wotann 0.5.0 → 0.5.39

package/dist/channels/teams.js

@@ -13,6 +13,7 @@
  * - OAuth2 client credentials to get token from login.microsoftonline.com
  * - Token used for all Bot Framework API calls
  */
+import { createPublicKey, createVerify } from "node:crypto";
 // ── Teams Adapter ──────────────────────────────────────────
 export class TeamsAdapter {
     type = "teams";
@@ -23,34 +24,119 @@ export class TeamsAdapter {
     messageHandler = null;
     accessToken = "";
     tokenExpiresAt = 0;
+    // JWKS cache for RS256 signature verification.
+    // Populated by fetchJwksIfStale() which is called from start() and
+    // opportunistically when a kid is not in cache. 24h TTL matches the
+    // Microsoft Bot Framework key-rotation cadence (max 24h advertised).
+    jwksCache = new Map();
+    jwksLastFetched = 0;
+    jwksFetchInFlight = null;
+    static JWKS_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+    static BOT_FRAMEWORK_OPENID = "https://login.botframework.com/v1/.well-known/openidconfiguration";
     constructor(appId, appPassword) {
         this.appId = appId ?? process.env["TEAMS_APP_ID"] ?? "";
         this.appPassword = appPassword ?? process.env["TEAMS_APP_PASSWORD"] ?? "";
     }
     /**
-     * V9 T1.6 — Structural JWT-header validation for Bot Framework webhooks.
+     * Resolve the OpenID-Connect discovery → JWKS chain for the Bot
+     * Framework and hydrate the public-key cache. Coalesces concurrent
+     * callers so we never issue parallel JWKS fetches.
      *
-     * Microsoft Teams webhooks arrive as signed JWT Bearer tokens in the
-     * `Authorization` header. Full cryptographic verification requires
-     * fetching Microsoft's OpenID Connect metadata + public keys from
-     * `https://login.botframework.com/v1/.well-known/openidconfiguration`
-     * and then its JWKS URL, then RS256-verifying the token — that's
-     * 150+ LOC of JWT + JWKS plumbing with a network fetch.
+     * Returns silently on network failure — callers (verifySignature) treat an
+     * empty cache as "verify-fail" so a stale or unreachable JWKS endpoint
+     * never produces a false-positive ACCEPT.
      *
-     * For Tier-1 ship this implements the STRUCTURAL checks a real JWT
-     * verifier must pass BEFORE the crypto step: shape (`x.y.z`), base64
-     * decodability, expected issuer, expected audience (appId), and
-     * non-expired timestamps. Any failure here means the token is
-     * definitely invalid; passing here means crypto-verify is the
-     * remaining step.
+     * Public + injectable `fetchImpl` so tests can supply a fake without
+     * touching the network.
+     */
+    async fetchJwksIfStale(fetchImpl = fetch) {
+        const now = Date.now();
+        if (this.jwksCache.size > 0 && now - this.jwksLastFetched < TeamsAdapter.JWKS_CACHE_TTL_MS) {
+            return;
+        }
+        if (this.jwksFetchInFlight)
+            return this.jwksFetchInFlight;
+        this.jwksFetchInFlight = (async () => {
+            try {
+                const openid = await fetchImpl(TeamsAdapter.BOT_FRAMEWORK_OPENID);
+                if (!openid.ok)
+                    return;
+                const meta = (await openid.json());
+                if (typeof meta.jwks_uri !== "string")
+                    return;
+                const jwks = await fetchImpl(meta.jwks_uri);
+                if (!jwks.ok)
+                    return;
+                const body = (await jwks.json());
+                const next = new Map();
+                for (const jwk of body.keys ?? []) {
+                    const kid = typeof jwk["kid"] === "string" ? jwk["kid"] : null;
+                    const kty = typeof jwk["kty"] === "string" ? jwk["kty"] : null;
+                    if (!kid || kty !== "RSA")
+                        continue;
+                    try {
+                        // Strip x5c/x5t so Node's JWK importer doesn't ambiguate.
+                        // Reassign instead of using delete so the source JWK is untouched (immutable input contract).
+                        const pureJwk = { ...jwk };
+                        delete pureJwk["x5c"];
+                        delete pureJwk["x5t"];
+                        delete pureJwk["x5t#S256"];
+                        const key = createPublicKey({ key: pureJwk, format: "jwk" });
+                        next.set(kid, key);
+                    }
+                    catch {
+                        // Skip malformed key — others may still verify.
+                    }
+                }
+                // Atomic swap — readers see either the old cache or the new
