@codexhost/cli-linux-arm64 0.13.3 → 0.14.0

package/app/plugins/workbuddy/plugin.mjs

@@ -14662,10 +14662,19 @@ var model = external_exports.string().min(1).max(512);
 var project = external_exports.string().min(1).max(4096);
 var usageStatisticsParamsSchema = external_exports.strictObject({
   range: external_exports.enum(USAGE_STATISTICS_RANGES),
+  /** Display timezone for ranges, dates and hourly buckets; omitted means the Host's local zone. */
+  timeZone: external_exports.string().min(1).max(128).refine((value) => {
+    try {
+      new Intl.DateTimeFormat("en", { timeZone: value });
+      return true;
+    } catch {
+      return false;
+    }
+  }, "Unsupported usage statistics timezone").optional(),
   harness: harness.optional(),
   model: model.nullable().optional(),
   project: project.nullable().optional(),
-  /** One local date inside the range. */
+  /** One date in the query timezone inside the range. */
   date: localDate.optional()
 });
 var usageStatisticsTotalsSchema = external_exports.strictObject({
@@ -14701,7 +14710,7 @@ var usageStatisticsSessionSchema = external_exports.strictObject({
 });
 var usageStatisticsResultSchema = external_exports.strictObject({
   range: external_exports.enum(USAGE_STATISTICS_RANGES),
-  /** First local date of the range; null for all time. */
+  /** First date in the query timezone (Host local when omitted); null for all time. */
   from: localDate.nullable(),
   to: localDate,
   /** The filters these figures apply, echoed so a late answer to older filters is recognised. */
@@ -14741,7 +14750,7 @@ var usageStatisticsResultSchema = external_exports.strictObject({
   totals: usageStatisticsTotalsSchema,
   /** Each date and Harness of the range: every filter except the day. */
   daily: external_exports.array(external_exports.strictObject({ date: localDate, harness, ...totals })).max(2e5),
-  /** Local weekday (0 = Sunday) and hour, all filters applied. */
+  /** Weekday (0 = Sunday) and hour in the query timezone, all filters applied. */
   hourly: external_exports.array(external_exports.strictObject({
     weekday: external_exports.number().int().min(0).max(6),
     hour: external_exports.number().int().min(0).max(23),
@@ -14801,6 +14810,8 @@ var CONSOLE_HOST_METHODS = Object.freeze([
   "codexhost/harness/display-settings/set",
   "codexhost/harness/inspect",
   "codexhost/harness/installation",
+  "codexhost/harness/installation/start",
+  "codexhost/harness/installation/status",
   "codexhost/harness/launch-settings/get",
   "codexhost/harness/launch-settings/set",
   "codexhost/harness/web-ui/open",
@@ -14876,7 +14887,18 @@ var threadManualCompactionStartedSchema = external_exports.strictObject({
 var nonNegativeSafeIntegerSchema = external_exports.number().int().safe().nonnegative();
 var finiteNonNegativeNumberSchema = external_exports.number().finite().nonnegative();
 var cacheHitRatePercentSchema = external_exports.number().finite().min(0).max(100);
+var indicatorTextSchema = (maximum) => harnessLocalizedTextSchema.refine((entries) => Object.values(entries).every((text2) => text2.length <= maximum));
+var composerIndicatorsSchema = external_exports.array(external_exports.object({
+  kind: external_exports.literal("countdown"),
+  id: external_exports.string().min(1).max(64),
+  expiresAtUnix: nonNegativeSafeIntegerSchema,
+  label: indicatorTextSchema(256).optional(),
+  tooltip: indicatorTextSchema(1024).optional()
+}).strict()).max(2).refine((entries) => new Set(entries.map(({ id }) => id)).size === entries.length, {
+  message: "Composer indicator IDs must be unique"
+});
 var threadUsageSnapshotSchema = external_exports.object({
+  composerIndicators: composerIndicatorsSchema.optional(),
   inputTokens: nonNegativeSafeIntegerSchema.optional(),
   cachedInputTokens: nonNegativeSafeIntegerSchema.optional(),
   cacheWriteInputTokens: nonNegativeSafeIntegerSchema.optional(),
@@ -15284,7 +15306,9 @@ var harnessSessionCapabilitiesSchema = external_exports.object({
   }).strict().optional(),
   autonomousTurns: external_exports.object({
     observe: external_exports.boolean()
-  }).strict().optional()
+  }).strict().optional(),
+  /** True only when `turn.steer` delivers input into the active Turn through a native primitive. */
+  steer: external_exports.boolean().optional()
