visionclaw 0.1.209 → 0.1.210-beta.2

package/dist/onboarding/provisioning-spec.js

@@ -1,159 +0,0 @@
-import fs from "node:fs";
-import { z } from "zod";
-const GoogleServiceAccountSchema = z.object({
-    type: z.string().min(1),
-    project_id: z.string().min(1),
-    private_key_id: z.string().min(1),
-    private_key: z.string().min(1),
-    client_email: z.string().min(1),
-    client_id: z.string().min(1),
-    auth_uri: z.string().optional(),
-    token_uri: z.string().min(1),
-});
-const GoogleWorkspaceConfigSchema = z.object({
-    licenseSku: z.string().optional().nullable(),
-    licenseProductId: z.string().optional().nullable(),
-    delegatedAdminEmail: z.string().trim().min(1),
-    adminSdkServiceAccount: GoogleServiceAccountSchema,
-});
-const GoogleOAuthConfigSchema = z.object({
-    clientId: z.string().optional().nullable(),
-    clientSecret: z.string().optional().nullable(),
-}).default({});
-// Optional as a whole: an agent can be created with no Telegram bot at all
-// (onboarding #1087), in which case the server omits this block entirely. The
-// inner `min(1)` stays strict on purpose — if a bot IS configured, a blank
-// token is a server bug we want to fail loudly on, not silently disable
-// Telegram. The owner can still land a bot later via self-registration (#544).
-const TelegramConfigSchema = z.object({
-    botToken: z.string().min(1),
-    botName: z.string().min(1),
-});
-const CloudflaredConfigSchema = z.object({
-    enabled: z.boolean().default(false),
-    tunnelName: z.string().optional().nullable(),
-    tunnelHostname: z.string().optional().nullable(),
-}).default({ enabled: false });
-const GithubConfigSchema = z.object({
-    enabled: z.boolean().default(false),
-    createAccountIfMissing: z.boolean().default(true),
-    pat: z.string().min(1).optional().nullable(),
-}).default({ enabled: false, createAccountIfMissing: true, pat: null });
-const OnboardingServiceConfigSchema = z.object({
-    url: z.url(),
-    apiKey: z.string().min(1),
-});
-export const ProvisioningSpecSchema = z.object({
-    workspaceProvider: z.enum(["google", "zoho"]).default("google"),
-    agentName: z.string().trim().min(1),
-    emailUsername: z.string().trim().regex(/^[a-z0-9][a-z0-9._-]*$/i, {
-        message: "emailUsername must be alphanumeric and may include . _ -",
-    }),
-    workspaceDomain: z.string().trim().min(1).default("visionclaw.dev"),
-    gmailPassword: z.string().optional().nullable(),
-    googleActivated: z.boolean().optional().default(false),
-    systemPassword: z.string().optional().nullable(),
-    serpApiKey: z.string().min(1),
-    googleWorkspace: GoogleWorkspaceConfigSchema.optional(),
-    googleOAuth: GoogleOAuthConfigSchema,
-    telegram: TelegramConfigSchema.optional(),
-    cloudflared: CloudflaredConfigSchema,
-    github: GithubConfigSchema,
-    installService: z.boolean().default(true),
-    onboardingService: OnboardingServiceConfigSchema.optional(),
-    geminiApiKey: z.string().optional().nullable(),
-});
-function isRemoteSource(source) {
-    return /^https:\/\//i.test(source);
-}
-/**
- * An onboarding key is a 32-char hex string (the agent's API key).
- * It is used to fetch the provisioning spec from the onboarding service.
- * Defaults to https://onboarding.visionclaw.dev; override with VISIONCLAW_ONBOARDING_SERVICE_URL.
- */
-function isOnboardingKey(source) {
-    return /^[0-9a-f]{32}$/i.test(source);
-}
-/**
- * A 6-digit numeric setup code, used as a shorter alternative to the full API key
- * for `visionclaw setup <code>`.
- */
-function isSetupCode(source) {
-    return /^\d{6}$/.test(source);
-}
-function getOnboardingServiceBase() {
-    const serviceUrl = process.env.VISIONCLAW_ONBOARDING_SERVICE_URL ?? "https://onboarding.visionclaw.dev";
-    return serviceUrl.replace(/\/+$/, "");
-}
-async function fetchFromOnboardingService(url) {
-    let response;
-    try {
-        response = await fetch(url, {
-            signal: AbortSignal.timeout(30_000),
-        });
-    }
-    catch (err) {
-        throw new Error(`Cannot reach onboarding service at ${url} — ${err instanceof Error ? err.message : String(err)}\n` +
-            `Set VISIONCLAW_ONBOARDING_SERVICE_URL if the service is running elsewhere.`);
-    }
-    if (!response.ok) {
-        throw new Error(`Failed to fetch provisioning spec from ${url}: HTTP ${response.status}`);
-    }
-    return response.text();
-}
-async function readProvisioningSource(source) {
-    console.log(`Resolving provisioning source: "${source}" (remote=${isRemoteSource(source)}, onboardingKey=${isOnboardingKey(source)}, setupCode=${isSetupCode(source)})`);
-    if (isRemoteSource(source)) {
-        const response = await fetch(source, {
-            signal: AbortSignal.timeout(30_000),
-        });
-        if (!response.ok) {
-            throw new Error(`Failed to fetch provisioning JSON: HTTP ${response.status}`);
-        }
-        return {
-            sourceType: "remote",
-            content: await response.text(),
-        };
-    }
-    if (isSetupCode(source)) {
-        const base = getOnboardingServiceBase();
-        const url = `${base}/api/provisioning/setup-code/${source}`;
-        console.log(`Fetching provisioning spec via setup code from: ${url}`);
-        return {
-            sourceType: "remote",
-            content: await fetchFromOnboardingService(url),
-            setupCode: source,
-        };
-    }
-    if (isOnboardingKey(source)) {
-        const base = getOnboardingServiceBase();
-        const url = `${base}/api/provisioning/${source}`;
-        console.log(`Fetching provisioning spec from: ${url}`);
-        return {
-            sourceType: "remote",
-            content: await fetchFromOnboardingService(url),
-        };
-    }
-    if (!fs.existsSync(source)) {
-        throw new Error(`Provisioning JSON file not found: ${source}`);
-    }
-    return {
-        sourceType: "local",
-        content: fs.readFileSync(source, "utf-8"),
-    };
-}
-export async function loadProvisioningSpec(source) {
-    const trimmedSource = source.trim();
-    if (!trimmedSource) {
-        throw new Error("Provisioning source is required");
-    }
-    const { sourceType, content, setupCode } = await readProvisioningSource(trimmedSource);
-    const parsed = JSON.parse(content);
-    return {
-        source: trimmedSource,
-        sourceType,
-        ...(setupCode ? { setupCode } : {}),
-        spec: ProvisioningSpecSchema.parse(parsed),
-    };
-}
-//# sourceMappingURL=provisioning-spec.js.map

