abtars 0.3.3 → 0.3.4-alpha.1

package/bundle/{acp-raw-client-AZJCEB6S.js → acp-raw-client-YTBGFN4S.js}

@@ -4,8 +4,9 @@ import {
   init_logger,
   logDebug,
   logWarn
-} from "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/components/transport/acp-raw-client.ts
@@ -114,4 +115,4 @@ var AcpRawClient = class {
 export {
   AcpRawClient
 };
-//# sourceMappingURL=acp-raw-client-AZJCEB6S.js.map
+//# sourceMappingURL=acp-raw-client-YTBGFN4S.js.map

package/bundle/{acp-raw-client-AZJCEB6S.js.map → acp-raw-client-YTBGFN4S.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/components/transport/acp-raw-client.ts"],
   "sourcesContent": ["/**\n * ACP Raw Client \u2014 fallback JSON-RPC over raw stdin/stdout (#924).\n * Used when the SDK's ndJsonStream/Web Streams layer breaks (kiro-cli #7554).\n */\nimport { spawn, type ChildProcess } from \"node:child_process\";\nimport { logDebug, logWarn } from \"../logger.js\";\n\nconst TAG = \"acp-raw\";\n\ntype NotificationHandler = (method: string, params: Record<string, unknown>) => void;\n\nexport class AcpRawClient {\n  private child: ChildProcess | null = null;\n  private pending = new Map<number, { resolve: (v: any) => void; reject: (e: Error) => void }>();\n  private nextId = 1;\n  private buf = \"\";\n  private onNotification: NotificationHandler;\n  private onExit: ((code: number | null, signal: string | null) => void) | null = null;\n\n  constructor(\n    private cliPath: string,\n    private args: string[],\n    private env: NodeJS.ProcessEnv,\n    private cwd: string,\n    onNotification: NotificationHandler,\n  ) {\n    this.onNotification = onNotification;\n  }\n\n  spawn(): void {\n    this.child = spawn(this.cliPath, this.args, {\n      cwd: this.cwd,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n      env: this.env,\n    });\n\n    this.child.stdout!.on(\"data\", (d: Buffer) => {\n      this.buf += d.toString();\n      const lines = this.buf.split(\"\\n\");\n      this.buf = lines.pop()!;\n      for (const line of lines) {\n        if (!line.trim()) continue;\n        try {\n          const msg = JSON.parse(line);\n          if (msg.id && this.pending.has(msg.id)) {\n            const p = this.pending.get(msg.id)!;\n            this.pending.delete(msg.id);\n            if (msg.error) p.reject(new Error(msg.error.message ?? JSON.stringify(msg.error)));\n            else p.resolve(msg.result);\n          } else if (msg.method) {\n            this.onNotification(msg.method, msg.params ?? {});\n          }\n        } catch { /* malformed line */ }\n      }\n    });\n\n    this.child.stderr!.on(\"data\", (d: Buffer) => {\n      logDebug(TAG, `[stderr] ${d.toString().trim()}`);\n    });\n\n    this.child.on(\"exit\", (code, signal) => {\n      logWarn(TAG, `CLI exited (code=${code}, signal=${signal})`);\n      // Reject all pending\n      for (const [, p] of this.pending) p.reject(new Error(`CLI exited (code=${code})`));\n      this.pending.clear();\n      this.child = null;\n      this.onExit?.(code, signal);\n    });\n  }\n\n  setOnExit(handler: (code: number | null, signal: string | null) => void): void {\n    this.onExit = handler;\n  }\n\n  private request<T = unknown>(method: string, params: Record<string, unknown>): Promise<T> {\n    if (!this.child?.stdin?.writable) return Promise.reject(new Error(\"CLI not running\"));\n    const id = this.nextId++;\n    const payload = JSON.stringify({ jsonrpc: \"2.0\", method, params, id });\n    logDebug(TAG, `\u2192 ${method} (id=${id}, ${payload.length} bytes)`);\n    return new Promise((resolve, reject) => {\n      this.pending.set(id, { resolve, reject });\n      this.child!.stdin!.write(payload + \"\\n\");\n    });\n  }\n\n  async initialize(): Promise<{ agentInfo: { name: string; version: string } }> {\n    return this.request(\"initialize\", {\n      protocolVersion: \"2025-11-16\",\n      capabilities: {},\n      clientInfo: { name: \"abtars\", version: \"0.2.3\" },\n    });\n  }\n\n  async newSession(params: { cwd: string; mcpServers: unknown[] }): Promise<{ sessionId: string }> {\n    return this.request(\"session/new\", params);\n  }\n\n  async prompt(params: { sessionId: string; prompt: Array<{ type: string; text: string }> }): Promise<{ stopReason: string }> {\n    return this.request(\"session/prompt\", params);\n  }\n\n  get pid(): number | undefined { return this.child?.pid; }\n  get alive(): boolean { return this.child !== null; }\n\n  destroy(): void {\n    if (this.child) {\n      const pid = this.child.pid;\n      this.child.kill(\"SIGTERM\");\n      this.child = null;\n      if (pid) setTimeout(() => { try { process.kill(pid, \"SIGKILL\"); } catch {} }, 2000).unref();\n    }\n    for (const [, p] of this.pending) p.reject(new Error(\"destroyed\"));\n    this.pending.clear();\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;AAKA;AADA,SAAS,aAAgC;AAGzC,IAAM,MAAM;AAIL,IAAM,eAAN,MAAmB;AAAA,EAQxB,YACU,SACA,MACA,KACA,KACR,gBACA;AALQ;AACA;AACA;AACA;AAGR,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAfQ,QAA6B;AAAA,EAC7B,UAAU,oBAAI,IAAuE;AAAA,EACrF,SAAS;AAAA,EACT,MAAM;AAAA,EACN;AAAA,EACA,SAAwE;AAAA,EAYhF,QAAc;AACZ,SAAK,QAAQ,MAAM,KAAK,SAAS,KAAK,MAAM;AAAA,MAC1C,KAAK,KAAK;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAK,KAAK;AAAA,IACZ,CAAC;AAED,SAAK,MAAM,OAAQ,GAAG,QAAQ,CAAC,MAAc;AAC3C,WAAK,OAAO,EAAE,SAAS;AACvB,YAAM,QAAQ,KAAK,IAAI,MAAM,IAAI;AACjC,WAAK,MAAM,MAAM,IAAI;AACrB,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,KAAK,KAAK,EAAG;AAClB,YAAI;AACF,gBAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,cAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,EAAE,GAAG;AACtC,kBAAM,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE;AACjC,iBAAK,QAAQ,OAAO,IAAI,EAAE;AAC1B,gBAAI,IAAI,MAAO,GAAE,OAAO,IAAI,MAAM,IAAI,MAAM,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,CAAC;AAAA,gBAC5E,GAAE,QAAQ,IAAI,MAAM;AAAA,UAC3B,WAAW,IAAI,QAAQ;AACrB,iBAAK,eAAe,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC;AAAA,UAClD;AAAA,QACF,QAAQ;AAAA,QAAuB;AAAA,MACjC;AAAA,IACF,CAAC;AAED,SAAK,MAAM,OAAQ,GAAG,QAAQ,CAAC,MAAc;AAC3C,eAAS,KAAK,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;AAAA,IACjD,CAAC;AAED,SAAK,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACtC,cAAQ,KAAK,oBAAoB,IAAI,YAAY,MAAM,GAAG;AAE1D,iBAAW,CAAC,EAAE,CAAC,KAAK,KAAK,QAAS,GAAE,OAAO,IAAI,MAAM,oBAAoB,IAAI,GAAG,CAAC;AACjF,WAAK,QAAQ,MAAM;AACnB,WAAK,QAAQ;AACb,WAAK,SAAS,MAAM,MAAM;AAAA,IAC5B,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,SAAqE;AAC7E,SAAK,SAAS;AAAA,EAChB;AAAA,EAEQ,QAAqB,QAAgB,QAA6C;AACxF,QAAI,CAAC,KAAK,OAAO,OAAO,SAAU,QAAO,QAAQ,OAAO,IAAI,MAAM,iBAAiB,CAAC;AACpF,UAAM,KAAK,KAAK;AAChB,UAAM,UAAU,KAAK,UAAU,EAAE,SAAS,OAAO,QAAQ,QAAQ,GAAG,CAAC;AACrE,aAAS,KAAK,UAAK,MAAM,QAAQ,EAAE,KAAK,QAAQ,MAAM,SAAS;AAC/D,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,QAAQ,IAAI,IAAI,EAAE,SAAS,OAAO,CAAC;AACxC,WAAK,MAAO,MAAO,MAAM,UAAU,IAAI;AAAA,IACzC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAwE;AAC5E,WAAO,KAAK,QAAQ,cAAc;AAAA,MAChC,iBAAiB;AAAA,MACjB,cAAc,CAAC;AAAA,MACf,YAAY,EAAE,MAAM,UAAU,SAAS,QAAQ;AAAA,IACjD,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,QAAgF;AAC/F,WAAO,KAAK,QAAQ,eAAe,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAM,OAAO,QAA+G;AAC1H,WAAO,KAAK,QAAQ,kBAAkB,MAAM;AAAA,EAC9C;AAAA,EAEA,IAAI,MAA0B;AAAE,WAAO,KAAK,OAAO;AAAA,EAAK;AAAA,EACxD,IAAI,QAAiB;AAAE,WAAO,KAAK,UAAU;AAAA,EAAM;AAAA,EAEnD,UAAgB;AACd,QAAI,KAAK,OAAO;AACd,YAAM,MAAM,KAAK,MAAM;AACvB,WAAK,MAAM,KAAK,SAAS;AACzB,WAAK,QAAQ;AACb,UAAI,IAAK,YAAW,MAAM;AAAE,YAAI;AAAE,kBAAQ,KAAK,KAAK,SAAS;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAAE,GAAG,GAAI,EAAE,MAAM;AAAA,IAC5F;AACA,eAAW,CAAC,EAAE,CAAC,KAAK,KAAK,QAAS,GAAE,OAAO,IAAI,MAAM,WAAW,CAAC;AACjE,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;",
+  "mappings": ";;;;;;;;;;;;AAKA;AADA,SAAS,aAAgC;AAGzC,IAAM,MAAM;AAIL,IAAM,eAAN,MAAmB;AAAA,EAQxB,YACU,SACA,MACA,KACA,KACR,gBACA;AALQ;AACA;AACA;AACA;AAGR,SAAK,iBAAiB;AAAA,EACxB;AAAA,EAfQ,QAA6B;AAAA,EAC7B,UAAU,oBAAI,IAAuE;AAAA,EACrF,SAAS;AAAA,EACT,MAAM;AAAA,EACN;AAAA,EACA,SAAwE;AAAA,EAYhF,QAAc;AACZ,SAAK,QAAQ,MAAM,KAAK,SAAS,KAAK,MAAM;AAAA,MAC1C,KAAK,KAAK;AAAA,MACV,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAK,KAAK;AAAA,IACZ,CAAC;AAED,SAAK,MAAM,OAAQ,GAAG,QAAQ,CAAC,MAAc;AAC3C,WAAK,OAAO,EAAE,SAAS;AACvB,YAAM,QAAQ,KAAK,IAAI,MAAM,IAAI;AACjC,WAAK,MAAM,MAAM,IAAI;AACrB,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,KAAK,KAAK,EAAG;AAClB,YAAI;AACF,gBAAM,MAAM,KAAK,MAAM,IAAI;AAC3B,cAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,EAAE,GAAG;AACtC,kBAAM,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE;AACjC,iBAAK,QAAQ,OAAO,IAAI,EAAE;AAC1B,gBAAI,IAAI,MAAO,GAAE,OAAO,IAAI,MAAM,IAAI,MAAM,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,CAAC;AAAA,gBAC5E,GAAE,QAAQ,IAAI,MAAM;AAAA,UAC3B,WAAW,IAAI,QAAQ;AACrB,iBAAK,eAAe,IAAI,QAAQ,IAAI,UAAU,CAAC,CAAC;AAAA,UAClD;AAAA,QACF,QAAQ;AAAA,QAAuB;AAAA,MACjC;AAAA,IACF,CAAC;AAED,SAAK,MAAM,OAAQ,GAAG,QAAQ,CAAC,MAAc;AAC3C,eAAS,KAAK,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;AAAA,IACjD,CAAC;AAED,SAAK,MAAM,GAAG,QAAQ,CAAC,MAAM,WAAW;AACtC,cAAQ,KAAK,oBAAoB,IAAI,YAAY,MAAM,GAAG;AAE1D,iBAAW,CAAC,EAAE,CAAC,KAAK,KAAK,QAAS,GAAE,OAAO,IAAI,MAAM,oBAAoB,IAAI,GAAG,CAAC;AACjF,WAAK,QAAQ,MAAM;AACnB,WAAK,QAAQ;AACb,WAAK,SAAS,MAAM,MAAM;AAAA,IAC5B,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,SAAqE;AAC7E,SAAK,SAAS;AAAA,EAChB;AAAA,EAEQ,QAAqB,QAAgB,QAA6C;AACxF,QAAI,CAAC,KAAK,OAAO,OAAO,SAAU,QAAO,QAAQ,OAAO,IAAI,MAAM,iBAAiB,CAAC;AACpF,UAAM,KAAK,KAAK;AAChB,UAAM,UAAU,KAAK,UAAU,EAAE,SAAS,OAAO,QAAQ,QAAQ,GAAG,CAAC;AACrE,aAAS,KAAK,UAAK,MAAM,QAAQ,EAAE,KAAK,QAAQ,MAAM,SAAS;AAC/D,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,QAAQ,IAAI,IAAI,EAAE,SAAS,OAAO,CAAC;AACxC,WAAK,MAAO,MAAO,MAAM,UAAU,IAAI;AAAA,IACzC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,aAAwE;AAC5E,WAAO,KAAK,QAAQ,cAAc;AAAA,MAChC,iBAAiB;AAAA,MACjB,cAAc,CAAC;AAAA,MACf,YAAY,EAAE,MAAM,UAAU,SAAS,QAAQ;AAAA,IACjD,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WAAW,QAAgF;AAC/F,WAAO,KAAK,QAAQ,eAAe,MAAM;AAAA,EAC3C;AAAA,EAEA,MAAM,OAAO,QAA+G;AAC1H,WAAO,KAAK,QAAQ,kBAAkB,MAAM;AAAA,EAC9C;AAAA,EAEA,IAAI,MAA0B;AAAE,WAAO,KAAK,OAAO;AAAA,EAAK;AAAA,EACxD,IAAI,QAAiB;AAAE,WAAO,KAAK,UAAU;AAAA,EAAM;AAAA,EAEnD,UAAgB;AACd,QAAI,KAAK,OAAO;AACd,YAAM,MAAM,KAAK,MAAM;AACvB,WAAK,MAAM,KAAK,SAAS;AACzB,WAAK,QAAQ;AACb,UAAI,IAAK,YAAW,MAAM;AAAE,YAAI;AAAE,kBAAQ,KAAK,KAAK,SAAS;AAAA,QAAG,QAAQ;AAAA,QAAC;AAAA,MAAE,GAAG,GAAI,EAAE,MAAM;AAAA,IAC5F;AACA,eAAW,CAAC,EAAE,CAAC,KAAK,KAAK,QAAS,GAAE,OAAO,IAAI,MAAM,WAAW,CAAC;AACjE,SAAK,QAAQ,MAAM;AAAA,EACrB;AACF;",
   "names": []
 }

