@crewx/app 0.1.0-rc.9 → 0.1.0-rc.91

package/dist/src/engine.js

@@ -1,1200 +1,8 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.executeAppCommand = executeAppCommand;
-const node_crypto_1 = require("node:crypto");
-const node_child_process_1 = require("node:child_process");
-const fs = __importStar(require("node:fs"));
-const http = __importStar(require("node:http"));
-const https = __importStar(require("node:https"));
-const path = __importStar(require("node:path"));
-const node_url_1 = require("node:url");
-const crewx_api_credential_1 = require("@crewx/shared/crewx-api-credential");
-const REQUEST_TIMEOUT_MS = 15000;
-const DEV_ACTION_TIMEOUT_MS = 60000;
-const MAX_BUILD_OUTPUT_BYTES = 64 * 1024;
-const APP_ID_PREFIX = 'uic_';
-const APP_DEV_API_PREFIX = '/api/v1';
-const APP_DEV_CAPABILITIES_PATH = '/api/v1/app-dev/capabilities';
-const APP_DEV_SESSIONS_PATH = '/api/v1/app-dev/sessions';
-const APP_DEV_TOO_OLD_EXIT = 12;
-const APP_DEV_CHECK_FAILED_EXIT = 13;
-const REQUEST_ID_PATTERN = /^[A-Za-z0-9_-]{8,128}$/;
-const LOOPBACK_HOSTS = new Set(['127.0.0.1', '[::1]', 'localhost']);
-const DEFAULT_APP_DEV_ENDPOINT = 'http://localhost:8150';
-const BLOCKED_ROUTE_MESSAGE = 'Do not work around this by clicking the screen or using another browser. Report that you could not use the App route.';
-const UNAUTHORIZED_MESSAGE = 'Do not retry. Report the failure.';
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function failure(exitCode, code, status, message) {
-    let stderr = message;
-    if (!stderr && (exitCode === 3 || exitCode === 9 || exitCode === 10 || exitCode === 11)) {
-        stderr = BLOCKED_ROUTE_MESSAGE;
-    }
-    else if (!stderr && exitCode === 4) {
-        stderr = UNAUTHORIZED_MESSAGE;
-    }
-    return {
-        exitCode,
-        payload: { ok: false, exit: exitCode, error: { code, status } },
-        ...(stderr ? { stderr } : {}),
-    };
-}
-function success(payload) {
-    return { exitCode: 0, payload };
-}
-function usageFailure() {
-    return failure(2, 'USAGE', null);
-}
-function parseCommand(args) {
-    const command = args[0];
-    if (command !== 'list' && command !== 'open' && command !== 'state' && command !== 'run' && command !== 'receipt') {
-        return null;
-    }
-    const positional = [];
-    const options = new Map();
-    for (let index = 1; index < args.length; index += 1) {
-        const arg = args[index];
-        if (!arg.startsWith('--')) {
-            positional.push(arg);
-            continue;
-        }
-        const separator = arg.indexOf('=');
-        const key = separator >= 0 ? arg.slice(2, separator) : arg.slice(2);
-        const inlineValue = separator >= 0 ? arg.slice(separator + 1) : undefined;
-        if ((key !== 'input' && key !== 'request-id') || options.has(key))
-            return null;
-        const value = inlineValue ?? args[index + 1];
-        if (value === undefined)
-            return null;
-        if (inlineValue === undefined)
-            index += 1;
-        options.set(key, value);
-    }
-    if ((command === 'list' && positional.length !== 0)
-        || (command === 'open' && positional.length !== 1)
-        || (command === 'state' && (positional.length !== 1 || !positional[0].startsWith(APP_ID_PREFIX)))
-        || (command === 'run' && positional.length !== 2)
-        || (command === 'receipt' && positional.length !== 1)) {
-        return null;
-    }
-    if (command !== 'run' && (options.has('input') || options.has('request-id')))
-        return null;
-    let input = {};
-    if (options.has('input')) {
-        const raw = options.get('input');
-        try {
-            const parsed = JSON.parse(raw === '-' ? fs.readFileSync(0, 'utf8') : raw);
-            if (!isRecord(parsed))
-                return null;
-            input = parsed;
-        }
-        catch {
-            return null;
-        }
-    }
-    const requestId = options.get('request-id');
-    if (requestId !== undefined && !REQUEST_ID_PATTERN.test(requestId))
-        return null;
-    return {
-        command,
-        positional,
-        input,
-        ...(requestId !== undefined ? { requestId } : {}),
-    };
-}
-function getEndpoint(raw) {
-    if (!raw)
-        return null;
-    let endpoint;
-    try {
-        endpoint = new node_url_1.URL(raw);
-    }
-    catch {
-        return null;
-    }
-    if (!LOOPBACK_HOSTS.has(endpoint.hostname)
-        || (endpoint.protocol !== 'http:' && endpoint.protocol !== 'https:')
-        || endpoint.username !== ''
-        || endpoint.password !== ''
-        || endpoint.search !== ''
-        || endpoint.hash !== ''
-        || (endpoint.pathname !== '' && endpoint.pathname !== '/')) {
-        return null;
-    }
-    return endpoint;
-}
-function segment(value) {
-    return encodeURIComponent(value);
-}
-function basePath(workspaceSlug, threadId) {
-    return [
-        'api', 'v1', 'ws', segment(workspaceSlug), 'threads', segment(threadId),
-    ].join('/');
-}
-function pathFor(context, ...segments) {
-    return `/${context.basePath}/${segments.map(segment).join('/')}`;
-}
-function responseErrorCode(data, fallback) {
-    if (!isRecord(data) || !isRecord(data['error']))
-        return fallback;
-    const code = data['error']['code'];
-    return typeof code === 'string' && code.length > 0 ? code : fallback;
-}
-function classifyHttpFailure(response) {
-    const { status, data } = response;
-    if (status >= 300 && status < 400)
-        return failure(9, 'ENDPOINT_REJECTED', status);
-    if (status === 401)
-        return failure(4, responseErrorCode(data, 'UNAUTHORIZED'), status);
-    if (status === 403)
-        return failure(5, responseErrorCode(data, 'FORBIDDEN'), status);
-    if (status === 404)
-        return failure(6, responseErrorCode(data, 'NOT_FOUND'), status);
-    if (status === 409) {
-        const code = responseErrorCode(data, 'CONFLICT');
-        if (code === 'APPROVAL_ALREADY_PENDING') {
-            const error = isRecord(data) && isRecord(data['error']) ? data['error'] : undefined;
-            const details = error && isRecord(error['details']) ? error['details'] : undefined;
-            const receiptId = error?.['receiptId'] ?? details?.['receiptId']
-                ?? (isRecord(data) ? data['receiptId'] : undefined);
-            return {
-                exitCode: 8,
-                payload: {
-                    ok: false,
-                    exit: 8,
-                    error: { code, status },
-                    ...(typeof receiptId === 'string' ? { receiptId } : {}),
-                },
-            };
-        }
-        return failure(7, code, status);
-    }
-    return failure(1, responseErrorCode(data, 'ERROR'), status);
-}
-function networkFailure(error) {
-    const errorCode = isRecord(error) && typeof error['code'] === 'string'
-        ? error['code']
-        : '';
-    const codexBlocked = process.env['CODEX_SANDBOX_NETWORK_DISABLED'] === '1';
-    const errnoBlocked = !codexBlocked && (errorCode === 'EPERM' || errorCode === 'EACCES');
-    return codexBlocked || errnoBlocked
-        ? failure(11, 'SANDBOX_BLOCKED', null)
-        : failure(10, 'SERVER_UNREACHABLE', null);
-}
-function requestJson(endpoint, authorizationToken, method, requestPath, body, timeoutMs = REQUEST_TIMEOUT_MS) {
-    const requestFunction = endpoint.protocol === 'https:' ? https.request : http.request;
-    const hostname = endpoint.hostname === '[::1]'
-        ? '::1'
-        : endpoint.hostname;
-    const port = endpoint.port ? Number(endpoint.port) : undefined;
-    const bodyText = body === undefined ? undefined : JSON.stringify(body);
-    const request = requestFunction({
-        protocol: endpoint.protocol,
-        hostname,
-        ...(port !== undefined ? { port } : {}),
-        method,
-        path: requestPath,
-        headers: {
-            Authorization: `Bearer ${authorizationToken}`,
-            Accept: 'application/json',
-            ...(bodyText !== undefined ? { 'Content-Type': 'application/json' } : {}),
-        },
-    }, (response) => {
-        const status = response.statusCode ?? 0;
-        if (status >= 300 && status < 400) {
-            response.destroy();
-            clearTimeout(timeout);
-            resolveResponse({ status, data: undefined, invalidJson: false, rawText: '' });
-            return;
-        }
-        const chunks = [];
-        response.setEncoding('utf8');
-        response.on('data', (chunk) => chunks.push(chunk));
-        response.once('error', (error) => failResponse(error));
-        response.once('end', () => {
-            clearTimeout(timeout);
-            const raw = chunks.join('');
-            try {
-                resolveResponse({ status, data: JSON.parse(raw), invalidJson: false, rawText: raw });
-            }
-            catch {
-                resolveResponse({ status, data: undefined, invalidJson: true, rawText: raw });
-            }
-        });
-    });
-    let socketError;
-    let resolveResponse;
-    let failResponse;
-    const result = new Promise((resolve, reject) => {
-        resolveResponse = resolve;
-        failResponse = reject;
-    });
-    const timeout = setTimeout(() => {
-        const error = new Error('Request timed out');
-        error.code = 'ETIMEDOUT';
-        request.destroy(error);
-    }, timeoutMs);
-    request.on('socket', (socket) => {
-        socket.once('error', (error) => {
-            socketError = error;
-        });
-    });
-    request.once('error', (error) => {
-        clearTimeout(timeout);
-        failResponse(socketError ?? error);
-    });
-    if (bodyText !== undefined)
-        request.write(bodyText);
-    request.end();
-    return result;
-}
-async function performRequest(context, method, requestPath, body) {
-    try {
-        const response = await requestJson(context.endpoint, context.ticket, method, requestPath, body);
-        if (response.status < 200 || response.status >= 300) {
-            return { ok: false, outcome: classifyHttpFailure(response) };
-        }
-        if (response.invalidJson || !isRecord(response.data) || response.data['success'] !== true) {
-            return {
-                ok: false,
-                outcome: failure(1, responseErrorCode(response.data, 'ERROR'), response.status),
-            };
-        }
-        const data = response.data['data'];
-        if (!isRecord(data)) {
-            return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-        }
-        return { ok: true, value: data, status: response.status };
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-function appDevTooOld(status) {
