npm - @bastani/atomic - Versions diffs - 0.9.10 → 0.9.11-alpha.10 - Mend

@bastani/atomic 0.9.10 → 0.9.11-alpha.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2339) hide show

package/dist/core/oauth-login.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth-login.d.ts","sourceRoot":"","sources":["../../src/core/oauth-login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAEhG,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACrE,kBAAkB,CAAC,IAAI,IAAI,CAAC;IAC5B,MAAM,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAAC;CAC/D;AAED,6FAA6F;AAC7F,MAAM,WAAW,qBAAqB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,sHAAsH;AACtH,qBAAa,0BAA2B,SAAQ,KAAK;IACpD,YAAY,KAAK,EAAE,OAAO,EAGzB;CACD;AAED,wBAAgB,qBAAqB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,OAAO,CAiBT;AAED,wBAAgB,wBAAwB,CACvC,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAE,GACzC,OAAO,CAIT;AAkBD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,yBAAyB,GAAG,eAAe,CAyC3F"}

package/dist/core/oauth-login.js ADDED Viewed

@@ -0,0 +1,92 @@
+/** Marks failures after credential acquisition so presentation never mistakes nested AbortErrors for cancellation. */
+export class OAuthLoginTransactionError extends Error {
+    constructor(cause) {
+        super(cause instanceof Error ? cause.message : String(cause), { cause });
+        this.name = "OAuthLoginTransactionError";
+    }
+}
+export function isOAuthLoginCancelled(error, signal, options = {}) {
+    if (error instanceof OAuthLoginTransactionError)
+        return false;
+    if (options.includeActiveSignal !== false && signal?.aborted)
+        return true;
+    const reason = signal?.reason;
+    const seen = new Set();
+    let current = error;
+    while (current !== undefined && current !== null) {
+        if (current === reason && reason !== undefined)
+            return true;
+        if (current === "Login cancelled")
+            return true;
+        if (typeof current !== "object")
+            return false;
+        if (seen.has(current))
+            return false;
+        seen.add(current);
+        const candidate = current;
+        if (candidate.name === "AbortError" || candidate.message === "Login cancelled")
+            return true;
+        current = candidate.cause;
+    }
+    return false;
+}
+export function normalizeOAuthLoginError(error, signal, options) {
+    if (error instanceof Error && error.message === "Login cancelled" && error.cause !== undefined)
+        return error;
+    if (!isOAuthLoginCancelled(error, signal, options))
+        return error;
+    return new Error("Login cancelled", { cause: error });
+}
+function abortable(promise, signal, onAbort) {
+    if (!signal)
+        return promise;
+    if (signal.aborted) {
+        onAbort?.();
+        return Promise.reject(signal.reason ?? new Error("Authentication prompt cancelled"));
+    }
+    return new Promise((resolve, reject) => {
+        const abort = () => {
+            onAbort?.();
+            reject(signal.reason ?? new Error("Authentication prompt cancelled"));
+        };
+        signal.addEventListener("abort", abort, { once: true });
+        promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+    });
+}
+export function createAuthInteraction(callbacks) {
+    return {
+        signal: callbacks.signal,
+        prompt: async (prompt) => {
+            switch (prompt.type) {
+                case "select":
+                    return ((await callbacks.onSelect({
+                        message: prompt.message,
+                        options: prompt.options.map(({ id, label }) => ({ id, label })),
+                    })) ?? "");
+                case "manual_code":
+                    return abortable(callbacks.onManualCodeInput
+                        ? callbacks.onManualCodeInput()
+                        : callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder }), prompt.signal, callbacks.onManualCodeCancel);
+                default:
+                    return callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder });
+            }
+        },
+        notify: (event) => {
+            switch (event.type) {
+                case "auth_url":
+                    callbacks.onAuth({ url: event.url, instructions: event.instructions });
+                    break;
+                case "device_code":
+                    callbacks.onDeviceCode(event);
+                    break;
+                case "progress":
+                    callbacks.onProgress?.(event.message);
+                    break;
+                case "info":
+                    callbacks.onInfo?.(event.message, event.links ?? []);
+                    break;
+            }
+        },
+    };
+}
+//# sourceMappingURL=oauth-login.js.map

package/dist/core/oauth-login.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth-login.js","sourceRoot":"","sources":["../../src/core/oauth-login.ts"],"names":[],"mappings":"AAeA,sHAAsH;AACtH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACpD,YAAY,KAAc;QACzB,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC1C,CAAC;CACD;AAED,MAAM,UAAU,qBAAqB,CACpC,KAAc,EACd,MAAoB,EACpB,OAAO,GAAsC,EAAE;IAE/C,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,OAAO,CAAC,mBAAmB,KAAK,KAAK,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,OAAO,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,MAAM,SAAS,GAAG,OAAiE,CAAC;QACpF,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,OAAO,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC5F,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,KAAc,EACd,MAAoB,EACpB,OAA2C;IAE3C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,iBAAiB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7G,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,SAAS,CAAI,OAAmB,EAAE,MAA+B,EAAE,OAAoB;IAC/F,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IAC5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE;YAClB,OAAO,EAAE,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAoC;IACzE,OAAO;QACN,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,QAAQ;oBACZ,OAAO,CACN,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC;wBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;qBAC/D,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;gBACH,KAAK,aAAa;oBACjB,OAAO,SAAS,CACf,SAAS,CAAC,iBAAiB;wBAC1B,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE;wBAC/B,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,EACnF,MAAM,CAAC,MAAM,EACb,SAAS,CAAC,kBAAkB,CAC5B,CAAC;gBACH;oBACC,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1F,CAAC;QACF,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,UAAU;oBACd,SAAS,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;oBACvE,MAAM;gBACP,KAAK,aAAa;oBACjB,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC9B,MAAM;gBACP,KAAK,UAAU;oBACd,SAAS,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACtC,MAAM;gBACP,KAAK,MAAM;oBACV,SAAS,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;oBACrD,MAAM;YACR,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC","sourcesContent":["import type { AuthInfoLink, AuthInteraction, OAuthLoginCallbacks } from \"@earendil-works/pi-ai\";\n\nexport interface AtomicOAuthLoginCallbacks extends OAuthLoginCallbacks {\n\tonManualCodeCancel?(): void;\n\tonInfo?(message: string, links: readonly AuthInfoLink[]): void;\n}\n\n/** JSON-safe provider-owned OAuth metadata transported across isolated-engine boundaries. */\nexport interface OAuthProviderMetadata {\n\tid: string;\n\tname: string;\n\tloginLabel?: string;\n\tusesCallbackServer?: boolean;\n}\n\n/** Marks failures after credential acquisition so presentation never mistakes nested AbortErrors for cancellation. */\nexport class OAuthLoginTransactionError extends Error {\n\tconstructor(cause: unknown) {\n\t\tsuper(cause instanceof Error ? cause.message : String(cause), { cause });\n\t\tthis.name = \"OAuthLoginTransactionError\";\n\t}\n}\n\nexport function isOAuthLoginCancelled(\n\terror: unknown,\n\tsignal?: AbortSignal,\n\toptions: { includeActiveSignal?: boolean } = {},\n): boolean {\n\tif (error instanceof OAuthLoginTransactionError) return false;\n\tif (options.includeActiveSignal !== false && signal?.aborted) return true;\n\tconst reason = signal?.reason;\n\tconst seen = new Set<object>();\n\tlet current: unknown = error;\n\twhile (current !== undefined && current !== null) {\n\t\tif (current === reason && reason !== undefined) return true;\n\t\tif (current === \"Login cancelled\") return true;\n\t\tif (typeof current !== \"object\") return false;\n\t\tif (seen.has(current)) return false;\n\t\tseen.add(current);\n\t\tconst candidate = current as { name?: unknown; message?: unknown; cause?: unknown };\n\t\tif (candidate.name === \"AbortError\" || candidate.message === \"Login cancelled\") return true;\n\t\tcurrent = candidate.cause;\n\t}\n\treturn false;\n}\n\nexport function normalizeOAuthLoginError(\n\terror: unknown,\n\tsignal?: AbortSignal,\n\toptions?: { includeActiveSignal?: boolean },\n): unknown {\n\tif (error instanceof Error && error.message === \"Login cancelled\" && error.cause !== undefined) return error;\n\tif (!isOAuthLoginCancelled(error, signal, options)) return error;\n\treturn new Error(\"Login cancelled\", { cause: error });\n}\n\nfunction abortable<T>(promise: Promise<T>, signal: AbortSignal | undefined, onAbort?: () => void): Promise<T> {\n\tif (!signal) return promise;\n\tif (signal.aborted) {\n\t\tonAbort?.();\n\t\treturn Promise.reject(signal.reason ?? new Error(\"Authentication prompt cancelled\"));\n\t}\n\treturn new Promise<T>((resolve, reject) => {\n\t\tconst abort = () => {\n\t\t\tonAbort?.();\n\t\t\treject(signal.reason ?? new Error(\"Authentication prompt cancelled\"));\n\t\t};\n\t\tsignal.addEventListener(\"abort\", abort, { once: true });\n\t\tpromise.then(resolve, reject).finally(() => signal.removeEventListener(\"abort\", abort));\n\t});\n}\n\nexport function createAuthInteraction(callbacks: AtomicOAuthLoginCallbacks): AuthInteraction {\n\treturn {\n\t\tsignal: callbacks.signal,\n\t\tprompt: async (prompt) => {\n\t\t\tswitch (prompt.type) {\n\t\t\t\tcase \"select\":\n\t\t\t\t\treturn (\n\t\t\t\t\t\t(await callbacks.onSelect({\n\t\t\t\t\t\t\tmessage: prompt.message,\n\t\t\t\t\t\t\toptions: prompt.options.map(({ id, label }) => ({ id, label })),\n\t\t\t\t\t\t})) ?? \"\"\n\t\t\t\t\t);\n\t\t\t\tcase \"manual_code\":\n\t\t\t\t\treturn abortable(\n\t\t\t\t\t\tcallbacks.onManualCodeInput\n\t\t\t\t\t\t\t? callbacks.onManualCodeInput()\n\t\t\t\t\t\t\t: callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder }),\n\t\t\t\t\t\tprompt.signal,\n\t\t\t\t\t\tcallbacks.onManualCodeCancel,\n\t\t\t\t\t);\n\t\t\t\tdefault:\n\t\t\t\t\treturn callbacks.onPrompt({ message: prompt.message, placeholder: prompt.placeholder });\n\t\t\t}\n\t\t},\n\t\tnotify: (event) => {\n\t\t\tswitch (event.type) {\n\t\t\t\tcase \"auth_url\":\n\t\t\t\t\tcallbacks.onAuth({ url: event.url, instructions: event.instructions });\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"device_code\":\n\t\t\t\t\tcallbacks.onDeviceCode(event);\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"progress\":\n\t\t\t\t\tcallbacks.onProgress?.(event.message);\n\t\t\t\t\tbreak;\n\t\t\t\tcase \"info\":\n\t\t\t\t\tcallbacks.onInfo?.(event.message, event.links ?? []);\n\t\t\t\t\tbreak;\n\t\t\t}\n\t\t},\n\t};\n}\n"]}

package/dist/core/oauth-provider-metadata.d.ts ADDED Viewed

@@ -0,0 +1,5 @@
+import type { Provider } from "@earendil-works/pi-ai";
+import type { OAuthProviderMetadata } from "./oauth-login.ts";
+import type { ProviderConfigInput } from "./provider-composer.ts";
+export declare function collectOAuthProviderMetadata(providers: readonly Provider[], extensions: ReadonlyMap<string, ProviderConfigInput>): OAuthProviderMetadata[];
+//# sourceMappingURL=oauth-provider-metadata.d.ts.map

package/dist/core/oauth-provider-metadata.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth-provider-metadata.d.ts","sourceRoot":"","sources":["../../src/core/oauth-provider-metadata.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAkBlE,wBAAgB,4BAA4B,CAC3C,SAAS,EAAE,SAAS,QAAQ,EAAE,EAC9B,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,GAClD,qBAAqB,EAAE,CAiBzB"}

