trybeacon 0.1.47 → 0.1.49

package/.next/types/routes.d.ts

@@ -2,7 +2,7 @@
 // Do not edit this file manually
 
 type AppRoutes = "/" | "/docs" | "/feedback" | "/help" | "/map" | "/plan" | "/settings"
-type AppRouteHandlerRoutes = "/api/board-annotations" | "/api/board-annotations/[id]" | "/api/board-layout" | "/api/bug-flags" | "/api/bug-flags/[id]" | "/api/code-graph" | "/api/code-graph/position" | "/api/context" | "/api/context/feature" | "/api/context/file" | "/api/db/arrange" | "/api/db/backfill-access" | "/api/db/position" | "/api/db/prune-planned" | "/api/db/reconcile-endpoints" | "/api/db/relations/[id]" | "/api/db/tables/[id]" | "/api/draft" | "/api/draft/approve" | "/api/draft/status" | "/api/edges" | "/api/edges/[id]" | "/api/endpoints/[id]" | "/api/entities" | "/api/feedback" | "/api/feedback/[id]" | "/api/feedback/[id]/vote" | "/api/ingest" | "/api/init" | "/api/map" | "/api/map/describe" | "/api/map/files" | "/api/map/finish" | "/api/map/start" | "/api/map/touch-active" | "/api/nodes" | "/api/nodes/[id]" | "/api/nodes/[id]/position" | "/api/nodes/positions" | "/api/nodes/subtasks" | "/api/notes" | "/api/notes/[id]" | "/api/open" | "/api/plan" | "/api/plan/annotations" | "/api/plan/approve" | "/api/plan/history" | "/api/plan/markdown" | "/api/plan/presence" | "/api/plan/verdict" | "/api/preferences" | "/api/project-meta" | "/api/reset" | "/api/stream" | "/api/tab/nav" | "/api/tab/presence" | "/api/telemetry" | "/api/telemetry/stats" | "/api/version" | "/api/workspace" | "/api/workspace/activate"
+type AppRouteHandlerRoutes = "/api/board-annotations" | "/api/board-annotations/[id]" | "/api/board-layout" | "/api/bug-flags" | "/api/bug-flags/[id]" | "/api/code-graph" | "/api/code-graph/position" | "/api/context" | "/api/context/feature" | "/api/context/file" | "/api/db/arrange" | "/api/db/backfill-access" | "/api/db/position" | "/api/db/prune-planned" | "/api/db/reconcile-endpoints" | "/api/db/relations/[id]" | "/api/db/tables/[id]" | "/api/draft" | "/api/draft/approve" | "/api/draft/status" | "/api/edges" | "/api/edges/[id]" | "/api/endpoints/[id]" | "/api/entities" | "/api/feedback" | "/api/feedback/[id]" | "/api/feedback/[id]/vote" | "/api/flags" | "/api/ingest" | "/api/init" | "/api/map" | "/api/map/describe" | "/api/map/files" | "/api/map/finish" | "/api/map/start" | "/api/map/touch-active" | "/api/nodes" | "/api/nodes/[id]" | "/api/nodes/[id]/position" | "/api/nodes/positions" | "/api/nodes/subtasks" | "/api/notes" | "/api/notes/[id]" | "/api/open" | "/api/plan" | "/api/plan/annotations" | "/api/plan/approve" | "/api/plan/history" | "/api/plan/markdown" | "/api/plan/presence" | "/api/plan/verdict" | "/api/preferences" | "/api/project-meta" | "/api/reset" | "/api/scope-guard/check" | "/api/stream" | "/api/tab/nav" | "/api/tab/presence" | "/api/telemetry" | "/api/telemetry/stats" | "/api/version" | "/api/workspace" | "/api/workspace/activate"
 type PageRoutes = never
 type LayoutRoutes = "/"
 type RedirectRoutes = never
@@ -39,6 +39,7 @@ interface ParamMap {
   "/api/feedback": {}
   "/api/feedback/[id]": { "id": string; }
   "/api/feedback/[id]/vote": { "id": string; }
+  "/api/flags": {}
   "/api/ingest": {}
   "/api/init": {}
   "/api/map": {}
@@ -65,6 +66,7 @@ interface ParamMap {
   "/api/preferences": {}
   "/api/project-meta": {}
   "/api/reset": {}
+  "/api/scope-guard/check": {}
   "/api/stream": {}
   "/api/tab/nav": {}
   "/api/tab/presence": {}

package/.next/types/validator.ts

@@ -353,6 +353,15 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../app/api/flags/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/flags">> = Specific
+  const handler = {} as typeof import("../../app/api/flags/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../app/api/ingest/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/ingest">> = Specific
@@ -587,6 +596,15 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../app/api/scope-guard/check/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/scope-guard/check">> = Specific
+  const handler = {} as typeof import("../../app/api/scope-guard/check/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../app/api/stream/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/stream">> = Specific

