@crewx/sdk 0.9.0-rc.131 → 0.9.0-rc.132

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/dist/esm/index.js +223 -185
  2. package/dist/esm/plugins/index.js +72 -34
  3. package/dist/esm/publish/index.js +2 -2
  4. package/dist/esm/repository/index.js +92 -54
  5. package/dist/esm/skills/index.js +1 -1
  6. package/dist/index.js +236 -198
  7. package/dist/mcp-app/discovery.d.ts +1 -0
  8. package/dist/plugins/index.js +71 -33
  9. package/dist/publish/index.js +2 -2
  10. package/dist/repository/index.js +101 -63
  11. package/dist/repository/thread.repository.d.ts +7 -0
  12. package/dist/skills/index.js +1 -1
  13. package/package.json +1 -1
package/dist/esm/publish/index.js CHANGED
@@ -1,2 +1,2 @@
1
- import*as J from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as Ut from'crypto';import {createHash}from'crypto';import*as $ from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as fo from'js-yaml';import {load}from'js-yaml';import*as _o from'os';import*as bo from'tar';import {gunzipSync,gzipSync}from'zlib';var V=(e,n)=>()=>(e&&(n=e(e=0)),n);var g=V(()=>{});var L,en=V(()=>{g();L=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function kn(e){return xo.test(e)||vo.test(e)}function q(){throw new L("INPUT_INVALID","JSON value is not projection-safe")}function Bo(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function wn(e,n,t,i,o,r){if(n>i&&q(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(jo.test(e)||Fo.test(e)&&!Go(o,r)||Vo.test(e))&&q(),e;if(typeof e=="number")return Number.isFinite(e)||q(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&q();let s=e;t.has(s)&&q(),t.add(s);try{if(Array.isArray(e))return e.map(p=>wn(p,n+1,t,i,o,r));Bo(s)||q();let a={};for(let[p,c]of Object.entries(e))kn(p)&&q(),a[p]=wn(c,n+1,t,i,[...o,p],r);return a}finally{t.delete(s);}}function se(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>zo)&&q(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&q();let i=wn(e,0,new Set,Ho+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&q(),i}function Ne(e,n){if(!e||!n)return false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function Go(e,n){if(e.length===0)return false;let t=e.join(".");return n.some(i=>Ne(t,i))}function Se(e){try{let n=JSON.stringify(e);return n===void 0&&q(),n}catch{q();}}function Un(e){return Array.isArray(e)?e.map(Un):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Un(e[n])])):e}function Z(e){return Se(Un(e))}function Cn(e){return Buffer.byteLength(e,"utf8")}var xo,vo,jo,Vo,Fo,Ho,zo,ge=V(()=>{g();en();xo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,vo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,jo=/<\/?[A-Za-z][^>]*>/,Vo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Fo=/^(?:https?|file|ftp|ws|wss):\/\//i;Ho=8,zo=4;});function xn(e){return Z(e)}var xt=V(()=>{g();ge();});var me,vn=V(()=>{g();me="window";});function Me(e){return $o.has(e)||Wo.test(e)||Jo.test(e)}var vt,$o,Wo,Jo,nn,Fe,ae,jn,Vn,Fn,Bn,Hn,Le=V(()=>{g();vt=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],$o=new Set(vt),Wo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Jo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;nn=/^[A-Za-z0-9_]+$/,Fe=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,ae=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,jn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Vn=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Fn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,Bn=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Hn=["inline","panel"];});function zn(e){return typeof e=="string"&&jt.includes(e)}var jt,Vt=V(()=>{g();Le();jt=["text/plain","application/json"];});function tn(e){if(!Gn(e))return false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Ko(e.in)||Object.hasOwn(e,"out")&&!Xo(e.out))}function Ko(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Xo(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function Gn(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var $n=V(()=>{g();Vt();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function l(e,n=e){throw new K(e,n)}function F(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function k(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function B(e,n,t=[]){let i=new Set([...n,...t]);Object.keys(e).some(o=>!i.has(o))&&l("MANIFEST_INVALID"),n.some(o=>!k(e,o))&&l("MANIFEST_INVALID");}function cn(e,n=false,t=false,i=false){return Qo.test(e)||!i&&nr.test(e)||er.test(e)||t&&Ft.test(e)||tr.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ft.test(e))}function sn(e,n=new Set,t=0,i=false,o=false){if(typeof e=="string"){cn(e,i,o)&&l("UNSAFE_VALUE");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&l("MANIFEST_INVALID"),n.add(e);try{if(Array.isArray(e)){for(let r of e)sn(r,n,t+1);return}F(e)||l("MANIFEST_INVALID");for(let[r,s]of Object.entries(e))sn(s,n,t+1,i&&t===0&&(r==="name"||r==="description"),o);}finally{n.delete(e);}}}function oe(e,n){let t=e[n];return typeof t!="string"&&l("MANIFEST_INVALID"),t}function ee(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&l("MANIFEST_INVALID"),i}function Wn(e){return Zo.test(e)||l("MANIFEST_INVALID"),e}function Oe(e){return qo.test(e)||l("TOKEN_INVALID"),e}function Tr(e){return Xt.test(e)||l("MANIFEST_INVALID"),e}function br(e){F(e)||l("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=Tr(t);F(i)||l("MANIFEST_INVALID");let r=i.type;if(r==="text"){B(i,["type","maxLength"]),n[o]={type:r,maxLength:ee(i,"maxLength",1)};continue}if(r==="text-list"){B(i,["type","max","itemMaxLength"]),n[o]={type:r,max:ee(i,"max",0),itemMaxLength:ee(i,"itemMaxLength",1)};continue}if(r==="step-list"){B(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=ee(i,"min",0),a=ee(i,"max",1);s>a&&l("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:ee(i,"labelMaxLength",1),detailMaxLength:ee(i,"detailMaxLength",1)};continue}typeof r=="string"&&l("SCHEMA_TYPE_UNSUPPORTED"),l("MANIFEST_INVALID");}return n}function Pr(e,n,t){let i=e[n];(!i||i.type!==t)&&l("MANIFEST_INVALID");}function on(e,n,t){let i=oe(e,"field");return Xt.test(i)||l("MANIFEST_INVALID"),Pr(n,i,t),i}function Dr(e,n){F(e)||l("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&l("MANIFEST_INVALID"),_r.includes(t)||l("PRIMITIVE_UNKNOWN"),t){case "card-shell":return B(e,["primitive"]),{primitive:t};case "meta-banner":return B(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Oe(oe(e,"badgeToken")),noticeToken:Oe(oe(e,"noticeToken"))};case "heading":return B(e,["primitive","field"]),{primitive:t,field:on(e,n,"text")};case "labeled-text":return B(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&l("MANIFEST_INVALID"),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text"),variant:"callout"};case "step-flow":return B(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"step-list")};case "text-list":{B(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text-list")};return k(e,"emptyToken")&&(i.emptyToken=Oe(oe(e,"emptyToken"))),k(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&l("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return l("MANIFEST_INVALID")}function Nr(e,n){return Array.isArray(e)||l("MANIFEST_INVALID"),e.map(t=>Dr(t,n))}function H(e="v2 manifest exceeds a contract limit"){return l("LIMIT_EXCEEDED",e)}function Q(e="initial state is not projection-safe"){return l("INITIAL_STATE_INVALID",e)}function Bt(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||mr.test(e)||hr.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),(cn(e,true,true)||ir.test(e)||or.test(e)||rr.test(e))&&l("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Jn(e,n){return (typeof e!="string"||!ae.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Sr(e){return (typeof e!="string"||!jn.test(e)||e==="*"||e==="all")&&l("MANIFEST_INVALID","action capability is invalid"),e}function Yt(e){return (typeof e!="string"||!gr.test(e))&&l("MANIFEST_INVALID","resource hash is invalid"),e}function Kn(e,n=new Set,t=0){if(typeof e=="string"){e.length>4096&&H("v2 manifest string is too long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||l("MANIFEST_INVALID","v2 manifest contains a non-finite number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&l("MANIFEST_INVALID","v2 manifest contains a non-JSON value"),typeof e!="object"&&l("MANIFEST_INVALID"),t>8&&H("v2 manifest nesting is too deep"),n.has(e)&&l("MANIFEST_INVALID","v2 manifest contains a cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&H("v2 manifest array is too long");for(let i of e)Kn(i,n,t+1);return}F(e)||l("MANIFEST_INVALID","v2 manifest contains a non-plain object");for(let i of Object.values(e))Kn(i,n,t+1);}finally{n.delete(e);}}}function qt(e){return (typeof e!="string"||e.length>4096||!Fe.test(e))&&(typeof e=="string"&&e.length>4096&&H("projection path is too long"),l("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Me(t))&&l("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Xn(e){F(e)||l("MANIFEST_INVALID","projection policy must be an object"),B(e,["allow"]),Array.isArray(e.allow)||l("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&H("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=qt(i);t.has(o)&&l("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Mr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","dataPaths must be an array"),e.length>Er&&H("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=qt(o);i.has(r)&&l("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>Ne(r,s))||l("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Re(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Ht(e,n){return (typeof e!="number"||!Number.isFinite(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Yn(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||cn(e))&&l("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||l("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&H("schema enum is too deep"),t.has(e)&&l("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&H("schema enum array is too long"),e.map(o=>Yn(o,n+1,t));F(e)||l("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Me(o)&&l("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Yn(r,n+1,t);return i}finally{t.delete(e);}}function Lr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","schema required must be an array"),e.length>64&&H("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!Fe.test(o))&&l("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&H("schema required key is too long"),i.has(o)&&l("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&l("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Or(e,n){let t=n?Fe:nn;return e.length>4096&&H("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Me(i)))&&l("MANIFEST_INVALID","schema property name is invalid"),e}function qn(e,n=0,t=false){F(e)||l("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&H("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&l("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),l("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),B(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(k(e,"enum")&&(Array.isArray(e.enum)||l("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&H("schema enum is too long"),r.enum=e.enum.map(a=>Yn(a))),i==="string"&&(k(e,"minLength")&&(r.minLength=Re(e.minLength,"schema minLength",4096)),k(e,"maxLength")&&(r.maxLength=Re(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&l("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(k(e,"minimum")&&(r.minimum=Ht(e.minimum,"schema minimum")),k(e,"maximum")&&(r.maximum=Ht(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&l("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(k(e,"minItems")&&(r.minItems=Re(e.minItems,"schema minItems",128)),k(e,"maxItems")&&(r.maxItems=Re(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&l("MANIFEST_INVALID","schema array length bounds are inverted"),k(e,"items")&&(r.items=qn(e.items,n+1,false))),i==="object"){let a;if(k(e,"properties")){F(e.properties)||l("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&H("schema properties are too many"),a={};for(let[d,A]of c){let I=Or(d,t);a[I]=qn(A,n+1,false);}r.properties=a;}k(e,"minProperties")&&(r.minProperties=Re(e.minProperties,"schema minProperties",64)),k(e,"maxProperties")&&(r.maxProperties=Re(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&l("MANIFEST_INVALID","schema object property bounds are inverted");let p=Lr(e.required,a);p!==void 0&&(r.required=p),k(e,"additionalProperties")&&(e.additionalProperties!==false&&l("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&H("action inputSchema subtree is too large"),r}function Rr(e){let n=qn(e,0,true);return (n.type!=="object"||!n.properties)&&l("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function wr(e){if(F(e)||l("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){B(e,ur);let n=e.handler;return (typeof n!="string"||!Vn.test(n))&&l("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){B(e,fr,yr),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&l("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!Fn.test(i))&&l("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=k(e,"env")?kr(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}l("MANIFEST_INVALID","action backend type is unsupported");}function Ur(e){F(e)||l("MANIFEST_INVALID","action must be an object"),B(e,pr,dr),k(e,"_meta")&&Zt(e._meta);let n=Jn(e.actionId,"actionId");kn(n)&&l("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`);let t=Sr(e.capability),i=e.mutation;typeof i!="boolean"&&l("MANIFEST_INVALID","action mutation must be boolean");let o=Rr(e.inputSchema),r;if(k(e,"dataInputs")){Array.isArray(e.dataInputs)||l("MANIFEST_INVALID","action dataInputs must be an array");let d=o.properties,A=new Set,I=[];for(let m of e.dataInputs)(typeof m!="string"||!k(d,m)||A.has(m))&&l("MANIFEST_INVALID","action dataInputs must be unique declared properties"),A.add(m),I.push(m);r=I;}let s=Xn(e.resultProjection),a=wr(e.backend),p;k(e,"content")&&((a.type!=="skill"||!tn(e.content))&&l("MANIFEST_INVALID","action content declaration is invalid"),p=Cr(e.content));let c;if(k(e,"confirmation")){let d=e.confirmation;d!=="none"&&d!=="native"&&l("MANIFEST_INVALID","action confirmation is invalid"),c=d;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...p===void 0?{}:{content:p},...r===void 0?{}:{dataInputs:r},...c===void 0?{}:{confirmation:c}}}function kr(e){(!Array.isArray(e)||e.length===0)&&l("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&l("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function Cr(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function xr(e){return F(e)||l("INITIAL_STATE_INVALID","initialState must be an object"),B(e,Ar,Ir),e.path!=="ui/state.json"&&l("MANIFEST_INVALID","initialState path is not fixed"),k(e,"hash")?{path:"ui/state.json",hash:Yt(e.hash)}:{path:"ui/state.json"}}function vr(e){let n=["wasm","terminal","htmlDocuments"];return (!F(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&l("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function jr(e,n){sn(e,new Set,0,true,true),Kn(e),F(e)||l("MANIFEST_INVALID"),B(e,ar,cr),k(e,"_meta")&&Zt(e._meta),e.manifestVersion!==2&&l("MANIFEST_INVALID");let t;k(e,"runtime")&&(t=vr(e.runtime));let i=Jn(e.pluginId,"pluginId"),o=Jn(e.definitionId,"definitionId"),r=ee(e,"version",1),s=Bt(e.name,"name"),a=Bt(e.description,"description"),p;k(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&l("MANIFEST_INVALID","icon is invalid"),p=e.icon);let c;k(e,"tone")&&((typeof e.tone!="string"||!Bn.includes(e.tone))&&l("MANIFEST_INVALID","tone is invalid"),c=e.tone),e.entry!=="ui/index.html"&&l("MANIFEST_INVALID","entry path is not fixed");let d;k(e,"entryHash")&&(d=Yt(e.entryHash));let A;k(e,"initialState")&&(A=xr(e.initialState));let I;k(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&l("MANIFEST_INVALID","usage is invalid"),I=e.usage);let m;k(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&l("MANIFEST_INVALID","detailPanel is invalid"),m=e.detailPanel);let E;if(k(e,"displayModes")){((I??me)!==me||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&l("MANIFEST_INVALID","displayModes are only valid for window Apps");let S=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(u=>typeof u!="string"||!S.has(u)))&&l("MANIFEST_INVALID","displayModes are invalid"),E=e.displayModes;}(I??me)===me&&m!==void 0&&l("MANIFEST_INVALID","detailPanel is card-only");let D=n.mode??"local";D!=="local"&&D!=="installed"&&D!=="published"&&l("MANIFEST_INVALID","manifest mode is invalid"),D!=="local"&&d===void 0&&l("MANIFEST_INVALID","installed manifests require entryHash"),D!=="local"&&A!==void 0&&A.hash===void 0&&l("MANIFEST_INVALID","installed manifests require initialState.hash"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&l("MANIFEST_INVALID","surfaces are invalid"),e.surfaces.length>2&&H("surfaces exceed the v2 limit");let M=[],v=new Set;for(let S of e.surfaces)(typeof S!="string"||!Hn.includes(S))&&l("MANIFEST_INVALID","surface is unsupported"),v.has(S)&&l("MANIFEST_INVALID","surfaces contain a duplicate"),v.add(S),M.push(S);F(e.size)||l("MANIFEST_INVALID","size must be an object"),B(e.size,["height"]);let C=ee(e.size,"height",1);C>720&&H("size.height exceeds the v2 limit");let U=Xn(e.stateProjection),j=e.summaryProjection===void 0?void 0:Xn(e.summaryProjection);j!==void 0&&j.allow.some(S=>!U.allow.includes(S))&&l("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow");let f=Mr(e.dataPaths,U.allow);Array.isArray(e.actions)||l("MANIFEST_INVALID","actions must be an array"),e.actions.length>32&&H("actions exceed the v2 limit");let y=[],_=new Set;for(let S of e.actions){let u=Ur(S);if(_.has(u.actionId)&&l("MANIFEST_INVALID","actions contain a duplicate actionId"),u.backend.type==="core"&&u.backend.handler==="state.set"){u.mutation||l("MANIFEST_INVALID","state.set actions must be mutations");for(let T of Object.keys(u.inputSchema.properties))U.allow.includes(T)||l("MANIFEST_INVALID","state.set input paths must be projection-allowed");}_.add(u.actionId),y.push(u);}return {manifestVersion:2,pluginId:i,definitionId:o,version:r,name:s,description:a,...p===void 0?{}:{icon:p},...c===void 0?{}:{tone:c},entry:"ui/index.html",...d===void 0?{}:{entryHash:d},...t===void 0?{}:{runtime:t},...A===void 0?{}:{initialState:A},...I===void 0?{}:{usage:I},...m===void 0?{}:{detailPanel:m},...E===void 0?{}:{displayModes:E},surfaces:M,size:{height:C},stateProjection:U,...j===void 0?{}:{summaryProjection:j},...f===void 0?