opensentinel 2.1.1 → 3.1.1

package/dist/chunk-XKYRH4FM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/db/schema.ts","../src/db/index.ts"],"sourcesContent":["import {\n  pgTable,\n  text,\n  timestamp,\n  uuid,\n  integer,\n  jsonb,\n  boolean,\n  vector,\n  index,\n  customType,\n} from \"drizzle-orm/pg-core\";\n\n// Custom tsvector type for full-text search\nconst tsvector = customType<{ data: string }>({\n  dataType() {\n    return \"tsvector\";\n  },\n});\n\n// Users table\nexport const users = pgTable(\"users\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  telegramId: text(\"telegram_id\").unique(),\n  name: text(\"name\"),\n  preferences: jsonb(\"preferences\").$type<{\n    timezone?: string;\n    language?: string;\n    verbosity?: \"terse\" | \"normal\" | \"detailed\";\n    persona?: \"formal\" | \"casual\" | \"snarky\";\n  }>(),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n});\n\n// Conversations table\nexport const conversations = pgTable(\"conversations\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  userId: uuid(\"user_id\").references(() => users.id),\n  title: text(\"title\"),\n  source: text(\"source\").notNull().default(\"telegram\"), // telegram, web, api\n  metadata: jsonb(\"metadata\"),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n});\n\n// Messages table\nexport const messages = pgTable(\n  \"messages\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    conversationId: uuid(\"conversation_id\")\n      .references(() => conversations.id)\n      .notNull(),\n    role: text(\"role\").notNull().$type<\"user\" | \"assistant\" | \"system\">(),\n    content: text(\"content\").notNull(),\n    tokenCount: integer(\"token_count\"),\n    metadata: jsonb(\"metadata\"),\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"messages_conversation_idx\").on(table.conversationId)]\n);\n\n// Memories table with vector embeddings for RAG\nexport const memories = pgTable(\n  \"memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\n    content: text(\"content\").notNull(),\n    embedding: vector(\"embedding\", { dimensions: 1536 }), // OpenAI embedding size\n    searchVector: tsvector(\"search_vector\"), // Full-text search vector (GIN indexed)\n    importance: integer(\"importance\").default(5), // 1-10 scale\n    source: text(\"source\"), // Where this memory came from\n    provenance: text(\"provenance\"), // Origin tracking: \"conversation:id\", \"api:manual\", \"extraction:auto\"\n    metadata: jsonb(\"metadata\"),\n    encrypted: boolean(\"encrypted\").default(false).notNull(),\n    lastAccessed: timestamp(\"last_accessed\").defaultNow(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"memories_user_idx\").on(table.userId)]\n);\n\n// Scheduled tasks table\nexport const scheduledTasks = pgTable(\"scheduled_tasks\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  userId: uuid(\"user_id\").references(() => users.id),\n  name: text(\"name\").notNull(),\n  description: text(\"description\"),\n  cronExpression: text(\"cron_expression\"),\n  nextRunAt: timestamp(\"next_run_at\"),\n  lastRunAt: timestamp(\"last_run_at\"),\n  enabled: boolean(\"enabled\").default(true),\n  action: jsonb(\"action\").$type<{\n    type: \"message\" | \"command\" | \"webhook\";\n    payload: Record<string, unknown>;\n  }>(),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n});\n\n// Tool execution logs\nexport const toolLogs = pgTable(\n  \"tool_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\n    toolName: text(\"tool_name\").notNull(),\n    input: jsonb(\"input\"),\n    output: jsonb(\"output\"),\n    success: boolean(\"success\").notNull(),\n    durationMs: integer(\"duration_ms\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"tool_logs_conversation_idx\").on(table.conversationId)]\n);\n\n// ============================================\n// SECURITY TABLES (Phase 1)\n// ============================================\n\n// Sessions table for session management\nexport const sessions = pgTable(\n  \"sessions\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    token: text(\"token\").notNull().unique(),\n    deviceInfo: jsonb(\"device_info\").$type<{\n      userAgent?: string;\n      platform?: string;\n      browser?: string;\n    }>(),\n    ipAddress: text(\"ip_address\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    expiresAt: timestamp(\"expires_at\").notNull(),\n    lastActiveAt: timestamp(\"last_active_at\").defaultNow(),\n  },\n  (table) => [index(\"sessions_user_idx\").on(table.userId)]\n);\n\n// Audit logs table for tracking all actions\nexport const auditLogs = pgTable(\n  \"audit_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    sessionId: uuid(\"session_id\").references(() => sessions.id),\n    action: text(\"action\").notNull(), // 'tool_use', 'login', 'settings_change', etc.\n    resource: text(\"resource\"), // 'shell', 'file', 'memory', etc.\n    resourceId: text(\"resource_id\"), // ID of the affected resource\n    details: jsonb(\"details\"),\n    ipAddress: text(\"ip_address\"),\n    userAgent: text(\"user_agent\"),\n    success: boolean(\"success\").default(true),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    // Tamper-proof chain fields (SOC 2)\n    sequenceNumber: integer(\"sequence_number\"),\n    entryHash: text(\"entry_hash\"),\n    previousHash: text(\"previous_hash\"),\n  },\n  (table) => [\n    index(\"audit_logs_user_idx\").on(table.userId),\n    index(\"audit_logs_action_idx\").on(table.action),\n    index(\"audit_logs_created_idx\").on(table.createdAt),\n    index(\"audit_logs_sequence_idx\").on(table.sequenceNumber),\n  ]\n);\n\n// API keys table for programmatic access\nexport const apiKeys = pgTable(\n  \"api_keys\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    name: text(\"name\").notNull(),\n    keyHash: text(\"key_hash\").notNull(), // bcrypt hash of the key\n    keyPrefix: text(\"key_prefix\").notNull(), // First 8 chars for identification (e.g., \"mb_live_\")\n    permissions: jsonb(\"permissions\").$type<string[]>(), // ['chat:basic', 'tools:shell', etc.]\n    lastUsedAt: timestamp(\"last_used_at\"),\n    expiresAt: timestamp(\"expires_at\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    revokedAt: timestamp(\"revoked_at\"),\n  },\n  (table) => [index(\"api_keys_user_idx\").on(table.userId)]\n);\n\n// Rate limits table for tracking request rates\nexport const rateLimits = pgTable(\n  \"rate_limits\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    identifier: text(\"identifier\").notNull(), // userId, IP, or API key prefix\n    endpoint: text(\"endpoint\").notNull(), // 'api/chat', 'tool/shell', etc.\n    windowStart: timestamp(\"window_start\").notNull(),\n    requestCount: integer(\"request_count\").default(0),\n    lastRequest: timestamp(\"last_request\"),\n  },\n  (table) => [\n    index(\"rate_limits_identifier_endpoint_idx\").on(\n      table.identifier,\n      table.endpoint\n    ),\n  ]\n);\n\n// ============================================\n// OBSERVABILITY TABLES (Phase 1)\n// ============================================\n\n// Metrics table for performance tracking\nexport const metrics = pgTable(\n  \"metrics\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    name: text(\"name\").notNull(), // 'response_latency', 'token_usage', 'tool_duration', etc.\n    value: integer(\"value\").notNull(),\n    unit: text(\"unit\"), // 'ms', 'tokens', 'bytes', etc.\n    tags: jsonb(\"tags\").$type<Record<string, string>>(), // { tool: 'shell', status: 'success' }\n    timestamp: timestamp(\"timestamp\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"metrics_name_timestamp_idx\").on(table.name, table.timestamp),\n  ]\n);\n\n// Error logs table for centralized error tracking\nexport const errorLogs = pgTable(\n  \"error_logs\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    source: text(\"source\").notNull(), // 'brain', 'tool', 'telegram', 'api', 'scheduler'\n    errorType: text(\"error_type\").notNull(), // 'ApiError', 'ValidationError', etc.\n    errorCode: text(\"error_code\"), // Application-specific error codes\n    message: text(\"message\").notNull(),\n    stack: text(\"stack\"),\n    context: jsonb(\"context\"), // Additional context like request data\n    userId: uuid(\"user_id\").references(() => users.id),\n    conversationId: uuid(\"conversation_id\").references(() => conversations.id),\n    resolved: boolean(\"resolved\").default(false),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"error_logs_source_idx\").on(table.source),\n    index(\"error_logs_created_idx\").on(table.createdAt),\n  ]\n);\n\n// ============================================\n// EVOLUTION SYSTEM TABLES (Phase 2)\n// ============================================\n\n// Usage patterns for evolution tracking\nexport const usagePatterns = pgTable(\n  \"usage_patterns\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    patternType: text(\"pattern_type\").notNull(), // 'tool_usage', 'topic', 'time_of_day', 'complexity'\n    patternKey: text(\"pattern_key\").notNull(), // e.g., 'shell', 'morning', 'coding'\n    patternData: jsonb(\"pattern_data\"),\n    confidence: integer(\"confidence\").default(0), // 0-100\n    firstSeen: timestamp(\"first_seen\").defaultNow().notNull(),\n    lastSeen: timestamp(\"last_seen\").defaultNow(),\n    occurrences: integer(\"occurrences\").default(1),\n  },\n  (table) => [\n    index(\"usage_patterns_user_idx\").on(table.userId),\n    index(\"usage_patterns_type_idx\").on(table.patternType),\n  ]\n);\n\n// Achievements definitions\nexport const achievements = pgTable(\"achievements\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  code: text(\"code\").notNull().unique(), // 'first_tool_use', 'power_user', 'researcher'\n  name: text(\"name\").notNull(),\n  description: text(\"description\"),\n  iconEmoji: text(\"icon_emoji\"), // Emoji to display\n  category: text(\"category\"), // 'exploration', 'productivity', 'mastery'\n  criteria: jsonb(\"criteria\").$type<{\n    type: string; // 'count', 'streak', 'threshold'\n    metric: string; // 'tool_uses', 'conversations', 'memories'\n    threshold: number;\n    conditions?: Record<string, unknown>;\n  }>(),\n  points: integer(\"points\").default(10),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n});\n\n// User achievements (unlocked)\nexport const userAchievements = pgTable(\n  \"user_achievements\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    achievementId: uuid(\"achievement_id\")\n      .references(() => achievements.id)\n      .notNull(),\n    unlockedAt: timestamp(\"unlocked_at\").defaultNow().notNull(),\n    progress: integer(\"progress\").default(100), // For progressive achievements\n    notified: boolean(\"notified\").default(false),\n  },\n  (table) => [index(\"user_achievements_user_idx\").on(table.userId)]\n);\n\n// Evolution transformation modes\nexport const evolutionModes = pgTable(\n  \"molt_modes\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    mode: text(\"mode\")\n      .notNull()\n      .$type<\"productivity\" | \"creative\" | \"research\" | \"learning\">(),\n    activatedAt: timestamp(\"activated_at\").defaultNow().notNull(),\n    deactivatedAt: timestamp(\"deactivated_at\"),\n    metadata: jsonb(\"metadata\"),\n  },\n  (table) => [index(\"molt_modes_user_idx\").on(table.userId)]\n);\n\n// Archived memories (for memory shedding)\nexport const archivedMemories = pgTable(\n  \"archived_memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    originalMemoryId: uuid(\"original_memory_id\").notNull(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"episodic\" | \"semantic\" | \"procedural\">(),\n    content: text(\"content\").notNull(),\n    reason: text(\"reason\"), // 'stale', 'duplicate', 'low_importance', 'user_request'\n    originalCreatedAt: timestamp(\"original_created_at\"),\n    archivedAt: timestamp(\"archived_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"archived_memories_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// CALENDAR & TRIGGERS TABLES (Phase 3)\n// ============================================\n\nexport const calendarTriggers = pgTable(\n  \"calendar_triggers\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    name: text(\"name\").notNull(),\n    calendarSource: text(\"calendar_source\").notNull(), // 'google', 'outlook', 'ical'\n    calendarId: text(\"calendar_id\"),\n    triggerType: text(\"trigger_type\").notNull(), // 'event_start', 'event_end', 'daily_briefing'\n    offsetMinutes: integer(\"offset_minutes\").default(0), // Trigger X minutes before/after\n    action: jsonb(\"action\").$type<{\n      type: \"message\" | \"tool\" | \"webhook\";\n      payload: Record<string, unknown>;\n    }>(),\n    enabled: boolean(\"enabled\").default(true),\n    lastTriggered: timestamp(\"last_triggered\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"calendar_triggers_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// SUB-AGENT TABLES (Phase 4)\n// ============================================\n\nexport const subAgents = pgTable(\n  \"sub_agents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    parentConversationId: uuid(\"parent_conversation_id\").references(\n      () => conversations.id\n    ),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"research\" | \"coding\" | \"writing\" | \"analysis\">(),\n    name: text(\"name\").notNull(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\" | \"cancelled\">(),\n    objective: text(\"objective\").notNull(),\n    context: jsonb(\"context\"),\n    result: jsonb(\"result\"),\n    tokenBudget: integer(\"token_budget\").default(50000),\n    tokensUsed: integer(\"tokens_used\").default(0),\n    timeBudgetMs: integer(\"time_budget_ms\").default(3600000), // 1 hour default\n    startedAt: timestamp(\"started_at\"),\n    completedAt: timestamp(\"completed_at\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"sub_agents_user_idx\").on(table.userId),\n    index(\"sub_agents_status_idx\").on(table.status),\n  ]\n);\n\nexport const agentMessages = pgTable(\n  \"agent_messages\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    agentId: uuid(\"agent_id\")\n      .references(() => subAgents.id)\n      .notNull(),\n    role: text(\"role\")\n      .notNull()\n      .