package/dist/core/oauth-provider-metadata.js ADDED Viewed

@@ -0,0 +1,33 @@
+/**
+ * Providers whose login races a loopback callback server against a pasted code.
+ *
+ * `usesCallbackServer` is what makes the terminal offer that paste input. The
+ * flow needs it: the interactive host answers pi-ai's `manual_code` prompt with
+ * a promise that only `showManualInput` ever resolves, so a provider missing
+ * from this set issues the prompt into a input that is never shown and waits
+ * for the callback until it times out.
+ *
+ * OpenRouter belongs here as of pi 0.83.0, which added the manual redirect-URL
+ * fallback to its OAuth flow (upstream `61da9e2`, pi#7114) — its
+ * `loginOpenRouter` now races `waitForCredential()` against a `manual_code`
+ * prompt exactly as Anthropic and Codex do.
+ */
+const CALLBACK_SERVER_PROVIDERS = new Set(["anthropic", "openai-codex", "openrouter"]);
+export function collectOAuthProviderMetadata(providers, extensions) {
+    return providers
+        .filter((provider) => provider.auth.oauth)
+        .map((provider) => {
+        const providerOAuth = provider.auth.oauth;
+        const extensionOAuth = extensions.get(provider.id)?.oauth;
+        const loginLabel = extensionOAuth?.loginLabel ?? providerOAuth?.loginLabel;
+        const hasCallbackServerMetadata = extensionOAuth?.usesCallbackServer !== undefined || CALLBACK_SERVER_PROVIDERS.has(provider.id);
+        const usesCallbackServer = extensionOAuth?.usesCallbackServer ?? CALLBACK_SERVER_PROVIDERS.has(provider.id);
+        return {
+            id: provider.id,
+            name: provider.name ?? provider.id,
+            ...(loginLabel ? { loginLabel } : {}),
+            ...(hasCallbackServerMetadata ? { usesCallbackServer } : {}),
+        };
+    });
+}
+//# sourceMappingURL=oauth-provider-metadata.js.map

package/dist/core/oauth-provider-metadata.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"oauth-provider-metadata.js","sourceRoot":"","sources":["../../src/core/oauth-provider-metadata.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;GAaG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvF,MAAM,UAAU,4BAA4B,CAC3C,SAA8B,EAC9B,UAAoD;IAEpD,OAAO,SAAS;SACd,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;SACzC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QACjB,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;QAC1D,MAAM,UAAU,GAAG,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,UAAU,CAAC;QAC3E,MAAM,yBAAyB,GAC9B,cAAc,EAAE,kBAAkB,KAAK,SAAS,IAAI,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,kBAAkB,GAAG,cAAc,EAAE,kBAAkB,IAAI,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5G,OAAO;YACN,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE;YAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { Provider } from \"@earendil-works/pi-ai\";\nimport type { OAuthProviderMetadata } from \"./oauth-login.ts\";\nimport type { ProviderConfigInput } from \"./provider-composer.ts\";\n\n/**\n * Providers whose login races a loopback callback server against a pasted code.\n *\n * `usesCallbackServer` is what makes the terminal offer that paste input. The\n * flow needs it: the interactive host answers pi-ai's `manual_code` prompt with\n * a promise that only `showManualInput` ever resolves, so a provider missing\n * from this set issues the prompt into a input that is never shown and waits\n * for the callback until it times out.\n *\n * OpenRouter belongs here as of pi 0.83.0, which added the manual redirect-URL\n * fallback to its OAuth flow (upstream `61da9e2`, pi#7114) — its\n * `loginOpenRouter` now races `waitForCredential()` against a `manual_code`\n * prompt exactly as Anthropic and Codex do.\n */\nconst CALLBACK_SERVER_PROVIDERS = new Set([\"anthropic\", \"openai-codex\", \"openrouter\"]);\n\nexport function collectOAuthProviderMetadata(\n\tproviders: readonly Provider[],\n\textensions: ReadonlyMap<string, ProviderConfigInput>,\n): OAuthProviderMetadata[] {\n\treturn providers\n\t\t.filter((provider) => provider.auth.oauth)\n\t\t.map((provider) => {\n\t\t\tconst providerOAuth = provider.auth.oauth;\n\t\t\tconst extensionOAuth = extensions.get(provider.id)?.oauth;\n\t\t\tconst loginLabel = extensionOAuth?.loginLabel ?? providerOAuth?.loginLabel;\n\t\t\tconst hasCallbackServerMetadata =\n\t\t\t\textensionOAuth?.usesCallbackServer !== undefined || CALLBACK_SERVER_PROVIDERS.has(provider.id);\n\t\t\tconst usesCallbackServer = extensionOAuth?.usesCallbackServer ?? CALLBACK_SERVER_PROVIDERS.has(provider.id);\n\t\t\treturn {\n\t\t\t\tid: provider.id,\n\t\t\t\tname: provider.name ?? provider.id,\n\t\t\t\t...(loginLabel ? { loginLabel } : {}),\n\t\t\t\t...(hasCallbackServerMetadata ? { usesCallbackServer } : {}),\n\t\t\t};\n\t\t});\n}\n"]}

package/dist/core/openai-responses-payload-sanitizer.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"openai-responses-payload-sanitizer.js","sourceRoot":"","sources":["../../src/core/openai-responses-payload-sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAC9D,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAChD,MAAM,qCAAqC,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,SAAS,aAAa,CAAC,KAAc;~~IACnC~~,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;~~AAC9E~~,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA8B;~~IACnE~~,OAAO,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC;~~AAC1C~~,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,EAAW;~~IACxD~~,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;~~AACvE~~,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;~~IACpC~~,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;~~AAChE~~,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;~~IAC7C~~,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;~~AACxE~~,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAe;~~IAC9D~~,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,MAAM,GAAG,GAAG,iCAAiC,GAAG,MAAM,EAAE,CAAC;IAC/D,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAE1D,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,qCAAqC,GAAG,iCAAiC,CAAC,MAAM,CAAC;IACtG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,OAAO,GAAG,iCAAiC,GAAG,MAAM,EAAE,CAAC;~~AACzD~~,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAgB;~~IACrD~~,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,WAAW,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,WAAW,EAAE,CAAC;~~QAChB~~,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC;~~IACxB~~,CAAC;SAAM,CAAC;~~QACN~~,OAAO,IAAI,CAAC,EAAE,CAAC;~~IACjB~~,CAAC;IACD,OAAO,IAAI,CAAC;~~AACd~~,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAgB,EAAE,KAA8B;~~IAC7F~~,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAE9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,gBAAgB,GAAe,OAAO,CAAC;IAE3C,~~IACE~~,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;QAC7C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC1C,OAAO,CAAC,iBAAiB,GAAG,+BAA+B,~~EAC3D~~,CAAC;~~QACD~~,OAAO,GAAG,IAAI,CAAC;QACf,gBAAgB,GAAG,EAAE,GAAG,gBAAgB,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,CAAC;~~IACjG~~,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;~~QACjC~~,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;~~YACvC~~,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC3B,YAAY,GAAG,6BAA6B,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;YACrE,OAAO,MAAM,CAAC;~~QAChB~~,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;~~YACjB~~,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,GAAG,EAAE,GAAG,gBAAgB,EAAE,KAAK,EAAE,CAAC;~~QACpD~~,CAAC;~~IACH~~,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;~~AAC9C~~,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Api, Model } from \"@earendil-works/pi-ai/compat\";\n\ntype JsonObject = { [key: string]: JsonValue };\ntype JsonValue = string \| number \| boolean \| null \| JsonValue[] \| JsonObject;\n\nconst RESPONSES_FUNCTION_CALL_ID = /^fc_[A-Za-z0-9_-]{1,61}$/;\nconst RESPONSES_FUNCTION_CALL_ID_PREFIX = \"fc_\";\nconst MAX_RESPONSES_FUNCTION_CALL_ID_LENGTH = 64;\nexport const MIN_RESPONSES_MAX_OUTPUT_TOKENS = 16;\n\nfunction isPlainObject(value: unknown): value is JsonObject {\n ~~return~~ typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nexport function isOpenAIResponsesModel(model: Pick<Model<Api>, \"api\">): boolean {\n ~~return~~ model.api === \"openai-responses\";\n}\n\nexport function isValidResponsesFunctionCallId(id: unknown): id is string {\n ~~return~~ typeof id === \"string\" && RESPONSES_FUNCTION_CALL_ID.test(id);\n}\n\nfunction sha256Base64Url(value: string): string {\n ~~return~~ createHash(\"sha256\").update(value).digest(\"base64url\");\n}\n\nfunction sanitizedCallIdFragment(callId: string): string {\n ~~return~~ callId.replace(/[^A-Za-z0-9_-]/g, \"_\").replace(/^_+\|_+$/g, \"\");\n}\n\nexport function responsesFunctionCallIdForCallId(callId: unknown): string \| undefined {\n if (typeof callId !== \"string\" \|\| callId.length === 0) return undefined;\n ~~const~~ direct = `${RESPONSES_FUNCTION_CALL_ID_PREFIX}${callId}`;\n if (isValidResponsesFunctionCallId(direct)) return direct;\n\n ~~const~~ sanitized = sanitizedCallIdFragment(callId);\n ~~const~~ hash = sha256Base64Url(callId).slice(0, 16);\n ~~const~~ suffixBudget = MAX_RESPONSES_FUNCTION_CALL_ID_LENGTH - RESPONSES_FUNCTION_CALL_ID_PREFIX.length;\n ~~const~~ suffix = sanitized.length > 0 ? `${sanitized.slice(0, suffixBudget - hash.length - 1)}_${hash}` : hash;\n ~~return~~ `${RESPONSES_FUNCTION_CALL_ID_PREFIX}${suffix}`;\n}\n\nfunction sanitizeResponsesFunctionCall(item: JsonObject): boolean {\n if (item.type !== \"function_call\") return false;\n if (isValidResponsesFunctionCallId(item.id)) return false;\n\n ~~const~~ synthesized = responsesFunctionCallIdForCallId(item.call_id);\n if (synthesized) {\n ~~item~~.id = synthesized;\n } else {\n ~~delete~~ item.id;\n }\n ~~return~~ true;\n}\n\nexport function sanitizeOpenAIResponsesPayload(payload: unknown, model: Pick<Model<Api>, \"api\">): unknown {\n if (!isOpenAIResponsesModel(model) \|\| !isPlainObject(payload)) return payload;\n\n ~~let~~ changed = false;\n ~~let~~ sanitizedPayload: JsonObject = payload;\n\n if (\n ~~typeof~~ payload.max_output_tokens === \"number\" &&\n ~~Number~~.isFinite(payload.max_output_tokens) &&\n ~~payload~~.max_output_tokens < MIN_RESPONSES_MAX_OUTPUT_TOKENS\n ) {\n ~~changed~~ = true;\n ~~sanitizedPayload~~ = { ...sanitizedPayload, max_output_tokens: MIN_RESPONSES_MAX_OUTPUT_TOKENS };\n }\n\n if (Array.isArray(payload.input)) {\n ~~let~~ inputChanged = false;\n ~~const~~ input = payload.input.map((item) => {\n if (!isPlainObject(item)) return item;\n ~~const~~ cloned = { ...item };\n ~~inputChanged~~ = sanitizeResponsesFunctionCall(cloned) \|\| inputChanged;\n ~~return~~ cloned;\n });\n\n if (inputChanged) {\n ~~changed~~ = true;\n ~~sanitizedPayload~~ = { ...sanitizedPayload, input };\n }\n }\n\n ~~return~~ changed ? sanitizedPayload : payload;\n}\n"]}
1	+ {"version":3,"file":"openai-responses-payload-sanitizer.js","sourceRoot":"","sources":["../../src/core/openai-responses-payload-sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAC9D,MAAM,iCAAiC,GAAG,KAAK,CAAC;AAChD,MAAM,qCAAqC,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,SAAS,aAAa,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAA8B;IACpE,OAAO,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,EAAW;IACzD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,MAAe;IAC/D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxE,MAAM,MAAM,GAAG,GAAG,iCAAiC,GAAG,MAAM,EAAE,CAAC;IAC/D,IAAI,8BAA8B,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAE1D,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,qCAAqC,GAAG,iCAAiC,CAAC,MAAM,CAAC;IACtG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7G,OAAO,GAAG,iCAAiC,GAAG,MAAM,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,6BAA6B,CAAC,IAAgB;IACtD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1D,MAAM,WAAW,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,WAAW,CAAC;IACvB,CAAC;SAAM,CAAC;QACP,OAAO,IAAI,CAAC,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAgB,EAAE,KAA8B;IAC9F,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAE9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,gBAAgB,GAAe,OAAO,CAAC;IAE3C,IACC,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ;QAC7C,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC1C,OAAO,CAAC,iBAAiB,GAAG,+BAA+B,EAC1D,CAAC;QACF,OAAO,GAAG,IAAI,CAAC;QACf,gBAAgB,GAAG,EAAE,GAAG,gBAAgB,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YAC3B,YAAY,GAAG,6BAA6B,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;YACrE,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,gBAAgB,GAAG,EAAE,GAAG,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACnD,CAAC;IACF,CAAC;IAED,OAAO,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7C,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { Api, Model } from \"@earendil-works/pi-ai/compat\";\n\ntype JsonObject = { [key: string]: JsonValue };\ntype JsonValue = string \| number \| boolean \| null \| JsonValue[] \| JsonObject;\n\nconst RESPONSES_FUNCTION_CALL_ID = /^fc_[A-Za-z0-9_-]{1,61}$/;\nconst RESPONSES_FUNCTION_CALL_ID_PREFIX = \"fc_\";\nconst MAX_RESPONSES_FUNCTION_CALL_ID_LENGTH = 64;\nexport const MIN_RESPONSES_MAX_OUTPUT_TOKENS = 16;\n\nfunction isPlainObject(value: unknown): value is JsonObject {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nexport function isOpenAIResponsesModel(model: Pick<Model<Api>, \"api\">): boolean {\n\treturn model.api === \"openai-responses\";\n}\n\nexport function isValidResponsesFunctionCallId(id: unknown): id is string {\n\treturn typeof id === \"string\" && RESPONSES_FUNCTION_CALL_ID.test(id);\n}\n\nfunction sha256Base64Url(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"base64url\");\n}\n\nfunction sanitizedCallIdFragment(callId: string): string {\n\treturn callId.replace(/[^A-Za-z0-9_-]/g, \"_\").replace(/^_+\|_+$/g, \"\");\n}\n\nexport function responsesFunctionCallIdForCallId(callId: unknown): string \| undefined {\n\tif (typeof callId !== \"string\" \|\| callId.length === 0) return undefined;\n\tconst direct = `${RESPONSES_FUNCTION_CALL_ID_PREFIX}${callId}`;\n\tif (isValidResponsesFunctionCallId(direct)) return direct;\n\n\tconst sanitized = sanitizedCallIdFragment(callId);\n\tconst hash = sha256Base64Url(callId).slice(0, 16);\n\tconst suffixBudget = MAX_RESPONSES_FUNCTION_CALL_ID_LENGTH - RESPONSES_FUNCTION_CALL_ID_PREFIX.length;\n\tconst suffix = sanitized.length > 0 ? `${sanitized.slice(0, suffixBudget - hash.length - 1)}_${hash}` : hash;\n\treturn `${RESPONSES_FUNCTION_CALL_ID_PREFIX}${suffix}`;\n}\n\nfunction sanitizeResponsesFunctionCall(item: JsonObject): boolean {\n\tif (item.type !== \"function_call\") return false;\n\tif (isValidResponsesFunctionCallId(item.id)) return false;\n\n\tconst synthesized = responsesFunctionCallIdForCallId(item.call_id);\n\tif (synthesized) {\n\t\titem.id = synthesized;\n\t} else {\n\t\tdelete item.id;\n\t}\n\treturn true;\n}\n\nexport function sanitizeOpenAIResponsesPayload(payload: unknown, model: Pick<Model<Api>, \"api\">): unknown {\n\tif (!isOpenAIResponsesModel(model) \|\| !isPlainObject(payload)) return payload;\n\n\tlet changed = false;\n\tlet sanitizedPayload: JsonObject = payload;\n\n\tif (\n\t\ttypeof payload.max_output_tokens === \"number\" &&\n\t\tNumber.isFinite(payload.max_output_tokens) &&\n\t\tpayload.max_output_tokens < MIN_RESPONSES_MAX_OUTPUT_TOKENS\n\t) {\n\t\tchanged = true;\n\t\tsanitizedPayload = { ...sanitizedPayload, max_output_tokens: MIN_RESPONSES_MAX_OUTPUT_TOKENS };\n\t}\n\n\tif (Array.isArray(payload.input)) {\n\t\tlet inputChanged = false;\n\t\tconst input = payload.input.map((item) => {\n\t\t\tif (!isPlainObject(item)) return item;\n\t\t\tconst cloned = { ...item };\n\t\t\tinputChanged = sanitizeResponsesFunctionCall(cloned) \|\| inputChanged;\n\t\t\treturn cloned;\n\t\t});\n\n\t\tif (inputChanged) {\n\t\t\tchanged = true;\n\t\t\tsanitizedPayload = { ...sanitizedPayload, input };\n\t\t}\n\t}\n\n\treturn changed ? sanitizedPayload : payload;\n}\n"]}