 }).strict();
 var harnessConfigurationStateSchema = external_exports.object({
   effectiveModel: harnessModelRefSchema.optional(),
@@ -15331,7 +15355,9 @@ var harnessInspectionSchema = external_exports.union([
 var harnessInspectParamsSchema = external_exports.object({
   harnessId: harnessIdSchema,
   cwd: nonBlankTextSchema2.max(16384).optional(),
-  refresh: external_exports.boolean().optional()
+  refresh: external_exports.boolean().optional(),
+  /** `availability` asks only whether the Harness can run; see `InspectHarnessInput.purpose`. */
+  purpose: external_exports.literal("availability").optional()
 }).strict();
 var harnessWebUiOpenParamsSchema = external_exports.object({
   harnessId: harnessIdSchema
@@ -15414,6 +15440,15 @@ var threadOwnershipListResultSchema = external_exports.object({
     seen.add(thread.threadId);
   }
 });
+var threadSteeringInspectParamsSchema = external_exports.object({
+  threadId: hostThreadIdSchema,
+  /** The text about to be steered; a Harness command always stops and restarts. */
+  text: external_exports.string().optional()
+}).strict();
+var threadSteerDeliverySchema = external_exports.enum(["activeTurn", "newTurn"]);
+var threadSteeringInspectResultSchema = external_exports.object({
+  delivery: external_exports.enum(["official", "activeTurn", "newTurn"])
+}).strict();
 
 // ../../shared-contracts/dist/harness-plugins.js
 var HARNESS_PLUGIN_MANIFEST_MAX_BYTES = 32 * 1024;
@@ -15515,6 +15550,10 @@ var harnessInstallationStateSchema = external_exports.object({
   latestVersion: external_exports.string().min(1).max(128),
   updateAvailable: external_exports.boolean(),
   canUpdate: external_exports.boolean(),
+  /** Defaults to CLI; some Harnesses ship only inside a desktop application. */
+  versionKind: external_exports.enum(["cli", "application"]).optional(),
+  /** Official download opened by the user; does not imply an automatic installation. */
+  manualUpdateUrl: external_exports.url().max(2048).refine((value) => /^https:\/\/[^/?#@]+(?:[/?#]|$)/iu.test(value), "Manual updates require a credential-free HTTPS URL").optional(),
   // Adapter-owned diagnostic text; UI uses messageCode rather than displaying it verbatim.
   message: external_exports.string().max(2048).optional(),
   messageCode: external_exports.string().min(1).max(128).optional(),
@@ -15522,6 +15561,20 @@ var harnessInstallationStateSchema = external_exports.object({
   notice: harnessLocalizedTextSchema.optional(),
   latestVersionKind: external_exports.enum(["unknown", "tracking-branch"]).optional()
 }).strict();
+var harnessInstallationTaskParamsSchema = external_exports.object({ taskId: external_exports.string().uuid() }).strict();
+var harnessInstallationTaskSchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({ taskId: external_exports.string().uuid(), status: external_exports.literal("running") }).strict(),
+  external_exports.object({
+    taskId: external_exports.string().uuid(),
+    status: external_exports.literal("succeeded"),
+    result: harnessInstallationStateSchema
+  }).strict(),
+  external_exports.object({
+    taskId: external_exports.string().uuid(),
+    status: external_exports.literal("failed"),
+    error: external_exports.object({ code: external_exports.number().int(), message: external_exports.string().min(1).max(2048) }).strict()
+  }).strict()
+]);
 
 // ../../shared-contracts/dist/codex-accounts.js
 var accountIdSchema = external_exports.string().min(1).max(256).regex(/^[A-Za-z0-9._~-]+$/u);
@@ -16024,6 +16077,18 @@ function sanitizeDiagnosticTail(value) {
   return redacted.length <= DIAGNOSTIC_TAIL_MAX_LENGTH ? redacted : redacted.slice(-DIAGNOSTIC_TAIL_MAX_LENGTH);
 }
 
+// ../../harness-adapter/dist/steer.js
+function unsupportedSteer(harnessLabel) {
+  return {
+    ok: false,
+    error: {
+      code: "unsupported",
+      message: `${harnessLabel} cannot steer an active Turn natively`,
+      retryable: false
+    }
+  };
+}
+
 // ../../harness-adapter/dist/usage.js
 var tokenFields = [
   "inputTokens",
@@ -16051,6 +16116,7 @@ var usageFields = /* @__PURE__ */ new Set([
   ...safeIntegerFields,
   ...percentFields,
   "sessionCacheUsage",
+  "composerIndicators",
   "totalCostUsd",
   "totalCredits",
   "contextUsagePercent",
@@ -16073,6 +16139,7 @@ function parseHostUsage(value) {
