agentix-cli 0.81.1 → 0.83.0

package/dist/{chunk-BB3ESU74.js → chunk-XGTZMJUI.js}

@@ -1,2 +1,2 @@
-import{q as p}from"./chunk-4KJ3PCAI.js";import{b as i,c as u,d as l,e as c}from"./chunk-XF65CDNS.js";import d from"cronstrue";var f=Intl.DateTimeFormat().resolvedOptions().timeZone,m=600,E='Try: "every morning at 9", "weekdays at 6pm", "every 15 minutes", "every monday at 10am", "1st of every month at noon", "daily at 9:30am", "every hour"',g=/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;function w(e){return g.test(e)}function x(e){try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),!0}catch{return!1}}function $(e){return e?e.split(",").map(r=>r.trim().toLowerCase()).filter(r=>r==="log"||r==="notify"||r==="disable"):["log"]}function S(e){let r=[...e.onError??["log"]];e.notify&&!r.includes("notify")&&r.push("notify");let t={enabled:e.enabled??!0,schedule:e.parsed.cron,timezone:e.timezone||f,agent:e.agent,prompt:e.prompt,timeout:e.timeout??m,onError:r};return e.model&&(t.model=e.model),e.notify&&(t.notify=e.notify),e.createdBy&&(t.createdBy=e.createdBy),e.approval&&(t.approval=e.approval),t}function P(e){try{return d.toString(e,{use24HourTimeFormat:!1})}catch{return e}}function T(e,r,t=new Date){try{return p(e,t,r)}catch{return null}}function A(e,r){if(!e)return"unknown (no match within a year)";try{return`${new Intl.DateTimeFormat("en-GB",{timeZone:r,weekday:"short",day:"2-digit",month:"short",year:"numeric",hour:"2-digit",minute:"2-digit",hour12:!1}).format(e)} (${r})`}catch{return e.toISOString()}}function h(e){return e?.approval?.action==="create"}async function D(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(delete a.approval,a.enabled=!0,t=`${e} approved and enabled (requested by ${s.requestedBy})`):(c(n,`crons.${e}`),t=`${e} deletion approved; job removed (requested by ${s.requestedBy})`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function I(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(c(n,`crons.${e}`),t=`${e} rejected; pending job removed`):(delete a.approval,t=`${e} deletion rejected; job kept`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function O(e,r,t={}){return i(o=>{let n=l(o,`crons.${e}`);if(!n)throw new Error(`cron "${e}" not found`);if(r&&h(n))throw new Error(`cron "${e}" is awaiting approval; run \`agentx schedule approve ${e}\``);u(o,`crons.${e}.enabled`,r)},{configPath:t.configPath,reload:t.reload})}export{f as a,E as b,w as c,x as d,$ as e,S as f,P as g,T as h,A as i,h as j,D as k,I as l,O as m};
-//# sourceMappingURL=chunk-BB3ESU74.js.map
+import{q as p}from"./chunk-IUQOOSD4.js";import{b as i,c as u,d as l,e as c}from"./chunk-WMIQHJB5.js";import d from"cronstrue";var f=Intl.DateTimeFormat().resolvedOptions().timeZone,m=600,E='Try: "every morning at 9", "weekdays at 6pm", "every 15 minutes", "every monday at 10am", "1st of every month at noon", "daily at 9:30am", "every hour"',g=/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;function w(e){return g.test(e)}function x(e){try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),!0}catch{return!1}}function $(e){return e?e.split(",").map(r=>r.trim().toLowerCase()).filter(r=>r==="log"||r==="notify"||r==="disable"):["log"]}function S(e){let r=[...e.onError??["log"]];e.notify&&!r.includes("notify")&&r.push("notify");let t={enabled:e.enabled??!0,schedule:e.parsed.cron,timezone:e.timezone||f,agent:e.agent,prompt:e.prompt,timeout:e.timeout??m,onError:r};return e.model&&(t.model=e.model),e.notify&&(t.notify=e.notify),e.createdBy&&(t.createdBy=e.createdBy),e.approval&&(t.approval=e.approval),t}function P(e){try{return d.toString(e,{use24HourTimeFormat:!1})}catch{return e}}function T(e,r,t=new Date){try{return p(e,t,r)}catch{return null}}function A(e,r){if(!e)return"unknown (no match within a year)";try{return`${new Intl.DateTimeFormat("en-GB",{timeZone:r,weekday:"short",day:"2-digit",month:"short",year:"numeric",hour:"2-digit",minute:"2-digit",hour12:!1}).format(e)} (${r})`}catch{return e.toISOString()}}function h(e){return e?.approval?.action==="create"}async function D(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(delete a.approval,a.enabled=!0,t=`${e} approved and enabled (requested by ${s.requestedBy})`):(c(n,`crons.${e}`),t=`${e} deletion approved; job removed (requested by ${s.requestedBy})`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function I(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(c(n,`crons.${e}`),t=`${e} rejected; pending job removed`):(delete a.approval,t=`${e} deletion rejected; job kept`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function O(e,r,t={}){return i(o=>{let n=l(o,`crons.${e}`);if(!n)throw new Error(`cron "${e}" not found`);if(r&&h(n))throw new Error(`cron "${e}" is awaiting approval; run \`agentx schedule approve ${e}\``);u(o,`crons.${e}.enabled`,r)},{configPath:t.configPath,reload:t.reload})}export{f as a,E as b,w as c,x as d,$ as e,S as f,P as g,T as h,A as i,h as j,D as k,I as l,O as m};
+//# sourceMappingURL=chunk-XGTZMJUI.js.map

package/dist/chunk-XIYWXCNU.js

@@ -0,0 +1,4 @@
+import{c as A,e as _,f as D}from"./chunk-Y4CYQV7G.js";import{existsSync as O,mkdirSync as M,readdirSync as L,readFileSync as U,renameSync as j,writeFileSync as F}from"fs";import{resolve as P}from"path";function $(e,t){let n=e.list?` in the "${e.list}" list`:"",r=[`This card came from the operator's reminder "${e.title}"${n} (id ${e.id}).`];return r.push(t?`Do what the operator chose, then tick the reminder off: remindctl complete ${e.id}`:"Leave the reminder open; it will come back at a later check-in."),r}var R=["discard","keep","pause","approve"],f={title:120,ask:300,recommend:300,source:500,note:500,pendingPerAgent:25},q={defaultExpiryDays:3,maxExpiryDays:30};function x(e){return P(e,".agentx","approvals")}var z=/^[a-z0-9][a-z0-9-]{0,80}$/;function N(e){return z.test(e)}function T(e,t){if(!N(t))throw new Error(`invalid card id: ${t}`);return P(x(e),`${t}.json`)}function B(e,t){let n=new Date(e).toISOString().slice(0,10),r=t.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,40);return`${n}-${r||"card"}-${Math.random().toString(36).slice(2,6)}`}function w(e,t){M(x(e),{recursive:!0});let n=T(e,t.id),r=`${n}.${process.pid}.tmp`;F(r,JSON.stringify(t,null,2)+`
+`),j(r,n)}function S(e,t){if(!N(t))return null;try{return JSON.parse(U(T(e,t),"utf-8"))}catch{return null}}function C(e,t){let n=x(e);if(!O(n))return[];let r=[];for(let i of L(n).filter(s=>s.endsWith(".json")&&!s.startsWith("_")).sort()){let s=S(e,i.slice(0,-5));s&&(!t||s.status===t)&&r.push(s)}return r}function l(e){return typeof e=="string"?e.replace(/\s+/g," ").trim():""}function J(e,t,n){let r=t+n.maxExpiryDays*864e5,i,s=l(e);if(!s)i=t+n.defaultExpiryDays*864e5;else{let a=/^(\d+)\s*([hd])$/i.exec(s);if(a)i=t+Number(a[1])*(a[2].toLowerCase()==="d"?864e5:36e5);else if(i=Date.parse(s),Number.isNaN(i))return{ok:!1,error:`expires must be an ISO date or time, or like "12h" / "3d" (got "${s}")`}}return i<=t?{ok:!1,error:"expires must be in the future"}:{ok:!0,at:new Date(Math.min(i,r)).toISOString()}}function V(e,t={}){let n=t.now??Date.now(),r=t.settings??q,i=l(e.title),s=l(e.ask),a=l(e.recommend),c=l(e.raised_by);if(!i)return{ok:!1,error:"title is required"};if(!s)return{ok:!1,error:"ask is required: the yes/no question"};if(!a)return{ok:!1,error:"recommend is required: your advice and why, in one line"};if(!c)return{ok:!1,error:"raised_by is required: the agent id"};if(i.length>f.title)return{ok:!1,error:`title is longer than ${f.title} characters`};if(s.length>f.ask)return{ok:!1,error:`ask is longer than ${f.ask} characters`};if(a.length>f.recommend)return{ok:!1,error:`recommend is longer than ${f.recommend} characters`};let y=l(e.if_silent).toLowerCase();if(!R.includes(y))return{ok:!1,error:`if_silent must be one of ${R.join(", ")}`};let d=J(e.expires,n,r);if(!d.ok)return d;let u=l(e.source);if(u.length>f.source)return{ok:!1,error:`source is longer than ${f.source} characters`};if(u&&/^[a-z][a-z0-9+.-]*:/i.test(u)&&!/^https?:\/\//i.test(u))return{ok:!1,error:"source must be an http(s) link or a plain reference"};let h=A(e);if(!h.ok)return h;let p,o=e.reply;return o&&typeof o=="object"&&l(o.channel)&&l(o.chatId)&&(p={channel:l(o.channel),chatId:l(o.chatId),...l(o.accountId)?{accountId:l(o.accountId)}:{}}),{ok:!0,card:{id:B(n,i),title:i,ask:s,recommend:a,if_silent:y,expires:d.at,...u?{source:u}:{},raised_by:c,created_at:new Date(n).toISOString(),...p?{reply:p}:{},...h.value,...t.origin?{origin:t.origin}:{},status:"pending"}}}function oe(e,t,n={}){let r=V(t,n);if(!r.ok)return r;let i=C(e,"pending").filter(s=>s.raised_by===r.card.raised_by).length;return i>=f.pendingPerAgent?{ok:!1,error:`${r.card.raised_by} already has ${i} cards waiting; wait for decisions before raising more`}:(w(e,r.card),r)}function ae(e,t,n,r={}){let i=S(e,t);if(!i)return{ok:!1,error:`no card "${t}"`};if(i.status!=="pending")return{ok:!1,error:`card "${t}" is already ${i.status}`};let s=_(i,n,r);if(!s.ok)return s;let a=l(r.note).slice(0,f.note),c={...i,status:"decided",verdict:n,decided_by:r.by??"operator",decided_at:new Date(r.now??Date.now()).toISOString(),...a?{note:a}:{},...s.choice?{choice:s.choice}:{},...s.text?{text:s.text}:{}};return w(e,c),{ok:!0,card:c}}function ce(e,t=Date.now()){let n=[];for(let r of C(e,"pending")){if(Date.parse(r.expires)>t)continue;let i={...r,status:"expired",outcome:r.if_silent,decided_by:"expiry",decided_at:new Date(t).toISOString()};w(e,i),n.push(i)}return n}function de(e){return C(e).filter(t=>t.status!=="pending"&&!t.agent_notified_at)}function ue(e,t,n=Date.now()){let r=S(e,t);!r||r.agent_notified_at||w(e,{...r,agent_notified_at:new Date(n).toISOString()})}function le(e){let t=e.status==="decided"?e.verdict==="yes"?"The operator said YES.":"The operator said NO.":`Nobody answered before it expired, so the default applied: ${e.outcome??e.if_silent}.`,n=[`[Approval result] Your decision card "${e.title}" (${e.id}) is closed.`,`Question: ${e.ask}`,t];return e.status==="decided"&&e.verdict==="yes"&&n.push(...D(e)),e.note&&n.push(`Operator note: ${e.note}`),e.source&&n.push(`Source: ${e.source}`),e.origin&&n.push(...$(e.origin,e.status==="decided"&&e.verdict==="yes")),e.reply&&n.push(`You raised it from ${e.reply.channel} chat ${e.reply.chatId}; reply there if the requester should know.`),n.push("Act on this result now. Do not raise the same card again."),n.join(`
+`)}function b(e,t=160){if(!e)return e;let n=e.replace(/\s+/g," ").trim();return n.length>t?n.slice(0,t-1)+"\u2026":n}function W(e){let t=new Map;for(let r of e.cronRuns??[]){let i=t.get(r.jobId);(!i||i.startedAt<r.startedAt)&&t.set(r.jobId,r)}let n={success:0,failed:0};for(let r of e.cronRuns??[])r.status==="success"?n.success++:n.failed++;return{id:e.id,name:e.name,url:e.url,reachable:e.reachable,error:b(e.error),uptimeSec:e.uptimeSec,inflight:e.inflight,restart:e.restart?.state&&e.restart.state!=="none"?e.restart:void 0,agents:e.agents.map(r=>({id:r.id,name:r.name,tier:r.tier,active:r.active,errors:r.errors,lastActive:r.lastActive,last:r.lastSummary?{text:b(r.lastSummary.text),at:r.lastSummary.at,ok:r.lastSummary.ok}:void 0})),crons:{today:n,items:(e.crons??[]).map(r=>{let i=t.get(r.id);return{id:r.id,enabled:r.enabled,schedule:r.schedule,agent:r.agent,nextRun:r.nextRun,consecutiveErrors:r.consecutiveErrors,last:i?{status:i.status,at:i.startedAt,text:b(i.status==="success"?i.responseSummary:i.errorSummary)}:void 0}})}}}function G(e){let t=[];for(let n of e)for(let r of n.agents)for(let i of r.runningTasks??[])t.push({node:n.url,nodeName:n.name,agentId:r.id,agentName:r.name,taskId:i.id,preview:b(i.messagePreview),channel:i.channel,startedAt:i.startedAt});return t.sort((n,r)=>n.startedAt<r.startedAt?1:-1)}var H=/^\/api\/app\/tasks\/(cancel|followup)$/;async function ge(e,t,n,r,i,s){let a=new URL(e.url||n,"http://localhost");if(r==="GET"&&(n==="/api/app/fleet"||n==="/api/app/activity")){let o=Y(a.searchParams.get("timezone")),g=await s.snapshot({date:Z(o),timezone:o});return n==="/api/app/activity"?m(t,200,{ts:g.ts,tasks:G(g.nodes)}):m(t,200,{ts:g.ts,nodes:g.nodes.map(W)})}if(r==="GET"&&n==="/api/app/approvals")return m(t,200,{nodes:await s.approvals()});if(r!=="POST")return!1;let c=n.match(H);if(!(c||["/api/app/nodes/restart","/api/app/nodes/reload","/api/app/crons/toggle","/api/app/approvals/decide"].includes(n)))return!1;let d;try{d=await I(e)}catch(o){return m(t,400,{error:o.message})}let u=k(d.node);if(!u)return m(t,400,{error:"node is required"});let h=`operator (phone: ${i})`,p;if(c){let o=k(d.taskId);if(!o)return m(t,400,{error:"taskId is required"});let g=`/api/tasks/${encodeURIComponent(o)}/${c[1]}`;if(c[1]==="cancel")p=await s.nodePost(u,g,{reason:`cancelled by ${h}`});else{let v=k(d.message);if(!v)return m(t,400,{error:"message is required"});p=await s.nodePost(u,g,{message:v,sender:h})}}else if(n==="/api/app/nodes/restart")p=await s.nodePost(u,d.cancel===!0?"/daemon/restart/cancel":"/daemon/restart",{});else if(n==="/api/app/nodes/reload")p=await s.nodePost(u,"/reload",{});else if(n==="/api/app/crons/toggle"){let o=k(d.cronId);if(!o||typeof d.enabled!="boolean")return m(t,400,{error:"cronId and enabled (true or false) are required"});p=await s.nodePost(u,`/crons/${encodeURIComponent(o)}/enabled`,{enabled:d.enabled})}else{let o=k(d.key),g=d.action;if(!o||g!=="yes"&&g!=="no"&&g!=="later")return m(t,400,{error:"key and action (yes, no or later) are required"});p=await s.decide(u,o,g,h)}return m(t,p.status,p.body)}function k(e){return typeof e=="string"?e.trim():""}function Y(e){if(!e)return"UTC";try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),e}catch{return"UTC"}}function Z(e,t=new Date){return new Intl.DateTimeFormat("en-CA",{timeZone:e,year:"numeric",month:"2-digit",day:"2-digit"}).format(t)}async function I(e,t=16*1024){let n=0,r=[];for await(let a of e){if(n+=a.length,n>t)throw new Error("body too large");r.push(a)}let i=Buffer.concat(r).toString("utf-8").trim();if(!i)return{};let s=JSON.parse(i);if(!s||typeof s!="object"||Array.isArray(s))throw new Error("expected a JSON object");return s}function m(e,t,n){return e.writeHead(t,{"Content-Type":"application/json","Cache-Control":"no-store"}),e.end(JSON.stringify(n)),!0}var K={perClient:5,global:10,windowMs:10*60*1e3,lockoutMs:5*60*1e3},E=class{constructor(t=K,n=Date.now){this.opts=t;this.now=n}clients=new Map;all={failures:[],lockedUntil:0};retryAfter(t){let n=this.now(),r=Math.max(this.all.lockedUntil,this.clients.get(t)?.lockedUntil??0);return r>n?Math.ceil((r-n)/1e3):0}fail(t){let n=this.clients.get(t);n||this.clients.set(t,n={failures:[],lockedUntil:0}),this.bump(n,this.opts.perClient),this.bump(this.all,this.opts.global)}succeed(t){this.clients.delete(t)}bump(t,n){let r=this.now();t.failures=t.failures.filter(i=>r-i<this.opts.windowMs),t.failures.push(r),t.failures.length>=n&&(t.lockedUntil=r+this.opts.lockoutMs)}},Q="That code didn't work. Check it, or run agentx app pair for a new one.",X=400;async function ye(e,t){let n=Date.now(),r=t.log??(d=>console.log(d)),i=e.socket.remoteAddress||"unknown",s=t.limiter.retryAfter(i);if(s>0)return r(`[app] pair-code refused from ${i}: locked out for ${s}s more`),{status:429,body:{error:"too many attempts",retryAfter:s},retryAfter:s};let a=null;try{a=(await I(e,1024)).code}catch{}let c=t.codes.redeem(a),y=c?t.verify(c.token):null;return await ee(n,t.minMs??X),!c||!y?(t.limiter.fail(i),r(`[app] pair-code failed from ${i}`),{status:401,body:{error:Q}}):(t.limiter.succeed(i),r(`[app] pair-code paired ${c.tokenId} (${y}) from ${i}`),{status:200,body:{device:y},token:c.token})}async function ee(e,t){let n=e+t-Date.now();n>0&&await new Promise(r=>setTimeout(r,n))}export{R as a,f as b,x as c,N as d,S as e,C as f,oe as g,ae as h,ce as i,de as j,ue as k,le as l,ge as m,I as n,E as o,Q as p,ye as q};
+//# sourceMappingURL=chunk-XIYWXCNU.js.map

