@crewx/app 0.1.0-rc.6 → 0.1.0-rc.61

package/dist/src/engine.js

@@ -1,1200 +1,7 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.executeAppCommand = executeAppCommand;
-const node_crypto_1 = require("node:crypto");
-const node_child_process_1 = require("node:child_process");
-const fs = __importStar(require("node:fs"));
-const http = __importStar(require("node:http"));
-const https = __importStar(require("node:https"));
-const path = __importStar(require("node:path"));
-const node_url_1 = require("node:url");
-const crewx_api_credential_1 = require("@crewx/shared/crewx-api-credential");
-const REQUEST_TIMEOUT_MS = 15000;
-const DEV_ACTION_TIMEOUT_MS = 60000;
-const MAX_BUILD_OUTPUT_BYTES = 64 * 1024;
-const APP_ID_PREFIX = 'uic_';
-const APP_DEV_API_PREFIX = '/api/v1';
-const APP_DEV_CAPABILITIES_PATH = '/api/v1/app-dev/capabilities';
-const APP_DEV_SESSIONS_PATH = '/api/v1/app-dev/sessions';
-const APP_DEV_TOO_OLD_EXIT = 12;
-const APP_DEV_CHECK_FAILED_EXIT = 13;
-const REQUEST_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/;
-const LOOPBACK_HOSTS = new Set(['127.0.0.1', '[::1]', 'localhost']);
-const DEFAULT_APP_DEV_ENDPOINT = 'http://localhost:8150';
-const BLOCKED_ROUTE_MESSAGE = 'Do not work around this by clicking the screen or using another browser. Report that you could not use the App route.';
-const UNAUTHORIZED_MESSAGE = 'Do not retry. Report the failure.';
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function failure(exitCode, code, status, message) {
-    let stderr = message;
-    if (!stderr && (exitCode === 3 || exitCode === 9 || exitCode === 10 || exitCode === 11)) {
-        stderr = BLOCKED_ROUTE_MESSAGE;
-    }
-    else if (!stderr && exitCode === 4) {
-        stderr = UNAUTHORIZED_MESSAGE;
-    }
-    return {
-        exitCode,
-        payload: { ok: false, exit: exitCode, error: { code, status } },
-        ...(stderr ? { stderr } : {}),
-    };
-}
-function success(payload) {
-    return { exitCode: 0, payload };
-}
-function usageFailure() {
-    return failure(2, 'USAGE', null);
-}
-function parseCommand(args) {
-    const command = args[0];
-    if (command !== 'list' && command !== 'open' && command !== 'state' && command !== 'run' && command !== 'receipt') {
-        return null;
-    }
-    const positional = [];
-    const options = new Map();
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (!arg.startsWith('--')) {
-            positional.push(arg);
-            continue;
-        }
-        const separator = arg.indexOf('=');
-        const key = separator >= 0 ? arg.slice(2, separator) : arg.slice(2);
-        const inlineValue = separator >= 0 ? arg.slice(separator + 1) : undefined;
-        if ((key !== 'input' && key !== 'request-id') || options.has(key))
-            return null;
-        const value = inlineValue ?? args[index + 1];
-        if (value === undefined)
-            return null;
-        if (inlineValue === undefined)
-            index += 1;
-        options.set(key, value);
-    }
-    if ((command === 'list' && positional.length !== 0)
-        || (command === 'open' && positional.length !== 1)
-        || (command === 'state' && (positional.length !== 1 || !positional[0].startsWith(APP_ID_PREFIX)))
-        || (command === 'run' && positional.length !== 2)
-        || (command === 'receipt' && positional.length !== 1)) {
-        return null;
-    }
-    if (command !== 'run' && (options.has('input') || options.has('request-id')))
-        return null;
-    let input = {};
-    if (options.has('input')) {
-        const raw = options.get('input');
-        try {
-            const parsed = JSON.parse(raw === '-' ? fs.readFileSync(0, 'utf8') : raw);
-            if (!isRecord(parsed))
-                return null;
-            input = parsed;
-        }
-        catch {
-            return null;
-        }
-    }
-    const requestId = options.get('request-id');
-    if (requestId !== undefined && !REQUEST_ID_PATTERN.test(requestId))
-        return null;
-    return {
-        command,
-        positional,
-        input,
-        ...(requestId !== undefined ? { requestId } : {}),
-    };
-}
-function getEndpoint(raw) {
-    if (!raw)
-        return null;
-    let endpoint;
-    try {
-        endpoint = new node_url_1.URL(raw);
-    }
-    catch {
-        return null;
-    }
-    if (!LOOPBACK_HOSTS.has(endpoint.hostname)
-        || (endpoint.protocol !== 'http:' && endpoint.protocol !== 'https:')
-        || endpoint.username !== ''
-        || endpoint.password !== ''
-        || endpoint.search !== ''
-        || endpoint.hash !== ''
-        || (endpoint.pathname !== '' && endpoint.pathname !== '/')) {
-        return null;
-    }
-    return endpoint;
-}
-function segment(value) {
-    return encodeURIComponent(value);
-}
-function basePath(workspaceSlug, threadId) {
-    return [
-        'api', 'v1', 'ws', segment(workspaceSlug), 'threads', segment(threadId),
-    ].join('/');
-}
-function pathFor(context, ...segments) {
-    return `/${context.basePath}/${segments.map(segment).join('/')}`;
-}
-function responseErrorCode(data, fallback) {
-    if (!isRecord(data) || !isRecord(data['error']))
-        return fallback;
-    const code = data['error']['code'];
-    return typeof code === 'string' && code.length > 0 ? code : fallback;
-}
-function classifyHttpFailure(response) {
-    const { status, data } = response;
-    if (status >= 300 && status < 400)
-        return failure(9, 'ENDPOINT_REJECTED', status);
-    if (status === 401)
-        return failure(4, responseErrorCode(data, 'UNAUTHORIZED'), status);
-    if (status === 403)
-        return failure(5, responseErrorCode(data, 'FORBIDDEN'), status);
-    if (status === 404)
-        return failure(6, responseErrorCode(data, 'NOT_FOUND'), status);
-    if (status === 409) {
-        const code = responseErrorCode(data, 'CONFLICT');
-        if (code === 'APPROVAL_ALREADY_PENDING') {
-            const error = isRecord(data) && isRecord(data['error']) ? data['error'] : undefined;
-            const details = error && isRecord(error['details']) ? error['details'] : undefined;
-            const receiptId = error?.['receiptId'] ?? details?.['receiptId']
-                ?? (isRecord(data) ? data['receiptId'] : undefined);
-            return {
-                exitCode: 8,
-                payload: {
-                    ok: false,
-                    exit: 8,
-                    error: { code, status },
-                    ...(typeof receiptId === 'string' ? { receiptId } : {}),
-                },
-            };
-        }
-        return failure(7, code, status);
-    }
-    return failure(1, responseErrorCode(data, 'ERROR'), status);
-}
-function networkFailure(error) {
-    const errorCode = isRecord(error) && typeof error['code'] === 'string'
-        ? error['code']
-        : '';
-    const codexBlocked = process.env['CODEX_SANDBOX_NETWORK_DISABLED'] === '1';
-    const errnoBlocked = !codexBlocked && (errorCode === 'EPERM' || errorCode === 'EACCES');
-    return codexBlocked || errnoBlocked
-        ? failure(11, 'SANDBOX_BLOCKED', null)
-        : failure(10, 'SERVER_UNREACHABLE', null);
-}
-function requestJson(endpoint, authorizationToken, method, requestPath, body, timeoutMs = REQUEST_TIMEOUT_MS) {
-    const requestFunction = endpoint.protocol === 'https:' ? https.request : http.request;
-    const hostname = endpoint.hostname === '[::1]'
-        ? '::1'
-        : endpoint.hostname;
-    const port = endpoint.port ? Number(endpoint.port) : undefined;
-    const bodyText = body === undefined ? undefined : JSON.stringify(body);
-    const request = requestFunction({
-        protocol: endpoint.protocol,
-        hostname,
-        ...(port !== undefined ? { port } : {}),
-        method,
-        path: requestPath,
-        headers: {
-            Authorization: `Bearer ${authorizationToken}`,
-            Accept: 'application/json',
-            ...(bodyText !== undefined ? { 'Content-Type': 'application/json' } : {}),
-        },
-    }, (response) => {
-        const status = response.statusCode ?? 0;
-        if (status >= 300 && status < 400) {
-            response.destroy();
-            clearTimeout(timeout);
-            resolveResponse({ status, data: undefined, invalidJson: false, rawText: '' });
-            return;
-        }
-        const chunks = [];
-        response.setEncoding('utf8');
-        response.on('data', (chunk) => chunks.push(chunk));
-        response.once('error', (error) => failResponse(error));
-        response.once('end', () => {
-            clearTimeout(timeout);
-            const raw = chunks.join('');
-            try {
-                resolveResponse({ status, data: JSON.parse(raw), invalidJson: false, rawText: raw });
-            }
-            catch {
-                resolveResponse({ status, data: undefined, invalidJson: true, rawText: raw });
-            }
-        });
-    });
-    let socketError;
-    let resolveResponse;
-    let failResponse;
-    const result = new Promise((resolve, reject) => {
-        resolveResponse = resolve;
-        failResponse = reject;
-    });
-    const timeout = setTimeout(() => {
-        const error = new Error('Request timed out');
-        error.code = 'ETIMEDOUT';
-        request.destroy(error);
-    }, timeoutMs);
-    request.on('socket', (socket) => {
-        socket.once('error', (error) => {
-            socketError = error;
-        });
-    });
