@slaw-ai/server 2026.611.0

package/dist/auth/better-auth.js

@@ -0,0 +1,148 @@
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { toNodeHandler } from "better-auth/node";
+import { authAccounts, authSessions, authUsers, authVerifications, } from "@slaw-ai/db";
+import { resolveSlawInstanceId } from "../home-paths.js";
+const AUTH_COOKIE_PREFIX_FALLBACK = "default";
+const AUTH_COOKIE_PREFIX_INVALID_SEGMENTS_RE = /[^a-zA-Z0-9_-]+/g;
+export function deriveAuthCookiePrefix(instanceId = resolveSlawInstanceId()) {
+    const scopedInstanceId = instanceId
+        .trim()
+        .replace(AUTH_COOKIE_PREFIX_INVALID_SEGMENTS_RE, "-")
+        .replace(/^-+|-+$/g, "") || AUTH_COOKIE_PREFIX_FALLBACK;
+    return `slaw-${scopedInstanceId}`;
+}
+export function buildBetterAuthAdvancedOptions(input) {
+    return {
+        cookiePrefix: deriveAuthCookiePrefix(),
+        ...(input.disableSecureCookies ? { useSecureCookies: false } : {}),
+    };
+}
+export function shouldDisableSecureAuthCookies(input) {
+    const publicUrl = (input.publicUrl?.trim() ||
+        (input.authBaseUrlMode === "explicit" ? input.authPublicBaseUrl?.trim() : ""));
+    if (publicUrl)
+        return publicUrl.startsWith("http://");
+    return (input.deploymentMode === "authenticated" &&
+        ((input.deploymentExposure === "private" && input.authBaseUrlMode === "auto") ||
+            input.deploymentExposure === undefined));
+}
+function headersFromNodeHeaders(rawHeaders) {
+    const headers = new Headers();
+    for (const [key, raw] of Object.entries(rawHeaders)) {
+        if (!raw)
+            continue;
+        if (Array.isArray(raw)) {
+            for (const value of raw)
+                headers.append(key, value);
+            continue;
+        }
+        headers.set(key, raw);
+    }
+    return headers;
+}
+function headersFromExpressRequest(req) {
+    return headersFromNodeHeaders(req.headers);
+}
+export function deriveAuthTrustedOrigins(config, opts) {
+    const baseUrl = config.authBaseUrlMode === "explicit" ? config.authPublicBaseUrl : undefined;
+    const trustedOrigins = new Set();
+    if (baseUrl) {
+        try {
+            trustedOrigins.add(new URL(baseUrl).origin);
+        }
+        catch {
+            // Better Auth will surface invalid base URL separately.
+        }
+    }
+    if (config.deploymentMode === "authenticated") {
+        const port = opts?.listenPort ?? config.port;
+        const needsPortVariants = port !== 80 && port !== 443;
+        for (const hostname of config.allowedHostnames) {
+            const trimmed = hostname.trim().toLowerCase();
+            if (!trimmed)
+                continue;
+            trustedOrigins.add(`https://${trimmed}`);
+            trustedOrigins.add(`http://${trimmed}`);
+            if (needsPortVariants) {
+                trustedOrigins.add(`https://${trimmed}:${port}`);
+                trustedOrigins.add(`http://${trimmed}:${port}`);
+            }
+        }
+    }
+    return Array.from(trustedOrigins);
+}
+export function createBetterAuthInstance(db, config, trustedOrigins) {
+    const baseUrl = config.authBaseUrlMode === "explicit" ? config.authPublicBaseUrl : undefined;
+    const publicUrl = process.env.SLAW_PUBLIC_URL?.trim() || baseUrl;
+    const secret = process.env.BETTER_AUTH_SECRET ?? process.env.SLAW_AGENT_JWT_SECRET;
+    if (!secret) {
+        throw new Error("BETTER_AUTH_SECRET (or SLAW_AGENT_JWT_SECRET) must be set. " +
+            "For local development, set BETTER_AUTH_SECRET=slaw-dev-secret in your .env file.");
+    }
+    const disableSecureCookies = shouldDisableSecureAuthCookies({
+        deploymentMode: config.deploymentMode,
+        deploymentExposure: config.deploymentExposure,
+        authBaseUrlMode: config.authBaseUrlMode,
+        authPublicBaseUrl: config.authPublicBaseUrl,
+        publicUrl,
+    });
+    const authConfig = {
+        baseURL: baseUrl,
+        secret,
+        trustedOrigins,
+        database: drizzleAdapter(db, {
+            provider: "pg",
+            schema: {
+                user: authUsers,
+                session: authSessions,
+                account: authAccounts,
+                verification: authVerifications,
+            },
+        }),
+        emailAndPassword: {
+            enabled: true,
+            requireEmailVerification: false,
+            disableSignUp: config.authDisableSignUp,
+        },
+        advanced: buildBetterAuthAdvancedOptions({ disableSecureCookies }),
+    };
+    if (!baseUrl) {
+        delete authConfig.baseURL;
+    }
+    return betterAuth(authConfig);
+}
+export function createBetterAuthHandler(auth) {
+    const handler = toNodeHandler(auth);
+    return (req, res, next) => {
+        void Promise.resolve(handler(req, res)).catch(next);
+    };
+}
+export async function resolveBetterAuthSessionFromHeaders(auth, headers) {
+    const api = auth.api;
+    if (!api?.getSession)
+        return null;
+    const sessionValue = await api.getSession({
+        headers,
+    });
+    if (!sessionValue || typeof sessionValue !== "object")
+        return null;
+    const value = sessionValue;
+    const session = value.session?.id && value.session.userId
