@tleblancureta/proto 0.2.0 → 0.3.0

package/dist/core-gateway/scheduler.d.ts

@@ -0,0 +1,68 @@
+import type { TaskNotifyTrigger, TaskOutputChannel } from '@tleblancureta/proto/shared';
+/**
+ * Scheduler core: next-run calculation, due-task scan, dispatch.
+ *
+ * The scheduling model is "next_run_at is canonical". On any schedule change
+ * (insert, update, or after a run finishes) we compute the next_run_at from
+ * the cron expression + timezone and store it. `scanDueTasks` just queries
+ * for rows where next_run_at <= now() AND enabled = true. This is cheap and
+ * race-free.
+ */
+export interface ScheduledTaskRow {
+    id: string;
+    company_id: string;
+    name: string;
+    description: string | null;
+    cron_expr: string;
+    timezone: string;
+    prompt: string;
+    enabled_skills: string[];
+    session_key: string | null;
+    user_id: string;
+    enabled: boolean;
+    max_runtime_seconds: number;
+    next_run_at: string | null;
+    last_run_at: string | null;
+    last_run_status: string | null;
+    output_channel: TaskOutputChannel;
+    output_recipient: string | null;
+    notify_on: TaskNotifyTrigger;
+}
+/**
+ * Compute the next firing instant of `expr` strictly after `from`.
+ * Returns null if the expression is invalid.
+ */
+export declare function computeNextRun(expr: string, timezone: string, from?: Date): Date | null;
+/**
+ * Recompute and persist next_run_at for a task. Call this after INSERT/UPDATE
+ * and after a run finishes.
+ */
+export declare function recalcNextRun(taskId: string): Promise<Date | null>;
+/**
+ * Find tasks whose next_run_at has passed. Returns at most `limit` rows.
+ */
+export declare function scanDueTasks(limit?: number): Promise<ScheduledTaskRow[]>;
+interface DispatchOptions {
+    trigger: 'scheduled' | 'manual' | 'retry';
+    triggeredBy?: string;
+}
+/**
+ * Execute a task: creates a task_runs row, invokes runClaude with the task's
+ * prompt/skills, then writes back the result and recomputes next_run_at.
+ *
+ * Runs are non-blocking from the caller's perspective — the tick endpoint
+ * fires these and returns immediately while dispatch continues in the
+ * background. We guard against double-dispatch by claiming the row first
+ * (set last_run_at + clear next_run_at).
+ */
+export declare function dispatchTask(task: ScheduledTaskRow, opts: DispatchOptions): Promise<void>;
+/**
+ * Scan + dispatch in background. Called by the pg_cron webhook.
+ * Returns immediately with the number of tasks claimed; actual execution
+ * runs async.
+ */
+export declare function tick(): Promise<{
+    dispatched: number;
+}>;
+export {};
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/core-gateway/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../core-gateway/scheduler.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAEvF;;;;;;;;GAQG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,cAAc,EAAE,iBAAiB,CAAA;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,SAAS,EAAE,iBAAiB,CAAA;CAC7B;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,IAAiB,GAAG,IAAI,GAAG,IAAI,CAQnG;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAexE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAe1E;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAA;IACzC,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAiH/F;AA8ED;;;;GAIG;AACH,wBAAsB,IAAI,IAAI,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAS5D"}