package/dist/bin/beacon.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env bun
 // @bun
-import{execSync as _,spawn as m}from"child_process";import{existsSync as u,mkdirSync as g,openSync as c,readFileSync as p,writeFileSync as d}from"fs";import{homedir as t,platform as L}from"os";import{basename as l,dirname as j,join as U}from"path";import{fileURLToPath as a}from"url";var T=j(a(import.meta.url)),O=l(j(T))==="dist",V=O?j(j(T)):j(T),P=process.cwd(),v=process.env.BEACON_HOME||U(t(),".beacon"),A=U(v,"server.json"),w=process.env.PORT||"4319";if(!process.env.BEACON_MIGRATIONS_DIR)process.env.BEACON_MIGRATIONS_DIR=U(V,"drizzle");function $(z){if(!O)return U(V,z);return U(V,"dist",z.replace(/\.ts$/,".js"))}var Y=process.argv[2];if(Y==="mcp")await import($("bin/mcp.ts"));else if(Y==="hook")await import($("bin/hook.ts"));else if(Y==="plan")await import($("bin/plan.ts"));else if(Y==="prompt")await import($("bin/prompt.ts"));else if(Y==="stop-hook")await import($("bin/stop-hook.ts"));else if(Y==="stop")f();else if(Y==="remove")await import($("bin/remove.ts"));else if(Y==="setup")await E(D()||P);else if(Y==="doctor")await import($("bin/doctor.ts"));else if(Y==="uninstall")await import($("bin/uninstall.ts"));else if(Y==="update")await zz(process.argv.includes("--force")||process.argv.includes("-f"));else if(Y==="telemetry")await e(process.argv[3]);else if(Y==="version"||Y==="--version"||Y==="-v")console.log(x());else await r();async function E(z,Z=!1){let{installInitSkill:X,installRefreshSkill:J,installCodexRepoSkills:K,ensureMcp:G,ensureWorkflowDoc:W}=await import($("lib/assets.ts")),{selfHealGlobal:F}=await import($("lib/global-install.ts")),{codexDetected:M}=await import($("lib/codex-install.ts")),N=await F(),H=X(z),B=J(z);W(z);let Q=G(z),y=M()?K(z):[];if(Z){if(Q.added)console.log(`[beacon] registered Beacon MCP in ${Q.path} \u2014 restart your agent CLI to use @beacon mentions.`)}else{console.log(`
-  \u25C9 Beacon setup \xB7 ${z}`),console.log(`  \u2713 skill:  ${H}`),console.log(`  \u2713 skill:  ${B}`);for(let I of y)console.log(`  \u2713 skill:  ${I}`);console.log(`  ${Q.added?"\u2713 added ":"\xB7 kept  "} Beacon MCP in ${Q.path}`),console.log(`  \u2192 in this repo, run /beacon-init in your agent (Claude Code or Codex) to map the repo.
-`)}return{initSkill:H,refreshSkill:B,mcp:Q,codexSkills:y,heal:N}}function D(){try{return _("git rev-parse --show-toplevel",{cwd:P,stdio:["ignore","pipe","ignore"]}).toString().trim()}catch{return""}}function k(z){try{return process.kill(z,0),!0}catch{return!1}}function R(z){try{return JSON.parse(p(z,"utf8"))}catch{return null}}async function S(z){try{return(await fetch(z)).ok}catch{return!1}}async function n(z,Z=60){for(let X=0;X<Z;X++){if(await S(z))return!0;await new Promise((J)=>setTimeout(J,500))}return!1}function i(z){g(v,{recursive:!0});let Z=c(U(v,"server.log"),"a"),X={...process.env,PORT:z,BEACON_NO_OPEN:"1",BEACON_MIGRATIONS_DIR:U(V,"drizzle")};delete X.BEACON_REPO,delete X.BEACON_DATA_DIR,delete X.DATABASE_URL;let K=m("bun",O?["run","start"]:["run","dev"],{cwd:V,env:X,detached:!0,stdio:["ignore",Z,Z]});K.unref();let G={pid:K.pid??0,port:z};return d(A,JSON.stringify(G)),G}async function s(){let z=R(A);if(z&&k(z.pid)&&await S(`http://localhost:${z.port}/api/workspace`))return z.port;let{findAvailablePort:Z}=await import($("lib/daemon-port.ts")),X=String(await Z(Number(w)));console.log(X===w?"[beacon] starting the Beacon server\u2026":`[beacon] port ${w} is busy \u2014 starting the Beacon server on port ${X}\u2026`);let{port:J}=i(X);if(!await n(`http://localhost:${J}/api/workspace`))console.log("[beacon] (server is taking a while \u2014 it may still be compiling)");return J}function o(z){if(process.env.BEACON_NO_OPEN)return;let Z=L()==="darwin"?"open":L()==="win32"?"start":"xdg-open";try{_(`${Z} "${z}"`,{stdio:"ignore"})}catch{}}async function r(){let z=D()||P,{registerWorkspaceExplicit:Z,idForPath:X,dataDirFor:J,ensureWorkspaceDb:K,isRegistrableWorkspacePath:G}=await import($("lib/workspaces.ts"));if(!G(z))console.error(`[beacon] refusing to open Beacon in ${z} \u2014 that's your home directory, not a project.
-`+"          cd into a repo (or run `git init` there) and try again."),process.exit(1);let W=X(z),F=J(W),M=!u(U(F,"db.sqlite"));if(M)console.log(`[beacon] first run for ${z} \u2014 creating database\u2026`);let N=await K(W);if(!N.ok)console.error(`[beacon] failed to provision database: ${N.error}`);if(M)console.log("[beacon] tip: already have code here? run `/beacon-init` in your agent (Claude Code or Codex) to map the project.");let{heal:H}=await E(z,!0),B=[];if(H.skillsAdded.length)B.push(`skills ${H.skillsAdded.join(", ")}`);if(H.hooksAdded)B.push(`${H.hooksAdded} Claude Code hook${H.hooksAdded===1?"":"s"}`);if(H.claudeMdBlockTouched)B.push("global CLAUDE.md block");if(B.length)console.log(`[beacon] wired into ~/.claude/: ${B.join(" + ")}.`);let Q=H.codex;if(Q){let q=[];if(Q.skillsAdded.length)q.push(`skills ${Q.skillsAdded.join(", ")}`);if(Q.hooksAdded)q.push(`${Q.hooksAdded} Codex hook${Q.hooksAdded===1?"":"s"}`);if(Q.agentsMdBlockTouched)q.push("global AGENTS.md block");if(Q.mcp.added)q.push("MCP entry in config.toml");if(q.length)console.log(`[beacon] wired into ~/.codex/: ${q.join(" + ")}.`);if(Q.mcp.error)console.log(`[beacon] codex MCP not wired: ${Q.mcp.error}`)}try{let q=await import($("lib/telemetry.ts"));if(!q.telemetryStatus().machineId){let b=q.telemetryStatus().enabled;console.log(`[beacon] telemetry: Beacon sends an anonymous heartbeat (random machine id, version, OS,
+import{execSync as _,spawn as m}from"child_process";import{existsSync as u,mkdirSync as g,openSync as c,readFileSync as d,writeFileSync as p}from"fs";import{homedir as t,platform as L}from"os";import{basename as l,dirname as j,join as U}from"path";import{fileURLToPath as a}from"url";var T=j(a(import.meta.url)),O=l(j(T))==="dist",V=O?j(j(T)):j(T),P=process.cwd(),v=process.env.BEACON_HOME||U(t(),".beacon"),A=U(v,"server.json"),w=process.env.PORT||"4319";if(!process.env.BEACON_MIGRATIONS_DIR)process.env.BEACON_MIGRATIONS_DIR=U(V,"drizzle");function Q(z){if(!O)return U(V,z);return U(V,"dist",z.replace(/\.ts$/,".js"))}var Y=process.argv[2];if(Y==="mcp")await import(Q("bin/mcp.ts"));else if(Y==="hook")await import(Q("bin/hook.ts"));else if(Y==="guard")await import(Q("bin/guard.ts"));else if(Y==="plan")await import(Q("bin/plan.ts"));else if(Y==="prompt")await import(Q("bin/prompt.ts"));else if(Y==="stop-hook")await import(Q("bin/stop-hook.ts"));else if(Y==="stop")f();else if(Y==="remove")await import(Q("bin/remove.ts"));else if(Y==="setup")await E(D()||P);else if(Y==="doctor")await import(Q("bin/doctor.ts"));else if(Y==="uninstall")await import(Q("bin/uninstall.ts"));else if(Y==="update")await zz(process.argv.includes("--force")||process.argv.includes("-f"));else if(Y==="telemetry")await e(process.argv[3]);else if(Y==="version"||Y==="--version"||Y==="-v")console.log(x());else await r();async function E(z,Z=!1){let{installInitSkill:X,installRefreshSkill:J,installCodexRepoSkills:K,ensureMcp:G,ensureWorkflowDoc:W}=await import(Q("lib/assets.ts")),{selfHealGlobal:F}=await import(Q("lib/global-install.ts")),{codexDetected:M}=await import(Q("lib/codex-install.ts")),N=await F(),H=X(z),B=J(z);W(z);let $=G(z),y=M()?K(z):[];if(Z){if($.added||$.updated)console.log(`[beacon] ${$.added?"registered":"updated"} Beacon MCP in ${$.path} \u2014 restart your agent CLI`+($.updated?" to apply the longer plan-review timeout.":" to use @beacon mentions."))}else{console.log(`
+  \u25C9 Beacon setup \xB7 ${z}`),console.log(`  \u2713 skill:  ${H}`),console.log(`  \u2713 skill:  ${B}`);for(let I of y)console.log(`  \u2713 skill:  ${I}`);console.log(`  ${$.added?"\u2713 added ":"\xB7 kept  "} Beacon MCP in ${$.path}`),console.log(`  \u2192 in this repo, run /beacon-init in your agent (Claude Code or Codex) to map the repo.
+`)}return{initSkill:H,refreshSkill:B,mcp:$,codexSkills:y,heal:N}}function D(){try{return _("git rev-parse --show-toplevel",{cwd:P,stdio:["ignore","pipe","ignore"]}).toString().trim()}catch{return""}}function k(z){try{return process.kill(z,0),!0}catch{return!1}}function R(z){try{return JSON.parse(d(z,"utf8"))}catch{return null}}async function S(z){try{return(await fetch(z)).ok}catch{return!1}}async function n(z,Z=60){for(let X=0;X<Z;X++){if(await S(z))return!0;await new Promise((J)=>setTimeout(J,500))}return!1}function i(z){g(v,{recursive:!0});let Z=c(U(v,"server.log"),"a"),X={...process.env,PORT:z,BEACON_NO_OPEN:"1",BEACON_MIGRATIONS_DIR:U(V,"drizzle")};delete X.BEACON_REPO,delete X.BEACON_DATA_DIR,delete X.DATABASE_URL;let K=m("bun",O?["run","start"]:["run","dev"],{cwd:V,env:X,detached:!0,stdio:["ignore",Z,Z]});K.unref();let G={pid:K.pid??0,port:z};return p(A,JSON.stringify(G)),G}async function s(){let z=R(A);if(z&&k(z.pid)&&await S(`http://localhost:${z.port}/api/workspace`))return z.port;let{findAvailablePort:Z}=await import(Q("lib/daemon-port.ts")),X=String(await Z(Number(w)));console.log(X===w?"[beacon] starting the Beacon server\u2026":`[beacon] port ${w} is busy \u2014 starting the Beacon server on port ${X}\u2026`);let{port:J}=i(X);if(!await n(`http://localhost:${J}/api/workspace`))console.log("[beacon] (server is taking a while \u2014 it may still be compiling)");return J}function o(z){if(process.env.BEACON_NO_OPEN)return;let Z=L()==="darwin"?"open":L()==="win32"?"start":"xdg-open";try{_(`${Z} "${z}"`,{stdio:"ignore"})}catch{}}async function r(){let z=D()||P,{registerWorkspaceExplicit:Z,idForPath:X,dataDirFor:J,ensureWorkspaceDb:K,isRegistrableWorkspacePath:G}=await import(Q("lib/workspaces.ts"));if(!G(z))console.error(`[beacon] refusing to open Beacon in ${z} \u2014 that's your home directory, not a project.
+`+"          cd into a repo (or run `git init` there) and try again."),process.exit(1);let W=X(z),F=J(W),M=!u(U(F,"db.sqlite"));if(M)console.log(`[beacon] first run for ${z} \u2014 creating database\u2026`);let N=await K(W);if(!N.ok)console.error(`[beacon] failed to provision database: ${N.error}`);if(M)console.log("[beacon] tip: already have code here? run `/beacon-init` in your agent (Claude Code or Codex) to map the project.");let{heal:H}=await E(z,!0),B=[];if(H.skillsAdded.length)B.push(`skills ${H.skillsAdded.join(", ")}`);if(H.hooksAdded)B.push(`${H.hooksAdded} Claude Code hook${H.hooksAdded===1?"":"s"}`);if(H.claudeMdBlockTouched)B.push("global CLAUDE.md block");if(B.length)console.log(`[beacon] wired into ~/.claude/: ${B.join(" + ")}.`);let $=H.codex;if($){let q=[];if($.skillsAdded.length)q.push(`skills ${$.skillsAdded.join(", ")}`);if($.hooksAdded)q.push(`${$.hooksAdded} Codex hook${$.hooksAdded===1?"":"s"}`);if($.agentsMdBlockTouched)q.push("global AGENTS.md block");if($.mcp.added)q.push("MCP entry in config.toml");if(q.length)console.log(`[beacon] wired into ~/.codex/: ${q.join(" + ")}.`);if($.mcp.error)console.log(`[beacon] codex MCP not wired: ${$.mcp.error}`)}try{let q=await import(Q("lib/telemetry.ts"));if(!q.telemetryStatus().machineId){let b=q.telemetryStatus().enabled;console.log(`[beacon] telemetry: Beacon sends an anonymous heartbeat (random machine id, version, OS,
 `+`         architecture \u2014 never repo names, paths, or code) at most every 12h to count
 `+`         active installs. Opt out: \`beacon telemetry off\`, BEACON_TELEMETRY_DISABLED=1,
          or DO_NOT_TRACK=1. Details: beacon telemetry status.${b?"":" (currently disabled by your env)"}`),q.ensureTelemetryId()}}catch{}Z(z);let I=`http://localhost:${await s()}`,C=`/map?ws=${W}`,h=`${I}/api/workspace/activate?id=${W}&redirect=${encodeURIComponent(C)}`;if(console.log(`
@@ -12,8 +12,8 @@ import{execSync as _,spawn as m}from"child_process";import{existsSync as u,mkdir
   data:  ${F}
   url:   ${I}
 `),console.log("  (the server keeps running in the background \u2014 `beacon stop` to stop it)\n"),await fetch(`${I}/api/tab/presence`,{headers:{"x-beacon-workspace":W}}).then((q)=>q.json()).then((q)=>!!q?.live).catch(()=>!1))await fetch(`${I}/api/tab/nav`,{method:"POST",headers:{"content-type":"application/json","x-beacon-workspace":W},body:JSON.stringify({path:C})}).catch(()=>{}),console.log(`  \u21BB reusing your open Beacon tab \u2014 switch to your browser.
-`);else o(h)}function x(){return R(U(V,"package.json"))?.version??"0.0.0"}async function e(z){let Z=await import($("lib/telemetry.ts"));if(z==="on"||z==="off"){Z.setTelemetryEnabled(z==="on"),console.log(`[beacon] telemetry ${z==="on"?"enabled":"disabled"}.`);return}if(z&&z!=="status")console.error("usage: beacon telemetry [on|off|status]"),process.exit(1);let X=Z.telemetryStatus(),J=X.reason==="env:BEACON_TELEMETRY_DISABLED"?" (BEACON_TELEMETRY_DISABLED=1)":X.reason==="env:DO_NOT_TRACK"?" (DO_NOT_TRACK)":X.reason==="preference"?" (beacon telemetry off)":"";if(console.log(`
+`);else o(h)}function x(){return R(U(V,"package.json"))?.version??"0.0.0"}async function e(z){let Z=await import(Q("lib/telemetry.ts"));if(z==="on"||z==="off"){Z.setTelemetryEnabled(z==="on"),console.log(`[beacon] telemetry ${z==="on"?"enabled":"disabled"}.`);return}if(z&&z!=="status")console.error("usage: beacon telemetry [on|off|status]"),process.exit(1);let X=Z.telemetryStatus(),J=X.reason==="env:BEACON_TELEMETRY_DISABLED"?" (BEACON_TELEMETRY_DISABLED=1)":X.reason==="env:DO_NOT_TRACK"?" (DO_NOT_TRACK)":X.reason==="preference"?" (beacon telemetry off)":"";if(console.log(`
   \u25C9 Beacon telemetry: ${X.enabled?"enabled":"disabled"}${J}`),console.log(`  machine id: ${X.machineId??"(not generated yet \u2014 created on first `beacon` run)"}`),X.machineId)console.log(`  payload:    ${JSON.stringify(Z.heartbeatPayload(x()))}`);console.log(`  sent at most every 12h while the daemon runs \u2014 never repo names, paths, or code.
-`+"  toggle: `beacon telemetry on|off` \xB7 env: BEACON_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1\n")}async function zz(z){let Z=x(),{INSTALL_COMMAND:X,NPM_LATEST_URL:J}=await import($("lib/release.ts"));if(L()==="win32"){console.log(`[beacon] current version v${Z}.`),console.log(`[beacon] on Windows, update with your package manager:
-  npm i -g trybeacon@latest`);return}let K=null;try{let G=await fetch(J);if(G.ok)K=(await G.json()).version??null}catch{}if(K&&!z){let{isNewerVersion:G}=await import($("lib/semver.ts"));if(!G(K,Z)){console.log(`[beacon] already on the latest version (v${Z}).`),console.log("         run `beacon update --force` to reinstall anyway.");return}}console.log(K?`[beacon] updating Beacon v${Z} \u2192 v${K}\u2026`:`[beacon] reinstalling Beacon (current v${Z})\u2026`);try{_(X,{stdio:"inherit"})}catch{console.error(`[beacon] update failed. Run it manually:
+`+"  toggle: `beacon telemetry on|off` \xB7 env: BEACON_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1\n")}async function zz(z){let Z=x(),{INSTALL_COMMAND:X,NPM_LATEST_URL:J}=await import(Q("lib/release.ts"));if(L()==="win32"){console.log(`[beacon] current version v${Z}.`),console.log(`[beacon] on Windows, update with your package manager:
+  npm i -g trybeacon@latest`);return}let K=null;try{let G=await fetch(J);if(G.ok)K=(await G.json()).version??null}catch{}if(K&&!z){let{isNewerVersion:G}=await import(Q("lib/semver.ts"));if(!G(K,Z)){console.log(`[beacon] already on the latest version (v${Z}).`),console.log("         run `beacon update --force` to reinstall anyway.");return}}console.log(K?`[beacon] updating Beacon v${Z} \u2192 v${K}\u2026`:`[beacon] reinstalling Beacon (current v${Z})\u2026`);try{_(X,{stdio:"inherit"})}catch{console.error(`[beacon] update failed. Run it manually:
   ${X}`),process.exitCode=1;return}f(),console.log("[beacon] updated. Run `beacon` to relaunch on the new version.")}function f(){let z=R(A);if(z&&k(z.pid))try{try{process.kill(-z.pid)}catch{process.kill(z.pid)}console.log(`[beacon] stopped the server (pid ${z.pid}).`)}catch{console.log("[beacon] could not stop the server.")}else console.log("[beacon] no server running.")}