+                // one, never a partial state.
+                this.jwksCache = next;
+                this.jwksLastFetched = Date.now();
+            }
+            catch {
+                // Swallow network errors; verifySignature will fail closed.
+            }
+            finally {
+                this.jwksFetchInFlight = null;
+            }
+        })();
+        return this.jwksFetchInFlight;
+    }
+    /**
+     * Crypto-verify the RS256 JWT against the cached JWKS. Returns true
+     * iff `${headerB64}.${payloadB64}` signs to `signatureB64Url`
+     * under the public key identified by `kid`.
      *
-     * A V9 follow-up task should wire the full JWKS path; leaving the
-     * structural wire in place NOW lets the webhook host call
-     * `verifySignature(...)` and get a hard fail on malformed tokens
-     * without waiting for the full plumb.
+     * Internal — exposed for unit testing by the test file's `as never`
+     * cast. Production callers go through verifySignature().
+     */
+    cryptoVerifyJwt(headerB64, payloadB64, signatureB64Url, kid) {
+        const key = this.jwksCache.get(kid);
+        if (!key)
+            return false;
+        const verifier = createVerify("RSA-SHA256");
+        verifier.update(`${headerB64}.${payloadB64}`);
+        return verifier.verify(key, Buffer.from(signatureB64Url, "base64url"));
+    }
+    /**
+     * Verify a Bot Framework JWT in the `Authorization` header.
      *
-     * @param authHeader Full `Authorization` header (expected form `Bearer <jwt>`).
-     * @returns true when structural checks pass (NOT a full crypto verify).
+     * Two layers run in order:
+     *   1. Structural validation — shape `x.y.z`, base64 decodability,
+     *      RS256 alg, expected issuer, audience-binding to the bot's
+     *      appId, exp/nbf timestamps.
+     *   2. Cryptographic RS256 signature verification against
+     *      Microsoft's published JWKS keys (24h-cached, hydrated at
+     *      `start()` and on-demand via `fetchJwksIfStale()`).
+     *
+     * Sync by contract — callers in `webhook-router.ts` use this
+     * inline. The crypto step succeeds when (and only when) the JWKS
+     * cache contains the `kid` from the token header. Cache misses
+     * fail-closed (return false) and fire a background refresh so the
+     * NEXT webhook delivery can verify.
+     *
+     * @param authHeader Full `Authorization` header (form `Bearer <jwt>`).
+     * @returns true iff structural + crypto checks both pass.
      */
     verifySignature(authHeader) {
         if (!authHeader || !authHeader.startsWith("Bearer "))
@@ -59,8 +145,8 @@ export class TeamsAdapter {
         const parts = jwt.split(".");
         if (parts.length !== 3)
             return false;
-        const [headerB64, payloadB64] = parts;
-        if (!headerB64 || !payloadB64)
+        const [headerB64, payloadB64, signatureB64Url] = parts;
+        if (!headerB64 || !payloadB64 || !signatureB64Url)
             return false;
         try {
             const header = JSON.parse(Buffer.from(headerB64.replace(/-/g, "+").replace(/_/g, "/"), "base64").toString("utf8"));
@@ -81,9 +167,16 @@ export class TeamsAdapter {
                 return false;
             if (typeof payload.nbf === "number" && payload.nbf > nowSec + 60)
                 return false;
-            // Structural check passed. Crypto verify is the next step —
-            // deferred to a V9 follow-up wire.
-            return true;
+            // Crypto-verify against JWKS. RS256 requires a `kid` per RFC.
+            if (typeof header.kid !== "string" || header.kid.length === 0)
+                return false;
+            const verified = this.cryptoVerifyJwt(headerB64, payloadB64, signatureB64Url, header.kid);
+            if (!verified) {
+                // Cache miss or rotated key — kick a refresh so the next call
+                // can succeed. Fire-and-forget; failures are swallowed.
+                void this.fetchJwksIfStale().catch(() => { });
+            }
+            return verified;
         }
         catch {
             return false;
@@ -96,6 +189,10 @@ export class TeamsAdapter {
         }
         // Authenticate with Bot Framework
         await this.refreshToken();
+        // Preheat the JWKS cache so the first inbound webhook can be
+        // crypto-verified without waiting on a roundtrip. Best-effort —
+        // failures are swallowed; verifySignature() will retry on cache miss.
+        await this.fetchJwksIfStale().catch(() => { });
         this.connected = true;
     }
     async stop() {

