squidclaw 2026.4.24 → 2026.4.26

package/dist/dispatch-acp-manager.runtime-B3868p2b.js

@@ -1,3 +0,0 @@
-import { r as getSessionBindingService } from "./session-binding-service-pbLwkdlW.js";
-import { n as getAcpSessionManager } from "./manager-CwWzbl_D.js";
-export { getAcpSessionManager, getSessionBindingService };

package/dist/dispatch-acp.runtime-GxCOV-g5.js

@@ -1,19 +0,0 @@
-//#region src/auto-reply/reply/dispatch-acp.runtime.ts
-let dispatchAcpPromise = null;
-let dispatchAcpCommandBypassPromise = null;
-function loadDispatchAcp() {
-	dispatchAcpPromise ??= import("./dispatch-acp-gH6MGir3.js");
-	return dispatchAcpPromise;
-}
-function loadDispatchAcpCommandBypass() {
-	dispatchAcpCommandBypassPromise ??= import("./dispatch-acp-command-bypass-BQ-ZcO_X.js");
-	return dispatchAcpCommandBypassPromise;
-}
-async function shouldBypassAcpDispatchForCommand(...args) {
-	return (await loadDispatchAcpCommandBypass()).shouldBypassAcpDispatchForCommand(...args);
-}
-async function tryDispatchAcpReply(...args) {
-	return await (await loadDispatchAcp()).tryDispatchAcpReply(...args);
-}
-//#endregion
-export { shouldBypassAcpDispatchForCommand, tryDispatchAcpReply };

package/dist/docker-harness-DuqgDAuF.js

@@ -1,277 +0,0 @@
-import { l as seedQaAgentWorkspace } from "./suite-Dy4_-d5w.js";
-import { n as buildQaGatewayConfig } from "./qa-gateway-config-DdjVDvZI.js";
-import path from "node:path";
-import fs from "node:fs/promises";
-import { randomUUID } from "node:crypto";
-//#region extensions/qa-lab/src/docker-harness.ts
-const QA_LAB_INTERNAL_PORT = 43123;
-const QA_LAB_UI_OVERLAY_DIR = "/opt/squidclaw-qa-lab-ui";
-function toPosixRelative(fromDir, toPath) {
-	return path.relative(fromDir, toPath).split(path.sep).join("/");
-}
-function renderImageBlock(params) {
-	if (params.usePrebuiltImage) return `    image: ${params.imageName}\n`;
-	return `    build:\n      context: ${toPosixRelative(params.outputDir, params.repoRoot) || "."}\n      dockerfile: Dockerfile\n      args:\n        SQUIDCLAW_EXTENSIONS: "qa-channel qa-lab"\n`;
-}
-function renderCompose(params) {
-	const imageBlock = renderImageBlock(params);
-	const repoMount = toPosixRelative(params.outputDir, params.repoRoot) || ".";
-	const qaLabUiMount = toPosixRelative(params.outputDir, path.join(params.repoRoot, "extensions", "qa-lab", "web", "dist"));
-	return `services:
-  qa-mock-openai:
-${imageBlock}    pull_policy: never
-    healthcheck:
-      test:
-        - CMD
-        - node
-        - -e
-        - fetch("http://127.0.0.1:44080/healthz").then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))
-      interval: 10s
-      timeout: 5s
-      retries: 6
-      start_period: 3s
-    command:
-      - node
-      - dist/index.js
-      - qa
-      - mock-openai
-      - --host
-      - "0.0.0.0"
-      - --port
-      - "44080"
-${params.includeQaLabUi ? `  qa-lab:
-${imageBlock}    pull_policy: never
-    ports:
-      - "${params.qaLabPort}:${QA_LAB_INTERNAL_PORT}"
-${params.bindUiDist ? `    volumes:\n      - ${qaLabUiMount}:${QA_LAB_UI_OVERLAY_DIR}:ro\n` : ""}    healthcheck:
-      test:
