synabun 2.0.0 → 2.0.7

package/lib/log-redact.js

@@ -0,0 +1,102 @@
+/**
+ * SynaBun — secrets out of the install and start logs a person is shown
+ *
+ * What the setup wizard's Details (GET /api/setup/install-details) and the
+ * desktop app's start log show is what programs wrote: npm, the user's own
+ * npm, the supervisor and the server. Such output can carry a secret: npm
+ * prints an invalid setting with its value, an error names a URL with its
+ * password, a log line repeats a header or an environment variable. Before
+ * any of it is shown or kept, this takes out
+ *
+ *   - npm auth settings (`//registry…/:_authToken=…`, `_auth`, `_password`)
+ *   - the password in a URL (`https://user:pass@host`)
+ *   - Authorization, Proxy-Authorization, Cookie and API-key headers
+ *   - the token shapes of the usual services (OpenAI / Anthropic `sk-…`,
+ *     GitHub, GitLab, npm, Slack, AWS, Google, Stripe, JWTs, Bearer tokens,
+ *     private key blocks)
+ *   - the value of a variable or setting whose name says it is secret
+ *     (…TOKEN, …SECRET, …PASSWORD, …API_KEY, …CREDENTIALS, …)
+ *
+ * Each becomes [redacted]; the text around it stays. Redact before you cut a
+ * text short: half a secret no longer looks like one.
+ *
+ * No imports: packaging/desktop/src/log-redact.mjs is this file, byte for byte
+ * (the desktop window cannot reach the application's files), and
+ * packaging/tests/log-redact.test.mjs fails when the two differ.
+ */
+
+export const REDACTED = '[redacted]';
+
+// Names whose value is a secret: a word of the name (split on _ - .) is one of these, or it ends in one.
+const SECRET_WORDS = 'TOKEN|TOKENS|SECRET|SECRETS|PASSWORD|PASSWD|PASSPHRASE|PASS|PWD|CREDENTIAL|CREDENTIALS|APIKEY|AUTH|AUTHTOKEN|COOKIE|SESSIONID|SESSION|PRIVATEKEY|ACCESSKEY|SECRETKEY|CLIENTSECRET|SIGNATURE';
+const SECRET_NAME = new RegExp(`(?:^|[_.-])(?:${SECRET_WORDS})$|(?:^|[_.-])(?:${SECRET_WORDS})(?:[_.-])|(?:API|ACCESS|PRIVATE|SECRET|CLIENT|SIGNING|MASTER|ENCRYPTION|SERVICE)[_.-]?KEY(?:$|[_.-])`, 'i');
+// The shell's working folder variables are folders, not passwords.
+const NOT_SECRET = new Set(['PWD', 'OLDPWD', 'SSH_AUTH_SOCK', 'GIT_ASKPASS', 'SSH_ASKPASS', 'SUDO_ASKPASS']);
+
+/** Whether a variable or setting called `name` holds a secret. */
+export function isSecretName(name) {
+  const text = String(name || '').replace(/^[-_]+/, '');
+  if (!text || NOT_SECRET.has(text.toUpperCase())) return false;
+  // camelCase names (accessToken, apiKey) as words.
+  const words = text.replace(/([a-z0-9])([A-Z])/g, '$1_$2');
+  return SECRET_NAME.test(words) || /^(?:auth|password|token|secret)$/i.test(text);
+}
+
+const PATTERNS = [
+  // A private key block, whole (to the end of the text when its end is not in it yet: a log read in pieces).
+  [/-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z0-9 ]*PRIVATE KEY-----|$)/g, () => REDACTED],
+  // The rest of such a block in the next piece: its base64 lines (upper and lower case and digits, as key material
+  // has; a hex hash or a row of one letter is not) and its end line.
+  [/^(?=[A-Za-z0-9+/]*[A-Z])(?=[A-Za-z0-9+/]*[a-z])(?=[A-Za-z0-9+/]*[0-9])[A-Za-z0-9+/]{40,}={0,2}$/gm, () => REDACTED],
+  [/-----END [A-Z0-9 ]*PRIVATE KEY-----/g, () => REDACTED],
+  // npm's auth settings: `//registry.npmjs.org/:_authToken=…`, `_auth = …`, `:_password=…` (also as npm_config__auth…).
+  [/((?:\/\/[^\s=:]*(?::\d+)?[^\s=]*?:)?_(?:authToken|auth|password)\s*[=:]\s*)("[^"]*"|'[^']*'|[^\s"',;]+)/gi, (_, head, value) => {
+    const quote = /^["']/.test(value) ? value[0] : '';
+    return `${head}${quote}${REDACTED}${quote}`;
+  }],
+  // The password in a URL's user info.
+  [/\b([a-z][a-z0-9+.-]*:\/\/[^\s/?#@:'"<>]*):([^\s/?#@'"<>]+)@/gi, (_, head) => `${head}:${REDACTED}@`],
+  // Headers: the value to the end of the line.
+  [/(^|[\s"'{,(])((?:proxy-)?authorization|x-api-key|api-key|x-auth-token|x-access-token|cookie|set-cookie)(\s*["']?\s*[:=]\s*["']?)([^\r\n"']+)/gim, (_, lead, name, sep) => `${lead}${name}${sep}${REDACTED}`],
+  // Bearer / Basic / token schemes wherever they stand.
+  [/\b(Bearer|Basic|Token)\s+(?=[A-Za-z0-9._~+/=-]*[0-9+/=_-])[A-Za-z0-9._~+/=-]{12,}/g, (_, scheme) => `${scheme} ${REDACTED}`],
+  // Token shapes of the usual services.
+  [/\b(?:sk|rk|pk)[-_](?:live|test|proj|ant|or|api|svcacct|admin)?[-_]?[A-Za-z0-9_-]{16,}/g, () => REDACTED],
+  [/\b(?:gh[pousr]_[A-Za-z0-9]{20,}|github_pat_[A-Za-z0-9_]{20,})/g, () => REDACTED],
+  [/\bglpat-[A-Za-z0-9_-]{16,}/g, () => REDACTED],
+  [/\bnpm_[A-Za-z0-9]{30,}/g, () => REDACTED],
+  [/\bxox[abprs]-[A-Za-z0-9-]{10,}/g, () => REDACTED],
+  [/\b(?:AKIA|ASIA)[0-9A-Z]{16}\b/g, () => REDACTED],
+  [/\bAIza[0-9A-Za-z_-]{30,}/g, () => REDACTED],
+  [/\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g, () => REDACTED],
+];
+
+// NAME=value, NAME: value, "NAME": "value", --name=value: the value when the name is a secret's.
+const ASSIGNMENT = /(^|[\s,;{(\[]|--)(["']?)([A-Za-z_][A-Za-z0-9_.-]*)\2(\s*[=:]\s*)(\[redacted\]|"[^"]*"|'[^']*'|[^\s"',;)}\]]+)/gm;
+
+/** `text` with every secret this file knows replaced by [redacted]. */
+export function redactSecrets(text) {
+  let out = String(text ?? '');
+  if (!out) return out;
+  for (const [pattern, replace] of PATTERNS) out = out.replace(pattern, replace);
+  out = out.replace(ASSIGNMENT, (whole, lead, quote, name, sep, value) => {
+    if (!isSecretName(name)) return whole;
+    const bare = value.replace(/^["']|["']$/g, '');
+    if (!bare || bare === REDACTED) return whole;
+    const q = /^["']/.test(value) ? value[0] : '';
+    return `${lead}${quote}${name}${quote}${sep}${q}${REDACTED}${q}`;
+  });
+  return out;
+}
+
+/** redactSecrets() over every string inside `value` (objects and arrays copied, at most `depth` levels). */
+export function redactDeep(value, depth = 8) {
+  if (typeof value === 'string') return redactSecrets(value);
+  if (!value || typeof value !== 'object' || depth <= 0) return value;
+  if (Array.isArray(value)) return value.map(item => redactDeep(item, depth - 1));
+  const out = {};
+  for (const [key, item] of Object.entries(value)) {
+    out[key] = isSecretName(key) && typeof item === 'string' && item ? REDACTED : redactDeep(item, depth - 1);
+  }
+  return out;
+}

