daemora 1.0.0-alpha.0

package/dist/goals/GoalStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GoalStore.js","sourceRoot":"","sources":["../../src/goals/GoalStore.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAgBlC,MAAM,MAAM,GAAG;;;;;;;;;;;;;;CAcd,CAAC;AAEF,MAAM,OAAO,SAAS;IAOS;IANZ,UAAU,CAAqB;IAC/B,SAAS,CAAqB;IAC9B,SAAS,CAAqB;IAC9B,UAAU,CAAqB;IAC/B,UAAU,CAAqB;IAEhD,YAA6B,EAAqB;QAArB,OAAE,GAAF,EAAE,CAAmB;QAChD,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B;0CACoC,CACrC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,OAAO,CACzB;;;2CAGqC,CACtC,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC,OAAO,CACzB;;;+BAGyB,CAC1B,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAC1B;;;kBAGY,CACb,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,IAAiE;QACtE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/G,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;IACvB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAe,CAAC;IAC3C,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAa,IAAI,IAAI,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,IAAqG,EAAE,WAAW,GAAG,KAAK;QAC3I,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,GAAG,CACjB,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAC5B,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,EACxC,SAAS,EACT,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAClE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAClC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,EAC5B,GAAG,EACH,SAAS,EAAE,GAAG,EAAE,oBAAoB;QACpC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,uBAAuB;QACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAC1D,CAAC;CACF"}

package/dist/hooks/HookRunner.d.ts

@@ -0,0 +1,80 @@
+/**
+ * HookRunner — event-driven interception at tool-call lifecycle points.
+ *
+ * Users register hooks in `{dataDir}/hooks.json` that fire on:
+ *   - PreToolUse   before a tool executes; can block or modify input
+ *   - PostToolUse  after a tool executes; observational (logging, alerts)
+ *   - TaskStart    when a turn begins (AgentLoop.run)
+ *   - TaskEnd      when a turn terminates (success or failure)
+ *
+ * Hook kinds:
+ *   - "command"  run a shell command with TOOL_NAME / TOOL_INPUT / TASK_ID /
+ *                EVENT env vars; stdout is parsed as JSON for the decision.
+ *                Only this kind is supported — inline JS eval is a security
+ *                hole and crews provide the same flexibility safely.
+ *
+ * Hook output schema (stdout of the command):
+ *   { "decision": "allow" | "block" | "ask",
+ *     "reason":   string,
+ *     "modifiedInput": object }
+ *
+ * Non-JSON stdout → treated as allow (the command succeeded, no opinion).
+ * Non-zero exit → fail-open (allow). The logs surface the failure so the
+ * user can debug; we never let a broken hook wedge tool execution.
+ */
+import { z } from "zod";
+export type HookEvent = "PreToolUse" | "PostToolUse" | "TaskStart" | "TaskEnd";
+declare const hookSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"command">;
+    /** `*` matches all tools; otherwise matched against the tool name. */
+    matcher: z.ZodOptional<z.ZodString>;
+    command: z.ZodString;
+    /** Milliseconds before we kill the hook. */
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    kind: "command";
+    command: string;
+    timeoutMs: number;
+    matcher?: string | undefined;
+}, {
+    kind: "command";
+    command: string;
+    matcher?: string | undefined;
+    timeoutMs?: number | undefined;
+}>;
+export type HookDef = z.infer<typeof hookSchema>;
+export interface HookContext {
+    readonly event: HookEvent;
+    readonly taskId: string;
+    readonly toolName?: string;
+    readonly toolInput?: unknown;
+    readonly toolOutput?: unknown;
+}
+export interface HookResult {
+    readonly decision: "allow" | "block" | "ask";
+    readonly reason?: string;
+    readonly modifiedInput?: Record<string, unknown>;
+}
+export declare class HookRunner {
+    private hooks;
+    private loaded;
+    private readonly filePath;
+    constructor(dataDir: string);
+    load(): void;
+    /** Watch the file for changes and hot-reload. Idempotent. */
+    watch(): void;
+    stats(): Record<HookEvent, number>;
+    /**
+     * Run every hook registered for `event` that matches the context's
+     * `toolName`. Returns the merged decision:
+     *
+     *   - first `block` short-circuits — that's the returned result
+     *   - first `ask` survives unless a later hook blocks
+     *   - any `modifiedInput` on the first allowing hook propagates
+     *   - otherwise the result is `allow`
+     */
+    run(event: HookEvent, ctx: Omit<HookContext, "event">): Promise<HookResult>;
+    private executeHook;
+}
+export {};
+//# sourceMappingURL=HookRunner.d.ts.map