       throw new Error(`Harness Usage contains unknown field '${key}'`);
     }
   }
+  const indicators = value.composerIndicators === void 0 ? {} : { composerIndicators: composerIndicatorsSchema.parse(value.composerIndicators) };
   for (const field of [
     "totalCredits",
     "contextUsagePercent",
@@ -16143,9 +16210,9 @@ function parseHostUsage(value) {
     if (value.costSource !== "publicPrice") {
       throw new Error("Harness Usage 'unpricedModels' must be provided with a 'publicPrice' cost");
     }
-    return { ...value, unpricedModels: [...models] };
+    return { ...value, ...indicators, unpricedModels: [...models] };
   }
-  return { ...value };
+  return { ...value, ...indicators };
 }
 var requestTokenFields = [
   "inputTokens",
@@ -16302,6 +16369,7 @@ var harnessBrokerMethodSchema = external_exports.enum([
   "adapter.open",
   "adapter.subagent.readSnapshot",
   "session.readSnapshot",
+  "session.readCapabilities",
   "session.refreshUsage",
   "session.execute",
   "session.commands.list",
@@ -16482,6 +16550,11 @@ var turnStartSchema = external_exports.object({
   turnId: hostTurnIdSchema,
   input: external_exports.array(textInputSchema)
 }).strict();
+var turnSteerSchema = external_exports.object({
+  type: external_exports.literal("turn.steer"),
+  turnId: hostTurnIdSchema,
+  input: external_exports.array(textInputSchema)
+}).strict();
 var turnCancelSchema = external_exports.object({ type: external_exports.literal("turn.cancel"), turnId: hostTurnIdSchema }).strict();
 var interactionResponseSchema = external_exports.union([
   external_exports.object({
@@ -16507,6 +16580,7 @@ var permissionSelectSchema = external_exports.object({
 }).strict();
 var brokerHostCommandSchema = external_exports.discriminatedUnion("type", [
   turnStartSchema,
+  turnSteerSchema,
   turnCancelSchema,
   interactionRespondSchema,
   modelSelectSchema,
@@ -16699,6 +16773,7 @@ function parseSessionMetadata(value) {
     sessionId: candidate.sessionId,
     sessionGeneration: candidate.sessionGeneration,
     capabilities: harnessSessionCapabilitiesSchema.parse(candidate.capabilities),
+    readCapabilities: candidate.readCapabilities === true,
     initialState: state,
     initialUsage: candidate.initialUsage === null ? null : parseHostUsage(candidate.initialUsage),
     commands: candidate.commands === true
@@ -17050,6 +17125,11 @@ var BrokeredHarnessSession = class {
       event: { type: "session.faulted", error: unavailable(error51.message) }
     });
   }
+  async readCapabilities() {
+    if (!this.#metadata.readCapabilities)
+      return { ...this.capabilities, steer: false };
+    return harnessSessionCapabilitiesSchema.parse(await this.#request("session.readCapabilities", {}));
+  }
   async refreshUsage() {
     await this.#request("session.refreshUsage", {});
   }
@@ -17081,6 +17161,8 @@ var BrokeredHarnessSession = class {
     try {
       return parseHarnessResult(await this.#request("session.execute", { command }));
     } catch (error51) {
+      if (command.type === "turn.steer")
+        throw error51;
       return {
         ok: false,
         error: unavailable(error51 instanceof Error ? error51.message : String(error51))
@@ -17391,10 +17473,13 @@ function usageSessionTitle(value) {
     return void 0;
   if (normalized.length <= MAX_SESSION_TITLE_LENGTH)
     return normalized;
-  const characters = [...normalized];
-  if (characters.length <= MAX_SESSION_TITLE_LENGTH)
-    return normalized;
-  return `${characters.slice(0, MAX_SESSION_TITLE_LENGTH - 1).join("").trimEnd()}…`;
+  let title = "";
+  for (const character of normalized) {
+    if (title.length + character.length >= MAX_SESSION_TITLE_LENGTH)
+      break;
+    title += character;
+  }
+  return `${title.trimEnd()}…`;
 }
 function sessionIdOk(value) {
   return typeof value === "string" && value.length > 0 && value.length <= MAX_SESSION_ID_LENGTH;
@@ -19036,7 +19121,7 @@ function createCodeBuddyUsageStatistics(environment, profile) {
 import { stat as stat3 } from "node:fs/promises";
 
 // ../codebuddy/dist/acp-client.js
-import { execFile as execFile2, spawn } from "node:child_process";
+import { execFile as execFile3, spawn } from "node:child_process";
 import { Readable as Readable2, Writable } from "node:stream";
 
 // ../../../node_modules/@agentclientprotocol/sdk/dist/schema/index.js