-    return failure(APP_DEV_TOO_OLD_EXIT, 'SERVER_TOO_OLD', status, 'The running CrewX does not support App dev mode.');
-}
-function appDevCredentialFailure(error) {
-    if (error instanceof crewx_api_credential_1.CrewxCredentialError) {
-        return failure(error.exitCode, error.code, null, error.message);
-    }
-    return failure(1, 'ERROR', null);
-}
-function appDevEndpoint() {
-    const raw = process.env['CREWX_ENDPOINT']?.trim() || DEFAULT_APP_DEV_ENDPOINT;
-    return getEndpoint(raw);
-}
-function isDirectory(directory) {
-    try {
-        return fs.statSync(directory).isDirectory();
-    }
-    catch {
-        return false;
-    }
-}
-function isFile(filePath) {
-    try {
-        return fs.statSync(filePath).isFile();
-    }
-    catch {
-        return false;
-    }
-}
-function resolveWorkspaceRoot(startDirectory = process.cwd()) {
-    let current = path.resolve(startDirectory);
-    while (true) {
-        if (isDirectory(path.join(current, 'apps')) || isFile(path.join(current, 'crewx.yaml'))) {
-            try {
-                return fs.realpathSync(current);
-            }
-            catch {
-                return undefined;
-            }
-        }
-        const parent = path.dirname(current);
-        if (parent === current)
-            return undefined;
-        current = parent;
-    }
-}
-function readAppManifest(directory) {
-    try {
-        const parsed = JSON.parse(fs.readFileSync(path.join(directory, 'ui-plugin.json'), 'utf8'));
-        return isRecord(parsed) ? parsed : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function isPathInside(parentDirectory, candidate) {
-    const relative = path.relative(parentDirectory, candidate);
-    return relative !== '' && relative !== '..' && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative);
-}
-function resolveWorkspaceApp(workspacePath, appSelector) {
-    if (!appSelector || appSelector === '.' || appSelector === '..' || /[\\/]/.test(appSelector)) {
-        return failure(2, 'USAGE', null, 'App must be a folder name or pluginId.');
-    }
-    const appsDirectory = path.join(workspacePath, 'apps');
-    const directDirectory = path.join(appsDirectory, appSelector);
-    let appDirectory = isDirectory(directDirectory) ? directDirectory : undefined;
-    if (!appDirectory && isDirectory(appsDirectory)) {
-        try {
-            for (const item of fs.readdirSync(appsDirectory, { withFileTypes: true })) {
-                if (!item.isDirectory())
-                    continue;
-                const candidate = path.join(appsDirectory, item.name);
-                const manifest = readAppManifest(candidate);
-                if (manifest?.['pluginId'] === appSelector) {
-                    appDirectory = candidate;
-                    break;
-                }
-            }
-        }
-        catch {
-        }
-    }
-    let appId = appSelector;
-    if (appDirectory) {
-        try {
-            appDirectory = fs.realpathSync(appDirectory);
-        }
-        catch {
-            return failure(6, 'APP_INVALID', null);
-        }
-        if (!isPathInside(fs.realpathSync(appsDirectory), appDirectory)) {
-            return failure(2, 'USAGE', null, 'App folder must be inside the workspace apps directory.');
-        }
-        const manifest = readAppManifest(appDirectory);
-        if (typeof manifest?.['pluginId'] === 'string' && manifest['pluginId'].length > 0) {
-            appId = manifest['pluginId'];
-        }
-    }
-    else {
-        appDirectory = directDirectory;
-    }
-    return { appId, appDirectory };
-}
-function successEnvelope(response) {
-    if (response.status < 200 || response.status >= 300) {
-        return { ok: false, outcome: classifyHttpFailure(response) };
-    }
-    if (response.invalidJson || !isRecord(response.data) || response.data['success'] !== true
-        || !isRecord(response.data['data'])) {
-        return { ok: false, outcome: failure(1, responseErrorCode(response.data, 'ERROR'), response.status) };
-    }
-    return {
-        ok: true,
-        value: response.data,
-        status: response.status,
-        rawText: response.rawText,
-    };
-}
-async function checkAppDevCapabilities(endpoint, token) {
-    try {
-        const response = await requestJson(endpoint, token, 'GET', APP_DEV_CAPABILITIES_PATH);
-        if (response.status === 404 || (response.status >= 300 && response.status < 400)
-            || response.invalidJson) {
-            return { ok: false, outcome: appDevTooOld(response.status) };
-        }
-        if (response.status < 200 || response.status >= 300) {
-            return { ok: false, outcome: classifyHttpFailure(response) };
-        }
-        if (!isRecord(response.data) || response.data['success'] !== true
-            || !isRecord(response.data['data']) || response.data['data']['appDev'] !== 1) {
-            return { ok: false, outcome: appDevTooOld(response.status) };
-        }
-        return {
-            ok: true,
-            value: response.data,
-            status: response.status,
-            rawText: response.rawText,
-        };
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-async function prepareAppDevContext(appSelector) {
-    const endpoint = appDevEndpoint();
-    if (!endpoint)
-        return { ok: false, outcome: failure(9, 'ENDPOINT_REJECTED', null) };
-    let token;
-    try {
-        token = (0, crewx_api_credential_1.resolveCrewxApiCredential)('app-dev').token;
-    }
-    catch (error) {
-        return { ok: false, outcome: appDevCredentialFailure(error) };
-    }
-    const capabilities = await checkAppDevCapabilities(endpoint, token);
-    if (!capabilities.ok)
-        return { ok: false, outcome: capabilities.outcome };
-    const workspacePath = resolveWorkspaceRoot();
-    if (!workspacePath) {
-        return {
-            ok: false,
-            outcome: failure(2, 'WORKSPACE_NOT_FOUND', null, 'No workspace root with apps/ or crewx.yaml was found.'),
-        };
-    }
-    const app = resolveWorkspaceApp(workspacePath, appSelector);
-    if ('exitCode' in app)
-        return { ok: false, outcome: app };
-    let response;
-    try {
-        response = await requestJson(endpoint, token, 'POST', APP_DEV_SESSIONS_PATH, {
-            workspacePath,
-            appId: app.appId,
-        });
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-    const opened = successEnvelope(response);
-    if (!opened.ok)
-        return { ok: false, outcome: opened.outcome };
-    const data = opened.value['data'];
-    if (!isRecord(data)
-        || typeof data['workspaceSlug'] !== 'string'
-        || typeof data['appId'] !== 'string'
-        || typeof data['devPath'] !== 'string'
-        || !data['devPath'].startsWith('/ws/')) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    if (!isDirectory(app.appDirectory)) {
-        return { ok: false, outcome: failure(6, 'APP_INVALID', response.status) };
-    }
-    return {
-        ok: true,
-        context: {
-            endpoint,
-            token,
-            workspacePath,
-            appId: data['appId'],
-            appDirectory: app.appDirectory,
-            devPath: data['devPath'],
-        },
-    };
-}
-function appDevPath(context, ...segments) {
-    return `${APP_DEV_API_PREFIX}${context.devPath}${segments.length > 0 ? `/${segments.map(segment).join('/')}` : ''}`;
-}
-async function performAppDevRequest(context, method, requestPath, body, timeoutMs = REQUEST_TIMEOUT_MS) {
-    try {
-        const response = await requestJson(context.endpoint, context.token, method, requestPath, body, timeoutMs);
-        return successEnvelope(response);
-    }
-    catch (error) {
-        return { ok: false, outcome: networkFailure(error) };
-    }
-}
-function appIdFrom(value) {
-    const direct = value['appId'] ?? value['id'];
-    if (typeof direct === 'string' && direct.length > 0)
-        return direct;
-    const definition = value['definition'];
-    if (isRecord(definition) && typeof definition['id'] === 'string')
-        return definition['id'];
-    return undefined;
-}
-function hashFrom(value) {
-    const direct = value['definitionHash'];
-    if (typeof direct === 'string' && direct.length > 0)
-        return direct;
-    const definition = value['definition'];
-    if (isRecord(definition) && typeof definition['hash'] === 'string') {
-        return definition['hash'];
-    }
-    return undefined;
-}
-function projectLauncher(value) {
-    if (!isRecord(value))
-        return undefined;
-    const appId = appIdFrom(value);
-    const definitionHash = hashFrom(value);
-    if (!appId || !definitionHash)
-        return undefined;
-    const actions = value['agentActions'];
-    return {
-        appId,
-        name: typeof value['name'] === 'string' ? value['name'] : '',
-        description: typeof value['description'] === 'string' ? value['description'] : '',
-        definitionHash,
-        agentActions: Array.isArray(actions) ? actions : [],
-    };
-}
-async function loadLaunchers(context) {
-    const response = await performRequest(context, 'GET', pathFor(context, 'ui-instances', 'apps'));
-    if (!response.ok)
-        return response;
-    const apps = response.value['apps'];
-    if (!Array.isArray(apps)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const projected = apps.map(projectLauncher);
-    if (projected.some((item) => item === undefined)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    return { ok: true, value: projected, status: response.status };
-}
-function findLauncher(apps, appId) {
-    return apps.find((app) => app.appId === appId);
-}
-async function openLauncher(context, launcher) {
-    const response = await performRequest(context, 'POST', pathFor(context, 'ui-instances', 'open'), {
-        appId: launcher.appId,
-        expectedDefinitionHash: launcher.definitionHash,
-    });
-    if (!response.ok)
-        return response;
-    const instance = isRecord(response.value['instance']) ? response.value['instance'] : response.value;
-    if (!isRecord(instance)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const instanceId = instance['instanceId'] ?? instance['id'];
-    const revision = instance['revision'];
-    if (typeof instanceId !== 'string' || typeof revision !== 'number') {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const ai = isRecord(response.value['ai'])
-        ? response.value['ai']
-        : isRecord(instance['ai']) ? instance['ai'] : undefined;
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            appId: launcher.appId,
-            definitionHash: launcher.definitionHash,
-            instanceId,
