openclaw-telegram-manager 1.0.0

package/dist/commands/sync.js

@@ -0,0 +1,38 @@
+import { readRegistry } from '../lib/registry.js';
+import { checkAuthorization } from '../lib/auth.js';
+import { htmlEscape } from '../lib/security.js';
+import { generateInclude } from '../lib/include-generator.js';
+import { triggerRestart } from '../lib/config-restart.js';
+export async function handleSync(ctx) {
+    const { workspaceDir, configDir, userId, rpc, logger } = ctx;
+    if (!userId) {
+        return { text: 'Missing context: userId not available.' };
+    }
+    const registry = readRegistry(workspaceDir);
+    // Auth check (admin tier)
+    const auth = checkAuthorization(userId, 'sync', registry);
+    if (!auth.authorized) {
+        return { text: auth.message ?? 'Not authorized.' };
+    }
+    try {
+        generateInclude(workspaceDir, registry, configDir);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+            text: `Sync failed: ${htmlEscape(msg)}`,
+            parseMode: 'HTML',
+        };
+    }
+    const restartResult = await triggerRestart(rpc, logger);
+    const topicCount = Object.keys(registry.topics).length;
+    let text = `Include regenerated from ${topicCount} topic(s). Config synced.`;
+    if (!restartResult.success && restartResult.fallbackMessage) {
+        text += '\n' + restartResult.fallbackMessage;
+    }
+    return {
+        text,
+        parseMode: 'HTML',
+    };
+}
+//# sourceMappingURL=sync.js.map

package/dist/commands/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/commands/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG1D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE5C,0BAA0B;IAC1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO;YACL,IAAI,EAAE,gBAAgB,UAAU,CAAC,GAAG,CAAC,EAAE;YACvC,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,IAAI,GAAG,4BAA4B,UAAU,2BAA2B,CAAC;IAE7E,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;QAC5D,IAAI,IAAI,IAAI,GAAG,aAAa,CAAC,eAAe,CAAC;IAC/C,CAAC;IAED,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC"}

package/dist/commands/upgrade.d.ts

@@ -0,0 +1,3 @@
+import type { CommandContext, CommandResult } from './help.js';
+export declare function handleUpgrade(ctx: CommandContext): Promise<CommandResult>;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/commands/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/D,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAuD/E"}

package/dist/commands/upgrade.js

@@ -0,0 +1,52 @@
+import * as path from 'node:path';
+import { readRegistry, withRegistry } from '../lib/registry.js';
+import { checkAuthorization } from '../lib/auth.js';
+import { topicKey, CAPSULE_VERSION } from '../lib/types.js';
+import { htmlEscape } from '../lib/security.js';
+import { upgradeCapsule } from '../lib/capsule.js';
+export async function handleUpgrade(ctx) {
+    const { workspaceDir, userId, groupId, threadId } = ctx;
+    if (!userId || !groupId || !threadId) {
+        return { text: 'Missing context: userId, groupId, or threadId not available.' };
+    }
+    const registry = readRegistry(workspaceDir);
+    // Auth check (user tier)
+    const auth = checkAuthorization(userId, 'upgrade', registry);
+    if (!auth.authorized) {
+        return { text: auth.message ?? 'Not authorized.' };
+    }
+    const key = topicKey(groupId, threadId);
+    const entry = registry.topics[key];
+    if (!entry) {
+        return { text: 'This topic is not registered. Run /topic init first.' };
+    }
+    if (entry.capsuleVersion >= CAPSULE_VERSION) {
+        return {
+            text: `Topic <code>${htmlEscape(entry.slug)}</code> is already at capsule version ${CAPSULE_VERSION}. No upgrade needed.`,
+            parseMode: 'HTML',
+        };
+    }
+    const projectsBase = path.join(workspaceDir, 'projects');
+    const result = upgradeCapsule(projectsBase, entry.slug, entry.type, entry.capsuleVersion);
+    if (!result.upgraded) {
+        return {
+            text: `No upgrade needed for <code>${htmlEscape(entry.slug)}</code>.`,
+            parseMode: 'HTML',
+        };
+    }
+    // Update capsule version in registry
+    await withRegistry(workspaceDir, (data) => {
+        const topic = data.topics[key];
+        if (topic) {
+            topic.capsuleVersion = result.newVersion;
+        }
+    });
+    const addedList = result.addedFiles.length > 0
+        ? `\nAdded files: ${result.addedFiles.map((f) => htmlEscape(f)).join(', ')}`
+        : '\nNo new files added.';
+    return {
+        text: `Topic <code>${htmlEscape(entry.slug)}</code> upgraded from v${entry.capsuleVersion} to v${result.newVersion}.${addedList}`,
+        parseMode: 'HTML',
+    };
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/commands/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGnD,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB;IACrD,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;IAExD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,8DAA8D,EAAE,CAAC;IAClF,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE5C,yBAAyB;IACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;IAC1E,CAAC;IAED,IAAI,KAAK,CAAC,cAAc,IAAI,eAAe,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,eAAe,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,yCAAyC,eAAe,sBAAsB;YACzH,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAE1F,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;YACL,IAAI,EAAE,+BAA+B,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU;YACrE,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC5C,CAAC,CAAC,kBAAkB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5E,CAAC,CAAC,uBAAuB,CAAC;IAE5B,OAAO;QACL,IAAI,EAAE,eAAe,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,cAAc,QAAQ,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE;QACjI,SAAS,EAAE,MAAM;KAClB,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,25 @@
+export default function register(api: {
+    logger: {
+        info(msg: string): void;
+        warn(msg: string): void;
+        error(msg: string): void;
+    };
+    configDir?: string;
+    workspaceDir?: string;
+    rpc?: {
+        call(method: string, params: Record<string, unknown>): Promise<Record<string, unknown>>;
+    } | null;
+    pluginConfig?: {
+        configDir?: string;
+        workspaceDir?: string;
+    };
+    registerTool(def: {
+        name: string;
+        description: string;
+        parameters: unknown;
+        execute(id: string, params: {
+            command: string;
+        }, context?: Record<string, unknown>): Promise<unknown>;
+    }): void;
+}): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAAG,EAAE;IACpC,MAAM,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC;IACzG,YAAY,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACvG,GAAG,IAAI,CAAC;CACV,GAAG,IAAI,CAsCP"}

