agentix-cli 0.82.0 → 0.83.0

package/dist/chunk-2QNT5JDS.js

@@ -0,0 +1,4 @@
+import{a as w}from"./chunk-QIJLFPWE.js";import{z as v}from"zod";function j(e){return e==="report"||e==="propose"}function $(e){return e.replace(/([a-z0-9])([A-Z])/g,"$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean).map(t=>t.toLowerCase())}function u(e){return $(e).slice(2).join(" ").replace(/\b(merge|pull)\s+requests?\b/g,"mergerequest").split(" ").filter(Boolean)}function h(e){let t=e.replace(/<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1([\s\S]*?)^\s*\2\s*$/gm,(s,o,i,l)=>!o&&/\$\(|`/.test(l)?s:s.split(`
+`)[0]+`
+`),n="",r=0;for(;r<t.length;){let s=t[r];if(s==="\\"){n+=t.slice(r,r+2),r+=2;continue}if(s==="'"){let o=t.indexOf("'",r+1);if(o<0)return null;n+="''",r=o+1;continue}if(s==='"'){let o=r+1;for(;o<t.length&&t[o]!=='"';)o+=t[o]==="\\"?2:1;if(o>=t.length)return null;let i=t.slice(r+1,o);n+=/\$\(|`/.test(i)?` ${i} `:'""',r=o+1;continue}n+=s,r++}return n}function g(e){return e.split(/\|\||&&|[;|&\n`()]|\$\(|<\(|>\(/).map(t=>t.trim().split(/\s+/).filter(Boolean)).filter(t=>t.length>0)}function m(e){let t=0;for(;t<e.length;){let n=e[t];if(T.has(n))return[];if(A.has(n)||/^[A-Za-z_][A-Za-z0-9_]*=/.test(n)){t++;continue}break}return e.slice(t)}function b(e){let t=0;for(;t<e.length&&e[t].startsWith("-");)t+=/^-(C|c)$|^--(git-dir|work-tree|namespace)$/.test(e[t])?2:1;return{sub:e[t],rest:e.slice(t+1)}}function D(e){let[t,...n]=e,r=t.replace(/^.*\//,"");if(!R.has(r))return`\`${r}\` is not a read-only command`;let s=o=>n.some(i=>o.test(i));switch(r){case"find":return s(/^-(exec|execdir|ok|okdir|delete|fprint|fprint0|fprintf|fls)$/)?"find with -exec/-delete":null;case"sort":return s(/^(-o|--output)/)?"sort -o writes a file":null;case"git":{if(s(/^(-c|--exec-path|--output)/))return"git option that can execute or write";let{sub:o,rest:i}=b(n);return!o||!x.has(o)?`git ${o??""} is not read-only`.trim():o==="branch"&&i.some(l=>/^-(d|D|m|M|c|C|f|u)$|^--(delete|move|copy|force|set-upstream|unset-upstream|edit-description)/.test(l)||!l.startsWith("-"))?"git branch that changes branches":o==="tag"&&i.some(l=>!/^(-l|--list|-n\d*|--contains|--points-at|--sort=.*|--merged|--no-merged)$/.test(l))?"git tag that creates or deletes tags":o==="remote"&&i.length>0&&!/^(-v|--verbose|show|get-url)$/.test(i[0])?"git remote that changes remotes":o==="config"&&!i.some(l=>/^(--get|--get-all|--get-regexp|--list|-l)$/.test(l))?"git config write":o==="reflog"&&i.length>0&&!/^(show|-)/.test(i[0])?"git reflog that expires or deletes":null}case"gh":case"glab":{let[o,i]=n.filter(l=>!l.startsWith("-"));if(o==="search")return null;if(o==="api"){let l=n.findIndex(y=>/^(-X|--method)$/.test(y));return l>=0&&!/^GET$/i.test(n[l+1]??"")?`${r} api with a non-GET method`:s(/^-X(?!GET$)\w+|^--method=(?!GET$)/i)?`${r} api with a non-GET method`:s(/^(-f|-F|--field|--raw-field|--input)/)?`${r} api with a request body`:null}return!i||!_.has(i)?`${r} ${o??""} ${i??""} is not read-only`.replace(/\s+/g," ").trim():null}case"curl":{let o=n.findIndex(i=>/^(-X|--request)$/.test(i));return o>=0&&!/^(GET|HEAD|OPTIONS)$/i.test(n[o+1]??"")||s(/^-X(?!GET$|HEAD$)\w+|^--request=(?!GET$|HEAD$)/i)?"curl with a non-GET method":s(/^(-d|--data|--data-\w+|--json|-F|--form|-T|--upload-file|-o|--output|-O|--remote-name|-K|--config)/)?"curl that sends a body or writes a file":null}default:return null}}function L(e){let t=e.replace(/\d*>>?\s*\/dev\/null/g," ").replace(/&>>?\s*\/dev\/null/g," ").replace(/\d*>&\s*\d+/g," ");return/[>]/.test(t)}function O(e){let t=h(e);if(t===null)return a("report","shell","command too irregular to verify as read-only");if(L(t))return a("report","shell","output redirection writes a file");for(let n of g(t)){let r=m(n);if(r.length===0)continue;let s=D(r);if(s)return a("report","shell",s)}return c}function W(e){if(S.has(e.tool))return a("report","write",`${e.tool} modifies files`);if(e.tool==="Bash")return O(e.command??"");if(E.has(e.tool))return c;if(e.tool.startsWith("mcp__")){let t=u(e.tool),n=t.find(r=>k.has(r));return n?a("report","outward",`tool "${e.tool}" can change state (${n})`):t.some(r=>p.has(r))?c:a("report","outward",`tool "${e.tool}" is not recognisably read-only`)}return a("report","tool",`tool "${e.tool}" is not on the read-only list`)}function q(e){let t=[];for(let r=0;r<e.length;r++){let s=e[r];if(B.test(s)){r++;continue}if(/^(--force.*|-d|--delete|--mirror|--all|--tags|--prune)$/.test(s)||/^-[a-zA-Z]*f/.test(s))return a("propose","push","force, delete, mirror and tag pushes are act-level actions");s.startsWith("-")||t.push(s)}let n=t.slice(1);if(n.length===0)return a("propose","push","name the feature branch explicitly: git push <remote> <branch>");for(let r of n){if(r.startsWith("+")||r.startsWith(":"))return a("propose","push",`refspec "${r}" force-pushes or deletes`);let s=(r.includes(":")?r.slice(r.indexOf(":")+1):r).replace(/^refs\/heads\//,"");if(G.test(s))return a("propose","push",`pushing to "${s}" is an act-level action; push a feature branch and open a merge request`)}return null}function H(e){for(let n of I)if(n.re.test(e))return a("propose",n.id,n.reason);let t=h(e);if(t===null)return a("propose","shell","command too irregular to verify");for(let n of g(t)){let r=m(n);if(r.length===0)continue;let s=[d(r[0]),...r.slice(1)].join(" ");for(let o of P)if(o.re.test(s))return a("propose",o.id,o.reason);if(d(r[0])==="git"){let{sub:o,rest:i}=b(r.slice(1));if(o==="push"){let l=q(i);if(l)return l}}}return c}function M(e){if(e.tool==="Bash")return H(e.command??"");if(e.tool.startsWith("mcp__")){let t=u(e.tool).find(n=>f.has(n));if(t)return a("propose","outward",`tool "${e.tool}" performs an act-level action (${t})`);if(z(u(e.tool)))return a("propose","delegate",`tool "${e.tool}" hands work to another agent, which would run at its own full autonomy`)}return c}function z(e){return e.includes("delegate")||e.includes("handoff")||e.includes("agent")&&e.some(t=>t==="send"||t==="ask"||t==="message"||t==="task")?!0:e.includes("task")&&!e.some(t=>p.has(t))}function U(e,t){return e==="report"?W(t):e==="propose"?M(t):c}function V(e){return e==="report"?"[Autonomy: report] This routine runs read-only. Investigate and report; do not modify files, run mutating commands, or post anywhere. Your final answer is the deliverable. Blocked actions are enforced and logged; if something needs doing, describe it in the report instead.":e==="propose"?"[Autonomy: propose] You may edit files, commit, push a named feature branch, and open a merge request or draft. You may not merge, deploy, delete, force-push, push to protected branches, or operate hosts. These limits are enforced and logged; leave act-level steps as clear recommendations.":""}var Z,c,a,S,E,p,f,k,A,T,d,R,x,_,I,P,G,B,C=w(()=>{"use strict";Z=v.enum(["report","propose","act"]);c={allowed:!0,ruleId:null,reason:null},a=(e,t,n)=>({allowed:!1,ruleId:`autonomy.${e}.${t}`,reason:n}),S=new Set(["Write","Edit","MultiEdit","NotebookEdit"]),E=new Set(["Read","Glob","Grep","LS","NotebookRead","WebFetch","WebSearch","TodoWrite","TodoRead","Task","Agent","Skill","ToolSearch","BashOutput","KillShell","ExitPlanMode","EnterPlanMode","ListMcpResourcesTool","ReadMcpResourceTool"]);p=new Set(["get","list","search","read","view","fetch","query","find","show","describe","status","diff","inspect","lookup","count","stats","browse","whoami","download"]),f=new Set(["merge","delete","remove","destroy","drop","deploy","publish","release","approve","archive","revoke","purge","close","transfer","force","rollback","restart","erase","unprotect","truncate","wipe","kill","terminate","unpublish","promote"]),k=new Set([...f,"create","update","post","send","write","edit","add","set","comment","reply","push","run","execute","exec","trigger","upload","move","rename","cancel","retry","assign","label","react","invite","notify","schedule","start","stop","submit","save","patch","put","insert","upsert","apply","install","import","mark","toggle","enable","disable","open","commit","sync","reset","store","remember","forget","broadcast","message","call","dispatch","enqueue","resolve","unassign","lock","unlock","pin"]);A=new Set(["then","do","else","elif","if","while","until","!","{","}","time"]),T=new Set(["done","fi","esac","for","case","select","in",";;"]);d=e=>e.replace(/^.*\//,""),R=new Set(["ls","pwd","cd","cat","head","tail","wc","grep","egrep","fgrep","rg","fd","tree","stat","file","du","df","date","whoami","id","hostname","uname","which","type","sort","uniq","cut","tr","diff","cmp","comm","basename","dirname","realpath","readlink","jq","column","nl","seq","true","false","test","[","sleep","ps","uptime","echo","printf","base64","md5","md5sum","shasum","sha256sum","less","more","printenv","dig","nslookup","host","find","git","gh","glab","curl"]),x=new Set(["status","log","diff","show","rev-parse","ls-files","ls-tree","blame","shortlog","describe","cat-file","grep","branch","tag","remote","config","reflog","rev-list","merge-base","name-rev","show-ref","for-each-ref","whatchanged"]),_=new Set(["view","list","diff","status","checks","ls"]);I=[{id:"merge",re:/merge_when_pipeline_succeeds|\bauto[_-]merge\b/i,reason:"auto-merging is an act-level action"},{id:"merge",re:/\b(curl|wget|http|gh\s+api|glab\s+api)\b[^\n]*\/merges?\b/i,reason:"calling a merge endpoint is an act-level action"},{id:"delete",re:/(?:^|\W)(drop|truncate)\s+(table|database|schema|index|collection)\b|(?:^|\W)delete\s+from\b|\bflushall\b|\bflushdb\b/i,reason:"destroying data is an act-level action"},{id:"delete",re:/(-X|--request)[\s=]*['"]?DELETE\b/i,reason:"HTTP DELETE is an act-level action"},{id:"delegate",re:/\b(curl|wget|http)\b[^\n]*(localhost|127\.0\.0\.1|\[::1\])[^\n]*\/(ask|task|send|chat|mesh|workflows?|crons?|reload|config)\b/i,reason:"calling the local daemon to dispatch work escapes this routine's limit"}],P=[{id:"merge",re:/^(gh\s+pr\s+merge|glab\s+mr\s+merge)\b/i,reason:"merging is an act-level action"},{id:"delete",re:/^rm\s+(.*\s)?(-\w*[rR]\w*|--recursive)\b|^(shred|dropdb)\b|^find\b.*\s-delete\b/i,reason:"deleting is an act-level action"},{id:"delete",re:/^git\s+(clean\s+-\w*f|reset\s+--hard|branch\s+(-\w*[dD]\w*|--delete)|tag\s+(-d|--delete)|stash\s+(drop|clear)|remote\s+(remove|rm))\b/i,reason:"deleting is an act-level action"},{id:"delete",re:/^(gh|glab)\s+\S+\s+delete\b|^docker\s+(rm|rmi|volume\s+rm|system\s+prune)\b|^(kubectl\s+delete|aws\s+s3\s+(rm|rb)|gsutil\s+rm)\b|^doctl\s+.*\sdelete\b/i,reason:"deleting is an act-level action"},{id:"deploy",re:/^(kubectl\s+(apply|rollout|scale|set|patch|replace|create|edit)|helm\s+(install|upgrade|rollback|uninstall|delete)|terraform\s+(apply|destroy|import|taint)|pulumi\s+(up|destroy)|docker\s+push|netlify\s+deploy|fly(ctl)?\s+deploy|serverless\s+deploy|vercel\b.*--prod)\b/i,reason:"deploying is an act-level action"},{id:"deploy",re:/^((npm|pnpm|yarn|bun)(\s+run)?|make|just|task|rake)\s+(\S+:)?deploy\b|^((ba|z)?sh|node|python3?)\s+\S*deploy[^\s/]*$|^\S*\/deploy(\.\w+)?\b|^deploy(\.\w+)?\b/i,reason:"deploying is an act-level action"},{id:"deploy",re:/^((npm|pnpm|yarn|bun)\s+publish|cargo\s+publish|twine\s+upload|(gh|glab)\s+release\s+(create|upload|edit)|(npx\s+)?prisma\s+(migrate\s+(deploy|reset)|db\s+push))\b/i,reason:"publishing or migrating is an act-level action"},{id:"prod",re:/^(ssh|scp|sudo|doas|systemctl|launchctl|service|kill|pkill|killall|reboot|shutdown)\b|^rsync\b.*\s\S+:\S*/i,reason:"operating hosts and services is an act-level action"},{id:"delegate",re:/^(agentx|agentix)\s+(ask|send|task|exec|run|chat|mesh|cron|workflow|daemon|config)\b/i,reason:"handing work to another agent or reconfiguring the daemon escapes this routine's limit"}],G=/^(main|master|trunk|develop|development|prod|production|staging|stable|release([/-].*)?|HEAD|@)$/i,B=/^(-o|--push-option|--repo|--receive-pack|--exec)$/});export{Z as a,j as b,U as c,V as d,C as e};
+//# sourceMappingURL=chunk-2QNT5JDS.js.map

