@codexhost/cli-linux-arm64 0.13.2 → 0.14.0

package/app/plugins/workbuddy/plugin.mjs

@@ -14604,6 +14604,15 @@ var harnessDisplaySetSchema = external_exports.strictObject({
   initializeOnly: external_exports.boolean().optional()
 });
 
+// ../../shared-contracts/dist/harness-presentation.js
+var localeSchema = external_exports.string().max(64).regex(/^[a-z]{2,3}(?:-[A-Za-z0-9]{2,8})*$/u);
+var displayText = (maximum) => external_exports.string().min(1).max(maximum).refine((text2) => text2.trim().length > 0);
+var harnessLocalizationsSchema = external_exports.record(localeSchema, external_exports.object({
+  label: displayText(256).optional(),
+  description: displayText(1024).optional()
+}).strict()).refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+var harnessLocalizedTextSchema = external_exports.record(localeSchema, displayText(4096)).refine((entries) => typeof entries.en === "string", "English fallback is required").refine((entries) => Object.keys(entries).length <= 16, "Too many locales");
+
 // ../../shared-contracts/dist/model-price-overrides.js
 var usdPerMillionTokens = external_exports.number().finite().nonnegative();
 var modelPriceOverrideSchema = external_exports.strictObject({
@@ -14653,10 +14662,19 @@ var model = external_exports.string().min(1).max(512);
 var project = external_exports.string().min(1).max(4096);
 var usageStatisticsParamsSchema = external_exports.strictObject({
   range: external_exports.enum(USAGE_STATISTICS_RANGES),
+  /** Display timezone for ranges, dates and hourly buckets; omitted means the Host's local zone. */
+  timeZone: external_exports.string().min(1).max(128).refine((value) => {
+    try {
+      new Intl.DateTimeFormat("en", { timeZone: value });
+      return true;
+    } catch {
+      return false;
+    }
+  }, "Unsupported usage statistics timezone").optional(),
   harness: harness.optional(),
   model: model.nullable().optional(),
   project: project.nullable().optional(),
-  /** One local date inside the range. */
+  /** One date in the query timezone inside the range. */
   date: localDate.optional()
 });
 var usageStatisticsTotalsSchema = external_exports.strictObject({
@@ -14692,7 +14710,7 @@ var usageStatisticsSessionSchema = external_exports.strictObject({
 });
 var usageStatisticsResultSchema = external_exports.strictObject({
   range: external_exports.enum(USAGE_STATISTICS_RANGES),
-  /** First local date of the range; null for all time. */
+  /** First date in the query timezone (Host local when omitted); null for all time. */
   from: localDate.nullable(),
   to: localDate,
   /** The filters these figures apply, echoed so a late answer to older filters is recognised. */
@@ -14732,7 +14750,7 @@ var usageStatisticsResultSchema = external_exports.strictObject({
   totals: usageStatisticsTotalsSchema,
   /** Each date and Harness of the range: every filter except the day. */
   daily: external_exports.array(external_exports.strictObject({ date: localDate, harness, ...totals })).max(2e5),
-  /** Local weekday (0 = Sunday) and hour, all filters applied. */
+  /** Weekday (0 = Sunday) and hour in the query timezone, all filters applied. */
   hourly: external_exports.array(external_exports.strictObject({
     weekday: external_exports.number().int().min(0).max(6),
     hour: external_exports.number().int().min(0).max(23),
@@ -14792,6 +14810,8 @@ var CONSOLE_HOST_METHODS = Object.freeze([
   "codexhost/harness/display-settings/set",
   "codexhost/harness/inspect",
   "codexhost/harness/installation",
+  "codexhost/harness/installation/start",
+  "codexhost/harness/installation/status",
   "codexhost/harness/launch-settings/get",
   "codexhost/harness/launch-settings/set",
   "codexhost/harness/web-ui/open",
@@ -14867,7 +14887,18 @@ var threadManualCompactionStartedSchema = external_exports.strictObject({
 var nonNegativeSafeIntegerSchema = external_exports.number().int().safe().nonnegative();
 var finiteNonNegativeNumberSchema = external_exports.number().finite().nonnegative();
 var cacheHitRatePercentSchema = external_exports.number().finite().min(0).max(100);
+var indicatorTextSchema = (maximum) => harnessLocalizedTextSchema.refine((entries) => Object.values(entries).every((text2) => text2.length <= maximum));
+var composerIndicatorsSchema = external_exports.array(external_exports.object({
+  kind: external_exports.literal("countdown"),
+  id: external_exports.string().min(1).max(64),
+  expiresAtUnix: nonNegativeSafeIntegerSchema,
+  label: indicatorTextSchema(256).optional(),
+  tooltip: indicatorTextSchema(1024).optional()
+}).strict()).max(2).refine((entries) => new Set(entries.map(({ id }) => id)).size === entries.length, {
+  message: "Composer indicator IDs must be unique"
+});
 var threadUsageSnapshotSchema = external_exports.object({
+  composerIndicators: composerIndicatorsSchema.optional(),
   inputTokens: nonNegativeSafeIntegerSchema.optional(),
   cachedInputTokens: nonNegativeSafeIntegerSchema.optional(),
   cacheWriteInputTokens: nonNegativeSafeIntegerSchema.optional(),
@@ -14940,8 +14971,24 @@ var threadUsageSnapshotSchema = external_exports.object({
   }
 });
 var usagePercentSchema = external_exports.number().finite().min(0).max(100);
+var accountCreditsPeriodSchema = external_exports.enum([
+  "weekly",
+  "monthly",
+  "five_hour",
+  "seven_day",
+  "unknown"
+]);
+var accountCreditsScopeSchema = external_exports.object({
+  id: external_exports.string().min(1).max(256),
+  label: external_exports.string().min(1).max(256),
+  localizations: harnessLocalizationsSchema.optional()
+}).strict();
 var accountCreditsProductUsageSchema = external_exports.object({
   product: external_exports.string().min(1),
+  /** Native period and scope, never inferred from the display name. */
+  periodType: accountCreditsPeriodSchema.optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   used: external_exports.number().finite().nonnegative().optional(),
   // Zero is a real empty cap, not an absent field.
   limit: external_exports.number().finite().nonnegative().optional(),
@@ -14961,9 +15008,11 @@ var accountCreditsSnapshotSchema = external_exports.object({
   unit: external_exports.string().min(1).max(32).optional(),
   /** Native label when the primary limit is scoped to a model or product group. */
   label: external_exports.string().min(1).optional(),
+  scope: accountCreditsScopeSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   usedPercent: usagePercentSchema,
   resetsAt: external_exports.string().min(1).optional(),
-  periodType: external_exports.enum(["weekly", "monthly", "five_hour", "seven_day", "unknown"]),
+  periodType: accountCreditsPeriodSchema,
   productUsage: external_exports.array(accountCreditsProductUsageSchema).min(1).optional(),
   resetCredits: accountResetCreditsSchema.optional()
 }).strict();
@@ -14974,7 +15023,9 @@ var threadUsageInspectionParamsSchema = external_exports.object({
 var threadUsageInspectionSchema = external_exports.object({
   threadId: hostThreadIdSchema,
   usage: threadUsageSnapshotSchema.nullable(),
-  accountCredits: accountCreditsSnapshotSchema.optional()
+  accountCredits: accountCreditsSnapshotSchema.optional(),
+  /** Whether this source can provide cached account quota independently of usage. */
+  accountCreditsSupported: external_exports.boolean().optional()
 }).strict();
 
