@crewx/sdk 0.9.0-rc.130 → 0.9.0-rc.131

package/dist/esm/publish/index.js

@@ -1,2 +1,2 @@
-import*as J from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as bt from'crypto';import {createHash}from'crypto';import*as G from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as qi from'js-yaml';import {load}from'js-yaml';import*as ro from'os';import*as ao from'tar';import {gunzipSync,gzipSync}from'zlib';var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var y=j(()=>{});var N,Ke=j(()=>{y();N=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function Nn(e){return Eo.test(e)||To.test(e)}function X(){throw new N("INPUT_INVALID","JSON value is not projection-safe")}function No(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function bn(e,n,t,i,o,r){if(n>i&&X(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(Do.test(e)||Po.test(e)&&!Lo(o,r)||bo.test(e))&&X(),e;if(typeof e=="number")return Number.isFinite(e)||X(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&X();let s=e;t.has(s)&&X(),t.add(s);try{if(Array.isArray(e))return e.map(p=>bn(p,n+1,t,i,o,r));No(s)||X();let a={};for(let[p,c]of Object.entries(e))Nn(p)&&X(),a[p]=bn(c,n+1,t,i,[...o,p],r);return a}finally{t.delete(s);}}function oe(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>Mo)&&X(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&X();let i=bn(e,0,new Set,So+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&X(),i}function Pe(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function Lo(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>Pe(t,i))}function Ne(e){try{let n=JSON.stringify(e);return n===void 0&&X(),n}catch{X();}}function Pn(e){return Array.isArray(e)?e.map(Pn):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Pn(e[n])])):e}function Y(e){return Ne(Pn(e))}function Sn(e){return Buffer.byteLength(e,"utf8")}var Eo,To,Do,bo,Po,So,Mo,Ae=j(()=>{y();Ke();Eo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,To=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,Do=/<\/?[A-Za-z][^>]*>/,bo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Po=/^(?:https?|file|ftp|ws|wss):\/\//i;So=8,Mo=4;});function Mn(e){return Y(e)}var St=j(()=>{y();Ae();});var Ie,Ln=j(()=>{y();Ie="window";});function Se(e){return Oo.has(e)||Uo.test(e)||Ro.test(e)}var Mt,Oo,Uo,Ro,Xe,ve,re,On,Un,Rn,wn,kn,Me=j(()=>{y();Mt=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],Oo=new Set(Mt),Uo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Ro=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Xe=/^[A-Za-z0-9_]+$/,ve=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,re=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,On=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Un=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Rn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,wn=["blue","violet","emerald","amber","rose","sky","slate","indigo"],kn=["inline","panel"];});function Cn(e){return typeof e=="string"&&Lt.includes(e)}var Lt,Ot=j(()=>{y();Me();Lt=["text/plain","application/json"];});function Ye(e){if(!xn(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!wo(e.in)||Object.hasOwn(e,"out")&&!ko(e.out))}function wo(e){return xn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&Cn(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function ko(e){return xn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&Cn(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function xn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var vn=j(()=>{y();Ot();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function d(e,n=e){throw new W(e,n)}function V(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function O(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function F(e,n,t=[]){let i=new Set([...n,...t]);Object.keys(e).some(o=>!i.has(o))&&d("MANIFEST_INVALID"),n.some(o=>!O(e,o))&&d("MANIFEST_INVALID");}function nn(e,n=false,t=false,i=false){return jo.test(e)||!i&&Fo.test(e)||Vo.test(e)||t&&Ut.test(e)||Bo.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ut.test(e))}function Qe(e,n=new Set,t=0,i=false,o=false){if(typeof e=="string"){nn(e,i,o)&&d("UNSAFE_VALUE");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&d("MANIFEST_INVALID"),n.add(e);try{if(Array.isArray(e)){for(let r of e)Qe(r,n,t+1);return}V(e)||d("MANIFEST_INVALID");for(let[r,s]of Object.entries(e))Qe(s,n,t+1,i&&t===0&&(r==="name"||r==="description"),o);}finally{n.delete(e);}}}function ee(e,n){let t=e[n];return typeof t!="string"&&d("MANIFEST_INVALID"),t}function Z(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&d("MANIFEST_INVALID"),i}function jn(e){return vo.test(e)||d("MANIFEST_INVALID"),e}function Le(e){return xo.test(e)||d("TOKEN_INVALID"),e}function ar(e){return Ft.test(e)||d("MANIFEST_INVALID"),e}function cr(e){V(e)||d("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=ar(t);V(i)||d("MANIFEST_INVALID");let r=i.type;if(r==="text"){F(i,["type","maxLength"]),n[o]={type:r,maxLength:Z(i,"maxLength",1)};continue}if(r==="text-list"){F(i,["type","max","itemMaxLength"]),n[o]={type:r,max:Z(i,"max",0),itemMaxLength:Z(i,"itemMaxLength",1)};continue}if(r==="step-list"){F(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=Z(i,"min",0),a=Z(i,"max",1);s>a&&d("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:Z(i,"labelMaxLength",1),detailMaxLength:Z(i,"detailMaxLength",1)};continue}typeof r=="string"&&d("SCHEMA_TYPE_UNSUPPORTED"),d("MANIFEST_INVALID");}return n}function pr(e,n,t){let i=e[n];(!i||i.type!==t)&&d("MANIFEST_INVALID");}function qe(e,n,t){let i=ee(e,"field");return Ft.test(i)||d("MANIFEST_INVALID"),pr(n,i,t),i}function dr(e,n){V(e)||d("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&d("MANIFEST_INVALID"),sr.includes(t)||d("PRIMITIVE_UNKNOWN"),t){case "card-shell":return F(e,["primitive"]),{primitive:t};case "meta-banner":return F(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Le(ee(e,"badgeToken")),noticeToken:Le(ee(e,"noticeToken"))};case "heading":return F(e,["primitive","field"]),{primitive:t,field:qe(e,n,"text")};case "labeled-text":return F(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&d("MANIFEST_INVALID"),{primitive:t,titleToken:Le(ee(e,"titleToken")),field:qe(e,n,"text"),variant:"callout"};case "step-flow":return F(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Le(ee(e,"titleToken")),field:qe(e,n,"step-list")};case "text-list":{F(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Le(ee(e,"titleToken")),field:qe(e,n,"text-list")};return O(e,"emptyToken")&&(i.emptyToken=Le(ee(e,"emptyToken"))),O(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&d("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return d("MANIFEST_INVALID")}function lr(e,n){return Array.isArray(e)||d("MANIFEST_INVALID"),e.map(t=>dr(t,n))}function B(e="v2 manifest exceeds a contract limit"){return d("LIMIT_EXCEEDED",e)}function q(e="initial state is not projection-safe"){return d("INITIAL_STATE_INVALID",e)}function Rt(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||ir.test(e)||or.test(e))&&d("MANIFEST_INVALID",`${n} is invalid`),(nn(e,true,true)||Ho.test(e)||zo.test(e)||Go.test(e))&&d("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Vn(e,n){return (typeof e!="string"||!re.test(e))&&d("MANIFEST_INVALID",`${n} is invalid`),e}function ur(e){return (typeof e!="string"||!On.test(e)||e==="*"||e==="all")&&d("MANIFEST_INVALID","action capability is invalid"),e}function Bt(e){return (typeof e!="string"||!tr.test(e))&&d("MANIFEST_INVALID","resource hash is invalid"),e}function Fn(e,n=new Set,t=0){if(typeof e=="string"){e.length>4096&&B("v2 manifest string is too long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||d("MANIFEST_INVALID","v2 manifest contains a non-finite number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&d("MANIFEST_INVALID","v2 manifest contains a non-JSON value"),typeof e!="object"&&d("MANIFEST_INVALID"),t>8&&B("v2 manifest nesting is too deep"),n.has(e)&&d("MANIFEST_INVALID","v2 manifest contains a cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&B("v2 manifest array is too long");for(let i of e)Fn(i,n,t+1);return}V(e)||d("MANIFEST_INVALID","v2 manifest contains a non-plain object");for(let i of Object.values(e))Fn(i,n,t+1);}finally{n.delete(e);}}}function Ht(e){return (typeof e!="string"||e.length>4096||!ve.test(e))&&(typeof e=="string"&&e.length>4096&&B("projection path is too long"),d("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Se(t))&&d("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Bn(e){V(e)||d("MANIFEST_INVALID","projection policy must be an object"),F(e,["allow"]),Array.isArray(e.allow)||d("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&B("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=Ht(i);t.has(o)&&d("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function fr(e,n){if(e===void 0)return;Array.isArray(e)||d("MANIFEST_INVALID","dataPaths must be an array"),e.length>rr&&B("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=Ht(o);i.has(r)&&d("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>Pe(r,s))||d("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Oe(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&d("MANIFEST_INVALID",`${n} is invalid`),e}function wt(e,n){return (typeof e!="number"||!Number.isFinite(e))&&d("MANIFEST_INVALID",`${n} is invalid`),e}function Hn(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||nn(e))&&d("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||d("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&B("schema enum is too deep"),t.has(e)&&d("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&B("schema enum array is too long"),e.map(o=>Hn(o,n+1,t));V(e)||d("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Se(o)&&d("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Hn(r,n+1,t);return i}finally{t.delete(e);}}function yr(e,n){if(e===void 0)return;Array.isArray(e)||d("MANIFEST_INVALID","schema required must be an array"),e.length>64&&B("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!ve.test(o))&&d("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&B("schema required key is too long"),i.has(o)&&d("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&d("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Ar(e,n){let t=n?ve:Xe;return e.length>4096&&B("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Se(i)))&&d("MANIFEST_INVALID","schema property name is invalid"),e}function zn(e,n=0,t=false){V(e)||d("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&B("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&d("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),d("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),F(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(O(e,"enum")&&(Array.isArray(e.enum)||d("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&B("schema enum is too long"),r.enum=e.enum.map(a=>Hn(a))),i==="string"&&(O(e,"minLength")&&(r.minLength=Oe(e.minLength,"schema minLength",4096)),O(e,"maxLength")&&(r.maxLength=Oe(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&d("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(O(e,"minimum")&&(r.minimum=wt(e.minimum,"schema minimum")),O(e,"maximum")&&(r.maximum=wt(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&d("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(O(e,"minItems")&&(r.minItems=Oe(e.minItems,"schema minItems",128)),O(e,"maxItems")&&(r.maxItems=Oe(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&d("MANIFEST_INVALID","schema array length bounds are inverted"),O(e,"items")&&(r.items=zn(e.items,n+1,false))),i==="object"){let a;if(O(e,"properties")){V(e.properties)||d("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&B("schema properties are too many"),a={};for(let[l,f]of c){let I=Ar(l,t);a[I]=zn(f,n+1,false);}r.properties=a;}O(e,"minProperties")&&(r.minProperties=Oe(e.minProperties,"schema minProperties",64)),O(e,"maxProperties")&&(r.maxProperties=Oe(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&d("MANIFEST_INVALID","schema object property bounds are inverted");let p=yr(e.required,a);p!==void 0&&(r.required=p),O(e,"additionalProperties")&&(e.additionalProperties!==false&&d("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&B("action inputSchema subtree is too large"),r}function Ir(e){let n=zn(e,0,true);return (n.type!=="object"||!n.properties)&&d("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function gr(e){if(V(e)||d("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){F(e,qo);let n=e.handler;return (typeof n!="string"||!Un.test(n))&&d("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){F(e,Zo,Qo),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&d("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!Rn.test(i))&&d("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=O(e,"env")?hr(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}d("MANIFEST_INVALID","action backend type is unsupported");}function mr(e){V(e)||d("MANIFEST_INVALID","action must be an object"),F(e,Ko,Xo),O(e,"_meta")&&zt(e._meta);let n=Vn(e.actionId,"actionId");Nn(n)&&d("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`);let t=ur(e.capability),i=e.mutation;typeof i!="boolean"&&d("MANIFEST_INVALID","action mutation must be boolean");let o=Ir(e.inputSchema),r;if(O(e,"dataInputs")){Array.isArray(e.dataInputs)||d("MANIFEST_INVALID","action dataInputs must be an array");let l=o.properties,f=new Set,I=[];for(let g of e.dataInputs)(typeof g!="string"||!O(l,g)||f.has(g))&&d("MANIFEST_INVALID","action dataInputs must be unique declared properties"),f.add(g),I.push(g);r=I;}let s=Bn(e.resultProjection),a=gr(e.backend),p;O(e,"content")&&((a.type!=="skill"||!Ye(e.content))&&d("MANIFEST_INVALID","action content declaration is invalid"),p=_r(e.content));let c;if(O(e,"confirmation")){let l=e.confirmation;l!=="none"&&l!=="native"&&d("MANIFEST_INVALID","action confirmation is invalid"),c=l;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...p===void 0?{}:{content:p},...r===void 0?{}:{dataInputs:r},...c===void 0?{}:{confirmation:c}}}function hr(e){(!Array.isArray(e)||e.length===0)&&d("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&d("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function _r(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Er(e){return V(e)||d("INITIAL_STATE_INVALID","initialState must be an object"),F(e,er,nr),e.path!=="ui/state.json"&&d("MANIFEST_INVALID","initialState path is not fixed"),O(e,"hash")?{path:"ui/state.json",hash:Bt(e.hash)}:{path:"ui/state.json"}}function Tr(e){let n=["wasm","terminal","htmlDocuments"];return (!V(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&d("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function Dr(e,n){Qe(e,new Set,0,true,true),Fn(e),V(e)||d("MANIFEST_INVALID"),F(e,Jo,Wo),O(e,"_meta")&&zt(e._meta),e.manifestVersion!==2&&d("MANIFEST_INVALID");let t;O(e,"runtime")&&(t=Tr(e.runtime));let i=Vn(e.pluginId,"pluginId"),o=Vn(e.definitionId,"definitionId"),r=Z(e,"version",1),s=Rt(e.name,"name"),a=Rt(e.description,"description"),p;O(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&d("MANIFEST_INVALID","icon is invalid"),p=e.icon);let c;O(e,"tone")&&((typeof e.tone!="string"||!wn.includes(e.tone))&&d("MANIFEST_INVALID","tone is invalid"),c=e.tone),e.entry!=="ui/index.html"&&d("MANIFEST_INVALID","entry path is not fixed");let l;O(e,"entryHash")&&(l=Bt(e.entryHash));let f;O(e,"initialState")&&(f=Er(e.initialState));let I;O(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&d("MANIFEST_INVALID","usage is invalid"),I=e.usage);let g;O(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&d("MANIFEST_INVALID","detailPanel is invalid"),g=e.detailPanel);let m;if(O(e,"displayModes")){((I??Ie)!==Ie||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&d("MANIFEST_INVALID","displayModes are only valid for window Apps");let R=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(u=>typeof u!="string"||!R.has(u)))&&d("MANIFEST_INVALID","displayModes are invalid"),m=e.displayModes;}(I??Ie)===Ie&&g!==void 0&&d("MANIFEST_INVALID","detailPanel is card-only");let b=n.mode??"local";b!=="local"&&b!=="installed"&&b!=="published"&&d("MANIFEST_INVALID","manifest mode is invalid"),b!=="local"&&l===void 0&&d("MANIFEST_INVALID","installed manifests require entryHash"),b!=="local"&&f!==void 0&&f.hash===void 0&&d("MANIFEST_INVALID","installed manifests require initialState.hash"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&d("MANIFEST_INVALID","surfaces are invalid"),e.surfaces.length>2&&B("surfaces exceed the v2 limit");let w=[],v=new Set;for(let R of e.surfaces)(typeof R!="string"||!kn.includes(R))&&d("MANIFEST_INVALID","surface is unsupported"),v.has(R)&&d("MANIFEST_INVALID","surfaces contain a duplicate"),v.add(R),w.push(R);V(e.size)||d("MANIFEST_INVALID","size must be an object"),F(e.size,["height"]);let T=Z(e.size,"height",1);T>720&&B("size.height exceeds the v2 limit");let P=Bn(e.stateProjection),C=e.summaryProjection===void 0?void 0:Bn(e.summaryProjection);C!==void 0&&C.allow.some(R=>!P.allow.includes(R))&&d("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow");let A=fr(e.dataPaths,P.allow);Array.isArray(e.actions)||d("MANIFEST_INVALID","actions must be an array"),e.actions.length>32&&B("actions exceed the v2 limit");let E=[],L=new Set;for(let R of e.actions){let u=mr(R);if(L.has(u.actionId)&&d("MANIFEST_INVALID","actions contain a duplicate actionId"),u.backend.type==="core"&&u.backend.handler==="state.set"){u.mutation||d("MANIFEST_INVALID","state.set actions must be mutations");for(let k of Object.keys(u.inputSchema.properties))P.allow.includes(k)||d("MANIFEST_INVALID","state.set input paths must be projection-allowed");}L.add(u.actionId),E.push(u);}return {manifestVersion:2,pluginId:i,definitionId:o,version:r,name:s,description:a,...p===void 0?{}:{icon:p},...c===void 0?{}:{tone:c},entry:"ui/index.html",...l===void 0?{}:{entryHash:l},...t===void 0?{}:{runtime:t},...f===void 0?{}:{initialState:f},...I===void 0?{}:{usage:I},...g===void 0?{}:{detailPanel:g},...m===void 0?{}:{displayModes:m},surfaces:w,size:{height:T},stateProjection:P,...C===void 0?{}:{summaryProjection:C},...A===void 0?