shadok-ai 0.9.5 → 0.9.7

package/README.md

@@ -227,6 +227,20 @@ know before opening it up:
 - `SHADOK_HOST=0.0.0.0` **requires a password** (`--password`, or
   `SHADOK_GUI_PASSWORD`); without one the server refuses to start rather than
   hand the network a shell.
+- **That password is the `admin` account.** With it set, the login page gains a
+  user field — leave it blank to sign in as the admin. An admin can then invite
+  other people from the **Users** panel: each invitation is a single-use link,
+  valid 7 days, on which the invitee chooses their own password, so the admin
+  never learns it — and redeeming the link signs them in straight away. The ⋯
+  menu names who you are and lets you sign out. Two roles: `admin` manages
+  accounts, `member` does everything
+  else you do. Accounts belong to **one instance** (one launch directory), like
+  its channels and its scheduled prompts. With no password there are no
+  accounts and no login screen — nothing changes for a machine you use alone.
+- Once people are named, **a prompt carries its sender**: the agent sees who
+  asked, and the other browsers show the name above the message instead of
+  "pilot (elsewhere)". The server takes that name from the session, never from
+  what the browser claims.
 - **In Docker**, `SHADOK_HOST=0.0.0.0` is the only value that works (the
   container's own loopback isn't reachable from the host). Publish the port on
   the host's loopback: `-p 127.0.0.1:3789:3789`. Plain `-p 3789:3789` publishes

package/dist/accounts.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Web accounts, PER INSTANCE (per launch directory) — the same scope as
+ * channels, crons and the instance lock.
+ *
+ * Per instance rather than global is the consistent choice: SHADOK_GUI_PASSWORD
+ * is already per process, so accounts share the scope of the door they extend.
+ * Profiles and the secret vault are the global exception, not the rule.
+ */
+export type Role = "admin" | "member";
+export interface Account {
+    name: string;
+    role: Role;
+    /** Absent until an invitation is redeemed. */
+    passwordHash?: string;
+    createdAt: number;
+    /** Present only while the invitation is outstanding. */
+    invite?: {
+        token: string;
+        expiresAt: number;
+    };
+}
+/** The account that lives in SHADOK_GUI_PASSWORD, never in the file. */
+export declare const BOOTSTRAP_ADMIN = "admin";
+export declare function loadAccounts(): Account[];
+export declare function saveAccounts(list: Account[]): void;
+/** `scrypt$<salt hex>$<derived hex>` — salted, so two identical passwords do
+ *  not produce the same hash and cannot be spotted as identical. */
+export declare function hashPassword(plain: string): string;
+export declare function verifyPassword(plain: string, hash: string): boolean;
+/**
+ * Who may change which account. Pure, so the whole policy is one testable
+ * place rather than a condition repeated at three endpoints.
+ */
+export declare function userWriteVerdict(o: {
+    actorRole: Role | null;
+    action: "create" | "delete" | "role";
+    target: string;
+    exists: boolean;
+}): {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * The key that signs sessions — per instance, drawn once, persisted.
+ *
+ * NOT derived from SHADOK_GUI_PASSWORD, and never exported into an agent's
+ * environment. The password reaches every agent's env today (measured on three
+ * production agents, 2026-08-23); signing with it would let any agent mint a
+ * cookie for any user. Untidy becomes impersonation the moment accounts exist.
+ */
+export declare function sessionSecret(): Buffer;
+/** `<user base64url>.<issuedAt>.<hmac>` — the name is encoded so a dot in it
+ *  cannot shift the fields. The ROLE is deliberately absent: it is re-read from
+ *  the account file at use time, so a demotion takes effect immediately instead
+ *  of riding in a stale cookie. */
+export declare function signSession(user: string, issuedAt: number, secret: Buffer): string;
+export declare function readSession(token: string, secret: Buffer, now: number, maxAgeMs: number): string | null;
+/** A week: long enough to hand the link over by another channel, short enough
+ *  that a forgotten one stops working. */
+export declare const INVITE_TTL_MS: number;
+export declare function newInvite(now: number): {
+    token: string;
+    expiresAt: number;
+};
+/**
+ * Whether this link may still be redeemed.
+ *
+ * Each refusal names its own reason: "expired" tells the holder to ask for a
+ * new link, "already redeemed" tells them the account is live, and "invalid" is
+ * a real mismatch. One generic error would send all three to the wrong place.
+ */
+export declare function inviteVerdict(account: Account | undefined, token: string, now: number): {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Who a prompt is attributed to.
+ *
+ * The security property of the accounts feature, in one place: for a WEB client
+ * the session decides and the frame's claim is discarded, because a browser can
+ * put anything in `from`. The Telegram bridge is a trusted bridge that knows its
+ * sender, so it keeps naming them; other origins (cli, cron) are the server's
+ * own callers and keep whatever they supplied.
+ */
+export declare function promptAuthor(origin: string | undefined, sessionName: string | undefined, claimed: string | undefined): string | undefined;