package/dist/core-gateway/scheduler.js

@@ -0,0 +1,252 @@
+import { Cron } from 'croner';
+import { getSupabase } from './supabase.js';
+import { runClaude } from './claude-runner.js';
+import { sendSystemMail } from './email-sender.js';
+import { config } from './config.js';
+/**
+ * Compute the next firing instant of `expr` strictly after `from`.
+ * Returns null if the expression is invalid.
+ */
+export function computeNextRun(expr, timezone, from = new Date()) {
+    try {
+        const c = new Cron(expr, { timezone });
+        const next = c.nextRun(from);
+        return next ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Recompute and persist next_run_at for a task. Call this after INSERT/UPDATE
+ * and after a run finishes.
+ */
+export async function recalcNextRun(taskId) {
+    const db = getSupabase();
+    const { data: t, error } = await db
+        .from('scheduled_tasks')
+        .select('id, cron_expr, timezone, enabled')
+        .eq('id', taskId)
+        .single();
+    if (error || !t)
+        return null;
+    if (!t.enabled) {
+        await db.from('scheduled_tasks').update({ next_run_at: null }).eq('id', taskId);
+        return null;
+    }
+    const next = computeNextRun(t.cron_expr, t.timezone);
+    await db.from('scheduled_tasks').update({ next_run_at: next?.toISOString() ?? null }).eq('id', taskId);
+    return next;
+}
+/**
+ * Find tasks whose next_run_at has passed. Returns at most `limit` rows.
+ */
+export async function scanDueTasks(limit = 20) {
+    const db = getSupabase();
+    const nowIso = new Date().toISOString();
+    const { data, error } = await db
+        .from('scheduled_tasks')
+        .select('*')
+        .eq('enabled', true)
+        .lte('next_run_at', nowIso)
+        .order('next_run_at', { ascending: true })
+        .limit(limit);
+    if (error) {
+        console.error('[scheduler] scan error', error);
+        return [];
+    }
+    return (data || []);
+}
+/**
+ * Execute a task: creates a task_runs row, invokes runClaude with the task's
+ * prompt/skills, then writes back the result and recomputes next_run_at.
+ *
+ * Runs are non-blocking from the caller's perspective — the tick endpoint
+ * fires these and returns immediately while dispatch continues in the
+ * background. We guard against double-dispatch by claiming the row first
+ * (set last_run_at + clear next_run_at).
+ */
+export async function dispatchTask(task, opts) {
+    const db = getSupabase();
+    const startedAt = new Date();
+    // 1. Claim the row. For scheduled runs, use an optimistic lock on
+    //    next_run_at to prevent races between overlapping ticks. For manual
+    //    triggers the user explicitly wants it to run now, so we skip the
+    //    lock — otherwise we'd also fail when next_run_at is null (e.g.,
+    //    task created via direct DB insert without recalc).
+    let claimQuery = db
+        .from('scheduled_tasks')
+        .update({
+        next_run_at: null, // cleared; recomputed after run
+        last_run_at: startedAt.toISOString(),
+        last_run_status: 'running',
+    })
+        .eq('id', task.id);
+    if (opts.trigger === 'scheduled' && task.next_run_at) {
+        claimQuery = claimQuery.eq('next_run_at', task.next_run_at);
+    }
+    const { data: claimed, error: claimErr } = await claimQuery.select('id').single();
+    if (claimErr || !claimed) {
+        // Someone else claimed it (scheduled race), or it was edited mid-flight.
+        return;
+    }
+    // 2. Insert run row
+    const { data: run, error: runErr } = await db
+        .from('task_runs')
+        .insert({
+        task_id: task.id,
+        company_id: task.company_id,
+        status: 'running',
+        trigger: opts.trigger,
+        triggered_by: opts.triggeredBy ?? 'cron',
+        started_at: startedAt.toISOString(),
+    })
+        .select('id')
+        .single();
+    if (runErr || !run) {
+        console.error('[scheduler] failed to insert task_run', runErr);
+        return;
+    }
+    // 3. Link run id to task
+    await db.from('scheduled_tasks').update({ last_run_id: run.id }).eq('id', task.id);
+    // 4. Invoke the agent
+    let status = 'success';
+    let response = null;
+    let errorText = null;
+    let costUsd;
+    let sessionId;
+    try {
+        const sessionKey = task.session_key || `cron-${task.name}-${Date.now()}`;
+        const result = await runClaude({
+            company_id: task.company_id,
+            user_id: task.user_id,
+            message: task.prompt,
+            channel: 'cron',
+            session_key: sessionKey,
+            enabled_skills: task.enabled_skills,
+            company_context: `[Cron task "${task.name}" firing via ${opts.trigger}]`,
+            selected_files: [],
+        });
+        response = result.response;
+        costUsd = result.cost_usd;
+        sessionId = result.session_id;
+    }
+    catch (err) {
+        status = 'error';
+        errorText = err?.message || String(err);
+        console.error(`[scheduler] task ${task.name} failed:`, err);
+    }
+    const finishedAt = new Date();
+    const durationMs = finishedAt.getTime() - startedAt.getTime();
+    // 5. Write run result
+    await db
+        .from('task_runs')
+        .update({
+        status,
+        finished_at: finishedAt.toISOString(),