package/bundle/{action-gate-QYJL57IX.js → action-gate-YISTP773.js}

@@ -5,8 +5,9 @@ import {
   logError,
   logInfo,
   logWarn
-} from "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/components/action-gate.ts
@@ -188,4 +189,4 @@ Authorize?`;
 export {
   ActionGate
 };
-//# sourceMappingURL=action-gate-QYJL57IX.js.map
+//# sourceMappingURL=action-gate-YISTP773.js.map

package/bundle/{action-gate-QYJL57IX.js.map → action-gate-YISTP773.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/components/action-gate.ts"],
   "sourcesContent": ["/**\n * action-gate.ts \u2014 Out-of-band authorization for privileged actions.\n * Agent requests a privileged action \u2192 Telegram inline keyboard to master \u2192 proceed/deny.\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { readFileSync, writeFileSync, mkdirSync, appendFileSync, existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { logInfo, logWarn, logError } from \"./logger.js\";\n\nconst TAG = \"action-gate\";\n\nexport interface AuthToken {\n  id: string;\n  category: string;\n  pattern: string;\n  expiresAt: number;\n  consumed: boolean;\n}\n\nexport interface AuthRule {\n  category: string;\n  pattern: string;\n  action: \"allow\" | \"deny\";\n  createdAt: string;\n}\n\nexport interface AuthRequest {\n  id: string;\n  category: string;\n  detail: string;\n  resolve: (granted: boolean) => void;\n  timer: ReturnType<typeof setTimeout>;\n  reminderSent: boolean;\n}\n\nexport type NotifyFn = (text: string, buttons: Array<{ text: string; data: string }>) => Promise<void>;\n\nexport class ActionGate {\n  private tokens = new Map<string, AuthToken>();\n  private pending = new Map<string, AuthRequest>();\n  private rules: AuthRule[] = [];\n  private rulesPath: string;\n  private auditPath: string;\n  private notify: NotifyFn | null = null;\n\n  constructor(authDir: string) {\n    this.rulesPath = join(authDir, \"rules.json\");\n    this.auditPath = join(authDir, \"audit.jsonl\");\n    mkdirSync(authDir, { recursive: true });\n    this.loadRules();\n  }\n\n  setNotify(fn: NotifyFn): void {\n    this.notify = fn;\n  }\n\n  /** Check if a rule already allows/denies this action. */\n  checkRules(category: string, pattern: string): \"allow\" | \"deny\" | null {\n    for (const rule of this.rules) {\n      if (rule.category !== category) continue;\n      if (rule.pattern === \"*\" || rule.pattern === pattern) {\n        return rule.action;\n      }\n    }\n    return null;\n  }\n\n  /**\n   * Request authorization for a privileged action.\n   * Returns true if granted, false if denied/timed out.\n   */\n  async requestAuth(category: string, detail: string): Promise<boolean> {\n    // Check persistent rules first\n    const rule = this.checkRules(category, detail);\n    if (rule === \"allow\") {\n      this.audit(category, detail, \"allowed-by-rule\");\n      return true;\n    }\n    if (rule === \"deny\") {\n      this.audit(category, detail, \"denied-by-rule\");\n      return false;\n    }\n\n    // No rule \u2014 ask master via Telegram\n    if (!this.notify) {\n      logWarn(TAG, `No notify function \u2014 auto-denying ${category}: ${detail.slice(0, 80)}`);\n      this.audit(category, detail, \"denied-no-notify\");\n      return false;\n    }\n\n    const requestId = randomBytes(8).toString(\"hex\");\n    const message = this.formatMessage(category, detail);\n\n    return new Promise<boolean>((resolve) => {\n      const timer = setTimeout(() => {\n        this.pending.delete(requestId);\n        logWarn(TAG, `Auth request timed out: ${category} ${detail.slice(0, 60)}`);\n        this.audit(category, detail, \"denied-timeout\");\n        resolve(false);\n      }, 120_000);\n\n      // 60s reminder\n      const reminderTimer = setTimeout(() => {\n        const req = this.pending.get(requestId);\n        if (req && !req.reminderSent) {\n          req.reminderSent = true;\n          this.notify?.(\"\u23F3 Still waiting for authorization...\", []).catch(() => {});\n        }\n      }, 60_000);\n\n      this.pending.set(requestId, { id: requestId, category, detail, resolve: (granted) => {\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        resolve(granted);\n      }, timer, reminderSent: false });\n\n      this.notify!(message, [\n        { text: \"\u2713 Allow once\", data: `auth:${requestId}:once` },\n        { text: \"\uD83D\uDD13 Always allow\", data: `auth:${requestId}:always` },\n        { text: \"\u274C Deny\", data: `auth:${requestId}:deny` },\n      ]).catch((err) => {\n        logError(TAG, `Failed to send auth request: ${err}`);\n        clearTimeout(timer);\n        clearTimeout(reminderTimer);\n        this.pending.delete(requestId);\n        this.audit(category, detail, \"denied-send-failed\");\n        resolve(false);\n      });\n    });\n  }\n\n  /** Handle callback from Telegram button press. */\n  handleCallback(data: string): boolean {\n    const match = data.match(/^auth:([a-f0-9]+):(once|always|deny)$/);\n    if (!match) return false;\n\n    const [, requestId, action] = match;\n    const req = this.pending.get(requestId!);\n    if (!req) return false;\n\n    if (action === \"once\") {\n      this.audit(req.category, req.detail, \"allowed-once\");\n      req.resolve(true);\n    } else if (action === \"always\") {\n      this.storeRule(req.category, req.detail, \"allow\");\n      this.audit(req.category, req.detail, \"allowed-always\");\n      req.resolve(true);\n    } else {\n      this.audit(req.category, req.detail, \"denied\");\n      req.resolve(false);\n    }\n    return true;\n  }\n\n  /** Generate a one-use token for external CLI callers. */\n  generateToken(category: string, pattern: string): string {\n    const id = randomBytes(16).toString(\"hex\");\n    this.tokens.set(id, {\n      id,\n      category,\n      pattern,\n      expiresAt: Date.now() + 120_000,\n      consumed: false,\n    });\n    return id;\n  }\n\n  /** Validate and consume a token. */\n  validateToken(tokenId: string): boolean {\n    const token = this.tokens.get(tokenId);\n    if (!token) return false;\n    if (token.consumed || Date.now() > token.expiresAt) {\n      this.tokens.delete(tokenId);\n      return false;\n    }\n    token.consumed = true;\n    this.tokens.delete(tokenId);\n    return true;\n  }\n\n  private storeRule(category: string, pattern: string, action: \"allow\" | \"deny\"): void {\n    this.rules.push({ category, pattern, action, createdAt: new Date().toISOString() });\n    writeFileSync(this.rulesPath, JSON.stringify({ rules: this.rules }, null, 2) + \"\\n\");\n    logInfo(TAG, `Stored rule: ${action} ${category}:${pattern}`);\n  }\n\n  private loadRules(): void {\n    if (!existsSync(this.rulesPath)) { this.rules = []; return; }\n    try {\n      const data = JSON.parse(readFileSync(this.rulesPath, \"utf-8\"));\n      this.rules = data.rules ?? [];\n    } catch { this.rules = []; }\n  }\n\n  private audit(category: string, detail: string, outcome: string): void {\n    const entry = JSON.stringify({ ts: new Date().toISOString(), category, detail: detail.slice(0, 200), outcome });\n    try { appendFileSync(this.auditPath, entry + \"\\n\"); } catch { /* best effort */ }\n  }\n\n  private formatMessage(category: string, detail: string): string {\n    switch (category) {\n      case \"secret-recall\": return `\uD83D\uDD10 Agent wants SECRET memory:\\n\"${detail.slice(0, 100)}\"\\n\\nAuthorize?`;\n      case \"bash-auth\": return `\u26A0\uFE0F Agent wants to run:\\n\\`${detail.slice(0, 200)}\\`\\n\\nAuthorize?`;\n      default: return `\uD83D\uDD12 Agent requests: ${category}\\n${detail.slice(0, 150)}\\n\\nAuthorize?