{}:{dataPaths:A},actions:E}}function zt(e){V(e)||d("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>Yo)&&B("_meta exceeds the 4 KiB limit");}function br(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function Gn(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>Pe(o.join("."),a));return (e.length>4096||nn(e,false,false,s))&&q("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||q("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&q("state contains a non-JSON value"),t>8&&q("state is too deep"),n.has(e)&&q("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&q("state array is too long"),s=e.map(p=>Gn(p,n,t+1,65536,o,r));else {V(e)||q("state contains a non-plain object");let p={};for(let[c,l]of Object.entries(e))(c.length>4096||!Xe.test(c)||Se(c))&&(c.length>4096&&q("state key is too long"),q("state contains a reserved or invalid key")),p[c]=Gn(l,n,t+1,65536,[...o,c],r);s=p;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&q("state subtree is too large"),s}finally{n.delete(e);}}function Jn(e,n=[]){V(e)||q("initial state must be a JSON object");let t=Gn(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&q(),t}function Pr(e,n={}){Qe(e),V(e)||d("MANIFEST_INVALID"),F(e,$o),e.manifestVersion!==1&&d("MANIFEST_INVALID");let t=jn(ee(e,"pluginId")),i=jn(ee(e,"definitionId")),o=Z(e,"version",1),r=Z(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Co;(!Number.isSafeInteger(s)||s<1)&&d("MANIFEST_INVALID"),r>s&&d("PRIMITIVE_SET_UNSUPPORTED"),V(e.activation)||d("MANIFEST_INVALID"),F(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&d("MANIFEST_INVALID");let a=jn(ee(e.activation,"language")),p=cr(e.schema),c=lr(e.layout,p);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:p,layout:c}}function Nr(e,n={}){return V(e)||d("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&d("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Dr(e,n):Pr(e,n)}function _e(e,n={}){try{return Nr(e,n)}catch(t){if(t instanceof W)throw t;return d("MANIFEST_INVALID")}}function Wn(e,n={}){let t=_e(e,n);return t.manifestVersion===2?br(t):t}var Co,xo,vo,Ft,jo,Vo,Fo,Bo,Ut,Ho,zo,Go,$o,Jo,Wo,Ko,Xo,Yo,qo,Zo,Qo,er,nr,tr,ir,or,rr,sr,W,Gt=j(()=>{y();Ln();Ae();vn();Me();Co=1,xo=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,vo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ft=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,jo=/<\/?[A-Za-z][^>]*>/,Vo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Fo=/^(?:https?|file|ftp|ws|wss):\/\//i,Bo=/^\s*(?:javascript|data):/i,Ut=/data:[^,\s]*,/i,Ho=/(?:https?|file|ftp|ws|wss):\/\//i,zo=/javascript:/i,Go=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,$o=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],Jo=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],Wo=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],Ko=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Xo=["confirmation","dataInputs","content","_meta"],Yo=4*1024,qo=["type","handler"],Zo=["type","command"],Qo=["env"],er=["path"],nr=["hash"],tr=/^[0-9a-f]{64}$/,ir=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,or=/[\r\n]/,rr=16,sr=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],W=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="UiPluginValidationError"};});var Kn=j(()=>{y();St();Gt();Me();});function se(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=oe(t);return createHash("sha256").update(Y(i)).digest("hex")}function ae(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new N("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Cr.test(e.sourceHash)))throw new N("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||se(e)!==e.hash)throw new N("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!vr(i)))throw new N("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new N("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new N("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new N("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&Yn(t.resultProjection),t.content!==void 0&&!Ye(t.content))throw new N("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new N("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new N("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new N("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new N("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new N("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new N("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new N("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new N("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&Yn(e.stateProjection),e.summaryProjection){Yn(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new N("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new N("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(xr(r,o==="readTool"),n.has(r.name))throw new N("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new N("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new N("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new N("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new N("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>Pe(t,i))))throw new N("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function xr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new N("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new N("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=oe(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let p=oe(a.structuredContent);if(Sn(Ne(p))>4*1024)throw new Error("fixed result size")}}catch{throw new N("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function Yn(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new N("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function vr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Cr,we=j(()=>{y();Ae();Ke();vn();Cr=/^[0-9a-f]{64}$/;});function rn(e,n=e){throw new ce(e,n)}var ce,sn=j(()=>{y();ce=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var Qt=j(()=>{y();});var ei=j(()=>{y();we();Ae();sn();Qt();});function ni(e,n){return jr.add(e),n!==void 0&&Vr.set(e,n),e}var jr,Vr,an=j(()=>{y();jr=new WeakSet,Vr=new WeakMap;});function Fe(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function qn(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function oi(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))oi(n);return Object.freeze(e)}function $(e){throw new ne("LINEAGE_INVALID",e)}function Jr(e){throw new ne("LINEAGE_STALE",e)}function ri(e){if(!Fe(e)||!qn(e,Hr,zr)||!Fe(e.actions))return $("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!Fe(n)||!qn(n,Gr,$r))return $("Lineage action definition shape is invalid");return e}function Wr(e){if(!Fe(e)||!qn(e,Fr,Br))return $("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!ti.test(e.hash))return $("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!ti.test(e.sourceHash)))return $("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return $("Lineage compatibility marker is invalid");let n=ri(e.definition);if(n.version!==e.version)return $("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return $("Lineage source hash does not match its definition");let t;try{t=se(n),ae({...n,hash:e.hash});}catch{return $("Lineage definition is invalid")}return t!==e.hash?$("Lineage definition hash does not match"):oi({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function ii(e){return e.stateProjection?.allow??[]}function Kr(e,n){let t=[],i=new Set(ii(n));ii(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,p]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(p.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(p=>!a.has(p))&&t.push("S5_SUMMARY_PROJECTION");}return t}function Xr(e,n){return Y(e)===Y(n)}function Zn(e,n){if(!Array.isArray(e)||e.length===0)return $("Definition lineage is missing");if(!Fe(n)||typeof n.hash!="string")return $("Current definition is invalid");let t,i;try{let{hash:a,...p}=n;i=ri(p),t={...i,hash:a},ae(t);}catch{return $("Current definition is invalid")}let o=e.map(Wr),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return $("Lineage definition ids do not match");if(o.some((a,p)=>p>0&&a.version<=o[p-1].version))return $("Lineage generations are not in increasing version order");if(o.some((a,p)=>o.findIndex(c=>c.hash===a.hash)!==p))return $("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!Xr(s.definition,i))return Jr("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),p=new Set;for(let l of o)if(l.sourceHash===void 0)for(let f of Object.keys(l.definition.actions))a.has(f)&&p.add(f);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==p.size||c.some(l=>!p.has(l))){let l="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new ne("LINEAGE_INVALID",`Lineage compatibility failed: ${l}`,[l])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(l=>l.compat==="break"))continue;let c=Kr(o[a].definition,t);if(c.length>0)throw new ne("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(o),current:t})}var ne,ti,Fr,Br,Hr,zr,Gr,$r,Qn=j(()=>{y();we();Ae();ne=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},ti=/^[0-9a-f]{64}$/,Fr=["version","hash","definition"],Br=["sourceHash","compat"],Hr=["id","version","actions"],zr=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],Gr=["capabilities"],$r=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var si,ai,ci=j(()=>{y();si=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],ai=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var pi=j(()=>{y();we();an();});function et(e,n=0){try{let t=oe(e,n);return t.type!==void 0&&t.type!=="object"&&rn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof ce)throw t;rn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function di(e){if(e.length===0)return et({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,et(i.inputSchema));return et(Zr(n,t),qr)}function Zr(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var Be,qr,nt=j(()=>{y();ei();we();Ae();an();sn();Qn();ci();pi();Be=8*1024*1024,new Set(si),new Set(ai),qr=4;});function pe(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new D("NOT_FOUND"):n==="ELOOP"?new D("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new D("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new D("READ_DENIED"):new D("READ_DENIED")}function os(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new D("READ_DENIED")}function li(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new D("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new D("PATH_ESCAPED");return n}function cn(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function pn(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function ot(e,n){return e.dev===n.dev&&e.ino===n.ino}function gi(e,n){return ot(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function ui(e){os(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw pe(i)}if(!t.isDirectory())throw new D("READ_DENIED");return {realRoot:n,identity:pn(t)}}async function rs(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new D("READ_DENIED")}catch(r){throw r instanceof D?r:pe(r)}if(!cn(n,o))throw new D("PATH_ESCAPED");return o}async function fi(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw pe(a)}if(!cn(n,r)||t!==void 0&&!cn(t,r))throw new D("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new D("READ_DENIED");if(!ot(i,o)||!ot(i,s)||i.dev!==s.dev)throw new D("PATH_ESCAPED")}async function tt(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new D("PATH_ESCAPED")}if(t!==n.realRoot||!gi(n.identity,pn(i)))throw new D("PATH_ESCAPED")}function ss(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var D,Ii,ts,is,dn,mi,st=j(()=>{y();D=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},Ii=constants.O_NOFOLLOW,ts=constants.O_NONBLOCK,is=constants.O_RDONLY|(Ii??0)|(ts??0);dn=class{async listDirectory(n,t){let i=li(t),o=await ui(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(p){let c=pe(p);if(c.code==="NOT_FOUND")return [];throw c}if(!cn(o.realRoot,s)||!a.isDirectory())throw new D("PATH_ESCAPED");try{let p=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await tt(n,o),p.map(ss)}catch(p){let c=pe(p);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new D("READ_DENIED");if(Ii===void 0)throw new D("UNSUPPORTED");let o=li(t),r=await ui(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new D("PATH_ESCAPED");let p;try{p=await open(s,is);}catch(c){throw pe(c)}try{let c;try{let m=await p.stat({bigint:!0});c=pn(m);}catch(m){throw pe(m)}if(c.size>BigInt(i))throw new D("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new D("LIMIT_EXCEEDED");await tt(n,r);let l=await rs(n,r.realRoot,o);await fi(s,r.realRoot,l,c);let f=new Uint8Array(new ArrayBuffer(Number(c.size))),I=0;for(;I<f.byteLength;){let m;try{m=(await p.read(f,I,f.byteLength-I,I)).bytesRead;}catch(b){throw pe(b)}if(m<=0)throw new D("IDENTITY_CHANGED");I+=m;}let g;try{let m=await p.stat({bigint:!0});g=pn(m);}catch(m){throw pe(m)}if(!gi(c,g))throw new D("IDENTITY_CHANGED");return await fi(s,r.realRoot,l,g),await tt(n,r),new Uint8Array(f)}finally{await p.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},mi=new dn;});function Ge(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function _i(e){return typeof e=="string"&&re.test(e)?e:void 0}function fs(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Te(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function ys(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function As(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Is(e){return ls.decode(e)}function gs(e){return JSON.parse(Is(e))}function Ei(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ms(e){if(e instanceof D)return Ei(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ei(n)}}function de(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function hs(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function _s(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Ti(e,n,t,i){let o=hs(e);if(!o)throw new D("READ_DENIED");return As(await o.call(e,n,t,i))}async function pt(e,n,t){let i=_s(e);if(!i)throw new D("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new D("READ_DENIED");return o.map(ys).filter(r=>r!==null)}function Es(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Ts(e){if(!Ge(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(Te))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function Ds(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function fn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Te)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Te))})}function un(e,n){let t=Object.keys(e).sort(Te),i=[...n].sort(Te);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Di(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function bs(e){let n;try{n=gs(e);}catch{return}if(!Ge(n)||!un(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>dt)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!Ge(s))return;let a=["packageDir","appId","definition","files"],p=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),l=[...p?["lineage"]:[],...c?["launcher"]:[]];if(!un(s,[...a,...l])||c&&s.launcher!==false)return;let f=Di(s.packageDir),I=_i(s.appId);if(!f||f.length!==2||f[0]!=="apps"||!fs(f[1])||!I||t.has(s.packageDir)||!Ge(s.definition)||!un(s.definition,["id","version","hash"]))return;let g=_i(s.definition.id),m=s.definition.version,b=s.definition.hash;if(!g||!Number.isSafeInteger(m)||m<1||typeof b!="string"||!ct.test(b)||!Array.isArray(s.files)||s.files.length<2||s.files.length>lt)return;let w=new Set,v=[];for(let T of s.files){if(!Ge(T)||!un(T,["path","sha256"]))return;let P=Di(T.path);if(!P||typeof T.sha256!="string"||!ct.test(T.sha256))return;let C=P.join("/"),A=`${s.packageDir}/${C}`;if(w.has(C)||i.has(A))return;w.add(C),i.add(A),v.push(Object.freeze({path:C,sha256:T.sha256}));}if(!w.has("ui-plugin.json")||!w.has("ui/index.html")||(o+=v.length,o>cs))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:I,definition:Object.freeze({id:g,version:m,hash:b}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(v.sort((T,P)=>Te(T.path,P.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function Ee(e){let n=ms(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function Ps(e,n,t,i,o){let r=[],s=async(a,p)=>{if(!de(i,o))throw new D("LIMIT_EXCEEDED");if(p>2)throw new D("LIMIT_EXCEEDED");let c=await pt(e,n,a);for(let l of c){if(typeof l.name!="string"||l.name.length===0||l.name==="."||l.name===".."||/[\\/\u0000]/.test(l.name))throw new D("PATH_ESCAPED");let f=`${a}/${l.name}`;if(l.kind==="file"){if(r.push(f.slice(t.length+1)),r.length>lt)throw new D("LIMIT_EXCEEDED")}else if(l.kind==="directory")await s(f,p+1);else throw l.kind==="symlink"?new D("PATH_ESCAPED"):new D("READ_DENIED")}};return await s(t,0),r.sort(Te)}function Ns(e){return e==="ui-plugin.json"?262144:e==="ui/index.html"?Be:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?ds:ps}async function bi(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:us};let o=Ts(e.reservedIds),r=[],s=(u,k,H)=>Es(u,"bundled",k),a=(u=[],k=false,H)=>({...H===void 0?{}:{indexHash:H},packages:u,diagnostics:r,incomplete:k,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ct.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p;try{p=await Ti(n,e.root,"bundle-index.json",as);}catch(u){return r.push(s(Ee(u),"bundle-index.json")),a()}let c=createHash("sha256").update(p).digest("hex");if(c!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let l=bs(p);if(l===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!Ds(fn(l.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!de(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let f;try{f=await pt(n,e.root,"");}catch(u){return r.push(s(Ee(u),"bundle-index.json")),a(l.packages.map(k=>({indexEntry:k,failureCode:Ee(u)})),false,c)}if(!de(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let I=f.find(u=>u.name==="bundle-index.json"&&u.kind==="file"),g=f.find(u=>u.name==="apps"&&u.kind==="directory"),m=u=>l.packages.map(k=>({indexEntry:k,failureCode:u}));if(!I)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(m("BUNDLE_INTEGRITY"),false,c);let b=f.filter(u=>u.name!=="bundle-index.json"&&u.name!=="apps");if(b.length>0){let u=b.some(k=>k.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(u,"bundle-index.json")),a(m("BUNDLE_INTEGRITY"),false,c)}if(f.some(u=>u.name==="apps"&&u.