{}:{dataPaths:f},actions:y}}function Zt(e){F(e)||l("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>lr)&&H("_meta exceeds the 4 KiB limit");}function Vr(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function Zn(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>Ne(o.join("."),a));return (e.length>4096||cn(e,false,false,s))&&Q("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||Q("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&Q("state contains a non-JSON value"),t>8&&Q("state is too deep"),n.has(e)&&Q("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&Q("state array is too long"),s=e.map(p=>Zn(p,n,t+1,65536,o,r));else {F(e)||Q("state contains a non-plain object");let p={};for(let[c,d]of Object.entries(e))(c.length>4096||!nn.test(c)||Me(c))&&(c.length>4096&&Q("state key is too long"),Q("state contains a reserved or invalid key")),p[c]=Zn(d,n,t+1,65536,[...o,c],r);s=p;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&Q("state subtree is too large"),s}finally{n.delete(e);}}function et(e,n=[]){F(e)||Q("initial state must be a JSON object");let t=Zn(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&Q(),t}function Fr(e,n={}){sn(e),F(e)||l("MANIFEST_INVALID"),B(e,sr),e.manifestVersion!==1&&l("MANIFEST_INVALID");let t=Wn(oe(e,"pluginId")),i=Wn(oe(e,"definitionId")),o=ee(e,"version",1),r=ee(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Yo;(!Number.isSafeInteger(s)||s<1)&&l("MANIFEST_INVALID"),r>s&&l("PRIMITIVE_SET_UNSUPPORTED"),F(e.activation)||l("MANIFEST_INVALID"),B(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&l("MANIFEST_INVALID");let a=Wn(oe(e.activation,"language")),p=br(e.schema),c=Nr(e.layout,p);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:p,layout:c}}function Br(e,n={}){return F(e)||l("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&l("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?jr(e,n):Fr(e,n)}function Te(e,n={}){try{return Br(e,n)}catch(t){if(t instanceof K)throw t;return l("MANIFEST_INVALID")}}function nt(e,n={}){let t=Te(e,n);return t.manifestVersion===2?Vr(t):t}var Yo,qo,Zo,Xt,Qo,er,nr,tr,Ft,ir,or,rr,sr,ar,cr,pr,dr,lr,ur,fr,yr,Ar,Ir,gr,mr,hr,Er,_r,K,Qt=V(()=>{g();vn();ge();$n();Le();Yo=1,qo=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Zo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Xt=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Qo=/<\/?[A-Za-z][^>]*>/,er=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,nr=/^(?:https?|file|ftp|ws|wss):\/\//i,tr=/^\s*(?:javascript|data):/i,Ft=/data:[^,\s]*,/i,ir=/(?:https?|file|ftp|ws|wss):\/\//i,or=/javascript:/i,rr=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,sr=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],ar=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],cr=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],pr=["actionId","capability","mutation","inputSchema","resultProjection","backend"],dr=["confirmation","dataInputs","content","_meta"],lr=4*1024,ur=["type","handler"],fr=["type","command"],yr=["env"],Ar=["path"],Ir=["hash"],gr=/^[0-9a-f]{64}$/,mr=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,hr=/[\r\n]/,Er=16,_r=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],K=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="UiPluginValidationError"};});var tt=V(()=>{g();xt();Qt();Le();});function ce(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=se(t);return createHash("sha256").update(Z(i)).digest("hex")}function pe(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new L("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Yr.test(e.sourceHash)))throw new L("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ce(e)!==e.hash)throw new L("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Zr(i)))throw new L("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new L("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new L("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new L("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&ot(t.resultProjection),t.content!==void 0&&!tn(t.content))throw new L("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new L("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new L("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new L("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new L("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new L("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new L("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new L("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new L("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&ot(e.stateProjection),e.summaryProjection){ot(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new L("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new L("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(qr(r,o==="readTool"),n.has(r.name))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new L("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new L("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>Ne(t,i))))throw new L("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function qr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=se(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let p=se(a.structuredContent);if(Cn(Se(p))>4*1024)throw new Error("fixed result size")}}catch{throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function ot(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new L("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Zr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Yr,Ue=V(()=>{g();ge();en();$n();Yr=/^[0-9a-f]{64}$/;});function dn(e,n=e){throw new de(e,n)}var de,ln=V(()=>{g();de=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var ci=V(()=>{g();});var pi=V(()=>{g();Ue();ge();ln();ci();});function di(e,n){return Qr.add(e),n!==void 0&&es.set(e,n),e}var Qr,es,un=V(()=>{g();Qr=new WeakSet,es=new WeakMap;});function $e(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function rt(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function fi(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))fi(n);return Object.freeze(e)}function W(e){throw new re("LINEAGE_INVALID",e)}function as(e){throw new re("LINEAGE_STALE",e)}function yi(e){if(!$e(e)||!rt(e,is,os)||!$e(e.actions))return W("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!$e(n)||!rt(n,rs,ss))return W("Lineage action definition shape is invalid");return e}function cs(e){if(!$e(e)||!rt(e,ns,ts))return W("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!li.test(e.hash))return W("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!li.test(e.sourceHash)))return W("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return W("Lineage compatibility marker is invalid");let n=yi(e.definition);if(n.version!==e.version)return W("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return W("Lineage source hash does not match its definition");let t;try{t=ce(n),pe({...n,hash:e.hash});}catch{return W("Lineage definition is invalid")}return t!==e.hash?W("Lineage definition hash does not match"):fi({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function ui(e){return e.stateProjection?.allow??[]}function ps(e,n){let t=[],i=new Set(ui(n));ui(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,p]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(p.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(p=>!a.has(p))&&t.push("S5_SUMMARY_PROJECTION");}return t}function ds(e,n){return Z(e)===Z(n)}function st(e,n){if(!Array.isArray(e)||e.length===0)return W("Definition lineage is missing");if(!$e(n)||typeof n.hash!="string")return W("Current definition is invalid");let t,i;try{let{hash:a,...p}=n;i=yi(p),t={...i,hash:a},pe(t);}catch{return W("Current definition is invalid")}let o=e.map(cs),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return W("Lineage definition ids do not match");if(o.some((a,p)=>p>0&&a.version<=o[p-1].version))return W("Lineage generations are not in increasing version order");if(o.some((a,p)=>o.findIndex(c=>c.hash===a.hash)!==p))return W("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!ds(s.definition,i))return as("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),p=new Set;for(let d of o)if(d.sourceHash===void 0)for(let A of Object.keys(d.definition.actions))a.has(A)&&p.add(A);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==p.size||c.some(d=>!p.has(d))){let d="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${d}`,[d])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(d=>d.compat==="break"))continue;let c=ps(o[a].definition,t);if(c.length>0)throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(o),current:t})}var re,li,ns,ts,is,os,rs,ss,at=V(()=>{g();Ue();ge();re=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},li=/^[0-9a-f]{64}$/,ns=["version","hash","definition"],ts=["sourceHash","compat"],is=["id","version","actions"],os=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],rs=["capabilities"],ss=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var Ai,Ii,gi=V(()=>{g();Ai=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],Ii=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var mi=V(()=>{g();Ue();un();});function ct(e,n=0){try{let t=se(e,n);return t.type!==void 0&&t.type!=="object"&&dn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof de)throw t;dn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function hi(e){if(e.length===0)return ct({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,ct(i.inputSchema));return ct(fs(n,t),us)}function fs(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var We,us,pt=V(()=>{g();pi();Ue();ge();un();ln();at();gi();mi();We=8*1024*1024,new Set(Ai),new Set(Ii),us=4;});function ys(e){if(e===null||typeof e!="object"||!(Ei in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[Ei]}function _i(e,n){let t=ys(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var Ei,Ti=V(()=>{g();Ei=Symbol("crewx.workspace-app-scan-cache.state");});function Y(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new P("NOT_FOUND"):n==="ELOOP"?new P("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new P("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new P("READ_DENIED"):new P("READ_DENIED")}function ms(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new P("READ_DENIED")}function dt(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new P("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new P("PATH_ESCAPED");return n}function In(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ce(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function yt(e,n){return e.dev===n.dev&&e.ino===n.ino}function At(e,n){return yt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function fn(e){ms(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw Y(i)}if(!t.isDirectory())throw new P("READ_DENIED");return {realRoot:n,identity:Ce(t)}}async function Di(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new P("READ_DENIED")}catch(r){throw r instanceof P?r:Y(r)}if(!In(n,o))throw new P("PATH_ESCAPED");return o}async function yn(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw Y(a)}if(!In(n,r)||t!==void 0&&!In(t,r))throw new P("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new P("READ_DENIED");if(!yt(i,o)||!yt(i,s)||i.dev!==s.dev)throw new P("PATH_ESCAPED")}async function ke(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new P("PATH_ESCAPED")}if(t!==n.realRoot||!At(n.identity,Ce(i)))throw new P("PATH_ESCAPED")}function hs(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var P,ft,gs,Pi,gn,Ni,gt=V(()=>{g();P=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},ft=constants.O_NOFOLLOW,gs=constants.O_NONBLOCK,Pi=constants.O_RDONLY|(ft??0)|(gs??0);gn=class{async getRootIdentity(n){let t=await fn(n);return await ke(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=dt(t),o=await fn(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(p){let c=Y(p);if(c.code==="NOT_FOUND")return [];throw c}if(!In(o.realRoot,s)||!a.isDirectory())throw new P("PATH_ESCAPED");try{let p=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await ke(n,o),p.map(hs)}catch(p){let c=Y(p);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let p;try{p=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let E=await p.stat({bigint:!0});c=Ce(E);}catch(E){throw Y(E)}if(c.size>BigInt(i))throw new P("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let d=await Di(n,r.realRoot,o);await yn(s,r.realRoot,d,c);let A=new Uint8Array(new ArrayBuffer(Number(c.size))),I=0;for(;I<A.byteLength;){let E;try{E=(await p.read(A,I,A.byteLength-I,I)).bytesRead;}catch(D){throw Y(D)}if(E<=0)throw new P("IDENTITY_CHANGED");I+=E;}let m;try{let E=await p.stat({bigint:!0});m=Ce(E);}catch(E){throw Y(E)}if(!At(c,m))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,d,m),await ke(n,r),new Uint8Array(A)}finally{await p.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let p;try{p=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let I=await p.stat({bigint:!0});c=Ce(I);}catch(I){throw Y(I)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let d=await Di(n,r.realRoot,o);await yn(s,r.realRoot,d,c);let A;try{let I=await p.stat({bigint:!0});A=Ce(I);}catch(I){throw Y(I)}if(!At(c,A))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,d,A),await ke(n,r),{...A,candidateRealPath:d??r.realRoot}}catch(c){throw c instanceof P?c:Y(c)}finally{await p.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Ni=new gn;});function Ye(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Mi(e){return typeof e=="string"&&ae.test(e)?e:void 0}function Ns(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Pe(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ss(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ms(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Ls(e){return Ps.decode(e)}function Os(e){return JSON.parse(Ls(e))}function Li(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Rs(e){if(e instanceof P)return Li(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Li(n)}}function le(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ws(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Us(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Oi(e,n,t,i){let o=ws(e);if(!o)throw new P("READ_DENIED");return Ms(await o.call(e,n,t,i))}async function Et(e,n,t){let i=Us(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Ss).filter(r=>r!==null)}function ks(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Cs(e){if(!Ye(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(Pe))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function xs(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function hn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Pe)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Pe))})}function mn(e,n){let t=Object.keys(e).sort(Pe),i=[...n].sort(Pe);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Ri(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function vs(e){let n;try{n=Os(e);}catch{return}if(!Ye(n)||!mn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>_t)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!Ye(s))return;let a=["packageDir","appId","definition","files"],p=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),d=[...p?["lineage"]:[],...c?["launcher"]:[]];if(!mn(s,[...a,...d])||c&&s.launcher!==false)return;let A=Ri(s.packageDir),I=Mi(s.appId);if(!A||A.length!==2||A[0]!=="apps"||!Ns(A[1])||!I||t.has(s.packageDir)||!Ye(s.definition)||!mn(s.definition,["id","version","hash"]))return;let m=Mi(s.definition.id),E=s.definition.version,D=s.definition.hash;if(!m||!Number.isSafeInteger(E)||E<1||typeof D!="string"||!ht.test(D)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Tt)return;let M=new Set,v=[];for(let C of s.files){if(!Ye(C)||!mn(C,["path","sha256"]))return;let U=Ri(C.path);if(!U||typeof C.sha256!="string"||!ht.test(C.sha256))return;let j=U.join("/"),f=`${s.packageDir}/${j}`;if(M.has(j)||i.has(f))return;M.add(j),i.add(f),v.push(Object.freeze({path:j,sha256:C.sha256}));}if(!M.has("ui-plugin.json")||!M.has("ui/index.html")||(o+=v.length,o>_s))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:I,definition:Object.freeze({id:m,version:E,hash:D}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(v.sort((C,U)=>Pe(C.path,U.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function be(e){let n=Rs(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function js(e,n,t,i,o){let r=[],s=async(a,p)=>{if(!le(i,o))throw new P("LIMIT_EXCEEDED");if(p>2)throw new P("LIMIT_EXCEEDED");let c=await Et(e,n,a);for(let d of c){if(typeof d.name!="string"||d.name.length===0||d.name==="."||d.name===".."||/[\\/\u0000]/.test(d.name))throw new P("PATH_ESCAPED");let A=`${a}/${d.name}`;if(d.kind==="file"){if(r.push(A.slice(t.length+1)),r.length>Tt)throw new P("LIMIT_EXCEEDED")}else if(d.kind==="directory")await s(A,p+1);else throw d.kind==="symlink"?new P("PATH_ESCAPED"):new P("READ_DENIED")}};return await s(t,0),r.sort(Pe)}function Vs(e){return e==="ui-plugin.json"?262144:e==="ui/index.html"?We:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?bs:Ts}async function wi(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Ds};let o=Cs(e.reservedIds),r=[],s=(u,T,N)=>ks(u,"bundled",T),a=(u=[],T=false,N)=>({...N===void 0?{}:{indexHash:N},packages:u,diagnostics:r,incomplete:T,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ht.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p;try{p=await Oi(n,e.root,"bundle-index.json",Es);}catch(u){return r.push(s(be(u),"bundle-index.json")),a()}let c=createHash("sha256").update(p).digest("hex");if(c!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d=vs(p);if(d===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!xs(hn(d.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(d.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let A;try{A=await Et(n,e.root,"");}catch(u){return r.push(s(be(u),"bundle-index.json")),a(d.packages.map(T=>({indexEntry:T,failureCode:be(u)})),false,c)}if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(d.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let I=A.find(u=>u.name==="bundle-index.json"&&u.kind==="file"),m=A.find(u=>u.name==="apps"&&u.kind==="directory"),E=u=>d.packages.map(T=>({indexEntry:T,failureCode:u}));if(!I)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c);let D=A.filter(u=>u.name!=="bundle-index.json"&&u.name!=="apps");if(D.length>0){let u=D.some(T=>T.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(u,"bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c)}if(A.some(u=>u.name==="apps"&&u.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(E("PATH_ESCAPED"),false,c);let M=[];if(m)try{M=await Et(n,e.root,"apps");}catch(u){return r.push(s(be(u),"apps")),a(E(be(u)),false,c)}if(!le(t,i)||M.length>_t)return r.push(s("LIMIT_EXCEEDED","apps")),a(E("LIMIT_EXCEEDED"),true,c);let v=new Map(d.packages.map(u=>[u.packageDir.slice(5),u])),C=M.filter(u=>!v.has(u.name));for(let u of C)r.push(s(u.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${u.name}`));if(C.length>0){let u=C.some(T=>T.