package/dist/chunk-2QNT5JDS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guard/autonomy.ts"],"sourcesContent":["import { z } from \"zod\"\n\n// --- Routine autonomy levels: the rule sets ---\n//\n// A routine (cron job or workflow agent step) may run below its agent's full\n// power:\n//\n//   report  — read-only. No file writes, no mutating shell, no outward-posting\n//             tools. The only output is the final answer, which the scheduler\n//             delivers.\n//   propose — may edit files, commit, push a feature branch, open an MR/PR or\n//             a draft. Never merge, deploy, delete, force-push, or touch\n//             production.\n//   act     — unchanged: whatever the agent may normally do.\n//\n// This module is PURE: (level, tool call) -> allow | block. It is evaluated\n// by the daemon for every tool call of a restricted task (see\n// autonomy-enforce.ts for the wiring). Deterministic by construction, like\n// the rest of the guard.\n//\n// Shape of the two restricted levels differs on purpose:\n//   - report is an ALLOWLIST. A read-only posture cannot be expressed as\n//     \"everything except the dangerous things\" — `python -c`, `node x.js`\n//     or a `curl -d` are all writes nobody would list. Unknown => blocked.\n//   - propose is a DENYLIST over a working agent. Its job is to stop the\n//     irreversible, outward steps (merge/deploy/delete/force-push), not to\n//     make the agent useless. A determined agent can evade a denylist by\n//     indirection (write a script, then run it); propose is a guardrail for\n//     honest routines, report is the hard boundary.\n\nexport const autonomyLevelSchema = z.enum([\"report\", \"propose\", \"act\"])\nexport type AutonomyLevel = z.infer<typeof autonomyLevelSchema>\n\n/** True for the levels that need per-task enforcement. */\nexport function isRestricted(level: AutonomyLevel | undefined | null): level is \"report\" | \"propose\" {\n  return level === \"report\" || level === \"propose\"\n}\n\nexport interface AutonomyInput {\n  tool: string\n  command?: string\n  filePath?: string\n}\n\nexport interface AutonomyDecision {\n  allowed: boolean\n  /** Stable id, e.g. \"autonomy.report.write\". Null when allowed. */\n  ruleId: string | null\n  reason: string | null\n}\n\nconst ALLOW: AutonomyDecision = { allowed: true, ruleId: null, reason: null }\nconst block = (level: string, id: string, reason: string): AutonomyDecision => ({\n  allowed: false,\n  ruleId: `autonomy.${level}.${id}`,\n  reason,\n})\n\n// ---------------------------------------------------------------- tools\n\nconst WRITE_TOOLS = new Set([\"Write\", \"Edit\", \"MultiEdit\", \"NotebookEdit\"])\n\n/** Native tools that never change anything outside the conversation. */\nconst REPORT_SAFE_TOOLS = new Set([\n  \"Read\", \"Glob\", \"Grep\", \"LS\", \"NotebookRead\", \"WebFetch\", \"WebSearch\",\n  \"TodoWrite\", \"TodoRead\", \"Task\", \"Agent\", \"Skill\", \"ToolSearch\",\n  \"BashOutput\", \"KillShell\", \"ExitPlanMode\", \"EnterPlanMode\",\n  \"ListMcpResourcesTool\", \"ReadMcpResourceTool\",\n])\n\n/** Split a tool name into lowercase words: `mcp__gitlab__create_merge_request`\n *  -> [mcp, gitlab, create, merge, request]; camelCase splits too. */\nexport function toolWords(name: string): string[] {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .split(/[^A-Za-z0-9]+/)\n    .filter(Boolean)\n    .map((w) => w.toLowerCase())\n}\n\n/** The action words of an MCP tool name (server prefix dropped), with the\n *  nouns \"merge request\" / \"pull request\" folded so `create_merge_request`\n *  reads as create-an-MR, not as a merge. */\nexport function mcpActionWords(name: string): string[] {\n  return toolWords(name)\n    .slice(2)\n    .join(\" \")\n    .replace(/\\b(merge|pull)\\s+requests?\\b/g, \"mergerequest\")\n    .split(\" \")\n    .filter(Boolean)\n}\n\nconst READ_VERBS = new Set([\n  \"get\", \"list\", \"search\", \"read\", \"view\", \"fetch\", \"query\", \"find\", \"show\", \"describe\",\n  \"status\", \"diff\", \"inspect\", \"lookup\", \"count\", \"stats\", \"browse\", \"whoami\", \"download\",\n])\n/** Irreversible or outward-facing verbs. Blocked in propose, and in report. */\nconst DESTRUCTIVE_VERBS = new Set([\n  \"merge\", \"delete\", \"remove\", \"destroy\", \"drop\", \"deploy\", \"publish\", \"release\", \"approve\",\n  \"archive\", \"revoke\", \"purge\", \"close\", \"transfer\", \"force\", \"rollback\", \"restart\", \"erase\",\n  \"unprotect\", \"truncate\", \"wipe\", \"kill\", \"terminate\", \"unpublish\", \"promote\",\n])\n/** Any state change at all. Blocked in report. */\nconst MUTATING_VERBS = new Set([\n  ...DESTRUCTIVE_VERBS,\n  \"create\", \"update\", \"post\", \"send\", \"write\", \"edit\", \"add\", \"set\", \"comment\", \"reply\",\n  \"push\", \"run\", \"execute\", \"exec\", \"trigger\", \"upload\", \"move\", \"rename\", \"cancel\", \"retry\",\n  \"assign\", \"label\", \"react\", \"invite\", \"notify\", \"schedule\", \"start\", \"stop\", \"submit\", \"save\",\n  \"patch\", \"put\", \"insert\", \"upsert\", \"apply\", \"install\", \"import\", \"mark\", \"toggle\", \"enable\",\n  \"disable\", \"open\", \"commit\", \"sync\", \"reset\", \"store\", \"remember\", \"forget\", \"broadcast\",\n  \"message\", \"call\", \"dispatch\", \"enqueue\", \"resolve\", \"unassign\", \"lock\", \"unlock\", \"pin\",\n])\n\n// ---------------------------------------------------------------- shell view\n\n/**\n * The part of a shell command the shell will actually EXECUTE, flattened so\n * every command position can be inspected:\n *   - single-quoted text is blanked (truly literal),\n *   - double-quoted text is blanked unless it contains `$(`/backticks, in\n *     which case the substitution is executed and must stay visible,\n *   - heredoc bodies are blanked unless the delimiter is unquoted and the\n *     body substitutes commands.\n * Returns `null` for input too irregular to judge (unbalanced quotes), which\n * callers treat as \"block\" in report mode.\n */\nexport function shellView(command: string): string | null {\n  // Heredocs: blank the body unless the delimiter is unquoted AND the body\n  // substitutes commands (then the shell executes it — keep it visible).\n  const text = command.replace(/<<-?\\s*(['\"]?)([A-Za-z_][A-Za-z0-9_]*)\\1([\\s\\S]*?)^\\s*\\2\\s*$/gm,\n    (m, quote: string, _d: string, body: string) =>\n      !quote && /\\$\\(|`/.test(body) ? m : m.split(\"\\n\")[0] + \"\\n\")\n  let out = \"\"\n  let i = 0\n  while (i < text.length) {\n    const c = text[i]\n    if (c === \"\\\\\") { out += text.slice(i, i + 2); i += 2; continue }\n    if (c === \"'\") {\n      const end = text.indexOf(\"'\", i + 1)\n      if (end < 0) return null\n      out += \"''\"\n      i = end + 1\n      continue\n    }\n    if (c === '\"') {\n      let j = i + 1\n      while (j < text.length && text[j] !== '\"') j += text[j] === \"\\\\\" ? 2 : 1\n      if (j >= text.length) return null\n      const inner = text.slice(i + 1, j)\n      out += /\\$\\(|`/.test(inner) ? ` ${inner} ` : '\"\"'\n      i = j + 1\n      continue\n    }\n    out += c\n    i++\n  }\n  return out\n}\n\n/** Split a shell view into simple-command segments (words arrays). */\nexport function shellSegments(view: string): string[][] {\n  return view\n    .split(/\\|\\||&&|[;|&\\n`()]|\\$\\(|<\\(|>\\(/)\n    .map((s) => s.trim().split(/\\s+/).filter(Boolean))\n    .filter((w) => w.length > 0)\n}\n\nconst SHELL_KEYWORDS_STRIP = new Set([\"then\", \"do\", \"else\", \"elif\", \"if\", \"while\", \"until\", \"!\", \"{\", \"}\", \"time\"])\nconst SHELL_KEYWORDS_SKIP = new Set([\"done\", \"fi\", \"esac\", \"for\", \"case\", \"select\", \"in\", \";;\"])\n\n/** Drop leading keywords and `VAR=value` assignments; return the command words. */\nfunction commandWords(words: string[]): string[] {\n  let i = 0\n  while (i < words.length) {\n    const w = words[i]\n    if (SHELL_KEYWORDS_SKIP.has(w)) return []\n    if (SHELL_KEYWORDS_STRIP.has(w) || /^[A-Za-z_][A-Za-z0-9_]*=/.test(w)) { i++; continue }\n    break\n  }\n  return words.slice(i)\n}\n\n/** `git [-C dir] [--flags] <sub> <rest...>` -> { sub, rest }. */\nfunction gitSubcommand(args: string[]): { sub: string | undefined; rest: string[] } {\n  let i = 0\n  while (i < args.length && args[i].startsWith(\"-\")) i += /^-(C|c)$|^--(git-dir|work-tree|namespace)$/.test(args[i]) ? 2 : 1\n  return { sub: args[i], rest: args.slice(i + 1) }\n}\n\n/** Command name without its path: `/usr/bin/git` -> `git`. */\nconst baseName = (w: string) => w.replace(/^.*\\//, \"\")\n\n// ---------------------------------------------------------------- report\n\nconst REPORT_SHELL_COMMANDS = new Set([\n  \"ls\", \"pwd\", \"cd\", \"cat\", \"head\", \"tail\", \"wc\", \"grep\", \"egrep\", \"fgrep\", \"rg\", \"fd\", \"tree\",\n  \"stat\", \"file\", \"du\", \"df\", \"date\", \"whoami\", \"id\", \"hostname\", \"uname\", \"which\", \"type\",\n  \"sort\", \"uniq\", \"cut\", \"tr\", \"diff\", \"cmp\", \"comm\", \"basename\", \"dirname\", \"realpath\",\n  \"readlink\", \"jq\", \"column\", \"nl\", \"seq\", \"true\", \"false\", \"test\", \"[\", \"sleep\", \"ps\",\n  \"uptime\", \"echo\", \"printf\", \"base64\", \"md5\", \"md5sum\", \"shasum\", \"sha256sum\", \"less\", \"more\",\n  \"printenv\", \"dig\", \"nslookup\", \"host\", \"find\", \"git\", \"gh\", \"glab\", \"curl\",\n])\n\nconst GIT_READ = new Set([\n  \"status\", \"log\", \"diff\", \"show\", \"rev-parse\", \"ls-files\", \"ls-tree\", \"blame\", \"shortlog\",\n  \"describe\", \"cat-file\", \"grep\", \"branch\", \"tag\", \"remote\", \"config\", \"reflog\", \"rev-list\",\n  \"merge-base\", \"name-rev\", \"show-ref\", \"for-each-ref\", \"whatchanged\",\n])\nconst GH_READ_ACTIONS = new Set([\"view\", \"list\", \"diff\", \"status\", \"checks\", \"ls\"])\n\nfunction reportShellWord(words: string[]): string | null {\n  const [cmd, ...args] = words\n  const base = cmd.replace(/^.*\\//, \"\")\n  if (!REPORT_SHELL_COMMANDS.has(base)) return `\\`${base}\\` is not a read-only command`\n  const has = (re: RegExp) => args.some((a) => re.test(a))\n  switch (base) {\n    case \"find\":\n      if (has(/^-(exec|execdir|ok|okdir|delete|fprint|fprint0|fprintf|fls)$/)) return \"find with -exec/-delete\"\n      return null\n    case \"sort\":\n      if (has(/^(-o|--output)/)) return \"sort -o writes a file\"\n      return null\n    case \"git\": {\n      if (has(/^(-c|--exec-path|--output)/)) return \"git option that can execute or write\"\n      const { sub, rest } = gitSubcommand(args)\n      if (!sub || !GIT_READ.has(sub)) return `git ${sub ?? \"\"} is not read-only`.trim()\n      if (sub === \"branch\" && rest.some((a) => /^-(d|D|m|M|c|C|f|u)$|^--(delete|move|copy|force|set-upstream|unset-upstream|edit-description)/.test(a) || !a.startsWith(\"-\"))) {\n        return \"git branch that changes branches\"\n      }\n      if (sub === \"tag\" && rest.some((a) => !/^(-l|--list|-n\\d*|--contains|--points-at|--sort=.*|--merged|--no-merged)$/.test(a))) {\n        return \"git tag that creates or deletes tags\"\n      }\n      if (sub === \"remote\" && rest.length > 0 && !/^(-v|--verbose|show|get-url)$/.test(rest[0])) return \"git remote that changes remotes\"\n      if (sub === \"config\" && !rest.some((a) => /^(--get|--get-all|--get-regexp|--list|-l)$/.test(a))) return \"git config write\"\n      if (sub === \"reflog\" && rest.length > 0 && !/^(show|-)/.test(rest[0])) return \"git reflog that expires or deletes\"\n      return null\n    }\n    case \"gh\":\n    case \"glab\": {\n      const [group, action] = args.filter((a) => !a.startsWith(\"-\"))\n      if (group === \"search\") return null\n      if (group === \"api\") {\n        const method = args.findIndex((a) => /^(-X|--method)$/.test(a))\n        if (method >= 0 && !/^GET$/i.test(args[method + 1] ?? \"\")) return `${base} api with a non-GET method`\n        if (has(/^-X(?!GET$)\\w+|^--method=(?!GET$)/i)) return `${base} api with a non-GET method`\n        if (has(/^(-f|-F|--field|--raw-field|--input)/)) return `${base} api with a request body`\n        return null\n      }\n      if (!action || !GH_READ_ACTIONS.has(action)) return `${base} ${group ?? \"\"} ${action ?? \"\"} is not read-only`.replace(/\\s+/g, \" \").trim()\n      return null\n    }\n    case \"curl\": {\n      const m = args.findIndex((a) => /^(-X|--request)$/.test(a))\n      if (m >= 0 && !/^(GET|HEAD|OPTIONS)$/i.test(args[m + 1] ?? \"\")) return \"curl with a non-GET method\"\n      if (has(/^-X(?!GET$|HEAD$)\\w+|^--request=(?!GET$|HEAD$)/i)) return \"curl with a non-GET method\"\n      if (has(/^(-d|--data|--data-\\w+|--json|-F|--form|-T|--upload-file|-o|--output|-O|--remote-name|-K|--config)/)) {\n        return \"curl that sends a body or writes a file\"\n      }\n      return null\n    }\n    default:\n      return null\n  }\n}\n\n/** Redirects that write somewhere other than /dev/null or another fd. */\nfunction hasWritingRedirect(view: string): boolean {\n  const cleaned = view\n    .replace(/\\d*>>?\\s*\\/dev\\/null/g, \" \")\n    .replace(/&>>?\\s*\\/dev\\/null/g, \" \")\n    .replace(/\\d*>&\\s*\\d+/g, \" \")\n  return /[>]/.test(cleaned)\n}\n\nfunction reportBash(command: string): AutonomyDecision {\n  const view = shellView(command)\n  if (view === null) return block(\"report\", \"shell\", \"command too irregular to verify as read-only\")\n  if (hasWritingRedirect(view)) return block(\"report\", \"shell\", \"output redirection writes a file\")\n  for (const seg of shellSegments(view)) {\n    const words = commandWords(seg)\n    if (words.length === 0) continue\n    const why = reportShellWord(words)\n    if (why) return block(\"report\", \"shell\", why)\n  }\n  return ALLOW\n}\n\nfunction reportTool(input: AutonomyInput): AutonomyDecision {\n  if (WRITE_TOOLS.has(input.tool)) return block(\"report\", \"write\", `${input.tool} modifies files`)\n  if (input.tool === \"Bash\") return reportBash(input.command ?? \"\")\n  if (REPORT_SAFE_TOOLS.has(input.tool)) return ALLOW\n  if (input.tool.startsWith(\"mcp__\")) {\n    const words = mcpActionWords(input.tool)\n    const mutating = words.find((w) => MUTATING_VERBS.has(w))\n    if (mutating) return block(\"report\", \"outward\", `tool \"${input.tool}\" can change state (${mutating})`)\n    if (words.some((w) => READ_VERBS.has(w))) return ALLOW\n    return block(\"report\", \"outward\", `tool \"${input.tool}\" is not recognisably read-only`)\n  }\n  return block(\"report\", \"tool\", `tool \"${input.tool}\" is not on the read-only list`)\n}\n\n// ---------------------------------------------------------------- propose\n\ninterface ShellRule { id: string; re: RegExp; reason: string }\n\n/** Content rules, matched against the RAW command: quoting is how these\n *  payloads are delivered (`psql -c 'DROP TABLE x'`), not a disclaimer. */\nconst PROPOSE_RAW_RULES: ShellRule[] = [\n  { id: \"merge\", re: /merge_when_pipeline_succeeds|\\bauto[_-]merge\\b/i, reason: \"auto-merging is an act-level action\" },\n  { id: \"merge\", re: /\\b(curl|wget|http|gh\\s+api|glab\\s+api)\\b[^\\n]*\\/merges?\\b/i, reason: \"calling a merge endpoint is an act-level action\" },\n  { id: \"delete\", re: /(?:^|\\W)(drop|truncate)\\s+(table|database|schema|index|collection)\\b|(?:^|\\W)delete\\s+from\\b|\\bflushall\\b|\\bflushdb\\b/i, reason: \"destroying data is an act-level action\" },\n  { id: \"delete\", re: /(-X|--request)[\\s=]*['\"]?DELETE\\b/i, reason: \"HTTP DELETE is an act-level action\" },\n  { id: \"delegate\", re: /\\b(curl|wget|http)\\b[^\\n]*(localhost|127\\.0\\.0\\.1|\\[::1\\])[^\\n]*\\/(ask|task|send|chat|mesh|workflows?|crons?|reload|config)\\b/i, reason: \"calling the local daemon to dispatch work escapes this routine's limit\" },\n]\n\n/** Command rules, matched against one simple command (quoted text blanked). */\nconst PROPOSE_COMMAND_RULES: ShellRule[] = [\n  { id: \"merge\", re: /^(gh\\s+pr\\s+merge|glab\\s+mr\\s+merge)\\b/i, reason: \"merging is an act-level action\" },\n  { id: \"delete\", re: /^rm\\s+(.*\\s)?(-\\w*[rR]\\w*|--recursive)\\b|^(shred|dropdb)\\b|^find\\b.*\\s-delete\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"delete\", re: /^git\\s+(clean\\s+-\\w*f|reset\\s+--hard|branch\\s+(-\\w*[dD]\\w*|--delete)|tag\\s+(-d|--delete)|stash\\s+(drop|clear)|remote\\s+(remove|rm))\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"delete\", re: /^(gh|glab)\\s+\\S+\\s+delete\\b|^docker\\s+(rm|rmi|volume\\s+rm|system\\s+prune)\\b|^(kubectl\\s+delete|aws\\s+s3\\s+(rm|rb)|gsutil\\s+rm)\\b|^doctl\\s+.*\\sdelete\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"deploy\", re: /^(kubectl\\s+(apply|rollout|scale|set|patch|replace|create|edit)|helm\\s+(install|upgrade|rollback|uninstall|delete)|terraform\\s+(apply|destroy|import|taint)|pulumi\\s+(up|destroy)|docker\\s+push|netlify\\s+deploy|fly(ctl)?\\s+deploy|serverless\\s+deploy|vercel\\b.*--prod)\\b/i, reason: \"deploying is an act-level action\" },\n  { id: \"deploy\", re: /^((npm|pnpm|yarn|bun)(\\s+run)?|make|just|task|rake)\\s+(\\S+:)?deploy\\b|^((ba|z)?sh|node|python3?)\\s+\\S*deploy[^\\s/]*$|^\\S*\\/deploy(\\.\\w+)?\\b|^deploy(\\.\\w+)?\\b/i, reason: \"deploying is an act-level action\" },\n  { id: \"deploy\", re: /^((npm|pnpm|yarn|bun)\\s+publish|cargo\\s+publish|twine\\s+upload|(gh|glab)\\s+release\\s+(create|upload|edit)|(npx\\s+)?prisma\\s+(migrate\\s+(deploy|reset)|db\\s+push))\\b/i, reason: \"publishing or migrating is an act-level action\" },\n  { id: \"prod\", re: /^(ssh|scp|sudo|doas|systemctl|launchctl|service|kill|pkill|killall|reboot|shutdown)\\b|^rsync\\b.*\\s\\S+:\\S*/i, reason: \"operating hosts and services is an act-level action\" },\n  { id: \"delegate\", re: /^(agentx|agentix)\\s+(ask|send|task|exec|run|chat|mesh|cron|workflow|daemon|config)\\b/i, reason: \"handing work to another agent or reconfiguring the daemon escapes this routine's limit\" },\n]\n\nconst PROTECTED_BRANCH = /^(main|master|trunk|develop|development|prod|production|staging|stable|release([/-].*)?|HEAD|@)$/i\n/** `git push` options that consume the next word. */\nconst PUSH_VALUE_OPTS = /^(-o|--push-option|--repo|--receive-pack|--exec)$/\n\n/** A push may only name feature branches explicitly — no force, no delete,\n *  no mirror/tags, no protected destinations, no implicit \"current branch\". */\nfunction proposeGitPush(rest: string[]): AutonomyDecision | null {\n  const positional: string[] = []\n  for (let i = 0; i < rest.length; i++) {\n    const a = rest[i]\n    if (PUSH_VALUE_OPTS.test(a)) { i++; continue }\n    if (/^(--force.*|-d|--delete|--mirror|--all|--tags|--prune)$/.test(a) || /^-[a-zA-Z]*f/.test(a)) {\n      return block(\"propose\", \"push\", \"force, delete, mirror and tag pushes are act-level actions\")\n    }\n    if (!a.startsWith(\"-\")) positional.push(a)\n  }\n  const refspecs = positional.slice(1)\n  if (refspecs.length === 0) return block(\"propose\", \"push\", \"name the feature branch explicitly: git push <remote> <branch>\")\n  for (const ref of refspecs) {\n    if (ref.startsWith(\"+\") || ref.startsWith(\":\")) return block(\"propose\", \"push\", `refspec \"${ref}\" force-pushes or deletes`)\n    const name = (ref.includes(\":\") ? ref.slice(ref.indexOf(\":\") + 1) : ref).replace(/^refs\\/heads\\//, \"\")\n    if (PROTECTED_BRANCH.test(name)) return block(\"propose\", \"push\", `pushing to \"${name}\" is an act-level action; push a feature branch and open a merge request`)\n  }\n  return null\n}\n\nfunction proposeBash(command: string): AutonomyDecision {\n  for (const rule of PROPOSE_RAW_RULES) {\n    if (rule.re.test(command)) return block(\"propose\", rule.id, rule.reason)\n  }\n  const view = shellView(command)\n  if (view === null) return block(\"propose\", \"shell\", \"command too irregular to verify\")\n  for (const seg of shellSegments(view)) {\n    const words = commandWords(seg)\n    if (words.length === 0) continue\n    const line = [baseName(words[0]), ...words.slice(1)].join(\" \")\n    for (const rule of PROPOSE_COMMAND_RULES) {\n      if (rule.re.test(line)) return block(\"propose\", rule.id, rule.reason)\n    }\n    if (baseName(words[0]) === \"git\") {\n      const { sub, rest } = gitSubcommand(words.slice(1))\n      if (sub === \"push\") {\n        const hit = proposeGitPush(rest)\n        if (hit) return hit\n      }\n    }\n  }\n  return ALLOW\n}\n\nfunction proposeTool(input: AutonomyInput): AutonomyDecision {\n  if (input.tool === \"Bash\") return proposeBash(input.command ?? \"\")\n  if (input.tool.startsWith(\"mcp__\")) {\n    const hit = mcpActionWords(input.tool).find((w) => DESTRUCTIVE_VERBS.has(w))\n    if (hit) return block(\"propose\", \"outward\", `tool \"${input.tool}\" performs an act-level action (${hit})`)\n    if (isDelegation(mcpActionWords(input.tool))) {\n      return block(\"propose\", \"delegate\", `tool \"${input.tool}\" hands work to another agent, which would run at its own full autonomy`)\n    }\n  }\n  return ALLOW\n}\n\n/** Handing the task to another agent escapes the limit: that agent's run\n *  is not restricted. */\nfunction isDelegation(words: string[]): boolean {\n  if (words.includes(\"delegate\") || words.includes(\"handoff\")) return true\n  if (words.includes(\"agent\") && words.some((w) => w === \"send\" || w === \"ask\" || w === \"message\" || w === \"task\")) return true\n  return words.includes(\"task\") && !words.some((w) => READ_VERBS.has(w))\n}\n\n// ---------------------------------------------------------------- entry\n\n/** Judge one tool call against an autonomy level. `act` allows everything. */\nexport function evaluateAutonomy(level: AutonomyLevel, input: AutonomyInput): AutonomyDecision {\n  if (level === \"report\") return reportTool(input)\n  if (level === \"propose\") return proposeTool(input)\n  return ALLOW\n}\n\n/** One-paragraph brief prepended to a restricted task, so the model knows\n *  the boundary up front instead of discovering it by being blocked. The\n *  enforcement does not depend on it. */\nexport function autonomyBrief(level: AutonomyLevel): string {\n  if (level === \"report\") {\n    return \"[Autonomy: report] This routine runs read-only. Investigate and report; do not modify files, run mutating commands, or post anywhere. Your final answer is the deliverable. Blocked actions are enforced and logged; if something needs doing, describe it in the report instead.\"\n  }\n  if (level === \"propose\") {\n    return \"[Autonomy: propose] You may edit files, commit, push a named feature branch, and open a merge request or draft. You may not merge, deploy, delete, force-push, push to protected branches, or operate hosts. These limits are enforced and logged; leave act-level steps as clear recommendations.\"\n  }\n  return \"\"\n}\n"],"mappings":"wCAAA,OAAS,KAAAA,MAAS,MAkCX,SAASC,EAAaC,EAAwE,CACnG,OAAOA,IAAU,UAAYA,IAAU,SACzC,CAoCO,SAASC,EAAUC,EAAwB,CAChD,OAAOA,EACJ,QAAQ,qBAAsB,OAAO,EACrC,MAAM,eAAe,EACrB,OAAO,OAAO,EACd,IAAKC,GAAMA,EAAE,YAAY,CAAC,CAC/B,CAKO,SAASC,EAAeF,EAAwB,CACrD,OAAOD,EAAUC,CAAI,EAClB,MAAM,CAAC,EACP,KAAK,GAAG,EACR,QAAQ,gCAAiC,cAAc,EACvD,MAAM,GAAG,EACT,OAAO,OAAO,CACnB,CAoCO,SAASG,EAAUC,EAAgC,CAGxD,IAAMC,EAAOD,EAAQ,QAAQ,iEAC3B,CAACE,EAAGC,EAAeC,EAAYC,IAC7B,CAACF,GAAS,SAAS,KAAKE,CAAI,EAAIH,EAAIA,EAAE,MAAM;AAAA,CAAI,EAAE,CAAC,EAAI;AAAA,CAAI,EAC3DI,EAAM,GACNC,EAAI,EACR,KAAOA,EAAIN,EAAK,QAAQ,CACtB,IAAMO,EAAIP,EAAKM,CAAC,EAChB,GAAIC,IAAM,KAAM,CAAEF,GAAOL,EAAK,MAAMM,EAAGA,EAAI,CAAC,EAAGA,GAAK,EAAG,SACvD,GAAIC,IAAM,IAAK,CACb,IAAMC,EAAMR,EAAK,QAAQ,IAAKM,EAAI,CAAC,EACnC,GAAIE,EAAM,EAAG,OAAO,KACpBH,GAAO,KACPC,EAAIE,EAAM,EACV,SAEF,GAAID,IAAM,IAAK,CACb,IAAIE,EAAIH,EAAI,EACZ,KAAOG,EAAIT,EAAK,QAAUA,EAAKS,CAAC,IAAM,KAAKA,GAAKT,EAAKS,CAAC,IAAM,KAAO,EAAI,EACvE,GAAIA,GAAKT,EAAK,OAAQ,OAAO,KAC7B,IAAMU,EAAQV,EAAK,MAAMM,EAAI,EAAGG,CAAC,EACjCJ,GAAO,SAAS,KAAKK,CAAK,EAAI,IAAIA,KAAW,KAC7CJ,EAAIG,EAAI,EACR,SAEFJ,GAAOE,EACPD,IAEF,OAAOD,CACT,CAGO,SAASM,EAAcC,EAA0B,CACtD,OAAOA,EACJ,MAAM,iCAAiC,EACvC,IAAKC,GAAMA,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,CAAC,EAChD,OAAQjB,GAAMA,EAAE,OAAS,CAAC,CAC/B,CAMA,SAASkB,EAAaC,EAA2B,CAC/C,IAAIT,EAAI,EACR,KAAOA,EAAIS,EAAM,QAAQ,CACvB,IAAMnB,EAAImB,EAAMT,CAAC,EACjB,GAAIU,EAAoB,IAAIpB,CAAC,EAAG,MAAO,CAAC,EACxC,GAAIqB,EAAqB,IAAIrB,CAAC,GAAK,2BAA2B,KAAKA,CAAC,EAAG,CAAEU,IAAK,SAC9E,MAEF,OAAOS,EAAM,MAAMT,CAAC,CACtB,CAGA,SAASY,EAAcC,EAA6D,CAClF,IAAIb,EAAI,EACR,KAAOA,EAAIa,EAAK,QAAUA,EAAKb,CAAC,EAAE,WAAW,GAAG,GAAGA,GAAK,6CAA6C,KAAKa,EAAKb,CAAC,CAAC,EAAI,EAAI,EACzH,MAAO,CAAE,IAAKa,EAAKb,CAAC,EAAG,KAAMa,EAAK,MAAMb,EAAI,CAAC,CAAE,CACjD,CAuBA,SAASc,EAAgBL,EAAgC,CACvD,GAAM,CAACM,EAAK,GAAGF,CAAI,EAAIJ,EACjBO,EAAOD,EAAI,QAAQ,QAAS,EAAE,EACpC,GAAI,CAACE,EAAsB,IAAID,CAAI,EAAG,MAAO,KAAKA,iCAClD,IAAME,EAAOC,GAAeN,EAAK,KAAMO,GAAMD,EAAG,KAAKC,CAAC,CAAC,EACvD,OAAQJ,EAAM,CACZ,IAAK,OACH,OAAIE,EAAI,8DAA8D,EAAU,0BACzE,KACT,IAAK,OACH,OAAIA,EAAI,gBAAgB,EAAU,wBAC3B,KACT,IAAK,MAAO,CACV,GAAIA,EAAI,4BAA4B,EAAG,MAAO,uCAC9C,GAAM,CAAE,IAAAG,EAAK,KAAAC,CAAK,EAAIV,EAAcC,CAAI,EACxC,MAAI,CAACQ,GAAO,CAACE,EAAS,IAAIF,CAAG,EAAU,OAAOA,GAAO,sBAAsB,KAAK,EAC5EA,IAAQ,UAAYC,EAAK,KAAMF,GAAM,gGAAgG,KAAKA,CAAC,GAAK,CAACA,EAAE,WAAW,GAAG,CAAC,EAC7J,mCAELC,IAAQ,OAASC,EAAK,KAAMF,GAAM,CAAC,4EAA4E,KAAKA,CAAC,CAAC,EACjH,uCAELC,IAAQ,UAAYC,EAAK,OAAS,GAAK,CAAC,gCAAgC,KAAKA,EAAK,CAAC,CAAC,EAAU,kCAC9FD,IAAQ,UAAY,CAACC,EAAK,KAAMF,GAAM,6CAA6C,KAAKA,CAAC,CAAC,EAAU,mBACpGC,IAAQ,UAAYC,EAAK,OAAS,GAAK,CAAC,YAAY,KAAKA,EAAK,CAAC,CAAC,EAAU,qCACvE,IACT,CACA,IAAK,KACL,IAAK,OAAQ,CACX,GAAM,CAACE,EAAOC,CAAM,EAAIZ,EAAK,OAAQO,GAAM,CAACA,EAAE,WAAW,GAAG,CAAC,EAC7D,GAAII,IAAU,SAAU,OAAO,KAC/B,GAAIA,IAAU,MAAO,CACnB,IAAME,EAASb,EAAK,UAAWO,GAAM,kBAAkB,KAAKA,CAAC,CAAC,EAC9D,OAAIM,GAAU,GAAK,CAAC,SAAS,KAAKb,EAAKa,EAAS,CAAC,GAAK,EAAE,EAAU,GAAGV,8BACjEE,EAAI,oCAAoC,EAAU,GAAGF,8BACrDE,EAAI,sCAAsC,EAAU,GAAGF,4BACpD,KAET,MAAI,CAACS,GAAU,CAACE,EAAgB,IAAIF,CAAM,EAAU,GAAGT,KAAQQ,GAAS,MAAMC,GAAU,sBAAsB,QAAQ,OAAQ,GAAG,EAAE,KAAK,EACjI,IACT,CACA,IAAK,OAAQ,CACX,IAAM9B,EAAIkB,EAAK,UAAWO,GAAM,mBAAmB,KAAKA,CAAC,CAAC,EAE1D,OADIzB,GAAK,GAAK,CAAC,wBAAwB,KAAKkB,EAAKlB,EAAI,CAAC,GAAK,EAAE,GACzDuB,EAAI,iDAAiD,EAAU,6BAC/DA,EAAI,oGAAoG,EACnG,0CAEF,IACT,CACA,QACE,OAAO,IACX,CACF,CAGA,SAASU,EAAmBtB,EAAuB,CACjD,IAAMuB,EAAUvB,EACb,QAAQ,wBAAyB,GAAG,EACpC,QAAQ,sBAAuB,GAAG,EAClC,QAAQ,eAAgB,GAAG,EAC9B,MAAO,MAAM,KAAKuB,CAAO,CAC3B,CAEA,SAASC,EAAWrC,EAAmC,CACrD,IAAMa,EAAOd,EAAUC,CAAO,EAC9B,GAAIa,IAAS,KAAM,OAAOyB,EAAM,SAAU,QAAS,8CAA8C,EACjG,GAAIH,EAAmBtB,CAAI,EAAG,OAAOyB,EAAM,SAAU,QAAS,kCAAkC,EAChG,QAAWC,KAAO3B,EAAcC,CAAI,EAAG,CACrC,IAAMG,EAAQD,EAAawB,CAAG,EAC9B,GAAIvB,EAAM,SAAW,EAAG,SACxB,IAAMwB,EAAMnB,EAAgBL,CAAK,EACjC,GAAIwB,EAAK,OAAOF,EAAM,SAAU,QAASE,CAAG,EAE9C,OAAOC,CACT,CAEA,SAASC,EAAWC,EAAwC,CAC1D,GAAIC,EAAY,IAAID,EAAM,IAAI,EAAG,OAAOL,EAAM,SAAU,QAAS,GAAGK,EAAM,qBAAqB,EAC/F,GAAIA,EAAM,OAAS,OAAQ,OAAON,EAAWM,EAAM,SAAW,EAAE,EAChE,GAAIE,EAAkB,IAAIF,EAAM,IAAI,EAAG,OAAOF,EAC9C,GAAIE,EAAM,KAAK,WAAW,OAAO,EAAG,CAClC,IAAM3B,EAAQlB,EAAe6C,EAAM,IAAI,EACjCG,EAAW9B,EAAM,KAAMnB,GAAMkD,EAAe,IAAIlD,CAAC,CAAC,EACxD,OAAIiD,EAAiBR,EAAM,SAAU,UAAW,SAASK,EAAM,2BAA2BG,IAAW,EACjG9B,EAAM,KAAMnB,GAAMmD,EAAW,IAAInD,CAAC,CAAC,EAAU4C,EAC1CH,EAAM,SAAU,UAAW,SAASK,EAAM,qCAAqC,EAExF,OAAOL,EAAM,SAAU,OAAQ,SAASK,EAAM,oCAAoC,CACpF,CAmCA,SAASM,EAAepB,EAAyC,CAC/D,IAAMqB,EAAuB,CAAC,EAC9B,QAAS3C,EAAI,EAAGA,EAAIsB,EAAK,OAAQtB,IAAK,CACpC,IAAMoB,EAAIE,EAAKtB,CAAC,EAChB,GAAI4C,EAAgB,KAAKxB,CAAC,EAAG,CAAEpB,IAAK,SACpC,GAAI,0DAA0D,KAAKoB,CAAC,GAAK,eAAe,KAAKA,CAAC,EAC5F,OAAOW,EAAM,UAAW,OAAQ,4DAA4D,EAEzFX,EAAE,WAAW,GAAG,GAAGuB,EAAW,KAAKvB,CAAC,EAE3C,IAAMyB,EAAWF,EAAW,MAAM,CAAC,EACnC,GAAIE,EAAS,SAAW,EAAG,OAAOd,EAAM,UAAW,OAAQ,gEAAgE,EAC3H,QAAWe,KAAOD,EAAU,CAC1B,GAAIC,EAAI,WAAW,GAAG,GAAKA,EAAI,WAAW,GAAG,EAAG,OAAOf,EAAM,UAAW,OAAQ,YAAYe,4BAA8B,EAC1H,IAAMzD,GAAQyD,EAAI,SAAS,GAAG,EAAIA,EAAI,MAAMA,EAAI,QAAQ,GAAG,EAAI,CAAC,EAAIA,GAAK,QAAQ,iBAAkB,EAAE,EACrG,GAAIC,EAAiB,KAAK1D,CAAI,EAAG,OAAO0C,EAAM,UAAW,OAAQ,eAAe1C,2EAA8E,EAEhK,OAAO,IACT,CAEA,SAAS2D,EAAYvD,EAAmC,CACtD,QAAWwD,KAAQC,EACjB,GAAID,EAAK,GAAG,KAAKxD,CAAO,EAAG,OAAOsC,EAAM,UAAWkB,EAAK,GAAIA,EAAK,MAAM,EAEzE,IAAM3C,EAAOd,EAAUC,CAAO,EAC9B,GAAIa,IAAS,KAAM,OAAOyB,EAAM,UAAW,QAAS,iCAAiC,EACrF,QAAWC,KAAO3B,EAAcC,CAAI,EAAG,CACrC,IAAMG,EAAQD,EAAawB,CAAG,EAC9B,GAAIvB,EAAM,SAAW,EAAG,SACxB,IAAM0C,EAAO,CAACC,EAAS3C,EAAM,CAAC,CAAC,EAAG,GAAGA,EAAM,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,EAC7D,QAAWwC,KAAQI,EACjB,GAAIJ,EAAK,GAAG,KAAKE,CAAI,EAAG,OAAOpB,EAAM,UAAWkB,EAAK,GAAIA,EAAK,MAAM,EAEtE,GAAIG,EAAS3C,EAAM,CAAC,CAAC,IAAM,MAAO,CAChC,GAAM,CAAE,IAAAY,EAAK,KAAAC,CAAK,EAAIV,EAAcH,EAAM,MAAM,CAAC,CAAC,EAClD,GAAIY,IAAQ,OAAQ,CAClB,IAAMiC,EAAMZ,EAAepB,CAAI,EAC/B,GAAIgC,EAAK,OAAOA,IAItB,OAAOpB,CACT,CAEA,SAASqB,EAAYnB,EAAwC,CAC3D,GAAIA,EAAM,OAAS,OAAQ,OAAOY,EAAYZ,EAAM,SAAW,EAAE,EACjE,GAAIA,EAAM,KAAK,WAAW,OAAO,EAAG,CAClC,IAAMkB,EAAM/D,EAAe6C,EAAM,IAAI,EAAE,KAAM9C,GAAMkE,EAAkB,IAAIlE,CAAC,CAAC,EAC3E,GAAIgE,EAAK,OAAOvB,EAAM,UAAW,UAAW,SAASK,EAAM,uCAAuCkB,IAAM,EACxG,GAAIG,EAAalE,EAAe6C,EAAM,IAAI,CAAC,EACzC,OAAOL,EAAM,UAAW,WAAY,SAASK,EAAM,6EAA6E,EAGpI,OAAOF,CACT,CAIA,SAASuB,EAAahD,EAA0B,CAE9C,OADIA,EAAM,SAAS,UAAU,GAAKA,EAAM,SAAS,SAAS,GACtDA,EAAM,SAAS,OAAO,GAAKA,EAAM,KAAMnB,GAAMA,IAAM,QAAUA,IAAM,OAASA,IAAM,WAAaA,IAAM,MAAM,EAAU,GAClHmB,EAAM,SAAS,MAAM,GAAK,CAACA,EAAM,KAAMnB,GAAMmD,EAAW,IAAInD,CAAC,CAAC,CACvE,CAKO,SAASoE,EAAiBvE,EAAsBiD,EAAwC,CAC7F,OAAIjD,IAAU,SAAiBgD,EAAWC,CAAK,EAC3CjD,IAAU,UAAkBoE,EAAYnB,CAAK,EAC1CF,CACT,CAKO,SAASyB,EAAcxE,EAA8B,CAC1D,OAAIA,IAAU,SACL,oRAELA,IAAU,UACL,qSAEF,EACT,CAlaA,IA8BayE,EAqBP1B,EACAH,EAQAM,EAGAC,EA6BAG,EAKAe,EAMAhB,EAgEA7B,EACAD,EAsBA0C,EAIAnC,EASAM,EAKAI,EAmGAuB,EASAG,EAYAN,EAEAH,EA1UNiB,EAAAC,EAAA,kBA8BaF,EAAsB3E,EAAE,KAAK,CAAC,SAAU,UAAW,KAAK,CAAC,EAqBhEiD,EAA0B,CAAE,QAAS,GAAM,OAAQ,KAAM,OAAQ,IAAK,EACtEH,EAAQ,CAAC5C,EAAe4E,EAAYC,KAAsC,CAC9E,QAAS,GACT,OAAQ,YAAY7E,KAAS4E,IAC7B,OAAAC,CACF,GAIM3B,EAAc,IAAI,IAAI,CAAC,QAAS,OAAQ,YAAa,cAAc,CAAC,EAGpEC,EAAoB,IAAI,IAAI,CAChC,OAAQ,OAAQ,OAAQ,KAAM,eAAgB,WAAY,YAC1D,YAAa,WAAY,OAAQ,QAAS,QAAS,aACnD,aAAc,YAAa,eAAgB,gBAC3C,uBAAwB,qBAC1B,CAAC,EAwBKG,EAAa,IAAI,IAAI,CACzB,MAAO,OAAQ,SAAU,OAAQ,OAAQ,QAAS,QAAS,OAAQ,OAAQ,WAC3E,SAAU,OAAQ,UAAW,SAAU,QAAS,QAAS,SAAU,SAAU,UAC/E,CAAC,EAEKe,EAAoB,IAAI,IAAI,CAChC,QAAS,SAAU,SAAU,UAAW,OAAQ,SAAU,UAAW,UAAW,UAChF,UAAW,SAAU,QAAS,QAAS,WAAY,QAAS,WAAY,UAAW,QACnF,YAAa,WAAY,OAAQ,OAAQ,YAAa,YAAa,SACrE,CAAC,EAEKhB,EAAiB,IAAI,IAAI,CAC7B,GAAGgB,EACH,SAAU,SAAU,OAAQ,OAAQ,QAAS,OAAQ,MAAO,MAAO,UAAW,QAC9E,OAAQ,MAAO,UAAW,OAAQ,UAAW,SAAU,OAAQ,SAAU,SAAU,QACnF,SAAU,QAAS,QAAS,SAAU,SAAU,WAAY,QAAS,OAAQ,SAAU,OACvF,QAAS,MAAO,SAAU,SAAU,QAAS,UAAW,SAAU,OAAQ,SAAU,SACpF,UAAW,OAAQ,SAAU,OAAQ,QAAS,QAAS,WAAY,SAAU,YAC7E,UAAW,OAAQ,WAAY,UAAW,UAAW,WAAY,OAAQ,SAAU,KACrF,CAAC,EAwDK7C,EAAuB,IAAI,IAAI,CAAC,OAAQ,KAAM,OAAQ,OAAQ,KAAM,QAAS,QAAS,IAAK,IAAK,IAAK,MAAM,CAAC,EAC5GD,EAAsB,IAAI,IAAI,CAAC,OAAQ,KAAM,OAAQ,MAAO,OAAQ,SAAU,KAAM,IAAI,CAAC,EAsBzF0C,EAAY9D,GAAcA,EAAE,QAAQ,QAAS,EAAE,EAI/C2B,EAAwB,IAAI,IAAI,CACpC,KAAM,MAAO,KAAM,MAAO,OAAQ,OAAQ,KAAM,OAAQ,QAAS,QAAS,KAAM,KAAM,OACtF,OAAQ,OAAQ,KAAM,KAAM,OAAQ,SAAU,KAAM,WAAY,QAAS,QAAS,OAClF,OAAQ,OAAQ,MAAO,KAAM,OAAQ,MAAO,OAAQ,WAAY,UAAW,WAC3E,WAAY,KAAM,SAAU,KAAM,MAAO,OAAQ,QAAS,OAAQ,IAAK,QAAS,KAChF,SAAU,OAAQ,SAAU,SAAU,MAAO,SAAU,SAAU,YAAa,OAAQ,OACtF,WAAY,MAAO,WAAY,OAAQ,OAAQ,MAAO,KAAM,OAAQ,MACtE,CAAC,EAEKM,EAAW,IAAI,IAAI,CACvB,SAAU,MAAO,OAAQ,OAAQ,YAAa,WAAY,UAAW,QAAS,WAC9E,WAAY,WAAY,OAAQ,SAAU,MAAO,SAAU,SAAU,SAAU,WAC/E,aAAc,WAAY,WAAY,eAAgB,aACxD,CAAC,EACKI,EAAkB,IAAI,IAAI,CAAC,OAAQ,OAAQ,OAAQ,SAAU,SAAU,IAAI,CAAC,EAmG5EuB,EAAiC,CACrC,CAAE,GAAI,QAAS,GAAI,kDAAmD,OAAQ,qCAAsC,EACpH,CAAE,GAAI,QAAS,GAAI,6DAA8D,OAAQ,iDAAkD,EAC3I,CAAE,GAAI,SAAU,GAAI,yHAA0H,OAAQ,wCAAyC,EAC/L,CAAE,GAAI,SAAU,GAAI,qCAAsC,OAAQ,oCAAqC,EACvG,CAAE,GAAI,WAAY,GAAI,iIAAkI,OAAQ,wEAAyE,CAC3O,EAGMG,EAAqC,CACzC,CAAE,GAAI,QAAS,GAAI,0CAA2C,OAAQ,gCAAiC,EACvG,CAAE,GAAI,SAAU,GAAI,mFAAoF,OAAQ,iCAAkC,EAClJ,CAAE,GAAI,SAAU,GAAI,yIAA0I,OAAQ,iCAAkC,EACxM,CAAE,GAAI,SAAU,GAAI,0JAA2J,OAAQ,iCAAkC,EACzN,CAAE,GAAI,SAAU,GAAI,+QAAgR,OAAQ,kCAAmC,EAC/U,CAAE,GAAI,SAAU,GAAI,iKAAkK,OAAQ,kCAAmC,EACjO,CAAE,GAAI,SAAU,GAAI,uKAAwK,OAAQ,gDAAiD,EACrP,CAAE,GAAI,OAAQ,GAAI,6GAA8G,OAAQ,qDAAsD,EAC9L,CAAE,GAAI,WAAY,GAAI,wFAAyF,OAAQ,wFAAyF,CAClN,EAEMN,EAAmB,oGAEnBH,EAAkB","names":["z","isRestricted","level","toolWords","name","w","mcpActionWords","shellView","command","text","m","quote","_d","body","out","i","c","end","j","inner","shellSegments","view","s","commandWords","words","SHELL_KEYWORDS_SKIP","SHELL_KEYWORDS_STRIP","gitSubcommand","args","reportShellWord","cmd","base","REPORT_SHELL_COMMANDS","has","re","a","sub","rest","GIT_READ","group","action","method","GH_READ_ACTIONS","hasWritingRedirect","cleaned","reportBash","block","seg","why","ALLOW","reportTool","input","WRITE_TOOLS","REPORT_SAFE_TOOLS","mutating","MUTATING_VERBS","READ_VERBS","proposeGitPush","positional","PUSH_VALUE_OPTS","refspecs","ref","PROTECTED_BRANCH","proposeBash","rule","PROPOSE_RAW_RULES","line","baseName","PROPOSE_COMMAND_RULES","hit","proposeTool","DESTRUCTIVE_VERBS","isDelegation","evaluateAutonomy","autonomyBrief","autonomyLevelSchema","init_autonomy","__esmMin","id","reason"]}