package/dist/onboarding/provisioning-spec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provisioning-spec.js","sourceRoot":"","sources":["../../src/onboarding/provisioning-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,sBAAsB,EAAE,0BAA0B;CACnD,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEf,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,+EAA+E;AAC/E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAE/B,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AAExE,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,yBAAyB,EAAE;QAChE,OAAO,EAAE,0DAA0D;KACpE,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACnE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,eAAe,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,uBAAuB;IACpC,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,uBAAuB;IACpC,MAAM,EAAE,kBAAkB;IAC1B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,iBAAiB,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAWH,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,wBAAwB;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,mCAAmC,CAAC;IACxG,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,GAAW;IACnD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;YACnG,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0CAA0C,GAAG,UAAU,QAAQ,CAAC,MAAM,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAAc;IAClD,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,aAAa,cAAc,CAAC,MAAM,CAAC,mBAAmB,eAAe,CAAC,MAAM,CAAC,eAAe,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzK,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,gCAAgC,MAAM,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,mDAAmD,GAAG,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,MAAM,0BAA0B,CAAC,GAAG,CAAC;YAC9C,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,wBAAwB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,qBAAqB,MAAM,EAAE,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;QACvD,OAAO;YACL,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,MAAM,0BAA0B,CAAC,GAAG,CAAC;SAC/C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,UAAU,EAAE,OAAO;QACnB,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,sBAAsB,CAAC,aAAa,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IAE9C,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,UAAU;QACV,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/onboarding/send-identity-credentials.d.ts