package/dist/chunk-XIYWXCNU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/approvals/cards.ts","../src/approvals/origin.ts","../src/daemon/app-fleet.ts","../src/daemon/app-pair-code.ts"],"sourcesContent":["import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { answerLines, buildChoices, resolveAnswer, type CardChoices } from \"./choices\"\nimport { originLines, type CardOrigin } from \"./origin\"\n\n// --- Decision cards: what an agent asks the operator ---\n//\n// An agent that needs a yes/no from the operator writes a card instead of\n// asking in chat. A card says what it is, the question, what the agent\n// recommends, and what happens if nobody answers by `expires`. Nothing\n// waits forever: past `expires` the daemon applies `if_silent` (sweep.ts).\n//\n// Storage: one JSON file per card under `.agentx/approvals/`, written\n// atomically, like wiki proposals. The CLI, the dashboard and the daemon\n// are separate processes and all read the same files.\n//\n// Field names match the API (`if_silent`, `raised_by`), so a stored card is\n// exactly what `POST /approvals` accepted.\n\nexport type IfSilent = \"discard\" | \"keep\" | \"pause\" | \"approve\"\nexport const IF_SILENT_VALUES: readonly IfSilent[] = [\"discard\", \"keep\", \"pause\", \"approve\"]\n\nexport type CardStatus = \"pending\" | \"decided\" | \"expired\"\nexport type Verdict = \"yes\" | \"no\"\n\n/** Where the agent was asked, so the verdict can be taken back there. */\nexport interface ReplyTarget {\n  channel: string\n  chatId: string\n  accountId?: string\n}\n\nexport interface DecisionCard extends CardChoices {\n  id: string\n  title: string\n  ask: string\n  recommend: string\n  if_silent: IfSilent\n  /** ISO time the default applies. Always set. */\n  expires: string\n  /** Link to the draft, PR or issue. */\n  source?: string\n  raised_by: string\n  created_at: string\n  reply?: ReplyTarget\n  status: CardStatus\n  /** The operator's answer (status \"decided\"). */\n  verdict?: Verdict\n  /** What applied on expiry (status \"expired\"). */\n  outcome?: IfSilent\n  decided_by?: string\n  decided_at?: string\n  note?: string\n  /** The option the operator picked, when the card offered choices. */\n  choice?: string\n  /** The message the operator approved, after any edit. */\n  text?: string\n  /** Set once the raising agent has been told the result. */\n  agent_notified_at?: string\n  /** What the card is about, when the daemon raised it (origin.ts). */\n  origin?: CardOrigin\n}\n\nexport const CARD_LIMITS = {\n  title: 120,\n  ask: 300,\n  recommend: 300,\n  source: 500,\n  note: 500,\n  /** Pending cards one agent may have open at a time. */\n  pendingPerAgent: 25,\n} as const\n\nexport interface CardSettings {\n  defaultExpiryDays: number\n  maxExpiryDays: number\n}\n\nexport const DEFAULT_CARD_SETTINGS: CardSettings = { defaultExpiryDays: 3, maxExpiryDays: 30 }\n\nexport function approvalsDir(root: string): string {\n  return resolve(root, \".agentx\", \"approvals\")\n}\n\nconst CARD_ID_RE = /^[a-z0-9][a-z0-9-]{0,80}$/\n\nexport function isValidCardId(id: string): boolean {\n  return CARD_ID_RE.test(id)\n}\n\nfunction fileFor(root: string, id: string): string {\n  if (!isValidCardId(id)) throw new Error(`invalid card id: ${id}`)\n  return resolve(approvalsDir(root), `${id}.json`)\n}\n\nexport function newCardId(now: number, title: string): string {\n  const day = new Date(now).toISOString().slice(0, 10)\n  const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/^-+|-+$/g, \"\").slice(0, 40)\n  return `${day}-${slug || \"card\"}-${Math.random().toString(36).slice(2, 6)}`\n}\n\nexport function saveCard(root: string, card: DecisionCard): void {\n  mkdirSync(approvalsDir(root), { recursive: true })\n  const path = fileFor(root, card.id)\n  const tmp = `${path}.${process.pid}.tmp`\n  writeFileSync(tmp, JSON.stringify(card, null, 2) + \"\\n\")\n  renameSync(tmp, path)\n}\n\nexport function readCard(root: string, id: string): DecisionCard | null {\n  if (!isValidCardId(id)) return null\n  try {\n    return JSON.parse(readFileSync(fileFor(root, id), \"utf-8\")) as DecisionCard\n  } catch {\n    return null\n  }\n}\n\n/** Cards, oldest first; only `status` ones when given. */\nexport function listCards(root: string, status?: CardStatus): DecisionCard[] {\n  const dir = approvalsDir(root)\n  if (!existsSync(dir)) return []\n  const out: DecisionCard[] = []\n  for (const f of readdirSync(dir).filter((f) => f.endsWith(\".json\") && !f.startsWith(\"_\")).sort()) {\n    const c = readCard(root, f.slice(0, -5))\n    if (c && (!status || c.status === status)) out.push(c)\n  }\n  return out\n}\n\nfunction oneLine(v: unknown): string {\n  return typeof v === \"string\" ? v.replace(/\\s+/g, \" \").trim() : \"\"\n}\n\n/**\n * `expires` as given by an agent: an ISO date or time, or a relative\n * \"12h\" / \"3d\". Unset: the default. Always capped at maxExpiryDays, so a\n * card can't be parked for a year.\n */\nexport function resolveExpiry(input: unknown, now: number, settings: CardSettings): { ok: true; at: string } | { ok: false; error: string } {\n  const max = now + settings.maxExpiryDays * 86_400_000\n  let at: number\n  const raw = oneLine(input)\n  if (!raw) {\n    at = now + settings.defaultExpiryDays * 86_400_000\n  } else {\n    const rel = /^(\\d+)\\s*([hd])$/i.exec(raw)\n    if (rel) {\n      at = now + Number(rel[1]) * (rel[2].toLowerCase() === \"d\" ? 86_400_000 : 3_600_000)\n    } else {\n      at = Date.parse(raw)\n      if (Number.isNaN(at)) return { ok: false, error: `expires must be an ISO date or time, or like \"12h\" / \"3d\" (got \"${raw}\")` }\n    }\n  }\n  if (at <= now) return { ok: false, error: \"expires must be in the future\" }\n  return { ok: true, at: new Date(Math.min(at, max)).toISOString() }\n}\n\nexport interface CardInput {\n  title?: unknown\n  ask?: unknown\n  recommend?: unknown\n  if_silent?: unknown\n  expires?: unknown\n  source?: unknown\n  raised_by?: unknown\n  reply?: unknown\n  choices?: unknown\n  draft?: unknown\n  say?: unknown\n  context?: unknown\n}\n\n/** Validate what an agent sent and build a pending card. Never saves. */\nexport function buildCard(\n  input: CardInput,\n  opts: { now?: number; settings?: CardSettings; origin?: CardOrigin } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const now = opts.now ?? Date.now()\n  const settings = opts.settings ?? DEFAULT_CARD_SETTINGS\n  const title = oneLine(input.title)\n  const ask = oneLine(input.ask)\n  const recommend = oneLine(input.recommend)\n  const raisedBy = oneLine(input.raised_by)\n  if (!title) return { ok: false, error: \"title is required\" }\n  if (!ask) return { ok: false, error: \"ask is required: the yes/no question\" }\n  if (!recommend) return { ok: false, error: \"recommend is required: your advice and why, in one line\" }\n  if (!raisedBy) return { ok: false, error: \"raised_by is required: the agent id\" }\n  if (title.length > CARD_LIMITS.title) return { ok: false, error: `title is longer than ${CARD_LIMITS.title} characters` }\n  if (ask.length > CARD_LIMITS.ask) return { ok: false, error: `ask is longer than ${CARD_LIMITS.ask} characters` }\n  if (recommend.length > CARD_LIMITS.recommend) return { ok: false, error: `recommend is longer than ${CARD_LIMITS.recommend} characters` }\n  const ifSilent = oneLine(input.if_silent).toLowerCase()\n  if (!IF_SILENT_VALUES.includes(ifSilent as IfSilent)) {\n    return { ok: false, error: `if_silent must be one of ${IF_SILENT_VALUES.join(\", \")}` }\n  }\n  const expiry = resolveExpiry(input.expires, now, settings)\n  if (!expiry.ok) return expiry\n  const source = oneLine(input.source)\n  if (source.length > CARD_LIMITS.source) return { ok: false, error: `source is longer than ${CARD_LIMITS.source} characters` }\n  if (source && /^[a-z][a-z0-9+.-]*:/i.test(source) && !/^https?:\\/\\//i.test(source)) {\n    return { ok: false, error: \"source must be an http(s) link or a plain reference\" }\n  }\n  const extras = buildChoices(input)\n  if (!extras.ok) return extras\n  let reply: ReplyTarget | undefined\n  const r = input.reply as Record<string, unknown> | undefined\n  if (r && typeof r === \"object\" && oneLine(r.channel) && oneLine(r.chatId)) {\n    reply = { channel: oneLine(r.channel), chatId: oneLine(r.chatId), ...(oneLine(r.accountId) ? { accountId: oneLine(r.accountId) } : {}) }\n  }\n  return {\n    ok: true,\n    card: {\n      id: newCardId(now, title),\n      title,\n      ask,\n      recommend,\n      if_silent: ifSilent as IfSilent,\n      expires: expiry.at,\n      ...(source ? { source } : {}),\n      raised_by: raisedBy,\n      created_at: new Date(now).toISOString(),\n      ...(reply ? { reply } : {}),\n      ...extras.value,\n      // Set by the daemon only (check-ins), never from what an agent sent.\n      ...(opts.origin ? { origin: opts.origin } : {}),\n      status: \"pending\",\n    },\n  }\n}\n\n/** Validate, enforce the per-agent cap, and save. */\nexport function createCard(\n  root: string,\n  input: CardInput,\n  opts: { now?: number; settings?: CardSettings; origin?: CardOrigin } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const built = buildCard(input, opts)\n  if (!built.ok) return built\n  const open = listCards(root, \"pending\").filter((c) => c.raised_by === built.card.raised_by).length\n  if (open >= CARD_LIMITS.pendingPerAgent) {\n    return { ok: false, error: `${built.card.raised_by} already has ${open} cards waiting; wait for decisions before raising more` }\n  }\n  saveCard(root, built.card)\n  return built\n}\n\n/** Record the operator's answer. Refuses anything no longer pending. */\nexport function decideCard(\n  root: string,\n  id: string,\n  verdict: Verdict,\n  opts: { by?: string; note?: string; now?: number; choice?: string | number; text?: string } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const card = readCard(root, id)\n  if (!card) return { ok: false, error: `no card \"${id}\"` }\n  if (card.status !== \"pending\") return { ok: false, error: `card \"${id}\" is already ${card.status}` }\n  const answer = resolveAnswer(card, verdict, opts)\n  if (!answer.ok) return answer\n  const note = oneLine(opts.note).slice(0, CARD_LIMITS.note)\n  const decided: DecisionCard = {\n    ...card,\n    status: \"decided\",\n    verdict,\n    decided_by: opts.by ?? \"operator\",\n    decided_at: new Date(opts.now ?? Date.now()).toISOString(),\n    ...(note ? { note } : {}),\n    ...(answer.choice ? { choice: answer.choice } : {}),\n    ...(answer.text ? { text: answer.text } : {}),\n  }\n  saveCard(root, decided)\n  return { ok: true, card: decided }\n}\n\n/** Apply `if_silent` to every pending card past its expiry. */\nexport function expireCards(root: string, now: number = Date.now()): DecisionCard[] {\n  const out: DecisionCard[] = []\n  for (const card of listCards(root, \"pending\")) {\n    if (Date.parse(card.expires) > now) continue\n    const expired: DecisionCard = {\n      ...card,\n      status: \"expired\",\n      outcome: card.if_silent,\n      decided_by: \"expiry\",\n      decided_at: new Date(now).toISOString(),\n    }\n    saveCard(root, expired)\n    out.push(expired)\n  }\n  return out\n}\n\n/** Decided or expired cards whose agent hasn't been told yet. */\nexport function cardsAwaitingAgentNotice(root: string): DecisionCard[] {\n  return listCards(root).filter((c) => c.status !== \"pending\" && !c.agent_notified_at)\n}\n\nexport function markAgentNotified(root: string, id: string, now: number = Date.now()): void {\n  const card = readCard(root, id)\n  if (!card || card.agent_notified_at) return\n  saveCard(root, { ...card, agent_notified_at: new Date(now).toISOString() })\n}\n\n/** What the raising agent is told. Plain text, one short message. */\nexport function verdictMessage(card: DecisionCard): string {\n  const result = card.status === \"decided\"\n    ? (card.verdict === \"yes\" ? \"The operator said YES.\" : \"The operator said NO.\")\n    : `Nobody answered before it expired, so the default applied: ${card.outcome ?? card.if_silent}.`\n  const lines = [\n    `[Approval result] Your decision card \"${card.title}\" (${card.id}) is closed.`,\n    `Question: ${card.ask}`,\n    result,\n  ]\n  if (card.status === \"decided\" && card.verdict === \"yes\") lines.push(...answerLines(card))\n  if (card.note) lines.push(`Operator note: ${card.note}`)\n  if (card.source) lines.push(`Source: ${card.source}`)\n  if (card.origin) lines.push(...originLines(card.origin, card.status === \"decided\" && card.verdict === \"yes\"))\n  if (card.reply) lines.push(`You raised it from ${card.reply.channel} chat ${card.reply.chatId}; reply there if the requester should know.`)\n  lines.push(\"Act on this result now. Do not raise the same card again.\")\n  return lines.join(\"\\n\")\n}\n","// --- Where a card came from, when the daemon raised it ---\n//\n// Agents raise most cards themselves. A check-in (checkin.ts) raises one on\n// an agent's behalf for an open Apple Reminder, and records the reminder\n// here so the agent that gets the answer knows what to act on and what to\n// tick off. Only the daemon sets it: POST /approvals and the agent tool\n// never pass it through.\n\nexport interface CardOrigin {\n  kind: \"reminder\"\n  /** The reminder's full id, as remindctl prints it. */\n  id: string\n  title: string\n  list?: string\n}\n\n/** Lines for the owning agent's result message. */\nexport function originLines(origin: CardOrigin, approved: boolean): string[] {\n  const where = origin.list ? ` in the \"${origin.list}\" list` : \"\"\n  const lines = [`This card came from the operator's reminder \"${origin.title}\"${where} (id ${origin.id}).`]\n  lines.push(approved\n    ? `Do what the operator chose, then tick the reminder off: remindctl complete ${origin.id}`\n    : \"Leave the reminder open; it will come back at a later check-in.\")\n  return lines\n}\n","import type { IncomingMessage, ServerResponse } from \"http\"\n\n// --- Phone app: fleet, activity and control (/api/app/fleet, …) ---\n//\n// Phase 3 of the mobile epic. Runs behind the device-token check in\n// app-routes.ts, so every handler here may assume a paired phone.