$type<\"user\" | \"assistant\" | \"system\" | \"tool_result\">(),\n    content: text(\"content\").notNull(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"agent_messages_agent_idx\").on(table.agentId)]\n);\n\nexport const agentProgress = pgTable(\n  \"agent_progress\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    agentId: uuid(\"agent_id\")\n      .references(() => subAgents.id)\n      .notNull(),\n    step: integer(\"step\").notNull(),\n    description: text(\"description\").notNull(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"running\" | \"completed\" | \"failed\">(),\n    output: jsonb(\"output\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"agent_progress_agent_idx\").on(table.agentId)]\n);\n\n// ============================================\n// PERSONALITY TABLES (Phase 5)\n// ============================================\n\nexport const personas = pgTable(\n  \"personas\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id), // null = system persona\n    name: text(\"name\").notNull(),\n    description: text(\"description\"),\n    basePrompt: text(\"base_prompt\").notNull(),\n    isDefault: boolean(\"is_default\").default(false),\n    isSystem: boolean(\"is_system\").default(false), // Built-in personas\n    settings: jsonb(\"settings\").$type<{\n      verbosity: \"terse\" | \"normal\" | \"detailed\";\n      humor: \"off\" | \"subtle\" | \"full\";\n      formality: \"formal\" | \"casual\" | \"professional\";\n      emoji: boolean;\n      proactivity: \"minimal\" | \"moderate\" | \"proactive\";\n    }>(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"personas_user_idx\").on(table.userId)]\n);\n\n// ============================================\n// ENTERPRISE TABLES (Phase 6)\n// ============================================\n\nexport const organizations = pgTable(\"organizations\", {\n  id: uuid(\"id\").primaryKey().defaultRandom(),\n  name: text(\"name\").notNull(),\n  slug: text(\"slug\").unique(),\n  settings: jsonb(\"settings\"),\n  createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  updatedAt: timestamp(\"updated_at\").defaultNow(),\n});\n\nexport const organizationMembers = pgTable(\n  \"organization_members\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    organizationId: uuid(\"organization_id\")\n      .references(() => organizations.id)\n      .notNull(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id)\n      .notNull(),\n    role: text(\"role\").notNull().$type<\"owner\" | \"admin\" | \"member\" | \"viewer\">(),\n    joinedAt: timestamp(\"joined_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"org_members_org_idx\").on(table.organizationId),\n    index(\"org_members_user_idx\").on(table.userId),\n  ]\n);\n\nexport const sharedMemories = pgTable(\n  \"shared_memories\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    organizationId: uuid(\"organization_id\")\n      .references(() => organizations.id)\n      .notNull(),\n    memoryId: uuid(\"memory_id\")\n      .references(() => memories.id)\n      .notNull(),\n    sharedBy: uuid(\"shared_by\")\n      .references(() => users.id)\n      .notNull(),\n    sharedAt: timestamp(\"shared_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"shared_memories_org_idx\").on(table.organizationId)]\n);\n\nexport const usageQuotas = pgTable(\n  \"usage_quotas\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    organizationId: uuid(\"organization_id\").references(() => organizations.id),\n    quotaType: text(\"quota_type\").notNull(), // 'tokens_daily', 'tokens_monthly', 'agents_concurrent'\n    limitValue: integer(\"limit_value\").notNull(),\n    currentValue: integer(\"current_value\").default(0),\n    resetAt: timestamp(\"reset_at\"),\n    updatedAt: timestamp(\"updated_at\").defaultNow(),\n  },\n  (table) => [\n    index(\"usage_quotas_user_idx\").on(table.userId),\n    index(\"usage_quotas_org_idx\").on(table.organizationId),\n  ]\n);\n\n// ============================================\n// KNOWLEDGE GRAPH TABLES\n// ============================================\n\n// Graph entities — people, projects, topics, events, organizations, locations\nexport const graphEntities = pgTable(\n  \"graph_entities\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\").references(() => users.id),\n    type: text(\"type\")\n      .notNull()\n      .$type<\"person\" | \"project\" | \"topic\" | \"event\" | \"organization\" | \"location\">(),\n    name: text(\"name\").notNull(),\n    aliases: jsonb(\"aliases\").$type<string[]>().default([]),\n    description: text(\"description\"),\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\n    importance: integer(\"importance\").default(50), // 0-100\n    mentionCount: integer(\"mention_count\").default(1),\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"graph_entities_user_idx\").on(table.userId),\n    index(\"graph_entities_type_idx\").on(table.type),\n    index(\"graph_entities_name_idx\").on(table.name),\n  ]\n);\n\n// Graph relationships — connections between entities\nexport const graphRelationships = pgTable(\n  \"graph_relationships\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    sourceEntityId: uuid(\"source_entity_id\")\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\n      .notNull(),\n    targetEntityId: uuid(\"target_entity_id\")\n      .references(() => graphEntities.id, { onDelete: \"cascade\" })\n      .notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\n        | \"knows\" | \"works_with\" | \"works_on\" | \"family\" | \"friend\"\n        | \"colleague\" | \"manages\" | \"reports_to\" | \"belongs_to\"\n        | \"related_to\" | \"located_in\" | \"interested_in\" | \"expert_in\"\n        | \"mentioned_in\" | \"participates_in\"\n      >(),\n    strength: integer(\"strength\").default(50), // 0-100\n    bidirectional: boolean(\"bidirectional\").default(false),\n    context: text(\"context\"),\n    attributes: jsonb(\"attributes\").$type<Record<string, unknown>>().default({}),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"graph_rel_source_idx\").on(table.sourceEntityId),\n    index(\"graph_rel_target_idx\").on(table.targetEntityId),\n    index(\"graph_rel_type_idx\").on(table.type),\n  ]\n);\n\n// ============================================\n// DOCUMENT KNOWLEDGE BASE TABLES\n// ============================================\n\nexport const documents = pgTable(\n  \"documents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    name: text(\"name\").notNull(),\n    filename: text(\"filename\"),\n    mimeType: text(\"mime_type\"),\n    fileSize: integer(\"file_size\"),\n    source: text(\"source\"), // 'upload', 'url', 'api'\n    sourceUrl: text(\"source_url\"),\n    metadata: jsonb(\"metadata\"),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"pending\" | \"processing\" | \"completed\" | \"failed\">()\n      .default(\"pending\"),\n    errorMessage: text(\"error_message\"),\n    chunkCount: integer(\"chunk_count\").default(0),\n    totalTokens: integer(\"total_tokens\").default(0),\n    userId: uuid(\"user_id\").references(() => users.id),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n    processedAt: timestamp(\"processed_at\"),\n  },\n  (table) => [\n    index(\"documents_user_idx\").on(table.userId),\n    index(\"documents_status_idx\").on(table.status),\n  ]\n);\n\nexport const documentChunks = pgTable(\n  \"document_chunks\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    documentId: uuid(\"document_id\")\n      .references(() => documents.id, { onDelete: \"cascade\" })\n      .notNull(),\n    chunkIndex: integer(\"chunk_index\").notNull(),\n    content: text(\"content\").notNull(),\n    embedding: vector(\"embedding\", { dimensions: 1536 }),\n    tokenCount: integer(\"token_count\"),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"document_chunks_document_idx\").on(table.documentId),\n  ]\n);\n\n// ============================================\n// TYPE EXPORTS\n// ============================================\n\nexport type User = typeof users.$inferSelect;\nexport type NewUser = typeof users.$inferInsert;\nexport type Conversation = typeof conversations.$inferSelect;\nexport type NewConversation = typeof conversations.$inferInsert;\nexport type Message = typeof messages.$inferSelect;\nexport type NewMessage = typeof messages.$inferInsert;\nexport type Memory = typeof memories.$inferSelect;\nexport type NewMemory = typeof memories.$inferInsert;\n\n// Security types\nexport type Session = typeof sessions.$inferSelect;\nexport type NewSession = typeof sessions.$inferInsert;\nexport type AuditLog = typeof auditLogs.$inferSelect;\nexport type NewAuditLog = typeof auditLogs.$inferInsert;\nexport type ApiKey = typeof apiKeys.$inferSelect;\nexport type NewApiKey = typeof apiKeys.$inferInsert;\n\n// Observability types\nexport type Metric = typeof metrics.$inferSelect;\nexport type NewMetric = typeof metrics.$inferInsert;\nexport type ErrorLog = typeof errorLogs.$inferSelect;\nexport type NewErrorLog = typeof errorLogs.$inferInsert;\n\n// Evolution system types\nexport type UsagePattern = typeof usagePatterns.$inferSelect;\nexport type NewUsagePattern = typeof usagePatterns.$inferInsert;\nexport type Achievement = typeof achievements.$inferSelect;\nexport type NewAchievement = typeof achievements.$inferInsert;\nexport type UserAchievement = typeof userAchievements.$inferSelect;\nexport type EvolutionMode = typeof evolutionModes.$inferSelect;\nexport type NewEvolutionMode = typeof evolutionModes.$inferInsert;\n\n// Sub-agent types\nexport type SubAgent = typeof subAgents.$inferSelect;\nexport type NewSubAgent = typeof subAgents.$inferInsert;\nexport type AgentMessage = typeof agentMessages.$inferSelect;\nexport type AgentProgress = typeof agentProgress.$inferSelect;\n\n// Personality types\nexport type Persona = typeof personas.$inferSelect;\nexport type NewPersona = typeof personas.$inferInsert;\n\n// Enterprise types\nexport type Organization = typeof organizations.$inferSelect;\nexport type NewOrganization = typeof organizations.$inferInsert;\nexport type OrganizationMember = typeof organizationMembers.$inferSelect;\n\n// Knowledge graph types\nexport type GraphEntity = typeof graphEntities.$inferSelect;\nexport type NewGraphEntity = typeof graphEntities.$inferInsert;\nexport type GraphRelationship = typeof graphRelationships.$inferSelect;\nexport type NewGraphRelationship = typeof graphRelationships.$inferInsert;\n\n// Document knowledge base types\nexport type Document = typeof documents.$inferSelect;\nexport type NewDocument = typeof documents.$inferInsert;\nexport type DocumentChunk = typeof documentChunks.$inferSelect;\nexport type NewDocumentChunk = typeof documentChunks.$inferInsert;\n\n// ============================================\n// SOC 2 COMPLIANCE TABLES\n// ============================================\n\n// Two-factor authentication (persisted, encrypted secrets)\nexport const twoFactorAuth = pgTable(\n  \"two_factor_auth\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    userId: uuid(\"user_id\")\n      .references(() => users.id, { onDelete: \"cascade\" })\n      .notNull()\n      .unique(),\n    secretEncrypted: text(\"secret_encrypted\").notNull(),\n    recoveryCodes: jsonb(\"recovery_codes\").$type<string[]>().notNull(),\n    enabledAt: timestamp(\"enabled_at\").notNull(),\n    lastVerifiedAt: timestamp(\"last_verified_at\"),\n    keyVersion: integer(\"key_version\").default(1).notNull(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"two_factor_auth_user_idx\").on(table.userId)]\n);\n\n// Security incidents tracking\nexport const securityIncidents = pgTable(\n  \"security_incidents\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    incidentNumber: text(\"incident_number\").notNull().unique(),\n    title: text(\"title\").notNull(),\n    description: text(\"description\").notNull(),\n    type: text(\"type\")\n      .notNull()\n      .$type<\n        | \"brute_force\"\n        | \"unauthorized_access\"\n        | \"data_breach\"\n        | \"suspicious_activity\"\n        | \"system_compromise\"\n        | \"policy_violation\"\n      >(),\n    severity: text(\"severity\")\n      .notNull()\n      .$type<\"low\" | \"medium\" | \"high\" | \"critical\">(),\n    status: text(\"status\")\n      .notNull()\n      .$type<\"open\" | \"investigating\" | \"contained\" | \"resolved\" | \"closed\">()\n      .default(\"open\"),\n    userId: uuid(\"user_id\").references(() => users.id),\n    assignedTo: uuid(\"assigned_to\").references(() => users.id),\n    source: text(\"source\").notNull(),\n    sourceData: jsonb(\"source_data\"),\n    impactAssessment: text(\"impact_assessment\"),\n    containmentActions: jsonb(\"containment_actions\"),\n    resolutionNotes: text(\"resolution_notes\"),\n    relatedIncidents: jsonb(\"related_incidents\").$type<string[]>(),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n    investigatedAt: timestamp(\"investigated_at\"),\n    containedAt: timestamp(\"contained_at\"),\n    resolvedAt: timestamp(\"resolved_at\"),\n    closedAt: timestamp(\"closed_at\"),\n  },\n  (table) => [\n    index(\"security_incidents_status_idx\").on(table.status),\n    index(\"security_incidents_severity_idx\").on(table.severity),\n    index(\"security_incidents_created_idx\").on(table.createdAt),\n  ]\n);\n\n// Incident timeline events\nexport const incidentTimeline = pgTable(\n  \"incident_timeline\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    incidentId: uuid(\"incident_id\")\n      .references(() => securityIncidents.id, { onDelete: \"cascade\" })\n      .notNull(),\n    eventType: text(\"event_type\")\n      .notNull()\n      .$type<\n        | \"created\"\n        | \"status_change\"\n        | \"assignment\"\n        | \"comment\"\n        | \"action_taken\"\n        | \"escalation\"\n        | \"resolution\"\n      >(),\n    description: text(\"description\").notNull(),\n    performedBy: uuid(\"performed_by\").references(() => users.id),\n    metadata: jsonb(\"metadata\"),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [index(\"incident_timeline_incident_idx\").on(table.incidentId)]\n);\n\n// SOC 2 types\nexport type TwoFactorAuthRecord = typeof twoFactorAuth.