agentix-cli 0.82.0 → 0.83.1

package/dist/chunk-2QNT5JDS.js

@@ -0,0 +1,4 @@
+import{a as w}from"./chunk-QIJLFPWE.js";import{z as v}from"zod";function j(e){return e==="report"||e==="propose"}function $(e){return e.replace(/([a-z0-9])([A-Z])/g,"$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean).map(t=>t.toLowerCase())}function u(e){return $(e).slice(2).join(" ").replace(/\b(merge|pull)\s+requests?\b/g,"mergerequest").split(" ").filter(Boolean)}function h(e){let t=e.replace(/<<-?\s*(['"]?)([A-Za-z_][A-Za-z0-9_]*)\1([\s\S]*?)^\s*\2\s*$/gm,(s,o,i,l)=>!o&&/\$\(|`/.test(l)?s:s.split(`
+`)[0]+`
+`),n="",r=0;for(;r<t.length;){let s=t[r];if(s==="\\"){n+=t.slice(r,r+2),r+=2;continue}if(s==="'"){let o=t.indexOf("'",r+1);if(o<0)return null;n+="''",r=o+1;continue}if(s==='"'){let o=r+1;for(;o<t.length&&t[o]!=='"';)o+=t[o]==="\\"?2:1;if(o>=t.length)return null;let i=t.slice(r+1,o);n+=/\$\(|`/.test(i)?` ${i} `:'""',r=o+1;continue}n+=s,r++}return n}function g(e){return e.split(/\|\||&&|[;|&\n`()]|\$\(|<\(|>\(/).map(t=>t.trim().split(/\s+/).filter(Boolean)).filter(t=>t.length>0)}function m(e){let t=0;for(;t<e.length;){let n=e[t];if(T.has(n))return[];if(A.has(n)||/^[A-Za-z_][A-Za-z0-9_]*=/.test(n)){t++;continue}break}return e.slice(t)}function b(e){let t=0;for(;t<e.length&&e[t].startsWith("-");)t+=/^-(C|c)$|^--(git-dir|work-tree|namespace)$/.test(e[t])?2:1;return{sub:e[t],rest:e.slice(t+1)}}function D(e){let[t,...n]=e,r=t.replace(/^.*\//,"");if(!R.has(r))return`\`${r}\` is not a read-only command`;let s=o=>n.some(i=>o.test(i));switch(r){case"find":return s(/^-(exec|execdir|ok|okdir|delete|fprint|fprint0|fprintf|fls)$/)?"find with -exec/-delete":null;case"sort":return s(/^(-o|--output)/)?"sort -o writes a file":null;case"git":{if(s(/^(-c|--exec-path|--output)/))return"git option that can execute or write";let{sub:o,rest:i}=b(n);return!o||!x.has(o)?`git ${o??""} is not read-only`.trim():o==="branch"&&i.some(l=>/^-(d|D|m|M|c|C|f|u)$|^--(delete|move|copy|force|set-upstream|unset-upstream|edit-description)/.test(l)||!l.startsWith("-"))?"git branch that changes branches":o==="tag"&&i.some(l=>!/^(-l|--list|-n\d*|--contains|--points-at|--sort=.*|--merged|--no-merged)$/.test(l))?"git tag that creates or deletes tags":o==="remote"&&i.length>0&&!/^(-v|--verbose|show|get-url)$/.test(i[0])?"git remote that changes remotes":o==="config"&&!i.some(l=>/^(--get|--get-all|--get-regexp|--list|-l)$/.test(l))?"git config write":o==="reflog"&&i.length>0&&!/^(show|-)/.test(i[0])?"git reflog that expires or deletes":null}case"gh":case"glab":{let[o,i]=n.filter(l=>!l.startsWith("-"));if(o==="search")return null;if(o==="api"){let l=n.findIndex(y=>/^(-X|--method)$/.test(y));return l>=0&&!/^GET$/i.test(n[l+1]??"")?`${r} api with a non-GET method`:s(/^-X(?!GET$)\w+|^--method=(?!GET$)/i)?`${r} api with a non-GET method`:s(/^(-f|-F|--field|--raw-field|--input)/)?`${r} api with a request body`:null}return!i||!_.has(i)?`${r} ${o??""} ${i??""} is not read-only`.replace(/\s+/g," ").trim():null}case"curl":{let o=n.findIndex(i=>/^(-X|--request)$/.test(i));return o>=0&&!/^(GET|HEAD|OPTIONS)$/i.test(n[o+1]??"")||s(/^-X(?!GET$|HEAD$)\w+|^--request=(?!GET$|HEAD$)/i)?"curl with a non-GET method":s(/^(-d|--data|--data-\w+|--json|-F|--form|-T|--upload-file|-o|--output|-O|--remote-name|-K|--config)/)?"curl that sends a body or writes a file":null}default:return null}}function L(e){let t=e.replace(/\d*>>?\s*\/dev\/null/g," ").replace(/&>>?\s*\/dev\/null/g," ").replace(/\d*>&\s*\d+/g," ");return/[>]/.test(t)}function O(e){let t=h(e);if(t===null)return a("report","shell","command too irregular to verify as read-only");if(L(t))return a("report","shell","output redirection writes a file");for(let n of g(t)){let r=m(n);if(r.length===0)continue;let s=D(r);if(s)return a("report","shell",s)}return c}function W(e){if(S.has(e.tool))return a("report","write",`${e.tool} modifies files`);if(e.tool==="Bash")return O(e.command??"");if(E.has(e.tool))return c;if(e.tool.startsWith("mcp__")){let t=u(e.tool),n=t.find(r=>k.has(r));return n?a("report","outward",`tool "${e.tool}" can change state (${n})`):t.some(r=>p.has(r))?c:a("report","outward",`tool "${e.tool}" is not recognisably read-only`)}return a("report","tool",`tool "${e.tool}" is not on the read-only list`)}function q(e){let t=[];for(let r=0;r<e.length;r++){let s=e[r];if(B.test(s)){r++;continue}if(/^(--force.*|-d|--delete|--mirror|--all|--tags|--prune)$/.test(s)||/^-[a-zA-Z]*f/.test(s))return a("propose","push","force, delete, mirror and tag pushes are act-level actions");s.startsWith("-")||t.push(s)}let n=t.slice(1);if(n.length===0)return a("propose","push","name the feature branch explicitly: git push <remote> <branch>");for(let r of n){if(r.startsWith("+")||r.startsWith(":"))return a("propose","push",`refspec "${r}" force-pushes or deletes`);let s=(r.includes(":")?r.slice(r.indexOf(":")+1):r).replace(/^refs\/heads\//,"");if(G.test(s))return a("propose","push",`pushing to "${s}" is an act-level action; push a feature branch and open a merge request`)}return null}function H(e){for(let n of I)if(n.re.test(e))return a("propose",n.id,n.reason);let t=h(e);if(t===null)return a("propose","shell","command too irregular to verify");for(let n of g(t)){let r=m(n);if(r.length===0)continue;let s=[d(r[0]),...r.slice(1)].join(" ");for(let o of P)if(o.re.test(s))return a("propose",o.id,o.reason);if(d(r[0])==="git"){let{sub:o,rest:i}=b(r.slice(1));if(o==="push"){let l=q(i);if(l)return l}}}return c}function M(e){if(e.tool==="Bash")return H(e.command??"");if(e.tool.startsWith("mcp__")){let t=u(e.tool).find(n=>f.has(n));if(t)return a("propose","outward",`tool "${e.tool}" performs an act-level action (${t})`);if(z(u(e.tool)))return a("propose","delegate",`tool "${e.tool}" hands work to another agent, which would run at its own full autonomy`)}return c}function z(e){return e.includes("delegate")||e.includes("handoff")||e.includes("agent")&&e.some(t=>t==="send"||t==="ask"||t==="message"||t==="task")?!0:e.includes("task")&&!e.some(t=>p.has(t))}function U(e,t){return e==="report"?W(t):e==="propose"?M(t):c}function V(e){return e==="report"?"[Autonomy: report] This routine runs read-only. Investigate and report; do not modify files, run mutating commands, or post anywhere. Your final answer is the deliverable. Blocked actions are enforced and logged; if something needs doing, describe it in the report instead.":e==="propose"?"[Autonomy: propose] You may edit files, commit, push a named feature branch, and open a merge request or draft. You may not merge, deploy, delete, force-push, push to protected branches, or operate hosts. These limits are enforced and logged; leave act-level steps as clear recommendations.":""}var Z,c,a,S,E,p,f,k,A,T,d,R,x,_,I,P,G,B,C=w(()=>{"use strict";Z=v.enum(["report","propose","act"]);c={allowed:!0,ruleId:null,reason:null},a=(e,t,n)=>({allowed:!1,ruleId:`autonomy.${e}.${t}`,reason:n}),S=new Set(["Write","Edit","MultiEdit","NotebookEdit"]),E=new Set(["Read","Glob","Grep","LS","NotebookRead","WebFetch","WebSearch","TodoWrite","TodoRead","Task","Agent","Skill","ToolSearch","BashOutput","KillShell","ExitPlanMode","EnterPlanMode","ListMcpResourcesTool","ReadMcpResourceTool"]);p=new Set(["get","list","search","read","view","fetch","query","find","show","describe","status","diff","inspect","lookup","count","stats","browse","whoami","download"]),f=new Set(["merge","delete","remove","destroy","drop","deploy","publish","release","approve","archive","revoke","purge","close","transfer","force","rollback","restart","erase","unprotect","truncate","wipe","kill","terminate","unpublish","promote"]),k=new Set([...f,"create","update","post","send","write","edit","add","set","comment","reply","push","run","execute","exec","trigger","upload","move","rename","cancel","retry","assign","label","react","invite","notify","schedule","start","stop","submit","save","patch","put","insert","upsert","apply","install","import","mark","toggle","enable","disable","open","commit","sync","reset","store","remember","forget","broadcast","message","call","dispatch","enqueue","resolve","unassign","lock","unlock","pin"]);A=new Set(["then","do","else","elif","if","while","until","!","{","}","time"]),T=new Set(["done","fi","esac","for","case","select","in",";;"]);d=e=>e.replace(/^.*\//,""),R=new Set(["ls","pwd","cd","cat","head","tail","wc","grep","egrep","fgrep","rg","fd","tree","stat","file","du","df","date","whoami","id","hostname","uname","which","type","sort","uniq","cut","tr","diff","cmp","comm","basename","dirname","realpath","readlink","jq","column","nl","seq","true","false","test","[","sleep","ps","uptime","echo","printf","base64","md5","md5sum","shasum","sha256sum","less","more","printenv","dig","nslookup","host","find","git","gh","glab","curl"]),x=new Set(["status","log","diff","show","rev-parse","ls-files","ls-tree","blame","shortlog","describe","cat-file","grep","branch","tag","remote","config","reflog","rev-list","merge-base","name-rev","show-ref","for-each-ref","whatchanged"]),_=new Set(["view","list","diff","status","checks","ls"]);I=[{id:"merge",re:/merge_when_pipeline_succeeds|\bauto[_-]merge\b/i,reason:"auto-merging is an act-level action"},{id:"merge",re:/\b(curl|wget|http|gh\s+api|glab\s+api)\b[^\n]*\/merges?\b/i,reason:"calling a merge endpoint is an act-level action"},{id:"delete",re:/(?:^|\W)(drop|truncate)\s+(table|database|schema|index|collection)\b|(?:^|\W)delete\s+from\b|\bflushall\b|\bflushdb\b/i,reason:"destroying data is an act-level action"},{id:"delete",re:/(-X|--request)[\s=]*['"]?DELETE\b/i,reason:"HTTP DELETE is an act-level action"},{id:"delegate",re:/\b(curl|wget|http)\b[^\n]*(localhost|127\.0\.0\.1|\[::1\])[^\n]*\/(ask|task|send|chat|mesh|workflows?|crons?|reload|config)\b/i,reason:"calling the local daemon to dispatch work escapes this routine's limit"}],P=[{id:"merge",re:/^(gh\s+pr\s+merge|glab\s+mr\s+merge)\b/i,reason:"merging is an act-level action"},{id:"delete",re:/^rm\s+(.*\s)?(-\w*[rR]\w*|--recursive)\b|^(shred|dropdb)\b|^find\b.*\s-delete\b/i,reason:"deleting is an act-level action"},{id:"delete",re:/^git\s+(clean\s+-\w*f|reset\s+--hard|branch\s+(-\w*[dD]\w*|--delete)|tag\s+(-d|--delete)|stash\s+(drop|clear)|remote\s+(remove|rm))\b/i,reason:"deleting is an act-level action"},{id:"delete",re:/^(gh|glab)\s+\S+\s+delete\b|^docker\s+(rm|rmi|volume\s+rm|system\s+prune)\b|^(kubectl\s+delete|aws\s+s3\s+(rm|rb)|gsutil\s+rm)\b|^doctl\s+.*\sdelete\b/i,reason:"deleting is an act-level action"},{id:"deploy",re:/^(kubectl\s+(apply|rollout|scale|set|patch|replace|create|edit)|helm\s+(install|upgrade|rollback|uninstall|delete)|terraform\s+(apply|destroy|import|taint)|pulumi\s+(up|destroy)|docker\s+push|netlify\s+deploy|fly(ctl)?\s+deploy|serverless\s+deploy|vercel\b.*--prod)\b/i,reason:"deploying is an act-level action"},{id:"deploy",re:/^((npm|pnpm|yarn|bun)(\s+run)?|make|just|task|rake)\s+(\S+:)?deploy\b|^((ba|z)?sh|node|python3?)\s+\S*deploy[^\s/]*$|^\S*\/deploy(\.\w+)?\b|^deploy(\.\w+)?\b/i,reason:"deploying is an act-level action"},{id:"deploy",re:/^((npm|pnpm|yarn|bun)\s+publish|cargo\s+publish|twine\s+upload|(gh|glab)\s+release\s+(create|upload|edit)|(npx\s+)?prisma\s+(migrate\s+(deploy|reset)|db\s+push))\b/i,reason:"publishing or migrating is an act-level action"},{id:"prod",re:/^(ssh|scp|sudo|doas|systemctl|launchctl|service|kill|pkill|killall|reboot|shutdown)\b|^rsync\b.*\s\S+:\S*/i,reason:"operating hosts and services is an act-level action"},{id:"delegate",re:/^(agentx|agentix)\s+(ask|send|task|exec|run|chat|mesh|cron|workflow|daemon|config)\b/i,reason:"handing work to another agent or reconfiguring the daemon escapes this routine's limit"}],G=/^(main|master|trunk|develop|development|prod|production|staging|stable|release([/-].*)?|HEAD|@)$/i,B=/^(-o|--push-option|--repo|--receive-pack|--exec)$/});export{Z as a,j as b,U as c,V as d,C as e};
+//# sourceMappingURL=chunk-2QNT5JDS.js.map