package/lib/packaged-runtime.js

@@ -14,10 +14,16 @@
  * says so and nothing changes for it.
  */
 
-import { existsSync, readFileSync } from 'node:fs';
-import { basename, delimiter, dirname, isAbsolute, join, resolve } from 'node:path';
+import { accessSync, constants, existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, posix, resolve, win32 } from 'node:path';
+import {
+  bundledNpmrcPath, effectiveNpmPrefix, npmGlobalBinFor, packagedPathLast, pathEnvValue, resolveNpmPrefix, withPathEnv,
+} from './child-path.js';
 import { PACKAGE_ROOT } from './paths.js';
 
+export { npmGlobalBinFor };
+
 export const PACKAGE_MANIFEST = 'synabun-package.json';
 
 /**
@@ -54,6 +60,8 @@ export function readPackagedRuntime({ packageRoot = PACKAGE_ROOT, env = process.
     artifact: manifest.artifact ? String(manifest.artifact) : null,
     entry,
     runtimeBin: resolve(resources, String(manifest.runtime?.bin || 'runtime/bin')),
+    // The desktop app's window around this payload ('electron'), or null for a build without one.
+    shell: manifest.shell?.kind ? String(manifest.shell.kind) : null,
   });
 }
 
@@ -79,10 +87,25 @@ export function isTransientPath(path, env = process.env) {
   return Boolean(mount) && value.startsWith(`${mount}/`);
 }
 
+const volumeWritable = (folder) => {
+  try { accessSync(folder, constants.W_OK); return true; } catch { return false; }
+};
+
+/**
+ * macOS: a copy started from the disk image it came in. The image is a
+ * read-only volume under /Volumes, gone once it is ejected; an external drive
+ * someone keeps applications on is writable, and counts as a place.
+ */
+export function isReadOnlyVolumePath(path, { platform = process.platform, writable = volumeWritable } = {}) {
+  if (platform !== 'darwin') return false;
+  const volume = /^\/Volumes\/[^/]+\//.exec(String(path || ''));
+  return !!volume && !writable(volume[0]);
+}
+
 /** The entry executable when it outlives this run, otherwise null. */
-export function durableEntry(runtime = packagedRuntime(), env = process.env) {
+export function durableEntry(runtime = packagedRuntime(), env = process.env, { platform = process.platform, writable } = {}) {
   const entry = runtime?.entry || null;
-  return entry && !isTransientPath(entry, env) ? entry : null;
+  return entry && !isTransientPath(entry, env) && !isReadOnlyVolumePath(entry, { platform, writable }) ? entry : null;
 }
 