+        ? { id: value.session.id, userId: value.session.userId }
+        : null;
+    const user = value.user?.id
+        ? {
+            id: value.user.id,
+            email: value.user.email ?? null,
+            name: value.user.name ?? null,
+        }
+        : null;
+    if (!session || !user)
+        return null;
+    return { session, user };
+}
+export async function resolveBetterAuthSession(auth, req) {
+    return resolveBetterAuthSessionFromHeaders(auth, headersFromExpressRequest(req));
+}
+//# sourceMappingURL=better-auth.js.map

package/dist/auth/better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"better-auth.js","sourceRoot":"","sources":["../../src/auth/better-auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,SAAS,EACT,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAezD,MAAM,2BAA2B,GAAG,SAAS,CAAC;AAC9C,MAAM,sCAAsC,GAAG,kBAAkB,CAAC;AAElE,MAAM,UAAU,sBAAsB,CAAC,UAAU,GAAG,qBAAqB,EAAE;IACzE,MAAM,gBAAgB,GAAG,UAAU;SAChC,IAAI,EAAE;SACN,OAAO,CAAC,sCAAsC,EAAE,GAAG,CAAC;SACpD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,2BAA2B,CAAC;IAC1D,OAAO,QAAQ,gBAAgB,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAwC;IACrF,OAAO;QACL,YAAY,EAAE,sBAAsB,EAAE;QACtC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAM9C;IACC,MAAM,SAAS,GAAG,CAChB,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE;QACvB,CAAC,KAAK,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9E,CAAC;IACF,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAEtD,OAAO,CACL,KAAK,CAAC,cAAc,KAAK,eAAe;QACxC,CACE,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,MAAM,CAAC;YAC5E,KAAK,CAAC,kBAAkB,KAAK,SAAS,CACvC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,UAA+B;IAC7D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,GAAG;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAY;IAC7C,OAAO,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,IAA8B;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,iBAAiB,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;QACtD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,cAAc,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;YACzC,cAAc,CAAC,GAAG,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;YACxC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,cAAc,CAAC,GAAG,CAAC,WAAW,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjD,cAAc,CAAC,GAAG,CAAC,UAAU,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EAAM,EAAE,MAAc,EAAE,cAAwB;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6DAA6D;YAC7D,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;QAC1D,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,OAAO;QAChB,MAAM;QACN,cAAc;QACd,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,YAAY;gBACrB,YAAY,EAAE,iBAAiB;aAChC;SACF,CAAC;QACF,gBAAgB,EAAE;YAChB,OAAO,EAAE,IAAI;YACb,wBAAwB,EAAE,KAAK;YAC/B,aAAa,EAAE,MAAM,CAAC,iBAAiB;SACxC;QACD,QAAQ,EAAE,8BAA8B,CAAC,EAAE,oBAAoB,EAAE,CAAC;KACnE,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAQ,UAAmC,CAAC,OAAO,CAAC;IACtD,CAAC;IAED,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAwB;IAC9D,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACxB,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,IAAwB,EACxB,OAAgB;IAEhB,MAAM,GAAG,GAAI,IAAmF,CAAC,GAAG,CAAC;IACrG,IAAI,CAAC,GAAG,EAAE,UAAU;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC;QACxC,OAAO;KACR,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,KAAK,GAAG,YAGb,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;QACvD,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE;QACxD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;QACzB,CAAC,CAAC;YACE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;SAC9B;QACH,CAAC,CAAC,IAAI,CAAC;IAET,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAwB,EACxB,GAAY;IAEZ,OAAO,mCAAmC,CAAC,IAAI,EAAE,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC"}

package/dist/config-file.d.ts

@@ -0,0 +1,24 @@
+import { type SlawConfig, type BotfatherConfig } from "@slaw-ai/shared";
+export declare function readConfigFile(): SlawConfig | null;
+/**
+ * Read just the botfather section, resiliently. A runtime "Connect to Control
+ * Tower" writes the config file with a botfather section, but a file written on
+ * a zero-config (`pnpm dev`) setup may be missing the required `database`/
+ * `logging`/`server` sections — in which case the full {@link readConfigFile}
+ * parse throws and returns null, silently dropping the saved tower connection
+ * on every restart. This salvages the botfather section on its own so the
+ * connection survives even when the rest of the file is partial/invalid.
+ */
+export declare function readBotfatherConfigSection(): BotfatherConfig | undefined;
+/**
+ * Persist a botfather config section to the on-disk config file, so a runtime
+ * "Connect to Control Tower" survives restart. Merges into the existing file;
+ * tolerates a missing file by writing a minimal one. Best-effort.
+ *
+ * Note: on a zero-config setup this file may not contain the other required
+ * sections (database/logging/server), so the strict {@link readConfigFile}
+ * would reject it. That is fine — the loader reads the botfather url back via
+ * {@link readBotfatherConfigSection}, which validates this section on its own.
