agentix-cli 0.91.1 → 0.92.1

package/dist/{chunk-3SZ4CU6G.js → chunk-DG5I6PPM.js}

@@ -1,4 +1,4 @@
-var c={};function v(r){c=r}function w(){return c}var y=`<link rel="preconnect" href="https://fonts.googleapis.com">
+var g={};function v(t){g=t}function w(){return g}var y=`<link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800&family=Roboto+Mono:wght@400;500;600&display=swap" rel="stylesheet">
 <script>(function(){try{var t=localStorage.getItem('ax-theme');if(t!=='light'&&t!=='dark'){t='dark';localStorage.setItem('ax-theme',t)}document.documentElement.setAttribute('data-theme',t)}catch(e){document.documentElement.setAttribute('data-theme','dark')}})();</script>`,k=`
@@ -268,32 +268,34 @@ var c={};function v(r){c=r}function w(){return c}var y=`<link rel="preconnect" h
     document.addEventListener('DOMContentLoaded', wire);
   } else { wire(); }
 })();
-</script>`;function S(r){let t=o=>typeof o=="string"&&o?o:null;return{node:t(r?.node?.id),version:t(r?.version),commit:t(r?.commit),startedAt:t(r?.startedAt),diskNewer:r?.build?.newer===!0}}var b='<span class="ax-build" hidden></span>';function E(r){let t=r.peers&&r.peers.length>0?r.peers:[{id:"local",name:"this daemon",dashboardUrl:"",primary:!0}],o=r.currentPeerId||t.find(e=>e.primary)?.id||t[0].id,p=t.find(e=>e.id===o)||t[0],u=t.map(e=>{let s=e.id===o,n=e.primary?' <span style="color:var(--ax-muted);font-size:10px">\xB7 primary</span>':"",i=!!e.tokenScope&&!e.primary,l=i?"#":e.dashboardUrl?`${e.dashboardUrl.replace(/\/+$/,"")}/admin`:"#",d=i?` data-peer-id="${a(e.id)}" data-peer-action="proxy"`:e.primary?' data-peer-id="primary" data-peer-action="proxy"':"",m=i?'<div class="url" style="color:var(--ax-accent)">manage from this dashboard \u2713</div>':e.tokenScope?`<div class="url">${a(e.tokenScope)}</div>`:e.dashboardUrl?'<div class="url" style="color:var(--ax-muted)">(open peer dashboard \u2197)</div>':"";return`<a href="${a(l)}" class="${s?"is-current":""}"${d}>
-      <div class="row"><span class="dot"></span><span>${a(e.name)}${n}</span></div>
-      ${e.dashboardUrl?`<div class="url">${a(e.dashboardUrl)}</div>`:""}
-      ${m}
+</script>`;function $(t){let a=e=>typeof e=="string"&&e?e:null;return{node:a(t?.node?.id),version:a(t?.version),commit:a(t?.commit),startedAt:a(t?.startedAt),diskNewer:t?.build?.newer===!0}}var f='<span class="ax-build" hidden></span>';function S(t){let a=t.peers&&t.peers.length>0?t.peers:[{id:"local",name:"this daemon",dashboardUrl:"",primary:!0}],e=t.currentPeerId||a.find(r=>r.primary)?.id||a[0].id,c=a.find(r=>r.id===e)||a[0],h=a.map(r=>{let p=r.id===e,o=r.primary?' <span style="color:var(--ax-muted);font-size:10px">\xB7 primary</span>':"",l=!!r.tokenScope&&!r.primary,m=l?"#":r.dashboardUrl?`${r.dashboardUrl.replace(/\/+$/,"")}/admin`:"#",u=l?` data-peer-id="${d(r.id)}" data-peer-action="proxy"`:r.primary?' data-peer-id="primary" data-peer-action="proxy"':"",b=l?'<div class="url" style="color:var(--ax-accent)">manage from this dashboard \u2713</div>':r.tokenScope?`<div class="url">${d(r.tokenScope)}</div>`:r.dashboardUrl?'<div class="url" style="color:var(--ax-muted)">(open peer dashboard \u2197)</div>':"";return`<a href="${d(m)}" class="${p?"is-current":""}"${u}>
+      <div class="row"><span class="dot"></span><span>${d(r.name)}${o}</span></div>
+      ${r.dashboardUrl?`<div class="url">${d(r.dashboardUrl)}</div>`:""}
+      ${b}
     </a>`}).join(""),x=`<div class="ax-mesh-sel" aria-haspopup="menu">
     <span class="lbl">managing</span>
-    <span class="name">${a(p.name)}</span>
+    <span class="name">${d(c.name)}</span>
     <span class="chev">\u25BE</span>
-    <div class="ax-mesh-menu" role="menu">${u}</div>
-  </div>`,h=[{name:"Mesh",tabs:[{id:"live",label:"Live",href:"/live"},{id:"mesh",label:"Operations",href:"/mesh"},{id:"monitor",label:"Monitor",href:"/monitor"},{id:"approvals",label:"Approvals",href:"/approvals"},{id:"people",label:"People",href:"/people"},{id:"activity",label:"Activity",href:"/activity"},{id:"workflows",label:"Workflows",href:"/workflows"},{id:"admin",label:"Settings",href:"/admin"}]}].map(e=>{let s=e.tabs.map(n=>{let i=n.id===r.activeTab?"ax-topbar__tab is-active":"ax-topbar__tab",l=n.external?' target="_blank" rel="noopener"':"",d=n.external?' <span style="font-size:9px;opacity:0.6">\u2197</span>':"";return`<a href="${n.href}" class="${i}"${l}>${n.label}${d}</a>`}).join("");return`<div class="ax-topbar__group" title="${a(e.name)} tier"><span class="ax-topbar__group-label">${a(e.name)}</span>${s}</div>`}).join("");return`<header class="ax-topbar">
+    <div class="ax-mesh-menu" role="menu">${h}</div>
+  </div>`,i=[{name:"Mesh",tabs:[{id:"live",label:"Live",href:"/live"},{id:"mesh",label:"Operations",href:"/mesh"},{id:"monitor",label:"Monitor",href:"/monitor"},{id:"approvals",label:"Approvals",href:"/approvals"},{id:"people",label:"People",href:"/people"},{id:"activity",label:"Activity",href:"/activity"},{id:"workflows",label:"Workflows",href:"/workflows"},{id:"admin",label:"Settings",href:"/admin"}]}].map(r=>{let p=r.tabs.map(o=>{let l=o.id===t.activeTab?"ax-topbar__tab is-active":"ax-topbar__tab",m=o.external?' target="_blank" rel="noopener"':"",u=o.external?' <span style="font-size:9px;opacity:0.6">\u2197</span>':"";return`<a href="${o.href}" class="${l}"${m}>${o.label}${u}</a>`}).join("");return`<div class="ax-topbar__group" title="${d(r.name)} tier"><span class="ax-topbar__group-label">${d(r.name)}</span>${p}</div>`}).join("");return`<header class="ax-topbar">
   <div class="ax-topbar__left">
     <div class="ax-brand">
       <span class="ax-brand__mark">AX</span>
       <span class="ax-brand__name">AgentX</span>
-      <span class="ax-brand__subtitle">${a(r.subtitle)}</span>
+      <span class="ax-brand__subtitle">${d(t.subtitle)}</span>
     </div>
-    <nav class="ax-topbar__tabs">${h}</nav>
+    <nav class="ax-topbar__tabs">${i}</nav>
   </div>
   <div class="ax-topbar__right">
-    ${r.rightExtras||""}
-    ${b}
+    ${t.rightExtras||""}
+    ${f}
     ${x}
     <div class="ax-theme-switch" role="tablist" aria-label="Theme">
       <button data-theme-opt="dark">Dark</button>
       <button data-theme-opt="light">Light</button>
     </div>
   </div>
-</header>${r.subheader?`<div class="ax-subheader">${r.subheader}</div>`:""}`}function a(r){return String(r||"").replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t])}function A(r){return String(r??"").replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t])}export{A as a,v as b,w as c,y as d,k as e,_ as f,S as g,E as h};
-//# sourceMappingURL=chunk-3SZ4CU6G.js.map
+</header>${t.subheader?`<div class="ax-subheader">${t.subheader}</div>`:""}`}function d(t){return String(t||"").replace(/[&<>"']/g,a=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[a])}function P(t,a={}){let e=String(t??"").replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#39;");e=e.replace(/```(\w*)\n([\s\S]*?)```/g,(s,i,n)=>`<pre><code class="lang-${i}">${n.trim()}</code></pre>`),e=e.replace(/`([^`]+)`/g,"<code>$1</code>");let c=[],h=[],x=a.images?"axpic"+Math.random().toString(36).slice(2,10)+"n":"";if(a.images){let s=typeof a.images=="number"?a.images:8;e=e.replace(/<code[^>]*>[\s\S]*?<\/code>|!\[([^\]\n]*)\]\(([^)\s]+)\)/g,(i,n,r)=>n===void 0||r===void 0?i:/^https?:\/\/[^\s]+$/i.test(r)?c.length>=s?`[${n||r}](${r})`:(c.push(`<img src="${r}" alt="${n}" loading="lazy" referrerpolicy="no-referrer">`),h.push(n),x+(c.length-1)+"z"):n)}if(e=e.replace(/^(\|.+\|)\n(\|[-| :]+\|)\n((?:\|.+\|\n?)*)/gm,(s,i,n,r)=>{let p=i.split("|").filter(l=>l.trim()).map(l=>`<th>${l.trim()}</th>`).join(""),o=r.trim().split(`
+`).map(l=>`<tr>${l.split("|").filter(u=>u.trim()).map(u=>`<td>${u.trim()}</td>`).join("")}</tr>`).join("");return`<table><thead><tr>${p}</tr></thead><tbody>${o}</tbody></table>`}),e=e.replace(/^#### (.+)$/gm,"<h4>$1</h4>"),e=e.replace(/^### (.+)$/gm,"<h3>$1</h3>"),e=e.replace(/^## (.+)$/gm,"<h2>$1</h2>"),e=e.replace(/^# (.+)$/gm,"<h1>$1</h1>"),e=e.replace(/\*\*(.+?)\*\*/g,"<strong>$1</strong>"),e=e.replace(/\*(.+?)\*/g,"<em>$1</em>"),e=e.replace(/\[\[([^\]]+)\]\]/g,(s,i)=>{let[n,r]=i.split("|",2),p=n.trim().replace(/^\//,""),o=(r||n).trim();return a.wikilink?a.wikilink(p,o):o}),e=e.replace(/\[([^\]]+)\]\(([^)]+)\)/g,'<a href="$2" target="_blank" rel="noopener noreferrer">$1</a>'),e=e.replace(/^(>\s?.*(?:\n>\s?.*)*)/gm,s=>`<blockquote>${s.split(`
+`).map(n=>n.replace(/^>\s?/,"")).join("<br>")}</blockquote>`),e=e.replace(/^[-*] \[( |x|X)\] (.+)$/gm,(s,i,n)=>`<li class="task">${i.toLowerCase()==="x"?"\u2611":"\u2610"} ${n}</li>`),e=e.replace(/^[-*] (.+)$/gm,"<li>$1</li>"),e=e.replace(/^\d+\. (.+)$/gm,'<li data-ordered="1">$1</li>'),e=e.replace(/(<li data-ordered="1">.*?<\/li>(?:\n?<li data-ordered="1">.*?<\/li>)*)/g,"<ol>$1</ol>"),e=e.replace(/((?:<li(?! data-ordered)[^>]*>.*?<\/li>\n?)+)/g,"<ul>$1</ul>"),e=e.replace(/ data-ordered="1"/g,""),e=e.replace(/^---$/gm,"<hr>"),e=e.replace(/\n\n+/g,"</p><p>"),e=`<p>${e}</p>`,e=e.replace(/<p>\s*(<(?:h[1-6]|ul|ol|blockquote|table|pre|hr)\b[^>]*>[\s\S]*?<\/(?:h[1-6]|ul|ol|blockquote|table|pre)>)\s*<\/p>/g,"$1"),e=e.replace(/<p>\s*<hr>\s*<\/p>/g,"<hr>"),e=e.replace(/<p>\s*<\/p>/g,""),e=e.replace(/<p>(<(?:h[1-4]|pre|table|ul|hr|div))/g,"$1"),e=e.replace(/(<\/(?:h[1-4]|pre|table|ul|hr|div)>)<\/p>/g,"$1"),e=e.replace(/<p>\s*<\/p>/g,""),c.length){let s=new RegExp(x+"(\\d+)z","g");e=e.split(/(<[^>]*>)/).map(i=>i.charAt(0)==="<"?i.replace(s,(n,r)=>h[Number(r)]):i.replace(s,(n,r)=>c[Number(r)])).join("")}return e}function A(t){return String(t??"").replace(/[&<>"']/g,a=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[a])}export{P as a,A as b,v as c,w as d,y as e,k as f,_ as g,$ as h,S as i};
+//# sourceMappingURL=chunk-DG5I6PPM.js.map

