@chances-ai/engine 24.0.0

package/dist/local-vault/keychain.js

@@ -0,0 +1,200 @@
+/**
+ * (3.7) OS keychain adapter wrapping `@napi-rs/keyring`.
+ *
+ * Loaded via a computed-specifier dynamic import (same `bun build
+ * --compile` reason as 3.6 OTel) so the binary still compiles when the
+ * optional peer is absent. A consumer that didn't install the keyring
+ * package falls back to the file backend (`./file-store.ts`) — same
+ * graceful degradation as before, no opaque "module not found" crash
+ * at boot.
+ *
+ * Layout: service name `chances-cli` (fixed), account name = vault key.
+ * Values are JSON-stringified before storage; parsed on read.
+ *
+ * **(claude-code anti-pattern noted)** Don't store full RFC 8414 metadata
+ * here — Windows Credential Manager has a 4096-byte limit on stored
+ * values. § 4.2 of the design doc enforces "URLs only" at the higher
+ * (provider) layer; this adapter doesn't try to enforce shape.
+ */
+import { KeyedMutex } from "./mutex.js";
+const KEYRING_SERVICE = "chances-cli";
+const KEYRING_PROBE_KEY = "__chances_probe__";
+const defaultLoader = async () => {
+    try {
+        // Computed specifier — Bun's compile pass cannot statically resolve
+        // and therefore can't refuse to compile when the optional peer is absent.
+        const specifier = ["@napi-rs", "keyring"].join("/");
+        const mod = (await import(specifier));
+        if (!mod || typeof mod.Entry !== "function")
+            return null;
+        return mod;
+    }
+    catch {
+        return null;
+    }
+};
+export class KeychainStore {
+    mod;
+    mutex = new KeyedMutex();
+    constructor(mod) {
+        this.mod = mod;
+    }
+    /**
+     * Loads the keyring module + runs an access probe. Returns:
+     *   - the store, when the module loaded AND the probe succeeded;
+     *   - `null` with a reason string, otherwise.
+     *
+     * The probe is critical on macOS — the module loads fine, but the FIRST
+     * keychain op can throw with a user-denied dialog. We catch that here so
+     * the fallback path runs without hanging the consumer.
+     */
+    static async tryCreate(loader = defaultLoader) {
+        let mod;
+        try {
+            mod = await loader();
+        }
+        catch (e) {
+            return { store: null, reason: `keychain loader threw: ${e.message || String(e)}` };
+        }
+        if (!mod)
+            return { store: null, reason: "@napi-rs/keyring not installed" };
+        // Access probe — try a setPassword + getPassword round-trip against a
+        // probe key, then delete. The exact key is reserved.
+        try {
+            const probe = new mod.Entry(KEYRING_SERVICE, KEYRING_PROBE_KEY);
+            await Promise.resolve(probe.setPassword("ok"));
+            const got = await Promise.resolve(probe.getPassword());
+            if (got !== "ok") {
+                return { store: null, reason: `keychain probe value mismatch (got ${JSON.stringify(got)})` };
+            }
+            await Promise.resolve(probe.deletePassword());
+        }
+        catch (e) {
+            return { store: null, reason: `keychain probe failed: ${e.message || String(e)}` };
+        }
+        return { store: new KeychainStore(mod) };
+    }
+    async read(key) {
+        const release = await this.mutex.acquire(key);
+        try {
+            const entry = new this.mod.Entry(KEYRING_SERVICE, key);
+            const raw = await Promise.resolve(entry.getPassword());
+            if (raw === null || raw === undefined)
+                return undefined;
+            try {
+                return JSON.parse(raw);
+            }
+            catch (e) {
+                throw new Error(`local-vault keychain: stored value at '${key}' is not valid JSON: ${e.message}`);
+            }
+        }
+        finally {
+            release();
+        }
+    }
+    async list() {
+        // @napi-rs/keyring has no enumeration API across platforms. We track
+        // keys in a separate index entry stored under the reserved name
+        // `__chances_keys__`. This is a small lie — list() is best-effort and
+        // only reflects keys we've written THROUGH this adapter. Out-of-band
+        // entries (e.g. user-edited Keychain Access) aren't enumerable; this
+        // is the same constraint claude-code's LocalVault carries.
+        const idx = await this.read("__chances_keys__");
+        return idx ?? [];
+    }
+    async remove(key) {
+        const release = await this.mutex.acquire(key);
+        try {
+            const entry = new this.mod.Entry(KEYRING_SERVICE, key);
+            try {
+                await Promise.resolve(entry.deletePassword());
+            }
+            catch {
+                // The keyring throws on "not present" on some platforms. Idempotent
+                // remove — swallow and continue.
+            }
+            // Update the index.
+            const idxKey = "__chances_keys__";
+            const idxEntry = new this.mod.Entry(KEYRING_SERVICE, idxKey);
+            const raw = await Promise.resolve(idxEntry.getPassword());
+            if (raw !== null && raw !== undefined) {
+                try {
+                    const idx = JSON.parse(raw);
+                    const next = idx.filter((k) => k !== key);
+                    if (next.length === 0) {
+                        await Promise.resolve(idxEntry.deletePassword()).catch(() => { });
+                    }
+                    else {
+                        await Promise.resolve(idxEntry.setPassword(JSON.stringify(next)));
+                    }
+                }
+                catch {
+                    // Corrupt index — leave alone; list() will return [] for it.
+                }
+            }
+        }
+        finally {
+            release();
+        }
+    }
+    async mergeMutate(key, mutator, allowDelete = false) {
+        const release = await this.mutex.acquire(key);
+        try {
+            const entry = new this.mod.Entry(KEYRING_SERVICE, key);
+            const raw = await Promise.resolve(entry.getPassword());
+            let current;
+            if (raw !== null && raw !== undefined) {
+                try {
+                    current = JSON.parse(raw);
+                }
+                catch {
+                    // Treat corrupt as missing — the mutator gets a clean slate.
+                    current = undefined;
+                }
+            }
+            const next = await mutator(current);
+            if (next === undefined) {
+                if (allowDelete && current !== undefined) {
+                    await Promise.resolve(entry.deletePassword()).catch(() => { });
+                }
+                return;
+            }
+            await Promise.resolve(entry.setPassword(JSON.stringify(next)));
+            // Update the index — best-effort, race tolerant.
+            await this.recordKey(key);
+        }
+        finally {
+            release();
+        }
+    }
+    /** (codex Round-2 NICE #3) Update the index under its OWN mutex so
+     *  concurrent `mergeMutate("a")` / `mergeMutate("b")` can't race on
+     *  the shared `__chances_keys__` entry. Each holds its per-key lock
+     *  for the value write, then queues behind the index mutex for the
+     *  list update. `list()` could otherwise drop entries. */
+    async recordKey(key) {
+        const idxKey = "__chances_keys__";
+        const release = await this.mutex.acquire(idxKey);
+        try {
+            const idxEntry = new this.mod.Entry(KEYRING_SERVICE, idxKey);
+            const raw = await Promise.resolve(idxEntry.getPassword());
+            let idx = [];
+            if (raw !== null && raw !== undefined) {
+                try {
+                    idx = JSON.parse(raw);
+                }
+                catch {
+                    idx = [];
+                }
+            }
+            if (!idx.includes(key)) {
+                idx.push(key);
+                await Promise.resolve(idxEntry.setPassword(JSON.stringify(idx))).catch(() => { });
+            }
+        }
+        finally {
+            release();
+        }
+    }
+}
+//# sourceMappingURL=keychain.js.map

