@crewx/sdk 0.9.0-rc.136 → 0.9.0-rc.137

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (29) hide show
  1. package/dist/app/app.d.ts +93 -0
  2. package/dist/app/entry.d.ts +7 -0
  3. package/dist/app/index.d.ts +6 -0
  4. package/dist/app/index.js +9 -0
  5. package/dist/app/runtime.d.ts +14 -0
  6. package/dist/esm/app/index.js +9 -0
  7. package/dist/esm/index.js +288 -281
  8. package/dist/esm/plugins/index.js +28 -28
  9. package/dist/esm/publish/index.js +2 -2
  10. package/dist/esm/skills/index.js +2 -2
  11. package/dist/facade/Crewx.d.ts +2 -0
  12. package/dist/index.browser.js +4 -4
  13. package/dist/index.d.ts +5 -4
  14. package/dist/index.js +289 -282
  15. package/dist/mcp-app/apps-context.d.ts +15 -1
  16. package/dist/mcp-app/discovery.d.ts +8 -2
  17. package/dist/mcp-app/index.d.ts +2 -2
  18. package/dist/mcp-app/types.d.ts +14 -1
  19. package/dist/plugins/index.js +27 -27
  20. package/dist/prompt/tag-names.d.ts +2 -0
  21. package/dist/publish/index.js +2 -2
  22. package/dist/skills/index.js +2 -2
  23. package/dist/types/index.d.ts +2 -0
  24. package/dist/ui-plugin/app-manifest.d.ts +59 -0
  25. package/dist/ui-plugin/index.d.ts +2 -0
  26. package/dist/ui-plugin/validator.d.ts +4 -1
  27. package/dist/utils/env-defaults.d.ts +1 -0
  28. package/package.json +9 -2
  29. package/templates/agents/default.yaml +17 -5
package/dist/publish/index.js CHANGED
@@ -1,2 +1,2 @@
1
- 'use strict';var wt=require('crypto'),G=require('fs'),promises=require('fs/promises'),W=require('path'),fo=require('js-yaml'),_o=require('os'),bo=require('tar'),zlib=require('zlib');function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var wt__namespace=/*#__PURE__*/_interopNamespace(wt);var G__namespace=/*#__PURE__*/_interopNamespace(G);var W__namespace=/*#__PURE__*/_interopNamespace(W);var fo__namespace=/*#__PURE__*/_interopNamespace(fo);var _o__namespace=/*#__PURE__*/_interopNamespace(_o);var bo__namespace=/*#__PURE__*/_interopNamespace(bo);var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var h=j(()=>{});var L,Qe=j(()=>{h();L=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function Un(e){return xo.test(e)||vo.test(e)}function q(){throw new L("INPUT_INVALID","JSON value is not projection-safe")}function Bo(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Rn(e,n,t,i,o,r){if(n>i&&q(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(jo.test(e)||Fo.test(e)&&!Go(o,r)||Vo.test(e))&&q(),e;if(typeof e=="number")return Number.isFinite(e)||q(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&q();let s=e;t.has(s)&&q(),t.add(s);try{if(Array.isArray(e))return e.map(d=>Rn(d,n+1,t,i,o,r));Bo(s)||q();let a={};for(let[d,c]of Object.entries(e))Un(d)&&q(),a[d]=Rn(c,n+1,t,i,[...o,d],r);return a}finally{t.delete(s);}}function re(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>zo)&&q(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&q();let i=Rn(e,0,new Set,Ho+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&q(),i}function De(e,n){if(!e||!n)return false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function Go(e,n){if(e.length===0)return false;let t=e.join(".");return n.some(i=>De(t,i))}function Ne(e){try{let n=JSON.stringify(e);return n===void 0&&q(),n}catch{q();}}function wn(e){return Array.isArray(e)?e.map(wn):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,wn(e[n])])):e}function Z(e){return Ne(wn(e))}function kn(e){return Buffer.byteLength(e,"utf8")}var xo,vo,jo,Vo,Fo,Ho,zo,Ie=j(()=>{h();Qe();xo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,vo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,jo=/<\/?[A-Za-z][^>]*>/,Vo=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Fo=/^(?:https?|file|ftp|ws|wss):\/\//i;Ho=8,zo=4;});function Cn(e){return Z(e)}var Ct=j(()=>{h();Ie();});var ge,xn=j(()=>{h();ge="window";});function Se(e){return $o.has(e)||Wo.test(e)||Jo.test(e)}var xt,$o,Wo,Jo,en,Ve,se,vn,jn,Vn,Fn,Bn,Me=j(()=>{h();xt=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],$o=new Set(xt),Wo=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Jo=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;en=/^[A-Za-z0-9_]+$/,Ve=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,se=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,vn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,jn=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Vn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,Fn=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Bn=["inline","panel"];});function Hn(e){return typeof e=="string"&&vt.includes(e)}var vt,jt=j(()=>{h();Me();vt=["text/plain","application/json"];});function nn(e){if(!zn(e))return false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Ko(e.in)||Object.hasOwn(e,"out")&&!Xo(e.out))}function Ko(e){return zn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&Hn(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Xo(e){return zn(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&Hn(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function zn(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Gn=j(()=>{h();jt();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function l(e,n=e){throw new J(e,n)}function V(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function U(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function F(e,n,t=[]){let i=new Set([...n,...t]);Object.keys(e).some(o=>!i.has(o))&&l("MANIFEST_INVALID"),n.some(o=>!U(e,o))&&l("MANIFEST_INVALID");}function an(e,n=false,t=false,i=false){return Qo.test(e)||!i&&nr.test(e)||er.test(e)||t&&Vt.test(e)||tr.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Vt.test(e))}function rn(e,n=new Set,t=0,i=false,o=false){if(typeof e=="string"){an(e,i,o)&&l("UNSAFE_VALUE");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&l("MANIFEST_INVALID"),n.add(e);try{if(Array.isArray(e)){for(let r of e)rn(r,n,t+1);return}V(e)||l("MANIFEST_INVALID");for(let[r,s]of Object.entries(e))rn(s,n,t+1,i&&t===0&&(r==="name"||r==="description"),o);}finally{n.delete(e);}}}function ie(e,n){let t=e[n];return typeof t!="string"&&l("MANIFEST_INVALID"),t}function ee(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&l("MANIFEST_INVALID"),i}function $n(e){return Zo.test(e)||l("MANIFEST_INVALID"),e}function Le(e){return qo.test(e)||l("TOKEN_INVALID"),e}function Tr(e){return Kt.test(e)||l("MANIFEST_INVALID"),e}function br(e){V(e)||l("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=Tr(t);V(i)||l("MANIFEST_INVALID");let r=i.type;if(r==="text"){F(i,["type","maxLength"]),n[o]={type:r,maxLength:ee(i,"maxLength",1)};continue}if(r==="text-list"){F(i,["type","max","itemMaxLength"]),n[o]={type:r,max:ee(i,"max",0),itemMaxLength:ee(i,"itemMaxLength",1)};continue}if(r==="step-list"){F(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=ee(i,"min",0),a=ee(i,"max",1);s>a&&l("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:ee(i,"labelMaxLength",1),detailMaxLength:ee(i,"detailMaxLength",1)};continue}typeof r=="string"&&l("SCHEMA_TYPE_UNSUPPORTED"),l("MANIFEST_INVALID");}return n}function Pr(e,n,t){let i=e[n];(!i||i.type!==t)&&l("MANIFEST_INVALID");}function tn(e,n,t){let i=ie(e,"field");return Kt.test(i)||l("MANIFEST_INVALID"),Pr(n,i,t),i}function Dr(e,n){V(e)||l("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&l("MANIFEST_INVALID"),_r.includes(t)||l("PRIMITIVE_UNKNOWN"),t){case "card-shell":return F(e,["primitive"]),{primitive:t};case "meta-banner":return F(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Le(ie(e,"badgeToken")),noticeToken:Le(ie(e,"noticeToken"))};case "heading":return F(e,["primitive","field"]),{primitive:t,field:tn(e,n,"text")};case "labeled-text":return F(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&l("MANIFEST_INVALID"),{primitive:t,titleToken:Le(ie(e,"titleToken")),field:tn(e,n,"text"),variant:"callout"};case "step-flow":return F(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Le(ie(e,"titleToken")),field:tn(e,n,"step-list")};case "text-list":{F(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Le(ie(e,"titleToken")),field:tn(e,n,"text-list")};return U(e,"emptyToken")&&(i.emptyToken=Le(ie(e,"emptyToken"))),U(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&l("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return l("MANIFEST_INVALID")}function Nr(e,n){return Array.isArray(e)||l("MANIFEST_INVALID"),e.map(t=>Dr(t,n))}function B(e="v2 manifest exceeds a contract limit"){return l("LIMIT_EXCEEDED",e)}function Q(e="initial state is not projection-safe"){return l("INITIAL_STATE_INVALID",e)}function Ft(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||mr.test(e)||hr.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),(an(e,true,true)||ir.test(e)||or.test(e)||rr.test(e))&&l("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Wn(e,n){return (typeof e!="string"||!se.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Sr(e){return (typeof e!="string"||!vn.test(e)||e==="*"||e==="all")&&l("MANIFEST_INVALID","action capability is invalid"),e}function Xt(e){return (typeof e!="string"||!gr.test(e))&&l("MANIFEST_INVALID","resource hash is invalid"),e}function Jn(e,n=new Set,t=0){if(typeof e=="string"){e.length>4096&&B("v2 manifest string is too long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||l("MANIFEST_INVALID","v2 manifest contains a non-finite number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&l("MANIFEST_INVALID","v2 manifest contains a non-JSON value"),typeof e!="object"&&l("MANIFEST_INVALID"),t>8&&B("v2 manifest nesting is too deep"),n.has(e)&&l("MANIFEST_INVALID","v2 manifest contains a cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&B("v2 manifest array is too long");for(let i of e)Jn(i,n,t+1);return}V(e)||l("MANIFEST_INVALID","v2 manifest contains a non-plain object");for(let i of Object.values(e))Jn(i,n,t+1);}finally{n.delete(e);}}}function Yt(e){return (typeof e!="string"||e.length>4096||!Ve.test(e))&&(typeof e=="string"&&e.length>4096&&B("projection path is too long"),l("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Se(t))&&l("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Kn(e){V(e)||l("MANIFEST_INVALID","projection policy must be an object"),F(e,["allow"]),Array.isArray(e.allow)||l("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&B("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=Yt(i);t.has(o)&&l("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Mr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","dataPaths must be an array"),e.length>Er&&B("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=Yt(o);i.has(r)&&l("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>De(r,s))||l("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Oe(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Bt(e,n){return (typeof e!="number"||!Number.isFinite(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Xn(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||an(e))&&l("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||l("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&B("schema enum is too deep"),t.has(e)&&l("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&B("schema enum array is too long"),e.map(o=>Xn(o,n+1,t));V(e)||l("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Se(o)&&l("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Xn(r,n+1,t);return i}finally{t.delete(e);}}function Lr(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","schema required must be an array"),e.length>64&&B("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!Ve.test(o))&&l("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&B("schema required key is too long"),i.has(o)&&l("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&l("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Or(e,n){let t=n?Ve:en;return e.length>4096&&B("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Se(i)))&&l("MANIFEST_INVALID","schema property name is invalid"),e}function Yn(e,n=0,t=false){V(e)||l("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&B("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&l("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),l("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),F(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(U(e,"enum")&&(Array.isArray(e.enum)||l("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&B("schema enum is too long"),r.enum=e.enum.map(a=>Xn(a))),i==="string"&&(U(e,"minLength")&&(r.minLength=Oe(e.minLength,"schema minLength",4096)),U(e,"maxLength")&&(r.maxLength=Oe(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&l("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(U(e,"minimum")&&(r.minimum=Bt(e.minimum,"schema minimum")),U(e,"maximum")&&(r.maximum=Bt(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&l("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(U(e,"minItems")&&(r.minItems=Oe(e.minItems,"schema minItems",128)),U(e,"maxItems")&&(r.maxItems=Oe(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&l("MANIFEST_INVALID","schema array length bounds are inverted"),U(e,"items")&&(r.items=Yn(e.items,n+1,false))),i==="object"){let a;if(U(e,"properties")){V(e.properties)||l("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&B("schema properties are too many"),a={};for(let[p,y]of c){let A=Or(p,t);a[A]=Yn(y,n+1,false);}r.properties=a;}U(e,"minProperties")&&(r.minProperties=Oe(e.minProperties,"schema minProperties",64)),U(e,"maxProperties")&&(r.maxProperties=Oe(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&l("MANIFEST_INVALID","schema object property bounds are inverted");let d=Lr(e.required,a);d!==void 0&&(r.required=d),U(e,"additionalProperties")&&(e.additionalProperties!==false&&l("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&B("action inputSchema subtree is too large"),r}function Rr(e){let n=Yn(e,0,true);return (n.type!=="object"||!n.properties)&&l("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function wr(e){if(V(e)||l("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){F(e,ur);let n=e.handler;return (typeof n!="string"||!jn.test(n))&&l("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){F(e,fr,yr),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&l("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!Vn.test(i))&&l("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=U(e,"env")?kr(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}l("MANIFEST_INVALID","action backend type is unsupported");}function Ur(e){V(e)||l("MANIFEST_INVALID","action must be an object"),F(e,dr,pr),U(e,"_meta")&&qt(e._meta);let n=Wn(e.actionId,"actionId");Un(n)&&l("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`);let t=Sr(e.capability),i=e.mutation;typeof i!="boolean"&&l("MANIFEST_INVALID","action mutation must be boolean");let o=Rr(e.inputSchema),r;if(U(e,"dataInputs")){Array.isArray(e.dataInputs)||l("MANIFEST_INVALID","action dataInputs must be an array");let p=o.properties,y=new Set,A=[];for(let _ of e.dataInputs)(typeof _!="string"||!U(p,_)||y.has(_))&&l("MANIFEST_INVALID","action dataInputs must be unique declared properties"),y.add(_),A.push(_);r=A;}let s=Kn(e.resultProjection),a=wr(e.backend),d;U(e,"content")&&((a.type!=="skill"||!nn(e.content))&&l("MANIFEST_INVALID","action content declaration is invalid"),d=Cr(e.content));let c;if(U(e,"confirmation")){let p=e.confirmation;p!=="none"&&p!=="native"&&l("MANIFEST_INVALID","action confirmation is invalid"),c=p;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...d===void 0?{}:{content:d},...r===void 0?{}:{dataInputs:r},...c===void 0?{}:{confirmation:c}}}function kr(e){(!Array.isArray(e)||e.length===0)&&l("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&l("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function Cr(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function xr(e){return V(e)||l("INITIAL_STATE_INVALID","initialState must be an object"),F(e,Ar,Ir),e.path!=="ui/state.json"&&l("MANIFEST_INVALID","initialState path is not fixed"),U(e,"hash")?{path:"ui/state.json",hash:Xt(e.hash)}:{path:"ui/state.json"}}function vr(e){let n=["wasm","terminal","htmlDocuments"];return (!V(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&l("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function jr(e,n){rn(e,new Set,0,true,true),Jn(e),V(e)||l("MANIFEST_INVALID"),F(e,ar,cr),U(e,"_meta")&&qt(e._meta),e.manifestVersion!==2&&l("MANIFEST_INVALID");let t;U(e,"runtime")&&(t=vr(e.runtime));let i=Wn(e.pluginId,"pluginId"),o=Wn(e.definitionId,"definitionId"),r=ee(e,"version",1),s=Ft(e.name,"name"),a=Ft(e.description,"description"),d;U(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&l("MANIFEST_INVALID","icon is invalid"),d=e.icon);let c;U(e,"tone")&&((typeof e.tone!="string"||!Fn.includes(e.tone))&&l("MANIFEST_INVALID","tone is invalid"),c=e.tone),e.entry!=="ui/index.html"&&l("MANIFEST_INVALID","entry path is not fixed");let p;U(e,"entryHash")&&(p=Xt(e.entryHash));let y;U(e,"initialState")&&(y=xr(e.initialState));let A;U(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&l("MANIFEST_INVALID","usage is invalid"),A=e.usage);let _;U(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&l("MANIFEST_INVALID","detailPanel is invalid"),_=e.detailPanel);let T;if(U(e,"displayModes")){((A??ge)!==ge||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&l("MANIFEST_INVALID","displayModes are only valid for window Apps");let S=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(f=>typeof f!="string"||!S.has(f)))&&l("MANIFEST_INVALID","displayModes are invalid"),T=e.displayModes;}(A??ge)===ge&&_!==void 0&&l("MANIFEST_INVALID","detailPanel is card-only");let D=n.mode??"local";D!=="local"&&D!=="installed"&&D!=="published"&&l("MANIFEST_INVALID","manifest mode is invalid"),D!=="local"&&p===void 0&&l("MANIFEST_INVALID","installed manifests require entryHash"),D!=="local"&&y!==void 0&&y.hash===void 0&&l("MANIFEST_INVALID","installed manifests require initialState.hash"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&l("MANIFEST_INVALID","surfaces are invalid"),e.surfaces.length>2&&B("surfaces exceed the v2 limit");let M=[],x=new Set;for(let S of e.surfaces)(typeof S!="string"||!Bn.includes(S))&&l("MANIFEST_INVALID","surface is unsupported"),x.has(S)&&l("MANIFEST_INVALID","surfaces contain a duplicate"),x.add(S),M.push(S);V(e.size)||l("MANIFEST_INVALID","size must be an object"),F(e.size,["height"]);let k=ee(e.size,"height",1);k>720&&B("size.height exceeds the v2 limit");let w=Kn(e.stateProjection),v=e.summaryProjection===void 0?void 0:Kn(e.summaryProjection);v!==void 0&&v.allow.some(S=>!w.allow.includes(S))&&l("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow");let E=Mr(e.dataPaths,w.allow);Array.isArray(e.actions)||l("MANIFEST_INVALID","actions must be an array"),e.actions.length>32&&B("actions exceed the v2 limit");let m=[],N=new Set;for(let S of e.actions){let f=Ur(S);if(N.has(f.actionId)&&l("MANIFEST_INVALID","actions contain a duplicate actionId"),f.backend.type==="core"&&f.backend.handler==="state.set"){f.mutation||l("MANIFEST_INVALID","state.set actions must be mutations");for(let u of Object.keys(f.inputSchema.properties))w.allow.includes(u)||l("MANIFEST_INVALID","state.set input paths must be projection-allowed");}N.add(f.actionId),m.push(f);}return {manifestVersion:2,pluginId:i,definitionId:o,version:r,name:s,description:a,...d===void 0?{}:{icon:d},...c===void 0?{}:{tone:c},entry:"ui/index.html",...p===void 0?{}:{entryHash:p},...t===void 0?{}:{runtime:t},...y===void 0?{}:{initialState:y},...A===void 0?{}:{usage:A},..._===void 0?{}:{detailPanel:_},...T===void 0?{}:{displayModes:T},surfaces:M,size:{height:k},stateProjection:w,...v===void 0?{}:{summaryProjection:v},...E===void 0?{}:{dataPaths:E},actions:m}}function qt(e){V(e)||l("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>lr)&&B("_meta exceeds the 4 KiB limit");}function Vr(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function qn(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>De(o.join("."),a));return (e.length>4096||an(e,false,false,s))&&Q("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||Q("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&Q("state contains a non-JSON value"),t>8&&Q("state is too deep"),n.has(e)&&Q("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&Q("state array is too long"),s=e.map(d=>qn(d,n,t+1,65536,o,r));else {V(e)||Q("state contains a non-plain object");let d={};for(let[c,p]of Object.entries(e))(c.length>4096||!en.test(c)||Se(c))&&(c.length>4096&&Q("state key is too long"),Q("state contains a reserved or invalid key")),d[c]=qn(p,n,t+1,65536,[...o,c],r);s=d;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&Q("state subtree is too large"),s}finally{n.delete(e);}}function Qn(e,n=[]){V(e)||Q("initial state must be a JSON object");let t=qn(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&Q(),t}function Fr(e,n={}){rn(e),V(e)||l("MANIFEST_INVALID"),F(e,sr),e.manifestVersion!==1&&l("MANIFEST_INVALID");let t=$n(ie(e,"pluginId")),i=$n(ie(e,"definitionId")),o=ee(e,"version",1),r=ee(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Yo;(!Number.isSafeInteger(s)||s<1)&&l("MANIFEST_INVALID"),r>s&&l("PRIMITIVE_SET_UNSUPPORTED"),V(e.activation)||l("MANIFEST_INVALID"),F(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&l("MANIFEST_INVALID");let a=$n(ie(e.activation,"language")),d=br(e.schema),c=Nr(e.layout,d);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:d,layout:c}}function Br(e,n={}){return V(e)||l("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&l("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?jr(e,n):Fr(e,n)}function _e(e,n={}){try{return Br(e,n)}catch(t){if(t instanceof J)throw t;return l("MANIFEST_INVALID")}}function et(e,n={}){let t=_e(e,n);return t.manifestVersion===2?Vr(t):t}var Yo,qo,Zo,Kt,Qo,er,nr,tr,Vt,ir,or,rr,sr,ar,cr,dr,pr,lr,ur,fr,yr,Ar,Ir,gr,mr,hr,Er,_r,J,Zt=j(()=>{h();xn();Ie();Gn();Me();Yo=1,qo=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Zo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Kt=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Qo=/<\/?[A-Za-z][^>]*>/,er=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,nr=/^(?:https?|file|ftp|ws|wss):\/\//i,tr=/^\s*(?:javascript|data):/i,Vt=/data:[^,\s]*,/i,ir=/(?:https?