`;\n    }\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;AAQA;AAHA,SAAS,mBAAmB;AAC5B,SAAS,cAAc,eAAe,WAAW,gBAAgB,kBAAkB;AACnF,SAAS,YAAY;AAGrB,IAAM,MAAM;AA4BL,IAAM,aAAN,MAAiB;AAAA,EACd,SAAS,oBAAI,IAAuB;AAAA,EACpC,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAoB,CAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA,SAA0B;AAAA,EAElC,YAAY,SAAiB;AAC3B,SAAK,YAAY,KAAK,SAAS,YAAY;AAC3C,SAAK,YAAY,KAAK,SAAS,aAAa;AAC5C,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,UAAU,IAAoB;AAC5B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAGA,WAAW,UAAkB,SAA0C;AACrE,eAAW,QAAQ,KAAK,OAAO;AAC7B,UAAI,KAAK,aAAa,SAAU;AAChC,UAAI,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACpD,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY,UAAkB,QAAkC;AAEpE,UAAM,OAAO,KAAK,WAAW,UAAU,MAAM;AAC7C,QAAI,SAAS,SAAS;AACpB,WAAK,MAAM,UAAU,QAAQ,iBAAiB;AAC9C,aAAO;AAAA,IACT;AACA,QAAI,SAAS,QAAQ;AACnB,WAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,KAAK,QAAQ;AAChB,cAAQ,KAAK,0CAAqC,QAAQ,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACpF,WAAK,MAAM,UAAU,QAAQ,kBAAkB;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,UAAM,UAAU,KAAK,cAAc,UAAU,MAAM;AAEnD,WAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,YAAM,QAAQ,WAAW,MAAM;AAC7B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,KAAK,2BAA2B,QAAQ,IAAI,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACzE,aAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,gBAAQ,KAAK;AAAA,MACf,GAAG,IAAO;AAGV,YAAM,gBAAgB,WAAW,MAAM;AACrC,cAAM,MAAM,KAAK,QAAQ,IAAI,SAAS;AACtC,YAAI,OAAO,CAAC,IAAI,cAAc;AAC5B,cAAI,eAAe;AACnB,eAAK,SAAS,6CAAwC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC1E;AAAA,MACF,GAAG,GAAM;AAET,WAAK,QAAQ,IAAI,WAAW,EAAE,IAAI,WAAW,UAAU,QAAQ,SAAS,CAAC,YAAY;AACnF,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,OAAO;AAAA,MACjB,GAAG,OAAO,cAAc,MAAM,CAAC;AAE/B,WAAK,OAAQ,SAAS;AAAA,QACpB,EAAE,MAAM,qBAAgB,MAAM,QAAQ,SAAS,QAAQ;AAAA,QACvD,EAAE,MAAM,0BAAmB,MAAM,QAAQ,SAAS,UAAU;AAAA,QAC5D,EAAE,MAAM,eAAU,MAAM,QAAQ,SAAS,QAAQ;AAAA,MACnD,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,iBAAS,KAAK,gCAAgC,GAAG,EAAE;AACnD,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,aAAK,MAAM,UAAU,QAAQ,oBAAoB;AACjD,gBAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,MAAuB;AACpC,UAAM,QAAQ,KAAK,MAAM,uCAAuC;AAChE,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,CAAC,EAAE,WAAW,MAAM,IAAI;AAC9B,UAAM,MAAM,KAAK,QAAQ,IAAI,SAAU;AACvC,QAAI,CAAC,IAAK,QAAO;AAEjB,QAAI,WAAW,QAAQ;AACrB,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,cAAc;AACnD,UAAI,QAAQ,IAAI;AAAA,IAClB,WAAW,WAAW,UAAU;AAC9B,WAAK,UAAU,IAAI,UAAU,IAAI,QAAQ,OAAO;AAChD,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,gBAAgB;AACrD,UAAI,QAAQ,IAAI;AAAA,IAClB,OAAO;AACL,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,QAAQ;AAC7C,UAAI,QAAQ,KAAK;AAAA,IACnB;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,UAAkB,SAAyB;AACvD,UAAM,KAAK,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC,SAAK,OAAO,IAAI,IAAI;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI,IAAI;AAAA,MACxB,UAAU;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,SAA0B;AACtC,UAAM,QAAQ,KAAK,OAAO,IAAI,OAAO;AACrC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,YAAY,KAAK,IAAI,IAAI,MAAM,WAAW;AAClD,WAAK,OAAO,OAAO,OAAO;AAC1B,aAAO;AAAA,IACT;AACA,UAAM,WAAW;AACjB,SAAK,OAAO,OAAO,OAAO;AAC1B,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,UAAkB,SAAiB,QAAgC;AACnF,SAAK,MAAM,KAAK,EAAE,UAAU,SAAS,QAAQ,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AAClF,kBAAc,KAAK,WAAW,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI;AACnF,YAAQ,KAAK,gBAAgB,MAAM,IAAI,QAAQ,IAAI,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEQ,YAAkB;AACxB,QAAI,CAAC,WAAW,KAAK,SAAS,GAAG;AAAE,WAAK,QAAQ,CAAC;AAAG;AAAA,IAAQ;AAC5D,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,aAAa,KAAK,WAAW,OAAO,CAAC;AAC7D,WAAK,QAAQ,KAAK,SAAS,CAAC;AAAA,IAC9B,QAAQ;AAAE,WAAK,QAAQ,CAAC;AAAA,IAAG;AAAA,EAC7B;AAAA,EAEQ,MAAM,UAAkB,QAAgB,SAAuB;AACrE,UAAM,QAAQ,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,UAAU,QAAQ,OAAO,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;AAC9G,QAAI;AAAE,qBAAe,KAAK,WAAW,QAAQ,IAAI;AAAA,IAAG,QAAQ;AAAA,IAAoB;AAAA,EAClF;AAAA,EAEQ,cAAc,UAAkB,QAAwB;AAC9D,YAAQ,UAAU;AAAA,MAChB,KAAK;AAAiB,eAAO;AAAA,GAAmC,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MACpF,KAAK;AAAa,eAAO;AAAA,IAA6B,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MAC1E;AAAS,eAAO,6BAAsB,QAAQ;AAAA,EAAK,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,IACzE;AAAA,EACF;AACF;",
+  "mappings": ";;;;;;;;;;;;;AAQA;AAHA,SAAS,mBAAmB;AAC5B,SAAS,cAAc,eAAe,WAAW,gBAAgB,kBAAkB;AACnF,SAAS,YAAY;AAGrB,IAAM,MAAM;AA4BL,IAAM,aAAN,MAAiB;AAAA,EACd,SAAS,oBAAI,IAAuB;AAAA,EACpC,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAoB,CAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACA,SAA0B;AAAA,EAElC,YAAY,SAAiB;AAC3B,SAAK,YAAY,KAAK,SAAS,YAAY;AAC3C,SAAK,YAAY,KAAK,SAAS,aAAa;AAC5C,cAAU,SAAS,EAAE,WAAW,KAAK,CAAC;AACtC,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,UAAU,IAAoB;AAC5B,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA,EAGA,WAAW,UAAkB,SAA0C;AACrE,eAAW,QAAQ,KAAK,OAAO;AAC7B,UAAI,KAAK,aAAa,SAAU;AAChC,UAAI,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACpD,eAAO,KAAK;AAAA,MACd;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAY,UAAkB,QAAkC;AAEpE,UAAM,OAAO,KAAK,WAAW,UAAU,MAAM;AAC7C,QAAI,SAAS,SAAS;AACpB,WAAK,MAAM,UAAU,QAAQ,iBAAiB;AAC9C,aAAO;AAAA,IACT;AACA,QAAI,SAAS,QAAQ;AACnB,WAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,aAAO;AAAA,IACT;AAGA,QAAI,CAAC,KAAK,QAAQ;AAChB,cAAQ,KAAK,0CAAqC,QAAQ,KAAK,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACpF,WAAK,MAAM,UAAU,QAAQ,kBAAkB;AAC/C,aAAO;AAAA,IACT;AAEA,UAAM,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK;AAC/C,UAAM,UAAU,KAAK,cAAc,UAAU,MAAM;AAEnD,WAAO,IAAI,QAAiB,CAAC,YAAY;AACvC,YAAM,QAAQ,WAAW,MAAM;AAC7B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,KAAK,2BAA2B,QAAQ,IAAI,OAAO,MAAM,GAAG,EAAE,CAAC,EAAE;AACzE,aAAK,MAAM,UAAU,QAAQ,gBAAgB;AAC7C,gBAAQ,KAAK;AAAA,MACf,GAAG,IAAO;AAGV,YAAM,gBAAgB,WAAW,MAAM;AACrC,cAAM,MAAM,KAAK,QAAQ,IAAI,SAAS;AACtC,YAAI,OAAO,CAAC,IAAI,cAAc;AAC5B,cAAI,eAAe;AACnB,eAAK,SAAS,6CAAwC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AAAA,QAC1E;AAAA,MACF,GAAG,GAAM;AAET,WAAK,QAAQ,IAAI,WAAW,EAAE,IAAI,WAAW,UAAU,QAAQ,SAAS,CAAC,YAAY;AACnF,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,gBAAQ,OAAO;AAAA,MACjB,GAAG,OAAO,cAAc,MAAM,CAAC;AAE/B,WAAK,OAAQ,SAAS;AAAA,QACpB,EAAE,MAAM,qBAAgB,MAAM,QAAQ,SAAS,QAAQ;AAAA,QACvD,EAAE,MAAM,0BAAmB,MAAM,QAAQ,SAAS,UAAU;AAAA,QAC5D,EAAE,MAAM,eAAU,MAAM,QAAQ,SAAS,QAAQ;AAAA,MACnD,CAAC,EAAE,MAAM,CAAC,QAAQ;AAChB,iBAAS,KAAK,gCAAgC,GAAG,EAAE;AACnD,qBAAa,KAAK;AAClB,qBAAa,aAAa;AAC1B,aAAK,QAAQ,OAAO,SAAS;AAC7B,aAAK,MAAM,UAAU,QAAQ,oBAAoB;AACjD,gBAAQ,KAAK;AAAA,MACf,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,eAAe,MAAuB;AACpC,UAAM,QAAQ,KAAK,MAAM,uCAAuC;AAChE,QAAI,CAAC,MAAO,QAAO;AAEnB,UAAM,CAAC,EAAE,WAAW,MAAM,IAAI;AAC9B,UAAM,MAAM,KAAK,QAAQ,IAAI,SAAU;AACvC,QAAI,CAAC,IAAK,QAAO;AAEjB,QAAI,WAAW,QAAQ;AACrB,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,cAAc;AACnD,UAAI,QAAQ,IAAI;AAAA,IAClB,WAAW,WAAW,UAAU;AAC9B,WAAK,UAAU,IAAI,UAAU,IAAI,QAAQ,OAAO;AAChD,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,gBAAgB;AACrD,UAAI,QAAQ,IAAI;AAAA,IAClB,OAAO;AACL,WAAK,MAAM,IAAI,UAAU,IAAI,QAAQ,QAAQ;AAC7C,UAAI,QAAQ,KAAK;AAAA,IACnB;AACA,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,UAAkB,SAAyB;AACvD,UAAM,KAAK,YAAY,EAAE,EAAE,SAAS,KAAK;AACzC,SAAK,OAAO,IAAI,IAAI;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,WAAW,KAAK,IAAI,IAAI;AAAA,MACxB,UAAU;AAAA,IACZ,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,cAAc,SAA0B;AACtC,UAAM,QAAQ,KAAK,OAAO,IAAI,OAAO;AACrC,QAAI,CAAC,MAAO,QAAO;AACnB,QAAI,MAAM,YAAY,KAAK,IAAI,IAAI,MAAM,WAAW;AAClD,WAAK,OAAO,OAAO,OAAO;AAC1B,aAAO;AAAA,IACT;AACA,UAAM,WAAW;AACjB,SAAK,OAAO,OAAO,OAAO;AAC1B,WAAO;AAAA,EACT;AAAA,EAEQ,UAAU,UAAkB,SAAiB,QAAgC;AACnF,SAAK,MAAM,KAAK,EAAE,UAAU,SAAS,QAAQ,YAAW,oBAAI,KAAK,GAAE,YAAY,EAAE,CAAC;AAClF,kBAAc,KAAK,WAAW,KAAK,UAAU,EAAE,OAAO,KAAK,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI;AACnF,YAAQ,KAAK,gBAAgB,MAAM,IAAI,QAAQ,IAAI,OAAO,EAAE;AAAA,EAC9D;AAAA,EAEQ,YAAkB;AACxB,QAAI,CAAC,WAAW,KAAK,SAAS,GAAG;AAAE,WAAK,QAAQ,CAAC;AAAG;AAAA,IAAQ;AAC5D,QAAI;AACF,YAAM,OAAO,KAAK,MAAM,aAAa,KAAK,WAAW,OAAO,CAAC;AAC7D,WAAK,QAAQ,KAAK,SAAS,CAAC;AAAA,IAC9B,QAAQ;AAAE,WAAK,QAAQ,CAAC;AAAA,IAAG;AAAA,EAC7B;AAAA,EAEQ,MAAM,UAAkB,QAAgB,SAAuB;AACrE,UAAM,QAAQ,KAAK,UAAU,EAAE,KAAI,oBAAI,KAAK,GAAE,YAAY,GAAG,UAAU,QAAQ,OAAO,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;AAC9G,QAAI;AAAE,qBAAe,KAAK,WAAW,QAAQ,IAAI;AAAA,IAAG,QAAQ;AAAA,IAAoB;AAAA,EAClF;AAAA,EAEQ,cAAc,UAAkB,QAAwB;AAC9D,YAAQ,UAAU;AAAA,MAChB,KAAK;AAAiB,eAAO;AAAA,GAAmC,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MACpF,KAAK;AAAa,eAAO;AAAA,IAA6B,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,MAC1E;AAAS,eAAO,6BAAsB,QAAQ;AAAA,EAAK,OAAO,MAAM,GAAG,GAAG,CAAC;AAAA;AAAA;AAAA,IACzE;AAAA,EACF;AACF;",
   "names": []
 }