@@ -23201,9 +23286,23 @@ var ClientSideConnection = class {
 
 // ../codebuddy/dist/copy-cleanup.js
 import { randomBytes } from "node:crypto";
+
+// ../codebuddy/dist/acp-stdio.js
 import { createInterface as createInterface2 } from "node:readline";
-import { stripVTControlCharacters } from "node:util";
 import { Readable } from "node:stream";
+import { stripVTControlCharacters } from "node:util";
+function codeBuddyAcpOutput(stdout, onLine) {
+  return Readable.from((async function* () {
+    for await (const line of createInterface2({ input: stdout })) {
+      onLine?.(stripVTControlCharacters(line));
+      if (line.trimStart().startsWith("{"))
+        yield Buffer.from(`${line}
+`);
+    }
+  })());
+}
+
+// ../codebuddy/dist/copy-cleanup.js
 var CodeBuddyCopyCleanup = class {
   copyId;
   cwd;
@@ -23233,17 +23332,11 @@ var CodeBuddyCopyCleanup = class {
   }
   /** Native --serve banners include its password; never pass them to the ACP parser/logs. */
   protocolOutput(stdout) {
-    return Readable.from(this.#protocolLines(stdout));
-  }
-  async *#protocolLines(stdout) {
-    for await (const line of createInterface2({ input: stdout })) {
-      const endpoint = /^\s*Endpoint\s+(http:\/\/127\.0\.0\.1:\d+)\s*$/u.exec(stripVTControlCharacters(line));
+    return codeBuddyAcpOutput(stdout, (line) => {
+      const endpoint = /^\s*Endpoint\s+(http:\/\/127\.0\.0\.1:\d+)\s*$/u.exec(line);
       if (endpoint)
         this.#endpoint = endpoint[1];
-      if (line.trimStart().startsWith("{"))
-        yield Buffer.from(`${line}
-`);
-    }
+    });
   }
   async remove() {
     if (!this.#endpoint)
@@ -23508,6 +23601,88 @@ function resolveHarnessExecutable(spec, input, dependencies = {}) {
   return void 0;
 }
 
+// ../../harness-discovery/dist/installation.js
+import { execFile as execFile2 } from "node:child_process";
+import { homedir as homedir2 } from "node:os";
+function runInstallationCommand(command, args, environment, timeout = 3e4) {
+  const env = withNodeRuntimeOnPath(environment);
+  const invocation = /\.[cm]?js$/i.test(command) ? commandInvocation(process.execPath, [command, ...args], env) : commandInvocation(command, args, env);
+  return new Promise((resolve, reject) => {
+    const child = execFile2(invocation.command, invocation.arguments, {
+      env,
+      cwd: env.HOME ?? env.USERPROFILE ?? homedir2(),
+      encoding: "utf8",
+      timeout,
+      killSignal: "SIGKILL",
+      maxBuffer: 1024 * 1024,
+      windowsHide: true,
+      windowsVerbatimArguments: invocation.windowsVerbatimArguments
+    }, (error51, stdout, stderr) => {
+      if (error51)
+        reject(new Error(error51.killed ? "Harness command timed out" : "Harness command failed; check the native installation and retry"));
+      else
+        resolve((stdout || stderr).trim());
+    });
+    child.stdin?.end();
+  });
+}
+function installationVersion(value) {
+  if (typeof value !== "string" || !/^v?\d+(?:\.\d+){1,3}(?:-[\w.-]+)?(?:\+[\w.-]+)?$/.test(value.trim()))
+    throw new Error("Harness returned an invalid version");
+  return value.trim().replace(/^v/, "");
+}
+function versionFromOutput(output) {
+  return installationVersion(output.match(/\b\d+(?:\.\d+){1,3}(?:-[\w.-]+)?(?:\+[\w.-]+)?\b/)?.[0]);
+}
+function newerInstallationVersion(current, latest) {
+  const a = installationVersion(current).replace(/\+.*/, "");
+  const b = installationVersion(latest).replace(/\+.*/, "");
+  const coreA = a.replace(/-.*/, "").split(".").map(BigInt);
+  const coreB = b.replace(/-.*/, "").split(".").map(BigInt);
+  for (let i = 0; i < Math.max(coreA.length, coreB.length); i++) {
+    if ((coreA[i] ?? 0n) !== (coreB[i] ?? 0n))
+      return (coreB[i] ?? 0n) > (coreA[i] ?? 0n);
+  }
+  const preA = a.includes("-") ? a.slice(a.indexOf("-") + 1).split(".") : [];
+  const preB = b.includes("-") ? b.slice(b.indexOf("-") + 1).split(".") : [];
+  if (!preA.length || !preB.length)
+    return !!preA.length && !preB.length;
+  for (let i = 0; i < Math.max(preA.length, preB.length); i++) {
+    const x = preA[i];
+    const y = preB[i];
+    if (x === y)
+      continue;
+    if (x === void 0 || y === void 0)
+      return x === void 0;
+    const numericX = /^\d+$/.test(x);
+    const numericY = /^\d+$/.test(y);
+    if (numericX && numericY) {
