@agenthippo-ai/agenthippo 1.110.38 → 1.110.39

package/out/cli/index.js

@@ -417,7 +417,7 @@ else {
 ${Ge}`,ut.message=ge)}return ut}onMaintenance(e){let n=Date.now();for(let[r,s]of this.activeSessions.entries())n-s.lastUsedAt>AN&&(this.activeSessions.delete(r),e.info(`[AgentIDE] Closed idle custom engine session (key=${r}, idleMs=${n-s.lastUsedAt})`));for(let{engine:r,manifest:s}of this.instances.values())try{r.onMaintenance?.(e)}catch(i){e.warn(`[AgentIDE] Custom engine "${s.id}" onMaintenance error: ${i}`)}this.workerPool.onMaintenance()}dispose(){this.clearInstances(),this.workerPool.disposeAll(),this.activeSessions.clear(),this.mtimeCache.clear()}};An.CustomEngine=bd});var Ai=S(fe=>{"use strict";var RN=fe&&fe.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),CN=fe&&fe.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),kN=fe&&fe.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&RN(n,e,r[s]);return CN(n,e),n}})();Object.defineProperty(fe,"__esModule",{value:!0});fe.resolveModelAlias=fe.getSessionDir=fe.createSessionDir=fe.computeSkillsSignature=fe.syncPackToWorkspace=fe.initSessionStoreWithStore=fe.CLIPermissionHandler=fe.AutoApprovePermissionHandler=fe.DirectorySessionStore=fe.FileSessionStore=fe.MemorySessionStore=fe.StaticConfigProvider=fe.NoOpEditTracker=fe.NoOpLogger=fe.ConsoleLogger=void 0;fe.createHeadlessRunner=Od;fe.createEvalRunner=VN;fe.createCLIRunner=WN;var cE=kN(require("path")),$N=jm(),DN=Vm(),LN=pi(),Ht=qa();Object.defineProperty(fe,"ConsoleLogger",{enumerable:!0,get:function(){return Ht.ConsoleLogger}});Object.defineProperty(fe,"NoOpLogger",{enumerable:!0,get:function(){return Ht.NoOpLogger}});Object.defineProperty(fe,"NoOpEditTracker",{enumerable:!0,get:function(){return Ht.NoOpEditTracker}});Object.defineProperty(fe,"StaticConfigProvider",{enumerable:!0,get:function(){return Ht.StaticConfigProvider}});Object.defineProperty(fe,"MemorySessionStore",{enumerable:!0,get:function(){return Ht.MemorySessionStore}});Object.defineProperty(fe,"FileSessionStore",{enumerable:!0,get:function(){return Ht.FileSessionStore}});Object.defineProperty(fe,"DirectorySessionStore",{enumerable:!0,get:function(){return Ht.DirectorySessionStore}});Object.defineProperty(fe,"AutoApprovePermissionHandler",{enumerable:!0,get:function(){return Ht.AutoApprovePermissionHandler}});Object.defineProperty(fe,"CLIPermissionHandler",{enumerable:!0,get:function(){return Ht.CLIPermissionHandler}});var lE=fi(),MN=hd(),uE=no(),GN=br(),UN=ps(),HN=ui(),jN="AGENTHIPPO_TURN_NONCE";function xN(t,e){let n=t?.trim();if(n)return n;let r=e?.trim();if(r)return r;let s=process.env.AGENTHIPPO_ANALYTICS_USER_ID?.trim()||process.env.AGENTIDE_ANALYTICS_USER_ID?.trim();if(s)return s;let i=process.env.LOGNAME?.trim()||process.env.USER?.trim()||process.env.LNAME?.trim()||process.env.USERNAME?.trim();return i||"anonymous"}function Od(t){if(t.freshState){let E=new Ht.MemorySessionStore;(0,lE.initSessionStoreWithStore)(E)}else(0,lE.initSessionStoreWithStore)(new Ht.DirectorySessionStore(cE.join(t.storagePath,"provider-sessions")));let e=!!(t.litellmApiKey||t.openaiApiKey||t.anthropicApiKey),n={storagePath:t.storagePath,codexHome:void 0,claudeConfigDir:void 0,litellmApiKey:t.litellmApiKey??(e?void 0:t.apiKey),litellmBaseUrl:t.baseUrl,openaiApiKey:t.openaiApiKey,anthropicApiKey:t.anthropicApiKey,claudeCodeExecutablePath:t.claudeCodeExecutablePath,codexExecutablePath:t.codexExecutablePath},r=t.logger??new Ht.ConsoleLogger("[AgentIDE]"),s=t.editTracker??new Ht.NoOpEditTracker,i=new Ht.StaticConfigProvider({},t.customProviders??{},t.engineSettings??{}),o=t.permissionHandler??new Ht.AutoApprovePermissionHandler,a={logger:r,editTracker:s,configProvider:i,permissionHandler:o,cliEnvPatch:t.cliEnvPatch},c=t.packId??"default",l=E=>(0,MN.computeSkillsSignature)(E,c),d=()=>t.bundledPromptsDir,u,f,p,g=()=>(u||(u=new DN.ClaudeEngine(n,async(E,w)=>l(E)??`headless-${c}`,d)),u),m=()=>(f||(f=new $N.CodexEngine(n,l,d)),f),h=async()=>{if(!p){let{CustomEngine:E}=await Promise.resolve().then(()=>In(vd()));p=new E(n,d)}return p},y=new uE.SessionEventWriter(t.analyticsSessionsDir??cE.join((0,HN.getAgentideHome)(),"analytics","sessions"));return{async run(E){let w={success:!1,text:"",thinking:"",toolCalls:[]},O={async thinking(T){if(E.emitter)return E.emitter.thinking(T);w.thinking+=T},async text(T){if(E.emitter)return E.emitter.text(T);w.text+=T},async toolStart(T,K,B,ne){if(E.emitter)return E.emitter.toolStart(T,K,B,ne);w.toolCalls.push({name:T,input:K})},async toolEnd(T,K,B,ne,J){if(E.emitter)return E.emitter.toolEnd(T,K,B,ne,J);let oe=w.toolCalls.find(ge=>ge.name===T&&!ge.result);oe&&(oe.result=B,oe.isError=ne)},async progress(T){if(E.emitter)return E.emitter.progress(T);r.debug(`[Progress] ${T}`)},async question(T){return E.emitter?E.emitter.question(T):(r.debug(`[Question] ${T.prompt}`),{selected:[],freeText:null,declined:!0})},async error(T){w.error=T,w.success=!1,await E.emitter?.error(T)},async done(){w.error||(w.success=!0),await E.emitter?.done()}},b=(0,LN.generateRequestId)(),v=E.sessionId??`headless-${Date.now()}`,A=t.provenance?.(),N=(0,uE.wrapEmitterWithObservability)(O,y,v,b,(0,UN.currentCredential)()?.userId,A&&{policy_version:A.policyVersion,pack_digest:A.packDigest,engine_version:A.engineVersion,tier:A.tier,instance_id:A.instanceId}),I={modelId:E.modelId,engineId:E.engineId,workspaceRoot:E.workspaceRoot,additionalDirectories:E.additionalDirectories,sessionId:v,analyticsUserId:xN(E.analyticsUserId,t.analyticsUserId),apiKey:E.modelToken??(e?void 0:t.apiKey),baseUrl:t.baseUrl,useLiteLLM:t.useLiteLLM,agentPackId:c,agentPackVersion:t.packVersion,policyVersion:A?.policyVersion,packDigest:A?.packDigest,engineVersion:A?.engineVersion,tier:A?.tier,instanceId:A?.instanceId,permissions:E.permissions,engineHomeUserKey:E.engineHomeUserKey,requestId:b};await N.emitTurnStart();let k=null;if(t.dataPlane&&!E.turnEnv?.[jN])try{k=await t.dataPlane.beginTurn({sessionKey:v})}catch(T){return w.error=`data-plane turn registration failed: ${T instanceof Error?T.message:String(T)}`,await N.error(w.error),await N.emitTurnEnd(!1),w}let P={...a,cliEnvPatch:{...a.cliEnvPatch??{},...(0,GN.buildSessionEnvPatch)({workspaceRoot:E.workspaceRoot,chatSessionId:v,gatewaySessionKey:E.gatewaySessionKey}),...E.turnEnv??{},...k?.env??{}}};try{let T=E.engineId.trim().toLowerCase();T==="claude"?await g().stream(E.message,I,N,P,E.signal):T==="codex"?await m().stream(E.message,I,N,P,E.signal):await(await h()).stream(E.message,I,N,P,E.signal)}catch(T){w.error=T instanceof Error?T.message:String(T),w.success=!1,await N.error(w.error)}finally{try{await k?.release()}catch{}}return await N.emitTurnEnd(w.success),w},dispose(){u?.dispose(),f?.dispose(),p?.dispose()}}}var BN=fi();Object.defineProperty(fe,"initSessionStoreWithStore",{enumerable:!0,get:function(){return BN.initSessionStoreWithStore}});var Hc=hd();Object.defineProperty(fe,"syncPackToWorkspace",{enumerable:!0,get:function(){return Hc.syncPackToWorkspace}});Object.defineProperty(fe,"computeSkillsSignature",{enumerable:!0,get:function(){return Hc.computeSkillsSignature}});Object.defineProperty(fe,"createSessionDir",{enumerable:!0,get:function(){return Hc.createSessionDir}});Object.defineProperty(fe,"getSessionDir",{enumerable:!0,get:function(){return Hc.getSessionDir}});var FN=Ja();Object.defineProperty(fe,"resolveModelAlias",{enumerable:!0,get:function(){return FN.resolveModelAlias}});function VN(t,e,n){return Od({storagePath:t,apiKey:e,baseUrl:n,freshState:!0,logger:new Ht.NoOpLogger})}function WN(t,e,n){return Od({storagePath:t,apiKey:e,baseUrl:n,logger:new Ht.ConsoleLogger("[Agent]")})}});var bi=S(Jt=>{"use strict";var KN=Jt&&Jt.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),qN=Jt&&Jt.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),jc=Jt&&Jt.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&KN(n,e,r[s]);return qN(n,e),n}})();Object.defineProperty(Jt,"__esModule",{value:!0});Jt.resolvePackPath=fE;Jt.listAvailablePacks=zN;Jt.loadAgentPack=QN;Jt.getDefaultConfig=tR;Jt.getEnvDefaultModel=nR;Jt.getApiConfig=pE;Jt.hasCredentialForEngine=rR;Jt.getFileAccess=sR;var cn=jc(require("fs")),pt=jc(require("path")),YN=jc(require("os")),JN=jc(require("js-yaml")),xc=Ze();function Zo(t,e){return process.env[t]??(e?process.env[e]:void 0)}var XN=process.env.AGENTHIPPO_HOME||pt.join(YN.homedir(),xc.AGENTIDE_DIR_NAME),Id=pt.join(XN,"agents"),Pd="agents";function io(t){if(!cn.existsSync(t))return;let e=pt.join(t,"current.txt");if(cn.existsSync(e)){let r=cn.readFileSync(e,"utf-8").trim(),s=pt.join(t,r);if(cn.existsSync(s))return s}let n=pt.join(t,"agent.yaml");if(cn.existsSync(n))return t;try{let s=cn.readdirSync(t,{withFileTypes:!0}).filter(i=>i.isDirectory()&&/^\d+\.\d+\.\d+/.test(i.name)).map(i=>i.name).sort((i,o)=>{let[a,c,l]=i.split(".").map(p=>parseInt(p,10)||0),[d,u,f]=o.split(".").map(p=>parseInt(p,10)||0);return d!==a?d-a:u!==c?u-c:f-l});for(let i of s){let o=pt.join(t,i),a=pt.join(o,"agent.yaml");if(cn.existsSync(a))return o}}catch{}}function fE(t,e){if(pt.isAbsolute(t)||t.startsWith("./")||t.startsWith("../")){let c=pt.isAbsolute(t)?t:pt.resolve(process.cwd(),t);if(cn.existsSync(c)){try{if(cn.statSync(c).isDirectory())return io(c)??c}catch{}return c}return}let n=pt.join(process.cwd(),t),r=io(n);if(r)return r;let s=pt.join(process.cwd(),Pd,t),i=io(s);if(i)return i;if(e){let c=pt.join(e,xc.AGENTIDE_DIR_NAME,Pd,t),l=io(c);if(l)return l}let o=pt.join(Id,t),a=io(o);if(a)return a}function dE(t,e){let n=[];if(!cn.existsSync(t))return n;let r=cn.readdirSync(t,{withFileTypes:!0});for(let s of r){if(!s.isDirectory()||s.name.startsWith("."))continue;let i=pt.join(t,s.name),o=io(i);if(!o)continue;let a;o!==i&&(a=pt.basename(o)),n.push({name:s.name,path:o,version:a,source:e})}return n}function zN(t){let e=[],n=new Set;if(t){let s=pt.join(t,xc.AGENTIDE_DIR_NAME,Pd),i=dE(s,"workspace");for(let o of i)e.push(o),n.add(o.name)}let r=dE(Id,"user-library");for(let s of r)n.has(s.name)||e.push(s);return e}async function QN(t,e){let n=fE(t,e);if(!n){let u=pt.isAbsolute(t)||t.startsWith("./")||t.startsWith("../")?[pt.resolve(process.cwd(),t)]:[`${process.cwd()}/${t}`,`${process.cwd()}/agents/${t}`,e?`${e}/${xc.AGENTIDE_DIR_NAME}/agents/${t}`:null,`${Id}/${t}`].filter(Boolean);throw new Error(`Agent pack not found: ${t}
   Searched: ${u.join(", ")}`)}let r=pt.join(n,"agent.yaml");if(!cn.existsSync(r))throw new Error(`Missing agent.yaml in pack: ${n}`);let s=cn.readFileSync(r,"utf-8"),i=JN.load(s);eR(i,r);let o=ZN(i),a="",c=pt.join(n,"AGENTS.md");return cn.existsSync(c)&&(a=cn.readFileSync(c,"utf-8")),{manifest:o,packPath:n,systemPrompt:a,rules:[]}}function ZN(t){let e=t.spec.engine?.trim()??"",n=e.toLowerCase();return e!==n?{...t,spec:{...t.spec,engine:n}}:t}function eR(t,e){let n=[];if(t.metadata?.name||n.push("Missing metadata.name"),t.metadata?.version||n.push("Missing metadata.version"),t.spec?.engine?.trim()||n.push("Missing spec.engine"),t.spec?.engine?.trim().toLowerCase()==="custom"&&n.push('Invalid spec.engine: use the concrete custom engine id (for example, openclaw), not "custom"'),t.spec?.cheapModel!==void 0&&typeof t.spec.cheapModel!="string"&&n.push("Invalid spec.cheapModel: must be a string when provided"),t.spec?.dataPlane!==void 0&&((typeof t.spec.dataPlane!="object"||!t.spec.dataPlane.connector?.trim())&&n.push("Invalid spec.dataPlane: requires a `connector` path (stdio MCP module run broker-side)"),t.spec.dataPlane?.provider!==void 0&&typeof t.spec.dataPlane.provider!="string"&&n.push("Invalid spec.dataPlane.provider: must be a string when provided")),n.length>0)throw new Error(`Invalid agent manifest at ${e}:
   - ${n.join(`
-  - `)}`)}function tR(){return{engine:(Zo("AGENTHIPPO_DEFAULT_ENGINE","AGENTIDE_DEFAULT_ENGINE")||"claude").trim().toLowerCase(),model:Zo("AGENTHIPPO_DEFAULT_MODEL","AGENTIDE_DEFAULT_MODEL")||"claude-sonnet-4-5-20250929"}}function nR(){return Zo("AGENTHIPPO_DEFAULT_MODEL","AGENTIDE_DEFAULT_MODEL")?.trim()||void 0}function pE(){let t=Zo("AGENTHIPPO_LITELLM_API_KEY","AGENTIDE_LITELLM_API_KEY"),e=Zo("AGENTHIPPO_LITELLM_BASE_URL","AGENTIDE_LITELLM_BASE_URL"),n=process.env.ANTHROPIC_API_KEY||process.env.CLAUDE_API_KEY,r=process.env.OPENAI_API_KEY;return{apiKey:t||n||r,baseUrl:e,useLiteLLM:!!e,litellmApiKey:t,openaiApiKey:r,anthropicApiKey:n}}function rR(t,e=pE()){if(e.useLiteLLM)return!0;let n=t.trim().toLowerCase();return n==="claude"?!!e.anthropicApiKey:n==="codex"?!!e.openaiApiKey:!0}function sR(t){return t?.manifest.spec.permissions?.fileAccess??"workspace-write"}});var Bc=S((d1,iR)=>{iR.exports={name:"agenthippo",displayName:"Agent Hippo",description:"Agent Hippo - The easiest way to build and test your AI agents",version:"1.110.38",agenthippo:{litellmImageTag:"0.2.23",hippoclawNpm:"@agenthippo-ai/hippoclaw@2026.7.28"},publisher:"agenthippo",private:!0,engines:{vscode:"^1.93.0"},enabledApiProposals:["chatParticipantAdditions","chatParticipantPrivate","languageModelThinkingPart"],activationEvents:["onStartupFinished","onCommand:agentide.customEngine.list","onCommand:agentide.engine.install","onCommand:agentide.engine.uninstall","onChatParticipant:agentide.claude","onChatParticipant:agentide.codex"],main:"./out/extension.js",contributes:{authentication:[{id:"agenthippo",label:"AgentHippo"}],chatParticipants:[{id:"agentide.claude",name:"claude",fullName:"Claude Agent",description:"AI coding agent powered by Anthropic's Claude Agent SDK",isSticky:!1},{id:"agentide.codex",name:"codex",fullName:"Codex Agent",description:"AI coding agent powered by OpenAI's Codex SDK",isSticky:!1}],mcpServerDefinitionProviders:[{id:"bundled-mcp-servers",label:"Agent Hippo Bundled MCP Servers"}],commands:[{command:"agentide.skills.syncRemote",title:"Sync Remote Skills",category:"Agent Hippo"},{command:"agentide.clearManagedResources",title:"Clear Managed Resources",category:"Agent Hippo"},{command:"agentide.showManagedResources",title:"Show Managed Resources",category:"Agent Hippo"},{command:"agentide.cleanupSessionLogs",title:"Cleanup Old Session Logs",category:"Agent Hippo"},{command:"agentide.pack.install",title:"Install Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.list",title:"List Installed Packs",category:"Agent Hippo"},{command:"agentide.customEngine.list",title:"List Custom Engines",category:"Agent Hippo"},{command:"agentide.pack.uninstall",title:"Uninstall Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.getActive",title:"Get Active Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.create",title:"Create Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.share",title:"Share Agent to User Library",category:"Agent Hippo"},{command:"agentide.pack.publish",title:"Publish Agent to Store",category:"Agent Hippo"},{command:"agentide.skill.share",title:"Save Skill to User Library",category:"Agent Hippo"},{command:"agentide.skill.publish",title:"Publish Skill to Store",category:"Agent Hippo"},{command:"agentide.mcp.share",title:"Save MCP Server to User Library",category:"Agent Hippo"},{command:"agentide.mcp.publish",title:"Publish MCP Server to Store",category:"Agent Hippo"},{command:"agenthippo.signIn",title:"Sign In to AgentHippo",category:"Agent Hippo"},{command:"agenthippo.signOut",title:"Sign Out of AgentHippo",category:"Agent Hippo"},{command:"agentide.store.find",title:"Install Packs, Skills, MCP Tools, Engines, Spotlight Views",category:"Agent Hippo"},{command:"agentide.engine.install",title:"Install Custom Engine",category:"Agent Hippo"},{command:"agentide.engine.uninstall",title:"Uninstall Custom Engine",category:"Agent Hippo"},{command:"agentide.engine.publish",title:"Publish Engine to Store",category:"Agent Hippo"},{command:"agentide.spotlight.publish",title:"Publish Spotlight View to Store (Full Bundle)",category:"Agent Hippo"},{command:"agentide.view.install",title:"Install Spotlight View",category:"Agent Hippo"},{command:"agentide.store.sync",title:"Sync Store Index",category:"Agent Hippo"},{command:"agentide.store.setup",title:"Setup Store Index Automation",category:"Agent Hippo"},{command:"agentide.pack.browseLibrary",title:"Browse User Library",category:"Agent Hippo"},{command:"agentide.pack.update",title:"Update Agent from User Library",category:"Agent Hippo"},{command:"agentide.pack.duplicate",title:"Duplicate Agent",category:"Agent Hippo"},{command:"agentide.pack.refresh",title:"Refresh Agent Packs",category:"Agent Hippo"},{command:"agentide.pack.resetDefault",title:"Reset Default Agent",category:"Agent Hippo"},{command:"agentide.gateway.connect",title:"Connect to Gateway",category:"Agent Hippo"},{command:"agentide.gateway.disconnect",title:"Disconnect from Gateway",category:"Agent Hippo"},{command:"agentide.gateway.toggle",title:"Toggle Gateway Connection",category:"Agent Hippo"},{command:"agentide.gateway.status",title:"Show Gateway Status",category:"Agent Hippo"},{command:"agentide.gateway.connectSession",title:"Connect Chat to Gateway",category:"Agent Hippo"},{command:"agentide.gateway.listSessions",title:"Show Connected Gateway Sessions",category:"Agent Hippo"},{command:"agentide.gateway.resetMappings",title:"Reset Agent Mappings (Gateway)",category:"Agent Hippo"},{command:"agentide.anywhere.toggle",title:"Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.install",title:"Install Agent Anywhere (Gateway)",category:"Agent Hippo"},{command:"agentide.anywhere.uninstall",title:"Uninstall Agent Anywhere (OpenClaw CLI)",category:"Agent Hippo"},{command:"agentide.anywhere.start",title:"Start Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.stop",title:"Stop Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.status",title:"Agent Anywhere Status",category:"Agent Hippo"},{command:"agentide.anywhere.connect",title:"Connect Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.disconnect",title:"Disconnect Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.openConfig",title:"Open Agent Anywhere Config",category:"Agent Hippo"},{command:"agentide.anywhere.openWebUI",title:"Open Agent Anywhere Web UI",category:"Agent Hippo"},{command:"agentide.anywhere.detect",title:"Detect Agent Anywhere Gateway",category:"Agent Hippo"},{command:"agentide.anywhere.meetAgent",title:"Meet Agent Anywhere...",category:"Agent Hippo"},{command:"agentide.setupCli",title:"Setup AgentHippo CLI",category:"Agent Hippo"},{command:"agentide.cli.status",title:"AgentHippo CLI Status",category:"Agent Hippo"},{command:"agentide.installBundledTools",title:"Install Bundled Tools (rg, sg, tree-sitter)",category:"Agent Hippo"},{command:"agentide.setupAnalytics",title:"Install Spotlight (OTEL + DuckDB)",category:"Agent Hippo"},{command:"agentide.analytics.toggle",title:"Manage Spotlight",category:"Agent Hippo"},{command:"agentide.analytics.start",title:"Start Spotlight (OTEL + LiteLLM)",category:"Agent Hippo"},{command:"agentide.analytics.stop",title:"Stop Spotlight (OTEL + LiteLLM)",category:"Agent Hippo"},{command:"agentide.analytics.status",title:"Show Spotlight Status",category:"Agent Hippo"},{command:"agentide.analytics.query",title:"Query Spotlight (Cost, Sessions)",category:"Agent Hippo"},{command:"agentide.analytics.openDashboard",title:"Open Spotlight Dashboard",category:"Agent Hippo"},{command:"agentide.fleet.open",title:"Open Agent Team",category:"Agent Hippo"},{command:"agentide.analytics.clearArtifacts",title:"Clear Spotlight Artifacts",category:"Agent Hippo"},{command:"agentide.analytics.regenerateDefaults",title:"Regenerate Default Charts",category:"Agent Hippo"}],menus:{ChatModePicker:[{command:"agentide.anywhere.meetAgent",group:"navigation@30",when:"agentide.anywhere.enabled && !agentide.anywhere.hidden",icon:"$(broadcast)"}]},viewsContainers:{activitybar:[{id:"agentide-analytics",title:"Agent Hippo",icon:"$(graph)"},{id:"agentide-team",title:"Agent Team",icon:"$(organization)"}]},views:{"agentide-analytics":[{type:"webview",id:"agentide.analyticsView",name:"Spotlight"}],"agentide-team":[{type:"webview",id:"agentide.teamView",name:"Agent Team"}]},configuration:{title:"Agent Hippo",properties:{"agentide.permissions.fileAccess":{type:"string",scope:"application",enum:["read-only","workspace-write","full"],default:"full",markdownDescription:"Filesystem access scope (applies to all engines).\n- `read-only`: Read/search only (no file writes)\n- `workspace-write`: Read/write within workspace folders only\n- `full`: Full filesystem access (yolo, default)\n\n**Security**: Agent manifest permissions take precedence - user cannot override stricter pack permissions."},"agentide.claude.maxThinkingTokens":{type:"number",default:1024,description:"Claude extended thinking budget (tokens). Set to 0 to disable. Requires a compatible model; Anthropic requires >=1024 for extended thinking."},"agentide.claude.cheapModel":{type:"string",default:"",description:"Optional cheap Claude model for subagents/background routing (for example, claude-haiku-4-5-20251001). Main model selection still comes from the model picker."},"agentide.sessions.retentionDays":{type:"number",default:7,minimum:1,maximum:365,description:"Number of days to retain session logs before cleanup. Cleanup runs on startup (best-effort) and via the 'Agent Hippo: Cleanup Old Session Logs' command."},"agentide.fallbackDirectory":{type:"string",scope:"machine",default:".agent-hippo",description:"Directory name (relative to home) used as workspace when no folder is open. Default: ~/.agent-hippo"},"agentide.additionalEngineDir":{type:"string",scope:"machine",default:"",description:"Additional directories to scan for custom engines. Machine-scoped: engines discovered here are executed, so a workspace must not be able to point this at attacker-controlled code."},"agentide.auth.baseUrl":{type:"string",scope:"application",default:"https://auth.agenthippo.ai",markdownDescription:"AgentHippo auth broker base URL for team sign-in and bootstrap (`agenthippo.signIn`).\n\n**Application-scoped on purpose**: this endpoint receives your PKCE authorization code and your AgentHippo access token, and its `/api/ide/bootstrap` response is written into your model-routing settings. A workspace must never be able to redirect it. Must be `https://` (plain `http://` is accepted only for loopback dev hosts)."},"agentide.cli.path":{type:"string",scope:"machine",default:"",description:"Optional absolute path to the AgentHippo CLI binary. If unset, Agent Hippo auto-detects a bundled binary or falls back to PATH. Machine-scoped: this path is executed."},"agentide.cli.installSource":{type:"string",scope:"machine",default:"",description:"Optional setup source for AgentHippo CLI. Supports HTTPS URL to a prebuilt binary, or local file path. If empty, setup builds from the local repository. Machine-scoped: this source is downloaded and executed."},"agentide.storeRepo":{type:"string",scope:"application",default:"agenthippoai/agenthippo-store",markdownDescription:"GitHub repository for pack store (owner/repo format).\n\nDefault: `agenthippoai/agenthippo-store` ([github.com/agenthippoai/agenthippo-store](https://github.com/agenthippoai/agenthippo-store))\n\nSet to your own repo (e.g., `mycompany/our-packs`) to use a private or custom store."},"agentide.store.indexUrl":{type:"string",scope:"application",default:"https://agenthippoai.github.io/agenthippo-store",markdownDescription:`Base URL for the store index (Orama + metadata are loaded from paths under this URL).