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(m("PATH_ESCAPED"),false,c);let w=[];if(g)try{w=await pt(n,e.root,"apps");}catch(u){return r.push(s(Ee(u),"apps")),a(m(Ee(u)),false,c)}if(!de(t,i)||w.length>dt)return r.push(s("LIMIT_EXCEEDED","apps")),a(m("LIMIT_EXCEEDED"),true,c);let v=new Map(l.packages.map(u=>[u.packageDir.slice(5),u])),T=w.filter(u=>!v.has(u.name));for(let u of T)r.push(s(u.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${u.name}`));if(T.length>0){let u=T.some(k=>k.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(m(u),false,c)}let P=new Set,C=new Map,A=new Map;for(let u of l.packages){let k=C.get(u.appId)??[];k.push(u),C.set(u.appId,k);let H=`${u.definition.id}\0${String(u.definition.version)}`,_=A.get(H)??[];_.push(u),A.set(H,_);}for(let u of [...C.values(),...A.values()])if(u.length>1)for(let k of u)P.add(k);let E=[],L=p.byteLength,R=false;for(let u of l.packages){if(!de(t,i)){R=true,E.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let k;try{let x=u.lineage[u.lineage.length-1];if(!x)throw new ne("LINEAGE_INVALID","Definition lineage is missing");if(x.definition.id!==u.definition.id||x.version!==u.definition.version||x.hash!==u.definition.hash)throw new ne("LINEAGE_STALE","Last lineage generation does not match bundle identity");k=Zn(u.lineage,{...x.definition,hash:x.hash}).entries;}catch(x){let te=x instanceof ne?x.code:"LINEAGE_INVALID";r.push(s(te,u.packageDir)),E.push({indexEntry:u,failureCode:te});continue}let H=w.find(x=>x.name===u.packageDir.slice(5));if(!g||!H){E.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}if(H.kind!=="directory"){E.push({indexEntry:u,failureCode:H.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let _;try{let x=await Ps(n,e.root,u.packageDir,t,i);if(!de(t,i)){R=!0,E.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let te=u.files.map(Q=>Q.path);if(x.length!==te.length||x.some((Q,ge)=>Q!==te[ge])){E.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}_=new Map;let ie;for(let Q of u.files){if(!de(t,i)){ie="LIMIT_EXCEEDED",R=!0;break}if(L>=at){ie="LIMIT_EXCEEDED";break}let ge;try{ge=await Ti(n,e.root,`${u.packageDir}/${Q.path}`,Ns(Q.path));}catch(_o){ie=Ee(_o);break}if(!de(t,i)){ie="LIMIT_EXCEEDED",R=!0;break}if(L+ge.byteLength>at){L=at,ie="LIMIT_EXCEEDED";break}if(L+=ge.byteLength,createHash("sha256").update(ge).digest("hex")!==Q.sha256){ie="BUNDLE_INTEGRITY";break}_.set(Q.path,ge);}if(ie!==void 0){E.push({indexEntry:u,failureCode:ie});continue}}catch(x){de(t,i)||(R=true),E.push({indexEntry:u,failureCode:Ee(x)});continue}E.push({indexEntry:u,lineage:k,files:_,...P.has(u)?{failureCode:"DUPLICATE_ID"}:{}});}return a(E,R,c)}var as,dt,lt,cs,ps,ds,at,ct,ls,us,ut=j(()=>{y();Qn();Me();nt();st();as=256*1024,dt=64,lt=128,cs=dt*lt,ps=2*1024*1024,ds=8*1024*1024,at=32*1024*1024,ct=/^[0-9a-f]{64}$/,ls=new TextDecoder("utf-8",{fatal:true}),us=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Ms(e){if(typeof e!="string"||!re.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${ft}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${ft}${n}_read`,action:`${ft}${n}_action`}}function $e(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Ni(e){return typeof e=="string"&&re.test(e)?e:void 0}function Os(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Us(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ri(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Rs(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function ws(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function wi(e){return Ls.decode(e)}function ki(e){return JSON.parse(wi(e))}function ks(e){if(!$e(e))return;let n=Ni(e.pluginId);if(!n)return;let t=Ni(e.definitionId),i=e.version,o=t&&Number.isSafeInteger(i)&&i>=1?`${t}\0${String(i)}`:void 0;return {pluginId:n,...o===void 0?{}:{definitionKey:o}}}function Cs(e){let n=ki(e);return {value:n,identity:ks(n)}}function gt(e,n,t,i){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t};return Object.freeze(o)}function Si(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function De(e){if(e instanceof D)return Si(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Si(n)}}function Je(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Mi(e){switch(e.code){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Ci("UiPluginValidationError",e.code)}}function Ci(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function yt(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Ci("McpAppContractError",e)}}function At(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function xs(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function vs(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if($e(o)){let r=o.bin,s=typeof r=="string"?r:$e(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let p=js(a);if(p&&n.has(p))return p}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function js(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Vs(){return globalThis.performance?.now()??Date.now()}function ke(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))ke(n);return Object.freeze(e)}function Li(e){return Object.freeze(Array.from(e))}async function It(e,n,t,i){if(n.pinnedFiles!==void 0){let o=n.pinnedFiles.get(t);if(o===void 0)throw new D("NOT_FOUND");if(o.byteLength>i)throw new D("LIMIT_EXCEEDED");return new Uint8Array(o)}return xi(e,n.root,`${n.relativePath}/${t}`,i)}function Fs(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(Y(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function Bs(e,n){let t={...e.definition,sourceHash:n},i;try{i=se(t);}catch(r){throw r instanceof N&&r.code==="INPUT_INVALID"?new W("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{ae(o);}catch{throw new W("MANIFEST_INVALID","normalized definition is invalid")}return o}function Hs(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function zs(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Gs(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function xi(e,n,t,i){let o=zs(e);if(!o)throw new D("READ_DENIED");return ws(await o.call(e,n,t,i))}async function $s(e,n,t){let i=Gs(e);if(!i)throw new D("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new D("READ_DENIED");return o.map(Rs).filter(r=>r!==null)}function Js(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Oi(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Oi(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Oi(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function le(e,n){e.diagnostic||(e.diagnostic=gt(n,e.source,e.relativePath,e.identity?.pluginId));}function Ws(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&le(s,"RESERVED_ID");if(o.length>1)for(let s of o)le(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)le(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))le(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))le(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)le(o,"DUPLICATE_ID");}function Ks(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let p of Js(n)){for(let c of p.appIds??[])typeof c=="string"&&i.add(c);for(let c of p.definitionIds??[])typeof c=="string"&&o.add(c);for(let c of p.toolNames??[])typeof c=="string"&&r.add(c);}for(let p of e){let c=p.candidate;if(!c)continue;if(i.has(c.pluginId)||o.has(c.definitionId)){le(p,"RESERVED_ID");continue}if(p.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){le(p,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(f=>f!==void 0).some(f=>r.has(f))&&le(p,"DUPLICATE_ID");}}function Xs(e){return [...e].sort((n,t)=>{let i=Pi.indexOf(n.source)-Pi.indexOf(t.source);return i!==0?i:Ri(n.relativePath,t.relativePath)})}function U(e,n){e.diagnostic=gt(n,e.source,e.relativePath,e.identity?.pluginId);}async function Ui(e,n,t){if(t.byteLength>262144){U(n,"LIMIT_EXCEEDED");return}let i;try{i=Cs(t);}catch{U(n,"MANIFEST_INVALID");return}if(n.bundleIdentity===void 0)n.identity=i.identity;else if(i.identity?.pluginId!==n.bundleIdentity.appId||i.identity.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){U(n,"BUNDLE_INTEGRITY");return}if($e(i.value)&&i.value.builtinOnly===true){U(n,"RESERVED_ID");return}let o;try{let _=_e(i.value,{mode:"local"});if(_.manifestVersion!==2)throw new W("MANIFEST_INVALID","workspace App requires v2");o=_;}catch(_){if(_ instanceof W){U(n,Mi(_));return}if(_ instanceof ce){U(n,yt(_.code));return}if($e(_)&&typeof _.code=="string"){U(n,yt(_.code));return}throw _}let r={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=r),o.actions.length>0)try{di(o.actions.map(_=>({actionId:_.actionId,inputSchema:_.inputSchema})));}catch(_){if(_ instanceof ce){U(n,yt(_.code));return}throw _}let s;try{s=await It(e,n,"ui/index.html",Be);}catch(_){U(n,Je(De(_),"entry"));return}if(s.byteLength>Be){U(n,"LIMIT_EXCEEDED");return}let a;try{a=wi(s);}catch{U(n,"ENTRY_INVALID");return}if(s.byteLength===0||a.length===0){U(n,"ENTRY_INVALID");return}let p=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==p){U(n,"ENTRY_INVALID");return}let c={},l,f;if(o.initialState!==void 0){try{l=await It(e,n,"ui/state.json",65536);}catch(_){U(n,Je(De(_),"initial"));return}if(l.byteLength>65536){U(n,"LIMIT_EXCEEDED");return}try{let _=ki(l),x=o.dataPaths??[],te=Jn(_,x);c=oe(te,0,x),Ne(c);}catch{U(n,"INITIAL_STATE_INVALID");return}if(f=createHash("sha256").update(l).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==f){U(n,"INITIAL_STATE_INVALID");return}}let I={...o,entryHash:p,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:f}}},g=Wn(I),m=Fs(I,s,l??new Uint8Array),b;try{b=Bs(g,m);}catch(_){if(_ instanceof W){U(n,Mi(_));return}throw _}let w;if(n.bundleLineage!==void 0){let _=n.bundleLineage[n.bundleLineage.length-1];if(!_){U(n,"LINEAGE_INVALID");return}let{legacy:x,...te}=_.definition,{hash:ie,...Q}=b;if(Y(te)!==Y(Q)){U(n,"LINEAGE_STALE");return}if(x!==void 0&&(b={...b,legacy:x}),x!==void 0)try{b={...b,hash:se(b)},ae(b);}catch{U(n,"LINEAGE_INVALID");return}w=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){U(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==b.id||n.bundleIdentity.version!==b.version||n.bundleIdentity.definitionHash!==b.hash)){U(n,"LINEAGE_STALE");return}let v=Ms(o.pluginId),T=o.actions.length===0?{read:v.read}:v,P=ke(g),C=ke(I),A=ke(b),E=ke({...g.handlers}),L=Li(s),R=l===void 0?void 0:Li(l),u=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:p,bytes:L}),...R===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:f,bytes:R})}}),k={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,relativePath:n.relativePath,manifest:C,normalized:P,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:A,handlers:E,resources:u,html:a,entryBytes:L,entryHash:p,initialState:ke(c),...R===void 0?{}:{initialStateBytes:R},...f===void 0?{}:{initialStateHash:f},sourceHash:m,toolNames:Object.freeze(T)},H=n.provenance===void 0?{...k,source:n.source}:{...k,provenance:n.provenance,lineage:w??[]};n.candidate=Object.freeze(H),Hs(o)&&U(n,"EXEC_DENIED");}async function Ys(e,n){try{return await It(e,n,"ui-plugin.json",262144)}catch(t){if(De(t)==="NOT_FOUND")return;U(n,Je(De(t),"manifest"));return}}function qs(e,n,t,i=Ss,o=false){let r=Xs(e);Ws(r);let s=Object.freeze(r.filter(l=>l.candidate!==void 0&&l.diagnostic===void 0).map(l=>l.candidate)),a=Object.freeze(r.filter(l=>l.diagnostic!==void 0).map(l=>l.diagnostic)),p=o?Object.freeze({...t===void 0?{}:{indexHash:t},diagnostics:Object.freeze(a.filter(l=>l.source==="bundled").map(l=>Object.freeze({...l}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...p===void 0?{}:{productBundleSnapshotMetadata:p}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function Zs(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Qs(e,n){if(Zs(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??mi,options:t}}async function vi(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=Qs(n,t),r=o.clock??Vs,s=r(),a=[],p=0,c,l=await bi(o.productBundle,i,s,r);a.push(...l.diagnostics.map(g=>({source:g.source,root:o.productBundle?.root??e,name:"",relativePath:g.relativePath,diagnostic:g})));let f=l.reservedIds;l.incomplete&&(c="time_limit");for(let g of l.packages){let m=g.indexEntry,b=m.packageDir,w=g.files===void 0?void 0:vs(b,g.files),v=l.indexHash===void 0?void 0:ni(Object.freeze({kind:"bundled",launcher:m.launcher!==false,indexHash:l.indexHash,packageDir:b,appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash,files:m.files}),w),T={source:"bundled",root:o.productBundle?.root??e,name:b.slice(5),relativePath:b,...v===void 0?{}:{provenance:v},...g.files===void 0?{}:{pinnedFiles:g.files},...g.lineage===void 0?{}:{bundleLineage:g.lineage},bundleIdentity:{appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash},identity:xs(m)};if(a.push(T),p+=1,g.failureCode!==void 0){U(T,g.failureCode);continue}let P=g.files?.get("ui-plugin.json");if(P===void 0){U(T,"BUNDLE_INTEGRITY");continue}await Ui(i,T,P),T.candidate!==void 0&&T.diagnostic===void 0&&p<64&&!At(s,r)&&(c="time_limit");}let I=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];for(let g of I){let{source:m,directory:b}=g,w;try{w=await $s(i,e,b);}catch(T){if(De(T)==="NOT_FOUND")continue;a.push({source:m,root:e,name:"",relativePath:m,diagnostic:gt(Je(De(T),"manifest"),m,m)});continue}let v=w.filter(T=>T.kind==="directory"||T.kind==="symlink").filter(T=>Us(T.name)).map(T=>({source:m,root:e,name:T.name,relativePath:Os(m,T.name)})).sort((T,P)=>Ri(T.relativePath,P.relativePath));for(let T of v){let P={...T};a.push(P);let C;if(m==="skills"&&(C=await Ys(i,P),C===void 0))continue;if(p>=64){U(P,"LIMIT_EXCEEDED");continue}if(T.relativePath.split("/").length-1>2){U(P,"LIMIT_EXCEEDED");continue}if(c!==void 0||!At(s,r)){U(P,"LIMIT_EXCEEDED"),c="time_limit";continue}if(p+=1,C===void 0)try{C=await xi(i,P.root,`${P.relativePath}/ui-plugin.json`,262144);}catch(E){U(P,Je(De(E),"manifest"));continue}await Ui(i,P,C),P.diagnostic===void 0&&p<64&&!At(s,r)&&(c="time_limit");}}return Ks(a,o,f),qs(a,c,l.indexHash,f,o.productBundle!==void 0)}var Ss,ft,Pi,Ls,ji=j(()=>{y();we();Ke();Ae();Kn();Me();nt();sn();st();an();ut();ut();Ss=fn([]),ft="crewx_local_app_";Pi=["bundled","apps","skills"],Ls=new TextDecoder("utf-8",{fatal:true});});y();Kn();y();Ln();y();var $t="SKILL.md",Ur=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function Jt(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Rr(e){return e.isDirectory()||e.isSymbolicLink()}function qt(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function Xn(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Ur);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!Jt(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=Jt(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function wr(e){return [join(e,$t),join(e,"skill",$t)]}function Wt(e,n){if(!qt(e))return null;for(let t of wr(e)){if(!existsSync(t))continue;let o=Xn(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function Kt(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Rr)}catch{return []}}function Xt(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function Zt(e){let n=[],t=new Set;for(let i of e)if(qt(i))for(let o of Kt(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of Kt(r))Xt(Wt(join(r,s.name),s.name),t,n);continue}Xt(Wt(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}ji();var na=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function In(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?ta(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function ta(e,n){let t=new TextEncoder().encode(gn(e)),i=ia(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function ia(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function gn(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function An(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Bi(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:gn(t)}function oa(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function Hi(e){return Object.freeze({packageRoot:e})}function ra(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Ie,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function zi(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function sa(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=ra(t),s=In(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",p=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:p,...zi(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:Hi(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:o,summary:Object.freeze(c)}}function aa(e){let n=ca(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...zi(["skill"]),skillName:e.skill.name,localDefinitionRef:Hi(e.packageRoot),definitionHash:In({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function ca(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function z(e,n,t,i){return Object.freeze({code:e,source:n,relativePath:pa(t),...i===void 0?{}:{appId:i}})}function pa(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function Gi(e){return z(e.code,e.source,e.relativePath,e.pluginId)}function da(e,n){let t=Bi(e,n.dir);if(!t)return {diagnostic:z("PATH_ESCAPED","node_modules","node_modules")};let i=oa(t);if(!i)return {diagnostic:z("PATH_ESCAPED","node_modules",t)};let o=Xn(n.skillMdPath);if(!o.readable)return {diagnostic:z("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:z("SKILL_INVALID",i,t)};let r=la(n.dir,n.skillMdPath);if(!r)return {diagnostic:z("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:In({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:z("SKILL_READ_FAILED",i,t)}}}function la(e,n){let t=relative(e,n).split(sep).join("/");try{return gn(t)}catch{return null}}function ua(e){if(!na.test(e.appId))return {diagnostic:z("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Ie,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function fa(e){return e.builtinCatalog}function ya(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return gn(n)}catch{return null}}function Aa(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Ia(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=ya(s);if(!a){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let p=o.get(a);if(p&&JSON.stringify(p)!==JSON.stringify(s)){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let p=r.get(s);if(!p){t.push(z("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Aa(a);if(!c){t.push(z("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==p.appId||a.definitionHash!==void 0&&a.definitionHash!