package/dist/local-vault/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../../src/local-vault/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAiB9C,MAAM,aAAa,GAAkB,KAAK,IAAI,EAAE;IAC9C,IAAI,CAAC;QACH,oEAAoE;QACpE,0EAA0E;QAC1E,MAAM,SAAS,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAkB,CAAC;QACvD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACzD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,aAAa;IACP,GAAG,CAAgB;IACnB,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IAE1C,YAAoB,GAAkB;QACpC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CACpB,SAAwB,aAAa;QAErC,IAAI,GAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC;QACvB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA2B,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QAC3E,sEAAsE;QACtE,qDAAqD;QACrD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;YAChE,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,sCAAsC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAC/F,CAAC;YACD,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA2B,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI,CAAc,GAAW;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YACxD,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;YAC9B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,GAAG,wBAAyB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,qEAAqE;QACrE,gEAAgE;QAChE,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,2DAA2D;QAC3D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAW,kBAAkB,CAAC,CAAC;QAC1D,OAAO,GAAG,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;gBACpE,iCAAiC;YACnC,CAAC;YACD,oBAAoB;YACpB,MAAM,MAAM,GAAG,kBAAkB,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1D,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;oBACxC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;oBAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACtB,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACnE,CAAC;yBAAM,CAAC;wBACN,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CACf,GAAW,EACX,OAA2E,EAC3E,WAAW,GAAG,KAAK;QAEnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACvD,IAAI,OAAsB,CAAC;YAC3B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAM,CAAC;gBACjC,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;oBAC7D,OAAO,GAAG,SAAS,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,WAAW,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/D,iDAAiD;YACjD,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;8DAI0D;IAClD,KAAK,CAAC,SAAS,CAAC,GAAW;QACjC,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1D,IAAI,GAAG,GAAa,EAAE,CAAC;YACvB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC;oBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACP,GAAG,GAAG,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/local-vault/mutex.d.ts