package/dist/core/output-guard.d.ts CHANGED Viewed

@@ -4,6 +4,50 @@ export declare function isStdoutTakenOver(): boolean;
 /** Hand a small control frame directly to the OS pipe before synchronous user code begins. */
 export declare function writeRawStdoutControl(text: string): void;
 export declare function writeRawStdout(text: string): void;
+/**
+ * A `writeRawStdoutOnce` failure, carrying how much of the payload reached the
+ * stream.
+ *
+ * `emitted` is the answer the credential egress needs, and "some" is a distinct
+ * answer from "all": bytes that escaped cannot be recalled, but a caller told
+ * only that *something* left would report a truncated secret as a whole one.
+ *
+ *   - `"none"` — the write call threw before the stream accepted anything, or
+ *     the callback failed with `bytesWritten` unmoved, so the chunk was
+ *     buffered and dropped without a syscall. stdout is provably empty.
+ *   - `"partial"` — the counter advanced by less than the payload. stdout
+ *     carries a fragment, which is not a usable credential.
+ *   - `"all"` — the counter advanced by the whole payload and the failure came
+ *     after. stdout carries the credential.
+ *
+ * `bytesWritten` exists on the socket stdout is when it is a TTY or a pipe. A
+ * file redirect gets `SyncWriteStream`, which has no counter and writes
+ * synchronously — there a callback error means the `writeSync` itself failed,
+ * so nothing was emitted.
+ */
+export type RawStdoutEmission = "none" | "partial" | "all";
+export declare class RawStdoutWriteError extends Error {
+    readonly emitted: RawStdoutEmission;
+    constructor(message: string, options: {
+        cause: unknown;
+        emitted: RawStdoutEmission;
+    });
+}
+/**
+ * Write one chunk to the real stdout as a single awaited operation.
+ *
+ * Differs from `writeRawStdout` in the two ways the credential egress needs.
+ * The rejection reaches the caller instead of exiting the process, so the
+ * caller can report a cause of its own. And the chunk is handed to stdout
+ * exactly once — the ENOBUFS/EAGAIN retry in `writeRawStdoutChunk` would
+ * re-send the whole payload, which for a secret risks emitting it twice.
+ *
+ * Rejects with `RawStdoutWriteError`, whose `emitted` says how much left. A
+ * caller that must never report a failure over a stream carrying a whole
+ * credential — nor claim success over one carrying none of it, nor part of it —
+ * branches on that rather than on the presence of an error.
+ */
+export declare function writeRawStdoutOnce(text: string): Promise<void>;
 export declare function waitForRawStdoutBackpressure(): Promise<void>;
 export declare function flushRawStdout(): Promise<void>;
 //# sourceMappingURL=output-guard.d.ts.map

package/dist/core/output-guard.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"output-guard.d.ts","sourceRoot":"","sources":["../../src/core/output-guard.ts"],"names":[],"mappings":"AAkDA,wBAAgB,cAAc,IAAI,IAAI,CAmDrC;AAED,wBAAgB,aAAa,IAAI,IAAI,CAWpC;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CASxD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQjD;AAED,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CAQlE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAGpD"}
1	+ {"version":3,"file":"output-guard.d.ts","sourceRoot":"","sources":["../../src/core/output-guard.ts"],"names":[],"mappings":"AAkDA,wBAAgB,cAAc,IAAI,IAAI,CAmDrC;AAED,wBAAgB,aAAa,IAAI,IAAI,CAWpC;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CASxD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAQjD;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;AAE3D,qBAAa,mBAAoB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IAEpC,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,iBAAiB,CAAA;KAAE,EAInF;CACD;AAmBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmC9D;AAED,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,IAAI,CAAC,CAQlE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAGpD"}

package/dist/core/output-guard.js CHANGED Viewed

@@ -116,6 +116,69 @@ export function writeRawStdout(text) {
         process.exit(1);
     });
 }
+export class RawStdoutWriteError extends Error {
+    constructor(message, options) {
+        super(message, { cause: options.cause });
+        this.name = "RawStdoutWriteError";
+        this.emitted = options.emitted;
+    }
+}
+/** Bytes stdout has handed to the OS, when the stream counts them. */
+function rawStdoutBytesWritten() {
+    const counted = process.stdout.bytesWritten;
+    return typeof counted === "number" ? counted : undefined;
+}
+function classifyEmission(before, after, payloadBytes) {
+    if (before === undefined || after === undefined)
+        return "none";
+    const flushed = after - before;
+    if (flushed <= 0)
+        return "none";
+    return flushed >= payloadBytes ? "all" : "partial";
+}
+/**
+ * Write one chunk to the real stdout as a single awaited operation.
+ *
+ * Differs from `writeRawStdout` in the two ways the credential egress needs.
+ * The rejection reaches the caller instead of exiting the process, so the
+ * caller can report a cause of its own. And the chunk is handed to stdout
+ * exactly once — the ENOBUFS/EAGAIN retry in `writeRawStdoutChunk` would
+ * re-send the whole payload, which for a secret risks emitting it twice.
+ *
+ * Rejects with `RawStdoutWriteError`, whose `emitted` says how much left. A
+ * caller that must never report a failure over a stream carrying a whole
+ * credential — nor claim success over one carrying none of it, nor part of it —
+ * branches on that rather than on the presence of an error.
+ */
+export function writeRawStdoutOnce(text) {
+    if (text.length === 0) {
+        return Promise.resolve();
+    }
+    const payloadBytes = Buffer.byteLength(text);
+    const write = rawStdoutWriteTail.then(() => new Promise((resolve, reject) => {
+        const before = rawStdoutBytesWritten();
+        try {
+            getRawStdoutWrite()(text, (error) => {
+                if (!error) {
+                    resolve();
+                    return;
+                }
+                const emitted = classifyEmission(before, rawStdoutBytesWritten(), payloadBytes);
+                reject(new RawStdoutWriteError(error.message, { cause: error, emitted }));
+            });
+        }
+        catch (error) {
+            reject(new RawStdoutWriteError(error instanceof Error ? error.message : String(error), {
+                cause: error,
+                emitted: "none",
+            }));
+        }
+    }));
+    // The failure belongs to this caller alone; the shared tail stays settled so
+    // a later writer is not handed someone else's rejection.
+    rawStdoutWriteTail = write.then(() => { }, () => { });
+    return write;
+}
 export async function waitForRawStdoutBackpressure() {
     while (true) {
         const tail = rawStdoutWriteTail;