+        duration_ms: durationMs,
+        response,
+        error: errorText,
+        metadata: { cost_usd: costUsd, session_id: sessionId },
+    })
+        .eq('id', run.id);
+    // 6. Recompute next_run_at + update last_run_status on task
+    const next = computeNextRun(task.cron_expr, task.timezone);
+    await db
+        .from('scheduled_tasks')
+        .update({
+        next_run_at: next?.toISOString() ?? null,
+        last_run_status: status,
+    })
+        .eq('id', task.id);
+    // 7. Deliver via output channel (email) if configured
+    await maybeNotify(task, {
+        runId: run.id,
+        status,
+        response,
+        errorText,
+        previousStatus: task.last_run_status,
+    });
+}
+/**
+ * Decide whether + how to notify for a finished run and perform delivery.
+ * Writes back `notified_at` / `notify_error` on the task_runs row.
+ */
+async function maybeNotify(task, ctx) {
+    if (task.output_channel === 'silent')
+        return;
+    if (!task.output_recipient)
+        return;
+    // Apply notify_on filter
+    const shouldNotify = (() => {
+        switch (task.notify_on) {
+            case 'never': return false;
+            case 'always': return true;
+            case 'on_error': return ctx.status === 'error';
+            case 'on_change': return ctx.status !== ctx.previousStatus;
+        }
+    })();
+    if (!shouldNotify)
+        return;
+    // Build the message
+    const subject = ctx.status === 'error'
+        ? `[${config.display_name}] Tarea "${task.name}" fallo`
+        : `[${config.display_name}] ${task.name}`;
+    const bodyLines = [];
+    bodyLines.push(`Tarea: ${task.name}`);
+    if (task.description)
+        bodyLines.push(`Descripcion: ${task.description}`);
+    bodyLines.push(`Estado: ${ctx.status}`);
+    bodyLines.push(`Cron: ${task.cron_expr}`);
+    bodyLines.push('');
+    if (ctx.status === 'error') {
+        bodyLines.push('Error:');
+        bodyLines.push(ctx.errorText ?? '(sin detalle)');
+    }
+    else {
+        bodyLines.push('Resultado:');
+        bodyLines.push(ctx.response ?? '(sin respuesta)');
+    }
+    bodyLines.push('');
+    bodyLines.push('---');
+    bodyLines.push(`${config.display_name} · tarea programada`);
+    const body = bodyLines.join('\n');
+    if (task.output_channel === 'email') {
+        const result = await sendSystemMail({
+            companyId: task.company_id,
+            to: task.output_recipient,
+            subject,
+            body,
+            sourceTaskId: task.id,
+            sessionKey: task.session_key || undefined,
+        });
+        const db = getSupabase();
+        if (result.ok) {
+            await db
+                .from('task_runs')
+                .update({ notified_at: new Date().toISOString() })
+                .eq('id', ctx.runId);
+        }
+        else {
+            await markNotifyError(ctx.runId, result.error || 'unknown send error');
+        }
+    }
+}
+async function markNotifyError(runId, msg) {
+    const db = getSupabase();
+    await db.from('task_runs').update({ notify_error: msg }).eq('id', runId);
+}
+/**
+ * Scan + dispatch in background. Called by the pg_cron webhook.
+ * Returns immediately with the number of tasks claimed; actual execution
+ * runs async.
+ */
+export async function tick() {
+    const due = await scanDueTasks();
+    for (const task of due) {
+        // Fire and forget — each dispatch logs its own errors
+        dispatchTask(task, { trigger: 'scheduled', triggeredBy: 'cron' }).catch(err => console.error(`[scheduler] dispatch error for ${task.name}:`, err));
+    }
+    return { dispatched: due.length };
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/core-gateway/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../core-gateway/scheduler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAkCpC;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAa,IAAI,IAAI,EAAE;IACpF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5B,OAAO,IAAI,IAAI,IAAI,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc;IAChD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IACxB,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE;SAChC,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC,kCAAkC,CAAC;SAC1C,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;SAChB,MAAM,EAAE,CAAA;IACX,IAAI,KAAK,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5B,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC/E,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAA;IACpD,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACtG,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAK,GAAG,EAAE;IAC3C,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IACxB,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE;SAC7B,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC,GAAG,CAAC;SACX,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;SACnB,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC;SAC1B,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SACzC,KAAK,CAAC,KAAK,CAAC,CAAA;IACf,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAA;QAC9C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,CAAC,IAAI,IAAI,EAAE,CAAuB,CAAA;AAC3C,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB,EAAE,IAAqB;IAC9E,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IACxB