-            revision,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-        },
-    };
-}
-async function readInstanceState(context, instanceId) {
-    const response = await performRequest(context, 'GET', pathFor(context, 'ui-instances', instanceId));
-    if (!response.ok)
-        return response;
-    const value = response.value;
-    const responseInstanceId = value['instanceId'];
-    const revision = value['revision'];
-    if (typeof responseInstanceId !== 'string' || typeof revision !== 'number') {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const ai = isRecord(value['ai']) ? value['ai'] : undefined;
-    const passthrough = (key) => {
-        if (Object.prototype.hasOwnProperty.call(value, key))
-            return { [key]: value[key] };
-        if (ai && Object.prototype.hasOwnProperty.call(ai, key))
-            return { [key]: ai[key] };
-        return {};
-    };
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            instanceId: responseInstanceId,
-            revision,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-            buttons: ai && Object.prototype.hasOwnProperty.call(ai, 'buttons') ? ai['buttons'] : null,
-            ...passthrough('agentAccess'),
-            ...passthrough('modelContext'),
-            ...passthrough('pendingApproval'),
-        },
-    };
-}
-async function runAction(context, instanceId, actionId, requestId, input) {
-    const response = await performRequest(context, 'POST', pathFor(context, 'ui-instances', instanceId, 'actions'), { actionId, requestId, input });
-    if (!response.ok)
-        return response;
-    const receipt = response.value['receipt'];
-    if (!isRecord(receipt)) {
-        return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-    }
-    const receiptId = receipt['receiptId'] ?? receipt['id'];
-    const approval = response.value['approval'];
-    if (response.status === 202 && isRecord(approval)) {
-        const approvalId = approval['approvalId'];
-        const expiresAt = approval['expiresAt'];
-        const resolvedRequestId = typeof receipt['requestId'] === 'string'
-            ? receipt['requestId']
-            : typeof approval['requestId'] === 'string'
-                ? approval['requestId']
-                : requestId;
-        if (typeof receiptId !== 'string' || typeof approvalId !== 'string'
-            || (typeof expiresAt !== 'string' && typeof expiresAt !== 'number')) {
-            return { ok: false, outcome: failure(1, 'ERROR', response.status) };
-        }
-        return {
-            ok: false,
-            outcome: {
-                exitCode: 8,
-                payload: {
-                    ok: false,
-                    exit: 8,
-                    error: { code: 'APPROVAL_PENDING', status: 202 },
-                    receiptId,
-                    requestId: resolvedRequestId,
-                    approvalId,
-                    expiresAt,
-                },
-            },
-        };
-    }
-    const status = receipt['status'] ?? (response.status === 202 ? 'requested' : 'settled');
-    const resolve = response.value['resolve'];
-    const ai = isRecord(resolve) && isRecord(resolve['ai']) ? resolve['ai'] : undefined;
-    return {
-        ok: true,
-        status: response.status,
-        value: {
-            receiptId: typeof receiptId === 'string' ? receiptId : '',
-            requestId: typeof receipt['requestId'] === 'string' ? receipt['requestId'] : requestId,
-            instanceId,
-            actionId: typeof receipt['actionId'] === 'string' ? receipt['actionId'] : actionId,
-            status,
-            outcome: Object.prototype.hasOwnProperty.call(receipt, 'outcome') ? receipt['outcome'] : null,
-            state: ai && Object.prototype.hasOwnProperty.call(ai, 'state') ? ai['state'] : null,
-        },
-    };
-}
-function contextFromEnvironment() {
-    const ticket = process.env['CREWX_TASK_TICKET'] ?? '';
-    const workspaceSlug = process.env['CREWX_WORKSPACE_SLUG'] ?? '';
-    const threadId = process.env['CREWX_THREAD_ID'] ?? '';
-    if (!ticket.startsWith('crewxtk_') || !workspaceSlug || !threadId) {
-        return failure(3, 'NO_TICKET', null);
-    }
-    const endpoint = getEndpoint(process.env['CREWX_ENDPOINT']);
-    if (!endpoint)
-        return failure(9, 'ENDPOINT_REJECTED', null);
-    return {
-        ticket,
-        workspaceSlug,
-        threadId,
-        endpoint,
-        basePath: basePath(workspaceSlug, threadId),
-    };
-}
-function isAppCommandOutcome(value) {
-    return 'exitCode' in value;
-}
-function parseSingleAppCommand(args, command) {
-    if (args[0] !== command)
-        return null;
-    const positional = [];
-    let flag = false;
-    for (const arg of args.slice(1)) {
-        if (arg === (command === 'dev' ? '--no-open' : '--json')) {
-            if (flag)
-                return null;
-            flag = true;
-        }
-        else if (arg.startsWith('--')) {
-            return null;
-        }
-        else {
-            positional.push(arg);
-        }
-    }
-    if (positional.length !== 1)
-        return null;
-    return { appSelector: positional[0], flag };
-}
-function standardJsonOutput(outcome) {
-    return `${JSON.stringify(outcome.payload)}\n`;
-}
-async function executeAppCheck(args) {
-    const parsed = parseSingleAppCommand(args, 'check');
-    if (!parsed)
-        return usageFailure();
-    const prepared = await prepareAppDevContext(parsed.appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const response = await performAppDevRequest(prepared.context, 'GET', appDevPath(prepared.context, 'check'));
-    if (!response.ok)
-        return response.outcome;
-    const data = response.value['data'];
-    if (!isRecord(data))
-        return failure(1, 'ERROR', response.status);
-    const summary = isRecord(data['summary']) ? data['summary'] : {};
-    const items = Array.isArray(data['items']) ? data['items'] : [];
-    const errors = typeof summary['errors'] === 'number'
-        ? summary['errors']
-        : items.filter((item) => isRecord(item) && item['severity'] === 'error').length;
-    const warnings = typeof summary['warnings'] === 'number'
-        ? summary['warnings']
-        : items.filter((item) => isRecord(item) && item['severity'] === 'warning').length;
-    const exitCode = errors === 0 ? 0 : APP_DEV_CHECK_FAILED_EXIT;
-    if (parsed.flag) {
-        return {
-            exitCode,
-            payload: response.value,
-            stdout: `${response.rawText ?? standardJsonOutput({ exitCode, payload: response.value })}`
-                + (response.rawText?.endsWith('\n') ? '' : '\n'),
-            suppressOutput: true,
-        };
-    }
-    const lines = items.flatMap((item) => {
-        if (!isRecord(item))
-            return [];
-        const severity = item['severity'];
-        const marker = severity === 'error' ? '✕' : severity === 'ok' ? '✓' : '!';
-        const where = typeof item['where'] === 'string' ? item['where'] : '';
-        const code = typeof item['code'] === 'string' ? item['code'] : '';
-        return [`${marker} ${where}  ${code}`];
-    });
-    lines.push(`Summary: ${errors} errors, ${warnings} warnings`);
-    return {
-        exitCode,
-        payload: {},
-        stdout: `${lines.join('\n')}\n`,
-        suppressOutput: true,
-    };
-}
-async function getPairingDevUrl(context) {
-    let pairingToken;
-    try {
-        pairingToken = (0, crewx_api_credential_1.resolveCrewxApiCredential)('pairing').token;
-    }
-    catch (error) {
-        return appDevCredentialFailure(error);
-    }
-    let response;
-    try {
-        response = await requestJson(context.endpoint, pairingToken, 'POST', '/api/v1/auth/local/code');
-    }
-    catch (error) {
-        return networkFailure(error);
-    }
-    if (response.status < 200 || response.status >= 300) {
-        return classifyHttpFailure(response);
-    }
-    if (response.invalidJson || !isRecord(response.data) || typeof response.data['url'] !== 'string') {
-        return failure(1, 'PAIRING_CODE_INVALID', response.status);
-    }
-    try {
-        const pairingUrl = new node_url_1.URL(response.data['url']);
-        const pairingEndpoint = getEndpoint(pairingUrl.origin);
-        const match = pairingUrl.hash.match(/^#pair=(.+)$/);
-        if (!pairingEndpoint || !match)
-            return failure(1, 'PAIRING_CODE_INVALID', response.status);
-        return `${pairingEndpoint.origin}${context.devPath}#pair=${encodeURIComponent(match[1])}`;
-    }
-    catch {
-        return failure(1, 'PAIRING_CODE_INVALID', response.status);
-    }
-}
-async function openPlatformUrl(url) {
-    const command = process.platform === 'darwin'
-        ? 'open'
-        : process.platform === 'win32' ? 'explorer.exe' : 'xdg-open';
-    const child = (0, node_child_process_1.spawn)(command, [url], { detached: true, stdio: 'ignore' });
-    await new Promise((resolve, reject) => {
-        child.once('error', reject);
-        child.once('spawn', () => {
-            child.unref();
-            resolve();
-        });
-    });
-}
-async function executeAppDevAction(args) {
-    const parsed = parseCommand(['run', ...args.slice(2)]);
-    if (!parsed || parsed.command !== 'run')
-        return usageFailure();
-    const [appSelector, actionId] = parsed.positional;
-    const prepared = await prepareAppDevContext(appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const state = await performAppDevRequest(prepared.context, 'GET', appDevPath(prepared.context, 'state'));
-    if (!state.ok)
-        return state.outcome;
-    const stateData = state.value['data'];
-    if (!isRecord(stateData) || typeof stateData['revision'] !== 'number') {
-        return failure(1, 'APP_DEV_RESPONSE_INVALID', state.status);
-    }
-    const requestId = parsed.requestId ?? `cxa_${(0, node_crypto_1.randomBytes)(16).toString('base64url')}`;
-    const response = await performAppDevRequest(prepared.context, 'POST', appDevPath(prepared.context, 'actions'), {
-        actionId,
-        requestId,
-        input: parsed.input,
-        expectedRevision: stateData['revision'],
-    }, DEV_ACTION_TIMEOUT_MS);
-    if (!response.ok)
-        return response.outcome;
-    const responseData = response.value['data'];
-    const receipt = isRecord(responseData) && isRecord(responseData['receipt'])
-        ? responseData['receipt']
-        : undefined;
-    return {
-        exitCode: receipt?.['outcome'] === 'succeeded' ? 0 : 1,
-        payload: response.value,
-        stdout: `${response.rawText ?? standardJsonOutput({ exitCode: 0, payload: response.value })}`