-    request.once('error', (error) => {
-        clearTimeout(timeout);
-        failResponse(socketError ?? error);
-    });
-    if (bodyText !== undefined)
-        request.write(bodyText);
-    request.end();
-    return result;
-}
-async function performRequest(context, method, requestPath, body) {
-    try {
-        const response = await requestJson(context.endpoint, context.ticket, method, requestPath, body);
-        if (response.status < 200 || response.status >= 300) {
-            return { ok: false, outcome: classifyHttpFailure(response) };
-        }
-        if (response.invalidJson || !isRecord(response.data) || response.data['success'] !== true) {
-            return {
-                ok: false,
-                outcome: failure(1, responseErrorCode(response.data, 'ERROR'), response.status),
-            };
-        }
-        const data = response.data['data'];
-        if (!isRecord(data)) {
-            return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-        }
-        return { ok: true, value: data, status: response.status };
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-function appDevTooOld(status) {
-    return failure(APP_DEV_TOO_OLD_EXIT, 'SERVER_TOO_OLD', status, 'The running CrewX does not support App dev mode.');
-}
-function appDevCredentialFailure(error) {
-    if (error instanceof crewx_api_credential_1.CrewxCredentialError) {
-        return failure(error.exitCode, error.code, null, error.message);
-    }
-    return failure(1, 'ERROR', null);
-}
-function appDevEndpoint() {
-    const raw = process.env['CREWX_ENDPOINT']?.trim() || DEFAULT_APP_DEV_ENDPOINT;
-    return getEndpoint(raw);
-}
-function isDirectory(directory) {
-    try {
-        return fs.statSync(directory).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}
-function isFile(filePath) {
-    try {
-        return fs.statSync(filePath).isFile();
-    }
-    catch {
-        return false;
-    }
-}
-function resolveWorkspaceRoot(startDirectory = process.cwd()) {
-    let current = path.resolve(startDirectory);
-    while (true) {
-        if (isDirectory(path.join(current, 'apps')) || isFile(path.join(current, 'crewx.yaml'))) {
-            try {
-                return fs.realpathSync(current);
-            }
-            catch {
-                return undefined;
-            }
-        }
-        const parent = path.dirname(current);
-        if (parent === current)
-            return undefined;
-        current = parent;
-    }
-}
-function readAppManifest(directory) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(path.join(directory, 'ui-plugin.json'), 'utf8'));
-        return isRecord(parsed) ? parsed : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function isPathInside(parentDirectory, candidate) {
-    const relative = path.relative(parentDirectory, candidate);
-    return relative !== '' && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-}
-function resolveWorkspaceApp(workspacePath, appSelector) {
-    if (!appSelector || appSelector === '.' || appSelector === '..' || /[\\/]/.test(appSelector)) {
-        return failure(2, 'USAGE', null, 'App must be a folder name or pluginId.');
-    }
-    const appsDirectory = path.join(workspacePath, 'apps');
-    const directDirectory = path.join(appsDirectory, appSelector);
-    let appDirectory = isDirectory(directDirectory) ? directDirectory : undefined;
-    if (!appDirectory && isDirectory(appsDirectory)) {
-        try {
-            for (const item of fs.readdirSync(appsDirectory, { withFileTypes: true })) {
-                if (!item.isDirectory())
-                    continue;
-                const candidate = path.join(appsDirectory, item.name);
-                const manifest = readAppManifest(candidate);
-                if (manifest?.['pluginId'] === appSelector) {
-                    appDirectory = candidate;
-                    break;
-                }
-            }
-        }
-        catch {
-        }
-    }
-    let appId = appSelector;
-    if (appDirectory) {
-        try {
-            appDirectory = fs.realpathSync(appDirectory);
-        }
-        catch {
-            return failure(6, 'APP_INVALID', null);
-        }
-        if (!isPathInside(fs.realpathSync(appsDirectory), appDirectory)) {
-            return failure(2, 'USAGE', null, 'App folder must be inside the workspace apps directory.');
-        }
-        const manifest = readAppManifest(appDirectory);
-        if (typeof manifest?.['pluginId'] === 'string' && manifest['pluginId'].length > 0) {
-            appId = manifest['pluginId'];
-        }
-    }
-    else {
-        appDirectory = directDirectory;
-    }
-    return { appId, appDirectory };
-}
-function successEnvelope(response) {
-    if (response.status < 200 || response.status >= 300) {
-        return { ok: false, outcome: classifyHttpFailure(response) };
-    }
-    if (response.invalidJson || !isRecord(response.data) || response.data['success'] !== true
-        || !isRecord(response.data['data'])) {
-        return { ok: false, outcome: failure(1, responseErrorCode(response.data, 'ERROR'), response.status) };
-    }
-    return {
-        ok: true,
-        value: response.data,
-        status: response.status,
-        rawText: response.rawText,
-    };
-}
-async function checkAppDevCapabilities(endpoint, token) {
-    try {
-        const response = await requestJson(endpoint, token, 'GET', APP_DEV_CAPABILITIES_PATH);
-        if (response.status === 404 || (response.status >= 300 && response.status < 400)
-            || response.invalidJson) {
-            return { ok: false, outcome: appDevTooOld(response.status) };
-        }
-        if (response.status < 200 || response.status >= 300) {
-            return { ok: false, outcome: classifyHttpFailure(response) };
-        }
-        if (!isRecord(response.data) || response.data['success'] !== true
-            || !isRecord(response.data['data']) || response.data['data']['appDev'] !== 1) {
-            return { ok: false, outcome: appDevTooOld(response.status) };
-        }
-        return {
-            ok: true,
-            value: response.data,
-            status: response.status,
-            rawText: response.rawText,
-        };
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-async function prepareAppDevContext(appSelector) {
-    const endpoint = appDevEndpoint();
-    if (!endpoint)
-        return { ok: false, outcome: failure(9, 'ENDPOINT_REJECTED', null) };
-    let token;
-    try {
-        token = (0, crewx_api_credential_1.resolveCrewxApiCredential)('app-dev').token;
-    }
-    catch (error) {
-        return { ok: false, outcome: appDevCredentialFailure(error) };
-    }
-    const capabilities = await checkAppDevCapabilities(endpoint, token);
-    if (!capabilities.ok)
-        return { ok: false, outcome: capabilities.outcome };
-    const workspacePath = resolveWorkspaceRoot();
-    if (!workspacePath) {
-        return {
-            ok: false,
-            outcome: failure(2, 'WORKSPACE_NOT_FOUND', null, 'No workspace root with apps/ or crewx.yaml was found.'),
-        };
-    }
-    const app = resolveWorkspaceApp(workspacePath, appSelector);
-    if ('exitCode' in app)
-        return { ok: false, outcome: app };
-    let response;
-    try {
-        response = await requestJson(endpoint, token, 'POST', APP_DEV_SESSIONS_PATH, {
-            workspacePath,
-            appId: app.appId,
-        });
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-    const opened = successEnvelope(response);
-    if (!opened.ok)
-        return { ok: false, outcome: opened.outcome };
-    const data = opened.value['data'];
-    if (!isRecord(data)
-        || typeof data['workspaceSlug'] !== 'string'
-        || typeof data['appId'] !== 'string'
-        || typeof data['devPath'] !== 'string'
-        || !data['devPath'].startsWith('/ws/')) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    if (!isDirectory(app.appDirectory)) {
-        return { ok: false, outcome: failure(6, 'APP_INVALID', response.status) };
-    }
-    return {
-        ok: true,
-        context: {
-            endpoint,
-            token,
-            workspacePath,
-            appId: data['appId'],
-            appDirectory: app.appDirectory,
-            devPath: data['devPath'],
-        },
-    };
-}
-function appDevPath(context, ...segments) {
-    return `${APP_DEV_API_PREFIX}${context.devPath}${segments.length > 0 ? `/${segments.map(segment).join('/')}` : ''}`;
-}
-async function performAppDevRequest(context, method, requestPath, body, timeoutMs = REQUEST_TIMEOUT_MS) {
-    try {
-        const response = await requestJson(context.endpoint, context.token, method, requestPath, body, timeoutMs);
-        return successEnvelope(response);
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-function appIdFrom(value) {
-    const direct = value['appId'] ?? value['id'];
-    if (typeof direct === 'string' && direct.length > 0)
-        return direct;
-    const definition = value['definition'];
-    if (isRecord(definition) && typeof definition['id'] === 'string')
-        return definition['id'];
-    return undefined;
-}
-function hashFrom(value) {
-    const direct = value['definitionHash'];
-    if (typeof direct === 'string' && direct.length > 0)
-        return direct;
-    const definition = value['definition'];
-    if (isRecord(definition) && typeof definition['hash'] === 'string') {
