negotium 0.1.11 → 0.1.13

package/dist/chunk-01xcc856.js

@@ -1,149 +0,0 @@
-// @bun
-import"./chunk-93krf6ng.js";
-import"./chunk-fswhzdf5.js";
-import"./chunk-cxa7yghg.js";
-import"./chunk-59d0shyj.js";
-import"./chunk-rbvctv1n.js";
-import"./chunk-1k7t7bnx.js";
-import"./chunk-g144wdrs.js";
-import"./chunk-91ckrvk8.js";
-import"./chunk-66y0hr8c.js";
-import"./chunk-h9vbhhgr.js";
-import"./chunk-f361dwba.js";
-import"./chunk-8cahx7xc.js";
-import"./chunk-6d4fmea5.js";
-import"./chunk-61px0717.js";
-import"./chunk-tsstrcfc.js";
-import"./chunk-6ah5farg.js";
-import"./chunk-41ygvg5k.js";
-import"./chunk-m9e3tbr8.js";
-import"./chunk-mh5mexsf.js";
-import"./chunk-qwy57177.js";
-import"./chunk-j0kjscb7.js";
-import"./chunk-h980hb2n.js";
-import {
-  logger
-} from "./chunk-ffefbd3r.js";
-import"./chunk-pg1azh6n.js";
-import"./chunk-1a6kv9vt.js";
-import"./chunk-f5xgprg1.js";
-import"./chunk-hwy3n31w.js";
-
-// ../../adapters/otium/src/central.ts
-var NODES_CACHE_MS = 30000;
-var VERIFY_CACHE_MS = 30000;
-var joinConfig = null;
-var nodesCache = null;
-var verifyCache = new Map;
-var tokenCache = new Map;
-function configureOtiumCentral(join) {
-  joinConfig = join;
-  resetPeerCentralCaches();
-}
-function otiumCentralConfig() {
-  return joinConfig;
-}
-function centralFetch(path, init) {
-  if (!joinConfig)
-    throw new Error("otium: join credentials missing");
-  return fetch(`${joinConfig.central}${path}`, {
-    ...init,
-    headers: {
-      authorization: `Bearer ${joinConfig.secret}`,
-      "content-type": "application/json",
-      ...init.headers ?? {}
-    },
-    signal: AbortSignal.timeout(5000)
-  });
-}
-async function listPeerNodes(opts = {}) {
-  if (!opts.fresh && nodesCache && Date.now() - nodesCache.at < NODES_CACHE_MS) {
-    return nodesCache.nodes;
-  }
-  const response = await centralFetch("/peer/nodes", { method: "GET" });
-  const body = await response.json();
-  if (!response.ok || !body.ok || !Array.isArray(body.nodes)) {
-    throw new Error(`otium: node discovery failed: ${body.error ?? response.status}`);
-  }
-  nodesCache = { nodes: body.nodes, workspaceId: body.workspaceId ?? "", at: Date.now() };
-  return body.nodes;
-}
-async function selfPeerNode() {
-  const nodes = await listPeerNodes();
-  return nodes.find((node) => node.self) ?? null;
-}
-async function resolvePeerNodeByCellId(cellId) {
-  const find = (nodes) => nodes.find((node) => node.cellId === cellId) ?? null;
-  const cached = find(await listPeerNodes());
-  if (cached)
-    return cached;
-  return find(await listPeerNodes({ fresh: true }));
-}
-async function mintPeerToken(toCellId) {
-  const cached = tokenCache.get(toCellId);
-  if (cached && cached.expiresAtMs - Date.now() > 30000)
-    return cached.token;
-  const response = await centralFetch("/peer/token", {
-    method: "POST",
-    body: JSON.stringify({ toCellId })
-  });
-  const body = await response.json();
-  if (!response.ok || !body.ok || !body.token) {
-    throw new Error(`otium: peer token mint failed: ${body.error ?? response.status}`);
-  }
-  tokenCache.set(toCellId, {
-    token: body.token,
-    expiresAtMs: Date.parse(body.expiresAt ?? "") || Date.now() + 60000
-  });
-  return body.token;
-}
-async function verifyPeerToken(token) {
-  const cached = verifyCache.get(token);
-  if (cached && Date.now() - cached.at < VERIFY_CACHE_MS)
-    return cached.verified;
-  let response;
-  try {
-    response = await centralFetch("/peer/verify", {
-      method: "POST",
-      body: JSON.stringify({ token })
-    });
-  } catch (err) {
-    logger.warn({ err }, "otium: central verify unreachable");
-    return null;
-  }
-  const body = await response.json().catch(() => null);
-  if (!response.ok || !body?.ok)
-    return null;
-  const verified = {
-    workspaceId: body.workspaceId,
-    fromCellId: body.fromCellId,
-    fromNodeName: body.fromNodeName,
-    fromIsPrimary: body.fromIsPrimary,
-    expiresAt: body.expiresAt
-  };
-  verifyCache.set(token, { verified, at: Date.now() });
-  for (const [key, entry] of verifyCache) {
-    if (Date.now() - entry.at > VERIFY_CACHE_MS)
-      verifyCache.delete(key);
-  }
-  return verified;
-}
-function resetPeerCentralCaches() {
-  nodesCache = null;
-  verifyCache.clear();
-  tokenCache.clear();
-}
-export {
-  verifyPeerToken,
-  selfPeerNode,
-  resolvePeerNodeByCellId,
-  resetPeerCentralCaches,
-  otiumCentralConfig,
-  mintPeerToken,
-  listPeerNodes,
-  configureOtiumCentral
-};
-
-export { configureOtiumCentral, otiumCentralConfig, listPeerNodes, selfPeerNode, resolvePeerNodeByCellId, mintPeerToken, verifyPeerToken, resetPeerCentralCaches };
-
-//# debugId=FC91852260C865A864756E2164756E21

package/dist/chunk-01xcc856.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../adapters/otium/src/central.ts"],
-  "sourcesContent": [
-    "/**\n * Central peer API client — token mint/verify and node discovery for this\n * cell. Port of otium's `apps/runtime-api/src/peer/central.ts` (identical\n * cache policy) with `hostedRuntimeConfig()` replaced by the adapter's join\n * credentials. The cell secret never leaves this process; peers only ever see\n * the short-lived `ptk_…` tokens central mints here.