package/dist/{chunk-6G72CCT2.js → chunk-2W3UVIEG.js}

@@ -1,4 +1,4 @@
-import{b as Xe,c as et}from"./chunk-GLQLCBJS.js";import{c as Ge}from"./chunk-SZDACK6O.js";import{b as ce}from"./chunk-AFRHKA7B.js";import{b as ze,e as Je,f as qe,i as Ve,k as Ze,l as Qe,q as tt}from"./chunk-CG3FSQ23.js";import{c as Ue,e as Ke,f as Be}from"./chunk-KA2UIZXG.js";import{e as _e,g as Le,h as He,i as de}from"./chunk-GQ76J72O.js";import{a as Ye}from"./chunk-GV7S5BAX.js";import{a as Ce,b as oe,c as se,d as Me,e as ae}from"./chunk-QD6IICK7.js";import{v as Fe,w as an}from"./chunk-C4YY6746.js";import{b as je,f as sn}from"./chunk-72SZI2UW.js";import{c as Ee,d as De}from"./chunk-QOYAX2FT.js";import{a as ie,i as on}from"./chunk-PN6XHTG5.js";import{existsSync as dn,mkdirSync as nt,readFileSync as cn,writeFileSync as ln,renameSync as un}from"fs";import{resolve as rt,dirname as pn}from"path";var it=class{filePath;log;constructor(e={}){let t=e.baseDir??rt(process.cwd(),".agentx");this.filePath=rt(t,"handover.json"),this.log=e.log??console.error.bind(console,"[handover]"),nt(t,{recursive:!0})}key(e,t,n){return`${e}::${t}::${n||"-"}`}load(){if(!dn(this.filePath))return{version:1,overrides:{}};try{let e=cn(this.filePath,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"?{version:1,overrides:{}}:(t.overrides||(t.overrides={}),t)}catch(e){return this.log(`load failed, starting empty: ${e?.message||e}`),{version:1,overrides:{}}}}save(e){nt(pn(this.filePath),{recursive:!0});let t=`${this.filePath}.tmp-${process.pid}`;ln(t,JSON.stringify(e,null,2)),un(t,this.filePath)}get(e,t,n){let o=this.load().overrides[this.key(e,t,n)];if(o&&!(o.expiresAt&&Date.parse(o.expiresAt)<Date.now()))return o}set(e){if(!e.channel||!e.chatId||!e.toAgent)throw new Error("channel, chatId and toAgent are required");let t=this.load(),n={...e,createdAt:e.createdAt??new Date().toISOString()};return t.overrides[this.key(n.channel,n.chatId,n.accountId)]=n,this.save(t),n}remove(e,t,n){let i=this.load(),o=this.key(e,t,n);return o in i.overrides?(delete i.overrides[o],this.save(i),!0):!1}consumeSummary(e,t,n){let i=this.load(),o=i.overrides[this.key(e,t,n)];if(!o||!o.summary||o.summaryConsumedAt)return;let s=o.summary;return o.summaryConsumedAt=new Date().toISOString(),this.save(i),s}listActive(){let e=this.load(),t=Date.now();return Object.values(e.overrides).filter(n=>!n.expiresAt||Date.parse(n.expiresAt)>=t)}listByAgent(e){let t=this.listActive();return{incoming:t.filter(n=>n.toAgent===e),outgoing:t.filter(n=>n.fromAgent===e)}}};import{readFileSync as ct,writeFileSync as le,appendFileSync as hn,mkdirSync as yn,existsSync as lt,statSync as wn}from"fs";import{resolve as U}from"path";var ot="[Agent Memory \u2014 persistent facts from past conversations]",fn=2400;function st(r,e){return r?`UNVERIFIED (${e===null?"age unknown":`${e}d old`}) `:""}function gn(r,e=Date.now()){let t=Ke(r,e),n=r.undated?"UNVERIFIED (never checked) ":st(t,_e(r.verifiedAt,e));return{line:`- [wiki ${r.id}] ${n}${r.subject} \xB7 ${r.attribute}: ${r.value} (${r.source}, checked ${r.verifiedAt.slice(0,10)} by ${r.verifiedBy})`,unverified:t}}function mn(r,e){let n=!r.source.chatId.startsWith("-")&&/^\d+$/.test(r.source.chatId)?"DM":r.source.chatId,i=He(r,e);return{line:`- [${r.category}] ${st(i,Le(r,e))}${r.content} (${n}, ${r.source.date})`,unverified:i}}function at(r,e=[],t=Date.now()){let n=[],i=new Set,o=ot.length,s=!1;for(let a of r){let d=e.length>0?Be(a.content,e):null,c,u,p=d&&Date.parse(a.createdAt)>Date.parse(d.verifiedAt)&&!a.content.toLowerCase().includes(d.value.toLowerCase());if(d&&!p){if(i.has(d.id))continue;i.add(d.id),c=gn(d,t),u=d.id}else c=mn(a,t),d&&(c.line+=` [differs from wiki ${d.id}]`);let f=c.unverified&&!s?de.length:0;if(o+f+c.line.length>fn)break;n.push({fact:a,...c,...u?{wikiRef:u}:{}}),o+=f+c.line.length,f&&(s=!0)}return n}function dt(r){if(r.length===0)return"";let e=r.some(t=>t.unverified)?[de]:[];return[ot,...e,...r.map(t=>t.line),"[End Memory]"].join(`
+import{b as Xe,c as et}from"./chunk-GLQLCBJS.js";import{c as Ge}from"./chunk-SZDACK6O.js";import{b as ce}from"./chunk-AFRHKA7B.js";import{b as ze,e as Je,f as qe,i as Ve,k as Ze,l as Qe,q as tt}from"./chunk-IUQOOSD4.js";import{c as Ue,e as Ke,f as Be}from"./chunk-KA2UIZXG.js";import{e as _e,g as Le,h as He,i as de}from"./chunk-GQ76J72O.js";import{a as Ye}from"./chunk-GV7S5BAX.js";import{a as Ce,b as oe,c as se,d as Me,e as ae}from"./chunk-QD6IICK7.js";import{v as Fe,w as an}from"./chunk-K2NFNNDB.js";import{b as je,f as sn}from"./chunk-72SZI2UW.js";import{c as Ee,d as De}from"./chunk-QOYAX2FT.js";import{a as ie,i as on}from"./chunk-PN6XHTG5.js";import{existsSync as dn,mkdirSync as nt,readFileSync as cn,writeFileSync as ln,renameSync as un}from"fs";import{resolve as rt,dirname as pn}from"path";var it=class{filePath;log;constructor(e={}){let t=e.baseDir??rt(process.cwd(),".agentx");this.filePath=rt(t,"handover.json"),this.log=e.log??console.error.bind(console,"[handover]"),nt(t,{recursive:!0})}key(e,t,n){return`${e}::${t}::${n||"-"}`}load(){if(!dn(this.filePath))return{version:1,overrides:{}};try{let e=cn(this.filePath,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"?{version:1,overrides:{}}:(t.overrides||(t.overrides={}),t)}catch(e){return this.log(`load failed, starting empty: ${e?.message||e}`),{version:1,overrides:{}}}}save(e){nt(pn(this.filePath),{recursive:!0});let t=`${this.filePath}.tmp-${process.pid}`;ln(t,JSON.stringify(e,null,2)),un(t,this.filePath)}get(e,t,n){let o=this.load().overrides[this.key(e,t,n)];if(o&&!(o.expiresAt&&Date.parse(o.expiresAt)<Date.now()))return o}set(e){if(!e.channel||!e.chatId||!e.toAgent)throw new Error("channel, chatId and toAgent are required");let t=this.load(),n={...e,createdAt:e.createdAt??new Date().toISOString()};return t.overrides[this.key(n.channel,n.chatId,n.accountId)]=n,this.save(t),n}remove(e,t,n){let i=this.load(),o=this.key(e,t,n);return o in i.overrides?(delete i.overrides[o],this.save(i),!0):!1}consumeSummary(e,t,n){let i=this.load(),o=i.overrides[this.key(e,t,n)];if(!o||!o.summary||o.summaryConsumedAt)return;let s=o.summary;return o.summaryConsumedAt=new Date().toISOString(),this.save(i),s}listActive(){let e=this.load(),t=Date.now();return Object.values(e.overrides).filter(n=>!n.expiresAt||Date.parse(n.expiresAt)>=t)}listByAgent(e){let t=this.listActive();return{incoming:t.filter(n=>n.toAgent===e),outgoing:t.filter(n=>n.fromAgent===e)}}};import{readFileSync as ct,writeFileSync as le,appendFileSync as hn,mkdirSync as yn,existsSync as lt,statSync as wn}from"fs";import{resolve as U}from"path";var ot="[Agent Memory \u2014 persistent facts from past conversations]",fn=2400;function st(r,e){return r?`UNVERIFIED (${e===null?"age unknown":`${e}d old`}) `:""}function gn(r,e=Date.now()){let t=Ke(r,e),n=r.undated?"UNVERIFIED (never checked) ":st(t,_e(r.verifiedAt,e));return{line:`- [wiki ${r.id}] ${n}${r.subject} \xB7 ${r.attribute}: ${r.value} (${r.source}, checked ${r.verifiedAt.slice(0,10)} by ${r.verifiedBy})`,unverified:t}}function mn(r,e){let n=!r.source.chatId.startsWith("-")&&/^\d+$/.test(r.source.chatId)?"DM":r.source.chatId,i=He(r,e);return{line:`- [${r.category}] ${st(i,Le(r,e))}${r.content} (${n}, ${r.source.date})`,unverified:i}}function at(r,e=[],t=Date.now()){let n=[],i=new Set,o=ot.length,s=!1;for(let a of r){let d=e.length>0?Be(a.content,e):null,c,u,p=d&&Date.parse(a.createdAt)>Date.parse(d.verifiedAt)&&!a.content.toLowerCase().includes(d.value.toLowerCase());if(d&&!p){if(i.has(d.id))continue;i.add(d.id),c=gn(d,t),u=d.id}else c=mn(a,t),d&&(c.line+=` [differs from wiki ${d.id}]`);let f=c.unverified&&!s?de.length:0;if(o+f+c.line.length>fn)break;n.push({fact:a,...c,...u?{wikiRef:u}:{}}),o+=f+c.line.length,f&&(s=!0)}return n}function dt(r){if(r.length===0)return"";let e=r.some(t=>t.unverified)?[de]:[];return[ot,...e,...r.map(t=>t.line),"[End Memory]"].join(`
 `)}var ut=200,kn=7,pt=class{memoryDir;ledger;constructor(e=process.cwd()){this.memoryDir=U(e,".agentx/memory"),this.ledger=new Ue(U(e,".agentx/wiki")),lt(this.memoryDir)||yn(this.memoryDir,{recursive:!0})}filePath(e){return U(this.memoryDir,`${e}.jsonl`)}addMemory(e,t){if(t.category==="secret"||oe(t.content))return!1;let n=t.source.trust??Ce(t.source.channel),i=t.review??Me(n),o={...t,source:{...t.source,trust:n},...i?{review:i}:{},id:`${Date.now().toString(36)}-${Math.random().toString(36).slice(2,6)}`,createdAt:new Date().toISOString()};return hn(this.filePath(e),JSON.stringify(o)+`
 `),!0}parsedCache=new Map;getAll(e){let t=this.filePath(e);if(!lt(t))return[];try{let{mtimeMs:n,size:i}=wn(t),o=this.parsedCache.get(t);if(o&&o.mtimeMs===n&&o.size===i)return o.facts.slice();let a=ct(t,"utf-8").split(`
 `).filter(d=>d.trim()).map(d=>{try{return JSON.parse(d)}catch{return null}}).filter(d=>d!==null);return this.parsedCache.set(t,{mtimeMs:n,size:i,facts:a}),a.slice()}catch{return[]}}findRelevant(e,t,n=8){let i=this.getAll(t).filter(ae);if(i.length===0)return[];let o=i.map(g=>`${g.keywords.join(" ")} ${g.content}`),s=U(this.memoryDir,`${t}_bm25_cache.json`),a=De(o,s),d=Ee(e,a),c=new Map(d.map(g=>[g.docIndex,g.score])),p=i.map((g,h)=>{let m=c.get(h)??0;return g.category==="commitment"&&(m+=1),{memory:g,score:m}}).filter(g=>g.score>0);if(p.length===0)return i.slice(-n);let f=p.sort((g,h)=>h.score-g.score).slice(0,n).map(g=>g.memory);if(f.length>0)try{this.recordAccess(t,f.map(g=>g.id))}catch{}return f}buildContext(e){return dt(this.contextLines(e))}contextFacts(e){return this.contextLines(e).map(t=>t.fact)}contextLines(e){let t=[];try{t=this.ledger.list()}catch{}return at(e,t)}recordAccess(e,t){if(t.length===0)return;let n=this.getAll(e),i=new Set(t),o=!1;for(let s of n)if(i.has(s.id)){s.accessCount=(s.accessCount||0)+1,s.lastAccessed=new Date().toISOString();let a=s.intervalDays||1;s.intervalDays=Math.min(a*2,30),s.nextReview=new Date(Date.now()+s.intervalDays*864e5).toISOString(),o=!0}o&&le(this.filePath(e),n.map(s=>JSON.stringify(s)).join(`
@@ -19,4 +19,4 @@ import{b as Xe,c as et}from"./chunk-GLQLCBJS.js";import{c as Ge}from"./chunk-SZD
 `),n}sync(e,t){let n=this.get(e);if(!n)return null;let i={};for(let s of t)n.nodes[s]&&(i[s]=n.nodes[s]);let o={version:1,nodes:i};return this.save(e,o)}delete(e){let t=this.pathFor(e);return Nt(t)?(Gn(t),!0):!1}};function Wt(r){return new Set(r.toLowerCase().replace(/[^a-z0-9\s]/g," ").split(/\s+/).filter(e=>e.length>3))}function Zn(r,e){if(r.size===0||e.size===0)return 0;let t=0;for(let n of r)e.has(n)&&t++;return t/Math.max(r.size,e.size)}function Qn(r,e){let t=Wt(r.message),n=e.filter(o=>o.state==="active"&&(o.status??"active")==="active"),i=null;for(let o of n){let s=0,a=[];if(o.ownerAgent&&o.ownerAgent===r.agentId&&(s+=.25,a.push("owner-agent")),r.channel&&o.tags.includes(r.channel)&&(s+=.15,a.push("channel-tag")),r.intentPath?.length&&o.intentPath.length){let p=r.intentPath.filter((f,g)=>o.intentPath[g]===f).length;p>0&&(s+=Math.min(.3,p*.1),a.push("intent-path"))}let d=[o.id,o.title,o.description??"",...o.tags].join(" "),c=Zn(t,Wt(d));c>0&&(s+=Math.min(.35,c),a.push("text-similarity")),(o.matchCount??0)>0&&(s+=Math.min(.1,o.matchCount*.01),a.push("prior-matches"));let u=Math.max(0,Math.min(1,s));(!i||u>i.confidence)&&(i={workflow:o,confidence:u,reasons:a})}return i&&i.confidence>0?i:null}function ve(r){let{workflow:e,fromNodeId:t,selectedPort:n}=r,i=e.nodes.find(a=>a.id===t);if(!i)return{nextPending:[]};let o=e.edges.filter(a=>a.from===t);return{nextPending:(i.type==="branch"?o.filter(a=>(a.fromPort??"")===(n??"")):o).map(a=>a.to)}}function Se(r,e){let t=r.config.cases??[],n=r.config.default??"";for(let i of t)if(Y(i.when,e))return i.to;return n}function Y(r,e){let t=r.params??{},n=String(t.path??""),i=j(e,n);switch(r.kind){case"equals":return i===t.value;case"contains":return typeof i=="string"?i.includes(String(t.value??"")):Array.isArray(i)?i.some(o=>o===t.value):!1;case"matches":{if(typeof i!="string")return!1;try{return new RegExp(String(t.regex??"")).test(i)}catch{return!1}}case"exists":return i!=null&&i!=="";default:return!1}}function j(r,e){if(!e)return;let t=e.split("."),n=r;for(let i of t){if(n==null||typeof n!="object")return;n=n[i]}return n}function G(r){let e=r.nodes.find(n=>n.type.startsWith("trigger."));if(!e)return null;let t=r.edges.filter(n=>n.from===e.id).map(n=>n.to);return{triggerId:e.id,pending:t}}function N(r,e){return r.nodes.find(t=>t.id===e)}sn();an();function Xn(r,e,t){let n=r.split(".");if(n[0]==="env"){if(n.length!==2)return"";let o=n[1];if(!t.has(o))return"";let s=process.env[o];return typeof s=="string"?s:""}let i=e;for(let o of n){if(i==null||typeof i!="object")return"";i=i[o]}return i==null?"":typeof i=="object"?JSON.stringify(i):String(i)}function A(r,e,t={}){let n=new Set(t.envAllow||[]);return r.replace(/\{\{\s*([a-zA-Z_][a-zA-Z0-9_.-]*)\s*\}\}/g,(i,o)=>Xn(o,e,n))}function b(r,e,t={}){let n={};for(let[i,o]of Object.entries(r))typeof o=="string"?n[i]=A(o,e,t):Array.isArray(o)?n[i]=o.map(s=>typeof s=="string"?A(s,e,t):s):o&&typeof o=="object"?n[i]=b(o,e,t):n[i]=o;return n}var Et="workflow-classify",V="unsure",Dt=async r=>{let e=r.node.config,t=r.run.context,n={envAllow:r.workflow.envAllow},i=A(String(e.input??""),t,n).trim();if(!i)return{error:`classify node "${r.node.id}" missing config.input`};let o=e.labels,s=Array.isArray(o)?Object.fromEntries(o.map(m=>[String(m),null])):typeof o=="object"&&o?Object.fromEntries(Object.entries(o).map(([m,w])=>[m,w==null?null:String(w)])):{},a=Object.keys(s);if(a.length<2)return{error:`classify node "${r.node.id}" needs at least two labels`};if(a.includes(V))return{error:`classify node "${r.node.id}": "${V}" is reserved for the low-confidence port`};let d=typeof e.minConfidence=="number"?e.minConfidence:.7,c=e.instructions?A(String(e.instructions),t,n):void 0,u={input:i};if(e.state&&typeof e.state=="object")for(let[m,w]of Object.entries(e.state)){let y=typeof w=="string"?A(w,t,n):w;(y===null||["string","number","boolean"].includes(typeof y))&&(u[m]=y)}let p=await Fe(Et,u,{label:je(s,c)},{features:{workflow:r.workflow.id,node:r.node.id}});if(!p)return{error:`classify node "${r.node.id}": decision seat unavailable (set decisions.seats.${Et}.mode)`};let f=p.answers.label,g=f.confidence>=d,h=g?f.choice:V;return r.log(`[node:${r.node.id}] classify \u2192 ${f.choice} (${f.confidence.toFixed(2)})${g?"":` \u2014 below ${d}, routing to ${V}`}`),{output:{result:f.choice,label:f.choice,confidence:f.confidence,probabilities:f.probabilities,unsure:!g,port:h},port:h}};var Ie=class{active=new Map;waiters=new Map;async acquire(e,t){let n=this.active.get(e)??0;if(n<t){this.active.set(e,n+1);return}return new Promise(i=>{let o=this.waiters.get(e)??[];o.push({resolve:()=>{this.active.set(e,(this.active.get(e)??0)+1),i()}}),this.waiters.set(e,o)})}release(e){let t=this.active.get(e)??0;this.active.set(e,Math.max(0,t-1));let n=this.waiters.get(e);n&&n.length>0&&n.shift().resolve()}stats(e){return{active:this.active.get(e)??0,waiting:this.waiters.get(e)?.length??0}}},Z=new Ie;function jt(r,e){return`${r}:${e}`}var F=async r=>({output:r.run.context[r.node.id]??{}}),er=async r=>{let e=r.node.config,t=String(e.agentId??""),n=String(e.prompt??"");if(!t)return{error:`agent node "${r.node.id}" missing config.agentId`};let i=A(n,r.run.context,{envAllow:r.workflow.envAllow}),o=typeof e.timeoutMinutes=="number"?e.timeoutMinutes:void 0,s=e.autonomy===void 0||e.autonomy===null?void 0:String(e.autonomy);if(s!==void 0&&s!=="report"&&s!=="propose"&&s!=="act")return{error:`agent node "${r.node.id}" has invalid autonomy "${s}" (expected report, propose or act)`};let a=typeof e.maxConcurrent=="number"&&e.maxConcurrent>0?e.maxConcurrent:null,d=a?jt(r.workflow.id,r.node.id):null;if(d&&a){let u=Z.stats(d);u.active>=a&&r.log(`[node:${r.node.id}] gated: ${u.active} active (cap ${a}), ${u.waiting+1} waiting`),await Z.acquire(d,a)}let c=Date.now();try{let u=await r.agents.execute({agentId:t,message:i,workflowRunId:r.run.id,timeoutMinutes:o,...s?{autonomy:s}:{}}),p=Date.now()-c;if(u.error){let h=u.errorKind??"unknown";return r.log(`[node:${r.node.id}] agent "${t}" failed (${h}): ${u.error}`),{error:`[${h}] ${u.error}`}}let g=String(e.resultParser??"acme-result-token")==="json"?Ar(u.content):Ct(u.content);return{output:{reply:u.content,result:g.result,json:g.json,taskId:u.taskId,durationMs:p,...u.autonomyBlocks?.length?{autonomyBlocks:u.autonomyBlocks}:{}}}}catch(u){return r.log(`[node:${r.node.id}] agent "${t}" threw: ${u.message}`),{error:u.message}}finally{d&&Z.release(d)}},tr=async r=>{let e=Se(r.node,r.run.context);return e?{output:{port:e},port:e}:(r.log(`[node:${r.node.id}] branch matched no case and no default port`),{output:{port:null}})},nr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??""),n=String(e.chatId??""),i=String(e.text??"");if(!t||!n){let a=String(r.node.config.chatId??""),d=String(r.node.config.channel??""),c=[];return t||c.push(`channel config="${d}" rendered=""`),n||c.push(`chatId config="${a}" rendered=""`),(/\{\{\s*env\./.test(a)||/\{\{\s*env\./.test(d))&&c.push("(env.* templates only resolve for names listed in workflow.envAllow and actually set in process.env)"),{error:`action.send "${r.node.id}" needs channel + chatId \u2014 ${c.join("; ")}`}}let o=Re(r,e.accountId),s=r.channels[t];if(s?.send)try{return{output:{messageId:await s.send({channel:t,chatId:n,text:i,...o?{accountId:o}:{}})??null}}}catch(a){return{error:`action.send failed: ${a.message}`}}if(r.forwardChannelSend)try{return{output:{messageId:(await r.forwardChannelSend({channel:t,chatId:n,text:i,accountId:o})).messageId,viaMesh:!0}}}catch(a){return r.log(`[node:${r.node.id}] mesh-forward of "${t}" send failed: ${a.message}`),{error:`action.send via mesh failed: ${a.message}`}}return r.log(`[node:${r.node.id}] adapter "${t}" not available locally and no mesh forwarder`),{error:`channel "${t}" not available (no local adapter, no mesh route)`}},rr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??"gitlab"),n=String(e.project??""),i=String(e.title??""),o=String(e.description??""),s=Array.isArray(e.labels)?e.labels.map(String):[],a=Array.isArray(e.assignees)?e.assignees.map(String):[];if(!n||!i)return{error:`action.createIssue "${r.node.id}" needs project + title`};let d=$e(r),c=r.channels[t];if(!c?.createIssue)return{error:`channel "${t}" does not support createIssue`};try{let u=await c.createIssue({project:n,title:i,description:o,labels:s,assignees:a,agentId:d});return u?{output:{issue:{iid:u.iid,url:u.url,webUrl:u.url}}}:{error:"createIssue returned null (see adapter log)"}}catch(u){return{error:`action.createIssue failed: ${u.message}`}}},ir=async()=>({output:{}}),or=async r=>{let e=r.node.config,t=String(e.name??r.node.id),n=e.waitFor??{},i=e.resumeMatch??{};return{paused:!0,pausedAt:{kind:"checkpoint",nodeId:r.node.id,checkpointName:t,resumeMatch:{...n,...i}}}},sr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??"gitlab"),n=String(e.project??""),i=String(e.iid??""),o=Array.isArray(e.add)?e.add.map(String):[],s=Array.isArray(e.remove)?e.remove.map(String):[];if(!n||!i)return{error:`action.setLabel "${r.node.id}" needs project + iid (try {{trigger.project}} / {{trigger.issue.iid}})`};if(o.length===0&&s.length===0)return{output:{skipped:!0,reason:"no labels to add or remove"}};let a=r.channels[t];if(!a?.setLabels)return{error:`channel "${t}" does not support setLabels`};let d=$e(r),c=e.kind==="merge_request"?"merge_request":"issue";return{output:{labels:await a.setLabels({project:n,kind:c,iid:i,add:o,remove:s,agentId:d})??[],add:o,remove:s}}},ar=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??"gitlab"),n=String(e.project??""),i=String(e.iid??"");if(!n||!i)return{error:`action.readLabel "${r.node.id}" needs project + iid`};let o=r.channels[t];if(!o?.getLabels)return{error:`channel "${t}" does not support getLabels`};let s=e.kind==="merge_request"?"merge_request":"issue";return{output:{labels:await o.getLabels({project:n,kind:s,iid:i})??[]}}},dr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??""),n=String(e.chatId??""),i=String(e.messageId??""),o=String(e.emoji??"\u{1F440}");if(!t||!n||!i)return{error:`action.react "${r.node.id}" needs channel + chatId + messageId`};let s=Re(r,e.accountId),a=r.channels[t];if(!a?.react)return{error:`channel "${t}" does not support react`};try{return await a.react(n,i,o,s),{output:{emoji:o}}}catch(d){return{error:`action.react failed: ${d.message}`}}},cr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??""),n=String(e.chatId??""),i=String(e.messageId??""),o=String(e.text??""),s=e.parseMode?String(e.parseMode):void 0;if(!t||!n||!i||!o)return{error:`action.editMessage "${r.node.id}" needs channel + chatId + messageId + text`};let a=Re(r,e.accountId),d=r.channels[t];if(!d?.editMessage)return{error:`channel "${t}" does not support editMessage`};try{return{output:{edited:await d.editMessage(n,i,o,s,a)}}}catch(c){return{error:`action.editMessage failed: ${c.message}`}}},lr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.channel??"gitlab"),n=String(e.chatId??""),i=Number(e.durationMs??0);if(!n||!i)return{error:`action.logTime "${r.node.id}" needs chatId + durationMs`};let o=r.channels[t];if(!o?.logTimeSpent)return{error:`channel "${t}" does not support logTimeSpent`};let s=$e(r);try{return await o.logTimeSpent(n,i,s),{output:{durationMs:i}}}catch(a){return{error:`action.logTime failed: ${a.message}`}}},ur=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.url??"");if(!t)return{error:`action.callHTTP "${r.node.id}" needs url`};let n=String(e.method??"POST").toUpperCase(),i=e.headers&&typeof e.headers=="object"?e.headers:{"Content-Type":"application/json"},o;e.body!==void 0&&(o=typeof e.body=="string"?e.body:JSON.stringify(e.body));try{let s=await fetch(t,{method:n,headers:i,body:o}),a=await s.text(),d=a;try{d=JSON.parse(a)}catch{}return{output:{ok:s.ok,status:s.status,body:d}}}catch(s){return{error:`action.callHTTP failed: ${s.message}`}}},pr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.actionId??e.id??"");if(!t)return{error:`action.run "${r.node.id}" needs actionId`};let n=e.inputs&&typeof e.inputs=="object"?e.inputs:{},{ActionStore:i}=await import("./store-TWQPEM5V.js"),{runAction:o}=await import("./runner-56G3N7M4.js"),s=new i().get(t);if(!s)return{error:`action.run "${r.node.id}": no action "${t}" in registry`};try{let a=await o(s,n),d={ok:a.ok,output:a.output,status:a.status,durationMs:a.durationMs};return a.errors!==void 0&&(d.errors=a.errors),a.ok?{output:d}:{output:d,error:`action "${t}" failed (status=${a.status})`}}catch(a){return{error:`action.run failed: ${a.message}`}}},fr=async r=>{let e=b(r.node.config,r.run.context,{envAllow:r.workflow.envAllow}),t=String(e.name??"");if(!t)return{error:`action.builtin "${r.node.id}" needs a "name" (e.g. "http.fetch")`};let n=e.input&&typeof e.input=="object"?e.input:{},{runBuiltin:i,getBuiltin:o}=await import("./builtin-W6KNX7RS.js");if(!o(t))return{error:`action.builtin "${r.node.id}": unknown built-in "${t}"`};try{return{output:await i(t,n)}}catch(s){let a=s?.name==="ZodError"?`validation: ${s.message}`:s?.message||String(s);return{error:`action.builtin "${t}" failed: ${a}`}}},gr=async r=>{let e=r.node.config,t=r.run.context;return typeof e.path=="string"&&e.path?{output:{value:j(t,e.path)}}:e.template&&typeof e.template=="object"?{output:b(e.template,t,{envAllow:r.workflow.envAllow})}:{output:{}}};function mr(r){if(r!=null){if(typeof r=="number")return new Date(Date.now()+r*6e4).toISOString();if(typeof r=="object"&&r&&"minutes"in r){let e=Number(r.minutes);if(Number.isFinite(e))return new Date(Date.now()+e*6e4).toISOString()}if(typeof r=="string"){let e=/^P(?:([0-9]+)D)?(?:T(?:([0-9]+)H)?(?:([0-9]+)M)?(?:([0-9]+)S)?)?$/.exec(r);if(e){let t=Number(e[1]??0),n=Number(e[2]??0),i=Number(e[3]??0),o=Number(e[4]??0),s=((t*24+n)*60+i)*6e4+o*1e3;if(s>0)return new Date(Date.now()+s).toISOString()}}}}var hr=async r=>{let e=r.node.config,t=b(e,r.run.context,{envAllow:r.workflow.envAllow}),n=String(t.workflowId??"");if(!n)return{error:`subProcess "${r.node.id}" missing config.workflowId`};let i=r.run.depth??0,o=r.workflow.maxChildDepth??5;if(i+1>=o)return{error:`max child workflow depth ${o} exceeded at ${r.workflow.id} \u2192 ${n} (parent depth ${i})`};let s=e.inputMap,a={};if(s==="*")a={...r.run.context};else if(s&&typeof s=="object")for(let[d,c]of Object.entries(s))c&&typeof c=="object"&&!Array.isArray(c)?a[d]=b(c,r.run.context,{envAllow:r.workflow.envAllow}):typeof c=="string"&&(a[d]={value:A(c,r.run.context,{envAllow:r.workflow.envAllow})});return{paused:!0,pausedAt:{kind:"subProcess",nodeId:r.node.id,childRunId:"",childWorkflowId:n},spawnChild:{workflowId:n,input:a}}},yr=F,wr=async r=>{let e=r.node.config,t=b(e,r.run.context,{envAllow:r.workflow.envAllow}),n=String(t.name??"");if(!n)return{error:`signal.emit "${r.node.id}" missing config.name`};let i=t.scope==="global"?"global":"workflow",o=t.payload&&typeof t.payload=="object"?t.payload:{};return{output:{emittedAt:new Date().toISOString(),name:n,scope:i,payload:o},emitSignal:{name:n,scope:i,payload:o}}},kr=async r=>{let e=r.node.config,t=b(e,r.run.context,{envAllow:r.workflow.envAllow}),n=String(t.name??"");if(!n)return{error:`signal.wait "${r.node.id}" missing config.name`};let i=t.scope==="global"?"global":"workflow",o=e.match&&typeof e.match=="object"?e.match:{};return{paused:!0,pausedAt:{kind:"signalWait",nodeId:r.node.id,signalName:n,match:o,scope:i}}},br=async r=>{let e=r.node.config,t=b(e,r.run.context,{envAllow:r.workflow.envAllow}),n=mr(t.after??e.after);return n?{paused:!0,pausedAt:{kind:"timerWait",nodeId:r.node.id,fireAt:n}}:{error:`timer.boundary "${r.node.id}" needs config.after (duration or minutes)`}},vr=async()=>({output:{}}),Sr=async r=>{let e=r.node.config,n=(Array.isArray(e.inputs)?e.inputs:[]).map(s=>typeof s=="string"?A(s,r.run.context,{envAllow:r.workflow.envAllow}):s),i=Array.isArray(e.rules)?e.rules:[];for(let s of i){let a=Array.isArray(s.when)?s.when:[];if(a.length!==n.length)continue;let d=!0;for(let c=0;c<a.length;c++)if(!Ir(a[c],n[c])){d=!1;break}if(d)return{output:{...s.output??{},matchedPort:s.to??""},port:s.to}}let o=e.default;return{output:{...o?.output??{},matchedPort:o?.to??""},port:o?.to}};function Ir(r,e){if(r==null||r==="*")return!0;let t=String(r),n=typeof e=="number"?e:String(e??""),i=/^(>=|<=|>|<)\s*(-?\d+(?:\.\d+)?)$/.exec(t);if(i){let o=i[1],s=Number(i[2]),a=typeof n=="number"?n:Number(n);if(Number.isNaN(a))return!1;switch(o){case">":return a>s;case"<":return a<s;case">=":return a>=s;case"<=":return a<=s}}if(t.startsWith("!="))return String(n)!==t.slice(2);if(t.startsWith("/")&&t.endsWith("/")&&t.length>2)try{return new RegExp(t.slice(1,-1)).test(String(n))}catch{return!1}return String(n)===t}var Ft={"trigger.channel":F,"trigger.manual":F,"trigger.cron":F,"trigger.hook":F,"trigger.form":yr,"trigger.poll":F,agent:er,classify:Dt,branch:tr,transform:gr,"gateway.parallel":vr,rule:Sr,"action.send":nr,"action.createIssue":rr,"action.setLabel":sr,"action.readLabel":ar,"action.react":dr,"action.editMessage":cr,"action.logTime":lr,"action.callHTTP":ur,"action.run":pr,"action.builtin":fr,subProcess:hr,"signal.emit":wr,"signal.wait":kr,"timer.boundary":br,checkpoint:or,end:ir};function Ae(r){return Ft[r]}function Re(r,e){if(typeof e=="string"&&e)return e;let t=r.workflow.nodes.find(o=>o.type.startsWith("trigger."));if(!t)return;let i=r.run.context[t.id]?.accountId;return typeof i=="string"&&i?i:void 0}function $e(r){for(let e=r.run.history.length-1;e>=0;e--){let t=r.run.history[e],n=r.workflow.nodes.find(i=>i.id===t.nodeId);if(n?.type==="agent")return n.config.agentId??void 0}}function Ct(r){if(!r)return{};let e=r.match(/\bRESULT:\s*([a-z][a-z0-9_-]*)/i);if(e)return{result:e[1].toLowerCase()};let t=r.match(/\[(APPROVED|REJECTED|CHANGES[-_]REQUESTED|DONE|FAILED|SKIPPED)\]/i);return t?{result:t[1].toLowerCase().replace("_","-")}:{}}function Ar(r){let{result:e}=Ct(r);if(!r)return{result:e};let t=r.match(/```(?:json)?\s*([\s\S]*?)```/);if(!t)return{result:e};try{return{result:e,json:JSON.parse(t[1])}}catch{return{result:e}}}var M=class{handlers=new Set;subscribe(e){return this.handlers.add(e),()=>this.handlers.delete(e)}emit(e){for(let t of this.handlers)try{Promise.resolve(t(e)).catch(()=>{})}catch{}}};function Q(r,e){if(r.name!==e.name||r.scope==="workflow"&&r.workflowId!==e.workflowId)return!1;for(let[t,n]of Object.entries(r.match??{}))if(!(n===void 0||n===""||n==="*")&&e.payload[t]!==n)return!1;return!0}function Rr(r,e,t=Date.now){return{ts:t(),source:"workflow",sourceEventId:`${r.workflowId}:${r.eventId}`,project:r.project,subject:`workflow:${r.workflowId}:entity:${r.entityRef.backend}:${r.entityRef.id}`,intent:`workflow.${r.triggerSource}`,rawJson:e}}function $r(r){return r.claimed&&r.runId?{agentId:`workflow-run:${r.runId}`,outcome:"dispatched",reason:r.reason??"claimed"}:r.claimed&&!r.runId?{agentId:null,outcome:"halted",reason:r.reason??"claimed-but-no-run"}:{agentId:null,outcome:"halted",reason:r.reason??"not-claimed"}}function xr(r){return{decidedBy:"workflow-dispatcher",decide:()=>({agentId:r.agentId,outcome:r.outcome==="deduped"?"halted":r.outcome,reason:r.outcome==="deduped"?`legacy-dedup: ${r.reason??""}`.trim():r.reason??null})}}function Mt(r,e,t,n,i=Date.now){let o=Rr(e,t,i),s=$r(n),a=xr(s),d=Ze(r,o,a,i);return Qe(r,"workflow",d,s,i),d}on();var Pr=4e3,Tr=8,xe=class{store;runs;nodeId;forwarder;channels;agents;log;timers;signals;events;ackTypingTimers=new Map;commitChains=new Map;constructor(e){this.store=e.store,this.runs=e.runs,this.nodeId=e.nodeId,this.forwarder=e.forwarder,this.channels=e.channels,this.agents=e.agents,this.log=e.log??(()=>{}),this.timers=e.timers??new ce({log:t=>this.log(t)}),this.signals=e.signals??new M,this.events=e.events,this.timers.onFire(t=>this.resumeFromTimer(t)),this.signals.subscribe(t=>this.resumeFromSignal(t))}emitRunEvent(e){if(this.events)try{this.events.publish({kind:"run",runId:e.runId,workflowId:e.workflowId,nodeId:e.nodeId,phase:e.phase,status:e.status,note:e.note,homeNode:e.homeNode,rootId:e.rootId})}catch{}}async commit(e,t){let i=(this.commitChains.get(e)??Promise.resolve()).then(()=>t(),()=>t());return this.commitChains.set(e,i.then(()=>{},()=>{})),i}emitSignal(e){let t={name:e.name,scope:e.scope??"global",workflowId:e.workflowId??"",payload:e.payload??{},emittedAt:new Date().toISOString()};if(this.signals.emit(t),this.events)try{this.events.publish({kind:"signal",name:t.name,scope:t.scope,workflowId:t.workflowId||void 0,payload:t.payload})}catch{}return t}async resumeFromSignal(e){let t=this.runs.list({limit:500});for(let n of t){if(n.status!=="paused"||!n.pausedAt||n.pausedAt.kind!=="signalWait")continue;let i={name:n.pausedAt.signalName,scope:n.pausedAt.scope,workflowId:n.workflowId,match:n.pausedAt.match??{}};if(!Q(i,e))continue;let o=this.store.list().find(s=>s.id===n.workflowId);o&&(await this.commit(n.id,()=>{let s=this.runs.get(n.id);if(!s||s.status!=="paused"||!s.pausedAt||s.pausedAt.kind!=="signalWait"||!Q({name:s.pausedAt.signalName,scope:s.pausedAt.scope,workflowId:s.workflowId,match:s.pausedAt.match??{}},e))return;let a=N(o,s.pausedAt.nodeId),d=a?o.edges.filter(u=>u.from===a.id).map(u=>u.to):[],c={receivedAt:new Date().toISOString(),name:e.name,payload:e.payload};this.runs.recordExecution({runId:s.id,entry:{at:c.receivedAt,nodeId:s.pausedAt.nodeId,inputKeys:[],status:"resumed",output:c,idempotencyKey:T(s.id,s.pausedAt.nodeId,`signal:${e.name}:${e.emittedAt}`)},nextPending:d,status:"running",pausedAt:null,context:{...s.context,[s.pausedAt.nodeId]:c}}),this.log(`[workflow:${o.id}] run ${s.id} resumed from signal "${e.name}"`),this.emitRunEvent({runId:s.id,workflowId:o.id,nodeId:s.pausedAt.nodeId,phase:"resumed",status:"running",note:`signal:${e.name}`,rootId:s.eventRootId})}),this.walk(o,n.id,`signal:${e.name}`).catch(s=>this.log(`[workflow:${o.id}] walk-after-signal failed: ${s.message}`)))}}async resumeFromTimer(e){let t=this.store.list().find(n=>n.id===(this.runs.get(e.runId)?.workflowId??""));t&&(await this.commit(e.runId,()=>{let n=this.runs.get(e.runId);if(!n||n.status!=="paused"||!n.pausedAt||n.pausedAt.kind!=="timerWait"||n.pausedAt.nodeId!==e.nodeId)return;let i=N(t,e.nodeId),o=i?t.edges.filter(d=>d.from===i.id).map(d=>d.to):[],s=new Date().toISOString(),a={firedAt:s,scheduledFor:e.fireAt};this.runs.recordExecution({runId:n.id,entry:{at:s,nodeId:e.nodeId,inputKeys:[],status:"resumed",output:a,idempotencyKey:T(n.id,e.nodeId,`timer:${e.id}`)},nextPending:o,status:"running",pausedAt:null,context:{...n.context,[e.nodeId]:a}}),this.log(`[workflow:${t.id}] run ${n.id} resumed from timer "${e.nodeId}" (fired ${s})`),this.emitRunEvent({runId:n.id,workflowId:t.id,nodeId:e.nodeId,phase:"resumed",status:"running",note:`timer:${e.id}`,rootId:n.eventRootId})}),this.walk(t,e.runId,`timer:${e.id}`).catch(n=>this.log(`[workflow:${t.id}] walk-after-timer failed: ${n.message}`)))}async dispatchWorkflow(e){let t=this.store.list().find(d=>d.id===e.workflowId);if(!t)return this.log(`[workflows] dispatchWorkflow: workflow "${e.workflowId}" not found`),{claimed:!1,run:null};let n=this.runs.getActiveByEntity(e.entityRef),i=n?this.runs.get(n):null;if(i&&i.workflowId!==t.id)return this.log(`[workflow:${t.id}] entity ${e.entityRef.id} has run ${i.id} of workflow "${i.workflowId}" \u2014 not dispatching`),{claimed:!1,run:null};let s=t.nodes.find(d=>d.type.startsWith("trigger."))?.config??