@crewx/sdk 0.9.0-rc.140 → 0.9.0-rc.142

package/dist/esm/publish/index.js

@@ -1,2 +1,2 @@
-import*as ee from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as ri from'crypto';import {createHash}from'crypto';import {isIP}from'net';import*as X from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as cr from'js-yaml';import {load}from'js-yaml';import*as Ir from'os';import*as mr from'tar';import {gunzipSync,gzipSync}from'zlib';var V=(e,n)=>()=>(e&&(n=e(e=0)),n);var m=V(()=>{});var R,hn=V(()=>{m();R=class extends Error{constructor(t,i=t,r){super(i);this.code=t;this.currentRevision=r;}code;currentRevision;name="UiRuntimeError"};});function Qn(e){return Rr.test(e)||wr.test(e)}function se(){throw new R("INPUT_INVALID","JSON value is not projection-safe")}function xr(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function qn(e,n,t,i,r,o){if(n>i&&se(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(Ur.test(e)||kr.test(e)&&!Vr(r,o)||Cr.test(e))&&se(),e;if(typeof e=="number")return Number.isFinite(e)||se(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&se();let s=e;t.has(s)&&se(),t.add(s);try{if(Array.isArray(e))return e.map(d=>qn(d,n+1,t,i,r,o));xr(s)||se();let a={};for(let[d,c]of Object.entries(e))Qn(d)&&se(),a[d]=qn(c,n+1,t,i,[...r,d],o);return a}finally{t.delete(s);}}function he(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>jr)&&se(),(!Array.isArray(t)||t.some(r=>typeof r!="string"))&&se();let i=qn(e,0,new Set,vr+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&se(),i}function He(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((r,o)=>t[o]===r)}function Vr(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>He(t,i))}function ze(e){try{let n=JSON.stringify(e);return n===void 0&&se(),n}catch{se();}}function Zn(e){return Array.isArray(e)?e.map(Zn):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Zn(e[n])])):e}function ne(e){return ze(Zn(e))}function et(e){return Buffer.byteLength(e,"utf8")}var Rr,wr,Ur,Cr,kr,vr,jr,_e=V(()=>{m();hn();Rr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,wr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,Ur=/<\/?[A-Za-z][^>]*>/,Cr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,kr=/^(?:https?|file|ftp|ws|wss):\/\//i;vr=8,jr=4;});var di=V(()=>{m();_e();});function $e(e){return Fr.has(e)||Br.test(e)||Hr.test(e)}var pi,Fr,Br,Hr,_n,tn,fe,nt,tt,it,ot,rt,Ue=V(()=>{m();pi=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],Fr=new Set(pi),Br=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Hr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;_n=/^[A-Za-z0-9_]+$/,tn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,fe=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,nt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,tt=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,it=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,ot=["blue","violet","emerald","amber","rose","sky","slate","indigo"],rt=["inline","panel"];});function st(e){return typeof e=="string"&&li.includes(e)}var li,ui=V(()=>{m();Ue();li=["text/plain","application/json"];});function En(e){if(!at(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!zr(e.in)||Object.hasOwn(e,"out")&&!$r(e.out))}function zr(e){return at(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&st(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function $r(e){return at(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&st(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function at(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var ct=V(()=>{m();ui();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function pe(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(r=>r.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=he(t);return createHash("sha256").update(ne(i)).digest("hex")}function Ee(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new R("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Wr.test(e.sourceHash)))throw new R("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||pe(e)!==e.hash)throw new R("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Kr(i)))throw new R("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new R("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new R("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new R("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&dt(t.resultProjection),t.content!==void 0&&!En(t.content))throw new R("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new R("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new R("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new R("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new R("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new R("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new R("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new R("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new R("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&dt(e.stateProjection),e.summaryProjection){dt(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new R("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(r=>!["readTool","actionTool","hostTools","agentAccess"].includes(r)))throw new R("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[r,o]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(o!==void 0){if(Jr(o,r==="readTool"),n.has(o.name))throw new R("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(o.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new R("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let r={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[o,s]of Object.entries(t)){if(!Object.hasOwn(r,o)||r[o]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new R("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([r,o])=>!r||!Object.hasOwn(e.actions,r)||o!=="allowed"&&o!=="denied")))throw new R("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new R("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>He(t,i))))throw new R("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function Jr(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],r=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(o=>!i.includes(o)&&!(n&&o==="fixedResult"))||i.some(o=>!Object.hasOwn(t,o))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(o=>o!=="model"&&o!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let o=he(t.inputSchema);if(o.type!==void 0&&o.type!=="object")throw new Error("schema type");if(r){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let d=he(a.structuredContent);if(et(ze(d))>4*1024)throw new Error("fixed result size")}}catch{throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function dt(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new R("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Kr(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Wr,Ce=V(()=>{m();_e();hn();ct();Wr=/^[0-9a-f]{64}$/;});var Oe,pt=V(()=>{m();Oe="window";});function fi(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!Xr.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var Xr,yi=V(()=>{m();Xr=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function F(e){throw new lt(e)}function as(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function cs(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&F("CSP_ORIGIN_INVALID"),t.value}function Tn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=cs(e,n);Array.isArray(t)||F("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(o=>typeof o!="string"||o!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(o))&&F("CSP_ORIGIN_INVALID");let r=[];for(let o=0;o<t.length;o+=1)(!Object.prototype.hasOwnProperty.call(t,o)||typeof t[o]!="string")&&F("CSP_ORIGIN_INVALID"),r.push(t[o]);return Object.keys(t).length!==t.length&&F("CSP_ORIGIN_INVALID"),r}function ds(e){let n;try{n=JSON.stringify(e);}catch{F("CSP_ORIGIN_INVALID");}return n===void 0&&F("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function gi(e,n){/\s|\\/u.test(e)&&F("CSP_ORIGIN_INVALID");let t=ts.exec(e);t||F("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),r=t[2];(r.includes("@")||r.includes("%")||r.includes("*"))&&F("CSP_ORIGIN_INVALID"),(r.startsWith("[")?is:os).test(r)||F("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&F("CSP_ORIGIN_INVALID");let s;try{s=new URL(e);}catch{F("CSP_ORIGIN_INVALID");}(s.protocol!==`${i}:`||s.username!==""||s.password!==""||s.search!==""||s.hash!=="")&&F("CSP_ORIGIN_INVALID");let a=s.hostname.toLowerCase();if((!a||a.includes("%"))&&F("CSP_ORIGIN_INVALID"),!a.startsWith("[")){let c=a.endsWith(".")?a.slice(0,-1):a;(c.length===0||c.length>253)&&F("CSP_ORIGIN_INVALID"),c.split(".").some(y=>y.length>63||!rs.test(y))&&F("CSP_ORIGIN_INVALID");}let d=s.origin;return (d==="null"||!d.startsWith(`${i}://`))&&F("CSP_ORIGIN_INVALID"),{origin:d,hostname:a}}function ps(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function mi(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function Ei(e){let n=ps(e);return mi(n,3221225472,24)?n!==3221225481&&n!==3221225482:ss.some(([t,i])=>mi(n,t,i))}function ls(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((o,s)=>o<<16n|BigInt(Number.parseInt(s,16)),0n)}function us(e){let n=ls(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let r=Number(n&0xffffffffn);return Ei([r>>>24&255,r>>>16&255,r>>>8&255,r&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function fs(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return Ei(t);if(i===6)return us(t);let r=e.toLowerCase().replace(/\.$/,"");return !r||!r.includes(".")||n.has(r)?true:ns.some(o=>r===o||r.endsWith(`.${o}`))}function hi(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function _i(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function Ti(e,n={}){if(e===void 0){let I=_i({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(I,"utf8").digest("hex")})}as(e)||F("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(I=>typeof I!="string")&&F("CSP_ORIGIN_INVALID"),t.some(I=>!es.has(I))&&F("CSP_AXIS_UNKNOWN");let i=Tn(e,"connectDomains"),r=Tn(e,"frameDomains"),o=Tn(e,"resourceDomains"),s=Tn(e,"baseUriDomains");(o.length>0||s.length>0)&&F("CSP_AXIS_UNSUPPORTED"),(ds(e)>qr||i.length>Ii||r.length>Ii||i.length+r.length>Zr||[...i,...r].some(I=>new TextEncoder().encode(I).byteLength>Qr))&&F("CSP_LIMIT_EXCEEDED");let d=i.map(I=>gi(I,"connectDomains")),c=r.map(I=>gi(I,"frameDomains")),p=new Set((n.runtimeHostnames??[]).map(I=>I.toLowerCase().replace(/\.$/,"")));[...d,...c].some(I=>fs(I.hostname,p))&&F("CSP_ORIGIN_FORBIDDEN");let y={declared:true,connectDomains:hi(d),frameDomains:hi(c)},A=_i(y);return Object.freeze({...y,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(A,"utf8").digest("hex")})}var qr,Ii,Zr,Qr,es,ns,ts,is,os,rs,ss,lt,Pi=V(()=>{m();qr=4096,Ii=16,Zr=32,Qr=512,es=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),ns=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],ts=/^(https|wss):\/\/([^/?#]+)$/i,is=/^\[[^\]]+\](?::[0-9]+)?$/,os=/^[^:\[\]]+(?::[0-9]+)?$/,rs=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,ss=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],lt=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function rn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function l(e,n=e,t,i){throw new Q(e,n,t,i)}function z(e,n){try{return n()}catch(t){throw t instanceof Q?t.withPathPrefix(e):t}}function $(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function U(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function Fs(e,n){let t={};for(let[i,r]of Object.entries(e))i!==n&&(t[i]=r);return t}function G(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e).find(s=>!i.has(s));r!==void 0&&l("MANIFEST_INVALID","MANIFEST_INVALID",r,"unknown-key");let o=n.find(s=>!U(e,s));o!==void 0&&l("MANIFEST_INVALID","MANIFEST_INVALID",o,"missing-key");}function Nn(e,n=false,t=false,i=false){return gs.test(e)||!i&&hs.test(e)||ms.test(e)||t&&Di.test(e)||_s.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Di.test(e))}function bn(e,n=new Set,t=0,i=false,r=false,o=""){if(typeof e=="string"){Nn(e,i,r)&&l("UNSAFE_VALUE","UNSAFE_VALUE",o,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&l("MANIFEST_INVALID","MANIFEST_INVALID",o),n.add(e);try{if(Array.isArray(e)){e.forEach((s,a)=>bn(s,n,t+1,!1,!1,rn(o,`[${a}]`)));return}$(e)||l("MANIFEST_INVALID","MANIFEST_INVALID",o);for(let[s,a]of Object.entries(e))bn(a,n,t+1,i&&t===0&&(s==="name"||s==="description"),r,rn(o,s));}finally{n.delete(e);}}}function ye(e,n){let t=e[n];return typeof t!="string"&&l("MANIFEST_INVALID"),t}function le(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&l("MANIFEST_INVALID"),i}function ut(e){return Is.test(e)||l("MANIFEST_INVALID"),e}function Ge(e){return As.test(e)||l("TOKEN_INVALID"),e}function Bs(e){return Ui.test(e)||l("MANIFEST_INVALID"),e}function Hs(e){$(e)||l("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let r=Bs(t);$(i)||l("MANIFEST_INVALID");let o=i.type;if(o==="text"){G(i,["type","maxLength"]),n[r]={type:o,maxLength:le(i,"maxLength",1)};continue}if(o==="text-list"){G(i,["type","max","itemMaxLength"]),n[r]={type:o,max:le(i,"max",0),itemMaxLength:le(i,"itemMaxLength",1)};continue}if(o==="step-list"){G(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=le(i,"min",0),a=le(i,"max",1);s>a&&l("MANIFEST_INVALID"),n[r]={type:o,min:s,max:a,labelMaxLength:le(i,"labelMaxLength",1),detailMaxLength:le(i,"detailMaxLength",1)};continue}typeof o=="string"&&l("SCHEMA_TYPE_UNSUPPORTED"),l("MANIFEST_INVALID");}return n}function zs(e,n,t){let i=e[n];(!i||i.type!==t)&&l("MANIFEST_INVALID");}function Pn(e,n,t){let i=ye(e,"field");return Ui.test(i)||l("MANIFEST_INVALID"),zs(n,i,t),i}function $s(e,n){$(e)||l("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&l("MANIFEST_INVALID"),Vs.includes(t)||l("PRIMITIVE_UNKNOWN"),t){case "card-shell":return G(e,["primitive"]),{primitive:t};case "meta-banner":return G(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Ge(ye(e,"badgeToken")),noticeToken:Ge(ye(e,"noticeToken"))};case "heading":return G(e,["primitive","field"]),{primitive:t,field:Pn(e,n,"text")};case "labeled-text":return G(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&l("MANIFEST_INVALID"),{primitive:t,titleToken:Ge(ye(e,"titleToken")),field:Pn(e,n,"text"),variant:"callout"};case "step-flow":return G(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Ge(ye(e,"titleToken")),field:Pn(e,n,"step-list")};case "text-list":{G(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Ge(ye(e,"titleToken")),field:Pn(e,n,"text-list")};return U(e,"emptyToken")&&(i.emptyToken=Ge(ye(e,"emptyToken"))),U(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&l("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return l("MANIFEST_INVALID")}function Gs(e,n){return Array.isArray(e)||l("MANIFEST_INVALID"),e.map(t=>$s(t,n))}function W(e="v2 manifest exceeds a contract limit",n,t){return l("LIMIT_EXCEEDED",e,n,t)}function ae(e="initial state is not projection-safe"){return l("INITIAL_STATE_INVALID",e)}function bi(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||xs.test(e)||vs.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),(Nn(e,true,true)||Es.test(e)||Ts.test(e)||Ps.test(e))&&l("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function ft(e,n){return (typeof e!="string"||!fe.test(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Ws(e){return (typeof e!="string"||!nt.test(e)||e==="*"||e==="all")&&l("MANIFEST_INVALID","action capability is invalid"),e}function Ci(e){return (typeof e!="string"||!ks.test(e))&&l("MANIFEST_INVALID","resource hash is invalid"),e}function yt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&W("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||l("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&l("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&l("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&W("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&l("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&W("v2 manifest array is too long",i,"array-too-long"),e.forEach((r,o)=>yt(r,n,t+1,rn(i,`[${o}]`)));return}$(e)||l("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[r,o]of Object.entries(e))yt(o,n,t+1,rn(i,r));}finally{n.delete(e);}}}function ki(e){return (typeof e!="string"||e.length>4096||!tn.test(e))&&(typeof e=="string"&&e.length>4096&&W("projection path is too long"),l("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>$e(t))&&l("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function At(e){$(e)||l("MANIFEST_INVALID","projection policy must be an object"),G(e,["allow"]),Array.isArray(e.allow)||l("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&W("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let r=ki(i);t.has(r)&&l("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(r),n.push(r);}return {allow:n}}function Js(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","dataPaths must be an array"),e.length>js&&W("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let r of e){let o=ki(r);i.has(o)&&l("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>He(o,s))||l("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(o),t.push(o);}return t}function We(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&l("MANIFEST_INVALID",`${n} is invalid`),e}function Ni(e,n){return (typeof e!="number"||!Number.isFinite(e))&&l("MANIFEST_INVALID",`${n} is invalid`),e}function It(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||Nn(e))&&l("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||l("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&W("schema enum is too deep"),t.has(e)&&l("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&W("schema enum array is too long"),e.map(r=>It(r,n+1,t));$(e)||l("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[r,o]of Object.entries(e))$e(r)&&l("MANIFEST_INVALID","schema enum contains a reserved key"),i[r]=It(o,n+1,t);return i}finally{t.delete(e);}}function Ks(e,n){if(e===void 0)return;Array.isArray(e)||l("MANIFEST_INVALID","schema required must be an array"),e.length>64&&W("schema required list is too long");let t=[],i=new Set;for(let r of e)(typeof r!="string"||!tn.test(r))&&l("MANIFEST_INVALID","schema required contains an invalid key"),r.length>4096&&W("schema required key is too long"),i.has(r)&&l("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,r)&&l("MANIFEST_INVALID","schema required references an undeclared property"),i.add(r),t.push(r);return t}function Xs(e,n){let t=n?tn:_n;return e.length>4096&&W("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>$e(i)))&&l("MANIFEST_INVALID","schema property name is invalid"),e}function gt(e,n=0,t=false){$(e)||l("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&W("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&l("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),l("MANIFEST_INVALID","action inputSchema type is required"));let r=["type","enum"];i==="string"&&r.push("minLength","maxLength"),i==="array"&&r.push("minItems","maxItems","items"),i==="object"&&r.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&r.push("minimum","maximum"),G(e,["type"],r.filter(a=>a!=="type"));let o={type:i};if(U(e,"enum")&&(Array.isArray(e.enum)||l("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&W("schema enum is too long"),o.enum=e.enum.map(a=>It(a))),i==="string"&&(U(e,"minLength")&&(o.minLength=We(e.minLength,"schema minLength",4096)),U(e,"maxLength")&&(o.maxLength=We(e.maxLength,"schema maxLength",4096)),o.minLength!==void 0&&o.maxLength!==void 0&&o.minLength>o.maxLength&&l("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(U(e,"minimum")&&(o.minimum=Ni(e.minimum,"schema minimum")),U(e,"maximum")&&(o.maximum=Ni(e.maximum,"schema maximum")),o.minimum!==void 0&&o.maximum!==void 0&&o.minimum>o.maximum&&l("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(U(e,"minItems")&&(o.minItems=We(e.minItems,"schema minItems",128)),U(e,"maxItems")&&(o.maxItems=We(e.maxItems,"schema maxItems",128)),o.minItems!==void 0&&o.maxItems!==void 0&&o.minItems>o.maxItems&&l("MANIFEST_INVALID","schema array length bounds are inverted"),U(e,"items")&&(o.items=gt(e.items,n+1,false))),i==="object"){let a;if(U(e,"properties")){$(e.properties)||l("MANIFEST_INVALID","schema properties must be an object");let c=Object.entries(e.properties);c.length>64&&W("schema properties are too many"),a={};for(let[p,y]of c){let A=Xs(p,t);a[A]=gt(y,n+1,false);}o.properties=a;}U(e,"minProperties")&&(o.minProperties=We(e.minProperties,"schema minProperties",64)),U(e,"maxProperties")&&(o.maxProperties=We(e.maxProperties,"schema maxProperties",64)),o.minProperties!==void 0&&o.maxProperties!==void 0&&o.minProperties>o.maxProperties&&l("MANIFEST_INVALID","schema object property bounds are inverted");let d=Ks(e.required,a);d!==void 0&&(o.required=d),U(e,"additionalProperties")&&(e.additionalProperties!==false&&l("MANIFEST_INVALID","schema additionalProperties must be false"),o.additionalProperties=false);}let s=JSON.stringify(o);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&W("action inputSchema subtree is too large"),o}function Ys(e){let n=gt(e,0,true);return (n.type!=="object"||!n.properties)&&l("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function qs(e){if($(e)||l("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){G(e,Os);let n=e.handler;return (typeof n!="string"||!tt.test(n))&&l("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"){G(e,Rs,ws),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&l("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!it.test(i))&&l("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=U(e,"env")?Qs(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}l("MANIFEST_INVALID","action backend type is unsupported");}function Zs(e){$(e)||l("MANIFEST_INVALID","action must be an object"),G(e,Ss,Ms),U(e,"_meta")&&z("_meta",()=>xi(e._meta));let n=z("actionId",()=>ft(e.actionId,"actionId"));Qn(n)&&l("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=z("capability",()=>Ws(e.capability)),i=e.mutation;typeof i!="boolean"&&l("MANIFEST_INVALID","action mutation must be boolean","mutation");let r=z("inputSchema",()=>Ys(e.inputSchema)),o;if(U(e,"dataInputs")){Array.isArray(e.dataInputs)||l("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let p=r.properties,y=new Set,A=[];for(let I of e.dataInputs)(typeof I!="string"||!U(p,I)||y.has(I))&&l("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),y.add(I),A.push(I);o=A;}let s=z("resultProjection",()=>At(e.resultProjection)),a=z("backend",()=>qs(e.backend)),d;U(e,"content")&&((a.type!=="skill"||!En(e.content))&&l("MANIFEST_INVALID","action content declaration is invalid","content"),d=ea(e.content));let c;if(U(e,"confirmation")){let p=e.confirmation;p!=="none"&&p!=="native"&&l("MANIFEST_INVALID","action confirmation is invalid","confirmation"),c=p;}return {actionId:n,capability:t,mutation:i,inputSchema:r,resultProjection:s,backend:a,...d===void 0?{}:{content:d},...o===void 0?{}:{dataInputs:o},...c===void 0?{}:{confirmation:c}}}function Qs(e){return fi(e)||l("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function ea(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function na(e){return $(e)||l("INITIAL_STATE_INVALID","initialState must be an object"),G(e,Us,Cs),e.path!=="ui/state.json"&&l("MANIFEST_INVALID","initialState path is not fixed"),U(e,"hash")?{path:"ui/state.json",hash:Ci(e.hash)}:{path:"ui/state.json"}}function ta(e){let n=["wasm","terminal","htmlDocuments"];return (!$(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&l("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function ia(e,n){let t;try{t=Ti(e);}catch(i){let r=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return l("MANIFEST_INVALID",r,void 0,r.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&l("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&l("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function oa(e,n){bn($(e)&&U(e,"csp")?Fs(e,"csp"):e,new Set,0,true,true),yt(e),$(e)||l("MANIFEST_INVALID"),G(e,bs,Ns),U(e,"_meta")&&z("_meta",()=>xi(e._meta)),e.manifestVersion!==2&&l("MANIFEST_INVALID");let t;U(e,"runtime")&&(t=z("runtime",()=>ta(e.runtime)));let i;U(e,"csp")&&(i=z("csp",()=>ia(e.csp,t)));let r=z("pluginId",()=>ft(e.pluginId,"pluginId")),o=z("definitionId",()=>ft(e.definitionId,"definitionId")),s=z("version",()=>le(e,"version",1)),a=z("name",()=>bi(e.name,"name")),d=z("description",()=>bi(e.description,"description")),c;U(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&l("MANIFEST_INVALID","icon is invalid","icon"),c=e.icon);let p;U(e,"tone")&&((typeof e.tone!="string"||!ot.includes(e.tone))&&l("MANIFEST_INVALID","tone is invalid","tone"),p=e.tone),e.entry!