imsg-mcp 1.25.0 → 1.25.2

package/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and follows [Semantic Versioning](https://semver.org/).
 
+## imsg-mcp [1.25.2](https://github.com/george43g/EQStack/compare/imsg-mcp-v1.25.1...imsg-mcp-v1.25.2) (2026-08-22)
+
+
+### Bug Fixes
+
+* **imsg-mcp:** redact recipient emails in osascript stderr; adopt robustness 0.12.0 ([53f67f9](https://github.com/george43g/EQStack/commit/53f67f9ae3f5b20aacee912723b7b7a1a3246026))
+
+## imsg-mcp [1.25.1](https://github.com/george43g/EQStack/compare/imsg-mcp-v1.25.0...imsg-mcp-v1.25.1) (2026-08-22)
+
+
+### Bug Fixes
+
+* **imsg-mcp:** contact-survey bug sweep — strict handle matching everywhere ([9f277a2](https://github.com/george43g/EQStack/commit/9f277a2b6551533cbfb151a4f6060a7465dad654))
+
 # imsg-mcp [1.25.0](https://github.com/george43g/EQStack/compare/imsg-mcp-v1.24.0...imsg-mcp-v1.25.0) (2026-08-21)
 
 

package/dist/{app-config-B3gVw0Ip.js → app-config-CK1zm-h1.js}

@@ -2,7 +2,7 @@ import { existsSync, mkdirSync, writeFileSync, readFileSync, chmodSync } from "n
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { z } from "zod";
-import { c as getTranscribeCloudConfig } from "./shutdown-B4_Yuro3.js";
+import { c as getTranscribeCloudConfig } from "./shutdown-BJyTvhvf.js";
 const HEX6 = /^#[0-9a-fA-F]{6}$/;
 const PROVIDER_PRESET_NAMES = [
   "openai",
@@ -248,4 +248,4 @@ export {
   writeCredentials,
   writeTuiConfig
 };
-//# sourceMappingURL=app-config-B3gVw0Ip.js.map
+//# sourceMappingURL=app-config-CK1zm-h1.js.map

