManager
-} from "./chunk-N3ZI35SC.js";
+} from "./chunk-K7A3Q62R.js";
 import "./chunk-HK5QNU6P.js";
-import "./chunk-T2BV5WZE.js";
+import "./chunk-TTPL2M74.js";
 import "./chunk-ZFELQG4B.js";
 export {
   settingsManager
 };
-//# sourceMappingURL=settings-manager-MAVD4GAS.js.map
+//# sourceMappingURL=settings-manager-E3L56VAY.js.map

package/{src-SGSG2RSF.js → src-XCI5NILM.js}

@@ -17,7 +17,9 @@ import {
   apiKeyStore,
   appVersion,
   applyPersistedLanMode,
+  attachServiceToProject,
   auditService,
+  buildServerBuiltins,
   canEnvAction,
   chatRouter,
   cloudAuthRouter,
@@ -29,6 +31,7 @@ import {
   environmentResolver,
   executeKanbanBoardCommands,
   executeKanbanCommands,
+  filterEnvForAi,
   generateLlmsTxt,
   getActiveProvider,
   getAllowedServiceIds,
@@ -62,7 +65,7 @@ import {
   soleAccountScope,
   startCliSession,
   vaultOfProject
-} from "./chunk-GKK3ACWB.js";
+} from "./chunk-2EDVDRKV.js";
 import {
   resolveCliInvocation,
   whichCommand
@@ -85,7 +88,7 @@ import {
   stopClaudeTranscriptWatcher,
   stopCodexTranscriptWatcher,
   verifyJwt
-} from "./chunk-H22YLVQE.js";
+} from "./chunk-SG2ACPOE.js";
 import "./chunk-MD3VW4HQ.js";
 import {
   agentManager,
@@ -127,10 +130,10 @@ import {
   stableEncryptValue,
   traefikManager,
   unregisterInstance
-} from "./chunk-4PN7QBNM.js";
+} from "./chunk-WLZQDWJT.js";
 import {
   settingsManager
-} from "./chunk-N3ZI35SC.js";
+} from "./chunk-K7A3Q62R.js";
 import {
   atomicWriteSecure,
   resolveConversationRunDir,
@@ -160,16 +163,19 @@ import {
   UpdateEnvironmentSchema,
   VariableOverrideSchema,
   VariableSchema,
+  VariableSlotSchema,
   ambiguousServiceSlugs,
   crossServiceSlugsIn,
   deriveLauncherIdentity,
+  findUnresolvedReferences,
   getCollection,
   nativeParsers,
   primaryServiceLink,
   readEntity,
   serviceSlug,
+  suggestBuiltinReferences,
   writeEntity
-} from "./chunk-T2BV5WZE.js";
+} from "./chunk-TTPL2M74.js";
 import {
   allVaultRoots,
   env,
@@ -943,27 +949,10 @@ var projectRouter = router({
     orgId: z4.string().max(128).nullable().optional(),
     serviceId: z4.string().max(128)
   })).mutation(async ({ input }) => {
-    const target = { id: input.projectId, orgId: input.orgId };
-    const project = await projectStore.addService(target, input.serviceId);
+    const project = await attachServiceToProject({ id: input.projectId, orgId: input.orgId }, input.serviceId);
     if (!project) {
       throw new TRPCError2({ code: "NOT_FOUND", message: `Project ${input.projectId} not found` });
     }
-    const service = await serviceStore.get(input.serviceId);
-    if (service) {
-      const globalEnvs = await environmentStore.listByScope(input.projectId, "global", input.orgId);
-      for (const globalEnv of globalEnvs) {
-        const svcEnv = await environmentStore.create({
-          projectId: input.projectId,
-          name: `${service.name} (${globalEnv.name})`,
-          scope: "service",
-          reference: input.serviceId,
-          activateOn: globalEnv.id,
-          parentIds: [globalEnv.id],
-          variables: {}
-        }, input.orgId);
-        await projectStore.addEnvironment(target, svcEnv.id);
-      }
-    }
     await auditService.log({
       userId: "local",
       action: "update",
@@ -1926,8 +1915,86 @@ var setupRouter = router({
 });
 
 // ../server/src/trpc/routers/environment.ts
+import { randomUUID } from "crypto";
 import { z as z9 } from "zod";
 import { TRPCError as TRPCError6 } from "@trpc/server";
+
+// ../server/src/services/ai-variable-write.ts
+var AiVariableWriteError = class extends Error {
+};
+function planAiVariableWrite(existing, input) {