=="ui/index.html"&&l("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let y;U(e,"entryHash")&&(y=z("entryHash",()=>Ci(e.entryHash)));let A;U(e,"initialState")&&(A=z("initialState",()=>na(e.initialState)));let I;U(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&l("MANIFEST_INVALID","usage is invalid","usage"),I=e.usage);let E;U(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&l("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),E=e.detailPanel);let O;if(U(e,"displayModes")){((I??Oe)!==Oe||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&l("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let u=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(f=>typeof f!="string"||!u.has(f)))&&l("MANIFEST_INVALID","displayModes are invalid","displayModes"),O=e.displayModes;}(I??Oe)===Oe&&E!==void 0&&l("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let b=n.mode??"local";b!=="local"&&b!=="installed"&&b!=="published"&&l("MANIFEST_INVALID","manifest mode is invalid"),b!=="local"&&y===void 0&&l("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),b!=="local"&&A!==void 0&&A.hash===void 0&&l("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&l("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&W("surfaces exceed the v2 limit","surfaces","too-many-items");let j=[],C=new Set;for(let u of e.surfaces)(typeof u!="string"||!rt.includes(u))&&l("MANIFEST_INVALID","surface is unsupported","surfaces"),C.has(u)&&l("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),C.add(u),j.push(u);$(e.size)||l("MANIFEST_INVALID","size must be an object","size"),z("size",()=>G(e.size,["height"]));let x=z("size",()=>le(e.size,"height",1));x>720&&W("size.height exceeds the v2 limit","size.height","too-large");let B=z("stateProjection",()=>At(e.stateProjection)),_=e.summaryProjection===void 0?void 0:z("summaryProjection",()=>At(e.summaryProjection));_!==void 0&&_.allow.some(u=>!B.allow.includes(u))&&l("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let h=z("dataPaths",()=>Js(e.dataPaths,B.allow));Array.isArray(e.actions)||l("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&W("actions exceed the v2 limit","actions","too-many-items");let S=[],w=new Set;for(let[u,f]of e.actions.entries()){let g=`actions[${u}]`,P=z(g,()=>Zs(f));if(w.has(P.actionId)&&l("MANIFEST_INVALID","actions contain a duplicate actionId",`${g}.actionId`,"duplicate-item"),P.backend.type==="core"&&P.backend.handler==="state.set"){P.mutation||l("MANIFEST_INVALID","state.set actions must be mutations",`${g}.mutation`);for(let N of Object.keys(P.inputSchema.properties))B.allow.includes(N)||l("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${g}.inputSchema.properties`);}w.add(P.actionId),S.push(P);}return {manifestVersion:2,pluginId:r,definitionId:o,version:s,name:a,description:d,...c===void 0?{}:{icon:c},...p===void 0?{}:{tone:p},entry:"ui/index.html",...y===void 0?{}:{entryHash:y},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...A===void 0?{}:{initialState:A},...I===void 0?{}:{usage:I},...E===void 0?{}:{detailPanel:E},...O===void 0?{}:{displayModes:O},surfaces:j,size:{height:x},stateProjection:B,..._===void 0?{}:{summaryProjection:_},...h===void 0?{}:{dataPaths:h},actions:S}}function xi(e){$(e)||l("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>Ls)&&W("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function ra(e){let n={},t={};for(let o of e.actions){n[o.actionId]={capabilities:[o.capability],inputKeys:Object.keys(o.inputSchema.properties??{}),...o.dataInputs===void 0?{}:{dataInputs:o.dataInputs},resultProjection:o.resultProjection,...o.confirmation===void 0?{}:{confirmation:o.confirmation},...o.content===void 0?{}:{content:o.content},...o.backend.type!=="skill"||o.backend.env===void 0?{}:{env:o.backend.env}};let s=o.backend.type==="skill"||o.backend.type==="core"&&o.backend.handler==="state.set";t[o.actionId]={actionId:o.actionId,mutation:o.mutation,backend:o.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},r={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:r}}function mt(e,n,t,i,r,o){if(typeof e=="string"){let s=r.length>0&&o.some(a=>He(r.join("."),a));return (e.length>4096||Nn(e,false,false,s))&&ae("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||ae("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&ae("state contains a non-JSON value"),t>8&&ae("state is too deep"),n.has(e)&&ae("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&ae("state array is too long"),s=e.map(d=>mt(d,n,t+1,65536,r,o));else {$(e)||ae("state contains a non-plain object");let d={};for(let[c,p]of Object.entries(e))(c.length>4096||!_n.test(c)||$e(c))&&(c.length>4096&&ae("state key is too long"),ae("state contains a reserved or invalid key")),d[c]=mt(p,n,t+1,65536,[...r,c],o);s=d;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&ae("state subtree is too large"),s}finally{n.delete(e);}}function _t(e,n=[]){$(e)||ae("initial state must be a JSON object");let t=mt(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&ae(),t}function sa(e,n={}){bn(e),$(e)||l("MANIFEST_INVALID"),G(e,Ds),e.manifestVersion!==1&&l("MANIFEST_INVALID");let t=ut(ye(e,"pluginId")),i=ut(ye(e,"definitionId")),r=le(e,"version",1),o=le(e,"primitiveSet",1),s=n.supportedPrimitiveSet??ys;(!Number.isSafeInteger(s)||s<1)&&l("MANIFEST_INVALID"),o>s&&l("PRIMITIVE_SET_UNSUPPORTED"),$(e.activation)||l("MANIFEST_INVALID"),G(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&l("MANIFEST_INVALID");let a=ut(ye(e.activation,"language")),d=Hs(e.schema),c=Gs(e.layout,d);return {manifestVersion:1,pluginId:t,definitionId:i,version:r,primitiveSet:o,activation:{kind:"fenced-code",language:a},schema:d,layout:c}}function aa(e,n={}){return $(e)||l("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&l("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?oa(e,n):sa(e,n)}function xe(e,n={}){try{return aa(e,n)}catch(t){if(t instanceof Q)throw t;return l("MANIFEST_INVALID")}}function sn(e,n={}){let t=xe(e,n);return t.manifestVersion===2?ra(t):t}var ys,As,Is,Ui,gs,ms,hs,_s,Di,Es,Ts,Ps,Ds,bs,Ns,Ss,Ms,Ls,Os,Rs,ws,Us,Cs,ks,xs,vs,js,Vs,Q,Et=V(()=>{m();pt();_e();ct();yi();Pi();Ue();ys=1,As=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Is=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ui=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,gs=/<\/?[A-Za-z][^>]*>/,ms=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,hs=/^(?:https?|file|ftp|ws|wss):\/\//i,_s=/^\s*(?:javascript|data):/i,Di=/data:[^,\s]*,/i,Es=/(?:https?|file|ftp|ws|wss):\/\//i,Ts=/javascript:/i,Ps=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,Ds=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],bs=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],Ns=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],Ss=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Ms=["confirmation","dataInputs","content","_meta"],Ls=4*1024,Os=["type","handler"],Rs=["type","command"],ws=["env"],Us=["path"],Cs=["hash"],ks=/^[0-9a-f]{64}$/,xs=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,vs=/[\r\n]/,js=16,Vs=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],Q=class e extends Error{constructor(t,i=t,r,o){super(i);this.code=t;this.path=r;this.rule=o;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,rn(t,this.path),this.rule)}};});function Fi(e){return typeof e=="string"&&e.length<=da&&ca.test(e)}function k(e,n,t,i,r){throw new Ae(e,{path:n,rule:t,...i===void 0?{}:{message:i},...r===void 0?{}:{file:r}})}function ce(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function te(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function Pe(e){let n=`_meta["${Re}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function fa(e){return e.toLowerCase().replace(/_/g,"-")}function ya(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return Pe(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return Pe("definitionVersion");case "definitionId":return Pe("definitionId");default:return Pe(`${t}${i}`)}}function Bi(e,n,t){return {path:t(e.path),rule:e.rule??fa(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function Hi(e){return JSON.parse(JSON.stringify(e))}function Dt(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&k("LIMIT_EXCEEDED",n,"string-too-long"),(pa.test(e)||la.test(e)||ua.test(e))&&k("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||k("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&k("MANIFEST_INVALID",n,"non-json-value"),t>8&&k("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&k("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&k("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((r,o)=>Dt(r,`${n}[${o}]`,t+1,i));return}ce(e)||k("MANIFEST_INVALID",n,"non-plain-object");for(let[r,o]of Object.entries(e))Dt(o,n===""?r:`${n}.${r}`,t+1,i);}finally{i.delete(e);}}}function ue(e,n){return (typeof e!="string"||e.length===0)&&k("MANIFEST_INVALID",n,"string"),e}function Ke(e,n){return ce(e)||k("MANIFEST_INVALID",n,"object"),e}function Aa(e,n){Array.isArray(e)||k("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>ue(t,`${n}[${i}]`));}function Ia(e,n){typeof e!="boolean"&&k("MANIFEST_INVALID",n,"boolean");}function an(e,n,t,i){for(let r of Object.keys(e))!t.includes(r)&&!i.includes(r)&&k("MANIFEST_INVALID",`${n}.${r}`,"unknown-key");for(let r of t)te(e,r)||k("MANIFEST_INVALID",`${n}.${r}`,"missing-key");}function ga(e,n){switch(Dt(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "icon":case "license":ue(n,e);return;case "author":{let t=Ke(n,e);an(t,e,["name"],["email","url"]);for(let i of Object.keys(t))ue(t[i],`${e}.${i}`);return}case "repository":{let t=Ke(n,e);an(t,e,[],["type","url"]);for(let i of Object.keys(t))ue(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||k("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Ke(t,r);an(o,r,["src","size"],["theme"]),ue(o.src,`${r}.src`),ue(o.size,`${r}.size`),te(o,"theme")&&ue(o.theme,`${r}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":Aa(n,e);return;case "tools":{Array.isArray(n)||k("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Ke(t,r);an(o,r,["name"],["description"]),ue(o.name,`${r}.name`),te(o,"description")&&ue(o.description,`${r}.description`);});return}case "prompts":{Array.isArray(n)||k("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Ke(t,r);an(o,r,["name","text"],["description","arguments"]),ue(o.name,`${r}.name`),ue(o.text,`${r}.text`);});return}case "tools_generated":case "prompts_generated":Ia(n,e);return;case "localization":case "compatibility":case "user_config":Ke(n,e);return;default:k("MANIFEST_INVALID",e,"unknown-key");}}function Sn(e){return typeof e=="string"&&fe.test(e)?e:void 0}function zi(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function ma(e){let n=Sn(e.name);if(n===void 0)return;let t=e._meta,i=ce(t)?t[Re]:void 0,r=ce(i)?i:{},o=te(r,"definitionId")?Sn(r.definitionId):n,s=te(r,"definitionVersion")?zi(r.definitionVersion):1;return {pluginId:n,...o===void 0?{}:{definitionId:o},...s===void 0?{}:{definitionVersion:s}}}function ha(e){let n=Sn(e.pluginId);if(n===void 0)return;let t=Sn(e.definitionId),i=zi(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function St(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!ce(n))return !1;let t=n._meta;return ce(t)&&te(t,Re)}catch{return  false}}function _a(e,n){if(e===ie)return n.builtinOnly===true;let t=n._meta,i=ce(t)?t[Re]:void 0;return ce(i)&&i.builtinOnly===true}function Ea(e){te(e,"server")&&k("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let s of Object.keys(e))bt.includes(s)||k("MANIFEST_INVALID",s,"unknown-key");for(let s of Nt)te(e,s)||k("MANIFEST_INVALID",s,"missing-key");e.manifest_version!==Tt&&k("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${Tt}"`),Fi(e.version)||k("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let n=e._meta;ce(n)||k("MANIFEST_INVALID","_meta","object"),te(n,Re)||k("MANIFEST_INVALID",Pe(),"missing-key");let t=n[Re];ce(t)||k("MANIFEST_INVALID",Pe(),"object");for(let s of Object.keys(t))Pt.includes(s)||Vi.includes(s)||k("MANIFEST_INVALID",Pe(s),"unknown-key");for(let s of Pt)te(t,s)||k("MANIFEST_INVALID",Pe(s),"missing-key");if(te(t,"definitionVersion")){let s=t.definitionVersion;(!Number.isSafeInteger(s)||s<1)&&k("MANIFEST_INVALID",Pe("definitionVersion"),"positive-integer");}let i={};for(let s of ji)te(e,s)&&(ga(s,e[s]),i[s]=Hi(e[s]));let r={};for(let[s,a]of Object.entries(n))s!==Re&&(r[s]=a);let o={manifestVersion:2,pluginId:e.name,definitionId:te(t,"definitionId")?t.definitionId:e.name,version:te(t,"definitionVersion")?t.definitionVersion:1,name:e.display_name,description:e.description};for(let[s,a]of Object.entries(t))s==="definitionId"||s==="definitionVersion"||(o[s]=a);return Object.keys(r).length>0&&(o._meta=r),{v2Input:o,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:i}}function Ta(e,n){ce(e)||k("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",Y);let t;try{t=Ea(e);}catch(o){throw o instanceof Ae?new Ae(o.code,{...o.reason,file:Y}):o}let i;try{let o=xe(t.v2Input,{mode:n.mode??"local"});o.manifestVersion!==2&&k("MANIFEST_INVALID","","v2-required"),i=o;}catch(o){throw o instanceof Q?new Ae(o.code,Bi(o,Y,ya)):o}let r=e.tools;if(Array.isArray(r)){let o=new Set(i.actions.map(s=>s.actionId));r.forEach((s,a)=>{let d=s.name;if(!o.has(d))throw new Ae("MANIFEST_INVALID",{path:`tools[${a}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:Y})});}return {file:Y,manifest:i,v2Input:t.v2Input,releaseVersion:e.version,...Object.keys(t.passthrough).length>0?{mcpb:t.passthrough}:{}}}function Pa(e,n){try{let t=xe(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new Ae("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:ie});return {file:ie,manifest:t,v2Input:e}}catch(t){throw t instanceof Q?new Ae(t.code,Bi(t,ie,i=>i??"")):t}}function Xe(e){return pe(sn(e).definition)}function vi(e){let{entryHash:n,initialState:t,...i}=e,r={...i};return t!==void 0&&(r.initialState={path:t.path}),Hi(r)}function Da(e,n){let t=vi(e),i=vi(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(o=>ne(t[o]??null)!==ne(i[o]??null))}function ba(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function Na(e,n){let t=Da(e,n),i=ba(e,n),r="";try{let o=Xe(e),s=Xe(n);i=i||o!==s,r=` (definition hash ${o.slice(0,12)} vs ${s.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||k("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${Y} and ${ie} normalize to different definitions${r}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function Sa(e,n){let t=n.maxBytes??262144,i=[],r=new TextDecoder("utf-8",{fatal:true});for(let o of J){let s=e[o];if(s===void 0)continue;if(s.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:o},files:[o]}};let a;try{a=JSON.parse(r.decode(s));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:o},files:[o]}}}if(!ce(a))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${o} must be a JSON object`,file:o},files:[o]}};i.push({file:o,raw:a});}return {parsed:i}}function ve(e,n={}){let{parsed:t,failure:i}=Sa(e,n),r=J.filter(p=>e[p]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};if(t.length===0)return {ok:false,rejection:{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]},parseFailure:true,builtinOnly:false};let o=t[0],s=o.file===Y?ma(o.raw):ha(o.raw),a=t.some(p=>_a(p.file,p.raw)),d=[];try{for(let p of t)d.push(p.file===Y?Ta(p.raw,n):Pa(p.raw,n));d.length===2&&Na(d[0].manifest,d[1].manifest);}catch(p){if(p instanceof Ae)return {ok:false,rejection:{code:p.code,reason:p.reason,files:p.code==="MANIFEST_DUAL_MISMATCH"?[...J]:p.reason.file===void 0?r:[p.reason.file]},parseFailure:false,...s===void 0?{}:{identity:s},builtinOnly:a};throw p}let c=d[0];return {ok:true,...c,identity:s??{pluginId:c.manifest.pluginId},files:r}}var Y,ie,J,Tt,Re,bt,Nt,ji,Pt,Vi,ca,da,pa,la,ua,Ae,Mn=V(()=>{m();Ce();_e();Ue();Et();Y="manifest.json",ie="ui-plugin.json",J=[Y,ie],Tt="0.3",Re="dev.crewx",bt=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),Nt=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),ji=Object.freeze(bt.filter(e=>e!=="server"&&!Nt.includes(e))),Pt=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),Vi=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp"]),ca=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,da=256,pa=/<\/?[A-Za-z][^>]*>/,la=/^\s*javascript:/i,ua=/data:[^,\s]*,/i;Ae=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});var Mt=V(()=>{m();di();Mn();Et();Ue();});function On(e,n=e){throw new we(e,n)}var we,Rn=V(()=>{m();we=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var eo=V(()=>{m();});var no=V(()=>{m();Ce();_e();Rn();eo();});function to(e,n){return Va.add(e),n!==void 0&&Fa.set(e,n),e}var Va,Fa,wn=V(()=>{m();Va=new WeakSet,Fa=new WeakMap;});function ln(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Ot(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e);return n.every(o=>Object.hasOwn(e,o))&&r.every(o=>i.has(o))}function ro(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))ro(n);return Object.freeze(e)}function q(e){throw new Ie("LINEAGE_INVALID",e)}function Ja(e){throw new Ie("LINEAGE_STALE",e)}function so(e){if(!ln(e)||!Ot(e,za,$a)||!ln(e.actions))return q("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!ln(n)||!Ot(n,Ga,Wa))return q("Lineage action definition shape is invalid");return e}function Ka(e){if(!ln(e)||!Ot(e,Ba,Ha))return q("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!io.test(e.hash))return q("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!io.test(e.sourceHash)))return q("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return q("Lineage compatibility marker is invalid");let n=so(e.definition);if(n.version!==e.version)return q("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return q("Lineage source hash does not match its definition");let t;try{t=pe(n),Ee({...n,hash:e.hash});}catch{return q("Lineage definition is invalid")}return t!==e.hash?q("Lineage definition hash does not match"):ro({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function oo(e){return e.stateProjection?.allow??[]}function Xa(e,n){let t=[],i=new Set(oo(n));oo(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let r=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!r.has(a))&&t.push("S2_DATA_PATHS");for(let[a,d]of Object.entries(e.actions)){let c=n.actions[a];if(c&&(d.confirmation??"native")==="native"&&(c.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(d=>!a.has(d))&&t.push("S5_SUMMARY_PROJECTION");}return t}function Ya(e,n){return ne(e)===ne(n)}function Rt(e,n){if(!Array.isArray(e)||e.length===0)return q("Definition lineage is missing");if(!ln(n)||typeof n.hash!="string")return q("Current definition is invalid");let t,i;try{let{hash:a,...d}=n;i=so(d),t={...i,hash:a},Ee(t);}catch{return q("Current definition is invalid")}let r=e.map(Ka),o=r[0].definition.id;if(r.some(a=>a.definition.id!==o))return q("Lineage definition ids do not match");if(r.some((a,d)=>d>0&&a.version<=r[d-1].version))return q("Lineage generations are not in increasing version order");if(r.some((a,d)=>r.findIndex(c=>c.hash===a.hash)!==d))return q("Lineage contains a duplicate hash");let s=r[r.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!Ya(s.definition,i))return Ja("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),d=new Set;for(let p of r)if(p.sourceHash===void 0)for(let y of Object.keys(p.definition.actions))a.has(y)&&d.add(y);let c=Object.keys(t.legacy.agentAccess??{});if(c.length!==d.size||c.some(p=>!d.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new Ie("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let a=0;a<r.length-1;a+=1){if(r.slice(a,-1).some(p=>p.compat==="break"))continue;let c=Xa(r[a].definition,t);if(c.length>0)throw new Ie("LINEAGE_INVALID",`Lineage compatibility failed: ${c.join(", ")}`,c)}return Object.freeze({entries:Object.freeze(r),current:t})}var Ie,io,Ba,Ha,za,$a,Ga,Wa,wt=V(()=>{m();Ce();_e();Ie=class extends Error{constructor(t,i=t,r=[]){super(i);this.code=t;this.violations=r;}code;violations;name="UiDefinitionLineageError"},io=/^[0-9a-f]{64}$/,Ba=["version","hash","definition"],Ha=["sourceHash","compat"],za=["id","version","actions"],$a=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],Ga=["capabilities"],Wa=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var ao,co,po=V(()=>{m();ao=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],co=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var lo=V(()=>{m();Ce();wn();});function Ut(e,n=0){try{let t=he(e,n);return t.type!==void 0&&t.type!=="object"&&On("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof we)throw t;On("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function uo(e){if(e.length===0)return Ut({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Ut(i.inputSchema));return Ut(Qa(n,t),Za)}function Qa(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var un,Za,Ct=V(()=>{m();no();Ce();_e();wn();Rn();wt();po();lo();un=8*1024*1024,new Set(ao),new Set(co),Za=4;});function ec(e){if(e===null||typeof e!="object"||!(fo in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[fo]}function yo(e,n){let t=ec(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var fo,Ao=V(()=>{m();fo=Symbol("crewx.workspace-app-scan-cache.state");});function re(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new D("NOT_FOUND"):n==="ELOOP"?new D("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new D("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new D("READ_DENIED"):new D("READ_DENIED")}function oc(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new D("READ_DENIED")}function kt(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new D("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new D("PATH_ESCAPED");return n}function xn(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ze(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Vt(e,n){return e.dev===n.dev&&e.ino===n.ino}function Ft(e,n){return Vt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function Un(e){oc(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw re(i)}if(!t.isDirectory())throw new D("READ_DENIED");return {realRoot:n,identity:Ze(t)}}async function mo(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,r;try{if(i=resolve(e,t[0],t[1]),r=await realpath(i),!(await stat(r,{bigint:!0})).isDirectory())throw new D("READ_DENIED")}catch(o){throw o instanceof D?o:re(o)}if(!xn(n,r))throw new D("PATH_ESCAPED");return r}async function Cn(e,n,t,i){let r,o,s;try{r=await lstat(e,{bigint:!0}),o=await realpath(e),s=await stat(o,{bigint:!0});}catch(a){throw re(a)}if(!xn(n,o)||t!==void 0&&!xn(t,o))throw new D("PATH_ESCAPED");if(!r.isFile()||!s.isFile())throw new D("READ_DENIED");if(!Vt(i,r)||!Vt(i,s)||i.dev!==s.dev)throw new D("PATH_ESCAPED")}async function qe(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new D("PATH_ESCAPED")}if(t!==n.realRoot||!Ft(n.identity,Ze(i)))throw new D("PATH_ESCAPED")}function rc(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var D,jt,ic,go,vn,ho,Ht=V(()=>{m();D=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},jt=constants.O_NOFOLLOW,ic=constants.O_NONBLOCK,go=constants.O_RDONLY|(jt??0)|(ic??0);vn=class{async getRootIdentity(n){let t=await Un(n);return await qe(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=kt(t),r=await Un(n),o=resolve(n,...i),s,a;try{s=await realpath(o),a=await stat(s,{bigint:!0});}catch(d){let c=re(d);if(c.code==="NOT_FOUND")return [];throw c}if(!xn(r.realRoot,s)||!a.isDirectory())throw new D("PATH_ESCAPED");try{let d=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await qe(n,r),d.map(rc)}catch(d){let c=re(d);if(c.code==="NOT_FOUND")return [];throw c}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new D("READ_DENIED");if(jt===void 0)throw new D("UNSUPPORTED");let r=kt(t),o=await Un(n),s=resolve(n,...r),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new D("PATH_ESCAPED");let d;try{d=await open(s,go);}catch(c){throw re(c)}try{let c;try{let E=await d.stat({bigint:!0});c=Ze(E);}catch(E){throw re(E)}if(c.size>BigInt(i))throw new D("LIMIT_EXCEEDED");if(c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new D("LIMIT_EXCEEDED");await qe(n,o);let p=await mo(n,o.realRoot,r);await Cn(s,o.realRoot,p,c);let y=new Uint8Array(new ArrayBuffer(Number(c.size))),A=0;for(;A<y.byteLength;){let E;try{E=(await d.read(y,A,y.byteLength-A,A)).bytesRead;}catch(O){throw re(O)}if(E<=0)throw new D("IDENTITY_CHANGED");A+=E;}let I;try{let E=await d.stat({bigint:!0});I=Ze(E);}catch(E){throw re(E)}if(!Ft(c,I))throw new D("IDENTITY_CHANGED");return await Cn(s,o.realRoot,p,I),await qe(n,o),new Uint8Array(y)}finally{await d.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new D("READ_DENIED");if(jt===void 0)throw new D("UNSUPPORTED");let r=kt(t),o=await Un(n),s=resolve(n,...r),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new D("PATH_ESCAPED");let d;try{d=await open(s,go);}catch(c){throw re(c)}try{let c;try{let A=await d.stat({bigint:!0});c=Ze(A);}catch(A){throw re(A)}if(c.size>BigInt(i)||c.size>BigInt(Number.MAX_SAFE_INTEGER))throw new D("LIMIT_EXCEEDED");await qe(n,o);let p=await mo(n,o.realRoot,r);await Cn(s,o.realRoot,p,c);let y;try{let A=await d.stat({bigint:!0});y=Ze(A);}catch(A){throw re(A)}if(!Ft(c,y))throw new D("IDENTITY_CHANGED");return await Cn(s,o.realRoot,p,y),await qe(n,o),{...y,candidateRealPath:p??o.realRoot}}catch(c){throw c instanceof D?c:re(c)}finally{await d.