-        - CMD
-        - node
-        - -e
-        - fetch("http://127.0.0.1:${QA_LAB_INTERNAL_PORT}/healthz").then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))
-      interval: 10s
-      timeout: 5s
-      retries: 6
-      start_period: 5s
-    environment:
-      SQUIDCLAW_SKIP_GMAIL_WATCHER: "1"
-      SQUIDCLAW_SKIP_BROWSER_CONTROL_SERVER: "1"
-      SQUIDCLAW_SKIP_CANVAS_HOST: "1"
-      SQUIDCLAW_PROFILE: ""
-    command:
-      - node
-      - dist/index.js
-      - qa
-      - ui
-      - --host
-      - "0.0.0.0"
-      - --port
-      - "${QA_LAB_INTERNAL_PORT}"
-      - --advertise-host
-      - "127.0.0.1"
-      - --advertise-port
-      - "${params.qaLabPort}"
-      - --control-ui-url
-      - "http://127.0.0.1:${params.gatewayPort}/"
-      - --control-ui-proxy-target
-      - "http://squidclaw-qa-gateway:18789/"
-      - --control-ui-token
-      - "${params.gatewayToken}"
-${params.bindUiDist ? `      - --ui-dist-dir\n      - "${QA_LAB_UI_OVERLAY_DIR}"\n` : ""}      - --auto-kickoff-target
-      - direct
-      - --send-kickoff-on-start
-      - --embedded-gateway
-      - disabled
-    depends_on:
-      qa-mock-openai:
-        condition: service_healthy
-` : ""}  squidclaw-qa-gateway:
-${imageBlock}    pull_policy: never
-    extra_hosts:
-      - "host.docker.internal:host-gateway"
-    ports:
-      - "${params.gatewayPort}:18789"
-    environment:
-      SQUIDCLAW_CONFIG_PATH: /tmp/squidclaw/squidclaw.json
-      SQUIDCLAW_STATE_DIR: /tmp/squidclaw/state
-      SQUIDCLAW_NO_RESPAWN: "1"
-      SQUIDCLAW_SKIP_GMAIL_WATCHER: "1"
-      SQUIDCLAW_SKIP_BROWSER_CONTROL_SERVER: "1"
-      SQUIDCLAW_SKIP_CANVAS_HOST: "1"
-      SQUIDCLAW_PROFILE: ""
-    volumes:
-      - ./state:/opt/squidclaw-scaffold:ro
-      - ${repoMount}:/opt/squidclaw-repo:ro
-    healthcheck:
-      test:
-        - CMD
-        - node
-        - -e
-        - fetch("http://127.0.0.1:18789/healthz").then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))
-      interval: 10s
-      timeout: 5s
-      retries: 12
-      start_period: 15s
-    depends_on:
-${params.includeQaLabUi ? `      qa-lab:
-        condition: service_healthy
-` : ""}      qa-mock-openai:
-        condition: service_healthy
-    command:
-      - sh
-      - -lc
-      - mkdir -p /tmp/squidclaw/workspace /tmp/squidclaw/state && cp /opt/squidclaw-scaffold/squidclaw.json /tmp/squidclaw/squidclaw.json && cp -R /opt/squidclaw-scaffold/seed-workspace/. /tmp/squidclaw/workspace/ && ln -snf /opt/squidclaw-repo /tmp/squidclaw/workspace/repo && exec node dist/index.js gateway run --port 18789 --bind lan --allow-unconfigured
-`;
-}
-function renderEnvExample(params) {
-	return `# QA Docker harness example env
-SQUIDCLAW_GATEWAY_TOKEN=${params.gatewayToken}
-QA_GATEWAY_PORT=${params.gatewayPort}
-QA_BUS_BASE_URL=${params.qaBusBaseUrl}
-QA_PROVIDER_BASE_URL=${params.providerBaseUrl}
-${params.includeQaLabUi ? `QA_LAB_URL=http://127.0.0.1:${params.qaLabPort}\n` : ""}`;
-}
-function renderReadme(params) {
-	return `# QA Docker Harness
-
-Generated scaffold for the Docker-backed QA lane.
