patchwork-os 0.2.0-beta.0 → 0.2.0-beta.2

package/dist/fp/interpreterContext.js

@@ -1,10 +1,83 @@
 // ── VsCodeBackend ─────────────────────────────────────────────────────────────
+/**
+ * SSRF guard for automation webhooks.
+ *
+ * Default policy (`allowPrivate=false`):
+ *   - Loopback (127.0.0.0/8, ::1, localhost, *.localhost) → ALLOWED.
+ *     Automation hooks fire INTO the same machine on the common path;
+ *     the bridge itself listens on 127.0.0.1, and recipe-6 webhooks
+ *     target `http://127.0.0.1:${BRIDGE_PORT}/...`.
+ *   - Other RFC 1918 / link-local / ULA / CGNAT / 0.0.0.0/8 → BLOCKED.
+ *   - Public hosts → ALLOWED.
+ *
+ * Opt-in (`allowPrivate=true`) drops the private-range check entirely.
+ *
+ * This is a deliberate divergence from `sendHttpRequest` which blocks ALL
+ * private addresses by default (loopback included). The reasoning: a
+ * MCP-tool-driven HTTP request is potentially attacker-controlled (a
+ * compromised LLM session could craft URLs); an automation webhook URL
+ * comes from a trusted policy file that the operator wrote. Loopback is
+ * the common case there, not the exceptional one.
+ */
+function isLoopbackHost(hostname) {
+    const host = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1).toLowerCase()
+        : hostname.toLowerCase();
+    if (host === "localhost" || host.endsWith(".localhost"))
+        return true;
+    if (host === "::1")
+        return true;
+    const ipv4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4 && Number(ipv4[1]) === 127)
+        return true;
+    return false;
+}
+function isPrivateNonLoopbackHost(hostname) {
+    if (isLoopbackHost(hostname))
+        return false;
+    const host = hostname.startsWith("[") && hostname.endsWith("]")
+        ? hostname.slice(1, -1).toLowerCase()
+        : hostname.toLowerCase();
+    if (host === "0.0.0.0")
+        return true;
+    if (/^0x[0-9a-f]+$/i.test(host) || /^0[0-7]{7,}$/.test(host))
+        return true;
+    const ipv4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (ipv4) {
+        const a = Number(ipv4[1]);
+        const b = Number(ipv4[2]);
+        if (a === 10)
+            return true;
+        if (a === 172 && b >= 16 && b <= 31)
+            return true;
+        if (a === 192 && b === 168)
+            return true;
+        if (a === 169 && b === 254)
+            return true;
+        if (a === 100 && b >= 64 && b <= 127)
+            return true;
+        if (a === 0)
+            return true;
+    }
+    if (host.startsWith("fe80:"))
+        return true;
+    if (host.startsWith("fc") || host.startsWith("fd"))
+        return true;
+    if (host.startsWith("::ffff:"))
+        return isPrivateNonLoopbackHost(host.slice(7));
+    if (host.startsWith("::ffff:0:"))
+        return isPrivateNonLoopbackHost(host.slice(9));
+    return false;
+}
+const WEBHOOK_TIMEOUT_MS = 10_000;
 export class VsCodeBackend {
     orchestrator;
     logger;
-    constructor(orchestrator, logger) {
+    allowPrivateWebhooks;
+    constructor(orchestrator, logger, allowPrivateWebhooks = false) {
         this.orchestrator = orchestrator;
         this.logger = logger;
+        this.allowPrivateWebhooks = allowPrivateWebhooks;
     }
     async enqueueTask(opts) {
         const taskId = this.orchestrator.enqueue({
@@ -28,13 +101,73 @@ export class VsCodeBackend {
     notify(msg) {
         this.logger?.info(msg);
     }
+    async postWebhook(opts) {
+        let parsed;
+        try {
+            parsed = new URL(opts.url);
+        }
+        catch (e) {
+            const error = `invalid url: ${e instanceof Error ? e.message : String(e)}`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+            const error = `unsupported protocol "${parsed.protocol}"`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        if (!this.allowPrivateWebhooks &&
+            isPrivateNonLoopbackHost(parsed.hostname)) {
+            const error = `private/non-loopback host "${parsed.hostname}" blocked (use --automation-allow-private-webhooks to enable)`;
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} blocked: ${error}`);
+            return { ok: false, error };
+        }
+        const headers = { ...opts.headers };
+        const hasContentType = Object.keys(headers).some((k) => k.toLowerCase() === "content-type");
+        if (!hasContentType)
+            headers["Content-Type"] = "application/json";
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), WEBHOOK_TIMEOUT_MS);
+        try {
+            const res = await fetch(opts.url, {
+                method: opts.method,
+                headers,
+                body: JSON.stringify(opts.body),
+                signal: controller.signal,
+            });
+            clearTimeout(timer);
+            if (!res.ok) {
+                const error = `non-2xx response: ${res.status}`;
+                this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} → ${res.status}`);
+                return { ok: false, status: res.status, error };
+            }
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} → ${res.status}`);
+            return { ok: true, status: res.status };
+        }
+        catch (e) {
+            clearTimeout(timer);
+            const error = e instanceof Error
+                ? e.name === "AbortError"
+                    ? `timeout after ${WEBHOOK_TIMEOUT_MS}ms`
+                    : e.message
+                : String(e);
+            this.logger?.info(`[automation-webhook] ${opts.hookKey} ${opts.method} ${opts.url} failed: ${error}`);
+            return { ok: false, error };
+        }
+    }
 }
 export class TestBackend {
     collector = {
         enqueuedTasks: [],
         scheduledRetries: [],
         notifications: [],
+        webhookCalls: [],
     };
+    /**
+     * Optional override for the webhook result a test wants to simulate.
+     * When unset, postWebhook returns `{ ok: true, status: 200 }`.
+     */
+    webhookResponse = { ok: true, status: 200 };
     async enqueueTask(opts) {
         this.collector.enqueuedTasks.push(opts);
         return `task-${this.collector.enqueuedTasks.length}`;
@@ -47,10 +180,16 @@ export class TestBackend {
     notify(msg) {
         this.collector.notifications.push(msg);
     }
+    async postWebhook(opts) {
+        this.collector.webhookCalls.push(opts);
+        return this.webhookResponse;
+    }
     reset() {
         this.collector.enqueuedTasks = [];
         this.collector.scheduledRetries = [];
         this.collector.notifications = [];
+        this.collector.webhookCalls = [];
+        this.webhookResponse = { ok: true, status: 200 };
     }
 }
 //# sourceMappingURL=interpreterContext.js.map