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},ho=new vn;});function In(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Eo(e){return typeof e=="string"&&fe.test(e)?e:void 0}function uc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ve(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function fc(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function yc(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Ac(e){return pc.decode(e)}function Ic(e){return JSON.parse(Ac(e))}function To(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function gc(e){if(e instanceof D)return To(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return To(n)}}function De(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function mc(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function hc(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Po(e,n,t,i){let r=mc(e);if(!r)throw new D("READ_DENIED");return yc(await r.call(e,n,t,i))}async function Gt(e,n,t){let i=hc(e);if(!i)throw new D("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new D("READ_DENIED");return r.map(fc).filter(o=>o!==null)}function _c(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Ec(e){if(!In(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,r)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+r+" must be an array");let o=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+r+" must contain non-empty strings");o.push(a);}return Object.freeze([...new Set(o)].sort(Ve))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function Tc(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function Vn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Ve)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Ve))})}function jn(e,n){let t=Object.keys(e).sort(Ve),i=[...n].sort(Ve);return t.length===i.length&&t.every((r,o)=>r===i[o])}function Do(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function Pc(e){let n;try{n=Ic(e);}catch{return}if(!In(n)||!jn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>Wt)return;let t=new Set,i=new Set,r=0,o=[];for(let s of n.packages){if(!In(s))return;let a=["packageDir","appId","definition","files"],d=Object.hasOwn(s,"lineage"),c=Object.hasOwn(s,"launcher"),p=[...d?["lineage"]:[],...c?["launcher"]:[]];if(!jn(s,[...a,...p])||c&&s.launcher!==false)return;let y=Do(s.packageDir),A=Eo(s.appId);if(!y||y.length!==2||y[0]!=="apps"||!uc(y[1])||!A||t.has(s.packageDir)||!In(s.definition)||!jn(s.definition,["id","version","hash"]))return;let I=Eo(s.definition.id),E=s.definition.version,O=s.definition.hash;if(!I||!Number.isSafeInteger(E)||E<1||typeof O!="string"||!$t.test(O)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Jt)return;let b=new Set,j=[];for(let C of s.files){if(!In(C)||!jn(C,["path","sha256"]))return;let x=Do(C.path);if(!x||typeof C.sha256!="string"||!$t.test(C.sha256))return;let B=x.join("/"),_=`${s.packageDir}/${B}`;if(b.has(B)||i.has(_))return;b.add(B),i.add(_),j.push(Object.freeze({path:B,sha256:C.sha256}));}if(!J.some(C=>b.has(C))||!b.has("ui/index.html")||(r+=j.length,r>ac))return;t.add(s.packageDir),o.push(Object.freeze({packageDir:s.packageDir,...c?{launcher:false}:{},appId:A,definition:Object.freeze({id:I,version:E,hash:O}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(j.sort((C,x)=>Ve(C.path,x.path)))}));}return Object.freeze({version:1,packages:Object.freeze(o)})}function je(e){let n=gc(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function Dc(e,n,t,i,r){let o=[],s=async(a,d)=>{if(!De(i,r))throw new D("LIMIT_EXCEEDED");if(d>2)throw new D("LIMIT_EXCEEDED");let c=await Gt(e,n,a);for(let p of c){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new D("PATH_ESCAPED");let y=`${a}/${p.name}`;if(p.kind==="file"){if(o.push(y.slice(t.length+1)),o.length>Jt)throw new D("LIMIT_EXCEEDED")}else if(p.kind==="directory")await s(y,d+1);else throw p.kind==="symlink"?new D("PATH_ESCAPED"):new D("READ_DENIED")}};return await s(t,0),o.sort(Ve)}function bc(e){return J.includes(e)?262144:e==="ui/index.html"?un:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?dc:cc}async function bo(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:lc};let r=Ec(e.reservedIds),o=[],s=(u,f,g)=>_c(u,"bundled",f),a=(u=[],f=false,g)=>({...g===void 0?{}:{indexHash:g},packages:u,diagnostics:o,incomplete:f,reservedIds:r});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!$t.test(e.expectedIndexHash))return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let d;try{d=await Po(n,e.root,"bundle-index.json",sc);}catch(u){return o.push(s(je(u),"bundle-index.json")),a()}let c=createHash("sha256").update(d).digest("hex");if(c!==e.expectedIndexHash)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p=Pc(d);if(p===void 0)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!Tc(Vn(p.packages),r))return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,c);if(!De(t,i))return o.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let y;try{y=await Gt(n,e.root,"");}catch(u){return o.push(s(je(u),"bundle-index.json")),a(p.packages.map(f=>({indexEntry:f,failureCode:je(u)})),false,c)}if(!De(t,i))return o.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(u=>({indexEntry:u,failureCode:"LIMIT_EXCEEDED"})),true,c);let A=y.find(u=>u.name==="bundle-index.json"&&u.kind==="file"),I=y.find(u=>u.name==="apps"&&u.kind==="directory"),E=u=>p.packages.map(f=>({indexEntry:f,failureCode:u}));if(!A)return o.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c);let O=y.filter(u=>u.name!=="bundle-index.json"&&u.name!=="apps");if(O.length>0){let u=O.some(f=>f.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return o.push(s(u,"bundle-index.json")),a(E("BUNDLE_INTEGRITY"),false,c)}if(y.some(u=>u.name==="apps"&&u.kind!=="directory"))return o.push(s("PATH_ESCAPED","apps")),a(E("PATH_ESCAPED"),false,c);let b=[];if(I)try{b=await Gt(n,e.root,"apps");}catch(u){return o.push(s(je(u),"apps")),a(E(je(u)),false,c)}if(!De(t,i)||b.length>Wt)return o.push(s("LIMIT_EXCEEDED","apps")),a(E("LIMIT_EXCEEDED"),true,c);let j=new Map(p.packages.map(u=>[u.packageDir.slice(5),u])),C=b.filter(u=>!j.has(u.name));for(let u of C)o.push(s(u.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${u.name}`));if(C.length>0){let u=C.some(f=>f.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(E(u),false,c)}let x=new Set,B=new Map,_=new Map;for(let u of p.packages){let f=B.get(u.appId)??[];f.push(u),B.set(u.appId,f);let g=`${u.definition.id}\0${String(u.definition.version)}`,P=_.get(g)??[];P.push(u),_.set(g,P);}for(let u of [...B.values(),..._.values()])if(u.length>1)for(let f of u)x.add(f);let h=[],S=d.byteLength,w=false;for(let u of p.packages){if(!De(t,i)){w=true,h.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let f;try{let N=u.lineage[u.lineage.length-1];if(!N)throw new Ie("LINEAGE_INVALID","Definition lineage is missing");if(N.definition.id!==u.definition.id||N.version!==u.definition.version||N.hash!==u.definition.hash)throw new Ie("LINEAGE_STALE","Last lineage generation does not match bundle identity");f=Rt(u.lineage,{...N.definition,hash:N.hash}).entries;}catch(N){let oe=N instanceof Ie?N.code:"LINEAGE_INVALID";o.push(s(oe,u.packageDir)),h.push({indexEntry:u,failureCode:oe});continue}let g=b.find(N=>N.name===u.packageDir.slice(5));if(!I||!g){h.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}if(g.kind!=="directory"){h.push({indexEntry:u,failureCode:g.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let P;try{let N=await Dc(n,e.root,u.packageDir,t,i);if(!De(t,i)){w=!0,h.push({indexEntry:u,failureCode:"LIMIT_EXCEEDED"});continue}let oe=u.files.map(ge=>ge.path);if(N.length!==oe.length||N.some((ge,me)=>ge!==oe[me])){h.push({indexEntry:u,failureCode:"BUNDLE_INTEGRITY"});continue}P=new Map;let H;for(let ge of u.files){if(!De(t,i)){H="LIMIT_EXCEEDED",w=!0;break}if(S>=zt){H="LIMIT_EXCEEDED";break}let me;try{me=await Po(n,e.root,`${u.packageDir}/${ge.path}`,bc(ge.path));}catch(Or){H=je(Or);break}if(!De(t,i)){H="LIMIT_EXCEEDED",w=!0;break}if(S+me.byteLength>zt){S=zt,H="LIMIT_EXCEEDED";break}if(S+=me.byteLength,createHash("sha256").update(me).digest("hex")!==ge.sha256){H="BUNDLE_INTEGRITY";break}P.set(ge.path,me);}if(H!==void 0){h.push({indexEntry:u,failureCode:H});continue}}catch(N){De(t,i)||(w=true),h.push({indexEntry:u,failureCode:je(N)});continue}h.push({indexEntry:u,lineage:f,files:P,...x.has(u)?{failureCode:"DUPLICATE_ID"}:{}});}return a(h,w,c)}var sc,Wt,Jt,ac,cc,dc,zt,$t,pc,lc,Kt=V(()=>{m();wt();Ue();Mn();Ct();Ht();sc=256*1024,Wt=64,Jt=128,ac=Wt*Jt,cc=2*1024*1024,dc=8*1024*1024,zt=32*1024*1024,$t=/^[0-9a-f]{64}$/,pc=new TextDecoder("utf-8",{fatal:true}),lc=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Sc(e){if(typeof e!="string"||!fe.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Xt}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Xt}${n}_read`,action:`${Xt}${n}_action`}}function So(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Lc(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Oc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function gn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function jo(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Rc(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Vo(e){return Mc.decode(e)}function wc(e){return JSON.parse(Vo(e))}function Uc(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function Bn(e,n,t,i,r){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...r?.reason===void 0?{}:{reason:Object.freeze({...r.reason})},...r?.files===void 0?{}:{files:Object.freeze([...r.files])}};return Object.freeze(o)}function Mo(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function de(e){if(e instanceof D)return Mo(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Mo(n)}}function Qe(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Lo(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function Oo(e){return e==="MANIFEST_DUAL_MISMATCH"?e:Fo(e)}function Cc(e){return Fo(e.code)}function Fo(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Bo("UiPluginValidationError",e)}}function Bo(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function kc(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Bo("McpAppContractError",e)}}function be(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function xc(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function vc(e,n){let t=n.get("package.json");if(t!==void 0)try{let r=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(So(r)){let o=r.bin,s=typeof o=="string"?o:So(o)?Object.values(o).find(a=>typeof a=="string"):void 0;for(let a of [s,r.main]){if(typeof a!="string")continue;let d=jc(a);if(d&&n.has(d))return d}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(r=>n.has(r))}function jc(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Vc(){return globalThis.performance?.now()??Date.now()}function Fe(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Fe(n);return Object.freeze(e)}function Ro(e){return Object.freeze(Array.from(e))}async function qt(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new D("NOT_FOUND");if(a.byteLength>i)throw new D("LIMIT_EXCEEDED");return new Uint8Array(a)}let r=`${n.relativePath}/${t}`,o=n.scanContext,s=e.fingerprintVerifiedFile;if(o===void 0||!o.cacheable||typeof s!="function")return ko(e,n.root,r,i);try{let a=o.priorFingerprints.get(r)??await s.call(e,o.workspaceRoot,r,i);o.candidateRealPath=a.candidateRealPath;let d=await ko(e,n.root,r,i),c=await s.call(e,o.workspaceRoot,r,i);return o.candidateRealPath=c.candidateRealPath,$o(a,c)&&c.size===BigInt(d.byteLength)&&!Go(c,o.scanStartedAtNs)?o.files.set(r,{relativePath:r,byteLimit:i,fingerprint:c}):o.cacheable=!1,d}catch(a){throw J.includes(t)&&de(a)==="NOT_FOUND"&&o.directoryListings.some(c=>c.relativePath===n.relativePath&&!zo(c.key,t))||(o.cacheable=false),a}}function Ho(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function Fc(e,n,t,i,r,o,s,a){let d=e.fingerprintVerifiedFile,c=Ho(t,i),p=r.candidates.get(c),y=i.relativePath,A;try{A=await Co(e,n,y);}catch(_){if(de(_)!=="NOT_FOUND")throw _}let I=A===void 0?void 0:{relativePath:y,key:A};if(I!==void 0&&(i.source==="apps"||i.source==="skills")&&!J.some(_=>zo(I.key,_)))return be(s,a)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===I.relativePath&&p.directoryListings[0]?.key===I.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof d=="function"?{memo:p}:typeof d!="function"?{}:{context:{state:r,cacheKey:c,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze([I]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let E=await Promise.all(wo.map(async _=>{if(_==="")return I;let h=`${i.relativePath}${_}`;try{let S=await Co(e,n,h);return S===void 0?void 0:{relativePath:h,key:S}}catch(S){if(de(S)==="NOT_FOUND")return;throw S}}));if(!be(s,a))return {timeLimitReached:true};let O=typeof d=="function"&&E.every(_=>_!==void 0),b=E.filter(_=>_!==void 0),j=new Map,C=p!==void 0&&O,x;if(p!==void 0&&typeof d=="function"){let _=await Promise.all(p.files.map(async h=>{if(!be(s,a))return {kind:"time",file:h};try{let S=await d.call(e,n,h.relativePath,h.byteLimit);return {kind:"fingerprint",file:h,current:S}}catch(S){return de(S)==="NOT_FOUND"?{kind:"missing",file:h}:{kind:"error",file:h,error:S}}}));if(_.some(h=>h.kind==="time"))return {timeLimitReached:true};for(let h of _){if(h.kind==="error")throw h.error;if(h.kind==="missing"){C=false;continue}if(h.kind!=="fingerprint")continue;let{file:S,current:w}=h;j.set(S.relativePath,w),x??=w.candidateRealPath,(w.candidateRealPath!==p.candidateRealPath||!$o(w,S.fingerprint)||Go(w,o))&&(C=false);}}let B=p!==void 0&&p.directoryListings.length===b.length&&p.directoryListings.every((_,h)=>_.relativePath===b[h]?.relativePath&&_.key===b[h]?.key);return p!==void 0&&O&&B&&C&&x===p.candidateRealPath?{memo:p}:!O||b.length!==wo.length?{}:{context:{state:r,cacheKey:c,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze(b),priorFingerprints:j,files:new Map,...x===void 0?{}:{candidateRealPath:x},cacheable:true}}}function zo(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function Co(e,n,t){let i=Wo(e);if(typeof i!="function")return;let r=await i.call(e,n,t);if(!Array.isArray(r)||r.some(s=>typeof s=="string"))return;let o=r.map(jo);if(!o.some(s=>s===null))return JSON.stringify(o.slice().sort((s,a)=>gn(s.name,a.name)||gn(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function $o(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Go(e,n){let t=e.mtimeNs-n;return t>=-Uo&&t<=Uo}function Yt(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,r=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!r||n.files.size===0&&!r)return;let o=Object.freeze({...!r&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,o);}function Bc(e,n,t){let i=createHash("sha256"),r=new TextEncoder().encode(ne(e)),o=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return o(r.byteLength),i.update(r),o(n.byteLength),i.update(n),o(t.byteLength),i.update(t),i.digest("hex")}function Hc(e,n){let t={...e.definition,sourceHash:n},i;try{i=pe(t);}catch(o){throw o instanceof R&&o.code==="INPUT_INVALID"?new Q("MANIFEST_INVALID","normalized definition is invalid"):o}let r={...t,hash:i};try{Ee(r);}catch{throw new Q("MANIFEST_INVALID","normalized definition is invalid")}return r}function zc(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function $c(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Wo(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function ko(e,n,t,i){let r=$c(e);if(!r)throw new D("READ_DENIED");return Rc(await r.call(e,n,t,i))}async function Gc(e,n,t){let i=Wo(e);if(!i)throw new D("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new D("READ_DENIED");return r.map(jo).filter(o=>o!==null)}function Wc(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(xo(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(xo(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function xo(e){let n=[],t=[],i=[];for(let r of e.listMcpApps())typeof r.appId=="string"&&n.push(r.appId),r.definition&&typeof r.definition.id=="string"&&t.push(r.definition.id);for(let r of e.listMcpAppTools())typeof r.name=="string"&&i.push(r.name);return {appIds:n,definitionIds:t,toolNames:i}}function Ne(e,n){e.diagnostic||(e.diagnostic=Bn(n,e.source,e.relativePath,e.identity?.pluginId));}function Jc(e){let n=new Map;for(let i of e){let r=i.identity?.pluginId;if(r===void 0)continue;let o=n.get(r)??[];o.push(i),n.set(r,o);}for(let i of n.values()){if(i.length<2)continue;let r=i.filter(s=>s.provenance!==void 0);if(r.length>0){for(let s of i)s.provenance===void 0&&Ne(s,"RESERVED_ID");if(r.length>1)for(let s of r)Ne(s,"DUPLICATE_ID");continue}let o=i.filter(s=>s.source==="apps");if(o.length>1){for(let s of o)Ne(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))Ne(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))Ne(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let r=i.identity?.definitionKey;if(r===void 0)continue;let o=t.get(r)??[];o.push(i),t.set(r,o);}for(let i of t.values())if(i.length>1)for(let r of i)Ne(r,"DUPLICATE_ID");}function Kc(e,n,t){let i=new Set,r=new Set,o=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let d of Wc(n)){for(let c of d.appIds??[])typeof c=="string"&&i.add(c);for(let c of d.definitionIds??[])typeof c=="string"&&r.add(c);for(let c of d.toolNames??[])typeof c=="string"&&o.add(c);}for(let d of e){let c=d.candidate;if(!c)continue;if(i.has(c.pluginId)||r.has(c.definitionId)){Ne(d,"RESERVED_ID");continue}if(d.provenance===void 0&&(s.has(c.pluginId)||a.has(c.definitionId))){Ne(d,"RESERVED_ID");continue}[c.toolNames.read,c.toolNames.action].filter(y=>y!==void 0).some(y=>o.has(y))&&Ne(d,"DUPLICATE_ID");}}function Xc(e){return [...e].sort((n,t)=>{let i=No.indexOf(n.source)-No.indexOf(t.source);return i!==0?i:gn(n.relativePath,t.relativePath)})}function v(e,n,t){e.diagnostic=Bn(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function vo(e,n,t){let i=ve(t,{mode:"local"});if(!i.ok&&i.parseFailure){v(n,Oo(i.rejection.code),Lo(i.rejection));return}let r=Uc(i.identity);if(n.bundleIdentity===void 0)n.identity=r;else if(r?.pluginId!==n.bundleIdentity.appId||r.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){v(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){v(n,"RESERVED_ID");return}if(!i.ok){v(n,Oo(i.rejection.code),Lo(i.rejection));return}let o=i.manifest,s={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=s),o.actions.length>0)try{uo(o.actions.map(N=>({actionId:N.actionId,inputSchema:N.inputSchema})));}catch(N){if(N instanceof we){v(n,kc(N.code));return}throw N}let a;try{a=await qt(e,n,"ui/index.html",un);}catch(N){v(n,Qe(de(N),"entry"));return}if(a.byteLength>un){v(n,"LIMIT_EXCEEDED");return}let d;try{d=Vo(a);}catch{v(n,"ENTRY_INVALID");return}if(a.byteLength===0||d.length===0){v(n,"ENTRY_INVALID");return}let c=createHash("sha256").update(a).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==c){v(n,"ENTRY_INVALID");return}let p={},y,A;if(o.initialState!==void 0){try{y=await qt(e,n,"ui/state.json",65536);}catch(N){v(n,Qe(de(N),"initial"));return}if(y.byteLength>65536){v(n,"LIMIT_EXCEEDED");return}try{let N=wc(y),oe=o.dataPaths??[],H=_t(N,oe);p=he(H,0,oe),ze(p);}catch{v(n,"INITIAL_STATE_INVALID");return}if(A=createHash("sha256").update(y).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==A){v(n,"INITIAL_STATE_INVALID");return}}let I={...o,entryHash:c,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:A}}},E=sn(I),O=Bc(I,a,y??new Uint8Array),b;try{b=Hc(E,O);}catch(N){if(N instanceof Q){v(n,Cc(N));return}throw N}let j;if(n.bundleLineage!==void 0){let N=n.bundleLineage[n.bundleLineage.length-1];if(!N){v(n,"LINEAGE_INVALID");return}let{legacy:oe,...H}=N.definition,{hash:ge,...me}=b;if(ne(H)!==ne(me)){v(n,"LINEAGE_STALE");return}if(oe!==void 0&&(b={...b,legacy:oe}),oe!==void 0)try{b={...b,hash:pe(b)},Ee(b);}catch{v(n,"LINEAGE_INVALID");return}j=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){v(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==b.id||n.bundleIdentity.version!==b.version||n.bundleIdentity.definitionHash!==b.hash)){v(n,"LINEAGE_STALE");return}let C=Sc(o.pluginId),x=o.actions.length===0?{read:C.read}:C,B=Fe(E),_=Fe(I),h=Fe(b),S=Fe({...E.handlers}),w=Ro(a),u=y===void 0?void 0:Ro(y),f=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:c,bytes:w}),...u===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:A,bytes:u})}}),g={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:Fe(i.mcpb)},relativePath:n.relativePath,manifest:_,normalized:B,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},definition:h,handlers:S,resources:f,html:d,entryBytes:w,entryHash:c,initialState:Fe(p),...u===void 0?{}:{initialStateBytes:u},...A===void 0?{}:{initialStateHash:A},sourceHash:O,toolNames:Object.freeze(x)},P=n.provenance===void 0?{...g,source:n.source}:{...g,provenance:n.provenance,lineage:j??[]};n.candidate=Object.freeze(P),zc(o)&&v(n,"EXEC_DENIED");}async function Jo(e,n){let t={};for(let i of J)try{t[i]=await qt(e,n,i,262144);}catch(r){if(de(r)==="NOT_FOUND")continue;return {files:t,failure:Qe(de(r),"manifest")}}return {files:t}}function Zt(e){return J.some(n=>e[n]!==void 0)}async function Yc(e,n){let{files:t,failure:i}=await Jo(e,n);if(i!==void 0){v(n,i);return}let r=t[Y];return r!==void 0&&!St(r)&&delete t[Y],Zt(t)?t:void 0}function qc(e,n,t,i=Nc,r=false){let o=Xc(e);Jc(o);let s=Object.freeze(o.filter(p=>p.candidate!==void 0&&p.diagnostic===void 0).map(p=>p.candidate)),a=Object.freeze(o.filter(p=>p.diagnostic!==void 0).map(p=>p.diagnostic)),d=r?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(o.filter(p=>p.source==="bundled"&&p.diagnostic===void 0&&t!==void 0&&p.candidate?.provenance?.indexHash===t).map(p=>p.candidate)),diagnostics:Object.freeze(a.filter(p=>p.source==="bundled").map(p=>Object.freeze({...p}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,c={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...d===void 0?{}:{productBundleSnapshotMetadata:d}};return Object.defineProperty(c,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(c)}function Zc(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Qc(e,n){if(Zc(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??ho,options:t}}async function Ko(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:r}=Qc(n,t),o=r.clock??Vc,s=o(),a=await bo(r.productBundle,i,s,o),d=o(),c=BigInt(Date.now())*1000000n,p=[],y=0,A,I=false,E,O;if(r.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{O=await i.getRootIdentity(e),E=yo(r.scanCache,O),E.scanStartedAtNs=c;}catch(_){if(de(_)!=="NOT_FOUND")throw _}let b=E!==void 0&&r.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,j=new Set,C=true;p.push(...a.diagnostics.map(_=>({source:_.source,root:r.productBundle?.root??e,name:"",relativePath:_.relativePath,diagnostic:_})));let x=a.reservedIds;a.incomplete&&(A="time_limit");for(let _ of a.packages){if(!be(d,o)){I=true,A="time_limit";break}let h=_.indexEntry,S=h.packageDir,w=_.files===void 0?void 0:vc(S,_.files),u=a.indexHash===void 0?void 0:to(Object.freeze({kind:"bundled",launcher:h.launcher!==false,indexHash:a.indexHash,packageDir:S,appId:h.appId,definitionId:h.definition.id,version:h.definition.version,definitionHash:h.definition.hash,files:h.files}),w),f={source:"bundled",root:r.productBundle?.root??e,name:S.slice(5),relativePath:S,...u===void 0?{}:{provenance:u},..._.files===void 0?{}:{pinnedFiles:_.files},..._.lineage===void 0?{}:{bundleLineage:_.lineage},bundleIdentity:{appId:h.appId,definitionId:h.definition.id,version:h.definition.version,definitionHash:h.definition.hash},identity:xc(h)};if(p.push(f),y+=1,_.failureCode!==void 0){v(f,_.failureCode);continue}let g={};for(let P of J){let N=_.files?.get(P);N!==void 0&&(g[P]=N);}if(!Zt(g)){v(f,"BUNDLE_INTEGRITY");continue}if(await vo(i,f,g),!be(d,o)){I=true,A="time_limit";break}}let B=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let _ of B){let{source:h,directory:S}=_,w;try{w=await Gc(i,e,S);}catch(f){if(de(f)==="NOT_FOUND")continue;b=false,C=false,p.push({source:h,root:e,name:"",relativePath:h,diagnostic:Bn(Qe(de(f),"manifest"),h,h)});continue}let u=w.filter(f=>f.kind==="directory"||f.kind==="symlink").filter(f=>Oc(f.name)).map(f=>({source:h,root:e,name:f.name,relativePath:Lc(h,f.name)})).sort((f,g)=>gn(f.relativePath,g.relativePath));for(let f of u){let g={...f};if(p.push(g),O!==void 0?j.add(Ho(O,g)):b=false,!be(d,o)){I=true,A="time_limit";break e}let P;if(E!==void 0&&O!==void 0){try{let H=await Fc(i,e,O,g,E,c,d,o);if(H.timeLimitReached){I=!0,A="time_limit";break e}g.scanContext=H.context,P=H.memo;}catch(H){b=false,v(g,Qe(de(H),"manifest"));continue}P===void 0&&(b=false);}if(P!