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(E(u),false,c)}let U=new Set,j=new Map,f=new Map;for(let u of d.packages){let T=j.get(u.appId)??[];T.push(u),j.set(u.appId,T);let N=`${u.definition.id}\0${String(u.definition.version)}`,h=f.get(N)??[];h.push(u),f.set(N,h);}for(let u of [...j.values(),...f.values()])if(u.length>1)for(let T of u)U.add(T);let y=[],_=p.byteLength,S=false;for(let u of d.packages){if(!le(t,i)){S=true,y.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let T;try{let x=u.lineage[u.lineage.length-1];if(!x)throw new re("LINEAGE_INVALID","Definition lineage is missing");if(x.definition.id!==u.definition.id||x.version!==u.definition.version||x.hash!==u.definition.hash)throw new re("LINEAGE_STALE","Last lineage generation does not match bundle identity");T=st(u.lineage,{...x.definition,hash:x.hash}).entries;}catch(x){let te=x instanceof re?x.code:"LINEAGE_INVALID";r.push(s(te,u.packageDir)),y.push({indexEntry:u,failureCode:te});continue}let N=M.find(x=>x.name===u.packageDir.slice(5));if(!m||!N){y.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}if(N.kind!=="directory"){y.push({indexEntry:u,failureCode:N.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let h;try{let x=await js(n,e.root,u.packageDir,t,i);if(!le(t,i)){S=!0,y.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let te=u.files.map(ie=>ie.path);if(x.length!==te.length||x.some((ie,he)=>ie!==te[he])){y.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}h=new Map;let z;for(let ie of u.files){if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(_>=mt){z="LIMIT_EXCEEDED";break}let he;try{he=await Oi(n,e.root,`${u.packageDir}/${ie.path}`,Vs(ie.path));}catch(Co){z=be(Co);break}if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(_+he.byteLength>mt){_=mt,z="LIMIT_EXCEEDED";break}if(_+=he.byteLength,createHash("sha256").update(he).digest("hex")!==ie.sha256){z="BUNDLE_INTEGRITY";break}h.set(ie.path,he);}if(z!==void 0){y.push({indexEntry:u,failureCode:z});continue}}catch(x){le(t,i)||(S=true),y.push({indexEntry:u,failureCode:be(x)});continue}y.push({indexEntry:u,lineage:T,files:h,...U.has(u)?{failureCode:"DUPLICATE_ID"}:{}});}return a(y,S,c)}var Es,_t,Tt,_s,Ts,bs,mt,ht,Ps,Ds,bt=V(()=>{g();at();Le();pt();gt();Es=256*1024,_t=64,Tt=128,_s=_t*Tt,Ts=2*1024*1024,bs=8*1024*1024,mt=32*1024*1024,ht=/^[0-9a-f]{64}$/,Ps=new TextDecoder("utf-8",{fatal:true}),Ds=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Bs(e){if(typeof e!="string"||!ae.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Pt}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Pt}${n}_read`,action:`${Pt}${n}_action`}}function qe(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function ki(e){return typeof e=="string"&&ae.test(e)?e:void 0}function zs(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Gs(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ze(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Gi(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function $s(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function $i(e){return Hs.decode(e)}function Wi(e){return JSON.parse($i(e))}function Ws(e){if(!qe(e))return;let n=ki(e.pluginId);if(!n)return;let t=ki(e.definitionId),i=e.version,o=t&&Number.isSafeInteger(i)&&i>=1?`${t}\0${String(i)}`:void 0;return {pluginId:n,...o===void 0?{}:{definitionKey:o}}}function Js(e){let n=Wi(e);return {value:n,identity:Ws(n)}}function _n(e,n,t,i){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t};return Object.freeze(o)}function Ci(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ne(e){if(e instanceof P)return Ci(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ci(n)}}function ve(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function xi(e){switch(e.code){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("UiPluginValidationError",e.code)}}function Ji(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Dt(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("McpAppContractError",e)}}function ue(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Ks(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Xs(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(qe(o)){let r=o.bin,s=typeof r=="string"?r:qe(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let p=Ys(a);if(p&&n.has(p))return p}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function Ys(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function qs(){return globalThis.performance?.now()??Date.now()}function xe(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))xe(n);return Object.freeze(e)}function vi(e){return Object.freeze(Array.from(e))}async function Tn(e,n,t,i){if(n.pinnedFiles!==void 0){let d=n.pinnedFiles.get(t);if(d===void 0)throw new P("NOT_FOUND");if(d.byteLength>i)throw new P("LIMIT_EXCEEDED");return new Uint8Array(d)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return Bi(e,n.root,o,i);let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let p=await Bi(e,n.root,o,i),c=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=c.candidateRealPath,Xi(a,c)&&c.size===BigInt(p.byteLength)&&!Yi(c,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:c}):r.cacheable=false,p}function Ki(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Zs(e,n,t,i,o,r,s,a){let p=e.fingerprintVerifiedFile,c=Ki(t,i),d=o.candidates.get(c),A=i.relativePath,I;try{I=await Fi(e,n,A);}catch(f){if(ne(f)!=="NOT_FOUND")throw f}let m=I===void 0?void 0:{relativePath:A,key:I};if(m!==void 0&&i.source==="skills"&&!Qs(m.key,"ui-plugin.json"))return ue(s,a)?d!==void 0&&d.candidate===void 0&&d.diagnostic===void 0&&d.candidateRealPath===void 0&&d.files.length===0&&d.directoryListings.length===1&&d.directoryListings[0]?.relativePath===m.relativePath&&d.directoryListings[0]?.key===m.key&&typeof p=="function"?{memo:d}:typeof p!="function"?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([m]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let E=await Promise.all(ji.map(async f=>{if(f==="")return m;let y=`${i.relativePath}${f}`;try{let _=await Fi(e,n,y);return _===void 0?void 0:{relativePath:y,key:_}}catch(_){if(ne(_)==="NOT_FOUND")return;throw _}}));if(!ue(s,a))return {timeLimitReached:true};let D=typeof p=="function"&&E.every(f=>f!==void 0),M=E.filter(f=>f!==void 0),v=new Map,C=d!==void 0&&D,U;if(d!==void 0&&typeof p=="function"){let f=await Promise.all(d.files.map(async y=>{if(!ue(s,a))return {kind:"time",file:y};try{let _=await p.call(e,n,y.relativePath,y.byteLimit);return {kind:"fingerprint",file:y,current:_}}catch(_){return ne(_)==="NOT_FOUND"?{kind:"missing",file:y}:{kind:"error",file:y,error:_}}}));if(f.some(y=>y.kind==="time"))return {timeLimitReached:true};for(let y of f){if(y.kind==="error")throw y.error;if(y.kind==="missing"){C=false;continue}if(y.kind!=="fingerprint")continue;let{file:_,current:S}=y;v.set(_.relativePath,S),U??=S.candidateRealPath,(S.candidateRealPath!==d.candidateRealPath||!Xi(S,_.fingerprint)||Yi(S,r))&&(C=false);}}let j=d!==void 0&&d.directoryListings.length===M.length&&d.directoryListings.every((f,y)=>f.relativePath===M[y]?.relativePath&&f.key===M[y]?.key);return d!==void 0&&D&&j&&C&&U===d.candidateRealPath?{memo:d}:!D||M.length!==ji.length?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(M),priorFingerprints:v,files:new Map,...U===void 0?{}:{candidateRealPath:U},cacheable:true}}}function Qs(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return true}}async function Fi(e,n,t){let i=qi(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(Gi);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>Ze(s.name,a.name)||Ze(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Xi(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Yi(e,n){let t=e.mtimeNs-n;return t>=-Vi&&t<=Vi}function Nt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!t||n.files.size===0&&!t)return;let i=Object.freeze({...!t&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,i);}function ea(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(Z(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function na(e,n){let t={...e.definition,sourceHash:n},i;try{i=ce(t);}catch(r){throw r instanceof L&&r.code==="INPUT_INVALID"?new K("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{pe(o);}catch{throw new K("MANIFEST_INVALID","normalized definition is invalid")}return o}function ta(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function ia(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function qi(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Bi(e,n,t,i){let o=ia(e);if(!o)throw new P("READ_DENIED");return $s(await o.call(e,n,t,i))}async function oa(e,n,t){let i=qi(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Gi).filter(r=>r!==null)}function ra(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Hi(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Hi(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Hi(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function fe(e,n){e.diagnostic||(e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId));}function sa(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&fe(s,"RESERVED_ID");if(o.length>1)for(let s of o)fe(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)fe(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)fe(o,"DUPLICATE_ID");}function aa(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let p of ra(n)){for(let c of p.appIds??[])typeof c=="string"&&i.add(c);for(let c of p.definitionIds??[])typeof c=="string"&&o.add(c);for(let c of p.toolNames??[])typeof c=="string"&&r.add(c);}for(let p of e){let c=p.candidate;if(!c)continue;if(i.has(c.pluginId)||o.has(c.definitionId)){fe(p,"RESERVED_ID");continue}if(p.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){fe(p,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(A=>A!==void 0).some(A=>r.has(A))&&fe(p,"DUPLICATE_ID");}}function ca(e){return [...e].sort((n,t)=>{let i=Ui.indexOf(n.source)-Ui.indexOf(t.source);return i!==0?i:Ze(n.relativePath,t.relativePath)})}function w(e,n){e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId);}async function zi(e,n,t){if(t.byteLength>262144){w(n,"LIMIT_EXCEEDED");return}let i;try{i=Js(t);}catch{w(n,"MANIFEST_INVALID");return}if(n.bundleIdentity===void 0)n.identity=i.identity;else if(i.identity?.pluginId!==n.bundleIdentity.appId||i.identity.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){w(n,"BUNDLE_INTEGRITY");return}if(qe(i.value)&&i.value.builtinOnly===true){w(n,"RESERVED_ID");return}let o;try{let h=Te(i.value,{mode:"local"});if(h.manifestVersion!==2)throw new K("MANIFEST_INVALID","workspace App requires v2");o=h;}catch(h){if(h instanceof K){w(n,xi(h));return}if(h instanceof de){w(n,Dt(h.code));return}if(qe(h)&&typeof h.code=="string"){w(n,Dt(h.code));return}throw h}let r={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=r),o.actions.length>0)try{hi(o.actions.map(h=>({actionId:h.actionId,inputSchema:h.inputSchema})));}catch(h){if(h instanceof de){w(n,Dt(h.code));return}throw h}let s;try{s=await Tn(e,n,"ui/index.html",We);}catch(h){w(n,ve(ne(h),"entry"));return}if(s.byteLength>We){w(n,"LIMIT_EXCEEDED");return}let a;try{a=$i(s);}catch{w(n,"ENTRY_INVALID");return}if(s.byteLength===0||a.length===0){w(n,"ENTRY_INVALID");return}let p=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==p){w(n,"ENTRY_INVALID");return}let c={},d,A;if(o.initialState!==void 0){try{d=await Tn(e,n,"ui/state.json",65536);}catch(h){w(n,ve(ne(h),"initial"));return}if(d.byteLength>65536){w(n,"LIMIT_EXCEEDED");return}try{let h=Wi(d),x=o.dataPaths??[],te=et(h,x);c=se(te,0,x),Se(c);}catch{w(n,"INITIAL_STATE_INVALID");return}if(A=createHash("sha256").update(d).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==A){w(n,"INITIAL_STATE_INVALID");return}}let I={...o,entryHash:p,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:A}}},m=nt(I),E=ea(I,s,d??new Uint8Array),D;try{D=na(m,E);}catch(h){if(h instanceof K){w(n,xi(h));return}throw h}let M;if(n.bundleLineage!==void 0){let h=n.bundleLineage[n.bundleLineage.length-1];if(!h){w(n,"LINEAGE_INVALID");return}let{legacy:x,...te}=h.definition,{hash:z,...ie}=D;if(Z(te)!==Z(ie)){w(n,"LINEAGE_STALE");return}if(x!==void 0&&(D={...D,legacy:x}),x!==void 0)try{D={...D,hash:ce(D)},pe(D);}catch{w(n,"LINEAGE_INVALID");return}M=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){w(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==D.id||n.bundleIdentity.version!==D.version||n.bundleIdentity.definitionHash!==D.hash)){w(n,"LINEAGE_STALE");return}let v=Bs(o.pluginId),C=o.actions.length===0?{read:v.read}:v,U=xe(m),j=xe(I),f=xe(D),y=xe({...m.handlers}),_=vi(s),S=d===void 0?void 0:vi(d),u=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:p,bytes:_}),...S===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:A,bytes:S})}}),T={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,relativePath:n.relativePath,manifest:j,normalized:U,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:f,handlers:y,resources:u,html:a,entryBytes:_,entryHash:p,initialState:xe(c),...S===void 0?{}:{initialStateBytes:S},...A===void 0?{}:{initialStateHash:A},sourceHash:E,toolNames:Object.freeze(C)},N=n.provenance===void 0?{...T,source:n.source}:{...T,provenance:n.provenance,lineage:M??[]};n.candidate=Object.freeze(N),ta(o)&&w(n,"EXEC_DENIED");}async function pa(e,n){try{return await Tn(e,n,"ui-plugin.json",262144)}catch(t){if(ne(t)==="NOT_FOUND")return;w(n,ve(ne(t),"manifest"));return}}function da(e,n,t,i=Fs,o=false){let r=ca(e);sa(r);let s=Object.freeze(r.filter(d=>d.candidate!==void 0&&d.diagnostic===void 0).map(d=>d.candidate)),a=Object.freeze(r.filter(d=>d.diagnostic!==void 0).map(d=>d.diagnostic)),p=o?Object.freeze({...t===void 0?{}:{indexHash:t},diagnostics:Object.freeze(a.filter(d=>d.source==="bundled").map(d=>Object.freeze({...d}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...p===void 0?{}:{productBundleSnapshotMetadata:p}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function la(e){if(e===null||typeof e!="object"&&typeof e!="function")return false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function ua(e,n){if(la(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Ni,options:t}}async function Zi(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=ua(n,t),r=o.clock??qs,s=r(),a=await wi(o.productBundle,i,s,r),p=r(),c=BigInt(Date.now())*1000000n,d=[],A=0,I,m=false,E,D;o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function"&&(D=await i.getRootIdentity(e),E=_i(o.scanCache,D),E.scanStartedAtNs=c);let M=E!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,v=new Set,C=true;d.push(...a.diagnostics.map(f=>({source:f.source,root:o.productBundle?.root??e,name:"",relativePath:f.relativePath,diagnostic:f})));let U=a.reservedIds;a.incomplete&&(I="time_limit");for(let f of a.packages){if(!ue(p,r)){m=true,I="time_limit";break}let y=f.indexEntry,_=y.packageDir,S=f.files===void 0?void 0:Xs(_,f.files),u=a.indexHash===void 0?void 0:di(Object.freeze({kind:"bundled",launcher:y.launcher!==false,indexHash:a.indexHash,packageDir:_,appId:y.appId,definitionId:y.definition.id,version:y.definition.version,definitionHash:y.definition.hash,files:y.files}),S),T={source:"bundled",root:o.productBundle?.root??e,name:_.slice(5),relativePath:_,...u===void 0?{}:{provenance:u},...f.files===void 0?{}:{pinnedFiles:f.files},...f.lineage===void 0?{}:{bundleLineage:f.lineage},bundleIdentity:{appId:y.appId,definitionId:y.definition.id,version:y.definition.version,definitionHash:y.definition.hash},identity:Ks(y)};if(d.push(T),A+=1,f.failureCode!==void 0){w(T,f.failureCode);continue}let N=f.files?.get("ui-plugin.json");if(N===void 0){w(T,"BUNDLE_INTEGRITY");continue}if(await zi(i,T,N),!ue(p,r)){m=true,I="time_limit";break}}let j=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let f of j){let{source:y,directory:_}=f,S;try{S=await oa(i,e,_);}catch(T){if(ne(T)==="NOT_FOUND")continue;M=false,C=false,d.push({source:y,root:e,name:"",relativePath:y,diagnostic:_n(ve(ne(T),"manifest"),y,y)});continue}let u=S.filter(T=>T.kind==="directory"||T.kind==="symlink").filter(T=>Gs(T.name)).map(T=>({source:y,root:e,name:T.name,relativePath:zs(y,T.name)})).sort((T,N)=>Ze(T.relativePath,N.relativePath));for(let T of u){let N={...T};if(d.push(N),D!==void 0?v.add(Ki(D,N)):M=false,!ue(p,r)){m=true,I="time_limit";break e}let h;if(E!==void 0&&D!==void 0){try{let z=await Zs(i,e,D,N,E,c,p,r);if(z.timeLimitReached){m=!0,I="time_limit";break e}N.scanContext=z.context,h=z.memo;}catch(z){M=false,w(N,ve(ne(z),"manifest"));continue}h===void 0&&(M=false);}if(h!==void 0){if(N.candidate=h.candidate,N.diagnostic=h.diagnostic,N.identity=h.identity,y==="skills"&&h.candidate===void 0&&h.diagnostic===void 0)continue;if(A>=64){w(N,"LIMIT_EXCEEDED");continue}if(T.relativePath.split("/").length-1>2){w(N,"LIMIT_EXCEEDED");continue}if(A+=1,!ue(p,r)){m=true,I="time_limit";break e}continue}let x;if(y==="skills"&&(x=await pa(i,N),x===void 0)){N.diagnostic===void 0&&Nt(N);continue}if(A>=64){w(N,"LIMIT_EXCEEDED");continue}if(T.relativePath.split("/").length-1>2){w(N,"LIMIT_EXCEEDED");continue}if(!ue(p,r)){m=true,I="time_limit";break e}if(A+=1,x===void 0)try{x=await Tn(i,N,"ui-plugin.json",262144);}catch(z){w(N,ve(ne(z),"manifest")),Nt(N);continue}if(await zi(i,N,x),Nt(N),!ue(p,r)){m=true,I="time_limit";break e}}}if(E!==void 0&&D!==void 0){let f=[...v].sort(Ze),y=E.lastCandidateKeys,_=y!==void 0&&y.length===f.length&&y.every((u,T)=>u===f[T]);if(M=M&&_,C&&!m&&I===void 0)for(let u of E.candidates.keys())try{JSON.parse(u)[0]===D.realPath&&!v.has(u)&&E.candidates.delete(u);}catch{E.candidates.delete(u);}let S=[...E.candidates.keys()].filter(u=>{try{return JSON.parse(u)[0]===D.realPath}catch{return false}});M=M&&S.length===v.size&&S.every(u=>v.has(u))&&!m&&I===void 0,E.lastCandidateScanUnchanged=M,C&&!m&&I===void 0&&(E.lastCandidateKeys=Object.freeze(f));}return m&&d.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:_n("DISCOVERY_TIME_LIMIT","apps","apps")}),aa(d,o,U),da(d,I,a.indexHash,U,o.productBundle!