\n */\n\nimport { logger } from \"@negotium/core\";\nimport type { OtiumJoin } from \"@/join\";\n\nexport interface PeerNode {\n  cellId: string;\n  nodeName: string | null;\n  isPrimary: boolean;\n  baseUrl: string;\n  self: boolean;\n}\n\nexport interface VerifiedPeer {\n  workspaceId: string;\n  fromCellId: string;\n  fromNodeName: string | null;\n  fromIsPrimary: boolean;\n  expiresAt: string;\n}\n\nconst NODES_CACHE_MS = 30_000;\n/** Positive verify cache — deliberately short so assignment revocation bites\n *  within seconds, not the token TTL. */\nconst VERIFY_CACHE_MS = 30_000;\n\nlet joinConfig: OtiumJoin | null = null;\nlet nodesCache: { nodes: PeerNode[]; workspaceId: string; at: number } | null = null;\nconst verifyCache = new Map<string, { verified: VerifiedPeer; at: number }>();\nconst tokenCache = new Map<string, { token: string; expiresAtMs: number }>();\n\n/** Install (or clear) the join credentials every central call authenticates with. */\nexport function configureOtiumCentral(join: OtiumJoin | null): void {\n  joinConfig = join;\n  resetPeerCentralCaches();\n}\n\nexport function otiumCentralConfig(): OtiumJoin | null {\n  return joinConfig;\n}\n\nfunction centralFetch(path: string, init: RequestInit): Promise<Response> {\n  if (!joinConfig) throw new Error(\"otium: join credentials missing\");\n  return fetch(`${joinConfig.central}${path}`, {\n    ...init,\n    headers: {\n      authorization: `Bearer ${joinConfig.secret}`,\n      \"content-type\": \"application/json\",\n      ...(init.headers ?? {}),\n    },\n    signal: AbortSignal.timeout(5000),\n  });\n}\n\n/** Active nodes of this cell's workspace (30s cache; pass fresh=true after a\n *  resolution miss so a just-attached node is visible). */\nexport async function listPeerNodes(opts: { fresh?: boolean } = {}): Promise<PeerNode[]> {\n  if (!opts.fresh && nodesCache && Date.now() - nodesCache.at < NODES_CACHE_MS) {\n    return nodesCache.nodes;\n  }\n  const response = await centralFetch(\"/peer/nodes\", { method: \"GET\" });\n  const body = (await response.json()) as {\n    ok: boolean;\n    error?: string;\n    workspaceId?: string;\n    nodes?: PeerNode[];\n  };\n  if (!response.ok || !body.ok || !Array.isArray(body.nodes)) {\n    throw new Error(`otium: node discovery failed: ${body.error ?? response.status}`);\n  }\n  nodesCache = { nodes: body.nodes, workspaceId: body.workspaceId ?? \"\", at: Date.now() };\n  return body.nodes;\n}\n\nexport async function selfPeerNode(): Promise<PeerNode | null> {\n  const nodes = await listPeerNodes();\n  return nodes.find((node) => node.self) ?? null;\n}\n\nexport async function resolvePeerNodeByCellId(cellId: string): Promise<PeerNode | null> {\n  const find = (nodes: PeerNode[]) => nodes.find((node) => node.cellId === cellId) ?? null;\n  const cached = find(await listPeerNodes());\n  if (cached) return cached;\n  return find(await listPeerNodes({ fresh: true }));\n}\n\n/** Mint (or reuse a still-fresh) peer token for one target cell. Tokens are\n *  reusable within their TTL, so cache until shortly before expiry. */\nexport async function mintPeerToken(toCellId: string): Promise<string> {\n  const cached = tokenCache.get(toCellId);\n  if (cached && cached.expiresAtMs - Date.now() > 30_000) return cached.token;\n  const response = await centralFetch(\"/peer/token\", {\n    method: \"POST\",\n    body: JSON.stringify({ toCellId }),\n  });\n  const body = (await response.json()) as {\n    ok: boolean;\n    error?: string;\n    token?: string;\n    expiresAt?: string;\n  };\n  if (!response.ok || !body.ok || !body.token) {\n    throw new Error(`otium: peer token mint failed: ${body.error ?? response.status}`);\n  }\n  tokenCache.set(toCellId, {\n    token: body.token,\n    expiresAtMs: Date.parse(body.expiresAt ?? \"\") || Date.now() + 60_000,\n  });\n  return body.token;\n}\n\n/** Verify an inbound peer token against central (fail-closed on outages). */\nexport async function verifyPeerToken(token: string): Promise<VerifiedPeer | null> {\n  const cached = verifyCache.get(token);\n  if (cached && Date.now() - cached.at < VERIFY_CACHE_MS) return cached.verified;\n  let response: Response;\n  try {\n    response = await centralFetch(\"/peer/verify\", {\n      method: \"POST\",\n      body: JSON.stringify({ token }),\n    });\n  } catch (err) {\n    logger.warn({ err }, \"otium: central verify unreachable\");\n    return null;\n  }\n  const body = (await response.json().catch(() => null)) as (VerifiedPeer & { ok: boolean }) | null;\n  if (!response.ok || !body?.ok) return null;\n  const verified: VerifiedPeer = {\n    workspaceId: body.workspaceId,\n    fromCellId: body.fromCellId,\n    fromNodeName: body.fromNodeName,\n    fromIsPrimary: body.fromIsPrimary,\n    expiresAt: body.expiresAt,\n  };\n  verifyCache.set(token, { verified, at: Date.now() });\n  // Opportunistic sweep — the cache only ever holds a handful of live tokens.\n  for (const [key, entry] of verifyCache) {\n    if (Date.now() - entry.at > VERIFY_CACHE_MS) verifyCache.delete(key);\n  }\n  return verified;\n}\n\n/** Test hook — caches are module singletons. */\nexport function resetPeerCentralCaches(): void {\n  nodesCache = null;\n  verifyCache.clear();\n  tokenCache.clear();\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,IAAM,iBAAiB;AAGvB,IAAM,kBAAkB;AAExB,IAAI,aAA+B;AACnC,IAAI,aAA4E;AAChF,IAAM,cAAc,IAAI;AACxB,IAAM,aAAa,IAAI;AAGhB,SAAS,qBAAqB,CAAC,MAA8B;AAAA,EAClE,aAAa;AAAA,EACb,uBAAuB;AAAA;AAGlB,SAAS,kBAAkB,GAAqB;AAAA,EACrD,OAAO;AAAA;AAGT,SAAS,YAAY,CAAC,MAAc,MAAsC;AAAA,EACxE,KAAK;AAAA,IAAY,MAAM,IAAI,MAAM,iCAAiC;AAAA,EAClE,OAAO,MAAM,GAAG,WAAW,UAAU,QAAQ;AAAA,OACxC;AAAA,IACH,SAAS;AAAA,MACP,eAAe,UAAU,WAAW;AAAA,MACpC,gBAAgB;AAAA,SACZ,KAAK,WAAW,CAAC;AAAA,IACvB;AAAA,IACA,QAAQ,YAAY,QAAQ,IAAI;AAAA,EAClC,CAAC;AAAA;AAKH,eAAsB,aAAa,CAAC,OAA4B,CAAC,GAAwB;AAAA,EACvF,KAAK,KAAK,SAAS,cAAc,KAAK,IAAI,IAAI,WAAW,KAAK,gBAAgB;AAAA,IAC5E,OAAO,WAAW;AAAA,EACpB;AAAA,EACA,MAAM,WAAW,MAAM,aAAa,eAAe,EAAE,QAAQ,MAAM,CAAC;AAAA,EACpE,MAAM,OAAQ,MAAM,SAAS,KAAK;AAAA,EAMlC,KAAK,SAAS,OAAO,KAAK,OAAO,MAAM,QAAQ,KAAK,KAAK,GAAG;AAAA,IAC1D,MAAM,IAAI,MAAM,iCAAiC,KAAK,SAAS,SAAS,QAAQ;AAAA,EAClF;AAAA,EACA,aAAa,EAAE,OAAO,KAAK,OAAO,aAAa,KAAK,eAAe,IAAI,IAAI,KAAK,IAAI,EAAE;AAAA,EACtF,OAAO,KAAK;AAAA;AAGd