|file|ftp|ws|wss):\/\//i,or=/javascript:/i,rr=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,sr=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],ar=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],cr=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],dr=["actionId","capability","mutation","inputSchema","resultProjection","backend"],pr=["confirmation","dataInputs","content","_meta"],lr=4*1024,ur=["type","handler"],fr=["type","command"],yr=["env"],Ar=["path"],Ir=["hash"],gr=/^[0-9a-f]{64}$/,mr=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,hr=/[\r\n]/,Er=16,_r=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],J=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="UiPluginValidationError"};});var nt=j(()=>{h();Ct();Zt();Me();});function ae(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=re(t);return wt.createHash("sha256").update(Z(i)).digest("hex")}function ce(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new L("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Yr.test(e.sourceHash)))throw new L("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ae(e)!==e.hash)throw new L("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Zr(i)))throw new L("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new L("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new L("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new L("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&it(t.resultProjection),t.content!==void 0&&!nn(t.content))throw new L("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new L("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new L("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new L("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new L("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new L("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new L("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new L("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new L("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&it(e.stateProjection),e.summaryProjection){it(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new L("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new L("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(qr(r,o==="readTool"),n.has(r.name))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new L("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new L("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new L("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>De(t,i))))throw new L("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function qr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=re(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let d=re(a.structuredContent);if(kn(Ne(d))>4*1024)throw new Error("fixed result size")}}catch{throw new L("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function it(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new L("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Zr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Yr,we=j(()=>{h();Ie();Qe();Gn();Yr=/^[0-9a-f]{64}$/;});function dn(e,n=e){throw new de(e,n)}var de,pn=j(()=>{h();de=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var ai=j(()=>{h();});var ci=j(()=>{h();we();Ie();pn();ai();});function di(e,n){return Qr.add(e),n!==void 0&&es.set(e,n),e}var Qr,es,ln=j(()=>{h();Qr=new WeakSet,es=new WeakMap;});function Ge(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function ot(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function ui(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))ui(n);return Object.freeze(e)}function $(e){throw new oe("LINEAGE_INVALID",e)}function as(e){throw new oe("LINEAGE_STALE",e)}function fi(e){if(!Ge(e)||!ot(e,is,os)||!Ge(e.actions))return $("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!Ge(n)||!ot(n,rs,ss))return $("Lineage action definition shape is invalid");return e}function cs(e){if(!Ge(e)||!ot(e,ns,ts))return $("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!pi.test(e.hash))return $("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!pi.test(e.sourceHash)))return $("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return $("Lineage compatibility marker is invalid");let n=fi(e.definition);if(n.version!==e.version)return $("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return $("Lineage source hash does not match its definition");let t;try{t=ae(n),ce({...n,hash:e.hash});}catch{return $("Lineage definition is invalid")}return t!==e.hash?$("Lineage definition hash does not match"):ui({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function li(e){return e.stateProjection?.allow??[]}function ds(e,n){let t=[],i=new Set(li(n));li(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,d]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(d.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(d=>!a.has(d))&&t.push("S5_SUMMARY_PROJECTION");}return t}function ps(e,n){return Z(e)===Z(n)}function rt(e,n){if(!Array.isArray(e)||e.length===0)return $("Definition lineage is missing");if(!Ge(n)||typeof n.hash!="string")return $("Current definition is invalid");let t,i;try{let{hash:a,...d}=n;i=fi(d),t={...i,hash:a},ce(t);}catch{return $("Current definition is invalid")}let o=e.map(cs),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return $("Lineage definition ids do not match");if(o.some((a,d)=>d>0&&a.version<=o[d-1].version))return $("Lineage generations are not in increasing version order");if(o.some((a,d)=>o.findIndex(c=>c.hash===a.hash)!==d))return $("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!ps(s.definition,i))return as("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),d=new Set;for(let p of o)if(p.sourceHash===void 0)for(let y of Object.keys(p.definition.actions))a.has(y)&&d.add(y);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==d.size||c.some(p=>!d.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new oe("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(p=>p.compat==="break"))continue;let c=ds(o[a].definition,t);if(c.length>0)throw new oe("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(o),current:t})}var oe,pi,ns,ts,is,os,rs,ss,st=j(()=>{h();we();Ie();oe=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},pi=/^[0-9a-f]{64}$/,ns=["version","hash","definition"],ts=["sourceHash","compat"],is=["id","version","actions"],os=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],rs=["capabilities"],ss=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var yi,Ai,Ii=j(()=>{h();yi=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],Ai=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var gi=j(()=>{h();we();ln();});function at(e,n=0){try{let t=re(e,n);return t.type!==void 0&&t.type!=="object"&&dn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof de)throw t;dn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function mi(e){if(e.length===0)return at({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,at(i.inputSchema));return at(fs(n,t),us)}function fs(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var $e,us,ct=j(()=>{h();ci();we();Ie();ln();pn();st();Ii();gi();$e=8*1024*1024,new Set(yi),new Set(Ai),us=4;});function ys(e){if(e===null||typeof e!="object"||!(hi in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[hi]}function Ei(e,n){let t=ys(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var hi,_i=j(()=>{h();hi=Symbol("crewx.workspace-app-scan-cache.state");});function X(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new P("NOT_FOUND"):n==="ELOOP"?new P("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new P("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new P("READ_DENIED"):new P("READ_DENIED")}function ms(e){if(typeof e!="string"||e.length===0||!W.isAbsolute(e))throw new P("READ_DENIED")}function dt(e){if(typeof e!="string"||W.isAbsolute(e)||/[\\\u0000]/.test(e))throw new P("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new P("PATH_ESCAPED");return n}function An(e,n){let t=W.relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${W.sep}`)&&!W.isAbsolute(t)}function ke(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function ft(e,n){return e.dev===n.dev&&e.ino===n.ino}function yt(e,n){return ft(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function un(e){ms(e);let n,t;try{n=await promises.realpath(e),t=await promises.stat(n,{bigint:!0});}catch(i){throw X(i)}if(!t.isDirectory())throw new P("READ_DENIED");return {realRoot:n,identity:ke(t)}}async function Pi(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=W.resolve(e,t[0],t[1]),o=await promises.realpath(i),!(await promises.stat(o,{bigint:!0})).isDirectory())throw new P("READ_DENIED")}catch(r){throw r instanceof P?r:X(r)}if(!An(n,o))throw new P("PATH_ESCAPED");return o}async function fn(e,n,t,i){let o,r,s;try{o=await promises.lstat(e,{bigint:!0}),r=await promises.realpath(e),s=await promises.stat(r,{bigint:!0});}catch(a){throw X(a)}if(!An(n,r)||t!==void 0&&!An(t,r))throw new P("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new P("READ_DENIED");if(!ft(i,o)||!ft(i,s)||i.dev!==s.dev)throw new P("PATH_ESCAPED")}async function Ue(e,n){let t,i;try{t=await promises.realpath(e),i=await promises.stat(t,{bigint:!0});}catch{throw new P("PATH_ESCAPED")}if(t!==n.realRoot||!yt(n.identity,ke(i)))throw new P("PATH_ESCAPED")}function hs(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var P,ut,gs,bi,In,Di,It=j(()=>{h();P=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},ut=G.constants.O_NOFOLLOW,gs=G.constants.O_NONBLOCK,bi=G.constants.O_RDONLY|(ut??0)|(gs??0);In=class{async getRootIdentity(n){let t=await un(n);return await Ue(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=dt(t),o=await un(n),r=W.resolve(n,...i),s,a;try{s=await promises.realpath(r),a=await promises.stat(s,{bigint:!0});}catch(d){let c=X(d);if(c.code==="NOT_FOUND")return [];throw c}if(!An(o.realRoot,s)||!a.isDirectory())throw new P("PATH_ESCAPED");try{let d=await promises.readdir(s,{withFileTypes:!0,encoding:"utf8"});return await Ue(n,o),d.map(hs)}catch(d){let c=X(d);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ut===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await un(n),s=W.resolve(n,...o),a=W.relative(n,s);if(a===".."||a.startsWith(`..${W.sep}`)||W.isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await promises.open(s,bi);}catch(c){throw X(c)}try{let c;try{let T=await d.stat({bigint:!0});c=ke(T);}catch(T){throw X(T)}if(c.size>BigInt(i))throw new P("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await Ue(n,r);let p=await Pi(n,r.realRoot,o);await fn(s,r.realRoot,p,c);let y=new Uint8Array(new ArrayBuffer(Number(c.size))),A=0;for(;A<y.byteLength;){let T;try{T=(await d.read(y,A,y.byteLength-A,A)).bytesRead;}catch(D){throw X(D)}if(T<=0)throw new P("IDENTITY_CHANGED");A+=T;}let _;try{let T=await d.stat({bigint:!0});_=ke(T);}catch(T){throw X(T)}if(!yt(c,_))throw new P("IDENTITY_CHANGED");return await fn(s,r.realRoot,p,_),await Ue(n,r),new Uint8Array(y)}finally{await d.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(ut===void 0)throw new P("UNSUPPORTED");let o=dt(t),r=await un(n),s=W.resolve(n,...o),a=W.relative(n,s);if(a===".."||a.startsWith(`..${W.sep}`)||W.isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await promises.open(s,bi);}catch(c){throw X(c)}try{let c;try{let A=await d.stat({bigint:!0});c=ke(A);}catch(A){throw X(A)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await Ue(n,r);let p=await Pi(n,r.realRoot,o);await fn(s,r.realRoot,p,c);let y;try{let A=await d.stat({bigint:!0});y=ke(A);}catch(A){throw X(A)}if(!yt(c,y))throw new P("IDENTITY_CHANGED");return await fn(s,r.realRoot,p,y),await Ue(n,r),{...y,candidateRealPath:p??r.realRoot}}catch(c){throw c instanceof P?c:X(c)}finally{await d.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Di=new In;});function Xe(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Si(e){return typeof e=="string"&&se.test(e)?e:void 0}function Ns(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function be(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ss(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ms(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Ls(e){return Ps.decode(e)}function Os(e){return JSON.parse(Ls(e))}function Mi(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Rs(e){if(e instanceof P)return Mi(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Mi(n)}}function pe(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ws(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Us(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Li(e,n,t,i){let o=ws(e);if(!o)throw new P("READ_DENIED");return Ms(await o.call(e,n,t,i))}async function ht(e,n,t){let i=Us(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(Ss).filter(r=>r!==null)}function ks(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Cs(e){if(!Xe(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(be))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function xs(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function mn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(be)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(be))})}function gn(e,n){let t=Object.keys(e).sort(be),i=[...n].sort(be);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Oi(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function vs(e){let n;try{n=Os(e);}catch{return}if(!Xe(n)||!gn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>Et)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!Xe(s))return;let a=["packageDir","appId","definition","files"],d=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),p=[...d?["lineage"]:[],...c?["launcher"]:[]];if(!gn(s,[...a,...p])||c&&s.launcher!==false)return;let y=Oi(s.packageDir),A=Si(s.appId);if(!y||y.length!==2||y[0]!=="apps"||!Ns(y[1])||!A||t.has(s.packageDir)||!Xe(s.definition)||!gn(s.definition,["id","version","hash"]))return;let _=Si(s.definition.id),T=s.definition.version,D=s.definition.hash;if(!_||!Number.isSafeInteger(T)||T<1||typeof D!="string"||!mt.test(D)||!Array.isArray(s.files)||s.files.length<2||s.files.length>_t)return;let M=new Set,x=[];for(let k of s.files){if(!Xe(k)||!gn(k,["path","sha256"]))return;let w=Oi(k.path);if(!w||typeof k.sha256!="string"||!mt.test(k.sha256))return;let v=w.join("/"),E=`${s.packageDir}/${v}`;if(M.has(v)||i.has(E))return;M.add(v),i.add(E),x.push(Object.freeze({path:v,sha256:k.sha256}));}if(!M.has("ui-plugin.json")||!M.has("ui/index.html")||(o+=x.length,o>_s))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:A,definition:Object.freeze({id:_,version:T,hash:D}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(x.sort((k,w)=>be(k.path,w.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function Te(e){let n=Rs(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function js(e,n,t,i,o){let r=[],s=async(a,d)=>{if(!pe(i,o))throw new P("LIMIT_EXCEEDED");if(d>2)throw new P("LIMIT_EXCEEDED");let c=await ht(e,n,a);for(let p of c){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new P("PATH_ESCAPED");let y=`${a}/${p.name}`;if(p.kind==="file"){if(r.push(y.slice(t.length+1)),r.length>_t)throw new P("LIMIT_EXCEEDED")}else if(p.kind==="directory")await s(y,d+1);else throw p.kind==="symlink"?new P("PATH_ESCAPED"):new P("READ_DENIED")}};return await s(t,0),r.sort(be)}function Vs(e){return e==="ui-plugin.json"?262144:e==="ui/index.html"?$e:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?bs:Ts}async function Ri(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Ds};let o=Cs(e.reservedIds),r=[],s=(f,u,I)=>ks(f,"bundled",u),a=(f=[],u=false,I)=>({...I===void 0?{}:{indexHash:I},packages:f,diagnostics:r,incomplete:u,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!mt.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d;try{d=await Li(n,e.root,"bundle-index.json",Es);}catch(f){return r.push(s(Te(f),"bundle-index.json")),a()}let c=wt.createHash("sha256").update(d).digest("hex");if(c!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p=vs(d);if(p===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!xs(mn(p.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!pe(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:"LIMIT_EXCEEDED"})),true,c);let y;try{y=await ht(n,e.root,"");}catch(f){return r.push(s(Te(f),"bundle-index.json")),a(p.packages.map(u=>({indexEntry:u,failureCode:Te(f)})),false,c)}if(!pe(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:"LIMIT_EXCEEDED"})),true,c);let A=y.find(f=>f.name==="bundle-index.json"&&f.kind==="file"),_=y.find(f=>f.name==="apps"&&f.kind==="directory"),T=f=>p.packages.map(u=>({indexEntry:u,failureCode:f}));if(!A)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(T("BUNDLE_INTEGRITY"),false,c);let D=y.filter(f=>f.name!=="bundle-index.json"&&f.name!=="apps");if(D.length>0){let f=D.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(f,"bundle-index.json")),a(T("BUNDLE_INTEGRITY"),false,c)}if(y.some(f=>f.name==="apps"&&f.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(T("PATH_ESCAPED"),false,c);let M=[];if(_)try{M=await ht(n,e.root,"apps");}catch(f){return r.push(s(Te(f),"apps")),a(T(Te(f)),false,c)}if(!pe(t,i)||M.length>Et)return r.push(s("LIMIT_EXCEEDED","apps")),a(T("LIMIT_EXCEEDED"),true,c);let x=new Map(p.packages.map(f=>[f.packageDir.slice(5),f])),k=M.filter(f=>!x.has(f.name));for(let f of k)r.push(s(f.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${f.name}`));if(k.length>0){let f=k.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(T(f),false,c)}let w=new Set,v=new Map,E=new Map;for(let f of p.packages){let u=v.get(f.appId)??[];u.push(f),v.set(f.appId,u);let I=`${f.definition.id}\0${String(f.definition.version)}`,g=E.get(I)??[];g.push(f),E.set(I,g);}for(let f of [...v.values(),...E.values()])if(f.length>1)for(let u of f)w.add(u);let m=[],N=d.byteLength,S=false;for(let f of p.packages){if(!pe(t,i)){S=true,m.push({indexEntry:f,failureCode:"LIMIT_EXCEEDED"});continue}let u;try{let C=f.lineage[f.lineage.length-1];if(!C)throw new oe("LINEAGE_INVALID","Definition lineage is missing");if(C.definition.id!==f.definition.id||C.version!==f.definition.version||C.hash!==f.definition.hash)throw new oe("LINEAGE_STALE","Last lineage generation does not match bundle identity");u=rt(f.lineage,{...C.definition,hash:C.hash}).entries;}catch(C){let ne=C instanceof oe?C.code:"LINEAGE_INVALID";r.push(s(ne,f.packageDir)),m.push({indexEntry:f,failureCode:ne});continue}let I=M.find(C=>C.name===f.packageDir.slice(5));if(!_||!I){m.push({indexEntry:f,failureCode:"BUNDLE_INTEGRITY"});continue}if(I.kind!=="directory"){m.push({indexEntry:f,failureCode:I.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let g;try{let C=await js(n,e.root,f.packageDir,t,i);if(!pe(t,i)){S=!0,m.push({indexEntry:f,failureCode:"LIMIT_EXCEEDED"});continue}let ne=f.files.map(te=>te.path);if(C.length!==ne.length||C.some((te,me)=>te!==ne[me])){m.push({indexEntry:f,failureCode:"BUNDLE_INTEGRITY"});continue}g=new Map;let H;for(let te of f.files){if(!pe(t,i)){H="LIMIT_EXCEEDED",S=!0;break}if(N>=gt){H="LIMIT_EXCEEDED";break}let me;try{me=await Li(n,e.root,`${f.packageDir}/${te.path}`,Vs(te.path));}catch(Co){H=Te(Co);break}if(!pe(t,i)){H="LIMIT_EXCEEDED",S=!0;break}if(N+me.byteLength>gt){N=gt,H="LIMIT_EXCEEDED";break}if(N+=me.byteLength,wt.createHash("sha256").update(me).digest("hex")!==te.sha256){H="BUNDLE_INTEGRITY";break}g.set(te.path,me);}if(H!==void 0){m.push({indexEntry:f,failureCode:H});continue}}catch(C){pe(t,i)||(S=true),m.push({indexEntry:f,failureCode:Te(C)});continue}m.push({indexEntry:f,lineage:u,files:g,...w.has(f)?{failureCode:"DUPLICATE_ID"}:{}});}return a(m,S,c)}var Es,Et,_t,_s,Ts,bs,gt,mt,Ps,Ds,Tt=j(()=>{h();st();Me();ct();It();Es=256*1024,Et=64,_t=128,_s=Et*_t,Ts=2*1024*1024,bs=8*1024*1024,gt=32*1024*1024,mt=/^[0-9a-f]{64}$/,Ps=new TextDecoder("utf-8",{fatal:true}),Ds=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Bs(e){if(typeof e!="string"||!se.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${bt}${e}`.length+7<=128?e:`hash_${wt.createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${bt}${n}_read`,action:`${bt}${n}_action`}}function Ye(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Ui(e){return typeof e=="string"&&se.test(e)?e:void 0}function zs(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Gs(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function qe(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function zi(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function $s(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Gi(e){return Hs.decode(e)}function $i(e){return JSON.parse(Gi(e))}function Ws(e){if(!Ye(e))return;let n=Ui(e.pluginId);if(!n)return;let t=Ui(e.definitionId),i=e.version,o=t&&Number.isSafeInteger(i)&&i>=1?`${t}\0${String(i)}`:void 0;return {pluginId:n,...o===void 0?{}:{definitionKey:o}}}function Js(e){let n=$i(e);return {value:n,identity:Ws(n)}}function En(e,n,t,i){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t};return Object.freeze(o)}function ki(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Y(e){if(e instanceof P)return ki(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return ki(n)}}function xe(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Ci(e){switch(e.code){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Wi("UiPluginValidationError",e.code)}}function Wi(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Pt(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Wi("McpAppContractError",e)}}function le(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Ks(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Xs(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(Ye(o)){let r=o.bin,s=typeof r=="string"?r:Ye(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let d=Ys(a);if(d&&n.has(d))return d}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function Ys(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function qs(){return globalThis.performance?.now()??Date.now()}function Ce(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Ce(n);return Object.freeze(e)}function xi(e){return Object.freeze(Array.from(e))}async function _n(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new P("NOT_FOUND");if(a.byteLength>i)throw new P("LIMIT_EXCEEDED");return new Uint8Array(a)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return Fi(e,n.root,o,i);try{let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let d=await Fi(e,n.root,o,i),c=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=c.candidateRealPath,Xi(a,c)&&c.size===BigInt(d.byteLength)&&!Yi(c,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:c}):r.cacheable=!1,d}catch(a){throw t==="ui-plugin.json"&&Y(a)==="NOT_FOUND"&&r.directoryListings.some(c=>c.relativePath===n.relativePath&&!Ki(c.key,"ui-plugin.json"))||(r.cacheable=false),a}}function Ji(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Zs(e,n,t,i,o,r,s,a){let d=e.fingerprintVerifiedFile,c=Ji(t,i),p=o.candidates.get(c),y=i.relativePath,A;try{A=await Vi(e,n,y);}catch(E){if(Y(E)!=="NOT_FOUND")throw E}let _=A===void 0?void 0:{relativePath:y,key:A};if(_!