-        return definition['hash'];
-    }
-    return undefined;
-}
-function projectLauncher(value) {
-    if (!isRecord(value))
-        return undefined;
-    const appId = appIdFrom(value);
-    const definitionHash = hashFrom(value);
-    if (!appId || !definitionHash)
-        return undefined;
-    const actions = value['agentActions'];
-    return {
-        appId,
-        name: typeof value['name'] === 'string' ? value['name'] : '',
-        description: typeof value['description'] === 'string' ? value['description'] : '',
-        definitionHash,
-        agentActions: Array.isArray(actions) ? actions : [],
-    };
-}
-async function loadLaunchers(context) {
-    const response = await performRequest(context, 'GET', pathFor(context, 'ui-instances', 'apps'));
-    if (!response.ok)
-        return response;
-    const apps = response.value['apps'];
-    if (!Array.isArray(apps)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const projected = apps.map(projectLauncher);
-    if (projected.some((item) => item === undefined)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    return { ok: true, value: projected, status: response.status };
-}
-function findLauncher(apps, appId) {
-    return apps.find((app) => app.appId === appId);
-}
-async function openLauncher(context, launcher) {
-    const response = await performRequest(context, 'POST', pathFor(context, 'ui-instances', 'open'), {
-        appId: launcher.appId,
-        expectedDefinitionHash: launcher.definitionHash,
-    });
-    if (!response.ok)
-        return response;
-    const instance = isRecord(response.value['instance']) ? response.value['instance'] : response.value;
-    if (!isRecord(instance)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const instanceId = instance['instanceId'] ?? instance['id'];
-    const revision = instance['revision'];
-    if (typeof instanceId !== 'string' || typeof revision !== 'number') {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const ai = isRecord(response.value['ai'])
-        ? response.value['ai']
-        : isRecord(instance['ai']) ? instance['ai'] : undefined;
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            appId: launcher.appId,
-            definitionHash: launcher.definitionHash,
-            instanceId,
-            revision,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-        },
-    };
-}
-async function readInstanceState(context, instanceId) {
-    const response = await performRequest(context, 'GET', pathFor(context, 'ui-instances', instanceId));
-    if (!response.ok)
-        return response;
-    const value = response.value;
-    const responseInstanceId = value['instanceId'];
-    const revision = value['revision'];
-    if (typeof responseInstanceId !== 'string' || typeof revision !== 'number') {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const ai = isRecord(value['ai']) ? value['ai'] : undefined;
-    const passthrough = (key) => {
-        if (Object.prototype.hasOwnProperty.call(value, key))
-            return { [key]: value[key] };
-        if (ai && Object.prototype.hasOwnProperty.call(ai, key))
-            return { [key]: ai[key] };
-        return {};
-    };
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            instanceId: responseInstanceId,
-            revision,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-            buttons: ai && Object.prototype.hasOwnProperty.call(ai, 'buttons') ? ai['buttons'] : null,
-            ...passthrough('agentAccess'),
-            ...passthrough('modelContext'),
-            ...passthrough('pendingApproval'),
-        },
-    };
-}
-async function runAction(context, instanceId, actionId, requestId, input) {
-    const response = await performRequest(context, 'POST', pathFor(context, 'ui-instances', instanceId, 'actions'), { actionId, requestId, input });
-    if (!response.ok)
-        return response;
-    const receipt = response.value['receipt'];
-    if (!isRecord(receipt)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const receiptId = receipt['receiptId'] ?? receipt['id'];
-    const approval = response.value['approval'];
-    if (response.status === 202 && isRecord(approval)) {
-        const approvalId = approval['approvalId'];
-        const expiresAt = approval['expiresAt'];
-        const resolvedRequestId = typeof receipt['requestId'] === 'string'
-            ? receipt['requestId']
-            : typeof approval['requestId'] === 'string'
-                ? approval['requestId']
-                : requestId;
-        if (typeof receiptId !== 'string' || typeof approvalId !== 'string'
-            || (typeof expiresAt !== 'string' && typeof expiresAt !== 'number')) {
-            return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-        }
-        return {
-            ok: false,
-            outcome: {
-                exitCode: 8,
-                payload: {
-                    ok: false,
-                    exit: 8,
-                    error: { code: 'APPROVAL_PENDING', status: 202 },
-                    receiptId,
-                    requestId: resolvedRequestId,
-                    approvalId,
-                    expiresAt,
-                },
-            },
-        };
-    }
-    const status = receipt['status'] ?? (response.status === 202 ? 'requested' : 'settled');
-    const resolve = response.value['resolve'];
-    const ai = isRecord(resolve) && isRecord(resolve['ai']) ? resolve['ai'] : undefined;
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            receiptId: typeof receiptId === 'string' ? receiptId : '',
-            requestId: typeof receipt['requestId'] === 'string' ? receipt['requestId'] : requestId,
-            instanceId,
-            actionId: typeof receipt['actionId'] === 'string' ? receipt['actionId'] : actionId,
-            status,
-            outcome: Object.prototype.hasOwnProperty.call(receipt, 'outcome') ? receipt['outcome'] : null,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-        },
-    };
-}
-function contextFromEnvironment() {
-    const ticket = process.env['CREWX_TASK_TICKET'] ?? '';
-    const workspaceSlug = process.env['CREWX_WORKSPACE_SLUG'] ?? '';
-    const threadId = process.env['CREWX_THREAD_ID'] ?? '';
-    if (!ticket.startsWith('crewxtk_') || !workspaceSlug || !threadId) {
-        return failure(3, 'NO_TICKET', null);
-    }
-    const endpoint = getEndpoint(process.env['CREWX_ENDPOINT']);
-    if (!endpoint)
-        return failure(9, 'ENDPOINT_REJECTED', null);
-    return {
-        ticket,
-        workspaceSlug,
-        threadId,
-        endpoint,
-        basePath: basePath(workspaceSlug, threadId),
-    };
-}
-function isAppCommandOutcome(value) {
-    return 'exitCode' in value;
-}
-function parseSingleAppCommand(args, command) {
-    if (args[0] !== command)
-        return null;
-    const positional = [];
-    let flag = false;
-    for (const arg of args.slice(1)) {
-        if (arg === (command === 'dev' ? '--no-open' : '--json')) {
-            if (flag)
-                return null;
-            flag = true;
-        }
-        else if (arg.startsWith('--')) {
-            return null;
-        }
-        else {
-            positional.push(arg);
-        }
-    }
-    if (positional.length !== 1)
-        return null;
-    return { appSelector: positional[0], flag };
-}
-function standardJsonOutput(outcome) {
-    return `${JSON.stringify(outcome.payload)}\n`;
-}
-async function executeAppCheck(args) {
-    const parsed = parseSingleAppCommand(args, 'check');
-    if (!parsed)
-        return usageFailure();
-    const prepared = await prepareAppDevContext(parsed.appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const response = await performAppDevRequest(prepared.context, 'GET', appDevPath(prepared.context, 'check'));
-    if (!response.ok)
-        return response.outcome;
-    const data = response.value['data'];
-    if (!isRecord(data))
-        return failure(1, 'ERROR', response.status);
-    const summary = isRecord(data['summary']) ? data['summary'] : {};
-    const items = Array.isArray(data['items']) ? data['items'] : [];
-    const errors = typeof summary['errors'] === 'number'
-        ? summary['errors']
-        : items.filter((item) => isRecord(item) && item['severity'] === 'error').length;
-    const warnings = typeof summary['warnings'] === 'number'
-        ? summary['warnings']
-        : items.filter((item) => isRecord(item) && item['severity'] === 'warning').length;
-    const exitCode = errors === 0 ? 0 : APP_DEV_CHECK_FAILED_EXIT;
-    if (parsed.flag) {
-        return {
-            exitCode,
-            payload: response.value,
-            stdout: `${response.rawText ?? standardJsonOutput({ exitCode, payload: response.value })}`
-                + (response.rawText?.endsWith('\n') ? '' : '\n'),
-            suppressOutput: true,
-        };
-    }
-    const lines = items.flatMap((item) => {
-        if (!isRecord(item))
-            return [];
-        const severity = item['severity'];
-        const marker = severity === 'error' ? '✕' : severity === 'ok' ? '✓' : '!';
-        const where = typeof item['where'] === 'string' ? item['where'] : '';
-        const code = typeof item['code'] === 'string' ? item['code'] : '';
-        return [`${marker} ${where}  ${code}`];
-    });
-    lines.push(`Summary: ${errors} errors, ${warnings} warnings`);
-    return {
-        exitCode,
-        payload: {},