package/dist/channels/teams.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/channels/teams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6BH,8DAA8D;AAE9D,MAAM,OAAO,YAAY;IACd,IAAI,GAAgB,OAAO,CAAC;IAC5B,IAAI,GAAG,iBAAiB,CAAC;IAEjB,KAAK,CAAS;IACd,WAAW,CAAS;IAC7B,SAAS,GAAG,KAAK,CAAC;IAClB,cAAc,GAAqD,IAAI,CAAC;IACxE,WAAW,GAAW,EAAE,CAAC;IACzB,cAAc,GAAW,CAAC,CAAC;IAEnC,YAAY,KAAc,EAAE,WAAoB;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,eAAe,CAAC,UAAkB;QAChC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACtD,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,CAAC;YAChE,kCAAkC;YAClC,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACzC,0DAA0D;YAC1D,IACE,OAAO,CAAC,GAAG,KAAK,8BAA8B;gBAC9C,OAAO,CAAC,GAAG,KAAK,+DAA+D,EAC/E,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,oCAAoC;YACpC,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1E,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/E,4DAA4D;YAC5D,mCAAmC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,gDAAgD;gBAC9C,gDAAgD,CACnD,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAwB;QACjC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,qDAAqD;YACrD,oCAAoC;YACpC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAC;YAEjD,MAAM,QAAQ,GAAG;gBACf,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,UAAU,EAAE,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;gBAChE,SAAS,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,MAAM,QAAQ,GAAG,GAAG,UAAU,qBAAqB,kBAAkB,CAAC,cAAc,CAAC,aAAa,CAAC;YAEnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;oBAC3C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAgD;QACxD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,QAA8B;QACjD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO;QAE1D,MAAM,GAAG,GAAoB;YAC3B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE;YAC/D,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;YAC1B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI;YACtB,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvC,OAAO,EAAE,QAAQ,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,YAAY;QACxB,MAAM,QAAQ,GAAG,sEAAsE,CAAC;QAExF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,aAAa,EAAE,IAAI,CAAC,WAAW;YAC/B,KAAK,EAAE,uCAAuC;SAC/C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC3D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACrC,kCAAkC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;CACF;AAED,8DAA8D;AAE9D,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAEzD,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE,cAAc,IAAI,SAAS,CAAC,CAAC;AAChE,CAAC;AA+CD,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA4B,EAC5B,SAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,0BAA0B,CAAC;IAE9D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,SAAS,GAA+B,OAAO,CAAC;IAEpD,MAAM,QAAQ,GAAG,KAAK,EAAE,QAA8B,EAAiB,EAAE;QACvE,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO;QACxC,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAa;QACjB,IAAI;QACJ,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA8B;IAE9B,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClG,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7F,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,YAAqB;QAC7B,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE;QACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;QAC1B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE;QAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACzC,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC"}
+{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/channels/teams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAkB,MAAM,aAAa,CAAC;AA4B5E,8DAA8D;AAE9D,MAAM,OAAO,YAAY;IACd,IAAI,GAAgB,OAAO,CAAC;IAC5B,IAAI,GAAG,iBAAiB,CAAC;IAEjB,KAAK,CAAS;IACd,WAAW,CAAS;IAC7B,SAAS,GAAG,KAAK,CAAC;IAClB,cAAc,GAAqD,IAAI,CAAC;IACxE,WAAW,GAAW,EAAE,CAAC;IACzB,cAAc,GAAW,CAAC,CAAC;IAEnC,+CAA+C;IAC/C,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IAC7D,SAAS,GAAmC,IAAI,GAAG,EAAE,CAAC;IACtD,eAAe,GAAG,CAAC,CAAC;IACpB,iBAAiB,GAAyB,IAAI,CAAC;IAE/C,MAAM,CAAU,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxD,MAAM,CAAU,oBAAoB,GAC1C,mEAAmE,CAAC;IAEtE,YAAY,KAAc,EAAE,WAAoB;QAC9C,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CAAC,YAA0B,KAAK;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,eAAe,GAAG,YAAY,CAAC,iBAAiB,EAAE,CAAC;YAC3F,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAC1D,IAAI,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;gBAClE,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,OAAO;gBACvB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAoC,CAAC;gBACtE,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO;gBAC9C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,OAAO;gBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAE9B,CAAC;gBACF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;gBAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;oBAClC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC/D,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC/D,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,KAAK;wBAAE,SAAS;oBACpC,IAAI,CAAC;wBACH,0DAA0D;wBAC1D,8FAA8F;wBAC9F,MAAM,OAAO,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;wBACpD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;wBACtB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;wBACtB,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;wBAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,OAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;wBACtE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;oBACrB,CAAC;oBAAC,MAAM,CAAC;wBACP,gDAAgD;oBAClD,CAAC;gBACH,CAAC;gBACD,4DAA4D;gBAC5D,8BAA8B;gBAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAChC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,eAAe,CACb,SAAiB,EACjB,UAAkB,EAClB,eAAuB,EACvB,GAAW;QAEX,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC5C,QAAQ,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;QAC9C,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,eAAe,CAAC,UAAkB;QAChC,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC;QACvD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACxC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC3B,CAAC;YAChE,kCAAkC;YAClC,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;YACzC,0DAA0D;YAC1D,IACE,OAAO,CAAC,GAAG,KAAK,8BAA8B;gBAC9C,OAAO,CAAC,GAAG,KAAK,+DAA+D,EAC/E,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,oCAAoC;YACpC,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC7C,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1E,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM,GAAG,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/E,8DAA8D;YAC9D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,8DAA8D;gBAC9D,wDAAwD;gBACxD,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,gDAAgD;gBAC9C,gDAAgD,CACnD,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,6DAA6D;QAC7D,gEAAgE;QAChE,sEAAsE;QACtE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAwB;QACjC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAElC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,qDAAqD;YACrD,oCAAoC;YACpC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc;gBAAE,OAAO,KAAK,CAAC;YAEjD,MAAM,QAAQ,GAAG;gBACf,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,UAAU,EAAE,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;gBAChE,SAAS,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC;YAEF,MAAM,QAAQ,GAAG,GAAG,UAAU,qBAAqB,kBAAkB,CAAC,cAAc,CAAC,aAAa,CAAC;YAEnG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE;oBAC3C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAgD;QACxD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,QAA8B;QACjD,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO;QACjC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO;QAE1D,MAAM,GAAG,GAAoB;YAC3B,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,GAAG,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE;YAC/D,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;YAC1B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;YAC9B,OAAO,EAAE,QAAQ,CAAC,IAAI;YACtB,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YACvC,OAAO,EAAE,QAAQ,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,YAAY;QACxB,MAAM,QAAQ,GAAG,sEAAsE,CAAC;QAExF,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,aAAa,EAAE,IAAI,CAAC,WAAW;YAC/B,KAAK,EAAE,uCAAuC;SAC/C,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC3D,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;QACrC,kCAAkC;QAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;;AAGH,8DAA8D;AAE9D,SAAS,cAAc,CAAC,SAAiB;IACvC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAEvD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAEzD,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE,cAAc,IAAI,SAAS,CAAC,CAAC;AAChE,CAAC;AA+CD,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA4B,EAC5B,SAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,IAAI,0BAA0B,CAAC;IAE9D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,SAAS,GAA+B,OAAO,CAAC;IAEpD,MAAM,QAAQ,GAAG,KAAK,EAAE,QAA8B,EAAiB,EAAE;QACvE,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO;QACxC,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,IAAa;QACjB,IAAI;QACJ,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA8B;IAE9B,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClG,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7F,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,YAAqB;QAC7B,cAAc,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE;QACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;QAC1B,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE;QAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACzC,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC"}