package/dist/index.js

@@ -0,0 +1,30 @@
+import { Type } from '@sinclair/typebox';
+import { createTopicManagerTool } from './tool.js';
+export default function register(api) {
+    const configDir = api.configDir ?? api.pluginConfig?.configDir;
+    const workspaceDir = api.workspaceDir ?? api.pluginConfig?.workspaceDir;
+    if (!configDir || !workspaceDir) {
+        api.logger.error('telegram-manager: configDir or workspaceDir not available. Plugin cannot initialize.');
+        return;
+    }
+    const tool = createTopicManagerTool({
+        logger: api.logger,
+        configDir,
+        workspaceDir,
+        rpc: api.rpc,
+    });
+    api.registerTool({
+        name: 'topic_manager',
+        description: 'Manage Telegram forum topics as deterministic workcells. Sub-commands: init, doctor, list, status, sync, rename, upgrade, snooze, archive, unarchive, help.',
+        parameters: Type.Object({
+            command: Type.String({
+                description: "Sub-command and arguments (e.g., 'init', 'doctor --all', 'rename new-slug')",
+            }),
+        }),
+        async execute(id, params, context) {
+            return tool.execute(id, params, context);
+        },
+    });
+    api.logger.info('telegram-manager plugin loaded');
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEnD,MAAM,CAAC,OAAO,UAAU,QAAQ,CAAC,GAYhC;IACC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC;IAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,EAAE,YAAY,CAAC;IAExE,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,sFAAsF,CACvF,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS;QACT,YAAY;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC,CAAC;IAEH,GAAG,CAAC,YAAY,CAAC;QACf,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,6JAA6J;QAC/J,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,EACT,6EAA6E;aAChF,CAAC;SACH,CAAC;QACF,KAAK,CAAC,OAAO,CACX,EAAU,EACV,MAA2B,EAC3B,OAAiC;YAEjC,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;AACpD,CAAC"}

package/dist/lib/audit.d.ts

@@ -0,0 +1,12 @@
+import type { AuditEntry } from './types.js';
+/**
+ * Append an audit entry to the audit.jsonl file.
+ * Creates the file if it does not exist. Each entry is a single JSON line.
+ * File permissions are set to 0600.
+ */
+export declare function appendAudit(workspaceDir: string, entry: AuditEntry): void;
+/**
+ * Build an AuditEntry with the current timestamp.
+ */
+export declare function buildAuditEntry(userId: string, cmd: string, slug: string, detail: string): AuditEntry;
+//# sourceMappingURL=audit.d.ts.map

package/dist/lib/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK7C;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAazE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,UAAU,CAQZ"}