@@ -0,0 +1,20 @@
+/**
+ * (3.7) Per-key async mutex. Used by `mergeMutate` to serialise
+ * read-modify-write cycles against a single vault key without
+ * blocking unrelated keys (codex Round-1 MUST-FIX #1).
+ *
+ * Implementation is a promise-chain keyed by the locked resource id.
+ * Each acquire returns a release fn; `finally`-release in callers.
+ * No timeout / no cancellation — vault writes are short, and a
+ * never-released lock would be a real bug, not something to paper over.
+ */
+export declare class KeyedMutex {
+    private locks;
+    /** Acquires the lock for `key`. Returns a release fn the caller MUST
+     *  invoke (use try/finally). Concurrent acquires for the same key
+     *  serialise; different keys do not block each other. */
+    acquire(key: string): Promise<() => void>;
+    /** Diagnostics — number of distinct keys currently locked. Test seam. */
+    size(): number;
+}
+//# sourceMappingURL=mutex.d.ts.map

package/dist/local-vault/mutex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.d.ts","sourceRoot":"","sources":["../../src/local-vault/mutex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAoC;IAEjD;;6DAEyD;IACnD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC;IAwB/C,yEAAyE;IACzE,IAAI,IAAI,MAAM;CAGf"}

package/dist/local-vault/mutex.js

@@ -0,0 +1,44 @@
+/**
+ * (3.7) Per-key async mutex. Used by `mergeMutate` to serialise
+ * read-modify-write cycles against a single vault key without
+ * blocking unrelated keys (codex Round-1 MUST-FIX #1).
+ *
+ * Implementation is a promise-chain keyed by the locked resource id.
+ * Each acquire returns a release fn; `finally`-release in callers.
+ * No timeout / no cancellation — vault writes are short, and a
+ * never-released lock would be a real bug, not something to paper over.
+ */
+export class KeyedMutex {
+    locks = new Map();
+    /** Acquires the lock for `key`. Returns a release fn the caller MUST
+     *  invoke (use try/finally). Concurrent acquires for the same key
+     *  serialise; different keys do not block each other. */
+    async acquire(key) {
+        const previous = this.locks.get(key) ?? Promise.resolve();
+        let release;
+        const next = new Promise((resolve) => {
+            release = () => {
+                // Only clear the slot if WE are still the head — protects
+                // against pathological orderings where release fires twice or
+                // after a logically-distinct cycle reused the same key.
+                if (this.locks.get(key) === next) {
+                    this.locks.delete(key);
+                }
+                resolve();
+            };
+        });
+        this.locks.set(key, next);
+        // Swallow any rejection on the previous lock — every awaiter
+        // proceeds once the previous holder has FINISHED, regardless of
+        // outcome. (A holder that throws still runs its `finally` and
+        // calls release; the resolved next promise here is what callers
+        // chain off, so the rejection doesn't propagate to siblings.)
+        await previous.catch(() => { });
+        return release;
+    }
+    /** Diagnostics — number of distinct keys currently locked. Test seam. */
+    size() {
+        return this.locks.size;
+    }
+}
+//# sourceMappingURL=mutex.js.map