package/dist/channels/terminal-mention.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-mention.d.ts","sourceRoot":"","sources":["../../src/channels/terminal-mention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAMD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAWpE;AAMD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,kBAAkB,CAYtF;AAqCD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAExF"}
+{"version":3,"file":"terminal-mention.d.ts","sourceRoot":"","sources":["../../src/channels/terminal-mention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAMD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAWpE;AAMD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,kBAAkB,CAYtF;AAwCD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,GAAG,MAAM,CAExF"}

package/dist/channels/terminal-mention.js

@@ -65,7 +65,10 @@ function truncate(s, max) {
     return s.length > max ? s.slice(0, max - 1) + "…" : s;
 }
 function shortPath(path) {
-    const home = process.env["HOME"] ?? "";
+    // os.homedir() reads HOME on POSIX and USERPROFILE on Windows, so
+    // the ~ shortening works on every supported platform. Direct
+    // process.env["HOME"] returns "" on Windows by default.
+    const home = require("node:os").homedir();
     if (home && path.startsWith(home))
         return `~${path.slice(home.length)}`;
     const parts = path.split("/").filter(Boolean);

package/dist/channels/terminal-mention.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-mention.js","sourceRoot":"","sources":["../../src/channels/terminal-mention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAwBH,gEAAgE;AAEhE,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,kDAAkD;IAClD,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACzD,CAAC;IACD,mEAAmE;IACnE,iDAAiD;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACjE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACnD,CAAC;AAED,gEAAgE;AAEhE,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,UAAU,uBAAuB,CAAC,QAA0B;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,cAAc,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW;QAC9D,OAAO;QACP,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAmB,EAAE,KAAa;IACtD,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GACR,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,cAAc,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,SAAS,CAAC,CAAmB,EAAE,IAAY;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,gEAAgE;AAEhE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,UAA8B;IAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,UAAU,CAAC,OAAO,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACnG,CAAC"}
+{"version":3,"file":"terminal-mention.js","sourceRoot":"","sources":["../../src/channels/terminal-mention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAwBH,gEAAgE;AAEhE,MAAM,UAAU,GAAG,eAAe,CAAC;AAEnC,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,kDAAkD;IAClD,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACzD,CAAC;IACD,mEAAmE;IACnE,iDAAiD;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACjE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACnD,CAAC;AAED,gEAAgE;AAEhE,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,MAAM,UAAU,uBAAuB,CAAC,QAA0B;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,cAAc,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW;QAC9D,OAAO;QACP,IAAI;QACJ,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAmB,EAAE,KAAa;IACtD,MAAM,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,IAAI,GACR,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO,cAAc,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,SAAS,CAAC,CAAmB,EAAE,IAAY;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAW;IACtC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,kEAAkE;IAClE,6DAA6D;IAC7D,wDAAwD;IACxD,MAAM,IAAI,GAAI,OAAO,CAAC,SAAS,CAA8B,CAAC,OAAO,EAAE,CAAC;IACxE,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,gEAAgE;AAEhE;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,UAA8B;IAC9E,OAAO,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,IAAI,UAAU,CAAC,OAAO,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACnG,CAAC"}

