@crewx/sdk 0.9.0-rc.174 → 0.9.0-rc.175

package/dist/esm/skills/index.js

@@ -1,2 +1,2 @@
-import {join,resolve,dirname,relative,sep,isAbsolute}from'path';import'url';import {createHash}from'crypto';import {isIP}from'net';import {existsSync,readFileSync,statSync,readdirSync,constants}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import {load}from'js-yaml';var Vr=Object.defineProperty;var k=(e,n)=>()=>(e&&(n=e(e=0)),n);var Fr=(e,n)=>{for(var t in n)Vr(e,t,{get:n[t],enumerable:true});};var g=k(()=>{});var U,Pn=k(()=>{g();U=class extends Error{constructor(t,i=t,r){super(i);this.code=t;this.currentRevision=r;}code;currentRevision;name="UiRuntimeError"};});function lt(e){return Br.test(e)||Hr.test(e)}function ae(){throw new U("INPUT_INVALID","JSON value is not projection-safe")}function $r(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function dt(e,n,t,i,r,o){if(n>i&&ae(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(zr.test(e)||Gr.test(e)&&!Kr(r,o)||Jr.test(e))&&ae(),e;if(typeof e=="number")return Number.isFinite(e)||ae(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&ae();let a=e;t.has(a)&&ae(),t.add(a);try{if(Array.isArray(e))return e.map(c=>dt(c,n+1,t,i,r,o));$r(a)||ae();let s={};for(let[c,d]of Object.entries(e))lt(c)&&ae(),s[c]=dt(d,n+1,t,i,[...r,c],o);return s}finally{t.delete(a);}}function ce(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>Xr)&&ae(),(!Array.isArray(t)||t.some(r=>typeof r!="string"))&&ae();let i=dt(e,0,new Set,Wr+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&ae(),i}function He(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((r,o)=>t[o]===r)}function Kr(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>He(t,i))}function ze(e){try{let n=JSON.stringify(e);return n===void 0&&ae(),n}catch{ae();}}function pt(e){return Array.isArray(e)?e.map(pt):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,pt(e[n])])):e}function Q(e){return ze(pt(e))}function ut(e){return Buffer.byteLength(e,"utf8")}var Br,Hr,zr,Jr,Gr,Wr,Xr,Ne=k(()=>{g();Pn();Br=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Hr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,zr=/<\/?[A-Za-z][^>]*>/,Jr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Gr=/^(?:https?|file|ftp|ws|wss):\/\//i;Wr=8,Xr=4;});var Sn,ft=k(()=>{g();Sn=["text/plain","application/json"];});var Ti=k(()=>{g();ft();});function Je(e){return qr.has(e)||Zr.test(e)||Qr.test(e)}var Di,qr,Zr,Qr,Mn,tn,me,yt,At,It,gt,mt,Ce=k(()=>{g();Di=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],qr=new Set(Di),Zr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Qr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Mn=/^[A-Za-z0-9_]+$/,tn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,me=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,yt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,At=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,It=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,gt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],mt=["inline","panel"];});function ht(e){return typeof e=="string"&&Sn.includes(e)}var Ni=k(()=>{g();ft();Ce();});function On(e){if(!_t(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!es(e.in)||Object.hasOwn(e,"out")&&!ns(e.out))}function es(e){return _t(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&ht(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function ns(e){return _t(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&ht(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function _t(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Et=k(()=>{g();Ti();Ni();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function Rn(e){return ts.includes(e)}function Un(e){return Number.isSafeInteger(e)&&e>=Ln.min&&e<=Ln.max}var ts,Ln,bi,Tt=k(()=>{g();ts=[5,15,30,60],Ln=Object.freeze({min:15e3,max:6e5,default:3e5}),bi=1;});function kn(e){return Number.isSafeInteger(e)&&e>=Cn.min&&e<=Cn.max}function wn(e){return is.includes(e)}var Cn,Pi,is,Dt=k(()=>{g();Cn=Object.freeze({min:6e4,max:18e5,default:6e5}),Pi=1,is=["start","status","cancel"];});function oe(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.downloads!==void 0||e.legacy!==void 0||Object.values(e.actions).some(r=>r.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.downloads===void 0?{}:{downloads:e.downloads},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=ce(t);return createHash("sha256").update(Q(i)).digest("hex")}function bt(e){return `${e.id}\0${e.version}`}function de(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new U("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!rs.test(e.sourceHash)))throw new U("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||oe(e)!==e.hash)throw new U("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!as(i)))throw new U("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new U("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new U("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new U("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&Nt(t.resultProjection),t.schedule!==void 0&&(!Rn(t.schedule.everyMinutes)||!Un(t.schedule.timeoutMs)))throw new U("DEFINITION_UNSUPPORTED","UI action schedule declaration is invalid");if(t.job!==void 0&&(typeof t.job!="object"||Object.keys(t.job).some(i=>i!=="deadlineMs")||!kn(t.job.deadlineMs)))throw new U("DEFINITION_UNSUPPORTED","UI action job declaration is invalid");if(t.jobAccess!==void 0&&(!Array.isArray(t.jobAccess)||t.jobAccess.length===0||new Set(t.jobAccess).size!==t.jobAccess.length||!t.jobAccess.every(wn)||t.job!==void 0))throw new U("DEFINITION_UNSUPPORTED","UI action job control declaration is invalid");if(t.content!==void 0&&!On(t.content))throw new U("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new U("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new U("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new U("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new U("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new U("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new U("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new U("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new U("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&Nt(e.stateProjection),e.summaryProjection){Nt(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new U("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(r=>!["readTool","actionTool","hostTools","agentAccess"].includes(r)))throw new U("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[r,o]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(o!==void 0){if(ss(o,r==="readTool"),n.has(o.name))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(o.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let r={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[o,a]of Object.entries(t)){if(!Object.hasOwn(r,o)||r[o]!==a||typeof a!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(a)||n.has(a))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(a);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([r,o])=>!r||!Object.hasOwn(e.actions,r)||o!=="allowed"&&o!=="denied")))throw new U("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new U("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.downloads!==void 0&&e.downloads!==true)throw new U("DEFINITION_UNSUPPORTED","UI definition downloads is invalid");if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>He(t,i))))throw new U("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function ss(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],r=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(o=>!i.includes(o)&&!(n&&o==="fixedResult"))||i.some(o=>!Object.hasOwn(t,o))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(o=>o!=="model"&&o!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let o=ce(t.inputSchema);if(o.type!==void 0&&o.type!=="object")throw new Error("schema type");if(r){if(!n)throw new Error("fixed result location");let a=t.fixedResult;if(!a||typeof a!="object"||Array.isArray(a))throw new Error("fixed result");let s=a;if(Object.keys(s).sort().join(",")!=="argsPolicy,structuredContent"||s.argsPolicy!=="empty-only"&&s.argsPolicy!=="ignore"||!s.structuredContent||typeof s.structuredContent!="object"||Array.isArray(s.structuredContent))throw new Error("fixed result");let c=ce(s.structuredContent);if(ut(ze(c))>4*1024)throw new Error("fixed result size")}}catch{throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function Nt(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new U("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function as(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var rs,ke=k(()=>{g();Ne();Pn();Et();Tt();Dt();rs=/^[0-9a-f]{64}$/;});var Si=k(()=>{g();Ne();});var q,be,Pt=k(()=>{g();q="dist/tools.json",be="dist/main.mjs";});var on,Mi=k(()=>{g();on="window";});function Oi(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!cs.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var cs,Li=k(()=>{g();cs=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function H(e){throw new St(e)}function _s(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Es(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&H("CSP_ORIGIN_INVALID"),t.value}function xn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=Es(e,n);Array.isArray(t)||H("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(o=>typeof o!="string"||o!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(o))&&H("CSP_ORIGIN_INVALID");let r=[];for(let o=0;o<t.length;o+=1)(!Object.prototype.hasOwnProperty.call(t,o)||typeof t[o]!="string")&&H("CSP_ORIGIN_INVALID"),r.push(t[o]);return Object.keys(t).length!==t.length&&H("CSP_ORIGIN_INVALID"),r}function Ts(e){let n;try{n=JSON.stringify(e);}catch{H("CSP_ORIGIN_INVALID");}return n===void 0&&H("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function Ci(e,n){/\s|\\/u.test(e)&&H("CSP_ORIGIN_INVALID");let t=As.exec(e);t||H("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),r=t[2];(r.includes("@")||r.includes("%")||r.includes("*"))&&H("CSP_ORIGIN_INVALID"),(r.startsWith("[")?Is:gs).test(r)||H("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&H("CSP_ORIGIN_INVALID");let a;try{a=new URL(e);}catch{H("CSP_ORIGIN_INVALID");}(a.protocol!==`${i}:`||a.username!==""||a.password!==""||a.search!==""||a.hash!=="")&&H("CSP_ORIGIN_INVALID");let s=a.hostname.toLowerCase();if((!s||s.includes("%"))&&H("CSP_ORIGIN_INVALID"),!s.startsWith("[")){let d=s.endsWith(".")?s.slice(0,-1):s;(d.length===0||d.length>253)&&H("CSP_ORIGIN_INVALID"),d.split(".").some(u=>u.length>63||!ms.test(u))&&H("CSP_ORIGIN_INVALID");}let c=a.origin;return (c==="null"||!c.startsWith(`${i}://`))&&H("CSP_ORIGIN_INVALID"),{origin:c,hostname:s}}function Ds(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function ki(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function ji(e){let n=Ds(e);return ki(n,3221225472,24)?n!==3221225481&&n!==3221225482:hs.some(([t,i])=>ki(n,t,i))}function Ns(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((o,a)=>o<<16n|BigInt(Number.parseInt(a,16)),0n)}function bs(e){let n=Ns(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let r=Number(n&0xffffffffn);return ji([r>>>24&255,r>>>16&255,r>>>8&255,r&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function Ps(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return ji(t);if(i===6)return bs(t);let r=e.toLowerCase().replace(/\.$/,"");return !r||!r.includes(".")||n.has(r)?true:ys.some(o=>r===o||r.endsWith(`.${o}`))}function wi(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function xi(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function vi(e,n={}){if(e===void 0){let A=xi({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(A,"utf8").digest("hex")})}_s(e)||H("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(A=>typeof A!="string")&&H("CSP_ORIGIN_INVALID"),t.some(A=>!fs.has(A))&&H("CSP_AXIS_UNKNOWN");let i=xn(e,"connectDomains"),r=xn(e,"frameDomains"),o=xn(e,"resourceDomains"),a=xn(e,"baseUriDomains");(o.length>0||a.length>0)&&H("CSP_AXIS_UNSUPPORTED"),(Ts(e)>ps||i.length>Ui||r.length>Ui||i.length+r.length>ls||[...i,...r].some(A=>new TextEncoder().encode(A).byteLength>us))&&H("CSP_LIMIT_EXCEEDED");let c=i.map(A=>Ci(A,"connectDomains")),d=r.map(A=>Ci(A,"frameDomains")),l=new Set((n.runtimeHostnames??[]).map(A=>A.toLowerCase().replace(/\.$/,"")));[...c,...d].some(A=>Ps(A.hostname,l))&&H("CSP_ORIGIN_FORBIDDEN");let u={declared:true,connectDomains:wi(c),frameDomains:wi(d)},f=xi(u);return Object.freeze({...u,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(f,"utf8").digest("hex")})}var ps,Ui,ls,us,fs,ys,As,Is,gs,ms,hs,St,Vi=k(()=>{g();ps=4096,Ui=16,ls=32,us=512,fs=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),ys=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],As=/^(https|wss):\/\/([^/?#]+)$/i,Is=/^\[[^\]]+\](?::[0-9]+)?$/,gs=/^[^:\[\]]+(?::[0-9]+)?$/,ms=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,hs=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],St=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function sn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function p(e,n=e,t,i){throw new re(e,n,t,i)}function B(e,n){try{return n()}catch(t){throw t instanceof re?t.withPathPrefix(e):t}}function z(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function M(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function sa(e,n){let t={};for(let[i,r]of Object.entries(e))n.includes(i)||(t[i]=r);return t}function $(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e).find(a=>!i.has(a));r!==void 0&&p("MANIFEST_INVALID","MANIFEST_INVALID",r,"unknown-key");let o=n.find(a=>!M(e,a));o!==void 0&&p("MANIFEST_INVALID","MANIFEST_INVALID",o,"missing-key");}function Fn(e,n=false,t=false,i=false){return Ls.test(e)||!i&&Us.test(e)||Rs.test(e)||t&&Fi.test(e)||Cs.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Fi.test(e))}function Vn(e,n=new Set,t=0,i=false,r=false,o=""){if(typeof e=="string"){Fn(e,i,r)&&p("UNSAFE_VALUE","UNSAFE_VALUE",o,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&p("MANIFEST_INVALID","MANIFEST_INVALID",o),n.add(e);try{if(Array.isArray(e)){e.forEach((a,s)=>Vn(a,n,t+1,!1,!1,sn(o,`[${s}]`)));return}z(e)||p("MANIFEST_INVALID","MANIFEST_INVALID",o);for(let[a,s]of Object.entries(e))Vn(s,n,t+1,i&&t===0&&(a==="name"||a==="description"),r,sn(o,a));}finally{n.delete(e);}}}function he(e,n){let t=e[n];return typeof t!="string"&&p("MANIFEST_INVALID"),t}function ue(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&p("MANIFEST_INVALID"),i}function Mt(e){return Os.test(e)||p("MANIFEST_INVALID"),e}function Ge(e){return Ms.test(e)||p("TOKEN_INVALID"),e}function aa(e){return Ki.test(e)||p("MANIFEST_INVALID"),e}function ca(e){z(e)||p("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let r=aa(t);z(i)||p("MANIFEST_INVALID");let o=i.type;if(o==="text"){$(i,["type","maxLength"]),n[r]={type:o,maxLength:ue(i,"maxLength",1)};continue}if(o==="text-list"){$(i,["type","max","itemMaxLength"]),n[r]={type:o,max:ue(i,"max",0),itemMaxLength:ue(i,"itemMaxLength",1)};continue}if(o==="step-list"){$(i,["type","min","max","labelMaxLength","detailMaxLength"]);let a=ue(i,"min",0),s=ue(i,"max",1);a>s&&p("MANIFEST_INVALID"),n[r]={type:o,min:a,max:s,labelMaxLength:ue(i,"labelMaxLength",1),detailMaxLength:ue(i,"detailMaxLength",1)};continue}typeof o=="string"&&p("SCHEMA_TYPE_UNSUPPORTED"),p("MANIFEST_INVALID");}return n}function da(e,n,t){let i=e[n];(!i||i.type!==t)&&p("MANIFEST_INVALID");}function jn(e,n,t){let i=he(e,"field");return Ki.test(i)||p("MANIFEST_INVALID"),da(n,i,t),i}function pa(e,n){z(e)||p("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&p("MANIFEST_INVALID"),ra.includes(t)||p("PRIMITIVE_UNKNOWN"),t){case "card-shell":return $(e,["primitive"]),{primitive:t};case "meta-banner":return $(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Ge(he(e,"badgeToken")),noticeToken:Ge(he(e,"noticeToken"))};case "heading":return $(e,["primitive","field"]),{primitive:t,field:jn(e,n,"text")};case "labeled-text":return $(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&p("MANIFEST_INVALID"),{primitive:t,titleToken:Ge(he(e,"titleToken")),field:jn(e,n,"text"),variant:"callout"};case "step-flow":return $(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Ge(he(e,"titleToken")),field:jn(e,n,"step-list")};case "text-list":{$(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Ge(he(e,"titleToken")),field:jn(e,n,"text-list")};return M(e,"emptyToken")&&(i.emptyToken=Ge(he(e,"emptyToken"))),M(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&p("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return p("MANIFEST_INVALID")}function la(e,n){return Array.isArray(e)||p("MANIFEST_INVALID"),e.map(t=>pa(t,n))}function X(e="v2 manifest exceeds a contract limit",n,t){return p("LIMIT_EXCEEDED",e,n,t)}function pe(e="initial state is not projection-safe"){return p("INITIAL_STATE_INVALID",e)}function Bi(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||Qs.test(e)||ea.test(e))&&p("MANIFEST_INVALID",`${n} is invalid`),(Fn(e,true,true)||ks.test(e)||ws.test(e)||xs.test(e))&&p("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Ot(e,n){return (typeof e!="string"||!me.test(e))&&p("MANIFEST_INVALID",`${n} is invalid`),e}function ua(e){return (typeof e!="string"||!yt.test(e)||e==="*"||e==="all")&&p("MANIFEST_INVALID","action capability is invalid"),e}function Yi(e){return (typeof e!="string"||!Zs.test(e))&&p("MANIFEST_INVALID","resource hash is invalid"),e}function Lt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&X("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||p("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&p("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&p("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&X("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&p("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&X("v2 manifest array is too long",i,"array-too-long"),e.forEach((r,o)=>Lt(r,n,t+1,sn(i,`[${o}]`)));return}z(e)||p("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[r,o]of Object.entries(e))Lt(o,n,t+1,sn(i,r));}finally{n.delete(e);}}}function qi(e){return (typeof e!="string"||e.length>4096||!tn.test(e))&&(typeof e=="string"&&e.length>4096&&X("projection path is too long"),p("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Je(t))&&p("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Rt(e){z(e)||p("MANIFEST_INVALID","projection policy must be an object"),$(e,["allow"]),Array.isArray(e.allow)||p("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&X("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let r=qi(i);t.has(r)&&p("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(r),n.push(r);}return {allow:n}}function fa(e,n){if(e===void 0)return;Array.isArray(e)||p("MANIFEST_INVALID","dataPaths must be an array"),e.length>na&&X("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let r of e){let o=qi(r);i.has(o)&&p("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(a=>He(o,a))||p("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(o),t.push(o);}return t}function ya(e){Array.isArray(e)||p("MANIFEST_INVALID","deviceFeatures must be an array",void 0,"array"),e.length>ta&&p("MANIFEST_INVALID","deviceFeatures allow at most 16 names",void 0,"too-many-items");let n=[],t=new Set;for(let[i,r]of e.entries()){let o=`[${i}]`;typeof r!