forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/cli-notification-settings.js

@@ -1,6 +1,8 @@
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { parse as parseToml } from "smol-toml";
 import { safeResolve } from "../lib/safe-resolve.js";
 import { expandUserPath } from "../lib/user-path.js";
 import { globalConfigRoot } from "./cli-config-target.js";
@@ -8,6 +10,9 @@ import { globalConfigRoot } from "./cli-config-target.js";
 // from ~/.kimi-code/config.toml (or $KIMI_CODE_HOME), never from a project
 // config. Keep this lifecycle set aligned with Kimi's documented event names.
 const kimiHookEvents = [
+    "UserPromptSubmit",
+    "TurnStarted",
+    "PostToolUse",
     "PermissionRequest",
     "Stop",
     "Interrupt",
@@ -15,7 +20,7 @@ const kimiHookEvents = [
     "SessionEnd",
     "Notification"
 ];
-const codexEvents = ["PermissionRequest", "Stop", "SessionEnd"];
+const codexEvents = ["UserPromptSubmit", "PostToolUse", "PermissionRequest", "Stop", "SessionEnd"];
 /**
  * Materialize the project-local Codex hook bundle without replacing user
  * groups or commands. Codex applies its own trust gate to project hooks, so
@@ -114,13 +119,13 @@ export default function (pi) {
   const attachToken = process.env.FORGEBADGER_ATTACH_TOKEN || "";
   if (!sessionId || !gatewayUrl || !attachToken) return;
 
-  const post = (hookEventName, extra) => {
+  const post = async (hookEventName, extra) => {
     try {
       const url =
         gatewayUrl.replace(/\\/+$/u, "") +
         "/api/v1/session-hooks/claude-notification/" +
         encodeURIComponent(sessionId);
-      return fetch(url, {
+      const response = await fetch(url, {
         method: "POST",
         headers: {
           "content-type": "application/json",
@@ -129,18 +134,46 @@ export default function (pi) {
         },
         body: JSON.stringify({ hook_event_name: hookEventName, adapter: "pi", ...extra }),
         signal: AbortSignal.timeout(4500)
-      }).catch(() => {});
+      });
+      if (!response.ok) {
+        const hint = response.status === 401
+          ? " Restart this CLI session from ForgeBadger to refresh its notification identity."
+          : " Check that the ForgeBadger Gateway is available.";
+        console.warn("[ForgeBadger notifications] Delivery failed (HTTP " + response.status + ")." + hint);
+      }
     } catch {
-      // Notification delivery is fail-open and must never break the CLI.
-      return Promise.resolve();
+      // Fail-open; never print credentials, response bodies, or exception messages.
+      console.warn("[ForgeBadger notifications] Delivery failed: could not reach Gateway.");
     }
   };
 
-  pi.on("agent_settled", () => {
-    post("Stop");
+  let finalReply = "";
+  let active = false;
+  pi.on("message_end", (event, context) => {
+    if (context?.hasUI !== true || !active || event.message?.role !== "assistant") return;
+    const content = event.message.content;
+    const text = Array.isArray(content) ? content.filter(part => part?.type === "text" && typeof part.text === "string")
+      .map(part => part.text).join("\\n") : "";
+    // Drop an oversized field as a whole. Never truncate a credential before
+    // Gateway normalization/redaction, and never collect reasoning blocks.
+    finalReply = Buffer.byteLength(text, "utf8") <= 256 * 1024 ? text : "";
+  });
+  pi.on("agent_settled", async (_event, context) => {
+    if (context?.hasUI !== true) return;
+    const reply = finalReply;
+    finalReply = ""; active = false;
+    await post("Stop", reply ? { last_assistant_message: reply } : {});
+  });
+
+  pi.on("agent_start", async (_event, context) => {
+    if (context?.hasUI !== true) return;
+    if (!active) finalReply = "";
+    active = true;
+    await post("TaskStarted");
   });
 
-  pi.on("ui_prompt_start", (event) => {
+  pi.on("ui_prompt_start", (event, context) => {
+    if (context?.hasUI !== true) return;
     const title = typeof event.title === "string" && event.title ? event.title : "";
     const kind = typeof event.kind === "string" && event.kind ? event.kind : "input";
     post("PermissionRequest", {
@@ -149,6 +182,7 @@ export default function (pi) {
   });
 