 // ../../shared-contracts/dist/harness-accounts.js
@@ -15101,7 +15152,8 @@ var harnessPermissionModeSchema = external_exports.object({
   id: harnessPermissionModeIdSchema,
   label: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_LABEL_MAX_LENGTH),
   description: nonBlankTextSchema.max(HARNESS_PERMISSION_MODE_DESCRIPTION_MAX_LENGTH).optional(),
-  dangerous: external_exports.boolean().optional()
+  dangerous: external_exports.boolean().optional(),
+  localizations: harnessLocalizationsSchema.optional()
 }).strict();
 var harnessPermissionModeCatalogSchema = external_exports.object({
   modes: external_exports.array(harnessPermissionModeSchema).min(1).max(HARNESS_PERMISSION_MODE_CATALOG_MAX_LENGTH),
@@ -15254,7 +15306,9 @@ var harnessSessionCapabilitiesSchema = external_exports.object({
   }).strict().optional(),
   autonomousTurns: external_exports.object({
     observe: external_exports.boolean()
-  }).strict().optional()
+  }).strict().optional(),
+  /** True only when `turn.steer` delivers input into the active Turn through a native primitive. */
+  steer: external_exports.boolean().optional()
 }).strict();
 var harnessConfigurationStateSchema = external_exports.object({
   effectiveModel: harnessModelRefSchema.optional(),
@@ -15301,7 +15355,9 @@ var harnessInspectionSchema = external_exports.union([
 var harnessInspectParamsSchema = external_exports.object({
   harnessId: harnessIdSchema,
   cwd: nonBlankTextSchema2.max(16384).optional(),
-  refresh: external_exports.boolean().optional()
+  refresh: external_exports.boolean().optional(),
+  /** `availability` asks only whether the Harness can run; see `InspectHarnessInput.purpose`. */
+  purpose: external_exports.literal("availability").optional()
 }).strict();
 var harnessWebUiOpenParamsSchema = external_exports.object({
   harnessId: harnessIdSchema
@@ -15384,6 +15440,15 @@ var threadOwnershipListResultSchema = external_exports.object({
     seen.add(thread.threadId);
   }
 });
+var threadSteeringInspectParamsSchema = external_exports.object({
+  threadId: hostThreadIdSchema,
+  /** The text about to be steered; a Harness command always stops and restarts. */
+  text: external_exports.string().optional()
+}).strict();
+var threadSteerDeliverySchema = external_exports.enum(["activeTurn", "newTurn"]);
+var threadSteeringInspectResultSchema = external_exports.object({
+  delivery: external_exports.enum(["official", "activeTurn", "newTurn"])
+}).strict();
 
 // ../../shared-contracts/dist/harness-plugins.js
 var HARNESS_PLUGIN_MANIFEST_MAX_BYTES = 32 * 1024;
@@ -15485,11 +15550,31 @@ var harnessInstallationStateSchema = external_exports.object({
   latestVersion: external_exports.string().min(1).max(128),
   updateAvailable: external_exports.boolean(),
   canUpdate: external_exports.boolean(),
+  /** Defaults to CLI; some Harnesses ship only inside a desktop application. */
+  versionKind: external_exports.enum(["cli", "application"]).optional(),
+  /** Official download opened by the user; does not imply an automatic installation. */
+  manualUpdateUrl: external_exports.url().max(2048).refine((value) => /^https:\/\/[^/?#@]+(?:[/?#]|$)/iu.test(value), "Manual updates require a credential-free HTTPS URL").optional(),
   // Adapter-owned diagnostic text; UI uses messageCode rather than displaying it verbatim.
   message: external_exports.string().max(2048).optional(),
   messageCode: external_exports.string().min(1).max(128).optional(),
+  /** Safe plugin-owned explanation, distinct from raw diagnostic message. */
+  notice: harnessLocalizedTextSchema.optional(),
   latestVersionKind: external_exports.enum(["unknown", "tracking-branch"]).optional()
 }).strict();
+var harnessInstallationTaskParamsSchema = external_exports.object({ taskId: external_exports.string().uuid() }).strict();
+var harnessInstallationTaskSchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({ taskId: external_exports.string().uuid(), status: external_exports.literal("running") }).strict(),
+  external_exports.object({
+    taskId: external_exports.string().uuid(),
+    status: external_exports.literal("succeeded"),
+    result: harnessInstallationStateSchema
+  }).strict(),
+  external_exports.object({
+    taskId: external_exports.string().uuid(),
+    status: external_exports.literal("failed"),
+    error: external_exports.object({ code: external_exports.number().int(), message: external_exports.string().min(1).max(2048) }).strict()
+  }).strict()
+]);
 
 // ../../shared-contracts/dist/codex-accounts.js
 var accountIdSchema = external_exports.string().min(1).max(256).regex(/^[A-Za-z0-9._~-]+$/u);
@@ -15614,6 +15699,7 @@ var harnessCommandDescriptorSchema = external_exports.object({
   invocation: commandInvocationSchema,
   label: commandLabelSchema,
   description: commandDescriptionSchema.optional(),
+  localizations: harnessLocalizationsSchema.optional(),
   argumentMode: external_exports.enum(["none", "text"]),
   /**
    * Native distinction reported by the Harness. Omitted when the Harness does
@@ -15991,6 +16077,18 @@ function sanitizeDiagnosticTail(value) {
   return redacted.length <= DIAGNOSTIC_TAIL_MAX_LENGTH ? redacted : redacted.slice(-DIAGNOSTIC_TAIL_MAX_LENGTH);
 }
 