package/dist/fp/interpreterContext.js.map

@@ -1 +1 @@
-{"version":3,"file":"interpreterContext.js","sourceRoot":"","sources":["../../src/fp/interpreterContext.ts"],"names":[],"mappings":"AAiDA,iFAAiF;AAEjF,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,YAAgC,EAChC,MAAwC;QADxC,iBAAY,GAAZ,YAAY,CAAoB;QAChC,WAAM,GAAN,MAAM,CAAkC;IACxD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,EAAc;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,CAAC;QACP,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;CACF;AAUD,MAAM,OAAO,WAAW;IACb,SAAS,GAAyB;QACzC,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;KAClB,CAAC;IAEF,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,GAAe;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,+CAA+C;QAC/C,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"interpreterContext.js","sourceRoot":"","sources":["../../src/fp/interpreterContext.ts"],"names":[],"mappings":"AA6GA,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,IAAI,GACR,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACxE,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,QAAgB;IAChD,IAAI,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,IAAI,GACR,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;QACrC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACxE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5B,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAC9B,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,aAAa;IAEL;IACA;IACA;IAHnB,YACmB,YAAgC,EAChC,MAAwC,EACxC,uBAAgC,KAAK;QAFrC,iBAAY,GAAZ,YAAY,CAAoB;QAChC,WAAM,GAAN,MAAM,CAAkC;QACxC,yBAAoB,GAApB,oBAAoB,CAAiB;IACrD,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,EAAc;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,CAAC;QACP,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,yBAAyB,MAAM,CAAC,QAAQ,GAAG,CAAC;YAC1D,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QACD,IACE,CAAC,IAAI,CAAC,oBAAoB;YAC1B,wBAAwB,CAAC,MAAM,CAAC,QAAQ,CAAC,EACzC,CAAC;YACD,MAAM,KAAK,GAAG,8BAA8B,MAAM,CAAC,QAAQ,+DAA+D,CAAC;YAC3H,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,aAAa,KAAK,EAAE,CACzD,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,OAAO,GAA2B,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,cAAc,CAC1C,CAAC;QACF,IAAI,CAAC,cAAc;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAElE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAClF,CAAC;gBACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;YAClD,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAClF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GACT,CAAC,YAAY,KAAK;gBAChB,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY;oBACvB,CAAC,CAAC,iBAAiB,kBAAkB,IAAI;oBACzC,CAAC,CAAC,CAAC,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChB,IAAI,CAAC,MAAM,EAAE,IAAI,CACf,wBAAwB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,YAAY,KAAK,EAAE,CACnF,CAAC;YACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAWD,MAAM,OAAO,WAAW;IACb,SAAS,GAAyB;QACzC,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF;;;OAGG;IACH,eAAe,GAAyB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAElE,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,OAAe,EAAE,GAAe;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,+CAA+C;QAC/C,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAwB;QACxC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,aAAa,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,YAAY,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnD,CAAC;CACF"}

