@runeya/runeya 2.0.28 → 2.0.31

package/index.js

@@ -201,7 +201,7 @@ function listenWithRetry(server, port, host, wss, maxRetries = 20, delay = 500)
   });
 }
 async function main() {
-  const { createLocalServer, pullEnv, PullEnvError } = await import("./src-ZYEDS2TT.js");
+  const { createLocalServer, pullEnv, PullEnvError } = await import("./src-I5LYBYA2.js");
   if (isPullEnv) {
     if (!serviceArg) {
       console.error("Error: --service (-s) is required with --pull-env");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runeya/runeya",
-  "version": "2.0.28",
+  "version": "2.0.31",
   "type": "module",
   "bin": {
     "runeya": "./index.js"

package/{src-ZYEDS2TT.js → src-I5LYBYA2.js}

@@ -58,7 +58,7 @@ import {
   stableEncryptValue,
   traefikManager,
   writeEntity
-} from "./chunk-Y2R42AXQ.js";
+} from "./chunk-PZHVJHTC.js";
 
 // ../server/src/create-server.ts
 import express from "express";
@@ -5687,10 +5687,54 @@ var KanbanStore = class {
     const res = await callCloud(`/kanban/board/list${query}`);
     return res.data?.boards ?? [];
   }
-  async get(id) {
-    const res = await callCloud(`/kanban/board/get?id=${encodeURIComponent(id)}`);
+  /**
+   * Un tableau. Sans les journaux de ses cartes par défaut : c'est la moitié
+   * lourde du document, et presque aucun appelant n'en a besoin — un agent qui
+   * liste des cartes ne lit pas les commentaires. `withHistory` les redemande
+   * pour les rares cas qui les veulent tous d'un coup.
+   */
+  async get(id, opts = {}) {
+    const query = `?id=${encodeURIComponent(id)}${opts.withHistory ? "&withHistory=true" : ""}`;
+    const res = await callCloud(`/kanban/board/get${query}`);
     return res.data?.board ?? null;
   }
+  /** Le journal d'une seule carte — ce que le contexte d'un agent demande. */
+  async cardHistory(boardId, cardId) {
+    const res = await callCloud(
+      `/kanban/card/history?boardId=${encodeURIComponent(boardId)}&cardId=${encodeURIComponent(cardId)}`
+    );
+    return res.data?.history ?? [];
+  }
+  /**
+   * Commenter une carte, sans réécrire le tableau.
+   *
+   * C'est le geste que l'IA répète le plus, et souvent avec de longs textes :
+   * le faire passer par une sauvegarde de tableau faisait transiter tout le
+   * graphe de cartes à chaque phrase.
+   */
+  async addComment(boardId, cardId, detail, conversationId) {
+    const res = await callCloud("/kanban/card/comment/add", {
+      method: "POST",
+      body: { boardId, cardId, detail, author: "ai", ...conversationId ? { conversationId } : {} }
+    });
+    return res.ok;
+  }
+  /** Poser une entrée de journal non-commentaire (une conversation qui s'ouvre). */
+  async addCardEvent(boardId, cardId, type, detail) {
+    const res = await callCloud("/kanban/card/event/add", {
+      method: "POST",
+      body: { boardId, cardId, type, detail }
+    });
+    return res.ok;
+  }
+  /** Déplacer une carte, sans réécrire le tableau. */
+  async moveCard(boardId, cardId, toColumnId) {
+    const res = await callCloud("/kanban/card/move", {
+      method: "POST",
+      body: { boardId, cardId, toColumnId }
+    });
+    return res.ok;
+  }
   async create(input) {
     const organizationId = await resolveOrganizationId();
     if (!organizationId) return null;
@@ -5739,17 +5783,27 @@ async function executeKanbanCommands(boardId, cardId, commands, conversationId)
       return;
     }
   }
+  let pendingBoardWrite = false;
   for (const cmd of commands) {
     if (cmd.type === "move_card" && cmd.columnTitle) {
-      const moved = moveCard(board, cardId, cmd.columnTitle);
-      if (!moved) console.warn(`[kanban-commands] move_card failed: card=${cardId} target="${cmd.columnTitle}"`);
+      const target = board.columns.find(
+        (c) => c.title.toLowerCase() === cmd.columnTitle.toLowerCase()
+      );
+      if (!target) {
+        console.warn(`[kanban-commands] Target column "${cmd.columnTitle}" not found. Available: ${board.columns.map((c) => c.title).join(", ")}`);
+        continue;
+      }
+      const ok = await kanbanStore.moveCard(board.id, cardId, target.id);