 /**
@@ -98,13 +121,117 @@ export function mcpStdioCommand(scriptPath, { packageRoot = PACKAGE_ROOT, env =
 }
 
 /**
- * `env` with the packaged runtime first on PATH, so that `node`, `npm` and
- * `npx` started by name are the ones that came with the application.
+ * The global prefix of the npm that comes with the packaged runtime, as npm
+ * reads it from that npm's own settings file (its builtin npmrc, which the
+ * build writes: packaging/lib/bundle.mjs). `npm i -g` through it lands in a
+ * per-user folder SynaBun owns, never inside the application: that folder is
+ * read-only, replaced by every update and, on macOS, signed. A prefix the
+ * user set (npm_config_prefix, `prefix=` in their config file or the global
+ * one) comes before this file for npm, so the user's own stays in charge. The folder is in the data home's
+ * runtime/ (outside every backup and data-home move), where the default data
+ * home is: npm expands `~/` with HOME and `${APPDATA}` from the environment.
+ */
+export const BUNDLED_NPM_PREFIX = Object.freeze({
+  win32: '${APPDATA}\\synabun\\runtime\\npm-global',
+  posix: '~/.synabun/runtime/npm-global',
+});
+
+/** The builtin npmrc of the npm a packaged build ships for `platform` (the whole file). */
+export function bundledNpmrc(platform) {
+  return `prefix=${platform === 'win32' ? BUNDLED_NPM_PREFIX.win32 : BUNDLED_NPM_PREFIX.posix}\n`;
+}
+
+/**
+ * The folder BUNDLED_NPM_PREFIX names on this machine, the way npm expands it
+ * (HOME first, then the account's home; APPDATA on Windows), or null when it
+ * names none (no APPDATA).
+ */
+export function defaultBundledNpmPrefix({ platform = process.platform, env = process.env, home = homedir() } = {}) {
+  if (platform === 'win32') return env.APPDATA ? win32.join(env.APPDATA, 'synabun', 'runtime', 'npm-global') : null;
+  const base = env.HOME || home;
+  return base ? posix.join(base, '.synabun', 'runtime', 'npm-global') : null;
+}
+
+/**
+ * Where `npm i -g` through the npm of a packaged build puts packages: npm's
+ * own settings over the builtin npmrc the build wrote (lib/child-path.js
+ * resolveNpmPrefix: npm_config_prefix, the user's config file, the global
+ * one, then that builtin file), else, when that file cannot be read, the
+ * folder BUNDLED_NPM_PREFIX names. { prefix, bin, source, from }, or null
+ * without a runtime (an npm or Git install). Cached for seconds when asked
+ * about this process (the options are for tests).
+ */
+export function packagedNpmPrefix(runtime = packagedRuntime(), { env = process.env, readFile, home, cwd } = {}) {
+  if (!runtime) return null;
+  const platform = runtime.platform || process.platform;
+  const builtin = bundledNpmrcPath(runtime.runtimeBin, platform);
+  const injected = readFile || home || cwd || env !== process.env || platform !== process.platform;
+  const found = injected
+    ? resolveNpmPrefix({ env, platform, builtin, ...(readFile ? { readFile } : {}), ...(home ? { home } : {}), ...(cwd ? { cwd } : {}) })
+    : effectiveNpmPrefix({ builtin });
+  if (found.prefix) return { prefix: found.prefix, bin: found.bin, source: found.source, from: found.from };
+  const fallback = defaultBundledNpmPrefix({ platform, env, ...(home ? { home } : {}) });
+  return fallback ? { prefix: fallback, bin: npmGlobalBinFor(fallback, platform), source: 'builtin', from: builtin } : { prefix: null, bin: null, source: null, from: null };
+}
+
+const insideFolder = (file, folder, platform) => {
+  if (!file || !folder) return false;
+  const impl = platform === 'win32' ? win32 : posix;
+  const id = (value) => (platform === 'win32' ? impl.resolve(value).toLowerCase() : impl.resolve(value));
+  const [a, b] = [id(file), id(folder)];
+  return a === b || a.startsWith(b.endsWith(impl.sep) ? b : b + impl.sep);
+};
+
+/**
+ * A packaged build's own folders on the PATH of what it starts
+ * (lib/child-path.js packagedPathLast): `last`, its runtime (and the folder of
+ * the Node this process runs on when that is the packaged one), and `extra`,
+ * npm's global bin (packagedNpmPrefix). Nothing without a runtime.
+ */
+export function packagedPathFolders(runtime = packagedRuntime(), { env = process.env, execPath = process.execPath, ...options } = {}) {
+  if (!runtime) return { last: [], extra: [] };
+  const platform = runtime.platform || process.platform;
+  const impl = platform === 'win32' ? win32 : posix;
+  const last = [runtime.runtimeBin];
+  if (insideFolder(execPath, runtime.resources, platform)) {
+    const own = impl.dirname(execPath);
+    if (!last.some(entry => (platform === 'win32' ? entry.toLowerCase() === own.toLowerCase() : entry === own))) last.push(own);
+  }
+  const bin = packagedNpmPrefix(runtime, { env, ...options })?.bin;
+  return { last, extra: bin ? [bin] : [] };
+}
+
+/**
+ * `env` for a process a packaged build starts: PATH as the user's own, then
+ * npm's global bin, then the packaged runtime last (lib/child-path.js). The
+ * user's Node, npm and npx stay first; SynaBun's are the fallback on a machine
+ * without any. SynaBun's own Node is never found through this PATH: the entry,
+ * the bootstrap and the supervisor start it by its absolute path
+ * (packaging/launcher/launcher.c, packaging/runtime/bootstrap.mjs, setup.js).
+ * The same object when the order is already right; `env` itself without a runtime.
  */
-export function withPackagedPath(env = process.env, runtime = packagedRuntime()) {
+export function packagedChildEnv(env = process.env, runtime = packagedRuntime(), options = {}) {
   if (!runtime) return env;
-  const key = Object.keys(env).find(name => name.toUpperCase() === 'PATH') || 'PATH';
-  const parts = String(env[key] || '').split(delimiter).filter(Boolean);
-  if (parts[0] === runtime.runtimeBin) return env;
-  return { ...env, [key]: [runtime.runtimeBin, ...parts.filter(part => part !== runtime.runtimeBin)].join(delimiter) };
+  const platform = runtime.platform || process.platform;
+  const { last, extra } = packagedPathFolders(runtime, { env, ...options });
+  const current = pathEnvValue(env);
+  const value = packagedPathLast(current, { platform, last, extra });
+  if (value === current && Object.keys(env).filter(name => name.toUpperCase() === 'PATH').length === 1) return env;
+  return withPathEnv(env, value, platform);
+}
+
+/**
+ * packagedChildEnv() on `target` itself (process.env by default), for an entry
+ * point whose every child inherits its environment: the headless MCP server,
+ * a hook handler. Whether anything changed.
+ */
+export function applyPackagedChildPath(target = process.env, runtime = packagedRuntime(), options = {}) {
+  if (!runtime) return false;
+  const ordered = packagedChildEnv(target, runtime, { env: target, ...options });
+  if (ordered === target) return false;
+  const keys = Object.keys(target).filter(name => name.toUpperCase() === 'PATH');
+  const key = keys[0] || (runtime.platform === 'win32' ? 'Path' : 'PATH');
+  for (const alias of keys) if (alias !== key) delete target[alias];
+  target[key] = pathEnvValue(ordered);
+  return true;
 }