+      if (BigInt(x) === BigInt(y))
+        continue;
+      return BigInt(y) > BigInt(x);
+    }
+    if (numericX !== numericY)
+      return numericX;
+    return y > x;
+  }
+  return false;
+}
+async function fetchInstallationText(url2) {
+  const request = async () => {
+    const response = await fetch(url2, { signal: AbortSignal.timeout(15e3) });
+    if (!response.ok)
+      throw new Error("Could not check the latest Harness version");
+    return response.text();
+  };
+  try {
+    return await request();
+  } catch (error51) {
+    if (error51 instanceof DOMException && (error51.name === "AbortError" || error51.name === "TimeoutError"))
+      throw error51;
+    return request();
+  }
+}
+
 // ../codebuddy/dist/command.js
 var codeBuddyDiscoverySpec = {
   id: "codebuddy",
@@ -23607,7 +23782,7 @@ var CodeBuddyAcpClient = class {
           return { outcome: "cancelled" };
         return options.handlers.question(params);
       }
-    }), ndJsonStream2(Writable.toWeb(this.#child.stdin), Readable2.toWeb(this.#copyCleanup?.protocolOutput(this.#child.stdout) ?? this.#child.stdout)));
+    }), ndJsonStream2(Writable.toWeb(this.#child.stdin), Readable2.toWeb(this.#copyCleanup?.protocolOutput(this.#child.stdout) ?? (invocation.arguments.includes("--serve") ? codeBuddyAcpOutput(this.#child.stdout) : this.#child.stdout))));
     void this.#connection.closed.then(() => {
       this.#fault(new CodeBuddyError("processExited", "ACP connection closed"));
     }).catch((error51) => {
@@ -23700,7 +23875,7 @@ var CodeBuddyAcpClient = class {
     }
     const pid = this.#child.pid;
     if (pid && process.platform === "win32") {
-      await new Promise((resolve) => execFile2("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => resolve()));
+      await new Promise((resolve) => execFile3("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => resolve()));
     } else if (pid) {
       try {
         process.kill(-pid, "SIGKILL");
@@ -23713,7 +23888,7 @@ var CodeBuddyAcpClient = class {
 
 // ../codebuddy/dist/derivation.js
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { execFile as execFile3, spawn as spawn2 } from "node:child_process";
+import { execFile as execFile4, spawn as spawn2 } from "node:child_process";
 import { lstat as lstat3, mkdir, readFile as readFile3, realpath as realpath4, unlink, writeFile } from "node:fs/promises";
 import path8 from "node:path";
 import { isDeepStrictEqual as isDeepStrictEqual3 } from "node:util";
@@ -23963,7 +24138,7 @@ async function copyCodeBuddySession(cwd, sourceId, targetId, environment, signal
         child.stderr.destroy();
       } else if (process.platform === "win32" && child.pid) {
         termination = new Promise((done) => {
-          execFile3("taskkill", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => {
+          execFile4("taskkill", ["/PID", String(child.pid), "/T", "/F"], { windowsHide: true, timeout: 3e3 }, () => {
             child.kill();
             done();
           });
@@ -25634,6 +25809,8 @@ var CodeBuddySession = class {
   async #execute(command, nativeCommand = false) {
     if (this.#closed || this.#fault)
       return failure("invalidState", "Session is closed or faulted", this.profile);
+    if (command.type === "turn.steer")
+      return unsupportedSteer(this.profile.displayName);
     if (command.type === "interaction.respond")
       return this.#interactions.respond(command);
     if (command.type === "turn.cancel") {
@@ -25992,8 +26169,9 @@ var CodeBuddyAdapter = class {
 };
 
 // dist/command.js
-import { lstatSync } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+import { lstatSync, statSync } from "node:fs";
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { homedir as homedir3 } from "node:os";
 
 // dist/delegation.js
 var DELEGATION_ENVIRONMENT_KEYS = [
@@ -26068,8 +26246,57 @@ var WORKBUDDY_CREDENTIAL_PRELOAD = String.raw`
     socketPath = path.join(directory, "c");
   }
   const cleanup = () => {
+    clearTimeout(readyTimer);
+    readyServer && readyServer.close();
+    for (const connection of readyConnections) connection.destroy();
     if (directory) try { fs.rmSync(directory, {recursive:true,force:true}); } catch {}
   };
+  const needsReady = process.argv.includes("--serve");
+  let credentialReady = false;