-        stdout: `${lines.join('\n')}\n`,
-        suppressOutput: true,
-    };
-}
-async function getPairingDevUrl(context) {
-    let pairingToken;
-    try {
-        pairingToken = (0, crewx_api_credential_1.resolveCrewxApiCredential)('pairing').token;
-    }
-    catch (error) {
-        return appDevCredentialFailure(error);
-    }
-    let response;
-    try {
-        response = await requestJson(context.endpoint, pairingToken, 'POST', '/api/v1/auth/local/code');
-    }
-    catch (error) {
-        return networkFailure(error);
-    }
-    if (response.status < 200 || response.status >= 300) {
-        return classifyHttpFailure(response);
-    }
-    if (response.invalidJson || !isRecord(response.data) || typeof response.data['url'] !== 'string') {
-        return failure(1, 'PAIRING_CODE_INVALID', response.status);
-    }
-    try {
-        const pairingUrl = new node_url_1.URL(response.data['url']);
-        const pairingEndpoint = getEndpoint(pairingUrl.origin);
-        const match = pairingUrl.hash.match(/^#pair=(.+)$/);
-        if (!pairingEndpoint || !match)
-            return failure(1, 'PAIRING_CODE_INVALID', response.status);
-        return `${pairingEndpoint.origin}${context.devPath}#pair=${encodeURIComponent(match[1])}`;
-    }
-    catch {
-        return failure(1, 'PAIRING_CODE_INVALID', response.status);
-    }
-}
-async function openPlatformUrl(url) {
-    const command = process.platform === 'darwin'
-        ? 'open'
-        : process.platform === 'win32' ? 'explorer.exe' : 'xdg-open';
-    const child = (0, node_child_process_1.spawn)(command, [url], { detached: true, stdio: 'ignore' });
-    await new Promise((resolve, reject) => {
-        child.once('error', reject);
-        child.once('spawn', () => {
-            child.unref();
-            resolve();
-        });
-    });
-}
-async function executeAppDevAction(args) {
-    const parsed = parseCommand(['run', ...args.slice(2)]);
-    if (!parsed || parsed.command !== 'run')
-        return usageFailure();
-    const [appSelector, actionId] = parsed.positional;
-    const prepared = await prepareAppDevContext(appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const state = await performAppDevRequest(prepared.context, 'GET', appDevPath(prepared.context, 'state'));
-    if (!state.ok)
-        return state.outcome;
-    const stateData = state.value['data'];
-    if (!isRecord(stateData) || typeof stateData['revision'] !== 'number') {
-        return failure(1, 'APP_DEV_RESPONSE_INVALID', state.status);
-    }
-    const requestId = parsed.requestId ?? `cxa_${(0, node_crypto_1.randomBytes)(16).toString('base64url')}`;
-    const response = await performAppDevRequest(prepared.context, 'POST', appDevPath(prepared.context, 'actions'), {
-        actionId,
-        requestId,
-        input: parsed.input,
-        expectedRevision: stateData['revision'],
-    }, DEV_ACTION_TIMEOUT_MS);
-    if (!response.ok)
-        return response.outcome;
-    const responseData = response.value['data'];
-    const receipt = isRecord(responseData) && isRecord(responseData['receipt'])
-        ? responseData['receipt']
-        : undefined;
-    return {
-        exitCode: receipt?.['outcome'] === 'succeeded' ? 0 : 1,
-        payload: response.value,
-        stdout: `${response.rawText ?? standardJsonOutput({ exitCode: 0, payload: response.value })}`
-            + (response.rawText?.endsWith('\n') ? '' : '\n'),
-        suppressOutput: true,
-    };
-}
-function hasBuildScript(appDirectory) {
-    try {
-        const packageJson = JSON.parse(fs.readFileSync(path.join(appDirectory, 'package.json'), 'utf8'));
-        if (!isRecord(packageJson) || !isRecord(packageJson['scripts']))
-            return false;
-        const build = packageJson['scripts']['build'];
-        return typeof build === 'string' && build.trim().length > 0;
-    }
-    catch {
-        return false;
-    }
-}
-function buildOutputPaths(appDirectory) {
-    const result = new Set([path.normalize('ui-plugin.json')]);
-    const manifest = readAppManifest(appDirectory);
-    const entry = manifest?.['entry'];
-    if (typeof entry === 'string' && entry.length > 0 && !path.isAbsolute(entry)) {
-        const normalized = path.normalize(entry);
-        if (normalized !== '..' && !normalized.startsWith(`..${path.sep}`))
-            result.add(normalized);
-    }
-    return result;
-}
-function outputFingerprint(appDirectory, relativePath) {
-    try {
-        const stats = fs.statSync(path.join(appDirectory, relativePath));
-        return `${stats.size}:${stats.mtimeMs}:${stats.ino}`;
-    }
-    catch {
-        return null;
-    }
-}
-function snapshotBuildOutputs(appDirectory, paths) {
-    return new Map([...paths].map((relativePath) => [
-        relativePath,
-        outputFingerprint(appDirectory, relativePath),
-    ]));
-}
-function runNpmBuild(appDirectory, onChild) {
-    const startedAt = Date.now();
-    let output = '';
-    let settled = false;
-    const appendOutput = (chunk) => {
-        const next = Buffer.from(output + (Buffer.isBuffer(chunk) ? chunk.toString('utf8') : chunk), 'utf8');
-        output = next.length > MAX_BUILD_OUTPUT_BYTES
-            ? next.subarray(next.length - MAX_BUILD_OUTPUT_BYTES).toString('utf8')
-            : next.toString('utf8');
-    };
-    return new Promise((resolve) => {
-        const child = (0, node_child_process_1.spawn)('npm', ['run', 'build'], {
-            cwd: appDirectory,
-            env: process.env,
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        onChild(child);
-        child.stdout?.on('data', appendOutput);
-        child.stderr?.on('data', appendOutput);
-        const finish = (ok) => {
-            if (settled)
-                return;
-            settled = true;
-            onChild(undefined);
-            resolve({
-                ok,
-                ms: Math.max(0, Date.now() - startedAt),
-                output,
-            });
-        };
-        child.once('error', (error) => {
-            appendOutput(`${error.message}\n`);
-            finish(false);
-        });
-        child.once('close', (code) => finish(code === 0));
-    });
-}
-function responseCode(outcome) {
-    const error = outcome.payload['error'];
-    return isRecord(error) && typeof error['code'] === 'string' ? error['code'] : 'ERROR';
-}
-async function postAppDevReload(context, body) {
-    const response = await performAppDevRequest(context, 'POST', appDevPath(context, 'reload'), body);
-    if (!response.ok)
-        return { errorCode: responseCode(response.outcome) };
-    const data = response.value['data'];
-    return isRecord(data) && typeof data['generation'] === 'number'
-        ? { generation: data['generation'] }
-        : { errorCode: 'APP_DEV_RESPONSE_INVALID' };
-}
-async function runAppDevWatcher(context, buildEnabled) {
-    const parentPid = process.ppid;
-    let watcher;
-    try {
-        watcher = fs.watch(context.appDirectory, { recursive: true }, (_event, filename) => {
-            onFileChange(filename);
-        });
-    }
-    catch (error) {
-        return failure(1, 'WATCH_FAILED', null, error instanceof Error ? error.message : 'Unable to watch the App folder.');
-    }
-    let closed = false;
-    let stopRequested = false;
-    let cycleRunning = false;
-    let queuedChange = false;
-    let queuedPath = '';
-    let pendingPath = '';
-    let debounceTimer;
-    let parentCheckTimer;
-    let activeBuild;
-    let finalOutcome = { exitCode: 0, payload: {}, suppressOutput: true };
-    const recentOutputEvents = new Map();
-    let resolveRun;
-    const result = new Promise((resolve) => {
-        resolveRun = resolve;
-    });
-    const writeLine = (line) => {
-        process.stdout.write(`${line}\n`);
-    };
-    const finish = () => {
-        if (closed)
-            return;
-        closed = true;
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        if (parentCheckTimer)
-            clearInterval(parentCheckTimer);
-        process.removeListener('SIGINT', onSignal);
-        process.removeListener('SIGTERM', onSignal);
-        resolveRun(finalOutcome);
-    };
-    const onSignal = () => {
-        if (stopRequested)
-            return;
-        stopRequested = true;
-        watcher.close();
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        if (activeBuild && activeBuild.exitCode === null)
-            activeBuild.kill('SIGTERM');
-        if (!cycleRunning)
-            finish();
-    };
-    const onFileChange = (filename) => {
-        if (stopRequested || closed)
-            return;
-        const relativePath = filename === null ? '' : path.normalize(filename.toString());
-        const parts = relativePath.split(path.sep);
-        if (parts.some((part) => part === 'node_modules' || part === '.crewx' || part === 'dist'))
-            return;
-        const outputPaths = buildEnabled ? buildOutputPaths(context.appDirectory) : new Set();
-        if (activeBuild && outputPaths.has(relativePath))
-            return;
-        const suppressedUntil = recentOutputEvents.get(relativePath);
-        if (suppressedUntil !== undefined) {
-            if (Date.now() <= suppressedUntil)
-                return;
-            recentOutputEvents.delete(relativePath);
-        }
-        if (cycleRunning) {
-            queuedChange = true;
-            queuedPath = relativePath || 'App files';
-            return;
-        }