package/dist/local-vault/mutex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.js","sourceRoot":"","sources":["../../src/local-vault/mutex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,OAAO,UAAU;IACb,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEjD;;6DAEyD;IACzD,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1D,IAAI,OAAoB,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,GAAG,GAAG,EAAE;gBACb,0DAA0D;gBAC1D,8DAA8D;gBAC9D,wDAAwD;gBACxD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,6DAA6D;QAC7D,gEAAgE;QAChE,8DAA8D;QAC9D,gEAAgE;QAChE,8DAA8D;QAC9D,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,yEAAyE;IACzE,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}

package/dist/local-vault/passphrase.d.ts

@@ -0,0 +1,30 @@
+/**
+ * (3.7) Passphrase resolution for the AES-GCM file backend.
+ *
+ * Order:
+ *   1. CHANCES_VAULT_PASSPHRASE env var (≥16 chars)
+ *   2. <passphraseFile> (0600), if present and ≥16 chars
+ *   3. Auto-generate 32 random bytes → hex; persist to passphraseFile@0600
+ *
+ * The passphrase file lives OUTSIDE the vault directory by default
+ * (`~/.chances-vault-passphrase`, sibling to `~/.chances/`). codex
+ * Round-1 SHOULD-FIX: storing the key inside the vault dir defeats
+ * the encryption against a full-tree backup leak.
+ */
+export declare const MIN_PASSPHRASE_LENGTH = 16;
+export declare const ENV_VAR = "CHANCES_VAULT_PASSPHRASE";
+export interface ResolvePassphraseOptions {
+    /** Absolute path. Default caller's `~/.chances-vault-passphrase`. */
+    passphraseFile: string;
+    /** Test seam — defaults to `process.env`. */
+    env?: Record<string, string | undefined>;
+    /** Test seam — defaults to `randomBytes`. */
+    generateBytes?: (n: number) => Buffer;
+}
+export interface ResolvedPassphrase {
+    passphrase: string;
+    /** Where the passphrase came from. Surfaced via vault diagnostics. */
+    source: "env" | "file" | "generated";
+}
+export declare function resolvePassphrase(opts: ResolvePassphraseOptions): ResolvedPassphrase;
+//# sourceMappingURL=passphrase.d.ts.map

package/dist/local-vault/passphrase.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase.d.ts","sourceRoot":"","sources":["../../src/local-vault/passphrase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,OAAO,6BAA6B,CAAC;AAElD,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,cAAc,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,6CAA6C;IAC7C,aAAa,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC;CACtC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,kBAAkB,CAmCpF"}