$inferSelect;\nexport type NewTwoFactorAuthRecord = typeof twoFactorAuth.$inferInsert;\nexport type SecurityIncident = typeof securityIncidents.$inferSelect;\nexport type NewSecurityIncident = typeof securityIncidents.$inferInsert;\nexport type IncidentTimelineEvent = typeof incidentTimeline.$inferSelect;\n","import { drizzle } from \"drizzle-orm/postgres-js\";\nimport postgres from \"postgres\";\nimport { env } from \"../config/env\";\nimport * as schema from \"./schema\";\n\n// Lazy database connection — created on first access\nlet _client: ReturnType<typeof postgres> | null = null;\nlet _db: ReturnType<typeof drizzle> | null = null;\n\nfunction getDb() {\n  if (!_db) {\n    _client = postgres(env.DATABASE_URL);\n    _db = drizzle(_client, { schema });\n  }\n  return _db;\n}\n\n// Proxy preserves the `db.select()`, `db.insert()`, `db.execute()` access pattern\n// so all existing consumer files work unchanged.\nexport const db: ReturnType<typeof drizzle<typeof schema>> = new Proxy(\n  {} as any,\n  {\n    get(_target, prop) {\n      const instance = getDb();\n      const value = (instance as any)[prop];\n      if (typeof value === \"function\") {\n        return value.bind(instance);\n      }\n      return value;\n    },\n  }\n);\n\nexport * from \"./schema\";\n"],"mappings":";;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAGP,IAAM,WAAW,WAA6B;AAAA,EAC5C,WAAW;AACT,WAAO;AAAA,EACT;AACF,CAAC;AAGM,IAAM,QAAQ,QAAQ,SAAS;AAAA,EACpC,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,YAAY,KAAK,aAAa,EAAE,OAAO;AAAA,EACvC,MAAM,KAAK,MAAM;AAAA,EACjB,aAAa,MAAM,aAAa,EAAE,MAK/B;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,OAAO,KAAK,OAAO;AAAA,EACnB,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,UAAU;AAAA;AAAA,EACnD,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAuC;AAAA,IACpE,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,2BAA2B,EAAE,GAAG,MAAM,cAAc,CAAC;AACzE;AAGO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA;AAAA,IACnD,cAAc,SAAS,eAAe;AAAA;AAAA,IACtC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,YAAY,KAAK,YAAY;AAAA;AAAA,IAC7B,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,QAAQ,WAAW,EAAE,QAAQ,KAAK,EAAE,QAAQ;AAAA,IACvD,cAAc,UAAU,eAAe,EAAE,WAAW;AAAA,IACpD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,iBAAiB,QAAQ,mBAAmB;AAAA,EACvD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,EACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,gBAAgB,KAAK,iBAAiB;AAAA,EACtC,WAAW,UAAU,aAAa;AAAA,EAClC,WAAW,UAAU,aAAa;AAAA,EAClC,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,EACxC,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,EACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,KAAK,WAAW,EAAE,QAAQ;AAAA,IACpC,OAAO,MAAM,OAAO;AAAA,IACpB,QAAQ,MAAM,QAAQ;AAAA,IACtB,SAAS,QAAQ,SAAS,EAAE,QAAQ;AAAA,IACpC,YAAY,QAAQ,aAAa;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,cAAc,CAAC;AAC1E;AAOO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,OAAO,KAAK,OAAO,EAAE,QAAQ,EAAE,OAAO;AAAA,IACtC,YAAY,MAAM,aAAa,EAAE,MAI9B;AAAA,IACH,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,cAAc,UAAU,gBAAgB,EAAE,WAAW;AAAA,EACvD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,KAAK,YAAY,EAAE,WAAW,MAAM,SAAS,EAAE;AAAA,IAC1D,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,UAAU,KAAK,UAAU;AAAA;AAAA,IACzB,YAAY,KAAK,aAAa;AAAA;AAAA,IAC9B,SAAS,MAAM,SAAS;AAAA,IACxB,WAAW,KAAK,YAAY;AAAA,IAC5B,WAAW,KAAK,YAAY;AAAA,IAC5B,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA;AAAA,IAExD,gBAAgB,QAAQ,iBAAiB;AAAA,IACzC,WAAW,KAAK,YAAY;AAAA,IAC5B,cAAc,KAAK,eAAe;AAAA,EACpC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,IAClD,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc;AAAA,EAC1D;AACF;AAGO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IAClC,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,aAAa,MAAM,aAAa,EAAE,MAAgB;AAAA;AAAA,IAClD,YAAY,UAAU,cAAc;AAAA,IACpC,WAAW,UAAU,YAAY;AAAA,IACjC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY;AAAA,EACnC;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAGO,IAAM,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACvC,UAAU,KAAK,UAAU,EAAE,QAAQ;AAAA;AAAA,IACnC,aAAa,UAAU,cAAc,EAAE,QAAQ;AAAA,IAC/C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qCAAqC,EAAE;AAAA,MAC3C,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAOO,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA;AAAA,IAC3B,OAAO,QAAQ,OAAO,EAAE,QAAQ;AAAA,IAChC,MAAM,KAAK,MAAM;AAAA;AAAA,IACjB,MAAM,MAAM,MAAM,EAAE,MAA8B;AAAA;AAAA,IAClD,WAAW,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACzD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,MAAM,SAAS;AAAA,EACpE;AACF;AAGO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA;AAAA,IAC/B,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,WAAW,KAAK,YAAY;AAAA;AAAA,IAC5B,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,OAAO,KAAK,OAAO;AAAA,IACnB,SAAS,MAAM,SAAS;AAAA;AAAA,IACxB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,wBAAwB,EAAE,GAAG,MAAM,SAAS;AAAA,EACpD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA;AAAA,IACxC,aAAa,MAAM,cAAc;AAAA,IACjC,YAAY,QAAQ,YAAY,EAAE,QAAQ,CAAC;AAAA;AAAA,IAC3C,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,UAAU,UAAU,WAAW,EAAE,WAAW;AAAA,IAC5C,aAAa,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,EAC/C;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,WAAW;AAAA,EACvD;AACF;AAGO,IAAM,eAAe,QAAQ,gBAAgB;AAAA,EAClD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO;AAAA;AAAA,EACpC,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,aAAa,KAAK,aAAa;AAAA,EAC/B,WAAW,KAAK,YAAY;AAAA;AAAA,EAC5B,UAAU,KAAK,UAAU;AAAA;AAAA,EACzB,UAAU,MAAM,UAAU,EAAE,MAKzB;AAAA,EACH,QAAQ,QAAQ,QAAQ,EAAE,QAAQ,EAAE;AAAA,EACpC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAC1D,CAAC;AAGM,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,eAAe,KAAK,gBAAgB,EACjC,WAAW,MAAM,aAAa,EAAE,EAChC,QAAQ;AAAA,IACX,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC1D,UAAU,QAAQ,UAAU,EAAE,QAAQ,GAAG;AAAA;AAAA,IACzC,UAAU,QAAQ,UAAU,EAAE,QAAQ,KAAK;AAAA,EAC7C;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAGO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA6D;AAAA,IAChE,aAAa,UAAU,cAAc,EAAE,WAAW,EAAE,QAAQ;AAAA,IAC5D,eAAe,UAAU,gBAAgB;AAAA,IACzC,UAAU,MAAM,UAAU;AAAA,EAC5B;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC;AAC3D;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,kBAAkB,KAAK,oBAAoB,EAAE,QAAQ;AAAA,IACrD,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8C;AAAA,IACjD,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,mBAAmB,UAAU,qBAAqB;AAAA,IAClD,YAAY,UAAU,aAAa,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC5D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ;AAAA;AAAA,IAChD,YAAY,KAAK,aAAa;AAAA,IAC9B,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA;AAAA,IAC1C,eAAe,QAAQ,gBAAgB,EAAE,QAAQ,CAAC;AAAA;AAAA,IAClD,QAAQ,MAAM,QAAQ,EAAE,MAGrB;AAAA,IACH,SAAS,QAAQ,SAAS,EAAE,QAAQ,IAAI;AAAA,IACxC,eAAe,UAAU,gBAAgB;AAAA,IACzC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,4BAA4B,EAAE,GAAG,MAAM,MAAM,CAAC;AAClE;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,sBAAsB,KAAK,wBAAwB,EAAE;AAAA,MACnD,MAAM,cAAc;AAAA,IACtB;AAAA,IACA,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAsD;AAAA,IACzD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAoE;AAAA,IACvE,WAAW,KAAK,WAAW,EAAE,QAAQ;AAAA,IACrC,SAAS,MAAM,SAAS;AAAA,IACxB,QAAQ,MAAM,QAAQ;AAAA,IACtB,aAAa,QAAQ,cAAc,EAAE,QAAQ,GAAK;AAAA,IAClD,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,cAAc,QAAQ,gBAAgB,EAAE,QAAQ,IAAO;AAAA;AAAA,IACvD,WAAW,UAAU,YAAY;AAAA,IACjC,aAAa,UAAU,cAAc;AAAA,IACrC,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC5C,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,EAChD;AACF;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAAuD;AAAA,IAC1D,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EACrB,WAAW,MAAM,UAAU,EAAE,EAC7B,QAAQ;AAAA,IACX,MAAM,QAAQ,MAAM,EAAE,QAAQ;AAAA,IAC9B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsD;AAAA,IACzD,QAAQ,MAAM,QAAQ;AAAA,IACtB,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,OAAO,CAAC;AACjE;AAMO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA;AAAA,IACjD,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,WAAW,QAAQ,YAAY,EAAE,QAAQ,KAAK;AAAA,IAC9C,UAAU,QAAQ,WAAW,EAAE,QAAQ,KAAK;AAAA;AAAA,IAC5C,UAAU,MAAM,UAAU,EAAE,MAMzB;AAAA,IACH,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC;AACzD;AAMO,IAAM,gBAAgB,QAAQ,iBAAiB;AAAA,EACpD,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,EAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,MAAM,KAAK,MAAM,EAAE,OAAO;AAAA,EAC1B,UAAU,MAAM,UAAU;AAAA,EAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD,WAAW,UAAU,YAAY,EAAE,WAAW;AAChD,CAAC;AAEM,IAAM,sBAAsB;AAAA,EACjC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,MAA+C;AAAA,IAC5E,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,qBAAqB,EAAE,GAAG,MAAM,cAAc;AAAA,IACpD,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,WAAW,MAAM,cAAc,EAAE,EACjC,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,SAAS,EAAE,EAC5B,QAAQ;AAAA,IACX,UAAU,KAAK,WAAW,EACvB,WAAW,MAAM,MAAM,EAAE,EACzB,QAAQ;AAAA,IACX,UAAU,UAAU,WAAW,EAAE,WAAW,EAAE,QAAQ;AAAA,EACxD;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,yBAAyB,EAAE,GAAG,MAAM,cAAc,CAAC;AACvE;AAEO,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,gBAAgB,KAAK,iBAAiB,EAAE,WAAW,MAAM,cAAc,EAAE;AAAA,IACzE,WAAW,KAAK,YAAY,EAAE,QAAQ;AAAA;AAAA,IACtC,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,SAAS,UAAU,UAAU;AAAA,IAC7B,WAAW,UAAU,YAAY,EAAE,WAAW;AAAA,EAChD;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,uBAAuB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC9C,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,EACvD;AACF;AAOO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAA8E;AAAA,IACjF,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,SAAS,MAAM,SAAS,EAAE,MAAgB,EAAE,QAAQ,CAAC,CAAC;AAAA,IACtD,aAAa,KAAK,aAAa;AAAA,IAC/B,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,YAAY,QAAQ,YAAY,EAAE,QAAQ,EAAE;AAAA;AAAA,IAC5C,cAAc,QAAQ,eAAe,EAAE,QAAQ,CAAC;AAAA,IAChD,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,yBAAyB,EAAE,GAAG,MAAM,MAAM;AAAA,IAChD,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,IAC9C,MAAM,yBAAyB,EAAE,GAAG,MAAM,IAAI;AAAA,EAChD;AACF;AAGO,IAAM,qBAAqB;AAAA,EAChC;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,gBAAgB,KAAK,kBAAkB,EACpC,WAAW,MAAM,cAAc,IAAI,EAAE,UAAU,UAAU,CAAC,EAC1D,QAAQ;AAAA,IACX,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAKC;AAAA,IACJ,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE;AAAA;AAAA,IACxC,eAAe,QAAQ,eAAe,EAAE,QAAQ,KAAK;AAAA,IACrD,SAAS,KAAK,SAAS;AAAA,IACvB,YAAY,MAAM,YAAY,EAAE,MAA+B,EAAE,QAAQ,CAAC,CAAC;AAAA,IAC3E,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,sBAAsB,EAAE,GAAG,MAAM,cAAc;AAAA,IACrD,MAAM,oBAAoB,EAAE,GAAG,MAAM,IAAI;AAAA,EAC3C;AACF;AAMO,IAAM,YAAY;AAAA,EACvB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,UAAU,KAAK,UAAU;AAAA,IACzB,UAAU,KAAK,WAAW;AAAA,IAC1B,UAAU,QAAQ,WAAW;AAAA,IAC7B,QAAQ,KAAK,QAAQ;AAAA;AAAA,IACrB,WAAW,KAAK,YAAY;AAAA,IAC5B,UAAU,MAAM,UAAU;AAAA,IAC1B,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAyD,EACzD,QAAQ,SAAS;AAAA,IACpB,cAAc,KAAK,eAAe;AAAA,IAClC,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC;AAAA,IAC5C,aAAa,QAAQ,cAAc,EAAE,QAAQ,CAAC;AAAA,IAC9C,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,aAAa,UAAU,cAAc;AAAA,EACvC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,oBAAoB,EAAE,GAAG,MAAM,MAAM;AAAA,IAC3C,MAAM,sBAAsB,EAAE,GAAG,MAAM,MAAM;AAAA,EAC/C;AACF;AAEO,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,UAAU,IAAI,EAAE,UAAU,UAAU,CAAC,EACtD,QAAQ;AAAA,IACX,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,WAAW,OAAO,aAAa,EAAE,YAAY,KAAK,CAAC;AAAA,IACnD,YAAY,QAAQ,aAAa;AAAA,IACjC,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,8BAA8B,EAAE,GAAG,MAAM,UAAU;AAAA,EAC3D;AACF;AAsEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,QAAQ,KAAK,SAAS,EACnB,WAAW,MAAM,MAAM,IAAI,EAAE,UAAU,UAAU,CAAC,EAClD,QAAQ,EACR,OAAO;AAAA,IACV,iBAAiB,KAAK,kBAAkB,EAAE,QAAQ;AAAA,IAClD,eAAe,MAAM,gBAAgB,EAAE,MAAgB,EAAE,QAAQ;AAAA,IACjE,WAAW,UAAU,YAAY,EAAE,QAAQ;AAAA,IAC3C,gBAAgB,UAAU,kBAAkB;AAAA,IAC5C,YAAY,QAAQ,aAAa,EAAE,QAAQ,CAAC,EAAE,QAAQ;AAAA,IACtD,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC;AAChE;AAGO,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EAAE,QAAQ,EAAE,OAAO;AAAA,IACzD,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IAC7B,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,MAAM,KAAK,MAAM,EACd,QAAQ,EACR,MAOC;AAAA,IACJ,UAAU,KAAK,UAAU,EACtB,QAAQ,EACR,MAA8C;AAAA,IACjD,QAAQ,KAAK,QAAQ,EAClB,QAAQ,EACR,MAAsE,EACtE,QAAQ,MAAM;AAAA,IACjB,QAAQ,KAAK,SAAS,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACjD,YAAY,KAAK,aAAa,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IACzD,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,YAAY,MAAM,aAAa;AAAA,IAC/B,kBAAkB,KAAK,mBAAmB;AAAA,IAC1C,oBAAoB,MAAM,qBAAqB;AAAA,IAC/C,iBAAiB,KAAK,kBAAkB;AAAA,IACxC,kBAAkB,MAAM,mBAAmB,EAAE,MAAgB;AAAA,IAC7D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,IACxD,gBAAgB,UAAU,iBAAiB;AAAA,IAC3C,aAAa,UAAU,cAAc;AAAA,IACrC,YAAY,UAAU,aAAa;AAAA,IACnC,UAAU,UAAU,WAAW;AAAA,EACjC;AAAA,EACA,CAAC,UAAU;AAAA,IACT,MAAM,+BAA+B,EAAE,GAAG,MAAM,MAAM;AAAA,IACtD,MAAM,iCAAiC,EAAE,GAAG,MAAM,QAAQ;AAAA,IAC1D,MAAM,gCAAgC,EAAE,GAAG,MAAM,SAAS;AAAA,EAC5D;AACF;AAGO,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,YAAY,KAAK,aAAa,EAC3B,WAAW,MAAM,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC,EAC9D,QAAQ;AAAA,IACX,WAAW,KAAK,YAAY,EACzB,QAAQ,EACR,MAQC;AAAA,IACJ,aAAa,KAAK,aAAa,EAAE,QAAQ;AAAA,IACzC,aAAa,KAAK,cAAc,EAAE,WAAW,MAAM,MAAM,EAAE;AAAA,IAC3D,UAAU,MAAM,UAAU;AAAA,IAC1B,WAAW,UAAU,YAAY,EAAE,WAAW,EAAE,QAAQ;AAAA,EAC1D;AAAA,EACA,CAAC,UAAU,CAAC,MAAM,gCAAgC,EAAE,GAAG,MAAM,UAAU,CAAC;AAC1E;;;ACtzBA,SAAS,eAAe;AACxB,OAAO,cAAc;AAKrB,IAAI,UAA8C;AAClD,IAAI,MAAyC;AAE7C,SAAS,QAAQ;AACf,MAAI,CAAC,KAAK;AACR,cAAU,SAAS,IAAI,YAAY;AACnC,UAAM,QAAQ,SAAS,EAAE,uBAAO,CAAC;AAAA,EACnC;AACA,SAAO;AACT;AAIO,IAAM,KAAgD,IAAI;AAAA,EAC/D,CAAC;AAAA,EACD;AAAA,IACE,IAAI,SAAS,MAAM;AACjB,YAAM,WAAW,MAAM;AACvB,YAAM,QAAS,SAAiB,IAAI;AACpC,UAAI,OAAO,UAAU,YAAY;AAC/B,eAAO,MAAM,KAAK,QAAQ;AAAA,MAC5B;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-GUBEEYDW.js → chunk-XMCVRVTF.js}

@@ -160,7 +160,7 @@ async function checkRedis() {
 function printBanner() {
   console.log(`