package/bundle/{agent-api-adapter-PYMNQXHE.js → agent-api-adapter-E4HWVJ32.js}

@@ -4,8 +4,9 @@ import {
   init_logger,
   logDebug,
   logInfo
-} from "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/platforms/agent-api/agent-api-adapter.ts
@@ -34,7 +35,7 @@ var AgentApiAdapter = class {
    * Returns the Orc's response (resolved when card completes).
    */
   async handlePeerMessage(peerId, sessionId, text, timeoutMs = 3e5) {
-    const { spin } = await import("./spin-4DBYHS3E.js");
+    const { spin } = await import("./spin-76K4R6FK.js");
     logDebug(TAG, `-> ${peerId}/${sessionId}: ${text.slice(0, 100)}`);
     const { result } = await spin.dispatchAwait({
       type: "O",
@@ -51,4 +52,4 @@ var AgentApiAdapter = class {
 export {
   AgentApiAdapter
 };
-//# sourceMappingURL=agent-api-adapter-PYMNQXHE.js.map
+//# sourceMappingURL=agent-api-adapter-E4HWVJ32.js.map

package/bundle/{agent-api-adapter-PYMNQXHE.js.map → agent-api-adapter-E4HWVJ32.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/platforms/agent-api/agent-api-adapter.ts"],
   "sourcesContent": ["/**\n * agent-api-adapter.ts \u2014 A2A as a PlatformAdapter (#978).\n *\n * Thin adapter: receives peer chat messages via HTTP, routes through\n * Spin \u2192 Orc. Peers don't get casual chat \u2014 they get orchestrated work.\n * Response buffered via Promise \u2014 resolved when Orc completes the card.\n */\n\nimport type { PlatformAdapter, PlatformCapabilities, InboundMessage, SendOpts } from \"../../types/platform.js\";\nimport { logInfo, logDebug } from \"../../components/logger.js\";\n\nconst TAG = \"a2a-adapter\";\n\nexport class AgentApiAdapter implements PlatformAdapter {\n  readonly name = \"a2a\" as const;\n  readonly capabilities: PlatformCapabilities = { voice: false, reactions: false, typing: false, threads: false };\n  readonly supportsStreaming = false;\n\n  async start(): Promise<void> {\n    logInfo(TAG, \"A2A platform adapter ready\");\n  }\n\n  stop(): void {}\n\n  authorize(_msg: InboundMessage): boolean {\n    return true; // JWT already verified at HTTP layer\n  }\n\n  async sendMessage(_channelId: string, _text: string, _opts?: SendOpts): Promise<string | undefined> {\n    return undefined; // Not used \u2014 response comes from Orc card result\n  }\n\n  chunkResponse(text: string): string[] {\n    return [text];\n  }\n\n  /**\n   * Process a peer chat message: route through Spin \u2192 Orc.\n   * Returns the Orc's response (resolved when card completes).\n   */\n  async handlePeerMessage(peerId: string, sessionId: string, text: string, timeoutMs = 300_000): Promise<string> {\n    const { spin } = await import(\"../../components/spin.js\");\n\n    logDebug(TAG, `-> ${peerId}/${sessionId}: ${text.slice(0, 100)}`);\n\n    const { result } = await spin.dispatchAwait({\n      type: \"O\",\n      goal: `[PEER REQUEST from ${peerId}] ${text}`,\n      title: `peer:${peerId}`,\n      source: \"peer\",\n      timeoutMs,\n    });\n\n    const response = result || \"No response\";\n    logDebug(TAG, `<- ${peerId}/${sessionId}: ${response.slice(0, 100)}`);\n    return response;\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;AASA;AAEA,IAAM,MAAM;AAEL,IAAM,kBAAN,MAAiD;AAAA,EAC7C,OAAO;AAAA,EACP,eAAqC,EAAE,OAAO,OAAO,WAAW,OAAO,QAAQ,OAAO,SAAS,MAAM;AAAA,EACrG,oBAAoB;AAAA,EAE7B,MAAM,QAAuB;AAC3B,YAAQ,KAAK,4BAA4B;AAAA,EAC3C;AAAA,EAEA,OAAa;AAAA,EAAC;AAAA,EAEd,UAAU,MAA+B;AACvC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,YAAoB,OAAe,OAA+C;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,cAAc,MAAwB;AACpC,WAAO,CAAC,IAAI;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAkB,QAAgB,WAAmB,MAAc,YAAY,KAA0B;AAC7G,UAAM,EAAE,KAAK,IAAI,MAAM,OAAO,oBAA0B;AAExD,aAAS,KAAK,MAAM,MAAM,IAAI,SAAS,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAEhE,UAAM,EAAE,OAAO,IAAI,MAAM,KAAK,cAAc;AAAA,MAC1C,MAAM;AAAA,MACN,MAAM,sBAAsB,MAAM,KAAK,IAAI;AAAA,MAC3C,OAAO,QAAQ,MAAM;AAAA,MACrB,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AAED,UAAM,WAAW,UAAU;AAC3B,aAAS,KAAK,MAAM,MAAM,IAAI,SAAS,KAAK,SAAS,MAAM,GAAG,GAAG,CAAC,EAAE;AACpE,WAAO;AAAA,EACT;AACF;",
+  "mappings": ";;;;;;;;;;;;AASA;AAEA,IAAM,MAAM;AAEL,IAAM,kBAAN,MAAiD;AAAA,EAC7C,OAAO;AAAA,EACP,eAAqC,EAAE,OAAO,OAAO,WAAW,OAAO,QAAQ,OAAO,SAAS,MAAM;AAAA,EACrG,oBAAoB;AAAA,EAE7B,MAAM,QAAuB;AAC3B,YAAQ,KAAK,4BAA4B;AAAA,EAC3C;AAAA,EAEA,OAAa;AAAA,EAAC;AAAA,EAEd,UAAU,MAA+B;AACvC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,YAAoB,OAAe,OAA+C;AAClG,WAAO;AAAA,EACT;AAAA,EAEA,cAAc,MAAwB;AACpC,WAAO,CAAC,IAAI;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAkB,QAAgB,WAAmB,MAAc,YAAY,KAA0B;AAC7G,UAAM,EAAE,KAAK,IAAI,MAAM,OAAO,oBAA0B;AAExD,aAAS,KAAK,MAAM,MAAM,IAAI,SAAS,KAAK,KAAK,MAAM,GAAG,GAAG,CAAC,EAAE;AAEhE,UAAM,EAAE,OAAO,IAAI,MAAM,KAAK,cAAc;AAAA,MAC1C,MAAM;AAAA,MACN,MAAM,sBAAsB,MAAM,KAAK,IAAI;AAAA,MAC3C,OAAO,QAAQ,MAAM;AAAA,MACrB,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AAED,UAAM,WAAW,UAAU;AAC3B,aAAS,KAAK,MAAM,MAAM,IAAI,SAAS,KAAK,SAAS,MAAM,GAAG,GAAG,CAAC,EAAE;AACpE,WAAO;AAAA,EACT;AACF;",
   "names": []
 }

package/bundle/{agent-api-rate-limit-4GEZ4YN5.js → agent-api-rate-limit-VENFGOAD.js}

@@ -4,14 +4,15 @@ import {
   checkPeerPostLimit,
   checkRateLimit,
   init_agent_api_rate_limit
-} from "./chunk-YEOZN5IE.js";
-import "./chunk-SSCGWDIC.js";
-import "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-JRGEEGZF.js";
+import "./chunk-BWJ37KMW.js";
+import "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 init_agent_api_rate_limit();
 export {
   checkPeerPostLimit,
   checkRateLimit
 };
-//# sourceMappingURL=agent-api-rate-limit-4GEZ4YN5.js.map
+//# sourceMappingURL=agent-api-rate-limit-VENFGOAD.js.map

package/bundle/{agent-registry-563P4EUJ.js → agent-registry-DL7UT272.js}

@@ -3,17 +3,18 @@
 import {
   createAgentTransport,
   createSubagentTransport
-} from "./chunk-NGZVJ52F.js";
-import "./chunk-37EX63K4.js";
-import "./chunk-W726UGI6.js";
+} from "./chunk-76YN7O3U.js";
+import "./chunk-YWHJJHJ2.js";
+import "./chunk-ZKMKAO75.js";
 import "./chunk-N5KN3LGD.js";
-import "./chunk-SSCGWDIC.js";
-import "./chunk-WP7FZHMI.js";
-import "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+import "./chunk-BWJ37KMW.js";
+import "./chunk-W2PSVV2T.js";
+import "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createAgentTransport,
   createSubagentTransport
 };
-//# sourceMappingURL=agent-registry-563P4EUJ.js.map
+//# sourceMappingURL=agent-registry-DL7UT272.js.map