+      if (!ok) console.warn(`[kanban-commands] move_card failed: card=${cardId} target="${cmd.columnTitle}"`);
     } else if (cmd.type === "add_comment" && cmd.comment) {
-      addComment(board, cardId, cmd.comment, conversationId);
+      const ok = await kanbanStore.addComment(board.id, cardId, cmd.comment, conversationId);
+      if (!ok) console.warn(`[kanban-commands] add_comment failed: card=${cardId}`);
     } else if (cmd.type === "add_card" && cmd.columnTitle && cmd.cardTitle) {
       addCardToColumn(board, cmd.columnTitle, cmd.cardTitle, cmd.cardContent);
+      pendingBoardWrite = true;
     }
   }
-  await kanbanStore.update({ id: board.id, columns: board.columns });
+  if (pendingBoardWrite) await kanbanStore.update({ id: board.id, columns: board.columns });
 }
 async function executeKanbanBoardCommands(boardId, commands) {
   if (commands.length === 0) return;
@@ -5762,43 +5816,6 @@ async function executeKanbanBoardCommands(boardId, commands) {
   }
   await kanbanStore.update({ id: board.id, columns: board.columns });
 }
-function moveCard(board, cardId, targetColTitle) {
-  let sourceCol = "";
-  let card = null;
-  let sourceColIdx = -1;
-  let cardIdx = -1;
-  for (let ci = 0; ci < board.columns.length; ci++) {
-    const col = board.columns[ci];
-    const idx = col.cards.findIndex((c) => c.id === cardId);
-    if (idx !== -1) {
-      sourceCol = col.title;
-      card = col.cards[idx];
-      sourceColIdx = ci;
-      cardIdx = idx;
-      break;
-    }
-  }
-  if (!card || sourceColIdx === -1) return false;
-  const targetCol = board.columns.find(
-    (c) => c.title.toLowerCase() === targetColTitle.toLowerCase()
-  );
-  if (!targetCol) {
-    console.warn(`[kanban-commands] Target column "${targetColTitle}" not found. Available: ${board.columns.map((c) => c.title).join(", ")}`);
-    return false;
-  }
-  if (targetCol.id === board.columns[sourceColIdx].id) return true;
-  board.columns[sourceColIdx].cards.splice(cardIdx, 1);
-  card.order = targetCol.cards.length;
-  card.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-  card.history = [...card.history ?? [], {
-    type: "moved",
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    detail: `"${sourceCol}" \u2192 "${targetCol.title}"`,
-    author: "ai"
-  }];
-  targetCol.cards.push(card);
-  return true;
-}
 function addCardToColumn(board, columnTitle, cardTitle, cardContent) {
   const col = board.columns.find((c) => c.title.toLowerCase() === columnTitle.toLowerCase());
   if (!col) return;
@@ -5815,28 +5832,12 @@ function addCardToColumn(board, columnTitle, cardTitle, cardContent) {
   };
   col.cards.push(card);
 }
-function addComment(board, cardId, comment, conversationId) {
-  for (const col of board.columns) {
-    const card = col.cards.find((c) => c.id === cardId);
-    if (card) {
-      card.history = [...card.history ?? [], {
-        type: "comment",
-        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        detail: comment,
-        author: "ai",
-        ...conversationId ? { conversationId } : {}
-      }];
-      card.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
-      return;
-    }
-  }
-}
 function formatSize(bytes) {
   if (bytes < 1024) return `${bytes} o`;
   if (bytes < 1024 * 1024) return `${Math.round(bytes / 1024)} Ko`;
   return `${(bytes / (1024 * 1024)).toFixed(1).replace(".", ",")} Mo`;
 }
-function generateKanbanSystemPrompt(board, cardId) {
+function generateKanbanSystemPrompt(board, cardId, history) {
   let currentColTitle = "";
   let card = null;
   for (const col of board.columns) {
@@ -5866,7 +5867,8 @@ function generateKanbanSystemPrompt(board, cardId) {
   }
   lines.push("");
   if (card) {
-    const comments = (card.history ?? []).filter((e) => e.type === "comment");
+    const events = history ?? card.history ?? [];
+    const comments = events.filter((e) => e.type === "comment");
     if (comments.length > 0) {
       lines.push("### Commentaires existants sur cette carte :");
       lines.push("");
@@ -5881,7 +5883,7 @@ function generateKanbanSystemPrompt(board, cardId) {
   }
   if (card) {
     const files = card.attachments ?? [];