==void 0){if(g.candidate=P.candidate,g.diagnostic=P.diagnostic,g.identity=P.identity,h==="skills"&&P.candidate===void 0&&P.diagnostic===void 0)continue;if(y>=64){v(g,"LIMIT_EXCEEDED");continue}if(f.relativePath.split("/").length-1>2){v(g,"LIMIT_EXCEEDED");continue}if(y+=1,!be(d,o)){I=true,A="time_limit";break e}continue}let N;if(h==="skills"&&(N=await Yc(i,g),N===void 0)){g.diagnostic===void 0&&Yt(g);continue}if(y>=64){v(g,"LIMIT_EXCEEDED");continue}if(f.relativePath.split("/").length-1>2){v(g,"LIMIT_EXCEEDED");continue}if(!be(d,o)){I=true,A="time_limit";break e}if(y+=1,N===void 0){let H=await Jo(i,g);if(H.failure!==void 0||!Zt(H.files)){v(g,H.failure??Qe("NOT_FOUND","manifest")),Yt(g);continue}N=H.files;}if(await vo(i,g,N),Yt(g),!be(d,o)){I=true,A="time_limit";break e}}}if(E!==void 0&&O!==void 0){let _=[...j].sort(gn),h=E.lastCandidateKeys,S=h!==void 0&&h.length===_.length&&h.every((u,f)=>u===_[f]);if(b=b&&S,C&&!I&&A===void 0)for(let u of E.candidates.keys())try{JSON.parse(u)[0]===O.realPath&&!j.has(u)&&E.candidates.delete(u);}catch{E.candidates.delete(u);}let w=[...E.candidates.keys()].filter(u=>{try{return JSON.parse(u)[0]===O.realPath}catch{return  false}});b=b&&w.length===j.size&&w.every(u=>j.has(u))&&!I&&A===void 0,E.lastCandidateScanUnchanged=b,C&&!I&&A===void 0&&(E.lastCandidateKeys=Object.freeze(_));}return I&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:Bn("DISCOVERY_TIME_LIMIT","apps","apps")}),Kc(p,r,x),qc(p,A,a.indexHash,x,r.productBundle!==void 0)}var Nc,Xt,No,Mc,wo,Uo,Xo=V(()=>{m();Ce();hn();_e();Mt();Ue();Ct();Rn();Ao();Ht();wn();Kt();Kt();Nc=Vn([]),Xt="crewx_local_app_";No=["bundled","apps","skills"],Mc=new TextDecoder("utf-8",{fatal:true});wo=["","/ui"],Uo=2000000000n;});m();Mt();m();pt();m();var $i="SKILL.md",wa=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function Gi(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ua(e){return e.isDirectory()||e.isSymbolicLink()}function Yi(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function Lt(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(wa);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!Gi(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let r=Gi(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(r?.version??i.version)=="string"?{version:r?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Ca(e){return [join(e,$i),join(e,"skill",$i)]}function Wi(e,n){if(!Yi(e))return null;for(let t of Ca(e)){if(!existsSync(t))continue;let r=Lt(t).frontmatter;return {name:r.name??n,...r.version===void 0?{}:{version:r.version},...r.description===void 0?{}:{description:r.description},skillMdPath:t,dir:e}}return null}function Ji(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Ua)}catch{return []}}function Ki(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function qi(e){let n=[],t=new Set;for(let i of e)if(Yi(i))for(let r of Ji(i)){if(r.name.startsWith("@")){let o=join(i,r.name);for(let s of Ji(o))Ki(Wi(join(o,s.name),s.name),t,n);continue}Ki(Wi(join(i,r.name),r.name),t,n);}return n.sort((i,r)=>i.name.localeCompare(r.name))}m();Mn();var ka=/^[A-Za-z0-9_$.[\]"-]{0,200}$/,xa=/^[a-z][a-z0-9-]{0,63}$/,va="<unknown>";function ja(e){return typeof e=="string"&&J.includes(e)}function Zi(e){if(typeof e!="object"||e===null)return;let{file:n,path:t,rule:i}=e;if(!(typeof i!="string"||!xa.test(i)))return {...ja(n)?{file:n}:{},path:typeof t=="string"&&ka.test(t)?t:va,rule:i}}function Qi(e){if(!Array.isArray(e))return;let n=J.filter(t=>e.includes(t));return n.length>0?n:void 0}Xo();var nd=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function zn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?td(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let r=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(r,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function td(e,n){let t=new TextEncoder().encode($n(e)),i=id(n),r=new Uint8Array(t.byteLength+1+i.byteLength);return r.set(t,0),r[t.byteLength]=0,r.set(i,t.byteLength+1),createHash("sha256").update(r).digest("hex")}function id(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function $n(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function Hn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function Zo(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:$n(t)}function od(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function Qo(e){return Object.freeze({packageRoot:e})}function rd(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Oe,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function er(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function sd(e,n){let t=e.candidate,i=t.provenance!==void 0,r=n&&!i?["screen","skill"]:["screen"],o=rd(t),s=zn(n?{screenHash:o.hash,skillHash:n.skillHash}:{screenHash:o.hash}),a=t.description||n?.skill.description||"",d=t.releaseVersion??String(t.version),c={appId:t.pluginId,name:t.name,description:a,version:d,...er(r),definition:o,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:Qo(e.packageRoot)},definitionHash:s,...t.manifest.csp===void 0?{}:{connectDomains:Object.freeze([...t.manifest.csp.connectDomains])}};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:c.appId,capabilities:r,summary:Object.freeze(c)}}function ad(e){let n=cd(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...er(["skill"]),skillName:e.skill.name,localDefinitionRef:Qo(e.packageRoot),definitionHash:zn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function cd(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function K(e,n,t,i,r){let o=Zi(r?.reason),s=Qi(r?.files);return Object.freeze({code:e,source:n,relativePath:dd(t),...i===void 0?{}:{appId:i},...o===void 0?{}:{reason:o},...s===void 0?{}:{files:s}})}function dd(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function nr(e){return K(e.code,e.source,e.relativePath,e.pluginId,e)}function pd(e,n){let t=Zo(e,n.dir);if(!t)return {diagnostic:K("PATH_ESCAPED","node_modules","node_modules")};let i=od(t);if(!i)return {diagnostic:K("PATH_ESCAPED","node_modules",t)};let r=Lt(n.skillMdPath);if(!r.readable)return {diagnostic:K("SKILL_READ_FAILED",i,t)};if(!r.valid)return {diagnostic:K("SKILL_INVALID",i,t)};let o=ld(n.dir,n.skillMdPath);if(!o)return {diagnostic:K("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:o,skillHash:zn({relativePath:o,fileBytes:s}),source:i}}catch{return {diagnostic:K("SKILL_READ_FAILED",i,t)}}}function ld(e,n){let t=relative(e,n).split(sep).join("/");try{return $n(t)}catch{return null}}function ud(e){if(!nd.test(e.appId))return {diagnostic:K("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Oe,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function fd(e){return e.builtinCatalog}function yd(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return $n(n)}catch{return null}}function Ad(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Id(e,n,t){let i=n.installed??[],r=new Map;for(let s of i){let a=yd(s);if(!a){t.push(K("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let d=r.get(a);if(d&&JSON.stringify(d)!==JSON.stringify(s)){t.push(K("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}r.set(a,s);}let o=new Map;for(let s of e)s.packageRoot!==void 0&&o.set(s.packageRoot,s);for(let[s,a]of r){let d=o.get(s);if(!d){t.push(K("INSTALLED_MISSING","installed",s,a.appId));continue}let c=Ad(a);if(!c){t.push(K("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==d.appId||a.definitionHash!==void 0&&a.definitionHash!==d.summary.definitionHash){t.push(K("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let p={...d.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:c},y=e.indexOf(d);y>=0&&(e[y]={...d,summary:Object.freeze(p)});}}function gd(e,n){let t=new Map;for(let r of e){let o=t.get(r.appId)??[];o.push(r),t.set(r.appId,o);}let i=new Set;for(let r of t.values()){if(r.length<2)continue;let o=r.some(s=>s.source==="builtin")?"builtin":r.some(s=>s.source==="bundled")?"bundled":void 0;if(o!==void 0){let s=r.filter(a=>a.source===o);for(let a of r.filter(d=>d.source!==o))i.add(a),n.push(K("RESERVED_ID",a.source,ei(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(K("DUPLICATE_ID",a.source,ei(a),a.appId));continue}for(let s of r)i.add(s),n.push(K("DUPLICATE_ID",s.source,ei(s),s.appId));}return e.filter(r=>!i.has(r))}function ei(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function md(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(nr)}function hd(e){return e.filesystem}function _d(e,n){let t=hd(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function tr(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=fd(n),i=await Ko(e,_d(n,t)),r=n.registeredProductBundle??i.productBundleSnapshotMetadata,o=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],d=[],c=new Set;for(let f of o)for(let g of qi([f])){let P=Zo(e,g.dir);(P===null||!c.has(P))&&(d.push(g),P!==null&&c.add(P));}for(let f of d){let g=pd(e,f);"diagnostic"in g?s.push(g.diagnostic):a.push(g);}let p=new Map,y=n.registeredProductBundle?.indexHash,A=(n.registeredProductBundle?.candidates??[]).filter(f=>y!==void 0&&f.provenance?.indexHash===y),I=[...i.apps??i.candidates??[],...A],E=new Set(A),O=new Set(y===void 0?[]:(t?.listMcpApps()??[]).filter(f=>f.provenance?.indexHash===y).map(f=>f.appId));for(let f of I){if(E.has(f)&&f.provenance?.indexHash===y&&O.has(f.appId))continue;let g=f.provenance===void 0?`workspace\0${f.relativePath}`:`bundled\0${f.provenance.indexHash}\0${f.provenance.packageDir}`;p.set(g,{candidate:f,packageRoot:f.relativePath});}let b=new Map(a.map(f=>[f.packageRoot,f])),j=[];for(let f of p.values()){let g=f.candidate.provenance===void 0?b.get(f.packageRoot):void 0,P=sd(f,g);j.push({...P.packageRoot===void 0?{}:{packageRoot:P.packageRoot},source:P.source,appId:P.appId,summary:P.summary});}let C=new Set([...p.values()].filter(f=>f.candidate.provenance===void 0).map(f=>f.packageRoot)),x=r===void 0?new Set:new Set(i.diagnostics.filter(f=>f.code==="RESERVED_ID"&&f.source!=="bundled").map(f=>f.relativePath)),B=new Set(r?.reservedAppIds??[]);for(let f of a){let g=ad(f);if(!(C.has(f.packageRoot)||x.has(f.packageRoot))){if(B.has(g.appId)){s.push(K("RESERVED_ID",f.source,f.packageRoot,g.appId));continue}j.push({packageRoot:g.packageRoot,source:g.source,appId:g.appId,summary:g.summary});}}let _=[...md(i.diagnostics,new Set(a.map(f=>f.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(f=>f.source==="bundled").map(nr)??[]],h=[];if(t)for(let f of t.listMcpApps()){let g=ud(f);"diagnostic"in g?_.push(g.diagnostic):h.push(g);}let S=gd([...j,...h],_);Id(S,n,_);let w=S.map(f=>f.summary).sort((f,g)=>Hn(f.appId,g.appId)),u=[..._].sort((f,g)=>Hn(f.relativePath,g.relativePath)||Hn(f.code,g.code)||Hn(f.appId??"",g.appId??""));return Object.freeze({items:Object.freeze(w),diagnostics:Object.freeze(u)})}m();m();m();function Ed(e){let n=r=>r.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(r=>r==="**"?".*":r.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function en(e,n){try{return Ed(n).test(e)}catch{return  false}}function Gn(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((r,o)=>en(t[i+o],r))}function Td(e,n){return e.split("/").some(t=>en(t,n))}var ir=[{label:".env*",test:e=>en(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>en(e,"*.key")},{label:"*.pem",test:e=>en(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Gn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Gn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Gn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Gn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>Td(n,".crewx")}];function Wn(e,n,t){for(let i of ir)if(i.test(e,n,t))return i.label;return null}function ii(e){let n=[],t=[];function i(r,o,s){let a;try{a=X.readdirSync(r,{withFileTypes:!0});}catch{return}a.sort((d,c)=>d.name.localeCompare(c.name));for(let d of a){let c=o?`${o}/${d.name}`:d.name,p=ee.join(r,d.name);if(d.isSymbolicLink()){let y;try{y=X.statSync(p);}catch{t.push({path:c,rule:"symlink"});continue}if(y.isDirectory()){t.push({path:c,rule:s??"symlink-dir"});continue}let A=s??Wn(d.name,c,false);A?t.push({path:c,rule:A}):t.push({path:c,rule:"symlink"});continue}if(d.isDirectory()){let y=s??Wn(d.name,c,true);i(p,c,y);continue}if(d.isFile()){let y=s??Wn(d.name,c,false);y?t.push({path:c,rule:y}):n.push(c);}}}return i(e,"",null),n.sort(),t.sort((r,o)=>r.path<o.path?-1:r.path>o.path?1:0),{included:n,excluded:t}}m();var Pd=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function Dd(e){return e.includes(0)}function oi(e,n,t){let i=[];for(let r of n){let o=ee.join(e,r),s;try{let d=t?.get(r);s=d===void 0?X.readFileSync(o):Buffer.from(d);}catch{continue}if(Dd(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((d,c)=>{for(let{rule:p,regex:y}of Pd)y.test(d)&&i.push({path:r,line:c+1,rule:p});});}return i}m();m();var Se=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function T(e,n){return new Se(e,n)}var ar=/^[a-z0-9-]+$/,bd=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Nd=/^[A-Za-z_][A-Za-z0-9_]*$/;function Sd(e){let n=ee.join(e,"crewx.yaml");if(!X.existsSync(n))return {};let t;try{t=cr.load(X.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let r=i;return {name:typeof r.name=="string"?r.name:void 0,version:typeof r.version=="string"?r.version:void 0,description:typeof r.description=="string"?r.description:void 0,requiredEnv:r.requiredEnv,crewxMinVersion:typeof r.crewxMinVersion=="string"?r.crewxMinVersion:void 0}}function Md(e){return ri.createHash("sha256").update(e).digest("hex")}function dr(e){let n;try{n=X.lstatSync(e);}catch{throw T("PACKAGE_FILE_INVALID",`file is not readable: ${ee.basename(e)}`)}if(n.isSymbolicLink())throw T("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw T("PACKAGE_FILE_INVALID","only regular files are publishable");return ri.createHash("sha256").update(new Uint8Array(X.readFileSync(e))).digest("hex")}function Ld(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let s=t[o]-i[o];if(s!==0)return s}return t.byteLength-i.byteLength}function pr(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||ee.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw T("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function Od(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw T("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function lr(e){if(!bd.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function ur(e,n,t={}){let i=Sd(e),r=i.name??ee.basename(e);if(!ar.test(r))throw new Error(`publish: invalid name "${r}" \u2014 must match ${ar} (lowercase letters, numbers, hyphen only)`);let o=t.version??i.version;if(!o)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");lr(o);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let p of s){if(typeof p!="string"||!Nd.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);a.push(p);}let d=n.map(p=>(pr(p),{path:p,sha256:dr(ee.join(e,p))})).sort((p,y)=>p.path<y.path?-1:p.path>y.path?1:0),c={name:r,version:o,type:"template",description:i.description??"",files:d,requiredEnv:a};return i.crewxMinVersion&&(c.crewxMinVersion=i.crewxMinVersion),c}function Rd(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw T("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function fr(e,n){if(Od(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(lr(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw T("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let s=n.includedFiles.includes(`${i}manifest.json`),a=n.includedFiles.includes(`${i}ui-plugin.json`);if(!s&&!a)throw T("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(s&&!a)throw T("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw T("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw T("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let r=new Set,o=n.includedFiles.map(s=>{if(pr(s),!s.startsWith(i))throw T("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&r.add(s),{path:s,sha256:a===void 0?dr(ee.join(e,s)):Md(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>Ld(s.path,a.path));if(r.size>0&&(r.size!==1||!r.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Rd(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:o,requiredEnv:[]}}m();function yr(e){return ri.createHash("sha256").update(e).digest("hex")}function hr(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||ee.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw T("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=ee.resolve(e),i=ee.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${ee.sep}`))throw T("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Ar(e,n){let t=hr(e,n),i;try{i=X.lstatSync(t);}catch{throw T("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw T("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw T("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(X.readFileSync(t))}async function _r(e,n,t={}){let i=ee.join(e,".crewx","publish");X.mkdirSync(i,{recursive:true});let r=ee.join(i,`${n.name}-${n.version}.tgz`),o=ee.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=X.mkdtempSync(ee.join(Ir.tmpdir(),"crewx-publish-"));try{let a=new Set,d=[];for(let c of n.files){if(a.has(c.path))throw T("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(c.path);let p=t.generatedFiles?.get(c.path);if(c.generated===!0&&p===void 0)throw T("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(c.path)){let I=Ar(e,c.path);if(t.sourceFileHashes.get(c.path)!==yr(I))throw T("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let y=p??Ar(e,c.path);if(yr(y)!==c.sha256)throw T("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${c.path}`);let A=hr(s,c.path);X.mkdirSync(ee.dirname(A),{recursive:!0}),X.writeFileSync(A,new Uint8Array(y)),d.push(c.path);}X.writeFileSync(ee.join(s,"manifest.json"),JSON.stringify(n,null,2)),await mr.create({gzip:!0,file:o,cwd:s,portable:!0,noMtime:!0},["manifest.json",...d]),X.renameSync(o,r);}finally{try{X.rmSync(o,{force:!0});}catch{}X.rmSync(s,{recursive:true,force:true});}return r}m();m();var nn="/api/v1";var Cd=201,kd=200,xd=409,si=401,Er={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function vd(){return process.env.WI013_FAKE_UPLOAD==="1"}function jd(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Vd(e){return e.replace(/\/+$/,"")}async function mn(e){try{return await e.json()}catch{return null}}function Tr(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Fd(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Bd(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Pr(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,r=[t.code,t.message,i?.code,i?.message];for(let o of r){if(typeof o!="string"||!Object.prototype.hasOwnProperty.call(Er,o))continue;let s=o,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return T(Er[s],a)}}async function Hd(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Vd(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,r=e.manifest.type==="app"?e.manifest:void 0,o=r!==void 0,s=r?.appId,a;try{a=await fetch(`${n}${nn}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let d=await mn(a),c=Fd(d),p=Bd(d),y=o&&p!==void 0?p:i,A;if(a.status===Cd)A="created";else if(o&&a.status===kd){if(c===void 0)throw T("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");A="existing";}else if(a.status===xd){if(o)throw Pr(d,i)??T("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);A="existing";}else throw a.status===si?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let I="not-needed",E=null;if(A==="existing"&&!o){let S;try{S=await fetch(`${n}${nn}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let w=await mn(S);if(S.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${S.status}`);let f=Tr(w,"publisher items",S.status)?.items;if(!Array.isArray(f))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${S.status}`);let g=f.find(P=>!P||typeof P!="object"?false:P.slug===i);if(!g||typeof g.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${S.status}`);if(E=g.version,E!==e.manifest.version){let P;try{P=await fetch(`${n}${nn}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!P.ok)throw await mn(P),P.status===si?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${P.status})`):P.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${P.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${P.status}`);I="applied";}}let O=X.readFileSync(e.tgzPath),b=vd()?jd(O):O,j=new FormData;j.set("archive",new Blob([new Uint8Array(b)],{type:"application/gzip"}),`${y}-${e.manifest.version}.tgz`);let C=o&&c!==void 0?c:i,x;try{x=await fetch(`${n}${nn}/publisher/items/${encodeURIComponent(C)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:j});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(x.status===si)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!x.ok){let S=await mn(x);if(o){let w=Pr(S,y);if(w)throw w}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${x.status}`)}let B=await mn(x),_=Tr(B,"upload",x.status),h=typeof _.contentId=="string"&&_.contentId.length>0?_.contentId:c;if(o&&h===void 0)throw T("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:y,version:e.manifest.version,...h===void 0?{}:{contentId:h},artifactChecksum:_.artifactChecksum,artifactSizeBytes:_.artifactSizeBytes,submitOutcome:A,versionUpdate:I,serverVersionBefore:E}}var zd=1e4,$d=100*1024*1024;function ai(e){return ri.createHash("sha256").update(e).digest("hex")}function Gd(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Kn(e,n){if(!n||n.includes("\\")||n.includes("\0")||ee.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw T("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=ee.resolve(e,...n.split("/")),i=ee.resolve(e);if(t!==i&&!t.startsWith(`${i}${ee.sep}`))throw T("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let r;try{r=X.lstatSync(t);}catch{throw T("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(r.isSymbolicLink())throw T("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!r.isFile())throw T("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(X.readFileSync(t))}function Xn(e,n){return e===n||e.startsWith(`${n}/`)}function Wd(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function br(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new Se("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function Sr(e,n,t,i){let r=br(t.maxFileCount??t.maxFiles,zd,"max file count"),o=br(t.maxTotalBytes??t.maxBytes,$d,"max total bytes");if(n.length>r)throw new Se("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${r})`);let s=0;for(let a of n){let d=i?.get(a);if(d!==void 0?s+=d.byteLength:s+=Kn(e,a).byteLength,s>o)throw new Se("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${o})`)}}function Jd(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function Kd(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw T("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw T("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw T("APP_ID_REQUIRED")}function Xd(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw T("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw T("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function Yd(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw T("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function qd(e,n){let t=[];for(let i of e.excluded)t.push(Xn(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)Xn(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(Wd)}function ci(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function Zd(e,n,t){let i=ve({[ie]:t},{mode:"published"});if(!i.ok)throw T("APP_UI_MANIFEST_INVALID",`generated ${ie} does not read: ${ci(i.rejection)}`);if(Xe(i.manifest)!==Xe(n))throw T("APP_UI_MANIFEST_INVALID",`generated ${ie} normalizes to a different definition hash than the source`);let r=e[Y];if(r===void 0)return;let o=ve({[Y]:r,[ie]:t},{mode:"local"});if(!o.ok)throw T("APP_UI_MANIFEST_INVALID",ci(o.rejection))}function Qd(e,n,t,i){let r={};for(let A of J){let I=`${t}/${A}`;i.includes(I)&&(r[A]=Kn(e,I));}if(Object.keys(r).length===0)throw T("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let o=ve(r,{mode:"local"});if(!o.ok)throw T("APP_UI_MANIFEST_INVALID",ci(o.rejection));if(o.manifest.pluginId!==n.appId)throw T("APP_DEFINITION_CONFLICT",`${o.file} identity no longer matches the selected App`);let s=r[ie],a=s===void 0?void 0:ai(s),d=`${t}/ui/index.html`;if(!i.includes(d))throw T("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let c=ai(Kn(e,d)),p=JSON.parse(JSON.stringify(o.v2Input));if(p.entryHash=c,Object.prototype.hasOwnProperty.call(p,"initialState")){let A=p.initialState;if(!Gd(A)||A.path!=="ui/state.json")throw T("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let I=`${t}/ui/state.json`;if(!i.includes(I))throw T("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let E=Kn(e,I);p.initialState={...A,hash:ai(E)};}let y;try{let A=xe(p,{mode:"published"});y=new Uint8Array(Buffer.from(JSON.stringify(A),"utf8"));}catch(A){throw A instanceof Q?T("APP_UI_MANIFEST_INVALID",A.code):T("APP_UI_MANIFEST_INVALID")}return Zd(r,o.manifest,y),{bytes:y,...a===void 0?{}:{legacySourceHash:a}}}async function ep(e,n){let{included:t,excluded:i}=ii(e);Sr(e,t,n);let r=ur(e,t,{version:n.version}),o=oi(e,t);return {plan:{manifest:r,included:t,excluded:i,secretFindings:o},archiveOptions:{}}}async function np(e,n){Kd(n);let t=await tr(e),i=Xd(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw T("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let r=Yd(i),o=ii(e);if(o.excluded.some(I=>Xn(I.path,r)&&(I.rule==="symlink"||I.rule==="symlink-dir")))throw T("PACKAGE_SYMLINK","selected App package contains a symlink");let s=o.included.filter(I=>Xn(I,r)),a=qd(o,r),d=new Map,c=new Map;if(i.capabilities.includes("screen")){let I=Qd(e,i,r,s),E=`${r}/${ie}`;d.set(E,I.bytes),I.legacySourceHash!==void 0?c.set(E,I.legacySourceHash):(s.push(E),s.sort());}if(i.capabilities.includes("skill")&&!s.includes(`${r}/SKILL.md`))throw T("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");Sr(e,s,n,d);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:r,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:d},y=fr(e,p),A=oi(e,s,d);return {plan:{manifest:y,included:s,excluded:a,secretFindings:A},archiveOptions:{generatedFiles:d,sourceFileHashes:c}}}async function Mr(e,n){let t=ee.resolve(e);if(Jd(n))return np(t,n);if(n.expectedDefinitionHash!==void 0)throw T("APP_ID_REQUIRED");return ep(t,n)}async function Gf(e,n={}){return (await Mr(e,n)).plan}function tp(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new Se("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function Lr(e,n={}){let t=ee.resolve(e),i=await Mr(t,n);i.plan.secretFindings.length>0&&tp(i.plan.secretFindings);let r=await _r(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:r}}async function Wf(e,n={}){return Lr(e,n)}async function Jf(e,n){let t=await Lr(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