==void 0&&(i.source==="apps"||i.source==="skills")&&!Ki(_.key,"ui-plugin.json"))return le(s,a)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===_.relativePath&&p.directoryListings[0]?.key===_.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof d=="function"?{memo:p}:typeof d!="function"?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([_]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let T=await Promise.all(vi.map(async E=>{if(E==="")return _;let m=`${i.relativePath}${E}`;try{let N=await Vi(e,n,m);return N===void 0?void 0:{relativePath:m,key:N}}catch(N){if(Y(N)==="NOT_FOUND")return;throw N}}));if(!le(s,a))return {timeLimitReached:true};let D=typeof d=="function"&&T.every(E=>E!==void 0),M=T.filter(E=>E!==void 0),x=new Map,k=p!==void 0&&D,w;if(p!==void 0&&typeof d=="function"){let E=await Promise.all(p.files.map(async m=>{if(!le(s,a))return {kind:"time",file:m};try{let N=await d.call(e,n,m.relativePath,m.byteLimit);return {kind:"fingerprint",file:m,current:N}}catch(N){return Y(N)==="NOT_FOUND"?{kind:"missing",file:m}:{kind:"error",file:m,error:N}}}));if(E.some(m=>m.kind==="time"))return {timeLimitReached:true};for(let m of E){if(m.kind==="error")throw m.error;if(m.kind==="missing"){k=false;continue}if(m.kind!=="fingerprint")continue;let{file:N,current:S}=m;x.set(N.relativePath,S),w??=S.candidateRealPath,(S.candidateRealPath!==p.candidateRealPath||!Xi(S,N.fingerprint)||Yi(S,r))&&(k=false);}}let v=p!==void 0&&p.directoryListings.length===M.length&&p.directoryListings.every((E,m)=>E.relativePath===M[m]?.relativePath&&E.key===M[m]?.key);return p!==void 0&&D&&v&&k&&w===p.candidateRealPath?{memo:p}:!D||M.length!==vi.length?{}:{context:{state:o,cacheKey:c,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(M),priorFingerprints:x,files:new Map,...w===void 0?{}:{candidateRealPath:w},cacheable:true}}}function Ki(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return true}}async function Vi(e,n,t){let i=qi(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(zi);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>qe(s.name,a.name)||qe(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Xi(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Yi(e,n){let t=e.mtimeNs-n;return t>=-ji&&t<=ji}function Dt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function Qs(e,n,t){let i=wt.createHash("sha256"),o=new TextEncoder().encode(Z(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function ea(e,n){let t={...e.definition,sourceHash:n},i;try{i=ae(t);}catch(r){throw r instanceof L&&r.code==="INPUT_INVALID"?new J("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{ce(o);}catch{throw new J("MANIFEST_INVALID","normalized definition is invalid")}return o}function na(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function ta(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function qi(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Fi(e,n,t,i){let o=ta(e);if(!o)throw new P("READ_DENIED");return $s(await o.call(e,n,t,i))}async function ia(e,n,t){let i=qi(e);if(!i)throw new P("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new P("READ_DENIED");return o.map(zi).filter(r=>r!==null)}function oa(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Bi(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Bi(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Bi(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function ue(e,n){e.diagnostic||(e.diagnostic=En(n,e.source,e.relativePath,e.identity?.pluginId));}function ra(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&ue(s,"RESERVED_ID");if(o.length>1)for(let s of o)ue(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)ue(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))ue(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))ue(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)ue(o,"DUPLICATE_ID");}function sa(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let d of oa(n)){for(let c of d.appIds??[])typeof c=="string"&&i.add(c);for(let c of d.definitionIds??[])typeof c=="string"&&o.add(c);for(let c of d.toolNames??[])typeof c=="string"&&r.add(c);}for(let d of e){let c=d.candidate;if(!c)continue;if(i.has(c.pluginId)||o.has(c.definitionId)){ue(d,"RESERVED_ID");continue}if(d.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){ue(d,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(y=>y!==void 0).some(y=>r.has(y))&&ue(d,"DUPLICATE_ID");}}function aa(e){return [...e].sort((n,t)=>{let i=wi.indexOf(n.source)-wi.indexOf(t.source);return i!==0?i:qe(n.relativePath,t.relativePath)})}function R(e,n){e.diagnostic=En(n,e.source,e.relativePath,e.identity?.pluginId);}async function Hi(e,n,t){if(t.byteLength>262144){R(n,"LIMIT_EXCEEDED");return}let i;try{i=Js(t);}catch{R(n,"MANIFEST_INVALID");return}if(n.bundleIdentity===void 0)n.identity=i.identity;else if(i.identity?.pluginId!==n.bundleIdentity.appId||i.identity.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){R(n,"BUNDLE_INTEGRITY");return}if(Ye(i.value)&&i.value.builtinOnly===true){R(n,"RESERVED_ID");return}let o;try{let g=_e(i.value,{mode:"local"});if(g.manifestVersion!==2)throw new J("MANIFEST_INVALID","workspace App requires v2");o=g;}catch(g){if(g instanceof J){R(n,Ci(g));return}if(g instanceof de){R(n,Pt(g.code));return}if(Ye(g)&&typeof g.code=="string"){R(n,Pt(g.code));return}throw g}let r={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=r),o.actions.length>0)try{mi(o.actions.map(g=>({actionId:g.actionId,inputSchema:g.inputSchema})));}catch(g){if(g instanceof de){R(n,Pt(g.code));return}throw g}let s;try{s=await _n(e,n,"ui/index.html",$e);}catch(g){R(n,xe(Y(g),"entry"));return}if(s.byteLength>$e){R(n,"LIMIT_EXCEEDED");return}let a;try{a=Gi(s);}catch{R(n,"ENTRY_INVALID");return}if(s.byteLength===0||a.length===0){R(n,"ENTRY_INVALID");return}let d=wt.createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==d){R(n,"ENTRY_INVALID");return}let c={},p,y;if(o.initialState!==void 0){try{p=await _n(e,n,"ui/state.json",65536);}catch(g){R(n,xe(Y(g),"initial"));return}if(p.byteLength>65536){R(n,"LIMIT_EXCEEDED");return}try{let g=$i(p),C=o.dataPaths??[],ne=Qn(g,C);c=re(ne,0,C),Ne(c);}catch{R(n,"INITIAL_STATE_INVALID");return}if(y=wt.createHash("sha256").update(p).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==y){R(n,"INITIAL_STATE_INVALID");return}}let A={...o,entryHash:d,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:y}}},_=et(A),T=Qs(A,s,p??new Uint8Array),D;try{D=ea(_,T);}catch(g){if(g instanceof J){R(n,Ci(g));return}throw g}let M;if(n.bundleLineage!==void 0){let g=n.bundleLineage[n.bundleLineage.length-1];if(!g){R(n,"LINEAGE_INVALID");return}let{legacy:C,...ne}=g.definition,{hash:H,...te}=D;if(Z(ne)!==Z(te)){R(n,"LINEAGE_STALE");return}if(C!==void 0&&(D={...D,legacy:C}),C!==void 0)try{D={...D,hash:ae(D)},ce(D);}catch{R(n,"LINEAGE_INVALID");return}M=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){R(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==D.id||n.bundleIdentity.version!==D.version||n.bundleIdentity.definitionHash!==D.hash)){R(n,"LINEAGE_STALE");return}let x=Bs(o.pluginId),k=o.actions.length===0?{read:x.read}:x,w=Ce(_),v=Ce(A),E=Ce(D),m=Ce({..._.handlers}),N=xi(s),S=p===void 0?void 0:xi(p),f=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:N}),...S===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:y,bytes:S})}}),u={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,relativePath:n.relativePath,manifest:v,normalized:w,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:E,handlers:m,resources:f,html:a,entryBytes:N,entryHash:d,initialState:Ce(c),...S===void 0?{}:{initialStateBytes:S},...y===void 0?{}:{initialStateHash:y},sourceHash:T,toolNames:Object.freeze(k)},I=n.provenance===void 0?{...u,source:n.source}:{...u,provenance:n.provenance,lineage:M??[]};n.candidate=Object.freeze(I),na(o)&&R(n,"EXEC_DENIED");}async function ca(e,n){try{return await _n(e,n,"ui-plugin.json",262144)}catch(t){if(Y(t)==="NOT_FOUND")return;R(n,xe(Y(t),"manifest"));return}}function da(e,n,t,i=Fs,o=false){let r=aa(e);ra(r);let s=Object.freeze(r.filter(p=>p.candidate!==void 0&&p.diagnostic===void 0).map(p=>p.candidate)),a=Object.freeze(r.filter(p=>p.diagnostic!==void 0).map(p=>p.diagnostic)),d=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(r.filter(p=>p.source==="bundled"&&p.diagnostic===void 0&&t!==void 0&&p.candidate?.provenance?.indexHash===t).map(p=>p.candidate)),diagnostics:Object.freeze(a.filter(p=>p.source==="bundled").map(p=>Object.freeze({...p}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...d===void 0?{}:{productBundleSnapshotMetadata:d}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function pa(e){if(e===null||typeof e!="object"&&typeof e!="function")return false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function la(e,n){if(pa(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Di,options:t}}async function Zi(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=la(n,t),r=o.clock??qs,s=r(),a=await Ri(o.productBundle,i,s,r),d=r(),c=BigInt(Date.now())*1000000n,p=[],y=0,A,_=false,T,D;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{D=await i.getRootIdentity(e),T=Ei(o.scanCache,D),T.scanStartedAtNs=c;}catch(E){if(Y(E)!=="NOT_FOUND")throw E}let M=T!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,x=new Set,k=true;p.push(...a.diagnostics.map(E=>({source:E.source,root:o.productBundle?.root??e,name:"",relativePath:E.relativePath,diagnostic:E})));let w=a.reservedIds;a.incomplete&&(A="time_limit");for(let E of a.packages){if(!le(d,r)){_=true,A="time_limit";break}let m=E.indexEntry,N=m.packageDir,S=E.files===void 0?void 0:Xs(N,E.files),f=a.indexHash===void 0?void 0:di(Object.freeze({kind:"bundled",launcher:m.launcher!==false,indexHash:a.indexHash,packageDir:N,appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash,files:m.files}),S),u={source:"bundled",root:o.productBundle?.root??e,name:N.slice(5),relativePath:N,...f===void 0?{}:{provenance:f},...E.files===void 0?{}:{pinnedFiles:E.files},...E.lineage===void 0?{}:{bundleLineage:E.lineage},bundleIdentity:{appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash},identity:Ks(m)};if(p.push(u),y+=1,E.failureCode!==void 0){R(u,E.failureCode);continue}let I=E.files?.get("ui-plugin.json");if(I===void 0){R(u,"BUNDLE_INTEGRITY");continue}if(await Hi(i,u,I),!le(d,r)){_=true,A="time_limit";break}}let v=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let E of v){let{source:m,directory:N}=E,S;try{S=await ia(i,e,N);}catch(u){if(Y(u)==="NOT_FOUND")continue;M=false,k=false,p.push({source:m,root:e,name:"",relativePath:m,diagnostic:En(xe(Y(u),"manifest"),m,m)});continue}let f=S.filter(u=>u.kind==="directory"||u.kind==="symlink").filter(u=>Gs(u.name)).map(u=>({source:m,root:e,name:u.name,relativePath:zs(m,u.name)})).sort((u,I)=>qe(u.relativePath,I.relativePath));for(let u of f){let I={...u};if(p.push(I),D!==void 0?x.add(Ji(D,I)):M=false,!le(d,r)){_=true,A="time_limit";break e}let g;if(T!==void 0&&D!==void 0){try{let H=await Zs(i,e,D,I,T,c,d,r);if(H.timeLimitReached){_=!0,A="time_limit";break e}I.scanContext=H.context,g=H.memo;}catch(H){M=false,R(I,xe(Y(H),"manifest"));continue}g===void 0&&(M=false);}if(g!==void 0){if(I.candidate=g.candidate,I.diagnostic=g.diagnostic,I.identity=g.identity,m==="skills"&&g.candidate===void 0&&g.diagnostic===void 0)continue;if(y>=64){R(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){R(I,"LIMIT_EXCEEDED");continue}if(y+=1,!le(d,r)){_=true,A="time_limit";break e}continue}let C;if(m==="skills"&&(C=await ca(i,I),C===void 0)){I.diagnostic===void 0&&Dt(I);continue}if(y>=64){R(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){R(I,"LIMIT_EXCEEDED");continue}if(!le(d,r)){_=true,A="time_limit";break e}if(y+=1,C===void 0)try{C=await _n(i,I,"ui-plugin.json",262144);}catch(H){R(I,xe(Y(H),"manifest")),Dt(I);continue}if(await Hi(i,I,C),Dt(I),!le(d,r)){_=true,A="time_limit";break e}}}if(T!==void 0&&D!==void 0){let E=[...x].sort(qe),m=T.lastCandidateKeys,N=m!==void 0&&m.length===E.length&&m.every((f,u)=>f===E[u]);if(M=M&&N,k&&!_&&A===void 0)for(let f of T.candidates.keys())try{JSON.parse(f)[0]===D.realPath&&!x.has(f)&&T.candidates.delete(f);}catch{T.candidates.delete(f);}let S=[...T.candidates.keys()].filter(f=>{try{return JSON.parse(f)[0]===D.realPath}catch{return false}});M=M&&S.length===x.size&&S.every(f=>x.has(f))&&!_&&A===void 0,T.lastCandidateScanUnchanged=M,k&&!_&&A===void 0&&(T.lastCandidateKeys=Object.freeze(E));}return _&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:En("DISCOVERY_TIME_LIMIT","apps","apps")}),sa(p,o,w),da(p,A,a.indexHash,w,o.productBundle!==void 0)}var Fs,bt,wi,Hs,vi,ji,Qi=j(()=>{h();we();Qe();Ie();nt();Me();ct();pn();_i();It();ln();Tt();Tt();Fs=mn([]),bt="crewx_local_app_";wi=["bundled","apps","skills"],Hs=new TextDecoder("utf-8",{fatal:true});vi=["","/ui"],ji=2000000000n;});h();nt();h();xn();h();var Qt="SKILL.md",Wr=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function ei(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Jr(e){return e.isDirectory()||e.isSymbolicLink()}function ri(e){try{return G.existsSync(e)&&G.statSync(e).isDirectory()}catch{return false}}function tt(e){let n;try{n=G.readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Wr);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=fo.load(t[1]??"");if(!ei(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=ei(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Kr(e){return [W.join(e,Qt),W.join(e,"skill",Qt)]}function ni(e,n){if(!ri(e))return null;for(let t of Kr(e)){if(!G.existsSync(t))continue;let o=tt(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function ti(e){try{return G.readdirSync(e,{withFileTypes:!0}).filter(Jr)}catch{return []}}function ii(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function si(e){let n=[],t=new Set;for(let i of e)if(ri(i))for(let o of ti(i)){if(o.name.startsWith("@")){let r=W.join(i,o.name);for(let s of ti(r))ii(ni(W.join(r,s.name),s.name),t,n);continue}ii(ni(W.join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}Qi();var fa=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function bn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?ya(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return wt.createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function ya(e,n){let t=new TextEncoder().encode(Pn(e)),i=Aa(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),wt.createHash("sha256").update(o).digest("hex")}function Aa(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Pn(e){if(typeof e!="string"||e.length===0||W.isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function Tn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function to(e,n){let t=W.relative(e,n).split(W.sep).join("/");return !t||t===".."||t.startsWith("../")||W.isAbsolute(t)?null:Pn(t)}function Ia(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function io(e){return Object.freeze({packageRoot:e})}function ga(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??ge,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function oo(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function ma(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=ga(t),s=bn(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",d=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:d,...oo(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:io(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:o,summary:Object.freeze(c)}}function ha(e){let n=Ea(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...oo(["skill"]),skillName:e.skill.name,localDefinitionRef:io(e.packageRoot),definitionHash:bn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function Ea(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function z(e,n,t,i){return Object.freeze({code:e,source:n,relativePath:_a(t),...i===void 0?{}:{appId:i}})}function _a(e){if(typeof e!="string"||e.length===0||W.isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function ro(e){return z(e.code,e.source,e.relativePath,e.pluginId)}function Ta(e,n){let t=to(e,n.dir);if(!t)return {diagnostic:z("PATH_ESCAPED","node_modules","node_modules")};let i=Ia(t);if(!i)return {diagnostic:z("PATH_ESCAPED","node_modules",t)};let o=tt(n.skillMdPath);if(!o.readable)return {diagnostic:z("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:z("SKILL_INVALID",i,t)};let r=ba(n.dir,n.skillMdPath);if(!r)return {diagnostic:z("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(G.readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:bn({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:z("SKILL_READ_FAILED",i,t)}}}function ba(e,n){let t=W.relative(e,n).split(W.sep).join("/");try{return Pn(t)}catch{return null}}function Pa(e){if(!fa.test(e.appId))return {diagnostic:z("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??ge,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??wt.createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Da(e){return e.builtinCatalog}function Na(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Pn(n)}catch{return null}}function Sa(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Ma(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Na(s);if(!a){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let d=o.get(a);if(d&&JSON.stringify(d)!==JSON.stringify(s)){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let d=r.get(s);if(!d){t.push(z("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Sa(a);if(!c){t.push(z("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==d.appId||a.definitionHash!==void 0&&a.definitionHash!==d.summary.definitionHash){t.push(z("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let p={...d.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},y=e.indexOf(d);y>=0&&(e[y]={...d,summary:Object.freeze(p)});}}function La(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(d=>d.source!==r))i.add(a),n.push(z("RESERVED_ID",a.source,St(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(z("DUPLICATE_ID",a.source,St(a),a.appId));continue}for(let s of o)i.add(s),n.push(z("DUPLICATE_ID",s.source,St(s),s.appId));}return e.filter(o=>!i.has(o))}function St(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Oa(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(ro)}function Ra(e){return e.filesystem}function wa(e,n){let t=Ra(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function so(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Da(n),i=await Zi(e,wa(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[W.join(e,"skills"),W.join(e,"node_modules"),W.join(e,"apps")],s=[],a=[],d=[],c=new Set;for(let u of r)for(let I of si([u])){let g=to(e,I.dir);(g===null||!c.has(g))&&(d.push(I),g!==null&&c.add(g));}for(let u of d){let I=Ta(e,u);"diagnostic"in I?s.push(I.diagnostic):a.push(I);}let p=new Map,y=n.registeredProductBundle?.indexHash,A=(n.registeredProductBundle?.candidates??[]).filter(u=>y!==void 0&&u.provenance?.indexHash===y),_=[...i.apps??i.candidates??[],...A],T=new Set(A),D=new Set(y===void 0?[]:(t?.listMcpApps()??[]).filter(u=>u.provenance?.indexHash===y).map(u=>u.appId));for(let u of _){if(T.has(u)&&u.provenance?.indexHash===y&&D.has(u.appId))continue;let I=u.provenance===void 0?`workspace\0${u.relativePath}`:`bundled\0${u.provenance.indexHash}\0${u.provenance.packageDir}`;p.set(I,{candidate:u,packageRoot:u.relativePath});}let M=new Map(a.map(u=>[u.packageRoot,u])),x=[];for(let u of p.values()){let I=u.candidate.provenance===void 0?M.get(u.packageRoot):void 0,g=ma(u,I);x.push({...g.packageRoot===void 0?{}:{packageRoot:g.packageRoot},source:g.source,appId:g.appId,summary:g.summary});}let k=new Set([...p.values()].filter(u=>u.candidate.provenance===void 0).map(u=>u.packageRoot)),w=o===void 0?new Set:new Set(i.diagnostics.filter(u=>u.code==="RESERVED_ID"&&u.source!=="bundled").map(u=>u.relativePath)),v=new Set(o?.reservedAppIds??[]);for(let u of a){let I=ha(u);if(!(k.has(u.packageRoot)||w.has(u.packageRoot))){if(v.has(I.appId)){s.push(z("RESERVED_ID",u.source,u.packageRoot,I.appId));continue}x.push({packageRoot:I.packageRoot,source:I.source,appId:I.appId,summary:I.summary});}}let E=[...Oa(i.diagnostics,new Set(a.map(u=>u.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(u=>u.source==="bundled").map(ro)??[]],m=[];if(t)for(let u of t.listMcpApps()){let I=Pa(u);"diagnostic"in I?E.push(I.diagnostic):m.push(I);}let N=La([...x,...m],E);Ma(N,n,E);let S=N.map(u=>u.summary).sort((u,I)=>Tn(u.appId,I.appId)),f=[...E].sort((u,I)=>Tn(u.relativePath,I.relativePath)||Tn(u.code,I.code)||Tn(u.appId??"",I.appId??""));return Object.freeze({items:Object.freeze(S),diagnostics:Object.freeze(f)})}h();h();h();function Ua(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function ve(e,n){try{return Ua(n).test(e)}catch{return false}}function Dn(e,...n){let t=e.split("/");if(t.length<n.length)return false;let i=t.length-n.length;return n.every((o,r)=>ve(t[i+r],o))}function ka(e,n){return e.split("/").some(t=>ve(t,n))}var ao=[{label:".env*",test:e=>ve(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>ve(e,"*.key")},{label:"*.pem",test:e=>ve(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Dn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Dn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Dn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Dn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>ka(n,".crewx")}];function Nn(e,n,t){for(let i of ao)if(i.test(e,n,t))return i.label;return null}function Ot(e){let n=[],t=[];function i(o,r,s){let a;try{a=G__namespace.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((d,c)=>d.name.localeCompare(c.name));for(let d of a){let c=r?`${r}/${d.name}`:d.name,p=W__namespace.join(o,d.name);if(d.isSymbolicLink()){let y;try{y=G__namespace.statSync(p);}catch{t.push({path:c,rule:"symlink"});continue}if(y.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let A=s??Nn(d.name,c,false);A?t.push({path:c,rule:A}):t.push({path:c,rule:"symlink"});continue}if(d.isDirectory()){let y=s??Nn(d.name,c,true);i(p,c,y);continue}if(d.isFile()){let y=s??Nn(d.name,c,false);y?t.push({path:c,rule:y}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}h();var Ca=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function xa(e){return e.includes(0)}function Rt(e,n,t){let i=[];for(let o of n){let r=W__namespace.join(e,o),s;try{let d=t?.get(o);s=d===void 0?G__namespace.readFileSync(r):Buffer.from(d);}catch{continue}if(xa(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((d,c)=>{for(let{rule:p,regex:y}of Ca)y.test(d)&&i.push({path:o,line:c+1,rule:p});});}return i}h();h();var fe=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new fe(e,n)}var uo=/^[a-z0-9-]+$/,va=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,ja=/^[A-Za-z_][A-Za-z0-9_]*$/;function Va(e){let n=W__namespace.join(e,"crewx.yaml");if(!G__namespace.existsSync(n))return {};let t;try{t=fo__namespace.load(G__namespace.