+// ../../harness-adapter/dist/steer.js
+function unsupportedSteer(harnessLabel) {
+  return {
+    ok: false,
+    error: {
+      code: "unsupported",
+      message: `${harnessLabel} cannot steer an active Turn natively`,
+      retryable: false
+    }
+  };
+}
+
 // ../../harness-adapter/dist/usage.js
 var tokenFields = [
   "inputTokens",
@@ -16018,6 +16116,7 @@ var usageFields = /* @__PURE__ */ new Set([
   ...safeIntegerFields,
   ...percentFields,
   "sessionCacheUsage",
+  "composerIndicators",
   "totalCostUsd",
   "totalCredits",
   "contextUsagePercent",
@@ -16040,6 +16139,7 @@ function parseHostUsage(value) {
       throw new Error(`Harness Usage contains unknown field '${key}'`);
     }
   }
+  const indicators = value.composerIndicators === void 0 ? {} : { composerIndicators: composerIndicatorsSchema.parse(value.composerIndicators) };
   for (const field of [
     "totalCredits",
     "contextUsagePercent",
@@ -16110,9 +16210,9 @@ function parseHostUsage(value) {
     if (value.costSource !== "publicPrice") {
       throw new Error("Harness Usage 'unpricedModels' must be provided with a 'publicPrice' cost");
     }
-    return { ...value, unpricedModels: [...models] };
+    return { ...value, ...indicators, unpricedModels: [...models] };
   }
-  return { ...value };
+  return { ...value, ...indicators };
 }
 var requestTokenFields = [
   "inputTokens",
@@ -16269,6 +16369,7 @@ var harnessBrokerMethodSchema = external_exports.enum([
   "adapter.open",
   "adapter.subagent.readSnapshot",
   "session.readSnapshot",
+  "session.readCapabilities",
   "session.refreshUsage",
   "session.execute",
   "session.commands.list",
@@ -16449,6 +16550,11 @@ var turnStartSchema = external_exports.object({
   turnId: hostTurnIdSchema,
   input: external_exports.array(textInputSchema)
 }).strict();
+var turnSteerSchema = external_exports.object({
+  type: external_exports.literal("turn.steer"),
+  turnId: hostTurnIdSchema,
+  input: external_exports.array(textInputSchema)
+}).strict();
 var turnCancelSchema = external_exports.object({ type: external_exports.literal("turn.cancel"), turnId: hostTurnIdSchema }).strict();
 var interactionResponseSchema = external_exports.union([
   external_exports.object({
@@ -16474,6 +16580,7 @@ var permissionSelectSchema = external_exports.object({
 }).strict();
 var brokerHostCommandSchema = external_exports.discriminatedUnion("type", [
   turnStartSchema,
+  turnSteerSchema,
   turnCancelSchema,
   interactionRespondSchema,
   modelSelectSchema,
@@ -16666,6 +16773,7 @@ function parseSessionMetadata(value) {
     sessionId: candidate.sessionId,
     sessionGeneration: candidate.sessionGeneration,
     capabilities: harnessSessionCapabilitiesSchema.parse(candidate.capabilities),
+    readCapabilities: candidate.readCapabilities === true,
     initialState: state,
     initialUsage: candidate.initialUsage === null ? null : parseHostUsage(candidate.initialUsage),
     commands: candidate.commands === true
@@ -17017,6 +17125,11 @@ var BrokeredHarnessSession = class {
       event: { type: "session.faulted", error: unavailable(error51.message) }
     });
   }
+  async readCapabilities() {
+    if (!this.#metadata.readCapabilities)
+      return { ...this.capabilities, steer: false };
+    return harnessSessionCapabilitiesSchema.parse(await this.#request("session.readCapabilities", {}));
+  }
   async refreshUsage() {
     await this.#request("session.refreshUsage", {});
   }
@@ -17048,6 +17161,8 @@ var BrokeredHarnessSession = class {
     try {
       return parseHarnessResult(await this.#request("session.execute", { command }));
     } catch (error51) {
+      if (command.type === "turn.steer")
+        throw error51;
       return {
         ok: false,
         error: unavailable(error51 instanceof Error ? error51.message : String(error51))
@@ -17135,6 +17250,8 @@ var BrokeredHarnessAdapter = class {
   commandCatalog;
   liveCommandCatalog;
   harnessId;
+  credits;
+  refreshCredits;
   #descriptorPath;
   #forwardEnvironment;
   #isInstalled;
@@ -17155,6 +17272,10 @@ var BrokeredHarnessAdapter = class {
   };
   constructor(input = {}) {
     this.harnessId = harnessPluginIdSchema.parse(input.harnessId ?? "claude-code");
+    if (input.accountCredits !== false) {
+      this.credits = () => this.#credits;
+      this.refreshCredits = () => this.#refreshAccountCredits();
+    }
     this.#forwardEnvironment = input.forwardDelegationEnvironment === true;
     if (input.commandCatalog)
       this.commandCatalog = input.commandCatalog;
@@ -17166,10 +17287,7 @@ var BrokeredHarnessAdapter = class {
     this.#startBroker = input.startBroker === false ? void 0 : input.startBroker ?? (process.platform === "darwin" && !input.descriptorPath ? () => startBrokerLaunchAgent(this.harnessId, environment) : void 0);
     this.#startTimeoutMs = input.startTimeoutMs ?? BROKER_START_TIMEOUT_MS;
   }
-  credits() {
-    return this.#credits;
-  }
-  refreshCredits() {
+  #refreshAccountCredits() {
     if (this.#closed)
       return Promise.resolve(null);
     if (this.#creditsRefresh)
@@ -17355,10 +17473,13 @@ function usageSessionTitle(value) {
     return void 0;
   if (normalized.length <= MAX_SESSION_TITLE_LENGTH)
     return normalized;
-  const characters = [...normalized];
-  if (characters.length <= MAX_SESSION_TITLE_LENGTH)
-    return normalized;
-  return `${characters.slice(0, MAX_SESSION_TITLE_LENGTH - 1).join("").trimEnd()}…`;
+  let title = "";
+  for (const character of normalized) {
+    if (title.length + character.length >= MAX_SESSION_TITLE_LENGTH)
+      break;
+    title += character;
+  }
+  return `${title.trimEnd()}…`;
 }
 function sessionIdOk(value) {
   return typeof value === "string" && value.length > 0 && value.length <= MAX_SESSION_ID_LENGTH;
@@ -17487,6 +17608,27 @@ function nativeError(error51, profile = CODEBUDDY_RUNTIME_PROFILE) {
 function failure(code, message, profile = CODEBUDDY_RUNTIME_PROFILE) {
   return { ok: false, error: nativeError(new CodeBuddyError(code, message), profile) };
 }
+function nativeTurnError(stopReason, meta3, profile) {
+  const fallback = `Native Turn stopped: ${text(stopReason) || "unknown"} (${text(meta3["codebuddy.ai/outcome"]) || "no native outcome"})`;
+  const raw = text(meta3["codebuddy.ai/errorMessage"]).trim();
+  let diagnostic = "";
+  let category;
+  if (raw) {
+    try {
+      const error51 = record2(JSON.parse(raw));
+      const data = record2(error51.data);
+      diagnostic = text(data.details).trim() || text(error51.message).trim();
+      category = data.category;
+    } catch {
+      diagnostic = raw;
+    }
+  }
+  return nativeError(new CodeBuddyError(
+    // -32000 is shared by native refusals; the category identifies authentication failures.
+    category === "auth" ? "authenticationRequired" : "nativeFailure",
+    diagnostic ? `${fallback}: ${diagnostic}` : fallback
+  ), profile);
+}
 async function bounded(operation, milliseconds, label, onTimeout) {
   let timer;
   try {
@@ -17508,6 +17650,40 @@ async function bounded(operation, milliseconds, label, onTimeout) {
   }
 }
 
