@apilift/cli 1.4.28 → 1.4.29

package/dist/apilift.js

@@ -30308,12 +30308,12 @@ import { dirname, join as join3 } from "node:path";
 function pathFor(root, appSlug, kind, name) {
   if (!slugPattern.test(appSlug)) throw new Error("App slug is invalid");
   if (kind === "action" ? !actionPattern.test(name) : kind !== "app" && !resourcePattern.test(name)) throw new Error("Resource name is invalid");
-  return kind === "app" ? join3(root, "drafts", appSlug, "app.jsonc") : join3(root, "drafts", appSlug, paths[kind], `${name}.jsonc`);
+  return kind === "app" ? join3(root, "drafts", diskName(appSlug), "app.jsonc") : join3(root, "drafts", diskName(appSlug), paths[kind], `${diskName(name)}.jsonc`);
 }
 function record2(row) {
   return { id: String(row.id), appSlug: String(row.app_slug), appId: row.app_id === null ? null : String(row.app_id), kind: String(row.kind), name: String(row.name), ownerSessionId: row.owner_session_id === null ? null : String(row.owner_session_id), filePath: String(row.file_path), intent: row.intent === "remove" ? "remove" : "edit", baseVersion: row.base_version === null ? null : Number(row.base_version) };
 }
-var DraftConflict, paths, slugPattern, resourcePattern, actionPattern, DraftStore;
+var DraftConflict, paths, slugPattern, resourcePattern, actionPattern, diskName, DraftStore;
 var init_drafts = __esm({
   "src/discovery/drafts.ts"() {
     "use strict";
@@ -30329,6 +30329,7 @@ var init_drafts = __esm({
     slugPattern = /^[a-z][a-z0-9-]{0,79}$/u;
     resourcePattern = /^[a-z][a-z0-9_-]{0,79}$/u;
     actionPattern = /^[a-z][a-z0-9_-]{0,79}\.[a-z][a-z0-9_-]{0,79}$/u;
+    diskName = (name) => /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/iu.test(name) ? `~${name}` : name;
     DraftStore = class {
       constructor(state, root) {
         this.state = state;
@@ -31114,8 +31115,24 @@ var require_dist = __commonJS({
   }
 });
 
-// src/capture-server/client.ts
+// src/process.ts
 import { spawn } from "node:child_process";
+function backgroundOptions(env, platform4 = process.platform) {
+  return { detached: platform4 !== "win32", windowsHide: true, stdio: "ignore", env };
+}
+function startBackground(script, env, onError) {
+  const child = spawn(process.execPath, [script], backgroundOptions(env));
+  child.once("error", onError);
+  child.unref();
+  return child;
+}
+var init_process = __esm({
+  "src/process.ts"() {
+    "use strict";
+  }
+});
+
+// src/capture-server/client.ts
 import { createHash as createHash2 } from "node:crypto";
 import { chmodSync as chmodSync4, existsSync as existsSync2, mkdirSync as mkdirSync4, readFileSync as readFileSync4, rmSync as rmSync2 } from "node:fs";
 import { dirname as dirname2, join as join4 } from "node:path";
@@ -31133,6 +31150,9 @@ function compatibleBroker(client, health, requestedVersion) {
   if (health.protocol === "apilift.capture/v1" || health.version === requestedVersion) return true;
   return false;
 }
+function reusableBroker(client, health, requestedVersion) {
+  return compatibleBroker(client, health, requestedVersion) && (health.version === requestedVersion || health.active);
+}
 function receiptAt(root) {
   try {
     const raw = JSON.parse(readFileSync4(join4(root, "server.json"), "utf8"));
@@ -31180,7 +31200,7 @@ async function ensureCaptureServerUnderUpdateLock(options2) {
   if (current) {
     const client = new CaptureServerClient(current);
     try {
-      if (compatibleBroker(client, await client.health(), options2.version)) return client;
+      if (reusableBroker(client, await client.health(), options2.version)) return client;
     } catch {
     }
   }
@@ -31197,7 +31217,7 @@ async function ensureCaptureServerUnderUpdateLock(options2) {
       const existing = new CaptureServerClient(previous);
       try {
         const health = await existing.health();
-        if (compatibleBroker(existing, health, options2.version)) return existing;
+        if (reusableBroker(existing, health, options2.version)) return existing;
         if (health.active) throw Object.assign(new Error("Capture server cannot be replaced while browser work is active"), { code: "capture-server-busy" });
         await existing.retire();
       } catch (error62) {
@@ -31209,10 +31229,13 @@ async function ensureCaptureServerUnderUpdateLock(options2) {
       }
     }
     if (!existsSync2(options2.script)) throw new Error(`Capture server entry point is missing: ${options2.script}`);
-    const child = spawn(process.execPath, [options2.script], { detached: true, stdio: "ignore", env: { ...process.env, ...options2.env, APILIFT_HOME: root } });
-    child.unref();
+    let startupError;
+    const child = startBackground(options2.script, { ...process.env, ...options2.env, APILIFT_HOME: root }, (error62) => {
+      startupError = error62;
+    });
     const deadline = Date.now() + (options2.timeoutMs ?? 1e4);
     while (Date.now() < deadline) {
+      if (startupError || child.exitCode !== null) throw Object.assign(new Error("The local browser process could not start. Run apilift setup continue to repair the installation."), { code: "capture-server-unavailable" });
       const current2 = receiptAt(root);
       if (current2 && child.pid && current2.pid === child.pid && current2.version === options2.version) {
         const client = new CaptureServerClient(current2);
@@ -31233,6 +31256,7 @@ var CaptureServerClient;
 var init_client2 = __esm({
   "src/capture-server/client.ts"() {
     "use strict";
+    init_process();
     CaptureServerClient = class {
       constructor(receipt, fetcher = fetch) {
         this.receipt = receipt;
@@ -31458,7 +31482,7 @@ function dataRoot(env) {
   const home = homedir();
   if (platform() === "darwin") return join7(home, "Library", "Application Support", "apilift");
   if (platform() === "win32") return join7(env.LOCALAPPDATA || join7(home, "AppData", "Local"), "apilift");
-  return join7(env.XDG_DATA_HOME || join7(home, ".local", "share"), "apilift");
+  return join7(env.XDG_DATA_HOME && isAbsolute(env.XDG_DATA_HOME) ? env.XDG_DATA_HOME : join7(home, ".local", "share"), "apilift");
 }
 var LocalState;
 var init_state = __esm({
@@ -33393,30 +33417,58 @@ var init_dist = __esm({
 });
 
 // src/capture-server/store.ts
+import { mkdirSync as mkdirSync6, chmodSync as chmodSync6, readFileSync as readFileSync6 } from "node:fs";
 import { execFileSync } from "node:child_process";
 import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
-function ownerProcessAlive(pid, expectedStartedAt, probe = {}) {
-  if (!Number.isInteger(pid) || pid <= 0 || !Number.isFinite(expectedStartedAt)) return false;
-  const alive = probe.alive ?? ((candidate2) => {
-    try {
-      process.kill(candidate2, 0);
-      return true;
-    } catch {
+function createOwnerVerifier(probe = {}) {
+  const cached2 = /* @__PURE__ */ new Map();
+  const alive = probe.alive ?? pidAlive, now = probe.now ?? Date.now;
+  return (pid, startedAt, fresh = false) => {
+    if (!Number.isInteger(pid) || pid <= 0 || !Number.isFinite(startedAt) || !alive(pid)) {
+      cached2.delete(pid);
       return false;
     }
-  });
-  const inspect = probe.inspect ?? ((command6, args, timeout) => execFileSync(command6, args, { encoding: "utf8", timeout }).trim());
+    if ((probe.platform ?? process.platform) === "linux") return inspectOwner(pid, startedAt, probe);
+    const prior = cached2.get(pid), time3 = now();
+    if (!fresh && prior && prior.startedAt === startedAt && time3 >= prior.checkedAt && time3 - prior.checkedAt < 2e3) return true;
+    cached2.delete(pid);
+    if (!inspectOwner(pid, startedAt, probe)) return false;
+    if (cached2.size >= 256) cached2.delete(cached2.keys().next().value);
+    cached2.set(pid, { startedAt, checkedAt: now() });
+    return true;
+  };
+}
+function ownerProcessAlive(pid, expectedStartedAt, probe) {
+  return typeof probe === "object" ? inspectOwner(pid, expectedStartedAt, probe) : defaultOwnerVerifier(pid, expectedStartedAt, probe);
+}
+function inspectOwner(pid, expectedStartedAt, probe) {
+  if (!Number.isInteger(pid) || pid <= 0 || !Number.isFinite(expectedStartedAt)) return false;
+  const alive = probe.alive ?? pidAlive;
+  const inspect = probe.inspect ?? inspectProcess;
   const platform4 = probe.platform ?? process.platform;
   const now = probe.now ?? Date.now;
   const started = now();
   const windows = platform4 === "win32";
+  if (platform4 === "linux") {
+    try {
+      const read = probe.read ?? ((path2) => readFileSync6(path2, "utf8"));
+      const stat2 = read(`/proc/${pid}/stat`), fields = stat2.slice(stat2.lastIndexOf(")") + 2).trim().split(/\s+/u);
+      if (["Z", "X"].includes(fields[0])) return false;
+      const ticks = Number(fields[19]), boot = Number(/^btime (\d+)$/mu.exec(read("/proc/stat"))?.[1]);
+      const hz = probe.inspect ? Number(inspect("getconf", ["CLK_TCK"], 2e3)) : linuxClockTicks ??= Number(inspect("getconf", ["CLK_TCK"], 2e3));
+      const observed = boot * 1e3 + ticks * 1e3 / hz;
+      return Number.isFinite(observed) && hz > 0 && Math.abs(observed - expectedStartedAt) <= 5e3;
+    } catch {
+      return false;
+    }
+  }
   for (let attempt = 0; attempt < (windows ? 2 : 1); attempt++) {
     if (!alive(pid)) return false;
     const remaining = windows ? 8e3 - (now() - started) : 2e3;
     if (remaining <= 0) return false;
     try {
-      const raw = windows ? inspect("powershell.exe", ["-NoProfile", "-Command", `(Get-Process -Id ${pid}).StartTime.ToUniversalTime().ToString('o')`], Math.min(4e3, remaining)) : inspect("ps", ["-o", "lstart=", "-p", String(pid)], 2e3);
-      const observed = Date.parse(raw.trim());
+      const raw = windows ? inspect("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", `(Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().ToString('o')`], Math.min(4e3, remaining)) : inspect("ps", ["-o", "lstart=", "-p", String(pid)], 2e3);
+      const observed = Date.parse(windows ? raw.trim() : `${raw.trim()} UTC`);
       return Number.isFinite(observed) && Math.abs(observed - expectedStartedAt) <= 5e3;
     } catch (error62) {
       if (!windows || error62.code !== "ETIMEDOUT") return false;
@@ -33424,25 +33476,36 @@ function ownerProcessAlive(pid, expectedStartedAt, probe = {}) {
   }
   return false;
 }
+var pidAlive, inspectProcess, linuxClockTicks, defaultOwnerVerifier;
 var init_store = __esm({
   "src/capture-server/store.ts"() {
     "use strict";
     init_dist();
+    pidAlive = (candidate2) => {
+      try {
+        process.kill(candidate2, 0);
+        return true;
+      } catch {
+        return false;
+      }
+    };
+    inspectProcess = (command6, args, timeout) => execFileSync(command6, args, { encoding: "utf8", timeout, windowsHide: true, env: { ...process.env, LC_ALL: "C", TZ: "UTC" }, stdio: ["ignore", "pipe", "ignore"] }).trim();
+    defaultOwnerVerifier = createOwnerVerifier();
   }
 });
 
 // src/discovery/lock.ts
 import { createHash as createHash3 } from "node:crypto";
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync6, rmSync as rmSync3, writeFileSync as writeFileSync6 } from "node:fs";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync7, rmSync as rmSync3, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join10 } from "node:path";
 function lockDiscovery(root, sessionId) {
   const name = createHash3("sha256").update(sessionId).digest("hex");
   const directory = join10(root, "locks", `discovery-${name}`);
-  mkdirSync6(join10(root, "locks"), { recursive: true, mode: 448 });
+  mkdirSync7(join10(root, "locks"), { recursive: true, mode: 448 });
   const owner = { pid: process.pid, startedAt: Date.now() - process.uptime() * 1e3 };
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
-      mkdirSync6(directory, { mode: 448 });
+      mkdirSync7(directory, { mode: 448 });
       writeFileSync6(join10(directory, "owner.json"), JSON.stringify(owner), { flag: "wx", mode: 384 });
       return () => {
         rmSync3(directory, { recursive: true, force: true });
@@ -33451,7 +33514,7 @@ function lockDiscovery(root, sessionId) {
       if (error62.code !== "EEXIST") throw error62;
       let held = null;
       try {
-        held = JSON.parse(readFileSync6(join10(directory, "owner.json"), "utf8"));
+        held = JSON.parse(readFileSync7(join10(directory, "owner.json"), "utf8"));
       } catch {
       }
       if (!held || ownerProcessAlive(held.pid, held.startedAt)) throw new Error("discovery-command-busy \u2014 This agent already has a discovery command running; wait for it to finish, then retry");
@@ -33495,7 +33558,7 @@ var init_session = __esm({
 });
 
 // src/commands/discover.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync2, readFileSync as readFileSync7, renameSync as renameSync2, writeFileSync as writeFileSync7 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync2, readFileSync as readFileSync8, renameSync as renameSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { tmpdir as tmpdir2 } from "node:os";
 import { dirname as dirname5, join as join11 } from "node:path";
@@ -33654,7 +33717,7 @@ ${local}When ready to test the configured request: ${command4(invocation, "disco
 For browser observation: ${command4(invocation, "discover capture start")}
 `;
   if (draft.kind === "transport") {
-    const browser = parseDraftEnvelope(readFileSync7(draft.filePath, "utf8")).envelope?.definition.mode === "browser";
+    const browser = parseDraftEnvelope(readFileSync8(draft.filePath, "utf8")).envelope?.definition.mode === "browser";
     const browserAuth = browser ? `
 For a page-derived authentication value, place its observed locator under definition.inject[].from and the destination under definition.inject[].to. Example invented notes app definition fragment: ${JSON.stringify(browserLocatorExample)}. definition.credentials is only for separately saved human-provided secrets; leave it [] when browser login supplies access. Never copy a token value. Verify the harmless read before accepting the recipe.
 ` : "";
@@ -33698,7 +33761,7 @@ File: ${selected.filePath}
   if (draft.intent === "remove" && store.publication(draft.id)) return fail5(`A removal publication may have been sent. Reconcile its retained request with ${command4(invocation, "discover publish")} before changing, deferring or discarding it.