+  - `)}`)}function tR(){return{engine:(Zo("AGENTHIPPO_DEFAULT_ENGINE","AGENTIDE_DEFAULT_ENGINE")||"claude").trim().toLowerCase(),model:Zo("AGENTHIPPO_DEFAULT_MODEL","AGENTIDE_DEFAULT_MODEL")||"claude-sonnet-4-5-20250929"}}function nR(){return Zo("AGENTHIPPO_DEFAULT_MODEL","AGENTIDE_DEFAULT_MODEL")?.trim()||void 0}function pE(){let t=Zo("AGENTHIPPO_LITELLM_API_KEY","AGENTIDE_LITELLM_API_KEY"),e=Zo("AGENTHIPPO_LITELLM_BASE_URL","AGENTIDE_LITELLM_BASE_URL"),n=process.env.ANTHROPIC_API_KEY||process.env.CLAUDE_API_KEY,r=process.env.OPENAI_API_KEY;return{apiKey:t||n||r,baseUrl:e,useLiteLLM:!!e,litellmApiKey:t,openaiApiKey:r,anthropicApiKey:n}}function rR(t,e=pE()){if(e.useLiteLLM)return!0;let n=t.trim().toLowerCase();return n==="claude"?!!e.anthropicApiKey:n==="codex"?!!e.openaiApiKey:!0}function sR(t){return t?.manifest.spec.permissions?.fileAccess??"workspace-write"}});var Bc=S((d1,iR)=>{iR.exports={name:"agenthippo",displayName:"Agent Hippo",description:"Agent Hippo - The easiest way to build and test your AI agents",version:"1.110.39",agenthippo:{litellmImageTag:"0.2.23",hippoclawNpm:"@agenthippo-ai/hippoclaw@2026.7.28"},publisher:"agenthippo",private:!0,engines:{vscode:"^1.93.0"},enabledApiProposals:["chatParticipantAdditions","chatParticipantPrivate","languageModelThinkingPart"],activationEvents:["onStartupFinished","onCommand:agentide.customEngine.list","onCommand:agentide.engine.install","onCommand:agentide.engine.uninstall","onChatParticipant:agentide.claude","onChatParticipant:agentide.codex"],main:"./out/extension.js",contributes:{authentication:[{id:"agenthippo",label:"AgentHippo"}],chatParticipants:[{id:"agentide.claude",name:"claude",fullName:"Claude Agent",description:"AI coding agent powered by Anthropic's Claude Agent SDK",isSticky:!1},{id:"agentide.codex",name:"codex",fullName:"Codex Agent",description:"AI coding agent powered by OpenAI's Codex SDK",isSticky:!1}],mcpServerDefinitionProviders:[{id:"bundled-mcp-servers",label:"Agent Hippo Bundled MCP Servers"}],commands:[{command:"agentide.skills.syncRemote",title:"Sync Remote Skills",category:"Agent Hippo"},{command:"agentide.clearManagedResources",title:"Clear Managed Resources",category:"Agent Hippo"},{command:"agentide.showManagedResources",title:"Show Managed Resources",category:"Agent Hippo"},{command:"agentide.cleanupSessionLogs",title:"Cleanup Old Session Logs",category:"Agent Hippo"},{command:"agentide.pack.install",title:"Install Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.list",title:"List Installed Packs",category:"Agent Hippo"},{command:"agentide.customEngine.list",title:"List Custom Engines",category:"Agent Hippo"},{command:"agentide.pack.uninstall",title:"Uninstall Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.getActive",title:"Get Active Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.create",title:"Create Agent Pack",category:"Agent Hippo"},{command:"agentide.pack.share",title:"Share Agent to User Library",category:"Agent Hippo"},{command:"agentide.pack.publish",title:"Publish Agent to Store",category:"Agent Hippo"},{command:"agentide.skill.share",title:"Save Skill to User Library",category:"Agent Hippo"},{command:"agentide.skill.publish",title:"Publish Skill to Store",category:"Agent Hippo"},{command:"agentide.mcp.share",title:"Save MCP Server to User Library",category:"Agent Hippo"},{command:"agentide.mcp.publish",title:"Publish MCP Server to Store",category:"Agent Hippo"},{command:"agenthippo.signIn",title:"Sign In to AgentHippo",category:"Agent Hippo"},{command:"agenthippo.signOut",title:"Sign Out of AgentHippo",category:"Agent Hippo"},{command:"agentide.store.find",title:"Install Packs, Skills, MCP Tools, Engines, Spotlight Views",category:"Agent Hippo"},{command:"agentide.engine.install",title:"Install Custom Engine",category:"Agent Hippo"},{command:"agentide.engine.uninstall",title:"Uninstall Custom Engine",category:"Agent Hippo"},{command:"agentide.engine.publish",title:"Publish Engine to Store",category:"Agent Hippo"},{command:"agentide.spotlight.publish",title:"Publish Spotlight View to Store (Full Bundle)",category:"Agent Hippo"},{command:"agentide.view.install",title:"Install Spotlight View",category:"Agent Hippo"},{command:"agentide.store.sync",title:"Sync Store Index",category:"Agent Hippo"},{command:"agentide.store.setup",title:"Setup Store Index Automation",category:"Agent Hippo"},{command:"agentide.pack.browseLibrary",title:"Browse User Library",category:"Agent Hippo"},{command:"agentide.pack.update",title:"Update Agent from User Library",category:"Agent Hippo"},{command:"agentide.pack.duplicate",title:"Duplicate Agent",category:"Agent Hippo"},{command:"agentide.pack.refresh",title:"Refresh Agent Packs",category:"Agent Hippo"},{command:"agentide.pack.resetDefault",title:"Reset Default Agent",category:"Agent Hippo"},{command:"agentide.gateway.connect",title:"Connect to Gateway",category:"Agent Hippo"},{command:"agentide.gateway.disconnect",title:"Disconnect from Gateway",category:"Agent Hippo"},{command:"agentide.gateway.toggle",title:"Toggle Gateway Connection",category:"Agent Hippo"},{command:"agentide.gateway.status",title:"Show Gateway Status",category:"Agent Hippo"},{command:"agentide.gateway.connectSession",title:"Connect Chat to Gateway",category:"Agent Hippo"},{command:"agentide.gateway.listSessions",title:"Show Connected Gateway Sessions",category:"Agent Hippo"},{command:"agentide.gateway.resetMappings",title:"Reset Agent Mappings (Gateway)",category:"Agent Hippo"},{command:"agentide.anywhere.toggle",title:"Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.install",title:"Install Agent Anywhere (Gateway)",category:"Agent Hippo"},{command:"agentide.anywhere.uninstall",title:"Uninstall Agent Anywhere (OpenClaw CLI)",category:"Agent Hippo"},{command:"agentide.anywhere.start",title:"Start Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.stop",title:"Stop Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.status",title:"Agent Anywhere Status",category:"Agent Hippo"},{command:"agentide.anywhere.connect",title:"Connect Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.disconnect",title:"Disconnect Agent Anywhere",category:"Agent Hippo"},{command:"agentide.anywhere.openConfig",title:"Open Agent Anywhere Config",category:"Agent Hippo"},{command:"agentide.anywhere.openWebUI",title:"Open Agent Anywhere Web UI",category:"Agent Hippo"},{command:"agentide.anywhere.detect",title:"Detect Agent Anywhere Gateway",category:"Agent Hippo"},{command:"agentide.anywhere.meetAgent",title:"Meet Agent Anywhere...",category:"Agent Hippo"},{command:"agentide.setupCli",title:"Setup AgentHippo CLI",category:"Agent Hippo"},{command:"agentide.cli.status",title:"AgentHippo CLI Status",category:"Agent Hippo"},{command:"agentide.installBundledTools",title:"Install Bundled Tools (rg, sg, tree-sitter)",category:"Agent Hippo"},{command:"agentide.setupAnalytics",title:"Install Spotlight (OTEL + DuckDB)",category:"Agent Hippo"},{command:"agentide.analytics.toggle",title:"Manage Spotlight",category:"Agent Hippo"},{command:"agentide.analytics.start",title:"Start Spotlight (OTEL + LiteLLM)",category:"Agent Hippo"},{command:"agentide.analytics.stop",title:"Stop Spotlight (OTEL + LiteLLM)",category:"Agent Hippo"},{command:"agentide.analytics.status",title:"Show Spotlight Status",category:"Agent Hippo"},{command:"agentide.analytics.query",title:"Query Spotlight (Cost, Sessions)",category:"Agent Hippo"},{command:"agentide.analytics.openDashboard",title:"Open Spotlight Dashboard",category:"Agent Hippo"},{command:"agentide.fleet.open",title:"Open Agent Team",category:"Agent Hippo"},{command:"agentide.analytics.clearArtifacts",title:"Clear Spotlight Artifacts",category:"Agent Hippo"},{command:"agentide.analytics.regenerateDefaults",title:"Regenerate Default Charts",category:"Agent Hippo"}],menus:{ChatModePicker:[{command:"agentide.anywhere.meetAgent",group:"navigation@30",when:"agentide.anywhere.enabled && !agentide.anywhere.hidden",icon:"$(broadcast)"}]},viewsContainers:{activitybar:[{id:"agentide-analytics",title:"Agent Hippo",icon:"$(graph)"},{id:"agentide-team",title:"Agent Team",icon:"$(organization)"}]},views:{"agentide-analytics":[{type:"webview",id:"agentide.analyticsView",name:"Spotlight"}],"agentide-team":[{type:"webview",id:"agentide.teamView",name:"Agent Team"}]},configuration:{title:"Agent Hippo",properties:{"agentide.permissions.fileAccess":{type:"string",scope:"application",enum:["read-only","workspace-write","full"],default:"full",markdownDescription:"Filesystem access scope (applies to all engines).\n- `read-only`: Read/search only (no file writes)\n- `workspace-write`: Read/write within workspace folders only\n- `full`: Full filesystem access (yolo, default)\n\n**Security**: Agent manifest permissions take precedence - user cannot override stricter pack permissions."},"agentide.claude.maxThinkingTokens":{type:"number",default:1024,description:"Claude extended thinking budget (tokens). Set to 0 to disable. Requires a compatible model; Anthropic requires >=1024 for extended thinking."},"agentide.claude.cheapModel":{type:"string",default:"",description:"Optional cheap Claude model for subagents/background routing (for example, claude-haiku-4-5-20251001). Main model selection still comes from the model picker."},"agentide.sessions.retentionDays":{type:"number",default:7,minimum:1,maximum:365,description:"Number of days to retain session logs before cleanup. Cleanup runs on startup (best-effort) and via the 'Agent Hippo: Cleanup Old Session Logs' command."},"agentide.fallbackDirectory":{type:"string",scope:"machine",default:".agent-hippo",description:"Directory name (relative to home) used as workspace when no folder is open. Default: ~/.agent-hippo"},"agentide.additionalEngineDir":{type:"string",scope:"machine",default:"",description:"Additional directories to scan for custom engines. Machine-scoped: engines discovered here are executed, so a workspace must not be able to point this at attacker-controlled code."},"agentide.auth.baseUrl":{type:"string",scope:"application",default:"https://auth.agenthippo.ai",markdownDescription:"AgentHippo auth broker base URL for team sign-in and bootstrap (`agenthippo.signIn`).\n\n**Application-scoped on purpose**: this endpoint receives your PKCE authorization code and your AgentHippo access token, and its `/api/ide/bootstrap` response is written into your model-routing settings. A workspace must never be able to redirect it. Must be `https://` (plain `http://` is accepted only for loopback dev hosts)."},"agentide.cli.path":{type:"string",scope:"machine",default:"",description:"Optional absolute path to the AgentHippo CLI binary. If unset, Agent Hippo auto-detects a bundled binary or falls back to PATH. Machine-scoped: this path is executed."},"agentide.cli.installSource":{type:"string",scope:"machine",default:"",description:"Optional setup source for AgentHippo CLI. Supports HTTPS URL to a prebuilt binary, or local file path. If empty, setup builds from the local repository. Machine-scoped: this source is downloaded and executed."},"agentide.storeRepo":{type:"string",scope:"application",default:"agenthippoai/agenthippo-store",markdownDescription:"GitHub repository for pack store (owner/repo format).\n\nDefault: `agenthippoai/agenthippo-store` ([github.com/agenthippoai/agenthippo-store](https://github.com/agenthippoai/agenthippo-store))\n\nSet to your own repo (e.g., `mycompany/our-packs`) to use a private or custom store."},"agentide.store.indexUrl":{type:"string",scope:"application",default:"https://agenthippoai.github.io/agenthippo-store",markdownDescription:`Base URL for the store index (Orama + metadata are loaded from paths under this URL).