{},a={source:e.trigger?.source??s.source??"hook",project:e.trigger?.project,repo:e.trigger?.repo,chat:e.trigger?.chat,labels:e.trigger?.labels};return this.dispatchOne(t,e.entityRef,e.event,a)}startChannelAck(e,t){let n=String(t.channel??""),i=String(t.chatId??"");if(!n||!i)return;let o=this.channels[n];if(!o)return;let s=typeof t.accountId=="string"?t.accountId:void 0,a=t.event,d=typeof a?.id=="string"?a.id:a?.id!=null?String(a.id):void 0;if(d&&o.react)try{Promise.resolve(o.react(i,d,"\u{1F440}",s)).catch(()=>{})}catch{}if(this.ackTypingTimers.has(e)||!o.sendTyping)return;let c=()=>{try{Promise.resolve(o.sendTyping(i,s)).catch(()=>{})}catch{}};c();let u=setInterval(c,Pr);this.ackTypingTimers.set(e,u)}stopChannelAck(e){let t=this.ackTypingTimers.get(e);t&&(clearInterval(t),this.ackTypingTimers.delete(e))}async dispatch(e){let t=this.matchByTrigger(e.trigger,e.fromRemote),i=t.some(a=>a.fanOut)?t:t.slice(0,1),o=[],s=[];for(let a of i){let d=await this.dispatchOne(a,e.entityRef,e.event,e.trigger);d.claimed&&o.push(a),d.run&&s.push(d.run)}return!e.fromRemote&&this.forwarder?.broadcastTrigger&&Promise.resolve(this.forwarder.broadcastTrigger({trigger:e.trigger,entityRef:e.entityRef,event:e.event})).catch(a=>this.log(`[mesh-broadcast] ${a?.message??a}`)),{claimed:o,runs:s}}matchByTrigger(e,t){let n=this.store.list(),i=[];for(let o of n){if(o.state&&o.state!=="active")continue;if(t){if(!o.mesh?.allowRemote)continue;let c=o.mesh.peers;if(c&&c.length>0&&!c.includes(t.peer))continue}let s=o.nodes.find(c=>c.type.startsWith("trigger."));if(!s)continue;let a=s.config;if(a.source!==e.source||o.project&&e.project&&o.project!==e.project)continue;let d=a.filter;if(d){if(d.project&&d.project!=="*"&&d.project!==e.project||d.repo&&d.repo!=="*"&&d.repo!==e.repo||d.chat&&d.chat!=="*"&&X(e.source,d.chat)!==X(e.source,e.chat))continue;if(d.labels?.length){let c=new Set(e.labels??[]);if(!d.labels.some(p=>c.has(p)))continue}}i.push(o)}return i.sort((o,s)=>s.priority-o.priority||o.id.localeCompare(s.id))}async dispatchOne(e,t,n,i){let o=await this.dispatchOneLegacy(e,t,n,i);if(Ve("workflow")!=="off")try{Mt(ze(),{workflowId:e.id,eventId:n.id,triggerSource:i.source,project:i.project??null,entityRef:t},JSON.stringify({event:n,trigger:i,entityRef:t}),{claimed:o.claimed,runId:o.run?.id??null})}catch(s){this.log(`[ledger] workflow ${e.id} run ${o.run?.id??"?"} record failed: ${s?.message??s}`)}return o}async dispatchOneLegacy(e,t,n,i){let o=this.runs.getActiveByEntity(t),s=o?this.runs.getHomeNodeByEntity(t):null;if(o&&s&&s!==this.nodeId){if(!this.forwarder)return this.log(`[workflow:${e.id}] run ${o} home'd on "${s}" but no forwarder \u2014 dropping`),{claimed:!1,run:null};try{await this.forwarder.forwardTransition(s,{workflowId:e.id,event:n,entityRef:t})}catch(d){this.log(`[workflow:${e.id}] forward to "${s}" failed: ${d.message}`)}return{claimed:!0,run:null}}let a=o?this.runs.get(o):null;if(a)if(a.status==="paused"&&a.pausedAt){if(a.pausedAt.kind!=="checkpoint")return this.log(`[workflow:${e.id}] run ${a.id} paused on ${a.pausedAt.kind} \u2014 channel event bypasses workflow`),{claimed:!1,run:null};if(!Or(a.pausedAt.resumeMatch,i,n))return this.log(`[workflow:${e.id}] run ${a.id} paused but event doesn't match resumeMatch \u2014 dropping`),{claimed:!1,run:null};let d=N(e,a.pausedAt.nodeId),c=d?e.edges.filter(h=>h.from===d.id).map(h=>h.to):[],u={at:new Date().toISOString(),nodeId:a.pausedAt.nodeId,inputKeys:[],status:"resumed",output:{event:n.payload},idempotencyKey:T(a.id,a.pausedAt.nodeId,`resume:${n.id}`)},p={...a.context,[a.pausedAt.nodeId]:{event:n.payload}},f=a.pausedAt.checkpointName,g=this.runs.recordExecution({runId:a.id,entry:u,nextPending:c,status:"running",pausedAt:null,context:p});g&&(a=g),this.log(`[workflow:${e.id}] run ${a.id} resumed from checkpoint "${f}"`),i.source.endsWith("-message")&&this.startChannelAck(a.id,n.payload)}else return a.status==="running"?(this.log(`[workflow:${e.id}] run ${a.id} already running; dropping concurrent event ${n.id}`),{claimed:!0,run:null}):(this.log(`[workflow:${e.id}] run ${a.id} is ${a.status}; dropping event ${n.id}`),{claimed:!1,run:null});else{let d=G(e);if(!d)return this.log(`[workflow:${e.id}] no trigger node found`),{claimed:!1,run:null};a=this.runs.create({workflowId:e.id,initialPending:d.pending,entityRef:t,initialContext:{[d.triggerId]:n.payload}}),this.log(`[workflow:${e.id}] run ${a.id} created from trigger "${d.triggerId}" for ${t.id}`),this.emitRunEvent({runId:a.id,workflowId:e.id,phase:"created",status:a.status,homeNode:a.homeNode,rootId:a.eventRootId}),i.source.endsWith("-message")&&this.startChannelAck(a.id,n.payload)}return this.walk(e,a.id,n.id),{claimed:!0,run:a}}async walk(e,t,n){let i=this.runs.get(t)?.eventRootId,o=()=>this.walkInner(e,t,n);try{await(i?qe({rootId:i},o):o())}finally{this.stopChannelAck(t)}}async walkInner(e,t,n){let i=this.runs.get(t);if(i)for(;i.status==="running"&&i.pending.length>0;){let o=i.pending.slice(0,Tr);await Promise.allSettled(o.map(a=>this.executeNodeAndCommit(e,t,a,n)));let s=this.runs.get(t);if(!s||(i=s,i.status!=="running"))return}}async executeNodeAndCommit(e,t,n,i){let o=T(t,n,i),s=await this.commit(t,()=>{let m=this.runs.get(t);if(!m)return{kind:"done"};if(m.status!=="running")return{kind:"done"};let w=N(e,n);if(!w)return this.log(`[workflow:${e.id}] missing node "${n}" \u2014 marking run failed`),this.runs.recordExecution({runId:t,entry:{at:new Date().toISOString(),nodeId:n,inputKeys:[],status:"failed",idempotencyKey:o,note:"node definition missing from workflow"},nextPending:m.pending.filter(R=>R!==n),status:"failed"}),{kind:"done"};let y=Ae(w.type);return y?m.history.some(R=>R.idempotencyKey===o)?(this.runs.recordExecution({runId:t,entry:{at:new Date().toISOString(),nodeId:n,inputKeys:[],status:"skipped",idempotencyKey:o+"_dedup",note:"duplicate execution dropped"},nextPending:m.pending.filter(R=>R!==n)}),{kind:"done"}):{kind:"go",run:m,node:w,handler:y}:(this.log(`[workflow:${e.id}] no handler for node type "${w.type}"`),this.runs.recordExecution({runId:t,entry:{at:new Date().toISOString(),nodeId:n,inputKeys:[],status:"failed",idempotencyKey:o,note:`no handler for node type "${w.type}"`},nextPending:m.pending.filter(R=>R!==n),status:"failed"}),{kind:"done"})});if(s.kind==="done")return;let{run:a,node:d,handler:c}=s,u=e.edges.filter(m=>m.to===n).map(m=>m.from),p;if(d.type!=="agent"){let m=ie();if(m)try{p=Xe(m,{agentId:`workflow:${d.type}`,channel:"workflow",chatId:`${e.id}:${n}`,workflowRunId:t,workflowId:e.id,workflowNodeId:n,messagePreview:`${d.type} ${n}`})}catch{}}let f=d.retry??{maxAttempts:1,backoffMs:1e3},g={error:"retry-loop did not run"},h=0;for(;h<f.maxAttempts;){h++;try{g=await c({workflow:e,run:a,node:d,channels:this.channels,agents:this.agents,forwardChannelSend:this.forwarder?.forwardChannelSend?.bind(this.forwarder),log:this.log})}catch(m){this.log(`[workflow:${e.id}] handler "${d.type}" threw: ${m.message}`),g={error:m.message}}if(!g.error||g.paused)break;if(h<f.maxAttempts){let m=f.backoffMs*Math.pow(2,h-1);this.log(`[workflow:${e.id}] node "${n}" failed (attempt ${h}/${f.maxAttempts}): ${g.error.slice(0,120)} \u2014 retrying in ${m}ms`),await new Promise(w=>setTimeout(w,m))}}if(p){let m=ie();if(m)try{et(m,p,{status:g.error?"error":"ok",error:g.error??null})}catch{}}await this.commit(t,async()=>{let m=this.runs.get(t);if(!m)return;let w=new Date().toISOString(),y=m.pending.filter(k=>k!==n);if(g.error){let k=m.status==="running"?"failed":void 0;this.runs.recordExecution({runId:t,entry:{at:w,nodeId:n,inputKeys:u,status:"failed",idempotencyKey:o,note:g.error.slice(0,200)},nextPending:y,status:k}),this.emitRunEvent({runId:t,workflowId:e.id,nodeId:n,phase:"failed",status:k??m.status,note:g.error.slice(0,200)});return}if(g.paused&&g.pausedAt){let k=g.pausedAt,P=null;if(g.spawnChild&&k.kind==="subProcess"){if(P=await this.spawnChild({parent:m,parentNodeId:n,childWorkflowId:g.spawnChild.workflowId,input:g.spawnChild.input}),!P){this.runs.recordExecution({runId:t,entry:{at:w,nodeId:n,inputKeys:u,status:"failed",idempotencyKey:o,note:`subProcess: child workflow "${g.spawnChild.workflowId}" not found`},nextPending:y,status:"failed"});return}k={...k,childRunId:P.id}}if(this.runs.recordExecution({runId:t,entry:{at:w,nodeId:n,inputKeys:u,status:"paused",idempotencyKey:o},nextPending:y,status:"paused",pausedAt:k}),this.emitRunEvent({runId:t,workflowId:e.id,nodeId:n,phase:"paused",status:"paused",note:k.kind}),P&&this.kickChildWalk(P),k.kind==="timerWait")try{this.timers.schedule({runId:t,workflowId:e.id,nodeId:k.nodeId,fireAt:k.fireAt,cancelKey:`${t}:${k.nodeId}`})}catch(We){this.log(`[workflow:${e.id}] timer schedule failed: ${We.message}`)}return}let R=g.output??{},Qt={...m.context,[n]:R},{nextPending:Xt}=ve({workflow:e,fromNodeId:n,selectedPort:g.port}),re=[],_={...m.joinCounters??{}};for(let k of Xt){let P=N(e,k);if(!(P?.type==="gateway.parallel"&&String(P.config?.mode??"fanOut")==="join")){re.push(k);continue}let H=_[k]??[];H.includes(n)||H.push(n),_[k]=H;let nn=e.edges.filter(rn=>rn.to===k).length;H.length>=nn&&(re.push(k),delete _[k])}let en=[...y,...re],L=d.type==="end",tn=m.status==="running"?L?String(d.config.status??"completed"):"running":void 0,O=this.runs.recordExecution({runId:t,entry:{at:w,nodeId:n,inputKeys:u,status:"ok",output:R,idempotencyKey:o},nextPending:L?[]:en,status:tn,context:Qt,joinCounters:_});this.emitRunEvent({runId:t,workflowId:e.id,nodeId:n,phase:L?"completed":"ok",status:O?.status??m.status}),g.emitSignal&&this.emitSignal({name:g.emitSignal.name,scope:g.emitSignal.scope,workflowId:e.id,payload:g.emitSignal.payload}),L&&O&&O.parentRunId&&O.parentNodeId&&this.resumeParent({parentRunId:O.parentRunId,parentNodeId:O.parentNodeId,childRun:O}).catch(k=>this.log(`[workflow:${e.id}] resumeParent failed: ${k.message}`))})}async spawnChild(e){let t=this.store.list().find(a=>a.id===e.childWorkflowId);if(!t)return null;let n=G(t);if(!n)return this.log(`[workflow:${t.id}] no trigger node \u2014 cannot spawn as child`),null;let i={...e.input};i[n.triggerId]={...i[n.triggerId]??{},parentRunId:e.parent.id,parentNodeId:e.parentNodeId};let o={backend:"agentx-internal",id:`subprocess:${e.parent.id}:${e.parentNodeId}`},s=this.runs.create({workflowId:t.id,initialPending:n.pending,entityRef:o,initialContext:i,parentRunId:e.parent.id,parentNodeId:e.parentNodeId,rootRunId:e.parent.rootRunId??e.parent.id,depth:(e.parent.depth??0)+1});return this.log(`[workflow:${t.id}] child run ${s.id} spawned from ${e.parent.id}/${e.parentNodeId} (depth ${s.depth})`),s}kickChildWalk(e){let t=this.store.list().find(n=>n.id===e.workflowId);t&&this.walk(t,e.id,`spawn:${e.parentRunId}:${e.parentNodeId}`).catch(n=>this.log(`[workflow:${t.id}] child walk failed: ${n.message}`))}async resumeParent(e){let t=this.runs.get(e.parentRunId);if(!t)return;let n=this.store.list().find(i=>i.id===t.workflowId);n&&(await this.commit(e.parentRunId,()=>{let i=this.runs.get(e.parentRunId);if(!i||i.status!=="paused"||!i.pausedAt||i.pausedAt.kind!=="subProcess"||i.pausedAt.nodeId!==e.parentNodeId||i.pausedAt.childRunId!==e.childRun.id)return;let o=N(n,e.parentNodeId),s=o?n.edges.filter(d=>d.from===o.id).map(d=>d.to):[],a={childRunId:e.childRun.id,status:e.childRun.status,output:Nr(e.childRun)};this.runs.recordExecution({runId:i.id,entry:{at:new Date().toISOString(),nodeId:e.parentNodeId,inputKeys:[],status:"resumed",output:a,idempotencyKey:T(i.id,e.parentNodeId,`child:${e.childRun.id}`)},nextPending:s,status:"running",pausedAt:null,context:{...i.context,[e.parentNodeId]:a}}),this.log(`[workflow:${n.id}] parent run ${i.id} resumed from subProcess child ${e.childRun.id}`),this.emitRunEvent({runId:i.id,workflowId:n.id,nodeId:e.parentNodeId,phase:"resumed",status:"running",note:`child:${e.childRun.id}`,rootId:i.eventRootId})}),this.walk(n,e.parentRunId,`child:${e.childRun.id}`))}};function Nr(r){for(let e=r.history.length-1;e>=0;e--){let t=r.history[e];if(t.status==="ok"&&t.output&&Object.keys(t.output).length>0)return t.output}return{}}function Or(r,e,t){let n=o=>{let s=r[o];if(s===void 0||s===""||s==="*")return!0;if(Array.isArray(s)){let a=new Set(e.labels??[]);return s.some(d=>a.has(String(d)))}return o==="chat"?X(e.source,String(s))===X(e.source,e.chat):e[o]===s};if(!n("source")||!n("project")||!n("repo")||!n("chat"))return!1;let i=r.eventIdLike;return!(typeof i=="string"&&i&&!t.id.includes(i))}function X(r,e){return e==null?"":r==="whatsapp-message"?e.replace(/@s\.whatsapp\.net$|@g\.us$/i,"").replace(/[\s+()]/g,""):e}function Wr(r){return{"pre:channel-message":async e=>{let t=e.msg;if(!t)return{};let n=Er(t.channel);if(!n)return{};let i=t.group?.id??t.sender.id,o={backend:t.channel,id:`${t.channel}:${i}`},{claimed:s}=await r.dispatch({trigger:{source:n,chat:i},entityRef:o,event:{id:`${t.channel}:${t.accountId}:${t.id}`,payload:Dr(t)}});return s.length===0?{}:s.every(d=>d.nodes.find(u=>u.type.startsWith("trigger."))?.config?.passthrough===!0)?{}:{blocked:!0,message:`handled by workflow${s.length>1?"s":""}: ${s.map(d=>d.id).join(", ")}`}},"on:gitlab-issue":async e=>{let t=e.project,n=e.iid,i=e.issueEvent;if(!t||n===void 0)return{};let o=Array.isArray(i?.object_attributes?.labels)?i.object_attributes.labels.map(d=>typeof d=="string"?d:d?.title).filter(Boolean):i?.labels?.map(d=>d?.title)??[],s=i?.assignees??i?.object_attributes?.assignee_ids??[],a={backend:"gitlab",id:`${t}#${n}`};return await r.dispatch({trigger:{source:"gitlab-issue",project:t,labels:o},entityRef:a,event:{id:`gitlab-issue:${t}:${n}:${i?.object_attributes?.updated_at||i?.object_attributes?.action||"evt"}`,payload:{issue:{iid:n,title:i?.object_attributes?.title,description:i?.object_attributes?.description,url:i?.object_attributes?.url,action:i?.object_attributes?.action,labels:o,assignees:s},project:t,channel:"gitlab",chatId:`${t}:issue:${n}`}}}),{}},"on:gitlab-mr":async e=>{let t=e.project,n=e.iid,i=e.mrEvent;if(!t||n===void 0)return{};let o=Array.isArray(e.labels)?e.labels:Array.isArray(i?.object_attributes?.labels)?i.object_attributes.labels.map(c=>typeof c=="string"?c:c?.title).filter(Boolean):[],s=i?.assignees??i?.object_attributes?.assignee_ids??[],a=i?.reviewers??[],d={backend:"gitlab",id:`${t}!${n}`};return await r.dispatch({trigger:{source:"gitlab-mr",project:t,labels:o},entityRef:d,event:{id:`gitlab-mr:${t}:${n}:${i?.object_attributes?.updated_at||i?.object_attributes?.action||"evt"}`,payload:{mr:{iid:n,title:e.title,description:e.description,url:e.url,action:e.action,state:e.state,source_branch:e.source_branch,target_branch:e.target_branch,labels:o,assignees:s,reviewers:a},project:t,channel:"gitlab",chatId:`${t}:merge_request:${n}`,iid:n,title:e.title,description:e.description,url:e.url,action:e.action,state:e.state,source_branch:e.source_branch,target_branch:e.target_branch,labels:o}}}),{}},"on:gitlab-note":async e=>{let t=e.project,n=e.noteId,i=e.noteableType,o=e.noteableIid,s=e.text,a=e.authorUsername,d=e.mentions??[];if(!t||!n||!i||!o)return{};let c=i==="merge_request"?{backend:"gitlab",id:`${t}!${o}`}:{backend:"gitlab",id:`${t}#${o}`};return await r.dispatch({trigger:{source:"gitlab-note",project:t},entityRef:c,event:{id:`gitlab-note:${t}:${i}:${o}:${n}`,payload:{note:{id:n,text:s,author:a,mentions:d,noteableType:i,noteableIid:o,noteableTitle:e.noteableTitle},project:t,channel:"gitlab",chatId:`${t}:${i}:${o}`,noteId:n,noteableType:i,noteableIid:o,text:s,author:a,mentions:d}}}),{}},"on:gitlab-pipeline":async e=>{let t=e.project,n=e.pipelineId,i=e.status,o=e.ref;if(!t||!i)return{};let a=e.raw?.merge_request?.iid;if(!a)return{};let d={backend:"gitlab",id:`${t}!${a}`};return await r.dispatch({trigger:{source:"gitlab-pipeline",project:t},entityRef:d,event:{id:`gitlab-pipeline:${t}:${n}:${i}`,payload:{pipeline:{id:n,status:i,ref:o},project:t,channel:"gitlab",chatId:`${t}:merge_request:${a}`}}}),{}}}}function Er(r){switch(r){case"telegram":return"telegram-message";case"whatsapp":return"whatsapp-message";case"discord":return"discord-message";case"slack":return"slack-message";default:return null}}function Dr(r){let e=r.group?.id??r.sender.id;return{channel:r.channel,chatId:e,accountId:r.accountId,text:r.text,fromJid:r.sender.id,sender:{id:r.sender.id,name:r.sender.name,username:r.sender.username},contact:r.channelMeta?.facts?{facts:r.channelMeta.facts}:void 0,group:r.group?{id:r.group.id,name:r.group.name}:void 0,channelMeta:r.channelMeta,replyTo:r.replyTo,replyToText:r.replyToText,media:r.media,event:{id:r.id,timestamp:r.timestamp?.toISOString?.()??new Date().toISOString()}}}var ee=r=>r.trim().toLowerCase().replace(/^@/,"");function jr(r){let e=typeof r.author=="string"?r.author:typeof r.authorUsername=="string"?r.authorUsername:void 0;if(e)return ee(e);let n=r.payload?.sender?.login;return typeof n=="string"&&n?ee(n):void 0}function Fr(r,e){let t=typeof e.project=="string"?e.project:"";if(r==="on:gitlab-issue"||r==="on:gitlab-mr")return!t||e.iid==null?void 0:`gitlab:${t}${r==="on:gitlab-issue"?"#":"!"}${String(e.iid)}`;if(r==="on:gitlab-note"){let n=e.noteableIid!=null?String(e.noteableIid):"",i=typeof e.noteableType=="string"?e.noteableType:"";return!t||!n||!i?void 0:`gitlab:${t}${i==="issue"?"#":"!"}${n}`}if(r==="on:github-issue"||r==="on:github-pr"){let n=e.payload??{},i=typeof e.repo=="string"?e.repo:n.repository?.full_name,o=e.number??n.issue?.number??n.pull_request?.number;return typeof i!="string"||!i||o==null?void 0:`github:${i}#${String(o)}`}}function Cr(r){let e=new Set;for(let t of r.nodes){let n=t.type==="agent"?t.config.agentId:void 0;typeof n=="string"&&n&&e.add(n)}return[...e]}var te=class{constructor(e=2e3){this.maxKeys=e}fires=new Map;tryFire(e,t,n,i=Date.now()){let o=(this.fires.get(e)??[]).filter(s=>i-s<n);if(o.length>=t)return this.fires.set(e,o),!1;for(o.push(i),this.fires.delete(e),this.fires.set(e,o);this.fires.size>this.maxKeys;){let s=this.fires.keys().next().value;if(s===void 0)break;this.fires.delete(s)}return!0}get size(){return this.fires.size}};function Pe(r,e,t){let n=r.logged??(r.logged=new Set);n.has(e)||(n.add(e),r.log(t))}function _t(r,e,t,n,i){let o=jr(t);if(o&&Array.isArray(n?.ignoreAuthors)&&n.ignoreAuthors.length>0&&n.ignoreAuthors.map(ee).includes(o))return{skip:!0,reason:"ignored-author",detail:`author @${o} is in filter.ignoreAuthors`};if(n?.skipSelfAuthored===!0){let a=Cr(r),d=typeof t.authorAgent=="string"?t.authorAgent:void 0;if(d&&a.includes(d))return{skip:!0,reason:"self-authored",detail:`author @${o??"?"} is agent "${d}" which this workflow runs`};if(o){let c=new Set(a.flatMap(u=>(i.forgeUsernames?.(u)??[]).map(ee)));if(c.has(o))return{skip:!0,reason:"self-authored",detail:`author @${o} is this workflow's own bot identity`};a.length===0?Pe(i,`noagents:${r.id}`,`[workflows] ${r.id} has no agent node \u2014 self-authored skip can't resolve a bot identity; only filter.ignoreAuthors applies`):c.size===0&&!("authorAgent"in t)&&Pe(i,`noident:${r.id}:${e}`,`[workflows] ${r.id} no forge username known for agent(s) ${a.join(", ")} on ${e} \u2014 self-authored skip inactive; only filter.ignoreAuthors applies`)}}let s=n?.maxFiresPerTarget;if(s&&typeof s.count=="number"&&s.count>0){let a=Fr(e,t);if(a){let d=typeof s.windowMinutes=="number"&&s.windowMinutes>0?s.windowMinutes:60,c=i.now?.()??Date.now();if(!i.fireWindow.tryFire(`${r.id}|${a}`,s.count,d*6e4,c))return{skip:!0,reason:"chain-limit",detail:`${a} already fired ${s.count}x within ${d}m (filter.maxFiresPerTarget)`}}else Pe(i,`notarget:${r.id}:${e}`,`[workflows] ${r.id} filter.maxFiresPerTarget has no target key for ${e} \u2014 limit not applied`)}return{skip:!1}}function Mr(r){let e=r.store.list(),t={fireWindow:new te,log:r.log,forgeUsernames:r.forgeUsernames,logged:new Set},n=0,i=0;for(let o of e){if(o.state&&o.state!=="active"){r.log(`[workflows] ${o.id} state=${o.state} \u2014 skipping trigger registration`);continue}let s=o.nodes.find(a=>a.type.startsWith("trigger."));if(s){if(s.type==="trigger.cron"){let a=s.config;if(!a.spec){r.log(`[workflows] ${o.id} trigger.cron missing config.spec \u2014 skipping`);continue}Lr({workflowId:o.id,triggerNodeId:s.id,spec:a.spec,timezone:a.timezone??"UTC"},r.dispatcher,r.log),n++}else if(s.type==="trigger.hook"){let a=s.config;if(!a.event||!a.event.startsWith("on:")){r.log(`[workflows] ${o.id} trigger.hook config.event must start with "on:" \u2014 skipping`);continue}r.hooks.registerHandler(a.event,`workflows:${o.id}`,async d=>{try{let c=typeof d.project=="string"?d.project:void 0;if(o.project&&c&&o.project!==c)return{};if(a.filter){if(Array.isArray(a.filter.topic)&&a.filter.topic.length>0){let h=typeof d.topic=="string"?d.topic.toLowerCase():void 0;if(!h||!a.filter.topic.map(m=>m.toLowerCase()).includes(h))return{}}if(Array.isArray(a.filter.action)&&a.filter.action.length>0){let h=typeof d.action=="string"?d.action:void 0;if(!h||!a.filter.action.includes(h))return{}}if(Array.isArray(a.filter.mentions)&&a.filter.mentions.length>0){let h=Array.isArray(d.mentions)?d.mentions.map(y=>y.toLowerCase().replace(/^@/,"")):[];if(!a.filter.mentions.map(y=>y.toLowerCase().replace(/^@/,"")).some(y=>h.includes(y)))return{}}if(Array.isArray(a.filter.noteableType)&&a.filter.noteableType.length>0){let h=typeof d.noteableType=="string"?d.noteableType.toLowerCase():void 0,m=a.filter.noteableType.map(w=>w.toLowerCase());if(!h||!m.includes(h))return{}}if(Array.isArray(a.filter.assigneesAdded)&&a.filter.assigneesAdded.length>0){let h=Array.isArray(d.assigneesAdded)?d.assigneesAdded.map(y=>y.toLowerCase().replace(/^@/,"")):[];if(!a.filter.assigneesAdded.map(y=>y.toLowerCase().replace(/^@/,"")).some(y=>h.includes(y)))return{}}if(Array.isArray(a.filter.reviewersAdded)&&a.filter.reviewersAdded.length>0){let h=Array.isArray(d.reviewersAdded)?d.reviewersAdded.map(y=>y.toLowerCase().replace(/^@/,"")):[];if(!a.filter.reviewersAdded.map(y=>y.toLowerCase().replace(/^@/,"")).some(y=>h.includes(y)))return{}}if(Array.isArray(a.filter.labelsAdded)&&a.filter.labelsAdded.length>0){let h=Array.isArray(d.labelsAdded)?d.labelsAdded.map(y=>y.toLowerCase()):[];if(!a.filter.labelsAdded.map(y=>y.toLowerCase()).some(y=>h.includes(y)))return{}}}let u=_t(o,a.event,d,a.filter,t);if(u.skip){if(r.log(`[workflows] ${o.id} skipping ${a.event} (${u.reason}): ${u.detail}`),a.passthrough)return{};let h=d.__workflowClaimed;return{modified:{__workflowClaimed:[...Array.isArray(h)?h:[],o.id]}}}let p=_r(o.id,a.event,d);if(await r.dispatcher.dispatchWorkflow({workflowId:o.id,entityRef:{backend:"hook",id:p},event:{id:`hook:${a.event}:${Date.now().toString(36)}`,payload:{hookEvent:a.event,...d}}}),a.passthrough)return{};let f=d.__workflowClaimed;return{modified:{__workflowClaimed:[...Array.isArray(f)?f:[],o.id]}}}catch(c){return r.log(`[workflows] ${o.id} hook dispatch failed: ${c.message}`),{}}},60),i++}}}return{cronTimers:n,hookSubscribers:i}}function _r(r,e,t){let n=typeof t.project=="string"?t.project:"",i=t.iid!=null?String(t.iid):"";if(e==="on:gitlab-issue"&&n&&i)return`${r}:${e}:${n}#${i}`;if(e==="on:gitlab-mr"&&n&&i)return`${r}:${e}:${n}!${i}`;if(e==="on:gitlab-pipeline"&&n){let o=t.pipelineId!=null?String(t.pipelineId):"";if(o)return`${r}:${e}:${n}@pipeline:${o}`}return`${r}:${e}:${Date.now().toString(36)}-${Math.random().toString(36).slice(2,8)}`}function Lr(r,e,t){let n=()=>{let i;try{i=tt(r.spec,new Date,r.timezone)}catch(s){t(`[workflows] ${r.workflowId} cron spec invalid: ${s.message}`);return}let o=Math.max(1e3,i.getTime()-Date.now());setTimeout(()=>{(async()=>{let s=`cron:${r.workflowId}:${i.toISOString()}`;try{await e.dispatchWorkflow({workflowId:r.workflowId,trigger:{source:"cron"},entityRef:{backend:"cron",id:`${r.workflowId}@${i.toISOString()}`},event:{id:s,payload:{now:i.toISOString(),spec:r.spec,workflowId:r.workflowId}}})}catch(a){t(`[workflows] ${r.workflowId} cron dispatch failed: ${a.message}`)}finally{n()}})()},o)};n()}import{createHash as Hr}from"crypto";import{existsSync as Ur,mkdirSync as Kr,readFileSync as Br,renameSync as zr,writeFileSync as Jr}from"fs";import{resolve as Lt}from"path";import{z as C}from"zod";var Ht=C.object({actionId:C.string().min(1),everySeconds:C.number().int().min(5).max(86400).default(60),key:C.string().min(1).default("id"),filter:C.array(ue).default([]),maxPerPoll:C.number().int().min(1).max(500).default(20)}),qr=5e3,Yr=30;async function Gr(r){let e=new Ye().get(r);if(!e)throw new Error(`no action "${r}" in registry`);return Ge(e)}function Ut(r,e){let t=[],n=0;for(let i of r.split(`
 `)){let o=i.trim();if(!o)continue;let s;try{s=JSON.parse(o)}catch{n++;continue}if(!s||typeof s!="object"||Array.isArray(s)){n++;continue}let a=j(s,e);if((typeof a!="string"||!a)&&typeof a!="number"){n++;continue}t.push({key:String(a),value:s})}return{items:t,skipped:n}}function Vr(r,e){let t=`${r}:${e}`;return/^[a-zA-Z0-9._:@-]+$/.test(e)&&t.length<=200?t:`${r}:#${Hr("sha256").update(e).digest("hex").slice(0,32)}`}var Te=class{constructor(e){this.opts=e;this.stateDir=Lt(e.store.baseDir,"_poll"),this.runAction=e.runAction??Gr}timers=new Map;warned=new Map;stateDir;runAction;resync;start(){return this.resync??=setInterval(()=>{try{this.sync()}catch(e){this.opts.log(`[workflows] poll sync failed: ${e.message}`)}},Yr*1e3),this.sync()}sync(){let e=new Map;for(let t of this.opts.store.list()){let n=this.configOf(t);n&&e.set(t.id,n)}for(let[t,n]of this.timers)e.has(t)||(clearTimeout(n),this.timers.delete(t),this.opts.log(`[workflows] ${t} poll stopped`));for(let[t,n]of e)this.timers.has(t)||(this.schedule(t,n.everySeconds),this.opts.log(`[workflows] ${t} polls action "${n.actionId}" every ${n.everySeconds}s`));return this.timers.size}stop(){this.resync&&clearInterval(this.resync),this.resync=void 0;for(let e of this.timers.values())clearTimeout(e);this.timers.clear()}async pollOnce(e){let t=this.opts.store.get(e),n=t?this.configOf(t):null;if(!n)return 0;let i;try{i=await this.runAction(n.actionId)}catch(f){return this.warnOnce(e,`poll failed: ${f.message}`),0}if(!i.ok)return this.warnOnce(e,`poll failed (status=${i.status??"?"}): ${(i.errors??"").slice(0,200)}`),0;let{items:o,skipped:s}=Ut(i.output,n.key);this.warnOnce(e,s>0?`poll skipped ${s} line(s) that are not a JSON object with "${n.key}"`:"");let a=new Set(o.map(f=>f.key)),d=this.readState(e);if(!d||d.actionId!==n.actionId||d.key!==n.key)return this.writeState(e,{actionId:n.actionId,key:n.key,seen:[...a]},a),this.opts.log(`[workflows] ${e} poll baseline: ${a.size} existing item(s) recorded, no runs started`),0;let c=new Set(d.seen),u=0,p=!1;for(let f of o){if(c.has(f.key))continue;let g=n.filter.every(h=>Y(h,f.value));if(!(g&&u>=n.maxPerPoll)){if(c.add(f.key),d.seen.push(f.key),!g){p=!0;continue}this.writeState(e,d,a),p=!1;try{let{run:h}=await this.opts.dispatcher.dispatchWorkflow({workflowId:e,trigger:{source:"poll"},entityRef:{backend:"poll",id:Vr(e,f.key)},event:{id:`poll:${e}:${f.key}`,payload:f.value}});h?u++:this.opts.log(`[workflows] ${e} poll item "${f.key}" started no run`)}catch(h){this.opts.log(`[workflows] ${e} poll dispatch failed for "${f.key}": ${h.message}`)}}}return p&&this.writeState(e,d,a),u}schedule(e,t){let n=setTimeout(()=>{(async()=>{try{await this.pollOnce(e)}catch(s){this.opts.log(`[workflows] ${e} poll failed: ${s.message}`)}if(this.timers.get(e)!==n)return;let i=this.opts.store.get(e),o=i?this.configOf(i):null;o?this.schedule(e,o.everySeconds):this.timers.delete(e)})()},t*1e3);this.timers.set(e,n)}configOf(e){if(e.state&&e.state!=="active")return null;let t=e.nodes.find(i=>i.type.startsWith("trigger."));if(!t||t.type!=="trigger.poll")return null;let n=Ht.safeParse(t.config);if(!n.success){let i=n.error.issues.map(o=>`${o.path.join(".")||"config"}: ${o.message}`).join("; ");return this.warnOnce(e.id,`trigger.poll config invalid, not polling (${i})`),null}return n.data}warnOnce(e,t){this.warned.get(e)!==t&&(this.warned.set(e,t),t&&this.opts.log(`[workflows] ${e} ${t}`))}statePath(e){return Lt(this.stateDir,`${e}.json`)}readState(e){let t=this.statePath(e);if(!Ur(t))return null;try{let n=JSON.parse(Br(t,"utf-8"));return typeof n.actionId!="string"||typeof n.key!="string"||!Array.isArray(n.seen)?null:{actionId:n.actionId,key:n.key,seen:n.seen.map(String)}}catch{return null}}writeState(e,t,n){let i=t.seen.length-qr;i>0&&(t.seen=t.seen.filter(s=>n.has(s)||i--<=0)),Kr(this.stateDir,{recursive:!0});let o=this.statePath(e);Jr(`${o}.tmp`,JSON.stringify(t)),zr(`${o}.tmp`,o)}};function Kt(r){return r.nodes.find(n=>n.type.startsWith("trigger."))?.config?.inputSchema??null}function Bt(r,e){if(!r||!e?.properties)return{};let t=r.match(/^([^:]+\/[^:]+):([^:]+):(.+)$/);if(!t)return{};let[,n,i,o]=t,s={};if(e.properties.project&&(s.project=n),i==="push"){let a=o.match(/^refs\/heads\/(.+)$/);a&&e.properties.ref&&(s.ref=a[1])}else{let a=Number(o);Number.isFinite(a)&&(e.properties.id&&(s.id=a),e.properties.iid&&(s.iid=a),e.properties.mrId&&(s.mrId=a),e.properties.issueId&&(s.issueId=a),e.properties.prId&&(s.prId=a))}return s}function zt(r,e){if(!r?.properties)return e;let t={...e};for(let[n,i]of Object.entries(r.properties))t[n]===void 0&&i&&"default"in i&&(t[n]=i.default);return t}function Jt(r,e){return!r?.required||!Array.isArray(r.required)?[]:r.required.filter(t=>{let n=e[t];return n===void 0||n===""||n===null})}function Qr(r,e){let t=Kt(r);if(!t?.properties){let d={};for(let[c,u]of Object.entries(e))u!==void 0&&(d[c]=u);return{inputs:d,missing:[],filledFrom:{passthrough:Object.keys(d),chatId:[],defaults:[]}}}let n={};for(let d of["message","agentId","channel","chatId","senderId","senderUsername"])t.properties[d]&&e[d]!==void 0&&(n[d]=e[d]);let i=Bt(e.chatId,t),o={...n,...i},s={...o};o=zt(t,o);let a=Object.keys(o).filter(d=>s[d]===void 0&&o[d]!==void 0);return{inputs:o,missing:Jt(t,o),filledFrom:{passthrough:Object.keys(n),chatId:Object.keys(i),defaults:a}}}import{extname as Xr}from"path";var qt=/<agentx-artifact>([\s\S]*?)<\/agentx-artifact>/gi,Yt=/<agentx-artifact>[\s\S]*$/i;function ps(r,e=1/0,t=!1){let n=[],i=String(r??"");if(!/<agentx-artifact>/i.test(i))return{text:i,artifacts:n};let o=i.replace(qt,(s,a)=>{try{let d=JSON.parse(a.trim());if(d&&typeof d.filename=="string"&&typeof d.mime=="string"&&n.length<e){let c=d.mime,u=c.startsWith("image/")?"image":c==="application/pdf"?"pdf":c.startsWith("text/")?"text":"file";n.push({type:u,filename:d.filename,mime:c})}}catch{}return""});return{text:(t?o.replace(Yt,""):o).trim(),artifacts:n}}function fs(r,e=!1){let t=String(r??""),n=t;if(/<agentx-artifact>/i.test(t)){let i=t.replace(qt,(o,s)=>{try{let a=JSON.parse(s.trim());return a&&typeof a.filename=="string"?a.filename:""}catch{return""}});n=(e?i.replace(Yt,""):i).trim()}return n.replace(/```[\s\S]*?```|`[^`\n]*`|!\[([^\]\n]*)\]\(([^)\s]+)\)/g,(i,o,s)=>o===void 0||s===void 0?i:`[${o||s}](${s})`)}var ei={".png":{mime:"image/png",kind:"image"},".jpg":{mime:"image/jpeg",kind:"image"},".jpeg":{mime:"image/jpeg",kind:"image"},".gif":{mime:"image/gif",kind:"image"},".webp":{mime:"image/webp",kind:"image"},".svg":{mime:"image/svg+xml",kind:"file"},".pdf":{mime:"application/pdf",kind:"file"},".txt":{mime:"text/plain; charset=utf-8",kind:"file"},".md":{mime:"text/markdown; charset=utf-8",kind:"file"},".csv":{mime:"text/csv; charset=utf-8",kind:"file"},".json":{mime:"application/json",kind:"file"},".mp3":{mime:"audio/mpeg",kind:"audio"},".m4a":{mime:"audio/mp4",kind:"audio"},".wav":{mime:"audio/wav",kind:"audio"},".mp4":{mime:"video/mp4",kind:"video"},".webm":{mime:"video/webm",kind:"video"}},gs={bytes:20*1024*1024,perMessage:20,pathChars:512};function ms(r){return ei[Xr(r).toLowerCase()]??null}var ti=["[Phone app: showing files]","To show the owner a file you created (a chart, a screenshot, a PDF, a recording), save or copy it into .agentx/outbox/ in your workspace and end your reply with one line per file:",'<agentx-artifact>{"filename":".agentx/outbox/<name.ext>","mime":"<mime/type>"}</agentx-artifact>',"Files outside your workspace (/tmp, your home folder) are refused. Outbox files are removed after 7 days.","The line is removed from the text. Images show in the reply, audio and video get a player, other files an Open link. Allowed: png, jpg, gif, webp, svg, pdf, txt, md, csv, json, mp3, m4a, wav, mp4, webm; up to 20 MB and 20 files per reply.","A picture already on the web can go inline as ![what it shows](https://...)."].join(`
 `);function hs(r,e,t){return r==="app"&&e&&t!==!1?ti:void 0}import{lstatSync as Oe,mkdirSync as ni,readdirSync as ri,realpathSync as Ne,unlinkSync as ii}from"fs";import{join as ne,resolve as Gt}from"path";var Vt=".agentx/outbox",oi=7*24*60*60*1e3;function si(r,e){try{let t=Ne(Gt(e,r)),n=ne(t,Vt);return Ne(n)===n&&Oe(n).isDirectory()?n:null}catch{return null}}function bs(r,e={}){let t=e.cwd??process.cwd();if(e.create!==!1)try{let i=Ne(Gt(t,r));Oe(ne(i,".agentx"),{throwIfNoEntry:!1})?.isSymbolicLink()||ni(ne(i,Vt),{recursive:!0})}catch{return 0}let n=si(r,t);return n?Zt(n,(e.now??Date.now())-(e.maxAgeMs??oi)):0}function Zt(r,e){let t=0;for(let n of ri(r)){let i=ne(r,n);try{let o=Oe(i);o.isDirectory()?t+=Zt(i,e):Math.max(o.mtimeMs,o.ctimeMs)<e&&(ii(i),t++)}catch{}}return t}export{it as a,pt as b,ft as c,Si as d,Sn as e,Ii as f,$ as g,pe as h,v as i,K as j,Dn as k,he as l,we as m,be as n,xe as o,Wr as p,Mr as q,Te as r,Qn as s,Qr as t,ps as u,fs as v,gs as w,ms as x,hs as y,Vt as z,bs as A};
-//# sourceMappingURL=chunk-6G72CCT2.js.map
+//# sourceMappingURL=chunk-2W3UVIEG.js.map