package/dist/hooks/HookRunner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HookRunner.d.ts","sourceRoot":"","sources":["../../src/hooks/HookRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,aAAa,GAAG,WAAW,GAAG,SAAS,CAAC;AAI/E,QAAA,MAAM,UAAU;;IAEd,sEAAsE;;;IAGtE,4CAA4C;;;;;;;;;;;;EAE5C,CAAC;AASH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAGjD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClD;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;gBAEtB,OAAO,EAAE,MAAM;IAI3B,IAAI,IAAI,IAAI;IAwBZ,6DAA6D;IAC7D,KAAK,IAAI,IAAI;IAab,KAAK,IAAI,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;IAUlC;;;;;;;;OAQG;IACG,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAiCjF,OAAO,CAAC,WAAW;CA0CpB"}

package/dist/hooks/HookRunner.js

@@ -0,0 +1,218 @@
+/**
+ * HookRunner — event-driven interception at tool-call lifecycle points.
+ *
+ * Users register hooks in `{dataDir}/hooks.json` that fire on:
+ *   - PreToolUse   before a tool executes; can block or modify input
+ *   - PostToolUse  after a tool executes; observational (logging, alerts)
+ *   - TaskStart    when a turn begins (AgentLoop.run)
+ *   - TaskEnd      when a turn terminates (success or failure)
+ *
+ * Hook kinds:
+ *   - "command"  run a shell command with TOOL_NAME / TOOL_INPUT / TASK_ID /
+ *                EVENT env vars; stdout is parsed as JSON for the decision.
+ *                Only this kind is supported — inline JS eval is a security
+ *                hole and crews provide the same flexibility safely.
+ *
+ * Hook output schema (stdout of the command):
+ *   { "decision": "allow" | "block" | "ask",
+ *     "reason":   string,
+ *     "modifiedInput": object }
+ *
+ * Non-JSON stdout → treated as allow (the command succeeded, no opinion).
+ * Non-zero exit → fail-open (allow). The logs surface the failure so the
+ * user can debug; we never let a broken hook wedge tool execution.
+ */
+import { spawn } from "node:child_process";
+import { existsSync, readFileSync, watch } from "node:fs";
+import { join } from "node:path";
+import { z } from "zod";
+import { createLogger } from "../util/logger.js";
+const log = createLogger("hooks");
+const HOOK_EVENTS = ["PreToolUse", "PostToolUse", "TaskStart", "TaskEnd"];
+const hookSchema = z.object({
+    kind: z.literal("command"),
+    /** `*` matches all tools; otherwise matched against the tool name. */
+    matcher: z.string().optional(),
+    command: z.string(),
+    /** Milliseconds before we kill the hook. */
+    timeoutMs: z.number().int().positive().max(30_000).default(5_000),
+});
+const hooksFileSchema = z.object({
+    PreToolUse: z.array(hookSchema).optional(),
+    PostToolUse: z.array(hookSchema).optional(),
+    TaskStart: z.array(hookSchema).optional(),
+    TaskEnd: z.array(hookSchema).optional(),
+}).strict();
+export class HookRunner {
+    hooks = {};
+    loaded = false;
+    filePath;
+    constructor(dataDir) {
+        this.filePath = join(dataDir, "hooks.json");
+    }
+    load() {
+        if (!existsSync(this.filePath)) {
+            this.hooks = {};
+            this.loaded = true;
+            return;
+        }
+        try {
+            const raw = readFileSync(this.filePath, "utf-8");
+            const parsed = hooksFileSchema.safeParse(JSON.parse(raw));
+            if (!parsed.success) {
+                log.warn({ errors: parsed.error.issues }, "hooks.json failed validation — hooks disabled");
+                this.hooks = {};
+            }
+            else {
+                this.hooks = parsed.data;
+                const total = HOOK_EVENTS.reduce((n, ev) => n + (this.hooks[ev]?.length ?? 0), 0);
+                log.info({ file: this.filePath, count: total }, "hooks loaded");
+            }
+        }
+        catch (e) {
+            log.error({ err: e.message }, "hooks.json parse failed — hooks disabled");
+            this.hooks = {};
+        }
+        this.loaded = true;
+    }
+    /** Watch the file for changes and hot-reload. Idempotent. */
+    watch() {
+        if (!existsSync(this.filePath))
+            return;
+        try {
+            const w = watch(this.filePath, { persistent: false }, () => {
+                log.info("hooks.json changed — reloading");
+                this.load();
+            });
+            w.unref();
+        }
+        catch {
+            // Some FSes don't support watch — silently degrade.
+        }
+    }
+    stats() {
+        if (!this.loaded)
+            this.load();
+        return {
+            PreToolUse: this.hooks.PreToolUse?.length ?? 0,
+            PostToolUse: this.hooks.PostToolUse?.length ?? 0,
+            TaskStart: this.hooks.TaskStart?.length ?? 0,