package/dist/lib/audit.js

@@ -0,0 +1,35 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const AUDIT_FILENAME = 'audit.jsonl';
+const FILE_MODE = 0o600;
+/**
+ * Append an audit entry to the audit.jsonl file.
+ * Creates the file if it does not exist. Each entry is a single JSON line.
+ * File permissions are set to 0600.
+ */
+export function appendAudit(workspaceDir, entry) {
+    const auditPath = path.join(workspaceDir, 'projects', AUDIT_FILENAME);
+    const line = JSON.stringify(entry) + '\n';
+    const fd = fs.openSync(auditPath, 'a', FILE_MODE);
+    try {
+        fs.writeSync(fd, line);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    // Ensure permissions are correct even if file already existed
+    fs.chmodSync(auditPath, FILE_MODE);
+}
+/**
+ * Build an AuditEntry with the current timestamp.
+ */
+export function buildAuditEntry(userId, cmd, slug, detail) {
+    return {
+        ts: new Date().toISOString(),
+        userId,
+        cmd,
+        slug,
+        detail,
+    };
+}
+//# sourceMappingURL=audit.js.map

package/dist/lib/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,SAAS,GAAG,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,KAAiB;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAE1C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,8DAA8D;IAC9D,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACrC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,GAAW,EACX,IAAY,EACZ,MAAc;IAEd,OAAO;QACL,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,MAAM;QACN,GAAG;QACH,IAAI;QACJ,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/lib/auth.d.ts

@@ -0,0 +1,26 @@
+import type { Registry } from './types.js';
+export declare const AuthTier: {
+    readonly User: "User";
+    readonly Admin: "Admin";
+};
+export type AuthTier = (typeof AuthTier)[keyof typeof AuthTier];
+/**
+ * Get the authorization tier for a command.
+ * Defaults to Admin for unknown commands.
+ */
+export declare function getCommandTier(command: string): AuthTier;
+export interface AuthResult {
+    authorized: boolean;
+    message?: string;
+}
+/**
+ * Check if a user is authorized to run a command.
+ *
+ * Logic:
+ * - Admin-tier: user must be in topicManagerAdmins
+ * - User-tier: user must be in topicAllowFrom OR topicManagerAdmins
+ * - Special case for init: if topicManagerAdmins is empty (first-time setup),
+ *   allow anyone — the first user to init becomes the default admin.
+ */
+export declare function checkAuthorization(userId: string, command: string, registry: Registry, topicAllowFrom?: string[]): AuthResult;
+//# sourceMappingURL=auth.d.ts.map

package/dist/lib/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3C,eAAO,MAAM,QAAQ;;;CAGX,CAAC;AAEX,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,MAAM,OAAO,QAAQ,CAAC,CAAC;AAuBhE;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAMxD;AAID,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,QAAQ,EAClB,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,UAAU,CA8BZ"}

package/dist/lib/auth.js

@@ -0,0 +1,73 @@
+// ── Authorization tiers ────────────────────────────────────────────────
+export const AuthTier = {
+    User: 'User',
+    Admin: 'Admin',
+};
+// ── Command-to-tier mapping ────────────────────────────────────────────
+const ADMIN_COMMANDS = new Set([
+    'doctor --all',
+    'doctor-all',
+    'list',
+    'sync',
+    'rename',
+    'archive',
+    'unarchive',
+]);
+const USER_COMMANDS = new Set([
+    'init',
+    'doctor',
+    'status',
+    'help',
+    'upgrade',
+    'snooze',
+]);
+/**
+ * Get the authorization tier for a command.
+ * Defaults to Admin for unknown commands.
+ */
+export function getCommandTier(command) {
+    const normalized = command.toLowerCase().trim();
+    if (USER_COMMANDS.has(normalized))
+        return AuthTier.User;
+    if (ADMIN_COMMANDS.has(normalized))
+        return AuthTier.Admin;
+    // Unknown commands default to admin tier (principle of least privilege)
+    return AuthTier.Admin;
+}
+/**
+ * Check if a user is authorized to run a command.
+ *
+ * Logic:
+ * - Admin-tier: user must be in topicManagerAdmins
+ * - User-tier: user must be in topicAllowFrom OR topicManagerAdmins
+ * - Special case for init: if topicManagerAdmins is empty (first-time setup),
+ *   allow anyone — the first user to init becomes the default admin.
+ */
+export function checkAuthorization(userId, command, registry, topicAllowFrom) {
+    const tier = getCommandTier(command);
+    const admins = registry.topicManagerAdmins;
+    // First-user bootstrap: if no admins set yet, allow anyone for init
+    if (command === 'init' && admins.length === 0) {
+        return { authorized: true };
+    }
+    const isAdmin = admins.includes(userId);
+    if (tier === AuthTier.Admin) {
+        if (isAdmin)
+            return { authorized: true };
+        return {
+            authorized: false,
+            message: 'Not authorized. Ask a telegram-manager admin to run this command.',
+        };
+    }
+    // User tier: allowed if admin or in topicAllowFrom
+    if (isAdmin)
+        return { authorized: true };
+    if (topicAllowFrom && topicAllowFrom.includes(userId)) {
+        return { authorized: true };
+    }
+    return {
+        authorized: false,
+        message: 'Not authorized. Ask a telegram-manager admin to run this command.',
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/lib/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAEA,0EAA0E;AAE1E,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAIX,0EAA0E;AAE1E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,cAAc;IACd,YAAY;IACZ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACxD,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IAC1D,wEAAwE;IACxE,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,OAAe,EACf,QAAkB,EAClB,cAAyB;IAEzB,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,kBAAkB,CAAC;IAE3C,oEAAoE;IACpE,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAExC,IAAI,IAAI,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,OAAO;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACzC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,mEAAmE;SAC7E,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,IAAI,OAAO;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAEzC,IAAI,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,mEAAmE;KAC7E,CAAC;AACJ,CAAC"}