package/dist/{chunk-ISRGFMQC.js → chunk-3AXSSYSY.js}

@@ -1,8 +1,8 @@
-import{a as D,b as _}from"./chunk-RKPAVWXF.js";import{a as q,b as O,c as R,d as B,f as b,g as S,h as E,i as w,j as y}from"./chunk-WIGJ5BVG.js";import{a as T,b as C,c as I,d as x,e as P}from"./chunk-FSHQMXM3.js";import{existsSync as X,readFileSync as F}from"fs";var J=new Set(["cron","heartbeat","api","a2a","mesh"]),M=160;function s(n){return typeof n=="string"&&n.trim()?n.trim():void 0}function A(n,e=M){let t=n.replace(/\s+/g," ").trim();return t.length>e?`${t.slice(0,e-1)}\u2026`:t}function V(n){let e=T(n);if(!X(e))throw new Error(`config not found at ${e}`);return JSON.parse(F(e,"utf-8"))}function W(n,e){return n?.agents?.[e]?.admin===!0}function Y(n,e,t){return W(n,t.agentId)||e?.createdBy===t.agentId}function Z(n,e){let t=e?.createdBy?`agent "${e.createdBy}"`:"the operator";return`Not allowed: "${n}" was created by ${t}. Agents manage only schedules they created (unless configured admin).`}function K(n,e){let t=s(n.notify);if(t!=="none"){if(t&&t!=="here"){let r=t.split(":");return r.length<2||!r[0]||!r[1]?"invalid":{channel:r[0],chatId:r.slice(1).join(":")}}if(e.channel&&e.chatId&&!J.has(e.channel))return{channel:e.channel,chatId:e.chatId,...e.accountId?{accountId:e.accountId}:{}}}}function Q(n,e,t){let r=e.timezone||"UTC",u=e.enabled&&!y(e)?w(E(e.schedule,r,t),r):"\u2014",h=e.approval?`pending ${e.approval.action} approval`:e.enabled?"active":"paused",p=[`- ${n} [${h}] ${e.schedule} \u2014 ${S(e.schedule)} (${r})`,`  agent: ${e.agent}; created by: ${e.createdBy||"operator"}; next: ${u}`];return e.notify&&p.push(`  notify: ${e.notify.channel} ${e.notify.chatId}`),e.command?p.push(`  command: ${A(String(e.command))}`):e.prompt&&p.push(`  prompt: ${A(String(e.prompt))}`),p.join(`
+import{a as D,b as _}from"./chunk-RKPAVWXF.js";import{a as q,b as O,c as R,d as B,f as b,g as S,h as E,i as w,j as y}from"./chunk-XGTZMJUI.js";import{a as T,b as C,c as I,d as x,e as P}from"./chunk-WMIQHJB5.js";import{existsSync as X,readFileSync as F}from"fs";var J=new Set(["cron","heartbeat","api","a2a","mesh"]),M=160;function s(n){return typeof n=="string"&&n.trim()?n.trim():void 0}function A(n,e=M){let t=n.replace(/\s+/g," ").trim();return t.length>e?`${t.slice(0,e-1)}\u2026`:t}function V(n){let e=T(n);if(!X(e))throw new Error(`config not found at ${e}`);return JSON.parse(F(e,"utf-8"))}function W(n,e){return n?.agents?.[e]?.admin===!0}function Y(n,e,t){return W(n,t.agentId)||e?.createdBy===t.agentId}function Z(n,e){let t=e?.createdBy?`agent "${e.createdBy}"`:"the operator";return`Not allowed: "${n}" was created by ${t}. Agents manage only schedules they created (unless configured admin).`}function K(n,e){let t=s(n.notify);if(t!=="none"){if(t&&t!=="here"){let r=t.split(":");return r.length<2||!r[0]||!r[1]?"invalid":{channel:r[0],chatId:r.slice(1).join(":")}}if(e.channel&&e.chatId&&!J.has(e.channel))return{channel:e.channel,chatId:e.chatId,...e.accountId?{accountId:e.accountId}:{}}}}function Q(n,e,t){let r=e.timezone||"UTC",u=e.enabled&&!y(e)?w(E(e.schedule,r,t),r):"\u2014",h=e.approval?`pending ${e.approval.action} approval`:e.enabled?"active":"paused",p=[`- ${n} [${h}] ${e.schedule} \u2014 ${S(e.schedule)} (${r})`,`  agent: ${e.agent}; created by: ${e.createdBy||"operator"}; next: ${u}`];return e.notify&&p.push(`  notify: ${e.notify.channel} ${e.notify.chatId}`),e.command?p.push(`  command: ${A(String(e.command))}`):e.prompt&&p.push(`  prompt: ${A(String(e.prompt))}`),p.join(`
 `)}async function k(n,e,t){let r=n?.notifications?.destination;if(!r?.channel||!r?.chatId)return"No operator notification destination is configured (notifications.destination); the operator must check `agentx schedule list`.";if(!e.notifyOperator)return"Operator notification is unavailable in this context.";try{return await e.notifyOperator({channel:r.channel,chatId:r.chatId,accountId:r.accountId},t),"The operator has been notified."}catch(u){return`Could not notify the operator (${u?.message??u}); the request is still recorded.`}}async function re(n,e,t={}){let r=(s(n.action)||"list").toLowerCase(),u=t.now?t.now():new Date,h;try{h=V(t.configPath)}catch(a){return`Error: ${a.message}`}let p=h.crons||{};if(r==="list"){let a=n.mine===!0,l=Object.entries(p).filter(([,i])=>!a||e&&i?.createdBy===e.agentId);return l.length?l.map(([i,f])=>Q(i,f,u)).join(`
 `):a?"You have no schedules.":"No schedules."}if(!e?.agentId)return"Error: caller agent is unknown (AGENTX_AGENT_ID not set). Pass callerAgentId.";if(!h.agents?.[e.agentId])return`Error: caller "${e.agentId}" is not an agent on this node.`;let o=s(n.id),m=a=>C(a,{configPath:t.configPath,reload:t.reload});if(r==="create"){let a=s(n.when),l=s(n.prompt);if(!a||!l)return"Error: create needs `when` (plain English) and `prompt`.";let i=D(a);if(!i)return`Error: couldn't parse "${a}". ${O}.`;let f=s(n.agent)||e.agentId;if(!h.agents?.[f])return`Error: agent "${f}" not found on this node.`;let g=s(n.timezone)||q;if(!B(g))return`Error: unknown timezone "${g}".`;let d=o||_(i.matched,f);if(!R(d))return`Error: invalid id "${d}" (letters, digits, "-" and "_" only).`;if(p[d])return`Error: a schedule "${d}" already exists. Pick another \`id\`.`;let $=K(n,e);if($==="invalid")return'Error: `notify` must be "here", "none", or "channel:chatId".';let z={action:"create",requestedBy:e.agentId,requestedAt:u.toISOString()},L=b({parsed:i,agent:f,prompt:l,timezone:g,notify:$,enabled:!1,createdBy:e.agentId,approval:z}),v=await m(U=>I(U,`crons.${d}`,L));if(!v.success)return`Error: ${v.error}`;let N=w(E(i.cron,g,u),g),G=[`Schedule approval requested by ${e.agentId}`,`Create: ${d}`,`When: ${i.human} \u2014 cron \`${i.cron}\` (${g})`,`Next fire: ${N}`,`Agent: ${f}`,$?`Notify: ${$.channel} ${$.chatId}`:"Notify: none",`Prompt: ${A(l,400)}`,"",`Approve: agentx schedule approve ${d}`,`Reject:  agentx schedule reject ${d}`].join(`
 `),H=await k(h,t,G);return[`Requested schedule "${d}": ${i.human} (cron ${i.cron}, ${g}); next fire would be ${N}.`,"It is saved DISABLED and will not run until the operator approves it.",H].join(`
 `)}if(!o)return`Error: ${r} needs \`id\`.`;let c=p[o];if(!c)return`Error: schedule "${o}" not found.`;if(!Y(h,c,e))return Z(o,c);if(r==="pause"||r==="resume"){let a=r==="resume";if(a&&y(c))return`"${o}" is still awaiting operator approval; it can't be resumed until approved.`;if(c.enabled===a)return`"${o}" is already ${a?"active":"paused"}.`;let l=await m(i=>I(i,`crons.${o}.enabled`,a));return l.success?`"${o}" ${a?"resumed":"paused"}.`:`Error: ${l.error}`}if(r==="delete"){if(y(c)&&c.approval.requestedBy===e.agentId){let d=await m($=>P($,`crons.${o}`));return d.success?`Withdrew the pending request "${o}".`:`Error: ${d.error}`}if(y(c))return`"${o}" is a creation request still awaiting approval; only its requester or the operator (\`agentx schedule reject ${o}\`) can drop it.`;if(c.approval?.action==="delete")return`Deletion of "${o}" is already awaiting approval.`;let a={action:"delete",requestedBy:e.agentId,requestedAt:u.toISOString()},l=await m(d=>{if(!x(d,`crons.${o}`))throw new Error(`schedule "${o}" not found`);I(d,`crons.${o}.approval`,a)});if(!l.success)return`Error: ${l.error}`;let i=c.timezone||"UTC",f=[`Schedule approval requested by ${e.agentId}`,`Delete: ${o}`,`When: ${S(c.schedule)} \u2014 cron \`${c.schedule}\` (${i})`,`Next fire: ${c.enabled?w(E(c.schedule,i,u),i):"\u2014 (paused)"}`,`Agent: ${c.agent}`,"",`Approve: agentx schedule approve ${o}`,`Reject:  agentx schedule reject ${o}`].join(`
 `),g=await k(h,t,f);return[`Deletion of "${o}" requested. It keeps its current state until the operator approves.`,g].join(`
 `)}return`Error: unknown action "${r}". Use list, create, pause, resume or delete.`}function oe(n,e=process.env){let t=s(e.AGENTX_AGENT_ID)||s(n.callerAgentId);if(!t)return null;let r=!!(s(e.AGENTX_CHANNEL)&&s(e.AGENTX_CHAT_ID)),u=s(r?e.AGENTX_CHANNEL:n.channel),h=s(r?e.AGENTX_CHAT_ID:n.chatId),p=s(n.accountId);return{agentId:t,channel:u,chatId:h,...p?{accountId:p}:{}}}export{re as a,oe as b};
-//# sourceMappingURL=chunk-ISRGFMQC.js.map
+//# sourceMappingURL=chunk-3AXSSYSY.js.map