==p.summary.definitionHash){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let l={...p.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},f=e.indexOf(p);f>=0&&(e[f]={...p,summary:Object.freeze(l)});}}function ga(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(p=>p.source!==r))i.add(a),n.push(z("RESERVED_ID",a.source,ht(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(z("DUPLICATE_ID",a.source,ht(a),a.appId));continue}for(let s of o)i.add(s),n.push(z("DUPLICATE_ID",s.source,ht(s),s.appId));}return e.filter(o=>!i.has(o))}function ht(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function ma(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(Gi)}function ha(e){return e.filesystem}function _a(e,n){let t=ha(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function $i(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=fa(n),i=await vi(e,_a(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],p=[],c=new Set;for(let A of r)for(let E of Zt([A])){let L=Bi(e,E.dir);(L===null||!c.has(L))&&(p.push(E),L!==null&&c.add(L));}for(let A of p){let E=da(e,A);"diagnostic"in E?s.push(E.diagnostic):a.push(E);}let l=new Map;for(let A of i.apps??i.candidates??[]){let E=A.provenance===void 0?`workspace\0${A.relativePath}`:`bundled\0${A.provenance.indexHash}\0${A.provenance.packageDir}`;l.set(E,{candidate:A,packageRoot:A.relativePath});}let f=new Map(a.map(A=>[A.packageRoot,A])),I=[];for(let A of l.values()){let E=A.candidate.provenance===void 0?f.get(A.packageRoot):void 0,L=sa(A,E);I.push({...L.packageRoot===void 0?{}:{packageRoot:L.packageRoot},source:L.source,appId:L.appId,summary:L.summary});}let g=new Set([...l.values()].filter(A=>A.candidate.provenance===void 0).map(A=>A.packageRoot)),m=o===void 0?new Set:new Set(i.diagnostics.filter(A=>A.code==="RESERVED_ID"&&A.source!=="bundled").map(A=>A.relativePath)),b=new Set(o?.reservedAppIds??[]);for(let A of a){let E=aa(A);if(!(g.has(A.packageRoot)||m.has(A.packageRoot))){if(b.has(E.appId)){s.push(z("RESERVED_ID",A.source,A.packageRoot,E.appId));continue}I.push({packageRoot:E.packageRoot,source:E.source,appId:E.appId,summary:E.summary});}}let w=[...ma(i.diagnostics,new Set(a.map(A=>A.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(A=>A.source==="bundled").map(Gi)??[]],v=[];if(t)for(let A of t.listMcpApps()){let E=ua(A);"diagnostic"in E?w.push(E.diagnostic):v.push(E);}let T=ga([...I,...v],w);Ia(T,n,w);let P=T.map(A=>A.summary).sort((A,E)=>An(A.appId,E.appId)),C=[...w].sort((A,E)=>An(A.relativePath,E.relativePath)||An(A.code,E.code)||An(A.appId??"",E.appId??""));return Object.freeze({items:Object.freeze(P),diagnostics:Object.freeze(C)})}y();y();y();function Ea(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function Ce(e,n){try{return Ea(n).test(e)}catch{return  false}}function mn(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>Ce(t[i+r],o))}function Ta(e,n){return e.split("/").some(t=>Ce(t,n))}var Ji=[{label:".env*",test:e=>Ce(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>Ce(e,"*.key")},{label:"*.pem",test:e=>Ce(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&mn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&mn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&mn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&mn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>Ta(n,".crewx")}];function hn(e,n,t){for(let i of Ji)if(i.test(e,n,t))return i.label;return null}function Tt(e){let n=[],t=[];function i(o,r,s){let a;try{a=G.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((p,c)=>p.name.localeCompare(c.name));for(let p of a){let c=r?`${r}/${p.name}`:p.name,l=J.join(o,p.name);if(p.isSymbolicLink()){let f;try{f=G.statSync(l);}catch{t.push({path:c,rule:"symlink"});continue}if(f.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let I=s??hn(p.name,c,false);I?t.push({path:c,rule:I}):t.push({path:c,rule:"symlink"});continue}if(p.isDirectory()){let f=s??hn(p.name,c,true);i(l,c,f);continue}if(p.isFile()){let f=s??hn(p.name,c,false);f?t.push({path:c,rule:f}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}y();var Da=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function ba(e){return e.includes(0)}function Dt(e,n,t){let i=[];for(let o of n){let r=J.join(e,o),s;try{let p=t?.get(o);s=p===void 0?G.readFileSync(r):Buffer.from(p);}catch{continue}if(ba(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((p,c)=>{for(let{rule:l,regex:f}of Da)f.test(p)&&i.push({path:o,line:c+1,rule:l});});}return i}y();y();var ue=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function h(e,n){return new ue(e,n)}var Yi=/^[a-z0-9-]+$/,Pa=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Na=/^[A-Za-z_][A-Za-z0-9_]*$/;function Sa(e){let n=J.join(e,"crewx.yaml");if(!G.existsSync(n))return {};let t;try{t=qi.load(G.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Ma(e){return bt.createHash("sha256").update(e).digest("hex")}function Zi(e){let n;try{n=G.lstatSync(e);}catch{throw h("PACKAGE_FILE_INVALID",`file is not readable: ${J.basename(e)}`)}if(n.isSymbolicLink())throw h("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw h("PACKAGE_FILE_INVALID","only regular files are publishable");return bt.createHash("sha256").update(new Uint8Array(G.readFileSync(e))).digest("hex")}function La(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Qi(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||J.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw h("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function Oa(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw h("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function eo(e){if(!Pa.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function no(e,n,t={}){let i=Sa(e),o=i.name??J.basename(e);if(!Yi.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${Yi} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");eo(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let l of s){if(typeof l!="string"||!Na.test(l))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(l)}"`);a.push(l);}let p=n.map(l=>(Qi(l),{path:l,sha256:Zi(J.join(e,l))})).sort((l,f)=>l.path<f.path?-1:l.path>f.path?1:0),c={name:o,version:r,type:"template",description:i.description??"",files:p,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function Ua(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw h("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function to(e,n){if(Oa(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(eo(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw h("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");for(let s of ["ui-plugin.json","ui/index.html"])if(!n.includedFiles.includes(`${i}${s}`))throw h("APP_UI_MANIFEST_INVALID",`screen App is missing ${s}`)}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw h("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Qi(s),!s.startsWith(i))throw h("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?Zi(J.join(e,s)):Ma(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>La(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Ua(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}y();function io(e){return bt.createHash("sha256").update(e).digest("hex")}function co(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw h("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=J.resolve(e),i=J.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${J.sep}`))throw h("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function oo(e,n){let t=co(e,n),i;try{i=G.lstatSync(t);}catch{throw h("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw h("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw h("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(G.readFileSync(t))}async function po(e,n,t={}){let i=J.join(e,".crewx","publish");G.mkdirSync(i,{recursive:true});let o=J.join(i,`${n.name}-${n.version}.tgz`),r=J.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=G.mkdtempSync(J.join(ro.tmpdir(),"crewx-publish-"));try{let a=new Set,p=[];for(let c of n.files){if(a.has(c.path))throw h("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let l=t.generatedFiles?.get(c.path);if(c.generated===!0&&l===void 0)throw h("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let g=oo(e,c.path);if(t.sourceFileHashes.get(c.path)!==io(g))throw h("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let f=l??oo(e,c.path);if(io(f)!==c.sha256)throw h("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let I=co(s,c.path);G.mkdirSync(J.dirname(I),{recursive:!0}),G.writeFileSync(I,new Uint8Array(f)),p.push(c.path);}G.writeFileSync(J.join(s,"manifest.json"),JSON.stringify(n,null,2)),await ao.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...p]),G.renameSync(r,o);}finally{try{G.rmSync(r,{force:!0});}catch{}G.rmSync(s,{recursive:true,force:true});}return o}y();y();var xe="/api/v1";var ka=201,Ca=200,xa=409,Pt=401,lo={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function va(){return process.env.WI013_FAKE_UPLOAD==="1"}function ja(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Va(e){return e.replace(/\/+$/,"")}async function We(e){try{return await e.json()}catch{return null}}function uo(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Fa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Ba(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function fo(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(lo,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return h(lo[s],a)}}async function Ha(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Va(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${xe}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let p=await We(a),c=Fa(p),l=Ba(p),f=r&&l!==void 0?l:i,I;if(a.status===ka)I="created";else if(r&&a.status===Ca){if(c===void 0)throw h("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");I="existing";}else if(a.status===xa){if(r)throw fo(p,i)??h("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);I="existing";}else throw a.status===Pt?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let g="not-needed",m=null;if(I==="existing"&&!r){let L;try{L=await fetch(`${n}${xe}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let R=await We(L);if(L.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${L.status}`);let k=uo(R,"publisher items",L.status)?.items;if(!Array.isArray(k))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${L.status}`);let H=k.find(_=>!_||typeof _!="object"?false:_.slug===i);if(!H||typeof H.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${L.status}`);if(m=H.version,m!==e.manifest.version){let _;try{_=await fetch(`${n}${xe}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!_.ok)throw await We(_),_.status===Pt?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${_.status})`):_.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${_.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${_.status}`);g="applied";}}let b=G.readFileSync(e.tgzPath),w=va()?ja(b):b,v=new FormData;v.set("archive",new Blob([new Uint8Array(w)],{type:"application/gzip"}),`${f}-${e.manifest.version}.tgz`);let T=r&&c!==void 0?c:i,P;try{P=await fetch(`${n}${xe}/publisher/items/${encodeURIComponent(T)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:v});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(P.status===Pt)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!P.ok){let L=await We(P);if(r){let R=fo(L,f);if(R)throw R}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${P.status}`)}let C=await We(P),A=uo(C,"upload",P.status),E=typeof A.contentId=="string"&&A.contentId.length>0?A.contentId:c;if(r&&E===void 0)throw h("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:f,version:e.manifest.version,...E===void 0?{}:{contentId:E},artifactChecksum:A.artifactChecksum,artifactSizeBytes:A.artifactSizeBytes,submitOutcome:I,versionUpdate:g,serverVersionBefore:m}}var za=1e4,Ga=100*1024*1024;function Nt(e){return bt.createHash("sha256").update(e).digest("hex")}function $a(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function En(e,n){if(!n||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw h("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=J.resolve(e,...n.split("/")),i=J.resolve(e);if(t!==i&&!t.startsWith(`${i}${J.sep}`))throw h("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=G.lstatSync(t);}catch{throw h("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw h("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw h("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(G.readFileSync(t))}function Tn(e,n){return e===n||e.startsWith(`${n}/`)}function Ja(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Ao(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new ue("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function go(e,n,t,i){let o=Ao(t.maxFileCount??t.maxFiles,za,"max file count"),r=Ao(t.maxTotalBytes??t.maxBytes,Ga,"max total bytes");if(n.length>o)throw new ue("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let p=i?.get(a);if(p!==void 0?s+=p.byteLength:s+=En(e,a).byteLength,s>r)throw new ue("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function Wa(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function Ka(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw h("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw h("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw h("APP_ID_REQUIRED")}function Xa(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw h("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw h("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function Ya(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw h("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function qa(e,n){let t=[];for(let i of e.excluded)t.push(Tn(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)Tn(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(Ja)}function Za(e,n,t,i){let o=`${t}/ui-plugin.json`;if(!i.includes(o))throw h("APP_UI_MANIFEST_INVALID","selected screen App has no package ui-plugin.json");let r=En(e,o),s=Nt(r),a;try{a=JSON.parse(Buffer.from(r).toString("utf8"));}catch{throw h("APP_UI_MANIFEST_INVALID","ui-plugin.json is not valid JSON")}let p;try{let I=_e(a,{mode:"local"});if(I.manifestVersion!==2)throw new Error("screen App requires manifestVersion 2");p=I;}catch(I){throw I instanceof W?h("APP_UI_MANIFEST_INVALID",I.code):h("APP_UI_MANIFEST_INVALID")}if(p.pluginId!==n.appId)throw h("APP_DEFINITION_CONFLICT","ui-plugin.json pluginId no longer matches the selected App");let c=`${t}/ui/index.html`;if(!i.includes(c))throw h("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let l=Nt(En(e,c)),f=JSON.parse(JSON.stringify(a));if(f.entryHash=l,Object.prototype.hasOwnProperty.call(f,"initialState")){let I=f.initialState;if(!$a(I)||I.path!=="ui/state.json")throw h("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let g=`${t}/ui/state.json`;if(!i.includes(g))throw h("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let m=En(e,g);f.initialState={...I,hash:Nt(m)};}try{let I=_e(f,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(Mn(I),"utf8")),sourceHash:s}}catch(I){throw I instanceof W?h("APP_UI_MANIFEST_INVALID",I.code):h("APP_UI_MANIFEST_INVALID")}}async function Qa(e,n){let{included:t,excluded:i}=Tt(e);go(e,t,n);let o=no(e,t,{version:n.version}),r=Dt(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function ec(e,n){Ka(n);let t=await $i(e),i=Xa(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw h("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=Ya(i),r=Tt(e);if(r.excluded.some(g=>Tn(g.path,o)&&(g.rule==="symlink"||g.rule==="symlink-dir")))throw h("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(g=>Tn(g,o)),a=qa(r,o),p=new Map,c=new Map;if(i.capabilities.includes("screen")){let g=Za(e,i,o,s);p.set(`${o}/ui-plugin.json`,g.bytes),c.set(`${o}/ui-plugin.json`,g.sourceHash);}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw h("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");go(e,s,n,p);let l={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:p},f=to(e,l),I=Dt(e,s,p);return {plan:{manifest:f,included:s,excluded:a,secretFindings:I},archiveOptions:{generatedFiles:p,sourceFileHashes:c}}}async function mo(e,n){let t=J.resolve(e);if(Wa(n))return ec(t,n);if(n.expectedDefinitionHash!==void 0)throw h("APP_ID_REQUIRED");return Qa(t,n)}async function gl(e,n={}){return (await mo(e,n)).plan}function nc(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new ue("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function ho(e,n={}){let t=J.resolve(e),i=await mo(t,n);i.plan.secretFindings.length>0&&nc(i.plan.secretFindings);let o=await po(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function ml(e,n={}){return ho(e,n)}async function hl(e,n){let t=await ho(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
-export{Ga as DEFAULT_PUBLISH_MAX_BYTES,za as DEFAULT_PUBLISH_MAX_FILES,Ji as EXCLUDE_RULES,xe as MARKETPLACE_API_PREFIX,ue as PublishError,hl as packApp,ho as packPublish,ml as packTemplate,gl as planPublish,Ha as uploadToMarketplace};