 ${colors.cyan}${colors.bold}\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
-\u2551           OPENSENTINEL v2.0.0            \u2551
+\u2551           OPENSENTINEL v3.0.0            \u2551
 \u2551       Your Personal AI Assistant         \u2551
 \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D${colors.reset}
 `);
@@ -208,4 +208,4 @@ export {
   printBanner,
   loadEnvFile
 };
-//# sourceMappingURL=chunk-GUBEEYDW.js.map
+//# sourceMappingURL=chunk-XMCVRVTF.js.map

package/dist/{chunk-GUBEEYDW.js.map → chunk-XMCVRVTF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/utils.ts"],"sourcesContent":["/**\n * Shared CLI utilities for OpenSentinel commands.\n */\n\nimport { createInterface } from \"node:readline\";\nimport { exec as execCb } from \"node:child_process\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { existsSync, mkdirSync, readFileSync } from \"node:fs\";\n\n// ── Colors (ANSI escape codes) ───────────────────────────────────────────────\n\nexport const colors = {\n  reset: \"\\x1b[0m\",\n  bold: \"\\x1b[1m\",\n  dim: \"\\x1b[2m\",\n  green: \"\\x1b[32m\",\n  cyan: \"\\x1b[36m\",\n  yellow: \"\\x1b[33m\",\n  red: \"\\x1b[31m\",\n  magenta: \"\\x1b[35m\",\n};\n\n// ── Interactive prompts ──────────────────────────────────────────────────────\n\nexport async function prompt(question: string): Promise<string> {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  return new Promise((resolve) => {\n    rl.question(question, (answer) => {\n      rl.close();\n      resolve(answer.trim());\n    });\n  });\n}\n\nexport async function confirm(question: string, defaultYes = true): Promise<boolean> {\n  const hint = defaultYes ? \"[Y/n]\" : \"[y/N]\";\n  const answer = await prompt(`${question} ${hint} `);\n  if (answer === \"\") return defaultYes;\n  return answer.toLowerCase().startsWith(\"y\");\n}\n\nexport async function promptSecret(question: string): Promise<string> {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  // Disable echo for secret input\n  if (process.stdin.isTTY) {\n    process.stdin.setRawMode?.(false);\n  }\n  return new Promise((resolve) => {\n    rl.question(question, (answer) => {\n      rl.close();\n      resolve(answer.trim());\n    });\n  });\n}\n\n// ── Shell execution ──────────────────────────────────────────────────────────\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n}\n\nexport async function exec(cmd: string, opts?: { throws?: boolean; input?: string }): Promise<ExecResult> {\n  return new Promise((resolve, reject) => {\n    const child = execCb(cmd, { maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {\n      const exitCode = error?.code ?? 0;\n      const result = { stdout: stdout.toString(), stderr: stderr.toString(), exitCode: typeof exitCode === \"number\" ? exitCode : 1 };\n      if (error && opts?.throws !== false) {\n        reject(Object.assign(error, result));\n      } else {\n        resolve(result);\n      }\n    });\n    if (opts?.input) {\n      child.stdin?.write(opts.input);\n      child.stdin?.end();\n    }\n  });\n}\n\nexport async function which(binary: string): Promise<string | null> {\n  try {\n    const result = await exec(`which ${binary}`, { throws: false });\n    return result.stdout.trim() || null;\n  } catch {\n    return null;\n  }\n}\n\n// ── Platform detection ───────────────────────────────────────────────────────\n\nexport interface Platform {\n  os: \"linux\" | \"darwin\" | \"other\";\n  distro: string;\n  packageManager: \"apt\" | \"brew\" | \"dnf\" | \"pacman\" | \"unknown\";\n}\n\nexport function detectPlatform(): Platform {\n  const os = process.platform === \"linux\" ? \"linux\"\n    : process.platform === \"darwin\" ? \"darwin\"\n    : \"other\" as const;\n\n  let distro = \"unknown\";\n  let packageManager: Platform[\"packageManager\"] = \"unknown\";\n\n  if (os === \"linux\") {\n    try {\n      const osRelease = readFileSync(\"/etc/os-release\", \"utf-8\");\n      const idMatch = osRelease.match(/^ID=(.+)$/m);\n      const idLikeMatch = osRelease.match(/^ID_LIKE=(.+)$/m);\n      distro = idMatch?.[1]?.replace(/\"/g, \"\") || \"unknown\";\n      const idLike = idLikeMatch?.[1]?.replace(/\"/g, \"\") || \"\";\n\n      if (distro === \"ubuntu\" || distro === \"debian\" || idLike.includes(\"debian\")) {\n        packageManager = \"apt\";\n      } else if (distro === \"fedora\" || idLike.includes(\"fedora\") || idLike.includes(\"rhel\")) {\n        packageManager = \"dnf\";\n      } else if (distro === \"arch\" || idLike.includes(\"arch\")) {\n        packageManager = \"pacman\";\n      }\n    } catch {}\n  } else if (os === \"darwin\") {\n    packageManager = \"brew\";\n    distro = \"macos\";\n  }\n\n  return { os, distro, packageManager };\n}\n\n// ── Config directory ─────────────────────────────────────────────────────────\n\nexport function getConfigDir(): string {\n  const dir = process.env.OPENSENTINEL_HOME || join(homedir(), \".opensentinel\");\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n  return dir;\n}\n\nexport function getPackageRoot(): string {\n  // When running from source: import.meta.dirname is src/commands/\n  // When installed globally: import.meta.dirname is dist/commands/ or dist/\n  // Go up to find package.json\n  let dir = import.meta.dirname || __dirname;\n  for (let i = 0; i < 5; i++) {\n    if (existsSync(join(dir, \"package.json\"))) {\n      return dir;\n    }\n    dir = join(dir, \"..\");\n  }\n  return process.cwd();\n}\n\nexport function getMigrationsDir(): string {\n  return join(getPackageRoot(), \"drizzle\");\n}\n\n// ── Port and service checks ──────────────────────────────────────────────────\n\nexport async function checkPort(port: number): Promise<boolean> {\n  try {\n    const result = await exec(`ss -tlnp 2>/dev/null | grep :${port} || netstat -tlnp 2>/dev/null | grep :${port}`, { throws: false });\n    return result.stdout.trim().length > 0;\n  } catch {\n    return false;\n  }\n}\n\nexport async function checkPostgres(): Promise<{ installed: boolean; running: boolean; port: number }> {\n  const installed = !!(await which(\"psql\"));\n  let running = false;\n  let port = 5432;\n\n  if (installed) {\n    const result = await exec(\"pg_isready -q 2>/dev/null\", { throws: false });\n    running = result.exitCode === 0;\n  }\n\n  // Also check if running on non-standard port\n  if (!running) {\n    const port5445 = await checkPort(5445);\n    if (port5445) {\n      running = true;\n      port = 5445;\n    }\n  }\n\n  return { installed, running, port };\n}\n\nexport async function checkRedis(): Promise<{ installed: boolean; running: boolean; port: number }> {\n  const installed = !!(await which(\"redis-cli\"));\n  let running = false;\n  let port = 6379;\n\n  if (installed) {\n    const result = await exec(\"redis-cli ping 2>/dev/null\", { throws: false });\n    running = result.stdout.trim() === \"PONG\";\n  }\n\n  // Check alternate ports\n  if (!running) {\n    for (const p of [6384, 6380]) {\n      const result = await exec(`redis-cli -p ${p} ping 2>/dev/null`, { throws: false });\n      if (result.stdout.trim() === \"PONG\") {\n        running = true;\n        port = p;\n        break;\n      }\n    }\n  }\n\n  return { installed, running, port };\n}\n\n// ── Banner ───────────────────────────────────────────────────────────────────\n\nexport function printBanner() {\n  console.log(`\n${colors.cyan}${colors.bold}╔══════════════════════════════════════════╗\n║           OPENSENTINEL v2.0.0            ║\n║       Your Personal AI Assistant         ║\n╚══════════════════════════════════════════╝${colors.reset}\n`);\n}\n\n// ── .env file loading ────────────────────────────────────────────────────────\n\nexport function loadEnvFile(): string | null {\n  const candidates = [\n    process.env.OPENSENTINEL_HOME && join(process.env.OPENSENTINEL_HOME, \".env\"),\n    join(homedir(), \".opensentinel\", \".env\"),\n    join(process.cwd(), \".env\"),\n  ].filter(Boolean) as string[];\n\n  for (const candidate of candidates) {\n    if (existsSync(candidate)) {\n      const content = readFileSync(candidate, \"utf-8\");\n      for (const line of content.split(\"\\n\")) {\n        const trimmed = line.trim();\n        if (!trimmed || trimmed.startsWith(\"#\")) continue;\n        const eqIndex = trimmed.indexOf(\"=\");\n        if (eqIndex === -1) continue;\n        const key = trimmed.slice(0, eqIndex).trim();\n        const value = trimmed.slice(eqIndex + 1).trim();\n        // Don't override existing env vars\n        if (!process.env[key]) {\n          process.env[key] = value;\n        }\n      }\n      return candidate;\n    }\n  }\n  return null;\n}\n"],"mappings":";AAIA,SAAS,uBAAuB;AAChC,SAAS,QAAQ,cAAc;AAC/B,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,YAAY,WAAW,oBAAoB;AAI7C,IAAM,SAAS;AAAA,EACpB,OAAO;AAAA,EACP,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,SAAS;AACX;AAIA,eAAsB,OAAO,UAAmC;AAC9D,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,OAAG,SAAS,UAAU,CAAC,WAAW;AAChC,SAAG,MAAM;AACT,cAAQ,OAAO,KAAK,CAAC;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,QAAQ,UAAkB,aAAa,MAAwB;AACnF,QAAM,OAAO,aAAa,UAAU;AACpC,QAAM,SAAS,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,GAAG;AAClD,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,OAAO,YAAY,EAAE,WAAW,GAAG;AAC5C;AAEA,eAAsB,aAAa,UAAmC;AACpE,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAE3E,MAAI,QAAQ,MAAM,OAAO;AACvB,YAAQ,MAAM,aAAa,KAAK;AAAA,EAClC;AACA,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,OAAG,SAAS,UAAU,CAAC,WAAW;AAChC,SAAG,MAAM;AACT,cAAQ,OAAO,KAAK,CAAC;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACH;AAUA,eAAsB,KAAK,KAAa,MAAkE;AACxG,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,OAAO,KAAK,EAAE,WAAW,KAAK,OAAO,KAAK,GAAG,CAAC,OAAO,QAAQ,WAAW;AACpF,YAAM,WAAW,OAAO,QAAQ;AAChC,YAAM,SAAS,EAAE,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,SAAS,GAAG,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC7H,UAAI,SAAS,MAAM,WAAW,OAAO;AACnC,eAAO,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,MACrC,OAAO;AACL,gBAAQ,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,MAAM,OAAO;AACf,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,YAAM,OAAO,IAAI;AAAA,IACnB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,MAAM,QAAwC;AAClE,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,SAAS,MAAM,IAAI,EAAE,QAAQ,MAAM,CAAC;AAC9D,WAAO,OAAO,OAAO,KAAK,KAAK;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,iBAA2B;AACzC,QAAM,KAAK,QAAQ,aAAa,UAAU,UACtC,QAAQ,aAAa,WAAW,WAChC;AAEJ,MAAI,SAAS;AACb,MAAI,iBAA6C;AAEjD,MAAI,OAAO,SAAS;AAClB,QAAI;AACF,YAAM,YAAY,aAAa,mBAAmB,OAAO;AACzD,YAAM,UAAU,UAAU,MAAM,YAAY;AAC5C,YAAM,cAAc,UAAU,MAAM,iBAAiB;AACrD,eAAS,UAAU,CAAC,GAAG,QAAQ,MAAM,EAAE,KAAK;AAC5C,YAAM,SAAS,cAAc,CAAC,GAAG,QAAQ,MAAM,EAAE,KAAK;AAEtD,UAAI,WAAW,YAAY,WAAW,YAAY,OAAO,SAAS,QAAQ,GAAG;AAC3E,yBAAiB;AAAA,MACnB,WAAW,WAAW,YAAY,OAAO,SAAS,QAAQ,KAAK,OAAO,SAAS,MAAM,GAAG;AACtF,yBAAiB;AAAA,MACnB,WAAW,WAAW,UAAU,OAAO,SAAS,MAAM,GAAG;AACvD,yBAAiB;AAAA,MACnB;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX,WAAW,OAAO,UAAU;AAC1B,qBAAiB;AACjB,aAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI,QAAQ,eAAe;AACtC;AAIO,SAAS,eAAuB;AACrC,QAAM,MAAM,QAAQ,IAAI,qBAAqB,KAAK,QAAQ,GAAG,eAAe;AAC5E,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,cAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,iBAAyB;AAIvC,MAAI,MAAM,YAAY,WAAW;AACjC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,QAAI,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG;AACzC,aAAO;AAAA,IACT;AACA,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACA,SAAO,QAAQ,IAAI;AACrB;AAEO,SAAS,mBAA2B;AACzC,SAAO,KAAK,eAAe,GAAG,SAAS;AACzC;AAIA,eAAsB,UAAU,MAAgC;AAC9D,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,gCAAgC,IAAI,yCAAyC,IAAI,IAAI,EAAE,QAAQ,MAAM,CAAC;AAChI,WAAO,OAAO,OAAO,KAAK,EAAE,SAAS;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,gBAAiF;AACrG,QAAM,YAAY,CAAC,CAAE,MAAM,MAAM,MAAM;AACvC,MAAI,UAAU;AACd,MAAI,OAAO;AAEX,MAAI,WAAW;AACb,UAAM,SAAS,MAAM,KAAK,6BAA6B,EAAE,QAAQ,MAAM,CAAC;AACxE,cAAU,OAAO,aAAa;AAAA,EAChC;AAGA,MAAI,CAAC,SAAS;AACZ,UAAM,WAAW,MAAM,UAAU,IAAI;AACrC,QAAI,UAAU;AACZ,gBAAU;AACV,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,SAAS,KAAK;AACpC;AAEA,eAAsB,aAA8E;AAClG,QAAM,YAAY,CAAC,CAAE,MAAM,MAAM,WAAW;AAC5C,MAAI,UAAU;AACd,MAAI,OAAO;AAEX,MAAI,WAAW;AACb,UAAM,SAAS,MAAM,KAAK,8BAA8B,EAAE,QAAQ,MAAM,CAAC;AACzE,cAAU,OAAO,OAAO,KAAK,MAAM;AAAA,EACrC;AAGA,MAAI,CAAC,SAAS;AACZ,eAAW,KAAK,CAAC,MAAM,IAAI,GAAG;AAC5B,YAAM,SAAS,MAAM,KAAK,gBAAgB,CAAC,qBAAqB,EAAE,QAAQ,MAAM,CAAC;AACjF,UAAI,OAAO,OAAO,KAAK,MAAM,QAAQ;AACnC,kBAAU;AACV,eAAO;AACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,SAAS,KAAK;AACpC;AAIO,SAAS,cAAc;AAC5B,UAAQ,IAAI;AAAA,EACZ,OAAO,IAAI,GAAG,OAAO,IAAI;AAAA;AAAA;AAAA,0QAGmB,OAAO,KAAK;AAAA,CACzD;AACD;AAIO,SAAS,cAA6B;AAC3C,QAAM,aAAa;AAAA,IACjB,QAAQ,IAAI,qBAAqB,KAAK,QAAQ,IAAI,mBAAmB,MAAM;AAAA,IAC3E,KAAK,QAAQ,GAAG,iBAAiB,MAAM;AAAA,IACvC,KAAK,QAAQ,IAAI,GAAG,MAAM;AAAA,EAC5B,EAAE,OAAO,OAAO;AAEhB,aAAW,aAAa,YAAY;AAClC,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU,aAAa,WAAW,OAAO;AAC/C,iBAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,cAAM,UAAU,KAAK,KAAK;AAC1B,YAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,cAAM,UAAU,QAAQ,QAAQ,GAAG;AACnC,YAAI,YAAY,GAAI;AACpB,cAAM,MAAM,QAAQ,MAAM,GAAG,OAAO,EAAE,KAAK;AAC3C,cAAM,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,KAAK;AAE9C,YAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,kBAAQ,IAAI,GAAG,IAAI;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/commands/utils.ts"],"sourcesContent":["/**\n * Shared CLI utilities for OpenSentinel commands.