   pi.on("session_shutdown", async () => {
+    finalReply = ""; active = false;
     // Awaited: pi waits for session_shutdown handlers before process exit, so
     // the report lands instead of dying with the in-flight fetch.
     await post("SessionEnd");
@@ -206,10 +240,9 @@ function mergeCodexHookGroups(value, command) {
     });
 }
 function mergeKimiHookText(existing, scriptPath) {
-    const preserved = existing
-        .replace(/\n?# ForgeBadger managed notification hooks: start\n[\s\S]*?# ForgeBadger managed notification hooks: end\n?/u, "")
-        .replace(/\n+$/u, "");
     const command = `node ${shellQuote(scriptPath)}`;
+    const unmarked = existing.replace(/\n?# ForgeBadger managed notification hooks: start\r?\n[\s\S]*?# ForgeBadger managed notification hooks: end\r?\n?/gu, "");
+    const preserved = removeDuplicateKimiHooks(unmarked, command).replace(/\n+$/u, "");
     const managed = kimiHookEvents.flatMap((event) => [
         "[[hooks]]",
         `event = ${JSON.stringify(event)}`,
@@ -220,6 +253,49 @@ function mergeKimiHookText(existing, scriptPath) {
     const prefix = preserved.length > 0 ? `${preserved}\n\n` : "";
     return `${prefix}# ForgeBadger managed notification hooks: start\n${managed.join("\n")}# ForgeBadger managed notification hooks: end\n`;
 }
+/** Retire only exact managed definitions; user matchers/commands/timeouts survive. */
+function removeDuplicateKimiHooks(text, command) {
+    const doc = parseKimiHookConfig(text);
+    if (!Array.isArray(doc.hooks))
+        return text;
+    const managed = (hook) => isRecord(hook)
+        && hook.command === command && hook.timeout === 5
+        && kimiHookEvents.some((event) => event === hook.event)
+        && Object.keys(hook).every((key) => ["event", "command", "timeout"].includes(key));
+    const retained = doc.hooks.filter((hook) => !managed(hook));
+    if (retained.length === doc.hooks.length)
+        return text;
+    const candidate = text.split(/(?=^\s*\[)/mu).filter((section) => {
+        if (!/^\s*\[\[hooks\]\]/u.test(section))
+            return true;
+        try {
+            const parsed = parseToml(section);
+            return !Array.isArray(parsed.hooks) || parsed.hooks.length !== 1 || !managed(parsed.hooks[0]);
+        }
+        catch {
+            return true;
+        }
+    }).join("");
+    if (retained.length)
+        doc.hooks = retained;
+    else
+        delete doc.hooks;
+    // Text splitting is only an editing aid. Parsing the entire result proves
+    // multiline strings, nested tables and unrelated settings remain unchanged.
+    if (!isDeepStrictEqual(parseKimiHookConfig(candidate), doc)) {
+        throw new Error("Cannot safely consolidate Kimi notification hooks");
+    }
+    return candidate;
+}
+function parseKimiHookConfig(text) {
+    try {
+        return parseToml(text);
+    }
+    catch {
+        // TOML parser errors include source excerpts, which can contain credentials.
+        throw new Error("Invalid Kimi configuration; notification hooks unchanged");
+    }
+}
 function forwardingScript(adapter) {
     // The generated hook has no project secrets embedded in it. Session identity,
     // Gateway location, and the short-lived attach token come from the session
@@ -239,7 +315,7 @@ process.stdin.on("end", async () => {
   try { payload = JSON.parse(chunks.join("")); } catch { return; }
   const requestTimeoutMs = ${adapter === "codex" ? 'payload.hook_event_name === "SessionEnd" ? 2500 : 4500' : "4500"};
   try {
-    await fetch(
+    const response = await fetch(
       gatewayUrl.replace(/\\/+$/u, "") + "/api/v1/session-hooks/claude-notification/" + encodeURIComponent(sessionId),
       {
         method: "POST",
@@ -252,8 +328,16 @@ process.stdin.on("end", async () => {
         signal: AbortSignal.timeout(requestTimeoutMs)
       }
     );
+    if (!response.ok) {
+      const hint = response.status === 401
+        ? " Restart this CLI session from ForgeBadger to refresh its notification identity."
+        : " Check that the ForgeBadger Gateway is available.";
+      console.warn("[ForgeBadger notifications] Delivery failed (HTTP " + response.status + ")." + hint);
+    }
   } catch {
-    // Notification delivery is fail-open and must never block the CLI.
+    // Never print URLs, tokens, response bodies, or exception messages.
+    // Delivery remains fail-open so a notification cannot fail the CLI turn.
+    console.warn("[ForgeBadger notifications] Delivery failed: could not reach Gateway.");
   }
 });
 `;