 File: ${draft.filePath}
 `, 12);
-  if (resource && readFileSync7(draft.filePath, "utf8") === draftTemplate(kind)) {
+  if (resource && readFileSync8(draft.filePath, "utf8") === draftTemplate(kind)) {
     const definition2 = resource.definition;
     const dependencies = kind === "action" && !("unavailable" in definition2) ? { transport: String(definition2.transport ?? "") } : kind === "transport" && definition2.browserContext ? { browserPage: String(definition2.browserContext) } : void 0;
     const editable = { definition: definition2, ...dependencies ? { dependencies } : {}, ...kind === "action" && !("unavailable" in definition2) || kind === "transport" ? { verification: { inputs: {}, review: "pending", notes: "" } } : {} };
@@ -33706,7 +33769,7 @@ File: ${draft.filePath}
 `, { mode: 384 });
   }
   void root;
-  return ok4(draftGuidance(invocation, draft, Boolean(parseDraftEnvelope(readFileSync7(draft.filePath, "utf8")).envelope?.definition.unavailable)));
+  return ok4(draftGuidance(invocation, draft, Boolean(parseDraftEnvelope(readFileSync8(draft.filePath, "utf8")).envelope?.definition.unavailable)));
 }
 function requireDiscovery(store, session, invocation) {
   const current = store.session(session.id);
@@ -33733,7 +33796,7 @@ function handleResearch(invocation, state, store, session, root) {
       return fail5(`${error62 instanceof Error ? error62.message : "Invalid research scope"}.
 `);
     }
-    mkdirSync7(dirname5(path2), { recursive: true, mode: 448 });
+    mkdirSync8(dirname5(path2), { recursive: true, mode: 448 });
     if (!existsSync3(path2)) writeFileSync7(path2, `// Record a focused check of official operation and access documentation.
 ${JSON.stringify({ scope: scope2, conclusion: "pending", findings: "", sources: [{ kind: "operation", url: "", finding: "" }, { kind: "access", url: "", finding: "" }] }, null, 2)}
 `, { flag: "wx", mode: 384 });
@@ -33767,7 +33830,7 @@ If newer official docs change a finding, edit its file and run ${command4(invoca
   const selection = state.db.prepare("SELECT r.* FROM discovery_research r JOIN selected_discovery_research s ON s.app_slug=r.app_slug AND s.scope=r.scope WHERE s.session_id=?").get(session.id);
   if (!selection) return fail5(`No API research file is selected. Start with ${command4(invocation, "discover api assess <action-or-app>")}.
 `);
-  const source = readFileSync7(selection.file_path, "utf8"), errors = [];
+  const source = readFileSync8(selection.file_path, "utf8"), errors = [];
   const seen = [], duplicates = [];
   visit3(source, { onObjectBegin: () => {
     seen.push(/* @__PURE__ */ new Set());
@@ -34194,7 +34257,7 @@ async function rebaseDraft(invocation, api, store, session) {
   if (draft.intent === "remove") {
     const checked = await checkDraft(store, session.id, api);
     if (checked.issues.length) return checkResponse(checked, invocation);
-    const source = readFileSync7(draft.filePath, "utf8");
+    const source = readFileSync8(draft.filePath, "utf8");
     const updated = applyEdits(source, modify(source, ["expectedVersion"], current.version, { formattingOptions: { insertSpaces: true, tabSize: 2 } }));
     const temporary = `${draft.filePath}.${randomUUID8()}.tmp`;
     writeFileSync7(temporary, updated, { flag: "wx", mode: 384 });
@@ -34826,715 +34889,769 @@ var init_output = __esm({
   }
 });
 
-// src/plugin.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash5 } from "node:crypto";
-import { cpSync, existsSync as existsSync4, mkdirSync as mkdirSync8, readFileSync as readFileSync8, readdirSync, renameSync as renameSync3, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname6, join as join13, resolve as resolve2 } from "node:path";
+// ../../node_modules/.pnpm/tinyexec@1.3.1/node_modules/tinyexec/dist/main.mjs
+import { spawn as spawn2, spawnSync } from "node:child_process";
+import { cwd } from "node:process";
+import { basename, delimiter, dirname as dirname6, normalize, resolve as resolve2 } from "node:path";
 import { fileURLToPath } from "node:url";
-function missingSkill(root) {
-  return skillNames.find((name) => !existsSync4(join13(root, "skills", name, "SKILL.md")));
-}
-function completeCopy(source, target) {
-  return files(source).every((path2) => existsSync4(join13(target, path2)));
+import { pipeline } from "node:stream/promises";
+import { PassThrough } from "node:stream";
+import readline from "node:readline";
+import { closeSync, openSync, readSync, statSync } from "node:fs";
+function getPathFromEnv(env) {
+  for (const key in env) {
+    if (!Object.prototype.hasOwnProperty.call(env, key) || !isPathLikePattern.test(key)) continue;
+    const value = env[key];
+    if (!value) return defaultEnvPathInfo;
+    return {
+      key,
+      value
+    };
+  }
+  return defaultEnvPathInfo;
 }
-function files(root, relative = "") {
-  return readdirSync(join13(root, relative), { withFileTypes: true }).flatMap((entry2) => {
-    const path2 = join13(relative, entry2.name);
-    return entry2.isDirectory() ? files(root, path2) : [path2];
-  }).sort();
+function addNodeBinToPath(cwd2, path2) {
+  const parts = path2.value.split(delimiter);
+  const nodeBinPaths = [];
+  let currentPath = typeof cwd2 === "string" ? cwd2 : fileURLToPath(cwd2, { windows: false });
+  let lastPath;
+  do {
+    nodeBinPaths.push(resolve2(currentPath, "node_modules", ".bin"));
+    lastPath = currentPath;
+    currentPath = dirname6(currentPath);
+  } while (currentPath !== lastPath);
+  nodeBinPaths.push(dirname6(process.execPath));
+  const newPath = nodeBinPaths.concat(parts).join(delimiter);
+  return {
+    key: path2.key,
+    value: newPath
+  };
 }
-function digest(root) {
-  const hash4 = createHash5("sha256");
-  for (const path2 of files(root)) hash4.update(path2).update("\0").update(readFileSync8(join13(root, path2))).update("\0");
-  return hash4.digest("hex");
+function computeEnv(cwd2, env, nodePath = true) {
+  const envWithDefault = {
+    ...process.env,
+    ...env
+  };
+  if (!nodePath) return envWithDefault;
+  const envPathInfo = addNodeBinToPath(cwd2, getPathFromEnv(envWithDefault));
+  envWithDefault[envPathInfo.key] = envPathInfo.value;
+  return envWithDefault;
 }
-function writeJson(path2, value) {
-  mkdirSync8(dirname6(path2), { recursive: true });
-  writeFileSync8(path2, `${JSON.stringify(value, null, 2)}
-`, { mode: 384 });
+function normalizeSpawnCommand(command6, args = [], options2 = {}) {
+  if (options2.shell === true || !isWindows) return {
+    command: command6,
+    args,
+    options: options2
+  };
+  let file2 = resolveCommand(command6, options2);
+  let shebang = null;
+  if (file2 !== null) {
+    const size = 150;
+    const buffer = Buffer.alloc(size);
+    let fd = null;
+    try {
+      fd = openSync(file2, "r");
+      readSync(fd, buffer, 0, size, 0);
+    } catch {
+    } finally {
+      if (fd !== null) closeSync(fd);
+    }
+    const match = buffer.toString().match(shebangRegExp);
+    if (match !== null) {
+      const line = match[1].trim();
+      const separatorIndex = line.indexOf(" ");
+      const path2 = separatorIndex !== -1 ? line.slice(0, separatorIndex) : line;
+      const argument = separatorIndex !== -1 ? line.slice(separatorIndex + 1) : "";
+      const binary = basename(path2);
+      shebang = binary === "env" ? argument || null : binary;
+    }
+  }
+  if (shebang !== null && file2 !== null) {
+    args = [file2, ...args];
+    command6 = shebang;
+    file2 = resolveCommand(command6, options2);
+  }
+  if (file2 === null || !isWindowsExecutableRegExp.test(file2)) {
+    const needsDoubleEscapeMetaChars = file2 !== null && isNodeModulesCmdRegExp.test(file2);
+    command6 = normalize(command6);
+    command6 = command6.replace(metaCharsRegExp, "^$1");
+    args = args.map((arg) => {
+      arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
+      arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
+      arg = `"${arg}"`;
+      arg = arg.replace(metaCharsRegExp, "^$1");
+      if (needsDoubleEscapeMetaChars) arg = arg.replace(metaCharsRegExp, "^$1");
+      return arg;
+    });
+    args = [
+      "/d",
+      "/s",
+      "/c",
+      `"${[command6, ...args].join(" ")}"`
+    ];
+    command6 = options2.env?.comspec ?? "cmd.exe";
+    options2 = {
+      ...options2,
+      windowsVerbatimArguments: true
+    };
+  }
+  return {
+    command: command6,
+    args,
+    options: options2
+  };
 }
-function readJson(path2) {
-  try {
-    return JSON.parse(readFileSync8(path2, "utf8"));
-  } catch {
-    return null;
+function resolveCommand(command6, options2) {
+  const cwd$3 = (options2.cwd ?? cwd()).toString();
+  const env = options2.env ?? process.env;
+  const PATH = getPathFromEnv(env).value;
+  const pathEnv = command6.includes("/") || command6.includes("\\") ? [""] : [cwd$3, ...PATH.split(delimiter)];
+  let pathExt = env.PATHEXT ? env.PATHEXT.split(delimiter) : defaultPathExt;
+  if (command6.includes(".") && pathExt[0] !== "") pathExt = ["", ...pathExt];
+  for (const extensions of [pathExt, noPathExt]) for (const path2 of pathEnv) {
+    const unquoted = path2.startsWith('"') && path2.endsWith('"') && path2.length > 1 ? path2.slice(1, -1) : path2;
+    const dest = resolve2(cwd$3, unquoted, command6);
+    for (const ext of extensions) {
+      const destWithExt = dest + ext;
+      try {
+        if (statSync(destWithExt).isFile()) return destWithExt;
+      } catch {
+      }
+    }
   }
+  return null;
 }
-function command5(binary, args) {
-  const output2 = execFileSync2(binary, args, { encoding: "utf8", timeout: 1e4, stdio: ["ignore", "pipe", "pipe"] });
-  try {
-    return JSON.parse(output2);
-  } catch {
-    return output2;
+function combineSignals(signals) {
+  const controller = new AbortController();
+  for (const signal of signals) {
+    if (signal.aborted) {
+      controller.abort();
+      return signal;
+    }
+    const onAbort = () => {
+      controller.abort(signal.reason);
+    };
+    signal.addEventListener("abort", onAbort, { signal: controller.signal });
   }
+  return controller.signal;
 }
-function active(agent2, expected) {
-  const args = agent2 === "codex" ? ["plugin", "list", "--marketplace", "personal", "--json"] : ["plugin", "list", "--json"];
+async function readStream(stream) {
+  let output2 = "";
   try {
-    const listed = command5(agent2, args);
-    const entries = agent2 === "codex" ? listed?.installed : listed;
-    if (!Array.isArray(entries) || entries.some((entry2) => typeof entry2 !== "object" || entry2 === null || typeof (agent2 === "codex" ? entry2.pluginId : entry2.id) !== "string")) return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: plugin list returned an unexpected response` };
-    const plugin = entries.find((entry2) => (agent2 === "codex" ? entry2.pluginId : entry2.id) === "apilift@personal");
-    if (!plugin) return { ready: false, known: true, detail: "Apilift is not installed in this agent" };
-    if (typeof plugin.enabled !== "boolean" || typeof plugin.version !== "string") return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: Apilift status is incomplete` };
-    if (!plugin.enabled) return { ready: false, known: true, detail: "Apilift is disabled in this agent" };
-    if (plugin.version !== expected) return { ready: false, known: true, detail: "The active Apilift plugin does not match the packaged version" };
-    return { ready: true, known: true, detail: "Apilift setup, use and discovery skills are active" };
-  } catch (error62) {
-    const code = typeof error62 === "object" && error62 && "code" in error62 ? error62.code : void 0;
-    const reason = code === "ETIMEDOUT" ? "plugin list timed out after 10 seconds" : code === "ENOENT" ? `${agent2} executable was not found` : "plugin list failed";
-    return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: ${reason}` };
+    for await (const chunk of stream) output2 += chunk.toString();
+  } catch {
   }
+  return output2;
 }
-function inspectAgentPlugin(agent2, env, sourceOverride) {
-  if (env.APILIFT_DEV_PLUGIN_ROOT) return { ready: false, version: "development", detail: "Development plugin activation has not been verified" };
-  const source = resolve2(sourceOverride || join13(dirname6(fileURLToPath(import.meta.url)), "plugin"));
-  const missing = missingSkill(source);
-  if (missing) return { ready: false, version: "unknown", detail: `CLI package is missing its ${missing} skill` };
-  const version2 = readJson(join13(source, `.${agent2}-plugin`, "plugin.json"))?.version;
-  if (typeof version2 !== "string" || !/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/.test(version2)) throw new Error("Plugin package version is invalid");
-  const bundleDigest = digest(source);
-  const expected = agent2 === "codex" ? `${version2}+codex.${bundleDigest.slice(0, 12)}` : version2;
-  const home = resolve2(env.APILIFT_AGENT_HOME || homedir2());
-  const plugin = agent2 === "codex" ? join13(home, "plugins", "apilift") : join13(home, ".agents", "plugins", "plugins", "apilift");
-  const marker = readJson(join13(plugin, markerName));
-  const staged = marker?.package === "apilift" && marker.bundleDigest === bundleDigest && marker.version === version2 && completeCopy(source, plugin);
-  if (!staged) return { ready: false, version: expected, detail: "Apilift plugin files are missing or stale" };
-  if (env.APILIFT_AGENT_HOME || env.APILIFT_AGENT_NO_ACTIVATE === "1") return { ready: false, version: expected, detail: "Apilift skills are staged; activation is unverified" };
-  const activation = active(agent2, expected);
-  return { ready: activation.ready, version: expected, detail: activation.detail, checkFailed: !activation.known };
+function xSync(command6, args, options2) {
+  const opts = {
+    ...defaultSyncOptions,
+    ...options2
+  };
+  const nodeOptions = {
+    ...defaultNodeOptions,
+    ...opts.nodeOptions
+  };
+  const cwd$2 = nodeOptions?.cwd ?? cwd();
+  if (opts.timeout !== void 0) nodeOptions.timeout = opts.timeout;
+  nodeOptions.env = computeEnv(cwd$2, nodeOptions.env, opts.nodePath);
+  const crossResult = normalizeSpawnCommand(command6, args ?? [], nodeOptions);
+  const spawnResult = spawnSync(crossResult.command, crossResult.args, crossResult.options);
+  if (spawnResult.error) throw spawnResult.error;
+  const stdout = spawnResult.stdout?.toString() ?? "";
+  const stderr = spawnResult.stderr?.toString() ?? "";
+  const exitCode = spawnResult.status ?? void 0;
+  const signalCode = spawnResult.signal ?? null;
+  const killed = signalCode !== null;
+  const result3 = {
+    stdout,
+    stderr,
+    get exitCode() {
+      return exitCode;
+    },
+    get signalCode() {
+      return signalCode;
+    },
+    get pid() {
+      return spawnResult.pid;
+    },
+    get killed() {
+      return killed;
+    },
+    *[Symbol.iterator]() {
+      for (const text2 of [stdout, stderr]) {
+        if (!text2) continue;
+        const lines = text2.split(LINE_SEPARATOR_REGEX);
+        if (lines[lines.length - 1] === "") lines.pop();
+        yield* lines;
+      }
+    }
+  };
+  if (opts.throwOnError && (exitCode !== 0 && exitCode !== void 0 || signalCode !== null)) throw new NonZeroExitError(result3, {
+    stdout: result3.stdout,
+    stderr: result3.stderr,
+    exitCode: result3.exitCode
+  }, command6, args);
+  return result3;
 }
-function ensureAgentPlugin(agent2, env, sourceOverride) {
-  if (env.APILIFT_DEV_PLUGIN_ROOT) {
-    const source2 = resolve2(env.APILIFT_DEV_PLUGIN_ROOT);
-    const missing2 = missingSkill(source2);