==void 0)}var Fs,Pt,Ui,Hs,ji,Vi,Qi=V(()=>{g();Ue();en();ge();tt();Le();pt();ln();Ti();gt();un();bt();bt();Fs=hn([]),Pt="crewx_local_app_";Ui=["bundled","apps","skills"],Hs=new TextDecoder("utf-8",{fatal:true});ji=["","/ui"],Vi=2000000000n;});g();tt();g();vn();g();var ei="SKILL.md",Wr=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function ni(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Jr(e){return e.isDirectory()||e.isSymbolicLink()}function si(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return false}}function it(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Wr);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!ni(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=ni(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Kr(e){return [join(e,ei),join(e,"skill",ei)]}function ti(e,n){if(!si(e))return null;for(let t of Kr(e)){if(!existsSync(t))continue;let o=it(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function ii(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Jr)}catch{return []}}function oi(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function ai(e){let n=[],t=new Set;for(let i of e)if(si(i))for(let o of ii(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of ii(r))oi(ti(join(r,s.name),s.name),t,n);continue}oi(ti(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}Qi();var ya=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Pn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Aa(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Aa(e,n){let t=new TextEncoder().encode(Dn(e)),i=Ia(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function Ia(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Dn(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function bn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function to(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:Dn(t)}function ga(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function io(e){return Object.freeze({packageRoot:e})}function ma(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function oo(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function ha(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=ma(t),s=Pn(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",p=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:p,...oo(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:io(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:o,summary:Object.freeze(c)}}function Ea(e){let n=_a(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...oo(["skill"]),skillName:e.skill.name,localDefinitionRef:io(e.packageRoot),definitionHash:Pn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function _a(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function G(e,n,t,i){return Object.freeze({code:e,source:n,relativePath:Ta(t),...i===void 0?{}:{appId:i}})}function Ta(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function ro(e){return G(e.code,e.source,e.relativePath,e.pluginId)}function ba(e,n){let t=to(e,n.dir);if(!t)return {diagnostic:G("PATH_ESCAPED","node_modules","node_modules")};let i=ga(t);if(!i)return {diagnostic:G("PATH_ESCAPED","node_modules",t)};let o=it(n.skillMdPath);if(!o.readable)return {diagnostic:G("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:G("SKILL_INVALID",i,t)};let r=Pa(n.dir,n.skillMdPath);if(!r)return {diagnostic:G("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Pn({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:G("SKILL_READ_FAILED",i,t)}}}function Pa(e,n){let t=relative(e,n).split(sep).join("/");try{return Dn(t)}catch{return null}}function Da(e){if(!ya.test(e.appId))return {diagnostic:G("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Na(e){return e.builtinCatalog}function Sa(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Dn(n)}catch{return null}}function Ma(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function La(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Sa(s);if(!a){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let p=o.get(a);if(p&&JSON.stringify(p)!==JSON.stringify(s)){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let p=r.get(s);if(!p){t.push(G("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Ma(a);if(!c){t.push(G("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==p.appId||a.definitionHash!==void 0&&a.definitionHash!==p.summary.definitionHash){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let d={...p.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},A=e.indexOf(p);A>=0&&(e[A]={...p,summary:Object.freeze(d)});}}function Oa(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(p=>p.source!==r))i.add(a),n.push(G("RESERVED_ID",a.source,Mt(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(G("DUPLICATE_ID",a.source,Mt(a),a.appId));continue}for(let s of o)i.add(s),n.push(G("DUPLICATE_ID",s.source,Mt(s),s.appId));}return e.filter(o=>!i.has(o))}function Mt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Ra(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(ro)}function wa(e){return e.filesystem}function Ua(e,n){let t=wa(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function so(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Na(n),i=await Zi(e,Ua(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],p=[],c=new Set;for(let f of r)for(let y of ai([f])){let _=to(e,y.dir);(_===null||!c.has(_))&&(p.push(y),_!==null&&c.add(_));}for(let f of p){let y=ba(e,f);"diagnostic"in y?s.push(y.diagnostic):a.push(y);}let d=new Map;for(let f of i.apps??i.candidates??[]){let y=f.provenance===void 0?`workspace\0${f.relativePath}`:`bundled\0${f.provenance.indexHash}\0${f.provenance.packageDir}`;d.set(y,{candidate:f,packageRoot:f.relativePath});}let A=new Map(a.map(f=>[f.packageRoot,f])),I=[];for(let f of d.values()){let y=f.candidate.provenance===void 0?A.get(f.packageRoot):void 0,_=ha(f,y);I.push({..._.packageRoot===void 0?{}:{packageRoot:_.packageRoot},source:_.source,appId:_.appId,summary:_.summary});}let m=new Set([...d.values()].filter(f=>f.candidate.provenance===void 0).map(f=>f.packageRoot)),E=o===void 0?new Set:new Set(i.diagnostics.filter(f=>f.code==="RESERVED_ID"&&f.source!=="bundled").map(f=>f.relativePath)),D=new Set(o?.reservedAppIds??[]);for(let f of a){let y=Ea(f);if(!(m.has(f.packageRoot)||E.has(f.packageRoot))){if(D.has(y.appId)){s.push(G("RESERVED_ID",f.source,f.packageRoot,y.appId));continue}I.push({packageRoot:y.packageRoot,source:y.source,appId:y.appId,summary:y.summary});}}let M=[...Ra(i.diagnostics,new Set(a.map(f=>f.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(f=>f.source==="bundled").map(ro)??[]],v=[];if(t)for(let f of t.listMcpApps()){let y=Da(f);"diagnostic"in y?M.push(y.diagnostic):v.push(y);}let C=Oa([...I,...v],M);La(C,n,M);let U=C.map(f=>f.summary).sort((f,y)=>bn(f.appId,y.appId)),j=[...M].sort((f,y)=>bn(f.relativePath,y.relativePath)||bn(f.code,y.code)||bn(f.appId??"",y.appId??""));return Object.freeze({items:Object.freeze(U),diagnostics:Object.freeze(j)})}g();g();g();function ka(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function je(e,n){try{return ka(n).test(e)}catch{return false}}function Nn(e,...n){let t=e.split("/");if(t.length<n.length)return false;let i=t.length-n.length;return n.every((o,r)=>je(t[i+r],o))}function Ca(e,n){return e.split("/").some(t=>je(t,n))}var ao=[{label:".env*",test:e=>je(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>je(e,"*.key")},{label:"*.pem",test:e=>je(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Nn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Nn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Nn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Nn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>Ca(n,".crewx")}];function Sn(e,n,t){for(let i of ao)if(i.test(e,n,t))return i.label;return null}function Rt(e){let n=[],t=[];function i(o,r,s){let a;try{a=$.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((p,c)=>p.name.localeCompare(c.name));for(let p of a){let c=r?`${r}/${p.name}`:p.name,d=J.join(o,p.name);if(p.isSymbolicLink()){let A;try{A=$.statSync(d);}catch{t.push({path:c,rule:"symlink"});continue}if(A.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let I=s??Sn(p.name,c,false);I?t.push({path:c,rule:I}):t.push({path:c,rule:"symlink"});continue}if(p.isDirectory()){let A=s??Sn(p.name,c,true);i(d,c,A);continue}if(p.isFile()){let A=s??Sn(p.name,c,false);A?t.push({path:c,rule:A}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}g();var xa=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function va(e){return e.includes(0)}function wt(e,n,t){let i=[];for(let o of n){let r=J.join(e,o),s;try{let p=t?.get(o);s=p===void 0?$.readFileSync(r):Buffer.from(p);}catch{continue}if(va(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((p,c)=>{for(let{rule:d,regex:A}of xa)A.test(p)&&i.push({path:o,line:c+1,rule:d});});}return i}g();g();var ye=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new ye(e,n)}var uo=/^[a-z0-9-]+$/,ja=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Va=/^[A-Za-z_][A-Za-z0-9_]*$/;function Fa(e){let n=J.join(e,"crewx.yaml");if(!$.existsSync(n))return {};let t;try{t=fo.load($.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Ba(e){return Ut.createHash("sha256").update(e).digest("hex")}function yo(e){let n;try{n=$.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${J.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return Ut.createHash("sha256").update(new Uint8Array($.readFileSync(e))).digest("hex")}function Ha(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ao(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||J.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function za(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function Io(e){if(!ja.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function go(e,n,t={}){let i=Fa(e),o=i.name??J.basename(e);if(!uo.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${uo} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");Io(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let d of s){if(typeof d!="string"||!Va.test(d))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(d)}"`);a.push(d);}let p=n.map(d=>(Ao(d),{path:d,sha256:yo(J.join(e,d))})).sort((d,A)=>d.path<A.path?-1:d.path>A.path?1:0),c={name:o,version:r,type:"template",description:i.description??"",files:p,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function Ga(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function mo(e,n){if(za(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(Io(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");for(let s of ["ui-plugin.json","ui/index.html"])if(!n.includedFiles.includes(`${i}${s}`))throw b("APP_UI_MANIFEST_INVALID",`screen App is missing ${s}`)}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Ao(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?yo(J.join(e,s)):Ba(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>Ha(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Ga(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}g();function ho(e){return Ut.createHash("sha256").update(e).digest("hex")}function Po(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=J.resolve(e),i=J.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Eo(e,n){let t=Po(e,n),i;try{i=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array($.readFileSync(t))}async function Do(e,n,t={}){let i=J.join(e,".crewx","publish");$.mkdirSync(i,{recursive:true});let o=J.join(i,`${n.name}-${n.version}.tgz`),r=J.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=$.mkdtempSync(J.join(_o.tmpdir(),"crewx-publish-"));try{let a=new Set,p=[];for(let c of n.files){if(a.has(c.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let d=t.generatedFiles?.get(c.path);if(c.generated===!0&&d===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let m=Eo(e,c.path);if(t.sourceFileHashes.get(c.path)!==ho(m))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let A=d??Eo(e,c.path);if(ho(A)!==c.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let I=Po(s,c.path);$.mkdirSync(J.dirname(I),{recursive:!0}),$.writeFileSync(I,new Uint8Array(A)),p.push(c.path);}$.writeFileSync(J.join(s,"manifest.json"),JSON.stringify(n,null,2)),await bo.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...p]),$.renameSync(r,o);}finally{try{$.rmSync(r,{force:!0});}catch{}$.rmSync(s,{recursive:true,force:true});}return o}g();g();var Ve="/api/v1";var Ja=201,Ka=200,Xa=409,kt=401,No={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Ya(){return process.env.WI013_FAKE_UPLOAD==="1"}function qa(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Za(e){return e.replace(/\/+$/,"")}async function Qe(e){try{return await e.json()}catch{return null}}function So(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Qa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function ec(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Mo(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(No,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(No[s],a)}}async function nc(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Za(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${Ve}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let p=await Qe(a),c=Qa(p),d=ec(p),A=r&&d!==void 0?d:i,I;if(a.status===Ja)I="created";else if(r&&a.status===Ka){if(c===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");I="existing";}else if(a.status===Xa){if(r)throw Mo(p,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);I="existing";}else throw a.status===kt?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let m="not-needed",E=null;if(I==="existing"&&!r){let _;try{_=await fetch(`${n}${Ve}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let S=await Qe(_);if(_.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${_.status}`);let T=So(S,"publisher items",_.status)?.items;if(!Array.isArray(T))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${_.status}`);let N=T.find(h=>!h||typeof h!="object"?false:h.slug===i);if(!N||typeof N.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${_.status}`);if(E=N.version,E!==e.manifest.version){let h;try{h=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!h.ok)throw await Qe(h),h.status===kt?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${h.status})`):h.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${h.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${h.status}`);m="applied";}}let D=$.readFileSync(e.tgzPath),M=Ya()?qa(D):D,v=new FormData;v.set("archive",new Blob([new Uint8Array(M)],{type:"application/gzip"}),`${A}-${e.manifest.version}.tgz`);let C=r&&c!==void 0?c:i,U;try{U=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(C)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:v});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(U.status===kt)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!U.ok){let _=await Qe(U);if(r){let S=Mo(_,A);if(S)throw S}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${U.status}`)}let j=await Qe(U),f=So(j,"upload",U.status),y=typeof f.contentId=="string"&&f.contentId.length>0?f.contentId:c;if(r&&y===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:A,version:e.manifest.version,...y===void 0?{}:{contentId:y},artifactChecksum:f.artifactChecksum,artifactSizeBytes:f.artifactSizeBytes,submitOutcome:I,versionUpdate:m,serverVersionBefore:E}}var tc=1e4,ic=100*1024*1024;function Ct(e){return Ut.createHash("sha256").update(e).digest("hex")}function oc(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ln(e,n){if(!n||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=J.resolve(e,...n.split("/")),i=J.resolve(e);if(t!==i&&!t.startsWith(`${i}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array($.readFileSync(t))}function On(e,n){return e===n||e.startsWith(`${n}/`)}function rc(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Oo(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new ye("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function wo(e,n,t,i){let o=Oo(t.maxFileCount??t.maxFiles,tc,"max file count"),r=Oo(t.maxTotalBytes??t.maxBytes,ic,"max total bytes");if(n.length>o)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let p=i?.get(a);if(p!==void 0?s+=p.byteLength:s+=Ln(e,a).byteLength,s>r)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function sc(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function ac(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function cc(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function pc(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function dc(e,n){let t=[];for(let i of e.excluded)t.push(On(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)On(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(rc)}function lc(e,n,t,i){let o=`${t}/ui-plugin.json`;if(!i.includes(o))throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package ui-plugin.json");let r=Ln(e,o),s=Ct(r),a;try{a=JSON.parse(Buffer.from(r).toString("utf8"));}catch{throw b("APP_UI_MANIFEST_INVALID","ui-plugin.json is not valid JSON")}let p;try{let I=Te(a,{mode:"local"});if(I.manifestVersion!==2)throw new Error("screen App requires manifestVersion 2");p=I;}catch(I){throw I instanceof K?b("APP_UI_MANIFEST_INVALID",I.code):b("APP_UI_MANIFEST_INVALID")}if(p.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT","ui-plugin.json pluginId no longer matches the selected App");let c=`${t}/ui/index.html`;if(!i.includes(c))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let d=Ct(Ln(e,c)),A=JSON.parse(JSON.stringify(a));if(A.entryHash=d,Object.prototype.hasOwnProperty.call(A,"initialState")){let I=A.initialState;if(!oc(I)||I.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let m=`${t}/ui/state.json`;if(!i.includes(m))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let E=Ln(e,m);A.initialState={...I,hash:Ct(E)};}try{let I=Te(A,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(xn(I),"utf8")),sourceHash:s}}catch(I){throw I instanceof K?b("APP_UI_MANIFEST_INVALID",I.code):b("APP_UI_MANIFEST_INVALID")}}async function uc(e,n){let{included:t,excluded:i}=Rt(e);wo(e,t,n);let o=go(e,t,{version:n.version}),r=wt(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function fc(e,n){ac(n);let t=await so(e),i=cc(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=pc(i),r=Rt(e);if(r.excluded.some(m=>On(m.path,o)&&(m.rule==="symlink"||m.rule==="symlink-dir")))throw b("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(m=>On(m,o)),a=dc(r,o),p=new Map,c=new Map;if(i.capabilities.includes("screen")){let m=lc(e,i,o,s);p.set(`${o}/ui-plugin.json`,m.bytes),c.set(`${o}/ui-plugin.json`,m.sourceHash);}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");wo(e,s,n,p);let d={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:p},A=mo(e,d),I=wt(e,s,p);return {plan:{manifest:A,included:s,excluded:a,secretFindings:I},archiveOptions:{generatedFiles:p,sourceFileHashes:c}}}async function Uo(e,n){let t=J.resolve(e);if(sc(n))return fc(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return uc(t,n)}async function Cl(e,n={}){return (await Uo(e,n)).plan}function yc(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new ye("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function ko(e,n={}){let t=J.resolve(e),i=await Uo(t,n);i.plan.secretFindings.length>0&&yc(i.plan.secretFindings);let o=await Do(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function xl(e,n={}){return ko(e,n)}async function vl(e,n){let t=await ko(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
2
- export{ic as DEFAULT_PUBLISH_MAX_BYTES,tc as DEFAULT_PUBLISH_MAX_FILES,ao as EXCLUDE_RULES,Ve as MARKETPLACE_API_PREFIX,ye as PublishError,vl as packApp,ko as packPublish,xl as packTemplate,Cl as planPublish,nc as uploadToMarketplace};