package/dist/gateway/src/services/cli-notification-settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-notification-settings.js","sourceRoot":"","sources":["../../../src/services/cli-notification-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAe1D,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,cAAc,GAAG;IACrB,mBAAmB;IACnB,MAAM;IACN,WAAW;IACX,aAAa;IACb,YAAY;IACZ,cAAc;CACN,CAAC;AACX,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAEzE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB;IAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE1E,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,kEAAkE,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAC5E,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAC1C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CACrF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,YAAY,KAAK,QAAQ,CAAC;QAElD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iEAAiE,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,mEAAmE,aAAa,GAAG,EAAE,KAAK,CAAC,CAAC;QACzG,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB;IAC9B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiDR,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IAC1D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,MAAM,QAAQ,GAAG,YAAY;aAC1B,OAAO,CAAC,+GAA+G,EAAE,EAAE,CAAC;aAC5H,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxB,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAiC,EAAE,UAAkB;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAqB;YAChC,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,QAAQ,UAAU,CAAC,UAAU,CAAC,EAAE;YACzC,OAAO,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxC,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,sBAAsB;AACtB,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAyB;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAuB,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,EAAoB,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;IAC7D,MAAM,SAAS,GAAG,QAAQ;SACvB,OAAO,CAAC,+GAA+G,EAAE,EAAE,CAAC;SAC5H,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,QAAQ,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,WAAW;QACX,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QAClC,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QACtC,aAAa;QACb,EAAE;KACH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,GAAG,MAAM,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC;AAC1I,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4B;IACpD,8EAA8E;IAC9E,2EAA2E;IAC3E,oEAAoE;IACpE,sBAAsB;IACtB,OAAO;;;;;;;;;;;;6BAaL,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,MACnF;;;;;;;;;;;uDAWqD,OAAO;;;;;;;;CAQ7D,CAAC;AACF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe;IAC7D,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAA4B,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}
+{"version":3,"file":"cli-notification-settings.js","sourceRoot":"","sources":["../../../src/services/cli-notification-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAe1D,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,cAAc,GAAG;IACrB,kBAAkB;IAClB,aAAa;IACb,aAAa;IACb,mBAAmB;IACnB,MAAM;IACN,WAAW;IACX,aAAa;IACb,YAAY;IACZ,cAAc;CACN,CAAC;AACX,MAAM,WAAW,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,CAAU,CAAC;AAE5G;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB;IAEnB,MAAM,SAAS,GAAG,WAAW,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE1E,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,CAAC;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,kEAAkE,SAAS,GAAG,EAAE,KAAK,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAmB;IAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAC5E,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAC1C,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CACrF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,YAAY,KAAK,QAAQ,CAAC;QAElD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;IAC3F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,iEAAiE,UAAU,GAAG,EAAE,KAAK,CAAC,CAAC;QACpG,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,aAAa,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,mEAAmE,aAAa,GAAG,EAAE,KAAK,CAAC,CAAC;QACzG,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB;IAC9B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8ER,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,yBAAyB,CAAC,WAAmB;IAC1D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,MAAM,QAAQ,GAAG,YAAY;aAC1B,OAAO,CAAC,+GAA+G,EAAE,EAAE,CAAC;aAC5H,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxB,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,SAAS,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,QAAiC,EAAE,UAAkB;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE5D,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,OAAO,GAAqB;YAChC,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,QAAQ,UAAU,CAAC,UAAU,CAAC,EAAE;YACzC,OAAO,EAAE,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxC,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,8EAA8E;AAC9E,sBAAsB;AACtB,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAyB;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAuB,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,EAAoB,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;IAC7D,MAAM,OAAO,GAAG,QAAQ,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAC/B,sHAAsH,EACtH,EAAE,CACH,CAAC;IACF,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAChD,WAAW;QACX,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;QAClC,aAAa,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;QACtC,aAAa;QACb,EAAE;KACH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO,GAAG,MAAM,oDAAoD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC;AAC1I,CAAC;AAED,sFAAsF;AACtF,SAAS,wBAAwB,CAAC,IAAY,EAAE,OAAe;IAC7D,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,IAAa,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;WACrD,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;WAC9C,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC;WACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,IAAI,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC;;QACrC,OAAO,GAAG,CAAC,KAAK,CAAC;IACtB,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAC/B,MAAM,CAAC;QACL,6EAA6E;QAC7E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA4B;IACpD,8EAA8E;IAC9E,2EAA2E;IAC3E,oEAAoE;IACpE,sBAAsB;IACtB,OAAO;;;;;;;;;;;;6BAaL,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,MACnF;;;;;;;;;;;uDAWqD,OAAO;;;;;;;;;;;;;;;;CAgB7D,CAAC;AACF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,OAAe;IAC7D,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC7D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;AAC/C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAA4B,CAAC;AACtE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/gateway/src/services/codex-config-probe.d.ts

@@ -0,0 +1,18 @@
+import { type CommandRunner } from "../lib/dependency-check.js";
+export type CodexConfigProbeStatus = "skipped" | "supported" | "unsupported";
+/** Probe function shape: receives the planned config.toml content. */
+export type CodexConfigProbeFn = (plannedConfigToml: string) => Promise<CodexConfigProbeOutcome>;
+export interface CodexConfigProbeOutcome {
+    status: CodexConfigProbeStatus;
+    /** `codex --version` output (e.g. "codex-cli 0.157.1") when the probe ran. */
+    codexVersion?: string | undefined;
+    /** Codex's own error text when the planned config was rejected. */
+    detail?: string | undefined;
+}
+export interface CodexConfigProbeInput {
+    /** Planned content of the global Codex config.toml (secrets may be placeholders). */
+    plannedConfigToml: string;
+    runner?: CommandRunner | undefined;
+    env?: NodeJS.ProcessEnv | undefined;
+}
+export declare function probeCodexPlannedConfig(input: CodexConfigProbeInput): Promise<CodexConfigProbeOutcome>;

