abtars 0.2.1-alpha.8 → 0.2.1

package/bundle/action-gate-DYV2XQBP.js

@@ -0,0 +1,191 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  init_logger,
+  logError,
+  logInfo,
+  logWarn
+} from "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
+import "./chunk-7K2YZTLD.js";
+
+// src/components/action-gate.ts
+init_logger();
+import { randomBytes } from "node:crypto";
+import { readFileSync, writeFileSync, mkdirSync, appendFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+var TAG = "action-gate";
+var ActionGate = class {
+  tokens = /* @__PURE__ */ new Map();
+  pending = /* @__PURE__ */ new Map();
+  rules = [];
+  rulesPath;
+  auditPath;
+  notify = null;
+  constructor(authDir) {
+    this.rulesPath = join(authDir, "rules.json");
+    this.auditPath = join(authDir, "audit.jsonl");
+    mkdirSync(authDir, { recursive: true });
+    this.loadRules();
+  }
+  setNotify(fn) {
+    this.notify = fn;
+  }
+  /** Check if a rule already allows/denies this action. */
+  checkRules(category, pattern) {
+    for (const rule of this.rules) {
+      if (rule.category !== category) continue;
+      if (rule.pattern === "*" || rule.pattern === pattern) {
+        return rule.action;
+      }
+    }
+    return null;
+  }
+  /**
+   * Request authorization for a privileged action.
+   * Returns true if granted, false if denied/timed out.
+   */
+  async requestAuth(category, detail) {
+    const rule = this.checkRules(category, detail);
+    if (rule === "allow") {
+      this.audit(category, detail, "allowed-by-rule");
+      return true;
+    }
+    if (rule === "deny") {
+      this.audit(category, detail, "denied-by-rule");
+      return false;
+    }
+    if (!this.notify) {
+      logWarn(TAG, `No notify function \u2014 auto-denying ${category}: ${detail.slice(0, 80)}`);
+      this.audit(category, detail, "denied-no-notify");
+      return false;
+    }
+    const requestId = randomBytes(8).toString("hex");
+    const message = this.formatMessage(category, detail);
+    return new Promise((resolve) => {
+      const timer = setTimeout(() => {
+        this.pending.delete(requestId);
+        logWarn(TAG, `Auth request timed out: ${category} ${detail.slice(0, 60)}`);
+        this.audit(category, detail, "denied-timeout");
+        resolve(false);
+      }, 12e4);
+      const reminderTimer = setTimeout(() => {
+        const req = this.pending.get(requestId);
+        if (req && !req.reminderSent) {
+          req.reminderSent = true;
+          this.notify?.("\u23F3 Still waiting for authorization...", []).catch(() => {
+          });
+        }
+      }, 6e4);
+      this.pending.set(requestId, { id: requestId, category, detail, resolve: (granted) => {
+        clearTimeout(timer);
+        clearTimeout(reminderTimer);
+        this.pending.delete(requestId);
+        resolve(granted);
+      }, timer, reminderSent: false });
+      this.notify(message, [
+        { text: "\u2705 Allow once", data: `auth:${requestId}:once` },
+        { text: "\u{1F513} Always allow", data: `auth:${requestId}:always` },
+        { text: "\u274C Deny", data: `auth:${requestId}:deny` }
+      ]).catch((err) => {
+        logError(TAG, `Failed to send auth request: ${err}`);
+        clearTimeout(timer);
+        clearTimeout(reminderTimer);
+        this.pending.delete(requestId);
+        this.audit(category, detail, "denied-send-failed");
+        resolve(false);
+      });
+    });
+  }
+  /** Handle callback from Telegram button press. */
+  handleCallback(data) {
+    const match = data.match(/^auth:([a-f0-9]+):(once|always|deny)$/);
+    if (!match) return false;
+    const [, requestId, action] = match;
+    const req = this.pending.get(requestId);
+    if (!req) return false;
+    if (action === "once") {
+      this.audit(req.category, req.detail, "allowed-once");
+      req.resolve(true);
+    } else if (action === "always") {
+      this.storeRule(req.category, req.detail, "allow");
+      this.audit(req.category, req.detail, "allowed-always");
+      req.resolve(true);
+    } else {
+      this.audit(req.category, req.detail, "denied");
+      req.resolve(false);
+    }
+    return true;
+  }
+  /** Generate a one-use token for external CLI callers. */
+  generateToken(category, pattern) {
+    const id = randomBytes(16).toString("hex");
+    this.tokens.set(id, {
+      id,
+      category,
+      pattern,
+      expiresAt: Date.now() + 12e4,
+      consumed: false
+    });
+    return id;
+  }
+  /** Validate and consume a token. */
+  validateToken(tokenId) {
+    const token = this.tokens.get(tokenId);
+    if (!token) return false;
+    if (token.consumed || Date.now() > token.expiresAt) {
+      this.tokens.delete(tokenId);
+      return false;
+    }
+    token.consumed = true;
+    this.tokens.delete(tokenId);
+    return true;
+  }
+  storeRule(category, pattern, action) {
+    this.rules.push({ category, pattern, action, createdAt: (/* @__PURE__ */ new Date()).toISOString() });
+    writeFileSync(this.rulesPath, JSON.stringify({ rules: this.rules }, null, 2) + "\n");
+    logInfo(TAG, `Stored rule: ${action} ${category}:${pattern}`);
+  }
+  loadRules() {
+    if (!existsSync(this.rulesPath)) {
+      this.rules = [];
+      return;
+    }
+    try {
+      const data = JSON.parse(readFileSync(this.rulesPath, "utf-8"));
+      this.rules = data.rules ?? [];
+    } catch {
+      this.rules = [];
+    }
+  }
+  audit(category, detail, outcome) {
+    const entry = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), category, detail: detail.slice(0, 200), outcome });
+    try {
+      appendFileSync(this.auditPath, entry + "\n");
+    } catch {
+    }
+  }
+  formatMessage(category, detail) {
+    switch (category) {
+      case "secret-recall":
+        return `\u{1F510} Agent wants SECRET memory:
+"${detail.slice(0, 100)}"
+
+Authorize?`;
+      case "bash-auth":
+        return `\u26A0\uFE0F Agent wants to run:
+\`${detail.slice(0, 200)}\`
+
+Authorize?`;
+      default:
+        return `\u{1F512} Agent requests: ${category}
+${detail.slice(0, 150)}
+
+Authorize?`;
+    }
+  }
+};
+export {
+  ActionGate
+};
+//# sourceMappingURL=action-gate-DYV2XQBP.js.map