\n//\n// Reads reuse the dashboard's live snapshot (every node the dashboard can\n// see, including peers found through /mesh) and trim it to what a phone\n// shows: short previews, never full prompts, replies or errors. Writes go\n// to a node daemon through the dashboard's allowlisted, token-carrying POST\n// (AppFleetDeps.nodePost), the same path the desktop task and restart\n// buttons use, so the phone gets no power the dashboard doesn't already have.\n\nexport const PREVIEW_CHARS = 160\n\nexport interface SnapshotNode {\n  id: string\n  name: string\n  url: string\n  reachable: boolean\n  error?: string\n  uptimeSec?: number\n  inflight?: number\n  restart?: { state: string; requestedAt?: string; deadline?: string }\n  agents: Array<{\n    id: string\n    name: string\n    tier?: string\n    color?: string\n    active: number\n    errors: number\n    lastActive?: string\n    lastSummary?: { text: string; at: string; ok: boolean }\n    runningTasks?: Array<{ id: string; messagePreview: string; channel: string; chatId?: string; sender?: string; startedAt: string }>\n  }>\n  crons?: Array<{ id: string; enabled: boolean; schedule: string; agent: string; kind?: string; nextRun?: string; consecutiveErrors: number }>\n  cronRuns?: Array<{ jobId: string; startedAt: string; status: string; responseSummary?: string; errorSummary?: string; isRetry?: boolean }>\n}\n\nexport interface ApprovalItem {\n  key: string\n  title: string\n  ask?: string\n  recommend?: string\n  /** What yes and no do, in words. */\n  yes?: string\n  no?: string\n  raisedBy?: string\n  expires?: string\n}\n\nexport interface NodeApprovals {\n  node: string\n  nodeName: string\n  items: ApprovalItem[]\n  error?: string\n}\n\nexport interface NodeReply { status: number; body: any }\n\nexport interface AppFleetDeps {\n  snapshot(day?: { date: string; timezone: string }): Promise<{ ts: string; nodes: SnapshotNode[] }>\n  /** POST to a node daemon on the dashboard's allowlist, with its token. */\n  nodePost(nodeUrl: string, path: string, body: unknown): Promise<NodeReply>\n  approvals(): Promise<NodeApprovals[]>\n  /** `by` names the phone, e.g. \"operator (phone: My phone)\". */\n  decide(nodeUrl: string, key: string, action: \"yes\" | \"no\" | \"later\", by: string): Promise<NodeReply>\n}\n\nexport function clip(text: string | undefined, max = PREVIEW_CHARS): string | undefined {\n  if (!text) return text\n  const flat = text.replace(/\\s+/g, \" \").trim()\n  return flat.length > max ? flat.slice(0, max - 1) + \"…\" : flat\n}\n\n/** One node, trimmed for the Fleet tab. Cron outcomes come from the node's\n *  persisted run files (cronRuns), never the scheduler's counters. */\nexport function summarizeNode(n: SnapshotNode) {\n  const lastRun = new Map<string, NonNullable<SnapshotNode[\"cronRuns\"]>[number]>()\n  for (const r of n.cronRuns ?? []) {\n    const prev = lastRun.get(r.jobId)\n    if (!prev || prev.startedAt < r.startedAt) lastRun.set(r.jobId, r)\n  }\n  const today = { success: 0, failed: 0 }\n  for (const r of n.cronRuns ?? []) {\n    if (r.status === \"success\") today.success++\n    else today.failed++\n  }\n  return {\n    id: n.id,\n    name: n.name,\n    url: n.url,\n    reachable: n.reachable,\n    error: clip(n.error),\n    uptimeSec: n.uptimeSec,\n    inflight: n.inflight,\n    restart: n.restart?.state && n.restart.state !== \"none\" ? n.restart : undefined,\n    agents: n.agents.map((a) => ({\n      id: a.id,\n      name: a.name,\n      tier: a.tier,\n      active: a.active,\n      errors: a.errors,\n      lastActive: a.lastActive,\n      last: a.lastSummary ? { text: clip(a.lastSummary.text), at: a.lastSummary.at, ok: a.lastSummary.ok } : undefined,\n    })),\n    crons: {\n      today,\n      items: (n.crons ?? []).map((c) => {\n        const r = lastRun.get(c.id)\n        return {\n          id: c.id,\n          enabled: c.enabled,\n          schedule: c.schedule,\n          agent: c.agent,\n          nextRun: c.nextRun,\n          consecutiveErrors: c.consecutiveErrors,\n          last: r ? { status: r.status, at: r.startedAt, text: clip(r.status === \"success\" ? r.responseSummary : r.errorSummary) } : undefined,\n        }\n      }),\n    },\n  }\n}\n\n/** Every running task across the fleet, newest first. */\nexport function summarizeActivity(nodes: SnapshotNode[]) {\n  const tasks = []\n  for (const n of nodes) {\n    for (const a of n.agents) {\n      for (const t of a.runningTasks ?? []) {\n        tasks.push({\n          node: n.url,\n          nodeName: n.name,\n          agentId: a.id,\n          agentName: a.name,\n          taskId: t.id,\n          preview: clip(t.messagePreview),\n          channel: t.channel,\n          startedAt: t.startedAt,\n        })\n      }\n    }\n  }\n  return tasks.sort((x, y) => (x.startedAt < y.startedAt ? 1 : -1))\n}\n\nconst TASK_ACTION = /^\\/api\\/app\\/tasks\\/(cancel|followup)$/\n\n/** Handles /api/app/{fleet,activity,tasks,nodes,crons,approvals}. Returns\n *  false for any other path so the caller can fall through. */\nexport async function handleAppFleet(\n  req: IncomingMessage,\n  res: ServerResponse,\n  path: string,\n  method: string,\n  device: string,\n  deps: AppFleetDeps,\n): Promise<boolean> {\n  const url = new URL(req.url || path, \"http://localhost\")\n\n  if (method === \"GET\" && (path === \"/api/app/fleet\" || path === \"/api/app/activity\")) {\n    const timezone = validTimezone(url.searchParams.get(\"timezone\"))\n    const snap = await deps.snapshot({ date: dateIn(timezone), timezone })\n    if (path === \"/api/app/activity\") return json(res, 200, { ts: snap.ts, tasks: summarizeActivity(snap.nodes) })\n    return json(res, 200, { ts: snap.ts, nodes: snap.nodes.map(summarizeNode) })\n  }\n\n  if (method === \"GET\" && path === \"/api/app/approvals\") {\n    return json(res, 200, { nodes: await deps.approvals() })\n  }\n\n  if (method !== \"POST\") return false\n  const taskAction = path.match(TASK_ACTION)\n  const known = taskAction || [\n    \"/api/app/nodes/restart\", \"/api/app/nodes/reload\", \"/api/app/crons/toggle\", \"/api/app/approvals/decide\",\n  ].includes(path)\n  if (!known) return false\n\n  let body: Record<string, unknown>\n  try { body = await readJson(req) } catch (e: any) { return json(res, 400, { error: e.message }) }\n  const node = str(body.node)\n  if (!node) return json(res, 400, { error: \"node is required\" })\n  const by = `operator (phone: ${device})`\n\n  let reply: NodeReply\n  if (taskAction) {\n    const taskId = str(body.taskId)\n    if (!taskId) return json(res, 400, { error: \"taskId is required\" })\n    const upstream = `/api/tasks/${encodeURIComponent(taskId)}/${taskAction[1]}`\n    if (taskAction[1] === \"cancel\") {\n      reply = await deps.nodePost(node, upstream, { reason: `cancelled by ${by}` })\n    } else {\n      const message = str(body.message)\n      if (!message) return json(res, 400, { error: \"message is required\" })\n      reply = await deps.nodePost(node, upstream, { message, sender: by })\n    }\n  } else if (path === \"/api/app/nodes/restart\") {\n    reply = await deps.nodePost(node, body.cancel === true ? \"/daemon/restart/cancel\" : \"/daemon/restart\", {})\n  } else if (path === \"/api/app/nodes/reload\") {\n    reply = await deps.nodePost(node, \"/reload\", {})\n  } else if (path === \"/api/app/crons/toggle\") {\n    const cronId = str(body.cronId)\n    if (!cronId || typeof body.enabled !== \"boolean\") return json(res, 400, { error: \"cronId and enabled (true or false) are required\" })\n    reply = await deps.nodePost(node, `/crons/${encodeURIComponent(cronId)}/enabled`, { enabled: body.enabled })\n  } else {\n    const key = str(body.key)\n    const action = body.action\n    if (!key || (action !== \"yes\" && action !== \"no\" && action !== \"later\")) {\n      return json(res, 400, { error: \"key and action (yes, no or later) are required\" })\n    }\n    reply = await deps.decide(node, key, action, by)\n  }\n  return json(res, reply.status, reply.body)\n}\n\nfunction str(v: unknown): string {\n  return typeof v === \"string\" ? v.trim() : \"\"\n}\n\nfunction validTimezone(tz: string | null): string {\n  if (!tz) return \"UTC\"\n  try { new Intl.DateTimeFormat(\"en-US\", { timeZone: tz }); return tz } catch { return \"UTC\" }\n}\n\n/** YYYY-MM-DD for \"today\" in the phone's time zone. */\nexport function dateIn(timezone: string, now = new Date()): string {\n  return new Intl.DateTimeFormat(\"en-CA\", { timeZone: timezone, year: \"numeric\", month: \"2-digit\", day: \"2-digit\" }).format(now)\n}\n\nexport async function readJson(req: IncomingMessage, limit = 16 * 1024): Promise<Record<string, unknown>> {\n  let size = 0\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    size += (chunk as Buffer).length\n    if (size > limit) throw new Error(\"body too large\")\n    chunks.push(chunk as Buffer)\n  }\n  const raw = Buffer.concat(chunks).toString(\"utf-8\").trim()\n  if (!raw) return {}\n  const parsed = JSON.parse(raw)\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) throw new Error(\"expected a JSON object\")\n  return parsed\n}\n\nfunction json(res: ServerResponse, status: number, body: unknown): true {\n  res.writeHead(status, { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" })\n  res.end(JSON.stringify(body))\n  return true\n}\n","import type { IncomingMessage } from \"http\"\nimport { PairCodeStore } from \"./pair-codes\"\nimport { readJson } from \"./app-fleet\"\n\n// --- POST /api/app/pair-code: trade a one-time code for the session ---\n//\n// Public by necessity (the phone isn't paired yet), so it is guarded three\n// ways: an 8-symbol code (31^8 ≈ 850 billion), a per-client and a GLOBAL\n// failure limit with lockout, and one answer for every failure. Behind\n// `tailscale serve` every request arrives from 127.0.0.1, so the per-client\n// limit alone would see one client; the global limit is what really bounds\n// guessing: at most 10 wrong codes in any 10 minutes, whoever sends them.\n//\n// Every attempt is padded to the same minimum duration, so wrong, expired\n// and used codes can't be told apart by timing either.\n\nexport interface PairLimitOptions {\n  perClient: number   // failures per window before that client is locked out\n  global: number      // failures per window, all clients together\n  windowMs: number\n  lockoutMs: number\n}\n\nexport const DEFAULT_PAIR_LIMITS: PairLimitOptions = {\n  perClient: 5,\n  global: 10,\n  windowMs: 10 * 60 * 1000,\n  lockoutMs: 5 * 60 * 1000,\n}\n\ninterface Bucket { failures: number[]; lockedUntil: number }\n\n/** In-memory failure counter. A dashboard restart clears it; codes still\n *  expire after 10 minutes, so that grants an attacker nothing lasting. */\nexport class PairAttemptLimiter {\n  private clients = new Map<string, Bucket>()\n  private all: Bucket = { failures: [], lockedUntil: 0 }\n\n  constructor(private opts: PairLimitOptions = DEFAULT_PAIR_LIMITS, private now: () => number = Date.now) {}\n\n  /** Seconds until this client may try again, or 0 when it may try now. */\n  retryAfter(client: string): number {\n    const now = this.now()\n    const until = Math.max(this.all.lockedUntil, this.clients.get(client)?.lockedUntil ?? 0)\n    return until > now ? Math.ceil((until - now) / 1000) : 0\n  }\n\n  fail(client: string): void {\n    let bucket = this.clients.get(client)\n    if (!bucket) this.clients.set(client, (bucket = { failures: [], lockedUntil: 0 }))\n    this.bump(bucket, this.opts.perClient)\n    this.bump(this.all, this.opts.global)\n  }\n\n  succeed(client: string): void {\n    this.clients.delete(client)\n  }\n\n  private bump(bucket: Bucket, limit: number): void {\n    const now = this.now()\n    bucket.failures = bucket.failures.filter((t) => now - t < this.opts.windowMs)\n    bucket.failures.push(now)\n    if (bucket.failures.length >= limit) bucket.lockedUntil = now + this.opts.lockoutMs\n  }\n}\n\nexport interface PairCodeDeps {\n  codes: PairCodeStore\n  limiter: PairAttemptLimiter\n  /** Checks the redeemed token is still an active `app` token; returns its device name. */\n  verify: (token: string) => string | null\n  log?: (line: string) => void\n  minMs?: number\n}\n\nexport type PairCodeResult =\n  | { status: 200; body: { device: string }; token: string }\n  | { status: 401; body: { error: string } }\n  | { status: 429; body: { error: string; retryAfter: number }; retryAfter: number }\n\nexport const PAIR_CODE_FAILED = \"That code didn't work. Check it, or run agentx app pair for a new one.