@@ -1,11 +0,0 @@
-import type { VisionClawConfig, OwnerConfig } from "../config/types.js";
-import type { ChannelManager } from "../channels/manager.js";
-/**
- * Send identity credentials to the owner using two-channel delivery:
- * 1. Email: encrypted ZIP of identity.md (contains all agent credentials)
- * 2. Telegram: decryption password
- *
- * This ensures no single channel compromise exposes sensitive credentials.
- */
-export declare function sendIdentityCredentials(config: VisionClawConfig, ownerConfig: OwnerConfig, channelManager: ChannelManager): Promise<void>;
-//# sourceMappingURL=send-identity-credentials.d.ts.map

package/dist/onboarding/send-identity-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-identity-credentials.d.ts","sourceRoot":"","sources":["../../src/onboarding/send-identity-credentials.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAsC7D;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,gBAAgB,EACxB,WAAW,EAAE,WAAW,EACxB,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,IAAI,CAAC,CA6Ef"}

package/dist/onboarding/send-identity-credentials.js

@@ -1,110 +0,0 @@
-import crypto from "node:crypto";
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-import { execFileSync } from "node:child_process";
-import { GmailEmailClient } from "../email/gmail-email.js";
-import { getMemoriesDir } from "../config/index.js";
-import { logger } from "../logger.js";
-/**
- * Generate a cryptographically secure random password.
- * Returns a 24-character alphanumeric string.
- */
-function generatePassword() {
-    return crypto.randomBytes(18).toString("base64url").slice(0, 24);
-}
-/**
- * Create a password-protected ZIP of identity.md.
- *
- * @returns Path to the created ZIP file (in a temp directory).
- */
-function createEncryptedIdentityZip(identityPath, password) {
-    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "visionclaw-identity-"));
-    const zipFile = path.join(tmpDir, "identity.zip");
-    execFileSync("zip", ["-j", "-P", password, zipFile, identityPath], {
-        stdio: "pipe",
-    });
-    return zipFile;
-}
-/**
- * Extract the ETH wallet address from identity.md content.
- */
-function extractWalletAddress(content) {
-    const match = /- Address:\s*(0x[0-9a-fA-F]+)/.exec(content);
-    return match?.[1] ?? null;
-}
-/**
- * Send identity credentials to the owner using two-channel delivery:
- * 1. Email: encrypted ZIP of identity.md (contains all agent credentials)
- * 2. Telegram: decryption password
- *
- * This ensures no single channel compromise exposes sensitive credentials.
- */
-export async function sendIdentityCredentials(config, ownerConfig, channelManager) {
-    const identityPath = path.join(getMemoriesDir(), "identity.md");
-    if (!fs.existsSync(identityPath)) {
-        logger.warn("No identity.md found — skipping two-channel delivery");
-        return;
-    }
-    const identityContent = fs.readFileSync(identityPath, "utf-8");
-    const walletAddress = extractWalletAddress(identityContent);
-    const password = generatePassword();
-    let zipFile;
-    try {
-        zipFile = createEncryptedIdentityZip(identityPath, password);
-        // Channel 1: Send encrypted file via email
-        const addressLine = walletAddress
-            ? `\nETH wallet address: ${walletAddress}\n`
-            : "";
-        const emailBody = `Hi ${ownerConfig.ownerName || "there"},
-
-I'm sending you the credentials for my ETH wallet.
-${addressLine}
-For your reference, the agent's identity file is attached as an encrypted archive (identity.zip).
-The decryption password has been sent to your Telegram account.
-
-Note: The agent retains these credentials for operations. This copy is for your records.
-- Open the encrypted file using the password from Telegram
-- Save the credentials in a secure location (e.g., password manager) if you wish
-- Never share private keys or recovery words with anyone
-
-— ${config.agentName}`;
-        const emailClient = new GmailEmailClient(config);
-        await emailClient.sendEmail({
-            to: ownerConfig.ownerEmail,
-            subject: `${config.agentName} — Your Agent Credentials`,
-            body: emailBody,
-            attachments: [
-                {
-                    type: "file",
-                    localPath: zipFile,
-                    filename: "identity.zip",
-                    mimeType: "application/zip",
-                },
-            ],
-        });
-        logger.system(`Identity credentials email sent to ${ownerConfig.ownerEmail}`);
-        // Channel 2: Send decryption password via Telegram
-        if (ownerConfig.telegramChatId) {
-            const telegramMessage = `Your VisionClaw instance has it's own ETH wallet address: ${walletAddress}
-
-The credentials for the wallet is sent to your email for your reference(the agent retains them for operations).
-The decryption password for the email attachment is:
-${password}
-`;
-            await channelManager.sendMessage("telegram", String(ownerConfig.telegramChatId), telegramMessage);
-            logger.system("Credential decryption password sent via Telegram");
-        }
-        else {
-            logger.warn("No Telegram chat ID — could not send decryption password. " +
-                "Credential delivery incomplete!");
-        }
-    }
-    finally {
-        if (zipFile && fs.existsSync(zipFile)) {
-            const tmpDir = path.dirname(zipFile);
-            fs.rmSync(tmpDir, { recursive: true, force: true });
-        }
-    }
-}
-//# sourceMappingURL=send-identity-credentials.js.map