package/bundle/action-gate-DYV2XQBP.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/components/action-gate.ts"],
+  "sourcesContent": ["/**\n * action-gate.ts \u2014 Out-of-band authorization for privileged actions.\n * Agent requests a privileged action \u2192 Telegram inline keyboard to master \u2192 proceed/deny.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { readFileSync, writeFileSync, mkdirSync, appendFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { logInfo, logWarn, logError } from \"./logger.js\";\n\nconst TAG = \"action-gate\";\n\nexport interface AuthToken {\n  id: string;\n  category: string;\n  pattern: string;\n  expiresAt: number;\n  consumed: boolean;\n}\n\nexport interface AuthRule {\n  category: string;\n  pattern: string;\n  action: \"allow\" | \"deny\";\n  createdAt: string;\n}\n\nexport interface AuthRequest {\n  id: string;\n  category: string;\n  detail: string;\n  resolve: (granted: boolean) => void;\n  timer: ReturnType<typeof setTimeout>;\n  reminderSent: boolean;\n}\n\nexport type NotifyFn = (text: string, buttons: Array<{ text: string; data: string }>) => Promise<void>;\n\nexport class ActionGate {\n  private tokens = new Map<string, AuthToken>();\n  private pending = new Map<string, AuthRequest>();\n  private rules: AuthRule[] = [];\n  private rulesPath: string;\n  private auditPath: string;\n  private notify: NotifyFn | null = null;\n\n  constructor(authDir: string) {\n    this.rulesPath = join(authDir, \"rules.json\");\n    this.auditPath = join(authDir, \"audit.jsonl\");\n    mkdirSync(authDir, { recursive: true });\n    this.loadRules();\n  }\n\n  setNotify(fn: NotifyFn): void {\n    this.notify = fn;\n  }\n\n  /** Check if a rule already allows/denies this action. */\n  checkRules(category: string, pattern: string): \"allow\" | \"deny\" | null {\n    for (const rule of this.rules) {\n      if (rule.category !== category) continue;\n      if (rule.pattern === \"*\" || rule.pattern === pattern) {\n        return rule.action;\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Request authorization for a privileged action.\n   * Returns true if granted, false if denied/timed out.\n   */\n  async requestAuth(category: string, detail: string): Promise<boolean> {\n    // Check persistent rules first\n    const rule = this.checkRules(category, detail);\n    if (rule === \"allow\") {\n      this.audit(category, detail, \"allowed-by-rule\");\n      return true;\n    }\n    if (rule === \"deny\") {\n      this.audit(category, detail, \"denied-by-rule\");\n      return false;\n    }\n\n    // No rule \u2014 ask master via Telegram\n    if (!this.notify) {\n      logWarn(TAG, `No notify function \u2014 auto-denying ${category}: ${detail.slice(0, 80)}`);\n      this.audit(category, detail, \"denied-no-notify\");\n      return false;\n    }\n\n    const requestId = randomBytes(8).toString(\"hex\");\n    const message = this.formatMessage(category, detail);\n\n    return new Promise<boolean>((resolve) => {\n      const timer = setTimeout(() => {\n        this.pending.delete(requestId);\n        logWarn(TAG, `Auth request timed out: ${category} ${detail.slice(0, 60)}`);\n        this.audit(category, detail, \"denied-timeout\");\n        resolve(false);\n      }, 120_000);\n\n      // 60s reminder\n      const reminderTimer = setTimeout(() => {\n        const req = this.pending.get(requestId);\n        if (req && !req.reminderSent) {\n          req.reminderSent = true;\n          this.notify?.(\"\u23F3 Still waiting for authorization...\", []).catch(() => {});\n        }\n      }, 60_000);\n\n      this.pending.set(requestId, { id: requestId, category, detail, resolve: (granted) => {\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        resolve(granted);\n      }, timer, reminderSent: false });\n\n      this.notify!(message, [\n        { text: \"\u2705 Allow once\", data: `auth:${requestId}:once` },\n        { text: \"\uD83D\uDD13 Always allow\", data: `auth:${requestId}:always` },\n        { text: \"\u274C Deny\", data: `auth:${requestId}:deny` },\n      ]).catch((err) => {\n        logError(TAG, `Failed to send auth request: ${err}`);\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        this.audit(category, detail, \"denied-send-failed\");\n        resolve(false);\n      });\n    });\n  }\n\n  /** Handle callback from Telegram button press. */\n  handleCallback(data: string): boolean {\n    const match = data.match(/^auth:([a-f0-9]+):(once|always|deny)$/);\n    if (!match) return false;\n\n    const [, requestId, action] = match;\n    const req = this.pending.get(requestId!);\n    if (!req) return false;\n\n    if (action === \"once\") {\n      this.audit(req.category, req.detail, \"allowed-once\");\n      req.resolve(true);\n    } else if (action === \"always\") {\n      this.storeRule(req.category, req.detail, \"allow\");\n      this.audit(req.category, req.detail, \"allowed-always\");\n      req.resolve(true);\n    } else {\n      this.audit(req.category, req.detail, \"denied\");\n      req.resolve(false);\n    }\n    return true;\n  }\n\n  /** Generate a one-use token for external CLI callers. */\n  generateToken(category: string, pattern: string): string {\n    const id = randomBytes(16).toString(\"hex\");\n    this.tokens.set(id, {\n      id,\n      category,\n      pattern,\n      expiresAt: Date.now() + 120_000,\n      consumed: false,\n    });\n    return id;\n  }\n\n  /** Validate and consume a token. */\n  validateToken(tokenId: string): boolean {\n    const token = this.tokens.get(tokenId);\n    if (!token) return false;\n    if (token.consumed || Date.now() > token.expiresAt) {\n      this.tokens.delete(tokenId);\n      return false;\n    }\n    token.consumed = true;\n    this.tokens.delete(tokenId);\n    return true;\n  }\n\n  private storeRule(category: string, pattern: string, action: \"allow\" | \"deny\"): void {\n    this.rules.push({ category, pattern, action, createdAt: new Date().toISOString() });\n    writeFileSync(this.rulesPath, JSON.stringify({ rules: this.rules }, null, 2) + \"\\n\");\n    logInfo(TAG, `Stored rule: ${action} ${category}:${pattern}`);\n  }\n\n  private loadRules(): void {\n    if (!existsSync(this.rulesPath)) { this.rules = []; return; }\n    try {\n      const data = JSON.parse(readFileSync(this.rulesPath, \"utf-8\"));\n      this.rules = data.rules ?? [];\n    } catch { this.rules = []; }\n  }\n\n  private audit(category: string, detail: string, outcome: string): void {\n    const entry = JSON.stringify({ ts: new Date().toISOString(), category, detail: detail.slice(0, 200), outcome });\n    try { appendFileSync(this.auditPath, entry + \"\\n\"); } catch { /* best effort */ }\n  }\n\n  private formatMessage(category: string, detail: string): string {\n    switch (category) {\n      case \"secret-recall\": return `\uD83D\uDD10 Agent wants SECRET memory:\\n\"${detail.slice(0, 100)}\"\\n\\nAuthorize?`;\n      case \"bash-auth\": return `\u26A0\uFE0F Agent wants to run:\\n\\`${detail.slice(0, 200)}\\`\\n\\nAuthorize?`;\n      default: return `\uD83D\uDD12 Agent requests: ${category}\\n${detail.slice(0, 150)}\\n\\nAuthorize?`;\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;AAQA;AAHA,SAAS,mBAAmB;AAC5B,SAAS,cAAc,eAAe,WAAW,gBAAgB,kBAAkB;AACnF,SAAS,YAAY;AAGrB,IAAM,MAAM;AA4BL,IAAM,aAAN,MAAiB;AAAA,EACd,SAAS,oBAAI,IAAuB;AAAA,EACpC,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAoB,CAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA,SAA0B;AAAA,EAElC,YAAY,SAAiB;AAC3B,SAAK,YAAY,KAAK,SAAS,YAAY;AAC3C,SAAK,YAAY,KAAK,SAAS,aAAa;AAC5C,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,UAAU,IAAoB;AAC5B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAGA,WAAW,UAAkB,SAA0C;AACrE,eAAW,QAAQ,KAAK,OAAO;AAC7B,UAAI,KAAK,aAAa,SAAU;AAChC,UAAI,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACpD,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY,UAAkB,QAAkC;AAEpE,UAAM,OAAO,KAAK,WAAW,UAAU,MAAM;AAC7C,QAAI,SAAS,SAAS;AACpB,WAAK,MAAM,UAAU,QAAQ,iBAAiB;AAC9C,aAAO;AAAA,IACT;AACA,QAAI,SAAS,QAAQ;AACnB,WAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,KAAK,QAAQ;AAChB,cAAQ,KAAK,0CAAqC,QAAQ,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACpF,WAAK,MAAM,UAAU,QAAQ,kBAAkB;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,UAAM,UAAU,KAAK,cAAc,UAAU,MAAM;AAEnD,WAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,YAAM,QAAQ,WAAW,MAAM;AAC7B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,KAAK,2BAA2B,QAAQ,IAAI,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACzE,aAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,gBAAQ,KAAK;AAAA,MACf,GAAG,IAAO;AAGV,YAAM,gBAAgB,WAAW,MAAM;AACrC,cAAM,MAAM,KAAK,QAAQ,IAAI,SAAS;AACtC,YAAI,OAAO,CAAC,IAAI,cAAc;AAC5B,cAAI,eAAe;AACnB,eAAK,SAAS,6CAAwC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC1E;AAAA,MACF,GAAG,GAAM;AAET,WAAK,QAAQ,IAAI,WAAW,EAAE,IAAI,WAAW,UAAU,QAAQ,SAAS,CAAC,YAAY;AACnF,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,OAAO;AAAA,MACjB,GAAG,OAAO,cAAc,MAAM,CAAC;AAE/B,WAAK,OAAQ,SAAS;AAAA,QACpB,EAAE,MAAM,qBAAgB,MAAM,QAAQ,SAAS,QAAQ;AAAA,QACvD,EAAE,MAAM,0BAAmB,MAAM,QAAQ,SAAS,UAAU;AAAA,QAC5D,EAAE,MAAM,eAAU,MAAM,QAAQ,SAAS,QAAQ;AAAA,MACnD,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,iBAAS,KAAK,gCAAgC,GAAG,EAAE;AACnD,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,aAAK,MAAM,UAAU,QAAQ,oBAAoB;AACjD,gBAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,MAAuB;AACpC,UAAM,QAAQ,KAAK,MAAM,uCAAuC;AAChE,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,CAAC,EAAE,WAAW,MAAM,IAAI;AAC9B,UAAM,MAAM,KAAK,QAAQ,IAAI,SAAU;AACvC,QAAI,CAAC,IAAK,QAAO;AAEjB,QAAI,WAAW,QAAQ;AACrB,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,cAAc;AACnD,UAAI,QAAQ,IAAI;AAAA,IAClB,WAAW,WAAW,UAAU;AAC9B,WAAK,UAAU,IAAI,UAAU,IAAI,QAAQ,OAAO;AAChD,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,gBAAgB;AACrD,UAAI,QAAQ,IAAI;AAAA,IAClB,OAAO;AACL,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,QAAQ;AAC7C,UAAI,QAAQ,KAAK;AAAA,IACnB;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,UAAkB,SAAyB;AACvD,UAAM,KAAK,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC,SAAK,OAAO,IAAI,IAAI;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI,IAAI;AAAA,MACxB,UAAU;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,SAA0B;AACtC,UAAM,QAAQ,KAAK,OAAO,IAAI,OAAO;AACrC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,YAAY,KAAK,IAAI,IAAI,MAAM,WAAW;AAClD,WAAK,OAAO,OAAO,OAAO;AAC1B,aAAO;AAAA,IACT;AACA,UAAM,WAAW;AACjB,SAAK,OAAO,OAAO,OAAO;AAC1B,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,UAAkB,SAAiB,QAAgC;AACnF,SAAK,MAAM,KAAK,EAAE,UAAU,SAAS,QAAQ,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AAClF,kBAAc,KAAK,WAAW,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI;AACnF,YAAQ,KAAK,gBAAgB,MAAM,IAAI,QAAQ,IAAI,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEQ,YAAkB;AACxB,QAAI,CAAC,WAAW,KAAK,SAAS,GAAG;AAAE,WAAK,QAAQ,CAAC;AAAG;AAAA,IAAQ;AAC5D,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,aAAa,KAAK,WAAW,OAAO,CAAC;AAC7D,WAAK,QAAQ,KAAK,SAAS,CAAC;AAAA,IAC9B,QAAQ;AAAE,WAAK,QAAQ,CAAC;AAAA,IAAG;AAAA,EAC7B;AAAA,EAEQ,MAAM,UAAkB,QAAgB,SAAuB;AACrE,UAAM,QAAQ,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,UAAU,QAAQ,OAAO,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;AAC9G,QAAI;AAAE,qBAAe,KAAK,WAAW,QAAQ,IAAI;AAAA,IAAG,QAAQ;AAAA,IAAoB;AAAA,EAClF;AAAA,EAEQ,cAAc,UAAkB,QAAwB;AAC9D,YAAQ,UAAU;AAAA,MAChB,KAAK;AAAiB,eAAO;AAAA,GAAmC,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MACpF,KAAK;AAAa,eAAO;AAAA,IAA6B,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MAC1E;AAAS,eAAO,6BAAsB,QAAQ;AAAA,EAAK,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,IACzE;AAAA,EACF;AACF;",
+  "names": []
+}