+import*as J from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as Ut from'crypto';import {createHash}from'crypto';import*as $ from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as fo from'js-yaml';import {load}from'js-yaml';import*as _o from'os';import*as bo from'tar';import {gunzipSync,gzipSync}from'zlib';var V=(e,n)=>()=>(e&&(n=e(e=0)),n);var g=V(()=>{});var L,en=V(()=>{g();L=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function kn(e){return xo.test(e)||vo.test(e)}function q(){throw new L("INPUT_INVALID","JSON value is not projection-safe")}function Bo(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function wn(e,n,t,i,o,r){if(n>i&&q(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(jo.test(e)||Fo.test(e)&&!Go(o,r)||Vo.test(e))&&q(),e;if(typeof e=="number")return Number.isFinite(e)||q(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&q();let s=e;t.has(s)&&q(),t.add(s);try{if(Array.isArray(e))return e.map(p=>wn(p,n+1,t,i,o,r));Bo(s)||q();let a={};for(let[p,c]of Object.entries(e))kn(p)&&q(),a[p]=wn(c,n+1,t,i,[...o,p],r);return a}finally{t.delete(s);}}function se(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>zo)&&q(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&q();let i=wn(e,0,new Set,Ho+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&q(),i}function Ne(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function Go(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>Ne(t,i))}function Se(e){try{let n=JSON.stringify(e);return n===void 0&&q(),n}catch{q();}}function Un(e){return Array.isArray(e)?e.map(Un):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Un(e[n])])):e}function Z(e){return Se(Un(e))}function Cn(e){return Buffer.byteLength(e,"utf8")}var xo,vo,jo,Vo,Fo,Ho,zo,ge=V(()=>{g();en();xo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,vo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,jo=/<\/?[A-Za-z][^>]*>/,Vo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Fo=/^(?:https?|file|ftp|ws|wss):\/\//i;Ho=8,zo=4;});function xn(e){return Z(e)}var xt=V(()=>{g();ge();});var me,vn=V(()=>{g();me="window";});function Me(e){return $o.has(e)||Wo.test(e)||Jo.test(e)}var vt,$o,Wo,Jo,nn,Fe,ae,jn,Vn,Fn,Bn,Hn,Le=V(()=>{g();vt=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],$o=new Set(vt),Wo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Jo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;nn=/^[A-Za-z0-9_]+$/,Fe=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,ae=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,jn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Vn=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Fn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,Bn=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Hn=["inline","panel"];});function zn(e){return typeof e=="string"&&jt.includes(e)}var jt,Vt=V(()=>{g();Le();jt=["text/plain","application/json"];});function tn(e){if(!Gn(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Ko(e.in)||Object.hasOwn(e,"out")&&!Xo(e.out))}function Ko(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Xo(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function Gn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var $n=V(()=>{g();Vt();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function l(e,n=e){throw new K(e,n)}function F(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function k(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function B(e,n,t=[]){let i=new Set([...n,...t]);Object.keys(e).some(o=>!i.has(o))&&l("MANIFEST_INVALID"),n.some(o=>!k(e,o))&&l("MANIFEST_INVALID");}function cn(e,n=false,t=false,i=false){return Qo.test(e)||!i&&nr.test(e)||er.test(e)||t&&Ft.test(e)||tr.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ft.test(e))}function sn(e,n=new Set,t=0,i=false,o=false){if(typeof e=="string"){cn(e,i,o)&&l("UNSAFE_VALUE");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&l("MANIFEST_INVALID"),n.add(e);try{if(Array.isArray(e)){for(let r of e)sn(r,n,t+1);return}F(e)||l("MANIFEST_INVALID");for(let[r,s]of Object.entries(e))sn(s,n,t+1,i&&t===0&&(r==="name"||r==="description"),o);}finally{n.delete(e);}}}function oe(e,n){let t=e[n];return typeof t!="string"&&l("MANIFEST_INVALID"),t}function ee(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&l("MANIFEST_INVALID"),i}function Wn(e){return Zo.test(e)||l("MANIFEST_INVALID"),e}function Oe(e){return qo.test(e)||l("TOKEN_INVALID"),e}function Tr(e){return Xt.test(e)||l("MANIFEST_INVALID"),e}function br(e){F(e)||l("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=Tr(t);F(i)||l("MANIFEST_INVALID");let r=i.type;if(r==="text"){B(i,["type","maxLength"]),n[o]={type:r,maxLength:ee(i,"maxLength",1)};continue}if(r==="text-list"){B(i,["type","max","itemMaxLength"]),n[o]={type:r,max:ee(i,"max",0),itemMaxLength:ee(i,"itemMaxLength",1)};continue}if(r==="step-list"){B(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=ee(i,"min",0),a=ee(i,"max",1);s>a&&l("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:ee(i,"labelMaxLength",1),detailMaxLength:ee(i,"detailMaxLength",1)};continue}typeof r=="string"&&l("SCHEMA_TYPE_UNSUPPORTED"),l("MANIFEST_INVALID");}return n}function Pr(e,n,t){let i=e[n];(!i||i.type!==t)&&l("MANIFEST_INVALID");}function on(e,n,t){let i=oe(e,"field");return Xt.test(i)||l("MANIFEST_INVALID"),Pr(n,i,t),i}function Dr(e,n){F(e)||l("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&l("MANIFEST_INVALID"),_r.includes(t)||l("PRIMITIVE_UNKNOWN"),t){case "card-shell":return B(e,["primitive"]),{primitive:t};case "meta-banner":return B(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Oe(oe(e,"badgeToken")),noticeToken:Oe(oe(e,"noticeToken"))};case "heading":return B(e,["primitive","field"]),{primitive:t,field:on(e,n,"text")};case "labeled-text":return B(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&l("MANIFEST_INVALID"),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text"),variant:"callout"};case "step-flow":return B(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"step-list")};case "text-list":{B(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text-list")};return k(e,"emptyToken")&&(i.emptyToken=Oe(oe(e,"emptyToken"))),k(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&l("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return l("MANIFEST_INVALID")}function Nr(e,n){return Array.isArray(e)||l("MANIFEST_INVALID"),e.map(t=>Dr(t,n))}function H(e="v2 manifest exceeds a contract limit"){return l("LIMIT_EXCEEDED",e)}function Q(e="initial state is not projection-safe"){return l("INITIAL_STATE_INVALID",e)}function Bt(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||mr.test(e)||hr.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),(cn(e,true,true)||ir.test(e)||or.test(e)||rr.test(e))&&l("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Jn(e,n){return (typeof e!="string"||!ae.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Sr(e){return (typeof e!="string"||!jn.test(e)||e==="*"||e==="all")&&l("MANIFEST_INVALID","action capability is invalid"),e}function Yt(e){return (typeof e!="string"||!gr.test(e))&&l("MANIFEST_INVALID","resource hash is invalid"),e}function Kn(e,n=new Set,t=0){if(typeof e=="string"){e.length>4096&&H("v2 manifest string is too long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||l("MANIFEST_INVALID","v2 manifest contains a non-finite number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&l("MANIFEST_INVALID","v2 manifest contains a non-JSON value"),typeof e!="object"&&l("MANIFEST_INVALID"),t>8&&H("v2 manifest nesting is too deep"),n.has(e)&&l("MANIFEST_INVALID","v2 manifest contains a cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&H("v2 manifest array is too long");for(let i of e)Kn(i,n,t+1);return}F(e)||l("MANIFEST_INVALID","v2 manifest contains a non-plain object");for(let i of Object.values(e))Kn(i,n,t+1);}finally{n.delete(e);}}}function qt(e){return (typeof e!="string"||e.length>4096||!Fe.test(e))&&(typeof e=="string"&&e.length>4096&&H("projection path is too long"),l("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Me(t))&&l("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Xn(e){F(e)||l("MANIFEST_INVALID","projection policy must be an object"),B(e,["allow"]),Array.isArray(e.allow)||l("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&H("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=qt(i);t.has(o)&&l("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Mr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","dataPaths must be an array"),e.length>Er&&H("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=qt(o);i.has(r)&&l("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>Ne(r,s))||l("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Re(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Ht(e,n){return (typeof e!="number"||!Number.isFinite(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Yn(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||cn(e))&&l("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||l("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&H("schema enum is too deep"),t.has(e)&&l("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&H("schema enum array is too long"),e.map(o=>Yn(o,n+1,t));F(e)||l("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Me(o)&&l("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Yn(r,n+1,t);return i}finally{t.delete(e);}}function Lr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","schema required must be an array"),e.length>64&&H("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!Fe.test(o))&&l("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&H("schema required key is too long"),i.has(o)&&l("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&l("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Or(e,n){let t=n?Fe:nn;return e.length>4096&&H("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Me(i)))&&l("MANIFEST_INVALID","schema property name is invalid"),e}function qn(e,n=0,t=false){F(e)||l("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&H("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&l("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),l("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),B(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(k(e,"enum")&&(Array.isArray(e.enum)||l("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&H("schema enum is too long"),r.enum=e.enum.map(a=>Yn(a))),i==="string"&&(k(e,"minLength")&&(r.minLength=Re(e.minLength,"schema minLength",4096)),k(e,"maxLength")&&(r.maxLength=Re(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&l("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(k(e,"minimum")&&(r.minimum=Ht(e.minimum,"schema minimum")),k(e,"maximum")&&(r.maximum=Ht(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&l("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(k(e,"minItems")&&(r.minItems=Re(e.minItems,"schema minItems",128)),k(e,"maxItems")&&(r.maxItems=Re(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&l("MANIFEST_INVALID","schema array length bounds are inverted"),k(e,"items")&&(r.items=qn(e.items,n+1,false))),i==="object"){let a;if(k(e,"properties")){F(e.properties)||l("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&H("schema properties are too many"),a={};for(let[d,A]of c){let I=Or(d,t);a[I]=qn(A,n+1,false);}r.properties=a;}k(e,"minProperties")&&(r.minProperties=Re(e.minProperties,"schema minProperties",64)),k(e,"maxProperties")&&(r.maxProperties=Re(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&l("MANIFEST_INVALID","schema object property bounds are inverted");let p=Lr(e.required,a);p!==void 0&&(r.required=p),k(e,"additionalProperties")&&(e.additionalProperties!==false&&l("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&H("action inputSchema subtree is too large"),r}function Rr(e){let n=qn(e,0,true);return (n.type!=="object"||!n.properties)&&l("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function wr(e){if(F(e)||l("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){B(e,ur);let n=e.handler;return (typeof n!="string"||!Vn.test(n))&&l("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){B(e,fr,yr),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&l("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!Fn.test(i))&&l("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=k(e,"env")?kr(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}l("MANIFEST_INVALID","action backend type is unsupported");}function Ur(e){F(e)||l("MANIFEST_INVALID","action must be an object"),B(e,pr,dr),k(e,"_meta")&&Zt(e._meta);let n=Jn(e.actionId,"actionId");kn(n)&&l("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`);let t=Sr(e.capability),i=e.mutation;typeof i!="boolean"&&l("MANIFEST_INVALID","action mutation must be boolean");let o=Rr(e.inputSchema),r;if(k(e,"dataInputs")){Array.isArray(e.dataInputs)||l("MANIFEST_INVALID","action dataInputs must be an array");let d=o.properties,A=new Set,I=[];for(let m of e.dataInputs)(typeof m!="string"||!k(d,m)||A.has(m))&&l("MANIFEST_INVALID","action dataInputs must be unique declared properties"),A.add(m),I.push(m);r=I;}let s=Xn(e.resultProjection),a=wr(e.backend),p;k(e,"content")&&((a.type!=="skill"||!tn(e.content))&&l("MANIFEST_INVALID","action content declaration is invalid"),p=Cr(e.content));let c;if(k(e,"confirmation")){let d=e.confirmation;d!=="none"&&d!=="native"&&l("MANIFEST_INVALID","action confirmation is invalid"),c=d;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...p===void 0?{}:{content:p},...r===void 0?{}:{dataInputs:r},...c===void 0?{}:{confirmation:c}}}function kr(e){(!Array.isArray(e)||e.length===0)&&l("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&l("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function Cr(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function xr(e){return F(e)||l("INITIAL_STATE_INVALID","initialState must be an object"),B(e,Ar,Ir),e.path!=="ui/state.json"&&l("MANIFEST_INVALID","initialState path is not fixed"),k(e,"hash")?{path:"ui/state.json",hash:Yt(e.hash)}:{path:"ui/state.json"}}function vr(e){let n=["wasm","terminal","htmlDocuments"];return (!F(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&l("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function jr(e,n){sn(e,new Set,0,true,true),Kn(e),F(e)||l("MANIFEST_INVALID"),B(e,ar,cr),k(e,"_meta")&&Zt(e._meta),e.manifestVersion!==2&&l("MANIFEST_INVALID");let t;k(e,"runtime")&&(t=vr(e.runtime));let i=Jn(e.pluginId,"pluginId"),o=Jn(e.definitionId,"definitionId"),r=ee(e,"version",1),s=Bt(e.name,"name"),a=Bt(e.description,"description"),p;k(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&l("MANIFEST_INVALID","icon is invalid"),p=e.icon);let c;k(e,"tone")&&((typeof e.tone!="string"||!Bn.includes(e.tone))&&l("MANIFEST_INVALID","tone is invalid"),c=e.tone),e.entry!=="ui/index.html"&&l("MANIFEST_INVALID","entry path is not fixed");let d;k(e,"entryHash")&&(d=Yt(e.entryHash));let A;k(e,"initialState")&&(A=xr(e.initialState));let I;k(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&l("MANIFEST_INVALID","usage is invalid"),I=e.usage);let m;k(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&l("MANIFEST_INVALID","detailPanel is invalid"),m=e.detailPanel);let E;if(k(e,"displayModes")){((I??me)!==me||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&l("MANIFEST_INVALID","displayModes are only valid for window Apps");let S=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(u=>typeof u!="string"||!S.has(u)))&&l("MANIFEST_INVALID","displayModes are invalid"),E=e.displayModes;}(I??me)===me&&m!==void 0&&l("MANIFEST_INVALID","detailPanel is card-only");let D=n.mode??"local";D!=="local"&&D!=="installed"&&D!=="published"&&l("MANIFEST_INVALID","manifest mode is invalid"),D!=="local"&&d===void 0&&l("MANIFEST_INVALID","installed manifests require entryHash"),D!=="local"&&A!==void 0&&A.hash===void 0&&l("MANIFEST_INVALID","installed manifests require initialState.hash"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&l("MANIFEST_INVALID","surfaces are invalid"),e.surfaces.length>2&&H("surfaces exceed the v2 limit");let M=[],v=new Set;for(let S of e.surfaces)(typeof S!="string"||!Hn.includes(S))&&l("MANIFEST_INVALID","surface is unsupported"),v.has(S)&&l("MANIFEST_INVALID","surfaces contain a duplicate"),v.add(S),M.push(S);F(e.size)||l("MANIFEST_INVALID","size must be an object"),B(e.size,["height"]);let C=ee(e.size,"height",1);C>720&&H("size.height exceeds the v2 limit");let U=Xn(e.stateProjection),j=e.summaryProjection===void 0?void 0:Xn(e.summaryProjection);j!==void 0&&j.allow.some(S=>!U.allow.includes(S))&&l("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow");let f=Mr(e.dataPaths,U.allow);Array.isArray(e.actions)||l("MANIFEST_INVALID","actions must be an array"),e.actions.length>32&&H("actions exceed the v2 limit");let y=[],_=new Set;for(let S of e.actions){let u=Ur(S);if(_.has(u.actionId)&&l("MANIFEST_INVALID","actions contain a duplicate actionId"),u.backend.type==="core"&&u.backend.handler==="state.set"){u.mutation||l("MANIFEST_INVALID","state.set actions must be mutations");for(let T of Object.keys(u.inputSchema.properties))U.allow.includes(T)||l("MANIFEST_INVALID","state.set input paths must be projection-allowed");}_.add(u.actionId),y.push(u);}return {manifestVersion:2,pluginId:i,definitionId:o,version:r,name:s,description:a,...p===void 0?{}:{icon:p},...c===void 0?{}:{tone:c},entry:"ui/index.html",...d===void 0?{}:{entryHash:d},...t===void 0?{}:{runtime:t},...A===void 0?{}:{initialState:A},...I===void 0?{}:{usage:I},...m===void 0?{}:{detailPanel:m},...E===void 0?{}:{displayModes:E},surfaces:M,size:{height:C},stateProjection:U,...j===void 0?{}:{summaryProjection:j},...f===void 0?{}:{dataPaths:f},actions:y}}function Zt(e){F(e)||l("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>lr)&&H("_meta exceeds the 4 KiB limit");}function Vr(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function Zn(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>Ne(o.join("."),a));return (e.length>4096||cn(e,false,false,s))&&Q("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||Q("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&Q("state contains a non-JSON value"),t>8&&Q("state is too deep"),n.has(e)&&Q("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&Q("state array is too long"),s=e.map(p=>Zn(p,n,t+1,65536,o,r));else {F(e)||Q("state contains a non-plain object");let p={};for(let[c,d]of Object.entries(e))(c.length>4096||!nn.test(c)||Me(c))&&(c.length>4096&&Q("state key is too long"),Q("state contains a reserved or invalid key")),p[c]=Zn(d,n,t+1,65536,[...o,c],r);s=p;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&Q("state subtree is too large"),s}finally{n.delete(e);}}function et(e,n=[]){F(e)||Q("initial state must be a JSON object");let t=Zn(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&Q(),t}function Fr(e,n={}){sn(e),F(e)||l("MANIFEST_INVALID"),B(e,sr),e.manifestVersion!==1&&l("MANIFEST_INVALID");let t=Wn(oe(e,"pluginId")),i=Wn(oe(e,"definitionId")),o=ee(e,"version",1),r=ee(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Yo;(!Number.isSafeInteger(s)||s<1)&&l("MANIFEST_INVALID"),r>s&&l("PRIMITIVE_SET_UNSUPPORTED"),F(e.activation)||l("MANIFEST_INVALID"),B(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&l("MANIFEST_INVALID");let a=Wn(oe(e.activation,"language")),p=br(e.schema),c=Nr(e.layout,p);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:p,layout:c}}function Br(e,n={}){return F(e)||l("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&l("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?jr(e,n):Fr(e,n)}function Te(e,n={}){try{return Br(e,n)}catch(t){if(t instanceof K)throw t;return l("MANIFEST_INVALID")}}function nt(e,n={}){let t=Te(e,n);return t.manifestVersion===2?Vr(t):t}var Yo,qo,Zo,Xt,Qo,er,nr,tr,Ft,ir,or,rr,sr,ar,cr,pr,dr,lr,ur,fr,yr,Ar,Ir,gr,mr,hr,Er,_r,K,Qt=V(()=>{g();vn();ge();$n();Le();Yo=1,qo=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Zo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Xt=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Qo=/<\/?