,eAAsB,YAAY,GAA6B;AAAA,EAC7D,MAAM,QAAQ,MAAM,cAAc;AAAA,EAClC,OAAO,MAAM,KAAK,CAAC,SAAS,KAAK,IAAI,KAAK;AAAA;AAG5C,eAAsB,uBAAuB,CAAC,QAA0C;AAAA,EACtF,MAAM,OAAO,CAAC,UAAsB,MAAM,KAAK,CAAC,SAAS,KAAK,WAAW,MAAM,KAAK;AAAA,EACpF,MAAM,SAAS,KAAK,MAAM,cAAc,CAAC;AAAA,EACzC,IAAI;AAAA,IAAQ,OAAO;AAAA,EACnB,OAAO,KAAK,MAAM,cAAc,EAAE,OAAO,KAAK,CAAC,CAAC;AAAA;AAKlD,eAAsB,aAAa,CAAC,UAAmC;AAAA,EACrE,MAAM,SAAS,WAAW,IAAI,QAAQ;AAAA,EACtC,IAAI,UAAU,OAAO,cAAc,KAAK,IAAI,IAAI;AAAA,IAAQ,OAAO,OAAO;AAAA,EACtE,MAAM,WAAW,MAAM,aAAa,eAAe;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,EACnC,CAAC;AAAA,EACD,MAAM,OAAQ,MAAM,SAAS,KAAK;AAAA,EAMlC,KAAK,SAAS,OAAO,KAAK,OAAO,KAAK,OAAO;AAAA,IAC3C,MAAM,IAAI,MAAM,kCAAkC,KAAK,SAAS,SAAS,QAAQ;AAAA,EACnF;AAAA,EACA,WAAW,IAAI,UAAU;AAAA,IACvB,OAAO,KAAK;AAAA,IACZ,aAAa,KAAK,MAAM,KAAK,aAAa,EAAE,KAAK,KAAK,IAAI,IAAI;AAAA,EAChE,CAAC;AAAA,EACD,OAAO,KAAK;AAAA;AAId,eAAsB,eAAe,CAAC,OAA6C;AAAA,EACjF,MAAM,SAAS,YAAY,IAAI,KAAK;AAAA,EACpC,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,KAAK;AAAA,IAAiB,OAAO,OAAO;AAAA,EACtE,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,WAAW,MAAM,aAAa,gBAAgB;AAAA,MAC5C,QAAQ;AAAA,MACR,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,IAChC,CAAC;AAAA,IACD,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK,EAAE,IAAI,GAAG,mCAAmC;AAAA,IACxD,OAAO;AAAA;AAAA,EAET,MAAM,OAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,IAAI;AAAA,EACpD,KAAK,SAAS,OAAO,MAAM;AAAA,IAAI,OAAO;AAAA,EACtC,MAAM,WAAyB;AAAA,IAC7B,aAAa,KAAK;AAAA,IAClB,YAAY,KAAK;AAAA,IACjB,cAAc,KAAK;AAAA,IACnB,eAAe,KAAK;AAAA,IACpB,WAAW,KAAK;AAAA,EAClB;AAAA,EACA,YAAY,IAAI,OAAO,EAAE,UAAU,IAAI,KAAK,IAAI,EAAE,CAAC;AAAA,EAEnD,YAAY,KAAK,UAAU,aAAa;AAAA,IACtC,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK;AAAA,MAAiB,YAAY,OAAO,GAAG;AAAA,EACrE;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,sBAAsB,GAAS;AAAA,EAC7C,aAAa;AAAA,EACb,YAAY,MAAM;AAAA,EAClB,WAAW,MAAM;AAAA;",
-  "debugId": "FC91852260C865A864756E2164756E21",
-  "names": []
-}

package/dist/chunk-1a6kv9vt.js

@@ -1,118 +0,0 @@
-import {
-  Database
-} from "./chunk-f5xgprg1.js";
-
-// ../../packages/core/src/storage/storage-host.ts
-import { mkdirSync } from "fs";
-import { homedir } from "os";
-import { dirname, join, resolve } from "path";
-var configuredHost = {};
-var fallbackDatabase = null;
-var schemaInitializers = [];
-var initializedSchemas = new WeakMap;
-var initializingDatabases = new WeakSet;
-function envPath(name, fallback) {
-  const value = process.env[name]?.trim();
-  return resolve(value || fallback);
-}
-function defaultStateDir() {
-  return envPath("NEGOTIUM_STATE_DIR", join(homedir(), ".negotium"));
-}
-function defaultDataDir() {
-  return envPath("NEGOTIUM_DATA_DIR", join(defaultStateDir(), "data"));
-}
-function defaultLogDir() {
-  return envPath("NEGOTIUM_LOG_DIR", join(defaultStateDir(), "logs"));
-}
-function defaultWorkspaceDir() {
-  return envPath("NEGOTIUM_WORKSPACE_DIR", join(defaultStateDir(), "workspace"));
-}
-function defaultSessionAsksDir() {
-  const runDir = envPath("NEGOTIUM_RUN_DIR", join(defaultStateDir(), "run"));
-  return join(runDir, "session-asks");
-}
-function defaultSessionsDatabasePath() {
-  return envPath("SESSIONS_DB_PATH", join(defaultDataDir(), "sessions.db"));
-}
-function initializeDatabase(database) {
-  database.exec("PRAGMA journal_mode = WAL");
-  database.exec("PRAGMA foreign_keys = ON");
-  database.exec("PRAGMA busy_timeout = 5000");
-  database.exec("PRAGMA wal_autocheckpoint = 1000");
-  try {
-    database.exec("PRAGMA wal_checkpoint(TRUNCATE)");
-  } catch {}
-}
-function defaultDatabase() {
-  if (fallbackDatabase)
-    return fallbackDatabase;
-  const path = defaultSessionsDatabasePath();
-  mkdirSync(dirname(path), { recursive: true });
-  fallbackDatabase = new Database(path, { create: true });
-  initializeDatabase(fallbackDatabase);
-  return fallbackDatabase;
-}
-function resolveStorageDatabase() {
-  return configuredHost.database ?? defaultDatabase();
-}
-function resolveStorageDataDir() {
-  return configuredHost.dataDir ?? defaultDataDir();
-}
-function resolveStorageLogDir() {
-  return configuredHost.logDir ?? defaultLogDir();
-}
-function resolveStorageSessionAsksDir() {
-  return configuredHost.sessionAsksDir ?? defaultSessionAsksDir();
-}
-function resolveStorageWorkspaceDir() {
-  return configuredHost.workspaceDir ?? defaultWorkspaceDir();
-}
-function resolveStorageSharedWikiDir() {
-  return join(resolveStorageWorkspaceDir(), "wiki");
-}
-function registerStorageSchemaInitializer(initialize, priority = 100) {
-  schemaInitializers.push({ initialize, priority });
-  schemaInitializers.sort((a, b) => a.priority - b.priority);
-}
-function ensureStorageSchemas(database = resolveStorageDatabase()) {
-  if (initializingDatabases.has(database))
-    return;
-  let initialized = initializedSchemas.get(database);
-  if (!initialized) {
-    initialized = new Set;
-    initializedSchemas.set(database, initialized);
-  }
-  initializingDatabases.add(database);
-  try {
-    for (const entry of schemaInitializers) {
-      if (initialized.has(entry.initialize))
-        continue;
-      initialized.add(entry.initialize);
-      try {
-        entry.initialize(database);
-      } catch (error) {
-        initialized.delete(entry.initialize);
-        throw error;
-      }
-    }
-  } finally {
-    initializingDatabases.delete(database);
-  }
-}
-var storageDatabase = new Proxy({}, {
-  get(_target, property) {
-    const database = resolveStorageDatabase();
-    ensureStorageSchemas(database);
-    const value = Reflect.get(database, property, database);
-    return typeof value === "function" ? value.bind(database) : value;
-  },
-  set(_target, property, value) {
-    const database = resolveStorageDatabase();