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAA;IAE5B,kEAAkE;IAClE,wEAAwE;IACxE,sEAAsE;IACtE,qEAAqE;IACrE,wDAAwD;IACxD,IAAI,UAAU,GAAG,EAAE;SAChB,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC;QACN,WAAW,EAAE,IAAI,EAAW,gCAAgC;QAC5D,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE;QACpC,eAAe,EAAE,SAAS;KAC3B,CAAC;SACD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAEpB,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrD,UAAU,GAAG,UAAU,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IAEjF,IAAI,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;QACzB,yEAAyE;QACzE,OAAM;IACR,CAAC;IAED,oBAAoB;IACpB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;SAC1C,IAAI,CAAC,WAAW,CAAC;SACjB,MAAM,CAAC;QACN,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,MAAM;QACxC,UAAU,EAAE,SAAS,CAAC,WAAW,EAAE;KACpC,CAAC;SACD,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,EAAE,CAAA;IAEX,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,MAAM,CAAC,CAAA;QAC9D,OAAM;IACR,CAAC;IAED,yBAAyB;IACzB,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAElF,sBAAsB;IACtB,IAAI,MAAM,GAAwB,SAAS,CAAA;IAC3C,IAAI,QAAQ,GAAkB,IAAI,CAAA;IAClC,IAAI,SAAS,GAAkB,IAAI,CAAA;IACnC,IAAI,OAA2B,CAAA;IAC/B,IAAI,SAA6B,CAAA;IAEjC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;QACxE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,MAAM;YACpB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,eAAe,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,OAAO,GAAG;YACxE,cAAc,EAAE,EAAE;SACnB,CAAC,CAAA;QACF,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;QAC1B,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAA;QACzB,SAAS,GAAG,MAAM,CAAC,UAAU,CAAA;IAC/B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,GAAG,OAAO,CAAA;QAChB,SAAS,GAAG,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,IAAI,UAAU,EAAE,GAAG,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAA;IAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAA;IAE7D,sBAAsB;IACtB,MAAM,EAAE;SACL,IAAI,CAAC,WAAW,CAAC;SACjB,MAAM,CAAC;QACN,MAAM;QACN,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,UAAU;QACvB,QAAQ;QACR,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE;KACvD,CAAC;SACD,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAEnB,4DAA4D;IAC5D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,EAAE;SACL,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC;QACN,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI;QACxC,eAAe,EAAE,MAAM;KACxB,CAAC;SACD,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IAEpB,sDAAsD;IACtD,MAAM,WAAW,CAAC,IAAI,EAAE;QACtB,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,MAAM;QACN,QAAQ;QACR,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,eAAe;KACrC,CAAC,CAAA;AACJ,CAAC;AAUD;;;GAGG;AACH,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,GAAc;IAC/D,IAAI,IAAI,CAAC,cAAc,KAAK,QAAQ;QAAE,OAAM;IAC5C,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,OAAM;IAElC,yBAAyB;IACzB,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;QACzB,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YACvB,KAAK,OAAO,CAAC,CAAK,OAAO,KAAK,CAAA;YAC9B,KAAK,QAAQ,CAAC,CAAI,OAAO,IAAI,CAAA;YAC7B,KAAK,UAAU,CAAC,CAAE,OAAO,GAAG,CAAC,MAAM,KAAK,OAAO,CAAA;YAC/C,KAAK,WAAW,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,cAAc,CAAA;QAC5D,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,IAAI,CAAC,YAAY;QAAE,OAAM;IAEzB,oBAAoB;IACpB,MAAM,OAAO,GACX,GAAG,CAAC,MAAM,KAAK,OAAO;QACpB,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,YAAY,IAAI,CAAC,IAAI,SAAS;QACvD,CAAC,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI,EAAE,CAAA;IAC7C,MAAM,SAAS,GAAa,EAAE,CAAA;IAC9B,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;IACrC,IAAI,IAAI,CAAC,WAAW;QAAE,SAAS,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACxE,SAAS,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACvC,SAAS,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC,CAAA;IACzC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3B,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,eAAe,CAAC,CAAA;IAClD,CAAC;SAAM,CAAC;QACN,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAA;IACnD,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClB,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACrB,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,YAAY,qBAAqB,CAAC,CAAA;IAC3D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEjC,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,EAAE,EAAE,IAAI,CAAC,gBAAgB;YACzB,OAAO;YACP,IAAI;YACJ,YAAY,EAAE,IAAI,CAAC,EAAE;YACrB,UAAU,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;SAC1C,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;QACxB,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,EAAE;iBACL,IAAI,CAAC,WAAW,CAAC;iBACjB,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;iBACjD,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;QACxB,CAAC;aAAM,CAAC;YACN,MAAM,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAa,EAAE,GAAW;IACvD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;IACxB,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI;IACxB,MAAM,GAAG,GAAG,MAAM,YAAY,EAAE,CAAA;IAChC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,sDAAsD;QACtD,YAAY,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAC5E,OAAO,CAAC,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,CAAC,CACnE,CAAA;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;AACnC,CAAC"}