-    const commentFiles = (card.history ?? []).flatMap((e) => e.attachments ?? []);
+    const commentFiles = (history ?? card.history ?? []).flatMap((e) => e.attachments ?? []);
     const all = [...files, ...commentFiles];
     if (all.length > 0) {
       lines.push(`### Pi\xE8ces jointes disponibles (${all.length})`);
@@ -6129,7 +6131,7 @@ function tailTranscript(opts) {
 
 // ../server/src/services/ai-runners/claude-pty-runner.ts
 async function getAgentManager() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-2P4THUVA.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-KGITN4AE.js");
   return agentManager2;
 }
 function buildPtyArgs(params, sessionId, opts) {
@@ -6782,7 +6784,7 @@ async function shutdownCodexAppServer() {
   }
 }
 async function getAgentManager2() {
-  const { agentManager: agentManager2 } = await import("./agent-manager-2P4THUVA.js");
+  const { agentManager: agentManager2 } = await import("./agent-manager-KGITN4AE.js");
   return agentManager2;
 }
 function parseRuneyaCurlCommand(command) {
@@ -7466,7 +7468,13 @@ async function buildCliSystemContext(conv, jwt) {
   if (conv?.kanbanBoardId) {
     const kanbanBoard = await kanbanStore.get(conv.kanbanBoardId);
     if (kanbanBoard) {
-      systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(kanbanBoard, conv.kanbanCardId) : generateKanbanPopulatePrompt(kanbanBoard));
+      systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(
+        kanbanBoard,
+        conv.kanbanCardId,
+        // Le journal ne vient plus avec le tableau : le contexte de l'agent
+        // le demande pour la seule carte qui le concerne.
+        await kanbanStore.cardHistory(kanbanBoard.id, conv.kanbanCardId)
+      ) : generateKanbanPopulatePrompt(kanbanBoard));
     }
   }
   return systemContext;
@@ -7867,7 +7875,13 @@ ${input.prompt}` : input.prompt;
     if (conv.kanbanBoardId) {
       const kanbanBoard = await kanbanStore.get(conv.kanbanBoardId);
       if (kanbanBoard) {
-        systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(kanbanBoard, conv.kanbanCardId) : generateKanbanPopulatePrompt(kanbanBoard));
+        systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(
+          kanbanBoard,
+          conv.kanbanCardId,
+          // Le journal ne vient plus avec le tableau : le contexte de l'agent
+          // le demande pour la seule carte qui le concerne.
+          await kanbanStore.cardHistory(kanbanBoard.id, conv.kanbanCardId)
+        ) : generateKanbanPopulatePrompt(kanbanBoard));
       }
     }
     const mcpServerPath = fileURLToPath(new URL("../mcp-server/index.js", import.meta.url));
@@ -7982,7 +7996,13 @@ ${input.prompt}` : input.prompt;
     if (conv.kanbanBoardId) {
       const kanbanBoard = await kanbanStore.get(conv.kanbanBoardId);
       if (kanbanBoard) {
-        systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(kanbanBoard, conv.kanbanCardId) : generateKanbanPopulatePrompt(kanbanBoard));
+        systemContext += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(
+          kanbanBoard,
+          conv.kanbanCardId,
+          // Le journal ne vient plus avec le tableau : le contexte de l'agent
+          // le demande pour la seule carte qui le concerne.
+          await kanbanStore.cardHistory(kanbanBoard.id, conv.kanbanCardId)
+        ) : generateKanbanPopulatePrompt(kanbanBoard));
       }
     }
     const resolvedImages = input.imageIds && input.imageIds.length > 0 ? await resolveImagesToBase64(input.imageIds.map((id) => ({ imageId: id, mimeType: "" })), input.conversationId) : [];
@@ -8075,7 +8095,13 @@ ${input.prompt}` : input.prompt;
     if (conv && conv.kanbanBoardId) {
       const kanbanBoard = await kanbanStore.get(conv.kanbanBoardId);
       if (kanbanBoard) {
-        system += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(kanbanBoard, conv.kanbanCardId) : generateKanbanPopulatePrompt(kanbanBoard));
+        system += "\n\n" + (conv.kanbanCardId ? generateKanbanSystemPrompt(
+          kanbanBoard,
+          conv.kanbanCardId,
+          // Le journal ne vient plus avec le tableau : le contexte de l'agent
+          // le demande pour la seule carte qui le concerne.