package/lib/start-launcher.js

@@ -18,6 +18,8 @@
  *                  running, the Terminal asked to open, the supervisor's own
  *                  phases, the server answering) on a loopback beacon the
  *                  offline page reads, because that page has no server to ask.
+ *                  A restart is reported the same way, by the supervisor that
+ *                  brings the server back (`openRestartReport`).
  *
  * Nothing here stays running: the OS starts the launcher per click and it
  * exits once the server answers.
@@ -823,6 +825,9 @@ export function publicSupervisorState(record) {
  * rebinding a name), gives the answer only to a page of this server's own
  * loopback origin, and changes nothing. A port it cannot have is not an
  * error: the launch goes on unreported and the page says less.
+ *
+ * `reason: 'restart'` is a supervisor bringing its server back, not a launcher
+ * starting one: the answer then says so, and its first step is 'restart'.
  */
 export function createStartBeacon({
   port,
@@ -830,12 +835,14 @@ export function createStartBeacon({
   now = () => Date.now(),
   launchId = randomBytes(8).toString('hex'),
   logPath = null,
+  reason = 'start',
   createServerImpl = createServer,
 } = {}) {
+  const restart = reason === 'restart';
   const beaconPort = startBeaconPort(port);
   const hosts = new Set([`127.0.0.1:${beaconPort}`, `localhost:${beaconPort}`]);
   const origins = new Set([`http://localhost:${port}`, `http://127.0.0.1:${port}`, `http://[::1]:${port}`]);
-  const status = { state: 'starting', steps: [{ id: 'received', at: startedAt }], supervisor: null, error: null };
+  const status = { state: 'starting', steps: [{ id: restart ? 'restart' : 'received', at: startedAt }], supervisor: null, error: null };
   let server = null;
   let listening = false;
   let closed = false;
@@ -858,6 +865,7 @@ export function createStartBeacon({
     supervisor: status.supervisor,
     error: status.error,
     log: logPath,
+    ...(restart ? { reason: 'restart' } : {}),
   });
 
   function handle(req, res) {
@@ -991,6 +999,85 @@ export function createStartBeacon({
   };
 }
 
