aivibeclaw 2026.7.4 → 2026.7.6

package/CHANGELOG.md

@@ -2,23 +2,10 @@
 
 Docs: https://docs.aivibeclaw.com
 
-## 2026.7.4
+## 2026.7.6
 
-Turns the Control Center into a production-frozen multi-agent workplace: configured tasks launch as isolated, monitored runs, agent memory is secured per employee, and every screen is hardened so no path leaves the user stuck.
-
-### Changes
-
-- **Task lifecycle:** a configured task now launches from the Control Center into a real running job (`mlib.tasks.launch`) carrying its model, tools, and an isolation partition — visible live in Monitor.
-- **Per-task tool isolation:** parallel tasks on the same domain (browser, Gmail, WhatsApp) each get their own secured session with no shared cookies or state; identities that cannot be forked serialize on an exclusive lease.
-- **Role auto-map:** choosing a role when hiring auto-inherits its responsibilities, tasks, tools with access tiers, skills, and memory scope; the twelve built-in roles ship with sensible presets.
-- **Masters library:** org tool templates carry access levels, and skill/training templates plus memory scope bind to roles under one Master Library.
-- **Agent-secured memory:** each agent's private memory is isolated and shared-memory access is permissioned by role memory scope, while the operator console keeps a full view.
-- **Org tools + writable shared memory:** an org-level tool registry and a permissioned write path into org-shared memory, with a private-recall view.
-- **Task-wise models:** a model can be assigned to a task only after its provider is authenticated, gated at both configuration and launch.
-- **Unified brain:** customize-and-train works from one canonical `BRAIN.md` persona per agent, re-trainable from the agent detail screen.
-- **Comms:** live camera frames stream into the Gemini Live session, Google sign-in enables the comms layer, and interaction modes are configurable from the Command Center.
-- **Production UI freeze:** deduplicated breadcrumbs, tab-aware navigation, a reactive Beste mascot, complete global search, live insight strips, and fully localized copy across every screen.
+Green-tests release for a clean fresh install: the full Control Center suite passes end to end.
 
 ### Fixes
 
-- **No stuck states:** the mobile navigation drawer dismisses and no longer covers content, quota links resolve, sidebar filters apply, and agent-detail tab switches update the URL and breadcrumb so Back returns to the prior tab.
+- **Test suite:** aligned a brittle streaming-progress compaction assertion with the deterministic formatter output; the load-bearing invariant (no leaked markdown backticks) is unchanged.