+          await kanbanStore.cardHistory(kanbanBoard.id, conv.kanbanCardId)
+        ) : generateKanbanPopulatePrompt(kanbanBoard));
       }
     }
     const resolvedImages = input.imageIds && input.imageIds.length > 0 ? await resolveImagesToBase64(input.imageIds.map((id) => ({ imageId: id, mimeType: "" })), input.conversationId) : [];
@@ -10769,19 +10795,8 @@ var KanbanQueueService = class extends EventEmitter4 {
     this.running.push(runItem);
     this.emit("changed");
     const eventType = item.scenarioId ? "scenario_started" : "conversation_started";
-    for (const col of board.columns) {
-      const target = col.cards.find((c) => c.id === item.cardId);
-      if (target) {
-        target.history = [...target.history ?? [], {
-          type: eventType,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-          detail: conv.id
-        }];
-        kanbanStore.update({ id: board.id, columns: board.columns }).catch(() => {
-        });
-        break;
-      }
-    }
+    kanbanStore.addCardEvent(board.id, item.cardId, eventType, conv.id).catch(() => {
+    });
     if (item.scenarioId) {
       void runScenario(conv.id, item.scenarioId, cardContent, {
         runnerOverride: item.runner,
@@ -10802,7 +10817,8 @@ var KanbanQueueService = class extends EventEmitter4 {
     try {
       const model = item.model || (item.runner === "codex" ? "" : "claude-opus-4-6");
       const starter = item.runner === "codex" ? startCodexSession : startClaudeCodeSession;
-      const { done } = await starter(runItem.conversationId, cardContent, { model });
+      const jwt = await signJwt();
+      const { done } = await starter(runItem.conversationId, cardContent, { model, jwt });
       await done;
     } finally {
       this.finishItem(runItem.id);
@@ -10888,7 +10904,9 @@ var kanbanQueueRouter = router({
 });
 
 // ../server/src/trpc/routers/kanban.ts
-import { mkdir as mkdir14, writeFile as writeFile11 } from "fs/promises";
+import { mkdir as mkdir14, readdir as readdir5, rm as rm2, stat as stat3, writeFile as writeFile11 } from "fs/promises";
+import { createHash } from "crypto";
+import { tmpdir } from "os";
 import { join as join16 } from "path";
 import { z as z20 } from "zod";
 import { TRPCError as TRPCError17 } from "@trpc/server";
@@ -10900,7 +10918,7 @@ function summarizeCard(card, boardId, columnTitle) {
     title: card.title,
     markdown: card.markdown ?? "",
     assignees: (card.assignees ?? []).map((a) => a.name),
-    commentCount: (card.history ?? []).filter((e) => e.type === "comment").length,
+    commentCount: card.commentCount ?? (card.history ?? []).filter((e) => e.type === "comment").length,
     attachmentCount: (card.attachments ?? []).length,
     // Metadata only — the bytes are fetched on demand by `downloadAttachment`.