+            TaskEnd: this.hooks.TaskEnd?.length ?? 0,
+        };
+    }
+    /**
+     * Run every hook registered for `event` that matches the context's
+     * `toolName`. Returns the merged decision:
+     *
+     *   - first `block` short-circuits — that's the returned result
+     *   - first `ask` survives unless a later hook blocks
+     *   - any `modifiedInput` on the first allowing hook propagates
+     *   - otherwise the result is `allow`
+     */
+    async run(event, ctx) {
+        if (!this.loaded)
+            this.load();
+        const list = this.hooks[event];
+        if (!list || list.length === 0)
+            return { decision: "allow" };
+        const matching = list.filter((h) => !h.matcher || h.matcher === "*" || h.matcher === ctx.toolName);
+        if (matching.length === 0)
+            return { decision: "allow" };
+        let askResult;
+        let modifiedInput;
+        for (const hook of matching) {
+            try {
+                const result = await this.executeHook(hook, { ...ctx, event });
+                if (result.decision === "block") {
+                    log.warn({ event, tool: ctx.toolName, reason: result.reason }, "hook blocked tool");
+                    return result;
+                }
+                if (result.decision === "ask" && !askResult)
+                    askResult = result;
+                if (result.modifiedInput && !modifiedInput)
+                    modifiedInput = result.modifiedInput;
+            }
+            catch (e) {
+                log.error({ event, tool: ctx.toolName, err: e.message }, "hook crashed — failing open");
+                // fall through — treat as allow
+            }
+        }
+        if (askResult)
+            return askResult;
+        if (modifiedInput)
+            return { decision: "allow", modifiedInput };
+        return { decision: "allow" };
+    }
+    // ── Internal ────────────────────────────────────────────────────────────
+    executeHook(hook, ctx) {
+        return new Promise((resolve) => {
+            const child = spawn(hook.command, {
+                shell: true,
+                env: {
+                    ...process.env,
+                    TOOL_NAME: ctx.toolName ?? "",
+                    TOOL_INPUT: safeJson(ctx.toolInput),
+                    TOOL_OUTPUT: safeJson(ctx.toolOutput),
+                    TASK_ID: ctx.taskId,
+                    EVENT: ctx.event,
+                },
+                stdio: ["ignore", "pipe", "pipe"],
+            });
+            const stdout = [];
+            const stderr = [];
+            child.stdout.on("data", (d) => stdout.push(d.toString("utf-8")));
+            child.stderr.on("data", (d) => stderr.push(d.toString("utf-8")));
+            const timer = setTimeout(() => {
+                child.kill("SIGKILL");
+                log.warn({ command: hook.command, timeoutMs: hook.timeoutMs }, "hook timed out");
+            }, hook.timeoutMs).unref();
+            child.on("close", (code) => {
+                clearTimeout(timer);
+                if (code !== 0) {
+                    log.warn({ command: hook.command, code, stderr: stderr.join("").slice(0, 200) }, "hook exit non-zero");
+                    resolve({ decision: "allow" });
+                    return;
+                }
+                resolve(parseHookOutput(stdout.join("")));
+            });
+            child.on("error", (err) => {
+                clearTimeout(timer);
+                log.warn({ command: hook.command, err: err.message }, "hook spawn failed");
+                resolve({ decision: "allow" });
+            });
+        });
+    }
+}
+function safeJson(v) {
+    if (v === undefined || v === null)
+        return "";
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return "";
+    }
+}
+function parseHookOutput(raw) {
+    const text = raw.trim();
+    if (!text)
+        return { decision: "allow" };
+    try {
+        const parsed = JSON.parse(text);
+        const decision = parsed["decision"];
+        if (decision === "block" || decision === "ask" || decision === "allow") {
+            const result = { decision };
+            if (typeof parsed["reason"] === "string")
+                result.reason = parsed["reason"];
+            if (parsed["modifiedInput"] && typeof parsed["modifiedInput"] === "object") {
+                result.modifiedInput = parsed["modifiedInput"];
+            }
+            return result;
+        }
+    }
+    catch {
+        // Non-JSON output = implicit allow with the text as reason.
+    }
+    return { decision: "allow" };
+}
+//# sourceMappingURL=HookRunner.js.map