package/dist/bin/doctor.js

@@ -1,21 +1,22 @@
 #!/usr/bin/env bun
 // @bun
-var CZ=Object.defineProperty;var MZ=(Q)=>Q;function fZ(Q,Z){this[Q]=MZ.bind(null,Z)}var WQ=(Q,Z)=>{for(var $ in Z)CZ(Q,$,{get:Z[$],enumerable:!0,configurable:!0,set:fZ.bind(Z,$)})};var g=(Q,Z)=>()=>(Q&&(Z=Q(Q=0)),Z);var vQ={};WQ(vQ,{removeRepoAssets:()=>IZ,installRefreshSkill:()=>wZ,installPlanSkill:()=>TZ,installInitSkill:()=>uZ,installCodexRepoSkills:()=>gZ,ensureWorkflowDoc:()=>RZ,ensureMcp:()=>EZ,auditRepo:()=>BQ,REFRESH_SKILL:()=>jQ,PLAN_SKILL:()=>hQ,INIT_SKILL:()=>HQ});import{existsSync as u,mkdirSync as k,readFileSync as G,rmSync as _,writeFileSync as N}from"fs";import{join as q}from"path";function uZ(Q){let Z=q(Q,".claude","skills","beacon-init");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,HQ),$}function wZ(Q){let Z=q(Q,".claude","skills","beacon-refresh");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,jQ),$}function TZ(Q){let Z=q(Q,".claude","skills","beacon-plan");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,hQ),$}function gZ(Q){let Z=[];for(let $ of FZ){let J=q(Q,".agents","skills",$.name);k(J,{recursive:!0});let Y=q(J,"SKILL.md");N(Y,$.body()),Z.push(Y)}return Z}function RZ(Q){let Z=q(Q,"AGENTS.md"),$="";try{$=G(Z,"utf8")}catch{}let J=new RegExp(`${L}[\\s\\S]*?${PQ}`);$=J.test($)?$.replace(J,SQ):`${$.trim()}
+var MZ=Object.defineProperty;var uZ=(Q)=>Q;function wZ(Q,Z){this[Q]=uZ.bind(null,Z)}var jQ=(Q,Z)=>{for(var $ in Z)MZ(Q,$,{get:Z[$],enumerable:!0,configurable:!0,set:wZ.bind(Z,$)})};var u=(Q,Z)=>()=>(Q&&(Z=Q(Q=0)),Z);var b0=1500,L0=480000,_0=1800000,L=3600000,k0=3000;var hQ=()=>{};var GQ={};jQ(GQ,{removeRepoAssets:()=>OZ,installRefreshSkill:()=>TZ,installPlanSkill:()=>RZ,installInitSkill:()=>FZ,installCodexRepoSkills:()=>EZ,ensureWorkflowDoc:()=>IZ,ensureMcp:()=>DZ,auditRepo:()=>NQ,REFRESH_SKILL:()=>vQ,PLAN_SKILL:()=>pQ,INIT_SKILL:()=>PQ});import{existsSync as w,mkdirSync as k,readFileSync as x,rmSync as _,writeFileSync as N}from"fs";import{join as q}from"path";function FZ(Q){let Z=q(Q,".claude","skills","beacon-init");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,PQ),$}function TZ(Q){let Z=q(Q,".claude","skills","beacon-refresh");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,vQ),$}function RZ(Q){let Z=q(Q,".claude","skills","beacon-plan");k(Z,{recursive:!0});let $=q(Z,"SKILL.md");return N($,pQ),$}function EZ(Q){let Z=[];for(let $ of gZ){let J=q(Q,".agents","skills",$.name);k(J,{recursive:!0});let Y=q(J,"SKILL.md");N(Y,$.body()),Z.push(Y)}return Z}function IZ(Q){let Z=q(Q,"AGENTS.md"),$="";try{$=x(Z,"utf8")}catch{}let J=new RegExp(`${S}[\\s\\S]*?${BQ}`);$=J.test($)?$.replace(J,mQ):`${$.trim()}
 
-${SQ}
+${mQ}
 `.trimStart(),N(Z,$.endsWith(`
 `)?$:`${$}
-`);let Y=q(Q,"CLAUDE.md"),V="";try{V=G(Y,"utf8")}catch{}if(!/@AGENTS\.md/.test(V))N(Y,`${V?`${V.trim()}
+`);let Y=q(Q,"CLAUDE.md"),V="";try{V=x(Y,"utf8")}catch{}if(!/@AGENTS\.md/.test(V))N(Y,`${V?`${V.trim()}
 
 `:""}@AGENTS.md
-`)}function EZ(Q){let Z=q(Q,".mcp.json"),$={};try{$=JSON.parse(G(Z,"utf8"))}catch{}if($.mcpServers=$.mcpServers??{},$.mcpServers.beacon)return{path:Z,added:!1};return $.mcpServers.beacon={command:"beacon",args:["mcp"]},N(Z,JSON.stringify($,null,2)+`
-`),{path:Z,added:!0}}function BQ(Q){let Z=q(Q,".mcp.json"),$=!1;try{$=!!JSON.parse(G(Z,"utf8")).mcpServers?.beacon}catch{}let J=!1;try{J=G(q(Q,"AGENTS.md"),"utf8").includes(L)}catch{}let Y=!1;try{Y=/@AGENTS\.md/.test(G(q(Q,"CLAUDE.md"),"utf8"))}catch{}return{repo:Q,mcpRegistered:$,agentsMdBlock:J,claudeMdImport:Y,skills:{"beacon-init":u(q(Q,".claude","skills","beacon-init","SKILL.md")),"beacon-refresh":u(q(Q,".claude","skills","beacon-refresh","SKILL.md"))},codexSkills:{"beacon-init":u(q(Q,".agents","skills","beacon-init","SKILL.md")),"beacon-refresh":u(q(Q,".agents","skills","beacon-refresh","SKILL.md"))}}}function IZ(Q){let Z=[];for(let z of["beacon-init","beacon-refresh","beacon-db-design"]){let P=q(Q,".claude","skills",z);if(u(P))_(P,{recursive:!0,force:!0}),Z.push(z)}for(let z of["beacon-init","beacon-refresh"]){let P=q(Q,".agents","skills",z);if(u(P))_(P,{recursive:!0,force:!0}),Z.push(`codex:${z}`)}let $=!1,J=q(Q,".mcp.json");try{let z=JSON.parse(G(J,"utf8"));if(z.mcpServers?.beacon){if(delete z.mcpServers.beacon,$=!0,z.mcpServers&&Object.keys(z.mcpServers).length===0)delete z.mcpServers;if(Object.keys(z).length===0)_(J,{force:!0});else N(J,JSON.stringify(z,null,2)+`
-`)}}catch{}let Y=!1,V=q(Q,"AGENTS.md");try{let z=G(V,"utf8"),P=new RegExp(`\\n?${L}[\\s\\S]*?${PQ}\\n?`);if(P.test(z)){let UQ=z.replace(P,`
+`)}function DZ(Q){let Z=q(Q,".mcp.json"),$={};try{$=JSON.parse(x(Z,"utf8"))}catch{}$.mcpServers=$.mcpServers??{};let J=$.mcpServers.beacon;if(J){if(!J.timeout||J.timeout<L)return J.timeout=L,N(Z,JSON.stringify($,null,2)+`
+`),{path:Z,added:!1,updated:!0};return{path:Z,added:!1,updated:!1}}return $.mcpServers.beacon={command:"beacon",args:["mcp"],timeout:L},N(Z,JSON.stringify($,null,2)+`
+`),{path:Z,added:!0,updated:!1}}function NQ(Q){let Z=q(Q,".mcp.json"),$=!1;try{$=!!JSON.parse(x(Z,"utf8")).mcpServers?.beacon}catch{}let J=!1;try{J=x(q(Q,"AGENTS.md"),"utf8").includes(S)}catch{}let Y=!1;try{Y=/@AGENTS\.md/.test(x(q(Q,"CLAUDE.md"),"utf8"))}catch{}return{repo:Q,mcpRegistered:$,agentsMdBlock:J,claudeMdImport:Y,skills:{"beacon-init":w(q(Q,".claude","skills","beacon-init","SKILL.md")),"beacon-refresh":w(q(Q,".claude","skills","beacon-refresh","SKILL.md"))},codexSkills:{"beacon-init":w(q(Q,".agents","skills","beacon-init","SKILL.md")),"beacon-refresh":w(q(Q,".agents","skills","beacon-refresh","SKILL.md"))}}}function OZ(Q){let Z=[];for(let z of["beacon-init","beacon-refresh","beacon-db-design"]){let P=q(Q,".claude","skills",z);if(w(P))_(P,{recursive:!0,force:!0}),Z.push(z)}for(let z of["beacon-init","beacon-refresh"]){let P=q(Q,".agents","skills",z);if(w(P))_(P,{recursive:!0,force:!0}),Z.push(`codex:${z}`)}let $=!1,J=q(Q,".mcp.json");try{let z=JSON.parse(x(J,"utf8"));if(z.mcpServers?.beacon){if(delete z.mcpServers.beacon,$=!0,z.mcpServers&&Object.keys(z.mcpServers).length===0)delete z.mcpServers;if(Object.keys(z).length===0)_(J,{force:!0});else N(J,JSON.stringify(z,null,2)+`
+`)}}catch{}let Y=!1,V=q(Q,"AGENTS.md");try{let z=x(V,"utf8"),P=new RegExp(`\\n?${S}[\\s\\S]*?${BQ}\\n?`);if(P.test(z)){let HQ=z.replace(P,`
 `).replace(/\n{3,}/g,`
 
-`).trimStart();N(V,UQ.endsWith(`
-`)?UQ:`${UQ}
-`),Y=!0}}catch{}let X=!1,U=q(Q,"CLAUDE.md");try{let z=G(U,"utf8"),P=z.replace(/^[ \t]*@AGENTS\.md[ \t]*\n?/m,"");if(P!==z){if(!P.trim())_(U,{force:!0});else N(U,P);X=!0}}catch{}return{skillsRemoved:Z,mcpUnregistered:$,agentsBlockRemoved:Y,claudeImportRemoved:X}}var HQ=`---
+`).trimStart();N(V,HQ.endsWith(`
+`)?HQ:`${HQ}
+`),Y=!0}}catch{}let X=!1,U=q(Q,"CLAUDE.md");try{let z=x(U,"utf8"),P=z.replace(/^[ \t]*@AGENTS\.md[ \t]*\n?/m,"");if(P!==z){if(!P.trim())_(U,{force:!0});else N(U,P);X=!0}}catch{}return{skillsRemoved:Z,mcpUnregistered:$,agentsBlockRemoved:Y,claudeImportRemoved:X}}var PQ=`---
 name: beacon-init
 description: Read this repository and map its architecture, schema, and roadmap into Beacon (the local visual planning panel). Use when the user runs /beacon-init, asks to "set up Beacon for this repo", or asks to initialize/bootstrap Beacon's map of this codebase.
 ---
@@ -54,7 +55,7 @@ A single \`beacon_init_persist\` MCP tool call with:
 If \`beacon_init_persist\` isn't available, the Beacon panel isn't running in this repo. Tell the user to run \`beacon\` here first, then re-invoke /beacon-init.
 
 After the tool returns, tell the user the counts (components / roadmap / tables / endpoints) and point them at the running Beacon panel.
-`,jQ=`---
+`,vQ=`---
 name: beacon-refresh
 description: Re-survey the repo and update Beacon's architecture / schema / endpoints map after /beacon-init was already run \u2014 picks up new components, removed ones, schema changes, and new routes. Use when the user runs /beacon-refresh or asks to "refresh", "update", "re-sync", or "bring Beacon up to date" with the current code.
 ---
@@ -101,7 +102,7 @@ The one caveat: if the user manually edited an INIT-source node on the canvas (e
 If \`beacon_entities\` or \`beacon_init_persist\` isn't available, the Beacon panel isn't running in this repo. Tell the user to run \`beacon\` here first, then re-invoke /beacon-refresh.
 
 After the tool returns, report the final counts plus a one-line summary of the diff you surfaced.
-`,hQ=`---
+`,pQ=`---
 name: beacon-plan
 description: Present your current plan or approach to the user on Beacon's /plan canvas for review \u2014 instead of asking for approval in prose. Use when the user says "present the plan", "show me the plan", "let me see it / the plan", or whenever you are about to end a turn asking whether to proceed with a plan, design, or approach.
 ---
@@ -129,6 +130,12 @@ Beacon extracts that block deterministically, strips it from the prose, and rend
 board on /plan. The board is built ONLY from the block \u2014 prose is never parsed \u2014 so mirror EVERY
 table/endpoint/feature you mention in the prose into the block, or that board will be empty.
 