     attachments: (card.attachments ?? []).map((f) => ({
@@ -10931,13 +10949,54 @@ function normalize(value) {
   return value.normalize("NFD").replace(new RegExp("\\p{Diacritic}", "gu"), "").toLowerCase();
 }
 var ATTACHMENT_ID_REGEX = /^[A-Za-z0-9_-]{1,128}$/;
+function safeDecode(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return "";
+  }
+}
 var MAX_ATTACHMENT_BYTES = 55 * 1024 * 1024;
 function attachmentCacheDir() {
-  return join16(env.DATA_DIR, "kanban-attachments");
+  return join16(tmpdir(), "runeya-kanban-attachments");
+}
+var ATTACHMENT_CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
+async function purgeStaleAttachments(dir, ttlMs = ATTACHMENT_CACHE_TTL_MS) {
+  try {
+    const cutoff = Date.now() - ttlMs;
+    for (const name of await readdir5(dir)) {
+      const path = join16(dir, name);
+      const info = await stat3(path).catch(() => null);
+      if (info && info.mtimeMs < cutoff) await rm2(path, { force: true });
+    }
+  } catch {
+  }
+}
+function attachmentCacheDirs() {
+  return [attachmentCacheDir(), join16(env.DATA_DIR, "kanban-attachments")];
+}
+async function storeAttachment(id, name, body, dirs = attachmentCacheDirs()) {
+  const refusals = [];
+  for (const dir of dirs) {
+    try {
+      await mkdir14(dir, { recursive: true });
+      const path = join16(dir, safeLocalName(id, name));
+      await writeFile11(path, body);
+      void purgeStaleAttachments(dir);
+      return path;
+    } catch (err) {
+      refusals.push(`${dir} (${err instanceof Error ? err.message : String(err)})`);
+    }
+  }
+  throw new TRPCError17({
+    code: "INTERNAL_SERVER_ERROR",
+    message: `Impossible d'\xE9crire la pi\xE8ce jointe sur cette machine. Emplacements essay\xE9s : ${refusals.join(" ; ")}. V\xE9rifiez les droits d'\xE9criture, ou l'espace disque.`
+  });
 }
 function safeLocalName(id, name) {
+  const base = createHash("sha256").update(id).digest("hex").slice(0, 32);
   const ext = /\.([A-Za-z0-9]{1,12})$/.exec(name)?.[1];
-  return ext ? `${id}.${ext.toLowerCase()}` : id;
+  return ext ? `${base}.${ext.toLowerCase()}` : base;
 }
 var kanbanRouter = router({
   /**
@@ -11059,11 +11118,9 @@ var kanbanRouter = router({
     }
     const contentType = res.headers.get("content-type") ?? "application/octet-stream";
     const disposition = res.headers.get("content-disposition") ?? "";
-    const name = /filename="([^"]*)"/.exec(disposition)?.[1] || id;
-    const dir = attachmentCacheDir();
-    await mkdir14(dir, { recursive: true });
-    const path = join16(dir, safeLocalName(id, name));
-    await writeFile11(path, body);
+    const encoded = /filename\*=UTF-8''([^;]+)/i.exec(disposition)?.[1];
+    const name = (encoded ? safeDecode(encoded) : "") || /filename="([^"]*)"/.exec(disposition)?.[1] || id;
+    const path = await storeAttachment(id, name, body);
     return { path, name, contentType, size: body.length };
   })
 });
@@ -11191,7 +11248,7 @@ var utilityRouter = router({
 // ../server/src/trpc/routers/wiki.ts
 import { z as z23 } from "zod";
 import { TRPCError as TRPCError19 } from "@trpc/server";
-import { readFile as readFile13, readdir as readdir5, stat as stat3, realpath, writeFile as writeFile12, mkdir as mkdir15, rename as rename10, rm as rm2 } from "fs/promises";
+import { readFile as readFile13, readdir as readdir6, stat as stat4, realpath, writeFile as writeFile12, mkdir as mkdir15, rename as rename10, rm as rm3 } from "fs/promises";
 import { resolve as resolvePath, join as join17, relative, sep as sep3, dirname as dirname3 } from "path";
 var SCOPE_SCHEMA = z23.union([
   z23.literal("global"),
@@ -11254,7 +11311,7 @@ async function walkLocal(root, dir, depth, counter) {
   if (depth > MAX_DEPTH || counter.n >= MAX_FILES) return [];
   let entries;
   try {
-    entries = await readdir5(dir, { withFileTypes: true });
+    entries = await readdir6(dir, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -11327,7 +11384,7 @@ var wikiRouter = router({
       return agentManager.agentQuery(target.agentId, "wiki.readRepoMarkdown", { cwd: target.cwd, path: input.path });