-            + (response.rawText?.endsWith('\n') ? '' : '\n'),
-        suppressOutput: true,
-    };
-}
-function hasBuildScript(appDirectory) {
-    try {
-        const packageJson = JSON.parse(fs.readFileSync(path.join(appDirectory, 'package.json'), 'utf8'));
-        if (!isRecord(packageJson) || !isRecord(packageJson['scripts']))
-            return false;
-        const build = packageJson['scripts']['build'];
-        return typeof build === 'string' && build.trim().length > 0;
-    }
-    catch {
-        return false;
-    }
-}
-function buildOutputPaths(appDirectory) {
-    const result = new Set([path.normalize('ui-plugin.json')]);
-    const manifest = readAppManifest(appDirectory);
-    const entry = manifest?.['entry'];
-    if (typeof entry === 'string' && entry.length > 0 && !path.isAbsolute(entry)) {
-        const normalized = path.normalize(entry);
-        if (normalized !== '..' && !normalized.startsWith(`..${path.sep}`))
-            result.add(normalized);
-    }
-    return result;
-}
-function outputFingerprint(appDirectory, relativePath) {
-    try {
-        const stats = fs.statSync(path.join(appDirectory, relativePath));
-        return `${stats.size}:${stats.mtimeMs}:${stats.ino}`;
-    }
-    catch {
-        return null;
-    }
-}
-function snapshotBuildOutputs(appDirectory, paths) {
-    return new Map([...paths].map((relativePath) => [
-        relativePath,
-        outputFingerprint(appDirectory, relativePath),
-    ]));
-}
-function runNpmBuild(appDirectory, onChild) {
-    const startedAt = Date.now();
-    let output = '';
-    let settled = false;
-    const appendOutput = (chunk) => {
-        const next = Buffer.from(output + (Buffer.isBuffer(chunk) ? chunk.toString('utf8') : chunk), 'utf8');
-        output = next.length > MAX_BUILD_OUTPUT_BYTES
-            ? next.subarray(next.length - MAX_BUILD_OUTPUT_BYTES).toString('utf8')
-            : next.toString('utf8');
-    };
-    return new Promise((resolve) => {
-        const child = (0, node_child_process_1.spawn)('npm', ['run', 'build'], {
-            cwd: appDirectory,
-            env: process.env,
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        onChild(child);
-        child.stdout?.on('data', appendOutput);
-        child.stderr?.on('data', appendOutput);
-        const finish = (ok) => {
-            if (settled)
-                return;
-            settled = true;
-            onChild(undefined);
-            resolve({
-                ok,
-                ms: Math.max(0, Date.now() - startedAt),
-                output,
-            });
-        };
-        child.once('error', (error) => {
-            appendOutput(`${error.message}\n`);
-            finish(false);
-        });
-        child.once('close', (code) => finish(code === 0));
-    });
-}
-function responseCode(outcome) {
-    const error = outcome.payload['error'];
-    return isRecord(error) && typeof error['code'] === 'string' ? error['code'] : 'ERROR';
-}
-async function postAppDevReload(context, body) {
-    const response = await performAppDevRequest(context, 'POST', appDevPath(context, 'reload'), body);
-    if (!response.ok)
-        return { errorCode: responseCode(response.outcome) };
-    const data = response.value['data'];
-    return isRecord(data) && typeof data['generation'] === 'number'
-        ? { generation: data['generation'] }
-        : { errorCode: 'APP_DEV_RESPONSE_INVALID' };
-}
-async function runAppDevWatcher(context, buildEnabled) {
-    const parentPid = process.ppid;
-    let watcher;
-    try {
-        watcher = fs.watch(context.appDirectory, { recursive: true }, (_event, filename) => {
-            onFileChange(filename);
-        });
-    }
-    catch (error) {
-        return failure(1, 'WATCH_FAILED', null, error instanceof Error ? error.message : 'Unable to watch the App folder.');
-    }
-    let closed = false;
-    let stopRequested = false;
-    let cycleRunning = false;
-    let queuedChange = false;
-    let queuedPath = '';
-    let pendingPath = '';
-    let debounceTimer;
-    let parentCheckTimer;
-    let activeBuild;
-    let finalOutcome = { exitCode: 0, payload: {}, suppressOutput: true };
-    const recentOutputEvents = new Map();
-    let resolveRun;
-    const result = new Promise((resolve) => {
-        resolveRun = resolve;
-    });
-    const writeLine = (line) => {
-        process.stdout.write(`${line}\n`);
-    };
-    const finish = () => {
-        if (closed)
-            return;
-        closed = true;
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        if (parentCheckTimer)
-            clearInterval(parentCheckTimer);
-        process.removeListener('SIGINT', onSignal);
-        process.removeListener('SIGTERM', onSignal);
-        resolveRun(finalOutcome);
-    };
-    const onSignal = () => {
-        if (stopRequested)
-            return;
-        stopRequested = true;
-        watcher.close();
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        if (activeBuild && activeBuild.exitCode === null)
-            activeBuild.kill('SIGTERM');
-        if (!cycleRunning)
-            finish();
-    };
-    const onFileChange = (filename) => {
-        if (stopRequested || closed)
-            return;
-        const relativePath = filename === null ? '' : path.normalize(filename.toString());
-        const parts = relativePath.split(path.sep);
-        if (parts.some((part) => part === 'node_modules' || part === '.crewx' || part === 'dist'))
-            return;
-        const outputPaths = buildEnabled ? buildOutputPaths(context.appDirectory) : new Set();
-        if (activeBuild && outputPaths.has(relativePath))
-            return;
-        const suppressedUntil = recentOutputEvents.get(relativePath);
-        if (suppressedUntil !== undefined) {
-            if (Date.now() <= suppressedUntil)
-                return;
-            recentOutputEvents.delete(relativePath);
-        }
-        if (cycleRunning) {
-            queuedChange = true;
-            queuedPath = relativePath || 'App files';
-            return;
-        }
-        pendingPath = relativePath || 'App files';
-        if (debounceTimer)
-            clearTimeout(debounceTimer);
-        debounceTimer = setTimeout(() => {
-            debounceTimer = undefined;
-            const changedPath = pendingPath || 'App files';
-            pendingPath = '';
-            void runCycle(changedPath, false);
-        }, 200);
-    };
-    const reloadLabel = async (body) => {
-        const reload = await postAppDevReload(context, body);
-        return reload.generation === undefined ? `failed ${reload.errorCode ?? 'ERROR'}` : String(reload.generation);
-    };
-    const runCycle = async (changedPath, initial) => {
-        if (stopRequested || closed)
-            return;
-        cycleRunning = true;
-        if (buildEnabled) {
-            const outputPaths = buildOutputPaths(context.appDirectory);
-            const before = snapshotBuildOutputs(context.appDirectory, outputPaths);
-            const build = await runNpmBuild(context.appDirectory, (child) => {
-                activeBuild = child;
-            });
-            const after = snapshotBuildOutputs(context.appDirectory, outputPaths);
-            for (const [outputPath, fingerprint] of after) {
-                if (before.get(outputPath) !== fingerprint) {
-                    recentOutputEvents.set(outputPath, Date.now() + 1000);
-                }
-            }
-            if (stopRequested) {
-                cycleRunning = false;
-                finish();
-                return;
-            }
-            const reloadBody = {
-                reason: 'build',
-                build: {
-                    ok: build.ok,
-                    ms: build.ms,
-                    ...(!build.ok ? { output: build.output } : {}),
-                },
-            };
-            const generationLabel = await reloadLabel(reloadBody);
-            writeLine(`${initial ? 'initial' : changedPath} -> build ${build.ok ? 'ok' : 'failed'} ${build.ms}ms -> reload ${generationLabel}`);
-        }
-        else if (!initial) {
-            const generationLabel = await reloadLabel({ reason: 'manual' });
-            writeLine(`${changedPath} -> reload ${generationLabel}`);
-        }
-        cycleRunning = false;
-        if (stopRequested) {
-            finish();
-            return;
-        }
-        if (queuedChange) {
-            const nextPath = queuedPath || 'App files';
-            queuedChange = false;
-            queuedPath = '';
-            void runCycle(nextPath, false);
-            return;
-        }
-        if (stopRequested)
-            finish();
-    };
-    watcher.once('error', (error) => {
-        finalOutcome = failure(1, 'WATCH_FAILED', null, error.message);
-        onSignal();
-    });
-    process.once('SIGINT', onSignal);
-    process.once('SIGTERM', onSignal);
-    parentCheckTimer = setInterval(() => {
-        if (process.ppid !== parentPid)
-            onSignal();
-    }, 1000);
-    parentCheckTimer.unref();
-    if (buildEnabled)
-        void runCycle('initial', true);
-    return result;
-}
-async function executeAppDev(args) {
-    const parsed = parseSingleAppCommand(args, 'dev');
-    if (!parsed)
-        return usageFailure();
-    const prepared = await prepareAppDevContext(parsed.appSelector);
-    if (!prepared.ok)
-        return prepared.outcome;
-    const browserUrl = `${prepared.context.endpoint.origin}${prepared.context.devPath}`;
-    process.stdout.write(`${browserUrl}\n`);
-    if (!parsed.flag) {
-        const pairingUrl = await getPairingDevUrl(prepared.context);
-        if (typeof pairingUrl !== 'string')
-            return pairingUrl;
-        try {
-            await openPlatformUrl(pairingUrl);
-        }
-        catch (error) {
-            return failure(1, 'BROWSER_OPEN_FAILED', null, error instanceof Error ? error.message : 'Could not open the App dev tab.');
-        }
-    }
-    return runAppDevWatcher(prepared.context, hasBuildScript(prepared.context.appDirectory));
-}
-async function executeAppCommand(args) {
-    if (args[0] === 'dev')
-        return executeAppDev(args);
-    if (args[0] === 'check')
-        return executeAppCheck(args);
-    if (args[0] === 'run' && args[1] === '--dev')
-        return executeAppDevAction(args);
-    const parsed = parseCommand(args);
-    if (!parsed)
-        return usageFailure();
-    const context = contextFromEnvironment();
-    if (isAppCommandOutcome(context))
-        return context;
-    if (parsed.command === 'list') {
-        const result = await loadLaunchers(context);
-        if (!result.ok)
-            return result.outcome;