="string"&&p("MANIFEST_INVALID","a device feature name must be a string",o,"string"),r.length===0&&p("MANIFEST_INVALID","a device feature name must not be empty",o,"empty"),r.length>ia&&p("MANIFEST_INVALID","a device feature name is at most 32 characters",o,"too-long"),oa.test(r)||p("MANIFEST_INVALID","a device feature name starts with a lowercase letter and holds only letters and digits",o,"format"),t.has(r)&&p("MANIFEST_INVALID","deviceFeatures contain a duplicate name",o,"duplicate-item"),t.add(r),n.push(r);}return n}function Aa(e){if(e!==false)return e!==true&&p("MANIFEST_INVALID","downloads must be true or false",void 0,"boolean"),true}function $e(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&p("MANIFEST_INVALID",`${n} is invalid`),e}function Hi(e,n){return (typeof e!="number"||!Number.isFinite(e))&&p("MANIFEST_INVALID",`${n} is invalid`),e}function Ut(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||Fn(e))&&p("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&X("schema enum is too deep"),t.has(e)&&p("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&X("schema enum array is too long"),e.map(r=>Ut(r,n+1,t));z(e)||p("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[r,o]of Object.entries(e))Je(r)&&p("MANIFEST_INVALID","schema enum contains a reserved key"),i[r]=Ut(o,n+1,t);return i}finally{t.delete(e);}}function Ia(e,n){if(e===void 0)return;Array.isArray(e)||p("MANIFEST_INVALID","schema required must be an array"),e.length>64&&X("schema required list is too long");let t=[],i=new Set;for(let r of e)(typeof r!="string"||!tn.test(r))&&p("MANIFEST_INVALID","schema required contains an invalid key"),r.length>4096&&X("schema required key is too long"),i.has(r)&&p("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,r)&&p("MANIFEST_INVALID","schema required references an undeclared property"),i.add(r),t.push(r);return t}function ga(e,n){let t=n?tn:Mn;return e.length>4096&&X("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Je(i)))&&p("MANIFEST_INVALID","schema property name is invalid"),e}function Ct(e,n=0,t=false){z(e)||p("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&X("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&p("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),p("MANIFEST_INVALID","action inputSchema type is required"));let r=["type","enum"];i==="string"&&r.push("minLength","maxLength"),i==="array"&&r.push("minItems","maxItems","items"),i==="object"&&r.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&r.push("minimum","maximum"),$(e,["type"],r.filter(s=>s!=="type"));let o={type:i};if(M(e,"enum")&&(Array.isArray(e.enum)||p("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&X("schema enum is too long"),o.enum=e.enum.map(s=>Ut(s))),i==="string"&&(M(e,"minLength")&&(o.minLength=$e(e.minLength,"schema minLength",4096)),M(e,"maxLength")&&(o.maxLength=$e(e.maxLength,"schema maxLength",4096)),o.minLength!==void 0&&o.maxLength!==void 0&&o.minLength>o.maxLength&&p("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(M(e,"minimum")&&(o.minimum=Hi(e.minimum,"schema minimum")),M(e,"maximum")&&(o.maximum=Hi(e.maximum,"schema maximum")),o.minimum!==void 0&&o.maximum!==void 0&&o.minimum>o.maximum&&p("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(M(e,"minItems")&&(o.minItems=$e(e.minItems,"schema minItems",128)),M(e,"maxItems")&&(o.maxItems=$e(e.maxItems,"schema maxItems",128)),o.minItems!==void 0&&o.maxItems!==void 0&&o.minItems>o.maxItems&&p("MANIFEST_INVALID","schema array length bounds are inverted"),M(e,"items")&&(o.items=Ct(e.items,n+1,false))),i==="object"){let s;if(M(e,"properties")){z(e.properties)||p("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&X("schema properties are too many"),s={};for(let[l,u]of d){let f=ga(l,t);s[f]=Ct(u,n+1,false);}o.properties=s;}M(e,"minProperties")&&(o.minProperties=$e(e.minProperties,"schema minProperties",64)),M(e,"maxProperties")&&(o.maxProperties=$e(e.maxProperties,"schema maxProperties",64)),o.minProperties!==void 0&&o.maxProperties!==void 0&&o.minProperties>o.maxProperties&&p("MANIFEST_INVALID","schema object property bounds are inverted");let c=Ia(e.required,s);c!==void 0&&(o.required=c),M(e,"additionalProperties")&&(e.additionalProperties!==false&&p("MANIFEST_INVALID","schema additionalProperties must be false"),o.additionalProperties=false);}let a=JSON.stringify(o);return (a===void 0||Buffer.byteLength(a,"utf8")>2097152)&&X("action inputSchema subtree is too large"),o}function ma(e){let n=Ct(e,0,true);return (n.type!=="object"||!n.properties)&&p("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function ha(e){if(z(e)||p("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){$(e,$s);let n=e.handler;return (typeof n!="string"||!At.test(n))&&p("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&M(e,"entry"))return $(e,Ks),e.entry!==be&&p("MANIFEST_INVALID",`skill backend entry must be ${be}`),{type:"skill",entry:be};if(e.type==="skill"){$(e,Ws,Xs),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&p("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!It.test(i))&&p("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=M(e,"env")?Na(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}p("MANIFEST_INVALID","action backend type is unsupported");}function _a(e){z(e)||p("MANIFEST_INVALID","action must be an object"),$(e,Fs,Bs),M(e,"_meta")&&B("_meta",()=>Zi(e._meta));let n=B("actionId",()=>Ot(e.actionId,"actionId"));lt(n)&&p("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=B("capability",()=>ua(e.capability)),i=e.mutation;typeof i!="boolean"&&p("MANIFEST_INVALID","action mutation must be boolean","mutation");let r=B("inputSchema",()=>ma(e.inputSchema)),o;if(M(e,"dataInputs")){Array.isArray(e.dataInputs)||p("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let A=r.properties,I=new Set,h=[];for(let T of e.dataInputs)(typeof T!="string"||!M(A,T)||I.has(T))&&p("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),I.add(T),h.push(T);o=h;}let a=B("resultProjection",()=>Rt(e.resultProjection)),s=B("backend",()=>ha(e.backend)),c;M(e,"content")&&((s.type!=="skill"||!On(e.content))&&p("MANIFEST_INVALID","action content declaration is invalid","content"),c=ba(e.content));let d;if(M(e,"confirmation")){let A=e.confirmation;A!=="none"&&A!=="native"&&p("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=A;}let l;M(e,"schedule")&&(l=B("schedule",()=>Da(e.schedule,{backend:s,inputSchema:r,hasContent:c!==void 0,hasDataInputs:o!==void 0,confirmation:d})));let u;M(e,"job")&&(l!==void 0&&p("MANIFEST_INVALID","an action is either the scheduled run or a job, not both","job"),u=B("job",()=>Ta(e.job,{backend:s,inputSchema:r,hasContent:c!==void 0,hasDataInputs:o!==void 0,confirmation:d})));let f;return M(e,"jobAccess")&&(u!==void 0&&p("MANIFEST_INVALID","an action is either the job or a job control, not both","jobAccess"),f=B("jobAccess",()=>Ea(e.jobAccess,{backend:s,hasContent:c!==void 0}))),{actionId:n,capability:t,mutation:i,inputSchema:r,resultProjection:a,backend:s,...c===void 0?{}:{content:c},...o===void 0?{}:{dataInputs:o},...d===void 0?{}:{confirmation:d},...l===void 0?{}:{schedule:l},...u===void 0?{}:{job:u},...f===void 0?{}:{jobAccess:f}}}function Ea(e,n){return (n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","jobAccess needs a tool-mode action","jobAccess"),n.hasContent&&p("MANIFEST_INVALID","a job control action takes no content","jobAccess"),(!Array.isArray(e)||e.length===0)&&p("MANIFEST_INVALID","jobAccess must list at least one operation","jobAccess"),(new Set(e).size!==e.length||!e.every(wn))&&p("MANIFEST_INVALID","jobAccess must name each operation once: start, status or cancel","jobAccess"),Object.freeze([...e])}function Ta(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","job needs a tool-mode action","job"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&p("MANIFEST_INVALID","a job action takes no content, dataInputs or native confirmation","job"),(n.inputSchema.required??[]).length>0&&p("MANIFEST_INVALID","a job action input must accept {}","inputSchema.required"),z(e)||p("MANIFEST_INVALID","job must be an object","job"),$(e,[],Js);let t=M(e,"deadlineMs")?e.deadlineMs:Cn.default;return kn(t)||p("MANIFEST_INVALID","job deadlineMs is invalid","job.deadlineMs"),{deadlineMs:t}}function Da(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","schedule needs a tool-mode action","schedule"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&p("MANIFEST_INVALID","a scheduled action takes no content, dataInputs or native confirmation","schedule"),(n.inputSchema.required??[]).length>0&&p("MANIFEST_INVALID","a scheduled action input must accept {}","inputSchema.required"),z(e)||p("MANIFEST_INVALID","schedule must be an object","schedule"),$(e,Hs,zs),Rn(e.everyMinutes)||p("MANIFEST_INVALID","schedule everyMinutes is invalid","schedule.everyMinutes");let t=M(e,"timeoutMs")?e.timeoutMs:Ln.default;return Un(t)||p("MANIFEST_INVALID","schedule timeoutMs is invalid","schedule.timeoutMs"),{everyMinutes:e.everyMinutes,timeoutMs:t}}function Na(e){return Oi(e)||p("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function ba(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Pa(e){return z(e)||p("INITIAL_STATE_INVALID","initialState must be an object"),$(e,Ys,qs),e.path!=="ui/state.json"&&p("MANIFEST_INVALID","initialState path is not fixed"),M(e,"hash")?{path:"ui/state.json",hash:Yi(e.hash)}:{path:"ui/state.json"}}function Sa(e){let n=["wasm","terminal","htmlDocuments"];return (!z(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&p("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{}}}function Ma(e,n){let t;try{t=vi(e);}catch(i){let r=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return p("MANIFEST_INVALID",r,void 0,r.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&p("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&p("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function Oa(e,n){Vn(z(e)?sa(e,["csp","downloads"]):e,new Set,0,true,true),Lt(e),z(e)||p("MANIFEST_INVALID"),$(e,vs,Vs),M(e,"_meta")&&B("_meta",()=>Zi(e._meta)),e.manifestVersion!==2&&p("MANIFEST_INVALID");let t;M(e,"runtime")&&(t=B("runtime",()=>Sa(e.runtime)));let i;M(e,"csp")&&(i=B("csp",()=>Ma(e.csp,t)));let r=B("pluginId",()=>Ot(e.pluginId,"pluginId")),o=B("definitionId",()=>Ot(e.definitionId,"definitionId")),a=B("version",()=>ue(e,"version",1)),s=B("name",()=>Bi(e.name,"name")),c=B("description",()=>Bi(e.description,"description")),d;M(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&p("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let l;M(e,"tone")&&((typeof e.tone!="string"||!gt.includes(e.tone))&&p("MANIFEST_INVALID","tone is invalid","tone"),l=e.tone),e.entry!=="ui/index.html"&&p("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let u;M(e,"entryHash")&&(u=B("entryHash",()=>Yi(e.entryHash)));let f;M(e,"initialState")&&(f=B("initialState",()=>Pa(e.initialState)));let A;M(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&p("MANIFEST_INVALID","usage is invalid","usage"),A=e.usage);let I;M(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&p("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),I=e.detailPanel);let h;if(M(e,"displayModes")){((A??on)!==on||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&p("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let P=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(R=>typeof R!="string"||!P.has(R)))&&p("MANIFEST_INVALID","displayModes are invalid","displayModes"),h=e.displayModes;}(A??on)===on&&I!==void 0&&p("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let T=n.mode??"local";T!=="local"&&T!=="installed"&&T!=="published"&&p("MANIFEST_INVALID","manifest mode is invalid"),T!=="local"&&u===void 0&&p("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),T!=="local"&&f!==void 0&&f.hash===void 0&&p("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&p("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&X("surfaces exceed the v2 limit","surfaces","too-many-items");let J=[],V=new Set;for(let P of e.surfaces)(typeof P!="string"||!mt.includes(P))&&p("MANIFEST_INVALID","surface is unsupported","surfaces"),V.has(P)&&p("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),V.add(P),J.push(P);z(e.size)||p("MANIFEST_INVALID","size must be an object","size"),B("size",()=>$(e.size,["height"]));let b=B("size",()=>ue(e.size,"height",1));b>720&&X("size.height exceeds the v2 limit","size.height","too-large");let C=B("stateProjection",()=>Rt(e.stateProjection)),W=e.summaryProjection===void 0?void 0:B("summaryProjection",()=>Rt(e.summaryProjection));W!==void 0&&W.allow.some(P=>!C.allow.includes(P))&&p("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let D=B("dataPaths",()=>fa(e.dataPaths,C.allow)),O=M(e,"deviceFeatures")?B("deviceFeatures",()=>ya(e.deviceFeatures)):void 0,S=M(e,"downloads")?B("downloads",()=>Aa(e.downloads)):void 0;Array.isArray(e.actions)||p("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&X("actions exceed the v2 limit","actions","too-many-items");let y=[],m=new Set,N=0,L=0;for(let[P,R]of e.actions.entries()){let G=`actions[${P}]`,x=B(G,()=>_a(R));if(m.has(x.actionId)&&p("MANIFEST_INVALID","actions contain a duplicate actionId",`${G}.actionId`,"duplicate-item"),x.schedule!==void 0&&(N+=1,N>bi&&p("MANIFEST_INVALID","an App declares at most one scheduled action",`${G}.schedule`,"duplicate-item")),x.job!==void 0&&(L+=1,L>Pi&&p("MANIFEST_INVALID","an App declares at most one job action",`${G}.job`,"duplicate-item")),x.backend.type==="core"&&x.backend.handler==="state.set"){x.mutation||p("MANIFEST_INVALID","state.set actions must be mutations",`${G}.mutation`);for(let ge of Object.keys(x.inputSchema.properties))C.allow.includes(ge)||p("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${G}.inputSchema.properties`);}m.add(x.actionId),y.push(x);}return {manifestVersion:2,pluginId:r,definitionId:o,version:a,name:s,description:c,...d===void 0?{}:{icon:d},...l===void 0?{}:{tone:l},entry:"ui/index.html",...u===void 0?{}:{entryHash:u},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...f===void 0?{}:{initialState:f},...A===void 0?{}:{usage:A},...I===void 0?{}:{detailPanel:I},...h===void 0?{}:{displayModes:h},surfaces:J,size:{height:b},stateProjection:C,...W===void 0?{}:{summaryProjection:W},...D===void 0?{}:{dataPaths:D},...O===void 0?{}:{deviceFeatures:O},...S===void 0?{}:{downloads:S},actions:y}}function Zi(e){z(e)||p("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>Gs)&&X("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function La(e){let n={},t={};for(let o of e.actions){n[o.actionId]={capabilities:[o.capability],inputKeys:Object.keys(o.inputSchema.properties??{}),...o.dataInputs===void 0?{}:{dataInputs:o.dataInputs},resultProjection:o.resultProjection,...o.confirmation===void 0?{}:{confirmation:o.confirmation},...o.content===void 0?{}:{content:o.content},...o.schedule===void 0?{}:{schedule:o.schedule},...o.job===void 0?{}:{job:o.job},...o.jobAccess===void 0?{}:{jobAccess:o.jobAccess},...o.backend.type!=="skill"||o.backend.env===void 0?{}:{env:o.backend.env}};let a=o.backend.type==="skill"||o.backend.type==="core"&&o.backend.handler==="state.set";t[o.actionId]={actionId:o.actionId,mutation:o.mutation,backend:o.backend,launchPolicy:a?"allowed":"denied",...a?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.downloads===void 0?{}:{downloads:e.downloads},actions:n},r={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:r}}function kt(e,n,t,i,r,o){if(typeof e=="string"){let a=r.length>0&&o.some(s=>He(r.join("."),s));return (e.length>4096||Fn(e,false,false,a))&&pe("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||pe("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&pe("state contains a non-JSON value"),t>8&&pe("state is too deep"),n.has(e)&&pe("state contains a cycle"),n.add(e);try{let a;if(Array.isArray(e))e.length>128&&pe("state array is too long"),a=e.map(c=>kt(c,n,t+1,2097152,r,o));else {z(e)||pe("state contains a non-plain object");let c={};for(let[d,l]of Object.entries(e))(d.length>4096||!Mn.test(d)||Je(d))&&(d.length>4096&&pe("state key is too long"),pe("state contains a reserved or invalid key")),c[d]=kt(l,n,t+1,2097152,[...r,d],o);a=c;}let s=JSON.stringify(a);return (s===void 0||Buffer.byteLength(s,"utf8")>i)&&pe("state subtree is too large"),a}finally{n.delete(e);}}function xt(e,n=[]){z(e)||pe("initial state must be a JSON object");let t=kt(e,new Set,0,2097152,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&pe(),t}function Ra(e,n={}){Vn(e),z(e)||p("MANIFEST_INVALID"),$(e,js),e.manifestVersion!==1&&p("MANIFEST_INVALID");let t=Mt(he(e,"pluginId")),i=Mt(he(e,"definitionId")),r=ue(e,"version",1),o=ue(e,"primitiveSet",1),a=n.supportedPrimitiveSet??Ss;(!Number.isSafeInteger(a)||a<1)&&p("MANIFEST_INVALID"),o>a&&p("PRIMITIVE_SET_UNSUPPORTED"),z(e.activation)||p("MANIFEST_INVALID"),$(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&p("MANIFEST_INVALID");let s=Mt(he(e.activation,"language")),c=ca(e.schema),d=la(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:r,primitiveSet:o,activation:{kind:"fenced-code",language:s},schema:c,layout:d}}function Ua(e,n={}){return z(e)||p("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&p("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Oa(e,n):Ra(e,n)}function an(e,n={}){try{return Ua(e,n)}catch(t){if(t instanceof re)throw t;return p("MANIFEST_INVALID")}}function cn(e,n={}){let t=an(e,n);return t.manifestVersion===2?La(t):t}var Ss,Ms,Os,Ki,Ls,Rs,Us,Cs,Fi,ks,ws,xs,js,vs,Vs,Fs,Bs,Hs,zs,Js,Gs,$s,Ws,Xs,Ks,Ys,qs,Zs,Qs,ea,na,ta,ia,oa,ra,re,jt=k(()=>{g();Mi();Ne();Et();Li();Pt();Tt();Dt();Vi();Ce();Ss=1,Ms=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Os=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ki=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Ls=/<\/?[A-Za-z][^>]*>/,Rs=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Us=/^(?:https?|file|ftp|ws|wss):\/\//i,Cs=/^\s*(?:javascript|data):/i,Fi=/data:[^,\s]*,/i,ks=/(?:https?|file|ftp|ws|wss):\/\//i,ws=/javascript:/i,xs=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,js=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],vs=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],Vs=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","deviceFeatures","downloads"],Fs=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Bs=["confirmation","dataInputs","content","schedule","job","jobAccess","_meta"],Hs=["everyMinutes"],zs=["timeoutMs"],Js=["deadlineMs"],Gs=4*1024,$s=["type","handler"],Ws=["type","command"],Xs=["env"],Ks=["type","entry"],Ys=["path"],qs=["hash"],Zs=/^[0-9a-f]{64}$/,Qs=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,ea=/[\r\n]/,na=16,ta=16,ia=32,oa=/^[a-z][A-Za-z0-9]{0,31}$/,ra=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],re=class e extends Error{constructor(t,i=t,r,o){super(i);this.code=t;this.path=r;this.rule=o;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,sn(t,this.path),this.rule)}};});function oo(e){return typeof e=="string"&&e.length<=ka&&Ca.test(e)}function w(e,n,t,i,r){throw new Ee(e,{path:n,rule:t,...i===void 0?{}:{message:i},...r===void 0?{}:{file:r}})}function ee(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function K(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function ye(e){let n=`_meta["${Oe}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function va(e){return e.toLowerCase().replace(/_/g,"-")}function Va(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return ye(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return ye("definitionVersion");case "definitionId":return ye("definitionId");default:return ye(`${t}${i}`)}}function ro(e,n,t){return {path:t(e.path),rule:e.rule??va(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function so(e){return JSON.parse(JSON.stringify(e))}function Ft(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&w("LIMIT_EXCEEDED",n,"string-too-long"),(wa.test(e)||xa.test(e)||ja.test(e))&&w("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||w("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&w("MANIFEST_INVALID",n,"non-json-value"),t>8&&w("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&w("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&w("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((r,o)=>Ft(r,`${n}[${o}]`,t+1,i));return}ee(e)||w("MANIFEST_INVALID",n,"non-plain-object");for(let[r,o]of Object.entries(e))Ft(o,n===""?r:`${n}.