package/dist/cli/commands/blast-radius.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `wotann blast-radius` — surface the `getBlastRadius()` intelligence
+ * primitive as a CLI command. Wires `src/intelligence/blast-radius.ts`
+ * (previously a zombie — implemented, exported deeply, but unreachable
+ * via the CLI surface) so users can run:
+ *
+ *   wotann blast-radius MySymbol [--root .] [--lang typescript]
+ *   wotann blast-radius MySymbol --json
+ *
+ * Pure handler (like `intent.ts` and `grep.ts`): returns
+ * `{ success, lines, error? }`. The CLI shell in `src/index.ts` decides
+ * exit codes + how to print. No `console.log`, no `process.exit`.
+ *
+ * Output modes:
+ *   - Default ("pretty"): one line per usage of the form
+ *       `<path>:<line>:<column>  <preview>`
+ *     preceded by a header (`blast-radius "<sym>" — N usage(s)…`) and
+ *     followed by the LOW USAGE / engine-unavailable warning if any.
+ *   - JSON (`json: true`): a single line containing
+ *     `JSON.stringify(BlastRadiusResult)` — fully round-trippable. The
+ *     `usages` array, `truncated`, and `warning` are preserved exactly.
+ *
+ * Honest failure modes (QB #6): the underlying primitive NEVER throws;
+ * it surfaces "engine unavailable: …" warnings. This handler maps those
+ * to `success: false` only when the warning carries an
+ * "engine unavailable" prefix AND we have no usages — every other
+ * shape (including a clean LOW USAGE) is `success: true` because the
+ * search itself ran cleanly.
+ *
+ * Per-call state (QB #7): zero module-global mutation. Each call
+ * builds a fresh options bag.
+ */
+import { type Language } from "../../intelligence/blast-radius.js";
+export interface BlastRadiusCommandOptions {
+    readonly symbol: string;
+    readonly rootDir: string;
+    readonly languages?: readonly Language[];
+    readonly maxUsages?: number;
+    readonly json?: boolean;
+}
+export interface BlastRadiusCommandResult {
+    success: boolean;
+    lines: readonly string[];
+    error?: string;
+}
+export declare function runBlastRadiusCommand(opts: BlastRadiusCommandOptions): Promise<BlastRadiusCommandResult>;
+//# sourceMappingURL=blast-radius.d.ts.map

package/dist/cli/commands/blast-radius.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blast-radius.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/blast-radius.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,oCAAoC,CAAC;AAI5C,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CAwCnC"}

package/dist/cli/commands/blast-radius.js

@@ -0,0 +1,123 @@
+/**
+ * `wotann blast-radius` — surface the `getBlastRadius()` intelligence
+ * primitive as a CLI command. Wires `src/intelligence/blast-radius.ts`
+ * (previously a zombie — implemented, exported deeply, but unreachable
+ * via the CLI surface) so users can run:
+ *
+ *   wotann blast-radius MySymbol [--root .] [--lang typescript]
+ *   wotann blast-radius MySymbol --json
+ *
+ * Pure handler (like `intent.ts` and `grep.ts`): returns
+ * `{ success, lines, error? }`. The CLI shell in `src/index.ts` decides
+ * exit codes + how to print. No `console.log`, no `process.exit`.
+ *
+ * Output modes:
+ *   - Default ("pretty"): one line per usage of the form
+ *       `<path>:<line>:<column>  <preview>`
+ *     preceded by a header (`blast-radius "<sym>" — N usage(s)…`) and
+ *     followed by the LOW USAGE / engine-unavailable warning if any.
+ *   - JSON (`json: true`): a single line containing
+ *     `JSON.stringify(BlastRadiusResult)` — fully round-trippable. The
+ *     `usages` array, `truncated`, and `warning` are preserved exactly.
+ *
+ * Honest failure modes (QB #6): the underlying primitive NEVER throws;
+ * it surfaces "engine unavailable: …" warnings. This handler maps those