package/bundle/bootstrap-V5MROD3X.js

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+ import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  makeLocalBuildSource,
+  makeNpmSource,
+  syncSrcRepos
+} from "./chunk-MJACYH7A.js";
+import {
+  cleanStaleStaging
+} from "./chunk-QJPDBJDP.js";
+import {
+  packagePaths
+} from "./chunk-2BXXQG7P.js";
+import "./chunk-7K2YZTLD.js";
+
+// src/cli/bootstrap.ts
+import { join } from "node:path";
+import { spawnSync } from "node:child_process";
+async function bootstrap(opts) {
+  const { channel } = opts;
+  const paths = packagePaths("abtars");
+  const srcDir = join(paths.releasesDir, "src");
+  const repoRoot = join(srcDir, "abtars");
+  cleanStaleStaging(paths.appStaging);
+  let staged;
+  if (channel === "dev") {
+    try {
+      syncSrcRepos(srcDir, ["abtars"]);
+    } catch {
+      return 1;
+    }
+    const source = makeLocalBuildSource({ repoRoot, allowStale: true });
+    staged = await source.prepare({ stagingDir: paths.appStaging, home: paths.home, allowStale: true });
+  } else {
+    const source = makeNpmSource("abtars", channel === "alpha" ? "alpha" : "latest");
+    staged = await source.prepare({ stagingDir: paths.appStaging, home: paths.home, allowStale: true });
+  }
+  process.stdout.write(`\u2713 obtained ${staged.version}
+`);
+  const freshCli = join(staged.stagedPath, "bundle", "abtars-cli.js");
+  const args = [
+    freshCli,
+    "__deploy",
+    "--staged",
+    staged.stagedPath,
+    "--version",
+    staged.version,
+    "--channel",
+    channel,
+    "--repo-root",
+    repoRoot
+  ];
+  if (staged.commit) args.push("--commit", staged.commit);
+  if (staged.branch) args.push("--branch", staged.branch);
+  if (staged.packageLockHash) args.push("--package-lock-hash", staged.packageLockHash);
+  const r = spawnSync("node", args, { stdio: "inherit" });
+  return r.status ?? 1;
+}
+export {
+  bootstrap
+};
+//# sourceMappingURL=bootstrap-V5MROD3X.js.map

package/bundle/bootstrap-V5MROD3X.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/bootstrap.ts"],
+  "sourcesContent": ["/**\n * bootstrap.ts (#1237) \u2014 the STABLE, old-code surface of `abtars update`.\n *\n * Role: OBTAIN fresh code only (fail-safe \u2014 nothing is swapped here), then hand\n * off to the freshly-staged `__deploy` which performs activation. A bug in\n * activation is self-healing: the next update fetches the fixed __deploy and\n * runs it. Only this file (obtain) runs as old code, and its failure mode is\n * safe-abort (the running release keeps serving).\n *\n * Keep this minimal: reuse the existing obtain primitives (syncSrcRepos +\n * UpdateSource.prepare). No imports from components/*, no business logic, no\n * activation logic. #1243: abmind is no longer obtained here \u2014 it ships\n * separately and is discovered at runtime.\n */\nimport { join } from \"node:path\";\nimport { spawnSync } from \"node:child_process\";\nimport { cleanStaleStaging, packagePaths } from \"./deploy-lib/index.js\";\nimport { syncSrcRepos } from \"./deploy-lib/deploy.js\";\nimport { makeLocalBuildSource } from \"./update-sources/dev.js\";\nimport { makeNpmSource } from \"./update-sources/npm.js\";\nimport type { SourceName, StagedRelease } from \"./update-sources/types.js\";\n\nexport interface BootstrapOptions {\n  readonly channel: SourceName;\n}\n\nexport async function bootstrap(opts: BootstrapOptions): Promise<number> {\n  const { channel } = opts;\n  const paths = packagePaths(\"abtars\");\n  const srcDir = join(paths.releasesDir, \"src\");\n  const repoRoot = join(srcDir, \"abtars\");\n\n  // \u2500\u2500 Obtain (fail-safe) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  cleanStaleStaging(paths.appStaging);\n  let staged: StagedRelease;\n  if (channel === \"dev\") {\n    try { syncSrcRepos(srcDir, [\"abtars\"]); } catch { return 1; }\n    const source = makeLocalBuildSource({ repoRoot, allowStale: true });\n    staged = await source.prepare({ stagingDir: paths.appStaging, home: paths.home, allowStale: true });\n  } else {\n    const source = makeNpmSource(\"abtars\", channel === \"alpha\" ? \"alpha\" : \"latest\");\n    staged = await source.prepare({ stagingDir: paths.appStaging, home: paths.home, allowStale: true });\n  }\n  process.stdout.write(`\u2713 obtained ${staged.version}\\n`);\n\n  // \u2500\u2500 Hand off to FRESH __deploy (runs the just-staged bundle) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\n  // Detach (when needed) is the caller's concern: the /update bridge handler\n  // already spawns this whole invocation detached+unref. So we run __deploy\n  // synchronously and return its exit code; a terminal user sees the result.\n  const freshCli = join(staged.stagedPath, \"bundle\", \"abtars-cli.js\");\n  const args = [\n    freshCli, \"__deploy\",\n    \"--staged\", staged.stagedPath,\n    \"--version\", staged.version,\n    \"--channel\", channel,\n    \"--repo-root\", repoRoot,\n  ];\n  if (staged.commit) args.push(\"--commit\", staged.commit);\n  if (staged.branch) args.push(\"--branch\", staged.branch);\n  if (staged.packageLockHash) args.push(\"--package-lock-hash\", staged.packageLockHash);\n\n  const r = spawnSync(\"node\", args, { stdio: \"inherit\" });\n  return r.status ?? 1;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;AAcA,SAAS,YAAY;AACrB,SAAS,iBAAiB;AAW1B,eAAsB,UAAU,MAAyC;AACvE,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,QAAQ,aAAa,QAAQ;AACnC,QAAM,SAAS,KAAK,MAAM,aAAa,KAAK;AAC5C,QAAM,WAAW,KAAK,QAAQ,QAAQ;AAGtC,oBAAkB,MAAM,UAAU;AAClC,MAAI;AACJ,MAAI,YAAY,OAAO;AACrB,QAAI;AAAE,mBAAa,QAAQ,CAAC,QAAQ,CAAC;AAAA,IAAG,QAAQ;AAAE,aAAO;AAAA,IAAG;AAC5D,UAAM,SAAS,qBAAqB,EAAE,UAAU,YAAY,KAAK,CAAC;AAClE,aAAS,MAAM,OAAO,QAAQ,EAAE,YAAY,MAAM,YAAY,MAAM,MAAM,MAAM,YAAY,KAAK,CAAC;AAAA,EACpG,OAAO;AACL,UAAM,SAAS,cAAc,UAAU,YAAY,UAAU,UAAU,QAAQ;AAC/E,aAAS,MAAM,OAAO,QAAQ,EAAE,YAAY,MAAM,YAAY,MAAM,MAAM,MAAM,YAAY,KAAK,CAAC;AAAA,EACpG;AACA,UAAQ,OAAO,MAAM,mBAAc,OAAO,OAAO;AAAA,CAAI;AAMrD,QAAM,WAAW,KAAK,OAAO,YAAY,UAAU,eAAe;AAClE,QAAM,OAAO;AAAA,IACX;AAAA,IAAU;AAAA,IACV;AAAA,IAAY,OAAO;AAAA,IACnB;AAAA,IAAa,OAAO;AAAA,IACpB;AAAA,IAAa;AAAA,IACb;AAAA,IAAe;AAAA,EACjB;AACA,MAAI,OAAO,OAAQ,MAAK,KAAK,YAAY,OAAO,MAAM;AACtD,MAAI,OAAO,OAAQ,MAAK,KAAK,YAAY,OAAO,MAAM;AACtD,MAAI,OAAO,gBAAiB,MAAK,KAAK,uBAAuB,OAAO,eAAe;AAEnF,QAAM,IAAI,UAAU,QAAQ,MAAM,EAAE,OAAO,UAAU,CAAC;AACtD,SAAO,EAAE,UAAU;AACrB;",
+  "names": []
+}

package/bundle/{bridge-lock-transport-LXCF2IVN.js → bridge-lock-transport-BJAMHMXW.js}

@@ -18,11 +18,12 @@ import {
   writeRestartReason,
   writeRestartRequested,
   writeSleepStatus
-} from "./chunk-W726UGI6.js";
+} from "./chunk-ZKMKAO75.js";
 import "./chunk-N5KN3LGD.js";
-import "./chunk-WP7FZHMI.js";
-import "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+import "./chunk-W2PSVV2T.js";
+import "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 init_bridge_lock_transport();
 export {
@@ -43,4 +44,4 @@ export {
   writeRestartRequested,
   writeSleepStatus
 };
-//# sourceMappingURL=bridge-lock-transport-LXCF2IVN.js.map
+//# sourceMappingURL=bridge-lock-transport-BJAMHMXW.js.map

package/bundle/{browser-2VZOGOGX.js → browser-PT54UWSW.js}

@@ -2,14 +2,15 @@
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
 import {
   register
-} from "./chunk-E7MV7WFT.js";
-import "./chunk-VJATH7AN.js";
-import "./chunk-SSCGWDIC.js";
-import "./chunk-WP7FZHMI.js";
-import "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-6VTHSN4V.js";
+import "./chunk-OOUCUCUW.js";
+import "./chunk-BWJ37KMW.js";
+import "./chunk-W2PSVV2T.js";
+import "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 export {
   register
 };
-//# sourceMappingURL=browser-2VZOGOGX.js.map
+//# sourceMappingURL=browser-PT54UWSW.js.map

package/bundle/{budget-PPA7WY3D.js → budget-QNK6IIT6.js}

@@ -3,11 +3,12 @@
 import {
   init_logger,
   logWarn
-} from "./chunk-OOKNHOCB.js";
+} from "./chunk-6S3G6GPO.js";
 import {
   abtarsHome,
   init_paths
-} from "./chunk-H2K23MOF.js";
+} from "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 
 // src/components/budget.ts
@@ -67,7 +68,7 @@ async function sendBudgetNotification(agent, reason) {
   const msg = `x Budget: ${agent} hit daily ${reason} limit (${detail}). Paused until midnight.`;
   logWarn("budget", msg);
   try {
-    const { sendToMainChat } = await import("./main-chat-YLZDNQPO.js");
+    const { sendToMainChat } = await import("./main-chat-EID5Y6H2.js");
     await sendToMainChat({}, msg);
   } catch {
   }
@@ -88,4 +89,4 @@ export {
   incrementBudgetCounter,
   sendBudgetNotification
 };
-//# sourceMappingURL=budget-PPA7WY3D.js.map
+//# sourceMappingURL=budget-QNK6IIT6.js.map