package/bundle/{agent-api-rate-limit-C25WGSFF.js → agent-api-rate-limit-R2OFAQ3N.js}

@@ -3,9 +3,9 @@
 import {
   getEnv,
   init_env_schema
-} from "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+} from "./chunk-3OXQWII3.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/components/agent-api-rate-limit.ts
@@ -36,4 +36,4 @@ function checkRateLimit(caller) {
 export {
   checkRateLimit
 };
-//# sourceMappingURL=agent-api-rate-limit-C25WGSFF.js.map
+//# sourceMappingURL=agent-api-rate-limit-R2OFAQ3N.js.map

package/bundle/{agent-registry-SYUFNSVB.js → agent-registry-S2MNHQYQ.js}

@@ -3,17 +3,17 @@
 import {
   createAgentTransport,
   createSubagentTransport
-} from "./chunk-ZVDVNSXK.js";
-import "./chunk-RV54J75Q.js";
-import "./chunk-UDZIZB5F.js";
+} from "./chunk-2SWKJX64.js";
+import "./chunk-MHK4UPM6.js";
+import "./chunk-RTL7HO3N.js";
 import "./chunk-MZWMYN4O.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createAgentTransport,
   createSubagentTransport
 };
-//# sourceMappingURL=agent-registry-SYUFNSVB.js.map
+//# sourceMappingURL=agent-registry-S2MNHQYQ.js.map

package/bundle/{bridge-lock-transport-HO545SBK.js → bridge-lock-transport-N6OGDOSE.js}