+ * to `success: false` only when the warning carries an
+ * "engine unavailable" prefix AND we have no usages — every other
+ * shape (including a clean LOW USAGE) is `success: true` because the
+ * search itself ran cleanly.
+ *
+ * Per-call state (QB #7): zero module-global mutation. Each call
+ * builds a fresh options bag.
+ */
+import { getBlastRadius, } from "../../intelligence/blast-radius.js";
+// ── Entry point ────────────────────────────────────────────────
+export async function runBlastRadiusCommand(opts) {
+    // Pre-validate symbol up front. The primitive also guards this, but
+    // returning a structured `error` here gives the shell something to
+    // surface as a non-zero exit without re-parsing the warning.
+    if (opts.symbol.trim().length === 0) {
+        return {
+            success: false,
+            lines: [],
+            error: "blast-radius requires a non-empty <symbol>",
+        };
+    }
+    const result = await getBlastRadius({
+        symbol: opts.symbol,
+        rootDir: opts.rootDir,
+        ...(opts.languages !== undefined ? { languages: opts.languages } : {}),
+        ...(opts.maxUsages !== undefined ? { maxUsages: opts.maxUsages } : {}),
+    });
+    // JSON path — emit a single serialized line. Keeps tooling pipelines
+    // simple: `wotann blast-radius foo --json | jq …`. We intentionally do
+    // NOT pretty-print (2-space indent) so downstream stream parsers can
+    // line-split.
+    if (opts.json === true) {
+        const engineFailed = isEngineUnavailable(result);
+        return {
+            success: !engineFailed,
+            lines: [JSON.stringify(serialize(result))],
+            ...(engineFailed && result.warning ? { error: result.warning } : {}),
+        };
+    }
+    // Pretty path.
+    const engineFailed = isEngineUnavailable(result);
+    const lines = formatPretty(result);
+    return {
+        success: !engineFailed,
+        lines,
+        ...(engineFailed && result.warning ? { error: result.warning } : {}),
+    };
+}
+// ── Helpers ────────────────────────────────────────────────────
+/**
+ * An "engine unavailable" warning is the primitive's signal that no
+ * backend produced results (e.g. rootDir missing, every engine errored).
+ * It is distinct from a LOW USAGE warning, which is a legitimate clean
+ * answer ("we searched and found ≤1 hit"). We treat the former as a CLI
+ * failure (exit non-zero) and the latter as success.
+ */
+function isEngineUnavailable(result) {
+    if (result.warning === null)
+        return false;
+    return result.warning.startsWith("engine unavailable");
+}
+function serialize(result) {
+    return {
+        symbol: result.symbol,
+        usages: result.usages.map((u) => ({
+            path: u.path,
+            line: u.line,
+            column: u.column,
+            preview: u.preview,
+        })),
+        truncated: result.truncated,
+        warning: result.warning,
+    };
+}
+function formatPretty(result) {
+    const lines = [];
+    const fileCount = countDistinctFiles(result.usages);
+    const truncSuffix = result.truncated ? " (truncated)" : "";
+    lines.push(`blast-radius "${result.symbol}" — ${result.usages.length} usage(s) across ${fileCount} file(s)${truncSuffix}`);
+    if (result.usages.length === 0) {
+        lines.push("  (no matches)");
+    }
+    else {
+        for (const u of result.usages) {
+            lines.push(`  ${u.path}:${u.line}:${u.column}  ${u.preview}`);
+        }
+    }
+    if (result.warning !== null) {
+        lines.push(`  ! ${result.warning}`);
+    }
+    return lines;
+}
+function countDistinctFiles(usages) {
+    const set = new Set();
+    for (const u of usages)
+        set.add(u.path);
+    return set.size;
+}
+//# sourceMappingURL=blast-radius.js.map