-    ensureStorageSchemas(database);
-    return Reflect.set(database, property, value, database);
-  }
-});
-
-export { resolveStorageDataDir, resolveStorageLogDir, resolveStorageSessionAsksDir, resolveStorageWorkspaceDir, resolveStorageSharedWikiDir, registerStorageSchemaInitializer, storageDatabase };
-
-//# debugId=83AECADE534BF13864756E2164756E21

package/dist/chunk-1a6kv9vt.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../packages/core/src/storage/storage-host.ts"],
-  "sourcesContent": [
-    "import { mkdirSync } from \"node:fs\";\nimport { homedir } from \"node:os\";\nimport { dirname, join, resolve } from \"node:path\";\nimport { Database } from \"#storage/sqlite\";\n\nexport type StorageDatabase = InstanceType<typeof Database>;\n\nexport interface StorageHostOptions {\n  /** Borrowed SQLite connection. Negotium never closes an injected database. */\n  database?: StorageDatabase;\n  /** Persistent JSON/JSONL state root. */\n  dataDir?: string;\n  /** Activity and token-usage log root. */\n  logDir?: string;\n  /** Durable ask edge root. Defaults to Negotium's runtime ask directory. */\n  sessionAsksDir?: string;\n  /** Shared topic workspace root used by wiki/archive helpers. */\n  workspaceDir?: string;\n}\n\nlet configuredHost: Readonly<StorageHostOptions> = {};\nlet fallbackDatabase: StorageDatabase | null = null;\n\ntype StorageSchemaInitializer = (database: StorageDatabase) => void;\ninterface RegisteredSchemaInitializer {\n  initialize: StorageSchemaInitializer;\n  priority: number;\n}\n\nconst schemaInitializers: RegisteredSchemaInitializer[] = [];\nconst initializedSchemas = new WeakMap<StorageDatabase, Set<StorageSchemaInitializer>>();\nconst initializingDatabases = new WeakSet<StorageDatabase>();\n\nfunction envPath(name: string, fallback: string): string {\n  const value = process.env[name]?.trim();\n  return resolve(value || fallback);\n}\n\nfunction defaultStateDir(): string {\n  return envPath(\"NEGOTIUM_STATE_DIR\", join(homedir(), \".negotium\"));\n}\n\nfunction defaultDataDir(): string {\n  return envPath(\"NEGOTIUM_DATA_DIR\", join(defaultStateDir(), \"data\"));\n}\n\nfunction defaultLogDir(): string {\n  return envPath(\"NEGOTIUM_LOG_DIR\", join(defaultStateDir(), \"logs\"));\n}\n\nfunction defaultWorkspaceDir(): string {\n  return envPath(\"NEGOTIUM_WORKSPACE_DIR\", join(defaultStateDir(), \"workspace\"));\n}\n\nfunction defaultSessionAsksDir(): string {\n  const runDir = envPath(\"NEGOTIUM_RUN_DIR\", join(defaultStateDir(), \"run\"));\n  return join(runDir, \"session-asks\");\n}\n\nfunction defaultSessionsDatabasePath(): string {\n  return envPath(\"SESSIONS_DB_PATH\", join(defaultDataDir(), \"sessions.db\"));\n}\n\nfunction initializeDatabase(database: StorageDatabase): void {\n  database.exec(\"PRAGMA journal_mode = WAL\");\n  database.exec(\"PRAGMA foreign_keys = ON\");\n  database.exec(\"PRAGMA busy_timeout = 5000\");\n  database.exec(\"PRAGMA wal_autocheckpoint = 1000\");\n  try {\n    database.exec(\"PRAGMA wal_checkpoint(TRUNCATE)\");\n  } catch {\n    // Non-fatal; a concurrent writer may hold the WAL briefly.\n  }\n}\n\nfunction defaultDatabase(): StorageDatabase {\n  if (fallbackDatabase) return fallbackDatabase;\n  const path = defaultSessionsDatabasePath();\n  mkdirSync(dirname(path), { recursive: true });\n  fallbackDatabase = new Database(path, { create: true });\n  initializeDatabase(fallbackDatabase);\n  return fallbackDatabase;\n}\n\nexport function resolveStorageDatabase(): StorageDatabase {\n  return configuredHost.database ?? defaultDatabase();\n}\n\nexport function resolveStorageDataDir(): string {\n  return configuredHost.dataDir ?? defaultDataDir();\n}\n\nexport function resolveStorageLogDir(): string {\n  return configuredHost.logDir ?? defaultLogDir();\n}\n\nexport function resolveStorageSessionAsksDir(): string {\n  return configuredHost.sessionAsksDir ?? defaultSessionAsksDir();\n}\n\nexport function resolveStorageWorkspaceDir(): string {\n  return configuredHost.workspaceDir ?? defaultWorkspaceDir();\n}\n\nexport function resolveStorageSharedWikiDir(): string {\n  return join(resolveStorageWorkspaceDir(), \"wiki\");\n}\n\nexport function resolveStorageUsersLogDir(): string {\n  return join(resolveStorageDataDir(), \"users\");\n}\n\n/**\n * Configure the process-local storage boundary for an embedding host.\n *\n * Resolution is lazy: importing `negotium/storage` never opens a database or\n * touches a filesystem path. The returned disposer restores the exact prior\n * host, which keeps tests and nested embeddings isolated.\n */\nexport function configureStorageHost(options: StorageHostOptions): () => void {\n  const previous = configuredHost;\n  configuredHost = Object.freeze({ ...previous, ...options });\n  let restored = false;\n  return () => {\n    if (restored) return;\n    restored = true;\n    configuredHost = previous;\n  };\n}\n\n/** Close only Negotium's fallback connection. Injected connections are borrowed. */\nexport function closeStorageDatabase(): void {\n  if (configuredHost.database || !fallbackDatabase) return;\n  fallbackDatabase.close();\n  fallbackDatabase = null;\n}\n\nexport function registerStorageSchemaInitializer(\n  initialize: StorageSchemaInitializer,\n  priority = 100,\n): void {\n  schemaInitializers.push({ initialize, priority });\n  schemaInitializers.sort((a, b) => a.priority - b.priority);\n}\n\nexport function ensureStorageSchemas(database = resolveStorageDatabase()): void {\n  if (initializingDatabases.has(database)) return;\n  let initialized = initializedSchemas.get(database);\n  if (!initialized) {\n    initialized = new Set();\n    initializedSchemas.set(database, initialized);\n  }\n  initializingDatabases.add(database);\n  try {\n    for (const entry of schemaInitializers) {\n      if (initialized.has(entry.initialize)) continue;\n      // Mark first so a migration that calls through the public db proxy does\n      // not recursively invoke itself. Remove on failure so the next call can retry.