     }
     const file = await resolveSafeLocal(target.root, input.path, true);
-    const s = await stat3(file);
+    const s = await stat4(file);
     if (!s.isFile()) throw new TRPCError19({ code: "BAD_REQUEST", message: "Pas un fichier" });
     if (s.size > MAX_FILE_BYTES) throw new TRPCError19({ code: "PAYLOAD_TOO_LARGE", message: "Fichier trop volumineux" });
     const content = await readFile13(file, "utf-8");
@@ -11356,7 +11413,7 @@ var wikiRouter = router({
     }
     const file = await resolveSafeLocal(target.root, input.path, false);
     try {
-      await stat3(file);
+      await stat4(file);
       throw new TRPCError19({ code: "CONFLICT", message: "Fichier d\xE9j\xE0 existant" });
     } catch (err) {
       if (err instanceof TRPCError19) throw err;
@@ -11382,7 +11439,7 @@ var wikiRouter = router({
     const from = await resolveSafeLocal(target.root, input.fromPath, true);
     const to = await resolveSafeLocal(target.root, input.toPath, false);
     try {
-      await stat3(to);
+      await stat4(to);
       throw new TRPCError19({ code: "CONFLICT", message: "La cible existe d\xE9j\xE0" });
     } catch (err) {
       if (err instanceof TRPCError19) throw err;
@@ -11411,7 +11468,7 @@ var wikiRouter = router({
     }
     const fp = await resolveSafeLocal(target.root, input.path, true);
     if (fp === target.root) throw new TRPCError19({ code: "FORBIDDEN", message: "Impossible de supprimer la racine" });
-    await rm2(fp, { recursive: true, force: true });
+    await rm3(fp, { recursive: true, force: true });
     return { path: input.path, ok: true };
   })
 });
@@ -11849,7 +11906,7 @@ var cloudSyncBridge = new CloudSyncBridge();
 
 // ../server/src/services/master-password.ts
 import { randomBytes as randomBytes4, createCipheriv, createDecipheriv } from "crypto";
-import { readFile as readFile15, writeFile as writeFile14, chmod as chmod10, stat as stat4, rename as rename12 } from "fs/promises";
+import { readFile as readFile15, writeFile as writeFile14, chmod as chmod10, stat as stat5, rename as rename12 } from "fs/promises";
 import { join as join19 } from "path";
 import { Entry } from "@napi-rs/keyring";
 import { hashRaw as argon2HashRaw } from "@node-rs/argon2";
@@ -11862,7 +11919,7 @@ var CANARY_PLAINTEXT = "runeya:v1:key-verification";
 var MAX_KEY_FILE_SIZE = 1024;
 var ARGON2_OPTIONS = { memoryCost: 65536, timeCost: 3, parallelism: 4, outputLen: 32 };
 async function readKeyFile(filePath) {
-  const s = await stat4(filePath);
+  const s = await stat5(filePath);
   if (s.size > MAX_KEY_FILE_SIZE) throw new Error(`Fichier suspect : ${filePath} (${s.size} octets)`);
   return readFile15(filePath);
 }
@@ -11998,7 +12055,7 @@ async function readVerifyFile(dataDir) {
 }
 async function hasVerifyFile(dataDir) {
   try {
-    await stat4(join19(dataDir, VERIFY_FILENAME));
+    await stat5(join19(dataDir, VERIFY_FILENAME));
     return true;
   } catch {
     return false;
@@ -12006,7 +12063,7 @@ async function hasVerifyFile(dataDir) {
 }
 async function hasEncryptedKeyFile(dataDir) {
   try {
-    await stat4(join19(dataDir, ENCRYPTED_KEY_FILENAME));
+    await stat5(join19(dataDir, ENCRYPTED_KEY_FILENAME));
     return true;
   } catch {
     return false;
@@ -12139,7 +12196,7 @@ var MigrationEngine = class {
 var migrationEngine = new MigrationEngine();
 
 // ../server/src/services/file-security.ts
-import { chmod as chmod11, stat as stat5 } from "fs/promises";
+import { chmod as chmod11, stat as stat6 } from "fs/promises";
 import { join as join20 } from "path";
 var SENSITIVE_FILES = [
   "agents.json",
@@ -12154,7 +12211,7 @@ async function ensureFilePermissions() {
   for (const filename of SENSITIVE_FILES) {
     const filepath = join20(env.DATA_DIR, filename);
     try {
-      const stats = await stat5(filepath);
+      const stats = await stat6(filepath);
       const mode = stats.mode & 511;
       if (mode !== SECURE_MODE) {
         console.warn("[security] File", filename, "has mode", mode.toString(8) + ", fixing to 600");
@@ -12221,7 +12278,7 @@ import {