+- **Declare your scope.** List the repo-relative files this plan will touch in a top-level
+  \`"contract"\` array in the block (or the \`contract\` arg of \`beacon_propose_plan\`). When the user
+  has the plan scope-guard enabled, those files are frozen at approval and you're held to them while
+  implementing \u2014 editing an undeclared file pauses for the user's authorization (which then adds it
+  to the contract). Harmless when the guard is off. Declare the files you genuinely expect to edit.
+
 \`beacon_present_plan\` opens /plan and BLOCKS until the user clicks Approve / Discard / submits
 feedback, then returns their verdict. Implement code or migrations ONLY after it returns approval.
 If it returns feedback, revise and call it again.
@@ -143,7 +150,7 @@ If it returns feedback, revise and call it again.
 If \`beacon_present_plan\` isn't available, the panel isn't wired here \u2014 fall back to ExitPlanMode
 with the same \`\`\`beacon block (Claude Code only; Codex has no ExitPlanMode), or tell the user to
 run \`beacon\` in this repo once.
-`,FZ,L="<!-- beacon:workflow:start -->",PQ="<!-- beacon:workflow:end -->",SQ;var S=g(()=>{FZ=[{name:"beacon-init",body:()=>HQ},{name:"beacon-refresh",body:()=>jQ}];SQ=`${L}
+`,gZ,S="<!-- beacon:workflow:start -->",BQ="<!-- beacon:workflow:end -->",mQ;var h=u(()=>{hQ();gZ=[{name:"beacon-init",body:()=>PQ},{name:"beacon-refresh",body:()=>vQ}];mQ=`${S}
 ## Beacon \u2014 feature workflow
 
 This project uses Beacon (a local planning/visualization panel; run \`beacon\` to open it). When you start work on a FEATURE \u2014 whether referenced via an \`@beacon:feature://\u2026\` mention, an \`@beacon:note://\u2026\` note the user wrote in the Notes panel (treat its checkbox \`- [ ]\` todos as subtasks and order features by their dependencies), or just described in chat \u2014 follow these steps in order:
@@ -201,18 +208,18 @@ Register them all in that single batched call. If a plan added five features, th
 If the feature added or materially changed a REAL architectural component (a subsystem \u2014 NOT a file), also pass \`architecture: [{ title, domain, role, \u2026 }]\` so the Architecture map stays accurate. It upserts curated components by title; never list files as components. If you found a bug or something worth investigating in a component's code, add \`bugs: [{ note }]\` to its architecture entry \u2014 it renders as a bug flag on the node (attributed to the agent); identical open flags are not duplicated. Only flag what you actually saw in the code.
 
 Pull raw planning data anytime with \`beacon_entities\` (features / architecture / tables / endpoints).
-${PQ}`});import{existsSync as mQ,mkdirSync as NQ,readFileSync as m,rmSync as DZ,writeFileSync as p}from"fs";import{dirname as pQ,join as h}from"path";function xQ(Q){try{return JSON.parse(m(Q,"utf8"))}catch{return{}}}function cQ(Q,Z){NQ(pQ(Q),{recursive:!0}),p(Q,JSON.stringify(Z,null,2)+`
-`)}function l(Q,Z){let $=xQ(Q);$.hooks=$.hooks??{},$.hooks[Z.event]=$.hooks[Z.event]??[];let J=$.hooks[Z.event];if(J.some((V)=>V.matcher===Z.matcher&&V.hooks?.some((X)=>X.command===Z.command)))return!1;return J.push({matcher:Z.matcher,hooks:[{type:"command",command:Z.command}]}),cQ(Q,$),!0}function n(Q,Z){return(xQ(Q).hooks?.[Z.event]??[]).some((Y)=>Y.hooks?.some((V)=>V.command===Z.command))}function s(Q,Z){let $=xQ(Q),J=$.hooks?.[Z.event];if(!J)return!1;let Y=!1,V=J.map((X)=>{let U=X.hooks?.length??0,z=(X.hooks??[]).filter((P)=>P.command!==Z.command);if(z.length!==U)Y=!0;return{...X,hooks:z}}).filter((X)=>(X.hooks??[]).length>0);if(!Y)return!1;if(V.length)$.hooks[Z.event]=V;else delete $.hooks[Z.event];if($.hooks&&Object.keys($.hooks).length===0)delete $.hooks;return cQ(Q,$),!0}function t(Q,Z,$,J){let Y=`${Z}
+${BQ}`});import{existsSync as cQ,mkdirSync as xQ,readFileSync as p,rmSync as yZ,writeFileSync as c}from"fs";import{dirname as nQ,join as m}from"path";function KQ(Q){try{return JSON.parse(p(Q,"utf8"))}catch{return{}}}function lQ(Q,Z){xQ(nQ(Q),{recursive:!0}),c(Q,JSON.stringify(Z,null,2)+`
+`)}function l(Q,Z){let $=KQ(Q);$.hooks=$.hooks??{},$.hooks[Z.event]=$.hooks[Z.event]??[];let J=$.hooks[Z.event];if(J.some((V)=>V.matcher===Z.matcher&&V.hooks?.some((X)=>X.command===Z.command)))return!1;return J.push({matcher:Z.matcher,hooks:[{type:"command",command:Z.command}]}),lQ(Q,$),!0}function s(Q,Z){return(KQ(Q).hooks?.[Z.event]??[]).some((Y)=>Y.hooks?.some((V)=>V.command===Z.command))}function t(Q,Z){let $=KQ(Q),J=$.hooks?.[Z.event];if(!J)return!1;let Y=!1,V=J.map((X)=>{let U=X.hooks?.length??0,z=(X.hooks??[]).filter((P)=>P.command!==Z.command);if(z.length!==U)Y=!0;return{...X,hooks:z}}).filter((X)=>(X.hooks??[]).length>0);if(!Y)return!1;if(V.length)$.hooks[Z.event]=V;else delete $.hooks[Z.event];if($.hooks&&Object.keys($.hooks).length===0)delete $.hooks;return lQ(Q,$),!0}function a(Q,Z,$,J){let Y=`${Z}
 ${J.trim()}
-${$}`,V="";try{V=m(Q,"utf8")}catch{}let X=new RegExp(`${Z}[\\s\\S]*?${$}`);V=X.test(V)?V.replace(X,Y):V.trim()?`${V.trim()}
+${$}`,V="";try{V=p(Q,"utf8")}catch{}let X=new RegExp(`${Z}[\\s\\S]*?${$}`);V=X.test(V)?V.replace(X,Y):V.trim()?`${V.trim()}
 
 ${Y}
 `:`${Y}
-`,NQ(pQ(Q),{recursive:!0}),p(Q,V.endsWith(`
+`,xQ(nQ(Q),{recursive:!0}),c(Q,V.endsWith(`
 `)?V:`${V}
-`)}function R(Q,Z){try{return m(Q,"utf8").includes(Z)}catch{return!1}}function a(Q,Z,$){let J="";try{J=m(Q,"utf8")}catch{return!1}let Y=new RegExp(`${Z}[\\s\\S]*?${$}\\n?`);if(!Y.test(J))return!1;let V=J.replace(Y,"").replace(/\n{3,}/g,`
+`)}function g(Q,Z){try{return p(Q,"utf8").includes(Z)}catch{return!1}}function d(Q,Z,$){let J="";try{J=p(Q,"utf8")}catch{return!1}let Y=new RegExp(`${Z}[\\s\\S]*?${$}\\n?`);if(!Y.test(J))return!1;let V=J.replace(Y,"").replace(/\n{3,}/g,`
 
-`).trimStart();return p(Q,V),!0}function d(Q,Z,$){let J=h(Q,Z);NQ(J,{recursive:!0});let Y=h(J,"SKILL.md");return p(Y,$),Y}function E(Q,Z){return mQ(h(Q,Z,"SKILL.md"))}function r(Q,Z){let $=h(Q,Z);if(!mQ($))return!1;return DZ($,{recursive:!0,force:!0}),!0}var B,c=`## Beacon (visual planning panel)
+`).trimStart();return c(Q,V),!0}function r(Q,Z,$){let J=m(Q,Z);xQ(J,{recursive:!0});let Y=m(J,"SKILL.md");return c(Y,$),Y}function E(Q,Z){return cQ(m(Q,Z,"SKILL.md"))}function o(Q,Z){let $=m(Q,Z);if(!cQ($))return!1;return yZ($,{recursive:!0,force:!0}),!0}var v,n=`## Beacon (visual planning panel)
 
 This machine has Beacon installed \u2014 a local visual planning surface for the terminal-side
 agent. Beacon proposes feature plans (roadmap features + DB schema + endpoints) via MCP,
@@ -233,19 +240,19 @@ the user reviews on a canvas at /plan, and feedback flows back as the next round
 Feedback bundles inline annotations on the markdown PLUS any edits the user made directly
 on the /map and /db boards (added features, attached subtasks, edited columns, new
 endpoints). Treat board edits as the user's revision intent \u2014 re-propose matching them
-verbatim. Do NOT implement until the tool returns approval.`;var GQ=g(()=>{B=["beacon-init","beacon-refresh","beacon-plan"]});import{mkdirSync as OZ,renameSync as AZ,rmSync as yZ,writeFileSync as bZ}from"fs";import{dirname as _Z}from"path";function o(Q,Z){OZ(_Z(Q),{recursive:!0});let $=`${Q}.tmp`;try{bZ($,Z),AZ($,Q)}catch(J){throw yZ($,{force:!0}),J}}function S0(Q,Z,$=!1){o(Q,JSON.stringify(Z,null,$?2:void 0))}var lQ=()=>{};var oQ={};WQ(oQ,{setupCodexAssets:()=>SZ,removeCodexMcp:()=>rQ,removeCodexArtifacts:()=>hZ,hasCodexMcp:()=>fQ,ensureCodexMcp:()=>dQ,codexMcpProblem:()=>uQ,codexDetected:()=>$Q,auditCodex:()=>wQ,CODEX_HOOKS:()=>C});import{readFileSync as ZQ}from"fs";import{homedir as kZ}from"os";import{join as O}from"path";function nQ(){return process.env.HOME||process.env.USERPROFILE||kZ()}function $Q(){if(process.env.BEACON_CODEX==="1")return!0;if(process.env.BEACON_CODEX==="0")return!1;if(KQ===void 0)KQ=Bun.which("codex")!==null;return KQ}function D(Q){try{return Bun.TOML.parse(Q)}catch{return null}}function fQ(){try{return Boolean(D(ZQ(w(),"utf8"))?.mcp_servers?.beacon)}catch{return!1}}function uQ(){let Q="";try{Q=ZQ(w(),"utf8")}catch{return null}let Z=D(Q);if(!Z)return`~/.codex/config.toml does not parse \u2014 ${I}`;if(Z.mcp_servers?.beacon)return null;if(/^\s*mcp_servers\s*=/m.test(Q))return`mcp_servers is an inline table \u2014 ${I}`;return null}function dQ(){let Q="",Z=!1;try{Q=ZQ(w(),"utf8"),Z=!0}catch{}if(Z){let V=D(Q);if(!V)return{added:!1,error:`~/.codex/config.toml does not parse \u2014 ${I}`};if(V.mcp_servers?.beacon)return{added:!1};if(/^\s*mcp_servers\s*=/m.test(Q))return{added:!1,error:`mcp_servers is an inline table \u2014 ${I}`}}let $=!Q?"":Q.endsWith(`
+verbatim. Do NOT implement until the tool returns approval.`;var CQ=u(()=>{v=["beacon-init","beacon-refresh","beacon-plan"]});import{mkdirSync as AZ,renameSync as bZ,rmSync as LZ,writeFileSync as _Z}from"fs";import{dirname as kZ}from"path";function i(Q,Z){AZ(kZ(Q),{recursive:!0});let $=`${Q}.tmp`;try{_Z($,Z),bZ($,Q)}catch(J){throw LZ($,{force:!0}),J}}function a0(Q,Z,$=!1){i(Q,JSON.stringify(Z,null,$?2:void 0))}var sQ=()=>{};var eQ={};jQ(eQ,{setupCodexAssets:()=>mZ,removeCodexMcp:()=>iQ,removeCodexArtifacts:()=>pZ,hasCodexMcp:()=>wQ,ensureCodexMcp:()=>oQ,codexMcpProblem:()=>FQ,codexDetected:()=>JQ,auditCodex:()=>TQ,CODEX_HOOKS:()=>C});import{readFileSync as $Q}from"fs";import{homedir as SZ}from"os";import{join as O}from"path";function tQ(){return process.env.HOME||process.env.USERPROFILE||SZ()}function JQ(){if(process.env.BEACON_CODEX==="1")return!0;if(process.env.BEACON_CODEX==="0")return!1;if(fQ===void 0)fQ=Bun.which("codex")!==null;return fQ}function D(Q){try{return Bun.TOML.parse(Q)}catch{return null}}function wQ(){try{return Boolean(D($Q(F(),"utf8"))?.mcp_servers?.beacon)}catch{return!1}}function FQ(){let Q="";try{Q=$Q(F(),"utf8")}catch{return null}let Z=D(Q);if(!Z)return`~/.codex/config.toml does not parse \u2014 ${I}`;if(Z.mcp_servers?.beacon)return null;if(/^\s*mcp_servers\s*=/m.test(Q))return`mcp_servers is an inline table \u2014 ${I}`;return null}function oQ(){let Q="",Z=!1;try{Q=$Q(F(),"utf8"),Z=!0}catch{}if(Z){let V=D(Q);if(!V)return{added:!1,error:`~/.codex/config.toml does not parse \u2014 ${I}`};if(V.mcp_servers?.beacon)return{added:!1};if(/^\s*mcp_servers\s*=/m.test(Q))return{added:!1,error:`mcp_servers is an inline table \u2014 ${I}`}}let $=!Q?"":Q.endsWith(`
 `)?`
 `:`
 