${r}`,t+1,i);}finally{i.delete(e);}}}function fe(e,n){return (typeof e!="string"||e.length===0)&&w("MANIFEST_INVALID",n,"string"),e}function Xe(e,n){return ee(e)||w("MANIFEST_INVALID",n,"object"),e}function Fa(e,n){Array.isArray(e)||w("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>fe(t,`${n}[${i}]`));}function Ba(e,n){typeof e!="boolean"&&w("MANIFEST_INVALID",n,"boolean");}function dn(e,n,t,i){for(let r of Object.keys(e))!t.includes(r)&&!i.includes(r)&&w("MANIFEST_INVALID",`${n}.${r}`,"unknown-key");for(let r of t)K(e,r)||w("MANIFEST_INVALID",`${n}.${r}`,"missing-key");}function Ha(e,n){if(e!=="icon")switch(Ft(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "license":fe(n,e);return;case "author":{let t=Xe(n,e);dn(t,e,["name"],["email","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "repository":{let t=Xe(n,e);dn(t,e,[],["type","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["src","size"],["theme"]),fe(o.src,`${r}.src`),fe(o.size,`${r}.size`),K(o,"theme")&&fe(o.theme,`${r}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":Fa(n,e);return;case "tools":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["name"],["description"]),fe(o.name,`${r}.name`),K(o,"description")&&fe(o.description,`${r}.description`);});return}case "prompts":{Array.isArray(n)||w("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["name","text"],["description","arguments"]),fe(o.name,`${r}.name`),fe(o.text,`${r}.text`);});return}case "tools_generated":case "prompts_generated":Ba(n,e);return;case "localization":case "compatibility":case "user_config":Xe(n,e);return;default:w("MANIFEST_INVALID",e,"unknown-key");}}function Bn(e){return typeof e=="string"&&me.test(e)?e:void 0}function ao(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function za(e){let n=Bn(e.name);if(n===void 0)return;let t=e._meta,i=ee(t)?t[Oe]:void 0,r=ee(i)?i:{},o=K(r,"definitionId")?Bn(r.definitionId):n,a=K(r,"definitionVersion")?ao(r.definitionVersion):1;return {pluginId:n,...o===void 0?{}:{definitionId:o},...a===void 0?{}:{definitionVersion:a}}}function Ja(e){let n=Bn(e.pluginId);if(n===void 0)return;let t=Bn(e.definitionId),i=ao(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function Jt(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!ee(n))return !1;let t=n._meta;return ee(t)&&K(t,Oe)}catch{return  false}}function Ga(e,n){if(e===xe)return n.builtinOnly===true;let t=n._meta,i=ee(t)?t[Oe]:void 0;return ee(i)&&i.builtinOnly===true}function $a(e,n){K(e,"server")&&w("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let s of Object.keys(e))Ht.includes(s)||w("MANIFEST_INVALID",s,"unknown-key");for(let s of zt)K(e,s)||w("MANIFEST_INVALID",s,"missing-key");e.manifest_version!==vt&&w("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${vt}"`),oo(e.version)||w("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;ee(t)||w("MANIFEST_INVALID","_meta","object"),K(t,Oe)||w("MANIFEST_INVALID",ye(),"missing-key");let i=t[Oe];ee(i)||w("MANIFEST_INVALID",ye(),"object");for(let s of Object.keys(i))Vt.includes(s)||io.includes(s)||w("MANIFEST_INVALID",ye(s),"unknown-key");for(let s of Vt)s==="actions"&&n!==void 0||K(i,s)||w("MANIFEST_INVALID",ye(s),"missing-key");if(n!==void 0&&K(i,"actions")&&w("MANIFEST_INVALID",ye("actions"),"two-truths",`actions are declared in both ${Y} and ${q}; a server.ts App keeps them in the tools file only`),Wa(i.actions),K(i,"definitionVersion")){let s=i.definitionVersion;(!Number.isSafeInteger(s)||s<1)&&w("MANIFEST_INVALID",ye("definitionVersion"),"positive-integer");}let r={};for(let s of to)K(e,s)&&(Ha(s,e[s]),r[s]=so(e[s]));let o={};for(let[s,c]of Object.entries(t))s!==Oe&&(o[s]=c);let a={manifestVersion:2,pluginId:e.name,definitionId:K(i,"definitionId")?i.definitionId:e.name,version:K(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[s,c]of Object.entries(i))s==="definitionId"||s==="definitionVersion"||(a[s]=c);return n!==void 0&&(a.actions=n.map(s=>({...s,backend:{type:"skill",entry:be}}))),Object.keys(o).length>0&&(a._meta=o),{v2Input:a,...Object.keys(o).length>0?{vendorMeta:o}:{},passthrough:r}}function Wa(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=ee(n)?n.backend:void 0;ee(i)&&K(i,"entry")&&w("MANIFEST_INVALID",ye(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${Y} cannot name an entry; a server.ts App declares its actions in ${q}`);});}function Xa(e,n,t){ee(e)||w("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",Y);let i;try{i=$a(e,t);}catch(a){throw a instanceof Ee?new Ee(a.code,{...a.reason,file:Y}):a}let r;try{let a=an(i.v2Input,{mode:n.mode??"local"});a.manifestVersion!==2&&w("MANIFEST_INVALID","","v2-required"),r=a;}catch(a){throw a instanceof re?new Ee(a.code,ro(a,Y,Va)):a}let o=e.tools;if(Array.isArray(o)){let a=new Set(r.actions.map(s=>s.actionId));o.forEach((s,c)=>{let d=s.name;if(!a.has(d))throw new Ee("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:Y})});}return {file:Y,manifest:r,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function Ka(e,n){try{let t=an(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new Ee("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:xe});return {file:xe,manifest:t,v2Input:e}}catch(t){throw t instanceof re?new Ee(t.code,ro(t,xe,i=>i??"")):t}}function Bt(e){return oe(cn(e).definition)}function eo(e){let{entryHash:n,initialState:t,...i}=e,r={...i};return t!==void 0&&(r.initialState={path:t.path}),so(r)}function Ya(e,n){let t=eo(e),i=eo(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(o=>Q(t[o]??null)!==Q(i[o]??null))}function qa(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function Za(e,n){let t=Ya(e,n),i=qa(e,n),r="";try{let o=Bt(e),a=Bt(n);i=i||o!==a,r=` (definition hash ${o.slice(0,12)} vs ${a.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||w("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${Y} and ${xe} normalize to different definitions${r}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function _e(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:q},files:[]}}function no(e){return {..._e("","tools-needs-manifest-json","MANIFEST_INVALID",`${q} is read with ${Y} only`),files:e}}function Qa(e,n){if(e.byteLength>n)return {failure:_e("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:_e("","invalid-json")}}if(!ee(t))return {failure:_e("","not-object","MANIFEST_INVALID",`${q} must be a JSON object`)};for(let r of Object.keys(t))if(r!=="schemaVersion"&&r!=="actions")return {failure:_e(r,"unknown-key")};for(let r of ["schemaVersion","actions"])if(!K(t,r))return {failure:_e(r,"missing-key")};if(t.schemaVersion!==1)return {failure:_e("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:_e("actions","array")};for(let[r,o]of i.entries()){if(!ee(o))return {failure:_e(`actions[${r}]`,"object")};if(K(o,"backend"))return {failure:_e(`actions[${r}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${q} cannot carry a backend`)}}return {actions:i}}function ec(e,n){let t=n.maxBytes??262144,i=[],r=new TextDecoder("utf-8",{fatal:true});for(let o of le){let a=e[o];if(a===void 0)continue;if(a.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:o},files:[o]}};let s;try{s=JSON.parse(r.decode(a));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:o},files:[o]}}}if(!ee(s))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${o} must be a JSON object`,file:o},files:[o]}};i.push({file:o,raw:s});}return {parsed:i}}function Gt(e,n={}){let{parsed:t,failure:i}=ec(e,n),r=le.filter(A=>e[A]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let o=e[q],a=o===void 0?void 0:Qa(o,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:a===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:no(r),parseFailure:true,builtinOnly:false};let s=t[0],c=s.file===Y?za(s.raw):Ja(s.raw),d=t.some(A=>Ga(A.file,A.raw)),l;if(a!==void 0){let A=t.some(I=>I.file===Y)?a.failure:no(r);if(A!==void 0)return {ok:false,rejection:A,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};l=a.actions;}let u=[];try{for(let A of t)u.push(A.file===Y?Xa(A.raw,n,l):Ka(A.raw,n));u.length===2&&Za(u[0].manifest,u[1].manifest);}catch(A){if(A instanceof Ee)return {ok:false,rejection:{code:A.code,reason:A.reason,files:A.code==="MANIFEST_DUAL_MISMATCH"?[...le]:A.reason.file===void 0||A.reason.file===q?r:[A.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw A}let f=u[0];return {ok:true,...f,identity:c??{pluginId:f.manifest.pluginId},files:r}}var Y,xe,le,vt,Oe,Ht,zt,to,Vt,io,Ca,ka,wa,xa,ja,Ee,$t=k(()=>{g();ke();Ne();Pt();Ce();jt();Y="manifest.json",xe="ui-plugin.json",le=[Y,xe],vt="0.3",Oe="dev.crewx",Ht=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),zt=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),to=Object.freeze(Ht.filter(e=>e!=="server"&&!zt.includes(e))),Vt=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),io=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp","deviceFeatures","downloads"]),Ca=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,ka=256,wa=/<\/?[A-Za-z][^>]*>/,xa=/^\s*javascript:/i,ja=/data:[^,\s]*,/i;Ee=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});function Ao(e){if(e===void 0)return {kind:"none"};if(typeof e!="string")return {kind:"invalid",reason:"bad-path"};if(ic.test(e))return {kind:"url",declared:e};if(!sc(e))return {kind:"invalid",reason:"bad-path",declared:e};let n=e.lastIndexOf("."),t=n<0?void 0:nc.get(e.slice(n+1).toLowerCase());return t===void 0?{kind:"invalid",reason:"bad-type",declared:e}:{kind:"file",path:e,contentType:t}}function sc(e){return e.length===0||e.length>512||e.startsWith("/")||e.includes("\\")||e.includes("\0")?false:e.split("/").every(n=>n!==""&&n!=="."&&n!=="..")}async function Xt(e,n){let t=Ao(e);if(t.kind==="none")return {diagnostics:[]};if(t.kind==="url")return {diagnostics:[{code:"ICON_NOT_FILE",severity:"warning",declared:t.declared}]};if(t.kind==="invalid")return {diagnostics:[Wt(t.reason,t.declared)]};let i=await n(t.path);if(typeof i=="string")return {diagnostics:[Wt(i,t.path)]};let r=Io(t.contentType,i);if(!r.ok)return {diagnostics:[Wt(r.reason,t.path)]};let o={path:t.path,contentType:t.contentType,byteLength:i.byteLength,bytes:i},a=r.square===false?[{code:"ICON_NOT_SQUARE",severity:"warning",declared:t.path}]:[];return {file:o,diagnostics:a}}function Wt(e,n){return {code:"ICON_INVALID",severity:"error",reason:e,...n===void 0?{}:{declared:n}}}function Io(e,n){if(n.byteLength>262144)return {ok:false,reason:"too-large"};if(e==="image/png")return !uo(n,oc)||Ic(n,12,16)!=="IHDR"||n.byteLength<24?{ok:false,reason:"bytes-mismatch"}:{ok:true,square:lo(fo(n,16),fo(n,20))};if(e==="image/jpeg"){if(!uo(n,rc))return {ok:false,reason:"bytes-mismatch"};let t=yc(n);return {ok:true,square:t===void 0?void 0:lo(t.width,t.height)}}return ac(n)}function ac(e){let n;try{n=tc.decode(e);}catch{return {ok:false,reason:"bytes-mismatch"}}return uc(n)?{ok:false,reason:"unsafe-svg"}:cc.test(n)?{ok:true,square:fc(n)}:{ok:false,reason:"bytes-mismatch"}}function uc(e){if(dc.some(n=>n.test(e)))return  true;for(let n of e.matchAll(pc))if(!(n[1]??n[2]??n[3]??"").startsWith("#"))return  true;for(let n of e.matchAll(lc))if(co.lastIndex=n.index??0,!co.test(e))return  true;return  false}function fc(e){let n=/<svg\b[^>]*>/i.exec(e)?.[0];if(n===void 0)return;let t=go(n,"viewBox");if(t!==void 0){let o=t.trim().split(/[\s,]+/).map(Number);return o.length===4&&o.every(Number.isFinite)?o[2]===o[3]:void 0}let i=po(n,"width"),r=po(n,"height");return i===void 0||r===void 0?void 0:i===r}function go(e,n){let t=new RegExp(`\\s${n}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`).exec(e);return t?.[1]??t?.[2]}function po(e,n){let t=go(e,n),i=t===void 0?null:/^\s*(\d+(?:\.\d+)?)(?:px)?\s*$/.exec(t);return i===null?void 0:Number(i[1])}function yc(e){let n=2;for(;n+4<=e.byteLength;){if(e[n]!==255)return;let t=e[n+1];if(t===255){n+=1;continue}if(t===216||t===1||t>=208&&t<=215){n+=2;continue}if(t===217)return;let i=e[n+2]<<8|e[n+3];if(i<2)return;if(Ac(t))return n+9>e.byteLength?void 0:{height:yo(e,n+5),width:yo(e,n+7)};n+=2+i;}}function Ac(e){return e>=192&&e<=207&&e!==196&&e!==200&&e!==204}function lo(e,n){if(!(e<=0||n<=0))return e===n}function uo(e,n){return e.byteLength>=n.length&&n.every((t,i)=>e[i]===t)}function Ic(e,n,t){return String.fromCharCode(...e.subarray(n,t))}function fo(e,n){return (e[n]<<24|e[n+1]<<16|e[n+2]<<8|e[n+3])>>>0}function yo(e,n){return e[n]<<8|e[n+1]}var nc,tc,ic,oc,rc,cc,dc,pc,lc,co,Kt=k(()=>{g();nc=new Map([["svg","image/svg+xml"],["png","image/png"],["jpg","image/jpeg"],["jpeg","image/jpeg"]]),tc=new TextDecoder("utf-8",{fatal:true}),ic=/^[A-Za-z][A-Za-z0-9+.-]*:/,oc=[137,80,78,71,13,10,26,10],rc=[255,216,255];cc=/^\s*(?:<\?[\s\S]*?\?>\s*|<!--[\s\S]*?-->\s*)*<svg(?=[\s/>])/,dc=[/<script/i,/[\s"'/]on[a-z]+\s*=/i,/<foreignobject/i,/<!doctype/i,/<!entity/i,/<(?:iframe|embed|object)\b/i,/@import/i],pc=/(?:^|[\s"'/])(?:xlink:)?href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/gi,lc=/url\(/gi,co=/url\(\s*["']?#/iy;});var ho=k(()=>{g();Si();$t();Kt();jt();Ce();});function E(e,n=e){throw new Te(e,n)}var Te,zn=k(()=>{g();Te=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var _o=k(()=>{g();});var Eo=k(()=>{g();ke();Ne();zn();_o();});function Do(e,n){return To.add(e),n!==void 0&&gc.set(e,n),e}function Ke(e){return e!==null&&typeof e=="object"&&To.has(e)}var To,gc,Jn=k(()=>{g();To=new WeakSet,gc=new WeakMap;});function un(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Yt(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e);return n.every(o=>Object.hasOwn(e,o))&&r.every(o=>i.has(o))}function Po(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Po(n);return Object.freeze(e)}function ne(e){throw new De("LINEAGE_INVALID",e)}function Nc(e){throw new De("LINEAGE_STALE",e)}function So(e){if(!un(e)||!Yt(e,_c,Ec)||!un(e.actions))return ne("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!un(n)||!Yt(n,Tc,Dc))return ne("Lineage action definition shape is invalid");return e}function bc(e){if(!un(e)||!Yt(e,mc,hc))return ne("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!No.test(e.hash))return ne("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!No.test(e.sourceHash)))return ne("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return ne("Lineage compatibility marker is invalid");let n=So(e.definition);if(n.version!==e.version)return ne("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return ne("Lineage source hash does not match its definition");let t;try{t=oe(n),de({...n,hash:e.hash});}catch{return ne("Lineage definition is invalid")}return t!==e.hash?ne("Lineage definition hash does not match"):Po({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function bo(e){return e.stateProjection?.allow??[]}function Pc(e,n){let t=[],i=new Set(bo(n));bo(e).some(s=>!i.has(s))&&t.push("S1_STATE_PROJECTION");let r=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(s=>!r.has(s))&&t.push("S2_DATA_PATHS");for(let[s,c]of Object.entries(e.actions)){let d=n.actions[s];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(s=>!Object.hasOwn(n.actions,s))&&t.push("S4_LEGACY_AGENT_ACTIONS");let a=e.summaryProjection?.allow;if(a!==void 0){let s=new Set(n.summaryProjection?.allow??[]);a.some(c=>!s.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function Sc(e,n){return Q(e)===Q(n)}function qt(e,n){if(!Array.isArray(e)||e.length===0)return ne("Definition lineage is missing");if(!un(n)||typeof n.hash!="string")return ne("Current definition is invalid");let t,i;try{let{hash:s,...c}=n;i=So(c),t={...i,hash:s},de(t);}catch{return ne("Current definition is invalid")}let r=e.map(bc),o=r[0].definition.id;if(r.some(s=>s.definition.id!==o))return ne("Lineage definition ids do not match");if(r.some((s,c)=>c>0&&s.version<=r[c-1].version))return ne("Lineage generations are not in increasing version order");if(r.some((s,c)=>r.findIndex(d=>d.hash===s.hash)!==c))return ne("Lineage contains a duplicate hash");let a=r[r.length-1];if(a.version!==t.version||a.hash!==t.hash||a.definition.id!==t.id||!Sc(a.definition,i))return Nc("The last lineage generation does not match the current package");if(t.legacy!==void 0){let s=new Set(Object.keys(t.actions)),c=new Set;for(let l of r)if(l.sourceHash===void 0)for(let u of Object.keys(l.definition.actions))s.has(u)&&c.add(u);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(l=>!c.has(l))){let l="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new De("LINEAGE_INVALID",`Lineage compatibility failed: ${l}`,[l])}}for(let s=0;s<r.length-1;s+=1){if(r.slice(s,-1).some(l=>l.compat==="break"))continue;let d=Pc(r[s].definition,t);if(d.length>0)throw new De("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(r),current:t})}var De,No,mc,hc,_c,Ec,Tc,Dc,Zt=k(()=>{g();ke();Ne();De=class extends Error{constructor(t,i=t,r=[]){super(i);this.code=t;this.violations=r;}code;violations;name="UiDefinitionLineageError"},No=/^[0-9a-f]{64}$/,mc=["version","hash","definition"],hc=["sourceHash","compat"],_c=["id","version","actions"],Ec=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","downloads","legacy"],Tc=["capabilities"],Dc=["inputKeys","dataInputs","confirmation","resultProjection","content","env","schedule","job","jobAccess"];});var Mo,Oo,Lo,Ro,Uo=k(()=>{g();Mo="text/html;profile=mcp-app",Oo=["crewx_app_terminal_connect","crewx_app_html_viewer_open"],Lo=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"],Ro="text/html";});function fn(e){return typeof e=="string"&&Mc.includes(e)}function Gn(e,n){return e==="card"&&n?.type==="core"&&fn(n.handler)}var Mc,$n=k(()=>{g();Mc=Object.freeze(["card.secret-env"]);});function Co(e,n=[],t){if(e.content!==void 0||e.confirmation!=="none")return "denied";let i=Oc();return i&&Object.hasOwn(i,e.actionId)?i[e.actionId]:e.backend?.type==="core"&&e.backend.handler.startsWith("host.")?"denied":e.backend?.type==="core"&&e.backend.handler==="state.set"?"allowed":e.backend?.type==="core"&&fn(e.backend.handler)||e.backend?.type==="skill"?"approval_required":e.backend===void 0&&n.includes(e.actionId)?"allowed":"denied"}function Oc(e){return;}var ko=k(()=>{g();ke();Jn();$n();});function vc(e){return In.has(e)&&(e.initialState===void 0||In.has(e.initialState))}function Vo(e,n,t,i){let r=i===void 0?void 0:Object.freeze({hash:i.hash,bytes:Object.freeze(i.bytes)}),o=Object.freeze({mimeType:Ro,entryHash:e,html:n,bytes:Object.freeze(t),...r===void 0?{}:{initialState:r}});return r!==void 0&&In.add(r),In.add(o),o}function Vc(e){let n=[];return e?.terminal===true&&n.push({name:"crewx_app_terminal_connect",description:"Open a local-only terminal session for this App.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"A local terminal connection is ready for this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Re}),e?.htmlDocuments===true&&n.push({name:"crewx_app_html_viewer_open",description:"List workspace HTML documents or open one through a short-lived Host capability.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"},operation:{type:"string",enum:["list","open"]},documentId:{type:"string"}},required:["threadId","instanceId","operation"],additionalProperties:false},textFallback:"Workspace HTML documents are available through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Re}),n}function Ue(e,n,t){return (typeof e!