 
 Default: \`https://agenthippoai.github.io/agenthippo-store\`
 
@@ -482,7 +482,7 @@ Plaid.create({
 </script>`)}function GC(t){return async(e,n)=>{let r=new URL(e.url??"/","http://connect.invalid");if(!r.pathname.startsWith("/connect/"))return!1;let s=`${e.method} ${r.pathname}`;try{if(s==="GET /connect/start"){let i=await t.provider.startConnect(r.searchParams.get("ticket")??void 0,t.browserUser(e));if(i.kind==="redirect")n.writeHead(302,{...el,Location:i.location}),n.end();else{let o=(0,$C.randomBytes)(16).toString("base64");qd(n,200,MC(i.flow,i.linkToken,o),LC(o))}return!0}if(s==="GET /connect/google/callback"){let i=await t.provider.finishGoogle({state:r.searchParams.get("state")??void 0,code:r.searchParams.get("code")??void 0,error:r.searchParams.get("error")??void 0},t.browserUser(e));return t.audit?.("connect","grant_connected",{service:"google",userId:i.userId}),qd(n,200,Yd("Google connected",`<p>Connected <b>${tl(i.email??"your Google account")}</b>. You can close this tab and go back to your agent.</p>`),FE),!0}if(s==="POST /connect/bank/exchange"){let i;try{i=JSON.parse(await(0,DC.readBodyWithCap)(e))??{}}catch{throw new Zc.ConnectError(400,"Bad request.")}let o=await t.provider.finishBank(i,t.browserUser(e));return t.audit?.("connect","grant_connected",{service:"bank",userId:o.userId,institution:o.institution??null}),n.writeHead(200,{...el,"Content-Type":"text/plain; charset=utf-8"}),n.end("ok"),!0}throw new Zc.ConnectError(404,"Not found.")}catch(i){let o=i instanceof Zc.ConnectError?i.status:500,a=i instanceof Zc.ConnectError?i.message:"Something went wrong. Ask your agent for a new link and try again.";return t.audit?.("connect","grant_connect_failed",{route:s,status:o,error:i instanceof Error?i.message:String(i)}),s==="POST /connect/bank/exchange"?(n.writeHead(o,{...el,"Content-Type":"text/plain; charset=utf-8"}),n.end(a)):qd(n,o,Yd("Could not connect",`<p>${tl(a)}</p>`),FE),!0}}}});var WE=S(Pr=>{"use strict";var UC=Pr&&Pr.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),HC=Pr&&Pr.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),jC=Pr&&Pr.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&UC(n,e,r[s]);return HC(n,e),n}})();Object.defineProperty(Pr,"__esModule",{value:!0});Pr.backupTimestamp=BC;Pr.backupPathFor=VE;Pr.renameToBackup=FC;var xC=require("fs"),zd=jC(require("path"));function BC(t=new Date){return t.toISOString().replace(/[-:]/g,"").replace(/\.\d+Z$/,"Z")}function VE(t,e){let n=zd.dirname(t),r=zd.basename(t).replace(/\.json$/i,"");return zd.join(n,`${r}.${e}.bk`)}async function FC(t,e){let n=VE(t,e);try{return await xC.promises.rename(t,n),n}catch(r){if((r&&typeof r=="object"&&"code"in r?String(r.code):"")==="ENOENT")return;throw r}}});var il=S($t=>{"use strict";var VC=$t&&$t.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),WC=$t&&$t.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),KC=$t&&$t.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&VC(n,e,r[s]);return WC(n,e),n}})();Object.defineProperty($t,"__esModule",{value:!0});$t._resetOutboundHandleStoreLockForTest=YC;$t._setOutboundHandleStorePathForTest=JC;$t.buildGatewayOutboundHandleKey=JE;$t.upsertGatewayOutboundHandle=tk;$t.getLastGatewayOutboundHandle=nk;$t.listGatewayOutboundTargets=rk;$t.mergeGatewayOutboundHandles=sk;$t.resolveGatewayOutboundHandle=ik;$t.backupAndClearOutboundHandlesForAgent=ok;$t.getGatewayOutboundStoreSnapshot=ak;var nl=require("fs"),qC=KC(require("path")),KE=WE(),Zd=1,YE={value:void 0},po=new Map,Qd=new Map;function ef(t,e){let r=(Qd.get(t)??Promise.resolve()).then(()=>e());return Qd.set(t,r.catch(()=>{})),r}function YC(){Qd.clear(),po.clear()}function JC(t){YE.value=t,po.clear()}function ra(t){return YE.value??t}function JE(t,e){let n=e?.trim();return n?`${t}::thread:${n}`:`${t}::`}function XC(){return{version:Zd,lastByAgent:{},targetsByAgent:{}}}async function Ks(t){let e=ra(t),n=po.get(e);if(n)return n;try{let s=await nl.promises.readFile(e,"utf-8"),i=JSON.parse(s);if(i.targetsByAgent&&typeof i.targetsByAgent=="object"){let o={version:i.version??Zd,lastByAgent:i.lastByAgent??{},targetsByAgent:i.targetsByAgent};return po.set(e,o),o}}catch{}let r=XC();return po.set(e,r),r}async function tf(t,e){let n=ra(t);await nl.promises.mkdir(qC.dirname(n),{recursive:!0});let r={version:Zd,lastByAgent:e.lastByAgent,targetsByAgent:e.targetsByAgent},s=`${n}.tmp`;await nl.promises.writeFile(s,JSON.stringify(r,null,2),"utf-8"),await nl.promises.rename(s,n),po.set(n,e)}function Ws(t,e){if(e?.toLowerCase()!=="slack")return t;let n=t.match(/^(user|channel|group):(.+)$/i);return n?`${n[1].toLowerCase()}:${n[2].toUpperCase()}`:t}function qE(t,e,n){let r=Ws(t,n),s=Ws(e,n);return r.toLowerCase()===s.toLowerCase()}function zC(t,e,n){if(n)return t.find(i=>qE(i.target,e,i.channel)&&i.threadId?.trim()===n);let r=t.filter(i=>qE(i.target,e,i.channel));return r.length===0?void 0:r.find(i=>!i.threadId?.trim())??rl(r)[0]}function QC(t,e){let n=t.match(/:thread:([^:]+)$/),r=n?t.slice(0,-n[0].length):t,s=r.match(/:direct:([^:]+)$/);if(s)return Ws(`user:${s[1]}`,e);let i=r.match(/:dm:([^:]+)$/);if(i)return Ws(`user:${i[1]}`,e);let o=r.match(/:channel:([^:]+)$/);if(o)return Ws(`channel:${o[1]}`,e);let a=r.match(/:group:([^:]+)$/);if(a)return Ws(`channel:${a[1]}`,e)}function ZC(t){let e=t.target?.trim();if(e)return Ws(e,t.channel);let n=t.sessionKey?.trim().toLowerCase();if(n){let s=QC(n,t.channel);if(s)return s}let r=t.senderId?.trim();if(r&&t.channel)return Ws(`user:${r}`,t.channel)}function ek(t){return t.senderName?.trim()?t.senderName.trim():t.senderUsername?.trim()?t.senderUsername.trim():t.target?.trim()||t.senderId?.trim()}function rl(t){return[...t].sort((e,n)=>n.lastSeenAt-e.lastSeenAt)}function sl(t,e){let n=e.trim();if(!n||t.lastByAgent[n]||t.targetsByAgent[n])return n;if(n.toLowerCase()==="default"){for(let r of["default","Default"])if(t.lastByAgent[r]||t.targetsByAgent[r])return r}return n}async function tk(t,e,n,r,s){let i=e.trim();if(!i)return;let o=s?.gatewayAgentId?.trim()||void 0,a=n.channel?.trim(),c=n.sessionKey?.trim().toLowerCase();if(!a&&c){let d=c.match(/^agent:[^:]+:([a-z0-9_-]+):/);d&&(a=d[1])}let l=ZC(n);if(!(!a||!l))return ef(ra(t),async()=>{let d=Date.now(),u=await Ks(t);u.targetsByAgent[i]||(u.targetsByAgent[i]={});let f=JE(l,n.threadId?.trim()),p=u.targetsByAgent[i][f],g={agentId:i,...o?{gatewayAgentId:o}:{},channel:a,accountId:n.accountId?.trim()||void 0,target:l,threadId:n.threadId?.trim()||void 0,sessionKey:n.sessionKey?.trim()||void 0,sessionId:n.sessionId?.trim()||void 0,senderId:n.senderId?.trim()||void 0,senderName:n.senderName?.trim()||void 0,senderUsername:n.senderUsername?.trim()||void 0,label:ek(n),firstSeenAt:p?.firstSeenAt??d,lastSeenAt:d,lastInboundRunId:r,inboundCount:(p?.inboundCount??0)+1};return u.targetsByAgent[i][f]=g,u.lastByAgent[i]=g,await tf(t,u),g})}async function nk(t,e){let n=await Ks(t),r=sl(n,e);return n.lastByAgent[r]}async function rk(t,e){let n=await Ks(t);if(e?.trim()){let s=sl(n,e.trim());return rl(Object.values(n.targetsByAgent[s]??{}))}let r=[];for(let s of Object.values(n.targetsByAgent))r.push(...Object.values(s));return rl(r)}async function sk(t,e,n){let r=await Ks(t),s=n?.trim()?[n.trim()]:[...new Set([...Object.keys(r.targetsByAgent),...Object.keys(r.lastByAgent)])];return s.length===0?0:ef(ra(e),async()=>{let i=await Ks(e),o=0,a=!1;for(let c of s){let l=r.targetsByAgent[c]??{},d=Object.entries(l);d.length>0&&!i.targetsByAgent[c]&&(i.targetsByAgent[c]={});for(let[f,p]of d){let g=i.targetsByAgent[c]?.[f];(!g||p.lastSeenAt>=g.lastSeenAt)&&(i.targetsByAgent[c][f]=p,o++,a=!0)}let u=r.lastByAgent[c];if(u){let f=i.lastByAgent[c];(!f||u.lastSeenAt>=f.lastSeenAt)&&(i.lastByAgent[c]=u,a=!0)}}return a&&await tf(e,i),o})}async function ik(t,e,n){let r=await Ks(t),s=sl(r,e),i=n?.target?.trim();if(i){let o=Object.values(r.targetsByAgent[s]??{});return zC(o,i,n?.threadId?.trim())}return r.lastByAgent[s]}async function ok(t,e,n=(0,KE.backupTimestamp)()){let r=ra(t);return ef(r,async()=>{let s=await Ks(t),i=sl(s,e),o=s.targetsByAgent[i],a=Object.prototype.hasOwnProperty.call(s.lastByAgent,i),c=o?Object.keys(o).length:0;if(c===0&&!a)return{removed:0};let l=await(0,KE.renameToBackup)(r,n);return delete s.targetsByAgent[i],delete s.lastByAgent[i],await tf(t,s),{removed:c,backupPath:l}})}async function ak(t){let e=await Ks(t),n={};for(let[r,s]of Object.entries(e.targetsByAgent))n[r]=rl(Object.values(s));return{lastByAgent:e.lastByAgent,targetsByAgent:n}}});var zE=S(Ir=>{"use strict";var ck=Ir&&Ir.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),lk=Ir&&Ir.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),uk=Ir&&Ir.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&ck(n,e,r[s]);return lk(n,e),n}})();Object.defineProperty(Ir,"__esModule",{value:!0});Ir.EGRESS_URL_ENV=void 0;Ir.startEgressBroker=_k;var dk=uk(require("http")),fk=Or(),pk=co(),gk=il(),XE=yc();Ir.EGRESS_URL_ENV="AGENTHIPPO_EGRESS_URL";function hk(t){return t?.match(/^Bearer\s+(\S+)$/i)?.[1]}function mk(t){return t?(0,pk.hashNonce)(t).slice(0,12):"none"}function Ek(t,e){return(0,XE.getGatewayOutboundFilePath)(t,(0,XE.safeGatewaySessionDirId)(e))}async function _k(t){let e=dk.createServer(async(s,i)=>{let o=(a,c,l,d)=>{l&&t.audit?.("unauthorized",l,d??{}),i.writeHead(a,{"Content-Type":"application/json"}),i.end(JSON.stringify({ok:!1,error:c}))};try{if((s.url?.split("?")[0]??"")!=="/egress/send"){o(404,"not found");return}if(s.method!=="POST"){i.writeHead(405,{"Content-Type":"application/json",Allow:"POST"}),i.end(JSON.stringify({ok:!1,error:"method not allowed"}));return}let c=hk(s.headers.authorization),l=c?t.registry.resolve(c):void 0;if(!l){o(401,"Unauthorized: missing, unknown, or expired turn nonce","egress_nonce_reject",{reason:c?"unknown_or_expired":"missing",nonce_sha256_prefix:mk(c)});return}let d=l.egressStoreKey?.trim();if(!d){o(403,"no outbound route for this turn (not a channel-originated session)","egress_deny",{userId:l.userId,reason:"no_store_key"});return}let u;try{u=JSON.parse(await(0,fk.readBodyWithCap)(s))}catch{o(400,"invalid JSON body");return}let f=typeof u.message=="string"?u.message:"";if(!f.trim()){o(400,"message is required");return}let p=typeof u.to=="string"?u.to.trim():void 0,g=typeof u.media=="string"&&u.media.trim()||void 0,m=Ek(t.workspaceRoot,d),h;try{h=await(0,gk.resolveGatewayOutboundHandle)(m,t.agentId,p?{target:p}:void 0)}catch(E){t.logger?.warn(`[Egress] store read failed: ${E instanceof Error?E.message:String(E)}`)}if(!h){o(404,p?`no bound handle matches "${p}" for this session (cannot address a new destination)`:"no reply destination bound for this session yet","egress_deny",{userId:l.userId,reason:"no_matching_handle",to:p??"(reply-to-sender)"});return}t.audit?.(l.sessionKey,"egress_authorize",{userId:l.userId,channel:h.channel,target:h.target});let y=await t.send(h,f,g);i.writeHead(y.ok?200:502,{"Content-Type":"application/json"}),i.end(JSON.stringify(y))}catch(a){t.logger?.warn(`[Egress] broker error: ${a instanceof Error?a.message:String(a)}`),i.headersSent||i.writeHead(500,{"Content-Type":"application/json"}),i.end(JSON.stringify({ok:!1,error:"Internal error"}))}});await new Promise((s,i)=>{e.once("error",i),e.listen(0,"127.0.0.1",()=>s())});let n=e.address();if(!n||typeof n=="string")throw new Error("Egress broker failed to bind a loopback port");let r=`http://127.0.0.1:${n.port}/egress/send`;return t.logger?.info(`[Egress] broker listening at ${r}`),{url:r,close:()=>new Promise(s=>e.close(()=>s()))}}});var n_=S(Gn=>{"use strict";var yk=Gn&&Gn.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),wk=Gn&&Gn.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),Sk=Gn&&Gn.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&yk(n,e,r[s]);return wk(n,e),n}})();Object.defineProperty(Gn,"__esModule",{value:!0});Gn.ASSERTION_HEADER=void 0;Gn.startDataPlaneSidecar=Nk;var QE=Sk(require("http")),t_=require("crypto"),Ak=Pi(),bk=co(),ZE=Or(),e_=ta(),Tk=Xd(),vk=fo();Gn.ASSERTION_HEADER="x-agent-user-assertion";function Ok(t,e){let n=t.headers[e];return(Array.isArray(n)?n[0]:n)?.trim()||void 0}function ol(t){return(0,t_.createHash)("sha256").update(t).digest("hex").slice(0,12)}function Pk(t){return t?.match(/^Bearer\s+(\S+)$/i)?.[1]}function Ik(t,e){let n=Buffer.from(t),r=Buffer.from(e);return n.length===r.length&&(0,t_.timingSafeEqual)(n,r)}async function Nk(t){let e=t.bindHost??"0.0.0.0",n=await Ak.DataPlane.start(t.config,{logger:t.logger,audit:t.audit,gateway:{host:e,port:t.gatewayPort,advertiseHost:e==="0.0.0.0"?void 0:e}}),r=new Map,s=QE.createServer(async(d,u)=>{let f=(p,g)=>{u.writeHead(p,{"Content-Type":"application/json"}),u.end(JSON.stringify({error:g}))};try{let p=d.url?.split("?")[0]??"";if(d.method==="GET"&&p==="/health")return u.writeHead(200,{"Content-Type":"application/json"}),u.end(JSON.stringify({ok:!0}));let g=Pk(d.headers.authorization);if(!g||!Ik(g,t.registerToken))return t.audit?.("unauthorized","sidecar_register_reject",{reason:g?"bad_token":"missing_token"}),f(401,"unauthorized");if((d.method==="GET"||d.method==="POST")&&p==="/edge/turn"){let m=(Array.isArray(d.headers["x-agent-user"])?d.headers["x-agent-user"][0]:d.headers["x-agent-user"])?.trim();if(!m)return t.audit?.("unauthorized","sidecar_edge_reject",{reason:"missing_user"}),f(400,"X-Agent-User required");let h=Ok(d,Gn.ASSERTION_HEADER)?.replace(/^Bearer\s+/i,"").trim()||void 0,{nonce:y}=n.registerTurnRaw({userId:m,sessionKey:m,inboundToken:h});return t.audit?.(m,"sidecar_edge_register",{userId:m,assertion:h?`sha256:${ol(h)}`:"none",nonce_sha256_prefix:ol(y)}),u.writeHead(200,{"Content-Type":"application/json",[vk.TURN_NONCE_HEADER]:y}),u.end(JSON.stringify({ok:!0}))}if(d.method==="POST"&&p==="/turns"){let m;try{m=JSON.parse(await(0,ZE.readBodyWithCap)(d))}catch{return f(400,"bad json")}let h=(m.userId??"").trim();if(!h)return f(400,"userId required");let y=m.renewNonce?.trim()||void 0;if(y!==void 0&&!(0,bk.isNonceShaped)(y))return f(400,"renewNonce must be a previously minted turn nonce");let E=m.agent?.pack?.trim(),w=!!(E&&t.agent?.pack&&E!==t.agent.pack);w&&console.warn(`Warning: turn registration claims agent "${E}" but this connector loaded "${t.agent?.pack}". One connector is meant to serve one agent \u2014 both now share this connector's base credential, so neither is bounded by the job it was deployed for.`);let{nonce:O,release:b}=n.registerTurnRaw({userId:h,sessionKey:(m.sessionKey??"").trim()||h,inboundToken:m.inboundToken,egressStoreKey:m.egressStoreKey},{renewNonce:y});return r.set(O,b),t.audit?.((m.sessionKey??"").trim()||h,"sidecar_register",{userId:h,claimedAgent:E??"none",binding:"asserted",nonce_sha256_prefix:ol(O),...y?{renewed:!0}:{},...w?{agentMismatch:!0,loadedAgent:t.agent?.pack}:{}}),u.writeHead(200,{"Content-Type":"application/json"}),u.end(JSON.stringify({nonce:O}))}if(d.method==="DELETE"&&p.startsWith("/turns/")){let m=decodeURIComponent(p.slice(7)),h=r.has(m);return r.get(m)?.(),r.delete(m),t.audit?.("control","sidecar_release",{released:h,nonce_sha256_prefix:ol(m)}),u.writeHead(204),u.end()}f(404,"not found")}catch(p){t.logger?.warn(`[Sidecar] control error: ${p instanceof Error?p.message:String(p)}`),u.headersSent||u.writeHead(500,{"Content-Type":"application/json"}),u.end(JSON.stringify({error:"internal"}))}});await new Promise((d,u)=>{s.once("error",u),s.listen(t.controlPort,e,()=>d())});let i=s.address(),o=i&&typeof i!="string"?i.port:t.controlPort;t.logger?.info(`[Sidecar] gateway ${n.url} | control :${o} (bound ${e})`),(t.config.provider??"passthrough").trim().toLowerCase()==="passthrough"&&console.warn(`Warning: provider=passthrough needs a per-user token on every turn. Edge-registered turns supply it via the ${Gn.ASSERTION_HEADER} header \u2014 if your edge does not forward it, every tool call will fail closed.`);let a,c,l=n.broker.provider;if(t.connectPort!==void 0&&l instanceof e_.StoredGrantProvider){let d=(0,Tk.createConnectHandler)({provider:l,browserUser:p=>(0,ZE.resolveUserId)(p.headers,void 0),audit:t.audit}),u=QE.createServer(async(p,g)=>{try{await d(p,g)||(g.writeHead(404,{"Content-Type":"application/json"}),g.end(JSON.stringify({error:"not found"})))}catch(m){t.logger?.warn(`[Sidecar] connect error: ${m instanceof Error?m.message:String(m)}`),g.headersSent||g.writeHead(500),g.end()}});await new Promise((p,g)=>{u.once("error",g),u.listen(t.connectPort,e,()=>p())});let f=u.address();c=f&&typeof f!="string"?f.port:t.connectPort,a=u,t.logger?.info(`[Sidecar] connect pages :${c} (bound ${e})`)}return{gatewayUrl:n.url,controlPort:o,connectPort:c,...l instanceof e_.StoredGrantProvider?{grants:l}:{},close:async()=>{await new Promise(d=>s.close(()=>d())),a&&await new Promise(d=>a.close(()=>d())),await n.close()}}}});var sf=S(qs=>{"use strict";Object.defineProperty(qs,"__esModule",{value:!0});qs.RemoteDataPlane=qs.EdgeDataPlane=void 0;qs.resolveEdgeDataPlane=Rk;qs.resolveRemoteDataPlane=Ck;var al=fo();function Rk(t=process.env){let e=t.AGENTHIPPO_DATA_PLANE_EDGE?.trim(),n=t.AGENTHIPPO_DATA_MCP_URL?.trim();return!e||e==="0"||e.toLowerCase()==="false"||!n?null:{gatewayUrl:n}}var nf=class{cfg;constructor(e){this.cfg=e}get url(){return this.cfg.gatewayUrl}adoptTurn(e){return{nonce:e,env:{[al.TURN_NONCE_ENV]:e,[al.DATA_MCP_URL_ENV]:this.cfg.gatewayUrl},release:async()=>{try{await fetch(new URL("/turn",this.cfg.gatewayUrl),{method:"DELETE",headers:{Authorization:`Bearer ${e}`}})}catch{}}}}};qs.EdgeDataPlane=nf;function Ck(t=process.env){let e=t.AGENTHIPPO_DATA_PLANE_CONTROL_URL?.trim(),n=t.AGENTHIPPO_DATA_PLANE_TOKEN?.trim(),r=t.AGENTHIPPO_DATA_MCP_URL?.trim();return!e||!n||!r?null:{controlUrl:e,registerToken:n,gatewayUrl:r}}var rf=class{cfg;constructor(e){this.cfg=e}get url(){return this.cfg.gatewayUrl}async registerTurn(e){let n=await fetch(`${this.cfg.controlUrl.replace(/\/$/,"")}/turns`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${this.cfg.registerToken}`},body:JSON.stringify(e)});if(!n.ok)throw new Error(`data-plane sidecar register failed: HTTP ${n.status}`);let{nonce:r}=await n.json();return{nonce:r,env:{[al.TURN_NONCE_ENV]:r,[al.DATA_MCP_URL_ENV]:this.cfg.gatewayUrl},release:async()=>{try{await fetch(`${this.cfg.controlUrl.replace(/\/$/,"")}/turns/${encodeURIComponent(r)}`,{method:"DELETE",headers:{Authorization:`Bearer ${this.cfg.registerToken}`}})}catch{}}}}};qs.RemoteDataPlane=rf});var Pi=S(W=>{"use strict";var kk=W&&W.