package/dist/abort-CndetgmY.js

@@ -0,0 +1,274 @@
+import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DW4mBlAt.js";
+import { c as parseAgentSessionKey, n as isAcpSessionKey } from "./session-key-utils-BKU1RPJJ.js";
+import { i as formatErrorMessage } from "./errors-BQPtL4FZ.js";
+import { v as resolveSessionAgentId } from "./agent-scope-nZfwbn6n.js";
+import { r as logVerbose } from "./globals-rBIk-V7R.js";
+import { d as resolveStorePath } from "./paths-NICryhdT.js";
+import { g as markSessionAbortTarget, h as loadSessionEntry, k as resolveSessionAbortTarget } from "./session-accessor-DrDJoavW.js";
+import { t as getAcpSessionManager } from "./manager-G9B_GDGN.js";
+import { i as setAbortMemory, n as isAbortRequestText } from "./abort-primitives-_L1RoNdn.js";
+import { T as replyRunRegistry, f as resolveActiveEmbeddedRunSessionId } from "./run-state-CJRR4h-6.js";
+import { n as abortEmbeddedAgentRun } from "./runs-Dord8zFI.js";
+import "./sessions-B1j_3YM7.js";
+import { c as resolveMainSessionAlias, s as resolveInternalSessionKey } from "./sessions-helpers-CyjPL-2n.js";
+import { a as clearSessionQueues } from "./queue-DVavToUA.js";
+import { f as listSubagentRunsForController, m as markSubagentRunTerminated, s as getLatestSubagentRunByChildSessionKey } from "./subagent-registry-CT-Wb9Mc.js";
+import { i as resolveConversationBindingContextFromMessage } from "./conversation-binding-input-YE1ufQRB.js";
+import { o as stripMentions, s as stripStructuralPrefixes } from "./mentions-VT6ywFkB.js";
+import { t as resolveCommandAuthorization } from "./command-auth-BZKCY-4-.js";
+import { a as shouldPersistAbortCutoff, i as resolveAbortCutoffFromContext } from "./abort-cutoff-DfANjv5i.js";
+import { t as resolveEffectiveResetTargetSessionKey } from "./acp-reset-target-B56u3L6Z.js";
+const abortDeps = {
+	getAcpSessionManager,
+	abortEmbeddedAgentRun,
+	resolveActiveEmbeddedRunSessionId,
+	markSessionAbortTarget,
+	resolveSessionAbortTarget,
+	getLatestSubagentRunByChildSessionKey,
+	listSubagentRunsForController,
+	markSubagentRunTerminated
+};
+function abortSessionRunTarget(params) {
+	const sessionIds = /* @__PURE__ */ new Set();
+	const key = normalizeOptionalString(params.key);
+	if (key) {
+		const activeSessionId = abortDeps.resolveActiveEmbeddedRunSessionId(key);
+		if (activeSessionId) sessionIds.add(activeSessionId);
+	}
+	const explicitSessionId = normalizeOptionalString(params.sessionId);
+	if (explicitSessionId) sessionIds.add(explicitSessionId);
+	let aborted = key ? replyRunRegistry.abort(key) : false;
+	for (const sessionId of sessionIds) aborted = abortDeps.abortEmbeddedAgentRun(sessionId) || aborted;
+	return aborted;
+}
+function formatAbortReplyText(stoppedSubagents) {
+	if (typeof stoppedSubagents !== "number" || stoppedSubagents <= 0) return "⚙️ Agent was aborted.";
+	return `⚙️ Agent was aborted. Stopped ${stoppedSubagents} ${stoppedSubagents === 1 ? "sub-agent" : "sub-agents"}.`;
+}
+function resolveStoredSessionId(params) {
+	const agentId = resolveSessionAgentId({