+  if (!existing) {
+    return {
+      key: input.key,
+      value: VariableSlotSchema.parse({
+        value: input.value ?? "",
+        ...input.pre !== void 0 ? { pre: input.pre } : {},
+        ...input.post !== void 0 ? { post: input.post } : {},
+        isSecret: input.isSecret ?? false,
+        ...input.description !== void 0 ? { description: input.description } : {}
+      })
+    };
+  }
+  const slot = existing.value;
+  if (slot.isSecret && input.isSecret === false) {
+    throw new AiVariableWriteError(`${input.key} is a secret: an AI cannot make it public. Ask the user to change it in Runeya.`);
+  }
+  if (slot.overrideOnly && input.value !== void 0) {
+    throw new AiVariableWriteError(`${input.key} is override-only: it has no shared value, each machine sets its own. Ask the user to fill it in Runeya.`);
+  }
+  return {
+    key: existing.key,
+    value: {
+      ...slot,
+      ...input.value !== void 0 ? { value: input.value } : {},
+      ...input.pre !== void 0 ? { pre: input.pre } : {},
+      ...input.post !== void 0 ? { post: input.post } : {},
+      ...input.isSecret ? { isSecret: true } : {},
+      ...input.description !== void 0 ? { description: input.description } : {}
+    }
+  };
+}
+
+// ../server/src/services/ai-environments.ts
+function describeEnvironmentsForAi(environments, context) {
+  return environments.map((env2) => {
+    const scope = env2.scope ?? "global";
+    return {
+      id: env2.id,
+      name: env2.name,
+      scope,
+      active: env2.id === context.activeEnvironmentId,
+      parentIds: env2.parentIds ?? [],
+      ...scope === "service" && env2.reference ? { serviceId: env2.reference } : {},
+      ...scope === "service" && env2.reference && context.serviceNames[env2.reference] ? { serviceName: context.serviceNames[env2.reference] } : {},
+      ...env2.activateOn ? { activateOn: env2.activateOn } : {},
+      ...scope === "service" && env2.activateOn ? { isolated: !(env2.parentIds ?? []).includes(env2.activateOn) } : {},
+      variables: Object.values(env2.variables ?? {}).map((v) => ({
+        key: v.key,
+        secret: v.value.isSecret,
+        required: v.value.required,
+        overrideOnly: v.value.overrideOnly,
+        ...v.value.description ? { description: v.value.description } : {}
+      }))
+    };
+  });
+}
+
+// ../server/src/trpc/routers/environment.ts
+async function builtinsForEnvironment(environment) {
+  const project = await projectStore.get(environmentStore.projectRefOf(environment) ?? environment.projectId);
+  if (!project) return {};
+  const services = (await Promise.all(project.serviceIds.map((id) => serviceStore.get(id)))).filter((service) => service !== null);
+  const own = environment.scope === "service" ? services.find((service) => service.id === environment.reference) : void 0;
+  const subject = own ?? services[0];
+  if (!subject) return {};
+  const values = buildServerBuiltins({
+    service: subject,
+    siblings: services.filter((service) => service.id !== subject.id),
+    host: env.HOST
+  });
+  return own ? values : Object.fromEntries(Object.entries(values).filter(([name]) => name.startsWith("services.")));
+}
 var environmentRouter = router({
   list: protectedProcedure.input(z9.object({
     projectId: z9.string().max(128),
@@ -2138,6 +2205,130 @@ var environmentRouter = router({
     if (!result) throw new TRPCError6({ code: "INTERNAL_SERVER_ERROR", message: "Failed to update variable" });
     return result;
   }),
+  /**
+   * Les environnements d'un projet pour une IA : où ranger une variable, qui
+   * hérite de qui, lequel est actif — sans aucune valeur (`describeEnvironmentsForAi`).