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Fa(e){return wt__namespace.createHash("sha256").update(e).digest("hex")}function yo(e){let n;try{n=G__namespace.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${W__namespace.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return wt__namespace.createHash("sha256").update(new Uint8Array(G__namespace.readFileSync(e))).digest("hex")}function Ba(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Ao(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||W__namespace.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function Ha(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function Io(e){if(!va.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function go(e,n,t={}){let i=Va(e),o=i.name??W__namespace.basename(e);if(!uo.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${uo} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");Io(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let p of s){if(typeof p!="string"||!ja.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);a.push(p);}let d=n.map(p=>(Ao(p),{path:p,sha256:yo(W__namespace.join(e,p))})).sort((p,y)=>p.path<y.path?-1:p.path>y.path?1:0),c={name:o,version:r,type:"template",description:i.description??"",files:d,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function za(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function mo(e,n){if(Ha(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(Io(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");for(let s of ["ui-plugin.json","ui/index.html"])if(!n.includedFiles.includes(`${i}${s}`))throw b("APP_UI_MANIFEST_INVALID",`screen App is missing ${s}`)}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Ao(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?yo(W__namespace.join(e,s)):Fa(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>Ba(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:za(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}h();function ho(e){return wt__namespace.createHash("sha256").update(e).digest("hex")}function Po(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||W__namespace.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=W__namespace.resolve(e),i=W__namespace.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${W__namespace.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Eo(e,n){let t=Po(e,n),i;try{i=G__namespace.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(G__namespace.readFileSync(t))}async function Do(e,n,t={}){let i=W__namespace.join(e,".crewx","publish");G__namespace.mkdirSync(i,{recursive:true});let o=W__namespace.join(i,`${n.name}-${n.version}.tgz`),r=W__namespace.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=G__namespace.mkdtempSync(W__namespace.join(_o__namespace.tmpdir(),"crewx-publish-"));try{let a=new Set,d=[];for(let c of n.files){if(a.has(c.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let p=t.generatedFiles?.get(c.path);if(c.generated===!0&&p===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let _=Eo(e,c.path);if(t.sourceFileHashes.get(c.path)!==ho(_))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let y=p??Eo(e,c.path);if(ho(y)!==c.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let A=Po(s,c.path);G__namespace.mkdirSync(W__namespace.dirname(A),{recursive:!0}),G__namespace.writeFileSync(A,new Uint8Array(y)),d.push(c.path);}G__namespace.writeFileSync(W__namespace.join(s,"manifest.json"),JSON.stringify(n,null,2)),await bo__namespace.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...d]),G__namespace.renameSync(r,o);}finally{try{G__namespace.rmSync(r,{force:!0});}catch{}G__namespace.rmSync(s,{recursive:true,force:true});}return o}h();h();var je="/api/v1";var Wa=201,Ja=200,Ka=409,Ut=401,No={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Xa(){return process.env.WI013_FAKE_UPLOAD==="1"}function Ya(e){let n=zlib.gunzipSync(new Uint8Array(e)),t=zlib.gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function qa(e){return e.replace(/\/+$/,"")}async function Ze(e){try{return await e.json()}catch{return null}}function So(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Za(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Qa(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Mo(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(No,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(No[s],a)}}async function ec(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=qa(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${je}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let d=await Ze(a),c=Za(d),p=Qa(d),y=r&&p!==void 0?p:i,A;if(a.status===Wa)A="created";else if(r&&a.status===Ja){if(c===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");A="existing";}else if(a.status===Ka){if(r)throw Mo(d,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);A="existing";}else throw a.status===Ut?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let _="not-needed",T=null;if(A==="existing"&&!r){let N;try{N=await fetch(`${n}${je}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let S=await Ze(N);if(N.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${N.status}`);let u=So(S,"publisher items",N.status)?.items;if(!Array.isArray(u))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${N.status}`);let I=u.find(g=>!g||typeof g!="object"?false:g.slug===i);if(!I||typeof I.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${N.status}`);if(T=I.version,T!==e.manifest.version){let g;try{g=await fetch(`${n}${je}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!g.ok)throw await Ze(g),g.status===Ut?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${g.status})`):g.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${g.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${g.status}`);_="applied";}}let D=G__namespace.readFileSync(e.tgzPath),M=Xa()?Ya(D):D,x=new FormData;x.set("archive",new Blob([new Uint8Array(M)],{type:"application/gzip"}),`${y}-${e.manifest.version}.tgz`);let k=r&&c!==void 0?c:i,w;try{w=await fetch(`${n}${je}/publisher/items/${encodeURIComponent(k)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:x});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(w.status===Ut)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!w.ok){let N=await Ze(w);if(r){let S=Mo(N,y);if(S)throw S}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${w.status}`)}let v=await Ze(w),E=So(v,"upload",w.status),m=typeof E.contentId=="string"&&E.contentId.length>0?E.contentId:c;if(r&&m===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:y,version:e.manifest.version,...m===void 0?{}:{contentId:m},artifactChecksum:E.artifactChecksum,artifactSizeBytes:E.artifactSizeBytes,submitOutcome:A,versionUpdate:_,serverVersionBefore:T}}var nc=1e4,tc=100*1024*1024;function kt(e){return wt__namespace.createHash("sha256").update(e).digest("hex")}function ic(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Mn(e,n){if(!n||n.includes("\\")||n.includes("\0")||W__namespace.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=W__namespace.resolve(e,...n.split("/")),i=W__namespace.resolve(e);if(t!==i&&!t.startsWith(`${i}${W__namespace.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=G__namespace.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(G__namespace.readFileSync(t))}function Ln(e,n){return e===n||e.startsWith(`${n}/`)}function oc(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Oo(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new fe("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function wo(e,n,t,i){let o=Oo(t.maxFileCount??t.maxFiles,nc,"max file count"),r=Oo(t.maxTotalBytes??t.maxBytes,tc,"max total bytes");if(n.length>o)throw new fe("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let d=i?.get(a);if(d!==void 0?s+=d.byteLength:s+=Mn(e,a).byteLength,s>r)throw new fe("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function rc(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function sc(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function ac(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function cc(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function dc(e,n){let t=[];for(let i of e.excluded)t.push(Ln(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)Ln(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(oc)}function pc(e,n,t,i){let o=`${t}/ui-plugin.json`;if(!i.includes(o))throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package ui-plugin.json");let r=Mn(e,o),s=kt(r),a;try{a=JSON.parse(Buffer.from(r).toString("utf8"));}catch{throw b("APP_UI_MANIFEST_INVALID","ui-plugin.json is not valid JSON")}let d;try{let A=_e(a,{mode:"local"});if(A.manifestVersion!==2)throw new Error("screen App requires manifestVersion 2");d=A;}catch(A){throw A instanceof J?b("APP_UI_MANIFEST_INVALID",A.code):b("APP_UI_MANIFEST_INVALID")}if(d.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT","ui-plugin.json pluginId no longer matches the selected App");let c=`${t}/ui/index.html`;if(!i.includes(c))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let p=kt(Mn(e,c)),y=JSON.parse(JSON.stringify(a));if(y.entryHash=p,Object.prototype.hasOwnProperty.call(y,"initialState")){let A=y.initialState;if(!ic(A)||A.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let _=`${t}/ui/state.json`;if(!i.includes(_))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let T=Mn(e,_);y.initialState={...A,hash:kt(T)};}try{let A=_e(y,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(Cn(A),"utf8")),sourceHash:s}}catch(A){throw A instanceof J?b("APP_UI_MANIFEST_INVALID",A.code):b("APP_UI_MANIFEST_INVALID")}}async function lc(e,n){let{included:t,excluded:i}=Ot(e);wo(e,t,n);let o=go(e,t,{version:n.version}),r=Rt(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function uc(e,n){sc(n);let t=await so(e),i=ac(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=cc(i),r=Ot(e);if(r.excluded.some(_=>Ln(_.path,o)&&(_.rule==="symlink"||_.rule==="symlink-dir")))throw b("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(_=>Ln(_,o)),a=dc(r,o),d=new Map,c=new Map;if(i.capabilities.includes("screen")){let _=pc(e,i,o,s);d.set(`${o}/ui-plugin.json`,_.bytes),c.set(`${o}/ui-plugin.json`,_.sourceHash);}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");wo(e,s,n,d);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:d},y=mo(e,p),A=Rt(e,s,d);return {plan:{manifest:y,included:s,excluded:a,secretFindings:A},archiveOptions:{generatedFiles:d,sourceFileHashes:c}}}async function Uo(e,n){let t=W__namespace.resolve(e);if(rc(n))return uc(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return lc(t,n)}async function Ol(e,n={}){return (await Uo(e,n)).plan}function fc(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new fe("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function ko(e,n={}){let t=W__namespace.resolve(e),i=await Uo(t,n);i.plan.secretFindings.length>0&&fc(i.plan.secretFindings);let o=await Do(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function Rl(e,n={}){return ko(e,n)}async function wl(e,n){let t=await ko(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
2
- exports.DEFAULT_PUBLISH_MAX_BYTES=tc;exports.DEFAULT_PUBLISH_MAX_FILES=nc;exports.EXCLUDE_RULES=ao;exports.MARKETPLACE_API_PREFIX=je;exports.PublishError=fe;exports.packApp=wl;exports.packPublish=ko;exports.packTemplate=Rl;exports.planPublish=Ol;exports.uploadToMarketplace=ec;
1
+ 'use strict';var ri=require('crypto'),net=require('net'),J=require('fs'),promises=require('fs/promises'),ee=require('path'),ir=require('js-yaml'),lr=require('os'),fr=require('tar'),zlib=require('zlib');function _interopNamespace(e){if(e&&e.__esModule)return e;var n=Object.create(null);if(e){Object.keys(e).forEach(function(k){if(k!=='default'){var d=Object.getOwnPropertyDescriptor(e,k);Object.defineProperty(n,k,d.get?d:{enumerable:true,get:function(){return e[k]}});}})}n.default=e;return Object.freeze(n)}var ri__namespace=/*#__PURE__*/_interopNamespace(ri);var J__namespace=/*#__PURE__*/_interopNamespace(J);var ee__namespace=/*#__PURE__*/_interopNamespace(ee);var ir__namespace=/*#__PURE__*/_interopNamespace(ir);var lr__namespace=/*#__PURE__*/_interopNamespace(lr);var fr__namespace=/*#__PURE__*/_interopNamespace(fr);var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var g=j(()=>{});var O,gn=j(()=>{g();O=class extends Error{constructor(t,i=t,r){super(i);this.code=t;this.currentRevision=r;}code;currentRevision;name="UiRuntimeError"};});function Yn(e){return Nr.test(e)||Sr.test(e)}function oe(){throw new O("INPUT_INVALID","JSON value is not projection-safe")}function Rr(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Kn(e,n,t,i,r,o){if(n>i&&oe(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(Mr.test(e)||Or.test(e)&&!Cr(r,o)||Lr.test(e))&&oe(),e;if(typeof e=="number")return Number.isFinite(e)||oe(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&oe();let s=e;t.has(s)&&oe(),t.add(s);try{if(Array.isArray(e))return e.map(d=>Kn(d,n+1,t,i,r,o));Rr(s)||oe();let a={};for(let[d,c]of Object.entries(e))Yn(d)&&oe(),a[d]=Kn(c,n+1,t,i,[...r,d],o);return a}finally{t.delete(s);}}function he(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>Ur)&&oe(),(!Array.isArray(t)||t.some(r=>typeof r!="string"))&&oe();let i=Kn(e,0,new Set,wr+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&oe(),i}function Fe(e,n){if(!e||!n)return false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((r,o)=>t[o]===r)}function Cr(e,n){if(e.length===0)return false;let t=e.join(".");return n.some(i=>Fe(t,i))}function Be(e){try{let n=JSON.stringify(e);return n===void 0&&oe(),n}catch{oe();}}function Xn(e){return Array.isArray(e)?e.map(Xn):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Xn(e[n])])):e}function X(e){return Be(Xn(e))}function qn(e){return Buffer.byteLength(e,"utf8")}var Nr,Sr,Mr,Lr,Or,wr,Ur,_e=j(()=>{g();gn();Nr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Sr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,Mr=/<\/?[A-Za-z][^>]*>/,Lr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Or=/^(?:https?|file|ftp|ws|wss):\/\//i;wr=8,Ur=4;});function Zn(e){return X(e)}var ci=j(()=>{g();_e();});function He(e){return kr.has(e)||xr.test(e)||vr.test(e)}var di,kr,xr,vr,mn,Qe,le,Qn,et,nt,tt,it,we=j(()=>{g();di=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],kr=new Set(di),xr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,vr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;mn=/^[A-Za-z0-9_]+$/,Qe=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,le=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Qn=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,et=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,nt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,tt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],it=["inline","panel"];});function ot(e){return typeof e=="string"&&pi.includes(e)}var pi,li=j(()=>{g();we();pi=["text/plain","application/json"];});function hn(e){if(!rt(e))return false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!jr(e.in)||Object.hasOwn(e,"out")&&!Vr(e.out))}function jr(e){return rt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&ot(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Vr(e){return rt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&ot(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function rt(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var st=j(()=>{g();li();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function ce(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(r=>r.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=he(t);return ri.createHash("sha256").update(X(i)).digest("hex")}function Ee(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new O("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Br.test(e.sourceHash)))throw new O("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ce(e)!==e.hash)throw new O("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!zr(i)))throw new O("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new O("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new O("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new O("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&at(t.resultProjection),t.content!==void 0&&!hn(t.content))throw new O("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new O("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new O("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new O("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new O("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new O("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new O("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new O("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new O("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&at(e.stateProjection),e.summaryProjection){at(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new O("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(r=>!["readTool","actionTool","hostTools","agentAccess"].includes(r)))throw new O("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[r,o]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(o!==void 0){if(Hr(o,r==="readTool"),n.has(o.name))throw new O("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(o.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new O("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let r={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[o,s]of Object.entries(t)){if(!Object.hasOwn(r,o)||r[o]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new O("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([r,o])=>!r||!Object.hasOwn(e.actions,r)||o!=="allowed"&&o!=="denied")))throw new O("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new O("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>Fe(t,i))))throw new O("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function Hr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new O("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],r=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(o=>!i.includes(o)&&!(n&&o==="fixedResult"))||i.some(o=>!Object.hasOwn(t,o))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(o=>o!=="model"&&o!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new O("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let o=he(t.inputSchema);if(o.type!==void 0&&o.type!=="object")throw new Error("schema type");if(r){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let d=he(a.structuredContent);if(qn(Be(d))>4*1024)throw new Error("fixed result size")}}catch{throw new O("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function at(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new O("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function zr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Br,Ue=j(()=>{g();_e();gn();st();Br=/^[0-9a-f]{64}$/;});function V(e){throw new ct(e)}function ns(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function ts(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&V("CSP_ORIGIN_INVALID"),t.value}function _n(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=ts(e,n);Array.isArray(t)||V("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(o=>typeof o!="string"||o!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(o))&&V("CSP_ORIGIN_INVALID");let r=[];for(let o=0;o<t.length;o+=1)(!Object.prototype.hasOwnProperty.call(t,o)||typeof t[o]!="string")&&V("CSP_ORIGIN_INVALID"),r.push(t[o]);return Object.keys(t).length!==t.length&&V("CSP_ORIGIN_INVALID"),r}function is(e){let n;try{n=JSON.stringify(e);}catch{V("CSP_ORIGIN_INVALID");}return n===void 0&&V("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function yi(e,n){/\s|\\/u.test(e)&&V("CSP_ORIGIN_INVALID");let t=Yr.exec(e);t||V("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),r=t[2];(r.includes("@")||r.includes("%")||r.includes("*"))&&V("CSP_ORIGIN_INVALID"),(r.startsWith("[")?qr:Zr).test(r)||V("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&V("CSP_ORIGIN_INVALID");let s;try{s=new URL(e);}catch{V("CSP_ORIGIN_INVALID");}(s.protocol!==`${i}:`||s.username!==""||s.password!==""||s.search!==""||s.hash!=="")&&V("CSP_ORIGIN_INVALID");let a=s.hostname.toLowerCase();if((!a||a.includes("%"))&&V("CSP_ORIGIN_INVALID"),!a.startsWith("[")){let c=a.endsWith(".")?a.slice(0,-1):a;(c.length===0||c.length>253)&&V("CSP_ORIGIN_INVALID"),c.split(".").some(l=>l.length>63||!Qr.test(l))&&V("CSP_ORIGIN_INVALID");}let d=s.origin;return (d==="null"||!d.startsWith(`${i}://`))&&V("CSP_ORIGIN_INVALID"),{origin:d,hostname:a}}function os(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function Ai(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function mi(e){let n=os(e);return Ai(n,3221225472,24)?n!==3221225481&&n!==3221225482:es.some(([t,i])=>Ai(n,t,i))}function rs(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((o,s)=>o<<16n|BigInt(Number.parseInt(s,16)),0n)}function ss(e){let n=rs(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let r=Number(n&0xffffffffn);return mi([r>>>24&255,r>>>16&255,r>>>8&255,r&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function as(e){let n=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,t=net.isIP(n);if(t===4)return mi(n);if(t===6)return ss(n);let i=e.toLowerCase().replace(/\.$/,"");return !i||!i.includes(".")?true:Xr.some(r=>i===r||i.endsWith(`.${r}`))}function Ii(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function gi(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function hi(e){if(e===void 0){let l=gi({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:ri.createHash("sha256").update(l,"utf8").digest("hex")})}ns(e)||V("CSP_ORIGIN_INVALID");let n=Reflect.ownKeys(e);n.some(l=>typeof l!="string")&&V("CSP_ORIGIN_INVALID"),n.some(l=>!Kr.has(l))&&V("CSP_AXIS_UNKNOWN");let t=_n(e,"connectDomains"),i=_n(e,"frameDomains"),r=_n(e,"resourceDomains"),o=_n(e,"baseUriDomains");(r.length>0||o.length>0)&&V("CSP_AXIS_UNSUPPORTED"),(is(e)>Gr||t.length>fi||i.length>fi||t.length+i.length>Wr||[...t,...i].some(l=>new TextEncoder().encode(l).byteLength>Jr))&&V("CSP_LIMIT_EXCEEDED");let a=t.map(l=>yi(l,"connectDomains")),d=i.map(l=>yi(l,"frameDomains"));[...a,...d].some(l=>as(l.hostname))&&V("CSP_ORIGIN_FORBIDDEN");let c={declared:true,connectDomains:Ii(a),frameDomains:Ii(d)},p=gi(c);return Object.freeze({...c,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:ri.createHash("sha256").update(p,"utf8").digest("hex")})}var Gr,fi,Wr,Jr,Kr,Xr,Yr,qr,Zr,Qr,es,ct,_i=j(()=>{g();Gr=4096,fi=16,Wr=32,Jr=512,Kr=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),Xr=["localhost","local","internal","home.arpa","test","example","invalid","onion"],Yr=/^(https|wss):\/\/([^/?