package/dist/hooks/HookRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HookRunner.js","sourceRoot":"","sources":["../../src/hooks/HookRunner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;AAIlC,MAAM,WAAW,GAAyB,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAEhG,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,sEAAsE;IACtE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,4CAA4C;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAmBZ,MAAM,OAAO,UAAU;IACb,KAAK,GAAc,EAAE,CAAC;IACtB,MAAM,GAAG,KAAK,CAAC;IACN,QAAQ,CAAS;IAElC,YAAY,OAAe;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,+CAA+C,CAAC,CAAC;gBAC3F,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;gBACzB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACrF,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,6DAA6D;IAC7D,KAAK;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO;QACvC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE;gBACzD,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC;YAC9C,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC;YAChD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;YAC5C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,GAAG,CAAC,KAAgB,EAAE,GAA+B;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAE7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAExD,IAAI,SAAiC,CAAC;QACtC,IAAI,aAAkD,CAAC;QAEvD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAChC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC;oBACpF,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,SAAS;oBAAE,SAAS,GAAG,MAAM,CAAC;gBAChE,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,aAAa;oBAAE,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;YACnF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACnG,gCAAgC;YAClC,CAAC;QACH,CAAC;QAED,IAAI,SAAS;YAAE,OAAO,SAAS,CAAC;QAChC,IAAI,aAAa;YAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;QAC/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,2EAA2E;IAEnE,WAAW,CAAC,IAAa,EAAE,GAAgB;QACjD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAChC,KAAK,EAAE,IAAI;gBACX,GAAG,EAAE;oBACH,GAAG,OAAO,CAAC,GAAG;oBACd,SAAS,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE;oBAC7B,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;oBACnC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;oBACrC,OAAO,EAAE,GAAG,CAAC,MAAM;oBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB;gBACD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAEjE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACnF,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;YAE3B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;oBACvG,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC/B,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;gBAC3E,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACvE,MAAM,MAAM,GAAe,EAAE,QAAQ,EAAE,CAAC;YACxC,IAAI,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ;gBAAG,MAA8B,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpG,IAAI,MAAM,CAAC,eAAe,CAAC,IAAI,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1E,MAAsD,CAAC,aAAa,GAAG,MAAM,CAAC,eAAe,CAA4B,CAAC;YAC7H,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/integrations/IntegrationCrewSync.d.ts

@@ -0,0 +1,33 @@
+/**
+ * IntegrationCrewSync — keeps integration-owned crews hidden from
+ * the CrewRegistry until the user connects the service.
+ *
+ * The crew manifests live on disk at `crew/twitter|youtube|facebook|
+ * instagram/plugin.json`. CrewLoader picks them up at startup; this
+ * class immediately stages them out of the active registry and only
+ * puts them back when the corresponding integration has ≥1 connected
+ * account. On disconnect of the last account, the crew goes back
+ * into the stage.
+ *
+ * Tools are registered separately in `integrations/tools.ts` (called
+ * before CrewLoader). This class owns only the crew show/hide logic.
+ */
+import type { AgentLoop } from "../core/AgentLoop.js";
+import type { CrewRegistry } from "../crew/CrewRegistry.js";
+import type { IntegrationManager } from "./IntegrationManager.js";
+export declare class IntegrationCrewSync {
+    private readonly integrations;
+    private readonly crews;
+    private readonly agent;
+    /** Filesystem-loaded crews held out of CrewRegistry until connected. */
+    private readonly staged;
+    constructor(integrations: IntegrationManager, crews: CrewRegistry, agent: AgentLoop);
+    /** Move each integration crew out of CrewRegistry into the stage. */
+    private stageIntegrationCrews;
+    /** Register crews for integrations already connected (tokens persist). */
+    private restoreAlreadyConnected;
+    private subscribeToLifecycle;
+    private reveal;
+    private hide;
+}
+//# sourceMappingURL=IntegrationCrewSync.d.ts.map