package/dist/{app-config-B3gVw0Ip.js.map → app-config-CK1zm-h1.js.map}

@@ -1 +1 @@
-{"version":3,"file":"app-config-B3gVw0Ip.js","sources":["../src/app-config.ts"],"sourcesContent":["/**\n * Canonical persistent configuration for imsg-mcp — one JSON file that carries\n * both the flat TUI keys (theme / accentColor) AND the `interpret` block that\n * configures media interpretation (Stage 2 core: chains, providers, toggles).\n *\n * Resolution order (first one found wins) — unchanged from the original\n * tui-config module so existing files keep loading:\n *   1. $XDG_CONFIG_HOME/imsg-mcp/config.json\n *   2. $HOME/.config/imsg-mcp/config.json\n *   3. $HOME/.imsg-mcp/config.json     (matches the slugs.db location)\n *\n * `src/tui-config.ts` re-exports this module verbatim for back-compat.\n *\n * API keys are NEVER stored in config.json. They live in\n * `~/.imsg-mcp/credentials.json` (chmod 600, `{ \"<providerName>\": \"sk-…\" }`)\n * or the legacy `IMSG_TRANSCRIBE_*` env vars, and are merged into providers only\n * at resolution time (`resolveInterpretConfig`).\n */\n\nimport { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { z } from \"zod\";\nimport { getTranscribeCloudConfig } from \"./config.js\";\nimport type { AutoMode, InterpretChains, InterpretConfig } from \"./media-intel.js\";\nimport type { ProviderConfig, ProviderPreset } from \"./media-providers.js\";\n\n// ── Schema ────────────────────────────────────────────────────────────────\n\nconst HEX6 = /^#[0-9a-fA-F]{6}$/;\n\n/** Preset names accepted in the `interpret.providers[].preset` field. Kept as a\n *  literal tuple so Zod can build an enum without a runtime import of the\n *  providers module (and asserted to stay in sync with `ProviderPreset`). */\nconst PROVIDER_PRESET_NAMES = [\n  \"openai\",\n  \"groq\",\n  \"openrouter\",\n  \"cloudflare\",\n  \"huggingface\",\n  \"ollama\",\n] as const satisfies readonly ProviderPreset[];\n\nconst ProviderModelsSchema = z\n  .object({ transcribe: z.string().optional(), vision: z.string().optional() })\n  .optional();\n\n/** A provider profile as stored in config.json — NO apiKey (that lives in\n *  credentials.json / env and is merged in at resolution time). */\nconst ProviderConfigSchema = z\n  .object({\n    name: z.string().min(1),\n    preset: z.enum(PROVIDER_PRESET_NAMES).optional(),\n    baseUrl: z.string().url().optional(),\n    accountId: z.string().optional(),\n    models: ProviderModelsSchema,\n  })\n  .refine((p) => Boolean(p.preset) || Boolean(p.baseUrl), {\n    message: \"provider needs either a preset or a baseUrl\",\n  });\n\nconst ChainsSchema = z\n  .object({\n    audio: z.array(z.string()).default([\"apple\", \"local\"]),\n    image: z.array(z.string()).default([]),\n    video: z.array(z.string()).default([]),\n  })\n  .default({});\n\nconst NudgeSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    tier2SyncNow: z.boolean().default(false),\n    timeoutSeconds: z.number().int().positive().default(30),\n  })\n  .default({});\n\nexport const InterpretConfigSchema = z.object({\n  /** Auto-interpretation gate. \"free\" (default) never makes a paid call without\n   *  an explicit force; \"all\" runs the full chain incl. cloud; \"off\" disables. */\n  auto: z.enum([\"all\", \"free\", \"off\"]).default(\"free\"),\n  /** Inline cached transcripts/captions in read surfaces (get_messages, TUI). */\n  inlineTranscripts: z.boolean().default(true),\n  /** Confirm before an export triggers more than this many uncached cloud calls. */\n  exportConfirmThreshold: z.number().int().nonnegative().default(25),\n  chains: ChainsSchema,\n  providers: z.array(ProviderConfigSchema).default([]),\n  nudge: NudgeSchema,\n});\n\nexport const AppConfigSchema = z.object({\n  /** Glyph preset. \"safe\" is the universally-renderable default. */\n  theme: z.enum([\"safe\", \"powerline\"]).default(\"safe\"),\n  /** 6-digit hex color used to derive the whole UI palette. */\n  accentColor: z.string().regex(HEX6, \"must be a 6-digit hex like #RRGGBB\").default(\"#1982FC\"),\n  /** Media-interpretation config (optional — absent on TUI-only configs). */\n  interpret: InterpretConfigSchema.optional(),\n});\n\nexport type AppConfig = z.infer<typeof AppConfigSchema>;\nexport type InterpretConfigInput = z.infer<typeof InterpretConfigSchema>;\n\n/** Back-compat alias — the TUI only ever reads theme/accentColor. */\nexport const TuiConfigSchema = AppConfigSchema;\nexport type TuiConfig = AppConfig;\n\nexport const DEFAULT_TUI_CONFIG: TuiConfig = {\n  theme: \"safe\",\n  accentColor: \"#1982FC\",\n};\n\n/** Free-first interpret defaults used when the block is absent from config. */\nexport const DEFAULT_INTERPRET_CONFIG: InterpretConfigInput = InterpretConfigSchema.parse({});\n\n// ── Path resolution ───────────────────────────────────────────────────────\n\n/** Candidate paths we try to read from, in order. Per the XDG spec, `~/.config`\n *  is the DEFAULT VALUE of `$XDG_CONFIG_HOME` — not an additional search path —\n *  so when the env var is set we must not fall through to the real `~/.config`\n *  (that fall-through also let a dev machine's real config leak into tests that\n *  point XDG at a temp dir). */\nfunction candidatePaths(): string[] {\n  const home = homedir();\n  const xdgBase = process.env.XDG_CONFIG_HOME || join(home, \".config\");\n  return [join(xdgBase, \"imsg-mcp\", \"config.json\"), join(home, \".imsg-mcp\", \"config.json\")];\n}\n\n/** Where the file actually lives (first existing candidate), or null. */\nexport function findTuiConfigPath(): string | null {\n  for (const p of candidatePaths()) {\n    if (existsSync(p)) return p;\n  }\n  return null;\n}\n\n/** Where to write a fresh config file. Returns the *first* candidate so\n *  XDG-style wins on a clean machine. */\nexport function defaultTuiConfigPath(): string {\n  return candidatePaths()[0] ?? candidatePaths()[1];\n}\n\n// ── Loader ────────────────────────────────────────────────────────────────\n\nexport interface LoadedTuiConfig {\n  config: AppConfig;\n  /** Path of the file we read from, or `null` if defaults were used. */\n  source: string | null;\n  /** Human-readable warnings (parse errors, schema errors). Empty when clean. */\n  warnings: string[];\n}\n\nexport function loadTuiConfig(): LoadedTuiConfig {\n  const warnings: string[] = [];\n  const path = findTuiConfigPath();\n  if (!path) return { config: { ...DEFAULT_TUI_CONFIG }, source: null, warnings };\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(path, \"utf8\"));\n  } catch (err) {\n    warnings.push(\n      `config: failed to read ${path} (${err instanceof Error ? err.message : String(err)}); using defaults`,\n    );\n    return { config: { ...DEFAULT_TUI_CONFIG }, source: path, warnings };\n  }\n\n  const result = AppConfigSchema.safeParse(parsed);\n  if (result.success) return { config: result.data, source: path, warnings };\n\n  // Full parse failed. Degrade gracefully: if the flat TUI keys alone are valid,\n  // keep them (a malformed `interpret` block should not blow away the theme).\n  const tuiOnly = AppConfigSchema.pick({ theme: true, accentColor: true }).safeParse(parsed);\n  const issues = result.error.issues\n    .map((i) => `${i.path.join(\".\") || \"<root>\"}: ${i.message}`)\n    .join(\"; \");\n  if (tuiOnly.success) {\n    warnings.push(`config: ${path} has invalid fields (${issues}); ignoring them`);\n    return { config: { ...tuiOnly.data }, source: path, warnings };\n  }\n  warnings.push(`config: ${path} has invalid fields (${issues}); using defaults`);\n  return { config: { ...DEFAULT_TUI_CONFIG }, source: path, warnings };\n}\n\n// ── Writer (used by `imsg config edit` + `imsg setup`) ────────────────────\n\nexport function writeTuiConfig(config: AppConfig, path = defaultTuiConfigPath()): string {\n  // Validate before writing so we never persist garbage.\n  const validated = AppConfigSchema.parse(config);\n  mkdirSync(dirname(path), { recursive: true });\n  writeFileSync(path, `${JSON.stringify(validated, null, 2)}\\n`);\n  return path;\n}\n\n// ── Credentials (chmod 600) ───────────────────────────────────────────────\n\n/** `~/.imsg-mcp/credentials.json` — `{ \"<providerName>\": \"<apiKey>\" }`. */\nexport function credentialsPath(): string {\n  return join(homedir(), \".imsg-mcp\", \"credentials.json\");\n}\n\nexport function readCredentials(): Record<string, string> {\n  const path = credentialsPath();\n  if (!existsSync(path)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\"));\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n      const out: Record<string, string> = {};\n      for (const [k, v] of Object.entries(parsed)) {\n        if (typeof v === \"string\") out[k] = v;\n      }\n      return out;\n    }\n  } catch {\n    // Corrupt credentials file — treat as empty (never throw on read).\n  }\n  return {};\n}\n\n/** Write the whole credentials map, enforcing 0600 on the file (and 0700 dir). */\nexport function writeCredentials(creds: Record<string, string>): string {\n  const path = credentialsPath();\n  const dir = dirname(path);\n  mkdirSync(dir, { recursive: true });\n  try {\n    chmodSync(dir, 0o700);\n  } catch {\n    // Best-effort — a shared dir may already exist with other perms.\n  }\n  writeFileSync(path, `${JSON.stringify(creds, null, 2)}\\n`, { mode: 0o600 });\n  // writeFileSync's `mode` is masked by umask on CREATE and ignored when the\n  // file already exists — chmod unconditionally so 0600 is guaranteed.\n  chmodSync(path, 0o600);\n  return path;\n}\n\n/** Set (or clear, when key is empty) one provider's credential. */\nexport function setCredential(name: string, key: string): void {\n  const creds = readCredentials();\n  if (key) creds[name] = key;\n  else delete creds[name];\n  writeCredentials(creds);\n}\n\n// ── Interpret-config resolution (config + credentials + env → service) ─────\n\n/** The env-mapped implicit provider name (legacy IMSG_TRANSCRIBE_* path). */\nexport const ENV_PROVIDER_NAME = \"env\";\n\n/** Interpret config ready for `MediaIntelService`, plus the surfacing toggles\n *  that frontends (Stage 4/6/7) read. Providers carry their merged apiKey. */\nexport interface ResolvedInterpretConfig extends InterpretConfig {\n  inlineTranscripts: boolean;\n  exportConfirmThreshold: number;\n  nudge: { enabled: boolean; tier2SyncNow: boolean; timeoutSeconds: number };\n  /** Where the config was read from (null = defaults). */\n  configPath: string | null;\n  warnings: string[];\n}\n\n/**\n * Resolve the full interpret configuration:\n *   - start from the config file's `interpret` block (or free-first defaults),\n *   - merge API keys from credentials.json into each named provider,\n *   - map the legacy `IMSG_TRANSCRIBE_*` env vars to an implicit `env` provider\n *     (and append `provider:env` to the audio chain if it has no provider yet),\n *     preserving the shipped v1.7.0 cloud-transcription fallback.\n */\nexport function resolveInterpretConfig(): ResolvedInterpretConfig {\n  const loaded = loadTuiConfig();\n  const warnings = [...loaded.warnings];\n  const block = InterpretConfigSchema.parse(loaded.config.interpret ?? {});\n  const creds = readCredentials();\n\n  const providers: ProviderConfig[] = block.providers.map((p) => ({\n    ...p,\n    apiKey: creds[p.name],\n  }));\n  const chains: InterpretChains = {\n    audio: [...block.chains.audio],\n    image: [...block.chains.image],\n    video: [...block.chains.video],\n  };\n\n  // Legacy env fallback → implicit provider, if not already configured by name.\n  const envCloud = getTranscribeCloudConfig();\n  if (envCloud && !providers.some((p) => p.name === ENV_PROVIDER_NAME)) {\n    providers.push({\n      name: ENV_PROVIDER_NAME,\n      baseUrl: envCloud.baseUrl,\n      apiKey: envCloud.apiKey,\n      models: { transcribe: envCloud.model },\n    });\n    if (!chains.audio.some((l) => l.startsWith(\"provider:\"))) {\n      chains.audio.push(`provider:${ENV_PROVIDER_NAME}`);\n    }\n  }\n\n  const auto: AutoMode = block.auto;\n  return {\n    auto,\n    chains,\n    providers,\n    inlineTranscripts: block.inlineTranscripts,\n    exportConfirmThreshold: block.exportConfirmThreshold,\n    nudge: block.nudge,\n    configPath: loaded.source,\n    warnings,\n  };\n}\n\n// ── Layered resolution (CLI > env > config > defaults) — TUI theme/accent ──\n\nexport interface TuiConfigOverrides {\n  /** From `imsg --theme=...` */\n  cliTheme?: string;\n  /** From `imsg --accent=...` */\n  cliAccent?: string;\n}\n\nexport interface ResolvedTuiConfig {\n  theme: TuiConfig[\"theme\"];\n  accentColor: string;\n  /** Where each value came from, useful for `imsg config show`. */\n  origin: {\n    theme: \"cli\" | \"env\" | \"config\" | \"default\";\n    accentColor: \"cli\" | \"env\" | \"config\" | \"default\";\n  };\n  /** The on-disk file path that contributed (or `null` if no file). */\n  configPath: string | null;\n  /** Any warnings raised during loading (malformed file, invalid env, etc). */\n  warnings: string[];\n}\n\nexport function resolveTuiConfig(overrides: TuiConfigOverrides = {}): ResolvedTuiConfig {\n  const loaded = loadTuiConfig();\n  const warnings = [...loaded.warnings];\n\n  // Theme precedence: CLI > env > config > default\n  let theme: TuiConfig[\"theme\"] = loaded.config.theme;\n  let themeOrigin: ResolvedTuiConfig[\"origin\"][\"theme\"] = loaded.source ? \"config\" : \"default\";\n\n  if (process.env.IMSG_TUI_THEME) {\n    const t = process.env.IMSG_TUI_THEME;\n    if (t === \"safe\" || t === \"powerline\") {\n      theme = t;\n      themeOrigin = \"env\";\n    } else {\n      warnings.push(`IMSG_TUI_THEME=\"${t}\" is not \"safe\" or \"powerline\"; ignoring`);\n    }\n  }\n  if (overrides.cliTheme !