package/dist/chunk-2QNT5JDS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guard/autonomy.ts"],"sourcesContent":["import { z } from \"zod\"\n\n// --- Routine autonomy levels: the rule sets ---\n//\n// A routine (cron job or workflow agent step) may run below its agent's full\n// power:\n//\n//   report  — read-only. No file writes, no mutating shell, no outward-posting\n//             tools. The only output is the final answer, which the scheduler\n//             delivers.\n//   propose — may edit files, commit, push a feature branch, open an MR/PR or\n//             a draft. Never merge, deploy, delete, force-push, or touch\n//             production.\n//   act     — unchanged: whatever the agent may normally do.\n//\n// This module is PURE: (level, tool call) -> allow | block. It is evaluated\n// by the daemon for every tool call of a restricted task (see\n// autonomy-enforce.ts for the wiring). Deterministic by construction, like\n// the rest of the guard.\n//\n// Shape of the two restricted levels differs on purpose:\n//   - report is an ALLOWLIST. A read-only posture cannot be expressed as\n//     \"everything except the dangerous things\" — `python -c`, `node x.js`\n//     or a `curl -d` are all writes nobody would list. Unknown => blocked.\n//   - propose is a DENYLIST over a working agent. Its job is to stop the\n//     irreversible, outward steps (merge/deploy/delete/force-push), not to\n//     make the agent useless. A determined agent can evade a denylist by\n//     indirection (write a script, then run it); propose is a guardrail for\n//     honest routines, report is the hard boundary.\n\nexport const autonomyLevelSchema = z.enum([\"report\", \"propose\", \"act\"])\nexport type AutonomyLevel = z.infer<typeof autonomyLevelSchema>\n\n/** True for the levels that need per-task enforcement. */\nexport function isRestricted(level: AutonomyLevel | undefined | null): level is \"report\" | \"propose\" {\n  return level === \"report\" || level === \"propose\"\n}\n\nexport interface AutonomyInput {\n  tool: string\n  command?: string\n  filePath?: string\n}\n\nexport interface AutonomyDecision {\n  allowed: boolean\n  /** Stable id, e.g. \"autonomy.report.write\". Null when allowed. */\n  ruleId: string | null\n  reason: string | null\n}\n\nconst ALLOW: AutonomyDecision = { allowed: true, ruleId: null, reason: null }\nconst block = (level: string, id: string, reason: string): AutonomyDecision => ({\n  allowed: false,\n  ruleId: `autonomy.${level}.${id}`,\n  reason,\n})\n\n// ---------------------------------------------------------------- tools\n\nconst WRITE_TOOLS = new Set([\"Write\", \"Edit\", \"MultiEdit\", \"NotebookEdit\"])\n\n/** Native tools that never change anything outside the conversation. */\nconst REPORT_SAFE_TOOLS = new Set([\n  \"Read\", \"Glob\", \"Grep\", \"LS\", \"NotebookRead\", \"WebFetch\", \"WebSearch\",\n  \"TodoWrite\", \"TodoRead\", \"Task\", \"Agent\", \"Skill\", \"ToolSearch\",\n  \"BashOutput\", \"KillShell\", \"ExitPlanMode\", \"EnterPlanMode\",\n  \"ListMcpResourcesTool\", \"ReadMcpResourceTool\",\n])\n\n/** Split a tool name into lowercase words: `mcp__gitlab__create_merge_request`\n *  -> [mcp, gitlab, create, merge, request]; camelCase splits too. */\nexport function toolWords(name: string): string[] {\n  return name\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .split(/[^A-Za-z0-9]+/)\n    .filter(Boolean)\n    .map((w) => w.toLowerCase())\n}\n\n/** The action words of an MCP tool name (server prefix dropped), with the\n *  nouns \"merge request\" / \"pull request\" folded so `create_merge_request`\n *  reads as create-an-MR, not as a merge. */\nexport function mcpActionWords(name: string): string[] {\n  return toolWords(name)\n    .slice(2)\n    .join(\" \")\n    .replace(/\\b(merge|pull)\\s+requests?\\b/g, \"mergerequest\")\n    .split(\" \")\n    .filter(Boolean)\n}\n\nconst READ_VERBS = new Set([\n  \"get\", \"list\", \"search\", \"read\", \"view\", \"fetch\", \"query\", \"find\", \"show\", \"describe\",\n  \"status\", \"diff\", \"inspect\", \"lookup\", \"count\", \"stats\", \"browse\", \"whoami\", \"download\",\n])\n/** Irreversible or outward-facing verbs. Blocked in propose, and in report. */\nconst DESTRUCTIVE_VERBS = new Set([\n  \"merge\", \"delete\", \"remove\", \"destroy\", \"drop\", \"deploy\", \"publish\", \"release\", \"approve\",\n  \"archive\", \"revoke\", \"purge\", \"close\", \"transfer\", \"force\", \"rollback\", \"restart\", \"erase\",\n  \"unprotect\", \"truncate\", \"wipe\", \"kill\", \"terminate\", \"unpublish\", \"promote\",\n])\n/** Any state change at all. Blocked in report. */\nconst MUTATING_VERBS = new Set([\n  ...DESTRUCTIVE_VERBS,\n  \"create\", \"update\", \"post\", \"send\", \"write\", \"edit\", \"add\", \"set\", \"comment\", \"reply\",\n  \"push\", \"run\", \"execute\", \"exec\", \"trigger\", \"upload\", \"move\", \"rename\", \"cancel\", \"retry\",\n  \"assign\", \"label\", \"react\", \"invite\", \"notify\", \"schedule\", \"start\", \"stop\", \"submit\", \"save\",\n  \"patch\", \"put\", \"insert\", \"upsert\", \"apply\", \"install\", \"import\", \"mark\", \"toggle\", \"enable\",\n  \"disable\", \"open\", \"commit\", \"sync\", \"reset\", \"store\", \"remember\", \"forget\", \"broadcast\",\n  \"message\", \"call\", \"dispatch\", \"enqueue\", \"resolve\", \"unassign\", \"lock\", \"unlock\", \"pin\",\n])\n\n// ---------------------------------------------------------------- shell view\n\n/**\n * The part of a shell command the shell will actually EXECUTE, flattened so\n * every command position can be inspected:\n *   - single-quoted text is blanked (truly literal),\n *   - double-quoted text is blanked unless it contains `$(`/backticks, in\n *     which case the substitution is executed and must stay visible,\n *   - heredoc bodies are blanked unless the delimiter is unquoted and the\n *     body substitutes commands.\n * Returns `null` for input too irregular to judge (unbalanced quotes), which\n * callers treat as \"block\" in report mode.\n */\nexport function shellView(command: string): string | null {\n  // Heredocs: blank the body unless the delimiter is unquoted AND the body\n  // substitutes commands (then the shell executes it — keep it visible).\n  const text = command.replace(/<<-?\\s*(['\"]?)([A-Za-z_][A-Za-z0-9_]*)\\1([\\s\\S]*?)^\\s*\\2\\s*$/gm,\n    (m, quote: string, _d: string, body: string) =>\n      !quote && /\\$\\(|`/.test(body) ? m : m.split(\"\\n\")[0] + \"\\n\")\n  let out = \"\"\n  let i = 0\n  while (i < text.length) {\n    const c = text[i]\n    if (c === \"\\\\\") { out += text.slice(i, i + 2); i += 2; continue }\n    if (c === \"'\") {\n      const end = text.indexOf(\"'\", i + 1)\n      if (end < 0) return null\n      out += \"''\"\n      i = end + 1\n      continue\n    }\n    if (c === '\"') {\n      let j = i + 1\n      while (j < text.length && text[j] !== '\"') j += text[j] === \"\\\\\" ? 2 : 1\n      if (j >= text.length) return null\n      const inner = text.slice(i + 1, j)\n      out += /\\$\\(|`/.test(inner) ? ` ${inner} ` : '\"\"'\n      i = j + 1\n      continue\n    }\n    out += c\n    i++\n  }\n  return out\n}\n\n/** Split a shell view into simple-command segments (words arrays). */\nexport function shellSegments(view: string): string[][] {\n  return view\n    .split(/\\|\\||&&|[;|&\\n`()]|\\$\\(|<\\(|>\\(/)\n    .map((s) => s.trim().split(/\\s+/).filter(Boolean))\n    .filter((w) => w.length > 0)\n}\n\nconst SHELL_KEYWORDS_STRIP = new Set([\"then\", \"do\", \"else\", \"elif\", \"if\", \"while\", \"until\", \"!\", \"{\", \"}\", \"time\"])\nconst SHELL_KEYWORDS_SKIP = new Set([\"done\", \"fi\", \"esac\", \"for\", \"case\", \"select\", \"in\", \";;\"])\n\n/** Drop leading keywords and `VAR=value` assignments; return the command words. */\nfunction commandWords(words: string[]): string[] {\n  let i = 0\n  while (i < words.length) {\n    const w = words[i]\n    if (SHELL_KEYWORDS_SKIP.has(w)) return []\n    if (SHELL_KEYWORDS_STRIP.has(w) || /^[A-Za-z_][A-Za-z0-9_]*=/.test(w)) { i++; continue }\n    break\n  }\n  return words.slice(i)\n}\n\n/** `git [-C dir] [--flags] <sub> <rest...>` -> { sub, rest }. */\nfunction gitSubcommand(args: string[]): { sub: string | undefined; rest: string[] } {\n  let i = 0\n  while (i < args.length && args[i].startsWith(\"-\")) i += /^-(C|c)$|^--(git-dir|work-tree|namespace)$/.test(args[i]) ? 2 : 1\n  return { sub: args[i], rest: args.slice(i + 1) }\n}\n\n/** Command name without its path: `/usr/bin/git` -> `git`. */\nconst baseName = (w: string) => w.replace(/^.*\\//, \"\")\n\n// ---------------------------------------------------------------- report\n\nconst REPORT_SHELL_COMMANDS = new Set([\n  \"ls\", \"pwd\", \"cd\", \"cat\", \"head\", \"tail\", \"wc\", \"grep\", \"egrep\", \"fgrep\", \"rg\", \"fd\", \"tree\",\n  \"stat\", \"file\", \"du\", \"df\", \"date\", \"whoami\", \"id\", \"hostname\", \"uname\", \"which\", \"type\",\n  \"sort\", \"uniq\", \"cut\", \"tr\", \"diff\", \"cmp\", \"comm\", \"basename\", \"dirname\", \"realpath\",\n  \"readlink\", \"jq\", \"column\", \"nl\", \"seq\", \"true\", \"false\", \"test\", \"[\", \"sleep\", \"ps\",\n  \"uptime\", \"echo\", \"printf\", \"base64\", \"md5\", \"md5sum\", \"shasum\", \"sha256sum\", \"less\", \"more\",\n  \"printenv\", \"dig\", \"nslookup\", \"host\", \"find\", \"git\", \"gh\", \"glab\", \"curl\",\n])\n\nconst GIT_READ = new Set([\n  \"status\", \"log\", \"diff\", \"show\", \"rev-parse\", \"ls-files\", \"ls-tree\", \"blame\", \"shortlog\",\n  \"describe\", \"cat-file\", \"grep\", \"branch\", \"tag\", \"remote\", \"config\", \"reflog\", \"rev-list\",\n  \"merge-base\", \"name-rev\", \"show-ref\", \"for-each-ref\", \"whatchanged\",\n])\nconst GH_READ_ACTIONS = new Set([\"view\", \"list\", \"diff\", \"status\", \"checks\", \"ls\"])\n\nfunction reportShellWord(words: string[]): string | null {\n  const [cmd, ...args] = words\n  const base = cmd.replace(/^.*\\//, \"\")\n  if (!REPORT_SHELL_COMMANDS.has(base)) return `\\`${base}\\` is not a read-only command`\n  const has = (re: RegExp) => args.some((a) => re.test(a))\n  switch (base) {\n    case \"find\":\n      if (has(/^-(exec|execdir|ok|okdir|delete|fprint|fprint0|fprintf|fls)$/)) return \"find with -exec/-delete\"\n      return null\n    case \"sort\":\n      if (has(/^(-o|--output)/)) return \"sort -o writes a file\"\n      return null\n    case \"git\": {\n      if (has(/^(-c|--exec-path|--output)/)) return \"git option that can execute or write\"\n      const { sub, rest } = gitSubcommand(args)\n      if (!sub || !GIT_READ.has(sub)) return `git ${sub ?? \"\"} is not read-only`.trim()\n      if (sub === \"branch\" && rest.some((a) => /^-(d|D|m|M|c|C|f|u)$|^--(delete|move|copy|force|set-upstream|unset-upstream|edit-description)/.test(a) || !a.startsWith(\"-\"))) {\n        return \"git branch that changes branches\"\n      }\n      if (sub === \"tag\" && rest.some((a) => !/^(-l|--list|-n\\d*|--contains|--points-at|--sort=.*|--merged|--no-merged)$/.test(a))) {\n        return \"git tag that creates or deletes tags\"\n      }\n      if (sub === \"remote\" && rest.length > 0 && !/^(-v|--verbose|show|get-url)$/.test(rest[0])) return \"git remote that changes remotes\"\n      if (sub === \"config\" && !rest.some((a) => /^(--get|--get-all|--get-regexp|--list|-l)$/.test(a))) return \"git config write\"\n      if (sub === \"reflog\" && rest.length > 0 && !/^(show|-)/.test(rest[0])) return \"git reflog that expires or deletes\"\n      return null\n    }\n    case \"gh\":\n    case \"glab\": {\n      const [group, action] = args.filter((a) => !a.startsWith(\"-\"))\n      if (group === \"search\") return null\n      if (group === \"api\") {\n        const method = args.findIndex((a) => /^(-X|--method)$/.test(a))\n        if (method >= 0 && !/^GET$/i.test(args[method + 1] ?? \"\")) return `${base} api with a non-GET method`\n        if (has(/^-X(?!GET$)\\w+|^--method=(?!GET$)/i)) return `${base} api with a non-GET method`\n        if (has(/^(-f|-F|--field|--raw-field|--input)/)) return `${base} api with a request body`\n        return null\n      }\n      if (!action || !GH_READ_ACTIONS.has(action)) return `${base} ${group ?? \"\"} ${action ?? \"\"} is not read-only`.replace(/\\s+/g, \" \").trim()\n      return null\n    }\n    case \"curl\": {\n      const m = args.findIndex((a) => /^(-X|--request)$/.test(a))\n      if (m >= 0 && !/^(GET|HEAD|OPTIONS)$/i.test(args[m + 1] ?? \"\")) return \"curl with a non-GET method\"\n      if (has(/^-X(?!GET$|HEAD$)\\w+|^--request=(?!GET$|HEAD$)/i)) return \"curl with a non-GET method\"\n      if (has(/^(-d|--data|--data-\\w+|--json|-F|--form|-T|--upload-file|-o|--output|-O|--remote-name|-K|--config)/)) {\n        return \"curl that sends a body or writes a file\"\n      }\n      return null\n    }\n    default:\n      return null\n  }\n}\n\n/** Redirects that write somewhere other than /dev/null or another fd. */\nfunction hasWritingRedirect(view: string): boolean {\n  const cleaned = view\n    .replace(/\\d*>>?\\s*\\/dev\\/null/g, \" \")\n    .replace(/&>>?\\s*\\/dev\\/null/g, \" \")\n    .replace(/\\d*>&\\s*\\d+/g, \" \")\n  return /[>]/.test(cleaned)\n}\n\nfunction reportBash(command: string): AutonomyDecision {\n  const view = shellView(command)\n  if (view === null) return block(\"report\", \"shell\", \"command too irregular to verify as read-only\")\n  if (hasWritingRedirect(view)) return block(\"report\", \"shell\", \"output redirection writes a file\")\n  for (const seg of shellSegments(view)) {\n    const words = commandWords(seg)\n    if (words.length === 0) continue\n    const why = reportShellWord(words)\n    if (why) return block(\"report\", \"shell\", why)\n  }\n  return ALLOW\n}\n\nfunction reportTool(input: AutonomyInput): AutonomyDecision {\n  if (WRITE_TOOLS.has(input.tool)) return block(\"report\", \"write\", `${input.tool} modifies files`)\n  if (input.tool === \"Bash\") return reportBash(input.command ?? \"\")\n  if (REPORT_SAFE_TOOLS.has(input.tool)) return ALLOW\n  if (input.tool.startsWith(\"mcp__\")) {\n    const words = mcpActionWords(input.tool)\n    const mutating = words.find((w) => MUTATING_VERBS.has(w))\n    if (mutating) return block(\"report\", \"outward\", `tool \"${input.tool}\" can change state (${mutating})`)\n    if (words.some((w) => READ_VERBS.has(w))) return ALLOW\n    return block(\"report\", \"outward\", `tool \"${input.tool}\" is not recognisably read-only`)\n  }\n  return block(\"report\", \"tool\", `tool \"${input.tool}\" is not on the read-only list`)\n}\n\n// ---------------------------------------------------------------- propose\n\ninterface ShellRule { id: string; re: RegExp; reason: string }\n\n/** Content rules, matched against the RAW command: quoting is how these\n *  payloads are delivered (`psql -c 'DROP TABLE x'`), not a disclaimer. */\nconst PROPOSE_RAW_RULES: ShellRule[] = [\n  { id: \"merge\", re: /merge_when_pipeline_succeeds|\\bauto[_-]merge\\b/i, reason: \"auto-merging is an act-level action\" },\n  { id: \"merge\", re: /\\b(curl|wget|http|gh\\s+api|glab\\s+api)\\b[^\\n]*\\/merges?\\b/i, reason: \"calling a merge endpoint is an act-level action\" },\n  { id: \"delete\", re: /(?:^|\\W)(drop|truncate)\\s+(table|database|schema|index|collection)\\b|(?:^|\\W)delete\\s+from\\b|\\bflushall\\b|\\bflushdb\\b/i, reason: \"destroying data is an act-level action\" },\n  { id: \"delete\", re: /(-X|--request)[\\s=]*['\"]?DELETE\\b/i, reason: \"HTTP DELETE is an act-level action\" },\n  { id: \"delegate\", re: /\\b(curl|wget|http)\\b[^\\n]*(localhost|127\\.0\\.0\\.1|\\[::1\\])[^\\n]*\\/(ask|task|send|chat|mesh|workflows?|crons?|reload|config)\\b/i, reason: \"calling the local daemon to dispatch work escapes this routine's limit\" },\n]\n\n/** Command rules, matched against one simple command (quoted text blanked). */\nconst PROPOSE_COMMAND_RULES: ShellRule[] = [\n  { id: \"merge\", re: /^(gh\\s+pr\\s+merge|glab\\s+mr\\s+merge)\\b/i, reason: \"merging is an act-level action\" },\n  { id: \"delete\", re: /^rm\\s+(.*\\s)?(-\\w*[rR]\\w*|--recursive)\\b|^(shred|dropdb)\\b|^find\\b.*\\s-delete\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"delete\", re: /^git\\s+(clean\\s+-\\w*f|reset\\s+--hard|branch\\s+(-\\w*[dD]\\w*|--delete)|tag\\s+(-d|--delete)|stash\\s+(drop|clear)|remote\\s+(remove|rm))\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"delete\", re: /^(gh|glab)\\s+\\S+\\s+delete\\b|^docker\\s+(rm|rmi|volume\\s+rm|system\\s+prune)\\b|^(kubectl\\s+delete|aws\\s+s3\\s+(rm|rb)|gsutil\\s+rm)\\b|^doctl\\s+.*\\sdelete\\b/i, reason: \"deleting is an act-level action\" },\n  { id: \"deploy\", re: /^(kubectl\\s+(apply|rollout|scale|set|patch|replace|create|edit)|helm\\s+(install|upgrade|rollback|uninstall|delete)|terraform\\s+(apply|destroy|import|taint)|pulumi\\s+(up|destroy)|docker\\s+push|netlify\\s+deploy|fly(ctl)?\\s+deploy|serverless\\s+deploy|vercel\\b.*--prod)\\b/i, reason: \"deploying is an act-level action\" },\n  { id: \"deploy\", re: /^((npm|pnpm|yarn|bun)(\\s+run)?|make|just|task|rake)\\s+(\\S+:)?deploy\\b|^((ba|z)?sh|node|python3?)\\s+\\S*deploy[^\\s/]*$|^\\S*\\/deploy(\\.\\w+)?\\b|^deploy(\\.\\w+)?\\b/i, reason: \"deploying is an act-level action\" },\n  { id: \"deploy\", re: /^((npm|pnpm|yarn|bun)\\s+publish|cargo\\s+publish|twine\\s+upload|(gh|glab)\\s+release\\s+(create|upload|edit)|(npx\\s+)?prisma\\s+(migrate\\s+(deploy|reset)|db\\s+push))\\b/i, reason: \"publishing or migrating is an act-level action\" },\n  { id: \"prod\", re: /^(ssh|scp|sudo|doas|systemctl|launchctl|service|kill|pkill|killall|reboot|shutdown)\\b|^rsync\\b.*\\s\\S+:\\S*/i, reason: \"operating hosts and services is an act-level action\" },\n  { id: \"delegate\", re: /^(agentx|agentix)\\s+(ask|send|task|exec|run|chat|mesh|cron|workflow|daemon|config)\\b/i, reason: \"handing work to another agent or reconfiguring the daemon escapes this routine's limit\" },\n]\n\nconst PROTECTED_BRANCH = /^(main|master|trunk|develop|development|prod|production|staging|stable|release([/-].*)?|HEAD|@)$/i\n/** `git push` options that consume the next word. */\nconst PUSH_VALUE_OPTS = /^(-o|--push-option|--repo|--receive-pack|--exec)$/\n\n/** A push may only name feature branches explicitly — no force, no delete,\n *  no mirror/tags, no protected destinations, no implicit \"current branch\". */\nfunction proposeGitPush(rest: string[]): AutonomyDecision | null {\n  const positional: string[] = []\n  for (let i = 0; i < rest.length; i++) {\n    const a = rest[i]\n    if (PUSH_VALUE_OPTS.test(a)) { i++; continue }\n    if (/^(--force.*|-d|--delete|--mirror|--all|--tags|--prune)$/.test(a) || /^-[a-zA-Z]*f/.test(a)) {\n      return block(\"propose\", \"push\", \"force, delete, mirror and tag pushes are act-level actions\")\n    }\n    if (!a.startsWith(\"-\")) positional.push(a)\n  }\n  const refspecs = positional.slice(1)\n  if (refspecs.length === 0) return block(\"propose\", \"push\", \"name the feature branch explicitly: git push <remote> <branch>\")\n  for (const ref of refspecs) {\n    if (ref.startsWith(\"+\") || ref.startsWith(\":\")) return block(\"propose\", \"push\", `refspec \"${ref}\" force-pushes or deletes`)\n    const name = (ref.includes(\":\") ? ref.slice(ref.indexOf(\":\") + 1) : ref).replace(/^refs\\/heads\\//, \"\")\n    if (PROTECTED_BRANCH.test(name)) return block(\"propose\", \"push\", `pushing to \"${name}\" is an act-level action; push a feature branch and open a merge request`)\n  }\n  return null\n}\n\nfunction proposeBash(command: string): AutonomyDecision {\n  for (const rule of PROPOSE_RAW_RULES) {\n    if (rule.re.test(command)) return block(\"propose\", rule.id, rule.reason)\n  }\n  const view = shellView(command)\n  if (view === null) return block(\"propose\", \"shell\", \"command too irregular to verify\")\n  for (const seg of shellSegments(view)) {\n    const words = commandWords(seg)\n    if (words.length === 0) continue\n    const line = [baseName(words[0]), ...words.slice(1)].join(\" \")\n    for (const rule of PROPOSE_COMMAND_RULES) {\n      if (rule.re.test(line)) return block(\"propose\", rule.id, rule.reason)\n    }\n    if (baseName(words[0]) === \"git\") {\n      const { sub, rest } = gitSubcommand(words.slice(1))\n      if (sub === \"push\") {\n        const hit = proposeGitPush(rest)\n        if (hit) return hit\n      }\n    }\n  }\n  return ALLOW\n}\n\nfunction proposeTool(input: AutonomyInput): AutonomyDecision {\n  if (input.tool === \"Bash\") return proposeBash(input.command ?? \"\")\n  if (input.tool.startsWith(\"mcp__\")) {\n    const hit = mcpActionWords(input.tool).find((w) => DESTRUCTIVE_VERBS.has(w))\n    if (hit) return block(\"propose\", \"outward\", `tool \"${input.tool}\" performs an act-level action (${hit})`)\n    if (isDelegation(mcpActionWords(input.tool))) {\n      return block(\"propose\", \"delegate\", `tool \"${input.tool}\" hands work to another agent, which would run at its own full autonomy`)\n    }\n  }\n  return ALLOW\n}\n\n/** Handing the task to another agent escapes the limit: that agent's run\n *  is not restricted. */\nfunction isDelegation(words: string[]): boolean {\n  if (words.includes(\"delegate\") || words.includes(\"handoff\")) return true\n  if (words.includes(\"agent\") && words.some((w) => w === \"send\" || w === \"ask\" || w === \"message\" || w === \"task\")) return true\n  return words.includes(\"task\") && !words.some((w) => READ_VERBS.has(w))\n}\n\n// ---------------------------------------------------------------- entry\n\n/** Judge one tool call against an autonomy level. `act` allows everything. */\nexport function evaluateAutonomy(level: AutonomyLevel, input: AutonomyInput): AutonomyDecision {\n  if (level === \"report\") return reportTool(input)\n  if (level === \"propose\") return proposeTool(input)\n  return ALLOW\n}\n\n/** One-paragraph brief prepended to a restricted task, so the model knows\n *  the boundary up front instead of discovering it by being blocked. The\n *  enforcement does not depend on it. */\nexport function autonomyBrief(level: AutonomyLevel): string {\n  if (level === \"report\") {\n    return \"[Autonomy: report] This routine runs read-only. Investigate and report; do not modify files, run mutating commands, or post anywhere. Your final answer is the deliverable. Blocked actions are enforced and logged; if something needs doing, describe it in the report instead.\"\n  }\n  if (level === \"propose\") {\n    return \"[Autonomy: propose] You may edit files, commit, push a named feature branch, and open a merge request or draft. You may not merge, deploy, delete, force-push, push to protected branches, or operate hosts. These limits are enforced and logged; leave act-level steps as clear recommendations.\"\n  }\n  return \"\"\n}\n"],"mappings":"wCAAA,OAAS,KAAAA,MAAS,MAkCX,SAASC,EAAaC,EAAwE,CACnG,OAAOA,IAAU,UAAYA,IAAU,SACzC,CAoCO,SAASC,EAAUC,EAAwB,CAChD,OAAOA,EACJ,QAAQ,qBAAsB,OAAO,EACrC,MAAM,eAAe,EACrB,OAAO,OAAO,EACd,IAAKC,GAAMA,EAAE,YAAY,CAAC,CAC/B,CAKO,SAASC,EAAeF,EAAwB,CACrD,OAAOD,EAAUC,CAAI,EAClB,MAAM,CAAC,EACP,KAAK,GAAG,EACR,QAAQ,gCAAiC,cAAc,EACvD,MAAM,GAAG,EACT,OAAO,OAAO,CACnB,CAoCO,SAASG,EAAUC,EAAgC,CAGxD,IAAMC,EAAOD,EAAQ,QAAQ,iEAC3B,CAACE,EAAGC,EAAeC,EAAYC,IAC7B,CAACF,GAAS,SAAS,KAAKE,CAAI,EAAIH,EAAIA,EAAE,MAAM;AAAA,CAAI,EAAE,CAAC,EAAI;AAAA,CAAI,EAC3DI,EAAM,GACNC,EAAI,EACR,KAAOA,EAAIN,EAAK,QAAQ,CACtB,IAAMO,EAAIP,EAAKM,CAAC,EAChB,GAAIC,IAAM,KAAM,CAAEF,GAAOL,EAAK,MAAMM,EAAGA,EAAI,CAAC,EAAGA,GAAK,EAAG,SACvD,GAAIC,IAAM,IAAK,CACb,IAAMC,EAAMR,EAAK,QAAQ,IAAKM,EAAI,CAAC,EACnC,GAAIE,EAAM,EAAG,OAAO,KACpBH,GAAO,KACPC,EAAIE,EAAM,EACV,SAEF,GAAID,IAAM,IAAK,CACb,IAAIE,EAAIH,EAAI,EACZ,KAAOG,EAAIT,EAAK,QAAUA,EAAKS,CAAC,IAAM,KAAKA,GAAKT,EAAKS,CAAC,IAAM,KAAO,EAAI,EACvE,GAAIA,GAAKT,EAAK,OAAQ,OAAO,KAC7B,IAAMU,EAAQV,EAAK,MAAMM,EAAI,EAAGG,CAAC,EACjCJ,GAAO,SAAS,KAAKK,CAAK,EAAI,IAAIA,KAAW,KAC7CJ,EAAIG,EAAI,EACR,SAEFJ,GAAOE,EACPD,IAEF,OAAOD,CACT,CAGO,SAASM,EAAcC,EAA0B,CACtD,OAAOA,EACJ,MAAM,iCAAiC,EACvC,IAAKC,GAAMA,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,CAAC,EAChD,OAAQjB,GAAMA,EAAE,OAAS,CAAC,CAC/B,CAMA,SAASkB,EAAaC,EAA2B,CAC/C,IAAIT,EAAI,EACR,KAAOA,EAAIS,EAAM,QAAQ,CACvB,IAAMnB,EAAImB,EAAMT,CAAC,EACjB,GAAIU,EAAoB,IAAIpB,CAAC,EAAG,MAAO,CAAC,EACxC,GAAIqB,EAAqB,IAAIrB,CAAC,GAAK,2BAA2B,KAAKA,CAAC,EAAG,CAAEU,IAAK,SAC9E,MAEF,OAAOS,EAAM,MAAMT,CAAC,CACtB,CAGA,SAASY,EAAcC,EAA6D,CAClF,IAAIb,EAAI,EACR,KAAOA,EAAIa,EAAK,QAAUA,EAAKb,CAAC,EAAE,WAAW,GAAG,GAAGA,GAAK,6CAA6C,KAAKa,EAAKb,CAAC,CAAC,EAAI,EAAI,EACzH,MAAO,CAAE,IAAKa,EAAKb,CAAC,EAAG,KAAMa,EAAK,MAAMb,EAAI,CAAC,CAAE,CACjD,CAuBA,SAASc,EAAgBL,EAAgC,CACvD,GAAM,CAACM,EAAK,GAAGF,CAAI,EAAIJ,EACjBO,EAAOD,EAAI,QAAQ,QAAS,EAAE,EACpC,GAAI,CAACE,EAAsB,IAAID,CAAI,EAAG,MAAO,KAAKA,iCAClD,IAAME,EAAOC,GAAeN,EAAK,KAAMO,GAAMD,EAAG,KAAKC,CAAC,CAAC,EACvD,OAAQJ,EAAM,CACZ,IAAK,OACH,OAAIE,EAAI,8DAA8D,EAAU,0BACzE,KACT,IAAK,OACH,OAAIA,EAAI,gBAAgB,EAAU,wBAC3B,KACT,IAAK,MAAO,CACV,GAAIA,EAAI,4BAA4B,EAAG,MAAO,uCAC9C,GAAM,CAAE,IAAAG,EAAK,KAAAC,CAAK,EAAIV,EAAcC,CAAI,EACxC,MAAI,CAACQ,GAAO,CAACE,EAAS,IAAIF,CAAG,EAAU,OAAOA,GAAO,sBAAsB,KAAK,EAC5EA,IAAQ,UAAYC,EAAK,KAAMF,GAAM,gGAAgG,KAAKA,CAAC,GAAK,CAACA,EAAE,WAAW,GAAG,CAAC,EAC7J,mCAELC,IAAQ,OAASC,EAAK,KAAMF,GAAM,CAAC,4EAA4E,KAAKA,CAAC,CAAC,EACjH,uCAELC,IAAQ,UAAYC,EAAK,OAAS,GAAK,CAAC,gCAAgC,KAAKA,EAAK,CAAC,CAAC,EAAU,kCAC9FD,IAAQ,UAAY,CAACC,EAAK,KAAMF,GAAM,6CAA6C,KAAKA,CAAC,CAAC,EAAU,mBACpGC,IAAQ,UAAYC,EAAK,OAAS,GAAK,CAAC,YAAY,KAAKA,EAAK,CAAC,CAAC,EAAU,qCACvE,IACT,CACA,IAAK,KACL,IAAK,OAAQ,CACX,GAAM,CAACE,EAAOC,CAAM,EAAIZ,EAAK,OAAQO,GAAM,CAACA,EAAE,WAAW,GAAG,CAAC,EAC7D,GAAII,IAAU,SAAU,OAAO,KAC/B,GAAIA,IAAU,MAAO,CACnB,IAAME,EAASb,EAAK,UAAWO,GAAM,kBAAkB,KAAKA,CAAC,CAAC,EAC9D,OAAIM,GAAU,GAAK,CAAC,SAAS,KAAKb,EAAKa,EAAS,CAAC,GAAK,EAAE,EAAU,GAAGV,8BACjEE,EAAI,oCAAoC,EAAU,GAAGF,8BACrDE,EAAI,sCAAsC,EAAU,GAAGF,4BACpD,KAET,MAAI,CAACS,GAAU,CAACE,EAAgB,IAAIF,CAAM,EAAU,GAAGT,KAAQQ,GAAS,MAAMC,GAAU,sBAAsB,QAAQ,OAAQ,GAAG,EAAE,KAAK,EACjI,IACT,CACA,IAAK,OAAQ,CACX,IAAM9B,EAAIkB,EAAK,UAAWO,GAAM,mBAAmB,KAAKA,CAAC,CAAC,EAE1D,OADIzB,GAAK,GAAK,CAAC,wBAAwB,KAAKkB,EAAKlB,EAAI,CAAC,GAAK,EAAE,GACzDuB,EAAI,iDAAiD,EAAU,6BAC/DA,EAAI,oGAAoG,EACnG,0CAEF,IACT,CACA,QACE,OAAO,IACX,CACF,CAGA,SAASU,EAAmBtB,EAAuB,CACjD,IAAMuB,EAAUvB,EACb,QAAQ,wBAAyB,GAAG,EACpC,QAAQ,sBAAuB,GAAG,EAClC,QAAQ,eAAgB,GAAG,EAC9B,MAAO,MAAM,KAAKuB,CAAO,CAC3B,CAEA,SAASC,EAAWrC,EAAmC,CACrD,IAAMa,EAAOd,EAAUC,CAAO,EAC9B,GAAIa,IAAS,KAAM,OAAOyB,EAAM,SAAU,QAAS,8CAA8C,EACjG,GAAIH,EAAmBtB,CAAI,EAAG,OAAOyB,EAAM,SAAU,QAAS,kCAAkC,EAChG,QAAWC,KAAO3B,EAAcC,CAAI,EAAG,CACrC,IAAMG,EAAQD,EAAawB,CAAG,EAC9B,GAAIvB,EAAM,SAAW,EAAG,SACxB,IAAMwB,EAAMnB,EAAgBL,CAAK,EACjC,GAAIwB,EAAK,OAAOF,EAAM,SAAU,QAASE,CAAG,EAE9C,OAAOC,CACT,CAEA,SAASC,EAAWC,EAAwC,CAC1D,GAAIC,EAAY,IAAID,EAAM,IAAI,EAAG,OAAOL,EAAM,SAAU,QAAS,GAAGK,EAAM,qBAAqB,EAC/F,GAAIA,EAAM,OAAS,OAAQ,OAAON,EAAWM,EAAM,SAAW,EAAE,EAChE,GAAIE,EAAkB,IAAIF,EAAM,IAAI,EAAG,OAAOF,EAC9C,GAAIE,EAAM,KAAK,WAAW,OAAO,EAAG,CAClC,IAAM3B,EAAQlB,EAAe6C,EAAM,IAAI,EACjCG,EAAW9B,EAAM,KAAMnB,GAAMkD,EAAe,IAAIlD,CAAC,CAAC,EACxD,OAAIiD,EAAiBR,EAAM,SAAU,UAAW,SAASK,EAAM,2BAA2BG,IAAW,EACjG9B,EAAM,KAAMnB,GAAMmD,EAAW,IAAInD,CAAC,CAAC,EAAU4C,EAC1CH,EAAM,SAAU,UAAW,SAASK,EAAM,qCAAqC,EAExF,OAAOL,EAAM,SAAU,OAAQ,SAASK,EAAM,oCAAoC,CACpF,CAmCA,SAASM,EAAepB,EAAyC,CAC/D,IAAMqB,EAAuB,CAAC,EAC9B,QAAS3C,EAAI,EAAGA,EAAIsB,EAAK,OAAQtB,IAAK,CACpC,IAAMoB,EAAIE,EAAKtB,CAAC,EAChB,GAAI4C,EAAgB,KAAKxB,CAAC,EAAG,CAAEpB,IAAK,SACpC,GAAI,0DAA0D,KAAKoB,CAAC,GAAK,eAAe,KAAKA,CAAC,EAC5F,OAAOW,EAAM,UAAW,OAAQ,4DAA4D,EAEzFX,EAAE,WAAW,GAAG,GAAGuB,EAAW,KAAKvB,CAAC,EAE3C,IAAMyB,EAAWF,EAAW,MAAM,CAAC,EACnC,GAAIE,EAAS,SAAW,EAAG,OAAOd,EAAM,UAAW,OAAQ,gEAAgE,EAC3H,QAAWe,KAAOD,EAAU,CAC1B,GAAIC,EAAI,WAAW,GAAG,GAAKA,EAAI,WAAW,GAAG,EAAG,OAAOf,EAAM,UAAW,OAAQ,YAAYe,4BAA8B,EAC1H,IAAMzD,GAAQyD,EAAI,SAAS,GAAG,EAAIA,EAAI,MAAMA,EAAI,QAAQ,GAAG,EAAI,CAAC,EAAIA,GAAK,QAAQ,iBAAkB,EAAE,EACrG,GAAIC,EAAiB,KAAK1D,CAAI,EAAG,OAAO0C,EAAM,UAAW,OAAQ,eAAe1C,2EAA8E,EAEhK,OAAO,IACT,CAEA,SAAS2D,EAAYvD,EAAmC,CACtD,QAAWwD,KAAQC,EACjB,GAAID,EAAK,GAAG,KAAKxD,CAAO,EAAG,OAAOsC,EAAM,UAAWkB,EAAK,GAAIA,EAAK,MAAM,EAEzE,IAAM3C,EAAOd,EAAUC,CAAO,EAC9B,GAAIa,IAAS,KAAM,OAAOyB,EAAM,UAAW,QAAS,iCAAiC,EACrF,QAAWC,KAAO3B,EAAcC,CAAI,EAAG,CACrC,IAAMG,EAAQD,EAAawB,CAAG,EAC9B,GAAIvB,EAAM,SAAW,EAAG,SACxB,IAAM0C,EAAO,CAACC,EAAS3C,EAAM,CAAC,CAAC,EAAG,GAAGA,EAAM,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,EAC7D,QAAWwC,KAAQI,EACjB,GAAIJ,EAAK,GAAG,KAAKE,CAAI,EAAG,OAAOpB,EAAM,UAAWkB,EAAK,GAAIA,EAAK,MAAM,EAEtE,GAAIG,EAAS3C,EAAM,CAAC,CAAC,IAAM,MAAO,CAChC,GAAM,CAAE,IAAAY,EAAK,KAAAC,CAAK,EAAIV,EAAcH,EAAM,MAAM,CAAC,CAAC,EAClD,GAAIY,IAAQ,OAAQ,CAClB,IAAMiC,EAAMZ,EAAepB,CAAI,EAC/B,GAAIgC,EAAK,OAAOA,IAItB,OAAOpB,CACT,CAEA,SAASqB,EAAYnB,EAAwC,CAC3D,GAAIA,EAAM,OAAS,OAAQ,OAAOY,EAAYZ,EAAM,SAAW,EAAE,EACjE,GAAIA,EAAM,KAAK,WAAW,OAAO,EAAG,CAClC,IAAMkB,EAAM/D,EAAe6C,EAAM,IAAI,EAAE,KAAM9C,GAAMkE,EAAkB,IAAIlE,CAAC,CAAC,EAC3E,GAAIgE,EAAK,OAAOvB,EAAM,UAAW,UAAW,SAASK,EAAM,uCAAuCkB,IAAM,EACxG,GAAIG,EAAalE,EAAe6C,EAAM,IAAI,CAAC,EACzC,OAAOL,EAAM,UAAW,WAAY,SAASK,EAAM,6EAA6E,EAGpI,OAAOF,CACT,CAIA,SAASuB,EAAahD,EAA0B,CAE9C,OADIA,EAAM,SAAS,UAAU,GAAKA,EAAM,SAAS,SAAS,GACtDA,EAAM,SAAS,OAAO,GAAKA,EAAM,KAAMnB,GAAMA,IAAM,QAAUA,IAAM,OAASA,IAAM,WAAaA,IAAM,MAAM,EAAU,GAClHmB,EAAM,SAAS,MAAM,GAAK,CAACA,EAAM,KAAMnB,GAAMmD,EAAW,IAAInD,CAAC,CAAC,CACvE,CAKO,SAASoE,EAAiBvE,EAAsBiD,EAAwC,CAC7F,OAAIjD,IAAU,SAAiBgD,EAAWC,CAAK,EAC3CjD,IAAU,UAAkBoE,EAAYnB,CAAK,EAC1CF,CACT,CAKO,SAASyB,EAAcxE,EAA8B,CAC1D,OAAIA,IAAU,SACL,oRAELA,IAAU,UACL,qSAEF,EACT,CAlaA,IA8BayE,EAqBP1B,EACAH,EAQAM,EAGAC,EA6BAG,EAKAe,EAMAhB,EAgEA7B,EACAD,EAsBA0C,EAIAnC,EASAM,EAKAI,EAmGAuB,EASAG,EAYAN,EAEAH,EA1UNiB,EAAAC,EAAA,kBA8BaF,EAAsB3E,EAAE,KAAK,CAAC,SAAU,UAAW,KAAK,CAAC,EAqBhEiD,EAA0B,CAAE,QAAS,GAAM,OAAQ,KAAM,OAAQ,IAAK,EACtEH,EAAQ,CAAC5C,EAAe4E,EAAYC,KAAsC,CAC9E,QAAS,GACT,OAAQ,YAAY7E,KAAS4E,IAC7B,OAAAC,CACF,GAIM3B,EAAc,IAAI,IAAI,CAAC,QAAS,OAAQ,YAAa,cAAc,CAAC,EAGpEC,EAAoB,IAAI,IAAI,CAChC,OAAQ,OAAQ,OAAQ,KAAM,eAAgB,WAAY,YAC1D,YAAa,WAAY,OAAQ,QAAS,QAAS,aACnD,aAAc,YAAa,eAAgB,gBAC3C,uBAAwB,qBAC1B,CAAC,EAwBKG,EAAa,IAAI,IAAI,CACzB,MAAO,OAAQ,SAAU,OAAQ,OAAQ,QAAS,QAAS,OAAQ,OAAQ,WAC3E,SAAU,OAAQ,UAAW,SAAU,QAAS,QAAS,SAAU,SAAU,UAC/E,CAAC,EAEKe,EAAoB,IAAI,IAAI,CAChC,QAAS,SAAU,SAAU,UAAW,OAAQ,SAAU,UAAW,UAAW,UAChF,UAAW,SAAU,QAAS,QAAS,WAAY,QAAS,WAAY,UAAW,QACnF,YAAa,WAAY,OAAQ,OAAQ,YAAa,YAAa,SACrE,CAAC,EAEKhB,EAAiB,IAAI,IAAI,CAC7B,GAAGgB,EACH,SAAU,SAAU,OAAQ,OAAQ,QAAS,OAAQ,MAAO,MAAO,UAAW,QAC9E,OAAQ,MAAO,UAAW,OAAQ,UAAW,SAAU,OAAQ,SAAU,SAAU,QACnF,SAAU,QAAS,QAAS,SAAU,SAAU,WAAY,QAAS,OAAQ,SAAU,OACvF,QAAS,MAAO,SAAU,SAAU,QAAS,UAAW,SAAU,OAAQ,SAAU,SACpF,UAAW,OAAQ,SAAU,OAAQ,QAAS,QAAS,WAAY,SAAU,YAC7E,UAAW,OAAQ,WAAY,UAAW,UAAW,WAAY,OAAQ,SAAU,KACrF,CAAC,EAwDK7C,EAAuB,IAAI,IAAI,CAAC,OAAQ,KAAM,OAAQ,OAAQ,KAAM,QAAS,QAAS,IAAK,IAAK,IAAK,MAAM,CAAC,EAC5GD,EAAsB,IAAI,IAAI,CAAC,OAAQ,KAAM,OAAQ,MAAO,OAAQ,SAAU,KAAM,IAAI,CAAC,EAsBzF0C,EAAY9D,GAAcA,EAAE,QAAQ,QAAS,EAAE,EAI/C2B,EAAwB,IAAI,IAAI,CACpC,KAAM,MAAO,KAAM,MAAO,OAAQ,OAAQ,KAAM,OAAQ,QAAS,QAAS,KAAM,KAAM,OACtF,OAAQ,OAAQ,KAAM,KAAM,OAAQ,SAAU,KAAM,WAAY,QAAS,QAAS,OAClF,OAAQ,OAAQ,MAAO,KAAM,OAAQ,MAAO,OAAQ,WAAY,UAAW,WAC3E,WAAY,KAAM,SAAU,KAAM,MAAO,OAAQ,QAAS,OAAQ,IAAK,QAAS,KAChF,SAAU,OAAQ,SAAU,SAAU,MAAO,SAAU,SAAU,YAAa,OAAQ,OACtF,WAAY,MAAO,WAAY,OAAQ,OAAQ,MAAO,KAAM,OAAQ,MACtE,CAAC,EAEKM,EAAW,IAAI,IAAI,CACvB,SAAU,MAAO,OAAQ,OAAQ,YAAa,WAAY,UAAW,QAAS,WAC9E,WAAY,WAAY,OAAQ,SAAU,MAAO,SAAU,SAAU,SAAU,WAC/E,aAAc,WAAY,WAAY,eAAgB,aACxD,CAAC,EACKI,EAAkB,IAAI,IAAI,CAAC,OAAQ,OAAQ,OAAQ,SAAU,SAAU,IAAI,CAAC,EAmG5EuB,EAAiC,CACrC,CAAE,GAAI,QAAS,GAAI,kDAAmD,OAAQ,qCAAsC,EACpH,CAAE,GAAI,QAAS,GAAI,6DAA8D,OAAQ,iDAAkD,EAC3I,CAAE,GAAI,SAAU,GAAI,yHAA0H,OAAQ,wCAAyC,EAC/L,CAAE,GAAI,SAAU,GAAI,qCAAsC,OAAQ,oCAAqC,EACvG,CAAE,GAAI,WAAY,GAAI,iIAAkI,OAAQ,wEAAyE,CAC3O,EAGMG,EAAqC,CACzC,CAAE,GAAI,QAAS,GAAI,0CAA2C,OAAQ,gCAAiC,EACvG,CAAE,GAAI,SAAU,GAAI,mFAAoF,OAAQ,iCAAkC,EAClJ,CAAE,GAAI,SAAU,GAAI,yIAA0I,OAAQ,iCAAkC,EACxM,CAAE,GAAI,SAAU,GAAI,0JAA2J,OAAQ,iCAAkC,EACzN,CAAE,GAAI,SAAU,GAAI,+QAAgR,OAAQ,kCAAmC,EAC/U,CAAE,GAAI,SAAU,GAAI,iKAAkK,OAAQ,kCAAmC,EACjO,CAAE,GAAI,SAAU,GAAI,uKAAwK,OAAQ,gDAAiD,EACrP,CAAE,GAAI,OAAQ,GAAI,6GAA8G,OAAQ,qDAAsD,EAC9L,CAAE,GAAI,WAAY,GAAI,wFAAyF,OAAQ,wFAAyF,CAClN,EAEMN,EAAmB,oGAEnBH,EAAkB","names":["z","isRestricted","level","toolWords","name","w","mcpActionWords","shellView","command","text","m","quote","_d","body","out","i","c","end","j","inner","shellSegments","view","s","commandWords","words","SHELL_KEYWORDS_SKIP","SHELL_KEYWORDS_STRIP","gitSubcommand","args","reportShellWord","cmd","base","REPORT_SHELL_COMMANDS","has","re","a","sub","rest","GIT_READ","group","action","method","GH_READ_ACTIONS","hasWritingRedirect","cleaned","reportBash","block","seg","why","ALLOW","reportTool","input","WRITE_TOOLS","REPORT_SAFE_TOOLS","mutating","MUTATING_VERBS","READ_VERBS","proposeGitPush","positional","PUSH_VALUE_OPTS","refspecs","ref","PROTECTED_BRANCH","proposeBash","rule","PROPOSE_RAW_RULES","line","baseName","PROPOSE_COMMAND_RULES","hit","proposeTool","DESTRUCTIVE_VERBS","isDelegation","evaluateAutonomy","autonomyBrief","autonomyLevelSchema","init_autonomy","__esmMin","id","reason"]}