package/bundle/{budget-PPA7WY3D.js.map → budget-QNK6IIT6.js.map}

@@ -2,6 +2,6 @@
   "version": 3,
   "sources": ["../src/components/budget.ts"],
   "sourcesContent": ["/**\n * budget.ts \u2014 Daily agent token/call budget enforcement.\n * Config: ~/.abtars/config/budget.json\n */\nimport { readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { abtarsHome } from \"../paths.js\";\nimport { logWarn } from \"./logger.js\";\n\ninterface AgentBudget { tokens?: number; calls?: number }\ninterface DailyBudget { [agent: string]: AgentBudget }\ninterface Counter { tokens: number; calls: number }\n\nconst counters = new Map<string, Counter>();\nlet lastResetDate = \"\";\nconst lastNotifiedAt = new Map<string, number>();\n\nfunction ensureToday(): void {\n  const today = new Date().toISOString().slice(0, 10);\n  if (today !== lastResetDate) { counters.clear(); lastResetDate = today; }\n}\n\nfunction loadBudget(): DailyBudget | null {\n  try {\n    const raw = readFileSync(join(abtarsHome(), \"config\", \"budget.json\"), \"utf-8\");\n    const parsed = JSON.parse(raw);\n    return parsed?.daily ?? null;\n  } catch { return null; }\n}\n\nexport function incrementBudgetCounter(agent: string, tokens: number): void {\n  if (!agent) return;\n  ensureToday();\n  const c = counters.get(agent) ?? { tokens: 0, calls: 0 };\n  c.tokens += tokens;\n  c.calls += 1;\n  counters.set(agent, c);\n}\n\nexport function checkBudget(agent: string): { allowed: boolean; remaining: { tokens: number; calls: number }; limit: AgentBudget } {\n  const budget = loadBudget();\n  if (!budget || !budget[agent]) return { allowed: true, remaining: { tokens: Infinity, calls: Infinity }, limit: {} };\n  ensureToday();\n  const used = counters.get(agent) ?? { tokens: 0, calls: 0 };\n  const limit = budget[agent];\n  const tokenOk = !limit.tokens || used.tokens < limit.tokens * 1000;\n  const callsOk = !limit.calls || used.calls < limit.calls;\n  return {\n    allowed: tokenOk && callsOk,\n    remaining: { tokens: (limit.tokens ?? Infinity) * 1000 - used.tokens, calls: (limit.calls ?? Infinity) - used.calls },\n    limit,\n  };\n}\n\nexport async function sendBudgetNotification(agent: string, reason: string): Promise<void> {\n  const now = Date.now();\n  const last = lastNotifiedAt.get(agent) ?? 0;\n  if (now - last < 3_600_000) return; // max 1 per hour per agent\n  lastNotifiedAt.set(agent, now);\n  const used = counters.get(agent) ?? { tokens: 0, calls: 0 };\n  const limit = loadBudget()?.[agent];\n  const detail = reason === \"token\"\n    ? `${Math.round(used.tokens / 1000)}K/${limit?.tokens ?? \"?\"}K tokens`\n    : `${used.calls}/${limit?.calls ?? \"?\"} calls`;\n  const msg = `x Budget: ${agent} hit daily ${reason} limit (${detail}). Paused until midnight.`;\n  logWarn(\"budget\", msg);\n  try {\n    const { sendToMainChat } = await import(\"./main-chat.js\");\n    await sendToMainChat({}, msg);\n  } catch { /* best effort */ }\n}\n\nexport function getBudgetStatus(): Array<{ agent: string; used: Counter; limit: AgentBudget }> {\n  const budget = loadBudget();\n  if (!budget) return [];\n  ensureToday();\n  return Object.entries(budget).map(([agent, limit]) => ({\n    agent,\n    used: counters.get(agent) ?? { tokens: 0, calls: 0 },\n    limit,\n  }));\n}\n"],
-  "mappings": ";;;;;;;;;;;;;AAMA;AACA;AAHA,SAAS,oBAAoB;AAC7B,SAAS,YAAY;AAQrB,IAAM,WAAW,oBAAI,IAAqB;AAC1C,IAAI,gBAAgB;AACpB,IAAM,iBAAiB,oBAAI,IAAoB;AAE/C,SAAS,cAAoB;AAC3B,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAClD,MAAI,UAAU,eAAe;AAAE,aAAS,MAAM;AAAG,oBAAgB;AAAA,EAAO;AAC1E;AAEA,SAAS,aAAiC;AACxC,MAAI;AACF,UAAM,MAAM,aAAa,KAAK,WAAW,GAAG,UAAU,aAAa,GAAG,OAAO;AAC7E,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,QAAQ,SAAS;AAAA,EAC1B,QAAQ;AAAE,WAAO;AAAA,EAAM;AACzB;AAEO,SAAS,uBAAuB,OAAe,QAAsB;AAC1E,MAAI,CAAC,MAAO;AACZ,cAAY;AACZ,QAAM,IAAI,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AACvD,IAAE,UAAU;AACZ,IAAE,SAAS;AACX,WAAS,IAAI,OAAO,CAAC;AACvB;AAEO,SAAS,YAAY,OAAuG;AACjI,QAAM,SAAS,WAAW;AAC1B,MAAI,CAAC,UAAU,CAAC,OAAO,KAAK,EAAG,QAAO,EAAE,SAAS,MAAM,WAAW,EAAE,QAAQ,UAAU,OAAO,SAAS,GAAG,OAAO,CAAC,EAAE;AACnH,cAAY;AACZ,QAAM,OAAO,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAC1D,QAAM,QAAQ,OAAO,KAAK;AAC1B,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,SAAS,MAAM,SAAS;AAC9D,QAAM,UAAU,CAAC,MAAM,SAAS,KAAK,QAAQ,MAAM;AACnD,SAAO;AAAA,IACL,SAAS,WAAW;AAAA,IACpB,WAAW,EAAE,SAAS,MAAM,UAAU,YAAY,MAAO,KAAK,QAAQ,QAAQ,MAAM,SAAS,YAAY,KAAK,MAAM;AAAA,IACpH;AAAA,EACF;AACF;AAEA,eAAsB,uBAAuB,OAAe,QAA+B;AACzF,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,eAAe,IAAI,KAAK,KAAK;AAC1C,MAAI,MAAM,OAAO,KAAW;AAC5B,iBAAe,IAAI,OAAO,GAAG;AAC7B,QAAM,OAAO,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAC1D,QAAM,QAAQ,WAAW,IAAI,KAAK;AAClC,QAAM,SAAS,WAAW,UACtB,GAAG,KAAK,MAAM,KAAK,SAAS,GAAI,CAAC,KAAK,OAAO,UAAU,GAAG,aAC1D,GAAG,KAAK,KAAK,IAAI,OAAO,SAAS,GAAG;AACxC,QAAM,MAAM,aAAa,KAAK,cAAc,MAAM,WAAW,MAAM;AACnE,UAAQ,UAAU,GAAG;AACrB,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,yBAAgB;AACxD,UAAM,eAAe,CAAC,GAAG,GAAG;AAAA,EAC9B,QAAQ;AAAA,EAAoB;AAC9B;AAEO,SAAS,kBAA+E;AAC7F,QAAM,SAAS,WAAW;AAC1B,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,cAAY;AACZ,SAAO,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;AAAA,IACrD;AAAA,IACA,MAAM,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAAA,IACnD;AAAA,EACF,EAAE;AACJ;",
+  "mappings": ";;;;;;;;;;;;;;AAMA;AACA;AAHA,SAAS,oBAAoB;AAC7B,SAAS,YAAY;AAQrB,IAAM,WAAW,oBAAI,IAAqB;AAC1C,IAAI,gBAAgB;AACpB,IAAM,iBAAiB,oBAAI,IAAoB;AAE/C,SAAS,cAAoB;AAC3B,QAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAClD,MAAI,UAAU,eAAe;AAAE,aAAS,MAAM;AAAG,oBAAgB;AAAA,EAAO;AAC1E;AAEA,SAAS,aAAiC;AACxC,MAAI;AACF,UAAM,MAAM,aAAa,KAAK,WAAW,GAAG,UAAU,aAAa,GAAG,OAAO;AAC7E,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,QAAQ,SAAS;AAAA,EAC1B,QAAQ;AAAE,WAAO;AAAA,EAAM;AACzB;AAEO,SAAS,uBAAuB,OAAe,QAAsB;AAC1E,MAAI,CAAC,MAAO;AACZ,cAAY;AACZ,QAAM,IAAI,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AACvD,IAAE,UAAU;AACZ,IAAE,SAAS;AACX,WAAS,IAAI,OAAO,CAAC;AACvB;AAEO,SAAS,YAAY,OAAuG;AACjI,QAAM,SAAS,WAAW;AAC1B,MAAI,CAAC,UAAU,CAAC,OAAO,KAAK,EAAG,QAAO,EAAE,SAAS,MAAM,WAAW,EAAE,QAAQ,UAAU,OAAO,SAAS,GAAG,OAAO,CAAC,EAAE;AACnH,cAAY;AACZ,QAAM,OAAO,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAC1D,QAAM,QAAQ,OAAO,KAAK;AAC1B,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,SAAS,MAAM,SAAS;AAC9D,QAAM,UAAU,CAAC,MAAM,SAAS,KAAK,QAAQ,MAAM;AACnD,SAAO;AAAA,IACL,SAAS,WAAW;AAAA,IACpB,WAAW,EAAE,SAAS,MAAM,UAAU,YAAY,MAAO,KAAK,QAAQ,QAAQ,MAAM,SAAS,YAAY,KAAK,MAAM;AAAA,IACpH;AAAA,EACF;AACF;AAEA,eAAsB,uBAAuB,OAAe,QAA+B;AACzF,QAAM,MAAM,KAAK,IAAI;AACrB,QAAM,OAAO,eAAe,IAAI,KAAK,KAAK;AAC1C,MAAI,MAAM,OAAO,KAAW;AAC5B,iBAAe,IAAI,OAAO,GAAG;AAC7B,QAAM,OAAO,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAC1D,QAAM,QAAQ,WAAW,IAAI,KAAK;AAClC,QAAM,SAAS,WAAW,UACtB,GAAG,KAAK,MAAM,KAAK,SAAS,GAAI,CAAC,KAAK,OAAO,UAAU,GAAG,aAC1D,GAAG,KAAK,KAAK,IAAI,OAAO,SAAS,GAAG;AACxC,QAAM,MAAM,aAAa,KAAK,cAAc,MAAM,WAAW,MAAM;AACnE,UAAQ,UAAU,GAAG;AACrB,MAAI;AACF,UAAM,EAAE,eAAe,IAAI,MAAM,OAAO,yBAAgB;AACxD,UAAM,eAAe,CAAC,GAAG,GAAG;AAAA,EAC9B,QAAQ;AAAA,EAAoB;AAC9B;AAEO,SAAS,kBAA+E;AAC7F,QAAM,SAAS,WAAW;AAC1B,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,cAAY;AACZ,SAAO,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO;AAAA,IACrD;AAAA,IACA,MAAM,SAAS,IAAI,KAAK,KAAK,EAAE,QAAQ,GAAG,OAAO,EAAE;AAAA,IACnD;AAAA,EACF,EAAE;AACJ;",
   "names": []
 }

package/bundle/{capability-WXEA2WFK.js → capability-EKPGHQIO.js}

@@ -4,15 +4,16 @@ import {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
-} from "./chunk-24V4A6RP.js";
-import "./chunk-SSCGWDIC.js";
-import "./chunk-WP7FZHMI.js";
-import "./chunk-OOKNHOCB.js";
-import "./chunk-H2K23MOF.js";
+} from "./chunk-YI2KSYB4.js";
+import "./chunk-BWJ37KMW.js";
+import "./chunk-W2PSVV2T.js";
+import "./chunk-6S3G6GPO.js";
+import "./chunk-7XXISOHU.js";
+import "./chunk-2BXXQG7P.js";
 import "./chunk-7K2YZTLD.js";
 export {
   createCapabilityApi,
   createCapabilityRegistry,
   discoverCapabilities
 };
-//# sourceMappingURL=capability-WXEA2WFK.js.map
+//# sourceMappingURL=capability-EKPGHQIO.js.map

package/bundle/{chunk-C3EYYJN3.js → chunk-2BXXQG7P.js}

@@ -1,5 +1,8 @@
 #!/usr/bin/env node
  import { createRequire as __bundleCreateRequire } from 'node:module'; import { fileURLToPath as __bundleFileURLToPath } from 'node:url'; import { dirname as __bundleDirname } from 'node:path'; const require = __bundleCreateRequire(import.meta.url); const __chunk_filename = __bundleFileURLToPath(import.meta.url); const __chunk_dirname = __bundleDirname(__chunk_filename);
+import {
+  __esm
+} from "./chunk-7K2YZTLD.js";
 