== undefined) {\n    if (overrides.cliTheme === \"safe\" || overrides.cliTheme === \"powerline\") {\n      theme = overrides.cliTheme;\n      themeOrigin = \"cli\";\n    } else {\n      warnings.push(`--theme=\"${overrides.cliTheme}\" is not \"safe\" or \"powerline\"; ignoring`);\n    }\n  }\n\n  // Accent precedence: CLI > env > config > default\n  let accentColor = loaded.config.accentColor;\n  let accentOrigin: ResolvedTuiConfig[\"origin\"][\"accentColor\"] = loaded.source\n    ? \"config\"\n    : \"default\";\n\n  if (process.env.IMSG_TUI_ACCENT) {\n    if (HEX6.test(process.env.IMSG_TUI_ACCENT)) {\n      accentColor = process.env.IMSG_TUI_ACCENT;\n      accentOrigin = \"env\";\n    } else {\n      warnings.push(\n        `IMSG_TUI_ACCENT=\"${process.env.IMSG_TUI_ACCENT}\" is not a 6-digit hex; ignoring`,\n      );\n    }\n  }\n  if (overrides.cliAccent !== undefined) {\n    if (HEX6.test(overrides.cliAccent)) {\n      accentColor = overrides.cliAccent;\n      accentOrigin = \"cli\";\n    } else {\n      warnings.push(`--accent=\"${overrides.cliAccent}\" is not a 6-digit hex; ignoring`);\n    }\n  }\n\n  return {\n    theme,\n    accentColor,\n    origin: { theme: themeOrigin, accentColor: accentOrigin },\n    configPath: loaded.source,\n    warnings,\n  };\n}\n"],"names":[],"mappings":";;;;;AA6BA,MAAM,OAAO;AAKb,MAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,uBAAuB,EAC1B,OAAO,EAAE,YAAY,EAAE,SAAS,SAAA,GAAY,QAAQ,EAAE,OAAA,EAAS,WAAS,CAAG,EAC3E,SAAA;AAIH,MAAM,uBAAuB,EAC1B,OAAO;AAAA,EACN,MAAM,EAAE,SAAS,IAAI,CAAC;AAAA,EACtB,QAAQ,EAAE,KAAK,qBAAqB,EAAE,SAAA;AAAA,EACtC,SAAS,EAAE,OAAA,EAAS,IAAA,EAAM,SAAA;AAAA,EAC1B,WAAW,EAAE,OAAA,EAAS,SAAA;AAAA,EACtB,QAAQ;AACV,CAAC,EACA,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,KAAK,QAAQ,EAAE,OAAO,GAAG;AAAA,EACtD,SAAS;AACX,CAAC;AAEH,MAAM,eAAe,EAClB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,OAAO,CAAC;AAAA,EACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE;AAAA,EACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAA,CAAE;AACvC,CAAC,EACA,QAAQ,EAAE;AAEb,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,SAAS,EAAE,UAAU,QAAQ,IAAI;AAAA,EACjC,cAAc,EAAE,UAAU,QAAQ,KAAK;AAAA,EACvC,gBAAgB,EAAE,OAAA,EAAS,MAAM,SAAA,EAAW,QAAQ,EAAE;AACxD,CAAC,EACA,QAAQ,EAAE;AAEN,MAAM,wBAAwB,EAAE,OAAO;AAAA;AAAA;AAAA,EAG5C,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAEnD,mBAAmB,EAAE,UAAU,QAAQ,IAAI;AAAA;AAAA,EAE3C,wBAAwB,EAAE,SAAS,MAAM,YAAA,EAAc,QAAQ,EAAE;AAAA,EACjE,QAAQ;AAAA,EACR,WAAW,EAAE,MAAM,oBAAoB,EAAE,QAAQ,CAAA,CAAE;AAAA,EACnD,OAAO;AACT,CAAC;AAEM,MAAM,kBAAkB,EAAE,OAAO;AAAA;AAAA,EAEtC,OAAO,EAAE,KAAK,CAAC,QAAQ,WAAW,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAEnD,aAAa,EAAE,SAAS,MAAM,MAAM,oCAAoC,EAAE,QAAQ,SAAS;AAAA;AAAA,EAE3F,WAAW,sBAAsB,SAAA;AACnC,CAAC;AAMM,MAAM,kBAAkB;AAGxB,MAAM,qBAAgC;AAAA,EAC3C,OAAO;AAAA,EACP,aAAa;AACf;AAGO,MAAM,2BAAiD,sBAAsB,MAAM,CAAA,CAAE;AAS5F,SAAS,iBAA2B;AAClC,QAAM,OAAO,QAAA;AACb,QAAM,UAAU,QAAQ,IAAI,mBAAmB,KAAK,MAAM,SAAS;AACnE,SAAO,CAAC,KAAK,SAAS,YAAY,aAAa,GAAG,KAAK,MAAM,aAAa,aAAa,CAAC;AAC1F;AAGO,SAAS,oBAAmC;AACjD,aAAW,KAAK,kBAAkB;AAChC,QAAI,WAAW,CAAC,EAAG,QAAO;AAAA,EAC5B;AACA,SAAO;AACT;AAIO,SAAS,uBAA+B;AAC7C,SAAO,iBAAiB,CAAC,KAAK,eAAA,EAAiB,CAAC;AAClD;AAYO,SAAS,gBAAiC;AAC/C,QAAM,WAAqB,CAAA;AAC3B,QAAM,OAAO,kBAAA;AACb,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAErE,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,KAAK;AACZ,aAAS;AAAA,MACP,0BAA0B,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAAA;AAErF,WAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAAA,EAC5D;AAEA,QAAM,SAAS,gBAAgB,UAAU,MAAM;AAC/C,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,MAAM,SAAA;AAIhE,QAAM,UAAU,gBAAgB,KAAK,EAAE,OAAO,MAAM,aAAa,KAAA,CAAM,EAAE,UAAU,MAAM;AACzF,QAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,EAAE,OAAO,EAAE,EAC1D,KAAK,IAAI;AACZ,MAAI,QAAQ,SAAS;AACnB,aAAS,KAAK,WAAW,IAAI,wBAAwB,MAAM,kBAAkB;AAC7E,WAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,KAAA,GAAQ,QAAQ,MAAM,SAAA;AAAA,EACtD;AACA,WAAS,KAAK,WAAW,IAAI,wBAAwB,MAAM,mBAAmB;AAC9E,SAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAC5D;AAIO,SAAS,eAAe,QAAmB,OAAO,wBAAgC;AAEvF,QAAM,YAAY,gBAAgB,MAAM,MAAM;AAC9C,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM;AAC5C,gBAAc,MAAM,GAAG,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,CAAI;AAC7D,SAAO;AACT;AAKO,SAAS,kBAA0B;AACxC,SAAO,KAAK,WAAW,aAAa,kBAAkB;AACxD;AAEO,SAAS,kBAA0C;AACxD,QAAM,OAAO,gBAAA;AACb,MAAI,CAAC,WAAW,IAAI,UAAU,CAAA;AAC9B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,YAAM,MAA8B,CAAA;AACpC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI;AAAA,MACtC;AACA,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,CAAA;AACT;AAGO,SAAS,iBAAiB,OAAuC;AACtE,QAAM,OAAO,gBAAA;AACb,QAAM,MAAM,QAAQ,IAAI;AACxB,YAAU,KAAK,EAAE,WAAW,KAAA,CAAM;AAClC,MAAI;AACF,cAAU,KAAK,GAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACA,gBAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,KAAO;AAG1E,YAAU,MAAM,GAAK;AACrB,SAAO;AACT;AAGO,SAAS,cAAc,MAAc,KAAmB;AAC7D,QAAM,QAAQ,gBAAA;AACd,MAAI,IAAK,OAAM,IAAI,IAAI;AAAA,MAClB,QAAO,MAAM,IAAI;AACtB,mBAAiB,KAAK;AACxB;AAKO,MAAM,oBAAoB;AAqB1B,SAAS,yBAAkD;AAChE,QAAM,SAAS,cAAA;AACf,QAAM,WAAW,CAAC,GAAG,OAAO,QAAQ;AACpC,QAAM,QAAQ,sBAAsB,MAAM,OAAO,OAAO,aAAa,EAAE;AACvE,QAAM,QAAQ,gBAAA;AAEd,QAAM,YAA8B,MAAM,UAAU,IAAI,CAAC,OAAO;AAAA,IAC9D,GAAG;AAAA,IACH,QAAQ,MAAM,EAAE,IAAI;AAAA,EAAA,EACpB;AACF,QAAM,SAA0B;AAAA,IAC9B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,IAC7B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,IAC7B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,EAAA;AAI/B,QAAM,WAAW,yBAAA;AACjB,MAAI,YAAY,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,iBAAiB,GAAG;AACpE,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,SAAS;AAAA,MAClB,QAAQ,SAAS;AAAA,MACjB,QAAQ,EAAE,YAAY,SAAS,MAAA;AAAA,IAAM,CACtC;AACD,QAAI,CAAC,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC,GAAG;AACxD,aAAO,MAAM,KAAK,YAAY,iBAAiB,EAAE;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,OAAiB,MAAM;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,MAAM;AAAA,IACzB,wBAAwB,MAAM;AAAA,IAC9B,OAAO,MAAM;AAAA,IACb,YAAY,OAAO;AAAA,IACnB;AAAA,EAAA;AAEJ;AAyBO,SAAS,iBAAiB,YAAgC,IAAuB;AACtF,QAAM,SAAS,cAAA;AACf,QAAM,WAAW,CAAC,GAAG,OAAO,QAAQ;AAGpC,MAAI,QAA4B,OAAO,OAAO;AAC9C,MAAI,cAAoD,OAAO,SAAS,WAAW;AAEnF,MAAI,QAAQ,IAAI,gBAAgB;AAC9B,UAAM,IAAI,QAAQ,IAAI;AACtB,QAAI,MAAM,UAAU,MAAM,aAAa;AACrC,cAAQ;AACR,oBAAc;AAAA,IAChB,OAAO;AACL,eAAS,KAAK,mBAAmB,CAAC,0CAA0C;AAAA,IAC9E;AAAA,EACF;AACA,MAAI,UAAU,aAAa,QAAW;AACpC,QAAI,UAAU,aAAa,UAAU,UAAU,aAAa,aAAa;AACvE,cAAQ,UAAU;AAClB,oBAAc;AAAA,IAChB,OAAO;AACL,eAAS,KAAK,YAAY,UAAU,QAAQ,0CAA0C;AAAA,IACxF;AAAA,EACF;AAGA,MAAI,cAAc,OAAO,OAAO;AAChC,MAAI,eAA2D,OAAO,SAClE,WACA;AAEJ,MAAI,QAAQ,IAAI,iBAAiB;AAC/B,QAAI,KAAK,KAAK,QAAQ,IAAI,eAAe,GAAG;AAC1C,oBAAc,QAAQ,IAAI;AAC1B,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS;AAAA,QACP,oBAAoB,QAAQ,IAAI,eAAe;AAAA,MAAA;AAAA,IAEnD;AAAA,EACF;AACA,MAAI,UAAU,cAAc,QAAW;AACrC,QAAI,KAAK,KAAK,UAAU,SAAS,GAAG;AAClC,oBAAc,UAAU;AACxB,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS,KAAK,aAAa,UAAU,SAAS,kCAAkC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,OAAO,aAAa,aAAa,aAAA;AAAA,IAC3C,YAAY,OAAO;AAAA,IACnB;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"app-config-CK1zm-h1.js","sources":["../src/app-config.ts"],"sourcesContent":["/**\n * Canonical persistent configuration for imsg-mcp — one JSON file that carries\n * both the flat TUI keys (theme / accentColor) AND the `interpret` block that\n * configures media interpretation (Stage 2 core: chains, providers, toggles).\n *\n * Resolution order (first one found wins) — unchanged from the original\n * tui-config module so existing files keep loading:\n *   1. $XDG_CONFIG_HOME/imsg-mcp/config.json\n *   2. $HOME/.config/imsg-mcp/config.json\n *   3. $HOME/.imsg-mcp/config.json     (matches the slugs.db location)\n *\n * `src/tui-config.ts` re-exports this module verbatim for back-compat.\n *\n * API keys are NEVER stored in config.json. They live in\n * `~/.imsg-mcp/credentials.json` (chmod 600, `{ \"<providerName>\": \"sk-…\" }`)\n * or the legacy `IMSG_TRANSCRIBE_*` env vars, and are merged into providers only\n * at resolution time (`resolveInterpretConfig`).\n */\n\nimport { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { z } from \"zod\";\nimport { getTranscribeCloudConfig } from \"./config.js\";\nimport type { AutoMode, InterpretChains, InterpretConfig } from \"./media-intel.js\";\nimport type { ProviderConfig, ProviderPreset } from \"./media-providers.js\";\n\n// ── Schema ────────────────────────────────────────────────────────────────\n\nconst HEX6 = /^#[0-9a-fA-F]{6}$/;\n\n/** Preset names accepted in the `interpret.providers[].preset` field. Kept as a\n *  literal tuple so Zod can build an enum without a runtime import of the\n *  providers module (and asserted to stay in sync with `ProviderPreset`). */\nconst PROVIDER_PRESET_NAMES = [\n  \"openai\",\n  \"groq\",\n  \"openrouter\",\n  \"cloudflare\",\n  \"huggingface\",\n  \"ollama\",\n] as const satisfies readonly ProviderPreset[];\n\nconst ProviderModelsSchema = z\n  .object({ transcribe: z.string().optional(), vision: z.string().optional() })\n  .optional();\n\n/** A provider profile as stored in config.json — NO apiKey (that lives in\n *  credentials.json / env and is merged in at resolution time). */\nconst ProviderConfigSchema = z\n  .object({\n    name: z.string().min(1),\n    preset: z.enum(PROVIDER_PRESET_NAMES).optional(),\n    baseUrl: z.string().url().optional(),\n    accountId: z.string().optional(),\n    models: ProviderModelsSchema,\n  })\n  .refine((p) => Boolean(p.preset) || Boolean(p.baseUrl), {\n    message: \"provider needs either a preset or a baseUrl\",\n  });\n\nconst ChainsSchema = z\n  .object({\n    audio: z.array(z.string()).default([\"apple\", \"local\"]),\n    image: z.array(z.string()).default([]),\n    video: z.array(z.string()).default([]),\n  })\n  .default({});\n\nconst NudgeSchema = z\n  .object({\n    enabled: z.boolean().default(true),\n    tier2SyncNow: z.boolean().default(false),\n    timeoutSeconds: z.number().int().positive().default(30),\n  })\n  .default({});\n\nexport const InterpretConfigSchema = z.object({\n  /** Auto-interpretation gate. \"free\" (default) never makes a paid call without\n   *  an explicit force; \"all\" runs the full chain incl. cloud; \"off\" disables. */\n  auto: z.enum([\"all\", \"free\", \"off\"]).default(\"free\"),\n  /** Inline cached transcripts/captions in read surfaces (get_messages, TUI). */\n  inlineTranscripts: z.boolean().default(true),\n  /** Confirm before an export triggers more than this many uncached cloud calls. */\n  exportConfirmThreshold: z.number().int().nonnegative().default(25),\n  chains: ChainsSchema,\n  providers: z.array(ProviderConfigSchema).default([]),\n  nudge: NudgeSchema,\n});\n\nexport const AppConfigSchema = z.object({\n  /** Glyph preset. \"safe\" is the universally-renderable default. */\n  theme: z.enum([\"safe\", \"powerline\"]).default(\"safe\"),\n  /** 6-digit hex color used to derive the whole UI palette. */\n  accentColor: z.string().regex(HEX6, \"must be a 6-digit hex like #RRGGBB\").default(\"#1982FC\"),\n  /** Media-interpretation config (optional — absent on TUI-only configs). */\n  interpret: InterpretConfigSchema.optional(),\n});\n\nexport type AppConfig = z.infer<typeof AppConfigSchema>;\nexport type InterpretConfigInput = z.infer<typeof InterpretConfigSchema>;\n\n/** Back-compat alias — the TUI only ever reads theme/accentColor. */\nexport const TuiConfigSchema = AppConfigSchema;\nexport type TuiConfig = AppConfig;\n\nexport const DEFAULT_TUI_CONFIG: TuiConfig = {\n  theme: \"safe\",\n  accentColor: \"#1982FC\",\n};\n\n/** Free-first interpret defaults used when the block is absent from config. */\nexport const DEFAULT_INTERPRET_CONFIG: InterpretConfigInput = InterpretConfigSchema.parse({});\n\n// ── Path resolution ───────────────────────────────────────────────────────\n\n/** Candidate paths we try to read from, in order. Per the XDG spec, `~/.config`\n *  is the DEFAULT VALUE of `$XDG_CONFIG_HOME` — not an additional search path —\n *  so when the env var is set we must not fall through to the real `~/.config`\n *  (that fall-through also let a dev machine's real config leak into tests that\n *  point XDG at a temp dir). */\nfunction candidatePaths(): string[] {\n  const home = homedir();\n  const xdgBase = process.env.XDG_CONFIG_HOME || join(home, \".config\");\n  return [join(xdgBase, \"imsg-mcp\", \"config.json\"), join(home, \".imsg-mcp\", \"config.json\")];\n}\n\n/** Where the file actually lives (first existing candidate), or null. */\nexport function findTuiConfigPath(): string | null {\n  for (const p of candidatePaths()) {\n    if (existsSync(p)) return p;\n  }\n  return null;\n}\n\n/** Where to write a fresh config file. Returns the *first* candidate so\n *  XDG-style wins on a clean machine. */\nexport function defaultTuiConfigPath(): string {\n  return candidatePaths()[0] ?? candidatePaths()[1];\n}\n\n// ── Loader ────────────────────────────────────────────────────────────────\n\nexport interface LoadedTuiConfig {\n  config: AppConfig;\n  /** Path of the file we read from, or `null` if defaults were used. */\n  source: string | null;\n  /** Human-readable warnings (parse errors, schema errors). Empty when clean. */\n  warnings: string[];\n}\n\nexport function loadTuiConfig(): LoadedTuiConfig {\n  const warnings: string[] = [];\n  const path = findTuiConfigPath();\n  if (!path) return { config: { ...DEFAULT_TUI_CONFIG }, source: null, warnings };\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(readFileSync(path, \"utf8\"));\n  } catch (err) {\n    warnings.push(\n      `config: failed to read ${path} (${err instanceof Error ? err.message : String(err)}); using defaults`,\n    );\n    return { config: { ...DEFAULT_TUI_CONFIG }, source: path, warnings };\n  }\n\n  const result = AppConfigSchema.safeParse(parsed);\n  if (result.success) return { config: result.data, source: path, warnings };\n\n  // Full parse failed. Degrade gracefully: if the flat TUI keys alone are valid,\n  // keep them (a malformed `interpret` block should not blow away the theme).