-        pendingPath = relativePath || 'App files';
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        debounceTimer = setTimeout(() => {
-            debounceTimer = undefined;
-            const changedPath = pendingPath || 'App files';
-            pendingPath = '';
-            void runCycle(changedPath, false);
-        }, 200);
-    };
-    const reloadLabel = async (body) => {
-        const reload = await postAppDevReload(context, body);
-        return reload.generation === undefined ? `failed ${reload.errorCode ?? 'ERROR'}` : String(reload.generation);
-    };
-    const runCycle = async (changedPath, initial) => {
-        if (stopRequested || closed)
-            return;
-        cycleRunning = true;
-        if (buildEnabled) {
-            const outputPaths = buildOutputPaths(context.appDirectory);
-            const before = snapshotBuildOutputs(context.appDirectory, outputPaths);
-            const build = await runNpmBuild(context.appDirectory, (child) => {
-                activeBuild = child;
-            });
-            const after = snapshotBuildOutputs(context.appDirectory, outputPaths);
-            for (const [outputPath, fingerprint] of after) {
-                if (before.get(outputPath) !== fingerprint) {
-                    recentOutputEvents.set(outputPath, Date.now() + 1000);
-                }
-            }
-            if (stopRequested) {
-                cycleRunning = false;
-                finish();
-                return;
-            }
-            const reloadBody = {
-                reason: 'build',
-                build: {
-                    ok: build.ok,
-                    ms: build.ms,
-                    ...(!build.ok ? { output: build.output } : {}),
-                },
-            };
-            const generationLabel = await reloadLabel(reloadBody);
-            writeLine(`${initial ? 'initial' : changedPath} -> build ${build.ok ? 'ok' : 'failed'} ${build.ms}ms -> reload ${generationLabel}`);
-        }
-        else if (!initial) {
-            const generationLabel = await reloadLabel({ reason: 'manual' });
-            writeLine(`${changedPath} -> reload ${generationLabel}`);
-        }
-        cycleRunning = false;
-        if (stopRequested) {
-            finish();
-            return;
-        }
-        if (queuedChange) {
-            const nextPath = queuedPath || 'App files';
-            queuedChange = false;
-            queuedPath = '';
-            void runCycle(nextPath, false);
-            return;
-        }
-        if (stopRequested)
-            finish();
-    };
-    watcher.once('error', (error) => {
-        finalOutcome = failure(1, 'WATCH_FAILED', null, error.message);
-        onSignal();
-    });
-    process.once('SIGINT', onSignal);
-    process.once('SIGTERM', onSignal);
-    parentCheckTimer = setInterval(() => {
-        if (process.ppid !== parentPid)
-            onSignal();
-    }, 1000);
-    parentCheckTimer.unref();
-    if (buildEnabled)
-        void runCycle('initial', true);
-    return result;
-}
-async function executeAppDev(args) {
-    const parsed = parseSingleAppCommand(args, 'dev');
-    if (!parsed)
-        return usageFailure();
-    const prepared = await prepareAppDevContext(parsed.appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const browserUrl = `${prepared.context.endpoint.origin}${prepared.context.devPath}`;
-    process.stdout.write(`${browserUrl}\n`);
-    if (!parsed.flag) {
-        const pairingUrl = await getPairingDevUrl(prepared.context);
-        if (typeof pairingUrl !== 'string')
-            return pairingUrl;
-        try {
-            await openPlatformUrl(pairingUrl);
-        }
-        catch (error) {
-            return failure(1, 'BROWSER_OPEN_FAILED', null, error instanceof Error ? error.message : 'Could not open the App dev tab.');
-        }
-    }
-    return runAppDevWatcher(prepared.context, hasBuildScript(prepared.context.appDirectory));
-}
-async function executeAppCommand(args) {
-    if (args[0] === 'dev')
-        return executeAppDev(args);
-    if (args[0] === 'check')
-        return executeAppCheck(args);
-    if (args[0] === 'run' && args[1] === '--dev')
-        return executeAppDevAction(args);
-    const parsed = parseCommand(args);
-    if (!parsed)
-        return usageFailure();
-    const context = contextFromEnvironment();
-    if (isAppCommandOutcome(context))
-        return context;
-    if (parsed.command === 'list') {
-        const result = await loadLaunchers(context);
-        if (!result.ok)
-            return result.outcome;
-        return success({ ok: true, apps: result.value });
-    }
-    if (parsed.command === 'receipt') {
-        const receiptId = parsed.positional[0];
-        const response = await performRequest(context, 'GET', pathFor(context, 'ui-action-receipts', receiptId));
-        if (!response.ok)
-            return response.outcome;
-        const receipt = response.value['receipt'];
-        if (!isRecord(receipt))
-            return failure(1, 'ERROR', response.status);
-        return success({ ok: true, receipt });
-    }
-    if (parsed.command === 'state') {
-        const result = await readInstanceState(context, parsed.positional[0]);
-        if (!result.ok)
-            return result.outcome;
-        return success({ ok: true, ...result.value });
-    }
-    if (parsed.command === 'open') {
-        const appId = parsed.positional[0];
-        const list = await loadLaunchers(context);
-        if (!list.ok)
-            return list.outcome;
-        const launcher = findLauncher(list.value, appId);
-        if (!launcher)
-            return failure(6, 'MCP_APP_NOT_FOUND', null);
-        const opened = await openLauncher(context, launcher);
-        if (!opened.ok)
-            return opened.outcome;
-        return success({ ok: true, ...opened.value });
-    }
-    const [target, actionId] = parsed.positional;
-    const requestId = parsed.requestId ?? `cxa_${(0, node_crypto_1.randomBytes)(16).toString('base64url')}`;
-    let instanceId = target;
-    if (!target.startsWith(APP_ID_PREFIX)) {
-        const list = await loadLaunchers(context);
-        if (!list.ok)
-            return list.outcome;
-        const launcher = findLauncher(list.value, target);
-        if (!launcher)
-            return failure(6, 'MCP_APP_NOT_FOUND', null);
-        const opened = await openLauncher(context, launcher);
-        if (!opened.ok)
-            return opened.outcome;
-        instanceId = opened.value.instanceId;
-    }
-    const action = await runAction(context, instanceId, actionId, requestId, parsed.input);
-    if (!action.ok)
-        return action.outcome;
-    return success({ ok: true, ...action.value });
-}
-//# sourceMappingURL=engine.js.map
+"use strict";var xe=exports&&exports.__createBinding||(Object.create?(function(e,t,n,r){if(r===void 0)r=n;var o=Object.getOwnPropertyDescriptor(t,n);if(!o||("get"in o?!t.__esModule:o.writable||o.configurable)){o={enumerable:true,get:function(){return t[n]}}}Object.defineProperty(e,r,o)}):(function(e,t,n,r){if(r===void 0)r=n;e[r]=t[n]}));var Ne=exports&&exports.__setModuleDefault||(Object.create?(function(e,t){Object.defineProperty(e,"default",{enumerable:true,value:t})}):function(e,t){e["default"]=t});var j=exports&&exports.__importStar||(function(){var e=function(t){e=Object.getOwnPropertyNames||function(n){var r=[];for(var o in n)if(Object.prototype.hasOwnProperty.call(n,o))r[r.length]=o;return r};return e(t)};return function(t){if(t&&t.__esModule)return t;var n={};if(t!=null){for(var r=e(t),o=0;o<r.length;o++)if(r[o]!=="default")xe(n,t,r[o])}Ne(n,t);return n}})();Object.defineProperty(exports,"__esModule",{value:true});exports.executeAppCommand=bt;const ie=require("node:crypto");const ae=require("node:child_process");const v=j(require("node:fs"));const je=j(require("node:http"));const $e=j(require("node:https"));const h=j(require("node:path"));const ue=require("node:url");const z=require("@crewx/shared/crewx-api-credential");const b=require("./receipt-wait.js");const C=require("./usage.js");const x=15e3;const Q=3e4;const Le=6e4;const ce=64*1024;const le="uic_";const Ue="/api/v1";const qe="/api/v1/app-dev/capabilities";const Me="/api/v1/app-dev/sessions";const Be=12;const Fe=13;const We=/^[A-Za-z0-9_-]{8,128}$/;const Ge=new Set(["127.0.0.1","[::1]","localhost"]);const Ve="http://localhost:8150";const Je="Do not work around this by clicking the screen or using another browser. Report that you could not use the App route.";const He="Do not retry. Report the failure.";const Xe="The server did not answer in time. Retry once; if it happens again, report it.";function l(e){return e!==null&&typeof e==="object"&&!Array.isArray(e)}function p(e,t,n,r){let o=r;if(!o&&(e===3||e===9||e===10||e===11)){o=Je}else if(!o&&e===4){o=He}return{exitCode:e,payload:{ok:false,exit:e,error:{code:t,status:n}},...o?{stderr:o}:{}}}function P(e){return{exitCode:0,payload:e}}function $(){return p(2,"USAGE",null)}function pe(e){const t=e[0];if(t!=="list"&&t!=="open"&&t!=="state"&&t!=="run"&&t!=="receipt"){return null}const n=[];const r=new Map;for(let a=1;a<e.length;a+=1){const u=e[a];if(!u.startsWith("--")){n.push(u);continue}const c=u.indexOf("=");const d=c>=0?u.slice(2,c):u.slice(2);const f=c>=0?u.slice(c+1):void 0;if(d!=="input"&&d!=="request-id"&&d!=="wait"||r.has(d))return null;const y=f??e[a+1];if(y===void 0)return null;if(f===void 0)a+=1;r.set(d,y)}if(t==="list"&&n.length!