@@ -15,11 +15,11 @@ import {
   writeRestartReason,
   writeRestartRequested,
   writeSleepStatus
-} from "./chunk-UDZIZB5F.js";
+} from "./chunk-RTL7HO3N.js";
 import "./chunk-MZWMYN4O.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   appendRestartTimestamp,
@@ -37,4 +37,4 @@ export {
   writeRestartRequested,
   writeSleepStatus
 };
-//# sourceMappingURL=bridge-lock-transport-HO545SBK.js.map
+//# sourceMappingURL=bridge-lock-transport-N6OGDOSE.js.map

package/bundle/{browse-delivery-VTLEAVYA.js → browse-delivery-DXGMDMXA.js}

@@ -3,16 +3,17 @@
 import {
   checkBrowseTasks,
   deliverBrowseResult
-} from "./chunk-LDKSCXGL.js";
-import "./chunk-HEHD3GG5.js";
+} from "./chunk-DHPFI7OF.js";
+import "./chunk-ITB2K6LI.js";
 import "./chunk-TBLYGCPQ.js";
-import "./chunk-GPL57SRN.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-H7RX7UCR.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-DGS7J4P6.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   checkBrowseTasks,
   deliverBrowseResult
 };
-//# sourceMappingURL=browse-delivery-VTLEAVYA.js.map
+//# sourceMappingURL=browse-delivery-DXGMDMXA.js.map

package/bundle/{browser-REIXOJ6S.js → browser-QMYGSP5W.js}

@@ -2,18 +2,19 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   register
-} from "./chunk-KJOCXWJ5.js";
-import "./chunk-LDKSCXGL.js";
-import "./chunk-HEHD3GG5.js";
+} from "./chunk-RITEGAW6.js";
+import "./chunk-DHPFI7OF.js";
+import "./chunk-ITB2K6LI.js";
 import "./chunk-TBLYGCPQ.js";
-import "./chunk-GPL57SRN.js";
-import "./chunk-KSEIWT4T.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+import "./chunk-H7RX7UCR.js";
+import "./chunk-JFKOPNKL.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-DGS7J4P6.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   register
 };
-//# sourceMappingURL=browser-REIXOJ6S.js.map
+//# sourceMappingURL=browser-QMYGSP5W.js.map

package/bundle/{capability-ILW3D5HS.js → capability-733TLH4W.js}

@@ -4,15 +4,15 @@ import {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
-} from "./chunk-OOKLEC6V.js";
-import "./chunk-EX2SRTUE.js";
-import "./chunk-PZE3J7ER.js";
-import "./chunk-2BY6I4P5.js";
-import "./chunk-MJ6PHMOK.js";
+} from "./chunk-FY3QUO2L.js";
+import "./chunk-3OXQWII3.js";
+import "./chunk-CYSGXNBY.js";
+import "./chunk-GUTRAMK3.js";
+import "./chunk-WW5F2DCO.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
 };
-//# sourceMappingURL=capability-ILW3D5HS.js.map
+//# sourceMappingURL=capability-733TLH4W.js.map

package/bundle/{chunk-ZVDVNSXK.js → chunk-2SWKJX64.js}

@@ -2,16 +2,16 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   AcpTransport
-} from "./chunk-RV54J75Q.js";
+} from "./chunk-MHK4UPM6.js";
 import {
   getEnv,
   init_env_schema
-} from "./chunk-PZE3J7ER.js";
+} from "./chunk-3OXQWII3.js";
 import {
   init_logger,
   logInfo,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 
 // src/components/agent-registry.ts
 init_env_schema();
@@ -60,7 +60,7 @@ var SUBAGENT_ACP_ROLE = {
   task: "task"
 };
 async function createSubagentTransport(role, registry, currentModel) {
-  const { resolveAgent, getEnvFallback, loadTransport } = await import("./transport-config-G5NKQXPJ.js");
+  const { resolveAgent, getEnvFallback, loadTransport } = await import("./transport-config-JIKHB7GT.js");
   const tc = loadTransport();
   const agentName = SUBAGENT_TO_AGENT[role];
   const resolved = tc ? resolveAgent(agentName, tc) : null;
@@ -70,7 +70,7 @@ async function createSubagentTransport(role, registry, currentModel) {
     return { model: fb.model, provider: fb.provider, providerName: fb.providerName, contextWindow: fb.contextWindow, maxOutput: fb.maxOutput, fallbacks: [] };
   })();
   if (agent.provider.transport === "api") {
-    const { DirectApiTransport } = await import("./direct-api-transport-TRV45NO6.js");
+    const { DirectApiTransport } = await import("./direct-api-transport-LSAUIP5S.js");
     const { FallbackPolicy } = await import("./fallback-policy-SR6ED5I3.js");
     const apiKey = getEnv().getApiKey(agent.provider.apiKeyEnv ?? "API_KEY");
     const startModel = currentModel ?? agent.model;
@@ -154,7 +154,7 @@ async function createSubagentTransport(role, registry, currentModel) {
     logInfo("subagent", `${role} transport: DirectAPI ${agent.providerName} (model=${startModel}, ${candidates.length} candidates, shared registry: ${!!registry})`);
     return { transport, model: agent.model };
   }
-  const { loadAndValidateConfig } = await import("./config-DQIGDX4W.js");
+  const { loadAndValidateConfig } = await import("./config-NDEYF4AQ.js");
   const config = await loadAndValidateConfig();
   const chain = agent.provider.fallbackChain ?? [];
   const modelsToTry = [agent.model, ...chain.filter((m) => m !== agent.model)];
@@ -186,4 +186,4 @@ export {
   createAgentTransport,
   createSubagentTransport
 };
-//# sourceMappingURL=chunk-ZVDVNSXK.js.map
+//# sourceMappingURL=chunk-2SWKJX64.js.map

package/bundle/{chunk-PZE3J7ER.js → chunk-3OXQWII3.js}

@@ -4,7 +4,7 @@ import {
   init_logger,
   logInfo,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 import {
   __esm
 } from "./chunk-7K2YZTLD.js";
@@ -296,4 +296,4 @@ export {
   _resetEnv,
   init_env_schema
 };
-//# sourceMappingURL=chunk-PZE3J7ER.js.map
+//# sourceMappingURL=chunk-3OXQWII3.js.map

package/bundle/{chunk-R36WIOYX.js → chunk-3X6VGRL6.js}

@@ -6,18 +6,19 @@ var BOT_COMMANDS = [
   { name: "reset", description: "Fresh session + exit coding" },
   { name: "session", description: "Session management" },
   { name: "compact", description: "Compact context window" },
-  { name: "status", description: "Bridge status" },
+  { name: "status", description: "Operational health (PID, platforms, context)" },
+  { name: "software", description: "Version, deploy info, rollback" },
+  { name: "model", description: "Model configuration & switching" },
   { name: "doctor", description: "Deep healthcheck (probes all subsystems)" },
   { name: "mcp", description: "MCP server status" },
   { name: "hooks", description: "List configured hooks" },
   { name: "stop", description: "Stop current response" },
   { name: "wait", description: "Inject message mid-run (non-interrupting)" },
-  { name: "models", description: "Model, transport & agents" },
-  { name: "change", description: "Switch model/provider" },
+  { name: "update", description: "Pull & deploy latest code" },
   { name: "emergency", description: "Activate paid hailMary model" },
   { name: "heartbeat", description: "Heartbeat diagnostics" },
   { name: "memory", description: "Memory stats" },
-  { name: "skills", description: "List skills" },
+  { name: "skills", description: "List active skills" },
   { name: "skill", description: "Reload skills catalog" },
   { name: "tasks", description: "Scheduled tasks" },
   { name: "facts", description: "Core knowledge" },
@@ -25,6 +26,7 @@ var BOT_COMMANDS = [
   { name: "restart", description: "Restart bridge" },
   { name: "wakeup", description: "Wake Mac from sleep" },
   { name: "sleep", description: "Sleep status / resume / now" },
+  { name: "whoami", description: "Your user info & clearance" },
   { name: "help", description: "Show all commands" }
 ];
 