-
-Files:
-
-- \`docker-compose.qa.yml\`
-- \`.env.example\`
-- \`state/squidclaw.json\`
-
-Suggested flow:
-
-1. Build the prebaked image once:
-   - \`docker build -t squidclaw:qa-local-prebaked --build-arg SQUIDCLAW_EXTENSIONS="qa-channel qa-lab" -f Dockerfile .\`
-2. Start the stack:
-   - \`docker compose -f docker-compose.qa.yml up${params.usePrebuiltImage ? "" : " --build"} -d\`
-3. Open the QA dashboard:
-   - \`${params.includeQaLabUi ? `http://127.0.0.1:${params.qaLabPort}` : "not published in this scaffold"}\`
-4. The single QA site embeds both panes:
-   - left: Control UI
-   - right: Slack-ish QA lab
-5. The repo-backed kickoff task auto-injects on startup.
-
-Fast UI refresh:
-
-- Start once with a prebuilt image + bind-mounted QA Lab assets:
-  - \`pnpm qa:lab:up --use-prebuilt-image --bind-ui-dist --skip-ui-build\`
-- In another shell, rebuild the QA Lab bundle on change:
-  - \`pnpm qa:lab:watch\`
-- The browser auto-reloads when the QA Lab asset hash changes.
-
-Gateway:
-
-- health: \`http://127.0.0.1:${params.gatewayPort}/healthz\`
-- Control UI: \`http://127.0.0.1:${params.gatewayPort}/\`
-- Mock OpenAI: internal \`http://qa-mock-openai:44080/v1\`
-
-This scaffold uses localhost Control UI insecure-auth compatibility for QA only.
-The gateway runs with in-process restarts inside Docker so restart actions do not
-kill the container by detaching a replacement child.
-`;
-}
-async function writeQaDockerHarnessFiles(params) {
-	const gatewayPort = params.gatewayPort ?? 18789;
-	const qaLabPort = params.qaLabPort ?? 43124;
-	const gatewayToken = params.gatewayToken ?? `qa-token-${randomUUID()}`;
-	const providerBaseUrl = params.providerBaseUrl ?? "http://qa-mock-openai:44080/v1";
-	const qaBusBaseUrl = params.qaBusBaseUrl ?? "http://qa-lab:43123";
-	const imageName = params.imageName ?? "squidclaw:qa-local-prebaked";
-	const usePrebuiltImage = params.usePrebuiltImage ?? false;
-	const bindUiDist = params.bindUiDist ?? false;
-	const includeQaLabUi = params.includeQaLabUi ?? true;
-	await fs.mkdir(path.join(params.outputDir, "state", "seed-workspace"), { recursive: true });
-	await seedQaAgentWorkspace({
-		workspaceDir: path.join(params.outputDir, "state", "seed-workspace"),
-		repoRoot: params.repoRoot
-	});
-	const config = buildQaGatewayConfig({
-		bind: "lan",
-		gatewayPort: 18789,
-		gatewayToken,
-		providerBaseUrl,
-		qaBusBaseUrl,
-		workspaceDir: "/tmp/squidclaw/workspace",
-		controlUiRoot: "/app/dist/control-ui"
-	});
-	const files = [
-		path.join(params.outputDir, "docker-compose.qa.yml"),
-		path.join(params.outputDir, ".env.example"),
-		path.join(params.outputDir, "README.md"),
-		path.join(params.outputDir, "state", "squidclaw.json")
-	];
-	await Promise.all([
-		fs.writeFile(path.join(params.outputDir, "docker-compose.qa.yml"), renderCompose({
-			outputDir: params.outputDir,
-			repoRoot: params.repoRoot,
-			imageName,
-			usePrebuiltImage,
-			bindUiDist,
-			gatewayPort,
-			qaLabPort,
-			gatewayToken,
-			includeQaLabUi
-		}), "utf8"),
-		fs.writeFile(path.join(params.outputDir, ".env.example"), renderEnvExample({
-			gatewayPort,
-			qaLabPort,
-			gatewayToken,