package/dist/local-vault/passphrase.js

@@ -0,0 +1,72 @@
+/**
+ * (3.7) Passphrase resolution for the AES-GCM file backend.
+ *
+ * Order:
+ *   1. CHANCES_VAULT_PASSPHRASE env var (≥16 chars)
+ *   2. <passphraseFile> (0600), if present and ≥16 chars
+ *   3. Auto-generate 32 random bytes → hex; persist to passphraseFile@0600
+ *
+ * The passphrase file lives OUTSIDE the vault directory by default
+ * (`~/.chances-vault-passphrase`, sibling to `~/.chances/`). codex
+ * Round-1 SHOULD-FIX: storing the key inside the vault dir defeats
+ * the encryption against a full-tree backup leak.
+ */
+import { existsSync, readFileSync, writeFileSync, statSync, chmodSync } from "node:fs";
+import { randomBytes } from "node:crypto";
+export const MIN_PASSPHRASE_LENGTH = 16;
+export const ENV_VAR = "CHANCES_VAULT_PASSPHRASE";
+export function resolvePassphrase(opts) {
+    const env = opts.env ?? process.env;
+    const fromEnv = env[ENV_VAR];
+    if (fromEnv !== undefined && fromEnv.length > 0) {
+        if (fromEnv.length < MIN_PASSPHRASE_LENGTH) {
+            throw new Error(`${ENV_VAR} is too short (got ${fromEnv.length} chars, need ≥${MIN_PASSPHRASE_LENGTH}). ` +
+                `Use a longer secret or unset the env var to fall back to the file/generated passphrase.`);
+        }
+        return { passphrase: fromEnv, source: "env" };
+    }
+    if (existsSync(opts.passphraseFile)) {
+        const fileContents = readFileSync(opts.passphraseFile, "utf8").trim();
+        if (fileContents.length < MIN_PASSPHRASE_LENGTH) {
+            // Treat short file as missing — regenerate. Don't error here because
+            // the user may have hand-edited the file partially; we'd rather
+            // recover than refuse to start.
+            // (This is documented in tests so a future maintainer sees the choice.)
+        }
+        else {
+            ensure0600(opts.passphraseFile);
+            return { passphrase: fileContents, source: "file" };
+        }
+    }
+    // Generate. 32 random bytes hex = 64 chars; well above 16-char floor and
+    // strong enough that KDF cost is irrelevant to security analysis.
+    const gen = opts.generateBytes ?? randomBytes;
+    const passphrase = gen(32).toString("hex");
+    writeFileSync(opts.passphraseFile, passphrase, { mode: 0o600 });
+    // POSIX honors `mode` on the open() flag. On Windows, mode is largely
+    // a hint; ensure0600 below verifies and warns only on POSIX.
+    ensure0600(opts.passphraseFile);
+    return { passphrase, source: "generated" };
+}
+/**
+ * Best-effort: enforce 0600 mode on POSIX systems. On Windows the bit
+ * is largely advisory; a wholly different ACL story applies (out of
+ * scope for v1 — would need `windows-sys` or PowerShell hooks).
+ */
+function ensure0600(path) {
+    if (process.platform === "win32")
+        return;
+    try {
+        const stat = statSync(path);
+        const mode = stat.mode & 0o777;
+        if (mode !== 0o600) {
+            chmodSync(path, 0o600);
+        }
+    }
+    catch {
+        // statSync/chmodSync can fail on a race (file deleted between writeFileSync
+        // and stat). Swallow — the caller's next read will surface the real issue
+        // with a more actionable error.
+    }
+}
+//# sourceMappingURL=passphrase.js.map

package/dist/local-vault/passphrase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passphrase.js","sourceRoot":"","sources":["../../src/local-vault/passphrase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACxC,MAAM,CAAC,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAiBlD,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,sBAAsB,OAAO,CAAC,MAAM,iBAAiB,qBAAqB,KAAK;gBACvF,yFAAyF,CAC5F,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAChD,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;YAChD,qEAAqE;YACrE,gEAAgE;YAChE,gCAAgC;YAChC,wEAAwE;QAC1E,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,sEAAsE;IACtE,6DAA6D;IAC7D,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAC/B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,0EAA0E;QAC1E,gCAAgC;IAClC,CAAC;AACH,CAAC"}