+// ../codebuddy/dist/permission-presentation.js
+var labels = {
+  "Always Ask": "始终询问",
+  "Accept Edits": "接受编辑",
+  Plan: "规划模式",
+  Auto: "自动",
+  "Auto mode": "自动模式",
+  "Don't Ask": "不询问",
+  "Bypass Permissions": "绕过权限",
+  "Full Access": "完全访问",
+  Delegate: "由父会话管理",
+  Default: "默认"
+};
+var descriptions = {
+  "Prompts for permission on first use of each tool": "首次使用每种工具时请求权限。",
+  "Automatically accepts file edit permissions for the session": "自动接受本会话中的文件编辑权限。",
+  "Agent can analyze but not modify files or execute commands": "Agent 可以分析，但不能修改文件或执行命令。",
+  "An AI classifier reviews actions that would normally prompt: safe ones are auto-approved, risky ones are denied. If the classifier is unavailable, the action falls back to a prompt (or is denied when prompts cannot be shown)": "由 AI 分类器评估原本需要询问的操作：安全操作自动批准，风险操作拒绝。分类器不可用时改为询问；无法显示询问时拒绝。",
+  "Does not show permission prompts; pre-approved and safe read-only actions run, everything else that would prompt is denied": "不显示权限询问；已获批准和安全的只读操作可以执行，其余原本需要询问的操作会被拒绝。",
+  "Skips all permission prompts": "跳过常规权限询问。",
+  "Skips ALL permission checks including dangerous commands for all agents": "为所有 Agent 跳过全部权限检查，包括危险命令。",
+  "Permissions managed by parent session": "由父会话管理权限。"
+};
+function permissionLocalizations(label, description) {
+  const localizedLabel = Object.hasOwn(labels, label) ? labels[label] : void 0;
+  const localizedDescription = Object.hasOwn(descriptions, description) ? descriptions[description] : void 0;
+  return {
+    "zh-CN": {
+      ...localizedLabel ? { label: localizedLabel } : {},
+      ...localizedDescription ? { description: localizedDescription } : {}
+    }
+  };
+}
+
 // ../codebuddy/dist/configuration.js
 var CODEBUDDY_CAPABILITIES = {
   configuration: {
@@ -17565,6 +17741,7 @@ function configuration(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
     modes: rows(mode.options).map((option) => ({
       id: option.value,
       label: option.name,
+      localizations: permissionLocalizations(text(option.name), text(option.description)),
       ...option.description ? { description: option.description } : {},
       ...["bypassPermissions", "fullAccess"].includes(text(option.value)) ? { dangerous: true } : {}
     })),
@@ -18051,6 +18228,11 @@ function commandCatalog(value, profile = CODEBUDDY_RUNTIME_PROFILE) {
             id: `${profile.harnessId}.${name}`,
             invocation: `/${name}`,
             label: name,
+            ...name === "compact" && !skill ? {
+              localizations: {
+                "zh-CN": { label: "压缩上下文", description: "压缩当前对话上下文" }
+              }
+            } : {},
             ...text(entry.description).trim() ? { description: text(entry.description).trim().slice(0, 512) } : {},
             argumentMode: name === "compact" || record2(entry.input).hint || record2(entry._meta).type === "skill" ? "text" : "none",
             ...record2(entry._meta).type === "skill" ? { kind: "skill" } : {}
@@ -18939,7 +19121,7 @@ function createCodeBuddyUsageStatistics(environment, profile) {
 import { stat as stat3 } from "node:fs/promises";
 
 // ../codebuddy/dist/acp-client.js
-import { execFile as execFile2, spawn } from "node:child_process";
+import { execFile as execFile3, spawn } from "node:child_process";
 import { Readable as Readable2, Writable } from "node:stream";
 
 // ../../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -23104,9 +23286,23 @@ var ClientSideConnection = class {
 
 // ../codebuddy/dist/copy-cleanup.js
 import { randomBytes } from "node:crypto";
+
+// ../codebuddy/dist/acp-stdio.js
 import { createInterface as createInterface2 } from "node:readline";
-import { stripVTControlCharacters } from "node:util";
 import { Readable } from "node:stream";
+import { stripVTControlCharacters } from "node:util";
+function codeBuddyAcpOutput(stdout, onLine) {
+  return Readable.from((async function* () {
+    for await (const line of createInterface2({ input: stdout })) {
+      onLine?.(stripVTControlCharacters(line));
+      if (line.trimStart().startsWith("{"))
+        yield Buffer.from(`${line}
+`);
+    }
+  })());
+}
+
+// ../codebuddy/dist/copy-cleanup.js
 var CodeBuddyCopyCleanup = class {
   copyId;
   cwd;
@@ -23136,17 +23332,11 @@ var CodeBuddyCopyCleanup = class {
   }
   /** Native --serve banners include its password; never pass them to the ACP parser/logs. */
   protocolOutput(stdout) {
-    return Readable.from(this.#protocolLines(stdout));
-  }
-  async *#protocolLines(stdout) {
-    for await (const line of createInterface2({ input: stdout })) {
-      const endpoint = /^\s*Endpoint\s+(http:\/\/127\.0\.0\.1:\d+)\s*$/u.exec(stripVTControlCharacters(line));
+    return codeBuddyAcpOutput(stdout, (line) => {
+      const endpoint = /^\s*Endpoint\s+(http:\/\/127\.0\.0\.1:\d+)\s*$/u.exec(line);
       if (endpoint)
         this.#endpoint = endpoint[1];
-      if (line.trimStart().startsWith("{"))
-        yield Buffer.from(`${line}
-`);
-    }
+    });
   }
   async remove() {
     if (!this.#endpoint)
@@ -23411,6 +23601,88 @@ function resolveHarnessExecutable(spec, input, dependencies = {}) {
   return void 0;
 }
 