\n */\n\nimport { createInterface } from \"node:readline\";\nimport { exec as execCb } from \"node:child_process\";\nimport { homedir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { existsSync, mkdirSync, readFileSync } from \"node:fs\";\n\n// ── Colors (ANSI escape codes) ───────────────────────────────────────────────\n\nexport const colors = {\n  reset: \"\\x1b[0m\",\n  bold: \"\\x1b[1m\",\n  dim: \"\\x1b[2m\",\n  green: \"\\x1b[32m\",\n  cyan: \"\\x1b[36m\",\n  yellow: \"\\x1b[33m\",\n  red: \"\\x1b[31m\",\n  magenta: \"\\x1b[35m\",\n};\n\n// ── Interactive prompts ──────────────────────────────────────────────────────\n\nexport async function prompt(question: string): Promise<string> {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  return new Promise((resolve) => {\n    rl.question(question, (answer) => {\n      rl.close();\n      resolve(answer.trim());\n    });\n  });\n}\n\nexport async function confirm(question: string, defaultYes = true): Promise<boolean> {\n  const hint = defaultYes ? \"[Y/n]\" : \"[y/N]\";\n  const answer = await prompt(`${question} ${hint} `);\n  if (answer === \"\") return defaultYes;\n  return answer.toLowerCase().startsWith(\"y\");\n}\n\nexport async function promptSecret(question: string): Promise<string> {\n  const rl = createInterface({ input: process.stdin, output: process.stdout });\n  // Disable echo for secret input\n  if (process.stdin.isTTY) {\n    process.stdin.setRawMode?.(false);\n  }\n  return new Promise((resolve) => {\n    rl.question(question, (answer) => {\n      rl.close();\n      resolve(answer.trim());\n    });\n  });\n}\n\n// ── Shell execution ──────────────────────────────────────────────────────────\n\nexport interface ExecResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n}\n\nexport async function exec(cmd: string, opts?: { throws?: boolean; input?: string }): Promise<ExecResult> {\n  return new Promise((resolve, reject) => {\n    const child = execCb(cmd, { maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {\n      const exitCode = error?.code ?? 0;\n      const result = { stdout: stdout.toString(), stderr: stderr.toString(), exitCode: typeof exitCode === \"number\" ? exitCode : 1 };\n      if (error && opts?.throws !== false) {\n        reject(Object.assign(error, result));\n      } else {\n        resolve(result);\n      }\n    });\n    if (opts?.input) {\n      child.stdin?.write(opts.input);\n      child.stdin?.end();\n    }\n  });\n}\n\nexport async function which(binary: string): Promise<string | null> {\n  try {\n    const result = await exec(`which ${binary}`, { throws: false });\n    return result.stdout.trim() || null;\n  } catch {\n    return null;\n  }\n}\n\n// ── Platform detection ───────────────────────────────────────────────────────\n\nexport interface Platform {\n  os: \"linux\" | \"darwin\" | \"other\";\n  distro: string;\n  packageManager: \"apt\" | \"brew\" | \"dnf\" | \"pacman\" | \"unknown\";\n}\n\nexport function detectPlatform(): Platform {\n  const os = process.platform === \"linux\" ? \"linux\"\n    : process.platform === \"darwin\" ? \"darwin\"\n    : \"other\" as const;\n\n  let distro = \"unknown\";\n  let packageManager: Platform[\"packageManager\"] = \"unknown\";\n\n  if (os === \"linux\") {\n    try {\n      const osRelease = readFileSync(\"/etc/os-release\", \"utf-8\");\n      const idMatch = osRelease.match(/^ID=(.+)$/m);\n      const idLikeMatch = osRelease.match(/^ID_LIKE=(.+)$/m);\n      distro = idMatch?.[1]?.replace(/\"/g, \"\") || \"unknown\";\n      const idLike = idLikeMatch?.[1]?.replace(/\"/g, \"\") || \"\";\n\n      if (distro === \"ubuntu\" || distro === \"debian\" || idLike.includes(\"debian\")) {\n        packageManager = \"apt\";\n      } else if (distro === \"fedora\" || idLike.includes(\"fedora\") || idLike.includes(\"rhel\")) {\n        packageManager = \"dnf\";\n      } else if (distro === \"arch\" || idLike.includes(\"arch\")) {\n        packageManager = \"pacman\";\n      }\n    } catch {}\n  } else if (os === \"darwin\") {\n    packageManager = \"brew\";\n    distro = \"macos\";\n  }\n\n  return { os, distro, packageManager };\n}\n\n// ── Config directory ─────────────────────────────────────────────────────────\n\nexport function getConfigDir(): string {\n  const dir = process.env.OPENSENTINEL_HOME || join(homedir(), \".opensentinel\");\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n  return dir;\n}\n\nexport function getPackageRoot(): string {\n  // When running from source: import.meta.dirname is src/commands/\n  // When installed globally: import.meta.dirname is dist/commands/ or dist/\n  // Go up to find package.json\n  let dir = import.meta.dirname || __dirname;\n  for (let i = 0; i < 5; i++) {\n    if (existsSync(join(dir, \"package.json\"))) {\n      return dir;\n    }\n    dir = join(dir, \"..\");\n  }\n  return process.cwd();\n}\n\nexport function getMigrationsDir(): string {\n  return join(getPackageRoot(), \"drizzle\");\n}\n\n// ── Port and service checks ──────────────────────────────────────────────────\n\nexport async function checkPort(port: number): Promise<boolean> {\n  try {\n    const result = await exec(`ss -tlnp 2>/dev/null | grep :${port} || netstat -tlnp 2>/dev/null | grep :${port}`, { throws: false });\n    return result.stdout.trim().length > 0;\n  } catch {\n    return false;\n  }\n}\n\nexport async function checkPostgres(): Promise<{ installed: boolean; running: boolean; port: number }> {\n  const installed = !!(await which(\"psql\"));\n  let running = false;\n  let port = 5432;\n\n  if (installed) {\n    const result = await exec(\"pg_isready -q 2>/dev/null\", { throws: false });\n    running = result.exitCode === 0;\n  }\n\n  // Also check if running on non-standard port\n  if (!running) {\n    const port5445 = await checkPort(5445);\n    if (port5445) {\n      running = true;\n      port = 5445;\n    }\n  }\n\n  return { installed, running, port };\n}\n\nexport async function checkRedis(): Promise<{ installed: boolean; running: boolean; port: number }> {\n  const installed = !!(await which(\"redis-cli\"));\n  let running = false;\n  let port = 6379;\n\n  if (installed) {\n    const result = await exec(\"redis-cli ping 2>/dev/null\", { throws: false });\n    running = result.stdout.trim() === \"PONG\";\n  }\n\n  // Check alternate ports\n  if (!running) {\n    for (const p of [6384, 6380]) {\n      const result = await exec(`redis-cli -p ${p} ping 2>/dev/null`, { throws: false });\n      if (result.stdout.trim() === \"PONG\") {\n        running = true;\n        port = p;\n        break;\n      }\n    }\n  }\n\n  return { installed, running, port };\n}\n\n// ── Banner ───────────────────────────────────────────────────────────────────\n\nexport function printBanner() {\n  console.log(`\n${colors.cyan}${colors.bold}╔══════════════════════════════════════════╗\n║           OPENSENTINEL v3.0.0            ║\n║       Your Personal AI Assistant         ║\n╚══════════════════════════════════════════╝${colors.reset}\n`);\n}\n\n// ── .env file loading ────────────────────────────────────────────────────────\n\nexport function loadEnvFile(): string | null {\n  const candidates = [\n    process.env.OPENSENTINEL_HOME && join(process.env.OPENSENTINEL_HOME, \".env\"),\n    join(homedir(), \".opensentinel\", \".env\"),\n    join(process.cwd(), \".env\"),\n  ].filter(Boolean) as string[];\n\n  for (const candidate of candidates) {\n    if (existsSync(candidate)) {\n      const content = readFileSync(candidate, \"utf-8\");\n      for (const line of content.split(\"\\n\")) {\n        const trimmed = line.trim();\n        if (!trimmed || trimmed.startsWith(\"#\")) continue;\n        const eqIndex = trimmed.indexOf(\"=\");\n        if (eqIndex === -1) continue;\n        const key = trimmed.slice(0, eqIndex).trim();\n        const value = trimmed.slice(eqIndex + 1).trim();\n        // Don't override existing env vars\n        if (!process.env[key]) {\n          process.env[key] = value;\n        }\n      }\n      return candidate;\n    }\n  }\n  return null;\n}\n"],"mappings":";AAIA,SAAS,uBAAuB;AAChC,SAAS,QAAQ,cAAc;AAC/B,SAAS,eAAe;AACxB,SAAS,YAAY;AACrB,SAAS,YAAY,WAAW,oBAAoB;AAI7C,IAAM,SAAS;AAAA,EACpB,OAAO;AAAA,EACP,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,KAAK;AAAA,EACL,SAAS;AACX;AAIA,eAAsB,OAAO,UAAmC;AAC9D,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC3E,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,OAAG,SAAS,UAAU,CAAC,WAAW;AAChC,SAAG,MAAM;AACT,cAAQ,OAAO,KAAK,CAAC;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,QAAQ,UAAkB,aAAa,MAAwB;AACnF,QAAM,OAAO,aAAa,UAAU;AACpC,QAAM,SAAS,MAAM,OAAO,GAAG,QAAQ,IAAI,IAAI,GAAG;AAClD,MAAI,WAAW,GAAI,QAAO;AAC1B,SAAO,OAAO,YAAY,EAAE,WAAW,GAAG;AAC5C;AAEA,eAAsB,aAAa,UAAmC;AACpE,QAAM,KAAK,gBAAgB,EAAE,OAAO,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAE3E,MAAI,QAAQ,MAAM,OAAO;AACvB,YAAQ,MAAM,aAAa,KAAK;AAAA,EAClC;AACA,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,OAAG,SAAS,UAAU,CAAC,WAAW;AAChC,SAAG,MAAM;AACT,cAAQ,OAAO,KAAK,CAAC;AAAA,IACvB,CAAC;AAAA,EACH,CAAC;AACH;AAUA,eAAsB,KAAK,KAAa,MAAkE;AACxG,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,OAAO,KAAK,EAAE,WAAW,KAAK,OAAO,KAAK,GAAG,CAAC,OAAO,QAAQ,WAAW;AACpF,YAAM,WAAW,OAAO,QAAQ;AAChC,YAAM,SAAS,EAAE,QAAQ,OAAO,SAAS,GAAG,QAAQ,OAAO,SAAS,GAAG,UAAU,OAAO,aAAa,WAAW,WAAW,EAAE;AAC7H,UAAI,SAAS,MAAM,WAAW,OAAO;AACnC,eAAO,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,MACrC,OAAO;AACL,gBAAQ,MAAM;AAAA,MAChB;AAAA,IACF,CAAC;AACD,QAAI,MAAM,OAAO;AACf,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,YAAM,OAAO,IAAI;AAAA,IACnB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,MAAM,QAAwC;AAClE,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,SAAS,MAAM,IAAI,EAAE,QAAQ,MAAM,CAAC;AAC9D,WAAO,OAAO,OAAO,KAAK,KAAK;AAAA,EACjC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAUO,SAAS,iBAA2B;AACzC,QAAM,KAAK,QAAQ,aAAa,UAAU,UACtC,QAAQ,aAAa,WAAW,WAChC;AAEJ,MAAI,SAAS;AACb,MAAI,iBAA6C;AAEjD,MAAI,OAAO,SAAS;AAClB,QAAI;AACF,YAAM,YAAY,aAAa,mBAAmB,OAAO;AACzD,YAAM,UAAU,UAAU,MAAM,YAAY;AAC5C,YAAM,cAAc,UAAU,MAAM,iBAAiB;AACrD,eAAS,UAAU,CAAC,GAAG,QAAQ,MAAM,EAAE,KAAK;AAC5C,YAAM,SAAS,cAAc,CAAC,GAAG,QAAQ,MAAM,EAAE,KAAK;AAEtD,UAAI,WAAW,YAAY,WAAW,YAAY,OAAO,SAAS,QAAQ,GAAG;AAC3E,yBAAiB;AAAA,MACnB,WAAW,WAAW,YAAY,OAAO,SAAS,QAAQ,KAAK,OAAO,SAAS,MAAM,GAAG;AACtF,yBAAiB;AAAA,MACnB,WAAW,WAAW,UAAU,OAAO,SAAS,MAAM,GAAG;AACvD,yBAAiB;AAAA,MACnB;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX,WAAW,OAAO,UAAU;AAC1B,qBAAiB;AACjB,aAAS;AAAA,EACX;AAEA,SAAO,EAAE,IAAI,QAAQ,eAAe;AACtC;AAIO,SAAS,eAAuB;AACrC,QAAM,MAAM,QAAQ,IAAI,qBAAqB,KAAK,QAAQ,GAAG,eAAe;AAC5E,MAAI,CAAC,WAAW,GAAG,GAAG;AACpB,cAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,iBAAyB;AAIvC,MAAI,MAAM,YAAY,WAAW;AACjC,WAAS,IAAI,GAAG,IAAI,GAAG,KAAK;AAC1B,QAAI,WAAW,KAAK,KAAK,cAAc,CAAC,GAAG;AACzC,aAAO;AAAA,IACT;AACA,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACA,SAAO,QAAQ,IAAI;AACrB;AAEO,SAAS,mBAA2B;AACzC,SAAO,KAAK,eAAe,GAAG,SAAS;AACzC;AAIA,eAAsB,UAAU,MAAgC;AAC9D,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,gCAAgC,IAAI,yCAAyC,IAAI,IAAI,EAAE,QAAQ,MAAM,CAAC;AAChI,WAAO,OAAO,OAAO,KAAK,EAAE,SAAS;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAsB,gBAAiF;AACrG,QAAM,YAAY,CAAC,CAAE,MAAM,MAAM,MAAM;AACvC,MAAI,UAAU;AACd,MAAI,OAAO;AAEX,MAAI,WAAW;AACb,UAAM,SAAS,MAAM,KAAK,6BAA6B,EAAE,QAAQ,MAAM,CAAC;AACxE,cAAU,OAAO,aAAa;AAAA,EAChC;AAGA,MAAI,CAAC,SAAS;AACZ,UAAM,WAAW,MAAM,UAAU,IAAI;AACrC,QAAI,UAAU;AACZ,gBAAU;AACV,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,SAAS,KAAK;AACpC;AAEA,eAAsB,aAA8E;AAClG,QAAM,YAAY,CAAC,CAAE,MAAM,MAAM,WAAW;AAC5C,MAAI,UAAU;AACd,MAAI,OAAO;AAEX,MAAI,WAAW;AACb,UAAM,SAAS,MAAM,KAAK,8BAA8B,EAAE,QAAQ,MAAM,CAAC;AACzE,cAAU,OAAO,OAAO,KAAK,MAAM;AAAA,EACrC;AAGA,MAAI,CAAC,SAAS;AACZ,eAAW,KAAK,CAAC,MAAM,IAAI,GAAG;AAC5B,YAAM,SAAS,MAAM,KAAK,gBAAgB,CAAC,qBAAqB,EAAE,QAAQ,MAAM,CAAC;AACjF,UAAI,OAAO,OAAO,KAAK,MAAM,QAAQ;AACnC,kBAAU;AACV,eAAO;AACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,WAAW,SAAS,KAAK;AACpC;AAIO,SAAS,cAAc;AAC5B,UAAQ,IAAI;AAAA,EACZ,OAAO,IAAI,GAAG,OAAO,IAAI;AAAA;AAAA;AAAA,0QAGmB,OAAO,KAAK;AAAA,CACzD;AACD;AAIO,SAAS,cAA6B;AAC3C,QAAM,aAAa;AAAA,IACjB,QAAQ,IAAI,qBAAqB,KAAK,QAAQ,IAAI,mBAAmB,MAAM;AAAA,IAC3E,KAAK,QAAQ,GAAG,iBAAiB,MAAM;AAAA,IACvC,KAAK,QAAQ,IAAI,GAAG,MAAM;AAAA,EAC5B,EAAE,OAAO,OAAO;AAEhB,aAAW,aAAa,YAAY;AAClC,QAAI,WAAW,SAAS,GAAG;AACzB,YAAM,UAAU,aAAa,WAAW,OAAO;AAC/C,iBAAW,QAAQ,QAAQ,MAAM,IAAI,GAAG;AACtC,cAAM,UAAU,KAAK,KAAK;AAC1B,YAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,EAAG;AACzC,cAAM,UAAU,QAAQ,QAAQ,GAAG;AACnC,YAAI,YAAY,GAAI;AACpB,cAAM,MAAM,QAAQ,MAAM,GAAG,OAAO,EAAE,KAAK;AAC3C,cAAM,QAAQ,QAAQ,MAAM,UAAU,CAAC,EAAE,KAAK;AAE9C,YAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,kBAAQ,IAAI,GAAG,IAAI;AAAA,QACrB;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-ZLZKF2PM.js

@@ -0,0 +1,310 @@
+// src/config/env.ts
+import { z } from "zod";
+var envSchema = z.object({
+  // Claude API
+  CLAUDE_API_KEY: z.string().min(1, "CLAUDE_API_KEY is required"),
+  // Telegram
+  TELEGRAM_BOT_TOKEN: z.string().optional().default(""),
+  TELEGRAM_CHAT_ID: z.string().optional().default(""),
+  // OpenAI (Whisper STT)
+  OPENAI_API_KEY: z.string().optional().default(""),
+  // ElevenLabs TTS
+  ELEVENLABS_API_KEY: z.string().optional().default(""),
+  ELEVENLABS_VOICE_ID: z.string().optional().default(""),
+  // Database
+  DATABASE_URL: z.string().default(""),
+  // Redis
+  REDIS_URL: z.string().default("redis://localhost:6379"),
+  // Discord (optional)
+  DISCORD_BOT_TOKEN: z.string().optional(),
+  DISCORD_CLIENT_ID: z.string().optional(),
+  DISCORD_GUILD_ID: z.string().optional(),
+  DISCORD_ALLOWED_USER_IDS: z.string().optional(),
+  // Comma-separated list
+  DISCORD_ALLOWED_ROLE_IDS: z.string().optional(),
+  // Comma-separated list
+  // Slack (optional)
+  SLACK_BOT_TOKEN: z.string().optional(),
+  SLACK_SIGNING_SECRET: z.string().optional(),
+  SLACK_APP_TOKEN: z.string().optional(),
+  SLACK_SOCKET_MODE: z.coerce.boolean().optional().default(false),
+  SLACK_PORT: z.coerce.number().optional().default(3e3),
+  SLACK_ALLOWED_USER_IDS: z.string().optional(),
+  // Comma-separated list
+  SLACK_ALLOWED_CHANNEL_IDS: z.string().optional(),
+  // Comma-separated list
+  // Notion (optional)
+  NOTION_API_KEY: z.string().optional(),
+  NOTION_ROOT_PAGE_ID: z.string().optional(),
+  // Email (optional)
+  EMAIL_IMAP_HOST: z.string().optional(),
+  EMAIL_IMAP_PORT: z.coerce.number().optional().default(993),
+  EMAIL_IMAP_SECURE: z.coerce.boolean().optional().default(true),
+  EMAIL_SMTP_HOST: z.string().optional(),
+  EMAIL_SMTP_PORT: z.coerce.number().optional().default(587),
+  EMAIL_SMTP_SECURE: z.coerce.boolean().optional().default(false),
+  EMAIL_USER: z.string().optional(),
+  EMAIL_PASSWORD: z.string().optional(),
+  EMAIL_PROVIDER: z.enum(["gmail", "outlook", "yahoo", "custom"]).optional(),
+  // Local Mail Server (Dovecot master user for multi-account access)
+  EMAIL_MASTER_USER: z.string().optional(),