-`,J=Q+$+LZ;if(D(J)?.mcp_servers?.beacon?.command!=="beacon")return{added:!1,error:`could not safely append [mcp_servers.beacon] \u2014 ${I}`};return o(w(),J),{added:!0}}function rQ(){let Q="";try{Q=ZQ(w(),"utf8")}catch{return{removed:!1}}let Z=Q.split(`
-`),$=Z.indexOf(tQ);if($===-1)return{removed:!1,skipped:fQ()};let J=Z.indexOf(aQ,$);if(J===-1)return{removed:!1,skipped:!0};Z.splice($,J-$+1);let Y=Z.join(`
+`,J=Q+$+hZ;if(D(J)?.mcp_servers?.beacon?.command!=="beacon")return{added:!1,error:`could not safely append [mcp_servers.beacon] \u2014 ${I}`};return i(F(),J),{added:!0}}function iQ(){let Q="";try{Q=$Q(F(),"utf8")}catch{return{removed:!1}}let Z=Q.split(`
+`),$=Z.indexOf(dQ);if($===-1)return{removed:!1,skipped:wQ()};let J=Z.indexOf(rQ,$);if(J===-1)return{removed:!1,skipped:!0};Z.splice($,J-$+1);let Y=Z.join(`
 `).replace(/\n{3,}/g,`
 