package/dist/gateway/src/services/codex-config-probe.js

@@ -0,0 +1,149 @@
+/**
+ * Codex config validation probe.
+ *
+ * Newer Codex versions (0.157.x and later, per openai/codex discussion #7782)
+ * removed the `chat` wire API and hard-fail at startup when ANY
+ * `model_providers.*` entry uses `wire_api = "chat"` — including inactive
+ * ones. Applying such a config through ForgeBadger's apply-provider flow used
+ * to write `~/.codex/config.toml` and make every new Codex session exit
+ * immediately (the TUI never renders).
+ *
+ * Instead of maintaining a version threshold, ask the installed Codex itself:
+ * run `codex exec` against a throwaway CODEX_HOME that carries the planned
+ * config with every provider endpoint pointed at a dead local URL (the
+ * config-load phase is what we validate; no real gateway is ever called and
+ * no credential leaves this module). If the planned content is rejected but
+ * the same content with `wire_api = "responses"` is accepted, the plan is
+ * unsafe for the installed Codex and the apply must fail with Codex's own
+ * error text.
+ *
+ * The probe is advisory-by-construction in the other direction: any outcome
+ * that is not a proven config rejection (missing CLI, timeout, auth/network
+ * failures) is reported as "supported" so a misbehaving probe can never
+ * block an apply that used to work.
+ */
+import { mkdtemp, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { checkCommand, runCommand } from "../lib/dependency-check.js";
+const VERSION_TIMEOUT_MS = 5_000;
+const PROBE_TIMEOUT_MS = 10_000;
+const MAX_DETAIL_CHARS = 400;
+/** Guaranteed-closed local port: after config load the probe's model call
+ * fails instantly with ECONNREFUSED instead of reaching a real gateway. */
+const DEAD_BASE_URL = "http://127.0.0.1:9/v1";
+/** The 0.157.x removal error: `wire_api = "chat"` is no longer supported. */
+const WIRE_API_CHAT_REMOVAL = /wire_api[\s\S]{0,200}?no longer supported/iu;
+/** Generic config-load failure signatures (wording may drift between versions). */
+const CONFIG_LOAD_FAILED = /error loading config|failed to (load|parse) (config|toml)|invalid (config|toml)/iu;
+const execArgs = ["exec", "forgebadger-probe", "--ephemeral", "--skip-git-repo-check"];
+export async function probeCodexPlannedConfig(input) {
+    const probeRunner = input.runner ?? runCommand;
+    const env = input.env ?? process.env;
+    const versionCheck = await checkCommand("codex", ["--version"], probeRunner, {
+        env,
+        timeoutMs: VERSION_TIMEOUT_MS
+    });
+    if (!versionCheck.available) {
+        // No Codex on this machine: nothing to validate against; keep the
+        // historical behavior of writing the plan as-is.
+        return { status: "skipped" };
+    }
+    const codexVersion = versionCheck.version;
+    let home;
+    try {
+        home = await mkdtemp(path.join(tmpdir(), "forgebadger-codex-probe-"));
+        const planned = neutralizeProviderNetworks(input.plannedConfigToml);
+        if (planned === null) {
+            // Unparseable plan: the real apply would fail its own parse; do not
+            // mask that error with a probe verdict.
+            return { status: "skipped", ...(codexVersion ? { codexVersion } : {}) };
+        }
+        const probeA = await runProbe(probeRunner, env, home, planned);
+        const outputA = combinedOutput(probeA);
+        if (WIRE_API_CHAT_REMOVAL.test(outputA)) {
+            return unsupported(outputA, codexVersion);
+        }
+        if (CONFIG_LOAD_FAILED.test(outputA)) {
+            // The plan was rejected at config load; prove the rejection is the wire
+            // API value (and not, say, an unrelated user field) by re-running the
+            // same plan with wire_api forced to "responses".
+            const relaxed = forceResponsesWireApi(planned);
+            if (relaxed !== null) {
+                const probeB = await runProbe(probeRunner, env, home, relaxed);
+                if (!CONFIG_LOAD_FAILED.test(combinedOutput(probeB))) {
+                    return unsupported(outputA, codexVersion);
+                }
+            }
+        }
+        return { status: "supported", ...(codexVersion ? { codexVersion } : {}) };
+    }
+    catch {
+        // Probe infrastructure failure (temp dir, TOML round-trip, spawn error):
+        // never block an apply because the probe itself misbehaved.
+        return { status: "skipped", ...(codexVersion ? { codexVersion } : {}) };
+    }
+    finally {
+        if (home)
+            await rm(home, { recursive: true, force: true });
+    }
+}
+async function runProbe(runner, env, home, configToml) {
+    await writeFile(path.join(home, "config.toml"), configToml, { mode: 0o600 });
+    return runner("codex", execArgs, {
+        env: { ...env, CODEX_HOME: home },
+        timeoutMs: PROBE_TIMEOUT_MS
+    });
+}
+function neutralizeProviderNetworks(plannedConfigToml) {
+    const doc = parseToml(plannedConfigToml);
+    const providers = doc.model_providers;
+    if (providers && typeof providers === "object") {
+        for (const entry of Object.values(providers)) {
+            if (entry && typeof entry === "object") {
+                entry.base_url = DEAD_BASE_URL;
+                delete entry.experimental_bearer_token;
+                delete entry.env_key;
+            }
+        }
+    }
+    return stringifyToml(doc);
+}
+function forceResponsesWireApi(planned) {
+    const doc = parseToml(planned);
+    const providers = doc.model_providers;
+    if (providers && typeof providers === "object") {
+        for (const entry of Object.values(providers)) {
+            if (entry && typeof entry === "object") {
+                entry.wire_api = "responses";
+            }
+        }
+    }
+    return stringifyToml(doc);
+}
+function combinedOutput(result) {
+    return stripTerminalCodes(`${result.stdout}\n${result.stderr}`);
+}
+function stripTerminalCodes(text) {
+    return text
+        .replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/gu, "")
+        .replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/gu, "")
+        .replace(/\x1b[@-Z\\-_]/gu, "")
+        .replace(/\r/gu, "");
+}
+function unsupported(output, codexVersion) {
+    return {
+        status: "unsupported",
+        ...(codexVersion ? { codexVersion } : {}),
+        detail: excerpt(output)
+    };
+}
+function excerpt(output) {
+    const lines = output
+        .split("\n")
+        .map((line) => line.trimEnd())
+        .filter((line) => line.trim().length > 0);
+    return lines.join("\n").slice(0, MAX_DETAIL_CHARS);
+}
+//# sourceMappingURL=codex-config-probe.js.map