package/dist/fp/policyParser.js

@@ -59,7 +59,13 @@ function buildPromptSource(src) {
             promptArgs: src.promptArgs,
         });
     }
-    return err("invalid_arg", "Hook must specify either `prompt` or `promptName`");
+    // Webhook-only hook (e.g. recipe-6 compaction triggers): no inline prompt,
+    // no named prompt, just a webhook fan-out. Caller is responsible for
+    // ensuring `webhook` is configured — `validatePromptSource` enforces this.
+    if (src.webhook !== undefined) {
+        return ok({ kind: "none" });
+    }
+    return err("invalid_arg", "Hook must specify either `prompt`, `promptName`, or `webhook`");
 }
 // ── WhenCondition mapping ─────────────────────────────────────────────────────
 function buildWhen(src) {
@@ -78,10 +84,31 @@ function buildWhen(src) {
         : undefined;
 }
 // ── Hook builder ──────────────────────────────────────────────────────────────
+/**
+ * Hook types that opt into webhook fan-out as of v1. Other types parse the
+ * `webhook` field successfully (per validatePromptSource) but the parser
+ * silently drops it — keeps the schema forward-compatible without enabling
+ * fan-out where it hasn't been thought through yet.
+ */
+const WEBHOOK_ENABLED_HOOK_TYPES = new Set([
+    "onPreCompact",
+    "onPostCompact",
+]);
 function buildHook(hookType, src, enabled, cooldownMs, condition, patterns, extras, model, effort, systemPrompt) {
     const promptSourceResult = buildPromptSource(src);
     if (!promptSourceResult.ok)
         return promptSourceResult;
+    // Wire `webhook` into the HookNode only for opted-in hook types. This keeps
+    // the v1 surface area focused on `onCompaction` (recipe-6 unblock) while
+    // letting the schema parse the field everywhere — adding a new hook type
+    // later is a one-line change to WEBHOOK_ENABLED_HOOK_TYPES.
+    const webhook = src.webhook && WEBHOOK_ENABLED_HOOK_TYPES.has(hookType)
+        ? {
+            url: src.webhook.url,
+            method: src.webhook.method,
+            headers: src.webhook.headers,
+        }
+        : undefined;
     const hookNode = hook({
         hookType,
         enabled,
@@ -93,6 +120,7 @@ function buildHook(hookType, src, enabled, cooldownMs, condition, patterns, extr
         effort,
         systemPrompt,
         extras,
+        webhook,
     });
     const key = cooldownKey(hookType, condition);
     // When dedupeByContent is active, the content-based dedup provides its own