-export{$d as DEFAULT_PUBLISH_MAX_BYTES,zd as DEFAULT_PUBLISH_MAX_FILES,ir as EXCLUDE_RULES,nn as MARKETPLACE_API_PREFIX,Se as PublishError,Jf as packApp,Lr as packPublish,Wf as packTemplate,Gf as planPublish,Hd as uploadToMarketplace};
+import*as oe from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as ui from'crypto';import {createHash}from'crypto';import {isIP}from'net';import*as Z from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as Ir from'js-yaml';import {load}from'js-yaml';import*as Nr from'os';import*as br from'tar';import {gunzipSync,gzipSync}from'zlib';var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var g=j(()=>{});var R,Pn=j(()=>{g();R=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function rt(e){return Fr.test(e)||Vr.test(e)}function de(){throw new R("INPUT_INVALID","JSON value is not projection-safe")}function $r(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function it(e,n,t,i,o,r){if(n>i&&de(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(Br.test(e)||zr.test(e)&&!Jr(o,r)||Hr.test(e))&&de(),e;if(typeof e=="number")return Number.isFinite(e)||de(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&de();let s=e;t.has(s)&&de(),t.add(s);try{if(Array.isArray(e))return e.map(c=>it(c,n+1,t,i,o,r));$r(s)||de();let a={};for(let[c,d]of Object.entries(e))rt(c)&&de(),a[c]=it(d,n+1,t,i,[...o,c],r);return a}finally{t.delete(s);}}function Te(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>Wr)&&de(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&de();let i=it(e,0,new Set,Gr+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&de(),i}function We(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function Jr(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>We(t,i))}function Je(e){try{let n=JSON.stringify(e);return n===void 0&&de(),n}catch{de();}}function ot(e){return Array.isArray(e)?e.map(ot):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,ot(e[n])])):e}function re(e){return Je(ot(e))}function st(e){return Buffer.byteLength(e,"utf8")}var Fr,Vr,Br,Hr,zr,Gr,Wr,Pe=j(()=>{g();Pn();Fr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Vr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,Br=/<\/?[A-Za-z][^>]*>/,Hr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,zr=/^(?:https?|file|ftp|ws|wss):\/\//i;Gr=8,Wr=4;});var Ii=j(()=>{g();Pe();});var Nn,at=j(()=>{g();Nn=["text/plain","application/json"];});var gi=j(()=>{g();at();});function Ke(e){return Xr.has(e)||Yr.test(e)||qr.test(e)}var mi,Xr,Yr,qr,Dn,sn,Ae,ct,dt,pt,lt,ut,xe=j(()=>{g();mi=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],Xr=new Set(mi),Yr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,qr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Dn=/^[A-Za-z0-9_]+$/,sn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,Ae=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,ct=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,dt=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,pt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,lt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],ut=["inline","panel"];});function ft(e){return typeof e=="string"&&Nn.includes(e)}var hi=j(()=>{g();at();xe();});function bn(e){if(!yt(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Zr(e.in)||Object.hasOwn(e,"out")&&!Qr(e.out))}function Zr(e){return yt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&ft(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Qr(e){return yt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&ft(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function yt(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var At=j(()=>{g();gi();hi();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function le(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=Te(t);return createHash("sha256").update(re(i)).digest("hex")}function Ne(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new R("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!ns.test(e.sourceHash)))throw new R("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||le(e)!==e.hash)throw new R("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!is(i)))throw new R("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new R("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new R("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new R("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&It(t.resultProjection),t.content!==void 0&&!bn(t.content))throw new R("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new R("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new R("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new R("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new R("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new R("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new R("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new R("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new R("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&It(e.stateProjection),e.summaryProjection){It(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new R("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new R("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(ts(r,o==="readTool"),n.has(r.name))throw new R("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new R("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new R("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new R("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new R("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>We(t,i))))throw new R("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function ts(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=Te(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let c=Te(a.structuredContent);if(st(Je(c))>4*1024)throw new Error("fixed result size")}}catch{throw new R("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function It(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new R("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function is(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var ns,ve=j(()=>{g();Pe();Pn();At();ns=/^[0-9a-f]{64}$/;});var B,Xe,gt=j(()=>{g();B="dist/tools.json",Xe="dist/main.mjs";});var we,mt=j(()=>{g();we="window";});function _i(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!os.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var os,Ei=j(()=>{g();os=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function H(e){throw new ht(e)}function Is(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function gs(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&H("CSP_ORIGIN_INVALID"),t.value}function Sn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=gs(e,n);Array.isArray(t)||H("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(r=>typeof r!="string"||r!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(r))&&H("CSP_ORIGIN_INVALID");let o=[];for(let r=0;r<t.length;r+=1)(!Object.prototype.hasOwnProperty.call(t,r)||typeof t[r]!="string")&&H("CSP_ORIGIN_INVALID"),o.push(t[r]);return Object.keys(t).length!==t.length&&H("CSP_ORIGIN_INVALID"),o}function ms(e){let n;try{n=JSON.stringify(e);}catch{H("CSP_ORIGIN_INVALID");}return n===void 0&&H("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function Ni(e,n){/\s|\\/u.test(e)&&H("CSP_ORIGIN_INVALID");let t=ls.exec(e);t||H("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),o=t[2];(o.includes("@")||o.includes("%")||o.includes("*"))&&H("CSP_ORIGIN_INVALID"),(o.startsWith("[")?us:fs).test(o)||H("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&H("CSP_ORIGIN_INVALID");let s;try{s=new URL(e);}catch{H("CSP_ORIGIN_INVALID");}(s.protocol!==`${i}:`||s.username!==""||s.password!==""||s.search!==""||s.hash!=="")&&H("CSP_ORIGIN_INVALID");let a=s.hostname.toLowerCase();if((!a||a.includes("%"))&&H("CSP_ORIGIN_INVALID"),!a.startsWith("[")){let d=a.endsWith(".")?a.slice(0,-1):a;(d.length===0||d.length>253)&&H("CSP_ORIGIN_INVALID"),d.split(".").some(A=>A.length>63||!ys.test(A))&&H("CSP_ORIGIN_INVALID");}let c=s.origin;return (c==="null"||!c.startsWith(`${i}://`))&&H("CSP_ORIGIN_INVALID"),{origin:c,hostname:a}}function hs(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function Di(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function Mi(e){let n=hs(e);return Di(n,3221225472,24)?n!==3221225481&&n!==3221225482:As.some(([t,i])=>Di(n,t,i))}function _s(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((r,s)=>r<<16n|BigInt(Number.parseInt(s,16)),0n)}function Es(e){let n=_s(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let o=Number(n&0xffffffffn);return Mi([o>>>24&255,o>>>16&255,o>>>8&255,o&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function Ts(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return Mi(t);if(i===6)return Es(t);let o=e.toLowerCase().replace(/\.$/,"");return !o||!o.includes(".")||n.has(o)?true:ps.some(r=>o===r||o.endsWith(`.${r}`))}function bi(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function Si(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function Li(e,n={}){if(e===void 0){let y=Si({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(y,"utf8").digest("hex")})}Is(e)||H("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(y=>typeof y!="string")&&H("CSP_ORIGIN_INVALID"),t.some(y=>!ds.has(y))&&H("CSP_AXIS_UNKNOWN");let i=Sn(e,"connectDomains"),o=Sn(e,"frameDomains"),r=Sn(e,"resourceDomains"),s=Sn(e,"baseUriDomains");(r.length>0||s.length>0)&&H("CSP_AXIS_UNSUPPORTED"),(ms(e)>ss||i.length>Pi||o.length>Pi||i.length+o.length>as||[...i,...o].some(y=>new TextEncoder().encode(y).byteLength>cs))&&H("CSP_LIMIT_EXCEEDED");let c=i.map(y=>Ni(y,"connectDomains")),d=o.map(y=>Ni(y,"frameDomains")),p=new Set((n.runtimeHostnames??[]).map(y=>y.toLowerCase().replace(/\.$/,"")));[...c,...d].some(y=>Ts(y.hostname,p))&&H("CSP_ORIGIN_FORBIDDEN");let A={declared:true,connectDomains:bi(c),frameDomains:bi(d)},m=Si(A);return Object.freeze({...A,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(m,"utf8").digest("hex")})}var ss,Pi,as,cs,ds,ps,ls,us,fs,ys,As,ht,Oi=j(()=>{g();ss=4096,Pi=16,as=32,cs=512,ds=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),ps=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],ls=/^(https|wss):\/\/([^/?#]+)$/i,us=/^\[[^\]]+\](?::[0-9]+)?$/,fs=/^[^:\[\]]+(?::[0-9]+)?$/,ys=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,As=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],ht=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function cn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function f(e,n=e,t,i){throw new te(e,n,t,i)}function $(e,n){try{return n()}catch(t){throw t instanceof te?t.withPathPrefix(e):t}}function G(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function w(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function Ys(e,n){let t={};for(let[i,o]of Object.entries(e))i!==n&&(t[i]=o);return t}function J(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e).find(s=>!i.has(s));o!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",o,"unknown-key");let r=n.find(s=>!w(e,s));r!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",r,"missing-key");}function Rn(e,n=false,t=false,i=false){return bs.test(e)||!i&&Ms.test(e)||Ss.test(e)||t&&Ri.test(e)||Ls.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Ri.test(e))}function On(e,n=new Set,t=0,i=false,o=false,r=""){if(typeof e=="string"){Rn(e,i,o)&&f("UNSAFE_VALUE","UNSAFE_VALUE",r,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&f("MANIFEST_INVALID","MANIFEST_INVALID",r),n.add(e);try{if(Array.isArray(e)){e.forEach((s,a)=>On(s,n,t+1,!1,!1,cn(r,`[${a}]`)));return}G(e)||f("MANIFEST_INVALID","MANIFEST_INVALID",r);for(let[s,a]of Object.entries(e))On(a,n,t+1,i&&t===0&&(s==="name"||s==="description"),o,cn(r,s));}finally{n.delete(e);}}}function Ie(e,n){let t=e[n];return typeof t!="string"&&f("MANIFEST_INVALID"),t}function ue(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&f("MANIFEST_INVALID"),i}function _t(e){return Ds.test(e)||f("MANIFEST_INVALID"),e}function Ye(e){return Ns.test(e)||f("TOKEN_INVALID"),e}function qs(e){return Vi.test(e)||f("MANIFEST_INVALID"),e}function Zs(e){G(e)||f("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=qs(t);G(i)||f("MANIFEST_INVALID");let r=i.type;if(r==="text"){J(i,["type","maxLength"]),n[o]={type:r,maxLength:ue(i,"maxLength",1)};continue}if(r==="text-list"){J(i,["type","max","itemMaxLength"]),n[o]={type:r,max:ue(i,"max",0),itemMaxLength:ue(i,"itemMaxLength",1)};continue}if(r==="step-list"){J(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=ue(i,"min",0),a=ue(i,"max",1);s>a&&f("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:ue(i,"labelMaxLength",1),detailMaxLength:ue(i,"detailMaxLength",1)};continue}typeof r=="string"&&f("SCHEMA_TYPE_UNSUPPORTED"),f("MANIFEST_INVALID");}return n}function Qs(e,n,t){let i=e[n];(!i||i.type!==t)&&f("MANIFEST_INVALID");}function Mn(e,n,t){let i=Ie(e,"field");return Vi.test(i)||f("MANIFEST_INVALID"),Qs(n,i,t),i}function ea(e,n){G(e)||f("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&f("MANIFEST_INVALID"),Xs.includes(t)||f("PRIMITIVE_UNKNOWN"),t){case "card-shell":return J(e,["primitive"]),{primitive:t};case "meta-banner":return J(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Ye(Ie(e,"badgeToken")),noticeToken:Ye(Ie(e,"noticeToken"))};case "heading":return J(e,["primitive","field"]),{primitive:t,field:Mn(e,n,"text")};case "labeled-text":return J(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&f("MANIFEST_INVALID"),{primitive:t,titleToken:Ye(Ie(e,"titleToken")),field:Mn(e,n,"text"),variant:"callout"};case "step-flow":return J(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Ye(Ie(e,"titleToken")),field:Mn(e,n,"step-list")};case "text-list":{J(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Ye(Ie(e,"titleToken")),field:Mn(e,n,"text-list")};return w(e,"emptyToken")&&(i.emptyToken=Ye(Ie(e,"emptyToken"))),w(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&f("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return f("MANIFEST_INVALID")}function na(e,n){return Array.isArray(e)||f("MANIFEST_INVALID"),e.map(t=>ea(t,n))}function K(e="v2 manifest exceeds a contract limit",n,t){return f("LIMIT_EXCEEDED",e,n,t)}function pe(e="initial state is not projection-safe"){return f("INITIAL_STATE_INVALID",e)}function wi(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||Ws.test(e)||Js.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),(Rn(e,true,true)||Os.test(e)||Rs.test(e)||ws.test(e))&&f("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Et(e,n){return (typeof e!="string"||!Ae.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function ta(e){return (typeof e!="string"||!ct.test(e)||e==="*"||e==="all")&&f("MANIFEST_INVALID","action capability is invalid"),e}function Bi(e){return (typeof e!="string"||!Gs.test(e))&&f("MANIFEST_INVALID","resource hash is invalid"),e}function Tt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&K("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||f("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&f("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&f("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&K("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&f("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&K("v2 manifest array is too long",i,"array-too-long"),e.forEach((o,r)=>Tt(o,n,t+1,cn(i,`[${r}]`)));return}G(e)||f("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[o,r]of Object.entries(e))Tt(r,n,t+1,cn(i,o));}finally{n.delete(e);}}}function Hi(e){return (typeof e!="string"||e.length>4096||!sn.test(e))&&(typeof e=="string"&&e.length>4096&&K("projection path is too long"),f("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Ke(t))&&f("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Pt(e){G(e)||f("MANIFEST_INVALID","projection policy must be an object"),J(e,["allow"]),Array.isArray(e.allow)||f("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&K("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=Hi(i);t.has(o)&&f("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function ia(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","dataPaths must be an array"),e.length>Ks&&K("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=Hi(o);i.has(r)&&f("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>We(r,s))||f("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function qe(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&f("MANIFEST_INVALID",`${n} is invalid`),e}function Ui(e,n){return (typeof e!="number"||!Number.isFinite(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function Nt(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||Rn(e))&&f("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||f("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&K("schema enum is too deep"),t.has(e)&&f("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&K("schema enum array is too long"),e.map(o=>Nt(o,n+1,t));G(e)||f("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))Ke(o)&&f("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Nt(r,n+1,t);return i}finally{t.delete(e);}}function oa(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","schema required must be an array"),e.length>64&&K("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!sn.test(o))&&f("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&K("schema required key is too long"),i.has(o)&&f("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&f("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function ra(e,n){let t=n?sn:Dn;return e.length>4096&&K("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Ke(i)))&&f("MANIFEST_INVALID","schema property name is invalid"),e}function Dt(e,n=0,t=false){G(e)||f("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&K("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&f("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),f("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),J(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(w(e,"enum")&&(Array.isArray(e.enum)||f("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&K("schema enum is too long"),r.enum=e.enum.map(a=>Nt(a))),i==="string"&&(w(e,"minLength")&&(r.minLength=qe(e.minLength,"schema minLength",4096)),w(e,"maxLength")&&(r.maxLength=qe(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&f("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(w(e,"minimum")&&(r.minimum=Ui(e.minimum,"schema minimum")),w(e,"maximum")&&(r.maximum=Ui(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&f("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(w(e,"minItems")&&(r.minItems=qe(e.minItems,"schema minItems",128)),w(e,"maxItems")&&(r.maxItems=qe(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&f("MANIFEST_INVALID","schema array length bounds are inverted"),w(e,"items")&&(r.items=Dt(e.items,n+1,false))),i==="object"){let a;if(w(e,"properties")){G(e.properties)||f("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&K("schema properties are too many"),a={};for(let[p,A]of d){let m=ra(p,t);a[m]=Dt(A,n+1,false);}r.properties=a;}w(e,"minProperties")&&(r.minProperties=qe(e.minProperties,"schema minProperties",64)),w(e,"maxProperties")&&(r.maxProperties=qe(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&f("MANIFEST_INVALID","schema object property bounds are inverted");let c=oa(e.required,a);c!==void 0&&(r.required=c),w(e,"additionalProperties")&&(e.additionalProperties!==false&&f("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>65536)&&K("action inputSchema subtree is too large"),r}function sa(e){let n=Dt(e,0,true);return (n.type!=="object"||!n.properties)&&f("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function aa(e){if(G(e)||f("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){J(e,Fs);let n=e.handler;return (typeof n!="string"||!dt.test(n))&&f("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&w(e,"entry"))return J(e,Hs),e.entry!==Xe&&f("MANIFEST_INVALID",`skill backend entry must be ${Xe}`),{type:"skill",entry:Xe};if(e.type==="skill"){J(e,Vs,Bs),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&f("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!pt.test(i))&&f("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=w(e,"env")?da(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}f("MANIFEST_INVALID","action backend type is unsupported");}function ca(e){G(e)||f("MANIFEST_INVALID","action must be an object"),J(e,xs,vs),w(e,"_meta")&&$("_meta",()=>zi(e._meta));let n=$("actionId",()=>Et(e.actionId,"actionId"));rt(n)&&f("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=$("capability",()=>ta(e.capability)),i=e.mutation;typeof i!="boolean"&&f("MANIFEST_INVALID","action mutation must be boolean","mutation");let o=$("inputSchema",()=>sa(e.inputSchema)),r;if(w(e,"dataInputs")){Array.isArray(e.dataInputs)||f("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let p=o.properties,A=new Set,m=[];for(let y of e.dataInputs)(typeof y!="string"||!w(p,y)||A.has(y))&&f("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),A.add(y),m.push(y);r=m;}let s=$("resultProjection",()=>Pt(e.resultProjection)),a=$("backend",()=>aa(e.backend)),c;w(e,"content")&&((a.type!=="skill"||!bn(e.content))&&f("MANIFEST_INVALID","action content declaration is invalid","content"),c=pa(e.content));let d;if(w(e,"confirmation")){let p=e.confirmation;p!=="none"&&p!=="native"&&f("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=p;}return {actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...c===void 0?{}:{content:c},...r===void 0?{}:{dataInputs:r},...d===void 0?{}:{confirmation:d}}}function da(e){return _i(e)||f("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function pa(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function la(e){return G(e)||f("INITIAL_STATE_INVALID","initialState must be an object"),J(e,zs,$s),e.path!=="ui/state.json"&&f("MANIFEST_INVALID","initialState path is not fixed"),w(e,"hash")?{path:"ui/state.json",hash:Bi(e.hash)}:{path:"ui/state.json"}}function ua(e){let n=["wasm","terminal","htmlDocuments"];return (!G(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&f("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function fa(e,n){let t;try{t=Li(e);}catch(i){let o=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return f("MANIFEST_INVALID",o,void 0,o.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&f("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&f("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function ya(e,n){On(G(e)&&w(e,"csp")?Ys(e,"csp"):e,new Set,0,true,true),Tt(e),G(e)||f("MANIFEST_INVALID"),J(e,Cs,ks),w(e,"_meta")&&$("_meta",()=>zi(e._meta)),e.manifestVersion!==2&&f("MANIFEST_INVALID");let t;w(e,"runtime")&&(t=$("runtime",()=>ua(e.runtime)));let i;w(e,"csp")&&(i=$("csp",()=>fa(e.csp,t)));let o=$("pluginId",()=>Et(e.pluginId,"pluginId")),r=$("definitionId",()=>Et(e.definitionId,"definitionId")),s=$("version",()=>ue(e,"version",1)),a=$("name",()=>wi(e.name,"name")),c=$("description",()=>wi(e.description,"description")),d;w(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&f("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let p;w(e,"tone")&&((typeof e.tone!="string"||!lt.includes(e.tone))&&f("MANIFEST_INVALID","tone is invalid","tone"),p=e.tone),e.entry!