package/dist/gateway/src/services/codex-config-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-config-probe.js","sourceRoot":"","sources":["../../../src/services/codex-config-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EACL,YAAY,EACZ,UAAU,EAGX,MAAM,4BAA4B,CAAC;AAwBpC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B;2EAC2E;AAC3E,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAE9C,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAC5E,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,mFAAmF,CAAC;AAE/G,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC;AAEvF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAA4B;IAE5B,MAAM,WAAW,GAAkB,KAAK,CAAC,MAAM,IAAI,UAAU,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAErC,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE;QAC3E,GAAG;QACH,SAAS,EAAE,kBAAkB;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC5B,kEAAkE;QAClE,iDAAiD;QACjD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC;IAE1C,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACpE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,oEAAoE;YACpE,wCAAwC;YACxC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,wEAAwE;YACxE,sEAAsE;YACtE,iDAAiD;YACjD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC/D,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBACrD,OAAO,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,4DAA4D;QAC5D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QACT,IAAI,IAAI;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAqB,EACrB,GAAsB,EACtB,IAAY,EACZ,UAAkB;IAElB,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,OAAO,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE;QAC/B,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;QACjC,SAAS,EAAE,gBAAgB;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CACjC,iBAAyB;IAEzB,MAAM,GAAG,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzC,MAAM,SAAS,GAAI,GAA+B,CAAC,eAAe,CAAC;IACnE,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,SAAoC,CAAC,EAAE,CAAC;YACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtC,KAAiC,CAAC,QAAQ,GAAG,aAAa,CAAC;gBAC5D,OAAQ,KAAiC,CAAC,yBAAyB,CAAC;gBACpE,OAAQ,KAAiC,CAAC,OAAO,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,SAAS,GAAI,GAA+B,CAAC,eAAe,CAAC;IACnE,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,SAAoC,CAAC,EAAE,CAAC;YACxE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtC,KAAiC,CAAC,QAAQ,GAAG,WAAW,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAC3C,OAAO,kBAAkB,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC;SAC1C,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;SAC9B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,YAAgC;IACnE,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACrD,CAAC"}

package/dist/gateway/src/services/collaboration/github-pull-requests.d.ts

@@ -9,23 +9,23 @@ export declare const draftPullRequestInput: z.ZodObject<{
     body: z.ZodString;
     token: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    token: string;
     title: string;
+    body: string;
+    token: string;
     verificationId: string;
     expectedCommit: string;
     repository: string;
     headBranch: string;
     baseBranch: string;
-    body: string;
 }, {
-    token: string;
     title: string;
+    body: string;
+    token: string;
     verificationId: string;
     expectedCommit: string;
     repository: string;
     headBranch: string;
     baseBranch: string;
-    body: string;
 }>;
 export type DraftPullRequestInput = z.infer<typeof draftPullRequestInput>;
 export interface GithubPullRequest {