-        return success({ ok: true, apps: result.value });
-    }
-    if (parsed.command === 'receipt') {
-        const receiptId = parsed.positional[0];
-        const response = await performRequest(context, 'GET', pathFor(context, 'ui-action-receipts', receiptId));
-        if (!response.ok)
-            return response.outcome;
-        const receipt = response.value['receipt'];
-        if (!isRecord(receipt))
-            return failure(1, 'ERROR', response.status);
-        return success({ ok: true, receipt });
-    }
-    if (parsed.command === 'state') {
-        const result = await readInstanceState(context, parsed.positional[0]);
-        if (!result.ok)
-            return result.outcome;
-        return success({ ok: true, ...result.value });
-    }
-    if (parsed.command === 'open') {
-        const appId = parsed.positional[0];
-        const list = await loadLaunchers(context);
-        if (!list.ok)
-            return list.outcome;
-        const launcher = findLauncher(list.value, appId);
-        if (!launcher)
-            return failure(6, 'MCP_APP_NOT_FOUND', null);
-        const opened = await openLauncher(context, launcher);
-        if (!opened.ok)
-            return opened.outcome;
-        return success({ ok: true, ...opened.value });
-    }
-    const [target, actionId] = parsed.positional;
-    const requestId = parsed.requestId ?? `cxa_${(0, node_crypto_1.randomBytes)(16).toString('base64url')}`;
-    let instanceId = target;
-    if (!target.startsWith(APP_ID_PREFIX)) {
-        const list = await loadLaunchers(context);
-        if (!list.ok)
-            return list.outcome;
-        const launcher = findLauncher(list.value, target);
-        if (!launcher)
-            return failure(6, 'MCP_APP_NOT_FOUND', null);
-        const opened = await openLauncher(context, launcher);
-        if (!opened.ok)
-            return opened.outcome;
-        instanceId = opened.value.instanceId;
-    }
-    const action = await runAction(context, instanceId, actionId, requestId, parsed.input);
-    if (!action.ok)
-        return action.outcome;
-    return success({ ok: true, ...action.value });
-}
-//# sourceMappingURL=engine.js.map
+"use strict";var We=exports&&exports.__createBinding||(Object.create?(function(e,n,t,r){if(r===void 0)r=t;var o=Object.getOwnPropertyDescriptor(n,t);if(!o||("get"in o?!n.__esModule:o.writable||o.configurable)){o={enumerable:true,get:function(){return n[t]}}}Object.defineProperty(e,r,o)}):(function(e,n,t,r){if(r===void 0)r=t;e[r]=n[t]}));var Ve=exports&&exports.__setModuleDefault||(Object.create?(function(e,n){Object.defineProperty(e,"default",{enumerable:true,value:n})}):function(e,n){e["default"]=n});var U=exports&&exports.__importStar||(function(){var e=function(n){e=Object.getOwnPropertyNames||function(t){var r=[];for(var o in t)if(Object.prototype.hasOwnProperty.call(t,o))r[r.length]=o;return r};return e(n)};return function(n){if(n&&n.__esModule)return n;var t={};if(n!=null){for(var r=e(n),o=0;o<r.length;o++)if(r[o]!=="default")We(t,n,r[o])}Ve(t,n);return t}})();Object.defineProperty(exports,"__esModule",{value:true});exports.executeAppCommand=zt;const pe=require("node:crypto");const de=require("node:child_process");const v=U(require("node:fs"));const le=U(require("node:http"));const fe=U(require("node:https"));const E=U(require("node:path"));const he=require("node:url");const te=require("@crewx/shared/crewx-api-credential");const D=require("./image-artifact.js");const j=require("./receipt-wait.js");const L=require("./usage.js");const N=15e3;const ne=3e4;const Je=6e4;const me=64*1024;const ye="uic_";const Ke="/api/v1";const He="/api/v1/app-dev/capabilities";const Xe="/api/v1/app-dev/sessions";const ze=12;const Ye=13;const Ze=/^[A-Za-z0-9_-]{8,128}$/;const Qe=new Set(["127.0.0.1","[::1]","localhost"]);const et="http://localhost:8150";const tt="Do not work around this by clicking the screen or using another browser. Report that you could not use the App route.";const nt="Do not retry. Report the failure.";const rt="The server did not answer in time. Retry once; if it happens again, report it.";function u(e){return e!==null&&typeof e==="object"&&!Array.isArray(e)}function d(e,n,t,r){let o=r;if(!o&&(e===3||e===9||e===10||e===11)){o=tt}else if(!o&&e===4){o=nt}return{exitCode:e,payload:{ok:false,exit:e,error:{code:n,status:t}},...o?{stderr:o}:{}}}function P(e){return{exitCode:0,payload:e}}function B(){return d(2,"USAGE",null)}function ge(e){const n=e[0];if(n!=="list"&&n!=="open"&&n!=="state"&&n!=="run"&&n!=="receipt"){return null}const t=[];const r=new Map;for(let a=1;a<e.length;a+=1){const c=e[a];if(!c.startsWith("--")){t.push(c);continue}const p=c.indexOf("=");const l=p>=0?c.slice(2,p):c.slice(2);const f=p>=0?c.slice(p+1):void 0;if(l!=="input"&&l!=="request-id"&&l!=="wait"||r.has(l))return null;const y=f??e[a+1];if(y===void 0)return null;if(f===void 0)a+=1;r.set(l,y)}if(n==="list"&&t.length!==0||n==="open"&&t.length!==1||n==="state"&&(t.length!==1||!t[0].startsWith(ye))||n==="run"&&t.length!==2||n==="receipt"&&t.length!==1){return null}if(n!=="run"&&(r.has("input")||r.has("request-id")))return null;if(n!=="receipt"&&r.has("wait"))return null;let o={};if(r.has("input")){const a=r.get("input");try{const c=JSON.parse(a==="-"?v.readFileSync(0,"utf8"):a);if(!u(c))return null;o=c}catch{return null}}const i=r.get("request-id");if(i!==void 0&&!Ze.test(i))return null;const s=r.has("wait")?(0,j.parseWaitSeconds)(r.get("wait")):void 0;if(s===null)return null;return{command:n,positional:t,input:o,...i!==void 0?{requestId:i}:{},...s!==void 0?{waitSeconds:s}:{}}}function re(e){if(!e)return null;let n;try{n=new he.URL(e)}catch{return null}if(!Qe.has(n.hostname)||n.protocol!=="http:"&&n.protocol!=="https:"||n.username!==""||n.password!==""||n.search!==""||n.hash!==""||n.pathname!==""&&n.pathname!=="/"){return null}return n}function J(e){return encodeURIComponent(e)}function ot(e,n){return["api","v1","ws",J(e),"threads",J(n)].join("/")}function $(e,...n){return`/${e.basePath}/${n.map(J).join("/")}`}function x(e,n){if(!u(e)||!u(e["error"]))return n;const t=e["error"]["code"];return typeof t==="string"&&t.length>0?t:n}function K(e){const{status:n,data:t}=e;if(n>=300&&n<400)return d(9,"ENDPOINT_REJECTED",n);if(n===401)return d(4,x(t,"UNAUTHORIZED"),n);if(n===403)return d(5,x(t,"FORBIDDEN"),n);if(n===404)return d(6,x(t,"NOT_FOUND"),n);if(n===409){const r=x(t,"CONFLICT");if(r==="APPROVAL_ALREADY_PENDING"){const o=u(t)&&u(t["error"])?t["error"]:void 0;const i=o&&u(o["details"])?o["details"]:void 0;const s=o?.["receiptId"]??i?.["receiptId"]??(u(t)?t["receiptId"]:void 0);return{exitCode:8,payload:{ok:false,exit:8,error:{code:r,status:n},...typeof s==="string"?{receiptId:s}:{}}}}return d(7,r,n)}return d(1,x(t,"ERROR"),n)}function F(e,n=true){const t=u(e)&&typeof e["code"]==="string"?e["code"]:"";const r=process.env["CODEX_SANDBOX_NETWORK_DISABLED"]==="1";const o=!r&&(t==="EPERM"||t==="EACCES");if(r||o)return d(11,"SANDBOX_BLOCKED",null);if(n&&t==="ETIMEDOUT"&&u(e)&&e["connectionEstablished"]===true){return d(14,"TIMED_OUT",null,rt)}return d(10,"SERVER_UNREACHABLE",null)}function oe(e,n){if(e.exitCode!==14)return e;return{...e,payload:{...e.payload,requestId:n},stderr:["The request timed out and its outcome is unknown.",`Retry the same command once with --request-id ${n}; the server will return the same request's receipt without running the action twice.`,`If it times out again, report "server response delayed, outcome unknown" with requestId ${n}.`,"Do not report success or failure, click the screen, or use another route."].join("\n")}}function q(e,n,t,r,o,i=N){const s=e.protocol==="https:"?fe.request:le.request;const a=e.hostname==="[::1]"?"::1":e.hostname;const c=e.port?Number(e.port):void 0;const p=o===void 0?void 0:JSON.stringify(o);const l=s({protocol:e.protocol,hostname:a,...c!==void 0?{port:c}:{},method:t,path:r,headers:{Authorization:`Bearer ${n}`,Accept:"application/json",...p!==void 0?{"Content-Type":"application/json"}:{}}},m=>{const _=m.statusCode??0;if(_>=300&&_<400){m.destroy();clearTimeout(g);h({status:_,data:void 0,invalidJson:false,rawText:""});return}const b=[];m.setEncoding("utf8");m.on("data",R=>b.push(R));m.once("error",R=>w(R));m.once("end",()=>{clearTimeout(g);const R=b.join("");try{h({status:_,data:JSON.parse(R),invalidJson:false,rawText:R})}catch{h({status:_,data:void 0,invalidJson:true,rawText:R})}})});let f;let y=false;let h;let w;const A=new Promise((m,_)=>{h=m;w=_});const g=setTimeout(()=>{const m=new Error("Request timed out");m.code="ETIMEDOUT";m.connectionEstablished=y;l.destroy(m)},i);l.on("socket",m=>{const _=()=>{y=true};if(e.protocol==="https:"){const b=m;if(b.authorized)_();else b.once("secureConnect",_)}else{if(m.connecting)m.once("connect",_);else _()}m.once("error",b=>{f=b})});l.once("error",m=>{clearTimeout(g);w(f??m)});if(p!==void 0)l.write(p);l.end();return A}function st(e,n,t,r,o=N){const i=e.protocol==="https:"?fe.request:le.request;const s=e.hostname==="[::1]"?"::1":e.hostname;const a=e.port?Number(e.port):void 0;let c;let p;let l=false;let f;const y=new Promise((g,m)=>{c=g;p=m});const h=g=>{if(l)return;l=true;clearTimeout(f);c(g)};const w=g=>{if(l)return;l=true;clearTimeout(f);p(g)};const A=i({protocol:e.protocol,hostname:s,...a!==void 0?{port:a}:{},method:"GET",path:t,headers:{Authorization:`Bearer ${n}`,Accept:"image/png"}},g=>{const m=g.statusCode??0;const _=typeof g.headers["content-type"]==="string"?g.headers["content-type"]:void 0;if(m>=300&&m<400){g.destroy();h({status:m,contentType:_,bytes:new Uint8Array(0),rawText:""});return}if(m>=200&&m<300&&_?.split(";",1)[0]?.trim().toLowerCase()!=="image/png"){g.destroy();h({status:m,contentType:_,bytes:new Uint8Array(0),rawText:""});return}const b=[];let R=0;const W=m>=200&&m<300?r:64*1024;g.on("data",T=>{if(l)return;const I=typeof T==="string"?Buffer.from(T):T;const O=new Uint8Array(I.byteLength);O.set(I);R+=O.byteLength;if(R>W){g.destroy();w(new D.AppCaptureImageError(m>=200&&m<300?"IMAGE_BYTE_COUNT_MISMATCH":"IMAGE_DOWNLOAD_FAILED",m));return}b.push(O)});g.once("aborted",()=>w(new Error("Image response was interrupted")));g.once("error",T=>w(T));g.once("end",()=>{const T=new Uint8Array(R);let I=0;for(const O of b){T.set(O,I);I+=O.byteLength}h({status:m,contentType:_,bytes:T,rawText:m>=200&&m<300?"":Buffer.from(T).toString("utf8")})})});f=setTimeout(()=>{const g=new Error("Image request timed out");g.code="ETIMEDOUT";A.destroy(g)},o);A.once("error",g=>w(g));A.end();return y}function it(e){try{const n=JSON.parse(e);if(!u(n))return void 0;const t=u(n["error"])?n["error"]:void 0;return t&&typeof t["code"]==="string"?t["code"]:void 0}catch{return void 0}}async function at(e,n,t){let r;try{r=await st(e.endpoint,e.ticket,$(e,"ui-action-receipts",n,"image"),t)}catch(o){if(o instanceof D.AppCaptureImageError)throw o;throw new D.AppCaptureImageError("IMAGE_DOWNLOAD_FAILED")}if(r.status<200||r.status>=300){throw new D.AppCaptureImageError(it(r.rawText)==="IMAGE_EXPIRED"?"IMAGE_EXPIRED":"IMAGE_DOWNLOAD_FAILED",r.status)}if(r.contentType?.split(";",1)[0]?.trim().toLowerCase()!