+		sessionKey: params.sessionKey,
+		config: params.cfg
+	});
+	const storePath = resolveStorePath(params.cfg.session?.store, { agentId });
+	try {
+		return loadSessionEntry({
+			agentId,
+			clone: false,
+			sessionKey: params.sessionKey,
+			storePath
+		})?.sessionId;
+	} catch {
+		return;
+	}
+}
+function resolveBoundAcpAbortTargetSessionKey(params) {
+	const bindingContext = resolveConversationBindingContextFromMessage({
+		cfg: params.cfg,
+		ctx: params.ctx
+	});
+	if (!bindingContext) return;
+	return resolveEffectiveResetTargetSessionKey({
+		cfg: params.cfg,
+		channel: bindingContext.channel,
+		accountId: bindingContext.accountId,
+		conversationId: bindingContext.conversationId,
+		parentConversationId: bindingContext.parentConversationId,
+		activeSessionKey: params.activeSessionKey,
+		skipConfiguredFallbackWhenActiveSessionNonAcp: false,
+		fallbackToActiveAcpWhenUnbound: false
+	});
+}
+function normalizeRequesterSessionKey(cfg, key) {
+	const cleaned = normalizeOptionalString(key);
+	if (!cleaned) return;
+	const { mainKey, alias } = resolveMainSessionAlias(cfg);
+	return resolveInternalSessionKey({
+		key: cleaned,
+		alias,
+		mainKey
+	});
+}
+function stopSubagentsForRequester(params) {
+	const requesterKey = normalizeRequesterSessionKey(params.cfg, params.requesterSessionKey);
+	if (!requesterKey) return { stopped: 0 };
+	const dedupedRunsByChildKey = /* @__PURE__ */ new Map();
+	for (const run of abortDeps.listSubagentRunsForController(requesterKey)) {
+		const childKey = normalizeOptionalString(run.childSessionKey);
+		if (!childKey) continue;
+		const latest = abortDeps.getLatestSubagentRunByChildSessionKey(childKey);
+		if (!latest) {
+			const existing = dedupedRunsByChildKey.get(childKey);
+			if (!existing || run.createdAt >= existing.createdAt) dedupedRunsByChildKey.set(childKey, run);
+			continue;
+		}
+		const latestControllerSessionKey = normalizeOptionalString(latest?.controllerSessionKey) ?? normalizeOptionalString(latest?.requesterSessionKey);
+		if (latest.runId !== run.runId || latestControllerSessionKey !== requesterKey) continue;
+		const existing = dedupedRunsByChildKey.get(childKey);
+		if (!existing || run.createdAt >= existing.createdAt) dedupedRunsByChildKey.set(childKey, run);
+	}
+	const runs = Array.from(dedupedRunsByChildKey.values());
+	if (runs.length === 0) return { stopped: 0 };
+	const seenChildKeys = /* @__PURE__ */ new Set();
+	let stopped = 0;
+	for (const run of runs) {
+		const childKey = normalizeOptionalString(run.childSessionKey);
+		if (!childKey || seenChildKeys.has(childKey)) continue;
+		seenChildKeys.add(childKey);
+		if (!run.endedAt) {
+			const cleared = clearSessionQueues([childKey]);
+			const parsed = parseAgentSessionKey(childKey);
+			const storePath = resolveStorePath(params.cfg.session?.store, { agentId: parsed?.agentId });
+			const aborted = abortSessionRunTarget({
+				key: childKey,
+				sessionId: replyRunRegistry.resolveSessionId(childKey) ?? loadSessionEntry({
+					agentId: parsed?.agentId,
+					clone: false,