@@ -219,11 +221,36 @@ var EMOJI_SCORES = {
 function emojiToScore(emoji) {
   return EMOJI_SCORES[emoji] ?? 1;
 }
+var EMOJI_TAGS = {
+  "\u2764\uFE0F": "love",
+  "\u2764": "love",
+  "\u{1F525}": "excitement",
+  "\u{1F389}": "joy",
+  "\u{1F44F}": "pride",
+  "\u{1F44D}": "gratitude",
+  "\u{1F602}": "humor",
+  "\u{1F929}": "excitement",
+  "\u{1F4AF}": "conviction",
+  "\u26A1": "determination",
+  "\u{1F60A}": "joy",
+  "\u{1F64F}": "gratitude",
+  "\u{1F914}": "curiosity",
+  "\u{1F62E}": "surprise",
+  "\u{1F44E}": "frustration",
+  "\u{1F622}": "grief",
+  "\u{1F621}": "anger",
+  "\u{1F92E}": "anger",
+  "\u{1F4A9}": "frustration"
+};
+function emojiToTag(emoji) {
+  return EMOJI_TAGS[emoji] ?? "gratitude";
+}
 
 export {
   BOT_COMMANDS,
   SecurityGate,
   ResponseFormatter,
-  emojiToScore
+  emojiToScore,
+  emojiToTag
 };
-//# sourceMappingURL=chunk-R36WIOYX.js.map
+//# sourceMappingURL=chunk-3X6VGRL6.js.map