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),$k=W&&W.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),Dk=W&&W.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&kk(n,e,r[s]);return $k(n,e),n}})();Object.defineProperty(W,"__esModule",{value:!0});W.DataPlane=W.resolveEdgeDataPlane=W.EdgeDataPlane=W.resolveRemoteDataPlane=W.RemoteDataPlane=W.ASSERTION_HEADER=W.startDataPlaneSidecar=W.EGRESS_URL_ENV=W.startEgressBroker=W.TURN_NONCE_HEADER=W.TURN_NONCE_ENV=W.DATA_MCP_URL_ENV=W.startDataGateway=W.TURN_META_KEY=W.ConnectorHost=W.createConnectHandler=W.parseGrantKey=W.GrantStore=W.ConnectError=W.readStoredGrantConfig=W.StoredGrantProvider=W.identityProvider=W.passthroughProvider=W.resolveProvider=W.CredentialBroker=W.DEFAULT_TURN_DEADLINE_MS=W.isNonceShaped=W.hashNonce=W.TurnRegistry=void 0;W.resolveDataPlaneConfig=Hk;var sa=Dk(require("path")),Lk=co(),r_=jd(),Mk=Bd(),of=fo(),Gk=Xt(),cl=co();Object.defineProperty(W,"TurnRegistry",{enumerable:!0,get:function(){return cl.TurnRegistry}});Object.defineProperty(W,"hashNonce",{enumerable:!0,get:function(){return cl.hashNonce}});Object.defineProperty(W,"isNonceShaped",{enumerable:!0,get:function(){return cl.isNonceShaped}});Object.defineProperty(W,"DEFAULT_TURN_DEADLINE_MS",{enumerable:!0,get:function(){return cl.DEFAULT_TURN_DEADLINE_MS}});var ll=jd();Object.defineProperty(W,"CredentialBroker",{enumerable:!0,get:function(){return ll.CredentialBroker}});Object.defineProperty(W,"resolveProvider",{enumerable:!0,get:function(){return ll.resolveProvider}});Object.defineProperty(W,"passthroughProvider",{enumerable:!0,get:function(){return ll.passthroughProvider}});Object.defineProperty(W,"identityProvider",{enumerable:!0,get:function(){return ll.identityProvider}});var cf=ta();Object.defineProperty(W,"StoredGrantProvider",{enumerable:!0,get:function(){return cf.StoredGrantProvider}});Object.defineProperty(W,"readStoredGrantConfig",{enumerable:!0,get:function(){return cf.readStoredGrantConfig}});Object.defineProperty(W,"ConnectError",{enumerable:!0,get:function(){return cf.ConnectError}});var i_=Md();Object.defineProperty(W,"GrantStore",{enumerable:!0,get:function(){return i_.GrantStore}});Object.defineProperty(W,"parseGrantKey",{enumerable:!0,get:function(){return i_.parseGrantKey}});var Uk=Xd();Object.defineProperty(W,"createConnectHandler",{enumerable:!0,get:function(){return Uk.createConnectHandler}});var o_=Bd();Object.defineProperty(W,"ConnectorHost",{enumerable:!0,get:function(){return o_.ConnectorHost}});Object.defineProperty(W,"TURN_META_KEY",{enumerable:!0,get:function(){return o_.TURN_META_KEY}});var ul=fo();Object.defineProperty(W,"startDataGateway",{enumerable:!0,get:function(){return ul.startDataGateway}});Object.defineProperty(W,"DATA_MCP_URL_ENV",{enumerable:!0,get:function(){return ul.DATA_MCP_URL_ENV}});Object.defineProperty(W,"TURN_NONCE_ENV",{enumerable:!0,get:function(){return ul.TURN_NONCE_ENV}});Object.defineProperty(W,"TURN_NONCE_HEADER",{enumerable:!0,get:function(){return ul.TURN_NONCE_HEADER}});var a_=zE();Object.defineProperty(W,"startEgressBroker",{enumerable:!0,get:function(){return a_.startEgressBroker}});Object.defineProperty(W,"EGRESS_URL_ENV",{enumerable:!0,get:function(){return a_.EGRESS_URL_ENV}});var c_=n_();Object.defineProperty(W,"startDataPlaneSidecar",{enumerable:!0,get:function(){return c_.startDataPlaneSidecar}});Object.defineProperty(W,"ASSERTION_HEADER",{enumerable:!0,get:function(){return c_.ASSERTION_HEADER}});var dl=sf();Object.defineProperty(W,"RemoteDataPlane",{enumerable:!0,get:function(){return dl.RemoteDataPlane}});Object.defineProperty(W,"resolveRemoteDataPlane",{enumerable:!0,get:function(){return dl.resolveRemoteDataPlane}});Object.defineProperty(W,"EdgeDataPlane",{enumerable:!0,get:function(){return dl.EdgeDataPlane}});Object.defineProperty(W,"resolveEdgeDataPlane",{enumerable:!0,get:function(){return dl.resolveEdgeDataPlane}});var s_={"personal-connectors":sa.join("skills","personal-connectors","scripts","server.mjs")};function Hk(t,e,n=(0,Gk.findBundledBasePromptsDir)()){let r=t?.dataPlane,s=r?.connector?.trim();if(!s)return;let i=r?.provider?.trim()||void 0;if(s.startsWith("builtin:")){let o=s.slice(8),a=s_[o];if(!a)throw new Error(`Unknown builtin connector "${o}" (known: ${Object.keys(s_).join(", ")})`);if(!n)throw new Error(`connector ${s}: this AgentHippo build ships no base-prompts. Copy the connector into the pack (${sa.dirname(a)}/server.mjs and lib.mjs) and point spec.dataPlane.connector at the copy.`);return{connectorPath:sa.join(n,a),provider:i}}return{connectorPath:sa.isAbsolute(s)?s:sa.join(e,s),provider:i}}var af=class t{url;registry;broker;connector;gateway;constructor(e,n,r,s,i){this.url=e,this.registry=n,this.broker=r,this.connector=s,this.gateway=i}static async start(e,n){let r=n?.registry??new Lk.TurnRegistry,s=new r_.CredentialBroker(n?.provider??(0,r_.resolveProvider)(e.provider)),i=await Mk.ConnectorHost.spawn({connectorPath:e.connectorPath,logger:n?.logger});try{let o=await(0,of.startDataGateway)({registry:r,broker:s,connector:i,logger:n?.logger,audit:n?.audit,host:n?.gateway?.host,port:n?.gateway?.port,advertiseHost:n?.gateway?.advertiseHost});return new t(o.url,r,s,i,o)}catch(o){throw await i.close(),o}}registerTurnRaw(e,n){return this.registry.register(e,n)}registerTurn(e,n){let{nonce:r,release:s}=this.registry.register(e,n);return{nonce:r,env:{[of.TURN_NONCE_ENV]:r,[of.DATA_MCP_URL_ENV]:this.url},release:s}}async close(){await this.gateway.close(),await this.connector.close()}};W.DataPlane=af});var f_=S(gl=>{"use strict";Object.defineProperty(gl,"__esModule",{value:!0});gl.resolveLocalTurnUserId=d_;gl.resolveLocalTurnScope=xk;var l_=Pi(),u_=sf(),fl=fo(),jk=ps();function d_(t=process.env){return t.AGENTHIPPO_DATA_USER?.trim()||(0,jk.currentCredential)()?.userId?.trim()||t.LOGNAME?.trim()||t.USER?.trim()||t.LNAME?.trim()||t.USERNAME?.trim()||void 0}var lf=new WeakMap,pl=class{mode;userId;gatewayUrl;registrar;closePlane;sessionNonce;activeTurns=0;latestRelease;constructor(e,n,r,s,i){this.mode=e,this.userId=n,this.gatewayUrl=r,this.registrar=s,this.closePlane=i}async beginTurn(e){let n=await this.registrar.registerTurn({userId:this.userId,sessionKey:e.sessionKey,renewNonce:this.sessionNonce});this.sessionNonce=n.nonce,this.latestRelease=n.release,this.activeTurns++;let r=!1;return{env:n.env,release:async()=>{if(!r&&(r=!0,this.activeTurns--,this.activeTurns<=0)){let s=this.latestRelease;this.latestRelease=void 0,await s?.()}}}}async close(){await this.closePlane()}};async function xk(t){let e=t.env??process.env,n=i=>{let o=d_(e);if(!o)throw new Error(`${i} is configured but no acting user resolves \u2014 set AGENTHIPPO_DATA_USER (fail-closed: turns register a real identity; there is no anonymous data access)`);return o},r=lf.has(e)?lf.get(e):(0,u_.resolveRemoteDataPlane)(e);if(r){lf.set(e,r);let i=n("The data-plane sidecar"),o=new u_.RemoteDataPlane(r);return delete e.AGENTHIPPO_DATA_PLANE_TOKEN,e[fl.DATA_MCP_URL_ENV]=o.url,new pl("sidecar",i,o.url,{registerTurn:a=>o.registerTurn({...a,agent:t.agent})},async()=>{})}if(e[fl.TURN_NONCE_ENV]?.trim()&&e[fl.DATA_MCP_URL_ENV]?.trim())return console.warn("Warning: using a pre-minted session nonce from the environment (not rotated per turn, expires on the registry deadline). Set AGENTHIPPO_DATA_PLANE_CONTROL_URL + AGENTHIPPO_DATA_PLANE_TOKEN to register real per-turn identities instead."),null;let s=t.packPath?(0,l_.resolveDataPlaneConfig)(t.spec,t.packPath):void 0;if(s){let i=n("The pack's data plane (spec.dataPlane)"),o=await l_.DataPlane.start(s,{logger:t.logger,audit:t.audit});return e[fl.DATA_MCP_URL_ENV]=o.url,new pl("in-process",i,o.url,{registerTurn:async a=>o.registerTurn(a,{renewNonce:a.renewNonce})},()=>o.close())}return null}});var Ii=S(Le=>{"use strict";var Bk=Le&&Le.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),Fk=Le&&Le.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),Vk=Le&&Le.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&Bk(n,e,r[s]);return Fk(n,e),n}})();Object.defineProperty(Le,"__esModule",{value:!0});Le.WARRANT_TTL_ENV=Le.DEFAULT_WARRANT_TTL_SECONDS=Le.MAX_TTL_SECONDS=void 0;Le.b64urlEncode=uf;Le.signCompactJws=p_;Le.verifyCompactJws=g_;Le.timingSafeEqualString=Wk;Le.generateWarrantKeypair=Kk;Le.warrantTtlFromEnv=qk;Le.mintWarrant=Yk;Le.verifyWarrant=Jk;Le.jwks=Xk;var ws=Vk(require("node:crypto"));function uf(t){return Buffer.from(t,"utf8").toString("base64url")}function p_(t,e,n){let r={alg:"ES256",typ:t.typ??"JWT",kid:t.kid},s=`${uf(JSON.stringify(r))}.${uf(JSON.stringify(e))}`,i=ws.sign("sha256",Buffer.from(s),{key:ws.createPrivateKey(n),dsaEncoding:"ieee-p1363"});return`${s}.${i.toString("base64url")}`}function g_(t,e,n={}){let r=t.split(".");if(r.length!==3)return{ok:!1,reason:"malformed"};let[s,i,o]=r,a,c;try{a=JSON.parse(Buffer.from(s,"base64url").toString("utf8")),c=JSON.parse(Buffer.from(i,"base64url").toString("utf8"))}catch{return{ok:!1,reason:"unparseable"}}if(a.alg!=="ES256")return{ok:!1,reason:`unsupported alg ${a.alg}`};if(n.typ!==void 0&&a.typ!==void 0&&a.typ!==n.typ)return{ok:!1,reason:`unexpected token type ${a.typ}`};let l=a.kid?e[a.kid]:void 0;if(!l)return{ok:!1,reason:"unknown kid"};let d=!1;try{d=ws.verify("sha256",Buffer.from(`${s}.${i}`),{key:ws.createPublicKey(l),dsaEncoding:"ieee-p1363"},Buffer.from(o,"base64url"))}catch{return{ok:!1,reason:"bad signature"}}return d?{ok:!0,header:a,payload:c,signingInput:`${s}.${i}`}:{ok:!1,reason:"bad signature"}}function Wk(t,e){let n=Buffer.from(t,"utf8"),r=Buffer.from(e,"utf8");return n.length!==r.length?!1:ws.timingSafeEqual(n,r)}function Kk(t){let{privateKey:e,publicKey:n}=ws.generateKeyPairSync("ec",{namedCurve:"P-256"}),r=n.export({type:"spki",format:"pem"}).toString();return{privateKeyPem:e.export({type:"pkcs8",format:"pem"}).toString(),publicKeyPem:r,kid:t??ws.createHash("sha256").update(r).digest("hex").slice(0,16)}}Le.MAX_TTL_SECONDS=86400;Le.DEFAULT_WARRANT_TTL_SECONDS=3600;Le.WARRANT_TTL_ENV="AGENTHIPPO_WARRANT_TTL_SECONDS";function qk(t=process.env){let e=t[Le.WARRANT_TTL_ENV]?.trim();if(e===void 0||e==="")return Le.DEFAULT_WARRANT_TTL_SECONDS;let n=Number(e);return!Number.isFinite(n)||n<=0?Le.DEFAULT_WARRANT_TTL_SECONDS:Math.min(Math.floor(n),Le.MAX_TTL_SECONDS)}function Yk(t,e){let n=t.nowSeconds??Math.floor(Date.now()/1e3),r=Math.min(t.ttlSeconds??120,Le.MAX_TTL_SECONDS),s={user:t.user,pack:t.pack,packVersion:t.packVersion,sandboxId:t.sandboxId,tier:t.tier,aud:t.aud,iat:n,exp:n+r,jti:ws.randomUUID(),...t.billing==="user"?{billing:"user"}:{},...t.budgetKey?{budgetKey:t.budgetKey}:{},...t.budgetWindowSeconds!==void 0&&t.budgetWindowSeconds>0?{budgetWindowSeconds:t.budgetWindowSeconds}:{}};return p_({typ:"JWT",kid:e.kid},s,e.privateKeyPem)}function Jk(t,e,n){let r=g_(t,e);if(!r.ok)return{ok:!1,reason:r.reason};let s=r.payload,i=n.nowSeconds??Math.floor(Date.now()/1e3);return typeof s.exp!="number"||s.exp<=i?{ok:!1,reason:"expired"}:s.aud!==n.audience?{ok:!1,reason:`wrong audience ${s.aud}`}:n.channelSandboxId!==void 0&&s.sandboxId!==n.channelSandboxId?{ok:!1,reason:"warrant not bound to this channel"}:s.user?{ok:!0,claims:s}:{ok:!1,reason:"no principal"}}function Xk(t){return{keys:t.map(e=>({...ws.createPublicKey(e.publicKeyPem).export({format:"jwk"}),kid:e.kid,alg:"ES256",use:"sig"}))}}});var oa=S(le=>{"use strict";Object.defineProperty(le,"__esModule",{value:!0});le.DENY_SCOPE_ALIASES=le.DENY_MODE_ALIASES=le.STRICTEST_DENY_MODE=le.DENY_MODES=le.DENY_SCOPES=le.STRICTEST_ON_BREACH=le.ON_BREACH_ALIASES=le.ON_BREACH_ACTIONS=le.DEPRECATED_CAP_SPELLINGS=le.LEASE_CAP_ALIASES=le.LEASE_CAP_FIELDS=void 0;le.parseCapPolicy=h_;le.parseLease=Zk;le.LEASE_CAP_FIELDS={maxTurnsPerSession:{kind:"positive-int"},maxSessionSeconds:{kind:"positive-int"},maxConcurrentSandboxes:{kind:"positive-int"}};le.LEASE_CAP_ALIASES={maxConcurrentCells:"maxConcurrentSandboxes"};le.DEPRECATED_CAP_SPELLINGS={maxConcurrentCells:"maxConcurrentSandboxes",AGENTHIPPO_MAX_CONCURRENT_CELLS:"AGENTHIPPO_MAX_CONCURRENT_SANDBOXES","destroy-cell":"destroy-sandbox","--max-concurrent-cells":"--max-concurrent-sandboxes"};le.ON_BREACH_ACTIONS={"revoke-inference":{strictness:1},"destroy-sandbox":{strictness:2}};le.ON_BREACH_ALIASES={"destroy-cell":"destroy-sandbox"};le.STRICTEST_ON_BREACH=Object.keys(le.ON_BREACH_ACTIONS).reduce((t,e)=>le.ON_BREACH_ACTIONS[t].strictness>=le.ON_BREACH_ACTIONS[e].strictness?t:e);le.DENY_SCOPES=["session","user","pack"];le.DENY_MODES={drain:{strictness:1},kill:{strictness:2}};le.STRICTEST_DENY_MODE="kill";le.DENY_MODE_ALIASES={};le.DENY_SCOPE_ALIASES={};var ia=t=>typeof t=="object"&&t!==null&&!Array.isArray(t);function zk(t,e){return typeof e!="number"?{ok:!1,reason:`${t} must be a number, got ${typeof e} (${JSON.stringify(e)})`}:Number.isFinite(e)?e<=0?{ok:!1,reason:`${t} must be greater than 0, got ${e} (omit the field for "unbounded")`}:Number.isInteger(e)?{ok:!0,value:e}:{ok:!1,reason:`${t} must be a whole number, got ${e}`}:{ok:!1,reason:`${t} must be finite, got ${e}`}}function h_(t,e="caps"){if(t==null)return{ok:!0,caps:{},warnings:[]};if(!ia(t))return{ok:!1,reason:`${e} must be an object`};let n=[],r={};for(let[i,o]of Object.entries(t)){if(o==null||i==="onBreach")continue;let a=i in le.LEASE_CAP_FIELDS?i:le.LEASE_CAP_ALIASES[i];if(!a){n.push(`${e}.${i} is not a cap this build understands and is NOT being enforced`);continue}let c=zk(`${e}.${i}`,o);if(!c.ok)return{ok:!1,reason:c.reason};r[a]=c.value}let s=t.onBreach;if(s!=null){if(typeof s!="string")return{ok:!1,reason:`${e}.onBreach must be a string, got ${typeof s}`};let i=s in le.ON_BREACH_ACTIONS?s:le.ON_BREACH_ALIASES[s];i?r.onBreach=i:(r.onBreach=le.STRICTEST_ON_BREACH,n.push(`${e}.onBreach="${s}" is not an action this build understands. Failing CLOSED to "${le.STRICTEST_ON_BREACH}" (the strictest known action). Known actions: ${Object.keys(le.ON_BREACH_ACTIONS).join(", ")}.`))}return{ok:!0,caps:r,warnings:n}}function Qk(t,e){if(!ia(t))return{ok:!1,reason:`deny[${e}] must be an object`};let n=[],r=t.scope;if(typeof r!="string")return{ok:!1,reason:`deny[${e}].scope must be a string`};let s=le.DENY_SCOPES.includes(r)?r:le.DENY_SCOPE_ALIASES[r];if(!s)return{ok:!1,reason:`deny[${e}].scope "${r}" is not a scope this build understands (known: ${le.DENY_SCOPES.join(", ")})`};if(typeof t.match!="string"||t.match.length===0)return{ok:!1,reason:`deny[${e}].match must be a non-empty string`};let i=t.mode;if(typeof i!="string")return{ok:!1,reason:`deny[${e}].mode must be a string`};let o=i in le.DENY_MODES?i:le.DENY_MODE_ALIASES[i];o||(o=le.STRICTEST_DENY_MODE,n.push(`deny[${e}].mode="${i}" is not a mode this build understands. Failing CLOSED to "${le.STRICTEST_DENY_MODE}". Known modes: ${Object.keys(le.DENY_MODES).join(", ")}.`));let a={scope:s,match:t.match,mode:o};if(t.reason!==void 0){if(typeof t.reason!="string")return{ok:!1,reason:`deny[${e}].reason must be a string`};a.reason=t.reason}if(t.until!==void 0&&t.until!==null){if(typeof t.until!="number"||!Number.isFinite(t.until))return{ok:!1,reason:`deny[${e}].until must be a finite epoch-seconds number`};a.until=t.until}if(t.user!==void 0&&t.user!==null){if(typeof t.user!="string")return{ok:!1,reason:`deny[${e}].user must be a string`};a.user=t.user}if(t.followUser!==void 0&&t.followUser!==null){if(typeof t.followUser!="boolean")return{ok:!1,reason:`deny[${e}].followUser must be a boolean`};a.followUser=t.followUser}return{ok:!0,rule:a,warnings:n}}function Zk(t){if(!ia(t))return{ok:!1,reason:"lease must be a JSON object"};let e=[];if(typeof t.pack!="string"||t.pack.length===0)return{ok:!1,reason:"lease.pack must be a non-empty string"};if(typeof t.enabled!="boolean")return{ok:!1,reason:`lease.enabled must be a boolean, got ${typeof t.enabled}`};if(typeof t.expiresAt!="number"||!Number.isFinite(t.expiresAt))return{ok:!1,reason:`lease.expiresAt must be a finite epoch-seconds number, got ${JSON.stringify(t.expiresAt)}`};let n={pack:t.pack,enabled:t.enabled,expiresAt:t.expiresAt};for(let r of["version","imageDigest","reason"]){let s=t[r];if(s!=null){if(typeof s!="string")return{ok:!1,reason:`lease.${r} must be a string, got ${typeof s}`};n[r]=s}}for(let r of["requireSignedPack","requireSignedLease","allowServiceTurns","billUsers"]){let s=t[r];if(s!=null){if(typeof s!="boolean")return{ok:!1,reason:`lease.${r} must be a boolean, got ${typeof s}`};n[r]=s}}if(t.budget!==void 0&&t.budget!==null){let r=t.budget;if(typeof r!="object"||Array.isArray(r))return{ok:!1,reason:"lease.budget must be an object"};let s=r.scope;if(s!=="session"&&s!=="user")return{ok:!1,reason:`lease.budget.scope must be 'session' or 'user', got ${JSON.stringify(s)}`};let i=r.windowSeconds;if(i!=null&&(typeof i!="number"||!Number.isFinite(i)||i<0))return{ok:!1,reason:"lease.budget.windowSeconds must be a non-negative number"};n.budget={scope:s,...typeof i=="number"&&i>0?{windowSeconds:i}:{}}}if(t.caps!==void 0&&t.caps!==null){let r=h_(t.caps,"lease.caps");if(!r.ok)return{ok:!1,reason:r.reason};n.caps=r.caps,e.push(...r.warnings)}if(t.deny!==void 0&&t.deny!==null){if(!Array.isArray(t.deny))return{ok:!1,reason:"lease.deny must be an array"};let r=[];for(let s=0;s<t.deny.length;s++){let i=Qk(t.deny[s],s);if(!i.ok)return{ok:!1,reason:i.reason};r.push(i.rule),e.push(...i.warnings)}n.deny=r}if(t.grants!==void 0&&t.grants!==null){let r=ia(t.grants)?t.grants.revoke:void 0;if(!Array.isArray(r))e.push("lease.grants.revoke is not an array \u2014 ignored");else{let s=[];for(let[i,o]of r.entries()){if(!ia(o)||typeof o.user!="string"||!/^[0-9a-f]{64}$/.test(o.user)||typeof o.requestedAt!="number"||!Number.isFinite(o.requestedAt)||o.service!==void 0&&o.service!=="google"&&o.service!=="bank"){e.push(`lease.grants.revoke[${i}] is malformed \u2014 ignored`);continue}s.push({user:o.user,requestedAt:o.requestedAt,...o.service?{service:o.service}:{}})}n.grants={revoke:s}}}return t.issuedAt!==void 0&&t.issuedAt!==null&&(typeof t.issuedAt=="number"&&Number.isFinite(t.issuedAt)?n.issuedAt=t.issuedAt:e.push("lease.issuedAt is not a finite number \u2014 ignored")),t.deployment!==void 0&&t.deployment!