\"\nconst MIN_MS = 400\n\nexport async function redeemPairCode(req: IncomingMessage, deps: PairCodeDeps): Promise<PairCodeResult> {\n  const started = Date.now()\n  const log = deps.log ?? ((line: string) => console.log(line))\n  const client = req.socket.remoteAddress || \"unknown\"\n\n  const wait = deps.limiter.retryAfter(client)\n  if (wait > 0) {\n    log(`[app] pair-code refused from ${client}: locked out for ${wait}s more`)\n    return { status: 429, body: { error: \"too many attempts\", retryAfter: wait }, retryAfter: wait }\n  }\n\n  let code: unknown = null\n  try { code = (await readJson(req, 1024)).code } catch { /* counts as a wrong code */ }\n  const redeemed = deps.codes.redeem(code)\n  const device = redeemed ? deps.verify(redeemed.token) : null\n  await padTo(started, deps.minMs ?? MIN_MS)\n\n  if (!redeemed || !device) {\n    deps.limiter.fail(client)\n    log(`[app] pair-code failed from ${client}`)\n    return { status: 401, body: { error: PAIR_CODE_FAILED } }\n  }\n  deps.limiter.succeed(client)\n  log(`[app] pair-code paired ${redeemed.tokenId} (${device}) from ${client}`)\n  return { status: 200, body: { device }, token: redeemed.token }\n}\n\nasync function padTo(started: number, minMs: number): Promise<void> {\n  const left = started + minMs - Date.now()\n  if (left > 0) await new Promise((r) => setTimeout(r, left))\n}\n"],"mappings":"sDAAA,OAAS,cAAAA,EAAY,aAAAC,EAAW,eAAAC,EAAa,gBAAAC,EAAc,cAAAC,EAAY,iBAAAC,MAAqB,KAC5F,OAAS,WAAAC,MAAe,OCgBjB,SAASC,EAAYC,EAAoBC,EAA6B,CAC3E,IAAMC,EAAQF,EAAO,KAAO,YAAYA,EAAO,aAAe,GACxDG,EAAQ,CAAC,gDAAgDH,EAAO,SAASE,SAAaF,EAAO,MAAM,EACzG,OAAAG,EAAM,KAAKF,EACP,8EAA8ED,EAAO,KACrF,iEAAiE,EAC9DG,CACT,CDJO,IAAMC,EAAwC,CAAC,UAAW,OAAQ,QAAS,SAAS,EA2C9EC,EAAc,CACzB,MAAO,IACP,IAAK,IACL,UAAW,IACX,OAAQ,IACR,KAAM,IAEN,gBAAiB,EACnB,EAOaC,EAAsC,CAAE,kBAAmB,EAAG,cAAe,EAAG,EAEtF,SAASC,EAAaC,EAAsB,CACjD,OAAOC,EAAQD,EAAM,UAAW,WAAW,CAC7C,CAEA,IAAME,EAAa,4BAEZ,SAASC,EAAcC,EAAqB,CACjD,OAAOF,EAAW,KAAKE,CAAE,CAC3B,CAEA,SAASC,EAAQL,EAAcI,EAAoB,CACjD,GAAI,CAACD,EAAcC,CAAE,EAAG,MAAM,IAAI,MAAM,oBAAoBA,GAAI,EAChE,OAAOH,EAAQF,EAAaC,CAAI,EAAG,GAAGI,QAAS,CACjD,CAEO,SAASE,EAAUC,EAAaC,EAAuB,CAC5D,IAAMC,EAAM,IAAI,KAAKF,CAAG,EAAE,YAAY,EAAE,MAAM,EAAG,EAAE,EAC7CG,EAAOF,EAAM,YAAY,EAAE,QAAQ,cAAe,GAAG,EAAE,QAAQ,WAAY,EAAE,EAAE,MAAM,EAAG,EAAE,EAChG,MAAO,GAAGC,KAAOC,GAAQ,UAAU,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,GAC1E,CAEO,SAASC,EAASX,EAAcY,EAA0B,CAC/DC,EAAUd,EAAaC,CAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EACjD,IAAMc,EAAOT,EAAQL,EAAMY,EAAK,EAAE,EAC5BG,EAAM,GAAGD,KAAQ,QAAQ,UAC/BE,EAAcD,EAAK,KAAK,UAAUH,EAAM,KAAM,CAAC,EAAI;AAAA,CAAI,EACvDK,EAAWF,EAAKD,CAAI,CACtB,CAEO,SAASI,EAASlB,EAAcI,EAAiC,CACtE,GAAI,CAACD,EAAcC,CAAE,EAAG,OAAO,KAC/B,GAAI,CACF,OAAO,KAAK,MAAMe,EAAad,EAAQL,EAAMI,CAAE,EAAG,OAAO,CAAC,CAC5D,MAAE,CACA,OAAO,IACT,CACF,CAGO,SAASgB,EAAUpB,EAAcqB,EAAqC,CAC3E,IAAMC,EAAMvB,EAAaC,CAAI,EAC7B,GAAI,CAACuB,EAAWD,CAAG,EAAG,MAAO,CAAC,EAC9B,IAAME,EAAsB,CAAC,EAC7B,QAAWC,KAAKC,EAAYJ,CAAG,EAAE,OAAQG,GAAMA,EAAE,SAAS,OAAO,GAAK,CAACA,EAAE,WAAW,GAAG,CAAC,EAAE,KAAK,EAAG,CAChG,IAAME,EAAIT,EAASlB,EAAMyB,EAAE,MAAM,EAAG,EAAE,CAAC,EACnCE,IAAM,CAACN,GAAUM,EAAE,SAAWN,IAASG,EAAI,KAAKG,CAAC,EAEvD,OAAOH,CACT,CAEA,SAASI,EAAQC,EAAoB,CACnC,OAAO,OAAOA,GAAM,SAAWA,EAAE,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAAI,EACjE,CAOO,SAASC,EAAcC,EAAgBxB,EAAayB,EAAiF,CAC1I,IAAMC,EAAM1B,EAAMyB,EAAS,cAAgB,MACvCE,EACEC,EAAMP,EAAQG,CAAK,EACzB,GAAI,CAACI,EACHD,EAAK3B,EAAMyB,EAAS,kBAAoB,UACnC,CACL,IAAMI,EAAM,oBAAoB,KAAKD,CAAG,EACxC,GAAIC,EACFF,EAAK3B,EAAM,OAAO6B,EAAI,CAAC,CAAC,GAAKA,EAAI,CAAC,EAAE,YAAY,IAAM,IAAM,MAAa,cAEzEF,EAAK,KAAK,MAAMC,CAAG,EACf,OAAO,MAAMD,CAAE,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,mEAAmEC,KAAQ,EAGhI,OAAID,GAAM3B,EAAY,CAAE,GAAI,GAAO,MAAO,+BAAgC,EACnE,CAAE,GAAI,GAAM,GAAI,IAAI,KAAK,KAAK,IAAI2B,EAAID,CAAG,CAAC,EAAE,YAAY,CAAE,CACnE,CAkBO,SAASI,EACdN,EACAO,EAAuE,CAAC,EACP,CACjE,IAAM/B,EAAM+B,EAAK,KAAO,KAAK,IAAI,EAC3BN,EAAWM,EAAK,UAAYxC,EAC5BU,EAAQoB,EAAQG,EAAM,KAAK,EAC3BQ,EAAMX,EAAQG,EAAM,GAAG,EACvBS,EAAYZ,EAAQG,EAAM,SAAS,EACnCU,EAAWb,EAAQG,EAAM,SAAS,EACxC,GAAI,CAACvB,EAAO,MAAO,CAAE,GAAI,GAAO,MAAO,mBAAoB,EAC3D,GAAI,CAAC+B,EAAK,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EAC5E,GAAI,CAACC,EAAW,MAAO,CAAE,GAAI,GAAO,MAAO,yDAA0D,EACrG,GAAI,CAACC,EAAU,MAAO,CAAE,GAAI,GAAO,MAAO,qCAAsC,EAChF,GAAIjC,EAAM,OAASX,EAAY,MAAO,MAAO,CAAE,GAAI,GAAO,MAAO,wBAAwBA,EAAY,kBAAmB,EACxH,GAAI0C,EAAI,OAAS1C,EAAY,IAAK,MAAO,CAAE,GAAI,GAAO,MAAO,sBAAsBA,EAAY,gBAAiB,EAChH,GAAI2C,EAAU,OAAS3C,EAAY,UAAW,MAAO,CAAE,GAAI,GAAO,MAAO,4BAA4BA,EAAY,sBAAuB,EACxI,IAAM6C,EAAWd,EAAQG,EAAM,SAAS,EAAE,YAAY,EACtD,GAAI,CAACnC,EAAiB,SAAS8C,CAAoB,EACjD,MAAO,CAAE,GAAI,GAAO,MAAO,4BAA4B9C,EAAiB,KAAK,IAAI,GAAI,EAEvF,IAAM+C,EAASb,EAAcC,EAAM,QAASxB,EAAKyB,CAAQ,EACzD,GAAI,CAACW,EAAO,GAAI,OAAOA,EACvB,IAAMC,EAAShB,EAAQG,EAAM,MAAM,EACnC,GAAIa,EAAO,OAAS/C,EAAY,OAAQ,MAAO,CAAE,GAAI,GAAO,MAAO,yBAAyBA,EAAY,mBAAoB,EAC5H,GAAI+C,GAAU,uBAAuB,KAAKA,CAAM,GAAK,CAAC,gBAAgB,KAAKA,CAAM,EAC/E,MAAO,CAAE,GAAI,GAAO,MAAO,qDAAsD,EAEnF,IAAMC,EAASC,EAAaf,CAAK,EACjC,GAAI,CAACc,EAAO,GAAI,OAAOA,EACvB,IAAIE,EACEC,EAAIjB,EAAM,MAChB,OAAIiB,GAAK,OAAOA,GAAM,UAAYpB,EAAQoB,EAAE,OAAO,GAAKpB,EAAQoB,EAAE,MAAM,IACtED,EAAQ,CAAE,QAASnB,EAAQoB,EAAE,OAAO,EAAG,OAAQpB,EAAQoB,EAAE,MAAM,EAAG,GAAIpB,EAAQoB,EAAE,SAAS,EAAI,CAAE,UAAWpB,EAAQoB,EAAE,SAAS,CAAE,EAAI,CAAC,CAAG,GAElI,CACL,GAAI,GACJ,KAAM,CACJ,GAAI1C,EAAUC,EAAKC,CAAK,EACxB,MAAAA,EACA,IAAA+B,EACA,UAAAC,EACA,UAAWE,EACX,QAASC,EAAO,GAChB,GAAIC,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,UAAWH,EACX,WAAY,IAAI,KAAKlC,CAAG,EAAE,YAAY,EACtC,GAAIwC,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,EACzB,GAAGF,EAAO,MAEV,GAAIP,EAAK,OAAS,CAAE,OAAQA,EAAK,MAAO,EAAI,CAAC,EAC7C,OAAQ,SACV,CACF,CACF,CAGO,SAASW,GACdjD,EACA+B,EACAO,EAAuE,CAAC,EACP,CACjE,IAAMY,EAAQb,EAAUN,EAAOO,CAAI,EACnC,GAAI,CAACY,EAAM,GAAI,OAAOA,EACtB,IAAMC,EAAO/B,EAAUpB,EAAM,SAAS,EAAE,OAAQ2B,GAAMA,EAAE,YAAcuB,EAAM,KAAK,SAAS,EAAE,OAC5F,OAAIC,GAAQtD,EAAY,gBACf,CAAE,GAAI,GAAO,MAAO,GAAGqD,EAAM,KAAK,yBAAyBC,yDAA6D,GAEjIxC,EAASX,EAAMkD,EAAM,IAAI,EAClBA,EACT,CAGO,SAASE,GACdpD,EACAI,EACAiD,EACAf,EAA8F,CAAC,EAC9B,CACjE,IAAM1B,EAAOM,EAASlB,EAAMI,CAAE,EAC9B,GAAI,CAACQ,EAAM,MAAO,CAAE,GAAI,GAAO,MAAO,YAAYR,IAAM,EACxD,GAAIQ,EAAK,SAAW,UAAW,MAAO,CAAE,GAAI,GAAO,MAAO,SAASR,iBAAkBQ,EAAK,QAAS,EACnG,IAAM0C,EAASC,EAAc3C,EAAMyC,EAASf,CAAI,EAChD,GAAI,CAACgB,EAAO,GAAI,OAAOA,EACvB,IAAME,EAAO5B,EAAQU,EAAK,IAAI,EAAE,MAAM,EAAGzC,EAAY,IAAI,EACnD4D,EAAwB,CAC5B,GAAG7C,EACH,OAAQ,UACR,QAAAyC,EACA,WAAYf,EAAK,IAAM,WACvB,WAAY,IAAI,KAAKA,EAAK,KAAO,KAAK,IAAI,CAAC,EAAE,YAAY,EACzD,GAAIkB,EAAO,CAAE,KAAAA,CAAK,EAAI,CAAC,EACvB,GAAIF,EAAO,OAAS,CAAE,OAAQA,EAAO,MAAO,EAAI,CAAC,EACjD,GAAIA,EAAO,KAAO,CAAE,KAAMA,EAAO,IAAK,EAAI,CAAC,CAC7C,EACA,OAAA3C,EAASX,EAAMyD,CAAO,EACf,CAAE,GAAI,GAAM,KAAMA,CAAQ,CACnC,CAGO,SAASC,GAAY1D,EAAcO,EAAc,KAAK,IAAI,EAAmB,CAClF,IAAMiB,EAAsB,CAAC,EAC7B,QAAWZ,KAAQQ,EAAUpB,EAAM,SAAS,EAAG,CAC7C,GAAI,KAAK,MAAMY,EAAK,OAAO,EAAIL,EAAK,SACpC,IAAMoD,EAAwB,CAC5B,GAAG/C,EACH,OAAQ,UACR,QAASA,EAAK,UACd,WAAY,SACZ,WAAY,IAAI,KAAKL,CAAG,EAAE,YAAY,CACxC,EACAI,EAASX,EAAM2D,CAAO,EACtBnC,EAAI,KAAKmC,CAAO,EAElB,OAAOnC,CACT,CAGO,SAASoC,GAAyB5D,EAA8B,CACrE,OAAOoB,EAAUpB,CAAI,EAAE,OAAQ2B,GAAMA,EAAE,SAAW,WAAa,CAACA,EAAE,iBAAiB,CACrF,CAEO,SAASkC,GAAkB7D,EAAcI,EAAYG,EAAc,KAAK,IAAI,EAAS,CAC1F,IAAMK,EAAOM,EAASlB,EAAMI,CAAE,EAC1B,CAACQ,GAAQA,EAAK,mBAClBD,EAASX,EAAM,CAAE,GAAGY,EAAM,kBAAmB,IAAI,KAAKL,CAAG,EAAE,YAAY,CAAE,CAAC,CAC5E,CAGO,SAASuD,GAAelD,EAA4B,CACzD,IAAMmD,EAASnD,EAAK,SAAW,UAC1BA,EAAK,UAAY,MAAQ,yBAA2B,wBACrD,8DAA8DA,EAAK,SAAWA,EAAK,aACjFoD,EAAQ,CACZ,yCAAyCpD,EAAK,WAAWA,EAAK,iBAC9D,aAAaA,EAAK,MAClBmD,CACF,EACA,OAAInD,EAAK,SAAW,WAAaA,EAAK,UAAY,OAAOoD,EAAM,KAAK,GAAGC,EAAYrD,CAAI,CAAC,EACpFA,EAAK,MAAMoD,EAAM,KAAK,kBAAkBpD,EAAK,MAAM,EACnDA,EAAK,QAAQoD,EAAM,KAAK,WAAWpD,EAAK,QAAQ,EAChDA,EAAK,QAAQoD,EAAM,KAAK,GAAGE,EAAYtD,EAAK,OAAQA,EAAK,SAAW,WAAaA,EAAK,UAAY,KAAK,CAAC,EACxGA,EAAK,OAAOoD,EAAM,KAAK,sBAAsBpD,EAAK,MAAM,gBAAgBA,EAAK,MAAM,mDAAmD,EAC1IoD,EAAM,KAAK,2DAA2D,EAC/DA,EAAM,KAAK;AAAA,CAAI,CACxB,CEzPO,SAASG,EAAKC,EAA0BC,EAAM,IAAmC,CACtF,GAAI,CAACD,EAAM,OAAOA,EAClB,IAAME,EAAOF,EAAK,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAC5C,OAAOE,EAAK,OAASD,EAAMC,EAAK,MAAM,EAAGD,EAAM,CAAC,EAAI,SAAMC,CAC5D,CAIO,SAASC,EAAcC,EAAiB,CAC7C,IAAMC,EAAU,IAAI,IACpB,QAAW,KAAKD,EAAE,UAAY,CAAC,EAAG,CAChC,IAAME,EAAOD,EAAQ,IAAI,EAAE,KAAK,GAC5B,CAACC,GAAQA,EAAK,UAAY,EAAE,YAAWD,EAAQ,IAAI,EAAE,MAAO,CAAC,EAEnE,IAAME,EAAQ,CAAE,QAAS,EAAG,OAAQ,CAAE,EACtC,QAAW,KAAKH,EAAE,UAAY,CAAC,EACzB,EAAE,SAAW,UAAWG,EAAM,UAC7BA,EAAM,SAEb,MAAO,CACL,GAAIH,EAAE,GACN,KAAMA,EAAE,KACR,IAAKA,EAAE,IACP,UAAWA,EAAE,UACb,MAAOL,EAAKK,EAAE,KAAK,EACnB,UAAWA,EAAE,UACb,SAAUA,EAAE,SACZ,QAASA,EAAE,SAAS,OAASA,EAAE,QAAQ,QAAU,OAASA,EAAE,QAAU,OACtE,OAAQA,EAAE,OAAO,IAAKI,IAAO,CAC3B,GAAIA,EAAE,GACN,KAAMA,EAAE,KACR,KAAMA,EAAE,KACR,OAAQA,EAAE,OACV,OAAQA,EAAE,OACV,WAAYA,EAAE,WACd,KAAMA,EAAE,YAAc,CAAE,KAAMT,EAAKS,EAAE,YAAY,IAAI,EAAG,GAAIA,EAAE,YAAY,GAAI,GAAIA,EAAE,YAAY,EAAG,EAAI,MACzG,EAAE,EACF,MAAO,CACL,MAAAD,EACA,OAAQH,EAAE,OAAS,CAAC,GAAG,IAAKK,GAAM,CAChC,IAAMC,EAAIL,EAAQ,IAAII,EAAE,EAAE,EAC1B,MAAO,CACL,GAAIA,EAAE,GACN,QAASA,EAAE,QACX,SAAUA,EAAE,SACZ,MAAOA,EAAE,MACT,QAASA,EAAE,QACX,kBAAmBA,EAAE,kBACrB,KAAMC,EAAI,CAAE,OAAQA,EAAE,OAAQ,GAAIA,EAAE,UAAW,KAAMX,EAAKW,EAAE,SAAW,UAAYA,EAAE,gBAAkBA,EAAE,YAAY,CAAE,EAAI,MAC7H,CACF,CAAC,CACH,CACF,CACF,CAGO,SAASC,EAAkBC,EAAuB,CACvD,IAAMC,EAAQ,CAAC,EACf,QAAW,KAAKD,EACd,QAAWJ,KAAK,EAAE,OAChB,QAAWM,KAAKN,EAAE,cAAgB,CAAC,EACjCK,EAAM,KAAK,CACT,KAAM,EAAE,IACR,SAAU,EAAE,KACZ,QAASL,EAAE,GACX,UAAWA,EAAE,KACb,OAAQM,EAAE,GACV,QAASf,EAAKe,EAAE,cAAc,EAC9B,QAASA,EAAE,QACX,UAAWA,EAAE,SACf,CAAC,EAIP,OAAOD,EAAM,KAAK,CAACE,EAAGC,IAAOD,EAAE,UAAYC,EAAE,UAAY,EAAI,EAAG,CAClE,CAEA,IAAMC,EAAc,yCAIpB,eAAsBC,GACpBC,EACAC,EACAC,EACAC,EACAC,EACAC,EACkB,CAClB,IAAMC,EAAM,IAAI,IAAIN,EAAI,KAAOE,EAAM,kBAAkB,EAEvD,GAAIC,IAAW,QAAUD,IAAS,kBAAoBA,IAAS,qBAAsB,CACnF,IAAMK,EAAWC,EAAcF,EAAI,aAAa,IAAI,UAAU,CAAC,EACzDG,EAAO,MAAMJ,EAAK,SAAS,CAAE,KAAMK,EAAOH,CAAQ,EAAG,SAAAA,CAAS,CAAC,EACrE,OAAIL,IAAS,oBAA4BS,EAAKV,EAAK,IAAK,CAAE,GAAIQ,EAAK,GAAI,MAAOjB,EAAkBiB,EAAK,KAAK,CAAE,CAAC,EACtGE,EAAKV,EAAK,IAAK,CAAE,GAAIQ,EAAK,GAAI,MAAOA,EAAK,MAAM,IAAIzB,CAAa,CAAE,CAAC,EAG7E,GAAImB,IAAW,OAASD,IAAS,qBAC/B,OAAOS,EAAKV,EAAK,IAAK,CAAE,MAAO,MAAMI,EAAK,UAAU,CAAE,CAAC,EAGzD,GAAIF,IAAW,OAAQ,MAAO,GAC9B,IAAMS,EAAaV,EAAK,MAAMJ,CAAW,EAIzC,GAAI,EAHUc,GAAc,CAC1B,yBAA0B,wBAAyB,wBAAyB,2BAC9E,EAAE,SAASV,CAAI,GACH,MAAO,GAEnB,IAAIW,EACJ,GAAI,CAAEA,EAAO,MAAMC,EAASd,CAAG,CAAE,OAASe,EAAP,CAAiB,OAAOJ,EAAKV,EAAK,IAAK,CAAE,MAAOc,EAAE,OAAQ,CAAC,CAAE,CAChG,IAAMC,EAAOC,EAAIJ,EAAK,IAAI,EAC1B,GAAI,CAACG,EAAM,OAAOL,EAAKV,EAAK,IAAK,CAAE,MAAO,kBAAmB,CAAC,EAC9D,IAAMiB,EAAK,oBAAoBd,KAE3Be,EACJ,GAAIP,EAAY,CACd,IAAMQ,EAASH,EAAIJ,EAAK,MAAM,EAC9B,GAAI,CAACO,EAAQ,OAAOT,EAAKV,EAAK,IAAK,CAAE,MAAO,oBAAqB,CAAC,EAClE,IAAMoB,EAAW,cAAc,mBAAmBD,CAAM,KAAKR,EAAW,CAAC,IACzE,GAAIA,EAAW,CAAC,IAAM,SACpBO,EAAQ,MAAMd,EAAK,SAASW,EAAMK,EAAU,CAAE,OAAQ,gBAAgBH,GAAK,CAAC,MACvE,CACL,IAAMI,EAAUL,EAAIJ,EAAK,OAAO,EAChC,GAAI,CAACS,EAAS,OAAOX,EAAKV,EAAK,IAAK,CAAE,MAAO,qBAAsB,CAAC,EACpEkB,EAAQ,MAAMd,EAAK,SAASW,EAAMK,EAAU,CAAE,QAAAC,EAAS,OAAQJ,CAAG,CAAC,WAE5DhB,IAAS,yBAClBiB,EAAQ,MAAMd,EAAK,SAASW,EAAMH,EAAK,SAAW,GAAO,yBAA2B,kBAAmB,CAAC,CAAC,UAChGX,IAAS,wBAClBiB,EAAQ,MAAMd,EAAK,SAASW,EAAM,UAAW,CAAC,CAAC,UACtCd,IAAS,wBAAyB,CAC3C,IAAMqB,EAASN,EAAIJ,EAAK,MAAM,EAC9B,GAAI,CAACU,GAAU,OAAOV,EAAK,SAAY,UAAW,OAAOF,EAAKV,EAAK,IAAK,CAAE,MAAO,iDAAkD,CAAC,EACpIkB,EAAQ,MAAMd,EAAK,SAASW,EAAM,UAAU,mBAAmBO,CAAM,YAAa,CAAE,QAASV,EAAK,OAAQ,CAAC,MACtG,CACL,IAAMW,EAAMP,EAAIJ,EAAK,GAAG,EAClBY,EAASZ,EAAK,OACpB,GAAI,CAACW,GAAQC,IAAW,OAASA,IAAW,MAAQA,IAAW,QAC7D,OAAOd,EAAKV,EAAK,IAAK,CAAE,MAAO,gDAAiD,CAAC,EAEnFkB,EAAQ,MAAMd,EAAK,OAAOW,EAAMQ,EAAKC,EAAQP,CAAE,EAEjD,OAAOP,EAAKV,EAAKkB,EAAM,OAAQA,EAAM,IAAI,CAC3C,CAEA,SAASF,EAAIS,EAAoB,CAC/B,OAAO,OAAOA,GAAM,SAAWA,EAAE,KAAK,EAAI,EAC5C,CAEA,SAASlB,EAAcmB,EAA2B,CAChD,GAAI,CAACA,EAAI,MAAO,MAChB,GAAI,CAAE,WAAI,KAAK,eAAe,QAAS,CAAE,SAAUA,CAAG,CAAC,EAAUA,CAAG,MAAE,CAAQ,MAAO,KAAM,CAC7F,CAGO,SAASjB,EAAOH,EAAkBqB,EAAM,IAAI,KAAgB,CACjE,OAAO,IAAI,KAAK,eAAe,QAAS,CAAE,SAAUrB,EAAU,KAAM,UAAW,MAAO,UAAW,IAAK,SAAU,CAAC,EAAE,OAAOqB,CAAG,CAC/H,CAEA,eAAsBd,EAASd,EAAsB6B,EAAQ,GAAK,KAAwC,CACxG,IAAIC,EAAO,EACLC,EAAmB,CAAC,EAC1B,cAAiBC,KAAShC,EAAK,CAE7B,GADA8B,GAASE,EAAiB,OACtBF,EAAOD,EAAO,MAAM,IAAI,MAAM,gBAAgB,EAClDE,EAAO,KAAKC,CAAe,EAE7B,IAAMC,EAAM,OAAO,OAAOF,CAAM,EAAE,SAAS,OAAO,EAAE,KAAK,EACzD,GAAI,CAACE,EAAK,MAAO,CAAC,EAClB,IAAMC,EAAS,KAAK,MAAMD,CAAG,EAC7B,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAY,MAAM,QAAQA,CAAM,EAAG,MAAM,IAAI,MAAM,wBAAwB,EAC5G,OAAOA,CACT,CAEA,SAASvB,EAAKV,EAAqBkC,EAAgBtB,EAAqB,CACtE,OAAAZ,EAAI,UAAUkC,EAAQ,CAAE,eAAgB,mBAAoB,gBAAiB,UAAW,CAAC,EACzFlC,EAAI,IAAI,KAAK,UAAUY,CAAI,CAAC,EACrB,EACT,CClOO,IAAMuB,EAAwC,CACnD,UAAW,EACX,OAAQ,GACR,SAAU,GAAK,GAAK,IACpB,UAAW,EAAI,GAAK,GACtB,EAMaC,EAAN,KAAyB,CAI9B,YAAoBC,EAAyBF,EAA6BG,EAAoB,KAAK,IAAK,CAApF,UAAAD,EAAsD,SAAAC,CAA+B,CAHjG,QAAU,IAAI,IACd,IAAc,CAAE,SAAU,CAAC,EAAG,YAAa,CAAE,EAKrD,WAAWC,EAAwB,CACjC,IAAMD,EAAM,KAAK,IAAI,EACfE,EAAQ,KAAK,IAAI,KAAK,IAAI,YAAa,KAAK,QAAQ,IAAID,CAAM,GAAG,aAAe,CAAC,EACvF,OAAOC,EAAQF,EAAM,KAAK,MAAME,EAAQF,GAAO,GAAI,EAAI,CACzD,CAEA,KAAKC,EAAsB,CACzB,IAAIE,EAAS,KAAK,QAAQ,IAAIF,CAAM,EAC/BE,GAAQ,KAAK,QAAQ,IAAIF,EAASE,EAAS,CAAE,SAAU,CAAC,EAAG,YAAa,CAAE,CAAE,EACjF,KAAK,KAAKA,EAAQ,KAAK,KAAK,SAAS,EACrC,KAAK,KAAK,KAAK,IAAK,KAAK,KAAK,MAAM,CACtC,CAEA,QAAQF,EAAsB,CAC5B,KAAK,QAAQ,OAAOA,CAAM,CAC5B,CAEQ,KAAKE,EAAgBC,EAAqB,CAChD,IAAMJ,EAAM,KAAK,IAAI,EACrBG,EAAO,SAAWA,EAAO,SAAS,OAAQE,GAAML,EAAMK,EAAI,KAAK,KAAK,QAAQ,EAC5EF,EAAO,SAAS,KAAKH,CAAG,EACpBG,EAAO,SAAS,QAAUC,IAAOD,EAAO,YAAcH,EAAM,KAAK,KAAK,UAC5E,CACF,EAgBaM,EAAmB,yEAC1BC,EAAS,IAEf,eAAsBC,GAAeC,EAAsBC,EAA6C,CACtG,IAAMC,EAAU,KAAK,IAAI,EACnBC,EAAMF,EAAK,MAASG,GAAiB,QAAQ,IAAIA,CAAI,GACrDZ,EAASQ,EAAI,OAAO,eAAiB,UAErCK,EAAOJ,EAAK,QAAQ,WAAWT,CAAM,EAC3C,GAAIa,EAAO,EACT,OAAAF,EAAI,gCAAgCX,qBAA0Ba,SAAY,EACnE,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,oBAAqB,WAAYA,CAAK,EAAG,WAAYA,CAAK,EAGjG,IAAIC,EAAgB,KACpB,GAAI,CAAEA,GAAQ,MAAMC,EAASP,EAAK,IAAI,GAAG,IAAK,MAAE,CAAqC,CACrF,IAAMQ,EAAWP,EAAK,MAAM,OAAOK,CAAI,EACjCG,EAASD,EAAWP,EAAK,OAAOO,EAAS,KAAK,EAAI,KAGxD,OAFA,MAAME,GAAMR,EAASD,EAAK,OAASH,CAAM,EAErC,CAACU,GAAY,CAACC,GAChBR,EAAK,QAAQ,KAAKT,CAAM,EACxBW,EAAI,+BAA+BX,GAAQ,EACpC,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAOK,CAAiB,CAAE,IAE1DI,EAAK,QAAQ,QAAQT,CAAM,EAC3BW,EAAI,0BAA0BK,EAAS,YAAYC,WAAgBjB,GAAQ,EACpE,CAAE,OAAQ,IAAK,KAAM,CAAE,OAAAiB,CAAO,EAAG,MAAOD,EAAS,KAAM,EAChE,CAEA,eAAeE,GAAMR,EAAiBS,EAA8B,CAClE,IAAMC,EAAOV,EAAUS,EAAQ,KAAK,IAAI,EACpCC,EAAO,GAAG,MAAM,IAAI,QAAS,GAAM,WAAW,EAAGA,CAAI,CAAC,CAC5D","names":["existsSync","mkdirSync","readdirSync","readFileSync","renameSync","writeFileSync","resolve","originLines","origin","approved","where","lines","IF_SILENT_VALUES","CARD_LIMITS","DEFAULT_CARD_SETTINGS","approvalsDir","root","resolve","CARD_ID_RE","isValidCardId","id","fileFor","newCardId","now","title","day","slug","saveCard","card","mkdirSync","path","tmp","writeFileSync","renameSync","readCard","readFileSync","listCards","status","dir","existsSync","out","f","readdirSync","c","oneLine","v","resolveExpiry","input","settings","max","at","raw","rel","buildCard","opts","ask","recommend","raisedBy","ifSilent","expiry","source","extras","buildChoices","reply","r","createCard","built","open","decideCard","verdict","answer","resolveAnswer","note","decided","expireCards","expired","cardsAwaitingAgentNotice","markAgentNotified","verdictMessage","result","lines","answerLines","originLines","clip","text","max","flat","summarizeNode","n","lastRun","prev","today","a","c","r","summarizeActivity","nodes","tasks","t","x","y","TASK_ACTION","handleAppFleet","req","res","path","method","device","deps","url","timezone","validTimezone","snap","dateIn","json","taskAction","body","readJson","e","node","str","by","reply","taskId","upstream","message","cronId","key","action","v","tz","now","limit","size","chunks","chunk","raw","parsed","status","DEFAULT_PAIR_LIMITS","PairAttemptLimiter","opts","now","client","until","bucket","limit","t","PAIR_CODE_FAILED","MIN_MS","redeemPairCode","req","deps","started","log","line","wait","code","readJson","redeemed","device","padTo","minMs","left"]}