\n      initialized.add(entry.initialize);\n      try {\n        entry.initialize(database);\n      } catch (error) {\n        initialized.delete(entry.initialize);\n        throw error;\n      }\n    }\n  } finally {\n    initializingDatabases.delete(database);\n  }\n}\n\n/** Stable proxy identity used by legacy imports and embedding hosts. */\nexport const storageDatabase = new Proxy({} as StorageDatabase, {\n  get(_target, property) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    const value = Reflect.get(database as object, property, database);\n    return typeof value === \"function\" ? value.bind(database) : value;\n  },\n  set(_target, property, value) {\n    const database = resolveStorageDatabase();\n    ensureStorageSchemas(database);\n    return Reflect.set(database as object, property, value, database);\n  },\n});\n"
-  ],
-  "mappings": ";;;;;AAAA;AACA;AACA;AAkBA,IAAI,iBAA+C,CAAC;AACpD,IAAI,mBAA2C;AAQ/C,IAAM,qBAAoD,CAAC;AAC3D,IAAM,qBAAqB,IAAI;AAC/B,IAAM,wBAAwB,IAAI;AAElC,SAAS,OAAO,CAAC,MAAc,UAA0B;AAAA,EACvD,MAAM,QAAQ,QAAQ,IAAI,OAAO,KAAK;AAAA,EACtC,OAAO,QAAQ,SAAS,QAAQ;AAAA;AAGlC,SAAS,eAAe,GAAW;AAAA,EACjC,OAAO,QAAQ,sBAAsB,KAAK,QAAQ,GAAG,WAAW,CAAC;AAAA;AAGnE,SAAS,cAAc,GAAW;AAAA,EAChC,OAAO,QAAQ,qBAAqB,KAAK,gBAAgB,GAAG,MAAM,CAAC;AAAA;AAGrE,SAAS,aAAa,GAAW;AAAA,EAC/B,OAAO,QAAQ,oBAAoB,KAAK,gBAAgB,GAAG,MAAM,CAAC;AAAA;AAGpE,SAAS,mBAAmB,GAAW;AAAA,EACrC,OAAO,QAAQ,0BAA0B,KAAK,gBAAgB,GAAG,WAAW,CAAC;AAAA;AAG/E,SAAS,qBAAqB,GAAW;AAAA,EACvC,MAAM,SAAS,QAAQ,oBAAoB,KAAK,gBAAgB,GAAG,KAAK,CAAC;AAAA,EACzE,OAAO,KAAK,QAAQ,cAAc;AAAA;AAGpC,SAAS,2BAA2B,GAAW;AAAA,EAC7C,OAAO,QAAQ,oBAAoB,KAAK,eAAe,GAAG,aAAa,CAAC;AAAA;AAG1E,SAAS,kBAAkB,CAAC,UAAiC;AAAA,EAC3D,SAAS,KAAK,2BAA2B;AAAA,EACzC,SAAS,KAAK,0BAA0B;AAAA,EACxC,SAAS,KAAK,4BAA4B;AAAA,EAC1C,SAAS,KAAK,kCAAkC;AAAA,EAChD,IAAI;AAAA,IACF,SAAS,KAAK,iCAAiC;AAAA,IAC/C,MAAM;AAAA;AAKV,SAAS,eAAe,GAAoB;AAAA,EAC1C,IAAI;AAAA,IAAkB,OAAO;AAAA,EAC7B,MAAM,OAAO,4BAA4B;AAAA,EACzC,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C,mBAAmB,IAAI,SAAS,MAAM,EAAE,QAAQ,KAAK,CAAC;AAAA,EACtD,mBAAmB,gBAAgB;AAAA,EACnC,OAAO;AAAA;AAGF,SAAS,sBAAsB,GAAoB;AAAA,EACxD,OAAO,eAAe,YAAY,gBAAgB;AAAA;AAG7C,SAAS,qBAAqB,GAAW;AAAA,EAC9C,OAAO,eAAe,WAAW,eAAe;AAAA;AAG3C,SAAS,oBAAoB,GAAW;AAAA,EAC7C,OAAO,eAAe,UAAU,cAAc;AAAA;AAGzC,SAAS,4BAA4B,GAAW;AAAA,EACrD,OAAO,eAAe,kBAAkB,sBAAsB;AAAA;AAGzD,SAAS,0BAA0B,GAAW;AAAA,EACnD,OAAO,eAAe,gBAAgB,oBAAoB;AAAA;AAGrD,SAAS,2BAA2B,GAAW;AAAA,EACpD,OAAO,KAAK,2BAA2B,GAAG,MAAM;AAAA;AAgC3C,SAAS,gCAAgC,CAC9C,YACA,WAAW,KACL;AAAA,EACN,mBAAmB,KAAK,EAAE,YAAY,SAAS,CAAC;AAAA,EAChD,mBAAmB,KAAK,CAAC,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ;AAAA;AAGpD,SAAS,oBAAoB,CAAC,WAAW,uBAAuB,GAAS;AAAA,EAC9E,IAAI,sBAAsB,IAAI,QAAQ;AAAA,IAAG;AAAA,EACzC,IAAI,cAAc,mBAAmB,IAAI,QAAQ;AAAA,EACjD,KAAK,aAAa;AAAA,IAChB,cAAc,IAAI;AAAA,IAClB,mBAAmB,IAAI,UAAU,WAAW;AAAA,EAC9C;AAAA,EACA,sBAAsB,IAAI,QAAQ;AAAA,EAClC,IAAI;AAAA,IACF,WAAW,SAAS,oBAAoB;AAAA,MACtC,IAAI,YAAY,IAAI,MAAM,UAAU;AAAA,QAAG;AAAA,MAGvC,YAAY,IAAI,MAAM,UAAU;AAAA,MAChC,IAAI;AAAA,QACF,MAAM,WAAW,QAAQ;AAAA,QACzB,OAAO,OAAO;AAAA,QACd,YAAY,OAAO,MAAM,UAAU;AAAA,QACnC,MAAM;AAAA;AAAA,IAEV;AAAA,YACA;AAAA,IACA,sBAAsB,OAAO,QAAQ;AAAA;AAAA;AAKlC,IAAM,kBAAkB,IAAI,MAAM,CAAC,GAAsB;AAAA,EAC9D,GAAG,CAAC,SAAS,UAAU;AAAA,IACrB,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,MAAM,QAAQ,QAAQ,IAAI,UAAoB,UAAU,QAAQ;AAAA,IAChE,OAAO,OAAO,UAAU,aAAa,MAAM,KAAK,QAAQ,IAAI;AAAA;AAAA,EAE9D,GAAG,CAAC,SAAS,UAAU,OAAO;AAAA,IAC5B,MAAM,WAAW,uBAAuB;AAAA,IACxC,qBAAqB,QAAQ;AAAA,IAC7B,OAAO,QAAQ,IAAI,UAAoB,UAAU,OAAO,QAAQ;AAAA;AAEpE,CAAC;",
-  "debugId": "83AECADE534BF13864756E2164756E21",
-  "names": []
-}

package/dist/chunk-1b62d730.js

@@ -1,117 +0,0 @@
-// @bun
-import"./chunk-93krf6ng.js";
-import"./chunk-fswhzdf5.js";
-import"./chunk-cxa7yghg.js";
-import"./chunk-59d0shyj.js";
-import"./chunk-rbvctv1n.js";
-import"./chunk-1k7t7bnx.js";
-import"./chunk-g144wdrs.js";
-import"./chunk-91ckrvk8.js";
-import"./chunk-66y0hr8c.js";
-import"./chunk-h9vbhhgr.js";
-import"./chunk-f361dwba.js";
-import"./chunk-8cahx7xc.js";
-import"./chunk-6d4fmea5.js";
-import"./chunk-61px0717.js";
-import"./chunk-tsstrcfc.js";
-import"./chunk-6ah5farg.js";
-import {
-  VAULT_DESCRIPTION_MAX_LENGTH,
-  VAULT_VALUE_MAX_BYTES,
-  VAULT_VALUE_MIN_BYTES,
-  normalizeVaultKey,
-  validateVaultKey,
-  vaultDel,
-  vaultListWithValues,
-  vaultSet
-} from "./chunk-41ygvg5k.js";
-import"./chunk-m9e3tbr8.js";
-import"./chunk-mh5mexsf.js";
-import"./chunk-qwy57177.js";
-import"./chunk-j0kjscb7.js";
-import"./chunk-h980hb2n.js";
-import"./chunk-ffefbd3r.js";
-import"./chunk-pg1azh6n.js";
-import"./chunk-1a6kv9vt.js";
-import"./chunk-f5xgprg1.js";
-import"./chunk-hwy3n31w.js";
-
-// ../cli/src/commands/vault.ts
-var DEFAULT_USER = "local";
-function vaultCommand(args) {
-  const [sub, key, value, ...descParts] = args;
-  switch (sub) {
-    case undefined:
-    case "list": {
-      const entries = vaultListWithValues(DEFAULT_USER);
-      if (entries.length === 0) {
-        console.log("vault is empty \u2014 `negotium vault set MY_KEY <value> [description]`");
-        return;
-      }
-      for (const entry of entries) {
-        console.log(`${entry.key}  ${entry.description || ""}`.trimEnd());
-      }
-      return;
-    }
-    case "set": {
-      if (!key || !value) {
-        console.error("usage: negotium vault set <KEY> <value> [description]");
-        process.exitCode = 1;
-        return;
-      }
-      const normalized = normalizeVaultKey(key);