\n  const tuiOnly = AppConfigSchema.pick({ theme: true, accentColor: true }).safeParse(parsed);\n  const issues = result.error.issues\n    .map((i) => `${i.path.join(\".\") || \"<root>\"}: ${i.message}`)\n    .join(\"; \");\n  if (tuiOnly.success) {\n    warnings.push(`config: ${path} has invalid fields (${issues}); ignoring them`);\n    return { config: { ...tuiOnly.data }, source: path, warnings };\n  }\n  warnings.push(`config: ${path} has invalid fields (${issues}); using defaults`);\n  return { config: { ...DEFAULT_TUI_CONFIG }, source: path, warnings };\n}\n\n// ── Writer (used by `imsg config edit` + `imsg setup`) ────────────────────\n\nexport function writeTuiConfig(config: AppConfig, path = defaultTuiConfigPath()): string {\n  // Validate before writing so we never persist garbage.\n  const validated = AppConfigSchema.parse(config);\n  mkdirSync(dirname(path), { recursive: true });\n  writeFileSync(path, `${JSON.stringify(validated, null, 2)}\\n`);\n  return path;\n}\n\n// ── Credentials (chmod 600) ───────────────────────────────────────────────\n\n/** `~/.imsg-mcp/credentials.json` — `{ \"<providerName>\": \"<apiKey>\" }`. */\nexport function credentialsPath(): string {\n  return join(homedir(), \".imsg-mcp\", \"credentials.json\");\n}\n\nexport function readCredentials(): Record<string, string> {\n  const path = credentialsPath();\n  if (!existsSync(path)) return {};\n  try {\n    const parsed = JSON.parse(readFileSync(path, \"utf8\"));\n    if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n      const out: Record<string, string> = {};\n      for (const [k, v] of Object.entries(parsed)) {\n        if (typeof v === \"string\") out[k] = v;\n      }\n      return out;\n    }\n  } catch {\n    // Corrupt credentials file — treat as empty (never throw on read).\n  }\n  return {};\n}\n\n/** Write the whole credentials map, enforcing 0600 on the file (and 0700 dir). */\nexport function writeCredentials(creds: Record<string, string>): string {\n  const path = credentialsPath();\n  const dir = dirname(path);\n  mkdirSync(dir, { recursive: true });\n  try {\n    chmodSync(dir, 0o700);\n  } catch {\n    // Best-effort — a shared dir may already exist with other perms.\n  }\n  writeFileSync(path, `${JSON.stringify(creds, null, 2)}\\n`, { mode: 0o600 });\n  // writeFileSync's `mode` is masked by umask on CREATE and ignored when the\n  // file already exists — chmod unconditionally so 0600 is guaranteed.\n  chmodSync(path, 0o600);\n  return path;\n}\n\n/** Set (or clear, when key is empty) one provider's credential. */\nexport function setCredential(name: string, key: string): void {\n  const creds = readCredentials();\n  if (key) creds[name] = key;\n  else delete creds[name];\n  writeCredentials(creds);\n}\n\n// ── Interpret-config resolution (config + credentials + env → service) ─────\n\n/** The env-mapped implicit provider name (legacy IMSG_TRANSCRIBE_* path). */\nexport const ENV_PROVIDER_NAME = \"env\";\n\n/** Interpret config ready for `MediaIntelService`, plus the surfacing toggles\n *  that frontends (Stage 4/6/7) read. Providers carry their merged apiKey. */\nexport interface ResolvedInterpretConfig extends InterpretConfig {\n  inlineTranscripts: boolean;\n  exportConfirmThreshold: number;\n  nudge: { enabled: boolean; tier2SyncNow: boolean; timeoutSeconds: number };\n  /** Where the config was read from (null = defaults). */\n  configPath: string | null;\n  warnings: string[];\n}\n\n/**\n * Resolve the full interpret configuration:\n *   - start from the config file's `interpret` block (or free-first defaults),\n *   - merge API keys from credentials.json into each named provider,\n *   - map the legacy `IMSG_TRANSCRIBE_*` env vars to an implicit `env` provider\n *     (and append `provider:env` to the audio chain if it has no provider yet),\n *     preserving the shipped v1.7.0 cloud-transcription fallback.\n */\nexport function resolveInterpretConfig(): ResolvedInterpretConfig {\n  const loaded = loadTuiConfig();\n  const warnings = [...loaded.warnings];\n  const block = InterpretConfigSchema.parse(loaded.config.interpret ?? {});\n  const creds = readCredentials();\n\n  const providers: ProviderConfig[] = block.providers.map((p) => ({\n    ...p,\n    apiKey: creds[p.name],\n  }));\n  const chains: InterpretChains = {\n    audio: [...block.chains.audio],\n    image: [...block.chains.image],\n    video: [...block.chains.video],\n  };\n\n  // Legacy env fallback → implicit provider, if not already configured by name.\n  const envCloud = getTranscribeCloudConfig();\n  if (envCloud && !providers.some((p) => p.name === ENV_PROVIDER_NAME)) {\n    providers.push({\n      name: ENV_PROVIDER_NAME,\n      baseUrl: envCloud.baseUrl,\n      apiKey: envCloud.apiKey,\n      models: { transcribe: envCloud.model },\n    });\n    if (!chains.audio.some((l) => l.startsWith(\"provider:\"))) {\n      chains.audio.push(`provider:${ENV_PROVIDER_NAME}`);\n    }\n  }\n\n  const auto: AutoMode = block.auto;\n  return {\n    auto,\n    chains,\n    providers,\n    inlineTranscripts: block.inlineTranscripts,\n    exportConfirmThreshold: block.exportConfirmThreshold,\n    nudge: block.nudge,\n    configPath: loaded.source,\n    warnings,\n  };\n}\n\n// ── Layered resolution (CLI > env > config > defaults) — TUI theme/accent ──\n\nexport interface TuiConfigOverrides {\n  /** From `imsg --theme=...` */\n  cliTheme?: string;\n  /** From `imsg --accent=...` */\n  cliAccent?: string;\n}\n\nexport interface ResolvedTuiConfig {\n  theme: TuiConfig[\"theme\"];\n  accentColor: string;\n  /** Where each value came from, useful for `imsg config show`. */\n  origin: {\n    theme: \"cli\" | \"env\" | \"config\" | \"default\";\n    accentColor: \"cli\" | \"env\" | \"config\" | \"default\";\n  };\n  /** The on-disk file path that contributed (or `null` if no file). */\n  configPath: string | null;\n  /** Any warnings raised during loading (malformed file, invalid env, etc). */\n  warnings: string[];\n}\n\nexport function resolveTuiConfig(overrides: TuiConfigOverrides = {}): ResolvedTuiConfig {\n  const loaded = loadTuiConfig();\n  const warnings = [...loaded.warnings];\n\n  // Theme precedence: CLI > env > config > default\n  let theme: TuiConfig[\"theme\"] = loaded.config.theme;\n  let themeOrigin: ResolvedTuiConfig[\"origin\"][\"theme\"] = loaded.source ? \"config\" : \"default\";\n\n  if (process.env.IMSG_TUI_THEME) {\n    const t = process.env.IMSG_TUI_THEME;\n    if (t === \"safe\" || t === \"powerline\") {\n      theme = t;\n      themeOrigin = \"env\";\n    } else {\n      warnings.push(`IMSG_TUI_THEME=\"${t}\" is not \"safe\" or \"powerline\"; ignoring`);\n    }\n  }\n  if (overrides.cliTheme !== undefined) {\n    if (overrides.cliTheme === \"safe\" || overrides.cliTheme === \"powerline\") {\n      theme = overrides.cliTheme;\n      themeOrigin = \"cli\";\n    } else {\n      warnings.push(`--theme=\"${overrides.cliTheme}\" is not \"safe\" or \"powerline\"; ignoring`);\n    }\n  }\n\n  // Accent precedence: CLI > env > config > default\n  let accentColor = loaded.config.accentColor;\n  let accentOrigin: ResolvedTuiConfig[\"origin\"][\"accentColor\"] = loaded.source\n    ? \"config\"\n    : \"default\";\n\n  if (process.env.IMSG_TUI_ACCENT) {\n    if (HEX6.test(process.env.IMSG_TUI_ACCENT)) {\n      accentColor = process.env.IMSG_TUI_ACCENT;\n      accentOrigin = \"env\";\n    } else {\n      warnings.push(\n        `IMSG_TUI_ACCENT=\"${process.env.IMSG_TUI_ACCENT}\" is not a 6-digit hex; ignoring`,\n      );\n    }\n  }\n  if (overrides.cliAccent !== undefined) {\n    if (HEX6.test(overrides.cliAccent)) {\n      accentColor = overrides.cliAccent;\n      accentOrigin = \"cli\";\n    } else {\n      warnings.push(`--accent=\"${overrides.cliAccent}\" is not a 6-digit hex; ignoring`);\n    }\n  }\n\n  return {\n    theme,\n    accentColor,\n    origin: { theme: themeOrigin, accentColor: accentOrigin },\n    configPath: loaded.source,\n    warnings,\n  };\n}\n"],"names":[],"mappings":";;;;;AA6BA,MAAM,OAAO;AAKb,MAAM,wBAAwB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,MAAM,uBAAuB,EAC1B,OAAO,EAAE,YAAY,EAAE,SAAS,SAAA,GAAY,QAAQ,EAAE,OAAA,EAAS,WAAS,CAAG,EAC3E,SAAA;AAIH,MAAM,uBAAuB,EAC1B,OAAO;AAAA,EACN,MAAM,EAAE,SAAS,IAAI,CAAC;AAAA,EACtB,QAAQ,EAAE,KAAK,qBAAqB,EAAE,SAAA;AAAA,EACtC,SAAS,EAAE,OAAA,EAAS,IAAA,EAAM,SAAA;AAAA,EAC1B,WAAW,EAAE,OAAA,EAAS,SAAA;AAAA,EACtB,QAAQ;AACV,CAAC,EACA,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,KAAK,QAAQ,EAAE,OAAO,GAAG;AAAA,EACtD,SAAS;AACX,CAAC;AAEH,MAAM,eAAe,EAClB,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,OAAO,CAAC;AAAA,EACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE;AAAA,EACrC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAA,CAAE;AACvC,CAAC,EACA,QAAQ,EAAE;AAEb,MAAM,cAAc,EACjB,OAAO;AAAA,EACN,SAAS,EAAE,UAAU,QAAQ,IAAI;AAAA,EACjC,cAAc,EAAE,UAAU,QAAQ,KAAK;AAAA,EACvC,gBAAgB,EAAE,OAAA,EAAS,MAAM,SAAA,EAAW,QAAQ,EAAE;AACxD,CAAC,EACA,QAAQ,EAAE;AAEN,MAAM,wBAAwB,EAAE,OAAO;AAAA;AAAA;AAAA,EAG5C,MAAM,EAAE,KAAK,CAAC,OAAO,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAEnD,mBAAmB,EAAE,UAAU,QAAQ,IAAI;AAAA;AAAA,EAE3C,wBAAwB,EAAE,SAAS,MAAM,YAAA,EAAc,QAAQ,EAAE;AAAA,EACjE,QAAQ;AAAA,EACR,WAAW,EAAE,MAAM,oBAAoB,EAAE,QAAQ,CAAA,CAAE;AAAA,EACnD,OAAO;AACT,CAAC;AAEM,MAAM,kBAAkB,EAAE,OAAO;AAAA;AAAA,EAEtC,OAAO,EAAE,KAAK,CAAC,QAAQ,WAAW,CAAC,EAAE,QAAQ,MAAM;AAAA;AAAA,EAEnD,aAAa,EAAE,SAAS,MAAM,MAAM,oCAAoC,EAAE,QAAQ,SAAS;AAAA;AAAA,EAE3F,WAAW,sBAAsB,SAAA;AACnC,CAAC;AAMM,MAAM,kBAAkB;AAGxB,MAAM,qBAAgC;AAAA,EAC3C,OAAO;AAAA,EACP,aAAa;AACf;AAGO,MAAM,2BAAiD,sBAAsB,MAAM,CAAA,CAAE;AAS5F,SAAS,iBAA2B;AAClC,QAAM,OAAO,QAAA;AACb,QAAM,UAAU,QAAQ,IAAI,mBAAmB,KAAK,MAAM,SAAS;AACnE,SAAO,CAAC,KAAK,SAAS,YAAY,aAAa,GAAG,KAAK,MAAM,aAAa,aAAa,CAAC;AAC1F;AAGO,SAAS,oBAAmC;AACjD,aAAW,KAAK,kBAAkB;AAChC,QAAI,WAAW,CAAC,EAAG,QAAO;AAAA,EAC5B;AACA,SAAO;AACT;AAIO,SAAS,uBAA+B;AAC7C,SAAO,iBAAiB,CAAC,KAAK,eAAA,EAAiB,CAAC;AAClD;AAYO,SAAS,gBAAiC;AAC/C,QAAM,WAAqB,CAAA;AAC3B,QAAM,OAAO,kBAAA;AACb,MAAI,CAAC,KAAM,QAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAErE,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAChD,SAAS,KAAK;AACZ,aAAS;AAAA,MACP,0BAA0B,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAAA;AAErF,WAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAAA,EAC5D;AAEA,QAAM,SAAS,gBAAgB,UAAU,MAAM;AAC/C,MAAI,OAAO,QAAS,QAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,MAAM,SAAA;AAIhE,QAAM,UAAU,gBAAgB,KAAK,EAAE,OAAO,MAAM,aAAa,KAAA,CAAM,EAAE,UAAU,MAAM;AACzF,QAAM,SAAS,OAAO,MAAM,OACzB,IAAI,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,KAAK,QAAQ,KAAK,EAAE,OAAO,EAAE,EAC1D,KAAK,IAAI;AACZ,MAAI,QAAQ,SAAS;AACnB,aAAS,KAAK,WAAW,IAAI,wBAAwB,MAAM,kBAAkB;AAC7E,WAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,KAAA,GAAQ,QAAQ,MAAM,SAAA;AAAA,EACtD;AACA,WAAS,KAAK,WAAW,IAAI,wBAAwB,MAAM,mBAAmB;AAC9E,SAAO,EAAE,QAAQ,EAAE,GAAG,sBAAsB,QAAQ,MAAM,SAAA;AAC5D;AAIO,SAAS,eAAe,QAAmB,OAAO,wBAAgC;AAEvF,QAAM,YAAY,gBAAgB,MAAM,MAAM;AAC9C,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,MAAM;AAC5C,gBAAc,MAAM,GAAG,KAAK,UAAU,WAAW,MAAM,CAAC,CAAC;AAAA,CAAI;AAC7D,SAAO;AACT;AAKO,SAAS,kBAA0B;AACxC,SAAO,KAAK,WAAW,aAAa,kBAAkB;AACxD;AAEO,SAAS,kBAA0C;AACxD,QAAM,OAAO,gBAAA;AACb,MAAI,CAAC,WAAW,IAAI,UAAU,CAAA;AAC9B,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACpD,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,GAAG;AAClE,YAAM,MAA8B,CAAA;AACpC,iBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC3C,YAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI;AAAA,MACtC;AACA,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO,CAAA;AACT;AAGO,SAAS,iBAAiB,OAAuC;AACtE,QAAM,OAAO,gBAAA;AACb,QAAM,MAAM,QAAQ,IAAI;AACxB,YAAU,KAAK,EAAE,WAAW,KAAA,CAAM;AAClC,MAAI;AACF,cAAU,KAAK,GAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACA,gBAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAAA,GAAM,EAAE,MAAM,KAAO;AAG1E,YAAU,MAAM,GAAK;AACrB,SAAO;AACT;AAGO,SAAS,cAAc,MAAc,KAAmB;AAC7D,QAAM,QAAQ,gBAAA;AACd,MAAI,IAAK,OAAM,IAAI,IAAI;AAAA,MAClB,QAAO,MAAM,IAAI;AACtB,mBAAiB,KAAK;AACxB;AAKO,MAAM,oBAAoB;AAqB1B,SAAS,yBAAkD;AAChE,QAAM,SAAS,cAAA;AACf,QAAM,WAAW,CAAC,GAAG,OAAO,QAAQ;AACpC,QAAM,QAAQ,sBAAsB,MAAM,OAAO,OAAO,aAAa,EAAE;AACvE,QAAM,QAAQ,gBAAA;AAEd,QAAM,YAA8B,MAAM,UAAU,IAAI,CAAC,OAAO;AAAA,IAC9D,GAAG;AAAA,IACH,QAAQ,MAAM,EAAE,IAAI;AAAA,EAAA,EACpB;AACF,QAAM,SAA0B;AAAA,IAC9B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,IAC7B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,IAC7B,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK;AAAA,EAAA;AAI/B,QAAM,WAAW,yBAAA;AACjB,MAAI,YAAY,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,iBAAiB,GAAG;AACpE,cAAU,KAAK;AAAA,MACb,MAAM;AAAA,MACN,SAAS,SAAS;AAAA,MAClB,QAAQ,SAAS;AAAA,MACjB,QAAQ,EAAE,YAAY,SAAS,MAAA;AAAA,IAAM,CACtC;AACD,QAAI,CAAC,OAAO,MAAM,KAAK,CAAC,MAAM,EAAE,WAAW,WAAW,CAAC,GAAG;AACxD,aAAO,MAAM,KAAK,YAAY,iBAAiB,EAAE;AAAA,IACnD;AAAA,EACF;AAEA,QAAM,OAAiB,MAAM;AAC7B,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,MAAM;AAAA,IACzB,wBAAwB,MAAM;AAAA,IAC9B,OAAO,MAAM;AAAA,IACb,YAAY,OAAO;AAAA,IACnB;AAAA,EAAA;AAEJ;AAyBO,SAAS,iBAAiB,YAAgC,IAAuB;AACtF,QAAM,SAAS,cAAA;AACf,QAAM,WAAW,CAAC,GAAG,OAAO,QAAQ;AAGpC,MAAI,QAA4B,OAAO,OAAO;AAC9C,MAAI,cAAoD,OAAO,SAAS,WAAW;AAEnF,MAAI,QAAQ,IAAI,gBAAgB;AAC9B,UAAM,IAAI,QAAQ,IAAI;AACtB,QAAI,MAAM,UAAU,MAAM,aAAa;AACrC,cAAQ;AACR,oBAAc;AAAA,IAChB,OAAO;AACL,eAAS,KAAK,mBAAmB,CAAC,0CAA0C;AAAA,IAC9E;AAAA,EACF;AACA,MAAI,UAAU,aAAa,QAAW;AACpC,QAAI,UAAU,aAAa,UAAU,UAAU,aAAa,aAAa;AACvE,cAAQ,UAAU;AAClB,oBAAc;AAAA,IAChB,OAAO;AACL,eAAS,KAAK,YAAY,UAAU,QAAQ,0CAA0C;AAAA,IACxF;AAAA,EACF;AAGA,MAAI,cAAc,OAAO,OAAO;AAChC,MAAI,eAA2D,OAAO,SAClE,WACA;AAEJ,MAAI,QAAQ,IAAI,iBAAiB;AAC/B,QAAI,KAAK,KAAK,QAAQ,IAAI,eAAe,GAAG;AAC1C,oBAAc,QAAQ,IAAI;AAC1B,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS;AAAA,QACP,oBAAoB,QAAQ,IAAI,eAAe;AAAA,MAAA;AAAA,IAEnD;AAAA,EACF;AACA,MAAI,UAAU,cAAc,QAAW;AACrC,QAAI,KAAK,KAAK,UAAU,SAAS,GAAG;AAClC,oBAAc,UAAU;AACxB,qBAAe;AAAA,IACjB,OAAO;AACL,eAAS,KAAK,aAAa,UAAU,SAAS,kCAAkC;AAAA,IAClF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,EAAE,OAAO,aAAa,aAAa,aAAA;AAAA,IAC3C,YAAY,OAAO;AAAA,IACnB;AAAA,EAAA;AAEJ;"}