package/dist/{chunk-E63BQ6VJ.js → chunk-3YTFEGKY.js}

@@ -1,4 +1,4 @@
-import{q as _,r as W}from"./chunk-2AXFYDWF.js";import{b as Y,c as I,d as O}from"./chunk-AQASR6KR.js";import{b as F}from"./chunk-DP7RTNDM.js";import{a as E}from"./chunk-6PTO6DWW.js";import{b as L}from"./chunk-CECHWYJ2.js";import{createHash as ee}from"crypto";import{existsSync as H,readdirSync as te,readFileSync as re,writeFileSync as ne}from"fs";import{resolve as P}from"path";function be(n,r,s,t,o,i,c=""){return Z(r,s,t,o,i,c)}function Z(n,r,s,t,o,i=""){let c=r?`
+import{q as _,r as W}from"./chunk-2AXFYDWF.js";import{b as Y,c as I,d as O}from"./chunk-AQASR6KR.js";import{b as F}from"./chunk-DP7RTNDM.js";import{a as E}from"./chunk-AXMFBUCJ.js";import{b as L}from"./chunk-CECHWYJ2.js";import{createHash as ee}from"crypto";import{existsSync as H,readdirSync as te,readFileSync as re,writeFileSync as ne}from"fs";import{resolve as P}from"path";function be(n,r,s,t,o,i,c=""){return Z(r,s,t,o,i,c)}function Z(n,r,s,t,o,i=""){let c=r?`
 ## Worldview
 
 ${r}
@@ -240,4 +240,4 @@ ${g}`}var x="memory-promoter",oe=["project","reference","feedback"],K="_memory-p
 Re-emit the FULL corrected JSON object \u2014 same structure, fixed issues, valid JSON only.`:n,y=await t(`${a}/task`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({agent:r.viaAgent,message:h,freshSession:s===null,context:{channel:"api",chatId:r.chatId??"memory-promote"}}),signal:i.signal});if(!y.ok){let f=await y.text().catch(()=>"");throw new Error(`agent /task ${y.status}: ${f.slice(0,500)}`)}let w=await y.json();if(w.error)throw new Error(`agent reported error: ${w.error}`);let b=String(w.content??"").trim();if(!b)throw new Error("agent returned empty content");return b}if(!r.model)throw new Error("callPromotionLlm: viaAgent or model is required");let p=process.env.ANTHROPIC_API_KEY;if(!p)throw new Error("ANTHROPIC_API_KEY not set; use --via <agentId> instead");let u=[{role:"user",content:n}];s&&(u.push({role:"assistant",content:"(previous attempt; will retry with corrections)"}),u.push({role:"user",content:`Your previous response failed validation: ${s}
 Re-emit the FULL corrected JSON object.`}));let g=await t(me,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":p,"anthropic-version":ge},body:JSON.stringify({model:r.model,max_tokens:8e3,messages:u}),signal:i.signal});if(!g.ok){let a=await g.text().catch(()=>"");throw new Error(`anthropic API ${g.status}: ${a.slice(0,500)}`)}let l=await g.json(),e=(Array.isArray(l.content)?l.content:[]).filter(a=>a?.type==="text").map(a=>a.text).join(`
 `).trim();if(!e)throw new Error("anthropic API returned no text content");return e}finally{clearTimeout(c)}}async function Se(n={}){let r=n.wikiDir??P(process.cwd(),".agentx","wiki"),s=n.memoryRoot??P(process.cwd(),".agentx"),t=n.log??(()=>{}),o=n.now??Date.now(),i={candidates:[],clusters:[],proposed:[],skipped:[],gaps:[],warnings:[],errors:[],dryRun:!n.commit},c=new E(r,(...m)=>t(m.map(String).join(" "))),p=c.rebuildIndex(),u=z(r),g=[...ce(s),...n.extraCandidates??[]];if(i.candidates=de(g,p,u,{types:n.types,sinceMs:n.sinceMs,agentFilter:n.agentFilter,now:o,max:n.max}),i.candidates.length===0)return t("no unpromoted memories in window"),i;if(i.clusters=le(i.candidates),i.dryRun)return i;let l=p.articles.map(m=>({title:m.title,path:m.path,type:m.type})),d=c.getWorldview()??"",e=n.budgetTokens??ue,a=i.clusters,h=D(x,a,l,d);for(;R(h)>e&&a.length>1;)a=a.slice(0,-1),h=D(x,a,l,d);if(R(h)>e)return i.errors.push(`judge prompt (~${R(h)} tokens) exceeds the ${e}-token budget even with one cluster`),i;a.length<i.clusters.length&&i.warnings.push(`token budget: judged ${a.length} of ${i.clusters.length} clusters; the rest wait for the next run`);let y=a.flatMap(m=>m.candidates),w=new Set(y.map(m=>m.stamp)),b=n.chatId??`memory-promote-${new Date(o).toISOString().slice(0,10)}`,f=B(await G(h,{...n,chatId:b}),w);if("error"in f&&(t(`parse failed (${f.error}) \u2014 retrying with feedback`),f=B(await G(h,{...n,chatId:b},f.error),w)),"error"in f)return i.errors.push(`LLM response unusable after retry: ${f.error}`),i;i.warnings.push(...f.warnings),i.gaps=f.gaps;let v=new Date(o).toISOString(),k=[],T=new Map(y.map(m=>[m.stamp,m]));for(let m of f.articles){let A=c.readArticle(m.path);if(A&&!c.canWrite(A.meta,x)){i.errors.push(`write denied for "${m.path}" (owned by ${A.meta.owner??"?"})`);continue}let M=fe(m.promotedFrom,T),S={id:Y(o,m.path),createdAt:v,status:"pending",article:m,evidence:M,...A?{replaces:{lastUpdated:A.meta.lastUpdated,contentHash:V(A.content)}}:{}};I(r,S),i.proposed.push({id:S.id,path:m.path,title:m.title,type:m.type,stamps:m.promotedFrom,agents:M.agents,occurrences:M.occurrences});for(let X of m.promotedFrom)k.push({stamp:X,decision:"proposed",article:m.path,proposal:S.id,at:v})}for(let m of f.skipped)k.push({stamp:m.stamp,decision:"skipped",reason:m.reason,at:v}),i.skipped.push(m);return k.length&&C(r,k),i}var ue=6e4;function R(n){return Math.ceil(n.length/4)}function V(n){return ee("sha256").update(n).digest("hex").slice(0,16)}var he=600;function ye(n){return n.startsWith("review:")?"review":n.startsWith(j)?"failure":"memory"}function fe(n,r){let s=[];for(let t of n){let o=r.get(t);o&&s.push({stamp:t,kind:ye(t),agentId:o.agentId,type:o.memory.type,name:o.memory.name,description:o.memory.description,...o.occurrences?{occurrences:o.occurrences}:{},...o.sessions?.length?{sessions:o.sessions}:{},...o.tasks?.length?{tasks:o.tasks}:{},...o.failure?{failure:o.failure}:{},...o.memory.author?{author:o.memory.author}:{},...o.memory.taskId?{taskId:o.memory.taskId}:{},updatedAt:o.memory.updatedAt,excerpt:o.memory.body.slice(0,he)})}return{agents:[...new Set(s.map(t=>t.agentId))].sort(),occurrences:Math.max(1,...s.map(t=>t.occurrences??1)),sources:s}}function Ee(n,r,s={}){let t=O(n,r);if(!t)return{ok:!1,error:`no proposal "${r}"`};if(t.status!=="pending")return{ok:!1,error:`proposal "${r}" is already ${t.status}`};let o=s.log??(()=>{}),i=new E(n,(...a)=>o(a.map(String).join(" "))),{article:c}=t,p=i.readArticle(c.path);if(!s.force){if(p&&!t.replaces)return{ok:!1,error:`"${c.path}" was created after this proposal; review it, then approve with --force`};if(p&&t.replaces&&V(p.content)!==t.replaces.contentHash)return{ok:!1,error:`"${c.path}" changed since this proposal; review it, then approve with --force`}}let u=s.now??Date.now(),g=new Date(u).toISOString().slice(0,10);if(!i.writeArticle(c.path,{title:c.title,type:L(c.type)?c.type:void 0,related:c.related,tags:c.tags,owner:x,access:"public",created:p?.meta.created??g,lastUpdated:g,sources:ae(p?.meta.sources,c.promotedFrom)},c.content,x))return{ok:!1,error:`write denied for "${c.path}" (owned by ${p?.meta.owner??"?"})`};let d=new Date(u).toISOString();C(n,c.promotedFrom.map(a=>({stamp:a,decision:"promoted",article:c.path,proposal:r,at:d}))),i.rebuildIndex();let e={...t,status:"approved",decidedBy:s.by??"operator",decidedAt:d};return I(n,e),{ok:!0,proposal:e}}function Oe(n,r,s={}){let t=O(n,r);if(!t)return{ok:!1,error:`no proposal "${r}"`};if(t.status!=="pending")return{ok:!1,error:`proposal "${r}" is already ${t.status}`};let o=new Date(s.now??Date.now()).toISOString();C(n,t.article.promotedFrom.map(c=>({stamp:c,decision:"rejected",article:t.article.path,proposal:r,reason:s.reason,at:o})));let i={...t,status:"rejected",decidedBy:s.by??"operator",decidedAt:o,...s.reason?{reason:s.reason}:{}};return I(n,i),{ok:!0,proposal:i}}export{be as a,x as b,oe as c,K as d,q as e,ie as f,$ as g,ae as h,ce as i,z as j,C as k,le as l,B as m,de as n,G as o,Se as p,R as q,ye as r,fe as s,Ee as t,Oe as u};
-//# sourceMappingURL=chunk-E63BQ6VJ.js.map
+//# sourceMappingURL=chunk-3YTFEGKY.js.map