="string"||!jo.test(e))&&E(n,`${t} must be a safe identifier`),e}function yn(e,n,t){let i=e??t;return (typeof i!="string"||i.trim().length===0||i.length>Uc)&&E("TOOL_INVALID",`${n} must be a meaningful description`),i}function ei(e){return (typeof e!="string"||e.length===0||e.length>Ye||!/<html(?:\s|>)/i.test(e)||!/<\/html\s*>/i.test(e))&&E("HTML_INVALID","MCP App HTML must be a non-empty HTML document"),e}function An(e,n=0){try{let t=ce(e,n);return t.type!==void 0&&t.type!=="object"&&E("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Te)throw t;E("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function Fc(e){return (typeof e!="string"||e.trim().length===0||e.length>Cc)&&E("TOOL_INVALID","MCP App tools require a meaningful text fallback"),e}function Bc(e){e===void 0&&E("TOOL_INVALID","MCP App tool visibility is required");let n=[...e];return (n.length===0||n.some(t=>t!=="model"&&t!=="app")||new Set(n).size!==n.length)&&E("TOOL_INVALID","MCP App tool visibility must contain model and/or app once"),n}function Bo(e){return (typeof e!="string"||!vo.test(e))&&E("RESOURCE_URI_INVALID","MCP App resource URI is not a registered ui:// URI"),e}function Ho(e){let n=Ue(e.appId,"APP_ID_INVALID","Local App id"),t=yn(e.name,"Local App name",n),i=yn(e.description,"Local App description",`${t} interactive view`),r=Yn(e.definition),o=ei(e.html),a=Wn(e.entryHash,"Local App entry hash"),s=e.entryBytes===void 0?Array.from(new TextEncoder().encode(o)):Kn(e.entryBytes,"Local App entry bytes");(Xn(s)!==a||Go(s)!==o)&&E("HTML_INVALID","Local App entry bytes do not match the HTML hash");let c=Hc(e),d=[];Array.isArray(e.actions)||E("TOOL_INVALID","Local App actions must be an array");for(let b of e.actions){let C=Ue(b.actionId,"TOOL_ID_INVALID","Local App action id");(d.includes(C)||!Object.prototype.hasOwnProperty.call(r.actions,C))&&E("TOOL_INVALID",`Local App action is not declared by the UI definition: ${C}`),d.push(C);}let l=Ue(e.readToolName,"TOOL_ID_INVALID","Local App read tool name"),u=e.actionToolName===void 0?void 0:Ue(e.actionToolName,"TOOL_ID_INVALID","Local App action tool name");d.length===0&&u!==void 0&&E("TOOL_INVALID","A static local App cannot register an action tool"),d.length>0&&u===void 0&&E("TOOL_INVALID","A stateful local App requires an action tool name"),u!==void 0&&u===l&&E("TOOL_ID_CONFLICT",`Local App read and action tools share a name: ${l}`);let f=Vc(e.runtime);f.some(b=>b.name===l||b.name===u)&&E("TOOL_ID_CONFLICT","Local App read or action tool conflicts with a requested Host capability");let A={name:l,description:`${t} current state`,inputSchema:jc,textFallback:`${t} current state is available through its open instance.`,visibility:Object.freeze(["model","app"]),kind:"read",resourceBinding:Re},I=[Object.freeze(A)];if(I.push(...f.map(b=>Object.freeze(b))),u!==void 0){let b={name:u,description:`${t} actions`,inputSchema:ni(e.actions),textFallback:`${t} action requests are handled by the open App instance.`,visibility:Object.freeze(["app"]),kind:"action",resourceBinding:Re,actionIds:Object.freeze([...d])};I.push(Object.freeze(b));}let h=[],T=new Set(I.map(b=>b.name));if(u!==void 0)for(let b of e.actions){let C=`${u}__${b.actionId}`;if(C.length>128||!jo.test(C)){h.push(Object.freeze({toolName:C,actionId:b.actionId,reason:"name_too_long"}));continue}if(T.has(C)){h.push(Object.freeze({toolName:C,actionId:b.actionId,reason:"name_collision"}));continue}let W=Co({actionId:b.actionId,confirmation:r.actions[b.actionId]?.confirmation,content:r.actions[b.actionId]?.content,backend:b.backend},e.modelActions),D=Object.freeze([...Wc(W,r.usage,b.backend)]),O={name:C,description:`${C} action`,inputSchema:An(b.inputSchema),textFallback:`${C} action requests are handled by the open App instance.`,visibility:D,kind:"action",resourceBinding:Re,actionId:b.actionId,actionIds:Object.freeze([b.actionId]),_meta:Object.freeze({ui:Object.freeze({visibility:D})})};I.push(Object.freeze(O)),T.add(C);}let J=Vo(a,o,s,c===void 0?void 0:{hash:c.hash,bytes:[...c.bytes]}),V={appId:n,name:t,description:i,...e.icon===void 0?{}:{icon:$o(e.icon)},...e.tone===void 0?{}:{tone:Wo(e.tone)},builtinOnly:false,definition:r,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},resourceBinding:Re,resource:J,tools:Object.freeze(I),toolDiagnostics:Object.freeze(h)};return Z(V)}function zo(e={}){return new Qt(e)}function ni(e){if(e.length===0)return An({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,An(i.inputSchema));return An(zc(n,t),Fo)}function Hc(e){let n=e.definition.dataPaths??[];if(e.initialStateBytes===void 0){e.initialStateHash!==void 0&&E("STATE_INVALID","Initial state hash has no bytes"),e.initialState!==void 0&&ce(e.initialState,0,n);return}e.initialStateHash===void 0&&E("STATE_INVALID","Initial state bytes require a hash");let t=Wn(e.initialStateHash,"Initial state hash"),i=Kn(e.initialStateBytes,"Initial state bytes");Xn(i)!==t&&E("STATE_INVALID","Initial state bytes do not match the hash");let r;try{let o=new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(i));r=ce(JSON.parse(o),0,n);}catch{E("STATE_INVALID","Initial state bytes are not projection-safe JSON");}return e.initialState!==void 0&&Q(r)!==Q(ce(e.initialState,0,n))&&E("STATE_INVALID","Initial state bytes do not match the state value"),{hash:t,bytes:Object.freeze([...i])}}function zc(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}function Jc(e){let n=gn(e),t=Ue(n.appId,"APP_ID_INVALID","MCP App id"),i=ei(n.html);Bo(n.uiUri);let r=n.definition===void 0?void 0:Yn(n.definition),o=e.provenance;o!==void 0&&(!Ke(o)||o.appId!==t||o.definitionId!==r?.id||o.version!==r?.version||o.definitionHash!==r?.hash)&&E("TOOL_INVALID","Product App built-in registration provenance is not verified");let a=Object.freeze(n.tools.map(d=>Z(gn(d)))),s=Z({...n,appId:t,html:i,...r===void 0?{}:{definition:r},...o===void 0?{}:{provenance:o},tools:a}),c=Z({uri:s.uiUri,mimeType:Mo,text:i,...s.csp===void 0?{}:{_meta:{ui:{csp:s.csp}}}});return Z({appId:t,name:s.name,description:s.description,...s.icon===void 0?{}:{icon:s.icon},...s.tone===void 0?{}:{tone:s.tone},builtinOnly:s.builtinOnly,uiUri:s.uiUri,...r===void 0?{}:{definition:r},resourceBinding:Object.freeze({kind:"mcp",uri:s.uiUri}),resource:c,tools:a,descriptor:s})}function Gc(e){(e.resourceBinding.kind!=="instance"||e.builtinOnly!==false)&&E("STATE_INVALID","Local App registration binding is invalid"),Object.prototype.hasOwnProperty.call(e,"uiUri")&&E("STATE_INVALID","Local App registration cannot contain uiUri");let n=Ue(e.appId,"APP_ID_INVALID","Local App id"),t=Yn(e.definition),i=e.provenance;i!==void 0&&(!Ke(i)||i.appId!==n||i.definitionId!==t.id||i.version!==t.version||i.definitionHash!==t.hash)&&E("TOOL_INVALID","Product App local registration provenance is not verified");let r=$c(e.resource),o=e.tools.map(s=>{Ue(s.name,"TOOL_ID_INVALID","Local App tool name"),yn(s.description,"Local App tool description","Local App tool"),Fc(s.textFallback);let c=An(s.inputSchema,s.kind==="action"&&!("actionId"in s)?Fo:0);if((s.resourceBinding.kind!=="instance"||Object.prototype.hasOwnProperty.call(s,"resourceUri"))&&E("TOOL_INVALID","Local App tools cannot carry an MCP resource URI"),s.kind==="host")return (!xc.has(s.name)||s.visibility.length!==1||s.visibility[0]!=="app"||Object.prototype.hasOwnProperty.call(s,"actionId"))&&E("TOOL_INVALID","Local App Host tools must use an allow-listed name and app-only visibility"),Z({...s,inputSchema:c,visibility:Object.freeze(["app"])});if(s.kind==="action"){if("actionId"in s){let l=Ue(s.actionId,"TOOL_ID_INVALID","Local App action id");Object.prototype.hasOwnProperty.call(t.actions,l)||E("TOOL_INVALID","Local App action tool references an undeclared action");let u=Bc(s._meta.ui.visibility);return JSON.stringify(u)!==JSON.stringify(s.visibility)&&E("TOOL_INVALID","Local App action metadata visibility must match the tool visibility"),Z({...s,actionId:l,actionIds:Object.freeze([l]),inputSchema:c,visibility:u,_meta:{ui:{visibility:u}}})}let d=[...s.actionIds];return (d.length===0||d.some(l=>!Object.prototype.hasOwnProperty.call(t.actions,l)))&&E("TOOL_INVALID","Local App action tool references an undeclared action"),Z({...s,inputSchema:c,actionIds:Object.freeze(d)})}return Z({...s,inputSchema:c})}),a=Z({appId:n,name:yn(e.name,"Local App name",e.appId),description:yn(e.description,"Local App description",e.name),...e.icon===void 0?{}:{icon:$o(e.icon)},...e.tone===void 0?{}:{tone:Wo(e.tone)},builtinOnly:false,definition:t,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...i===void 0?{}:{provenance:i},resourceBinding:Re,resource:r,tools:Object.freeze(o),toolDiagnostics:Object.freeze([...e.toolDiagnostics??[]])});return wo.has(e)?e:(wo.add(a),a)}function $c(e){let n=ei(e.html),t=Wn(e.entryHash,"Local App entry hash");if(vc(e))return e;let i=Kn(e.bytes,"Local App entry bytes");(Xn(i)!==t||Go(i)!==n)&&E("HTML_INVALID","Local App entry bytes do not match the HTML hash");let r=e.initialState===void 0?void 0:{hash:Wn(e.initialState.hash,"Initial state hash"),bytes:Kn(e.initialState.bytes,"Initial state bytes")};return r&&Xn(r.bytes)!==r.hash&&E("STATE_INVALID","Initial state bytes do not match the hash"),Vo(t,n,i,r)}function Wc(e,n,t){if(Gn(n,t))return ["model"];let i=t?.type==="core"&&fn(t.handler);return e==="denied"||i?["app"]:["model","app"]}function Xc(e){return Z({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:false,definition:Jo(e.definition),...e.provenance===void 0?{}:{provenance:e.provenance},entryHash:e.resource.entryHash,resourceBinding:Re,tools:e.tools})}function Kc(e){return Z({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:e.builtinOnly,uiUri:e.uiUri,...e.definition===void 0?{}:{definition:Jo(e.definition)},resourceBinding:Object.freeze({kind:"mcp",uri:e.uiUri}),tools:e.tools})}function Yn(e){try{if(Object.isFrozen(e))return de(e),Z(e);let n=gn(e);return de(n),Z(n)}catch(n){if(n instanceof Te)throw n;E("STATE_INVALID","UI definition is not a valid immutable definition");}}function Jo(e){return Z({id:e.id,version:e.version,hash:e.hash})}function Yc(e){return e!==null&&typeof e=="object"&&typeof e.id=="string"&&Number.isSafeInteger(e.version)&&typeof e.hash=="string"}function xo(e,n,t){return `${e}\0${n}\0${t}`}function Wn(e,n){return (typeof e!="string"||!Rc.test(e))&&E("SERIALIZATION_INVALID",`${n} is invalid`),e}function Xn(e){return createHash("sha256").update(Uint8Array.from(e)).digest("hex")}function Kn(e,n){return (!Array.isArray(e)||e.some(t=>!Number.isInteger(t)||t<0||t>255))&&E("SERIALIZATION_INVALID",`${n} is invalid`),[...e]}function Go(e){try{return new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(e))}catch{E("SERIALIZATION_INVALID","UTF-8 bytes are invalid");}}function $o(e){return (typeof e!="string"||!kc.test(e))&&E("TOOL_INVALID","MCP App icon is invalid"),e}function Wo(e){return (typeof e!="string"||!wc.has(e))&&E("TOOL_INVALID","MCP App tone is invalid"),e}function gn(e,n=new Map){if(e===null||typeof e!="object")return e;let t=e;if(n.has(t)&&E("SERIALIZATION_INVALID","MCP App value contains a cycle"),Array.isArray(e)){let o=[];n.set(t,o);for(let a of e)o.push(gn(a,n));return n.delete(t),o}let i;try{i=Object.getPrototypeOf(e);}catch{E("SERIALIZATION_INVALID","MCP App value cannot be cloned");}i!==Object.prototype&&i!==null&&E("SERIALIZATION_INVALID","MCP App value must be plain JSON");let r={};n.set(t,r);for(let[o,a]of Object.entries(e))Object.defineProperty(r,o,{configurable:true,enumerable:true,value:gn(a,n),writable:true});return n.delete(t),r}function Z(e,n=new Set){if(e===null||typeof e!="object"||n.has(e)||In.has(e))return e;n.add(e);for(let t of Object.values(e))Z(t,n);return Object.freeze(e),e}var jo,vo,Rc,Ye,Uc,Cc,kc,wc,xc,Re,jc,In,wo,Fo,Qt,qn=k(()=>{g();Eo();ke();Ne();Jn();zn();Zt();Uo();ko();$n();jo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,vo=/^ui:\/\/crewx\/([A-Za-z][A-Za-z0-9._-]{0,127})\/([0-9a-f]{12})$/,Rc=/^[0-9a-f]{64}$/,Ye=8*1024*1024,Uc=8*1024,Cc=16*1024,kc=/^[a-z][a-z0-9-]{0,63}$/,wc=new Set(["blue","violet","emerald","amber","rose","sky","slate","indigo"]),xc=new Set(Oo),new Set(Lo),Re=Object.freeze({kind:"instance"}),jc=Object.freeze({type:"object",properties:Object.freeze({}),additionalProperties:false}),In=new WeakSet,wo=new WeakSet;Fo=4;Qt=class{builtinApps;localApps;builtinDescriptors;builtinTools;mcpResources=new Map;localById=new Map;registrationById=new Map;launcherById=new Map;definitionByKey=new Map;handlerByKey=new Map;mcpToolByName=new Map;localToolByName=new Map;constructor(n){let t=n.builtins??n.builtin,i=[],r=[],o=[],a=new Set,s=new Set;for(let u of t?.listMcpApps()??[]){let f=Jc(u);a.has(f.appId)&&E("APP_ID_CONFLICT",`MCP App id is already registered: ${f.appId}`),a.add(f.appId);let A=f.tools;for(let I of A)s.has(I.name)&&E("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${I.name}`),s.add(I.name),this.mcpToolByName.set(I.name,I),o.push(I);this.mcpResources.set(f.resource.uri,f.resource),i.push(f),r.push(f.descriptor);}let c=(n.localApps??n.locals??[]).map(Gc),d=new Set(c.flatMap(u=>u.tools.filter(f=>!(f.kind==="action"&&"actionId"in f)).map(f=>f.name))),l=[];for(let u of c){let f=u;a.has(f.appId)&&E("APP_ID_CONFLICT",`MCP App id is already registered: ${f.appId}`),a.add(f.appId);let A=[],I=[...f.toolDiagnostics??[]];for(let h of f.tools){if(s.has(h.name)){if(h.kind==="host"&&this.localToolByName.get(h.name)?.kind==="host"){A.push(h);continue}if(h.kind==="action"&&"actionId"in h){I.push(Object.freeze({toolName:h.name,actionId:h.actionId,reason:"name_collision"}));continue}E("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${h.name}`);}if(h.kind==="action"&&"actionId"in h&&d.has(h.name)){I.push(Object.freeze({toolName:h.name,actionId:h.actionId,reason:"name_collision"}));continue}s.add(h.name),this.localToolByName.set(h.name,h),A.push(h);}(A.length!==f.tools.length||I.length!==(f.toolDiagnostics?.length??0))&&(f=Z({...f,tools:Object.freeze(A),toolDiagnostics:Object.freeze(I)})),l.push(f),this.localById.set(f.appId,f);}for(let u of i)this.registrationById.set(u.appId,u),this.launcherById.set(u.appId,Kc(u)),u.definition&&this.addDefinition(u.definition);for(let u of l)this.registrationById.set(u.appId,u),this.launcherById.set(u.appId,Xc(u)),this.addDefinition(u.definition);for(let u of n.definitions??[])this.addDefinition(u);for(let u of n.handlers??[])this.addHandler(u);this.builtinApps=Object.freeze(i),this.localApps=Object.freeze(l),this.builtinDescriptors=Object.freeze(r),this.builtinTools=Object.freeze(o);}getMcpApp(n){return this.builtinApps.find(t=>t.appId===n)?.descriptor??null}listMcpApps(){return this.builtinDescriptors}listMcpAppTools(){return this.builtinTools}resolveMcpAppTool(n){return this.mcpToolByName.get(n)??null}resolveMcpAppResource(n){return typeof n!="string"||!vo.test(n)?null:this.mcpResources.get(n)??null}requireMcpAppResource(n){Bo(n);let t=this.mcpResources.get(n);return t||E("RESOURCE_NOT_FOUND",`MCP App resource is not registered: ${n}`),t}listLocalMcpApps(){return this.localApps}getLocalMcpApp(n){return this.localById.get(n)??null}listLocalMcpAppTools(){return Object.freeze([...this.localToolByName.values()])}resolveLocalMcpAppTool(n){return this.localToolByName.get(n)??null}resolveLocalMcpAppResource(n,t){let i=this.localById.get(n);return !i||t!==void 0&&i.definition.hash!==t?null:i.resource}listRegistrations(){return Object.freeze([...this.builtinApps,...this.localApps])}getRegistration(n){return this.registrationById.get(n)??null}listLaunchers(){return Object.freeze([...this.launcherById.values()].filter(n=>{let t=this.registrationById.get(n.appId),i=t?"descriptor"in t?t.descriptor.provenance:t.provenance:void 0,r=Ke(i)&&i.launcher===false;return t?.definition?.usage!=="card"&&!r}))}listCardApps(){return Object.freeze([...this.launcherById.values()].filter(n=>this.registrationById.get(n.appId)?.definition?.usage==="card"))}getLauncher(n){return this.launcherById.get(n)??null}resolveDefinition(n){if(!Yc(n))return null;let t=this.definitionByKey.get(bt(n));if(!t||t.hash!==n.hash)return null;try{return oe(t)===t.hash?t:null}catch{return null}}resolveActionHandler(n,t,i){return typeof n!="string"||typeof i!="string"||!Number.isSafeInteger(t)?null:this.handlerByKey.get(xo(n,t,i))??null}addDefinition(n){let t=Yn(n),i=bt(t),r=this.definitionByKey.get(i);r&&r.hash!==t.hash&&E("STATE_INVALID",`UI definition generation conflicts: ${i}`),r||this.definitionByKey.set(i,t);}addHandler(n){(!n||typeof n.definitionId!="string"||typeof n.actionId!="string"||!Number.isSafeInteger(n.version)||n.version<1||typeof n.handle!="function")&&E("STATE_INVALID","UI action handler registration is invalid");let t=xo(n.definitionId,n.version,n.actionId);this.handlerByKey.has(t)&&E("TOOL_INVALID",`Duplicate UI action handler registration: ${t}`),this.handlerByKey.set(t,Object.freeze({...n}));}};});function qc(e){let n=Ho({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},...e.normalized.manifest.runtime===void 0?{}:{runtime:e.normalized.manifest.runtime},...e.normalized.manifest.deviceFeatures===void 0?{}:{deviceFeatures:e.normalized.manifest.deviceFeatures},...e.normalized.manifest.downloads===void 0?{}:{downloads:e.normalized.manifest.downloads},definition:e.definition,html:e.html,entryHash:e.entryHash,entryBytes:e.entryBytes,initialState:e.initialState,...e.initialStateHash===void 0?{}:{initialStateHash:e.initialStateHash},...e.initialStateBytes===void 0?{}:{initialStateBytes:e.initialStateBytes},readToolName:e.toolNames.read,...e.toolNames.action===void 0?{}:{actionToolName:e.toolNames.action},actions:e.normalized.manifest.actions.map(i=>({actionId:i.actionId,inputSchema:i.inputSchema,backend:i.backend}))});return e.provenance===void 0?n:Object.freeze({...n,provenance:e.provenance})}function Xo(e){let n=e.normalized.manifest.actions;if(n.some(i=>i.backend.type==="skill")&&n.some(i=>i.backend.type==="core"))throw new Error("Mixed workspace App execution models");let t=qc(e);zo({localApps:[t],definitions:[e.definition]});}var Ko=k(()=>{g();qn();});function Yo(){return Object.freeze({[ti]:{candidates:new Map,assetCatalogs:new Map,preparedCandidates:new Map}})}function Zc(e){if(e===null||typeof e!="object"||!(ti in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[ti]}function qo(e,n){let t=Zc(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.preparedCandidates.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0,t.lastSnapshotCandidates=void 0,t.lastSnapshotCatalogFingerprint=void 0),t.rootIdentity=n,t}var ti,Zo=k(()=>{g();ti=Symbol("crewx.workspace-app-scan-cache.state");});function se(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new _("NOT_FOUND"):n==="ELOOP"?new _("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new _("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new _("READ_DENIED"):new _("READ_DENIED")}function td(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new _("READ_DENIED")}function ii(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new _("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new _("PATH_ESCAPED");return n}function nt(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ze(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function ai(e,n){return e.dev===n.dev&&e.ino===n.ino}function ci(e,n){return ai(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function Zn(e){td(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw se(i)}if(!t.isDirectory())throw new _("READ_DENIED");return {realRoot:n,identity:Ze(t)}}async function nr(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,r;try{if(i=resolve(e,t[0],t[1]),r=await realpath(i),!