=="ui/index.html"&&f("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let A;w(e,"entryHash")&&(A=$("entryHash",()=>Bi(e.entryHash)));let m;w(e,"initialState")&&(m=$("initialState",()=>la(e.initialState)));let y;w(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&f("MANIFEST_INVALID","usage is invalid","usage"),y=e.usage);let h;w(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&f("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),h=e.detailPanel);let O;if(w(e,"displayModes")){((y??we)!==we||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&f("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let l=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(u=>typeof u!="string"||!l.has(u)))&&f("MANIFEST_INVALID","displayModes are invalid","displayModes"),O=e.displayModes;}(y??we)===we&&h!==void 0&&f("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let S=n.mode??"local";S!=="local"&&S!=="installed"&&S!=="published"&&f("MANIFEST_INVALID","manifest mode is invalid"),S!=="local"&&A===void 0&&f("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),S!=="local"&&m!==void 0&&m.hash===void 0&&f("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&f("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&K("surfaces exceed the v2 limit","surfaces","too-many-items");let F=[],k=new Set;for(let l of e.surfaces)(typeof l!="string"||!ut.includes(l))&&f("MANIFEST_INVALID","surface is unsupported","surfaces"),k.has(l)&&f("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),k.add(l),F.push(l);G(e.size)||f("MANIFEST_INVALID","size must be an object","size"),$("size",()=>J(e.size,["height"]));let v=$("size",()=>ue(e.size,"height",1));v>720&&K("size.height exceeds the v2 limit","size.height","too-large");let V=$("stateProjection",()=>Pt(e.stateProjection)),E=e.summaryProjection===void 0?void 0:$("summaryProjection",()=>Pt(e.summaryProjection));E!==void 0&&E.allow.some(l=>!V.allow.includes(l))&&f("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let T=$("dataPaths",()=>ia(e.dataPaths,V.allow));Array.isArray(e.actions)||f("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&K("actions exceed the v2 limit","actions","too-many-items");let C=[],D=new Set;for(let[l,u]of e.actions.entries()){let I=`actions[${l}]`,P=$(I,()=>ca(u));if(D.has(P.actionId)&&f("MANIFEST_INVALID","actions contain a duplicate actionId",`${I}.actionId`,"duplicate-item"),P.backend.type==="core"&&P.backend.handler==="state.set"){P.mutation||f("MANIFEST_INVALID","state.set actions must be mutations",`${I}.mutation`);for(let b of Object.keys(P.inputSchema.properties))V.allow.includes(b)||f("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${I}.inputSchema.properties`);}D.add(P.actionId),C.push(P);}return {manifestVersion:2,pluginId:o,definitionId:r,version:s,name:a,description:c,...d===void 0?{}:{icon:d},...p===void 0?{}:{tone:p},entry:"ui/index.html",...A===void 0?{}:{entryHash:A},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...m===void 0?{}:{initialState:m},...y===void 0?{}:{usage:y},...h===void 0?{}:{detailPanel:h},...O===void 0?{}:{displayModes:O},surfaces:F,size:{height:v},stateProjection:V,...E===void 0?{}:{summaryProjection:E},...T===void 0?{}:{dataPaths:T},actions:C}}function zi(e){G(e)||f("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>js)&&K("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function Aa(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function bt(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>We(o.join("."),a));return (e.length>4096||Rn(e,false,false,s))&&pe("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||pe("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&pe("state contains a non-JSON value"),t>8&&pe("state is too deep"),n.has(e)&&pe("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&pe("state array is too long"),s=e.map(c=>bt(c,n,t+1,65536,o,r));else {G(e)||pe("state contains a non-plain object");let c={};for(let[d,p]of Object.entries(e))(d.length>4096||!Dn.test(d)||Ke(d))&&(d.length>4096&&pe("state key is too long"),pe("state contains a reserved or invalid key")),c[d]=bt(p,n,t+1,65536,[...o,d],r);s=c;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&pe("state subtree is too large"),s}finally{n.delete(e);}}function Mt(e,n=[]){G(e)||pe("initial state must be a JSON object");let t=bt(e,new Set,0,65536,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&pe(),t}function Ia(e,n={}){On(e),G(e)||f("MANIFEST_INVALID"),J(e,Us),e.manifestVersion!==1&&f("MANIFEST_INVALID");let t=_t(Ie(e,"pluginId")),i=_t(Ie(e,"definitionId")),o=ue(e,"version",1),r=ue(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Ps;(!Number.isSafeInteger(s)||s<1)&&f("MANIFEST_INVALID"),r>s&&f("PRIMITIVE_SET_UNSUPPORTED"),G(e.activation)||f("MANIFEST_INVALID"),J(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&f("MANIFEST_INVALID");let a=_t(Ie(e.activation,"language")),c=Zs(e.schema),d=na(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:c,layout:d}}function ga(e,n={}){return G(e)||f("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&f("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?ya(e,n):Ia(e,n)}function Fe(e,n={}){try{return ga(e,n)}catch(t){if(t instanceof te)throw t;return f("MANIFEST_INVALID")}}function dn(e,n={}){let t=Fe(e,n);return t.manifestVersion===2?Aa(t):t}var Ps,Ns,Ds,Vi,bs,Ss,Ms,Ls,Ri,Os,Rs,ws,Us,Cs,ks,xs,vs,js,Fs,Vs,Bs,Hs,zs,$s,Gs,Ws,Js,Ks,Xs,te,Lt=j(()=>{g();mt();Pe();At();Ei();gt();Oi();xe();Ps=1,Ns=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Ds=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Vi=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,bs=/<\/?[A-Za-z][^>]*>/,Ss=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Ms=/^(?:https?|file|ftp|ws|wss):\/\//i,Ls=/^\s*(?:javascript|data):/i,Ri=/data:[^,\s]*,/i,Os=/(?:https?|file|ftp|ws|wss):\/\//i,Rs=/javascript:/i,ws=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,Us=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],Cs=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],ks=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths"],xs=["actionId","capability","mutation","inputSchema","resultProjection","backend"],vs=["confirmation","dataInputs","content","_meta"],js=4*1024,Fs=["type","handler"],Vs=["type","command"],Bs=["env"],Hs=["type","entry"],zs=["path"],$s=["hash"],Gs=/^[0-9a-f]{64}$/,Ws=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,Js=/[\r\n]/,Ks=16,Xs=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],te=class e extends Error{constructor(t,i=t,o,r){super(i);this.code=t;this.path=o;this.rule=r;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,cn(t,this.path),this.rule)}};});function Xi(e){return typeof e=="string"&&e.length<=ha&&ma.test(e)}function U(e,n,t,i,o){throw new me(e,{path:n,rule:t,...i===void 0?{}:{message:i},...o===void 0?{}:{file:o}})}function Q(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function X(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function ye(e){let n=`_meta["${Ue}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function Pa(e){return e.toLowerCase().replace(/_/g,"-")}function Na(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return ye(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return ye("definitionVersion");case "definitionId":return ye("definitionId");default:return ye(`${t}${i}`)}}function Yi(e,n,t){return {path:t(e.path),rule:e.rule??Pa(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function qi(e){return JSON.parse(JSON.stringify(e))}function wt(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&U("LIMIT_EXCEEDED",n,"string-too-long"),(_a.test(e)||Ea.test(e)||Ta.test(e))&&U("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||U("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&U("MANIFEST_INVALID",n,"non-json-value"),t>8&&U("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&U("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&U("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((o,r)=>wt(o,`${n}[${r}]`,t+1,i));return}Q(e)||U("MANIFEST_INVALID",n,"non-plain-object");for(let[o,r]of Object.entries(e))wt(r,n===""?o:`${n}.${o}`,t+1,i);}finally{i.delete(e);}}}function fe(e,n){return (typeof e!="string"||e.length===0)&&U("MANIFEST_INVALID",n,"string"),e}function Qe(e,n){return Q(e)||U("MANIFEST_INVALID",n,"object"),e}function Da(e,n){Array.isArray(e)||U("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>fe(t,`${n}[${i}]`));}function ba(e,n){typeof e!="boolean"&&U("MANIFEST_INVALID",n,"boolean");}function pn(e,n,t,i){for(let o of Object.keys(e))!t.includes(o)&&!i.includes(o)&&U("MANIFEST_INVALID",`${n}.${o}`,"unknown-key");for(let o of t)X(e,o)||U("MANIFEST_INVALID",`${n}.${o}`,"missing-key");}function Sa(e,n){switch(wt(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "icon":case "license":fe(n,e);return;case "author":{let t=Qe(n,e);pn(t,e,["name"],["email","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "repository":{let t=Qe(n,e);pn(t,e,[],["type","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||U("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=Qe(t,o);pn(r,o,["src","size"],["theme"]),fe(r.src,`${o}.src`),fe(r.size,`${o}.size`),X(r,"theme")&&fe(r.theme,`${o}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":Da(n,e);return;case "tools":{Array.isArray(n)||U("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=Qe(t,o);pn(r,o,["name"],["description"]),fe(r.name,`${o}.name`),X(r,"description")&&fe(r.description,`${o}.description`);});return}case "prompts":{Array.isArray(n)||U("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=Qe(t,o);pn(r,o,["name","text"],["description","arguments"]),fe(r.name,`${o}.name`),fe(r.text,`${o}.text`);});return}case "tools_generated":case "prompts_generated":ba(n,e);return;case "localization":case "compatibility":case "user_config":Qe(n,e);return;default:U("MANIFEST_INVALID",e,"unknown-key");}}function wn(e){return typeof e=="string"&&Ae.test(e)?e:void 0}function Zi(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function Ma(e){let n=wn(e.name);if(n===void 0)return;let t=e._meta,i=Q(t)?t[Ue]:void 0,o=Q(i)?i:{},r=X(o,"definitionId")?wn(o.definitionId):n,s=X(o,"definitionVersion")?Zi(o.definitionVersion):1;return {pluginId:n,...r===void 0?{}:{definitionId:r},...s===void 0?{}:{definitionVersion:s}}}function La(e){let n=wn(e.pluginId);if(n===void 0)return;let t=wn(e.definitionId),i=Zi(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function kt(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!Q(n))return !1;let t=n._meta;return Q(t)&&X(t,Ue)}catch{return  false}}function Oa(e,n){if(e===se)return n.builtinOnly===true;let t=n._meta,i=Q(t)?t[Ue]:void 0;return Q(i)&&i.builtinOnly===true}function Ra(e,n){X(e,"server")&&U("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let a of Object.keys(e))Ut.includes(a)||U("MANIFEST_INVALID",a,"unknown-key");for(let a of Ct)X(e,a)||U("MANIFEST_INVALID",a,"missing-key");e.manifest_version!==Ot&&U("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${Ot}"`),Xi(e.version)||U("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;Q(t)||U("MANIFEST_INVALID","_meta","object"),X(t,Ue)||U("MANIFEST_INVALID",ye(),"missing-key");let i=t[Ue];Q(i)||U("MANIFEST_INVALID",ye(),"object");for(let a of Object.keys(i))Rt.includes(a)||Ki.includes(a)||U("MANIFEST_INVALID",ye(a),"unknown-key");for(let a of Rt)a==="actions"&&n!==void 0||X(i,a)||U("MANIFEST_INVALID",ye(a),"missing-key");if(n!==void 0&&X(i,"actions")&&U("MANIFEST_INVALID",ye("actions"),"two-truths",`actions are declared in both ${W} and ${B}; a server.ts App keeps them in the tools file only`),wa(i.actions),X(i,"definitionVersion")){let a=i.definitionVersion;(!Number.isSafeInteger(a)||a<1)&&U("MANIFEST_INVALID",ye("definitionVersion"),"positive-integer");}let o={};for(let a of Ji)X(e,a)&&(Sa(a,e[a]),o[a]=qi(e[a]));let r={};for(let[a,c]of Object.entries(t))a!==Ue&&(r[a]=c);let s={manifestVersion:2,pluginId:e.name,definitionId:X(i,"definitionId")?i.definitionId:e.name,version:X(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[a,c]of Object.entries(i))a==="definitionId"||a==="definitionVersion"||(s[a]=c);return n!==void 0&&(s.actions=n.map(a=>({...a,backend:{type:"skill",entry:Xe}}))),Object.keys(r).length>0&&(s._meta=r),{v2Input:s,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:o}}function wa(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=Q(n)?n.backend:void 0;Q(i)&&X(i,"entry")&&U("MANIFEST_INVALID",ye(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${W} cannot name an entry; a server.ts App declares its actions in ${B}`);});}function Ua(e,n,t){Q(e)||U("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",W);let i;try{i=Ra(e,t);}catch(s){throw s instanceof me?new me(s.code,{...s.reason,file:W}):s}let o;try{let s=Fe(i.v2Input,{mode:n.mode??"local"});s.manifestVersion!==2&&U("MANIFEST_INVALID","","v2-required"),o=s;}catch(s){throw s instanceof te?new me(s.code,Yi(s,W,Na)):s}let r=e.tools;if(Array.isArray(r)){let s=new Set(o.actions.map(a=>a.actionId));r.forEach((a,c)=>{let d=a.name;if(!s.has(d))throw new me("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:W})});}return {file:W,manifest:o,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function Ca(e,n){try{let t=Fe(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new me("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:se});return {file:se,manifest:t,v2Input:e}}catch(t){throw t instanceof te?new me(t.code,Yi(t,se,i=>i??"")):t}}function en(e){return le(dn(e).definition)}function Gi(e){let{entryHash:n,initialState:t,...i}=e,o={...i};return t!==void 0&&(o.initialState={path:t.path}),qi(o)}function ka(e,n){let t=Gi(e),i=Gi(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(r=>re(t[r]??null)!==re(i[r]??null))}function xa(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function va(e,n){let t=ka(e,n),i=xa(e,n),o="";try{let r=en(e),s=en(n);i=i||r!==s,o=` (definition hash ${r.slice(0,12)} vs ${s.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||U("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${W} and ${se} normalize to different definitions${o}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function ge(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:B},files:[]}}function Wi(e){return {...ge("","tools-needs-manifest-json","MANIFEST_INVALID",`${B} is read with ${W} only`),files:e}}function ja(e,n){if(e.byteLength>n)return {failure:ge("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:ge("","invalid-json")}}if(!Q(t))return {failure:ge("","not-object","MANIFEST_INVALID",`${B} must be a JSON object`)};for(let o of Object.keys(t))if(o!=="schemaVersion"&&o!=="actions")return {failure:ge(o,"unknown-key")};for(let o of ["schemaVersion","actions"])if(!X(t,o))return {failure:ge(o,"missing-key")};if(t.schemaVersion!==1)return {failure:ge("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:ge("actions","array")};for(let[o,r]of i.entries()){if(!Q(r))return {failure:ge(`actions[${o}]`,"object")};if(X(r,"backend"))return {failure:ge(`actions[${o}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${B} cannot carry a backend`)}}return {actions:i}}function Fa(e,n){let t=n.maxBytes??262144,i=[],o=new TextDecoder("utf-8",{fatal:true});for(let r of Y){let s=e[r];if(s===void 0)continue;if(s.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:r},files:[r]}};let a;try{a=JSON.parse(o.decode(s));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:r},files:[r]}}}if(!Q(a))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${r} must be a JSON object`,file:r},files:[r]}};i.push({file:r,raw:a});}return {parsed:i}}function Ve(e,n={}){let{parsed:t,failure:i}=Fa(e,n),o=Y.filter(y=>e[y]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let r=e[B],s=r===void 0?void 0:ja(r,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:s===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:Wi(o),parseFailure:true,builtinOnly:false};let a=t[0],c=a.file===W?Ma(a.raw):La(a.raw),d=t.some(y=>Oa(y.file,y.raw)),p;if(s!==void 0){let y=t.some(h=>h.file===W)?s.failure:Wi(o);if(y!==void 0)return {ok:false,rejection:y,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};p=s.actions;}let A=[];try{for(let y of t)A.push(y.file===W?Ua(y.raw,n,p):Ca(y.raw,n));A.length===2&&va(A[0].manifest,A[1].manifest);}catch(y){if(y instanceof me)return {ok:false,rejection:{code:y.code,reason:y.reason,files:y.code==="MANIFEST_DUAL_MISMATCH"?[...Y]:y.reason.file===void 0||y.reason.file===B?o:[y.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw y}let m=A[0];return {ok:true,...m,identity:c??{pluginId:m.manifest.pluginId},files:o}}var W,se,Y,Ot,Ue,Ut,Ct,Ji,Rt,Ki,ma,ha,_a,Ea,Ta,me,Un=j(()=>{g();ve();Pe();gt();xe();Lt();W="manifest.json",se="ui-plugin.json",Y=[W,se],Ot="0.3",Ue="dev.crewx",Ut=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),Ct=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),Ji=Object.freeze(Ut.filter(e=>e!=="server"&&!Ct.includes(e))),Rt=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),Ki=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp"]),ma=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,ha=256,_a=/<\/?[A-Za-z][^>]*>/,Ea=/^\s*javascript:/i,Ta=/data:[^,\s]*,/i;me=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});var xt=j(()=>{g();Ii();Un();Lt();xe();});function kn(e,n=e){throw new ke(e,n)}var ke,xn=j(()=>{g();ke=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var po=j(()=>{g();});var lo=j(()=>{g();ve();Pe();xn();po();});function uo(e,n){return qa.add(e),n!==void 0&&Za.set(e,n),e}var qa,Za,vn=j(()=>{g();qa=new WeakSet,Za=new WeakMap;});function yn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function jt(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function Ao(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Ao(n);return Object.freeze(e)}function ee(e){throw new he("LINEAGE_INVALID",e)}function rc(e){throw new he("LINEAGE_STALE",e)}function Io(e){if(!yn(e)||!jt(e,nc,tc)||!yn(e.actions))return ee("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!yn(n)||!jt(n,ic,oc))return ee("Lineage action definition shape is invalid");return e}function sc(e){if(!yn(e)||!jt(e,Qa,ec))return ee("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!fo.test(e.hash))return ee("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!fo.test(e.sourceHash)))return ee("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return ee("Lineage compatibility marker is invalid");let n=Io(e.definition);if(n.version!==e.version)return ee("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return ee("Lineage source hash does not match its definition");let t;try{t=le(n),Ne({...n,hash:e.hash});}catch{return ee("Lineage definition is invalid")}return t!==e.hash?ee("Lineage definition hash does not match"):Ao({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function yo(e){return e.stateProjection?.allow??[]}function ac(e,n){let t=[],i=new Set(yo(n));yo(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,c]of Object.entries(e.actions)){let d=n.actions[a];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(c=>!a.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function cc(e,n){return re(e)===re(n)}function Ft(e,n){if(!Array.isArray(e)||e.length===0)return ee("Definition lineage is missing");if(!yn(n)||typeof n.hash!="string")return ee("Current definition is invalid");let t,i;try{let{hash:a,...c}=n;i=Io(c),t={...i,hash:a},Ne(t);}catch{return ee("Current definition is invalid")}let o=e.map(sc),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return ee("Lineage definition ids do not match");if(o.some((a,c)=>c>0&&a.version<=o[c-1].version))return ee("Lineage generations are not in increasing version order");if(o.some((a,c)=>o.findIndex(d=>d.hash===a.hash)!==c))return ee("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!cc(s.definition,i))return rc("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),c=new Set;for(let p of o)if(p.sourceHash===void 0)for(let A of Object.keys(p.definition.actions))a.has(A)&&c.add(A);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(p=>!c.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new he("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(p=>p.compat==="break"))continue;let d=ac(o[a].definition,t);if(d.length>0)throw new he("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(o),current:t})}var he,fo,Qa,ec,nc,tc,ic,oc,Vt=j(()=>{g();ve();Pe();he=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},fo=/^[0-9a-f]{64}$/,Qa=["version","hash","definition"],ec=["sourceHash","compat"],nc=["id","version","actions"],tc=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","legacy"],ic=["capabilities"],oc=["inputKeys","dataInputs","confirmation","resultProjection","content","env"];});var go,mo,ho=j(()=>{g();go=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],mo=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"];});var _o=j(()=>{g();ve();vn();});function Bt(e,n=0){try{let t=Te(e,n);return t.type!==void 0&&t.type!=="object"&&kn("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof ke)throw t;kn("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function Eo(e){if(e.length===0)return Bt({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Bt(i.inputSchema));return Bt(lc(n,t),pc)}function lc(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}var An,pc,Ht=j(()=>{g();lo();ve();Pe();vn();xn();Vt();ho();_o();An=8*1024*1024,new Set(go),new Set(mo),pc=4;});function uc(e){if(e===null||typeof e!="object"||!(To in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[To]}function Po(e,n){let t=uc(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0),t.rootIdentity=n,t}var To,No=j(()=>{g();To=Symbol("crewx.workspace-app-scan-cache.state");});function ce(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new N("NOT_FOUND"):n==="ELOOP"?new N("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new N("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new N("READ_DENIED"):new N("READ_DENIED")}function Ic(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new N("READ_DENIED")}function zt(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new N("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new N("PATH_ESCAPED");return n}function Bn(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function tn(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Jt(e,n){return e.dev===n.dev&&e.ino===n.ino}function Kt(e,n){return Jt(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function jn(e){Ic(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw ce(i)}if(!t.isDirectory())throw new N("READ_DENIED");return {realRoot:n,identity:tn(t)}}async function So(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new N("READ_DENIED")}catch(r){throw r instanceof N?r:ce(r)}if(!Bn(n,o))throw new N("PATH_ESCAPED");return o}async function Fn(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw ce(a)}if(!Bn(n,r)||t!==void 0&&!Bn(t,r))throw new N("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new N("READ_DENIED");if(!Jt(i,o)||!Jt(i,s)||i.dev!==s.dev)throw new N("PATH_ESCAPED")}async function nn(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new N("PATH_ESCAPED")}if(t!==n.realRoot||!Kt(n.identity,tn(i)))throw new N("PATH_ESCAPED")}function gc(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var N,Wt,Ac,bo,Hn,Mo,Yt=j(()=>{g();N=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},Wt=constants.O_NOFOLLOW,Ac=constants.O_NONBLOCK,bo=constants.O_RDONLY|(Wt??0)|(Ac??0);Hn=class{async getRootIdentity(n){let t=await jn(n);return await nn(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=zt(t),o=await jn(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(c){let d=ce(c);if(d.code==="NOT_FOUND")return [];throw d}if(!Bn(o.realRoot,s)||!a.isDirectory())throw new N("PATH_ESCAPED");try{let c=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await nn(n,o),c.map(gc)}catch(c){let d=ce(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new N("READ_DENIED");if(Wt===void 0)throw new N("UNSUPPORTED");let o=zt(t),r=await jn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new N("PATH_ESCAPED");let c;try{c=await open(s,bo);}catch(d){throw ce(d)}try{let d;try{let h=await c.stat({bigint:!0});d=tn(h);}catch(h){throw ce(h)}if(d.size>BigInt(i))throw new N("LIMIT_EXCEEDED");if(d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new N("LIMIT_EXCEEDED");await nn(n,r);let p=await So(n,r.realRoot,o);await Fn(s,r.realRoot,p,d);let A=new Uint8Array(new ArrayBuffer(Number(d.size))),m=0;for(;m<A.byteLength;){let h;try{h=(await c.read(A,m,A.byteLength-m,m)).bytesRead;}catch(O){throw ce(O)}if(h<=0)throw new N("IDENTITY_CHANGED");m+=h;}let y;try{let h=await c.stat({bigint:!0});y=tn(h);}catch(h){throw ce(h)}if(!Kt(d,y))throw new N("IDENTITY_CHANGED");return await Fn(s,r.realRoot,p,y),await nn(n,r),new Uint8Array(A)}finally{await c.