+  let runtimeReady = !needsReady;
+  let readyTimer;
+  let readyServer;
+  const readyConnections = new Set();
+  const cleanupWhenReady = () => {
+    if (!credentialReady || !runtimeReady) return;
+    cleanup();
+    process.removeListener("exit", cleanup);
+  };
+  if (needsReady) {
+    readyServer = net.createServer(connection => {
+      readyConnections.add(connection);
+      connection.once("close", () => readyConnections.delete(connection));
+      connection.on("error", () => connection.destroy());
+      let input = "";
+      connection.on("data", chunk => {
+        input += chunk;
+        if (input.length > 4096) return connection.destroy();
+        if (!input.includes("\n")) return;
+        try {
+          const request = JSON.parse(input.slice(0, input.indexOf("\n")));
+          const params = request.params;
+          if (request.jsonrpc !== "2.0" || request.method !== "session.ready" ||
+              typeof request.id !== "string" || params?.protocolVersion !== 1 ||
+              params.token !== token || params.sessionId !== sessionId || params.pid !== process.pid ||
+              !Number.isInteger(params.port) || params.port < 1 || params.port > 65535) {
+            connection.destroy();
+            return;
+          }
+          runtimeReady = true;
+          connection.end(JSON.stringify({jsonrpc:"2.0",id:request.id,result:{ok:true}}) + "\n", cleanupWhenReady);
+        } catch { connection.destroy(); }
+      });
+    });
+    readyServer.once("error", () => {
+      process.stderr.write("WorkBuddy runtime readiness listener failed\n");
+      process.exit(1);
+    });
+    readyServer.listen(socketPath + "-ready");
+    readyTimer = setTimeout(() => {
+      process.stderr.write("WorkBuddy runtime readiness timed out\n");
+      process.exit(1);
+    }, 15000);
+  }
   process.once("exit", cleanup);
   Object.assign(env, {
     WORKBUDDY_AT_REST_ENCRYPTION: "fields",
@@ -26092,8 +26319,8 @@ var WORKBUDDY_CREDENTIAL_PRELOAD = String.raw`
     clearTimeout(timer);
     socket && socket.destroy();
     message = "";
-    cleanup();
-    process.removeListener("exit", cleanup);
+    credentialReady = success;
+    if (success) cleanupWhenReady();
     if (!success) {
       process.stderr.write("WorkBuddy credential bootstrap failed\n");
       process.exit(1);
@@ -26232,7 +26459,7 @@ function bundledProductConfigPath(environment, platform, dependencies) {
 function workBuddyEnvironment(environment, platform = process.platform) {
   const paths = targetPath(platform);
   const configuredRoot = environment.WORKBUDDY_CONFIG_DIR;
-  const root = paths.resolve(configuredRoot?.trim() ? configuredRoot : paths.join(environment.HOME || environment.USERPROFILE || homedir2(), ".workbuddy-ai"));
+  const root = paths.resolve(configuredRoot?.trim() ? configuredRoot : paths.join(environment.HOME || environment.USERPROFILE || homedir3(), ".workbuddy-ai"));
   return {
     ...environment,
     // The bundled core reads CODEBUDDY_CONFIG_DIR. Force both names to one
@@ -26242,9 +26469,7 @@ function workBuddyEnvironment(environment, platform = process.platform) {
     DISABLE_AUTOUPDATER: environment.DISABLE_AUTOUPDATER ?? "1"
   };
 }
-function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {}, argumentsOverride) {
-  const dependencies = Array.isArray(dependenciesOrArguments) ? {} : dependenciesOrArguments;
-  const nativeArguments = Array.isArray(dependenciesOrArguments) ? dependenciesOrArguments : argumentsOverride;
+function resolveWorkBuddyLaunch(environment, dependencies = {}) {
   const platform = dependencies.platform ?? process.platform;
   const configured = environmentValue(environment, "CODEXHOST_WORKBUDDY_COMMAND")?.trim() || void 0;
   if (!configured && platform !== "darwin" && platform !== "win32")
@@ -26257,6 +26482,29 @@ function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {
   const executable = configured && !explicitDesktop && !configuredDirectory ? explicitExecutable : bundle?.executable;
   if (!executable)
     throw new CodeBuddyError("notInstalled", "WorkBuddy AI app or its bundled CLI is unavailable");
+  return { executable, bundle };
+}
+function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {}, argumentsOverride) {
+  const dependencies = Array.isArray(dependenciesOrArguments) ? {} : dependenciesOrArguments;