#]+)$/i,qr=/^\[[^\]]+\](?::[0-9]+)?$/,Zr=/^[^:\[\]]+(?::[0-9]+)?$/,Qr=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,es=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],ct=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});var Le,dt=j(()=>{g();Le="window";});function nn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function u(e,n=e,t,i){throw new q(e,n,t,i)}function H(e,n){try{return n()}catch(t){throw t instanceof q?t.withPathPrefix(e):t}}function z(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function k(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function $(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e).find(s=>!i.has(s));r!==void 0&&u("MANIFEST_INVALID","MANIFEST_INVALID",r,"unknown-key");let o=n.find(s=>!k(e,s));o!==void 0&&u("MANIFEST_INVALID","MANIFEST_INVALID",o,"missing-key");}function Dn(e,n=false,t=false,i=false){return ls.test(e)||!i&&fs.test(e)||us.test(e)||t&&Ei.test(e)||ys.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ei.test(e))}function Pn(e,n=new Set,t=0,i=false,r=false,o=""){if(typeof e=="string"){Dn(e,i,r)&&u("UNSAFE_VALUE","UNSAFE_VALUE",o,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&u("MANIFEST_INVALID","MANIFEST_INVALID",o),n.add(e);try{if(Array.isArray(e)){e.forEach((s,a)=>Pn(s,n,t+1,!1,!1,nn(o,`[${a}]`)));return}z(e)||u("MANIFEST_INVALID","MANIFEST_INVALID",o);for(let[s,a]of Object.entries(e))Pn(a,n,t+1,i&&t===0&&(s==="name"||s==="description"),r,nn(o,s));}finally{n.delete(e);}}}function ue(e,n){let t=e[n];return typeof t!="string"&&u("MANIFEST_INVALID"),t}function de(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&u("MANIFEST_INVALID"),i}function pt(e){return ps.test(e)||u("MANIFEST_INVALID"),e}function ze(e){return ds.test(e)||u("TOKEN_INVALID"),e}function Cs(e){return Oi.test(e)||u("MANIFEST_INVALID"),e}function ks(e){z(e)||u("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let r=Cs(t);z(i)||u("MANIFEST_INVALID");let o=i.type;if(o==="text"){$(i,["type","maxLength"]),n[r]={type:o,maxLength:de(i,"maxLength",1)};continue}if(o==="text-list"){$(i,["type","max","itemMaxLength"]),n[r]={type:o,max:de(i,"max",0),itemMaxLength:de(i,"itemMaxLength",1)};continue}if(o==="step-list"){$(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=de(i,"min",0),a=de(i,"max",1);s>a&&u("MANIFEST_INVALID"),n[r]={type:o,min:s,max:a,labelMaxLength:de(i,"labelMaxLength",1),detailMaxLength:de(i,"detailMaxLength",1)};continue}typeof o=="string"&&u("SCHEMA_TYPE_UNSUPPORTED"),u("MANIFEST_INVALID");}return n}function xs(e,n,t){let i=e[n];(!i||i.type!==t)&&u("MANIFEST_INVALID");}function En(e,n,t){let i=ue(e,"field");return Oi.test(i)||u("MANIFEST_INVALID"),xs(n,i,t),i}function vs(e,n){z(e)||u("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&u("MANIFEST_INVALID"),Us.includes(t)||u("PRIMITIVE_UNKNOWN"),t){case "card-shell":return $(e,["primitive"]),{primitive:t};case "meta-banner":return $(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:ze(ue(e,"badgeToken")),noticeToken:ze(ue(e,"noticeToken"))};case "heading":return $(e,["primitive","field"]),{primitive:t,field:En(e,n,"text")};case "labeled-text":return $(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&u("MANIFEST_INVALID"),{primitive:t,titleToken:ze(ue(e,"titleToken")),field:En(e,n,"text"),variant:"callout"};case "step-flow":return $(e,["primitive","titleToken","field"]),{primitive:t,titleToken:ze(ue(e,"titleToken")),field:En(e,n,"step-list")};case "text-list":{$(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:ze(ue(e,"titleToken")),field:En(e,n,"text-list")};return k(e,"emptyToken")&&(i.emptyToken=ze(ue(e,"emptyToken"))),k(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&u("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return u("MANIFEST_INVALID")}function js(e,n){return Array.isArray(e)||u("MANIFEST_INVALID"),e.map(t=>vs(t,n))}function G(e="v2 manifest exceeds a contract limit",n,t){return u("LIMIT_EXCEEDED",e,n,t)}function re(e="initial state is not projection-safe"){return u("INITIAL_STATE_INVALID",e)}function Ti(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||Os.test(e)||Rs.test(e))&&u("MANIFEST_INVALID",`${n} is invalid`),(Dn(e,true,true)||As.test(e)||Is.test(e)||gs.test(e))&&u("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function lt(e,n){return (typeof e!="string"||!le.test(e))&&u("MANIFEST_INVALID",`${n} is invalid`),e}function Vs(e){return (typeof e!="string"||!Qn.test(e)||e==="*"||e==="all")&&u("MANIFEST_INVALID","action capability is invalid"),e}function Ri(e){return (typeof e!="string"||!Ls.test(e))&&u("MANIFEST_INVALID","resource hash is invalid"),e}function ut(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&G("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||u("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&u("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&u("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&G("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&u("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&G("v2 manifest array is too long",i,"array-too-long"),e.forEach((r,o)=>ut(r,n,t+1,nn(i,`[${o}]`)));return}z(e)||u("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[r,o]of Object.entries(e))ut(o,n,t+1,nn(i,r));}finally{n.delete(e);}}}function wi(e){return (typeof e!="string"||e.length>4096||!Qe.test(e))&&(typeof e=="string"&&e.length>4096&&G("projection path is too long"),u("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>He(t))&&u("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function ft(e){z(e)||u("MANIFEST_INVALID","projection policy must be an object"),$(e,["allow"]),Array.isArray(e.allow)||u("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&G("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let r=wi(i);t.has(r)&&u("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(r),n.push(r);}return {allow:n}}function Fs(e,n){if(e===void 0)return;Array.isArray(e)||u("MANIFEST_INVALID","dataPaths must be an array"),e.length>ws&&G("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let r of e){let o=wi(r);i.has(o)&&u("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>Fe(o,s))||u("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(o),t.push(o);}return t}function $e(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&u("MANIFEST_INVALID",`${n} is invalid`),e}function Pi(e,n){return (typeof e!="number"||!Number.isFinite(e))&&u("MANIFEST_INVALID",`${n} is invalid`),e}function yt(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||Dn(e))&&u("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||u("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&G("schema enum is too deep"),t.has(e)&&u("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&G("schema enum array is too long"),e.map(r=>yt(r,n+1,t));z(e)||u("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[r,o]of Object.entries(e))He(r)&&u("MANIFEST_INVALID","schema enum contains a reserved key"),i[r]=yt(o,n+1,t);return i}finally{t.delete(e);}}function Bs(e,n){if(e===void 0)return;Array.isArray(e)||u("MANIFEST_INVALID","schema required must be an array"),e.length>64&&G("schema required list is too long");let t=[],i=new Set;for(let r of e)(typeof r!="string"||!Qe.test(r))&&u("MANIFEST_INVALID","schema required contains an invalid key"),r.length>4096&&G("schema required key is too long"),i.has(r)&&u("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,r)&&u("MANIFEST_INVALID","schema required references an undeclared property"),i.add(r),t.push(r);return t}function Hs(e,n){let t=n?Qe:mn;return e.length>4096&&G("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>He(i)))&&u("MANIFEST_INVALID","schema property name is invalid"),e}function At(e,n=0,t=false){z(e)||u("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&G("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&u("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),u("MANIFEST_INVALID","action inputSchema type is required"));let r=["type","enum"];i==="string"&&r.push("minLength","maxLength"),i==="array"&&r.push("minItems","maxItems","items"),i==="object"&&r.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&r.push("minimum","maximum"),$(e,["type"],r.filter(a=>a!=="type"));let o={type:i};if(k(e,"enum")&&(Array.isArray(e.enum)||u("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&G("schema enum is too long"),o.enum=e.enum.map(a=>yt(a))),i==="string"&&(k(e,"minLength")&&(o.minLength=$e(e.minLength,"schema minLength",4096)),k(e,"maxLength")&&(o.maxLength=$e(e.maxLength,"schema maxLength",4096)),o.minLength!==void 0&&o.maxLength!==void 0&&o.minLength>o.maxLength&&u("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(k(e,"minimum")&&(o.minimum=Pi(e.minimum,"schema minimum")),k(e,"maximum")&&(o.maximum=Pi(e.maximum,"schema maximum")),o.minimum!==void 0&&o.maximum!==void 0&&o.minimum>o.maximum&&u("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(k(e,"minItems")&&(o.minItems=$e(e.minItems,"schema minItems",128)),k(e,"maxItems")&&(o.maxItems=$e(e.maxItems,"schema maxItems",128)),o.minItems!==void 0&&o.maxItems!==void 0&&o.minItems>o.maxItems&&u("MANIFEST_INVALID","schema array length bounds are inverted"),k(e,"items")&&(o.items=At(e.items,n+1,false))),i==="object"){let a;if(k(e,"properties")){z(e.properties)||u("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&G("schema properties are too many"),a={};for(let[p,l]of c){let I=Hs(p,t);a[I]=At(l,n+1,false);}o.properties=a;}k(e,"minProperties")&&(o.minProperties=$e(e.minProperties,"schema minProperties",64)),k(e,"maxProperties")&&(o.maxProperties=$e(e.maxProperties,"schema maxProperties",64)),o.minProperties!==void 0&&o.maxProperties!==void 0&&o.minProperties>o.maxProperties&&u("MANIFEST_INVALID","schema object property bounds are inverted");let d=Bs(e.required,a);d!==void 0&&(o.required=d),k(e,"additionalProperties")&&(e.additionalProperties!==false&&u("MANIFEST_INVALID","schema additionalProperties must be false"),o.additionalProperties=false);}let s=JSON.stringify(o);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&G("action inputSchema subtree is too large"),o}function zs(e){let n=At(e,0,true);return (n.type!=="object"||!n.properties)&&u("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function $s(e){if(z(e)||u("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){$(e,Ds);let n=e.handler;return (typeof n!="string"||!et.test(n))&&u("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){$(e,bs,Ns),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&u("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!nt.test(i))&&u("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=k(e,"env")?Ws(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}u("MANIFEST_INVALID","action backend type is unsupported");}function Gs(e){z(e)||u("MANIFEST_INVALID","action must be an object"),$(e,Es,Ts),k(e,"_meta")&&H("_meta",()=>Ui(e._meta));let n=H("actionId",()=>lt(e.actionId,"actionId"));Yn(n)&&u("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=H("capability",()=>Vs(e.capability)),i=e.mutation;typeof i!="boolean"&&u("MANIFEST_INVALID","action mutation must be boolean","mutation");let r=H("inputSchema",()=>zs(e.inputSchema)),o;if(k(e,"dataInputs")){Array.isArray(e.dataInputs)||u("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let p=r.properties,l=new Set,I=[];for(let _ of e.dataInputs)(typeof _!="string"||!k(p,_)||l.has(_))&&u("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),l.add(_),I.push(_);o=I;}let s=H("resultProjection",()=>ft(e.resultProjection)),a=H("backend",()=>$s(e.backend)),d;k(e,"content")&&((a.type!=="skill"||!hn(e.content))&&u("MANIFEST_INVALID","action content declaration is invalid","content"),d=Js(e.content));let c;if(k(e,"confirmation")){let p=e.confirmation;p!=="none"&&p!=="native"&&u("MANIFEST_INVALID","action confirmation is invalid","confirmation"),c=p;}return {actionId:n,capability:t,mutation:i,inputSchema:r,resultProjection:s,backend:a,...d===void 0?{}:{content:d},...o===void 0?{}:{dataInputs:o},...c===void 0?{}:{confirmation:c}}}function Ws(e){(!Array.isArray(e)||e.length===0)&&u("MANIFEST_INVALID","skill backend env is invalid");let n=new Set,t=[];for(let i of e)(i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID"||n.has(i))&&u("MANIFEST_INVALID","skill backend env is invalid"),n.add(i),t.push(i);return Object.freeze(t)}function Js(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Ks(e){return z(e)||u("INITIAL_STATE_INVALID","initialState must be an object"),$(e,Ss,Ms),e.path!=="ui/state.json"&&u("MANIFEST_INVALID","initialState path is not fixed"),k(e,"hash")?{path:"ui/state.json",hash:Ri(e.hash)}:{path:"ui/state.json"}}function Xs(e){let n=["wasm","terminal","htmlDocuments"];return (!z(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&u("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function Ys(e,n){Pn(e,new Set,0,true,true),ut(e),z(e)||u("MANIFEST_INVALID"),$(e,hs,_s),k(e,"_meta")&&H("_meta",()=>Ui(e._meta)),e.manifestVersion!==2&&u("MANIFEST_INVALID");let t;k(e,"runtime")&&(t=H("runtime",()=>Xs(e.runtime)));let i=H("pluginId",()=>lt(e.pluginId,"pluginId")),r=H("definitionId",()=>lt(e.definitionId,"definitionId")),o=H("version",()=>de(e,"version",1)),s=H("name",()=>Ti(e.name,"name")),a=H("description",()=>Ti(e.description,"description")),d;k(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&u("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let c;k(e,"tone")&&((typeof e.tone!="string"||!tt.includes(e.tone))&&u("MANIFEST_INVALID","tone is invalid","tone"),c=e.tone),e.entry!=="ui/index.html"&&u("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let p;k(e,"entryHash")&&(p=H("entryHash",()=>Ri(e.entryHash)));let l;k(e,"initialState")&&(l=H("initialState",()=>Ks(e.initialState)));let I;k(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&u("MANIFEST_INVALID","usage is invalid","usage"),I=e.usage);let _;k(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&u("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),_=e.detailPanel);let E;if(k(e,"displayModes")){((I??Le)!==Le||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&u("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let M=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(y=>typeof y!="string"||!M.has(y)))&&u("MANIFEST_INVALID","displayModes are invalid","displayModes"),E=e.displayModes;}(I??Le)===Le&&_!==void 0&&u("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let L=n.mode??"local";L!=="local"&&L!=="installed"&&L!=="published"&&u("MANIFEST_INVALID","manifest mode is invalid"),L!=="local"&&p===void 0&&u("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),L!=="local"&&l!==void 0&&l.hash===void 0&&u("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&u("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&G("surfaces exceed the v2 limit","surfaces","too-many-items");let b=[],v=new Set;for(let M of e.surfaces)(typeof M!="string"||!it.includes(M))&&u("MANIFEST_INVALID","surface is unsupported","surfaces"),v.has(M)&&u("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),v.add(M),b.push(M);z(e.size)||u("MANIFEST_INVALID","size must be an object","size"),H("size",()=>$(e.size,["height"]));let U=H("size",()=>de(e.size,"height",1));U>720&&G("size.height exceeds the v2 limit","size.height","too-large");let C=H("stateProjection",()=>ft(e.stateProjection)),F=e.summaryProjection===void 0?void 0:H("summaryProjection",()=>ft(e.summaryProjection));F!==void 0&&F.allow.some(M=>!C.allow.includes(M))&&u("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let h=H("dataPaths",()=>Fs(e.dataPaths,C.allow));Array.isArray(e.actions)||u("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&G("actions exceed the v2 limit","actions","too-many-items");let m=[],N=new Set;for(let[M,y]of e.actions.entries()){let f=`actions[${M}]`,A=H(f,()=>Gs(y));if(N.has(A.actionId)&&u("MANIFEST_INVALID","actions contain a duplicate actionId",`${f}.actionId`,"duplicate-item"),A.backend.type==="core"&&A.backend.handler==="state.set"){A.mutation||u("MANIFEST_INVALID","state.set actions must be mutations",`${f}.mutation`);for(let D of Object.keys(A.inputSchema.properties))C.allow.includes(D)||u("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${f}.inputSchema.properties`);}N.add(A.actionId),m.push(A);}return {manifestVersion:2,pluginId:i,definitionId:r,version:o,name:s,description:a,...d===void 0?{}:{icon:d},...c===void 0?{}:{tone:c},entry:"ui/index.html",...p===void 0?{}:{entryHash:p},...t===void 0?{}:{runtime:t},...l===void 0?{}:{initialState:l},...I===void 0?{}:{usage:I},..._===void 0?{}:{detailPanel:_},...E===void 0?{}:{displayModes:E},surfaces:b,size:{height:U},stateProjection:C,...F===void 0?{}:{summaryProjection:F},...h===void 0?{}:{dataPaths:h},actions:m}}function Ui(e){z(e)||u("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>Ps)&&G("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function qs(e){let n={},t={};for(let o of e.actions){n[o.actionId]={capabilities:[o.capability],inputKeys:Object.keys(o.inputSchema.properties??{}),...o.dataInputs===void 0?{}:{dataInputs:o.dataInputs},resultProjection:o.resultProjection,...o.confirmation===void 0?{}:{confirmation:o.confirmation},...o.content===void 0?{}:{content:o.content},...o.backend.type!=="skill"||o.backend.env===void 0?{}:{env:o.backend.env}};let s=o.backend.type==="skill"||o.backend.type==="core"&&o.backend.handler==="state.set";t[o.actionId]={actionId:o.actionId,mutation:o.mutation,backend:o.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},r={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:r}}function It(e,n,t,i,r,o){if(typeof e=="string"){let s=r.length>0&&o.some(a=>Fe(r.join("."),a));return (e.length>4096||Dn(e,false,false,s))&&re("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||re("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&re("state contains a non-JSON value"),t>8&&re("state is too deep"),n.has(e)&&re("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&re("state array is too long"),s=e.map(d=>It(d,n,t+1,65536,r,o));else {z(e)||re("state contains a non-plain object");let d={};for(let[c,p]of Object.entries(e))(c.length>4096||!mn.test(c)||He(c))&&(c.length>4096&&re("state key is too long"),re("state contains a reserved or invalid key")),d[c]=It(p,n,t+1,65536,[...r,c],o);s=d;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&re("state subtree is too large"),s}finally{n.delete(e);}}function mt(e,n=[]){z(e)||re("initial state must be a JSON object");let t=It(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&re(),t}function Zs(e,n={}){Pn(e),z(e)||u("MANIFEST_INVALID"),$(e,ms),e.manifestVersion!==1&&u("MANIFEST_INVALID");let t=pt(ue(e,"pluginId")),i=pt(ue(e,"definitionId")),r=de(e,"version",1),o=de(e,"primitiveSet",1),s=n.supportedPrimitiveSet??cs;(!Number.isSafeInteger(s)||s<1)&&u("MANIFEST_INVALID"),o>s&&u("PRIMITIVE_SET_UNSUPPORTED"),z(e.activation)||u("MANIFEST_INVALID"),$(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&u("MANIFEST_INVALID");let a=pt(ue(e.activation,"language")),d=ks(e.schema),c=js(e.layout,d);return {manifestVersion:1,pluginId:t,definitionId:i,version:r,primitiveSet:o,activation:{kind:"fenced-code",language:a},schema:d,layout:c}}function Qs(e,n={}){return z(e)||u("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&u("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Ys(e,n):Zs(e,n)}function ke(e,n={}){try{return Qs(e,n)}catch(t){if(t instanceof q)throw t;return u("MANIFEST_INVALID")}}function tn(e,n={}){let t=ke(e,n);return t.manifestVersion===2?qs(t):t}var cs,ds,ps,Oi,ls,us,fs,ys,Ei,As,Is,gs,ms,hs,_s,Es,Ts,Ps,Ds,bs,Ns,Ss,Ms,Ls,Os,Rs,ws,Us,q,ht=j(()=>{g();dt();_e();st();we();cs=1,ds=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,ps=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Oi=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,ls=/<\/?[A-Za-z][^>]*>/,us=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,fs=/^(?:https?|file|ftp|ws|wss):\/\//i,ys=/^\s*(?:javascript|data):/i,Ei=/data:[^,\s]*,/i,As=/(?:https?|file|ftp|ws|wss):\/\//i,Is=/javascript:/i,gs=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,ms=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],hs=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],_s=["_meta","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],Es=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Ts=["confirmation","dataInputs","content","_meta"],Ps=4*1024,Ds=["type","handler"],bs=["type","command"],Ns=["env"],Ss=["path"],Ms=["hash"],Ls=/^[0-9a-f]{64}$/,Os=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,Rs=/[\r\n]/,ws=16,Us=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],q=class e extends Error{constructor(t,i=t,r,o){super(i);this.code=t;this.path=r;this.rule=o;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,nn(t,this.path),this.rule)}};});function vi(e){return typeof e=="string"&&e.length<=na&&ea.test(e)}function w(e,n,t,i,r){throw new ye(e,{path:n,rule:t,...i===void 0?{}:{message:i},...r===void 0?{}:{file:r}})}function se(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Z(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function fe(e){let n=`_meta["${Oe}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function ra(e){return e.toLowerCase().replace(/_/g,"-")}function sa(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return fe(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return fe("definitionVersion");case "definitionId":return fe("definitionId");default:return fe(`${t}${i}`)}}function ji(e,n,t){return {path:t(e.path),rule:e.rule??ra(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function Vi(e){return JSON.parse(JSON.stringify(e))}function Tt(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&w("LIMIT_EXCEEDED",n,"string-too-long"),(ta.test(e)||ia.test(e)||oa.test(e))&&w("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||w("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&w("MANIFEST_INVALID",n,"non-json-value"),t>8&&w("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&w("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&w("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((r,o)=>Tt(r,`${n}[${o}]`,t+1,i));return}se(e)||w("MANIFEST_INVALID",n,"non-plain-object");for(let[r,o]of Object.entries(e))Tt(o,n===""?r:`${n}.${r}`,t+1,i);}finally{i.delete(e);}}}function pe(e,n){return (typeof e!="string"||e.length===0)&&w("MANIFEST_INVALID",n,"string"),e}function We(e,n){return se(e)||w("MANIFEST_INVALID",n,"object"),e}function aa(e,n){Array.isArray(e)||w("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>pe(t,`${n}[${i}]`));}function ca(e,n){typeof e!