1
+ import*as J from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as Ut from'crypto';import {createHash}from'crypto';import*as $ from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as yo from'js-yaml';import {load}from'js-yaml';import*as To from'os';import*as Po from'tar';import {gunzipSync,gzipSync}from'zlib';var V=(e,n)=>()=>(e&&(n=e(e=0)),n);var h=V(()=>{});var L,en=V(()=>{h();L=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function kn(e){return vo.test(e)||jo.test(e)}function Z(){throw new L("INPUT_INVALID","JSON value is not projection-safe")}function Ho(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function wn(e,n,t,i,o,r){if(n>i&&Z(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(Vo.test(e)||Bo.test(e)&&!$o(o,r)||Fo.test(e))&&Z(),e;if(typeof e=="number")return Number.isFinite(e)||Z(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&Z();let s=e;t.has(s)&&Z(),t.add(s);try{if(Array.isArray(e))return e.map(d=>wn(d,n+1,t,i,o,r));Ho(s)||Z();let a={};for(let[d,c]of Object.entries(e))kn(d)&&Z(),a[d]=wn(c,n+1,t,i,[...o,d],r);return a}finally{t.delete(s);}}function se(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>Go)&&Z(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&Z();let i=wn(e,0,new Set,zo+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&Z(),i}function Ne(e,n){if(!e||!n)return false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function $o(e,n){if(e.length===0)return false;let t=e.join(".");return n.some(i=>Ne(t,i))}function Se(e){try{let n=JSON.stringify(e);return n===void 0&&Z(),n}catch{Z();}}function Un(e){return Array.isArray(e)?e.map(Un):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Un(e[n])])):e}function Q(e){return Se(Un(e))}function Cn(e){return Buffer.byteLength(e,"utf8")}var vo,jo,Vo,Fo,Bo,zo,Go,ge=V(()=>{h();en();vo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,jo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,Vo=/<\/?[A-Za-z][^>]*>/,Fo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Bo=/^(?:https?|file|ftp|ws|wss):\/\//i;zo=8,Go=4;});function xn(e){return Q(e)}var xt=V(()=>{h();ge();});var me,vn=V(()=>{h();me="window";});function Me(e){return Wo.has(e)||Jo.test(e)||Ko.test(e)}var vt,Wo,Jo,Ko,nn,Fe,ae,jn,Vn,Fn,Bn,Hn,Le=V(()=>{h();vt=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],Wo=new Set(vt),Jo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Ko=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;nn=/^[A-Za-z0-9_]+$/,Fe=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,ae=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,jn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Vn=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Fn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,Bn=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Hn=["inline","panel"];});function zn(e){return typeof e=="string"&&jt.includes(e)}var jt,Vt=V(()=>{h();Le();jt=["text/plain","application/json"];});function tn(e){if(!Gn(e))return false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Xo(e.in)||Object.hasOwn(e,"out")&&!Yo(e.out))}function Xo(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Yo(e){return Gn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&zn(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function Gn(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var $n=V(()=>{h();Vt();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function l(e,n=e){throw new K(e,n)}function F(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function k(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function B(e,n,t=[]){let i=new Set([...n,...t]);Object.keys(e).some(o=>!i.has(o))&&l("MANIFEST_INVALID"),n.some(o=>!k(e,o))&&l("MANIFEST_INVALID");}function cn(e,n=false,t=false,i=false){return er.test(e)||!i&&tr.test(e)||nr.test(e)||t&&Ft.test(e)||ir.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ft.test(e))}function sn(e,n=new Set,t=0,i=false,o=false){if(typeof e=="string"){cn(e,i,o)&&l("UNSAFE_VALUE");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&l("MANIFEST_INVALID"),n.add(e);try{if(Array.isArray(e)){for(let r of e)sn(r,n,t+1);return}F(e)||l("MANIFEST_INVALID");for(let[r,s]of Object.entries(e))sn(s,n,t+1,i&&t===0&&(r==="name"||r==="description"),o);}finally{n.delete(e);}}}function oe(e,n){let t=e[n];return typeof t!="string"&&l("MANIFEST_INVALID"),t}function ne(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&l("MANIFEST_INVALID"),i}function Wn(e){return Qo.test(e)||l("MANIFEST_INVALID"),e}function Oe(e){return Zo.test(e)||l("TOKEN_INVALID"),e}function br(e){return Xt.test(e)||l("MANIFEST_INVALID"),e}function Pr(e){F(e)||l("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=br(t);F(i)||l("MANIFEST_INVALID");let r=i.type;if(r==="text"){B(i,["type","maxLength"]),n[o]={type:r,maxLength:ne(i,"maxLength",1)};continue}if(r==="text-list"){B(i,["type","max","itemMaxLength"]),n[o]={type:r,max:ne(i,"max",0),itemMaxLength:ne(i,"itemMaxLength",1)};continue}if(r==="step-list"){B(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=ne(i,"min",0),a=ne(i,"max",1);s>a&&l("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:ne(i,"labelMaxLength",1),detailMaxLength:ne(i,"detailMaxLength",1)};continue}typeof r=="string"&&l("SCHEMA_TYPE_UNSUPPORTED"),l("MANIFEST_INVALID");}return n}function Dr(e,n,t){let i=e[n];(!i||i.type!==t)&&l("MANIFEST_INVALID");}function on(e,n,t){let i=oe(e,"field");return Xt.test(i)||l("MANIFEST_INVALID"),Dr(n,i,t),i}function Nr(e,n){F(e)||l("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&l("MANIFEST_INVALID"),Tr.includes(t)||l("PRIMITIVE_UNKNOWN"),t){case "card-shell":return B(e,["primitive"]),{primitive:t};case "meta-banner":return B(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Oe(oe(e,"badgeToken")),noticeToken:Oe(oe(e,"noticeToken"))};case "heading":return B(e,["primitive","field"]),{primitive:t,field:on(e,n,"text")};case "labeled-text":return B(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&l("MANIFEST_INVALID"),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text"),variant:"callout"};case "step-flow":return B(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"step-list")};case "text-list":{B(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Oe(oe(e,"titleToken")),field:on(e,n,"text-list")};return k(e,"emptyToken")&&(i.emptyToken=Oe(oe(e,"emptyToken"))),k(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&l("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return l("MANIFEST_INVALID")}function Sr(e,n){return Array.isArray(e)||l("MANIFEST_INVALID"),e.map(t=>Nr(t,n))}function H(e="v2 manifest exceeds a contract limit"){return l("LIMIT_EXCEEDED",e)}function ee(e="initial state is not projection-safe"){return l("INITIAL_STATE_INVALID",e)}function Bt(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||hr.test(e)||Er.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),(cn(e,true,true)||or.test(e)||rr.test(e)||sr.test(e))&&l("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Jn(e,n){return (typeof e!="string"||!ae.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Mr(e){return (typeof e!="string"||!jn.test(e)||e==="*"||e==="all")&&l("MANIFEST_INVALID","action capability is invalid"),e}function Yt(e){return (typeof e!="string"||!mr.test(e))&&l("MANIFEST_INVALID","resource hash is invalid"),e}function Kn(e,n=new Set,t=0){if(typeof e=="string"){e.length>4096&&H("v2 manifest string is too long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||l("MANIFEST_INVALID","v2 manifest contains a non-finite number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&l("MANIFEST_INVALID","v2 manifest contains a non-JSON value"),typeof e!="object"&&l("MANIFEST_INVALID"),t>8&&H("v2 manifest nesting is too deep"),n.has(e)&&l("MANIFEST_INVALID","v2 manifest contains a cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&H("v2 manifest array is too long");for(let i of e)Kn(i,n,t+1);return}F(e)||l("MANIFEST_INVALID","v2 manifest contains a non-plain object");for(let i of Object.values(e))Kn(i,n,t+1);}finally{n.delete(e);}}}function qt(e){return (typeof e!="string"||e.length>4096||!Fe.test(e))&&(typeof e=="string"&&e.length>4096&&H("projection path is too long"),l("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Me(t))&&l("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Xn(e){F(e)||l("MANIFEST_INVALID","projection policy must be an object"),B(e,["allow"]),Array.isArray(e.allow)||l("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&H("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=qt(i);t.has(o)&&l("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Lr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","dataPaths must be an array"),e.length>_r&&H("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=qt(o);i.has(r)&&l("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>Ne(r,s))||l("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Re(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Ht(e,n){return (typeof e!="number"||!Number.isFinite(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Yn(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||cn(e))&&l("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||l("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&H("schema enum is too deep"),t.has(e)&&l("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&H("schema enum array is too long"),e.map(o=>Yn(o,n+1,t));F(e)||l("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Me(o)&&l("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Yn(r,n+1,t);return i}finally{t.delete(e);}}function Or(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","schema required must be an array"),e.length>64&&H("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!Fe.test(o))&&l("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&H("schema required key is too long"),i.has(o)&&l("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&l("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Rr(e,n){let t=n?Fe:nn;return e.length>4096&&H("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Me(i)))&&l("MANIFEST_INVALID","schema property name is invalid"),e}function qn(e,n=0,t=false){F(e)||l("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&H("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&l("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),l("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),B(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(k(e,"enum")&&(Array.isArray(e.enum)||l("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&H("schema enum is too long"),r.enum=e.enum.map(a=>Yn(a))),i==="string"&&(k(e,"minLength")&&(r.minLength=Re(e.minLength,"schema minLength",4096)),k(e,"maxLength")&&(r.maxLength=Re(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&l("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(k(e,"minimum")&&(r.minimum=Ht(e.minimum,"schema minimum")),k(e,"maximum")&&(r.maximum=Ht(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&l("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(k(e,"minItems")&&(r.minItems=Re(e.minItems,"schema minItems",128)),k(e,"maxItems")&&(r.maxItems=Re(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&l("MANIFEST_INVALID","schema array length bounds are inverted"),k(e,"items")&&(r.items=qn(e.items,n+1,false))),i==="object"){let a;if(k(e,"properties")){F(e.properties)||l("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&H("schema properties are too many"),a={};for(let[p,y]of c){let A=Rr(p,t);a[A]=qn(y,n+1,false);}r.properties=a;}k(e,"minProperties")&&(r.minProperties=Re(e.minProperties,"schema minProperties",64)),k(e,"maxProperties")&&(r.maxProperties=Re(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&l("MANIFEST_INVALID","schema object property bounds are inverted");let d=Or(e.required,a);d!==void 0&&(r.required=d),k(e,"additionalProperties")&&(e.additionalProperties!==false&&l("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&H("action inputSchema subtree is too large"),r}function wr(e){let n=qn(e,0,true);return (n.type!=="object"||!n.properties)&&l("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function Ur(e){if(F(e)||l("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){B(e,fr);let n=e.handler;return (typeof n!="string"||!Vn.test(n))&&l("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){B(e,yr,Ar),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&l("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!Fn.test(i))&&l("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=k(e,"env")?Cr(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}l("MANIFEST_INVALID","action backend type is unsupported");}function kr(e){F(e)||l("MANIFEST_INVALID","action must be an object"),B(e,pr,lr),k(e,"_meta")&&Zt(e._meta);let n=Jn(e.actionId,"actionId");kn(n)&&l("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`);let t=Mr(e.capability),i=e.mutation;typeof i!="boolean"&&l("MANIFEST_INVALID","action mutation must be boolean");let o=wr(e.inputSchema),r;if(k(e,"dataInputs")){Array.isArray(e.dataInputs)||l("MANIFEST_INVALID","action dataInputs must be an array");let p=o.properties,y=new Set,A=[];for(let _ of e.dataInputs)(typeof _!="string"||!k(p,_)||y.has(_))&&l("MANIFEST_INVALID","action dataInputs must be unique declared properties"),y.add(_),A.push(_);r=A;}let s=Xn(e.resultProjection),a=Ur(e.backend),d;k(e,"content")&&((a.type!=="skill"||!tn(e.content))&&l("MANIFEST_INVALID","action content declaration is invalid"),d=xr(e.content));let c;if(k(e,"confirmation")){let p=e.confirmation;p!=="none"&&p!=="native"&&l("MANIFEST_INVALID","action confirmation is invalid"),c=p;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...d===void 0?{}:{content:d},...r===void 0?{}:{dataInputs:r},...c===void 0?{}:{confirmation:c}}}function Cr(e){(!Array.isArray(e)||e.length===0)&&l("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&l("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function xr(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function vr(e){return F(e)||l("INITIAL_STATE_INVALID","initialState must be an object"),B(e,Ir,gr),e.path!=="ui/state.json"&&l("MANIFEST_INVALID","initialState path is not fixed"),k(e,"hash")?{path:"ui/state.json",hash:Yt(e.hash)}:{path:"ui/state.json"}}function jr(e){let n=["wasm","terminal","htmlDocuments"];return (!F(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&l("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function Vr(e,n){sn(e,new Set,0,true,true),Kn(e),F(e)||l("MANIFEST_INVALID"),B(e,cr,dr),k(e,"_meta")&&Zt(e._meta),e.manifestVersion!==2&&l("MANIFEST_INVALID");let t;k(e,"runtime")&&(t=jr(e.runtime));let i=Jn(e.pluginId,"pluginId"),o=Jn(e.definitionId,"definitionId"),r=ne(e,"version",1),s=Bt(e.name,"name"),a=Bt(e.description,"description"),d;k(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&l("MANIFEST_INVALID","icon is invalid"),d=e.icon);let c;k(e,"tone")&&((typeof e.tone!="string"||!Bn.includes(e.tone))&&l("MANIFEST_INVALID","tone is invalid"),c=e.tone),e.entry!=="ui/index.html"&&l("MANIFEST_INVALID","entry path is not fixed");let p;k(e,"entryHash")&&(p=Yt(e.entryHash));let y;k(e,"initialState")&&(y=vr(e.initialState));let A;k(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&l("MANIFEST_INVALID","usage is invalid"),A=e.usage);let _;k(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&l("MANIFEST_INVALID","detailPanel is invalid"),_=e.detailPanel);let T;if(k(e,"displayModes")){((A??me)!==me||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&l("MANIFEST_INVALID","displayModes are only valid for window Apps");let S=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(f=>typeof f!="string"||!S.has(f)))&&l("MANIFEST_INVALID","displayModes are invalid"),T=e.displayModes;}(A??me)===me&&_!==void 0&&l("MANIFEST_INVALID","detailPanel is card-only");let D=n.mode??"local";D!=="local"&&D!=="installed"&&D!=="published"&&l("MANIFEST_INVALID","manifest mode is invalid"),D!=="local"&&p===void 0&&l("MANIFEST_INVALID","installed manifests require entryHash"),D!=="local"&&y!==void 0&&y.hash===void 0&&l("MANIFEST_INVALID","installed manifests require initialState.hash"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&l("MANIFEST_INVALID","surfaces are invalid"),e.surfaces.length>2&&H("surfaces exceed the v2 limit");let M=[],v=new Set;for(let S of e.surfaces)(typeof S!="string"||!Hn.includes(S))&&l("MANIFEST_INVALID","surface is unsupported"),v.has(S)&&l("MANIFEST_INVALID","surfaces contain a duplicate"),v.add(S),M.push(S);F(e.size)||l("MANIFEST_INVALID","size must be an object"),B(e.size,["height"]);let C=ne(e.size,"height",1);C>720&&H("size.height exceeds the v2 limit");let U=Xn(e.stateProjection),j=e.summaryProjection===void 0?void 0:Xn(e.summaryProjection);j!==void 0&&j.allow.some(S=>!U.allow.includes(S))&&l("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow");let E=Lr(e.dataPaths,U.allow);Array.isArray(e.actions)||l("MANIFEST_INVALID","actions must be an array"),e.actions.length>32&&H("actions exceed the v2 limit");let m=[],N=new Set;for(let S of e.actions){let f=kr(S);if(N.has(f.actionId)&&l("MANIFEST_INVALID","actions contain a duplicate actionId"),f.backend.type==="core"&&f.backend.handler==="state.set"){f.mutation||l("MANIFEST_INVALID","state.set actions must be mutations");for(let u of Object.keys(f.inputSchema.properties))U.allow.includes(u)||l("MANIFEST_INVALID","state.set input paths must be projection-allowed");}N.add(f.actionId),m.push(f);}return {manifestVersion:2,pluginId:i,definitionId:o,version:r,name:s,description:a,...d===void 0?{}:{icon:d},...c===void 0?{}:{tone:c},entry:"ui/index.html",...p===void 0?{}:{entryHash:p},...t===void 0?{}:{runtime:t},...y===void 0?{}:{initialState:y},...A===void 0?{}:{usage:A},..._===void 0?{}:{detailPanel:_},...T===void 0?{}:{displayModes:T},surfaces:M,size:{height:C},stateProjection:U,...j===void 0?{}:{summaryProjection:j},...E===void 0?{}:{dataPaths:E},actions:m}}function Zt(e){F(e)||l("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>ur)&&H("_meta exceeds the 4 KiB limit");}function Fr(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function Zn(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>Ne(o.join("."),a));return (e.length>4096||cn(e,false,false,s))&&ee("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||ee("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&ee("state contains a non-JSON value"),t>8&&ee("state is too deep"),n.has(e)&&ee("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&ee("state array is too long"),s=e.map(d=>Zn(d,n,t+1,65536,o,r));else {F(e)||ee("state contains a non-plain object");let d={};for(let[c,p]of Object.entries(e))(c.length>4096||!nn.test(c)||Me(c))&&(c.length>4096&&ee("state key is too long"),ee("state contains a reserved or invalid key")),d[c]=Zn(p,n,t+1,65536,[...o,c],r);s=d;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&ee("state subtree is too large"),s}finally{n.delete(e);}}function et(e,n=[]){F(e)||ee("initial state must be a JSON object");let t=Zn(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&ee(),t}function Br(e,n={}){sn(e),F(e)||l("MANIFEST_INVALID"),B(e,ar),e.manifestVersion!