package/dist/core/output-guard.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"output-guard.js","sourceRoot":"","sources":["../../src/core/output-guard.ts"],"names":[],"mappings":"AAYA,IAAI,mBAAoD,CAAC;AAEzD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,IAAI,kBAAkB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE1D,SAAS,iBAAiB;IACzB,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,IAAI,CAAC;oBACJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;wBACnC,IAAI,KAAK;4BAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;4BACpB,OAAO,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnE,CAAC;YACF,CAAC,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAI,UAAyC,CAAC,IAAI,CAAC;YAC7D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACvE,MAAM,UAAU,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtF,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO;IACR,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;IAC1G,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;IAC1G,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAEjD,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CACvB,KAA0B,EAC1B,kBAAsE,EACtE,QAAyC,EAC/B,EAAE;QACZ,IAAI,OAAO,kBAAkB,KAAK,UAAU,EAAE,CAAC;YAC9C,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAgC,CAAC;IAElC,gFAAgF;IAChF,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,eAAe,GAAG;QACvB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;KAC9B,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC3C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAuB,CAAC;IACzB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC5C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAwB,CAAC;IAC1B,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC7C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAyB,CAAC;IAC3B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC3C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAuB,CAAC;IAEzB,mBAAmB,GAAG;QACrB,cAAc;QACd,cAAc;QACd,mBAAmB;QACnB,eAAe;KACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,OAAO;IACR,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC,eAAe,CAAC,GAAG,CAAC;IACtD,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC;IACxD,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC;IAC1D,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC,eAAe,CAAC,GAAG,CAAC;IACtD,mBAAmB,GAAG,SAAS,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,mBAAmB,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACnC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACR,CAAC;IACD,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B;IACjD,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAChC,MAAM,IAAI,CAAC;QACX,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACjC,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IACnC,MAAM,4BAA4B,EAAE,CAAC;IACrC,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["interface StdoutTakeoverState {\n\trawStdoutWrite: (chunk: string, callback?: (error?: Error \| null) => void) => boolean;\n\trawStderrWrite: (chunk: string, callback?: (error?: Error \| null) => void) => boolean;\n\toriginalStdoutWrite: typeof process.stdout.write;\n\toriginalConsole: {\n\t\tlog: typeof console.log;\n\t\tinfo: typeof console.info;\n\t\tdebug: typeof console.debug;\n\t\tdir: typeof console.dir;\n\t};\n}\n\nlet stdoutTakeoverState: StdoutTakeoverState \| undefined;\n\nconst RAW_STDOUT_RETRY_DELAY_MS = 10;\n\nlet rawStdoutWriteTail: Promise<void> = Promise.resolve();\n\nfunction getRawStdoutWrite(): StdoutTakeoverState[\"rawStdoutWrite\"] {\n\tif (stdoutTakeoverState) {\n\t\treturn stdoutTakeoverState.rawStdoutWrite;\n\t}\n\treturn process.stdout.write.bind(process.stdout) as StdoutTakeoverState[\"rawStdoutWrite\"];\n}\n\nasync function writeRawStdoutChunk(text: string): Promise<void> {\n\twhile (true) {\n\t\ttry {\n\t\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\t\ttry {\n\t\t\t\t\tgetRawStdoutWrite()(text, (error) => {\n\t\t\t\t\t\tif (error) reject(error);\n\t\t\t\t\t\telse resolve();\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(error instanceof Error ? error : new Error(String(error)));\n\t\t\t\t}\n\t\t\t});\n\t\t\treturn;\n\t\t} catch (error) {\n\t\t\tconst writeError = error instanceof Error ? error : new Error(String(error));\n\t\t\tconst code = (writeError as Error & { code?: unknown }).code;\n\t\t\tif (code !== \"ENOBUFS\" && code !== \"EAGAIN\" && code !== \"EWOULDBLOCK\") {\n\t\t\t\tthrow writeError;\n\t\t\t}\n\t\t\tawait new Promise<void>((resolve) => setTimeout(resolve, RAW_STDOUT_RETRY_DELAY_MS));\n\t\t}\n\t}\n}\n\nexport function takeOverStdout(): void {\n\tif (stdoutTakeoverState) {\n\t\treturn;\n\t}\n\n\tconst rawStdoutWrite = process.stdout.write.bind(process.stdout) as StdoutTakeoverState[\"rawStdoutWrite\"];\n\tconst rawStderrWrite = process.stderr.write.bind(process.stderr) as StdoutTakeoverState[\"rawStderrWrite\"];\n\tconst originalStdoutWrite = process.stdout.write;\n\n\tprocess.stdout.write = ((\n\t\tchunk: string \| Uint8Array,\n\t\tencodingOrCallback?: BufferEncoding \| ((error?: Error \| null) => void),\n\t\tcallback?: (error?: Error \| null) => void,\n\t): boolean => {\n\t\tif (typeof encodingOrCallback === \"function\") {\n\t\t\treturn rawStderrWrite(String(chunk), encodingOrCallback);\n\t\t}\n\t\treturn rawStderrWrite(String(chunk), callback);\n\t}) as typeof process.stdout.write;\n\n\t// Some runtimes (notably Bun) implement console.log/info/debug/dir natively and\n\t// write directly to the stdout file descriptor, bypassing the patched\n\t// process.stdout.write above. Redirect the stdout-bound console methods to\n\t// stderr (via console.error, which formats identically) so non-interactive\n\t// modes keep real stdout clean for machine-readable output across runtimes.\n\tconst originalConsole = {\n\t\tlog: console.log.bind(console),\n\t\tinfo: console.info.bind(console),\n\t\tdebug: console.debug.bind(console),\n\t\tdir: console.dir.bind(console),\n\t};\n\tconst errorConsole = console.error.bind(console);\n\tconsole.log = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.log;\n\tconsole.info = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.info;\n\tconsole.debug = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.debug;\n\tconsole.dir = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.dir;\n\n\tstdoutTakeoverState = {\n\t\trawStdoutWrite,\n\t\trawStderrWrite,\n\t\toriginalStdoutWrite,\n\t\toriginalConsole,\n\t};\n}\n\nexport function restoreStdout(): void {\n\tif (!stdoutTakeoverState) {\n\t\treturn;\n\t}\n\n\tprocess.stdout.write = stdoutTakeoverState.originalStdoutWrite;\n\tconsole.log = stdoutTakeoverState.originalConsole.log;\n\tconsole.info = stdoutTakeoverState.originalConsole.info;\n\tconsole.debug = stdoutTakeoverState.originalConsole.debug;\n\tconsole.dir = stdoutTakeoverState.originalConsole.dir;\n\tstdoutTakeoverState = undefined;\n}\n\nexport function isStdoutTakenOver(): boolean {\n\treturn stdoutTakeoverState !== undefined;\n}\n\n/** Hand a small control frame directly to the OS pipe before synchronous user code begins. */\nexport function writeRawStdoutControl(text: string): void {\n\tif (text.length === 0) return;\n\ttry {\n\t\tgetRawStdoutWrite()(text, (error) => {\n\t\t\tif (error) process.exit(1);\n\t\t});\n\t} catch {\n\t\tprocess.exit(1);\n\t}\n}\n\nexport function writeRawStdout(text: string): void {\n\tif (text.length === 0) {\n\t\treturn;\n\t}\n\trawStdoutWriteTail = rawStdoutWriteTail.then(() => writeRawStdoutChunk(text));\n\tvoid rawStdoutWriteTail.catch(() => {\n\t\tprocess.exit(1);\n\t});\n}\n\nexport async function waitForRawStdoutBackpressure(): Promise<void> {\n\twhile (true) {\n\t\tconst tail = rawStdoutWriteTail;\n\t\tawait tail;\n\t\tif (tail === rawStdoutWriteTail) {\n\t\t\treturn;\n\t\t}\n\t}\n}\n\nexport async function flushRawStdout(): Promise<void> {\n\tawait waitForRawStdoutBackpressure();\n\tawait writeRawStdoutChunk(\"\");\n}\n"]}
1	+ {"version":3,"file":"output-guard.js","sourceRoot":"","sources":["../../src/core/output-guard.ts"],"names":[],"mappings":"AAYA,IAAI,mBAAoD,CAAC;AAEzD,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAErC,IAAI,kBAAkB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAE1D,SAAS,iBAAiB;IACzB,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,cAAc,CAAC;IAC3C,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,IAAI,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,IAAI,CAAC;oBACJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;wBACnC,IAAI,KAAK;4BAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;4BACpB,OAAO,EAAE,CAAC;oBAChB,CAAC,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACnE,CAAC;YACF,CAAC,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAI,UAAyC,CAAC,IAAI,CAAC;YAC7D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACvE,MAAM,UAAU,CAAC;YAClB,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACtF,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc;IAC7B,IAAI,mBAAmB,EAAE,CAAC;QACzB,OAAO;IACR,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;IAC1G,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAA0C,CAAC;IAC1G,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAEjD,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CACvB,KAA0B,EAC1B,kBAAsE,EACtE,QAAyC,EAC/B,EAAE;QACZ,IAAI,OAAO,kBAAkB,KAAK,UAAU,EAAE,CAAC;YAC9C,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC,CAAgC,CAAC;IAElC,gFAAgF;IAChF,sEAAsE;IACtE,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,eAAe,GAAG;QACvB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;QAClC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;KAC9B,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC3C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAuB,CAAC;IACzB,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC5C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAwB,CAAC;IAC1B,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC7C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAyB,CAAC;IAC3B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAe,EAAQ,EAAE;QAC3C,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC,CAAuB,CAAC;IAEzB,mBAAmB,GAAG;QACrB,cAAc;QACd,cAAc;QACd,mBAAmB;QACnB,eAAe;KACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC5B,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,OAAO;IACR,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,mBAAmB,CAAC,mBAAmB,CAAC;IAC/D,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC,eAAe,CAAC,GAAG,CAAC;IACtD,OAAO,CAAC,IAAI,GAAG,mBAAmB,CAAC,eAAe,CAAC,IAAI,CAAC;IACxD,OAAO,CAAC,KAAK,GAAG,mBAAmB,CAAC,eAAe,CAAC,KAAK,CAAC;IAC1D,OAAO,CAAC,GAAG,GAAG,mBAAmB,CAAC,eAAe,CAAC,GAAG,CAAC;IACtD,mBAAmB,GAAG,SAAS,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAChC,OAAO,mBAAmB,KAAK,SAAS,CAAC;AAC1C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,IAAI,CAAC;QACJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACnC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACR,CAAC;IACD,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,KAAK,kBAAkB,CAAC,KAAK,CAAC,GAAG,EAAE;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;AACJ,CAAC;AAyBD,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAG7C,YAAY,OAAe,EAAE,OAAuD;QACnF,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;CACD;AAED,sEAAsE;AACtE,SAAS,qBAAqB;IAC7B,MAAM,OAAO,GAAI,OAAO,CAAC,MAAqC,CAAC,YAAY,CAAC;IAC5E,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CACxB,MAA0B,EAC1B,KAAyB,EACzB,YAAoB;IAEpB,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IAC/B,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,OAAO,OAAO,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CACpC,GAAG,EAAE,CACJ,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,IAAI,CAAC;YACJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACZ,OAAO,EAAE,CAAC;oBACV,OAAO;gBACR,CAAC;gBACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,EAAE,EAAE,YAAY,CAAC,CAAC;gBAChF,MAAM,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CACL,IAAI,mBAAmB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC/E,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,MAAM;aACf,CAAC,CACF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACH,CAAC;IACF,6EAA6E;IAC7E,yDAAyD;IACzD,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAC9B,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACR,CAAC;IACF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B;IACjD,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAChC,MAAM,IAAI,CAAC;QACX,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACjC,OAAO;QACR,CAAC;IACF,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc;IACnC,MAAM,4BAA4B,EAAE,CAAC;IACrC,MAAM,mBAAmB,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["interface StdoutTakeoverState {\n\trawStdoutWrite: (chunk: string, callback?: (error?: Error \| null) => void) => boolean;\n\trawStderrWrite: (chunk: string, callback?: (error?: Error \| null) => void) => boolean;\n\toriginalStdoutWrite: typeof process.stdout.write;\n\toriginalConsole: {\n\t\tlog: typeof console.log;\n\t\tinfo: typeof console.info;\n\t\tdebug: typeof console.debug;\n\t\tdir: typeof console.dir;\n\t};\n}\n\nlet stdoutTakeoverState: StdoutTakeoverState \| undefined;\n\nconst RAW_STDOUT_RETRY_DELAY_MS = 10;\n\nlet rawStdoutWriteTail: Promise<void> = Promise.resolve();\n\nfunction getRawStdoutWrite(): StdoutTakeoverState[\"rawStdoutWrite\"] {\n\tif (stdoutTakeoverState) {\n\t\treturn stdoutTakeoverState.rawStdoutWrite;\n\t}\n\treturn process.stdout.write.bind(process.stdout) as StdoutTakeoverState[\"rawStdoutWrite\"];\n}\n\nasync function writeRawStdoutChunk(text: string): Promise<void> {\n\twhile (true) {\n\t\ttry {\n\t\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\t\ttry {\n\t\t\t\t\tgetRawStdoutWrite()(text, (error) => {\n\t\t\t\t\t\tif (error) reject(error);\n\t\t\t\t\t\telse resolve();\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(error instanceof Error ? error : new Error(String(error)));\n\t\t\t\t}\n\t\t\t});\n\t\t\treturn;\n\t\t} catch (error) {\n\t\t\tconst writeError = error instanceof Error ? error : new Error(String(error));\n\t\t\tconst code = (writeError as Error & { code?: unknown }).code;\n\t\t\tif (code !== \"ENOBUFS\" && code !== \"EAGAIN\" && code !== \"EWOULDBLOCK\") {\n\t\t\t\tthrow writeError;\n\t\t\t}\n\t\t\tawait new Promise<void>((resolve) => setTimeout(resolve, RAW_STDOUT_RETRY_DELAY_MS));\n\t\t}\n\t}\n}\n\nexport function takeOverStdout(): void {\n\tif (stdoutTakeoverState) {\n\t\treturn;\n\t}\n\n\tconst rawStdoutWrite = process.stdout.write.bind(process.stdout) as StdoutTakeoverState[\"rawStdoutWrite\"];\n\tconst rawStderrWrite = process.stderr.write.bind(process.stderr) as StdoutTakeoverState[\"rawStderrWrite\"];\n\tconst originalStdoutWrite = process.stdout.write;\n\n\tprocess.stdout.write = ((\n\t\tchunk: string \| Uint8Array,\n\t\tencodingOrCallback?: BufferEncoding \| ((error?: Error \| null) => void),\n\t\tcallback?: (error?: Error \| null) => void,\n\t): boolean => {\n\t\tif (typeof encodingOrCallback === \"function\") {\n\t\t\treturn rawStderrWrite(String(chunk), encodingOrCallback);\n\t\t}\n\t\treturn rawStderrWrite(String(chunk), callback);\n\t}) as typeof process.stdout.write;\n\n\t// Some runtimes (notably Bun) implement console.log/info/debug/dir natively and\n\t// write directly to the stdout file descriptor, bypassing the patched\n\t// process.stdout.write above. Redirect the stdout-bound console methods to\n\t// stderr (via console.error, which formats identically) so non-interactive\n\t// modes keep real stdout clean for machine-readable output across runtimes.\n\tconst originalConsole = {\n\t\tlog: console.log.bind(console),\n\t\tinfo: console.info.bind(console),\n\t\tdebug: console.debug.bind(console),\n\t\tdir: console.dir.bind(console),\n\t};\n\tconst errorConsole = console.error.bind(console);\n\tconsole.log = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.log;\n\tconsole.info = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.info;\n\tconsole.debug = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.debug;\n\tconsole.dir = ((...args: unknown[]): void => {\n\t\terrorConsole(...args);\n\t}) as typeof console.dir;\n\n\tstdoutTakeoverState = {\n\t\trawStdoutWrite,\n\t\trawStderrWrite,\n\t\toriginalStdoutWrite,\n\t\toriginalConsole,\n\t};\n}\n\nexport function restoreStdout(): void {\n\tif (!stdoutTakeoverState) {\n\t\treturn;\n\t}\n\n\tprocess.stdout.write = stdoutTakeoverState.originalStdoutWrite;\n\tconsole.log = stdoutTakeoverState.originalConsole.log;\n\tconsole.info = stdoutTakeoverState.originalConsole.info;\n\tconsole.debug = stdoutTakeoverState.originalConsole.debug;\n\tconsole.dir = stdoutTakeoverState.originalConsole.dir;\n\tstdoutTakeoverState = undefined;\n}\n\nexport function isStdoutTakenOver(): boolean {\n\treturn stdoutTakeoverState !== undefined;\n}\n\n/** Hand a small control frame directly to the OS pipe before synchronous user code begins. /\nexport function writeRawStdoutControl(text: string): void {\n\tif (text.length === 0) return;\n\ttry {\n\t\tgetRawStdoutWrite()(text, (error) => {\n\t\t\tif (error) process.exit(1);\n\t\t});\n\t} catch {\n\t\tprocess.exit(1);\n\t}\n}\n\nexport function writeRawStdout(text: string): void {\n\tif (text.length === 0) {\n\t\treturn;\n\t}\n\trawStdoutWriteTail = rawStdoutWriteTail.then(() => writeRawStdoutChunk(text));\n\tvoid rawStdoutWriteTail.catch(() => {\n\t\tprocess.exit(1);\n\t});\n}\n\n/\n A `writeRawStdoutOnce` failure, carrying how much of the payload reached the\n * stream.\n \n `emitted` is the answer the credential egress needs, and \"some\" is a distinct\n * answer from \"all\": bytes that escaped cannot be recalled, but a caller told\n * only that something left would report a truncated secret as a whole one.\n \n - `\"none\"` — the write call threw before the stream accepted anything, or\n * the callback failed with `bytesWritten` unmoved, so the chunk was\n * buffered and dropped without a syscall. stdout is provably empty.\n * - `\"partial\"` — the counter advanced by less than the payload. stdout\n * carries a fragment, which is not a usable credential.\n * - `\"all\"` — the counter advanced by the whole payload and the failure came\n * after. stdout carries the credential.\n \n `bytesWritten` exists on the socket stdout is when it is a TTY or a pipe. A\n * file redirect gets `SyncWriteStream`, which has no counter and writes\n * synchronously — there a callback error means the `writeSync` itself failed,\n * so nothing was emitted.\n /\nexport type RawStdoutEmission = \"none\" \| \"partial\" \| \"all\";\n\nexport class RawStdoutWriteError extends Error {\n\treadonly emitted: RawStdoutEmission;\n\n\tconstructor(message: string, options: { cause: unknown; emitted: RawStdoutEmission }) {\n\t\tsuper(message, { cause: options.cause });\n\t\tthis.name = \"RawStdoutWriteError\";\n\t\tthis.emitted = options.emitted;\n\t}\n}\n\n/* Bytes stdout has handed to the OS, when the stream counts them. /\nfunction rawStdoutBytesWritten(): number \| undefined {\n\tconst counted = (process.stdout as { bytesWritten?: unknown }).bytesWritten;\n\treturn typeof counted === \"number\" ? counted : undefined;\n}\n\nfunction classifyEmission(\n\tbefore: number \| undefined,\n\tafter: number \| undefined,\n\tpayloadBytes: number,\n): RawStdoutEmission {\n\tif (before === undefined \|\| after === undefined) return \"none\";\n\tconst flushed = after - before;\n\tif (flushed <= 0) return \"none\";\n\treturn flushed >= payloadBytes ? \"all\" : \"partial\";\n}\n\n/\n Write one chunk to the real stdout as a single awaited operation.\n \n Differs from `writeRawStdout` in the two ways the credential egress needs.\n * The rejection reaches the caller instead of exiting the process, so the\n * caller can report a cause of its own. And the chunk is handed to stdout\n * exactly once — the ENOBUFS/EAGAIN retry in `writeRawStdoutChunk` would\n * re-send the whole payload, which for a secret risks emitting it twice.\n \n Rejects with `RawStdoutWriteError`, whose `emitted` says how much left. A\n * caller that must never report a failure over a stream carrying a whole\n * credential — nor claim success over one carrying none of it, nor part of it —\n * branches on that rather than on the presence of an error.\n */\nexport function writeRawStdoutOnce(text: string): Promise<void> {\n\tif (text.length === 0) {\n\t\treturn Promise.resolve();\n\t}\n\tconst payloadBytes = Buffer.byteLength(text);\n\tconst write = rawStdoutWriteTail.then(\n\t\t() =>\n\t\t\tnew Promise<void>((resolve, reject) => {\n\t\t\t\tconst before = rawStdoutBytesWritten();\n\t\t\t\ttry {\n\t\t\t\t\tgetRawStdoutWrite()(text, (error) => {\n\t\t\t\t\t\tif (!error) {\n\t\t\t\t\t\t\tresolve();\n\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst emitted = classifyEmission(before, rawStdoutBytesWritten(), payloadBytes);\n\t\t\t\t\t\treject(new RawStdoutWriteError(error.message, { cause: error, emitted }));\n\t\t\t\t\t});\n\t\t\t\t} catch (error) {\n\t\t\t\t\treject(\n\t\t\t\t\t\tnew RawStdoutWriteError(error instanceof Error ? error.message : String(error), {\n\t\t\t\t\t\t\tcause: error,\n\t\t\t\t\t\t\temitted: \"none\",\n\t\t\t\t\t\t}),\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t}),\n\t);\n\t// The failure belongs to this caller alone; the shared tail stays settled so\n\t// a later writer is not handed someone else's rejection.\n\trawStdoutWriteTail = write.then(\n\t\t() => {},\n\t\t() => {},\n\t);\n\treturn write;\n}\n\nexport async function waitForRawStdoutBackpressure(): Promise<void> {\n\twhile (true) {\n\t\tconst tail = rawStdoutWriteTail;\n\t\tawait tail;\n\t\tif (tail === rawStdoutWriteTail) {\n\t\t\treturn;\n\t\t}\n\t}\n}\n\nexport async function flushRawStdout(): Promise<void> {\n\tawait waitForRawStdoutBackpressure();\n\tawait writeRawStdoutChunk(\"\");\n}\n"]}