="boolean"&&w("MANIFEST_INVALID",n,"boolean");}function on(e,n,t,i){for(let r of Object.keys(e))!t.includes(r)&&!i.includes(r)&&w("MANIFEST_INVALID",`${n}.${r}`,"unknown-key");for(let r of t)Z(e,r)||w("MANIFEST_INVALID",`${n}.${r}`,"missing-key");}function da(e,n){switch(Tt(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "icon":case "license":pe(n,e);return;case "author":{let t=We(n,e);on(t,e,["name"],["email","url"]);for(let i of Object.keys(t))pe(t[i],`${e}.${i}`);return}case "repository":{let t=We(n,e);on(t,e,[],["type","url"]);for(let i of Object.keys(t))pe(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=We(t,r);on(o,r,["src","size"],["theme"]),pe(o.src,`${r}.src`),pe(o.size,`${r}.size`),Z(o,"theme")&&pe(o.theme,`${r}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":aa(n,e);return;case "tools":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=We(t,r);on(o,r,["name"],["description"]),pe(o.name,`${r}.name`),Z(o,"description")&&pe(o.description,`${r}.description`);});return}case "prompts":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=We(t,r);on(o,r,["name","text"],["description","arguments"]),pe(o.name,`${r}.name`),pe(o.text,`${r}.text`);});return}case "tools_generated":case "prompts_generated":ca(n,e);return;case "localization":case "compatibility":case "user_config":We(n,e);return;default:w("MANIFEST_INVALID",e,"unknown-key");}}function pa(e){let n=fe("csp"),t;try{t=hi(e);}catch(i){let r=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";w("MANIFEST_INVALID",n,r.toLowerCase().replace(/_/g,"-"),r);}(t.connectDomains.length>0||t.frameDomains.length>0)&&w("MANIFEST_INVALID",n,"csp-not-enabled","external origins in csp are not enabled in this rollout");}function bn(e){return typeof e=="string"&&le.test(e)?e:void 0}function Fi(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function la(e){let n=bn(e.name);if(n===void 0)return;let t=e._meta,i=se(t)?t[Oe]:void 0,r=se(i)?i:{},o=Z(r,"definitionId")?bn(r.definitionId):n,s=Z(r,"definitionVersion")?Fi(r.definitionVersion):1;return {pluginId:n,...o===void 0?{}:{definitionId:o},...s===void 0?{}:{definitionVersion:s}}}function ua(e){let n=bn(e.pluginId);if(n===void 0)return;let t=bn(e.definitionId),i=Fi(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function Nt(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!se(n))return !1;let t=n._meta;return se(t)&&Z(t,Oe)}catch{return false}}function fa(e,n){if(e===Ae)return n.builtinOnly===true;let t=n._meta,i=se(t)?t[Oe]:void 0;return se(i)&&i.builtinOnly===true}function ya(e){Z(e,"server")&&w("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let s of Object.keys(e))Dt.includes(s)||w("MANIFEST_INVALID",s,"unknown-key");for(let s of bt)Z(e,s)||w("MANIFEST_INVALID",s,"missing-key");e.manifest_version!==_t&&w("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${_t}"`),vi(e.version)||w("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let n=e._meta;se(n)||w("MANIFEST_INVALID","_meta","object"),Z(n,Oe)||w("MANIFEST_INVALID",fe(),"missing-key");let t=n[Oe];se(t)||w("MANIFEST_INVALID",fe(),"object");for(let s of Object.keys(t))Et.includes(s)||xi.includes(s)||w("MANIFEST_INVALID",fe(s),"unknown-key");for(let s of Et)Z(t,s)||w("MANIFEST_INVALID",fe(s),"missing-key");if(Z(t,"definitionVersion")){let s=t.definitionVersion;(!Number.isSafeInteger(s)||s<1)&&w("MANIFEST_INVALID",fe("definitionVersion"),"positive-integer");}Z(t,"csp")&&pa(t.csp);let i={};for(let s of ki)Z(e,s)&&(da(s,e[s]),i[s]=Vi(e[s]));let r={};for(let[s,a]of Object.entries(n))s!==Oe&&(r[s]=a);let o={manifestVersion:2,pluginId:e.name,definitionId:Z(t,"definitionId")?t.definitionId:e.name,version:Z(t,"definitionVersion")?t.definitionVersion:1,name:e.display_name,description:e.description};for(let[s,a]of Object.entries(t))s==="definitionId"||s==="definitionVersion"||s==="csp"||(o[s]=a);return Object.keys(r).length>0&&(o._meta=r),{v2Input:o,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:i}}function Aa(e,n){se(e)||w("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",te);let t;try{t=ya(e);}catch(o){throw o instanceof ye?new ye(o.code,{...o.reason,file:te}):o}let i;try{let o=ke(t.v2Input,{mode:n.mode??"local"});o.manifestVersion!==2&&w("MANIFEST_INVALID","","v2-required"),i=o;}catch(o){throw o instanceof q?new ye(o.code,ji(o,te,sa)):o}let r=e.tools;if(Array.isArray(r)){let o=new Set(i.actions.map(s=>s.actionId));r.forEach((s,a)=>{let d=s.name;if(!o.has(d))throw new ye("MANIFEST_INVALID",{path:`tools[${a}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:te})});}return {file:te,manifest:i,v2Input:t.v2Input,releaseVersion:e.version,...Object.keys(t.passthrough).length>0?{mcpb:t.passthrough}:{}}}function Ia(e,n){try{let t=ke(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new ye("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:Ae});return {file:Ae,manifest:t,v2Input:e}}catch(t){throw t instanceof q?new ye(t.code,ji(t,Ae,i=>i??"")):t}}function Pt(e){return ce(tn(e).definition)}function Ci(e){let{entryHash:n,initialState:t,...i}=e,r={...i};return t!==void 0&&(r.initialState={path:t.path}),Vi(r)}function ga(e,n){let t=Ci(e),i=Ci(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(o=>X(t[o]??null)!==X(i[o]??null))}function ma(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function ha(e,n){let t=ga(e,n),i=ma(e,n),r="";try{let o=Pt(e),s=Pt(n);i=i||o!==s,r=` (definition hash ${o.slice(0,12)} vs ${s.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||w("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${te} and ${Ae} normalize to different definitions${r}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function _a(e,n){let t=n.maxBytes??262144,i=[],r=new TextDecoder("utf-8",{fatal:true});for(let o of Q){let s=e[o];if(s===void 0)continue;if(s.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:o},files:[o]}};let a;try{a=JSON.parse(r.decode(s));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:o},files:[o]}}}if(!se(a))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${o} must be a JSON object`,file:o},files:[o]}};i.push({file:o,raw:a});}return {parsed:i}}function rn(e,n={}){let{parsed:t,failure:i}=_a(e,n),r=Q.filter(p=>e[p]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};if(t.length===0)return {ok:false,rejection:{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]},parseFailure:true,builtinOnly:false};let o=t[0],s=o.file===te?la(o.raw):ua(o.raw),a=t.some(p=>fa(p.file,p.raw)),d=[];try{for(let p of t)d.push(p.file===te?Aa(p.raw,n):Ia(p.raw,n));d.length===2&&ha(d[0].manifest,d[1].manifest);}catch(p){if(p instanceof ye)return {ok:false,rejection:{code:p.code,reason:p.reason,files:p.code==="MANIFEST_DUAL_MISMATCH"?[...Q]:p.reason.file===void 0?r:[p.reason.file]},parseFailure:false,...s===void 0?{}:{identity:s},builtinOnly:a};throw p}let c=d[0];return {ok:true,...c,identity:s??{pluginId:c.manifest.pluginId},files:r}}var te,Ae,Q,_t,Oe,Dt,bt,ki,Et,xi,ea,na,ta,ia,oa,ye,St=j(()=>{g();Ue();_e();_i();we();ht();te="manifest.json",Ae="ui-plugin.json",Q=[te,Ae],_t="0.3",Oe="dev.crewx",Dt=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),bt=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),ki=Object.freeze(Dt.filter(e=>e!=="server"&&!bt.includes(e))),Et=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),xi=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp"]),ea=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,na=256,ta=/<\/?[A-Za-z][^>]*>/,ia=/^\s*javascript:/i,oa=/data:[^,\s]*,/i;ye=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});var Mt=j(()=>{g();ci();St();ht();we();});function Sn(e,n=e){throw new Re(e,n)}var Re,Mn=j(()=>{g();Re=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var Xi=j(()=>{g();});var Yi=j(()=>{g();Ue();_e();Mn();Xi();});function qi(e,n){return Ma.add(e),n!==void 0&&La.set(e,n),e}var Ma,La,Ln=j(()=>{g();Ma=new WeakSet,La=new WeakMap;});function dn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Ot(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e);return n.every(o=>Object.hasOwn(e,o))&&r.every(o=>i.has(o))}function eo(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))eo(n);return Object.freeze(e)}function K(e){throw new Ie("LINEAGE_INVALID",e)}function xa(e){throw new Ie("LINEAGE_STALE",e)}function no(e){if(!dn(e)||!Ot(e,wa,Ua)||!dn(e.actions))return K("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!dn(n)||!Ot(n,Ca,ka))return K("Lineage action definition shape is invalid");return e}function va(e){if(!dn(e)||!Ot(e,Oa,Ra))return K("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!Zi.test(e.hash))return K("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Zi.test(e.sourceHash)))return K("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return K("Lineage compatibility marker is invalid");let n=no(e.definition);if(n.version!==e.version)return K("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return K("Lineage source hash does not match its definition");let t;try{t=ce(n),Ee({...n,hash:e.hash});}catch{return K("Lineage definition is invalid")}return t!==e.hash?K("Lineage definition hash does not match"):eo({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function Qi(e){return e.stateProjection?.allow??[]}function ja(e,n){let t=[],i=new Set(Qi(n));Qi(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let r=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!r.has(a))&&t.push("S2_DATA_PATHS");for(let[a,d]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(d.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(d=>!a.has(d))&&t.push("S5_SUMMARY_PROJECTION");}return t}function Va(e,n){return X(e)===X(n)}function Rt(e,n){if(!Array.isArray(e)||e.length===0)return K("Definition lineage is missing");if(!dn(n)||typeof n.hash!="string")return K("Current definition is invalid");let t,i;try{let{hash:a,...d}=n;i=no(d),t={...i,hash:a},Ee(t);}catch{return K("Current definition is invalid")}let r=e.map(va),o=r[0].definition.id;if(r.some(a=>a.definition.id!==o))return K("Lineage definition ids do not match");if(r.some((a,d)=>d>0&&a.version<=r[d-1].version))return K("Lineage generations are not in increasing version order");if(r.some((a,d)=>r.findIndex(c=>c.hash===a.hash)!==d))return K("Lineage contains a duplicate hash");let s=r[r.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!Va(s.definition,i))return xa("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),d=new Set;for(let p of r)if(p.sourceHash===void 0)for(let l of Object.keys(p.definition.actions))a.has(l)&&d.add(l);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==d.size||c.some(p=>!d.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new Ie("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let a=0;a<r.length-1;a+=1){if(r.slice(a,-1).some(p=>p.compat==="break"))continue;let c=ja(r[a].definition,t);if(c.length>0)throw new Ie("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(r),current:t})}var Ie,Zi,Oa,Ra,wa,Ua,Ca,ka,wt=j(()=>{g();Ue();_e();Ie=class extends Error{constructor(t,i=t,r=[]){super(i);this.code=t;this.violations=r;}code;violations;name="UiDefinitionLineageError"},Zi=/^[0-9a-f]{64}$/,Oa=["version","hash","definition"],Ra=["sourceHash","compat"],wa=["id","version","actions"],Ua=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],Ca=["capabilities"],ka=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var to,io,oo=j(()=>{g();to=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],io=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var ro=j(()=>{g();Ue();Ln();});function Ut(e,n=0){try{let t=he(e,n);return t.type!==void 0&&t.type!=="object"&&Sn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Re)throw t;Sn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function so(e){if(e.length===0)return Ut({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Ut(i.inputSchema));return Ut(Ha(n,t),Ba)}function Ha(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var pn,Ba,Ct=j(()=>{g();Yi();Ue();_e();Ln();Mn();wt();oo();ro();pn=8*1024*1024,new Set(to),new Set(io),Ba=4;});function za(e){if(e===null||typeof e!="object"||!(ao in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[ao]}function co(e,n){let t=za(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var ao,po=j(()=>{g();ao=Symbol("crewx.workspace-app-scan-cache.state");});function ie(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new P("NOT_FOUND"):n==="ELOOP"?new P("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new P("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new P("READ_DENIED"):new P("READ_DENIED")}function Ja(e){if(typeof e!="string"||e.length===0||!ee.isAbsolute(e))throw new P("READ_DENIED")}function kt(e){if(typeof e!="string"||ee.isAbsolute(e)||/[\\\u0000]/.test(e))throw new P("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new P("PATH_ESCAPED");return n}function Un(e,n){let t=ee.relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${ee.sep}`)&&!ee.isAbsolute(t)}function Xe(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Vt(e,n){return e.dev===n.dev&&e.ino===n.ino}function Ft(e,n){return Vt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function On(e){Ja(e);let n,t;try{n=await promises.realpath(e),t=await promises.stat(n,{bigint:!0});}catch(i){throw ie(i)}if(!t.isDirectory())throw new P("READ_DENIED");return {realRoot:n,identity:Xe(t)}}async function fo(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,r;try{if(i=ee.resolve(e,t[0],t[1]),r=await promises.realpath(i),!(await promises.stat(r,{bigint:!0})).isDirectory())throw new P("READ_DENIED")}catch(o){throw o instanceof P?o:ie(o)}if(!Un(n,r))throw new P("PATH_ESCAPED");return r}async function Rn(e,n,t,i){let r,o,s;try{r=await promises.lstat(e,{bigint:!0}),o=await promises.realpath(e),s=await promises.stat(o,{bigint:!0});}catch(a){throw ie(a)}if(!Un(n,o)||t!==void 0&&!Un(t,o))throw new P("PATH_ESCAPED");if(!r.isFile()||!s.isFile())throw new P("READ_DENIED");if(!Vt(i,r)||!Vt(i,s)||i.dev!==s.dev)throw new P("PATH_ESCAPED")}async function Ke(e,n){let t,i;try{t=await promises.realpath(e),i=await promises.stat(t,{bigint:!0});}catch{throw new P("PATH_ESCAPED")}if(t!==n.realRoot||!Ft(n.identity,Xe(i)))throw new P("PATH_ESCAPED")}function Ka(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var P,jt,Wa,uo,Cn,yo,Ht=j(()=>{g();P=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},jt=J.constants.O_NOFOLLOW,Wa=J.constants.O_NONBLOCK,uo=J.constants.O_RDONLY|(jt??0)|(Wa??0);Cn=class{async getRootIdentity(n){let t=await On(n);return await Ke(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=kt(t),r=await On(n),o=ee.resolve(n,...i),s,a;try{s=await promises.realpath(o),a=await promises.stat(s,{bigint:!0});}catch(d){let c=ie(d);if(c.code==="NOT_FOUND")return [];throw c}if(!Un(r.realRoot,s)||!a.isDirectory())throw new P("PATH_ESCAPED");try{let d=await promises.readdir(s,{withFileTypes:!0,encoding:"utf8"});return await Ke(n,r),d.map(Ka)}catch(d){let c=ie(d);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(jt===void 0)throw new P("UNSUPPORTED");let r=kt(t),o=await On(n),s=ee.resolve(n,...r),a=ee.relative(n,s);if(a===".."||a.startsWith(`..${ee.sep}`)||ee.isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await promises.open(s,uo);}catch(c){throw ie(c)}try{let c;try{let E=await d.stat({bigint:!0});c=Xe(E);}catch(E){throw ie(E)}if(c.size>BigInt(i))throw new P("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await Ke(n,o);let p=await fo(n,o.realRoot,r);await Rn(s,o.realRoot,p,c);let l=new Uint8Array(new ArrayBuffer(Number(c.size))),I=0;for(;I<l.byteLength;){let E;try{E=(await d.read(l,I,l.byteLength-I,I)).bytesRead;}catch(L){throw ie(L)}if(E<=0)throw new P("IDENTITY_CHANGED");I+=E;}let _;try{let E=await d.stat({bigint:!0});_=Xe(E);}catch(E){throw ie(E)}if(!Ft(c,_))throw new P("IDENTITY_CHANGED");return await Rn(s,o.realRoot,p,_),await Ke(n,o),new Uint8Array(l)}finally{await d.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new P("READ_DENIED");if(jt===void 0)throw new P("UNSUPPORTED");let r=kt(t),o=await On(n),s=ee.resolve(n,...r),a=ee.relative(n,s);if(a===".."||a.startsWith(`..${ee.sep}`)||ee.isAbsolute(a))throw new P("PATH_ESCAPED");let d;try{d=await promises.open(s,uo);}catch(c){throw ie(c)}try{let c;try{let I=await d.stat({bigint:!0});c=Xe(I);}catch(I){throw ie(I)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new P("LIMIT_EXCEEDED");await Ke(n,o);let p=await fo(n,o.realRoot,r);await Rn(s,o.realRoot,p,c);let l;try{let I=await d.stat({bigint:!0});l=Xe(I);}catch(I){throw ie(I)}if(!Ft(c,l))throw new P("IDENTITY_CHANGED");return await Rn(s,o.realRoot,p,l),await Ke(n,o),{...l,candidateRealPath:p??o.realRoot}}catch(c){throw c instanceof P?c:ie(c)}finally{await d.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},yo=new Cn;});function yn(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function Io(e){return typeof e=="string"&&le.test(e)?e:void 0}function nc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function ve(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function tc(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function ic(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function oc(e){return Qa.decode(e)}function rc(e){return JSON.parse(oc(e))}function go(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function sc(e){if(e instanceof P)return go(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return go(n)}}function Pe(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ac(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function cc(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function mo(e,n,t,i){let r=ac(e);if(!r)throw new P("READ_DENIED");return ic(await r.call(e,n,t,i))}async function Gt(e,n,t){let i=cc(e);if(!i)throw new P("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new P("READ_DENIED");return r.map(tc).filter(o=>o!==null)}function dc(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function pc(e){if(!yn(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,r)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+r+" must be an array");let o=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+r+" must contain non-empty strings");o.push(a);}return Object.freeze([...new Set(o)].sort(ve))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function lc(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function xn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(ve)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(ve))})}function kn(e,n){let t=Object.keys(e).sort(ve),i=[...n].sort(ve);return t.length===i.length&&t.every((r,o)=>r===i[o])}function ho(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function uc(e){let n;try{n=rc(e);}catch{return}if(!yn(n)||!kn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>Wt)return;let t=new Set,i=new Set,r=0,o=[];for(let s of n.packages){if(!yn(s))return;let a=["packageDir","appId","definition","files"],d=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),p=[...d?["lineage"]:[],...c?["launcher"]:[]];if(!kn(s,[...a,...p])||c&&s.launcher!==false)return;let l=ho(s.packageDir),I=Io(s.appId);if(!l||l.length!==2||l[0]!=="apps"||!nc(l[1])||!I||t.has(s.packageDir)||!yn(s.definition)||!kn(s.definition,["id","version","hash"]))return;let _=Io(s.definition.id),E=s.definition.version,L=s.definition.hash;if(!_||!Number.isSafeInteger(E)||E<1||typeof L!="string"||!$t.test(L)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Jt)return;let b=new Set,v=[];for(let U of s.files){if(!yn(U)||!kn(U,["path","sha256"]))return;let C=ho(U.path);if(!C||typeof U.sha256!="string"||!$t.test(U.sha256))return;let F=C.join("/"),h=`${s.packageDir}/${F}`;if(b.has(F)||i.has(h))return;b.add(F),i.add(h),v.push(Object.freeze({path:F,sha256:U.sha256}));}if(!Q.some(U=>b.has(U))||!b.has("ui/index.html")||(r+=v.length,r>Ya))return;t.add(s.packageDir),o.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:I,definition:Object.freeze({id:_,version:E,hash:L}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(v.sort((U,C)=>ve(U.path,C.path)))}));}return Object.freeze({version:1,packages:Object.freeze(o)})}function xe(e){let n=sc(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function fc(e,n,t,i,r){let o=[],s=async(a,d)=>{if(!Pe(i,r))throw new P("LIMIT_EXCEEDED");if(d>2)throw new P("LIMIT_EXCEEDED");let c=await Gt(e,n,a);for(let p of c){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new P("PATH_ESCAPED");let l=`${a}/${p.name}`;if(p.kind==="file"){if(o.push(l.slice(t.length+1)),o.length>Jt)throw new P("LIMIT_EXCEEDED")}else if(p.kind==="directory")await s(l,d+1);else throw p.kind==="symlink"?new P("PATH_ESCAPED"):new P("READ_DENIED")}};return await s(t,0),o.sort(ve)}function yc(e){return Q.includes(e)?262144:e==="ui/index.html"?pn:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?Za:qa}async function _o(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:ec};let r=pc(e.reservedIds),o=[],s=(y,f,A)=>dc(y,"bundled",f),a=(y=[],f=false,A)=>({...A===void 0?{}:{indexHash:A},packages:y,diagnostics:o,incomplete:f,reservedIds:r});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!$t.test(e.expectedIndexHash))return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d;try{d=await mo(n,e.root,"bundle-index.json",Xa);}catch(y){return o.push(s(xe(y),"bundle-index.json")),a()}let c=ri.createHash("sha256").update(d).digest("hex");if(c!==e.expectedIndexHash)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p=uc(d);if(p===void 0)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!lc(xn(p.packages),r))return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!Pe(t,i))return o.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,c);let l;try{l=await Gt(n,e.root,"");}catch(y){return o.push(s(xe(y),"bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:xe(y)})),false,c)}if(!Pe(t,i))return o.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,c);let I=l.find(y=>y.name==="bundle-index.json"&&y.kind==="file"),_=l.find(y=>y.name==="apps"&&y.kind==="directory"),E=y=>p.packages.map(f=>({indexEntry:f,failureCode:y}));if(!I)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c);let L=l.filter(y=>y.name!=="bundle-index.json"&&y.name!=="apps");if(L.length>0){let y=L.some(f=>f.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return o.push(s(y,"bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c)}if(l.some(y=>y.name==="apps"&&y.kind!=="directory"))return o.push(s("PATH_ESCAPED","apps")),a(E("PATH_ESCAPED"),false,c);let b=[];if(_)try{b=await Gt(n,e.root,"apps");}catch(y){return o.push(s(xe(y),"apps")),a(E(xe(y)),false,c)}if(!Pe(t,i)||b.length>Wt)return o.push(s("LIMIT_EXCEEDED","apps")),a(E("LIMIT_EXCEEDED"),true,c);let v=new Map(p.packages.map(y=>[y.packageDir.slice(5),y])),U=b.filter(y=>!v.has(y.name));for(let y of U)o.push(s(y.