package/dist/accounts.js

@@ -0,0 +1,160 @@
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createHmac, randomBytes, scryptSync, timingSafeEqual } from "node:crypto";
+import { instanceKey } from "./paths.js";
+/** The account that lives in SHADOK_GUI_PASSWORD, never in the file. */
+export const BOOTSTRAP_ADMIN = "admin";
+function storeFile() {
+    return path.join(os.homedir(), ".shadok-ai", "users", instanceKey() + ".json");
+}
+export function loadAccounts() {
+    try {
+        const v = JSON.parse(fs.readFileSync(storeFile(), "utf8"));
+        return Array.isArray(v) ? v.filter((a) => a && typeof a.name === "string") : [];
+    }
+    catch {
+        return [];
+    }
+}
+export function saveAccounts(list) {
+    const f = storeFile();
+    fs.mkdirSync(path.dirname(f), { recursive: true });
+    fs.writeFileSync(f, JSON.stringify(list, null, 2), { mode: 0o600 });
+    fs.chmodSync(f, 0o600);
+}
+/** `scrypt$<salt hex>$<derived hex>` — salted, so two identical passwords do
+ *  not produce the same hash and cannot be spotted as identical. */
+export function hashPassword(plain) {
+    const salt = randomBytes(16);
+    const key = scryptSync(plain, salt, 64);
+    return `scrypt$${salt.toString("hex")}$${key.toString("hex")}`;
+}
+export function verifyPassword(plain, hash) {
+    const parts = String(hash ?? "").split("$");
+    if (parts.length !== 3 || parts[0] !== "scrypt")
+        return false;
+    try {
+        const salt = Buffer.from(parts[1], "hex");
+        const want = Buffer.from(parts[2], "hex");
+        if (!salt.length || !want.length)
+            return false;
+        const got = scryptSync(plain, salt, want.length);
+        return got.length === want.length && timingSafeEqual(got, want);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Who may change which account. Pure, so the whole policy is one testable
+ * place rather than a condition repeated at three endpoints.
+ */
+export function userWriteVerdict(o) {
+    if (o.actorRole !== "admin")
+        return { ok: false, error: "only an admin can manage accounts" };
+    const name = o.target.trim();
+    if (!name)
+        return { ok: false, error: "name required" };
+    if (o.action === "create") {
+        if (name === BOOTSTRAP_ADMIN)
+            return { ok: false, error: `"${BOOTSTRAP_ADMIN}" is reserved for the instance password` };
+        return o.exists ? { ok: false, error: `${name} already exists` } : { ok: true };
+    }
+    return o.exists ? { ok: true } : { ok: false, error: `no such account: ${name}` };
+}
+/**
+ * The key that signs sessions — per instance, drawn once, persisted.
+ *
+ * NOT derived from SHADOK_GUI_PASSWORD, and never exported into an agent's
+ * environment. The password reaches every agent's env today (measured on three
+ * production agents, 2026-08-23); signing with it would let any agent mint a
+ * cookie for any user. Untidy becomes impersonation the moment accounts exist.
+ */
+export function sessionSecret() {
+    const f = path.join(os.homedir(), ".shadok-ai", "users", instanceKey() + ".key");
+    try {
+        const hex = fs.readFileSync(f, "utf8").trim();
+        if (hex.length >= 32)
+            return Buffer.from(hex, "hex");
+    }
+    catch {
+        /* first run, or unreadable: draw a new one below */
+    }
+    const secret = randomBytes(32);
+    fs.mkdirSync(path.dirname(f), { recursive: true });
+    fs.writeFileSync(f, secret.toString("hex"), { mode: 0o600 });
+    fs.chmodSync(f, 0o600);
+    return secret;
+}
+/** `<user base64url>.<issuedAt>.<hmac>` — the name is encoded so a dot in it
+ *  cannot shift the fields. The ROLE is deliberately absent: it is re-read from
+ *  the account file at use time, so a demotion takes effect immediately instead
+ *  of riding in a stale cookie. */
+export function signSession(user, issuedAt, secret) {
+    const u = Buffer.from(user, "utf8").toString("base64url");
+    const body = `${u}.${issuedAt}`;
+    return `${body}.${createHmac("sha256", secret).update(body).digest("hex")}`;
+}
+export function readSession(token, secret, now, maxAgeMs) {
+    const parts = String(token ?? "").split(".");
+    if (parts.length !== 3)
+        return null;
+    const [u, at, mac] = parts;
+    const issuedAt = Number(at);
+    if (!at || !Number.isFinite(issuedAt))
+        return null;
+    const want = createHmac("sha256", secret).update(`${u}.${at}`).digest("hex");
+    if (mac.length !== want.length)
+        return null;
+    if (!timingSafeEqual(Buffer.from(mac), Buffer.from(want)))
+        return null;
+    if (now - issuedAt > maxAgeMs)
+        return null;
+    try {
+        return Buffer.from(u, "base64url").toString("utf8") || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** A week: long enough to hand the link over by another channel, short enough
+ *  that a forgotten one stops working. */
+export const INVITE_TTL_MS = 7 * 24 * 3600 * 1000;
+export function newInvite(now) {
+    return { token: randomBytes(24).toString("base64url"), expiresAt: now + INVITE_TTL_MS };
+}
+/**
+ * Whether this link may still be redeemed.
+ *
+ * Each refusal names its own reason: "expired" tells the holder to ask for a
+ * new link, "already redeemed" tells them the account is live, and "invalid" is
+ * a real mismatch. One generic error would send all three to the wrong place.
+ */
+export function inviteVerdict(account, token, now) {
+    // Redeeming DELETES the token, so a used link and a made-up one are
+    // indistinguishable by then — and keeping consumed tokens around just to tell
+    // them apart would be clutter with no payoff. Say what is true of both.
+    if (!account)
+        return { ok: false, error: "this link is no longer valid — it may already have been used. Ask for a new one" };
+    if (!account.invite)
+        return { ok: false, error: "this invitation was already redeemed — sign in instead" };
+    if (account.invite.token !== token)
+        return { ok: false, error: "invalid invitation" };
+    if (now > account.invite.expiresAt)
+        return { ok: false, error: "this invitation has expired — ask for a new link" };
+    return { ok: true };
+}
+/**
+ * Who a prompt is attributed to.
+ *
+ * The security property of the accounts feature, in one place: for a WEB client
+ * the session decides and the frame's claim is discarded, because a browser can
+ * put anything in `from`. The Telegram bridge is a trusted bridge that knows its
+ * sender, so it keeps naming them; other origins (cli, cron) are the server's
+ * own callers and keep whatever they supplied.
+ */
+export function promptAuthor(origin, sessionName, claimed) {
+    return origin === "web" ? sessionName : claimed;
+}
+//# sourceMappingURL=accounts.js.map