package/dist/chunk-DG5I6PPM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/daemon/topbar.ts","../src/utils/markdown-html.ts","../src/daemon/ui/util.ts"],"sourcesContent":["// --- Shared top-chrome for every dashboard surface ---\n//\n// Four pages render in different files (live + kanban + glossary in\n// board-dashboard.ts, settings in admin-panel.ts) but must share: design\n// tokens, fonts, theme switcher, brand, primary tab nav, and a mesh-node\n// selector. This module exports the CSS + HTML snippets so each page\n// composes exactly the same chrome and we never drift them again.\n//\n// Nothing here is page-specific — callers pass in { activeTab, subtitle,\n// subheader? } and compose their own <main> below.\n\nexport type TopbarTab = \"monitor\" | \"activity\" | \"live\" | \"mesh\" | \"boards\" | \"admin\" | \"graph\" | \"glossary\" | \"workflows\" | \"health\" | \"cost\" | \"wiki\" | \"procedures\" | \"inbox\" | \"projects\" | \"approvals\" | \"people\"\n\nexport interface TopbarPeer {\n  /** Stable id: primary node id, or URL for configured daemons */\n  id: string\n  name: string\n  /** Absolute URL of the peer's dashboard (http://host:port) — selector\n   *  navigates to <url>/admin when switched. */\n  dashboardUrl: string\n  /** True for the node hosting this dashboard (locks the default). */\n  primary?: boolean\n  /** Optional; shown in the dropdown as \"managing via token\" hint. */\n  tokenScope?: string\n}\n\nexport interface TopbarFeatures {\n  /** Show the Team/Business Settings sub-tabs — config.business.enabled. */\n  business?: boolean\n}\n\n// Set once at server start (board-dashboard + daemon both call it).\n//\n// This used to carry `boards` and `workflows` flags that gated top-level\n// tabs. The nav is now fixed (Live, Operations, Settings), so those flags had\n// nothing left to gate and were removed rather than left describing chrome\n// that no longer exists.\nlet topbarFeatures: TopbarFeatures = {}\n\nexport function setTopbarFeatures(features: TopbarFeatures): void {\n  topbarFeatures = features\n}\n\nexport function getTopbarFeatures(): TopbarFeatures {\n  return topbarFeatures\n}\n\nexport interface TopbarOpts {\n  activeTab: TopbarTab\n  /** Text after the brand, e.g. \"Live\" / \"Settings\" / \"Boards\". */\n  subtitle: string\n  /** Optional HTML inserted as a second row under the topbar. */\n  subheader?: string\n  /** Peers to list in the mesh selector. */\n  peers?: TopbarPeer[]\n  /** id of the peer currently being managed — defaults to the primary. */\n  currentPeerId?: string\n  /** Optional right-side HTML added before the theme switcher (clocks,\n   *  connection dots, etc.). */\n  rightExtras?: string\n}\n\n/**\n * Font link tags + tiny inline bootstrap script. Callers drop this in <head>.\n */\n// Fonts degrade to the system stack when the box is offline or air-gapped —\n// the tokens list real fallbacks, so a failed font fetch costs typography,\n// never layout.\n//\n// The theme bootstrap runs before first paint to avoid a flash. A stored\n// \"crt\" from before that theme was removed falls back to dark rather than\n// leaving data-theme set to a value no stylesheet defines.\nexport const TOPBAR_HEAD = `<link rel=\"preconnect\" href=\"https://fonts.googleapis.com\">\n<link rel=\"preconnect\" href=\"https://fonts.gstatic.com\" crossorigin>\n<link href=\"https://fonts.googleapis.com/css2?family=Outfit:wght@400;500;600;700;800&family=Roboto+Mono:wght@400;500;600&display=swap\" rel=\"stylesheet\">\n<script>(function(){try{var t=localStorage.getItem('ax-theme');if(t!=='light'&&t!=='dark'){t='dark';localStorage.setItem('ax-theme',t)}document.documentElement.setAttribute('data-theme',t)}catch(e){document.documentElement.setAttribute('data-theme','dark')}})();</script>`\n\n/**\n * CSS for topbar + subheader + theme switch + mesh selector. No token\n * definitions — those are per-page because each page's CSS block owns its\n * own :root overrides.\n */\nexport const TOPBAR_CSS = `\n.ax-topbar{display:flex;align-items:center;justify-content:space-between;\n  padding:8px 18px;border-bottom:1px solid var(--ax-border);\n  background:var(--ax-bg-elev);position:sticky;top:0;z-index:20;gap:10px;flex-wrap:nowrap}\n.ax-topbar__left{display:flex;align-items:center;gap:18px;min-width:0}\n.ax-brand{display:flex;align-items:center;gap:10px;font-weight:600;letter-spacing:-0.01em;flex-shrink:0}\n.ax-brand__mark{font-family:var(--ax-mono);font-size:12px;padding:2px 8px;\n  border:1px solid var(--ax-border-2);color:var(--ax-accent);border-radius:4px}\n.ax-brand__name{font-size:14px}\n.ax-brand__subtitle{font-size:11px;color:var(--ax-muted);\n  border-left:1px solid var(--ax-border);padding-left:12px;margin-left:4px}\n.ax-topbar__tabs{display:flex;gap:14px;min-width:0;overflow-x:auto;align-items:center}\n/* Tier groups (System / Processes / Procedures) — visual separators\n * mirror the docs/architecture/three-tier.md hierarchy. */\n.ax-topbar__group{display:flex;align-items:center;gap:0;padding:0 4px;\n  border-left:1px solid var(--ax-border);position:relative}\n.ax-topbar__group:first-child{border-left:none;padding-left:0}\n.ax-topbar__group-label{font:inherit;font-family:var(--ax-mono);font-size:9px;\n  letter-spacing:0.08em;text-transform:uppercase;color:var(--ax-muted);\n  padding:0 8px;white-space:nowrap;opacity:0.7}\n.ax-topbar__tab{background:transparent;border:none;color:var(--ax-text-2);\n  padding:8px 12px;font:inherit;cursor:pointer;font-size:12px;text-decoration:none;\n  border-bottom:2px solid transparent;letter-spacing:-0.005em;white-space:nowrap}\n.ax-topbar__tab:hover{color:var(--ax-text)}\n.ax-topbar__tab.is-active{color:var(--ax-text);border-bottom-color:var(--ax-accent)}\n.ax-topbar__right{display:flex;align-items:center;gap:10px;font-size:11px;\n  color:var(--ax-muted);flex-shrink:0}\n.ax-topbar__right .ax-mono{color:var(--ax-text-2)}\n\n/* Running build: version, commit, running since; warns when the code on\n * disk has moved on. */\n.ax-build{display:inline-flex;align-items:center;gap:8px;white-space:nowrap}\n.ax-build[hidden]{display:none}\n/* Two short lines, so the tabs keep their room on a laptop screen. */\n.ax-build__lines{display:flex;flex-direction:column;font-size:10px;line-height:1.3}\n.ax-build__stale{color:var(--ax-warn,var(--ax-accent));border:1px solid currentColor;\n  border-radius:4px;padding:1px 6px}\n\n/* Mesh selector */\n.ax-mesh-sel{position:relative;display:inline-flex;align-items:center;gap:6px;\n  padding:4px 10px;border:1px solid var(--ax-border-2);border-radius:4px;\n  background:var(--ax-surface);cursor:pointer;font:inherit;font-size:11px;\n  color:var(--ax-text-2);white-space:nowrap}\n.ax-mesh-sel:hover{border-color:var(--ax-accent);color:var(--ax-text)}\n.ax-mesh-sel.is-proxy{background:color-mix(in oklch,var(--ax-accent) 14%,var(--ax-surface));\n  border-color:color-mix(in oklch,var(--ax-accent) 45%,var(--ax-border-2));color:var(--ax-accent)}\n.ax-mesh-sel .lbl{font-size:9px;letter-spacing:0.06em;text-transform:uppercase;color:var(--ax-muted);margin-right:2px}\n.ax-mesh-sel .name{font-weight:500;color:var(--ax-text)}\n.ax-mesh-sel .chev{font-size:9px;opacity:0.6;margin-left:2px}\n.ax-mesh-menu{position:absolute;top:calc(100% + 4px);right:0;min-width:240px;\n  background:var(--ax-surface);border:1px solid var(--ax-border-2);\n  border-radius:6px;box-shadow:0 8px 24px rgba(0,0,0,0.4);padding:4px;z-index:30;display:none}\n.ax-mesh-sel.is-open .ax-mesh-menu{display:block}\n.ax-mesh-menu a{display:block;padding:7px 10px;border-radius:4px;text-decoration:none;\n  color:var(--ax-text-2);font-size:12px}\n.ax-mesh-menu a:hover{background:var(--ax-surface-2);color:var(--ax-text)}\n.ax-mesh-menu a.is-current{background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface));\n  color:var(--ax-accent);border:1px solid color-mix(in oklch,var(--ax-accent) 30%,var(--ax-border-2))}\n.ax-mesh-menu a .row{display:flex;align-items:center;gap:8px}\n.ax-mesh-menu a .row .dot{width:6px;height:6px;border-radius:50%;background:var(--ax-accent)}\n.ax-mesh-menu a.is-offline .row .dot{background:var(--ax-border-2)}\n.ax-mesh-menu a .url{font-family:var(--ax-mono);font-size:10px;color:var(--ax-muted);margin-top:2px}\n\n/* Theme switcher segmented control */\n.ax-theme-switch{display:inline-flex;border:1px solid var(--ax-border-2);\n  border-radius:4px;overflow:hidden}\n.ax-theme-switch button{background:transparent;border:none;color:var(--ax-muted);\n  padding:3px 9px;font:inherit;font-size:10px;cursor:pointer;letter-spacing:0.04em;\n  text-transform:uppercase;font-family:var(--ax-mono);border-right:1px solid var(--ax-border-2)}\n.ax-theme-switch button:last-child{border-right:none}\n.ax-theme-switch button:hover{color:var(--ax-text);background:var(--ax-surface-2,var(--ax-surface))}\n.ax-theme-switch button.is-active{color:var(--ax-accent);\n  background:color-mix(in oklch,var(--ax-accent) 12%,var(--ax-surface))}\n\n/* Subheader — page-specific toolbar below the main topbar. Kanban uses it\n * for the board picker + search + filters; others can use it for context\n * bars if they want. */\n.ax-subheader{display:flex;align-items:center;gap:10px;padding:10px 18px;\n  background:var(--ax-bg-elev);border-bottom:1px solid var(--ax-border);\n  flex-wrap:wrap}\n.ax-subheader > * {flex-shrink:0}\n.ax-subheader .spacer{flex:1}`\n\n/**\n * Shared click wiring for the theme switcher + mesh selector. Safe to call\n * multiple times — only binds once per element.\n */\nexport const TOPBAR_SCRIPT = `<script>\n(function(){\n  function wireTheme(){\n    var sw = document.querySelectorAll('[data-theme-opt]');\n    if (!sw.length) return;\n    var current = document.documentElement.getAttribute('data-theme') || 'dark';\n    sw.forEach(function(b){\n      if (b.dataset.wired) return; b.dataset.wired = '1';\n      if (b.getAttribute('data-theme-opt') === current) b.classList.add('is-active');\n      b.addEventListener('click', function(){\n        var t = b.getAttribute('data-theme-opt');\n        document.documentElement.setAttribute('data-theme', t);\n        try { localStorage.setItem('ax-theme', t); } catch (e) {}\n        sw.forEach(function(x){ x.classList.toggle('is-active', x === b); });\n      });\n    });\n  }\n  function currentPeer(){\n    try { return localStorage.getItem('ax-peer') || 'primary'; } catch { return 'primary'; }\n  }\n  function setCurrentPeer(id){\n    try {\n      if (id && id !== 'primary') localStorage.setItem('ax-peer', id);\n      else localStorage.removeItem('ax-peer');\n    } catch {}\n  }\n  function reflectPeerPill(){\n    var sel = document.querySelector('.ax-mesh-sel');\n    if (!sel) return;\n    var cur = currentPeer();\n    sel.classList.toggle('is-proxy', cur !== 'primary');\n    // If a proxy is active, update the visible pill label + highlight.\n    var picked = null;\n    sel.querySelectorAll('.ax-mesh-menu a').forEach(function(a){\n      a.classList.toggle('is-current', a.getAttribute('data-peer-id') === cur || (cur === 'primary' && a.getAttribute('data-peer-id') === 'primary'));\n      if (a.getAttribute('data-peer-id') === cur) picked = a;\n    });\n    if (picked) {\n      var name = picked.querySelector('span'); // first <span> inside .row\n      var visibleName = sel.querySelector('.name');\n      if (name && visibleName) visibleName.textContent = name.textContent.replace(/ · primary/, '');\n    }\n  }\n  function wireMesh(){\n    var sel = document.querySelector('.ax-mesh-sel');\n    if (!sel || sel.dataset.wired) return; sel.dataset.wired = '1';\n    sel.addEventListener('click', function(e){\n      var link = e.target.closest('.ax-mesh-menu a[data-peer-action=\"proxy\"]');\n      if (link) {\n        e.preventDefault();\n        setCurrentPeer(link.getAttribute('data-peer-id'));\n        reflectPeerPill();\n        sel.classList.remove('is-open');\n        // Reload so the admin panel re-reads state from the selected peer.\n        location.reload();\n        return;\n      }\n      if (e.target.closest('.ax-mesh-menu a')) return; // plain navigate anchor\n      sel.classList.toggle('is-open');\n    });\n    document.addEventListener('click', function(e){\n      if (!sel.contains(e.target)) sel.classList.remove('is-open');\n    });\n    reflectPeerPill();\n  }\n  function wireHostRewrite(){\n    try {\n      var h = location.hostname || 'localhost';\n      document.querySelectorAll('.ax-topbar__tab[href*=\"__HOST__\"]').forEach(function(a){\n        a.href = a.getAttribute('href').replace(/__HOST__/g, h);\n      });\n    } catch (e) {}\n  }\n  /**\n   * Make the topbar peer selector actually drive page content. When the\n   * operator picks a non-primary peer, every /api/admin/* request gets an\n   * X-Agentx-Peer header (and every EventSource on that path gets a ?peer=\n   * query, since EventSource can't set headers). The dashboard's existing\n   * proxy handler picks it up and forwards to the chosen peer.\n   *\n   * Without this hook, the activity-graph (and other admin pages) silently\n   * keep showing only the local node's data even after the operator picks\n   * a different peer in the topbar.\n   */\n  function wirePeerProxy(){\n    if (window.__axPeerWired) return; window.__axPeerWired = true;\n    // Path-prefix allowlist for the peer-proxy interceptor. Extend here\n    // when a new admin-side surface needs to follow the mesh selector.\n    // /api/workflows is the workflow dashboard's read/write API — it\n    // lives outside /api/admin for legacy reasons, but the page is part\n    // of the admin surface and should proxy when a non-primary peer is\n    // selected (otherwise the workflows page on Mac shows local-only\n    // YAMLs while the runtime lives on peer).\n    function shouldProxy(url){\n      if (!url) return false;\n      // Admin-side surfaces that follow the mesh selector. Each entry\n      // is a path-prefix match. Extend when a new admin surface lands\n      // outside /api/admin/* but should still proxy when the operator\n      // picks a non-primary peer.\n      //   /api/admin/   — original admin surface (activity, ledger, …)\n      //   /api/workflows — workflow editor + observability page\n      //   /api/agents   — agent dropdowns inside the workflow editor +\n      //                   anywhere else the page asks \"which agents\n      //                   exist on the selected node?\"\n      return url.indexOf('/api/admin/') >= 0\n          || url.indexOf('/api/workflows') >= 0\n          || url.indexOf('/api/agents') >= 0;\n    }\n    var origFetch = window.fetch.bind(window);\n    window.fetch = function(input, init){\n      try {\n        var peer = currentPeer();\n        if (peer && peer !== 'primary') {\n          var url = typeof input === 'string' ? input : (input && input.url) || '';\n          if (shouldProxy(url)) {\n            init = init || {};\n            init.headers = new Headers(init.headers || {});\n            init.headers.set('X-Agentx-Peer', peer);\n          }\n        }\n      } catch (e) {}\n      return origFetch(input, init);\n    };\n    var OrigES = window.EventSource;\n    if (OrigES) {\n      window.EventSource = function(url, cfg){\n        try {\n          var peer = currentPeer();\n          if (peer && peer !== 'primary' && typeof url === 'string' && shouldProxy(url)) {\n            url += (url.indexOf('?') >= 0 ? '&' : '?') + 'peer=' + encodeURIComponent(peer);\n          }\n        } catch (e) {}\n        return new OrigES(url, cfg);\n      };\n      window.EventSource.prototype = OrigES.prototype;\n      window.EventSource.CONNECTING = OrigES.CONNECTING;\n      window.EventSource.OPEN = OrigES.OPEN;\n      window.EventSource.CLOSED = OrigES.CLOSED;\n    }\n  }\n  // wirePeerProxy() is synchronous and DOM-independent — it just wraps\n  // window.fetch + window.EventSource. Fire it IMMEDIATELY (before\n  // DOMContentLoaded) so deferred page bundles that issue their first\n  // fetch on bundle-parse (e.g. the workflow editor's React useEffect)\n  // see the wrapped fetch and pick up the X-Agentx-Peer header. Without\n  // this, the workflow editor's load on Mac:4202 hit local /api/workflows\n  // (instead of proxying to the selected peer), got a 404, and silently\n  // fell back to blank-graph state — looking like a \"new workflow\".\n  wirePeerProxy();\n  // Which build the daemon is running and since when, on every page; says\n  // so when the code on disk is newer. Asked again every minute, so a\n  // rebuild or a restart shows without a reload.\n  function wireBuild(){\n    var el = document.querySelector('.ax-build');\n    if (!el || el.dataset.wired) return; el.dataset.wired = '1';\n    function span(cls, text){ var s = document.createElement('span'); if (cls) s.className = cls; s.textContent = text; return s; }\n    function load(){\n      fetch('/api/node/build').then(function(r){ return r.ok ? r.json() : null; }).then(function(b){\n        if (!b || !b.version) return;\n        el.textContent = '';\n        var lines = span('ax-build__lines', '');\n        lines.appendChild(span('ax-mono', b.version + (b.commit ? ' · ' + b.commit : '')));\n        var d = b.startedAt ? new Date(b.startedAt) : null;\n        if (d && !isNaN(d.getTime())) {\n          lines.appendChild(span('', 'since ' + d.toLocaleString([], { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' })));\n        }\n        el.appendChild(lines);\n        if (b.diskNewer) {\n          var w = span('ax-build__stale', 'restart pending');\n          w.setAttribute('role', 'status');\n          el.appendChild(w);\n        }\n        el.title = (b.diskNewer\n          ? 'The code on disk is newer than the running daemon. Restart the daemon to load it.'\n          : 'The build the daemon is running, and when it started.') + (b.node ? ' Node: ' + b.node : '');\n        el.hidden = false;\n      }).catch(function(){});\n    }\n    load();\n    setInterval(load, 60000);\n  }\n  function wire(){ wireHostRewrite(); wireTheme(); wireMesh(); wireBuild(); /* wirePeerProxy already ran */ }\n  if (document.readyState === 'loading') {\n    document.addEventListener('DOMContentLoaded', wire);\n  } else { wire(); }\n})();\n</script>`\n\n/**\n * What the header shows of the daemon's GET /health (served to the page as\n * GET /api/node/build). The dashboard is its own process, so its own build\n * and start time would be the wrong answer.\n */\nexport function headerBuild(health: any): { node: string | null; version: string | null; commit: string | null; startedAt: string | null; diskNewer: boolean } {\n  const text = (v: unknown) => (typeof v === \"string\" && v ? v : null)\n  return {\n    node: text(health?.node?.id),\n    version: text(health?.version),\n    commit: text(health?.commit),\n    startedAt: text(health?.startedAt),\n    diskNewer: health?.build?.newer === true,\n  }\n}\n\n/** Where the page script (wireBuild) puts the daemon's build. Empty and\n *  hidden until the daemon has answered. */\nexport const BUILD_PILL = '<span class=\"ax-build\" hidden></span>'\n\n/**\n * Render the topbar element. Caller places this at the start of <body>.\n * Emits a matching .ax-subheader row only when `subheader` HTML is provided.\n */\nexport function renderTopbar(opts: TopbarOpts): string {\n  const peers = opts.peers && opts.peers.length > 0 ? opts.peers : [{ id: \"local\", name: \"this daemon\", dashboardUrl: \"\", primary: true }]\n  const currentId = opts.currentPeerId || peers.find((p) => p.primary)?.id || peers[0].id\n  const current = peers.find((p) => p.id === currentId) || peers[0]\n\n  const meshMenu = peers.map((p) => {\n    const isCurrent = p.id === currentId\n    const primaryMark = p.primary ? ' <span style=\"color:var(--ax-muted);font-size:10px\">· primary</span>' : \"\"\n    const proxyable = !!p.tokenScope && !p.primary\n    // Proxyable peers: use data-peer-id so the click handler switches locally\n    // via localStorage + reload. Un-proxyable (no token): legacy navigate.\n    const href = proxyable\n      ? \"#\"\n      : p.dashboardUrl\n        ? `${p.dashboardUrl.replace(/\\/+$/, \"\")}/admin`\n        : \"#\"\n    const dataAttr = proxyable ? ` data-peer-id=\"${esc(p.id)}\" data-peer-action=\"proxy\"` : p.primary ? ` data-peer-id=\"primary\" data-peer-action=\"proxy\"` : \"\"\n    const hint = proxyable\n      ? '<div class=\"url\" style=\"color:var(--ax-accent)\">manage from this dashboard ✓</div>'\n      : p.tokenScope\n        ? `<div class=\"url\">${esc(p.tokenScope)}</div>`\n        : p.dashboardUrl\n          ? '<div class=\"url\" style=\"color:var(--ax-muted)\">(open peer dashboard ↗)</div>'\n          : \"\"\n    return `<a href=\"${esc(href)}\" class=\"${isCurrent ? \"is-current\" : \"\"}\"${dataAttr}>\n      <div class=\"row\"><span class=\"dot\"></span><span>${esc(p.name)}${primaryMark}</span></div>\n      ${p.dashboardUrl ? `<div class=\"url\">${esc(p.dashboardUrl)}</div>` : \"\"}\n      ${hint}\n    </a>`\n  }).join(\"\")\n\n  const meshSelector = `<div class=\"ax-mesh-sel\" aria-haspopup=\"menu\">\n    <span class=\"lbl\">managing</span>\n    <span class=\"name\">${esc(current.name)}</span>\n    <span class=\"chev\">▾</span>\n    <div class=\"ax-mesh-menu\" role=\"menu\">${meshMenu}</div>\n  </div>`\n\n  // Minimal, mesh-first nav. The primary group answers the four ops\n  // questions in order: who's alive and what are they doing (Live),\n  // what happened (Ledger), what did it cost (Cost), how is it wired\n  // (Settings). A second \"Work\" group appears only when the operator\n  // actually configured that surface (boards / workflows) — flags are\n  // set once per process via setTopbarFeatures().\n  //\n  // Deliberately NOT in the nav (all still routable by URL):\n  //   /admin/ledger  /admin/cost         what happened, what it cost\n  //   /workflows  /inbox              BPM surfaces\n  //   /  (boards)                       Kanban\n  //   /admin/health  /admin/graph  /admin/projects\n  //   /procedures  /admin/wiki  /glossary  /processes\n  //\n  // The nav is the set of surfaces an operator opens on purpose, not a site\n  // map. Workflows earned its way back: automation that stops running reports\n  // nothing anywhere else, so it needs somewhere to be found. Every page still\n  // listed above is one link away from Live or Settings, and none of them is\n  // where an operator starts their day —\n  // \"who is alive and what are they doing\" (Live) and \"how is this wired\"\n  // (Settings) are. A tab bar that lists every surface an app HAS is a site\n  // map, not navigation; it makes the two answers people actually want\n  // harder to find, which is the opposite of what chrome is for.\n  //\n  // Removing a tab does not remove the page. If view counts later show a\n  // surface earning its place, adding a tab back is one line.\n  type Tab = { id: TopbarTab; label: string; href: string; external?: boolean }\n  const groups: Array<{ name: string; tabs: Tab[] }> = [\n    {\n      name: \"Mesh\",\n      tabs: [\n        { id: \"live\", label: \"Live\", href: \"/live\" },\n        { id: \"mesh\", label: \"Operations\", href: \"/mesh\" },\n        { id: \"monitor\", label: \"Monitor\", href: \"/monitor\" },\n        { id: \"approvals\", label: \"Approvals\", href: \"/approvals\" },\n        { id: \"people\", label: \"People\", href: \"/people\" },\n        { id: \"activity\", label: \"Activity\", href: \"/activity\" },\n        { id: \"workflows\", label: \"Workflows\", href: \"/workflows\" },\n        { id: \"admin\", label: \"Settings\", href: \"/admin\" },\n      ],\n    },\n  ]\n\n  const tabs = groups.map((g) => {\n    const inner = g.tabs.map((t) => {\n      const cls = t.id === opts.activeTab ? \"ax-topbar__tab is-active\" : \"ax-topbar__tab\"\n      const extAttrs = t.external ? ` target=\"_blank\" rel=\"noopener\"` : \"\"\n      const extGlyph = t.external ? ' <span style=\"font-size:9px;opacity:0.6\">↗</span>' : \"\"\n      return `<a href=\"${t.href}\" class=\"${cls}\"${extAttrs}>${t.label}${extGlyph}</a>`\n    }).join(\"\")\n    return `<div class=\"ax-topbar__group\" title=\"${esc(g.name)} tier\"><span class=\"ax-topbar__group-label\">${esc(g.name)}</span>${inner}</div>`\n  }).join(\"\")\n\n  const header = `<header class=\"ax-topbar\">\n  <div class=\"ax-topbar__left\">\n    <div class=\"ax-brand\">\n      <span class=\"ax-brand__mark\">AX</span>\n      <span class=\"ax-brand__name\">AgentX</span>\n      <span class=\"ax-brand__subtitle\">${esc(opts.subtitle)}</span>\n    </div>\n    <nav class=\"ax-topbar__tabs\">${tabs}</nav>\n  </div>\n  <div class=\"ax-topbar__right\">\n    ${opts.rightExtras || \"\"}\n    ${BUILD_PILL}\n    ${meshSelector}\n    <div class=\"ax-theme-switch\" role=\"tablist\" aria-label=\"Theme\">\n      <button data-theme-opt=\"dark\">Dark</button>\n      <button data-theme-opt=\"light\">Light</button>\n    </div>\n  </div>\n</header>${opts.subheader ? `<div class=\"ax-subheader\">${opts.subheader}</div>` : \"\"}`\n  return header\n}\n\nfunction esc(s: string): string {\n  return String(s || \"\").replace(/[&<>\"']/g, (c) => ({ \"&\": \"&amp;\", \"<\": \"&lt;\", \">\": \"&gt;\", '\"': \"&quot;\", \"'\": \"&#39;\" }[c] as string))\n}\n","// --- Markdown to HTML, shared -------------------------------------------\n//\n// One renderer for the wiki, the dashboard's ask-an-agent drawer and the task\n// conversation view. It escapes first and only then adds markup, because\n// everything it renders — wiki articles, agent replies — is written by\n// someone or something other than the person reading it.\n//\n// Deliberately small: headings, bold/italic, code, links, lists, tables,\n// blockquotes and rules, and pictures for a caller that asks. Anything it\n// does not know stays as text.\n\nexport interface MarkdownOptions {\n  /** Resolve [[wikilinks]]. Omitted, they render as their display text. */\n  wikilink?: (target: string, display: string) => string\n  /** Render `![alt](https://…)` as a picture: `true` for up to 8, or the\n   *  most to show. Web addresses only; pictures past the limit become links.\n   *  Omitted, a picture stays a link, as it always was. */\n  images?: boolean | number\n}\n\nexport function markdownToHtml(text: string, opts: MarkdownOptions = {}): string {\n  // Strip section-tag HTML comments before escaping so they don't render\n  // as literal \"<!-- tags: ... -->\" in the output.\n  // Inlined rather than a module-scope helper: this function is stringified\n  // and shipped to the browser, where the minifier renames such a helper and\n  // module scope does not travel with the source.\n  let html = String(text ?? \"\")\n    .replace(/&/g, \"&amp;\").replace(/</g, \"&lt;\").replace(/>/g, \"&gt;\")\n    .replace(/\"/g, \"&quot;\").replace(/'/g, \"&#39;\")\n\n  // Code blocks (fenced)\n  html = html.replace(/```(\\w*)\\n([\\s\\S]*?)```/g, (_m, lang, code) =>\n    `<pre><code class=\"lang-${lang}\">${code.trim()}</code></pre>`)\n\n  // Inline code\n  html = html.replace(/`([^`]+)`/g, '<code>$1</code>')\n\n  // Pictures, only for a caller that opts in. Code is left alone. Each\n  // picture waits as a placeholder of plain letters and digits until every\n  // other rule has run, so no later rule can take its markup apart; one\n  // that ends up inside a tag (say, a link's address) becomes its alt text.\n  // The text is escaped already, so the address and alt hold no quotes.\n  const pics: string[] = []\n  const alts: string[] = []\n  const mark = opts.images ? \"axpic\" + Math.random().toString(36).slice(2, 10) + \"n\" : \"\"\n  if (opts.images) {\n    const most = typeof opts.images === \"number\" ? opts.images : 8\n    html = html.replace(/<code[^>]*>[\\s\\S]*?<\\/code>|!\\[([^\\]\\n]*)\\]\\(([^)\\s]+)\\)/g, (m: string, alt?: string, src?: string) => {\n      if (alt === undefined || src === undefined) return m\n      if (!/^https?:\\/\\/[^\\s]+$/i.test(src)) return alt\n      if (pics.length >= most) return `[${alt || src}](${src})`\n      pics.push(`<img src=\"${src}\" alt=\"${alt}\" loading=\"lazy\" referrerpolicy=\"no-referrer\">`)\n      alts.push(alt)\n      return mark + (pics.length - 1) + \"z\"\n    })\n  }\n\n  // Tables\n  html = html.replace(/^(\\|.+\\|)\\n(\\|[-| :]+\\|)\\n((?:\\|.+\\|\\n?)*)/gm, (_m, header, _sep, body) => {\n    const ths = header.split(\"|\").filter((c: string) => c.trim()).map((c: string) => `<th>${c.trim()}</th>`).join(\"\")\n    const rows = body.trim().split(\"\\n\").map((row: string) => {\n      const tds = row.split(\"|\").filter((c: string) => c.trim()).map((c: string) => `<td>${c.trim()}</td>`).join(\"\")\n      return `<tr>${tds}</tr>`\n    }).join(\"\")\n    return `<table><thead><tr>${ths}</tr></thead><tbody>${rows}</tbody></table>`\n  })\n\n  // Headings\n  html = html.replace(/^#### (.+)$/gm, '<h4>$1</h4>')\n  html = html.replace(/^### (.+)$/gm, '<h3>$1</h3>')\n  html = html.replace(/^## (.+)$/gm, '<h2>$1</h2>')\n  html = html.replace(/^# (.+)$/gm, '<h1>$1</h1>')\n\n  // Bold and italic\n  html = html.replace(/\\*\\*(.+?)\\*\\*/g, '<strong>$1</strong>')\n  html = html.replace(/\\*(.+?)\\*/g, '<em>$1</em>')\n\n  // Wikilinks — support three forms for the [[...]] body:\n  //   [[Title]]                        exact article title\n  //   [[path/to/article]]              path without .md (e.g. \"people/alex\")\n  //   [[path/to/article.md]]           full relative path\n  //   [[Title|custom display text]]    optional display override (Obsidian-style)\n  html = html.replace(/\\[\\[([^\\]]+)\\]\\]/g, (_m, inner: string) => {\n    const [rawTarget, rawDisplay] = inner.split(\"|\", 2)\n    const target = rawTarget.trim().replace(/^\\//, \"\")\n    const display = (rawDisplay || rawTarget).trim()\n    // Without a resolver a wikilink is just words — better than a dead link.\n    return opts.wikilink ? opts.wikilink(target, display) : display\n  })\n\n  // External links\n  html = html.replace(/\\[([^\\]]+)\\]\\(([^)]+)\\)/g, '<a href=\"$2\" target=\"_blank\" rel=\"noopener noreferrer\">$1</a>')\n\n  // Blockquotes (consecutive `> ` lines → one <blockquote>)\n  html = html.replace(/^(>\\s?.*(?:\\n>\\s?.*)*)/gm, (block: string) => {\n    const inner = block.split(\"\\n\").map(l => l.replace(/^>\\s?/, \"\")).join(\"<br>\")\n    return `<blockquote>${inner}</blockquote>`\n  })\n\n  // Task-list items (render as plain text with unicode checkbox)\n  html = html.replace(/^[-*] \\[( |x|X)\\] (.+)$/gm, (_m, chk, rest) =>\n    `<li class=\"task\">${chk.toLowerCase() === \"x\" ? \"☑\" : \"☐\"} ${rest}</li>`)\n\n  // Unordered lists\n  html = html.replace(/^[-*] (.+)$/gm, '<li>$1</li>')\n\n  // Ordered lists — match lines like \"1. foo\" (number, dot, space)\n  html = html.replace(/^\\d+\\. (.+)$/gm, '<li data-ordered=\"1\">$1</li>')\n\n  // Wrap consecutive ordered <li>s into <ol>. Keep the data-ordered marker\n  // on each <li> inside the <ol> so the subsequent <ul> regex below can\n  // correctly skip them via negative lookahead. Marker is stripped once all\n  // list-wrapping is done.\n  html = html.replace(/(<li data-ordered=\"1\">.*?<\\/li>(?:\\n?<li data-ordered=\"1\">.*?<\\/li>)*)/g, '<ol>$1</ol>')\n\n  // Wrap consecutive unordered <li>s — the negative lookahead `(?! data-ordered)`\n  // ensures ordered <li>s inside the <ol> above are NOT re-wrapped in <ul>.\n  html = html.replace(/((?:<li(?! data-ordered)[^>]*>.*?<\\/li>\\n?)+)/g, '<ul>$1</ul>')\n\n  // Clean up the ordered marker now that wrapping is settled.\n  html = html.replace(/ data-ordered=\"1\"/g, \"\")\n\n  // Horizontal rules\n  html = html.replace(/^---$/gm, '<hr>')\n\n  // Paragraphs — only wrap non-block lines. A paragraph is a run of\n  // text that isn't already wrapped in a block-level tag.\n  html = html.replace(/\\n\\n+/g, '</p><p>')\n  html = `<p>${html}</p>`\n  // Unwrap <p>...</p> that now contain block-level elements.\n  html = html.replace(/<p>\\s*(<(?:h[1-6]|ul|ol|blockquote|table|pre|hr)\\b[^>]*>[\\s\\S]*?<\\/(?:h[1-6]|ul|ol|blockquote|table|pre)>)\\s*<\\/p>/g, \"$1\")\n  html = html.replace(/<p>\\s*<hr>\\s*<\\/p>/g, \"<hr>\")\n  // Drop empty paragraphs that remain.\n  html = html.replace(/<p>\\s*<\\/p>/g, \"\")\n\n  html = html.replace(/<p>(<(?:h[1-4]|pre|table|ul|hr|div))/g, '$1')\n  html = html.replace(/(<\\/(?:h[1-4]|pre|table|ul|hr|div)>)<\\/p>/g, '$1')\n  html = html.replace(/<p>\\s*<\\/p>/g, '')\n\n  if (pics.length) {\n    const at = new RegExp(mark + \"(\\\\d+)z\", \"g\")\n    html = html.split(/(<[^>]*>)/).map((part) => part.charAt(0) === \"<\"\n      ? part.replace(at, (_m, i) => alts[Number(i)])\n      : part.replace(at, (_m, i) => pics[Number(i)])).join(\"\")\n  }\n\n  return html\n}\n","// Shared small utilities for UI renderers.\n\n/**\n * HTML-escape a string so it's safe to interpolate inside attributes or text\n * content. Every page used to ship its own `esc` / `escapeHtml` / `safe` —\n * this is the canonical one.\n */\nexport function esc(s: unknown): string {\n  return String(s ?? \"\").replace(/[&<>\"']/g, (c) => ({\n    \"&\": \"&amp;\", \"<\": \"&lt;\", \">\": \"&gt;\", '\"': \"&quot;\", \"'\": \"&#39;\",\n  }[c] as string))\n}\n\n/** Join class names, dropping falsy values. */\nexport function cx(...parts: Array<string | false | null | undefined>): string {\n  return parts.filter(Boolean).join(\" \")\n}\n"],"mappings":"AAqCA,IAAIA,EAAiC,CAAC,EAE/B,SAASC,EAAkBC,EAAgC,CAChEF,EAAiBE,CACnB,CAEO,SAASC,GAAoC,CAClD,OAAOH,CACT,CA2BO,IAAMI,EAAc;AAAA;AAAA;AAAA,iRAUdC,EAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,+BAuFbC,EAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAiMtB,SAASC,EAAYC,EAAmI,CAC7J,IAAMC,EAAQC,GAAgB,OAAOA,GAAM,UAAYA,EAAIA,EAAI,KAC/D,MAAO,CACL,KAAMD,EAAKD,GAAQ,MAAM,EAAE,EAC3B,QAASC,EAAKD,GAAQ,OAAO,EAC7B,OAAQC,EAAKD,GAAQ,MAAM,EAC3B,UAAWC,EAAKD,GAAQ,SAAS,EACjC,UAAWA,GAAQ,OAAO,QAAU,EACtC,CACF,CAIO,IAAMG,EAAa,wCAMnB,SAASC,EAAaC,EAA0B,CACrD,IAAMC,EAAQD,EAAK,OAASA,EAAK,MAAM,OAAS,EAAIA,EAAK,MAAQ,CAAC,CAAE,GAAI,QAAS,KAAM,cAAe,aAAc,GAAI,QAAS,EAAK,CAAC,EACjIE,EAAYF,EAAK,eAAiBC,EAAM,KAAME,GAAMA,EAAE,OAAO,GAAG,IAAMF,EAAM,CAAC,EAAE,GAC/EG,EAAUH,EAAM,KAAME,GAAMA,EAAE,KAAOD,CAAS,GAAKD,EAAM,CAAC,EAE1DI,EAAWJ,EAAM,IAAKE,GAAM,CAChC,IAAMG,EAAYH,EAAE,KAAOD,EACrBK,EAAcJ,EAAE,QAAU,0EAAyE,GACnGK,EAAY,CAAC,CAACL,EAAE,YAAc,CAACA,EAAE,QAGjCM,EAAOD,EACT,IACAL,EAAE,aACA,GAAGA,EAAE,aAAa,QAAQ,OAAQ,EAAE,UACpC,IACAO,EAAWF,EAAY,kBAAkBG,EAAIR,EAAE,EAAE,8BAAgCA,EAAE,QAAU,mDAAqD,GAClJS,EAAOJ,EACT,0FACAL,EAAE,WACA,oBAAoBQ,EAAIR,EAAE,UAAU,UACpCA,EAAE,aACA,oFACA,GACR,MAAO,YAAYQ,EAAIF,CAAI,aAAaH,EAAY,aAAe,MAAMI;AAAA,wDACrBC,EAAIR,EAAE,IAAI,IAAII;AAAA,QAC9DJ,EAAE,aAAe,oBAAoBQ,EAAIR,EAAE,YAAY,UAAY;AAAA,QACnES;AAAA,SAEN,CAAC,EAAE,KAAK,EAAE,EAEJC,EAAe;AAAA;AAAA,yBAEEF,EAAIP,EAAQ,IAAI;AAAA;AAAA,4CAEGC;AAAA,UA8CpCS,EAhB+C,CACnD,CACE,KAAM,OACN,KAAM,CACJ,CAAE,GAAI,OAAQ,MAAO,OAAQ,KAAM,OAAQ,EAC3C,CAAE,GAAI,OAAQ,MAAO,aAAc,KAAM,OAAQ,EACjD,CAAE,GAAI,UAAW,MAAO,UAAW,KAAM,UAAW,EACpD,CAAE,GAAI,YAAa,MAAO,YAAa,KAAM,YAAa,EAC1D,CAAE,GAAI,SAAU,MAAO,SAAU,KAAM,SAAU,EACjD,CAAE,GAAI,WAAY,MAAO,WAAY,KAAM,WAAY,EACvD,CAAE,GAAI,YAAa,MAAO,YAAa,KAAM,YAAa,EAC1D,CAAE,GAAI,QAAS,MAAO,WAAY,KAAM,QAAS,CACnD,CACF,CACF,EAEoB,IAAKC,GAAM,CAC7B,IAAMC,EAAQD,EAAE,KAAK,IAAKE,GAAM,CAC9B,IAAMC,EAAMD,EAAE,KAAOjB,EAAK,UAAY,2BAA6B,iBAC7DmB,EAAWF,EAAE,SAAW,kCAAoC,GAC5DG,EAAWH,EAAE,SAAW,yDAAsD,GACpF,MAAO,YAAYA,EAAE,gBAAgBC,KAAOC,KAAYF,EAAE,QAAQG,OACpE,CAAC,EAAE,KAAK,EAAE,EACV,MAAO,wCAAwCT,EAAII,EAAE,IAAI,gDAAgDJ,EAAII,EAAE,IAAI,WAAWC,SAChI,CAAC,EAAE,KAAK,EAAE,EAqBV,MAnBe;AAAA;AAAA;AAAA;AAAA;AAAA,yCAKwBL,EAAIX,EAAK,QAAQ;AAAA;AAAA,mCAEvBc;AAAA;AAAA;AAAA,MAG7Bd,EAAK,aAAe;AAAA,MACpBF;AAAA,MACAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAMKb,EAAK,UAAY,6BAA6BA,EAAK,kBAAoB,IAElF,CAEA,SAASW,EAAIU,EAAmB,CAC9B,OAAO,OAAOA,GAAK,EAAE,EAAE,QAAQ,WAAaC,IAAO,CAAE,IAAK,QAAS,IAAK,OAAQ,IAAK,OAAQ,IAAK,SAAU,IAAK,OAAQ,GAAEA,CAAC,CAAY,CAC1I,CC5dO,SAASC,EAAeC,EAAcC,EAAwB,CAAC,EAAW,CAM/E,IAAIC,EAAO,OAAOF,GAAQ,EAAE,EACzB,QAAQ,KAAM,OAAO,EAAE,QAAQ,KAAM,MAAM,EAAE,QAAQ,KAAM,MAAM,EACjE,QAAQ,KAAM,QAAQ,EAAE,QAAQ,KAAM,OAAO,EAGhDE,EAAOA,EAAK,QAAQ,2BAA4B,CAACC,EAAIC,EAAMC,IACzD,0BAA0BD,MAASC,EAAK,KAAK,gBAAgB,EAG/DH,EAAOA,EAAK,QAAQ,aAAc,iBAAiB,EAOnD,IAAMI,EAAiB,CAAC,EAClBC,EAAiB,CAAC,EAClBC,EAAOP,EAAK,OAAS,QAAU,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,EAAE,EAAI,IAAM,GACrF,GAAIA,EAAK,OAAQ,CACf,IAAMQ,EAAO,OAAOR,EAAK,QAAW,SAAWA,EAAK,OAAS,EAC7DC,EAAOA,EAAK,QAAQ,4DAA6D,CAACQ,EAAWC,EAAcC,IACrGD,IAAQ,QAAaC,IAAQ,OAAkBF,EAC9C,uBAAuB,KAAKE,CAAG,EAChCN,EAAK,QAAUG,EAAa,IAAIE,GAAOC,MAAQA,MACnDN,EAAK,KAAK,aAAaM,WAAaD,iDAAmD,EACvFJ,EAAK,KAAKI,CAAG,EACNH,GAAQF,EAAK,OAAS,GAAK,KAJYK,CAK/C,EAqFH,GAjFAT,EAAOA,EAAK,QAAQ,+CAAgD,CAACC,EAAIU,EAAQC,EAAMC,IAAS,CAC9F,IAAMC,EAAMH,EAAO,MAAM,GAAG,EAAE,OAAQI,GAAcA,EAAE,KAAK,CAAC,EAAE,IAAKA,GAAc,OAAOA,EAAE,KAAK,QAAQ,EAAE,KAAK,EAAE,EAC1GC,EAAOH,EAAK,KAAK,EAAE,MAAM;AAAA,CAAI,EAAE,IAAKI,GAEjC,OADKA,EAAI,MAAM,GAAG,EAAE,OAAQF,GAAcA,EAAE,KAAK,CAAC,EAAE,IAAKA,GAAc,OAAOA,EAAE,KAAK,QAAQ,EAAE,KAAK,EAAE,QAE9G,EAAE,KAAK,EAAE,EACV,MAAO,qBAAqBD,wBAA0BE,mBACxD,CAAC,EAGDhB,EAAOA,EAAK,QAAQ,gBAAiB,aAAa,EAClDA,EAAOA,EAAK,QAAQ,eAAgB,aAAa,EACjDA,EAAOA,EAAK,QAAQ,cAAe,aAAa,EAChDA,EAAOA,EAAK,QAAQ,aAAc,aAAa,EAG/CA,EAAOA,EAAK,QAAQ,iBAAkB,qBAAqB,EAC3DA,EAAOA,EAAK,QAAQ,aAAc,aAAa,EAO/CA,EAAOA,EAAK,QAAQ,oBAAqB,CAACC,EAAIiB,IAAkB,CAC9D,GAAM,CAACC,EAAWC,CAAU,EAAIF,EAAM,MAAM,IAAK,CAAC,EAC5CG,EAASF,EAAU,KAAK,EAAE,QAAQ,MAAO,EAAE,EAC3CG,GAAWF,GAAcD,GAAW,KAAK,EAE/C,OAAOpB,EAAK,SAAWA,EAAK,SAASsB,EAAQC,CAAO,EAAIA,CAC1D,CAAC,EAGDtB,EAAOA,EAAK,QAAQ,2BAA4B,+DAA+D,EAG/GA,EAAOA,EAAK,QAAQ,2BAA6BuB,GAExC,eADOA,EAAM,MAAM;AAAA,CAAI,EAAE,IAAIC,GAAKA,EAAE,QAAQ,QAAS,EAAE,CAAC,EAAE,KAAK,MAAM,gBAE7E,EAGDxB,EAAOA,EAAK,QAAQ,4BAA6B,CAACC,EAAIwB,EAAKC,IACzD,oBAAoBD,EAAI,YAAY,IAAM,IAAM,SAAM,YAAOC,QAAW,EAG1E1B,EAAOA,EAAK,QAAQ,gBAAiB,aAAa,EAGlDA,EAAOA,EAAK,QAAQ,iBAAkB,8BAA8B,EAMpEA,EAAOA,EAAK,QAAQ,0EAA2E,aAAa,EAI5GA,EAAOA,EAAK,QAAQ,iDAAkD,aAAa,EAGnFA,EAAOA,EAAK,QAAQ,qBAAsB,EAAE,EAG5CA,EAAOA,EAAK,QAAQ,UAAW,MAAM,EAIrCA,EAAOA,EAAK,QAAQ,SAAU,SAAS,EACvCA,EAAO,MAAMA,QAEbA,EAAOA,EAAK,QAAQ,sHAAuH,IAAI,EAC/IA,EAAOA,EAAK,QAAQ,sBAAuB,MAAM,EAEjDA,EAAOA,EAAK,QAAQ,eAAgB,EAAE,EAEtCA,EAAOA,EAAK,QAAQ,wCAAyC,IAAI,EACjEA,EAAOA,EAAK,QAAQ,6CAA8C,IAAI,EACtEA,EAAOA,EAAK,QAAQ,eAAgB,EAAE,EAElCI,EAAK,OAAQ,CACf,IAAMuB,EAAK,IAAI,OAAOrB,EAAO,UAAW,GAAG,EAC3CN,EAAOA,EAAK,MAAM,WAAW,EAAE,IAAK4B,GAASA,EAAK,OAAO,CAAC,IAAM,IAC5DA,EAAK,QAAQD,EAAI,CAAC1B,EAAI4B,IAAMxB,EAAK,OAAOwB,CAAC,CAAC,CAAC,EAC3CD,EAAK,QAAQD,EAAI,CAAC1B,EAAI4B,IAAMzB,EAAK,OAAOyB,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAG3D,OAAO7B,CACT,CC5IO,SAAS8B,EAAIC,EAAoB,CACtC,OAAO,OAAOA,GAAK,EAAE,EAAE,QAAQ,WAAaC,IAAO,CACjD,IAAK,QAAS,IAAK,OAAQ,IAAK,OAAQ,IAAK,SAAU,IAAK,OAC9D,GAAEA,CAAC,CAAY,CACjB","names":["topbarFeatures","setTopbarFeatures","features","getTopbarFeatures","TOPBAR_HEAD","TOPBAR_CSS","TOPBAR_SCRIPT","headerBuild","health","text","v","BUILD_PILL","renderTopbar","opts","peers","currentId","p","current","meshMenu","isCurrent","primaryMark","proxyable","href","dataAttr","esc","hint","meshSelector","tabs","g","inner","t","cls","extAttrs","extGlyph","s","c","markdownToHtml","text","opts","html","_m","lang","code","pics","alts","mark","most","m","alt","src","header","_sep","body","ths","c","rows","row","inner","rawTarget","rawDisplay","target","display","block","l","chk","rest","at","part","i","esc","s","c"]}