(await stat(r,{bigint:!0})).isDirectory())throw new _("READ_DENIED")}catch(o){throw o instanceof _?o:se(o)}if(!nt(n,r))throw new _("PATH_ESCAPED");return r}async function Qn(e,n,t,i){let r,o,a;try{r=await lstat(e,{bigint:!0}),o=await realpath(e),a=await stat(o,{bigint:!0});}catch(s){throw se(s)}if(!nt(n,o)||t!==void 0&&!nt(t,o))throw new _("PATH_ESCAPED");if(!r.isFile()||!a.isFile())throw new _("READ_DENIED");if(!ai(i,r)||!ai(i,a)||i.dev!==a.dev)throw new _("PATH_ESCAPED")}async function qe(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new _("PATH_ESCAPED")}if(t!==n.realRoot||!ci(n.identity,Ze(i)))throw new _("PATH_ESCAPED")}function id(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var _,si,nd,er,Qe,tt,tr,ir,pi=k(()=>{g();_=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},si=constants.O_NOFOLLOW,nd=constants.O_NONBLOCK,er=constants.O_RDONLY|(si??0)|(nd??0);Qe=class{async getRootIdentity(n){let t=await Zn(n);return await qe(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=ii(t),r=await Zn(n),o=resolve(n,...i),a,s;try{a=await realpath(o),s=await stat(a,{bigint:!0});}catch(c){let d=se(c);if(d.code==="NOT_FOUND")return [];throw d}if(!nt(r.realRoot,a)||!s.isDirectory())throw new _("PATH_ESCAPED");try{let c=await readdir(a,{withFileTypes:!0,encoding:"utf8"});return await qe(n,r),c.map(id)}catch(c){let d=se(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");if(si===void 0)throw new _("UNSUPPORTED");let r=ii(t),o=await Zn(n),a=resolve(n,...r),s=relative(n,a);if(s===".."||s.startsWith(`..${sep}`)||isAbsolute(s))throw new _("PATH_ESCAPED");let c;try{c=await open(a,er);}catch(d){throw se(d)}try{let d;try{let I=await c.stat({bigint:!0});d=Ze(I);}catch(I){throw se(I)}if(d.size>BigInt(i))throw new _("LIMIT_EXCEEDED");if(d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new _("LIMIT_EXCEEDED");await qe(n,o);let l=await nr(n,o.realRoot,r);await Qn(a,o.realRoot,l,d);let u=new Uint8Array(new ArrayBuffer(Number(d.size))),f=0;for(;f<u.byteLength;){let I;try{I=(await c.read(u,f,u.byteLength-f,f)).bytesRead;}catch(h){throw se(h)}if(I<=0)throw new _("IDENTITY_CHANGED");f+=I;}let A;try{let I=await c.stat({bigint:!0});A=Ze(I);}catch(I){throw se(I)}if(!ci(d,A))throw new _("IDENTITY_CHANGED");return await Qn(a,o.realRoot,l,A),await qe(n,o),new Uint8Array(u)}finally{await c.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");if(si===void 0)throw new _("UNSUPPORTED");let r=ii(t),o=await Zn(n),a=resolve(n,...r),s=relative(n,a);if(s===".."||s.startsWith(`..${sep}`)||isAbsolute(s))throw new _("PATH_ESCAPED");let c;try{c=await open(a,er);}catch(d){throw se(d)}try{let d;try{let f=await c.stat({bigint:!0});d=Ze(f);}catch(f){throw se(f)}if(d.size>BigInt(i)||d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new _("LIMIT_EXCEEDED");await qe(n,o);let l=await nr(n,o.realRoot,r);await Qn(a,o.realRoot,l,d);let u;try{let f=await c.stat({bigint:!0});u=Ze(f);}catch(f){throw se(f)}if(!ci(d,u))throw new _("IDENTITY_CHANGED");return await Qn(a,o.realRoot,l,u),await qe(n,o),{...u,candidateRealPath:l??o.realRoot}}catch(d){throw d instanceof _?d:se(d)}finally{await c.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},tt=new Qe,tr=tt,ir=Qe;});function En(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function rr(e){return typeof e=="string"&&me.test(e)?e:void 0}function pd(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function ve(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let a=t[o]-i[o];if(a!==0)return a}return t.byteLength-i.byteLength}function ld(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function ud(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function fd(e){return cd.decode(e)}function yd(e){return JSON.parse(fd(e))}function sr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Ad(e){if(e instanceof _)return sr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return sr(n)}}function Se(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Id(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function gd(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function ar(e,n,t,i){let r=Id(e);if(!r)throw new _("READ_DENIED");return ud(await r.call(e,n,t,i))}async function fi(e,n,t){let i=gd(e);if(!i)throw new _("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new _("READ_DENIED");return r.map(ld).filter(o=>o!==null)}function md(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function hd(e){if(!En(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,r)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+r+" must be an array");let o=[];for(let a=0;a<i.length;a+=1){let s=i[a];if(typeof s!="string"||s.length===0)throw new TypeError("productBundle.reservedIds."+r+" must contain non-empty strings");o.push(s);}return Object.freeze([...new Set(o)].sort(ve))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function _d(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function Tn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(ve)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(ve))})}function it(e,n){let t=Object.keys(e).sort(ve),i=[...n].sort(ve);return t.length===i.length&&t.every((r,o)=>r===i[o])}function cr(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function Ed(e){let n;try{n=yd(e);}catch{return}if(!En(n)||!it(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>yi)return;let t=new Set,i=new Set,r=0,o=[];for(let a of n.packages){if(!En(a))return;let s=["packageDir","appId","definition","files"],c=Object.hasOwn(a,"lineage"),d=Object.hasOwn(a,"launcher"),l=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!it(a,[...s,...l])||d&&a.launcher!==false)return;let u=cr(a.packageDir),f=rr(a.appId);if(!u||u.length!==2||u[0]!=="apps"||!pd(u[1])||!f||t.has(a.packageDir)||!En(a.definition)||!it(a.definition,["id","version","hash"]))return;let A=rr(a.definition.id),I=a.definition.version,h=a.definition.hash;if(!A||!Number.isSafeInteger(I)||I<1||typeof h!="string"||!ui.test(h)||!Array.isArray(a.files)||a.files.length<2||a.files.length>Ai)return;let T=new Set,J=[];for(let V of a.files){if(!En(V)||!it(V,["path","sha256"]))return;let b=cr(V.path);if(!b||typeof V.sha256!="string"||!ui.test(V.sha256))return;let C=b.join("/"),W=`${a.packageDir}/${C}`;if(T.has(C)||i.has(W))return;T.add(C),i.add(W),J.push(Object.freeze({path:C,sha256:V.sha256}));}if(!le.some(V=>T.has(V))||!T.has("ui/index.html")||(r+=J.length,r>rd))return;t.add(a.packageDir),o.push(Object.freeze({packageDir:a.packageDir,...d?{launcher:false}:{},appId:f,definition:Object.freeze({id:A,version:I,hash:h}),lineage:Array.isArray(a.lineage)?a.lineage:[],files:Object.freeze(J.sort((V,b)=>ve(V.path,b.path)))}));}return Object.freeze({version:1,packages:Object.freeze(o)})}function je(e){let n=Ad(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function Td(e,n,t,i,r){let o=[],a=async(s,c)=>{if(!Se(i,r))throw new _("LIMIT_EXCEEDED");if(c>2)throw new _("LIMIT_EXCEEDED");let d=await fi(e,n,s);for(let l of d){if(typeof l.name!="string"||l.name.length===0||l.name==="."||l.name===".."||/[\\/\u0000]/.test(l.name))throw new _("PATH_ESCAPED");let u=`${s}/${l.name}`;if(l.kind==="file"){if(o.push(u.slice(t.length+1)),o.length>Ai)throw new _("LIMIT_EXCEEDED")}else if(l.kind==="directory")await a(u,c+1);else throw l.kind==="symlink"?new _("PATH_ESCAPED"):new _("READ_DENIED")}};return await a(t,0),o.sort(ve)}function Dd(e){return le.includes(e)?262144:e==="ui/index.html"?Ye:e==="ui/state.json"?2097152:e.startsWith("ui/assets/")?ad:sd}async function dr(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:dd};let r=hd(e.reservedIds),o=[],a=(y,m,N)=>md(y,"bundled",m),s=(y=[],m=false,N)=>({...N===void 0?{}:{indexHash:N},packages:y,diagnostics:o,incomplete:m,reservedIds:r});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ui.test(e.expectedIndexHash))return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let c;try{c=await ar(n,e.root,"bundle-index.json",od);}catch(y){return o.push(a(je(y),"bundle-index.json")),s()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let l=Ed(c);if(l===void 0)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();if(!_d(Tn(l.packages),r))return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s([],false,d);if(!Se(t,i))return o.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(l.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,d);let u;try{u=await fi(n,e.root,"");}catch(y){return o.push(a(je(y),"bundle-index.json")),s(l.packages.map(m=>({indexEntry:m,failureCode:je(y)})),false,d)}if(!Se(t,i))return o.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(l.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,d);let f=u.find(y=>y.name==="bundle-index.json"&&y.kind==="file"),A=u.find(y=>y.name==="apps"&&y.kind==="directory"),I=y=>l.packages.map(m=>({indexEntry:m,failureCode:y}));if(!f)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s(I("BUNDLE_INTEGRITY"),false,d);let h=u.filter(y=>y.name!=="bundle-index.json"&&y.name!=="apps");if(h.length>0){let y=h.some(m=>m.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return o.push(a(y,"bundle-index.json")),s(I("BUNDLE_INTEGRITY"),false,d)}if(u.some(y=>y.name==="apps"&&y.kind!=="directory"))return o.push(a("PATH_ESCAPED","apps")),s(I("PATH_ESCAPED"),false,d);let T=[];if(A)try{T=await fi(n,e.root,"apps");}catch(y){return o.push(a(je(y),"apps")),s(I(je(y)),false,d)}if(!Se(t,i)||T.length>yi)return o.push(a("LIMIT_EXCEEDED","apps")),s(I("LIMIT_EXCEEDED"),true,d);let J=new Map(l.packages.map(y=>[y.packageDir.slice(5),y])),V=T.filter(y=>!J.has(y.name));for(let y of V)o.push(a(y.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${y.name}`));if(V.length>0){let y=V.some(m=>m.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return s(I(y),false,d)}let b=new Set,C=new Map,W=new Map;for(let y of l.packages){let m=C.get(y.appId)??[];m.push(y),C.set(y.appId,m);let N=`${y.definition.id}\0${String(y.definition.version)}`,L=W.get(N)??[];L.push(y),W.set(N,L);}for(let y of [...C.values(),...W.values()])if(y.length>1)for(let m of y)b.add(m);let D=[],O=c.byteLength,S=false;for(let y of l.packages){if(!Se(t,i)){S=true,D.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let m;try{let P=y.lineage[y.lineage.length-1];if(!P)throw new De("LINEAGE_INVALID","Definition lineage is missing");if(P.definition.id!==y.definition.id||P.version!==y.definition.version||P.hash!==y.definition.hash)throw new De("LINEAGE_STALE","Last lineage generation does not match bundle identity");m=qt(y.lineage,{...P.definition,hash:P.hash}).entries;}catch(P){let R=P instanceof De?P.code:"LINEAGE_INVALID";o.push(a(R,y.packageDir)),D.push({indexEntry:y,failureCode:R});continue}let N=T.find(P=>P.name===y.packageDir.slice(5));if(!A||!N){D.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}if(N.kind!=="directory"){D.push({indexEntry:y,failureCode:N.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let L;try{let P=await Td(n,e.root,y.packageDir,t,i);if(!Se(t,i)){S=!0,D.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let R=y.files.map(x=>x.path);if(P.length!==R.length||P.some((x,ge)=>x!==R[ge])){D.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}L=new Map;let G;for(let x of y.files){if(!Se(t,i)){G="LIMIT_EXCEEDED",S=!0;break}if(O>=li){G="LIMIT_EXCEEDED";break}let ge;try{ge=await ar(n,e.root,`${y.packageDir}/${x.path}`,Dd(x.path));}catch(ct){G=je(ct);break}if(!Se(t,i)){G="LIMIT_EXCEEDED",S=!0;break}if(O+ge.byteLength>li){O=li,G="LIMIT_EXCEEDED";break}if(O+=ge.byteLength,createHash("sha256").update(ge).digest("hex")!==x.sha256){G="BUNDLE_INTEGRITY";break}L.set(x.path,ge);}if(G!==void 0){D.push({indexEntry:y,failureCode:G});continue}}catch(P){Se(t,i)||(S=true),D.push({indexEntry:y,failureCode:je(P)});continue}D.push({indexEntry:y,lineage:m,files:L,...b.has(y)?{failureCode:"DUPLICATE_ID"}:{}});}return s(D,S,d)}var od,yi,Ai,rd,sd,ad,li,ui,cd,dd,Ii=k(()=>{g();Zt();Ce();$t();qn();pi();od=256*1024,yi=64,Ai=128,rd=yi*Ai,sd=2*1024*1024,ad=8*1024*1024,li=32*1024*1024,ui=/^[0-9a-f]{64}$/,cd=new TextDecoder("utf-8",{fatal:true}),dd=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});var Ur={};Fr(Ur,{AppDiscoveryFsError:()=>_,LOCAL_APP_TOOL_PREFIX:()=>Pd,MCP_APP_WORKSPACE_TOOL_PREFIX:()=>Sd,NodeAppDiscoveryFs:()=>Qe,NodeAppDiscoveryFsAdapter:()=>ir,WORKSPACE_APP_TOOL_PREFIX:()=>en,createWorkspaceAppScanCache:()=>Yo,defaultAppDiscoveryFs:()=>tt,defaultNodeAppDiscoveryFs:()=>tr,deriveWorkspaceAppToolName:()=>Md,deriveWorkspaceAppToolNames:()=>hi,discoverWorkspaceAppCandidates:()=>ip,discoverWorkspaceApps:()=>_i,isWorkspacePackage:()=>bd,productAppBundleReservations:()=>Tn,scanWorkspaceApps:()=>op});function bd(e,n){let t=n.split("/");return t.length===2&&t[0]===e&&/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t[1])}function hi(e){if(typeof e!="string"||!me.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${en}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${en}${n}_read`,action:`${en}${n}_action`}}function Md(e,n="read"){let t=hi(e);return n==="read"?t.read:t.action}function lr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Ld(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function Rd(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Nn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let a=t[o]-i[o];if(a!==0)return a}return t.byteLength-i.byteLength}function Tr(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ud(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Dr(e){return Od.decode(e)}function Cd(e){return JSON.parse(Dr(e))}function kd(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function ot(e,n,t,i,r){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...r?.reason===void 0?{}:{reason:Object.freeze({...r.reason})},...r?.files===void 0?{}:{files:Object.freeze([...r.files])}};return Object.freeze(o)}function ur(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function te(e){if(e instanceof _)return ur(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return ur(n)}}function Fe(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function fr(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function yr(e){return e==="MANIFEST_DUAL_MISMATCH"?e:Nr(e)}function wd(e){return Nr(e.code)}function Nr(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return br("UiPluginValidationError",e)}}function br(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Pr(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return br("McpAppContractError",e)}}function Me(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function xd(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function jd(e,n){let t=n.get("package.json");if(t!==void 0)try{let r=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(lr(r)){let o=r.bin,a=typeof o=="string"?o:lr(o)?Object.values(o).find(s=>typeof s=="string"):void 0;for(let s of [a,r.main]){if(typeof s!="string")continue;let c=vd(s);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(r=>n.has(r))}function vd(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Vd(){return globalThis.performance?.now()??Date.now()}function Ve(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Ve(n);return Object.freeze(e)}function Ar(e){return Object.freeze(Array.from(e))}async function bn(e,n,t,i){if(n.pinnedFiles!==void 0){let s=n.pinnedFiles.get(t);if(s===void 0)throw new _("NOT_FOUND");if(s.byteLength>i)throw new _("LIMIT_EXCEEDED");return new Uint8Array(s)}let r=`${n.relativePath}/${t}`,o=n.scanContext,a=e.fingerprintVerifiedFile;if(o===void 0||!o.cacheable||typeof a!="function")return hr(e,n.root,r,i);try{let s=o.priorFingerprints.get(r)??await a.call(e,o.workspaceRoot,r,i);o.candidateRealPath=s.candidateRealPath;let c=await hr(e,n.root,r,i),d=await a.call(e,o.workspaceRoot,r,i);return o.candidateRealPath=d.candidateRealPath,Mr(s,d)&&d.size===BigInt(c.byteLength)&&!Or(d,o.scanStartedAtNs)?o.files.set(r,{relativePath:r,byteLimit:i,fingerprint:d}):o.cacheable=!1,c}catch(s){let c=!t.includes("/")&&te(s)==="NOT_FOUND"&&o.directoryListings.some(l=>l.relativePath===n.relativePath&&!rt(l.key,t)),d=t===q&&te(s)==="NOT_FOUND"&&Bd(o.directoryListings,n.relativePath);throw !c&&!d&&(o.cacheable=false),s}}async function Fd(e,n,t){if(n.pinnedFiles!==void 0)return {iconDiagnostics:[]};let i=await Xt(t,async o=>{try{return await bn(e,n,o,262144)}catch(a){let s=te(a);return s==="NOT_FOUND"?"missing":s==="LIMIT_EXCEEDED"?"too-large":"bad-path"}}),r=i.file;return {...r===void 0?{}:{iconFile:{path:r.path,sha256:createHash("sha256").update(r.bytes).digest("hex"),contentType:r.contentType,byteLength:r.byteLength}},iconDiagnostics:i.diagnostics}}function Bd(e,n){let t=e.find(r=>r.relativePath===n);if(t===void 0)return  false;if(!rt(t.key,"dist"))return  true;let i=e.find(r=>r.relativePath===`${n}/dist`);return i!==void 0&&!rt(i.key,"tools.json")}function Sr(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function zd(e,n,t,i,r,o,a,s){let c=e.fingerprintVerifiedFile,d=Sr(t,i),l=r.candidates.get(d),u=i.relativePath,f;try{f=await mr(e,n,u);}catch(S){if(te(S)!=="NOT_FOUND")throw S}let A=f===void 0?void 0:{relativePath:u,key:f};if(A!==void 0&&(i.source==="apps"||i.source==="skills")&&!le.some(S=>rt(A.key,S)))return Me(a,s)?l!==void 0&&l.candidate===void 0&&l.candidateRealPath===void 0&&l.files.length===0&&l.directoryListings.length===1&&l.directoryListings[0]?.relativePath===A.relativePath&&l.directoryListings[0]?.key===A.key&&(i.source==="apps"?l.diagnostic?.code==="MANIFEST_MISSING":l.diagnostic===void 0)&&typeof c=="function"?{memo:l}:typeof c!="function"?{}:{context:{state:r,cacheKey:d,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze([A]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let I=async S=>{if(S==="")return A;let y=`${i.relativePath}${S}`;try{let m=await mr(e,n,y);return m===void 0?void 0:{relativePath:y,key:m}}catch(m){if(te(m)==="NOT_FOUND")return;throw m}},h=await Promise.all(Ir.map(I)),T=await Promise.all(Hd.map(I));if(!Me(a,s))return {timeLimitReached:true};let J=typeof c=="function"&&h.every(S=>S!==void 0),V=h.filter(S=>S!==void 0),b=[...V,...T.filter(S=>S!==void 0)],C=new Map,W=l!==void 0&&J,D;if(l!==void 0&&typeof c=="function"){let S=await Promise.all(l.files.map(async y=>{if(!Me(a,s))return {kind:"time",file:y};try{let m=await c.call(e,n,y.relativePath,y.byteLimit);return {kind:"fingerprint",file:y,current:m}}catch(m){return te(m)==="NOT_FOUND"?{kind:"missing",file:y}:{kind:"error",file:y,error:m}}}));if(S.some(y=>y.kind==="time"))return {timeLimitReached:true};for(let y of S){if(y.kind==="error")throw y.error;if(y.kind==="missing"){W=false;continue}if(y.kind!=="fingerprint")continue;let{file:m,current:N}=y;C.set(m.relativePath,N),D??=N.candidateRealPath,(N.candidateRealPath!==l.candidateRealPath||!Mr(N,m.fingerprint)||Or(N,o))&&(W=false);}}let O=l!==void 0&&l.directoryListings.length===b.length&&l.directoryListings.every((S,y)=>S.relativePath===b[y]?.relativePath&&S.key===b[y]?.key);return l!==void 0&&J&&O&&W&&D===l.candidateRealPath?{memo:l}:!J||V.length!==Ir.length?{}:{context:{state:r,cacheKey:d,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze(b),priorFingerprints:C,files:new Map,...D===void 0?{}:{candidateRealPath:D},cacheable:true}}}function rt(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function mr(e,n,t){let i=Lr(e);if(typeof i!