+  EMAIL_MASTER_PASSWORD: z.string().optional(),
+  EMAIL_LOCAL_IMAP_HOST: z.string().optional().default("127.0.0.1"),
+  EMAIL_LOCAL_IMAP_PORT: z.coerce.number().optional().default(993),
+  EMAIL_LOCAL_SMTP_HOST: z.string().optional().default("127.0.0.1"),
+  EMAIL_LOCAL_SMTP_PORT: z.coerce.number().optional().default(25),
+  // GitHub (optional)
+  GITHUB_TOKEN: z.string().optional(),
+  GITHUB_WEBHOOK_SECRET: z.string().optional(),
+  // Google Services (unified OAuth2 — optional, falls back to service-specific)
+  GOOGLE_CLIENT_ID: z.string().optional(),
+  GOOGLE_CLIENT_SECRET: z.string().optional(),
+  GOOGLE_REDIRECT_URI: z.string().optional(),
+  GOOGLE_REFRESH_TOKEN: z.string().optional(),
+  // Google Drive (optional)
+  GOOGLE_DRIVE_CLIENT_ID: z.string().optional(),
+  GOOGLE_DRIVE_CLIENT_SECRET: z.string().optional(),
+  GOOGLE_DRIVE_REDIRECT_URI: z.string().optional(),
+  GOOGLE_DRIVE_REFRESH_TOKEN: z.string().optional(),
+  // Dropbox (optional)
+  DROPBOX_APP_KEY: z.string().optional(),
+  DROPBOX_APP_SECRET: z.string().optional(),
+  DROPBOX_ACCESS_TOKEN: z.string().optional(),
+  DROPBOX_REFRESH_TOKEN: z.string().optional(),
+  // GIF Search (optional)
+  TENOR_API_KEY: z.string().optional(),
+  GIPHY_API_KEY: z.string().optional(),
+  // Finance (optional)
+  ALPHA_VANTAGE_API_KEY: z.string().optional(),
+  // Exchange Trading (optional)
+  COINBASE_API_KEY: z.string().optional(),
+  COINBASE_PRIVATE_KEY: z.string().optional(),
+  BINANCE_API_KEY: z.string().optional(),
+  BINANCE_API_SECRET: z.string().optional(),
+  BINANCE_TESTNET: z.coerce.boolean().optional().default(false),
+  EXCHANGE_REQUIRE_CONFIRMATION: z.coerce.boolean().optional().default(true),
+  // DeFi (optional)
+  DEFILLAMA_API_KEY: z.string().optional(),
+  // Pro tier
+  // On-Chain Analytics (optional)
+  ETHERSCAN_API_KEY: z.string().optional(),
+  ALCHEMY_API_KEY: z.string().optional(),
+  ALCHEMY_NETWORK: z.string().optional().default("eth-mainnet"),
+  // Optional
+  HUGGINGFACE_ACCESS_TOKEN: z.string().optional(),
+  TWILIO_ACCOUNT_SID: z.string().optional(),
+  TWILIO_AUTH_TOKEN: z.string().optional(),
+  TWILIO_PHONE_NUMBER: z.string().optional(),
+  // Home Assistant (optional)
+  HOME_ASSISTANT_URL: z.string().url().optional(),
+  HOME_ASSISTANT_TOKEN: z.string().optional(),
+  // Spotify (optional)
+  SPOTIFY_CLIENT_ID: z.string().optional(),
+  SPOTIFY_CLIENT_SECRET: z.string().optional(),
+  SPOTIFY_REDIRECT_URI: z.string().optional(),
+  SPOTIFY_REFRESH_TOKEN: z.string().optional(),
+  // Google Calendar (optional)
+  GOOGLE_CALENDAR_CLIENT_ID: z.string().optional(),
+  GOOGLE_CALENDAR_CLIENT_SECRET: z.string().optional(),
+  GOOGLE_CALENDAR_REDIRECT_URI: z.string().url().optional(),
+  GOOGLE_CALENDAR_REFRESH_TOKEN: z.string().optional(),
+  // Outlook Calendar (optional)
+  OUTLOOK_CLIENT_ID: z.string().optional(),
+  OUTLOOK_CLIENT_SECRET: z.string().optional(),
+  OUTLOOK_REDIRECT_URI: z.string().url().optional(),
+  OUTLOOK_REFRESH_TOKEN: z.string().optional(),
+  // Dropbox (additional OAuth fields)
+  DROPBOX_CLIENT_ID: z.string().optional(),
+  DROPBOX_CLIENT_SECRET: z.string().optional(),
+  DROPBOX_REDIRECT_URI: z.string().url().optional(),
+  // MCP (Model Context Protocol)
+  MCP_ENABLED: z.coerce.boolean().optional().default(true),
+  MCP_CONFIG_PATH: z.string().optional().default("./mcp.json"),
+  // Multi-Provider LLM
+  LLM_PROVIDER: z.string().optional().default("anthropic"),
+  OPENROUTER_API_KEY: z.string().optional(),
+  OPENROUTER_BASE_URL: z.string().optional(),
+  GROQ_API_KEY: z.string().optional(),
+  MISTRAL_API_KEY: z.string().optional(),
+  OPENAI_LLM_ENABLED: z.coerce.boolean().optional().default(false),
+  OPENAI_COMPATIBLE_API_KEY: z.string().optional(),
+  OPENAI_COMPATIBLE_BASE_URL: z.string().optional(),
+  OPENAI_COMPATIBLE_MODEL: z.string().optional(),
+  // Ollama (local models)
+  OLLAMA_ENABLED: z.coerce.boolean().optional().default(false),
+  OLLAMA_BASE_URL: z.string().optional().default("http://localhost:11434"),
+  OLLAMA_DEFAULT_MODEL: z.string().optional().default("llama3.1"),
+  // Model Routing
+  MODEL_ROUTING_ENABLED: z.coerce.boolean().optional().default(true),
+  MODEL_OPUS_ENABLED: z.coerce.boolean().optional().default(false),
+  // Context Compaction
+  COMPACTION_ENABLED: z.coerce.boolean().optional().default(true),
+  COMPACTION_TOKEN_THRESHOLD: z.coerce.number().optional().default(8e4),
+  COMPACTION_PRESERVE_RECENT: z.coerce.number().optional().default(6),
+  // Security (OWASP Agentic)
+  PROMPT_GUARD_ENABLED: z.coerce.boolean().optional().default(true),
+  PROMPT_GUARD_THRESHOLD: z.coerce.number().optional().default(0.7),
+  CIRCUIT_BREAKER_ENABLED: z.coerce.boolean().optional().default(true),
+  TOOL_SANDBOX_ENABLED: z.coerce.boolean().optional().default(true),
+  // Observability
+  COST_TRACKING_ENABLED: z.coerce.boolean().optional().default(true),
+  QUALITY_SCORING_ENABLED: z.coerce.boolean().optional().default(true),
+  REQUEST_TRACING_ENABLED: z.coerce.boolean().optional().default(true),
+  // Intent Parser & Gateway
+  LOCAL_INTENT_PARSER_ENABLED: z.coerce.boolean().optional().default(true),
+  UNIFIED_GATEWAY_ENABLED: z.coerce.boolean().optional().default(false),
+  // WhatsApp (optional)
+  WHATSAPP_ENABLED: z.coerce.boolean().optional().default(false),
+  WHATSAPP_AUTH_DIR: z.string().optional().default("./whatsapp-auth"),
+  WHATSAPP_ALLOWED_NUMBERS: z.string().optional(),
+  // Comma-separated
+  // Signal (optional)
+  SIGNAL_ENABLED: z.coerce.boolean().optional().default(false),
+  SIGNAL_PHONE_NUMBER: z.string().optional(),
+  SIGNAL_CLI_PATH: z.string().optional().default("signal-cli"),
+  SIGNAL_ALLOWED_NUMBERS: z.string().optional(),
+  // Comma-separated
+  // iMessage (optional, macOS only)
+  IMESSAGE_ENABLED: z.coerce.boolean().optional().default(false),
+  IMESSAGE_MODE: z.enum(["bluebubbles", "applescript"]).optional().default("applescript"),
+  IMESSAGE_BLUEBUBBLES_URL: z.string().optional(),
+  IMESSAGE_BLUEBUBBLES_PASSWORD: z.string().optional(),
+  IMESSAGE_ALLOWED_NUMBERS: z.string().optional(),
+  // Comma-separated
+  // Tunnel Support
+  TUNNEL_ENABLED: z.coerce.boolean().optional().default(false),
+  TUNNEL_PROVIDER: z.enum(["cloudflare", "ngrok", "localtunnel"]).optional().default("cloudflare"),
+  TUNNEL_SUBDOMAIN: z.string().optional(),
+  TUNNEL_AUTH_TOKEN: z.string().optional(),
+  // Autonomy Levels
+  AUTONOMY_LEVEL: z.enum(["readonly", "supervised", "autonomous"]).optional().default("autonomous"),
+  // Prometheus/OpenTelemetry
+  PROMETHEUS_ENABLED: z.coerce.boolean().optional().default(false),
+  PROMETHEUS_PATH: z.string().optional().default("/metrics"),
+  // Device Pairing
+  PAIRING_ENABLED: z.coerce.boolean().optional().default(false),
+  PAIRING_CODE_LIFETIME_MINUTES: z.coerce.number().optional().default(5),
+  // Gateway Authentication (OpenClaw-style)
+  // If set, web UI and API requests require this token. Unset = open access (localhost-friendly).
+  GATEWAY_TOKEN: z.string().optional(),
+  // Matrix (optional)
+  MATRIX_ENABLED: z.coerce.boolean().optional().default(false),
+  MATRIX_HOMESERVER_URL: z.string().optional(),
+  MATRIX_ACCESS_TOKEN: z.string().optional(),
+  MATRIX_USER_ID: z.string().optional(),
+  MATRIX_ALLOWED_ROOM_IDS: z.string().optional(),
+  // Comma-separated
+  MATRIX_AUTO_JOIN: z.coerce.boolean().optional().default(true),
+  MATRIX_E2E_ENABLED: z.coerce.boolean().optional().default(false),
+  // Neo4j (OSINT graph database)
+  NEO4J_URI: z.string().optional().default("bolt://localhost:7687"),
+  NEO4J_USER: z.string().optional().default("neo4j"),
+  NEO4J_PASSWORD: z.string().optional().default(""),
+  NEO4J_DATABASE: z.string().optional().default("neo4j"),
+  // OSINT API Keys
+  FEC_API_KEY: z.string().optional().default(""),
+  OPENCORPORATES_API_TOKEN: z.string().optional().default(""),
+  SEC_EDGAR_USER_AGENT: z.string().optional().default("OpenSentinel/2.1 (contact@opensentinel.ai)"),
+  // OSINT Feature Toggle
+  OSINT_ENABLED: z.coerce.boolean().optional().default(false),
+  OSINT_RATE_LIMIT_BUFFER_MS: z.coerce.number().optional().default(200),
+  // Embedding Provider
+  EMBEDDING_PROVIDER: z.enum(["openai", "huggingface", "tfidf"]).optional().default("openai"),
+  EMBEDDING_MODEL: z.string().optional(),
+  EMBEDDING_DIMENSIONS: z.coerce.number().optional(),
+  EMBEDDING_DB_DIMENSIONS: z.coerce.number().optional().default(1536),
+  EMBEDDING_BATCH_SIZE: z.coerce.number().optional().default(32),
+  // Advanced RAG
+  HYDE_ENABLED: z.coerce.boolean().optional().default(false),
+  RERANK_ENABLED: z.coerce.boolean().optional().default(false),
+  RERANK_MIN_SCORE: z.coerce.number().optional().default(3),
+  MULTISTEP_RAG_ENABLED: z.coerce.boolean().optional().default(false),
+  MULTISTEP_MAX_STEPS: z.coerce.number().optional().default(2),
+  RETRIEVAL_CACHE_ENABLED: z.coerce.boolean().optional().default(false),
+  CONTEXTUAL_QUERY_ENABLED: z.coerce.boolean().optional().default(false),
+  // SOC 2 Encryption & Audit
+  ENCRYPTION_MASTER_KEY: z.string().optional(),
+  // 32-byte base64 key for field encryption
+  AUDIT_SIGNING_KEY: z.string().optional(),
+  // HMAC key for tamper-proof audit logs
+  // Server
+  PORT: z.coerce.number().default(8030),
+  NODE_ENV: z.enum(["development", "production", "test"]).default("development")
+});
+var _env = null;
+var _providerInitPromise = null;
+function configure(config) {
+  const merged = { ...process.env, ...config };
+  const result = envSchema.safeParse(merged);
+  if (!result.success) {
+    const errors = result.error.errors.map(
+      (e) => `${e.path.join(".")}: ${e.message}`
+    );
+    throw new Error(
+      `OpenSentinel configuration validation failed:
+  ${errors.join("\n  ")}`
+    );
+  }
+  _env = result.data;
+  _providerInitPromise = import("./providers-J4LYPHDR.js").then((m) => m.initializeProviders()).catch(() => {
+  });
+  return _env;
+}
+async function ready() {
+  if (_providerInitPromise) await _providerInitPromise;
+}
+function loadFromProcessEnv() {
+  const result = envSchema.safeParse(process.env);
+  if (!result.success) {
+    if (process.env.__OPENSENTINEL_CLI__) {
+      const errors = result.error.errors.map(
+        (e) => `${e.path.join(".")}: ${e.message}`
+      );
+      throw new Error(
+        `Environment validation failed:
+  ${errors.join("\n  ")}`
+      );
+    }
+    const lenientSchema = envSchema.extend({
+      CLAUDE_API_KEY: z.string().default("")
+    });
+    const lenientResult = lenientSchema.safeParse(process.env);
+    _env = lenientResult.success ? lenientResult.data : {};
+    return _env;
+  }
+  _env = result.data;
+  return _env;
+}
+var env = new Proxy({}, {
+  get(_target, prop) {
+    if (!_env) {
+      loadFromProcessEnv();
+    }
+    return _env[prop];
+  },
+  has(_target, prop) {
+    if (!_env) {
+      loadFromProcessEnv();
+    }
+    return prop in _env;
+  },
+  ownKeys() {
+    if (!_env) {
+      loadFromProcessEnv();
+    }
+    return Reflect.ownKeys(_env);
+  },
+  getOwnPropertyDescriptor(_target, prop) {
+    if (!_env) {
+      loadFromProcessEnv();
+    }
+    return Object.getOwnPropertyDescriptor(_env, prop);
+  }
+});
+
+export {
+  configure,
+  ready,
+  env
+};
+//# sourceMappingURL=chunk-ZLZKF2PM.js.map

package/dist/chunk-ZLZKF2PM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/env.ts"],"sourcesContent":["import { z } from \"zod\";\r\n\r\nconst envSchema = z.object({\r\n  // Claude API\r\n  CLAUDE_API_KEY: z.string().min(1, \"CLAUDE_API_KEY is required\"),\r\n\r\n  // Telegram\r\n  TELEGRAM_BOT_TOKEN: z.string().optional().default(\"\"),\r\n  TELEGRAM_CHAT_ID: z.string().optional().default(\"\"),\r\n\r\n  // OpenAI (Whisper STT)\r\n  OPENAI_API_KEY: z.string().optional().default(\"\"),\r\n\r\n  // ElevenLabs TTS\r\n  ELEVENLABS_API_KEY: z.string().optional().default(\"\"),\r\n  ELEVENLABS_VOICE_ID: z.string().optional().default(\"\"),\r\n\r\n  // Database\r\n  DATABASE_URL: z\r\n    .string()\r\n    .default(\"\"),\r\n\r\n  // Redis\r\n  REDIS_URL: z.string().default(\"redis://localhost:6379\"),\r\n\r\n  // Discord (optional)\r\n  DISCORD_BOT_TOKEN: z.string().optional(),\r\n  DISCORD_CLIENT_ID: z.string().optional(),\r\n  DISCORD_GUILD_ID: z.string().optional(),\r\n  DISCORD_ALLOWED_USER_IDS: z.string().optional(), // Comma-separated list\r\n  DISCORD_ALLOWED_ROLE_IDS: z.string().optional(), // Comma-separated list\r\n\r\n  // Slack (optional)\r\n  SLACK_BOT_TOKEN: z.string().optional(),\r\n  SLACK_SIGNING_SECRET: z.string().optional(),\r\n  SLACK_APP_TOKEN: z.string().optional(),\r\n  SLACK_SOCKET_MODE: z.coerce.boolean().optional().default(false),\r\n  SLACK_PORT: z.coerce.number().optional().default(3000),\r\n  SLACK_ALLOWED_USER_IDS: z.string().optional(), // Comma-separated list\r\n  SLACK_ALLOWED_CHANNEL_IDS: z.string().optional(), // Comma-separated list\r\n\r\n  // Notion (optional)\r\n  NOTION_API_KEY: z.string().optional(),\r\n  NOTION_ROOT_PAGE_ID: z.string().optional(),\r\n\r\n  // Email (optional)\r\n  EMAIL_IMAP_HOST: z.string().optional(),\r\n  EMAIL_IMAP_PORT: z.coerce.number().optional().default(993),\r\n  EMAIL_IMAP_SECURE: z.coerce.boolean().optional().default(true),\r\n  EMAIL_SMTP_HOST: z.string().optional(),\r\n  EMAIL_SMTP_PORT: z.coerce.number().optional().default(587),\r\n  EMAIL_SMTP_SECURE: z.coerce.boolean().optional().default(false),\r\n  EMAIL_USER: z.string().optional(),\r\n  EMAIL_PASSWORD: z.string().optional(),\r\n  EMAIL_PROVIDER: z.enum([\"gmail\", \"outlook\", \"yahoo\", \"custom\"]).optional(),\r\n\r\n  // Local Mail Server (Dovecot master user for multi-account access)\r\n  EMAIL_MASTER_USER: z.string().optional(),\r\n  EMAIL_MASTER_PASSWORD: z.string().optional(),\r\n  EMAIL_LOCAL_IMAP_HOST: z.string().optional().default(\"127.0.0.1\"),\r\n  EMAIL_LOCAL_IMAP_PORT: z.coerce.number().optional().default(993),\r\n  EMAIL_LOCAL_SMTP_HOST: z.string().optional().default(\"127.0.0.1\"),\r\n  EMAIL_LOCAL_SMTP_PORT: z.coerce.number().optional().default(25),\r\n\r\n  // GitHub (optional)\r\n  GITHUB_TOKEN: z.string().optional(),\r\n  GITHUB_WEBHOOK_SECRET: z.string().optional(),\r\n\r\n  // Google Services (unified OAuth2 — optional, falls back