+// ../../harness-discovery/dist/installation.js
+import { execFile as execFile2 } from "node:child_process";
+import { homedir as homedir2 } from "node:os";
+function runInstallationCommand(command, args, environment, timeout = 3e4) {
+  const env = withNodeRuntimeOnPath(environment);
+  const invocation = /\.[cm]?js$/i.test(command) ? commandInvocation(process.execPath, [command, ...args], env) : commandInvocation(command, args, env);
+  return new Promise((resolve, reject) => {
+    const child = execFile2(invocation.command, invocation.arguments, {
+      env,
+      cwd: env.HOME ?? env.USERPROFILE ?? homedir2(),
+      encoding: "utf8",
+      timeout,
+      killSignal: "SIGKILL",
+      maxBuffer: 1024 * 1024,
+      windowsHide: true,
+      windowsVerbatimArguments: invocation.windowsVerbatimArguments
+    }, (error51, stdout, stderr) => {
+      if (error51)
+        reject(new Error(error51.killed ? "Harness command timed out" : "Harness command failed; check the native installation and retry"));
+      else
+        resolve((stdout || stderr).trim());
+    });
+    child.stdin?.end();
+  });
+}
+function installationVersion(value) {
+  if (typeof value !== "string" || !/^v?\d+(?:\.\d+){1,3}(?:-[\w.-]+)?(?:\+[\w.-]+)?$/.test(value.trim()))
+    throw new Error("Harness returned an invalid version");
+  return value.trim().replace(/^v/, "");
+}
+function versionFromOutput(output) {
+  return installationVersion(output.match(/\b\d+(?:\.\d+){1,3}(?:-[\w.-]+)?(?:\+[\w.-]+)?\b/)?.[0]);
+}
+function newerInstallationVersion(current, latest) {
+  const a = installationVersion(current).replace(/\+.*/, "");
+  const b = installationVersion(latest).replace(/\+.*/, "");
+  const coreA = a.replace(/-.*/, "").split(".").map(BigInt);
+  const coreB = b.replace(/-.*/, "").split(".").map(BigInt);
+  for (let i = 0; i < Math.max(coreA.length, coreB.length); i++) {
+    if ((coreA[i] ?? 0n) !== (coreB[i] ?? 0n))
+      return (coreB[i] ?? 0n) > (coreA[i] ?? 0n);
+  }
+  const preA = a.includes("-") ? a.slice(a.indexOf("-") + 1).split(".") : [];
+  const preB = b.includes("-") ? b.slice(b.indexOf("-") + 1).split(".") : [];
+  if (!preA.length || !preB.length)
+    return !!preA.length && !preB.length;
+  for (let i = 0; i < Math.max(preA.length, preB.length); i++) {
+    const x = preA[i];
+    const y = preB[i];
+    if (x === y)
+      continue;
+    if (x === void 0 || y === void 0)
+      return x === void 0;
+    const numericX = /^\d+$/.test(x);
+    const numericY = /^\d+$/.test(y);
+    if (numericX && numericY) {
+      if (BigInt(x) === BigInt(y))
+        continue;
+      return BigInt(y) > BigInt(x);
+    }
+    if (numericX !== numericY)
+      return numericX;
+    return y > x;
+  }
+  return false;
+}
+async function fetchInstallationText(url2) {
+  const request = async () => {
+    const response = await fetch(url2, { signal: AbortSignal.timeout(15e3) });
+    if (!response.ok)
+      throw new Error("Could not check the latest Harness version");
+    return response.text();
+  };
+  try {
+    return await request();
+  } catch (error51) {
+    if (error51 instanceof DOMException && (error51.name === "AbortError" || error51.name === "TimeoutError"))
+      throw error51;
+    return request();
+  }
+}
+
 // ../codebuddy/dist/command.js
 var codeBuddyDiscoverySpec = {
   id: "codebuddy",
@@ -23510,7 +23782,7 @@ var CodeBuddyAcpClient = class {
           return { outcome: "cancelled" };
         return options.handlers.question(params);
       }
-    }), ndJsonStream2(Writable.toWeb(this.#child.stdin), Readable2.toWeb(this.#copyCleanup?.protocolOutput(this.#child.stdout) ?? this.#child.stdout)));
+    }), ndJsonStream2(Writable.toWeb(this.#child.stdin), Readable2.toWeb(this.#copyCleanup?.protocolOutput(this.#child.stdout) ?? (invocation.arguments.includes("--serve") ? codeBuddyAcpOutput(this.#child.stdout) : this.#child.stdout))));
     void this.#connection.closed.then(() => {
       this.#fault(new CodeBuddyError("processExited", "ACP connection closed"));
     }).catch((error51) => {
@@ -23603,7 +23875,7 @@ var CodeBuddyAcpClient = class {
     }
     const pid = this.#child.pid;
     if (pid && process.platform === "win32") {
-      await new Promise((resolve) => execFile2("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => resolve()));
+      await new Promise((resolve) => execFile3("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => resolve()));
     } else if (pid) {
       try {
         process.kill(-pid, "SIGKILL");
@@ -23616,7 +23888,7 @@ var CodeBuddyAcpClient = class {
 
 // ../codebuddy/dist/derivation.js
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { execFile as execFile3, spawn as spawn2 } from "node:child_process";
+import { execFile as execFile4, spawn as spawn2 } from "node:child_process";
 import { lstat as lstat3, mkdir, readFile as readFile3, realpath as realpath4, unlink, writeFile } from "node:fs/promises";
 import path8 from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "node:util";
@@ -23866,7 +24138,7 @@ async function copyCodeBuddySession(cwd, sourceId, targetId, environment, signal
         child.stderr.destroy();
       } else if (process.platform === "win32" && child.pid) {
         termination = new Promise((done) => {
-          execFile3("taskkill", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => {
+          execFile4("taskkill", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => {
             child.kill();
             done();
           });
@@ -25537,6 +25809,8 @@ var CodeBuddySession = class {
   async #execute(command, nativeCommand = false) {
     if (this.#closed || this.#fault)
       return failure("invalidState", "Session is closed or faulted", this.profile);
+    if (command.type === "turn.steer")
+      return unsupportedSteer(this.profile.displayName);
     if (command.type === "interaction.respond")
       return this.#interactions.respond(command);
     if (command.type === "turn.cancel") {
@@ -25606,7 +25880,7 @@ var CodeBuddySession = class {
       // Those remain visible on individual Items; they do not fail the completed Turn.
       (!meta3["codebuddy.ai/outcome"] || meta3["codebuddy.ai/outcome"] === "SUCCESS" || meta3["codebuddy.ai/outcome"] === "PARTIAL_SUCCESS") ? { status: "succeeded" } : {
         status: "failed",
-        error: nativeError(new CodeBuddyError("nativeFailure", `Native Turn stopped: ${text(stop) || "unknown"} (${text(meta3["codebuddy.ai/outcome"]) || "no native outcome"})`), this.profile)
+        error: nativeTurnError(stop, meta3, this.profile)
       };
       const snapshot = await this.#snapshot();
       const added = snapshot.turns.filter((turn) => !active.before.has(turn.nativeTurnRef.nativeTurnKey));
@@ -25895,8 +26169,9 @@ var CodeBuddyAdapter = class {
 };
 
 // dist/command.js
-import { lstatSync } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { lstatSync, statSync } from "node:fs";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { homedir as homedir3 } from "node:os";
 
 // dist/delegation.js
 var DELEGATION_ENVIRONMENT_KEYS = [
@@ -25913,6 +26188,170 @@ function workBuddyDelegationArguments(environment, ephemeral) {
   return ["--append-system-prompt", WORKBUDDY_DELEGATION_INSTRUCTIONS];
 }
 