package/dist/gateway/src/services/dashboard-summary.d.ts

@@ -12,6 +12,12 @@ export interface DashboardStats {
 export interface DashboardHealthItem {
     healthy: boolean;
     count?: number;
+    /**
+     * Stable machine-readable key for the current state. Clients map this to
+     * localized text instead of rendering `message` (which stays English for
+     * backward compatibility and diagnostics exports).
+     */
+    code: string;
     message: string;
 }
 export interface DashboardHealth {

package/dist/gateway/src/services/dashboard-summary.js

@@ -26,31 +26,36 @@ export function getDashboardSummary(db, userId) {
     return {
         stats,
         health: {
-            gateway: { healthy: true, message: "Gateway is responding" },
-            database: { healthy: true, message: "Database query completed" },
+            gateway: { healthy: true, code: "ok", message: "Gateway is responding" },
+            database: { healthy: true, code: "ok", message: "Database query completed" },
             projectConfig: {
                 healthy: stats.projects > 0 && stats.templates > 0,
                 count: stats.projects,
+                code: stats.projects > 0 ? "ready" : "create_project",
                 message: stats.projects > 0 ? "Projects can use available templates" : "Create or import a project"
             },
             models: {
                 healthy: true,
                 count: stats.models,
+                code: stats.models > 0 ? "ready" : "host_environment",
                 message: stats.models > 0 ? "Models are configured" : "Optional: CLI sessions use models configured in the host environment"
             },
             credentials: {
                 healthy: true,
                 count: stats.apiKeys,
+                code: stats.apiKeys > 0 ? "ready" : "host_credentials",
                 message: stats.apiKeys > 0 ? "Encrypted API keys are available" : "Optional: CLI sessions use host credentials; verify login in the CLI"
             },
             sessions: {
                 healthy: stats.sessions > 0,
                 count: stats.sessions,
+                code: stats.sessions > 0 ? "ready" : "create_session",
                 message: stats.sessions > 0 ? "Sessions exist" : "Create a session from a project"
             },
             skills: {
                 healthy: stats.skills > 0,
                 count: stats.skills,
+                code: stats.skills > 0 ? "ready" : "create_skill",
                 message: stats.skills > 0 ? "Skills are configured" : "Create a Skill"
             }
         }

package/dist/gateway/src/services/dashboard-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-summary.js","sourceRoot":"","sources":["../../../src/services/dashboard-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAqC/E,MAAM,UAAU,0BAA0B,CAAC,EAAY,EAAE,MAAc;IACrE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;GAetB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAA4B,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAY,EACZ,MAAc;IAEd,MAAM,KAAK,GAAmB;QAC5B,GAAG,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC;QACzC,SAAS,EAAE,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,aAAa,EAAE;KAC9D,CAAC;IAEF,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE;YAC5D,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE;YAChE,aAAa,EAAE;gBACb,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;gBAClD,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,4BAA4B;aACpG;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sEAAsE;aAC7H;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,sEAAsE;aACzI;YACD,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iCAAiC;aACnF;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACzB,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB;aACvE;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"dashboard-summary.js","sourceRoot":"","sources":["../../../src/services/dashboard-summary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AA2C/E,MAAM,UAAU,0BAA0B,CAAC,EAAY,EAAE,MAAc;IACrE,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;GAetB,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAA4B,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,EAAY,EACZ,MAAc;IAEd,MAAM,KAAK,GAAmB;QAC5B,GAAG,0BAA0B,CAAC,EAAE,EAAE,MAAM,CAAC;QACzC,SAAS,EAAE,IAAI,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,aAAa,EAAE;KAC9D,CAAC;IAEF,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE;YACxE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE;YAC5E,aAAa,EAAE;gBACb,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;gBAClD,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,IAAI,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;gBACrD,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,4BAA4B;aACpG;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;gBACrD,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,sEAAsE;aAC7H;YACD,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,IAAI,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB;gBACtD,OAAO,EAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,sEAAsE;aACzI;YACD,QAAQ,EAAE;gBACR,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,IAAI,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB;gBACrD,OAAO,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iCAAiC;aACnF;YACD,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC;gBACzB,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,IAAI,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;gBACjD,OAAO,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,gBAAgB;aACvE;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/development/authority.d.ts