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${y.name}`));if(U.length>0){let y=U.some(f=>f.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(E(y),false,c)}let C=new Set,F=new Map,h=new Map;for(let y of p.packages){let f=F.get(y.appId)??[];f.push(y),F.set(y.appId,f);let A=`${y.definition.id}\0${String(y.definition.version)}`,D=h.get(A)??[];D.push(y),h.set(A,D);}for(let y of [...F.values(),...h.values()])if(y.length>1)for(let f of y)C.add(f);let m=[],N=d.byteLength,M=false;for(let y of p.packages){if(!Pe(t,i)){M=true,m.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let f;try{let S=y.lineage[y.lineage.length-1];if(!S)throw new Ie("LINEAGE_INVALID","Definition lineage is missing");if(S.definition.id!==y.definition.id||S.version!==y.definition.version||S.hash!==y.definition.hash)throw new Ie("LINEAGE_STALE","Last lineage generation does not match bundle identity");f=Rt(y.lineage,{...S.definition,hash:S.hash}).entries;}catch(S){let ne=S instanceof Ie?S.code:"LINEAGE_INVALID";o.push(s(ne,y.packageDir)),m.push({indexEntry:y,failureCode:ne});continue}let A=b.find(S=>S.name===y.packageDir.slice(5));if(!_||!A){m.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}if(A.kind!=="directory"){m.push({indexEntry:y,failureCode:A.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let D;try{let S=await fc(n,e.root,y.packageDir,t,i);if(!Pe(t,i)){M=!0,m.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let ne=y.files.map(ge=>ge.path);if(S.length!==ne.length||S.some((ge,me)=>ge!==ne[me])){m.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}D=new Map;let B;for(let ge of y.files){if(!Pe(t,i)){B="LIMIT_EXCEEDED",M=!0;break}if(N>=zt){B="LIMIT_EXCEEDED";break}let me;try{me=await mo(n,e.root,`${y.packageDir}/${ge.path}`,yc(ge.path));}catch(br){B=xe(br);break}if(!Pe(t,i)){B="LIMIT_EXCEEDED",M=!0;break}if(N+me.byteLength>zt){N=zt,B="LIMIT_EXCEEDED";break}if(N+=me.byteLength,ri.createHash("sha256").update(me).digest("hex")!==ge.sha256){B="BUNDLE_INTEGRITY";break}D.set(ge.path,me);}if(B!==void 0){m.push({indexEntry:y,failureCode:B});continue}}catch(S){Pe(t,i)||(M=true),m.push({indexEntry:y,failureCode:xe(S)});continue}m.push({indexEntry:y,lineage:f,files:D,...C.has(y)?{failureCode:"DUPLICATE_ID"}:{}});}return a(m,M,c)}var Xa,Wt,Jt,Ya,qa,Za,zt,$t,Qa,ec,Kt=j(()=>{g();wt();we();St();Ct();Ht();Xa=256*1024,Wt=64,Jt=128,Ya=Wt*Jt,qa=2*1024*1024,Za=8*1024*1024,zt=32*1024*1024,$t=/^[0-9a-f]{64}$/,Qa=new TextDecoder("utf-8",{fatal:true}),ec=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Ic(e){if(typeof e!="string"||!le.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Xt}${e}`.length+7<=128?e:`hash_${ri.createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Xt}${n}_read`,action:`${Xt}${n}_action`}}function To(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return false}}function mc(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function hc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function An(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function Uo(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function _c(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Co(e){return gc.decode(e)}function Ec(e){return JSON.parse(Co(e))}function Tc(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function jn(e,n,t,i,r){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...r?.reason===void 0?{}:{reason:Object.freeze({...r.reason})},...r?.files===void 0?{}:{files:Object.freeze([...r.files])}};return Object.freeze(o)}function Po(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ae(e){if(e instanceof P)return Po(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Po(n)}}function Ye(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Do(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function bo(e){return e==="MANIFEST_DUAL_MISMATCH"?e:ko(e)}function Pc(e){return ko(e.code)}function ko(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return xo("UiPluginValidationError",e)}}function xo(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Dc(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return xo("McpAppContractError",e)}}function De(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function bc(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Nc(e,n){let t=n.get("package.json");if(t!==void 0)try{let r=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(To(r)){let o=r.bin,s=typeof o=="string"?o:To(o)?Object.values(o).find(a=>typeof a=="string"):void 0;for(let a of [s,r.main]){if(typeof a!="string")continue;let d=Sc(a);if(d&&n.has(d))return d}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(r=>n.has(r))}function Sc(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Mc(){return globalThis.performance?.now()??Date.now()}function je(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))je(n);return Object.freeze(e)}function No(e){return Object.freeze(Array.from(e))}async function qt(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new P("NOT_FOUND");if(a.byteLength>i)throw new P("LIMIT_EXCEEDED");return new Uint8Array(a)}let r=`${n.relativePath}/${t}`,o=n.scanContext,s=e.fingerprintVerifiedFile;if(o===void 0||!o.cacheable||typeof s!="function")return Oo(e,n.root,r,i);try{let a=o.priorFingerprints.get(r)??await s.call(e,o.workspaceRoot,r,i);o.candidateRealPath=a.candidateRealPath;let d=await Oo(e,n.root,r,i),c=await s.call(e,o.workspaceRoot,r,i);return o.candidateRealPath=c.candidateRealPath,Vo(a,c)&&c.size===BigInt(d.byteLength)&&!Fo(c,o.scanStartedAtNs)?o.files.set(r,{relativePath:r,byteLimit:i,fingerprint:c}):o.cacheable=!1,d}catch(a){throw Q.includes(t)&&ae(a)==="NOT_FOUND"&&o.directoryListings.some(c=>c.relativePath===n.relativePath&&!jo(c.key,t))||(o.cacheable=false),a}}function vo(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Lc(e,n,t,i,r,o,s,a){let d=e.fingerprintVerifiedFile,c=vo(t,i),p=r.candidates.get(c),l=i.relativePath,I;try{I=await Lo(e,n,l);}catch(h){if(ae(h)!=="NOT_FOUND")throw h}let _=I===void 0?void 0:{relativePath:l,key:I};if(_!==void 0&&(i.source==="apps"||i.source==="skills")&&!Q.some(h=>jo(_.key,h)))return De(s,a)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===_.relativePath&&p.directoryListings[0]?.key===_.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof d=="function"?{memo:p}:typeof d!="function"?{}:{context:{state:r,cacheKey:c,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze([_]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let E=await Promise.all(So.map(async h=>{if(h==="")return _;let m=`${i.relativePath}${h}`;try{let N=await Lo(e,n,m);return N===void 0?void 0:{relativePath:m,key:N}}catch(N){if(ae(N)==="NOT_FOUND")return;throw N}}));if(!De(s,a))return {timeLimitReached:true};let L=typeof d=="function"&&E.every(h=>h!==void 0),b=E.filter(h=>h!==void 0),v=new Map,U=p!==void 0&&L,C;if(p!==void 0&&typeof d=="function"){let h=await Promise.all(p.files.map(async m=>{if(!De(s,a))return {kind:"time",file:m};try{let N=await d.call(e,n,m.relativePath,m.byteLimit);return {kind:"fingerprint",file:m,current:N}}catch(N){return ae(N)==="NOT_FOUND"?{kind:"missing",file:m}:{kind:"error",file:m,error:N}}}));if(h.some(m=>m.kind==="time"))return {timeLimitReached:true};for(let m of h){if(m.kind==="error")throw m.error;if(m.kind==="missing"){U=false;continue}if(m.kind!=="fingerprint")continue;let{file:N,current:M}=m;v.set(N.relativePath,M),C??=M.candidateRealPath,(M.candidateRealPath!==p.candidateRealPath||!Vo(M,N.fingerprint)||Fo(M,o))&&(U=false);}}let F=p!==void 0&&p.directoryListings.length===b.length&&p.directoryListings.every((h,m)=>h.relativePath===b[m]?.relativePath&&h.key===b[m]?.key);return p!==void 0&&L&&F&&U&&C===p.candidateRealPath?{memo:p}:!L||b.length!==So.length?{}:{context:{state:r,cacheKey:c,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze(b),priorFingerprints:v,files:new Map,...C===void 0?{}:{candidateRealPath:C},cacheable:true}}}function jo(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return true}}async function Lo(e,n,t){let i=Bo(e);if(typeof i!="function")return;let r=await i.call(e,n,t);if(!Array.isArray(r)||r.some(s=>typeof s=="string"))return;let o=r.map(Uo);if(!o.some(s=>s===null))return JSON.stringify(o.slice().sort((s,a)=>An(s.name,a.name)||An(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Vo(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Fo(e,n){let t=e.mtimeNs-n;return t>=-Mo&&t<=Mo}function Yt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,r=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!r||n.files.size===0&&!r)return;let o=Object.freeze({...!r&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,o);}function Oc(e,n,t){let i=ri.createHash("sha256"),r=new TextEncoder().encode(X(e)),o=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return o(r.byteLength),i.update(r),o(n.byteLength),i.update(n),o(t.byteLength),i.update(t),i.digest("hex")}function Rc(e,n){let t={...e.definition,sourceHash:n},i;try{i=ce(t);}catch(o){throw o instanceof O&&o.code==="INPUT_INVALID"?new q("MANIFEST_INVALID","normalized definition is invalid"):o}let r={...t,hash:i};try{Ee(r);}catch{throw new q("MANIFEST_INVALID","normalized definition is invalid")}return r}function wc(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function Uc(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Bo(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Oo(e,n,t,i){let r=Uc(e);if(!r)throw new P("READ_DENIED");return _c(await r.call(e,n,t,i))}async function Cc(e,n,t){let i=Bo(e);if(!i)throw new P("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new P("READ_DENIED");return r.map(Uo).filter(o=>o!==null)}function kc(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Ro(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Ro(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Ro(e){let n=[],t=[],i=[];for(let r of e.listMcpApps())typeof r.appId=="string"&&n.push(r.appId),r.definition&&typeof r.definition.id=="string"&&t.push(r.definition.id);for(let r of e.listMcpAppTools())typeof r.name=="string"&&i.push(r.name);return {appIds:n,definitionIds:t,toolNames:i}}function be(e,n){e.diagnostic||(e.diagnostic=jn(n,e.source,e.relativePath,e.identity?.pluginId));}function xc(e){let n=new Map;for(let i of e){let r=i.identity?.pluginId;if(r===void 0)continue;let o=n.get(r)??[];o.push(i),n.set(r,o);}for(let i of n.values()){if(i.length<2)continue;let r=i.filter(s=>s.provenance!==void 0);if(r.length>0){for(let s of i)s.provenance===void 0&&be(s,"RESERVED_ID");if(r.length>1)for(let s of r)be(s,"DUPLICATE_ID");continue}let o=i.filter(s=>s.source==="apps");if(o.length>1){for(let s of o)be(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))be(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))be(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let r=i.identity?.definitionKey;if(r===void 0)continue;let o=t.get(r)??[];o.push(i),t.set(r,o);}for(let i of t.values())if(i.length>1)for(let r of i)be(r,"DUPLICATE_ID");}function vc(e,n,t){let i=new Set,r=new Set,o=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let d of kc(n)){for(let c of d.appIds??[])typeof c=="string"&&i.add(c);for(let c of d.definitionIds??[])typeof c=="string"&&r.add(c);for(let c of d.toolNames??[])typeof c=="string"&&o.add(c);}for(let d of e){let c=d.candidate;if(!c)continue;if(i.has(c.pluginId)||r.has(c.definitionId)){be(d,"RESERVED_ID");continue}if(d.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){be(d,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(l=>l!==void 0).some(l=>o.has(l))&&be(d,"DUPLICATE_ID");}}function jc(e){return [...e].sort((n,t)=>{let i=Eo.indexOf(n.source)-Eo.indexOf(t.source);return i!==0?i:An(n.relativePath,t.relativePath)})}function x(e,n,t){e.diagnostic=jn(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function wo(e,n,t){let i=rn(t,{mode:"local"});if(!i.ok&&i.parseFailure){x(n,bo(i.rejection.code),Do(i.rejection));return}let r=Tc(i.identity);if(n.bundleIdentity===void 0)n.identity=r;else if(r?.pluginId!==n.bundleIdentity.appId||r.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){x(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){x(n,"RESERVED_ID");return}if(!i.ok){x(n,bo(i.rejection.code),Do(i.rejection));return}let o=i.manifest,s={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=s),o.actions.length>0)try{so(o.actions.map(S=>({actionId:S.actionId,inputSchema:S.inputSchema})));}catch(S){if(S instanceof Re){x(n,Dc(S.code));return}throw S}let a;try{a=await qt(e,n,"ui/index.html",pn);}catch(S){x(n,Ye(ae(S),"entry"));return}if(a.byteLength>pn){x(n,"LIMIT_EXCEEDED");return}let d;try{d=Co(a);}catch{x(n,"ENTRY_INVALID");return}if(a.byteLength===0||d.length===0){x(n,"ENTRY_INVALID");return}let c=ri.createHash("sha256").update(a).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==c){x(n,"ENTRY_INVALID");return}let p={},l,I;if(o.initialState!==void 0){try{l=await qt(e,n,"ui/state.json",65536);}catch(S){x(n,Ye(ae(S),"initial"));return}if(l.byteLength>65536){x(n,"LIMIT_EXCEEDED");return}try{let S=Ec(l),ne=o.dataPaths??[],B=mt(S,ne);p=he(B,0,ne),Be(p);}catch{x(n,"INITIAL_STATE_INVALID");return}if(I=ri.createHash("sha256").update(l).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==I){x(n,"INITIAL_STATE_INVALID");return}}let _={...o,entryHash:c,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:I}}},E=tn(_),L=Oc(_,a,l??new Uint8Array),b;try{b=Rc(E,L);}catch(S){if(S instanceof q){x(n,Pc(S));return}throw S}let v;if(n.bundleLineage!==void 0){let S=n.bundleLineage[n.bundleLineage.length-1];if(!S){x(n,"LINEAGE_INVALID");return}let{legacy:ne,...B}=S.definition,{hash:ge,...me}=b;if(X(B)!==X(me)){x(n,"LINEAGE_STALE");return}if(ne!==void 0&&(b={...b,legacy:ne}),ne!==void 0)try{b={...b,hash:ce(b)},Ee(b);}catch{x(n,"LINEAGE_INVALID");return}v=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){x(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==b.id||n.bundleIdentity.version!==b.version||n.bundleIdentity.definitionHash!==b.hash)){x(n,"LINEAGE_STALE");return}let U=Ic(o.pluginId),C=o.actions.length===0?{read:U.read}:U,F=je(E),h=je(_),m=je(b),N=je({...E.handlers}),M=No(a),y=l===void 0?void 0:No(l),f=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:c,bytes:M}),...y===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:I,bytes:y})}}),A={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:je(i.mcpb)},relativePath:n.relativePath,manifest:h,normalized:F,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:m,handlers:N,resources:f,html:d,entryBytes:M,entryHash:c,initialState:je(p),...y===void 0?{}:{initialStateBytes:y},...I===void 0?{}:{initialStateHash:I},sourceHash:L,toolNames:Object.freeze(C)},D=n.provenance===void 0?{...A,source:n.source}:{...A,provenance:n.provenance,lineage:v??[]};n.candidate=Object.freeze(D),wc(o)&&x(n,"EXEC_DENIED");}async function Ho(e,n){let t={};for(let i of Q)try{t[i]=await qt(e,n,i,262144);}catch(r){if(ae(r)==="NOT_FOUND")continue;return {files:t,failure:Ye(ae(r),"manifest")}}return {files:t}}function Zt(e){return Q.some(n=>e[n]!==void 0)}async function Vc(e,n){let{files:t,failure:i}=await Ho(e,n);if(i!==void 0){x(n,i);return}let r=t[te];return r!==void 0&&!Nt(r)&&delete t[te],Zt(t)?t:void 0}function Fc(e,n,t,i=Ac,r=false){let o=jc(e);xc(o);let s=Object.freeze(o.filter(p=>p.candidate!==void 0&&p.diagnostic===void 0).map(p=>p.candidate)),a=Object.freeze(o.filter(p=>p.diagnostic!==void 0).map(p=>p.diagnostic)),d=r?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(o.filter(p=>p.source==="bundled"&&p.diagnostic===void 0&&t!==void 0&&p.candidate?.provenance?.indexHash===t).map(p=>p.candidate)),diagnostics:Object.freeze(a.filter(p=>p.source==="bundled").map(p=>Object.freeze({...p}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...d===void 0?{}:{productBundleSnapshotMetadata:d}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function Bc(e){if(e===null||typeof e!="object"&&typeof e!="function")return false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Hc(e,n){if(Bc(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??yo,options:t}}async function zo(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:r}=Hc(n,t),o=r.clock??Mc,s=o(),a=await _o(r.productBundle,i,s,o),d=o(),c=BigInt(Date.now())*1000000n,p=[],l=0,I,_=false,E,L;if(r.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{L=await i.getRootIdentity(e),E=co(r.scanCache,L),E.scanStartedAtNs=c;}catch(h){if(ae(h)!=="NOT_FOUND")throw h}let b=E!==void 0&&r.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,v=new Set,U=true;p.push(...a.diagnostics.map(h=>({source:h.source,root:r.productBundle?.root??e,name:"",relativePath:h.relativePath,diagnostic:h})));let C=a.reservedIds;a.incomplete&&(I="time_limit");for(let h of a.packages){if(!De(d,o)){_=true,I="time_limit";break}let m=h.indexEntry,N=m.packageDir,M=h.files===void 0?void 0:Nc(N,h.files),y=a.indexHash===void 0?void 0:qi(Object.freeze({kind:"bundled",launcher:m.launcher!==false,indexHash:a.indexHash,packageDir:N,appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash,files:m.files}),M),f={source:"bundled",root:r.productBundle?.root??e,name:N.slice(5),relativePath:N,...y===void 0?{}:{provenance:y},...h.files===void 0?{}:{pinnedFiles:h.files},...h.lineage===void 0?{}:{bundleLineage:h.lineage},bundleIdentity:{appId:m.appId,definitionId:m.definition.id,version:m.definition.version,definitionHash:m.definition.hash},identity:bc(m)};if(p.push(f),l+=1,h.failureCode!==void 0){x(f,h.failureCode);continue}let A={};for(let D of Q){let S=h.files?.get(D);S!==void 0&&(A[D]=S);}if(!Zt(A)){x(f,"BUNDLE_INTEGRITY");continue}if(await wo(i,f,A),!De(d,o)){_=true,I="time_limit";break}}let F=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let h of F){let{source:m,directory:N}=h,M;try{M=await Cc(i,e,N);}catch(f){if(ae(f)==="NOT_FOUND")continue;b=false,U=false,p.push({source:m,root:e,name:"",relativePath:m,diagnostic:jn(Ye(ae(f),"manifest"),m,m)});continue}let y=M.filter(f=>f.kind==="directory"||f.kind==="symlink").filter(f=>hc(f.name)).map(f=>({source:m,root:e,name:f.name,relativePath:mc(m,f.name)})).sort((f,A)=>An(f.relativePath,A.relativePath));for(let f of y){let A={...f};if(p.push(A),L!==void 0?v.add(vo(L,A)):b=false,!De(d,o)){_=true,I="time_limit";break e}let D;if(E!==void 0&&L!==void 0){try{let B=await Lc(i,e,L,A,E,c,d,o);if(B.timeLimitReached){_=!0,I="time_limit";break e}A.scanContext=B.context,D=B.memo;}catch(B){b=false,x(A,Ye(ae(B),"manifest"));continue}D===void 0&&(b=false);}if(D!==void 0){if(A.candidate=D.candidate,A.diagnostic=D.diagnostic,A.identity=D.identity,m==="skills"&&D.candidate===void 0&&D.diagnostic===void 0)continue;if(l>=64){x(A,"LIMIT_EXCEEDED");continue}if(f.relativePath.split("/").length-1>2){x(A,"LIMIT_EXCEEDED");continue}if(l+=1,!De(d,o)){_=true,I="time_limit";break e}continue}let S;if(m==="skills"&&(S=await Vc(i,A),S===void 0)){A.diagnostic===void 0&&Yt(A);continue}if(l>=64){x(A,"LIMIT_EXCEEDED");continue}if(f.relativePath.split("/").length-1>2){x(A,"LIMIT_EXCEEDED");continue}if(!De(d,o)){_=true,I="time_limit";break e}if(l+=1,S===void 0){let B=await Ho(i,A);if(B.failure!==void 0||!Zt(B.files)){x(A,B.failure??Ye("NOT_FOUND","manifest")),Yt(A);continue}S=B.files;}if(await wo(i,A,S),Yt(A),!De(d,o)){_=true,I="time_limit";break e}}}if(E!==void 0&&L!==void 0){let h=[...v].sort(An),m=E.lastCandidateKeys,N=m!==void 0&&m.length===h.length&&m.every((y,f)=>y===h[f]);if(b=b&&N,U&&!_&&I===void 0)for(let y of E.candidates.keys())try{JSON.parse(y)[0]===L.realPath&&!v.has(y)&&E.candidates.delete(y);}catch{E.candidates.delete(y);}let M=[...E.candidates.keys()].filter(y=>{try{return JSON.parse(y)[0]===L.realPath}catch{return false}});b=b&&M.length===v.size&&M.every(y=>v.has(y))&&!_&&I===void 0,E.lastCandidateScanUnchanged=b,U&&!_&&I===void 0&&(E.lastCandidateKeys=Object.freeze(h));}return _&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:jn("DISCOVERY_TIME_LIMIT","apps","apps")}),vc(p,r,C),Fc(p,I,a.indexHash,C,r.productBundle!==void 0)}var Ac,Xt,Eo,gc,So,Mo,$o=j(()=>{g();Ue();gn();_e();Mt();we();Ct();Mn();po();Ht();Ln();Kt();Kt();Ac=xn([]),Xt="crewx_local_app_";Eo=["bundled","apps","skills"],gc=new TextDecoder("utf-8",{fatal:true});So=["","/ui"],Mo=2000000000n;});g();Mt();g();dt();g();var Bi="SKILL.md",ba=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function Hi(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Na(e){return e.isDirectory()||e.isSymbolicLink()}function Ji(e){try{return J.existsSync(e)&&J.statSync(e).isDirectory()}catch{return false}}function Lt(e){let n;try{n=J.readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(ba);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=ir.load(t[1]??"");if(!Hi(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let r=Hi(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(r?.version??i.version)=="string"?{version:r?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Sa(e){return [ee.join(e,Bi),ee.join(e,"skill",Bi)]}function zi(e,n){if(!Ji(e))return null;for(let t of Sa(e)){if(!J.existsSync(t))continue;let r=Lt(t).frontmatter;return {name:r.name??n,...r.version===void 0?{}:{version:r.version},...r.description===void 0?{}:{description:r.description},skillMdPath:t,dir:e}}return null}function $i(e){try{return J.readdirSync(e,{withFileTypes:!0}).filter(Na)}catch{return []}}function Gi(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function Ki(e){let n=[],t=new Set;for(let i of e)if(Ji(i))for(let r of $i(i)){if(r.name.startsWith("@")){let o=ee.join(i,r.name);for(let s of $i(o))Gi(zi(ee.join(o,s.name),s.name),t,n);continue}Gi(zi(ee.join(i,r.name),r.name),t,n);}return n.sort((i,r)=>i.name.localeCompare(r.name))}$o();var $c=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Fn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Gc(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let r=JSON.stringify({screenHash:n,skillHash:i});return ri.createHash("sha256").update(r,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Gc(e,n){let t=new TextEncoder().encode(Bn(e)),i=Wc(n),r=new Uint8Array(t.byteLength+1+i.byteLength);return r.set(t,0),r[t.byteLength]=0,r.set(i,t.byteLength+1),ri.createHash("sha256").update(r).digest("hex")}function Wc(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Bn(e){if(typeof e!="string"||e.length===0||ee.isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function Vn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function Jo(e,n){let t=ee.relative(e,n).split(ee.sep).join("/");return !t||t===".."||t.startsWith("../")||ee.isAbsolute(t)?null:Bn(t)}function Jc(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function Ko(e){return Object.freeze({packageRoot:e})}function Kc(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Le,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function Xo(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function Xc(e,n){let t=e.candidate,i=t.provenance!