package/dist/chunk-ZNLBF4ED.js

@@ -0,0 +1,5 @@
+import{_ as m,ba as b}from"./chunk-JDXNHBGR.js";b();function w(t){let e=typeof t.node=="string"?t.node:"",n=typeof t.token=="string"?t.token:"";if(!e||!n)try{let o=m(t.config);e||(e=o.dashboard?.daemonUrl||""),n||(n=o.dashboard?.token||"")}catch{}return e||(e="http://localhost:18800"),{baseUrl:e.replace(/\/+$/,""),token:n}}async function d(t,e,n){let o={Accept:"application/json"};t.token&&(o.Authorization=`Bearer ${t.token}`);let r=await fetch(`${t.baseUrl}${e}`,{headers:o,signal:n});if(!r.ok)throw new Error(`GET ${e} \u2192 HTTP ${r.status}`);return await r.json()}function R(t,e){return d(t,"/agents",e)}async function S(t,e){return(await d(t,"/api/processes",e)).processes??[]}function P(t,e){return d(t,"/crons",e)}async function h(t,e,n,o){let r={Accept:"application/json","Content-Type":"application/json"};t.token&&(r.Authorization=`Bearer ${t.token}`);let s=await fetch(`${t.baseUrl}${e}`,{method:"POST",headers:r,body:JSON.stringify(n),signal:o}),a=await s.text(),i;try{i=a?JSON.parse(a):{}}catch{i={raw:a}}if(!s.ok)throw new Error(i?.error||`POST ${e} \u2192 HTTP ${s.status}`);return i}function A(t,e,n="tui"){return h(t,"/api/processes/kill",{...e,reason:n})}function C(t,e,n,o){return h(t,"/task",{agent:e,message:n,context:o??{channel:"tui",chatId:"tui:operator"}})}async function $(t,e,n,o={}){let r={Accept:"text/event-stream","Content-Type":"application/json"};t.token&&(r.Authorization=`Bearer ${t.token}`);let s=await fetch(`${t.baseUrl}/task`,{method:"POST",headers:r,body:JSON.stringify({agent:e,message:n,stream:!0,context:{channel:o.channel??"chat-cli",chatId:o.chatId??"chat-cli:operator"}}),signal:o.signal});if(!s.ok||!s.body){let g=await s.text().catch(()=>"");throw new Error(`POST /task (stream) \u2192 HTTP ${s.status}${g?`: ${g.slice(0,200)}`:""}`)}let a=s.body.getReader(),i=new TextDecoder,u={content:""},c="";try{for(;;){let{done:g,value:p}=await a.read();if(g)break;c+=i.decode(p,{stream:!0});let l;for(;(l=c.indexOf(`
+
+`))>=0;){let k=c.slice(0,l);c=c.slice(l+2);let f=x(k);f&&T(f,o,u)}}}finally{try{a.releaseLock()}catch{}}return u}function T(t,e,n){let{event:o,data:r}=t;switch(o){case"text":r?.text&&(n.content+=r.text,e.onText?.(r.text));break;case"thinking":r?.text&&e.onThinking?.(r.text);break;case"tool":e.onTool?.(r);break;case"done":typeof r?.content=="string"&&(n.content=r.content),n.usage=r?.usage,n.duration=r?.duration;break;case"error":n.error=r?.error,n.errorKind=r?.errorKind;break}}function x(t){let e="message",n="";for(let r of t.split(`
+`))r.startsWith("event: ")?e=r.slice(7).trim():r.startsWith("data: ")&&(n=r.slice(6));if(!n)return null;let o;try{o=JSON.parse(n)}catch{o=n}return{event:e,data:o}}export{w as a,R as b,S as c,P as d,A as e,C as f,$ as g};
+//# sourceMappingURL=chunk-ZNLBF4ED.js.map