="function")return;let r=await i.call(e,n,t);if(!Array.isArray(r)||r.some(a=>typeof a=="string"))return;let o=r.map(Tr);if(!o.some(a=>a===null))return JSON.stringify(o.slice().sort((a,s)=>Nn(a.name,s.name)||Nn(a.kind,s.kind)).map(a=>[a.name,a.kind]))}function Mr(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Or(e,n){let t=e.mtimeNs-n;return t>=-gr&&t<=gr}function gi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,r=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!r||n.files.size===0&&!r)return;let o=Object.freeze({...!r&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,o);}function Jd(e,n,t){let i=createHash("sha256"),r=new TextEncoder().encode(Q(e)),o=a=>{let s=new Uint8Array(8);new DataView(s.buffer).setBigUint64(0,BigInt(a)),i.update(s);};return o(r.byteLength),i.update(r),o(n.byteLength),i.update(n),o(t.byteLength),i.update(t),i.digest("hex")}function Gd(e,n){let t={...e.definition,sourceHash:n},i;try{i=oe(t);}catch(o){throw o instanceof U&&o.code==="INPUT_INVALID"?new re("MANIFEST_INVALID","normalized definition is invalid"):o}let r={...t,hash:i};try{de(r);}catch{throw new re("MANIFEST_INVALID","normalized definition is invalid")}return r}function $d(e,n){return e.actions.some(t=>t.backend.type==="core"&&t.backend.handler!=="state.set"&&!Gn(n,t.backend))}function Wd(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Lr(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function hr(e,n,t,i){let r=Wd(e);if(!r)throw new _("READ_DENIED");return Ud(await r.call(e,n,t,i))}async function Xd(e,n,t){let i=Lr(e);if(!i)throw new _("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new _("READ_DENIED");return r.map(Tr).filter(o=>o!==null)}function Kd(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(_r(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(_r(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function _r(e){let n=[],t=[],i=[];for(let r of e.listMcpApps())typeof r.appId=="string"&&n.push(r.appId),r.definition&&typeof r.definition.id=="string"&&t.push(r.definition.id);for(let r of e.listMcpAppTools())typeof r.name=="string"&&i.push(r.name);return {appIds:n,definitionIds:t,toolNames:i}}function Ae(e,n){e.diagnostic||(e.diagnostic=ot(n,e.source,e.relativePath,e.identity?.pluginId));}function Yd(e,n){let t=new Set,i=new Map;for(let o of e){let a=o.identity?.pluginId;if(a===void 0)continue;let s=i.get(a)??[];s.push(o),i.set(a,s);}for(let o of i.values()){if(o.length<2)continue;let a=o.filter(c=>c.provenance!==void 0);if(a.length>0){let c=o.find(d=>n.has(d));if(c){for(let d of a)t.add(d);for(let d of o)d!==c&&d.provenance===void 0&&Ae(d,"RESERVED_ID");continue}for(let d of o)d.provenance===void 0&&Ae(d,"RESERVED_ID");if(a.length>1)for(let d of a)Ae(d,"DUPLICATE_ID");continue}let s=o.filter(c=>c.source==="apps");if(s.length>1){for(let c of s)Ae(c,"DUPLICATE_ID");for(let c of o.filter(d=>d.source==="skills"))Ae(c,"DUPLICATE_ID");}else for(let c of o.filter(d=>d.source==="skills"))Ae(c,"DUPLICATE_ID");}let r=new Map;for(let o of e){if(o.diagnostic?.code==="RESERVED_ID"||t.has(o)||o.provenance===void 0&&!n.has(o)&&i.get(o.identity?.pluginId??"")?.some(c=>c.provenance!==void 0))continue;let a=o.identity?.definitionKey;if(a===void 0)continue;let s=r.get(a)??[];s.push(o),r.set(a,s);}for(let o of r.values())if(o.length>1)for(let a of o)Ae(a,"DUPLICATE_ID");return t}function qd(e,n,t){let i=new Set,r=new Set,o=new Set,a=new Set([...t.appIds,...n.productBundleReservationMetadata?.reservedAppIds??[]]),s=new Set([...t.definitionIds,...n.productBundleReservationMetadata?.reservedDefinitionIds??[]]);for(let l of Kd(n)){for(let u of l.appIds??[])typeof u=="string"&&i.add(u);for(let u of l.definitionIds??[])typeof u=="string"&&r.add(u);for(let u of l.toolNames??[])typeof u=="string"&&o.add(u);}for(let l of e){let u=l.candidate;if(!u)continue;if(i.has(u.pluginId)||r.has(u.definitionId)){Ae(l,"RESERVED_ID");continue}[u.toolNames.read,u.toolNames.action].filter(A=>A!==void 0).some(A=>o.has(A))&&Ae(l,"DUPLICATE_ID");}let c=[...e.filter(l=>l.provenance!==void 0&&l.diagnostic===void 0).flatMap(l=>l.candidate?[l.candidate]:[]),...(n.productBundleReservationMetadata?.candidates??[]).filter(l=>n.productBundleReservationMetadata?.indexHash!==void 0&&l.provenance?.indexHash===n.productBundleReservationMetadata.indexHash)],d=new Set;for(let l of e){let u=l.candidate;if(!(!u||l.diagnostic||l.source!=="apps"||l.provenance!==void 0)&&e.filter(f=>f.source==="apps"&&f.identity?.pluginId===u.pluginId).length===1&&c.some(f=>f.pluginId===u.pluginId)&&!(s.has(u.definitionId)&&!c.some(f=>f.pluginId===u.pluginId&&f.definitionId===u.definitionId))&&!c.some(f=>f.pluginId!==u.pluginId&&f.definitionId===u.definitionId)&&!e.some(f=>f.identity?.pluginId!==u.pluginId&&f.identity?.definitionKey===`${u.definitionId}\0${u.version}`&&f.diagnostic?.code!=="RESERVED_ID"))try{Xo(u),d.add(l);}catch(f){Ae(l,f instanceof Te?Pr(f.code):"EXEC_DENIED");}}for(let l of e){let u=l.candidate;u&&l.provenance===void 0&&!d.has(l)&&(a.has(u.pluginId)||s.has(u.definitionId))&&Ae(l,"RESERVED_ID");}return d}function Zd(e){return [...e].sort((n,t)=>{let i=pr.indexOf(n.source)-pr.indexOf(t.source);return i!==0?i:Nn(n.relativePath,t.relativePath)})}function F(e,n,t){e.diagnostic=ot(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function Er(e,n,t){let i=Gt(t,{mode:"local"});if(!i.ok&&i.parseFailure){F(n,yr(i.rejection.code),fr(i.rejection));return}let r=kd(i.identity);if(n.bundleIdentity===void 0)n.identity=r;else if(r?.pluginId!==n.bundleIdentity.appId||r.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){F(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){F(n,"RESERVED_ID");return}if(!i.ok){F(n,yr(i.rejection.code),fr(i.rejection));return}let o=i.manifest,a={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=a),o.actions.length>0)try{ni(o.actions.map(R=>({actionId:R.actionId,inputSchema:R.inputSchema})));}catch(R){if(R instanceof Te){F(n,Pr(R.code));return}throw R}let s;try{s=await bn(e,n,"ui/index.html",Ye);}catch(R){F(n,Fe(te(R),"entry"));return}if(s.byteLength>Ye){F(n,"LIMIT_EXCEEDED");return}let c;try{c=Dr(s);}catch{F(n,"ENTRY_INVALID");return}if(s.byteLength===0||c.length===0){F(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==d){F(n,"ENTRY_INVALID");return}let l={},u,f;if(o.initialState!==void 0){try{u=await bn(e,n,"ui/state.json",2097152);}catch(R){F(n,Fe(te(R),"initial"));return}if(u.byteLength>2097152){F(n,"LIMIT_EXCEEDED");return}try{let R=Cd(u),G=o.dataPaths??[],x=xt(R,G);l=ce(x,0,G),ze(l);}catch{F(n,"INITIAL_STATE_INVALID");return}if(f=createHash("sha256").update(u).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==f){F(n,"INITIAL_STATE_INVALID");return}}let A={...o,entryHash:d,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:f}}},I=cn(A),h=Jd(A,s,u??new Uint8Array),T;try{T=Gd(I,h);}catch(R){if(R instanceof re){F(n,wd(R));return}throw R}let J;if(n.bundleLineage!==void 0){let R=n.bundleLineage[n.bundleLineage.length-1];if(!R){F(n,"LINEAGE_INVALID");return}let{legacy:G,...x}=R.definition,{hash:ge,...ct}=T;if(Q(x)!==Q(ct)){F(n,"LINEAGE_STALE");return}if(G!==void 0&&(T={...T,legacy:G}),G!==void 0)try{T={...T,hash:oe(T)},de(T);}catch{F(n,"LINEAGE_INVALID");return}J=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){F(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==T.id||n.bundleIdentity.version!==T.version||n.bundleIdentity.definitionHash!==T.hash)){F(n,"LINEAGE_STALE");return}let V=await Fd(e,n,i.mcpb?.icon),b=hi(o.pluginId),C=o.actions.length===0?{read:b.read}:b,W=Ve(I),D=Ve(A),O=Ve(T),S=Ve({...I.handlers}),y=Ar(s),m=u===void 0?void 0:Ar(u),N=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:y}),...m===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:f,bytes:m})}}),L={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:Ve(i.mcpb)},relativePath:n.relativePath,manifest:D,normalized:W,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},...V.iconFile===void 0?{}:{iconFile:Object.freeze({...V.iconFile})},...V.iconDiagnostics.length===0?{}:{iconDiagnostics:Object.freeze([...V.iconDiagnostics])},definition:O,handlers:S,resources:N,html:c,entryBytes:y,entryHash:d,initialState:Ve(l),...m===void 0?{}:{initialStateBytes:m},...f===void 0?{}:{initialStateHash:f},sourceHash:h,toolNames:Object.freeze(C)},P=n.provenance===void 0?{...L,source:n.source}:{...L,provenance:n.provenance,lineage:J??[]};n.candidate=Object.freeze(P),$d(o,T.usage)&&F(n,"EXEC_DENIED");}async function Rr(e,n){let t={};for(let i of le)try{t[i]=await bn(e,n,i,262144);}catch(r){if(te(r)==="NOT_FOUND")continue;return {files:t,failure:Fe(te(r),"manifest")}}if(t[Y]!==void 0)try{t[q]=await bn(e,n,q,262144);}catch(i){if(te(i)!=="NOT_FOUND")return {files:t,failure:Fe(te(i),"manifest")}}return {files:t}}function mi(e){return le.some(n=>e[n]!==void 0)}async function Qd(e,n){let{files:t,failure:i}=await Rr(e,n);if(i!==void 0){F(n,i);return}let r=t[Y];return r!==void 0&&!Jt(r)&&(delete t[Y],delete t[q]),mi(t)?t:void 0}function ep(e,n,t,i=Nd,r=false,o=new Set){let a=Zd(e),s=Yd(a,o),c=Object.freeze(a.filter(f=>f.candidate!==void 0&&f.diagnostic===void 0&&!s.has(f)).map(f=>f.candidate)),d=Object.freeze(a.filter(f=>f.diagnostic!==void 0).map(f=>f.diagnostic)),l=r?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(a.filter(f=>f.source==="bundled"&&f.diagnostic===void 0&&t!==void 0&&f.candidate?.provenance?.indexHash===t).map(f=>f.candidate)),diagnostics:Object.freeze(d.filter(f=>f.source==="bundled").map(f=>Object.freeze({...f}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,u={apps:c,diagnostics:d,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...l===void 0?{}:{productBundleSnapshotMetadata:l}};return Object.defineProperty(u,"candidates",{configurable:false,enumerable:false,get:()=>c}),Object.freeze(u)}function np(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function tp(e,n){if(np(e))return {fs:e,options:n??{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??tt,options:t}}async function _i(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:r}=tp(n,t),o=r.clock??Vd,a=o(),s=await dr(r.productBundle,i,a,o),c=o(),d=BigInt(Date.now())*1000000n,l=[],u=0,f,A=false,I,h;if(r.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{h=await i.getRootIdentity(e),I=qo(r.scanCache,h),I.scanStartedAtNs=d;}catch(D){if(te(D)!=="NOT_FOUND")throw D}let T=I!==void 0&&r.productBundle===void 0&&s.packages.length===0&&s.diagnostics.length===0,J=new Set,V=true;l.push(...s.diagnostics.map(D=>({source:D.source,root:r.productBundle?.root??e,name:"",relativePath:D.relativePath,diagnostic:D})));let b=s.reservedIds;s.incomplete&&(f="time_limit");for(let D of s.packages){if(!Me(c,o)){A=true,f="time_limit";break}let O=D.indexEntry,S=O.packageDir,y=D.files===void 0?void 0:jd(S,D.files),m=s.indexHash===void 0?void 0:Do(Object.freeze({kind:"bundled",launcher:O.launcher!==false,indexHash:s.indexHash,packageDir:S,appId:O.appId,definitionId:O.definition.id,version:O.definition.version,definitionHash:O.definition.hash,files:O.files}),y),N={source:"bundled",root:r.productBundle?.root??e,name:S.slice(5),relativePath:S,...m===void 0?{}:{provenance:m},...D.files===void 0?{}:{pinnedFiles:D.files},...D.lineage===void 0?{}:{bundleLineage:D.lineage},bundleIdentity:{appId:O.appId,definitionId:O.definition.id,version:O.definition.version,definitionHash:O.definition.hash},identity:xd(O)};if(l.push(N),u+=1,D.failureCode!==void 0){F(N,D.failureCode);continue}if(D.files?.has(q)===true){F(N,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:q}});continue}let L={};for(let P of le){let R=D.files?.get(P);R!==void 0&&(L[P]=R);}if(!mi(L)){F(N,"BUNDLE_INTEGRITY");continue}if(await Er(i,N,L),!Me(c,o)){A=true,f="time_limit";break}}let C=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let D of C){let{source:O,directory:S}=D,y;try{y=await Xd(i,e,S);}catch(N){if(te(N)==="NOT_FOUND")continue;T=false,V=false,l.push({source:O,root:e,name:"",relativePath:O,diagnostic:ot(Fe(te(N),"manifest"),O,O)});continue}let m=y.filter(N=>N.kind==="directory"||N.kind==="symlink").filter(N=>Rd(N.name)).map(N=>({source:O,root:e,name:N.name,relativePath:Ld(O,N.name)})).sort((N,L)=>Nn(N.relativePath,L.relativePath));for(let N of m){let L={...N};if(l.push(L),h!==void 0?J.add(Sr(h,L)):T=false,!Me(c,o)){A=true,f="time_limit";break e}let P;if(I!==void 0&&h!==void 0){try{let x=await zd(i,e,h,L,I,d,c,o);if(x.timeLimitReached){A=!0,f="time_limit";break e}L.scanContext=x.context,P=x.memo;}catch(x){T=false,F(L,Fe(te(x),"manifest"));continue}P===void 0&&(T=false);}if(P!==void 0){if(L.candidate=P.candidate,L.diagnostic=P.diagnostic,L.identity=P.identity,O==="skills"&&P.candidate===void 0&&P.diagnostic===void 0)continue;if(u>=64){F(L,"LIMIT_EXCEEDED");continue}if(N.relativePath.split("/").length-1>2){F(L,"LIMIT_EXCEEDED");continue}if(u+=1,!Me(c,o)){A=true,f="time_limit";break e}continue}let R;if(O==="skills"&&(R=await Qd(i,L),R===void 0)){L.diagnostic===void 0&&gi(L);continue}if(u>=64){F(L,"LIMIT_EXCEEDED");continue}if(N.relativePath.split("/").length-1>2){F(L,"LIMIT_EXCEEDED");continue}if(!Me(c,o)){A=true,f="time_limit";break e}if(u+=1,R===void 0){let x=await Rr(i,L);if(x.failure!==void 0||!mi(x.files)){F(L,x.failure??Fe("NOT_FOUND","manifest")),gi(L);continue}R=x.files;}if(await Er(i,L,R),gi(L),!Me(c,o)){A=true,f="time_limit";break e}}}if(I!==void 0&&h!==void 0){let D=[...J].sort(Nn),O=I.lastCandidateKeys,S=O!==void 0&&O.length===D.length&&O.every((m,N)=>m===D[N]);if(T=T&&S,V&&!A&&f===void 0)for(let m of I.candidates.keys())try{JSON.parse(m)[0]===h.realPath&&!J.has(m)&&I.candidates.delete(m);}catch{I.candidates.delete(m);}let y=[...I.candidates.keys()].filter(m=>{try{return JSON.parse(m)[0]===h.realPath}catch{return  false}});T=T&&y.length===J.size&&y.every(m=>J.has(m))&&!A&&f===void 0,I.lastCandidateScanUnchanged=T,V&&!A&&f===void 0&&(I.lastCandidateKeys=Object.freeze(D));}A&&l.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:ot("DISCOVERY_TIME_LIMIT","apps","apps")});let W=qd(l,r,b);return ep(l,f,s.indexHash,b,r.productBundle!==void 0,W)}var Nd,en,Pd,Sd,pr,Od,Ir,Hd,gr,ip,op,Cr=k(()=>{g();ke();Pn();Ne();ho();Kt();Ce();qn();Ko();$n();zn();Zo();pi();Jn();Ii();Ii();Nd=Tn([]);en="crewx_local_app_",Pd=en,Sd=en;pr=["bundled","apps","skills"],Od=new TextDecoder("utf-8",{fatal:true});Ir=["","/ui"],Hd=["/dist"],gr=2000000000n;ip=_i,op=_i;});g();var kr="SKILL.md",dp=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function wr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function pp(e){return e.isDirectory()||e.isSymbolicLink()}function vr(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}var lp=["index.js","main.js"];function Of(e,n){let t=join(e,"package.json");if(existsSync(t))try{let r=JSON.parse(readFileSync(t,"utf8"));if(r.bin){let o=typeof r.bin=="string"?r.bin:Object.values(r.bin).find(a=>typeof a=="string");if(o){let a=resolve(e,o);if(existsSync(a))return a}}if(typeof r.main=="string"){let o=resolve(e,r.main);if(existsSync(o))return o}}catch{}let i=resolve(e,`${n}.js`);if(existsSync(i))return i;for(let r of lp){let o=resolve(e,r);if(existsSync(o))return o}}function up(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(dp);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!wr(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let r=wr(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(r?.version??i.version)=="string"?{version:r?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function fp(e){return [join(e,kr),join(e,"skill",kr)]}function st(e,n){if(!vr(e))return null;for(let t of fp(e)){if(!existsSync(t))continue;let r=up(t).frontmatter;return {name:r.name??n,...r.version===void 0?{}:{version:r.version},...r.description===void 0?{}:{description:r.description},skillMdPath:t,dir:e}}return null}function Ei(e){try{return readdirSync(e,{withFileTypes:!0}).filter(pp)}catch{return []}}function yp(e){return e.length===0||/[\\\u0000]/.test(e)?false:e.split("/").every(n=>n.length>0&&n!=="."&&n!=="..")}function xr(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function at(e){let n=[],t=new Set;for(let i of e)if(vr(i))for(let r of Ei(i)){if(r.name.startsWith("@")){let o=join(i,r.name);for(let a of Ei(o))xr(st(join(o,a.name),a.name),t,n);continue}xr(st(join(i,r.name),r.name),t,n);}return n.sort((i,r)=>i.name.localeCompare(r.name))}function Ap(e,n){if(!yp(e))throw new Error(`Skill not found: ${e}`);for(let i of n){let r=st(join(i,e),e);if(r)return r;for(let o of Ei(i)){if(!o.name.startsWith("@"))continue;let a=st(join(i,o.name,e),e);if(a)return a}}let t=at(n).find(i=>i.name===e);if(t)return t;throw new Error(`Skill not found: ${e}`)}async function Lf(e){if(!e||e.root===null)return {skills:[],diagnostics:[]};let{discoverWorkspaceApps:n}=await Promise.resolve().then(()=>(Cr(),Ur)),t=await n(e.root,{productBundle:e}),i=[],r=new Set;for(let o of t.apps){let a=o.provenance?.kind==="bundled"?o.provenance.packageDir:void 0;if(!a)continue;let s=join(e.root,...a.split("/"));for(let c of at([dirname(s)]))resolve(c.dir)!==resolve(s)||r.has(c.name)||(r.add(c.name),i.push(c));for(let c of [join(s,"skill"),join(s,"skills")])for(let d of at([c]))r.has(d.name)||(r.add(d.name),i.push(d));}return {skills:i.sort((o,a)=>o.name.localeCompare(a.name)),diagnostics:t.diagnostics.filter(o=>o.source==="bundled")}}var Rf=at,Uf=Ap;
-export{at as discover,Lf as discoverBundledProductSkills,Rf as discoverSkills,Of as findEntrypoint,up as readSkillFrontmatter,Ap as resolve,Uf as resolveSkill};