==null&&(typeof t.deployment=="string"&&t.deployment.length>0?n.deployment=t.deployment:e.push("lease.deployment is not a non-empty string \u2014 ignored")),{ok:!0,lease:n,warnings:e}}});var ho=S(j=>{"use strict";var e$=j&&j.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),t$=j&&j.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),ff=j&&j.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&e$(n,e,r[s]);return t$(n,e),n}})();Object.defineProperty(j,"__esModule",{value:!0});j.PACK_FULL_REVERIFY_INTERVAL_MS=j.PACK_PROBE_INTERVAL_MS=j.LEASE_JWKS_PINS_ENV=j.LEASE_JWKS_URL_ENV=j.LEASE_SIGNING_KEYS_ENV=j.ALLOW_INSECURE_TRUST_ROOT_ENV=j.PACK_JWKS_PINS_ENV=j.PACK_JWKS_URL_ENV_LEGACY=j.PACK_JWKS_URL_ENV=j.ALLOW_UNSIGNED_PACK_ENV=j.DIGEST_EXCLUDED_SEGMENTS=j.PACK_SIGNATURE_FILE=void 0;j.isDigestExcluded=ml;j.computePackDigestFromFiles=E_;j.computePackDigest=pf;j.packTreeProbe=df;j.signPack=n$;j.readPackSignature=__;j.verifyPack=y_;j.verifyPackFromFiles=r$;j.requireSignedPack=S_;j.resolveRequireSignedPack=i$;j.allowUnsignedPackFromEnv=o$;j.describePackRefusal=a$;j.publicKeyThumbprints=A_;j.parseJwksPins=b_;j.assertSecureTrustUrl=T_;j.loadPackTrustRoot=O_;j.loadLeaseTrustRoot=d$;j.selectLeaseSigningKeys=f$;j.checkTrustRootSeparation=p$;j.loadPackSigningKeys=h$;j.createPackVerifier=m$;var go=ff(require("node:crypto")),Ys=ff(require("node:fs")),hl=ff(require("node:path")),aa=Ii();j.PACK_SIGNATURE_FILE="pack.sig";j.DIGEST_EXCLUDED_SEGMENTS=new Set([".git","node_modules"]);function ml(t){return t===j.PACK_SIGNATURE_FILE?!0:t.split("/").some(e=>j.DIGEST_EXCLUDED_SEGMENTS.has(e))}function m_(t){let e=go.createHash("sha256"),n=[...t].sort((r,s)=>r.rel<s.rel?-1:r.rel>s.rel?1:0);for(let r of n){r.link&&e.update("L:");let s=Buffer.from(r.rel);e.update(`${s.length}:`),e.update(s),e.update(`${r.body.length}:`),e.update(r.body)}return e.digest("hex")}function E_(t){let e=[];for(let n of t){let r=n.path.replace(/\\/g,"/");ml(r)||e.push({rel:r,body:n.content,link:n.link})}return m_(e)}function pf(t){let e=[],n=(r,s)=>{for(let i of Ys.readdirSync(r)){let o=s?`${s}/${i}`:i;if(ml(o))continue;let a=hl.join(r,i),c=Ys.lstatSync(a);c.isSymbolicLink()?e.push({rel:o,body:Buffer.from(Ys.readlinkSync(a)),link:!0}):c.isDirectory()?n(a,o):c.isFile()&&e.push({rel:o,body:Ys.readFileSync(a)})}};return n(t,""),m_(e)}function df(t){let e=[],n=(r,s)=>{let i;try{i=Ys.readdirSync(r).sort()}catch{e.push(`${s}/?unreadable`);return}for(let o of i){let a=s?`${s}/${o}`:o;if(ml(a))continue;let c=hl.join(r,o),l;try{l=Ys.lstatSync(c)}catch{e.push(`${a}|gone`);continue}if(l.isDirectory()){n(c,a);continue}e.push(`${a}|${l.size}|${l.mtimeMs}|${l.ino}|${l.mode}`)}};try{n(t,"")}catch{return"unwalkable"}return go.createHash("sha256").update(e.join(`
 `)).digest("hex")}function n$(t){let e=pf(t.packDir),n={pack:t.pack,packVersion:t.packVersion,digest:e,iat:t.nowSeconds??Math.floor(Date.now()/1e3)},r=(0,aa.signCompactJws)({typ:"JWT",kid:t.kid},n,t.privateKeyPem);return Ys.writeFileSync(hl.join(t.packDir,j.PACK_SIGNATURE_FILE),`${r}
 `),{signature:r,digest:e}}function __(t){try{return Ys.readFileSync(hl.join(t,j.PACK_SIGNATURE_FILE),"utf8").trim()||void 0}catch{return}}function y_(t,e,n){return w_(t,e,n.pack,n.packVersion,()=>pf(n.packDir))}function r$(t,e,n,r,s){return w_(t,e,n,r,()=>E_(s))}function w_(t,e,n,r,s){if(Object.keys(e).length===0)return{ok:!1,kind:"no-trust-root",reason:"no trusted pack-signing keys are configured on this instance"};let i=(0,aa.verifyCompactJws)(t,e);if(!i.ok)return i.reason==="unknown kid"?{ok:!1,kind:"unknown-key",reason:`unknown signing key ${s$(t)??"(none named)"}`}:i.reason==="bad signature"?{ok:!1,kind:"bad-signature",reason:"signature does not verify"}:i.reason==="malformed"?{ok:!1,kind:"malformed",reason:"malformed signature"}:i.reason==="unparseable"?{ok:!1,kind:"malformed",reason:"unreadable signature"}:{ok:!1,kind:"malformed",reason:i.reason};let o=i.payload;return o.pack!==n?{ok:!1,kind:"identity-mismatch",reason:`signature is for pack ${o.pack}, not ${n}`}:o.packVersion!==r?{ok:!1,kind:"identity-mismatch",reason:`signature is for ${o.pack}@${o.packVersion}, not @${r}`}:typeof o.digest!="string"||!o.digest?{ok:!1,kind:"malformed",reason:"signature carries no digest"}:(0,aa.timingSafeEqualString)(s(),o.digest)?{ok:!0,claims:o}:{ok:!1,kind:"digest-mismatch",reason:"pack contents changed after signing"}}function s$(t){try{return JSON.parse(Buffer.from(t.split(".")[0],"base64url").toString("utf8")).kid}catch{return}}function S_(t,e){return!!t||!!e}j.ALLOW_UNSIGNED_PACK_ENV="AGENTHIPPO_ALLOW_UNSIGNED_PACK";function i$(t){return S_(t.lease,t.localRequire)?!0:!t.localAllowUnsigned}function o$(t=process.env){let e=t[j.ALLOW_UNSIGNED_PACK_ENV]?.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function a$(t){let n=[`refusing to run ${t.packVersion?`${t.pack}@${t.packVersion}`:t.pack}: ${t.detail}`];switch(t.kind){case"unsigned":n.push(`  The pack directory has no ${j.PACK_SIGNATURE_FILE}${t.packDir?` at ${t.packDir}`:""}.`,`  Sign it:  agenthippo pack sign ${t.pack} --key <private-key.pem> --kid <key-id>`,"  (generate a key with: agenthippo pack keygen -o key.pem, then publish its public half to JWKS)");break;case"no-trust-root":n.push("  This is NOT a problem with the pack \u2014 this instance has no keys to check it against.","  Configure ONE of:",'    AGENTHIPPO_PACK_SIGNING_KEYS   inline JSON {"<kid>":"<public PEM>"} (air-gapped installs)',`    ${j.PACK_JWKS_URL_ENV}        https URL of the JWKS document publishing your signing keys`,`    ${j.PACK_JWKS_PINS_ENV}       optional, comma-separated sha256 thumbprints to pin those keys to`);break;case"trust-root-unavailable":n.push("  A trust root IS configured but could not be loaded, so no signature can be checked.",`  ${t.trustRootHint??""}`.trimEnd(),'  This is deliberately an error and not an empty keyring: "cannot reach the trust root" and','  "no trust root configured" have different causes and different fixes.');break;case"unknown-key":n.push("  The pack IS signed, but by a key this fleet does not trust.","  Either publish that key to your JWKS / AGENTHIPPO_PACK_SIGNING_KEYS, or re-sign the pack","  with a key that is already trusted. A key is never trusted just because it arrived with the pack.");break;case"digest-mismatch":n.push("  The signature is valid but the pack tree no longer matches it \u2014 something changed after signing.","  Note that .claude/, .codex/ and .agent-hippo/ are now INSIDE the digest (they carry hooks and","  other executable content), so edits there invalidate a signature that used to survive them.",`  Re-sign after reviewing the diff:  agenthippo pack sign ${t.pack} --key <private-key.pem> --kid <key-id>`);break;case"identity-mismatch":n.push("  The signature is valid but names a different pack or version \u2014 a replayed signature, not this artifact.");break;case"malformed":case"bad-signature":n.push(`  ${j.PACK_SIGNATURE_FILE} is present but unusable. Re-sign the pack; do not hand-edit it.`);break;case"no-pack":break}return n.push(`  To run unsigned packs anyway (LOCAL DEVELOPMENT ONLY), set ${j.ALLOW_UNSIGNED_PACK_ENV}=1.`,"  A lease that sets requireSignedPack overrides that escape hatch \u2014 the control plane's demand cannot be waived locally."),n.join(`
-`)}j.PACK_JWKS_URL_ENV="AGENTHIPPO_PACK_JWKS_URL";j.PACK_JWKS_URL_ENV_LEGACY="AGENTHIPPO_PACK_SIGNING_JWKS_URL";j.PACK_JWKS_PINS_ENV="AGENTHIPPO_PACK_JWKS_PINS";j.ALLOW_INSECURE_TRUST_ROOT_ENV="AGENTHIPPO_ALLOW_INSECURE_TRUST_ROOT";j.LEASE_SIGNING_KEYS_ENV="AGENTHIPPO_LEASE_SIGNING_KEYS";j.LEASE_JWKS_URL_ENV="AGENTHIPPO_LEASE_JWKS_URL";j.LEASE_JWKS_PINS_ENV="AGENTHIPPO_LEASE_JWKS_PINS";function A_(t){let e=go.createPublicKey(t),n=e.export({format:"jwk"}),r=n.kty==="EC"?{crv:n.crv,kty:n.kty,x:n.x,y:n.y}:n.kty==="RSA"?{e:n.e,kty:n.kty,n:n.n}:{kty:n.kty};return{jwk:go.createHash("sha256").update(JSON.stringify(r)).digest("base64url"),spki:go.createHash("sha256").update(e.export({type:"spki",format:"der"})).digest("hex")}}var c$=t=>t.trim().replace(/^sha256:/i,"").toLowerCase();function b_(t){return(t??"").split(",").map(c$).filter(e=>e.length>0)}function T_(t,e,n=process.env){let r;try{r=new URL(t)}catch{return{ok:!1,reason:`${e} is not a valid URL: ${t}`}}if(r.protocol==="https:")return{ok:!0,warnings:[]};let s=(n[j.ALLOW_INSECURE_TRUST_ROOT_ENV]??"").trim().toLowerCase();return s==="1"||s==="true"||s==="yes"?{ok:!0,warnings:[`INSECURE: ${e} is ${r.protocol}//${r.host} (not https) and ${j.ALLOW_INSECURE_TRUST_ROOT_ENV} is set. Anyone on the path between this instance and that host can choose which packs it will run and whether the kill switch is honoured. This must never be set outside local development.`]}:{ok:!1,reason:`${e} must be https (got ${r.protocol}//${r.host}). Set ${j.ALLOW_INSECURE_TRUST_ROOT_ENV}=1 to allow plaintext for LOCAL DEVELOPMENT ONLY.`}}var l$={label:"pack",purpose:"pack-signing",inlineEnv:"AGENTHIPPO_PACK_SIGNING_KEYS",urlEnvs:[j.PACK_JWKS_URL_ENV,j.PACK_JWKS_URL_ENV_LEGACY],pinsEnv:j.PACK_JWKS_PINS_ENV,derivedRisk:"chooses which packs this instance will run"},u$={label:"lease",purpose:"lease-signing",inlineEnv:j.LEASE_SIGNING_KEYS_ENV,urlEnvs:[j.LEASE_JWKS_URL_ENV],pinsEnv:j.LEASE_JWKS_PINS_ENV,derivedRisk:"chooses whether this instance's kill switch is ever honoured"};async function v_(t,e){let n=e.env??process.env,r=[],s=b_(n[t.pinsEnv]),i=n[t.inlineEnv]?.trim(),o=t.urlEnvs.map(f=>n[f]).find(f=>f!==void 0&&f.trim()!=="")?.trim(),a=!!i||!!o,c=(f,p,g)=>{if(s.length===0)return Object.keys(f).length===0?{status:"unavailable",keys:{},source:p,url:g,warnings:r,explicitlyConfigured:a,reason:"the trust root published no usable ES256 keys"}:{status:"configured",keys:f,source:p,url:g,warnings:r,explicitlyConfigured:a};let m={};for(let[h,y]of Object.entries(f)){let E;try{E=A_(y)}catch{r.push(`${t.label} trust root: key ${h} is unreadable and was dropped`);continue}s.some(O=>(0,aa.timingSafeEqualString)(O,E.jwk.toLowerCase())||(0,aa.timingSafeEqualString)(O,E.spki))?m[h]=y:r.push(`${t.label} trust root: key ${h} does not match any pin in ${t.pinsEnv} and was REFUSED (its thumbprints are jwk=${E.jwk} spki=${E.spki})`)}return Object.keys(m).length===0?{status:"unavailable",keys:{},source:p,url:g,warnings:r,explicitlyConfigured:a,reason:`every key offered by the trust root failed the ${t.pinsEnv} pin check`}:{status:"configured",keys:m,source:p,url:g,warnings:r,explicitlyConfigured:a}};if(i){let f;try{f=JSON.parse(i)}catch(p){return{status:"unavailable",keys:{},source:"inline",warnings:r,explicitlyConfigured:a,reason:`${t.inlineEnv} is set but is not valid JSON: ${p instanceof Error?p.message:String(p)}`}}return c(f,"inline")}let l=o,d=!1;if(!l&&e.leaseUrl){try{l=new URL(`/.well-known/jwks.json?purpose=${t.purpose}`,e.leaseUrl).toString()}catch{return{status:"unavailable",keys:{},warnings:r,explicitlyConfigured:a,reason:`AGENTHIPPO_LEASE_URL is not a valid URL: ${e.leaseUrl}`}}d=!0}if(!l)return{status:"unconfigured",keys:{},warnings:r,explicitlyConfigured:a};let u=T_(l,`the ${t.purpose} JWKS URL`,n);if(!u.ok)return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:u.reason,derivedFromLease:d,explicitlyConfigured:a};r.push(...u.warnings),d&&s.length===0&&r.push(`${t.label} trust root is derived from AGENTHIPPO_LEASE_URL (${l}) and is not pinned. Whoever can answer that origin ${t.derivedRisk}. Pin it with ${t.urlEnvs[0]} and ${t.pinsEnv}.`);try{let f=await(e.fetchImpl??fetch)(l);if(!f.ok)return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:`JWKS fetch returned HTTP ${f.status}`,derivedFromLease:d,explicitlyConfigured:a};let p=await f.json(),g=g$(p);return g.ok?{...c(g.pems,"jwks",l),derivedFromLease:d}:{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:g.reason,derivedFromLease:d,explicitlyConfigured:a}}catch(f){return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,derivedFromLease:d,explicitlyConfigured:a,reason:`JWKS fetch failed: ${f instanceof Error?f.message:String(f)}`}}}async function O_(t){return v_(l$,t)}async function d$(t){return v_(u$,t)}function f$(t,e){return t.explicitlyConfigured?{keys:t.keys,packFallback:!1}:{keys:{...e.keys,...t.keys},packFallback:!0}}function p$(t,e){let n=[];if(!t.explicitlyConfigured)return{warnings:n};if(t.url){let s=null;try{s=new URL(t.url).searchParams.get("purpose")}catch{}if(s!==null&&s!=="lease-signing")return{warnings:n,fatal:`${j.LEASE_JWKS_URL_ENV} points at a '${s}' document (${t.url}). A plane that separates keys by purpose never serves a lease-signing key there, so signed-lease verification breaks at the next lease-key rotation \u2014 and requireSignedLease is sticky with no plane-side undo. Point it at ?purpose=lease-signing (with its own ${j.LEASE_JWKS_PINS_ENV}) instead.`};s===null&&e.url===t.url&&n.push(`the lease trust root and the pack trust root are the SAME document (${t.url}). An older plane that returns every key it holds supports this; a plane that separates keys by purpose does not, and the break lands at the next lease-key rotation, after requireSignedLease has latched. Give the lease root its own URL: ?purpose=lease-signing.`)}let r=Object.keys(t.keys).filter(s=>e.keys[s]!==void 0&&e.keys[s].trim()===t.keys[s].trim());return r.length>0&&n.push(`kid(s) ${r.map(s=>`'${s}'`).join(", ")} carry the same public key in BOTH the lease and the pack trust root \u2014 one key under two purposes. The control plane refuses to register such a key, so whichever purpose rotates first strands the other; give each purpose its own keypair.`),{warnings:n}}function g$(t){if(t.pemsByKid&&typeof t.pemsByKid=="object")return{ok:!0,pems:t.pemsByKid};if(!Array.isArray(t.keys))return{ok:!1,reason:"JWKS document has neither `pemsByKid` nor a `keys` array"};let e={};for(let n of t.keys)if(!(!n||typeof n!="object")&&!(n.kty!=="EC"||n.crv!=="P-256")&&!(n.alg!==void 0&&n.alg!=="ES256")&&!(typeof n.kid!="string"||!n.kid))try{e[n.kid]=go.createPublicKey({key:n,format:"jwk"}).export({type:"spki",format:"pem"}).toString()}catch{}return Object.keys(e).length===0?{ok:!1,reason:"JWKS document published no usable ES256 (P-256) keys"}:{ok:!0,pems:e}}async function h$(t){return(await O_(t)).keys}j.PACK_PROBE_INTERVAL_MS=1e3;j.PACK_FULL_REVERIFY_INTERVAL_MS=3e4;function m$(t={}){let e=t.probeIntervalMs??j.PACK_PROBE_INTERVAL_MS,n=t.fullReverifyIntervalMs??j.PACK_FULL_REVERIFY_INTERVAL_MS,r,s="",i="",o=0,a=0,c=0,l=u=>`${u.packDir}\0${u.pack}\0${u.packVersion}\0${Object.keys(u.keys).sort().join(",")}`,d=(u,f)=>{c+=1,s=l(u),i=df(u.packDir),o=f,a=f;let p=__(u.packDir);return r=p?y_(p,u.keys,{packDir:u.packDir,pack:u.pack,packVersion:u.packVersion}):{ok:!1,kind:"unsigned",reason:`${u.pack} is not signed (no ${j.PACK_SIGNATURE_FILE} at the pack root)`},r};return{fullVerifications:()=>c,refresh(u,f=Date.now()){return d(u,f)},verify(u,f=Date.now()){return!r||s!==l(u)||f-a>=n?d(u,f):f-o<e||(o=f,df(u.packDir)===i)?r:d(u,f)}}}});var mo=S(se=>{"use strict";Object.defineProperty(se,"__esModule",{value:!0});se.MAX_LEASE_ENVELOPE_TTL_SECONDS=se.LEASE_JWS_TYP=se.LeaseDeniedError=se.LEASE_MAX_STALENESS_ENV=se.DEFAULT_LEASE_MAX_STALENESS_SECONDS=se.MIN_LEASE_POLL_SECONDS=se.DEFAULT_LEASE_POLL_SECONDS=void 0;se.resolveLeasePollSeconds=gf;se.leaseCacheSecondsFor=hf;se.effectiveKillLatencySeconds=y$;se.leaseMaxStalenessFromEnv=R_;se.resolveAllowServiceTurns=w$;se.describeServiceTurnGate=S$;se.denyVerdict=C_;se.resolveFollowedUsers=b$;se.leaseIsDead=T$;se.policyVersion=v$;se.assertAdmitted=O$;se.signLease=P$;se.verifySignedLease=$_;se.requireSignedLease=D_;se.leaseUrlDeployment=L_;se.createLeaseSource=N$;var E$=require("crypto"),I_=Ii(),N_=oa(),_$=ho();se.DEFAULT_LEASE_POLL_SECONDS=30;se.MIN_LEASE_POLL_SECONDS=5;function gf(t){let e=typeof t=="number"&&Number.isFinite(t)?t:se.DEFAULT_LEASE_POLL_SECONDS;return Math.max(se.MIN_LEASE_POLL_SECONDS,Math.floor(e))}function hf(t){return gf(t)}function y$(t){let e=gf(t);return e+hf(e)}se.DEFAULT_LEASE_MAX_STALENESS_SECONDS=1440*60;se.LEASE_MAX_STALENESS_ENV="AGENTHIPPO_LEASE_MAX_STALENESS_SECONDS";function R_(t=process.env){let e=t[se.LEASE_MAX_STALENESS_ENV]?.trim();if(e===void 0||e==="")return se.DEFAULT_LEASE_MAX_STALENESS_SECONDS;let n=Number(e);return!Number.isFinite(n)||n<0?se.DEFAULT_LEASE_MAX_STALENESS_SECONDS:Math.floor(n)}function w$(t){return t.managed?t.lease===!0?{allowed:!0,gate:"lease_allows"}:{allowed:!1,gate:t.lease===!1?"lease_denies":"lease_absent_field"}:{allowed:!0,gate:"unmanaged_no_lease"}}function S$(t){switch(t){case"lease_allows":return"permitted by the control plane (lease.allowServiceTurns)";case"unmanaged_no_lease":return"permitted: no control plane configured, so AGENTHIPPO_SERVICE_USER is the only gate";case"lease_denies":return"refused: the control plane set lease.allowServiceTurns=false";case"lease_absent_field":return"refused: this is a managed deployment and the lease does not set allowServiceTurns (absent means deny \u2014 enable it in the console)"}}function C_(t,e,n){if(!t?.deny?.length)return{denied:!1};let r=n??Math.floor(Date.now()/1e3),s=e.sessionKey.indexOf("--"),i=s>=0?e.sessionKey.slice(s+2):e.sessionKey,o={denied:!1};for(let a of t.deny){if(a.until!==void 0&&a.until<=r)continue;let c=!1;if(a.scope==="pack"?c=a.match===e.pack:a.scope==="session"?(c=a.match===e.sessionKey||a.match===i,c&&a.user!==void 0&&e.userId!==void 0&&a.user!==e.userId&&(c=!1),!c&&a.followUser!==!1&&e.userId!==void 0&&A$(a,e.userId,e.followedUsers)&&(c=!0)):a.scope==="user"&&(c=e.userId!==void 0&&a.match===e.userId||e.userHash!==void 0&&e.sessionKey.startsWith(`u${e.userHash(a.match)}--`)),!c)continue;let l=`${a.mode==="kill"?"stopped":"draining"} by the control plane${a.reason?`: ${a.reason}`:""}`;if(a.mode==="kill")return{denied:!0,mode:"kill",reason:l};o.denied||(o={denied:!0,mode:"drain",reason:l})}return o}var k_=t=>`${t.scope}:${t.match}`;function A$(t,e,n){return n?.get(k_(t))?.has(e)??!1}function b$(t,e,n){let r=new Map;if(!t?.deny?.length)return r;let s=n??Math.floor(Date.now()/1e3);for(let i of t.deny){if(i.scope!=="session"||i.followUser===!1||i.until!==void 0&&i.until<=s)continue;let o=new Set;for(let[a,c]of e){let l=a.indexOf("--"),d=l>=0?a.slice(l+2):a;i.match!==a&&i.match!==d||i.user!==void 0&&i.user!