package/dist/core-gateway/server.d.ts

@@ -0,0 +1,17 @@
+import { Hono } from 'hono';
+export interface GatewayOptions {
+    /** Override the port (default: PORT env or 8090). */
+    port?: number;
+}
+/**
+ * Create and start the Proto gateway server.
+ *
+ * Usage:
+ *   import { createProtoGateway } from '@tleblancureta/proto/gateway'
+ *   await createProtoGateway()
+ */
+export declare function createProtoGateway(opts?: GatewayOptions): Promise<{
+    app: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
+    server: import("@hono/node-server").ServerType;
+}>;
+//# sourceMappingURL=server.d.ts.map

package/dist/core-gateway/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../core-gateway/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAc3B,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE,cAAc;;;GA8B7D"}

package/dist/core-gateway/server.js

@@ -0,0 +1,45 @@
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { createNodeWebSocket } from '@hono/node-ws';
+import { serve } from '@hono/node-server';
+import { verifySecret } from './auth.js';
+import { config, PORT } from './config.js';
+import { registerChatRoutes } from './routes/chat.js';
+import { registerUploadRoutes } from './routes/upload.js';
+import { registerGmailRoutes } from './routes/gmail.js';
+import { registerHealthRoutes } from './routes/health.js';
+import { registerCronRoutes } from './routes/cron.js';
+import { registerAdminRoutes } from './routes/admin.js';
+import { startMailIngester } from './mail-ingester.js';
+/**
+ * Create and start the Proto gateway server.
+ *
+ * Usage:
+ *   import { createProtoGateway } from '@tleblancureta/proto/gateway'
+ *   await createProtoGateway()
+ */
+export async function createProtoGateway(opts) {
+    const port = opts?.port ?? PORT;
+    const app = new Hono();
+    const { injectWebSocket, upgradeWebSocket } = createNodeWebSocket({ app });
+    app.use('*', cors());
+    // Auth middleware for REST endpoints (WS uses its own auth handshake)
+    app.use('/chat', verifySecret);
+    app.use('/chat/*', verifySecret);
+    app.use('/upload/*', verifySecret);
+    // Mount routes
+    registerChatRoutes(app, upgradeWebSocket);
+    registerUploadRoutes(app);
+    registerGmailRoutes(app);
+    registerHealthRoutes(app);
+    registerCronRoutes(app);
+    registerAdminRoutes(app);
+    // Start
+    console.log(`${config.display_name} Gateway starting on port ${port}`);
+    const server = serve({ fetch: app.fetch, port });
+    injectWebSocket(server);
+    // Start the IMAP ingester (no-op if MAIL_IMAP_HOST not configured)
+    startMailIngester();
+    return { app, server };
+}
+//# sourceMappingURL=server.js.map

package/dist/core-gateway/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../core-gateway/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAOtD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAqB;IAC5D,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAA;IAE/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IAE1E,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IAEpB,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAC9B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;IAChC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAElC,eAAe;IACf,kBAAkB,CAAC,GAAG,EAAE,gBAAuB,CAAC,CAAA;IAChD,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACzB,mBAAmB,CAAC,GAAG,CAAC,CAAA;IACxB,oBAAoB,CAAC,GAAG,CAAC,CAAA;IACzB,kBAAkB,CAAC,GAAG,CAAC,CAAA;IACvB,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,QAAQ;IACR,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,YAAY,6BAA6B,IAAI,EAAE,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAChD,eAAe,CAAC,MAAM,CAAC,CAAA;IAEvB,mEAAmE;IACnE,iBAAiB,EAAE,CAAA;IAEnB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAA;AACxB,CAAC"}