package/dist/fp/policyParser.js.map

@@ -1 +1 @@
-{"version":3,"file":"policyParser.js","sourceRoot":"","sources":["../../src/fp/policyParser.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,IAAI,EAGJ,YAAY,EACZ,SAAS,EACT,aAAa,EACb,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAmB,MAAM,aAAa,CAAC;AAEvD,iFAAiF;AAEjF,SAAS,WAAW,CAAC,QAAkB,EAAE,SAAkB;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,QAAQ,SAAS,IAAI,GAAG,EAAE,CAAC;QACpC,KAAK,eAAe;YAClB,OAAO,UAAU,SAAS,IAAI,GAAG,EAAE,CAAC;QACtC,KAAK,oBAAoB;YACvB,OAAO,eAAe,SAAS,IAAI,GAAG,EAAE,CAAC;QAC3C,KAAK,sBAAsB;YACzB,OAAO,WAAW,SAAS,IAAI,GAAG,EAAE,CAAC;QACvC,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,kBAAkB;YACrB,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,IAAI,CAAC;QACd,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,wBAAwB;YAC3B,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,oBAAoB;YACvB,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,sBAAsB;YACzB,OAAO,cAAc,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,YAAY,CAAC;QACtB,KAAK,mBAAmB;YACtB,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,cAAc,SAAS,IAAI,GAAG,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,SAAS,iBAAiB,CAAC,GAAiB;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,OAAgB;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CACR,aAAa,EACb,mDAAmD,CACpD,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,GAAiB;IAClC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACnB,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS;QACpC,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC;IAClD,IAAI,CAAC,CAAC,sBAAsB,KAAK,SAAS;QACxC,KAAK,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC;IAC1D,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS;QACtC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAClC,CAAC,CAAE,KAAkC;QACrC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAChB,QAAkB,EAClB,GAAiB,EACjB,OAAgB,EAChB,UAAkB,EAClB,SAA6B,EAC7B,QAA8B,EAC9B,MAA8B,EAC9B,KAAyB,EACzB,MAAqD,EACrD,YAAgC;IAEhC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,kBAAkB,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAEtD,MAAM,QAAQ,GAAa,IAAI,CAAC;QAC9B,QAAQ;QACR,OAAO;QACP,SAAS;QACT,QAAQ;QACR,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC;QACpB,YAAY,EAAE,kBAAkB,CAAC,KAAK;QACtC,KAAK;QACL,MAAM;QACN,YAAY;QACZ,MAAM;KACP,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,QAAQ,GACZ,QAAQ,KAAK,oBAAoB;QACjC,MAAM,EAAE,IAAI,KAAK,kBAAkB;QACnC,MAAM,CAAC,eAAe,CAAC;IAEzB,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,OAAO,GAAsB,QAAQ;QACvC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEhD,uDAAuD;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;QACjE,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,KAAK,EACJ,MAA+C;aAC7C,uBAAuB,IAAI,OAAO,CACtC,CAAC;QACF,OAAO,GAAG,SAAS,CAAC,SAAS,GAAG,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAwB;IAExB,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,2BAA2B,CAAC;IACxE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC;IACpD,MAAM,qBAAqB,GACzB,0CAA0C;QAC1C,8DAA8D;QAC9D,qEAAqE,CAAC;IACxE,MAAM,mBAAmB,GACvB,MAAM,CAAC,sBAAsB,IAAI,qBAAqB,CAAC;IAEzD,iDAAiD;IACjD,SAAS,IAAI,CAAC,MAAqC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACpC,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,kBAAkB;YACxB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,sBAAsB,EAAE,CAAC,CAAC,WAIhB;YACV,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,uBAAuB,EAAE,CAAC,CAAC,uBAAuB;SACnD,CAAC;QACF,8EAA8E;QAC9E,6EAA6E;QAC7E,iDAAiD;QACjD,MAAM,YAAY,GAAG,CAAC,CAAC,WAKV,CAAC;QACd,MAAM,aAAa,GAAiB,YAAY;YAC9C,CAAC,CAAE;gBACC,GAAG,CAAC;gBACJ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,EAAE,YAAY,EAAE;aAC9B;YAC/B,CAAC,CAAE,CAA6B,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CACtB,oBAAoB,EACpB,aAAa,EACb,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,MAAM,EACN,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CACtB,sBAAsB,EACtB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,aAAa;IACb,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,EACZ,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,QAAQ,EACV,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,QAAQ,EACV,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,yDAAyD;IACzD,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,wEAAwE;QACxE,MAAM,YAAY,GAChB,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAClD,CAAC,CAAC;gBACE,GAAG,CAAC;gBACJ,MAAM,EACJ,sKAAsK;aACzK;YACH,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,YAAY,EACZ,IAAI,EACJ,CAAC,CAAC,UAAU,IAAI,MAAM,EACtB,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CACtB,sBAAsB,EACtB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,IAAI,MAAM,EACtB,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,MAAM,EACN,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,sBAAsB,EAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CACtB,wBAAwB,EACxB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CACtB,kBAAkB,EAClB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CACtB,oBAAoB,EACpB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CACtB,qBAAqB,EACrB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CACtB,mBAAmB,EACnB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,+EAA+E;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC"}
+{"version":3,"file":"policyParser.js","sourceRoot":"","sources":["../../src/fp/policyParser.ts"],"names":[],"mappings":"AAOA,OAAO,EAKL,IAAI,EAIJ,YAAY,EACZ,SAAS,EACT,aAAa,EACb,SAAS,GACV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAmB,MAAM,aAAa,CAAC;AAEvD,iFAAiF;AAEjF,SAAS,WAAW,CAAC,QAAkB,EAAE,SAAkB;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,QAAQ,SAAS,IAAI,GAAG,EAAE,CAAC;QACpC,KAAK,eAAe;YAClB,OAAO,UAAU,SAAS,IAAI,GAAG,EAAE,CAAC;QACtC,KAAK,oBAAoB;YACvB,OAAO,eAAe,SAAS,IAAI,GAAG,EAAE,CAAC;QAC3C,KAAK,sBAAsB;YACzB,OAAO,WAAW,SAAS,IAAI,GAAG,EAAE,CAAC;QACvC,KAAK,aAAa;YAChB,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,kBAAkB;YACrB,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,IAAI,CAAC;QACd,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,wBAAwB;YAC3B,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,oBAAoB;YACvB,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,cAAc;YACjB,OAAO,YAAY,CAAC;QACtB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,sBAAsB;YACzB,OAAO,cAAc,CAAC;QACxB,KAAK,qBAAqB;YACxB,OAAO,YAAY,CAAC;QACtB,KAAK,mBAAmB;YACtB,OAAO,UAAU,CAAC;QACpB,KAAK,cAAc;YACjB,OAAO,cAAc,SAAS,IAAI,GAAG,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,SAAS,iBAAiB,CAAC,GAAiB;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;YACR,IAAI,EAAE,OAAgB;YACtB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,2EAA2E;IAC3E,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CACR,aAAa,EACb,+DAA+D,CAChE,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,SAAS,CAAC,GAAiB;IAClC,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACnB,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,CAAC,CAAC,kBAAkB,KAAK,SAAS;QACpC,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC;IAClD,IAAI,CAAC,CAAC,sBAAsB,KAAK,SAAS;QACxC,KAAK,CAAC,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,CAAC;IAC1D,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS;QACtC,KAAK,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB,CAAC;IACtD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAClC,CAAC,CAAE,KAAkC;QACrC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAW;IACnD,cAAc;IACd,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,SAAS,CAChB,QAAkB,EAClB,GAAiB,EACjB,OAAgB,EAChB,UAAkB,EAClB,SAA6B,EAC7B,QAA8B,EAC9B,MAA8B,EAC9B,KAAyB,EACzB,MAAqD,EACrD,YAAgC;IAEhC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,kBAAkB,CAAC,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAEtD,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,OAAO,GACX,GAAG,CAAC,OAAO,IAAI,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC;QACrD,CAAC,CAAC;YACE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG;YACpB,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;YAC1B,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;SAC7B;QACH,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,QAAQ,GAAa,IAAI,CAAC;QAC9B,QAAQ;QACR,OAAO;QACP,SAAS;QACT,QAAQ;QACR,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC;QACpB,YAAY,EAAE,kBAAkB,CAAC,KAAK;QACtC,KAAK;QACL,MAAM;QACN,YAAY;QACZ,MAAM;QACN,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE7C,2EAA2E;IAC3E,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,QAAQ,GACZ,QAAQ,KAAK,oBAAoB;QACjC,MAAM,EAAE,IAAI,KAAK,kBAAkB;QACnC,MAAM,CAAC,eAAe,CAAC;IAEzB,uEAAuE;IACvE,2EAA2E;IAC3E,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACnD,IAAI,OAAO,GAAsB,QAAQ;QACvC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IAEhD,uDAAuD;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,CAAC;QACjE,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAC5B,KAAK,EACJ,MAA+C;aAC7C,uBAAuB,IAAI,OAAO,CACtC,CAAC;QACF,OAAO,GAAG,SAAS,CAAC,SAAS,GAAG,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,MAAwB;IAExB,MAAM,QAAQ,GAAwB,EAAE,CAAC;IAEzC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,2BAA2B,CAAC;IACxE,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,KAAK,CAAC;IACpD,MAAM,qBAAqB,GACzB,0CAA0C;QAC1C,8DAA8D;QAC9D,qEAAqE,CAAC;IACxE,MAAM,mBAAmB,GACvB,MAAM,CAAC,sBAAsB,IAAI,qBAAqB,CAAC;IAEzD,iDAAiD;IACjD,SAAS,IAAI,CAAC,MAAqC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACpC,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,kBAAkB;YACxB,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,sBAAsB,EAAE,CAAC,CAAC,WAIhB;YACV,eAAe,EAAE,CAAC,CAAC,eAAe;YAClC,uBAAuB,EAAE,CAAC,CAAC,uBAAuB;SACnD,CAAC;QACF,8EAA8E;QAC9E,6EAA6E;QAC7E,iDAAiD;QACjD,MAAM,YAAY,GAAG,CAAC,CAAC,WAKV,CAAC;QACd,MAAM,aAAa,GAAiB,YAAY;YAC9C,CAAC,CAAE;gBACC,GAAG,CAAC;gBACJ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,sBAAsB,EAAE,YAAY,EAAE;aAC9B;YAC/B,CAAC,CAAE,CAA6B,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CACtB,oBAAoB,EACpB,aAAa,EACb,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,MAAM,EACN,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CACtB,sBAAsB,EACtB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,aAAa;IACb,IAAI,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,SAAS,CACtB,YAAY,EACZ,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,QAAQ,EACV,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,QAAQ,EACV,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,yDAAyD;IACzD,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,wEAAwE;QACxE,MAAM,YAAY,GAChB,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;YAClD,CAAC,CAAC;gBACE,GAAG,CAAC;gBACJ,MAAM,EACJ,sKAAsK;aACzK;YACH,CAAC,CAAC,CAAC,CAAC;QACR,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,YAAY,EACZ,IAAI,EACJ,CAAC,CAAC,UAAU,IAAI,MAAM,EACtB,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;QACtC,MAAM,MAAM,GAAG,SAAS,CACtB,sBAAsB,EACtB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,IAAI,MAAM,EACtB,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,eAAe;IACf,IAAI,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CACtB,cAAc,EACd,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,SAAS,EACT,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAe;YACzB,IAAI,EAAE,SAAS;YACf,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC;QACF,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,MAAM,EACN,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,sBAAsB,EAAE,OAAO,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,sBAAsB,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CACtB,wBAAwB,EACxB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,SAAS,CACtB,aAAa,EACb,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,YAAY;IACZ,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CACtB,WAAW,EACX,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,IAAI,MAAM,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAClC,MAAM,MAAM,GAAG,SAAS,CACtB,kBAAkB,EAClB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,kBAAkB,EAAE,OAAO,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CACtB,oBAAoB,EACpB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,gBAAgB;IAChB,IAAI,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CACtB,eAAe,EACf,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,sBAAsB;IACtB,IAAI,MAAM,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC;QACrC,MAAM,MAAM,GAAG,SAAS,CACtB,qBAAqB,EACrB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,oBAAoB;IACpB,IAAI,MAAM,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACnC,MAAM,MAAM,GAAG,SAAS,CACtB,mBAAmB,EACnB,CAAC,EACD,IAAI,EACJ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,SAAS,EACX,SAAS,EACT,SAAS,EACT,CAAC,CAAC,KAAK,IAAI,YAAY,EACvB,CAAC,CAAC,MAAM,IAAI,aAAa,EACzB,mBAAmB,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,CAAC;IACf,CAAC;IAED,4DAA4D;IAC5D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,+EAA+E;QAC/E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC"}