+ */
+export declare function writeBotfatherConfigSection(section: BotfatherConfig): void;
+//# sourceMappingURL=config-file.d.ts.map

package/dist/config-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.d.ts","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAGzB,wBAAgB,cAAc,IAAI,UAAU,GAAG,IAAI,CAWlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,IAAI,eAAe,GAAG,SAAS,CAUxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAoB1E"}

package/dist/config-file.js

@@ -0,0 +1,73 @@
+import fs from "node:fs";
+import path from "node:path";
+import { slawConfigSchema, botfatherConfigSchema, } from "@slaw-ai/shared";
+import { resolveSlawConfigPath } from "./paths.js";
+export function readConfigFile() {
+    const configPath = resolveSlawConfigPath();
+    if (!fs.existsSync(configPath))
+        return null;
+    try {
+        const raw = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        return slawConfigSchema.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read just the botfather section, resiliently. A runtime "Connect to Control
+ * Tower" writes the config file with a botfather section, but a file written on
+ * a zero-config (`pnpm dev`) setup may be missing the required `database`/
+ * `logging`/`server` sections — in which case the full {@link readConfigFile}
+ * parse throws and returns null, silently dropping the saved tower connection
+ * on every restart. This salvages the botfather section on its own so the
+ * connection survives even when the rest of the file is partial/invalid.
+ */
+export function readBotfatherConfigSection() {
+    const configPath = resolveSlawConfigPath();
+    if (!fs.existsSync(configPath))
+        return undefined;
+    try {
+        const raw = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        if (raw.botfather === undefined)
+            return undefined;
+        return botfatherConfigSchema.parse(raw.botfather);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Persist a botfather config section to the on-disk config file, so a runtime
+ * "Connect to Control Tower" survives restart. Merges into the existing file;
+ * tolerates a missing file by writing a minimal one. Best-effort.
+ *
+ * Note: on a zero-config setup this file may not contain the other required
+ * sections (database/logging/server), so the strict {@link readConfigFile}
+ * would reject it. That is fine — the loader reads the botfather url back via
+ * {@link readBotfatherConfigSection}, which validates this section on its own.
+ */
+export function writeBotfatherConfigSection(section) {
+    const configPath = resolveSlawConfigPath();
+    let current = {};
+    try {
+        if (fs.existsSync(configPath)) {
+            current = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+        }
+    }
+    catch {
+        current = {};
+    }
+    // strip undefined (e.g. url cleared on disconnect) so the JSON stays clean
+    const cleaned = {};
+    for (const [k, v] of Object.entries(section)) {
+        if (v !== undefined)
+            cleaned[k] = v;
+    }
+    current.botfather = cleaned;
+    const meta = current.$meta ?? {};
+    current.$meta = { ...meta, version: 1, updatedAt: new Date().toISOString(), source: "configure" };
+    fs.mkdirSync(path.dirname(configPath), { recursive: true });
+    fs.writeFileSync(configPath, JSON.stringify(current, null, 2) + "\n", { mode: 0o600 });
+}
+//# sourceMappingURL=config-file.js.map

package/dist/config-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-file.js","sourceRoot":"","sources":["../src/config-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAGtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,UAAU,cAAc;IAC5B,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAE3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B;IACxC,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACxF,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAwB;IAClE,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,IAAI,OAAO,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;QACxF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,EAAE,CAAC;IACf,CAAC;IACD,2EAA2E;IAC3E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;IAC5B,MAAM,IAAI,GAAI,OAAO,CAAC,KAA6C,IAAI,EAAE,CAAC;IAC1E,OAAO,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,44 @@
+import { type BindMode, type AuthBaseUrlMode, type DeploymentExposure, type DeploymentMode, type SecretProvider, type StorageProvider, type BotfatherConfig } from "@slaw-ai/shared";
+type DatabaseMode = "embedded-postgres" | "postgres";
+export interface Config {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    bind: BindMode;
+    customBindHost: string | undefined;
+    host: string;
+    port: number;
+    allowedHostnames: string[];
+    authBaseUrlMode: AuthBaseUrlMode;
+    authPublicBaseUrl: string | undefined;
+    authDisableSignUp: boolean;
+    databaseMode: DatabaseMode;
+    databaseUrl: string | undefined;
+    databaseMigrationUrl: string | undefined;
+    embeddedPostgresDataDir: string;