package/dist/integrations/IntegrationCrewSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntegrationCrewSync.d.ts","sourceRoot":"","sources":["../../src/integrations/IntegrationCrewSync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAoBlE,qBAAa,mBAAmB;IAK5B,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANxB,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;gBAG5C,YAAY,EAAE,kBAAkB,EAChC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,SAAS;IAOnC,qEAAqE;IACrE,OAAO,CAAC,qBAAqB;IAU7B,0EAA0E;IAC1E,OAAO,CAAC,uBAAuB;IAM/B,OAAO,CAAC,oBAAoB;IAgB5B,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,IAAI;CAMb"}

package/dist/integrations/IntegrationCrewSync.js

@@ -0,0 +1,96 @@
+/**
+ * IntegrationCrewSync — keeps integration-owned crews hidden from
+ * the CrewRegistry until the user connects the service.
+ *
+ * The crew manifests live on disk at `crew/twitter|youtube|facebook|
+ * instagram/plugin.json`. CrewLoader picks them up at startup; this
+ * class immediately stages them out of the active registry and only
+ * puts them back when the corresponding integration has ≥1 connected
+ * account. On disconnect of the last account, the crew goes back
+ * into the stage.
+ *
+ * Tools are registered separately in `integrations/tools.ts` (called
+ * before CrewLoader). This class owns only the crew show/hide logic.
+ */
+import { createLogger } from "../util/logger.js";
+const log = createLogger("integrations.crew");
+/** Which CrewRegistry id belongs to which integration. */
+const INTEGRATION_TO_CREW = {
+    twitter: "twitter-crew",
+    youtube: "youtube-crew",
+    facebook: "facebook-crew",
+    instagram: "instagram-crew",
+    github: "github-crew",
+    notion: "notion-crew",
+    gmail: "gmail-crew",
+    google_calendar: "google-calendar-crew",
+    reddit: "reddit-crew",
+    linkedin: "linkedin-crew",
+    tiktok: "tiktok-crew",
+};
+export class IntegrationCrewSync {
+    integrations;
+    crews;
+    agent;
+    /** Filesystem-loaded crews held out of CrewRegistry until connected. */
+    staged = new Map();
+    constructor(integrations, crews, agent) {
+        this.integrations = integrations;
+        this.crews = crews;
+        this.agent = agent;
+        this.stageIntegrationCrews();
+        this.restoreAlreadyConnected();
+        this.subscribeToLifecycle();
+    }
+    /** Move each integration crew out of CrewRegistry into the stage. */
+    stageIntegrationCrews() {
+        for (const [integration, crewId] of Object.entries(INTEGRATION_TO_CREW)) {
+            const crew = this.crews.tryGet(crewId);
+            if (!crew)
+                continue;
+            this.staged.set(integration, crew);
+            this.crews.unregister(crewId);
+            log.debug({ integration, crewId }, "integration crew staged (hidden until connected)");
+        }
+    }
+    /** Register crews for integrations already connected (tokens persist). */
+    restoreAlreadyConnected() {
+        for (const account of this.integrations.listAccounts()) {
+            this.reveal(account.integration);
+        }
+    }
+    subscribeToLifecycle() {
+        this.integrations.on("connected", ({ integration }) => {
+            this.reveal(integration);
+            this.agent.invalidateSystemPromptCache();
+        });
+        this.integrations.on("disconnected", ({ integration }) => {
+            // Keep the crew visible if any accounts for this integration
+            // remain (a user can have multiple IG accounts under one Meta
+            // connection).
+            const stillHas = this.integrations.listAccounts(integration).length > 0;
+            if (stillHas)
+                return;
+            this.hide(integration);
+            this.agent.invalidateSystemPromptCache();
+        });
+    }
+    reveal(integration) {
+        const crew = this.staged.get(integration);
+        if (!crew)
+            return;
+        if (this.crews.has(crew.manifest.id))
+            return; // already visible
+        this.crews.register(crew);
+        log.info({ crew: crew.manifest.id }, "integration crew revealed");
+    }
+    hide(integration) {
+        const crewId = INTEGRATION_TO_CREW[integration];
+        if (!crewId)
+            return;
+        const removed = this.crews.unregister(crewId);
+        if (removed)
+            log.info({ crewId }, "integration crew hidden (disconnected)");
+    }
+}
+//# sourceMappingURL=IntegrationCrewSync.js.map