package/bundle/chunk-3X6VGRL6.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/components/command-registry.ts", "../src/components/security-gate.ts", "../src/components/response-formatter.ts", "../src/utils/emoji-score.ts"],
+  "sourcesContent": ["/**\n * command-registry.ts \u2014 Shared bot command definitions for all platforms.\n * Both Telegram (setMyCommands) and Discord (application commands) import from here.\n */\n\nexport interface BotCommand {\n  readonly name: string;\n  readonly description: string;\n}\n\n/** All registered bot commands. Discord requires: name \u226432 chars lowercase, description \u2264100 chars. */\nexport const BOT_COMMANDS: readonly BotCommand[] = [\n  { name: \"reset\", description: \"Fresh session + exit coding\" },\n  { name: \"session\", description: \"Session management\" },\n  { name: \"compact\", description: \"Compact context window\" },\n  { name: \"status\", description: \"Operational health (PID, platforms, context)\" },\n  { name: \"software\", description: \"Version, deploy info, rollback\" },\n  { name: \"model\", description: \"Model configuration & switching\" },\n  { name: \"doctor\", description: \"Deep healthcheck (probes all subsystems)\" },\n  { name: \"mcp\", description: \"MCP server status\" },\n  { name: \"hooks\", description: \"List configured hooks\" },\n  { name: \"stop\", description: \"Stop current response\" },\n  { name: \"wait\", description: \"Inject message mid-run (non-interrupting)\" },\n  { name: \"update\", description: \"Pull & deploy latest code\" },\n  { name: \"emergency\", description: \"Activate paid hailMary model\" },\n  { name: \"heartbeat\", description: \"Heartbeat diagnostics\" },\n  { name: \"memory\", description: \"Memory stats\" },\n  { name: \"skills\", description: \"List active skills\" },\n  { name: \"skill\", description: \"Reload skills catalog\" },\n  { name: \"tasks\", description: \"Scheduled tasks\" },\n  { name: \"facts\", description: \"Core knowledge\" },\n  { name: \"nlm\", description: \"Knowledge base\" },\n  { name: \"restart\", description: \"Restart bridge\" },\n  { name: \"wakeup\", description: \"Wake Mac from sleep\" },\n  { name: \"sleep\", description: \"Sleep status / resume / now\" },\n  { name: \"whoami\", description: \"Your user info & clearance\" },\n  { name: \"help\", description: \"Show all commands\" },\n];\n", "/**\n * Fail-closed security gate that authorizes messages against the user registry.\n * Unauthorized messages are silently dropped \u2014 no response, no side effects.\n * Per-user channel gating via UserEntry.allowedChats.\n */\nimport type { UserEntry, UserRegistry } from \"./user-registry.js\";\n\nexport interface AuthResult {\n  authorized: boolean;\n  user?: UserEntry;\n}\n\nexport class SecurityGate {\n  private readonly registry: UserRegistry;\n\n  constructor(registry: UserRegistry) {\n    if (registry.users.length === 0) {\n      throw new Error(\"SecurityGate requires at least one user in registry\");\n    }\n    this.registry = registry;\n  }\n\n  /** Authorize a platform user. Checks allowedChats if set. */\n  authorize(platformUserId: string, platform: string, channelId?: string): AuthResult {\n    const key = `${platform}:${platformUserId}`;\n    const user = this.registry.byPlatformId.get(key);\n    if (!user) return { authorized: false };\n    if (!this.chatAllowed(user, channelId)) return { authorized: false };\n    return { authorized: true, user };\n  }\n\n  /** Authorize by platform user ID string (tries both platforms). */\n  authorizeById(userId: string, channelId?: string): boolean {\n    const tg = this.registry.byPlatformId.get(`telegram:${userId}`);\n    const dc = this.registry.byPlatformId.get(`discord:${userId}`);\n    const user = tg ?? dc;\n    if (!user) return false;\n    return this.chatAllowed(user, channelId);\n  }\n\n  private chatAllowed(user: UserEntry, channelId?: string): boolean {\n    if (!user.allowedChats || user.allowedChats.length === 0) return true;\n    if (!channelId) return true;\n    return user.allowedChats.includes(channelId);\n  }\n}\n", "import type { Platform } from \"../types/index.js\";\n\nconst TELEGRAM_MAX_LENGTH = 4096;\nconst DISCORD_MAX_LENGTH = 2000;\n\n/** Characters that must be escaped in Telegram MarkdownV2. */\nconst MARKDOWN_V2_ESCAPE = /([_*\\[\\]()~`>#+\\-=|{}.!\\\\])/g;\n\n/**\n * Collects streaming ACP response chunks and formats them\n * for Telegram delivery (chunking, Markdown conversion).\n */\nexport class ResponseFormatter {\n  private buffers = new Map<string, string[]>();\n\n  /** Accumulate a chunk for a session. */\n  collectChunk(sessionId: string, chunk: string): void {\n    const existing = this.buffers.get(sessionId);\n    if (existing) {\n      existing.push(chunk);\n    } else {\n      this.buffers.set(sessionId, [chunk]);\n    }\n  }\n\n  /** Flush accumulated chunks for a session, returning Telegram-ready messages. */\n  flush(sessionId: string): string[] {\n    const chunks = this.buffers.get(sessionId);\n    this.buffers.delete(sessionId);\n    if (!chunks || chunks.length === 0) return [];\n    const full = chunks.join(\"\");\n    return this.chunkText(full);\n  }\n\n  /** Split text into chunks that fit Telegram's 4096-char limit. */\n  chunkText(text: string): string[] {\n    if (text.length <= TELEGRAM_MAX_LENGTH) {\n      return [text];\n    }\n\n    const result: string[] = [];\n    let remaining = text;\n\n    while (remaining.length > 0) {\n      if (remaining.length <= TELEGRAM_MAX_LENGTH) {\n        result.push(remaining);\n        break;\n      }\n\n      // Try to split at paragraph boundary\n      let splitAt = remaining.lastIndexOf(\"\\n\\n\", TELEGRAM_MAX_LENGTH);\n      if (splitAt <= 0) {\n        // Try single newline\n        splitAt = remaining.lastIndexOf(\"\\n\", TELEGRAM_MAX_LENGTH);\n      }\n      if (splitAt <= 0) {\n        // Try space\n        splitAt = remaining.lastIndexOf(\" \", TELEGRAM_MAX_LENGTH);\n      }\n      if (splitAt <= 0) {\n        // Hard split\n        splitAt = TELEGRAM_MAX_LENGTH;\n      }\n\n      result.push(remaining.slice(0, splitAt));\n      remaining = remaining.slice(splitAt).trimStart();\n    }\n\n    return result;\n  }\n\n  /** Escape text for Telegram MarkdownV2 parse mode. */\n  toTelegramMarkdown(markdown: string): string {\n    // Preserve code blocks \u2014 don't escape inside them\n    const parts = markdown.split(/(```[\\s\\S]*?```|`[^`]+`)/);\n    return parts\n      .map((part, i) => {\n        // Odd indices are code blocks/inline code \u2014 leave as-is\n        if (i % 2 === 1) return part;\n        return part.replace(MARKDOWN_V2_ESCAPE, \"\\\\$1\");\n      })\n      .join(\"\");\n  }\n\n  /** Split text into chunks for Discord's 2000-char limit.\n   *  Respects paragraph and code block boundaries \u2014 never splits inside a fenced code block. */\n  chunkTextForDiscord(text: string): string[] {\n    if (text.length <= DISCORD_MAX_LENGTH) {\n      return [text];\n    }\n\n    const result: string[] = [];\n    let remaining = text;\n\n    while (remaining.length > 0) {\n      if (remaining.length <= DISCORD_MAX_LENGTH) {\n        result.push(remaining);\n        break;\n      }\n\n      // Check if there's an open code block in the window we're about to cut\n      const window = remaining.slice(0, DISCORD_MAX_LENGTH);\n      const fenceMatches = window.match(/```/g);\n      const hasOpenCodeBlock = fenceMatches != null && fenceMatches.length % 2 !