==1&&l("MANIFEST_INVALID");let t=Wn(oe(e,"pluginId")),i=Wn(oe(e,"definitionId")),o=ne(e,"version",1),r=ne(e,"primitiveSet",1),s=n.supportedPrimitiveSet??qo;(!Number.isSafeInteger(s)||s<1)&&l("MANIFEST_INVALID"),r>s&&l("PRIMITIVE_SET_UNSUPPORTED"),F(e.activation)||l("MANIFEST_INVALID"),B(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&l("MANIFEST_INVALID");let a=Wn(oe(e.activation,"language")),d=Pr(e.schema),c=Sr(e.layout,d);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:d,layout:c}}function Hr(e,n={}){return F(e)||l("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&l("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Vr(e,n):Br(e,n)}function Te(e,n={}){try{return Hr(e,n)}catch(t){if(t instanceof K)throw t;return l("MANIFEST_INVALID")}}function nt(e,n={}){let t=Te(e,n);return t.manifestVersion===2?Fr(t):t}var qo,Zo,Qo,Xt,er,nr,tr,ir,Ft,or,rr,sr,ar,cr,dr,pr,lr,ur,fr,yr,Ar,Ir,gr,mr,hr,Er,_r,Tr,K,Qt=V(()=>{h();vn();ge();$n();Le();qo=1,Zo=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Qo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Xt=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,er=/<\/?[A-Za-z][^>]*>/,nr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,tr=/^(?:https?|file|ftp|ws|wss):\/\//i,ir=/^\s*(?:javascript|data):/i,Ft=/data:[^,\s]*,/i,or=/(?:https?|file|ftp|ws|wss):\/\//i,rr=/javascript:/i,sr=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,ar=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],cr=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],dr=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],pr=["actionId","capability","mutation","inputSchema","resultProjection","backend"],lr=["confirmation","dataInputs","content","_meta"],ur=4*1024,fr=["type","handler"],yr=["type","command"],Ar=["env"],Ir=["path"],gr=["hash"],mr=/^[0-9a-f]{64}$/,hr=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,Er=/[\r\n]/,_r=16,Tr=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],K=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="UiPluginValidationError"};});var tt=V(()=>{h();xt();Qt();Le();});function ce(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=se(t);return createHash("sha256").update(Q(i)).digest("hex")}function de(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new L("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!qr.test(e.sourceHash)))throw new L("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ce(e)!==e.hash)throw new L("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Qr(i)))throw new L("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new L("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new L("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new L("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&ot(t.resultProjection),t.content!==void 0&&!tn(t.content))throw new L("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new L("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new L("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new L("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new L("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new L("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new L("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new L("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new L("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&ot(e.stateProjection),e.summaryProjection){ot(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new L("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new L("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(Zr(r,o==="readTool"),n.has(r.name))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new L("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new L("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>Ne(t,i))))throw new L("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function Zr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=se(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let d=se(a.structuredContent);if(Cn(Se(d))>4*1024)throw new Error("fixed result size")}}catch{throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function ot(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new L("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Qr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var qr,Ue=V(()=>{h();ge();en();$n();qr=/^[0-9a-f]{64}$/;});function pn(e,n=e){throw new pe(e,n)}var pe,ln=V(()=>{h();pe=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var ci=V(()=>{h();});var di=V(()=>{h();Ue();ge();ln();ci();});function pi(e,n){return es.add(e),n!==void 0&&ns.set(e,n),e}var es,ns,un=V(()=>{h();es=new WeakSet,ns=new WeakMap;});function $e(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function rt(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function fi(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))fi(n);return Object.freeze(e)}function W(e){throw new re("LINEAGE_INVALID",e)}function cs(e){throw new re("LINEAGE_STALE",e)}function yi(e){if(!$e(e)||!rt(e,os,rs)||!$e(e.actions))return W("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!$e(n)||!rt(n,ss,as))return W("Lineage action definition shape is invalid");return e}function ds(e){if(!$e(e)||!rt(e,ts,is))return W("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!li.test(e.hash))return W("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!li.test(e.sourceHash)))return W("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return W("Lineage compatibility marker is invalid");let n=yi(e.definition);if(n.version!==e.version)return W("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return W("Lineage source hash does not match its definition");let t;try{t=ce(n),de({...n,hash:e.hash});}catch{return W("Lineage definition is invalid")}return t!==e.hash?W("Lineage definition hash does not match"):fi({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function ui(e){return e.stateProjection?.allow??[]}function ps(e,n){let t=[],i=new Set(ui(n));ui(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,d]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(d.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(d=>!a.has(d))&&t.push("S5_SUMMARY_PROJECTION");}return t}function ls(e,n){return Q(e)===Q(n)}function st(e,n){if(!Array.isArray(e)||e.length===0)return W("Definition lineage is missing");if(!$e(n)||typeof n.hash!="string")return W("Current definition is invalid");let t,i;try{let{hash:a,...d}=n;i=yi(d),t={...i,hash:a},de(t);}catch{return W("Current definition is invalid")}let o=e.map(ds),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return W("Lineage definition ids do not match");if(o.some((a,d)=>d>0&&a.version<=o[d-1].version))return W("Lineage generations are not in increasing version order");if(o.some((a,d)=>o.findIndex(c=>c.hash===a.hash)!==d))return W("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!ls(s.definition,i))return cs("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),d=new Set;for(let p of o)if(p.sourceHash===void 0)for(let y of Object.keys(p.definition.actions))a.has(y)&&d.add(y);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==d.size||c.some(p=>!d.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(p=>p.compat==="break"))continue;let c=ps(o[a].definition,t);if(c.length>0)throw new re("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(o),current:t})}var re,li,ts,is,os,rs,ss,as,at=V(()=>{h();Ue();ge();re=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},li=/^[0-9a-f]{64}$/,ts=["version","hash","definition"],is=["sourceHash","compat"],os=["id","version","actions"],rs=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],ss=["capabilities"],as=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var Ai,Ii,gi=V(()=>{h();Ai=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],Ii=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var mi=V(()=>{h();Ue();un();});function ct(e,n=0){try{let t=se(e,n);return t.type!==void 0&&t.type!=="object"&&pn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof pe)throw t;pn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function hi(e){if(e.length===0)return ct({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,ct(i.inputSchema));return ct(ys(n,t),fs)}function ys(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var We,fs,dt=V(()=>{h();di();Ue();ge();un();ln();at();gi();mi();We=8*1024*1024,new Set(Ai),new Set(Ii),fs=4;});function As(e){if(e===null||typeof e!="object"||!(Ei in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[Ei]}function _i(e,n){let t=As(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var Ei,Ti=V(()=>{h();Ei=Symbol("crewx.workspace-app-scan-cache.state");});function Y(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new P("NOT_FOUND"):n==="ELOOP"?new P("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new P("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new P("READ_DENIED"):new P("READ_DENIED")}function hs(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new P("READ_DENIED")}function pt(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new P("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new P("PATH_ESCAPED");return n}function In(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ce(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function yt(e,n){return e.dev===n.dev&&e.ino===n.ino}function At(e,n){return yt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function fn(e){hs(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw Y(i)}if(!t.isDirectory())throw new P("READ_DENIED");return {realRoot:n,identity:Ce(t)}}async function Di(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new P("READ_DENIED")}catch(r){throw r instanceof P?r:Y(r)}if(!In(n,o))throw new P("PATH_ESCAPED");return o}async function yn(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw Y(a)}if(!In(n,r)||t!==void 0&&!In(t,r))throw new P("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new P("READ_DENIED");if(!yt(i,o)||!yt(i,s)||i.dev!==s.dev)throw new P("PATH_ESCAPED")}async function ke(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new P("PATH_ESCAPED")}if(t!==n.realRoot||!At(n.identity,Ce(i)))throw new P("PATH_ESCAPED")}function Es(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var P,ft,ms,Pi,gn,Ni,gt=V(()=>{h();P=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},ft=constants.O_NOFOLLOW,ms=constants.O_NONBLOCK,Pi=constants.O_RDONLY|(ft??0)|(ms??0);gn=class{async getRootIdentity(n){let t=await fn(n);return await ke(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=pt(t),o=await fn(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(d){let c=Y(d);if(c.code==="NOT_FOUND")return [];throw c}if(!In(o.realRoot,s)||!a.isDirectory())throw new P("PATH_ESCAPED");try{let d=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await ke(n,o),d.map(Es)}catch(d){let c=Y(d);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=pt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let T=await d.stat({bigint:!0});c=Ce(T);}catch(T){throw Y(T)}if(c.size>BigInt(i))throw new P("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let p=await Di(n,r.realRoot,o);await yn(s,r.realRoot,p,c);let y=new Uint8Array(new ArrayBuffer(Number(c.size))),A=0;for(;A<y.byteLength;){let T;try{T=(await d.read(y,A,y.byteLength-A,A)).bytesRead;}catch(D){throw Y(D)}if(T<=0)throw new P("IDENTITY_CHANGED");A+=T;}let _;try{let T=await d.stat({bigint:!0});_=Ce(T);}catch(T){throw Y(T)}if(!At(c,_))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,p,_),await ke(n,r),new Uint8Array(y)}finally{await d.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ft===void 0)throw new P("UNSUPPORTED");let o=pt(t),r=await fn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await open(s,Pi);}catch(c){throw Y(c)}try{let c;try{let A=await d.stat({bigint:!0});c=Ce(A);}catch(A){throw Y(A)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await ke(n,r);let p=await Di(n,r.realRoot,o);await yn(s,r.realRoot,p,c);let y;try{let A=await d.stat({bigint:!0});y=Ce(A);}catch(A){throw Y(A)}if(!At(c,y))throw new P("IDENTITY_CHANGED");return await yn(s,r.realRoot,p,y),await ke(n,r),{...y,candidateRealPath:p??r.realRoot}}catch(c){throw c instanceof P?c:Y(c)}finally{await d.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Ni=new gn;});function Ye(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Mi(e){return typeof e=="string"&&ae.test(e)?e:void 0}function Ss(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Pe(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ms(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ls(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Os(e){return Ds.decode(e)}function Rs(e){return JSON.parse(Os(e))}function Li(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ws(e){if(e instanceof P)return Li(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Li(n)}}function le(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Us(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function ks(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Oi(e,n,t,i){let o=Us(e);if(!o)throw new P("READ_DENIED");return Ls(await o.call(e,n,t,i))}async function Et(e,n,t){let i=ks(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Ms).filter(r=>r!==null)}function Cs(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function xs(e){if(!Ye(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(Pe))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function vs(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function hn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Pe)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Pe))})}function mn(e,n){let t=Object.keys(e).sort(Pe),i=[...n].sort(Pe);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Ri(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function js(e){let n;try{n=Rs(e);}catch{return}if(!Ye(n)||!mn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>_t)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!Ye(s))return;let a=["packageDir","appId","definition","files"],d=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),p=[...d?["lineage"]:[],...c?["launcher"]:[]];if(!mn(s,[...a,...p])||c&&s.launcher!==false)return;let y=Ri(s.packageDir),A=Mi(s.appId);if(!y||y.length!==2||y[0]!=="apps"||!Ss(y[1])||!A||t.has(s.packageDir)||!Ye(s.definition)||!mn(s.definition,["id","version","hash"]))return;let _=Mi(s.definition.id),T=s.definition.version,D=s.definition.hash;if(!_||!Number.isSafeInteger(T)||T<1||typeof D!="string"||!ht.test(D)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Tt)return;let M=new Set,v=[];for(let C of s.files){if(!Ye(C)||!mn(C,["path","sha256"]))return;let U=Ri(C.path);if(!U||typeof C.sha256!="string"||!ht.test(C.sha256))return;let j=U.join("/"),E=`${s.packageDir}/${j}`;if(M.has(j)||i.has(E))return;M.add(j),i.add(E),v.push(Object.freeze({path:j,sha256:C.sha256}));}if(!M.has("ui-plugin.json")||!M.has("ui/index.html")||(o+=v.length,o>Ts))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:A,definition:Object.freeze({id:_,version:T,hash:D}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(v.sort((C,U)=>Pe(C.path,U.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function be(e){let n=ws(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function Vs(e,n,t,i,o){let r=[],s=async(a,d)=>{if(!le(i,o))throw new P("LIMIT_EXCEEDED");if(d>2)throw new P("LIMIT_EXCEEDED");let c=await Et(e,n,a);for(let p of c){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new P("PATH_ESCAPED");let y=`${a}/${p.name}`;if(p.kind==="file"){if(r.push(y.slice(t.length+1)),r.length>Tt)throw new P("LIMIT_EXCEEDED")}else if(p.kind==="directory")await s(y,d+1);else throw p.kind==="symlink"?new P("PATH_ESCAPED"):new P("READ_DENIED")}};return await s(t,0),r.sort(Pe)}function Fs(e){return e==="ui-plugin.json"?262144:e==="ui/index.html"?We:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?Ps:bs}async function wi(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Ns};let o=xs(e.reservedIds),r=[],s=(f,u,I)=>Cs(f,"bundled",u),a=(f=[],u=false,I)=>({...I===void 0?{}:{indexHash:I},packages:f,diagnostics:r,incomplete:u,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ht.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d;try{d=await Oi(n,e.root,"bundle-index.json",_s);}catch(f){return r.push(s(be(f),"bundle-index.json")),a()}let c=createHash("sha256").update(d).digest("hex");if(c!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p=js(d);if(p===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!vs(hn(p.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:"LIMIT_EXCEEDED"})),true,c);let y;try{y=await Et(n,e.root,"");}catch(f){return r.push(s(be(f),"bundle-index.json")),a(p.packages.map(u=>({indexEntry:u,failureCode:be(f)})),false,c)}if(!le(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:"LIMIT_EXCEEDED"})),true,c);let A=y.find(f=>f.name==="bundle-index.json"&&f.kind==="file"),_=y.find(f=>f.name==="apps"&&f.kind==="directory"),T=f=>p.packages.map(u=>({indexEntry:u,failureCode:f}));if(!A)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(T("BUNDLE_INTEGRITY"),false,c);let D=y.filter(f=>f.name!=="bundle-index.json"&&f.name!=="apps");if(D.length>0){let f=D.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(f,"bundle-index.json")),a(T("BUNDLE_INTEGRITY"),false,c)}if(y.some(f=>f.name==="apps"&&f.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(T("PATH_ESCAPED"),false,c);let M=[];if(_)try{M=await Et(n,e.root,"apps");}catch(f){return r.push(s(be(f),"apps")),a(T(be(f)),false,c)}if(!le(t,i)||M.length>_t)return r.push(s("LIMIT_EXCEEDED","apps")),a(T("LIMIT_EXCEEDED"),true,c);let v=new Map(p.packages.map(f=>[f.packageDir.slice(5),f])),C=M.filter(f=>!v.has(f.name));for(let f of C)r.push(s(f.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${f.name}`));if(C.length>0){let f=C.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(T(f),false,c)}let U=new Set,j=new Map,E=new Map;for(let f of p.packages){let u=j.get(f.appId)??[];u.push(f),j.set(f.appId,u);let I=`${f.definition.id}\0${String(f.definition.version)}`,g=E.get(I)??[];g.push(f),E.set(I,g);}for(let f of [...j.values(),...E.values()])if(f.length>1)for(let u of f)U.add(u);let m=[],N=d.byteLength,S=false;for(let f of p.packages){if(!le(t,i)){S=true,m.push({indexEntry:f,failureCode:"LIMIT_EXCEEDED"});continue}let u;try{let x=f.lineage[f.lineage.length-1];if(!x)throw new re("LINEAGE_INVALID","Definition lineage is missing");if(x.definition.id!