-    if (missing2) throw new Error(`Development plugin ${missing2} skill is missing`);
-    const bundleDigest2 = digest(source2);
-    const root = resolve2(env.APILIFT_HOME || join13(homedir2(), ".local", "share", "apilift"));
-    writeJson(join13(root, "agent-plugins", `${agent2}.json`), { root: source2, digest: bundleDigest2 });
-    return { ready: false, version: `dev+${bundleDigest2.slice(0, 12)}`, detail: "Development plugin source recorded; activation was not verified" };
-  }
-  const source = resolve2(sourceOverride || join13(dirname6(fileURLToPath(import.meta.url)), "plugin"));
-  const missing = missingSkill(source);
-  if (missing) throw new Error(`CLI package is missing its ${missing} skill`);
-  const version2 = readJson(join13(source, `.${agent2}-plugin`, "plugin.json"))?.version;
-  if (typeof version2 !== "string" || !/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/.test(version2)) throw new Error("Plugin package version is invalid");
-  const bundleDigest = digest(source);
-  const home = resolve2(env.APILIFT_AGENT_HOME || homedir2());
-  const marketplace = join13(home, ".agents", "plugins");
-  const plugin = agent2 === "codex" ? join13(home, "plugins", "apilift") : join13(marketplace, "plugins", "apilift");
-  const marker = readJson(join13(plugin, markerName));
-  if (existsSync4(plugin) && marker?.package !== "apilift") throw new Error(`Refusing to replace unmanaged plugin ${plugin}`);
-  const expected = agent2 === "codex" ? `${version2}+codex.${bundleDigest.slice(0, 12)}` : version2;
-  const current = marker?.bundleDigest === bundleDigest && marker.version === version2 && completeCopy(source, plugin);
-  if (!current) {
-    const staging = `${plugin}.stage-${process.pid}`;
-    rmSync4(staging, { recursive: true, force: true });
-    mkdirSync8(dirname6(staging), { recursive: true });
-    cpSync(source, staging, { recursive: true });
-    const manifestPath = join13(staging, `.${agent2}-plugin`, "plugin.json");
-    const manifest = readJson(manifestPath);
-    if (!manifest) throw new Error("Plugin manifest is invalid");
-    manifest.version = expected;
-    writeJson(manifestPath, manifest);
-    writeJson(join13(staging, markerName), { schema: "apilift.plugin-install/v1", package: "apilift", version: version2, bundleDigest });
-    const backup = `${plugin}.backup-${process.pid}`;
-    if (existsSync4(plugin)) renameSync3(plugin, backup);
-    try {
-      renameSync3(staging, plugin);
-    } catch (error62) {
-      if (existsSync4(backup)) renameSync3(backup, plugin);
-      throw error62;
-    }
-    rmSync4(backup, { recursive: true, force: true });
-  }
-  const marketplacePath = join13(marketplace, "marketplace.json");
-  const document = readJson(marketplacePath) ?? { name: "personal", interface: { displayName: "Personal" }, plugins: [] };
-  if (document.name !== "personal" || !Array.isArray(document.plugins)) throw new Error("Unsupported personal plugin marketplace");
-  document.plugins = [...document.plugins.filter((item) => typeof item === "object" && item !== null && item.name !== "apilift"), { name: "apilift", source: { source: "local", path: "./plugins/apilift" }, policy: { installation: "AVAILABLE", authentication: "ON_INSTALL" }, category: "Developer Tools" }];
-  writeJson(marketplacePath, document);
-  writeJson(join13(marketplace, ".claude-plugin", "marketplace.json"), { "$schema": "https://anthropic.com/claude-code/marketplace.schema.json", name: "personal", description: "Personal agent plugins", owner: { name: "Local" }, plugins: [{ name: "apilift", description: "Use logged-in apps and discover missing actions with Apilift", source: "./plugins/apilift", category: "development" }] });
-  if (env.APILIFT_AGENT_HOME || env.APILIFT_AGENT_NO_ACTIVATE === "1") return { ready: false, version: expected, detail: `Plugin staged at ${plugin}; activation is disabled` };
-  const initial = active(agent2, expected);
-  if (!initial.known) return { ready: false, version: expected, detail: initial.detail, checkFailed: true };
-  if (initial.ready) return { ready: true, version: expected, detail: initial.detail };
-  {
-    if (agent2 === "codex") command5("codex", ["plugin", "add", "apilift@personal"]);
-    else {
-      let marketplaces;
-      try {
-        marketplaces = command5("claude", ["plugin", "marketplace", "list", "--json"]);
-      } catch {
-        marketplaces = [];
+var isPathLikePattern, defaultEnvPathInfo, combineStreams, metaCharsRegExp, shebangRegExp, isWindowsExecutableRegExp, isNodeModulesCmdRegExp, isWindows, defaultPathExt, noPathExt, NonZeroExitError, LINE_SEPARATOR_REGEX, defaultOptions, defaultSyncOptions, defaultNodeOptions, ExecProcess, x, exec;
+var init_main2 = __esm({
+  "../../node_modules/.pnpm/tinyexec@1.3.1/node_modules/tinyexec/dist/main.mjs"() {
+    isPathLikePattern = /^path$/i;
+    defaultEnvPathInfo = {
+      key: "PATH",
+      value: ""
+    };
+    combineStreams = (streams) => {
+      let streamCount = streams.length;
+      const combined = new PassThrough();
+      const maybeEmitEnd = () => {
+        if (--streamCount === 0) combined.end();
+      };
+      for (const stream of streams) pipeline(stream, combined, { end: false }).then(maybeEmitEnd).catch(maybeEmitEnd);
+      return combined;
+    };
+    metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
+    shebangRegExp = /^#!\s*(.+)/;
+    isWindowsExecutableRegExp = /\.(?:com|exe)$/i;
+    isNodeModulesCmdRegExp = /node_modules[\\/]\.bin[\\/][^\\/]+\.cmd$/i;
+    isWindows = process.platform === "win32";
+    defaultPathExt = [
+      ".EXE",
+      ".CMD",
+      ".BAT",
+      ".COM"
+    ];
+    noPathExt = [""];
+    NonZeroExitError = class extends Error {
+      result;
+      output;
+      exitCode;
+      get signalCode() {
+        return this.result.signalCode;
+      }
+      constructor(result3, output2, command6, args) {
+        let target = "The process";
+        if (command6) target = `The command \`${args?.length ? `${command6} ${args.map((a) => /[ "'`()]/.test(a) ? JSON.stringify(a) : a).join(" ")}` : command6}\``;
+        const exitCode = result3.exitCode ?? 1;
+        super(result3.signalCode !== null ? `${target} was killed by the signal ${result3.signalCode}` : `${target} exited with a non-zero status (${exitCode})`);
+        this.result = result3;
+        this.output = output2;
+        this.exitCode = exitCode;
+        Object.defineProperty(this, "result", {
+          enumerable: false,
+          writable: false,
+          configurable: false
+        });
       }
-      if (!Array.isArray(marketplaces) || !marketplaces.some((item) => typeof item === "object" && item !== null && item.name === "personal")) command5("claude", ["plugin", "marketplace", "add", marketplace, "--scope", "user"]);
-      const listed = command5("claude", ["plugin", "list", "--json"]);
-      const installed = Array.isArray(listed) && listed.some((item) => typeof item === "object" && item !== null && item.id === "apilift@personal");
-      command5("claude", ["plugin", installed ? "update" : "install", "apilift@personal", "--scope", "user"]);
-      command5("claude", ["plugin", "enable", "apilift@personal", "--scope", "user"]);
-    }
-  }
-  const activation = active(agent2, expected);
-  return { ready: activation.ready, version: expected, detail: activation.detail, checkFailed: !activation.known };
-}
-var markerName, skillNames;
-var init_plugin = __esm({
-  "src/plugin.ts"() {
-    "use strict";
-    markerName = ".apilift-managed.json";
-    skillNames = ["setup", "use", "discover"];
-  }
-});
-
-// ../../packages/core/dist/analytics/index.js
-function normalizeRoute(route) {
-  try {
-    const parsed = new URL(route, "https://apilift.dev");
-    return parsed.pathname.replace(/^\/dashboard\/apps\/[^/]+/, "/dashboard/apps/:app").replace(uuid5, ":id").replace(longId, ":id");
-  } catch {
-    return "/invalid";
-  }
-}
-function scrubEventProperties(event, input2) {
-  const allowed = eventProperties[event];
-  const result3 = {};
-  for (const [key, value] of Object.entries(input2)) {
-    if (!allowed.includes(key))
-      continue;
-    const normalized = key === "route" && typeof value === "string" ? normalizeRoute(value) : value;
-    if (typeof normalized === "boolean" || typeof normalized === "number" && Number.isFinite(normalized) || typeof normalized === "string" && safeString.test(normalized))
-      result3[key] = normalized;
-  }
-  return result3;
-}
-var eventProperties, safeString, uuid5, longId;
-var init_analytics = __esm({
-  "../../packages/core/dist/analytics/index.js"() {
-    "use strict";
-    eventProperties = {
-      "$pageview": ["route"],
-      navigation_clicked: ["route", "target"],
-      pricing_viewed: ["route"],
-      catalog_viewed: ["route"],
-      app_page_viewed: ["route"],
-      onboarding_entered: ["route"],
-      broken_page_viewed: ["route"],
-      authentication_started: ["source", "stage"],
-      authentication_code_sent: ["source", "stage"],
-      authentication_completed: ["source", "stage"],
-      authentication_failed: ["source", "stage", "code"],
-      onboarding_attempt_started: ["attempt_id", "agent", "stage", "outcome", "source", "target"],
-      onboarding_stage_viewed: ["attempt_id", "agent", "stage"],
-      setup_prompt_copied: ["attempt_id", "agent", "stage"],
-      onboarding_next_action_selected: ["attempt_id", "agent", "target"],
-      onboarding_failed: ["stage", "attempt_id", "code", "outcome", "duration_ms"],
-      checkout_requested: ["plan", "interval", "stage", "source"],
-      checkout_ui_changed: ["plan", "interval", "stage", "source"],
-      billing_portal_requested: ["source"],
-      paid_feature_viewed: ["code", "route"],
-      paid_feature_upgrade_opened: ["code", "route"],
-      account_created: [],
-      account_deleted: [],
-      agent_selected: ["agent", "attempt_id", "status"],
-      device_authorization_changed: ["agent", "attempt_id", "status"],
-      onboarding_stage_completed: ["stage", "active", "agent"],
-      installation_readiness_changed: ["stage", "active", "agent"],
-      app_made_public: ["app_id"],
-      execution_finished: ["app_id", "action_id", "outcome", "duration_ms", "http_status", "agent", "purpose"],
-      activation_changed: ["activated"],
-      execution_classified: ["purpose", "revision"],
-      value_snapshot: ["saved_time_ms", "saved_tokens", "saved_value_microusd", "saved_time_ms_available", "saved_tokens_available", "saved_value_microusd_available"],
-      trial_started: ["plan", "trial_day", "trial_days_remaining", "outcome"],
-      trial_progress: ["plan", "trial_day", "trial_days_remaining", "outcome"],
-      trial_expired: ["plan", "trial_day", "trial_days_remaining", "outcome"],
-      trial_completed: ["plan", "trial_day", "trial_days_remaining", "outcome"],
-      payment_completed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
-      payment_status_changed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
-      payment_failed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
-      subscription_changed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
-      payment_adjusted: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
-      critical_failure: ["code", "count"],
-      cli_command_finished: ["command", "purpose", "outcome", "duration_ms", "stage", "agent"],
-      setup_stage_changed: ["stage", "agent"],
-      discovery_started: ["purpose", "agent"],
-      discovery_finished: ["purpose", "outcome", "duration_ms", "agent"],
-      client_exception: ["code"],
-      native_host_connected: [],
-      native_host_failure: ["code", "operation", "stage", "origin", "failure_count", "duration_ms"],
-      native_host_recovered: ["operation", "stage", "origin", "failure_count", "duration_ms"],
-      extension_installed: ["stage"],
-      extension_connected: ["stage"],
-      extension_disconnected: ["stage"],
-      extension_failure: ["code"],
-      extension_interaction: ["stage", "outcome"],
-      credential_setup_finished: ["stage", "outcome", "code"],
-      "$exception": ["route", "method", "exception_type", "exception_frames", "exception_handled", "exception_level"]
     };
-    safeString = /^[a-zA-Z0-9_./:{} -]{1,160}$/;
-    uuid5 = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
-    longId = /\b[a-zA-Z0-9_-]{24,}\b/g;
-  }
-});
-
-// src/analytics.ts
-import { randomUUID as randomUUID10 } from "node:crypto";
-var EVENT, EU_HOST, CliAnalytics;
-var init_analytics2 = __esm({
-  "src/analytics.ts"() {
-    "use strict";
-    init_analytics();
-    init_api2();
-    init_api3();
-    EVENT = /* @__PURE__ */ new Set(["cli_command_finished", "setup_stage_changed", "onboarding_failed", "discovery_started", "discovery_finished", "client_exception"]);
-    EU_HOST = "https://eu.i.posthog.com";
-    CliAnalytics = class {
-      constructor(state, release = "1.0.0", fetcher = fetch) {
-        this.state = state;
-        this.release = release;
-        this.fetcher = fetcher;
-        state.db.exec("CREATE TABLE IF NOT EXISTS cli_analytics_identity (id INTEGER PRIMARY KEY CHECK(id=1), json TEXT NOT NULL, refreshed_at INTEGER NOT NULL)");
-        state.db.exec("CREATE TABLE IF NOT EXISTS cli_analytics_queue (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, event TEXT NOT NULL, properties_json TEXT NOT NULL, occurred_at TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, next_attempt_at INTEGER NOT NULL DEFAULT 0)");
-        state.db.exec("CREATE TABLE IF NOT EXISTS cli_onboarding_attempt (id INTEGER PRIMARY KEY CHECK(id=1), attempt_id TEXT NOT NULL, account_id TEXT NOT NULL)");
+    LINE_SEPARATOR_REGEX = /\r?\n/;
+    defaultOptions = {
+      timeout: void 0,
+      persist: false
+    };
+    defaultSyncOptions = { timeout: void 0 };
+    defaultNodeOptions = { windowsHide: true };
+    ExecProcess = class {
+      _process;
+      _aborted = false;
+      _options;
+      _command;
+      _args;
+      _resolveClose;
+      _processClosed;
+      _thrownError;
+      get process() {
+        return this._process;
       }
-      saveOnboardingAttempt(attemptId) {
-        const installation = this.state.installation();
-        if (!installation) return;
-        this.state.db.prepare("INSERT INTO cli_onboarding_attempt (id,attempt_id,account_id) VALUES (1,?,?) ON CONFLICT(id) DO UPDATE SET attempt_id=excluded.attempt_id,account_id=excluded.account_id").run(attemptId, installation.accountId);
+      get pid() {
+        return this._process?.pid;
       }
-      onboardingAttempt() {
-        const installation = this.state.installation();
-        if (!installation) return null;
-        const row = this.state.db.prepare("SELECT attempt_id FROM cli_onboarding_attempt WHERE id=1 AND account_id=?").get(installation.accountId);
-        return row?.attempt_id ?? null;
+      get exitCode() {
+        if (this._process && this._process.exitCode !== null) return this._process.exitCode;
       }
-      identity() {
-        const row = this.state.db.prepare("SELECT json FROM cli_analytics_identity WHERE id=1").get();
-        if (!row) return null;
-        try {
-          const identity2 = JSON.parse(row.json);
-          const installation = this.state.installation();
-          return installation && identity2.expiresAt > Date.now() && identity2.accountId === installation.accountId && identity2.workspaceId === installation.workspaceId && identity2.installationId === installation.id ? identity2 : null;