+  const nativeArguments = Array.isArray(dependenciesOrArguments) ? dependenciesOrArguments : argumentsOverride;
+  const platform = dependencies.platform ?? process.platform;
+  const { executable, bundle } = resolveWorkBuddyLaunch(environment, dependencies);
+  const paths = targetPath(platform);
+  const cliDist = bundle && paths.join(paths.dirname(paths.dirname(bundle.cli)), "dist");
+  const isFile = dependencies.isFile ?? ((candidate) => {
+    try {
+      return statSync(candidate).isFile();
+    } catch {
+      return false;
+    }
+  });
+  const liteOnly = Boolean(cliDist && isFile(paths.join(cliDist, "codebuddy-lite-wb.mjs")) && !isFile(paths.join(cliDist, "codebuddy.js")) && !isFile(paths.join(cliDist, "codebuddy-headless.js")));
+  const acpArguments = nativeArguments ?? [
+    "--acp",
+    ...ephemeral ? ["--no-session-persistence"] : [],
+    ...workBuddyDelegationArguments(environment, ephemeral)
+  ];
+  const serve = liteOnly && acpArguments.includes("--acp") && !acpArguments.includes("--serve");
   const configuredEnvironment = withNodeRuntimeOnPath(workBuddyEnvironment(environment, platform), process.execPath, platform);
   const productConfigPath = bundle ? bundledProductConfigPath(configuredEnvironment, platform, dependencies) : void 0;
   const childEnvironment = bundle ? {
@@ -26265,17 +26513,20 @@ function workBuddyInvocation(environment, ephemeral, dependenciesOrArguments = {
     // waits for its telemetry channel before copying; normal ACP keeps its policy.
     ...nativeArguments?.includes("--print") && nativeArguments.includes("--fork-session") && configuredEnvironment.DISABLE_TELEMETRY === void 0 ? { DISABLE_TELEMETRY: "1" } : {},
     ...productConfigPath ? { [WORKBUDDY_PRODUCT_CONFIG_PATH_ENV]: productConfigPath } : {},
+    ...liteOnly ? { CODEBUDDY_FORCE_LITE_WB_BUNDLE: "1" } : {},
+    ...serve ? {
+      CODEBUDDY_GATEWAY_AUTH: "password",
+      CODEBUDDY_GATEWAY_PASSWORD: randomBytes2(32).toString("base64url"),
+      CODEBUDDY_GATEWAY_BASE_PATH: ""
+    } : {},
     ELECTRON_RUN_AS_NODE: "1"
   } : configuredEnvironment;
   return {
     ...commandInvocation(executable, [
       ...bundle ? ["--eval", `${WORKBUDDY_CREDENTIAL_PRELOAD}
 require(process.argv[1]);`, bundle.cli] : [],
-      ...nativeArguments ?? [
-        "--acp",
-        ...ephemeral ? ["--no-session-persistence"] : [],
-        ...workBuddyDelegationArguments(childEnvironment, ephemeral)
-      ]
+      ...acpArguments,
+      ...serve ? ["--serve", "--host", "127.0.0.1", "--port", "0", "--auth", "password"] : []
     ], childEnvironment, platform),
     environment: childEnvironment
   };
@@ -26480,10 +26731,90 @@ var WorkBuddyAdapter = class extends CodeBuddyAdapter {
   }
 };
 
+// dist/installation.js
+import { readFile as readFile6, stat as stat5 } from "node:fs/promises";
+var applicationNotice = {
+  en: "These are WorkBuddy desktop app versions. Its bundled CLI updates with the app. Download the official installer, complete installation, then reopen Connections to verify the version. Existing sessions keep their running CLI.",
+  "zh-CN": "此处显示 WorkBuddy 桌面应用版本，内置 CLI 随应用更新。请下载官方安装包并完成安装，再重新打开连接页确认版本。已有会话继续使用运行中的 CLI。"
+};
+function appVersion(value) {
+  const version2 = installationVersion(value);
+  return version2.replace(/^(\d+\.\d+\.\d+)\.\d+$/u, "$1");
+}
+async function readProduct(file2) {
+  const metadata = await stat5(file2);
+  if (!metadata.isFile() || metadata.size <= 0 || metadata.size > 8 * 1024 * 1024)
+    throw new Error("WorkBuddy product metadata is unavailable");
+  return JSON.parse(await readFile6(file2, "utf8"));
+}
+function createWorkBuddyInstallation(environment, dependencies = {}) {
+  const platform = dependencies.platform ?? process.platform;
+  const arch = dependencies.arch ?? process.arch;
+  return async (action) => {
+    if (action === "update")
+      throw new Error("Complete the update with WorkBuddy's official desktop installer");
+    const { executable, bundle } = resolveWorkBuddyLaunch(environment, { platform });
+    if (!bundle)
+      return {
+        currentVersion: versionFromOutput(await runInstallationCommand(executable, ["--version"], environment)),
+        latestVersion: "Unknown",
+        latestVersionKind: "unknown",
+        updateAvailable: false,