package/dist/onboarding/send-identity-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-identity-credentials.js","sourceRoot":"","sources":["../../src/onboarding/send-identity-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGpD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC;;;GAGG;AACH,SAAS,gBAAgB;IACvB,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,SAAS,0BAA0B,CACjC,YAAoB,EACpB,QAAgB;IAEhB,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAElD,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE;QACjE,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAwB,EACxB,WAAwB,EACxB,cAA8B;IAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,eAAe,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE5D,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,IAAI,OAA2B,CAAC;IAEhC,IAAI,CAAC;QACH,OAAO,GAAG,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAE7D,2CAA2C;QAC3C,MAAM,WAAW,GAAG,aAAa;YAC/B,CAAC,CAAC,yBAAyB,aAAa,IAAI;YAC5C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,SAAS,IAAI,OAAO;;;EAG1D,WAAW;;;;;;;;;IAST,MAAM,CAAC,SAAS,EAAE,CAAC;QAEnB,MAAM,WAAW,GAAG,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,WAAW,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,WAAW,CAAC,UAAU;YAC1B,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,2BAA2B;YACvD,IAAI,EAAE,SAAS;YACf,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,MAAM;oBACZ,SAAS,EAAE,OAAO;oBAClB,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,iBAAiB;iBAC5B;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,sCAAsC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QAE9E,mDAAmD;QACnD,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAC/B,MAAM,eAAe,GAAG,6DAA6D,aAAa;;;;EAItG,QAAQ;CACT,CAAC;YAEI,MAAM,cAAc,CAAC,WAAW,CAC9B,UAAU,EACV,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,EAClC,eAAe,CAChB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,4DAA4D;gBAC1D,iCAAiC,CACpC,CAAC;QACJ,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/onboarding/setup-credentials.d.ts

@@ -1,7 +0,0 @@
-export interface ServerGoogleOAuthCredential {
-    clientId: string;
-    clientSecret: string;
-}
-export declare function applyServerGoogleOAuthTokensForSetup(setupCode: string): Promise<ServerGoogleOAuthCredential | false>;
-export declare function applyServerZohoOAuthTokensForSetup(setupCode: string): Promise<boolean>;
-//# sourceMappingURL=setup-credentials.d.ts.map

package/dist/onboarding/setup-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup-credentials.d.ts","sourceRoot":"","sources":["../../src/onboarding/setup-credentials.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACtB;AAOD,wBAAsB,oCAAoC,CACxD,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,2BAA2B,GAAG,KAAK,CAAC,CAqB9C;AAED,wBAAsB,kCAAkC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAU5F"}