package/dist/lib/capsule.d.ts

@@ -0,0 +1,27 @@
+import type { TopicType } from './types.js';
+/**
+ * Scaffold a new capsule directory with base kit + type overlays.
+ * Uses fs.mkdirSync with exclusive flag as the atomic reservation mechanism.
+ * Throws if the directory already exists (collision).
+ */
+export declare function scaffoldCapsule(projectsBase: string, slug: string, type: TopicType): void;
+export interface UpgradeResult {
+    upgraded: boolean;
+    newVersion: number;
+    addedFiles: string[];
+}
+/**
+ * Upgrade an existing capsule to the latest template version.
+ * Adds missing files without overwriting existing ones.
+ */
+export declare function upgradeCapsule(projectsBase: string, slug: string, type: TopicType, currentVersion: number): UpgradeResult;
+export interface CapsuleValidation {
+    missing: string[];
+    present: string[];
+}
+/**
+ * Validate that a capsule has all expected files.
+ * Returns lists of present and missing files.
+ */
+export declare function validateCapsule(projectsBase: string, slug: string, type: TopicType): CapsuleValidation;
+//# sourceMappingURL=capsule.d.ts.map

package/dist/lib/capsule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capsule.d.ts","sourceRoot":"","sources":["../../src/lib/capsule.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAuD5C;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,GACd,IAAI,CAkCN;AAID,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,EACf,cAAc,EAAE,MAAM,GACrB,aAAa,CA+Cf;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,GACd,iBAAiB,CAqBnB"}