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new N("READ_DENIED");if(Wt===void 0)throw new N("UNSUPPORTED");let o=zt(t),r=await jn(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new N("PATH_ESCAPED");let c;try{c=await open(s,bo);}catch(d){throw ce(d)}try{let d;try{let m=await c.stat({bigint:!0});d=tn(m);}catch(m){throw ce(m)}if(d.size>BigInt(i)||d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new N("LIMIT_EXCEEDED");await nn(n,r);let p=await So(n,r.realRoot,o);await Fn(s,r.realRoot,p,d);let A;try{let m=await c.stat({bigint:!0});A=tn(m);}catch(m){throw ce(m)}if(!Kt(d,A))throw new N("IDENTITY_CHANGED");return await Fn(s,r.realRoot,p,A),await nn(n,r),{...A,candidateRealPath:p??r.realRoot}}catch(d){throw d instanceof N?d:ce(d)}finally{await c.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Mo=new Hn;});function hn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Oo(e){return typeof e=="string"&&Ae.test(e)?e:void 0}function Nc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function He(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Dc(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function bc(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Sc(e){return Tc.decode(e)}function Mc(e){return JSON.parse(Sc(e))}function Ro(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Lc(e){if(e instanceof N)return Ro(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ro(n)}}function be(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Oc(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Rc(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function wo(e,n,t,i){let o=Oc(e);if(!o)throw new N("READ_DENIED");return bc(await o.call(e,n,t,i))}async function Qt(e,n,t){let i=Rc(e);if(!i)throw new N("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new N("READ_DENIED");return o.map(Dc).filter(r=>r!==null)}function wc(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Uc(e){if(!hn(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(He))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function Cc(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function $n(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(He)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(He))})}function zn(e,n){let t=Object.keys(e).sort(He),i=[...n].sort(He);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Uo(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function kc(e){let n;try{n=Mc(e);}catch{return}if(!hn(n)||!zn(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>ei)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!hn(s))return;let a=["packageDir","appId","definition","files"],c=Object.hasOwn(s,"lineage"),d=Object.hasOwn(s,"launcher"),p=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!zn(s,[...a,...p])||d&&s.launcher!==false)return;let A=Uo(s.packageDir),m=Oo(s.appId);if(!A||A.length!==2||A[0]!=="apps"||!Nc(A[1])||!m||t.has(s.packageDir)||!hn(s.definition)||!zn(s.definition,["id","version","hash"]))return;let y=Oo(s.definition.id),h=s.definition.version,O=s.definition.hash;if(!y||!Number.isSafeInteger(h)||h<1||typeof O!="string"||!Zt.test(O)||!Array.isArray(s.files)||s.files.length<2||s.files.length>ni)return;let S=new Set,F=[];for(let k of s.files){if(!hn(k)||!zn(k,["path","sha256"]))return;let v=Uo(k.path);if(!v||typeof k.sha256!="string"||!Zt.test(k.sha256))return;let V=v.join("/"),E=`${s.packageDir}/${V}`;if(S.has(V)||i.has(E))return;S.add(V),i.add(E),F.push(Object.freeze({path:V,sha256:k.sha256}));}if(!Y.some(k=>S.has(k))||!S.has("ui/index.html")||(o+=F.length,o>hc))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...d?{launcher:false}:{},appId:m,definition:Object.freeze({id:y,version:h,hash:O}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(F.sort((k,v)=>He(k.path,v.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function Be(e){let n=Lc(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function xc(e,n,t,i,o){let r=[],s=async(a,c)=>{if(!be(i,o))throw new N("LIMIT_EXCEEDED");if(c>2)throw new N("LIMIT_EXCEEDED");let d=await Qt(e,n,a);for(let p of d){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new N("PATH_ESCAPED");let A=`${a}/${p.name}`;if(p.kind==="file"){if(r.push(A.slice(t.length+1)),r.length>ni)throw new N("LIMIT_EXCEEDED")}else if(p.kind==="directory")await s(A,c+1);else throw p.kind==="symlink"?new N("PATH_ESCAPED"):new N("READ_DENIED")}};return await s(t,0),r.sort(He)}function vc(e){return Y.includes(e)?262144:e==="ui/index.html"?An:e==="ui/state.json"?65536:e.startsWith("ui/assets/")?Ec:_c}async function Co(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Pc};let o=Uc(e.reservedIds),r=[],s=(l,u,I)=>wc(l,"bundled",u),a=(l=[],u=false,I)=>({...I===void 0?{}:{indexHash:I},packages:l,diagnostics:r,incomplete:u,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!Zt.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let c;try{c=await wo(n,e.root,"bundle-index.json",mc);}catch(l){return r.push(s(Be(l),"bundle-index.json")),a()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let p=kc(c);if(p===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!Cc($n(p.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,d);if(!be(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(l=>({indexEntry:l,failureCode:"LIMIT_EXCEEDED"})),true,d);let A;try{A=await Qt(n,e.root,"");}catch(l){return r.push(s(Be(l),"bundle-index.json")),a(p.packages.map(u=>({indexEntry:u,failureCode:Be(l)})),false,d)}if(!be(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(p.packages.map(l=>({indexEntry:l,failureCode:"LIMIT_EXCEEDED"})),true,d);let m=A.find(l=>l.name==="bundle-index.json"&&l.kind==="file"),y=A.find(l=>l.name==="apps"&&l.kind==="directory"),h=l=>p.packages.map(u=>({indexEntry:u,failureCode:l}));if(!m)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(h("BUNDLE_INTEGRITY"),false,d);let O=A.filter(l=>l.name!=="bundle-index.json"&&l.name!=="apps");if(O.length>0){let l=O.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(l,"bundle-index.json")),a(h("BUNDLE_INTEGRITY"),false,d)}if(A.some(l=>l.name==="apps"&&l.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(h("PATH_ESCAPED"),false,d);let S=[];if(y)try{S=await Qt(n,e.root,"apps");}catch(l){return r.push(s(Be(l),"apps")),a(h(Be(l)),false,d)}if(!be(t,i)||S.length>ei)return r.push(s("LIMIT_EXCEEDED","apps")),a(h("LIMIT_EXCEEDED"),true,d);let F=new Map(p.packages.map(l=>[l.packageDir.slice(5),l])),k=S.filter(l=>!F.has(l.name));for(let l of k)r.push(s(l.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${l.name}`));if(k.length>0){let l=k.some(u=>u.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(h(l),false,d)}let v=new Set,V=new Map,E=new Map;for(let l of p.packages){let u=V.get(l.appId)??[];u.push(l),V.set(l.appId,u);let I=`${l.definition.id}\0${String(l.definition.version)}`,P=E.get(I)??[];P.push(l),E.set(I,P);}for(let l of [...V.values(),...E.values()])if(l.length>1)for(let u of l)v.add(u);let T=[],C=c.byteLength,D=false;for(let l of p.packages){if(!be(t,i)){D=true,T.push({indexEntry:l,failureCode:"LIMIT_EXCEEDED"});continue}let u;try{let b=l.lineage[l.lineage.length-1];if(!b)throw new he("LINEAGE_INVALID","Definition lineage is missing");if(b.definition.id!==l.definition.id||b.version!==l.definition.version||b.hash!==l.definition.hash)throw new he("LINEAGE_STALE","Last lineage generation does not match bundle identity");u=Ft(l.lineage,{...b.definition,hash:b.hash}).entries;}catch(b){let ae=b instanceof he?b.code:"LINEAGE_INVALID";r.push(s(ae,l.packageDir)),T.push({indexEntry:l,failureCode:ae});continue}let I=S.find(b=>b.name===l.packageDir.slice(5));if(!y||!I){T.push({indexEntry:l,failureCode:"BUNDLE_INTEGRITY"});continue}if(I.kind!=="directory"){T.push({indexEntry:l,failureCode:I.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let P;try{let b=await xc(n,e.root,l.packageDir,t,i);if(!be(t,i)){D=!0,T.push({indexEntry:l,failureCode:"LIMIT_EXCEEDED"});continue}let ae=l.files.map(_e=>_e.path);if(b.length!==ae.length||b.some((_e,Ee)=>_e!==ae[Ee])){T.push({indexEntry:l,failureCode:"BUNDLE_INTEGRITY"});continue}P=new Map;let z;for(let _e of l.files){if(!be(t,i)){z="LIMIT_EXCEEDED",D=!0;break}if(C>=qt){z="LIMIT_EXCEEDED";break}let Ee;try{Ee=await wo(n,e.root,`${l.packageDir}/${_e.path}`,vc(_e.path));}catch(jr){z=Be(jr);break}if(!be(t,i)){z="LIMIT_EXCEEDED",D=!0;break}if(C+Ee.byteLength>qt){C=qt,z="LIMIT_EXCEEDED";break}if(C+=Ee.byteLength,createHash("sha256").update(Ee).digest("hex")!==_e.sha256){z="BUNDLE_INTEGRITY";break}P.set(_e.path,Ee);}if(z!==void 0){T.push({indexEntry:l,failureCode:z});continue}}catch(b){be(t,i)||(D=true),T.push({indexEntry:l,failureCode:Be(b)});continue}T.push({indexEntry:l,lineage:u,files:P,...v.has(l)?{failureCode:"DUPLICATE_ID"}:{}});}return a(T,D,d)}var mc,ei,ni,hc,_c,Ec,qt,Zt,Tc,Pc,ti=j(()=>{g();Vt();xe();Un();Ht();Yt();mc=256*1024,ei=64,ni=128,hc=ei*ni,_c=2*1024*1024,Ec=8*1024*1024,qt=32*1024*1024,Zt=/^[0-9a-f]{64}$/,Tc=new TextDecoder("utf-8",{fatal:true}),Pc=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function Fc(e){if(typeof e!="string"||!Ae.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${ii}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${ii}${n}_read`,action:`${ii}${n}_action`}}function xo(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Bc(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Hc(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function _n(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Jo(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function zc(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Ko(e){return Vc.decode(e)}function $c(e){return JSON.parse(Ko(e))}function Gc(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function Wn(e,n,t,i,o){let r={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...o?.reason===void 0?{}:{reason:Object.freeze({...o.reason})},...o?.files===void 0?{}:{files:Object.freeze([...o.files])}};return Object.freeze(r)}function vo(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ie(e){if(e instanceof N)return vo(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return vo(n)}}function $e(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function jo(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function Fo(e){return e==="MANIFEST_DUAL_MISMATCH"?e:Xo(e)}function Wc(e){return Xo(e.code)}function Xo(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Yo("UiPluginValidationError",e)}}function Yo(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Jc(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Yo("McpAppContractError",e)}}function Se(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Kc(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Xc(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(xo(o)){let r=o.bin,s=typeof r=="string"?r:xo(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let c=Yc(a);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function Yc(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function qc(){return globalThis.performance?.now()??Date.now()}function ze(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))ze(n);return Object.freeze(e)}function Vo(e){return Object.freeze(Array.from(e))}async function Jn(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new N("NOT_FOUND");if(a.byteLength>i)throw new N("LIMIT_EXCEEDED");return new Uint8Array(a)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return $o(e,n.root,o,i);try{let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let c=await $o(e,n.root,o,i),d=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=d.candidateRealPath,Zo(a,d)&&d.size===BigInt(c.byteLength)&&!Qo(d,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:d}):r.cacheable=!1,c}catch(a){let c=Y.includes(t)&&ie(a)==="NOT_FOUND"&&r.directoryListings.some(p=>p.relativePath===n.relativePath&&!Kn(p.key,t)),d=t===B&&ie(a)==="NOT_FOUND"&&Zc(r.directoryListings,n.relativePath);throw !c&&!d&&(r.cacheable=false),a}}function Zc(e,n){let t=e.find(o=>o.relativePath===n);if(t===void 0)return  false;if(!Kn(t.key,"dist"))return  true;let i=e.find(o=>o.relativePath===`${n}/dist`);return i!==void 0&&!Kn(i.key,"tools.json")}function qo(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function ed(e,n,t,i,o,r,s,a){let c=e.fingerprintVerifiedFile,d=qo(t,i),p=o.candidates.get(d),A=i.relativePath,m;try{m=await zo(e,n,A);}catch(D){if(ie(D)!=="NOT_FOUND")throw D}let y=m===void 0?void 0:{relativePath:A,key:m};if(y!==void 0&&(i.source==="apps"||i.source==="skills")&&!Y.some(D=>Kn(y.key,D)))return Se(s,a)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===y.relativePath&&p.directoryListings[0]?.key===y.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof c=="function"?{memo:p}:typeof c!="function"?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([y]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let h=async D=>{if(D==="")return y;let l=`${i.relativePath}${D}`;try{let u=await zo(e,n,l);return u===void 0?void 0:{relativePath:l,key:u}}catch(u){if(ie(u)==="NOT_FOUND")return;throw u}},O=await Promise.all(Bo.map(h)),S=await Promise.all(Qc.map(h));if(!Se(s,a))return {timeLimitReached:true};let F=typeof c=="function"&&O.every(D=>D!==void 0),k=O.filter(D=>D!==void 0),v=[...k,...S.filter(D=>D!==void 0)],V=new Map,E=p!==void 0&&F,T;if(p!==void 0&&typeof c=="function"){let D=await Promise.all(p.files.map(async l=>{if(!Se(s,a))return {kind:"time",file:l};try{let u=await c.call(e,n,l.relativePath,l.byteLimit);return {kind:"fingerprint",file:l,current:u}}catch(u){return ie(u)==="NOT_FOUND"?{kind:"missing",file:l}:{kind:"error",file:l,error:u}}}));if(D.some(l=>l.kind==="time"))return {timeLimitReached:true};for(let l of D){if(l.kind==="error")throw l.error;if(l.kind==="missing"){E=false;continue}if(l.kind!=="fingerprint")continue;let{file:u,current:I}=l;V.set(u.relativePath,I),T??=I.candidateRealPath,(I.candidateRealPath!==p.candidateRealPath||!Zo(I,u.fingerprint)||Qo(I,r))&&(E=false);}}let C=p!==void 0&&p.directoryListings.length===v.length&&p.directoryListings.every((D,l)=>D.relativePath===v[l]?.relativePath&&D.key===v[l]?.key);return p!==void 0&&F&&C&&E&&T===p.candidateRealPath?{memo:p}:!F||k.length!==Bo.length?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(v),priorFingerprints:V,files:new Map,...T===void 0?{}:{candidateRealPath:T},cacheable:true}}}function Kn(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function zo(e,n,t){let i=er(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(Jo);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>_n(s.name,a.name)||_n(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function Zo(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Qo(e,n){let t=e.mtimeNs-n;return t>=-Ho&&t<=Ho}function oi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function nd(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(re(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function td(e,n){let t={...e.definition,sourceHash:n},i;try{i=le(t);}catch(r){throw r instanceof R&&r.code==="INPUT_INVALID"?new te("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{Ne(o);}catch{throw new te("MANIFEST_INVALID","normalized definition is invalid")}return o}function id(e){return e.actions.some(n=>n.backend.type==="core"&&n.backend.handler!=="state.set")}function od(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function er(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function $o(e,n,t,i){let o=od(e);if(!o)throw new N("READ_DENIED");return zc(await o.call(e,n,t,i))}async function rd(e,n,t){let i=er(e);if(!i)throw new N("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new N("READ_DENIED");return o.map(Jo).filter(r=>r!==null)}function sd(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Go(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Go(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Go(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function Me(e,n){e.diagnostic||(e.diagnostic=Wn(n,e.source,e.relativePath,e.identity?.pluginId));}function ad(e){let n=new Map;for(let i of e){let o=i.identity?.pluginId;if(o===void 0)continue;let r=n.get(o)??[];r.push(i),n.set(o,r);}for(let i of n.values()){if(i.length<2)continue;let o=i.filter(s=>s.provenance!==void 0);if(o.length>0){for(let s of i)s.provenance===void 0&&Me(s,"RESERVED_ID");if(o.length>1)for(let s of o)Me(s,"DUPLICATE_ID");continue}let r=i.filter(s=>s.source==="apps");if(r.length>1){for(let s of r)Me(s,"DUPLICATE_ID");for(let s of i.filter(a=>a.source==="skills"))Me(s,"DUPLICATE_ID");}else for(let s of i.filter(a=>a.source==="skills"))Me(s,"DUPLICATE_ID");}let t=new Map;for(let i of e){if(i.diagnostic?.code==="RESERVED_ID")continue;let o=i.identity?.definitionKey;if(o===void 0)continue;let r=t.get(o)??[];r.push(i),t.set(o,r);}for(let i of t.values())if(i.length>1)for(let o of i)Me(o,"DUPLICATE_ID");}function cd(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set(t.appIds),a=new Set(t.definitionIds);for(let c of sd(n)){for(let d of c.appIds??[])typeof d=="string"&&i.add(d);for(let d of c.definitionIds??[])typeof d=="string"&&o.add(d);for(let d of c.toolNames??[])typeof d=="string"&&r.add(d);}for(let c of e){let d=c.candidate;if(!d)continue;if(i.has(d.pluginId)||o.has(d.definitionId)){Me(c,"RESERVED_ID");continue}if(c.provenance===void 0&&(s.has(d.pluginId)||a.has(d.definitionId))){Me(c,"RESERVED_ID");continue}[d.toolNames.read,d.toolNames.action].filter(A=>A!==void 0).some(A=>r.has(A))&&Me(c,"DUPLICATE_ID");}}function dd(e){return [...e].sort((n,t)=>{let i=ko.indexOf(n.source)-ko.indexOf(t.source);return i!==0?i:_n(n.relativePath,t.relativePath)})}function x(e,n,t){e.diagnostic=Wn(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function Wo(e,n,t){let i=Ve(t,{mode:"local"});if(!i.ok&&i.parseFailure){x(n,Fo(i.rejection.code),jo(i.rejection));return}let o=Gc(i.identity);if(n.bundleIdentity===void 0)n.identity=o;else if(o?.pluginId!==n.bundleIdentity.appId||o.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){x(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){x(n,"RESERVED_ID");return}if(!i.ok){x(n,Fo(i.rejection.code),jo(i.rejection));return}let r=i.manifest,s={pluginId:r.pluginId,definitionKey:`${r.definitionId}\0${String(r.version)}`};if(n.bundleIdentity===void 0&&(n.identity=s),r.actions.length>0)try{Eo(r.actions.map(b=>({actionId:b.actionId,inputSchema:b.inputSchema})));}catch(b){if(b instanceof ke){x(n,Jc(b.code));return}throw b}let a;try{a=await Jn(e,n,"ui/index.html",An);}catch(b){x(n,$e(ie(b),"entry"));return}if(a.byteLength>An){x(n,"LIMIT_EXCEEDED");return}let c;try{c=Ko(a);}catch{x(n,"ENTRY_INVALID");return}if(a.byteLength===0||c.length===0){x(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(a).digest("hex");if(r.entryHash!==void 0&&r.entryHash!==d){x(n,"ENTRY_INVALID");return}let p={},A,m;if(r.initialState!==void 0){try{A=await Jn(e,n,"ui/state.json",65536);}catch(b){x(n,$e(ie(b),"initial"));return}if(A.byteLength>65536){x(n,"LIMIT_EXCEEDED");return}try{let b=$c(A),ae=r.dataPaths??[],z=Mt(b,ae);p=Te(z,0,ae),Je(p);}catch{x(n,"INITIAL_STATE_INVALID");return}if(m=createHash("sha256").update(A).digest("hex"),r.initialState.hash!==void 0&&r.initialState.hash!==m){x(n,"INITIAL_STATE_INVALID");return}}let y={...r,entryHash:d,...r.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:m}}},h=dn(y),O=nd(y,a,A??new Uint8Array),S;try{S=td(h,O);}catch(b){if(b instanceof te){x(n,Wc(b));return}throw b}let F;if(n.bundleLineage!==void 0){let b=n.bundleLineage[n.bundleLineage.length-1];if(!b){x(n,"LINEAGE_INVALID");return}let{legacy:ae,...z}=b.definition,{hash:_e,...Ee}=S;if(re(z)!==re(Ee)){x(n,"LINEAGE_STALE");return}if(ae!==void 0&&(S={...S,legacy:ae}),ae!==void 0)try{S={...S,hash:le(S)},Ne(S);}catch{x(n,"LINEAGE_INVALID");return}F=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==r.pluginId){x(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==S.id||n.bundleIdentity.version!==S.version||n.bundleIdentity.definitionHash!==S.hash)){x(n,"LINEAGE_STALE");return}let k=Fc(r.pluginId),v=r.actions.length===0?{read:k.read}:k,V=ze(h),E=ze(y),T=ze(S),C=ze({...h.handlers}),D=Vo(a),l=A===void 0?void 0:Vo(A),u=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:D}),...l===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:m,bytes:l})}}),I={appId:r.pluginId,pluginId:r.pluginId,definitionId:r.definitionId,version:r.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:ze(i.mcpb)},relativePath:n.relativePath,manifest:E,normalized:V,name:r.name,description:r.description,...r.icon===void 0?{}:{icon:r.icon},...r.tone===void 0?{}:{tone:r.tone},definition:T,handlers:C,resources:u,html:c,entryBytes:D,entryHash:d,initialState:ze(p),...l===void 0?{}:{initialStateBytes:l},...m===void 0?{}:{initialStateHash:m},sourceHash:O,toolNames:Object.freeze(v)},P=n.provenance===void 0?{...I,source:n.source}:{...I,provenance:n.provenance,lineage:F??[]};n.candidate=Object.freeze(P),id(r)&&x(n,"EXEC_DENIED");}async function nr(e,n){let t={};for(let i of Y)try{t[i]=await Jn(e,n,i,262144);}catch(o){if(ie(o)==="NOT_FOUND")continue;return {files:t,failure:$e(ie(o),"manifest")}}if(t[W]!==void 0)try{t[B]=await Jn(e,n,B,262144);}catch(i){if(ie(i)!=="NOT_FOUND")return {files:t,failure:$e(ie(i),"manifest")}}return {files:t}}function ri(e){return Y.some(n=>e[n]!==void 0)}async function pd(e,n){let{files:t,failure:i}=await nr(e,n);if(i!==void 0){x(n,i);return}let o=t[W];return o!==void 0&&!kt(o)&&(delete t[W],delete t[B]),ri(t)?t:void 0}function ld(e,n,t,i=jc,o=false){let r=dd(e);ad(r);let s=Object.freeze(r.filter(p=>p.candidate!==void 0&&p.diagnostic===void 0).map(p=>p.candidate)),a=Object.freeze(r.filter(p=>p.diagnostic!==void 0).map(p=>p.diagnostic)),c=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(r.filter(p=>p.source==="bundled"&&p.diagnostic===void 0&&t!==void 0&&p.candidate?.provenance?.indexHash===t).map(p=>p.candidate)),diagnostics:Object.freeze(a.filter(p=>p.source==="bundled").map(p=>Object.freeze({...p}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,d={apps:s,diagnostics:a,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...c===void 0?{}:{productBundleSnapshotMetadata:c}};return Object.defineProperty(d,"candidates",{configurable:false,enumerable:false,get:()=>s}),Object.freeze(d)}function ud(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function fd(e,n){if(ud(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Mo,options:t}}async function tr(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=fd(n,t),r=o.clock??qc,s=r(),a=await Co(o.productBundle,i,s,r),c=r(),d=BigInt(Date.now())*1000000n,p=[],A=0,m,y=false,h,O;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{O=await i.getRootIdentity(e),h=Po(o.scanCache,O),h.scanStartedAtNs=d;}catch(E){if(ie(E)!=="NOT_FOUND")throw E}let S=h!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,F=new Set,k=true;p.push(...a.diagnostics.map(E=>({source:E.source,root:o.productBundle?.root??e,name:"",relativePath:E.relativePath,diagnostic:E})));let v=a.reservedIds;a.incomplete&&(m="time_limit");for(let E of a.packages){if(!Se(c,r)){y=true,m="time_limit";break}let T=E.indexEntry,C=T.packageDir,D=E.files===void 0?void 0:Xc(C,E.files),l=a.indexHash===void 0?void 0:uo(Object.freeze({kind:"bundled",launcher:T.launcher!==false,indexHash:a.indexHash,packageDir:C,appId:T.appId,definitionId:T.definition.id,version:T.definition.version,definitionHash:T.definition.hash,files:T.files}),D),u={source:"bundled",root:o.productBundle?.root??e,name:C.slice(5),relativePath:C,...l===void 0?{}:{provenance:l},...E.files===void 0?{}:{pinnedFiles:E.files},...E.lineage===void 0?{}:{bundleLineage:E.lineage},bundleIdentity:{appId:T.appId,definitionId:T.definition.id,version:T.definition.version,definitionHash:T.definition.hash},identity:Kc(T)};if(p.push(u),A+=1,E.failureCode!==void 0){x(u,E.failureCode);continue}if(E.files?.has(B)===true){x(u,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:B}});continue}let I={};for(let P of Y){let b=E.files?.get(P);b!==void 0&&(I[P]=b);}if(!ri(I)){x(u,"BUNDLE_INTEGRITY");continue}if(await Wo(i,u,I),!Se(c,r)){y=true,m="time_limit";break}}let V=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let E of V){let{source:T,directory:C}=E,D;try{D=await rd(i,e,C);}catch(u){if(ie(u)==="NOT_FOUND")continue;S=false,k=false,p.push({source:T,root:e,name:"",relativePath:T,diagnostic:Wn($e(ie(u),"manifest"),T,T)});continue}let l=D.filter(u=>u.kind==="directory"||u.kind==="symlink").filter(u=>Hc(u.name)).map(u=>({source:T,root:e,name:u.name,relativePath:Bc(T,u.name)})).sort((u,I)=>_n(u.relativePath,I.relativePath));for(let u of l){let I={...u};if(p.push(I),O!==void 0?F.add(qo(O,I)):S=false,!Se(c,r)){y=true,m="time_limit";break e}let P;if(h!==void 0&&O!==void 0){try{let z=await ed(i,e,O,I,h,d,c,r);if(z.timeLimitReached){y=!0,m="time_limit";break e}I.scanContext=z.context,P=z.memo;}catch(z){S=false,x(I,$e(ie(z),"manifest"));continue}P===void 0&&(S=false);}if(P!