package/dist/httpErrorResponse.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Centralized HTTP error responder for the bridge's plain-`http` route
+ * handlers.
+ *
+ * Replaces the ~96 inline `res.end(JSON.stringify({error: err.message}))`
+ * blocks scattered across `server.ts`, `connectorRoutes.ts`,
+ * `recipeRoutes.ts`, `inboxRoutes.ts`, and `oauthRoutes.ts` — every one of
+ * which leaked the underlying error message (and sometimes a stack frame
+ * via `Error.toString`) to the network. CodeQL flagged each as
+ * `js/stack-trace-exposure` (89 open alerts at the time of writing).
+ *
+ * Contract:
+ *   - Always returns a generic `{error: "Internal server error"}` body, never
+ *     the underlying error.message — even for non-Error throws.
+ *   - Logs the full detail (stack preferred, message fallback, String(err)
+ *     last) to stderr with an optional context label so post-incident
+ *     debugging is unaffected.
+ *   - Idempotent on `headersSent` / `writableEnded` so callers nested inside
+ *     other try/catch blocks can safely call this without re-throwing.
+ *
+ * Note: the dashboard's Next.js route handlers (`dashboard/src/app/api/**`)
+ * are a separate runtime — they use `NextResponse.json(...)` and have their
+ * own (smaller) leak surface; this helper is bridge-side only.
+ */
+import type { ServerResponse } from "node:http";
+/**
+ * Write a generic 500 response and log the underlying error detail
+ * server-side.
+ *
+ * @param res     The Node http response to write to.
+ * @param err     The thrown value caught by the route handler.
+ * @param context Optional short tag identifying the route ("recipes/lint",
+ *                "connectors/jira/connect", etc.). Surfaces in the server
+ *                log only — never sent to the client.
+ */
+export declare function respond500(res: ServerResponse, err: unknown, context?: string): void;