 // src/cli/deploy-lib/paths.ts
 import { homedir } from "node:os";
@@ -13,12 +16,15 @@ function resolveAbmindHome() {
 function resolvePackageHome(pkg) {
   return pkg === "abtars" ? resolveAbtarsHome() : resolveAbmindHome();
 }
+function resolveReleasesDir() {
+  return process.env["ABTARS_RELEASES"] ?? join(homedir(), ".abtars-releases");
+}
 function resolveUserBinDir() {
-  return join(homedir(), ".local", "bin");
+  return process.env["ABTARS_BIN"] ?? join(homedir(), ".local", "bin");
 }
 function packagePaths(pkg) {
   const home = resolvePackageHome(pkg);
-  const releasesDir = join(homedir(), ".abtars-releases");
+  const releasesDir = resolveReleasesDir();
   return {
     home,
     config: join(home, "config"),
@@ -41,12 +47,18 @@ function packagePaths(pkg) {
     current: join(home, "current")
   };
 }
+var init_paths = __esm({
+  "src/cli/deploy-lib/paths.ts"() {
+  }
+});
 
 export {
   resolveAbtarsHome,
   resolveAbmindHome,
   resolvePackageHome,
+  resolveReleasesDir,
   resolveUserBinDir,
-  packagePaths
+  packagePaths,
+  init_paths
 };
-//# sourceMappingURL=chunk-C3EYYJN3.js.map
+//# sourceMappingURL=chunk-2BXXQG7P.js.map

package/bundle/chunk-2BXXQG7P.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/deploy-lib/paths.ts"],
+  "sourcesContent": ["/**\n * Runtime directory resolution for deploy-lib consumers.\n *\n * Rules:\n *   - abtars runtime root: $ABTARS_HOME ?? ~/.abtars\n *   - abmind runtime root:      $ABMIND_HOME ?? ~/.abmind\n *   - releases dir:            $ABTARS_RELEASES ?? ~/.abtars-releases\n *   - user bin dir:            $ABTARS_BIN ?? ~/.local/bin\n *\n * All callers use these resolvers \u2014 never hardcode paths. Required by\n * plan #158 v7 (Ag2 round-2 nit): cross-repo manifest reads must respect\n * env-var overrides, not assume default locations.\n */\n\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nexport type PackageName = 'abtars' | 'abmind';\n\nexport function resolveAbtarsHome(): string {\n  return process.env['ABTARS_HOME'] ?? join(homedir(), '.abtars');\n}\n\nexport function resolveAbmindHome(): string {\n  return process.env['ABMIND_HOME'] ?? join(homedir(), '.abmind');\n}\n\nexport function resolvePackageHome(pkg: PackageName): string {\n  return pkg === 'abtars' ? resolveAbtarsHome() : resolveAbmindHome();\n}\n\nexport function resolveReleasesDir(): string {\n  return process.env['ABTARS_RELEASES'] ?? join(homedir(), '.abtars-releases');\n}\n\nexport function resolveUserBinDir(): string {\n  return process.env['ABTARS_BIN'] ?? join(homedir(), '.local', 'bin');\n}\n\nexport interface PackagePaths {\n  readonly home: string;\n  readonly config: string;\n  readonly app: string;\n  readonly appPrev: string;\n  readonly appPrev1: string;\n  readonly appPrev2: string;\n  readonly appPrev3: string;\n  readonly appStaging: string;\n  readonly bin: string;\n  readonly manifest: string;\n  readonly lock: string;\n  // #1089: releases dir layout\n  readonly releasesDir: string;\n  readonly releasesCurrentLink: string;\n  readonly releasesHistory: string;\n  readonly releasesSrc: string;\n  // Legacy \u2014 kept for migration detection only. Remove after all hosts migrated.\n  readonly releases: string;\n  readonly current: string;\n}\n\nexport function packagePaths(pkg: PackageName): PackagePaths {\n  const home = resolvePackageHome(pkg);\n  const releasesDir = resolveReleasesDir();\n  return {\n    home,\n    config: join(home, 'config'),\n    app: join(home, 'app'),\n    appPrev: join(home, 'app.prev'),\n    appPrev1: join(home, 'app.prev.1'),\n    appPrev2: join(home, 'app.prev.2'),\n    appPrev3: join(home, 'app.prev.3'),\n    appStaging: join(home, 'app.staging'),\n    bin: resolveUserBinDir(),\n    manifest: join(home, 'manifest.json'),\n    lock: join(home, '.update.lock'),\n    // #1089\n    releasesDir,\n    releasesCurrentLink: join(releasesDir, 'current'),\n    releasesHistory: join(releasesDir, 'history.json'),\n    releasesSrc: join(releasesDir, 'src'),\n    // Legacy\n    releases: join(home, 'releases'),\n    current: join(home, 'current'),\n  };\n}\n"],
+  "mappings": ";;;;;;;AAcA,SAAS,eAAe;AACxB,SAAS,YAAY;AAId,SAAS,oBAA4B;AAC1C,SAAO,QAAQ,IAAI,aAAa,KAAK,KAAK,QAAQ,GAAG,SAAS;AAChE;AAEO,SAAS,oBAA4B;AAC1C,SAAO,QAAQ,IAAI,aAAa,KAAK,KAAK,QAAQ,GAAG,SAAS;AAChE;AAEO,SAAS,mBAAmB,KAA0B;AAC3D,SAAO,QAAQ,WAAW,kBAAkB,IAAI,kBAAkB;AACpE;AAEO,SAAS,qBAA6B;AAC3C,SAAO,QAAQ,IAAI,iBAAiB,KAAK,KAAK,QAAQ,GAAG,kBAAkB;AAC7E;AAEO,SAAS,oBAA4B;AAC1C,SAAO,QAAQ,IAAI,YAAY,KAAK,KAAK,QAAQ,GAAG,UAAU,KAAK;AACrE;AAwBO,SAAS,aAAa,KAAgC;AAC3D,QAAM,OAAO,mBAAmB,GAAG;AACnC,QAAM,cAAc,mBAAmB;AACvC,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,KAAK,MAAM,QAAQ;AAAA,IAC3B,KAAK,KAAK,MAAM,KAAK;AAAA,IACrB,SAAS,KAAK,MAAM,UAAU;AAAA,IAC9B,UAAU,KAAK,MAAM,YAAY;AAAA,IACjC,UAAU,KAAK,MAAM,YAAY;AAAA,IACjC,UAAU,KAAK,MAAM,YAAY;AAAA,IACjC,YAAY,KAAK,MAAM,aAAa;AAAA,IACpC,KAAK,kBAAkB;AAAA,IACvB,UAAU,KAAK,MAAM,eAAe;AAAA,IACpC,MAAM,KAAK,MAAM,cAAc;AAAA;AAAA,IAE/B;AAAA,IACA,qBAAqB,KAAK,aAAa,SAAS;AAAA,IAChD,iBAAiB,KAAK,aAAa,cAAc;AAAA,IACjD,aAAa,KAAK,aAAa,KAAK;AAAA;AAAA,IAEpC,UAAU,KAAK,MAAM,UAAU;AAAA,IAC/B,SAAS,KAAK,MAAM,SAAS;AAAA,EAC/B;AACF;AArFA;AAAA;AAAA;AAAA;",
+  "names": []
+}

package/bundle/{chunk-4PIVWXUJ.js → chunk-2ZD7VQRW.js}

@@ -3,7 +3,7 @@
 import {
   init_logger,
   logWarn
-} from "./chunk-OOKNHOCB.js";
+} from "./chunk-6S3G6GPO.js";
 import {
   __esm
 } from "./chunk-7K2YZTLD.js";
@@ -65,4 +65,4 @@ export {
   PEERS_SCHEMA,
   init_config_validator
 };
-//# sourceMappingURL=chunk-4PIVWXUJ.js.map
+//# sourceMappingURL=chunk-2ZD7VQRW.js.map

package/bundle/{chunk-OY2HAK33.js → chunk-36ZEYDKZ.js}

@@ -85,4 +85,4 @@ export {
   writeKeyVerify,
   validateKey
 };
-//# sourceMappingURL=chunk-OY2HAK33.js.map
+//# sourceMappingURL=chunk-36ZEYDKZ.js.map