+// ═══════════════════════════════════════════
+// Progress: a restart
+// ═══════════════════════════════════════════
+
+/** Set by a server that had no supervisor for the one it starts to restart it: that start is a restart's. */
+export const RESTART_REPORT_ENV = 'SYNABUN_RESTART_REPORT';
+/** How long a restart's report stays once the server said it is listening: a page polls every 300 ms. */
+export const RESTART_REPORT_SETTLE_MS = 3000;
+
+/**
+ * A restart reports itself the way a launch does, on the start beacon, for as
+ * long as the server is away: the page that asked has no server to ask. Opened
+ * by the supervisor (setup.js) when the server it runs exits to be restarted
+ * (`exited: true`: it saw that process end), and by a supervisor that a server
+ * without one started in its place.
+ *
+ *   phase()        — the supervisor's record changed: pass on what it says now
+ *   failed(error)  — it ended without a server; resolves once a page has read
+ *                    why (`lingerMs` at the most), so the caller can exit then
+ *   close()        — over
+ *
+ * Only what the supervisor writes after the report began goes out: a record
+ * from before it (the server that just stopped was 'listening') is not news.
+ * The report ends by itself a moment after the server says it is listening.
+ * Never throws; a beacon it cannot have leaves the restart unreported.
+ */
+export function openRestartReport({
+  port,
+  dataHome,
+  exited = false,
+  now = () => Date.now(),
+  settleMs = RESTART_REPORT_SETTLE_MS,
+  lingerMs = BEACON_LINGER_MS,
+  beacon = createStartBeacon,
+} = {}) {
+  const startedAt = now();
+  let report = null;
+  try { report = beacon({ port, startedAt, now, reason: 'restart' }); } catch {}
+  let over = !report;
+  let settle = null;
+  const close = () => {
+    if (over) return;
+    over = true;
+    if (settle) clearTimeout(settle);
+    settle = null;
+    try { report.close(); } catch {}
+  };
+  // An earlier report (a restart right before this one) may still be letting go.
+  let listening = Promise.resolve(false);
+  if (report) {
+    try { listening = Promise.resolve(report.listen({ retryMs: 5000 })).catch(() => false); } catch {}
+    if (exited) report.step('exited');
+  }
+  return {
+    get open() { return !over; },
+    phase() {
+      if (over) return;
+      let record = null;
+      try { record = readJson(launcherStatePaths(dataHome).supervisor); } catch {}
+      if (!record || !(Number(record.phaseAt) >= startedAt)) return;
+      report.supervisor(record);
+      if (record.phase === 'listening' && !settle) {
+        settle = setTimeout(close, settleMs);
+        settle.unref?.();
+      }
+    },
+    async failed(error) {
+      if (over) return;
+      if (settle) clearTimeout(settle);
+      settle = null;
+      report.finish('failed', error);
+      await listening; // a failure right after it opened: let it be reachable first
+      try { await report.linger(lingerMs); } catch {}
+      close();
+    },
+    close,
+  };
+}
+
 const LOGIN_ENV_SHELLS = new Set(['zsh', 'bash', 'sh', 'dash', 'ksh', 'mksh', 'yash', 'fish']);
 /** What a launch decides for itself. A profile may export its own; the launch's values stand. */
 const LAUNCH_SETTINGS = ['SYNABUN_DATA_HOME', 'NEURAL_PORT', 'SYNABUN_OPEN_BROWSER'];

package/mcp-server/dist/http.d.ts

@@ -14,7 +14,9 @@
  *
  * Mount on any Express app or run standalone.
  */
-import { type Router } from 'express';
+import { type Request, type Router } from 'express';
+/** The X-Synabun-Brain-Token of one request (whatsapp_send_file); none for a tunnel caller (a remote MCP-key holder). */
+export declare function requestBrainCredential(req: Pick<Request, 'get'>): string | null;
 /**
  * Initialize DB, categories, and warm up the embedding model.
  * Safe to call multiple times — only runs once.

package/mcp-server/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAGH,OAAgB,EAAgB,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAyH7D;;;;GAIG;AACH,wBAAsB,UAAU,kBAU/B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CA0GxC"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAGH,OAAgB,EAAE,KAAK,OAAO,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAuH7D,yHAAyH;AACzH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,GAAG,IAAI,CAE/E;AAcD;;;;GAIG;AACH,wBAAsB,UAAU,kBAU/B;AAED;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CA0GxC"}