[A-Za-z][^>]*>/,er=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,nr=/^(?:https?|file|ftp|ws|wss):\/\//i,tr=/^\s*(?:javascript|data):/i,Ft=/data:[^,\s]*,/i,ir=/(?:https?|file|ftp|ws|wss):\/\//i,or=/javascript:/i,rr=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,sr=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],ar=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],cr=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],pr=["actionId","capability","mutation","inputSchema","resultProjection","backend"],dr=["confirmation","dataInputs","content","_meta"],lr=4*1024,ur=["type","handler"],fr=["type","command"],yr=["env"],Ar=["path"],Ir=["hash"],gr=/^[0-9a-f]{64}$/,mr=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,hr=/[\r\n]/,Er=16,_r=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],K=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="UiPluginValidationError"};});var tt=V(()=>{g();xt();Qt();Le();});function ce(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=se(t);return createHash("sha256").update(Z(i)).digest("hex")}function pe(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new L("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Yr.test(e.sourceHash)))throw new L("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ce(e)!==e.hash)throw new L("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Zr(i)))throw new L("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new L("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new L("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new L("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&ot(t.resultProjection),t.content!==void 0&&!tn(t.content))throw new L("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new L("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new L("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new L("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new L("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new L("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new L("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new L("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new L("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&ot(e.stateProjection),e.summaryProjection){ot(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new L("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new L("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(qr(r,o==="readTool"),n.has(r.name))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new L("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new L("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>Ne(t,i))))throw new L("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function qr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=se(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let p=se(a.structuredContent);if(Cn(Se(p))>4*1024)throw new Error("fixed result size")}}catch{throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function ot(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new L("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Zr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Yr,Ue=V(()=>{g();ge();en();$n();Yr=/^[0-9a-f]{64}$/;});function dn(e,n=e){throw new de(e,n)}var de,ln=V(()=>{g();de=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var ci=V(()=>{g();});var pi=V(()=>{g();Ue();ge();ln();ci();});function di(e,n){return Qr.add(e),n!==void 0&&es.set(e,n),e}var Qr,es,un=V(()=>{g();Qr=new WeakSet,es=new WeakMap;});function $e(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function rt(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function fi(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))fi(n);return Object.freeze(e)}function W(e){throw new re("LINEAGE_INVALID",e)}function as(e){throw new re("LINEAGE_STALE",e)}function yi(e){if(!$e(e)||!rt(e,is,os)||!$e(e.actions))return W("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!$e(n)||!rt(n,rs,ss))return W("Lineage action definition shape is invalid");return e}function cs(e){if(!$e(e)||!rt(e,ns,ts))return W("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!li.test(e.hash))return W("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!li.test(e.sourceHash)))return W("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return W("Lineage compatibility marker is invalid");let n=yi(e.definition);if(n.version!==e.version)return W("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return W("Lineage source hash does not match its definition");let t;try{t=ce(n),pe({...n,hash:e.hash});}catch{return W("Lineage definition is invalid")}return t!==e.hash?W("Lineage definition hash does not match"):fi({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function ui(e){return e.stateProjection?.allow??[]}function ps(e,n){let t=[],i=new Set(ui(n));ui(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,p]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(p.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(p=>!a.has(p))&&t.push("S5_SUMMARY_PROJECTION");}return t}function ds(e,n){return Z(e)===Z(n)}function st(e,n){if(!Array.isArray(e)||e.length===0)return W("Definition lineage is missing");if(!$e(n)||typeof n.hash!="string")return W("Current definition is invalid");let t,i;try{let{hash:a,...p}=n;i=yi(p),t={...i,hash:a},pe(t);}catch{return W("Current definition is invalid")}let o=e.map(cs),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return W("Lineage definition ids do not match");if(o.some((a,p)=>p>0&&a.version<=o[p-1].version))return W("Lineage generations are not in increasing version order");if(o.some((a,p)=>o.findIndex(c=>c.hash===a.hash)!==p))return W("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!ds(s.definition,i))return as("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),p=new Set;for(let d of o)if(d.sourceHash===void 0)for(let A of Object.keys(d.definition.actions))a.has(A)&&p.add(A);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==p.size||c.some(d=>!p.has(d))){let d="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${d}`,[d])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(d=>d.compat==="break"))continue;let c=ps(o[a].definition,t);if(c.length>0)throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(o),current:t})}var re,li,ns,ts,is,os,rs,ss,at=V(()=>{g();Ue();ge();re=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},li=/^[0-9a-f]{64}$/,ns=["version","hash","definition"],ts=["sourceHash","compat"],is=["id","version","actions"],os=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],rs=["capabilities"],ss=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var Ai,Ii,gi=V(()=>{g();Ai=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],Ii=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var mi=V(()=>{g();Ue();un();});function ct(e,n=0){try{let t=se(e,n);return t.type!==void 0&&t.type!=="object"&&dn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof de)throw t;dn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function hi(e){if(e.length===0)return ct({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,ct(i.inputSchema));return ct(fs(n,t),us)}function fs(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var We,us,pt=V(()=>{g();pi();Ue();ge();un();ln();at();gi();mi();We=8*1024*1024,new Set(Ai),new Set(Ii),us=4;});function ys(e){if(e===null||typeof e!="object"||!(Ei in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[Ei]}function _i(e,n){let t=ys(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var Ei,Ti=V(()=>{g();Ei=Symbol("crewx.workspace-app-scan-cache.state");});function Y(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new P("NOT_FOUND"):n==="ELOOP"?new P("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new P("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new P("READ_DENIED"):new P("READ_DENIED")}function ms(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new P("READ_DENIED")}function dt(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new P("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new P("PATH_ESCAPED");return n}function In(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ce(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function yt(e,n){return e.dev===n.dev&&e.ino===n.ino}function At(e,n){return yt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function fn(e){ms(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw Y(i)}if(!t.isDirectory())throw new P("READ_DENIED");return {realRoot:n,identity:Ce(t)}}async function Di(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new P("READ_DENIED")}catch(r){throw r instanceof P?r:Y(r)}if(!In(n,o))throw new P("PATH_ESCAPED");return o}async function yn(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw Y(a)}if(!In(n,r)||t!==void 0&&!In(t,r))throw new P("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new P("READ_DENIED");if(!yt(i,o)||!yt(i,s)||i.dev!==s.dev)throw new P("PATH_ESCAPED")}async function ke(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new P("PATH_ESCAPED")}if(t!==n.realRoot||!At(n.identity,Ce(i)))throw new P("PATH_ESCAPED")}function hs(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var P,ft,gs,Pi,gn,Ni,gt=V(()=>{g();P=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},ft=constants.O_NOFOLLOW,gs=constants.O_NONBLOCK,Pi=constants.O_RDONLY|(ft??0)|(gs??0);gn=class{async getRootIdentity(n){let t=await fn(n);return await ke(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=dt(t),o=await fn(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(p){let c=Y(p);if(c.code==="NOT_FOUND")return [];throw c}if(!In(o.realRoot,s)||!a.isDirectory())throw new P("PATH_ESCAPED");try{let p=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await ke(n,o),p.map(hs)}catch(p){let c=Y(p);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let p;try{p=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let E=await p.stat({bigint:!0});c=Ce(E);}catch(E){throw Y(E)}if(c.size>BigInt(i))throw new P("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let d=await Di(n,r.realRoot,o);await yn(s,r.realRoot,d,c);let A=new Uint8Array(new ArrayBuffer(Number(c.size))),I=0;for(;I<A.byteLength;){let E;try{E=(await p.read(A,I,A.byteLength-I,I)).bytesRead;}catch(D){throw Y(D)}if(E<=0)throw new P("IDENTITY_CHANGED");I+=E;}let m;try{let E=await p.stat({bigint:!0});m=Ce(E);}catch(E){throw Y(E)}if(!At(c,m))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,d,m),await ke(n,r),new Uint8Array(A)}finally{await p.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let p;try{p=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let I=await p.stat({bigint:!0});c=Ce(I);}catch(I){throw Y(I)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let d=await Di(n,r.realRoot,o);await yn(s,r.realRoot,d,c);let A;try{let I=await p.stat({bigint:!0});A=Ce(I);}catch(I){throw Y(I)}if(!At(c,A))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,d,A),await ke(n,r),{...A,candidateRealPath:d??r.realRoot}}catch(c){throw c instanceof P?c:Y(c)}finally{await p.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Ni=new gn;});function Ye(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Mi(e){return typeof e=="string"&&ae.test(e)?e:void 0}function Ns(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Pe(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ss(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ms(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Ls(e){return Ps.decode(e)}function Os(e){return JSON.parse(Ls(e))}function Li(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Rs(e){if(e instanceof P)return Li(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Li(n)}}function le(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ws(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Us(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Oi(e,n,t,i){let o=ws(e);if(!o)throw new P("READ_DENIED");return Ms(await o.call(e,n,t,i))}async function Et(e,n,t){let i=Us(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Ss).filter(r=>r!==null)}function ks(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Cs(e){if(!Ye(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(Pe))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function xs(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function hn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Pe)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Pe))})}function mn(e,n){let t=Object.keys(e).sort(Pe),i=[...n].sort(Pe);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Ri(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function vs(e){let n;try{n=Os(e);}catch{return}if(!Ye(n)||!mn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>_t)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!Ye(s))return;let a=["packageDir","appId","definition","files"],p=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),d=[...p?["lineage"]:[],...c?["launcher"]:[]];if(!mn(s,[...a,...d])||c&&s.launcher!==false)return;let A=Ri(s.packageDir),I=Mi(s.appId);if(!A||A.length!==2||A[0]!=="apps"||!Ns(A[1])||!I||t.has(s.packageDir)||!Ye(s.definition)||!mn(s.definition,["id","version","hash"]))return;let m=Mi(s.definition.id),E=s.definition.version,D=s.definition.hash;if(!m||!Number.isSafeInteger(E)||E<1||typeof D!="string"||!ht.test(D)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Tt)return;let M=new Set,v=[];for(let C of s.files){if(!Ye(C)||!mn(C,["path","sha256"]))return;let U=Ri(C.path);if(!U||typeof C.sha256!="string"||!ht.test(C.sha256))return;let j=U.join("/"),f=`${s.packageDir}/${j}`;if(M.has(j)||i.has(f))return;M.add(j),i.add(f),v.push(Object.freeze({path:j,sha256:C.sha256}));}if(!M.has("ui-plugin.json")||!M.has("ui/index.html")||(o+=v.length,o>_s))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:I,definition:Object.freeze({id:m,version:E,hash:D}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(v.sort((C,U)=>Pe(C.path,U.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function be(e){let n=Rs(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function js(e,n,t,i,o){let r=[],s=async(a,p)=>{if(!le(i,o))throw new P("LIMIT_EXCEEDED");if(p>2)throw new P("LIMIT_EXCEEDED");let c=await Et(e,n,a);for(let d of c){if(typeof d.name!="string"||d.name.length===0||d.name==="."||d.name===".."||/[\\/\u0000]/.test(d.name))throw new P("PATH_ESCAPED");let A=`${a}/${d.name}`;if(d.kind==="file"){if(r.push(A.slice(t.length+1)),r.length>Tt)throw new P("LIMIT_EXCEEDED")}else if(d.kind==="directory")await s(A,p+1);else throw d.kind==="symlink"?new P("PATH_ESCAPED"):new P("READ_DENIED")}};return await s(t,0),r.sort(Pe)}function Vs(e){return e==="ui-plugin.json"?262144:e==="ui/index.html"?We:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?bs:Ts}async function wi(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Ds};let o=Cs(e.reservedIds),r=[],s=(u,T,N)=>ks(u,"bundled",T),a=(u=[],T=false,N)=>({...N===void 0?{}:{indexHash:N},packages:u,diagnostics:r,incomplete:T,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ht.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p;try{p=await Oi(n,e.root,"bundle-index.json",Es);}catch(u){return r.push(s(be(u),"bundle-index.json")),a()}let c=createHash("sha256").update(p).digest("hex");if(c!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d=vs(p);if(d===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!xs(hn(d.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(d.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let A;try{A=await Et(n,e.root,"");}catch(u){return r.push(s(be(u),"bundle-index.json")),a(d.packages.map(T=>({indexEntry:T,failureCode:be(u)})),false,c)}if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(d.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let I=A.find(u=>u.name==="bundle-index.json"&&u.kind==="file"),m=A.find(u=>u.name==="apps"&&u.kind==="directory"),E=u=>d.packages.map(T=>({indexEntry:T,failureCode:u}));if(!I)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c);let D=A.filter(u=>u.name!=="bundle-index.json"&&u.name!=="apps");if(D.length>0){let u=D.some(T=>T.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(u,"bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c)}if(A.some(u=>u.name==="apps"&&u.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(E("PATH_ESCAPED"),false,c);let M=[];if(m)try{M=await Et(n,e.root,"apps");}catch(u){return r.push(s(be(u),"apps")),a(E(be(u)),false,c)}if(!le(t,i)||M.length>_t)return r.push(s("LIMIT_EXCEEDED","apps")),a(E("LIMIT_EXCEEDED"),true,c);let v=new Map(d.packages.map(u=>[u.packageDir.slice(5),u])),C=M.filter(u=>!v.has(u.name));for(let u of C)r.push(s(u.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${u.name}`));if(C.length>0){let u=C.some(T=>T.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(E(u),false,c)}let U=new Set,j=new Map,f=new Map;for(let u of d.packages){let T=j.get(u.appId)??[];T.push(u),j.set(u.appId,T);let N=`${u.definition.id}\0${String(u.definition.version)}`,h=f.get(N)??[];h.push(u),f.set(N,h);}for(let u of [...j.values(),...f.values()])if(u.length>1)for(let T of u)U.add(T);let y=[],_=p.byteLength,S=false;for(let u of d.packages){if(!le(t,i)){S=true,y.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let T;try{let x=u.lineage[u.lineage.length-1];if(!x)throw new re("LINEAGE_INVALID","Definition lineage is missing");if(x.definition.id!==u.definition.id||x.version!==u.definition.version||x.hash!==u.definition.hash)throw new re("LINEAGE_STALE","Last lineage generation does not match bundle identity");T=st(u.lineage,{...x.definition,hash:x.hash}).entries;}catch(x){let te=x instanceof re?x.code:"LINEAGE_INVALID";r.push(s(te,u.packageDir)),y.push({indexEntry:u,failureCode:te});continue}let N=M.find(x=>x.name===u.packageDir.slice(5));if(!m||!N){y.