-`).replace(/^\n+/,"");if(D(Y)===null)return{removed:!1,skipped:!0};return o(w(),Y),{removed:!0}}async function SZ(){let{INIT_SKILL:Q,REFRESH_SKILL:Z,PLAN_SKILL:$}=await Promise.resolve().then(() => (S(),vQ)),J={"beacon-init":Q,"beacon-refresh":Z,"beacon-plan":$},Y=[];for(let z of B){if(!E(e(),z))Y.push(z);d(e(),z,J[z])}let V=0;for(let z of C)if(l(MQ(),{event:z.event,matcher:z.matcher,command:z.command}))V++;let X=R(i(),QQ);t(i(),QQ,sQ,c);let U=dQ();return{skillsAdded:Y,hooksAdded:V,agentsMdBlockTouched:!X,mcp:U}}function wQ(){let Q={};for(let $ of B)Q[$]=E(e(),$);let Z={};for(let $ of C)Z[$.event]=n(MQ(),{event:$.event,command:$.command});return{detected:$Q(),skills:Q,hooks:Z,agentsMdBlock:R(i(),QQ),mcp:fQ()}}function hZ(){let Q=[];for(let Y of B)if(r(e(),Y))Q.push(Y);let Z=0;for(let Y of C)if(s(MQ(),{event:Y.event,command:Y.command}))Z++;let $=a(i(),QQ,sQ),J=rQ();return{skillsRemoved:Q,hooksRemoved:Z,agentsMdBlockRemoved:$,mcpRemoved:J.removed,mcpSkipped:J.skipped}}var CQ=()=>O(nQ(),".codex"),MQ=()=>O(CQ(),"hooks.json"),w=()=>O(CQ(),"config.toml"),i=()=>O(CQ(),"AGENTS.md"),e=()=>O(nQ(),".agents","skills"),QQ="<!-- beacon:global:start -->",sQ="<!-- beacon:global:end -->",C,KQ,tQ="# beacon:start (managed by Beacon \u2014 `beacon uninstall` removes this block)",aQ="# beacon:end",LZ,I="add it manually: codex mcp add beacon -- beacon mcp";var TQ=g(()=>{GQ();lQ();C=[{event:"PostToolUse",matcher:"apply_patch",command:"beacon hook",description:"Report file edits to Beacon's active feature so the map stays fresh."},{event:"UserPromptSubmit",matcher:"*",command:"beacon prompt",description:"On feature-y prompts in a Beacon-wired repo, remind the agent to run the context\u2192propose\u2192describe loop (no-op otherwise)."},{event:"Stop",matcher:"*",command:"beacon stop-hook",description:"When the agent ends a turn asking for plan approval in prose, nudge it to present the plan on Beacon's /plan canvas."}];LZ=`${tQ}
+`).replace(/^\n+/,"");if(D(Y)===null)return{removed:!1,skipped:!0};return i(F(),Y),{removed:!0}}async function mZ(){let{INIT_SKILL:Q,REFRESH_SKILL:Z,PLAN_SKILL:$}=await Promise.resolve().then(() => (h(),GQ)),J={"beacon-init":Q,"beacon-refresh":Z,"beacon-plan":$},Y=[];for(let z of v){if(!E(QQ(),z))Y.push(z);r(QQ(),z,J[z])}let V=0;for(let z of C)if(l(uQ(),{event:z.event,matcher:z.matcher,command:z.command}))V++;let X=g(e(),ZQ);a(e(),ZQ,aQ,n);let U=oQ();return{skillsAdded:Y,hooksAdded:V,agentsMdBlockTouched:!X,mcp:U}}function TQ(){let Q={};for(let $ of v)Q[$]=E(QQ(),$);let Z={};for(let $ of C)Z[$.event]=s(uQ(),{event:$.event,command:$.command});return{detected:JQ(),skills:Q,hooks:Z,agentsMdBlock:g(e(),ZQ),mcp:wQ()}}function pZ(){let Q=[];for(let Y of v)if(o(QQ(),Y))Q.push(Y);let Z=0;for(let Y of C)if(t(uQ(),{event:Y.event,command:Y.command}))Z++;let $=d(e(),ZQ,aQ),J=iQ();return{skillsRemoved:Q,hooksRemoved:Z,agentsMdBlockRemoved:$,mcpRemoved:J.removed,mcpSkipped:J.skipped}}var MQ=()=>O(tQ(),".codex"),uQ=()=>O(MQ(),"hooks.json"),F=()=>O(MQ(),"config.toml"),e=()=>O(MQ(),"AGENTS.md"),QQ=()=>O(tQ(),".agents","skills"),ZQ="<!-- beacon:global:start -->",aQ="<!-- beacon:global:end -->",C,fQ,dQ="# beacon:start (managed by Beacon \u2014 `beacon uninstall` removes this block)",rQ="# beacon:end",hZ,I="add it manually: codex mcp add beacon -- beacon mcp";var RQ=u(()=>{CQ();sQ();C=[{event:"PostToolUse",matcher:"apply_patch",command:"beacon hook",description:"Report file edits to Beacon's active feature so the map stays fresh."},{event:"UserPromptSubmit",matcher:"*",command:"beacon prompt",description:"On feature-y prompts in a Beacon-wired repo, remind the agent to run the context\u2192propose\u2192describe loop (no-op otherwise)."},{event:"Stop",matcher:"*",command:"beacon stop-hook",description:"When the agent ends a turn asking for plan approval in prose, nudge it to present the plan on Beacon's /plan canvas."}];hZ=`${dQ}
 [mcp_servers.beacon]
 command = "beacon"
 args = ["mcp"]
-${aQ}
-`});var JZ={};WQ(JZ,{provisionDb:()=>W0});import{createClient as eZ}from"@libsql/client";import{drizzle as Q0}from"drizzle-orm/libsql";import{migrate as Z0}from"drizzle-orm/libsql/migrator";import{readMigrationFiles as $0}from"drizzle-orm/migrator";import{dirname as IQ,join as J0}from"path";import{fileURLToPath as Y0}from"url";async function VQ(Q,Z){return(await Q.execute({sql:"SELECT 1 FROM sqlite_master WHERE type='table' AND name = ?",args:[Z]})).rows.length>0}async function X0(Q,Z){let $=await Q.execute(`PRAGMA table_info("${Z}")`);return new Set($.rows.map((J)=>String(J.name)))}async function $Z(Q){if(!await VQ(Q,"__drizzle_migrations"))return 0;let Z=await Q.execute('SELECT count(*) AS n FROM "__drizzle_migrations"');return Number(Z.rows[0]?.n??0)}async function U0(Q){for(let[Z,$]of Object.entries(q0)){if(!await VQ(Q,Z))continue;let J=await X0(Q,Z);for(let Y of $){if(!J.has(Y))continue;await Q.execute(`UPDATE "${Z}" SET "${Y}" = CAST((julianday("${Y}") - 2440587.5) * 86400000 AS INTEGER) WHERE typeof("${Y}") = 'text'`)}}}async function W0(Q,Z=z0){let $=eZ({url:Q});try{await $.execute("PRAGMA journal_mode = WAL;"),await $.execute("PRAGMA foreign_keys = ON;"),await $.execute("PRAGMA busy_timeout = 5000;");let J=await VQ($,"__drizzle_migrations"),Y=await VQ($,"Node"),V=!1;if(Y&&!J){let U=$0({migrationsFolder:Z})[0];if(U)await $.execute('CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (id SERIAL PRIMARY KEY, hash text NOT NULL, created_at numeric)'),await $.execute({sql:'INSERT INTO "__drizzle_migrations" ("hash", "created_at") VALUES (?, ?)',args:[U.hash,U.folderMillis]}),V=!0}let X=await $Z($);if(await Z0(Q0($),{migrationsFolder:Z}),await $Z($)>X)V=!0;return await U0($),{migrated:V}}finally{$.close()}}var V0,z0,q0;var YZ=g(async()=>{V0=IQ(IQ(IQ(Y0(import.meta.url)))),z0=process.env.BEACON_MIGRATIONS_DIR||J0(V0,"drizzle"),q0={Node:["createdAt","updatedAt"],Note:["createdAt","updatedAt"],DbTable:["createdAt","updatedAt"],Endpoint:["createdAt","updatedAt"],DraftTable:["createdAt"],SyncState:["codeGraphSyncedAt","updatedAt"],AppSetting:["updatedAt"],ProjectMeta:["updatedAt"],CodeFile:["updatedAt"]}});GQ();import{existsSync as mZ}from"fs";import{homedir as pZ}from"os";import{join as JQ}from"path";function cZ(){return process.env.HOME||process.env.USERPROFILE||pZ()}var YQ=()=>JQ(cZ(),".claude"),FQ=()=>JQ(YQ(),"skills"),gQ=()=>JQ(YQ(),"settings.json"),RQ=()=>JQ(YQ(),"CLAUDE.md"),EQ="<!-- beacon:global:start -->",iQ="<!-- beacon:global:end -->";var lZ=c,T=[{event:"PostToolUse",matcher:"Edit|Write|MultiEdit",command:"beacon hook",description:"Report file edits to Beacon's active feature so the map stays fresh."},{event:"PermissionRequest",matcher:"ExitPlanMode",command:"beacon plan",description:"Pipe the agent's plan markdown into Beacon's /plan canvas for review."},{event:"UserPromptSubmit",matcher:"*",command:"beacon prompt",description:"On feature-y prompts in a Beacon-wired repo, remind the agent to run the context\u2192propose\u2192describe loop (no-op otherwise)."},{event:"Stop",matcher:"*",command:"beacon stop-hook",description:"When the agent ends a turn asking for plan approval in prose (instead of presenting it), nudge it to present the plan on Beacon's /plan canvas. Bounded by stop_hook_active \u2014 at most one nudge."}];function nZ(Q,Z){return d(FQ(),Q,Z)}function eQ(Q){return E(FQ(),Q)}function sZ(Q){return r(FQ(),Q)}function tZ(Q){return l(gQ(),Q)}function aZ(Q){return n(gQ(),Q)}function dZ(Q){return s(gQ(),Q)}function rZ(Q){t(RQ(),EQ,iQ,Q)}function QZ(){return R(RQ(),EQ)}function oZ(){return a(RQ(),EQ,iQ)}function ZZ(){let Q={};for(let $ of B)Q[$]=eQ($);let Z={};for(let $ of T)Z[$.event]=aZ({event:$.event,command:$.command});return{homeExists:mZ(YQ()),skills:Q,hooks:Z,claudeMdBlock:QZ()}}async function iZ(){let{INIT_SKILL:Q,REFRESH_SKILL:Z,PLAN_SKILL:$}=await Promise.resolve().then(() => (S(),vQ)),J={"beacon-init":Q,"beacon-refresh":Z,"beacon-plan":$},Y=[];for(let U of B){if(!eQ(U))Y.push(U);nZ(U,J[U])}let V=0;for(let U of T)if(tZ({event:U.event,matcher:U.matcher,command:U.command}))V++;let X=QZ();return rZ(lZ),{skillsAdded:Y,hooksAdded:V,claudeMdBlockTouched:!X}}async function r0(){let Q;try{Q={ok:!0,...await iZ()}}catch(Z){Q={ok:!1,error:Z instanceof Error?Z.message:String(Z),skillsAdded:[],hooksAdded:0,claudeMdBlockTouched:!1}}try{let Z=await Promise.resolve().then(() => (TQ(),oQ));if(Z.codexDetected())Q.codex={ok:!0,...await Z.setupCodexAssets()}}catch(Z){Q.codex={ok:!1,error:Z instanceof Error?Z.message:String(Z),skillsAdded:[],hooksAdded:0,agentsMdBlockTouched:!1,mcp:{added:!1}}}return Q}function o0(){let Q=[];for(let J of B)if(sZ(J))Q.push(J);let Z=0;for(let J of T)if(dZ(J))Z++;let $=oZ();return{skillsRemoved:Q,hooksRemoved:Z,claudeMdBlockRemoved:$}}import{AsyncLocalStorage as H0}from"async_hooks";import{spawnSync as j0}from"child_process";import{createHash as P0}from"crypto";import{existsSync as zZ,mkdirSync as A,readFileSync as OQ,writeFileSync as AQ}from"fs";import{homedir as qZ}from"os";import{basename as B0,join as K,parse as v0,resolve as VZ}from"path";function x(){return process.env.BEACON_HOME||K(qZ(),".beacon")}function yQ(){return K(x(),"workspaces.json")}function zQ(Q){return P0("sha256").update(Q).digest("hex").slice(0,12)}function H1(Q=process.cwd()){let Z=j0("git",["rev-parse","--show-toplevel"],{cwd:Q,stdio:["ignore","pipe","ignore"]});if(Z.status===0){let $=Z.stdout?.toString().trim();if($)return $}return Q}function XZ(Q){let Z=VZ(Q);return Z!==VZ(qZ())&&Z!==v0(Z).root}function UZ(){return K(x(),"deleted.json")}function bQ(){try{let Q=JSON.parse(OQ(UZ(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function WZ(Q){A(x(),{recursive:!0}),AQ(UZ(),JSON.stringify(Q,null,2))}function HZ(Q){return bQ().includes(Q)}function j1(Q){let Z=bQ();if(!Z.includes(Q))WZ([...Z,Q])}function N0(Q){let Z=bQ();if(Z.includes(Q))WZ(Z.filter(($)=>$!==Q))}function qQ(Q){return K(x(),Q)}function x0(Q){return`file:${K(qQ(Q),"db.sqlite")}`}function y(){try{let Q=JSON.parse(OQ(yQ(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function _Q(Q){A(x(),{recursive:!0}),AQ(yQ(),JSON.stringify(Q,null,2))}function kQ(){return y().sort((Q,Z)=>Z.lastOpenedAt.localeCompare(Q.lastOpenedAt))}function M(Q){return y().find((Z)=>Z.id===Q)??null}function jZ(Q,Z,$=new Date().toISOString()){if(!XZ(Q))throw Error(`beacon: refusing to register a non-repo path as a workspace: ${Q}`);let J=zQ(Q);if(HZ(J))throw Error(`beacon: workspace ${J} (${Q}) was deleted \u2014 run \`beacon\` or /beacon-init to re-add it`);let Y=y(),V=Y.find((z)=>z.id===J),X={id:J,path:Q,name:Z||V?.name||B0(Q),lastOpenedAt:$},U=[X,...Y.filter((z)=>z.id!==J)];return A(qQ(J),{recursive:!0}),_Q(U),X}function P1(Q,Z){return N0(zQ(Q)),jZ(Q,Z)}function B1(Q,Z=new Date().toISOString()){let $=y(),J=$.find((Y)=>Y.id===Q);if(!J)return;J.lastOpenedAt=Z,_Q($)}function v1(Q){if(_Q(y().filter((Z)=>Z.id!==Q)),LQ()===Q)G0(kQ()[0]?.id??null)}function PZ(){return K(x(),"active")}function LQ(){try{return OQ(PZ(),"utf8").trim()||null}catch{return null}}function G0(Q){A(x(),{recursive:!0}),AQ(PZ(),Q??"")}function N1(){let Q=LQ();return Q?M(Q):null}function x1(){let Q=C0()??LQ();return Q?M(Q):null}function G1(Q){return M(Q)?.path??null}function K1(){return zZ(yQ())}var BZ="beacon_ws";function vZ(Q,Z){let $=Q.headers.get("cookie");if(!$)return null;for(let J of $.split(";")){let Y=J.indexOf("=");if(Y===-1)continue;if(J.slice(0,Y).trim()===Z)return decodeURIComponent(J.slice(Y+1).trim())}return null}function C1(Q){let Z=Q.headers.get("x-beacon-workspace");if(Z&&M(Z))return Z;let $=vZ(Q,BZ);if($&&M($))return $;return null}var K0="x-beacon-workspace-path";async function M1(Q){let Z=Q.headers.get("x-beacon-workspace");if(Z&&M(Z))return Z;let $=Q.headers.get(K0);if($&&XZ($)&&!HZ(zQ($))&&(!Z||zQ($)===Z)){let Y=jZ($);return await M0(Y.id),Y.id}let J=vZ(Q,BZ);if(J&&M(J))return J;return null}var NZ=new H0;function f1(Q,Z){return Q?NZ.run(Q,Z):Z()}function C0(){return NZ.getStore()??null}var DQ=new Set;function u1(Q){DQ.delete(K(qQ(Q),"db.sqlite"))}async function M0(Q){let Z=qQ(Q),$=K(Z,"db.sqlite"),J=zZ($);if(J&&DQ.has($))return{ok:!0,created:!1,migrated:!1};try{A(Z,{recursive:!0});let{provisionDb:Y}=await YZ().then(() => JZ),V=await Y(x0(Q));return DQ.add($),{ok:!0,created:!J,migrated:J&&V.migrated}}catch(Y){return{ok:!1,created:!1,migrated:!1,error:Y instanceof Error?Y.message:String(Y)}}}S();TQ();import{execSync as f0,spawnSync as xZ}from"child_process";import{existsSync as u0,readFileSync as w0}from"fs";import{join as GZ}from"path";var W=(Q)=>`\x1B[32m\u2713\x1B[0m ${Q}`,H=(Q)=>`\x1B[31m\u2717\x1B[0m ${Q}`,f=(Q)=>`\x1B[2m${Q}\x1B[0m`,b=(Q)=>`
-\x1B[1m${Q}\x1B[0m`;function T0(){try{return f0("git rev-parse --show-toplevel",{cwd:process.cwd(),stdio:["ignore","pipe","ignore"]}).toString().trim()}catch{return""}}function F0(){let Q=GZ(x(),"server.json");try{let Z=JSON.parse(w0(Q,"utf8"));if(!Z.pid)return H("daemon: no server.json yet");try{return process.kill(Z.pid,0),W(`daemon running (pid ${Z.pid}, port ${Z.port??"?"})`)}catch{return H(`daemon NOT running (server.json stale: pid ${Z.pid})`)}}catch{return H("daemon: no server.json (never started)")}}function g0(){let Q=xZ("bun",["--version"],{stdio:["ignore","pipe","ignore"]});if(Q.status===0)return W(`bun ${Q.stdout.toString().trim()}`);return H("bun NOT found on PATH (required to run Beacon)")}function R0(){return T0()||process.cwd()}var XQ=R0(),F=ZZ(),KZ=kQ(),E0=KZ.some((Q)=>Q.path===XQ),j=E0||u0(GZ(XQ,".mcp.json"))?BQ(XQ):null;console.log(b("Beacon \xB7 doctor"));console.log(b("Runtime"));console.log(`  ${g0()}`);console.log(`  ${F0()}`);console.log(`  ${W(`home: ${x()}`)}`);console.log(`  ${W(`workspaces registered: ${KZ.length}`)}`);console.log(b("Global (~/.claude/)"));for(let Q of B)console.log(`  ${F.skills[Q]?W(`skill ${Q}`):H(`skill ${Q} \u2014 missing`)}`);for(let Q of T)console.log(`  ${F.hooks[Q.event]?W(`hook ${Q.event} \u2192 ${Q.command}`):H(`hook ${Q.event} \u2192 ${Q.command} \u2014 missing`)}   ${f(Q.description)}`);console.log(`  ${F.claudeMdBlock?W("global CLAUDE.md block"):H("global CLAUDE.md block \u2014 missing (every Claude session won't auto-discover Beacon)")}`);console.log(b("Codex (~/.codex/ + ~/.agents/)"));var v=$Q()?wQ():null;if(!v)console.log(`  ${f("codex not on PATH \u2014 Codex integration inactive (wires automatically once codex is installed)")}`);else{let Q=xZ("codex",["--version"],{stdio:["ignore","pipe","ignore"]});console.log(`  ${Q.status===0?W(`codex ${Q.stdout.toString().trim()}`):f("codex version unavailable (BEACON_CODEX override?)")}`);for(let $ of B)console.log(`  ${v.skills[$]?W(`skill ${$} (~/.agents/skills)`):H(`skill ${$} (~/.agents/skills) \u2014 missing`)}`);for(let $ of C)console.log(`  ${v.hooks[$.event]?W(`hook ${$.event} \u2192 ${$.command}`):H(`hook ${$.event} \u2192 ${$.command} \u2014 missing`)}   ${f($.description)}`);console.log(`  ${v.agentsMdBlock?W("global ~/.codex/AGENTS.md block"):H("global ~/.codex/AGENTS.md block \u2014 missing")}`);let Z=uQ();console.log(`  ${v.mcp?W("config.toml has [mcp_servers.beacon]"):H(`config.toml missing [mcp_servers.beacon]${Z?` \u2014 ${Z}`:""}`)}`)}console.log(b(`Current repo (${XQ})`));if(!j)console.log(`  ${f("not registered with Beacon and no .mcp.json \u2014 run `beacon` here to wire it.")}`);else if(console.log(`  ${j.mcpRegistered?W(".mcp.json has beacon entry"):H(".mcp.json missing beacon entry")}`),console.log(`  ${j.agentsMdBlock?W("AGENTS.md has Beacon workflow block"):H("AGENTS.md missing Beacon workflow block")}`),console.log(`  ${j.claudeMdImport?W("CLAUDE.md @-imports AGENTS.md"):H("CLAUDE.md does NOT @-import AGENTS.md")}`),console.log(`  ${j.skills["beacon-init"]?W("skill beacon-init (repo)"):H("skill beacon-init (repo) \u2014 missing")}`),console.log(`  ${j.skills["beacon-refresh"]?W("skill beacon-refresh (repo)"):H("skill beacon-refresh (repo) \u2014 missing")}`),v)console.log(`  ${j.codexSkills["beacon-init"]?W("skill beacon-init (.agents/skills)"):H("skill beacon-init (.agents/skills) \u2014 missing")}`),console.log(`  ${j.codexSkills["beacon-refresh"]?W("skill beacon-refresh (.agents/skills)"):H("skill beacon-refresh (.agents/skills) \u2014 missing")}`);var I0=B.some((Q)=>!F.skills[Q])||T.some((Q)=>!F.hooks[Q.event])||!F.claudeMdBlock||(v?B.some((Q)=>!v.skills[Q])||C.some((Q)=>!v.hooks[Q.event])||!v.agentsMdBlock||!v.mcp:!1)||(j?!j.mcpRegistered||!j.agentsMdBlock||!j.claudeMdImport||!j.skills["beacon-init"]||!j.skills["beacon-refresh"]||(v?!j.codexSkills["beacon-init"]||!j.codexSkills["beacon-refresh"]:!1):!1);if(I0)console.log(`