==0||t==="open"&&n.length!==1||t==="state"&&(n.length!==1||!n[0].startsWith(le))||t==="run"&&n.length!==2||t==="receipt"&&n.length!==1){return null}if(t!=="run"&&(r.has("input")||r.has("request-id")))return null;if(t!=="receipt"&&r.has("wait"))return null;let o={};if(r.has("input")){const a=r.get("input");try{const u=JSON.parse(a==="-"?v.readFileSync(0,"utf8"):a);if(!l(u))return null;o=u}catch{return null}}const i=r.get("request-id");if(i!==void 0&&!We.test(i))return null;const s=r.has("wait")?(0,b.parseWaitSeconds)(r.get("wait")):void 0;if(s===null)return null;return{command:t,positional:n,input:o,...i!==void 0?{requestId:i}:{},...s!==void 0?{waitSeconds:s}:{}}}function Y(e){if(!e)return null;let t;try{t=new ue.URL(e)}catch{return null}if(!Ge.has(t.hostname)||t.protocol!=="http:"&&t.protocol!=="https:"||t.username!==""||t.password!==""||t.search!==""||t.hash!==""||t.pathname!==""&&t.pathname!=="/"){return null}return t}function F(e){return encodeURIComponent(e)}function Ke(e,t){return["api","v1","ws",F(e),"threads",F(t)].join("/")}function L(e,...t){return`/${e.basePath}/${t.map(F).join("/")}`}function k(e,t){if(!l(e)||!l(e["error"]))return t;const n=e["error"]["code"];return typeof n==="string"&&n.length>0?n:t}function W(e){const{status:t,data:n}=e;if(t>=300&&t<400)return p(9,"ENDPOINT_REJECTED",t);if(t===401)return p(4,k(n,"UNAUTHORIZED"),t);if(t===403)return p(5,k(n,"FORBIDDEN"),t);if(t===404)return p(6,k(n,"NOT_FOUND"),t);if(t===409){const r=k(n,"CONFLICT");if(r==="APPROVAL_ALREADY_PENDING"){const o=l(n)&&l(n["error"])?n["error"]:void 0;const i=o&&l(o["details"])?o["details"]:void 0;const s=o?.["receiptId"]??i?.["receiptId"]??(l(n)?n["receiptId"]:void 0);return{exitCode:8,payload:{ok:false,exit:8,error:{code:r,status:t},...typeof s==="string"?{receiptId:s}:{}}}}return p(7,r,t)}return p(1,k(n,"ERROR"),t)}function U(e,t=true){const n=l(e)&&typeof e["code"]==="string"?e["code"]:"";const r=process.env["CODEX_SANDBOX_NETWORK_DISABLED"]==="1";const o=!r&&(n==="EPERM"||n==="EACCES");if(r||o)return p(11,"SANDBOX_BLOCKED",null);if(t&&n==="ETIMEDOUT"&&l(e)&&e["connectionEstablished"]===true){return p(14,"TIMED_OUT",null,Xe)}return p(10,"SERVER_UNREACHABLE",null)}function Z(e,t){if(e.exitCode!==14)return e;return{...e,payload:{...e.payload,requestId:t},stderr:["The request timed out and its outcome is unknown.",`Retry the same command once with --request-id ${t}; the server will return the same request's receipt without running the action twice.`,`If it times out again, report "server response delayed, outcome unknown" with requestId ${t}.`,"Do not report success or failure, click the screen, or use another route."].join("\n")}}function q(e,t,n,r,o,i=x){const s=e.protocol==="https:"?$e.request:je.request;const a=e.hostname==="[::1]"?"::1":e.hostname;const u=e.port?Number(e.port):void 0;const c=o===void 0?void 0:JSON.stringify(o);const d=s({protocol:e.protocol,hostname:a,...u!==void 0?{port:u}:{},method:n,path:r,headers:{Authorization:`Bearer ${t}`,Accept:"application/json",...c!==void 0?{"Content-Type":"application/json"}:{}}},m=>{const w=m.statusCode??0;if(w>=300&&w<400){m.destroy();clearTimeout(N);_({status:w,data:void 0,invalidJson:false,rawText:""});return}const A=[];m.setEncoding("utf8");m.on("data",O=>A.push(O));m.once("error",O=>I(O));m.once("end",()=>{clearTimeout(N);const O=A.join("");try{_({status:w,data:JSON.parse(O),invalidJson:false,rawText:O})}catch{_({status:w,data:void 0,invalidJson:true,rawText:O})}})});let f;let y=false;let _;let I;const S=new Promise((m,w)=>{_=m;I=w});const N=setTimeout(()=>{const m=new Error("Request timed out");m.code="ETIMEDOUT";m.connectionEstablished=y;d.destroy(m)},i);d.on("socket",m=>{const w=()=>{y=true};if(e.protocol==="https:"){const A=m;if(A.authorized)w();else A.once("secureConnect",w)}else{if(m.connecting)m.once("connect",w);else w()}m.once("error",A=>{f=A})});d.once("error",m=>{clearTimeout(N);I(f??m)});if(c!==void 0)d.write(c);d.end();return S}async function M(e,t,n,r,o=x){try{const i=await q(e.endpoint,e.ticket,t,n,r,o);if(i.status<200||i.status>=300){return{ok:false,outcome:W(i)}}if(i.invalidJson||!l(i.data)||i.data["success"]!==true){return{ok:false,outcome:p(1,k(i.data,"ERROR"),i.status)}}const s=i.data["data"];if(!l(s)){return{ok:false,outcome:p(1,"ERROR",i.status)}}return{ok:true,value:s,status:i.status}}catch(i){return{ok:false,outcome:U(i)}}}function de(e){return p(Be,"SERVER_TOO_OLD",e,"The running CrewX does not support App dev mode.")}function fe(e){if(e instanceof z.CrewxCredentialError){return p(e.exitCode,e.code,null,e.message)}return p(1,"ERROR",null)}function ze(){const e=process.env["CREWX_ENDPOINT"]?.trim()||Ve;return Y(e)}function G(e){try{return v.statSync(e).isDirectory()}catch{return false}}function ee(e){try{return v.statSync(e).isFile()}catch{return false}}function he(e=process.cwd()){let t=h.resolve(e);while(true){if(G(h.join(t,"apps"))||ee(h.join(t,"crewx.yaml"))){try{return v.realpathSync(t)}catch{return void 0}}const n=h.dirname(t);if(n===t)return void 0;t=n}}const ye="manifest.json";const me="ui-plugin.json";const Qe="dev.crewx";function we(e){try{const t=JSON.parse(v.readFileSync(e,"utf8"));return l(t)?t:void 0}catch{return void 0}}function te(e){const t=we(h.join(e,me));const n=h.join(e,ye);if(!ee(n))return t;const r=we(n);if(!r)return void 0;const o=r["_meta"];const i=l(o)?o[Qe]:void 0;const s={pluginId:r["name"],entry:l(i)?i["entry"]:void 0};if(t&&t["pluginId"]!==s["pluginId"])return void 0;return s}function Ee(e,t){const n=h.relative(e,t);return n!==""&&n!==".."&&!n.startsWith(`..${h.sep}`)&&!h.isAbsolute(n)}function Ye(e,t){if(!t||t==="."||t===".."||/[\\/]/.test(t)){return p(2,"USAGE",null,"App must be a folder name or pluginId.")}const n=h.join(e,"apps");const r=h.join(n,t);let o=G(r)?r:void 0;if(!o&&G(n)){try{for(const s of v.readdirSync(n,{withFileTypes:true})){if(!s.isDirectory())continue;const a=h.join(n,s.name);const u=te(a);if(u?.["pluginId"]===t){o=a;break}}}catch{}}let i=t;if(o){try{o=v.realpathSync(o)}catch{return p(6,"APP_INVALID",null)}if(!Ee(v.realpathSync(n),o)){return p(2,"USAGE",null,"App folder must be inside the workspace apps directory.")}const s=te(o);if(typeof s?.["pluginId"]==="string"&&s["pluginId"].length>0){i=s["pluginId"]}}else{o=r}return{appId:i,appDirectory:o}}function ve(e){if(e.status<200||e.status>=300){return{ok:false,outcome:W(e)}}if(e.invalidJson||!l(e.data)||e.data["success"]!==true||!l(e.data["data"])){return{ok:false,outcome:p(1,k(e.data,"ERROR"),e.status)}}return{ok:true,value:e.data,status:e.status,rawText:e.rawText}}async function Ze(e,t){try{const n=await q(e,t,"GET",qe);if(n.status===404||n.status>=300&&n.status<400||n.invalidJson){return{ok:false,outcome:de(n.status)}}if(n.status<200||n.status>=300){return{ok:false,outcome:W(n)}}if(!l(n.data)||n.data["success"]!==true||!l(n.data["data"])||n.data["data"]["appDev"]!==1){return{ok:false,outcome:de(n.status)}}return{ok:true,value:n.data,status:n.status,rawText:n.rawText}}catch(n){return{ok:false,outcome:U(n,false)}}}async function ne(e){const t=ze();if(!t)return{ok:false,outcome:p(9,"ENDPOINT_REJECTED",null)};let n;try{n=(0,z.resolveCrewxApiCredential)("app-dev").token}catch(c){return{ok:false,outcome:fe(c)}}const r=await Ze(t,n);if(!r.ok)return{ok:false,outcome:r.outcome};const o=he();if(!o){return{ok:false,outcome:p(2,"WORKSPACE_NOT_FOUND",null,"No workspace root with apps/ or crewx.yaml was found.")}}const i=Ye(o,e);if("exitCode"in i)return{ok:false,outcome:i};let s;try{s=await q(t,n,"POST",Me,{workspacePath:o,appId:i.appId})}catch(c){return{ok:false,outcome:U(c,false)}}const a=ve(s);if(!a.ok)return{ok:false,outcome:a.outcome};const u=a.value["data"];if(!l(u)||typeof u["workspaceSlug"]!=="string"||typeof u["appId"]!=="string"||typeof u["devPath"]!=="string"||!u["devPath"].startsWith("/ws/")){return{ok:false,outcome:p(1,"ERROR",s.status)}}if(!G(i.appDirectory)){return{ok:false,outcome:p(6,"APP_INVALID",s.status)}}return{ok:true,context:{endpoint:t,token:n,workspacePath:o,appId:u["appId"],appDirectory:i.appDirectory,devPath:u["devPath"]}}}function V(e,...t){return`${Ue}${e.devPath}${t.length>0?`/${t.map(F).join("/")}`:""}`}async function J(e,t,n,r,o=x){try{const i=await q(e.endpoint,e.token,t,n,r,o);return ve(i)}catch(i){return{ok:false,outcome:U(i,false)}}}function et(e){const t=e["appId"]??e["id"];if(typeof t==="string"&&t.length>0)return t;const n=e["definition"];if(l(n)&&typeof n["id"]==="string")return n["id"];return void 0}function tt(e){const t=e["definitionHash"];if(typeof t==="string"&&t.length>0)return t;const n=e["definition"];if(l(n)&&typeof n["hash"]==="string"){return n["hash"]}return void 0}function nt(e){if(!l(e))return void 0;const t=et(e);const n=tt(e);if(!t||!n)return void 0;const r=e["agentActions"];const o=ot(e["agentAccess"]);return{appId:t,name:typeof e["name"]==="string"?e["name"]:"",description:typeof e["description"]==="string"?e["description"]:"",definitionHash:n,agentActions:Array.isArray(r)?r:[],...o===void 0?{}:{agentAccess:o}}}const rt=new Set(["allowed","approval_required","denied"]);function ot(e){if(!l(e))return void 0;const t=new Map;for(const[n,r]of Object.entries(e)){if(rt.has(r))t.set(n,r)}return t.size>0?t:void 0}async function H(e,t=x){const n=await M(e,"GET",L(e,"ui-instances","apps"),void 0,t);if(!n.ok)return n;const r=n.value["apps"];if(!Array.isArray(r)){return{ok:false,outcome:p(1,"ERROR",n.status)}}const o=r.map(nt);if(o.some(i=>i===void 0)){return{ok:false,outcome:p(1,"ERROR",n.status)}}return{ok:true,value:o,status:n.status}}function re(e,t){return e.find(n=>n.appId===t)}async function ge(e,t,n=x){const r=await M(e,"POST",L(e,"ui-instances","open"),{appId:t.appId,expectedDefinitionHash:t.definitionHash},n);if(!r.ok)return r;const o=l(r.value["instance"])?r.value["instance"]:r.value;if(!l(o)){return{ok:false,outcome:p(1,"ERROR",r.status)}}const i=o["instanceId"]??o["id"];const s=o["revision"];if(typeof i!