package/dist/core-gateway/session.d.ts

@@ -0,0 +1,18 @@
+import type { ChatRequest } from '@tleblancureta/proto/shared';
+interface SessionResult {
+    sessionId: string;
+    sessionDir: string;
+    env: Record<string, string>;
+    promptFile: string;
+    mcpConfigFile: string;
+    claudeConfigDir: string;
+}
+export declare function prepareSession(request: ChatRequest): Promise<SessionResult>;
+/**
+ * Copy refreshed credentials from session config back to global config.
+ * Claude Code may refresh the OAuth token during a session — sync it back
+ * so future sessions use the fresh token.
+ */
+export declare function syncCredentialsBack(claudeConfigDir: string): void;
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/core-gateway/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../core-gateway/session.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAc9D,UAAU,aAAa;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wBAAsB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAmDjF;AAgHD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAajE"}

package/dist/core-gateway/session.js

@@ -0,0 +1,178 @@
+import { mkdirSync, writeFileSync, existsSync, readdirSync, copyFileSync, statSync, rmSync } from 'node:fs';
+import { resolve, join } from 'node:path';
+import { createHash } from 'node:crypto';
+import { config } from './config.js';
+import { buildSystemPrompt } from './skills.js';
+import { loadSkills, loadAgents } from './registry.js';
+/**
+ * Deterministic session ID from project name + company_id + optional session_key.
+ * Uses a simple hash to create a stable identifier (UUID v5 equivalent).
+ */
+function getSessionId(companyId, sessionKey) {
+    const seed = `${config.name}-${companyId}${sessionKey ? `-${sessionKey}` : ''}`;
+    return createHash('sha256').update(seed).digest('hex').slice(0, 32);
+}
+export async function prepareSession(request) {
+    const sessionId = getSessionId(request.company_id, request.session_key);
+    const dataRoot = process.env.DATA_DIR || '/data';
+    const sessionSlug = request.session_key
+        ? `${request.company_id}/${request.session_key}`
+        : request.company_id;
+    const sessionDir = resolve(dataRoot, 'sessions', sessionSlug);
+    mkdirSync(sessionDir, { recursive: true });
+    // Claude config dir: use per-session dir in Docker, default (~/.claude) in local dev
+    const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR
+        ? resolve(dataRoot, 'claude-config', sessionSlug)
+        : join(process.env.HOME || '', '.claude');
+    if (process.env.CLAUDE_CONFIG_DIR) {
+        mkdirSync(claudeConfigDir, { recursive: true });
+        copyCredentials(claudeConfigDir);
+    }
+    // Load skills + agents from filesystem
+    const skills = loadSkills();
+    const agents = loadAgents();
+    // Write system prompt (uses skill metadata for tool restrictions)
+    const systemPrompt = buildSystemPrompt(request, skills);
+    const promptFile = join(sessionDir, 'system-prompt.md');
+    writeFileSync(promptFile, systemPrompt);
+    // Copy enabled skills + all agents into session dir
+    writeSkills(sessionDir, request, skills);
+    writeAgents(sessionDir, agents);
+    // Write MCP config (without secrets — secrets passed via env inheritance)
+    const mcpConfigFile = writeMcpConfig(sessionDir, request);
+    // Build environment for claude subprocess
+    const env = {
+        ...process.env,
+        COMPANY_ID: request.company_id,
+        USER_ID: request.user_id,
+        CHANNEL: request.channel,
+    };
+    // Only override CLAUDE_CONFIG_DIR in Docker (where we isolate per session)
+    if (process.env.CLAUDE_CONFIG_DIR) {
+        env.CLAUDE_CONFIG_DIR = claudeConfigDir;
+    }
+    return { sessionId, sessionDir, env, promptFile, mcpConfigFile, claudeConfigDir };
+}
+/**
+ * Copy enabled skills from repo into session dir.
+ * Channel exclusions and per-request enabled_skills are applied here.
+ */
+function writeSkills(sessionDir, request, skills) {
+    const enabledSet = new Set(request.enabled_skills);
+    const channelExcluded = config.channel_excluded_skills[request.channel] || new Set();
+    for (const s of channelExcluded)
+        enabledSet.delete(s);
+    const skillsDir = join(sessionDir, '.claude', 'skills');
+    mkdirSync(skillsDir, { recursive: true });
+    for (const entry of readdirSync(skillsDir)) {
+        try {