-			providerBaseUrl,
-			qaBusBaseUrl,
-			includeQaLabUi
-		}), "utf8"),
-		fs.writeFile(path.join(params.outputDir, "README.md"), renderReadme({
-			gatewayPort,
-			qaLabPort,
-			usePrebuiltImage,
-			bindUiDist,
-			includeQaLabUi
-		}), "utf8"),
-		fs.writeFile(path.join(params.outputDir, "state", "squidclaw.json"), `${JSON.stringify(config, null, 2)}\n`, "utf8")
-	]);
-	return {
-		outputDir: params.outputDir,
-		imageName,
-		files: [
-			...files,
-			path.join(params.outputDir, "state", "seed-workspace", "IDENTITY.md"),
-			path.join(params.outputDir, "state", "seed-workspace", "QA_KICKOFF_TASK.md"),
-			path.join(params.outputDir, "state", "seed-workspace", "QA_SCENARIO_PLAN.md"),
-			path.join(params.outputDir, "state", "seed-workspace", "QA_SCENARIOS.md")
-		]
-	};
-}
-async function buildQaDockerHarnessImage(params, deps) {
-	const imageName = params.imageName ?? "squidclaw:qa-local-prebaked";
-	await (deps?.runCommand ?? (async (command, args, cwd) => {
-		const { execFile } = await import("node:child_process");
-		return await new Promise((resolve, reject) => {
-			execFile(command, args, { cwd }, (error, stdout, stderr) => {
-				if (error) {
-					reject(error);
-					return;
-				}
-				resolve({
-					stdout,
-					stderr
-				});
-			});
-		});
-	}))("docker", [
-		"build",
-		"-t",
-		imageName,
-		"--build-arg",
-		"SQUIDCLAW_EXTENSIONS=qa-channel qa-lab",
-		"-f",
-		"Dockerfile",
-		"."
-	], params.repoRoot);
-	return { imageName };
-}
-//#endregion
-export { writeQaDockerHarnessFiles as n, buildQaDockerHarnessImage as t };

package/dist/doctor-completion-CqPBIveI.js

@@ -1,90 +0,0 @@
-import { t as resolveSquidClawPackageRoot } from "./squidclaw-root-DfNGFcqv.js";
-import { n as resolveCliName } from "./cli-name-BaHcgIKP.js";
-import { t as note } from "./note-F1xe-57t.js";
-import { c as usesSlowDynamicCompletion, i as isCompletionInstalled, o as resolveCompletionCachePath, r as installCompletion, s as resolveShellFromEnv, t as completionCacheExists } from "./completion-cli-e73PL7WW.js";
-import path from "node:path";
-import { spawnSync } from "node:child_process";
-//#region src/commands/doctor-completion.ts
-/** Generate the completion cache by spawning the CLI. */
-async function generateCompletionCache() {
-	const root = await resolveSquidClawPackageRoot({
-		moduleUrl: import.meta.url,
-		argv1: process.argv[1],
-		cwd: process.cwd()
-	});
-	if (!root) return false;
-	const binPath = path.join(root, "squidclaw.mjs");
-	return spawnSync(process.execPath, [
-		binPath,
-		"completion",
-		"--write-state"
-	], {
-		cwd: root,
-		env: process.env,
-		encoding: "utf-8"
-	}).status === 0;
-}
-/** Check the status of shell completion for the current shell. */
-async function checkShellCompletionStatus(binName = "squidclaw") {
-	const shell = resolveShellFromEnv();
-	return {
-		shell,
-		profileInstalled: await isCompletionInstalled(shell, binName),
-		cacheExists: await completionCacheExists(shell, binName),
-		cachePath: resolveCompletionCachePath(shell, binName),
-		usesSlowPattern: await usesSlowDynamicCompletion(shell, binName)
-	};
-}
-/**
-* Doctor check for shell completion.