=="string"||typeof s!=="number"){return{ok:false,outcome:p(1,"ERROR",r.status)}}const a=l(r.value["ai"])?r.value["ai"]:l(o["ai"])?o["ai"]:void 0;return{ok:true,status:r.status,value:{appId:t.appId,definitionHash:t.definitionHash,instanceId:i,revision:s,state:a&&Object.prototype.hasOwnProperty.call(a,"state")?a["state"]:null}}}async function st(e,t){const n=await M(e,"GET",L(e,"ui-instances",t));if(!n.ok)return n;const r=n.value;const o=r["instanceId"];const i=r["revision"];if(typeof o!=="string"||typeof i!=="number"){return{ok:false,outcome:p(1,"ERROR",n.status)}}const s=l(r["ai"])?r["ai"]:void 0;const a=u=>{if(Object.prototype.hasOwnProperty.call(r,u))return{[u]:r[u]};if(s&&Object.prototype.hasOwnProperty.call(s,u))return{[u]:s[u]};return{}};return{ok:true,status:n.status,value:{instanceId:o,revision:i,state:s&&Object.prototype.hasOwnProperty.call(s,"state")?s["state"]:null,buttons:s&&Object.prototype.hasOwnProperty.call(s,"buttons")?s["buttons"]:null,...a("agentAccess"),...a("modelContext"),...a("pendingApproval")}}}async function it(e,t,n,r,o,i=x){const s=await M(e,"POST",L(e,"ui-instances",t,"actions"),{actionId:n,requestId:r,input:o},i);if(!s.ok)return s;const a=s.value["receipt"];if(!l(a)){return{ok:false,outcome:p(1,"ERROR",s.status)}}const u=a["receiptId"]??a["id"];const c=s.value["approval"];if(s.status===202&&l(c)){const _=c["approvalId"];const I=c["expiresAt"];const S=typeof a["requestId"]==="string"?a["requestId"]:typeof c["requestId"]==="string"?c["requestId"]:r;if(typeof u!=="string"||typeof _!=="string"||typeof I!=="string"&&typeof I!=="number"){return{ok:false,outcome:p(1,"ERROR",s.status)}}return{ok:false,outcome:{exitCode:8,payload:{ok:false,exit:8,error:{code:"APPROVAL_PENDING",status:202},receiptId:u,requestId:S,approvalId:_,expiresAt:I}}}}const d=a["status"]??(s.status===202?"requested":"settled");const f=s.value["resolve"];const y=l(f)&&l(f["ai"])?f["ai"]:void 0;return{ok:true,status:s.status,value:{receiptId:typeof u==="string"?u:"",requestId:typeof a["requestId"]==="string"?a["requestId"]:r,instanceId:t,actionId:typeof a["actionId"]==="string"?a["actionId"]:n,status:d,outcome:Object.prototype.hasOwnProperty.call(a,"outcome")?a["outcome"]:null,...typeof a["errorCode"]==="string"?{errorCode:a["errorCode"]}:{},state:y&&Object.prototype.hasOwnProperty.call(y,"state")?y["state"]:null,...Object.prototype.hasOwnProperty.call(s.value,"result")?{result:s.value["result"]}:{},...Object.prototype.hasOwnProperty.call(s.value,"resultExpired")?{resultExpired:s.value["resultExpired"]}:{}}}}function at(e){const t=e.payload["error"];return e.exitCode===14||l(t)&&t["status"]===429}async function Ae(e,t){const n=await M(e,"GET",L(e,"ui-action-receipts",t));if(!n.ok){return{state:"failed",retryable:at(n.outcome),value:n.outcome}}const r=n.value["receipt"];if(!l(r))return{state:"failed",retryable:false,value:p(1,"ERROR",n.status)};return{state:r["status"]==="requested"?"pending":"settled",value:P({ok:true,receipt:r,outcome:Object.prototype.hasOwnProperty.call(r,"outcome")?r["outcome"]:null,...typeof r["errorCode"]==="string"?{errorCode:r["errorCode"]}:{},...Object.prototype.hasOwnProperty.call(n.value,"result")?{result:n.value["result"]}:{},...Object.prototype.hasOwnProperty.call(n.value,"resultExpired")?{resultExpired:n.value["resultExpired"]}:{}})}}function ut(e,t){return{exitCode:124,payload:{ok:false,exit:124,error:{code:"WAIT_TIMEOUT",status:null},receiptId:e},suppressOutput:true,stderr:`\u2192 Receipt ${e} is still pending after ${t}s. Do not end your turn: run crewx app receipt ${e} --wait=${(0,b.nextWaitSeconds)(t)} again.`}}function Ie(){const e=process.env["CREWX_TASK_TICKET"]??"";const t=process.env["CREWX_WORKSPACE_SLUG"]??"";const n=process.env["CREWX_THREAD_ID"]??"";if(!e.startsWith("crewxtk_")||!t||!n){return p(3,"NO_TICKET",null)}const r=Y(process.env["CREWX_ENDPOINT"]);if(!r)return p(9,"ENDPOINT_REJECTED",null);return{ticket:e,workspaceSlug:t,threadId:n,endpoint:r,basePath:Ke(t,n)}}function _e(e){return"exitCode"in e}function Oe(e){return String(e).padStart(2,"0")}function ct(e){const t=typeof e==="number"?new Date(e):typeof e==="string"?new Date(/^\d+$/.test(e)?Number(e):e):void 0;if(!t||Number.isNaN(t.getTime()))return void 0;return`${Oe(t.getHours())}:${Oe(t.getMinutes())}`}function lt(e){if(e.exitCode!==8)return e;const t=ct(e.payload["expiresAt"]);const n=e.payload["receiptId"];const r=[`\u2192 Waiting for the user's approval in the App window${t?` (expires ${t})`:""}. Do not end your turn: ending it cancels the request.`,...typeof n==="string"&&n.length>0?[`\u2192 Wait: crewx app receipt ${n} --wait=${b.RECEIPT_WAIT_DEFAULT_SECONDS} (repeat on exit 124 until it settles)`]:[],"\u2192 Report success only if it settles as succeeded."];return{...e,stderr:[e.stderr,...r].filter(Boolean).join("\n")}}const pt=256*1024;function dt(e){try{const t=v.realpathSync(e);const n=v.realpathSync(h.join(t,"SKILL.md"));if(!Ee(t,n)||!ee(n))return void 0;const r=v.openSync(n,"r");try{const o=new Uint8Array(pt);const i=v.readSync(r,o,0,o.length,0);return(0,C.manualBody)(Buffer.from(o.buffer,0,i).toString("utf8"))}finally{v.closeSync(r)}}catch{return void 0}}async function ft(e){const t=he();if(!t)return void 0;try{const n=await Promise.resolve().then(()=>j(require("@crewx/sdk")));const r=await n.discoverWorkspaceApps(t);const o=r.apps.find(i=>i.appId===e)??r.apps.find(i=>i.pluginId===e);if(!o)return void 0;return{candidate:o,directory:h.join(t,o.relativePath),resolveAccess:n.resolveAgentAccess}}catch{return void 0}}async function ht(e){if(e.length!==2||e[1].startsWith("--"))return $();const t=e[1];const n=Ie();if(_e(n))return n;const r=await H(n);if(!r.ok)return r.outcome;const o=re(r.value,t);if(!o)return p(6,"MCP_APP_NOT_FOUND",null);const i=o.agentActions.filter(u=>typeof u==="string");const s=await ft(t);const a=s?(0,C.renderUsage)(dt(s.directory),(0,C.renderActionsSection)(t,s.candidate,(0,C.buildActionRows)(s.candidate,new Set(i),u=>s.resolveAccess(u),o.agentAccess)),s.candidate.manifest.csp?.connectDomains):(0,C.renderUsage)(void 0,(0,C.renderServerOnlyActions)(t,i));return{exitCode:0,payload:{ok:true},stdout:a}}function Re(e,t){if(e[0]!==t)return null;const n=[];let r=false;for(const o of e.slice(1)){if(o===(t==="dev"?"--no-open":"--json")){if(r)return null;r=true}else if(o.startsWith("--")){return null}else{n.push(o)}}if(n.length!==1)return null;return{appSelector:n[0],flag:r}}function Se(e){return`${JSON.stringify(e.payload)}
+`}function yt(e){const t=e["detail"];if(e["rule"]!=="manifest"||!l(t))return"";const n=typeof t["path"]==="string"?t["path"]:"";const r=typeof t["rule"]==="string"?t["rule"]:"";if(!r)return"";return`  ${n?`${n} `:""}(${r})`}async function mt(e){const t=Re(e,"check");if(!t)return $();const n=await ne(t.appSelector);if(!n.ok)return n.outcome;const r=await J(n.context,"GET",V(n.context,"check"));if(!r.ok)return r.outcome;const o=r.value["data"];if(!l(o))return p(1,"ERROR",r.status);const i=l(o["summary"])?o["summary"]:{};const s=Array.isArray(o["items"])?o["items"]:[];const a=typeof i["errors"]==="number"?i["errors"]:s.filter(f=>l(f)&&f["severity"]==="error").length;const u=typeof i["warnings"]==="number"?i["warnings"]:s.filter(f=>l(f)&&f["severity"]==="warning").length;const c=a===0?0:Fe;if(t.flag){return{exitCode:c,payload:r.value,stdout:`${r.rawText??Se({exitCode:c,payload:r.value})}`+(r.rawText?.endsWith("\n")?"":"\n"),suppressOutput:true}}const d=s.flatMap(f=>{if(!l(f))return[];const y=f["severity"];const _=y==="error"?"\u2715":y==="ok"?"\u2713":"!";const I=typeof f["where"]==="string"?f["where"]:"";const S=typeof f["code"]==="string"?f["code"]:"";return[`${_} ${I}  ${S}${yt(f)}`]});d.push(`Summary: ${a} errors, ${u} warnings`);return{exitCode:c,payload:{},stdout:`${d.join("\n")}