==f.definition.id||x.version!==f.definition.version||x.hash!==f.definition.hash)throw new re("LINEAGE_STALE","Last lineage generation does not match bundle identity");u=st(f.lineage,{...x.definition,hash:x.hash}).entries;}catch(x){let te=x instanceof re?x.code:"LINEAGE_INVALID";r.push(s(te,f.packageDir)),m.push({indexEntry:f,failureCode:te});continue}let I=M.find(x=>x.name===f.packageDir.slice(5));if(!_||!I){m.push({indexEntry:f,failureCode:"BUNDLE_INTEGRITY"});continue}if(I.kind!=="directory"){m.push({indexEntry:f,failureCode:I.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let g;try{let x=await Vs(n,e.root,f.packageDir,t,i);if(!le(t,i)){S=!0,m.push({indexEntry:f,failureCode:"LIMIT_EXCEEDED"});continue}let te=f.files.map(ie=>ie.path);if(x.length!==te.length||x.some((ie,he)=>ie!==te[he])){m.push({indexEntry:f,failureCode:"BUNDLE_INTEGRITY"});continue}g=new Map;let z;for(let ie of f.files){if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(N>=mt){z="LIMIT_EXCEEDED";break}let he;try{he=await Oi(n,e.root,`${f.packageDir}/${ie.path}`,Fs(ie.path));}catch(xo){z=be(xo);break}if(!le(t,i)){z="LIMIT_EXCEEDED",S=!0;break}if(N+he.byteLength>mt){N=mt,z="LIMIT_EXCEEDED";break}if(N+=he.byteLength,createHash("sha256").update(he).digest("hex")!==ie.sha256){z="BUNDLE_INTEGRITY";break}g.set(ie.path,he);}if(z!==void 0){m.push({indexEntry:f,failureCode:z});continue}}catch(x){le(t,i)||(S=true),m.push({indexEntry:f,failureCode:be(x)});continue}m.push({indexEntry:f,lineage:u,files:g,...U.has(f)?{failureCode:"DUPLICATE_ID"}:{}});}return a(m,S,c)}var _s,_t,Tt,Ts,bs,Ps,mt,ht,Ds,Ns,bt=V(()=>{h();at();Le();dt();gt();_s=256*1024,_t=64,Tt=128,Ts=_t*Tt,bs=2*1024*1024,Ps=8*1024*1024,mt=32*1024*1024,ht=/^[0-9a-f]{64}$/,Ds=new TextDecoder("utf-8",{fatal:true}),Ns=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Hs(e){if(typeof e!="string"||!ae.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Pt}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Pt}${n}_read`,action:`${Pt}${n}_action`}}function qe(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function ki(e){return typeof e=="string"&&ae.test(e)?e:void 0}function Gs(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function $s(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ze(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Gi(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ws(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function $i(e){return zs.decode(e)}function Wi(e){return JSON.parse($i(e))}function Js(e){if(!qe(e))return;let n=ki(e.pluginId);if(!n)return;let t=ki(e.definitionId),i=e.version,o=t&&Number.isSafeInteger(i)&&i>=1?`${t}\0${String(i)}`:void 0;return {pluginId:n,...o===void 0?{}:{definitionKey:o}}}function Ks(e){let n=Wi(e);return {value:n,identity:Js(n)}}function _n(e,n,t,i){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t};return Object.freeze(o)}function Ci(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function q(e){if(e instanceof P)return Ci(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ci(n)}}function ve(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function xi(e){switch(e.code){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("UiPluginValidationError",e.code)}}function Ji(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Dt(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Ji("McpAppContractError",e)}}function ue(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Xs(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Ys(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(qe(o)){let r=o.bin,s=typeof r=="string"?r:qe(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let d=qs(a);if(d&&n.has(d))return d}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function qs(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Zs(){return globalThis.performance?.now()??Date.now()}function xe(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))xe(n);return Object.freeze(e)}function vi(e){return Object.freeze(Array.from(e))}async function Tn(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new P("NOT_FOUND");if(a.byteLength>i)throw new P("LIMIT_EXCEEDED");return new Uint8Array(a)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return Bi(e,n.root,o,i);try{let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let d=await Bi(e,n.root,o,i),c=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=c.candidateRealPath,Yi(a,c)&&c.size===BigInt(d.byteLength)&&!qi(c,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:c}):r.cacheable=!1,d}catch(a){throw t==="ui-plugin.json"&&q(a)==="NOT_FOUND"&&r.directoryListings.some(c=>c.relativePath===n.relativePath&&!Xi(c.key,"ui-plugin.json"))||(r.cacheable=false),a}}function Ki(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Qs(e,n,t,i,o,r,s,a){let d=e.fingerprintVerifiedFile,c=Ki(t,i),p=o.candidates.get(c),y=i.relativePath,A;try{A=await Fi(e,n,y);}catch(E){if(q(E)!=="NOT_FOUND")throw E}let _=A===void 0?void 0:{relativePath:y,key:A};if(_!==void 0&&(i.source==="apps"||i.source==="skills")&&!Xi(_.key,"ui-plugin.json"))return ue(s,a)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===_.relativePath&&p.directoryListings[0]?.key===_.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof d=="function"?{memo:p}:typeof d!="function"?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([_]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let T=await Promise.all(ji.map(async E=>{if(E==="")return _;let m=`${i.relativePath}${E}`;try{let N=await Fi(e,n,m);return N===void 0?void 0:{relativePath:m,key:N}}catch(N){if(q(N)==="NOT_FOUND")return;throw N}}));if(!ue(s,a))return {timeLimitReached:true};let D=typeof d=="function"&&T.every(E=>E!==void 0),M=T.filter(E=>E!==void 0),v=new Map,C=p!==void 0&&D,U;if(p!==void 0&&typeof d=="function"){let E=await Promise.all(p.files.map(async m=>{if(!ue(s,a))return {kind:"time",file:m};try{let N=await d.call(e,n,m.relativePath,m.byteLimit);return {kind:"fingerprint",file:m,current:N}}catch(N){return q(N)==="NOT_FOUND"?{kind:"missing",file:m}:{kind:"error",file:m,error:N}}}));if(E.some(m=>m.kind==="time"))return {timeLimitReached:true};for(let m of E){if(m.kind==="error")throw m.error;if(m.kind==="missing"){C=false;continue}if(m.kind!=="fingerprint")continue;let{file:N,current:S}=m;v.set(N.relativePath,S),U??=S.candidateRealPath,(S.candidateRealPath!==p.candidateRealPath||!Yi(S,N.fingerprint)||qi(S,r))&&(C=false);}}let j=p!==void 0&&p.directoryListings.length===M.length&&p.directoryListings.every((E,m)=>E.relativePath===M[m]?.relativePath&&E.key===M[m]?.key);return p!==void 0&&D&&j&&C&&U===p.candidateRealPath?{memo:p}:!D||M.length!==ji.length?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(M),priorFingerprints:v,files:new Map,...U===void 0?{}:{candidateRealPath:U},cacheable:true}}}function Xi(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return true}}async function Fi(e,n,t){let i=Zi(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(Gi);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>Ze(s.name,a.name)||Ze(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Yi(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function qi(e,n){let t=e.mtimeNs-n;return t>=-Vi&&t<=Vi}function Nt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function ea(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(Q(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function na(e,n){let t={...e.definition,sourceHash:n},i;try{i=ce(t);}catch(r){throw r instanceof L&&r.code==="INPUT_INVALID"?new K("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{de(o);}catch{throw new K("MANIFEST_INVALID","normalized definition is invalid")}return o}function ta(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function ia(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Zi(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Bi(e,n,t,i){let o=ia(e);if(!o)throw new P("READ_DENIED");return Ws(await o.call(e,n,t,i))}async function oa(e,n,t){let i=Zi(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Gi).filter(r=>r!==null)}function ra(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Hi(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Hi(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Hi(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function fe(e,n){e.diagnostic||(e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId));}function sa(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&fe(s,"RESERVED_ID");if(o.length>1)for(let s of o)fe(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)fe(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))fe(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)fe(o,"DUPLICATE_ID");}function aa(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let d of ra(n)){for(let c of d.appIds??[])typeof c=="string"&&i.add(c);for(let c of d.definitionIds??[])typeof c=="string"&&o.add(c);for(let c of d.toolNames??[])typeof c=="string"&&r.add(c);}for(let d of e){let c=d.candidate;if(!c)continue;if(i.has(c.pluginId)||o.has(c.definitionId)){fe(d,"RESERVED_ID");continue}if(d.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){fe(d,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(y=>y!==void 0).some(y=>r.has(y))&&fe(d,"DUPLICATE_ID");}}function ca(e){return [...e].sort((n,t)=>{let i=Ui.indexOf(n.source)-Ui.indexOf(t.source);return i!==0?i:Ze(n.relativePath,t.relativePath)})}function w(e,n){e.diagnostic=_n(n,e.source,e.relativePath,e.identity?.pluginId);}async function zi(e,n,t){if(t.byteLength>262144){w(n,"LIMIT_EXCEEDED");return}let i;try{i=Ks(t);}catch{w(n,"MANIFEST_INVALID");return}if(n.bundleIdentity===void 0)n.identity=i.identity;else if(i.identity?.pluginId!==n.bundleIdentity.appId||i.identity.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){w(n,"BUNDLE_INTEGRITY");return}if(qe(i.value)&&i.value.builtinOnly===true){w(n,"RESERVED_ID");return}let o;try{let g=Te(i.value,{mode:"local"});if(g.manifestVersion!==2)throw new K("MANIFEST_INVALID","workspace App requires v2");o=g;}catch(g){if(g instanceof K){w(n,xi(g));return}if(g instanceof pe){w(n,Dt(g.code));return}if(qe(g)&&typeof g.code=="string"){w(n,Dt(g.code));return}throw g}let r={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=r),o.actions.length>0)try{hi(o.actions.map(g=>({actionId:g.actionId,inputSchema:g.inputSchema})));}catch(g){if(g instanceof pe){w(n,Dt(g.code));return}throw g}let s;try{s=await Tn(e,n,"ui/index.html",We);}catch(g){w(n,ve(q(g),"entry"));return}if(s.byteLength>We){w(n,"LIMIT_EXCEEDED");return}let a;try{a=$i(s);}catch{w(n,"ENTRY_INVALID");return}if(s.byteLength===0||a.length===0){w(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==d){w(n,"ENTRY_INVALID");return}let c={},p,y;if(o.initialState!==void 0){try{p=await Tn(e,n,"ui/state.json",65536);}catch(g){w(n,ve(q(g),"initial"));return}if(p.byteLength>65536){w(n,"LIMIT_EXCEEDED");return}try{let g=Wi(p),x=o.dataPaths??[],te=et(g,x);c=se(te,0,x),Se(c);}catch{w(n,"INITIAL_STATE_INVALID");return}if(y=createHash("sha256").update(p).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==y){w(n,"INITIAL_STATE_INVALID");return}}let A={...o,entryHash:d,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:y}}},_=nt(A),T=ea(A,s,p??new Uint8Array),D;try{D=na(_,T);}catch(g){if(g instanceof K){w(n,xi(g));return}throw g}let M;if(n.bundleLineage!==void 0){let g=n.bundleLineage[n.bundleLineage.length-1];if(!g){w(n,"LINEAGE_INVALID");return}let{legacy:x,...te}=g.definition,{hash:z,...ie}=D;if(Q(te)!==Q(ie)){w(n,"LINEAGE_STALE");return}if(x!==void 0&&(D={...D,legacy:x}),x!==void 0)try{D={...D,hash:ce(D)},de(D);}catch{w(n,"LINEAGE_INVALID");return}M=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){w(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==D.id||n.bundleIdentity.version!==D.version||n.bundleIdentity.definitionHash!==D.hash)){w(n,"LINEAGE_STALE");return}let v=Hs(o.pluginId),C=o.actions.length===0?{read:v.read}:v,U=xe(_),j=xe(A),E=xe(D),m=xe({..._.handlers}),N=vi(s),S=p===void 0?void 0:vi(p),f=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:N}),...S===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:y,bytes:S})}}),u={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,relativePath:n.relativePath,manifest:j,normalized:U,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:E,handlers:m,resources:f,html:a,entryBytes:N,entryHash:d,initialState:xe(c),...S===void 0?{}:{initialStateBytes:S},...y===void 0?{}:{initialStateHash:y},sourceHash:T,toolNames:Object.freeze(C)},I=n.provenance===void 0?{...u,source:n.source}:{...u,provenance:n.provenance,lineage:M??[]};n.candidate=Object.freeze(I),ta(o)&&w(n,"EXEC_DENIED");}async function da(e,n){try{return await Tn(e,n,"ui-plugin.json",262144)}catch(t){if(q(t)==="NOT_FOUND")return;w(n,ve(q(t),"manifest"));return}}function pa(e,n,t,i=Bs,o=false){let r=ca(e);sa(r);let s=Object.freeze(r.filter(p=>p.candidate!==void 0&&p.diagnostic===void 0).map(p=>p.candidate)),a=Object.freeze(r.filter(p=>p.diagnostic!==void 0).map(p=>p.diagnostic)),d=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(r.filter(p=>p.source==="bundled"&&p.diagnostic===void 0&&t!==void 0&&p.candidate?.provenance?.indexHash===t).map(p=>p.candidate)),diagnostics:Object.freeze(a.filter(p=>p.source==="bundled").map(p=>Object.freeze({...p}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...d===void 0?{}:{productBundleSnapshotMetadata:d}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function la(e){if(e===null||typeof e!="object"&&typeof e!="function")return false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function ua(e,n){if(la(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Ni,options:t}}async function Qi(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=ua(n,t),r=o.clock??Zs,s=r(),a=await wi(o.productBundle,i,s,r),d=r(),c=BigInt(Date.now())*1000000n,p=[],y=0,A,_=false,T,D;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{D=await i.getRootIdentity(e),T=_i(o.scanCache,D),T.scanStartedAtNs=c;}catch(E){if(q(E)!=="NOT_FOUND")throw E}let M=T!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,v=new Set,C=true;p.push(...a.diagnostics.map(E=>({source:E.source,root:o.productBundle?.root??e,name:"",relativePath:E.relativePath,diagnostic:E})));let U=a.reservedIds;a.incomplete&&(A="time_limit");for(let E of a.packages){if(!ue(d,r)){_=true,A="time_limit";break}let m=E.indexEntry,N=m.packageDir,S=E.files===void 0?void 0:Ys(N,E.files),f=a.indexHash===void 0?void 0:pi(Object.freeze({kind:"bundled",launcher:m.launcher!==false,indexHash:a.indexHash,packageDir:N,appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash,files:m.files}),S),u={source:"bundled",root:o.productBundle?.root??e,name:N.slice(5),relativePath:N,...f===void 0?{}:{provenance:f},...E.files===void 0?{}:{pinnedFiles:E.files},...E.lineage===void 0?{}:{bundleLineage:E.lineage},bundleIdentity:{appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash},identity:Xs(m)};if(p.push(u),y+=1,E.failureCode!==void 0){w(u,E.failureCode);continue}let I=E.files?.get("ui-plugin.json");if(I===void 0){w(u,"BUNDLE_INTEGRITY");continue}if(await zi(i,u,I),!ue(d,r)){_=true,A="time_limit";break}}let j=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let E of j){let{source:m,directory:N}=E,S;try{S=await oa(i,e,N);}catch(u){if(q(u)==="NOT_FOUND")continue;M=false,C=false,p.push({source:m,root:e,name:"",relativePath:m,diagnostic:_n(ve(q(u),"manifest"),m,m)});continue}let f=S.filter(u=>u.kind==="directory"||u.kind==="symlink").filter(u=>$s(u.name)).map(u=>({source:m,root:e,name:u.name,relativePath:Gs(m,u.name)})).sort((u,I)=>Ze(u.relativePath,I.relativePath));for(let u of f){let I={...u};if(p.push(I),D!==void 0?v.add(Ki(D,I)):M=false,!ue(d,r)){_=true,A="time_limit";break e}let g;if(T!==void 0&&D!==void 0){try{let z=await Qs(i,e,D,I,T,c,d,r);if(z.timeLimitReached){_=!0,A="time_limit";break e}I.scanContext=z.context,g=z.memo;}catch(z){M=false,w(I,ve(q(z),"manifest"));continue}g===void 0&&(M=false);}if(g!==void 0){if(I.candidate=g.candidate,I.diagnostic=g.diagnostic,I.identity=g.identity,m==="skills"&&g.candidate===void 0&&g.diagnostic===void 0)continue;if(y>=64){w(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){w(I,"LIMIT_EXCEEDED");continue}if(y+=1,!ue(d,r)){_=true,A="time_limit";break e}continue}let x;if(m==="skills"&&(x=await da(i,I),x===void 0)){I.diagnostic===void 0&&Nt(I);continue}if(y>=64){w(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){w(I,"LIMIT_EXCEEDED");continue}if(!ue(d,r)){_=true,A="time_limit";break e}if(y+=1,x===void 0)try{x=await Tn(i,I,"ui-plugin.json",262144);}catch(z){w(I,ve(q(z),"manifest")),Nt(I);continue}if(await zi(i,I,x),Nt(I),!ue(d,r)){_=true,A="time_limit";break e}}}if(T!==void 0&&D!==void 0){let E=[...v].sort(Ze),m=T.lastCandidateKeys,N=m!==void 0&&m.length===E.length&&m.every((f,u)=>f===E[u]);if(M=M&&N,C&&!_&&A===void 0)for(let f of T.candidates.keys())try{JSON.parse(f)[0]===D.realPath&&!v.has(f)&&T.candidates.delete(f);}catch{T.candidates.delete(f);}let S=[...T.candidates.keys()].filter(f=>{try{return JSON.parse(f)[0]===D.realPath}catch{return false}});M=M&&S.length===v.size&&S.every(f=>v.has(f))&&!_&&A===void 0,T.lastCandidateScanUnchanged=M,C&&!_&&A===void 0&&(T.lastCandidateKeys=Object.freeze(E));}return _&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:_n("DISCOVERY_TIME_LIMIT","apps","apps")}),aa(p,o,U),pa(p,A,a.indexHash,U,o.productBundle!==void 0)}var Bs,Pt,Ui,zs,ji,Vi,eo=V(()=>{h();Ue();en();ge();tt();Le();dt();ln();Ti();gt();un();bt();bt();Bs=hn([]),Pt="crewx_local_app_";Ui=["bundled","apps","skills"],zs=new TextDecoder("utf-8",{fatal:true});ji=["","/ui"],Vi=2000000000n;});h();tt();h();vn();h();var ei="SKILL.md",Jr=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function ni(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Kr(e){return e.isDirectory()||e.isSymbolicLink()}function si(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return false}}function it(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Jr);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!ni(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=ni(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Xr(e){return [join(e,ei),join(e,"skill",ei)]}function ti(e,n){if(!si(e))return null;for(let t of Xr(e)){if(!existsSync(t))continue;let o=it(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function ii(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Kr)}catch{return []}}function oi(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function ai(e){let n=[],t=new Set;for(let i of e)if(si(i))for(let o of ii(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of ii(r))oi(ti(join(r,s.name),s.name),t,n);continue}oi(ti(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}eo();var ya=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Pn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Aa(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Aa(e,n){let t=new TextEncoder().encode(Dn(e)),i=Ia(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function Ia(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Dn(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function bn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function io(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:Dn(t)}function ga(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function oo(e){return Object.freeze({packageRoot:e})}function ma(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function ro(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function ha(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=ma(t),s=Pn(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",d=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:d,...ro(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:oo(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:o,summary:Object.freeze(c)}}function Ea(e){let n=_a(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...ro(["skill"]),skillName:e.skill.name,localDefinitionRef:oo(e.packageRoot),definitionHash:Pn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function _a(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function G(e,n,t,i){return Object.freeze({code:e,source:n,relativePath:Ta(t),...i===void 0?