==void 0,r=n&&!i?["screen","skill"]:["screen"],o=Kc(t),s=Fn(n?{screenHash:o.hash,skillHash:n.skillHash}:{screenHash:o.hash}),a=t.description||n?.skill.description||"",d=String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:d,...Xo(r),definition:o,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:Ko(e.packageRoot)},definitionHash:s};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:r,summary:Object.freeze(c)}}function Yc(e){let n=qc(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...Xo(["skill"]),skillName:e.skill.name,localDefinitionRef:Ko(e.packageRoot),definitionHash:Fn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function qc(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function W(e,n,t,i,r){return Object.freeze({code:e,source:n,relativePath:Zc(t),...i===void 0?{}:{appId:i},...r?.reason===void 0?{}:{reason:r.reason},...r?.files===void 0?{}:{files:r.files}})}function Zc(e){if(typeof e!="string"||e.length===0||ee.isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function Yo(e){return W(e.code,e.source,e.relativePath,e.pluginId,e)}function Qc(e,n){let t=Jo(e,n.dir);if(!t)return {diagnostic:W("PATH_ESCAPED","node_modules","node_modules")};let i=Jc(t);if(!i)return {diagnostic:W("PATH_ESCAPED","node_modules",t)};let r=Lt(n.skillMdPath);if(!r.readable)return {diagnostic:W("SKILL_READ_FAILED",i,t)};if(!r.valid)return {diagnostic:W("SKILL_INVALID",i,t)};let o=ed(n.dir,n.skillMdPath);if(!o)return {diagnostic:W("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(J.readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:o,skillHash:Fn({relativePath:o,fileBytes:s}),source:i}}catch{return {diagnostic:W("SKILL_READ_FAILED",i,t)}}}function ed(e,n){let t=ee.relative(e,n).split(ee.sep).join("/");try{return Bn(t)}catch{return null}}function nd(e){if(!$c.test(e.appId))return {diagnostic:W("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Le,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??ri.createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function td(e){return e.builtinCatalog}function id(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Bn(n)}catch{return null}}function od(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function rd(e,n,t){let i=n.installed??[],r=new Map;for(let s of i){let a=id(s);if(!a){t.push(W("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let d=r.get(a);if(d&&JSON.stringify(d)!==JSON.stringify(s)){t.push(W("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}r.set(a,s);}let o=new Map;for(let s of e)s.packageRoot!==void 0&&o.set(s.packageRoot,s);for(let[s,a]of r){let d=o.get(s);if(!d){t.push(W("INSTALLED_MISSING","installed",s,a.appId));continue}let c=od(a);if(!c){t.push(W("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==d.appId||a.definitionHash!==void 0&&a.definitionHash!==d.summary.definitionHash){t.push(W("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let p={...d.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},l=e.indexOf(d);l>=0&&(e[l]={...d,summary:Object.freeze(p)});}}function sd(e,n){let t=new Map;for(let r of e){let o=t.get(r.appId)??[];o.push(r),t.set(r.appId,o);}let i=new Set;for(let r of t.values()){if(r.length<2)continue;let o=r.some(s=>s.source==="builtin")?"builtin":r.some(s=>s.source==="bundled")?"bundled":void 0;if(o!==void 0){let s=r.filter(a=>a.source===o);for(let a of r.filter(d=>d.source!==o))i.add(a),n.push(W("RESERVED_ID",a.source,ei(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(W("DUPLICATE_ID",a.source,ei(a),a.appId));continue}for(let s of r)i.add(s),n.push(W("DUPLICATE_ID",s.source,ei(s),s.appId));}return e.filter(r=>!i.has(r))}function ei(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function ad(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(Yo)}function cd(e){return e.filesystem}function dd(e,n){let t=cd(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function qo(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=td(n),i=await zo(e,dd(n,t)),r=n.registeredProductBundle??i.productBundleSnapshotMetadata,o=[ee.join(e,"skills"),ee.join(e,"node_modules"),ee.join(e,"apps")],s=[],a=[],d=[],c=new Set;for(let f of o)for(let A of Ki([f])){let D=Jo(e,A.dir);(D===null||!c.has(D))&&(d.push(A),D!==null&&c.add(D));}for(let f of d){let A=Qc(e,f);"diagnostic"in A?s.push(A.diagnostic):a.push(A);}let p=new Map,l=n.registeredProductBundle?.indexHash,I=(n.registeredProductBundle?.candidates??[]).filter(f=>l!==void 0&&f.provenance?.indexHash===l),_=[...i.apps??i.candidates??[],...I],E=new Set(I),L=new Set(l===void 0?[]:(t?.listMcpApps()??[]).filter(f=>f.provenance?.indexHash===l).map(f=>f.appId));for(let f of _){if(E.has(f)&&f.provenance?.indexHash===l&&L.has(f.appId))continue;let A=f.provenance===void 0?`workspace\0${f.relativePath}`:`bundled\0${f.provenance.indexHash}\0${f.provenance.packageDir}`;p.set(A,{candidate:f,packageRoot:f.relativePath});}let b=new Map(a.map(f=>[f.packageRoot,f])),v=[];for(let f of p.values()){let A=f.candidate.provenance===void 0?b.get(f.packageRoot):void 0,D=Xc(f,A);v.push({...D.packageRoot===void 0?{}:{packageRoot:D.packageRoot},source:D.source,appId:D.appId,summary:D.summary});}let U=new Set([...p.values()].filter(f=>f.candidate.provenance===void 0).map(f=>f.packageRoot)),C=r===void 0?new Set:new Set(i.diagnostics.filter(f=>f.code==="RESERVED_ID"&&f.source!=="bundled").map(f=>f.relativePath)),F=new Set(r?.reservedAppIds??[]);for(let f of a){let A=Yc(f);if(!(U.has(f.packageRoot)||C.has(f.packageRoot))){if(F.has(A.appId)){s.push(W("RESERVED_ID",f.source,f.packageRoot,A.appId));continue}v.push({packageRoot:A.packageRoot,source:A.source,appId:A.appId,summary:A.summary});}}let h=[...ad(i.diagnostics,new Set(a.map(f=>f.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(f=>f.source==="bundled").map(Yo)??[]],m=[];if(t)for(let f of t.listMcpApps()){let A=nd(f);"diagnostic"in A?h.push(A.diagnostic):m.push(A);}let N=sd([...v,...m],h);rd(N,n,h);let M=N.map(f=>f.summary).sort((f,A)=>Vn(f.appId,A.appId)),y=[...h].sort((f,A)=>Vn(f.relativePath,A.relativePath)||Vn(f.code,A.code)||Vn(f.appId??"",A.appId??""));return Object.freeze({items:Object.freeze(M),diagnostics:Object.freeze(y)})}g();g();g();function pd(e){let n=r=>r.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(r=>r==="**"?".*":r.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function qe(e,n){try{return pd(n).test(e)}catch{return false}}function Hn(e,...n){let t=e.split("/");if(t.length<n.length)return false;let i=t.length-n.length;return n.every((r,o)=>qe(t[i+o],r))}function ld(e,n){return e.split("/").some(t=>qe(t,n))}var Zo=[{label:".env*",test:e=>qe(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>qe(e,"*.key")},{label:"*.pem",test:e=>qe(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Hn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Hn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Hn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Hn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>ld(n,".crewx")}];function zn(e,n,t){for(let i of Zo)if(i.test(e,n,t))return i.label;return null}function ii(e){let n=[],t=[];function i(r,o,s){let a;try{a=J__namespace.readdirSync(r,{withFileTypes:!0});}catch{return}a.sort((d,c)=>d.name.localeCompare(c.name));for(let d of a){let c=o?`${o}/${d.name}`:d.name,p=ee__namespace.join(r,d.name);if(d.isSymbolicLink()){let l;try{l=J__namespace.statSync(p);}catch{t.push({path:c,rule:"symlink"});continue}if(l.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let I=s??zn(d.name,c,false);I?t.push({path:c,rule:I}):t.push({path:c,rule:"symlink"});continue}if(d.isDirectory()){let l=s??zn(d.name,c,true);i(p,c,l);continue}if(d.isFile()){let l=s??zn(d.name,c,false);l?t.push({path:c,rule:l}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((r,o)=>r.path<o.path?-1:r.path>o.path?1:0),{included:n,excluded:t}}g();var ud=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function fd(e){return e.includes(0)}function oi(e,n,t){let i=[];for(let r of n){let o=ee__namespace.join(e,r),s;try{let d=t?.get(r);s=d===void 0?J__namespace.readFileSync(o):Buffer.from(d);}catch{continue}if(fd(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((d,c)=>{for(let{rule:p,regex:l}of ud)l.test(d)&&i.push({path:r,line:c+1,rule:p});});}return i}g();g();var Ne=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function T(e,n){return new Ne(e,n)}var tr=/^[a-z0-9-]+$/,yd=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Ad=/^[A-Za-z_][A-Za-z0-9_]*$/;function Id(e){let n=ee__namespace.join(e,"crewx.yaml");if(!J__namespace.existsSync(n))return {};let t;try{t=ir__namespace.load(J__namespace.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let r=i;return {name:typeof r.name=="string"?r.name:void 0,version:typeof r.version=="string"?r.version:void 0,description:typeof r.description=="string"?r.description:void 0,requiredEnv:r.requiredEnv,crewxMinVersion:typeof r.crewxMinVersion=="string"?r.crewxMinVersion:void 0}}function gd(e){return ri__namespace.createHash("sha256").update(e).digest("hex")}function or(e){let n;try{n=J__namespace.lstatSync(e);}catch{throw T("PACKAGE_FILE_INVALID",`file is not readable: ${ee__namespace.basename(e)}`)}if(n.isSymbolicLink())throw T("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw T("PACKAGE_FILE_INVALID","only regular files are publishable");return ri__namespace.createHash("sha256").update(new Uint8Array(J__namespace.readFileSync(e))).digest("hex")}function md(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function rr(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||ee__namespace.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw T("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function hd(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw T("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function sr(e){if(!yd.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function ar(e,n,t={}){let i=Id(e),r=i.name??ee__namespace.basename(e);if(!tr.test(r))throw new Error(`publish: invalid name "${r}" \u2014 must match ${tr} (lowercase letters, numbers, hyphen only)`);let o=t.version??i.version;if(!o)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");sr(o);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let p of s){if(typeof p!="string"||!Ad.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);a.push(p);}let d=n.map(p=>(rr(p),{path:p,sha256:or(ee__namespace.join(e,p))})).sort((p,l)=>p.path<l.path?-1:p.path>l.path?1:0),c={name:r,version:o,type:"template",description:i.description??"",files:d,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function _d(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw T("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function cr(e,n){if(hd(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(sr(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw T("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let s=n.includedFiles.includes(`${i}manifest.json`),a=n.includedFiles.includes(`${i}ui-plugin.json`);if(!s&&!a)throw T("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(s&&!a)throw T("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw T("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw T("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let r=new Set,o=n.includedFiles.map(s=>{if(rr(s),!s.startsWith(i))throw T("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&r.add(s),{path:s,sha256:a===void 0?or(ee__namespace.join(e,s)):gd(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>md(s.path,a.path));if(r.size>0&&(r.size!==1||!r.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:_d(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:o,requiredEnv:[]}}g();function dr(e){return ri__namespace.createHash("sha256").update(e).digest("hex")}function yr(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||ee__namespace.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw T("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=ee__namespace.resolve(e),i=ee__namespace.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${ee__namespace.sep}`))throw T("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function pr(e,n){let t=yr(e,n),i;try{i=J__namespace.lstatSync(t);}catch{throw T("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw T("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw T("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(J__namespace.readFileSync(t))}async function Ar(e,n,t={}){let i=ee__namespace.join(e,".crewx","publish");J__namespace.mkdirSync(i,{recursive:true});let r=ee__namespace.join(i,`${n.name}-${n.version}.tgz`),o=ee__namespace.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=J__namespace.mkdtempSync(ee__namespace.join(lr__namespace.tmpdir(),"crewx-publish-"));try{let a=new Set,d=[];for(let c of n.files){if(a.has(c.path))throw T("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let p=t.generatedFiles?.get(c.path);if(c.generated===!0&&p===void 0)throw T("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let _=pr(e,c.path);if(t.sourceFileHashes.get(c.path)!==dr(_))throw T("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let l=p??pr(e,c.path);if(dr(l)!==c.sha256)throw T("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let I=yr(s,c.path);J__namespace.mkdirSync(ee__namespace.dirname(I),{recursive:!0}),J__namespace.writeFileSync(I,new Uint8Array(l)),d.push(c.path);}J__namespace.writeFileSync(ee__namespace.join(s,"manifest.json"),JSON.stringify(n,null,2)),await fr__namespace.create({gzip:!0,file:o,cwd:s,portable:!0,noMtime:!0},["manifest.json",...d]),J__namespace.renameSync(o,r);}finally{try{J__namespace.rmSync(o,{force:!0});}catch{}J__namespace.rmSync(s,{recursive:true,force:true});}return r}g();g();var Ze="/api/v1";var Pd=201,Dd=200,bd=409,si=401,Ir={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Nd(){return process.env.WI013_FAKE_UPLOAD==="1"}function Sd(e){let n=zlib.gunzipSync(new Uint8Array(e)),t=zlib.gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Md(e){return e.replace(/\/+$/,"")}async function In(e){try{return await e.json()}catch{return null}}function gr(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Ld(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Od(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function mr(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,r=[t.code,t.message,i?.code,i?.message];for(let o of r){if(typeof o!="string"||!Object.prototype.hasOwnProperty.call(Ir,o))continue;let s=o,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return T(Ir[s],a)}}async function Rd(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Md(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,r=e.manifest.type==="app"?e.manifest:void 0,o=r!==void 0,s=r?.appId,a;try{a=await fetch(`${n}${Ze}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let d=await In(a),c=Ld(d),p=Od(d),l=o&&p!==void 0?p:i,I;if(a.status===Pd)I="created";else if(o&&a.status===Dd){if(c===void 0)throw T("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");I="existing";}else if(a.status===bd){if(o)throw mr(d,i)??T("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);I="existing";}else throw a.status===si?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let _="not-needed",E=null;if(I==="existing"&&!o){let N;try{N=await fetch(`${n}${Ze}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let M=await In(N);if(N.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${N.status}`);let f=gr(M,"publisher items",N.status)?.items;if(!Array.isArray(f))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${N.status}`);let A=f.find(D=>!D||typeof D!="object"?false:D.slug===i);if(!A||typeof A.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${N.status}`);if(E=A.version,E!==e.manifest.version){let D;try{D=await fetch(`${n}${Ze}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!D.ok)throw await In(D),D.status===si?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${D.status})`):D.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${D.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${D.status}`);_="applied";}}let L=J__namespace.readFileSync(e.tgzPath),b=Nd()?Sd(L):L,v=new FormData;v.set("archive",new Blob([new Uint8Array(b)],{type:"application/gzip"}),`${l}-${e.manifest.version}.tgz`);let U=o&&c!==void 0?c:i,C;try{C=await fetch(`${n}${Ze}/publisher/items/${encodeURIComponent(U)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:v});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(C.status===si)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!C.ok){let N=await In(C);if(o){let M=mr(N,l);if(M)throw M}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${C.status}`)}let F=await In(C),h=gr(F,"upload",C.status),m=typeof h.contentId=="string"&&h.contentId.length>0?h.contentId:c;if(o&&m===void 0)throw T("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:l,version:e.manifest.version,...m===void 0?{}:{contentId:m},artifactChecksum:h.artifactChecksum,artifactSizeBytes:h.artifactSizeBytes,submitOutcome:I,versionUpdate:_,serverVersionBefore:E}}var wd=1e4,Ud=100*1024*1024;function ai(e){return ri__namespace.createHash("sha256").update(e).digest("hex")}function Cd(e){if(e===null||typeof e!="object"||Array.isArray(e))return false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Gn(e,n){if(!n||n.includes("\\")||n.includes("\0")||ee__namespace.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw T("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=ee__namespace.resolve(e,...n.split("/")),i=ee__namespace.resolve(e);if(t!==i&&!t.startsWith(`${i}${ee__namespace.sep}`))throw T("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let r;try{r=J__namespace.lstatSync(t);}catch{throw T("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(r.isSymbolicLink())throw T("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!r.isFile())throw T("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(J__namespace.readFileSync(t))}function Wn(e,n){return e===n||e.startsWith(`${n}/`)}function kd(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function _r(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new Ne("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function Tr(e,n,t,i){let r=_r(t.maxFileCount??t.maxFiles,wd,"max file count"),o=_r(t.maxTotalBytes??t.maxBytes,Ud,"max total bytes");if(n.length>r)throw new Ne("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${r})`);let s=0;for(let a of n){let d=i?.get(a);if(d!==void 0?s+=d.byteLength:s+=Gn(e,a).byteLength,s>o)throw new Ne("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${o})`)}}function xd(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function vd(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw T("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw T("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw T("APP_ID_REQUIRED")}function jd(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw T("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw T("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function Vd(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw T("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function Fd(e,n){let t=[];for(let i of e.excluded)t.push(Wn(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)Wn(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(kd)}function Bd(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function Hd(e,n,t,i){let r={};for(let l of Q){let I=`${t}/${l}`;i.includes(I)&&(r[l]=Gn(e,I));}if(Object.keys(r).length===0)throw T("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let o=rn(r,{mode:"local"});if(!o.ok)throw T("APP_UI_MANIFEST_INVALID",Bd(o.rejection));if(o.manifest.pluginId!==n.appId)throw T("APP_DEFINITION_CONFLICT",`${o.file} identity no longer matches the selected App`);let s=r[Ae],a=s===void 0?void 0:ai(s),d=`${t}/ui/index.html`;if(!i.includes(d))throw T("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let c=ai(Gn(e,d)),p=JSON.parse(JSON.stringify(o.v2Input));if(p.entryHash=c,Object.prototype.hasOwnProperty.call(p,"initialState")){let l=p.initialState;if(!Cd(l)||l.path!=="ui/state.json")throw T("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let I=`${t}/ui/state.json`;if(!i.includes(I))throw T("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let _=Gn(e,I);p.initialState={...l,hash:ai(_)};}try{let l=ke(p,{mode:"published"});return {bytes:new Uint8Array(Buffer.from(Zn(l),"utf8")),...a===void 0?{}:{legacySourceHash:a}}}catch(l){throw l instanceof q?T("APP_UI_MANIFEST_INVALID",l.code):T("APP_UI_MANIFEST_INVALID")}}async function zd(e,n){let{included:t,excluded:i}=ii(e);Tr(e,t,n);let r=ar(e,t,{version:n.version}),o=oi(e,t);return {plan:{manifest:r,included:t,excluded:i,secretFindings:o},archiveOptions:{}}}async function $d(e,n){vd(n);let t=await qo(e),i=jd(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw T("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let r=Vd(i),o=ii(e);if(o.excluded.some(_=>Wn(_.path,r)&&(_.rule==="symlink"||_.rule==="symlink-dir")))throw T("PACKAGE_SYMLINK","selected App package contains a symlink");let s=o.included.filter(_=>Wn(_,r)),a=Fd(o,r),d=new Map,c=new Map;if(i.capabilities.includes("screen")){let _=Hd(e,i,r,s),E=`${r}/${Ae}`;d.set(E,_.bytes),_.legacySourceHash!==void 0?c.set(E,_.legacySourceHash):(s.push(E),s.sort());}if(i.capabilities.includes("skill")&&!s.includes(`${r}/SKILL.md`))throw T("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");Tr(e,s,n,d);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:r,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:d},l=cr(e,p),I=oi(e,s,d);return {plan:{manifest:l,included:s,excluded:a,secretFindings:I},archiveOptions:{generatedFiles:d,sourceFileHashes:c}}}async function Pr(e,n){let t=ee__namespace.resolve(e);if(xd(n))return $d(t,n);if(n.expectedDefinitionHash!==void 0)throw T("APP_ID_REQUIRED");return zd(t,n)}async function Tf(e,n={}){return (await Pr(e,n)).plan}function Gd(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new Ne("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function Dr(e,n={}){let t=ee__namespace.resolve(e),i=await Pr(t,n);i.plan.secretFindings.length>0&&Gd(i.plan.secretFindings);let r=await Ar(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:r}}async function Pf(e,n={}){return Dr(e,n)}async function Df(e,n){let t=await Dr(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
2
+ exports.DEFAULT_PUBLISH_MAX_BYTES=Ud;exports.DEFAULT_PUBLISH_MAX_FILES=wd;exports.EXCLUDE_RULES=Zo;exports.MARKETPLACE_API_PREFIX=Ze;exports.PublishError=Ne;exports.packApp=Df;exports.packPublish=Dr;exports.packTemplate=Pf;exports.planPublish=Tf;exports.uploadToMarketplace=Rd;