package/dist/{chunk-C4YY6746.js → chunk-44GK7FM6.js}

@@ -1,4 +1,4 @@
-import{a as tt,b as nt,c as rt,d as S,e as A,f as v}from"./chunk-72SZI2UW.js";import{a as Te,b as gt}from"./chunk-FX3D7YON.js";import{a as ne,b as We}from"./chunk-FCPTN6NF.js";import{o as we,p as He}from"./chunk-5MUJZODV.js";import{da as Ze,ea as et}from"./chunk-VQN36LEB.js";import{a as ot,b as st,c as it,d as at,e as ct,f as ut,g as lt,h as dt,i as pt,j as mt,k as bt,l as ft}from"./chunk-RGDKHYY2.js";import{a as E,b as Ke,c as he}from"./chunk-QIJLFPWE.js";function R(e,t){$.set(e,t),X.delete(e)}function D(e){let t=X.get(e);if(t)return t;let r=$.get(e);if(!r){let o=Ee();throw new Error(`unknown decision backend "${e}"`+(o.length>0?` \u2014 registered: ${o.join(", ")}`:" \u2014 none registered"))}let n=r();return X.set(e,n),n}function Ee(){return[...$.keys()].sort()}function yt(){$.clear(),X.clear()}var $,X,C=E(()=>{"use strict";$=new Map,X=new Map});import ht from"better-sqlite3";import{createHash as wt}from"crypto";import{mkdirSync as Tt}from"fs";import{dirname as Et,resolve as kt}from"path";function Q(e){if(e.type==="noul"){let r=e.noul,n={yes:r,no:1-r},o=r>=.5?"yes":"no",s=Math.abs(r-.5)*2;return{predicted:o,confidence:s,probabilities:n,topLabel:o,topProb:Math.max(r,1-r),expectedScore:null,pMax:Math.max(r,1-r),negEntropy:s}}if(e.type==="choice")return{predicted:e.choice,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:e.choice,topProb:e.probabilities[e.choice]??0,expectedScore:null,pMax:e.pMax,negEntropy:e.negEntropy};let t=String(Math.round(e.score));return{predicted:t,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:t,topProb:e.probabilities[t]??0,expectedScore:e.score,pMax:e.pMax,negEntropy:e.negEntropy}}function xt(e){if(typeof e!="string"||e.length===0)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function St(e){e.exec("CREATE TABLE IF NOT EXISTS schema_version (v INTEGER PRIMARY KEY);");let t=e.prepare("SELECT MAX(v) AS v FROM schema_version").get().v??0;t<1&&_t(e),t<2&&Rt(e),t<3&&At(e)}function At(e){e.exec(`
+import{a as tt,b as nt,c as rt,d as S,e as A,f as v}from"./chunk-72SZI2UW.js";import{a as Te,b as gt}from"./chunk-FX3D7YON.js";import{a as ne,b as We}from"./chunk-FCPTN6NF.js";import{o as we,p as He}from"./chunk-5MUJZODV.js";import{ca as Ze,da as et}from"./chunk-4LLSTP5G.js";import{a as ot,b as st,c as it,d as at,e as ct,f as ut,g as lt,h as dt,i as pt,j as mt,k as bt,l as ft}from"./chunk-RGDKHYY2.js";import{a as E,b as Ke,c as he}from"./chunk-QIJLFPWE.js";function R(e,t){$.set(e,t),X.delete(e)}function D(e){let t=X.get(e);if(t)return t;let r=$.get(e);if(!r){let o=Ee();throw new Error(`unknown decision backend "${e}"`+(o.length>0?` \u2014 registered: ${o.join(", ")}`:" \u2014 none registered"))}let n=r();return X.set(e,n),n}function Ee(){return[...$.keys()].sort()}function yt(){$.clear(),X.clear()}var $,X,C=E(()=>{"use strict";$=new Map,X=new Map});import ht from"better-sqlite3";import{createHash as wt}from"crypto";import{mkdirSync as Tt}from"fs";import{dirname as Et,resolve as kt}from"path";function Q(e){if(e.type==="noul"){let r=e.noul,n={yes:r,no:1-r},o=r>=.5?"yes":"no",s=Math.abs(r-.5)*2;return{predicted:o,confidence:s,probabilities:n,topLabel:o,topProb:Math.max(r,1-r),expectedScore:null,pMax:Math.max(r,1-r),negEntropy:s}}if(e.type==="choice")return{predicted:e.choice,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:e.choice,topProb:e.probabilities[e.choice]??0,expectedScore:null,pMax:e.pMax,negEntropy:e.negEntropy};let t=String(Math.round(e.score));return{predicted:t,confidence:e.confidence,probabilities:{...e.probabilities},topLabel:t,topProb:e.probabilities[t]??0,expectedScore:e.score,pMax:e.pMax,negEntropy:e.negEntropy}}function xt(e){if(typeof e!="string"||e.length===0)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"&&!Array.isArray(t)?t:{}}catch{return{}}}function St(e){e.exec("CREATE TABLE IF NOT EXISTS schema_version (v INTEGER PRIMARY KEY);");let t=e.prepare("SELECT MAX(v) AS v FROM schema_version").get().v??0;t<1&&_t(e),t<2&&Rt(e),t<3&&At(e)}function At(e){e.exec(`
     ALTER TABLE decision_calls ADD COLUMN features_json TEXT;
     INSERT INTO schema_version (v) VALUES (3);
   `)}function Rt(e){e.exec(`
@@ -111,4 +111,4 @@ import{a as tt,b as nt,c as rt,d as S,e as A,f as v}from"./chunk-72SZI2UW.js";im
 `)}if(!m)throw new Error(`local decision backend could not get a valid answer after ${f+1} attempt(s): ${h}`);let M={},L=!1;for(let[k,q]of Object.entries(s.questions)){let x=_(q,m[k],{normalize:e.normalizeProbabilities??!0});M[k]=x.answer,x.repaired&&(L=!0)}return{model:a,answers:M,usage:y,meta:{backend:"local",structureMode:c,answerMode:"probabilities",repaired:L,retries:f,stateTruncated:l.truncated,latencyMs:Date.now()-i}}}finally{b()}}}}async function Vt(e,t,r,n,o){if(!e.generateRaw)throw new Error(`provider "${e.name}" has no generateRaw(); use structureMode "text"`);let s=[{role:"user",content:r},...n?[{role:"user",content:n}]:[]],i=await e.generateRaw(s,J,[{name:U,description:"Report a probability distribution for every question.",input_schema:se(t)}],{...o,toolChoice:{type:"tool",name:U}}),a=i.content.find(c=>c.type==="tool_use"&&c.name===U),u=a&&a.type==="tool_use"?a.input:null;return{answers:Be(u),usage:{inputTokens:i.usage.input_tokens,outputTokens:i.usage.output_tokens}}}async function zt(e,t,r,n,o){let s=[r,ae(t)].join(`
 `),i=[{role:"system",content:J},{role:"user",content:s},...n?[{role:"user",content:n}]:[]],a=await e.generate(i,o);return{answers:Be(Te(a.content??"")),usage:{inputTokens:0,outputTokens:a.tokensUsed??0}}}function Be(e){if(e&&typeof e=="object"&&!Array.isArray(e)){let t=e;if(t.answers&&typeof t.answers=="object")return t.answers}return e}function Jt(e,t){return e!=="auto"?e:t.generateRaw&&me[t.name]?.structuredOutput?"tool":"text"}function Gt(e,t){let r=new AbortController,n=setTimeout(()=>r.abort(new Error(`decision timed out after ${t}ms`)),t),o=()=>r.abort(e?.reason);return e&&(e.aborted?o():e.addEventListener("abort",o,{once:!0})),{signal:r.signal,dispose:()=>{clearTimeout(n),e?.removeEventListener("abort",o)}}}var Bt,qt,Xt,Ue,$t,be=E(()=>{"use strict";He();Fe();gt();j();Y();v();z();Bt="claude-code",qt="claude-haiku-4-5-20251001",Xt=24e3,Ue=2e3,$t=3e4});import{readFileSync as Yt}from"fs";import{homedir as Kt}from"os";import{join as Ht}from"path";function N(e={}){let t=(e.baseUrl??Wt).replace(/\/+$/,""),r=e.path??"/classifier",n=e.name??"simple-jev",o=e.maxStateChars??en,s=e.maxChoiceOptions??tn,i={probabilitySource:e.probabilitySource??"logits",calibratedProbabilities:!1,maxChoiceOptions:s,maxStateChars:o,parallelQuestions:!0,images:!1};return{name:n,capabilities:i,async decide(a){A(a.questions),sn(a.questions,s);let u=Date.now(),c=a.model??e.model;if(!c)throw new Error("simple-jev backend needs a model id");let l=G(a.state,o),p=e.fetchImpl??fetch,{signal:g,dispose:d}=an(a.abortSignal,a.timeoutMs??e.timeoutMs??Zt);try{let b={"Content-Type":"application/json"},y=on(e.apiKeyEnv,e.apiKeyFile);y&&(b.Authorization=`Bearer ${y}`);let w=await qe(p(`${t}${r}`,{method:"POST",headers:b,body:JSON.stringify({model:c,state:l.text,questions:rn(a.questions)}),signal:g}),g);if(!w.ok){let k=await w.text().catch(()=>"");throw new Error(`${n} ${w.status}: ${k.slice(0,300)}`)}let f=await qe(w.json(),g),m=P(a.questions).safeParse(f.answers);if(!m.success)throw new Error(`${n} returned a response that does not match the requested questions (contract drift, not a model slip \u2014 retrying will not help):
 ${F(m.error)}`);let h=m.data,M={},L=!1;for(let[k,q]of Object.entries(a.questions)){let x=_(q,h[k]);M[k]=x.answer,x.repaired&&(L=!0)}return{model:f.model??c,answers:M,usage:{inputTokens:f.usage?.input_tokens??0,outputTokens:f.usage?.output_tokens??0},meta:{backend:n,structureMode:i.probabilitySource==="native"?"native":"logprobs",answerMode:"probabilities",repaired:L,retries:0,stateTruncated:l.truncated,latencyMs:Date.now()-u}}}finally{d()}}}}function rn(e){let t={};for(let[r,n]of Object.entries(e))t[r]=n.instructions?n:{...n,instructions:nn[n.type]};return t}function on(e,t){let r=e?process.env[e]:void 0;if(r)return r;if(!t)return;let n=t.startsWith("~/")?Ht(Kt(),t.slice(2)):t;if(!Z.has(n))try{let o=Yt(n,"utf-8").trim();Z.set(n,o.length>0?o:null)}catch{Z.set(n,null)}return Z.get(n)??void 0}function sn(e,t){for(let[r,n]of Object.entries(e))if(n.type==="choice"){let o=Object.keys(n.criteria).length;if(o>t)throw new Error(`question "${r}": accepts at most ${t} choice options, got ${o}`)}else if(n.type==="score"&&n.criteria.length>t)throw new Error(`question "${r}": accepts at most ${t} score levels, got ${n.criteria.length}`)}function qe(e,t){return t.aborted?Promise.reject(t.reason??new Error("aborted")):new Promise((r,n)=>{let o=()=>n(t.reason??new Error("aborted"));t.addEventListener("abort",o,{once:!0}),e.then(s=>{t.removeEventListener("abort",o),r(s)},s=>{t.removeEventListener("abort",o),n(s)})})}function an(e,t){let r=new AbortController,n=setTimeout(()=>r.abort(new Error(`decision timed out after ${t}ms`)),t),o=()=>r.abort(e?.reason);return e&&(e.aborted?o():e.addEventListener("abort",o,{once:!0})),{signal:r.signal,dispose:()=>{clearTimeout(n),e?.removeEventListener("abort",o)}}}var Wt,Zt,en,tn,nn,Z,fe=E(()=>{"use strict";j();v();z();Y();Wt="http://127.0.0.1:8000/v1",Zt=3e4,en=6e3,tn=50;nn={choice:"Which option best fits?",score:"Which level best fits?",noul:"Is this true of the state?"};Z=new Map});var Xe={};Ke(Xe,{DecisionStore:()=>I,MAX_CHOICE_OPTIONS:()=>MAX_CHOICE_OPTIONS,SYSTEM_PROMPT:()=>J,TOOL_NAME:()=>U,UNCERTAINTY_HIGH:()=>Ce,UNCERTAINTY_LOW:()=>De,_resetDecisionBackendsForTesting:()=>yt,agreement:()=>ot,answerView:()=>Q,applyRecalibrator:()=>ue,applyTemperature:()=>dt,askSeat:()=>mn,band:()=>Ie,bootstrapInterval:()=>mt,brier:()=>ct,buildDesign:()=>ve,calibrationReport:()=>bt,choice:()=>nt,compareCalibrators:()=>Dt,confidenceFor:()=>re,configureDecisions:()=>un,coverageCurve:()=>lt,createLocalDecisionBackend:()=>W,createMockDecisionBackend:()=>H,createSimpleJevBackend:()=>N,decisionsRuntime:()=>dn,describeIssues:()=>F,ece:()=>it,expectedScore:()=>Ae,finalizeAnswer:()=>_,fitLogistic:()=>Ne,fitRecalibrator:()=>B,fitTemperature:()=>pt,getDecisionBackend:()=>D,getSeatMode:()=>ze,labelsOf:()=>S,listDecisionBackends:()=>Ee,logLoss:()=>ut,logit:()=>le,mce:()=>at,measureConsistency:()=>jt,normalizeDistribution:()=>xe,normalizedNegEntropy:()=>oe,noul:()=>tt,pMax:()=>Se,parseSeatMode:()=>ge,rawAnswerSchema:()=>Re,rawAnswersSchema:()=>P,recordSeatOutcome:()=>pn,registerBuiltinDecisionBackends:()=>cn,registerDecisionBackend:()=>R,reliabilityBins:()=>st,renderQuestions:()=>_e,renderShapeInstructions:()=>ae,renderState:()=>G,renderUserPrompt:()=>ie,resetDecisionsRuntime:()=>ln,score:()=>rt,seatEnvVar:()=>Ve,sigmoid:()=>de,toolInputSchema:()=>se,validateQuestions:()=>A,withUid:()=>Qe});function cn(e={},t={},r={},n={}){R("mock",()=>H()),R("local",()=>W(e)),R("simple-jev",()=>N(t)),R("jev",()=>N({name:"jev",baseUrl:"https://openrouter.ai/api/alpha",path:"/decisions",model:"jev-latest",apiKeyEnv:"OPENROUTER_API_KEY",apiKeyFile:"~/.agentx/openrouter-key.txt",probabilitySource:"native",maxChoiceOptions:255,maxStateChars:9e4,...r})),R("typesafe",()=>N({name:"typesafe",baseUrl:"https://api.typesafe.ai/v1",path:"/systemone",model:"jev-latest",apiKeyEnv:"TYPESAFE_API_KEY",apiKeyFile:"~/.agentx/typesafe-key.txt",probabilitySource:"native",maxChoiceOptions:255,maxStateChars:9e4,...n}))}var $e=E(()=>{"use strict";ke();v();j();z();C();Y();V();ft();Me();je();Je();pe();be();fe();C();pe();be();fe()});function un(e){T={...ye,...T,...e},ee=!0}function ln(){T={...ye,seats:{}},ee=!1}function bn(){if(!ee){ee=!0;try{let{loadDaemonConfig:e}=(et(),he(Ze)),t=e()?.decisions;if(!t?.enabled)return;let{registerBuiltinDecisionBackends:r}=($e(),he(Xe)),n=t.backends??{};r(n.local,n.simpleJev,n.jev,n.typesafe);let o=null;try{o=new I({path:t.dbPath})}catch{}T={enabled:!0,defaultBackend:t.defaultBackend,store:o,seats:Object.fromEntries(Object.entries(t.seats??{}).map(([s,i])=>[s,{...i,redactState:t.redactState,keepStateRows:t.keepStateRows}]))}}catch{}}}function dn(){return T}function ge(e){if(typeof e!="string")return null;let t=e.trim().toLowerCase();return fn.includes(t)?t:null}function Ve(e){return`AGENTX_DECISION_SEAT_${e.toUpperCase().replace(/[^A-Z0-9]+/g,"_")}`}function ze(e,t=process.env){bn();let r=ge(t[Ve(e)]);return r||(T.enabled?ge(T.seats[e]?.mode)??"off":"off")}function pn(e,t,r=!1){if(!(!e||!T.store))try{T.store.recordOutcome(e,t,r)}catch{}}async function mn(e,t,r,n={}){let o=ze(e);if(o==="off")return null;let s=T.seats[e]??{mode:o},i=n.backend??s.backend??T.defaultBackend,a=Date.now();try{let c=await D(i).decide({state:t,questions:r,model:n.model??s.model,abortSignal:n.signal,timeoutMs:n.timeoutMs??s.timeoutMs}),l=gn(e,o,t,r,c,n,s);return{answers:c.answers,callId:l,mode:o}}catch(u){return yn(e,o,t,r,i,n,s,a,u),hn(e,i,u),null}}function gn(e,t,r,n,o,s,i){if(!T.store)return null;try{return T.store.recordCall({seat:e,mode:t,backend:o.meta.backend,model:o.model,meta:o.meta,state:r,questions:n,answers:o.answers,usage:o.usage,incumbent:Ye(s.incumbent),links:s.links,features:s.features,keepState:!i.redactState})}catch{return null}}function yn(e,t,r,n,o,s,i,a,u){if(T.store)try{T.store.recordCall({seat:e,mode:t,backend:o,model:s.model??i.model??"unknown",meta:{structureMode:"text",answerMode:"probabilities",retries:0,stateTruncated:!1,latencyMs:Date.now()-a},state:r,questions:n,answers:{},incumbent:Ye(s.incumbent),links:s.links,features:s.features,error:String(u?.message??u).slice(0,500),keepState:!i.redactState})}catch{}}function Ye(e){if(!e)return;let t={};for(let[r,n]of Object.entries(e))n!==void 0&&(t[r]={value:n});return t}function hn(e,t,r){let n=Date.now();n-Ge<6e4||(Ge=n,console.warn(`[decisions] seat "${e}" on backend "${t}" failed: ${r?.message??r}`))}var ye,T,ee,fn,Ge,Je=E(()=>{C();V();ye={enabled:!1,defaultBackend:"local",seats:{},store:null},T={...ye},ee=!1;fn=["off","shadow","active"];Ge=0});export{D as a,Ee as b,C as c,I as d,V as e,Dt as f,Me as g,jt as h,je as i,me as j,Un as k,Fe as l,cn as m,$e as n,un as o,ln as p,dn as q,ge as r,Ve as s,ze as t,pn as u,mn as v,Je as w};
-//# sourceMappingURL=chunk-C4YY6746.js.map
+//# sourceMappingURL=chunk-44GK7FM6.js.map

package/dist/{chunk-ONGL6EKZ.js → chunk-44UYVCS4.js}

@@ -1,7 +1,7 @@
-import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{ba as S,ea as L}from"./chunk-VQN36LEB.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
+import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{aa as S,da as L}from"./chunk-4LLSTP5G.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
 `):se(n),process.exit(e.errors>0?1:0)});async function G(t,n,e=P){if(!O(n.notifications?.local).banner)return;let i=await e();i.state!=="unsupported"&&t.push({severity:i.state==="ready"?"ok":"warn",group:"Notifications",title:i.message,detail:i.path,fix:i.fix})}function V(t,n,e=process.platform,i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}}){let s=n.reminders;if(!s?.enabled)return;if(e!=="darwin"){t.push({severity:"warn",group:"Reminders",title:"Reminders hand-back unavailable on this machine",detail:"reminders.enabled is set, but Apple Reminders exists only on macOS. The daemon starts without it.",fix:"Set reminders.enabled to false here, or enable it on the Mac node instead."});return}let r=s.command||"remindctl",a=r.includes("/")?i(r)?r:null:x(r,process.env.PATH||"",i);t.push(a?{severity:"ok",group:"Reminders",title:`Watching ${(s.lists||[]).join(", ")} for due reminders`,detail:a}:{severity:"fail",group:"Reminders",title:`${r} not found`,detail:"The daemon reads Apple Reminders through remindctl.",fix:"brew install steipete/tap/remindctl, or set reminders.command to its full path."})}async function Z(t){let n=R(process.versions.node);t.push({severity:n?"ok":"fail",group:"Environment",title:`Node.js ${process.versions.node}`,detail:n?void 0:"AgentX requires Node 22.19 or newer, up to Node 26.",fix:n?void 0:"Install Node 22 (nvm install 22 && nvm use 22)"});let e=l=>{try{return h(process.platform==="win32"?"where":"which",[l],{encoding:"utf-8"}).trim().split(`
 `)[0]}catch{return null}},i=e("npm");t.push({severity:i?"ok":"fail",group:"Environment",title:i?"npm on PATH":"npm not found",detail:i||void 0});let s=e("claude");if(s){let l;try{l=h("claude",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`claude CLI ${l||"installed"}`,detail:s})}else t.push({severity:"warn",group:"Environment",title:"claude CLI not on PATH",detail:"Only required for agents on the claude-code tier.",fix:"See https://docs.anthropic.com/en/docs/claude-code"});let r=e("codex");if(r){let l;try{l=h("codex",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`codex CLI ${l||"installed"}`,detail:r})}else t.push({severity:"warn",group:"Environment",title:"codex CLI not on PATH",detail:"Only required for agents on the codex-cli tier.",fix:"Install with `npm i -g @openai/codex`."});let a=e("opencode");if(a){let l;try{l=h("opencode",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`opencode CLI ${l||"installed"}`,detail:a})}else t.push({severity:"warn",group:"Environment",title:"opencode CLI not on PATH",detail:"Only required for agents on the opencode tier.",fix:"Install from https://opencode.ai/docs/."});try{F(import.meta.url)("better-sqlite3"),t.push({severity:"ok",group:"Environment",title:`better-sqlite3 loads for Node ${process.version}`,detail:`NODE_MODULE_VERSION ${process.versions.modules}`})}catch(l){t.push({severity:"fail",group:"Environment",title:"better-sqlite3 native binding does not load",detail:l?.message??String(l),fix:`Run "pnpm rebuild better-sqlite3" with the same Node used by the daemon (${process.version}, modules ${process.versions.modules}).`})}}function U(t){if(process.platform!=="darwin")return;let n=E(B(),"Library/LaunchAgents"),e=[];try{e=$(n).filter(s=>/agentx\.voice.*\.plist$/.test(s))}catch{return}let i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}};for(let s of e){let r=j(b(E(n,s),"utf-8")),a=x("ffmpeg",r,i);t.push(a?{severity:"ok",group:"Desktop",title:"ffmpeg reachable by the desktop app",detail:`${a} (${s})`}:{severity:"warn",group:"Desktop",title:"ffmpeg not reachable by the desktop app",detail:`Local Whisper transcription fails without it. ${s} sets PATH to ${r}.`,fix:"Install ffmpeg (brew install ffmpeg), then rerun agentx desktop install."})}}function K(t){let n=m(process.cwd(),"agentx.json");if(!y(n))return t.push({severity:"fail",group:"Config",title:"agentx.json not found",detail:`Looked in ${n}`,fix:"Run `agentx setup` to create one via the web wizard."}),null;let e;try{e=JSON.parse(b(n,"utf-8"))}catch(a){return t.push({severity:"fail",group:"Config",title:"agentx.json is not valid JSON",detail:a.message}),null}try{S(n),t.push({severity:"ok",group:"Config",title:`agentx.json valid (${Object.keys(e.agents||{}).length} agents, ${Object.keys(e.crons||{}).length} schedules)`})}catch(a){t.push({severity:"fail",group:"Config",title:"agentx.json failed schema validation",detail:a.message,fix:"Open /admin \u2192 Advanced tab to edit and re-save."})}let i=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="claude-code");i.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["claude"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${i.length} agent(s) use claude-code tier but claude CLI is missing`,detail:i.map(([l])=>l).join(", "),fix:"Install Claude Code (https://docs.anthropic.com/en/docs/claude-code) or switch these agents to tier=sdk."}));let s=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="codex-cli");s.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["codex"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${s.length} agent(s) use codex-cli tier but codex CLI is missing`,detail:s.map(([l])=>l).join(", "),fix:"Install Codex CLI with `npm i -g @openai/codex` or switch these agents to tier=claude-code."}));let r=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="opencode");return r.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["opencode"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${r.length} agent(s) use opencode tier but OpenCode CLI is missing`,detail:r.map(([l])=>l).join(", "),fix:"Install OpenCode from https://opencode.ai/docs/ or switch these agents to another tier."})),e}function Q(t,n){let e=new Set;if(C(n,e),e.size===0){t.push({severity:"ok",group:"Secrets",title:"No ${VAR} references in agentx.json"});return}let i=m(process.cwd(),".env"),s={};if(y(i))for(let l of b(i,"utf-8").split(/\r?\n/)){let u=l.match(/^\s*([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i);u&&(s[u[1]]=u[2])}let r=[],a=[];for(let l of e){let u=process.env[l]??s[l];u===void 0?r.push(l):(!u.trim()||/^["']?\s*["']?$/.test(u))&&a.push(l)}r.length===0&&a.length===0?t.push({severity:"ok",group:"Secrets",title:`${e.size} env reference(s) resolved`}):(r.length>0&&t.push({severity:"fail",group:"Secrets",title:`${r.length} env var(s) referenced in agentx.json but missing`,detail:r.join(", "),fix:`Add to .env \u2014 e.g. ${r[0]}=<value>`}),a.length>0&&t.push({severity:"warn",group:"Secrets",title:`${a.length} env var(s) set but empty`,detail:a.join(", ")}))}function C(t,n){if(typeof t=="string")for(let e of t.matchAll(/\$\{([A-Z_][A-Z0-9_]*)\}/g))n.add(e[1]);else if(Array.isArray(t))for(let e of t)C(e,n);else if(t&&typeof t=="object")for(let e of Object.values(t))C(e,n)}function Y(t,n){let e=[];for(let[i,s]of Object.entries(n.agents||{})){if(!s.workspace)continue;let r=s.workspace.startsWith("/")?s.workspace:m(process.cwd(),s.workspace);try{X(r).isDirectory()||e.push(`${i}: ${r} (exists but not a directory)`)}catch{e.push(`${i}: ${r}`)}}e.length===0?t.push({severity:"ok",group:"Workspaces",title:"All agent workspace folders exist"}):t.push({severity:"warn",group:"Workspaces",title:`${e.length} agent workspace(s) missing`,detail:e.join(`
     `),fix:"The daemon will create missing folders on first task, but you won't see CLAUDE.md / skills until you populate them."})}function ee(t,n){let e=/\$\{[A-Za-z_][A-Za-z0-9_]*\}/g,i=[];for(let[s,r]of Object.entries(n.agents||{})){if(!r.workspace)continue;let a=r.workspace.startsWith("/")?r.workspace:m(process.cwd(),r.workspace);for(let l of["settings.json","settings.local.json"]){let u=m(a,".claude",l);if(!y(u))continue;let w;try{w=JSON.parse(b(u,"utf-8"))}catch(d){i.push({severity:"fail",agent:s,msg:`${l}: JSON parse error \u2014 ${d.message}`});continue}let k=w.env||{};for(let[d,p]of Object.entries(k)){if(typeof p!="string")continue;let g=p.match(e);g&&i.push({severity:"fail",agent:s,msg:`${l} env.${d} contains unexpanded ${[...new Set(g)].join(",")} \u2014 Claude Code does NOT expand \${VAR} in settings.json (use a fully-literal value)`})}let o=k.PATH;if(typeof o=="string"){let d=o.split(":").filter(Boolean);d.includes("/usr/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /usr/bin \u2014 cat/head/sh/which will fail`}),d.includes("/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /bin \u2014 ls/cp/mv will fail`})}let c=w.permissions;if(c&&typeof c=="object"&&"allow"in c){let d=c.allow,p=c.deny;Array.isArray(d)&&d.length===0&&Array.isArray(p)&&p.length>0&&i.push({severity:"warn",agent:s,msg:`${l} permissions.allow is explicitly [] with ${p.length} deny rules \u2014 agent may be locked out (omit the key to use defaults instead)`})}}}if(i.length===0){t.push({severity:"ok",group:"Workspace settings",title:`All ${Object.keys(n.agents||{}).length} agent .claude/settings.json files clean`});return}for(let s of i)t.push({severity:s.severity,group:"Workspace settings",title:`${s.agent}: ${s.msg}`,fix:s.severity==="fail"?"Edit .claude/settings.json \u2014 replace ${VAR} with the literal value or omit the key to inherit.":"Either remove the empty allow list or populate it."})}function te(t,n){let e=n.webhooks??[],i=[],s=m(process.cwd(),n.workflows?.dir||".agentx/workflows"),r=new Set;try{if(y(s))for(let o of $(s))o.endsWith(".json")&&!o.startsWith("_")&&!o.endsWith(".disabled.json")&&r.add(o.replace(/\.json$/,""))}catch{}let a=new Set(["github","gitlab"]);for(let o of e){if(!o.enabled||!a.has(o.source))continue;!(o.triggers&&Object.keys(o.triggers).length>0)&&!o.defaultWorkflow&&i.push({severity:"warn",title:`webhook "${o.id}" (${o.source} -> ${o.agentId}) has no triggers map; every event-type collapses to the bound agent`,fix:'Add a triggers map: { "issues.opened": "wf-id", "pull_request.synchronize": "wf-id" } \u2014 or set defaultWorkflow.'})}for(let o of e)if(!(!o.enabled||!o.triggers)){for(let[c,d]of Object.entries(o.triggers))r.size>0&&!r.has(d)&&i.push({severity:"fail",title:`webhook "${o.id}".triggers["${c}"] -> "${d}" \u2014 no such workflow under ${n.workflows?.dir||".agentx/workflows"}`,fix:"Create the workflow file or fix the id in agentx.json"});o.defaultWorkflow&&r.size>0&&!r.has(o.defaultWorkflow)&&i.push({severity:"fail",title:`webhook "${o.id}".defaultWorkflow -> "${o.defaultWorkflow}" \u2014 no such workflow`,fix:"Create the workflow file or fix the id in agentx.json"})}try{if(y(s)){for(let o of $(s))if(!(!o.endsWith(".json")||o.startsWith("_")||o.endsWith(".disabled.json")))try{let c=JSON.parse(b(m(s,o),"utf-8"));c?.status==="active"&&c?.state==="quarantined"&&i.push({severity:"warn",title:`workflow "${c.id??o}" is status=active but state=quarantined \u2014 it looks live but will never dispatch`,fix:'Resolve the conflict the detector flagged, then set state back to "active" (or set status to "review" while parked).'})}catch{}}}catch{}let l=new Set((n.mesh?.peers??[]).map(o=>o.name));for(let o of e)!o.enabled||!o.node||l.has(o.node)||i.push({severity:"fail",title:`webhook "${o.id}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or remove the node field on the webhook."});let u=new Map;for(let o of e){if(!o.enabled)continue;let c=`${o.source}:${o.agentId}`,d=u.get(c);d?i.push({severity:"warn",title:`webhook entries "${d}" and "${o.id}" both enabled for ${o.source} -> ${o.agentId}; only the first is dispatched`,fix:"Disable one entry, or merge their triggers maps into a single entry."}):u.set(c,o.id)}let w=new Set(Object.keys(n.agents??{}));for(let o of n.channels?.gitlab?.agentMappings??[])if(o?.agentId){if(o.node){l.has(o.node)||i.push({severity:"fail",title:`gitlab.agentMappings entry agentId="${o.agentId}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or drop the node field on the mapping."});continue}w.has(o.agentId)||i.push({severity:"warn",title:`gitlab.agentMappings entry agentId="${o.agentId}" \u2014 no such agent in agents.* (and no node field, so it's not a cross-mesh route)`,fix:'Add the agent to agents.*, set node:"<peer>" if the agent lives remotely, or remove the mapping.'})}for(let[o,c]of Object.entries(n.channels?.telegram?.accounts??{}))c.agentBinding?w.has(c.agentBinding)||i.push({severity:"fail",title:`telegram account "${o}".agentBinding -> "${c.agentBinding}" \u2014 no such agent in agents.*`,fix:"Fix the agentBinding or define the agent in agents.*."}):i.push({severity:"fail",title:`telegram account "${o}" has no agentBinding; every DM to this bot will drop`,fix:"Set agentBinding to a valid agent id."});let k=new Set(["telegram-bot","whatsapp","slack-bot","discord-bot","gitlab-user","github-user","gmail","hotmail","smtp","hubspot","salesforce","pipedrive","odoo","trello","linear","asana","jira","notion","stripe","sentry","vercel","twilio","custom"]);for(let[o,c]of Object.entries(n.agents??{})){let d=c.integrations??[];if(!d.length)continue;let p=new Set;for(let g of d){let A=`${g.kind}::${g.label}`;p.has(A)&&i.push({severity:"warn",title:`agents.${o}.integrations: duplicate (${g.kind}, ${g.label})`,fix:"Remove the duplicate or rename one. (kind, label) must be unique per agent."}),p.add(A),k.has(g.kind)||i.push({severity:"warn",title:`agents.${o}.integrations: unknown kind "${g.kind}" on integration "${g.label}"`,fix:'Use a canonical kind from INTEGRATION_KINDS, or "custom" for ad-hoc services.'});let D=g.credentials||{};for(let[_,v]of Object.entries(D))typeof v=="string"&&/^[A-Z][A-Z0-9_]*$/.test(v)&&!process.env[v]&&i.push({severity:"warn",title:`agents.${o}.integrations[${g.kind}/${g.label}].${_} -> $${v} but env var is unset (in this shell)`,fix:`Set ${v} on the daemon environment. The daemon's process.env is what matters; this warning fires from your local shell.`})}}if(i.length===0){t.push({severity:"ok",group:"Routing",title:`${e.length} webhook(s), ${Object.keys(n.channels?.telegram?.accounts??{}).length} telegram account(s) \u2014 all routing references resolve`});return}for(let o of i)t.push({severity:o.severity,group:"Routing",title:o.title,fix:o.fix})}function ne(t){return typeof t?.canMeasure!="boolean"?null:t.canMeasure?{severity:"ok",group:"Runtime",title:"Daemon finds ffmpeg to measure phone recordings"}:{severity:"warn",group:"Runtime",title:t.allowUnmeasured?"Daemon can't find ffmpeg: phone recordings go unmeasured (voice.allowUnmeasured)":"Daemon can't find ffmpeg: phone voice input is refused",fix:"Install ffmpeg (brew install ffmpeg / sudo apt install ffmpeg), or set AGENTX_FFMPEG in the service's environment. The daemon's PATH is shorter than your shell's."}}async function ie(t,n){let e=n.dashboard?.daemonUrl?.replace(/\/+$/,"")||"http://127.0.0.1:18800",i={};n.dashboard?.token&&(i.Authorization=`Bearer ${n.dashboard.token}`);try{let s=new AbortController,r=setTimeout(()=>s.abort(),2e3),a=await fetch(e+"/health",{headers:i,signal:s.signal});if(clearTimeout(r),!a.ok){t.push({severity:"warn",group:"Runtime",title:`Daemon responded ${a.status}`,detail:e});return}let l=await a.json();t.push({severity:"ok",group:"Runtime",title:`Daemon healthy \u2014 ${l.agents?.length??0} agents live, uptime ${Math.round((l.uptime??0)/60)}m`,detail:e});let u=ne(l.voice);u&&t.push(u)}catch{t.push({severity:"warn",group:"Runtime",title:"Daemon not reachable (not running?)",detail:e,fix:"Run `agentx daemon start`. Skip this check with `agentx doctor --no-running`."})}}function oe(t,n){let e=Object.entries(n.agents||{}).filter(([,s])=>s?.codegraph===!0&&(s.tier==="claude-code"||s.tier==="codex-cli"));if(e.length===0)return;let i=null;try{i=h(process.platform==="win32"?"where":"which",["codegraph"],{encoding:"utf-8"}).trim().split(`
 `)[0]||null}catch{i=null}if(i){let s;try{s=h("codegraph",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"CodeGraph",title:`codegraph CLI ${s||"installed"}`,detail:i})}else t.push({severity:"fail",group:"CodeGraph",title:"codegraph CLI not on PATH",detail:`${e.length} agent(s) have codegraph:true but the binary isn't available.`,fix:"Install with `npm i -g @colbymchenry/codegraph`."});for(let[s,r]of e){if(!r.workspace||!y(r.workspace)){t.push({severity:"warn",group:"CodeGraph",title:`${s}: workspace missing`,detail:`Workspace path ${r.workspace} does not exist \u2014 codegraph will skip this agent.`});continue}let a=m(r.workspace,".codegraph","codegraph.db");y(a)?t.push({severity:"ok",group:"CodeGraph",title:`${s}: index present`,detail:a}):t.push({severity:"warn",group:"CodeGraph",title:`${s}: index not built yet`,detail:".codegraph/ missing \u2014 daemon will background-index this workspace on next boot.",fix:`Run \`codegraph init --index ${r.workspace}\` to build it now.`})}}function W(t){return{errors:t.filter(n=>n.severity==="fail").length,warnings:t.filter(n=>n.severity==="warn").length,ok:t.filter(n=>n.severity==="ok").length}}function se(t){console.log(),console.log(f.bold("  agentx doctor")),console.log();let n=new Map;for(let i of t)n.has(i.group)||n.set(i.group,[]),n.get(i.group).push(i);for(let[i,s]of n){console.log(f.bold("  "+i));for(let r of s){let a=r.severity==="ok"?f.green("\u2713"):r.severity==="warn"?f.yellow("!"):f.red("\u2717");console.log(`    ${a} ${r.title}`),r.detail&&console.log(f.dim("      "+r.detail.replace(/\n/g,`
       `))),r.fix&&console.log(f.dim("      \u2192 "+r.fix))}console.log()}let e=W(t);e.errors>0?console.log(f.red.bold(`  ${e.errors} error${e.errors===1?"":"s"}`)+(e.warnings?f.yellow(`, ${e.warnings} warning${e.warnings===1?"":"s"}`):"")+`. Fix the error${e.errors===1?"":"s"} and rerun.`):e.warnings>0?console.log(f.yellow.bold(`  ${e.warnings} warning${e.warnings===1?"":"s"}.`)+f.dim(" Review but not blocking.")):console.log(f.green.bold(`  All checks passed (${e.ok}).`)),console.log()}export{P as a,J as b,ke as c,G as d,V as e,ne as f};
-//# sourceMappingURL=chunk-ONGL6EKZ.js.map
+//# sourceMappingURL=chunk-44UYVCS4.js.map