+    embeddedPostgresPort: number;
+    databaseBackupEnabled: boolean;
+    databaseBackupIntervalMinutes: number;
+    databaseBackupRetentionDays: number;
+    databaseBackupDir: string;
+    serveUi: boolean;
+    uiDevMiddleware: boolean;
+    secretsProvider: SecretProvider;
+    secretsStrictMode: boolean;
+    secretsMasterKeyFilePath: string;
+    storageProvider: StorageProvider;
+    storageLocalDiskBaseDir: string;
+    storageS3Bucket: string;
+    storageS3Region: string;
+    storageS3Endpoint: string | undefined;
+    storageS3Prefix: string;
+    storageS3ForcePathStyle: boolean;
+    heartbeatSchedulerEnabled: boolean;
+    heartbeatSchedulerIntervalMs: number;
+    doneAcceptanceMode: "off" | "advisory" | "strict";
+    squadDeletionEnabled: boolean;
+    /** resolved control-tower reporting config; url undefined = standalone (no gate, no reporter) */
+    botfather: BotfatherConfig;
+}
+export declare function loadConfig(): Config;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,OAAO,EAOL,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EAIpB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AA0BzB,KAAK,YAAY,GAAG,mBAAmB,GAAG,UAAU,CAAC;AAErD,MAAM,WAAW,MAAM;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,6BAA6B,EAAE,MAAM,CAAC;IACtC,2BAA2B,EAAE,MAAM,CAAC;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,cAAc,CAAC;IAChC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,wBAAwB,EAAE,MAAM,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,OAAO,CAAC;IACjC,yBAAyB,EAAE,OAAO,CAAC;IACnC,4BAA4B,EAAE,MAAM,CAAC;IACrC,kBAAkB,EAAE,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC;IAClD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iGAAiG;IACjG,SAAS,EAAE,eAAe,CAAC;CAC5B;AAqBD,wBAAgB,UAAU,IAAI,MAAM,CAiOnC"}

package/dist/config.js

@@ -0,0 +1,247 @@
+import { readConfigFile, readBotfatherConfigSection } from "./config-file.js";
+import { execFileSync } from "node:child_process";
+import { existsSync, realpathSync } from "node:fs";
+import { resolve } from "node:path";
+import { config as loadDotenv } from "dotenv";
+import { resolveSlawEnvPath } from "./paths.js";
+import { maybeRepairLegacyWorktreeConfigAndEnvFiles } from "./worktree-config.js";
+import { AUTH_BASE_URL_MODES, BIND_MODES, DEPLOYMENT_EXPOSURES, DEPLOYMENT_MODES, SECRET_PROVIDERS, STORAGE_PROVIDERS, inferBindModeFromHost, resolveRuntimeBind, validateConfiguredBindMode, } from "@slaw-ai/shared";
+import { resolveDefaultBackupDir, resolveDefaultEmbeddedPostgresDir, resolveDefaultSecretsKeyFilePath, resolveDefaultStorageDir, resolveHomeAwarePath, } from "./home-paths.js";
+const SLAW_ENV_FILE_PATH = resolveSlawEnvPath();
+if (existsSync(SLAW_ENV_FILE_PATH)) {
+    loadDotenv({ path: SLAW_ENV_FILE_PATH, override: false, quiet: true });
+}
+const CWD_ENV_PATH = resolve(process.cwd(), ".env");
+const isSameFile = existsSync(CWD_ENV_PATH) && existsSync(SLAW_ENV_FILE_PATH)
+    ? realpathSync(CWD_ENV_PATH) === realpathSync(SLAW_ENV_FILE_PATH)
+    : CWD_ENV_PATH === SLAW_ENV_FILE_PATH;
+if (!isSameFile && existsSync(CWD_ENV_PATH)) {
+    loadDotenv({ path: CWD_ENV_PATH, override: false, quiet: true });
+}
+maybeRepairLegacyWorktreeConfigAndEnvFiles();
+const TAILSCALE_DETECT_TIMEOUT_MS = 3000;
+function detectTailnetBindHost() {
+    const explicit = process.env.SLAW_TAILNET_BIND_HOST?.trim();
+    if (explicit)
+        return explicit;
+    try {
+        const stdout = execFileSync("tailscale", ["ip", "-4"], {
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+            timeout: TAILSCALE_DETECT_TIMEOUT_MS,
+        });
+        return stdout
+            .split(/\r?\n/)
+            .map((line) => line.trim())
+            .find(Boolean);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function loadConfig() {
+    const fileConfig = readConfigFile();
+    const fileDatabaseMode = (fileConfig?.database.mode === "postgres" ? "postgres" : "embedded-postgres");
+    const fileDbUrl = fileDatabaseMode === "postgres"
+        ? fileConfig?.database.connectionString
+        : undefined;
+    const fileDatabaseBackup = fileConfig?.database.backup;
+    const fileSecrets = fileConfig?.secrets;
+    const fileStorage = fileConfig?.storage;
+    const providerFromEnvRaw = process.env.SLAW_SECRETS_PROVIDER;
+    const providerFromEnv = providerFromEnvRaw && SECRET_PROVIDERS.includes(providerFromEnvRaw)
+        ? providerFromEnvRaw
+        : null;
+    const providerFromFile = fileSecrets?.provider;
+    const secretsProvider = providerFromEnv ?? providerFromFile ?? "local_encrypted";
+    const storageProviderFromEnvRaw = process.env.SLAW_STORAGE_PROVIDER;
+    const storageProviderFromEnv = storageProviderFromEnvRaw && STORAGE_PROVIDERS.includes(storageProviderFromEnvRaw)
+        ? storageProviderFromEnvRaw
+        : null;
+    const storageProvider = storageProviderFromEnv ?? fileStorage?.provider ?? "local_disk";
+    const storageLocalDiskBaseDir = resolveHomeAwarePath(process.env.SLAW_STORAGE_LOCAL_DIR ??
+        fileStorage?.localDisk?.baseDir ??