package/dist/accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.js","sourceRoot":"","sources":["../src/accounts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAsBzC,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AAEvC,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAe;IAC1C,MAAM,CAAC,GAAG,SAAS,EAAE,CAAC;IACtB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAKhC;IACC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IACxD,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,eAAe;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,eAAe,yCAAyC,EAAE,CAAC;QAC5F,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC/B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;mCAGmC;AACnC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,MAAc;IACxE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;IAChC,OAAO,GAAG,IAAI,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAa,EACb,MAAc,EACd,GAAW,EACX,QAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7E,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,GAAG,GAAG,QAAQ,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;0CAC0C;AAC1C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,aAAa,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,OAA4B,EAC5B,KAAa,EACb,GAAW;IAEX,oEAAoE;IACpE,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,CAAC,OAAO;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iFAAiF,EAAE,CAAC;IACjH,IAAI,CAAC,OAAO,CAAC,MAAM;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACtF,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,MAA0B,EAC1B,WAA+B,EAC/B,OAA2B;IAE3B,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AAClD,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The launch directory, encoded as a filename.
+ *
+ * Channels, crons and the instance lock each key their store on this same
+ * expression, inlined in four different files. Anything NEW that is per
+ * instance uses this one instead of adding a fifth copy — a store that keyed on
+ * a slightly different string would silently belong to another instance.
+ *
+ * The six existing sites are deliberately left alone: rewriting them would bury
+ * the change that needed this.
+ */
+export declare function instanceKey(cwd?: string): string;

package/dist/paths.js

@@ -0,0 +1,15 @@
+/**
+ * The launch directory, encoded as a filename.
+ *
+ * Channels, crons and the instance lock each key their store on this same
+ * expression, inlined in four different files. Anything NEW that is per
+ * instance uses this one instead of adding a fifth copy — a store that keyed on
+ * a slightly different string would silently belong to another instance.
+ *
+ * The six existing sites are deliberately left alone: rewriting them would bury
+ * the change that needed this.
+ */
+export function instanceKey(cwd = process.cwd()) {
+    return cwd.replace(/[^a-zA-Z0-9]/g, "-");
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IACrD,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC"}