-${f("Fix everything marked \u2717 by running")} \x1B[1mbeacon\x1B[0m ${f("in this repo.")}`);console.log();
+${rQ}
+`});var VZ={};jQ(VZ,{provisionDb:()=>j0});import{createClient as Z0}from"@libsql/client";import{drizzle as $0}from"drizzle-orm/libsql";import{migrate as J0}from"drizzle-orm/libsql/migrator";import{readMigrationFiles as Y0}from"drizzle-orm/migrator";import{dirname as OQ,join as V0}from"path";import{fileURLToPath as z0}from"url";async function zQ(Q,Z){return(await Q.execute({sql:"SELECT 1 FROM sqlite_master WHERE type='table' AND name = ?",args:[Z]})).rows.length>0}async function W0(Q,Z){let $=await Q.execute(`PRAGMA table_info("${Z}")`);return new Set($.rows.map((J)=>String(J.name)))}async function YZ(Q){if(!await zQ(Q,"__drizzle_migrations"))return 0;let Z=await Q.execute('SELECT count(*) AS n FROM "__drizzle_migrations"');return Number(Z.rows[0]?.n??0)}async function H0(Q){for(let[Z,$]of Object.entries(U0)){if(!await zQ(Q,Z))continue;let J=await W0(Q,Z);for(let Y of $){if(!J.has(Y))continue;await Q.execute(`UPDATE "${Z}" SET "${Y}" = CAST((julianday("${Y}") - 2440587.5) * 86400000 AS INTEGER) WHERE typeof("${Y}") = 'text'`)}}}async function j0(Q,Z=X0){let $=Z0({url:Q});try{await $.execute("PRAGMA journal_mode = WAL;"),await $.execute("PRAGMA foreign_keys = ON;"),await $.execute("PRAGMA busy_timeout = 5000;");let J=await zQ($,"__drizzle_migrations"),Y=await zQ($,"Node"),V=!1;if(Y&&!J){let U=Y0({migrationsFolder:Z})[0];if(U)await $.execute('CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (id SERIAL PRIMARY KEY, hash text NOT NULL, created_at numeric)'),await $.execute({sql:'INSERT INTO "__drizzle_migrations" ("hash", "created_at") VALUES (?, ?)',args:[U.hash,U.folderMillis]}),V=!0}let X=await YZ($);if(await J0($0($),{migrationsFolder:Z}),await YZ($)>X)V=!0;return await H0($),{migrated:V}}finally{$.close()}}var q0,X0,U0;var zZ=u(async()=>{q0=OQ(OQ(OQ(z0(import.meta.url)))),X0=process.env.BEACON_MIGRATIONS_DIR||V0(q0,"drizzle"),U0={Node:["createdAt","updatedAt"],Note:["createdAt","updatedAt"],DbTable:["createdAt","updatedAt"],Endpoint:["createdAt","updatedAt"],DraftTable:["createdAt"],SyncState:["codeGraphSyncedAt","updatedAt"],AppSetting:["updatedAt"],ProjectMeta:["updatedAt"],CodeFile:["updatedAt"]}});CQ();import{existsSync as cZ}from"fs";import{homedir as nZ}from"os";import{join as YQ}from"path";function lZ(){return process.env.HOME||process.env.USERPROFILE||nZ()}var VQ=()=>YQ(lZ(),".claude"),gQ=()=>YQ(VQ(),"skills"),EQ=()=>YQ(VQ(),"settings.json"),IQ=()=>YQ(VQ(),"CLAUDE.md"),DQ="<!-- beacon:global:start -->",QZ="<!-- beacon:global:end -->";var sZ=n,T=[{event:"PreToolUse",matcher:"Edit|Write|MultiEdit",command:"beacon guard",description:"Gate edits against the active plan's scope contract (when the scope-guard flag is on): in-scope \u2192 allow, off-scope \u2192 ask the user to authorize. No-op + fail-open otherwise."},{event:"PostToolUse",matcher:"Edit|Write|MultiEdit",command:"beacon hook",description:"Report file edits to Beacon's active feature so the map stays fresh."},{event:"PermissionRequest",matcher:"ExitPlanMode",command:"beacon plan",description:"Pipe the agent's plan markdown into Beacon's /plan canvas for review."},{event:"UserPromptSubmit",matcher:"*",command:"beacon prompt",description:"On feature-y prompts in a Beacon-wired repo, remind the agent to run the context\u2192propose\u2192describe loop (no-op otherwise)."},{event:"Stop",matcher:"*",command:"beacon stop-hook",description:"When the agent ends a turn asking for plan approval in prose (instead of presenting it), nudge it to present the plan on Beacon's /plan canvas. Bounded by stop_hook_active \u2014 at most one nudge."}];function tZ(Q,Z){return r(gQ(),Q,Z)}function ZZ(Q){return E(gQ(),Q)}function aZ(Q){return o(gQ(),Q)}function dZ(Q){return l(EQ(),Q)}function rZ(Q){return s(EQ(),Q)}function oZ(Q){return t(EQ(),Q)}function iZ(Q){a(IQ(),DQ,QZ,Q)}function $Z(){return g(IQ(),DQ)}function eZ(){return d(IQ(),DQ,QZ)}function JZ(){let Q={};for(let $ of v)Q[$]=ZZ($);let Z={};for(let $ of T)Z[$.event]=rZ({event:$.event,command:$.command});return{homeExists:cZ(VQ()),skills:Q,hooks:Z,claudeMdBlock:$Z()}}async function Q0(){let{INIT_SKILL:Q,REFRESH_SKILL:Z,PLAN_SKILL:$}=await Promise.resolve().then(() => (h(),GQ)),J={"beacon-init":Q,"beacon-refresh":Z,"beacon-plan":$},Y=[];for(let U of v){if(!ZZ(U))Y.push(U);tZ(U,J[U])}let V=0;for(let U of T)if(dZ({event:U.event,matcher:U.matcher,command:U.command}))V++;let X=$Z();return iZ(sZ),{skillsAdded:Y,hooksAdded:V,claudeMdBlockTouched:!X}}async function V1(){let Q;try{Q={ok:!0,...await Q0()}}catch(Z){Q={ok:!1,error:Z instanceof Error?Z.message:String(Z),skillsAdded:[],hooksAdded:0,claudeMdBlockTouched:!1}}try{let Z=await Promise.resolve().then(() => (RQ(),eQ));if(Z.codexDetected())Q.codex={ok:!0,...await Z.setupCodexAssets()}}catch(Z){Q.codex={ok:!1,error:Z instanceof Error?Z.message:String(Z),skillsAdded:[],hooksAdded:0,agentsMdBlockTouched:!1,mcp:{added:!1}}}return Q}function z1(){let Q=[];for(let J of v)if(aZ(J))Q.push(J);let Z=0;for(let J of T)if(oZ(J))Z++;let $=eZ();return{skillsRemoved:Q,hooksRemoved:Z,claudeMdBlockRemoved:$}}import{AsyncLocalStorage as P0}from"async_hooks";import{spawnSync as v0}from"child_process";import{createHash as B0}from"crypto";import{existsSync as XZ,mkdirSync as y,readFileSync as AQ,writeFileSync as bQ}from"fs";import{homedir as UZ}from"os";import{basename as N0,join as K,parse as G0,resolve as qZ}from"path";function G(){return process.env.BEACON_HOME||K(UZ(),".beacon")}function LQ(){return K(G(),"workspaces.json")}function qQ(Q){return B0("sha256").update(Q).digest("hex").slice(0,12)}function C1(Q=process.cwd()){let Z=v0("git",["rev-parse","--show-toplevel"],{cwd:Q,stdio:["ignore","pipe","ignore"]});if(Z.status===0){let $=Z.stdout?.toString().trim();if($)return $}return Q}function WZ(Q){let Z=qZ(Q);return Z!==qZ(UZ())&&Z!==G0(Z).root}function HZ(){return K(G(),"deleted.json")}function _Q(){try{let Q=JSON.parse(AQ(HZ(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function jZ(Q){y(G(),{recursive:!0}),bQ(HZ(),JSON.stringify(Q,null,2))}function PZ(Q){return _Q().includes(Q)}function f1(Q){let Z=_Q();if(!Z.includes(Q))jZ([...Z,Q])}function x0(Q){let Z=_Q();if(Z.includes(Q))jZ(Z.filter(($)=>$!==Q))}function XQ(Q){return K(G(),Q)}function K0(Q){return`file:${K(XQ(Q),"db.sqlite")}`}function A(){try{let Q=JSON.parse(AQ(LQ(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function kQ(Q){y(G(),{recursive:!0}),bQ(LQ(),JSON.stringify(Q,null,2))}function UQ(){return A().sort((Q,Z)=>Z.lastOpenedAt.localeCompare(Q.lastOpenedAt))}function f(Q){return A().find((Z)=>Z.id===Q)??null}function vZ(Q,Z,$=new Date().toISOString()){if(!WZ(Q))throw Error(`beacon: refusing to register a non-repo path as a workspace: ${Q}`);let J=qQ(Q);if(PZ(J))throw Error(`beacon: workspace ${J} (${Q}) was deleted \u2014 run \`beacon\` or /beacon-init to re-add it`);let Y=A(),V=Y.find((z)=>z.id===J),X={id:J,path:Q,name:Z||V?.name||N0(Q),lastOpenedAt:$},U=[X,...Y.filter((z)=>z.id!==J)];return y(XQ(J),{recursive:!0}),kQ(U),X}function M1(Q,Z){return x0(qQ(Q)),vZ(Q,Z)}function u1(Q,Z=new Date().toISOString()){let $=A(),J=$.find((Y)=>Y.id===Q);if(!J)return;J.lastOpenedAt=Z,kQ($)}function w1(Q){if(kQ(A().filter((Z)=>Z.id!==Q)),SQ()===Q)C0(UQ()[0]?.id??null)}function BZ(){return K(G(),"active")}function SQ(){try{return AQ(BZ(),"utf8").trim()||null}catch{return null}}function C0(Q){y(G(),{recursive:!0}),bQ(BZ(),Q??"")}function F1(){let Q=SQ();return Q?f(Q):null}function T1(){let Q=u0()??SQ();return Q?f(Q):null}function R1(Q){return f(Q)?.path??null}function g1(){return XZ(LQ())}var NZ="beacon_ws";function GZ(Q,Z){let $=Q.headers.get("cookie");if(!$)return null;for(let J of $.split(";")){let Y=J.indexOf("=");if(Y===-1)continue;if(J.slice(0,Y).trim()===Z)return decodeURIComponent(J.slice(Y+1).trim())}return null}function E1(Q){let Z=Q.headers.get("x-beacon-workspace");if(Z&&f(Z))return Z;let $=GZ(Q,NZ);if($&&f($))return $;return f0()}function f0(){let Q=UQ();return Q.length===1?Q[0].id:null}var M0="x-beacon-workspace-path";async function I1(Q){let Z=Q.headers.get("x-beacon-workspace");if(Z&&f(Z))return Z;let $=Q.headers.get(M0);if($&&WZ($)&&!PZ(qQ($))&&(!Z||qQ($)===Z)){let Y=vZ($);return await w0(Y.id),Y.id}let J=GZ(Q,NZ);if(J&&f(J))return J;return null}var xZ=new P0;function D1(Q,Z){return Q?xZ.run(Q,Z):Z()}function u0(){return xZ.getStore()??null}var yQ=new Set;function O1(Q){yQ.delete(K(XQ(Q),"db.sqlite"))}async function w0(Q){let Z=XQ(Q),$=K(Z,"db.sqlite"),J=XZ($);if(J&&yQ.has($))return{ok:!0,created:!1,migrated:!1};try{y(Z,{recursive:!0});let{provisionDb:Y}=await zZ().then(() => VZ),V=await Y(K0(Q));return yQ.add($),{ok:!0,created:!J,migrated:J&&V.migrated}}catch(Y){return{ok:!1,created:!1,migrated:!1,error:Y instanceof Error?Y.message:String(Y)}}}h();RQ();import{execSync as F0,spawnSync as KZ}from"child_process";import{existsSync as T0,readFileSync as R0}from"fs";import{join as CZ}from"path";var W=(Q)=>`\x1B[32m\u2713\x1B[0m ${Q}`,H=(Q)=>`\x1B[31m\u2717\x1B[0m ${Q}`,M=(Q)=>`\x1B[2m${Q}\x1B[0m`,b=(Q)=>`
+\x1B[1m${Q}\x1B[0m`;function g0(){try{return F0("git rev-parse --show-toplevel",{cwd:process.cwd(),stdio:["ignore","pipe","ignore"]}).toString().trim()}catch{return""}}function E0(){let Q=CZ(G(),"server.json");try{let Z=JSON.parse(R0(Q,"utf8"));if(!Z.pid)return H("daemon: no server.json yet");try{return process.kill(Z.pid,0),W(`daemon running (pid ${Z.pid}, port ${Z.port??"?"})`)}catch{return H(`daemon NOT running (server.json stale: pid ${Z.pid})`)}}catch{return H("daemon: no server.json (never started)")}}function I0(){let Q=KZ("bun",["--version"],{stdio:["ignore","pipe","ignore"]});if(Q.status===0)return W(`bun ${Q.stdout.toString().trim()}`);return H("bun NOT found on PATH (required to run Beacon)")}function D0(){return g0()||process.cwd()}var WQ=D0(),R=JZ(),fZ=UQ(),O0=fZ.some((Q)=>Q.path===WQ),j=O0||T0(CZ(WQ,".mcp.json"))?NQ(WQ):null;console.log(b("Beacon \xB7 doctor"));console.log(b("Runtime"));console.log(`  ${I0()}`);console.log(`  ${E0()}`);console.log(`  ${W(`home: ${G()}`)}`);console.log(`  ${W(`workspaces registered: ${fZ.length}`)}`);console.log(b("Global (~/.claude/)"));for(let Q of v)console.log(`  ${R.skills[Q]?W(`skill ${Q}`):H(`skill ${Q} \u2014 missing`)}`);for(let Q of T)console.log(`  ${R.hooks[Q.event]?W(`hook ${Q.event} \u2192 ${Q.command}`):H(`hook ${Q.event} \u2192 ${Q.command} \u2014 missing`)}   ${M(Q.description)}`);console.log(`  ${R.claudeMdBlock?W("global CLAUDE.md block"):H("global CLAUDE.md block \u2014 missing (every Claude session won't auto-discover Beacon)")}`);console.log(b("Codex (~/.codex/ + ~/.agents/)"));var B=JQ()?TQ():null;if(!B)console.log(`  ${M("codex not on PATH \u2014 Codex integration inactive (wires automatically once codex is installed)")}`);else{let Q=KZ("codex",["--version"],{stdio:["ignore","pipe","ignore"]});console.log(`  ${Q.status===0?W(`codex ${Q.stdout.toString().trim()}`):M("codex version unavailable (BEACON_CODEX override?)")}`);for(let $ of v)console.log(`  ${B.skills[$]?W(`skill ${$} (~/.agents/skills)`):H(`skill ${$} (~/.agents/skills) \u2014 missing`)}`);for(let $ of C)console.log(`  ${B.hooks[$.event]?W(`hook ${$.event} \u2192 ${$.command}`):H(`hook ${$.event} \u2192 ${$.command} \u2014 missing`)}   ${M($.description)}`);console.log(`  ${B.agentsMdBlock?W("global ~/.codex/AGENTS.md block"):H("global ~/.codex/AGENTS.md block \u2014 missing")}`);let Z=FQ();console.log(`  ${B.mcp?W("config.toml has [mcp_servers.beacon]"):H(`config.toml missing [mcp_servers.beacon]${Z?` \u2014 ${Z}`:""}`)}`)}console.log(b(`Current repo (${WQ})`));if(!j)console.log(`  ${M("not registered with Beacon and no .mcp.json \u2014 run `beacon` here to wire it.")}`);else if(console.log(`  ${j.mcpRegistered?W(".mcp.json has beacon entry"):H(".mcp.json missing beacon entry")}`),console.log(`  ${j.agentsMdBlock?W("AGENTS.md has Beacon workflow block"):H("AGENTS.md missing Beacon workflow block")}`),console.log(`  ${j.claudeMdImport?W("CLAUDE.md @-imports AGENTS.md"):H("CLAUDE.md does NOT @-import AGENTS.md")}`),console.log(`  ${j.skills["beacon-init"]?W("skill beacon-init (repo)"):H("skill beacon-init (repo) \u2014 missing")}`),console.log(`  ${j.skills["beacon-refresh"]?W("skill beacon-refresh (repo)"):H("skill beacon-refresh (repo) \u2014 missing")}`),B)console.log(`  ${j.codexSkills["beacon-init"]?W("skill beacon-init (.agents/skills)"):H("skill beacon-init (.agents/skills) \u2014 missing")}`),console.log(`  ${j.codexSkills["beacon-refresh"]?W("skill beacon-refresh (.agents/skills)"):H("skill beacon-refresh (.agents/skills) \u2014 missing")}`);var y0=v.some((Q)=>!R.skills[Q])||T.some((Q)=>!R.hooks[Q.event])||!R.claudeMdBlock||(B?v.some((Q)=>!B.skills[Q])||C.some((Q)=>!B.hooks[Q.event])||!B.agentsMdBlock||!B.mcp:!1)||(j?!j.mcpRegistered||!j.agentsMdBlock||!j.claudeMdImport||!j.skills["beacon-init"]||!j.skills["beacon-refresh"]||(B?!j.codexSkills["beacon-init"]||!j.codexSkills["beacon-refresh"]:!1):!1);if(y0)console.log(`
+${M("Fix everything marked \u2717 by running")} \x1B[1mbeacon\x1B[0m ${M("in this repo.")}`);console.log();