package/dist/{attachment-sync-Br5ieAsw.js → attachment-sync-CmPm-h69.js}

@@ -1,5 +1,5 @@
 import { existsSync } from "node:fs";
-import { s as syncNowViaSystemEvents, o as openConversationInMessages } from "./shutdown-B4_Yuro3.js";
+import { s as syncNowViaSystemEvents, o as openConversationInMessages } from "./shutdown-BJyTvhvf.js";
 function defaultAttachmentSyncDeps() {
   return {
     fileExists: (p) => existsSync(p),
@@ -76,4 +76,4 @@ export {
   defaultAttachmentSyncDeps,
   ensureAttachmentDownloaded
 };
-//# sourceMappingURL=attachment-sync-Br5ieAsw.js.map
+//# sourceMappingURL=attachment-sync-CmPm-h69.js.map

package/dist/{attachment-sync-Br5ieAsw.js.map → attachment-sync-CmPm-h69.js.map}

@@ -1 +1 @@
-{"version":3,"file":"attachment-sync-Br5ieAsw.js","sources":["../src/attachment-sync.ts"],"sourcesContent":["/**\n * Attachment sync nudge (Stage 7) — best-effort, tiered coaxing of Messages.app\n * into downloading an attachment whose bytes aren't on disk yet\n * (`transfer_state === -1`, purged/never-downloaded). iCloud syncs Messages\n * media only while a conversation is OPEN, and there is no public download API\n * (IMTransferAgent is a private SIP'd daemon). So we:\n *\n *   Tier 1 (default): open the conversation in Messages via an `imessage:` URL\n *     — community-verified to make the app pull that thread's media — then poll\n *     `existsSync` until the file appears or a timeout elapses.\n *   Tier 2 (opt-in, `nudge.tier2SyncNow`): UI-script Messages ▸ Settings ▸\n *     iMessage ▸ \"Sync Now\". Needs Accessibility permission; we detect the\n *     missing-permission error and return an actionable hint.\n *   Tier 3: per-conversation \"download all\" UI script — documented only\n *     (too fragile across macOS versions), no code here.\n *\n * This module is PURE ORCHESTRATION: every side effect (AppleScript, fs, timers)\n * is injected via {@link AttachmentSyncDeps}, so the tier/poll/timeout logic is\n * unit-tested deterministically with no real app launch and no real clock. The\n * default deps wire the real AppleScript primitives (themselves mocked under\n * Vitest) + node fs/timers.\n */\nimport { existsSync } from \"node:fs\";\nimport {\n  openConversationInMessages,\n  type SyncNowOutcome,\n  syncNowViaSystemEvents,\n} from \"./applescript.js\";\n\nexport type { SyncNowOutcome };\n\n/** The subset of the resolved `nudge` config this module needs. */\nexport interface AttachmentSyncConfig {\n  /** Master switch — when false, no tier runs and we never touch Messages. */\n  enabled: boolean;\n  /** Enable Tier 2 (System Events \"Sync Now\"). Default off. */\n  tier2SyncNow: boolean;\n  /** How long to wait for the file to appear after a nudge, in seconds. */\n  timeoutSeconds: number;\n  /** Poll cadence while waiting. Default 1000ms; floored at 100ms. */\n  pollIntervalMs?: number;\n}\n\n/** Highest tier that actually ran (0 = none). */\nexport type SyncTier = 0 | 1 | 2;\n\nexport interface EnsureDownloadedInput {\n  /** Absolute path (already `~`-expanded) we expect the file to appear at. */\n  filePath: string;\n  /** Chat identifier (handle or GUID) to open in Messages for Tier 1. */\n  chatId?: string | null;\n  /** `attachment.transfer_state` from chat.db (-1 = undownloaded); advisory. */\n  transferState?: number | null;\n}\n\nexport interface EnsureDownloadedResult {\n  /** True iff the file is on disk when we return. */\n  downloaded: boolean;\n  /** True iff we actually ran at least one tier (vs short-circuited). */\n  attempted: boolean;\n  /** Highest tier attempted. */\n  tier: SyncTier;\n  /** Machine-readable reason when not downloaded / skipped. */\n  reason?: string;\n  /** Human-actionable remediation (e.g. grant Accessibility). */\n  hint?: string;\n}\n\n/** All side effects the orchestrator needs, injectable for tests. */\nexport interface AttachmentSyncDeps {\n  fileExists(path: string): boolean;\n  openConversation(chatId: string): Promise<void>;\n  syncNow(): Promise<SyncNowOutcome>;\n  sleep(ms: number): Promise<void>;\n  now(): number;\n}\n\n/** Production deps: real fs + timers + AppleScript (AppleScript self-mocks under Vitest). */\nexport function defaultAttachmentSyncDeps(): AttachmentSyncDeps {\n  return {\n    fileExists: (p) => existsSync(p),\n    openConversation: (chatId) => openConversationInMessages(chatId),\n    syncNow: () => syncNowViaSystemEvents(),\n    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),\n    now: () => Date.now(),\n  };\n}\n\nfunction errMsg(e: unknown): string {\n  return e instanceof Error ? e.message : String(e);\n}\n\n/**\n * Poll `fileExists` until it's true or `timeoutMs` elapses (measured against\n * `deps.now()`). Checks immediately first — opening the chat may have already\n * pulled the file — then sleeps `pollIntervalMs` between checks.\n */\nasync function pollForFile(\n  deps: AttachmentSyncDeps,\n  path: string,\n  timeoutMs: number,\n  pollIntervalMs: number,\n): Promise<boolean> {\n  const start = deps.now();\n  if (deps.fileExists(path)) return true;\n  while (deps.now() - start < timeoutMs) {\n    await deps.sleep(pollIntervalMs);\n    if (deps.fileExists(path)) return true;\n  }\n  return false;\n}\n\n/**\n * Ensure `input.filePath` is on disk, nudging Messages to download it if not.\n * Best-effort: returns a structured result rather than throwing. Idempotent and\n * cheap when the file already exists (no side effects) or when disabled.\n */\nexport async function ensureAttachmentDownloaded(\n  input: EnsureDownloadedInput,\n  config: AttachmentSyncConfig,\n  deps: AttachmentSyncDeps = defaultAttachmentSyncDeps(),\n): Promise<EnsureDownloadedResult> {\n  const { filePath } = input;\n\n  // Already on disk → nothing to do (no app launch).\n  if (deps.fileExists(filePath)) {\n    return { downloaded: true, attempted: false, tier: 0 };\n  }\n  if (!config.enabled) {\n    return { downloaded: false, attempted: false, tier: 0, reason: \"sync nudge disabled\" };\n  }\n\n  const pollIntervalMs = Math.max(100, config.pollIntervalMs ?? 1000);\n  const timeoutMs = Math.max(1000, config.timeoutSeconds * 1000);\n  let tier: SyncTier = 0;\n  let hint: string | undefined;\n\n  // ── Tier 1: open the conversation so Messages pulls its media ──\n  if (input.chatId) {\n    tier = 1;\n    try {\n      await deps.openConversation(input.chatId);\n    } catch (e) {\n      hint = `Could not open the conversation in Messages: ${errMsg(e)}`;\n    }\n    if (await pollForFile(deps, filePath, timeoutMs, pollIntervalMs)) {\n      return { downloaded: true, attempted: true, tier };\n    }\n  } else {\n    hint = \"No chat identifier available to open the conversation in Messages.\";\n  }\n\n  // ── Tier 2 (opt-in): System Events \"Sync Now\" ──\n  if (config.tier2SyncNow) {\n    tier = 2;\n    const outcome = await deps.syncNow();\n    if (!outcome.ok) {\n      if (outcome.needsAccessibility) {\n        return {\n          downloaded: deps.fileExists(filePath),\n          attempted: true,\n          tier,\n          reason: \"accessibility-permission-required\",\n          hint: \"Sync Now needs Accessibility permission. Grant it in System Settings ▸ Privacy & Security ▸ Accessibility for your terminal/IDE, then retry.\",\n        };\n      }\n      hint = outcome.error ?? hint ?? \"Sync Now failed.\";\n    } else if (await pollForFile(deps, filePath, timeoutMs, pollIntervalMs)) {\n      return { downloaded: true, attempted: true, tier };\n    }\n  }\n\n  return {\n    downloaded: deps.fileExists(filePath),\n    attempted: tier > 0,\n    tier,\n    reason: tier === 0 ? \"no sync tier could run\" : \"attachment did not download in time\",\n    hint,\n  };\n}\n"],"names":[],"mappings":";;AA8EO,SAAS,4BAAgD;AAC9D,SAAO;AAAA,IACL,YAAY,CAAC,MAAM,WAAW,CAAC;AAAA,IAC/B,kBAAkB,CAAC,WAAW,2BAA2B,MAAM;AAAA,IAC/D,SAAS,MAAM,uBAAA;AAAA,IACf,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IAC/D,KAAK,MAAM,KAAK,IAAA;AAAA,EAAI;AAExB;AAEA,SAAS,OAAO,GAAoB;AAClC,SAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAClD;AAOA,eAAe,YACb,MACA,MACA,WACA,gBACkB;AAClB,QAAM,QAAQ,KAAK,IAAA;AACnB,MAAI,KAAK,WAAW,IAAI,EAAG,QAAO;AAClC,SAAO,KAAK,QAAQ,QAAQ,WAAW;AACrC,UAAM,KAAK,MAAM,cAAc;AAC/B,QAAI,KAAK,WAAW,IAAI,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAOA,eAAsB,2BACpB,OACA,QACA,OAA2B,6BACM;AACjC,QAAM,EAAE,aAAa;AAGrB,MAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,WAAO,EAAE,YAAY,MAAM,WAAW,OAAO,MAAM,EAAA;AAAA,EACrD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,YAAY,OAAO,WAAW,OAAO,MAAM,GAAG,QAAQ,sBAAA;AAAA,EACjE;AAEA,QAAM,iBAAiB,KAAK,IAAI,KAAK,OAAO,kBAAkB,GAAI;AAClE,QAAM,YAAY,KAAK,IAAI,KAAM,OAAO,iBAAiB,GAAI;AAC7D,MAAI,OAAiB;AACrB,MAAI;AAGJ,MAAI,MAAM,QAAQ;AAChB,WAAO;AACP,QAAI;AACF,YAAM,KAAK,iBAAiB,MAAM,MAAM;AAAA,IAC1C,SAAS,GAAG;AACV,aAAO,gDAAgD,OAAO,CAAC,CAAC;AAAA,IAClE;AACA,QAAI,MAAM,YAAY,MAAM,UAAU,WAAW,cAAc,GAAG;AAChE,aAAO,EAAE,YAAY,MAAM,WAAW,MAAM,KAAA;AAAA,IAC9C;AAAA,EACF,OAAO;AACL,WAAO;AAAA,EACT;AAGA,MAAI,OAAO,cAAc;AACvB,WAAO;AACP,UAAM,UAAU,MAAM,KAAK,QAAA;AAC3B,QAAI,CAAC,QAAQ,IAAI;AACf,UAAI,QAAQ,oBAAoB;AAC9B,eAAO;AAAA,UACL,YAAY,KAAK,WAAW,QAAQ;AAAA,UACpC,WAAW;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,MAAM;AAAA,QAAA;AAAA,MAEV;AACA,aAAO,QAAQ,SAAS,QAAQ;AAAA,IAClC,WAAW,MAAM,YAAY,MAAM,UAAU,WAAW,cAAc,GAAG;AACvE,aAAO,EAAE,YAAY,MAAM,WAAW,MAAM,KAAA;AAAA,IAC9C;AAAA,EACF;AAEA,SAAO;AAAA,IACL,YAAY,KAAK,WAAW,QAAQ;AAAA,IACpC,WAAW,OAAO;AAAA,IAClB;AAAA,IACA,QAAQ,SAAS,IAAI,2BAA2B;AAAA,IAChD;AAAA,EAAA;AAEJ;"}
+{"version":3,"file":"attachment-sync-CmPm-h69.js","sources":["../src/attachment-sync.ts"],"sourcesContent":["/**\n * Attachment sync nudge (Stage 7) — best-effort, tiered coaxing of Messages.app\n * into downloading an attachment whose bytes aren't on disk yet\n * (`transfer_state === -1`, purged/never-downloaded). iCloud syncs Messages\n * media only while a conversation is OPEN, and there is no public download API\n * (IMTransferAgent is a private SIP'd daemon). So we:\n *\n *   Tier 1 (default): open the conversation in Messages via an `imessage:` URL\n *     — community-verified to make the app pull that thread's media — then poll\n *     `existsSync` until the file appears or a timeout elapses.\n *   Tier 2 (opt-in, `nudge.tier2SyncNow`): UI-script Messages ▸ Settings ▸\n *     iMessage ▸ \"Sync Now\". Needs Accessibility permission; we detect the\n *     missing-permission error and return an actionable hint.\n *   Tier 3: per-conversation \"download all\" UI script — documented only\n *     (too fragile across macOS versions), no code here.\n *\n * This module is PURE ORCHESTRATION: every side effect (AppleScript, fs, timers)\n * is injected via {@link AttachmentSyncDeps}, so the tier/poll/timeout logic is\n * unit-tested deterministically with no real app launch and no real clock. The\n * default deps wire the real AppleScript primitives (themselves mocked under\n * Vitest) + node fs/timers.\n */\nimport { existsSync } from \"node:fs\";\nimport {\n  openConversationInMessages,\n  type SyncNowOutcome,\n  syncNowViaSystemEvents,\n} from \"./applescript.js\";\n\nexport type { SyncNowOutcome };\n\n/** The subset of the resolved `nudge` config this module needs. */\nexport interface AttachmentSyncConfig {\n  /** Master switch — when false, no tier runs and we never touch Messages. */\n  enabled: boolean;\n  /** Enable Tier 2 (System Events \"Sync Now\"). Default off. */\n  tier2SyncNow: boolean;\n  /** How long to wait for the file to appear after a nudge, in seconds. */\n  timeoutSeconds: number;\n  /** Poll cadence while waiting. Default 1000ms; floored at 100ms. */\n  pollIntervalMs?: number;\n}\n\n/** Highest tier that actually ran (0 = none). */\nexport type SyncTier = 0 | 1 | 2;\n\nexport interface EnsureDownloadedInput {\n  /** Absolute path (already `~`-expanded) we expect the file to appear at. */\n  filePath: string;\n  /** Chat identifier (handle or GUID) to open in Messages for Tier 1. */\n  chatId?: string | null;\n  /** `attachment.transfer_state` from chat.db (-1 = undownloaded); advisory. */\n  transferState?: number | null;\n}\n\nexport interface EnsureDownloadedResult {\n  /** True iff the file is on disk when we return. */\n  downloaded: boolean;\n  /** True iff we actually ran at least one tier (vs short-circuited). */\n  attempted: boolean;\n  /** Highest tier attempted. */\n  tier: SyncTier;\n  /** Machine-readable reason when not downloaded / skipped. */\n  reason?: string;\n  /** Human-actionable remediation (e.g. grant Accessibility). */\n  hint?: string;\n}\n\n/** All side effects the orchestrator needs, injectable for tests. */\nexport interface AttachmentSyncDeps {\n  fileExists(path: string): boolean;\n  openConversation(chatId: string): Promise<void>;\n  syncNow(): Promise<SyncNowOutcome>;\n  sleep(ms: number): Promise<void>;\n  now(): number;\n}\n\n/** Production deps: real fs + timers + AppleScript (AppleScript self-mocks under Vitest). */\nexport function defaultAttachmentSyncDeps(): AttachmentSyncDeps {\n  return {\n    fileExists: (p) => existsSync(p),\n    openConversation: (chatId) => openConversationInMessages(chatId),\n    syncNow: () => syncNowViaSystemEvents(),\n    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),\n    now: () => Date.now(),\n  };\n}\n\nfunction errMsg(e: unknown): string {\n  return e instanceof Error ? e.message : String(e);\n}\n\n/**\n * Poll `fileExists` until it's true or `timeoutMs` elapses (measured against\n * `deps.now()`). Checks immediately first — opening the chat may have already\n * pulled the file — then sleeps `pollIntervalMs` between checks.\n */\nasync function pollForFile(\n  deps: AttachmentSyncDeps,\n  path: string,\n  timeoutMs: number,\n  pollIntervalMs: number,\n): Promise<boolean> {\n  const start = deps.now();\n  if (deps.fileExists(path)) return true;\n  while (deps.now() - start < timeoutMs) {\n    await deps.sleep(pollIntervalMs);\n    if (deps.fileExists(path)) return true;\n  }\n  return false;\n}\n\n/**\n * Ensure `input.filePath` is on disk, nudging Messages to download it if not.\n * Best-effort: returns a structured result rather than throwing. Idempotent and\n * cheap when the file already exists (no side effects) or when disabled.\n */\nexport async function ensureAttachmentDownloaded(\n  input: EnsureDownloadedInput,\n  config: AttachmentSyncConfig,\n  deps: AttachmentSyncDeps = defaultAttachmentSyncDeps(),\n): Promise<EnsureDownloadedResult> {\n  const { filePath } = input;\n\n  // Already on disk → nothing to do (no app launch).\n  if (deps.fileExists(filePath)) {\n    return { downloaded: true, attempted: false, tier: 0 };\n  }\n  if (!config.enabled) {\n    return { downloaded: false, attempted: false, tier: 0, reason: \"sync nudge disabled\" };\n  }\n\n  const pollIntervalMs = Math.max(100, config.pollIntervalMs ?? 1000);\n  const timeoutMs = Math.max(1000, config.timeoutSeconds * 1000);\n  let tier: SyncTier = 0;\n  let hint: string | undefined;\n\n  // ── Tier 1: open the conversation so Messages pulls its media ──\n  if (input.chatId) {\n    tier = 1;\n    try {\n      await deps.openConversation(input.chatId);\n    } catch (e) {\n      hint = `Could not open the conversation in Messages: ${errMsg(e)}`;\n    }\n    if (await pollForFile(deps, filePath, timeoutMs, pollIntervalMs)) {\n      return { downloaded: true, attempted: true, tier };\n    }\n  } else {\n    hint = \"No chat identifier available to open the conversation in Messages.\";\n  }\n\n  // ── Tier 2 (opt-in): System Events \"Sync Now\" ──\n  if (config.tier2SyncNow) {\n    tier = 2;\n    const outcome = await deps.syncNow();\n    if (!outcome.ok) {\n      if (outcome.needsAccessibility) {\n        return {\n          downloaded: deps.fileExists(filePath),\n          attempted: true,\n          tier,\n          reason: \"accessibility-permission-required\",\n          hint: \"Sync Now needs Accessibility permission. Grant it in System Settings ▸ Privacy & Security ▸ Accessibility for your terminal/IDE, then retry.\",\n        };\n      }\n      hint = outcome.error ?? hint ?? \"Sync Now failed.\";\n    } else if (await pollForFile(deps, filePath, timeoutMs, pollIntervalMs)) {\n      return { downloaded: true, attempted: true, tier };\n    }\n  }\n\n  return {\n    downloaded: deps.fileExists(filePath),\n    attempted: tier > 0,\n    tier,\n    reason: tier === 0 ? \"no sync tier could run\" : \"attachment did not download in time\",\n    hint,\n  };\n}\n"],"names":[],"mappings":";;AA8EO,SAAS,4BAAgD;AAC9D,SAAO;AAAA,IACL,YAAY,CAAC,MAAM,WAAW,CAAC;AAAA,IAC/B,kBAAkB,CAAC,WAAW,2BAA2B,MAAM;AAAA,IAC/D,SAAS,MAAM,uBAAA;AAAA,IACf,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IAC/D,KAAK,MAAM,KAAK,IAAA;AAAA,EAAI;AAExB;AAEA,SAAS,OAAO,GAAoB;AAClC,SAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAClD;AAOA,eAAe,YACb,MACA,MACA,WACA,gBACkB;AAClB,QAAM,QAAQ,KAAK,IAAA;AACnB,MAAI,KAAK,WAAW,IAAI,EAAG,QAAO;AAClC,SAAO,KAAK,QAAQ,QAAQ,WAAW;AACrC,UAAM,KAAK,MAAM,cAAc;AAC/B,QAAI,KAAK,WAAW,IAAI,EAAG,QAAO;AAAA,EACpC;AACA,SAAO;AACT;AAOA,eAAsB,2BACpB,OACA,QACA,OAA2B,6BACM;AACjC,QAAM,EAAE,aAAa;AAGrB,MAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,WAAO,EAAE,YAAY,MAAM,WAAW,OAAO,MAAM,EAAA;AAAA,EACrD;AACA,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO,EAAE,YAAY,OAAO,WAAW,OAAO,MAAM,GAAG,QAAQ,sBAAA;AAAA,EACjE;AAEA,QAAM,iBAAiB,KAAK,IAAI,KAAK,OAAO,kBAAkB,GAAI;AAClE,QAAM,YAAY,KAAK,IAAI,KAAM,OAAO,iBAAiB,GAAI;AAC7D,MAAI,OAAiB;AACrB,MAAI;AAGJ,MAAI,MAAM,QAAQ;AAChB,WAAO;AACP,QAAI;AACF,YAAM,KAAK,iBAAiB,MAAM,MAAM;AAAA,IAC1C,SAAS,GAAG;AACV,aAAO,gDAAgD,OAAO,CAAC,CAAC;AAAA,IAClE;AACA,QAAI,MAAM,YAAY,MAAM,UAAU,WAAW,cAAc,GAAG;AAChE,aAAO,EAAE,YAAY,MAAM,WAAW,MAAM,KAAA;AAAA,IAC9C;AAAA,EACF,OAAO;AACL,WAAO;AAAA,EACT;AAGA,MAAI,OAAO,cAAc;AACvB,WAAO;AACP,UAAM,UAAU,MAAM,KAAK,QAAA;AAC3B,QAAI,CAAC,QAAQ,IAAI;AACf,UAAI,QAAQ,oBAAoB;AAC9B,eAAO;AAAA,UACL,YAAY,KAAK,WAAW,QAAQ;AAAA,UACpC,WAAW;AAAA,UACX;AAAA,UACA,QAAQ;AAAA,UACR,MAAM;AAAA,QAAA;AAAA,MAEV;AACA,aAAO,QAAQ,SAAS,QAAQ;AAAA,IAClC,WAAW,MAAM,YAAY,MAAM,UAAU,WAAW,cAAc,GAAG;AACvE,aAAO,EAAE,YAAY,MAAM,WAAW,MAAM,KAAA;AAAA,IAC9C;AAAA,EACF;AAEA,SAAO;AAAA,IACL,YAAY,KAAK,WAAW,QAAQ;AAAA,IACpC,WAAW,OAAO;AAAA,IAClB;AAAA,IACA,QAAQ,SAAS,IAAI,2BAA2B;AAAA,IAChD;AAAA,EAAA;AAEJ;"}