+					sessionKey: childKey,
+					storePath
+				})?.sessionId
+			});
+			if (abortDeps.markSubagentRunTerminated({
+				runId: run.runId,
+				childSessionKey: childKey,
+				reason: "killed"
+			}) > 0 || aborted || cleared.followupCleared > 0 || cleared.laneCleared > 0) stopped += 1;
+		}
+		const cascadeResult = stopSubagentsForRequester({
+			cfg: params.cfg,
+			requesterSessionKey: childKey
+		});
+		stopped += cascadeResult.stopped;
+	}
+	if (stopped > 0) logVerbose(`abort: stopped ${stopped} subagent run(s) for ${requesterKey}`);
+	return { stopped };
+}
+async function tryFastAbortFromMessage(params) {
+	const { ctx, cfg } = params;
+	const commandSessionKey = normalizeOptionalString(ctx.SessionKey) ?? normalizeOptionalString(ctx.ParentSessionKey);
+	const targetKey = normalizeOptionalString(ctx.CommandTargetSessionKey) ?? commandSessionKey;
+	const raw = stripStructuralPrefixes(ctx.CommandBody ?? ctx.RawBody ?? ctx.Body ?? "");
+	if (!isAbortRequestText(normalizeOptionalLowercaseString(ctx.ChatType) === "group" ? stripMentions(raw, ctx, cfg, resolveSessionAgentId({
+		sessionKey: targetKey ?? ctx.SessionKey ?? "",
+		config: cfg
+	})) : raw)) return {
+		handled: false,
+		aborted: false
+	};
+	const commandAuthorized = ctx.CommandAuthorized;
+	const auth = resolveCommandAuthorization({
+		ctx,
+		cfg,
+		commandAuthorized
+	});
+	if (!auth.isAuthorizedSender) return {
+		handled: false,
+		aborted: false
+	};
+	const agentId = resolveSessionAgentId({
+		sessionKey: targetKey ?? ctx.SessionKey ?? "",
+		config: cfg
+	});
+	const abortKey = targetKey ?? auth.from ?? auth.to;
+	const requesterSessionKey = targetKey ?? ctx.SessionKey ?? abortKey;
+	if (targetKey) {
+		const storePath = resolveStorePath(cfg.session?.store, { agentId });
+		const abortCutoffForTarget = (target) => shouldPersistAbortCutoff({
+			commandSessionKey,
+			targetSessionKey: target.sessionKey
+		}) ? resolveAbortCutoffFromContext(ctx) : void 0;
+		let resolvedAbortTarget = null;
+		try {
+			resolvedAbortTarget = abortDeps.resolveSessionAbortTarget({
+				agentId,
+				sessionKey: targetKey,
+				storePath
+			});
+		} catch (error) {
+			logVerbose(`abort: failed to resolve abort metadata for ${targetKey}: ${formatErrorMessage(error)}`);
+		}
+		const resolvedTargetKey = resolvedAbortTarget?.sessionKey ?? targetKey;
+		const conversationBoundAcpTargetKey = commandSessionKey ? resolveBoundAcpAbortTargetSessionKey({
+			ctx,
+			cfg,
+			activeSessionKey: commandSessionKey
+		}) : void 0;
+		const boundAcpTargetKey = !isAcpSessionKey(resolvedTargetKey) ? conversationBoundAcpTargetKey : void 0;
+		const abortTargetKeys = [resolvedTargetKey];
+		if (boundAcpTargetKey && boundAcpTargetKey !== resolvedTargetKey) abortTargetKeys.push(boundAcpTargetKey);
+		const acpManager = abortDeps.getAcpSessionManager();
+		for (const acpTargetKey of abortTargetKeys.filter(isAcpSessionKey)) {
+			if (acpManager.resolveSession({
+				cfg,
+				sessionKey: acpTargetKey
+			}).kind === "none") continue;
+			try {