package/dist/onboarding/setup-credentials.js

@@ -1,44 +0,0 @@
-import { saveZohoTokens } from "../config/index.js";
-import { ZohoTokensSchema } from "../config/types.js";
-import { writeGoogleTokensJson } from "../google/token-file.js";
-function getOnboardingServiceBase() {
-    const serviceUrl = process.env.VISIONCLAW_ONBOARDING_SERVICE_URL ?? "https://onboarding.visionclaw.dev";
-    return serviceUrl.replace(/\/+$/, "");
-}
-export async function applyServerGoogleOAuthTokensForSetup(setupCode) {
-    if (!/^\d{6}$/.test(setupCode))
-        return false;
-    const url = `${getOnboardingServiceBase()}/api/provisioning/setup-code/${setupCode}/credentials`;
-    const response = await fetch(url, { signal: AbortSignal.timeout(30_000) });
-    if (response.status === 404)
-        return false;
-    if (!response.ok) {
-        throw new Error(`Failed to fetch setup credentials: HTTP ${response.status}`);
-    }
-    const body = await response.json();
-    const tokensJson = body.google?.oauthTokensJson?.trim();
-    if (!tokensJson)
-        return false;
-    const clientId = body.google?.clientId?.trim();
-    const clientSecret = body.google?.clientSecret?.trim();
-    if (!clientId || !clientSecret) {
-        throw new Error("Google setup credentials are missing OAuth client credentials");
-    }
-    writeGoogleTokensJson(tokensJson);
-    return { clientId, clientSecret };
-}
-export async function applyServerZohoOAuthTokensForSetup(setupCode) {
-    if (!/^\d{6}$/.test(setupCode))
-        return false;
-    const url = `${getOnboardingServiceBase()}/api/provisioning/setup-code/${setupCode}/credentials`;
-    const response = await fetch(url, { signal: AbortSignal.timeout(30_000) });
-    if (!response.ok)
-        return false;
-    const body = await response.json();
-    const tokensJson = body.zoho?.oauthTokensJson?.trim();
-    if (!tokensJson)
-        return false;
-    saveZohoTokens(ZohoTokensSchema.parse(JSON.parse(tokensJson)));
-    return true;
-}
-//# sourceMappingURL=setup-credentials.js.map

package/dist/onboarding/setup-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup-credentials.js","sourceRoot":"","sources":["../../src/onboarding/setup-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAoBhE,SAAS,wBAAwB;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,mCAAmC,CAAC;IACxG,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACxD,SAAiB;IAEjB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAE7C,MAAM,GAAG,GAAG,GAAG,wBAAwB,EAAE,gCAAgC,SAAS,cAAc,CAAC;IACjG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IAED,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,SAAiB;IACxE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,wBAAwB,EAAE,gCAAgC,SAAS,cAAc,CAAC;IACjG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/openai-credentials.d.ts

@@ -1,30 +0,0 @@
-/**
- * Shared OpenAI API credentials.
- *
- * Two tiers, highest priority first:
- *   1. Shared in-memory heartbeat cache (`sharedKeys.openaiApiKey`),
- *      populated by `applySharedKeysFromHeartbeat()` in
- *      `agent/heartbeat-manager.ts`.
- *   2. Local `config.openaiApiKey` — manual fallback. The heartbeat path
- *      seeds this on first delivery when the slot is empty, but never
- *      overwrites an existing value.
- *
- * Mirrors `anthropic-credentials.ts` minus the bundle (tier-1) layer,
- * which OpenAI does not currently use — per-agent OpenAI keys are not
- * shipped via `credentialBundle.body.llm` today. If/when they are
- * (see design/llm_credentials_in_bundle_df9fdc89.plan.md), add a
- * `bundleOpenAIApiKey` here and check it first in `resolveOpenAIApiKey`.
- */
-import type { VisionClawConfig } from "./config/types.js";
-export declare function setSharedOpenAIApiKey(apiKey: string | undefined): boolean;
-/**
- * Resolve the OpenAI API key to use.
- *
- * Precedence: shared cache > local config. Mirrors the
- * `resolveAnthropicApiKey` precedence so a fresh key broadcast by the
- * onboarding service supersedes a stale manual value on disk for the
- * current process. The on-disk value is only written by the heartbeat
- * path when initially absent.
- */
-export declare function resolveOpenAIApiKey(config: VisionClawConfig): string | undefined;
-//# sourceMappingURL=openai-credentials.d.ts.map

package/dist/openai-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openai-credentials.d.ts","sourceRoot":"","sources":["../src/openai-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAI1D,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAIzE;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAEhF"}