-* - If profile uses slow dynamic pattern: upgrade to cached version
-* - If profile has completion but no cache: auto-generate cache and upgrade profile
-* - If no completion at all: prompt to install (with user confirmation)
-*/
-async function doctorShellCompletion(runtime, prompter, options = {}) {
-	const cliName = resolveCliName();
-	const status = await checkShellCompletionStatus(cliName);
-	if (status.usesSlowPattern) {
-		note(`Your ${status.shell} profile uses slow dynamic completion (source <(...)).\nUpgrading to cached completion for faster shell startup...`, "Shell completion");
-		if (!status.cacheExists) {
-			if (!await generateCompletionCache()) {
-				note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`, "Shell completion");
-				return;
-			}
-		}
-		await installCompletion(status.shell, true, cliName);
-		note(`Shell completion upgraded. Restart your shell or run: source ~/.${status.shell === "zsh" ? "zshrc" : status.shell === "bash" ? "bashrc" : "config/fish/config.fish"}`, "Shell completion");
-		return;
-	}
-	if (status.profileInstalled && !status.cacheExists) {
-		note(`Shell completion is configured in your ${status.shell} profile but the cache is missing.\nRegenerating cache...`, "Shell completion");
-		if (await generateCompletionCache()) note(`Completion cache regenerated at ${status.cachePath}`, "Shell completion");
-		else note(`Failed to regenerate completion cache. Run \`${cliName} completion --write-state\` manually.`, "Shell completion");
-		return;
-	}
-	if (!status.profileInstalled) {
-		if (options.nonInteractive) return;
-		if (await prompter.confirm({
-			message: `Enable ${status.shell} shell completion for ${cliName}?`,
-			initialValue: true
-		})) {
-			if (!await generateCompletionCache()) {
-				note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`, "Shell completion");
-				return;
-			}
-			await installCompletion(status.shell, true, cliName);
-			note(`Shell completion installed. Restart your shell or run: source ~/.${status.shell === "zsh" ? "zshrc" : status.shell === "bash" ? "bashrc" : "config/fish/config.fish"}`, "Shell completion");
-		}
-	}
-}
-/**
-* Ensure completion cache exists. Used during setup/update to fix
-* cases where profile has completion but no cache.
-* This is a silent fix - no prompts.
-*/
-async function ensureCompletionCacheExists(binName = "squidclaw") {
-	if (await completionCacheExists(resolveShellFromEnv(), binName)) return true;
-	return generateCompletionCache();
-}
-//#endregion
-export { doctorShellCompletion as n, ensureCompletionCacheExists as r, checkShellCompletionStatus as t };

package/dist/env-auth-kvshWd0K.js

@@ -1,2 +0,0 @@
-import "./config-CNjow647.js";
-export {};

package/dist/exec-approvals-3lAYs6Hb.js

@@ -1,272 +0,0 @@
-import { i as normalizeLowercaseStringOrEmpty } from "./string-coerce-CIT1-v_a.js";
-import { s as normalizeStringEntries } from "./string-normalization-IdjIlZzV.js";
-import { n as normalizeAccountId } from "./account-id-BfovDWrj.js";
-import { i as resolveAllowlistMatchByCandidates } from "./allowlist-match-HRlAUlGe.js";
-import { u as getExecApprovalReplyMetadata } from "./exec-approval-reply-ckZXhcxm.js";
-import "./text-runtime-DlpjaC5H.js";
-import "./routing-Dd1a9ZAn.js";
-import { n as resolveApprovalApprovers, t as createResolvedApproverActionAuthAdapter } from "./approval-auth-helpers-CcOeRJxK.js";