package/bundle/chunk-36ZEYDKZ.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/utils/crypto.ts"],
+  "sourcesContent": ["/**\n * crypto.ts \u2014 AES-256-GCM encryption for abtars secrets.\n * Shared utility (same logic in abmind). See shared-utilities.md.\n *\n * Key: ~/.abtars/secret/abtars.key (32-byte hex, passphrase-derived via scrypt).\n * Purpose derivation: HKDF(master, \"abtars-secrets-v1\") for file encryption.\n */\n\nimport { createDecipheriv, createCipheriv, randomBytes, hkdfSync, scryptSync, createHash } from \"node:crypto\";\nimport { existsSync, readFileSync, writeFileSync, mkdirSync } from \"node:fs\";\nimport { join, dirname } from \"node:path\";\n\nconst ALGO = \"aes-256-gcm\";\nconst IV_LEN = 12;\nconst TAG_LEN = 16;\nconst PURPOSE = \"abtars-secrets-v1\";\n\n/** Load master key from file. Returns null if file doesn't exist. */\nexport function loadKey(keyPath: string): Buffer | null {\n  try {\n    if (!existsSync(keyPath)) return null;\n    const hex = readFileSync(keyPath, \"utf-8\").trim();\n    if (hex.length !== 64) return null;\n    return Buffer.from(hex, \"hex\");\n  } catch { return null; }\n}\n\n/** Derive purpose-specific key from master via HKDF. */\nexport function deriveKey(master: Buffer, purpose: string = PURPOSE): Buffer {\n  return Buffer.from(hkdfSync(\"sha256\", master, \"\", purpose, 32));\n}\n\n/** Derive master key from passphrase + username (same algorithm as abmind). */\nexport function deriveFromPassphrase(passphrase: string, username: string): Buffer {\n  const salt = createHash(\"sha256\").update(\"abtars:\" + username).digest().subarray(0, 16);\n  return scryptSync(passphrase, salt, 32, { N: 16384, r: 8, p: 1 });\n}\n\n/** Encrypt plaintext. Returns \"ENC:\" + base64(version + iv + ciphertext + tag). */\nexport function encrypt(plaintext: string, key: Buffer): string {\n  const iv = randomBytes(IV_LEN);\n  const c = createCipheriv(ALGO, key, iv);\n  const enc = Buffer.concat([c.update(plaintext, \"utf-8\"), c.final()]);\n  return \"ENC:\" + Buffer.concat([Buffer.from([0x01]), iv, enc, c.getAuthTag()]).toString(\"base64\");\n}\n\n/** Decrypt \"ENC:...\" string. Returns plaintext or null on failure. */\nexport function decrypt(raw: string, key: Buffer): string | null {\n  try {\n    const buf = Buffer.from(raw.slice(4), \"base64\");\n    const iv = buf.subarray(1, 1 + IV_LEN);\n    const tag = buf.subarray(buf.length - TAG_LEN);\n    const ct = buf.subarray(1 + IV_LEN, buf.length - TAG_LEN);\n    const d = createDecipheriv(ALGO, key, iv);\n    d.setAuthTag(tag);\n    return d.update(ct, undefined, \"utf-8\") + d.final(\"utf-8\");\n  } catch { return null; }\n}\n\n/** Write key to file (hex, mode 600). Creates parent dir if needed. */\nexport function writeKeyFile(keyPath: string, master: Buffer): void {\n  mkdirSync(dirname(keyPath), { recursive: true });\n  writeFileSync(keyPath, master.toString(\"hex\"), { mode: 0o600 });\n}\n\nconst VERIFY_PLAINTEXT = \"abtars-verify\";\n\n/** Create key.verify file next to the key (encrypt known plaintext). */\nexport function writeKeyVerify(keyPath: string, key: Buffer): void {\n  const iv = randomBytes(IV_LEN);\n  const cipher = createCipheriv(ALGO, key, iv);\n  const enc = Buffer.concat([cipher.update(VERIFY_PLAINTEXT, \"utf-8\"), cipher.final()]);\n  const blob = Buffer.concat([iv, enc, cipher.getAuthTag()]).toString(\"base64\");\n  writeFileSync(join(dirname(keyPath), \"key.verify\"), blob, { mode: 0o600 });\n}\n\n/** Validate a key against key.verify. Returns true if key is correct or no verify file exists. */\nexport function validateKey(keyPath: string, key: Buffer): boolean {\n  const verifyPath = join(dirname(keyPath), \"key.verify\");\n  if (!existsSync(verifyPath)) return true; // no verify file = skip validation\n  try {\n    const blob = readFileSync(verifyPath, \"utf-8\").trim();\n    const buf = Buffer.from(blob, \"base64\");\n    const iv = buf.subarray(0, IV_LEN);\n    const tag = buf.subarray(buf.length - TAG_LEN);\n    const ct = buf.subarray(IV_LEN, buf.length - TAG_LEN);\n    const d = createDecipheriv(ALGO, key, iv);\n    d.setAuthTag(tag);\n    const result = d.update(ct, undefined, \"utf-8\") + d.final(\"utf-8\");\n    return result === VERIFY_PLAINTEXT;\n  } catch { return false; }\n}\n"],
+  "mappings": ";;;;AAQA,SAAS,kBAAkB,gBAAgB,aAAa,UAAU,YAAY,kBAAkB;AAChG,SAAS,YAAY,cAAc,eAAe,iBAAiB;AACnE,SAAS,MAAM,eAAe;AAE9B,IAAM,OAAO;AACb,IAAM,SAAS;AACf,IAAM,UAAU;AAChB,IAAM,UAAU;AAGT,SAAS,QAAQ,SAAgC;AACtD,MAAI;AACF,QAAI,CAAC,WAAW,OAAO,EAAG,QAAO;AACjC,UAAM,MAAM,aAAa,SAAS,OAAO,EAAE,KAAK;AAChD,QAAI,IAAI,WAAW,GAAI,QAAO;AAC9B,WAAO,OAAO,KAAK,KAAK,KAAK;AAAA,EAC/B,QAAQ;AAAE,WAAO;AAAA,EAAM;AACzB;AAGO,SAAS,UAAU,QAAgB,UAAkB,SAAiB;AAC3E,SAAO,OAAO,KAAK,SAAS,UAAU,QAAQ,IAAI,SAAS,EAAE,CAAC;AAChE;AAGO,SAAS,qBAAqB,YAAoB,UAA0B;AACjF,QAAM,OAAO,WAAW,QAAQ,EAAE,OAAO,YAAY,QAAQ,EAAE,OAAO,EAAE,SAAS,GAAG,EAAE;AACtF,SAAO,WAAW,YAAY,MAAM,IAAI,EAAE,GAAG,OAAO,GAAG,GAAG,GAAG,EAAE,CAAC;AAClE;AAGO,SAAS,QAAQ,WAAmB,KAAqB;AAC9D,QAAM,KAAK,YAAY,MAAM;AAC7B,QAAM,IAAI,eAAe,MAAM,KAAK,EAAE;AACtC,QAAM,MAAM,OAAO,OAAO,CAAC,EAAE,OAAO,WAAW,OAAO,GAAG,EAAE,MAAM,CAAC,CAAC;AACnE,SAAO,SAAS,OAAO,OAAO,CAAC,OAAO,KAAK,CAAC,CAAI,CAAC,GAAG,IAAI,KAAK,EAAE,WAAW,CAAC,CAAC,EAAE,SAAS,QAAQ;AACjG;AAGO,SAAS,QAAQ,KAAa,KAA4B;AAC/D,MAAI;AACF,UAAM,MAAM,OAAO,KAAK,IAAI,MAAM,CAAC,GAAG,QAAQ;AAC9C,UAAM,KAAK,IAAI,SAAS,GAAG,IAAI,MAAM;AACrC,UAAM,MAAM,IAAI,SAAS,IAAI,SAAS,OAAO;AAC7C,UAAM,KAAK,IAAI,SAAS,IAAI,QAAQ,IAAI,SAAS,OAAO;AACxD,UAAM,IAAI,iBAAiB,MAAM,KAAK,EAAE;AACxC,MAAE,WAAW,GAAG;AAChB,WAAO,EAAE,OAAO,IAAI,QAAW,OAAO,IAAI,EAAE,MAAM,OAAO;AAAA,EAC3D,QAAQ;AAAE,WAAO;AAAA,EAAM;AACzB;AAGO,SAAS,aAAa,SAAiB,QAAsB;AAClE,YAAU,QAAQ,OAAO,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/C,gBAAc,SAAS,OAAO,SAAS,KAAK,GAAG,EAAE,MAAM,IAAM,CAAC;AAChE;AAEA,IAAM,mBAAmB;AAGlB,SAAS,eAAe,SAAiB,KAAmB;AACjE,QAAM,KAAK,YAAY,MAAM;AAC7B,QAAM,SAAS,eAAe,MAAM,KAAK,EAAE;AAC3C,QAAM,MAAM,OAAO,OAAO,CAAC,OAAO,OAAO,kBAAkB,OAAO,GAAG,OAAO,MAAM,CAAC,CAAC;AACpF,QAAM,OAAO,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,WAAW,CAAC,CAAC,EAAE,SAAS,QAAQ;AAC5E,gBAAc,KAAK,QAAQ,OAAO,GAAG,YAAY,GAAG,MAAM,EAAE,MAAM,IAAM,CAAC;AAC3E;AAGO,SAAS,YAAY,SAAiB,KAAsB;AACjE,QAAM,aAAa,KAAK,QAAQ,OAAO,GAAG,YAAY;AACtD,MAAI,CAAC,WAAW,UAAU,EAAG,QAAO;AACpC,MAAI;AACF,UAAM,OAAO,aAAa,YAAY,OAAO,EAAE,KAAK;AACpD,UAAM,MAAM,OAAO,KAAK,MAAM,QAAQ;AACtC,UAAM,KAAK,IAAI,SAAS,GAAG,MAAM;AACjC,UAAM,MAAM,IAAI,SAAS,IAAI,SAAS,OAAO;AAC7C,UAAM,KAAK,IAAI,SAAS,QAAQ,IAAI,SAAS,OAAO;AACpD,UAAM,IAAI,iBAAiB,MAAM,KAAK,EAAE;AACxC,MAAE,WAAW,GAAG;AAChB,UAAM,SAAS,EAAE,OAAO,IAAI,QAAW,OAAO,IAAI,EAAE,MAAM,OAAO;AACjE,WAAO,WAAW;AAAA,EACpB,QAAQ;AAAE,WAAO;AAAA,EAAO;AAC1B;",
+  "names": []
+}

package/bundle/{chunk-3QW2K53E.js → chunk-4IGLXZCC.js}

@@ -3,17 +3,17 @@
 import {
   getAlivePeers,
   init_gossip
-} from "./chunk-BNBC4T45.js";
+} from "./chunk-XZ4ZBDM5.js";
 import {
   init_peer_config,
   loadPeerConfig
-} from "./chunk-O4GKI3Q3.js";
+} from "./chunk-X7DLKIQM.js";
 import {
   init_logger,
   logDebug,
   logInfo,
   logTrace
-} from "./chunk-OOKNHOCB.js";
+} from "./chunk-6S3G6GPO.js";
 import {
   __esm
 } from "./chunk-7K2YZTLD.js";
@@ -38,14 +38,14 @@ var init_http_transport = __esm({
       /** Init WS connections for all ws-outbound peers. Call on boot. */
       async initWsConnections() {
         const config = loadPeerConfig();
-        const { WsPeerClient: Client } = await import("./ws-peer-client-WHW3RJTD.js");
+        const { WsPeerClient: Client } = await import("./ws-peer-client-G5QHOF6K.js");
         for (const [name, entry] of Object.entries(config.peers)) {
           if (entry.transport !== "ws-outbound") continue;
           const client = new Client(name, entry);
           client.onPush((method, payload) => {
             if (method === "callback") {
               const p = payload;
-              import("./kanban-board-J6RO3ZU7.js").then(({ kanbanList, kanbanComplete, kanbanFail, kanbanAddTokens }) => {
+              import("./kanban-board-4AI5Z6B5.js").then(({ kanbanList, kanbanComplete, kanbanFail, kanbanAddTokens }) => {
                 const cards = kanbanList("running", "status").filter((c) => {
                   if (c.type !== "remote") return false;
                   try {
@@ -58,14 +58,14 @@ var init_http_transport = __esm({
                 if (!cards.length) return;
                 const card = cards[0];
                 if (p.tokens_used) kanbanAddTokens(card.id, p.tokens_used);
-                if (p.status === "done") kanbanComplete(card.id, void 0, p.result_summary);
+                if (p.status === "done") kanbanComplete(card.id, null, p.result_summary ?? "");
                 else kanbanFail(card.id, p.error ?? "remote failure");
-                import("./nerve-VZNMFDGY.js").then(({ nerve }) => nerve.emit(p.status === "done" ? "card:done" : "card:failed", card.id));
+                import("./nerve-TC34H4EL.js").then(({ nerve }) => nerve.emit(p.status === "done" ? "card:done" : "card:failed", card.id));
               }).catch(() => {
               });
             } else if (method === "channel") {
               const p = payload;
-              import("./kanban-channel-5EIXBFSA.js").then(({ channelPost }) => {
+              import("./kanban-channel-JMBYWGWD.js").then(({ channelPost }) => {
                 channelPost(p.card_id, p.from_agent, "ALL", p.message);
               }).catch(() => {
               });
@@ -81,20 +81,12 @@ var init_http_transport = __esm({
       hasWsConnection(peer) {
         return this.wsClients.get(peer)?.connected ?? false;
       }
-      /** Send via WS if available, otherwise fall back to HTTP. */
-      async wsOrHttp(peer, method, payload, httpFallback) {
-        const ws = this.wsClients.get(peer);
-        if (ws?.connected) {
-          return ws.send(method, payload);
-        }
-        return httpFallback();
-      }
       discover() {
         return getAlivePeers();
       }
       async send(peer, message) {
         if (message.type === "ask") {
-          const { callPeer } = await import("./peer-client-VOF77T6C.js");
+          const { callPeer } = await import("./peer-client-WLK5GZQS.js");
           const config = loadPeerConfig();
           return callPeer(peer, message.payload.prompt, config.maxHops);
         }
@@ -194,7 +186,7 @@ var init_http_transport = __esm({
         await this.httpCall(entry, peer, "POST", `/v1/tasks/${cardId}/messages`, JSON.stringify({ from_agent: from, message, created_at: createdAt }));
       }
       async httpCall(entry, peerName, method, path, body) {
-        const { mintPeerJwt, signBody, tlsOptions } = await import("./peer-auth-SRONOLNG.js");
+        const { mintPeerJwt, signBody, tlsOptions } = await import("./peer-auth-VRO3JYL5.js");
         const jwt = mintPeerJwt(peerName);
         const finalBody = body ? await signBody(peerName, body) : void 0;
         const tls = tlsOptions(entry);
@@ -262,4 +254,4 @@ export {
   initPeerTransport,
   init_peer_transport
 };
-//# sourceMappingURL=chunk-3QW2K53E.js.map
+//# sourceMappingURL=chunk-4IGLXZCC.js.map