aibroker 0.10.0 → 0.12.0

package/dist/daemon/todoist-webhook.js

@@ -0,0 +1,287 @@
+/**
+ * daemon/todoist-webhook.ts — Todoist as an inbound channel.
+ *
+ * File a task from a phone or a watch and it reaches the session that owns the
+ * project, without a poller. Todoist pushes; the daemon routes it to `dispatch`.
+ *
+ * ── Why webhooks rather than polling ────────────────────────────────────────
+ *
+ * Polling forces a choice between latency and cost, and gets both wrong. The
+ * decisive detail is that `reminder:fired` is a webhook event: a task with a
+ * reminder pushes AT the reminder time. Due dates do NOT push — a task merely
+ * becoming due fires nothing — so scheduling is expressed as a reminder, and
+ * "run the sweep at 09:00" needs no timer anywhere in this system.
+ *
+ * ── This is an execution ingress, so it is deliberately narrow ──────────────
+ *
+ * A task arriving here becomes an instruction a session acts on with the
+ * user's full rights. Todoist's own payload documents that `initiator` "may be
+ * the same user indicated in user_id OR A COLLABORATOR FROM A SHARED PROJECT",
+ * which is precisely the exposure: without a boundary, anyone on any shared
+ * project has a path to this machine. Hence:
+ *
+ *   - Only tasks under a configured ingress project (or its children) are
+ *     considered. Everything else is acknowledged and dropped.
+ *   - Every request must carry a valid HMAC signature.
+ *   - Everything — accepted, ignored, refused — goes through the audit trail.
+ *
+ * ── Echo loops ──────────────────────────────────────────────────────────────
+ *
+ * `note:added` is an event, so an agent commenting on a task triggers a webhook
+ * that could route back to an agent that comments again. `initiator` cannot
+ * break the cycle: when agents act as the user, the initiator IS the user. Our
+ * own writes are therefore marked, and marked content is ignored on the way in.
+ */
+import { createServer } from "node:http";
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { log } from "../core/log.js";
+import { audit } from "./audit.js";
+/** Prefix on anything an agent writes back to Todoist, so we ignore our own echo. */
+export const AGENT_MARK = "🤖";
+/**
+ * Verify Todoist's HMAC over the RAW body.
+ *
+ * Must run against the exact bytes received: re-serialising parsed JSON changes
+ * key order and whitespace and the signature will never match.
+ */
+export function verifySignature(raw, header, secret) {
+    if (!header || !secret)
+        return false;
+    const expected = createHmac("sha256", secret).update(raw).digest();
+    let got;
+    try {
+        got = Buffer.from(header, "base64");
+    }
+    catch {
+        return false;
+    }
+    if (got.length !== expected.length)
+        return false;
+    return timingSafeEqual(got, expected);
+}
+/** Stable identity for an event, for replay/duplicate suppression. */
+export function eventKey(e) {
+    const id = e.event_data?.id ?? "?";
+    return `${e.event_name}:${id}:${e.triggered_at ?? ""}`;
+}
+/**
+ * Decide whether an event should reach a session, and as what.
+ *
+ * Pure, so the routing rules are testable without a socket: this function is
+ * the entire security boundary of the ingress.
+ */
+export function route(e, cfg) {
+    const data = e.event_data ?? {};
+    const content = typeof data.content === "string" ? data.content : "";
+    const description = typeof data.description === "string" ? data.description : "";
+    const taskId = typeof data.id === "string" ? data.id : String(data.id ?? "");
+    // Our own writes come back as events. Drop them before anything else, or an
+    // agent's comment becomes an instruction to an agent.
+    if (content.startsWith(AGENT_MARK) || description.startsWith(AGENT_MARK)) {
+        return { act: false, reason: "agent-authored content, ignored to avoid an echo loop" };
+    }
+    const ACTIONABLE = new Set(["item:added", "item:completed", "reminder:fired"]);
+    if (!ACTIONABLE.has(e.event_name)) {
+        return { act: false, reason: `event ${e.event_name} is not actionable` };
+    }
+    // Completion is the human saying "done"; it must never start work.
+    if (e.event_name === "item:completed") {
+        return { act: false, reason: "task completed — recorded, no action taken" };
+    }
+    const projectId = typeof data.project_id === "string" ? data.project_id : "";
+    if (!cfg.ingressProjectIds.has(projectId)) {
+        // The boundary. Anything outside the allowlist is acknowledged and dropped,
+        // so a task filed into a shared project cannot reach a session.