package/dist/chunk-4L244AW4.js

@@ -0,0 +1,3 @@
+import{e as A,g as x,p as G}from"./chunk-XIYWXCNU.js";import{a as w,e as b}from"./chunk-2QNT5JDS.js";b();var h="guest:",P="guests",_=7,y=365,T=400;function $(e){let t=e.scopes.find(n=>n.startsWith(h));return t?t.slice(h.length):null}function R(e){return`g-${e.toString(36)}-${Math.random().toString(36).slice(2,6)}`}var l=e=>(Array.isArray(e)?e:typeof e=="string"?e.split(","):[]).map(t=>String(t).trim()).filter(Boolean).slice(0,50);function Y(e,t){let n=(e.now??Date.now)(),r=String(t.name??"").trim().slice(0,120),s=String(t.guest??"").trim().slice(0,80);if(!r)return{ok:!1,error:'name is required: what you call this grant, e.g. "Support session for company X"'};if(!s)return{ok:!1,error:"guest is required: the other organisation's name"};if(!t.agentId||!e.hasAgent(t.agentId))return{ok:!1,error:`agent must be an agent on this node, got "${t.agentId??""}"`};let a=w.safeParse(t.level??"propose");if(!a.success)return{ok:!1,error:"level must be report, propose or act"};let o=t.days===void 0?_:Number(t.days);if(!Number.isFinite(o)||o<1||o>y)return{ok:!1,error:`days must be between 1 and ${y}`};let d=R(n),{token:u,record:g}=e.tokens.create({name:`guest ${s} (${r})`,scopes:[`${h}${d}`],expiresInDays:Math.ceil(o)}),{code:i,expiresAt:p}=e.codes.create({token:u,tokenId:g.id,name:d}),c={id:d,name:r,guest:s,agentId:t.agentId,folders:l(t.folders),skills:l(t.skills),commands:l(t.commands),level:a.data,state:"pending",tokenId:g.id,createdAt:new Date(n).toISOString(),expiresAt:new Date(n+o*864e5).toISOString(),usage:{turns:0,tokens:0}};return e.guests.add(c),e.guests.log({grant:d,event:"invited",detail:`${s}: ${r}`}),{ok:!0,code:i,codeExpiresAt:p,grant:c}}var J="That code didn't work. Ask the host for a new one.";async function q(e,t,n){let r=Date.now(),s=n.now??Date.now,a=n.log??(f=>console.log(f)),o=n.limiter.retryAfter(t);if(o>0)return a(`[guests] join refused from ${t}: locked out for ${o}s more`),{status:429,body:{error:"too many attempts",retryAfter:o},retryAfter:o};let d=n.codes.redeem(e.code),u=d?n.tokens.verify(d.token):null,g=u?$(u):null,i=g?n.guests.get(g):null;if(await L(r,n.minMs??T),!d||!u||!i||i.tokenId!==u.id||i.state==="ended")return n.limiter.fail(t),a(`[guests] join failed from ${t}`),{status:401,body:{error:G}};n.limiter.succeed(t);let p=e.node&&typeof e.node=="object"?e.node:{},c=(f,S)=>typeof f=="string"&&f.trim()?f.replace(/\s+/g," ").trim().slice(0,S):void 0,m={id:c(p.id,80),name:c(p.name,80),address:t},D=i.expiresAt.slice(0,10),k=x(n.root,{title:`Guest mesh: ${i.guest} wants to join`,ask:`Let "${m.name??m.id??"a node"}" at ${t} use ${i.agentId} inside "${i.name}" (${i.level}, until ${D})?`,recommend:`Yes if ${i.guest} told you they are joining now. No if you did not expect it.`,if_silent:"discard",raised_by:P},{now:s()});return k.ok?(n.guests.update(i.id,{guestNode:m,cardId:k.card.id}),n.guests.log({grant:i.id,event:"joined",address:t,detail:m.name??m.id}),a(`[guests] ${i.id}: ${i.guest} joined from ${t}; waiting for the owner (card ${k.card.id})`),{status:200,body:{grant:i.id,name:i.name,agentId:i.agentId,level:i.level,expiresAt:i.expiresAt,state:"pending"},token:d.token}):(a(`[guests] ${i.id}: join from ${t} could not raise a card: ${k.error}`),{status:403,body:{error:"The host cannot take a join right now. Try again later."}})}var v="no grant opens this",j="waiting for the host to approve the join",O="the host paused this grant";function N(e,t){let n=e.now??Date.now,r=e.log??(o=>console.log(o));if(t.state==="ended")return t;if(Date.parse(t.expiresAt)<=n())return r(`[guests] ${t.id}: expired`),I({tokens:e.tokens,guests:e.guests,now:n},t.id,"expired")??t;if(t.state!=="pending")return t;let s=t.cardId?A(e.root,t.cardId):null,a=s?s.status==="decided"?s.verdict:s.status==="expired"?"no":null:null;if(a==="yes"){let o=e.guests.update(t.id,{state:"active",approvedAt:new Date(n()).toISOString()})??t;return e.guests.log({grant:t.id,event:"approved",detail:s?.decided_by}),r(`[guests] ${t.id}: join approved`),o}if(a==="no"){let o=s?.status==="expired"?"the host did not answer in time":"the host said no",d=I({tokens:e.tokens,guests:e.guests,now:n},t.id,o)??t;return e.guests.log({grant:t.id,event:"refused",detail:o}),r(`[guests] ${t.id}: join refused: ${o}`),d}return t}function B(e,t){let n=e?t.tokens.verify(e):null,r=n?$(n):null,s=r?t.guests.get(r):null;if(!n||!s||s.tokenId!==n.id)return{ok:!1,status:401,error:v};let a=N(t,s);return a.state==="ended"?{ok:!1,status:401,error:v}:a.state==="pending"?{ok:!1,status:403,error:j,waiting:!0}:a.state==="paused"?{ok:!1,status:403,error:O,paused:!0}:{ok:!0,grant:a}}function C(e){let t=(r,s)=>r.length?r.join(", "):`none named: do not touch ${s} unless the owner's own instructions already allow it for this work`,n=e.level==="report"?"report: read and answer only; change nothing":e.level==="propose"?"propose: you may prepare changes and open a merge request or draft; never merge, deploy or delete":"act: you may act inside the grant without asking";return[`[Guest mesh] You are working for a guest organisation, "${e.guest}", under the grant "${e.name}" that the owner of this node opened.`,`Stay inside it. Folders: ${t(e.folders,"files")}. Skills: ${t(e.skills,"skills")}. Commands: ${t(e.commands,"commands")}. Freedom: ${n}. The grant ends on ${e.expiresAt.slice(0,10)}.`,"Anything outside the grant: say it is not covered and stop. The guest sees only your answers: never reveal other chats, agents, people or files of this node."].join(`
+`)}function U(e,t){return{agentId:e.agentId,message:t,context:{channel:"guest",chatId:`guest:${e.id}`,sender:`guest:${e.guest}`},systemPromptAppend:C(e),...e.level==="act"?{}:{autonomy:e.level}}}function X(e,t){let n=e.guests.get(t);if(!n||n.state!=="active")return null;let r=e.guests.update(t,{state:"paused",pausedAt:new Date((e.now??Date.now)()).toISOString()});return e.guests.log({grant:t,event:"paused"}),r}function W(e,t){let n=e.guests.get(t);if(!n||n.state!=="paused")return null;let r=e.guests.update(t,{state:"active",pausedAt:void 0});return e.guests.log({grant:t,event:"resumed"}),r}function I(e,t,n="ended by the host"){let r=e.guests.get(t);if(!r||r.state==="ended")return null;e.tokens.revoke(r.tokenId);let s=e.guests.update(t,{state:"ended",endedAt:new Date((e.now??Date.now)()).toISOString(),endedReason:n});return e.guests.log({grant:t,event:n==="expired"?"expired":"ended",detail:n}),s}function H(e,t,n){let r=e.guests.get(t);if(!r||r.state==="ended")return{ok:!1,error:`no open grant "${t}"`};let s={};if(n.folders!==void 0&&(s.folders=l(n.folders)),n.skills!==void 0&&(s.skills=l(n.skills)),n.commands!==void 0&&(s.commands=l(n.commands)),n.level!==void 0){let u=w.safeParse(n.level);if(!u.success)return{ok:!1,error:"level must be report, propose or act"};s.level=u.data}if(n.days!==void 0){let u=Number(n.days);if(!Number.isFinite(u)||u<1||u>y)return{ok:!1,error:`days must be between 1 and ${y}`};s.expiresAt=new Date((e.now??Date.now)()+u*864e5).toISOString()}let a=e.guests.update(t,s),o=["report","propose","act"],d=s.level&&o.indexOf(s.level)>o.indexOf(r.level)||s.folders&&s.folders.length>r.folders.length||s.skills&&s.skills.length>r.skills.length||s.commands&&s.commands.length>r.commands.length||s.expiresAt&&s.expiresAt>r.expiresAt;return e.guests.log({grant:t,event:d?"widened":"narrowed",detail:Object.keys(s).join(", ")}),{ok:!0,grant:a}}function z(e){return{grant:e.id,name:e.name,agentId:e.agentId,level:e.level,folders:e.folders,skills:e.skills,commands:e.commands,state:e.state,expiresAt:e.expiresAt,usage:e.usage}}async function L(e,t){let n=e+t-Date.now();n>0&&await new Promise(r=>setTimeout(r,n))}export{h as a,P as b,_ as c,y as d,$ as e,R as f,Y as g,J as h,q as i,v as j,j as k,O as l,N as m,B as n,C as o,U as p,X as q,W as r,I as s,H as t,z as u};
+//# sourceMappingURL=chunk-4L244AW4.js.map

package/dist/chunk-4L244AW4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guests/grants.ts"],"sourcesContent":["import { TokenStore, type TokenRecord } from \"@/daemon/token-store\"\nimport { PairCodeStore } from \"@/daemon/pair-codes\"\nimport { PAIR_CODE_FAILED, type PairAttemptLimiter } from \"@/daemon/app-pair-code\"\nimport { createCard, readCard } from \"@/approvals/cards\"\nimport { autonomyLevelSchema, type AutonomyLevel } from \"@/guard/autonomy\"\nimport { GuestStore, type GuestGrant } from \"./store\"\n\n// --- Opening part of a mesh to a guest, and keeping it in hand (#380) ---\n//\n// Two roles. The host opens a grant: one of its agents, named folders,\n// skills and commands, a freedom level and an end date. The guest is the\n// other organisation's mesh. Access goes one way per grant.\n//\n// The guest asks, the host's agent acts. The guest never gets a shell or\n// a session on the host's machine: its messages run as turns of the host\n// agent, under the host's rules and in the host's log, with the routine\n// autonomy levels of #80 enforced on the run (report: read-only;\n// propose: no merge, deploy or delete; act: inside the grant, no question\n// asked). What the grant names is put in front of the agent on every turn.\n//\n// Joining is a one-time code, like phone pairing; the join arrives as a\n// decision card in the host's Approvals inbox. No yes, no join. The host\n// can pause, widen, narrow or end the grant while it is in use.\n\nexport const GUEST_SCOPE_PREFIX = \"guest:\"\n/** Who the join card is raised by: not an agent, so no agent is told the\n *  verdict; the guest routes read it instead. */\nexport const JOIN_CARD_BY = \"guests\"\nexport const DEFAULT_GRANT_DAYS = 7\nexport const MAX_GRANT_DAYS = 365\nconst MIN_MS = 400\n\nexport interface GrantInput {\n  name: string\n  guest: string\n  agentId: string\n  folders?: string[]\n  skills?: string[]\n  commands?: string[]\n  level?: string\n  days?: number\n}\n\nexport interface GuestDeps {\n  tokens: TokenStore\n  codes: PairCodeStore\n  guests: GuestStore\n  hasAgent: (agentId: string) => boolean\n  /** The install folder: where decision cards live. */\n  root: string\n  limiter: PairAttemptLimiter\n  now?: () => number\n  minMs?: number\n  log?: (line: string) => void\n}\n\nexport function grantIdOf(rec: TokenRecord): string | null {\n  const scope = rec.scopes.find((s) => s.startsWith(GUEST_SCOPE_PREFIX))\n  return scope ? scope.slice(GUEST_SCOPE_PREFIX.length) : null\n}\n\nexport function newGrantId(now: number): string {\n  return `g-${now.toString(36)}-${Math.random().toString(36).slice(2, 6)}`\n}\n\nconst list = (v: unknown): string[] =>\n  (Array.isArray(v) ? v : typeof v === \"string\" ? v.split(\",\") : []).map((s) => String(s).trim()).filter(Boolean).slice(0, 50)\n\nexport type InviteResult =\n  | { ok: true; code: string; codeExpiresAt: string; grant: GuestGrant }\n  | { ok: false; error: string }\n\n/** Open a grant and mint the one-time code the guest joins with. */\nexport function inviteGuest(deps: Pick<GuestDeps, \"tokens\" | \"codes\" | \"guests\" | \"hasAgent\" | \"now\">, input: GrantInput): InviteResult {\n  const now = (deps.now ?? Date.now)()\n  const name = String(input.name ?? \"\").trim().slice(0, 120)\n  const guest = String(input.guest ?? \"\").trim().slice(0, 80)\n  if (!name) return { ok: false, error: \"name is required: what you call this grant, e.g. \\\"Support session for company X\\\"\" }\n  if (!guest) return { ok: false, error: \"guest is required: the other organisation's name\" }\n  if (!input.agentId || !deps.hasAgent(input.agentId)) return { ok: false, error: `agent must be an agent on this node, got \"${input.agentId ?? \"\"}\"` }\n  const level = autonomyLevelSchema.safeParse(input.level ?? \"propose\")\n  if (!level.success) return { ok: false, error: \"level must be report, propose or act\" }\n  const days = input.days === undefined ? DEFAULT_GRANT_DAYS : Number(input.days)\n  if (!Number.isFinite(days) || days < 1 || days > MAX_GRANT_DAYS) return { ok: false, error: `days must be between 1 and ${MAX_GRANT_DAYS}` }\n  const id = newGrantId(now)\n  const { token, record } = deps.tokens.create({ name: `guest ${guest} (${name})`, scopes: [`${GUEST_SCOPE_PREFIX}${id}`], expiresInDays: Math.ceil(days) })\n  const { code, expiresAt: codeExpiresAt } = deps.codes.create({ token, tokenId: record.id, name: id })\n  const grant: GuestGrant = {\n    id, name, guest, agentId: input.agentId,\n    folders: list(input.folders), skills: list(input.skills), commands: list(input.commands),\n    level: level.data, state: \"pending\", tokenId: record.id,\n    createdAt: new Date(now).toISOString(), expiresAt: new Date(now + days * 86_400_000).toISOString(),\n    usage: { turns: 0, tokens: 0 },\n  }\n  deps.guests.add(grant)\n  deps.guests.log({ grant: id, event: \"invited\", detail: `${guest}: ${name}` })\n  return { ok: true, code, codeExpiresAt, grant }\n}\n\nexport type JoinResult =\n  | { status: 200; body: { grant: string; name: string; agentId: string; level: AutonomyLevel; expiresAt: string; state: \"pending\" }; token: string }\n  | { status: 401 | 403; body: { error: string } }\n  | { status: 429; body: { error: string; retryAfter: number }; retryAfter: number }\n\nexport const JOIN_FAILED = \"That code didn't work. Ask the host for a new one.\"\n\n/** POST /mesh/guest/join: the guest trades the code for its key and asks\n *  the host to approve the join. */\nexport async function joinGuest(\n  body: Record<string, unknown>,\n  client: string,\n  deps: GuestDeps,\n): Promise<JoinResult> {\n  const started = Date.now()\n  const now = deps.now ?? Date.now\n  const log = deps.log ?? ((line: string) => console.log(line))\n  const wait = deps.limiter.retryAfter(client)\n  if (wait > 0) {\n    log(`[guests] join refused from ${client}: locked out for ${wait}s more`)\n    return { status: 429, body: { error: \"too many attempts\", retryAfter: wait }, retryAfter: wait }\n  }\n  const redeemed = deps.codes.redeem(body.code)\n  const rec = redeemed ? deps.tokens.verify(redeemed.token) : null\n  const grantId = rec ? grantIdOf(rec) : null\n  const grant = grantId ? deps.guests.get(grantId) : null\n  await padTo(started, deps.minMs ?? MIN_MS)\n  if (!redeemed || !rec || !grant || grant.tokenId !== rec.id || grant.state === \"ended\") {\n    deps.limiter.fail(client)\n    log(`[guests] join failed from ${client}`)\n    return { status: 401, body: { error: PAIR_CODE_FAILED } }\n  }\n  deps.limiter.succeed(client)\n  const node = (body.node && typeof body.node === \"object\" ? body.node : {}) as Record<string, unknown>\n  const str = (v: unknown, n: number) => (typeof v === \"string\" && v.trim() ? v.replace(/\\s+/g, \" \").trim().slice(0, n) : undefined)\n  const guestNode = { id: str(node.id, 80), name: str(node.name, 80), address: client }\n  const until = grant.expiresAt.slice(0, 10)\n  const card = createCard(deps.root, {\n    title: `Guest mesh: ${grant.guest} wants to join`,\n    ask: `Let \"${guestNode.name ?? guestNode.id ?? \"a node\"}\" at ${client} use ${grant.agentId} inside \"${grant.name}\" (${grant.level}, until ${until})?`,\n    recommend: `Yes if ${grant.guest} told you they are joining now. No if you did not expect it.`,\n    if_silent: \"discard\",\n    raised_by: JOIN_CARD_BY,\n  }, { now: now() })\n  if (!card.ok) {\n    log(`[guests] ${grant.id}: join from ${client} could not raise a card: ${card.error}`)\n    return { status: 403, body: { error: \"The host cannot take a join right now. Try again later.\" } }\n  }\n  deps.guests.update(grant.id, { guestNode, cardId: card.card.id })\n  deps.guests.log({ grant: grant.id, event: \"joined\", address: client, detail: guestNode.name ?? guestNode.id })\n  log(`[guests] ${grant.id}: ${grant.guest} joined from ${client}; waiting for the owner (card ${card.card.id})`)\n  return {\n    status: 200,\n    body: { grant: grant.id, name: grant.name, agentId: grant.agentId, level: grant.level, expiresAt: grant.expiresAt, state: \"pending\" },\n    token: redeemed.token,\n  }\n}\n\nexport type AccessResult =\n  | { ok: true; grant: GuestGrant }\n  | { ok: false; status: 401; error: string }\n  | { ok: false; status: 403; error: string; waiting?: true; paused?: true }\n\nexport const NO_GRANT = \"no grant opens this\"\nexport const WAITING_HOST = \"waiting for the host to approve the join\"\nexport const PAUSED = \"the host paused this grant\"\n\ntype SettleDeps = Pick<GuestDeps, \"tokens\" | \"guests\" | \"root\" | \"now\" | \"log\">\n\n/** Applies what time and the host's card say: an expired grant ends, a\n *  decided join card activates or ends the grant. Returns the grant as it\n *  stands now. Both sides call this: the guest on every request, the host\n *  before listing or acting, so a yes on the card counts at once. */\nexport function settleGrant(deps: SettleDeps, grant: GuestGrant): GuestGrant {\n  const now = deps.now ?? Date.now\n  const log = deps.log ?? ((line: string) => console.log(line))\n  if (grant.state === \"ended\") return grant\n  if (Date.parse(grant.expiresAt) <= now()) {\n    log(`[guests] ${grant.id}: expired`)\n    return endGrant({ tokens: deps.tokens, guests: deps.guests, now }, grant.id, \"expired\") ?? grant\n  }\n  if (grant.state !== \"pending\") return grant\n  const card = grant.cardId ? readCard(deps.root, grant.cardId) : null\n  const answer = !card ? null : card.status === \"decided\" ? card.verdict : card.status === \"expired\" ? \"no\" : null\n  if (answer === \"yes\") {\n    const out = deps.guests.update(grant.id, { state: \"active\", approvedAt: new Date(now()).toISOString() }) ?? grant\n    deps.guests.log({ grant: grant.id, event: \"approved\", detail: card?.decided_by })\n    log(`[guests] ${grant.id}: join approved`)\n    return out\n  }\n  if (answer === \"no\") {\n    const reason = card?.status === \"expired\" ? \"the host did not answer in time\" : \"the host said no\"\n    const out = endGrant({ tokens: deps.tokens, guests: deps.guests, now }, grant.id, reason) ?? grant\n    deps.guests.log({ grant: grant.id, event: \"refused\", detail: reason })\n    log(`[guests] ${grant.id}: join refused: ${reason}`)\n    return out\n  }\n  return grant\n}\n\n/** Whether `token` opens a grant right now. */\nexport function guestAccess(token: string | null, deps: SettleDeps): AccessResult {\n  const rec = token ? deps.tokens.verify(token) : null\n  const grantId = rec ? grantIdOf(rec) : null\n  const found = grantId ? deps.guests.get(grantId) : null\n  if (!rec || !found || found.tokenId !== rec.id) return { ok: false, status: 401, error: NO_GRANT }\n  const grant = settleGrant(deps, found)\n  if (grant.state === \"ended\") return { ok: false, status: 401, error: NO_GRANT }\n  if (grant.state === \"pending\") return { ok: false, status: 403, error: WAITING_HOST, waiting: true }\n  if (grant.state === \"paused\") return { ok: false, status: 403, error: PAUSED, paused: true }\n  return { ok: true, grant }\n}\n\n/** What the host agent is told on every guest turn. */\nexport function grantBrief(grant: GuestGrant): string {\n  const none = (xs: string[], word: string) => xs.length ? xs.join(\", \") : `none named: do not touch ${word} unless the owner's own instructions already allow it for this work`\n  const level =\n    grant.level === \"report\" ? \"report: read and answer only; change nothing\" :\n    grant.level === \"propose\" ? \"propose: you may prepare changes and open a merge request or draft; never merge, deploy or delete\" :\n    \"act: you may act inside the grant without asking\"\n  return [\n    `[Guest mesh] You are working for a guest organisation, \"${grant.guest}\", under the grant \"${grant.name}\" that the owner of this node opened.`,\n    `Stay inside it. Folders: ${none(grant.folders, \"files\")}. Skills: ${none(grant.skills, \"skills\")}. Commands: ${none(grant.commands, \"commands\")}. Freedom: ${level}. The grant ends on ${grant.expiresAt.slice(0, 10)}.`,\n    `Anything outside the grant: say it is not covered and stop. The guest sees only your answers: never reveal other chats, agents, people or files of this node.`,\n  ].join(\"\\n\")\n}\n\n/** A guest's message as a turn of the host agent. */\nexport function guestTask(grant: GuestGrant, message: string): {\n  agentId: string\n  message: string\n  context: { channel: \"guest\"; chatId: string; sender: string }\n  systemPromptAppend: string\n  autonomy?: AutonomyLevel\n} {\n  return {\n    agentId: grant.agentId,\n    message,\n    context: { channel: \"guest\", chatId: `guest:${grant.id}`, sender: `guest:${grant.guest}` },\n    systemPromptAppend: grantBrief(grant),\n    ...(grant.level === \"act\" ? {} : { autonomy: grant.level }),\n  }\n}\n\ntype ControlDeps = Pick<GuestDeps, \"tokens\" | \"guests\" | \"now\">\n\nexport function pauseGrant(deps: ControlDeps, id: string): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state !== \"active\") return null\n  const out = deps.guests.update(id, { state: \"paused\", pausedAt: new Date((deps.now ?? Date.now)()).toISOString() })\n  deps.guests.log({ grant: id, event: \"paused\" })\n  return out\n}\n\nexport function resumeGrant(deps: ControlDeps, id: string): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state !== \"paused\") return null\n  const out = deps.guests.update(id, { state: \"active\", pausedAt: undefined })\n  deps.guests.log({ grant: id, event: \"resumed\" })\n  return out\n}\n\n/** Ends the grant: its key stops at once. */\nexport function endGrant(deps: ControlDeps, id: string, reason = \"ended by the host\"): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state === \"ended\") return null\n  deps.tokens.revoke(grant.tokenId)\n  const out = deps.guests.update(id, { state: \"ended\", endedAt: new Date((deps.now ?? Date.now)()).toISOString(), endedReason: reason })\n  deps.guests.log({ grant: id, event: reason === \"expired\" ? \"expired\" : \"ended\", detail: reason })\n  return out\n}\n\nexport interface GrantPatch { folders?: unknown; skills?: unknown; commands?: unknown; level?: unknown; days?: unknown }\n\n/** Widen or narrow a grant while it is in use. */\nexport function updateGrant(deps: ControlDeps, id: string, patch: GrantPatch): { ok: true; grant: GuestGrant } | { ok: false; error: string } {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state === \"ended\") return { ok: false, error: `no open grant \"${id}\"` }\n  const next: Partial<GuestGrant> = {}\n  if (patch.folders !== undefined) next.folders = list(patch.folders)\n  if (patch.skills !== undefined) next.skills = list(patch.skills)\n  if (patch.commands !== undefined) next.commands = list(patch.commands)\n  if (patch.level !== undefined) {\n    const level = autonomyLevelSchema.safeParse(patch.level)\n    if (!level.success) return { ok: false, error: \"level must be report, propose or act\" }\n    next.level = level.data\n  }\n  if (patch.days !== undefined) {\n    const days = Number(patch.days)\n    if (!Number.isFinite(days) || days < 1 || days > MAX_GRANT_DAYS) return { ok: false, error: `days must be between 1 and ${MAX_GRANT_DAYS}` }\n    next.expiresAt = new Date((deps.now ?? Date.now)() + days * 86_400_000).toISOString()\n  }\n  const out = deps.guests.update(id, next)!\n  const order: AutonomyLevel[] = [\"report\", \"propose\", \"act\"]\n  const wider = (next.level && order.indexOf(next.level) > order.indexOf(grant.level))\n    || (next.folders && next.folders.length > grant.folders.length)\n    || (next.skills && next.skills.length > grant.skills.length)\n    || (next.commands && next.commands.length > grant.commands.length)\n    || (next.expiresAt && next.expiresAt > grant.expiresAt)\n  deps.guests.log({ grant: id, event: wider ? \"widened\" : \"narrowed\", detail: Object.keys(next).join(\", \") })\n  return { ok: true, grant: out }\n}\n\n/** What the guest may know about its grant. */\nexport function grantForGuest(grant: GuestGrant): Record<string, unknown> {\n  return {\n    grant: grant.id, name: grant.name, agentId: grant.agentId, level: grant.level,\n    folders: grant.folders, skills: grant.skills, commands: grant.commands,\n    state: grant.state, expiresAt: grant.expiresAt, usage: grant.usage,\n  }\n}\n\nasync function padTo(started: number, minMs: number): Promise<void> {\n  const left = started + minMs - Date.now()\n  if (left > 0) await new Promise((r) => setTimeout(r, left))\n}\n"],"mappings":"qGAIAA,IAoBO,IAAMC,EAAqB,SAGrBC,EAAe,SACfC,EAAqB,EACrBC,EAAiB,IACxBC,EAAS,IA0BR,SAASC,EAAUC,EAAiC,CACzD,IAAMC,EAAQD,EAAI,OAAO,KAAME,GAAMA,EAAE,WAAWR,CAAkB,CAAC,EACrE,OAAOO,EAAQA,EAAM,MAAMP,EAAmB,MAAM,EAAI,IAC1D,CAEO,SAASS,EAAWC,EAAqB,CAC9C,MAAO,KAAKA,EAAI,SAAS,EAAE,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,GACvE,CAEA,IAAMC,EAAQC,IACX,MAAM,QAAQA,CAAC,EAAIA,EAAI,OAAOA,GAAM,SAAWA,EAAE,MAAM,GAAG,EAAI,CAAC,GAAG,IAAKJ,GAAM,OAAOA,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,MAAM,EAAG,EAAE,EAOtH,SAASK,EAAYC,EAA2EC,EAAiC,CACtI,IAAML,GAAOI,EAAK,KAAO,KAAK,KAAK,EAC7BE,EAAO,OAAOD,EAAM,MAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAG,EACnDE,EAAQ,OAAOF,EAAM,OAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,EAAE,EAC1D,GAAI,CAACC,EAAM,MAAO,CAAE,GAAI,GAAO,MAAO,kFAAqF,EAC3H,GAAI,CAACC,EAAO,MAAO,CAAE,GAAI,GAAO,MAAO,kDAAmD,EAC1F,GAAI,CAACF,EAAM,SAAW,CAACD,EAAK,SAASC,EAAM,OAAO,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,6CAA6CA,EAAM,SAAW,KAAM,EACpJ,IAAMG,EAAQC,EAAoB,UAAUJ,EAAM,OAAS,SAAS,EACpE,GAAI,CAACG,EAAM,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EACtF,IAAME,EAAOL,EAAM,OAAS,OAAYb,EAAqB,OAAOa,EAAM,IAAI,EAC9E,GAAI,CAAC,OAAO,SAASK,CAAI,GAAKA,EAAO,GAAKA,EAAOjB,EAAgB,MAAO,CAAE,GAAI,GAAO,MAAO,8BAA8BA,GAAiB,EAC3I,IAAMkB,EAAKZ,EAAWC,CAAG,EACnB,CAAE,MAAAY,EAAO,OAAAC,CAAO,EAAIT,EAAK,OAAO,OAAO,CAAE,KAAM,SAASG,MAAUD,KAAS,OAAQ,CAAC,GAAGhB,IAAqBqB,GAAI,EAAG,cAAe,KAAK,KAAKD,CAAI,CAAE,CAAC,EACnJ,CAAE,KAAAI,EAAM,UAAWC,CAAc,EAAIX,EAAK,MAAM,OAAO,CAAE,MAAAQ,EAAO,QAASC,EAAO,GAAI,KAAMF,CAAG,CAAC,EAC9FK,EAAoB,CACxB,GAAAL,EAAI,KAAAL,EAAM,MAAAC,EAAO,QAASF,EAAM,QAChC,QAASJ,EAAKI,EAAM,OAAO,EAAG,OAAQJ,EAAKI,EAAM,MAAM,EAAG,SAAUJ,EAAKI,EAAM,QAAQ,EACvF,MAAOG,EAAM,KAAM,MAAO,UAAW,QAASK,EAAO,GACrD,UAAW,IAAI,KAAKb,CAAG,EAAE,YAAY,EAAG,UAAW,IAAI,KAAKA,EAAMU,EAAO,KAAU,EAAE,YAAY,EACjG,MAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAC/B,EACA,OAAAN,EAAK,OAAO,IAAIY,CAAK,EACrBZ,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,UAAW,OAAQ,GAAGJ,MAAUD,GAAO,CAAC,EACrE,CAAE,GAAI,GAAM,KAAAQ,EAAM,cAAAC,EAAe,MAAAC,CAAM,CAChD,CAOO,IAAMC,EAAc,qDAI3B,eAAsBC,EACpBC,EACAC,EACAhB,EACqB,CACrB,IAAMiB,EAAU,KAAK,IAAI,EACnBrB,EAAMI,EAAK,KAAO,KAAK,IACvBkB,EAAMlB,EAAK,MAASmB,GAAiB,QAAQ,IAAIA,CAAI,GACrDC,EAAOpB,EAAK,QAAQ,WAAWgB,CAAM,EAC3C,GAAII,EAAO,EACT,OAAAF,EAAI,8BAA8BF,qBAA0BI,SAAY,EACjE,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,oBAAqB,WAAYA,CAAK,EAAG,WAAYA,CAAK,EAEjG,IAAMC,EAAWrB,EAAK,MAAM,OAAOe,EAAK,IAAI,EACtCvB,EAAM6B,EAAWrB,EAAK,OAAO,OAAOqB,EAAS,KAAK,EAAI,KACtDC,EAAU9B,EAAMD,EAAUC,CAAG,EAAI,KACjCoB,EAAQU,EAAUtB,EAAK,OAAO,IAAIsB,CAAO,EAAI,KAEnD,GADA,MAAMC,EAAMN,EAASjB,EAAK,OAASV,CAAM,EACrC,CAAC+B,GAAY,CAAC7B,GAAO,CAACoB,GAASA,EAAM,UAAYpB,EAAI,IAAMoB,EAAM,QAAU,QAC7E,OAAAZ,EAAK,QAAQ,KAAKgB,CAAM,EACxBE,EAAI,6BAA6BF,GAAQ,EAClC,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAOQ,CAAiB,CAAE,EAE1DxB,EAAK,QAAQ,QAAQgB,CAAM,EAC3B,IAAMS,EAAQV,EAAK,MAAQ,OAAOA,EAAK,MAAS,SAAWA,EAAK,KAAO,CAAC,EAClEW,EAAM,CAAC5B,EAAY6B,IAAe,OAAO7B,GAAM,UAAYA,EAAE,KAAK,EAAIA,EAAE,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,EAAG6B,CAAC,EAAI,OAClHC,EAAY,CAAE,GAAIF,EAAID,EAAK,GAAI,EAAE,EAAG,KAAMC,EAAID,EAAK,KAAM,EAAE,EAAG,QAAST,CAAO,EAC9Ea,EAAQjB,EAAM,UAAU,MAAM,EAAG,EAAE,EACnCkB,EAAOC,EAAW/B,EAAK,KAAM,CACjC,MAAO,eAAeY,EAAM,sBAC5B,IAAK,QAAQgB,EAAU,MAAQA,EAAU,IAAM,gBAAgBZ,SAAcJ,EAAM,mBAAmBA,EAAM,UAAUA,EAAM,gBAAgBiB,MAC5I,UAAW,UAAUjB,EAAM,oEAC3B,UAAW,UACX,UAAWzB,CACb,EAAG,CAAE,IAAKS,EAAI,CAAE,CAAC,EACjB,OAAKkC,EAAK,IAIV9B,EAAK,OAAO,OAAOY,EAAM,GAAI,CAAE,UAAAgB,EAAW,OAAQE,EAAK,KAAK,EAAG,CAAC,EAChE9B,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,SAAU,QAASI,EAAQ,OAAQY,EAAU,MAAQA,EAAU,EAAG,CAAC,EAC7GV,EAAI,YAAYN,EAAM,OAAOA,EAAM,qBAAqBI,kCAAuCc,EAAK,KAAK,KAAK,EACvG,CACL,OAAQ,IACR,KAAM,CAAE,MAAOlB,EAAM,GAAI,KAAMA,EAAM,KAAM,QAASA,EAAM,QAAS,MAAOA,EAAM,MAAO,UAAWA,EAAM,UAAW,MAAO,SAAU,EACpI,MAAOS,EAAS,KAClB,IAVEH,EAAI,YAAYN,EAAM,iBAAiBI,6BAAkCc,EAAK,OAAO,EAC9E,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,yDAA0D,CAAE,EAUrG,CAOO,IAAME,EAAW,sBACXC,EAAe,2CACfC,EAAS,6BAQf,SAASC,EAAYnC,EAAkBY,EAA+B,CAC3E,IAAMhB,EAAMI,EAAK,KAAO,KAAK,IACvBkB,EAAMlB,EAAK,MAASmB,GAAiB,QAAQ,IAAIA,CAAI,GAC3D,GAAIP,EAAM,QAAU,QAAS,OAAOA,EACpC,GAAI,KAAK,MAAMA,EAAM,SAAS,GAAKhB,EAAI,EACrC,OAAAsB,EAAI,YAAYN,EAAM,aAAa,EAC5BwB,EAAS,CAAE,OAAQpC,EAAK,OAAQ,OAAQA,EAAK,OAAQ,IAAAJ,CAAI,EAAGgB,EAAM,GAAI,SAAS,GAAKA,EAE7F,GAAIA,EAAM,QAAU,UAAW,OAAOA,EACtC,IAAMkB,EAAOlB,EAAM,OAASyB,EAASrC,EAAK,KAAMY,EAAM,MAAM,EAAI,KAC1D0B,EAAUR,EAAcA,EAAK,SAAW,UAAYA,EAAK,QAAUA,EAAK,SAAW,UAAY,KAAO,KAArF,KACvB,GAAIQ,IAAW,MAAO,CACpB,IAAMC,EAAMvC,EAAK,OAAO,OAAOY,EAAM,GAAI,CAAE,MAAO,SAAU,WAAY,IAAI,KAAKhB,EAAI,CAAC,EAAE,YAAY,CAAE,CAAC,GAAKgB,EAC5G,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,WAAY,OAAQkB,GAAM,UAAW,CAAC,EAChFZ,EAAI,YAAYN,EAAM,mBAAmB,EAClC2B,EAET,GAAID,IAAW,KAAM,CACnB,IAAME,EAASV,GAAM,SAAW,UAAY,kCAAoC,mBAC1ES,EAAMH,EAAS,CAAE,OAAQpC,EAAK,OAAQ,OAAQA,EAAK,OAAQ,IAAAJ,CAAI,EAAGgB,EAAM,GAAI4B,CAAM,GAAK5B,EAC7F,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,UAAW,OAAQ4B,CAAO,CAAC,EACrEtB,EAAI,YAAYN,EAAM,qBAAqB4B,GAAQ,EAC5CD,EAET,OAAO3B,CACT,CAGO,SAAS6B,EAAYjC,EAAsBR,EAAgC,CAChF,IAAMR,EAAMgB,EAAQR,EAAK,OAAO,OAAOQ,CAAK,EAAI,KAC1Cc,EAAU9B,EAAMD,EAAUC,CAAG,EAAI,KACjCkD,EAAQpB,EAAUtB,EAAK,OAAO,IAAIsB,CAAO,EAAI,KACnD,GAAI,CAAC9B,GAAO,CAACkD,GAASA,EAAM,UAAYlD,EAAI,GAAI,MAAO,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOwC,CAAS,EACjG,IAAMpB,EAAQuB,EAAYnC,EAAM0C,CAAK,EACrC,OAAI9B,EAAM,QAAU,QAAgB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOoB,CAAS,EAC1EpB,EAAM,QAAU,UAAkB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOqB,EAAc,QAAS,EAAK,EAC/FrB,EAAM,QAAU,SAAiB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOsB,EAAQ,OAAQ,EAAK,EACpF,CAAE,GAAI,GAAM,MAAAtB,CAAM,CAC3B,CAGO,SAAS+B,EAAW/B,EAA2B,CACpD,IAAMgC,EAAO,CAACC,EAAcC,IAAiBD,EAAG,OAASA,EAAG,KAAK,IAAI,EAAI,4BAA4BC,uEAC/F1C,EACJQ,EAAM,QAAU,SAAW,+CAC3BA,EAAM,QAAU,UAAY,oGAC5B,mDACF,MAAO,CACL,2DAA2DA,EAAM,4BAA4BA,EAAM,4CACnG,4BAA4BgC,EAAKhC,EAAM,QAAS,OAAO,cAAcgC,EAAKhC,EAAM,OAAQ,QAAQ,gBAAgBgC,EAAKhC,EAAM,SAAU,UAAU,eAAeR,wBAA4BQ,EAAM,UAAU,MAAM,EAAG,EAAE,KACrN,+JACF,EAAE,KAAK;AAAA,CAAI,CACb,CAGO,SAASmC,EAAUnC,EAAmBoC,EAM3C,CACA,MAAO,CACL,QAASpC,EAAM,QACf,QAAAoC,EACA,QAAS,CAAE,QAAS,QAAS,OAAQ,SAASpC,EAAM,KAAM,OAAQ,SAASA,EAAM,OAAQ,EACzF,mBAAoB+B,EAAW/B,CAAK,EACpC,GAAIA,EAAM,QAAU,MAAQ,CAAC,EAAI,CAAE,SAAUA,EAAM,KAAM,CAC3D,CACF,CAIO,SAASqC,EAAWjD,EAAmBO,EAA+B,CAC3E,IAAMK,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,SAAU,OAAO,KAC/C,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,SAAU,SAAU,IAAI,MAAMP,EAAK,KAAO,KAAK,KAAK,CAAC,EAAE,YAAY,CAAE,CAAC,EAClH,OAAAA,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,QAAS,CAAC,EACvCgC,CACT,CAEO,SAASW,EAAYlD,EAAmBO,EAA+B,CAC5E,IAAMK,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,SAAU,OAAO,KAC/C,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,SAAU,SAAU,MAAU,CAAC,EAC3E,OAAAP,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,SAAU,CAAC,EACxCgC,CACT,CAGO,SAASH,EAASpC,EAAmBO,EAAYiC,EAAS,oBAAwC,CACvG,IAAM5B,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,QAAS,OAAO,KAC9CZ,EAAK,OAAO,OAAOY,EAAM,OAAO,EAChC,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,QAAS,QAAS,IAAI,MAAMP,EAAK,KAAO,KAAK,KAAK,CAAC,EAAE,YAAY,EAAG,YAAawC,CAAO,CAAC,EACrI,OAAAxC,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAOiC,IAAW,UAAY,UAAY,QAAS,OAAQA,CAAO,CAAC,EACzFD,CACT,CAKO,SAASY,EAAYnD,EAAmBO,EAAY6C,EAAmF,CAC5I,IAAMxC,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,kBAAkBL,IAAM,EAC1F,IAAM8C,EAA4B,CAAC,EAInC,GAHID,EAAM,UAAY,SAAWC,EAAK,QAAUxD,EAAKuD,EAAM,OAAO,GAC9DA,EAAM,SAAW,SAAWC,EAAK,OAASxD,EAAKuD,EAAM,MAAM,GAC3DA,EAAM,WAAa,SAAWC,EAAK,SAAWxD,EAAKuD,EAAM,QAAQ,GACjEA,EAAM,QAAU,OAAW,CAC7B,IAAMhD,EAAQC,EAAoB,UAAU+C,EAAM,KAAK,EACvD,GAAI,CAAChD,EAAM,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EACtFiD,EAAK,MAAQjD,EAAM,KAErB,GAAIgD,EAAM,OAAS,OAAW,CAC5B,IAAM9C,EAAO,OAAO8C,EAAM,IAAI,EAC9B,GAAI,CAAC,OAAO,SAAS9C,CAAI,GAAKA,EAAO,GAAKA,EAAOjB,EAAgB,MAAO,CAAE,GAAI,GAAO,MAAO,8BAA8BA,GAAiB,EAC3IgE,EAAK,UAAY,IAAI,MAAMrD,EAAK,KAAO,KAAK,KAAK,EAAIM,EAAO,KAAU,EAAE,YAAY,EAEtF,IAAMiC,EAAMvC,EAAK,OAAO,OAAOO,EAAI8C,CAAI,EACjCC,EAAyB,CAAC,SAAU,UAAW,KAAK,EACpDC,EAASF,EAAK,OAASC,EAAM,QAAQD,EAAK,KAAK,EAAIC,EAAM,QAAQ1C,EAAM,KAAK,GAC5EyC,EAAK,SAAWA,EAAK,QAAQ,OAASzC,EAAM,QAAQ,QACpDyC,EAAK,QAAUA,EAAK,OAAO,OAASzC,EAAM,OAAO,QACjDyC,EAAK,UAAYA,EAAK,SAAS,OAASzC,EAAM,SAAS,QACvDyC,EAAK,WAAaA,EAAK,UAAYzC,EAAM,UAC/C,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAOgD,EAAQ,UAAY,WAAY,OAAQ,OAAO,KAAKF,CAAI,EAAE,KAAK,IAAI,CAAE,CAAC,EACnG,CAAE,GAAI,GAAM,MAAOd,CAAI,CAChC,CAGO,SAASiB,EAAc5C,EAA4C,CACxE,MAAO,CACL,MAAOA,EAAM,GAAI,KAAMA,EAAM,KAAM,QAASA,EAAM,QAAS,MAAOA,EAAM,MACxE,QAASA,EAAM,QAAS,OAAQA,EAAM,OAAQ,SAAUA,EAAM,SAC9D,MAAOA,EAAM,MAAO,UAAWA,EAAM,UAAW,MAAOA,EAAM,KAC/D,CACF,CAEA,eAAeW,EAAMN,EAAiBwC,EAA8B,CAClE,IAAMC,EAAOzC,EAAUwC,EAAQ,KAAK,IAAI,EACpCC,EAAO,GAAG,MAAM,IAAI,QAAS,GAAM,WAAW,EAAGA,CAAI,CAAC,CAC5D","names":["init_autonomy","GUEST_SCOPE_PREFIX","JOIN_CARD_BY","DEFAULT_GRANT_DAYS","MAX_GRANT_DAYS","MIN_MS","grantIdOf","rec","scope","s","newGrantId","now","list","v","inviteGuest","deps","input","name","guest","level","autonomyLevelSchema","days","id","token","record","code","codeExpiresAt","grant","JOIN_FAILED","joinGuest","body","client","started","log","line","wait","redeemed","grantId","padTo","PAIR_CODE_FAILED","node","str","n","guestNode","until","card","createCard","NO_GRANT","WAITING_HOST","PAUSED","settleGrant","endGrant","readCard","answer","out","reason","guestAccess","found","grantBrief","none","xs","word","guestTask","message","pauseGrant","resumeGrant","updateGrant","patch","next","order","wider","grantForGuest","minMs","left"]}