package/dist/{change-watcher-YYAxN4I4.js → change-watcher-DRnLiHpP.js}

@@ -1,6 +1,6 @@
 import { watch } from "node:fs";
 import { dirname, basename } from "node:path";
-import { w as warn, i as info } from "./shutdown-B4_Yuro3.js";
+import { w as warn, i as info } from "./shutdown-BJyTvhvf.js";
 class ChangeWatcher {
   dbPath;
   db;
@@ -200,4 +200,4 @@ function classify(message) {
 export {
   ChangeWatcher
 };
-//# sourceMappingURL=change-watcher-YYAxN4I4.js.map
+//# sourceMappingURL=change-watcher-DRnLiHpP.js.map

package/dist/{change-watcher-YYAxN4I4.js.map → change-watcher-DRnLiHpP.js.map}

@@ -1 +1 @@
-{"version":3,"file":"change-watcher-YYAxN4I4.js","sources":["../src/change-watcher.ts"],"sourcesContent":["/**\n * ChangeWatcher — turns chat.db writes into typed EventBus batches.\n *\n * Detection uses THREE layered primitives (the original design's single\n * directory watch was blind in production — see below):\n *\n *  1. A file watch on `chat.db-wal` ITSELF — kqueue on an opened fd, which\n *     delivers write/extend events regardless of which process writes.\n *  2. A directory watch on dirname(dbPath) — re-arms the file watch when a\n *     checkpoint truncates/recreates the wal (stale inode), and is the\n *     drain signal on platforms where it does report file events.\n *  3. A slow safety poll (default 10s; one MAX(ROWID) query per tick) that\n *     always runs alongside the watches.\n *\n * Why not the original directory watch alone: on the REAL\n * `~/Library/Messages` it armed cleanly and then delivered NOTHING while\n * rows landed in chat.db (observed live, 2026-08-10; suspected TCC/FSEvents\n * filtering on the protected directory — plain temp dirs DO report appends,\n * which is why the integration tests couldn't catch it). The file watch and\n * the safety poll are the primitives that don't depend on that delivery.\n *\n * If fs.watch throws outright (exotic filesystems), degrade to the\n * documented fast-poll fallback of the same drain path (default 2s).\n * The authoritative cursor is always a high-water ROWID, never file state.\n *\n * On a signal: debounce ~150ms (one logical message = several WAL writes),\n * then delta-read rows past the high-water mark via\n * `IMessageDB.getMessagesAfterRowid` — the same parse/convert pipeline as\n * every other reader (\"one parser, N callers\"; no forked streamer parser) —\n * classify, and emit ONE coalesced batch per drain. Bulk syncs loop the\n * delta read in `maxBatch` pages so thousands of rows become a few batches,\n * not a subscriber storm.\n *\n * The watcher never throws into the host process: drain errors are logged\n * and retried on the next event. Timers are unref'd; `stop()` is idempotent\n * and safe to register as a shutdown cleanup (the ENTRY POINT registers it —\n * this module stays side-effect-free at import, like the rest of core).\n */\n\nimport { watch } from \"node:fs\";\nimport { basename, dirname } from \"node:path\";\nimport type { ChangeEvent, EventBus } from \"./event-bus.js\";\nimport { info, warn } from \"./logger.js\";\nimport type { Message } from \"./types.js\";\n\n/** The DB surface the watcher needs — injectable for tests. */\nexport interface ChangeWatcherDb {\n  getMaxMessageRowId(): number;\n  getMessagesAfterRowid(afterRowid: number, limit?: number): Promise<Message[]>;\n}\n\nexport interface ChangeWatcherOptions {\n  /** Path to chat.db — the watcher watches its parent directory. */\n  dbPath: string;\n  db: ChangeWatcherDb;\n  bus: EventBus;\n  /** Trailing-edge debounce between an fs event and the delta read. */\n  debounceMs?: number;\n  /** Poll cadence for the degenerate no-fs.watch fallback. */\n  pollFallbackMs?: number;\n  /** Slow backstop poll cadence while fs.watch is armed (0 disables). */\n  safetyPollMs?: number;\n  /** Rows per delta page; drains loop while a page comes back full. */\n  maxBatch?: number;\n}\n\nexport class ChangeWatcher {\n  private readonly dbPath: string;\n  private readonly db: ChangeWatcherDb;\n  private readonly bus: EventBus;\n  private readonly debounceMs: number;\n  private readonly pollFallbackMs: number;\n  private readonly maxBatch: number;\n\n  private readonly safetyPollMs: number;\n\n  private watcher: ReturnType<typeof watch> | null = null;\n  private walWatcher: ReturnType<typeof watch> | null = null;\n  private pollTimer: ReturnType<typeof setInterval> | null = null;\n  private safetyTimer: ReturnType<typeof setInterval> | null = null;\n  private debounceTimer: ReturnType<typeof setTimeout> | null = null;\n  private highWaterRowid = 0;\n  private draining = false;\n  private rearm = false;\n  private started = false;\n  private usingPollFallback = false;\n\n  constructor(opts: ChangeWatcherOptions) {\n    this.dbPath = opts.dbPath;\n    this.db = opts.db;\n    this.bus = opts.bus;\n    this.debounceMs = opts.debounceMs ?? 150;\n    this.pollFallbackMs = opts.pollFallbackMs ?? 2_000;\n    this.safetyPollMs = opts.safetyPollMs ?? 10_000;\n    this.maxBatch = opts.maxBatch ?? 500;\n  }\n\n  /**\n   * Seed the high-water mark from the CURRENT max ROWID (history is the\n   * initial-load path's job; the stream carries only what happens next) and\n   * arm the directory watch — or the poll fallback if fs.watch throws.\n   */\n  start(): void {\n    if (this.started) return;\n    this.started = true;\n    this.highWaterRowid = this.db.getMaxMessageRowId();\n\n    const dir = dirname(this.dbPath);\n    const dbFile = basename(this.dbPath);\n    try {\n      this.watcher = watch(dir, (eventType, filename) => {\n        // Directory watches only report ENTRY changes (create/rename/delete)\n        // on macOS — a checkpoint truncating/recreating the wal lands here.\n        // Any wal entry event means the file watch's inode may be stale:\n        // re-arm it, then drain. filename can be null on some platforms —\n        // treat that as a hit.\n        if (filename === null || filename === `${dbFile}-wal` || filename === dbFile) {\n          if (eventType === \"rename\" || this.walWatcher === null) this.armWalWatch();\n          this.scheduleDrain();\n        }\n      });\n      // Like the timers, the fs.watch handle must never keep the process\n      // alive on its own — entry points arm the watcher lazily inside\n      // request handlers, and shutdown() already stops it explicitly.\n      this.watcher.unref();\n      this.watcher.on(\"error\", (err) => {\n        warn(\"change_watcher_fs_error_falling_back_to_poll\", { message: String(err) });\n        this.teardownWatch();\n        this.armPollFallback();\n      });\n      this.armWalWatch();\n      this.armSafetyPoll();\n      info(\"change_watcher_started\", {\n        dir,\n        high_water_rowid: this.highWaterRowid,\n        debounce_ms: this.debounceMs,\n        wal_file_watch: this.walWatcher !== null,\n        safety_poll_ms: this.safetyPollMs,\n      });\n    } catch (err) {\n      warn(\"change_watcher_fs_watch_unavailable\", { message: String(err) });\n      this.armPollFallback();\n    }\n  }\n\n  /**\n   * Watch the WAL file itself — the only fs.watch mode that fires on APPENDS\n   * on macOS (kqueue on the file). Best-effort: the wal may not exist yet\n   * (fresh db, post-checkpoint gap); the directory watch re-arms us when its\n   * entry appears, and the safety poll covers the meantime.\n   */\n  private armWalWatch(): void {\n    if (!this.started) return;\n    if (this.walWatcher) {\n      this.walWatcher.close();\n      this.walWatcher = null;\n    }\n    try {\n      this.walWatcher = watch(`${this.dbPath}-wal`, () => {\n        this.scheduleDrain();\n      });\n      this.walWatcher.unref();\n      this.walWatcher.on(\"error\", () => {\n        // Stale inode (checkpoint) or vanished file — the dir watch will\n        // re-arm on the next wal entry event; don't fall back to full poll.\n        if (this.walWatcher) {\n          this.walWatcher.close();\n          this.walWatcher = null;\n        }\n      });\n    } catch {\n      // ENOENT etc. — covered by dir watch + safety poll.\n      this.walWatcher = null;\n    }\n  }\n\n  /** Slow backstop drain while fs.watch is armed — catches silent watches. */\n  private armSafetyPoll(): void {\n    if (this.safetyTimer || this.safetyPollMs <= 0) return;\n    this.safetyTimer = setInterval(() => {\n      void this.drain();\n    }, this.safetyPollMs);\n    this.safetyTimer.unref();\n  }\n\n  /** Idempotent teardown — clears the watches, timers, and pending drains. */\n  stop(): void {\n    this.started = false;\n    this.teardownWatch();\n    if (this.pollTimer) {\n      clearInterval(this.pollTimer);\n      this.pollTimer = null;\n    }\n    if (this.safetyTimer) {\n      clearInterval(this.safetyTimer);\n      this.safetyTimer = null;\n    }\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n  }\n\n  /** Current cursor — exposed for the dev-stats panel and tests. */\n  getHighWaterRowid(): number {\n    return this.highWaterRowid;\n  }\n\n  /** True when running in the degenerate poll mode (fs.watch unavailable). */\n  isPolling(): boolean {\n    return this.usingPollFallback;\n  }\n\n  /**\n   * Trigger a delta read now, bypassing the debounce. The poll fallback and\n   * tests use this; the fs.watch path goes through `scheduleDrain`.\n   */\n  async pump(): Promise<void> {\n    await this.drain();\n  }\n\n  private teardownWatch(): void {\n    if (this.watcher) {\n      this.watcher.close();\n      this.watcher = null;\n    }\n    if (this.walWatcher) {\n      this.walWatcher.close();\n      this.walWatcher = null;\n    }\n  }\n\n  private armPollFallback(): void {\n    if (this.pollTimer || !this.started) return;\n    this.usingPollFallback = true;\n    this.pollTimer = setInterval(() => {\n      void this.drain();\n    }, this.pollFallbackMs);\n    this.pollTimer.unref();\n    info(\"change_watcher_poll_fallback_armed\", { interval_ms: this.pollFallbackMs });\n  }\n\n  private scheduleDrain(): void {\n    if (!this.started) return;\n    if (this.debounceTimer) clearTimeout(this.debounceTimer);\n    this.debounceTimer = setTimeout(() => {\n      this.debounceTimer = null;\n      void this.drain();\n    }, this.debounceMs);\n    this.debounceTimer.unref();\n  }\n\n  /**\n   * Read rows past the high-water mark and emit them as one batch per page.\n   * Re-entrancy guard: fs events landing mid-drain set `rearm` so the drain\n   * runs once more instead of overlapping (overlapping reads would emit\n   * duplicate rows — both would read from the same stale cursor).\n   */\n  private async drain(): Promise<void> {\n    if (this.draining) {\n      this.rearm = true;\n      return;\n    }\n    this.draining = true;\n    try {\n      // Loop while pages come back full — a bulk sync writes thousands of\n      // rows in one burst and each page becomes one coalesced batch.\n      for (;;) {\n        const messages = await this.db.getMessagesAfterRowid(this.highWaterRowid, this.maxBatch);\n        if (messages.length === 0) break;\n        for (const m of messages) {\n          if (m.id > this.highWaterRowid) this.highWaterRowid = m.id;\n        }\n        this.bus.emit(messages.map(classify));\n        if (messages.length < this.maxBatch) break;\n      }\n    } catch (err) {\n      // Never throw into the host — the next WAL event retries naturally.\n      warn(\"change_watcher_drain_failed\", { message: String(err) });\n    } finally {\n      this.draining = false;\n      if (this.rearm) {\n        this.rearm = false;\n        void this.drain();\n      }\n    }\n  }\n}\n\n/**\n * New-ROWID classification. Edited/unsent rows mutate EXISTING ROWIDs and are\n * invisible to the high-water delta — they belong to the mutation-detection\n * backlog item (date_edited / is_read deltas), not this path.\n */\nfunction classify(message: Message): ChangeEvent {\n  return message.isReaction ? { type: \"reaction\", message } : { type: \"message.new\", message };\n}\n"],"names":[],"mappings":";;;AAkEO,MAAM,cAAc;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EAET,UAA2C;AAAA,EAC3C,aAA8C;AAAA,EAC9C,YAAmD;AAAA,EACnD,cAAqD;AAAA,EACrD,gBAAsD;AAAA,EACtD,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,oBAAoB;AAAA,EAE5B,YAAY,MAA4B;AACtC,SAAK,SAAS,KAAK;AACnB,SAAK,KAAK,KAAK;AACf,SAAK,MAAM,KAAK;AAChB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,iBAAiB,KAAK,kBAAkB;AAC7C,SAAK,eAAe,KAAK,gBAAgB;AACzC,SAAK,WAAW,KAAK,YAAY;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAc;AACZ,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,iBAAiB,KAAK,GAAG,mBAAA;AAE9B,UAAM,MAAM,QAAQ,KAAK,MAAM;AAC/B,UAAM,SAAS,SAAS,KAAK,MAAM;AACnC,QAAI;AACF,WAAK,UAAU,MAAM,KAAK,CAAC,WAAW,aAAa;AAMjD,YAAI,aAAa,QAAQ,aAAa,GAAG,MAAM,UAAU,aAAa,QAAQ;AAC5E,cAAI,cAAc,YAAY,KAAK,eAAe,WAAW,YAAA;AAC7D,eAAK,cAAA;AAAA,QACP;AAAA,MACF,CAAC;AAID,WAAK,QAAQ,MAAA;AACb,WAAK,QAAQ,GAAG,SAAS,CAAC,QAAQ;AAChC,aAAK,gDAAgD,EAAE,SAAS,OAAO,GAAG,GAAG;AAC7E,aAAK,cAAA;AACL,aAAK,gBAAA;AAAA,MACP,CAAC;AACD,WAAK,YAAA;AACL,WAAK,cAAA;AACL,WAAK,0BAA0B;AAAA,QAC7B;AAAA,QACA,kBAAkB,KAAK;AAAA,QACvB,aAAa,KAAK;AAAA,QAClB,gBAAgB,KAAK,eAAe;AAAA,QACpC,gBAAgB,KAAK;AAAA,MAAA,CACtB;AAAA,IACH,SAAS,KAAK;AACZ,WAAK,uCAAuC,EAAE,SAAS,OAAO,GAAG,GAAG;AACpE,WAAK,gBAAA;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,cAAoB;AAC1B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,MAAA;AAChB,WAAK,aAAa;AAAA,IACpB;AACA,QAAI;AACF,WAAK,aAAa,MAAM,GAAG,KAAK,MAAM,QAAQ,MAAM;AAClD,aAAK,cAAA;AAAA,MACP,CAAC;AACD,WAAK,WAAW,MAAA;AAChB,WAAK,WAAW,GAAG,SAAS,MAAM;AAGhC,YAAI,KAAK,YAAY;AACnB,eAAK,WAAW,MAAA;AAChB,eAAK,aAAa;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AAEN,WAAK,aAAa;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAsB;AAC5B,QAAI,KAAK,eAAe,KAAK,gBAAgB,EAAG;AAChD,SAAK,cAAc,YAAY,MAAM;AACnC,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,YAAY;AACpB,SAAK,YAAY,MAAA;AAAA,EACnB;AAAA;AAAA,EAGA,OAAa;AACX,SAAK,UAAU;AACf,SAAK,cAAA;AACL,QAAI,KAAK,WAAW;AAClB,oBAAc,KAAK,SAAS;AAC5B,WAAK,YAAY;AAAA,IACnB;AACA,QAAI,KAAK,aAAa;AACpB,oBAAc,KAAK,WAAW;AAC9B,WAAK,cAAc;AAAA,IACrB;AACA,QAAI,KAAK,eAAe;AACtB,mBAAa,KAAK,aAAa;AAC/B,WAAK,gBAAgB;AAAA,IACvB;AAAA,EACF;AAAA;AAAA,EAGA,oBAA4B;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAsB;AAC1B,UAAM,KAAK,MAAA;AAAA,EACb;AAAA,EAEQ,gBAAsB;AAC5B,QAAI,KAAK,SAAS;AAChB,WAAK,QAAQ,MAAA;AACb,WAAK,UAAU;AAAA,IACjB;AACA,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,MAAA;AAChB,WAAK,aAAa;AAAA,IACpB;AAAA,EACF;AAAA,EAEQ,kBAAwB;AAC9B,QAAI,KAAK,aAAa,CAAC,KAAK,QAAS;AACrC,SAAK,oBAAoB;AACzB,SAAK,YAAY,YAAY,MAAM;AACjC,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,cAAc;AACtB,SAAK,UAAU,MAAA;AACf,SAAK,sCAAsC,EAAE,aAAa,KAAK,gBAAgB;AAAA,EACjF;AAAA,EAEQ,gBAAsB;AAC5B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,KAAK,cAAe,cAAa,KAAK,aAAa;AACvD,SAAK,gBAAgB,WAAW,MAAM;AACpC,WAAK,gBAAgB;AACrB,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,UAAU;AAClB,SAAK,cAAc,MAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,QAAuB;AACnC,QAAI,KAAK,UAAU;AACjB,WAAK,QAAQ;AACb;AAAA,IACF;AACA,SAAK,WAAW;AAChB,QAAI;AAGF,iBAAS;AACP,cAAM,WAAW,MAAM,KAAK,GAAG,sBAAsB,KAAK,gBAAgB,KAAK,QAAQ;AACvF,YAAI,SAAS,WAAW,EAAG;AAC3B,mBAAW,KAAK,UAAU;AACxB,cAAI,EAAE,KAAK,KAAK,eAAgB,MAAK,iBAAiB,EAAE;AAAA,QAC1D;AACA,aAAK,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC;AACpC,YAAI,SAAS,SAAS,KAAK,SAAU;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AAEZ,WAAK,+BAA+B,EAAE,SAAS,OAAO,GAAG,GAAG;AAAA,IAC9D,UAAA;AACE,WAAK,WAAW;AAChB,UAAI,KAAK,OAAO;AACd,aAAK,QAAQ;AACb,aAAK,KAAK,MAAA;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;AAOA,SAAS,SAAS,SAA+B;AAC/C,SAAO,QAAQ,aAAa,EAAE,MAAM,YAAY,YAAY,EAAE,MAAM,eAAe,QAAA;AACrF;"}