package/dist/core/package-manager-auto-resources.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"package-manager-auto-resources.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-auto-resources.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,~~EAAE~~,aAAa,~~EAAE~~,qBAAqB,~~EAAE~~,YAAY,~~EAAE~~,mBAAmB,~~EAAgB~~,MAAM,4BAA4B,CAAC;~~AACxI~~,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,wBAAsB,4BAA4B,CACjD,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,QAAQ,EAAE,YAAY,GACpB,OAAO,CAAC,OAAO,CAAC,~~CAyBlB~~;AAED,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,qBAAqB,EAC9B,WAAW,EAAE,mBAAmB,EAChC,cAAc,EAAE,UAAU,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,EAChE,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,EAClE,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,~~CAoDf~~"}
1	+ {"version":3,"file":"package-manager-auto-resources.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-auto-resources.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACX,aAAa,EACb,qBAAqB,EACrB,YAAY,EACZ,mBAAmB,EAEnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,wBAAsB,4BAA4B,CACjD,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,mBAAmB,EAChC,MAAM,EAAE,aAAa,GAAG,SAAS,EACjC,QAAQ,EAAE,YAAY,GACpB,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAED,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,qBAAqB,EAC9B,WAAW,EAAE,mBAAmB,EAChC,cAAc,EAAE,UAAU,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,EAChE,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,EAClE,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAiJf"}