-        } catch {
-          return null;
-        }
+      get signalCode() {
+        return this._process?.signalCode ?? null;
       }
-      updateIdentity(me2, now = Date.now()) {
-        const previous = this.identity();
-        const next = { accountId: me2.account.id, workspaceId: me2.workspace.id, installationId: me2.installation.id, ...me2.analytics, enabled: me2.analytics.enabled && me2.analytics.environment !== "disabled" && me2.analytics.host === EU_HOST && /^phc_[A-Za-z0-9]+$/u.test(me2.analytics.projectKey), expiresAt: now + 24 * 60 * 6e4 };
-        if (!next.enabled || previous && previous.accountId !== next.accountId) this.state.db.exec("DELETE FROM cli_analytics_queue");
-        this.state.db.prepare("INSERT INTO cli_analytics_identity (id,json,refreshed_at) VALUES (1,?,?) ON CONFLICT(id) DO UPDATE SET json=excluded.json,refreshed_at=excluded.refreshed_at").run(JSON.stringify(next), now);
-        this.state.db.prepare("DELETE FROM cli_analytics_queue WHERE account_id<>? OR occurred_at<?").run(next.accountId, new Date(now - 7 * 864e5).toISOString());
+      constructor(command6, args, options2) {
+        this._options = {
+          ...defaultOptions,
+          ...options2
+        };
+        this._command = command6;
+        this._args = args ?? [];
+        this._processClosed = new Promise((resolve6) => {
+          this._resolveClose = resolve6;
+        });
       }
-      async refresh(site, now = Date.now()) {
-        const installation = this.state.installation();
-        if (!installation) return "unavailable";
-        const last = this.state.db.prepare("SELECT refreshed_at FROM cli_analytics_identity WHERE id=1").get();
-        if (last && now - last.refreshed_at < 5 * 6e4 && this.identity()) return "ok";
-        try {
-          this.updateIdentity(await createCliApi(site, this.fetcher, installation.token).call("me"), now);
-          return "ok";
-        } catch (error62) {
-          if (error62 instanceof ApiClientError && error62.response?.error?.code === "installation-revoked") {
-            this.state.db.exec("DELETE FROM cli_analytics_queue; DELETE FROM cli_analytics_identity");
-            return "revoked";
-          }
-          return "unavailable";
-        }
+      kill(signal) {
+        return this._process?.kill(signal) === true;
+      }
+      get aborted() {
+        return this._aborted;
+      }
+      get killed() {
+        return this._process?.killed === true;
+      }
+      pipe(command6, args, options2) {
+        return exec(command6, args, {
+          ...options2,
+          stdin: this
+        });
+      }
+      async *[Symbol.asyncIterator]() {
+        const proc = this._process;
+        if (!proc) return;
+        const streams = [];
+        if (this._streamErr) streams.push(this._streamErr);
+        if (this._streamOut) streams.push(this._streamOut);
+        const streamCombined = combineStreams(streams);
+        const rl = readline.createInterface({ input: streamCombined });
+        for await (const chunk of rl) yield chunk.toString();
+        await this._processClosed;
+        proc.removeAllListeners();
+        if (this._thrownError) throw this._thrownError;
+        if (this._options?.throwOnError && (this.exitCode !== 0 && this.exitCode !== void 0 || this.signalCode !== null)) throw new NonZeroExitError(this, void 0, this._command, this._args);
+      }
+      async _waitForOutput() {
+        const proc = this._process;
+        if (!proc) throw new Error("No process was started");
+        const [stdout, stderr] = await Promise.all([this._streamOut ? readStream(this._streamOut) : "", this._streamErr ? readStream(this._streamErr) : ""]);
+        await this._processClosed;
+        const { stdin } = this._options;
+        if (stdin && typeof stdin !== "string") await stdin;
+        proc.removeAllListeners();
+        if (this._thrownError) throw this._thrownError;
+        const result3 = {
+          stderr,
+          stdout,
+          exitCode: this.exitCode
+        };
+        if (this._options.throwOnError && (this.exitCode !== 0 && this.exitCode !== void 0 || this.signalCode !== null)) throw new NonZeroExitError(this, result3, this._command, this._args);
+        return result3;
       }
-      record(event, values = {}) {
-        if (!EVENT.has(event)) return;
-        const installation = this.state.installation();
-        if (!installation) return;
-        const identity2 = this.identity();
-        if (identity2 && !identity2.enabled) return;
-        this.state.db.prepare("INSERT INTO cli_analytics_queue (id,account_id,event,properties_json,occurred_at) VALUES (?,?,?,?,?)").run(randomUUID10(), installation.accountId, event, JSON.stringify(scrubEventProperties(event, values)), (/* @__PURE__ */ new Date()).toISOString());
-        this.state.db.exec("DELETE FROM cli_analytics_queue WHERE id IN (SELECT id FROM cli_analytics_queue ORDER BY occurred_at DESC LIMIT -1 OFFSET 1000)");
+      then(onfulfilled, onrejected) {
+        return this._waitForOutput().then(onfulfilled, onrejected);
       }
-      async flush() {
-        const identity2 = this.identity();
-        if (!identity2?.enabled) return;
-        const rows = this.state.db.prepare("SELECT id,account_id,event,properties_json,occurred_at,attempts FROM cli_analytics_queue WHERE account_id=? AND next_attempt_at<=? ORDER BY occurred_at,id LIMIT 50").all(identity2.accountId, Date.now());
-        if (!rows.length) return;
-        const batch = rows.map((row) => ({ uuid: row.id, event: row.event, distinct_id: identity2.accountId, timestamp: row.occurred_at, properties: { ...JSON.parse(row.properties_json), schema_version: "apilift.analytics/v1", environment: identity2.environment, component: "cli", release: this.release, account_id: identity2.accountId, workspace_id: identity2.workspaceId, installation_id: identity2.installationId, is_internal: identity2.internal, $geoip_disable: true } }));
-        let sent = false;
-        try {
-          sent = (await this.fetcher(`${identity2.host}/batch/`, { method: "POST", redirect: "error", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ api_key: identity2.projectKey, batch }), signal: AbortSignal.timeout(2e3) })).ok;
-        } catch {
-        }
-        for (const row of rows) {
-          if (sent) this.state.db.prepare("DELETE FROM cli_analytics_queue WHERE id=?").run(row.id);
-          else this.state.db.prepare("UPDATE cli_analytics_queue SET attempts=?,next_attempt_at=? WHERE id=?").run(Math.min(20, row.attempts + 1), Date.now() + Math.min(3600, 2 ** (row.attempts + 1)) * 1e3, row.id);
+      _streamOut;
+      _streamErr;
+      spawn() {
+        const options2 = this._options;
+        const nodeOptions = {
+          ...defaultNodeOptions,
+          ...options2.nodeOptions
+        };
+        const cwd$1 = nodeOptions?.cwd ?? cwd();
+        const signals = [];
+        this._resetState();
+        if (options2.timeout !== void 0) signals.push(AbortSignal.timeout(options2.timeout));
+        if (options2.signal !== void 0) signals.push(options2.signal);
+        if (options2.persist === true) nodeOptions.detached = true;
+        if (signals.length > 0) nodeOptions.signal = combineSignals(signals);
+        nodeOptions.env = computeEnv(cwd$1, nodeOptions.env, options2.nodePath);
+        const crossResult = normalizeSpawnCommand(this._command, this._args, nodeOptions);
+        const handle2 = spawn2(crossResult.command, crossResult.args, crossResult.options);
+        if (handle2.stderr) this._streamErr = handle2.stderr;
+        if (handle2.stdout) this._streamOut = handle2.stdout;
+        this._process = handle2;
+        handle2.once("error", this._onError);
+        handle2.once("close", this._onClose);
+        if (handle2.stdin) {
+          const { stdin } = options2;
+          if (typeof stdin === "string") handle2.stdin.end(stdin);
+          else stdin?.process?.stdout?.pipe(handle2.stdin);
         }
       }
+      _resetState() {
+        this._aborted = false;
+        this._processClosed = new Promise((resolve6) => {
+          this._resolveClose = resolve6;
+        });
+        this._thrownError = void 0;
+      }
+      _onError = (err) => {
+        if (err.name === "AbortError" && (!(err.cause instanceof Error) || err.cause.name !== "TimeoutError")) {
+          this._aborted = true;
+          return;
+        }
+        this._thrownError = err;
+      };
+      _onClose = () => {
+        if (this._resolveClose) this._resolveClose();
+      };
+    };
+    x = (command6, args, userOptions) => {
+      const proc = new ExecProcess(command6, args, userOptions);
+      proc.spawn();
+      return proc;
     };
+    exec = x;
   }
 });
 
-// src/usage/process.ts
-import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync5 } from "node:fs";
+// src/plugin.ts
+import { createHash as createHash5 } from "node:crypto";
+import { cpSync, existsSync as existsSync4, mkdirSync as mkdirSync9, readFileSync as readFileSync9, readdirSync, renameSync as renameSync3, rmSync as rmSync4, writeFileSync as writeFileSync8 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { dirname as dirname7, join as join13, resolve as resolve3 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-function startCollector(env) {
-  if (process.env.VITEST || env.VITEST || env.APILIFT_COLLECTOR_DISABLED === "1") return;
-  const entry2 = fileURLToPath2(new URL("./apilift-collector.js", import.meta.url));
-  if (!existsSync5(entry2)) return;
+function missingSkill(root) {
+  return skillNames.find((name) => !existsSync4(join13(root, "skills", name, "SKILL.md")));
+}
+function completeCopy(source, target) {
+  return files(source).every((path2) => existsSync4(join13(target, path2)));
+}
+function files(root, relative = "") {
+  return readdirSync(join13(root, relative), { withFileTypes: true }).flatMap((entry2) => {
+    const path2 = join13(relative, entry2.name);
+    return entry2.isDirectory() ? files(root, path2) : [path2];
+  }).sort();
+}
+function digest(root) {
+  const hash4 = createHash5("sha256");
+  for (const path2 of files(root)) hash4.update(path2).update("\0").update(readFileSync9(join13(root, path2))).update("\0");
+  return hash4.digest("hex");
+}
+function writeJson(path2, value) {
+  mkdirSync9(dirname7(path2), { recursive: true });
+  writeFileSync8(path2, `${JSON.stringify(value, null, 2)}
+`, { mode: 384 });
+}
+function readJson(path2) {
   try {
-    spawn2(process.execPath, [entry2], { detached: true, stdio: "ignore", env }).unref();
+    return JSON.parse(readFileSync9(path2, "utf8"));
   } catch {
+    return null;
   }
 }
-var init_process = __esm({
-  "src/usage/process.ts"() {
-    "use strict";
-  }
-});
-
-// ../../node_modules/.pnpm/tinyexec@1.3.1/node_modules/tinyexec/dist/main.mjs
-import { spawn as spawn3, spawnSync } from "node:child_process";
-import { cwd } from "node:process";
-import { basename, delimiter, dirname as dirname7, normalize, resolve as resolve3 } from "node:path";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
-import { pipeline } from "node:stream/promises";
-import { PassThrough } from "node:stream";
-import readline from "node:readline";
-import { closeSync, openSync, readSync, statSync } from "node:fs";
-function getPathFromEnv(env) {
-  for (const key in env) {
-    if (!Object.prototype.hasOwnProperty.call(env, key) || !isPathLikePattern.test(key)) continue;
-    const value = env[key];
-    if (!value) return defaultEnvPathInfo;
-    return {
-      key,
-      value
-    };
+function command5(binary, args) {
+  const { stdout: output2 } = xSync(binary, args, { timeout: 1e4, throwOnError: true, nodeOptions: { windowsHide: true, stdio: ["ignore", "pipe", "pipe"] } });
+  try {
+    return JSON.parse(output2);
+  } catch {
+    return output2;
   }
-  return defaultEnvPathInfo;
 }
-function addNodeBinToPath(cwd2, path2) {
-  const parts = path2.value.split(delimiter);
-  const nodeBinPaths = [];
-  let currentPath = typeof cwd2 === "string" ? cwd2 : fileURLToPath3(cwd2, { windows: false });
-  let lastPath;
-  do {
-    nodeBinPaths.push(resolve3(currentPath, "node_modules", ".bin"));
-    lastPath = currentPath;
-    currentPath = dirname7(currentPath);
-  } while (currentPath !== lastPath);
-  nodeBinPaths.push(dirname7(process.execPath));
-  const newPath = nodeBinPaths.concat(parts).join(delimiter);
-  return {
-    key: path2.key,
-    value: newPath
-  };
+function active(agent2, expected) {
+  const args = agent2 === "codex" ? ["plugin", "list", "--marketplace", "personal", "--json"] : ["plugin", "list", "--json"];
+  try {
+    const listed = command5(agent2, args);
+    const entries = agent2 === "codex" ? listed?.installed : listed;
+    if (!Array.isArray(entries) || entries.some((entry2) => typeof entry2 !== "object" || entry2 === null || typeof (agent2 === "codex" ? entry2.pluginId : entry2.id) !== "string")) return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: plugin list returned an unexpected response` };
+    const plugin = entries.find((entry2) => (agent2 === "codex" ? entry2.pluginId : entry2.id) === "apilift@personal");
+    if (!plugin) return { ready: false, known: true, detail: "Apilift is not installed in this agent" };
+    if (typeof plugin.enabled !== "boolean" || typeof plugin.version !== "string") return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: Apilift status is incomplete` };
+    if (!plugin.enabled) return { ready: false, known: true, detail: "Apilift is disabled in this agent" };
+    if (plugin.version !== expected) return { ready: false, known: true, detail: "The active Apilift plugin does not match the packaged version" };
+    return { ready: true, known: true, detail: "Apilift setup, use and discovery skills are active" };
+  } catch (error62) {
+    const code = typeof error62 === "object" && error62 && "code" in error62 ? error62.code : void 0;
+    const reason = code === "ETIMEDOUT" ? "plugin list timed out after 10 seconds" : code === "ENOENT" ? `${agent2} executable was not found` : "plugin list failed";
+    return { ready: false, known: false, detail: `${agent2} plugin status could not be checked: ${reason}` };
+  }
 }
-function computeEnv(cwd2, env, nodePath = true) {
-  const envWithDefault = {
-    ...process.env,
-    ...env
-  };
-  if (!nodePath) return envWithDefault;
-  const envPathInfo = addNodeBinToPath(cwd2, getPathFromEnv(envWithDefault));
-  envWithDefault[envPathInfo.key] = envPathInfo.value;
-  return envWithDefault;
+function inspectAgentPlugin(agent2, env, sourceOverride) {
+  if (env.APILIFT_DEV_PLUGIN_ROOT) return { ready: false, version: "development", detail: "Development plugin activation has not been verified" };
+  const source = resolve3(sourceOverride || join13(dirname7(fileURLToPath2(import.meta.url)), "plugin"));
+  const missing = missingSkill(source);
+  if (missing) return { ready: false, version: "unknown", detail: `CLI package is missing its ${missing} skill` };
+  const version2 = readJson(join13(source, `.${agent2}-plugin`, "plugin.json"))?.version;
+  if (typeof version2 !== "string" || !/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/.test(version2)) throw new Error("Plugin package version is invalid");
+  const bundleDigest = digest(source);
+  const expected = agent2 === "codex" ? `${version2}+codex.${bundleDigest.slice(0, 12)}` : version2;
+  const home = resolve3(env.APILIFT_AGENT_HOME || homedir2());