-import { t as matchesApprovalRequestFilters } from "./approval-request-filters-BkEl_COo.js";
-import { n as isChannelExecApprovalClientEnabledFromConfig, r as isChannelExecApprovalTargetRecipient, t as createChannelExecApprovalProfile } from "./approval-client-helpers-Dcetxghh.js";
-import "./approval-client-runtime-Dio49-A8.js";
-import { s as resolveApprovalRequestChannelAccountId } from "./exec-approval-session-target-CluUqoN5.js";
-import "./approval-native-runtime-BpXNz2pB.js";
-import { i as resolveMatrixAccount, t as listMatrixAccountIds } from "./accounts-D6vf619D.js";
-//#region extensions/matrix/src/matrix/monitor/allowlist.ts
-function normalizeAllowList(list) {
-	return normalizeStringEntries(list);
-}
-function normalizeMatrixUser(raw) {
-	const value = (raw ?? "").trim();
-	if (!value) return "";
-	if (!value.startsWith("@") || !value.includes(":")) return normalizeLowercaseStringOrEmpty(value);
-	const withoutAt = value.slice(1);
-	const splitIndex = withoutAt.indexOf(":");
-	if (splitIndex === -1) return normalizeLowercaseStringOrEmpty(value);
-	const localpart = normalizeLowercaseStringOrEmpty(withoutAt.slice(0, splitIndex));
-	const server = normalizeLowercaseStringOrEmpty(withoutAt.slice(splitIndex + 1));
-	if (!server) return normalizeLowercaseStringOrEmpty(value);
-	return `@${localpart}:${server}`;
-}
-function normalizeMatrixUserId(raw) {
-	const trimmed = (raw ?? "").trim();
-	if (!trimmed) return "";
-	const lowered = normalizeLowercaseStringOrEmpty(trimmed);
-	if (lowered.startsWith("matrix:")) return normalizeMatrixUser(trimmed.slice(7));
-	if (lowered.startsWith("user:")) return normalizeMatrixUser(trimmed.slice(5));
-	return normalizeMatrixUser(trimmed);
-}
-function normalizeMatrixAllowListEntry(raw) {
-	const trimmed = raw.trim();
-	if (!trimmed) return "";
-	if (trimmed === "*") return trimmed;
-	const lowered = normalizeLowercaseStringOrEmpty(trimmed);
-	if (lowered.startsWith("matrix:")) return `matrix:${normalizeMatrixUser(trimmed.slice(7))}`;
-	if (lowered.startsWith("user:")) return `user:${normalizeMatrixUser(trimmed.slice(5))}`;
-	return normalizeMatrixUser(trimmed);
-}
-function normalizeMatrixAllowList(list) {
-	return normalizeAllowList(list).map((entry) => normalizeMatrixAllowListEntry(entry));
-}
-function resolveMatrixAllowListMatch(params) {
-	const allowList = params.allowList;
-	if (allowList.length === 0) return { allowed: false };
-	if (allowList.includes("*")) return {
-		allowed: true,
-		matchKey: "*",
-		matchSource: "wildcard"
-	};
-	const userId = normalizeMatrixUser(params.userId);
-	return resolveAllowlistMatchByCandidates({
-		allowList,
-		candidates: [
-			{
-				value: userId,
-				source: "id"
-			},
-			{
-				value: userId ? `matrix:${userId}` : "",
-				source: "prefixed-id"
-			},
-			{
-				value: userId ? `user:${userId}` : "",
-				source: "prefixed-user"
-			}
-		]
-	});
-}
-//#endregion
-//#region extensions/matrix/src/approval-ids.ts
-function normalizeMatrixApproverId(value) {
-	return normalizeMatrixUserId(String(value)) || void 0;
-}
-//#endregion
-//#region extensions/matrix/src/approval-auth.ts
-function getMatrixApprovalAuthApprovers(params) {
-	return resolveApprovalApprovers({
-		allowFrom: resolveMatrixAccount(params).config.dm?.allowFrom,
-		normalizeApprover: normalizeMatrixApproverId
-	});
-}