package/mcp-server/dist/http.js

@@ -22,7 +22,7 @@ import { ensureDatabase } from './services/sqlite.js';
 import { initCategoryCache } from './services/categories.js';
 import { warmupEmbeddings } from './services/local-embeddings.js';
 import { createMcpServer, refreshServerSchemas, onSchemaRefresh, setServerRole, setServerCapabilities } from './index.js';
-import { markHttpMode, obtainIdentity, sanitizeDesktopGrant, sanitizePin, sanitizeRole, runWithIdentity, releaseIdentity, startIdentitySweeper, } from './services/identity.js';
+import { markHttpMode, obtainIdentity, sanitizeBrainCredential, sanitizeDesktopGrant, sanitizePin, sanitizeRole, runWithBrainCredential, runWithIdentity, releaseIdentity, startIdentitySweeper, } from './services/identity.js';
 let initialized = false;
 let initPromise = null;
 // Warm-server pool: registering 100+ tools (with Zod schema construction)
@@ -116,6 +116,17 @@ function deriveIdentity(req, sid) {
     identity.memoryContext = { ...identity.memoryContext, ...Object.fromEntries(Object.entries(memoryContext).filter(([, v]) => v !== undefined)) };
     return identity;
 }
+/** The X-Synabun-Brain-Token of one request (whatsapp_send_file); none for a tunnel caller (a remote MCP-key holder). */
+export function requestBrainCredential(req) {
+    return req.get('cf-connecting-ip') ? null : sanitizeBrainCredential(req.get('x-synabun-brain-token'));
+}
+/**
+ * Handle one request inside its caller identity and its own brain-credential context: the
+ * X-Synabun-Brain-Token of THIS request, never one another request left on a shared identity.
+ */
+function runRequest(req, sid, fn) {
+    return runWithBrainCredential(requestBrainCredential(req), () => runWithIdentity(deriveIdentity(req, sid), fn));
+}
 function jsonRpcError(res, status, code, message) {
     res.status(status).json({ jsonrpc: '2.0', error: { code, message }, id: null });
 }
@@ -165,7 +176,7 @@ export function createMcpRoutes() {
                     return jsonRpcError(res, 404, -32001, 'Session not found');
                 }
                 entry.lastSeen = Date.now();
-                await runWithIdentity(deriveIdentity(req, sid), () => entry.transport.handleRequest(req, res, req.body));
+                await runRequest(req, sid, () => entry.transport.handleRequest(req, res, req.body));
                 return;
             }
             // New client — must be an initialize request.
@@ -216,7 +227,7 @@ export function createMcpRoutes() {
                 catch { /* already closed */ }
             };
             await server.connect(transport);
-            await runWithIdentity(deriveIdentity(req, undefined), () => transport.handleRequest(req, res, req.body));
+            await runRequest(req, undefined, () => transport.handleRequest(req, res, req.body));
         }
         catch (error) {
             console.error('MCP HTTP error:', error);
@@ -235,7 +246,7 @@ export function createMcpRoutes() {
         }
         entry.lastSeen = Date.now();
         try {
-            await runWithIdentity(deriveIdentity(req, sid), () => entry.transport.handleRequest(req, res));
+            await runRequest(req, sid, () => entry.transport.handleRequest(req, res));
         }
         catch (error) {
             console.error('MCP HTTP error:', error);