package/dist/httpErrorResponse.js

@@ -0,0 +1,46 @@
+/**
+ * Centralized HTTP error responder for the bridge's plain-`http` route
+ * handlers.
+ *
+ * Replaces the ~96 inline `res.end(JSON.stringify({error: err.message}))`
+ * blocks scattered across `server.ts`, `connectorRoutes.ts`,
+ * `recipeRoutes.ts`, `inboxRoutes.ts`, and `oauthRoutes.ts` — every one of
+ * which leaked the underlying error message (and sometimes a stack frame
+ * via `Error.toString`) to the network. CodeQL flagged each as
+ * `js/stack-trace-exposure` (89 open alerts at the time of writing).
+ *
+ * Contract:
+ *   - Always returns a generic `{error: "Internal server error"}` body, never
+ *     the underlying error.message — even for non-Error throws.
+ *   - Logs the full detail (stack preferred, message fallback, String(err)
+ *     last) to stderr with an optional context label so post-incident
+ *     debugging is unaffected.
+ *   - Idempotent on `headersSent` / `writableEnded` so callers nested inside
+ *     other try/catch blocks can safely call this without re-throwing.
+ *
+ * Note: the dashboard's Next.js route handlers (`dashboard/src/app/api/**`)
+ * are a separate runtime — they use `NextResponse.json(...)` and have their
+ * own (smaller) leak surface; this helper is bridge-side only.
+ */
+const GENERIC_BODY = JSON.stringify({ error: "Internal server error" });
+/**
+ * Write a generic 500 response and log the underlying error detail
+ * server-side.
+ *
+ * @param res     The Node http response to write to.
+ * @param err     The thrown value caught by the route handler.
+ * @param context Optional short tag identifying the route ("recipes/lint",
+ *                "connectors/jira/connect", etc.). Surfaces in the server
+ *                log only — never sent to the client.
+ */
+export function respond500(res, err, context) {
+    const detail = err instanceof Error ? (err.stack ?? err.message) : String(err);
+    console.error(`[http-500]${context ? ` ${context}` : ""}: ${detail}`);
+    if (!res.headersSent) {
+        res.writeHead(500, { "Content-Type": "application/json" });
+    }
+    if (!res.writableEnded) {
+        res.end(GENERIC_BODY);
+    }
+}
+//# sourceMappingURL=httpErrorResponse.js.map

package/dist/httpErrorResponse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpErrorResponse.js","sourceRoot":"","sources":["../src/httpErrorResponse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,GAAmB,EACnB,GAAY,EACZ,OAAgB;IAEhB,MAAM,MAAM,GACV,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClE,OAAO,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/inboxRoutes.js