package/dist/{chunk-XIYWXCNU.js → chunk-E5OV6RTG.js}

@@ -1,4 +1,4 @@
-import{c as A,e as _,f as D}from"./chunk-Y4CYQV7G.js";import{existsSync as O,mkdirSync as M,readdirSync as L,readFileSync as U,renameSync as j,writeFileSync as F}from"fs";import{resolve as P}from"path";function $(e,t){let n=e.list?` in the "${e.list}" list`:"",r=[`This card came from the operator's reminder "${e.title}"${n} (id ${e.id}).`];return r.push(t?`Do what the operator chose, then tick the reminder off: remindctl complete ${e.id}`:"Leave the reminder open; it will come back at a later check-in."),r}var R=["discard","keep","pause","approve"],f={title:120,ask:300,recommend:300,source:500,note:500,pendingPerAgent:25},q={defaultExpiryDays:3,maxExpiryDays:30};function x(e){return P(e,".agentx","approvals")}var z=/^[a-z0-9][a-z0-9-]{0,80}$/;function N(e){return z.test(e)}function T(e,t){if(!N(t))throw new Error(`invalid card id: ${t}`);return P(x(e),`${t}.json`)}function B(e,t){let n=new Date(e).toISOString().slice(0,10),r=t.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,40);return`${n}-${r||"card"}-${Math.random().toString(36).slice(2,6)}`}function w(e,t){M(x(e),{recursive:!0});let n=T(e,t.id),r=`${n}.${process.pid}.tmp`;F(r,JSON.stringify(t,null,2)+`
-`),j(r,n)}function S(e,t){if(!N(t))return null;try{return JSON.parse(U(T(e,t),"utf-8"))}catch{return null}}function C(e,t){let n=x(e);if(!O(n))return[];let r=[];for(let i of L(n).filter(s=>s.endsWith(".json")&&!s.startsWith("_")).sort()){let s=S(e,i.slice(0,-5));s&&(!t||s.status===t)&&r.push(s)}return r}function l(e){return typeof e=="string"?e.replace(/\s+/g," ").trim():""}function J(e,t,n){let r=t+n.maxExpiryDays*864e5,i,s=l(e);if(!s)i=t+n.defaultExpiryDays*864e5;else{let a=/^(\d+)\s*([hd])$/i.exec(s);if(a)i=t+Number(a[1])*(a[2].toLowerCase()==="d"?864e5:36e5);else if(i=Date.parse(s),Number.isNaN(i))return{ok:!1,error:`expires must be an ISO date or time, or like "12h" / "3d" (got "${s}")`}}return i<=t?{ok:!1,error:"expires must be in the future"}:{ok:!0,at:new Date(Math.min(i,r)).toISOString()}}function V(e,t={}){let n=t.now??Date.now(),r=t.settings??q,i=l(e.title),s=l(e.ask),a=l(e.recommend),c=l(e.raised_by);if(!i)return{ok:!1,error:"title is required"};if(!s)return{ok:!1,error:"ask is required: the yes/no question"};if(!a)return{ok:!1,error:"recommend is required: your advice and why, in one line"};if(!c)return{ok:!1,error:"raised_by is required: the agent id"};if(i.length>f.title)return{ok:!1,error:`title is longer than ${f.title} characters`};if(s.length>f.ask)return{ok:!1,error:`ask is longer than ${f.ask} characters`};if(a.length>f.recommend)return{ok:!1,error:`recommend is longer than ${f.recommend} characters`};let y=l(e.if_silent).toLowerCase();if(!R.includes(y))return{ok:!1,error:`if_silent must be one of ${R.join(", ")}`};let d=J(e.expires,n,r);if(!d.ok)return d;let u=l(e.source);if(u.length>f.source)return{ok:!1,error:`source is longer than ${f.source} characters`};if(u&&/^[a-z][a-z0-9+.-]*:/i.test(u)&&!/^https?:\/\//i.test(u))return{ok:!1,error:"source must be an http(s) link or a plain reference"};let h=A(e);if(!h.ok)return h;let p,o=e.reply;return o&&typeof o=="object"&&l(o.channel)&&l(o.chatId)&&(p={channel:l(o.channel),chatId:l(o.chatId),...l(o.accountId)?{accountId:l(o.accountId)}:{}}),{ok:!0,card:{id:B(n,i),title:i,ask:s,recommend:a,if_silent:y,expires:d.at,...u?{source:u}:{},raised_by:c,created_at:new Date(n).toISOString(),...p?{reply:p}:{},...h.value,...t.origin?{origin:t.origin}:{},status:"pending"}}}function oe(e,t,n={}){let r=V(t,n);if(!r.ok)return r;let i=C(e,"pending").filter(s=>s.raised_by===r.card.raised_by).length;return i>=f.pendingPerAgent?{ok:!1,error:`${r.card.raised_by} already has ${i} cards waiting; wait for decisions before raising more`}:(w(e,r.card),r)}function ae(e,t,n,r={}){let i=S(e,t);if(!i)return{ok:!1,error:`no card "${t}"`};if(i.status!=="pending")return{ok:!1,error:`card "${t}" is already ${i.status}`};let s=_(i,n,r);if(!s.ok)return s;let a=l(r.note).slice(0,f.note),c={...i,status:"decided",verdict:n,decided_by:r.by??"operator",decided_at:new Date(r.now??Date.now()).toISOString(),...a?{note:a}:{},...s.choice?{choice:s.choice}:{},...s.text?{text:s.text}:{}};return w(e,c),{ok:!0,card:c}}function ce(e,t=Date.now()){let n=[];for(let r of C(e,"pending")){if(Date.parse(r.expires)>t)continue;let i={...r,status:"expired",outcome:r.if_silent,decided_by:"expiry",decided_at:new Date(t).toISOString()};w(e,i),n.push(i)}return n}function de(e){return C(e).filter(t=>t.status!=="pending"&&!t.agent_notified_at)}function ue(e,t,n=Date.now()){let r=S(e,t);!r||r.agent_notified_at||w(e,{...r,agent_notified_at:new Date(n).toISOString()})}function le(e){let t=e.status==="decided"?e.verdict==="yes"?"The operator said YES.":"The operator said NO.":`Nobody answered before it expired, so the default applied: ${e.outcome??e.if_silent}.`,n=[`[Approval result] Your decision card "${e.title}" (${e.id}) is closed.`,`Question: ${e.ask}`,t];return e.status==="decided"&&e.verdict==="yes"&&n.push(...D(e)),e.note&&n.push(`Operator note: ${e.note}`),e.source&&n.push(`Source: ${e.source}`),e.origin&&n.push(...$(e.origin,e.status==="decided"&&e.verdict==="yes")),e.reply&&n.push(`You raised it from ${e.reply.channel} chat ${e.reply.chatId}; reply there if the requester should know.`),n.push("Act on this result now. Do not raise the same card again."),n.join(`
-`)}function b(e,t=160){if(!e)return e;let n=e.replace(/\s+/g," ").trim();return n.length>t?n.slice(0,t-1)+"\u2026":n}function W(e){let t=new Map;for(let r of e.cronRuns??[]){let i=t.get(r.jobId);(!i||i.startedAt<r.startedAt)&&t.set(r.jobId,r)}let n={success:0,failed:0};for(let r of e.cronRuns??[])r.status==="success"?n.success++:n.failed++;return{id:e.id,name:e.name,url:e.url,reachable:e.reachable,error:b(e.error),uptimeSec:e.uptimeSec,inflight:e.inflight,restart:e.restart?.state&&e.restart.state!=="none"?e.restart:void 0,agents:e.agents.map(r=>({id:r.id,name:r.name,tier:r.tier,active:r.active,errors:r.errors,lastActive:r.lastActive,last:r.lastSummary?{text:b(r.lastSummary.text),at:r.lastSummary.at,ok:r.lastSummary.ok}:void 0})),crons:{today:n,items:(e.crons??[]).map(r=>{let i=t.get(r.id);return{id:r.id,enabled:r.enabled,schedule:r.schedule,agent:r.agent,nextRun:r.nextRun,consecutiveErrors:r.consecutiveErrors,last:i?{status:i.status,at:i.startedAt,text:b(i.status==="success"?i.responseSummary:i.errorSummary)}:void 0}})}}}function G(e){let t=[];for(let n of e)for(let r of n.agents)for(let i of r.runningTasks??[])t.push({node:n.url,nodeName:n.name,agentId:r.id,agentName:r.name,taskId:i.id,preview:b(i.messagePreview),channel:i.channel,startedAt:i.startedAt});return t.sort((n,r)=>n.startedAt<r.startedAt?1:-1)}var H=/^\/api\/app\/tasks\/(cancel|followup)$/;async function ge(e,t,n,r,i,s){let a=new URL(e.url||n,"http://localhost");if(r==="GET"&&(n==="/api/app/fleet"||n==="/api/app/activity")){let o=Y(a.searchParams.get("timezone")),g=await s.snapshot({date:Z(o),timezone:o});return n==="/api/app/activity"?m(t,200,{ts:g.ts,tasks:G(g.nodes)}):m(t,200,{ts:g.ts,nodes:g.nodes.map(W)})}if(r==="GET"&&n==="/api/app/approvals")return m(t,200,{nodes:await s.approvals()});if(r!=="POST")return!1;let c=n.match(H);if(!(c||["/api/app/nodes/restart","/api/app/nodes/reload","/api/app/crons/toggle","/api/app/approvals/decide"].includes(n)))return!1;let d;try{d=await I(e)}catch(o){return m(t,400,{error:o.message})}let u=k(d.node);if(!u)return m(t,400,{error:"node is required"});let h=`operator (phone: ${i})`,p;if(c){let o=k(d.taskId);if(!o)return m(t,400,{error:"taskId is required"});let g=`/api/tasks/${encodeURIComponent(o)}/${c[1]}`;if(c[1]==="cancel")p=await s.nodePost(u,g,{reason:`cancelled by ${h}`});else{let v=k(d.message);if(!v)return m(t,400,{error:"message is required"});p=await s.nodePost(u,g,{message:v,sender:h})}}else if(n==="/api/app/nodes/restart")p=await s.nodePost(u,d.cancel===!0?"/daemon/restart/cancel":"/daemon/restart",{});else if(n==="/api/app/nodes/reload")p=await s.nodePost(u,"/reload",{});else if(n==="/api/app/crons/toggle"){let o=k(d.cronId);if(!o||typeof d.enabled!="boolean")return m(t,400,{error:"cronId and enabled (true or false) are required"});p=await s.nodePost(u,`/crons/${encodeURIComponent(o)}/enabled`,{enabled:d.enabled})}else{let o=k(d.key),g=d.action;if(!o||g!=="yes"&&g!=="no"&&g!=="later")return m(t,400,{error:"key and action (yes, no or later) are required"});p=await s.decide(u,o,g,h)}return m(t,p.status,p.body)}function k(e){return typeof e=="string"?e.trim():""}function Y(e){if(!e)return"UTC";try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),e}catch{return"UTC"}}function Z(e,t=new Date){return new Intl.DateTimeFormat("en-CA",{timeZone:e,year:"numeric",month:"2-digit",day:"2-digit"}).format(t)}async function I(e,t=16*1024){let n=0,r=[];for await(let a of e){if(n+=a.length,n>t)throw new Error("body too large");r.push(a)}let i=Buffer.concat(r).toString("utf-8").trim();if(!i)return{};let s=JSON.parse(i);if(!s||typeof s!="object"||Array.isArray(s))throw new Error("expected a JSON object");return s}function m(e,t,n){return e.writeHead(t,{"Content-Type":"application/json","Cache-Control":"no-store"}),e.end(JSON.stringify(n)),!0}var K={perClient:5,global:10,windowMs:10*60*1e3,lockoutMs:5*60*1e3},E=class{constructor(t=K,n=Date.now){this.opts=t;this.now=n}clients=new Map;all={failures:[],lockedUntil:0};retryAfter(t){let n=this.now(),r=Math.max(this.all.lockedUntil,this.clients.get(t)?.lockedUntil??0);return r>n?Math.ceil((r-n)/1e3):0}fail(t){let n=this.clients.get(t);n||this.clients.set(t,n={failures:[],lockedUntil:0}),this.bump(n,this.opts.perClient),this.bump(this.all,this.opts.global)}succeed(t){this.clients.delete(t)}bump(t,n){let r=this.now();t.failures=t.failures.filter(i=>r-i<this.opts.windowMs),t.failures.push(r),t.failures.length>=n&&(t.lockedUntil=r+this.opts.lockoutMs)}},Q="That code didn't work. Check it, or run agentx app pair for a new one.",X=400;async function ye(e,t){let n=Date.now(),r=t.log??(d=>console.log(d)),i=e.socket.remoteAddress||"unknown",s=t.limiter.retryAfter(i);if(s>0)return r(`[app] pair-code refused from ${i}: locked out for ${s}s more`),{status:429,body:{error:"too many attempts",retryAfter:s},retryAfter:s};let a=null;try{a=(await I(e,1024)).code}catch{}let c=t.codes.redeem(a),y=c?t.verify(c.token):null;return await ee(n,t.minMs??X),!c||!y?(t.limiter.fail(i),r(`[app] pair-code failed from ${i}`),{status:401,body:{error:Q}}):(t.limiter.succeed(i),r(`[app] pair-code paired ${c.tokenId} (${y}) from ${i}`),{status:200,body:{device:y},token:c.token})}async function ee(e,t){let n=e+t-Date.now();n>0&&await new Promise(r=>setTimeout(r,n))}export{R as a,f as b,x as c,N as d,S as e,C as f,oe as g,ae as h,ce as i,de as j,ue as k,le as l,ge as m,I as n,E as o,Q as p,ye as q};
-//# sourceMappingURL=chunk-XIYWXCNU.js.map
+import{c as A,e as _,f as D}from"./chunk-Y4CYQV7G.js";import{existsSync as E,mkdirSync as M,readdirSync as L,readFileSync as U,renameSync as q,writeFileSync as j}from"fs";import{resolve as P}from"path";function $(e,t){let n=e.list?` in the "${e.list}" list`:"",r=[`This card came from the operator's reminder "${e.title}"${n} (id ${e.id}).`];return r.push(t?`Do what the operator chose, then tick the reminder off: remindctl complete ${e.id}`:"Leave the reminder open; it will come back at a later check-in."),r}var R=["discard","keep","pause","approve"],f={title:120,ask:300,recommend:300,source:500,note:500,pendingPerAgent:25},F={defaultExpiryDays:3,maxExpiryDays:30};function x(e){return P(e,".agentx","approvals")}var z=/^[a-z0-9][a-z0-9-]{0,80}$/;function N(e){return z.test(e)}function O(e,t){if(!N(t))throw new Error(`invalid card id: ${t}`);return P(x(e),`${t}.json`)}function B(e,t){let n=new Date(e).toISOString().slice(0,10),r=t.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,40);return`${n}-${r||"card"}-${Math.random().toString(36).slice(2,6)}`}function w(e,t){M(x(e),{recursive:!0});let n=O(e,t.id),r=`${n}.${process.pid}.tmp`;j(r,JSON.stringify(t,null,2)+`
+`),q(r,n)}function S(e,t){if(!N(t))return null;try{return JSON.parse(U(O(e,t),"utf-8"))}catch{return null}}function C(e,t){let n=x(e);if(!E(n))return[];let r=[];for(let i of L(n).filter(s=>s.endsWith(".json")&&!s.startsWith("_")).sort()){let s=S(e,i.slice(0,-5));s&&(!t||s.status===t)&&r.push(s)}return r}function l(e){return typeof e=="string"?e.replace(/\s+/g," ").trim():""}function J(e,t,n){let r=t+n.maxExpiryDays*864e5,i,s=l(e);if(!s)i=t+n.defaultExpiryDays*864e5;else{let a=/^(\d+)\s*([hd])$/i.exec(s);if(a)i=t+Number(a[1])*(a[2].toLowerCase()==="d"?864e5:36e5);else if(i=Date.parse(s),Number.isNaN(i))return{ok:!1,error:`expires must be an ISO date or time, or like "12h" / "3d" (got "${s}")`}}return i<=t?{ok:!1,error:"expires must be in the future"}:{ok:!0,at:new Date(Math.min(i,r)).toISOString()}}function V(e,t={}){let n=t.now??Date.now(),r=t.settings??F,i=l(e.title),s=l(e.ask),a=l(e.recommend),c=l(e.raised_by);if(!i)return{ok:!1,error:"title is required"};if(!s)return{ok:!1,error:"ask is required: the yes/no question"};if(!a)return{ok:!1,error:"recommend is required: your advice and why, in one line"};if(!c)return{ok:!1,error:"raised_by is required: the agent id"};if(i.length>f.title)return{ok:!1,error:`title is longer than ${f.title} characters`};if(s.length>f.ask)return{ok:!1,error:`ask is longer than ${f.ask} characters`};if(a.length>f.recommend)return{ok:!1,error:`recommend is longer than ${f.recommend} characters`};let y=l(e.if_silent).toLowerCase();if(!R.includes(y))return{ok:!1,error:`if_silent must be one of ${R.join(", ")}`};let d=J(e.expires,n,r);if(!d.ok)return d;let u=l(e.source);if(u.length>f.source)return{ok:!1,error:`source is longer than ${f.source} characters`};if(u&&/^[a-z][a-z0-9+.-]*:/i.test(u)&&!/^https?:\/\//i.test(u))return{ok:!1,error:"source must be an http(s) link or a plain reference"};let h=A(e);if(!h.ok)return h;let p,o=e.reply;return o&&typeof o=="object"&&l(o.channel)&&l(o.chatId)&&(p={channel:l(o.channel),chatId:l(o.chatId),...l(o.accountId)?{accountId:l(o.accountId)}:{}}),{ok:!0,card:{id:B(n,i),title:i,ask:s,recommend:a,if_silent:y,expires:d.at,...u?{source:u}:{},raised_by:c,created_at:new Date(n).toISOString(),...p?{reply:p}:{},...h.value,...t.origin?{origin:t.origin}:{},status:"pending"}}}function oe(e,t,n={}){let r=V(t,n);if(!r.ok)return r;let i=C(e,"pending").filter(s=>s.raised_by===r.card.raised_by).length;return i>=f.pendingPerAgent?{ok:!1,error:`${r.card.raised_by} already has ${i} cards waiting; wait for decisions before raising more`}:(w(e,r.card),r)}function ae(e,t,n,r={}){let i=S(e,t);if(!i)return{ok:!1,error:`no card "${t}"`};if(i.status!=="pending")return{ok:!1,error:`card "${t}" is already ${i.status}`};let s=_(i,n,r);if(!s.ok)return s;let a=l(r.note).slice(0,f.note),c={...i,status:"decided",verdict:n,decided_by:r.by??"operator",decided_at:new Date(r.now??Date.now()).toISOString(),...a?{note:a}:{},...s.choice?{choice:s.choice}:{},...s.text?{text:s.text}:{}};return w(e,c),{ok:!0,card:c}}function ce(e,t=Date.now()){let n=[];for(let r of C(e,"pending")){if(Date.parse(r.expires)>t)continue;let i={...r,status:"expired",outcome:r.if_silent,decided_by:"expiry",decided_at:new Date(t).toISOString()};w(e,i),n.push(i)}return n}function de(e){return C(e).filter(t=>t.status!=="pending"&&!t.agent_notified_at)}function ue(e,t,n=Date.now()){let r=S(e,t);!r||r.agent_notified_at||w(e,{...r,agent_notified_at:new Date(n).toISOString()})}function le(e){let t=e.status==="decided"?e.verdict==="yes"?"The operator said YES.":"The operator said NO.":`Nobody answered before it expired, so the default applied: ${e.outcome??e.if_silent}.`,n=[`[Approval result] Your decision card "${e.title}" (${e.id}) is closed.`,`Question: ${e.ask}`,t];return e.status==="decided"&&e.verdict==="yes"&&n.push(...D(e)),e.note&&n.push(`Operator note: ${e.note}`),e.source&&n.push(`Source: ${e.source}`),e.origin?.kind==="reminder"&&n.push(...$(e.origin,e.status==="decided"&&e.verdict==="yes")),e.reply&&n.push(`You raised it from ${e.reply.channel} chat ${e.reply.chatId}; reply there if the requester should know.`),n.push("Act on this result now. Do not raise the same card again."),n.join(`
+`)}function b(e,t=160){if(!e)return e;let n=e.replace(/\s+/g," ").trim();return n.length>t?n.slice(0,t-1)+"\u2026":n}function W(e){let t=new Map;for(let r of e.cronRuns??[]){let i=t.get(r.jobId);(!i||i.startedAt<r.startedAt)&&t.set(r.jobId,r)}let n={success:0,failed:0};for(let r of e.cronRuns??[])r.status==="success"?n.success++:n.failed++;return{id:e.id,name:e.name,url:e.url,reachable:e.reachable,error:b(e.error),uptimeSec:e.uptimeSec,inflight:e.inflight,restart:e.restart?.state&&e.restart.state!=="none"?e.restart:void 0,agents:e.agents.map(r=>({id:r.id,name:r.name,tier:r.tier,active:r.active,errors:r.errors,lastActive:r.lastActive,last:r.lastSummary?{text:b(r.lastSummary.text),at:r.lastSummary.at,ok:r.lastSummary.ok}:void 0})),crons:{today:n,items:(e.crons??[]).map(r=>{let i=t.get(r.id);return{id:r.id,enabled:r.enabled,schedule:r.schedule,agent:r.agent,nextRun:r.nextRun,consecutiveErrors:r.consecutiveErrors,last:i?{status:i.status,at:i.startedAt,text:b(i.status==="success"?i.responseSummary:i.errorSummary)}:void 0}})}}}function G(e){let t=[];for(let n of e)for(let r of n.agents)for(let i of r.runningTasks??[])t.push({node:n.url,nodeName:n.name,agentId:r.id,agentName:r.name,taskId:i.id,preview:b(i.messagePreview),channel:i.channel,startedAt:i.startedAt});return t.sort((n,r)=>n.startedAt<r.startedAt?1:-1)}var H=/^\/api\/app\/tasks\/(cancel|followup)$/;async function ge(e,t,n,r,i,s){let a=new URL(e.url||n,"http://localhost");if(r==="GET"&&(n==="/api/app/fleet"||n==="/api/app/activity")){let o=Y(a.searchParams.get("timezone")),g=await s.snapshot({date:Z(o),timezone:o});return n==="/api/app/activity"?m(t,200,{ts:g.ts,tasks:G(g.nodes)}):m(t,200,{ts:g.ts,nodes:g.nodes.map(W)})}if(r==="GET"&&n==="/api/app/approvals")return m(t,200,{nodes:await s.approvals()});if(r!=="POST")return!1;let c=n.match(H);if(!(c||["/api/app/nodes/restart","/api/app/nodes/reload","/api/app/crons/toggle","/api/app/approvals/decide"].includes(n)))return!1;let d;try{d=await I(e)}catch(o){return m(t,400,{error:o.message})}let u=k(d.node);if(!u)return m(t,400,{error:"node is required"});let h=`operator (phone: ${i})`,p;if(c){let o=k(d.taskId);if(!o)return m(t,400,{error:"taskId is required"});let g=`/api/tasks/${encodeURIComponent(o)}/${c[1]}`;if(c[1]==="cancel")p=await s.nodePost(u,g,{reason:`cancelled by ${h}`});else{let v=k(d.message);if(!v)return m(t,400,{error:"message is required"});p=await s.nodePost(u,g,{message:v,sender:h})}}else if(n==="/api/app/nodes/restart")p=await s.nodePost(u,d.cancel===!0?"/daemon/restart/cancel":"/daemon/restart",{});else if(n==="/api/app/nodes/reload")p=await s.nodePost(u,"/reload",{});else if(n==="/api/app/crons/toggle"){let o=k(d.cronId);if(!o||typeof d.enabled!="boolean")return m(t,400,{error:"cronId and enabled (true or false) are required"});p=await s.nodePost(u,`/crons/${encodeURIComponent(o)}/enabled`,{enabled:d.enabled})}else{let o=k(d.key),g=d.action;if(!o||g!=="yes"&&g!=="no"&&g!=="later")return m(t,400,{error:"key and action (yes, no or later) are required"});p=await s.decide(u,o,g,h)}return m(t,p.status,p.body)}function k(e){return typeof e=="string"?e.trim():""}function Y(e){if(!e)return"UTC";try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),e}catch{return"UTC"}}function Z(e,t=new Date){return new Intl.DateTimeFormat("en-CA",{timeZone:e,year:"numeric",month:"2-digit",day:"2-digit"}).format(t)}async function I(e,t=16*1024){let n=0,r=[];for await(let a of e){if(n+=a.length,n>t)throw new Error("body too large");r.push(a)}let i=Buffer.concat(r).toString("utf-8").trim();if(!i)return{};let s=JSON.parse(i);if(!s||typeof s!="object"||Array.isArray(s))throw new Error("expected a JSON object");return s}function m(e,t,n){return e.writeHead(t,{"Content-Type":"application/json","Cache-Control":"no-store"}),e.end(JSON.stringify(n)),!0}var K={perClient:5,global:10,windowMs:10*60*1e3,lockoutMs:5*60*1e3},T=class{constructor(t=K,n=Date.now){this.opts=t;this.now=n}clients=new Map;all={failures:[],lockedUntil:0};retryAfter(t){let n=this.now(),r=Math.max(this.all.lockedUntil,this.clients.get(t)?.lockedUntil??0);return r>n?Math.ceil((r-n)/1e3):0}fail(t){let n=this.clients.get(t);n||this.clients.set(t,n={failures:[],lockedUntil:0}),this.bump(n,this.opts.perClient),this.bump(this.all,this.opts.global)}succeed(t){this.clients.delete(t)}bump(t,n){let r=this.now();t.failures=t.failures.filter(i=>r-i<this.opts.windowMs),t.failures.push(r),t.failures.length>=n&&(t.lockedUntil=r+this.opts.lockoutMs)}},Q="That code didn't work. Check it, or run agentx app pair for a new one.",X=400;async function ye(e,t){let n=Date.now(),r=t.log??(d=>console.log(d)),i=e.socket.remoteAddress||"unknown",s=t.limiter.retryAfter(i);if(s>0)return r(`[app] pair-code refused from ${i}: locked out for ${s}s more`),{status:429,body:{error:"too many attempts",retryAfter:s},retryAfter:s};let a=null;try{a=(await I(e,1024)).code}catch{}let c=t.codes.redeem(a),y=c?t.verify(c.token):null;return await ee(n,t.minMs??X),!c||!y?(t.limiter.fail(i),r(`[app] pair-code failed from ${i}`),{status:401,body:{error:Q}}):(t.limiter.succeed(i),r(`[app] pair-code paired ${c.tokenId} (${y}) from ${i}`),{status:200,body:{device:y},token:c.token})}async function ee(e,t){let n=e+t-Date.now();n>0&&await new Promise(r=>setTimeout(r,n))}export{R as a,f as b,x as c,N as d,S as e,C as f,oe as g,ae as h,ce as i,de as j,ue as k,le as l,ge as m,I as n,T as o,Q as p,ye as q};
+//# sourceMappingURL=chunk-E5OV6RTG.js.map