+				await acpManager.cancelSession({
+					cfg,
+					sessionKey: acpTargetKey,
+					reason: "fast-abort"
+				});
+			} catch (error) {
+				logVerbose(`abort: ACP cancel failed for ${acpTargetKey}: ${formatErrorMessage(error)}`);
+			}
+		}
+		const sourceAbortKey = commandSessionKey && !abortTargetKeys.includes(commandSessionKey) && conversationBoundAcpTargetKey && abortTargetKeys.includes(conversationBoundAcpTargetKey) ? commandSessionKey : void 0;
+		const sessionIdsByKey = new Map(abortTargetKeys.map((abortTargetKey) => [abortTargetKey, replyRunRegistry.resolveSessionId(abortTargetKey) ?? (abortTargetKey === resolvedTargetKey ? resolvedAbortTarget?.sessionId : resolveStoredSessionId({
+			cfg,
+			sessionKey: abortTargetKey
+		}))]));
+		let aborted = false;
+		for (const abortTargetKey of abortTargetKeys) aborted = abortSessionRunTarget({
+			key: abortTargetKey,
+			sessionId: sessionIdsByKey.get(abortTargetKey)
+		}) || aborted;
+		const sourceSessionId = sourceAbortKey ? replyRunRegistry.resolveSessionId(sourceAbortKey) ?? resolveStoredSessionId({
+			cfg,
+			sessionKey: sourceAbortKey
+		}) : void 0;
+		if (sourceAbortKey) aborted = abortSessionRunTarget({
+			key: sourceAbortKey,
+			sessionId: sourceSessionId
+		}) || aborted;
+		const cleared = clearSessionQueues(abortTargetKeys.flatMap((abortTargetKey) => [abortTargetKey, sessionIdsByKey.get(abortTargetKey)]).concat(sourceAbortKey, sourceSessionId));
+		if (cleared.followupCleared > 0 || cleared.laneCleared > 0) logVerbose(`abort: cleared followups=${cleared.followupCleared} lane=${cleared.laneCleared} keys=${cleared.keys.join(",")}`);
+		const { stopped } = stopSubagentsForRequester({
+			cfg,
+			requesterSessionKey
+		});
+		let persistedAbortTarget = null;
+		try {
+			persistedAbortTarget = await abortDeps.markSessionAbortTarget({
+				scope: {
+					agentId,
+					sessionKey: targetKey,
+					storePath
+				},
+				resolveAbortCutoff: abortCutoffForTarget
+			});
+		} catch (error) {
+			logVerbose(`abort: failed to persist abort metadata for ${targetKey}: ${formatErrorMessage(error)}`);
+		}
+		if (persistedAbortTarget?.persisted === false) logVerbose(`abort: failed to persist abort metadata for ${targetKey}: ${persistedAbortTarget.persistenceError ?? "unknown error"}`);
+		const abortMemoryKey = persistedAbortTarget?.sessionKey ?? resolvedAbortTarget?.sessionKey ?? abortKey;
+		const hasAbortTargetEntry = Boolean(persistedAbortTarget?.entry ?? resolvedAbortTarget?.entry);
+		if (persistedAbortTarget?.persisted !== true && abortMemoryKey && !hasAbortTargetEntry) setAbortMemory(abortMemoryKey, true);
+		return {
+			handled: true,
+			aborted,
+			stoppedSubagents: stopped
+		};
+	}
+	if (abortKey) setAbortMemory(abortKey, true);
+	const { stopped } = stopSubagentsForRequester({
+		cfg,
+		requesterSessionKey
+	});
+	return {
+		handled: true,
+		aborted: false,
+		stoppedSubagents: stopped
+	};
+}
+//#endregion
+export { tryFastAbortFromMessage as i, formatAbortReplyText as n, stopSubagentsForRequester as r, abortSessionRunTarget as t };