package/dist/chunk-4L244AW4.js

@@ -0,0 +1,3 @@
+import{e as A,g as x,p as G}from"./chunk-XIYWXCNU.js";import{a as w,e as b}from"./chunk-2QNT5JDS.js";b();var h="guest:",P="guests",_=7,y=365,T=400;function $(e){let t=e.scopes.find(n=>n.startsWith(h));return t?t.slice(h.length):null}function R(e){return`g-${e.toString(36)}-${Math.random().toString(36).slice(2,6)}`}var l=e=>(Array.isArray(e)?e:typeof e=="string"?e.split(","):[]).map(t=>String(t).trim()).filter(Boolean).slice(0,50);function Y(e,t){let n=(e.now??Date.now)(),r=String(t.name??"").trim().slice(0,120),s=String(t.guest??"").trim().slice(0,80);if(!r)return{ok:!1,error:'name is required: what you call this grant, e.g. "Support session for company X"'};if(!s)return{ok:!1,error:"guest is required: the other organisation's name"};if(!t.agentId||!e.hasAgent(t.agentId))return{ok:!1,error:`agent must be an agent on this node, got "${t.agentId??""}"`};let a=w.safeParse(t.level??"propose");if(!a.success)return{ok:!1,error:"level must be report, propose or act"};let o=t.days===void 0?_:Number(t.days);if(!Number.isFinite(o)||o<1||o>y)return{ok:!1,error:`days must be between 1 and ${y}`};let d=R(n),{token:u,record:g}=e.tokens.create({name:`guest ${s} (${r})`,scopes:[`${h}${d}`],expiresInDays:Math.ceil(o)}),{code:i,expiresAt:p}=e.codes.create({token:u,tokenId:g.id,name:d}),c={id:d,name:r,guest:s,agentId:t.agentId,folders:l(t.folders),skills:l(t.skills),commands:l(t.commands),level:a.data,state:"pending",tokenId:g.id,createdAt:new Date(n).toISOString(),expiresAt:new Date(n+o*864e5).toISOString(),usage:{turns:0,tokens:0}};return e.guests.add(c),e.guests.log({grant:d,event:"invited",detail:`${s}: ${r}`}),{ok:!0,code:i,codeExpiresAt:p,grant:c}}var J="That code didn't work. Ask the host for a new one.";async function q(e,t,n){let r=Date.now(),s=n.now??Date.now,a=n.log??(f=>console.log(f)),o=n.limiter.retryAfter(t);if(o>0)return a(`[guests] join refused from ${t}: locked out for ${o}s more`),{status:429,body:{error:"too many attempts",retryAfter:o},retryAfter:o};let d=n.codes.redeem(e.code),u=d?n.tokens.verify(d.token):null,g=u?$(u):null,i=g?n.guests.get(g):null;if(await L(r,n.minMs??T),!d||!u||!i||i.tokenId!==u.id||i.state==="ended")return n.limiter.fail(t),a(`[guests] join failed from ${t}`),{status:401,body:{error:G}};n.limiter.succeed(t);let p=e.node&&typeof e.node=="object"?e.node:{},c=(f,S)=>typeof f=="string"&&f.trim()?f.replace(/\s+/g," ").trim().slice(0,S):void 0,m={id:c(p.id,80),name:c(p.name,80),address:t},D=i.expiresAt.slice(0,10),k=x(n.root,{title:`Guest mesh: ${i.guest} wants to join`,ask:`Let "${m.name??m.id??"a node"}" at ${t} use ${i.agentId} inside "${i.name}" (${i.level}, until ${D})?`,recommend:`Yes if ${i.guest} told you they are joining now. No if you did not expect it.`,if_silent:"discard",raised_by:P},{now:s()});return k.ok?(n.guests.update(i.id,{guestNode:m,cardId:k.card.id}),n.guests.log({grant:i.id,event:"joined",address:t,detail:m.name??m.id}),a(`[guests] ${i.id}: ${i.guest} joined from ${t}; waiting for the owner (card ${k.card.id})`),{status:200,body:{grant:i.id,name:i.name,agentId:i.agentId,level:i.level,expiresAt:i.expiresAt,state:"pending"},token:d.token}):(a(`[guests] ${i.id}: join from ${t} could not raise a card: ${k.error}`),{status:403,body:{error:"The host cannot take a join right now. Try again later."}})}var v="no grant opens this",j="waiting for the host to approve the join",O="the host paused this grant";function N(e,t){let n=e.now??Date.now,r=e.log??(o=>console.log(o));if(t.state==="ended")return t;if(Date.parse(t.expiresAt)<=n())return r(`[guests] ${t.id}: expired`),I({tokens:e.tokens,guests:e.guests,now:n},t.id,"expired")??t;if(t.state!=="pending")return t;let s=t.cardId?A(e.root,t.cardId):null,a=s?s.status==="decided"?s.verdict:s.status==="expired"?"no":null:null;if(a==="yes"){let o=e.guests.update(t.id,{state:"active",approvedAt:new Date(n()).toISOString()})??t;return e.guests.log({grant:t.id,event:"approved",detail:s?.decided_by}),r(`[guests] ${t.id}: join approved`),o}if(a==="no"){let o=s?.status==="expired"?"the host did not answer in time":"the host said no",d=I({tokens:e.tokens,guests:e.guests,now:n},t.id,o)??t;return e.guests.log({grant:t.id,event:"refused",detail:o}),r(`[guests] ${t.id}: join refused: ${o}`),d}return t}function B(e,t){let n=e?t.tokens.verify(e):null,r=n?$(n):null,s=r?t.guests.get(r):null;if(!n||!s||s.tokenId!==n.id)return{ok:!1,status:401,error:v};let a=N(t,s);return a.state==="ended"?{ok:!1,status:401,error:v}:a.state==="pending"?{ok:!1,status:403,error:j,waiting:!0}:a.state==="paused"?{ok:!1,status:403,error:O,paused:!0}:{ok:!0,grant:a}}function C(e){let t=(r,s)=>r.length?r.join(", "):`none named: do not touch ${s} unless the owner's own instructions already allow it for this work`,n=e.level==="report"?"report: read and answer only; change nothing":e.level==="propose"?"propose: you may prepare changes and open a merge request or draft; never merge, deploy or delete":"act: you may act inside the grant without asking";return[`[Guest mesh] You are working for a guest organisation, "${e.guest}", under the grant "${e.name}" that the owner of this node opened.`,`Stay inside it. Folders: ${t(e.folders,"files")}. Skills: ${t(e.skills,"skills")}. Commands: ${t(e.commands,"commands")}. Freedom: ${n}. The grant ends on ${e.expiresAt.slice(0,10)}.`,"Anything outside the grant: say it is not covered and stop. The guest sees only your answers: never reveal other chats, agents, people or files of this node."].join(`
+`)}function U(e,t){return{agentId:e.agentId,message:t,context:{channel:"guest",chatId:`guest:${e.id}`,sender:`guest:${e.guest}`},systemPromptAppend:C(e),...e.level==="act"?{}:{autonomy:e.level}}}function X(e,t){let n=e.guests.get(t);if(!n||n.state!=="active")return null;let r=e.guests.update(t,{state:"paused",pausedAt:new Date((e.now??Date.now)()).toISOString()});return e.guests.log({grant:t,event:"paused"}),r}function W(e,t){let n=e.guests.get(t);if(!n||n.state!=="paused")return null;let r=e.guests.update(t,{state:"active",pausedAt:void 0});return e.guests.log({grant:t,event:"resumed"}),r}function I(e,t,n="ended by the host"){let r=e.guests.get(t);if(!r||r.state==="ended")return null;e.tokens.revoke(r.tokenId);let s=e.guests.update(t,{state:"ended",endedAt:new Date((e.now??Date.now)()).toISOString(),endedReason:n});return e.guests.log({grant:t,event:n==="expired"?"expired":"ended",detail:n}),s}function H(e,t,n){let r=e.guests.get(t);if(!r||r.state==="ended")return{ok:!1,error:`no open grant "${t}"`};let s={};if(n.folders!==void 0&&(s.folders=l(n.folders)),n.skills!==void 0&&(s.skills=l(n.skills)),n.commands!==void 0&&(s.commands=l(n.commands)),n.level!==void 0){let u=w.safeParse(n.level);if(!u.success)return{ok:!1,error:"level must be report, propose or act"};s.level=u.data}if(n.days!==void 0){let u=Number(n.days);if(!Number.isFinite(u)||u<1||u>y)return{ok:!1,error:`days must be between 1 and ${y}`};s.expiresAt=new Date((e.now??Date.now)()+u*864e5).toISOString()}let a=e.guests.update(t,s),o=["report","propose","act"],d=s.level&&o.indexOf(s.level)>o.indexOf(r.level)||s.folders&&s.folders.length>r.folders.length||s.skills&&s.skills.length>r.skills.length||s.commands&&s.commands.length>r.commands.length||s.expiresAt&&s.expiresAt>r.expiresAt;return e.guests.log({grant:t,event:d?"widened":"narrowed",detail:Object.keys(s).join(", ")}),{ok:!0,grant:a}}function z(e){return{grant:e.id,name:e.name,agentId:e.agentId,level:e.level,folders:e.folders,skills:e.skills,commands:e.commands,state:e.state,expiresAt:e.expiresAt,usage:e.usage}}async function L(e,t){let n=e+t-Date.now();n>0&&await new Promise(r=>setTimeout(r,n))}export{h as a,P as b,_ as c,y as d,$ as e,R as f,Y as g,J as h,q as i,v as j,j as k,O as l,N as m,B as n,C as o,U as p,X as q,W as r,I as s,H as t,z as u};
+//# sourceMappingURL=chunk-4L244AW4.js.map