+// dist/credential-bootstrap.js
+var WORKBUDDY_CREDENTIAL_PRELOAD = String.raw`
+(() => {
+  const env = process.env;
+  const bootstrapEnvironment = [
+    "CODEBUDDY_SIDECAR_CREDENTIAL_BOOTSTRAP_SOCKET",
+    "CODEBUDDY_SIDECAR_READY_SOCKET",
+    "CODEBUDDY_SIDECAR_READY_TOKEN",
+    "CODEBUDDY_SIDECAR_READY_SESSION_ID",
+  ];
+  if (bootstrapEnvironment.some(name => env[name] !== undefined)) {
+    if (!["WORKBUDDY_AT_REST_ENCRYPTION", ...bootstrapEnvironment].every(name => env[name]?.trim())) {
+      throw Error("WorkBuddy credential bootstrap environment is incomplete");
+    }
+    return;
+  }
+  const policy = env.WORKBUDDY_AT_REST_ENCRYPTION?.trim();
+  // Other explicit policies remain owned by the native CLI.
+  if (policy && policy !== "fields") return;
+
+  let provider;
+  try {
+    provider = process._linkedBinding("electron_browser_workbuddy_storage");
+  } catch {
+    // Older app runtimes predate encrypted credential fields.
+    return;
+  }
+  const crypto = require("node:crypto");
+  const net = require("node:net");
+  const fs = require("node:fs");
+  const path = require("node:path");
+  let payload;
+  try { payload = JSON.parse(provider.loggerGet()); }
+  catch { throw Error("WorkBuddy credential key provider is unavailable"); }
+  let secret = payload && payload.atRestSecretKey;
+  const decoded = typeof secret === "string" ? Buffer.from(secret, "base64") : Buffer.alloc(0);
+  const valid = payload && payload.version === 1 && decoded.length === 32 &&
+    decoded.toString("base64") === secret && !decoded.every(byte => byte === 0);
+  decoded.fill(0);
+  if (!valid) throw Error("WorkBuddy credential key payload is unsupported");
+  // Match the native normalizeAtRestKeyPayload; the base64 text is hashed, not its decoded bytes.
+  const key = crypto.createHash("sha256").update(secret, "utf8").digest();
+  secret = undefined;
+  payload = undefined;
+  const token = crypto.randomBytes(24).toString("hex");
+  const sessionId = crypto.randomUUID();
+  let directory;
+  let socketPath;
+  if (process.platform === "win32") {
+    socketPath = "\\\\.\\pipe\\codexhost-wb-" + process.pid + "-" + token;
+  } else {
+    let root = require("node:os").tmpdir();
+    if (Buffer.byteLength(root) > 65) root = "/tmp";
+    directory = fs.mkdtempSync(path.join(root, "ch-wb-"));
+    fs.chmodSync(directory, 0o700);
+    socketPath = path.join(directory, "c");
+  }
+  const cleanup = () => {
+    clearTimeout(readyTimer);
+    readyServer && readyServer.close();
+    for (const connection of readyConnections) connection.destroy();
+    if (directory) try { fs.rmSync(directory, {recursive:true,force:true}); } catch {}
+  };
+  const needsReady = process.argv.includes("--serve");
+  let credentialReady = false;
+  let runtimeReady = !needsReady;
+  let readyTimer;
+  let readyServer;
+  const readyConnections = new Set();
+  const cleanupWhenReady = () => {
+    if (!credentialReady || !runtimeReady) return;
+    cleanup();
+    process.removeListener("exit", cleanup);
+  };
+  if (needsReady) {
+    readyServer = net.createServer(connection => {
+      readyConnections.add(connection);
+      connection.once("close", () => readyConnections.delete(connection));
+      connection.on("error", () => connection.destroy());
+      let input = "";
+      connection.on("data", chunk => {
+        input += chunk;
+        if (input.length > 4096) return connection.destroy();
+        if (!input.includes("\n")) return;
+        try {
+          const request = JSON.parse(input.slice(0, input.indexOf("\n")));
+          const params = request.params;
+          if (request.jsonrpc !== "2.0" || request.method !== "session.ready" ||
+              typeof request.id !== "string" || params?.protocolVersion !== 1 ||
+              params.token !== token || params.sessionId !== sessionId || params.pid !== process.pid ||
+              !Number.isInteger(params.port) || params.port < 1 || params.port > 65535) {
+            connection.destroy();
+            return;
+          }
+          runtimeReady = true;
+          connection.end(JSON.stringify({jsonrpc:"2.0",id:request.id,result:{ok:true}}) + "\n", cleanupWhenReady);
+        } catch { connection.destroy(); }
+      });
+    });
+    readyServer.once("error", () => {
+      process.stderr.write("WorkBuddy runtime readiness listener failed\n");
+      process.exit(1);
+    });
+    readyServer.listen(socketPath + "-ready");
+    readyTimer = setTimeout(() => {
+      process.stderr.write("WorkBuddy runtime readiness timed out\n");
+      process.exit(1);
+    }, 15000);
+  }
+  process.once("exit", cleanup);
+  Object.assign(env, {
+    WORKBUDDY_AT_REST_ENCRYPTION: "fields",
+    CODEBUDDY_SIDECAR_CREDENTIAL_BOOTSTRAP_SOCKET: socketPath,
+    CODEBUDDY_SIDECAR_READY_SOCKET: socketPath + "-ready",
+    CODEBUDDY_SIDECAR_READY_TOKEN: token,
+    CODEBUDDY_SIDECAR_READY_SESSION_ID: sessionId,
+  });
+  let message = JSON.stringify({version:1,sessionId,token,pid:process.pid,bootstrap:{
+    version:1,policy:"fields",
+    symmetricKey:{keyId:crypto.createHash("sha256").update(key).digest("hex").slice(0,16),keyBase64:key.toString("base64")},
+    asymmetricUnavailable:"missing-key",
+  }}) + "\n";
+  key.fill(0);
+  let done = false;
+  let socket;
+  const finish = success => {
+    if (done) return;
+    done = true;
+    clearTimeout(timer);
+    socket && socket.destroy();
+    message = "";
+    credentialReady = success;
+    if (success) cleanupWhenReady();
+    if (!success) {
+      process.stderr.write("WorkBuddy credential bootstrap failed\n");
+      process.exit(1);
+    }
+  };
+  const timer = setTimeout(() => finish(false), 4500);
+  const connect = () => {
+    if (done) return;
+    socket = net.createConnection(socketPath);
+    let reply = "";
+    socket.once("connect", () => socket.end(message, () => { message = ""; }));
+    socket.on("data", chunk => {
+      reply += chunk;
+      if (reply.length > 1024) return finish(false);
+      if (!reply.includes("\n")) return;
+      try {
+        const result = JSON.parse(reply.slice(0, reply.indexOf("\n")));
+        finish(result.ok === true && result.policy === "fields");
+      } catch { finish(false); }
+    });
+    socket.once("end", () => { if (!done) finish(false); });
+    socket.once("error", error => {
+      socket.destroy();