==c||o.add(c)}o.size>0&&r.set(k_(i),o)}return r}function T$(t,e){if(!t)return{dead:!1};let n=e??Math.floor(Date.now()/1e3);return t.enabled?t.expiresAt<=n?{dead:!0,reason:`lease expired at ${new Date(t.expiresAt*1e3).toISOString()}`}:{dead:!1}:{dead:!0,reason:`kill switch active${t.reason?`: ${t.reason}`:""}`}}function v$(t){if(!t)return;let{expiresAt:e,...n}=t,r=s=>Array.isArray(s)?s.map(r):s&&typeof s=="object"?Object.fromEntries(Object.keys(s).sort().map(i=>[i,r(s[i])])):s;return(0,E$.createHash)("sha256").update(JSON.stringify(r(n))).digest("hex")}var Ss=class extends Error{constructor(e){super(e),this.name="LeaseDeniedError"}};se.LeaseDeniedError=Ss;function O$(t,e){if(!t)return;let n=e.nowSeconds??Math.floor(Date.now()/1e3);if(!t.enabled)throw new Ss(`kill switch active for pack ${e.pack}${t.reason?`: ${t.reason}`:""}`);if(t.pack!==e.pack)throw new Ss(`lease is for pack ${t.pack}, not ${e.pack}`);if(t.expiresAt<=n)throw new Ss(`lease for ${e.pack} expired at ${new Date(t.expiresAt*1e3).toISOString()}`);if(t.version&&t.version!==e.version)throw new Ss(`pack ${e.pack} is pinned to ${t.version}; refusing to start ${e.version} (rollback in force)`);if(t.imageDigest&&e.image&&!e.image.includes(t.imageDigest))throw new Ss(`image for ${e.pack} does not match the leased digest ${t.imageDigest}`);if(e.sessionKey){let r=C_(t,{sessionKey:e.sessionKey,pack:e.pack,userHash:e.userHash,userId:e.userId,followedUsers:e.followedUsers},n);if(r.denied)throw new Ss(r.reason??"stopped by the control plane")}}se.LEASE_JWS_TYP="agenthippo-lease+jws";se.MAX_LEASE_ENVELOPE_TTL_SECONDS=3600;function P$(t,e,n){let r=n.nowSeconds??Math.floor(Date.now()/1e3),s=Math.min(n.ttlSeconds??300,se.MAX_LEASE_ENVELOPE_TTL_SECONDS),i={lease:t,aud:n.instanceId??"*",sub:t.pack,iat:r,exp:r+s,...n.iss?{iss:n.iss}:{}};return(0,I_.signCompactJws)({typ:se.LEASE_JWS_TYP,kid:e.kid},i,e.privateKeyPem)}function $_(t,e,n={}){if(Object.keys(e).length===0)return{ok:!1,reason:"no trusted lease-signing keys are configured on this instance"};let r=(0,I_.verifyCompactJws)(t,e,{typ:se.LEASE_JWS_TYP});if(!r.ok)return{ok:!1,reason:`lease signature: ${r.reason}`};let s=r.payload,i=n.nowSeconds??Math.floor(Date.now()/1e3),o=n.clockSkewSeconds??60;if(typeof s.iat!="number"||!Number.isFinite(s.iat))return{ok:!1,reason:"lease envelope has no issued-at"};if(typeof s.exp!="number"||!Number.isFinite(s.exp))return{ok:!1,reason:"lease envelope has no expiry"};if(s.exp-s.iat>se.MAX_LEASE_ENVELOPE_TTL_SECONDS)return{ok:!1,reason:`lease envelope lifetime ${s.exp-s.iat}s exceeds the ${se.MAX_LEASE_ENVELOPE_TTL_SECONDS}s cap`};if(s.exp+o<=i)return{ok:!1,reason:`lease envelope expired at ${new Date(s.exp*1e3).toISOString()}`};if(s.iat-o>i)return{ok:!1,reason:"lease envelope is issued in the future"};if(n.minIat!==void 0&&s.iat<n.minIat)return{ok:!1,reason:`lease envelope is older than one already accepted (replay/rollback: iat ${s.iat} < ${n.minIat})`};if(n.instanceId!==void 0&&s.aud!=="*"&&s.aud!==n.instanceId)return{ok:!1,reason:`lease envelope is for instance ${s.aud}, not ${n.instanceId}`};let a=(0,N_.parseLease)(s.lease);return a.ok?s.sub!==a.lease.pack?{ok:!1,reason:`lease envelope subject ${s.sub} does not match lease.pack ${a.lease.pack}`}:{ok:!0,lease:a.lease,claims:s}:{ok:!1,reason:`signed lease is malformed: ${a.reason}`}}function D_(t,e){return!!t||!!e}var P_=t=>/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(t),I$=2e4;function L_(t){if(t)try{let e=/\/lease\/([^/]+)\.json$/.exec(new URL(t).pathname);return e?decodeURIComponent(e[1]):void 0}catch{return}}function N$(t){let e=t.staticLease,n=0,r,s,i=!1,o=!1,a,c=L_(t.url),l=!1,d,u=!1,f=!1,p=!1,g=!1,m=t.cacheSeconds??hf(se.DEFAULT_LEASE_POLL_SECONDS),h=t.maxStalenessSeconds??R_(t.env),y=t.fetchImpl??fetch,E=()=>D_(l,t.requireSignedLease),w=I=>({...e??{pack:"",expiresAt:0},enabled:!1,reason:`the control plane has not been reachable for ${I}s, past the ${h}s staleness ceiling (${se.LEASE_MAX_STALENESS_ENV}). Refusing work rather than running on a lease that can no longer be revoked. Set ${se.LEASE_MAX_STALENESS_ENV}=0 to accept unbounded staleness.`}),O=()=>({pack:"",expiresAt:0,enabled:!1,reason:`this instance is managed (${t.url}) but has never successfully fetched its lease`+(s?` (${s})`:"")+". Refusing work until the control plane is reachable rather than booting ungoverned. For an air-gapped deployment, provide the lease with --static-lease."}),b=!1,v=I=>{if(b=!0,!t.persistence)return;let k;try{k=t.persistence.load()}catch(T){t.logger?.warn(`[Lease] persisted lease unreadable: ${T instanceof Error?T.message:String(T)}`);return}if(!k||typeof k.body!="string")return;typeof k.lastGoodAt=="number"&&Number.isFinite(k.lastGoodAt)&&(r=Math.min(k.lastGoodAt,I));let P=N(k.body,I);if(!P.ok){t.logger?.warn(`[Lease] persisted lease not reinstalled: ${P.reason}`);return}P.signed&&(i=!0,P.lease.requireSignedLease&&(l=!0)),e=P.lease,o=P.signed,a=void 0},A=I=>I.deployment!==void 0&&c!==void 0&&I.deployment!==c?`lease is for deployment ${I.deployment}, not ${c} (${t.url})`:void 0,N=(I,k)=>{let P=I.trim(),T,K;if(P_(P))T=P;else{try{K=JSON.parse(P)}catch(J){return{ok:!1,reason:`lease body is not JSON: ${J instanceof Error?J.message:String(J)}`}}typeof K=="string"&&P_(K.trim())?T=K.trim():K&&typeof K=="object"&&typeof K.lease=="string"&&(T=K.lease.trim())}if(T){let J=$_(T,t.signingKeys?.()??{},{instanceId:t.instanceId,minIat:d,nowSeconds:k});if(!J.ok)return{ok:!1,reason:J.reason};let oe=A(J.lease);return oe?{ok:!1,reason:oe}:(d=J.claims.iat,{ok:!0,lease:J.lease,signed:!0})}if(E())return{ok:!1,reason:'a signed lease is required but the control plane returned an unsigned one (expected a compact JWS body or {"lease":"<jws>"})'};let B=(0,N_.parseLease)(K);if(!B.ok)return{ok:!1,reason:B.reason};for(let J of B.warnings)t.logger?.warn(`[Lease] ${J}`);let ne=A(B.lease);return ne?{ok:!1,reason:ne}:{ok:!0,lease:B.lease,signed:!1}};return{status(I){let k=I??Math.floor(Date.now()/1e3),P=r===void 0?void 0:k-r,T=!!t.url&&e===void 0&&s!==void 0;return{signed:i,currentSigned:o,clockOffsetSeconds:a,requireSignedLease:E(),lastGoodAt:r,stalenessSeconds:P,maxStalenessSeconds:h,failClosed:T||h>0&&P!==void 0&&P>h,lastError:s}},async get(I){let k=I??Math.floor(Date.now()/1e3);if(!t.url)return e;if(!g){g=!0;let P=(0,_$.assertSecureTrustUrl)(t.url,"AGENTHIPPO_LEASE_URL",t.env??process.env);if(P.ok)for(let T of P.warnings)t.logger?.warn(`[Lease] ${T}`);else E()?t.logger?.warn(`[Lease] INSECURE LEASE CHANNEL \u2014 ${P.reason} Signed leases are required here, so the policy itself is still verified \u2014 but the channel is not: anyone on the path can read this instance's identity, pack and version, and can delay a kill switch by up to ${se.MAX_LEASE_ENVELOPE_TTL_SECONDS}s by replaying the last envelope. requireSignedLease is not a substitute for https; serve the lease over https.`):t.logger?.warn(`[Lease] INSECURE LEASE CHANNEL \u2014 ${P.reason} Anyone on the path can lift this instance's kill switch, widen its caps or change its version pin. Continuing to poll (refusing would disable the kill switch entirely), but this deployment is not governable until the lease is signed: set requireSignedLease and have the control plane sign leases.`)}if(e===void 0&&!b&&v(k),e&&k-n<m)return e;try{let P={accept:"application/json, text/plain"};for(let[ne,J]of Object.entries(t.identity?.()??{}))J!==void 0&&J!==""&&(P[`x-agenthippo-${ne}`]=String(J));let T=await y(t.url,{headers:P,signal:AbortSignal.timeout(I$)});if(!T.ok)throw new Error(T.status===404?`lease fetch 404 \u2014 the control plane has no deployment at ${t.url}; check AGENTHIPPO_LEASE_URL`:`lease fetch ${T.status}`);let K=typeof T.text=="function"?await T.text():JSON.stringify(await T.json()),B=N(K,k);if(!B.ok)throw new Error(B.reason);B.signed?(i=!0,B.lease.requireSignedLease&&(l=!0)):p||(p=!0,t.logger?.warn(`[Lease] running on an UNSIGNED lease. Anyone who can answer or intercept ${t.url} can lift this instance's kill switch, widen its caps and change its version pin. Have the control plane sign leases (ES256 compact JWS) and set requireSignedLease.`)),e=B.lease,o=B.signed,a=B.signed&&B.lease.issuedAt!==void 0?B.lease.issuedAt-(I??Math.ceil(Date.now()/1e3)):void 0,n=k,r=k,s=void 0,u=!1,f=!1;try{t.persistence?.save({body:K,lastGoodAt:k})}catch(ne){t.logger?.warn(`[Lease] could not persist lease: ${ne instanceof Error?ne.message:String(ne)}`)}return e}catch(P){if(s=P instanceof Error?P.message:String(P),e===void 0)return f||(f=!0,t.logger?.warn(`[Lease] NO LEASE HAS EVER BEEN INSTALLED \u2014 fetch failed (${s}) and there is no persisted or static lease to fall back on. Failing closed: turns are refused until the control plane is reachable. For air-gapped use, provide --static-lease.`)),O();t.logger?.warn(`[Lease] fetch failed, using cached lease: ${s}`),r===void 0&&(r=k);let T=k-r;return h>0&&T>h?(u||(u=!0,t.logger?.warn(`[Lease] STALENESS CEILING PASSED \u2014 no successful lease refresh for ${T}s (ceiling ${h}s). Failing closed: turns are refused until the control plane is reachable.`)),w(T)):e}}}}});var U_=S(As=>{"use strict";var R$=As&&As.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),C$=As&&As.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),k$=As&&As.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&R$(n,e,r[s]);return C$(n,e),n}})();Object.defineProperty(As,"__esModule",{value:!0});As.startGrantGovernance=M$;var $$=k$(require("os")),M_=mo(),G_=ho(),D$=5*6e4,L$=6*36e5;async function M$(t){let e=Math.max(15,t.pollSeconds??60),n=t.env??process.env,r=await(0,G_.loadLeaseTrustRoot)({env:n,leaseUrl:t.leaseUrl,fetchImpl:t.fetchImpl}),s,i=`connector-${$$.hostname()}`,o=new Map,a=(0,M_.createLeaseSource)({url:t.leaseUrl,fetchImpl:t.fetchImpl,env:n,instanceId:i,cacheSeconds:e-1,signingKeys:()=>r.keys,identity:()=>({instance:i,role:"connector",...s?{grants:JSON.stringify(s)}:{},...t.enrollToken?{"enroll-token":t.enrollToken}:{}}),logger:t.logger}),c=(0,M_.leaseUrlDeployment)(t.leaseUrl),l=async()=>{let f;try{f=await t.provider.listGrants(),s=await t.provider.summary(f)}catch(b){t.logger?.warn(`[grants] could not count grants: ${b instanceof Error?b.message:b}`)}r.status!=="configured"&&(r=await(0,G_.loadLeaseTrustRoot)({env:n,leaseUrl:t.leaseUrl,fetchImpl:t.fetchImpl}));let p=await a.get(),g=p?.grants?.revoke??[],m=new Set(g.map(b=>b.user));for(let b of o.keys())m.has(b)||o.delete(b);if(!g.length)return;if(!a.status().currentSigned){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s) on an UNSIGNED lease \u2014 only a signed lease may revoke a user's grants`);return}if(!c||p?.deployment!==c){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s): the lease does not name deployment ${c??`(none in ${t.leaseUrl})`}`);return}let h=a.status().clockOffsetSeconds;if(h===void 0){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s) until a live lease poll measures the plane's clock`);return}let y=Date.now(),E=g.filter(b=>(o.get(b.user)?.at??0)<=y),w=new Set,O=E.map(b=>({...b,requestedAt:b.requestedAt-h}));await t.provider.applyRevocations(O,f,b=>{let v=b.result.ok?"grant_revoked_by_plane":"grant_revoke_failed";t.audit?.("control",v,{user_sha256:b.user,service:b.service,failed:b.result.failed}),t.logger?.info(`[grants] ${v}: ${b.service} for user sha256:${b.user.slice(0,12)}\u2026`),b.result.ok||w.add(b.user)});for(let b of E)if(w.has(b.user)){let v=Math.min((o.get(b.user)?.delayMs??D$/2)*2,L$);o.set(b.user,{at:y+v,delayMs:v})}else o.delete(b.user)};await l().catch(f=>t.logger?.warn(`[grants] first poll failed: ${f instanceof Error?f.message:f}`));let d,u=setInterval(()=>{d||(d=l().catch(f=>t.logger?.warn(`[grants] poll failed: ${f instanceof Error?f.message:f}`)).finally(()=>{d=void 0}))},e*1e3);return u.unref(),{tick:l,stop:()=>clearInterval(u)}}});var mf=S(El=>{"use strict";Object.defineProperty(El,"__esModule",{value:!0});El.createDataPlaneAuditSink=V_;El.dataPlaneSidecarCommand=x$;var H_=require("fs"),G$=bi(),j_=Pi(),U$=U_(),x_=Or(),F_=no(),H$=Qi(),j$=pi(),B_=Ai(),Js=Xt();async function V_(t,e){let{dir:n,ephemeral:r}=(0,x_.resolveStateDir)(t),s=(0,x_.resolveAnalyticsSessionsDir)(n,r),i=!0,o;try{await H_.promises.mkdir(s,{recursive:!0}),await H_.promises.access(s)}catch(l){i=!1,o=l instanceof Error?l.message:String(l)}let a=new F_.SessionEventWriter(s);return{audit:(l,d,u)=>{let f=typeof u.userId=="string"?u.userId:void 0,p=(0,H$.hashIdentity)(f),g=p?{...u,userId:p}:u,m=p&&l===f?p:l;a.append(m,(0,j$.generateRequestId)(),d,e?{...g,agent:{...e,digest:null}}:g)},auditDir:s,ephemeral:r,ok:i,error:o}}async function x$(t){let e=process.env.AGENTHIPPO_DATA_PLANE_TOKEN?.trim();e||(console.error("Error: AGENTHIPPO_DATA_PLANE_TOKEN is required (shared secret the trusted EDGE \u2014 or, legacy, the agent's serve \u2014 presents to register turns)."),process.exit(1));let n;try{n=await(0,G$.loadAgentPack)(t.agent,t.workspace)}catch(g){console.error(`Error: ${g instanceof Error?g.message:g}`),process.exit(1);return}let r=(0,j_.resolveDataPlaneConfig)(n.manifest.spec,n.packPath);if(!r){console.error("Error: pack declares no spec.dataPlane \u2014 nothing for the sidecar to run."),process.exit(1);return}let s=t.verbose?new B_.ConsoleLogger("[Sidecar]"):new B_.NoOpLogger,{audit:i,auditDir:o,ephemeral:a,ok:c,error:l}=await V_(t.stateDir,{pack:n.manifest.metadata.name,version:n.manifest.metadata.version??"0.0.0"});if(!c){let g=`${o}: ${l}`;if((0,F_.evidenceRequired)()){console.error(`${Js.COLORS.red}Error: data-plane audit directory is not writable${Js.COLORS.reset} \u2014 ${g}`),console.error("AGENTHIPPO_EVIDENCE_REQUIRED is set, so refusing to run an unauditable data plane. Unset it to downgrade this to a warning."),process.exit(1);return}console.warn(`${Js.COLORS.yellow}Warning:${Js.COLORS.reset} data-plane audit directory is not writable \u2014 ${g}`),console.warn("  Tool authorizations and denials will NOT be recorded. Set --state-dir or AGENTHIPPO_HOME to a writable path.")}let d;try{d=await(0,j_.startDataPlaneSidecar)({config:r,registerToken:e,gatewayPort:t.gatewayPort,controlPort:t.controlPort,connectPort:t.connectPort,bindHost:t.host??"0.0.0.0",logger:s,audit:i,agent:{pack:n.manifest.metadata.name,version:n.manifest.metadata.version??"0.0.0"}})}catch(g){console.error(`${Js.COLORS.red}Error: failed to start the data-plane sidecar:${Js.COLORS.reset} ${g instanceof Error?g.message:g}`),process.exit(1);return}console.log(`OK: Data-plane sidecar (provider=${r.provider??"passthrough"}) \u2014 connector: ${r.connectorPath}`),console.log(`  gateway (engine dials, nonce-auth): ${d.gatewayUrl}`),console.log(`  control (edge/serve registers, bearer):  :${d.controlPort}`),d.connectPort!==void 0&&console.log(`  connect (users link accounts, via edge):  :${d.connectPort}`),console.log(`  audit (tool_authorize / tool_deny / register events): ${o}${a?" (EPHEMERAL \u2014 lost on restart; set AGENTHIPPO_HOME or --state-dir)":""}`),console.log("  Base credentials live here only \u2014 never in the agent container."),console.log("  Edge mode (P1): give the register token to the IdP edge only; serve runs with AGENTHIPPO_DATA_PLANE_EDGE=1 and no token.");let u,f=()=>{u?.stop(),d.close().finally(()=>process.exit(0))};process.on("SIGINT",f),process.on("SIGTERM",f);let p=process.env.AGENTHIPPO_LEASE_URL?.trim();u=d.grants&&p?await(0,U$.startGrantGovernance)({provider:d.grants,leaseUrl:p,enrollToken:process.env.AGENTHIPPO_ENROLL_TOKEN?.trim()||void 0,logger:{info:g=>console.log(g),warn:g=>console.warn(`${Js.COLORS.yellow}Warning:${Js.COLORS.reset} ${g}`)},audit:i}):void 0,u&&console.log(`  grants governance: counts reported and revocations applied on the lease poll (${p})`),await new Promise(()=>{})}});var _f=S(Ef=>{"use strict";Object.defineProperty(Ef,"__esModule",{value:!0});Ef.resolveCliTurnScope=W$;var B$=f_(),F$=mf(),W_=Pi(),V$=no(),K_=qa(),Xs=Xt();async function W$(t){let e=t.pack?.manifest.spec,n=t.pack?.packPath,r=!!((0,W_.resolveRemoteDataPlane)()||e&&n&&(0,W_.resolveDataPlaneConfig)(e,n)),s;if(r){let o=t.pack?{pack:t.pack.manifest.metadata.name,version:t.pack.manifest.metadata.version??"0.0.0"}:void 0,a=await(0,F$.createDataPlaneAuditSink)(void 0,o);if(s=a.audit,!a.ok){let c=`${a.auditDir}: ${a.error}`;(0,V$.evidenceRequired)()&&(console.error(`${Xs.COLORS.red}Error: data-plane audit directory is not writable${Xs.COLORS.reset} \u2014 ${c}`),console.error("AGENTHIPPO_EVIDENCE_REQUIRED is set, so refusing to run an unauditable data plane. Unset it to downgrade this to a warning."),process.exit(1)),console.warn(`${Xs.COLORS.yellow}Warning:${Xs.COLORS.reset} data-plane audit directory is not writable \u2014 ${c}`),console.warn("  Tool authorizations and denials will NOT be recorded. Set AGENTHIPPO_HOME to a writable path.")}}let i;try{i=await(0,B$.resolveLocalTurnScope)({spec:e,packPath:n,agent:t.pack?{pack:t.pack.manifest.metadata.name,version:t.pack.manifest.metadata.version}:void 0,logger:t.verbose?new K_.ConsoleLogger("[DataPlane]"):new K_.NoOpLogger,audit:s})}catch(o){console.error(`${Xs.COLORS.red}Error: failed to start the data plane:${Xs.COLORS.reset} ${o instanceof Error?o.message:o}`),process.exit(1)}return i&&!t.quiet&&console.log(`${Xs.COLORS.green}OK:${Xs.COLORS.reset} Data plane ${i.mode==="sidecar"?"SIDECAR":"(in-process)"} \u2014 gateway ${i.gatewayUrl}; acting as ${i.userId} (locally asserted; per-turn registration, session-stable nonce bytes)`),i}});var J_=S(bs=>{"use strict";var K$=bs&&bs.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),q$=bs&&bs.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),wf=bs&&bs.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&K$(n,e,r[s]);return q$(n,e),n}})();Object.defineProperty(bs,"__esModule",{value:!0});bs.chatCommand=eD;var Y$=wf(require("readline")),J$=wf(require("path")),X$=wf(require("os")),Nr=Ai(),Ni=bi(),he=Xt(),z$=Ti(),q_=Ze(),Q$=br(),Y_=Bs(),Z$=_f(),yf="-".repeat(62);async function eD(t){let e=(0,Ni.getApiConfig)(),n,r="default",s,i,o,a=t.verbose?new Nr.ConsoleLogger("[Sync]"):new Nr.NoOpLogger;if(t.agent)try{n=await(0,Ni.loadAgentPack)(t.agent,t.workspace),r=n.manifest.metadata.name,s=t.engine||n.manifest.spec.engine;let A=["claude","codex"].includes(s)?void 0:(0,Y_.tryResolveCustomEngineManifest)(t.workspace,s)?.model?.defaultModel,N=t.model||n.manifest.spec.model||A||(0,Ni.getEnvDefaultModel)()||(0,Ni.getDefaultConfig)().model;i=(0,Nr.resolveModelAlias)(N);let I=n.manifest.spec.cheapModel?.trim();o=I?(0,Nr.resolveModelAlias)(I):void 0,await(0,Nr.syncPackToWorkspace)(t.workspace,n.packPath,r,s,a,(0,he.findBundledBasePromptsDir)()),console.log(`${he.COLORS.green}OK:${he.COLORS.reset} Loaded agent: ${n.manifest.metadata.name} v${n.manifest.metadata.version}`),N!==i&&console.log(`${he.COLORS.dim}   Model: ${N} -> ${i}${he.COLORS.reset}`),I&&I!==o&&console.log(`${he.COLORS.dim}   Cheap model: ${I} -> ${o}${he.COLORS.reset}`)}catch(v){console.error(`${he.COLORS.red}Error: ${v instanceof Error?v.message:v}${he.COLORS.reset}`),process.exit(1)}else{let v=(0,Ni.getDefaultConfig)();s=t.engine||v.engine;let A=["claude","codex"].includes(s)?void 0:(0,Y_.tryResolveCustomEngineManifest)(t.workspace,s)?.model?.defaultModel,N=t.model||A||(0,Ni.getEnvDefaultModel)()||v.model;i=(0,Nr.resolveModelAlias)(N),N!==i&&console.log(`${he.COLORS.dim}Model: ${N} -> ${i}${he.COLORS.reset}`)}if(!e.apiKey&&(s==="claude"||s==="codex")){let v=(0,he.getLiteLLMQuickstartHintLines)();console.log(["To start a chat, set an API key and re-run the command. Example:",`  ${v[1]}`,"","Other options:","  AGENTHIPPO_LITELLM_API_KEY=your_key AGENTHIPPO_LITELLM_BASE_URL=https://... dist/agenthippo chat","  LITELLM_API_KEY=your_key LITELLM_BASE_URL=https://... dist/agenthippo chat","  ANTHROPIC_API_KEY=your_key dist/agenthippo chat","  OPENAI_API_KEY=your_key dist/agenthippo chat"].join(`