+        return { act: false, reason: `project ${projectId || "?"} is not an ingress project` };
+    }
+    if (!content.trim()) {
+        return { act: false, reason: "task has no content" };
+    }
+    // Owner, most explicit first:
+    //   1. a `pai:<name>` label      — say exactly where it goes
+    //   2. the project it was filed in — "put it in the Whazaa list"
+    //   3. the configured default     — the watch case: Inbox, no label, no project
+    const labels = Array.isArray(data.labels) ? data.labels.map(String) : [];
+    const labelled = labels.map((l) => l.trim())
+        .find((l) => l.toLowerCase().startsWith("pai:"))?.slice(4).trim();
+    const owner = labelled || cfg.projectOwners.get(projectId) || cfg.defaultOwner;
+    if (!owner) {
+        return {
+            act: false,
+            reason: "no pai:<name> label, no owner for this project, and no default owner configured",
+        };
+    }
+    const body = description.trim() ? `${content}\n\n${description}` : content;
+    return { act: true, project: owner, body, taskId };
+}
+/** Bounded replay guard: Todoist retries, and a retry must not run work twice. */
+class SeenSet {
+    max;
+    seen = new Set();
+    order = [];
+    constructor(max = 2_000) {
+        this.max = max;
+    }
+    has(k) { return this.seen.has(k); }
+    add(k) {
+        if (this.seen.has(k))
+            return;
+        this.seen.add(k);
+        this.order.push(k);
+        if (this.order.length > this.max) {
+            const drop = this.order.shift();
+            if (drop)
+                this.seen.delete(drop);
+        }
+    }
+}
+function readBody(req, limit = 1_000_000) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (c) => {
+            size += c.length;
+            if (size > limit) {
+                reject(new Error("payload too large"));
+                req.destroy();
+                return;
+            }
+            chunks.push(c);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+export function createWebhookServer(cfg, deps) {
+    const seen = new SeenSet();
+    return createServer((req, res) => {
+        void (async () => {
+            if (req.method !== "POST") {
+                res.writeHead(405).end();
+                return;
+            }
+            // Ignore query strings; a proxy may append them.
+            const reqPath = (req.url ?? "/").split("?")[0];
+            if (reqPath !== cfg.path) {
+                res.writeHead(404).end();
+                return;
+            }
+            let raw;
+            try {
+                raw = await readBody(req);
+            }
+            catch {
+                res.writeHead(413).end();
+                return;
+            }
+            if (!verifySignature(raw, req.headers["x-todoist-hmac-sha256"], cfg.secret)) {
+                // Unsigned or wrongly signed: someone found the endpoint. Worth a record.
+                audit({
+                    action: "webhook", actor: "todoist", target: "aibroker",
+                    outcome: "rejected", reason: "invalid or missing HMAC signature",
+                });
+                log("todoist-webhook: rejected a request with an invalid signature");
+                res.writeHead(401).end();
+                return;
+            }
+            let event;
+            try {
+                event = JSON.parse(raw.toString("utf-8"));
+            }
+            catch {
+                res.writeHead(400).end();
+                return;
+            }
+            // Acknowledge immediately, then work. Todoist retries on a slow or failed
+            // response, and a dispatch can take a minute — without this, every slow
+            // delivery is retried and the work runs more than once.
+            res.writeHead(200, { "content-type": "application/json" }).end('{"ok":true}');
+            const key = eventKey(event);
+            if (seen.has(key)) {
+                log(`todoist-webhook: duplicate ${key}, ignored`);
+                return;
+            }
+            seen.add(key);
+            const decision = route(event, cfg);
+            const who = event.initiator?.email ?? event.initiator?.full_name ?? "todoist";
+            if (!decision.act) {
+                audit({
+                    action: "webhook", actor: who, target: "aibroker",
+                    outcome: "ignored", reason: decision.reason,
+                    meta: { event: event.event_name, task: event.event_data?.content ?? undefined },
+                });
+                return;
+            }
+            try {
+                const r = await deps.deliver(decision.project, decision.body);
+                audit({
+                    action: "webhook", actor: who, target: r.session || decision.project,
+                    outcome: r.outcome, body: decision.body, reason: r.reason,
+                    meta: { event: event.event_name, taskId: decision.taskId },
+                });
+            }
+            catch (err) {
+                const reason = err instanceof Error ? err.message : String(err);
+                audit({
+                    action: "webhook", actor: who, target: decision.project,
+                    outcome: "failed", body: decision.body, reason,
+                    meta: { event: event.event_name, taskId: decision.taskId },
+                });
+                log(`todoist-webhook: delivery failed — ${reason}`);
+            }
+        })();
+    });
+}
+/** Read config from the environment. Returns null when not configured. */
+export function webhookConfigFromEnv() {
+    const secret = process.env.TODOIST_CLIENT_SECRET;
+    if (!secret)
+        return null;
+    // "id" or "id=owner", comma-separated. The owner half is optional and maps a
+    // project to the session that owns work filed there.
+    const ids = new Set();
+    const owners = new Map();
+    for (const entry of (process.env.TODOIST_INGRESS_PROJECTS ?? "").split(",")) {
+        const [id, owner] = entry.split("=").map((s) => s.trim());
+        if (!id)
+            continue;
+        ids.add(id);
+        if (owner)
+            owners.set(id, owner);
+    }
+    return {
+        secret,
+        port: Number(process.env.TODOIST_WEBHOOK_PORT) || 8766,
+        bind: process.env.TODOIST_WEBHOOK_BIND ?? "127.0.0.1",
+        path: process.env.TODOIST_WEBHOOK_PATH ?? "/todoist",
+        ingressProjectIds: ids,
+        projectOwners: owners,
+        defaultOwner: process.env.TODOIST_DEFAULT_OWNER,
+    };
+}
+/** Start the receiver if configured. No-op otherwise. */
+export function startTodoistWebhook(deps) {
+    const cfg = webhookConfigFromEnv();
+    if (!cfg) {
+        log("todoist-webhook: not configured (set TODOIST_CLIENT_SECRET to enable)");
+        return null;
+    }
+    if (cfg.ingressProjectIds.size === 0) {
+        // Refusing here is deliberate: with an empty allowlist the ingress would
+        // accept work from every project on the account, including shared ones.