package/dist/chunk-4L244AW4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/guests/grants.ts"],"sourcesContent":["import { TokenStore, type TokenRecord } from \"@/daemon/token-store\"\nimport { PairCodeStore } from \"@/daemon/pair-codes\"\nimport { PAIR_CODE_FAILED, type PairAttemptLimiter } from \"@/daemon/app-pair-code\"\nimport { createCard, readCard } from \"@/approvals/cards\"\nimport { autonomyLevelSchema, type AutonomyLevel } from \"@/guard/autonomy\"\nimport { GuestStore, type GuestGrant } from \"./store\"\n\n// --- Opening part of a mesh to a guest, and keeping it in hand (#380) ---\n//\n// Two roles. The host opens a grant: one of its agents, named folders,\n// skills and commands, a freedom level and an end date. The guest is the\n// other organisation's mesh. Access goes one way per grant.\n//\n// The guest asks, the host's agent acts. The guest never gets a shell or\n// a session on the host's machine: its messages run as turns of the host\n// agent, under the host's rules and in the host's log, with the routine\n// autonomy levels of #80 enforced on the run (report: read-only;\n// propose: no merge, deploy or delete; act: inside the grant, no question\n// asked). What the grant names is put in front of the agent on every turn.\n//\n// Joining is a one-time code, like phone pairing; the join arrives as a\n// decision card in the host's Approvals inbox. No yes, no join. The host\n// can pause, widen, narrow or end the grant while it is in use.\n\nexport const GUEST_SCOPE_PREFIX = \"guest:\"\n/** Who the join card is raised by: not an agent, so no agent is told the\n *  verdict; the guest routes read it instead. */\nexport const JOIN_CARD_BY = \"guests\"\nexport const DEFAULT_GRANT_DAYS = 7\nexport const MAX_GRANT_DAYS = 365\nconst MIN_MS = 400\n\nexport interface GrantInput {\n  name: string\n  guest: string\n  agentId: string\n  folders?: string[]\n  skills?: string[]\n  commands?: string[]\n  level?: string\n  days?: number\n}\n\nexport interface GuestDeps {\n  tokens: TokenStore\n  codes: PairCodeStore\n  guests: GuestStore\n  hasAgent: (agentId: string) => boolean\n  /** The install folder: where decision cards live. */\n  root: string\n  limiter: PairAttemptLimiter\n  now?: () => number\n  minMs?: number\n  log?: (line: string) => void\n}\n\nexport function grantIdOf(rec: TokenRecord): string | null {\n  const scope = rec.scopes.find((s) => s.startsWith(GUEST_SCOPE_PREFIX))\n  return scope ? scope.slice(GUEST_SCOPE_PREFIX.length) : null\n}\n\nexport function newGrantId(now: number): string {\n  return `g-${now.toString(36)}-${Math.random().toString(36).slice(2, 6)}`\n}\n\nconst list = (v: unknown): string[] =>\n  (Array.isArray(v) ? v : typeof v === \"string\" ? v.split(\",\") : []).map((s) => String(s).trim()).filter(Boolean).slice(0, 50)\n\nexport type InviteResult =\n  | { ok: true; code: string; codeExpiresAt: string; grant: GuestGrant }\n  | { ok: false; error: string }\n\n/** Open a grant and mint the one-time code the guest joins with. */\nexport function inviteGuest(deps: Pick<GuestDeps, \"tokens\" | \"codes\" | \"guests\" | \"hasAgent\" | \"now\">, input: GrantInput): InviteResult {\n  const now = (deps.now ?? Date.now)()\n  const name = String(input.name ?? \"\").trim().slice(0, 120)\n  const guest = String(input.guest ?? \"\").trim().slice(0, 80)\n  if (!name) return { ok: false, error: \"name is required: what you call this grant, e.g. \\\"Support session for company X\\\"\" }\n  if (!guest) return { ok: false, error: \"guest is required: the other organisation's name\" }\n  if (!input.agentId || !deps.hasAgent(input.agentId)) return { ok: false, error: `agent must be an agent on this node, got \"${input.agentId ?? \"\"}\"` }\n  const level = autonomyLevelSchema.safeParse(input.level ?? \"propose\")\n  if (!level.success) return { ok: false, error: \"level must be report, propose or act\" }\n  const days = input.days === undefined ? DEFAULT_GRANT_DAYS : Number(input.days)\n  if (!Number.isFinite(days) || days < 1 || days > MAX_GRANT_DAYS) return { ok: false, error: `days must be between 1 and ${MAX_GRANT_DAYS}` }\n  const id = newGrantId(now)\n  const { token, record } = deps.tokens.create({ name: `guest ${guest} (${name})`, scopes: [`${GUEST_SCOPE_PREFIX}${id}`], expiresInDays: Math.ceil(days) })\n  const { code, expiresAt: codeExpiresAt } = deps.codes.create({ token, tokenId: record.id, name: id })\n  const grant: GuestGrant = {\n    id, name, guest, agentId: input.agentId,\n    folders: list(input.folders), skills: list(input.skills), commands: list(input.commands),\n    level: level.data, state: \"pending\", tokenId: record.id,\n    createdAt: new Date(now).toISOString(), expiresAt: new Date(now + days * 86_400_000).toISOString(),\n    usage: { turns: 0, tokens: 0 },\n  }\n  deps.guests.add(grant)\n  deps.guests.log({ grant: id, event: \"invited\", detail: `${guest}: ${name}` })\n  return { ok: true, code, codeExpiresAt, grant }\n}\n\nexport type JoinResult =\n  | { status: 200; body: { grant: string; name: string; agentId: string; level: AutonomyLevel; expiresAt: string; state: \"pending\" }; token: string }\n  | { status: 401 | 403; body: { error: string } }\n  | { status: 429; body: { error: string; retryAfter: number }; retryAfter: number }\n\nexport const JOIN_FAILED = \"That code didn't work. Ask the host for a new one.\"\n\n/** POST /mesh/guest/join: the guest trades the code for its key and asks\n *  the host to approve the join. */\nexport async function joinGuest(\n  body: Record<string, unknown>,\n  client: string,\n  deps: GuestDeps,\n): Promise<JoinResult> {\n  const started = Date.now()\n  const now = deps.now ?? Date.now\n  const log = deps.log ?? ((line: string) => console.log(line))\n  const wait = deps.limiter.retryAfter(client)\n  if (wait > 0) {\n    log(`[guests] join refused from ${client}: locked out for ${wait}s more`)\n    return { status: 429, body: { error: \"too many attempts\", retryAfter: wait }, retryAfter: wait }\n  }\n  const redeemed = deps.codes.redeem(body.code)\n  const rec = redeemed ? deps.tokens.verify(redeemed.token) : null\n  const grantId = rec ? grantIdOf(rec) : null\n  const grant = grantId ? deps.guests.get(grantId) : null\n  await padTo(started, deps.minMs ?? MIN_MS)\n  if (!redeemed || !rec || !grant || grant.tokenId !== rec.id || grant.state === \"ended\") {\n    deps.limiter.fail(client)\n    log(`[guests] join failed from ${client}`)\n    return { status: 401, body: { error: PAIR_CODE_FAILED } }\n  }\n  deps.limiter.succeed(client)\n  const node = (body.node && typeof body.node === \"object\" ? body.node : {}) as Record<string, unknown>\n  const str = (v: unknown, n: number) => (typeof v === \"string\" && v.trim() ? v.replace(/\\s+/g, \" \").trim().slice(0, n) : undefined)\n  const guestNode = { id: str(node.id, 80), name: str(node.name, 80), address: client }\n  const until = grant.expiresAt.slice(0, 10)\n  const card = createCard(deps.root, {\n    title: `Guest mesh: ${grant.guest} wants to join`,\n    ask: `Let \"${guestNode.name ?? guestNode.id ?? \"a node\"}\" at ${client} use ${grant.agentId} inside \"${grant.name}\" (${grant.level}, until ${until})?`,\n    recommend: `Yes if ${grant.guest} told you they are joining now. No if you did not expect it.`,\n    if_silent: \"discard\",\n    raised_by: JOIN_CARD_BY,\n  }, { now: now() })\n  if (!card.ok) {\n    log(`[guests] ${grant.id}: join from ${client} could not raise a card: ${card.error}`)\n    return { status: 403, body: { error: \"The host cannot take a join right now. Try again later.\" } }\n  }\n  deps.guests.update(grant.id, { guestNode, cardId: card.card.id })\n  deps.guests.log({ grant: grant.id, event: \"joined\", address: client, detail: guestNode.name ?? guestNode.id })\n  log(`[guests] ${grant.id}: ${grant.guest} joined from ${client}; waiting for the owner (card ${card.card.id})`)\n  return {\n    status: 200,\n    body: { grant: grant.id, name: grant.name, agentId: grant.agentId, level: grant.level, expiresAt: grant.expiresAt, state: \"pending\" },\n    token: redeemed.token,\n  }\n}\n\nexport type AccessResult =\n  | { ok: true; grant: GuestGrant }\n  | { ok: false; status: 401; error: string }\n  | { ok: false; status: 403; error: string; waiting?: true; paused?: true }\n\nexport const NO_GRANT = \"no grant opens this\"\nexport const WAITING_HOST = \"waiting for the host to approve the join\"\nexport const PAUSED = \"the host paused this grant\"\n\ntype SettleDeps = Pick<GuestDeps, \"tokens\" | \"guests\" | \"root\" | \"now\" | \"log\">\n\n/** Applies what time and the host's card say: an expired grant ends, a\n *  decided join card activates or ends the grant. Returns the grant as it\n *  stands now. Both sides call this: the guest on every request, the host\n *  before listing or acting, so a yes on the card counts at once. */\nexport function settleGrant(deps: SettleDeps, grant: GuestGrant): GuestGrant {\n  const now = deps.now ?? Date.now\n  const log = deps.log ?? ((line: string) => console.log(line))\n  if (grant.state === \"ended\") return grant\n  if (Date.parse(grant.expiresAt) <= now()) {\n    log(`[guests] ${grant.id}: expired`)\n    return endGrant({ tokens: deps.tokens, guests: deps.guests, now }, grant.id, \"expired\") ?? grant\n  }\n  if (grant.state !== \"pending\") return grant\n  const card = grant.cardId ? readCard(deps.root, grant.cardId) : null\n  const answer = !card ? null : card.status === \"decided\" ? card.verdict : card.status === \"expired\" ? \"no\" : null\n  if (answer === \"yes\") {\n    const out = deps.guests.update(grant.id, { state: \"active\", approvedAt: new Date(now()).toISOString() }) ?? grant\n    deps.guests.log({ grant: grant.id, event: \"approved\", detail: card?.decided_by })\n    log(`[guests] ${grant.id}: join approved`)\n    return out\n  }\n  if (answer === \"no\") {\n    const reason = card?.status === \"expired\" ? \"the host did not answer in time\" : \"the host said no\"\n    const out = endGrant({ tokens: deps.tokens, guests: deps.guests, now }, grant.id, reason) ?? grant\n    deps.guests.log({ grant: grant.id, event: \"refused\", detail: reason })\n    log(`[guests] ${grant.id}: join refused: ${reason}`)\n    return out\n  }\n  return grant\n}\n\n/** Whether `token` opens a grant right now. */\nexport function guestAccess(token: string | null, deps: SettleDeps): AccessResult {\n  const rec = token ? deps.tokens.verify(token) : null\n  const grantId = rec ? grantIdOf(rec) : null\n  const found = grantId ? deps.guests.get(grantId) : null\n  if (!rec || !found || found.tokenId !== rec.id) return { ok: false, status: 401, error: NO_GRANT }\n  const grant = settleGrant(deps, found)\n  if (grant.state === \"ended\") return { ok: false, status: 401, error: NO_GRANT }\n  if (grant.state === \"pending\") return { ok: false, status: 403, error: WAITING_HOST, waiting: true }\n  if (grant.state === \"paused\") return { ok: false, status: 403, error: PAUSED, paused: true }\n  return { ok: true, grant }\n}\n\n/** What the host agent is told on every guest turn. */\nexport function grantBrief(grant: GuestGrant): string {\n  const none = (xs: string[], word: string) => xs.length ? xs.join(\", \") : `none named: do not touch ${word} unless the owner's own instructions already allow it for this work`\n  const level =\n    grant.level === \"report\" ? \"report: read and answer only; change nothing\" :\n    grant.level === \"propose\" ? \"propose: you may prepare changes and open a merge request or draft; never merge, deploy or delete\" :\n    \"act: you may act inside the grant without asking\"\n  return [\n    `[Guest mesh] You are working for a guest organisation, \"${grant.guest}\", under the grant \"${grant.name}\" that the owner of this node opened.`,\n    `Stay inside it. Folders: ${none(grant.folders, \"files\")}. Skills: ${none(grant.skills, \"skills\")}. Commands: ${none(grant.commands, \"commands\")}. Freedom: ${level}. The grant ends on ${grant.expiresAt.slice(0, 10)}.`,\n    `Anything outside the grant: say it is not covered and stop. The guest sees only your answers: never reveal other chats, agents, people or files of this node.`,\n  ].join(\"\\n\")\n}\n\n/** A guest's message as a turn of the host agent. */\nexport function guestTask(grant: GuestGrant, message: string): {\n  agentId: string\n  message: string\n  context: { channel: \"guest\"; chatId: string; sender: string }\n  systemPromptAppend: string\n  autonomy?: AutonomyLevel\n} {\n  return {\n    agentId: grant.agentId,\n    message,\n    context: { channel: \"guest\", chatId: `guest:${grant.id}`, sender: `guest:${grant.guest}` },\n    systemPromptAppend: grantBrief(grant),\n    ...(grant.level === \"act\" ? {} : { autonomy: grant.level }),\n  }\n}\n\ntype ControlDeps = Pick<GuestDeps, \"tokens\" | \"guests\" | \"now\">\n\nexport function pauseGrant(deps: ControlDeps, id: string): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state !== \"active\") return null\n  const out = deps.guests.update(id, { state: \"paused\", pausedAt: new Date((deps.now ?? Date.now)()).toISOString() })\n  deps.guests.log({ grant: id, event: \"paused\" })\n  return out\n}\n\nexport function resumeGrant(deps: ControlDeps, id: string): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state !== \"paused\") return null\n  const out = deps.guests.update(id, { state: \"active\", pausedAt: undefined })\n  deps.guests.log({ grant: id, event: \"resumed\" })\n  return out\n}\n\n/** Ends the grant: its key stops at once. */\nexport function endGrant(deps: ControlDeps, id: string, reason = \"ended by the host\"): GuestGrant | null {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state === \"ended\") return null\n  deps.tokens.revoke(grant.tokenId)\n  const out = deps.guests.update(id, { state: \"ended\", endedAt: new Date((deps.now ?? Date.now)()).toISOString(), endedReason: reason })\n  deps.guests.log({ grant: id, event: reason === \"expired\" ? \"expired\" : \"ended\", detail: reason })\n  return out\n}\n\nexport interface GrantPatch { folders?: unknown; skills?: unknown; commands?: unknown; level?: unknown; days?: unknown }\n\n/** Widen or narrow a grant while it is in use. */\nexport function updateGrant(deps: ControlDeps, id: string, patch: GrantPatch): { ok: true; grant: GuestGrant } | { ok: false; error: string } {\n  const grant = deps.guests.get(id)\n  if (!grant || grant.state === \"ended\") return { ok: false, error: `no open grant \"${id}\"` }\n  const next: Partial<GuestGrant> = {}\n  if (patch.folders !== undefined) next.folders = list(patch.folders)\n  if (patch.skills !== undefined) next.skills = list(patch.skills)\n  if (patch.commands !== undefined) next.commands = list(patch.commands)\n  if (patch.level !== undefined) {\n    const level = autonomyLevelSchema.safeParse(patch.level)\n    if (!level.success) return { ok: false, error: \"level must be report, propose or act\" }\n    next.level = level.data\n  }\n  if (patch.days !== undefined) {\n    const days = Number(patch.days)\n    if (!Number.isFinite(days) || days < 1 || days > MAX_GRANT_DAYS) return { ok: false, error: `days must be between 1 and ${MAX_GRANT_DAYS}` }\n    next.expiresAt = new Date((deps.now ?? Date.now)() + days * 86_400_000).toISOString()\n  }\n  const out = deps.guests.update(id, next)!\n  const order: AutonomyLevel[] = [\"report\", \"propose\", \"act\"]\n  const wider = (next.level && order.indexOf(next.level) > order.indexOf(grant.level))\n    || (next.folders && next.folders.length > grant.folders.length)\n    || (next.skills && next.skills.length > grant.skills.length)\n    || (next.commands && next.commands.length > grant.commands.length)\n    || (next.expiresAt && next.expiresAt > grant.expiresAt)\n  deps.guests.log({ grant: id, event: wider ? \"widened\" : \"narrowed\", detail: Object.keys(next).join(\", \") })\n  return { ok: true, grant: out }\n}\n\n/** What the guest may know about its grant. */\nexport function grantForGuest(grant: GuestGrant): Record<string, unknown> {\n  return {\n    grant: grant.id, name: grant.name, agentId: grant.agentId, level: grant.level,\n    folders: grant.folders, skills: grant.skills, commands: grant.commands,\n    state: grant.state, expiresAt: grant.expiresAt, usage: grant.usage,\n  }\n}\n\nasync function padTo(started: number, minMs: number): Promise<void> {\n  const left = started + minMs - Date.now()\n  if (left > 0) await new Promise((r) => setTimeout(r, left))\n}\n"],"mappings":"qGAIAA,IAoBO,IAAMC,EAAqB,SAGrBC,EAAe,SACfC,EAAqB,EACrBC,EAAiB,IACxBC,EAAS,IA0BR,SAASC,EAAUC,EAAiC,CACzD,IAAMC,EAAQD,EAAI,OAAO,KAAME,GAAMA,EAAE,WAAWR,CAAkB,CAAC,EACrE,OAAOO,EAAQA,EAAM,MAAMP,EAAmB,MAAM,EAAI,IAC1D,CAEO,SAASS,EAAWC,EAAqB,CAC9C,MAAO,KAAKA,EAAI,SAAS,EAAE,KAAK,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,GACvE,CAEA,IAAMC,EAAQC,IACX,MAAM,QAAQA,CAAC,EAAIA,EAAI,OAAOA,GAAM,SAAWA,EAAE,MAAM,GAAG,EAAI,CAAC,GAAG,IAAKJ,GAAM,OAAOA,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,MAAM,EAAG,EAAE,EAOtH,SAASK,EAAYC,EAA2EC,EAAiC,CACtI,IAAML,GAAOI,EAAK,KAAO,KAAK,KAAK,EAC7BE,EAAO,OAAOD,EAAM,MAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,GAAG,EACnDE,EAAQ,OAAOF,EAAM,OAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,EAAE,EAC1D,GAAI,CAACC,EAAM,MAAO,CAAE,GAAI,GAAO,MAAO,kFAAqF,EAC3H,GAAI,CAACC,EAAO,MAAO,CAAE,GAAI,GAAO,MAAO,kDAAmD,EAC1F,GAAI,CAACF,EAAM,SAAW,CAACD,EAAK,SAASC,EAAM,OAAO,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,6CAA6CA,EAAM,SAAW,KAAM,EACpJ,IAAMG,EAAQC,EAAoB,UAAUJ,EAAM,OAAS,SAAS,EACpE,GAAI,CAACG,EAAM,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EACtF,IAAME,EAAOL,EAAM,OAAS,OAAYb,EAAqB,OAAOa,EAAM,IAAI,EAC9E,GAAI,CAAC,OAAO,SAASK,CAAI,GAAKA,EAAO,GAAKA,EAAOjB,EAAgB,MAAO,CAAE,GAAI,GAAO,MAAO,8BAA8BA,GAAiB,EAC3I,IAAMkB,EAAKZ,EAAWC,CAAG,EACnB,CAAE,MAAAY,EAAO,OAAAC,CAAO,EAAIT,EAAK,OAAO,OAAO,CAAE,KAAM,SAASG,MAAUD,KAAS,OAAQ,CAAC,GAAGhB,IAAqBqB,GAAI,EAAG,cAAe,KAAK,KAAKD,CAAI,CAAE,CAAC,EACnJ,CAAE,KAAAI,EAAM,UAAWC,CAAc,EAAIX,EAAK,MAAM,OAAO,CAAE,MAAAQ,EAAO,QAASC,EAAO,GAAI,KAAMF,CAAG,CAAC,EAC9FK,EAAoB,CACxB,GAAAL,EAAI,KAAAL,EAAM,MAAAC,EAAO,QAASF,EAAM,QAChC,QAASJ,EAAKI,EAAM,OAAO,EAAG,OAAQJ,EAAKI,EAAM,MAAM,EAAG,SAAUJ,EAAKI,EAAM,QAAQ,EACvF,MAAOG,EAAM,KAAM,MAAO,UAAW,QAASK,EAAO,GACrD,UAAW,IAAI,KAAKb,CAAG,EAAE,YAAY,EAAG,UAAW,IAAI,KAAKA,EAAMU,EAAO,KAAU,EAAE,YAAY,EACjG,MAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAC/B,EACA,OAAAN,EAAK,OAAO,IAAIY,CAAK,EACrBZ,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,UAAW,OAAQ,GAAGJ,MAAUD,GAAO,CAAC,EACrE,CAAE,GAAI,GAAM,KAAAQ,EAAM,cAAAC,EAAe,MAAAC,CAAM,CAChD,CAOO,IAAMC,EAAc,qDAI3B,eAAsBC,EACpBC,EACAC,EACAhB,EACqB,CACrB,IAAMiB,EAAU,KAAK,IAAI,EACnBrB,EAAMI,EAAK,KAAO,KAAK,IACvBkB,EAAMlB,EAAK,MAASmB,GAAiB,QAAQ,IAAIA,CAAI,GACrDC,EAAOpB,EAAK,QAAQ,WAAWgB,CAAM,EAC3C,GAAII,EAAO,EACT,OAAAF,EAAI,8BAA8BF,qBAA0BI,SAAY,EACjE,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,oBAAqB,WAAYA,CAAK,EAAG,WAAYA,CAAK,EAEjG,IAAMC,EAAWrB,EAAK,MAAM,OAAOe,EAAK,IAAI,EACtCvB,EAAM6B,EAAWrB,EAAK,OAAO,OAAOqB,EAAS,KAAK,EAAI,KACtDC,EAAU9B,EAAMD,EAAUC,CAAG,EAAI,KACjCoB,EAAQU,EAAUtB,EAAK,OAAO,IAAIsB,CAAO,EAAI,KAEnD,GADA,MAAMC,EAAMN,EAASjB,EAAK,OAASV,CAAM,EACrC,CAAC+B,GAAY,CAAC7B,GAAO,CAACoB,GAASA,EAAM,UAAYpB,EAAI,IAAMoB,EAAM,QAAU,QAC7E,OAAAZ,EAAK,QAAQ,KAAKgB,CAAM,EACxBE,EAAI,6BAA6BF,GAAQ,EAClC,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAOQ,CAAiB,CAAE,EAE1DxB,EAAK,QAAQ,QAAQgB,CAAM,EAC3B,IAAMS,EAAQV,EAAK,MAAQ,OAAOA,EAAK,MAAS,SAAWA,EAAK,KAAO,CAAC,EAClEW,EAAM,CAAC5B,EAAY6B,IAAe,OAAO7B,GAAM,UAAYA,EAAE,KAAK,EAAIA,EAAE,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,EAAG6B,CAAC,EAAI,OAClHC,EAAY,CAAE,GAAIF,EAAID,EAAK,GAAI,EAAE,EAAG,KAAMC,EAAID,EAAK,KAAM,EAAE,EAAG,QAAST,CAAO,EAC9Ea,EAAQjB,EAAM,UAAU,MAAM,EAAG,EAAE,EACnCkB,EAAOC,EAAW/B,EAAK,KAAM,CACjC,MAAO,eAAeY,EAAM,sBAC5B,IAAK,QAAQgB,EAAU,MAAQA,EAAU,IAAM,gBAAgBZ,SAAcJ,EAAM,mBAAmBA,EAAM,UAAUA,EAAM,gBAAgBiB,MAC5I,UAAW,UAAUjB,EAAM,oEAC3B,UAAW,UACX,UAAWzB,CACb,EAAG,CAAE,IAAKS,EAAI,CAAE,CAAC,EACjB,OAAKkC,EAAK,IAIV9B,EAAK,OAAO,OAAOY,EAAM,GAAI,CAAE,UAAAgB,EAAW,OAAQE,EAAK,KAAK,EAAG,CAAC,EAChE9B,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,SAAU,QAASI,EAAQ,OAAQY,EAAU,MAAQA,EAAU,EAAG,CAAC,EAC7GV,EAAI,YAAYN,EAAM,OAAOA,EAAM,qBAAqBI,kCAAuCc,EAAK,KAAK,KAAK,EACvG,CACL,OAAQ,IACR,KAAM,CAAE,MAAOlB,EAAM,GAAI,KAAMA,EAAM,KAAM,QAASA,EAAM,QAAS,MAAOA,EAAM,MAAO,UAAWA,EAAM,UAAW,MAAO,SAAU,EACpI,MAAOS,EAAS,KAClB,IAVEH,EAAI,YAAYN,EAAM,iBAAiBI,6BAAkCc,EAAK,OAAO,EAC9E,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,yDAA0D,CAAE,EAUrG,CAOO,IAAME,EAAW,sBACXC,EAAe,2CACfC,EAAS,6BAQf,SAASC,EAAYnC,EAAkBY,EAA+B,CAC3E,IAAMhB,EAAMI,EAAK,KAAO,KAAK,IACvBkB,EAAMlB,EAAK,MAASmB,GAAiB,QAAQ,IAAIA,CAAI,GAC3D,GAAIP,EAAM,QAAU,QAAS,OAAOA,EACpC,GAAI,KAAK,MAAMA,EAAM,SAAS,GAAKhB,EAAI,EACrC,OAAAsB,EAAI,YAAYN,EAAM,aAAa,EAC5BwB,EAAS,CAAE,OAAQpC,EAAK,OAAQ,OAAQA,EAAK,OAAQ,IAAAJ,CAAI,EAAGgB,EAAM,GAAI,SAAS,GAAKA,EAE7F,GAAIA,EAAM,QAAU,UAAW,OAAOA,EACtC,IAAMkB,EAAOlB,EAAM,OAASyB,EAASrC,EAAK,KAAMY,EAAM,MAAM,EAAI,KAC1D0B,EAAUR,EAAcA,EAAK,SAAW,UAAYA,EAAK,QAAUA,EAAK,SAAW,UAAY,KAAO,KAArF,KACvB,GAAIQ,IAAW,MAAO,CACpB,IAAMC,EAAMvC,EAAK,OAAO,OAAOY,EAAM,GAAI,CAAE,MAAO,SAAU,WAAY,IAAI,KAAKhB,EAAI,CAAC,EAAE,YAAY,CAAE,CAAC,GAAKgB,EAC5G,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,WAAY,OAAQkB,GAAM,UAAW,CAAC,EAChFZ,EAAI,YAAYN,EAAM,mBAAmB,EAClC2B,EAET,GAAID,IAAW,KAAM,CACnB,IAAME,EAASV,GAAM,SAAW,UAAY,kCAAoC,mBAC1ES,EAAMH,EAAS,CAAE,OAAQpC,EAAK,OAAQ,OAAQA,EAAK,OAAQ,IAAAJ,CAAI,EAAGgB,EAAM,GAAI4B,CAAM,GAAK5B,EAC7F,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOY,EAAM,GAAI,MAAO,UAAW,OAAQ4B,CAAO,CAAC,EACrEtB,EAAI,YAAYN,EAAM,qBAAqB4B,GAAQ,EAC5CD,EAET,OAAO3B,CACT,CAGO,SAAS6B,EAAYjC,EAAsBR,EAAgC,CAChF,IAAMR,EAAMgB,EAAQR,EAAK,OAAO,OAAOQ,CAAK,EAAI,KAC1Cc,EAAU9B,EAAMD,EAAUC,CAAG,EAAI,KACjCkD,EAAQpB,EAAUtB,EAAK,OAAO,IAAIsB,CAAO,EAAI,KACnD,GAAI,CAAC9B,GAAO,CAACkD,GAASA,EAAM,UAAYlD,EAAI,GAAI,MAAO,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOwC,CAAS,EACjG,IAAMpB,EAAQuB,EAAYnC,EAAM0C,CAAK,EACrC,OAAI9B,EAAM,QAAU,QAAgB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOoB,CAAS,EAC1EpB,EAAM,QAAU,UAAkB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOqB,EAAc,QAAS,EAAK,EAC/FrB,EAAM,QAAU,SAAiB,CAAE,GAAI,GAAO,OAAQ,IAAK,MAAOsB,EAAQ,OAAQ,EAAK,EACpF,CAAE,GAAI,GAAM,MAAAtB,CAAM,CAC3B,CAGO,SAAS+B,EAAW/B,EAA2B,CACpD,IAAMgC,EAAO,CAACC,EAAcC,IAAiBD,EAAG,OAASA,EAAG,KAAK,IAAI,EAAI,4BAA4BC,uEAC/F1C,EACJQ,EAAM,QAAU,SAAW,+CAC3BA,EAAM,QAAU,UAAY,oGAC5B,mDACF,MAAO,CACL,2DAA2DA,EAAM,4BAA4BA,EAAM,4CACnG,4BAA4BgC,EAAKhC,EAAM,QAAS,OAAO,cAAcgC,EAAKhC,EAAM,OAAQ,QAAQ,gBAAgBgC,EAAKhC,EAAM,SAAU,UAAU,eAAeR,wBAA4BQ,EAAM,UAAU,MAAM,EAAG,EAAE,KACrN,+JACF,EAAE,KAAK;AAAA,CAAI,CACb,CAGO,SAASmC,EAAUnC,EAAmBoC,EAM3C,CACA,MAAO,CACL,QAASpC,EAAM,QACf,QAAAoC,EACA,QAAS,CAAE,QAAS,QAAS,OAAQ,SAASpC,EAAM,KAAM,OAAQ,SAASA,EAAM,OAAQ,EACzF,mBAAoB+B,EAAW/B,CAAK,EACpC,GAAIA,EAAM,QAAU,MAAQ,CAAC,EAAI,CAAE,SAAUA,EAAM,KAAM,CAC3D,CACF,CAIO,SAASqC,EAAWjD,EAAmBO,EAA+B,CAC3E,IAAMK,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,SAAU,OAAO,KAC/C,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,SAAU,SAAU,IAAI,MAAMP,EAAK,KAAO,KAAK,KAAK,CAAC,EAAE,YAAY,CAAE,CAAC,EAClH,OAAAA,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,QAAS,CAAC,EACvCgC,CACT,CAEO,SAASW,EAAYlD,EAAmBO,EAA+B,CAC5E,IAAMK,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,SAAU,OAAO,KAC/C,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,SAAU,SAAU,MAAU,CAAC,EAC3E,OAAAP,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAO,SAAU,CAAC,EACxCgC,CACT,CAGO,SAASH,EAASpC,EAAmBO,EAAYiC,EAAS,oBAAwC,CACvG,IAAM5B,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,QAAS,OAAO,KAC9CZ,EAAK,OAAO,OAAOY,EAAM,OAAO,EAChC,IAAM2B,EAAMvC,EAAK,OAAO,OAAOO,EAAI,CAAE,MAAO,QAAS,QAAS,IAAI,MAAMP,EAAK,KAAO,KAAK,KAAK,CAAC,EAAE,YAAY,EAAG,YAAawC,CAAO,CAAC,EACrI,OAAAxC,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAOiC,IAAW,UAAY,UAAY,QAAS,OAAQA,CAAO,CAAC,EACzFD,CACT,CAKO,SAASY,EAAYnD,EAAmBO,EAAY6C,EAAmF,CAC5I,IAAMxC,EAAQZ,EAAK,OAAO,IAAIO,CAAE,EAChC,GAAI,CAACK,GAASA,EAAM,QAAU,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,kBAAkBL,IAAM,EAC1F,IAAM8C,EAA4B,CAAC,EAInC,GAHID,EAAM,UAAY,SAAWC,EAAK,QAAUxD,EAAKuD,EAAM,OAAO,GAC9DA,EAAM,SAAW,SAAWC,EAAK,OAASxD,EAAKuD,EAAM,MAAM,GAC3DA,EAAM,WAAa,SAAWC,EAAK,SAAWxD,EAAKuD,EAAM,QAAQ,GACjEA,EAAM,QAAU,OAAW,CAC7B,IAAMhD,EAAQC,EAAoB,UAAU+C,EAAM,KAAK,EACvD,GAAI,CAAChD,EAAM,QAAS,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EACtFiD,EAAK,MAAQjD,EAAM,KAErB,GAAIgD,EAAM,OAAS,OAAW,CAC5B,IAAM9C,EAAO,OAAO8C,EAAM,IAAI,EAC9B,GAAI,CAAC,OAAO,SAAS9C,CAAI,GAAKA,EAAO,GAAKA,EAAOjB,EAAgB,MAAO,CAAE,GAAI,GAAO,MAAO,8BAA8BA,GAAiB,EAC3IgE,EAAK,UAAY,IAAI,MAAMrD,EAAK,KAAO,KAAK,KAAK,EAAIM,EAAO,KAAU,EAAE,YAAY,EAEtF,IAAMiC,EAAMvC,EAAK,OAAO,OAAOO,EAAI8C,CAAI,EACjCC,EAAyB,CAAC,SAAU,UAAW,KAAK,EACpDC,EAASF,EAAK,OAASC,EAAM,QAAQD,EAAK,KAAK,EAAIC,EAAM,QAAQ1C,EAAM,KAAK,GAC5EyC,EAAK,SAAWA,EAAK,QAAQ,OAASzC,EAAM,QAAQ,QACpDyC,EAAK,QAAUA,EAAK,OAAO,OAASzC,EAAM,OAAO,QACjDyC,EAAK,UAAYA,EAAK,SAAS,OAASzC,EAAM,SAAS,QACvDyC,EAAK,WAAaA,EAAK,UAAYzC,EAAM,UAC/C,OAAAZ,EAAK,OAAO,IAAI,CAAE,MAAOO,EAAI,MAAOgD,EAAQ,UAAY,WAAY,OAAQ,OAAO,KAAKF,CAAI,EAAE,KAAK,IAAI,CAAE,CAAC,EACnG,CAAE,GAAI,GAAM,MAAOd,CAAI,CAChC,CAGO,SAASiB,EAAc5C,EAA4C,CACxE,MAAO,CACL,MAAOA,EAAM,GAAI,KAAMA,EAAM,KAAM,QAASA,EAAM,QAAS,MAAOA,EAAM,MACxE,QAASA,EAAM,QAAS,OAAQA,EAAM,OAAQ,SAAUA,EAAM,SAC9D,MAAOA,EAAM,MAAO,UAAWA,EAAM,UAAW,MAAOA,EAAM,KAC/D,CACF,CAEA,eAAeW,EAAMN,EAAiBwC,EAA8B,CAClE,IAAMC,EAAOzC,EAAUwC,EAAQ,KAAK,IAAI,EACpCC,EAAO,GAAG,MAAM,IAAI,QAAS,GAAM,WAAW,EAAGA,CAAI,CAAC,CAC5D","names":["init_autonomy","GUEST_SCOPE_PREFIX","JOIN_CARD_BY","DEFAULT_GRANT_DAYS","MAX_GRANT_DAYS","MIN_MS","grantIdOf","rec","scope","s","newGrantId","now","list","v","inviteGuest","deps","input","name","guest","level","autonomyLevelSchema","days","id","token","record","code","codeExpiresAt","grant","JOIN_FAILED","joinGuest","body","client","started","log","line","wait","redeemed","grantId","padTo","PAIR_CODE_FAILED","node","str","n","guestNode","until","card","createCard","NO_GRANT","WAITING_HOST","PAUSED","settleGrant","endGrant","readCard","answer","out","reason","guestAccess","found","grantBrief","none","xs","word","guestTask","message","pauseGrant","resumeGrant","updateGrant","patch","next","order","wider","grantForGuest","minMs","left"]}