package/dist/openai-credentials.js

@@ -1,37 +0,0 @@
-/**
- * Shared OpenAI API credentials.
- *
- * Two tiers, highest priority first:
- *   1. Shared in-memory heartbeat cache (`sharedKeys.openaiApiKey`),
- *      populated by `applySharedKeysFromHeartbeat()` in
- *      `agent/heartbeat-manager.ts`.
- *   2. Local `config.openaiApiKey` — manual fallback. The heartbeat path
- *      seeds this on first delivery when the slot is empty, but never
- *      overwrites an existing value.
- *
- * Mirrors `anthropic-credentials.ts` minus the bundle (tier-1) layer,
- * which OpenAI does not currently use — per-agent OpenAI keys are not
- * shipped via `credentialBundle.body.llm` today. If/when they are
- * (see design/llm_credentials_in_bundle_df9fdc89.plan.md), add a
- * `bundleOpenAIApiKey` here and check it first in `resolveOpenAIApiKey`.
- */
-let sharedOpenAIApiKey;
-export function setSharedOpenAIApiKey(apiKey) {
-    if (sharedOpenAIApiKey === apiKey)
-        return false;
-    sharedOpenAIApiKey = apiKey;
-    return true;
-}
-/**
- * Resolve the OpenAI API key to use.
- *
- * Precedence: shared cache > local config. Mirrors the
- * `resolveAnthropicApiKey` precedence so a fresh key broadcast by the
- * onboarding service supersedes a stale manual value on disk for the
- * current process. The on-disk value is only written by the heartbeat
- * path when initially absent.
- */
-export function resolveOpenAIApiKey(config) {
-    return sharedOpenAIApiKey ?? config.openaiApiKey;
-}
-//# sourceMappingURL=openai-credentials.js.map

package/dist/openai-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openai-credentials.js","sourceRoot":"","sources":["../src/openai-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,IAAI,kBAAsC,CAAC;AAE3C,MAAM,UAAU,qBAAqB,CAAC,MAA0B;IAC9D,IAAI,kBAAkB,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,kBAAkB,GAAG,MAAM,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,OAAO,kBAAkB,IAAI,MAAM,CAAC,YAAY,CAAC;AACnD,CAAC"}

package/dist/phonecall-credentials.d.ts

@@ -1,21 +0,0 @@
-/**
- * Phonecall MCP API credentials.
- *
- * Three tiers, highest priority first:
- *   1. Per-agent bundle — reserved (currently unused; symmetry with the
- *      other credential modules).
- *   2. Shared in-memory heartbeat cache (`sharedKeys.phonecallApiKey`).
- *   3. Local `config.phonecallApiKey` — manual fallback. The heartbeat
- *      shared-keys path seeds this on first delivery but never overwrites
- *      an existing value.
- */
-import type { VisionClawConfig } from "./config/types.js";
-export declare function setBundlePhonecallApiKey(apiKey: string | undefined): boolean;
-export declare function setSharedPhonecallApiKey(apiKey: string | undefined): boolean;
-/**
- * Resolve the Phonecall MCP API key to use.
- *
- * Precedence: per-agent bundle > shared cache > local config (offline cache).
- */
-export declare function resolvePhonecallApiKey(config: VisionClawConfig): string | undefined;
-//# sourceMappingURL=phonecall-credentials.d.ts.map

package/dist/phonecall-credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"phonecall-credentials.d.ts","sourceRoot":"","sources":["../src/phonecall-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAK1D,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI5E;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAI5E;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAEnF"}

package/dist/phonecall-credentials.js

@@ -1,34 +0,0 @@
-/**
- * Phonecall MCP API credentials.
- *
- * Three tiers, highest priority first:
- *   1. Per-agent bundle — reserved (currently unused; symmetry with the
- *      other credential modules).
- *   2. Shared in-memory heartbeat cache (`sharedKeys.phonecallApiKey`).
- *   3. Local `config.phonecallApiKey` — manual fallback. The heartbeat
- *      shared-keys path seeds this on first delivery but never overwrites
- *      an existing value.
- */
-let bundlePhonecallApiKey;
-let sharedPhonecallApiKey;
-export function setBundlePhonecallApiKey(apiKey) {
-    if (bundlePhonecallApiKey === apiKey)
-        return false;
-    bundlePhonecallApiKey = apiKey;
-    return true;
-}
-export function setSharedPhonecallApiKey(apiKey) {
-    if (sharedPhonecallApiKey === apiKey)
-        return false;
-    sharedPhonecallApiKey = apiKey;
-    return true;
-}
-/**
- * Resolve the Phonecall MCP API key to use.
- *
- * Precedence: per-agent bundle > shared cache > local config (offline cache).
- */
-export function resolvePhonecallApiKey(config) {
-    return bundlePhonecallApiKey ?? sharedPhonecallApiKey ?? config.phonecallApiKey;
-}
-//# sourceMappingURL=phonecall-credentials.js.map