== 0;\n\n      if (hasOpenCodeBlock) {\n        // Find the start of the open code block (last unmatched ```)\n        const lastFenceIdx = window.lastIndexOf(\"```\");\n        // Try to split before the code block at a paragraph boundary\n        let splitAt = remaining.lastIndexOf(\"\\n\\n\", lastFenceIdx);\n        if (splitAt <= 0) {\n          splitAt = remaining.lastIndexOf(\"\\n\", lastFenceIdx);\n        }\n        if (splitAt <= 0) {\n          // Can't avoid splitting inside the code block \u2014 close and reopen\n          splitAt = remaining.lastIndexOf(\"\\n\", DISCORD_MAX_LENGTH - 4); // leave room for closing ```\n          if (splitAt <= 0) {\n            splitAt = DISCORD_MAX_LENGTH - 4;\n          }\n          // Find the code fence language specifier for reopening\n          const fenceStart = remaining.lastIndexOf(\"```\", splitAt);\n          const fenceLine = remaining.slice(fenceStart, remaining.indexOf(\"\\n\", fenceStart));\n          result.push(remaining.slice(0, splitAt) + \"\\n```\");\n          remaining = fenceLine + \"\\n\" + remaining.slice(splitAt).trimStart();\n          continue;\n        }\n        result.push(remaining.slice(0, splitAt));\n        remaining = remaining.slice(splitAt).trimStart();\n        continue;\n      }\n\n      // No open code block \u2014 split normally at paragraph/line boundaries\n      let splitAt = remaining.lastIndexOf(\"\\n\\n\", DISCORD_MAX_LENGTH);\n      if (splitAt <= 0) {\n        splitAt = remaining.lastIndexOf(\"\\n\", DISCORD_MAX_LENGTH);\n      }\n      if (splitAt <= 0) {\n        splitAt = remaining.lastIndexOf(\" \", DISCORD_MAX_LENGTH);\n      }\n      if (splitAt <= 0) {\n        splitAt = DISCORD_MAX_LENGTH;\n      }\n\n      result.push(remaining.slice(0, splitAt));\n      remaining = remaining.slice(splitAt).trimStart();\n    }\n\n    return result;\n  }\n\n  /** Split text for the appropriate platform. */\n  chunkForPlatform(text: string, platform: Platform): string[] {\n    if (platform === \"discord\") {\n      return this.chunkTextForDiscord(text);\n    }\n    return this.chunkText(text);\n  }\n\n  /** Convert standard Markdown to Discord-compatible Markdown (mostly passthrough). */\n  toDiscordMarkdown(text: string): string {\n    return text;\n  }\n\n  /** Format a tool status update for the user. */\n  formatToolStatus(toolName: string, status: \"start\" | \"done\" | \"error\"): string {\n    switch (status) {\n      case \"start\":\n        return `\uD83D\uDD27 ${toolName}...`;\n      case \"done\":\n        return `\u2705 ${toolName}`;\n      case \"error\":\n        return `\u274C ${toolName} failed`;\n    }\n  }\n}\n", "/** Inline emoji-to-score map (avoids hard dep on abmind for adapters). */\nconst EMOJI_SCORES: Record<string, number> = {\n  \"\u2764\uFE0F\": 4, \"\uD83D\uDD25\": 4, \"\uD83C\uDF89\": 3, \"\uD83D\uDC4F\": 4, \"\u2764\": 4,\n  \"\uD83D\uDC4D\": 3, \"\uD83D\uDE02\": 3, \"\uD83E\uDD29\": 4, \"\uD83D\uDCAF\": 3, \"\u26A1\": 3,\n  \"\uD83D\uDE0A\": 2, \"\uD83D\uDE4F\": 2, \"\uD83E\uDD14\": 1, \"\uD83D\uDE2E\": 1,\n  \"\uD83D\uDC4E\": -3, \"\uD83D\uDE22\": -3, \"\uD83D\uDE21\": -4, \"\uD83E\uDD2E\": -4, \"\uD83D\uDCA9\": -5,\n};\n\nexport function emojiToScore(emoji: string): number {\n  return EMOJI_SCORES[emoji] ?? 1;\n}\n\nconst EMOJI_TAGS: Record<string, string> = {\n  \"\u2764\uFE0F\": \"love\", \"\u2764\": \"love\", \"\uD83D\uDD25\": \"excitement\", \"\uD83C\uDF89\": \"joy\",\n  \"\uD83D\uDC4F\": \"pride\", \"\uD83D\uDC4D\": \"gratitude\", \"\uD83D\uDE02\": \"humor\", \"\uD83E\uDD29\": \"excitement\",\n  \"\uD83D\uDCAF\": \"conviction\", \"\u26A1\": \"determination\", \"\uD83D\uDE0A\": \"joy\", \"\uD83D\uDE4F\": \"gratitude\",\n  \"\uD83E\uDD14\": \"curiosity\", \"\uD83D\uDE2E\": \"surprise\",\n  \"\uD83D\uDC4E\": \"frustration\", \"\uD83D\uDE22\": \"grief\", \"\uD83D\uDE21\": \"anger\", \"\uD83E\uDD2E\": \"anger\", \"\uD83D\uDCA9\": \"frustration\",\n};\n\nexport function emojiToTag(emoji: string): string {\n  return EMOJI_TAGS[emoji] ?? \"gratitude\";\n}\n"],
+  "mappings": ";;;;AAWO,IAAM,eAAsC;AAAA,EACjD,EAAE,MAAM,SAAS,aAAa,8BAA8B;AAAA,EAC5D,EAAE,MAAM,WAAW,aAAa,qBAAqB;AAAA,EACrD,EAAE,MAAM,WAAW,aAAa,yBAAyB;AAAA,EACzD,EAAE,MAAM,UAAU,aAAa,+CAA+C;AAAA,EAC9E,EAAE,MAAM,YAAY,aAAa,iCAAiC;AAAA,EAClE,EAAE,MAAM,SAAS,aAAa,kCAAkC;AAAA,EAChE,EAAE,MAAM,UAAU,aAAa,2CAA2C;AAAA,EAC1E,EAAE,MAAM,OAAO,aAAa,oBAAoB;AAAA,EAChD,EAAE,MAAM,SAAS,aAAa,wBAAwB;AAAA,EACtD,EAAE,MAAM,QAAQ,aAAa,wBAAwB;AAAA,EACrD,EAAE,MAAM,QAAQ,aAAa,4CAA4C;AAAA,EACzE,EAAE,MAAM,UAAU,aAAa,4BAA4B;AAAA,EAC3D,EAAE,MAAM,aAAa,aAAa,+BAA+B;AAAA,EACjE,EAAE,MAAM,aAAa,aAAa,wBAAwB;AAAA,EAC1D,EAAE,MAAM,UAAU,aAAa,eAAe;AAAA,EAC9C,EAAE,MAAM,UAAU,aAAa,qBAAqB;AAAA,EACpD,EAAE,MAAM,SAAS,aAAa,wBAAwB;AAAA,EACtD,EAAE,MAAM,SAAS,aAAa,kBAAkB;AAAA,EAChD,EAAE,MAAM,SAAS,aAAa,iBAAiB;AAAA,EAC/C,EAAE,MAAM,OAAO,aAAa,iBAAiB;AAAA,EAC7C,EAAE,MAAM,WAAW,aAAa,iBAAiB;AAAA,EACjD,EAAE,MAAM,UAAU,aAAa,sBAAsB;AAAA,EACrD,EAAE,MAAM,SAAS,aAAa,8BAA8B;AAAA,EAC5D,EAAE,MAAM,UAAU,aAAa,6BAA6B;AAAA,EAC5D,EAAE,MAAM,QAAQ,aAAa,oBAAoB;AACnD;;;ACzBO,IAAM,eAAN,MAAmB;AAAA,EACP;AAAA,EAEjB,YAAY,UAAwB;AAClC,QAAI,SAAS,MAAM,WAAW,GAAG;AAC/B,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,SAAK,WAAW;AAAA,EAClB;AAAA;AAAA,EAGA,UAAU,gBAAwB,UAAkB,WAAgC;AAClF,UAAM,MAAM,GAAG,QAAQ,IAAI,cAAc;AACzC,UAAM,OAAO,KAAK,SAAS,aAAa,IAAI,GAAG;AAC/C,QAAI,CAAC,KAAM,QAAO,EAAE,YAAY,MAAM;AACtC,QAAI,CAAC,KAAK,YAAY,MAAM,SAAS,EAAG,QAAO,EAAE,YAAY,MAAM;AACnE,WAAO,EAAE,YAAY,MAAM,KAAK;AAAA,EAClC;AAAA;AAAA,EAGA,cAAc,QAAgB,WAA6B;AACzD,UAAM,KAAK,KAAK,SAAS,aAAa,IAAI,YAAY,MAAM,EAAE;AAC9D,UAAM,KAAK,KAAK,SAAS,aAAa,IAAI,WAAW,MAAM,EAAE;AAC7D,UAAM,OAAO,MAAM;AACnB,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,KAAK,YAAY,MAAM,SAAS;AAAA,EACzC;AAAA,EAEQ,YAAY,MAAiB,WAA6B;AAChE,QAAI,CAAC,KAAK,gBAAgB,KAAK,aAAa,WAAW,EAAG,QAAO;AACjE,QAAI,CAAC,UAAW,QAAO;AACvB,WAAO,KAAK,aAAa,SAAS,SAAS;AAAA,EAC7C;AACF;;;AC3CA,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAG3B,IAAM,qBAAqB;AAMpB,IAAM,oBAAN,MAAwB;AAAA,EACrB,UAAU,oBAAI,IAAsB;AAAA;AAAA,EAG5C,aAAa,WAAmB,OAAqB;AACnD,UAAM,WAAW,KAAK,QAAQ,IAAI,SAAS;AAC3C,QAAI,UAAU;AACZ,eAAS,KAAK,KAAK;AAAA,IACrB,OAAO;AACL,WAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC;AAAA,IACrC;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAA6B;AACjC,UAAM,SAAS,KAAK,QAAQ,IAAI,SAAS;AACzC,SAAK,QAAQ,OAAO,SAAS;AAC7B,QAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO,CAAC;AAC5C,UAAM,OAAO,OAAO,KAAK,EAAE;AAC3B,WAAO,KAAK,UAAU,IAAI;AAAA,EAC5B;AAAA;AAAA,EAGA,UAAU,MAAwB;AAChC,QAAI,KAAK,UAAU,qBAAqB;AACtC,aAAO,CAAC,IAAI;AAAA,IACd;AAEA,UAAM,SAAmB,CAAC;AAC1B,QAAI,YAAY;AAEhB,WAAO,UAAU,SAAS,GAAG;AAC3B,UAAI,UAAU,UAAU,qBAAqB;AAC3C,eAAO,KAAK,SAAS;AACrB;AAAA,MACF;AAGA,UAAI,UAAU,UAAU,YAAY,QAAQ,mBAAmB;AAC/D,UAAI,WAAW,GAAG;AAEhB,kBAAU,UAAU,YAAY,MAAM,mBAAmB;AAAA,MAC3D;AACA,UAAI,WAAW,GAAG;AAEhB,kBAAU,UAAU,YAAY,KAAK,mBAAmB;AAAA,MAC1D;AACA,UAAI,WAAW,GAAG;AAEhB,kBAAU;AAAA,MACZ;AAEA,aAAO,KAAK,UAAU,MAAM,GAAG,OAAO,CAAC;AACvC,kBAAY,UAAU,MAAM,OAAO,EAAE,UAAU;AAAA,IACjD;AAEA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,mBAAmB,UAA0B;AAE3C,UAAM,QAAQ,SAAS,MAAM,0BAA0B;AACvD,WAAO,MACJ,IAAI,CAAC,MAAM,MAAM;AAEhB,UAAI,IAAI,MAAM,EAAG,QAAO;AACxB,aAAO,KAAK,QAAQ,oBAAoB,MAAM;AAAA,IAChD,CAAC,EACA,KAAK,EAAE;AAAA,EACZ;AAAA;AAAA;AAAA,EAIA,oBAAoB,MAAwB;AAC1C,QAAI,KAAK,UAAU,oBAAoB;AACrC,aAAO,CAAC,IAAI;AAAA,IACd;AAEA,UAAM,SAAmB,CAAC;AAC1B,QAAI,YAAY;AAEhB,WAAO,UAAU,SAAS,GAAG;AAC3B,UAAI,UAAU,UAAU,oBAAoB;AAC1C,eAAO,KAAK,SAAS;AACrB;AAAA,MACF;AAGA,YAAM,SAAS,UAAU,MAAM,GAAG,kBAAkB;AACpD,YAAM,eAAe,OAAO,MAAM,MAAM;AACxC,YAAM,mBAAmB,gBAAgB,QAAQ,aAAa,SAAS,MAAM;AAE7E,UAAI,kBAAkB;AAEpB,cAAM,eAAe,OAAO,YAAY,KAAK;AAE7C,YAAIA,WAAU,UAAU,YAAY,QAAQ,YAAY;AACxD,YAAIA,YAAW,GAAG;AAChB,UAAAA,WAAU,UAAU,YAAY,MAAM,YAAY;AAAA,QACpD;AACA,YAAIA,YAAW,GAAG;AAEhB,UAAAA,WAAU,UAAU,YAAY,MAAM,qBAAqB,CAAC;AAC5D,cAAIA,YAAW,GAAG;AAChB,YAAAA,WAAU,qBAAqB;AAAA,UACjC;AAEA,gBAAM,aAAa,UAAU,YAAY,OAAOA,QAAO;AACvD,gBAAM,YAAY,UAAU,MAAM,YAAY,UAAU,QAAQ,MAAM,UAAU,CAAC;AACjF,iBAAO,KAAK,UAAU,MAAM,GAAGA,QAAO,IAAI,OAAO;AACjD,sBAAY,YAAY,OAAO,UAAU,MAAMA,QAAO,EAAE,UAAU;AAClE;AAAA,QACF;AACA,eAAO,KAAK,UAAU,MAAM,GAAGA,QAAO,CAAC;AACvC,oBAAY,UAAU,MAAMA,QAAO,EAAE,UAAU;AAC/C;AAAA,MACF;AAGA,UAAI,UAAU,UAAU,YAAY,QAAQ,kBAAkB;AAC9D,UAAI,WAAW,GAAG;AAChB,kBAAU,UAAU,YAAY,MAAM,kBAAkB;AAAA,MAC1D;AACA,UAAI,WAAW,GAAG;AAChB,kBAAU,UAAU,YAAY,KAAK,kBAAkB;AAAA,MACzD;AACA,UAAI,WAAW,GAAG;AAChB,kBAAU;AAAA,MACZ;AAEA,aAAO,KAAK,UAAU,MAAM,GAAG,OAAO,CAAC;AACvC,kBAAY,UAAU,MAAM,OAAO,EAAE,UAAU;AAAA,IACjD;AAEA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,iBAAiB,MAAc,UAA8B;AAC3D,QAAI,aAAa,WAAW;AAC1B,aAAO,KAAK,oBAAoB,IAAI;AAAA,IACtC;AACA,WAAO,KAAK,UAAU,IAAI;AAAA,EAC5B;AAAA;AAAA,EAGA,kBAAkB,MAAsB;AACtC,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,iBAAiB,UAAkB,QAA4C;AAC7E,YAAQ,QAAQ;AAAA,MACd,KAAK;AACH,eAAO,aAAM,QAAQ;AAAA,MACvB,KAAK;AACH,eAAO,UAAK,QAAQ;AAAA,MACtB,KAAK;AACH,eAAO,UAAK,QAAQ;AAAA,IACxB;AAAA,EACF;AACF;;;AC7KA,IAAM,eAAuC;AAAA,EAC3C,gBAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,UAAK;AAAA,EACzC,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,UAAK;AAAA,EACzC,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EAAG,aAAM;AAAA,EACjC,aAAM;AAAA,EAAI,aAAM;AAAA,EAAI,aAAM;AAAA,EAAI,aAAM;AAAA,EAAI,aAAM;AAChD;AAEO,SAAS,aAAa,OAAuB;AAClD,SAAO,aAAa,KAAK,KAAK;AAChC;AAEA,IAAM,aAAqC;AAAA,EACzC,gBAAM;AAAA,EAAQ,UAAK;AAAA,EAAQ,aAAM;AAAA,EAAc,aAAM;AAAA,EACrD,aAAM;AAAA,EAAS,aAAM;AAAA,EAAa,aAAM;AAAA,EAAS,aAAM;AAAA,EACvD,aAAM;AAAA,EAAc,UAAK;AAAA,EAAiB,aAAM;AAAA,EAAO,aAAM;AAAA,EAC7D,aAAM;AAAA,EAAa,aAAM;AAAA,EACzB,aAAM;AAAA,EAAe,aAAM;AAAA,EAAS,aAAM;AAAA,EAAS,aAAM;AAAA,EAAS,aAAM;AAC1E;AAEO,SAAS,WAAW,OAAuB;AAChD,SAAO,WAAW,KAAK,KAAK;AAC9B;",
+  "names": ["splitAt"]
+}