package/dist/chunk-4LLSTP5G.js

@@ -0,0 +1,49 @@
+import{g as D,h as P,i as $e}from"./chunk-PN6XHTG5.js";import{b as N,d as q,h as Oe}from"./chunk-BRK6M6LA.js";import{a as $,e as Le}from"./chunk-2QNT5JDS.js";import{a as g,b as je}from"./chunk-QIJLFPWE.js";import{z as s}from"zod";var Ne,qe,De,Pe,Me,Be,Ue,Fe,He,M,B=g(()=>{"use strict";Ne=s.enum(["mon","tue","wed","thu","fri","sat","sun"]),qe=s.object({days:s.array(Ne).default(["mon","tue","wed","thu","fri"]),start:s.string().regex(/^\d{2}:\d{2}$/),end:s.string().regex(/^\d{2}:\d{2}$/),lunch:s.object({start:s.string().regex(/^\d{2}:\d{2}$/),end:s.string().regex(/^\d{2}:\d{2}$/)}).optional()}),De=s.object({title:s.string(),responsibilities:s.array(s.string()).default([]),sopPath:s.string().optional(),kpis:s.array(s.string()).default([])}),Pe=s.object({role:s.string(),reportsTo:s.string().optional(),schedule:qe,utilizationTarget:s.number().min(0).max(1).default(.8)}),Me=s.object({channel:s.string(),chatId:s.string(),accountId:s.string().optional()}),Be=s.discriminatedUnion("type",[s.object({type:s.literal("backlog"),path:s.string().default(".agentx/backlog.md")}),s.object({type:s.literal("gitlab"),projects:s.array(s.string()).default([])}),s.object({type:s.literal("wiki"),path:s.string(),glob:s.string().default("**/*.md")})]),Ue=s.object({id:s.string(),pm:s.string().optional(),client:s.string().optional()}),Fe=s.object({channel:s.string().optional(),chatId:s.string().optional(),username:s.string().optional(),senderId:s.string().optional(),client:s.string(),project:s.string().optional(),displayName:s.string().optional()}),He=s.object({name:s.string().optional(),kind:s.enum(["client","internal","own"]).optional(),respondWithin:s.string().optional(),standing:s.array(s.string()).default([])}),M=s.object({enabled:s.boolean().default(!1),timezone:s.string().default("UTC"),mainChannel:Me,workSource:Be,roles:s.record(s.string(),De).default({}),orgChart:s.record(s.string(),Pe).default({}),projects:s.array(Ue).default([]),contactMap:s.array(Fe).default([]),clients:s.record(s.string(),He).default({}),workTickMinutes:s.number().int().min(1).max(60).default(15),idleQueueThreshold:s.number().int().min(0).default(0),standup:s.object({enabled:s.boolean().default(!0),plansDir:s.string().default(".agentx/plans"),maxAgentsPerDay:s.number().int().min(1).max(100).default(20),dryRun:s.boolean().default(!1)}).default({})})});import{z as d}from"zod";function ln(r,n){let t=new Set(r.labels||[]);if(r.state==="closed"){let o=n.find(i=>i.kind==="closed");if(o)return o.id}for(let o of n)if(o.kind==="scoped-label"&&o.scopedLabel&&t.has(o.scopedLabel))return o.id;for(let o of n)if(o.kind==="label"&&o.mapsToLabel&&t.has(o.mapsToLabel))return o.id;let a=n.find(o=>o.kind==="open-backlog");if(a){let o=a.scopedPrefix+"::";return[...t].some(l=>l.startsWith(o))?null:a.id}return n[0]?.id??null}function dn(r,n){let t=[],a=[],o=!1,i=!1;return n.kind==="scoped-label"&&n.scopedLabel?t.push(n.scopedLabel):n.kind==="label"&&n.mapsToLabel?t.push(n.mapsToLabel):n.kind==="closed"&&(o=!0),r&&(r.kind==="scoped-label"&&r.scopedLabel?a.push(r.scopedLabel):r.kind==="label"&&r.mapsToLabel?a.push(r.mapsToLabel):r.kind==="closed"&&n.kind!=="closed"&&(i=!0)),{addLabels:t.length?t:void 0,removeLabels:a.length?a:void 0,closeIssue:o||void 0,reopen:i||void 0}}var ze,We,Ke,Xe,Ze,Ge,U,Ye,F,H=g(()=>{"use strict";ze=d.object({name:d.string(),color:d.string().regex(/^#[0-9a-f]{6}$/i).default("#6366f1"),description:d.string().optional()}),We=d.object({id:d.string().regex(/^[a-z0-9_-]+$/,"column id must be lowercase slug"),title:d.string(),kind:d.enum(["open-backlog","scoped-label","closed","label"]).default("label"),mapsToLabel:d.string().optional(),scopedLabel:d.string().optional(),scopedPrefix:d.string().default("Status"),accent:d.string().optional()}),Ke=d.object({enabled:d.boolean().default(!0),staleDoingMinutes:d.number().int().min(1).default(45),respectLunchBreak:d.boolean().default(!0),respectSchedule:d.boolean().default(!0),action:d.enum(["badge","notify"]).default("badge")}),Xe=d.discriminatedUnion("type",[d.object({type:d.literal("gitlab"),projects:d.array(d.string()).min(1)})]),Ze=[{id:"open",title:"Open",kind:"open-backlog",scopedPrefix:"Status",accent:"#6b7280"},{id:"todo",title:"To Do",kind:"scoped-label",scopedLabel:"Status::To Do",scopedPrefix:"Status",accent:"#fb7a35"},{id:"doing",title:"Doing",kind:"scoped-label",scopedLabel:"Status::Doing",scopedPrefix:"Status",accent:"#22c55e"},{id:"onhold",title:"On Hold",kind:"scoped-label",scopedLabel:"Status::On Hold",scopedPrefix:"Status",accent:"#f59e0b"},{id:"review",title:"Review",kind:"scoped-label",scopedLabel:"Status::Review",scopedPrefix:"Status",accent:"#3b82f6"},{id:"closed",title:"Closed",kind:"closed",scopedPrefix:"Status",accent:"#6b7280"}],Ge=d.object({id:d.string().regex(/^[a-z0-9_-]+$/,"board id must be lowercase slug"),name:d.string(),source:Xe,primaryToolLabel:d.string().optional(),labels:d.array(ze).default([]),columns:d.array(We).min(1).default(Ze),timeRangeDays:d.number().int().min(1).max(365).default(30),closedWindowDays:d.number().int().min(1).max(365).default(30),reconciliation:Ke.default({})}),U=d.array(Ge).default([]),Ye=d.object({name:d.string(),url:d.string(),dashboardUrl:d.string().optional(),token:d.string().optional(),dashboardToken:d.string().optional()}),F=d.object({enabled:d.boolean().default(!1),port:d.number().int().default(4202),bind:d.string().default("127.0.0.1"),token:d.string().optional(),daemonUrl:d.string().default("http://localhost:18800"),daemons:d.array(Ye).default([]),draftAgent:d.string().optional()}).default({})});function nt(r){let n=String(r??"").trim().toLowerCase();if(!n)return{ok:!1,error:"is empty"};let t=n.split("+").map(i=>i.trim());if(t.some(i=>!i))return{ok:!1,error:`"${r}" has an empty part; write it like opt+space`};let a=et[t[t.length-1]]??t[t.length-1],o=new Set;for(let i of t.slice(0,-1)){let l=Ve[i];if(!l)return{ok:!1,error:`"${i}" is not a modifier; use ctrl, opt, shift or cmd`};if(o.has(l))return{ok:!1,error:`"${r}" names ${l} twice`};o.add(l)}return tt(a)?!z(a)&&!["ctrl","opt","cmd"].some(i=>o.has(i))?{ok:!1,error:`"${r}" needs ctrl, opt or cmd, or it would take that key away from your typing`}:{ok:!0,value:[...Je.filter(i=>o.has(i)),a].join("+")}:{ok:!1,error:`"${a}" is not a key AgentX Voice can use; use a letter, a digit, f1 to f20, or space, period, comma, slash, return, tab`}}function W(r){let n=nt(r);return n.ok?void 0:n.error}function cn(r){let n={ctrl:"\u2303",opt:"\u2325",shift:"\u21E7",cmd:"\u2318"},t={space:"Space",period:".",comma:",",slash:"/",semicolon:";",quote:"'",minus:"-",equal:"=",leftbracket:"[",rightbracket:"]",backslash:"\\",grave:"`",return:"Return",tab:"Tab"},a=r.split("+"),o=a.pop()??"";return a.map(i=>n[i]??i).join("")+(t[o]??o.toUpperCase())}var Ve,Je,Qe,et,z,tt,S,K=g(()=>{"use strict";Ve={ctrl:"ctrl",control:"ctrl",opt:"opt",option:"opt",alt:"opt",shift:"shift",cmd:"cmd",command:"cmd"},Je=["ctrl","opt","shift","cmd"],Qe=["space","period","comma","slash","semicolon","quote","minus","equal","leftbracket","rightbracket","backslash","grave","return","tab"],et={".":"period",",":"comma","/":"slash",";":"semicolon","'":"quote","-":"minus","=":"equal","`":"grave",enter:"return"},z=r=>/^f([1-9]|1[0-9]|20)$/.test(r),tt=r=>/^[a-z0-9]$/.test(r)||Qe.includes(r)||z(r);S={talk:"opt+space",stop:"cmd+opt+period",paste:"cmd+opt+v"}});function rt(r){let n=/^#([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})$/i.exec(r);if(!n)return null;let[t,a,o]=n.slice(1).map(p=>parseInt(p,16)/255),i=Math.max(t,a,o),l=Math.min(t,a,o),u=i-l;return u<.04?null:((i===t?(a-o)/u%6:i===a?(o-t)/u+2:(t-a)/u+4)*60+360)%360}function at(r){let n=rt(r);if(n===null)return y.find(o=>o.id==="lagoon");let t=y[0],a=360;for(let o of y){let i=Math.abs(o.hue-n),l=Math.min(i,360-i);l<a&&(t=o,a=l)}return t}function gn(r,n){let t=y.find(a=>a.id===r);return t?{...t,set:!0}:{...at(n),set:!1}}var y,X,Z=g(()=>{"use strict";y=[{id:"sunrise",label:"Sunrise",hue:18,colors:["#E8505B","#F2726F","#F79A5A","#FBBF4A","#FFE3A3"]},{id:"desert",label:"Desert",hue:36,colors:["#A4492C","#C8683E","#D9905E","#E7B98A","#F6E3C4"]},{id:"forest",label:"Forest",hue:100,colors:["#2F5D34","#4C7D3A","#6FA046","#9CC25E","#D5EBA4"]},{id:"lagoon",label:"Lagoon",hue:172,colors:["#0B6E73","#0E9594","#1FBFB2","#56DCCB","#B8F4EA"]},{id:"ocean",label:"Ocean",hue:205,colors:["#15457E","#1C6BA8","#2B93CF","#5DBBE8","#BFE6FA"]},{id:"dusk",label:"Dusk",hue:268,colors:["#2E2A7A","#5B3E9E","#8C4FB0","#C8649E","#F4A7B9"]},{id:"blossom",label:"Blossom",hue:330,colors:["#A3245B","#CF3F78","#E8699A","#F49BB8","#FFD6E0"]}],X=y.map(r=>r.id)});function G(r){let n=(r.match(/[؀-ۿ]/g)??[]).length,t=(r.match(/[a-zA-ZÀ-ÿ]/g)??[]).length;if(n&&n>=t)return"ar";let a=0,o=0;for(let i of r.toLowerCase().replace(/[’]/g,"'").match(/[a-zà-ÿœ']+/g)??[])ot.has(i)&&a++,it.has(i)||i.startsWith("l'")||i.startsWith("d'")||i.startsWith("qu'")?o++:st.test(i)&&(o+=.5);return a===o?null:a>o?"en":"fr"}var ot,it,st,Y=g(()=>{"use strict";ot=new Set("the and is are was were i you he she we they it this that to of in for with not but yes what have has will would can your my".split(" ")),it=new Set("le la les des du de un une et est sont je tu il elle nous vous ils elles ce cette c'est pas pour que qui avec dans sur au aux mais tr\xE8s oui non merci bonjour votre mon".split(" ")),st=/[éèêëàâçùûîïôœ]/});function hn(r,n=I){let t=r;if(t=t.replace(/```[\s\S]*?```/g,". "),t=t.replace(/`[^`]*`/g,""),t=t.replace(/\*\*(.*?)\*\*/g,"$1"),t=t.replace(/__(.*?)__/g,"$1"),t=t.replace(/\*([^*]+)\*/g,"$1"),t=t.replace(/_([^_]+)_/g,"$1"),t=t.replace(/~~(.*?)~~/g,"$1"),t=t.replace(/\[([^\]]+)\]\([^)]+\)/g,"$1"),t=t.replace(/!\[([^\]]*)\]\([^)]+\)/g,"image$1 "),t=t.replace(/^#{1,6}\s+/gm,""),t=t.replace(/^[\s]*[-*+]\s+/gm,". "),t=t.replace(/^[\s]*\d+\.\s+/gm,". "),t=t.replace(/^[-=_]{3,}$/gm,""),t=t.replace(/^>\s*/gm,""),t=t.replace(/https?:\/\/\S+/g,"link"),t=t.replace(/\/\w+(\/\w+)+/g,a=>a.split("/").filter(Boolean).join(" slash ")),t=t.replace(/&/g," and "),t=t.replace(/@/g," at "),t=t.replace(/=>/g," returns "),t=t.replace(/->/g," to "),t=t.replace(/\|/g," or "),t=t.replace(/\be\.g\./gi,"for example"),t=t.replace(/\bi\.e\./gi,"that is"),t=t.replace(/\betc\./gi,"etcetera"),t=t.replace(/\bvs\.?\b/gi,"versus"),t=t.replace(/\n{2,}/g,". "),t=t.replace(/\n/g," "),t=t.replace(/\s+/g," "),t=t.replace(/\.\s*\./g,"."),t=t.replace(/\s+([.,!?])/g,"$1"),t=t.trim().replace(/^[.,:;]+\s*/,""),t.length>n){let a=t.slice(0,n),o=([...t.slice(0,n+1).matchAll(/[.!?؟](?=\s)/g)].at(-1)?.index??-1)+1;t=(o>=n/2?a.slice(0,o):a.replace(/\s+\S*$/,"")+"...")+" "+lt[G(a)??"en"]}return t}var I,lt,V=g(()=>{"use strict";Y();I=500,lt={en:"The rest is on screen.",fr:"La suite est \xE0 l'\xE9cran.",ar:"\u0627\u0644\u0628\u0627\u0642\u064A \u0639\u0644\u0649 \u0627\u0644\u0634\u0627\u0634\u0629."}});import{z as c}from"zod";var J,dt,Q,ee=g(()=>{"use strict";J=c.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/,"use HH:MM, 24-hour"),dt=c.object({id:c.string().regex(/^[a-z0-9][a-z0-9_-]{0,63}$/,"lowercase letters, digits, - and _"),enabled:c.boolean().default(!0),chats:c.array(c.string().min(1)).default([]),senders:c.array(c.string().min(1)).default([]),agent:c.string().min(1),prompt:c.string().max(4e3).optional(),quietHours:c.object({start:J,end:J}).optional(),autoAck:c.boolean().default(!1)}).refine(r=>r.chats.length>0||r.senders.length>0,{message:"a rule needs at least one chat or sender"}),Q=c.object({enabled:c.boolean().default(!1),secretEnv:c.string().regex(/^[A-Z_][A-Z0-9_]*$/).default("WACLI_WEBHOOK_SECRET"),batchSeconds:c.number().int().min(0).max(600).default(20),timezone:c.string().optional(),allowAutoAck:c.boolean().default(!1),describeMedia:c.boolean().default(!0),wacli:c.object({bin:c.string().default("wacli"),account:c.string().optional(),store:c.string().optional()}).default({}),rules:c.array(dt).default([])}).default({})});function ut(r){if(r.exec(`
+    CREATE TABLE IF NOT EXISTS requests (
+      id TEXT PRIMARY KEY,
+      state TEXT NOT NULL,
+      channel TEXT NOT NULL,
+      chat_id TEXT NOT NULL,
+      sender TEXT,
+      agent_id TEXT NOT NULL,
+      text TEXT NOT NULL,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL,
+      attention_reason TEXT,
+      notified_at INTEGER,
+      question TEXT,
+      closed_at INTEGER,
+      evidence TEXT,
+      close_reason TEXT
+    );
+    CREATE INDEX IF NOT EXISTS idx_requests_state_created ON requests(state, created_at);
+    CREATE INDEX IF NOT EXISTS idx_requests_chat ON requests(agent_id, channel, chat_id, created_at);
+    CREATE TABLE IF NOT EXISTS request_links (
+      request_id TEXT NOT NULL,
+      kind TEXT NOT NULL,
+      ref TEXT NOT NULL,
+      at INTEGER NOT NULL,
+      PRIMARY KEY (kind, ref),
+      FOREIGN KEY (request_id) REFERENCES requests(id) ON DELETE CASCADE
+    );
+    CREATE INDEX IF NOT EXISTS idx_request_links_request ON request_links(request_id);
+  `),P(r,"requests",D),!r.prepare("PRAGMA table_info(requests)").all().some(t=>t.name==="pickup_at"))try{r.exec("ALTER TABLE requests ADD COLUMN pickup_at INTEGER")}catch(t){if(!/duplicate column name/i.test(String(t?.message)))throw t}}function En(r){return!!r.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'requests'").get()}function b(r){return{id:r.id,state:r.state,channel:r.channel,chatId:r.chat_id,sender:r.sender??null,person:r.person??null,agentId:r.agent_id,text:r.text,createdAt:r.created_at,updatedAt:r.updated_at,attentionReason:r.attention_reason??null,notifiedAt:r.notified_at??null,question:r.question??null,closedAt:r.closed_at??null,evidence:r.evidence??null,closeReason:r.close_reason??null}}var k,m,te,C,h,ne,re=g(()=>{"use strict";$e();k=["in_progress","waiting_owner","waiting_other","needs_attention"],m=["done","declined","dropped"],te=4e3,C=500;h=r=>Array(r).fill("?").join(","),ne=class{constructor(n){this.db=n;ut(n),n.pragma("foreign_keys = ON")}addCandidate(n){this.db.prepare(`INSERT OR IGNORE INTO requests (id, state, channel, chat_id, sender, person, agent_id, text, created_at, updated_at)
+       VALUES (?, 'candidate', ?, ?, ?, ?, ?, ?, ?, ?)`).run(n.id,n.channel,n.chatId,n.sender??null,n.person??null,n.agentId,n.text.slice(0,te),n.now,n.now),this.link(n.id,"run",n.runId,n.now)}get(n){let t=this.db.prepare("SELECT * FROM requests WHERE id = ?").get(n);return t?b(t):null}byLink(n,t){let a=this.db.prepare("SELECT r.* FROM requests r JOIN request_links l ON l.request_id = r.id WHERE l.kind = ? AND l.ref = ?").get(n,t);return a?b(a):null}link(n,t,a,o){this.db.prepare("INSERT OR IGNORE INTO request_links (request_id, kind, ref, at) VALUES (?, ?, ?, ?)").run(n,t,a,o)}links(n){return this.db.prepare("SELECT kind, ref, at FROM request_links WHERE request_id = ? ORDER BY at, rowid").all(n)}touch(n,t){this.db.prepare("UPDATE requests SET updated_at = ? WHERE id = ?").run(t,n)}progress(n,t,a="in_progress"){this.db.prepare(`UPDATE requests SET state = ?, updated_at = ?, attention_reason = NULL, notified_at = NULL, question = NULL
+       WHERE id = ? AND state NOT IN (${h(m.length)})`).run(a,t,n,...m)}waitOnOwner(n,t,a){this.db.prepare(`UPDATE requests SET state = 'waiting_owner', updated_at = ?, question = ?, attention_reason = NULL, notified_at = NULL
+       WHERE id = ? AND state NOT IN (${h(m.length)})`).run(a,t.slice(0,te),n,...m)}needsAttention(n,t,a){return this.db.prepare(`UPDATE requests SET state = 'needs_attention', updated_at = ?, attention_reason = ?, notified_at = NULL
+       WHERE id = ? AND state NOT IN ('needs_attention', ${h(m.length)})`).run(a,t.replace(/\s+/g," ").trim().slice(0,C),n,...m).changes>0}close(n,t,a,o){let i=a.trim();if(!i)throw new Error(t==="done"?"a finished request needs a link to the evidence":`a ${t} request needs a reason`);return this.db.prepare(`UPDATE requests SET state = ?, closed_at = ?, updated_at = ?, evidence = ?, close_reason = ?
+       WHERE id = ? AND state NOT IN (${h(m.length)})`).run(t,o,o,t==="done"?i.slice(0,C):null,t==="done"?null:i.slice(0,C),n,...m).changes>0}discardCandidate(n){return this.db.prepare("DELETE FROM requests WHERE id = ? AND state = 'candidate'").run(n).changes>0}listOpen(){return this.db.prepare(`SELECT * FROM requests WHERE state IN (${h(k.length)}) ORDER BY created_at, rowid`).all(...k).map(b)}quietSince(n,t){return this.db.prepare(`SELECT * FROM requests WHERE state IN (${h(n.length)}) AND updated_at < ? ORDER BY created_at, rowid`).all(...n,t).map(b)}awaitingNotice(){return this.db.prepare("SELECT * FROM requests WHERE state = 'needs_attention' AND notified_at IS NULL ORDER BY created_at, rowid").all().map(b)}markNotified(n,t){this.db.prepare("UPDATE requests SET notified_at = ? WHERE id = ?").run(t,n)}listByState(n){return this.db.prepare("SELECT * FROM requests WHERE state = ? ORDER BY created_at, rowid").all(n).map(b)}requestPickup(n,t){return this.db.prepare(`UPDATE requests SET state = 'in_progress', updated_at = ?, attention_reason = NULL, notified_at = NULL, pickup_at = ?
+       WHERE id = ? AND state = 'needs_attention'`).run(t,t,n).changes>0}takePickups(){return this.db.prepare("UPDATE requests SET pickup_at = NULL WHERE pickup_at IS NOT NULL RETURNING *").all().map(b).filter(n=>n.state==="in_progress").sort((n,t)=>n.createdAt-t.createdAt)}pruneClosed(n){return this.db.prepare(`DELETE FROM requests WHERE state IN (${h(m.length)}) AND closed_at < ?`).run(...m,n).changes}}});function vn(r){return Object.assign({channel:ie,chatId:r,sender:"operator"},{[se]:!0})}function Rn(r){return!!r&&r[se]===!0}function gt(r,n,t,a=!1){let o=w(n);if(r.channels.length&&!r.channels.map(w).includes(o))return!1;if(T.has(o))return a&&!ct.has((t?.name??"").toLowerCase());let i=ft.has(o)?t?.username:t?.id,l=i?ae(o,i):"";return l?r.from.some(u=>{let f=u.trim().toLowerCase(),p=f.indexOf(":");return p>0&&f.slice(0,p)===o&&ae(o,f.slice(p+1))===l}):!1}function _n(r){if(!r)return;let n=a=>typeof a=="string"&&a?a.slice(0,120):void 0,t={name:n(r.sender),id:n(r.senderId),username:n(r.senderUsername)};return t.name||t.id||t.username?t:void 0}function mt(r){return/\btimed? ?out\b|timeout/i.test(r)?"timed out":"failed"}var ie,se,T,ct,w,ft,ae,E,x,oe,le=g(()=>{"use strict";re();ie="requests",se=Symbol("requests.pickup");T=new Set(["voice","app","dashboard","webrtc"]),ct=new Set(["camera"]),w=r=>r.toLowerCase().split("@")[0],ft=new Set(["github","gitlab"]),ae=(r,n)=>r==="whatsapp"?n.replace(/@.*$/,"").replace(/\D/g,""):n.trim().toLowerCase().replace(/^@/,"");E=(r,n=200)=>{let t=r.replace(/\s+/g," ").trim();return t.length>n?`${t.slice(0,n-1)}\u2026`:t},x=(r,n,t)=>`${r}\0${n}\0${t}`,oe=class{constructor(n,t,a,o=Date.now){this.store=n;this.settings=t;this.log=a;this.now=o}live=new Map;guard(n,t){try{t()}catch(a){this.log(`[requests] ${n} failed: ${a?.message??a}`)}}isListedOwner(n){let t=w(n.channel),a=this.settings().channels;return a.length&&!a.map(w).includes(t)?!1:n.person?.role==="owner"&&!T.has(t)}liveRequestId(n,t,a){return this.live.get(x(n,t,a))?.requestId??null}taskStarted(n){n.taskId&&this.guard("capture",()=>{if(!this.settings().enabled)return;let t=this.now(),a=n.resumedFrom?this.store.byLink("run",n.resumedFrom):null,o=x(n.agentId,n.channel,n.chatId);if(a){this.store.link(a.id,"run",n.taskId,t),a.state==="candidate"?this.store.touch(a.id,t):this.store.progress(a.id,t),this.live.set(o,{requestId:a.id,runId:n.taskId});return}let i=n.pickup&&n.channel===ie?this.store.get(n.chatId):null;if(i&&i.agentId===n.agentId){this.store.link(i.id,"run",n.taskId,t),this.store.touch(i.id,t),this.live.set(o,{requestId:i.id,runId:n.taskId});return}!n.humanRoot||!(gt(this.settings(),n.channel,n.sender,n.operator===!0)||this.isListedOwner(n))||(this.live.set(o,{requestId:`req-${n.taskId}`,runId:n.taskId}),this.store.addCandidate({id:`req-${n.taskId}`,runId:n.taskId,channel:n.channel,chatId:n.chatId,sender:n.sender?.name??n.sender?.username??n.sender?.id??null,person:n.person?.id??null,agentId:n.agentId,text:n.requestText??n.fullMessage??n.messagePreview,now:t}))})}taskCompleted(n){n.taskId&&this.guard("run end",()=>{let t=x(n.agentId,n.channel,n.chatId);this.live.get(t)?.runId===n.taskId&&this.live.delete(t);let a=this.store.byLink("run",n.taskId);if(!a)return;let o=this.now();if(!n.interrupted){if(n.error&&n.errorKind!=="cancelled"){let i=mt(n.error);this.store.needsAttention(a.id,`${n.agentId} ${i}: ${E(n.error)}`,o)&&this.log(`[requests] ${a.id} needs attention: run ${n.taskId} ${i}`);return}a.state==="candidate"?this.store.discardCandidate(a.id):this.store.touch(a.id,o)}})}delegationStarted(n){this.guard("delegation start",()=>{if(!this.settings().enabled)return;let t=this.live.get(x(n.caller,n.origin.channel,n.origin.chatId));if(!t)return;let a=this.now();this.store.link(t.requestId,"delegation",n.id,a),this.store.progress(t.requestId,a,"waiting_other")})}delegationDone(n,t,a){this.guard("delegation end",()=>{let o=this.store.byLink("delegation",n.id);if(!o)return;let i=this.now(),l=n.peer?`${n.callee} on ${n.peer}`:n.callee;if(t==="done"){this.store.progress(o.id,i);return}let u={error:"failed",timeout:"did not answer in time",lost:"was lost in a restart"}[t];this.store.needsAttention(o.id,`The work handed to ${l} ${u}: ${E(a)}`,i)&&this.log(`[requests] ${o.id} needs attention: delegation ${n.id} ${t}`)})}cardRaised(n,t){t&&this.guard("card",()=>{if(!this.settings().enabled)return;let a=this.live.get(x(n.raised_by,t.channel,t.chatId))?.requestId;if(!a)return;let o=this.now();this.store.link(a,"card",n.id,o),this.store.waitOnOwner(a,n.ask,o)})}cardResolved(n){this.guard("card result",()=>{let t=this.store.byLink("card",n.id);if(!t)return;let a=this.now(),o=n.outcome??n.if_silent;n.status==="decided"||o==="approve"?t.state==="waiting_owner"&&this.store.progress(t.id,a):this.store.needsAttention(t.id,`Your answer did not come before the card expired (${E(n.ask)}); "${o}" was applied`,a)&&this.log(`[requests] ${t.id} needs attention: card ${n.id} expired unanswered`)})}closingNote(n){try{let t=this.store.byLink("delegation",n);return!t||!k.includes(t.state)?void 0:`This is part of the owner's open request ${t.id}. It stays on their list until it is closed. If it is finished now, close it with agentx_request: {action:"done", id:"${t.id}", evidence:"<link to the proof>"}. If you will not do it, use decline with the reason. If work goes on, leave it open.`}catch{return}}resumeOutcome(n){this.guard("restart",()=>{let t=this.store.byLink("run",n.taskId);if(!t)return;let a=this.now();n.decision==="resumed"?t.state==="candidate"?this.store.touch(t.id,a):this.store.progress(t.id,a):(n.decision==="reported"||n.decision==="resume-failed"||n.decision==="skipped")&&this.store.needsAttention(t.id,`Cut off by a restart and not picked up again (${E(n.reason)})`,a)&&this.log(`[requests] ${t.id} needs attention: run ${n.taskId} cut off by a restart`)})}}});import{randomBytes as pt,timingSafeEqual as de}from"crypto";import{chmodSync as bt,existsSync as ht,mkdirSync as yt,readFileSync as xt,writeFileSync as St}from"fs";import{dirname as kt,resolve as Et}from"path";function Ln(r){return Object.assign(r,{[ue]:!0})}function ce(r){return!!r&&r[ue]===!0}function Tt(r=process.cwd()){return Et(r,".agentx","operator.key")}function On(r=process.cwd(),n={}){let t=Tt(r);try{if(ht(t)){let o=xt(t,"utf-8").trim();if(o)return o}if(!n.create)return null;let a=pt(32).toString("hex");return yt(kt(t),{recursive:!0}),St(t,a+`
+`,{mode:384}),bt(t,384),a}catch{return null}}function vt(r,n){let t=Array.isArray(n)?n[0]:n;if(!r||!t)return!1;let a=Buffer.from(r),o=Buffer.from(t.trim());return a.length===o.length&&de(a,o)}function $n(r,n,t,a){if(!r||typeof r!="object")return!1;let o=String(r.channel??"").toLowerCase().split("@")[0];return a.has(o)?vt(t,n[wt]):!1}function Nn(r,n){let t=r[Rt];if((Array.isArray(t)?t[0]:t)!=="1")return!1;let a=r.authorization,o=(Array.isArray(a)?a[0]:a)||"",i=o.toLowerCase().startsWith("bearer ")?o.slice(7).trim():"";if(!i)return!1;let l=Buffer.from(i);for(let u of n){if(!u)continue;let f=Buffer.from(u);if(f.length===l.length&&de(f,l))return!0}return!1}var wt,ue,Rt,fe=g(()=>{"use strict";wt="x-agentx-operator",ue=Symbol("requests.operator");Rt="x-agentx-operator-vouch"});function ge(r,n){let t=n.trim().toLowerCase();return r==="whatsapp"?t.replace(/@.*$/,"").replace(/\D/g,""):t.replace(/^@/,"")}function me(r){let n=r.indexOf(":");if(n<=0||n===r.length-1)return null;let t=L(r.slice(0,n).trim()),a=ge(t,r.slice(n+1));return a?{channel:t,value:a}:null}function pe(r){let n=new Set,t=new Map;for(let a of r){if(n.has(a.id))return`person "${a.id}" is listed twice`;if(n.add(a.id),a.id===j&&a.role!=="owner")return`the id "${j}" is kept for a person with the owner role`;for(let o of a.identities){let i=me(o);if(!i)return`identity "${o}" of "${a.id}" must be written channel:id`;let l=`${i.channel}:${i.value}`,u=t.get(l);if(u&&u!==a.id)return`identity "${o}" belongs to both "${u}" and "${a.id}"`;t.set(l,a.id)}}return null}function _t(r,n,t){let a=L(n),i=(a==="whatsapp"?[t?.id]:[t?.id,t?.username]).filter(l=>typeof l=="string"&&!!l).map(l=>ge(a,l)).filter(Boolean);return i.length?r.find(l=>l.identities.some(u=>{let f=me(u);return!!f&&f.channel===a&&i.includes(f.value)}))??null:null}function At(r){let n=r.filter(t=>t.role==="owner");return n.length===0?{id:j,role:"owner"}:n.length===1?{id:n[0].id,role:"owner"}:null}function It(r,n){let t=N(n);if(t)return t.person?{id:t.person}:null;if(!n||q(n)!=="human")return null;let a=String(n.channel??"");if(T.has(L(a)))return ce(n)?At(r):null;let o=l=>typeof l=="string"?l:void 0,i=_t(r,a,{id:o(n.senderId),username:o(n.senderUsername)});return i?{id:i.id,role:i.role}:null}function Ct(r,n){let t=r.agents??[];return r.role==="owner"||t.length===0||t.includes(n)}function Bn(r,n,t){let a=It(r,t);if(!a)return null;let o=r.find(l=>l.id===a.id);if(!o||Ct(o,n))return null;let i=(o.agents??[]).join(", ");return{person:o,note:`${o.name}, you can reach ${i} here, not ${n}. Ask the owner if you need ${n}.`}}var j,L,be=g(()=>{"use strict";Oe();le();fe();j="owner",L=r=>r.toLowerCase().split("@")[0]});var nn={};je(nn,{INTEGRATION_KINDS:()=>Pt,approvalsConfigSchema:()=>Ie,callsSchema:()=>we,cameraBotSchema:()=>Ee,daemonConfigSchema:()=>Ce,eventSubscriptionSchema:()=>ke,expandEnvVars:()=>A,loadDaemonConfig:()=>en,membersConfigSchema:()=>_e,peopleConfigSchema:()=>Re,personSchema:()=>ve,requestStatusConfigSchema:()=>Ae,requestsConfigSchema:()=>Te,validateWorkspaces:()=>tn});import{z as e}from"zod";import{readFileSync as he,existsSync as R}from"fs";import{resolve as _}from"path";function jt(r){let n=_(r,".env");if(!R(n))return;let t=he(n,"utf-8");for(let a of t.split(`