+{"version":3,"file":"change-watcher-DRnLiHpP.js","sources":["../src/change-watcher.ts"],"sourcesContent":["/**\n * ChangeWatcher — turns chat.db writes into typed EventBus batches.\n *\n * Detection uses THREE layered primitives (the original design's single\n * directory watch was blind in production — see below):\n *\n *  1. A file watch on `chat.db-wal` ITSELF — kqueue on an opened fd, which\n *     delivers write/extend events regardless of which process writes.\n *  2. A directory watch on dirname(dbPath) — re-arms the file watch when a\n *     checkpoint truncates/recreates the wal (stale inode), and is the\n *     drain signal on platforms where it does report file events.\n *  3. A slow safety poll (default 10s; one MAX(ROWID) query per tick) that\n *     always runs alongside the watches.\n *\n * Why not the original directory watch alone: on the REAL\n * `~/Library/Messages` it armed cleanly and then delivered NOTHING while\n * rows landed in chat.db (observed live, 2026-08-10; suspected TCC/FSEvents\n * filtering on the protected directory — plain temp dirs DO report appends,\n * which is why the integration tests couldn't catch it). The file watch and\n * the safety poll are the primitives that don't depend on that delivery.\n *\n * If fs.watch throws outright (exotic filesystems), degrade to the\n * documented fast-poll fallback of the same drain path (default 2s).\n * The authoritative cursor is always a high-water ROWID, never file state.\n *\n * On a signal: debounce ~150ms (one logical message = several WAL writes),\n * then delta-read rows past the high-water mark via\n * `IMessageDB.getMessagesAfterRowid` — the same parse/convert pipeline as\n * every other reader (\"one parser, N callers\"; no forked streamer parser) —\n * classify, and emit ONE coalesced batch per drain. Bulk syncs loop the\n * delta read in `maxBatch` pages so thousands of rows become a few batches,\n * not a subscriber storm.\n *\n * The watcher never throws into the host process: drain errors are logged\n * and retried on the next event. Timers are unref'd; `stop()` is idempotent\n * and safe to register as a shutdown cleanup (the ENTRY POINT registers it —\n * this module stays side-effect-free at import, like the rest of core).\n */\n\nimport { watch } from \"node:fs\";\nimport { basename, dirname } from \"node:path\";\nimport type { ChangeEvent, EventBus } from \"./event-bus.js\";\nimport { info, warn } from \"./logger.js\";\nimport type { Message } from \"./types.js\";\n\n/** The DB surface the watcher needs — injectable for tests. */\nexport interface ChangeWatcherDb {\n  getMaxMessageRowId(): number;\n  getMessagesAfterRowid(afterRowid: number, limit?: number): Promise<Message[]>;\n}\n\nexport interface ChangeWatcherOptions {\n  /** Path to chat.db — the watcher watches its parent directory. */\n  dbPath: string;\n  db: ChangeWatcherDb;\n  bus: EventBus;\n  /** Trailing-edge debounce between an fs event and the delta read. */\n  debounceMs?: number;\n  /** Poll cadence for the degenerate no-fs.watch fallback. */\n  pollFallbackMs?: number;\n  /** Slow backstop poll cadence while fs.watch is armed (0 disables). */\n  safetyPollMs?: number;\n  /** Rows per delta page; drains loop while a page comes back full. */\n  maxBatch?: number;\n}\n\nexport class ChangeWatcher {\n  private readonly dbPath: string;\n  private readonly db: ChangeWatcherDb;\n  private readonly bus: EventBus;\n  private readonly debounceMs: number;\n  private readonly pollFallbackMs: number;\n  private readonly maxBatch: number;\n\n  private readonly safetyPollMs: number;\n\n  private watcher: ReturnType<typeof watch> | null = null;\n  private walWatcher: ReturnType<typeof watch> | null = null;\n  private pollTimer: ReturnType<typeof setInterval> | null = null;\n  private safetyTimer: ReturnType<typeof setInterval> | null = null;\n  private debounceTimer: ReturnType<typeof setTimeout> | null = null;\n  private highWaterRowid = 0;\n  private draining = false;\n  private rearm = false;\n  private started = false;\n  private usingPollFallback = false;\n\n  constructor(opts: ChangeWatcherOptions) {\n    this.dbPath = opts.dbPath;\n    this.db = opts.db;\n    this.bus = opts.bus;\n    this.debounceMs = opts.debounceMs ?? 150;\n    this.pollFallbackMs = opts.pollFallbackMs ?? 2_000;\n    this.safetyPollMs = opts.safetyPollMs ?? 10_000;\n    this.maxBatch = opts.maxBatch ?? 500;\n  }\n\n  /**\n   * Seed the high-water mark from the CURRENT max ROWID (history is the\n   * initial-load path's job; the stream carries only what happens next) and\n   * arm the directory watch — or the poll fallback if fs.watch throws.\n   */\n  start(): void {\n    if (this.started) return;\n    this.started = true;\n    this.highWaterRowid = this.db.getMaxMessageRowId();\n\n    const dir = dirname(this.dbPath);\n    const dbFile = basename(this.dbPath);\n    try {\n      this.watcher = watch(dir, (eventType, filename) => {\n        // Directory watches only report ENTRY changes (create/rename/delete)\n        // on macOS — a checkpoint truncating/recreating the wal lands here.\n        // Any wal entry event means the file watch's inode may be stale:\n        // re-arm it, then drain. filename can be null on some platforms —\n        // treat that as a hit.\n        if (filename === null || filename === `${dbFile}-wal` || filename === dbFile) {\n          if (eventType === \"rename\" || this.walWatcher === null) this.armWalWatch();\n          this.scheduleDrain();\n        }\n      });\n      // Like the timers, the fs.watch handle must never keep the process\n      // alive on its own — entry points arm the watcher lazily inside\n      // request handlers, and shutdown() already stops it explicitly.\n      this.watcher.unref();\n      this.watcher.on(\"error\", (err) => {\n        warn(\"change_watcher_fs_error_falling_back_to_poll\", { message: String(err) });\n        this.teardownWatch();\n        this.armPollFallback();\n      });\n      this.armWalWatch();\n      this.armSafetyPoll();\n      info(\"change_watcher_started\", {\n        dir,\n        high_water_rowid: this.highWaterRowid,\n        debounce_ms: this.debounceMs,\n        wal_file_watch: this.walWatcher !== null,\n        safety_poll_ms: this.safetyPollMs,\n      });\n    } catch (err) {\n      warn(\"change_watcher_fs_watch_unavailable\", { message: String(err) });\n      this.armPollFallback();\n    }\n  }\n\n  /**\n   * Watch the WAL file itself — the only fs.watch mode that fires on APPENDS\n   * on macOS (kqueue on the file). Best-effort: the wal may not exist yet\n   * (fresh db, post-checkpoint gap); the directory watch re-arms us when its\n   * entry appears, and the safety poll covers the meantime.\n   */\n  private armWalWatch(): void {\n    if (!this.started) return;\n    if (this.walWatcher) {\n      this.walWatcher.close();\n      this.walWatcher = null;\n    }\n    try {\n      this.walWatcher = watch(`${this.dbPath}-wal`, () => {\n        this.scheduleDrain();\n      });\n      this.walWatcher.unref();\n      this.walWatcher.on(\"error\", () => {\n        // Stale inode (checkpoint) or vanished file — the dir watch will\n        // re-arm on the next wal entry event; don't fall back to full poll.\n        if (this.walWatcher) {\n          this.walWatcher.close();\n          this.walWatcher = null;\n        }\n      });\n    } catch {\n      // ENOENT etc. — covered by dir watch + safety poll.\n      this.walWatcher = null;\n    }\n  }\n\n  /** Slow backstop drain while fs.watch is armed — catches silent watches. */\n  private armSafetyPoll(): void {\n    if (this.safetyTimer || this.safetyPollMs <= 0) return;\n    this.safetyTimer = setInterval(() => {\n      void this.drain();\n    }, this.safetyPollMs);\n    this.safetyTimer.unref();\n  }\n\n  /** Idempotent teardown — clears the watches, timers, and pending drains. */\n  stop(): void {\n    this.started = false;\n    this.teardownWatch();\n    if (this.pollTimer) {\n      clearInterval(this.pollTimer);\n      this.pollTimer = null;\n    }\n    if (this.safetyTimer) {\n      clearInterval(this.safetyTimer);\n      this.safetyTimer = null;\n    }\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n  }\n\n  /** Current cursor — exposed for the dev-stats panel and tests. */\n  getHighWaterRowid(): number {\n    return this.highWaterRowid;\n  }\n\n  /** True when running in the degenerate poll mode (fs.watch unavailable). */\n  isPolling(): boolean {\n    return this.usingPollFallback;\n  }\n\n  /**\n   * Trigger a delta read now, bypassing the debounce. The poll fallback and\n   * tests use this; the fs.watch path goes through `scheduleDrain`.\n   */\n  async pump(): Promise<void> {\n    await this.drain();\n  }\n\n  private teardownWatch(): void {\n    if (this.watcher) {\n      this.watcher.close();\n      this.watcher = null;\n    }\n    if (this.walWatcher) {\n      this.walWatcher.close();\n      this.walWatcher = null;\n    }\n  }\n\n  private armPollFallback(): void {\n    if (this.pollTimer || !this.started) return;\n    this.usingPollFallback = true;\n    this.pollTimer = setInterval(() => {\n      void this.drain();\n    }, this.pollFallbackMs);\n    this.pollTimer.unref();\n    info(\"change_watcher_poll_fallback_armed\", { interval_ms: this.pollFallbackMs });\n  }\n\n  private scheduleDrain(): void {\n    if (!this.started) return;\n    if (this.debounceTimer) clearTimeout(this.debounceTimer);\n    this.debounceTimer = setTimeout(() => {\n      this.debounceTimer = null;\n      void this.drain();\n    }, this.debounceMs);\n    this.debounceTimer.unref();\n  }\n\n  /**\n   * Read rows past the high-water mark and emit them as one batch per page.\n   * Re-entrancy guard: fs events landing mid-drain set `rearm` so the drain\n   * runs once more instead of overlapping (overlapping reads would emit\n   * duplicate rows — both would read from the same stale cursor).\n   */\n  private async drain(): Promise<void> {\n    if (this.draining) {\n      this.rearm = true;\n      return;\n    }\n    this.draining = true;\n    try {\n      // Loop while pages come back full — a bulk sync writes thousands of\n      // rows in one burst and each page becomes one coalesced batch.\n      for (;;) {\n        const messages = await this.db.getMessagesAfterRowid(this.highWaterRowid, this.maxBatch);\n        if (messages.length === 0) break;\n        for (const m of messages) {\n          if (m.id > this.highWaterRowid) this.highWaterRowid = m.id;\n        }\n        this.bus.emit(messages.map(classify));\n        if (messages.length < this.maxBatch) break;\n      }\n    } catch (err) {\n      // Never throw into the host — the next WAL event retries naturally.\n      warn(\"change_watcher_drain_failed\", { message: String(err) });\n    } finally {\n      this.draining = false;\n      if (this.rearm) {\n        this.rearm = false;\n        void this.drain();\n      }\n    }\n  }\n}\n\n/**\n * New-ROWID classification. Edited/unsent rows mutate EXISTING ROWIDs and are\n * invisible to the high-water delta — they belong to the mutation-detection\n * backlog item (date_edited / is_read deltas), not this path.\n */\nfunction classify(message: Message): ChangeEvent {\n  return message.isReaction ? { type: \"reaction\", message } : { type: \"message.new\", message };\n}\n"],"names":[],"mappings":";;;AAkEO,MAAM,cAAc;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EAET,UAA2C;AAAA,EAC3C,aAA8C;AAAA,EAC9C,YAAmD;AAAA,EACnD,cAAqD;AAAA,EACrD,gBAAsD;AAAA,EACtD,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,oBAAoB;AAAA,EAE5B,YAAY,MAA4B;AACtC,SAAK,SAAS,KAAK;AACnB,SAAK,KAAK,KAAK;AACf,SAAK,MAAM,KAAK;AAChB,SAAK,aAAa,KAAK,cAAc;AACrC,SAAK,iBAAiB,KAAK,kBAAkB;AAC7C,SAAK,eAAe,KAAK,gBAAgB;AACzC,SAAK,WAAW,KAAK,YAAY;AAAA,EACnC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAc;AACZ,QAAI,KAAK,QAAS;AAClB,SAAK,UAAU;AACf,SAAK,iBAAiB,KAAK,GAAG,mBAAA;AAE9B,UAAM,MAAM,QAAQ,KAAK,MAAM;AAC/B,UAAM,SAAS,SAAS,KAAK,MAAM;AACnC,QAAI;AACF,WAAK,UAAU,MAAM,KAAK,CAAC,WAAW,aAAa;AAMjD,YAAI,aAAa,QAAQ,aAAa,GAAG,MAAM,UAAU,aAAa,QAAQ;AAC5E,cAAI,cAAc,YAAY,KAAK,eAAe,WAAW,YAAA;AAC7D,eAAK,cAAA;AAAA,QACP;AAAA,MACF,CAAC;AAID,WAAK,QAAQ,MAAA;AACb,WAAK,QAAQ,GAAG,SAAS,CAAC,QAAQ;AAChC,aAAK,gDAAgD,EAAE,SAAS,OAAO,GAAG,GAAG;AAC7E,aAAK,cAAA;AACL,aAAK,gBAAA;AAAA,MACP,CAAC;AACD,WAAK,YAAA;AACL,WAAK,cAAA;AACL,WAAK,0BAA0B;AAAA,QAC7B;AAAA,QACA,kBAAkB,KAAK;AAAA,QACvB,aAAa,KAAK;AAAA,QAClB,gBAAgB,KAAK,eAAe;AAAA,QACpC,gBAAgB,KAAK;AAAA,MAAA,CACtB;AAAA,IACH,SAAS,KAAK;AACZ,WAAK,uCAAuC,EAAE,SAAS,OAAO,GAAG,GAAG;AACpE,WAAK,gBAAA;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,cAAoB;AAC1B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,MAAA;AAChB,WAAK,aAAa;AAAA,IACpB;AACA,QAAI;AACF,WAAK,aAAa,MAAM,GAAG,KAAK,MAAM,QAAQ,MAAM;AAClD,aAAK,cAAA;AAAA,MACP,CAAC;AACD,WAAK,WAAW,MAAA;AAChB,WAAK,WAAW,GAAG,SAAS,MAAM;AAGhC,YAAI,KAAK,YAAY;AACnB,eAAK,WAAW,MAAA;AAChB,eAAK,aAAa;AAAA,QACpB;AAAA,MACF,CAAC;AAAA,IACH,QAAQ;AAEN,WAAK,aAAa;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,gBAAsB;AAC5B,QAAI,KAAK,eAAe,KAAK,gBAAgB,EAAG;AAChD,SAAK,cAAc,YAAY,MAAM;AACnC,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,YAAY;AACpB,SAAK,YAAY,MAAA;AAAA,EACnB;AAAA;AAAA,EAGA,OAAa;AACX,SAAK,UAAU;AACf,SAAK,cAAA;AACL,QAAI,KAAK,WAAW;AAClB,oBAAc,KAAK,SAAS;AAC5B,WAAK,YAAY;AAAA,IACnB;AACA,QAAI,KAAK,aAAa;AACpB,oBAAc,KAAK,WAAW;AAC9B,WAAK,cAAc;AAAA,IACrB;AACA,QAAI,KAAK,eAAe;AACtB,mBAAa,KAAK,aAAa;AAC/B,WAAK,gBAAgB;AAAA,IACvB;AAAA,EACF;AAAA;AAAA,EAGA,oBAA4B;AAC1B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,YAAqB;AACnB,WAAO,KAAK;AAAA,EACd;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAsB;AAC1B,UAAM,KAAK,MAAA;AAAA,EACb;AAAA,EAEQ,gBAAsB;AAC5B,QAAI,KAAK,SAAS;AAChB,WAAK,QAAQ,MAAA;AACb,WAAK,UAAU;AAAA,IACjB;AACA,QAAI,KAAK,YAAY;AACnB,WAAK,WAAW,MAAA;AAChB,WAAK,aAAa;AAAA,IACpB;AAAA,EACF;AAAA,EAEQ,kBAAwB;AAC9B,QAAI,KAAK,aAAa,CAAC,KAAK,QAAS;AACrC,SAAK,oBAAoB;AACzB,SAAK,YAAY,YAAY,MAAM;AACjC,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,cAAc;AACtB,SAAK,UAAU,MAAA;AACf,SAAK,sCAAsC,EAAE,aAAa,KAAK,gBAAgB;AAAA,EACjF;AAAA,EAEQ,gBAAsB;AAC5B,QAAI,CAAC,KAAK,QAAS;AACnB,QAAI,KAAK,cAAe,cAAa,KAAK,aAAa;AACvD,SAAK,gBAAgB,WAAW,MAAM;AACpC,WAAK,gBAAgB;AACrB,WAAK,KAAK,MAAA;AAAA,IACZ,GAAG,KAAK,UAAU;AAClB,SAAK,cAAc,MAAA;AAAA,EACrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,QAAuB;AACnC,QAAI,KAAK,UAAU;AACjB,WAAK,QAAQ;AACb;AAAA,IACF;AACA,SAAK,WAAW;AAChB,QAAI;AAGF,iBAAS;AACP,cAAM,WAAW,MAAM,KAAK,GAAG,sBAAsB,KAAK,gBAAgB,KAAK,QAAQ;AACvF,YAAI,SAAS,WAAW,EAAG;AAC3B,mBAAW,KAAK,UAAU;AACxB,cAAI,EAAE,KAAK,KAAK,eAAgB,MAAK,iBAAiB,EAAE;AAAA,QAC1D;AACA,aAAK,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC;AACpC,YAAI,SAAS,SAAS,KAAK,SAAU;AAAA,MACvC;AAAA,IACF,SAAS,KAAK;AAEZ,WAAK,+BAA+B,EAAE,SAAS,OAAO,GAAG,GAAG;AAAA,IAC9D,UAAA;AACE,WAAK,WAAW;AAChB,UAAI,KAAK,OAAO;AACd,aAAK,QAAQ;AACb,aAAK,KAAK,MAAA;AAAA,MACZ;AAAA,IACF;AAAA,EACF;AACF;AAOA,SAAS,SAAS,SAA+B;AAC/C,SAAO,QAAQ,aAAa,EAAE,MAAM,YAAY,YAAY,EAAE,MAAM,eAAe,QAAA;AACrF;"}