+   * Une clé d'API n'y voit que les environnements qu'elle peut lire.
+   */
+  listForAi: protectedProcedure.input(z9.object({
+    projectId: z9.string().max(128),
+    orgId: z9.string().max(128).nullable().optional()
+  })).query(async ({ input, ctx }) => {
+    const project = await projectStore.get({
+      id: input.projectId,
+      ...input.orgId !== void 0 ? { orgId: input.orgId } : {}
+    });
+    if (!project) throw new TRPCError6({ code: "NOT_FOUND", message: `Project ${input.projectId} not found` });
+    const environments = (await environmentStore.list(input.projectId, input.orgId)).filter((env2) => canEnvAction(ctx, env2.id, "env:read"));
+    const serviceNames = {};
+    for (const serviceId of project.serviceIds) {
+      const service = await serviceStore.get(serviceId);
+      if (service) serviceNames[serviceId] = service.name;
+    }
+    return describeEnvironmentsForAi(environments, { activeEnvironmentId: project.activeEnvironmentId, serviceNames });
+  }),
+  /**
+   * Ce que produit un environnement seul, parents et surcharges du poste
+   * compris, tel qu'une IA peut le lire : secrets non partagés masqués par le
+   * même filtre que `service.getEnv`. Les variables intégrées ne sont pas
+   * remplies — elles dépendent du service qui les reçoit — mais une référence
+   * qui ne correspond à rien est nommée.
+   */
+  resolveForAi: protectedProcedure.input(z9.object({ environmentId: z9.string().max(128) })).query(async ({ input, ctx }) => {
+    requireEnvAction(ctx, input.environmentId, "env:read");
+    const env2 = await environmentStore.get(input.environmentId);
+    if (!env2) throw new TRPCError6({ code: "NOT_FOUND", message: `Environment ${input.environmentId} not found` });
+    const [resolved, shared] = await Promise.all([
+      environmentResolver.resolveEnvironment(input.environmentId),
+      environmentResolver.resolveAiSharedKeys(input.environmentId)
+    ]);
+    const filtered = filterEnvForAi(resolved, shared);
+    return {
+      environmentId: env2.id,
+      name: env2.name,
+      scope: env2.scope ?? "global",
+      ...filtered,
+      unresolvedReferences: findUnresolvedReferences(resolved.env, { serverResolved: false, skipKeys: filtered.hiddenKeys })
+    };
+  }),
+  /**
+   * Écrire une variable pour le compte d'une IA, désignée par son nom.
+   *
+   * La route des outils IA (`set_environment_variable`) : les règles de
+   * `planAiVariableWrite` y tiennent quel que soit l'appelant — une IA ne rend
+   * pas un secret public et ne le partage jamais avec les IA. La réponse ne
+   * porte aucune valeur : ce qui vient d'être écrit peut être un secret.