package/dist/core/package-manager-auto-resources.js CHANGED Viewed

@@ -34,7 +34,12 @@ export async function collectProjectLocalResources(sourceRoot, accumulator, filt
 }
 export async function addAutoDiscoveredResources(context, accumulator, globalSettings, projectSettings, globalBaseDir, projectBaseDir) {
     const userMetadata = { source: "auto", scope: "user", origin: "top-level", baseDir: globalBaseDir };
-    const projectMetadata = { source: "auto", scope: "project", origin: "top-level", baseDir: projectBaseDir };
+    const projectMetadata = {
+        source: "auto",
+        scope: "project",
+        origin: "top-level",
+        baseDir: projectBaseDir,
+    };
     const userOverrides = {
         extensions: (globalSettings.extensions ?? []),
         skills: (globalSettings.skills ?? []),
@@ -62,8 +67,12 @@ export async function addAutoDiscoveredResources(context, accumulator, globalSet
             addResource(target, path, metadata, isEnabledByOverrides(path, overrides, baseDir));
     };
     if (projectTrusted) {
-        for (const configDir of projectConfigDirs) {
-            const metadata = { ...projectMetadata, baseDir: configDir };
+        for (const [index, configDir] of projectConfigDirs.entries()) {
+            const metadata = {
+                ...projectMetadata,
+                baseDir: configDir,
+                configurationOrigin: index === 0 ? "atomic" : "inherited-pi",
+            };
             addResources("extensions", await collectAutoExtensionEntries(join(configDir, "extensions")), metadata, projectOverrides.extensions, configDir);
             addResources("skills", await collectAutoSkillEntries(join(configDir, "skills"), "pi"), metadata, projectOverrides.skills, configDir);
             addResources("prompts", await collectAutoPromptEntries(join(configDir, "prompts")), metadata, projectOverrides.prompts, configDir);
@@ -75,8 +84,12 @@ export async function addAutoDiscoveredResources(context, accumulator, globalSet
         const agentsBaseDir = dirname(agentsSkillsDir);
         addResources("skills", await collectAutoSkillEntries(agentsSkillsDir, "agents"), { ...projectMetadata, baseDir: agentsBaseDir }, projectOverrides.skills, agentsBaseDir);
     }
-    for (const configDir of userConfigDirs) {
-        const metadata = { ...userMetadata, baseDir: configDir };
+    for (const [index, configDir] of userConfigDirs.entries()) {
+        const metadata = {
+            ...userMetadata,
+            baseDir: configDir,
+            configurationOrigin: index === 0 ? "atomic" : "inherited-pi",
+        };
         addResources("extensions", await collectAutoExtensionEntries(join(configDir, "extensions")), metadata, userOverrides.extensions, configDir);
         addResources("skills", await collectAutoSkillEntries(join(configDir, "skills"), "pi"), metadata, userOverrides.skills, configDir);
         addResources("prompts", await collectAutoPromptEntries(join(configDir, "prompts")), metadata, userOverrides.prompts, configDir);