package/dist/lib/capsule.js

@@ -0,0 +1,130 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { BASE_FILES, OVERLAY_FILES, CAPSULE_VERSION } from './types.js';
+import { jailCheck, rejectSymlink } from './security.js';
+// ── Template content (embedded string constants) ───────────────────────
+// These are the source-of-truth defaults, matching src/templates/.
+const BASE_TEMPLATES = {
+    'README.md': (slug) => `# ${slug}\n\n_Describe what this topic is about._\n`,
+    'STATUS.md': (slug) => `# Status: ${slug}\n\n## Last done (UTC)\n\n${new Date().toISOString()}\n\n_No work recorded yet._\n\n## Next 3 actions\n\n1. [T-1] _Define first task in TODO.md_\n2. [T-2] _Define second task in TODO.md_\n3. [T-3] _Define third task in TODO.md_\n`,
+    'TODO.md': (slug) => `# TODO: ${slug}\n\n## Backlog\n\n- [T-1] _First task placeholder — replace with actual task_\n- [T-2] _Second task placeholder — replace with actual task_\n- [T-3] _Third task placeholder — replace with actual task_\n\n## Completed\n\n_None yet._\n`,
+    'COMMANDS.md': (slug) => `# Commands: ${slug}\n\n_Build, deploy, test, and other commands for this topic. Kept here so they're not lost on reset._\n`,
+    'LINKS.md': (slug) => `# Links: ${slug}\n\n_URLs, paths, and service endpoints for this topic._\n`,
+    'CRON.md': (slug) => `# Cron: ${slug}\n\n_Cron job IDs and schedules for this topic._\n`,
+    'NOTES.md': (slug) => `# Notes: ${slug}\n\n_Anything worth remembering about this topic._\n`,
+};
+const OVERLAY_TEMPLATES = {
+    'ARCHITECTURE.md': (slug) => `# Architecture: ${slug}\n\n_Components, data flow, dependencies, and design decisions._\n`,
+    'DEPLOY.md': (slug) => `# Deployment: ${slug}\n\n_Environments, deployment steps, rollback procedures, and infra details._\n`,
+    'SOURCES.md': (slug) => `# Sources: ${slug}\n\n_Papers, articles, datasets, APIs, and other reference material._\n`,
+    'FINDINGS.md': (slug) => `# Findings: ${slug}\n\n_Conclusions, insights, data summaries, and recommendations._\n`,
+    'CAMPAIGNS.md': (slug) => `# Campaigns: ${slug}\n\n_Active campaigns, target audiences, channels, timelines, and budgets._\n`,
+    'METRICS.md': (slug) => `# Metrics: ${slug}\n\n_KPIs, conversion rates, engagement stats, and performance data._\n`,
+};
+// ── File permissions ───────────────────────────────────────────────────
+const CAPSULE_FILE_MODE = 0o640;
+// ── Scaffold ───────────────────────────────────────────────────────────
+/**
+ * Scaffold a new capsule directory with base kit + type overlays.
+ * Uses fs.mkdirSync with exclusive flag as the atomic reservation mechanism.
+ * Throws if the directory already exists (collision).
+ */
+export function scaffoldCapsule(projectsBase, slug, type) {
+    const capsuleDir = path.join(projectsBase, slug);
+    // Path jail check
+    if (!jailCheck(projectsBase, slug)) {
+        throw new Error(`Path escapes projects directory: ${slug}`);
+    }
+    // Symlink check on parent
+    if (rejectSymlink(projectsBase)) {
+        throw new Error(`Projects base is a symlink: ${projectsBase}`);
+    }
+    // Atomic directory creation (exclusive)
+    fs.mkdirSync(capsuleDir, { recursive: false });
+    // Write base files
+    for (const file of BASE_FILES) {
+        const templateFn = BASE_TEMPLATES[file];
+        if (templateFn) {
+            const filePath = path.join(capsuleDir, file);
+            fs.writeFileSync(filePath, templateFn(slug), { mode: CAPSULE_FILE_MODE });
+        }
+    }
+    // Write overlay files for the type
+    const overlays = OVERLAY_FILES[type];
+    for (const file of overlays) {
+        const templateFn = OVERLAY_TEMPLATES[file];
+        if (templateFn) {
+            const filePath = path.join(capsuleDir, file);
+            fs.writeFileSync(filePath, templateFn(slug), { mode: CAPSULE_FILE_MODE });
+        }
+    }
+}
+/**
+ * Upgrade an existing capsule to the latest template version.
+ * Adds missing files without overwriting existing ones.
+ */
+export function upgradeCapsule(projectsBase, slug, type, currentVersion) {
+    if (currentVersion >= CAPSULE_VERSION) {
+        return { upgraded: false, newVersion: currentVersion, addedFiles: [] };
+    }
+    const capsuleDir = path.join(projectsBase, slug);
+    if (!jailCheck(projectsBase, slug)) {
+        throw new Error(`Path escapes projects directory: ${slug}`);
+    }
+    if (rejectSymlink(capsuleDir)) {
+        throw new Error(`Capsule directory is a symlink: ${capsuleDir}`);
+    }
+    const addedFiles = [];
+    // Add missing base files
+    for (const file of BASE_FILES) {
+        const filePath = path.join(capsuleDir, file);
+        if (!fs.existsSync(filePath)) {
+            const templateFn = BASE_TEMPLATES[file];
+            if (templateFn) {
+                fs.writeFileSync(filePath, templateFn(slug), { mode: CAPSULE_FILE_MODE });
+                addedFiles.push(file);
+            }
+        }
+    }
+    // Add missing overlay files
+    const overlays = OVERLAY_FILES[type];
+    for (const file of overlays) {
+        const filePath = path.join(capsuleDir, file);
+        if (!fs.existsSync(filePath)) {
+            const templateFn = OVERLAY_TEMPLATES[file];
+            if (templateFn) {
+                fs.writeFileSync(filePath, templateFn(slug), { mode: CAPSULE_FILE_MODE });
+                addedFiles.push(file);
+            }
+        }
+    }
+    return {
+        upgraded: true,
+        newVersion: CAPSULE_VERSION,
+        addedFiles,
+    };
+}
+/**
+ * Validate that a capsule has all expected files.
+ * Returns lists of present and missing files.
+ */
+export function validateCapsule(projectsBase, slug, type) {
+    const capsuleDir = path.join(projectsBase, slug);
+    if (!jailCheck(projectsBase, slug)) {
+        throw new Error(`Path escapes projects directory: ${slug}`);
+    }
+    const expectedFiles = [...BASE_FILES, ...OVERLAY_FILES[type]];
+    const missing = [];
+    const present = [];
+    for (const file of expectedFiles) {
+        const filePath = path.join(capsuleDir, file);
+        if (fs.existsSync(filePath)) {
+            present.push(file);
+        }
+        else {
+            missing.push(file);
+        }
+    }
+    return { missing, present };
+}
+//# sourceMappingURL=capsule.js.map