+   */
+  setVariableBlind: protectedProcedure.input(z9.object({
+    environmentId: z9.string().max(128),
+    key: z9.string().min(1).max(256),
+    value: z9.string().max(8192).optional(),
+    pre: z9.string().max(8192).optional(),
+    post: z9.string().max(8192).optional(),
+    isSecret: z9.boolean().optional(),
+    description: z9.string().max(2e3).optional()
+  })).mutation(async ({ input, ctx }) => {
+    requireEnvAction(ctx, input.environmentId, "env:write");
+    const env2 = await environmentStore.get(input.environmentId);
+    if (!env2) throw new TRPCError6({ code: "NOT_FOUND", message: `Environment ${input.environmentId} not found` });
+    const found = Object.entries(env2.variables).find(([, v]) => v.key === input.key);
+    const variableId = found?.[0] ?? randomUUID();
+    let variable;
+    try {
+      variable = planAiVariableWrite(found?.[1], input);
+    } catch (err) {
+      if (err instanceof AiVariableWriteError) throw new TRPCError6({ code: "FORBIDDEN", message: err.message });
+      throw err;
+    }
+    const result = await environmentStore.upsertVariable(input.environmentId, variableId, variable);
+    if (!result) throw new TRPCError6({ code: "INTERNAL_SERVER_ERROR", message: "Failed to write variable" });
+    const written = `${variable.value.pre}${variable.value.value}${variable.value.post}`;
+    let suggestions = [];
+    if (!variable.value.isSecret) {
+      try {
+        suggestions = suggestBuiltinReferences(written, await builtinsForEnvironment(env2));
+      } catch (err) {
+        console.warn("[environment-router] Built-in suggestions unavailable for", input.environmentId + ":", err.message);
+      }
+    }
+    return {
+      environmentId: input.environmentId,
+      variableId,
+      key: variable.key,
+      isSecret: variable.value.isSecret,
+      created: !found,
+      ...suggestions.length > 0 ? { suggestions } : {}
+    };
+  }),
+  /**
+   * L'interrupteur « Hérite / Isolé » d'un environnement de service, pour une
+   * IA : le même geste que l'interface (`ServiceConfigEnv.vue`, `toggleInheritance`)
+   * — ses parents vidés, ou remis à l'environnement global qui l'active. Par
+   * une route dédiée parce que `update` rend l'environnement entier, valeurs
+   * comprises.
+   */
+  setInheritanceBlind: protectedProcedure.input(z9.object({ environmentId: z9.string().max(128), inherit: z9.boolean() })).mutation(async ({ input, ctx }) => {
+    requireEnvAction(ctx, input.environmentId, "env:write");
+    const env2 = await environmentStore.get(input.environmentId);
+    if (!env2) throw new TRPCError6({ code: "NOT_FOUND", message: `Environment ${input.environmentId} not found` });
+    if (env2.scope !== "service" || !env2.activateOn) {
+      throw new TRPCError6({ code: "BAD_REQUEST", message: `Environment ${input.environmentId} is not a service environment: only those inherit from, or are isolated from, the global environment that activates them` });
+    }
+    const updated = await environmentStore.update({ id: env2.id, parentIds: input.inherit ? [env2.activateOn] : [] });
+    if (!updated) throw new TRPCError6({ code: "INTERNAL_SERVER_ERROR", message: "Failed to update inheritance" });
+    return { environmentId: env2.id, isolated: !input.inherit };
+  }),
+  /** Retirer une variable par son nom, pour le compte d'une IA : la réponse ne porte aucune valeur. */
+  removeVariableBlind: protectedProcedure.input(z9.object({ environmentId: z9.string().max(128), key: z9.string().min(1).max(256) })).mutation(async ({ input, ctx }) => {
+    requireEnvAction(ctx, input.environmentId, "env:write");
+    const env2 = await environmentStore.get(input.environmentId);
+    if (!env2) throw new TRPCError6({ code: "NOT_FOUND", message: `Environment ${input.environmentId} not found` });
+    const found = Object.entries(env2.variables).find(([, v]) => v.key === input.key);
+    if (!found) throw new TRPCError6({ code: "NOT_FOUND", message: `Variable ${input.key} not found in environment ${input.environmentId}` });
+    const result = await environmentStore.removeVariable(input.environmentId, found[0]);
+    if (!result) throw new TRPCError6({ code: "INTERNAL_SERVER_ERROR", message: "Failed to remove variable" });
+    return { environmentId: input.environmentId, key: input.key, removed: true };
+  }),
   /**
    * List everywhere a variable key is used inside a project: environments that
    * define it, and variables that reference it through {{environment.KEY}}.