-      if (!validateVaultKey(normalized)) {
-        console.error("invalid key \u2014 use A-Z, 0-9, _ (must start with a letter, max 128 chars)");
-        process.exitCode = 1;
-        return;
-      }
-      const valueBytes = Buffer.byteLength(value, "utf8");
-      if (valueBytes < VAULT_VALUE_MIN_BYTES || valueBytes > VAULT_VALUE_MAX_BYTES) {
-        console.error(`value must be between ${VAULT_VALUE_MIN_BYTES} and ${VAULT_VALUE_MAX_BYTES} bytes`);
-        process.exitCode = 1;
-        return;
-      }
-      const description = descParts.join(" ");
-      if (description.length > VAULT_DESCRIPTION_MAX_LENGTH) {
-        console.error(`description must be at most ${VAULT_DESCRIPTION_MAX_LENGTH} characters`);
-        process.exitCode = 1;
-        return;
-      }
-      vaultSet(DEFAULT_USER, normalized, value, description);
-      console.log(`stored ${normalized}`);
-      return;
-    }
-    case "get": {
-      if (!key) {
-        console.error("usage: negotium vault get <KEY>");
-        process.exitCode = 1;
-        return;
-      }
-      const entry = vaultListWithValues(DEFAULT_USER).find((e) => e.key === normalizeVaultKey(key));
-      if (!entry) {
-        console.error(`no such key "${key}"`);
-        process.exitCode = 1;
-        return;
-      }
-      console.log(entry.value);
-      return;
-    }
-    case "del": {
-      if (!key) {
-        console.error("usage: negotium vault del <KEY>");
-        process.exitCode = 1;
-        return;
-      }
-      console.log(vaultDel(DEFAULT_USER, normalizeVaultKey(key)) ? `deleted ${key}` : `no such key "${key}"`);
-      return;
-    }
-    default:
-      console.error(`unknown subcommand "${sub}" \u2014 use list|set|get|del`);
-      process.exitCode = 1;
-  }
-}
-export {
-  vaultCommand
-};
-
-//# debugId=EE1D095AA690E88864756E2164756E21

package/dist/chunk-1b62d730.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../cli/src/commands/vault.ts"],
-  "sourcesContent": [
-    "/**\n * `negotium vault <list|set|get|del>` — node secret store.\n *\n * Values are AES-encrypted at rest with the per-node master key\n * (~/.negotium/vault-master-key, or NEGOTIUM_VAULT_MASTER_KEY). The vault is a\n * core system: agents/MCPs read it through the runtime, humans through here.\n */\n\nimport {\n  normalizeVaultKey,\n  VAULT_DESCRIPTION_MAX_LENGTH,\n  VAULT_VALUE_MAX_BYTES,\n  VAULT_VALUE_MIN_BYTES,\n  validateVaultKey,\n  vaultDel,\n  vaultListWithValues,\n  vaultSet,\n} from \"@negotium/core\";\n\nconst DEFAULT_USER = \"local\";\n\nexport function vaultCommand(args: string[]): void {\n  const [sub, key, value, ...descParts] = args;\n\n  switch (sub) {\n    case undefined:\n    case \"list\": {\n      const entries = vaultListWithValues(DEFAULT_USER);\n      if (entries.length === 0) {\n        console.log(\"vault is empty — `negotium vault set MY_KEY <value> [description]`\");\n        return;\n      }\n      for (const entry of entries) {\n        console.log(`${entry.key}  ${entry.description || \"\"}`.trimEnd());\n      }\n      return;\n    }\n    case \"set\": {\n      if (!key || !value) {\n        console.error(\"usage: negotium vault set <KEY> <value> [description]\");\n        process.exitCode = 1;\n        return;\n      }\n      const normalized = normalizeVaultKey(key);\n      if (!validateVaultKey(normalized)) {\n        console.error(\"invalid key — use A-Z, 0-9, _ (must start with a letter, max 128 chars)\");\n        process.exitCode = 1;\n        return;\n      }\n      const valueBytes = Buffer.byteLength(value, \"utf8\");\n      if (valueBytes < VAULT_VALUE_MIN_BYTES || valueBytes > VAULT_VALUE_MAX_BYTES) {\n        console.error(\n          `value must be between ${VAULT_VALUE_MIN_BYTES} and ${VAULT_VALUE_MAX_BYTES} bytes`,\n        );\n        process.exitCode = 1;\n        return;\n      }\n      const description = descParts.join(\" \");\n      if (description.length > VAULT_DESCRIPTION_MAX_LENGTH) {\n        console.error(`description must be at most ${VAULT_DESCRIPTION_MAX_LENGTH} characters`);\n        process.exitCode = 1;\n        return;\n      }\n      vaultSet(DEFAULT_USER, normalized, value, description);\n      console.log(`stored ${normalized}`);\n      return;\n    }\n    case \"get\": {\n      if (!key) {\n        console.error(\"usage: negotium vault get <KEY>\");\n        process.exitCode = 1;\n        return;\n      }\n      const entry = vaultListWithValues(DEFAULT_USER).find((e) => e.key === normalizeVaultKey(key));\n      if (!entry) {\n        console.error(`no such key \"${key}\"`);\n        process.exitCode = 1;\n        return;\n      }\n      console.log(entry.value);\n      return;\n    }\n    case \"del\": {\n      if (!key) {\n        console.error(\"usage: negotium vault del <KEY>\");\n        process.exitCode = 1;\n        return;\n      }\n      console.log(\n        vaultDel(DEFAULT_USER, normalizeVaultKey(key)) ? `deleted ${key}` : `no such key \"${key}\"`,\n      );\n      return;\n    }\n    default:\n      console.error(`unknown subcommand \"${sub}\" — use list|set|get|del`);\n      process.exitCode = 1;\n  }\n}\n"