package/dist/abort.runtime-C7D_RWjC.js

@@ -0,0 +1,2 @@
+import { i as tryFastAbortFromMessage, n as formatAbortReplyText } from "./abort-CndetgmY.js";
+export { formatAbortReplyText, tryFastAbortFromMessage };

package/dist/abort.runtime.js

@@ -1 +1 @@
-export * from "./abort.runtime-Mk5Vp4_B.js";
+export * from "./abort.runtime-C7D_RWjC.js";

package/dist/account-inspect-DXsaFLXQ.js

@@ -0,0 +1,180 @@
+import { c as normalizeOptionalString } from "./string-coerce-DW4mBlAt.js";
+import { n as normalizeAccountId } from "./account-id-C7N4Rwku.js";
+import { m as FsSafeError } from "./path-BU0xqw_9.js";
+import { c as hasConfiguredSecretInput, p as normalizeSecretInputString, s as coerceSecretRef } from "./types.secrets-CHH5c2Kc.js";
+import { a as tryReadSecretFileSync } from "./secret-file-MaxwWAN9.js";
+import { c as resolveDefaultSecretProviderAlias } from "./ref-contract-Cju8QGx2.js";
+import "./security-runtime-C-9HwIpf.js";
+import "./string-coerce-runtime-Cw6J6JMA.js";
+import { t as resolveAccountWithDefaultFallback } from "./account-core-i3nb8UTV.js";
+import "./channel-core-D8z31Zlu.js";
+import "./provider-auth-Dt-9L6Qo.js";
+import "./routing-CGbcFlGA.js";
+import "./secret-input-CnIBWts3.js";
+import "./secret-input-runtime-R4RfjJpe.js";
+import { n as resolveTelegramAccountConfig, t as mergeTelegramAccountConfig } from "./account-config-kPH5b8Ob.js";
+import { a as resolveDefaultTelegramAccountId } from "./accounts-D5-VGgE3.js";
+//#region extensions/telegram/src/account-inspect.ts
+function inspectTokenFile(pathValue) {
+	const tokenFile = normalizeOptionalString(pathValue) ?? "";
+	if (!tokenFile) return null;
+	let token;
+	try {
+		token = tryReadSecretFileSync(tokenFile, "Telegram bot token", { rejectSymlink: true });
+	} catch (error) {
+		if (!(error instanceof FsSafeError)) throw error;
+		return {
+			token: "",
+			tokenSource: "tokenFile",
+			tokenStatus: "configured_unavailable"
+		};
+	}
+	return {
+		token: token ?? "",
+		tokenSource: "tokenFile",
+		tokenStatus: token ? "available" : "configured_unavailable"
+	};
+}
+function canResolveEnvSecretRefInReadOnlyPath(params) {
+	const providerConfig = params.cfg.secrets?.providers?.[params.provider];
+	if (!providerConfig) return params.provider === resolveDefaultSecretProviderAlias(params.cfg, "env");
+	if (providerConfig.source !== "env") return false;
+	const allowlist = providerConfig.allowlist;
+	return !allowlist || allowlist.includes(params.id);
+}
+function inspectTokenValue(params) {
+	const ref = coerceSecretRef(params.value, params.cfg.secrets?.defaults);
+	if (ref?.source === "env") {
+		if (!canResolveEnvSecretRefInReadOnlyPath({
+			cfg: params.cfg,
+			provider: ref.provider,
+			id: ref.id
+		})) return {
+			token: "",
+			tokenSource: "env",
+			tokenStatus: "configured_unavailable"
+		};
+		const envValue = normalizeOptionalString(process.env[ref.id]);
+		if (envValue) return {
+			token: envValue,
+			tokenSource: "env",
+			tokenStatus: "available"
+		};
+		return {
+			token: "",
+			tokenSource: "env",
+			tokenStatus: "configured_unavailable"
+		};
+	}
+	const token = normalizeSecretInputString(params.value);
+	if (token) return {
+		token,
+		tokenSource: "config",
+		tokenStatus: "available"
+	};
+	if (hasConfiguredSecretInput(params.value, params.cfg.secrets?.defaults)) return {
+		token: "",
+		tokenSource: "config",
+		tokenStatus: "configured_unavailable"
+	};
+	return null;