=="image/png"){throw new D.AppCaptureImageError("IMAGE_INVALID_MIME",r.status)}if(r.bytes.byteLength!==t){throw new D.AppCaptureImageError("IMAGE_BYTE_COUNT_MISMATCH",r.status)}return r.bytes}async function G(e,n,t,r,o=N){try{const i=await q(e.endpoint,e.ticket,n,t,r,o);if(i.status<200||i.status>=300){return{ok:false,outcome:K(i)}}if(i.invalidJson||!u(i.data)||i.data["success"]!==true){return{ok:false,outcome:d(1,x(i.data,"ERROR"),i.status)}}const s=i.data["data"];if(!u(s)){return{ok:false,outcome:d(1,"ERROR",i.status)}}return{ok:true,value:s,status:i.status}}catch(i){return{ok:false,outcome:F(i)}}}function we(e){return d(ze,"SERVER_TOO_OLD",e,"The running CrewX does not support App dev mode.")}function Ee(e){if(e instanceof te.CrewxCredentialError){return d(e.exitCode,e.code,null,e.message)}return d(1,"ERROR",null)}function ct(){const e=process.env["CREWX_ENDPOINT"]?.trim()||et;return re(e)}function H(e){try{return v.statSync(e).isDirectory()}catch{return false}}function se(e){try{return v.statSync(e).isFile()}catch{return false}}function Ie(e=process.cwd()){let n=E.resolve(e);while(true){if(H(E.join(n,"apps"))||se(E.join(n,"crewx.yaml"))){try{return v.realpathSync(n)}catch{return void 0}}const t=E.dirname(n);if(t===n)return void 0;n=t}}const Ae="manifest.json";const _e="ui-plugin.json";const ut="dev.crewx";function Oe(e){try{const n=JSON.parse(v.readFileSync(e,"utf8"));return u(n)?n:void 0}catch{return void 0}}function ie(e){const n=Oe(E.join(e,_e));const t=E.join(e,Ae);if(!se(t))return n;const r=Oe(t);if(!r)return void 0;const o=r["_meta"];const i=u(o)?o[ut]:void 0;const s={pluginId:r["name"],entry:u(i)?i["entry"]:void 0};if(n&&n["pluginId"]!==s["pluginId"])return void 0;return s}function be(e,n){const t=E.relative(e,n);return t!==""&&t!==".."&&!t.startsWith(`..${E.sep}`)&&!E.isAbsolute(t)}function pt(e,n){if(!n||n==="."||n===".."||/[\\/]/.test(n)){return d(2,"USAGE",null,"App must be a folder name or pluginId.")}const t=E.join(e,"apps");const r=E.join(t,n);let o=H(r)?r:void 0;if(!o&&H(t)){try{for(const s of v.readdirSync(t,{withFileTypes:true})){if(!s.isDirectory())continue;const a=E.join(t,s.name);const c=ie(a);if(c?.["pluginId"]===n){o=a;break}}}catch{}}let i=n;if(o){try{o=v.realpathSync(o)}catch{return d(6,"APP_INVALID",null)}if(!be(v.realpathSync(t),o)){return d(2,"USAGE",null,"App folder must be inside the workspace apps directory.")}const s=ie(o);if(typeof s?.["pluginId"]==="string"&&s["pluginId"].length>0){i=s["pluginId"]}}else{o=r}return{appId:i,appDirectory:o}}function ve(e){if(e.status<200||e.status>=300){return{ok:false,outcome:K(e)}}if(e.invalidJson||!u(e.data)||e.data["success"]!==true||!u(e.data["data"])){return{ok:false,outcome:d(1,x(e.data,"ERROR"),e.status)}}return{ok:true,value:e.data,status:e.status,rawText:e.rawText}}async function dt(e,n){try{const t=await q(e,n,"GET",He);if(t.status===404||t.status>=300&&t.status<400||t.invalidJson){return{ok:false,outcome:we(t.status)}}if(t.status<200||t.status>=300){return{ok:false,outcome:K(t)}}if(!u(t.data)||t.data["success"]!==true||!u(t.data["data"])||t.data["data"]["appDev"]!==1){return{ok:false,outcome:we(t.status)}}return{ok:true,value:t.data,status:t.status,rawText:t.rawText}}catch(t){return{ok:false,outcome:F(t,false)}}}async function ae(e){const n=ct();if(!n)return{ok:false,outcome:d(9,"ENDPOINT_REJECTED",null)};let t;try{t=(0,te.resolveCrewxApiCredential)("app-dev").token}catch(p){return{ok:false,outcome:Ee(p)}}const r=await dt(n,t);if(!r.ok)return{ok:false,outcome:r.outcome};const o=Ie();if(!o){return{ok:false,outcome:d(2,"WORKSPACE_NOT_FOUND",null,"No workspace root with apps/ or crewx.yaml was found.")}}const i=pt(o,e);if("exitCode"in i)return{ok:false,outcome:i};let s;try{s=await q(n,t,"POST",Xe,{workspacePath:o,appId:i.appId})}catch(p){return{ok:false,outcome:F(p,false)}}const a=ve(s);if(!a.ok)return{ok:false,outcome:a.outcome};const c=a.value["data"];if(!u(c)||typeof c["workspaceSlug"]!=="string"||typeof c["appId"]!=="string"||typeof c["devPath"]!=="string"||!c["devPath"].startsWith("/ws/")){return{ok:false,outcome:d(1,"ERROR",s.status)}}if(!H(i.appDirectory)){return{ok:false,outcome:d(6,"APP_INVALID",s.status)}}return{ok:true,context:{endpoint:n,token:t,workspacePath:o,appId:c["appId"],appDirectory:i.appDirectory,devPath:c["devPath"]}}}function X(e,...n){return`${Ke}${e.devPath}${n.length>0?`/${n.map(J).join("/")}`:""}`}async function z(e,n,t,r,o=N){try{const i=await q(e.endpoint,e.token,n,t,r,o);return ve(i)}catch(i){return{ok:false,outcome:F(i,false)}}}function lt(e){const n=e["appId"]??e["id"];if(typeof n==="string"&&n.length>0)return n;const t=e["definition"];if(u(t)&&typeof t["id"]==="string")return t["id"];return void 0}function ft(e){const n=e["definitionHash"];if(typeof n==="string"&&n.length>0)return n;const t=e["definition"];if(u(t)&&typeof t["hash"]==="string"){return t["hash"]}return void 0}function ht(e){if(!u(e))return void 0;const n=lt(e);const t=ft(e);if(!n||!t)return void 0;const r=e["agentActions"];const o=yt(e["agentAccess"]);return{appId:n,name:typeof e["name"]==="string"?e["name"]:"",description:typeof e["description"]==="string"?e["description"]:"",definitionHash:t,agentActions:Array.isArray(r)?r:[],...o===void 0?{}:{agentAccess:o}}}const mt=new Set(["allowed","approval_required","denied"]);function yt(e){if(!u(e))return void 0;const n=new Map;for(const[t,r]of Object.entries(e)){if(mt.has(r))n.set(t,r)}return n.size>0?n:void 0}async function Y(e,n=N){const t=await G(e,"GET",$(e,"ui-instances","apps"),void 0,n);if(!t.ok)return t;const r=t.value["apps"];if(!Array.isArray(r)){return{ok:false,outcome:d(1,"ERROR",t.status)}}const o=r.map(ht);if(o.some(i=>i===void 0)){return{ok:false,outcome:d(1,"ERROR",t.status)}}return{ok:true,value:o,status:t.status}}function ce(e,n){return e.find(t=>t.appId===n)}async function Re(e,n,t=N){const r=await G(e,"POST",$(e,"ui-instances","open"),{appId:n.appId,expectedDefinitionHash:n.definitionHash},t);if(!r.ok)return r;const o=u(r.value["instance"])?r.value["instance"]:r.value;if(!u(o)){return{ok:false,outcome:d(1,"ERROR",r.status)}}const i=o["instanceId"]??o["id"];const s=o["revision"];if(typeof i!=="string"||typeof s!=="number"){return{ok:false,outcome:d(1,"ERROR",r.status)}}const a=u(r.value["ai"])?r.value["ai"]:u(o["ai"])?o["ai"]:void 0;return{ok:true,status:r.status,value:{appId:n.appId,definitionHash:n.definitionHash,instanceId:i,revision:s,state:a&&Object.prototype.hasOwnProperty.call(a,"state")?a["state"]:null}}}const gt=new Set(["ready","unknown","hidden","expired","stale","ambiguous","unsupported"]);const wt=new Set(["native","activation-required","unsupported"]);const Et=new Set(["top-left","top-center","top-right","middle-left","middle-center","middle-right","bottom-left","bottom-center","bottom-right"]);const It=2*1024;const At=3*1024;function M(e,n,t=[]){const r=new Set([...n,...t]);return n.every(o=>Object.prototype.hasOwnProperty.call(e,o))&&Object.keys(e).every(o=>r.has(o))}function Te(e){return Number.isSafeInteger(e)&&e>=0}function Z(e){return Te(e)&&e<=1e5}function _t(e){const n=["schema","documentId","documentName","truncated","modelRevision","asOf","open","measured","counts","placement","regions"];if(!u(e)||!M(e,n,["unfinishedInput"]))return void 0;if(e["schema"]!=="html-viewer-feedback/v1"||typeof e["documentId"]!=="string"||!/^[A-Za-z0-9_-]{1,64}$/.test(e["documentId"])||e["documentName"]!==null&&(typeof e["documentName"]!=="string"||e["documentName"].length>256||/[\\/\u0000-\u001f\u007f]/.test(e["documentName"]))||typeof e["truncated"]!=="boolean"||typeof e["modelRevision"]!=="string"||!/^[A-Za-z0-9_-]{1,64}$/.test(e["modelRevision"])||typeof e["asOf"]!=="string"||e["asOf"].length>40||!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/.test(e["asOf"])||!Number.isFinite(Date.parse(e["asOf"]))||typeof e["open"]!=="boolean"||typeof e["measured"]!=="boolean"||Object.prototype.hasOwnProperty.call(e,"unfinishedInput")&&typeof e["unfinishedInput"]!=="boolean"){return void 0}const t=e["counts"];const r=e["placement"];if(!u(t)||!M(t,["drawings","notes","byKind","descriptionPresent"])||!u(t["byKind"])||!M(t["byKind"],["pen","highlighter","arrow","rectangle"])||!u(r)||!M(r,["visible","partial","offscreen","uncertain","total"])||!Array.isArray(e["regions"])||e["regions"].length>9){return void 0}const o=t["byKind"];const i=[t["drawings"],t["notes"],o["pen"],o["highlighter"],o["arrow"],o["rectangle"]];const s=[r["visible"],r["partial"],r["offscreen"],r["uncertain"],r["total"]];if(!i.every(Z)||typeof t["descriptionPresent"]!=="boolean"||!s.every(Z)){return void 0}const a=o["pen"]+o["highlighter"]+o["arrow"]+o["rectangle"];const c=r["visible"]+r["partial"]+r["offscreen"]+r["uncertain"];if(!Number.isSafeInteger(a)||t["drawings"]!==a||!Number.isSafeInteger(c)||r["total"]!==c||r["total"]!==t["drawings"]+t["notes"]){return void 0}const p=[];const l=new Set;for(const y of e["regions"]){if(!u(y)||!M(y,["region","drawings","notes"])||!Et.has(y["region"])||l.has(y["region"])||!Z(y["drawings"])||!Z(y["notes"])){return void 0}l.add(y["region"]);p.push({region:y["region"],drawings:y["drawings"],notes:y["notes"]})}const f={schema:"html-viewer-feedback/v1",documentId:e["documentId"],documentName:e["documentName"],truncated:e["truncated"],modelRevision:e["modelRevision"],asOf:e["asOf"],open:e["open"],measured:e["measured"],counts:{drawings:t["drawings"],notes:t["notes"],byKind:{pen:o["pen"],highlighter:o["highlighter"],arrow:o["arrow"],rectangle:o["rectangle"]},descriptionPresent:t["descriptionPresent"]},placement:{visible:r["visible"],partial:r["partial"],offscreen:r["offscreen"],uncertain:r["uncertain"],total:r["total"]},regions:p,...Object.prototype.hasOwnProperty.call(e,"unfinishedInput")?{unfinishedInput:e["unfinishedInput"]}:{}};return Buffer.byteLength(JSON.stringify(f),"utf8")<=It?f:void 0}function Ot(e){if(!u(e)||!M(e,["status"],["receivedAt","summary","capability"])||!gt.has(e["status"])||Object.prototype.hasOwnProperty.call(e,"receivedAt")&&!Te(e["receivedAt"])||Object.prototype.hasOwnProperty.call(e,"capability")&&!wt.has(e["capability"])){return void 0}const n=Object.prototype.hasOwnProperty.call(e,"summary")?_t(e["summary"]):void 0;if(Object.prototype.hasOwnProperty.call(e,"summary")&&n===void 0)return void 0;const t={status:e["status"],...Object.prototype.hasOwnProperty.call(e,"receivedAt")?