-  ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmBA,IAAM,eAAe;AAEd,SAAS,YAAY,CAAC,MAAsB;AAAA,EACjD,OAAO,KAAK,KAAK,UAAU,aAAa;AAAA,EAExC,QAAQ;AAAA,SACD;AAAA,SACA,QAAQ;AAAA,MACX,MAAM,UAAU,oBAAoB,YAAY;AAAA,MAChD,IAAI,QAAQ,WAAW,GAAG;AAAA,QACxB,QAAQ,IAAI,yEAAmE;AAAA,QAC/E;AAAA,MACF;AAAA,MACA,WAAW,SAAS,SAAS;AAAA,QAC3B,QAAQ,IAAI,GAAG,MAAM,QAAQ,MAAM,eAAe,KAAK,QAAQ,CAAC;AAAA,MAClE;AAAA,MACA;AAAA,IACF;AAAA,SACK,OAAO;AAAA,MACV,KAAK,QAAQ,OAAO;AAAA,QAClB,QAAQ,MAAM,uDAAuD;AAAA,QACrE,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,MAAM,aAAa,kBAAkB,GAAG;AAAA,MACxC,KAAK,iBAAiB,UAAU,GAAG;AAAA,QACjC,QAAQ,MAAM,8EAAwE;AAAA,QACtF,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,MAAM,aAAa,OAAO,WAAW,OAAO,MAAM;AAAA,MAClD,IAAI,aAAa,yBAAyB,aAAa,uBAAuB;AAAA,QAC5E,QAAQ,MACN,yBAAyB,6BAA6B,6BACxD;AAAA,QACA,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,MAAM,cAAc,UAAU,KAAK,GAAG;AAAA,MACtC,IAAI,YAAY,SAAS,8BAA8B;AAAA,QACrD,QAAQ,MAAM,+BAA+B,yCAAyC;AAAA,QACtF,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,SAAS,cAAc,YAAY,OAAO,WAAW;AAAA,MACrD,QAAQ,IAAI,UAAU,YAAY;AAAA,MAClC;AAAA,IACF;AAAA,SACK,OAAO;AAAA,MACV,KAAK,KAAK;AAAA,QACR,QAAQ,MAAM,iCAAiC;AAAA,QAC/C,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,MAAM,QAAQ,oBAAoB,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,kBAAkB,GAAG,CAAC;AAAA,MAC5F,KAAK,OAAO;AAAA,QACV,QAAQ,MAAM,gBAAgB,MAAM;AAAA,QACpC,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,QAAQ,IAAI,MAAM,KAAK;AAAA,MACvB;AAAA,IACF;AAAA,SACK,OAAO;AAAA,MACV,KAAK,KAAK;AAAA,QACR,QAAQ,MAAM,iCAAiC;AAAA,QAC/C,QAAQ,WAAW;AAAA,QACnB;AAAA,MACF;AAAA,MACA,QAAQ,IACN,SAAS,cAAc,kBAAkB,GAAG,CAAC,IAAI,WAAW,QAAQ,gBAAgB,MACtF;AAAA,MACA;AAAA,IACF;AAAA;AAAA,MAEE,QAAQ,MAAM,uBAAuB,kCAA4B;AAAA,MACjE,QAAQ,WAAW;AAAA;AAAA;",
-  "debugId": "EE1D095AA690E88864756E2164756E21",
-  "names": []
-}

package/dist/chunk-1k7t7bnx.js

@@ -1,97 +0,0 @@
-// @bun
-import"./chunk-hwy3n31w.js";
-
-// ../../packages/core/src/mcp/session-comm/peer-forward.ts
-var activeBridge = null;
-var PEER_BRIDGE_URL_ENV = "NEGOTIUM_PEER_SESSION_BRIDGE_URL";
-var PEER_BRIDGE_TOKEN_ENV = "NEGOTIUM_PEER_SESSION_BRIDGE_TOKEN";
-var PEER_BRIDGE_TIMEOUT_MS = 5000;
-function loopbackBridgeConfig() {
-  const rawUrl = process.env[PEER_BRIDGE_URL_ENV]?.trim();
-  const token = process.env[PEER_BRIDGE_TOKEN_ENV]?.trim();
-  if (!rawUrl || !token)
-    return null;
-  try {
-    const url = new URL(rawUrl);
-    if (url.protocol !== "http:" || !["127.0.0.1", "::1", "localhost"].includes(url.hostname)) {
-      return null;
-    }
-    return { url: url.toString(), token };
-  } catch {
-    return null;
-  }
-}
-async function callLoopbackBridge(request) {
-  const config = loopbackBridgeConfig();
-  if (!config)
-    return { configured: false, result: null };
-  try {
-    const response = await fetch(config.url, {
-      method: "POST",
-      headers: {
-        authorization: `Bearer ${config.token}`,
-        "content-type": "application/json"
-      },
-      body: JSON.stringify(request),
-      signal: AbortSignal.timeout(PEER_BRIDGE_TIMEOUT_MS)
-    });
-    if (!response.ok)
-      return { configured: true, result: null };
-    return { configured: true, result: await response.json() };
-  } catch {
-    return { configured: true, result: null };
-  }
-}
-function registerPeerSessionBridge(bridge) {
-  activeBridge = bridge;
-  return () => {
-    if (activeBridge === bridge)
-      activeBridge = null;
-  };
-}
-async function forwardToPeer(args) {
-  if (activeBridge)
-    return activeBridge.forward(args);
-  const forwarded = await callLoopbackBridge({ action: "forward", args });
-  if (forwarded.result)
-    return forwarded.result;
-  return {
-    ok: false,
-    error: forwarded.configured ? "remote session bridge is configured but unavailable" : "remote nodes are not connected on this negotium node (standalone mode)"
-  };
-}
-async function peerSessionsForUser(userId, sourceQueryId) {
-  if (activeBridge)
-    return activeBridge.sessions(userId, sourceQueryId);
-  const sessions = await callLoopbackBridge({
-    action: "sessions",
-    userId,
-    sourceQueryId
-  });
-  if (sessions.result)
-    return sessions.result;
-  if (sessions.configured)
-    return { ok: false, nodes: [] };
-  return { ok: true, nodes: [] };
-}
-async function deliverPeerReply(route, sourceTitle, replyText, kind) {
-  if (activeBridge)
-    return activeBridge.reply(route, sourceTitle, replyText, kind);
-  return (await callLoopbackBridge({
-    action: "reply",
-    route,
-    sourceTitle,
-    replyText,
-    kind
-  })).result ?? false;
-}
-export {
-  registerPeerSessionBridge,
-  peerSessionsForUser,
-  forwardToPeer,
-  deliverPeerReply
-};
-
-export { registerPeerSessionBridge, deliverPeerReply };
-
-//# debugId=C6D7A2F8FD57D92564756E2164756E21

package/dist/chunk-1k7t7bnx.js.map

@@ -1,10 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../../../packages/core/src/mcp/session-comm/peer-forward.ts"],
-  "sourcesContent": [
-    "/**\n * Remote-node forwarding adapter hook.\n *\n * Addressing keeps the `\"<node>/<topic>\"` shape so cross-node session-comm can\n * plug in later (an otium-hub adapter, a negotium peer protocol, …) without\n * changing tool contracts. On a standalone node every remote call fails\n * gracefully and `peerSessionsForUser` contributes nothing to peek listings.\n */\n\nexport interface PeerForwardArgs {\n  action: \"tell\" | \"ask\" | \"abort\";\n  toNode: string;\n  toTopic: string;\n  userId: string;\n  fromKey?: string;\n  fromTitle?: string;\n  fromTopicId?: string;\n  message?: string;\n  requestId?: string;\n  depth?: number;\n  fromDepth?: number;\n  /** Hub turn authorizing a worker-originated peer call. */\n  sourceQueryId?: string;\n}\n\nexport type PeerForwardResult = { ok: true } | { ok: false; error: string };\n\nexport interface RemoteReplyRoute {\n  nodeName: string;\n  nodeCellId: string;\n  topicId: string;\n  userId: string;\n  requestId: string;\n}\n\nexport interface PeerSessionBridge {\n  forward(args: PeerForwardArgs): Promise<PeerForwardResult>;\n  sessions(userId: string, sourceQueryId?: string): Promise<PeerSessionsResult>;\n  reply(\n    route: RemoteReplyRoute,\n    sourceTitle: string,\n    replyText: string,\n    kind: \"reply\" | \"error\",\n  ): Promise<boolean>;\n}\n\nlet activeBridge: PeerSessionBridge | null = null;\n\nconst PEER_BRIDGE_URL_ENV = \"NEGOTIUM_PEER_SESSION_BRIDGE_URL\";\nconst PEER_BRIDGE_TOKEN_ENV = \"NEGOTIUM_PEER_SESSION_BRIDGE_TOKEN\";\nconst PEER_BRIDGE_TIMEOUT_MS = 5_000;\n\ntype IpcRequest =\n  | { action: \"forward\"; args: PeerForwardArgs }\n  | { action: \"sessions\"; userId: string; sourceQueryId?: string }\n  | {\n      action: \"reply\";\n      route: RemoteReplyRoute;\n      sourceTitle: string;\n      replyText: string;\n      kind: \"reply\" | \"error\";\n    };\n\nfunction loopbackBridgeConfig(): { url: string; token: string } | null {\n  const rawUrl = process.env[PEER_BRIDGE_URL_ENV]?.trim();\n  const token = process.env[PEER_BRIDGE_TOKEN_ENV]?.trim();\n  if (!rawUrl || !token) return null;\n  try {\n    const url = new URL(rawUrl);\n    if (url.protocol !