package/dist/core/package-manager-auto-resources.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"package-manager-auto-resources.js","sourceRoot":"","sources":["../../src/core/package-manager-auto-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAI7F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,UAAkB,EAClB,WAAgC,EAChC,MAAiC,EACjC,QAAsB;IAEtB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,eAAe,GAAiB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACvG,MAAM,YAAY,GAAG,CAAC,YAA0B,EAAE,KAAe,EAAE,gBAA8B,EAAE,QAA8B,EAAQ,EAAE;QAC1I,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,QAAQ,KAAK,SAAS;YAC1C,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACtB,CAAC,CAAC,IAAI,GAAG,EAAU;gBACnB,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,cAAc,GAAiB,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChF,YAAY,CAAC,YAAY,EAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACjI,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvH,YAAY,CAAC,SAAS,EAAE,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACrH,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjH,YAAY,CAAC,WAAW,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5J,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAA8B,EAC9B,WAAgC,EAChC,cAAgE,EAChE,eAAkE,EAClE,aAAqB,EACrB,cAAsB;IAEtB,MAAM,YAAY,GAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAClH,MAAM,eAAe,GAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IACzH,MAAM,aAAa,GAAG;QACrB,UAAU,EAAE,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAa;QACzD,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAa;QACjD,OAAO,EAAE,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAa;QACnD,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAa;QACjD,SAAS,EAAE,CAAC,cAAc,CAAC,SAAS,IAAI,EAAE,CAAa;KACvD,CAAC;IACF,MAAM,gBAAgB,GAAG;QACxB,UAAU,EAAE,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAa;QAC1D,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAa;QAClD,OAAO,EAAE,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAa;QACpD,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAa;QAClD,SAAS,EAAE,CAAC,eAAe,CAAC,SAAS,IAAI,EAAE,CAAa;KACxD,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IAClE,MAAM,sBAAsB,GAAG,cAAc;QAC5C,CAAC,CAAC,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACpH,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,YAAY,GAAG,CAAC,YAA0B,EAAE,KAAe,EAAE,QAAsB,EAAE,SAAmB,EAAE,OAAe,EAAQ,EAAE;QACxI,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/G,CAAC,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAiB,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1E,YAAY,CAAC,YAAY,EAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YAC/I,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrI,YAAY,CAAC,SAAS,EAAE,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACnI,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/H,YAAY,CAAC,WAAW,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACnJ,CAAC;IACF,CAAC;IACD,KAAK,MAAM,eAAe,IAAI,sBAAsB,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1K,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAiB,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACvE,YAAY,CAAC,YAAY,EAAE,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC5I,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAClI,YAAY,CAAC,SAAS,EAAE,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChI,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5H,YAAY,CAAC,WAAW,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAChJ,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvD,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAChL,CAAC","sourcesContent":["import { dirname, join, resolve } from \"node:path\";\nimport { getProjectConfigDirs } from \"../config.ts\";\nimport { getBaseDirsForScope, getHomeDir } from \"./package-manager-paths.ts\";\nimport { addResource, getTargetMap } from \"./package-manager-resource-accumulator.ts\";\nimport {\n\tcollectAncestorAgentsSkillDirs,\n\tcollectAutoExtensionEntries,\n\tcollectAutoPromptEntries,\n\tcollectAutoSkillEntries,\n\tcollectAutoThemeEntries,\n\tcollectResourceFiles,\n} from \"./package-manager-resource-files.ts\";\nimport { applyPatterns, isEnabledByOverrides } from \"./package-manager-resource-patterns.ts\";\nimport type { PackageFilter, PackageManagerContext, PathMetadata, ResourceAccumulator, ResourceType } from \"./package-manager-types.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\n\nexport async function collectProjectLocalResources(\n\tsourceRoot: string,\n\taccumulator: ResourceAccumulator,\n\tfilter: PackageFilter \| undefined,\n\tmetadata: PathMetadata,\n): Promise<boolean> {\n\tlet found = false;\n\tconst projectMetadata: PathMetadata = { ...metadata, origin: \"top-level\", borrowedProjectLocal: true };\n\tconst addResources = (resourceType: ResourceType, paths: string[], resourceMetadata: PathMetadata, patterns: string[] \| undefined): void => {\n\t\tif (paths.length === 0) return;\n\t\tfound = true;\n\t\tconst target = getTargetMap(accumulator, resourceType);\n\t\tconst enabledPaths = patterns === undefined\n\t\t\t? new Set(paths)\n\t\t\t: patterns.length === 0\n\t\t\t\t? new Set<string>()\n\t\t\t\t: applyPatterns(paths, patterns, sourceRoot);\n\t\tfor (const path of paths) addResource(target, path, resourceMetadata, enabledPaths.has(path));\n\t};\n\tfor (const configDir of getProjectConfigDirs(sourceRoot)) {\n\t\tconst configMetadata: PathMetadata = { ...projectMetadata, baseDir: configDir };\n\t\taddResources(\"extensions\", await collectAutoExtensionEntries(join(configDir, \"extensions\")), configMetadata, filter?.extensions);\n\t\taddResources(\"skills\", await collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"), configMetadata, filter?.skills);\n\t\taddResources(\"prompts\", await collectAutoPromptEntries(join(configDir, \"prompts\")), configMetadata, filter?.prompts);\n\t\taddResources(\"themes\", await collectAutoThemeEntries(join(configDir, \"themes\")), configMetadata, filter?.themes);\n\t\taddResources(\"workflows\", await collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"), configMetadata, filter?.workflows);\n\t}\n\tconst agentsSkillsDir = join(sourceRoot, \".agents\", \"skills\");\n\taddResources(\"skills\", await collectAutoSkillEntries(agentsSkillsDir, \"agents\"), { ...projectMetadata, baseDir: dirname(agentsSkillsDir) }, filter?.skills);\n\treturn found;\n}\n\nexport async function addAutoDiscoveredResources(\n\tcontext: PackageManagerContext,\n\taccumulator: ResourceAccumulator,\n\tglobalSettings: ReturnType<SettingsManager[\"getGlobalSettings\"]>,\n\tprojectSettings: ReturnType<SettingsManager[\"getProjectSettings\"]>,\n\tglobalBaseDir: string,\n\tprojectBaseDir: string,\n): Promise<void> {\n\tconst userMetadata: PathMetadata = { source: \"auto\", scope: \"user\", origin: \"top-level\", baseDir: globalBaseDir };\n\tconst projectMetadata: PathMetadata = { source: \"auto\", scope: \"project\", origin: \"top-level\", baseDir: projectBaseDir };\n\tconst userOverrides = {\n\t\textensions: (globalSettings.extensions ?? []) as string[],\n\t\tskills: (globalSettings.skills ?? []) as string[],\n\t\tprompts: (globalSettings.prompts ?? []) as string[],\n\t\tthemes: (globalSettings.themes ?? []) as string[],\n\t\tworkflows: (globalSettings.workflows ?? []) as string[],\n\t};\n\tconst projectOverrides = {\n\t\textensions: (projectSettings.extensions ?? []) as string[],\n\t\tskills: (projectSettings.skills ?? []) as string[],\n\t\tprompts: (projectSettings.prompts ?? []) as string[],\n\t\tthemes: (projectSettings.themes ?? []) as string[],\n\t\tworkflows: (projectSettings.workflows ?? []) as string[],\n\t};\n\tconst userConfigDirs = getBaseDirsForScope(context, \"user\");\n\tconst projectConfigDirs = getBaseDirsForScope(context, \"project\");\n\tconst userAgentsSkillsDir = join(getHomeDir(), \".agents\", \"skills\");\n\tconst projectTrusted = context.settingsManager.isProjectTrusted();\n\tconst projectAgentsSkillDirs = projectTrusted\n\t\t? (await collectAncestorAgentsSkillDirs(context.cwd)).filter((dir) => resolve(dir) !== resolve(userAgentsSkillsDir))\n\t\t: [];\n\tconst addResources = (resourceType: ResourceType, paths: string[], metadata: PathMetadata, overrides: string[], baseDir: string): void => {\n\t\tconst target = getTargetMap(accumulator, resourceType);\n\t\tfor (const path of paths) addResource(target, path, metadata, isEnabledByOverrides(path, overrides, baseDir));\n\t};\n\tif (projectTrusted) {\n\t\tfor (const configDir of projectConfigDirs) {\n\t\t\tconst metadata: PathMetadata = { ...projectMetadata, baseDir: configDir };\n\t\t\taddResources(\"extensions\", await collectAutoExtensionEntries(join(configDir, \"extensions\")), metadata, projectOverrides.extensions, configDir);\n\t\t\taddResources(\"skills\", await collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"), metadata, projectOverrides.skills, configDir);\n\t\t\taddResources(\"prompts\", await collectAutoPromptEntries(join(configDir, \"prompts\")), metadata, projectOverrides.prompts, configDir);\n\t\t\taddResources(\"themes\", await collectAutoThemeEntries(join(configDir, \"themes\")), metadata, projectOverrides.themes, configDir);\n\t\t\taddResources(\"workflows\", await collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"), metadata, projectOverrides.workflows, configDir);\n\t\t}\n\t}\n\tfor (const agentsSkillsDir of projectAgentsSkillDirs) {\n\t\tconst agentsBaseDir = dirname(agentsSkillsDir);\n\t\taddResources(\"skills\", await collectAutoSkillEntries(agentsSkillsDir, \"agents\"), { ...projectMetadata, baseDir: agentsBaseDir }, projectOverrides.skills, agentsBaseDir);\n\t}\n\tfor (const configDir of userConfigDirs) {\n\t\tconst metadata: PathMetadata = { ...userMetadata, baseDir: configDir };\n\t\taddResources(\"extensions\", await collectAutoExtensionEntries(join(configDir, \"extensions\")), metadata, userOverrides.extensions, configDir);\n\t\taddResources(\"skills\", await collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"), metadata, userOverrides.skills, configDir);\n\t\taddResources(\"prompts\", await collectAutoPromptEntries(join(configDir, \"prompts\")), metadata, userOverrides.prompts, configDir);\n\t\taddResources(\"themes\", await collectAutoThemeEntries(join(configDir, \"themes\")), metadata, userOverrides.themes, configDir);\n\t\taddResources(\"workflows\", await collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"), metadata, userOverrides.workflows, configDir);\n\t}\n\tconst userAgentsBaseDir = dirname(userAgentsSkillsDir);\n\taddResources(\"skills\", await collectAutoSkillEntries(userAgentsSkillsDir, \"agents\"), { ...userMetadata, baseDir: userAgentsBaseDir }, userOverrides.skills, userAgentsBaseDir);\n}\n"]}
1	+ {"version":3,"file":"package-manager-auto-resources.js","sourceRoot":"","sources":["../../src/core/package-manager-auto-resources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EACN,8BAA8B,EAC9B,2BAA2B,EAC3B,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,GACpB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAU7F,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,UAAkB,EAClB,WAAgC,EAChC,MAAiC,EACjC,QAAsB;IAEtB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,MAAM,eAAe,GAAiB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IACvG,MAAM,YAAY,GAAG,CACpB,YAA0B,EAC1B,KAAe,EACf,gBAA8B,EAC9B,QAA8B,EACvB,EAAE;QACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,YAAY,GACjB,QAAQ,KAAK,SAAS;YACrB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC;YAChB,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACtB,CAAC,CAAC,IAAI,GAAG,EAAU;gBACnB,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,cAAc,GAAiB,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAChF,YAAY,CACX,YAAY,EACZ,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAChE,cAAc,EACd,MAAM,EAAE,UAAU,CAClB,CAAC;QACF,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAC9D,cAAc,EACd,MAAM,EAAE,MAAM,CACd,CAAC;QACF,YAAY,CACX,SAAS,EACT,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAC1D,cAAc,EACd,MAAM,EAAE,OAAO,CACf,CAAC;QACF,YAAY,CAAC,QAAQ,EAAE,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjH,YAAY,CACX,WAAW,EACX,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EACrE,cAAc,EACd,MAAM,EAAE,SAAS,CACjB,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9D,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,eAAe,EAAE,QAAQ,CAAC,EACxD,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,EACzD,MAAM,EAAE,MAAM,CACd,CAAC;IACF,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC/C,OAA8B,EAC9B,WAAgC,EAChC,cAAgE,EAChE,eAAkE,EAClE,aAAqB,EACrB,cAAsB;IAEtB,MAAM,YAAY,GAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAClH,MAAM,eAAe,GAAiB;QACrC,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,cAAc;KACvB,CAAC;IACF,MAAM,aAAa,GAAG;QACrB,UAAU,EAAE,CAAC,cAAc,CAAC,UAAU,IAAI,EAAE,CAAa;QACzD,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAa;QACjD,OAAO,EAAE,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,CAAa;QACnD,MAAM,EAAE,CAAC,cAAc,CAAC,MAAM,IAAI,EAAE,CAAa;QACjD,SAAS,EAAE,CAAC,cAAc,CAAC,SAAS,IAAI,EAAE,CAAa;KACvD,CAAC;IACF,MAAM,gBAAgB,GAAG;QACxB,UAAU,EAAE,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAa;QAC1D,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAa;QAClD,OAAO,EAAE,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAa;QACpD,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,IAAI,EAAE,CAAa;QAClD,SAAS,EAAE,CAAC,eAAe,CAAC,SAAS,IAAI,EAAE,CAAa;KACxD,CAAC;IACF,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IAClE,MAAM,sBAAsB,GAAG,cAAc;QAC5C,CAAC,CAAC,CAAC,MAAM,8BAA8B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC1D,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CACtD;QACF,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,YAAY,GAAG,CACpB,YAA0B,EAC1B,KAAe,EACf,QAAsB,EACtB,SAAmB,EACnB,OAAe,EACR,EAAE;QACT,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACvD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/G,CAAC,CAAC;IACF,IAAI,cAAc,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAiB;gBAC9B,GAAG,eAAe;gBAClB,OAAO,EAAE,SAAS;gBAClB,mBAAmB,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;aAC5D,CAAC;YACF,YAAY,CACX,YAAY,EACZ,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAChE,QAAQ,EACR,gBAAgB,CAAC,UAAU,EAC3B,SAAS,CACT,CAAC;YACF,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAC9D,QAAQ,EACR,gBAAgB,CAAC,MAAM,EACvB,SAAS,CACT,CAAC;YACF,YAAY,CACX,SAAS,EACT,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAC1D,QAAQ,EACR,gBAAgB,CAAC,OAAO,EACxB,SAAS,CACT,CAAC;YACF,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACxD,QAAQ,EACR,gBAAgB,CAAC,MAAM,EACvB,SAAS,CACT,CAAC;YACF,YAAY,CACX,WAAW,EACX,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EACrE,QAAQ,EACR,gBAAgB,CAAC,SAAS,EAC1B,SAAS,CACT,CAAC;QACH,CAAC;IACF,CAAC;IACD,KAAK,MAAM,eAAe,IAAI,sBAAsB,EAAE,CAAC;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QAC/C,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,eAAe,EAAE,QAAQ,CAAC,EACxD,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,aAAa,EAAE,EAC9C,gBAAgB,CAAC,MAAM,EACvB,aAAa,CACb,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAiB;YAC9B,GAAG,YAAY;YACf,OAAO,EAAE,SAAS;YAClB,mBAAmB,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc;SAC5D,CAAC;QACF,YAAY,CACX,YAAY,EACZ,MAAM,2BAA2B,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,EAChE,QAAQ,EACR,aAAa,CAAC,UAAU,EACxB,SAAS,CACT,CAAC;QACF,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,EAC9D,QAAQ,EACR,aAAa,CAAC,MAAM,EACpB,SAAS,CACT,CAAC;QACF,YAAY,CACX,SAAS,EACT,MAAM,wBAAwB,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EAC1D,QAAQ,EACR,aAAa,CAAC,OAAO,EACrB,SAAS,CACT,CAAC;QACF,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EACxD,QAAQ,EACR,aAAa,CAAC,MAAM,EACpB,SAAS,CACT,CAAC;QACF,YAAY,CACX,WAAW,EACX,MAAM,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,EACrE,QAAQ,EACR,aAAa,CAAC,SAAS,EACvB,SAAS,CACT,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvD,YAAY,CACX,QAAQ,EACR,MAAM,uBAAuB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAC5D,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAC/C,aAAa,CAAC,MAAM,EACpB,iBAAiB,CACjB,CAAC;AACH,CAAC","sourcesContent":["import { dirname, join, resolve } from \"node:path\";\nimport { getProjectConfigDirs } from \"../config.ts\";\nimport { getBaseDirsForScope, getHomeDir } from \"./package-manager-paths.ts\";\nimport { addResource, getTargetMap } from \"./package-manager-resource-accumulator.ts\";\nimport {\n\tcollectAncestorAgentsSkillDirs,\n\tcollectAutoExtensionEntries,\n\tcollectAutoPromptEntries,\n\tcollectAutoSkillEntries,\n\tcollectAutoThemeEntries,\n\tcollectResourceFiles,\n} from \"./package-manager-resource-files.ts\";\nimport { applyPatterns, isEnabledByOverrides } from \"./package-manager-resource-patterns.ts\";\nimport type {\n\tPackageFilter,\n\tPackageManagerContext,\n\tPathMetadata,\n\tResourceAccumulator,\n\tResourceType,\n} from \"./package-manager-types.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\n\nexport async function collectProjectLocalResources(\n\tsourceRoot: string,\n\taccumulator: ResourceAccumulator,\n\tfilter: PackageFilter \| undefined,\n\tmetadata: PathMetadata,\n): Promise<boolean> {\n\tlet found = false;\n\tconst projectMetadata: PathMetadata = { ...metadata, origin: \"top-level\", borrowedProjectLocal: true };\n\tconst addResources = (\n\t\tresourceType: ResourceType,\n\t\tpaths: string[],\n\t\tresourceMetadata: PathMetadata,\n\t\tpatterns: string[] \| undefined,\n\t): void => {\n\t\tif (paths.length === 0) return;\n\t\tfound = true;\n\t\tconst target = getTargetMap(accumulator, resourceType);\n\t\tconst enabledPaths =\n\t\t\tpatterns === undefined\n\t\t\t\t? new Set(paths)\n\t\t\t\t: patterns.length === 0\n\t\t\t\t\t? new Set<string>()\n\t\t\t\t\t: applyPatterns(paths, patterns, sourceRoot);\n\t\tfor (const path of paths) addResource(target, path, resourceMetadata, enabledPaths.has(path));\n\t};\n\tfor (const configDir of getProjectConfigDirs(sourceRoot)) {\n\t\tconst configMetadata: PathMetadata = { ...projectMetadata, baseDir: configDir };\n\t\taddResources(\n\t\t\t\"extensions\",\n\t\t\tawait collectAutoExtensionEntries(join(configDir, \"extensions\")),\n\t\t\tconfigMetadata,\n\t\t\tfilter?.extensions,\n\t\t);\n\t\taddResources(\n\t\t\t\"skills\",\n\t\t\tawait collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"),\n\t\t\tconfigMetadata,\n\t\t\tfilter?.skills,\n\t\t);\n\t\taddResources(\n\t\t\t\"prompts\",\n\t\t\tawait collectAutoPromptEntries(join(configDir, \"prompts\")),\n\t\t\tconfigMetadata,\n\t\t\tfilter?.prompts,\n\t\t);\n\t\taddResources(\"themes\", await collectAutoThemeEntries(join(configDir, \"themes\")), configMetadata, filter?.themes);\n\t\taddResources(\n\t\t\t\"workflows\",\n\t\t\tawait collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"),\n\t\t\tconfigMetadata,\n\t\t\tfilter?.workflows,\n\t\t);\n\t}\n\tconst agentsSkillsDir = join(sourceRoot, \".agents\", \"skills\");\n\taddResources(\n\t\t\"skills\",\n\t\tawait collectAutoSkillEntries(agentsSkillsDir, \"agents\"),\n\t\t{ ...projectMetadata, baseDir: dirname(agentsSkillsDir) },\n\t\tfilter?.skills,\n\t);\n\treturn found;\n}\n\nexport async function addAutoDiscoveredResources(\n\tcontext: PackageManagerContext,\n\taccumulator: ResourceAccumulator,\n\tglobalSettings: ReturnType<SettingsManager[\"getGlobalSettings\"]>,\n\tprojectSettings: ReturnType<SettingsManager[\"getProjectSettings\"]>,\n\tglobalBaseDir: string,\n\tprojectBaseDir: string,\n): Promise<void> {\n\tconst userMetadata: PathMetadata = { source: \"auto\", scope: \"user\", origin: \"top-level\", baseDir: globalBaseDir };\n\tconst projectMetadata: PathMetadata = {\n\t\tsource: \"auto\",\n\t\tscope: \"project\",\n\t\torigin: \"top-level\",\n\t\tbaseDir: projectBaseDir,\n\t};\n\tconst userOverrides = {\n\t\textensions: (globalSettings.extensions ?? []) as string[],\n\t\tskills: (globalSettings.skills ?? []) as string[],\n\t\tprompts: (globalSettings.prompts ?? []) as string[],\n\t\tthemes: (globalSettings.themes ?? []) as string[],\n\t\tworkflows: (globalSettings.workflows ?? []) as string[],\n\t};\n\tconst projectOverrides = {\n\t\textensions: (projectSettings.extensions ?? []) as string[],\n\t\tskills: (projectSettings.skills ?? []) as string[],\n\t\tprompts: (projectSettings.prompts ?? []) as string[],\n\t\tthemes: (projectSettings.themes ?? []) as string[],\n\t\tworkflows: (projectSettings.workflows ?? []) as string[],\n\t};\n\tconst userConfigDirs = getBaseDirsForScope(context, \"user\");\n\tconst projectConfigDirs = getBaseDirsForScope(context, \"project\");\n\tconst userAgentsSkillsDir = join(getHomeDir(), \".agents\", \"skills\");\n\tconst projectTrusted = context.settingsManager.isProjectTrusted();\n\tconst projectAgentsSkillDirs = projectTrusted\n\t\t? (await collectAncestorAgentsSkillDirs(context.cwd)).filter(\n\t\t\t\t(dir) => resolve(dir) !== resolve(userAgentsSkillsDir),\n\t\t\t)\n\t\t: [];\n\tconst addResources = (\n\t\tresourceType: ResourceType,\n\t\tpaths: string[],\n\t\tmetadata: PathMetadata,\n\t\toverrides: string[],\n\t\tbaseDir: string,\n\t): void => {\n\t\tconst target = getTargetMap(accumulator, resourceType);\n\t\tfor (const path of paths) addResource(target, path, metadata, isEnabledByOverrides(path, overrides, baseDir));\n\t};\n\tif (projectTrusted) {\n\t\tfor (const [index, configDir] of projectConfigDirs.entries()) {\n\t\t\tconst metadata: PathMetadata = {\n\t\t\t\t...projectMetadata,\n\t\t\t\tbaseDir: configDir,\n\t\t\t\tconfigurationOrigin: index === 0 ? \"atomic\" : \"inherited-pi\",\n\t\t\t};\n\t\t\taddResources(\n\t\t\t\t\"extensions\",\n\t\t\t\tawait collectAutoExtensionEntries(join(configDir, \"extensions\")),\n\t\t\t\tmetadata,\n\t\t\t\tprojectOverrides.extensions,\n\t\t\t\tconfigDir,\n\t\t\t);\n\t\t\taddResources(\n\t\t\t\t\"skills\",\n\t\t\t\tawait collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"),\n\t\t\t\tmetadata,\n\t\t\t\tprojectOverrides.skills,\n\t\t\t\tconfigDir,\n\t\t\t);\n\t\t\taddResources(\n\t\t\t\t\"prompts\",\n\t\t\t\tawait collectAutoPromptEntries(join(configDir, \"prompts\")),\n\t\t\t\tmetadata,\n\t\t\t\tprojectOverrides.prompts,\n\t\t\t\tconfigDir,\n\t\t\t);\n\t\t\taddResources(\n\t\t\t\t\"themes\",\n\t\t\t\tawait collectAutoThemeEntries(join(configDir, \"themes\")),\n\t\t\t\tmetadata,\n\t\t\t\tprojectOverrides.themes,\n\t\t\t\tconfigDir,\n\t\t\t);\n\t\t\taddResources(\n\t\t\t\t\"workflows\",\n\t\t\t\tawait collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"),\n\t\t\t\tmetadata,\n\t\t\t\tprojectOverrides.workflows,\n\t\t\t\tconfigDir,\n\t\t\t);\n\t\t}\n\t}\n\tfor (const agentsSkillsDir of projectAgentsSkillDirs) {\n\t\tconst agentsBaseDir = dirname(agentsSkillsDir);\n\t\taddResources(\n\t\t\t\"skills\",\n\t\t\tawait collectAutoSkillEntries(agentsSkillsDir, \"agents\"),\n\t\t\t{ ...projectMetadata, baseDir: agentsBaseDir },\n\t\t\tprojectOverrides.skills,\n\t\t\tagentsBaseDir,\n\t\t);\n\t}\n\tfor (const [index, configDir] of userConfigDirs.entries()) {\n\t\tconst metadata: PathMetadata = {\n\t\t\t...userMetadata,\n\t\t\tbaseDir: configDir,\n\t\t\tconfigurationOrigin: index === 0 ? \"atomic\" : \"inherited-pi\",\n\t\t};\n\t\taddResources(\n\t\t\t\"extensions\",\n\t\t\tawait collectAutoExtensionEntries(join(configDir, \"extensions\")),\n\t\t\tmetadata,\n\t\t\tuserOverrides.extensions,\n\t\t\tconfigDir,\n\t\t);\n\t\taddResources(\n\t\t\t\"skills\",\n\t\t\tawait collectAutoSkillEntries(join(configDir, \"skills\"), \"pi\"),\n\t\t\tmetadata,\n\t\t\tuserOverrides.skills,\n\t\t\tconfigDir,\n\t\t);\n\t\taddResources(\n\t\t\t\"prompts\",\n\t\t\tawait collectAutoPromptEntries(join(configDir, \"prompts\")),\n\t\t\tmetadata,\n\t\t\tuserOverrides.prompts,\n\t\t\tconfigDir,\n\t\t);\n\t\taddResources(\n\t\t\t\"themes\",\n\t\t\tawait collectAutoThemeEntries(join(configDir, \"themes\")),\n\t\t\tmetadata,\n\t\t\tuserOverrides.themes,\n\t\t\tconfigDir,\n\t\t);\n\t\taddResources(\n\t\t\t\"workflows\",\n\t\t\tawait collectResourceFiles(join(configDir, \"workflows\"), \"workflows\"),\n\t\t\tmetadata,\n\t\t\tuserOverrides.workflows,\n\t\t\tconfigDir,\n\t\t);\n\t}\n\tconst userAgentsBaseDir = dirname(userAgentsSkillsDir);\n\taddResources(\n\t\t\"skills\",\n\t\tawait collectAutoSkillEntries(userAgentsSkillsDir, \"agents\"),\n\t\t{ ...userMetadata, baseDir: userAgentsBaseDir },\n\t\tuserOverrides.skills,\n\t\tuserAgentsBaseDir,\n\t);\n}\n"]}