@@ -3422,7 +3613,7 @@ Rules:
 });
 
 // ../server/src/trpc/routers/scenario.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { TRPCError as TRPCError13 } from "@trpc/server";
 import { z as z15 } from "zod";
 
@@ -3539,7 +3730,7 @@ async function* streamWithActiveProvider(opts) {
 
 // ../server/src/services/scenario-runner.ts
 import { mkdir as mkdir4 } from "fs/promises";
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 import { join as join6 } from "path";
 
 // ../server/src/services/scenario-presets.ts
@@ -3881,7 +4072,7 @@ function applyHireDirectivesFromOutput(manager, scenario, output) {
   }
   const hired = [];
   for (const payload of hireDirectives) {
-    const id = `hire-${randomUUID().slice(0, 8)}`;
+    const id = `hire-${randomUUID2().slice(0, 8)}`;
     const position = computeHirePosition(manager, scenario.nodes);
     ensureGroupCanContainNode(scenario, manager.groupId ?? null, position);
     const node = {
@@ -5049,7 +5240,7 @@ var scenarioRouter = router({
   })).mutation(({ input }) => {
     const now = Date.now();
     return createOrBadRequest(async () => scenarioStore.create({
-      id: randomUUID2(),
+      id: randomUUID3(),
       name: input.name,
       icon: input.icon,
       description: input.description,
@@ -5201,7 +5392,7 @@ var scenarioRouter = router({
 });
 
 // ../server/src/trpc/routers/debug.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { TRPCError as TRPCError14 } from "@trpc/server";
 import { z as z16 } from "zod";
 var MAX_BUFFER2 = 300;
@@ -5264,7 +5455,7 @@ var debugRouter = router({
     intervalMs: z16.number().int().min(100).max(5e3).optional(),
     maxTicks: z16.number().int().min(1).max(1e4).optional()
   }).optional()).mutation(({ input }) => {
-    const jobId = randomUUID3();
+    const jobId = randomUUID4();
     const intervalMs = input?.intervalMs ?? 400;
     const maxTicks = input?.maxTicks ?? 500;
     const job = {
@@ -5484,7 +5675,7 @@ var diagnosticsRouter = router({
 import { z as z18 } from "zod";
 
 // ../server/src/services/kanban-queue.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 import { EventEmitter as EventEmitter2 } from "events";
 var KanbanQueueService = class extends EventEmitter2 {
   items = [];
@@ -5512,7 +5703,7 @@ var KanbanQueueService = class extends EventEmitter2 {
       return { id: alreadyRunning.id, addedAt: alreadyRunning.startedAt, ...item };
     }
     const queueItem = {
-      id: randomUUID4(),
+      id: randomUUID5(),
       ...item,
       addedAt: (/* @__PURE__ */ new Date()).toISOString()
     };
@@ -6586,7 +6777,7 @@ async function reconcileOrgCanary(orgId) {
 }
 
 // ../server/src/services/cloud-sync-bridge.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir7, rm as rm3 } from "fs/promises";
 import * as Y2 from "yjs";
 
@@ -6594,7 +6785,7 @@ import * as Y2 from "yjs";
 import { readFileSync, renameSync, rmSync, writeFileSync, mkdirSync } from "fs";
 import { readFile as readFile4 } from "fs/promises";
 import { dirname as dirname4, join as join10 } from "path";
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 import * as Y from "yjs";
 var FILE = "sync-doc.bin";
 function cachePath(orgId) {
@@ -6626,7 +6817,7 @@ function writeSyncDocSync(orgId, state) {
   } catch {
   }
   mkdirSync(dirname4(path), { recursive: true });
-  const tmp = `${path}.${process.pid}.${randomUUID5()}.tmp`;
+  const tmp = `${path}.${process.pid}.${randomUUID6()}.tmp`;
   try {
     writeFileSync(tmp, mergeWith(existing, state), { mode: 384 });
     renameSync(tmp, path);
@@ -6679,7 +6870,7 @@ var OrgSyncConnection = class {
   services = getCollection(this.doc, "services");
   environments = getCollection(this.doc, "environments");