{receivedAt:e["receivedAt"]}:{},...n===void 0?{}:{summary:n},...Object.prototype.hasOwnProperty.call(e,"capability")?{capability:e["capability"]}:{}};return Buffer.byteLength(JSON.stringify(t),"utf8")<=At?t:void 0}async function bt(e,n){const t=await G(e,"GET",$(e,"ui-instances",n));if(!t.ok)return t;const r=t.value;const o=r["instanceId"];const i=r["revision"];if(typeof o!=="string"||typeof i!=="number"){return{ok:false,outcome:d(1,"ERROR",t.status)}}const s=u(r["ai"])?r["ai"]:void 0;const a=p=>{if(Object.prototype.hasOwnProperty.call(r,p))return{[p]:r[p]};if(s&&Object.prototype.hasOwnProperty.call(s,p))return{[p]:s[p]};return{}};const c=Ot(r["feedback"]);return{ok:true,status:t.status,value:{instanceId:o,revision:i,state:s&&Object.prototype.hasOwnProperty.call(s,"state")?s["state"]:null,buttons:s&&Object.prototype.hasOwnProperty.call(s,"buttons")?s["buttons"]:null,...a("agentAccess"),...a("modelContext"),...a("pendingApproval"),...c===void 0?{}:{feedback:c}}}}const De="the pixels are not yet in model context; open this exact PNG with the provider's image-reading tool before describing a marked target.";async function Se(e,n,t,r){if(!Pe(n))return void 0;const o=u(t)?t:void 0;if(!o||!Object.prototype.hasOwnProperty.call(o,"crewxImage")){if(n["viewCall"]===true)throw new D.AppCaptureImageError("IMAGE_INVALID_DESCRIPTOR");return void 0}if(r.length===0){throw new D.AppCaptureImageError("IMAGE_INVALID_DESCRIPTOR")}const i=await(0,D.materializeAppCaptureImage)({cwd:process.cwd(),receiptId:r,descriptor:o["crewxImage"],download:s=>at(e,r,s)});return{result:{...o,crewxImage:i},image:i}}function Pe(e){return e["status"]==="settled"&&e["outcome"]==="succeeded"}function Ce(e){return Pe(e)&&e["viewCall"]===true}function Q(e,n,t,r){const o=t instanceof D.AppCaptureImageError?t:new D.AppCaptureImageError("IMAGE_WRITE_FAILED");const i=o.code==="IMAGE_EXPIRED"?["The App action receipt is preserved, but its image has expired on the server (IMAGE_EXPIRED).",`Reading this receipt again will not return the pixels. If you still need the image, refresh with crewx app state ${r??"<instanceId>"} and request a new capture with a NEW --request-id: keep the same viewRef from the task prompt and use documentId/modelRevision from feedback.summary.`,"If that bound view or a ready summary is unavailable, report that a new capture cannot currently be made; do not substitute another view.","The pixels are not in model context; do not describe them from metadata or text."].join("\n"):[`The App action receipt is preserved, but its image was not delivered (${o.code}).`,`Recover the same result with crewx app receipt ${n}; do not rerun the action.`,"The pixels are not in model context. Do not describe them from metadata or text. If the image is still retrievable, open the returned local PNG with the provider's image-reading tool before describing a marked target."].join("\n");return{exitCode:4,payload:{...e,ok:false,exit:4,error:{code:o.code,status:o.status},receiptId:n},stderr:i}}async function vt(e,n,t,r,o,i=N){const s=await G(e,"POST",$(e,"ui-instances",n,"actions"),{actionId:t,requestId:r,input:o},i);if(!s.ok)return s;const a=s.value["receipt"];if(!u(a)){return{ok:false,outcome:d(1,"ERROR",s.status)}}const c=a["receiptId"]??a["id"];const p=s.value["approval"];if(s.status===202&&u(p)){const h=p["approvalId"];const w=p["expiresAt"];const A=typeof a["requestId"]==="string"?a["requestId"]:typeof p["requestId"]==="string"?p["requestId"]:r;if(typeof c!=="string"||typeof h!=="string"||typeof w!=="string"&&typeof w!=="number"){return{ok:false,outcome:d(1,"ERROR",s.status)}}return{ok:false,outcome:{exitCode:8,payload:{ok:false,exit:8,error:{code:"APPROVAL_PENDING",status:202},receiptId:c,requestId:A,approvalId:h,expiresAt:w}}}}const l=a["status"]??(s.status===202?"requested":"settled");const f=s.value["resolve"];const y=u(f)&&u(f["ai"])?f["ai"]:void 0;return{ok:true,status:s.status,value:{receiptId:typeof c==="string"?c:"",requestId:typeof a["requestId"]==="string"?a["requestId"]:r,instanceId:n,actionId:typeof a["actionId"]==="string"?a["actionId"]:t,status:l,outcome:Object.prototype.hasOwnProperty.call(a,"outcome")?a["outcome"]:null,...typeof a["errorCode"]==="string"?{errorCode:a["errorCode"]}:{},state:y&&Object.prototype.hasOwnProperty.call(y,"state")?y["state"]:null,...Object.prototype.hasOwnProperty.call(s.value,"result")?{result:s.value["result"]}:{},...Object.prototype.hasOwnProperty.call(s.value,"resultExpired")?{resultExpired:s.value["resultExpired"]}:{},receipt:a}}}function Rt(e){const n=e.payload["error"];return e.exitCode===14||u(n)&&n["status"]===429}async function ke(e,n){const t=await G(e,"GET",$(e,"ui-action-receipts",n));if(!t.ok){return{state:"failed",retryable:Rt(t.outcome),value:t.outcome}}const r=t.value["receipt"];if(!u(r))return{state:"failed",retryable:false,value:d(1,"ERROR",t.status)};const o={ok:true,receipt:r,outcome:Object.prototype.hasOwnProperty.call(r,"outcome")?r["outcome"]:null,...typeof r["errorCode"]==="string"?{errorCode:r["errorCode"]}:{},...Object.prototype.hasOwnProperty.call(t.value,"result")?{result:t.value["result"]}:{},...Object.prototype.hasOwnProperty.call(t.value,"resultExpired")?{resultExpired:t.value["resultExpired"]}:{}};if(t.value["resultExpired"]===true&&Ce(r)){return{state:"failed",retryable:false,value:Q(o,n,new D.AppCaptureImageError("IMAGE_EXPIRED"))}}if(t.value["resultExpired"]!==true){try{const i=await Se(e,r,t.value["result"],n);if(i){return{state:"settled",value:{...P({...o,result:i.result,image:i.image}),stderr:De}}}}catch(i){return{state:"failed",retryable:false,value:Q(o,n,i)}}}return{state:r["status"]==="requested"?"pending":"settled",value:P(o)}}function Tt(e,n){return{exitCode:124,payload:{ok:false,exit:124,error:{code:"WAIT_TIMEOUT",status:null},receiptId:e},suppressOutput:true,stderr:`\u2192 Receipt ${e} is still pending after ${n}s. Do not end your turn: run crewx app receipt ${e} --wait=${(0,j.nextWaitSeconds)(n)} again.`}}function Ne(){const e=process.env["CREWX_TASK_TICKET"]??"";const n=process.env["CREWX_WORKSPACE_SLUG"]??"";const t=process.env["CREWX_THREAD_ID"]??"";if(!e.startsWith("crewxtk_")||!n||!t){return d(3,"NO_TICKET",null)}const r=re(process.env["CREWX_ENDPOINT"]);if(!r)return d(9,"ENDPOINT_REJECTED",null);return{ticket:e,workspaceSlug:n,threadId:t,endpoint:r,basePath:ot(n,t)}}function xe(e){return"exitCode"in e}function je(e){return String(e).padStart(2,"0")}function Dt(e){const n=typeof e==="number"?new Date(e):typeof e==="string"?new Date(/^\d+$/.test(e)?Number(e):e):void 0;if(!n||Number.isNaN(n.getTime()))return void 0;return`${je(n.getHours())}:${je(n.getMinutes())}`}function St(e){if(e.exitCode!==8)return e;const n=Dt(e.payload["expiresAt"]);const t=e.payload["receiptId"];const r=[`\u2192 Waiting for the user's approval in the App window${n?` (expires ${n})`:""}. Do not end your turn: ending it cancels the request.`,...typeof t==="string"&&t.length>0?[`\u2192 Wait: crewx app receipt ${t} --wait=${j.RECEIPT_WAIT_DEFAULT_SECONDS} (repeat on exit 124 until it settles)`]:[],"\u2192 Report success only if it settles as succeeded."];return{...e,stderr:[e.stderr,...r].filter(Boolean).join("\n")}}const Pt=256*1024;function Ct(e){try{const n=v.realpathSync(e);const t=v.realpathSync(E.join(n,"SKILL.md"));if(!be(n,t)||!se(t))return void 0;const r=v.openSync(t,"r");try{const o=new Uint8Array(Pt);const i=v.readSync(r,o,0,o.length,0);return(0,L.manualBody)(Buffer.from(o.buffer,0,i).toString("utf8"))}finally{v.closeSync(r)}}catch{return void 0}}async function kt(e){const n=Ie();if(!n)return void 0;try{const t=await Promise.resolve().then(()=>U(require("@crewx/sdk")));const r=await t.discoverWorkspaceApps(n);const o=r.apps.find(i=>i.appId===e)??r.apps.find(i=>i.pluginId===e);if(!o)return void 0;return{candidate:o,directory:E.join(n,o.relativePath),resolveAccess:t.resolveAgentAccess}}catch{return void 0}}async function Nt(e){if(e.length!==2||e[1].startsWith("--"))return B();const n=e[1];const t=Ne();if(xe(t))return t;const r=await Y(t);if(!r.ok)return r.outcome;const o=ce(r.value,n);if(!o)return d(6,"MCP_APP_NOT_FOUND",null);const i=o.agentActions.filter(c=>typeof c==="string");const s=await kt(n);const a=s?(0,L.renderUsage)(Ct(s.directory),(0,L.renderActionsSection)(n,s.candidate,(0,L.buildActionRows)(s.candidate,new Set(i),c=>s.resolveAccess(c),o.agentAccess)),s.candidate.manifest.csp?.connectDomains):(0,L.renderUsage)(void 0,(0,L.renderServerOnlyActions)(n,i));return{exitCode:0,payload:{ok:true},stdout:a}}function Le(e,n){if(e[0]!==n)return null;const t=[];let r=false;for(const o of e.slice(1)){if(o===(n==="dev"?"--no-open":"--json")){if(r)return null;r=true}else if(o.startsWith("--")){return null}else{t.push(o)}}if(t.length!==1)return null;return{appSelector:t[0],flag:r}}function $e(e){return`${JSON.stringify(e.payload)}
+`}function xt(e){const n=e["detail"];if(e["rule"]!=="manifest"||!u(n))return"";const t=typeof n["path"]==="string"?n["path"]:"";const r=typeof n["rule"]==="string"?n["rule"]:"";if(!r)return"";return`  ${t?`${t} `:""}(${r})`}async function jt(e){const n=Le(e,"check");if(!n)return B();const t=await ae(n.appSelector);if(!t.ok)return t.outcome;const r=await z(t.context,"GET",X(t.context,"check"));if(!r.ok)return r.outcome;const o=r.value["data"];if(!u(o))return d(1,"ERROR",r.status);const i=u(o["summary"])?o["summary"]:{};const s=Array.isArray(o["items"])?o["items"]:[];const a=typeof i["errors"]==="number"?i["errors"]:s.filter(f=>u(f)&&f["severity"]==="error").length;const c=typeof i["warnings"]==="number"?i["warnings"]:s.filter(f=>u(f)&&f["severity"]==="warning").length;const p=a===0?0:Ye;if(n.flag){return{exitCode:p,payload:r.value,stdout:`${r.rawText??$e({exitCode:p,payload:r.value})}`+(r.rawText?.endsWith("\n")?"":"\n"),suppressOutput:true}}const l=s.flatMap(f=>{if(!u(f))return[];const y=f["severity"];const h=y==="error"?"\u2715":y==="ok"?"\u2713":"!";const w=typeof f["where"]==="string"?f["where"]:"";const A=typeof f["code"]==="string"?f["code"]:"";return[`${h} ${w}  ${A}${xt(f)}`]});l.push(`Summary: ${a} errors, ${c} warnings`);return{exitCode:p,payload:{},stdout:`${l.join("\n")}