@@ -1,3 +1,7 @@
 import type { Database } from '../../db/types.js';
 import { type DevelopmentTaskRow } from './contracts.js';
+/** Cheap liveness/revocation probe for the 500ms lease timer: indexed DB reads only — no plan
+ *  parsing, digest canonicalization, fs realpaths, or transactions. Every invariant skipped here
+ *  is re-verified in full by assertDevelopmentAuthority before/after checks and at acceptance. */
+export declare function assertDevelopmentAuthorityCheap(db: Database, row: DevelopmentTaskRow): void;
 export declare function assertDevelopmentAuthority(db: Database, row: DevelopmentTaskRow, checkSource?: boolean): void;

package/dist/gateway/src/services/development/authority.js

@@ -1,36 +1,86 @@
+import { repairJob, validateRepairJob, assertRepairPlan } from './repair-scope.js';
 import { CopilotToolPreferenceRepository } from '../../db/repositories/copilot-tool-preference-repository.js';
 import { PlatformActionRepository } from '../../db/repositories/platform-action-repository.js';
 import { ProjectRepository } from '../../db/repositories/project-repository.js';
 import { assertChannelConversationAuthority } from '../channels/channel-run-authority.js';
-import { prepareSource } from './workspace.js';
+import { prepareSource, hashText } from './workspace.js';
 import { developmentPlanSchema } from './contracts.js';
+import { canonical } from '../platform-commands/actions.js';
+import { realpathSync } from 'node:fs';
+import { assertChannelRunScope } from '../channels/channel-run-scope.js';
+/** Cheap liveness/revocation probe for the 500ms lease timer: indexed DB reads only — no plan
+ *  parsing, digest canonicalization, fs realpaths, or transactions. Every invariant skipped here
+ *  is re-verified in full by assertDevelopmentAuthority before/after checks and at acceptance. */
+export function assertDevelopmentAuthorityCheap(db, row) {
+    const active = db.prepare('SELECT status FROM users WHERE id=?').get(row.user_id);
+    if (active?.status !== 'active')
+        throw new Error('DEVELOPMENT_ACTOR_REVOKED');
+    const live = db.prepare('SELECT status,owner,lease_expires_at,cancel_requested FROM copilot_development_tasks WHERE user_id=? AND id=?').get(row.user_id, row.id);
+    if (!live || live.status !== 'running' || live.owner !== row.owner || live.cancel_requested || (live.lease_expires_at ?? 0) <= Date.now())
+        throw new Error('DEVELOPMENT_LEASE_LOST');
+    if (!new CopilotToolPreferenceRepository(db, row.user_id).isEnabled('submit_development_task'))
+        throw new Error('DEVELOPMENT_TOOL_DISABLED');
+    if (row.origin_run_id && row.origin_step_id) {
+        if (!new ProjectRepository(db, row.user_id).getCopilotAutonomy(row.project_id))
+            throw new Error('DEVELOPMENT_AUTONOMY_OFF');
+        const origin = db.prepare("SELECT s.status step_status,r.status run_status FROM copilot_run_steps s JOIN copilot_runs r ON r.id=s.run_id AND r.user_id=s.user_id WHERE s.user_id=? AND s.id=? AND r.id=?").get(row.user_id, row.origin_step_id, row.origin_run_id);
+        if (!origin || !['running', 'completed'].includes(origin.step_status) || !['running', 'completed', 'awaiting_approval'].includes(origin.run_status))
+            throw new Error('DEVELOPMENT_ORIGIN_REVOKED');
+    }
+    else if (row.origin_run_id || row.origin_step_id)
+        throw new Error('DEVELOPMENT_ORIGIN_MISSING');
+}
 export function assertDevelopmentAuthority(db, row, checkSource = true) {
     const active = db.prepare('SELECT status FROM users WHERE id=?').get(row.user_id);
     if (active?.status !== 'active')
         throw new Error('DEVELOPMENT_ACTOR_REVOKED');
     const actions = new PlatformActionRepository(db, row.user_id), intent = actions.get(row.intent_id), receipt = actions.receipt(row.intent_id);
-    if (!intent || intent.authority !== 'owner_action' || intent.grant_id || intent.status !== 'completed' || intent.command_id !== 'development.task.submit' || intent.expires_at <= Date.now() || intent.policy_version !== 1)
-        throw new Error('DEVELOPMENT_AUTHORITY_EXPIRED');
+    // A consumed, confirmed admission is a task identity, not a renewable TTL grant.
+    if (!intent || intent.authority !== 'owner_action' || intent.status !== 'completed' || intent.command_id !== 'development.task.submit' || intent.actor_user_id !== row.user_id || intent.policy_version !== 1)
+        throw new Error('DEVELOPMENT_AUTHORITY_MISMATCH');
     const result = receipt?.result;
     if (receipt?.outcome !== 'confirmed' || result?.taskId !== row.id || result.recipeDigest !== row.recipe_digest)
         throw new Error('DEVELOPMENT_RECEIPT_MISMATCH');
+    const plan = developmentPlanSchema.parse(JSON.parse(row.plan_json));