package/dist/chunk-E5OV6RTG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/approvals/cards.ts","../src/approvals/origin.ts","../src/daemon/app-fleet.ts","../src/daemon/app-pair-code.ts"],"sourcesContent":["import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { answerLines, buildChoices, resolveAnswer, type CardChoices } from \"./choices\"\nimport { originLines, type CardOrigin } from \"./origin\"\n\n// --- Decision cards: what an agent asks the operator ---\n//\n// An agent that needs a yes/no from the operator writes a card instead of\n// asking in chat. A card says what it is, the question, what the agent\n// recommends, and what happens if nobody answers by `expires`. Nothing\n// waits forever: past `expires` the daemon applies `if_silent` (sweep.ts).\n//\n// Storage: one JSON file per card under `.agentx/approvals/`, written\n// atomically, like wiki proposals. The CLI, the dashboard and the daemon\n// are separate processes and all read the same files.\n//\n// Field names match the API (`if_silent`, `raised_by`), so a stored card is\n// exactly what `POST /approvals` accepted.\n\nexport type IfSilent = \"discard\" | \"keep\" | \"pause\" | \"approve\"\nexport const IF_SILENT_VALUES: readonly IfSilent[] = [\"discard\", \"keep\", \"pause\", \"approve\"]\n\nexport type CardStatus = \"pending\" | \"decided\" | \"expired\"\nexport type Verdict = \"yes\" | \"no\"\n\n/** Where the agent was asked, so the verdict can be taken back there. */\nexport interface ReplyTarget {\n  channel: string\n  chatId: string\n  accountId?: string\n}\n\nexport interface DecisionCard extends CardChoices {\n  id: string\n  title: string\n  ask: string\n  recommend: string\n  if_silent: IfSilent\n  /** ISO time the default applies. Always set. */\n  expires: string\n  /** Link to the draft, PR or issue. */\n  source?: string\n  raised_by: string\n  created_at: string\n  reply?: ReplyTarget\n  status: CardStatus\n  /** The operator's answer (status \"decided\"). */\n  verdict?: Verdict\n  /** What applied on expiry (status \"expired\"). */\n  outcome?: IfSilent\n  decided_by?: string\n  decided_at?: string\n  note?: string\n  /** The option the operator picked, when the card offered choices. */\n  choice?: string\n  /** The message the operator approved, after any edit. */\n  text?: string\n  /** Set once the raising agent has been told the result. */\n  agent_notified_at?: string\n  /** What the card is about, when the daemon raised it (origin.ts). */\n  origin?: CardOrigin\n}\n\nexport const CARD_LIMITS = {\n  title: 120,\n  ask: 300,\n  recommend: 300,\n  source: 500,\n  note: 500,\n  /** Pending cards one agent may have open at a time. */\n  pendingPerAgent: 25,\n} as const\n\nexport interface CardSettings {\n  defaultExpiryDays: number\n  maxExpiryDays: number\n}\n\nexport const DEFAULT_CARD_SETTINGS: CardSettings = { defaultExpiryDays: 3, maxExpiryDays: 30 }\n\nexport function approvalsDir(root: string): string {\n  return resolve(root, \".agentx\", \"approvals\")\n}\n\nconst CARD_ID_RE = /^[a-z0-9][a-z0-9-]{0,80}$/\n\nexport function isValidCardId(id: string): boolean {\n  return CARD_ID_RE.test(id)\n}\n\nfunction fileFor(root: string, id: string): string {\n  if (!isValidCardId(id)) throw new Error(`invalid card id: ${id}`)\n  return resolve(approvalsDir(root), `${id}.json`)\n}\n\nexport function newCardId(now: number, title: string): string {\n  const day = new Date(now).toISOString().slice(0, 10)\n  const slug = title.toLowerCase().replace(/[^a-z0-9]+/g, \"-\").replace(/^-+|-+$/g, \"\").slice(0, 40)\n  return `${day}-${slug || \"card\"}-${Math.random().toString(36).slice(2, 6)}`\n}\n\nexport function saveCard(root: string, card: DecisionCard): void {\n  mkdirSync(approvalsDir(root), { recursive: true })\n  const path = fileFor(root, card.id)\n  const tmp = `${path}.${process.pid}.tmp`\n  writeFileSync(tmp, JSON.stringify(card, null, 2) + \"\\n\")\n  renameSync(tmp, path)\n}\n\nexport function readCard(root: string, id: string): DecisionCard | null {\n  if (!isValidCardId(id)) return null\n  try {\n    return JSON.parse(readFileSync(fileFor(root, id), \"utf-8\")) as DecisionCard\n  } catch {\n    return null\n  }\n}\n\n/** Cards, oldest first; only `status` ones when given. */\nexport function listCards(root: string, status?: CardStatus): DecisionCard[] {\n  const dir = approvalsDir(root)\n  if (!existsSync(dir)) return []\n  const out: DecisionCard[] = []\n  for (const f of readdirSync(dir).filter((f) => f.endsWith(\".json\") && !f.startsWith(\"_\")).sort()) {\n    const c = readCard(root, f.slice(0, -5))\n    if (c && (!status || c.status === status)) out.push(c)\n  }\n  return out\n}\n\nfunction oneLine(v: unknown): string {\n  return typeof v === \"string\" ? v.replace(/\\s+/g, \" \").trim() : \"\"\n}\n\n/**\n * `expires` as given by an agent: an ISO date or time, or a relative\n * \"12h\" / \"3d\". Unset: the default. Always capped at maxExpiryDays, so a\n * card can't be parked for a year.\n */\nexport function resolveExpiry(input: unknown, now: number, settings: CardSettings): { ok: true; at: string } | { ok: false; error: string } {\n  const max = now + settings.maxExpiryDays * 86_400_000\n  let at: number\n  const raw = oneLine(input)\n  if (!raw) {\n    at = now + settings.defaultExpiryDays * 86_400_000\n  } else {\n    const rel = /^(\\d+)\\s*([hd])$/i.exec(raw)\n    if (rel) {\n      at = now + Number(rel[1]) * (rel[2].toLowerCase() === \"d\" ? 86_400_000 : 3_600_000)\n    } else {\n      at = Date.parse(raw)\n      if (Number.isNaN(at)) return { ok: false, error: `expires must be an ISO date or time, or like \"12h\" / \"3d\" (got \"${raw}\")` }\n    }\n  }\n  if (at <= now) return { ok: false, error: \"expires must be in the future\" }\n  return { ok: true, at: new Date(Math.min(at, max)).toISOString() }\n}\n\nexport interface CardInput {\n  title?: unknown\n  ask?: unknown\n  recommend?: unknown\n  if_silent?: unknown\n  expires?: unknown\n  source?: unknown\n  raised_by?: unknown\n  reply?: unknown\n  choices?: unknown\n  draft?: unknown\n  say?: unknown\n  context?: unknown\n}\n\n/** Validate what an agent sent and build a pending card. Never saves. */\nexport function buildCard(\n  input: CardInput,\n  opts: { now?: number; settings?: CardSettings; origin?: CardOrigin } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const now = opts.now ?? Date.now()\n  const settings = opts.settings ?? DEFAULT_CARD_SETTINGS\n  const title = oneLine(input.title)\n  const ask = oneLine(input.ask)\n  const recommend = oneLine(input.recommend)\n  const raisedBy = oneLine(input.raised_by)\n  if (!title) return { ok: false, error: \"title is required\" }\n  if (!ask) return { ok: false, error: \"ask is required: the yes/no question\" }\n  if (!recommend) return { ok: false, error: \"recommend is required: your advice and why, in one line\" }\n  if (!raisedBy) return { ok: false, error: \"raised_by is required: the agent id\" }\n  if (title.length > CARD_LIMITS.title) return { ok: false, error: `title is longer than ${CARD_LIMITS.title} characters` }\n  if (ask.length > CARD_LIMITS.ask) return { ok: false, error: `ask is longer than ${CARD_LIMITS.ask} characters` }\n  if (recommend.length > CARD_LIMITS.recommend) return { ok: false, error: `recommend is longer than ${CARD_LIMITS.recommend} characters` }\n  const ifSilent = oneLine(input.if_silent).toLowerCase()\n  if (!IF_SILENT_VALUES.includes(ifSilent as IfSilent)) {\n    return { ok: false, error: `if_silent must be one of ${IF_SILENT_VALUES.join(\", \")}` }\n  }\n  const expiry = resolveExpiry(input.expires, now, settings)\n  if (!expiry.ok) return expiry\n  const source = oneLine(input.source)\n  if (source.length > CARD_LIMITS.source) return { ok: false, error: `source is longer than ${CARD_LIMITS.source} characters` }\n  if (source && /^[a-z][a-z0-9+.-]*:/i.test(source) && !/^https?:\\/\\//i.test(source)) {\n    return { ok: false, error: \"source must be an http(s) link or a plain reference\" }\n  }\n  const extras = buildChoices(input)\n  if (!extras.ok) return extras\n  let reply: ReplyTarget | undefined\n  const r = input.reply as Record<string, unknown> | undefined\n  if (r && typeof r === \"object\" && oneLine(r.channel) && oneLine(r.chatId)) {\n    reply = { channel: oneLine(r.channel), chatId: oneLine(r.chatId), ...(oneLine(r.accountId) ? { accountId: oneLine(r.accountId) } : {}) }\n  }\n  return {\n    ok: true,\n    card: {\n      id: newCardId(now, title),\n      title,\n      ask,\n      recommend,\n      if_silent: ifSilent as IfSilent,\n      expires: expiry.at,\n      ...(source ? { source } : {}),\n      raised_by: raisedBy,\n      created_at: new Date(now).toISOString(),\n      ...(reply ? { reply } : {}),\n      ...extras.value,\n      // Set by the daemon only (check-ins), never from what an agent sent.\n      ...(opts.origin ? { origin: opts.origin } : {}),\n      status: \"pending\",\n    },\n  }\n}\n\n/** Validate, enforce the per-agent cap, and save. */\nexport function createCard(\n  root: string,\n  input: CardInput,\n  opts: { now?: number; settings?: CardSettings; origin?: CardOrigin } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const built = buildCard(input, opts)\n  if (!built.ok) return built\n  const open = listCards(root, \"pending\").filter((c) => c.raised_by === built.card.raised_by).length\n  if (open >= CARD_LIMITS.pendingPerAgent) {\n    return { ok: false, error: `${built.card.raised_by} already has ${open} cards waiting; wait for decisions before raising more` }\n  }\n  saveCard(root, built.card)\n  return built\n}\n\n/** Record the operator's answer. Refuses anything no longer pending. */\nexport function decideCard(\n  root: string,\n  id: string,\n  verdict: Verdict,\n  opts: { by?: string; note?: string; now?: number; choice?: string | number; text?: string } = {},\n): { ok: true; card: DecisionCard } | { ok: false; error: string } {\n  const card = readCard(root, id)\n  if (!card) return { ok: false, error: `no card \"${id}\"` }\n  if (card.status !== \"pending\") return { ok: false, error: `card \"${id}\" is already ${card.status}` }\n  const answer = resolveAnswer(card, verdict, opts)\n  if (!answer.ok) return answer\n  const note = oneLine(opts.note).slice(0, CARD_LIMITS.note)\n  const decided: DecisionCard = {\n    ...card,\n    status: \"decided\",\n    verdict,\n    decided_by: opts.by ?? \"operator\",\n    decided_at: new Date(opts.now ?? Date.now()).toISOString(),\n    ...(note ? { note } : {}),\n    ...(answer.choice ? { choice: answer.choice } : {}),\n    ...(answer.text ? { text: answer.text } : {}),\n  }\n  saveCard(root, decided)\n  return { ok: true, card: decided }\n}\n\n/** Apply `if_silent` to every pending card past its expiry. */\nexport function expireCards(root: string, now: number = Date.now()): DecisionCard[] {\n  const out: DecisionCard[] = []\n  for (const card of listCards(root, \"pending\")) {\n    if (Date.parse(card.expires) > now) continue\n    const expired: DecisionCard = {\n      ...card,\n      status: \"expired\",\n      outcome: card.if_silent,\n      decided_by: \"expiry\",\n      decided_at: new Date(now).toISOString(),\n    }\n    saveCard(root, expired)\n    out.push(expired)\n  }\n  return out\n}\n\n/** Decided or expired cards whose agent hasn't been told yet. */\nexport function cardsAwaitingAgentNotice(root: string): DecisionCard[] {\n  return listCards(root).filter((c) => c.status !== \"pending\" && !c.agent_notified_at)\n}\n\nexport function markAgentNotified(root: string, id: string, now: number = Date.now()): void {\n  const card = readCard(root, id)\n  if (!card || card.agent_notified_at) return\n  saveCard(root, { ...card, agent_notified_at: new Date(now).toISOString() })\n}\n\n/** What the raising agent is told. Plain text, one short message. */\nexport function verdictMessage(card: DecisionCard): string {\n  const result = card.status === \"decided\"\n    ? (card.verdict === \"yes\" ? \"The operator said YES.\" : \"The operator said NO.\")\n    : `Nobody answered before it expired, so the default applied: ${card.outcome ?? card.if_silent}.`\n  const lines = [\n    `[Approval result] Your decision card \"${card.title}\" (${card.id}) is closed.`,\n    `Question: ${card.ask}`,\n    result,\n  ]\n  if (card.status === \"decided\" && card.verdict === \"yes\") lines.push(...answerLines(card))\n  if (card.note) lines.push(`Operator note: ${card.note}`)\n  if (card.source) lines.push(`Source: ${card.source}`)\n  if (card.origin?.kind === \"reminder\") lines.push(...originLines(card.origin, card.status === \"decided\" && card.verdict === \"yes\"))\n  if (card.reply) lines.push(`You raised it from ${card.reply.channel} chat ${card.reply.chatId}; reply there if the requester should know.`)\n  lines.push(\"Act on this result now. Do not raise the same card again.\")\n  return lines.join(\"\\n\")\n}\n","// --- Where a card came from, when the daemon raised it ---\n//\n// Agents raise most cards themselves. A check-in (checkin.ts) raises one on\n// an agent's behalf for an open Apple Reminder, and records the reminder\n// here so the agent that gets the answer knows what to act on and what to\n// tick off. Only the daemon sets it: POST /approvals and the agent tool\n// never pass it through.\n\nexport interface ReminderOrigin {\n  kind: \"reminder\"\n  /** The reminder's full id, as remindctl prints it. */\n  id: string\n  title: string\n  list?: string\n}\n\n/** An open request that needs attention, shown as a card on the Mac\n *  (popup-runner.ts). Never stored: the request is the record. */\nexport interface RequestOrigin {\n  kind: \"request\"\n  id: string\n}\n\nexport type CardOrigin = ReminderOrigin | RequestOrigin\n\n/** Lines for the owning agent's result message. */\nexport function originLines(origin: ReminderOrigin, approved: boolean): string[] {\n  const where = origin.list ? ` in the \"${origin.list}\" list` : \"\"\n  const lines = [`This card came from the operator's reminder \"${origin.title}\"${where} (id ${origin.id}).`]\n  lines.push(approved\n    ? `Do what the operator chose, then tick the reminder off: remindctl complete ${origin.id}`\n    : \"Leave the reminder open; it will come back at a later check-in.\")\n  return lines\n}\n","import type { IncomingMessage, ServerResponse } from \"http\"\n\n// --- Phone app: fleet, activity and control (/api/app/fleet, …) ---\n//\n// Phase 3 of the mobile epic. Runs behind the device-token check in\n// app-routes.ts, so every handler here may assume a paired phone.\n//\n// Reads reuse the dashboard's live snapshot (every node the dashboard can\n// see, including peers found through /mesh) and trim it to what a phone\n// shows: short previews, never full prompts, replies or errors. Writes go\n// to a node daemon through the dashboard's allowlisted, token-carrying POST\n// (AppFleetDeps.nodePost), the same path the desktop task and restart\n// buttons use, so the phone gets no power the dashboard doesn't already have.\n\nexport const PREVIEW_CHARS = 160\n\nexport interface SnapshotNode {\n  id: string\n  name: string\n  url: string\n  reachable: boolean\n  error?: string\n  uptimeSec?: number\n  inflight?: number\n  restart?: { state: string; requestedAt?: string; deadline?: string }\n  agents: Array<{\n    id: string\n    name: string\n    tier?: string\n    color?: string\n    active: number\n    errors: number\n    lastActive?: string\n    lastSummary?: { text: string; at: string; ok: boolean }\n    runningTasks?: Array<{ id: string; messagePreview: string; channel: string; chatId?: string; sender?: string; startedAt: string }>\n  }>\n  crons?: Array<{ id: string; enabled: boolean; schedule: string; agent: string; kind?: string; nextRun?: string; consecutiveErrors: number }>\n  cronRuns?: Array<{ jobId: string; startedAt: string; status: string; responseSummary?: string; errorSummary?: string; isRetry?: boolean }>\n}\n\nexport interface ApprovalItem {\n  key: string\n  title: string\n  ask?: string\n  recommend?: string\n  /** What yes and no do, in words. */\n  yes?: string\n  no?: string\n  raisedBy?: string\n  expires?: string\n}\n\nexport interface NodeApprovals {\n  node: string\n  nodeName: string\n  items: ApprovalItem[]\n  error?: string\n}\n\nexport interface NodeReply { status: number; body: any }\n\nexport interface AppFleetDeps {\n  snapshot(day?: { date: string; timezone: string }): Promise<{ ts: string; nodes: SnapshotNode[] }>\n  /** POST to a node daemon on the dashboard's allowlist, with its token. */\n  nodePost(nodeUrl: string, path: string, body: unknown): Promise<NodeReply>\n  approvals(): Promise<NodeApprovals[]>\n  /** `by` names the phone, e.g. \"operator (phone: My phone)\". */\n  decide(nodeUrl: string, key: string, action: \"yes\" | \"no\" | \"later\", by: string): Promise<NodeReply>\n}\n\nexport function clip(text: string | undefined, max = PREVIEW_CHARS): string | undefined {\n  if (!text) return text\n  const flat = text.replace(/\\s+/g, \" \").trim()\n  return flat.length > max ? flat.slice(0, max - 1) + \"…\" : flat\n}\n\n/** One node, trimmed for the Fleet tab. Cron outcomes come from the node's\n *  persisted run files (cronRuns), never the scheduler's counters. */\nexport function summarizeNode(n: SnapshotNode) {\n  const lastRun = new Map<string, NonNullable<SnapshotNode[\"cronRuns\"]>[number]>()\n  for (const r of n.cronRuns ?? []) {\n    const prev = lastRun.get(r.jobId)\n    if (!prev || prev.startedAt < r.startedAt) lastRun.set(r.jobId, r)\n  }\n  const today = { success: 0, failed: 0 }\n  for (const r of n.cronRuns ?? []) {\n    if (r.status === \"success\") today.success++\n    else today.failed++\n  }\n  return {\n    id: n.id,\n    name: n.name,\n    url: n.url,\n    reachable: n.reachable,\n    error: clip(n.error),\n    uptimeSec: n.uptimeSec,\n    inflight: n.inflight,\n    restart: n.restart?.state && n.restart.state !== \"none\" ? n.restart : undefined,\n    agents: n.agents.map((a) => ({\n      id: a.id,\n      name: a.name,\n      tier: a.tier,\n      active: a.active,\n      errors: a.errors,\n      lastActive: a.lastActive,\n      last: a.lastSummary ? { text: clip(a.lastSummary.text), at: a.lastSummary.at, ok: a.lastSummary.ok } : undefined,\n    })),\n    crons: {\n      today,\n      items: (n.crons ?? []).map((c) => {\n        const r = lastRun.get(c.id)\n        return {\n          id: c.id,\n          enabled: c.enabled,\n          schedule: c.schedule,\n          agent: c.agent,\n          nextRun: c.nextRun,\n          consecutiveErrors: c.consecutiveErrors,\n          last: r ? { status: r.status, at: r.startedAt, text: clip(r.status === \"success\" ? r.responseSummary : r.errorSummary) } : undefined,\n        }\n      }),\n    },\n  }\n}\n\n/** Every running task across the fleet, newest first. */\nexport function summarizeActivity(nodes: SnapshotNode[]) {\n  const tasks = []\n  for (const n of nodes) {\n    for (const a of n.agents) {\n      for (const t of a.runningTasks ?? []) {\n        tasks.push({\n          node: n.url,\n          nodeName: n.name,\n          agentId: a.id,\n          agentName: a.name,\n          taskId: t.id,\n          preview: clip(t.messagePreview),\n          channel: t.channel,\n          startedAt: t.startedAt,\n        })\n      }\n    }\n  }\n  return tasks.sort((x, y) => (x.startedAt < y.startedAt ? 1 : -1))\n}\n\nconst TASK_ACTION = /^\\/api\\/app\\/tasks\\/(cancel|followup)$/\n\n/** Handles /api/app/{fleet,activity,tasks,nodes,crons,approvals}. Returns\n *  false for any other path so the caller can fall through. */\nexport async function handleAppFleet(\n  req: IncomingMessage,\n  res: ServerResponse,\n  path: string,\n  method: string,\n  device: string,\n  deps: AppFleetDeps,\n): Promise<boolean> {\n  const url = new URL(req.url || path, \"http://localhost\")\n\n  if (method === \"GET\" && (path === \"/api/app/fleet\" || path === \"/api/app/activity\")) {\n    const timezone = validTimezone(url.searchParams.get(\"timezone\"))\n    const snap = await deps.snapshot({ date: dateIn(timezone), timezone })\n    if (path === \"/api/app/activity\") return json(res, 200, { ts: snap.ts, tasks: summarizeActivity(snap.nodes) })\n    return json(res, 200, { ts: snap.ts, nodes: snap.nodes.map(summarizeNode) })\n  }\n\n  if (method === \"GET\" && path === \"/api/app/approvals\") {\n    return json(res, 200, { nodes: await deps.approvals() })\n  }\n\n  if (method !== \"POST\") return false\n  const taskAction = path.match(TASK_ACTION)\n  const known = taskAction || [\n    \"/api/app/nodes/restart\", \"/api/app/nodes/reload\", \"/api/app/crons/toggle\", \"/api/app/approvals/decide\",\n  ].includes(path)\n  if (!known) return false\n\n  let body: Record<string, unknown>\n  try { body = await readJson(req) } catch (e: any) { return json(res, 400, { error: e.message }) }\n  const node = str(body.node)\n  if (!node) return json(res, 400, { error: \"node is required\" })\n  const by = `operator (phone: ${device})`\n\n  let reply: NodeReply\n  if (taskAction) {\n    const taskId = str(body.taskId)\n    if (!taskId) return json(res, 400, { error: \"taskId is required\" })\n    const upstream = `/api/tasks/${encodeURIComponent(taskId)}/${taskAction[1]}`\n    if (taskAction[1] === \"cancel\") {\n      reply = await deps.nodePost(node, upstream, { reason: `cancelled by ${by}` })\n    } else {\n      const message = str(body.message)\n      if (!message) return json(res, 400, { error: \"message is required\" })\n      reply = await deps.nodePost(node, upstream, { message, sender: by })\n    }\n  } else if (path === \"/api/app/nodes/restart\") {\n    reply = await deps.nodePost(node, body.cancel === true ? \"/daemon/restart/cancel\" : \"/daemon/restart\", {})\n  } else if (path === \"/api/app/nodes/reload\") {\n    reply = await deps.nodePost(node, \"/reload\", {})\n  } else if (path === \"/api/app/crons/toggle\") {\n    const cronId = str(body.cronId)\n    if (!cronId || typeof body.enabled !