== \"http:\" || ![\"127.0.0.1\", \"::1\", \"localhost\"].includes(url.hostname)) {\n      return null;\n    }\n    return { url: url.toString(), token };\n  } catch {\n    return null;\n  }\n}\n\nasync function callLoopbackBridge<T>(\n  request: IpcRequest,\n): Promise<{ configured: boolean; result: T | null }> {\n  const config = loopbackBridgeConfig();\n  if (!config) return { configured: false, result: null };\n  try {\n    const response = await fetch(config.url, {\n      method: \"POST\",\n      headers: {\n        authorization: `Bearer ${config.token}`,\n        \"content-type\": \"application/json\",\n      },\n      body: JSON.stringify(request),\n      signal: AbortSignal.timeout(PEER_BRIDGE_TIMEOUT_MS),\n    });\n    if (!response.ok) return { configured: true, result: null };\n    return { configured: true, result: (await response.json()) as T };\n  } catch {\n    return { configured: true, result: null };\n  }\n}\n\nexport function registerPeerSessionBridge(bridge: PeerSessionBridge): () => void {\n  activeBridge = bridge;\n  return () => {\n    if (activeBridge === bridge) activeBridge = null;\n  };\n}\n\nexport async function forwardToPeer(args: PeerForwardArgs): Promise<PeerForwardResult> {\n  if (activeBridge) return activeBridge.forward(args);\n  const forwarded = await callLoopbackBridge<PeerForwardResult>({ action: \"forward\", args });\n  if (forwarded.result) return forwarded.result;\n  return {\n    ok: false,\n    error: forwarded.configured\n      ? \"remote session bridge is configured but unavailable\"\n      : \"remote nodes are not connected on this negotium node (standalone mode)\",\n  };\n}\n\nexport interface PeerSessionEntry {\n  name: string;\n  agent: string | null;\n  hasSession: boolean;\n  description?: string;\n}\n\nexport interface PeerSessionsResult {\n  ok: boolean;\n  nodes?: Array<{ node: string; error?: string; sessions?: PeerSessionEntry[] }>;\n}\n\nexport async function peerSessionsForUser(\n  userId: string,\n  sourceQueryId?: string,\n): Promise<PeerSessionsResult> {\n  if (activeBridge) return activeBridge.sessions(userId, sourceQueryId);\n  const sessions = await callLoopbackBridge<PeerSessionsResult>({\n    action: \"sessions\",\n    userId,\n    sourceQueryId,\n  });\n  if (sessions.result) return sessions.result;\n  if (sessions.configured) return { ok: false, nodes: [] };\n  return { ok: true, nodes: [] };\n}\n\nexport async function deliverPeerReply(\n  route: RemoteReplyRoute,\n  sourceTitle: string,\n  replyText: string,\n  kind: \"reply\" | \"error\",\n): Promise<boolean> {\n  if (activeBridge) return activeBridge.reply(route, sourceTitle, replyText, kind);\n  return (\n    (\n      await callLoopbackBridge<boolean>({\n        action: \"reply\",\n        route,\n        sourceTitle,\n        replyText,\n        kind,\n      })\n    ).result ?? false\n  );\n}\n"
-  ],
-  "mappings": ";;;;AA8CA,IAAI,eAAyC;AAE7C,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB;AAC9B,IAAM,yBAAyB;AAa/B,SAAS,oBAAoB,GAA0C;AAAA,EACrE,MAAM,SAAS,QAAQ,IAAI,sBAAsB,KAAK;AAAA,EACtD,MAAM,QAAQ,QAAQ,IAAI,wBAAwB,KAAK;AAAA,EACvD,KAAK,WAAW;AAAA,IAAO,OAAO;AAAA,EAC9B,IAAI;AAAA,IACF,MAAM,MAAM,IAAI,IAAI,MAAM;AAAA,IAC1B,IAAI,IAAI,aAAa,YAAY,CAAC,aAAa,OAAO,WAAW,EAAE,SAAS,IAAI,QAAQ,GAAG;AAAA,MACzF,OAAO;AAAA,IACT;AAAA,IACA,OAAO,EAAE,KAAK,IAAI,SAAS,GAAG,MAAM;AAAA,IACpC,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,eAAe,kBAAqB,CAClC,SACoD;AAAA,EACpD,MAAM,SAAS,qBAAqB;AAAA,EACpC,KAAK;AAAA,IAAQ,OAAO,EAAE,YAAY,OAAO,QAAQ,KAAK;AAAA,EACtD,IAAI;AAAA,IACF,MAAM,WAAW,MAAM,MAAM,OAAO,KAAK;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,eAAe,UAAU,OAAO;AAAA,QAChC,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK,UAAU,OAAO;AAAA,MAC5B,QAAQ,YAAY,QAAQ,sBAAsB;AAAA,IACpD,CAAC;AAAA,IACD,KAAK,SAAS;AAAA,MAAI,OAAO,EAAE,YAAY,MAAM,QAAQ,KAAK;AAAA,IAC1D,OAAO,EAAE,YAAY,MAAM,QAAS,MAAM,SAAS,KAAK,EAAQ;AAAA,IAChE,MAAM;AAAA,IACN,OAAO,EAAE,YAAY,MAAM,QAAQ,KAAK;AAAA;AAAA;AAIrC,SAAS,yBAAyB,CAAC,QAAuC;AAAA,EAC/E,eAAe;AAAA,EACf,OAAO,MAAM;AAAA,IACX,IAAI,iBAAiB;AAAA,MAAQ,eAAe;AAAA;AAAA;AAIhD,eAAsB,aAAa,CAAC,MAAmD;AAAA,EACrF,IAAI;AAAA,IAAc,OAAO,aAAa,QAAQ,IAAI;AAAA,EAClD,MAAM,YAAY,MAAM,mBAAsC,EAAE,QAAQ,WAAW,KAAK,CAAC;AAAA,EACzF,IAAI,UAAU;AAAA,IAAQ,OAAO,UAAU;AAAA,EACvC,OAAO;AAAA,IACL,IAAI;AAAA,IACJ,OAAO,UAAU,aACb,wDACA;AAAA,EACN;AAAA;AAeF,eAAsB,mBAAmB,CACvC,QACA,eAC6B;AAAA,EAC7B,IAAI;AAAA,IAAc,OAAO,aAAa,SAAS,QAAQ,aAAa;AAAA,EACpE,MAAM,WAAW,MAAM,mBAAuC;AAAA,IAC5D,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,IAAI,SAAS;AAAA,IAAQ,OAAO,SAAS;AAAA,EACrC,IAAI,SAAS;AAAA,IAAY,OAAO,EAAE,IAAI,OAAO,OAAO,CAAC,EAAE;AAAA,EACvD,OAAO,EAAE,IAAI,MAAM,OAAO,CAAC,EAAE;AAAA;AAG/B,eAAsB,gBAAgB,CACpC,OACA,aACA,WACA,MACkB;AAAA,EAClB,IAAI;AAAA,IAAc,OAAO,aAAa,MAAM,OAAO,aAAa,WAAW,IAAI;AAAA,EAC/E,QAEI,MAAM,mBAA4B;AAAA,IAChC,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC,GACD,UAAU;AAAA;",
-  "debugId": "C6D7A2F8FD57D92564756E2164756E21",
-  "names": []
-}