to service-specific)\r\n  GOOGLE_CLIENT_ID: z.string().optional(),\r\n  GOOGLE_CLIENT_SECRET: z.string().optional(),\r\n  GOOGLE_REDIRECT_URI: z.string().optional(),\r\n  GOOGLE_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // Google Drive (optional)\r\n  GOOGLE_DRIVE_CLIENT_ID: z.string().optional(),\r\n  GOOGLE_DRIVE_CLIENT_SECRET: z.string().optional(),\r\n  GOOGLE_DRIVE_REDIRECT_URI: z.string().optional(),\r\n  GOOGLE_DRIVE_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // Dropbox (optional)\r\n  DROPBOX_APP_KEY: z.string().optional(),\r\n  DROPBOX_APP_SECRET: z.string().optional(),\r\n  DROPBOX_ACCESS_TOKEN: z.string().optional(),\r\n  DROPBOX_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // GIF Search (optional)\r\n  TENOR_API_KEY: z.string().optional(),\r\n  GIPHY_API_KEY: z.string().optional(),\r\n\r\n  // Finance (optional)\r\n  ALPHA_VANTAGE_API_KEY: z.string().optional(),\r\n\r\n  // Exchange Trading (optional)\r\n  COINBASE_API_KEY: z.string().optional(),\r\n  COINBASE_PRIVATE_KEY: z.string().optional(),\r\n  BINANCE_API_KEY: z.string().optional(),\r\n  BINANCE_API_SECRET: z.string().optional(),\r\n  BINANCE_TESTNET: z.coerce.boolean().optional().default(false),\r\n  EXCHANGE_REQUIRE_CONFIRMATION: z.coerce.boolean().optional().default(true),\r\n\r\n  // DeFi (optional)\r\n  DEFILLAMA_API_KEY: z.string().optional(), // Pro tier\r\n\r\n  // On-Chain Analytics (optional)\r\n  ETHERSCAN_API_KEY: z.string().optional(),\r\n  ALCHEMY_API_KEY: z.string().optional(),\r\n  ALCHEMY_NETWORK: z.string().optional().default(\"eth-mainnet\"),\r\n\r\n  // Optional\r\n  HUGGINGFACE_ACCESS_TOKEN: z.string().optional(),\r\n  TWILIO_ACCOUNT_SID: z.string().optional(),\r\n  TWILIO_AUTH_TOKEN: z.string().optional(),\r\n  TWILIO_PHONE_NUMBER: z.string().optional(),\r\n\r\n  // Home Assistant (optional)\r\n  HOME_ASSISTANT_URL: z.string().url().optional(),\r\n  HOME_ASSISTANT_TOKEN: z.string().optional(),\r\n\r\n  // Spotify (optional)\r\n  SPOTIFY_CLIENT_ID: z.string().optional(),\r\n  SPOTIFY_CLIENT_SECRET: z.string().optional(),\r\n  SPOTIFY_REDIRECT_URI: z.string().optional(),\r\n  SPOTIFY_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // Google Calendar (optional)\r\n  GOOGLE_CALENDAR_CLIENT_ID: z.string().optional(),\r\n  GOOGLE_CALENDAR_CLIENT_SECRET: z.string().optional(),\r\n  GOOGLE_CALENDAR_REDIRECT_URI: z.string().url().optional(),\r\n  GOOGLE_CALENDAR_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // Outlook Calendar (optional)\r\n  OUTLOOK_CLIENT_ID: z.string().optional(),\r\n  OUTLOOK_CLIENT_SECRET: z.string().optional(),\r\n  OUTLOOK_REDIRECT_URI: z.string().url().optional(),\r\n  OUTLOOK_REFRESH_TOKEN: z.string().optional(),\r\n\r\n  // Dropbox (additional OAuth fields)\r\n  DROPBOX_CLIENT_ID: z.string().optional(),\r\n  DROPBOX_CLIENT_SECRET: z.string().optional(),\r\n  DROPBOX_REDIRECT_URI: z.string().url().optional(),\r\n\r\n  // MCP (Model Context Protocol)\r\n  MCP_ENABLED: z.coerce.boolean().optional().default(true),\r\n  MCP_CONFIG_PATH: z.string().optional().default(\"./mcp.json\"),\r\n\r\n  // Multi-Provider LLM\r\n  LLM_PROVIDER: z.string().optional().default(\"anthropic\"),\r\n  OPENROUTER_API_KEY: z.string().optional(),\r\n  OPENROUTER_BASE_URL: z.string().optional(),\r\n  GROQ_API_KEY: z.string().optional(),\r\n  MISTRAL_API_KEY: z.string().optional(),\r\n  OPENAI_LLM_ENABLED: z.coerce.boolean().optional().default(false),\r\n  OPENAI_COMPATIBLE_API_KEY: z.string().optional(),\r\n  OPENAI_COMPATIBLE_BASE_URL: z.string().optional(),\r\n  OPENAI_COMPATIBLE_MODEL: z.string().optional(),\r\n\r\n  // Ollama (local models)\r\n  OLLAMA_ENABLED: z.coerce.boolean().optional().default(false),\r\n  OLLAMA_BASE_URL: z.string().optional().default(\"http://localhost:11434\"),\r\n  OLLAMA_DEFAULT_MODEL: z.string().optional().default(\"llama3.1\"),\r\n\r\n  // Model Routing\r\n  MODEL_ROUTING_ENABLED: z.coerce.boolean().optional().default(true),\r\n  MODEL_OPUS_ENABLED: z.coerce.boolean().optional().default(false),\r\n\r\n  // Context Compaction\r\n  COMPACTION_ENABLED: z.coerce.boolean().optional().default(true),\r\n  COMPACTION_TOKEN_THRESHOLD: z.coerce.number().optional().default(80000),\r\n  COMPACTION_PRESERVE_RECENT: z.coerce.number().optional().default(6),\r\n\r\n  // Security (OWASP Agentic)\r\n  PROMPT_GUARD_ENABLED: z.coerce.boolean().optional().default(true),\r\n  PROMPT_GUARD_THRESHOLD: z.coerce.number().optional().default(0.7),\r\n  CIRCUIT_BREAKER_ENABLED: z.coerce.boolean().optional().default(true),\r\n  TOOL_SANDBOX_ENABLED: z.coerce.boolean().optional().default(true),\r\n\r\n  // Observability\r\n  COST_TRACKING_ENABLED: z.coerce.boolean().optional().default(true),\r\n  QUALITY_SCORING_ENABLED: z.coerce.boolean().optional().default(true),\r\n  REQUEST_TRACING_ENABLED: z.coerce.boolean().optional().default(true),\r\n\r\n  // Intent Parser & Gateway\r\n  LOCAL_INTENT_PARSER_ENABLED: z.coerce.boolean().optional().default(true),\r\n  UNIFIED_GATEWAY_ENABLED: z.coerce.boolean().optional().default(false),\r\n\r\n  // WhatsApp (optional)\r\n  WHATSAPP_ENABLED: z.coerce.boolean().optional().default(false),\r\n  WHATSAPP_AUTH_DIR: z.string().optional().default(\"./whatsapp-auth\"),\r\n  WHATSAPP_ALLOWED_NUMBERS: z.string().optional(), // Comma-separated\r\n\r\n  // Signal (optional)\r\n  SIGNAL_ENABLED: z.coerce.boolean().optional().default(false),\r\n  SIGNAL_PHONE_NUMBER: z.string().optional(),\r\n  SIGNAL_CLI_PATH: z.string().optional().default(\"signal-cli\"),\r\n  SIGNAL_ALLOWED_NUMBERS: z.string().optional(), // Comma-separated\r\n\r\n  // iMessage (optional, macOS only)\r\n  IMESSAGE_ENABLED: z.coerce.boolean().optional().default(false),\r\n  IMESSAGE_MODE: z.enum([\"bluebubbles\", \"applescript\"]).optional().default(\"applescript\"),\r\n  IMESSAGE_BLUEBUBBLES_URL: z.string().optional(),\r\n  IMESSAGE_BLUEBUBBLES_PASSWORD: z.string().optional(),\r\n  IMESSAGE_ALLOWED_NUMBERS: z.string().optional(), // Comma-separated\r\n\r\n  // Tunnel Support\r\n  TUNNEL_ENABLED: z.coerce.boolean().optional().default(false),\r\n  TUNNEL_PROVIDER: z.enum([\"cloudflare\", \"ngrok\", \"localtunnel\"]).optional().default(\"cloudflare\"),\r\n  TUNNEL_SUBDOMAIN: z.string().optional(),\r\n  TUNNEL_AUTH_TOKEN: z.string().optional(),\r\n\r\n  // Autonomy Levels\r\n  AUTONOMY_LEVEL: z.enum([\"readonly\", \"supervised\", \"autonomous\"]).optional().default(\"autonomous\"),\r\n\r\n  // Prometheus/OpenTelemetry\r\n  PROMETHEUS_ENABLED: z.coerce.boolean().optional().default(false),\r\n  PROMETHEUS_PATH: z.string().optional().default(\"/metrics\"),\r\n\r\n  // Device Pairing\r\n  PAIRING_ENABLED: z.coerce.boolean().optional().default(false),\r\n  PAIRING_CODE_LIFETIME_MINUTES: z.coerce.number().optional().default(5),\r\n\r\n  // Gateway Authentication (OpenClaw-style)\r\n  // If set, web UI and API requests require this token. Unset = open access (localhost-friendly).\r\n  GATEWAY_TOKEN: z.string().optional(),\r\n\r\n  // Matrix (optional)\r\n  MATRIX_ENABLED: z.coerce.boolean().optional().default(false),\r\n  MATRIX_HOMESERVER_URL: z.string().optional(),\r\n  MATRIX_ACCESS_TOKEN: z.string().optional(),\r\n  MATRIX_USER_ID: z.string().optional(),\r\n  MATRIX_ALLOWED_ROOM_IDS: z.string().optional(), // Comma-separated\r\n  MATRIX_AUTO_JOIN: z.coerce.boolean().optional().default(true),\r\n  MATRIX_E2E_ENABLED: z.coerce.boolean().optional().default(false),\r\n\r\n  // Neo4j (OSINT graph database)\r\n  NEO4J_URI: z.string().optional().default(\"bolt://localhost:7687\"),\r\n  NEO4J_USER: z.string().optional().default(\"neo4j\"),\r\n  NEO4J_PASSWORD: z.string().optional().default(\"\"),\r\n  NEO4J_DATABASE: z.string().optional().default(\"neo4j\"),\r\n\r\n  // OSINT API Keys\r\n  FEC_API_KEY: z.string().optional().default(\"\"),\r\n  OPENCORPORATES_API_TOKEN: z.string().optional().default(\"\"),\r\n  SEC_EDGAR_USER_AGENT: z.string().optional().default(\"OpenSentinel/2.1 (contact@opensentinel.ai)\"),\r\n\r\n  // OSINT Feature Toggle\r\n  OSINT_ENABLED: z.coerce.boolean().optional().default(false),\r\n  OSINT_RATE_LIMIT_BUFFER_MS: z.coerce.number().optional().default(200),\r\n\r\n  // Embedding Provider\r\n  EMBEDDING_PROVIDER: z.enum([\"openai\", \"huggingface\", \"tfidf\"]).optional().default(\"openai\"),\r\n  EMBEDDING_MODEL: z.string().optional(),\r\n  EMBEDDING_DIMENSIONS: z.coerce.number().optional(),\r\n  EMBEDDING_DB_DIMENSIONS: z.coerce.number().optional().default(1536),\r\n  EMBEDDING_BATCH_SIZE: z.coerce.number().optional().default(32),\r\n\r\n  // Advanced RAG\r\n  HYDE_ENABLED: z.coerce.boolean().optional().default(false),\r\n  RERANK_ENABLED: z.coerce.boolean().optional().default(false),\r\n  RERANK_MIN_SCORE: z.coerce.number().optional().default(3),\r\n  MULTISTEP_RAG_ENABLED: z.coerce.boolean().optional().default(false),\r\n  MULTISTEP_MAX_STEPS: z.coerce.number().optional().default(2),\r\n  RETRIEVAL_CACHE_ENABLED: z.coerce.boolean().optional().default(false),\r\n  CONTEXTUAL_QUERY_ENABLED: z.coerce.boolean().optional().default(false),\r\n\r\n  // SOC 2 Encryption & Audit\r\n  ENCRYPTION_MASTER_KEY: z.string().optional(), // 32-byte base64 key for field encryption\r\n  AUDIT_SIGNING_KEY: z.string().optional(), // HMAC key for tamper-proof audit logs\r\n\r\n  // Server\r\n  PORT: z.coerce.number().default(8030),\r\n  NODE_ENV: z.enum([\"development\", \"production\", \"test\"]).default(\"development\"),\r\n});\r\n\r\nexport type Env = z.infer<typeof envSchema>;\r\n\r\n// Internal mutable store\r\nlet _env: Env | null = null;\r\n\r\n/**\r\n * Programmatic configuration for library use.\r\n * Call this before any module accesses `env`.\r\n * Config values are merged with process.env (config takes precedence).\r\n */\r\nlet _providerInitPromise: Promise<void> | null = null;\r\n\r\nexport function configure(config: Partial<Env> & { CLAUDE_API_KEY: string }): Env {\r\n  const merged = { ...process.env, ...config };\r\n  const result = envSchema.safeParse(merged);\r\n\r\n  if (!result.success) {\r\n    const errors = result.error.errors.map(\r\n      (e) => `${e.path.join(\".\")}: ${e.message}`\r\n    );\r\n    throw new Error(\r\n      `OpenSentinel configuration validation failed:\\n  ${errors.join(\"\\n  \")}`\r\n    );\r\n  }\r\n\r\n  _env = result.data;\r\n\r\n  // Auto-initialize LLM providers after configuration\r\n  _providerInitPromise = import(\"../core/providers\").then((m) => m.initializeProviders()).catch(() => {});\r\n\r\n  return _env;\r\n}\r\n\r\n/**\r\n * Wait for provider initialization to complete.\r\n * Call after configure() if you need providers ready before first API call.\r\n */\r\nexport async function ready(): Promise<void> {\r\n  if (_providerInitPromise) await _providerInitPromise;\r\n}\r\n\r\n/**\r\n * Load config from process.env.\r\n * Called lazily on first access if configure() was not called.\r\n *\r\n * When used as a library, env vars may not be set at import time\r\n * (module-level singletons trigger this during static initialization).\r\n * In that case, we populate with defaults and partial values rather\r\n * than throwing — services will fail with clear errors when actually used.\r\n */\r\nfunction loadFromProcessEnv(): Env {\r\n  const result = envSchema.safeParse(process.env);\r\n\r\n  if (!result.success) {\r\n    // If running as CLI (not library), throw so the user sees the error immediately\r\n    if (process.env.__OPENSENTINEL_CLI__) {\r\n      const errors = result.error.errors.map(\r\n        (e) => `${e.path.join(\".\")}: ${e.message}`\r\n      );\r\n      throw new Error(\r\n        `Environment validation failed:\\n  ${errors.join(\"\\n  \")}`\r\n      );\r\n    }\r\n\r\n    // For library use: populate with whatever we have, fill missing with defaults\r\n    // Services will fail individually when they try to use undefined API keys\r\n    const lenientSchema = envSchema.extend({\r\n      CLAUDE_API_KEY: z.string().default(\"\"),\r\n    });\r\n    const lenientResult = lenientSchema.safeParse(process.env);\r\n    _env = (lenientResult.success ? lenientResult.data : {}) as Env;\r\n    return _env;\r\n  }\r\n\r\n  _env = result.data;\r\n  return _env;\r\n}\r\n\r\n/**\r\n * The env accessor. Lazy — loads from process.env on first access\r\n * if configure() was not called first.\r\n *\r\n * All 37+ consumer files keep using `env.SOME_PROP` unchanged.\r\n */\r\nexport const env: Env = new Proxy({} as Env, {\r\n  get(_target, prop: string) {\r\n    if (!_env) {\r\n      loadFromProcessEnv();\r\n    }\r\n    return (_env as any)[prop];\r\n  },\r\n  has(_target, prop: string) {\r\n    if (!_env) {\r\n      loadFromProcessEnv();\r\n    }\r\n    return prop in (_env as any);\r\n  },\r\n  ownKeys() {\r\n    if (!_env) {\r\n      loadFromProcessEnv();\r\n    }\r\n    return Reflect.ownKeys(_env as any);\r\n  },\r\n  getOwnPropertyDescriptor(_target, prop) {\r\n    if (!