package/dist/lsp/config.d.ts

@@ -0,0 +1,34 @@
+/**
+ * (4.2) Built-in default LSP server registry + user-override merger.
+ *
+ * Selection order (codex Round-1 NICE #1):
+ *   - User-defined entries are considered BEFORE built-ins.
+ *   - Within each group, object insertion order wins on extension
+ *     tie-breaks.
+ *
+ * Adding a built-in is a one-entry append + extension list. The
+ * resolved list is the ordered union, with `enabled: false` filtered
+ * out at the call site so the disable flag is visible in surveys.
+ */
+import type { LspServerConfig, ResolvedServer } from "./types.js";
+/** Built-in defaults for the top 4 servers (codex Round-1 NICE #1).
+ *  Order in this object is the tie-break order for extension claims
+ *  among built-ins. Insertion order is stable in modern V8/Spidermonkey
+ *  for string keys. */
+export declare const BUILTIN_DEFAULTS: Readonly<Record<string, LspServerConfig>>;
+/** Merges user-provided servers with built-in defaults.
+ *
+ *  Per-name overlay: a user entry by the same name shallow-merges
+ *  with the built-in (user fields win). Disabling a built-in is
+ *  `servers.typescript = { enabled: false }`.
+ *
+ *  Output order: user-defined names first (in user insertion order),
+ *  then any built-ins not overridden by name (in built-in order).
+ *  `enabled: false` entries are NOT filtered here — they're surfaced
+ *  to the caller (e.g. `doctor`) so the disable is visible. */
+export declare function resolveServers(builtIns?: Readonly<Record<string, LspServerConfig>>, userServers?: Readonly<Record<string, LspServerConfig>>): ResolvedServer[];
+/** Picks the first ENABLED server whose `extensions` covers `ext`.
+ *  Returns undefined when no server claims the extension OR when all
+ *  matches are disabled. */
+export declare function pickServerForExtension(servers: readonly ResolvedServer[], ext: string): ResolvedServer | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/lsp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lsp/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAElE;;;uBAGuB;AACvB,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAqBtE,CAAC;AAEF;;;;;;;;;+DAS+D;AAC/D,wBAAgB,cAAc,CAC5B,QAAQ,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAoB,EACtE,WAAW,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAM,GAC1D,cAAc,EAAE,CAiBlB;AAED;;4BAE4B;AAC5B,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,GAAG,EAAE,MAAM,GACV,cAAc,GAAG,SAAS,CAS5B"}

package/dist/lsp/config.js

@@ -0,0 +1,68 @@
+/** Built-in defaults for the top 4 servers (codex Round-1 NICE #1).
+ *  Order in this object is the tie-break order for extension claims
+ *  among built-ins. Insertion order is stable in modern V8/Spidermonkey
+ *  for string keys. */
+export const BUILTIN_DEFAULTS = {
+    typescript: {
+        command: "typescript-language-server",
+        args: ["--stdio"],
+        extensions: [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"],
+    },
+    rust: {
+        command: "rust-analyzer",
+        args: [],
+        extensions: [".rs"],
+    },
+    python: {
+        command: "pyright-langserver",
+        args: ["--stdio"],
+        extensions: [".py", ".pyi"],
+    },
+    go: {
+        command: "gopls",
+        args: ["serve"],
+        extensions: [".go"],
+    },
+};
+/** Merges user-provided servers with built-in defaults.
+ *
+ *  Per-name overlay: a user entry by the same name shallow-merges
+ *  with the built-in (user fields win). Disabling a built-in is
+ *  `servers.typescript = { enabled: false }`.
+ *
+ *  Output order: user-defined names first (in user insertion order),
+ *  then any built-ins not overridden by name (in built-in order).
+ *  `enabled: false` entries are NOT filtered here — they're surfaced
+ *  to the caller (e.g. `doctor`) so the disable is visible. */
+export function resolveServers(builtIns = BUILTIN_DEFAULTS, userServers = {}) {
+    const out = [];
+    const seen = new Set();
+    for (const [name, userCfg] of Object.entries(userServers)) {
+        seen.add(name);
+        const builtIn = builtIns[name];
+        const merged = builtIn ? { ...builtIn, ...userCfg } : userCfg;
+        out.push({ name, config: merged });
+    }
+    for (const [name, cfg] of Object.entries(builtIns)) {
+        if (seen.has(name))
+            continue;
+        out.push({ name, config: cfg });
+    }
+    return out;
+}
+/** Picks the first ENABLED server whose `extensions` covers `ext`.
+ *  Returns undefined when no server claims the extension OR when all
+ *  matches are disabled. */
+export function pickServerForExtension(servers, ext) {
+    const norm = ext.toLowerCase();
+    for (const s of servers) {
+        if (s.config.enabled === false)
+            continue;
+        for (const e of s.config.extensions) {
+            if (e.toLowerCase() === norm)
+                return s;
+        }
+    }
+    return undefined;
+}
+//# sourceMappingURL=config.js.map