package/dist/cli.js

@@ -3,7 +3,7 @@ import { existsSync, realpathSync } from "node:fs";
 import { createInterface } from "node:readline";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { Command } from "commander";
-import { A as APP_VERSION, d as checkLocalAccess, f as formatAccessReport, I as IMPLEMENTED_TYPES, e as ANALYTIC_INFO, h as installShutdownHandlers, r as registerCleanup, l as looksLikeThreadSlug, t as toYaml } from "./shutdown-B4_Yuro3.js";
+import { A as APP_VERSION, d as checkLocalAccess, f as formatAccessReport, l as looksLikeThreadSlug, I as IMPLEMENTED_TYPES, e as ANALYTIC_INFO, h as installShutdownHandlers, r as registerCleanup, t as toYaml } from "./shutdown-BJyTvhvf.js";
 import { spawn } from "node:child_process";
 import { join, dirname } from "node:path";
 function distRoot() {
@@ -48,6 +48,7 @@ class LocalMcpClient {
       this.pending.clear();
     });
   }
+  onStderr;
   proc;
   requestId = 0;
   pending = /* @__PURE__ */ new Map();
@@ -298,7 +299,7 @@ async function runConsoleCommand(cmd, args, client) {
         if (!args[1]) throw new Error("Usage: humans init <contact|slug|top N>");
         if (args[1] === "top") {
           await printToolResult(client, "init_human", { top: Number(args[2] ?? 10) });
-        } else if (args[1].includes("~")) {
+        } else if (looksLikeThreadSlug(args[1])) {
           await printToolResult(client, "init_human", { threadSlug: args[1] });
         } else {
           await printToolResult(client, "init_human", { contact: args.slice(1).join(" ") });
@@ -336,9 +337,9 @@ async function runConsoleCommand(cmd, args, client) {
       const seconds = Number(args[0] ?? 60);
       if (!Number.isFinite(seconds) || seconds <= 0) throw new Error("Usage: watch [seconds]");
       const { EventBus } = await import("./event-bus-DqXvbtEM.js");
-      const { ChangeWatcher } = await import("./change-watcher-YYAxN4I4.js");
-      const { IMessageDB } = await import("./imessage-db-CBK2T6Eb.js").then((n) => n.i);
-      const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-B4_Yuro3.js").then((n) => n.ak);
+      const { ChangeWatcher } = await import("./change-watcher-DRnLiHpP.js");
+      const { IMessageDB } = await import("./imessage-db-Bv2RrH5q.js").then((n) => n.i);
+      const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-BJyTvhvf.js").then((n) => n.ak);
       const db = new IMessageDB(getImsgDbPath(), getContactsDbPaths(), getSlugsDbPath());
       const bus = new EventBus();
       const watcher = new ChangeWatcher({ dbPath: getImsgDbPath(), db, bus });
@@ -485,9 +486,9 @@ async function runExportCommand(target, opts) {
   const { existsSync: existsSync2, mkdirSync, copyFileSync, statSync } = await import("node:fs");
   const { homedir } = await import("node:os");
   const { dirname: dirname2, join: join2, isAbsolute, resolve } = await import("node:path");
-  const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-B4_Yuro3.js").then((n) => n.ak);
-  const { IMessageDB } = await import("./imessage-db-CBK2T6Eb.js").then((n) => n.i);
-  const { streamExport } = await import("./exportStream-BsEda23q.js");
+  const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-BJyTvhvf.js").then((n) => n.ak);
+  const { IMessageDB } = await import("./imessage-db-Bv2RrH5q.js").then((n) => n.i);
+  const { streamExport } = await import("./exportStream-CFfWlvVb.js");
   const { parseUserDate } = await import("./date-parse-DJXMfq3a.js");
   const format = normalizeFormat(opts.format ?? "md");
   const ext = extForFormat(format);
@@ -542,13 +543,13 @@ async function runExportCommand(target, opts) {
       if (since) filters.sinceMs = since.getTime();
       if (until) filters.untilMs = until.getTime();
       const attachments = db.searchAttachments(filters);
-      const { resolveInterpretConfig } = await import("./app-config-B3gVw0Ip.js");
+      const { resolveInterpretConfig } = await import("./app-config-CK1zm-h1.js");
       const nudge = resolveInterpretConfig().nudge;
       const firstMissing = attachments.find(
         (a) => a.filename && !existsSync2(a.filename.replace(/^~/, homedir()))
       );
       if (nudge.enabled && firstMissing && chatIdentifier) {
-        const { ensureAttachmentDownloaded } = await import("./attachment-sync-Br5ieAsw.js");
+        const { ensureAttachmentDownloaded } = await import("./attachment-sync-CmPm-h69.js");
         log(`  Nudging Messages to sync missing attachments…`, "dim");
         await ensureAttachmentDownloaded(
           { filePath: firstMissing.filename.replace(/^~/, homedir()), chatId: chatIdentifier },
@@ -698,7 +699,7 @@ humansCommand.command("init").description(
     process.exitCode = 1;
     return;
   }
-  const args = opts.top ? { top: Number(opts.top) } : contact?.includes("~") ? { threadSlug: contact } : { contact };
+  const args = opts.top ? { top: Number(opts.top) } : looksLikeThreadSlug(contact) ? { threadSlug: contact } : { contact };
   await withClient((c) => printToolResult(c, "init_human", args));
 });
 humansCommand.command("top").description("Show the relationship leaderboard (volume × reciprocity × recency, last 5 years)").argument("[windowDays]", "Days of history to rank", "1825").option("--json", "Output structured JSON").option("--yaml", "Output structured YAML").action(async (windowDays, opts) => {
@@ -758,10 +759,10 @@ program.command("interpret <rowId>").description("Interpret one attachment (tran
     process.exitCode = 1;
     return;
   }
-  const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-B4_Yuro3.js").then((n) => n.ak);
-  const { IMessageDB } = await import("./imessage-db-CBK2T6Eb.js").then((n) => n.i);
-  const { getInterpretRuntime, refForAttachment } = await import("./media-intel-runtime-CtGXBHB_.js").then((n) => n.c);
-  const { deleteMediaIntel } = await import("./media-intel-cache-0MPG1Dkj.js");
+  const { getContactsDbPaths, getImsgDbPath, getSlugsDbPath } = await import("./shutdown-BJyTvhvf.js").then((n) => n.ak);
+  const { IMessageDB } = await import("./imessage-db-Bv2RrH5q.js").then((n) => n.i);
+  const { getInterpretRuntime, refForAttachment } = await import("./media-intel-runtime-BVJNaDBE.js").then((n) => n.c);
+  const { deleteMediaIntel } = await import("./media-intel-cache-Dj1fn3P0.js");
   const db = new IMessageDB(getImsgDbPath(), getContactsDbPaths(), getSlugsDbPath());
   try {
     const rec = db.getAttachmentByRowId(rowId);
@@ -796,7 +797,7 @@ program.command("interpret <rowId>").description("Interpret one attachment (tran
 program.command("setup").description("Autodetect DB paths and emit an MCP host config snippet").option("-w, --write <host>", 'Write into a host config: "claude" or "cursor"').option("-r, --runtime <runtime>", 'Runtime command: "npx" (default), "bunx", or "global"').option("--print-only", "Just print the snippet (default behaviour)").option("-i, --interactive", "Configure media interpretation (providers, chains, keys)").action(
   async (opts) => {
     if (opts.interactive) {
-      const { runSetupWizard } = await import("./setup-wizard-DJKDzOP9.js");
+      const { runSetupWizard } = await import("./setup-wizard-TYwuk1Kh.js");
       try {
         await runSetupWizard();
       } catch (err) {
@@ -808,7 +809,7 @@ program.command("setup").description("Autodetect DB paths and emit an MCP host c
       }
       return;
     }
-    const { probeMachine, buildMcpSnippet, writeHostConfig } = await import("./setup-CENQc9jK.js");
+    const { probeMachine, buildMcpSnippet, writeHostConfig } = await import("./setup-floTXYNF.js");
     const report = probeMachine();
     if (!report.imsgDb.readable) {
       log(`✗ Messages DB is not readable: ${report.imsgDb.path}`, "err");
@@ -851,7 +852,7 @@ program.command("setup").description("Autodetect DB paths and emit an MCP host c
 );
 const configCmd = program.command("config").description("Manage TUI settings (theme, accent color)");
 configCmd.command("show").description("Print resolved TUI settings and where each value came from").action(async () => {
-  const { resolveTuiConfig, defaultTuiConfigPath } = await import("./tui-config-CsXXhBF7.js");
+  const { resolveTuiConfig, defaultTuiConfigPath } = await import("./tui-config-CCczaq2h.js");
   const cfg = resolveTuiConfig();
   log(
     `config file : ${cfg.configPath ?? `(none — defaults; would write to ${defaultTuiConfigPath()})`}`
@@ -864,7 +865,7 @@ configCmd.command("show").description("Print resolved TUI settings and where eac
   for (const w of cfg.warnings) log(w, "warn");
 });
 configCmd.command("edit").description("Open the TUI config file in $EDITOR (creates it if missing)").action(async () => {
-  const { defaultTuiConfigPath, findTuiConfigPath, writeTuiConfig, DEFAULT_TUI_CONFIG } = await import("./tui-config-CsXXhBF7.js");
+  const { defaultTuiConfigPath, findTuiConfigPath, writeTuiConfig, DEFAULT_TUI_CONFIG } = await import("./tui-config-CCczaq2h.js");
   const path = findTuiConfigPath() ?? defaultTuiConfigPath();
   const { existsSync: existsSync2 } = await import("node:fs");
   if (!existsSync2(path)) {