+        resolveDefaultStorageDir());
+    const storageS3Bucket = process.env.SLAW_STORAGE_S3_BUCKET ?? fileStorage?.s3?.bucket ?? "slaw";
+    const storageS3Region = process.env.SLAW_STORAGE_S3_REGION ?? fileStorage?.s3?.region ?? "us-east-1";
+    const storageS3Endpoint = process.env.SLAW_STORAGE_S3_ENDPOINT ?? fileStorage?.s3?.endpoint ?? undefined;
+    const storageS3Prefix = process.env.SLAW_STORAGE_S3_PREFIX ?? fileStorage?.s3?.prefix ?? "";
+    const storageS3ForcePathStyle = process.env.SLAW_STORAGE_S3_FORCE_PATH_STYLE !== undefined
+        ? process.env.SLAW_STORAGE_S3_FORCE_PATH_STYLE === "true"
+        : (fileStorage?.s3?.forcePathStyle ?? false);
+    const deploymentModeFromEnvRaw = process.env.SLAW_DEPLOYMENT_MODE;
+    const deploymentModeFromEnv = deploymentModeFromEnvRaw && DEPLOYMENT_MODES.includes(deploymentModeFromEnvRaw)
+        ? deploymentModeFromEnvRaw
+        : null;
+    const deploymentMode = deploymentModeFromEnv ?? fileConfig?.server.deploymentMode ?? "local_trusted";
+    const strictModeFromEnv = process.env.SLAW_SECRETS_STRICT_MODE;
+    const secretsStrictMode = strictModeFromEnv !== undefined
+        ? strictModeFromEnv === "true"
+        : (fileSecrets?.strictMode ?? deploymentMode === "authenticated");
+    const deploymentExposureFromEnvRaw = process.env.SLAW_DEPLOYMENT_EXPOSURE;
+    const deploymentExposureFromEnv = deploymentExposureFromEnvRaw &&
+        DEPLOYMENT_EXPOSURES.includes(deploymentExposureFromEnvRaw)
+        ? deploymentExposureFromEnvRaw
+        : null;
+    const deploymentExposure = deploymentMode === "local_trusted"
+        ? "private"
+        : (deploymentExposureFromEnv ?? fileConfig?.server.exposure ?? "private");
+    const bindFromEnvRaw = process.env.SLAW_BIND;
+    const bindFromEnv = bindFromEnvRaw && BIND_MODES.includes(bindFromEnvRaw)
+        ? bindFromEnvRaw
+        : null;
+    const configuredHost = process.env.HOST ?? fileConfig?.server.host ?? "127.0.0.1";
+    const tailnetBindHost = detectTailnetBindHost();
+    const bind = bindFromEnv ??
+        fileConfig?.server.bind ??
+        inferBindModeFromHost(configuredHost, { tailnetBindHost });
+    const customBindHost = process.env.SLAW_BIND_HOST ?? fileConfig?.server.customBindHost;
+    const authBaseUrlModeFromEnvRaw = process.env.SLAW_AUTH_BASE_URL_MODE;
+    const authBaseUrlModeFromEnv = authBaseUrlModeFromEnvRaw &&
+        AUTH_BASE_URL_MODES.includes(authBaseUrlModeFromEnvRaw)
+        ? authBaseUrlModeFromEnvRaw
+        : null;
+    const publicUrlFromEnv = process.env.SLAW_PUBLIC_URL;
+    const authPublicBaseUrlRaw = process.env.SLAW_AUTH_PUBLIC_BASE_URL ??
+        process.env.BETTER_AUTH_URL ??
+        process.env.BETTER_AUTH_BASE_URL ??
+        publicUrlFromEnv ??
+        fileConfig?.auth?.publicBaseUrl;
+    const authPublicBaseUrl = authPublicBaseUrlRaw?.trim() || undefined;
+    const authBaseUrlMode = authBaseUrlModeFromEnv ??
+        fileConfig?.auth?.baseUrlMode ??
+        (authPublicBaseUrl ? "explicit" : "auto");
+    const disableSignUpFromEnv = process.env.SLAW_AUTH_DISABLE_SIGN_UP;
+    const authDisableSignUp = disableSignUpFromEnv !== undefined
+        ? disableSignUpFromEnv === "true"
+        : (fileConfig?.auth?.disableSignUp ?? false);
+    const allowedHostnamesFromEnvRaw = process.env.SLAW_ALLOWED_HOSTNAMES;
+    const allowedHostnamesFromEnv = allowedHostnamesFromEnvRaw
+        ? allowedHostnamesFromEnvRaw
+            .split(",")
+            .map((value) => value.trim().toLowerCase())
+            .filter((value) => value.length > 0)
+        : null;
+    const publicUrlHostname = authPublicBaseUrl
+        ? (() => {
+            try {
+                return new URL(authPublicBaseUrl).hostname.trim().toLowerCase();
+            }
+            catch {
+                return null;
+            }
+        })()
+        : null;
+    const allowedHostnames = Array.from(new Set([
+        ...(allowedHostnamesFromEnv ?? fileConfig?.server.allowedHostnames ?? []),
+        ...(publicUrlHostname ? [publicUrlHostname] : []),
+    ]
+        .map((value) => value.trim().toLowerCase())
+        .filter(Boolean)));
+    const squadDeletionEnvRaw = process.env.SLAW_ENABLE_SQUAD_DELETION;
+    const squadDeletionEnabled = squadDeletionEnvRaw !== undefined
+        ? squadDeletionEnvRaw === "true"
+        : deploymentMode === "local_trusted";
+    const databaseBackupEnabled = process.env.SLAW_DB_BACKUP_ENABLED !== undefined
+        ? process.env.SLAW_DB_BACKUP_ENABLED === "true"
+        : (fileDatabaseBackup?.enabled ?? true);
+    const databaseBackupIntervalMinutes = Math.max(1, Number(process.env.SLAW_DB_BACKUP_INTERVAL_MINUTES) ||
+        fileDatabaseBackup?.intervalMinutes ||
+        60);
+    const databaseBackupRetentionDays = Math.max(1, Number(process.env.SLAW_DB_BACKUP_RETENTION_DAYS) ||
+        fileDatabaseBackup?.retentionDays ||
+        7);
+    const databaseBackupDir = resolveHomeAwarePath(process.env.SLAW_DB_BACKUP_DIR ??