+`,suppressOutput:true}}async function wt(e){let t;try{t=(0,z.resolveCrewxApiCredential)("pairing").token}catch(r){return fe(r)}let n;try{n=await q(e.endpoint,t,"POST","/api/v1/auth/local/code")}catch(r){return U(r,false)}if(n.status<200||n.status>=300){return W(n)}if(n.invalidJson||!l(n.data)||typeof n.data["url"]!=="string"){return p(1,"PAIRING_CODE_INVALID",n.status)}try{const r=new ue.URL(n.data["url"]);const o=Y(r.origin);const i=r.hash.match(/^#pair=(.+)$/);if(!o||!i)return p(1,"PAIRING_CODE_INVALID",n.status);return`${o.origin}${e.devPath}#pair=${encodeURIComponent(i[1])}`}catch{return p(1,"PAIRING_CODE_INVALID",n.status)}}async function Et(e){const t=process.platform==="darwin"?"open":process.platform==="win32"?"explorer.exe":"xdg-open";const n=(0,ae.spawn)(t,[e],{detached:true,stdio:"ignore"});await new Promise((r,o)=>{n.once("error",o);n.once("spawn",()=>{n.unref();r()})})}async function vt(e){const t=pe(["run",...e.slice(2)]);if(!t||t.command!=="run")return $();const[n,r]=t.positional;const o=await ne(n);if(!o.ok)return o.outcome;const i=await J(o.context,"GET",V(o.context,"state"));if(!i.ok)return i.outcome;const s=i.value["data"];if(!l(s)||typeof s["revision"]!=="number"){return p(1,"APP_DEV_RESPONSE_INVALID",i.status)}const a=t.requestId??`cxa_${(0,ie.randomBytes)(16).toString("base64url")}`;const u=await J(o.context,"POST",V(o.context,"actions"),{actionId:r,requestId:a,input:t.input,expectedRevision:s["revision"]},Le);if(!u.ok)return u.outcome;const c=u.value["data"];const d=l(c)&&l(c["receipt"])?c["receipt"]:void 0;return{exitCode:d?.["outcome"]==="succeeded"?0:1,payload:u.value,stdout:`${u.rawText??Se({exitCode:0,payload:u.value})}`+(u.rawText?.endsWith("\n")?"":"\n"),suppressOutput:true}}function gt(e){try{const t=JSON.parse(v.readFileSync(h.join(e,"package.json"),"utf8"));if(!l(t)||!l(t["scripts"]))return false;const n=t["scripts"]["build"];return typeof n==="string"&&n.trim().length>0}catch{return false}}function De(e){const t=new Set([h.normalize(ye),h.normalize(me)]);const n=te(e);const r=n?.["entry"];if(typeof r==="string"&&r.length>0&&!h.isAbsolute(r)){const o=h.normalize(r);if(o!==".."&&!o.startsWith(`..${h.sep}`))t.add(o)}return t}function At(e,t){try{const n=v.statSync(h.join(e,t));return`${n.size}:${n.mtimeMs}:${n.ino}`}catch{return null}}function Te(e,t){return new Map([...t].map(n=>[n,At(e,n)]))}function It(e,t){const n=Date.now();let r="";let o=false;const i=s=>{const a=Buffer.from(r+(Buffer.isBuffer(s)?s.toString("utf8"):s),"utf8");r=a.length>ce?a.subarray(a.length-ce).toString("utf8"):a.toString("utf8")};return new Promise(s=>{const a=(0,ae.spawn)("npm",["run","build"],{cwd:e,env:process.env,stdio:["ignore","pipe","pipe"]});t(a);a.stdout?.on("data",i);a.stderr?.on("data",i);const u=c=>{if(o)return;o=true;t(void 0);s({ok:c,ms:Math.max(0,Date.now()-n),output:r})};a.once("error",c=>{i(`${c.message}
+`);u(false)});a.once("close",c=>u(c===0))})}function _t(e){const t=e.payload["error"];return l(t)&&typeof t["code"]==="string"?t["code"]:"ERROR"}async function Ot(e,t){const n=await J(e,"POST",V(e,"reload"),t);if(!n.ok)return{errorCode:_t(n.outcome)};const r=n.value["data"];return l(r)&&typeof r["generation"]==="number"?{generation:r["generation"]}:{errorCode:"APP_DEV_RESPONSE_INVALID"}}async function Rt(e,t){const n=process.ppid;let r;try{r=v.watch(e.appDirectory,{recursive:true},(E,g)=>{O(g)})}catch(E){return p(1,"WATCH_FAILED",null,E instanceof Error?E.message:"Unable to watch the App folder.")}let o=false;let i=false;let s=false;let a=false;let u="";let c="";let d;let f;let y;let _={exitCode:0,payload:{},suppressOutput:true};const I=new Map;let S;const N=new Promise(E=>{S=E});const m=E=>{process.stdout.write(`${E}
+`)};const w=()=>{if(o)return;o=true;if(d)clearTimeout(d);if(f)clearInterval(f);process.removeListener("SIGINT",A);process.removeListener("SIGTERM",A);S(_)};const A=()=>{if(i)return;i=true;r.close();if(d)clearTimeout(d);if(y&&y.exitCode===null)y.kill("SIGTERM");if(!s)w()};const O=E=>{if(i||o)return;const g=E===null?"":h.normalize(E.toString());const D=g.split(h.sep);if(D.some(T=>T==="node_modules"||T===".crewx"||T==="dist"))return;const K=t?De(e.appDirectory):new Set;if(y&&K.has(g))return;const R=I.get(g);if(R!==void 0){if(Date.now()<=R)return;I.delete(g)}if(s){a=true;u=g||"App files";return}c=g||"App files";if(d)clearTimeout(d);d=setTimeout(()=>{d=void 0;const T=c||"App files";c="";void X(T,false)},200)};const se=async E=>{const g=await Ot(e,E);return g.generation===void 0?`failed ${g.errorCode??"ERROR"}`:String(g.generation)};const X=async(E,g)=>{if(i||o)return;s=true;if(t){const D=De(e.appDirectory);const K=Te(e.appDirectory,D);const R=await It(e.appDirectory,B=>{y=B});const T=Te(e.appDirectory,D);for(const[B,Ce]of T){if(K.get(B)!==Ce){I.set(B,Date.now()+1e3)}}if(i){s=false;w();return}const ke={reason:"build",build:{ok:R.ok,ms:R.ms,...!R.ok?{output:R.output}:{}}};const be=await se(ke);m(`${g?"initial":E} -> build ${R.ok?"ok":"failed"} ${R.ms}ms -> reload ${be}`)}else if(!g){const D=await se({reason:"manual"});m(`${E} -> reload ${D}`)}s=false;if(i){w();return}if(a){const D=u||"App files";a=false;u="";void X(D,false);return}if(i)w()};r.once("error",E=>{_=p(1,"WATCH_FAILED",null,E.message);A()});process.once("SIGINT",A);process.once("SIGTERM",A);f=setInterval(()=>{if(process.ppid!==n)A()},1e3);f.unref();if(t)void X("initial",true);return N}async function St(e){const t=Re(e,"dev");if(!t)return $();const n=await ne(t.appSelector);if(!n.ok)return n.outcome;const r=`${n.context.endpoint.origin}${n.context.devPath}`;process.stdout.write(`${r}
+`);if(!t.flag){const o=await wt(n.context);if(typeof o!=="string")return o;try{await Et(o)}catch(i){return p(1,"BROWSER_OPEN_FAILED",null,i instanceof Error?i.message:"Could not open the App dev tab.")}}return Rt(n.context,gt(n.context.appDirectory))}const Pe="usage: crewx app build [<appDir>] [--check | --watch]";const Dt=["crewx app <command>","","  list                                                   List Apps available to this task","  open <appId>                                           Open an App in this conversation","  state <instanceId>                                     Read AI-visible state, buttons, and agent access","  run <instanceId|appId> <actionId> [--input <JSON>|-] [--request-id <id>]   Run one available action","  receipt <receiptId> [--wait=<seconds>]                 Read a safe action receipt","  build [<appDir>] [--check | --watch]                   Build a @Tool App: server.ts -> dist/ and the actions (manifest.json, or dist/tools.json)","  dev <app> [--no-open]                                  Start a foreground App dev session","  check <app> [--json]                                   Run the App dev checks","  run --dev <app> <actionId> [--input <JSON>|-]          Run an App action through the dev checks","  usage [<appId>]                                        Show the guide, or one App's manual and action table",""].join("\n");const Tt=[Pe,"","  Builds <appDir> (default: the current directory) from its server.ts: dist/server.mjs, dist/entry.mjs,",'  and the actions of manifest.json. With no "bin" and no crewx.app.command in package.json the App is',"  server.ts only (tool mode): dist/server.mjs, dist/main.mjs and dist/tools.json, and manifest.json","  carries no actions. --check writes nothing and exits 1 when a generated file is stale.","  --watch rebuilds on every change until Ctrl-C.",""].join("\n");function Pt(){const e=[h.join(__dirname,"..","..","build-app","load.cjs"),h.join(__dirname,"..","build-app","load.cjs")];const t=e.find(n=>v.existsSync(n));if(!t)return Promise.reject(new Error("the App build is not part of this install"));return require(t).loadAppBuilder()}function oe(e){return e instanceof Error?e.message:String(e)}async function kt(e){if(e.slice(1).some(s=>s==="--help"||s==="-h")){return{exitCode:0,payload:{ok:true},stdout:Tt}}let t;try{t=await Pt()}catch(s){return p(1,"BUILD_UNAVAILABLE",null,oe(s))}let n;try{n=t.parseArguments(e.slice(1))}catch(s){return p(2,"USAGE",null,`${oe(s)} \u2192 ${Pe}`)}const{appDirectory:r}=n;const o=h.relative(process.cwd(),r);const i=o===""?"crewx app build":`crewx app build ${o}`;if(n.watch){const s=new AbortController;const a=()=>s.abort();process.once("SIGINT",a);process.once("SIGTERM",a);try{await t.watchApp(r,u=>process.stdout.write(`${u}
+`),{signal:s.signal})}finally{process.removeListener("SIGINT",a);process.removeListener("SIGTERM",a)}return{exitCode:0,payload:{},suppressOutput:true}}try{const s=await t.buildApp({appDirectory:r,check:n.check});if(n.check&&s.staleFiles.length>0){return{...p(1,"BUILD_STALE",null,`Stale generated files: ${s.staleFiles.join(", ")} \u2192 Fix: ${i}`),payload:{ok:false,exit:1,error:{code:"BUILD_STALE",status:null},appDir:r,stale:s.staleFiles}}}if(n.check){return P({ok:true,appDir:r,check:true,inSync:true,files:s.files,actions:s.actions})}const a=h.basename(r);const u=h.basename(h.dirname(r))==="apps";return{...P({ok:true,appDir:r,files:s.files,actions:s.actions}),stderr:u?`\u2192 Next: crewx app check ${a}`:`\u2192 Next: put ${a} in the workspace apps/ folder, then crewx app check ${a}`}}catch(s){return p(1,"BUILD_FAILED",null,oe(s))}}async function bt(e,{clock:t=b.realClock}={}){if(e.length===1&&(e[0]==="--help"||e[0]==="-h")){return{exitCode:0,payload:{ok:true},stdout:Dt}}if(e[0]==="build")return kt(e);if(e[0]==="dev")return St(e);if(e[0]==="check")return mt(e);if(e[0]==="run"&&e[1]==="--dev")return vt(e);if(e[0]==="usage")return ht(e);const n=pe(e);if(!n)return $();const r=Ie();if(_e(r))return r;if(n.command==="list"){const c=await H(r);if(!c.ok)return c.outcome;return P({ok:true,apps:c.value})}if(n.command==="receipt"){const c=n.positional[0];const d=(0,b.clampWaitSeconds)(n.waitSeconds??0);if(d===0)return(await Ae(r,c)).value;const f=await(0,b.pollUntilSettled)(()=>Ae(r,c),d,t);if(f.state!=="pending")return f.value;return ut(c,d)}if(n.command==="state"){const c=await st(r,n.positional[0]);if(!c.ok)return c.outcome;return P({ok:true,...c.value})}if(n.command==="open"){const c=n.positional[0];const d=await H(r);if(!d.ok)return d.outcome;const f=re(d.value,c);if(!f)return p(6,"MCP_APP_NOT_FOUND",null);const y=await ge(r,f);if(!y.ok)return y.outcome;return P({ok:true,...y.value})}const[o,i]=n.positional;const s=n.requestId??`cxa_${(0,ie.randomBytes)(16).toString("base64url")}`;let a=o;if(!o.startsWith(le)){const c=await H(r,Q);if(!c.ok)return Z(c.outcome,s);const d=re(c.value,o);if(!d)return p(6,"MCP_APP_NOT_FOUND",null);const f=await ge(r,d,Q);if(!f.ok)return Z(f.outcome,s);a=f.value.instanceId}const u=await it(r,a,i,s,n.input,Q);if(!u.ok)return lt(Z(u.outcome,s));return{...P({ok:true,...u.value}),stderr:`\u2192 Check: crewx app state ${u.value.instanceId}`}}