   logParsers = getCollection(this.doc, PARSERS);
-  conn = randomUUID6();
+  conn = randomUUID7();
   link;
   stopped = false;
   initializing = true;
@@ -8627,7 +8818,7 @@ async function migrateSettingsIntoVaults() {
 // ../server/src/migrations/migrate-from-legacy.ts
 import { createRequire } from "module";
 import { randomBytes as randomBytes3, createCipheriv as createCipheriv3, createDecipheriv as createDecipheriv3 } from "crypto";
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
 import {
   readFile as readFile8,
   writeFile as writeFile9,
@@ -8845,11 +9036,11 @@ async function runLegacyMigration(dataDir) {
     const data = await readEncrypted(join15(parsersDir, file));
     if (data?.id) legacyParsers.push(data);
   }
-  const projectMonoId = randomUUID7();
+  const projectMonoId = randomUUID8();
   const envIdMap = {};
   const labelToKey = {};
   for (const [name, legacyEnv] of Object.entries(legacyEnvs)) {
-    envIdMap[name] = randomUUID7();
+    envIdMap[name] = randomUUID8();
     if (legacyEnv?.label) labelToKey[legacyEnv.label] = name;
   }
   const runeEnvs = [];
@@ -8874,7 +9065,7 @@ async function runLegacyMigration(dataDir) {
         if (hasInvalidInterpolation(value)) continue;
         const cleaned = cleanVarKey(key);
         if (inheritedVars[cleaned] === value) continue;
-        const varId = randomUUID7();
+        const varId = randomUUID8();
         variables[varId] = makeVariable(cleaned, value);
         varIdLookup.set(`${envIdMap[name]}:${cleaned}`, varId);
       }
@@ -8895,7 +9086,7 @@ async function runLegacyMigration(dataDir) {
   const serviceIdMap = {};
   const runeServices = [];
   for (const [name, legacy] of Object.entries(legacyServices)) {
-    const id = randomUUID7();
+    const id = randomUUID8();
     serviceIdMap[name] = id;
     const rootPath = legacy.rootPath || "";
     const rootPathCwd = rootPath && rootPath !== "." ? rootPath : "";
@@ -8904,7 +9095,7 @@ async function runLegacyMigration(dataDir) {
       const parts = [cmd.spawnCmd, ...cmd.spawnArgs || []].filter(Boolean);
       if (!parts.length) continue;
       commands.push({
-        id: cmd.id || randomUUID7(),
+        id: cmd.id || randomUUID8(),
         label: "Launch",
         command: parts.join(" "),
         cwd: cmd.spawnOptions?.cwd || "",
@@ -8965,7 +9156,7 @@ async function runLegacyMigration(dataDir) {
       const legacyBootstrapCmds = container.bootstrap?.commands || [];
       if (legacyBootstrapCmds.length > 0) {
         dockerConfig.bootstrapCommands = legacyBootstrapCmds.filter((bs) => bs.cmd || bs.entrypoint).map((bs, idx) => ({
-          id: bs.id || randomUUID7(),
+          id: bs.id || randomUUID8(),
           label: bs.label || `Bootstrap ${idx + 1}`,
           command: bs.cmd || "",
           ...bs.entrypoint ? { entrypoint: bs.entrypoint } : {},
@@ -9013,7 +9204,7 @@ async function runLegacyMigration(dataDir) {
       cwd: serviceCwd,
       runner: dockerConfig ? "docker" : "native",
       shortcuts: (legacy.shortcuts || []).filter((s) => s.spawnCmd || s.label).map((s) => ({
-        id: s.id || randomUUID7(),
+        id: s.id || randomUUID8(),
         label: s.label || s.spawnCmd || "",
         command: [s.spawnCmd, ...s.spawnArgs || []].filter(Boolean).join(" "),
         ...s.spawnOptions?.cwd ? { cwd: s.spawnOptions.cwd } : {}
@@ -9053,7 +9244,7 @@ async function runLegacyMigration(dataDir) {
       );
       if (!svcScopedEnv) {
         svcScopedEnv = {
-          id: randomUUID7(),
+          id: randomUUID8(),
           projectId: projectMonoId,
           name: `${service?.name || name} (${globalEnv.name})`,
           scope: "service",
@@ -9077,7 +9268,7 @@ async function runLegacyMigration(dataDir) {