+        log("todoist-webhook: TODOIST_INGRESS_PROJECTS is empty — refusing to accept every project");
+        return null;
+    }
+    const server = createWebhookServer(cfg, deps);
+    if (cfg.bind !== "127.0.0.1" && cfg.bind !== "localhost") {
+        log(`todoist-webhook: WARNING binding ${cfg.bind}, not loopback — this puts an execution ingress ` +
+            `directly on the network. Prefer loopback with a TLS proxy (Tailscale Funnel, Cloudflare Tunnel, Caddy) in front.`);
+    }
+    server.listen(cfg.port, cfg.bind, () => {
+        log(`todoist-webhook: listening on ${cfg.bind}:${cfg.port}${cfg.path}, ` +
+            `${cfg.ingressProjectIds.size} ingress project(s), default owner ${cfg.defaultOwner ?? "(none)"}`);
+    });
+    server.on("error", (err) => log(`todoist-webhook: server error — ${err.message}`));
+    return server;
+}
+//# sourceMappingURL=todoist-webhook.js.map

package/dist/daemon/todoist-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todoist-webhook.js","sourceRoot":"","sources":["../../src/daemon/todoist-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,qFAAqF;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC;AAiD/B;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,MAA0B,EAAE,MAAc;IACrF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACpE,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,CAAe;IACtC,MAAM,EAAE,GAAI,CAAC,CAAC,UAAU,EAAE,EAAa,IAAI,GAAG,CAAC;IAC/C,OAAO,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,IAAI,CAAC,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,CAAe,EAAE,GAAkB;IACvD,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,UAAU,oBAAoB,EAAE,CAAC;IAC3E,CAAC;IACD,mEAAmE;IACnE,IAAI,CAAC,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,4EAA4E;QAC5E,gEAAgE;QAChE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,SAAS,IAAI,GAAG,4BAA4B,EAAE,CAAC;IACzF,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACvD,CAAC;IAED,8BAA8B;IAC9B,6DAA6D;IAC7D,iEAAiE;IACjE,gFAAgF;IAChF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,MAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC;IAE/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,iFAAiF;SAC1F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC3E,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACrD,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO;IAGkB;IAFZ,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACzB,KAAK,GAAa,EAAE,CAAC;IACtC,YAA6B,MAAM,KAAK;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAC5C,GAAG,CAAC,CAAS,IAAa,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,GAAG,CAAC,CAAS;QACX,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;CACF;AAOD,SAAS,QAAQ,CAAC,GAAoB,EAAE,KAAK,GAAG,SAAS;IACvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YAC3B,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,IAAiB;IACvE,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAE3B,OAAO,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAChE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChE,iDAAiD;YACjD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAE/D,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAuB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClG,0EAA0E;gBAC1E,KAAK,CAAC;oBACJ,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU;oBACvD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,mCAAmC;iBACjE,CAAC,CAAC;gBACH,GAAG,CAAC,+DAA+D,CAAC,CAAC;gBACrE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,wEAAwE;YACxE,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAE9E,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,8BAA8B,GAAG,WAAW,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,SAAS,CAAC;YAE9E,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAClB,KAAK,CAAC;oBACJ,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU;oBACjD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;oBAC3C,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAG,KAAK,CAAC,UAAU,EAAE,OAAkB,IAAI,SAAS,EAAE;iBAC5F,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9D,KAAK,CAAC;oBACJ,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;oBACpE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;oBACzD,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBAC3D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,KAAK,CAAC;oBACJ,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO;oBACvD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM;oBAC9C,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBAC3D,CAAC,CAAC;gBACH,GAAG,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACjD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,6EAA6E;IAC7E,qDAAqD;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,MAAM;QACN,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,IAAI;QACtD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,WAAW;QACrD,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,UAAU;QACpD,iBAAiB,EAAE,GAAG;QACtB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;KAChD,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrC,yEAAyE;QACzE,wEAAwE;QACxE,GAAG,CAAC,uFAAuF,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzD,GAAG,CAAC,oCAAoC,GAAG,CAAC,IAAI,kDAAkD;YAC9F,kHAAkH,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;QACrC,GAAG,CAAC,iCAAiC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI;YACpE,GAAG,GAAG,CAAC,iBAAiB,CAAC,IAAI,sCAAsC,GAAG,CAAC,YAAY,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,mCAAmC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aibroker",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Platform-agnostic AI message broker — routes between user channels and AI backends",
   "type": "module",
   "main": "dist/index.js",