+        fileDatabaseBackup?.dir ??
+        resolveDefaultBackupDir());
+    const bindValidationErrors = validateConfiguredBindMode({
+        deploymentMode,
+        deploymentExposure,
+        bind,
+        host: configuredHost,
+        customBindHost,
+    });
+    if (bindValidationErrors.length > 0) {
+        throw new Error(bindValidationErrors[0]);
+    }
+    const resolvedBind = resolveRuntimeBind({
+        bind,
+        host: configuredHost,
+        customBindHost,
+        tailnetBindHost,
+    });
+    if (resolvedBind.errors.length > 0) {
+        throw new Error(resolvedBind.errors[0]);
+    }
+    return {
+        deploymentMode,
+        deploymentExposure,
+        bind: resolvedBind.bind,
+        customBindHost: resolvedBind.customBindHost,
+        host: resolvedBind.host,
+        port: Number(process.env.PORT) || fileConfig?.server.port || 3100,
+        allowedHostnames,
+        authBaseUrlMode,
+        authPublicBaseUrl,
+        authDisableSignUp,
+        databaseMode: fileDatabaseMode,
+        databaseUrl: process.env.DATABASE_URL ?? fileDbUrl,
+        databaseMigrationUrl: process.env.DATABASE_MIGRATION_URL,
+        embeddedPostgresDataDir: resolveHomeAwarePath(fileConfig?.database.embeddedPostgresDataDir ?? resolveDefaultEmbeddedPostgresDir()),
+        embeddedPostgresPort: fileConfig?.database.embeddedPostgresPort ?? 54329,
+        databaseBackupEnabled,
+        databaseBackupIntervalMinutes,
+        databaseBackupRetentionDays,
+        databaseBackupDir,
+        serveUi: process.env.SERVE_UI !== undefined
+            ? process.env.SERVE_UI === "true"
+            : fileConfig?.server.serveUi ?? true,
+        uiDevMiddleware: process.env.SLAW_UI_DEV_MIDDLEWARE === "true",
+        secretsProvider,
+        secretsStrictMode,
+        secretsMasterKeyFilePath: resolveHomeAwarePath(process.env.SLAW_SECRETS_MASTER_KEY_FILE ??
+            fileSecrets?.localEncrypted.keyFilePath ??
+            resolveDefaultSecretsKeyFilePath()),
+        storageProvider,
+        storageLocalDiskBaseDir,
+        storageS3Bucket,
+        storageS3Region,
+        storageS3Endpoint,
+        storageS3Prefix,
+        storageS3ForcePathStyle,
+        heartbeatSchedulerEnabled: process.env.HEARTBEAT_SCHEDULER_ENABLED !== "false",
+        heartbeatSchedulerIntervalMs: Math.max(10000, Number(process.env.HEARTBEAT_SCHEDULER_INTERVAL_MS) || 30000),
+        // F4 — acceptance gate on issue `done`. "advisory" (default) records when an
+        // issue is closed with no deliverable evidence but allows it; "strict"
+        // rejects an agent-driven `done` without evidence; "off" disables the gate.
+        doneAcceptanceMode: (() => {
+            const raw = (process.env.SLAW_DONE_ACCEPTANCE_MODE ?? "advisory").toLowerCase();
+            return raw === "off" || raw === "strict" ? raw : "advisory";
+        })(),
+        squadDeletionEnabled,
+        // Fall back to the resiliently-salvaged botfather section if the full-file
+        // read failed (e.g. a partial config file written on a zero-config dev
+        // setup). This keeps the control-tower connection alive across restarts.
+        botfather: resolveBotfatherConfig(fileConfig?.botfather ?? readBotfatherConfigSection()),
+    };
+}
+function resolveBotfatherConfig(file) {
+    const envUrl = process.env.SLAW_BOTFATHER_URL?.trim();
+    const disabled = process.env.SLAW_BOTFATHER_DISABLED === "1" || process.env.SLAW_BOTFATHER_DISABLED === "true";
+    // env url overrides file; SLAW_BOTFATHER_DISABLED clears the url (the gate's
+    // enforcement rules decide whether an already-enrolled instance still runs).