== \"boolean\") return json(res, 400, { error: \"cronId and enabled (true or false) are required\" })\n    reply = await deps.nodePost(node, `/crons/${encodeURIComponent(cronId)}/enabled`, { enabled: body.enabled })\n  } else {\n    const key = str(body.key)\n    const action = body.action\n    if (!key || (action !== \"yes\" && action !== \"no\" && action !== \"later\")) {\n      return json(res, 400, { error: \"key and action (yes, no or later) are required\" })\n    }\n    reply = await deps.decide(node, key, action, by)\n  }\n  return json(res, reply.status, reply.body)\n}\n\nfunction str(v: unknown): string {\n  return typeof v === \"string\" ? v.trim() : \"\"\n}\n\nfunction validTimezone(tz: string | null): string {\n  if (!tz) return \"UTC\"\n  try { new Intl.DateTimeFormat(\"en-US\", { timeZone: tz }); return tz } catch { return \"UTC\" }\n}\n\n/** YYYY-MM-DD for \"today\" in the phone's time zone. */\nexport function dateIn(timezone: string, now = new Date()): string {\n  return new Intl.DateTimeFormat(\"en-CA\", { timeZone: timezone, year: \"numeric\", month: \"2-digit\", day: \"2-digit\" }).format(now)\n}\n\nexport async function readJson(req: IncomingMessage, limit = 16 * 1024): Promise<Record<string, unknown>> {\n  let size = 0\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    size += (chunk as Buffer).length\n    if (size > limit) throw new Error(\"body too large\")\n    chunks.push(chunk as Buffer)\n  }\n  const raw = Buffer.concat(chunks).toString(\"utf-8\").trim()\n  if (!raw) return {}\n  const parsed = JSON.parse(raw)\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) throw new Error(\"expected a JSON object\")\n  return parsed\n}\n\nfunction json(res: ServerResponse, status: number, body: unknown): true {\n  res.writeHead(status, { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" })\n  res.end(JSON.stringify(body))\n  return true\n}\n","import type { IncomingMessage } from \"http\"\nimport { PairCodeStore } from \"./pair-codes\"\nimport { readJson } from \"./app-fleet\"\n\n// --- POST /api/app/pair-code: trade a one-time code for the session ---\n//\n// Public by necessity (the phone isn't paired yet), so it is guarded three\n// ways: an 8-symbol code (31^8 ≈ 850 billion), a per-client and a GLOBAL\n// failure limit with lockout, and one answer for every failure. Behind\n// `tailscale serve` every request arrives from 127.0.0.1, so the per-client\n// limit alone would see one client; the global limit is what really bounds\n// guessing: at most 10 wrong codes in any 10 minutes, whoever sends them.\n//\n// Every attempt is padded to the same minimum duration, so wrong, expired\n// and used codes can't be told apart by timing either.\n\nexport interface PairLimitOptions {\n  perClient: number   // failures per window before that client is locked out\n  global: number      // failures per window, all clients together\n  windowMs: number\n  lockoutMs: number\n}\n\nexport const DEFAULT_PAIR_LIMITS: PairLimitOptions = {\n  perClient: 5,\n  global: 10,\n  windowMs: 10 * 60 * 1000,\n  lockoutMs: 5 * 60 * 1000,\n}\n\ninterface Bucket { failures: number[]; lockedUntil: number }\n\n/** In-memory failure counter. A dashboard restart clears it; codes still\n *  expire after 10 minutes, so that grants an attacker nothing lasting. */\nexport class PairAttemptLimiter {\n  private clients = new Map<string, Bucket>()\n  private all: Bucket = { failures: [], lockedUntil: 0 }\n\n  constructor(private opts: PairLimitOptions = DEFAULT_PAIR_LIMITS, private now: () => number = Date.now) {}\n\n  /** Seconds until this client may try again, or 0 when it may try now. */\n  retryAfter(client: string): number {\n    const now = this.now()\n    const until = Math.max(this.all.lockedUntil, this.clients.get(client)?.lockedUntil ?? 0)\n    return until > now ? Math.ceil((until - now) / 1000) : 0\n  }\n\n  fail(client: string): void {\n    let bucket = this.clients.get(client)\n    if (!bucket) this.clients.set(client, (bucket = { failures: [], lockedUntil: 0 }))\n    this.bump(bucket, this.opts.perClient)\n    this.bump(this.all, this.opts.global)\n  }\n\n  succeed(client: string): void {\n    this.clients.delete(client)\n  }\n\n  private bump(bucket: Bucket, limit: number): void {\n    const now = this.now()\n    bucket.failures = bucket.failures.filter((t) => now - t < this.opts.windowMs)\n    bucket.failures.push(now)\n    if (bucket.failures.length >= limit) bucket.lockedUntil = now + this.opts.lockoutMs\n  }\n}\n\nexport interface PairCodeDeps {\n  codes: PairCodeStore\n  limiter: PairAttemptLimiter\n  /** Checks the redeemed token is still an active `app` token; returns its device name. */\n  verify: (token: string) => string | null\n  log?: (line: string) => void\n  minMs?: number\n}\n\nexport type PairCodeResult =\n  | { status: 200; body: { device: string }; token: string }\n  | { status: 401; body: { error: string } }\n  | { status: 429; body: { error: string; retryAfter: number }; retryAfter: number }\n\nexport const PAIR_CODE_FAILED = \"That code didn't work. Check it, or run agentx app pair for a new one.\"\nconst MIN_MS = 400\n\nexport async function redeemPairCode(req: IncomingMessage, deps: PairCodeDeps): Promise<PairCodeResult> {\n  const started = Date.now()\n  const log = deps.log ?? ((line: string) => console.log(line))\n  const client = req.socket.remoteAddress || \"unknown\"\n\n  const wait = deps.limiter.retryAfter(client)\n  if (wait > 0) {\n    log(`[app] pair-code refused from ${client}: locked out for ${wait}s more`)\n    return { status: 429, body: { error: \"too many attempts\", retryAfter: wait }, retryAfter: wait }\n  }\n\n  let code: unknown = null\n  try { code = (await readJson(req, 1024)).code } catch { /* counts as a wrong code */ }\n  const redeemed = deps.codes.redeem(code)\n  const device = redeemed ? deps.verify(redeemed.token) : null\n  await padTo(started, deps.minMs ?? MIN_MS)\n\n  if (!redeemed || !device) {\n    deps.limiter.fail(client)\n    log(`[app] pair-code failed from ${client}`)\n    return { status: 401, body: { error: PAIR_CODE_FAILED } }\n  }\n  deps.limiter.succeed(client)\n  log(`[app] pair-code paired ${redeemed.tokenId} (${device}) from ${client}`)\n  return { status: 200, body: { device }, token: redeemed.token }\n}\n\nasync function padTo(started: number, minMs: number): Promise<void> {\n  const left = started + minMs - Date.now()\n  if (left > 0) await new Promise((r) => setTimeout(r, left))\n}\n"],"mappings":"sDAAA,OAAS,cAAAA,EAAY,aAAAC,EAAW,eAAAC,EAAa,gBAAAC,EAAc,cAAAC,EAAY,iBAAAC,MAAqB,KAC5F,OAAS,WAAAC,MAAe,OCyBjB,SAASC,EAAYC,EAAwBC,EAA6B,CAC/E,IAAMC,EAAQF,EAAO,KAAO,YAAYA,EAAO,aAAe,GACxDG,EAAQ,CAAC,gDAAgDH,EAAO,SAASE,SAAaF,EAAO,MAAM,EACzG,OAAAG,EAAM,KAAKF,EACP,8EAA8ED,EAAO,KACrF,iEAAiE,EAC9DG,CACT,CDbO,IAAMC,EAAwC,CAAC,UAAW,OAAQ,QAAS,SAAS,EA2C9EC,EAAc,CACzB,MAAO,IACP,IAAK,IACL,UAAW,IACX,OAAQ,IACR,KAAM,IAEN,gBAAiB,EACnB,EAOaC,EAAsC,CAAE,kBAAmB,EAAG,cAAe,EAAG,EAEtF,SAASC,EAAaC,EAAsB,CACjD,OAAOC,EAAQD,EAAM,UAAW,WAAW,CAC7C,CAEA,IAAME,EAAa,4BAEZ,SAASC,EAAcC,EAAqB,CACjD,OAAOF,EAAW,KAAKE,CAAE,CAC3B,CAEA,SAASC,EAAQL,EAAcI,EAAoB,CACjD,GAAI,CAACD,EAAcC,CAAE,EAAG,MAAM,IAAI,MAAM,oBAAoBA,GAAI,EAChE,OAAOH,EAAQF,EAAaC,CAAI,EAAG,GAAGI,QAAS,CACjD,CAEO,SAASE,EAAUC,EAAaC,EAAuB,CAC5D,IAAMC,EAAM,IAAI,KAAKF,CAAG,EAAE,YAAY,EAAE,MAAM,EAAG,EAAE,EAC7CG,EAAOF,EAAM,YAAY,EAAE,QAAQ,cAAe,GAAG,EAAE,QAAQ,WAAY,EAAE,EAAE,MAAM,EAAG,EAAE,EAChG,MAAO,GAAGC,KAAOC,GAAQ,UAAU,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,GAC1E,CAEO,SAASC,EAASX,EAAcY,EAA0B,CAC/DC,EAAUd,EAAaC,CAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EACjD,IAAMc,EAAOT,EAAQL,EAAMY,EAAK,EAAE,EAC5BG,EAAM,GAAGD,KAAQ,QAAQ,UAC/BE,EAAcD,EAAK,KAAK,UAAUH,EAAM,KAAM,CAAC,EAAI;AAAA,CAAI,EACvDK,EAAWF,EAAKD,CAAI,CACtB,CAEO,SAASI,EAASlB,EAAcI,EAAiC,CACtE,GAAI,CAACD,EAAcC,CAAE,EAAG,OAAO,KAC/B,GAAI,CACF,OAAO,KAAK,MAAMe,EAAad,EAAQL,EAAMI,CAAE,EAAG,OAAO,CAAC,CAC5D,MAAE,CACA,OAAO,IACT,CACF,CAGO,SAASgB,EAAUpB,EAAcqB,EAAqC,CAC3E,IAAMC,EAAMvB,EAAaC,CAAI,EAC7B,GAAI,CAACuB,EAAWD,CAAG,EAAG,MAAO,CAAC,EAC9B,IAAME,EAAsB,CAAC,EAC7B,QAAWC,KAAKC,EAAYJ,CAAG,EAAE,OAAQG,GAAMA,EAAE,SAAS,OAAO,GAAK,CAACA,EAAE,WAAW,GAAG,CAAC,EAAE,KAAK,EAAG,CAChG,IAAME,EAAIT,EAASlB,EAAMyB,EAAE,MAAM,EAAG,EAAE,CAAC,EACnCE,IAAM,CAACN,GAAUM,EAAE,SAAWN,IAASG,EAAI,KAAKG,CAAC,EAEvD,OAAOH,CACT,CAEA,SAASI,EAAQC,EAAoB,CACnC,OAAO,OAAOA,GAAM,SAAWA,EAAE,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAAI,EACjE,CAOO,SAASC,EAAcC,EAAgBxB,EAAayB,EAAiF,CAC1I,IAAMC,EAAM1B,EAAMyB,EAAS,cAAgB,MACvCE,EACEC,EAAMP,EAAQG,CAAK,EACzB,GAAI,CAACI,EACHD,EAAK3B,EAAMyB,EAAS,kBAAoB,UACnC,CACL,IAAMI,EAAM,oBAAoB,KAAKD,CAAG,EACxC,GAAIC,EACFF,EAAK3B,EAAM,OAAO6B,EAAI,CAAC,CAAC,GAAKA,EAAI,CAAC,EAAE,YAAY,IAAM,IAAM,MAAa,cAEzEF,EAAK,KAAK,MAAMC,CAAG,EACf,OAAO,MAAMD,CAAE,EAAG,MAAO,CAAE,GAAI,GAAO,MAAO,mEAAmEC,KAAQ,EAGhI,OAAID,GAAM3B,EAAY,CAAE,GAAI,GAAO,MAAO,+BAAgC,EACnE,CAAE,GAAI,GAAM,GAAI,IAAI,KAAK,KAAK,IAAI2B,EAAID,CAAG,CAAC,EAAE,YAAY,CAAE,CACnE,CAkBO,SAASI,EACdN,EACAO,EAAuE,CAAC,EACP,CACjE,IAAM/B,EAAM+B,EAAK,KAAO,KAAK,IAAI,EAC3BN,EAAWM,EAAK,UAAYxC,EAC5BU,EAAQoB,EAAQG,EAAM,KAAK,EAC3BQ,EAAMX,EAAQG,EAAM,GAAG,EACvBS,EAAYZ,EAAQG,EAAM,SAAS,EACnCU,EAAWb,EAAQG,EAAM,SAAS,EACxC,GAAI,CAACvB,EAAO,MAAO,CAAE,GAAI,GAAO,MAAO,mBAAoB,EAC3D,GAAI,CAAC+B,EAAK,MAAO,CAAE,GAAI,GAAO,MAAO,sCAAuC,EAC5E,GAAI,CAACC,EAAW,MAAO,CAAE,GAAI,GAAO,MAAO,yDAA0D,EACrG,GAAI,CAACC,EAAU,MAAO,CAAE,GAAI,GAAO,MAAO,qCAAsC,EAChF,GAAIjC,EAAM,OAASX,EAAY,MAAO,MAAO,CAAE,GAAI,GAAO,MAAO,wBAAwBA,EAAY,kBAAmB,EACxH,GAAI0C,EAAI,OAAS1C,EAAY,IAAK,MAAO,CAAE,GAAI,GAAO,MAAO,sBAAsBA,EAAY,gBAAiB,EAChH,GAAI2C,EAAU,OAAS3C,EAAY,UAAW,MAAO,CAAE,GAAI,GAAO,MAAO,4BAA4BA,EAAY,sBAAuB,EACxI,IAAM6C,EAAWd,EAAQG,EAAM,SAAS,EAAE,YAAY,EACtD,GAAI,CAACnC,EAAiB,SAAS8C,CAAoB,EACjD,MAAO,CAAE,GAAI,GAAO,MAAO,4BAA4B9C,EAAiB,KAAK,IAAI,GAAI,EAEvF,IAAM+C,EAASb,EAAcC,EAAM,QAASxB,EAAKyB,CAAQ,EACzD,GAAI,CAACW,EAAO,GAAI,OAAOA,EACvB,IAAMC,EAAShB,EAAQG,EAAM,MAAM,EACnC,GAAIa,EAAO,OAAS/C,EAAY,OAAQ,MAAO,CAAE,GAAI,GAAO,MAAO,yBAAyBA,EAAY,mBAAoB,EAC5H,GAAI+C,GAAU,uBAAuB,KAAKA,CAAM,GAAK,CAAC,gBAAgB,KAAKA,CAAM,EAC/E,MAAO,CAAE,GAAI,GAAO,MAAO,qDAAsD,EAEnF,IAAMC,EAASC,EAAaf,CAAK,EACjC,GAAI,CAACc,EAAO,GAAI,OAAOA,EACvB,IAAIE,EACEC,EAAIjB,EAAM,MAChB,OAAIiB,GAAK,OAAOA,GAAM,UAAYpB,EAAQoB,EAAE,OAAO,GAAKpB,EAAQoB,EAAE,MAAM,IACtED,EAAQ,CAAE,QAASnB,EAAQoB,EAAE,OAAO,EAAG,OAAQpB,EAAQoB,EAAE,MAAM,EAAG,GAAIpB,EAAQoB,EAAE,SAAS,EAAI,CAAE,UAAWpB,EAAQoB,EAAE,SAAS,CAAE,EAAI,CAAC,CAAG,GAElI,CACL,GAAI,GACJ,KAAM,CACJ,GAAI1C,EAAUC,EAAKC,CAAK,EACxB,MAAAA,EACA,IAAA+B,EACA,UAAAC,EACA,UAAWE,EACX,QAASC,EAAO,GAChB,GAAIC,EAAS,CAAE,OAAAA,CAAO,EAAI,CAAC,EAC3B,UAAWH,EACX,WAAY,IAAI,KAAKlC,CAAG,EAAE,YAAY,EACtC,GAAIwC,EAAQ,CAAE,MAAAA,CAAM,EAAI,CAAC,EACzB,GAAGF,EAAO,MAEV,GAAIP,EAAK,OAAS,CAAE,OAAQA,EAAK,MAAO,EAAI,CAAC,EAC7C,OAAQ,SACV,CACF,CACF,CAGO,SAASW,GACdjD,EACA+B,EACAO,EAAuE,CAAC,EACP,CACjE,IAAMY,EAAQb,EAAUN,EAAOO,CAAI,EACnC,GAAI,CAACY,EAAM,GAAI,OAAOA,EACtB,IAAMC,EAAO/B,EAAUpB,EAAM,SAAS,EAAE,OAAQ2B,GAAMA,EAAE,YAAcuB,EAAM,KAAK,SAAS,EAAE,OAC5F,OAAIC,GAAQtD,EAAY,gBACf,CAAE,GAAI,GAAO,MAAO,GAAGqD,EAAM,KAAK,yBAAyBC,yDAA6D,GAEjIxC,EAASX,EAAMkD,EAAM,IAAI,EAClBA,EACT,CAGO,SAASE,GACdpD,EACAI,EACAiD,EACAf,EAA8F,CAAC,EAC9B,CACjE,IAAM1B,EAAOM,EAASlB,EAAMI,CAAE,EAC9B,GAAI,CAACQ,EAAM,MAAO,CAAE,GAAI,GAAO,MAAO,YAAYR,IAAM,EACxD,GAAIQ,EAAK,SAAW,UAAW,MAAO,CAAE,GAAI,GAAO,MAAO,SAASR,iBAAkBQ,EAAK,QAAS,EACnG,IAAM0C,EAASC,EAAc3C,EAAMyC,EAASf,CAAI,EAChD,GAAI,CAACgB,EAAO,GAAI,OAAOA,EACvB,IAAME,EAAO5B,EAAQU,EAAK,IAAI,EAAE,MAAM,EAAGzC,EAAY,IAAI,EACnD4D,EAAwB,CAC5B,GAAG7C,EACH,OAAQ,UACR,QAAAyC,EACA,WAAYf,EAAK,IAAM,WACvB,WAAY,IAAI,KAAKA,EAAK,KAAO,KAAK,IAAI,CAAC,EAAE,YAAY,EACzD,GAAIkB,EAAO,CAAE,KAAAA,CAAK,EAAI,CAAC,EACvB,GAAIF,EAAO,OAAS,CAAE,OAAQA,EAAO,MAAO,EAAI,CAAC,EACjD,GAAIA,EAAO,KAAO,CAAE,KAAMA,EAAO,IAAK,EAAI,CAAC,CAC7C,EACA,OAAA3C,EAASX,EAAMyD,CAAO,EACf,CAAE,GAAI,GAAM,KAAMA,CAAQ,CACnC,CAGO,SAASC,GAAY1D,EAAcO,EAAc,KAAK,IAAI,EAAmB,CAClF,IAAMiB,EAAsB,CAAC,EAC7B,QAAWZ,KAAQQ,EAAUpB,EAAM,SAAS,EAAG,CAC7C,GAAI,KAAK,MAAMY,EAAK,OAAO,EAAIL,EAAK,SACpC,IAAMoD,EAAwB,CAC5B,GAAG/C,EACH,OAAQ,UACR,QAASA,EAAK,UACd,WAAY,SACZ,WAAY,IAAI,KAAKL,CAAG,EAAE,YAAY,CACxC,EACAI,EAASX,EAAM2D,CAAO,EACtBnC,EAAI,KAAKmC,CAAO,EAElB,OAAOnC,CACT,CAGO,SAASoC,GAAyB5D,EAA8B,CACrE,OAAOoB,EAAUpB,CAAI,EAAE,OAAQ2B,GAAMA,EAAE,SAAW,WAAa,CAACA,EAAE,iBAAiB,CACrF,CAEO,SAASkC,GAAkB7D,EAAcI,EAAYG,EAAc,KAAK,IAAI,EAAS,CAC1F,IAAMK,EAAOM,EAASlB,EAAMI,CAAE,EAC1B,CAACQ,GAAQA,EAAK,mBAClBD,EAASX,EAAM,CAAE,GAAGY,EAAM,kBAAmB,IAAI,KAAKL,CAAG,EAAE,YAAY,CAAE,CAAC,CAC5E,CAGO,SAASuD,GAAelD,EAA4B,CACzD,IAAMmD,EAASnD,EAAK,SAAW,UAC1BA,EAAK,UAAY,MAAQ,yBAA2B,wBACrD,8DAA8DA,EAAK,SAAWA,EAAK,aACjFoD,EAAQ,CACZ,yCAAyCpD,EAAK,WAAWA,EAAK,iBAC9D,aAAaA,EAAK,MAClBmD,CACF,EACA,OAAInD,EAAK,SAAW,WAAaA,EAAK,UAAY,OAAOoD,EAAM,KAAK,GAAGC,EAAYrD,CAAI,CAAC,EACpFA,EAAK,MAAMoD,EAAM,KAAK,kBAAkBpD,EAAK,MAAM,EACnDA,EAAK,QAAQoD,EAAM,KAAK,WAAWpD,EAAK,QAAQ,EAChDA,EAAK,QAAQ,OAAS,YAAYoD,EAAM,KAAK,GAAGE,EAAYtD,EAAK,OAAQA,EAAK,SAAW,WAAaA,EAAK,UAAY,KAAK,CAAC,EAC7HA,EAAK,OAAOoD,EAAM,KAAK,sBAAsBpD,EAAK,MAAM,gBAAgBA,EAAK,MAAM,mDAAmD,EAC1IoD,EAAM,KAAK,2DAA2D,EAC/DA,EAAM,KAAK;AAAA,CAAI,CACxB,CEzPO,SAASG,EAAKC,EAA0BC,EAAM,IAAmC,CACtF,GAAI,CAACD,EAAM,OAAOA,EAClB,IAAME,EAAOF,EAAK,QAAQ,OAAQ,GAAG,EAAE,KAAK,EAC5C,OAAOE,EAAK,OAASD,EAAMC,EAAK,MAAM,EAAGD,EAAM,CAAC,EAAI,SAAMC,CAC5D,CAIO,SAASC,EAAcC,EAAiB,CAC7C,IAAMC,EAAU,IAAI,IACpB,QAAW,KAAKD,EAAE,UAAY,CAAC,EAAG,CAChC,IAAME,EAAOD,EAAQ,IAAI,EAAE,KAAK,GAC5B,CAACC,GAAQA,EAAK,UAAY,EAAE,YAAWD,EAAQ,IAAI,EAAE,MAAO,CAAC,EAEnE,IAAME,EAAQ,CAAE,QAAS,EAAG,OAAQ,CAAE,EACtC,QAAW,KAAKH,EAAE,UAAY,CAAC,EACzB,EAAE,SAAW,UAAWG,EAAM,UAC7BA,EAAM,SAEb,MAAO,CACL,GAAIH,EAAE,GACN,KAAMA,EAAE,KACR,IAAKA,EAAE,IACP,UAAWA,EAAE,UACb,MAAOL,EAAKK,EAAE,KAAK,EACnB,UAAWA,EAAE,UACb,SAAUA,EAAE,SACZ,QAASA,EAAE,SAAS,OAASA,EAAE,QAAQ,QAAU,OAASA,EAAE,QAAU,OACtE,OAAQA,EAAE,OAAO,IAAKI,IAAO,CAC3B,GAAIA,EAAE,GACN,KAAMA,EAAE,KACR,KAAMA,EAAE,KACR,OAAQA,EAAE,OACV,OAAQA,EAAE,OACV,WAAYA,EAAE,WACd,KAAMA,EAAE,YAAc,CAAE,KAAMT,EAAKS,EAAE,YAAY,IAAI,EAAG,GAAIA,EAAE,YAAY,GAAI,GAAIA,EAAE,YAAY,EAAG,EAAI,MACzG,EAAE,EACF,MAAO,CACL,MAAAD,EACA,OAAQH,EAAE,OAAS,CAAC,GAAG,IAAKK,GAAM,CAChC,IAAMC,EAAIL,EAAQ,IAAII,EAAE,EAAE,EAC1B,MAAO,CACL,GAAIA,EAAE,GACN,QAASA,EAAE,QACX,SAAUA,EAAE,SACZ,MAAOA,EAAE,MACT,QAASA,EAAE,QACX,kBAAmBA,EAAE,kBACrB,KAAMC,EAAI,CAAE,OAAQA,EAAE,OAAQ,GAAIA,EAAE,UAAW,KAAMX,EAAKW,EAAE,SAAW,UAAYA,EAAE,gBAAkBA,EAAE,YAAY,CAAE,EAAI,MAC7H,CACF,CAAC,CACH,CACF,CACF,CAGO,SAASC,EAAkBC,EAAuB,CACvD,IAAMC,EAAQ,CAAC,EACf,QAAW,KAAKD,EACd,QAAWJ,KAAK,EAAE,OAChB,QAAWM,KAAKN,EAAE,cAAgB,CAAC,EACjCK,EAAM,KAAK,CACT,KAAM,EAAE,IACR,SAAU,EAAE,KACZ,QAASL,EAAE,GACX,UAAWA,EAAE,KACb,OAAQM,EAAE,GACV,QAASf,EAAKe,EAAE,cAAc,EAC9B,QAASA,EAAE,QACX,UAAWA,EAAE,SACf,CAAC,EAIP,OAAOD,EAAM,KAAK,CAACE,EAAGC,IAAOD,EAAE,UAAYC,EAAE,UAAY,EAAI,EAAG,CAClE,CAEA,IAAMC,EAAc,yCAIpB,eAAsBC,GACpBC,EACAC,EACAC,EACAC,EACAC,EACAC,EACkB,CAClB,IAAMC,EAAM,IAAI,IAAIN,EAAI,KAAOE,EAAM,kBAAkB,EAEvD,GAAIC,IAAW,QAAUD,IAAS,kBAAoBA,IAAS,qBAAsB,CACnF,IAAMK,EAAWC,EAAcF,EAAI,aAAa,IAAI,UAAU,CAAC,EACzDG,EAAO,MAAMJ,EAAK,SAAS,CAAE,KAAMK,EAAOH,CAAQ,EAAG,SAAAA,CAAS,CAAC,EACrE,OAAIL,IAAS,oBAA4BS,EAAKV,EAAK,IAAK,CAAE,GAAIQ,EAAK,GAAI,MAAOjB,EAAkBiB,EAAK,KAAK,CAAE,CAAC,EACtGE,EAAKV,EAAK,IAAK,CAAE,GAAIQ,EAAK,GAAI,MAAOA,EAAK,MAAM,IAAIzB,CAAa,CAAE,CAAC,EAG7E,GAAImB,IAAW,OAASD,IAAS,qBAC/B,OAAOS,EAAKV,EAAK,IAAK,CAAE,MAAO,MAAMI,EAAK,UAAU,CAAE,CAAC,EAGzD,GAAIF,IAAW,OAAQ,MAAO,GAC9B,IAAMS,EAAaV,EAAK,MAAMJ,CAAW,EAIzC,GAAI,EAHUc,GAAc,CAC1B,yBAA0B,wBAAyB,wBAAyB,2BAC9E,EAAE,SAASV,CAAI,GACH,MAAO,GAEnB,IAAIW,EACJ,GAAI,CAAEA,EAAO,MAAMC,EAASd,CAAG,CAAE,OAASe,EAAP,CAAiB,OAAOJ,EAAKV,EAAK,IAAK,CAAE,MAAOc,EAAE,OAAQ,CAAC,CAAE,CAChG,IAAMC,EAAOC,EAAIJ,EAAK,IAAI,EAC1B,GAAI,CAACG,EAAM,OAAOL,EAAKV,EAAK,IAAK,CAAE,MAAO,kBAAmB,CAAC,EAC9D,IAAMiB,EAAK,oBAAoBd,KAE3Be,EACJ,GAAIP,EAAY,CACd,IAAMQ,EAASH,EAAIJ,EAAK,MAAM,EAC9B,GAAI,CAACO,EAAQ,OAAOT,EAAKV,EAAK,IAAK,CAAE,MAAO,oBAAqB,CAAC,EAClE,IAAMoB,EAAW,cAAc,mBAAmBD,CAAM,KAAKR,EAAW,CAAC,IACzE,GAAIA,EAAW,CAAC,IAAM,SACpBO,EAAQ,MAAMd,EAAK,SAASW,EAAMK,EAAU,CAAE,OAAQ,gBAAgBH,GAAK,CAAC,MACvE,CACL,IAAMI,EAAUL,EAAIJ,EAAK,OAAO,EAChC,GAAI,CAACS,EAAS,OAAOX,EAAKV,EAAK,IAAK,CAAE,MAAO,qBAAsB,CAAC,EACpEkB,EAAQ,MAAMd,EAAK,SAASW,EAAMK,EAAU,CAAE,QAAAC,EAAS,OAAQJ,CAAG,CAAC,WAE5DhB,IAAS,yBAClBiB,EAAQ,MAAMd,EAAK,SAASW,EAAMH,EAAK,SAAW,GAAO,yBAA2B,kBAAmB,CAAC,CAAC,UAChGX,IAAS,wBAClBiB,EAAQ,MAAMd,EAAK,SAASW,EAAM,UAAW,CAAC,CAAC,UACtCd,IAAS,wBAAyB,CAC3C,IAAMqB,EAASN,EAAIJ,EAAK,MAAM,EAC9B,GAAI,CAACU,GAAU,OAAOV,EAAK,SAAY,UAAW,OAAOF,EAAKV,EAAK,IAAK,CAAE,MAAO,iDAAkD,CAAC,EACpIkB,EAAQ,MAAMd,EAAK,SAASW,EAAM,UAAU,mBAAmBO,CAAM,YAAa,CAAE,QAASV,EAAK,OAAQ,CAAC,MACtG,CACL,IAAMW,EAAMP,EAAIJ,EAAK,GAAG,EAClBY,EAASZ,EAAK,OACpB,GAAI,CAACW,GAAQC,IAAW,OAASA,IAAW,MAAQA,IAAW,QAC7D,OAAOd,EAAKV,EAAK,IAAK,CAAE,MAAO,gDAAiD,CAAC,EAEnFkB,EAAQ,MAAMd,EAAK,OAAOW,EAAMQ,EAAKC,EAAQP,CAAE,EAEjD,OAAOP,EAAKV,EAAKkB,EAAM,OAAQA,EAAM,IAAI,CAC3C,CAEA,SAASF,EAAIS,EAAoB,CAC/B,OAAO,OAAOA,GAAM,SAAWA,EAAE,KAAK,EAAI,EAC5C,CAEA,SAASlB,EAAcmB,EAA2B,CAChD,GAAI,CAACA,EAAI,MAAO,MAChB,GAAI,CAAE,WAAI,KAAK,eAAe,QAAS,CAAE,SAAUA,CAAG,CAAC,EAAUA,CAAG,MAAE,CAAQ,MAAO,KAAM,CAC7F,CAGO,SAASjB,EAAOH,EAAkBqB,EAAM,IAAI,KAAgB,CACjE,OAAO,IAAI,KAAK,eAAe,QAAS,CAAE,SAAUrB,EAAU,KAAM,UAAW,MAAO,UAAW,IAAK,SAAU,CAAC,EAAE,OAAOqB,CAAG,CAC/H,CAEA,eAAsBd,EAASd,EAAsB6B,EAAQ,GAAK,KAAwC,CACxG,IAAIC,EAAO,EACLC,EAAmB,CAAC,EAC1B,cAAiBC,KAAShC,EAAK,CAE7B,GADA8B,GAASE,EAAiB,OACtBF,EAAOD,EAAO,MAAM,IAAI,MAAM,gBAAgB,EAClDE,EAAO,KAAKC,CAAe,EAE7B,IAAMC,EAAM,OAAO,OAAOF,CAAM,EAAE,SAAS,OAAO,EAAE,KAAK,EACzD,GAAI,CAACE,EAAK,MAAO,CAAC,EAClB,IAAMC,EAAS,KAAK,MAAMD,CAAG,EAC7B,GAAI,CAACC,GAAU,OAAOA,GAAW,UAAY,MAAM,QAAQA,CAAM,EAAG,MAAM,IAAI,MAAM,wBAAwB,EAC5G,OAAOA,CACT,CAEA,SAASvB,EAAKV,EAAqBkC,EAAgBtB,EAAqB,CACtE,OAAAZ,EAAI,UAAUkC,EAAQ,CAAE,eAAgB,mBAAoB,gBAAiB,UAAW,CAAC,EACzFlC,EAAI,IAAI,KAAK,UAAUY,CAAI,CAAC,EACrB,EACT,CClOO,IAAMuB,EAAwC,CACnD,UAAW,EACX,OAAQ,GACR,SAAU,GAAK,GAAK,IACpB,UAAW,EAAI,GAAK,GACtB,EAMaC,EAAN,KAAyB,CAI9B,YAAoBC,EAAyBF,EAA6BG,EAAoB,KAAK,IAAK,CAApF,UAAAD,EAAsD,SAAAC,CAA+B,CAHjG,QAAU,IAAI,IACd,IAAc,CAAE,SAAU,CAAC,EAAG,YAAa,CAAE,EAKrD,WAAWC,EAAwB,CACjC,IAAMD,EAAM,KAAK,IAAI,EACfE,EAAQ,KAAK,IAAI,KAAK,IAAI,YAAa,KAAK,QAAQ,IAAID,CAAM,GAAG,aAAe,CAAC,EACvF,OAAOC,EAAQF,EAAM,KAAK,MAAME,EAAQF,GAAO,GAAI,EAAI,CACzD,CAEA,KAAKC,EAAsB,CACzB,IAAIE,EAAS,KAAK,QAAQ,IAAIF,CAAM,EAC/BE,GAAQ,KAAK,QAAQ,IAAIF,EAASE,EAAS,CAAE,SAAU,CAAC,EAAG,YAAa,CAAE,CAAE,EACjF,KAAK,KAAKA,EAAQ,KAAK,KAAK,SAAS,EACrC,KAAK,KAAK,KAAK,IAAK,KAAK,KAAK,MAAM,CACtC,CAEA,QAAQF,EAAsB,CAC5B,KAAK,QAAQ,OAAOA,CAAM,CAC5B,CAEQ,KAAKE,EAAgBC,EAAqB,CAChD,IAAMJ,EAAM,KAAK,IAAI,EACrBG,EAAO,SAAWA,EAAO,SAAS,OAAQE,GAAML,EAAMK,EAAI,KAAK,KAAK,QAAQ,EAC5EF,EAAO,SAAS,KAAKH,CAAG,EACpBG,EAAO,SAAS,QAAUC,IAAOD,EAAO,YAAcH,EAAM,KAAK,KAAK,UAC5E,CACF,EAgBaM,EAAmB,yEAC1BC,EAAS,IAEf,eAAsBC,GAAeC,EAAsBC,EAA6C,CACtG,IAAMC,EAAU,KAAK,IAAI,EACnBC,EAAMF,EAAK,MAASG,GAAiB,QAAQ,IAAIA,CAAI,GACrDZ,EAASQ,EAAI,OAAO,eAAiB,UAErCK,EAAOJ,EAAK,QAAQ,WAAWT,CAAM,EAC3C,GAAIa,EAAO,EACT,OAAAF,EAAI,gCAAgCX,qBAA0Ba,SAAY,EACnE,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAO,oBAAqB,WAAYA,CAAK,EAAG,WAAYA,CAAK,EAGjG,IAAIC,EAAgB,KACpB,GAAI,CAAEA,GAAQ,MAAMC,EAASP,EAAK,IAAI,GAAG,IAAK,MAAE,CAAqC,CACrF,IAAMQ,EAAWP,EAAK,MAAM,OAAOK,CAAI,EACjCG,EAASD,EAAWP,EAAK,OAAOO,EAAS,KAAK,EAAI,KAGxD,OAFA,MAAME,GAAMR,EAASD,EAAK,OAASH,CAAM,EAErC,CAACU,GAAY,CAACC,GAChBR,EAAK,QAAQ,KAAKT,CAAM,EACxBW,EAAI,+BAA+BX,GAAQ,EACpC,CAAE,OAAQ,IAAK,KAAM,CAAE,MAAOK,CAAiB,CAAE,IAE1DI,EAAK,QAAQ,QAAQT,CAAM,EAC3BW,EAAI,0BAA0BK,EAAS,YAAYC,WAAgBjB,GAAQ,EACpE,CAAE,OAAQ,IAAK,KAAM,CAAE,OAAAiB,CAAO,EAAG,MAAOD,EAAS,KAAM,EAChE,CAEA,eAAeE,GAAMR,EAAiBS,EAA8B,CAClE,IAAMC,EAAOV,EAAUS,EAAQ,KAAK,IAAI,EACpCC,EAAO,GAAG,MAAM,IAAI,QAAS,GAAM,WAAW,EAAGA,CAAI,CAAC,CAC5D","names":["existsSync","mkdirSync","readdirSync","readFileSync","renameSync","writeFileSync","resolve","originLines","origin","approved","where","lines","IF_SILENT_VALUES","CARD_LIMITS","DEFAULT_CARD_SETTINGS","approvalsDir","root","resolve","CARD_ID_RE","isValidCardId","id","fileFor","newCardId","now","title","day","slug","saveCard","card","mkdirSync","path","tmp","writeFileSync","renameSync","readCard","readFileSync","listCards","status","dir","existsSync","out","f","readdirSync","c","oneLine","v","resolveExpiry","input","settings","max","at","raw","rel","buildCard","opts","ask","recommend","raisedBy","ifSilent","expiry","source","extras","buildChoices","reply","r","createCard","built","open","decideCard","verdict","answer","resolveAnswer","note","decided","expireCards","expired","cardsAwaitingAgentNotice","markAgentNotified","verdictMessage","result","lines","answerLines","originLines","clip","text","max","flat","summarizeNode","n","lastRun","prev","today","a","c","r","summarizeActivity","nodes","tasks","t","x","y","TASK_ACTION","handleAppFleet","req","res","path","method","device","deps","url","timezone","validTimezone","snap","dateIn","json","taskAction","body","readJson","e","node","str","by","reply","taskId","upstream","message","cronId","key","action","v","tz","now","limit","size","chunks","chunk","raw","parsed","status","DEFAULT_PAIR_LIMITS","PairAttemptLimiter","opts","now","client","until","bucket","limit","t","PAIR_CODE_FAILED","MIN_MS","redeemPairCode","req","deps","started","log","line","wait","code","readJson","redeemed","device","padTo","minMs","left"]}