package/dist/{chunk-PLTX6YGD.js → chunk-AACJ62ID.js}

@@ -48,7 +48,7 @@ The "modified" field is optional and can contain updated values to pass forward.
 ... (output truncated)`:i;return s.exitCode!==0?{tool_use_id:e.id,content:`Command exited with code ${s.exitCode}:
 ${c}`,is_error:!0}:{tool_use_id:e.id,content:c||"(no output)"}}async editFile(e){let t=String(e.input.path||""),o=e.input.edits,n=ge.resolve(this.cwd,t);if(!o||o.length===0)return{tool_use_id:e.id,content:"No edits provided.",is_error:!0};let s=await W.checkFileWrite(t);if(s==="deny")return{tool_use_id:e.id,content:`File write blocked by permissions: ${t}`,is_error:!0};if(s==="skip")return{tool_use_id:e.id,content:`File write skipped (plan mode): ${t}`};if(f.has("pre:file-write")){let a=await f.execute("pre:file-write",{event:"pre:file-write",file:n,cwd:this.cwd});if(a.blocked)return{tool_use_id:e.id,content:a.message||`File edit blocked by pre:file-write hook: ${t}`,is_error:!0}}let i=await re.readFile(n,"utf8"),c=[];for(let a of o)i.includes(a.old_text)?(i=i.replace(a.old_text,a.new_text),c.push(`Replaced: "${a.old_text.slice(0,40)}..."`)):c.push(`Not found: "${a.old_text.slice(0,40)}..."`);return this.options.dryRun||await re.writeFile(n,i,"utf8"),f.has("post:file-write")&&await f.execute("post:file-write",{event:"post:file-write",file:n,fileContent:i,cwd:this.cwd}),{tool_use_id:e.id,content:`Edited ${t}:
 ${c.join(`
-`)}`}}async createFiles(e){let t=e.input,o=t.files||[];return{tool_use_id:e.id,content:t.summary||`Queued ${o.length} file(s) for creation.`,files:o}}async spawnAgent(e){let t=String(e.input.agent_id||""),o=String(e.input.prompt||""),n=Number(e.input.timeout_seconds)||300;if(!t||!o)return{tool_use_id:e.id,content:"agent_id and prompt are required.",is_error:!0};try{let{SubAgentManager:s}=await import("./subagent-XY5N7TUU.js"),{getGlobalRegistry:i}=await import("./registry-WD5B2DQQ.js"),c=i();if(!c)return{tool_use_id:e.id,content:"Sub-agent spawning requires the daemon to be running.",is_error:!0};let p=await new s(c).spawn({targetAgentId:t,prompt:o,parentAgentId:"orchestrator",timeout:n*1e3});return p.success?{tool_use_id:e.id,content:`Sub-agent "${t}" completed (${Math.round(p.duration/1e3)}s):
+`)}`}}async createFiles(e){let t=e.input,o=t.files||[];return{tool_use_id:e.id,content:t.summary||`Queued ${o.length} file(s) for creation.`,files:o}}async spawnAgent(e){let t=String(e.input.agent_id||""),o=String(e.input.prompt||""),n=Number(e.input.timeout_seconds)||300;if(!t||!o)return{tool_use_id:e.id,content:"agent_id and prompt are required.",is_error:!0};try{let{SubAgentManager:s}=await import("./subagent-XY5N7TUU.js"),{getGlobalRegistry:i}=await import("./registry-GHOOAS2Z.js"),c=i();if(!c)return{tool_use_id:e.id,content:"Sub-agent spawning requires the daemon to be running.",is_error:!0};let p=await new s(c).spawn({targetAgentId:t,prompt:o,parentAgentId:"orchestrator",timeout:n*1e3});return p.success?{tool_use_id:e.id,content:`Sub-agent "${t}" completed (${Math.round(p.duration/1e3)}s):
 
 ${p.content}`}:{tool_use_id:e.id,content:`Sub-agent "${t}" failed: ${p.error}`,is_error:!0}}catch(s){return{tool_use_id:e.id,content:`Failed to spawn sub-agent: ${s.message}`,is_error:!0}}}async askUser(e){let t=String(e.input.question||""),o=e.input.options,n=t;return o?.length&&(n+=`
 Options: ${o.join(", ")}`),{tool_use_id:e.id,content:"Question sent to user.",followUp:n}}};async function Ae(r){let{provider:e,systemPrompt:t,messages:o,providerOptions:n,cwd:s,maxIterations:i=20,enabledTools:c,interactive:a=!0,overwrite:p=!1,dryRun:l=!1,onProgress:d,abortSignal:u}=r,m=u?{...n,abortSignal:u}:n;if(!e.generateRaw)return dt(r);let I=new se(s,{interactive:a,overwrite:p,dryRun:l,acmeContext:r.acmeContext,abortSignal:u}),D=be(c);if(r.acmeContext)for(let g of at)D.push({name:g.name,description:g.description,input_schema:g.input_schema});let E=new Set;if(r.mcpTools?.length)for(let g of r.mcpTools)D.push({name:g.name,description:g.description,input_schema:g.input_schema}),E.add(g.name);let C=o.filter(g=>g.role!=="system").map(g=>({role:g.role,content:g.content})),B=[],G=0,F=0,A=0,O="",j,_=0;for(;_<i;){if(_++,u?.aborted)throw new Error("cancelled");d?.({type:"iteration_start",iteration:_}),b.step(_,`Agentic loop iteration (${D.length} tools available)`);let g,M=!!e.generateRawStream&&!!d;try{if(M){let T=null,U=null,v="";for await(let x of e.generateRawStream(C,t,D,m))x.type==="text_delta"?(v+=x.text,d?.({type:"text_delta",text:x.text})):x.type==="thinking_delta"?d?.({type:"thinking_delta",text:x.text}):x.type==="raw_result"?T=x.result:x.type==="error"&&(U=x.error);if(U&&!T)throw new Error(U);if(!T)throw new Error("generateRawStream returned no raw_result event");g=T,g._streamedText=v}else g=await e.generateRaw(C,t,D,m)}catch(T){if(T.message?.includes("not available"))return dt(r);throw T}G+=g.usage.input_tokens+g.usage.output_tokens,F+=g.usage.input_tokens,A+=g.usage.output_tokens;let P=g._streamedText;for(let T of g.content)T.type==="text"&&(O+=T.text,P===void 0&&d?.({type:"text_delta",text:T.text}));if(P!==void 0&&delete g._streamedText,g.stop_reason==="end_turn"||g.stop_reason==="max_tokens")break;if(g.stop_reason==="tool_use"){let T=g.content.filter(v=>v.type==="tool_use");if(T.length===0)break;C.push({role:"assistant",content:g.content});let U=[];for(let v of T){d?.({type:"tool_call",name:v.name,id:v.id,input:v.input}),b.step(_,`Tool call: ${v.name}`);let x;if(E.has(v.name)&&r.mcpDispatch){let h=await r.mcpDispatch(v.name,v.input);x={tool_use_id:v.id,content:h.content,is_error:h.isError}}else x=await I.execute({name:v.name,id:v.id,input:v.input});d?.({type:"tool_result",name:v.name,id:v.id,content:x.content.slice(0,200),is_error:x.is_error}),x.files?.length&&(B.push(...x.files),d?.({type:"files_created",files:x.files})),x.followUp&&(j=x.followUp),U.push({type:"tool_result",tool_use_id:x.tool_use_id,content:x.content,is_error:x.is_error})}if(C.push({role:"user",content:U}),j)break;continue}break}return d?.({type:"complete",iterations:_,totalTokens:G}),{files:B,content:O,followUp:j,tokensUsed:G,inputTokens:F||void 0,outputTokens:A||void 0,iterations:_}}async function dt(r){let{provider:e,systemPrompt:t,messages:o,providerOptions:n,maxIterations:s=5}=r,c=[{role:"system",content:t+`
@@ -123,4 +123,4 @@ ${r.projectInstructions}`),r.memoryContext&&o.push(r.memoryContext),o.push(`# Ou
 Generate output appropriate for: ${e}. Use the \`create_files\` tool to output all files.`),o.join(`
 
 `)}export{qe as a,Vt as b,Yt as c,We as d,ze as e,Ve as f,Ye as g,Pe as h,ee as i,Re as j,le as k,te as l,Tt as m,oe as n,Mt as o,f as p,et as q,tt as r,Me as s,de as t,W as u,ne as v,it as w,Ee as x,$e as y,se as z,mt as A,Zn as B,er as C};
-//# sourceMappingURL=chunk-PLTX6YGD.js.map
+//# sourceMappingURL=chunk-AACJ62ID.js.map

package/dist/chunk-ACFQBLPX.js

@@ -0,0 +1,3 @@
+import{createHash as h,randomBytes as c}from"crypto";import{existsSync as g,mkdirSync as f,readFileSync as p,writeFileSync as x}from"fs";import{resolve as m,dirname as A}from"path";var a="agx_live_",k=".agentx/tokens.json",d=class{file;constructor(e=process.cwd(),t=k){this.file=m(e,t)}load(){if(!g(this.file))return[];try{return JSON.parse(p(this.file,"utf-8"))}catch{return[]}}save(e){f(A(this.file),{recursive:!0}),x(this.file,JSON.stringify(e,null,2)+`
+`,"utf-8")}create(e){if(!e.name?.trim())throw new Error("Token name is required.");if(!Array.isArray(e.scopes)||e.scopes.length===0)throw new Error("At least one scope is required.");for(let i of e.scopes)if(!w(i))throw new Error(`Invalid scope: ${i}`);let t=c(32).toString("hex"),n=a+t,s={id:"tok_"+c(4).toString("hex"),name:e.name.trim(),prefix:a+t.slice(0,4),hash:l(n),scopes:[...e.scopes],createdAt:new Date().toISOString(),expiresAt:e.expiresInDays?new Date(Date.now()+e.expiresInDays*86400*1e3).toISOString():void 0},o=this.load();return o.push(s),this.save(o),{token:n,record:s}}list(){return this.load()}revoke(e){let t=this.load(),n=t.find(s=>s.id===e);return n?(n.revokedAt=new Date().toISOString(),this.save(t),n):null}isActive(e){let t=this.load().find(n=>n.id===e);return!!t&&!t.revokedAt&&!(t.expiresAt&&Date.parse(t.expiresAt)<Date.now())}verify(e){if(!e||!e.startsWith(a))return null;let t=l(e),n=this.load(),s=n.find(u=>u.hash===t);if(!s||s.revokedAt||s.expiresAt&&Date.parse(s.expiresAt)<Date.now())return null;let o=Date.now(),i=s.lastUsedAt?Date.parse(s.lastUsedAt):0;if(o-i>6e4){s.lastUsedAt=new Date(o).toISOString();try{this.save(n)}catch{}}return s}};function D(r,e){return!!(r.scopes.includes(e)||e.startsWith("agent:")&&r.scopes.includes("agent:*")||e==="dashboard:read"&&r.scopes.includes("dashboard:write"))}function w(r){return r==="dashboard:read"||r==="dashboard:write"||r==="agent:*"||/^agent:[a-z0-9][a-z0-9_-]*$/.test(r)||r==="mesh:peer"||r==="app"||/^member:[a-z0-9][a-z0-9_-]{0,39}$/.test(r)||/^guest:g-[a-z0-9]+-[a-z0-9]+$/.test(r)}function l(r){return"sha256:"+h("sha256").update(r).digest("hex")}function T(r){let e=r.headers.authorization,t=Array.isArray(e)?e[0]:e;if(t&&t.toLowerCase().startsWith("bearer "))return t.slice(7).trim();if(r.url)try{let s=new URL(r.url,"http://localhost").searchParams.get("token");if(s)return s}catch{}return null}export{a,d as b,D as c,l as d,T as e};
+//# sourceMappingURL=chunk-ACFQBLPX.js.map