+import {join,resolve,dirname,relative,sep,isAbsolute}from'path';import'url';import {createHash}from'crypto';import {isIP}from'net';import {existsSync,readFileSync,statSync,readdirSync,constants}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import {load}from'js-yaml';var Hr=Object.defineProperty;var w=(e,n)=>()=>(e&&(n=e(e=0)),n);var zr=(e,n)=>{for(var t in n)Hr(e,t,{get:n[t],enumerable:true});};var g=w(()=>{});var U,Pn=w(()=>{g();U=class extends Error{constructor(t,i=t,r){super(i);this.code=t;this.currentRevision=r;}code;currentRevision;name="UiRuntimeError"};});function lt(e){return Gr.test(e)||Jr.test(e)}function ae(){throw new U("INPUT_INVALID","JSON value is not projection-safe")}function Kr(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function dt(e,n,t,i,r,o){if(n>i&&ae(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&($r.test(e)||Xr.test(e)&&!Zr(r,o)||Wr.test(e))&&ae(),e;if(typeof e=="number")return Number.isFinite(e)||ae(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&ae();let a=e;t.has(a)&&ae(),t.add(a);try{if(Array.isArray(e))return e.map(c=>dt(c,n+1,t,i,r,o));Kr(a)||ae();let s={};for(let[c,d]of Object.entries(e))lt(c)&&ae(),s[c]=dt(d,n+1,t,i,[...r,c],o);return s}finally{t.delete(a);}}function ce(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>qr)&&ae(),(!Array.isArray(t)||t.some(r=>typeof r!="string"))&&ae();let i=dt(e,0,new Set,Yr+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&ae(),i}function He(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((r,o)=>t[o]===r)}function Zr(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>He(t,i))}function ze(e){try{let n=JSON.stringify(e);return n===void 0&&ae(),n}catch{ae();}}function pt(e){return Array.isArray(e)?e.map(pt):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,pt(e[n])])):e}function Q(e){return ze(pt(e))}function ut(e){return Buffer.byteLength(e,"utf8")}var Gr,Jr,$r,Wr,Xr,Yr,qr,Ne=w(()=>{g();Pn();Gr=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Jr=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,$r=/<\/?[A-Za-z][^>]*>/,Wr=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,Xr=/^(?:https?|file|ftp|ws|wss):\/\//i;Yr=8,qr=4;});var Sn,ft=w(()=>{g();Sn=["text/plain","application/json"];});var Ti=w(()=>{g();ft();});function Ge(e){return es.has(e)||ns.test(e)||ts.test(e)}var Di,es,ns,ts,Mn,tn,me,yt,At,It,gt,mt,Ce=w(()=>{g();Di=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],es=new Set(Di),ns=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,ts=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Mn=/^[A-Za-z0-9_]+$/,tn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,me=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,yt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,At=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,It=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,gt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],mt=["inline","panel"];});function ht(e){return typeof e=="string"&&Sn.includes(e)}var Ni=w(()=>{g();ft();Ce();});function On(e){if(!_t(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!is(e.in)||Object.hasOwn(e,"out")&&!os(e.out))}function is(e){return _t(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&ht(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function os(e){return _t(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&ht(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function _t(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Et=w(()=>{g();Ti();Ni();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function Rn(e){return rs.includes(e)}function Un(e){return Number.isSafeInteger(e)&&e>=Ln.min&&e<=Ln.max}var rs,Ln,bi,Tt=w(()=>{g();rs=[5,15,30,60],Ln=Object.freeze({min:15e3,max:6e5,default:3e5}),bi=1;});function wn(e){return Number.isSafeInteger(e)&&e>=Cn.min&&e<=Cn.max}function kn(e){return ss.includes(e)}var Cn,Pi,ss,Dt=w(()=>{g();Cn=Object.freeze({min:6e4,max:18e5,default:6e5}),Pi=1,ss=["start","status","cancel"];});function oe(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.downloads!==void 0||e.legacy!==void 0||Object.values(e.actions).some(r=>r.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.downloads===void 0?{}:{downloads:e.downloads},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=ce(t);return createHash("sha256").update(Q(i)).digest("hex")}function bt(e){return `${e.id}\0${e.version}`}function de(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new U("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!cs.test(e.sourceHash)))throw new U("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||oe(e)!==e.hash)throw new U("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!ps(i)))throw new U("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new U("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new U("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new U("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&Nt(t.resultProjection),t.schedule!==void 0&&(!Rn(t.schedule.everyMinutes)||!Un(t.schedule.timeoutMs)))throw new U("DEFINITION_UNSUPPORTED","UI action schedule declaration is invalid");if(t.job!==void 0&&(typeof t.job!="object"||Object.keys(t.job).some(i=>i!=="deadlineMs")||!wn(t.job.deadlineMs)))throw new U("DEFINITION_UNSUPPORTED","UI action job declaration is invalid");if(t.jobAccess!==void 0&&(!Array.isArray(t.jobAccess)||t.jobAccess.length===0||new Set(t.jobAccess).size!==t.jobAccess.length||!t.jobAccess.every(kn)||t.job!==void 0))throw new U("DEFINITION_UNSUPPORTED","UI action job control declaration is invalid");if(t.content!==void 0&&!On(t.content))throw new U("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new U("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new U("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new U("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new U("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new U("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new U("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new U("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new U("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&Nt(e.stateProjection),e.summaryProjection){Nt(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new U("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(r=>!["readTool","actionTool","hostTools","agentAccess"].includes(r)))throw new U("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[r,o]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(o!==void 0){if(ds(o,r==="readTool"),n.has(o.name))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(o.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let r={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[o,a]of Object.entries(t)){if(!Object.hasOwn(r,o)||r[o]!==a||typeof a!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(a)||n.has(a))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(a);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([r,o])=>!r||!Object.hasOwn(e.actions,r)||o!=="allowed"&&o!=="denied")))throw new U("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new U("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.downloads!==void 0&&e.downloads!==true)throw new U("DEFINITION_UNSUPPORTED","UI definition downloads is invalid");if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>He(t,i))))throw new U("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function ds(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],r=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(o=>!i.includes(o)&&!(n&&o==="fixedResult"))||i.some(o=>!Object.hasOwn(t,o))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(o=>o!=="model"&&o!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let o=ce(t.inputSchema);if(o.type!==void 0&&o.type!=="object")throw new Error("schema type");if(r){if(!n)throw new Error("fixed result location");let a=t.fixedResult;if(!a||typeof a!="object"||Array.isArray(a))throw new Error("fixed result");let s=a;if(Object.keys(s).sort().join(",")!=="argsPolicy,structuredContent"||s.argsPolicy!=="empty-only"&&s.argsPolicy!=="ignore"||!s.structuredContent||typeof s.structuredContent!="object"||Array.isArray(s.structuredContent))throw new Error("fixed result");let c=ce(s.structuredContent);if(ut(ze(c))>4*1024)throw new Error("fixed result size")}}catch{throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function Nt(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new U("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function ps(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var cs,we=w(()=>{g();Ne();Pn();Et();Tt();Dt();cs=/^[0-9a-f]{64}$/;});var Si=w(()=>{g();Ne();});var q,be,Pt=w(()=>{g();q="dist/tools.json",be="dist/main.mjs";});var on,Mi=w(()=>{g();on="window";});function Oi(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!ls.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var ls,Li=w(()=>{g();ls=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function H(e){throw new St(e)}function Ds(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Ns(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&H("CSP_ORIGIN_INVALID"),t.value}function xn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=Ns(e,n);Array.isArray(t)||H("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(o=>typeof o!="string"||o!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(o))&&H("CSP_ORIGIN_INVALID");let r=[];for(let o=0;o<t.length;o+=1)(!Object.prototype.hasOwnProperty.call(t,o)||typeof t[o]!="string")&&H("CSP_ORIGIN_INVALID"),r.push(t[o]);return Object.keys(t).length!==t.length&&H("CSP_ORIGIN_INVALID"),r}function bs(e){let n;try{n=JSON.stringify(e);}catch{H("CSP_ORIGIN_INVALID");}return n===void 0&&H("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function Ci(e,n){/\s|\\/u.test(e)&&H("CSP_ORIGIN_INVALID");let t=ms.exec(e);t||H("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),r=t[2];(r.includes("@")||r.includes("%")||r.includes("*"))&&H("CSP_ORIGIN_INVALID"),(r.startsWith("[")?hs:_s).test(r)||H("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&H("CSP_ORIGIN_INVALID");let a;try{a=new URL(e);}catch{H("CSP_ORIGIN_INVALID");}(a.protocol!==`${i}:`||a.username!==""||a.password!==""||a.search!==""||a.hash!=="")&&H("CSP_ORIGIN_INVALID");let s=a.hostname.toLowerCase();if((!s||s.includes("%"))&&H("CSP_ORIGIN_INVALID"),!s.startsWith("[")){let d=s.endsWith(".")?s.slice(0,-1):s;(d.length===0||d.length>253)&&H("CSP_ORIGIN_INVALID"),d.split(".").some(u=>u.length>63||!Es.test(u))&&H("CSP_ORIGIN_INVALID");}let c=a.origin;return (c==="null"||!c.startsWith(`${i}://`))&&H("CSP_ORIGIN_INVALID"),{origin:c,hostname:s}}function Ps(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function wi(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function ji(e){let n=Ps(e);return wi(n,3221225472,24)?n!==3221225481&&n!==3221225482:Ts.some(([t,i])=>wi(n,t,i))}function Ss(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((o,a)=>o<<16n|BigInt(Number.parseInt(a,16)),0n)}function Ms(e){let n=Ss(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let r=Number(n&0xffffffffn);return ji([r>>>24&255,r>>>16&255,r>>>8&255,r&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function Os(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return ji(t);if(i===6)return Ms(t);let r=e.toLowerCase().replace(/\.$/,"");return !r||!r.includes(".")||n.has(r)?true:gs.some(o=>r===o||r.endsWith(`.${o}`))}function ki(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function xi(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function vi(e,n={}){if(e===void 0){let A=xi({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(A,"utf8").digest("hex")})}Ds(e)||H("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(A=>typeof A!="string")&&H("CSP_ORIGIN_INVALID"),t.some(A=>!Is.has(A))&&H("CSP_AXIS_UNKNOWN");let i=xn(e,"connectDomains"),r=xn(e,"frameDomains"),o=xn(e,"resourceDomains"),a=xn(e,"baseUriDomains");(o.length>0||a.length>0)&&H("CSP_AXIS_UNSUPPORTED"),(bs(e)>fs||i.length>Ui||r.length>Ui||i.length+r.length>ys||[...i,...r].some(A=>new TextEncoder().encode(A).byteLength>As))&&H("CSP_LIMIT_EXCEEDED");let c=i.map(A=>Ci(A,"connectDomains")),d=r.map(A=>Ci(A,"frameDomains")),l=new Set((n.runtimeHostnames??[]).map(A=>A.toLowerCase().replace(/\.$/,"")));[...c,...d].some(A=>Os(A.hostname,l))&&H("CSP_ORIGIN_FORBIDDEN");let u={declared:true,connectDomains:ki(c),frameDomains:ki(d)},f=xi(u);return Object.freeze({...u,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(f,"utf8").digest("hex")})}var fs,Ui,ys,As,Is,gs,ms,hs,_s,Es,Ts,St,Vi=w(()=>{g();fs=4096,Ui=16,ys=32,As=512,Is=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),gs=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],ms=/^(https|wss):\/\/([^/?#]+)$/i,hs=/^\[[^\]]+\](?::[0-9]+)?$/,_s=/^[^:\[\]]+(?::[0-9]+)?$/,Es=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,Ts=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],St=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function sn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function p(e,n=e,t,i){throw new re(e,n,t,i)}function B(e,n){try{return n()}catch(t){throw t instanceof re?t.withPathPrefix(e):t}}function z(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function M(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function da(e,n){let t={};for(let[i,r]of Object.entries(e))n.includes(i)||(t[i]=r);return t}function $(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e).find(a=>!i.has(a));r!==void 0&&p("MANIFEST_INVALID","MANIFEST_INVALID",r,"unknown-key");let o=n.find(a=>!M(e,a));o!==void 0&&p("MANIFEST_INVALID","MANIFEST_INVALID",o,"missing-key");}function Fn(e,n=false,t=false,i=false){return Cs.test(e)||!i&&ks.test(e)||ws.test(e)||t&&Fi.test(e)||xs.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Fi.test(e))}function Vn(e,n=new Set,t=0,i=false,r=false,o=""){if(typeof e=="string"){Fn(e,i,r)&&p("UNSAFE_VALUE","UNSAFE_VALUE",o,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&p("MANIFEST_INVALID","MANIFEST_INVALID",o),n.add(e);try{if(Array.isArray(e)){e.forEach((a,s)=>Vn(a,n,t+1,!1,!1,sn(o,`[${s}]`)));return}z(e)||p("MANIFEST_INVALID","MANIFEST_INVALID",o);for(let[a,s]of Object.entries(e))Vn(s,n,t+1,i&&t===0&&(a==="name"||a==="description"),r,sn(o,a));}finally{n.delete(e);}}}function he(e,n){let t=e[n];return typeof t!="string"&&p("MANIFEST_INVALID"),t}function ue(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&p("MANIFEST_INVALID"),i}function Mt(e){return Us.test(e)||p("MANIFEST_INVALID"),e}function Je(e){return Rs.test(e)||p("TOKEN_INVALID"),e}function pa(e){return Ki.test(e)||p("MANIFEST_INVALID"),e}function la(e){z(e)||p("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let r=pa(t);z(i)||p("MANIFEST_INVALID");let o=i.type;if(o==="text"){$(i,["type","maxLength"]),n[r]={type:o,maxLength:ue(i,"maxLength",1)};continue}if(o==="text-list"){$(i,["type","max","itemMaxLength"]),n[r]={type:o,max:ue(i,"max",0),itemMaxLength:ue(i,"itemMaxLength",1)};continue}if(o==="step-list"){$(i,["type","min","max","labelMaxLength","detailMaxLength"]);let a=ue(i,"min",0),s=ue(i,"max",1);a>s&&p("MANIFEST_INVALID"),n[r]={type:o,min:a,max:s,labelMaxLength:ue(i,"labelMaxLength",1),detailMaxLength:ue(i,"detailMaxLength",1)};continue}typeof o=="string"&&p("SCHEMA_TYPE_UNSUPPORTED"),p("MANIFEST_INVALID");}return n}function ua(e,n,t){let i=e[n];(!i||i.type!==t)&&p("MANIFEST_INVALID");}function jn(e,n,t){let i=he(e,"field");return Ki.test(i)||p("MANIFEST_INVALID"),ua(n,i,t),i}function fa(e,n){z(e)||p("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&p("MANIFEST_INVALID"),ca.includes(t)||p("PRIMITIVE_UNKNOWN"),t){case "card-shell":return $(e,["primitive"]),{primitive:t};case "meta-banner":return $(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:Je(he(e,"badgeToken")),noticeToken:Je(he(e,"noticeToken"))};case "heading":return $(e,["primitive","field"]),{primitive:t,field:jn(e,n,"text")};case "labeled-text":return $(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&p("MANIFEST_INVALID"),{primitive:t,titleToken:Je(he(e,"titleToken")),field:jn(e,n,"text"),variant:"callout"};case "step-flow":return $(e,["primitive","titleToken","field"]),{primitive:t,titleToken:Je(he(e,"titleToken")),field:jn(e,n,"step-list")};case "text-list":{$(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:Je(he(e,"titleToken")),field:jn(e,n,"text-list")};return M(e,"emptyToken")&&(i.emptyToken=Je(he(e,"emptyToken"))),M(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&p("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return p("MANIFEST_INVALID")}function ya(e,n){return Array.isArray(e)||p("MANIFEST_INVALID"),e.map(t=>fa(t,n))}function X(e="v2 manifest exceeds a contract limit",n,t){return p("LIMIT_EXCEEDED",e,n,t)}function pe(e="initial state is not projection-safe"){return p("INITIAL_STATE_INVALID",e)}function Bi(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||ta.test(e)||ia.test(e))&&p("MANIFEST_INVALID",`${n} is invalid`),(Fn(e,true,true)||js.test(e)||vs.test(e)||Vs.test(e))&&p("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Ot(e,n){return (typeof e!="string"||!me.test(e))&&p("MANIFEST_INVALID",`${n} is invalid`),e}function Aa(e){return (typeof e!="string"||!yt.test(e)||e==="*"||e==="all")&&p("MANIFEST_INVALID","action capability is invalid"),e}function Yi(e){return (typeof e!="string"||!na.test(e))&&p("MANIFEST_INVALID","resource hash is invalid"),e}function Lt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&X("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||p("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&p("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&p("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&X("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&p("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&X("v2 manifest array is too long",i,"array-too-long"),e.forEach((r,o)=>Lt(r,n,t+1,sn(i,`[${o}]`)));return}z(e)||p("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[r,o]of Object.entries(e))Lt(o,n,t+1,sn(i,r));}finally{n.delete(e);}}}function qi(e){return (typeof e!="string"||e.length>4096||!tn.test(e))&&(typeof e=="string"&&e.length>4096&&X("projection path is too long"),p("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>Ge(t))&&p("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Rt(e){z(e)||p("MANIFEST_INVALID","projection policy must be an object"),$(e,["allow"]),Array.isArray(e.allow)||p("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&X("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let r=qi(i);t.has(r)&&p("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(r),n.push(r);}return {allow:n}}function Ia(e,n){if(e===void 0)return;Array.isArray(e)||p("MANIFEST_INVALID","dataPaths must be an array"),e.length>oa&&X("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let r of e){let o=qi(r);i.has(o)&&p("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(a=>He(o,a))||p("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(o),t.push(o);}return t}function ga(e){Array.isArray(e)||p("MANIFEST_INVALID","deviceFeatures must be an array",void 0,"array"),e.length>ra&&p("MANIFEST_INVALID","deviceFeatures allow at most 16 names",void 0,"too-many-items");let n=[],t=new Set;for(let[i,r]of e.entries()){let o=`[${i}]`;typeof r!="string"&&p("MANIFEST_INVALID","a device feature name must be a string",o,"string"),r.length===0&&p("MANIFEST_INVALID","a device feature name must not be empty",o,"empty"),r.length>sa&&p("MANIFEST_INVALID","a device feature name is at most 32 characters",o,"too-long"),aa.test(r)||p("MANIFEST_INVALID","a device feature name starts with a lowercase letter and holds only letters and digits",o,"format"),t.has(r)&&p("MANIFEST_INVALID","deviceFeatures contain a duplicate name",o,"duplicate-item"),t.add(r),n.push(r);}return n}function ma(e){if(e!==false)return e!==true&&p("MANIFEST_INVALID","downloads must be true or false",void 0,"boolean"),true}function $e(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&p("MANIFEST_INVALID",`${n} is invalid`),e}function Hi(e,n){return (typeof e!="number"||!Number.isFinite(e))&&p("MANIFEST_INVALID",`${n} is invalid`),e}function Ut(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||Fn(e))&&p("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&X("schema enum is too deep"),t.has(e)&&p("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&X("schema enum array is too long"),e.map(r=>Ut(r,n+1,t));z(e)||p("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[r,o]of Object.entries(e))Ge(r)&&p("MANIFEST_INVALID","schema enum contains a reserved key"),i[r]=Ut(o,n+1,t);return i}finally{t.delete(e);}}function ha(e,n){if(e===void 0)return;Array.isArray(e)||p("MANIFEST_INVALID","schema required must be an array"),e.length>64&&X("schema required list is too long");let t=[],i=new Set;for(let r of e)(typeof r!="string"||!tn.test(r))&&p("MANIFEST_INVALID","schema required contains an invalid key"),r.length>4096&&X("schema required key is too long"),i.has(r)&&p("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,r)&&p("MANIFEST_INVALID","schema required references an undeclared property"),i.add(r),t.push(r);return t}function _a(e,n){let t=n?tn:Mn;return e.length>4096&&X("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>Ge(i)))&&p("MANIFEST_INVALID","schema property name is invalid"),e}function Ct(e,n=0,t=false){z(e)||p("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&X("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&p("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),p("MANIFEST_INVALID","action inputSchema type is required"));let r=["type","enum"];i==="string"&&r.push("minLength","maxLength"),i==="array"&&r.push("minItems","maxItems","items"),i==="object"&&r.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&r.push("minimum","maximum"),$(e,["type"],r.filter(s=>s!=="type"));let o={type:i};if(M(e,"enum")&&(Array.isArray(e.enum)||p("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&X("schema enum is too long"),o.enum=e.enum.map(s=>Ut(s))),i==="string"&&(M(e,"minLength")&&(o.minLength=$e(e.minLength,"schema minLength",4096)),M(e,"maxLength")&&(o.maxLength=$e(e.maxLength,"schema maxLength",4096)),o.minLength!