package/dist/integrations/IntegrationCrewSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntegrationCrewSync.js","sourceRoot":"","sources":["../../src/integrations/IntegrationCrewSync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIjD,MAAM,GAAG,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAE9C,0DAA0D;AAC1D,MAAM,mBAAmB,GAAkC;IACzD,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,cAAc;IACvB,QAAQ,EAAE,eAAe;IACzB,SAAS,EAAE,gBAAgB;IAC3B,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,YAAY;IACnB,eAAe,EAAE,sBAAsB;IACvC,MAAM,EAAE,aAAa;IACrB,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,aAAa;CACtB,CAAC;AAEF,MAAM,OAAO,mBAAmB;IAKX;IACA;IACA;IANnB,wEAAwE;IACvD,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IAE/D,YACmB,YAAgC,EAChC,KAAmB,EACnB,KAAgB;QAFhB,iBAAY,GAAZ,YAAY,CAAoB;QAChC,UAAK,GAAL,KAAK,CAAc;QACnB,UAAK,GAAL,KAAK,CAAW;QAEjC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC/B,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED,qEAAqE;IAC7D,qBAAqB;QAC3B,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAmC,EAAE,CAAC;YAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC9B,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,kDAAkD,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,0EAA0E;IAClE,uBAAuB;QAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,WAAW,EAAkC,EAAE,EAAE;YACpF,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,EAAE,WAAW,EAAkC,EAAE,EAAE;YACvF,6DAA6D;YAC7D,8DAA8D;YAC9D,eAAe;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YACxE,IAAI,QAAQ;gBAAE,OAAO;YACrB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,WAA0B;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,kBAAkB;QAChE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACpE,CAAC;IAEO,IAAI,CAAC,WAA0B;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,wCAAwC,CAAC,CAAC;IAC9E,CAAC;CACF"}