+      if (error.code === "ENOENT" || error.code === "ECONNREFUSED") setTimeout(connect, 20);
+      else finish(false);
+    });
+  };
+  setImmediate(connect);
+})();
+`;
+
 // dist/discovery.js
 var WORKBUDDY_MACOS_ELECTRON = "/Applications/WorkBuddy AI.app/Contents/MacOS/Electron";
 var windowsRoots = [
@@ -26020,7 +26459,7 @@ function bundledProductConfigPath(environment, platform, dependencies) {
 function workBuddyEnvironment(environment, platform = process.platform) {
   const paths = targetPath(platform);
   const configuredRoot = environment.WORKBUDDY_CONFIG_DIR;
-  const root = paths.resolve(configuredRoot?.trim() ? configuredRoot : paths.join(environment.HOME || environment.USERPROFILE || homedir2(), ".workbuddy-ai"));
+  const root = paths.resolve(configuredRoot?.trim() ? configuredRoot : paths.join(environment.HOME || environment.USERPROFILE || homedir3(), ".workbuddy-ai"));
   return {
     ...environment,
     // The bundled core reads CODEBUDDY_CONFIG_DIR. Force both names to one
@@ -26030,9 +26469,7 @@ function workBuddyEnvironment(environment, platform = process.platform) {
     DISABLE_AUTOUPDATER: environment.DISABLE_AUTOUPDATER ?? "1"
   };
 }
-function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {}, argumentsOverride) {
-  const dependencies = Array.isArray(dependenciesOrArguments) ? {} : dependenciesOrArguments;
-  const nativeArguments = Array.isArray(dependenciesOrArguments) ? dependenciesOrArguments : argumentsOverride;
+function resolveWorkBuddyLaunch(environment, dependencies = {}) {
   const platform = dependencies.platform ?? process.platform;
   const configured = environmentValue(environment, "CODEXHOST_WORKBUDDY_COMMAND")?.trim() || void 0;
   if (!configured && platform !== "darwin" && platform !== "win32")
@@ -26045,6 +26482,29 @@ function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {
   const executable = configured && !explicitDesktop && !configuredDirectory ? explicitExecutable : bundle?.executable;
   if (!executable)
     throw new CodeBuddyError("notInstalled", "WorkBuddy AI app or its bundled CLI is unavailable");
+  return { executable, bundle };
+}
+function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {}, argumentsOverride) {
+  const dependencies = Array.isArray(dependenciesOrArguments) ? {} : dependenciesOrArguments;
+  const nativeArguments = Array.isArray(dependenciesOrArguments) ? dependenciesOrArguments : argumentsOverride;
+  const platform = dependencies.platform ?? process.platform;
+  const { executable, bundle } = resolveWorkBuddyLaunch(environment, dependencies);
+  const paths = targetPath(platform);
+  const cliDist = bundle && paths.join(paths.dirname(paths.dirname(bundle.cli)), "dist");
+  const isFile = dependencies.isFile ?? ((candidate) => {
+    try {
+      return statSync(candidate).isFile();
+    } catch {
+      return false;
+    }
+  });
+  const liteOnly = Boolean(cliDist && isFile(paths.join(cliDist, "codebuddy-lite-wb.mjs")) && !isFile(paths.join(cliDist, "codebuddy.js")) && !isFile(paths.join(cliDist, "codebuddy-headless.js")));
+  const acpArguments = nativeArguments ?? [
+    "--acp",
+    ...ephemeral ? ["--no-session-persistence"] : [],
+    ...workBuddyDelegationArguments(environment, ephemeral)
+  ];
+  const serve = liteOnly && acpArguments.includes("--acp") && !acpArguments.includes("--serve");
   const configuredEnvironment = withNodeRuntimeOnPath(workBuddyEnvironment(environment, platform), process.execPath, platform);
   const productConfigPath = bundle ? bundledProductConfigPath(configuredEnvironment, platform, dependencies) : void 0;
   const childEnvironment = bundle ? {
@@ -26053,16 +26513,20 @@ function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {
     // waits for its telemetry channel before copying; normal ACP keeps its policy.
     ...nativeArguments?.includes("--print") && nativeArguments.includes("--fork-session") && configuredEnvironment.DISABLE_TELEMETRY === void 0 ? { DISABLE_TELEMETRY: "1" } : {},
     ...productConfigPath ? { [WORKBUDDY_PRODUCT_CONFIG_PATH_ENV]: productConfigPath } : {},
+    ...liteOnly ? { CODEBUDDY_FORCE_LITE_WB_BUNDLE: "1" } : {},
+    ...serve ? {
+      CODEBUDDY_GATEWAY_AUTH: "password",
+      CODEBUDDY_GATEWAY_PASSWORD: randomBytes2(32).toString("base64url"),
+      CODEBUDDY_GATEWAY_BASE_PATH: ""
+    } : {},
     ELECTRON_RUN_AS_NODE: "1"
   } : configuredEnvironment;
   return {
     ...commandInvocation(executable, [
-      ...bundle ? [bundle.cli] : [],
-      ...nativeArguments ?? [
-        "--acp",
-        ...ephemeral ? ["--no-session-persistence"] : [],
-        ...workBuddyDelegationArguments(childEnvironment, ephemeral)
-      ]
+      ...bundle ? ["--eval", `${WORKBUDDY_CREDENTIAL_PRELOAD}
+require(process.argv[1]);`, bundle.cli] : [],
+      ...acpArguments,
+      ...serve ? ["--serve", "--host", "127.0.0.1", "--port", "0", "--auth", "password"] : []
     ], childEnvironment, platform),
     environment: childEnvironment
   };
@@ -26075,6 +26539,7 @@ var WORKBUDDY_COMMAND_CATALOG = harnessCommandCatalogSchema.parse({
     {
       id: "workbuddy.compact",
       invocation: "/compact",
+      localizations: { "zh-CN": { label: "压缩上下文", description: "压缩当前对话上下文" } },
       label: "Compact context",
       description: "Compact the current WorkBuddy Session context",
       argumentMode: "text"
@@ -26202,15 +26667,15 @@ function normalizedLabel(value) {
 }
 function mergeWorkBuddyProductModels(catalog, productModels) {
   const refs = new Set(catalog.models.map((model2) => model2.ref.id));
-  const labels = new Set(catalog.models.map((model2) => normalizedLabel(model2.label)));
+  const labels2 = new Set(catalog.models.map((model2) => normalizedLabel(model2.label)));
   const models = [...catalog.models];
   for (const productModel of productModels) {
     const ref = modelRef(productModel.id);
     const labelKey = normalizedLabel(productModel.name);
-    if (refs.has(ref.id) || labels.has(labelKey))
+    if (refs.has(ref.id) || labels2.has(labelKey))
       continue;
     refs.add(ref.id);
-    labels.add(labelKey);
+    labels2.add(labelKey);
     const creditLabel = productModel.credits?.replace(/^x/iu, "").replace(/\s*credits$/iu, "x");
     const annotatedLabel = creditLabel ? `${productModel.name} · ${creditLabel}` : productModel.name;
     models.push({
@@ -26266,21 +26731,102 @@ var WorkBuddyAdapter = class extends CodeBuddyAdapter {
   }
 };
 