@@ -16,6 +16,24 @@
 import { existsSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { respond500 } from "./httpErrorResponse.js";
+/**
+ * Filename guard shared by every inbox sub-route. Rejects directory
+ * separators and `..` segments so the request can never escape the inbox
+ * directory. Returns the joined absolute path on success, or null with the
+ * caller responsible for emitting a 400.
+ */
+function safeInboxPath(filename) {
+    if (!filename)
+        return null;
+    if (filename.includes("/") || filename.includes("\\"))
+        return null;
+    if (filename === "." || filename === "..")
+        return null;
+    if (filename.startsWith("."))
+        return null; // no dotfiles, reserves `.archive/` namespace
+    return path.join(os.homedir(), ".patchwork", "inbox", filename);
+}
 /**
  * Try to handle an `/inbox` or `/inbox/<filename>.md` route. Returns true
  * if the route was dispatched (caller should `return` from the request
@@ -61,10 +79,7 @@ export function tryHandleInboxRoute(req, res, parsedUrl) {
                 res.end(JSON.stringify({ items }));
             }
             catch (err) {
-                res.writeHead(500, { "Content-Type": "application/json" });
-                res.end(JSON.stringify({
-                    error: err instanceof Error ? err.message : String(err),
-                }));
+                respond500(res, err);
             }
         })();
         return true;
@@ -75,13 +90,12 @@ export function tryHandleInboxRoute(req, res, parsedUrl) {
             try {
                 const { readFile, stat } = await import("node:fs/promises");
                 const filename = decodeURIComponent(inboxFileMatch[1] ?? "");
-                // Prevent path traversal — filename must not contain directory separators
-                if (filename.includes("/") || filename.includes("\\")) {
+                const filePath = safeInboxPath(filename);
+                if (!filePath) {
                     res.writeHead(400, { "Content-Type": "application/json" });
                     res.end(JSON.stringify({ error: "Invalid filename" }));
                     return;
                 }
-                const filePath = path.join(os.homedir(), ".patchwork", "inbox", filename);
                 const [content, stats] = await Promise.all([
                     readFile(filePath, "utf8"),
                     stat(filePath),
@@ -100,10 +114,75 @@ export function tryHandleInboxRoute(req, res, parsedUrl) {
                     res.end(JSON.stringify({ error: "Not found" }));
                 }
                 else {
-                    res.writeHead(500, { "Content-Type": "application/json" });
-                    res.end(JSON.stringify({
-                        error: err instanceof Error ? err.message : String(err),
-                    }));
+                    respond500(res, err);
+                }
+            }
+        })();
+        return true;
+    }
+    if (inboxFileMatch && req.method === "DELETE") {
+        void (async () => {
+            try {
+                const { unlink } = await import("node:fs/promises");
+                const filename = decodeURIComponent(inboxFileMatch[1] ?? "");
+                const filePath = safeInboxPath(filename);
+                if (!filePath) {
+                    res.writeHead(400, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ ok: false, error: "Invalid filename" }));
+                    return;
+                }
+                await unlink(filePath);
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true, path: filePath }));
+            }
+            catch (err) {
+                const code = err.code;
+                if (code === "ENOENT") {
+                    res.writeHead(404, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ ok: false, error: "Not found" }));
+                }
+                else {
+                    respond500(res, err);
+                }
+            }
+        })();
+        return true;
+    }
+    // POST /inbox/<filename>.md/archive — move to ~/.patchwork/inbox/.archive/
+    const inboxArchiveMatch = parsedUrl.pathname?.match(/^\/inbox\/([^/]+\.md)\/archive$/);
+    if (inboxArchiveMatch && req.method === "POST") {
+        void (async () => {
+            try {
+                const { mkdir, rename } = await import("node:fs/promises");
+                const filename = decodeURIComponent(inboxArchiveMatch[1] ?? "");
+                const filePath = safeInboxPath(filename);
+                if (!filePath) {
+                    res.writeHead(400, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ ok: false, error: "Invalid filename" }));
+                    return;
+                }
+                const archiveDir = path.join(os.homedir(), ".patchwork", "inbox", ".archive");
+                await mkdir(archiveDir, { recursive: true });
+                let dest = path.join(archiveDir, filename);
+                // Suffix with timestamp on collision so historical archives survive.
+                if (existsSync(dest)) {
+                    const ext = path.extname(filename);
+                    const stem = filename.slice(0, filename.length - ext.length);
+                    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+                    dest = path.join(archiveDir, `${stem}.${stamp}${ext}`);
+                }
+                await rename(filePath, dest);
+                res.writeHead(200, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ ok: true, path: dest }));
+            }
+            catch (err) {
+                const code = err.code;
+                if (code === "ENOENT") {
+                    res.writeHead(404, { "Content-Type": "application/json" });
+                    res.end(JSON.stringify({ ok: false, error: "Not found" }));
+                }
+                else {
+                    respond500(res, err);
                 }
             }
         })();