+            rmSync(join(skillsDir, entry), { recursive: true, force: true });
+        }
+        catch { }
+    }
+    for (const skill of skills) {
+        if (!enabledSet.has(skill.name))
+            continue;
+        const dir = join(skillsDir, skill.name);
+        mkdirSync(dir, { recursive: true });
+        copyFileSync(skill.filePath, join(dir, 'SKILL.md'));
+    }
+}
+/**
+ * Copy all agents from repo into session dir.
+ */
+function writeAgents(sessionDir, agents) {
+    const agentsDir = join(sessionDir, '.claude', 'agents');
+    mkdirSync(agentsDir, { recursive: true });
+    for (const entry of readdirSync(agentsDir)) {
+        try {
+            rmSync(join(agentsDir, entry), { force: true });
+        }
+        catch { }
+    }
+    for (const agent of agents) {
+        copyFileSync(agent.filePath, join(agentsDir, `${agent.name}.md`));
+    }
+}
+function writeMcpConfig(sessionDir, request) {
+    const mcpServers = {};
+    for (const [name, serverConfig] of Object.entries(config.mcp_servers)) {
+        if (serverConfig.type === 'http') {
+            // HTTP MCP server — just pass the URL
+            mcpServers[name] = { type: 'http', url: serverConfig.url };
+            continue;
+        }
+        // Stdio MCP server — resolve args and env
+        const resolvedArgs = serverConfig.args.map(arg => arg.startsWith('$') ? (process.env[arg.slice(1)] || '') : arg);
+        const resolvedEnv = {};
+        for (const [mcpVar, source] of Object.entries(serverConfig.env)) {
+            if (source === '__COMPANY_ID__') {
+                resolvedEnv[mcpVar] = request.company_id;
+            }
+            else if (source === '__ALLOWED_TOOLS__') {
+                continue;
+            }
+            else {
+                resolvedEnv[mcpVar] = process.env[source] || '';
+            }
+        }
+        resolvedEnv.USER_ID = request.user_id;
+        resolvedEnv.COMPANY_ID = request.company_id;
+        if (request.session_key?.startsWith('order-')) {
+            resolvedEnv.ACTIVE_ORDER_ID = request.session_key.slice('order-'.length);
+        }
+        if (process.env.SUPABASE_URL)
+            resolvedEnv.SUPABASE_URL = process.env.SUPABASE_URL;
+        if (process.env.SUPABASE_SERVICE_ROLE_KEY)
+            resolvedEnv.SUPABASE_SERVICE_ROLE_KEY = process.env.SUPABASE_SERVICE_ROLE_KEY;
+        mcpServers[name] = {
+            command: serverConfig.command,
+            ...(resolvedArgs.length > 0 && { args: resolvedArgs }),
+            env: resolvedEnv,
+        };
+    }
+    const mcpConfig = { mcpServers };
+    const configFile = join(sessionDir, 'mcp-config.json');
+    writeFileSync(configFile, JSON.stringify(mcpConfig));
+    return configFile;
+}
+/**
+ * Copy Claude OAuth credentials from the global config to a session-specific config dir.
+ * This allows each session to have its own CLAUDE_CONFIG_DIR while sharing the same auth.
+ */
+function copyCredentials(claudeConfigDir) {
+    const credsFile = join(claudeConfigDir, '.credentials.json');
+    const candidates = [
+        join(process.env.HOME || '', '.claude', '.credentials.json'),
+        join(process.env.CLAUDE_CONFIG_DIR || '/data/claude', '.credentials.json'),
+        '/data/claude-host/.credentials.json',
+    ];
+    for (const candidate of candidates) {
+        if (existsSync(candidate)) {
+            copyFileSync(candidate, credsFile);
+            console.log(`[credentials] Copied from ${candidate}`);
+            return;
+        }
+    }
+    console.warn('[credentials] No credentials found. Run: claude login');
+}
+/**
+ * Copy refreshed credentials from session config back to global config.
+ * Claude Code may refresh the OAuth token during a session — sync it back
+ * so future sessions use the fresh token.
+ */
+export function syncCredentialsBack(claudeConfigDir) {
+    const sessionCreds = join(claudeConfigDir, '.credentials.json');
+    if (!existsSync(sessionCreds))
+        return;
+    const globalDir = process.env.CLAUDE_CONFIG_DIR || '/data/claude';
+    const globalCreds = join(globalDir, '.credentials.json');
+    try {
+        if (!existsSync(globalCreds) || statSync(sessionCreds).mtimeMs > statSync(globalCreds).mtimeMs) {
+            mkdirSync(globalDir, { recursive: true });
+            copyFileSync(sessionCreds, globalCreds);
+        }
+    }
+    catch { }
+}
+//# sourceMappingURL=session.js.map