+`)){let o=a.trim();if(!o||o.startsWith("#"))continue;let i=o.indexOf("=");if(i===-1)continue;let l=o.slice(0,i).trim(),u=o.slice(i+1).trim();process.env[l]||(process.env[l]=u)}}function A(r){if(typeof r=="string")return r.replace(/\$\{(\w+)\}/g,(n,t)=>process.env[t]||"");if(Array.isArray(r))return r.map(A);if(r!==null&&typeof r=="object"){let n={};for(let[t,a]of Object.entries(r))n[t]=A(a);return n}return r}function Qt(r,n){let t=[],a=new Set;for(let o of r){let i=o.path.join("."),l=/^channels\.telegram\.accounts\.([^.]+)\.token$/.exec(i);if(l&&o.message.toLowerCase().includes("required")){let u=l[1],f=`tg:${u}`;if(a.has(f))continue;a.add(f),t.push(`Hint: Telegram account "${u}" is enabled but has no bot token.
+  Either:
+    A) Open ${n} and set channels.telegram.accounts.${u}.token to your bot token (or "\${TG_${u.toUpperCase()}_BOT_TOKEN}" + the matching .env entry).
+    B) If you don't need Telegram on this instance, remove the entire "telegram" block under "channels" (or set channels.telegram.enabled to false AND drop accounts.${u}).`)}}return t}function en(r){let n=r?[r]:[_(process.cwd(),"agentx.json"),_(process.cwd(),".agentx/config.json")];jt(process.cwd());let t,a;for(let u of n)if(R(u)){t=he(u,"utf-8"),a=u;break}if(!t||!a)throw new Error(`No config found. Create agentx.json or .agentx/config.json
+Searched: ${n.join(", ")}`);let o;try{o=JSON.parse(t)}catch(u){throw new Error(`Invalid JSON in ${a}: ${u.message}`)}let i=A(o),l=Ce.safeParse(i);if(!l.success){let u=l.error.issues.map(O=>`  ${O.path.join(".")}: ${O.message}`).join(`
+`),f=Qt(l.error.issues,a),p=f.length?`
+
+${f.join(`
+
+`)}`:"";throw new Error(`Config validation failed (${a}):
+${u}${p}`)}return l.data}function tn(r){let n=[];for(let[t,a]of Object.entries(r.agents)){if(!R(a.workspace)){n.push(`Agent "${t}": workspace not found at ${a.workspace}`);continue}if(a.tier==="claude-code"){let l=_(a.workspace,".claude");R(l)||n.push(`Agent "${t}": no .claude/ directory in workspace ${a.workspace}. Claude Code native features (hooks, MCP, skills) won't be available.`)}let o=a.provider||"claude",i=r.providers[o];!["claude-code","codex-cli","opencode"].includes(a.tier)&&(!i||!i.apiKey)&&n.push(`Agent "${t}": provider "${o}" has no API key configured. Set providers.${o}.apiKey in config or use a CLI-backed tier ("claude-code", "codex-cli", or "opencode").`)}for(let[t,a]of Object.entries(r.crons))r.agents[a.agent]||n.push(`Cron "${t}": references unknown agent "${a.agent}"`);if(r.channels.telegram.enabled)for(let[t,a]of Object.entries(r.channels.telegram.accounts))r.agents[a.agentBinding]||n.push(`Telegram account "${t}": references unknown agent "${a.agentBinding}"`);return n}var Lt,Ot,$t,Nt,qt,Dt,Pt,ye,xe,v,Se,ke,Mt,Bt,Ee,Ut,Ft,Ht,zt,Wt,Kt,Xt,Zt,Gt,we,Yt,Vt,Jt,Te,ve,Re,_e,Ae,Ie,Ce,rn=g(()=>{B();H();Le();K();Z();V();ee();be();Lt=e.object({apiKey:e.string().optional(),defaultModel:e.string().optional(),baseUrl:e.string().optional(),thinking:e.boolean().optional()}),Ot=e.object({type:e.literal("stdio").optional(),command:e.string(),args:e.array(e.string()).default([]),env:e.record(e.string(),e.string()).optional()}),$t=e.object({type:e.literal("http"),url:e.string().url(),headers:e.record(e.string(),e.string()).optional()}),Nt=e.union([$t,Ot]),qt=e.object({tokenEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),privateAppTokenEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),apiKeyEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),refreshTokenEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),clientIdEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),clientSecretEnv:e.string().regex(/^[A-Z][A-Z0-9_]*$/).optional(),auth:e.literal("keyring").optional(),sessionDir:e.string().optional()}).strict(),Dt=e.object({kind:e.string().min(1),label:e.string().min(1),credentials:qt.default({}),metadata:e.record(e.string(),e.union([e.string(),e.number(),e.boolean()])).default({}),enabled:e.boolean().default(!0)}),Pt=["telegram-bot","whatsapp","gitlab-user","github-user","gmail","hotmail","smtp","hubspot","salesforce","pipedrive","odoo","trello","linear","asana","jira","notion","stripe","sentry","vercel","twilio","custom"],ye=e.enum(["system","elevenlabs"]),xe=e.union([e.string(),e.record(e.string(),e.string())]),v=e.string().superRefine((r,n)=>{let t=W(r);t&&n.addIssue({code:e.ZodIssueCode.custom,message:`shortcut ${t}`})}),Se=e.object({provider:ye.optional(),system:xe.optional(),fallbacks:e.array(e.string().min(1)).optional(),elevenlabsVoiceId:e.string().optional(),gender:e.enum(["female","male","neutral"]).optional(),style:e.string().optional(),intro:e.string().optional(),narrate:e.enum(["off","on","all"]).optional(),rate:e.number().min(.75).max(1.5).optional(),priority:e.enum(["high","normal","low"]).optional(),hotkey:v.optional()}),ke=e.object({kinds:e.array(e.string().min(1)).min(1),agents:e.array(e.string().min(1)).optional(),nodes:e.array(e.string().min(1)).optional(),match:e.string().min(1).optional(),delivery:e.enum(["pull","digest","wake"]).default("pull"),maxPerHour:e.number().int().min(1).max(60).default(4)}),Mt=e.object({name:e.string(),workspace:e.string(),tier:e.enum(["claude-code","codex-cli","opencode","sdk","orchestrator"]).default("claude-code"),provider:e.string().optional(),model:e.string().optional(),systemPrompt:e.string().optional(),mentions:e.array(e.string()).default([]),intents:e.array(e.string()).default([]),maxDelegationDepth:e.number().int().min(0).max(50).default(5),mcp:e.record(e.string(),Nt).optional(),codegraph:e.boolean().default(!1),contextStrategy:e.enum(["layered","planner"]).optional(),contextReferences:e.boolean().default(!1),richMessages:e.boolean().default(!0),maxConcurrent:e.number().default(1),maxExecutionMinutes:e.number().int().min(1).max(240).default(20),preSpawnTimeoutSec:e.number().int().min(10).max(3600).default(300),drainTimeoutSeconds:e.number().int().min(0).max(86400).optional(),permissionMode:e.string().default("default"),billing:e.enum(["subscription","api"]).default("subscription"),toolUseRequired:e.array(e.string()).default([]),gitlabAutoReply:e.boolean().optional(),persistentProcess:e.boolean().default(!1),queueMode:e.enum(["collect","followup","drop"]).default("collect"),heartbeat:e.object({enabled:e.boolean().default(!1),intervalMinutes:e.number().default(30),prompt:e.string().default("Check inbox, pending tasks, and system health. Report anything that needs attention."),channel:e.string().default("heartbeat")}).default({}),access:e.enum(["private","public"]).default("private"),admin:e.boolean().optional(),subscriptions:e.array(ke).default([]),integrations:e.array(Dt).default([]),voice:Se.optional(),presence:e.object({color:e.string().regex(/^#[0-9a-fA-F]{6}$/).optional(),palette:e.enum(X).optional(),initial:e.string().max(2).optional(),label:e.string().optional(),allowActions:e.boolean().optional()}).optional()}),Bt=e.object({token:e.string(),agentBinding:e.string(),allowFrom:e.array(e.string()).optional(),pollInbound:e.boolean().default(!0)}),Ee=e.object({frameIntervalSeconds:e.number().int().min(0).max(3600).default(0),maxSessionMinutes:e.number().int().min(1).max(240).default(10),maxFrameEdge:e.number().int().min(160).max(3840).default(1024),keepFrames:e.boolean().default(!1)}).default({}),Ut=e.object({telegram:e.object({enabled:e.boolean().default(!1),accounts:e.record(e.string(),Bt).default({}),policy:e.object({dm:e.enum(["pair","block"]).default("pair"),group:e.enum(["mention-required","all"]).default("mention-required"),allowFrom:e.array(e.string()).optional()}).default({})}).default({}),whatsapp:e.object({enabled:e.boolean().default(!1),sessionDir:e.string().default(".agentx/whatsapp-sessions"),defaultAgent:e.string().optional(),allowFrom:e.array(e.string()).optional(),routes:e.array(e.object({contact:e.string().optional(),group:e.string().optional(),agent:e.string()})).default([]),ingest:e.object({enabled:e.boolean().default(!1),mode:e.enum(["metadata-only","messages"]).default("metadata-only"),allowContacts:e.array(e.string()).default([]),allowGroups:e.array(e.string()).default([]),denyContacts:e.array(e.string()).default([]),denyGroups:e.array(e.string()).default([]),messageCap:e.number().int().min(1).max(500).default(50),historyDays:e.number().int().min(1).max(365).default(30),contactRefreshDays:e.number().int().min(1).max(90).default(7),throttle:e.object({minMsBetweenCalls:e.number().int().min(100).default(1500),maxCallsPerMinute:e.number().int().min(1).default(20),maxChatsPerSweep:e.number().int().min(1).default(25)}).default({}),retentionDays:e.number().int().min(0).default(0)}).default({})}).default({}),gitlab:e.object({enabled:e.boolean().default(!1),webhookPort:e.number().default(18810),webhookSecret:e.string().optional(),host:e.string().default("https://gitlab.com"),token:e.string().optional(),autoReplyLegacy:e.boolean().default(!0),routes:e.array(e.object({project:e.string(),agent:e.string()})).default([]),agentMappings:e.array(e.object({agentId:e.string(),gitlabUsernames:e.array(e.string()).default([]),keywords:e.array(e.string()).default([]),token:e.string().optional(),node:e.string().optional()})).default([]),agentUsernamePrefixes:e.array(e.string().min(1)).default([])}).default({}),github:e.object({enabled:e.boolean().default(!1),autoReplyLegacy:e.boolean().default(!0),token:e.string().optional(),tokenFile:e.string().optional(),appId:e.number().optional(),clientId:e.string().optional(),privateKeyFile:e.string().optional(),webhookSecret:e.string().optional(),routes:e.array(e.object({repo:e.string(),agent:e.string()})).default([]),agentMappings:e.array(e.object({agentId:e.string(),githubUsernames:e.array(e.string()).default([]),token:e.string().optional(),tokenFile:e.string().optional(),node:e.string().optional()})).default([])}).default({}),ntfy:e.object({enabled:e.boolean().default(!1),server:e.string().default("https://ntfy.sh"),topic:e.string().optional(),token:e.string().optional(),defaultPriority:e.number().int().min(1).max(5).default(3),defaultTitle:e.string().optional()}).default({}),push:e.object({enabled:e.boolean().default(!1),keysFile:e.string().default(".agentx/push-keys.json"),subject:e.string().regex(/^(mailto:|https:\/\/)/,"must start with mailto: or https://").optional(),relayTo:e.string().optional(),ttlSeconds:e.number().int().min(0).max(2419200).default(86400),keepRecent:e.number().int().min(0).max(1e3).default(50),allowedHosts:e.array(e.string().min(1)).default(["fcm.googleapis.com","push.services.mozilla.com","push.apple.com","notify.windows.com"])}).default({}),webrtc:e.object({enabled:e.boolean().default(!1),stunServers:e.array(e.string()).default(["stun:stun.l.google.com:19302"]),turnServers:e.array(e.object({urls:e.string(),username:e.string().optional(),credential:e.string().optional()})).default([]),allowedCallers:e.array(e.string()).default([]),ringNotify:e.array(e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()})).default([]),callUrlBase:e.string().optional(),bot:e.object({enabled:e.boolean().default(!1),defaultAgentId:e.string().optional(),whisperBackend:e.enum(["auto","mlx","openai"]).default("auto"),whisperModel:e.string().optional(),whisperLanguage:e.string().default("auto"),mlxBinary:e.string().optional(),transcriptChannel:e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()}).optional(),maxCallMinutes:e.number().int().min(1).max(240).default(30)}).default({}),camera:e.object({width:e.number().int().min(160).max(3840).default(1280),height:e.number().int().min(120).max(2160).default(720),frameRate:e.number().int().min(1).max(60).default(15),maxSeconds:e.number().int().min(10).max(7200).default(600),bot:Ee}).default({})}).default({})}),Ft=e.object({enabled:e.boolean().default(!0),schedule:e.string(),timezone:e.string().default("UTC"),agent:e.string(),prompt:e.string().default(""),command:e.string().optional(),timeout:e.number().default(600),model:e.string().optional(),maxOutputTokens:e.number().int().min(50).max(8e3).optional(),autonomy:$.optional(),onError:e.union([e.enum(["log","notify","disable"]),e.array(e.enum(["log","notify","disable"]))]).default("log").transform(r=>Array.isArray(r)?r:[r]),notify:e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()}).optional(),fireToken:e.string().optional(),createdBy:e.string().optional(),approval:e.object({action:e.enum(["create","delete"]),requestedBy:e.string(),requestedAt:e.string()}).optional()}).refine(r=>!!(r.command?.trim()||r.prompt?.trim()),{message:"a cron needs either a prompt (dispatch an agent) or a command (run it directly)"}).refine(r=>!(r.command?.trim()&&r.autonomy&&r.autonomy!=="act"),{message:"autonomy applies to agent routines; a command cron runs no agent (remove autonomy or the command)"}),Ht=e.object({name:e.string(),triggers:e.array(e.object({pattern:e.string(),channel:e.string().optional()})),allowedContacts:e.array(e.string()).optional(),agent:e.string(),prompt:e.string(),schedule:e.string().optional(),timezone:e.string().default("UTC"),notify:e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()}).optional()}),zt=e.object({url:e.string(),name:e.string(),token:e.string().optional()}),Wt=e.object({name:e.string(),agent:e.string(),enabled:e.boolean().default(!0)}),Kt=e.object({enabled:e.boolean().default(!1),peers:e.array(zt).default([]),inboxes:e.array(Wt).default([]),discovery:e.enum(["static","mdns"]).default("static"),healthCheck:e.object({interval:e.number().default(60),timeout:e.number().default(10)}).default({}),feed:e.object({enabled:e.boolean().default(!0),skipTypes:e.array(e.string().min(1)).default(["task:step"])}).default({}),delegation:e.object({asyncWhenHuman:e.boolean().default(!0),timeoutMinutes:e.number().int().min(1).max(240).default(30)}).default({})}),Xt=e.object({enabled:e.boolean().default(!1),baseDir:e.string().default(".agentx/graph"),draftAgent:e.string().optional(),reviewAgent:e.string().optional(),autoApproveStructure:e.enum(["strict","extend-leaves","any"]).default("extend-leaves"),autoApproveConfidence:e.number().min(0).max(1).default(1),classifierModel:e.string().default("claude-haiku-4-5-20251001"),retrievalWeights:e.object({graph:e.number().min(0).default(.6),bm25:e.number().min(0).default(.4)}).default({})}).default({}),Zt=e.object({mode:e.enum(["off","shadow","active"]).default("off"),backend:e.string().optional(),model:e.string().optional(),timeoutMs:e.number().int().min(100).default(1e4),temperature:e.number().min(.01).default(1),explore:e.number().min(0).max(1).default(.15),holdout:e.number().min(0).max(1).optional()}).default({}),Gt=e.object({enabled:e.boolean().default(!1),dbPath:e.string().default(".agentx/decisions/decisions.sqlite"),redactState:e.boolean().default(!1),keepStateRows:e.number().int().min(0).default(2e3),defaultBackend:e.string().default("local"),backends:e.object({local:e.object({provider:e.string().default("claude-code"),model:e.string().default("claude-haiku-4-5-20251001"),structureMode:e.enum(["auto","tool","text"]).default("auto"),normalizeProbabilities:e.boolean().default(!0),nRetryMalformedStructure:e.number().int().min(0).max(3).default(1),maxStateChars:e.number().int().min(500).default(24e3)}).default({}),simpleJev:e.object({baseUrl:e.string().default("http://127.0.0.1:8000/v1"),model:e.string().optional(),apiKeyEnv:e.string().optional(),timeoutMs:e.number().int().min(100).default(3e4),maxStateChars:e.number().int().min(500).default(6e3),maxChoiceOptions:e.number().int().min(2).max(255).default(50)}).default({}),jev:e.object({baseUrl:e.string().default("https://openrouter.ai/api/alpha"),path:e.string().default("/decisions"),model:e.string().default("jev-latest"),apiKeyEnv:e.string().default("OPENROUTER_API_KEY"),timeoutMs:e.number().int().min(100).default(3e4),maxStateChars:e.number().int().min(500).default(9e4),maxChoiceOptions:e.number().int().min(2).max(255).default(255)}).default({}),typesafe:e.object({baseUrl:e.string().default("https://api.typesafe.ai/v1"),path:e.string().default("/systemone"),model:e.string().default("jev-latest"),apiKeyEnv:e.string().default("TYPESAFE_API_KEY"),timeoutMs:e.number().int().min(100).default(3e4),maxStateChars:e.number().int().min(500).default(9e4),maxChoiceOptions:e.number().int().min(2).max(255).default(255)}).default({})}).default({}),seats:e.record(e.string(),Zt).default({}),routing:e.object({cheapModel:e.string().optional(),cheapModels:e.object({"claude-code":e.string().optional(),"codex-cli":e.string().optional()}).optional()}).default({})}).default({}),we=e.object({allow:e.array(e.string()).default([]),maxPerHour:e.number().int().min(1).max(60).default(3),ringSeconds:e.number().int().min(10).max(300).default(45),maxCallMinutes:e.number().int().min(1).max(240).default(30),ringSound:e.string().regex(/^[\w -]+$/).default("Submarine"),summary:e.boolean().default(!0)}).default({}),Yt=e.object({longTaskThreshold:e.number().default(30),destination:e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()}).optional(),channel:e.string().optional(),on:e.object({taskComplete:e.boolean().default(!0),taskError:e.boolean().default(!0),taskQueued:e.boolean().default(!1)}).default({}),local:e.object({banner:e.boolean().default(!0),sound:e.boolean().default(!0),soundName:e.string().regex(/^[\w -]+$/).default("Glass"),volume:e.number().min(0).max(1).default(.4),icon:e.string().optional()}).default({})}).default({}),Vt=e.object({x:e.number(),y:e.number(),width:e.number().positive(),height:e.number().positive()}),Jt=e.object({maxPixels:e.number().int().positive().default(12e5),timeoutMs:e.number().int().positive().default(5e3),intervalMs:e.number().int().positive().default(100),changeThreshold:e.number().min(0).max(1).default(.015),stableMs:e.number().int().nonnegative().default(400),regions:e.record(e.string().regex(/^[a-z][\w-]*$/),Vt).default({}),buffer:e.object({enabled:e.boolean().default(!1),seconds:e.number().positive().max(120).default(10),fps:e.number().positive().max(10).default(2),region:e.string().default("screen"),maxPixels:e.number().int().positive().default(3e5)}).default({})}).default({}),Te=e.object({enabled:e.boolean().default(!1),channels:e.array(e.string().min(1)).default([]),from:e.array(e.string().regex(/^[a-z0-9_-]+:\S+$/i,"use channel:id, for example telegram:123456789")).default([]),staleAfterHours:e.number().positive().max(24*365).default(24),retentionDays:e.number().positive().max(3650).default(90)}).default({}),ve=e.object({id:e.string().regex(/^[a-z0-9][a-z0-9_-]{0,39}$/,"lower-case letters, digits, - and _"),name:e.string().min(1).max(80),role:e.enum(["owner","member","guest"]).default("member"),identities:e.array(e.string().regex(/^[A-Za-z][\w-]*:\S.*$/,"write it as channel:id")).default([]),agents:e.array(e.string().min(1)).default([])}),Re=e.array(ve).default([]).superRefine((r,n)=>{let t=pe(r);t&&n.addIssue({code:e.ZodIssueCode.custom,message:t})}),_e=e.object({logRetentionDays:e.number().int().min(1).max(3650).default(90)}).default({}),Ae=e.object({channels:e.array(e.string().min(1)).default([])}).default({}),Ie=e.object({defaultExpiryDays:e.number().positive().max(365).default(3),maxExpiryDays:e.number().positive().max(365).default(30),laterHours:e.number().positive().max(24*30).default(24),notifyAgent:e.boolean().default(!0),digest:e.object({enabled:e.boolean().default(!0),time:e.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/,"use HH:MM, 24-hour").default("09:00"),timezone:e.string().refine(r=>{try{return new Intl.DateTimeFormat("en-US",{timeZone:r}),!0}catch{return!1}},"unknown timezone").optional(),destination:e.object({channel:e.string(),chatId:e.string(),accountId:e.string().optional()}).optional()}).default({}),popup:e.object({enabled:e.boolean().default(!1),style:e.enum(["card","dialog"]).default("card"),theme:e.enum(["system","light","dark"]).default("system"),speak:e.boolean().default(!0),voice:e.string().regex(/^[\w .()-]+$/,"a voice name, as `say -v '?'` lists them").optional(),sound:e.string().regex(/^[\w -]*$/,"a sound name, like chime or Glass").default("chime"),volume:e.number().min(0).max(1).default(.4),timeoutSeconds:e.number().int().min(10).max(3600).default(600)}).default({}),checkin:e.object({enabled:e.boolean().default(!1),times:e.array(e.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/,"use HH:MM, 24-hour")).default(["11:00","14:00","17:00"]),dailyAt:e.string().regex(/^([01]\d|2[0-3]):[0-5]\d$/,"use HH:MM, 24-hour").default("09:00"),timezone:e.string().refine(r=>{try{return new Intl.DateTimeFormat("en-US",{timeZone:r}),!0}catch{return!1}},"unknown timezone").optional(),lists:e.array(e.string().min(1)).default(["Reminders"]),agent:e.string().min(1).optional(),dueWithinHours:e.number().positive().max(24*30).default(24),maxAsksPerPass:e.number().int().min(1).max(20).default(5),composeTimeoutSeconds:e.number().int().min(30).max(3600).default(300)}).default({})}).default({}),Ce=e.object({node:e.object({id:e.string(),name:e.string(),bind:e.string().default("127.0.0.1:18800"),defaultAgent:e.string().optional()}),providers:e.record(e.string(),Lt).default({}),agents:e.record(e.string(),Mt).default({}),channels:Ut.default({}),crons:e.record(e.string(),Ft).default({}),services:e.record(e.string(),Ht).default({}),notifications:Yt,calls:we,whatsappTriage:Q,approvals:Ie,shutdown:e.object({drainTimeoutSeconds:e.number().int().min(0).max(86400).optional(),restart:e.object({allowBy:e.string().optional(),window:e.string().regex(/^\d{1,2}:\d{2}$/,"window must be HH:MM").optional(),windowWaitMinutes:e.number().int().min(1).max(1440).default(180),forbidOnTimeoutRestart:e.boolean().default(!1)}).default({})}).default({}),resume:e.object({enabled:e.boolean().default(!0),maxAgeMinutes:e.number().int().positive().default(30),maxAttempts:e.number().int().min(0).default(1),reportOnlyChannels:e.array(e.string()).default([]),directChannels:e.array(e.string()).default([]),crashLoop:e.object({restarts:e.number().int().positive().default(3),windowMinutes:e.number().positive().default(10)}).default({})}).default({}),requests:Te,people:Re,members:_e,requestStatus:Ae,reminders:e.object({enabled:e.boolean().default(!1),lists:e.array(e.string().min(1)).default(["AgentX"]),pollSeconds:e.number().int().min(15).default(60),lookbackHours:e.number().positive().default(24),command:e.string().min(1).default("remindctl")}).default({}),demo:e.object({startupTimeoutSeconds:e.number().int().positive().max(3600).optional()}).default({}),events:e.object({ringSize:e.number().int().min(1).max(1e5).default(1e3)}).default({}),screen:Jt,mesh:Kt.default({}),meshVoices:e.record(e.string(),Se.omit({rate:!0,priority:!0,hotkey:!0}).extend({name:e.string().optional()})).default({}),voice:e.object({provider:ye.default("system"),fallback:e.enum(["system","none"]).default("system"),system:xe.optional(),locale:e.string().default("en"),listener:e.string().optional(),stt:e.enum(["auto","elevenlabs","local"]).default("auto"),allowUnmeasured:e.boolean().default(!1),spokenMaxChars:e.number().int().min(300).max(1500).default(I),localStt:e.enum(["mlx-whisper","parakeet"]).default("mlx-whisper"),endOfTurn:e.enum(["vad","volume"]).default("vad"),hotkeys:e.object({talk:v.default(S.talk),stop:v.default(S.stop),paste:v.default(S.paste)}).default({}),card:e.object({timeout:e.number().min(0).max(600).default(30),maxHeight:e.number().min(120).max(800).default(320)}).default({})}).default({}),business:M.optional(),boards:U,dashboard:F,graph:Xt,decisions:Gt,workflows:e.object({enabled:e.boolean().default(!1),dir:e.string().default(".agentx/workflows"),n8n:e.object({baseUrl:e.string().default(""),apiKey:e.string().default("")}).default({baseUrl:"",apiKey:""}),matching:e.object({enabled:e.boolean().default(!1),mode:e.enum(["suggest","auto"]).default("suggest"),autoRunThreshold:e.number().min(0).max(1).default(.85),suggestThreshold:e.number().min(0).max(1).default(.65)}).default({}),editor:e.enum(["disabled","readonly","edit"]).default("edit")}).default({}),procedures:e.object({enabled:e.boolean().default(!0),dir:e.string().default(".agentx/procedures"),extraction:e.object({enabled:e.boolean().default(!1),onTaskCompletion:e.boolean().default(!1),minOccurrences:e.number().int().min(2).default(3),sinceDays:e.number().int().min(1).default(7),maxClusters:e.number().int().min(1).default(5),via:e.string().optional()}).default({}),injection:e.object({enabled:e.boolean().default(!0),maxProcedures:e.number().int().min(1).default(2),minScore:e.number().min(0).max(1).default(.5)}).default({})}).default({}),webhooks:e.array(e.object({id:e.string().regex(/^[a-z0-9][a-z0-9_-]*$/,"webhook id must be lowercase slug"),source:e.string().min(1),agentId:e.string(),secretEnv:e.string().optional(),description:e.string().optional(),enabled:e.boolean().default(!0),node:e.string().optional(),triggers:e.record(e.string(),e.string()).optional(),defaultWorkflow:e.string().optional()})).default([]),session:e.object({staleMinutes:e.number().int().min(1).max(1440).default(720),maxTurnsPerSession:e.number().int().min(2).max(200).default(40),tierTwoThresholdTokens:e.number().int().min(5e4).max(2e5).default(18e4),contextStrategy:e.enum(["layered","planner"]).default("layered"),maxClaudeCodeDispatchesPerHour:e.number().int().min(1).max(1e4).default(80),maxClaudeCodeDispatchesPer5h:e.number().int().min(1).max(5e4).default(180),continuityStateTurns:e.number().int().min(0).max(5).default(0)}).default({}),plugins:e.array(e.string()).default([]),processPool:e.object({maxIdleSeconds:e.number().int().min(5).max(86400).default(30),maxAgeSeconds:e.number().int().min(60).max(86400).default(2700),sweepIntervalSeconds:e.number().int().min(1).max(300).default(5)}).default({})})});export{ln as a,dn as b,H as c,nt as d,cn as e,S as f,K as g,y as h,X as i,at as j,gn as k,Z as l,G as m,Y as n,hn as o,V as p,Q as q,ee as r,k as s,m as t,En as u,ne as v,re as w,vn as x,Rn as y,T as z,_n as A,oe as B,le as C,wt as D,Ln as E,ce as F,On as G,vt as H,$n as I,Nn as J,fe as K,j as L,me as M,It as N,Bn as O,be as P,Pt as Q,ke as R,Ee as S,we as T,Te as U,ve as V,Re as W,_e as X,Ae as Y,Ie as Z,Ce as _,A as $,en as aa,tn as ba,nn as ca,rn as da};
+//# sourceMappingURL=chunk-4LLSTP5G.js.map