+  const plugin = agent2 === "codex" ? join13(home, "plugins", "apilift") : join13(home, ".agents", "plugins", "plugins", "apilift");
+  const marker = readJson(join13(plugin, markerName));
+  const staged = marker?.package === "apilift" && marker.bundleDigest === bundleDigest && marker.version === version2 && completeCopy(source, plugin);
+  if (!staged) return { ready: false, version: expected, detail: "Apilift plugin files are missing or stale" };
+  if (env.APILIFT_AGENT_HOME || env.APILIFT_AGENT_NO_ACTIVATE === "1") return { ready: false, version: expected, detail: "Apilift skills are staged; activation is unverified" };
+  const activation = active(agent2, expected);
+  return { ready: activation.ready, version: expected, detail: activation.detail, checkFailed: !activation.known };
 }
-function normalizeSpawnCommand(command6, args = [], options2 = {}) {
-  if (options2.shell === true || !isWindows) return {
-    command: command6,
-    args,
-    options: options2
-  };
-  let file2 = resolveCommand(command6, options2);
-  let shebang = null;
-  if (file2 !== null) {
-    const size = 150;
-    const buffer = Buffer.alloc(size);
-    let fd = null;
-    try {
-      fd = openSync(file2, "r");
-      readSync(fd, buffer, 0, size, 0);
-    } catch {
-    } finally {
-      if (fd !== null) closeSync(fd);
-    }
-    const match = buffer.toString().match(shebangRegExp);
-    if (match !== null) {
-      const line = match[1].trim();
-      const separatorIndex = line.indexOf(" ");
-      const path2 = separatorIndex !== -1 ? line.slice(0, separatorIndex) : line;
-      const argument = separatorIndex !== -1 ? line.slice(separatorIndex + 1) : "";
-      const binary = basename(path2);
-      shebang = binary === "env" ? argument || null : binary;
-    }
-  }
-  if (shebang !== null && file2 !== null) {
-    args = [file2, ...args];
-    command6 = shebang;
-    file2 = resolveCommand(command6, options2);
+function ensureAgentPlugin(agent2, env, sourceOverride) {
+  if (env.APILIFT_DEV_PLUGIN_ROOT) {
+    const source2 = resolve3(env.APILIFT_DEV_PLUGIN_ROOT);
+    const missing2 = missingSkill(source2);
+    if (missing2) throw new Error(`Development plugin ${missing2} skill is missing`);
+    const bundleDigest2 = digest(source2);
+    const root = resolve3(env.APILIFT_HOME || join13(homedir2(), ".local", "share", "apilift"));
+    writeJson(join13(root, "agent-plugins", `${agent2}.json`), { root: source2, digest: bundleDigest2 });
+    return { ready: false, version: `dev+${bundleDigest2.slice(0, 12)}`, detail: "Development plugin source recorded; activation was not verified" };
   }
-  if (file2 === null || !isWindowsExecutableRegExp.test(file2)) {
-    const needsDoubleEscapeMetaChars = file2 !== null && isNodeModulesCmdRegExp.test(file2);
-    command6 = normalize(command6);
-    command6 = command6.replace(metaCharsRegExp, "^$1");
-    args = args.map((arg) => {
-      arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
-      arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
-      arg = `"${arg}"`;
-      arg = arg.replace(metaCharsRegExp, "^$1");
-      if (needsDoubleEscapeMetaChars) arg = arg.replace(metaCharsRegExp, "^$1");
-      return arg;
-    });
-    args = [
-      "/d",
-      "/s",
-      "/c",
-      `"${[command6, ...args].join(" ")}"`
-    ];
-    command6 = options2.env?.comspec ?? "cmd.exe";
-    options2 = {
-      ...options2,
-      windowsVerbatimArguments: true
-    };
+  const source = resolve3(sourceOverride || join13(dirname7(fileURLToPath2(import.meta.url)), "plugin"));
+  const missing = missingSkill(source);
+  if (missing) throw new Error(`CLI package is missing its ${missing} skill`);
+  const version2 = readJson(join13(source, `.${agent2}-plugin`, "plugin.json"))?.version;
+  if (typeof version2 !== "string" || !/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/.test(version2)) throw new Error("Plugin package version is invalid");
+  const bundleDigest = digest(source);
+  const home = resolve3(env.APILIFT_AGENT_HOME || homedir2());
+  const marketplace = join13(home, ".agents", "plugins");
+  const plugin = agent2 === "codex" ? join13(home, "plugins", "apilift") : join13(marketplace, "plugins", "apilift");
+  const marker = readJson(join13(plugin, markerName));
+  if (existsSync4(plugin) && marker?.package !== "apilift") throw new Error(`Refusing to replace unmanaged plugin ${plugin}`);
+  const expected = agent2 === "codex" ? `${version2}+codex.${bundleDigest.slice(0, 12)}` : version2;
+  const current = marker?.bundleDigest === bundleDigest && marker.version === version2 && completeCopy(source, plugin);
+  if (!current) {
+    const staging = `${plugin}.stage-${process.pid}`;
+    rmSync4(staging, { recursive: true, force: true });
+    mkdirSync9(dirname7(staging), { recursive: true });
+    cpSync(source, staging, { recursive: true });
+    const manifestPath = join13(staging, `.${agent2}-plugin`, "plugin.json");
+    const manifest = readJson(manifestPath);
+    if (!manifest) throw new Error("Plugin manifest is invalid");
+    manifest.version = expected;
+    writeJson(manifestPath, manifest);
+    writeJson(join13(staging, markerName), { schema: "apilift.plugin-install/v1", package: "apilift", version: version2, bundleDigest });
+    const backup = `${plugin}.backup-${process.pid}`;
+    if (existsSync4(plugin)) renameSync3(plugin, backup);
+    try {
+      renameSync3(staging, plugin);
+    } catch (error62) {
+      if (existsSync4(backup)) renameSync3(backup, plugin);
+      throw error62;
+    }
+    rmSync4(backup, { recursive: true, force: true });
   }
-  return {
-    command: command6,
-    args,
-    options: options2
-  };
-}
-function resolveCommand(command6, options2) {
-  const cwd$3 = (options2.cwd ?? cwd()).toString();
-  const env = options2.env ?? process.env;
-  const PATH = getPathFromEnv(env).value;
-  const pathEnv = command6.includes("/") || command6.includes("\\") ? [""] : [cwd$3, ...PATH.split(delimiter)];
-  let pathExt = env.PATHEXT ? env.PATHEXT.split(delimiter) : defaultPathExt;
-  if (command6.includes(".") && pathExt[0] !== "") pathExt = ["", ...pathExt];
-  for (const extensions of [pathExt, noPathExt]) for (const path2 of pathEnv) {
-    const unquoted = path2.startsWith('"') && path2.endsWith('"') && path2.length > 1 ? path2.slice(1, -1) : path2;
-    const dest = resolve3(cwd$3, unquoted, command6);
-    for (const ext of extensions) {
-      const destWithExt = dest + ext;
+  const marketplacePath = join13(marketplace, "marketplace.json");
+  const document = readJson(marketplacePath) ?? { name: "personal", interface: { displayName: "Personal" }, plugins: [] };
+  if (document.name !== "personal" || !Array.isArray(document.plugins)) throw new Error("Unsupported personal plugin marketplace");
+  document.plugins = [...document.plugins.filter((item) => typeof item === "object" && item !== null && item.name !== "apilift"), { name: "apilift", source: { source: "local", path: "./plugins/apilift" }, policy: { installation: "AVAILABLE", authentication: "ON_INSTALL" }, category: "Developer Tools" }];
+  writeJson(marketplacePath, document);
+  writeJson(join13(marketplace, ".claude-plugin", "marketplace.json"), { "$schema": "https://anthropic.com/claude-code/marketplace.schema.json", name: "personal", description: "Personal agent plugins", owner: { name: "Local" }, plugins: [{ name: "apilift", description: "Use logged-in apps and discover missing actions with Apilift", source: "./plugins/apilift", category: "development" }] });
+  if (env.APILIFT_AGENT_HOME || env.APILIFT_AGENT_NO_ACTIVATE === "1") return { ready: false, version: expected, detail: `Plugin staged at ${plugin}; activation is disabled` };
+  const initial = active(agent2, expected);
+  if (!initial.known) return { ready: false, version: expected, detail: initial.detail, checkFailed: true };
+  if (initial.ready) return { ready: true, version: expected, detail: initial.detail };
+  {
+    if (agent2 === "codex") command5("codex", ["plugin", "add", "apilift@personal"]);
+    else {
+      let marketplaces;
       try {
-        if (statSync(destWithExt).isFile()) return destWithExt;
+        marketplaces = command5("claude", ["plugin", "marketplace", "list", "--json"]);
       } catch {
+        marketplaces = [];
       }
+      if (!Array.isArray(marketplaces) || !marketplaces.some((item) => typeof item === "object" && item !== null && item.name === "personal")) command5("claude", ["plugin", "marketplace", "add", marketplace, "--scope", "user"]);
+      const listed = command5("claude", ["plugin", "list", "--json"]);
+      const installed = Array.isArray(listed) && listed.some((item) => typeof item === "object" && item !== null && item.id === "apilift@personal");
+      command5("claude", ["plugin", installed ? "update" : "install", "apilift@personal", "--scope", "user"]);
+      command5("claude", ["plugin", "enable", "apilift@personal", "--scope", "user"]);
     }
   }
-  return null;
+  const activation = active(agent2, expected);
+  return { ready: activation.ready, version: expected, detail: activation.detail, checkFailed: !activation.known };
 }
-function combineSignals(signals) {
-  const controller = new AbortController();
-  for (const signal of signals) {
-    if (signal.aborted) {
-      controller.abort();
-      return signal;
-    }
-    const onAbort = () => {
-      controller.abort(signal.reason);
-    };
-    signal.addEventListener("abort", onAbort, { signal: controller.signal });
+var markerName, skillNames;
+var init_plugin = __esm({
+  "src/plugin.ts"() {
+    "use strict";
+    init_main2();
+    markerName = ".apilift-managed.json";
+    skillNames = ["setup", "use", "discover"];
   }
-  return controller.signal;
-}
-async function readStream(stream) {
-  let output2 = "";
+});
+
+// ../../packages/core/dist/analytics/index.js
+function normalizeRoute(route) {
   try {
-    for await (const chunk of stream) output2 += chunk.toString();
+    const parsed = new URL(route, "https://apilift.dev");
+    return parsed.pathname.replace(/^\/dashboard\/apps\/[^/]+/, "/dashboard/apps/:app").replace(uuid5, ":id").replace(longId, ":id");
   } catch {
+    return "/invalid";
   }
-  return output2;
 }
-var isPathLikePattern, defaultEnvPathInfo, combineStreams, metaCharsRegExp, shebangRegExp, isWindowsExecutableRegExp, isNodeModulesCmdRegExp, isWindows, defaultPathExt, noPathExt, NonZeroExitError, defaultOptions, defaultNodeOptions, ExecProcess, x, exec;
-var init_main2 = __esm({
-  "../../node_modules/.pnpm/tinyexec@1.3.1/node_modules/tinyexec/dist/main.mjs"() {
-    isPathLikePattern = /^path$/i;
-    defaultEnvPathInfo = {
-      key: "PATH",
-      value: ""
-    };
-    combineStreams = (streams) => {
-      let streamCount = streams.length;
-      const combined = new PassThrough();
-      const maybeEmitEnd = () => {
-        if (--streamCount === 0) combined.end();
-      };
-      for (const stream of streams) pipeline(stream, combined, { end: false }).then(maybeEmitEnd).catch(maybeEmitEnd);
-      return combined;
-    };
-    metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
-    shebangRegExp = /^#!\s*(.+)/;
-    isWindowsExecutableRegExp = /\.(?:com|exe)$/i;
-    isNodeModulesCmdRegExp = /node_modules[\\/]\.bin[\\/][^\\/]+\.cmd$/i;
-    isWindows = process.platform === "win32";
-    defaultPathExt = [
-      ".EXE",
-      ".CMD",
-      ".BAT",
-      ".COM"
-    ];
-    noPathExt = [""];
-    NonZeroExitError = class extends Error {
-      result;
-      output;
-      exitCode;
-      get signalCode() {
-        return this.result.signalCode;
-      }
-      constructor(result3, output2, command6, args) {
-        let target = "The process";
-        if (command6) target = `The command \`${args?.length ? `${command6} ${args.map((a) => /[ "'`()]/.test(a) ? JSON.stringify(a) : a).join(" ")}` : command6}\``;
-        const exitCode = result3.exitCode ?? 1;
-        super(result3.signalCode !== null ? `${target} was killed by the signal ${result3.signalCode}` : `${target} exited with a non-zero status (${exitCode})`);
-        this.result = result3;
-        this.output = output2;
-        this.exitCode = exitCode;
-        Object.defineProperty(this, "result", {
-          enumerable: false,
-          writable: false,
-          configurable: false
-        });
-      }
-    };
-    defaultOptions = {
-      timeout: void 0,
-      persist: false
-    };
-    defaultNodeOptions = { windowsHide: true };
-    ExecProcess = class {
-      _process;
-      _aborted = false;
-      _options;
-      _command;
-      _args;
-      _resolveClose;
-      _processClosed;
-      _thrownError;
-      get process() {
-        return this._process;
-      }
-      get pid() {
-        return this._process?.pid;
-      }
-      get exitCode() {
-        if (this._process && this._process.exitCode !== null) return this._process.exitCode;
-      }
-      get signalCode() {
-        return this._process?.signalCode ?? null;
-      }
-      constructor(command6, args, options2) {
-        this._options = {
-          ...defaultOptions,
-          ...options2
-        };
-        this._command = command6;
-        this._args = args ?? [];
-        this._processClosed = new Promise((resolve6) => {
-          this._resolveClose = resolve6;
-        });
-      }
-      kill(signal) {
-        return this._process?.kill(signal) === true;
-      }
-      get aborted() {
-        return this._aborted;
-      }
-      get killed() {
-        return this._process?.killed === true;
+function scrubEventProperties(event, input2) {
+  const allowed = eventProperties[event];
+  const result3 = {};
+  for (const [key, value] of Object.entries(input2)) {
+    if (!allowed.includes(key))
+      continue;
+    const normalized = key === "route" && typeof value === "string" ? normalizeRoute(value) : value;
+    if (typeof normalized === "boolean" || typeof normalized === "number" && Number.isFinite(normalized) || typeof normalized === "string" && safeString.test(normalized))
+      result3[key] = normalized;
+  }
+  return result3;
+}
+var eventProperties, safeString, uuid5, longId;
+var init_analytics = __esm({
+  "../../packages/core/dist/analytics/index.js"() {
+    "use strict";
+    eventProperties = {
+      "$pageview": ["route"],
+      navigation_clicked: ["route", "target"],
+      pricing_viewed: ["route"],
+      catalog_viewed: ["route"],
+      app_page_viewed: ["route"],
+      onboarding_entered: ["route"],
+      broken_page_viewed: ["route"],
+      authentication_started: ["source", "stage"],
+      authentication_code_sent: ["source", "stage"],
+      authentication_completed: ["source", "stage"],
+      authentication_failed: ["source", "stage", "code"],
+      onboarding_attempt_started: ["attempt_id", "agent", "stage", "outcome", "source", "target"],
+      onboarding_stage_viewed: ["attempt_id", "agent", "stage"],
+      setup_prompt_copied: ["attempt_id", "agent", "stage"],
+      onboarding_next_action_selected: ["attempt_id", "agent", "target"],
+      onboarding_failed: ["stage", "attempt_id", "code", "outcome", "duration_ms"],
+      checkout_requested: ["plan", "interval", "stage", "source"],
+      checkout_ui_changed: ["plan", "interval", "stage", "source"],
+      billing_portal_requested: ["source"],
+      paid_feature_viewed: ["code", "route"],
+      paid_feature_upgrade_opened: ["code", "route"],
+      account_created: [],
+      account_deleted: [],
+      agent_selected: ["agent", "attempt_id", "status"],