package/dist/chunk-ACFQBLPX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/daemon/token-store.ts"],"sourcesContent":["import { createHash, randomBytes } from \"crypto\"\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"fs\"\nimport { resolve, dirname } from \"path\"\n\n// --- Scoped API tokens ---\n//\n// Tokens let external services (other agentx instances, webhook senders, custom\n// apps) talk to this daemon with explicit scopes instead of sharing a single\n// all-powerful dashboard token.\n//\n// We only ever store the sha256 of each token + its printable prefix. The full\n// token is shown exactly once, at creation time, and the operator copies it.\n// Format:  agx_live_<hex(32)>   — prefix lets secret-scanners catch leaks.\n//\n// Scopes (string equality; \"agent:*\" grants any agent):\n//   dashboard:read   — /api/live, /api/agents, /api/task/history\n//   dashboard:write  — /api/admin/*, config mutation endpoints\n//   agent:<id>       — /api/public/agents/<id>/messages\n//   agent:*          — any agent\n//   mesh:peer        — cross-node mesh (forward-compatible — not enforced yet)\n//   app              — the phone app (/app, /api/app/*) and nothing else;\n//                      minted per device by `agentx app pair`\n//   member:<person>  — one teammate's own work page (/member, /api/member/*)\n//                      and nothing else; minted per machine by\n//                      `agentx people invite` (#385)\n//   guest:<grant>    — a guest mesh's key: /mesh/guest/* inside that grant\n//                      and nothing else; minted by `agentx mesh guests\n//                      invite` (#380)\n\nexport const TOKEN_PREFIX = \"agx_live_\"\nconst DEFAULT_FILE = \".agentx/tokens.json\"\n\nexport interface TokenRecord {\n  id: string                 // short public id (shown in lists)\n  name: string\n  prefix: string             // full printable prefix (TOKEN_PREFIX + first-4 chars of body)\n  hash: string               // sha256 of the full token\n  scopes: string[]\n  createdAt: string\n  expiresAt?: string\n  revokedAt?: string\n  lastUsedAt?: string\n}\n\nexport class TokenStore {\n  private file: string\n\n  constructor(baseDir: string = process.cwd(), fileRel: string = DEFAULT_FILE) {\n    this.file = resolve(baseDir, fileRel)\n  }\n\n  private load(): TokenRecord[] {\n    if (!existsSync(this.file)) return []\n    try { return JSON.parse(readFileSync(this.file, \"utf-8\")) as TokenRecord[] } catch { return [] }\n  }\n\n  private save(records: TokenRecord[]): void {\n    mkdirSync(dirname(this.file), { recursive: true })\n    writeFileSync(this.file, JSON.stringify(records, null, 2) + \"\\n\", \"utf-8\")\n  }\n\n  /**\n   * Mint a new token. Returns the full token string AND the record.\n   * The full token is the only place the secret is ever exposed — the caller\n   * must surface it to the operator immediately; after this call the store only\n   * knows the hash.\n   */\n  create(input: {\n    name: string\n    scopes: string[]\n    expiresInDays?: number\n  }): { token: string; record: TokenRecord } {\n    if (!input.name?.trim()) throw new Error(\"Token name is required.\")\n    if (!Array.isArray(input.scopes) || input.scopes.length === 0) {\n      throw new Error(\"At least one scope is required.\")\n    }\n    for (const s of input.scopes) {\n      if (!isValidScope(s)) throw new Error(`Invalid scope: ${s}`)\n    }\n    const body = randomBytes(32).toString(\"hex\")\n    const token = TOKEN_PREFIX + body\n    const record: TokenRecord = {\n      id: \"tok_\" + randomBytes(4).toString(\"hex\"),\n      name: input.name.trim(),\n      prefix: TOKEN_PREFIX + body.slice(0, 4),\n      hash: hashToken(token),\n      scopes: [...input.scopes],\n      createdAt: new Date().toISOString(),\n      expiresAt: input.expiresInDays\n        ? new Date(Date.now() + input.expiresInDays * 86400 * 1000).toISOString()\n        : undefined,\n    }\n    const records = this.load()\n    records.push(record)\n    this.save(records)\n    return { token, record }\n  }\n\n  list(): TokenRecord[] {\n    return this.load()\n  }\n\n  revoke(id: string): TokenRecord | null {\n    const records = this.load()\n    const rec = records.find((r) => r.id === id)\n    if (!rec) return null\n    rec.revokedAt = new Date().toISOString()\n    this.save(records)\n    return rec\n  }\n\n  /** True when the token with this id exists and is neither revoked nor expired. */\n  isActive(id: string): boolean {\n    const rec = this.load().find((r) => r.id === id)\n    return !!rec && !rec.revokedAt && !(rec.expiresAt && Date.parse(rec.expiresAt) < Date.now())\n  }\n\n  /**\n   * Look up a token string. Returns the record on success, null on unknown /\n   * revoked / expired. Updates lastUsedAt opportunistically (write-on-success).\n   */\n  verify(token: string): TokenRecord | null {\n    if (!token || !token.startsWith(TOKEN_PREFIX)) return null\n    const hash = hashToken(token)\n    const records = this.load()\n    const rec = records.find((r) => r.hash === hash)\n    if (!rec) return null\n    if (rec.revokedAt) return null\n    if (rec.expiresAt && Date.parse(rec.expiresAt) < Date.now()) return null\n    // Throttle lastUsedAt updates to at most once per minute to avoid disk churn.\n    const now = Date.now()\n    const last = rec.lastUsedAt ? Date.parse(rec.lastUsedAt) : 0\n    if (now - last > 60_000) {\n      rec.lastUsedAt = new Date(now).toISOString()\n      try { this.save(records) } catch { /* best-effort */ }\n    }\n    return rec\n  }\n}\n\n/**\n * Check whether a record has a given required scope. \"agent:<id>\" required\n * matches either itself or \"agent:*\". \"dashboard:write\" implicitly grants\n * \"dashboard:read\" for convenience.\n */\nexport function recordHasScope(record: TokenRecord, required: string): boolean {\n  if (record.scopes.includes(required)) return true\n  if (required.startsWith(\"agent:\") && record.scopes.includes(\"agent:*\")) return true\n  if (required === \"dashboard:read\" && record.scopes.includes(\"dashboard:write\")) return true\n  return false\n}\n\nfunction isValidScope(s: string): boolean {\n  return (\n    s === \"dashboard:read\" ||\n    s === \"dashboard:write\" ||\n    s === \"agent:*\" ||\n    /^agent:[a-z0-9][a-z0-9_-]*$/.test(s) ||\n    s === \"mesh:peer\" ||\n    s === \"app\" ||\n    /^member:[a-z0-9][a-z0-9_-]{0,39}$/.test(s) ||\n    /^guest:g-[a-z0-9]+-[a-z0-9]+$/.test(s)\n  )\n}\n\nexport function hashToken(token: string): string {\n  return \"sha256:\" + createHash(\"sha256\").update(token).digest(\"hex\")\n}\n\n/**\n * Extract a bearer token from the request headers. Falls back to the\n * `?token=` query param so EventSource (which can't set headers in most\n * browsers) can still authenticate.\n */\nexport function extractToken(req: { headers: Record<string, string | string[] | undefined>; url?: string }): string | null {\n  const auth = req.headers[\"authorization\"]\n  const authHeader = Array.isArray(auth) ? auth[0] : auth\n  if (authHeader && authHeader.toLowerCase().startsWith(\"bearer \")) {\n    return authHeader.slice(7).trim()\n  }\n  if (req.url) {\n    try {\n      const u = new URL(req.url, \"http://localhost\")\n      const tok = u.searchParams.get(\"token\")\n      if (tok) return tok\n    } catch { /* */ }\n  }\n  return null\n}\n"],"mappings":"AAAA,OAAS,cAAAA,EAAY,eAAAC,MAAmB,SACxC,OAAS,cAAAC,EAAY,aAAAC,EAAW,gBAAAC,EAAc,iBAAAC,MAAqB,KACnE,OAAS,WAAAC,EAAS,WAAAC,MAAe,OA2B1B,IAAMC,EAAe,YACtBC,EAAe,sBAcRC,EAAN,KAAiB,CACd,KAER,YAAYC,EAAkB,QAAQ,IAAI,EAAGC,EAAkBH,EAAc,CAC3E,KAAK,KAAOH,EAAQK,EAASC,CAAO,CACtC,CAEQ,MAAsB,CAC5B,GAAI,CAACV,EAAW,KAAK,IAAI,EAAG,MAAO,CAAC,EACpC,GAAI,CAAE,OAAO,KAAK,MAAME,EAAa,KAAK,KAAM,OAAO,CAAC,CAAmB,MAAE,CAAQ,MAAO,CAAC,CAAE,CACjG,CAEQ,KAAKS,EAA8B,CACzCV,EAAUI,EAAQ,KAAK,IAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EACjDF,EAAc,KAAK,KAAM,KAAK,UAAUQ,EAAS,KAAM,CAAC,EAAI;AAAA,EAAM,OAAO,CAC3E,CAQA,OAAOC,EAIoC,CACzC,GAAI,CAACA,EAAM,MAAM,KAAK,EAAG,MAAM,IAAI,MAAM,yBAAyB,EAClE,GAAI,CAAC,MAAM,QAAQA,EAAM,MAAM,GAAKA,EAAM,OAAO,SAAW,EAC1D,MAAM,IAAI,MAAM,iCAAiC,EAEnD,QAAWC,KAAKD,EAAM,OACpB,GAAI,CAACE,EAAaD,CAAC,EAAG,MAAM,IAAI,MAAM,kBAAkBA,GAAG,EAE7D,IAAME,EAAOhB,EAAY,EAAE,EAAE,SAAS,KAAK,EACrCiB,EAAQV,EAAeS,EACvBE,EAAsB,CAC1B,GAAI,OAASlB,EAAY,CAAC,EAAE,SAAS,KAAK,EAC1C,KAAMa,EAAM,KAAK,KAAK,EACtB,OAAQN,EAAeS,EAAK,MAAM,EAAG,CAAC,EACtC,KAAMG,EAAUF,CAAK,EACrB,OAAQ,CAAC,GAAGJ,EAAM,MAAM,EACxB,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,UAAWA,EAAM,cACb,IAAI,KAAK,KAAK,IAAI,EAAIA,EAAM,cAAgB,MAAQ,GAAI,EAAE,YAAY,EACtE,MACN,EACMD,EAAU,KAAK,KAAK,EAC1B,OAAAA,EAAQ,KAAKM,CAAM,EACnB,KAAK,KAAKN,CAAO,EACV,CAAE,MAAAK,EAAO,OAAAC,CAAO,CACzB,CAEA,MAAsB,CACpB,OAAO,KAAK,KAAK,CACnB,CAEA,OAAOE,EAAgC,CACrC,IAAMR,EAAU,KAAK,KAAK,EACpBS,EAAMT,EAAQ,KAAMU,GAAMA,EAAE,KAAOF,CAAE,EAC3C,OAAKC,GACLA,EAAI,UAAY,IAAI,KAAK,EAAE,YAAY,EACvC,KAAK,KAAKT,CAAO,EACVS,GAHU,IAInB,CAGA,SAASD,EAAqB,CAC5B,IAAMC,EAAM,KAAK,KAAK,EAAE,KAAMC,GAAMA,EAAE,KAAOF,CAAE,EAC/C,MAAO,CAAC,CAACC,GAAO,CAACA,EAAI,WAAa,EAAEA,EAAI,WAAa,KAAK,MAAMA,EAAI,SAAS,EAAI,KAAK,IAAI,EAC5F,CAMA,OAAOJ,EAAmC,CACxC,GAAI,CAACA,GAAS,CAACA,EAAM,WAAWV,CAAY,EAAG,OAAO,KACtD,IAAMgB,EAAOJ,EAAUF,CAAK,EACtBL,EAAU,KAAK,KAAK,EACpBS,EAAMT,EAAQ,KAAMU,GAAMA,EAAE,OAASC,CAAI,EAG/C,GAFI,CAACF,GACDA,EAAI,WACJA,EAAI,WAAa,KAAK,MAAMA,EAAI,SAAS,EAAI,KAAK,IAAI,EAAG,OAAO,KAEpE,IAAMG,EAAM,KAAK,IAAI,EACfC,EAAOJ,EAAI,WAAa,KAAK,MAAMA,EAAI,UAAU,EAAI,EAC3D,GAAIG,EAAMC,EAAO,IAAQ,CACvBJ,EAAI,WAAa,IAAI,KAAKG,CAAG,EAAE,YAAY,EAC3C,GAAI,CAAE,KAAK,KAAKZ,CAAO,CAAE,MAAE,CAA0B,EAEvD,OAAOS,CACT,CACF,EAOO,SAASK,EAAeR,EAAqBS,EAA2B,CAG7E,MAFI,GAAAT,EAAO,OAAO,SAASS,CAAQ,GAC/BA,EAAS,WAAW,QAAQ,GAAKT,EAAO,OAAO,SAAS,SAAS,GACjES,IAAa,kBAAoBT,EAAO,OAAO,SAAS,iBAAiB,EAE/E,CAEA,SAASH,EAAaD,EAAoB,CACxC,OACEA,IAAM,kBACNA,IAAM,mBACNA,IAAM,WACN,8BAA8B,KAAKA,CAAC,GACpCA,IAAM,aACNA,IAAM,OACN,oCAAoC,KAAKA,CAAC,GAC1C,gCAAgC,KAAKA,CAAC,CAE1C,CAEO,SAASK,EAAUF,EAAuB,CAC/C,MAAO,UAAYlB,EAAW,QAAQ,EAAE,OAAOkB,CAAK,EAAE,OAAO,KAAK,CACpE,CAOO,SAASW,EAAaC,EAA8F,CACzH,IAAMC,EAAOD,EAAI,QAAQ,cACnBE,EAAa,MAAM,QAAQD,CAAI,EAAIA,EAAK,CAAC,EAAIA,EACnD,GAAIC,GAAcA,EAAW,YAAY,EAAE,WAAW,SAAS,EAC7D,OAAOA,EAAW,MAAM,CAAC,EAAE,KAAK,EAElC,GAAIF,EAAI,IACN,GAAI,CAEF,IAAMG,EADI,IAAI,IAAIH,EAAI,IAAK,kBAAkB,EAC/B,aAAa,IAAI,OAAO,EACtC,GAAIG,EAAK,OAAOA,CAClB,MAAE,CAAc,CAElB,OAAO,IACT","names":["createHash","randomBytes","existsSync","mkdirSync","readFileSync","writeFileSync","resolve","dirname","TOKEN_PREFIX","DEFAULT_FILE","TokenStore","baseDir","fileRel","records","input","s","isValidScope","body","token","record","hashToken","id","rec","r","hash","now","last","recordHasScope","required","extractToken","req","auth","authHeader","tok"]}

package/dist/{chunk-ONGL6EKZ.js → chunk-AK5J3DQY.js}

@@ -1,7 +1,7 @@
-import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{ba as S,ea as L}from"./chunk-VQN36LEB.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
+import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{_ as S,ba as L}from"./chunk-JDXNHBGR.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
 `):se(n),process.exit(e.errors>0?1:0)});async function G(t,n,e=P){if(!O(n.notifications?.local).banner)return;let i=await e();i.state!=="unsupported"&&t.push({severity:i.state==="ready"?"ok":"warn",group:"Notifications",title:i.message,detail:i.path,fix:i.fix})}function V(t,n,e=process.platform,i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}}){let s=n.reminders;if(!s?.enabled)return;if(e!=="darwin"){t.push({severity:"warn",group:"Reminders",title:"Reminders hand-back unavailable on this machine",detail:"reminders.enabled is set, but Apple Reminders exists only on macOS. The daemon starts without it.",fix:"Set reminders.enabled to false here, or enable it on the Mac node instead."});return}let r=s.command||"remindctl",a=r.includes("/")?i(r)?r:null:x(r,process.env.PATH||"",i);t.push(a?{severity:"ok",group:"Reminders",title:`Watching ${(s.lists||[]).join(", ")} for due reminders`,detail:a}:{severity:"fail",group:"Reminders",title:`${r} not found`,detail:"The daemon reads Apple Reminders through remindctl.",fix:"brew install steipete/tap/remindctl, or set reminders.command to its full path."})}async function Z(t){let n=R(process.versions.node);t.push({severity:n?"ok":"fail",group:"Environment",title:`Node.js ${process.versions.node}`,detail:n?void 0:"AgentX requires Node 22.19 or newer, up to Node 26.",fix:n?void 0:"Install Node 22 (nvm install 22 && nvm use 22)"});let e=l=>{try{return h(process.platform==="win32"?"where":"which",[l],{encoding:"utf-8"}).trim().split(`
 `)[0]}catch{return null}},i=e("npm");t.push({severity:i?"ok":"fail",group:"Environment",title:i?"npm on PATH":"npm not found",detail:i||void 0});let s=e("claude");if(s){let l;try{l=h("claude",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`claude CLI ${l||"installed"}`,detail:s})}else t.push({severity:"warn",group:"Environment",title:"claude CLI not on PATH",detail:"Only required for agents on the claude-code tier.",fix:"See https://docs.anthropic.com/en/docs/claude-code"});let r=e("codex");if(r){let l;try{l=h("codex",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`codex CLI ${l||"installed"}`,detail:r})}else t.push({severity:"warn",group:"Environment",title:"codex CLI not on PATH",detail:"Only required for agents on the codex-cli tier.",fix:"Install with `npm i -g @openai/codex`."});let a=e("opencode");if(a){let l;try{l=h("opencode",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`opencode CLI ${l||"installed"}`,detail:a})}else t.push({severity:"warn",group:"Environment",title:"opencode CLI not on PATH",detail:"Only required for agents on the opencode tier.",fix:"Install from https://opencode.ai/docs/."});try{F(import.meta.url)("better-sqlite3"),t.push({severity:"ok",group:"Environment",title:`better-sqlite3 loads for Node ${process.version}`,detail:`NODE_MODULE_VERSION ${process.versions.modules}`})}catch(l){t.push({severity:"fail",group:"Environment",title:"better-sqlite3 native binding does not load",detail:l?.message??String(l),fix:`Run "pnpm rebuild better-sqlite3" with the same Node used by the daemon (${process.version}, modules ${process.versions.modules}).`})}}function U(t){if(process.platform!=="darwin")return;let n=E(B(),"Library/LaunchAgents"),e=[];try{e=$(n).filter(s=>/agentx\.voice.*\.plist$/.test(s))}catch{return}let i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}};for(let s of e){let r=j(b(E(n,s),"utf-8")),a=x("ffmpeg",r,i);t.push(a?{severity:"ok",group:"Desktop",title:"ffmpeg reachable by the desktop app",detail:`${a} (${s})`}:{severity:"warn",group:"Desktop",title:"ffmpeg not reachable by the desktop app",detail:`Local Whisper transcription fails without it. ${s} sets PATH to ${r}.`,fix:"Install ffmpeg (brew install ffmpeg), then rerun agentx desktop install."})}}function K(t){let n=m(process.cwd(),"agentx.json");if(!y(n))return t.push({severity:"fail",group:"Config",title:"agentx.json not found",detail:`Looked in ${n}`,fix:"Run `agentx setup` to create one via the web wizard."}),null;let e;try{e=JSON.parse(b(n,"utf-8"))}catch(a){return t.push({severity:"fail",group:"Config",title:"agentx.json is not valid JSON",detail:a.message}),null}try{S(n),t.push({severity:"ok",group:"Config",title:`agentx.json valid (${Object.keys(e.agents||{}).length} agents, ${Object.keys(e.crons||{}).length} schedules)`})}catch(a){t.push({severity:"fail",group:"Config",title:"agentx.json failed schema validation",detail:a.message,fix:"Open /admin \u2192 Advanced tab to edit and re-save."})}let i=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="claude-code");i.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["claude"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${i.length} agent(s) use claude-code tier but claude CLI is missing`,detail:i.map(([l])=>l).join(", "),fix:"Install Claude Code (https://docs.anthropic.com/en/docs/claude-code) or switch these agents to tier=sdk."}));let s=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="codex-cli");s.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["codex"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${s.length} agent(s) use codex-cli tier but codex CLI is missing`,detail:s.map(([l])=>l).join(", "),fix:"Install Codex CLI with `npm i -g @openai/codex` or switch these agents to tier=claude-code."}));let r=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="opencode");return r.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["opencode"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${r.length} agent(s) use opencode tier but OpenCode CLI is missing`,detail:r.map(([l])=>l).join(", "),fix:"Install OpenCode from https://opencode.ai/docs/ or switch these agents to another tier."})),e}function Q(t,n){let e=new Set;if(C(n,e),e.size===0){t.push({severity:"ok",group:"Secrets",title:"No ${VAR} references in agentx.json"});return}let i=m(process.cwd(),".env"),s={};if(y(i))for(let l of b(i,"utf-8").split(/\r?\n/)){let u=l.match(/^\s*([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i);u&&(s[u[1]]=u[2])}let r=[],a=[];for(let l of e){let u=process.env[l]??s[l];u===void 0?r.push(l):(!u.trim()||/^["']?\s*["']?$/.test(u))&&a.push(l)}r.length===0&&a.length===0?t.push({severity:"ok",group:"Secrets",title:`${e.size} env reference(s) resolved`}):(r.length>0&&t.push({severity:"fail",group:"Secrets",title:`${r.length} env var(s) referenced in agentx.json but missing`,detail:r.join(", "),fix:`Add to .env \u2014 e.g. ${r[0]}=<value>`}),a.length>0&&t.push({severity:"warn",group:"Secrets",title:`${a.length} env var(s) set but empty`,detail:a.join(", ")}))}function C(t,n){if(typeof t=="string")for(let e of t.matchAll(/\$\{([A-Z_][A-Z0-9_]*)\}/g))n.add(e[1]);else if(Array.isArray(t))for(let e of t)C(e,n);else if(t&&typeof t=="object")for(let e of Object.values(t))C(e,n)}function Y(t,n){let e=[];for(let[i,s]of Object.entries(n.agents||{})){if(!s.workspace)continue;let r=s.workspace.startsWith("/")?s.workspace:m(process.cwd(),s.workspace);try{X(r).isDirectory()||e.push(`${i}: ${r} (exists but not a directory)`)}catch{e.push(`${i}: ${r}`)}}e.length===0?t.push({severity:"ok",group:"Workspaces",title:"All agent workspace folders exist"}):t.push({severity:"warn",group:"Workspaces",title:`${e.length} agent workspace(s) missing`,detail:e.join(`
     `),fix:"The daemon will create missing folders on first task, but you won't see CLAUDE.md / skills until you populate them."})}function ee(t,n){let e=/\$\{[A-Za-z_][A-Za-z0-9_]*\}/g,i=[];for(let[s,r]of Object.entries(n.agents||{})){if(!r.workspace)continue;let a=r.workspace.startsWith("/")?r.workspace:m(process.cwd(),r.workspace);for(let l of["settings.json","settings.local.json"]){let u=m(a,".claude",l);if(!y(u))continue;let w;try{w=JSON.parse(b(u,"utf-8"))}catch(d){i.push({severity:"fail",agent:s,msg:`${l}: JSON parse error \u2014 ${d.message}`});continue}let k=w.env||{};for(let[d,p]of Object.entries(k)){if(typeof p!="string")continue;let g=p.match(e);g&&i.push({severity:"fail",agent:s,msg:`${l} env.${d} contains unexpanded ${[...new Set(g)].join(",")} \u2014 Claude Code does NOT expand \${VAR} in settings.json (use a fully-literal value)`})}let o=k.PATH;if(typeof o=="string"){let d=o.split(":").filter(Boolean);d.includes("/usr/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /usr/bin \u2014 cat/head/sh/which will fail`}),d.includes("/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /bin \u2014 ls/cp/mv will fail`})}let c=w.permissions;if(c&&typeof c=="object"&&"allow"in c){let d=c.allow,p=c.deny;Array.isArray(d)&&d.length===0&&Array.isArray(p)&&p.length>0&&i.push({severity:"warn",agent:s,msg:`${l} permissions.allow is explicitly [] with ${p.length} deny rules \u2014 agent may be locked out (omit the key to use defaults instead)`})}}}if(i.length===0){t.push({severity:"ok",group:"Workspace settings",title:`All ${Object.keys(n.agents||{}).length} agent .claude/settings.json files clean`});return}for(let s of i)t.push({severity:s.severity,group:"Workspace settings",title:`${s.agent}: ${s.msg}`,fix:s.severity==="fail"?"Edit .claude/settings.json \u2014 replace ${VAR} with the literal value or omit the key to inherit.":"Either remove the empty allow list or populate it."})}function te(t,n){let e=n.webhooks??[],i=[],s=m(process.cwd(),n.workflows?.dir||".agentx/workflows"),r=new Set;try{if(y(s))for(let o of $(s))o.endsWith(".json")&&!o.startsWith("_")&&!o.endsWith(".disabled.json")&&r.add(o.replace(/\.json$/,""))}catch{}let a=new Set(["github","gitlab"]);for(let o of e){if(!o.enabled||!a.has(o.source))continue;!(o.triggers&&Object.keys(o.triggers).length>0)&&!o.defaultWorkflow&&i.push({severity:"warn",title:`webhook "${o.id}" (${o.source} -> ${o.agentId}) has no triggers map; every event-type collapses to the bound agent`,fix:'Add a triggers map: { "issues.opened": "wf-id", "pull_request.synchronize": "wf-id" } \u2014 or set defaultWorkflow.'})}for(let o of e)if(!(!o.enabled||!o.triggers)){for(let[c,d]of Object.entries(o.triggers))r.size>0&&!r.has(d)&&i.push({severity:"fail",title:`webhook "${o.id}".triggers["${c}"] -> "${d}" \u2014 no such workflow under ${n.workflows?.dir||".agentx/workflows"}`,fix:"Create the workflow file or fix the id in agentx.json"});o.defaultWorkflow&&r.size>0&&!r.has(o.defaultWorkflow)&&i.push({severity:"fail",title:`webhook "${o.id}".defaultWorkflow -> "${o.defaultWorkflow}" \u2014 no such workflow`,fix:"Create the workflow file or fix the id in agentx.json"})}try{if(y(s)){for(let o of $(s))if(!(!o.endsWith(".json")||o.startsWith("_")||o.endsWith(".disabled.json")))try{let c=JSON.parse(b(m(s,o),"utf-8"));c?.status==="active"&&c?.state==="quarantined"&&i.push({severity:"warn",title:`workflow "${c.id??o}" is status=active but state=quarantined \u2014 it looks live but will never dispatch`,fix:'Resolve the conflict the detector flagged, then set state back to "active" (or set status to "review" while parked).'})}catch{}}}catch{}let l=new Set((n.mesh?.peers??[]).map(o=>o.name));for(let o of e)!o.enabled||!o.node||l.has(o.node)||i.push({severity:"fail",title:`webhook "${o.id}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or remove the node field on the webhook."});let u=new Map;for(let o of e){if(!o.enabled)continue;let c=`${o.source}:${o.agentId}`,d=u.get(c);d?i.push({severity:"warn",title:`webhook entries "${d}" and "${o.id}" both enabled for ${o.source} -> ${o.agentId}; only the first is dispatched`,fix:"Disable one entry, or merge their triggers maps into a single entry."}):u.set(c,o.id)}let w=new Set(Object.keys(n.agents??{}));for(let o of n.channels?.gitlab?.agentMappings??[])if(o?.agentId){if(o.node){l.has(o.node)||i.push({severity:"fail",title:`gitlab.agentMappings entry agentId="${o.agentId}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or drop the node field on the mapping."});continue}w.has(o.agentId)||i.push({severity:"warn",title:`gitlab.agentMappings entry agentId="${o.agentId}" \u2014 no such agent in agents.* (and no node field, so it's not a cross-mesh route)`,fix:'Add the agent to agents.*, set node:"<peer>" if the agent lives remotely, or remove the mapping.'})}for(let[o,c]of Object.entries(n.channels?.telegram?.accounts??{}))c.agentBinding?w.has(c.agentBinding)||i.push({severity:"fail",title:`telegram account "${o}".agentBinding -> "${c.agentBinding}" \u2014 no such agent in agents.*`,fix:"Fix the agentBinding or define the agent in agents.*."}):i.push({severity:"fail",title:`telegram account "${o}" has no agentBinding; every DM to this bot will drop`,fix:"Set agentBinding to a valid agent id."});let k=new Set(["telegram-bot","whatsapp","slack-bot","discord-bot","gitlab-user","github-user","gmail","hotmail","smtp","hubspot","salesforce","pipedrive","odoo","trello","linear","asana","jira","notion","stripe","sentry","vercel","twilio","custom"]);for(let[o,c]of Object.entries(n.agents??{})){let d=c.integrations??[];if(!d.length)continue;let p=new Set;for(let g of d){let A=`${g.kind}::${g.label}`;p.has(A)&&i.push({severity:"warn",title:`agents.${o}.integrations: duplicate (${g.kind}, ${g.label})`,fix:"Remove the duplicate or rename one. (kind, label) must be unique per agent."}),p.add(A),k.has(g.kind)||i.push({severity:"warn",title:`agents.${o}.integrations: unknown kind "${g.kind}" on integration "${g.label}"`,fix:'Use a canonical kind from INTEGRATION_KINDS, or "custom" for ad-hoc services.'});let D=g.credentials||{};for(let[_,v]of Object.entries(D))typeof v=="string"&&/^[A-Z][A-Z0-9_]*$/.test(v)&&!process.env[v]&&i.push({severity:"warn",title:`agents.${o}.integrations[${g.kind}/${g.label}].${_} -> $${v} but env var is unset (in this shell)`,fix:`Set ${v} on the daemon environment. The daemon's process.env is what matters; this warning fires from your local shell.`})}}if(i.length===0){t.push({severity:"ok",group:"Routing",title:`${e.length} webhook(s), ${Object.keys(n.channels?.telegram?.accounts??{}).length} telegram account(s) \u2014 all routing references resolve`});return}for(let o of i)t.push({severity:o.severity,group:"Routing",title:o.title,fix:o.fix})}function ne(t){return typeof t?.canMeasure!="boolean"?null:t.canMeasure?{severity:"ok",group:"Runtime",title:"Daemon finds ffmpeg to measure phone recordings"}:{severity:"warn",group:"Runtime",title:t.allowUnmeasured?"Daemon can't find ffmpeg: phone recordings go unmeasured (voice.allowUnmeasured)":"Daemon can't find ffmpeg: phone voice input is refused",fix:"Install ffmpeg (brew install ffmpeg / sudo apt install ffmpeg), or set AGENTX_FFMPEG in the service's environment. The daemon's PATH is shorter than your shell's."}}async function ie(t,n){let e=n.dashboard?.daemonUrl?.replace(/\/+$/,"")||"http://127.0.0.1:18800",i={};n.dashboard?.token&&(i.Authorization=`Bearer ${n.dashboard.token}`);try{let s=new AbortController,r=setTimeout(()=>s.abort(),2e3),a=await fetch(e+"/health",{headers:i,signal:s.signal});if(clearTimeout(r),!a.ok){t.push({severity:"warn",group:"Runtime",title:`Daemon responded ${a.status}`,detail:e});return}let l=await a.json();t.push({severity:"ok",group:"Runtime",title:`Daemon healthy \u2014 ${l.agents?.length??0} agents live, uptime ${Math.round((l.uptime??0)/60)}m`,detail:e});let u=ne(l.voice);u&&t.push(u)}catch{t.push({severity:"warn",group:"Runtime",title:"Daemon not reachable (not running?)",detail:e,fix:"Run `agentx daemon start`. Skip this check with `agentx doctor --no-running`."})}}function oe(t,n){let e=Object.entries(n.agents||{}).filter(([,s])=>s?.codegraph===!0&&(s.tier==="claude-code"||s.tier==="codex-cli"));if(e.length===0)return;let i=null;try{i=h(process.platform==="win32"?"where":"which",["codegraph"],{encoding:"utf-8"}).trim().split(`
 `)[0]||null}catch{i=null}if(i){let s;try{s=h("codegraph",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"CodeGraph",title:`codegraph CLI ${s||"installed"}`,detail:i})}else t.push({severity:"fail",group:"CodeGraph",title:"codegraph CLI not on PATH",detail:`${e.length} agent(s) have codegraph:true but the binary isn't available.`,fix:"Install with `npm i -g @colbymchenry/codegraph`."});for(let[s,r]of e){if(!r.workspace||!y(r.workspace)){t.push({severity:"warn",group:"CodeGraph",title:`${s}: workspace missing`,detail:`Workspace path ${r.workspace} does not exist \u2014 codegraph will skip this agent.`});continue}let a=m(r.workspace,".codegraph","codegraph.db");y(a)?t.push({severity:"ok",group:"CodeGraph",title:`${s}: index present`,detail:a}):t.push({severity:"warn",group:"CodeGraph",title:`${s}: index not built yet`,detail:".codegraph/ missing \u2014 daemon will background-index this workspace on next boot.",fix:`Run \`codegraph init --index ${r.workspace}\` to build it now.`})}}function W(t){return{errors:t.filter(n=>n.severity==="fail").length,warnings:t.filter(n=>n.severity==="warn").length,ok:t.filter(n=>n.severity==="ok").length}}function se(t){console.log(),console.log(f.bold("  agentx doctor")),console.log();let n=new Map;for(let i of t)n.has(i.group)||n.set(i.group,[]),n.get(i.group).push(i);for(let[i,s]of n){console.log(f.bold("  "+i));for(let r of s){let a=r.severity==="ok"?f.green("\u2713"):r.severity==="warn"?f.yellow("!"):f.red("\u2717");console.log(`    ${a} ${r.title}`),r.detail&&console.log(f.dim("      "+r.detail.replace(/\n/g,`
       `))),r.fix&&console.log(f.dim("      \u2192 "+r.fix))}console.log()}let e=W(t);e.errors>0?console.log(f.red.bold(`  ${e.errors} error${e.errors===1?"":"s"}`)+(e.warnings?f.yellow(`, ${e.warnings} warning${e.warnings===1?"":"s"}`):"")+`. Fix the error${e.errors===1?"":"s"} and rerun.`):e.warnings>0?console.log(f.yellow.bold(`  ${e.warnings} warning${e.warnings===1?"":"s"}.`)+f.dim(" Review but not blocking.")):console.log(f.green.bold(`  All checks passed (${e.ok}).`)),console.log()}export{P as a,J as b,ke as c,G as d,V as e,ne as f};
-//# sourceMappingURL=chunk-ONGL6EKZ.js.map
+//# sourceMappingURL=chunk-AK5J3DQY.js.map