   rename as rename13,
   mkdir as mkdir17,
   access as access2,
-  readdir as readdir6
+  readdir as readdir7
 } from "fs/promises";
 import { join as join22 } from "path";
 var _require = createRequire(import.meta.url);
@@ -12390,14 +12447,14 @@ async function runLegacyMigration(dataDir) {
     }
   }
   const envsDir = join22(dbsDir, "envs");
-  const envFiles = (await readdir6(envsDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
+  const envFiles = (await readdir7(envsDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
   const legacyEnvs = {};
   for (const file of envFiles) {
     const name = file.replace(".encrypted.json", "");
     legacyEnvs[name] = await readEncrypted(join22(envsDir, file));
   }
   const servicesDir = join22(dbsDir, "services");
-  const serviceFiles = (await readdir6(servicesDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
+  const serviceFiles = (await readdir7(servicesDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
   const legacyServices = {};
   for (const file of serviceFiles) {
     const name = file.replace(".encrypted.json", "");
@@ -12406,7 +12463,7 @@ async function runLegacyMigration(dataDir) {
     if (data?.label) legacyServices[name] = data;
   }
   const overridesDir = join22(dbsDir, "overrides");
-  const overrideFiles = (await readdir6(overridesDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
+  const overrideFiles = (await readdir7(overridesDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
   const legacyServiceOverrides = {};
   const legacyEnvOverrides = {};
   for (const file of overrideFiles) {
@@ -12420,7 +12477,7 @@ async function runLegacyMigration(dataDir) {
     }
   }
   const parsersDir = join22(dbsDir, "parsers");
-  const parserFiles = (await readdir6(parsersDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
+  const parserFiles = (await readdir7(parsersDir).catch(() => [])).filter((f) => f.endsWith(".encrypted.json"));
   const legacyParsers = [];
   for (const file of parserFiles) {
     const data = await readEncrypted(join22(parsersDir, file));
@@ -12800,7 +12857,7 @@ ${p.transform ?? ""}`,
 }
 async function findLegacyKeyInBackup(dataDir) {
   try {
-    const entries = await readdir6(dataDir);
+    const entries = await readdir7(dataDir);
     const backupDirs = entries.filter((e) => e.startsWith("backup-")).sort((a, b) => a < b ? -1 : a > b ? 1 : 0).reverse();
     for (const dir of backupDirs) {
       const keyJsonPath = join22(dataDir, dir, "dbs", "encryption-key.json");
@@ -12834,7 +12891,7 @@ async function runOverrideOnlyMigration(dataDir) {
   let overrideFiles = [];
   for (const dir of candidateDirs) {
     try {
-      const files = (await readdir6(dir)).filter((f) => f.endsWith(".encrypted.json"));
+      const files = (await readdir7(dir)).filter((f) => f.endsWith(".encrypted.json"));
       if (files.length > 0) {
         overridesDir = dir;
         overrideFiles = files;
@@ -13010,7 +13067,7 @@ async function runOverrideOnlyMigration(dataDir) {
 
 // ../server/src/services/server-state.ts
 import { join as join23 } from "path";
-import { stat as stat6 } from "fs/promises";
+import { stat as stat7 } from "fs/promises";
 var ENCRYPTED_KEY_FILENAME2 = ".encryption.key.enc";
 var VERIFY_FILENAME2 = ".runeya-verify";
 async function getServerState() {
@@ -13019,17 +13076,17 @@ async function getServerState() {
   let hasVerify = false;
   let hasData = false;
   try {
-    await stat6(join23(dataDir, ENCRYPTED_KEY_FILENAME2));
+    await stat7(join23(dataDir, ENCRYPTED_KEY_FILENAME2));
     hasEncFile = true;
   } catch {
   }
   try {
-    await stat6(join23(dataDir, VERIFY_FILENAME2));
+    await stat7(join23(dataDir, VERIFY_FILENAME2));
     hasVerify = true;
   } catch {
   }
   try {
-    await stat6(join23(dataDir, "projects.json"));
+    await stat7(join23(dataDir, "projects.json"));
     hasData = true;
   } catch {
   }
@@ -14179,4 +14236,4 @@ export {
   createLocalServer,
   pullEnv
 };
-//# sourceMappingURL=src-ZYEDS2TT.js.map
+//# sourceMappingURL=src-I5LYBYA2.js.map