+}
+function hasConfiguredTelegramAccounts(cfg) {
+	const accounts = cfg.channels?.telegram?.accounts;
+	return Boolean(accounts) && typeof accounts === "object" && !Array.isArray(accounts) && Object.keys(accounts).length > 0;
+}
+function inspectTelegramAccountPrimary(params) {
+	const accountId = normalizeAccountId(params.accountId);
+	const merged = mergeTelegramAccountConfig(params.cfg, accountId);
+	const enabled = params.cfg.channels?.telegram?.enabled !== false && merged.enabled !== false;
+	const accountConfig = resolveTelegramAccountConfig(params.cfg, accountId);
+	const allowChannelCredentialFallback = accountId === "default" || Boolean(accountConfig) || !hasConfiguredTelegramAccounts(params.cfg);
+	const accountTokenFile = inspectTokenFile(accountConfig?.tokenFile);
+	if (accountTokenFile) return {
+		accountId,
+		enabled,
+		name: normalizeOptionalString(merged.name),
+		token: accountTokenFile.token,
+		tokenSource: accountTokenFile.tokenSource,
+		tokenStatus: accountTokenFile.tokenStatus,
+		configured: accountTokenFile.tokenStatus !== "missing",
+		config: merged
+	};
+	const accountToken = inspectTokenValue({
+		cfg: params.cfg,
+		value: accountConfig?.botToken
+	});
+	if (accountToken) return {
+		accountId,
+		enabled,
+		name: normalizeOptionalString(merged.name),
+		token: accountToken.token,
+		tokenSource: accountToken.tokenSource,
+		tokenStatus: accountToken.tokenStatus,
+		configured: accountToken.tokenStatus !== "missing",
+		config: merged
+	};
+	if (allowChannelCredentialFallback) {
+		const channelTokenFile = inspectTokenFile(params.cfg.channels?.telegram?.tokenFile);
+		if (channelTokenFile) return {
+			accountId,
+			enabled,
+			name: normalizeOptionalString(merged.name),
+			token: channelTokenFile.token,
+			tokenSource: channelTokenFile.tokenSource,
+			tokenStatus: channelTokenFile.tokenStatus,
+			configured: channelTokenFile.tokenStatus !== "missing",
+			config: merged
+		};
+		const channelToken = inspectTokenValue({
+			cfg: params.cfg,
+			value: params.cfg.channels?.telegram?.botToken
+		});
+		if (channelToken) return {
+			accountId,
+			enabled,
+			name: normalizeOptionalString(merged.name),
+			token: channelToken.token,
+			tokenSource: channelToken.tokenSource,
+			tokenStatus: channelToken.tokenStatus,
+			configured: channelToken.tokenStatus !== "missing",
+			config: merged
+		};
+	}
+	const envToken = accountId === "default" ? normalizeOptionalString(params.envToken) ?? normalizeOptionalString(process.env.TELEGRAM_BOT_TOKEN) ?? "" : "";
+	if (envToken) return {
+		accountId,
+		enabled,
+		name: normalizeOptionalString(merged.name),
+		token: envToken,
+		tokenSource: "env",
+		tokenStatus: "available",
+		configured: true,
+		config: merged
+	};
+	return {
+		accountId,
+		enabled,
+		name: normalizeOptionalString(merged.name),
+		token: "",
+		tokenSource: "none",
+		tokenStatus: "missing",
+		configured: false,
+		config: merged
+	};
+}
+function inspectTelegramAccount(params) {
+	return resolveAccountWithDefaultFallback({
+		accountId: params.accountId,
+		normalizeAccountId,
+		resolvePrimary: (accountId) => inspectTelegramAccountPrimary({
+			cfg: params.cfg,
+			accountId,
+			envToken: params.envToken
+		}),
+		hasCredential: (account) => account.tokenSource !== "none",
+		resolveDefaultAccountId: () => resolveDefaultTelegramAccountId(params.cfg)
+	});
+}
+//#endregion
+export { inspectTelegramAccount as t };