package/dist/core-gateway/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../core-gateway/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAC3G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAA0B,MAAM,eAAe,CAAA;AAE9E;;;GAGG;AACH,SAAS,YAAY,CAAC,SAAiB,EAAE,UAAmB;IAC1D,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAoB;IACvD,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAA;IAEhD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW;QACrC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,EAAE;QAChD,CAAC,CAAC,OAAO,CAAC,UAAU,CAAA;IAEtB,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;IAC7D,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE1C,qFAAqF;IACrF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB;QACnD,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,WAAW,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,CAAC,CAAA;IAE3C,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,eAAe,CAAC,eAAe,CAAC,CAAA;IAClC,CAAC;IAED,uCAAuC;IACvC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAC3B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAA;IAE3B,kEAAkE;IAClE,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACvD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;IACvD,aAAa,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IAEvC,oDAAoD;IACpD,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACxC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAE/B,0EAA0E;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IAEzD,0CAA0C;IAC1C,MAAM,GAAG,GAA2B;QAClC,GAAG,OAAO,CAAC,GAA6B;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAA;IAED,2EAA2E;IAC3E,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,GAAG,CAAC,iBAAiB,GAAG,eAAe,CAAA;IACzC,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,CAAA;AACnF,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,UAAkB,EAAE,OAAoB,EAAE,MAAe;IAC5E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAClD,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAA;IACpF,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAErD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACvD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACnF,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAQ;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAA;IACrD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,UAAkB,EAAE,MAAe;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACvD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzC,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IAClE,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAA;IACnE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,OAAoB;IAC9D,MAAM,UAAU,GAAwB,EAAE,CAAA;IAE1C,KAAK,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACtE,IAAI,YAAY,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,sCAAsC;YACtC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAA;YAC1D,SAAQ;QACV,CAAC;QAED,0CAA0C;QAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAC/C,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAC9D,CAAA;QAED,MAAM,WAAW,GAA2B,EAAE,CAAA;QAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAChE,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAA;YAC1C,CAAC;iBAAM,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBAC1C,SAAQ;YACV,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;YACjD,CAAC;QACH,CAAC;QAED,WAAW,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;QACrC,WAAW,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;QAE3C,IAAI,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,WAAW,CAAC,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;YAAE,WAAW,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAA;QACjF,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB;YAAE,WAAW,CAAC,yBAAyB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAA;QAExH,UAAU,CAAC,IAAI,CAAC,GAAG;YACjB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YACtD,GAAG,EAAE,WAAW;SACjB,CAAA;IACH,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,CAAA;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;IACtD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;IACpD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,eAAuB;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAA;IAC5D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAc,EAAE,mBAAmB,CAAC;QAC1E,qCAAqC;KACtC,CAAA;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;YAClC,OAAO,CAAC,GAAG,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAA;YACrD,OAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAA;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,eAAuB;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAA;IAC/D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAM;IAErC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,cAAc,CAAA;IACjE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAA;IAExD,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/F,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACzC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC"}

package/dist/core-gateway/skills.d.ts

@@ -0,0 +1,4 @@
+import type { ChatRequest } from '@tleblancureta/proto/shared';
+import type { Skill } from './registry.js';
+export declare function buildSystemPrompt(request: ChatRequest, allSkills?: Skill[]): string;
+//# sourceMappingURL=skills.d.ts.map

package/dist/core-gateway/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../core-gateway/skills.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAE9D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,eAAe,CAAA;AA0B1C,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,GAAE,KAAK,EAAO,GAAG,MAAM,CAsFvF"}