+    const url = disabled ? undefined : (envUrl || file?.url);
+    return {
+        url,
+        enforcement: file?.enforcement ?? "enforce",
+        locked: file?.locked ?? false,
+        syncIntervalSec: file?.syncIntervalSec ?? 60,
+        heartbeatIntervalSec: file?.heartbeatIntervalSec ?? 60,
+        reportIssueTitles: file?.reportIssueTitles ?? true,
+        spool: {
+            maxMb: file?.spool?.maxMb ?? 50,
+            maxDays: file?.spool?.maxDays ?? 14,
+        },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EAOjB,qBAAqB,EACrB,kBAAkB,EAClB,0BAA0B,GAE3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,gCAAgC,EAChC,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,kBAAkB,GAAG,kBAAkB,EAAE,CAAC;AAChD,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACnC,UAAU,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AACpD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC;IAC3E,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,YAAY,CAAC,kBAAkB,CAAC;IACjE,CAAC,CAAC,YAAY,KAAK,kBAAkB,CAAC;AACxC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;IAC5C,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,0CAA0C,EAAE,CAAC;AAE7C,MAAM,2BAA2B,GAAG,IAAI,CAAC;AA4CzC,SAAS,qBAAqB;IAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YACrD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;QACH,OAAO,MAAM;aACV,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,IAAI,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,gBAAgB,GACpB,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAiB,CAAC;IAEhG,MAAM,SAAS,GACb,gBAAgB,KAAK,UAAU;QAC7B,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,gBAAgB;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,kBAAkB,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC;IACvD,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC;IACxC,MAAM,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC;IAExC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAC7D,MAAM,eAAe,GACnB,kBAAkB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,kBAAoC,CAAC;QACnF,CAAC,CAAE,kBAAqC;QACxC,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GAAG,WAAW,EAAE,QAAQ,CAAC;IAC/C,MAAM,eAAe,GAAmB,eAAe,IAAI,gBAAgB,IAAI,iBAAiB,CAAC;IAEjG,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACpE,MAAM,sBAAsB,GAC1B,yBAAyB,IAAI,iBAAiB,CAAC,QAAQ,CAAC,yBAA4C,CAAC;QACnG,CAAC,CAAE,yBAA6C;QAChD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAAoB,sBAAsB,IAAI,WAAW,EAAE,QAAQ,IAAI,YAAY,CAAC;IACzG,MAAM,uBAAuB,GAAG,oBAAoB,CAClD,OAAO,CAAC,GAAG,CAAC,sBAAsB;QAChC,WAAW,EAAE,SAAS,EAAE,OAAO;QAC/B,wBAAwB,EAAE,CAC7B,CAAC;IACF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,MAAM,CAAC;IAChG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,WAAW,CAAC;IACrG,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,WAAW,EAAE,EAAE,EAAE,QAAQ,IAAI,SAAS,CAAC;IACzG,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,WAAW,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC;IAC5F,MAAM,uBAAuB,GAC3B,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,SAAS;QACxD,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,MAAM;QACzD,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC,CAAC;IACjD,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAClE,MAAM,qBAAqB,GACzB,wBAAwB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,wBAA0C,CAAC;QAC/F,CAAC,CAAE,wBAA2C;QAC9C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAAmB,qBAAqB,IAAI,UAAU,EAAE,MAAM,CAAC,cAAc,IAAI,eAAe,CAAC;IACrH,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC/D,MAAM,iBAAiB,GACrB,iBAAiB,KAAK,SAAS;QAC7B,CAAC,CAAC,iBAAiB,KAAK,MAAM;QAC9B,CAAC,CAAC,CAAC,WAAW,EAAE,UAAU,IAAI,cAAc,KAAK,eAAe,CAAC,CAAC;IACtE,MAAM,4BAA4B,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;IAC1E,MAAM,yBAAyB,GAC7B,4BAA4B;QAC5B,oBAAoB,CAAC,QAAQ,CAAC,4BAAkD,CAAC;QAC/E,CAAC,CAAE,4BAAmD;QACtD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,kBAAkB,GACtB,cAAc,KAAK,eAAe;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,CAAC,yBAAyB,IAAI,UAAU,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;IAC9E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAC7C,MAAM,WAAW,GACf,cAAc,IAAI,UAAU,CAAC,QAAQ,CAAC,cAA0B,CAAC;QAC/D,CAAC,CAAE,cAA2B;QAC9B,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC;IAClF,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;IAChD,MAAM,IAAI,GACR,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,qBAAqB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,EAAE,MAAM,CAAC,cAAc,CAAC;IACvF,MAAM,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IACtE,MAAM,sBAAsB,GAC1B,yBAAyB;QACzB,mBAAmB,CAAC,QAAQ,CAAC,yBAA4C,CAAC;QACxE,CAAC,CAAE,yBAA6C;QAChD,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACrD,MAAM,oBAAoB,GACxB,OAAO,CAAC,GAAG,CAAC,yBAAyB;QACrC,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB;QAChC,gBAAgB;QAChB,UAAU,EAAE,IAAI,EAAE,aAAa,CAAC;IAClC,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpE,MAAM,eAAe,GACnB,sBAAsB;QACtB,UAAU,EAAE,IAAI,EAAE,WAAW;QAC7B,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACnE,MAAM,iBAAiB,GACrB,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,oBAAoB,KAAK,MAAM;QACjC,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC,CAAC;IACjD,MAAM,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACtE,MAAM,uBAAuB,GAAG,0BAA0B;QACxD,CAAC,CAAC,0BAA0B;aACzB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,iBAAiB,GAAG,iBAAiB;QACzC,CAAC,CAAC,CAAC,GAAG,EAAE;YACN,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,IAAI,GAAG,CACL;QACE,GAAG,CAAC,uBAAuB,IAAI,UAAU,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QACzE,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD;SACE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAC1C,MAAM,CAAC,OAAO,CAAC,CACnB,CACF,CAAC;IACF,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnE,MAAM,oBAAoB,GACxB,mBAAmB,KAAK,SAAS;QAC/B,CAAC,CAAC,mBAAmB,KAAK,MAAM;QAChC,CAAC,CAAC,cAAc,KAAK,eAAe,CAAC;IACzC,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,SAAS;QAC9C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAC/C,CAAC,CAAC,CAAC,kBAAkB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC;IAC5C,MAAM,6BAA6B,GAAG,IAAI,CAAC,GAAG,CAC5C,CAAC,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACjD,kBAAkB,EAAE,eAAe;QACnC,EAAE,CACL,CAAC;IACF,MAAM,2BAA2B,GAAG,IAAI,CAAC,GAAG,CAC1C,CAAC,EACD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QAC/C,kBAAkB,EAAE,aAAa;QACjC,CAAC,CACJ,CAAC;IACF,MAAM,iBAAiB,GAAG,oBAAoB,CAC5C,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC5B,kBAAkB,EAAE,GAAG;QACvB,uBAAuB,EAAE,CAC5B,CAAC;IACF,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;QACtD,cAAc;QACd,kBAAkB;QAClB,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,cAAc;KACf,CAAC,CAAC;IACH,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,IAAI;QACJ,IAAI,EAAE,cAAc;QACpB,cAAc;QACd,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,cAAc;QACd,kBAAkB;QAClB,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI;QACjE,gBAAgB;QAChB,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,SAAS;QAClD,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB;QACxD,uBAAuB,EAAE,oBAAoB,CAC3C,UAAU,EAAE,QAAQ,CAAC,uBAAuB,IAAI,iCAAiC,EAAE,CACpF;QACD,oBAAoB,EAAE,UAAU,EAAE,QAAQ,CAAC,oBAAoB,IAAI,KAAK;QACxE,qBAAqB;QACrB,6BAA6B;QAC7B,2BAA2B;QAC3B,iBAAiB;QACjB,OAAO,EACL,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS;YAChC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YACjC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QACxC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM;QAC9D,eAAe;QACf,iBAAiB;QACjB,wBAAwB,EACtB,oBAAoB,CAClB,OAAO,CAAC,GAAG,CAAC,4BAA4B;YACtC,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,gCAAgC,EAAE,CACrC;QACH,eAAe;QACf,uBAAuB;QACvB,eAAe;QACf,eAAe;QACf,iBAAiB;QACjB,eAAe;QACf,uBAAuB;QACvB,yBAAyB,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,OAAO;QAC9E,4BAA4B,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,IAAI,KAAK,CAAC;QAC3G,6EAA6E;QAC7E,uEAAuE;QACvE,4EAA4E;QAC5E,kBAAkB,EAAE,CAAC,GAAkC,EAAE;YACvD,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YAChF,OAAO,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9D,CAAC,CAAC,EAAE;QACJ,oBAAoB;QACpB,2EAA2E;QAC3E,uEAAuE;QACvE,yEAAyE;QACzE,SAAS,EAAE,sBAAsB,CAAC,UAAU,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAC;KACzF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA0C;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,MAAM,CAAC;IAC/G,6EAA6E;IAC7E,6EAA6E;IAC7E,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO;QACL,GAAG;QACH,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,SAAS;QAC3C,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,KAAK;QAC7B,eAAe,EAAE,IAAI,EAAE,eAAe,IAAI,EAAE;QAC5C,oBAAoB,EAAE,IAAI,EAAE,oBAAoB,IAAI,EAAE;QACtD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,IAAI,IAAI;QAClD,KAAK,EAAE;YACL,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE;YAC/B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE;SACpC;KACF,CAAC;AACJ,CAAC"}

package/dist/dev-runner-worktree.d.ts

@@ -0,0 +1,15 @@
+type WorktreeEnvBootstrapResult = {
+    envPath: null;
+    missingEnv: false;
+} | {
+    envPath: string;
+    missingEnv: true;
+} | {
+    envPath: string;
+    missingEnv: false;
+};
+export declare function isLinkedGitWorktreeCheckout(rootDir: string): boolean;
+export declare function resolveWorktreeEnvFilePath(rootDir: string): string;
+export declare function bootstrapDevRunnerWorktreeEnv(rootDir: string, env?: NodeJS.ProcessEnv): WorktreeEnvBootstrapResult;
+export {};
+//# sourceMappingURL=dev-runner-worktree.d.ts.map

package/dist/dev-runner-worktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-runner-worktree.d.ts","sourceRoot":"","sources":["../src/dev-runner-worktree.ts"],"names":[],"mappings":"AAuCA,KAAK,0BAA0B,GAC3B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GACrC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,CAAC;AAE3C,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQpE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElE;AAyCD,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,0BAA0B,CA8B5B"}