package/dist/{chunk-SH5Y7N4W.js → chunk-ELLMBVAT.js}

@@ -1,4 +1,4 @@
-import{b as tt,c as nt}from"./chunk-GLQLCBJS.js";import{c as Ze}from"./chunk-SZDACK6O.js";import{b as ce}from"./chunk-AFRHKA7B.js";import{b as qe,e as Ye,f as Ge,i as Qe,k as Xe,l as et,q as rt}from"./chunk-S4JD5FEE.js";import{c as Ke,e as ze,f as Je}from"./chunk-KA2UIZXG.js";import{e as He,g as Ue,h as Be,i as de}from"./chunk-GQ76J72O.js";import{a as Ve}from"./chunk-GV7S5BAX.js";import{a as _e,b as oe,c as se,d as Le,e as ae}from"./chunk-QD6IICK7.js";import{v as Ce,w as hn}from"./chunk-ZVXKCXTP.js";import{b as Me,f as mn}from"./chunk-72SZI2UW.js";import{c as We,d as je}from"./chunk-QOYAX2FT.js";import{a as ie,i as gn}from"./chunk-RJ7DASOU.js";import{existsSync as yn,mkdirSync as it,readFileSync as wn,writeFileSync as kn,renameSync as bn}from"fs";import{resolve as ot,dirname as vn}from"path";var st=class{filePath;log;constructor(e={}){let t=e.baseDir??ot(process.cwd(),".agentx");this.filePath=ot(t,"handover.json"),this.log=e.log??console.error.bind(console,"[handover]"),it(t,{recursive:!0})}key(e,t,n){return`${e}::${t}::${n||"-"}`}load(){if(!yn(this.filePath))return{version:1,overrides:{}};try{let e=wn(this.filePath,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"?{version:1,overrides:{}}:(t.overrides||(t.overrides={}),t)}catch(e){return this.log(`load failed, starting empty: ${e?.message||e}`),{version:1,overrides:{}}}}save(e){it(vn(this.filePath),{recursive:!0});let t=`${this.filePath}.tmp-${process.pid}`;kn(t,JSON.stringify(e,null,2)),bn(t,this.filePath)}get(e,t,n){let o=this.load().overrides[this.key(e,t,n)];if(o&&!(o.expiresAt&&Date.parse(o.expiresAt)<Date.now()))return o}set(e){if(!e.channel||!e.chatId||!e.toAgent)throw new Error("channel, chatId and toAgent are required");let t=this.load(),n={...e,createdAt:e.createdAt??new Date().toISOString()};return t.overrides[this.key(n.channel,n.chatId,n.accountId)]=n,this.save(t),n}remove(e,t,n){let i=this.load(),o=this.key(e,t,n);return o in i.overrides?(delete i.overrides[o],this.save(i),!0):!1}consumeSummary(e,t,n){let i=this.load(),o=i.overrides[this.key(e,t,n)];if(!o||!o.summary||o.summaryConsumedAt)return;let s=o.summary;return o.summaryConsumedAt=new Date().toISOString(),this.save(i),s}listActive(){let e=this.load(),t=Date.now();return Object.values(e.overrides).filter(n=>!n.expiresAt||Date.parse(n.expiresAt)>=t)}listByAgent(e){let t=this.listActive();return{incoming:t.filter(n=>n.toAgent===e),outgoing:t.filter(n=>n.fromAgent===e)}}};import{readFileSync as ut,writeFileSync as le,appendFileSync as Rn,mkdirSync as $n,existsSync as pt,statSync as xn}from"fs";import{resolve as U}from"path";var at="[Agent Memory \u2014 persistent facts from past conversations]",Sn=2400;function dt(r,e){return r?`UNVERIFIED (${e===null?"age unknown":`${e}d old`}) `:""}function In(r,e=Date.now()){let t=ze(r,e),n=r.undated?"UNVERIFIED (never checked) ":dt(t,He(r.verifiedAt,e));return{line:`- [wiki ${r.id}] ${n}${r.subject} \xB7 ${r.attribute}: ${r.value} (${r.source}, checked ${r.verifiedAt.slice(0,10)} by ${r.verifiedBy})`,unverified:t}}function An(r,e){let n=!r.source.chatId.startsWith("-")&&/^\d+$/.test(r.source.chatId)?"DM":r.source.chatId,i=Be(r,e);return{line:`- [${r.category}] ${dt(i,Ue(r,e))}${r.content} (${n}, ${r.source.date})`,unverified:i}}function ct(r,e=[],t=Date.now()){let n=[],i=new Set,o=at.length,s=!1;for(let a of r){let d=e.length>0?Je(a.content,e):null,c,u,p=d&&Date.parse(a.createdAt)>Date.parse(d.verifiedAt)&&!a.content.toLowerCase().includes(d.value.toLowerCase());if(d&&!p){if(i.has(d.id))continue;i.add(d.id),c=In(d,t),u=d.id}else c=An(a,t),d&&(c.line+=` [differs from wiki ${d.id}]`);let f=c.unverified&&!s?de.length:0;if(o+f+c.line.length>Sn)break;n.push({fact:a,...c,...u?{wikiRef:u}:{}}),o+=f+c.line.length,f&&(s=!0)}return n}function lt(r){if(r.length===0)return"";let e=r.some(t=>t.unverified)?[de]:[];return[at,...e,...r.map(t=>t.line),"[End Memory]"].join(`
+import{b as tt,c as nt}from"./chunk-GLQLCBJS.js";import{c as Ze}from"./chunk-SZDACK6O.js";import{b as ce}from"./chunk-AFRHKA7B.js";import{b as qe,e as Ye,f as Ge,i as Qe,k as Xe,l as et,q as rt}from"./chunk-25DW6TZB.js";import{c as Ke,e as ze,f as Je}from"./chunk-KA2UIZXG.js";import{e as He,g as Ue,h as Be,i as de}from"./chunk-GQ76J72O.js";import{a as Ve}from"./chunk-GV7S5BAX.js";import{a as _e,b as oe,c as se,d as Le,e as ae}from"./chunk-QD6IICK7.js";import{v as Ce,w as hn}from"./chunk-4GDBATJK.js";import{b as Me,f as mn}from"./chunk-72SZI2UW.js";import{c as We,d as je}from"./chunk-QOYAX2FT.js";import{a as ie,i as gn}from"./chunk-RJ7DASOU.js";import{existsSync as yn,mkdirSync as it,readFileSync as wn,writeFileSync as kn,renameSync as bn}from"fs";import{resolve as ot,dirname as vn}from"path";var st=class{filePath;log;constructor(e={}){let t=e.baseDir??ot(process.cwd(),".agentx");this.filePath=ot(t,"handover.json"),this.log=e.log??console.error.bind(console,"[handover]"),it(t,{recursive:!0})}key(e,t,n){return`${e}::${t}::${n||"-"}`}load(){if(!yn(this.filePath))return{version:1,overrides:{}};try{let e=wn(this.filePath,"utf-8"),t=JSON.parse(e);return!t||typeof t!="object"?{version:1,overrides:{}}:(t.overrides||(t.overrides={}),t)}catch(e){return this.log(`load failed, starting empty: ${e?.message||e}`),{version:1,overrides:{}}}}save(e){it(vn(this.filePath),{recursive:!0});let t=`${this.filePath}.tmp-${process.pid}`;kn(t,JSON.stringify(e,null,2)),bn(t,this.filePath)}get(e,t,n){let o=this.load().overrides[this.key(e,t,n)];if(o&&!(o.expiresAt&&Date.parse(o.expiresAt)<Date.now()))return o}set(e){if(!e.channel||!e.chatId||!e.toAgent)throw new Error("channel, chatId and toAgent are required");let t=this.load(),n={...e,createdAt:e.createdAt??new Date().toISOString()};return t.overrides[this.key(n.channel,n.chatId,n.accountId)]=n,this.save(t),n}remove(e,t,n){let i=this.load(),o=this.key(e,t,n);return o in i.overrides?(delete i.overrides[o],this.save(i),!0):!1}consumeSummary(e,t,n){let i=this.load(),o=i.overrides[this.key(e,t,n)];if(!o||!o.summary||o.summaryConsumedAt)return;let s=o.summary;return o.summaryConsumedAt=new Date().toISOString(),this.save(i),s}listActive(){let e=this.load(),t=Date.now();return Object.values(e.overrides).filter(n=>!n.expiresAt||Date.parse(n.expiresAt)>=t)}listByAgent(e){let t=this.listActive();return{incoming:t.filter(n=>n.toAgent===e),outgoing:t.filter(n=>n.fromAgent===e)}}};import{readFileSync as ut,writeFileSync as le,appendFileSync as Rn,mkdirSync as $n,existsSync as pt,statSync as xn}from"fs";import{resolve as U}from"path";var at="[Agent Memory \u2014 persistent facts from past conversations]",Sn=2400;function dt(r,e){return r?`UNVERIFIED (${e===null?"age unknown":`${e}d old`}) `:""}function In(r,e=Date.now()){let t=ze(r,e),n=r.undated?"UNVERIFIED (never checked) ":dt(t,He(r.verifiedAt,e));return{line:`- [wiki ${r.id}] ${n}${r.subject} \xB7 ${r.attribute}: ${r.value} (${r.source}, checked ${r.verifiedAt.slice(0,10)} by ${r.verifiedBy})`,unverified:t}}function An(r,e){let n=!r.source.chatId.startsWith("-")&&/^\d+$/.test(r.source.chatId)?"DM":r.source.chatId,i=Be(r,e);return{line:`- [${r.category}] ${dt(i,Ue(r,e))}${r.content} (${n}, ${r.source.date})`,unverified:i}}function ct(r,e=[],t=Date.now()){let n=[],i=new Set,o=at.length,s=!1;for(let a of r){let d=e.length>0?Je(a.content,e):null,c,u,p=d&&Date.parse(a.createdAt)>Date.parse(d.verifiedAt)&&!a.content.toLowerCase().includes(d.value.toLowerCase());if(d&&!p){if(i.has(d.id))continue;i.add(d.id),c=In(d,t),u=d.id}else c=An(a,t),d&&(c.line+=` [differs from wiki ${d.id}]`);let f=c.unverified&&!s?de.length:0;if(o+f+c.line.length>Sn)break;n.push({fact:a,...c,...u?{wikiRef:u}:{}}),o+=f+c.line.length,f&&(s=!0)}return n}function lt(r){if(r.length===0)return"";let e=r.some(t=>t.unverified)?[de]:[];return[at,...e,...r.map(t=>t.line),"[End Memory]"].join(`
 `)}var ft=200,Pn=7,gt=class{memoryDir;ledger;constructor(e=process.cwd()){this.memoryDir=U(e,".agentx/memory"),this.ledger=new Ke(U(e,".agentx/wiki")),pt(this.memoryDir)||$n(this.memoryDir,{recursive:!0})}filePath(e){return U(this.memoryDir,`${e}.jsonl`)}addMemory(e,t){if(t.category==="secret"||oe(t.content))return!1;let n=t.source.trust??_e(t.source.channel),i=t.review??Le(n),o={...t,source:{...t.source,trust:n},...i?{review:i}:{},id:`${Date.now().toString(36)}-${Math.random().toString(36).slice(2,6)}`,createdAt:new Date().toISOString()};return Rn(this.filePath(e),JSON.stringify(o)+`
 `),!0}parsedCache=new Map;getAll(e){let t=this.filePath(e);if(!pt(t))return[];try{let{mtimeMs:n,size:i}=xn(t),o=this.parsedCache.get(t);if(o&&o.mtimeMs===n&&o.size===i)return o.facts.slice();let a=ut(t,"utf-8").split(`
 `).filter(d=>d.trim()).map(d=>{try{return JSON.parse(d)}catch{return null}}).filter(d=>d!==null);return this.parsedCache.set(t,{mtimeMs:n,size:i,facts:a}),a.slice()}catch{return[]}}findRelevant(e,t,n=8){let i=this.getAll(t).filter(ae);if(i.length===0)return[];let o=i.map(g=>`${g.keywords.join(" ")} ${g.content}`),s=U(this.memoryDir,`${t}_bm25_cache.json`),a=je(o,s),d=We(e,a),c=new Map(d.map(g=>[g.docIndex,g.score])),p=i.map((g,h)=>{let m=c.get(h)??0;return g.category==="commitment"&&(m+=1),{memory:g,score:m}}).filter(g=>g.score>0);if(p.length===0)return i.slice(-n);let f=p.sort((g,h)=>h.score-g.score).slice(0,n).map(g=>g.memory);if(f.length>0)try{this.recordAccess(t,f.map(g=>g.id))}catch{}return f}buildContext(e){return lt(this.contextLines(e))}contextFacts(e){return this.contextLines(e).map(t=>t.fact)}contextLines(e){let t=[];try{t=this.ledger.list()}catch{}return ct(e,t)}recordAccess(e,t){if(t.length===0)return;let n=this.getAll(e),i=new Set(t),o=!1;for(let s of n)if(i.has(s.id)){s.accessCount=(s.accessCount||0)+1,s.lastAccessed=new Date().toISOString();let a=s.intervalDays||1;s.intervalDays=Math.min(a*2,30),s.nextReview=new Date(Date.now()+s.intervalDays*864e5).toISOString(),o=!0}o&&le(this.filePath(e),n.map(s=>JSON.stringify(s)).join(`
@@ -25,4 +25,4 @@ import{b as tt,c as nt}from"./chunk-GLQLCBJS.js";import{c as Ze}from"./chunk-SZD
 `).filter(Boolean),i=[];for(let o=n.length-1;o>=0&&i.length<t;o--)try{let s=JSON.parse(n[o]);(!e||s.person===e)&&i.push(s)}catch{}return i}load(){if(Oe(this.file))try{let e=JSON.parse(Ne(this.file,"utf-8"));if(e&&Array.isArray(e.devices))return e}catch{}return{devices:[]}}save(e){Gt(Qt(this.file),{recursive:!0});let t=`${this.file}.${process.pid}.${en(4).toString("hex")}.tmp`;Zt(t,JSON.stringify(e,null,2)+`
 `,{encoding:"utf-8",mode:384}),Vt(t,this.file)}};import{extname as ui}from"path";var nn=/<agentx-artifact>([\s\S]*?)<\/agentx-artifact>/gi,rn=/<agentx-artifact>[\s\S]*$/i;function Ps(r,e=1/0,t=!1){let n=[],i=String(r??"");if(!/<agentx-artifact>/i.test(i))return{text:i,artifacts:n};let o=i.replace(nn,(s,a)=>{try{let d=JSON.parse(a.trim());if(d&&typeof d.filename=="string"&&typeof d.mime=="string"&&n.length<e){let c=d.mime,u=c.startsWith("image/")?"image":c==="application/pdf"?"pdf":c.startsWith("text/")?"text":"file";n.push({type:u,filename:d.filename,mime:c})}}catch{}return""});return{text:(t?o.replace(rn,""):o).trim(),artifacts:n}}function Ts(r,e=!1){let t=String(r??""),n=t;if(/<agentx-artifact>/i.test(t)){let i=t.replace(nn,(o,s)=>{try{let a=JSON.parse(s.trim());return a&&typeof a.filename=="string"?a.filename:""}catch{return""}});n=(e?i.replace(rn,""):i).trim()}return n.replace(/```[\s\S]*?```|`[^`\n]*`|!\[([^\]\n]*)\]\(([^)\s]+)\)/g,(i,o,s)=>o===void 0||s===void 0?i:`[${o||s}](${s})`)}var pi={".png":{mime:"image/png",kind:"image"},".jpg":{mime:"image/jpeg",kind:"image"},".jpeg":{mime:"image/jpeg",kind:"image"},".gif":{mime:"image/gif",kind:"image"},".webp":{mime:"image/webp",kind:"image"},".svg":{mime:"image/svg+xml",kind:"file"},".pdf":{mime:"application/pdf",kind:"file"},".txt":{mime:"text/plain; charset=utf-8",kind:"file"},".md":{mime:"text/markdown; charset=utf-8",kind:"file"},".csv":{mime:"text/csv; charset=utf-8",kind:"file"},".json":{mime:"application/json",kind:"file"},".mp3":{mime:"audio/mpeg",kind:"audio"},".m4a":{mime:"audio/mp4",kind:"audio"},".wav":{mime:"audio/wav",kind:"audio"},".mp4":{mime:"video/mp4",kind:"video"},".webm":{mime:"video/webm",kind:"video"}},Os={bytes:20*1024*1024,perMessage:20,pathChars:512};function Ns(r){return pi[ui(r).toLowerCase()]??null}var fi=["[Phone app: showing files]","To show the owner a file you created (a chart, a screenshot, a PDF, a recording), save or copy it into .agentx/outbox/ in your workspace and end your reply with one line per file:",'<agentx-artifact>{"filename":".agentx/outbox/<name.ext>","mime":"<mime/type>"}</agentx-artifact>',"Files outside your workspace (/tmp, your home folder) are refused. Outbox files are removed after 7 days.","The line is removed from the text. Images show in the reply, audio and video get a player, other files an Open link. Allowed: png, jpg, gif, webp, svg, pdf, txt, md, csv, json, mp3, m4a, wav, mp4, webm; up to 20 MB and 20 files per reply.","A picture already on the web can go inline as ![what it shows](https://...)."].join(`
 `);function Ds(r,e,t){return r==="app"&&e&&t!==!1?fi:void 0}import{lstatSync as Ee,mkdirSync as gi,readdirSync as mi,realpathSync as De,unlinkSync as hi}from"fs";import{join as ne,resolve as on}from"path";var sn=".agentx/outbox",yi=7*24*60*60*1e3;function wi(r,e){try{let t=De(on(e,r)),n=ne(t,sn);return De(n)===n&&Ee(n).isDirectory()?n:null}catch{return null}}function js(r,e={}){let t=e.cwd??process.cwd();if(e.create!==!1)try{let i=De(on(t,r));Ee(ne(i,".agentx"),{throwIfNoEntry:!1})?.isSymbolicLink()||gi(ne(i,sn),{recursive:!0})}catch{return 0}let n=wi(r,t);return n?an(n,(e.now??Date.now())-(e.maxAgeMs??yi)):0}function an(r,e){let t=0;for(let n of mi(r)){let i=ne(r,n);try{let o=Ee(i);o.isDirectory()?t+=an(i,e):Math.max(o.mtimeMs,o.ctimeMs)<e&&(hi(i),t++)}catch{}}return t}export{st as a,gt as b,mt as c,Fi as d,Nn as e,Wi as f,$ as g,pe as h,v as i,B as j,Bn as k,he as l,we as m,be as n,xe as o,Hr as p,qr as q,Te as r,ar as s,ai as t,tn as u,Ps as v,Ts as w,Os as x,Ns as y,Ds as z,sn as A,js as B};
-//# sourceMappingURL=chunk-SH5Y7N4W.js.map
+//# sourceMappingURL=chunk-ELLMBVAT.js.map