+      device_authorization_changed: ["agent", "attempt_id", "status"],
+      onboarding_stage_completed: ["stage", "active", "agent"],
+      installation_readiness_changed: ["stage", "active", "agent"],
+      app_made_public: ["app_id"],
+      execution_finished: ["app_id", "action_id", "outcome", "duration_ms", "http_status", "agent", "purpose"],
+      activation_changed: ["activated"],
+      execution_classified: ["purpose", "revision"],
+      value_snapshot: ["saved_time_ms", "saved_tokens", "saved_value_microusd", "saved_time_ms_available", "saved_tokens_available", "saved_value_microusd_available"],
+      trial_started: ["plan", "trial_day", "trial_days_remaining", "outcome"],
+      trial_progress: ["plan", "trial_day", "trial_days_remaining", "outcome"],
+      trial_expired: ["plan", "trial_day", "trial_days_remaining", "outcome"],
+      trial_completed: ["plan", "trial_day", "trial_days_remaining", "outcome"],
+      payment_completed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
+      payment_status_changed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
+      payment_failed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
+      subscription_changed: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
+      payment_adjusted: ["plan", "interval", "status", "previous_status", "currency", "amount", "billing_environment", "synthetic"],
+      critical_failure: ["code", "count"],
+      cli_command_finished: ["command", "purpose", "outcome", "duration_ms", "stage", "agent"],
+      setup_stage_changed: ["stage", "agent"],
+      discovery_started: ["purpose", "agent"],
+      discovery_finished: ["purpose", "outcome", "duration_ms", "agent"],
+      client_exception: ["code"],
+      native_host_connected: [],
+      native_host_failure: ["code", "operation", "stage", "origin", "failure_count", "duration_ms"],
+      native_host_recovered: ["operation", "stage", "origin", "failure_count", "duration_ms"],
+      extension_installed: ["stage"],
+      extension_connected: ["stage"],
+      extension_disconnected: ["stage"],
+      extension_failure: ["code"],
+      extension_interaction: ["stage", "outcome"],
+      credential_setup_finished: ["stage", "outcome", "code"],
+      "$exception": ["route", "method", "exception_type", "exception_frames", "exception_handled", "exception_level"]
+    };
+    safeString = /^[a-zA-Z0-9_./:{} -]{1,160}$/;
+    uuid5 = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+    longId = /\b[a-zA-Z0-9_-]{24,}\b/g;
+  }
+});
+
+// src/analytics.ts
+import { randomUUID as randomUUID10 } from "node:crypto";
+var EVENT, EU_HOST, CliAnalytics;
+var init_analytics2 = __esm({
+  "src/analytics.ts"() {
+    "use strict";
+    init_analytics();
+    init_api2();
+    init_api3();
+    EVENT = /* @__PURE__ */ new Set(["cli_command_finished", "setup_stage_changed", "onboarding_failed", "discovery_started", "discovery_finished", "client_exception"]);
+    EU_HOST = "https://eu.i.posthog.com";
+    CliAnalytics = class {
+      constructor(state, release = "1.0.0", fetcher = fetch) {
+        this.state = state;
+        this.release = release;
+        this.fetcher = fetcher;
+        state.db.exec("CREATE TABLE IF NOT EXISTS cli_analytics_identity (id INTEGER PRIMARY KEY CHECK(id=1), json TEXT NOT NULL, refreshed_at INTEGER NOT NULL)");
+        state.db.exec("CREATE TABLE IF NOT EXISTS cli_analytics_queue (id TEXT PRIMARY KEY, account_id TEXT NOT NULL, event TEXT NOT NULL, properties_json TEXT NOT NULL, occurred_at TEXT NOT NULL, attempts INTEGER NOT NULL DEFAULT 0, next_attempt_at INTEGER NOT NULL DEFAULT 0)");
+        state.db.exec("CREATE TABLE IF NOT EXISTS cli_onboarding_attempt (id INTEGER PRIMARY KEY CHECK(id=1), attempt_id TEXT NOT NULL, account_id TEXT NOT NULL)");
       }
-      pipe(command6, args, options2) {
-        return exec(command6, args, {
-          ...options2,
-          stdin: this
-        });
+      saveOnboardingAttempt(attemptId) {
+        const installation = this.state.installation();
+        if (!installation) return;
+        this.state.db.prepare("INSERT INTO cli_onboarding_attempt (id,attempt_id,account_id) VALUES (1,?,?) ON CONFLICT(id) DO UPDATE SET attempt_id=excluded.attempt_id,account_id=excluded.account_id").run(attemptId, installation.accountId);
       }
-      async *[Symbol.asyncIterator]() {
-        const proc = this._process;
-        if (!proc) return;
-        const streams = [];
-        if (this._streamErr) streams.push(this._streamErr);
-        if (this._streamOut) streams.push(this._streamOut);
-        const streamCombined = combineStreams(streams);
-        const rl = readline.createInterface({ input: streamCombined });
-        for await (const chunk of rl) yield chunk.toString();
-        await this._processClosed;
-        proc.removeAllListeners();
-        if (this._thrownError) throw this._thrownError;
-        if (this._options?.throwOnError && (this.exitCode !== 0 && this.exitCode !== void 0 || this.signalCode !== null)) throw new NonZeroExitError(this, void 0, this._command, this._args);
+      onboardingAttempt() {
+        const installation = this.state.installation();
+        if (!installation) return null;
+        const row = this.state.db.prepare("SELECT attempt_id FROM cli_onboarding_attempt WHERE id=1 AND account_id=?").get(installation.accountId);
+        return row?.attempt_id ?? null;
       }
-      async _waitForOutput() {
-        const proc = this._process;
-        if (!proc) throw new Error("No process was started");
-        const [stdout, stderr] = await Promise.all([this._streamOut ? readStream(this._streamOut) : "", this._streamErr ? readStream(this._streamErr) : ""]);
-        await this._processClosed;
-        const { stdin } = this._options;
-        if (stdin && typeof stdin !== "string") await stdin;
-        proc.removeAllListeners();
-        if (this._thrownError) throw this._thrownError;
-        const result3 = {
-          stderr,
-          stdout,
-          exitCode: this.exitCode
-        };
-        if (this._options.throwOnError && (this.exitCode !== 0 && this.exitCode !== void 0 || this.signalCode !== null)) throw new NonZeroExitError(this, result3, this._command, this._args);
-        return result3;
+      identity() {
+        const row = this.state.db.prepare("SELECT json FROM cli_analytics_identity WHERE id=1").get();
+        if (!row) return null;
+        try {
+          const identity2 = JSON.parse(row.json);
+          const installation = this.state.installation();
+          return installation && identity2.expiresAt > Date.now() && identity2.accountId === installation.accountId && identity2.workspaceId === installation.workspaceId && identity2.installationId === installation.id ? identity2 : null;
+        } catch {
+          return null;
+        }
       }
-      then(onfulfilled, onrejected) {
-        return this._waitForOutput().then(onfulfilled, onrejected);
+      updateIdentity(me2, now = Date.now()) {
+        const previous = this.identity();
+        const next = { accountId: me2.account.id, workspaceId: me2.workspace.id, installationId: me2.installation.id, ...me2.analytics, enabled: me2.analytics.enabled && me2.analytics.environment !== "disabled" && me2.analytics.host === EU_HOST && /^phc_[A-Za-z0-9]+$/u.test(me2.analytics.projectKey), expiresAt: now + 24 * 60 * 6e4 };
+        if (!next.enabled || previous && previous.accountId !== next.accountId) this.state.db.exec("DELETE FROM cli_analytics_queue");
+        this.state.db.prepare("INSERT INTO cli_analytics_identity (id,json,refreshed_at) VALUES (1,?,?) ON CONFLICT(id) DO UPDATE SET json=excluded.json,refreshed_at=excluded.refreshed_at").run(JSON.stringify(next), now);
+        this.state.db.prepare("DELETE FROM cli_analytics_queue WHERE account_id<>? OR occurred_at<?").run(next.accountId, new Date(now - 7 * 864e5).toISOString());
       }
-      _streamOut;
-      _streamErr;
-      spawn() {
-        const options2 = this._options;
-        const nodeOptions = {
-          ...defaultNodeOptions,
-          ...options2.nodeOptions
-        };
-        const cwd$1 = nodeOptions?.cwd ?? cwd();
-        const signals = [];
-        this._resetState();
-        if (options2.timeout !== void 0) signals.push(AbortSignal.timeout(options2.timeout));
-        if (options2.signal !== void 0) signals.push(options2.signal);
-        if (options2.persist === true) nodeOptions.detached = true;
-        if (signals.length > 0) nodeOptions.signal = combineSignals(signals);
-        nodeOptions.env = computeEnv(cwd$1, nodeOptions.env, options2.nodePath);
-        const crossResult = normalizeSpawnCommand(this._command, this._args, nodeOptions);
-        const handle2 = spawn3(crossResult.command, crossResult.args, crossResult.options);
-        if (handle2.stderr) this._streamErr = handle2.stderr;
-        if (handle2.stdout) this._streamOut = handle2.stdout;
-        this._process = handle2;
-        handle2.once("error", this._onError);
-        handle2.once("close", this._onClose);
-        if (handle2.stdin) {
-          const { stdin } = options2;
-          if (typeof stdin === "string") handle2.stdin.end(stdin);
-          else stdin?.process?.stdout?.pipe(handle2.stdin);
+      async refresh(site, now = Date.now()) {
+        const installation = this.state.installation();
+        if (!installation) return "unavailable";
+        const last = this.state.db.prepare("SELECT refreshed_at FROM cli_analytics_identity WHERE id=1").get();
+        if (last && now - last.refreshed_at < 5 * 6e4 && this.identity()) return "ok";
+        try {
+          this.updateIdentity(await createCliApi(site, this.fetcher, installation.token).call("me"), now);
+          return "ok";
+        } catch (error62) {
+          if (error62 instanceof ApiClientError && error62.response?.error?.code === "installation-revoked") {
+            this.state.db.exec("DELETE FROM cli_analytics_queue; DELETE FROM cli_analytics_identity");
+            return "revoked";
+          }
+          return "unavailable";
         }
       }
-      _resetState() {
-        this._aborted = false;
-        this._processClosed = new Promise((resolve6) => {
-          this._resolveClose = resolve6;
-        });
-        this._thrownError = void 0;
+      record(event, values = {}) {
+        if (!EVENT.has(event)) return;
+        const installation = this.state.installation();
+        if (!installation) return;
+        const identity2 = this.identity();
+        if (identity2 && !identity2.enabled) return;
+        this.state.db.prepare("INSERT INTO cli_analytics_queue (id,account_id,event,properties_json,occurred_at) VALUES (?,?,?,?,?)").run(randomUUID10(), installation.accountId, event, JSON.stringify(scrubEventProperties(event, values)), (/* @__PURE__ */ new Date()).toISOString());
+        this.state.db.exec("DELETE FROM cli_analytics_queue WHERE id IN (SELECT id FROM cli_analytics_queue ORDER BY occurred_at DESC LIMIT -1 OFFSET 1000)");
       }
-      _onError = (err) => {
-        if (err.name === "AbortError" && (!(err.cause instanceof Error) || err.cause.name !== "TimeoutError")) {
-          this._aborted = true;
-          return;
+      async flush() {
+        const identity2 = this.identity();
+        if (!identity2?.enabled) return;
+        const rows = this.state.db.prepare("SELECT id,account_id,event,properties_json,occurred_at,attempts FROM cli_analytics_queue WHERE account_id=? AND next_attempt_at<=? ORDER BY occurred_at,id LIMIT 50").all(identity2.accountId, Date.now());
+        if (!rows.length) return;
+        const batch = rows.map((row) => ({ uuid: row.id, event: row.event, distinct_id: identity2.accountId, timestamp: row.occurred_at, properties: { ...JSON.parse(row.properties_json), schema_version: "apilift.analytics/v1", environment: identity2.environment, component: "cli", release: this.release, account_id: identity2.accountId, workspace_id: identity2.workspaceId, installation_id: identity2.installationId, is_internal: identity2.internal, $geoip_disable: true } }));
+        let sent = false;
+        try {
+          sent = (await this.fetcher(`${identity2.host}/batch/`, { method: "POST", redirect: "error", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ api_key: identity2.projectKey, batch }), signal: AbortSignal.timeout(2e3) })).ok;
+        } catch {
         }
-        this._thrownError = err;
-      };
-      _onClose = () => {
-        if (this._resolveClose) this._resolveClose();
-      };
-    };
-    x = (command6, args, userOptions) => {
-      const proc = new ExecProcess(command6, args, userOptions);
-      proc.spawn();
-      return proc;
+        for (const row of rows) {
+          if (sent) this.state.db.prepare("DELETE FROM cli_analytics_queue WHERE id=?").run(row.id);
+          else this.state.db.prepare("UPDATE cli_analytics_queue SET attempts=?,next_attempt_at=? WHERE id=?").run(Math.min(20, row.attempts + 1), Date.now() + Math.min(3600, 2 ** (row.attempts + 1)) * 1e3, row.id);
+        }
+      }
     };
-    exec = x;
+  }
+});
+
+// src/usage/process.ts
+import { existsSync as existsSync5 } from "node:fs";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
+function startCollector(env) {
+  if (process.env.VITEST || env.VITEST || env.APILIFT_COLLECTOR_DISABLED === "1") return;
+  const entry2 = fileURLToPath3(new URL("./apilift-collector.js", import.meta.url));
+  if (!existsSync5(entry2)) return;
+  try {
+    startBackground(entry2, env, () => {
+    });
+  } catch {
+  }
+}
+var init_process2 = __esm({
+  "src/usage/process.ts"() {
+    "use strict";
+    init_process();
   }
 });
 
@@ -37573,16 +37690,79 @@ var init_compat2 = __esm({
 });
 
 // src/native-host/registration.ts
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash6, randomUUID as randomUUID11 } from "node:crypto";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { mkdirSync as mkdirSync10, writeFileSync as writeFileSync9 } from "node:fs";
 import { homedir as homedir3, platform as platform2 } from "node:os";
 import { dirname as dirname8, isAbsolute as isAbsolute4, join as join14, resolve as resolve4 } from "node:path";
-import { chmod as chmod2, mkdir, readFile, rename as rename2, writeFile, copyFile } from "node:fs/promises";
-function manifestDirectory(env = process.env) {
+import { chmod as chmod2, mkdir, readFile, rename as rename2, writeFile, copyFile, rm, stat } from "node:fs/promises";
+function batchLiteral(value) {
+  if (/["\r\n\0]/u.test(value)) throw new Error("Native host launcher values contain unsupported control characters");
+  return value.replaceAll("%", "%%");
+}
+function nativeLauncher(values, windows) {
+  const environment = { APILIFT_HOME: values.root, APILIFT_NATIVE_HOST_NAME: values.hostName, APILIFT_NATIVE_MESSAGING_DIR: values.manifestRoot, ...values.site ? { APILIFT_URL: values.site } : {} };
+  if (windows) return `@echo off\r
+chcp 65001 >nul 2>&1\r
+setlocal DisableDelayedExpansion\r
+${Object.entries(environment).map(([key, value]) => `set "${key}=${batchLiteral(value)}"\r
+`).join("")}"${batchLiteral(values.nodePath)}" "${batchLiteral(values.hostScript)}" %*\r
+exit /b %errorlevel%\r
+`;
+  return `#!/bin/sh
+${Object.entries(environment).map(([key, value]) => `${key}=${posixQuote(value)}`).join(" ")} exec ${posixQuote(values.nodePath)} ${posixQuote(values.hostScript)} "$@"
+`;
+}
+function readWindowsHostValues(hostName, run2 = execFileSync2) {