package/bundle/{chunk-4KJ76TTE.js → chunk-4XW7YA3K.js}

@@ -4,11 +4,11 @@ import {
   init_logger,
   logInfo,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 import {
   abtarsHome,
   init_paths
-} from "./chunk-MJ6PHMOK.js";
+} from "./chunk-WW5F2DCO.js";
 import {
   __require
 } from "./chunk-7K2YZTLD.js";
@@ -70,4 +70,4 @@ export {
   installPackages,
   lazyRequire
 };
-//# sourceMappingURL=chunk-4KJ76TTE.js.map
+//# sourceMappingURL=chunk-4XW7YA3K.js.map

package/bundle/{chunk-Q62SXS73.js → chunk-BBDKU4EH.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
-import {
-  loadUsers
-} from "./chunk-GBBTK6H2.js";
 import {
   readEnv
-} from "./chunk-BYDUMHXT.js";
+} from "./chunk-HAF2AFBW.js";
+import {
+  loadUsers
+} from "./chunk-SRFEIZQT.js";
 import {
   getEnv,
   init_env_schema
-} from "./chunk-PZE3J7ER.js";
+} from "./chunk-3OXQWII3.js";
 import {
   init_logger,
   logError,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 import {
   init_paths
-} from "./chunk-MJ6PHMOK.js";
+} from "./chunk-WW5F2DCO.js";
 
 // src/components/config.ts
 import { access, stat, constants } from "node:fs/promises";
@@ -86,7 +86,7 @@ async function validateCliPath(cliPath) {
   }
 }
 async function loadAndValidateConfig() {
-  const { loadTransport, validateAtStartup } = await import("./transport-config-G5NKQXPJ.js");
+  const { loadTransport, validateAtStartup } = await import("./transport-config-JIKHB7GT.js");
   const tc = loadTransport();
   if (tc) {
     validateAtStartup();
@@ -221,4 +221,4 @@ export {
   isValidSnowflake,
   loadAndValidateConfig
 };
-//# sourceMappingURL=chunk-Q62SXS73.js.map
+//# sourceMappingURL=chunk-BBDKU4EH.js.map

package/bundle/{chunk-EX2SRTUE.js → chunk-CYSGXNBY.js}

@@ -5,7 +5,7 @@ import {
   logError,
   logTrace,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 import {
   __esm
 } from "./chunk-7K2YZTLD.js";
@@ -29,4 +29,4 @@ export {
   logAndSwallow,
   init_log_and_swallow
 };
-//# sourceMappingURL=chunk-EX2SRTUE.js.map
+//# sourceMappingURL=chunk-CYSGXNBY.js.map

package/bundle/{chunk-LYEAHE5V.js → chunk-DCY7DGMT.js}

@@ -3,7 +3,7 @@
 import {
   init_logger,
   logWarn
-} from "./chunk-2BY6I4P5.js";
+} from "./chunk-GUTRAMK3.js";
 import {
   __esm
 } from "./chunk-7K2YZTLD.js";
@@ -65,4 +65,4 @@ export {
   PEERS_SCHEMA,
   init_config_validator
 };
-//# sourceMappingURL=chunk-LYEAHE5V.js.map
+//# sourceMappingURL=chunk-DCY7DGMT.js.map