==void 0){if(I.candidate=P.candidate,I.diagnostic=P.diagnostic,I.identity=P.identity,T==="skills"&&P.candidate===void 0&&P.diagnostic===void 0)continue;if(A>=64){x(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){x(I,"LIMIT_EXCEEDED");continue}if(A+=1,!Se(c,r)){y=true,m="time_limit";break e}continue}let b;if(T==="skills"&&(b=await pd(i,I),b===void 0)){I.diagnostic===void 0&&oi(I);continue}if(A>=64){x(I,"LIMIT_EXCEEDED");continue}if(u.relativePath.split("/").length-1>2){x(I,"LIMIT_EXCEEDED");continue}if(!Se(c,r)){y=true,m="time_limit";break e}if(A+=1,b===void 0){let z=await nr(i,I);if(z.failure!==void 0||!ri(z.files)){x(I,z.failure??$e("NOT_FOUND","manifest")),oi(I);continue}b=z.files;}if(await Wo(i,I,b),oi(I),!Se(c,r)){y=true,m="time_limit";break e}}}if(h!==void 0&&O!==void 0){let E=[...F].sort(_n),T=h.lastCandidateKeys,C=T!==void 0&&T.length===E.length&&T.every((l,u)=>l===E[u]);if(S=S&&C,k&&!y&&m===void 0)for(let l of h.candidates.keys())try{JSON.parse(l)[0]===O.realPath&&!F.has(l)&&h.candidates.delete(l);}catch{h.candidates.delete(l);}let D=[...h.candidates.keys()].filter(l=>{try{return JSON.parse(l)[0]===O.realPath}catch{return  false}});S=S&&D.length===F.size&&D.every(l=>F.has(l))&&!y&&m===void 0,h.lastCandidateScanUnchanged=S,k&&!y&&m===void 0&&(h.lastCandidateKeys=Object.freeze(E));}return y&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:Wn("DISCOVERY_TIME_LIMIT","apps","apps")}),cd(p,o,v),ld(p,m,a.indexHash,v,o.productBundle!==void 0)}var jc,ii,ko,Vc,Bo,Qc,Ho,ir=j(()=>{g();ve();Pn();Pe();xt();xe();Ht();xn();No();Yt();vn();ti();ti();jc=$n([]),ii="crewx_local_app_";ko=["bundled","apps","skills"],Vc=new TextDecoder("utf-8",{fatal:true});Bo=["","/ui"],Qc=["/dist"],Ho=2000000000n;});g();xt();g();mt();g();var Qi="SKILL.md",$a=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function eo(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ga(e){return e.isDirectory()||e.isSymbolicLink()}function ro(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function vt(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match($a);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!eo(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=eo(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Wa(e){return [join(e,Qi),join(e,"skill",Qi)]}function no(e,n){if(!ro(e))return null;for(let t of Wa(e)){if(!existsSync(t))continue;let o=vt(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function to(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Ga)}catch{return []}}function io(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function so(e){let n=[],t=new Set;for(let i of e)if(ro(i))for(let o of to(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of to(r))io(no(join(r,s.name),s.name),t,n);continue}io(no(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}g();Un();var Ja=/^[A-Za-z0-9_$.[\]"-]{0,200}$/,Ka=/^[a-z][a-z0-9-]{0,63}$/,Xa="<unknown>";function Ya(e){return typeof e=="string"&&(Y.includes(e)||e===B)}function ao(e){if(typeof e!="object"||e===null)return;let{file:n,path:t,rule:i}=e;if(!(typeof i!="string"||!Ka.test(i)))return {...Ya(n)?{file:n}:{},path:typeof t=="string"&&Ja.test(t)?t:Xa,rule:i}}function co(e){if(!Array.isArray(e))return;let n=Y.filter(t=>e.includes(t));return n.length>0?n:void 0}ir();var Ad=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Yn(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Id(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Id(e,n){let t=new TextEncoder().encode(qn(e)),i=gd(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function gd(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function qn(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function Xn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function sr(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:qn(t)}function md(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function ar(e){return Object.freeze({packageRoot:e})}function hd(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??we,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function cr(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function _d(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=hd(t),s=Yn(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",c=t.releaseVersion??String(t.version),d={appId:t.pluginId,name:t.name,description:a,version:c,...cr(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:ar(e.packageRoot)},definitionHash:s,...t.manifest.csp===void 0?{}:{connectDomains:Object.freeze([...t.manifest.csp.connectDomains])}};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:d.appId,capabilities:o,summary:Object.freeze(d)}}function Ed(e){let n=Td(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...cr(["skill"]),skillName:e.skill.name,localDefinitionRef:ar(e.packageRoot),definitionHash:Yn({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function Td(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function q(e,n,t,i,o){let r=ao(o?.reason),s=co(o?.files);return Object.freeze({code:e,source:n,relativePath:Pd(t),...i===void 0?{}:{appId:i},...r===void 0?{}:{reason:r},...s===void 0?{}:{files:s}})}function Pd(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function dr(e){return q(e.code,e.source,e.relativePath,e.pluginId,e)}function Nd(e,n){let t=sr(e,n.dir);if(!t)return {diagnostic:q("PATH_ESCAPED","node_modules","node_modules")};let i=md(t);if(!i)return {diagnostic:q("PATH_ESCAPED","node_modules",t)};let o=vt(n.skillMdPath);if(!o.readable)return {diagnostic:q("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:q("SKILL_INVALID",i,t)};let r=Dd(n.dir,n.skillMdPath);if(!r)return {diagnostic:q("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Yn({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:q("SKILL_READ_FAILED",i,t)}}}function Dd(e,n){let t=relative(e,n).split(sep).join("/");try{return qn(t)}catch{return null}}function bd(e){if(!Ad.test(e.appId))return {diagnostic:q("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??we,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Sd(e){return e.builtinCatalog}function Md(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return qn(n)}catch{return null}}function Ld(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Od(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Md(s);if(!a){t.push(q("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let c=o.get(a);if(c&&JSON.stringify(c)!==JSON.stringify(s)){t.push(q("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let c=r.get(s);if(!c){t.push(q("INSTALLED_MISSING","installed",s,a.appId));continue}let d=Ld(a);if(!d){t.push(q("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==c.appId||a.definitionHash!==void 0&&a.definitionHash!==c.summary.definitionHash){t.push(q("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let p={...c.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:d},A=e.indexOf(c);A>=0&&(e[A]={...c,summary:Object.freeze(p)});}}function Rd(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(c=>c.source!==r))i.add(a),n.push(q("RESERVED_ID",a.source,ai(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(q("DUPLICATE_ID",a.source,ai(a),a.appId));continue}for(let s of o)i.add(s),n.push(q("DUPLICATE_ID",s.source,ai(s),s.appId));}return e.filter(o=>!i.has(o))}function ai(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function wd(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(dr)}function Ud(e){return e.filesystem}function Cd(e,n){let t=Ud(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{reservedAppIds:i.reservedAppIds,reservedDefinitionIds:i.reservedDefinitionIds}}}async function pr(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Sd(n),i=await tr(e,Cd(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],c=[],d=new Set;for(let u of r)for(let I of so([u])){let P=sr(e,I.dir);(P===null||!d.has(P))&&(c.push(I),P!==null&&d.add(P));}for(let u of c){let I=Nd(e,u);"diagnostic"in I?s.push(I.diagnostic):a.push(I);}let p=new Map,A=n.registeredProductBundle?.indexHash,m=(n.registeredProductBundle?.candidates??[]).filter(u=>A!==void 0&&u.provenance?.indexHash===A),y=[...i.apps??i.candidates??[],...m],h=new Set(m),O=new Set(A===void 0?[]:(t?.listMcpApps()??[]).filter(u=>u.provenance?.indexHash===A).map(u=>u.appId));for(let u of y){if(h.has(u)&&u.provenance?.indexHash===A&&O.has(u.appId))continue;let I=u.provenance===void 0?`workspace\0${u.relativePath}`:`bundled\0${u.provenance.indexHash}\0${u.provenance.packageDir}`;p.set(I,{candidate:u,packageRoot:u.relativePath});}let S=new Map(a.map(u=>[u.packageRoot,u])),F=[];for(let u of p.values()){let I=u.candidate.provenance===void 0?S.get(u.packageRoot):void 0,P=_d(u,I);F.push({...P.packageRoot===void 0?{}:{packageRoot:P.packageRoot},source:P.source,appId:P.appId,summary:P.summary});}let k=new Set([...p.values()].filter(u=>u.candidate.provenance===void 0).map(u=>u.packageRoot)),v=o===void 0?new Set:new Set(i.diagnostics.filter(u=>u.code==="RESERVED_ID"&&u.source!=="bundled").map(u=>u.relativePath)),V=new Set(o?.reservedAppIds??[]);for(let u of a){let I=Ed(u);if(!(k.has(u.packageRoot)||v.has(u.packageRoot))){if(V.has(I.appId)){s.push(q("RESERVED_ID",u.source,u.packageRoot,I.appId));continue}F.push({packageRoot:I.packageRoot,source:I.source,appId:I.appId,summary:I.summary});}}let E=[...wd(i.diagnostics,new Set(a.map(u=>u.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(u=>u.source==="bundled").map(dr)??[]],T=[];if(t)for(let u of t.listMcpApps()){let I=bd(u);"diagnostic"in I?E.push(I.diagnostic):T.push(I);}let C=Rd([...F,...T],E);Od(C,n,E);let D=C.map(u=>u.summary).sort((u,I)=>Xn(u.appId,I.appId)),l=[...E].sort((u,I)=>Xn(u.relativePath,I.relativePath)||Xn(u.code,I.code)||Xn(u.appId??"",I.appId??""));return Object.freeze({items:Object.freeze(D),diagnostics:Object.freeze(l)})}g();g();g();function kd(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function on(e,n){try{return kd(n).test(e)}catch{return  false}}function Zn(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>on(t[i+r],o))}function xd(e,n){return e.split("/").some(t=>on(t,n))}var lr=[{label:".env*",test:e=>on(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>on(e,"*.key")},{label:"*.pem",test:e=>on(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Zn(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Zn(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Zn(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Zn(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>xd(n,".crewx")}];function Qn(e,n,t){for(let i of lr)if(i.test(e,n,t))return i.label;return null}function pi(e){let n=[],t=[];function i(o,r,s){let a;try{a=Z.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((c,d)=>c.name.localeCompare(d.name));for(let c of a){let d=r?`${r}/${c.name}`:c.name,p=oe.join(o,c.name);if(c.isSymbolicLink()){let A;try{A=Z.statSync(p);}catch{t.push({path:d,rule:"symlink"});continue}if(A.isDirectory()){t.push({path:d,rule:s??"symlink-dir"});continue}let m=s??Qn(c.name,d,false);m?t.push({path:d,rule:m}):t.push({path:d,rule:"symlink"});continue}if(c.isDirectory()){let A=s??Qn(c.name,d,true);i(p,d,A);continue}if(c.isFile()){let A=s??Qn(c.name,d,false);A?t.push({path:d,rule:A}):n.push(d);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}g();var vd=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function jd(e){return e.includes(0)}function li(e,n,t){let i=[];for(let o of n){let r=oe.join(e,o),s;try{let c=t?.get(o);s=c===void 0?Z.readFileSync(r):Buffer.from(c);}catch{continue}if(jd(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((c,d)=>{for(let{rule:p,regex:A}of vd)A.test(c)&&i.push({path:o,line:d+1,rule:p});});}return i}g();g();var Le=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function _(e,n){return new Le(e,n)}var Ar=/^[a-z0-9-]+$/,Fd=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Vd=/^[A-Za-z_][A-Za-z0-9_]*$/;function Bd(e){let n=oe.join(e,"crewx.yaml");if(!Z.existsSync(n))return {};let t;try{t=Ir.load(Z.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Hd(e){return ui.createHash("sha256").update(e).digest("hex")}function gr(e){let n;try{n=Z.lstatSync(e);}catch{throw _("PACKAGE_FILE_INVALID",`file is not readable: ${oe.basename(e)}`)}if(n.isSymbolicLink())throw _("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw _("PACKAGE_FILE_INVALID","only regular files are publishable");return ui.createHash("sha256").update(new Uint8Array(Z.readFileSync(e))).digest("hex")}function zd(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function mr(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||oe.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw _("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function $d(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw _("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function hr(e){if(!Fd.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function _r(e,n,t={}){let i=Bd(e),o=i.name??oe.basename(e);if(!Ar.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${Ar} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");hr(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let p of s){if(typeof p!="string"||!Vd.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);a.push(p);}let c=n.map(p=>(mr(p),{path:p,sha256:gr(oe.join(e,p))})).sort((p,A)=>p.path<A.path?-1:p.path>A.path?1:0),d={name:o,version:r,type:"template",description:i.description??"",files:c,requiredEnv:a};return i.crewxMinVersion&&(d.crewxMinVersion=i.crewxMinVersion),d}function Gd(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw _("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function Er(e,n){if($d(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(hr(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw _("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let s=n.includedFiles.includes(`${i}manifest.json`),a=n.includedFiles.includes(`${i}ui-plugin.json`);if(!s&&!a)throw _("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(s&&!a)throw _("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw _("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw _("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(mr(s),!s.startsWith(i))throw _("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?gr(oe.join(e,s)):Hd(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>zd(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Gd(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}g();function Tr(e){return ui.createHash("sha256").update(e).digest("hex")}function Sr(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||oe.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw _("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=oe.resolve(e),i=oe.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${oe.sep}`))throw _("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Pr(e,n){let t=Sr(e,n),i;try{i=Z.lstatSync(t);}catch{throw _("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw _("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw _("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(Z.readFileSync(t))}async function Mr(e,n,t={}){let i=oe.join(e,".crewx","publish");Z.mkdirSync(i,{recursive:true});let o=oe.join(i,`${n.name}-${n.version}.tgz`),r=oe.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=Z.mkdtempSync(oe.join(Nr.tmpdir(),"crewx-publish-"));try{let a=new Set,c=[];for(let d of n.files){if(a.has(d.path))throw _("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(d.path);let p=t.generatedFiles?.get(d.path);if(d.generated===!0&&p===void 0)throw _("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(d.path)){let y=Pr(e,d.path);if(t.sourceFileHashes.get(d.path)!==Tr(y))throw _("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let A=p??Pr(e,d.path);if(Tr(A)!==d.sha256)throw _("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${d.path}`);let m=Sr(s,d.path);Z.mkdirSync(oe.dirname(m),{recursive:!0}),Z.writeFileSync(m,new Uint8Array(A)),c.push(d.path);}Z.writeFileSync(oe.join(s,"manifest.json"),JSON.stringify(n,null,2)),await br.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...c]),Z.renameSync(r,o);}finally{try{Z.rmSync(r,{force:!0});}catch{}Z.rmSync(s,{recursive:true,force:true});}return o}g();g();var rn="/api/v1";var Kd=201,Xd=200,Yd=409,fi=401,Lr={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function qd(){return process.env.WI013_FAKE_UPLOAD==="1"}function Zd(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Qd(e){return e.replace(/\/+$/,"")}async function En(e){try{return await e.json()}catch{return null}}function Or(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function ep(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function np(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Rr(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(Lr,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return _(Lr[s],a)}}async function tp(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Qd(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${rn}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let c=await En(a),d=ep(c),p=np(c),A=r&&p!==void 0?p:i,m;if(a.status===Kd)m="created";else if(r&&a.status===Xd){if(d===void 0)throw _("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");m="existing";}else if(a.status===Yd){if(r)throw Rr(c,i)??_("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);m="existing";}else throw a.status===fi?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let y="not-needed",h=null;if(m==="existing"&&!r){let C;try{C=await fetch(`${n}${rn}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let D=await En(C);if(C.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${C.status}`);let u=Or(D,"publisher items",C.status)?.items;if(!Array.isArray(u))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${C.status}`);let I=u.find(P=>!P||typeof P!="object"?false:P.slug===i);if(!I||typeof I.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${C.status}`);if(h=I.version,h!==e.manifest.version){let P;try{P=await fetch(`${n}${rn}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!P.ok)throw await En(P),P.status===fi?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${P.status})`):P.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${P.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${P.status}`);y="applied";}}let O=Z.readFileSync(e.tgzPath),S=qd()?Zd(O):O,F=new FormData;F.set("archive",new Blob([new Uint8Array(S)],{type:"application/gzip"}),`${A}-${e.manifest.version}.tgz`);let k=r&&d!==void 0?d:i,v;try{v=await fetch(`${n}${rn}/publisher/items/${encodeURIComponent(k)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:F});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(v.status===fi)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!v.ok){let C=await En(v);if(r){let D=Rr(C,A);if(D)throw D}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${v.status}`)}let V=await En(v),E=Or(V,"upload",v.status),T=typeof E.contentId=="string"&&E.contentId.length>0?E.contentId:d;if(r&&T===void 0)throw _("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:A,version:e.manifest.version,...T===void 0?{}:{contentId:T},artifactChecksum:E.artifactChecksum,artifactSizeBytes:E.artifactSizeBytes,submitOutcome:m,versionUpdate:y,serverVersionBefore:h}}var ip=1e4,op=100*1024*1024;function yi(e){return ui.createHash("sha256").update(e).digest("hex")}function rp(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Tn(e,n){if(!n||n.includes("\\")||n.includes("\0")||oe.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw _("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=oe.resolve(e,...n.split("/")),i=oe.resolve(e);if(t!==i&&!t.startsWith(`${i}${oe.sep}`))throw _("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=Z.lstatSync(t);}catch{throw _("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw _("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw _("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(Z.readFileSync(t))}function nt(e,n){return e===n||e.startsWith(`${n}/`)}function sp(e,n){return e.path<n.path?-1:e.path>n.path?1:e.rule.localeCompare(n.rule)}function Ur(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new Le("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function kr(e,n,t,i){let o=Ur(t.maxFileCount??t.maxFiles,ip,"max file count"),r=Ur(t.maxTotalBytes??t.maxBytes,op,"max total bytes");if(n.length>o)throw new Le("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let c=i?.get(a);if(c!==void 0?s+=c.byteLength:s+=Tn(e,a).byteLength,s>r)throw new Le("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function ap(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function cp(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw _("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw _("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw _("APP_ID_REQUIRED")}function dp(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw _("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw _("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function pp(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw _("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function lp(e,n){let t=[];for(let i of e.excluded)t.push(nt(i.path,n)?i:{path:i.path,rule:"out-of-app-scope"});for(let i of e.included)nt(i,n)||t.push({path:i,rule:"out-of-app-scope"});return t.sort(sp)}function Ai(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function up(e,n,t){let i=Ve({[se]:t},{mode:"published"});if(!i.ok)throw _("APP_UI_MANIFEST_INVALID",`generated ${se} does not read: ${Ai(i.rejection)}`);if(en(i.manifest)!==en(n))throw _("APP_UI_MANIFEST_INVALID",`generated ${se} normalizes to a different definition hash than the source`);let o=e[W];if(o===void 0)return;let r=e[B],s=Ve({[W]:o,[se]:t,...r===void 0?{}:{[B]:r}},{mode:"local"});if(!s.ok)throw _("APP_UI_MANIFEST_INVALID",Ai(s.rejection))}function fp(e,n,t,i){let o={};for(let y of Y){let h=`${t}/${y}`;i.includes(h)&&(o[y]=Tn(e,h));}let r=`${t}/${B}`;if(o[W]!==void 0&&i.includes(r)&&(o[B]=Tn(e,r)),Object.keys(o).length===0)throw _("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let s=Ve(o,{mode:"local"});if(!s.ok)throw _("APP_UI_MANIFEST_INVALID",Ai(s.rejection));if(s.manifest.pluginId!==n.appId)throw _("APP_DEFINITION_CONFLICT",`${s.file} identity no longer matches the selected App`);let a=o[se],c=a===void 0?void 0:yi(a),d=`${t}/ui/index.html`;if(!i.includes(d))throw _("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let p=yi(Tn(e,d)),A=JSON.parse(JSON.stringify(s.v2Input));if(A.entryHash=p,Object.prototype.hasOwnProperty.call(A,"initialState")){let y=A.initialState;if(!rp(y)||y.path!=="ui/state.json")throw _("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let h=`${t}/ui/state.json`;if(!i.includes(h))throw _("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let O=Tn(e,h);A.initialState={...y,hash:yi(O)};}let m;try{let y=Fe(A,{mode:"published"});m=new Uint8Array(Buffer.from(JSON.stringify(y),"utf8"));}catch(y){throw y instanceof te?_("APP_UI_MANIFEST_INVALID",y.code):_("APP_UI_MANIFEST_INVALID")}return up(o,s.manifest,m),{bytes:m,...c===void 0?{}:{legacySourceHash:c}}}async function yp(e,n){let{included:t,excluded:i}=pi(e);kr(e,t,n);let o=_r(e,t,{version:n.version}),r=li(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function Ap(e,n){cp(n);let t=await pr(e),i=dp(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw _("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=pp(i),r=pi(e);if(r.excluded.some(y=>nt(y.path,o)&&(y.rule==="symlink"||y.rule==="symlink-dir")))throw _("PACKAGE_SYMLINK","selected App package contains a symlink");let s=r.included.filter(y=>nt(y,o)),a=lp(r,o),c=new Map,d=new Map;if(i.capabilities.includes("screen")){let y=fp(e,i,o,s),h=`${o}/${se}`;c.set(h,y.bytes),y.legacySourceHash!==void 0?d.set(h,y.legacySourceHash):(s.push(h),s.sort());}if(i.capabilities.includes("skill")&&!s.includes(`${o}/SKILL.md`))throw _("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");kr(e,s,n,c);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:s,generatedFiles:c},A=Er(e,p),m=li(e,s,c);return {plan:{manifest:A,included:s,excluded:a,secretFindings:m},archiveOptions:{generatedFiles:c,sourceFileHashes:d}}}async function xr(e,n){let t=oe.resolve(e);if(ap(n))return Ap(t,n);if(n.expectedDefinitionHash!==void 0)throw _("APP_ID_REQUIRED");return yp(t,n)}async function my(e,n={}){return (await xr(e,n)).plan}function Ip(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new Le("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function vr(e,n={}){let t=oe.resolve(e),i=await xr(t,n);i.plan.secretFindings.length>0&&Ip(i.plan.secretFindings);let o=await Mr(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function hy(e,n={}){return vr(e,n)}async function _y(e,n){let t=await vr(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
+export{op as DEFAULT_PUBLISH_MAX_BYTES,ip as DEFAULT_PUBLISH_MAX_FILES,lr as EXCLUDE_RULES,rn as MARKETPLACE_API_PREFIX,Le as PublishError,_y as packApp,vr as packPublish,hy as packTemplate,my as planPublish,tp as uploadToMarketplace};