package/dist/accounts-BAYqY9av.js

@@ -0,0 +1,2 @@
+import { i as resolveZaloAccount } from "./accounts-Cir2MbFh.js";
+export { resolveZaloAccount };

package/dist/accounts-BQHZReu8.js

@@ -0,0 +1,107 @@
+import { n as normalizeAccountId$1, r as normalizeOptionalAccountId, t as DEFAULT_ACCOUNT_ID } from "./account-id-C7N4Rwku.js";
+import { a as tryReadSecretFileSync } from "./secret-file-MaxwWAN9.js";
+import { t as resolveAccountEntry } from "./account-lookup-DgErwy8P.js";
+import "./core-DV7Ht6Rz.js";
+import "./account-resolution-Bli842Vo.js";
+//#region extensions/line/src/accounts.ts
+function readFileIfExists(filePath) {
+	return tryReadSecretFileSync(filePath, "LINE credential file", { rejectSymlink: true });
+}
+function resolveToken(params) {
+	const { accountId, baseConfig, accountConfig } = params;
+	if (accountConfig?.channelAccessToken?.trim()) return {
+		token: accountConfig.channelAccessToken.trim(),
+		tokenSource: "config"
+	};
+	const accountFileToken = readFileIfExists(accountConfig?.tokenFile);
+	if (accountFileToken) return {
+		token: accountFileToken,
+		tokenSource: "file"
+	};
+	if (accountId === "default") {
+		if (baseConfig?.channelAccessToken?.trim()) return {
+			token: baseConfig.channelAccessToken.trim(),
+			tokenSource: "config"
+		};
+		const baseFileToken = readFileIfExists(baseConfig?.tokenFile);
+		if (baseFileToken) return {
+			token: baseFileToken,
+			tokenSource: "file"
+		};
+		const envToken = process.env.LINE_CHANNEL_ACCESS_TOKEN?.trim();
+		if (envToken) return {
+			token: envToken,
+			tokenSource: "env"
+		};
+	}
+	return {
+		token: "",
+		tokenSource: "none"
+	};
+}
+function resolveSecret(params) {
+	const { accountId, baseConfig, accountConfig } = params;
+	if (accountConfig?.channelSecret?.trim()) return accountConfig.channelSecret.trim();
+	const accountFileSecret = readFileIfExists(accountConfig?.secretFile);
+	if (accountFileSecret) return accountFileSecret;
+	if (accountId === "default") {
+		if (baseConfig?.channelSecret?.trim()) return baseConfig.channelSecret.trim();
+		const baseFileSecret = readFileIfExists(baseConfig?.secretFile);
+		if (baseFileSecret) return baseFileSecret;
+		const envSecret = process.env.LINE_CHANNEL_SECRET?.trim();
+		if (envSecret) return envSecret;
+	}
+	return "";
+}
+function resolveLineAccount(params) {
+	const cfg = params.cfg;
+	const accountId = normalizeAccountId$1(params.accountId ?? resolveDefaultLineAccountId(cfg));
+	const lineConfig = cfg.channels?.line;
+	const accounts = lineConfig?.accounts;
+	const accountConfig = accountId !== "default" ? resolveAccountEntry(accounts, accountId) : void 0;
+	const { token, tokenSource } = resolveToken({
+		accountId,
+		baseConfig: lineConfig,
+		accountConfig
+	});
+	const secret = resolveSecret({
+		accountId,
+		baseConfig: lineConfig,
+		accountConfig
+	});
+	const { accounts: _ignoredAccounts, defaultAccount: _ignoredDefaultAccount, ...lineBase } = lineConfig ?? {};
+	const mergedConfig = {
+		...lineBase,
+		...accountConfig
+	};
+	const enabled = accountConfig?.enabled ?? (accountId === "default" ? lineConfig?.enabled ?? true : false);
+	return {
+		accountId,
+		name: accountConfig?.name ?? (accountId === "default" ? lineConfig?.name : void 0),
+		enabled,
+		channelAccessToken: token,
+		channelSecret: secret,
+		tokenSource,
+		config: mergedConfig
+	};
+}
+function listLineAccountIds(cfg) {
+	const lineConfig = cfg.channels?.line;
+	const accounts = lineConfig?.accounts;
+	const ids = /* @__PURE__ */ new Set();
+	if (lineConfig?.channelAccessToken?.trim() || lineConfig?.tokenFile || process.env.LINE_CHANNEL_ACCESS_TOKEN?.trim()) ids.add(DEFAULT_ACCOUNT_ID);
+	if (accounts) for (const id of Object.keys(accounts)) ids.add(id);
+	return Array.from(ids);
+}
+function resolveDefaultLineAccountId(cfg) {
+	const preferred = normalizeOptionalAccountId((cfg.channels?.line)?.defaultAccount);
+	if (preferred && listLineAccountIds(cfg).some((accountId) => normalizeAccountId$1(accountId) === preferred)) return preferred;
+	const ids = listLineAccountIds(cfg);
+	if (ids.includes("default")) return DEFAULT_ACCOUNT_ID;
+	return ids[0] ?? "default";
+}
+function normalizeAccountId(accountId) {
+	return normalizeAccountId$1(accountId);
+}
+//#endregion
+export { resolveLineAccount as i, normalizeAccountId as n, resolveDefaultLineAccountId as r, listLineAccountIds as t };