-const matrixApprovalAuth = createResolvedApproverActionAuthAdapter({
-	channelLabel: "Matrix",
-	resolveApprovers: ({ cfg, accountId }) => getMatrixApprovalAuthApprovers({
-		cfg,
-		accountId
-	}),
-	normalizeSenderId: (value) => normalizeMatrixApproverId(value)
-});
-//#endregion
-//#region extensions/matrix/src/exec-approvals.ts
-function normalizeMatrixExecApproverId(value) {
-	const normalized = normalizeMatrixApproverId(value);
-	return normalized === "*" ? void 0 : normalized;
-}
-function resolveMatrixExecApprovalConfig(params) {
-	const account = resolveMatrixAccount(params);
-	const config = account.config.execApprovals;
-	if (!config) return;
-	return {
-		...config,
-		enabled: account.enabled && account.configured ? config.enabled : false
-	};
-}
-function countMatrixExecApprovalEligibleAccounts(params) {
-	return listMatrixAccountIds(params.cfg).filter((accountId) => {
-		const account = resolveMatrixAccount({
-			cfg: params.cfg,
-			accountId
-		});
-		if (!account.enabled || !account.configured) return false;
-		const config = resolveMatrixExecApprovalConfig({
-			cfg: params.cfg,
-			accountId
-		});
-		const filters = config?.enabled ? {
-			agentFilter: config.agentFilter,
-			sessionFilter: config.sessionFilter
-		} : {
-			agentFilter: void 0,
-			sessionFilter: void 0
-		};
-		return isChannelExecApprovalClientEnabledFromConfig({
-			enabled: config?.enabled,
-			approverCount: getMatrixApprovalApprovers({
-				cfg: params.cfg,
-				accountId,
-				approvalKind: params.approvalKind
-			}).length
-		}) && matchesApprovalRequestFilters({
-			request: params.request.request,
-			agentFilter: filters.agentFilter,
-			sessionFilter: filters.sessionFilter
-		});
-	}).length;
-}
-function matchesMatrixRequestAccount(params) {
-	const turnSourceChannel = normalizeLowercaseStringOrEmpty(params.request.request.turnSourceChannel);
-	const boundAccountId = resolveApprovalRequestChannelAccountId({
-		cfg: params.cfg,
-		request: params.request,
-		channel: "matrix"
-	});
-	if (turnSourceChannel && turnSourceChannel !== "matrix" && !boundAccountId) return countMatrixExecApprovalEligibleAccounts({
-		cfg: params.cfg,
-		request: params.request,
-		approvalKind: params.approvalKind
-	}) <= 1;
-	return !boundAccountId || !params.accountId || normalizeAccountId(boundAccountId) === normalizeAccountId(params.accountId);
-}
-function getMatrixExecApprovalApprovers(params) {
-	const account = resolveMatrixAccount(params).config;
-	return resolveApprovalApprovers({
-		explicit: account.execApprovals?.approvers,
-		allowFrom: account.dm?.allowFrom,
-		normalizeApprover: normalizeMatrixExecApproverId
-	});
-}
-function resolveMatrixApprovalKind(request) {
-	return request.id.startsWith("plugin:") ? "plugin" : "exec";
-}
-function getMatrixApprovalApprovers(params) {
-	if (params.approvalKind === "plugin") return getMatrixApprovalAuthApprovers({
-		cfg: params.cfg,
-		accountId: params.accountId
-	});
-	return getMatrixExecApprovalApprovers(params);
-}
-function isMatrixExecApprovalTargetRecipient(params) {
-	return isChannelExecApprovalTargetRecipient({
-		...params,
-		channel: "matrix",
-		normalizeSenderId: normalizeMatrixApproverId,
-		matchTarget: ({ target, normalizedSenderId }) => normalizeMatrixApproverId(target.to) === normalizedSenderId
-	});
-}
-const matrixExecApprovalProfile = createChannelExecApprovalProfile({