package/dist/lsp/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lsp/config.ts"],"names":[],"mappings":"AAcA;;;uBAGuB;AACvB,MAAM,CAAC,MAAM,gBAAgB,GAA8C;IACzE,UAAU,EAAE;QACV,OAAO,EAAE,4BAA4B;QACrC,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAC3D;IACD,IAAI,EAAE;QACJ,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,CAAC,KAAK,CAAC;KACpB;IACD,MAAM,EAAE;QACN,OAAO,EAAE,oBAAoB;QAC7B,IAAI,EAAE,CAAC,SAAS,CAAC;QACjB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;KAC5B;IACD,EAAE,EAAE;QACF,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE,CAAC,OAAO,CAAC;QACf,UAAU,EAAE,CAAC,KAAK,CAAC;KACpB;CACF,CAAC;AAEF;;;;;;;;;+DAS+D;AAC/D,MAAM,UAAU,cAAc,CAC5B,WAAsD,gBAAgB,EACtE,cAAyD,EAAE;IAE3D,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAoB,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;4BAE4B;AAC5B,MAAM,UAAU,sBAAsB,CACpC,OAAkC,EAClC,GAAW;IAEX,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,SAAS;QACzC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/lsp/detect.d.ts

@@ -0,0 +1,7 @@
+/** Returns the absolute path of `command` resolved against `cwd`'s
+ *  project-local bin dirs first, then PATH. Returns `null` (cached)
+ *  when nothing was found. */
+export declare function detectBinary(command: string, cwd: string, env?: NodeJS.ProcessEnv): string | null;
+/** Test seam — clears the cache. */
+export declare function clearDetectCache(): void;
+//# sourceMappingURL=detect.d.ts.map

package/dist/lsp/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../../src/lsp/detect.ts"],"names":[],"mappings":"AAmBA;;8BAE8B;AAC9B,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CA8B9G;AAyBD,oCAAoC;AACpC,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/lsp/detect.js