package/dist/{chunk-EBHHMJZX.js → chunk-EQ4PMTFT.js}

@@ -1,5 +1,5 @@
-import{ca as m,da as $,ha as x}from"./chunk-24P6UR3L.js";x();import{readFileSync as S,writeFileSync as P,existsSync as b}from"fs";import{resolve as f}from"path";function w(r){if(r)return f(r);let e=[f(process.cwd(),"agentx.json"),f(process.cwd(),".agentx/config.json")];for(let n of e)if(b(n))return n;return e[0]}function v(r){return JSON.parse(JSON.stringify(r))}async function O(r){try{let e=await fetch(`${r.replace(/\/$/,"")}/reload`,{method:"POST",signal:AbortSignal.timeout(3e3)});return e.ok?{ok:!0}:{ok:!1,reason:`HTTP ${e.status}`}}catch(e){return{ok:!1,reason:e?.cause?.code||e?.message||"unreachable"}}}async function J(r,e={}){let{validate:n=!0,dryRun:t=!1,reload:s=!0,configPath:u,daemonUrl:c}=e,o=w(u);if(!b(o))return{success:!1,path:o,error:`Config not found at ${o}. Run \`agentx init\` first.`};let d;try{d=S(o,"utf-8")}catch(a){return{success:!1,path:o,error:`Cannot read ${o}: ${a.message}`}}let g;try{g=JSON.parse(d)}catch(a){return{success:!1,path:o,error:`Invalid JSON in ${o}: ${a.message}`}}let i=v(g);try{await r(i)}catch(a){return{success:!1,path:o,error:`Mutator threw: ${a.message}`}}if(n){let a=$(i),l=m.safeParse(a);if(!l.success){let k=l.error.issues.map(y=>`  ${y.path.join(".")||"<root>"}: ${y.message}`).join(`
+import{ca as m,da as $,ha as x}from"./chunk-MF3WJIDE.js";x();import{readFileSync as S,writeFileSync as P,existsSync as b}from"fs";import{resolve as f}from"path";function w(r){if(r)return f(r);let e=[f(process.cwd(),"agentx.json"),f(process.cwd(),".agentx/config.json")];for(let n of e)if(b(n))return n;return e[0]}function v(r){return JSON.parse(JSON.stringify(r))}async function O(r){try{let e=await fetch(`${r.replace(/\/$/,"")}/reload`,{method:"POST",signal:AbortSignal.timeout(3e3)});return e.ok?{ok:!0}:{ok:!1,reason:`HTTP ${e.status}`}}catch(e){return{ok:!1,reason:e?.cause?.code||e?.message||"unreachable"}}}async function J(r,e={}){let{validate:n=!0,dryRun:t=!1,reload:s=!0,configPath:u,daemonUrl:c}=e,o=w(u);if(!b(o))return{success:!1,path:o,error:`Config not found at ${o}. Run \`agentx init\` first.`};let d;try{d=S(o,"utf-8")}catch(a){return{success:!1,path:o,error:`Cannot read ${o}: ${a.message}`}}let g;try{g=JSON.parse(d)}catch(a){return{success:!1,path:o,error:`Invalid JSON in ${o}: ${a.message}`}}let i=v(g);try{await r(i)}catch(a){return{success:!1,path:o,error:`Mutator threw: ${a.message}`}}if(n){let a=$(i),l=m.safeParse(a);if(!l.success){let k=l.error.issues.map(y=>`  ${y.path.join(".")||"<root>"}: ${y.message}`).join(`
 `);return{success:!1,path:o,error:`Validation failed:
 ${k}`,after:i}}}if(t)return{success:!0,path:o,after:i,dryRun:!0};try{P(o,JSON.stringify(i,null,2)+`
 `)}catch(a){return{success:!1,path:o,error:`Write failed: ${a.message}`,after:i}}let p=!1,h;if(s){let a=c||R(i),l=await O(a);l.ok?p=!0:h=l.reason}return{success:!0,path:o,after:i,reloaded:p,reloadSkipped:h}}function R(r){let e=r?.node?.bind;if(!e)return"http://127.0.0.1:18800";let[n,t]=e.split(":");return`http://${n==="0.0.0.0"||n==="::"?"127.0.0.1":n}:${t}`}function N(r,e,n){let t=e.split("."),s=r;for(let u=0;u<t.length-1;u++){let c=t[u];(s[c]===void 0||s[c]===null)&&(s[c]={}),s=s[c]}s[t[t.length-1]]=n}function j(r,e){let n=e.split("."),t=r;for(let s of n){if(t==null)return;t=t[s]}return t}function A(r,e){let n=e.split("."),t=r;for(let s=0;s<n.length-1;s++){if(t==null)return;t=t[n[s]]}t!=null&&delete t[n[n.length-1]]}export{w as a,J as b,N as c,j as d,A as e};
-//# sourceMappingURL=chunk-EBHHMJZX.js.map
+//# sourceMappingURL=chunk-EQ4PMTFT.js.map

package/dist/{chunk-SQOBKSP3.js → chunk-FTNPF6OS.js}

@@ -1,2 +1,2 @@
-import{v as l,w}from"./chunk-ZVXKCXTP.js";import{a as i,f as p}from"./chunk-72SZI2UW.js";w();p();var d="task-tier";function u(e){return{task:m(e.message,2e3),agent:e.agent,channel:e.channel??null,continuesExistingSession:e.isFollowUp??!1,...e.toolsAvailable?{toolsAvailable:e.toolsAvailable}:{}}}var c={needsFlagship:i("This task needs the strongest available model to be done correctly.",{true:"Doing it well takes real reasoning: writing or reviewing code, diagnosing a failure, planning work across several steps, weighing a judgement, handling money, touching production or anything irreversible, following a long or ambiguous instruction, or work where being subtly wrong would not be noticed. Anything where a weaker model would produce something that LOOKS right belongs here.",false:"It is mechanical and its result is obvious on sight: acknowledging or confirming a message, restating or formatting something already written, a greeting, a status echo, reading one file and reporting what it says, a lookup with one right answer, a scheduled heartbeat with nothing to decide."})};function g(e){return e.needsFlagship.noul}function m(e,n){return e.length>n?`${e.slice(0,n)}\u2026`:e}var h=.2,T=60*60*1e3;function F(e,n){if(e==="claude-code"){let t=n?.cheapModels?.[e]??n?.cheapModel;return t&&/^(claude-|haiku$|sonnet$|opus$)/.test(t)?t:void 0}if(e==="codex-cli"){let t=n?.cheapModels?.[e];return t&&/^(gpt-|o\d)/.test(t)?t:void 0}}async function _(e){let n=(s,r=null)=>({downgraded:!1,needsFlagship:r,reason:s});if(e.channel==="voice"||e.channel==="desktop"||e.channel==="opencode")return n(`${e.channel} requests retain the configured model`);if(!e.cheapModel)return n("no cheaper model configured");if(e.isFollowUp){let s=e.sessionIdleMs??0,r=e.cacheTtlMs??T;if(s<r)return n(`follow-up on a warm cache (idle ${Math.round(s/1e3)}s) \u2014 swapping would cost more than it saves`)}let t;try{t=await l(d,u(e),c,{incumbent:{needsFlagship:1},features:{agent:e.agent,channel:e.channel??"unknown"},timeoutMs:1500})}catch{return n("routing seat threw \u2014 keeping the flagship")}if(!t)return n("routing seat unavailable \u2014 keeping the flagship");let o=g(t.answers);if(t.mode!=="active")return n(`shadow \u2014 would ${o<(e.threshold??h)?"downgrade":"keep"} (${o.toFixed(2)})`,o);let a=e.threshold??h;return o>=a?n(`needs the flagship (${o.toFixed(2)})`,o):{model:e.cheapModel,downgraded:!0,needsFlagship:o,reason:`mechanical task (${o.toFixed(2)} below ${a}) \u2192 ${e.cheapModel}`}}export{F as a,_ as b};
-//# sourceMappingURL=chunk-SQOBKSP3.js.map
+import{v as l,w}from"./chunk-4GDBATJK.js";import{a as i,f as p}from"./chunk-72SZI2UW.js";w();p();var d="task-tier";function u(e){return{task:m(e.message,2e3),agent:e.agent,channel:e.channel??null,continuesExistingSession:e.isFollowUp??!1,...e.toolsAvailable?{toolsAvailable:e.toolsAvailable}:{}}}var c={needsFlagship:i("This task needs the strongest available model to be done correctly.",{true:"Doing it well takes real reasoning: writing or reviewing code, diagnosing a failure, planning work across several steps, weighing a judgement, handling money, touching production or anything irreversible, following a long or ambiguous instruction, or work where being subtly wrong would not be noticed. Anything where a weaker model would produce something that LOOKS right belongs here.",false:"It is mechanical and its result is obvious on sight: acknowledging or confirming a message, restating or formatting something already written, a greeting, a status echo, reading one file and reporting what it says, a lookup with one right answer, a scheduled heartbeat with nothing to decide."})};function g(e){return e.needsFlagship.noul}function m(e,n){return e.length>n?`${e.slice(0,n)}\u2026`:e}var h=.2,T=60*60*1e3;function F(e,n){if(e==="claude-code"){let t=n?.cheapModels?.[e]??n?.cheapModel;return t&&/^(claude-|haiku$|sonnet$|opus$)/.test(t)?t:void 0}if(e==="codex-cli"){let t=n?.cheapModels?.[e];return t&&/^(gpt-|o\d)/.test(t)?t:void 0}}async function _(e){let n=(s,r=null)=>({downgraded:!1,needsFlagship:r,reason:s});if(e.channel==="voice"||e.channel==="desktop"||e.channel==="opencode")return n(`${e.channel} requests retain the configured model`);if(!e.cheapModel)return n("no cheaper model configured");if(e.isFollowUp){let s=e.sessionIdleMs??0,r=e.cacheTtlMs??T;if(s<r)return n(`follow-up on a warm cache (idle ${Math.round(s/1e3)}s) \u2014 swapping would cost more than it saves`)}let t;try{t=await l(d,u(e),c,{incumbent:{needsFlagship:1},features:{agent:e.agent,channel:e.channel??"unknown"},timeoutMs:1500})}catch{return n("routing seat threw \u2014 keeping the flagship")}if(!t)return n("routing seat unavailable \u2014 keeping the flagship");let o=g(t.answers);if(t.mode!=="active")return n(`shadow \u2014 would ${o<(e.threshold??h)?"downgrade":"keep"} (${o.toFixed(2)})`,o);let a=e.threshold??h;return o>=a?n(`needs the flagship (${o.toFixed(2)})`,o):{model:e.cheapModel,downgraded:!0,needsFlagship:o,reason:`mechanical task (${o.toFixed(2)} below ${a}) \u2192 ${e.cheapModel}`}}export{F as a,_ as b};
+//# sourceMappingURL=chunk-FTNPF6OS.js.map

package/dist/{chunk-EJPQPU5J.js → chunk-GX6GVQ3R.js}

@@ -1,4 +1,4 @@
-import{q as _,r as W}from"./chunk-2AXFYDWF.js";import{b as Y,c as I,d as O}from"./chunk-AQASR6KR.js";import{b as F}from"./chunk-DP7RTNDM.js";import{a as E}from"./chunk-AVA245WL.js";import{b as L}from"./chunk-CECHWYJ2.js";import{createHash as ee}from"crypto";import{existsSync as H,readdirSync as te,readFileSync as re,writeFileSync as ne}from"fs";import{resolve as P}from"path";function be(n,r,s,t,o,i,c=""){return Z(r,s,t,o,i,c)}function Z(n,r,s,t,o,i=""){let c=r?`
+import{q as _,r as W}from"./chunk-2AXFYDWF.js";import{b as Y,c as I,d as O}from"./chunk-AQASR6KR.js";import{b as F}from"./chunk-DP7RTNDM.js";import{a as E}from"./chunk-RY75RX6B.js";import{b as L}from"./chunk-CECHWYJ2.js";import{createHash as ee}from"crypto";import{existsSync as H,readdirSync as te,readFileSync as re,writeFileSync as ne}from"fs";import{resolve as P}from"path";function be(n,r,s,t,o,i,c=""){return Z(r,s,t,o,i,c)}function Z(n,r,s,t,o,i=""){let c=r?`
 ## Worldview
 
 ${r}
@@ -240,4 +240,4 @@ ${g}`}var x="memory-promoter",oe=["project","reference","feedback"],K="_memory-p
 Re-emit the FULL corrected JSON object \u2014 same structure, fixed issues, valid JSON only.`:n,y=await t(`${a}/task`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({agent:r.viaAgent,message:h,freshSession:s===null,context:{channel:"api",chatId:r.chatId??"memory-promote"}}),signal:i.signal});if(!y.ok){let f=await y.text().catch(()=>"");throw new Error(`agent /task ${y.status}: ${f.slice(0,500)}`)}let w=await y.json();if(w.error)throw new Error(`agent reported error: ${w.error}`);let b=String(w.content??"").trim();if(!b)throw new Error("agent returned empty content");return b}if(!r.model)throw new Error("callPromotionLlm: viaAgent or model is required");let p=process.env.ANTHROPIC_API_KEY;if(!p)throw new Error("ANTHROPIC_API_KEY not set; use --via <agentId> instead");let u=[{role:"user",content:n}];s&&(u.push({role:"assistant",content:"(previous attempt; will retry with corrections)"}),u.push({role:"user",content:`Your previous response failed validation: ${s}
 Re-emit the FULL corrected JSON object.`}));let g=await t(me,{method:"POST",headers:{"Content-Type":"application/json","x-api-key":p,"anthropic-version":ge},body:JSON.stringify({model:r.model,max_tokens:8e3,messages:u}),signal:i.signal});if(!g.ok){let a=await g.text().catch(()=>"");throw new Error(`anthropic API ${g.status}: ${a.slice(0,500)}`)}let l=await g.json(),e=(Array.isArray(l.content)?l.content:[]).filter(a=>a?.type==="text").map(a=>a.text).join(`
 `).trim();if(!e)throw new Error("anthropic API returned no text content");return e}finally{clearTimeout(c)}}async function Se(n={}){let r=n.wikiDir??P(process.cwd(),".agentx","wiki"),s=n.memoryRoot??P(process.cwd(),".agentx"),t=n.log??(()=>{}),o=n.now??Date.now(),i={candidates:[],clusters:[],proposed:[],skipped:[],gaps:[],warnings:[],errors:[],dryRun:!n.commit},c=new E(r,(...m)=>t(m.map(String).join(" "))),p=c.rebuildIndex(),u=z(r),g=[...ce(s),...n.extraCandidates??[]];if(i.candidates=de(g,p,u,{types:n.types,sinceMs:n.sinceMs,agentFilter:n.agentFilter,now:o,max:n.max}),i.candidates.length===0)return t("no unpromoted memories in window"),i;if(i.clusters=le(i.candidates),i.dryRun)return i;let l=p.articles.map(m=>({title:m.title,path:m.path,type:m.type})),d=c.getWorldview()??"",e=n.budgetTokens??ue,a=i.clusters,h=D(x,a,l,d);for(;R(h)>e&&a.length>1;)a=a.slice(0,-1),h=D(x,a,l,d);if(R(h)>e)return i.errors.push(`judge prompt (~${R(h)} tokens) exceeds the ${e}-token budget even with one cluster`),i;a.length<i.clusters.length&&i.warnings.push(`token budget: judged ${a.length} of ${i.clusters.length} clusters; the rest wait for the next run`);let y=a.flatMap(m=>m.candidates),w=new Set(y.map(m=>m.stamp)),b=n.chatId??`memory-promote-${new Date(o).toISOString().slice(0,10)}`,f=B(await G(h,{...n,chatId:b}),w);if("error"in f&&(t(`parse failed (${f.error}) \u2014 retrying with feedback`),f=B(await G(h,{...n,chatId:b},f.error),w)),"error"in f)return i.errors.push(`LLM response unusable after retry: ${f.error}`),i;i.warnings.push(...f.warnings),i.gaps=f.gaps;let v=new Date(o).toISOString(),k=[],T=new Map(y.map(m=>[m.stamp,m]));for(let m of f.articles){let A=c.readArticle(m.path);if(A&&!c.canWrite(A.meta,x)){i.errors.push(`write denied for "${m.path}" (owned by ${A.meta.owner??"?"})`);continue}let M=fe(m.promotedFrom,T),S={id:Y(o,m.path),createdAt:v,status:"pending",article:m,evidence:M,...A?{replaces:{lastUpdated:A.meta.lastUpdated,contentHash:V(A.content)}}:{}};I(r,S),i.proposed.push({id:S.id,path:m.path,title:m.title,type:m.type,stamps:m.promotedFrom,agents:M.agents,occurrences:M.occurrences});for(let X of m.promotedFrom)k.push({stamp:X,decision:"proposed",article:m.path,proposal:S.id,at:v})}for(let m of f.skipped)k.push({stamp:m.stamp,decision:"skipped",reason:m.reason,at:v}),i.skipped.push(m);return k.length&&C(r,k),i}var ue=6e4;function R(n){return Math.ceil(n.length/4)}function V(n){return ee("sha256").update(n).digest("hex").slice(0,16)}var he=600;function ye(n){return n.startsWith("review:")?"review":n.startsWith(j)?"failure":"memory"}function fe(n,r){let s=[];for(let t of n){let o=r.get(t);o&&s.push({stamp:t,kind:ye(t),agentId:o.agentId,type:o.memory.type,name:o.memory.name,description:o.memory.description,...o.occurrences?{occurrences:o.occurrences}:{},...o.sessions?.length?{sessions:o.sessions}:{},...o.tasks?.length?{tasks:o.tasks}:{},...o.failure?{failure:o.failure}:{},...o.memory.author?{author:o.memory.author}:{},...o.memory.taskId?{taskId:o.memory.taskId}:{},updatedAt:o.memory.updatedAt,excerpt:o.memory.body.slice(0,he)})}return{agents:[...new Set(s.map(t=>t.agentId))].sort(),occurrences:Math.max(1,...s.map(t=>t.occurrences??1)),sources:s}}function Ee(n,r,s={}){let t=O(n,r);if(!t)return{ok:!1,error:`no proposal "${r}"`};if(t.status!=="pending")return{ok:!1,error:`proposal "${r}" is already ${t.status}`};let o=s.log??(()=>{}),i=new E(n,(...a)=>o(a.map(String).join(" "))),{article:c}=t,p=i.readArticle(c.path);if(!s.force){if(p&&!t.replaces)return{ok:!1,error:`"${c.path}" was created after this proposal; review it, then approve with --force`};if(p&&t.replaces&&V(p.content)!==t.replaces.contentHash)return{ok:!1,error:`"${c.path}" changed since this proposal; review it, then approve with --force`}}let u=s.now??Date.now(),g=new Date(u).toISOString().slice(0,10);if(!i.writeArticle(c.path,{title:c.title,type:L(c.type)?c.type:void 0,related:c.related,tags:c.tags,owner:x,access:"public",created:p?.meta.created??g,lastUpdated:g,sources:ae(p?.meta.sources,c.promotedFrom)},c.content,x))return{ok:!1,error:`write denied for "${c.path}" (owned by ${p?.meta.owner??"?"})`};let d=new Date(u).toISOString();C(n,c.promotedFrom.map(a=>({stamp:a,decision:"promoted",article:c.path,proposal:r,at:d}))),i.rebuildIndex();let e={...t,status:"approved",decidedBy:s.by??"operator",decidedAt:d};return I(n,e),{ok:!0,proposal:e}}function Oe(n,r,s={}){let t=O(n,r);if(!t)return{ok:!1,error:`no proposal "${r}"`};if(t.status!=="pending")return{ok:!1,error:`proposal "${r}" is already ${t.status}`};let o=new Date(s.now??Date.now()).toISOString();C(n,t.article.promotedFrom.map(c=>({stamp:c,decision:"rejected",article:t.article.path,proposal:r,reason:s.reason,at:o})));let i={...t,status:"rejected",decidedBy:s.by??"operator",decidedAt:o,...s.reason?{reason:s.reason}:{}};return I(n,i),{ok:!0,proposal:i}}export{be as a,x as b,oe as c,K as d,q as e,ie as f,$ as g,ae as h,ce as i,z as j,C as k,le as l,B as m,de as n,G as o,Se as p,R as q,ye as r,fe as s,Ee as t,Oe as u};
-//# sourceMappingURL=chunk-EJPQPU5J.js.map
+//# sourceMappingURL=chunk-GX6GVQ3R.js.map