package/mcp-server/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,OAAsC,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC1H,OAAO,EAEL,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,kEAAkE;AAClE,IAAI,UAAU,GAA8C,IAAI,CAAC;AAEjE,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,UAAU,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IACrD,UAAU,GAAG,IAAI,CAAC;IAClB,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU;gBAAE,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEtD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExG,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAClC,SAAS,mBAAmB;IAC1B,IAAI,qBAAqB;QAAE,OAAO;IAClC,qBAAqB,GAAG,IAAI,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,aAAa,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChJ,kFAAkF;gBAClF,IAAI,CAAC;oBAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,uEAAuE;AACvE,6EAA6E;AAC7E,0CAA0C;AAC1C,eAAe,CAAC,GAAG,EAAE;IACnB,UAAU,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,GAAuB;IAC3D,MAAM,aAAa,GAAG;QACpB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;QAC1D,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;KAClE,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,iCAAiC;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC9F,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAClE,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,EAAE;YAC9C,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE;gBACJ,iBAAiB,EAAE,cAAc;gBACjC,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACnE,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;aAC5D;YACD,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;QACH,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9G,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;IAC7I,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,GAAqB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACxF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,WAAW;QAAE,OAAO;IACxB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,EAAE,CAAC;QAC1B,gBAAgB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpI,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC;QAAC,MAAM,WAAW,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,YAAY,EAAE,CAAC;IACf,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,UAAU,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;YAEnD,oDAAoD;YACpD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,qEAAqE;oBACrE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;gBAC7D,CAAC;gBACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CACnD,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAClD,CAAC;gBACF,OAAO;YACT,CAAC;YAED,8CAA8C;YAC9C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;gBACtC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC/B,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACrE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAC5D,gEAAgE;oBAChE,iEAAiE;oBACjE,+DAA+D;oBAC/D,8DAA8D;oBAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACrE,IAAI,IAAI;wBAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACtC,uEAAuE;oBACvE,qEAAqE;oBACrE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBACvF,IAAI,KAAK;wBAAE,qBAAqB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7D,OAAO,CAAC,KAAK,CAAC,sBAAsB,MAAM,mBAAmB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC/K,CAAC;aACF,CAAC,CAAC;YACH,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;gBACtC,IAAI,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC5C,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9B,sEAAsE;oBACtE,oEAAoE;oBACpE,eAAe,CAAC,SAAS,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,YAAY,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC;gBACvF,CAAC;gBACD,IAAI,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACxD,CAAC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,CACzD,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,mFAAmF;IACnF,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAC5I,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CACnD,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACtC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kDAAkD;AAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;OACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAE/D,IAAI,MAAM,EAAE,CAAC;IACX,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAEnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,OAAsC,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC1H,OAAO,EAEL,YAAY,EACZ,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,IAAI,WAAW,GAAG,KAAK,CAAC;AACxB,IAAI,WAAW,GAAyB,IAAI,CAAC;AAE7C,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,kEAAkE;AAClE,IAAI,UAAU,GAA8C,IAAI,CAAC;AAEjE,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,UAAU,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;IACrD,UAAU,GAAG,IAAI,CAAC;IAClB,YAAY,CAAC,GAAG,EAAE;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU;gBAAE,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAQD,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEtD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExG,IAAI,qBAAqB,GAAG,KAAK,CAAC;AAClC,SAAS,mBAAmB;IAC1B,IAAI,qBAAqB;QAAE,OAAO;IAClC,qBAAqB,GAAG,IAAI,CAAC;IAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC;YACvC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBAC9C,OAAO,CAAC,KAAK,CAAC,sBAAsB,GAAG,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,aAAa,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChJ,kFAAkF;gBAClF,IAAI,CAAC;oBAAC,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,uEAAuE;AACvE,6EAA6E;AAC7E,0CAA0C;AAC1C,eAAe,CAAC,GAAG,EAAE;IACnB,UAAU,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC;YAAC,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACrF,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAY,EAAE,GAAuB;IAC3D,MAAM,aAAa,GAAG;QACpB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;QACnD,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;QAC1D,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC;KAClE,CAAC;IACF,0EAA0E;IAC1E,qEAAqE;IACrE,2EAA2E;IAC3E,iCAAiC;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC9F,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAClE,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,EAAE;YAC9C,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE;gBACJ,iBAAiB,EAAE,cAAc;gBACjC,gBAAgB,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACnE,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;aAC5D;YACD,IAAI;YACJ,YAAY;SACb,CAAC,CAAC;QACH,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;QAC7I,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,oEAAoE;IACpE,0EAA0E;IAC1E,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9G,QAAQ,CAAC,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAK,SAAS,CAAC,CAAC,EAAE,CAAC;IAC7I,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,sBAAsB,CAAC,GAAyB;IAC9D,OAAO,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC;AACxG,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAI,GAAY,EAAE,GAAuB,EAAE,EAAW;IACvE,OAAO,sBAAsB,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,SAAS,YAAY,CAAC,GAAqB,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;IACxF,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,WAAW;QAAE,OAAO;IACxB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,cAAc,EAAE,CAAC;QACvB,MAAM,iBAAiB,EAAE,CAAC;QAC1B,gBAAgB,EAAE,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,CAAA,OAAO,CAAC,KAAK,CAAC,qEAAqE,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpI,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,CAAC;QAAC,MAAM,WAAW,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,WAAW,GAAG,IAAI,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,YAAY,EAAE,CAAC;IACf,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,CAAC;IAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,UAAU,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;YAEnD,oDAAoD;YACpD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,qEAAqE;oBACrE,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;gBAC7D,CAAC;gBACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5B,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAClD,CAAC;gBACF,OAAO;YACT,CAAC;YAED,8CAA8C;YAC9C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;YACrF,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;gBAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;gBACtC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC/B,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACrE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAC5D,gEAAgE;oBAChE,iEAAiE;oBACjE,+DAA+D;oBAC/D,8DAA8D;oBAC9D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;oBACrE,IAAI,IAAI;wBAAE,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACtC,uEAAuE;oBACvE,qEAAqE;oBACrE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBACvF,IAAI,KAAK;wBAAE,qBAAqB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7D,OAAO,CAAC,KAAK,CAAC,sBAAsB,MAAM,mBAAmB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC/K,CAAC;aACF,CAAC,CAAC;YACH,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;gBACvB,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;gBACtC,IAAI,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC5C,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9B,sEAAsE;oBACtE,oEAAoE;oBACpE,eAAe,CAAC,SAAS,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,sBAAsB,SAAS,YAAY,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC;gBACvF,CAAC;gBACD,IAAI,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACxD,CAAC,CAAC;YAEF,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CACpC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,mFAAmF;IACnF,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,SAAS,CAAC;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;QAC5I,CAAC;QACD,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CACxC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACtC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kDAAkD;AAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;OACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAE/D,IAAI,MAAM,EAAE,CAAC;IACX,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAEnC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACpB,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,gFAAgF;IAChF,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/mcp-server/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiCpE,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,cAAc,EAC7C,oBAAoB,EAAsB,cAAc,EAEzD,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAMzD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC;AAgC/F,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,cAAyD;;;;;;EAkElH;AA+BD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,QAK9C;AAOD,wBAAgB,gBAAgB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAE9E;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,uDAE/C;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAkDrL;AAWD,wBAAgB,eAAe,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;CAAO,aAUvI;AAOD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,IAAI,CAEhF;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAQjF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAU9F;AAID,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAO5D;AA2BD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAEpD;AAID,wBAAgB,sBAAsB,SASrC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAkCpE,OAAO,EACL,eAAe,EAAE,YAAY,EAAE,cAAc,EAC7C,oBAAoB,EAAsB,cAAc,EAEzD,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAOzD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,cAAc,EAAE,CAAC;AAgC/F,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAE,cAAyD;;;;;;EAmElH;AA+BD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,QAK9C;AAOD,wBAAgB,gBAAgB,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,CAE9E;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,uDAE/C;AAED,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,cAAmC,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAkDrL;AAWD,wBAAgB,eAAe,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;CAAO,aAUvI;AAOD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,IAAI,CAEhF;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAQjF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAU9F;AAID,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAO5D;AA2BD,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAEpD;AAID,wBAAgB,sBAAsB,SASrC"}