package/dist/integrations/IntegrationManager.d.ts

@@ -0,0 +1,116 @@
+/**
+ * IntegrationManager — orchestrates OAuth flows for all integrations.
+ *
+ * Surfaces:
+ *   startAuth(integration, redirectUri)  → { url, state }
+ *   completeAuth(state, code)             → { integration, accountLabel }
+ *   getAccessToken(integration, accountId?) → string    (auto-refreshes)
+ *   disconnect(integration, accountId)
+ *   listAccounts(integration?)
+ *   availability()                        → which integrations have working creds
+ *
+ * Pending auth state (the code-verifier + integration id we expect back
+ * at callback) lives in an in-memory map keyed by `state`. Entries
+ * expire after 10 minutes.
+ */
+import { EventEmitter } from "node:events";
+import type { ConfigManager } from "../config/ConfigManager.js";
+import type { IntegrationStore } from "./IntegrationStore.js";
+import type { IntegrationAccount, IntegrationId, ProviderId } from "./types.js";
+/**
+ * Events:
+ *   "connected"    { integration, account } — fires when a new auth completes.
+ *   "disconnected" { integration, accountId } — fires on disconnect.
+ * Listeners register / unregister the corresponding crew + watcher types.
+ */
+export declare class IntegrationManager extends EventEmitter {
+    private readonly cfg;
+    private readonly store;
+    private readonly pending;
+    /**
+     * In-flight refresh deduplication. Keyed by "integration:accountId".
+     * When two concurrent getAccessToken calls both need a refresh, the
+     * second awaits the first's promise instead of firing a duplicate
+     * exchange against the provider (Google issues at most one fresh
+     * refresh_token per consent — racing breaks that).
+     */
+    private readonly refreshInflight;
+    /**
+     * Track integrations we've logged a "refresh failed — reconnect
+     * needed" for, so we don't spam logs every call while the user
+     * hasn't reconnected yet. Cleared when a refresh succeeds.
+     */
+    private readonly refreshFailures;
+    /** Last time we logged the "vault locked, skipping" warning, in ms epoch. */
+    private lastLockedWarnAt;
+    /**
+     * One-shot per-account timers for tokens whose lifetime is shorter
+     * than the 30-min sweep cadence. Without these, a fresh token with
+     * a 10-min TTL would expire 20 min before the next sweep notices.
+     * Keyed by "integration:accountId"; replaced on every refresh.
+     */
+    private readonly earlyRefreshTimers;
+    constructor(cfg: ConfigManager, store: IntegrationStore);
+    /** Resolve the OAuth provider an integration rides (e.g. youtube/gmail → google). */
+    providerFor(integration: IntegrationId): ProviderId;
+    /** Default OAuth scopes Daemora requests for this integration. Used by the UI credentials modal. */
+    defaultScopesFor(integration: IntegrationId): readonly string[];
+    /** Tell the UI which integrations actually have working client creds. */
+    availability(): Record<IntegrationId, {
+        available: boolean;
+        reason?: string;
+    }>;
+    /** Begin an OAuth flow; returns a URL to redirect the user to. */
+    startAuth(integration: IntegrationId, redirectUri: string): {
+        url: string;
+        state: string;
+    };
+    /** Complete an OAuth flow. Called from the callback route. */
+    completeAuth(state: string, code: string): Promise<{
+        integration: IntegrationId;
+        accountLabel: string;
+    }>;
+    /**
+     * Return a valid access token for an integration, refreshing on-
+     * demand if the stored one is near expiry. Returns null when the
+     * user has never connected that integration.
+     *
+     * `force=true` ignores the expiry check and forces a refresh — used
+     * by the retry-on-401 path in integration clients when the provider
+     * rejects a token we thought was still valid (revoked, scopes
+     * changed, etc).
+     */
+    getAccessToken(integration: IntegrationId, accountId?: string, force?: boolean): Promise<string | null>;
+    /**
+     * Force a refresh for a specific account, bypassing the expiry
+     * check. Used by integration clients on a 401 — the stored token
+     * may have been revoked or invalidated independent of its expiry.
+     * Returns the fresh access token or null if refresh failed.
+     */
+    forceRefresh(integration: IntegrationId, accountId?: string): Promise<string | null>;
+    private doRefresh;
+    /**
+     * Background pass over every connected account, refreshing any
+     * whose token expires in less than BG_PRE_EXPIRY_SECONDS. Called
+     * every BG_TICK_MS from the constructor. Errors are swallowed —
+     * the interactive path will retry.
+     */
+    private backgroundRefresh;
+    /**
+     * Schedule a one-shot refresh that fires shortly before a specific
+     * account's token expires. Cancels any prior timer for the same
+     * account first. Skips when expiry is far enough out that the
+     * BG_TICK_MS sweep will catch it; or when there's no expiry data.
+     */
+    private scheduleEarlyRefresh;
+    disconnect(integration: IntegrationId, accountId: string): void;
+    /**
+     * Set of integration ids that currently have at least one connected
+     * account. Used by ToolRegistry.available() to gate integration-
+     * sourced tools out of the model's view until the user connects.
+     */
+    getEnabled(): Set<string>;
+    listAccounts(integration?: IntegrationId): readonly IntegrationAccount[];
+    private sweepPending;
+}
+//# sourceMappingURL=IntegrationManager.d.ts.map

package/dist/integrations/IntegrationManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IntegrationManager.d.ts","sourceRoot":"","sources":["../../src/integrations/IntegrationManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAYhE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAiB,UAAU,EAAY,MAAM,YAAY,CAAC;AA4LzG;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,YAAY;IA2BhD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IA3BxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAC1D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6C;IAC7E;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA6B;IAC7D,6EAA6E;IAC7E,OAAO,CAAC,gBAAgB,CAAK;IAC7B;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAqC;gBAGrD,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,gBAAgB;IAoB1C,qFAAqF;IACrF,WAAW,CAAC,WAAW,EAAE,aAAa,GAAG,UAAU;IAMnD,oGAAoG;IACpG,gBAAgB,CAAC,WAAW,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE;IAI/D,yEAAyE;IACzE,YAAY,IAAI,MAAM,CAAC,aAAa,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiB9E,kEAAkE;IAClE,SAAS,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IA+B1F,8DAA8D;IACxD,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,aAAa,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IA2C9G;;;;;;;;;OASG;IACG,cAAc,CAClB,WAAW,EAAE,aAAa,EAC1B,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,UAAQ,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAuBzB;;;;;OAKG;IACG,YAAY,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAI5E,SAAS;IA4CvB;;;;;OAKG;YACW,iBAAiB;IA2B/B;;;;;OAKG;IACH,OAAO,CAAC,oBAAoB;IAmC5B,UAAU,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAW/D;;;;OAIG;IACH,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC;IAMzB,YAAY,CAAC,WAAW,CAAC,EAAE,aAAa;IAIxC,OAAO,CAAC,YAAY;CAMrB"}