         const varPost = typeof varData === "object" ? String(varData.suffix ?? "") : "";
         if (!varKey || existingKeys.has(cleanVarKey(varKey))) continue;
         const cleaned = cleanVarKey(varKey);
-        const varId = randomUUID7();
+        const varId = randomUUID8();
         svcScopedEnv.variables[varId] = makeVariable(cleaned, varValue, varPre, varPost);
         existingKeys.add(cleaned);
       }
@@ -9097,7 +9288,7 @@ async function runLegacyMigration(dataDir) {
       );
       if (!svcScopedEnv) {
         svcScopedEnv = {
-          id: randomUUID7(),
+          id: randomUUID8(),
           projectId: projectMonoId,
           name: `${service?.name || serviceName} (${globalEnv.name})`,
           scope: "service",
@@ -9118,7 +9309,7 @@ async function runLegacyMigration(dataDir) {
         const baseEntry = Object.entries(svcScopedEnv.variables).find(([, v]) => v.key === cleaned);
         let varId = baseEntry?.[0];
         if (!varId) {
-          varId = randomUUID7();
+          varId = randomUUID8();
           svcScopedEnv.variables[varId] = {
             key: cleaned,
             value: { value: "", pre: "", post: "", isSecret: false, shareWithAi: false, injectIntoAi: false, required: false, overrideOnly: false, description: "" }
@@ -9148,13 +9339,13 @@ async function runLegacyMigration(dataDir) {
             flatOverrides[varId] = makeVariable(cleaned, value);
           }
         } else {
-          flatOverrides[randomUUID7()] = makeVariable(cleaned, value);
+          flatOverrides[randomUUID8()] = makeVariable(cleaned, value);
         }
       } else {
         const cleaned = cleanVarKey(key);
         const existingVarId = Object.entries(env2.variables).find(([, v]) => v.key === cleaned)?.[0];
         if (!existingVarId) {
-          const varId = randomUUID7();
+          const varId = randomUUID8();
           env2.variables[varId] = makeVariable(cleaned, value);
           varIdLookup.set(`${envId}:${cleaned}`, varId);
         }
@@ -9338,7 +9529,7 @@ async function runOverrideOnlyMigration(dataDir) {
         if (isSameAsBase(value, baseVar)) continue;
         flatOverrides[varId] = makeVariable(cleaned, value);
       } else {
-        flatOverrides[randomUUID7()] = makeVariable(cleaned, value);
+        flatOverrides[randomUUID8()] = makeVariable(cleaned, value);
       }
     }
   }
@@ -9375,7 +9566,7 @@ async function runOverrideOnlyMigration(dataDir) {
       );
       if (!svcScopedEnv) {
         svcScopedEnv = {
-          id: randomUUID7(),
+          id: randomUUID8(),
           projectId: globalEnv["projectId"],
           name: `${service?.["name"] || serviceName} (${globalEnv["name"]})`,
           scope: "service",
@@ -9397,7 +9588,7 @@ async function runOverrideOnlyMigration(dataDir) {
         const baseEntry = Object.entries(svcScopedEnv["variables"]).find(([, v]) => v.key === cleaned);
         let varId = baseEntry?.[0];
         if (!varId) {
-          varId = randomUUID7();
+          varId = randomUUID8();
           svcScopedEnv["variables"][varId] = {
             key: cleaned,
             value: { value: "", pre: "", post: "", isSecret: false, shareWithAi: false, injectIntoAi: false, required: false, overrideOnly: false, description: "" }
@@ -10609,7 +10800,7 @@ async function createLocalServer() {
     ]);
     console.log("[server] Shutdown complete");
   };
-  const { initCompanion } = await import("./companion-OZODV5BR.js");
+  const { initCompanion } = await import("./companion-5DPH3HIO.js");
   initCompanion();
   return { app, server, wss, shutdown };
 }
@@ -11056,4 +11247,4 @@ export {
   startProcess,
   stopProcess
 };
-//# sourceMappingURL=src-SGSG2RSF.js.map
+//# sourceMappingURL=src-XCI5NILM.js.map