package/dist/cli/commands/blast-radius.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blast-radius.js","sourceRoot":"","sources":["../../../src/cli/commands/blast-radius.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EACL,cAAc,GAGf,MAAM,oCAAoC,CAAC;AAkB5C,kEAAkE;AAElE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA+B;IAE/B,oEAAoE;IACpE,mEAAmE;IACnE,6DAA6D;IAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,4CAA4C;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC,CAAC;IAEH,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,cAAc;IACd,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,CAAC,YAAY;YACtB,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1C,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,eAAe;IACf,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,CAAC,YAAY;QACtB,KAAK;QACL,GAAG,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,kEAAkE;AAElE;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,MAAyB;IACpD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AACzD,CAAC;AAcD,SAAS,SAAS,CAAC,MAAyB;IAC1C,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;QACH,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAyB;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,KAAK,CAAC,IAAI,CACR,iBAAiB,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,oBAAoB,SAAS,WAAW,WAAW,EAAE,CAC/G,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA4C;IACtE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC"}

package/dist/cli/commands/evolve.d.ts

@@ -0,0 +1,92 @@
+/**
+ * `wotann evolve` — user-facing subcommand surface for the evolution
+ * subsystem (`src/evolution/` Optimizer/Mutator/Evaluator).
+ *
+ * The evolution pipeline runs inside the daemon via `learning/dream-runner.ts`.
+ * This handler exposes a thin, read-only-by-default CLI veneer so users can
+ * inspect runs, replay the optimizer one generation at a time, and review
+ * the constraint guards without poking at internal state files.
+ *
+ * Pure handler — returns `{ success, lines, error? }` so the CLI shell
+ * (src/index.ts) decides exit codes and how to print. Mirrors the
+ * intent.ts pattern; no process.exit, no chalk, no console.*.
+ *
+ * Subcommands:
+ *   status        Show last evolution run timestamp, last fitness score,
+ *                 current generation, mutation count. Reads from
+ *                 `<wotannDir>/evolution-state.json` (canonical state file
+ *                 — the dream-runner is the writer; we are the reader).
+ *   history [N]   Print the last N evolution generations from
+ *                 `<wotannDir>/evolution-log.jsonl` (the audit log that
+ *                 `learning/self-evolution.ts` already appends to). Default
+ *                 N = 10.
+ *   run           Invoke the Optimizer end-to-end through
+ *                 `src/evolution/runner.evolveSkill` — the same public
+ *                 entry-point the daemon uses. Surfaces progress as lines.
+ *   constraints   List the FORBIDDEN_TOKENS + size caps from
+ *                 `src/evolution/constraints.ts` so the user can audit the
+ *                 guardrails before a long run.
+ *
+ * WOTANN quality bars:
+ *  - QB #6 honest failures: every read error surfaces verbatim. No
+ *    "everything-OK fallthrough" when state files are corrupt.
+ *  - QB #7 per-call state: a fresh wotannDir read per call — no module-
+ *    level caching. Tests can mutate the directory between calls.
+ *  - QB #11 scope-bounded: writes only happen via the existing module
+ *    APIs (Optimizer's onProgress, the runner's archive logic). We do
+ *    NOT introduce a parallel state writer here.
+ *  - QB #14 commit-claim verification: this handler dispatches the
+ *    real `evolveSkill` for `run`, NOT a re-implementation. The
+ *    user can confirm it's the same code-path the daemon uses.
+ *  - QB #20 zombie-instance check: the `run` action takes injectable
+ *    `mutate`/`evaluate` callers so tests can wire to stubs without
+ *    instantiating provider clients.
+ */
+import type { MutationCaller } from "../../evolution/optimizer.js";
+import type { EvaluationCaller } from "../../evolution/evaluator.js";
+export type EvolveAction = "status" | "history" | "run" | "constraints";
+export interface EvolveCommandOptions {
+    readonly action: EvolveAction;
+    readonly wotannDir: string;
+    readonly limit?: number;
+    readonly skillPath?: string;
+    readonly population?: number;
+    readonly generations?: number;
+    readonly targetFitness?: number;
+    /**
+     * When true, the winning variant overwrites the skill file (and the
+     * original is archived). Carried forward from the legacy
+     * `wotann evolve <skillPath> --write` standalone. Default false so
+     * runs are non-destructive by default.
+     */
+    readonly write?: boolean;
+    /**
+     * Maximum spend in USD before stopping. Carried forward from the
+     * legacy standalone's `--budget` flag. Forwarded to the optimizer
+     * when present.
+     */
+    readonly budgetUsd?: number;
+    /**
+     * Injectable callers. In production the caller wires real provider
+     * mutators/evaluators; tests pass deterministic stubs so the suite
+     * never exec's a real mutation. When neither is provided AND the
+     * caller does NOT pass {requireInjected:true}, the CLI auto-injects
+     * deterministic stubs (the legacy CLI behaviour).
+     */
+    readonly mutate?: MutationCaller;
+    readonly evaluate?: EvaluationCaller;
+    /**
+     * When true, omitting `mutate`/`evaluate` returns an error; when
+     * false (default) the run handler falls back to stub callers so
+     * `wotann evolve run <skill>` works without programmatic wiring.
+     */
+    readonly requireInjected?: boolean;
+}
+export interface EvolveCommandResult {
+    readonly success: boolean;
+    readonly action: EvolveAction;
+    readonly lines: readonly string[];
+    readonly error?: string;
+}
+export declare function runEvolveCommand(opts: EvolveCommandOptions): Promise<EvolveCommandResult>;
+//# sourceMappingURL=evolve.d.ts.map

package/dist/cli/commands/evolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evolve.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/evolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAKrE,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,KAAK,GAAG,aAAa,CAAC;AAExE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAG3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAGxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAsCD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoB/F"}