package/dist/{chunk-JG3O5GL6.js.map → chunk-ZNLBF4ED.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/tui/client.ts"],"sourcesContent":["import { loadDaemonConfig } from \"@/daemon/config\"\n\n// Resolved connection details for the daemon, derived from --node/--token\n// CLI flags first, then daemon config's `dashboard` block, then localhost.\nexport interface DaemonConn {\n  baseUrl: string\n  token: string\n}\n\nexport function resolveConn(opts: { node?: string; token?: string; config?: string }): DaemonConn {\n  let baseUrl = typeof opts.node === \"string\" ? opts.node : \"\"\n  let token = typeof opts.token === \"string\" ? opts.token : \"\"\n  if (!baseUrl || !token) {\n    try {\n      const cfg = loadDaemonConfig(opts.config)\n      if (!baseUrl) baseUrl = cfg.dashboard?.daemonUrl || \"\"\n      if (!token) token = cfg.dashboard?.token || \"\"\n    } catch {\n      // No config — fall back to localhost.\n    }\n  }\n  if (!baseUrl) baseUrl = \"http://localhost:18800\"\n  return { baseUrl: baseUrl.replace(/\\/+$/, \"\"), token }\n}\n\nasync function get<T>(conn: DaemonConn, path: string, signal?: AbortSignal): Promise<T> {\n  const headers: Record<string, string> = { Accept: \"application/json\" }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n  const res = await fetch(`${conn.baseUrl}${path}`, { headers, signal })\n  if (!res.ok) throw new Error(`GET ${path} → HTTP ${res.status}`)\n  return (await res.json()) as T\n}\n\nexport interface AgentRow {\n  id: string\n  name: string\n  tier: string\n  model?: string\n  workspace: string\n  active: number\n  total: number\n  errors: number\n  lastActive?: string\n}\n\nexport interface ProcessRow {\n  key: { agentId: string; channel: string; chatId: string }\n  pid: number | null\n  state: string\n  spawnedAt: number\n  lastTurnAt: number\n  turnCount: number\n}\n\nexport interface CronRow {\n  id: string\n  enabled: boolean\n  schedule: string\n  agent: string\n  nextRun?: string\n  lastError?: string\n  consecutiveErrors: number\n}\n\nexport function fetchAgents(conn: DaemonConn, signal?: AbortSignal): Promise<AgentRow[]> {\n  return get<AgentRow[]>(conn, \"/agents\", signal)\n}\n\nexport async function fetchProcesses(conn: DaemonConn, signal?: AbortSignal): Promise<ProcessRow[]> {\n  const r = await get<{ processes: ProcessRow[] }>(conn, \"/api/processes\", signal)\n  return r.processes ?? []\n}\n\nexport function fetchCrons(conn: DaemonConn, signal?: AbortSignal): Promise<CronRow[]> {\n  return get<CronRow[]>(conn, \"/crons\", signal)\n}\n\nasync function post<T>(conn: DaemonConn, path: string, body: any, signal?: AbortSignal): Promise<T> {\n  const headers: Record<string, string> = {\n    Accept: \"application/json\",\n    \"Content-Type\": \"application/json\",\n  }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n  const res = await fetch(`${conn.baseUrl}${path}`, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n    signal,\n  })\n  const text = await res.text()\n  let parsed: any\n  try { parsed = text ? JSON.parse(text) : {} } catch { parsed = { raw: text } }\n  if (!res.ok) throw new Error(parsed?.error || `POST ${path} → HTTP ${res.status}`)\n  return parsed as T\n}\n\nexport function killProcess(\n  conn: DaemonConn,\n  key: { agentId: string; channel: string; chatId: string },\n  reason = \"tui\",\n): Promise<{ killed: { agentId: string; channel: string; chatId: string } }> {\n  return post(conn, \"/api/processes/kill\", { ...key, reason })\n}\n\nexport interface TaskResponse {\n  content?: string\n  error?: string\n  [k: string]: any\n}\n\nexport function sendTask(\n  conn: DaemonConn,\n  agentId: string,\n  message: string,\n  context?: { channel?: string; chatId?: string },\n): Promise<TaskResponse> {\n  return post<TaskResponse>(conn, \"/task\", {\n    agent: agentId,\n    message,\n    context: context ?? { channel: \"tui\", chatId: \"tui:operator\" },\n  })\n}\n\n/** Live task events surfaced to a streaming client. Mirrors the daemon's\n *  `POST /task` SSE wire (src/daemon/index.ts): `text` deltas, `thinking`\n *  deltas, and `tool` badges (start/result). */\nexport interface StreamTaskHandlers {\n  onText?: (text: string) => void\n  onThinking?: (text: string) => void\n  onTool?: (t: { status: \"start\" | \"result\"; id?: string; name?: string; error?: boolean; arg?: string }) => void\n}\n\nexport interface StreamTaskResult {\n  content: string\n  usage?: Record<string, number>\n  duration?: number\n  error?: string\n  errorKind?: string\n}\n\n/**\n * Stream a task turn over SSE. POSTs `/task` with `Accept: text/event-stream`,\n * parses `event:/data:` frames, and invokes the handlers as tokens and tool\n * events arrive. Resolves with the final `done` payload (or an `error`).\n * Reuses the same (channel, chatId) warm-process semantics as sendTask.\n */\nexport async function streamTask(\n  conn: DaemonConn,\n  agentId: string,\n  message: string,\n  opts: { channel?: string; chatId?: string; signal?: AbortSignal } & StreamTaskHandlers = {},\n): Promise<StreamTaskResult> {\n  const headers: Record<string, string> = {\n    Accept: \"text/event-stream\",\n    \"Content-Type\": \"application/json\",\n  }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n\n  const res = await fetch(`${conn.baseUrl}/task`, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify({\n      agent: agentId,\n      message,\n      stream: true,\n      context: { channel: opts.channel ?? \"chat-cli\", chatId: opts.chatId ?? \"chat-cli:operator\" },\n    }),\n    signal: opts.signal,\n  })\n  if (!res.ok || !res.body) {\n    const body = await res.text().catch(() => \"\")\n    throw new Error(`POST /task (stream) → HTTP ${res.status}${body ? `: ${body.slice(0, 200)}` : \"\"}`)\n  }\n\n  const reader = res.body.getReader()\n  const dec = new TextDecoder()\n  const result: StreamTaskResult = { content: \"\" }\n  let buf = \"\"\n  try {\n    while (true) {\n      const { done, value } = await reader.read()\n      if (done) break\n      buf += dec.decode(value, { stream: true })\n      let idx: number\n      while ((idx = buf.indexOf(\"\\n\\n\")) >= 0) {\n        const frame = buf.slice(0, idx)\n        buf = buf.slice(idx + 2)\n        const parsed = parseSseFrame(frame)\n        if (!parsed) continue\n        applyFrame(parsed, opts, result)\n      }\n    }\n  } finally {\n    try { reader.releaseLock() } catch { /* noop */ }\n  }\n  return result\n}\n\nfunction applyFrame(\n  frame: { event: string; data: any },\n  handlers: StreamTaskHandlers,\n  result: StreamTaskResult,\n): void {\n  const { event, data } = frame\n  switch (event) {\n    case \"text\":\n      if (data?.text) { result.content += data.text; handlers.onText?.(data.text) }\n      break\n    case \"thinking\":\n      if (data?.text) handlers.onThinking?.(data.text)\n      break\n    case \"tool\":\n      handlers.onTool?.(data)\n      break\n    case \"done\":\n      if (typeof data?.content === \"string\") result.content = data.content\n      result.usage = data?.usage\n      result.duration = data?.duration\n      break\n    case \"error\":\n      result.error = data?.error\n      result.errorKind = data?.errorKind\n      break\n  }\n}\n\n/** Parse one `event:/data:` SSE frame. Ignores comment/heartbeat lines. */\nfunction parseSseFrame(frame: string): { event: string; data: any } | null {\n  let event = \"message\"\n  let data = \"\"\n  for (const line of frame.split(\"\\n\")) {\n    if (line.startsWith(\"event: \")) event = line.slice(7).trim()\n    else if (line.startsWith(\"data: \")) data = line.slice(6)\n  }\n  if (!data) return null\n  let payload: any\n  try { payload = JSON.parse(data) } catch { payload = data }\n  return { event, data: payload }\n}\n"],"mappings":"iDAAAA,IASO,SAASC,EAAYC,EAAsE,CAChG,IAAIC,EAAU,OAAOD,EAAK,MAAS,SAAWA,EAAK,KAAO,GACtDE,EAAQ,OAAOF,EAAK,OAAU,SAAWA,EAAK,MAAQ,GAC1D,GAAI,CAACC,GAAW,CAACC,EACf,GAAI,CACF,IAAMC,EAAMC,EAAiBJ,EAAK,MAAM,EACnCC,IAASA,EAAUE,EAAI,WAAW,WAAa,IAC/CD,IAAOA,EAAQC,EAAI,WAAW,OAAS,GAC9C,MAAE,CAEF,CAEF,OAAKF,IAASA,EAAU,0BACjB,CAAE,QAASA,EAAQ,QAAQ,OAAQ,EAAE,EAAG,MAAAC,CAAM,CACvD,CAEA,eAAeG,EAAOC,EAAkBC,EAAcC,EAAkC,CACtF,IAAMC,EAAkC,CAAE,OAAQ,kBAAmB,EACjEH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAC1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,UAAUC,IAAQ,CAAE,QAAAE,EAAS,OAAAD,CAAO,CAAC,EACrE,GAAI,CAACE,EAAI,GAAI,MAAM,IAAI,MAAM,OAAOH,iBAAeG,EAAI,QAAQ,EAC/D,OAAQ,MAAMA,EAAI,KAAK,CACzB,CAiCO,SAASC,EAAYL,EAAkBE,EAA2C,CACvF,OAAOH,EAAgBC,EAAM,UAAWE,CAAM,CAChD,CAEA,eAAsBI,EAAeN,EAAkBE,EAA6C,CAElG,OADU,MAAMH,EAAiCC,EAAM,iBAAkBE,CAAM,GACtE,WAAa,CAAC,CACzB,CAEO,SAASK,EAAWP,EAAkBE,EAA0C,CACrF,OAAOH,EAAeC,EAAM,SAAUE,CAAM,CAC9C,CAEA,eAAeM,EAAQR,EAAkBC,EAAcQ,EAAWP,EAAkC,CAClG,IAAMC,EAAkC,CACtC,OAAQ,mBACR,eAAgB,kBAClB,EACIH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAC1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,UAAUC,IAAQ,CAChD,OAAQ,OACR,QAAAE,EACA,KAAM,KAAK,UAAUM,CAAI,EACzB,OAAAP,CACF,CAAC,EACKQ,EAAO,MAAMN,EAAI,KAAK,EACxBO,EACJ,GAAI,CAAEA,EAASD,EAAO,KAAK,MAAMA,CAAI,EAAI,CAAC,CAAE,MAAE,CAAQC,EAAS,CAAE,IAAKD,CAAK,CAAE,CAC7E,GAAI,CAACN,EAAI,GAAI,MAAM,IAAI,MAAMO,GAAQ,OAAS,QAAQV,iBAAeG,EAAI,QAAQ,EACjF,OAAOO,CACT,CAEO,SAASC,EACdZ,EACAa,EACAC,EAAS,MACkE,CAC3E,OAAON,EAAKR,EAAM,sBAAuB,CAAE,GAAGa,EAAK,OAAAC,CAAO,CAAC,CAC7D,CAQO,SAASC,EACdf,EACAgB,EACAC,EACAC,EACuB,CACvB,OAAOV,EAAmBR,EAAM,QAAS,CACvC,MAAOgB,EACP,QAAAC,EACA,QAASC,GAAW,CAAE,QAAS,MAAO,OAAQ,cAAe,CAC/D,CAAC,CACH,CAyBA,eAAsBC,EACpBnB,EACAgB,EACAC,EACAvB,EAAyF,CAAC,EAC/D,CAC3B,IAAMS,EAAkC,CACtC,OAAQ,oBACR,eAAgB,kBAClB,EACIH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAE1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,eAAgB,CAC9C,OAAQ,OACR,QAAAG,EACA,KAAM,KAAK,UAAU,CACnB,MAAOa,EACP,QAAAC,EACA,OAAQ,GACR,QAAS,CAAE,QAASvB,EAAK,SAAW,WAAY,OAAQA,EAAK,QAAU,mBAAoB,CAC7F,CAAC,EACD,OAAQA,EAAK,MACf,CAAC,EACD,GAAI,CAACU,EAAI,IAAM,CAACA,EAAI,KAAM,CACxB,IAAMK,EAAO,MAAML,EAAI,KAAK,EAAE,MAAM,IAAM,EAAE,EAC5C,MAAM,IAAI,MAAM,mCAA8BA,EAAI,SAASK,EAAO,KAAKA,EAAK,MAAM,EAAG,GAAG,IAAM,IAAI,EAGpG,IAAMW,EAAShB,EAAI,KAAK,UAAU,EAC5BiB,EAAM,IAAI,YACVC,EAA2B,CAAE,QAAS,EAAG,EAC3CC,EAAM,GACV,GAAI,CACF,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAC,CAAM,EAAI,MAAML,EAAO,KAAK,EAC1C,GAAII,EAAM,MACVD,GAAOF,EAAI,OAAOI,EAAO,CAAE,OAAQ,EAAK,CAAC,EACzC,IAAIC,EACJ,MAAQA,EAAMH,EAAI,QAAQ;AAAA;AAAA,CAAM,IAAM,GAAG,CACvC,IAAMI,EAAQJ,EAAI,MAAM,EAAGG,CAAG,EAC9BH,EAAMA,EAAI,MAAMG,EAAM,CAAC,EACvB,IAAMf,EAASiB,EAAcD,CAAK,EAC7BhB,GACLkB,EAAWlB,EAAQjB,EAAM4B,CAAM,GAGrC,QAAE,CACA,GAAI,CAAEF,EAAO,YAAY,CAAE,MAAE,CAAmB,CAClD,CACA,OAAOE,CACT,CAEA,SAASO,EACPF,EACAG,EACAR,EACM,CACN,GAAM,CAAE,MAAAS,EAAO,KAAAC,CAAK,EAAIL,EACxB,OAAQI,EAAO,CACb,IAAK,OACCC,GAAM,OAAQV,EAAO,SAAWU,EAAK,KAAMF,EAAS,SAASE,EAAK,IAAI,GAC1E,MACF,IAAK,WACCA,GAAM,MAAMF,EAAS,aAAaE,EAAK,IAAI,EAC/C,MACF,IAAK,OACHF,EAAS,SAASE,CAAI,EACtB,MACF,IAAK,OACC,OAAOA,GAAM,SAAY,WAAUV,EAAO,QAAUU,EAAK,SAC7DV,EAAO,MAAQU,GAAM,MACrBV,EAAO,SAAWU,GAAM,SACxB,MACF,IAAK,QACHV,EAAO,MAAQU,GAAM,MACrBV,EAAO,UAAYU,GAAM,UACzB,KACJ,CACF,CAGA,SAASJ,EAAcD,EAAoD,CACzE,IAAII,EAAQ,UACRC,EAAO,GACX,QAAWC,KAAQN,EAAM,MAAM;AAAA,CAAI,EAC7BM,EAAK,WAAW,SAAS,EAAGF,EAAQE,EAAK,MAAM,CAAC,EAAE,KAAK,EAClDA,EAAK,WAAW,QAAQ,IAAGD,EAAOC,EAAK,MAAM,CAAC,GAEzD,GAAI,CAACD,EAAM,OAAO,KAClB,IAAIE,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAMF,CAAI,CAAE,MAAE,CAAQE,EAAUF,CAAK,CAC1D,MAAO,CAAE,MAAAD,EAAO,KAAMG,CAAQ,CAChC","names":["init_config","resolveConn","opts","baseUrl","token","cfg","loadDaemonConfig","get","conn","path","signal","headers","res","fetchAgents","fetchProcesses","fetchCrons","post","body","text","parsed","killProcess","key","reason","sendTask","agentId","message","context","streamTask","reader","dec","result","buf","done","value","idx","frame","parseSseFrame","applyFrame","handlers","event","data","line","payload"]}
+{"version":3,"sources":["../src/tui/client.ts"],"sourcesContent":["import { loadDaemonConfig } from \"@/daemon/config\"\n\n// Resolved connection details for the daemon, derived from --node/--token\n// CLI flags first, then daemon config's `dashboard` block, then localhost.\nexport interface DaemonConn {\n  baseUrl: string\n  token: string\n}\n\nexport function resolveConn(opts: { node?: string; token?: string; config?: string }): DaemonConn {\n  let baseUrl = typeof opts.node === \"string\" ? opts.node : \"\"\n  let token = typeof opts.token === \"string\" ? opts.token : \"\"\n  if (!baseUrl || !token) {\n    try {\n      const cfg = loadDaemonConfig(opts.config)\n      if (!baseUrl) baseUrl = cfg.dashboard?.daemonUrl || \"\"\n      if (!token) token = cfg.dashboard?.token || \"\"\n    } catch {\n      // No config — fall back to localhost.\n    }\n  }\n  if (!baseUrl) baseUrl = \"http://localhost:18800\"\n  return { baseUrl: baseUrl.replace(/\\/+$/, \"\"), token }\n}\n\nasync function get<T>(conn: DaemonConn, path: string, signal?: AbortSignal): Promise<T> {\n  const headers: Record<string, string> = { Accept: \"application/json\" }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n  const res = await fetch(`${conn.baseUrl}${path}`, { headers, signal })\n  if (!res.ok) throw new Error(`GET ${path} → HTTP ${res.status}`)\n  return (await res.json()) as T\n}\n\nexport interface AgentRow {\n  id: string\n  name: string\n  tier: string\n  model?: string\n  workspace: string\n  active: number\n  total: number\n  errors: number\n  lastActive?: string\n}\n\nexport interface ProcessRow {\n  key: { agentId: string; channel: string; chatId: string }\n  pid: number | null\n  state: string\n  spawnedAt: number\n  lastTurnAt: number\n  turnCount: number\n}\n\nexport interface CronRow {\n  id: string\n  enabled: boolean\n  schedule: string\n  agent: string\n  nextRun?: string\n  lastError?: string\n  consecutiveErrors: number\n}\n\nexport function fetchAgents(conn: DaemonConn, signal?: AbortSignal): Promise<AgentRow[]> {\n  return get<AgentRow[]>(conn, \"/agents\", signal)\n}\n\nexport async function fetchProcesses(conn: DaemonConn, signal?: AbortSignal): Promise<ProcessRow[]> {\n  const r = await get<{ processes: ProcessRow[] }>(conn, \"/api/processes\", signal)\n  return r.processes ?? []\n}\n\nexport function fetchCrons(conn: DaemonConn, signal?: AbortSignal): Promise<CronRow[]> {\n  return get<CronRow[]>(conn, \"/crons\", signal)\n}\n\nasync function post<T>(conn: DaemonConn, path: string, body: any, signal?: AbortSignal): Promise<T> {\n  const headers: Record<string, string> = {\n    Accept: \"application/json\",\n    \"Content-Type\": \"application/json\",\n  }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n  const res = await fetch(`${conn.baseUrl}${path}`, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify(body),\n    signal,\n  })\n  const text = await res.text()\n  let parsed: any\n  try { parsed = text ? JSON.parse(text) : {} } catch { parsed = { raw: text } }\n  if (!res.ok) throw new Error(parsed?.error || `POST ${path} → HTTP ${res.status}`)\n  return parsed as T\n}\n\nexport function killProcess(\n  conn: DaemonConn,\n  key: { agentId: string; channel: string; chatId: string },\n  reason = \"tui\",\n): Promise<{ killed: { agentId: string; channel: string; chatId: string } }> {\n  return post(conn, \"/api/processes/kill\", { ...key, reason })\n}\n\nexport interface TaskResponse {\n  content?: string\n  error?: string\n  [k: string]: any\n}\n\nexport function sendTask(\n  conn: DaemonConn,\n  agentId: string,\n  message: string,\n  context?: { channel?: string; chatId?: string },\n): Promise<TaskResponse> {\n  return post<TaskResponse>(conn, \"/task\", {\n    agent: agentId,\n    message,\n    context: context ?? { channel: \"tui\", chatId: \"tui:operator\" },\n  })\n}\n\n/** Live task events surfaced to a streaming client. Mirrors the daemon's\n *  `POST /task` SSE wire (src/daemon/index.ts): `text` deltas, `thinking`\n *  deltas, and `tool` badges (start/result). */\nexport interface StreamTaskHandlers {\n  onText?: (text: string) => void\n  onThinking?: (text: string) => void\n  onTool?: (t: { status: \"start\" | \"result\"; id?: string; name?: string; error?: boolean; arg?: string }) => void\n}\n\nexport interface StreamTaskResult {\n  content: string\n  usage?: Record<string, number>\n  duration?: number\n  error?: string\n  errorKind?: string\n}\n\n/**\n * Stream a task turn over SSE. POSTs `/task` with `Accept: text/event-stream`,\n * parses `event:/data:` frames, and invokes the handlers as tokens and tool\n * events arrive. Resolves with the final `done` payload (or an `error`).\n * Reuses the same (channel, chatId) warm-process semantics as sendTask.\n */\nexport async function streamTask(\n  conn: DaemonConn,\n  agentId: string,\n  message: string,\n  opts: { channel?: string; chatId?: string; signal?: AbortSignal } & StreamTaskHandlers = {},\n): Promise<StreamTaskResult> {\n  const headers: Record<string, string> = {\n    Accept: \"text/event-stream\",\n    \"Content-Type\": \"application/json\",\n  }\n  if (conn.token) headers[\"Authorization\"] = `Bearer ${conn.token}`\n\n  const res = await fetch(`${conn.baseUrl}/task`, {\n    method: \"POST\",\n    headers,\n    body: JSON.stringify({\n      agent: agentId,\n      message,\n      stream: true,\n      context: { channel: opts.channel ?? \"chat-cli\", chatId: opts.chatId ?? \"chat-cli:operator\" },\n    }),\n    signal: opts.signal,\n  })\n  if (!res.ok || !res.body) {\n    const body = await res.text().catch(() => \"\")\n    throw new Error(`POST /task (stream) → HTTP ${res.status}${body ? `: ${body.slice(0, 200)}` : \"\"}`)\n  }\n\n  const reader = res.body.getReader()\n  const dec = new TextDecoder()\n  const result: StreamTaskResult = { content: \"\" }\n  let buf = \"\"\n  try {\n    while (true) {\n      const { done, value } = await reader.read()\n      if (done) break\n      buf += dec.decode(value, { stream: true })\n      let idx: number\n      while ((idx = buf.indexOf(\"\\n\\n\")) >= 0) {\n        const frame = buf.slice(0, idx)\n        buf = buf.slice(idx + 2)\n        const parsed = parseSseFrame(frame)\n        if (!parsed) continue\n        applyFrame(parsed, opts, result)\n      }\n    }\n  } finally {\n    try { reader.releaseLock() } catch { /* noop */ }\n  }\n  return result\n}\n\nfunction applyFrame(\n  frame: { event: string; data: any },\n  handlers: StreamTaskHandlers,\n  result: StreamTaskResult,\n): void {\n  const { event, data } = frame\n  switch (event) {\n    case \"text\":\n      if (data?.text) { result.content += data.text; handlers.onText?.(data.text) }\n      break\n    case \"thinking\":\n      if (data?.text) handlers.onThinking?.(data.text)\n      break\n    case \"tool\":\n      handlers.onTool?.(data)\n      break\n    case \"done\":\n      if (typeof data?.content === \"string\") result.content = data.content\n      result.usage = data?.usage\n      result.duration = data?.duration\n      break\n    case \"error\":\n      result.error = data?.error\n      result.errorKind = data?.errorKind\n      break\n  }\n}\n\n/** Parse one `event:/data:` SSE frame. Ignores comment/heartbeat lines. */\nfunction parseSseFrame(frame: string): { event: string; data: any } | null {\n  let event = \"message\"\n  let data = \"\"\n  for (const line of frame.split(\"\\n\")) {\n    if (line.startsWith(\"event: \")) event = line.slice(7).trim()\n    else if (line.startsWith(\"data: \")) data = line.slice(6)\n  }\n  if (!data) return null\n  let payload: any\n  try { payload = JSON.parse(data) } catch { payload = data }\n  return { event, data: payload }\n}\n"],"mappings":"gDAAAA,IASO,SAASC,EAAYC,EAAsE,CAChG,IAAIC,EAAU,OAAOD,EAAK,MAAS,SAAWA,EAAK,KAAO,GACtDE,EAAQ,OAAOF,EAAK,OAAU,SAAWA,EAAK,MAAQ,GAC1D,GAAI,CAACC,GAAW,CAACC,EACf,GAAI,CACF,IAAMC,EAAMC,EAAiBJ,EAAK,MAAM,EACnCC,IAASA,EAAUE,EAAI,WAAW,WAAa,IAC/CD,IAAOA,EAAQC,EAAI,WAAW,OAAS,GAC9C,MAAE,CAEF,CAEF,OAAKF,IAASA,EAAU,0BACjB,CAAE,QAASA,EAAQ,QAAQ,OAAQ,EAAE,EAAG,MAAAC,CAAM,CACvD,CAEA,eAAeG,EAAOC,EAAkBC,EAAcC,EAAkC,CACtF,IAAMC,EAAkC,CAAE,OAAQ,kBAAmB,EACjEH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAC1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,UAAUC,IAAQ,CAAE,QAAAE,EAAS,OAAAD,CAAO,CAAC,EACrE,GAAI,CAACE,EAAI,GAAI,MAAM,IAAI,MAAM,OAAOH,iBAAeG,EAAI,QAAQ,EAC/D,OAAQ,MAAMA,EAAI,KAAK,CACzB,CAiCO,SAASC,EAAYL,EAAkBE,EAA2C,CACvF,OAAOH,EAAgBC,EAAM,UAAWE,CAAM,CAChD,CAEA,eAAsBI,EAAeN,EAAkBE,EAA6C,CAElG,OADU,MAAMH,EAAiCC,EAAM,iBAAkBE,CAAM,GACtE,WAAa,CAAC,CACzB,CAEO,SAASK,EAAWP,EAAkBE,EAA0C,CACrF,OAAOH,EAAeC,EAAM,SAAUE,CAAM,CAC9C,CAEA,eAAeM,EAAQR,EAAkBC,EAAcQ,EAAWP,EAAkC,CAClG,IAAMC,EAAkC,CACtC,OAAQ,mBACR,eAAgB,kBAClB,EACIH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAC1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,UAAUC,IAAQ,CAChD,OAAQ,OACR,QAAAE,EACA,KAAM,KAAK,UAAUM,CAAI,EACzB,OAAAP,CACF,CAAC,EACKQ,EAAO,MAAMN,EAAI,KAAK,EACxBO,EACJ,GAAI,CAAEA,EAASD,EAAO,KAAK,MAAMA,CAAI,EAAI,CAAC,CAAE,MAAE,CAAQC,EAAS,CAAE,IAAKD,CAAK,CAAE,CAC7E,GAAI,CAACN,EAAI,GAAI,MAAM,IAAI,MAAMO,GAAQ,OAAS,QAAQV,iBAAeG,EAAI,QAAQ,EACjF,OAAOO,CACT,CAEO,SAASC,EACdZ,EACAa,EACAC,EAAS,MACkE,CAC3E,OAAON,EAAKR,EAAM,sBAAuB,CAAE,GAAGa,EAAK,OAAAC,CAAO,CAAC,CAC7D,CAQO,SAASC,EACdf,EACAgB,EACAC,EACAC,EACuB,CACvB,OAAOV,EAAmBR,EAAM,QAAS,CACvC,MAAOgB,EACP,QAAAC,EACA,QAASC,GAAW,CAAE,QAAS,MAAO,OAAQ,cAAe,CAC/D,CAAC,CACH,CAyBA,eAAsBC,EACpBnB,EACAgB,EACAC,EACAvB,EAAyF,CAAC,EAC/D,CAC3B,IAAMS,EAAkC,CACtC,OAAQ,oBACR,eAAgB,kBAClB,EACIH,EAAK,QAAOG,EAAQ,cAAmB,UAAUH,EAAK,SAE1D,IAAMI,EAAM,MAAM,MAAM,GAAGJ,EAAK,eAAgB,CAC9C,OAAQ,OACR,QAAAG,EACA,KAAM,KAAK,UAAU,CACnB,MAAOa,EACP,QAAAC,EACA,OAAQ,GACR,QAAS,CAAE,QAASvB,EAAK,SAAW,WAAY,OAAQA,EAAK,QAAU,mBAAoB,CAC7F,CAAC,EACD,OAAQA,EAAK,MACf,CAAC,EACD,GAAI,CAACU,EAAI,IAAM,CAACA,EAAI,KAAM,CACxB,IAAMK,EAAO,MAAML,EAAI,KAAK,EAAE,MAAM,IAAM,EAAE,EAC5C,MAAM,IAAI,MAAM,mCAA8BA,EAAI,SAASK,EAAO,KAAKA,EAAK,MAAM,EAAG,GAAG,IAAM,IAAI,EAGpG,IAAMW,EAAShB,EAAI,KAAK,UAAU,EAC5BiB,EAAM,IAAI,YACVC,EAA2B,CAAE,QAAS,EAAG,EAC3CC,EAAM,GACV,GAAI,CACF,OAAa,CACX,GAAM,CAAE,KAAAC,EAAM,MAAAC,CAAM,EAAI,MAAML,EAAO,KAAK,EAC1C,GAAII,EAAM,MACVD,GAAOF,EAAI,OAAOI,EAAO,CAAE,OAAQ,EAAK,CAAC,EACzC,IAAIC,EACJ,MAAQA,EAAMH,EAAI,QAAQ;AAAA;AAAA,CAAM,IAAM,GAAG,CACvC,IAAMI,EAAQJ,EAAI,MAAM,EAAGG,CAAG,EAC9BH,EAAMA,EAAI,MAAMG,EAAM,CAAC,EACvB,IAAMf,EAASiB,EAAcD,CAAK,EAC7BhB,GACLkB,EAAWlB,EAAQjB,EAAM4B,CAAM,GAGrC,QAAE,CACA,GAAI,CAAEF,EAAO,YAAY,CAAE,MAAE,CAAmB,CAClD,CACA,OAAOE,CACT,CAEA,SAASO,EACPF,EACAG,EACAR,EACM,CACN,GAAM,CAAE,MAAAS,EAAO,KAAAC,CAAK,EAAIL,EACxB,OAAQI,EAAO,CACb,IAAK,OACCC,GAAM,OAAQV,EAAO,SAAWU,EAAK,KAAMF,EAAS,SAASE,EAAK,IAAI,GAC1E,MACF,IAAK,WACCA,GAAM,MAAMF,EAAS,aAAaE,EAAK,IAAI,EAC/C,MACF,IAAK,OACHF,EAAS,SAASE,CAAI,EACtB,MACF,IAAK,OACC,OAAOA,GAAM,SAAY,WAAUV,EAAO,QAAUU,EAAK,SAC7DV,EAAO,MAAQU,GAAM,MACrBV,EAAO,SAAWU,GAAM,SACxB,MACF,IAAK,QACHV,EAAO,MAAQU,GAAM,MACrBV,EAAO,UAAYU,GAAM,UACzB,KACJ,CACF,CAGA,SAASJ,EAAcD,EAAoD,CACzE,IAAII,EAAQ,UACRC,EAAO,GACX,QAAWC,KAAQN,EAAM,MAAM;AAAA,CAAI,EAC7BM,EAAK,WAAW,SAAS,EAAGF,EAAQE,EAAK,MAAM,CAAC,EAAE,KAAK,EAClDA,EAAK,WAAW,QAAQ,IAAGD,EAAOC,EAAK,MAAM,CAAC,GAEzD,GAAI,CAACD,EAAM,OAAO,KAClB,IAAIE,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAMF,CAAI,CAAE,MAAE,CAAQE,EAAUF,CAAK,CAC1D,MAAO,CAAE,MAAAD,EAAO,KAAMG,CAAQ,CAChC","names":["init_config","resolveConn","opts","baseUrl","token","cfg","loadDaemonConfig","get","conn","path","signal","headers","res","fetchAgents","fetchProcesses","fetchCrons","post","body","text","parsed","killProcess","key","reason","sendTask","agentId","message","context","streamTask","reader","dec","result","buf","done","value","idx","frame","parseSseFrame","applyFrame","handlers","event","data","line","payload"]}

package/dist/{chunk-ATXE3EMV.js → chunk-ZUINXZPI.js}

@@ -1,2 +1,2 @@
-import{a as o}from"./chunk-LUL4ILAQ.js";import{resolve as a}from"path";import{existsSync as d,readdirSync as c,mkdirSync as l}from"fs";var g=class{baseDir;agentsDir;mode;sharedStore;agentStores=new Map;log;constructor(t=a(process.cwd(),".agentx/wiki"),e=console.error.bind(console,"[wiki-hub]"),r="graph"){this.baseDir=t,this.agentsDir=a(t,"agents"),this.mode=r,this.log=e,l(this.agentsDir,{recursive:!0}),this.sharedStore=new o(t,e)}getMode(){return this.mode}getAgentWiki(t){let e=`${t}:${this.mode}`;if(this.agentStores.has(e))return this.agentStores.get(e);let r=a(this.agentsDir,t,this.mode),i=new o(r,this.log);return this.agentStores.set(e,i),i}getBaseDir(){return this.baseDir}getSharedStore(){return this.sharedStore}listAgents(){let t=new Set,e=this.sharedStore.listEntries();for(let r of e)t.add(r.agentId);if(d(this.agentsDir))for(let r of c(this.agentsDir))!r.startsWith("_")&&!r.startsWith(".")&&t.add(r);return[...t].sort()}getAgentEntries(t){return this.sharedStore.listEntries({agentId:t})}getUnabsorbedEntries(t){let e=this.getAgentWiki(t),r=this.getAgentEntries(t),i=new Set,n=e.rebuildIndex();for(let s of n.articles)if(s.sources)for(let h of s.sources)i.add(h);return r.filter(s=>!i.has(s.id))}summary(){return this.listAgents().map(e=>{let r=this.getAgentEntries(e),n=this.getAgentWiki(e).rebuildIndex(),s=this.getUnabsorbedEntries(e);return{agentId:e,totalEntries:r.length,totalArticles:n.articles.length,unabsorbed:s.length,articles:n.articles}})}};export{g as a};
-//# sourceMappingURL=chunk-ATXE3EMV.js.map
+import{a as o}from"./chunk-WGZPKQNI.js";import{resolve as a}from"path";import{existsSync as d,readdirSync as c,mkdirSync as l}from"fs";var g=class{baseDir;agentsDir;mode;sharedStore;agentStores=new Map;log;constructor(t=a(process.cwd(),".agentx/wiki"),e=console.error.bind(console,"[wiki-hub]"),r="graph"){this.baseDir=t,this.agentsDir=a(t,"agents"),this.mode=r,this.log=e,l(this.agentsDir,{recursive:!0}),this.sharedStore=new o(t,e)}getMode(){return this.mode}getAgentWiki(t){let e=`${t}:${this.mode}`;if(this.agentStores.has(e))return this.agentStores.get(e);let r=a(this.agentsDir,t,this.mode),i=new o(r,this.log);return this.agentStores.set(e,i),i}getBaseDir(){return this.baseDir}getSharedStore(){return this.sharedStore}listAgents(){let t=new Set,e=this.sharedStore.listEntries();for(let r of e)t.add(r.agentId);if(d(this.agentsDir))for(let r of c(this.agentsDir))!r.startsWith("_")&&!r.startsWith(".")&&t.add(r);return[...t].sort()}getAgentEntries(t){return this.sharedStore.listEntries({agentId:t})}getUnabsorbedEntries(t){let e=this.getAgentWiki(t),r=this.getAgentEntries(t),i=new Set,n=e.rebuildIndex();for(let s of n.articles)if(s.sources)for(let h of s.sources)i.add(h);return r.filter(s=>!i.has(s.id))}summary(){return this.listAgents().map(e=>{let r=this.getAgentEntries(e),n=this.getAgentWiki(e).rebuildIndex(),s=this.getUnabsorbedEntries(e);return{agentId:e,totalEntries:r.length,totalArticles:n.articles.length,unabsorbed:s.length,articles:n.articles}})}};export{g as a};
+//# sourceMappingURL=chunk-ZUINXZPI.js.map