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}if(N.kind!=="directory"){y.push({indexEntry:u,failureCode:N.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let h;try{let x=await js(n,e.root,u.packageDir,t,i);if(!le(t,i)){S=!0,y.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let te=u.files.map(ie=>ie.path);if(x.length!==te.length||x.some((ie,he)=>ie!==te[he])){y.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}h=new Map;let z;for(let ie of u.files){if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(_>=mt){z="LIMIT_EXCEEDED";break}let he;try{he=await Oi(n,e.root,`${u.packageDir}/${ie.path}`,Vs(ie.path));}catch(Co){z=be(Co);break}if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(_+he.byteLength>mt){_=mt,z="LIMIT_EXCEEDED";break}if(_+=he.byteLength,createHash("sha256").update(he).digest("hex")!==ie.sha256){z="BUNDLE_INTEGRITY";break}h.set(ie.path,he);}if(z!==void 0){y.push({indexEntry:u,failureCode:z});continue}}catch(x){le(t,i)||(S=true),y.push({indexEntry:u,failureCode:be(x)});continue}y.push({indexEntry:u,lineage:T,files:h,...U.has(u)?{failureCode:"DUPLICATE_ID"}:{}});}return a(y,S,c)}var Es,_t,Tt,_s,Ts,bs,mt,ht,Ps,Ds,bt=V(()=>{g();at();Le();pt();gt();Es=256*1024,_t=64,Tt=128,_s=_t*Tt,Ts=2*1024*1024,bs=8*1024*1024,mt=32*1024*1024,ht=/^[0-9a-f]{64}$/,Ps=new TextDecoder("utf-8",{fatal:true}),Ds=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Bs(e){if(typeof e!="string"||!ae.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Pt}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Pt}${n}_read`,action:`${Pt}${n}_action`}}function qe(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function ki(e){return typeof e=="string"&&ae.test(e)?e:void 0}function zs(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Gs(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ze(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Gi(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function $s(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function $i(e){return Hs.decode(e)}function Wi(e){return JSON.parse($i(e))}function Ws(e){if(!qe(e))return;let n=ki(e.pluginId);if(!n)return;let t=ki(e.definitionId),i=e.version,o=t&&Number.isSafeInteger(i)&&i>=1?`${t}\0${String(i)}`:void 0;return {pluginId:n,...o===void 0?{}:{definitionKey:o}}}function Js(e){let n=Wi(e);return {value:n,identity:Ws(n)}}function _n(e,n,t,i){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t};return Object.freeze(o)}function Ci(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ne(e){if(e instanceof P)return Ci(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ci(n)}}function ve(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function xi(e){switch(e.code){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("UiPluginValidationError",e.code)}}function Ji(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Dt(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("McpAppContractError",e)}}function ue(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Ks(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Xs(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(qe(o)){let r=o.bin,s=typeof r=="string"?r:qe(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let p=Ys(a);if(p&&n.has(p))return p}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function Ys(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function qs(){return globalThis.performance?.now()??Date.now()}function xe(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))xe(n);return Object.freeze(e)}function vi(e){return Object.freeze(Array.from(e))}async function Tn(e,n,t,i){if(n.pinnedFiles!==void 0){let d=n.pinnedFiles.get(t);if(d===void 0)throw new P("NOT_FOUND");if(d.byteLength>i)throw new P("LIMIT_EXCEEDED");return new Uint8Array(d)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return Bi(e,n.root,o,i);let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let p=await Bi(e,n.root,o,i),c=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=c.candidateRealPath,Xi(a,c)&&c.size===BigInt(p.byteLength)&&!Yi(c,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:c}):r.cacheable=false,p}function Ki(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Zs(e,n,t,i,o,r,s,a){let p=e.fingerprintVerifiedFile,c=Ki(t,i),d=o.candidates.get(c),A=i.relativePath,I;try{I=await Fi(e,n,A);}catch(f){if(ne(f)!=="NOT_FOUND")throw f}let m=I===void 0?void 0:{relativePath:A,key:I};if(m!==void 0&&i.source==="skills"&&!Qs(m.key,"ui-plugin.json"))return ue(s,a)?d!==void 0&&d.candidate===void 0&&d.diagnostic===void 0&&d.candidateRealPath===void 0&&d.files.length===0&&d.directoryListings.length===1&&d.directoryListings[0]?.relativePath===m.relativePath&&d.directoryListings[0]?.key===m.key&&typeof p=="function"?{memo:d}:typeof p!="function"?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([m]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let E=await Promise.all(ji.map(async f=>{if(f==="")return m;let y=`${i.relativePath}${f}`;try{let _=await Fi(e,n,y);return _===void 0?void 0:{relativePath:y,key:_}}catch(_){if(ne(_)==="NOT_FOUND")return;throw _}}));if(!ue(s,a))return {timeLimitReached:true};let D=typeof p=="function"&&E.every(f=>f!==void 0),M=E.filter(f=>f!==void 0),v=new Map,C=d!==void 0&&D,U;if(d!==void 0&&typeof p=="function"){let f=await Promise.all(d.files.map(async y=>{if(!ue(s,a))return {kind:"time",file:y};try{let _=await p.call(e,n,y.relativePath,y.byteLimit);return {kind:"fingerprint",file:y,current:_}}catch(_){return ne(_)==="NOT_FOUND"?{kind:"missing",file:y}:{kind:"error",file:y,error:_}}}));if(f.some(y=>y.kind==="time"))return {timeLimitReached:true};for(let y of f){if(y.kind==="error")throw y.error;if(y.kind==="missing"){C=false;continue}if(y.kind!=="fingerprint")continue;let{file:_,current:S}=y;v.set(_.relativePath,S),U??=S.candidateRealPath,(S.candidateRealPath!==d.candidateRealPath||!Xi(S,_.fingerprint)||Yi(S,r))&&(C=false);}}let j=d!==void 0&&d.directoryListings.length===M.length&&d.directoryListings.every((f,y)=>f.relativePath===M[y]?.relativePath&&f.key===M[y]?.key);return d!==void 0&&D&&j&&C&&U===d.candidateRealPath?{memo:d}:!D||M.length!==ji.length?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(M),priorFingerprints:v,files:new Map,...U===void 0?{}:{candidateRealPath:U},cacheable:true}}}function Qs(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function Fi(e,n,t){let i=qi(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(Gi);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>Ze(s.name,a.name)||Ze(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Xi(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Yi(e,n){let t=e.mtimeNs-n;return t>=-Vi&&t<=Vi}function Nt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!t||n.files.size===0&&!t)return;let i=Object.freeze({...!t&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,i);}function ea(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(Z(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function na(e,n){let t={...e.definition,sourceHash:n},i;try{i=ce(t);}catch(r){throw r instanceof L&&r.code==="INPUT_INVALID"?new K("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{pe(o);}catch{throw new K("MANIFEST_INVALID","normalized definition is invalid")}return o}function ta(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function ia(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function qi(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Bi(e,n,t,i){let o=ia(e);if(!o)throw new P("READ_DENIED");return $s(await o.call(e,n,t,i))}async function oa(e,n,t){let i=qi(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Gi).filter(r=>r!==null)}function ra(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Hi(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Hi(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Hi(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function fe(e,n){e.diagnostic||(e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId));}function sa(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&fe(s,"RESERVED_ID");if(o.length>1)for(let s of o)fe(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)fe(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)fe(o,"DUPLICATE_ID");}function aa(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let p of ra(n)){for(let c of p.appIds??[])typeof c=="string"&&i.add(c);for(let c of p.definitionIds??[])typeof c=="string"&&o.add(c);for(let c of p.toolNames??[])typeof c=="string"&&r.add(c);}for(let p of e){let c=p.candidate;if(!c)continue;if(i.has(c.pluginId)||o.has(c.definitionId)){fe(p,"RESERVED_ID");continue}if(p.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){fe(p,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(A=>A!==void 0).some(A=>r.has(A))&&fe(p,"DUPLICATE_ID");}}function ca(e){return [...e].sort((n,t)=>{let i=Ui.indexOf(n.source)-Ui.indexOf(t.source);return i!==0?i:Ze(n.relativePath,t.relativePath)})}function w(e,n){e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId);}async function zi(e,n,t){if(t.byteLength>262144){w(n,"LIMIT_EXCEEDED");return}let i;try{i=Js(t);}catch{w(n,"MANIFEST_INVALID");return}if(n.bundleIdentity===void 0)n.identity=i.identity;else if(i.identity?.pluginId!==n.bundleIdentity.appId||i.identity.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){w(n,"BUNDLE_INTEGRITY");return}if(qe(i.value)&&i.value.builtinOnly===true){w(n,"RESERVED_ID");return}let o;try{let h=Te(i.value,{mode:"local"});if(h.manifestVersion!==2)throw new K("MANIFEST_INVALID","workspace App requires v2");o=h;}catch(h){if(h instanceof K){w(n,xi(h));return}if(h instanceof de){w(n,Dt(h.code));return}if(qe(h)&&typeof h.code=="string"){w(n,Dt(h.code));return}throw h}let r={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=r),o.actions.length>0)try{hi(o.actions.map(h=>({actionId:h.actionId,inputSchema:h.inputSchema})));}catch(h){if(h instanceof de){w(n,Dt(h.code));return}throw h}let s;try{s=await Tn(e,n,"ui/index.html",We);}catch(h){w(n,ve(ne(h),"entry"));return}if(s.byteLength>We){w(n,"LIMIT_EXCEEDED");return}let a;try{a=$i(s);}catch{w(n,"ENTRY_INVALID");return}if(s.byteLength===0||a.length===0){w(n,"ENTRY_INVALID");return}let p=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==p){w(n,"ENTRY_INVALID");return}let c={},d,A;if(o.initialState!==void 0){try{d=await Tn(e,n,"ui/state.json",65536);}catch(h){w(n,ve(ne(h),"initial"));return}if(d.byteLength>65536){w(n,"LIMIT_EXCEEDED");return}try{let h=Wi(d),x=o.dataPaths??[],te=et(h,x);c=se(te,0,x),Se(c);}catch{w(n,"INITIAL_STATE_INVALID");return}if(A=createHash("sha256").update(d).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==A){w(n,"INITIAL_STATE_INVALID");return}}let I={...o,entryHash:p,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:A}}},m=nt(I),E=ea(I,s,d??new Uint8Array),D;try{D=na(m,E);}catch(h){if(h instanceof K){w(n,xi(h));return}throw h}let M;if(n.bundleLineage!==void 0){let h=n.bundleLineage[n.bundleLineage.length-1];if(!h){w(n,"LINEAGE_INVALID");return}let{legacy:x,...te}=h.definition,{hash:z,...ie}=D;if(Z(te)!==Z(ie)){w(n,"LINEAGE_STALE");return}if(x!==void 0&&(D={...D,legacy:x}),x!==void 0)try{D={...D,hash:ce(D)},pe(D);}catch{w(n,"LINEAGE_INVALID");return}M=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){w(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==D.id||n.bundleIdentity.version!==D.version||n.bundleIdentity.definitionHash!==D.hash)){w(n,"LINEAGE_STALE");return}let v=Bs(o.pluginId),C=o.actions.length===0?{read:v.read}:v,U=xe(m),j=xe(I),f=xe(D),y=xe({...m.handlers}),_=vi(s),S=d===void 0?void 0:vi(d),u=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:p,bytes:_}),...S===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:A,bytes:S})}}),T={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,relativePath:n.relativePath,manifest:j,normalized:U,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:f,handlers:y,resources:u,html:a,entryBytes:_,entryHash:p,initialState:xe(c),...S===void 0?{}:{initialStateBytes:S},...A===void 0?{}:{initialStateHash:A},sourceHash:E,toolNames:Object.freeze(C)},N=n.provenance===void 0?{...T,source:n.source}:{...T,provenance:n.provenance,lineage:M??[]};n.candidate=Object.freeze(N),ta(o)&&w(n,"EXEC_DENIED");}async function pa(e,n){try{return await Tn(e,n,"ui-plugin.json",262144)}catch(t){if(ne(t)==="NOT_FOUND")return;w(n,ve(ne(t),"manifest"));return}}function da(e,n,t,i=Fs,o=false){let r=ca(e);sa(r);let s=Object.freeze(r.filter(d=>d.candidate!==void 0&&d.diagnostic===void 0).map(d=>d.candidate)),a=Object.freeze(r.filter(d=>d.diagnostic!==void 0).map(d=>d.diagnostic)),p=o?Object.freeze({...t===void 0?{}:{indexHash:t},diagnostics:Object.freeze(a.filter(d=>d.source==="bundled").map(d=>Object.freeze({...d}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...p===void 0?{}:{productBundleSnapshotMetadata:p}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function la(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function ua(e,n){if(la(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Ni,options:t}}async function Zi(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=ua(n,t),r=o.clock??qs,s=r(),a=await wi(o.productBundle,i,s,r),p=r(),c=BigInt(Date.now())*1000000n,d=[],A=0,I,m=false,E,D;o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function"&&(D=await i.getRootIdentity(e),E=_i(o.scanCache,D),E.scanStartedAtNs=c);let M=E!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,v=new Set,C=true;d.push(...a.diagnostics.map(f=>({source:f.source,root:o.productBundle?.root??e,name:"",relativePath:f.relativePath,diagnostic:f})));let U=a.reservedIds;a.incomplete&&(I="time_limit");for(let f of a.packages){if(!ue(p,r)){m=true,I="time_limit";break}let y=f.indexEntry,_=y.packageDir,S=f.files===void 0?void 0:Xs(_,f.files),u=a.indexHash===void 0?void 0:di(Object.freeze({kind:"bundled",launcher:y.launcher!==false,indexHash:a.indexHash,packageDir:_,appId:y.appId,definitionId:y.definition.id,version:y.definition.version,definitionHash:y.definition.hash,files:y.files}),S),T={source:"bundled",root:o.productBundle?.root??e,name:_.slice(5),relativePath:_,...u===void 0?{}:{provenance:u},...f.files===void 0?{}:{pinnedFiles:f.files},...f.lineage===void 0?{}:{bundleLineage:f.lineage},bundleIdentity:{appId:y.appId,definitionId:y.definition.id,version:y.definition.version,definitionHash:y.definition.hash},identity:Ks(y)};if(d.push(T),A+=1,f.failureCode!==void 0){w(T,f.failureCode);continue}let N=f.files?.get("ui-plugin.json");if(N===void 0){w(T,"BUNDLE_INTEGRITY");continue}if(await zi(i,T,N),!ue(p,r)){m=true,I="time_limit";break}}let j=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let f of j){let{source:y,directory:_}=f,S;try{S=await oa(i,e,_);}catch(T){if(ne(T)==="NOT_FOUND")continue;M=false,C=false,d.push({source:y,root:e,name:"",relativePath:y,diagnostic:_n(ve(ne(T),"manifest"),y,y)});continue}let u=S.filter(T=>T.kind==="directory"||T.kind==="symlink").filter(T=>Gs(T.name)).map(T=>({source:y,root:e,name:T.name,relativePath:zs(y,T.name)})).sort((T,N)=>Ze(T.relativePath,N.relativePath));for(let T of u){let N={...T};if(d.push(N),D!==void 0?v.add(Ki(D,N)):M=false,!ue(p,r)){m=true,I="time_limit";break e}let h;if(E!==void 0&&D!==void 0){try{let z=await Zs(i,e,D,N,E,c,p,r);if(z.timeLimitReached){m=!0,I="time_limit";break e}N.scanContext=z.context,h=z.memo;}catch(z){M=false,w(N,ve(ne(z),"manifest"));continue}h===void 0&&(M=false);}if(h!==void 0){if(N.candidate=h.candidate,N.diagnostic=h.diagnostic,N.identity=h.identity,y==="skills"&&h.candidate===void 0&&h.diagnostic===void 0)continue;if(A>=64){w(N,"LIMIT_EXCEEDED");continue}if(T.relativePath.split("/").length-1>2){w(N,"LIMIT_EXCEEDED");continue}if(A+=1,!ue(p,r)){m=true,I="time_limit";break e}continue}let x;if(y==="skills"&&(x=await pa(i,N),x===void 0)){N.diagnostic===void 0&&Nt(N);continue}if(A>=64){w(N,"LIMIT_EXCEEDED");continue}if(T.relativePath.split("/").length-1>2){w(N,"LIMIT_EXCEEDED");continue}if(!ue(p,r)){m=true,I="time_limit";break e}if(A+=1,x===void 0)try{x=await Tn(i,N,"ui-plugin.json",262144);}catch(z){w(N,ve(ne(z),"manifest")),Nt(N);continue}if(await zi(i,N,x),Nt(N),!ue(p,r)){m=true,I="time_limit";break e}}}if(E!==void 0&&D!==void 0){let f=[...v].sort(Ze),y=E.lastCandidateKeys,_=y!==void 0&&y.length===f.length&&y.every((u,T)=>u===f[T]);if(M=M&&_,C&&!m&&I===void 0)for(let u of E.candidates.keys())try{JSON.parse(u)[0]===D.realPath&&!v.has(u)&&E.candidates.delete(u);}catch{E.candidates.delete(u);}let S=[...E.candidates.keys()].filter(u=>{try{return JSON.parse(u)[0]===D.realPath}catch{return  false}});M=M&&S.length===v.size&&S.every(u=>v.has(u))&&!m&&I===void 0,E.lastCandidateScanUnchanged=M,C&&!m&&I===void 0&&(E.lastCandidateKeys=Object.freeze(f));}return m&&d.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:_n("DISCOVERY_TIME_LIMIT","apps","apps")}),aa(d,o,U),da(d,I,a.indexHash,U,o.productBundle!