+        canUpdate: false,
+        notice: {
+          en: "This is a custom CLI. Use its original installer to update; WorkBuddy desktop releases do not identify this CLI's latest version.",
+          "zh-CN": "当前使用自定义 CLI，请通过原安装方式更新；WorkBuddy 桌面应用版本不代表此 CLI 的最新版本。"
+        }
+      };
+    const paths = targetPath(platform);
+    const product = await (dependencies.readProduct ?? readProduct)(paths.join(paths.dirname(paths.dirname(bundle.cli)), "product.json"));
+    const currentVersion = appVersion(product.genieVersion);
+    const unknown2 = {
+      currentVersion,
+      versionKind: "application",
+      latestVersion: "Unknown",
+      latestVersionKind: "unknown",
+      updateAvailable: false,
+      canUpdate: false,
+      notice: {
+        en: "The installed WorkBuddy desktop app version is shown. Check and install updates in WorkBuddy itself; this installation's update channel could not be checked here.",
+        "zh-CN": "此处显示已安装的 WorkBuddy 桌面应用版本。当前无法查询此安装的更新渠道，请在 WorkBuddy 应用内检查并安装更新。"
+      }
+    };
+    const root = product.applicationName === "workbuddy-ai" && product.updateUrl === "https://www.workbuddy.ai" ? "https://www.workbuddy.ai" : product.applicationName === "workbuddy" && product.updateUrl === "https://www.workbuddy.cn" ? "https://www.workbuddy.cn" : void 0;
+    const target = platform === "darwin" && (arch === "arm64" || arch === "x64") ? `darwin-${arch}` : platform === "win32" && arch === "x64" ? "win32-x64-user" : void 0;
+    if (!root || !target || environment.WORKBUDDY_UPDATE_URL?.trim() && environment.WORKBUDDY_UPDATE_URL.trim() !== root)
+      return unknown2;
+    try {
+      const feed = JSON.parse(await (dependencies.fetchText ?? fetchInstallationText)(`${root}/v2/update?platform=workbuddy-${target}`));
+      const feedVersion = installationVersion(feed.version);
+      const latestVersion = appVersion(feedVersion);
+      const download = new URL(typeof feed.url === "string" ? feed.url : "");
+      const downloadHost = root.endsWith(".ai") ? "download.codebuddy.ai" : "download.codebuddy.cn";
+      if (download.origin !== `https://${downloadHost}` || download.username || download.password || download.search || download.hash || !download.pathname.startsWith(`/workbuddy/saas/${target}/WorkBuddy-${target}-${feedVersion}-`) || !download.pathname.endsWith(platform === "darwin" ? ".zip" : ".exe"))
+        throw new Error("WorkBuddy update feed returned an invalid installer URL");
+      if (platform === "darwin")
+        download.pathname = download.pathname.replace(/\.zip$/u, ".dmg");
+      const updateAvailable = newerInstallationVersion(currentVersion, latestVersion);
+      return {
+        currentVersion,
+        versionKind: "application",
+        latestVersion,
+        updateAvailable,
+        canUpdate: false,
+        ...updateAvailable ? { manualUpdateUrl: download.href } : {},
+        notice: applicationNotice
+      };
+    } catch {
+      return unknown2;
+    }
+  };
+}
+
 // dist/plugin.js
 function createHarnessAdapter(context) {
   if (context.platform === "darwin" && context.managedRemoteHost) {
-    const environment = {
+    const environment2 = {
       ...context.environment,
       ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
     };
@@ -26495,7 +26826,7 @@ function createHarnessAdapter(context) {
       environment: { ...context.environment },
       isInstalled: () => {
         try {
-          workBuddyInvocation(environment, true);
+          workBuddyInvocation(environment2, true);
           return true;
         } catch (error51) {
           return !(error51 instanceof CodeBuddyError && error51.code === "notInstalled");
@@ -26504,11 +26835,12 @@ function createHarnessAdapter(context) {
       ...context.brokerDescriptorPath ? { descriptorPath: context.brokerDescriptorPath } : {}
     });
   }
-  return new WorkBuddyAdapter({
-    environment: {
-      ...context.environment,
-      ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
-    }
+  const environment = {
+    ...context.environment,
+    ...context.launchCommand ? { CODEXHOST_WORKBUDDY_COMMAND: context.launchCommand } : {}
+  };
+  return Object.assign(new WorkBuddyAdapter({ environment }), {
+    installation: createWorkBuddyInstallation(environment)
   });
 }
 export {