+`,suppressOutput:true}}async function Lt(e){let n;try{n=(0,te.resolveCrewxApiCredential)("pairing").token}catch(r){return Ee(r)}let t;try{t=await q(e.endpoint,n,"POST","/api/v1/auth/local/code")}catch(r){return F(r,false)}if(t.status<200||t.status>=300){return K(t)}if(t.invalidJson||!u(t.data)||typeof t.data["url"]!=="string"){return d(1,"PAIRING_CODE_INVALID",t.status)}try{const r=new he.URL(t.data["url"]);const o=re(r.origin);const i=r.hash.match(/^#pair=(.+)$/);if(!o||!i)return d(1,"PAIRING_CODE_INVALID",t.status);return`${o.origin}${e.devPath}#pair=${encodeURIComponent(i[1])}`}catch{return d(1,"PAIRING_CODE_INVALID",t.status)}}async function $t(e){const n=process.platform==="darwin"?"open":process.platform==="win32"?"explorer.exe":"xdg-open";const t=(0,de.spawn)(n,[e],{detached:true,stdio:"ignore"});await new Promise((r,o)=>{t.once("error",o);t.once("spawn",()=>{t.unref();r()})})}async function Mt(e){const n=ge(["run",...e.slice(2)]);if(!n||n.command!=="run")return B();const[t,r]=n.positional;const o=await ae(t);if(!o.ok)return o.outcome;const i=await z(o.context,"GET",X(o.context,"state"));if(!i.ok)return i.outcome;const s=i.value["data"];if(!u(s)||typeof s["revision"]!=="number"){return d(1,"APP_DEV_RESPONSE_INVALID",i.status)}const a=n.requestId??`cxa_${(0,pe.randomBytes)(16).toString("base64url")}`;const c=await z(o.context,"POST",X(o.context,"actions"),{actionId:r,requestId:a,input:n.input,expectedRevision:s["revision"]},Je);if(!c.ok)return c.outcome;const p=c.value["data"];const l=u(p)&&u(p["receipt"])?p["receipt"]:void 0;return{exitCode:l?.["outcome"]==="succeeded"?0:1,payload:c.value,stdout:`${c.rawText??$e({exitCode:0,payload:c.value})}`+(c.rawText?.endsWith("\n")?"":"\n"),suppressOutput:true}}function Ut(e){try{const n=JSON.parse(v.readFileSync(E.join(e,"package.json"),"utf8"));if(!u(n)||!u(n["scripts"]))return false;const t=n["scripts"]["build"];return typeof t==="string"&&t.trim().length>0}catch{return false}}function Me(e){const n=new Set([E.normalize(Ae),E.normalize(_e)]);const t=ie(e);const r=t?.["entry"];if(typeof r==="string"&&r.length>0&&!E.isAbsolute(r)){const o=E.normalize(r);if(o!==".."&&!o.startsWith(`..${E.sep}`))n.add(o)}return n}function Bt(e,n){try{const t=v.statSync(E.join(e,n));return`${t.size}:${t.mtimeMs}:${t.ino}`}catch{return null}}function Ue(e,n){return new Map([...n].map(t=>[t,Bt(e,t)]))}function Ft(e,n){const t=Date.now();let r="";let o=false;const i=s=>{const a=Buffer.from(r+(Buffer.isBuffer(s)?s.toString("utf8"):s),"utf8");r=a.length>me?a.subarray(a.length-me).toString("utf8"):a.toString("utf8")};return new Promise(s=>{const a=(0,de.spawn)("npm",["run","build"],{cwd:e,env:process.env,stdio:["ignore","pipe","pipe"]});n(a);a.stdout?.on("data",i);a.stderr?.on("data",i);const c=p=>{if(o)return;o=true;n(void 0);s({ok:p,ms:Math.max(0,Date.now()-t),output:r})};a.once("error",p=>{i(`${p.message}
+`);c(false)});a.once("close",p=>c(p===0))})}function qt(e){const n=e.payload["error"];return u(n)&&typeof n["code"]==="string"?n["code"]:"ERROR"}async function Gt(e,n){const t=await z(e,"POST",X(e,"reload"),n);if(!t.ok)return{errorCode:qt(t.outcome)};const r=t.value["data"];return u(r)&&typeof r["generation"]==="number"?{generation:r["generation"]}:{errorCode:"APP_DEV_RESPONSE_INVALID"}}async function Wt(e,n){const t=process.ppid;let r;try{r=v.watch(e.appDirectory,{recursive:true},(I,O)=>{R(O)})}catch(I){return d(1,"WATCH_FAILED",null,I instanceof Error?I.message:"Unable to watch the App folder.")}let o=false;let i=false;let s=false;let a=false;let c="";let p="";let l;let f;let y;let h={exitCode:0,payload:{},suppressOutput:true};const w=new Map;let A;const g=new Promise(I=>{A=I});const m=I=>{process.stdout.write(`${I}
+`)};const _=()=>{if(o)return;o=true;if(l)clearTimeout(l);if(f)clearInterval(f);process.removeListener("SIGINT",b);process.removeListener("SIGTERM",b);A(h)};const b=()=>{if(i)return;i=true;r.close();if(l)clearTimeout(l);if(y&&y.exitCode===null)y.kill("SIGTERM");if(!s)_()};const R=I=>{if(i||o)return;const O=I===null?"":E.normalize(I.toString());const C=O.split(E.sep);if(C.some(k=>k==="node_modules"||k===".crewx"||k==="dist"))return;const ee=n?Me(e.appDirectory):new Set;if(y&&ee.has(O))return;const S=w.get(O);if(S!==void 0){if(Date.now()<=S)return;w.delete(O)}if(s){a=true;c=O||"App files";return}p=O||"App files";if(l)clearTimeout(l);l=setTimeout(()=>{l=void 0;const k=p||"App files";p="";void T(k,false)},200)};const W=async I=>{const O=await Gt(e,I);return O.generation===void 0?`failed ${O.errorCode??"ERROR"}`:String(O.generation)};const T=async(I,O)=>{if(i||o)return;s=true;if(n){const C=Me(e.appDirectory);const ee=Ue(e.appDirectory,C);const S=await Ft(e.appDirectory,V=>{y=V});const k=Ue(e.appDirectory,C);for(const[V,Ge]of k){if(ee.get(V)!==Ge){w.set(V,Date.now()+1e3)}}if(i){s=false;_();return}const Fe={reason:"build",build:{ok:S.ok,ms:S.ms,...!S.ok?{output:S.output}:{}}};const qe=await W(Fe);m(`${O?"initial":I} -> build ${S.ok?"ok":"failed"} ${S.ms}ms -> reload ${qe}`)}else if(!O){const C=await W({reason:"manual"});m(`${I} -> reload ${C}`)}s=false;if(i){_();return}if(a){const C=c||"App files";a=false;c="";void T(C,false);return}if(i)_()};r.once("error",I=>{h=d(1,"WATCH_FAILED",null,I.message);b()});process.once("SIGINT",b);process.once("SIGTERM",b);f=setInterval(()=>{if(process.ppid!==t)b()},1e3);f.unref();if(n)void T("initial",true);return g}async function Vt(e){const n=Le(e,"dev");if(!n)return B();const t=await ae(n.appSelector);if(!t.ok)return t.outcome;const r=`${t.context.endpoint.origin}${t.context.devPath}`;process.stdout.write(`${r}
+`);if(!n.flag){const o=await Lt(t.context);if(typeof o!=="string")return o;try{await $t(o)}catch(i){return d(1,"BROWSER_OPEN_FAILED",null,i instanceof Error?i.message:"Could not open the App dev tab.")}}return Wt(t.context,Ut(t.context.appDirectory))}const Be="usage: crewx app build [<appDir>] [--check | --watch]";const Jt=["crewx app <command>","","  list                                                   List Apps available to this task","  open <appId>                                           Open an App in this conversation","  state <instanceId>                                     Read AI-visible state, buttons, and agent access","  run <instanceId|appId> <actionId> [--input <JSON>|-] [--request-id <id>]   Run one available action","  receipt <receiptId> [--wait=<seconds>]                 Read a safe action receipt","  build [<appDir>] [--check | --watch]                   Build a @Tool App: server.ts -> dist/ and the actions (manifest.json, or dist/tools.json)","  dev <app> [--no-open]                                  Start a foreground App dev session","  check <app> [--json]                                   Run the App dev checks","  run --dev <app> <actionId> [--input <JSON>|-]          Run an App action through the dev checks","  usage [<appId>]                                        Show the guide, or one App's manual and action table",""].join("\n");const Kt=[Be,"","  Builds <appDir> (default: the current directory) from its server.ts: dist/server.mjs, dist/entry.mjs,",'  and the actions of manifest.json. With no "bin" and no crewx.app.command in package.json the App is',"  server.ts only (tool mode): dist/server.mjs, dist/main.mjs and dist/tools.json, and manifest.json","  carries no actions. --check writes nothing and exits 1 when a generated file is stale.","  --watch rebuilds on every change until Ctrl-C.",""].join("\n");function Ht(){const e=[E.join(__dirname,"..","..","build-app","load.cjs"),E.join(__dirname,"..","build-app","load.cjs")];const n=e.find(t=>v.existsSync(t));if(!n)return Promise.reject(new Error("the App build is not part of this install"));return require(n).loadAppBuilder()}function ue(e){return e instanceof Error?e.message:String(e)}async function Xt(e){if(e.slice(1).some(s=>s==="--help"||s==="-h")){return{exitCode:0,payload:{ok:true},stdout:Kt}}let n;try{n=await Ht()}catch(s){return d(1,"BUILD_UNAVAILABLE",null,ue(s))}let t;try{t=n.parseArguments(e.slice(1))}catch(s){return d(2,"USAGE",null,`${ue(s)} \u2192 ${Be}`)}const{appDirectory:r}=t;const o=E.relative(process.cwd(),r);const i=o===""?"crewx app build":`crewx app build ${o}`;if(t.watch){const s=new AbortController;const a=()=>s.abort();process.once("SIGINT",a);process.once("SIGTERM",a);try{await n.watchApp(r,c=>process.stdout.write(`${c}
+`),{signal:s.signal})}finally{process.removeListener("SIGINT",a);process.removeListener("SIGTERM",a)}return{exitCode:0,payload:{},suppressOutput:true}}try{const s=await n.buildApp({appDirectory:r,check:t.check});if(t.check&&s.staleFiles.length>0){return{...d(1,"BUILD_STALE",null,`Stale generated files: ${s.staleFiles.join(", ")} \u2192 Fix: ${i}`),payload:{ok:false,exit:1,error:{code:"BUILD_STALE",status:null},appDir:r,stale:s.staleFiles}}}if(t.check){return P({ok:true,appDir:r,check:true,inSync:true,files:s.files,actions:s.actions})}const a=E.basename(r);const c=E.basename(E.dirname(r))==="apps";return{...P({ok:true,appDir:r,files:s.files,actions:s.actions}),stderr:c?`\u2192 Next: crewx app check ${a}`:`\u2192 Next: put ${a} in the workspace apps/ folder, then crewx app check ${a}`}}catch(s){return d(1,"BUILD_FAILED",null,ue(s))}}async function zt(e,{clock:n=j.realClock}={}){if(e.length===1&&(e[0]==="--help"||e[0]==="-h")){return{exitCode:0,payload:{ok:true},stdout:Jt}}if(e[0]==="build")return Xt(e);if(e[0]==="dev")return Vt(e);if(e[0]==="check")return jt(e);if(e[0]==="run"&&e[1]==="--dev")return Mt(e);if(e[0]==="usage")return Nt(e);const t=ge(e);if(!t)return B();const r=Ne();if(xe(r))return r;if(t.command==="list"){const h=await Y(r);if(!h.ok)return h.outcome;return P({ok:true,apps:h.value})}if(t.command==="receipt"){const h=t.positional[0];const w=(0,j.clampWaitSeconds)(t.waitSeconds??0);if(w===0)return(await ke(r,h)).value;const A=await(0,j.pollUntilSettled)(()=>ke(r,h),w,n);if(A.state!=="pending")return A.value;return Tt(h,w)}if(t.command==="state"){const h=await bt(r,t.positional[0]);if(!h.ok)return h.outcome;return P({ok:true,...h.value})}if(t.command==="open"){const h=t.positional[0];const w=await Y(r);if(!w.ok)return w.outcome;const A=ce(w.value,h);if(!A)return d(6,"MCP_APP_NOT_FOUND",null);const g=await Re(r,A);if(!g.ok)return g.outcome;return P({ok:true,...g.value})}const[o,i]=t.positional;const s=t.requestId??`cxa_${(0,pe.randomBytes)(16).toString("base64url")}`;let a=o;if(!o.startsWith(ye)){const h=await Y(r,ne);if(!h.ok)return oe(h.outcome,s);const w=ce(h.value,o);if(!w)return d(6,"MCP_APP_NOT_FOUND",null);const A=await Re(r,w,ne);if(!A.ok)return oe(A.outcome,s);a=A.value.instanceId}const c=await vt(r,a,i,s,t.input,ne);if(!c.ok)return St(oe(c.outcome,s));const{receipt:p,...l}=c.value;const f={ok:true,...l};const y=typeof l["receiptId"]==="string"?l["receiptId"]:"";if(l["resultExpired"]===true&&u(p)&&Ce(p)){return Q({...f,receipt:p},y,new D.AppCaptureImageError("IMAGE_EXPIRED"),a)}if(u(p)&&l["resultExpired"]!==true){try{const h=await Se(r,p,l["result"],y);if(h){return{...P({...f,receipt:p,result:h.result,image:h.image}),stderr:`\u2192 Check: crewx app state ${c.value.instanceId}
+${De}`}}}catch(h){return Q({...f,receipt:p},y,h,a)}}return{...P(f),stderr:`\u2192 Check: crewx app state ${c.value.instanceId}`}}