package/dist/{chunk-RS6BNRVF.js → chunk-JMYGVDLP.js}

@@ -1,2 +1,2 @@
-import{q as p}from"./chunk-S4JD5FEE.js";import{b as i,c as u,d as l,e as c}from"./chunk-EBHHMJZX.js";import d from"cronstrue";var f=Intl.DateTimeFormat().resolvedOptions().timeZone,m=600,E='Try: "every morning at 9", "weekdays at 6pm", "every 15 minutes", "every monday at 10am", "1st of every month at noon", "daily at 9:30am", "every hour"',g=/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;function w(e){return g.test(e)}function x(e){try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),!0}catch{return!1}}function $(e){return e?e.split(",").map(r=>r.trim().toLowerCase()).filter(r=>r==="log"||r==="notify"||r==="disable"):["log"]}function S(e){let r=[...e.onError??["log"]];e.notify&&!r.includes("notify")&&r.push("notify");let t={enabled:e.enabled??!0,schedule:e.parsed.cron,timezone:e.timezone||f,agent:e.agent,prompt:e.prompt,timeout:e.timeout??m,onError:r};return e.model&&(t.model=e.model),e.notify&&(t.notify=e.notify),e.createdBy&&(t.createdBy=e.createdBy),e.approval&&(t.approval=e.approval),t}function P(e){try{return d.toString(e,{use24HourTimeFormat:!1})}catch{return e}}function T(e,r,t=new Date){try{return p(e,t,r)}catch{return null}}function A(e,r){if(!e)return"unknown (no match within a year)";try{return`${new Intl.DateTimeFormat("en-GB",{timeZone:r,weekday:"short",day:"2-digit",month:"short",year:"numeric",hour:"2-digit",minute:"2-digit",hour12:!1}).format(e)} (${r})`}catch{return e.toISOString()}}function h(e){return e?.approval?.action==="create"}async function D(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(delete a.approval,a.enabled=!0,t=`${e} approved and enabled (requested by ${s.requestedBy})`):(c(n,`crons.${e}`),t=`${e} deletion approved; job removed (requested by ${s.requestedBy})`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function I(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(c(n,`crons.${e}`),t=`${e} rejected; pending job removed`):(delete a.approval,t=`${e} deletion rejected; job kept`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function O(e,r,t={}){return i(o=>{let n=l(o,`crons.${e}`);if(!n)throw new Error(`cron "${e}" not found`);if(r&&h(n))throw new Error(`cron "${e}" is awaiting approval; run \`agentx schedule approve ${e}\``);u(o,`crons.${e}.enabled`,r)},{configPath:t.configPath,reload:t.reload})}export{f as a,E as b,w as c,x as d,$ as e,S as f,P as g,T as h,A as i,h as j,D as k,I as l,O as m};
-//# sourceMappingURL=chunk-RS6BNRVF.js.map
+import{q as p}from"./chunk-25DW6TZB.js";import{b as i,c as u,d as l,e as c}from"./chunk-EQ4PMTFT.js";import d from"cronstrue";var f=Intl.DateTimeFormat().resolvedOptions().timeZone,m=600,E='Try: "every morning at 9", "weekdays at 6pm", "every 15 minutes", "every monday at 10am", "1st of every month at noon", "daily at 9:30am", "every hour"',g=/^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;function w(e){return g.test(e)}function x(e){try{return new Intl.DateTimeFormat("en-US",{timeZone:e}),!0}catch{return!1}}function $(e){return e?e.split(",").map(r=>r.trim().toLowerCase()).filter(r=>r==="log"||r==="notify"||r==="disable"):["log"]}function S(e){let r=[...e.onError??["log"]];e.notify&&!r.includes("notify")&&r.push("notify");let t={enabled:e.enabled??!0,schedule:e.parsed.cron,timezone:e.timezone||f,agent:e.agent,prompt:e.prompt,timeout:e.timeout??m,onError:r};return e.model&&(t.model=e.model),e.notify&&(t.notify=e.notify),e.createdBy&&(t.createdBy=e.createdBy),e.approval&&(t.approval=e.approval),t}function P(e){try{return d.toString(e,{use24HourTimeFormat:!1})}catch{return e}}function T(e,r,t=new Date){try{return p(e,t,r)}catch{return null}}function A(e,r){if(!e)return"unknown (no match within a year)";try{return`${new Intl.DateTimeFormat("en-GB",{timeZone:r,weekday:"short",day:"2-digit",month:"short",year:"numeric",hour:"2-digit",minute:"2-digit",hour12:!1}).format(e)} (${r})`}catch{return e.toISOString()}}function h(e){return e?.approval?.action==="create"}async function D(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(delete a.approval,a.enabled=!0,t=`${e} approved and enabled (requested by ${s.requestedBy})`):(c(n,`crons.${e}`),t=`${e} deletion approved; job removed (requested by ${s.requestedBy})`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function I(e,r={}){let t="",o=await i(n=>{let a=l(n,`crons.${e}`);if(!a)throw new Error(`cron "${e}" not found`);let s=a.approval;if(!s)throw new Error(`cron "${e}" has no pending request`);s.action==="create"?(c(n,`crons.${e}`),t=`${e} rejected; pending job removed`):(delete a.approval,t=`${e} deletion rejected; job kept`)},{configPath:r.configPath,reload:r.reload});return o.success?{success:!0,message:t,result:o}:{success:!1,message:o.error||"failed",result:o}}async function O(e,r,t={}){return i(o=>{let n=l(o,`crons.${e}`);if(!n)throw new Error(`cron "${e}" not found`);if(r&&h(n))throw new Error(`cron "${e}" is awaiting approval; run \`agentx schedule approve ${e}\``);u(o,`crons.${e}.enabled`,r)},{configPath:t.configPath,reload:t.reload})}export{f as a,E as b,w as c,x as d,$ as e,S as f,P as g,T as h,A as i,h as j,D as k,I as l,O as m};
+//# sourceMappingURL=chunk-JMYGVDLP.js.map

package/dist/{chunk-ES2NYGS2.js → chunk-JRNQSG66.js}

@@ -1,7 +1,7 @@
-import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{ea as S,ha as L}from"./chunk-24P6UR3L.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
+import{f as j,i as x,p as O,r as I}from"./chunk-S2GAEH2F.js";import{a as R}from"./chunk-JXF54PT7.js";import{ea as S,ha as L}from"./chunk-MF3WJIDE.js";L();import{Command as z}from"commander";import f from"chalk";import{execFileSync as h}from"child_process";import{accessSync as T,constants as H,existsSync as y,readFileSync as b,readdirSync as $,statSync as X}from"fs";import{join as E,resolve as m}from"path";import{homedir as B}from"os";import{createRequire as F}from"module";import{execFile as M}from"child_process";var q=(t,n)=>new Promise(e=>{try{M(t,n,{timeout:5e3},(i,s)=>e(i?null:String(s)))}catch{e(null)}}),N="Open System Settings \u203A Notifications \u203A AgentX Helper, turn on Allow notifications and choose Banners.";async function P(t={}){if((t.platform??process.platform)!=="darwin")return{state:"unsupported",message:"Desktop banners are only shown on a Mac."};let n=t.helper===void 0?I():t.helper;if(!n)return{state:"missing",message:"AgentX Helper is not installed, so banners come from Script Editor and show its icon.",fix:'Run agentx desktop install, then run agentx notify "Hello" --title "Test" and click Allow.'};let e=await(t.run??q)(n,["notify-status"]),i=null;try{i=e?JSON.parse(e):null}catch{i=null}return i?i.authorization==="notDetermined"?{state:"not-asked",path:n,message:"macOS has not asked yet whether AgentX Helper may notify; banners show the Script Editor icon until it does.",fix:'Run agentx notify "Hello" --title "Test" and click Allow when macOS asks.'}:i.authorization==="denied"?{state:"not-allowed",path:n,message:"macOS does not allow AgentX Helper to notify, so banners show the Script Editor icon.",fix:N}:i.alertStyle==="none"?{state:"hidden",path:n,message:"AgentX Helper may notify, but its banner style is None, so nothing appears on screen.",fix:N}:{state:"ready",path:n,message:"AgentX Helper posts banners with the AgentX icon."}:{state:"outdated",path:n,message:"AgentX Helper is too old to report whether it may notify.",fix:"Run agentx desktop install to update it."}}async function J(t={}){let n=[];await Z(n),U(n);let e=K(n);return e&&Q(n,e),e&&Y(n,e),e&&ee(n,e),e&&te(n,e),e&&oe(n,e),e&&await G(n,e),e&&V(n,e),t.running!==!1&&e&&await ie(n,e),{checks:n,summary:W(n)}}var ke=new z().name("doctor").description("pre-flight health check: Node, config, credentials, daemon").option("--no-running","skip the live daemon probe").option("--json","emit machine-readable JSON (stable shape for CI)").action(async t=>{let{checks:n,summary:e}=await J({running:t.running!==!1});t.json?process.stdout.write(JSON.stringify({checks:n,summary:e},null,2)+`
 `):se(n),process.exit(e.errors>0?1:0)});async function G(t,n,e=P){if(!O(n.notifications?.local).banner)return;let i=await e();i.state!=="unsupported"&&t.push({severity:i.state==="ready"?"ok":"warn",group:"Notifications",title:i.message,detail:i.path,fix:i.fix})}function V(t,n,e=process.platform,i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}}){let s=n.reminders;if(!s?.enabled)return;if(e!=="darwin"){t.push({severity:"warn",group:"Reminders",title:"Reminders hand-back unavailable on this machine",detail:"reminders.enabled is set, but Apple Reminders exists only on macOS. The daemon starts without it.",fix:"Set reminders.enabled to false here, or enable it on the Mac node instead."});return}let r=s.command||"remindctl",a=r.includes("/")?i(r)?r:null:x(r,process.env.PATH||"",i);t.push(a?{severity:"ok",group:"Reminders",title:`Watching ${(s.lists||[]).join(", ")} for due reminders`,detail:a}:{severity:"fail",group:"Reminders",title:`${r} not found`,detail:"The daemon reads Apple Reminders through remindctl.",fix:"brew install steipete/tap/remindctl, or set reminders.command to its full path."})}async function Z(t){let n=R(process.versions.node);t.push({severity:n?"ok":"fail",group:"Environment",title:`Node.js ${process.versions.node}`,detail:n?void 0:"AgentX requires Node 22.19 or newer, up to Node 26.",fix:n?void 0:"Install Node 22 (nvm install 22 && nvm use 22)"});let e=l=>{try{return h(process.platform==="win32"?"where":"which",[l],{encoding:"utf-8"}).trim().split(`
 `)[0]}catch{return null}},i=e("npm");t.push({severity:i?"ok":"fail",group:"Environment",title:i?"npm on PATH":"npm not found",detail:i||void 0});let s=e("claude");if(s){let l;try{l=h("claude",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`claude CLI ${l||"installed"}`,detail:s})}else t.push({severity:"warn",group:"Environment",title:"claude CLI not on PATH",detail:"Only required for agents on the claude-code tier.",fix:"See https://docs.anthropic.com/en/docs/claude-code"});let r=e("codex");if(r){let l;try{l=h("codex",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`codex CLI ${l||"installed"}`,detail:r})}else t.push({severity:"warn",group:"Environment",title:"codex CLI not on PATH",detail:"Only required for agents on the codex-cli tier.",fix:"Install with `npm i -g @openai/codex`."});let a=e("opencode");if(a){let l;try{l=h("opencode",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"Environment",title:`opencode CLI ${l||"installed"}`,detail:a})}else t.push({severity:"warn",group:"Environment",title:"opencode CLI not on PATH",detail:"Only required for agents on the opencode tier.",fix:"Install from https://opencode.ai/docs/."});try{F(import.meta.url)("better-sqlite3"),t.push({severity:"ok",group:"Environment",title:`better-sqlite3 loads for Node ${process.version}`,detail:`NODE_MODULE_VERSION ${process.versions.modules}`})}catch(l){t.push({severity:"fail",group:"Environment",title:"better-sqlite3 native binding does not load",detail:l?.message??String(l),fix:`Run "pnpm rebuild better-sqlite3" with the same Node used by the daemon (${process.version}, modules ${process.versions.modules}).`})}}function U(t){if(process.platform!=="darwin")return;let n=E(B(),"Library/LaunchAgents"),e=[];try{e=$(n).filter(s=>/agentx\.voice.*\.plist$/.test(s))}catch{return}let i=s=>{try{return T(s,H.X_OK),!0}catch{return!1}};for(let s of e){let r=j(b(E(n,s),"utf-8")),a=x("ffmpeg",r,i);t.push(a?{severity:"ok",group:"Desktop",title:"ffmpeg reachable by the desktop app",detail:`${a} (${s})`}:{severity:"warn",group:"Desktop",title:"ffmpeg not reachable by the desktop app",detail:`Local Whisper transcription fails without it. ${s} sets PATH to ${r}.`,fix:"Install ffmpeg (brew install ffmpeg), then rerun agentx desktop install."})}}function K(t){let n=m(process.cwd(),"agentx.json");if(!y(n))return t.push({severity:"fail",group:"Config",title:"agentx.json not found",detail:`Looked in ${n}`,fix:"Run `agentx setup` to create one via the web wizard."}),null;let e;try{e=JSON.parse(b(n,"utf-8"))}catch(a){return t.push({severity:"fail",group:"Config",title:"agentx.json is not valid JSON",detail:a.message}),null}try{S(n),t.push({severity:"ok",group:"Config",title:`agentx.json valid (${Object.keys(e.agents||{}).length} agents, ${Object.keys(e.crons||{}).length} schedules)`})}catch(a){t.push({severity:"fail",group:"Config",title:"agentx.json failed schema validation",detail:a.message,fix:"Open /admin \u2192 Advanced tab to edit and re-save."})}let i=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="claude-code");i.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["claude"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${i.length} agent(s) use claude-code tier but claude CLI is missing`,detail:i.map(([l])=>l).join(", "),fix:"Install Claude Code (https://docs.anthropic.com/en/docs/claude-code) or switch these agents to tier=sdk."}));let s=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="codex-cli");s.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["codex"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${s.length} agent(s) use codex-cli tier but codex CLI is missing`,detail:s.map(([l])=>l).join(", "),fix:"Install Codex CLI with `npm i -g @openai/codex` or switch these agents to tier=claude-code."}));let r=Object.entries(e.agents||{}).filter(([,a])=>a.tier==="opencode");return r.length>0&&((()=>{try{return h(process.platform==="win32"?"where":"which",["opencode"],{stdio:"ignore"}),!0}catch{return!1}})()||t.push({severity:"fail",group:"Config",title:`${r.length} agent(s) use opencode tier but OpenCode CLI is missing`,detail:r.map(([l])=>l).join(", "),fix:"Install OpenCode from https://opencode.ai/docs/ or switch these agents to another tier."})),e}function Q(t,n){let e=new Set;if(C(n,e),e.size===0){t.push({severity:"ok",group:"Secrets",title:"No ${VAR} references in agentx.json"});return}let i=m(process.cwd(),".env"),s={};if(y(i))for(let l of b(i,"utf-8").split(/\r?\n/)){let u=l.match(/^\s*([A-Z_][A-Z0-9_]*)\s*=\s*(.*)$/i);u&&(s[u[1]]=u[2])}let r=[],a=[];for(let l of e){let u=process.env[l]??s[l];u===void 0?r.push(l):(!u.trim()||/^["']?\s*["']?$/.test(u))&&a.push(l)}r.length===0&&a.length===0?t.push({severity:"ok",group:"Secrets",title:`${e.size} env reference(s) resolved`}):(r.length>0&&t.push({severity:"fail",group:"Secrets",title:`${r.length} env var(s) referenced in agentx.json but missing`,detail:r.join(", "),fix:`Add to .env \u2014 e.g. ${r[0]}=<value>`}),a.length>0&&t.push({severity:"warn",group:"Secrets",title:`${a.length} env var(s) set but empty`,detail:a.join(", ")}))}function C(t,n){if(typeof t=="string")for(let e of t.matchAll(/\$\{([A-Z_][A-Z0-9_]*)\}/g))n.add(e[1]);else if(Array.isArray(t))for(let e of t)C(e,n);else if(t&&typeof t=="object")for(let e of Object.values(t))C(e,n)}function Y(t,n){let e=[];for(let[i,s]of Object.entries(n.agents||{})){if(!s.workspace)continue;let r=s.workspace.startsWith("/")?s.workspace:m(process.cwd(),s.workspace);try{X(r).isDirectory()||e.push(`${i}: ${r} (exists but not a directory)`)}catch{e.push(`${i}: ${r}`)}}e.length===0?t.push({severity:"ok",group:"Workspaces",title:"All agent workspace folders exist"}):t.push({severity:"warn",group:"Workspaces",title:`${e.length} agent workspace(s) missing`,detail:e.join(`
     `),fix:"The daemon will create missing folders on first task, but you won't see CLAUDE.md / skills until you populate them."})}function ee(t,n){let e=/\$\{[A-Za-z_][A-Za-z0-9_]*\}/g,i=[];for(let[s,r]of Object.entries(n.agents||{})){if(!r.workspace)continue;let a=r.workspace.startsWith("/")?r.workspace:m(process.cwd(),r.workspace);for(let l of["settings.json","settings.local.json"]){let u=m(a,".claude",l);if(!y(u))continue;let w;try{w=JSON.parse(b(u,"utf-8"))}catch(d){i.push({severity:"fail",agent:s,msg:`${l}: JSON parse error \u2014 ${d.message}`});continue}let k=w.env||{};for(let[d,p]of Object.entries(k)){if(typeof p!="string")continue;let g=p.match(e);g&&i.push({severity:"fail",agent:s,msg:`${l} env.${d} contains unexpanded ${[...new Set(g)].join(",")} \u2014 Claude Code does NOT expand \${VAR} in settings.json (use a fully-literal value)`})}let o=k.PATH;if(typeof o=="string"){let d=o.split(":").filter(Boolean);d.includes("/usr/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /usr/bin \u2014 cat/head/sh/which will fail`}),d.includes("/bin")||i.push({severity:"fail",agent:s,msg:`${l} env.PATH missing /bin \u2014 ls/cp/mv will fail`})}let c=w.permissions;if(c&&typeof c=="object"&&"allow"in c){let d=c.allow,p=c.deny;Array.isArray(d)&&d.length===0&&Array.isArray(p)&&p.length>0&&i.push({severity:"warn",agent:s,msg:`${l} permissions.allow is explicitly [] with ${p.length} deny rules \u2014 agent may be locked out (omit the key to use defaults instead)`})}}}if(i.length===0){t.push({severity:"ok",group:"Workspace settings",title:`All ${Object.keys(n.agents||{}).length} agent .claude/settings.json files clean`});return}for(let s of i)t.push({severity:s.severity,group:"Workspace settings",title:`${s.agent}: ${s.msg}`,fix:s.severity==="fail"?"Edit .claude/settings.json \u2014 replace ${VAR} with the literal value or omit the key to inherit.":"Either remove the empty allow list or populate it."})}function te(t,n){let e=n.webhooks??[],i=[],s=m(process.cwd(),n.workflows?.dir||".agentx/workflows"),r=new Set;try{if(y(s))for(let o of $(s))o.endsWith(".json")&&!o.startsWith("_")&&!o.endsWith(".disabled.json")&&r.add(o.replace(/\.json$/,""))}catch{}let a=new Set(["github","gitlab"]);for(let o of e){if(!o.enabled||!a.has(o.source))continue;!(o.triggers&&Object.keys(o.triggers).length>0)&&!o.defaultWorkflow&&i.push({severity:"warn",title:`webhook "${o.id}" (${o.source} -> ${o.agentId}) has no triggers map; every event-type collapses to the bound agent`,fix:'Add a triggers map: { "issues.opened": "wf-id", "pull_request.synchronize": "wf-id" } \u2014 or set defaultWorkflow.'})}for(let o of e)if(!(!o.enabled||!o.triggers)){for(let[c,d]of Object.entries(o.triggers))r.size>0&&!r.has(d)&&i.push({severity:"fail",title:`webhook "${o.id}".triggers["${c}"] -> "${d}" \u2014 no such workflow under ${n.workflows?.dir||".agentx/workflows"}`,fix:"Create the workflow file or fix the id in agentx.json"});o.defaultWorkflow&&r.size>0&&!r.has(o.defaultWorkflow)&&i.push({severity:"fail",title:`webhook "${o.id}".defaultWorkflow -> "${o.defaultWorkflow}" \u2014 no such workflow`,fix:"Create the workflow file or fix the id in agentx.json"})}try{if(y(s)){for(let o of $(s))if(!(!o.endsWith(".json")||o.startsWith("_")||o.endsWith(".disabled.json")))try{let c=JSON.parse(b(m(s,o),"utf-8"));c?.status==="active"&&c?.state==="quarantined"&&i.push({severity:"warn",title:`workflow "${c.id??o}" is status=active but state=quarantined \u2014 it looks live but will never dispatch`,fix:'Resolve the conflict the detector flagged, then set state back to "active" (or set status to "review" while parked).'})}catch{}}}catch{}let l=new Set((n.mesh?.peers??[]).map(o=>o.name));for(let o of e)!o.enabled||!o.node||l.has(o.node)||i.push({severity:"fail",title:`webhook "${o.id}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or remove the node field on the webhook."});let u=new Map;for(let o of e){if(!o.enabled)continue;let c=`${o.source}:${o.agentId}`,d=u.get(c);d?i.push({severity:"warn",title:`webhook entries "${d}" and "${o.id}" both enabled for ${o.source} -> ${o.agentId}; only the first is dispatched`,fix:"Disable one entry, or merge their triggers maps into a single entry."}):u.set(c,o.id)}let w=new Set(Object.keys(n.agents??{}));for(let o of n.channels?.gitlab?.agentMappings??[])if(o?.agentId){if(o.node){l.has(o.node)||i.push({severity:"fail",title:`gitlab.agentMappings entry agentId="${o.agentId}" routes to mesh peer "${o.node}" which is not in mesh.peers`,fix:"Add the peer to mesh.peers or drop the node field on the mapping."});continue}w.has(o.agentId)||i.push({severity:"warn",title:`gitlab.agentMappings entry agentId="${o.agentId}" \u2014 no such agent in agents.* (and no node field, so it's not a cross-mesh route)`,fix:'Add the agent to agents.*, set node:"<peer>" if the agent lives remotely, or remove the mapping.'})}for(let[o,c]of Object.entries(n.channels?.telegram?.accounts??{}))c.agentBinding?w.has(c.agentBinding)||i.push({severity:"fail",title:`telegram account "${o}".agentBinding -> "${c.agentBinding}" \u2014 no such agent in agents.*`,fix:"Fix the agentBinding or define the agent in agents.*."}):i.push({severity:"fail",title:`telegram account "${o}" has no agentBinding; every DM to this bot will drop`,fix:"Set agentBinding to a valid agent id."});let k=new Set(["telegram-bot","whatsapp","slack-bot","discord-bot","gitlab-user","github-user","gmail","hotmail","smtp","hubspot","salesforce","pipedrive","odoo","trello","linear","asana","jira","notion","stripe","sentry","vercel","twilio","custom"]);for(let[o,c]of Object.entries(n.agents??{})){let d=c.integrations??[];if(!d.length)continue;let p=new Set;for(let g of d){let A=`${g.kind}::${g.label}`;p.has(A)&&i.push({severity:"warn",title:`agents.${o}.integrations: duplicate (${g.kind}, ${g.label})`,fix:"Remove the duplicate or rename one. (kind, label) must be unique per agent."}),p.add(A),k.has(g.kind)||i.push({severity:"warn",title:`agents.${o}.integrations: unknown kind "${g.kind}" on integration "${g.label}"`,fix:'Use a canonical kind from INTEGRATION_KINDS, or "custom" for ad-hoc services.'});let D=g.credentials||{};for(let[_,v]of Object.entries(D))typeof v=="string"&&/^[A-Z][A-Z0-9_]*$/.test(v)&&!process.env[v]&&i.push({severity:"warn",title:`agents.${o}.integrations[${g.kind}/${g.label}].${_} -> $${v} but env var is unset (in this shell)`,fix:`Set ${v} on the daemon environment. The daemon's process.env is what matters; this warning fires from your local shell.`})}}if(i.length===0){t.push({severity:"ok",group:"Routing",title:`${e.length} webhook(s), ${Object.keys(n.channels?.telegram?.accounts??{}).length} telegram account(s) \u2014 all routing references resolve`});return}for(let o of i)t.push({severity:o.severity,group:"Routing",title:o.title,fix:o.fix})}function ne(t){return typeof t?.canMeasure!="boolean"?null:t.canMeasure?{severity:"ok",group:"Runtime",title:"Daemon finds ffmpeg to measure phone recordings"}:{severity:"warn",group:"Runtime",title:t.allowUnmeasured?"Daemon can't find ffmpeg: phone recordings go unmeasured (voice.allowUnmeasured)":"Daemon can't find ffmpeg: phone voice input is refused",fix:"Install ffmpeg (brew install ffmpeg / sudo apt install ffmpeg), or set AGENTX_FFMPEG in the service's environment. The daemon's PATH is shorter than your shell's."}}async function ie(t,n){let e=n.dashboard?.daemonUrl?.replace(/\/+$/,"")||"http://127.0.0.1:18800",i={};n.dashboard?.token&&(i.Authorization=`Bearer ${n.dashboard.token}`);try{let s=new AbortController,r=setTimeout(()=>s.abort(),2e3),a=await fetch(e+"/health",{headers:i,signal:s.signal});if(clearTimeout(r),!a.ok){t.push({severity:"warn",group:"Runtime",title:`Daemon responded ${a.status}`,detail:e});return}let l=await a.json();t.push({severity:"ok",group:"Runtime",title:`Daemon healthy \u2014 ${l.agents?.length??0} agents live, uptime ${Math.round((l.uptime??0)/60)}m`,detail:e});let u=ne(l.voice);u&&t.push(u)}catch{t.push({severity:"warn",group:"Runtime",title:"Daemon not reachable (not running?)",detail:e,fix:"Run `agentx daemon start`. Skip this check with `agentx doctor --no-running`."})}}function oe(t,n){let e=Object.entries(n.agents||{}).filter(([,s])=>s?.codegraph===!0&&(s.tier==="claude-code"||s.tier==="codex-cli"));if(e.length===0)return;let i=null;try{i=h(process.platform==="win32"?"where":"which",["codegraph"],{encoding:"utf-8"}).trim().split(`
 `)[0]||null}catch{i=null}if(i){let s;try{s=h("codegraph",["--version"],{encoding:"utf-8",timeout:3e3}).trim()}catch{}t.push({severity:"ok",group:"CodeGraph",title:`codegraph CLI ${s||"installed"}`,detail:i})}else t.push({severity:"fail",group:"CodeGraph",title:"codegraph CLI not on PATH",detail:`${e.length} agent(s) have codegraph:true but the binary isn't available.`,fix:"Install with `npm i -g @colbymchenry/codegraph`."});for(let[s,r]of e){if(!r.workspace||!y(r.workspace)){t.push({severity:"warn",group:"CodeGraph",title:`${s}: workspace missing`,detail:`Workspace path ${r.workspace} does not exist \u2014 codegraph will skip this agent.`});continue}let a=m(r.workspace,".codegraph","codegraph.db");y(a)?t.push({severity:"ok",group:"CodeGraph",title:`${s}: index present`,detail:a}):t.push({severity:"warn",group:"CodeGraph",title:`${s}: index not built yet`,detail:".codegraph/ missing \u2014 daemon will background-index this workspace on next boot.",fix:`Run \`codegraph init --index ${r.workspace}\` to build it now.`})}}function W(t){return{errors:t.filter(n=>n.severity==="fail").length,warnings:t.filter(n=>n.severity==="warn").length,ok:t.filter(n=>n.severity==="ok").length}}function se(t){console.log(),console.log(f.bold("  agentx doctor")),console.log();let n=new Map;for(let i of t)n.has(i.group)||n.set(i.group,[]),n.get(i.group).push(i);for(let[i,s]of n){console.log(f.bold("  "+i));for(let r of s){let a=r.severity==="ok"?f.green("\u2713"):r.severity==="warn"?f.yellow("!"):f.red("\u2717");console.log(`    ${a} ${r.title}`),r.detail&&console.log(f.dim("      "+r.detail.replace(/\n/g,`
       `))),r.fix&&console.log(f.dim("      \u2192 "+r.fix))}console.log()}let e=W(t);e.errors>0?console.log(f.red.bold(`  ${e.errors} error${e.errors===1?"":"s"}`)+(e.warnings?f.yellow(`, ${e.warnings} warning${e.warnings===1?"":"s"}`):"")+`. Fix the error${e.errors===1?"":"s"} and rerun.`):e.warnings>0?console.log(f.yellow.bold(`  ${e.warnings} warning${e.warnings===1?"":"s"}.`)+f.dim(" Review but not blocking.")):console.log(f.green.bold(`  All checks passed (${e.ok}).`)),console.log()}export{P as a,J as b,ke as c,G as d,V as e,ne as f};
-//# sourceMappingURL=chunk-ES2NYGS2.js.map
+//# sourceMappingURL=chunk-JRNQSG66.js.map