package/dist/cli.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{b as o}from"./chunk-JXF54PT7.js";import"./chunk-QIJLFPWE.js";var s=o(process.versions.node);s&&(console.error(s),process.exit(1));var{buildProgram:r}=await import("./program-7UH4FCA3.js"),{installCliSignalExit:i}=await import("./signal-exit-WL7G3EEZ.js");i();var e=await r();process.argv.slice(2).length===0?e.outputHelp():e.parse();
+import{b as o}from"./chunk-JXF54PT7.js";import"./chunk-QIJLFPWE.js";var s=o(process.versions.node);s&&(console.error(s),process.exit(1));var{buildProgram:r}=await import("./program-Y5BSOGQQ.js"),{installCliSignalExit:i}=await import("./signal-exit-WL7G3EEZ.js");i();var e=await r();process.argv.slice(2).length===0?e.outputHelp():e.parse();
 //# sourceMappingURL=cli.js.map

package/dist/client-K5ZISLAI.js

@@ -0,0 +1,2 @@
+import{a,b,c,d,e,f,g}from"./chunk-ZNLBF4ED.js";import"./chunk-JDXNHBGR.js";import"./chunk-PN6XHTG5.js";import"./chunk-BRK6M6LA.js";import"./chunk-2QNT5JDS.js";import"./chunk-QIJLFPWE.js";export{b as fetchAgents,d as fetchCrons,c as fetchProcesses,e as killProcess,a as resolveConn,f as sendTask,g as streamTask};
+//# sourceMappingURL=client-K5ZISLAI.js.map

package/dist/config-ZBNH2DMN.js

@@ -0,0 +1,2 @@
+import{$ as n,O as a,P as b,Q as c,R as d,S as e,T as f,U as g,V as h,W as i,X as j,Y as k,Z as l,_ as m,ba as o}from"./chunk-JDXNHBGR.js";import"./chunk-PN6XHTG5.js";import"./chunk-BRK6M6LA.js";import"./chunk-2QNT5JDS.js";import"./chunk-QIJLFPWE.js";o();export{a as INTEGRATION_KINDS,j as approvalsConfigSchema,d as callsSchema,c as cameraBotSchema,k as daemonConfigSchema,b as eventSubscriptionSchema,l as expandEnvVars,m as loadDaemonConfig,h as membersConfigSchema,g as peopleConfigSchema,f as personSchema,i as requestStatusConfigSchema,e as requestsConfigSchema,n as validateWorkspaces};
+//# sourceMappingURL=config-ZBNH2DMN.js.map

package/dist/config-mutator-ENWFEDFU.js

@@ -0,0 +1,2 @@
+import{a,b,c,d,e}from"./chunk-WMIQHJB5.js";import"./chunk-JDXNHBGR.js";import"./chunk-PN6XHTG5.js";import"./chunk-BRK6M6LA.js";import"./chunk-2QNT5JDS.js";import"./chunk-QIJLFPWE.js";export{b as applyConfigMutation,a as findConfigPath,d as getAtPath,c as setAtPath,e as unsetAtPath};
+//# sourceMappingURL=config-mutator-ENWFEDFU.js.map

package/dist/doctor-Y3GPTM3C.js

@@ -0,0 +1,2 @@
+import{b as a,c as b,d as c,e as d,f as e}from"./chunk-AK5J3DQY.js";import"./chunk-S2GAEH2F.js";import"./chunk-JXF54PT7.js";import"./chunk-JDXNHBGR.js";import"./chunk-PN6XHTG5.js";import"./chunk-BRK6M6LA.js";import"./chunk-2QNT5JDS.js";import"./chunk-QIJLFPWE.js";export{e as daemonVoiceCheck,b as doctor,a as runDoctorChecks,c as runNotificationChecks,d as runReminderChecks};
+//# sourceMappingURL=doctor-Y3GPTM3C.js.map

package/dist/{facts-5T5GRUTG.js → facts-ROUMKS7I.js}

@@ -1,4 +1,4 @@
-import{a as g,b as y}from"./chunk-GTJIKXDB.js";import{c as F,h as G}from"./chunk-UCKKAWLZ.js";import"./chunk-QIJLFPWE.js";import{existsSync as E,readFileSync as P}from"fs";import{resolve as M}from"path";var I=[["216","Tunisia"],["966","Saudi Arabia"],["971","UAE"],["974","Qatar"],["965","Kuwait"],["973","Bahrain"],["968","Oman"],["962","Jordan"],["961","Lebanon"],["212","Morocco"],["213","Algeria"],["218","Libya"],["249","Sudan"],["20","Egypt"],["90","Turkey"],["33","France"],["49","Germany"],["39","Italy"],["34","Spain"],["44","United Kingdom"],["31","Netherlands"],["32","Belgium"],["41","Switzerland"],["1","US/Canada"]];function p(n){let t=n.replace(/\D/g,""),o,e=0;for(let[r,a]of I)t.startsWith(r)&&r.length>e&&(o=a,e=r.length);return o}function A(n){let t=[];for(let o of n.split(`
+import{a as g,b as y}from"./chunk-GTJIKXDB.js";import{c as F,h as G}from"./chunk-BRK6M6LA.js";import"./chunk-QIJLFPWE.js";import{existsSync as E,readFileSync as P}from"fs";import{resolve as M}from"path";var I=[["216","Tunisia"],["966","Saudi Arabia"],["971","UAE"],["974","Qatar"],["965","Kuwait"],["973","Bahrain"],["968","Oman"],["962","Jordan"],["961","Lebanon"],["212","Morocco"],["213","Algeria"],["218","Libya"],["249","Sudan"],["20","Egypt"],["90","Turkey"],["33","France"],["49","Germany"],["39","Italy"],["34","Spain"],["44","United Kingdom"],["31","Netherlands"],["32","Belgium"],["41","Switzerland"],["1","US/Canada"]];function p(n){let t=n.replace(/\D/g,""),o,e=0;for(let[r,a]of I)t.startsWith(r)&&r.length>e&&(o=a,e=r.length);return o}function A(n){let t=[];for(let o of n.split(`
 `)){let e=o.trim();if(!e||e.startsWith("ALIAS"))continue;let r=e.split(/\s{2,}/).filter(Boolean);if(r.length<2)continue;let a=r[r.length-1];if(!a.includes("@"))continue;let i=r[r.length-2],s=r.length>=3?r[r.length-3]:"";if(!s||!/\d/.test(i))continue;let l=p(i);t.push({name:s,source:"wacli",fields:{phone:`+${i.replace(/\D/g,"")}`,whatsapp:a,...l?{country:l}:{}}})}return t}function w(){return{name:"wacli",provides:["contact value","country"],async available(){if(!await y("wacli"))return{kind:"not-installed",hint:"brew install wacli  \u2014 see https://wacli.sh"};let{stdout:n,stderr:t,code:o}=await g("wacli",["contacts","search","__agentx_probe__"],{timeoutMs:1e4});return o!==0&&/auth|not logged in|no session|login/i.test(n+t)?{kind:"not-configured",hint:"wacli auth  \u2014 scan the QR to link the account"}:null},async lookup(n,t){let o=[],e=new Set;for(let r of n)for(let a of T(r.name)){let{stdout:i,code:s}=await g("wacli",["contacts","search",a],{signal:t,timeoutMs:15e3});if(s!==0)continue;let l=A(i).filter(u=>C(u.name,r.name));if(l.length!==0){for(let u of l){let c=u.fields.whatsapp;e.has(c)||(e.add(c),o.push({...u,fuzzy:!j(u.name,r.name)}))}break}}return o}}}var h=n=>n.toLowerCase().normalize("NFD").replace(/[̀-ͯ]/g,"").replace(/[^a-z0-9 ]/g,"").trim(),j=(n,t)=>h(n)===h(t);function T(n){let t=h(n).split(/\s+/).filter(o=>o.length>2);return t.length>1?[n,t[t.length-1]]:[n]}function C(n,t){let o=h(n).split(/\s+/).filter(Boolean),e=h(t).split(/\s+/).filter(Boolean);if(o.length===0||e.length===0)return!1;let[r,a]=o.length<=e.length?[o,e]:[e,o];return r.every(i=>a.includes(i))}var D={whatsapp:"whatsapp",telegram:"telegram",gitlab:"gitlab",github:"github",email:"email",phone:"phone",slack:"slack",discord:"discord"};function z(n=".agentx"){return M(process.cwd(),n,"contacts.json")}function S(n){if(!E(n))return[];try{let t=JSON.parse(P(n,"utf-8"));return Array.isArray(t?.contacts)?t.contacts:[]}catch{return[]}}var b=n=>n.toLowerCase().normalize("NFD").replace(/[̀-ͯ]/g,"").replace(/[^a-z0-9 ]/g,"").trim();function _(n){return[n.name,n.id,...n.aliases??[]].filter(t=>!!(t&&t.trim())).map(b)}function L(n){let t={};for(let[o,e]of Object.entries(n.channels??{})){let r=String(e??"").trim();if(!r)continue;let a=D[o.toLowerCase()]??o.toLowerCase();if(a==="whatsapp"){let i=r.split("@")[0].replace(/\D/g,"");if(t.whatsapp=r.includes("@")?r:`${i}@s.whatsapp.net`,i){t.phone??=`+${i}`;let s=p(i);s&&(t.country??=s)}continue}if(a==="phone"){let i=r.replace(/\D/g,"");t.phone=r.startsWith("+")?r:`+${i}`;let s=p(i);s&&(t.country??=s);continue}if(a==="telegram"&&/^\d+$/.test(r)){t.telegramId=r;continue}t[a]=a==="gitlab"||a==="github"?r.startsWith("@")?r:`@${r}`:r}return t}function k(n={}){let t=n.path??z();return{name:"contacts",provides:["contact value","handles","country"],async available(){return E(t)?S(t).length>0?null:{kind:"not-configured",hint:`${t} has no contacts`}:{kind:"not-configured",hint:`no ${t} \u2014 add {"contacts":[{"name":"\u2026","aliases":[],"channels":{"whatsapp":"\u2026"}}]}`}},async lookup(o){let e=S(t);if(e.length===0)return[];let r=new Map;for(let s of e)for(let l of _(s))l&&r.set(l,s);let a=[],i=new Set;for(let s of o){let l=r.get(b(s.name));if(!l||i.has(l))continue;i.add(l);let u=L(l);Object.keys(u).length!==0&&a.push({name:l.name??s.name,source:"contacts",fields:u,fuzzy:b(l.name??"")!==b(s.name)})}return a}}}function v(n={}){let t=(n.baseUrl??process.env.GITLAB_URL??"").replace(/\/+$/,""),o=n.token??process.env.GITLAB_ADMIN_TOKEN??process.env.GITLAB_TOKEN;return{name:"gitlab",provides:["email","handle","profile URL"],async available(){if(!t)return{kind:"not-configured",hint:"export GITLAB_URL=https://<your-gitlab-host>"};if(!o)return{kind:"not-configured",hint:"export GITLAB_ADMIN_TOKEN=<PAT>  (read_api scope is enough)"};try{let e=await fetch(`${t}/api/v4/user`,{headers:{"PRIVATE-TOKEN":o}});if(e.status===401||e.status===403)return{kind:"not-configured",hint:`GitLab rejected the token (${e.status}) \u2014 set a valid GITLAB_ADMIN_TOKEN`};if(!e.ok)return{kind:"failed",hint:`GitLab returned ${e.status} for the auth probe`}}catch(e){return{kind:"failed",hint:`cannot reach ${t}: ${String(e?.message??e)}`}}return null},async lookup(e,r){if(!o||!t)return[];let a=[],i=new Set;for(let s of e){let l=`${t}/api/v4/users?search=${encodeURIComponent(s.name)}&per_page=5`,u;try{let c=await fetch(l,{headers:{"PRIVATE-TOKEN":o},signal:r});if(!c.ok)continue;u=await c.json()}catch{continue}if(Array.isArray(u))for(let c of u){let d=c.username??c.web_url??"";if(!d||i.has(d))continue;i.add(d);let f={},m=c.email||c.public_email;m&&(f.email=m),c.username&&(f.gitlab=`@${c.username}`),c.web_url&&(f.profile=c.web_url),c.organization&&(f.organisation=c.organization),c.job_title&&(f.role=c.job_title),c.state&&c.state!=="active"&&(f.accountState=c.state),Object.keys(f).length!==0&&a.push({name:c.name??s.name,source:"gitlab",fields:f,fuzzy:(c.name??"").toLowerCase()!==s.name.toLowerCase()})}}return a}}}function x(){return{name:"gog",provides:["contact value","email","organisation","role","country"],async available(){if(!await y("gog"))return{kind:"not-installed",hint:"brew install gog  \u2014 Google CLI"};let{stdout:n,stderr:t}=await g("gog",["contacts","list","-j"],{timeoutMs:2e4}),o=n+t;return/unknown flag|Run with --help/i.test(o)?{kind:"failed",hint:`gog rejected the probe: ${o.split(`
 `)[0]}`}:/accessNotConfigured|has not been used in project/i.test(o)?{kind:"not-configured",hint:"enable the People API on the gog OAuth project, then retry (console.developers.google.com \u2192 APIs \u2192 People API)"}:/invalid_grant|PERMISSION_DENIED|unauthenticated/i.test(o)?{kind:"not-configured",hint:"gog auth login  \u2014 the stored token is expired or lacks contacts scope"}:null},async lookup(n,t){let o=[];for(let e of n){let{stdout:r,code:a}=await g("gog",["contacts","search",e.name,"-j","--results-only"],{signal:t,timeoutMs:2e4});if(a!==0)continue;let i;try{i=JSON.parse(r)}catch{continue}let s=Array.isArray(i)?i:i?.results??i?.people??[];for(let l of s){let u={},c=l.phoneNumbers?.[0]?.value,d=l.emailAddresses?.[0]?.value,f=l.organizations?.[0];c&&(u.phone=c),d&&(u.email=d),f?.name&&(u.organisation=f.name),f?.title&&(u.role=f.title);let m=l.addresses?.[0]?.country;m&&(u.country=m),Object.keys(u).length!==0&&o.push({name:l.names?.[0]?.displayName??e.name,source:"gog",fields:u})}}return o}}}G();var R=n=>typeof n=="string"&&n.trim()?n.trim():void 0;function $(n){return String(n??"").split("@")[0].split(":")[0].toLowerCase()}function U(n){let t=new Map;for(let o of n){let e=R(o.meta?.sender);if(!e||F(e))continue;let r=R(o.meta?.senderId),a=R(o.meta?.senderUsername),i=$(o.source),s={};if(r&&/@s\.whatsapp\.net$/.test(r)){let c=r.split("@")[0].replace(/\D/g,"");if(c){s.phone=`+${c}`,s.whatsapp=r;let d=p(c);d&&(s.country=d)}}else if(i==="whatsapp"&&r&&/^\d{6,}$/.test(r)){s.phone=`+${r}`,s.whatsapp=`${r}@s.whatsapp.net`;let c=p(r);c&&(s.country=c)}if(a){let c=a.startsWith("@")?a:`@${a}`;i==="gitlab"?s.gitlab=c:i==="github"?s.github=c:i==="telegram"?s.telegram=c:s.handle=c}if(r&&!s.phone&&!a&&(s[`${i||"platform"}Id`]=r),Object.keys(s).length===0)continue;let l=e.toLowerCase(),u=t.get(l);if(!u){t.set(l,{name:e,source:"entries",fields:s});continue}for(let[c,d]of Object.entries(s))u.fields[c]??=d}return Array.from(t.values())}function H(n){let t;return{...n,available:()=>t??=n.available(),lookup:(o,e)=>n.lookup(o,e)}}function N(){return[k(),w(),v(),x()].map(H)}function ct(n,t={}){let o=t.max??25,e=new Map;for(let a of n){let i=(a.sender??"").trim();i&&O(i)&&e.set(i.toLowerCase(),{name:i,origin:"sender",type:"person"})}for(let a of n){let i=(a.context??"").trim();if(!O(i))continue;let s=i.toLowerCase();e.has(s)||e.set(s,{name:i,origin:"context"})}let r=(t.known??[]).filter(a=>a.trim().length>2);if(r.length>0){let a=n.map(i=>i.content??"").join(`
 `).toLowerCase();for(let i of r){let s=i.toLowerCase().trim();e.has(s)||a.includes(s)&&e.set(s,{name:i,origin:"body",type:"person"})}}return Array.from(e.values()).slice(0,o)}var B=new Set(["me","user","system","cron","unknown","anonymous","bot","agent","self","test","admin","none","null","n/a"]),W=new Set(["group","team","chat","channel","squad","crew","room","family","project","board","committee","club","staff","office","dept","department","support","sales","ops","admins","everyone","all"]);function O(n){let t=n.trim();if(!t||t.length>48||B.has(t.toLowerCase())||/[\d@/\\#:|_]/.test(t))return!1;let o=t.split(/\s+/);return o.length<2||o.length>4||o.some(e=>W.has(e.toLowerCase()))?!1:o.every(e=>/^[\p{Lu}][\p{L}'’.-]*$/u.test(e))}async function lt(n,t={}){let o=t.sources??N(),e=n.slice(0,t.maxEntities??25);if(e.length===0)return{records:[],results:[]};let r=new AbortController,a=setTimeout(()=>r.abort(),t.timeoutMs??12e4);try{let i=await Promise.all(o.map(async s=>{let l=Date.now();try{let u=await s.available();if(u)return{source:s.name,records:[],unavailable:u,ms:Date.now()-l};let c=await s.lookup(e,r.signal);return{source:s.name,records:c,ms:Date.now()-l}}catch(u){return{source:s.name,records:[],unavailable:{kind:"failed",hint:String(u?.message??u)},ms:Date.now()-l}}}));for(let s of i)t.onResult?.(s);return{records:i.flatMap(s=>s.records),results:i}}finally{clearTimeout(a)}}function ut(n,t=N()){let o=new Map(t.map(e=>[e.name,e.provides]));return n.filter(e=>e.unavailable&&e.unavailable.kind!=="failed").map(e=>({source:e.source,kind:e.unavailable.kind,hint:e.unavailable.hint,provides:o.get(e.source)??[]}))}function ft(n){let t=new Map;for(let o of n){let e=o.name.toLowerCase().trim(),r=t.get(e);r||(r={name:o.name,fields:{}},t.set(e,r));for(let[a,i]of Object.entries(o.fields)){if(!i?.trim())continue;let s=r.fields[a];if(!s){r.fields[a]={value:i,source:o.source};continue}s.value!==i&&(r.fields[`${a} (${o.source})`]??={value:i,source:o.source})}}return Array.from(t.values())}function dt(n){if(n.length===0)return"";let t=n.filter(o=>Object.keys(o.fields).length>0).map(o=>{let e=Object.entries(o.fields).map(([r,a])=>`  - ${r}: \`${a.value}\` _(${a.source})_`).join(`
@@ -19,4 +19,4 @@ contradicts the entries, this wins and the entry is stale.
 ${t.join(`
 `)}
 `}export{p as countryFromPhone,k as createContactsSource,v as createGitlabSource,x as createGogSource,w as createWacliSource,N as defaultSources,ct as extractHints,L as factsFrom,ut as installPrompts,O as isPersonName,S as loadContacts,H as memoizeAvailability,ft as mergeRecords,_ as namesOf,A as parseContactsTable,$ as platformOf,C as plausible,U as recordsFromEntries,dt as renderFactsBlock,lt as resolveFacts};
-//# sourceMappingURL=facts-5T5GRUTG.js.map
+//# sourceMappingURL=facts-ROUMKS7I.js.map