@@ -0,0 +1,78 @@
+/**
+ * (4.2) Binary detection (codex Round-1 SHOULD-FIX #3).
+ *
+ *  Resolution order per (cwd, command):
+ *    1. `<cwd>/node_modules/.bin/<command>[.exe|.cmd|.bat on Windows]`
+ *    2. `<cwd>/.venv/bin/<command>` (POSIX)
+ *    3. Each `PATH` entry, with Windows suffix expansion.
+ *
+ *  Cached per `(cwd, command, PATH)` so a `doctor` run that touches
+ *  every default doesn't repeat work. Cache lifetime is the host
+ *  instance; explicit `clearDetectCache()` for tests.
+ */
+import { existsSync, statSync } from "node:fs";
+import { delimiter as PATH_SEP, join } from "node:path";
+const cache = new Map();
+const WIN_SUFFIXES = process.platform === "win32" ? [".exe", ".cmd", ".bat", ""] : [""];
+/** Returns the absolute path of `command` resolved against `cwd`'s
+ *  project-local bin dirs first, then PATH. Returns `null` (cached)
+ *  when nothing was found. */
+export function detectBinary(command, cwd, env = process.env) {
+    // Absolute path bypass — caller already gave us a resolved binary.
+    if (isAbsolute(command)) {
+        return fileExistsExecutable(command) ? command : null;
+    }
+    const path = env.PATH ?? env.Path ?? "";
+    const key = `${cwd}\u0000${command}\u0000${path}`;
+    const cached = cache.get(key);
+    if (cached !== undefined)
+        return cached;
+    const candidates = [];
+    // Project-local bin dirs.
+    candidates.push(...expand(join(cwd, "node_modules", ".bin"), command));
+    if (process.platform !== "win32") {
+        candidates.push(join(cwd, ".venv", "bin", command));
+    }
+    // PATH entries.
+    for (const dir of path.split(PATH_SEP)) {
+        if (!dir)
+            continue;
+        candidates.push(...expand(dir, command));
+    }
+    for (const c of candidates) {
+        if (fileExistsExecutable(c)) {
+            cache.set(key, c);
+            return c;
+        }
+    }
+    cache.set(key, null);
+    return null;
+}
+/** Windows: try every suffix; POSIX: just the bare name. */
+function expand(dir, command) {
+    return WIN_SUFFIXES.map((suf) => join(dir, command + suf));
+}
+/** Bun's `existsSync` follows symlinks. We additionally require the
+ *  entry to be a file (not a directory) — defends against a weird
+ *  `node_modules/.bin/<name>` being a folder. */
+function fileExistsExecutable(p) {
+    if (!existsSync(p))
+        return false;
+    try {
+        const st = statSync(p);
+        return st.isFile();
+    }
+    catch {
+        return false;
+    }
+}
+function isAbsolute(p) {
+    if (process.platform === "win32")
+        return /^[a-zA-Z]:[\\/]/.test(p) || p.startsWith("\\\\");
+    return p.startsWith("/");
+}
+/** Test seam — clears the cache. */
+export function clearDetectCache() {
+    cache.clear();
+}
+//# sourceMappingURL=detect.js.map

package/dist/lsp/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../../src/lsp/detect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,SAAS,IAAI,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAExD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE/C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAExF;;8BAE8B;AAC9B,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,GAAW,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC7F,mEAAmE;IACnE,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,OAAO,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,0BAA0B;IAC1B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,gBAAgB;IAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4DAA4D;AAC5D,SAAS,MAAM,CAAC,GAAW,EAAE,OAAe;IAC1C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;iDAEiD;AACjD,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC3F,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,gBAAgB;IAC9B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/lsp/errors.d.ts

@@ -0,0 +1,11 @@
+/**
+ * (4.2) LSP error taxonomy. Distinct codes per failure mode so the tool
+ * layer renders an actionable message without parsing free-text.
+ */
+export type LspErrorCode = "BINARY_MISSING" | "START_TIMEOUT" | "REQUEST_TIMEOUT" | "REQUEST_FAILED" | "SERVER_CRASHED" | "SERVER_STICKY_FAILED" | "UNSUPPORTED_OP" | "MAX_INSTANCES" | "FILE_TOO_LARGE" | "NO_SERVER_FOR_EXTENSION" | "DISABLED";
+export declare class LspError extends Error {
+    readonly code: LspErrorCode;
+    readonly cause?: unknown;
+    constructor(code: LspErrorCode, message: string, cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/lsp/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/lsp/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,eAAe,GACf,gBAAgB,GAChB,yBAAyB,GACzB,UAAU,CAAC;AAEf,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,SAAkB,KAAK,CAAC,EAAE,OAAO,CAAC;gBACtB,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAMjE"}

package/dist/lsp/errors.js

@@ -0,0 +1,11 @@
+export class LspError extends Error {
+    code;
+    cause;
+    constructor(code, message, cause) {
+        super(message);
+        this.name = "LspError";
+        this.code = code;
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/lsp/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/lsp/errors.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IACV,KAAK,CAAW;IAClC,YAAY,IAAkB,EAAE,OAAe,EAAE,KAAe;QAC9D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}