+// dist/installation.js
+import { readFile as readFile6, stat as stat5 } from "node:fs/promises";
+var applicationNotice = {
+  en: "These are WorkBuddy desktop app versions. Its bundled CLI updates with the app. Download the official installer, complete installation, then reopen Connections to verify the version. Existing sessions keep their running CLI.",
+  "zh-CN": "此处显示 WorkBuddy 桌面应用版本，内置 CLI 随应用更新。请下载官方安装包并完成安装，再重新打开连接页确认版本。已有会话继续使用运行中的 CLI。"
+};
+function appVersion(value) {
+  const version2 = installationVersion(value);
+  return version2.replace(/^(\d+\.\d+\.\d+)\.\d+$/u, "$1");
+}
+async function readProduct(file2) {
+  const metadata = await stat5(file2);
+  if (!metadata.isFile() || metadata.size <= 0 || metadata.size > 8 * 1024 * 1024)
+    throw new Error("WorkBuddy product metadata is unavailable");
+  return JSON.parse(await readFile6(file2, "utf8"));
+}
+function createWorkBuddyInstallation(environment, dependencies = {}) {
+  const platform = dependencies.platform ?? process.platform;
+  const arch = dependencies.arch ?? process.arch;
+  return async (action) => {
+    if (action === "update")
+      throw new Error("Complete the update with WorkBuddy's official desktop installer");
+    const { executable, bundle } = resolveWorkBuddyLaunch(environment, { platform });
+    if (!bundle)
+      return {
+        currentVersion: versionFromOutput(await runInstallationCommand(executable, ["--version"], environment)),
+        latestVersion: "Unknown",
+        latestVersionKind: "unknown",
+        updateAvailable: false,
+        canUpdate: false,
+        notice: {
+          en: "This is a custom CLI. Use its original installer to update; WorkBuddy desktop releases do not identify this CLI's latest version.",
+          "zh-CN": "当前使用自定义 CLI，请通过原安装方式更新；WorkBuddy 桌面应用版本不代表此 CLI 的最新版本。"
+        }
+      };
+    const paths = targetPath(platform);
+    const product = await (dependencies.readProduct ?? readProduct)(paths.join(paths.dirname(paths.dirname(bundle.cli)), "product.json"));
+    const currentVersion = appVersion(product.genieVersion);
+    const unknown2 = {
+      currentVersion,
+      versionKind: "application",
+      latestVersion: "Unknown",
+      latestVersionKind: "unknown",
+      updateAvailable: false,
+      canUpdate: false,
+      notice: {
+        en: "The installed WorkBuddy desktop app version is shown. Check and install updates in WorkBuddy itself; this installation's update channel could not be checked here.",
+        "zh-CN": "此处显示已安装的 WorkBuddy 桌面应用版本。当前无法查询此安装的更新渠道，请在 WorkBuddy 应用内检查并安装更新。"
+      }
+    };
+    const root = product.applicationName === "workbuddy-ai" && product.updateUrl === "https://www.workbuddy.ai" ? "https://www.workbuddy.ai" : product.applicationName === "workbuddy" && product.updateUrl === "https://www.workbuddy.cn" ? "https://www.workbuddy.cn" : void 0;
+    const target = platform === "darwin" && (arch === "arm64" || arch === "x64") ? `darwin-${arch}` : platform === "win32" && arch === "x64" ? "win32-x64-user" : void 0;
+    if (!root || !target || environment.WORKBUDDY_UPDATE_URL?.trim() && environment.WORKBUDDY_UPDATE_URL.trim() !== root)
+      return unknown2;
+    try {
+      const feed = JSON.parse(await (dependencies.fetchText ?? fetchInstallationText)(`${root}/v2/update?platform=workbuddy-${target}`));
+      const feedVersion = installationVersion(feed.version);
+      const latestVersion = appVersion(feedVersion);
+      const download = new URL(typeof feed.url === "string" ? feed.url : "");
+      const downloadHost = root.endsWith(".ai") ? "download.codebuddy.ai" : "download.codebuddy.cn";
+      if (download.origin !== `https://${downloadHost}` || download.username || download.password || download.search || download.hash || !download.pathname.startsWith(`/workbuddy/saas/${target}/WorkBuddy-${target}-${feedVersion}-`) || !download.pathname.endsWith(platform === "darwin" ? ".zip" : ".exe"))
+        throw new Error("WorkBuddy update feed returned an invalid installer URL");
+      if (platform === "darwin")
+        download.pathname = download.pathname.replace(/\.zip$/u, ".dmg");
+      const updateAvailable = newerInstallationVersion(currentVersion, latestVersion);
+      return {
+        currentVersion,
+        versionKind: "application",
+        latestVersion,
+        updateAvailable,
+        canUpdate: false,
+        ...updateAvailable ? { manualUpdateUrl: download.href } : {},
+        notice: applicationNotice
+      };
+    } catch {
+      return unknown2;
+    }
+  };
+}
+
 // dist/plugin.js
 function createHarnessAdapter(context) {
   if (context.platform === "darwin" && context.managedRemoteHost) {
-    const environment = {
+    const environment2 = {
       ...context.environment,
       ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
     };
     return new BrokeredHarnessAdapter({
+      accountCredits: false,
       harnessId: "workbuddy",
       commandCatalog: WORKBUDDY_COMMAND_CATALOG,
       forwardDelegationEnvironment: true,
       environment: { ...context.environment },
       isInstalled: () => {
         try {
-          workBuddyInvocation(environment, true);
+          workBuddyInvocation(environment2, true);
           return true;
         } catch (error51) {
           return !(error51 instanceof CodeBuddyError && error51.code === "notInstalled");
@@ -26289,11 +26835,12 @@ function createHarnessAdapter(context) {
       ...context.brokerDescriptorPath ? { descriptorPath: context.brokerDescriptorPath } : {}
     });
   }
-  return new WorkBuddyAdapter({
-    environment: {
-      ...context.environment,
-      ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
-    }
+  const environment = {
+    ...context.environment,
+    ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
+  };
+  return Object.assign(new WorkBuddyAdapter({ environment }), {
+    installation: createWorkBuddyInstallation(environment)
   });
 }
 export {