_env) {\r\n      loadFromProcessEnv();\r\n    }\r\n    return Object.getOwnPropertyDescriptor(_env as any, prop);\r\n  },\r\n});\r\n"],"mappings":";AAAA,SAAS,SAAS;AAElB,IAAM,YAAY,EAAE,OAAO;AAAA;AAAA,EAEzB,gBAAgB,EAAE,OAAO,EAAE,IAAI,GAAG,4BAA4B;AAAA;AAAA,EAG9D,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAGlD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAGhD,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACpD,qBAAqB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAGrD,cAAc,EACX,OAAO,EACP,QAAQ,EAAE;AAAA;AAAA,EAGb,WAAW,EAAE,OAAO,EAAE,QAAQ,wBAAwB;AAAA;AAAA,EAGtD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC9C,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG9C,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,mBAAmB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC9D,YAAY,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAI;AAAA,EACrD,wBAAwB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC5C,2BAA2B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG/C,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGzC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EACzD,mBAAmB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC7D,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EACzD,mBAAmB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC9D,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,gBAAgB,EAAE,KAAK,CAAC,SAAS,WAAW,SAAS,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAGzE,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,WAAW;AAAA,EAChE,uBAAuB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EAC/D,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,WAAW;AAAA,EAChE,uBAAuB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAG9D,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG1C,wBAAwB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5C,4BAA4B,EAAE,OAAO,EAAE,SAAS;AAAA,EAChD,2BAA2B,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,4BAA4B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGhD,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG3C,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGnC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,iBAAiB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC5D,+BAA+B,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA;AAAA,EAGzE,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAGvC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,aAAa;AAAA;AAAA,EAG5D,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9C,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGzC,oBAAoB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC9C,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG1C,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,sBAAsB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG3C,2BAA2B,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,+BAA+B,EAAE,OAAO,EAAE,SAAS;AAAA,EACnD,8BAA8B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACxD,+BAA+B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGnD,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAChD,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG3C,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA,EAGhD,aAAa,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACvD,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,YAAY;AAAA;AAAA,EAG3D,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,WAAW;AAAA,EACvD,oBAAoB,EAAE,OAAO,EAAE,SAAS;AAAA,EACxC,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,oBAAoB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC/D,2BAA2B,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,4BAA4B,EAAE,OAAO,EAAE,SAAS;AAAA,EAChD,yBAAyB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAG7C,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC3D,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,wBAAwB;AAAA,EACvE,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,UAAU;AAAA;AAAA,EAG9D,uBAAuB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACjE,oBAAoB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA;AAAA,EAG/D,oBAAoB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC9D,4BAA4B,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAK;AAAA,EACtE,4BAA4B,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA;AAAA,EAGlE,sBAAsB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAChE,wBAAwB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA,EAChE,yBAAyB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACnE,sBAAsB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA;AAAA,EAGhE,uBAAuB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACjE,yBAAyB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACnE,yBAAyB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA;AAAA,EAGnE,6BAA6B,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EACvE,yBAAyB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA;AAAA,EAGpE,kBAAkB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC7D,mBAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,iBAAiB;AAAA,EAClE,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG9C,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC3D,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,YAAY;AAAA,EAC3D,wBAAwB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG5C,kBAAkB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC7D,eAAe,EAAE,KAAK,CAAC,eAAe,aAAa,CAAC,EAAE,SAAS,EAAE,QAAQ,aAAa;AAAA,EACtF,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9C,+BAA+B,EAAE,OAAO,EAAE,SAAS;AAAA,EACnD,0BAA0B,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAG9C,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC3D,iBAAiB,EAAE,KAAK,CAAC,cAAc,SAAS,aAAa,CAAC,EAAE,SAAS,EAAE,QAAQ,YAAY;AAAA,EAC/F,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGvC,gBAAgB,EAAE,KAAK,CAAC,YAAY,cAAc,YAAY,CAAC,EAAE,SAAS,EAAE,QAAQ,YAAY;AAAA;AAAA,EAGhG,oBAAoB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC/D,iBAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,UAAU;AAAA;AAAA,EAGzD,iBAAiB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC5D,+BAA+B,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA;AAAA;AAAA,EAIrE,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAGnC,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC3D,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3C,qBAAqB,EAAE,OAAO,EAAE,SAAS;AAAA,EACzC,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,yBAAyB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC7C,kBAAkB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC5D,oBAAoB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA;AAAA,EAG/D,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,uBAAuB;AAAA,EAChE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,OAAO;AAAA,EACjD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EAChD,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,OAAO;AAAA;AAAA,EAGrD,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EAC7C,0BAA0B,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EAC1D,sBAAsB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,4CAA4C;AAAA;AAAA,EAGhG,eAAe,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC1D,4BAA4B,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,GAAG;AAAA;AAAA,EAGpE,oBAAoB,EAAE,KAAK,CAAC,UAAU,eAAe,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,QAAQ;AAAA,EAC1F,iBAAiB,EAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,EAAE,OAAO,OAAO,EAAE,SAAS;AAAA,EACjD,yBAAyB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAClE,sBAAsB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAG7D,cAAc,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EACzD,gBAAgB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAC3D,kBAAkB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EACxD,uBAAuB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EAClE,qBAAqB,EAAE,OAAO,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;AAAA,EAC3D,yBAAyB,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA,EACpE,0BAA0B,EAAE,OAAO,QAAQ,EAAE,SAAS,EAAE,QAAQ,KAAK;AAAA;AAAA,EAGrE,uBAAuB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAC3C,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA;AAAA,EAGvC,MAAM,EAAE,OAAO,OAAO,EAAE,QAAQ,IAAI;AAAA,EACpC,UAAU,EAAE,KAAK,CAAC,eAAe,cAAc,MAAM,CAAC,EAAE,QAAQ,aAAa;AAC/E,CAAC;AAKD,IAAI,OAAmB;AAOvB,IAAI,uBAA6C;AAE1C,SAAS,UAAU,QAAwD;AAChF,QAAM,SAAS,EAAE,GAAG,QAAQ,KAAK,GAAG,OAAO;AAC3C,QAAM,SAAS,UAAU,UAAU,MAAM;AAEzC,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,SAAS,OAAO,MAAM,OAAO;AAAA,MACjC,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO;AAAA,IAC1C;AACA,UAAM,IAAI;AAAA,MACR;AAAA,IAAoD,OAAO,KAAK,MAAM,CAAC;AAAA,IACzE;AAAA,EACF;AAEA,SAAO,OAAO;AAGd,yBAAuB,OAAO,yBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAEtG,SAAO;AACT;AAMA,eAAsB,QAAuB;AAC3C,MAAI,qBAAsB,OAAM;AAClC;AAWA,SAAS,qBAA0B;AACjC,QAAM,SAAS,UAAU,UAAU,QAAQ,GAAG;AAE9C,MAAI,CAAC,OAAO,SAAS;AAEnB,QAAI,QAAQ,IAAI,sBAAsB;AACpC,YAAM,SAAS,OAAO,MAAM,OAAO;AAAA,QACjC,CAAC,MAAM,GAAG,EAAE,KAAK,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO;AAAA,MAC1C;AACA,YAAM,IAAI;AAAA,QACR;AAAA,IAAqC,OAAO,KAAK,MAAM,CAAC;AAAA,MAC1D;AAAA,IACF;AAIA,UAAM,gBAAgB,UAAU,OAAO;AAAA,MACrC,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,IACvC,CAAC;AACD,UAAM,gBAAgB,cAAc,UAAU,QAAQ,GAAG;AACzD,WAAQ,cAAc,UAAU,cAAc,OAAO,CAAC;AACtD,WAAO;AAAA,EACT;AAEA,SAAO,OAAO;AACd,SAAO;AACT;AAQO,IAAM,MAAW,IAAI,MAAM,CAAC,GAAU;AAAA,EAC3C,IAAI,SAAS,MAAc;AACzB,QAAI,CAAC,MAAM;AACT,yBAAmB;AAAA,IACrB;AACA,WAAQ,KAAa,IAAI;AAAA,EAC3B;AAAA,EACA,IAAI,SAAS,MAAc;AACzB,QAAI,CAAC,MAAM;AACT,yBAAmB;AAAA,IACrB;AACA,WAAO,QAAS;AAAA,EAClB;AAAA,EACA,UAAU;AACR,QAAI,CAAC,MAAM;AACT,yBAAmB;AAAA,IACrB;AACA,WAAO,QAAQ,QAAQ,IAAW;AAAA,EACpC;AAAA,EACA,yBAAyB,SAAS,MAAM;AACtC,QAAI,CAAC,MAAM;AACT,yBAAmB;AAAA,IACrB;AACA,WAAO,OAAO,yBAAyB,MAAa,IAAI;AAAA,EAC1D;AACF,CAAC;","names":[]}

package/dist/cli.js

@@ -15,10 +15,13 @@ switch (command) {
   case "status":
     import("./commands/status.js").then((m) => m.default());
     break;
+  case "pair":
+    import("./pair-JDFTERIK.js").then((m) => m.showPairingInfo());
+    break;
   case "version":
   case "--version":
   case "-v":
-    console.log("opensentinel v2.0.0");
+    console.log("opensentinel v3.0.0");
     break;
   case "help":
   case "--help":
@@ -34,6 +37,7 @@ Commands:
   setup     Interactive setup wizard
   stop      Stop the system service
   status    Show service status
+  pair      Show device pairing info
   version   Show version
   help      Show this help
 

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env bun\n\n/**\n * OpenSentinel CLI\n *\n * Usage:\n *   opensentinel              Start the server (default)\n *   opensentinel start        Start the server\n *   opensentinel setup        Interactive setup wizard\n *   opensentinel stop         Stop the system service\n *   opensentinel status       Show service status\n *   opensentinel version      Show version\n *   opensentinel help         Show this help\n */\n\nconst command = process.argv[2];\n\nswitch (command) {\n  case \"setup\":\n    import(\"./commands/setup\").then((m) => m.default());\n    break;\n\n  case \"start\":\n    import(\"./commands/start\").then((m) => m.default());\n    break;\n\n  case \"stop\":\n    import(\"./commands/stop\").then((m) => m.default());\n    break;\n\n  case \"status\":\n    import(\"./commands/status\").then((m) => m.default());\n    break;\n\n  case \"version\":\n  case \"--version\":\n  case \"-v\":\n    console.log(\"opensentinel v2.0.0\");\n    break;\n\n  case \"help\":\n  case \"--help\":\n  case \"-h\":\n    console.log(`\nOpenSentinel - Your Personal AI Assistant\n\nUsage:\n  opensentinel [command]\n\nCommands:\n  start     Start the server (default)\n  setup     Interactive setup wizard\n  stop      Stop the system service\n  status    Show service status\n  version   Show version\n  help      Show this help\n\nExamples:\n  opensentinel                  Start with default config\n  opensentinel setup            Run the setup wizard\n  opensentinel status           Check service health\n\nDocumentation: https://docs.opensentinel.ai\n`);\n    break;\n\n  default:\n    // Default: start the server (backward compatibility)\n    import(\"./commands/start\").then((m) => m.default());\n    break;\n}\n"],"mappings":";;;AAeA,IAAM,UAAU,QAAQ,KAAK,CAAC;AAE9B,QAAQ,SAAS;AAAA,EACf,KAAK;AACH,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AAAA,EAEF,KAAK;AACH,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AAAA,EAEF,KAAK;AACH,WAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AACjD;AAAA,EAEF,KAAK;AACH,WAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AACnD;AAAA,EAEF,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACH,YAAQ,IAAI,qBAAqB;AACjC;AAAA,EAEF,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACH,YAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAoBf;AACG;AAAA,EAEF;AAEE,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AACJ;","names":[]}
+{"version":3,"sources":["../src/cli.ts"],"sourcesContent":["#!/usr/bin/env bun\n\n/**\n * OpenSentinel CLI\n *\n * Usage:\n *   opensentinel              Start the server (default)\n *   opensentinel start        Start the server\n *   opensentinel setup        Interactive setup wizard\n *   opensentinel stop         Stop the system service\n *   opensentinel status       Show service status\n *   opensentinel version      Show version\n *   opensentinel help         Show this help\n */\n\nconst command = process.argv[2];\n\nswitch (command) {\n  case \"setup\":\n    import(\"./commands/setup\").then((m) => m.default());\n    break;\n\n  case \"start\":\n    import(\"./commands/start\").then((m) => m.default());\n    break;\n\n  case \"stop\":\n    import(\"./commands/stop\").then((m) => m.default());\n    break;\n\n  case \"status\":\n    import(\"./commands/status\").then((m) => m.default());\n    break;\n\n  case \"pair\":\n    import(\"./commands/pair\").then((m) => m.showPairingInfo());\n    break;\n\n  case \"version\":\n  case \"--version\":\n  case \"-v\":\n    console.log(\"opensentinel v3.0.0\");\n    break;\n\n  case \"help\":\n  case \"--help\":\n  case \"-h\":\n    console.log(`\nOpenSentinel - Your Personal AI Assistant\n\nUsage:\n  opensentinel [command]\n\nCommands:\n  start     Start the server (default)\n  setup     Interactive setup wizard\n  stop      Stop the system service\n  status    Show service status\n  pair      Show device pairing info\n  version   Show version\n  help      Show this help\n\nExamples:\n  opensentinel                  Start with default config\n  opensentinel setup            Run the setup wizard\n  opensentinel status           Check service health\n\nDocumentation: https://docs.opensentinel.ai\n`);\n    break;\n\n  default:\n    // Default: start the server (backward compatibility)\n    import(\"./commands/start\").then((m) => m.default());\n    break;\n}\n"],"mappings":";;;AAeA,IAAM,UAAU,QAAQ,KAAK,CAAC;AAE9B,QAAQ,SAAS;AAAA,EACf,KAAK;AACH,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AAAA,EAEF,KAAK;AACH,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AAAA,EAEF,KAAK;AACH,WAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AACjD;AAAA,EAEF,KAAK;AACH,WAAO,sBAAmB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AACnD;AAAA,EAEF,KAAK;AACH,WAAO,oBAAiB,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;AACzD;AAAA,EAEF,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACH,YAAQ,IAAI,qBAAqB;AACjC;AAAA,EAEF,KAAK;AAAA,EACL,KAAK;AAAA,EACL,KAAK;AACH,YAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAqBf;AACG;AAAA,EAEF;AAEE,WAAO,qBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC;AAClD;AACJ;","names":[]}