package/dist/bin/guard.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+// @bun
+var n=Object.defineProperty;var s=(Q)=>Q;function d(Q,X){this[Q]=s.bind(null,X)}var o=(Q,X)=>{for(var Z in X)n(Q,Z,{get:X[Z],enumerable:!0,configurable:!0,set:d.bind(X,Z)})};var a=(Q,X)=>()=>(Q&&(X=Q(Q=0)),X);var R={};o(R,{provisionDb:()=>VQ});import{createClient as t}from"@libsql/client";import{drizzle as r}from"drizzle-orm/libsql";import{migrate as i}from"drizzle-orm/libsql/migrator";import{readMigrationFiles as e}from"drizzle-orm/migrator";import{dirname as H,join as QQ}from"path";import{fileURLToPath as XQ}from"url";async function j(Q,X){return(await Q.execute({sql:"SELECT 1 FROM sqlite_master WHERE type='table' AND name = ?",args:[X]})).rows.length>0}async function YQ(Q,X){let Z=await Q.execute(`PRAGMA table_info("${X}")`);return new Set(Z.rows.map(($)=>String($.name)))}async function q(Q){if(!await j(Q,"__drizzle_migrations"))return 0;let X=await Q.execute('SELECT count(*) AS n FROM "__drizzle_migrations"');return Number(X.rows[0]?.n??0)}async function GQ(Q){for(let[X,Z]of Object.entries(JQ)){if(!await j(Q,X))continue;let $=await YQ(Q,X);for(let J of Z){if(!$.has(J))continue;await Q.execute(`UPDATE "${X}" SET "${J}" = CAST((julianday("${J}") - 2440587.5) * 86400000 AS INTEGER) WHERE typeof("${J}") = 'text'`)}}}async function VQ(Q,X=$Q){let Z=t({url:Q});try{await Z.execute("PRAGMA journal_mode = WAL;"),await Z.execute("PRAGMA foreign_keys = ON;"),await Z.execute("PRAGMA busy_timeout = 5000;");let $=await j(Z,"__drizzle_migrations"),J=await j(Z,"Node"),Y=!1;if(J&&!$){let B=e({migrationsFolder:X})[0];if(B)await Z.execute('CREATE TABLE IF NOT EXISTS "__drizzle_migrations" (id SERIAL PRIMARY KEY, hash text NOT NULL, created_at numeric)'),await Z.execute({sql:'INSERT INTO "__drizzle_migrations" ("hash", "created_at") VALUES (?, ?)',args:[B.hash,B.folderMillis]}),Y=!0}let V=await q(Z);if(await i(r(Z),{migrationsFolder:X}),await q(Z)>V)Y=!0;return await GQ(Z),{migrated:Y}}finally{Z.close()}}var ZQ,$Q,JQ;var D=a(async()=>{ZQ=H(H(H(XQ(import.meta.url)))),$Q=process.env.BEACON_MIGRATIONS_DIR||QQ(ZQ,"drizzle"),JQ={Node:["createdAt","updatedAt"],Note:["createdAt","updatedAt"],DbTable:["createdAt","updatedAt"],Endpoint:["createdAt","updatedAt"],DraftTable:["createdAt"],SyncState:["codeGraphSyncedAt","updatedAt"],AppSetting:["updatedAt"],ProjectMeta:["updatedAt"],CodeFile:["updatedAt"]}});import{AsyncLocalStorage as KQ}from"async_hooks";import{spawnSync as BQ}from"child_process";import{createHash as NQ}from"crypto";import{existsSync as v,mkdirSync as U,readFileSync as _,writeFileSync as T}from"fs";import{homedir as W}from"os";import{basename as MQ,join as K,parse as UQ,resolve as I}from"path";function G(){return process.env.BEACON_HOME||K(W(),".beacon")}function x(){return K(G(),"workspaces.json")}function M(Q){return NQ("sha256").update(Q).digest("hex").slice(0,12)}function S(Q=process.cwd()){let X=BQ("git",["rev-parse","--show-toplevel"],{cwd:Q,stdio:["ignore","pipe","ignore"]});if(X.status===0){let Z=X.stdout?.toString().trim();if(Z)return Z}return Q}function F(Q){let X=I(Q);return X!==I(W())&&X!==UQ(X).root}function P(){return K(G(),"deleted.json")}function E(){try{let Q=JSON.parse(_(P(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function y(Q){U(G(),{recursive:!0}),T(P(),JSON.stringify(Q,null,2))}function f(Q){return E().includes(Q)}function bQ(Q){let X=E();if(!X.includes(Q))y([...X,Q])}function LQ(Q){let X=E();if(X.includes(Q))y(X.filter((Z)=>Z!==Q))}function z(Q){return K(G(),Q)}function jQ(Q){return`file:${K(z(Q),"db.sqlite")}`}function L(){try{let Q=JSON.parse(_(x(),"utf8"));return Array.isArray(Q)?Q:[]}catch{return[]}}function u(Q){U(G(),{recursive:!0}),T(x(),JSON.stringify(Q,null,2))}function k(){return L().sort((Q,X)=>X.lastOpenedAt.localeCompare(Q.lastOpenedAt))}function N(Q){return L().find((X)=>X.id===Q)??null}function g(Q,X,Z=new Date().toISOString()){if(!F(Q))throw Error(`beacon: refusing to register a non-repo path as a workspace: ${Q}`);let $=M(Q);if(f($))throw Error(`beacon: workspace ${$} (${Q}) was deleted \u2014 run \`beacon\` or /beacon-init to re-add it`);let J=L(),Y=J.find((C)=>C.id===$),V={id:$,path:Q,name:X||Y?.name||MQ(Q),lastOpenedAt:Z},B=[V,...J.filter((C)=>C.id!==$)];return U(z($),{recursive:!0}),u(B),V}function mQ(Q,X){return LQ(M(Q)),g(Q,X)}function hQ(Q,X=new Date().toISOString()){let Z=L(),$=Z.find((J)=>J.id===Q);if(!$)return;$.lastOpenedAt=X,u(Z)}function pQ(Q){if(u(L().filter((X)=>X.id!==Q)),A()===Q)zQ(k()[0]?.id??null)}function w(){return K(G(),"active")}function A(){try{return _(w(),"utf8").trim()||null}catch{return null}}function zQ(Q){U(G(),{recursive:!0}),T(w(),Q??"")}function cQ(){let Q=A();return Q?N(Q):null}function lQ(){let Q=OQ()??A();return Q?N(Q):null}function nQ(Q){return N(Q)?.path??null}function sQ(){return v(x())}var b="beacon_ws";function m(Q,X){let Z=Q.headers.get("cookie");if(!Z)return null;for(let $ of Z.split(";")){let J=$.indexOf("=");if(J===-1)continue;if($.slice(0,J).trim()===X)return decodeURIComponent($.slice(J+1).trim())}return null}function dQ(Q){let X=Q.headers.get("x-beacon-workspace");if(X&&N(X))return X;let Z=m(Q,b);if(Z&&N(Z))return Z;return CQ()}function CQ(){let Q=k();return Q.length===1?Q[0].id:null}var HQ="x-beacon-workspace-path";async function oQ(Q){let X=Q.headers.get("x-beacon-workspace");if(X&&N(X))return X;let Z=Q.headers.get(HQ);if(Z&&F(Z)&&!f(M(Z))&&(!X||M(Z)===X)){let J=g(Z);return await _Q(J.id),J.id}let $=m(Q,b);if($&&N($))return $;return null}var h=new KQ;function aQ(Q,X){return Q?h.run(Q,X):X()}function OQ(){return h.getStore()??null}var O=new Set;function tQ(Q){O.delete(K(z(Q),"db.sqlite"))}async function _Q(Q){let X=z(Q),Z=K(X,"db.sqlite"),$=v(Z);if($&&O.has(Z))return{ok:!0,created:!1,migrated:!1};try{U(X,{recursive:!0});let{provisionDb:J}=await D().then(() => R),Y=await J(jQ(Q));return O.add(Z),{ok:!0,created:!$,migrated:$&&Y.migrated}}catch(J){return{ok:!1,created:!1,migrated:!1,error:J instanceof Error?J.message:String(J)}}}import{connect as TQ}from"net";var p=4319;function xQ(Q,X,Z=400){return new Promise(($)=>{let J=TQ({host:Q,port:X}),Y=!1,V=(B)=>{if(Y)return;Y=!0,J.destroy(),$(B)};J.once("connect",()=>V(!0)),J.once("error",()=>V(!1)),J.setTimeout(Z,()=>V(!1))})}async function EQ(Q){for(let X of["127.0.0.1","::1"])if(await xQ(X,Q))return!1;return!0}async function eQ(Q,X=20){for(let Z=Q;Z<Q+X;Z++)if(await EQ(Z))return Z;return Q}import{readFileSync as uQ}from"fs";import{join as AQ}from"path";function qQ(){try{return JSON.parse(uQ(AQ(G(),"server.json"),"utf8"))}catch{return null}}function c(){if(process.env.BEACON_URL)return process.env.BEACON_URL;return`http://localhost:${qQ()?.port||process.env.PORT||p}`}var l="";for await(let Q of process.stdin)l+=Q;try{let Q=JSON.parse(l||"{}"),X=Q?.tool_input?.file_path;if(typeof X==="string"&&X){let Z=M(S(typeof Q.cwd==="string"?Q.cwd:void 0)),$=await fetch(`${c()}/api/scope-guard/check?file=${encodeURIComponent(X)}`,{headers:{"x-beacon-workspace":Z}}).catch(()=>null);if($?.ok){let J=await $.json().catch(()=>null);if(J?.decision==="ask")process.stdout.write(JSON.stringify({hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"ask",permissionDecisionReason:J.reason??"This edit is outside the current plan's declared scope."}}))}}}catch{}process.exit(0);