+`)}j.PACK_JWKS_URL_ENV="AGENTHIPPO_PACK_JWKS_URL";j.PACK_JWKS_URL_ENV_LEGACY="AGENTHIPPO_PACK_SIGNING_JWKS_URL";j.PACK_JWKS_PINS_ENV="AGENTHIPPO_PACK_JWKS_PINS";j.ALLOW_INSECURE_TRUST_ROOT_ENV="AGENTHIPPO_ALLOW_INSECURE_TRUST_ROOT";j.LEASE_SIGNING_KEYS_ENV="AGENTHIPPO_LEASE_SIGNING_KEYS";j.LEASE_JWKS_URL_ENV="AGENTHIPPO_LEASE_JWKS_URL";j.LEASE_JWKS_PINS_ENV="AGENTHIPPO_LEASE_JWKS_PINS";function A_(t){let e=go.createPublicKey(t),n=e.export({format:"jwk"}),r=n.kty==="EC"?{crv:n.crv,kty:n.kty,x:n.x,y:n.y}:n.kty==="RSA"?{e:n.e,kty:n.kty,n:n.n}:{kty:n.kty};return{jwk:go.createHash("sha256").update(JSON.stringify(r)).digest("base64url"),spki:go.createHash("sha256").update(e.export({type:"spki",format:"der"})).digest("hex")}}var c$=t=>t.trim().replace(/^sha256:/i,"").toLowerCase();function b_(t){return(t??"").split(",").map(c$).filter(e=>e.length>0)}function T_(t,e,n=process.env){let r;try{r=new URL(t)}catch{return{ok:!1,reason:`${e} is not a valid URL: ${t}`}}if(r.protocol==="https:")return{ok:!0,warnings:[]};let s=(n[j.ALLOW_INSECURE_TRUST_ROOT_ENV]??"").trim().toLowerCase();return s==="1"||s==="true"||s==="yes"?{ok:!0,warnings:[`INSECURE: ${e} is ${r.protocol}//${r.host} (not https) and ${j.ALLOW_INSECURE_TRUST_ROOT_ENV} is set. Anyone on the path between this instance and that host can choose which packs it will run and whether the kill switch is honoured. This must never be set outside local development.`]}:{ok:!1,reason:`${e} must be https (got ${r.protocol}//${r.host}). Set ${j.ALLOW_INSECURE_TRUST_ROOT_ENV}=1 to allow plaintext for LOCAL DEVELOPMENT ONLY.`}}var l$={label:"pack",purpose:"pack-signing",inlineEnv:"AGENTHIPPO_PACK_SIGNING_KEYS",urlEnvs:[j.PACK_JWKS_URL_ENV,j.PACK_JWKS_URL_ENV_LEGACY],pinsEnv:j.PACK_JWKS_PINS_ENV,derivedRisk:"chooses which packs this instance will run"},u$={label:"lease",purpose:"lease-signing",inlineEnv:j.LEASE_SIGNING_KEYS_ENV,urlEnvs:[j.LEASE_JWKS_URL_ENV],pinsEnv:j.LEASE_JWKS_PINS_ENV,derivedRisk:"chooses whether this instance's kill switch is ever honoured"};async function v_(t,e){let n=e.env??process.env,r=[],s=b_(n[t.pinsEnv]),i=n[t.inlineEnv]?.trim(),o=t.urlEnvs.map(f=>n[f]).find(f=>f!==void 0&&f.trim()!=="")?.trim(),a=!!i||!!o,c=(f,p,g)=>{if(s.length===0)return Object.keys(f).length===0?{status:"unavailable",keys:{},source:p,url:g,warnings:r,explicitlyConfigured:a,reason:"the trust root published no usable ES256 keys"}:{status:"configured",keys:f,source:p,url:g,warnings:r,explicitlyConfigured:a};let m={};for(let[h,y]of Object.entries(f)){let E;try{E=A_(y)}catch{r.push(`${t.label} trust root: key ${h} is unreadable and was dropped`);continue}s.some(O=>(0,aa.timingSafeEqualString)(O,E.jwk.toLowerCase())||(0,aa.timingSafeEqualString)(O,E.spki))?m[h]=y:r.push(`${t.label} trust root: key ${h} does not match any pin in ${t.pinsEnv} and was REFUSED (its thumbprints are jwk=${E.jwk} spki=${E.spki})`)}return Object.keys(m).length===0?{status:"unavailable",keys:{},source:p,url:g,warnings:r,explicitlyConfigured:a,reason:`every key offered by the trust root failed the ${t.pinsEnv} pin check`}:{status:"configured",keys:m,source:p,url:g,warnings:r,explicitlyConfigured:a}};if(i){let f;try{f=JSON.parse(i)}catch(p){return{status:"unavailable",keys:{},source:"inline",warnings:r,explicitlyConfigured:a,reason:`${t.inlineEnv} is set but is not valid JSON: ${p instanceof Error?p.message:String(p)}`}}return c(f,"inline")}let l=o,d=!1;if(!l&&e.leaseUrl){try{l=new URL(`/.well-known/jwks.json?purpose=${t.purpose}`,e.leaseUrl).toString()}catch{return{status:"unavailable",keys:{},warnings:r,explicitlyConfigured:a,reason:`AGENTHIPPO_LEASE_URL is not a valid URL: ${e.leaseUrl}`}}d=!0}if(!l)return{status:"unconfigured",keys:{},warnings:r,explicitlyConfigured:a};let u=T_(l,`the ${t.purpose} JWKS URL`,n);if(!u.ok)return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:u.reason,derivedFromLease:d,explicitlyConfigured:a};r.push(...u.warnings),d&&s.length===0&&r.push(`${t.label} trust root is derived from AGENTHIPPO_LEASE_URL (${l}) and is not pinned. Whoever can answer that origin ${t.derivedRisk}. Pin it with ${t.urlEnvs[0]} and ${t.pinsEnv}.`);try{let f=await(e.fetchImpl??fetch)(l);if(!f.ok)return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:`JWKS fetch returned HTTP ${f.status}`,derivedFromLease:d,explicitlyConfigured:a};let p=await f.json(),g=g$(p);return g.ok?{...c(g.pems,"jwks",l),derivedFromLease:d}:{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,reason:g.reason,derivedFromLease:d,explicitlyConfigured:a}}catch(f){return{status:"unavailable",keys:{},source:"jwks",url:l,warnings:r,derivedFromLease:d,explicitlyConfigured:a,reason:`JWKS fetch failed: ${f instanceof Error?f.message:String(f)}`}}}async function O_(t){return v_(l$,t)}async function d$(t){return v_(u$,t)}function f$(t,e){return t.explicitlyConfigured?{keys:t.keys,packFallback:!1}:{keys:{...e.keys,...t.keys},packFallback:!0}}function p$(t,e){let n=[];if(!t.explicitlyConfigured)return{warnings:n};if(t.url){let s=null;try{s=new URL(t.url).searchParams.get("purpose")}catch{}if(s!==null&&s!=="lease-signing")return{warnings:n,fatal:`${j.LEASE_JWKS_URL_ENV} points at a '${s}' document (${t.url}). A plane that separates keys by purpose never serves a lease-signing key there, so signed-lease verification breaks at the next lease-key rotation \u2014 and requireSignedLease is sticky with no plane-side undo. Point it at ?purpose=lease-signing (with its own ${j.LEASE_JWKS_PINS_ENV}) instead.`};s===null&&e.url===t.url&&n.push(`the lease trust root and the pack trust root are the SAME document (${t.url}). An older plane that returns every key it holds supports this; a plane that separates keys by purpose does not, and the break lands at the next lease-key rotation, after requireSignedLease has latched. Give the lease root its own URL: ?purpose=lease-signing.`)}let r=Object.keys(t.keys).filter(s=>e.keys[s]!==void 0&&e.keys[s].trim()===t.keys[s].trim());return r.length>0&&n.push(`kid(s) ${r.map(s=>`'${s}'`).join(", ")} carry the same public key in BOTH the lease and the pack trust root \u2014 one key under two purposes. The control plane refuses to register such a key, so whichever purpose rotates first strands the other; give each purpose its own keypair.`),{warnings:n}}function g$(t){if(t.pemsByKid&&typeof t.pemsByKid=="object")return{ok:!0,pems:t.pemsByKid};if(!Array.isArray(t.keys))return{ok:!1,reason:"JWKS document has neither `pemsByKid` nor a `keys` array"};let e={};for(let n of t.keys)if(!(!n||typeof n!="object")&&!(n.kty!=="EC"||n.crv!=="P-256")&&!(n.alg!==void 0&&n.alg!=="ES256")&&!(typeof n.kid!="string"||!n.kid))try{e[n.kid]=go.createPublicKey({key:n,format:"jwk"}).export({type:"spki",format:"pem"}).toString()}catch{}return Object.keys(e).length===0?{ok:!1,reason:"JWKS document published no usable ES256 (P-256) keys"}:{ok:!0,pems:e}}async function h$(t){return(await O_(t)).keys}j.PACK_PROBE_INTERVAL_MS=1e3;j.PACK_FULL_REVERIFY_INTERVAL_MS=3e4;function m$(t={}){let e=t.probeIntervalMs??j.PACK_PROBE_INTERVAL_MS,n=t.fullReverifyIntervalMs??j.PACK_FULL_REVERIFY_INTERVAL_MS,r,s="",i="",o=0,a=0,c=0,l=u=>`${u.packDir}\0${u.pack}\0${u.packVersion}\0${Object.keys(u.keys).sort().join(",")}`,d=(u,f)=>{c+=1,s=l(u),i=df(u.packDir),o=f,a=f;let p=__(u.packDir);return r=p?y_(p,u.keys,{packDir:u.packDir,pack:u.pack,packVersion:u.packVersion}):{ok:!1,kind:"unsigned",reason:`${u.pack} is not signed (no ${j.PACK_SIGNATURE_FILE} at the pack root)`},r};return{fullVerifications:()=>c,refresh(u,f=Date.now()){return d(u,f)},verify(u,f=Date.now()){return!r||s!==l(u)||f-a>=n?d(u,f):f-o<e||(o=f,df(u.packDir)===i)?r:d(u,f)}}}});var mo=S(se=>{"use strict";Object.defineProperty(se,"__esModule",{value:!0});se.MAX_LEASE_ENVELOPE_TTL_SECONDS=se.LEASE_JWS_TYP=se.LeaseDeniedError=se.LEASE_MAX_STALENESS_ENV=se.DEFAULT_LEASE_MAX_STALENESS_SECONDS=se.MIN_LEASE_POLL_SECONDS=se.DEFAULT_LEASE_POLL_SECONDS=void 0;se.resolveLeasePollSeconds=gf;se.leaseCacheSecondsFor=hf;se.effectiveKillLatencySeconds=y$;se.leaseMaxStalenessFromEnv=R_;se.resolveAllowServiceTurns=w$;se.describeServiceTurnGate=S$;se.denyVerdict=C_;se.resolveFollowedUsers=b$;se.leaseIsDead=T$;se.policyVersion=v$;se.assertAdmitted=O$;se.signLease=P$;se.verifySignedLease=$_;se.requireSignedLease=D_;se.leaseUrlDeployment=L_;se.createLeaseSource=N$;var E$=require("crypto"),I_=Ii(),N_=oa(),_$=ho();se.DEFAULT_LEASE_POLL_SECONDS=30;se.MIN_LEASE_POLL_SECONDS=5;function gf(t){let e=typeof t=="number"&&Number.isFinite(t)?t:se.DEFAULT_LEASE_POLL_SECONDS;return Math.max(se.MIN_LEASE_POLL_SECONDS,Math.floor(e))}function hf(t){return gf(t)}function y$(t){let e=gf(t);return e+hf(e)}se.DEFAULT_LEASE_MAX_STALENESS_SECONDS=1440*60;se.LEASE_MAX_STALENESS_ENV="AGENTHIPPO_LEASE_MAX_STALENESS_SECONDS";function R_(t=process.env){let e=t[se.LEASE_MAX_STALENESS_ENV]?.trim();if(e===void 0||e==="")return se.DEFAULT_LEASE_MAX_STALENESS_SECONDS;let n=Number(e);return!Number.isFinite(n)||n<0?se.DEFAULT_LEASE_MAX_STALENESS_SECONDS:Math.floor(n)}function w$(t){return t.managed?t.lease===!0?{allowed:!0,gate:"lease_allows"}:{allowed:!1,gate:t.lease===!1?"lease_denies":"lease_absent_field"}:{allowed:!0,gate:"unmanaged_no_lease"}}function S$(t){switch(t){case"lease_allows":return"permitted by the control plane (lease.allowServiceTurns)";case"unmanaged_no_lease":return"permitted: no control plane configured, so AGENTHIPPO_SERVICE_USER is the only gate";case"lease_denies":return"refused: the control plane set lease.allowServiceTurns=false";case"lease_absent_field":return"refused: this is a managed deployment and the lease does not set allowServiceTurns (absent means deny \u2014 enable it in the console)"}}function C_(t,e,n){if(!t?.deny?.length)return{denied:!1};let r=n??Math.floor(Date.now()/1e3),s=e.sessionKey.indexOf("--"),i=s>=0?e.sessionKey.slice(s+2):e.sessionKey,o={denied:!1};for(let a of t.deny){if(a.until!==void 0&&a.until<=r)continue;let c=!1;if(a.scope==="pack"?c=a.match===e.pack:a.scope==="session"?(c=a.match===e.sessionKey||a.match===i,c&&a.user!==void 0&&e.userId!==void 0&&a.user!==e.userId&&(c=!1),!c&&a.followUser!==!1&&e.userId!==void 0&&A$(a,e.userId,e.followedUsers)&&(c=!0)):a.scope==="user"&&(c=e.userId!==void 0&&a.match===e.userId||e.userHash!==void 0&&e.sessionKey.startsWith(`u${e.userHash(a.match)}--`)),!c)continue;let l=`${a.mode==="kill"?"stopped":"draining"} by the control plane${a.reason?`: ${a.reason}`:""}`;if(a.mode==="kill")return{denied:!0,mode:"kill",reason:l};o.denied||(o={denied:!0,mode:"drain",reason:l})}return o}var k_=t=>`${t.scope}:${t.match}`;function A$(t,e,n){return n?.get(k_(t))?.has(e)??!1}function b$(t,e,n){let r=new Map;if(!t?.deny?.length)return r;let s=n??Math.floor(Date.now()/1e3);for(let i of t.deny){if(i.scope!=="session"||i.followUser===!1||i.until!==void 0&&i.until<=s)continue;let o=new Set;for(let[a,c]of e){let l=a.indexOf("--"),d=l>=0?a.slice(l+2):a;i.match!==a&&i.match!==d||i.user!==void 0&&i.user!==c||o.add(c)}o.size>0&&r.set(k_(i),o)}return r}function T$(t,e){if(!t)return{dead:!1};let n=e??Math.floor(Date.now()/1e3);return t.enabled?t.expiresAt<=n?{dead:!0,reason:`lease expired at ${new Date(t.expiresAt*1e3).toISOString()}`}:{dead:!1}:{dead:!0,reason:`kill switch active${t.reason?`: ${t.reason}`:""}`}}function v$(t){if(!t)return;let{expiresAt:e,issuedAt:n,...r}=t,s=i=>Array.isArray(i)?i.map(s):i&&typeof i=="object"?Object.fromEntries(Object.keys(i).sort().map(o=>[o,s(i[o])])):i;return(0,E$.createHash)("sha256").update(JSON.stringify(s(r))).digest("hex")}var Ss=class extends Error{constructor(e){super(e),this.name="LeaseDeniedError"}};se.LeaseDeniedError=Ss;function O$(t,e){if(!t)return;let n=e.nowSeconds??Math.floor(Date.now()/1e3);if(!t.enabled)throw new Ss(`kill switch active for pack ${e.pack}${t.reason?`: ${t.reason}`:""}`);if(t.pack!==e.pack)throw new Ss(`lease is for pack ${t.pack}, not ${e.pack}`);if(t.expiresAt<=n)throw new Ss(`lease for ${e.pack} expired at ${new Date(t.expiresAt*1e3).toISOString()}`);if(t.version&&t.version!==e.version)throw new Ss(`pack ${e.pack} is pinned to ${t.version}; refusing to start ${e.version} (rollback in force)`);if(t.imageDigest&&e.image&&!e.image.includes(t.imageDigest))throw new Ss(`image for ${e.pack} does not match the leased digest ${t.imageDigest}`);if(e.sessionKey){let r=C_(t,{sessionKey:e.sessionKey,pack:e.pack,userHash:e.userHash,userId:e.userId,followedUsers:e.followedUsers},n);if(r.denied)throw new Ss(r.reason??"stopped by the control plane")}}se.LEASE_JWS_TYP="agenthippo-lease+jws";se.MAX_LEASE_ENVELOPE_TTL_SECONDS=3600;function P$(t,e,n){let r=n.nowSeconds??Math.floor(Date.now()/1e3),s=Math.min(n.ttlSeconds??300,se.MAX_LEASE_ENVELOPE_TTL_SECONDS),i={lease:t,aud:n.instanceId??"*",sub:t.pack,iat:r,exp:r+s,...n.iss?{iss:n.iss}:{}};return(0,I_.signCompactJws)({typ:se.LEASE_JWS_TYP,kid:e.kid},i,e.privateKeyPem)}function $_(t,e,n={}){if(Object.keys(e).length===0)return{ok:!1,reason:"no trusted lease-signing keys are configured on this instance"};let r=(0,I_.verifyCompactJws)(t,e,{typ:se.LEASE_JWS_TYP});if(!r.ok)return{ok:!1,reason:`lease signature: ${r.reason}`};let s=r.payload,i=n.nowSeconds??Math.floor(Date.now()/1e3),o=n.clockSkewSeconds??60;if(typeof s.iat!="number"||!Number.isFinite(s.iat))return{ok:!1,reason:"lease envelope has no issued-at"};if(typeof s.exp!="number"||!Number.isFinite(s.exp))return{ok:!1,reason:"lease envelope has no expiry"};if(s.exp-s.iat>se.MAX_LEASE_ENVELOPE_TTL_SECONDS)return{ok:!1,reason:`lease envelope lifetime ${s.exp-s.iat}s exceeds the ${se.MAX_LEASE_ENVELOPE_TTL_SECONDS}s cap`};if(s.exp+o<=i)return{ok:!1,reason:`lease envelope expired at ${new Date(s.exp*1e3).toISOString()}`};if(s.iat-o>i)return{ok:!1,reason:"lease envelope is issued in the future"};if(n.minIat!==void 0&&s.iat<n.minIat)return{ok:!1,reason:`lease envelope is older than one already accepted (replay/rollback: iat ${s.iat} < ${n.minIat})`};if(n.instanceId!==void 0&&s.aud!=="*"&&s.aud!==n.instanceId)return{ok:!1,reason:`lease envelope is for instance ${s.aud}, not ${n.instanceId}`};let a=(0,N_.parseLease)(s.lease);return a.ok?s.sub!==a.lease.pack?{ok:!1,reason:`lease envelope subject ${s.sub} does not match lease.pack ${a.lease.pack}`}:{ok:!0,lease:a.lease,claims:s}:{ok:!1,reason:`signed lease is malformed: ${a.reason}`}}function D_(t,e){return!!t||!!e}var P_=t=>/^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(t),I$=2e4;function L_(t){if(t)try{let e=/\/lease\/([^/]+)\.json$/.exec(new URL(t).pathname);return e?decodeURIComponent(e[1]):void 0}catch{return}}function N$(t){let e=t.staticLease,n=0,r,s,i=!1,o=!1,a,c=L_(t.url),l=!1,d,u=!1,f=!1,p=!1,g=!1,m=t.cacheSeconds??hf(se.DEFAULT_LEASE_POLL_SECONDS),h=t.maxStalenessSeconds??R_(t.env),y=t.fetchImpl??fetch,E=()=>D_(l,t.requireSignedLease),w=I=>({...e??{pack:"",expiresAt:0},enabled:!1,reason:`the control plane has not been reachable for ${I}s, past the ${h}s staleness ceiling (${se.LEASE_MAX_STALENESS_ENV}). Refusing work rather than running on a lease that can no longer be revoked. Set ${se.LEASE_MAX_STALENESS_ENV}=0 to accept unbounded staleness.`}),O=()=>({pack:"",expiresAt:0,enabled:!1,reason:`this instance is managed (${t.url}) but has never successfully fetched its lease`+(s?` (${s})`:"")+". Refusing work until the control plane is reachable rather than booting ungoverned. For an air-gapped deployment, provide the lease with --static-lease."}),b=!1,v=I=>{if(b=!0,!t.persistence)return;let k;try{k=t.persistence.load()}catch(T){t.logger?.warn(`[Lease] persisted lease unreadable: ${T instanceof Error?T.message:String(T)}`);return}if(!k||typeof k.body!="string")return;typeof k.lastGoodAt=="number"&&Number.isFinite(k.lastGoodAt)&&(r=Math.min(k.lastGoodAt,I));let P=N(k.body,I);if(!P.ok){t.logger?.warn(`[Lease] persisted lease not reinstalled: ${P.reason}`);return}P.signed&&(i=!0,P.lease.requireSignedLease&&(l=!0)),e=P.lease,o=P.signed,a=void 0},A=I=>I.deployment!==void 0&&c!==void 0&&I.deployment!==c?`lease is for deployment ${I.deployment}, not ${c} (${t.url})`:void 0,N=(I,k)=>{let P=I.trim(),T,K;if(P_(P))T=P;else{try{K=JSON.parse(P)}catch(J){return{ok:!1,reason:`lease body is not JSON: ${J instanceof Error?J.message:String(J)}`}}typeof K=="string"&&P_(K.trim())?T=K.trim():K&&typeof K=="object"&&typeof K.lease=="string"&&(T=K.lease.trim())}if(T){let J=$_(T,t.signingKeys?.()??{},{instanceId:t.instanceId,minIat:d,nowSeconds:k});if(!J.ok)return{ok:!1,reason:J.reason};let oe=A(J.lease);return oe?{ok:!1,reason:oe}:(d=J.claims.iat,{ok:!0,lease:J.lease,signed:!0})}if(E())return{ok:!1,reason:'a signed lease is required but the control plane returned an unsigned one (expected a compact JWS body or {"lease":"<jws>"})'};let B=(0,N_.parseLease)(K);if(!B.ok)return{ok:!1,reason:B.reason};for(let J of B.warnings)t.logger?.warn(`[Lease] ${J}`);let ne=A(B.lease);return ne?