package/mcp-server/dist/index.js

@@ -27,6 +27,7 @@ import { registerYoutubeTools } from './tools/youtube.js';
 import { registerStyleGuideTools } from './tools/style-guide.js';
 import { registerMoreLoginTools } from './tools/morelogin.js';
 import { registerAgentTools } from './tools/agents.js';
+import { registerWhatsAppSendFileTool } from './tools/whatsapp-send-file.js';
 import { registerComputerTools } from './tools/computer.js';
 import { profileSchema, profileDescription, handleProfile } from './tools/profile.js';
 import { choiceSchema, choiceDescription, handleChoice } from './tools/choice.js';
@@ -34,6 +35,7 @@ import { PROFILE_PRESETS, VALID_GROUPS, ProfileRuntime, resolveProfileGroups, re
 import { invalidateCategoryCache, setOnExternalChange, startWatchingCategories, stopWatchingCategories, initCategoryCache } from './services/categories.js';
 import { healCodexConfig } from './services/codex-config-heal.js';
 import { getEnvPath, config } from './config.js';
+import { SERVER_VERSION } from './version.js';
 import { readFileSync, writeFileSync, watch, existsSync, mkdirSync } from 'fs';
 import { join } from 'path';
 // Re-export profile API for external consumers (http.ts, etc.)
@@ -102,8 +104,9 @@ export function registerTools(server, runtime = new ProfileRuntime(readInitialPr
     runtime.setToolGroup('styleguide', registerStyleGuideTools(server));
     runtime.setToolGroup('morelogin', registerMoreLoginTools(server));
     // Role-gated: advertised only while the runtime's role is 'assistant'
-    // (profiles.ts ROLE_GATED_GROUPS), never by profile selection.
-    runtime.setToolGroup('agents', registerAgentTools(server));
+    // (profiles.ts ROLE_GATED_GROUPS), never by profile selection. whatsapp_send_file
+    // rides here: only an assistant brain sees it (and only a WhatsApp one may use it).
+    runtime.setToolGroup('agents', [...registerAgentTools(server), registerWhatsAppSendFileTool(server)]);
     // Capability-gated: advertised only to callers holding a desktop grant
     // (profiles.ts CAPABILITY_GATED_GROUPS), macOS only.
     runtime.setToolGroup('computer', registerComputerTools(server));
@@ -201,7 +204,7 @@ export function getToolUsageSummary(runtime = mainProfileRuntime) {
         image: ['image_staged'],
         gsc: ['gsc_'],
         styleguide: ['style_guide'],
-        agents: ['agent_'],
+        agents: ['agent_', 'whatsapp_send_file'],
         computer: ['computer'],
     };
     const usedGroups = new Set();
@@ -237,7 +240,7 @@ loadUsageCounts();
 export function createMcpServer(forceProfile, options = {}) {
     const initialProfile = forceProfile ?? readInitialProfile();
     const runtime = new ProfileRuntime(initialProfile, options);
-    const server = new McpServer({ name: 'claude-memory', version: '2.0.0' }, { instructions: buildServerInstructions(runtime) });
+    const server = new McpServer({ name: 'claude-memory', version: SERVER_VERSION }, { instructions: buildServerInstructions(runtime) });
     const refs = registerTools(server, runtime);
     serverToolRefs.set(server, refs);
     return server;
@@ -299,7 +302,7 @@ export function refreshServerSchemas(target) {
 // ── Main stdio server instance ──
 const _initialProfile = readInitialProfile();
 mainProfileRuntime = new ProfileRuntime(_initialProfile);
-const server = new McpServer({ name: 'claude-memory', version: '2.0.0' }, { instructions: buildServerInstructions(mainProfileRuntime) });
+const server = new McpServer({ name: 'claude-memory', version: SERVER_VERSION }, { instructions: buildServerInstructions(mainProfileRuntime) });
 const { rememberTool, recallTool, reflectTool, memoriesTool } = registerTools(server, mainProfileRuntime);
 // ── Wire tool usage tracking into low-level server ──
 // Intercept tool call notifications to count usage per tool name.
@@ -338,7 +341,7 @@ async function main() {
     // anything else. If the file doesn't exist or is already clean, this is a
     // fast no-op. Atomic write — original is preserved on any failure.
     if (!isClaudeCode()) {
-        const codexConfigPath = join(process.env.USERPROFILE || process.env.HOME || '', '.codex', 'config.toml');
+        const codexConfigPath = join(process.env.CODEX_HOME || join(process.env.USERPROFILE || process.env.HOME || '', '.codex'), 'config.toml');
         try {
             const result = healCodexConfig(codexConfigPath);
             if (result.healed) {