==void 0)}var Fs,Pt,Ui,Hs,ji,Vi,Qi=V(()=>{g();Ue();en();ge();tt();Le();pt();ln();Ti();gt();un();bt();bt();Fs=hn([]),Pt="crewx_local_app_";Ui=["bundled","apps","skills"],Hs=new TextDecoder("utf-8",{fatal:true});ji=["","/ui"],Vi=2000000000n;});g();tt();g();vn();g();var ei="SKILL.md",Wr=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function ni(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Jr(e){return e.isDirectory()||e.isSymbolicLink()}function si(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function it(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Wr);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!ni(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=ni(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Kr(e){return [join(e,ei),join(e,"skill",ei)]}function ti(e,n){if(!si(e))return null;for(let t of Kr(e)){if(!existsSync(t))continue;let o=it(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function ii(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Jr)}catch{return []}}function oi(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function ai(e){let n=[],t=new Set;for(let i of e)if(si(i))for(let o of ii(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of ii(r))oi(ti(join(r,s.name),s.name),t,n);continue}oi(ti(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}Qi();var ya=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Pn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Aa(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Aa(e,n){let t=new TextEncoder().encode(Dn(e)),i=Ia(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function Ia(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Dn(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function bn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function to(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:Dn(t)}function ga(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function io(e){return Object.freeze({packageRoot:e})}function ma(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function oo(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function ha(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=ma(t),s=Pn(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",p=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:p,...oo(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:io(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:o,summary:Object.freeze(c)}}function Ea(e){let n=_a(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...oo(["skill"]),skillName:e.skill.name,localDefinitionRef:io(e.packageRoot),definitionHash:Pn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function _a(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function G(e,n,t,i){return Object.freeze({code:e,source:n,relativePath:Ta(t),...i===void 0?{}:{appId:i}})}function Ta(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function ro(e){return G(e.code,e.source,e.relativePath,e.pluginId)}function ba(e,n){let t=to(e,n.dir);if(!t)return {diagnostic:G("PATH_ESCAPED","node_modules","node_modules")};let i=ga(t);if(!i)return {diagnostic:G("PATH_ESCAPED","node_modules",t)};let o=it(n.skillMdPath);if(!o.readable)return {diagnostic:G("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:G("SKILL_INVALID",i,t)};let r=Pa(n.dir,n.skillMdPath);if(!r)return {diagnostic:G("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Pn({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:G("SKILL_READ_FAILED",i,t)}}}function Pa(e,n){let t=relative(e,n).split(sep).join("/");try{return Dn(t)}catch{return null}}function Da(e){if(!ya.test(e.appId))return {diagnostic:G("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Na(e){return e.builtinCatalog}function Sa(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Dn(n)}catch{return null}}function Ma(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function La(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Sa(s);if(!a){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let p=o.get(a);if(p&&JSON.stringify(p)!==JSON.stringify(s)){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let p=r.get(s);if(!p){t.push(G("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Ma(a);if(!c){t.push(G("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==p.appId||a.definitionHash!==void 0&&a.definitionHash!==p.summary.definitionHash){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let d={...p.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},A=e.indexOf(p);A>=0&&(e[A]={...p,summary:Object.freeze(d)});}}function Oa(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(p=>p.source!==r))i.add(a),n.push(G("RESERVED_ID",a.source,Mt(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(G("DUPLICATE_ID",a.source,Mt(a),a.appId));continue}for(let s of o)i.add(s),n.push(G("DUPLICATE_ID",s.source,Mt(s),s.appId));}return e.filter(o=>!i.has(o))}function Mt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Ra(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(ro)}function wa(e){return e.filesystem}function Ua(e,n){let t=wa(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function so(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Na(n),i=await Zi(e,Ua(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],p=[],c=new Set;for(let f of r)for(let y of ai([f])){let _=to(e,y.dir);(_===null||!c.has(_))&&(p.push(y),_!==null&&c.add(_));}for(let f of p){let y=ba(e,f);"diagnostic"in y?s.push(y.diagnostic):a.push(y);}let d=new Map;for(let f of i.apps??i.candidates??[]){let y=f.provenance===void 0?`workspace\0${f.relativePath}`:`bundled\0${f.provenance.indexHash}\0${f.provenance.packageDir}`;d.set(y,{candidate:f,packageRoot:f.relativePath});}let A=new Map(a.map(f=>[f.packageRoot,f])),I=[];for(let f of d.values()){let y=f.candidate.provenance===void 0?A.get(f.packageRoot):void 0,_=ha(f,y);I.push({..._.packageRoot===void 0?{}:{packageRoot:_.packageRoot},source:_.source,appId:_.appId,summary:_.summary});}let m=new Set([...d.values()].filter(f=>f.candidate.provenance===void 0).map(f=>f.packageRoot)),E=o===void 0?new Set:new Set(i.diagnostics.filter(f=>f.code==="RESERVED_ID"&&f.source!=="bundled").map(f=>f.relativePath)),D=new Set(o?.reservedAppIds??[]);for(let f of a){let y=Ea(f);if(!(m.has(f.packageRoot)||E.has(f.packageRoot))){if(D.has(y.appId)){s.push(G("RESERVED_ID",f.source,f.packageRoot,y.appId));continue}I.push({packageRoot:y.packageRoot,source:y.source,appId:y.appId,summary:y.summary});}}let M=[...Ra(i.diagnostics,new Set(a.map(f=>f.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(f=>f.source==="bundled").map(ro)??[]],v=[];if(t)for(let f of t.listMcpApps()){let y=Da(f);"diagnostic"in y?M.push(y.diagnostic):v.push(y);}let C=Oa([...I,...v],M);La(C,n,M);let U=C.map(f=>f.summary).sort((f,y)=>bn(f.appId,y.appId)),j=[...M].sort((f,y)=>bn(f.relativePath,y.relativePath)||bn(f.code,y.code)||bn(f.appId??"",y.appId??""));return Object.freeze({items:Object.freeze(U),diagnostics:Object.freeze(j)})}g();g();g();function ka(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function je(e,n){try{return ka(n).test(e)}catch{return  false}}function Nn(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>je(t[i+r],o))}function Ca(e,n){return e.split("/").some(t=>je(t,n))}var ao=[{label:".env*",test:e=>je(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>je(e,"*.key")},{label:"*.pem",test:e=>je(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Nn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Nn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Nn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Nn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>Ca(n,".crewx")}];function Sn(e,n,t){for(let i of ao)if(i.test(e,n,t))return i.label;return null}function Rt(e){let n=[],t=[];function i(o,r,s){let a;try{a=$.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((p,c)=>p.name.localeCompare(c.name));for(let p of a){let c=r?`${r}/${p.name}`:p.name,d=J.join(o,p.name);if(p.isSymbolicLink()){let A;try{A=$.statSync(d);}catch{t.push({path:c,rule:"symlink"});continue}if(A.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let I=s??Sn(p.name,c,false);I?t.push({path:c,rule:I}):t.push({path:c,rule:"symlink"});continue}if(p.isDirectory()){let A=s??Sn(p.name,c,true);i(d,c,A);continue}if(p.isFile()){let A=s??Sn(p.name,c,false);A?t.push({path:c,rule:A}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}g();var xa=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function va(e){return e.includes(0)}function wt(e,n,t){let i=[];for(let o of n){let r=J.join(e,o),s;try{let p=t?.get(o);s=p===void 0?$.readFileSync(r):Buffer.from(p);}catch{continue}if(va(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((p,c)=>{for(let{rule:d,regex:A}of xa)A.test(p)&&i.push({path:o,line:c+1,rule:d});});}return i}g();g();var ye=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new ye(e,n)}var uo=/^[a-z0-9-]+$/,ja=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Va=/^[A-Za-z_][A-Za-z0-9_]*$/;function Fa(e){let n=J.join(e,"crewx.yaml");if(!$.existsSync(n))return {};let t;try{t=fo.load($.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Ba(e){return Ut.createHash("sha256").update(e).digest("hex")}function yo(e){let n;try{n=$.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${J.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return Ut.createHash("sha256").update(new Uint8Array($.readFileSync(e))).digest("hex")}function Ha(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ao(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||J.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function za(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function Io(e){if(!ja.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function go(e,n,t={}){let i=Fa(e),o=i.name??J.basename(e);if(!uo.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${uo} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");Io(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let d of s){if(typeof d!="string"||!Va.test(d))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(d)}"`);a.push(d);}let p=n.map(d=>(Ao(d),{path:d,sha256:yo(J.join(e,d))})).sort((d,A)=>d.path<A.path?-1:d.path>A.path?1:0),c={name:o,version:r,type:"template",description:i.description??"",files:p,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function Ga(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function mo(e,n){if(za(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(Io(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");for(let s of ["ui-plugin.json","ui/index.html"])if(!n.includedFiles.includes(`${i}${s}`))throw b("APP_UI_MANIFEST_INVALID",`screen App is missing ${s}`)}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Ao(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?yo(J.join(e,s)):Ba(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>Ha(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Ga(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}g();function ho(e){return Ut.createHash("sha256").update(e).digest("hex")}function Po(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=J.resolve(e),i=J.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Eo(e,n){let t=Po(e,n),i;try{i=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array($.readFileSync(t))}async function Do(e,n,t={}){let i=J.join(e,".crewx","publish");$.mkdirSync(i,{recursive:true});let o=J.join(i,`${n.name}-${n.version}.tgz`),r=J.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=$.mkdtempSync(J.join(_o.tmpdir(),"crewx-publish-"));try{let a=new Set,p=[];for(let c of n.files){if(a.has(c.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let d=t.generatedFiles?.get(c.path);if(c.generated===!0&&d===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let m=Eo(e,c.path);if(t.sourceFileHashes.get(c.path)!==ho(m))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let A=d??Eo(e,c.path);if(ho(A)!==c.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let I=Po(s,c.path);$.mkdirSync(J.dirname(I),{recursive:!0}),$.writeFileSync(I,new Uint8Array(A)),p.push(c.path);}$.writeFileSync(J.join(s,"manifest.json"),JSON.stringify(n,null,2)),await bo.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...p]),$.renameSync(r,o);}finally{try{$.rmSync(r,{force:!0});}catch{}$.rmSync(s,{recursive:true,force:true});}return o}g();g();var Ve="/api/v1";var Ja=201,Ka=200,Xa=409,kt=401,No={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Ya(){return process.env.WI013_FAKE_UPLOAD==="1"}function qa(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Za(e){return e.replace(/\/+$/,"")}async function Qe(e){try{return await e.json()}catch{return null}}function So(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Qa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function ec(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Mo(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(No,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(No[s],a)}}async function nc(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Za(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${Ve}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let p=await Qe(a),c=Qa(p),d=ec(p),A=r&&d!==void 0?d:i,I;if(a.status===Ja)I="created";else if(r&&a.status===Ka){if(c===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");I="existing";}else if(a.status===Xa){if(r)throw Mo(p,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);I="existing";}else throw a.status===kt?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let m="not-needed",E=null;if(I==="existing"&&!r){let _;try{_=await fetch(`${n}${Ve}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let S=await Qe(_);if(_.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${_.status}`);let T=So(S,"publisher items",_.status)?.items;if(!Array.isArray(T))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${_.status}`);let N=T.find(h=>!h||typeof h!="object"?false:h.slug===i);if(!N||typeof N.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${_.status}`);if(E=N.version,E!==e.manifest.version){let h;try{h=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!h.ok)throw await Qe(h),h.status===kt?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${h.status})`):h.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${h.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${h.status}`);m="applied";}}let D=$.readFileSync(e.tgzPath),M=Ya()?qa(D):D,v=new FormData;v.set("archive",new Blob([new Uint8Array(M)],{type:"application/gzip"}),`${A}-${e.manifest.version}.tgz`);let C=r&&c!==void 0?c:i,U;try{U=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(C)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:v});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(U.status===kt)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!U.ok){let _=await Qe(U);if(r){let S=Mo(_,A);if(S)throw S}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${U.status}`)}let j=await Qe(U),f=So(j,"upload",U.status),y=typeof f.contentId=="string"&&f.contentId.length>0?f.contentId:c;if(r&&y===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:A,version:e.manifest.version,...y===void 0?{}:{contentId:y},artifactChecksum:f.artifactChecksum,artifactSizeBytes:f.artifactSizeBytes,submitOutcome:I,versionUpdate:m,serverVersionBefore:E}}var tc=1e4,ic=100*1024*1024;function Ct(e){return Ut.createHash("sha256").update(e).digest("hex")}function oc(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ln(e,n){if(!n||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=J.resolve(e,...n.split("/")),i=J.resolve(e);if(t!==i&&!t.startsWith(`${i}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array($.readFileSync(t))}function On(e,n){return e===n||e.startsWith(`${n}/`)}function rc(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Oo(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new ye("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function wo(e,n,t,i){let o=Oo(t.maxFileCount??t.maxFiles,tc,"max file count"),r=Oo(t.maxTotalBytes??t.maxBytes,ic,"max total bytes");if(n.length>o)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let p=i?.get(a);if(p!==void 0?s+=p.byteLength:s+=Ln(e,a).byteLength,s>r)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function sc(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function ac(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function cc(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function pc(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function dc(e,n){let t=[];for(let i of e.excluded)t.push(On(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)On(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(rc)}function lc(e,n,t,i){let o=`${t}/ui-plugin.json`;if(!i.includes(o))throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package ui-plugin.json");let r=Ln(e,o),s=Ct(r),a;try{a=JSON.parse(Buffer.from(r).toString("utf8"));}catch{throw b("APP_UI_MANIFEST_INVALID","ui-plugin.json is not valid JSON")}let p;try{let I=Te(a,{mode:"local"});if(I.manifestVersion!==2)throw new Error("screen App requires manifestVersion 2");p=I;}catch(I){throw I instanceof K?b("APP_UI_MANIFEST_INVALID",I.code):b("APP_UI_MANIFEST_INVALID")}if(p.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT","ui-plugin.json pluginId no longer matches the selected App");let c=`${t}/ui/index.html`;if(!i.includes(c))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let d=Ct(Ln(e,c)),A=JSON.parse(JSON.stringify(a));if(A.entryHash=d,Object.prototype.hasOwnProperty.call(A,"initialState")){let I=A.initialState;if(!oc(I)||I.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let m=`${t}/ui/state.json`;if(!i.includes(m))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let E=Ln(e,m);A.initialState={...I,hash:Ct(E)};}try{let I=Te(A,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(xn(I),"utf8")),sourceHash:s}}catch(I){throw I instanceof K?b("APP_UI_MANIFEST_INVALID",I.code):b("APP_UI_MANIFEST_INVALID")}}async function uc(e,n){let{included:t,excluded:i}=Rt(e);wo(e,t,n);let o=go(e,t,{version:n.version}),r=wt(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function fc(e,n){ac(n);let t=await so(e),i=cc(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=pc(i),r=Rt(e);if(r.excluded.some(m=>On(m.path,o)&&(m.rule==="symlink"||m.rule==="symlink-dir")))throw b("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(m=>On(m,o)),a=dc(r,o),p=new Map,c=new Map;if(i.capabilities.includes("screen")){let m=lc(e,i,o,s);p.set(`${o}/ui-plugin.json`,m.bytes),c.set(`${o}/ui-plugin.json`,m.sourceHash);}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");wo(e,s,n,p);let d={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:p},A=mo(e,d),I=wt(e,s,p);return {plan:{manifest:A,included:s,excluded:a,secretFindings:I},archiveOptions:{generatedFiles:p,sourceFileHashes:c}}}async function Uo(e,n){let t=J.resolve(e);if(sc(n))return fc(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return uc(t,n)}async function Cl(e,n={}){return (await Uo(e,n)).plan}function yc(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new ye("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function ko(e,n={}){let t=J.resolve(e),i=await Uo(t,n);i.plan.secretFindings.length>0&&yc(i.plan.secretFindings);let o=await Do(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function xl(e,n={}){return ko(e,n)}async function vl(e,n){let t=await ko(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
+export{ic as DEFAULT_PUBLISH_MAX_BYTES,tc as DEFAULT_PUBLISH_MAX_FILES,ao as EXCLUDE_RULES,Ve as MARKETPLACE_API_PREFIX,ye as PublishError,vl as packApp,ko as packPublish,xl as packTemplate,Cl as planPublish,nc as uploadToMarketplace};