{ok:!1,reason:ne}:{ok:!0,lease:B.lease,signed:!1}};return{status(I){let k=I??Math.floor(Date.now()/1e3),P=r===void 0?void 0:k-r,T=!!t.url&&e===void 0&&s!==void 0;return{signed:i,currentSigned:o,clockOffsetSeconds:a,requireSignedLease:E(),lastGoodAt:r,stalenessSeconds:P,maxStalenessSeconds:h,failClosed:T||h>0&&P!==void 0&&P>h,lastError:s}},async get(I){let k=I??Math.floor(Date.now()/1e3);if(!t.url)return e;if(!g){g=!0;let P=(0,_$.assertSecureTrustUrl)(t.url,"AGENTHIPPO_LEASE_URL",t.env??process.env);if(P.ok)for(let T of P.warnings)t.logger?.warn(`[Lease] ${T}`);else E()?t.logger?.warn(`[Lease] INSECURE LEASE CHANNEL \u2014 ${P.reason} Signed leases are required here, so the policy itself is still verified \u2014 but the channel is not: anyone on the path can read this instance's identity, pack and version, and can delay a kill switch by up to ${se.MAX_LEASE_ENVELOPE_TTL_SECONDS}s by replaying the last envelope. requireSignedLease is not a substitute for https; serve the lease over https.`):t.logger?.warn(`[Lease] INSECURE LEASE CHANNEL \u2014 ${P.reason} Anyone on the path can lift this instance's kill switch, widen its caps or change its version pin. Continuing to poll (refusing would disable the kill switch entirely), but this deployment is not governable until the lease is signed: set requireSignedLease and have the control plane sign leases.`)}if(e===void 0&&!b&&v(k),e&&k-n<m)return e;try{let P={accept:"application/json, text/plain"};for(let[ne,J]of Object.entries(t.identity?.()??{}))J!==void 0&&J!==""&&(P[`x-agenthippo-${ne}`]=String(J));let T=await y(t.url,{headers:P,signal:AbortSignal.timeout(I$)});if(!T.ok)throw new Error(T.status===404?`lease fetch 404 \u2014 the control plane has no deployment at ${t.url}; check AGENTHIPPO_LEASE_URL`:`lease fetch ${T.status}`);let K=typeof T.text=="function"?await T.text():JSON.stringify(await T.json()),B=N(K,k);if(!B.ok)throw new Error(B.reason);B.signed?(i=!0,B.lease.requireSignedLease&&(l=!0)):p||(p=!0,t.logger?.warn(`[Lease] running on an UNSIGNED lease. Anyone who can answer or intercept ${t.url} can lift this instance's kill switch, widen its caps and change its version pin. Have the control plane sign leases (ES256 compact JWS) and set requireSignedLease.`)),e=B.lease,o=B.signed,a=B.signed&&B.lease.issuedAt!==void 0?B.lease.issuedAt-(I??Math.ceil(Date.now()/1e3)):void 0,n=k,r=k,s=void 0,u=!1,f=!1;try{t.persistence?.save({body:K,lastGoodAt:k})}catch(ne){t.logger?.warn(`[Lease] could not persist lease: ${ne instanceof Error?ne.message:String(ne)}`)}return e}catch(P){if(s=P instanceof Error?P.message:String(P),e===void 0)return f||(f=!0,t.logger?.warn(`[Lease] NO LEASE HAS EVER BEEN INSTALLED \u2014 fetch failed (${s}) and there is no persisted or static lease to fall back on. Failing closed: turns are refused until the control plane is reachable. For air-gapped use, provide --static-lease.`)),O();t.logger?.warn(`[Lease] fetch failed, using cached lease: ${s}`),r===void 0&&(r=k);let T=k-r;return h>0&&T>h?(u||(u=!0,t.logger?.warn(`[Lease] STALENESS CEILING PASSED \u2014 no successful lease refresh for ${T}s (ceiling ${h}s). Failing closed: turns are refused until the control plane is reachable.`)),w(T)):e}}}}});var U_=S(As=>{"use strict";var R$=As&&As.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),C$=As&&As.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),k$=As&&As.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&R$(n,e,r[s]);return C$(n,e),n}})();Object.defineProperty(As,"__esModule",{value:!0});As.startGrantGovernance=M$;var $$=k$(require("os")),M_=mo(),G_=ho(),D$=5*6e4,L$=6*36e5;async function M$(t){let e=Math.max(15,t.pollSeconds??60),n=t.env??process.env,r=await(0,G_.loadLeaseTrustRoot)({env:n,leaseUrl:t.leaseUrl,fetchImpl:t.fetchImpl}),s,i=`connector-${$$.hostname()}`,o=new Map,a=(0,M_.createLeaseSource)({url:t.leaseUrl,fetchImpl:t.fetchImpl,env:n,instanceId:i,cacheSeconds:e-1,signingKeys:()=>r.keys,identity:()=>({instance:i,role:"connector",...s?{grants:JSON.stringify(s)}:{},...t.enrollToken?{"enroll-token":t.enrollToken}:{}}),logger:t.logger}),c=(0,M_.leaseUrlDeployment)(t.leaseUrl),l=async()=>{let f;try{f=await t.provider.listGrants(),s=await t.provider.summary(f)}catch(b){t.logger?.warn(`[grants] could not count grants: ${b instanceof Error?b.message:b}`)}r.status!=="configured"&&(r=await(0,G_.loadLeaseTrustRoot)({env:n,leaseUrl:t.leaseUrl,fetchImpl:t.fetchImpl}));let p=await a.get(),g=p?.grants?.revoke??[],m=new Set(g.map(b=>b.user));for(let b of o.keys())m.has(b)||o.delete(b);if(!g.length)return;if(!a.status().currentSigned){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s) on an UNSIGNED lease \u2014 only a signed lease may revoke a user's grants`);return}if(!c||p?.deployment!==c){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s): the lease does not name deployment ${c??`(none in ${t.leaseUrl})`}`);return}let h=a.status().clockOffsetSeconds;if(h===void 0){t.logger?.warn(`[grants] ignoring ${g.length} revocation(s) until a live lease poll measures the plane's clock`);return}let y=Date.now(),E=g.filter(b=>(o.get(b.user)?.at??0)<=y),w=new Set,O=E.map(b=>({...b,requestedAt:b.requestedAt-h}));await t.provider.applyRevocations(O,f,b=>{let v=b.result.ok?"grant_revoked_by_plane":"grant_revoke_failed";t.audit?.("control",v,{user_sha256:b.user,service:b.service,failed:b.result.failed}),t.logger?.info(`[grants] ${v}: ${b.service} for user sha256:${b.user.slice(0,12)}\u2026`),b.result.ok||w.add(b.user)});for(let b of E)if(w.has(b.user)){let v=Math.min((o.get(b.user)?.delayMs??D$/2)*2,L$);o.set(b.user,{at:y+v,delayMs:v})}else o.delete(b.user)};await l().catch(f=>t.logger?.warn(`[grants] first poll failed: ${f instanceof Error?f.message:f}`));let d,u=setInterval(()=>{d||(d=l().catch(f=>t.logger?.warn(`[grants] poll failed: ${f instanceof Error?f.message:f}`)).finally(()=>{d=void 0}))},e*1e3);return u.unref(),{tick:l,stop:()=>clearInterval(u)}}});var mf=S(El=>{"use strict";Object.defineProperty(El,"__esModule",{value:!0});El.createDataPlaneAuditSink=V_;El.dataPlaneSidecarCommand=x$;var H_=require("fs"),G$=bi(),j_=Pi(),U$=U_(),x_=Or(),F_=no(),H$=Qi(),j$=pi(),B_=Ai(),Js=Xt();async function V_(t,e){let{dir:n,ephemeral:r}=(0,x_.resolveStateDir)(t),s=(0,x_.resolveAnalyticsSessionsDir)(n,r),i=!0,o;try{await H_.promises.mkdir(s,{recursive:!0}),await H_.promises.access(s)}catch(l){i=!1,o=l instanceof Error?l.message:String(l)}let a=new F_.SessionEventWriter(s);return{audit:(l,d,u)=>{let f=typeof u.userId=="string"?u.userId:void 0,p=(0,H$.hashIdentity)(f),g=p?{...u,userId:p}:u,m=p&&l===f?p:l;a.append(m,(0,j$.generateRequestId)(),d,e?{...g,agent:{...e,digest:null}}:g)},auditDir:s,ephemeral:r,ok:i,error:o}}async function x$(t){let e=process.env.AGENTHIPPO_DATA_PLANE_TOKEN?.trim();e||(console.error("Error: AGENTHIPPO_DATA_PLANE_TOKEN is required (shared secret the trusted EDGE \u2014 or, legacy, the agent's serve \u2014 presents to register turns)."),process.exit(1));let n;try{n=await(0,G$.loadAgentPack)(t.agent,t.workspace)}catch(g){console.error(`Error: ${g instanceof Error?g.message:g}`),process.exit(1);return}let r=(0,j_.resolveDataPlaneConfig)(n.manifest.spec,n.packPath);if(!r){console.error("Error: pack declares no spec.dataPlane \u2014 nothing for the sidecar to run."),process.exit(1);return}let s=t.verbose?new B_.ConsoleLogger("[Sidecar]"):new B_.NoOpLogger,{audit:i,auditDir:o,ephemeral:a,ok:c,error:l}=await V_(t.stateDir,{pack:n.manifest.metadata.name,version:n.manifest.metadata.version??"0.0.0"});if(!c){let g=`${o}: ${l}`;if((0,F_.evidenceRequired)()){console.error(`${Js.COLORS.red}Error: data-plane audit directory is not writable${Js.COLORS.reset} \u2014 ${g}`),console.error("AGENTHIPPO_EVIDENCE_REQUIRED is set, so refusing to run an unauditable data plane. Unset it to downgrade this to a warning."),process.exit(1);return}console.warn(`${Js.COLORS.yellow}Warning:${Js.COLORS.reset} data-plane audit directory is not writable \u2014 ${g}`),console.warn("  Tool authorizations and denials will NOT be recorded. Set --state-dir or AGENTHIPPO_HOME to a writable path.")}let d;try{d=await(0,j_.startDataPlaneSidecar)({config:r,registerToken:e,gatewayPort:t.gatewayPort,controlPort:t.controlPort,connectPort:t.connectPort,bindHost:t.host??"0.0.0.0",logger:s,audit:i,agent:{pack:n.manifest.metadata.name,version:n.manifest.metadata.version??"0.0.0"}})}catch(g){console.error(`${Js.COLORS.red}Error: failed to start the data-plane sidecar:${Js.COLORS.reset} ${g instanceof Error?g.message:g}`),process.exit(1);return}console.log(`OK: Data-plane sidecar (provider=${r.provider??"passthrough"}) \u2014 connector: ${r.connectorPath}`),console.log(`  gateway (engine dials, nonce-auth): ${d.gatewayUrl}`),console.log(`  control (edge/serve registers, bearer):  :${d.controlPort}`),d.connectPort!==void 0&&console.log(`  connect (users link accounts, via edge):  :${d.connectPort}`),console.log(`  audit (tool_authorize / tool_deny / register events): ${o}${a?" (EPHEMERAL \u2014 lost on restart; set AGENTHIPPO_HOME or --state-dir)":""}`),console.log("  Base credentials live here only \u2014 never in the agent container."),console.log("  Edge mode (P1): give the register token to the IdP edge only; serve runs with AGENTHIPPO_DATA_PLANE_EDGE=1 and no token.");let u,f=()=>{u?.stop(),d.close().finally(()=>process.exit(0))};process.on("SIGINT",f),process.on("SIGTERM",f);let p=process.env.AGENTHIPPO_LEASE_URL?.trim();u=d.grants&&p?await(0,U$.startGrantGovernance)({provider:d.grants,leaseUrl:p,enrollToken:process.env.AGENTHIPPO_ENROLL_TOKEN?.trim()||void 0,logger:{info:g=>console.log(g),warn:g=>console.warn(`${Js.COLORS.yellow}Warning:${Js.COLORS.reset} ${g}`)},audit:i}):void 0,u&&console.log(`  grants governance: counts reported and revocations applied on the lease poll (${p})`),await new Promise(()=>{})}});var _f=S(Ef=>{"use strict";Object.defineProperty(Ef,"__esModule",{value:!0});Ef.resolveCliTurnScope=W$;var B$=f_(),F$=mf(),W_=Pi(),V$=no(),K_=qa(),Xs=Xt();async function W$(t){let e=t.pack?.manifest.spec,n=t.pack?.packPath,r=!!((0,W_.resolveRemoteDataPlane)()||e&&n&&(0,W_.resolveDataPlaneConfig)(e,n)),s;if(r){let o=t.pack?{pack:t.pack.manifest.metadata.name,version:t.pack.manifest.metadata.version??"0.0.0"}:void 0,a=await(0,F$.createDataPlaneAuditSink)(void 0,o);if(s=a.audit,!a.ok){let c=`${a.auditDir}: ${a.error}`;(0,V$.evidenceRequired)()&&(console.error(`${Xs.COLORS.red}Error: data-plane audit directory is not writable${Xs.COLORS.reset} \u2014 ${c}`),console.error("AGENTHIPPO_EVIDENCE_REQUIRED is set, so refusing to run an unauditable data plane. Unset it to downgrade this to a warning."),process.exit(1)),console.warn(`${Xs.COLORS.yellow}Warning:${Xs.COLORS.reset} data-plane audit directory is not writable \u2014 ${c}`),console.warn("  Tool authorizations and denials will NOT be recorded. Set AGENTHIPPO_HOME to a writable path.")}}let i;try{i=await(0,B$.resolveLocalTurnScope)({spec:e,packPath:n,agent:t.pack?{pack:t.pack.manifest.metadata.name,version:t.pack.manifest.metadata.version}:void 0,logger:t.verbose?new K_.ConsoleLogger("[DataPlane]"):new K_.NoOpLogger,audit:s})}catch(o){console.error(`${Xs.COLORS.red}Error: failed to start the data plane:${Xs.COLORS.reset} ${o instanceof Error?o.message:o}`),process.exit(1)}return i&&!t.quiet&&console.log(`${Xs.COLORS.green}OK:${Xs.COLORS.reset} Data plane ${i.mode==="sidecar"?"SIDECAR":"(in-process)"} \u2014 gateway ${i.gatewayUrl}; acting as ${i.userId} (locally asserted; per-turn registration, session-stable nonce bytes)`),i}});var J_=S(bs=>{"use strict";var K$=bs&&bs.__createBinding||(Object.create?(function(t,e,n,r){r===void 0&&(r=n);var s=Object.getOwnPropertyDescriptor(e,n);(!s||("get"in s?!e.__esModule:s.writable||s.configurable))&&(s={enumerable:!0,get:function(){return e[n]}}),Object.defineProperty(t,r,s)}):(function(t,e,n,r){r===void 0&&(r=n),t[r]=e[n]})),q$=bs&&bs.__setModuleDefault||(Object.create?(function(t,e){Object.defineProperty(t,"default",{enumerable:!0,value:e})}):function(t,e){t.default=e}),wf=bs&&bs.__importStar||(function(){var t=function(e){return t=Object.getOwnPropertyNames||function(n){var r=[];for(var s in n)Object.prototype.hasOwnProperty.call(n,s)&&(r[r.length]=s);return r},t(e)};return function(e){if(e&&e.__esModule)return e;var n={};if(e!=null)for(var r=t(e),s=0;s<r.length;s++)r[s]!=="default"&&K$(n,e,r[s]);return q$(n,e),n}})();Object.defineProperty(bs,"__esModule",{value:!0});bs.chatCommand=eD;var Y$=wf(require("readline")),J$=wf(require("path")),X$=wf(require("os")),Nr=Ai(),Ni=bi(),he=Xt(),z$=Ti(),q_=Ze(),Q$=br(),Y_=Bs(),Z$=_f(),yf="-".repeat(62);async function eD(t){let e=(0,Ni.getApiConfig)(),n,r="default",s,i,o,a=t.verbose?new Nr.ConsoleLogger("[Sync]"):new Nr.NoOpLogger;if(t.agent)try{n=await(0,Ni.loadAgentPack)(t.agent,t.workspace),r=n.manifest.metadata.name,s=t.engine||n.manifest.spec.engine;let A=["claude","codex"].includes(s)?void 0:(0,Y_.tryResolveCustomEngineManifest)(t.workspace,s)?.model?.defaultModel,N=t.model||n.manifest.spec.model||A||(0,Ni.getEnvDefaultModel)()||(0,Ni.getDefaultConfig)().model;i=(0,Nr.resolveModelAlias)(N);let I=n.manifest.spec.cheapModel?.trim();o=I?(0,Nr.resolveModelAlias)(I):void 0,await(0,Nr.syncPackToWorkspace)(t.workspace,n.packPath,r,s,a,(0,he.findBundledBasePromptsDir)()),console.log(`${he.COLORS.green}OK:${he.COLORS.reset} Loaded agent: ${n.manifest.metadata.name} v${n.manifest.metadata.version}`),N!==i&&console.log(`${he.COLORS.dim}   Model: ${N} -> ${i}${he.COLORS.reset}`),I&&I!==o&&console.log(`${he.COLORS.dim}   Cheap model: ${I} -> ${o}${he.COLORS.reset}`)}catch(v){console.error(`${he.COLORS.red}Error: ${v instanceof Error?v.message:v}${he.COLORS.reset}`),process.exit(1)}else{let v=(0,Ni.getDefaultConfig)();s=t.engine||v.engine;let A=["claude","codex"].includes(s)?void 0:(0,Y_.tryResolveCustomEngineManifest)(t.workspace,s)?.model?.defaultModel,N=t.model||A||(0,Ni.getEnvDefaultModel)()||v.model;i=(0,Nr.resolveModelAlias)(N),N!==i&&console.log(`${he.COLORS.dim}Model: ${N} -> ${i}${he.COLORS.reset}`)}if(!e.apiKey&&(s==="claude"||s==="codex")){let v=(0,he.getLiteLLMQuickstartHintLines)();console.log(["To start a chat, set an API key and re-run the command. Example:",`  ${v[1]}`,"","Other options:","  AGENTHIPPO_LITELLM_API_KEY=your_key AGENTHIPPO_LITELLM_BASE_URL=https://... dist/agenthippo chat","  LITELLM_API_KEY=your_key LITELLM_BASE_URL=https://... dist/agenthippo chat","  ANTHROPIC_API_KEY=your_key dist/agenthippo chat","  OPENAI_API_KEY=your_key dist/agenthippo chat"].join(`
 `)),process.exit(1)}let c=J$.join(X$.tmpdir(),`${q_.AGENTIDE_CLI_NAME}-cli`),l=t.verbose?new Nr.ConsoleLogger("[Agent]"):new Nr.NoOpLogger,d=(0,he.findClaudeCodePath)(),u=(0,he.findCodexPath)(),f=(0,he.findBundledBasePromptsDir)();if(s==="claude"&&!d){console.error(`${he.COLORS.red}Error: Claude Code CLI not found.${he.COLORS.reset}`);let v=(0,z$.getUnsupportedClaudePlatformHint)();v&&console.error(`   ${v}`),console.error("   Install it: npm install -g @anthropic-ai/claude-code"),console.error("   Or set CLAUDE_CODE_PATH environment variable"),console.error("   Or use --engine codex instead"),process.exit(1)}s==="codex"&&!u&&(console.error(`${he.COLORS.red}Error: Codex CLI not found.${he.COLORS.reset}`),console.error("   Install it: npm install -g @openai/codex"),console.error("   Or set CODEX_PATH environment variable"),console.error("   Or use --engine claude instead"),process.exit(1));let p=new Nr.AutoApprovePermissionHandler,g={fileAccess:(0,Ni.getFileAccess)(n)},m=`cli-${Date.now()}`,h=await(0,Z$.resolveCliTurnScope)({pack:n,verbose:t.verbose}),y=()=>(0,Nr.createHeadlessRunner)({storagePath:c,packId:r,packVersion:n?.manifest.metadata.version,bundledPromptsDir:f,apiKey:e.apiKey,baseUrl:e.baseUrl,useLiteLLM:e.useLiteLLM,litellmApiKey:e.litellmApiKey,openaiApiKey:e.openaiApiKey,anthropicApiKey:e.anthropicApiKey,logger:l,freshState:!1,claudeCodeExecutablePath:d,codexExecutablePath:u,permissionHandler:p,cliEnvPatch:(0,Q$.buildCliEnvPatch)({cliPath:process.execPath,workspaceRoot:t.workspace,agentId:r,chatSessionId:m,baseEnv:process.env}),dataPlane:h??void 0,...o?{engineSettings:{claudeCheapModel:o}}:{}}),E={runner:y(),sessionId:m,engine:s,model:i},w=()=>({async thinking(v){process.stdout.write(`${he.COLORS.gray}${v}${he.COLORS.reset}`)},async text(v){process.stdout.write(v)},async toolStart(v,A){console.log(`
 ${he.COLORS.blue}Tool: ${v}${he.COLORS.reset}`),A&&A.length<200&&t.verbose&&console.log(`   ${he.COLORS.gray}${A}${he.COLORS.reset}`)},async toolEnd(v,A,N,I){console.log(I?`   ${he.COLORS.red}Error: ${N?.slice(0,100)}${he.COLORS.reset}`:`   ${he.COLORS.green}OK${he.COLORS.reset}`)},async progress(v){t.verbose&&console.log(`${he.COLORS.yellow}Progress: ${v}${he.COLORS.reset}`)},async error(v){console.error(`${he.COLORS.red}Error: ${v}${he.COLORS.reset}`)},async question(v){return{selected:[],freeText:null,declined:!0}},async done(){console.log(`
 `)}});console.log(""),console.log(yf),console.log(`${q_.AGENTIDE_BRAND_NAME} Chat`),console.log(yf),console.log(`Engine:    ${E.engine}`),console.log(`Model:     ${E.model}`),o&&console.log(`Cheap:     ${o}`),console.log(`Workspace: ${t.workspace}`),n&&console.log(`Agent:     ${n.manifest.metadata.name}`),console.log(yf),console.log("Type a message to chat. Commands: /help"),console.log("");let O=Y$.createInterface({input:process.stdin,output:process.stdout}),b=()=>{O.question(`${he.COLORS.cyan}> ${he.COLORS.reset}`,async v=>{let A=v.trim();if(!A){b();return}if(A.startsWith("/")){if(!await tD(A,E,O,{createRunner:y,claudeCodePath:d,codexPath:u,turnScope:h}))return;b();return}try{let N=await E.runner.run({engineId:E.engine,modelId:E.model,message:A,workspaceRoot:t.workspace,sessionId:E.sessionId,emitter:w(),permissions:g});!N.success&&N.error&&console.error(`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenthippo-ai/agenthippo",
-  "version": "1.110.38",
+  "version": "1.110.39",
   "description": "AgentHippo CLI — serve, chat, and deploy agent packs",
   "author": "AgentHippo <dev@agenthippo.ai>",
   "license": "SEE LICENSE IN LICENSE",