package/dist/phonecall-credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"phonecall-credentials.js","sourceRoot":"","sources":["../src/phonecall-credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,IAAI,qBAAyC,CAAC;AAC9C,IAAI,qBAAyC,CAAC;AAE9C,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,IAAI,qBAAqB,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,qBAAqB,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,IAAI,qBAAqB,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACnD,qBAAqB,GAAG,MAAM,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,OAAO,qBAAqB,IAAI,qBAAqB,IAAI,MAAM,CAAC,eAAe,CAAC;AAClF,CAAC"}

package/dist/realtime/agent-bridge.d.ts

@@ -1,7 +0,0 @@
-import type { ChannelManager } from "../channels/manager.js";
-import type { RealtimeModuleHandle } from "./index.js";
-export declare function wireRealtimeToAgent(options: {
-    realtimeHandle: RealtimeModuleHandle;
-    channelManager: ChannelManager;
-}): void;
-//# sourceMappingURL=agent-bridge.d.ts.map

package/dist/realtime/agent-bridge.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-bridge.d.ts","sourceRoot":"","sources":["../../src/realtime/agent-bridge.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,cAAc,EAAE,oBAAoB,CAAC;IACrC,cAAc,EAAE,cAAc,CAAC;CAChC,GAAG,IAAI,CA+BP"}

package/dist/realtime/agent-bridge.js

@@ -1,31 +0,0 @@
-import { logger } from "../logger.js";
-export function wireRealtimeToAgent(options) {
-    const { realtimeHandle, channelManager } = options;
-    realtimeHandle.onVoiceSessionFinished((event) => {
-        if (event.summary.noActionable) {
-            logger.system(`[Realtime] Voice session ${event.sessionId} has no actionable items; not enqueueing follow-up.`);
-            return;
-        }
-        const text = event.summaryText || event.summary.headline || "Voice session ended.";
-        const filename = `${event.sessionId}.json`;
-        const msg = {
-            id: `realtime_voice_${event.sessionId}`,
-            channel: "system",
-            sender: "realtime",
-            text: `## Realtime Voice Session Completed\n${text}`,
-            attachments: [],
-            timestamp: event.endedAt,
-            meta: {
-                kind: "realtime-voice-followup",
-                sessionId: event.sessionId,
-                transcriptFilename: filename,
-            },
-        };
-        channelManager.enqueueInternalMessage(msg);
-        realtimeHandle.markTranscriptProcessed(filename).catch((err) => {
-            logger.warn(`[Realtime] Failed to mark transcript processed after enqueue: ${err instanceof Error ? err.message : String(err)}`);
-        });
-        logger.system(`[Realtime] Enqueued voice follow-up through message path (session ${event.sessionId}).`);
-    });
-}
-//# sourceMappingURL=agent-bridge.js.map

package/dist/realtime/agent-bridge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-bridge.js","sourceRoot":"","sources":["../../src/realtime/agent-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAKtC,MAAM,UAAU,mBAAmB,CAAC,OAGnC;IACC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAEnD,cAAc,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;QAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,4BAA4B,KAAK,CAAC,SAAS,qDAAqD,CAAC,CAAC;YAChH,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,sBAAsB,CAAC;QACnF,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,SAAS,OAAO,CAAC;QAC3C,MAAM,GAAG,GAAmB;YAC1B,EAAE,EAAE,kBAAkB,KAAK,CAAC,SAAS,EAAE;YACvC,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,wCAAwC,IAAI,EAAE;YACpD,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK,CAAC,OAAO;YACxB,IAAI,EAAE;gBACJ,IAAI,EAAE,yBAAyB;gBAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,kBAAkB,EAAE,QAAQ;aAC7B;SACF,CAAC;QAEF,cAAc,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC3C,cAAc,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtE,MAAM,CAAC,IAAI,CAAC,iEAAiE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnI,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,qEAAqE,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC;IAC1G,CAAC,CAAC,CAAC;AACL,CAAC"}