+  if (!/^[a-z0-9_]+(?:\.[a-z0-9_]+)*$/u.test(hostName)) throw new Error("Invalid native host name");
+  const script = `$ErrorActionPreference='Stop'; $results=@(); foreach($view in @('32','64')) {
+    $base=[Microsoft.Win32.RegistryKey]::OpenBaseKey([Microsoft.Win32.RegistryHive]::CurrentUser,[Microsoft.Win32.RegistryView]('Registry'+$view));
+    try {
+      $key=$base.OpenSubKey('Software\\Google\\Chrome\\NativeMessagingHosts\\${hostName}');
+      $kind=$null; $data=$null;
+      if($null -ne $key) { try {
+        $value=$key.GetValue('',$null,[Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames);
+        if($null -ne $value) { $kind=$key.GetValueKind('').ToString(); $data=[Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes((ConvertTo-Json -InputObject $value -Compress))); }
+      } finally { $key.Dispose(); } }
+      $results+=@{view=$view;present=($null -ne $key);kind=$kind;data=$data};
+    } finally { $base.Dispose(); }
+  }; ConvertTo-Json -InputObject @($results) -Compress`;
+  try {
+    const output2 = run2("powershell.exe", ["-NoLogo", "-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { encoding: "utf8", timeout: 1e4, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
+    const values = JSON.parse(String(output2));
+    if (!Array.isArray(values) || values.length !== 2) throw new Error("Invalid registry snapshot");
+    return ["32", "64"].map((view) => {
+      const items = values.filter((item2) => item2?.view === view);
+      const item = items[0];
+      if (items.length !== 1 || typeof item.present !== "boolean" || !(item.kind === null || typeof item.kind === "string") || !(item.data === null || typeof item.data === "string")) throw new Error("Invalid registry value");
+      return { view, present: item.present, kind: item.kind, value: item.data === null ? null : JSON.parse(Buffer.from(item.data, "base64").toString("utf8")) };
+    });
+  } catch {
+    throw new Error("Could not inspect the current user's Chrome native host registration");
+  }
+}
+function registerWindowsHost(hostName, manifest, owned, run2 = execFileSync2, write = true, backup) {
+  const key = `HKCU\\Software\\Google\\Chrome\\NativeMessagingHosts\\${hostName}`;
+  const options2 = { encoding: "utf8", timeout: 1e4, windowsHide: true, stdio: ["ignore", "pipe", "pipe"] };
+  const present = /* @__PURE__ */ new Set();
+  for (const value of readWindowsHostValues(hostName, run2)) {
+    if (!value.present) continue;
+    const { view } = value;
+    present.add(view);
+    const current = value.kind === "String" && typeof value.value === "string" ? value.value : null;
+    if (!owned || current?.toLowerCase() !== manifest.toLowerCase()) {
+      if (!backup) throw new Error(`Native host registration is not owned by Apilift: ${key}`);
+      backup(view, JSON.stringify(value));
+    }
+  }
+  if (write) for (const view of /* @__PURE__ */ new Set(["32", ...present])) run2("reg.exe", ["add", key, "/ve", "/t", "REG_SZ", "/d", manifest, "/f", `/reg:${view}`], options2);
+}
+function manifestDirectory(env = process.env, system = { platform: platform2(), home: homedir3() }) {
   if (env.APILIFT_NATIVE_MESSAGING_DIR) return resolve4(env.APILIFT_NATIVE_MESSAGING_DIR);
-  const home = homedir3();
-  if (platform2() === "darwin") return join14(home, "Library", "Application Support", "Google", "Chrome", "NativeMessagingHosts");
-  if (platform2() === "win32") throw new Error("Windows native-host registration needs a data-root manifest and HKCU registry entry");
-  return join14(home, ".config", "google-chrome", "NativeMessagingHosts");
+  const home = system.home;
+  if (system.platform === "darwin") return join14(home, "Library", "Application Support", "Google", "Chrome", "NativeMessagingHosts");
+  if (system.platform === "win32") throw new Error("Windows native-host registration needs a data-root manifest and HKCU registry entry");
+  return join14(absoluteEnv(env.CHROME_CONFIG_HOME) || absoluteEnv(env.XDG_CONFIG_HOME) || join14(home, ".config"), "google-chrome", "NativeMessagingHosts");
 }
 async function registerNativeHost(options2) {
   const env = options2.env ?? process.env;
@@ -37597,7 +37777,24 @@ async function registerNativeHost(options2) {
   const manifestRoot = env.APILIFT_NATIVE_MESSAGING_DIR ? resolve4(env.APILIFT_NATIVE_MESSAGING_DIR) : platform2() === "win32" ? nativeRoot : manifestDirectory(env);
   const launcher = join14(nativeRoot, platform2() === "win32" ? "launcher.cmd" : "launcher.sh");
   const manifest = join14(manifestRoot, `${hostName}.json`);
+  const manifests = [manifest];
+  if (platform2() === "linux" && !env.APILIFT_NATIVE_MESSAGING_DIR) {
+    for (const browser of ["google-chrome-beta", "google-chrome-unstable", "chromium"]) {
+      const profile = join14(dirname8(dirname8(manifestRoot)), browser);
+      if (await stat(profile).then((value) => value.isDirectory()).catch(() => false)) manifests.push(join14(profile, "NativeMessagingHosts", `${hostName}.json`));
+    }
+  }
   const receiptPath = join14(nativeRoot, "registration.json");
+  const registryBackup = options2.allowReplaceUnowned ? (view, value) => {
+    const directory = join14(nativeRoot, "backup");
+    mkdirSync10(directory, { recursive: true, mode: 448 });
+    const path2 = join14(directory, `${hostName}-registry-${view}-${fingerprint(value)}.json`);
+    try {
+      writeFileSync9(path2, JSON.stringify({ hostName, view, query: value }), { flag: "wx", mode: 384 });
+    } catch (error62) {
+      if (error62.code !== "EEXIST") throw error62;
+    }
+  } : void 0;
   const previous = await readFile(receiptPath, "utf8").then((value) => JSON.parse(value)).catch(() => ({}));
   const guard = async (path2) => {
     const bytes = await readFile(path2).catch(() => null);
@@ -37607,36 +37804,36 @@ async function registerNativeHost(options2) {
     await copyFile(path2, join14(nativeRoot, "backup", `${fingerprint(bytes)}-${Date.now()}`));
   };
   await guard(launcher);
-  await guard(manifest);
+  for (const path2 of manifests) await guard(path2);
+  if (platform2() === "win32" && !env.APILIFT_NATIVE_MESSAGING_DIR) {
+    const bytes = await readFile(manifest).catch(() => null);
+    registerWindowsHost(hostName, manifest, Boolean(bytes && previous[manifest] === fingerprint(bytes)), execFileSync2, false, registryBackup);
+  }
   await mkdir(nativeRoot, { recursive: true, mode: 448 });
   await mkdir(manifestRoot, { recursive: true, mode: 448 });
-  const launcherText = platform2() === "win32" ? `@echo off\r
-set "APILIFT_HOME=${root}"\r
-set "APILIFT_NATIVE_HOST_NAME=${hostName}"\r
-${siteUrl2 ? `set "APILIFT_URL=${siteUrl2.origin}"\r
-` : ""}${env.APILIFT_NATIVE_MESSAGING_DIR ? `set "APILIFT_NATIVE_MESSAGING_DIR=${manifestRoot}"\r
-` : ""}"${nodePath}" "${hostScript}" %*\r
-` : `#!/bin/sh
-APILIFT_HOME=${posixQuote(root)} APILIFT_NATIVE_HOST_NAME=${posixQuote(hostName)} ${siteUrl2 ? `APILIFT_URL=${posixQuote(siteUrl2.origin)} ` : ""}${env.APILIFT_NATIVE_MESSAGING_DIR ? `APILIFT_NATIVE_MESSAGING_DIR=${posixQuote(manifestRoot)} ` : ""}exec ${posixQuote(nodePath)} ${posixQuote(hostScript)} "$@"
-`;
+  const launcherText = nativeLauncher({ root, hostName, nodePath, hostScript, manifestRoot, site: siteUrl2?.origin }, platform2() === "win32");
   const manifestText = JSON.stringify({ name: hostName, description: "Apilift browser bridge", path: launcher, type: "stdio", allowed_origins: [`chrome-extension://${options2.extensionId}/`] }, null, 2) + "\n";
   const atomicWrite = async (path2, bytes, mode) => {
-    const temp = join14(dirname8(path2), `.${hostName}-${process.pid}-${Date.now()}.tmp`);
-    await writeFile(temp, bytes, { mode });
-    await chmod2(temp, mode);
-    await rename2(temp, path2);
+    const temp = join14(dirname8(path2), `.${hostName}-${randomUUID11()}.tmp`);
+    try {
+      await writeFile(temp, bytes, { mode, flag: "wx" });
+      await chmod2(temp, mode);
+      await rename2(temp, path2);
+    } finally {
+      await rm(temp, { force: true });
+    }
   };
   await atomicWrite(launcher, launcherText, platform2() === "win32" ? 384 : 448);
-  await atomicWrite(manifest, manifestText, 384);
-  const receipt = { ...previous, [launcher]: fingerprint(launcherText), [manifest]: fingerprint(manifestText) };
-  await atomicWrite(receiptPath, JSON.stringify(receipt, null, 2) + "\n", 384);
-  if (platform2() === "win32" && !env.APILIFT_NATIVE_MESSAGING_DIR) {
-    const { execFileSync: execFileSync3 } = await import("node:child_process");
-    execFileSync3("reg.exe", ["add", `HKCU\\Software\\Google\\Chrome\\NativeMessagingHosts\\${hostName}`, "/ve", "/t", "REG_SZ", "/d", manifest, "/f"], { stdio: "ignore" });
+  for (const path2 of manifests) {
+    await mkdir(dirname8(path2), { recursive: true, mode: 448 });
+    await atomicWrite(path2, manifestText, 384);
   }
+  const receipt = { ...previous, [launcher]: fingerprint(launcherText), ...Object.fromEntries(manifests.map((path2) => [path2, fingerprint(manifestText)])) };
+  await atomicWrite(receiptPath, JSON.stringify(receipt, null, 2) + "\n", 384);
+  if (platform2() === "win32" && !env.APILIFT_NATIVE_MESSAGING_DIR) registerWindowsHost(hostName, manifest, true, execFileSync2, true, registryBackup);
   return { launcher, manifest, hostName };
 }
-var fingerprint, hostNames, validId, posixQuote;
+var fingerprint, hostNames, validId, posixQuote, absoluteEnv;
 var init_registration = __esm({
   "src/native-host/registration.ts"() {
     "use strict";
@@ -37644,13 +37841,14 @@ var init_registration = __esm({
     hostNames = /* @__PURE__ */ new Set(["com.apilift.browser", "com.apilift.browser.dev"]);
     validId = /^[a-p]{32}$/;
     posixQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+    absoluteEnv = (value) => value && isAbsolute4(value) ? value : void 0;
   }
 });
 
 // src/update.ts
 import { fileURLToPath as fileURLToPath4 } from "node:url";
-import { dirname as dirname9, join as join15, resolve as resolve5, sep } from "node:path";
-import { mkdirSync as mkdirSync9, realpathSync as realpathSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { dirname as dirname9, join as join15, resolve as resolve5, sep, isAbsolute as isAbsolute5 } from "node:path";
+import { mkdirSync as mkdirSync11, realpathSync as realpathSync2, writeFileSync as writeFileSync10, readFileSync as readFileSync10 } from "node:fs";
 import { DatabaseSync as DatabaseSync6 } from "node:sqlite";
 function globalPackage(script, prefix) {
   const canonical = (path2) => {
@@ -37664,22 +37862,52 @@ function globalPackage(script, prefix) {
   const base2 = canonical(prefix).toLowerCase();
   return [join15(base2, "lib", "node_modules", "@apilift", "cli"), join15(base2, "node_modules", "@apilift", "cli")].some((path2) => normalized.startsWith(`${path2}${sep}`));
 }
+async function pnpmInstallations(runner, env) {
+  const listed = await runner("pnpm", ["list", "-g", "@apilift/cli", "--depth", "0", "--json"], 1e4, env).catch(() => null);
+  if (listed?.exitCode !== 0) return [];
+  try {
+    const groups = JSON.parse(listed.stdout);
+    if (!Array.isArray(groups)) return [];
+    return groups.flatMap((group) => {
+      const pkg = group?.dependencies?.["@apilift/cli"];
+      return pkg && typeof pkg.path === "string" && isAbsolute5(pkg.path) && typeof pkg.version === "string" ? [{ entrypoint: join15(pkg.path, "dist", "apilift.js"), version: pkg.version }] : [];
+    });
+  } catch {
+    return [];
+  }
+}
+async function installationManager(script, runner, env) {
+  const prefix = await runner("npm", ["prefix", "-g"], 1e4, env).catch(() => null);
+  if (prefix?.exitCode === 0 && globalPackage(script, prefix.stdout.trim())) return { manager: "npm", entrypoint: script };
+  const canonical = (path2) => {
+    try {
+      return realpathSync2(path2);
+    } catch {
+      return resolve5(path2);
+    }
+  };
+  const selected = (await pnpmInstallations(runner, env)).find((candidate2) => canonical(candidate2.entrypoint) === canonical(script));
+  return selected ? { manager: "pnpm", entrypoint: selected.entrypoint } : null;
+}
 async function maybeAutoUpdate(options2) {
   if (options2.env.APILIFT_AUTO_UPDATE === "0" || options2.env.CI || options2.env.APILIFT_DEV_PLUGIN_ROOT || options2.env.APILIFT_UPDATE_REEXEC === "1") return null;
   const current = options2.current || CURRENT, runner = options2.runner || run, script = options2.script || fileURLToPath4(import.meta.url);
   if (!shouldCheckUpdate(options2.state, current)) return null;
-  const prefix = await runner("npm", ["prefix", "-g"], 1e4).catch(() => null);
-  if (!prefix || prefix.exitCode !== 0 || !globalPackage(script, prefix.stdout.trim())) return null;
+  const installation = await installationManager(script, runner, options2.env);
+  if (!installation) return null;
   markUpdateChecked(options2.state, current);
-  const update = await updateCli({ ...options2, current, runner, script, manual: false });
+  let updatedEntry = installation.entrypoint;
+  const update = await updateCli({ ...options2, current, runner, script, manual: false }, (entrypoint) => {
+    updatedEntry = entrypoint;
+  });
   if (update.stderr.startsWith("update-incomplete")) return update;
   if (!update.stdout.startsWith("Apilift ") || !update.stdout.includes(" was installed.")) return null;
-  const result3 = await runner(process.execPath, [script, ...options2.argv], 18e4, { ...process.env, ...options2.env, APILIFT_UPDATE_REEXEC: "1" });
+  const result3 = await runner(process.execPath, [updatedEntry, ...options2.argv], 18e4, { ...process.env, ...options2.env, APILIFT_UPDATE_REEXEC: "1" });
   return { stdout: result3.stdout, stderr: result3.stderr, exitCode: result3.exitCode ?? 1, dispatched: false };
 }
 function lock(root) {
   const dir = join15(root, "locks");
-  mkdirSync9(dir, { recursive: true, mode: 448 });
+  mkdirSync11(dir, { recursive: true, mode: 448 });
   const db = new DatabaseSync6(join15(dir, "self-update.sqlite"));
   db.exec("PRAGMA busy_timeout=0");
   try {
@@ -37693,15 +37921,15 @@ function lock(root) {
 function message(stdout, exitCode = 0, stderr = "") {
   return { stdout, stderr, exitCode, dispatched: false };
 }
-async function updateCli(options2) {
+async function updateCli(options2, onInstalled) {
   const current = options2.current || CURRENT;
   const runner = options2.runner || run;
   let latest;
   let linkedAgents = [];
   try {
-    const installation = options2.state.installation();
-    if (installation) {
-      const me2 = await createCliApi(options2.site, options2.fetcher || fetch, installation.token).call("me");
+    const installation2 = options2.state.installation();
+    if (installation2) {
+      const me2 = await createCliApi(options2.site, options2.fetcher || fetch, installation2.token).call("me");
       latest = me2.compatibility.latest.cli;
       linkedAgents = me2.installation.agents;
     } else latest = (await createCliApi(options2.site, options2.fetcher || fetch).call("currentRelease")).components.cli.version;
@@ -37713,30 +37941,41 @@ async function updateCli(options2) {
   if (compatible2(current, latest)) return message("The installed CLI and its required local components are up to date.\nNo installation changes were made. Continue the app work you were working on.\n");
   if (!options2.manual && (options2.env.APILIFT_AUTO_UPDATE === "0" || options2.env.CI || options2.env.APILIFT_DEV_PLUGIN_ROOT || options2.env.npm_execpath?.includes("npx"))) return message("", 5, `client-upgrade-required \u2014 Install Apilift ${latest} through the supported package installation, then retry.