package/dist/grants-N7XC7NLS.js

@@ -0,0 +1,2 @@
+import{a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u}from"./chunk-4L244AW4.js";import"./chunk-XIYWXCNU.js";import"./chunk-Y4CYQV7G.js";import"./chunk-2QNT5JDS.js";import"./chunk-QIJLFPWE.js";export{c as DEFAULT_GRANT_DAYS,a as GUEST_SCOPE_PREFIX,b as JOIN_CARD_BY,h as JOIN_FAILED,d as MAX_GRANT_DAYS,j as NO_GRANT,l as PAUSED,k as WAITING_HOST,s as endGrant,o as grantBrief,u as grantForGuest,e as grantIdOf,n as guestAccess,p as guestTask,g as inviteGuest,i as joinGuest,f as newGrantId,q as pauseGrant,r as resumeGrant,m as settleGrant,t as updateGrant};
+//# sourceMappingURL=grants-N7XC7NLS.js.map

package/dist/hosts-NFNCYKGY.js

@@ -0,0 +1,2 @@
+import{a,b,c}from"./chunk-VZLIBDLH.js";import"./chunk-QIJLFPWE.js";export{a as GuestHostStore,b as askHost,c as hostStatus};
+//# sourceMappingURL=hosts-NFNCYKGY.js.map

package/dist/index.d.ts

@@ -4713,27 +4713,42 @@ declare const daemonConfigSchema: z.ZodObject<{
         /** "channel:id": a GitLab or GitHub login, a Telegram id or username, a
          *  WhatsApp number. Display names are not matched. */
         identities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** The agents this person may reach, by id. Empty: every agent (#379). */
+        agents: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
+        agents: string[];
         id: string;
         name: string;
-        role: "owner" | "member" | "guest";
+        role: "guest" | "owner" | "member";
         identities: string[];
     }, {
         id: string;
         name: string;
-        role?: "owner" | "member" | "guest" | undefined;
+        agents?: string[] | undefined;
+        role?: "guest" | "owner" | "member" | undefined;
         identities?: string[] | undefined;
     }>, "many">>, {
+        agents: string[];
         id: string;
         name: string;
-        role: "owner" | "member" | "guest";
+        role: "guest" | "owner" | "member";
         identities: string[];
     }[], {
         id: string;
         name: string;
-        role?: "owner" | "member" | "guest" | undefined;
+        agents?: string[] | undefined;
+        role?: "guest" | "owner" | "member" | undefined;
         identities?: string[] | undefined;
     }[] | undefined>;
+    members: z.ZodDefault<z.ZodObject<{
+        /** Days the per-person log (invites, pairings, sign-ins, refusals,
+         *  removals) is kept. Older lines are dropped. */
+        logRetentionDays: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        logRetentionDays: number;
+    }, {
+        logRetentionDays?: number | undefined;
+    }>>;
     /** Request status where the request was made (src/requests/status-board,
      *  #383): each person sees the state of their own request in the place
      *  they asked. Off by default. */
@@ -6940,11 +6955,15 @@ declare const daemonConfigSchema: z.ZodObject<{
         drainTimeoutSeconds?: number | undefined;
     };
     people: {
+        agents: string[];
         id: string;
         name: string;
-        role: "owner" | "member" | "guest";
+        role: "guest" | "owner" | "member";
         identities: string[];
     }[];
+    members: {
+        logRetentionDays: number;
+    };
     requestStatus: {
         channels: string[];
     };
@@ -7760,9 +7779,13 @@ declare const daemonConfigSchema: z.ZodObject<{
     people?: {
         id: string;
         name: string;
-        role?: "owner" | "member" | "guest" | undefined;
+        agents?: string[] | undefined;
+        role?: "guest" | "owner" | "member" | undefined;
         identities?: string[] | undefined;
     }[] | undefined;
+    members?: {
+        logRetentionDays?: number | undefined;
+    } | undefined;
     requestStatus?: {
         channels?: string[] | undefined;
     } | undefined;
@@ -8695,6 +8718,9 @@ declare class AgentXDaemon {
     }>;
     /** Open requests (src/requests); null when the database is unavailable. */
     private requests;
+    /** Guest meshes (#380): the grants this node opened, and the join limiter. */
+    private guestStore;
+    private guestJoinLimiter;
     /** The secret this node's own surfaces present on /task to prove a turn
      *  is the owner's (requests/operator, #393). */
     private operatorKey;
@@ -8800,6 +8826,8 @@ declare class AgentXDaemon {
      *  such a channel gets an ordinary turn, never recorded as a request
      *  of the owner (#393). */
     private markOperatorTurn;
+    /** What the guest-mesh routes need from the daemon (guests/daemon-api.ts). */
+    private guestDeps;
     private callerProof;
     /** The channel and chat of the running turn of `agentId` that `proof`
      *  names, as the registry files the run. Null when it names none. */

package/dist/index.js

@@ -1,4 +1,4 @@
-import{a as St,b as kt,c as vt,ca as Tt,d as xt,da as Mt,e as $t,f as Ct,g as Pt,h as bt}from"./chunk-R64DAHBH.js";import"./chunk-BDM4VTBR.js";import"./chunk-GTJIKXDB.js";import"./chunk-ZUAV3PTL.js";import"./chunk-S2GAEH2F.js";import"./chunk-CL53UVOF.js";import"./chunk-ZVP6GB4G.js";import"./chunk-WWU2D65N.js";import"./chunk-2AXFYDWF.js";import"./chunk-AQASR6KR.js";import"./chunk-2D3RYIDU.js";import"./chunk-EKJG63EJ.js";import{U as yt,l as lt,m as ct,n as dt,o as mt,p as pt}from"./chunk-V4GXHBOH.js";import"./chunk-ES7Z64Z5.js";import"./chunk-GLQLCBJS.js";import"./chunk-DP7RTNDM.js";import{a as L}from"./chunk-C245D4BZ.js";import{A as D,B as z,C as V,a as ye,b as we,c as Se,d as Ae,e as Ie,f as Oe,g as Ne,h as He,i as je,j as Ue,k as _e,l as I,m as q,n as Be,o as qe,p as Ye,q as O,r as ze,s as Ve,t as Xe,u as x,v as Y,w as Qe,x as Ze,y as et,z as wt}from"./chunk-3FCYKGU6.js";import{a as B,b as M,c as F}from"./chunk-SFQUP3BP.js";import"./chunk-Y4CYQV7G.js";import"./chunk-LLNPKE7H.js";import"./chunk-SHEUCITK.js";import"./chunk-BB3ESU74.js";import"./chunk-SZDACK6O.js";import"./chunk-76Z4VHDX.js";import"./chunk-W4YR2RO2.js";import"./chunk-AFRHKA7B.js";import{s as ut}from"./chunk-4KJ3PCAI.js";import"./chunk-XF65CDNS.js";import"./chunk-VWTBHLMX.js";import"./chunk-ATXE3EMV.js";import{a as ht}from"./chunk-LUL4ILAQ.js";import"./chunk-KA2UIZXG.js";import"./chunk-GQ76J72O.js";import"./chunk-ILEC3IAV.js";import"./chunk-J3SOEFRE.js";import"./chunk-SIU6STB2.js";import"./chunk-X5C5W3E4.js";import"./chunk-GV7S5BAX.js";import"./chunk-GSX4NK2N.js";import"./chunk-74FSHUB3.js";import"./chunk-MYVHVJWZ.js";import"./chunk-DWADWDMU.js";import"./chunk-23A5K5UW.js";import"./chunk-QD6IICK7.js";import"./chunk-CECHWYJ2.js";import"./chunk-HUQRPEDP.js";import{f as gt,g as ft}from"./chunk-GUAJNZIX.js";import"./chunk-WPNRDEHW.js";import"./chunk-2GIDVZ4H.js";import{j as it,k as rt,l as at}from"./chunk-5GXCOHDM.js";import"./chunk-72SZI2UW.js";import"./chunk-FX3D7YON.js";import"./chunk-FCPTN6NF.js";import"./chunk-QOYAX2FT.js";import{a as ke,b as ve,c as xe,d as $e,e as Ce,f as Pe,g as be,h as Te,i as Me,j as Re,l as Ee,m as Ge,o as T,p as W}from"./chunk-5MUJZODV.js";import{a as m,b as G}from"./chunk-7I7IEX4S.js";import{b as Fe,c as Le,d as A,e as De}from"./chunk-JHCI6XCJ.js";import{a as Ke,b as Je,e as We}from"./chunk-DSYKYZMT.js";import{_ as tt,aa as st,ba as ot,da as nt}from"./chunk-LTHQXWZN.js";import"./chunk-UCKKAWLZ.js";import"./chunk-PN6XHTG5.js";import"./chunk-RGDKHYY2.js";import"./chunk-QIJLFPWE.js";W();G();import{execa as Rt}from"execa";import{existsSync as se,promises as X}from"fs";import S from"path";import ie from"node-fetch";async function Et(o,e){let t=o.split("/");if(t.length<2)throw new Error(`Invalid skill package ID: ${o}. Expected format: owner/repo`);let s=t[0],i=t[1],n=t[2];try{let a=n?`${s}/${i}/${n}`:`${s}/${i}`;await Rt("npx",["-y","skills","add",a],{cwd:e,stdio:"pipe"}),m.success(`Installed skill package: ${o}`);let r=S.resolve(e,".skills",`${s}_${i}`);if(se(r))return await ne(r,o);let d=S.resolve(e,".skills");return se(d)?await ne(d,o):[]}catch{return m.info(`Fetching skills directly from GitHub: ${s}/${i}`),await Gt(s,i,n,e)}}async function Gt(o,e,t,s){let i=[];try{let n=`https://api.github.com/repos/${o}/${e}/git/trees/main?recursive=1`,a=await ie(n);if(!a.ok)throw new Error(`GitHub API error: ${a.status}`);let d=(await a.json()).tree.filter(p=>p.type==="blob"&&p.path.endsWith("SKILL.md"));if(t){let p=d.find(f=>f.path.includes(`/${t}/`)||f.path===`${t}/SKILL.md`);if(p){let f=await oe(o,e,p.path,s);f&&i.push(f)}}else for(let p of d){let f=await oe(o,e,p.path,s);f&&i.push(f)}}catch(n){m.error(`Failed to fetch skills from GitHub: ${n.message}`)}return i}async function oe(o,e,t,s){try{let i=`https://raw.githubusercontent.com/${o}/${e}/main/${t}`,n=await ie(i);if(!n.ok)return null;let a=await n.text(),r=A(a);if(r){r.source="remote",r.packageId=`${o}/${e}`;let d=S.dirname(t),p=S.resolve(s,".skills",`${o}_${e}`,d);await X.mkdir(p,{recursive:!0}),await X.writeFile(S.resolve(p,"SKILL.md"),a),r.path=S.resolve(p,"SKILL.md")}return r}catch{return null}}async function ne(o,e){let t=[],{default:s}=await import("fast-glob"),i=await s.glob("**/SKILL.md",{cwd:o,deep:5});for(let n of i)try{let a=S.resolve(o,n),r=await X.readFile(a,"utf8"),d=A(r);d&&(d.source="remote",d.path=a,d.packageId=e,t.push(d))}catch{}return t}async function At(o,e,t,s,i){let n=["---",`name: ${o}`,`description: ${e}`];if(s?.length){n.push("tags:");for(let a of s)n.push(`  - ${a}`)}if(i?.length){n.push("globs:");for(let a of i)n.push(`  - ${a}`)}return n.push("---"),`${n.join(`
+import{a as St,b as kt,c as vt,ca as Tt,d as xt,da as Mt,e as $t,f as Ct,g as Pt,h as bt}from"./chunk-DND5VBG5.js";import"./chunk-IMFB2KTJ.js";import"./chunk-GTJIKXDB.js";import"./chunk-KNSYKQKB.js";import"./chunk-CL53UVOF.js";import"./chunk-ZVP6GB4G.js";import"./chunk-S2GAEH2F.js";import"./chunk-VZLIBDLH.js";import"./chunk-EKJG63EJ.js";import"./chunk-MDYARXA4.js";import"./chunk-2AXFYDWF.js";import"./chunk-AQASR6KR.js";import"./chunk-ACFQBLPX.js";import"./chunk-LQE73AZR.js";import"./chunk-2D3RYIDU.js";import"./chunk-4L244AW4.js";import"./chunk-XIYWXCNU.js";import"./chunk-PPUN7YHA.js";import{U as yt,l as lt,m as ct,n as dt,o as mt,p as pt}from"./chunk-WYYNJTDC.js";import"./chunk-2W3UVIEG.js";import"./chunk-GLQLCBJS.js";import"./chunk-DP7RTNDM.js";import{a as L}from"./chunk-C245D4BZ.js";import{A as D,B as z,C as V,a as ye,b as we,c as Se,d as Ae,e as Ie,f as Oe,g as Ne,h as He,i as je,j as Ue,k as _e,l as I,m as q,n as Be,o as qe,p as Ye,q as O,r as ze,s as Ve,t as Xe,u as x,v as Y,w as Qe,x as Ze,y as et,z as wt}from"./chunk-AACJ62ID.js";import{a as B,b as M,c as F}from"./chunk-SFQUP3BP.js";import"./chunk-Y4CYQV7G.js";import"./chunk-LLNPKE7H.js";import"./chunk-SHEUCITK.js";import"./chunk-XGTZMJUI.js";import"./chunk-SZDACK6O.js";import"./chunk-76Z4VHDX.js";import"./chunk-W4YR2RO2.js";import"./chunk-AFRHKA7B.js";import{s as ut}from"./chunk-IUQOOSD4.js";import"./chunk-WMIQHJB5.js";import"./chunk-VWTBHLMX.js";import"./chunk-ZUINXZPI.js";import{a as ht}from"./chunk-WGZPKQNI.js";import"./chunk-KA2UIZXG.js";import"./chunk-GQ76J72O.js";import"./chunk-ILEC3IAV.js";import"./chunk-J3SOEFRE.js";import"./chunk-SIU6STB2.js";import"./chunk-X5C5W3E4.js";import"./chunk-GV7S5BAX.js";import"./chunk-GSX4NK2N.js";import"./chunk-AXQIFHOX.js";import"./chunk-MYVHVJWZ.js";import"./chunk-DWADWDMU.js";import"./chunk-23A5K5UW.js";import"./chunk-QD6IICK7.js";import"./chunk-CECHWYJ2.js";import"./chunk-HJZFDQKD.js";import{f as gt,g as ft}from"./chunk-QZ3CLHGL.js";import"./chunk-WPNRDEHW.js";import"./chunk-2GIDVZ4H.js";import{j as it,k as rt,l as at}from"./chunk-K2NFNNDB.js";import"./chunk-72SZI2UW.js";import"./chunk-FX3D7YON.js";import"./chunk-FCPTN6NF.js";import"./chunk-QOYAX2FT.js";import{a as ke,b as ve,c as xe,d as $e,e as Ce,f as Pe,g as be,h as Te,i as Me,j as Re,l as Ee,m as Ge,o as T,p as W}from"./chunk-5MUJZODV.js";import{a as m,b as G}from"./chunk-7I7IEX4S.js";import{b as Fe,c as Le,d as A,e as De}from"./chunk-JHCI6XCJ.js";import{a as Ke,b as Je,e as We}from"./chunk-DSYKYZMT.js";import{$ as ot,Y as tt,_ as st,ba as nt}from"./chunk-JDXNHBGR.js";import"./chunk-PN6XHTG5.js";import"./chunk-BRK6M6LA.js";import"./chunk-2QNT5JDS.js";import"./chunk-RGDKHYY2.js";import"./chunk-QIJLFPWE.js";W();G();import{execa as Rt}from"execa";import{existsSync as se,promises as X}from"fs";import S from"path";import ie from"node-fetch";async function Et(o,e){let t=o.split("/");if(t.length<2)throw new Error(`Invalid skill package ID: ${o}. Expected format: owner/repo`);let s=t[0],i=t[1],n=t[2];try{let a=n?`${s}/${i}/${n}`:`${s}/${i}`;await Rt("npx",["-y","skills","add",a],{cwd:e,stdio:"pipe"}),m.success(`Installed skill package: ${o}`);let r=S.resolve(e,".skills",`${s}_${i}`);if(se(r))return await ne(r,o);let d=S.resolve(e,".skills");return se(d)?await ne(d,o):[]}catch{return m.info(`Fetching skills directly from GitHub: ${s}/${i}`),await Gt(s,i,n,e)}}async function Gt(o,e,t,s){let i=[];try{let n=`https://api.github.com/repos/${o}/${e}/git/trees/main?recursive=1`,a=await ie(n);if(!a.ok)throw new Error(`GitHub API error: ${a.status}`);let d=(await a.json()).tree.filter(p=>p.type==="blob"&&p.path.endsWith("SKILL.md"));if(t){let p=d.find(f=>f.path.includes(`/${t}/`)||f.path===`${t}/SKILL.md`);if(p){let f=await oe(o,e,p.path,s);f&&i.push(f)}}else for(let p of d){let f=await oe(o,e,p.path,s);f&&i.push(f)}}catch(n){m.error(`Failed to fetch skills from GitHub: ${n.message}`)}return i}async function oe(o,e,t,s){try{let i=`https://raw.githubusercontent.com/${o}/${e}/main/${t}`,n=await ie(i);if(!n.ok)return null;let a=await n.text(),r=A(a);if(r){r.source="remote",r.packageId=`${o}/${e}`;let d=S.dirname(t),p=S.resolve(s,".skills",`${o}_${e}`,d);await X.mkdir(p,{recursive:!0}),await X.writeFile(S.resolve(p,"SKILL.md"),a),r.path=S.resolve(p,"SKILL.md")}return r}catch{return null}}async function ne(o,e){let t=[],{default:s}=await import("fast-glob"),i=await s.glob("**/SKILL.md",{cwd:o,deep:5});for(let n of i)try{let a=S.resolve(o,n),r=await X.readFile(a,"utf8"),d=A(r);d&&(d.source="remote",d.path=a,d.packageId=e,t.push(d))}catch{}return t}async function At(o,e,t,s,i){let n=["---",`name: ${o}`,`description: ${e}`];if(s?.length){n.push("tags:");for(let a of s)n.push(`  - ${a}`)}if(i?.length){n.push("globs:");for(let a of i)n.push(`  - ${a}`)}return n.push("---"),`${n.join(`
 `)}
 
 ${t}`}async function It(o){let{loadLocalSkills:e}=await import("./loader-YFVSSYSL.js");return e(o)}async function Ot(o,e,t,s,i){let a=[{role:"system",content:`You are a skill author for the Agent Skills ecosystem (skills.sh).