package/dist/core/package-manager-git.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"package-manager-git.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-git.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AA4C1G,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,GAChB,MAAM,GAAG,SAAS,CAepB;AAED,wBAAsB,UAAU,~~CAC/B~~,OAAO,EAAE,qBAAqB,~~EAC9B~~,MAAM,EAAE,SAAS,~~EACjB~~,KAAK,EAAE,WAAW,~~GAChB~~,OAAO,CAAC,IAAI,CAAC,~~CAqCf~~;AAED,wBAAsB,SAAS,~~CAC9B~~,OAAO,EAAE,qBAAqB,~~EAC9B~~,MAAM,EAAE,SAAS,~~EACjB~~,KAAK,EAAE,WAAW,~~GAChB~~,OAAO,CAAC,IAAI,CAAC,~~CAef~~;AAgCD,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,SAAS,~~CAC9B~~,OAAO,EAAE,qBAAqB,~~EAC9B~~,MAAM,EAAE,SAAS,~~EACjB~~,KAAK,EAAE,WAAW,~~GAChB~~,OAAO,CAAC,IAAI,CAAC,~~CAKf~~;AAsBD,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnH;AAkBD,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,~~CA2C9B~~"}
1	+ {"version":3,"file":"package-manager-git.d.ts","sourceRoot":"","sources":["../../src/core/package-manager-git.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAOjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AA4C1G,wBAAgB,yBAAyB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,WAAW,GAChB,MAAM,GAAG,SAAS,CAepB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA8CrH;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAepH;AAgCD,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,qBAAqB,EAC9B,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,SAAS,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpH;AAsBD,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnH;AAkBD,wBAAsB,uBAAuB,CAC5C,OAAO,EAAE,qBAAqB,EAC9B,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC,mBAAmB,CAAC,CAmD9B"}

package/dist/core/package-manager-git.js CHANGED Viewed

@@ -1,12 +1,12 @@
 import { existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { getProjectConfigDirs } from "../config.js";
-import { NETWORK_TIMEOUT_MS } from "./package-manager-constants.js";
 import { runCommand, runCommandCapture } from "./package-manager-command.js";
+import { NETWORK_TIMEOUT_MS } from "./package-manager-constants.js";
 import { isOfflineModeEnabled } from "./package-manager-env.js";
+import { ensureGitIgnore, getGitDependencyInstallArgs, runNpmCommand } from "./package-manager-npm.js";
 import { getBaseDirsForScope, getGitInstallPath, getGitInstallRoot } from "./package-manager-paths.js";
 import { withProgress } from "./package-manager-progress.js";
-import { ensureGitIgnore, getGitDependencyInstallArgs, runNpmCommand } from "./package-manager-npm.js";
 function runGitProcess(context, command, args, options) {
     return context.driver ? context.driver.runCommand(command, args, options) : runCommand(command, args, options);
 }
@@ -25,7 +25,7 @@ function isSafeGitRef(ref) {
     if (!ref || ref === "@" || ref.startsWith("-") || ref.endsWith(".") || ref.endsWith("/")) {
         return false;
     }
-    if (/[\x00-\x1f\x7f\s~^:?*\[\]\\]/u.test(ref)) {
+    if (/[\x00-\x1f\x7f\s~^:?*[\]\\]/u.test(ref)) {
         return false;
     }
     if (ref.includes("..") || ref.includes("@{") || ref.includes("//")) {
@@ -78,16 +78,26 @@ export async function installGit(context, source, scope) {
     // that wrap process spawns. Capture the validated value in a local so the
     // guard sanitizes exactly the binding handed to the spawn.
     const cloneUrl = source.repo;
-    if (!/^[A-Za-z0-9._~:@\/%+-]+$/.test(cloneUrl)) {
+    if (!/^[A-Za-z0-9._~:@/%+-]+$/.test(cloneUrl)) {
         throw new Error(`Refusing to clone repository with unsafe URL: ${cloneUrl}`);
     }
-    await runGitProcess(context, "git", ["clone", "--", cloneUrl, targetDir]);
-    if (safeRef) {
-        await runGitProcess(context, "git", ["checkout", safeRef], { cwd: targetDir });
+    try {
+        await runGitProcess(context, "git", ["clone", "--", cloneUrl, targetDir]);
+        if (safeRef) {
+            await runGitProcess(context, "git", ["checkout", safeRef], { cwd: targetDir });
+        }
+        const packageJsonPath = join(targetDir, "package.json");
+        if (existsSync(packageJsonPath)) {
+            await runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });
+        }
     }
-    const packageJsonPath = join(targetDir, "package.json");
-    if (existsSync(packageJsonPath)) {
-        await runNpmCommand(context, getGitDependencyInstallArgs(context), { cwd: targetDir });
+    catch (error) {
+        // A half-written clone would otherwise be treated as installed by the
+        // `existsSync(targetDir)` check above, so the next install silently skips
+        // the repair. Remove it, then drop the now-empty host/owner directories.
+        rmSync(targetDir, { recursive: true, force: true });
+        pruneEmptyGitParents(targetDir, gitRoot);
+        throw error;
     }
 }
 export async function updateGit(context, source, scope) {
@@ -235,7 +245,13 @@ export async function getLocalGitUpdateTarget(context, installedPath) {
             return {
                 ref: "origin/HEAD",
                 head,
-                fetchArgs: ["fetch", "--prune", "--no-tags", "origin", `+refs/heads/${branch}:refs/remotes/origin/${branch}`],
+                fetchArgs: [
+                    "fetch",
+                    "--prune",
+                    "--no-tags",
+                    "origin",
+                    `+refs/heads/${branch}:refs/remotes/origin/${branch}`,
+                ],
             };
         }
         return {