 `);
-  const prefix = await runner("npm", ["prefix", "-g"], 1e4);
   const script = options2.script || fileURLToPath4(import.meta.url);
-  if (prefix.exitCode !== 0 || !globalPackage(script, prefix.stdout.trim())) return message("", 5, `client-upgrade-required \u2014 This CLI is not a global npm installation. Install Apilift ${latest} through your installation method, then retry.
+  const installation = await installationManager(script, runner, options2.env);
+  if (!installation) return message("", 5, `client-upgrade-required \u2014 This CLI is not a global npm or pnpm installation. Install Apilift ${latest} through your installation method, then retry.
 `);
+  const { manager } = installation;
+  let entrypoint = installation.entrypoint;
   const held = lock(options2.root);
   if (!held) return message("", 5, "update-in-progress \u2014 Another Apilift update is running. Retry after it finishes.\n");
   try {
-    const installed = await runner("npm", ["install", "-g", `@apilift/cli@${latest}`], 18e4);
-    if (installed.exitCode !== 0) return message("", 5, "update-failed \u2014 npm could not install the requested version. The previous CLI remains available. Check the npm installation and retry apilift update.\n");
+    const installed = await runner(manager, [manager === "pnpm" ? "add" : "install", "-g", `@apilift/cli@${latest}`], 18e4, options2.env).catch(() => null);
+    if (installed?.exitCode !== 0) return message("", 5, `update-failed \u2014 ${manager} could not finish installing the requested version. Run apilift --version to check the installed version, then retry apilift update.
+`);
     options2.state.db.exec("CREATE TABLE IF NOT EXISTS cli_update_state (id INTEGER PRIMARY KEY CHECK(id=1), version TEXT NOT NULL, updated_at TEXT NOT NULL)");
     options2.state.db.prepare("INSERT INTO cli_update_state (id,version,updated_at) VALUES (1,?,?) ON CONFLICT(id) DO UPDATE SET version=excluded.version,updated_at=excluded.updated_at").run(latest, (/* @__PURE__ */ new Date()).toISOString());
     const nativeRoot = join15(options2.root, "native-host");
-    mkdirSync9(nativeRoot, { recursive: true, mode: 448 });
-    writeFileSync9(join15(nativeRoot, "restart-required.json"), `${JSON.stringify({ version: latest })}
+    mkdirSync11(nativeRoot, { recursive: true, mode: 448 });
+    writeFileSync10(join15(nativeRoot, "restart-required.json"), `${JSON.stringify({ version: latest })}
 `, { mode: 384 });
     try {
-      await registerNativeHost({ root: options2.root, hostScript: join15(dirname9(script), "apilift-native-host.js"), extensionId: options2.env.APILIFT_DEV_EXTENSION_ID || STORE_EXTENSION_ID, hostName: options2.env.APILIFT_NATIVE_HOST_NAME, siteUrl: options2.site, env: options2.env });
+      if (manager === "pnpm") {
+        const candidates = (await pnpmInstallations(runner, options2.env)).filter((candidate2) => candidate2.version === latest);
+        if (candidates.length !== 1) throw new Error("Updated pnpm installation is ambiguous or unavailable");
+        entrypoint = candidates[0].entrypoint;
+        const pkg = JSON.parse(readFileSync10(join15(dirname9(entrypoint), "..", "package.json"), "utf8"));
+        if (pkg.name !== "@apilift/cli" || pkg.version !== latest) throw new Error("Updated pnpm package could not be verified");
+      }
+      await registerNativeHost({ root: options2.root, hostScript: join15(dirname9(entrypoint), "apilift-native-host.js"), extensionId: options2.env.APILIFT_DEV_EXTENSION_ID || STORE_EXTENSION_ID, hostName: options2.env.APILIFT_NATIVE_HOST_NAME, siteUrl: options2.site, env: options2.env });
       for (const agent2 of linkedAgents) {
         if (!ensureAgentPlugin(agent2, options2.env).ready) throw new Error("Updated agent plugin activation is unverified");
       }
     } catch {
-      return message("", 5, `update-incomplete \u2014 Apilift ${latest} was installed, but local component registration needs repair. Run apilift setup continue, then apilift doctor. Do not repeat the npm install.
+      return message("", 5, `update-incomplete \u2014 Apilift ${latest} was installed, but local component registration needs repair. Run apilift setup continue, then apilift doctor. Do not repeat the package installation.
 `);
     }
+    onInstalled?.(entrypoint);
     return message(`Apilift ${latest} was installed. Continue the app work you were working on.
 `);
   } finally {
@@ -37762,15 +38001,15 @@ var init_update = __esm({
     init_version();
     init_registration();
     init_plugin();
-    run = async (command6, args, timeout, env) => await x(command6, args, { timeout, throwOnError: false, ...env ? { nodeOptions: { env } } : {} });
+    run = async (command6, args, timeout, env) => await x(command6, args, { timeout, throwOnError: false, nodeOptions: { windowsHide: true, env: { ...process.env, ...env } } });
     CURRENT = cliVersion;
     STORE_EXTENSION_ID = "fcndhdoedflmfmckkgpkdhmglgepbhnd";
   }
 });
 
 // src/setup-check.ts
-import { createHash as createHash7, randomUUID as randomUUID11 } from "node:crypto";
-import { existsSync as existsSync6, readFileSync as readFileSync9, realpathSync as realpathSync3, writeFileSync as writeFileSync10 } from "node:fs";
+import { createHash as createHash7, randomUUID as randomUUID12 } from "node:crypto";
+import { existsSync as existsSync6, readFileSync as readFileSync11, realpathSync as realpathSync3, writeFileSync as writeFileSync11 } from "node:fs";
 import { dirname as dirname10, join as join16 } from "node:path";
 async function setupCheckBody(client, scopeId, value) {
   if (typeof value.body === "string") return Buffer.byteLength(value.body, "utf8") <= maxCheckBodyBytes ? value.body : null;
@@ -37797,12 +38036,12 @@ function challengeFile(root, agent2) {
 function setupChallenge(root, agent2, site) {
   const file2 = challengeFile(root, agent2);
   try {
-    const saved = JSON.parse(readFileSync9(file2, "utf8"));
+    const saved = JSON.parse(readFileSync11(file2, "utf8"));
     if (new URL(saved.url).origin === site && Number.isFinite(saved.createdAt) && Date.now() - saved.createdAt < 10 * 6e4) return saved;
   } catch {
   }
-  const challenge = { url: `${site}/setup-check?challenge=${randomUUID11()}`, createdAt: Date.now() };
-  writeFileSync10(file2, JSON.stringify(challenge), { mode: 384 });
+  const challenge = { url: `${site}/setup-check?challenge=${randomUUID12()}`, createdAt: Date.now() };
+  writeFileSync11(file2, JSON.stringify(challenge), { mode: 384 });
   return challenge;
 }
 async function setupBridge(root) {
@@ -37812,6 +38051,22 @@ async function setupBridge(root) {
   if (!client.legacyBridge) await waitForBridge(root, cliVersion, Math.max(0, 9e4 - (Date.now() - startedAt)));
   return client;
 }
+async function setupReadiness(api, waitForReport, timeoutMs = 1e4) {
+  const deadline = Date.now() + timeoutMs;
+  const signal = AbortSignal.timeout(timeoutMs);
+  let readiness2 = await api.call("updateReadiness", { body: {}, ...waitForReport ? { signal } : {} });
+  while (waitForReport && (!readiness2.machine.nativeHostReady || !readiness2.machine.extensionReady) && Date.now() < deadline) {
+    await new Promise((resolve6) => setTimeout(resolve6, Math.min(250, Math.max(0, deadline - Date.now()))));
+    if (signal.aborted || Date.now() >= deadline) break;
+    try {
+      readiness2 = await api.call("updateReadiness", { body: {}, signal });
+    } catch (error62) {
+      if (signal.aborted) break;
+      throw error62;
+    }
+  }
+  return readiness2;
+}
 async function verifySetupCheck(root, challenge) {
   const client = await setupBridge(root);
   const pageOrigin = new URL(challenge.url).origin;
@@ -37820,7 +38075,7 @@ async function verifySetupCheck(root, challenge) {
   const inspect = await client.openScope({ kind: "inspect", ...scopeInput });
   let candidates = [];
   try {
-    const deadline = Date.now() + (client.legacyBridge ? 9e4 : 1e4);
+    const deadline = Date.now() + 1e4;
     do {
       candidates = (await client.candidates(inspect.id)).candidates;
       if (candidates.length) break;
@@ -37831,7 +38086,7 @@ async function verifySetupCheck(root, challenge) {
   }
   if (candidates.length !== 1) return { ok: false, reason: candidates.length ? "More than one exact check tab matched" : "The extension did not report the exact check tab within 10 seconds" };
   const execute = await client.openScope({ kind: "execute", tabSelector: candidates[0].selector, ...scopeInput });
-  const id2 = randomUUID11();
+  const id2 = randomUUID12();
   try {
     await client.enqueueJob(execute.id, { job: { id: id2, kind: "replay", effect: "read", method: "GET", url: challenge.url, headers: {}, pageOrigin, allowedRequestOrigin: pageOrigin, timeoutMs: 2e4 } });
     const deadline = Date.now() + 3e4;
@@ -38065,13 +38320,15 @@ Fix the local Chrome registration and retry:
   ${prefix} setup continue
 `);
       }
-      let bridgeError;
+      let bridgeError, connected = false;
       try {
-        await setupBridge(dataRoot(env));
+        connected = !(await setupBridge(dataRoot(env))).legacyBridge;
       } catch (error62) {
         bridgeError = error62;
       }
-      const readiness2 = await api.call("updateReadiness", { body: {} });
+      const readiness2 = await setupReadiness(api, connected);
+      if (connected && (!readiness2.machine.nativeHostReady || !readiness2.machine.extensionReady)) return result2("", 5, `registry-readiness-pending \u2014 Chrome connected, but this installation's readiness report is still pending. Keep Chrome open and retry ${prefix} setup continue.
+`);
       if (!readiness2.machine.nativeHostReady || !readiness2.machine.extensionReady) return { ...result2(`${JSON.stringify({ action: "user", userMessage: extensionUserMessage(env.APILIFT_DEV_EXTENSION_PATH), resumeCommand: `${prefix} setup continue` })}
 `), stdoutJson: true };
       if (bridgeError) return result2("", 5, `extension-unavailable \u2014 ${bridgeError instanceof Error ? bridgeError.message : "Chrome did not respond"}. Check native host and extension setup with ${prefix} doctor.
@@ -38228,7 +38485,7 @@ var init_cli = __esm({
     init_state();
     init_analytics2();
     init_ledger();
-    init_process();
+    init_process2();
     init_update();
     init_version();
     init_setup_check();