package/dist/inboxRoutes.js.map

@@ -1 +1 @@
-{"version":3,"file":"inboxRoutes.js","sourceRoot":"","sources":["../src/inboxRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,GAAmB,EACnB,SAAc;IAEd,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5D,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACvC,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClB,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAC3C,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;wBAC1B,IAAI,CAAC,QAAQ,CAAC;qBACf,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,OAAO;yBACrB,KAAK,CAAC,IAAI,CAAC;yBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;yBACjC,IAAI,CAAC,IAAI,CAAC;yBACV,IAAI,EAAE,CAAC;oBACV,iEAAiE;oBACjE,4DAA4D;oBAC5D,iEAAiE;oBACjE,2DAA2D;oBAC3D,iEAAiE;oBACjE,iEAAiE;oBACjE,OAAO;wBACL,IAAI;wBACJ,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;wBACrC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAChC,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;gBACF,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CACtE,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3E,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,0EAA0E;gBAC1E,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,EAAE,CAAC,OAAO,EAAE,EACZ,YAAY,EACZ,OAAO,EACP,QAAQ,CACT,CAAC;gBACF,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;oBAC1B,IAAI,CAAC,QAAQ,CAAC;iBACf,CAAC,CAAC;gBACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;iBACtC,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACxD,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"inboxRoutes.js","sourceRoot":"","sources":["../src/inboxRoutes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD;;;;;GAKG;AACH,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,8CAA8C;IACzF,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,GAAmB,EACnB,SAAc;IAEd,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC5D,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;gBAChE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;oBACvC,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACnD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClB,CAAC;gBACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;oBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAC3C,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;wBAC1B,IAAI,CAAC,QAAQ,CAAC;qBACf,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,OAAO;yBACrB,KAAK,CAAC,IAAI,CAAC;yBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;yBACjC,IAAI,CAAC,IAAI,CAAC;yBACV,IAAI,EAAE,CAAC;oBACV,iEAAiE;oBACjE,4DAA4D;oBAC5D,iEAAiE;oBACjE,2DAA2D;oBAC3D,iEAAiE;oBACjE,iEAAiE;oBACjE,OAAO;wBACL,IAAI;wBACJ,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;wBACrC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBAChC,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;gBACF,KAAK,CAAC,IAAI,CACR,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CACtE,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3E,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBACvD,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;oBACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;oBAC1B,IAAI,CAAC,QAAQ,CAAC;iBACf,CAAC,CAAC;gBACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;iBACtC,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAClD,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACpD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,CACjD,iCAAiC,CAClC,CAAC;IACF,IAAI,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/C,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAC3D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;oBAClE,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAC1B,EAAE,CAAC,OAAO,EAAE,EACZ,YAAY,EACZ,OAAO,EACP,UAAU,CACX,CAAC;gBACF,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7C,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC3C,qEAAqE;gBACrE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC7D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC7D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC7D,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/index.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export { BRIDGE_BLOCK_END, BRIDGE_BLOCK_RE, bridgeBlockStartMarker, extractClaudeMdBlockVersion, patchClaudeMdImport, } from "./claudeMdPatch.js";
+export { BRIDGE_BLOCK_END, bridgeBlockStartMarker, extractClaudeMdBlockVersion, patchClaudeMdImport, replaceAllBridgeBlocks, } from "./claudeMdPatch.js";

package/dist/index.js

@@ -63,7 +63,7 @@ const OPEN_VSX_NAME = "claude-ide-bridge-extension";
 // CLAUDE.md versioned-block patching moved to ./claudeMdPatch.ts so tests
 // can import the helpers without triggering the top-level CLI side effects
 // at the bottom of this file. Re-exported here for back-compat.
-export { BRIDGE_BLOCK_END, BRIDGE_BLOCK_RE, bridgeBlockStartMarker, extractClaudeMdBlockVersion, patchClaudeMdImport, } from "./claudeMdPatch.js";
+export { BRIDGE_BLOCK_END, bridgeBlockStartMarker, extractClaudeMdBlockVersion, patchClaudeMdImport, replaceAllBridgeBlocks, } from "./claudeMdPatch.js";
 import { extractClaudeMdBlockVersion, patchClaudeMdImport, } from "./claudeMdPatch.js";
 /**
  * Downloads the latest VSIX from Open VSX Registry to a temp file.
@@ -368,7 +368,8 @@ if (process.argv[2] === "install") {
     await runInstall(process.argv.slice(3));
     process.exit(0);
 }
-// Handle marketplace subcommand — browse and install community skills
+// Handle marketplace subcommand — DEPRECATED, prints migration message.
+// See issue #279 and src/commands/marketplace.ts for the rationale.
 if (process.argv[2] === "marketplace") {
     const { runMarketplace } = await import("./commands/marketplace.js");
     await runMarketplace(process.argv.slice(3));