{}:{appId:i}})}function Ta(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function so(e){return G(e.code,e.source,e.relativePath,e.pluginId)}function ba(e,n){let t=io(e,n.dir);if(!t)return {diagnostic:G("PATH_ESCAPED","node_modules","node_modules")};let i=ga(t);if(!i)return {diagnostic:G("PATH_ESCAPED","node_modules",t)};let o=it(n.skillMdPath);if(!o.readable)return {diagnostic:G("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:G("SKILL_INVALID",i,t)};let r=Pa(n.dir,n.skillMdPath);if(!r)return {diagnostic:G("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Pn({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:G("SKILL_READ_FAILED",i,t)}}}function Pa(e,n){let t=relative(e,n).split(sep).join("/");try{return Dn(t)}catch{return null}}function Da(e){if(!ya.test(e.appId))return {diagnostic:G("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??me,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Na(e){return e.builtinCatalog}function Sa(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Dn(n)}catch{return null}}function Ma(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function La(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Sa(s);if(!a){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let d=o.get(a);if(d&&JSON.stringify(d)!==JSON.stringify(s)){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let d=r.get(s);if(!d){t.push(G("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Ma(a);if(!c){t.push(G("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==d.appId||a.definitionHash!==void 0&&a.definitionHash!==d.summary.definitionHash){t.push(G("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let p={...d.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},y=e.indexOf(d);y>=0&&(e[y]={...d,summary:Object.freeze(p)});}}function Oa(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(d=>d.source!==r))i.add(a),n.push(G("RESERVED_ID",a.source,Mt(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(G("DUPLICATE_ID",a.source,Mt(a),a.appId));continue}for(let s of o)i.add(s),n.push(G("DUPLICATE_ID",s.source,Mt(s),s.appId));}return e.filter(o=>!i.has(o))}function Mt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Ra(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(so)}function wa(e){return e.filesystem}function Ua(e,n){let t=wa(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function ao(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Na(n),i=await Qi(e,Ua(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],d=[],c=new Set;for(let u of r)for(let I of ai([u])){let g=io(e,I.dir);(g===null||!c.has(g))&&(d.push(I),g!==null&&c.add(g));}for(let u of d){let I=ba(e,u);"diagnostic"in I?s.push(I.diagnostic):a.push(I);}let p=new Map,y=n.registeredProductBundle?.indexHash,A=(n.registeredProductBundle?.candidates??[]).filter(u=>y!==void 0&&u.provenance?.indexHash===y),_=[...i.apps??i.candidates??[],...A],T=new Set(A),D=new Set(y===void 0?[]:(t?.listMcpApps()??[]).filter(u=>u.provenance?.indexHash===y).map(u=>u.appId));for(let u of _){if(T.has(u)&&u.provenance?.indexHash===y&&D.has(u.appId))continue;let I=u.provenance===void 0?`workspace\0${u.relativePath}`:`bundled\0${u.provenance.indexHash}\0${u.provenance.packageDir}`;p.set(I,{candidate:u,packageRoot:u.relativePath});}let M=new Map(a.map(u=>[u.packageRoot,u])),v=[];for(let u of p.values()){let I=u.candidate.provenance===void 0?M.get(u.packageRoot):void 0,g=ha(u,I);v.push({...g.packageRoot===void 0?{}:{packageRoot:g.packageRoot},source:g.source,appId:g.appId,summary:g.summary});}let C=new Set([...p.values()].filter(u=>u.candidate.provenance===void 0).map(u=>u.packageRoot)),U=o===void 0?new Set:new Set(i.diagnostics.filter(u=>u.code==="RESERVED_ID"&&u.source!=="bundled").map(u=>u.relativePath)),j=new Set(o?.reservedAppIds??[]);for(let u of a){let I=Ea(u);if(!(C.has(u.packageRoot)||U.has(u.packageRoot))){if(j.has(I.appId)){s.push(G("RESERVED_ID",u.source,u.packageRoot,I.appId));continue}v.push({packageRoot:I.packageRoot,source:I.source,appId:I.appId,summary:I.summary});}}let E=[...Ra(i.diagnostics,new Set(a.map(u=>u.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(u=>u.source==="bundled").map(so)??[]],m=[];if(t)for(let u of t.listMcpApps()){let I=Da(u);"diagnostic"in I?E.push(I.diagnostic):m.push(I);}let N=Oa([...v,...m],E);La(N,n,E);let S=N.map(u=>u.summary).sort((u,I)=>bn(u.appId,I.appId)),f=[...E].sort((u,I)=>bn(u.relativePath,I.relativePath)||bn(u.code,I.code)||bn(u.appId??"",I.appId??""));return Object.freeze({items:Object.freeze(S),diagnostics:Object.freeze(f)})}h();h();h();function ka(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function je(e,n){try{return ka(n).test(e)}catch{return false}}function Nn(e,...n){let t=e.split("/");if(t.length<n.length)return false;let i=t.length-n.length;return n.every((o,r)=>je(t[i+r],o))}function Ca(e,n){return e.split("/").some(t=>je(t,n))}var co=[{label:".env*",test:e=>je(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>je(e,"*.key")},{label:"*.pem",test:e=>je(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Nn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Nn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Nn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Nn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>Ca(n,".crewx")}];function Sn(e,n,t){for(let i of co)if(i.test(e,n,t))return i.label;return null}function Rt(e){let n=[],t=[];function i(o,r,s){let a;try{a=$.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((d,c)=>d.name.localeCompare(c.name));for(let d of a){let c=r?`${r}/${d.name}`:d.name,p=J.join(o,d.name);if(d.isSymbolicLink()){let y;try{y=$.statSync(p);}catch{t.push({path:c,rule:"symlink"});continue}if(y.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let A=s??Sn(d.name,c,false);A?t.push({path:c,rule:A}):t.push({path:c,rule:"symlink"});continue}if(d.isDirectory()){let y=s??Sn(d.name,c,true);i(p,c,y);continue}if(d.isFile()){let y=s??Sn(d.name,c,false);y?t.push({path:c,rule:y}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}h();var xa=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function va(e){return e.includes(0)}function wt(e,n,t){let i=[];for(let o of n){let r=J.join(e,o),s;try{let d=t?.get(o);s=d===void 0?$.readFileSync(r):Buffer.from(d);}catch{continue}if(va(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((d,c)=>{for(let{rule:p,regex:y}of xa)y.test(d)&&i.push({path:o,line:c+1,rule:p});});}return i}h();h();var ye=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new ye(e,n)}var fo=/^[a-z0-9-]+$/,ja=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Va=/^[A-Za-z_][A-Za-z0-9_]*$/;function Fa(e){let n=J.join(e,"crewx.yaml");if(!$.existsSync(n))return {};let t;try{t=yo.load($.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Ba(e){return Ut.createHash("sha256").update(e).digest("hex")}function Ao(e){let n;try{n=$.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${J.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return Ut.createHash("sha256").update(new Uint8Array($.readFileSync(e))).digest("hex")}function Ha(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Io(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||J.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function za(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function go(e){if(!ja.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function mo(e,n,t={}){let i=Fa(e),o=i.name??J.basename(e);if(!fo.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${fo} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");go(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let p of s){if(typeof p!="string"||!Va.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);a.push(p);}let d=n.map(p=>(Io(p),{path:p,sha256:Ao(J.join(e,p))})).sort((p,y)=>p.path<y.path?-1:p.path>y.path?1:0),c={name:o,version:r,type:"template",description:i.description??"",files:d,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function Ga(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function ho(e,n){if(za(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(go(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");for(let s of ["ui-plugin.json","ui/index.html"])if(!n.includedFiles.includes(`${i}${s}`))throw b("APP_UI_MANIFEST_INVALID",`screen App is missing ${s}`)}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Io(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?Ao(J.join(e,s)):Ba(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>Ha(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Ga(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}h();function Eo(e){return Ut.createHash("sha256").update(e).digest("hex")}function Do(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=J.resolve(e),i=J.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function _o(e,n){let t=Do(e,n),i;try{i=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array($.readFileSync(t))}async function No(e,n,t={}){let i=J.join(e,".crewx","publish");$.mkdirSync(i,{recursive:true});let o=J.join(i,`${n.name}-${n.version}.tgz`),r=J.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=$.mkdtempSync(J.join(To.tmpdir(),"crewx-publish-"));try{let a=new Set,d=[];for(let c of n.files){if(a.has(c.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let p=t.generatedFiles?.get(c.path);if(c.generated===!0&&p===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let _=_o(e,c.path);if(t.sourceFileHashes.get(c.path)!==Eo(_))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let y=p??_o(e,c.path);if(Eo(y)!==c.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let A=Do(s,c.path);$.mkdirSync(J.dirname(A),{recursive:!0}),$.writeFileSync(A,new Uint8Array(y)),d.push(c.path);}$.writeFileSync(J.join(s,"manifest.json"),JSON.stringify(n,null,2)),await Po.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...d]),$.renameSync(r,o);}finally{try{$.rmSync(r,{force:!0});}catch{}$.rmSync(s,{recursive:true,force:true});}return o}h();h();var Ve="/api/v1";var Ja=201,Ka=200,Xa=409,kt=401,So={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Ya(){return process.env.WI013_FAKE_UPLOAD==="1"}function qa(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Za(e){return e.replace(/\/+$/,"")}async function Qe(e){try{return await e.json()}catch{return null}}function Mo(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Qa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function ec(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Lo(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(So,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(So[s],a)}}async function nc(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Za(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${Ve}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let d=await Qe(a),c=Qa(d),p=ec(d),y=r&&p!==void 0?p:i,A;if(a.status===Ja)A="created";else if(r&&a.status===Ka){if(c===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");A="existing";}else if(a.status===Xa){if(r)throw Lo(d,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);A="existing";}else throw a.status===kt?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let _="not-needed",T=null;if(A==="existing"&&!r){let N;try{N=await fetch(`${n}${Ve}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let S=await Qe(N);if(N.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${N.status}`);let u=Mo(S,"publisher items",N.status)?.items;if(!Array.isArray(u))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${N.status}`);let I=u.find(g=>!g||typeof g!="object"?false:g.slug===i);if(!I||typeof I.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${N.status}`);if(T=I.version,T!==e.manifest.version){let g;try{g=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!g.ok)throw await Qe(g),g.status===kt?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${g.status})`):g.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${g.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${g.status}`);_="applied";}}let D=$.readFileSync(e.tgzPath),M=Ya()?qa(D):D,v=new FormData;v.set("archive",new Blob([new Uint8Array(M)],{type:"application/gzip"}),`${y}-${e.manifest.version}.tgz`);let C=r&&c!==void 0?c:i,U;try{U=await fetch(`${n}${Ve}/publisher/items/${encodeURIComponent(C)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:v});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(U.status===kt)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!U.ok){let N=await Qe(U);if(r){let S=Lo(N,y);if(S)throw S}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${U.status}`)}let j=await Qe(U),E=Mo(j,"upload",U.status),m=typeof E.contentId=="string"&&E.contentId.length>0?E.contentId:c;if(r&&m===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:y,version:e.manifest.version,...m===void 0?{}:{contentId:m},artifactChecksum:E.artifactChecksum,artifactSizeBytes:E.artifactSizeBytes,submitOutcome:A,versionUpdate:_,serverVersionBefore:T}}var tc=1e4,ic=100*1024*1024;function Ct(e){return Ut.createHash("sha256").update(e).digest("hex")}function oc(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ln(e,n){if(!n||n.includes("\\")||n.includes("\0")||J.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=J.resolve(e,...n.split("/")),i=J.resolve(e);if(t!==i&&!t.startsWith(`${i}${J.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=$.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array($.readFileSync(t))}function On(e,n){return e===n||e.startsWith(`${n}/`)}function rc(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Ro(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new ye("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function Uo(e,n,t,i){let o=Ro(t.maxFileCount??t.maxFiles,tc,"max file count"),r=Ro(t.maxTotalBytes??t.maxBytes,ic,"max total bytes");if(n.length>o)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let d=i?.get(a);if(d!==void 0?s+=d.byteLength:s+=Ln(e,a).byteLength,s>r)throw new ye("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function sc(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function ac(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function cc(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function dc(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function pc(e,n){let t=[];for(let i of e.excluded)t.push(On(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)On(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(rc)}function lc(e,n,t,i){let o=`${t}/ui-plugin.json`;if(!i.includes(o))throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package ui-plugin.json");let r=Ln(e,o),s=Ct(r),a;try{a=JSON.parse(Buffer.from(r).toString("utf8"));}catch{throw b("APP_UI_MANIFEST_INVALID","ui-plugin.json is not valid JSON")}let d;try{let A=Te(a,{mode:"local"});if(A.manifestVersion!==2)throw new Error("screen App requires manifestVersion 2");d=A;}catch(A){throw A instanceof K?b("APP_UI_MANIFEST_INVALID",A.code):b("APP_UI_MANIFEST_INVALID")}if(d.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT","ui-plugin.json pluginId no longer matches the selected App");let c=`${t}/ui/index.html`;if(!i.includes(c))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let p=Ct(Ln(e,c)),y=JSON.parse(JSON.stringify(a));if(y.entryHash=p,Object.prototype.hasOwnProperty.call(y,"initialState")){let A=y.initialState;if(!oc(A)||A.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let _=`${t}/ui/state.json`;if(!i.includes(_))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let T=Ln(e,_);y.initialState={...A,hash:Ct(T)};}try{let A=Te(y,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(xn(A),"utf8")),sourceHash:s}}catch(A){throw A instanceof K?b("APP_UI_MANIFEST_INVALID",A.code):b("APP_UI_MANIFEST_INVALID")}}async function uc(e,n){let{included:t,excluded:i}=Rt(e);Uo(e,t,n);let o=mo(e,t,{version:n.version}),r=wt(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function fc(e,n){ac(n);let t=await ao(e),i=cc(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=dc(i),r=Rt(e);if(r.excluded.some(_=>On(_.path,o)&&(_.rule==="symlink"||_.rule==="symlink-dir")))throw b("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(_=>On(_,o)),a=pc(r,o),d=new Map,c=new Map;if(i.capabilities.includes("screen")){let _=lc(e,i,o,s);d.set(`${o}/ui-plugin.json`,_.bytes),c.set(`${o}/ui-plugin.json`,_.sourceHash);}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");Uo(e,s,n,d);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:d},y=ho(e,p),A=wt(e,s,d);return {plan:{manifest:y,included:s,excluded:a,secretFindings:A},archiveOptions:{generatedFiles:d,sourceFileHashes:c}}}async function ko(e,n){let t=J.resolve(e);if(sc(n))return fc(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return uc(t,n)}async function Cl(e,n={}){return (await ko(e,n)).plan}function yc(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new ye("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function Co(e,n={}){let t=J.resolve(e),i=await ko(t,n);i.plan.secretFindings.length>0&&yc(i.plan.secretFindings);let o=await No(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function xl(e,n={}){return Co(e,n)}async function vl(e,n){let t=await Co(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
2
+ export{ic as DEFAULT_PUBLISH_MAX_BYTES,tc as DEFAULT_PUBLISH_MAX_FILES,co as EXCLUDE_RULES,Ve as MARKETPLACE_API_PREFIX,ye as PublishError,vl as packApp,Co as packPublish,xl as packTemplate,Cl as planPublish,nc as uploadToMarketplace};