-	resolveConfig: resolveMatrixExecApprovalConfig,
-	resolveApprovers: getMatrixExecApprovalApprovers,
-	normalizeSenderId: normalizeMatrixApproverId,
-	isTargetRecipient: isMatrixExecApprovalTargetRecipient,
-	matchesRequestAccount: (params) => matchesMatrixRequestAccount({
-		...params,
-		approvalKind: "exec"
-	})
-});
-const isMatrixExecApprovalClientEnabled = matrixExecApprovalProfile.isClientEnabled;
-matrixExecApprovalProfile.isApprover;
-const isMatrixExecApprovalAuthorizedSender = matrixExecApprovalProfile.isAuthorizedSender;
-const resolveMatrixExecApprovalTarget = matrixExecApprovalProfile.resolveTarget;
-matrixExecApprovalProfile.shouldHandleRequest;
-function isMatrixApprovalClientEnabled(params) {
-	if (params.approvalKind === "exec") return isMatrixExecApprovalClientEnabled(params);
-	return isChannelExecApprovalClientEnabledFromConfig({
-		enabled: resolveMatrixExecApprovalConfig(params)?.enabled,
-		approverCount: getMatrixApprovalApprovers(params).length
-	});
-}
-function isMatrixAnyApprovalClientEnabled(params) {
-	return isMatrixApprovalClientEnabled({
-		...params,
-		approvalKind: "exec"
-	}) || isMatrixApprovalClientEnabled({
-		...params,
-		approvalKind: "plugin"
-	});
-}
-function shouldHandleMatrixApprovalRequest(params) {
-	const approvalKind = resolveMatrixApprovalKind(params.request);
-	if (!matchesMatrixRequestAccount({
-		...params,
-		approvalKind
-	})) return false;
-	const config = resolveMatrixExecApprovalConfig(params);
-	if (!isChannelExecApprovalClientEnabledFromConfig({
-		enabled: config?.enabled,
-		approverCount: getMatrixApprovalApprovers({
-			...params,
-			approvalKind
-		}).length
-	})) return false;
-	return matchesApprovalRequestFilters({
-		request: params.request.request,
-		agentFilter: config?.agentFilter,
-		sessionFilter: config?.sessionFilter
-	});
-}
-function buildFilterCheckRequest(params) {
-	if (params.metadata.approvalKind === "plugin") return {
-		id: params.metadata.approvalId,
-		request: {
-			title: "Plugin Approval Required",
-			description: "",
-			agentId: params.metadata.agentId ?? null,
-			sessionKey: params.metadata.sessionKey ?? null
-		},
-		createdAtMs: 0,
-		expiresAtMs: 0
-	};
-	return {
-		id: params.metadata.approvalId,
-		request: {
-			command: "",
-			agentId: params.metadata.agentId ?? null,
-			sessionKey: params.metadata.sessionKey ?? null
-		},
-		createdAtMs: 0,
-		expiresAtMs: 0
-	};
-}
-function shouldSuppressLocalMatrixExecApprovalPrompt(params) {
-	if (!matrixExecApprovalProfile.shouldSuppressLocalPrompt(params)) return false;
-	const metadata = getExecApprovalReplyMetadata(params.payload);
-	if (!metadata) return false;
-	const request = buildFilterCheckRequest({ metadata });
-	return shouldHandleMatrixApprovalRequest({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		request
-	});
-}
-//#endregion
-export { isMatrixExecApprovalAuthorizedSender as a, shouldHandleMatrixApprovalRequest as c, matrixApprovalAuth as d, normalizeMatrixApproverId as f, resolveMatrixAllowListMatch as h, isMatrixApprovalClientEnabled as i, shouldSuppressLocalMatrixExecApprovalPrompt as l, normalizeMatrixUserId as m, getMatrixExecApprovalApprovers as n, isMatrixExecApprovalClientEnabled as o, normalizeMatrixAllowList as p, isMatrixAnyApprovalClientEnabled as r, resolveMatrixExecApprovalTarget as s, getMatrixApprovalApprovers as t, getMatrixApprovalAuthApprovers as u };