+    const resources = { projectIds: [row.project_id], rootPaths: [row.project_root], revision: hashText(JSON.stringify([row.project_root, row.source_digest, row.output_digest, row.recipe_digest])) };
+    if (plan.projectId !== row.project_id || plan.goal !== row.goal || canonical(plan) !== intent.input_json || canonical(resources) !== intent.resources_json
+        || hashText(canonical({ commandId: intent.command_id, input: plan, resources, policyVersion: 1 })) !== intent.digest)
+        throw new Error('DEVELOPMENT_AUTHORITY_MISMATCH');
     if (!new CopilotToolPreferenceRepository(db, row.user_id).isEnabled('submit_development_task'))
         throw new Error('DEVELOPMENT_TOOL_DISABLED');
     if (intent.origin_kind === 'copilot') {
         if (!intent.origin_run_id || !intent.origin_step_id || intent.origin_run_id !== row.origin_run_id || intent.origin_step_id !== row.origin_step_id)
             throw new Error('DEVELOPMENT_ORIGIN_MISSING');
-        const origin = db.prepare('SELECT r.status,r.conversation_id,s.tool_name,s.input_json,s.status step_status FROM copilot_run_steps s JOIN copilot_runs r ON r.id=s.run_id AND r.user_id=s.user_id JOIN copilot_conversations c ON c.id=r.conversation_id AND c.user_id=r.user_id WHERE s.user_id=? AND s.id=? AND r.id=?').get(row.user_id, row.origin_step_id, row.origin_run_id);
+        const origin = db.prepare("SELECT r.status,r.source,r.input_json run_input_json,r.conversation_id,s.tool_name,s.input_json,s.input_digest,s.status step_status FROM copilot_run_steps s JOIN copilot_runs r ON r.id=s.run_id AND r.user_id=s.user_id JOIN copilot_conversations c ON c.id=r.conversation_id AND c.user_id=r.user_id AND c.status='active' WHERE s.user_id=? AND s.id=? AND r.id=? AND s.kind='tool'").get(row.user_id, row.origin_step_id, row.origin_run_id);
         if (!origin || !['running', 'completed', 'awaiting_approval'].includes(origin.status) || origin.tool_name !== 'submit_development_task')
             throw new Error('DEVELOPMENT_ORIGIN_REVOKED');
-        if (JSON.stringify(developmentPlanSchema.parse(JSON.parse(origin.input_json))) !== JSON.stringify(JSON.parse(row.plan_json)))
+        if (!['running', 'completed'].includes(origin.step_status) || intent.idempotency_key !== row.origin_step_id || hashText(origin.input_json) !== origin.input_digest || canonical(developmentPlanSchema.parse(JSON.parse(origin.input_json))) !== canonical(plan))
             throw new Error('DEVELOPMENT_ORIGIN_MISMATCH');
+        const input = JSON.parse(origin.run_input_json);
+        if (input.userId !== row.user_id || input.conversationId !== origin.conversation_id || (input.source ?? 'user') !== origin.source
+            || !['user', 'reactive', 'scheduled'].includes(origin.source) || input.projectId && input.projectId !== row.project_id)
+            throw new Error('DEVELOPMENT_ORIGIN_MISMATCH');
+        if (origin.source === 'user' && !input.executionMode && !db.prepare("SELECT id FROM copilot_messages WHERE user_id=? AND conversation_id=? AND role='user' AND kind='text' AND content=? AND (run_id=? OR id=?) LIMIT 1").get(row.user_id, origin.conversation_id, input.userText, row.origin_run_id, input.editMessageId ?? null))
+            throw new Error('DEVELOPMENT_ORIGIN_REVOKED');
         assertChannelConversationAuthority(db, row.user_id, origin.conversation_id);
+        assertChannelRunScope(db, row.user_id, input, { projectIds: [row.project_id], rootPaths: [row.project_root] });
+        const repair = repairJob(db, row.user_id, row.origin_run_id);
+        if (repair) {
+            validateRepairJob(db, row.user_id, repair);
+            assertRepairPlan(db, row.user_id, row.origin_run_id, row.origin_step_id, JSON.parse(row.plan_json));
+            if (repair.submitted_task_id !== row.id)
+                throw new Error('COPILOT_REPAIR_SUBMISSION_MISMATCH');
+        }
     }
     else if (intent.origin_kind !== 'owner_api' || row.origin_run_id || row.origin_step_id)
         throw new Error('DEVELOPMENT_ORIGIN_MISSING');
-    const project = new ProjectRepository(db, row.user_id).getById(row.project_id);
+    const projects = new ProjectRepository(db, row.user_id), project = projects.getById(row.project_id);
     if (!project)
         throw new Error('DEVELOPMENT_PROJECT_MISSING');
+    if (intent.origin_kind === 'copilot' && !projects.getCopilotAutonomy(row.project_id))
+        throw new Error('DEVELOPMENT_AUTONOMY_OFF');
+    if (realpathSync(project.path) !== row.project_root)
+        throw new Error('DEVELOPMENT_SOURCE_DRIFT');
     if (checkSource) {
         const current = prepareSource(project.path, JSON.parse(row.plan_json));
         if (current.root !== row.project_root || current.sourceDigest !== row.source_digest || current.outputDigest !== row.output_digest || current.recipeDigest !== row.recipe_digest)