package/dist/lib/capsule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capsule.js","sourceRoot":"","sources":["../../src/lib/capsule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAExE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEzD,0EAA0E;AAC1E,mEAAmE;AAEnE,MAAM,cAAc,GAA6C;IAC/D,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,KAAK,IAAI,4CAA4C;IAEvD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,aAAa,IAAI,6BAA6B,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,kLAAkL;IAE1P,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAClB,WAAW,IAAI,2OAA2O;IAE5P,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CACtB,eAAe,IAAI,yGAAyG;IAE9H,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,YAAY,IAAI,4DAA4D;IAE9E,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAClB,WAAW,IAAI,oDAAoD;IAErE,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,YAAY,IAAI,sDAAsD;CACzE,CAAC;AAEF,MAAM,iBAAiB,GAA6C;IAClE,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1B,mBAAmB,IAAI,oEAAoE;IAE7F,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CACpB,iBAAiB,IAAI,iFAAiF;IAExG,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CACrB,cAAc,IAAI,yEAAyE;IAE7F,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CACtB,eAAe,IAAI,qEAAqE;IAE1F,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CACvB,gBAAgB,IAAI,+EAA+E;IAErG,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE,CACrB,cAAc,IAAI,yEAAyE;CAC9F,CAAC;AAEF,0EAA0E;AAE1E,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,0EAA0E;AAE1E;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,IAAY,EACZ,IAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAEjD,kBAAkB;IAClB,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,0BAA0B;IAC1B,IAAI,aAAa,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,wCAAwC;IACxC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAE/C,mBAAmB;IACnB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,mCAAmC;IACnC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,IAAY,EACZ,IAAe,EACf,cAAsB;IAEtB,IAAI,cAAc,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,UAAU,GAAa,EAAE,CAAC;IAEhC,yBAAyB;IACzB,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,UAAU,EAAE,CAAC;gBACf,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC1E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,UAAU,EAAE,CAAC;gBACf,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC1E,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,eAAe;QAC3B,UAAU;KACX,CAAC;AACJ,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,IAAY,EACZ,IAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAEjD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/lib/config-restart.d.ts

@@ -0,0 +1,23 @@
+import type { RpcInterface, Logger } from './types.js';
+export type { RpcInterface, Logger };
+export interface RestartResult {
+    success: boolean;
+    fallbackMessage?: string;
+}
+/**
+ * Trigger a Gateway restart via config.patch no-op.
+ *
+ * - Enforces a 60-second cooldown between calls
+ * - Retries up to 3 times on baseHash mismatch with exponential backoff
+ * - Falls back to a user message if RPC is unavailable
+ */
+export declare function triggerRestart(rpc: RpcInterface | null | undefined, logger: Logger): Promise<RestartResult>;
+/**
+ * Check if configWrites is enabled in the plugin config via RPC.
+ */
+export declare function getConfigWrites(rpc: RpcInterface | null | undefined): Promise<boolean>;
+/**
+ * Reset the cooldown timer (for testing purposes).
+ */
+export declare function resetCooldown(): void;
+//# sourceMappingURL=config-restart.d.ts.map

package/dist/lib/config-restart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-restart.d.ts","sourceRoot":"","sources":["../../src/lib/config-restart.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEvD,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAErC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAcD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,EACpC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,CAAC,CAqFxB;AAsBD;;GAEG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAW5F;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI,IAAI,CAEpC"}