==void 0&&o.maxLength!==void 0&&o.minLength>o.maxLength&&p("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(M(e,"minimum")&&(o.minimum=Hi(e.minimum,"schema minimum")),M(e,"maximum")&&(o.maximum=Hi(e.maximum,"schema maximum")),o.minimum!==void 0&&o.maximum!==void 0&&o.minimum>o.maximum&&p("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(M(e,"minItems")&&(o.minItems=$e(e.minItems,"schema minItems",128)),M(e,"maxItems")&&(o.maxItems=$e(e.maxItems,"schema maxItems",128)),o.minItems!==void 0&&o.maxItems!==void 0&&o.minItems>o.maxItems&&p("MANIFEST_INVALID","schema array length bounds are inverted"),M(e,"items")&&(o.items=Ct(e.items,n+1,false))),i==="object"){let s;if(M(e,"properties")){z(e.properties)||p("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&X("schema properties are too many"),s={};for(let[l,u]of d){let f=_a(l,t);s[f]=Ct(u,n+1,false);}o.properties=s;}M(e,"minProperties")&&(o.minProperties=$e(e.minProperties,"schema minProperties",64)),M(e,"maxProperties")&&(o.maxProperties=$e(e.maxProperties,"schema maxProperties",64)),o.minProperties!==void 0&&o.maxProperties!==void 0&&o.minProperties>o.maxProperties&&p("MANIFEST_INVALID","schema object property bounds are inverted");let c=ha(e.required,s);c!==void 0&&(o.required=c),M(e,"additionalProperties")&&(e.additionalProperties!==false&&p("MANIFEST_INVALID","schema additionalProperties must be false"),o.additionalProperties=false);}let a=JSON.stringify(o);return (a===void 0||Buffer.byteLength(a,"utf8")>2097152)&&X("action inputSchema subtree is too large"),o}function Ea(e){let n=Ct(e,0,true);return (n.type!=="object"||!n.properties)&&p("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function Ta(e){if(z(e)||p("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){$(e,Ks);let n=e.handler;return (typeof n!="string"||!At.test(n))&&p("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&M(e,"entry"))return $(e,Zs),e.entry!==be&&p("MANIFEST_INVALID",`skill backend entry must be ${be}`),{type:"skill",entry:be};if(e.type==="skill"){$(e,Ys,qs),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&p("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!It.test(i))&&p("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=M(e,"env")?Sa(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}p("MANIFEST_INVALID","action backend type is unsupported");}function Da(e){z(e)||p("MANIFEST_INVALID","action must be an object"),$(e,zs,Gs),M(e,"_meta")&&B("_meta",()=>Zi(e._meta));let n=B("actionId",()=>Ot(e.actionId,"actionId"));lt(n)&&p("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=B("capability",()=>Aa(e.capability)),i=e.mutation;typeof i!="boolean"&&p("MANIFEST_INVALID","action mutation must be boolean","mutation");let r=B("inputSchema",()=>Ea(e.inputSchema)),o;if(M(e,"dataInputs")){Array.isArray(e.dataInputs)||p("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let A=r.properties,I=new Set,h=[];for(let T of e.dataInputs)(typeof T!="string"||!M(A,T)||I.has(T))&&p("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),I.add(T),h.push(T);o=h;}let a=B("resultProjection",()=>Rt(e.resultProjection)),s=B("backend",()=>Ta(e.backend)),c;M(e,"content")&&((s.type!=="skill"||!On(e.content))&&p("MANIFEST_INVALID","action content declaration is invalid","content"),c=Ma(e.content));let d;if(M(e,"confirmation")){let A=e.confirmation;A!=="none"&&A!=="native"&&p("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=A;}let l;M(e,"schedule")&&(l=B("schedule",()=>Pa(e.schedule,{backend:s,inputSchema:r,hasContent:c!==void 0,hasDataInputs:o!==void 0,confirmation:d})));let u;M(e,"job")&&(l!==void 0&&p("MANIFEST_INVALID","an action is either the scheduled run or a job, not both","job"),u=B("job",()=>ba(e.job,{backend:s,inputSchema:r,hasContent:c!==void 0,hasDataInputs:o!==void 0,confirmation:d})));let f;return M(e,"jobAccess")&&(u!==void 0&&p("MANIFEST_INVALID","an action is either the job or a job control, not both","jobAccess"),f=B("jobAccess",()=>Na(e.jobAccess,{backend:s,hasContent:c!==void 0}))),{actionId:n,capability:t,mutation:i,inputSchema:r,resultProjection:a,backend:s,...c===void 0?{}:{content:c},...o===void 0?{}:{dataInputs:o},...d===void 0?{}:{confirmation:d},...l===void 0?{}:{schedule:l},...u===void 0?{}:{job:u},...f===void 0?{}:{jobAccess:f}}}function Na(e,n){return (n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","jobAccess needs a tool-mode action","jobAccess"),n.hasContent&&p("MANIFEST_INVALID","a job control action takes no content","jobAccess"),(!Array.isArray(e)||e.length===0)&&p("MANIFEST_INVALID","jobAccess must list at least one operation","jobAccess"),(new Set(e).size!==e.length||!e.every(kn))&&p("MANIFEST_INVALID","jobAccess must name each operation once: start, status or cancel","jobAccess"),Object.freeze([...e])}function ba(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","job needs a tool-mode action","job"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&p("MANIFEST_INVALID","a job action takes no content, dataInputs or native confirmation","job"),(n.inputSchema.required??[]).length>0&&p("MANIFEST_INVALID","a job action input must accept {}","inputSchema.required"),z(e)||p("MANIFEST_INVALID","job must be an object","job"),$(e,[],Ws);let t=M(e,"deadlineMs")?e.deadlineMs:Cn.default;return wn(t)||p("MANIFEST_INVALID","job deadlineMs is invalid","job.deadlineMs"),{deadlineMs:t}}function Pa(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==be)&&p("MANIFEST_INVALID","schedule needs a tool-mode action","schedule"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&p("MANIFEST_INVALID","a scheduled action takes no content, dataInputs or native confirmation","schedule"),(n.inputSchema.required??[]).length>0&&p("MANIFEST_INVALID","a scheduled action input must accept {}","inputSchema.required"),z(e)||p("MANIFEST_INVALID","schedule must be an object","schedule"),$(e,Js,$s),Rn(e.everyMinutes)||p("MANIFEST_INVALID","schedule everyMinutes is invalid","schedule.everyMinutes");let t=M(e,"timeoutMs")?e.timeoutMs:Ln.default;return Un(t)||p("MANIFEST_INVALID","schedule timeoutMs is invalid","schedule.timeoutMs"),{everyMinutes:e.everyMinutes,timeoutMs:t}}function Sa(e){return Oi(e)||p("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function Ma(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Oa(e){return z(e)||p("INITIAL_STATE_INVALID","initialState must be an object"),$(e,Qs,ea),e.path!=="ui/state.json"&&p("MANIFEST_INVALID","initialState path is not fixed"),M(e,"hash")?{path:"ui/state.json",hash:Yi(e.hash)}:{path:"ui/state.json"}}function La(e){let n=["wasm","terminal","htmlDocuments","appBrowser"];return (!z(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&p("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{},...e.appBrowser===true?{appBrowser:true}:{}}}function Ra(e,n){let t;try{t=vi(e);}catch(i){let r=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return p("MANIFEST_INVALID",r,void 0,r.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&p("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&p("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function Ua(e,n){Vn(z(e)?da(e,["csp","downloads"]):e,new Set,0,true,true),Lt(e),z(e)||p("MANIFEST_INVALID"),$(e,Bs,Hs),M(e,"_meta")&&B("_meta",()=>Zi(e._meta)),e.manifestVersion!==2&&p("MANIFEST_INVALID");let t;M(e,"runtime")&&(t=B("runtime",()=>La(e.runtime)));let i;M(e,"csp")&&(i=B("csp",()=>Ra(e.csp,t)));let r=B("pluginId",()=>Ot(e.pluginId,"pluginId")),o=B("definitionId",()=>Ot(e.definitionId,"definitionId")),a=B("version",()=>ue(e,"version",1)),s=B("name",()=>Bi(e.name,"name")),c=B("description",()=>Bi(e.description,"description")),d;M(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&p("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let l;M(e,"tone")&&((typeof e.tone!="string"||!gt.includes(e.tone))&&p("MANIFEST_INVALID","tone is invalid","tone"),l=e.tone),e.entry!=="ui/index.html"&&p("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let u;M(e,"entryHash")&&(u=B("entryHash",()=>Yi(e.entryHash)));let f;M(e,"initialState")&&(f=B("initialState",()=>Oa(e.initialState)));let A;M(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&p("MANIFEST_INVALID","usage is invalid","usage"),A=e.usage);let I;M(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&p("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),I=e.detailPanel);let h;if(M(e,"displayModes")){((A??on)!==on||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&p("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let P=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(R=>typeof R!="string"||!P.has(R)))&&p("MANIFEST_INVALID","displayModes are invalid","displayModes"),h=e.displayModes;}(A??on)===on&&I!==void 0&&p("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let T=n.mode??"local";T!=="local"&&T!=="installed"&&T!=="published"&&p("MANIFEST_INVALID","manifest mode is invalid"),T!=="local"&&u===void 0&&p("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),T!=="local"&&f!==void 0&&f.hash===void 0&&p("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&p("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&X("surfaces exceed the v2 limit","surfaces","too-many-items");let G=[],V=new Set;for(let P of e.surfaces)(typeof P!="string"||!mt.includes(P))&&p("MANIFEST_INVALID","surface is unsupported","surfaces"),V.has(P)&&p("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),V.add(P),G.push(P);z(e.size)||p("MANIFEST_INVALID","size must be an object","size"),B("size",()=>$(e.size,["height"]));let b=B("size",()=>ue(e.size,"height",1));b>720&&X("size.height exceeds the v2 limit","size.height","too-large");let C=B("stateProjection",()=>Rt(e.stateProjection)),W=e.summaryProjection===void 0?void 0:B("summaryProjection",()=>Rt(e.summaryProjection));W!==void 0&&W.allow.some(P=>!C.allow.includes(P))&&p("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let D=B("dataPaths",()=>Ia(e.dataPaths,C.allow)),O=M(e,"deviceFeatures")?B("deviceFeatures",()=>ga(e.deviceFeatures)):void 0,S=M(e,"downloads")?B("downloads",()=>ma(e.downloads)):void 0;Array.isArray(e.actions)||p("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&X("actions exceed the v2 limit","actions","too-many-items");let y=[],m=new Set,N=0,L=0;for(let[P,R]of e.actions.entries()){let J=`actions[${P}]`,v=B(J,()=>Da(R));if(m.has(v.actionId)&&p("MANIFEST_INVALID","actions contain a duplicate actionId",`${J}.actionId`,"duplicate-item"),v.schedule!==void 0&&(N+=1,N>bi&&p("MANIFEST_INVALID","an App declares at most one scheduled action",`${J}.schedule`,"duplicate-item")),v.job!==void 0&&(L+=1,L>Pi&&p("MANIFEST_INVALID","an App declares at most one job action",`${J}.job`,"duplicate-item")),v.backend.type==="core"&&v.backend.handler==="state.set"){v.mutation||p("MANIFEST_INVALID","state.set actions must be mutations",`${J}.mutation`);for(let ge of Object.keys(v.inputSchema.properties))C.allow.includes(ge)||p("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${J}.inputSchema.properties`);}m.add(v.actionId),y.push(v);}return {manifestVersion:2,pluginId:r,definitionId:o,version:a,name:s,description:c,...d===void 0?{}:{icon:d},...l===void 0?{}:{tone:l},entry:"ui/index.html",...u===void 0?{}:{entryHash:u},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...f===void 0?{}:{initialState:f},...A===void 0?{}:{usage:A},...I===void 0?{}:{detailPanel:I},...h===void 0?{}:{displayModes:h},surfaces:G,size:{height:b},stateProjection:C,...W===void 0?{}:{summaryProjection:W},...D===void 0?{}:{dataPaths:D},...O===void 0?{}:{deviceFeatures:O},...S===void 0?{}:{downloads:S},actions:y}}function Zi(e){z(e)||p("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>Xs)&&X("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function Ca(e){let n={},t={};for(let o of e.actions){n[o.actionId]={capabilities:[o.capability],inputKeys:Object.keys(o.inputSchema.properties??{}),...o.dataInputs===void 0?{}:{dataInputs:o.dataInputs},resultProjection:o.resultProjection,...o.confirmation===void 0?{}:{confirmation:o.confirmation},...o.content===void 0?{}:{content:o.content},...o.schedule===void 0?{}:{schedule:o.schedule},...o.job===void 0?{}:{job:o.job},...o.jobAccess===void 0?{}:{jobAccess:o.jobAccess},...o.backend.type!=="skill"||o.backend.env===void 0?{}:{env:o.backend.env}};let a=o.backend.type==="skill"||o.backend.type==="core"&&o.backend.handler==="state.set";t[o.actionId]={actionId:o.actionId,mutation:o.mutation,backend:o.backend,launchPolicy:a?"allowed":"denied",...a?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.downloads===void 0?{}:{downloads:e.downloads},actions:n},r={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:r}}function wt(e,n,t,i,r,o){if(typeof e=="string"){let a=r.length>0&&o.some(s=>He(r.join("."),s));return (e.length>4096||Fn(e,false,false,a))&&pe("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||pe("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&pe("state contains a non-JSON value"),t>8&&pe("state is too deep"),n.has(e)&&pe("state contains a cycle"),n.add(e);try{let a;if(Array.isArray(e))e.length>128&&pe("state array is too long"),a=e.map(c=>wt(c,n,t+1,2097152,r,o));else {z(e)||pe("state contains a non-plain object");let c={};for(let[d,l]of Object.entries(e))(d.length>4096||!Mn.test(d)||Ge(d))&&(d.length>4096&&pe("state key is too long"),pe("state contains a reserved or invalid key")),c[d]=wt(l,n,t+1,2097152,[...r,d],o);a=c;}let s=JSON.stringify(a);return (s===void 0||Buffer.byteLength(s,"utf8")>i)&&pe("state subtree is too large"),a}finally{n.delete(e);}}function xt(e,n=[]){z(e)||pe("initial state must be a JSON object");let t=wt(e,new Set,0,2097152,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&pe(),t}function wa(e,n={}){Vn(e),z(e)||p("MANIFEST_INVALID"),$(e,Fs),e.manifestVersion!==1&&p("MANIFEST_INVALID");let t=Mt(he(e,"pluginId")),i=Mt(he(e,"definitionId")),r=ue(e,"version",1),o=ue(e,"primitiveSet",1),a=n.supportedPrimitiveSet??Ls;(!Number.isSafeInteger(a)||a<1)&&p("MANIFEST_INVALID"),o>a&&p("PRIMITIVE_SET_UNSUPPORTED"),z(e.activation)||p("MANIFEST_INVALID"),$(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&p("MANIFEST_INVALID");let s=Mt(he(e.activation,"language")),c=la(e.schema),d=ya(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:r,primitiveSet:o,activation:{kind:"fenced-code",language:s},schema:c,layout:d}}function ka(e,n={}){return z(e)||p("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&p("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Ua(e,n):wa(e,n)}function an(e,n={}){try{return ka(e,n)}catch(t){if(t instanceof re)throw t;return p("MANIFEST_INVALID")}}function cn(e,n={}){let t=an(e,n);return t.manifestVersion===2?Ca(t):t}var Ls,Rs,Us,Ki,Cs,ws,ks,xs,Fi,js,vs,Vs,Fs,Bs,Hs,zs,Gs,Js,$s,Ws,Xs,Ks,Ys,qs,Zs,Qs,ea,na,ta,ia,oa,ra,sa,aa,ca,re,jt=w(()=>{g();Mi();Ne();Et();Li();Pt();Tt();Dt();Vi();Ce();Ls=1,Rs=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Us=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ki=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Cs=/<\/?[A-Za-z][^>]*>/,ws=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,ks=/^(?:https?|file|ftp|ws|wss):\/\//i,xs=/^\s*(?:javascript|data):/i,Fi=/data:[^,\s]*,/i,js=/(?:https?|file|ftp|ws|wss):\/\//i,vs=/javascript:/i,Vs=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,Fs=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],Bs=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],Hs=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","deviceFeatures","downloads"],zs=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Gs=["confirmation","dataInputs","content","schedule","job","jobAccess","_meta"],Js=["everyMinutes"],$s=["timeoutMs"],Ws=["deadlineMs"],Xs=4*1024,Ks=["type","handler"],Ys=["type","command"],qs=["env"],Zs=["type","entry"],Qs=["path"],ea=["hash"],na=/^[0-9a-f]{64}$/,ta=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,ia=/[\r\n]/,oa=16,ra=16,sa=32,aa=/^[a-z][A-Za-z0-9]{0,31}$/,ca=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],re=class e extends Error{constructor(t,i=t,r,o){super(i);this.code=t;this.path=r;this.rule=o;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,sn(t,this.path),this.rule)}};});function oo(e){return typeof e=="string"&&e.length<=ja&&xa.test(e)}function j(e,n,t,i,r){throw new Ee(e,{path:n,rule:t,...i===void 0?{}:{message:i},...r===void 0?{}:{file:r}})}function ee(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function K(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function ye(e){let n=`_meta["${Le}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function Ba(e){return e.toLowerCase().replace(/_/g,"-")}function Ha(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return ye(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return ye("definitionVersion");case "definitionId":return ye("definitionId");default:return ye(`${t}${i}`)}}function ro(e,n,t){return {path:t(e.path),rule:e.rule??Ba(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function so(e){return JSON.parse(JSON.stringify(e))}function Ft(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&j("LIMIT_EXCEEDED",n,"string-too-long"),(va.test(e)||Va.test(e)||Fa.test(e))&&j("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||j("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&j("MANIFEST_INVALID",n,"non-json-value"),t>8&&j("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&j("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&j("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((r,o)=>Ft(r,`${n}[${o}]`,t+1,i));return}ee(e)||j("MANIFEST_INVALID",n,"non-plain-object");for(let[r,o]of Object.entries(e))Ft(o,n===""?r:`${n}.${r}`,t+1,i);}finally{i.delete(e);}}}function fe(e,n){return (typeof e!="string"||e.length===0)&&j("MANIFEST_INVALID",n,"string"),e}function Xe(e,n){return ee(e)||j("MANIFEST_INVALID",n,"object"),e}function za(e,n){Array.isArray(e)||j("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>fe(t,`${n}[${i}]`));}function Ga(e,n){typeof e!="boolean"&&j("MANIFEST_INVALID",n,"boolean");}function dn(e,n,t,i){for(let r of Object.keys(e))!t.includes(r)&&!i.includes(r)&&j("MANIFEST_INVALID",`${n}.${r}`,"unknown-key");for(let r of t)K(e,r)||j("MANIFEST_INVALID",`${n}.${r}`,"missing-key");}function Ja(e,n){if(e!=="icon")switch(Ft(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "license":fe(n,e);return;case "author":{let t=Xe(n,e);dn(t,e,["name"],["email","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "repository":{let t=Xe(n,e);dn(t,e,[],["type","url"]);for(let i of Object.keys(t))fe(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["src","size"],["theme"]),fe(o.src,`${r}.src`),fe(o.size,`${r}.size`),K(o,"theme")&&fe(o.theme,`${r}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":za(n,e);return;case "tools":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["name"],["description"]),fe(o.name,`${r}.name`),K(o,"description")&&fe(o.description,`${r}.description`);});return}case "prompts":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let r=`${e}[${i}]`,o=Xe(t,r);dn(o,r,["name","text"],["description","arguments"]),fe(o.name,`${r}.name`),fe(o.text,`${r}.text`);});return}case "tools_generated":case "prompts_generated":Ga(n,e);return;case "localization":case "compatibility":case "user_config":Xe(n,e);return;default:j("MANIFEST_INVALID",e,"unknown-key");}}function Bn(e){return typeof e=="string"&&me.test(e)?e:void 0}function ao(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function $a(e){let n=Bn(e.name);if(n===void 0)return;let t=e._meta,i=ee(t)?t[Le]:void 0,r=ee(i)?i:{},o=K(r,"definitionId")?Bn(r.definitionId):n,a=K(r,"definitionVersion")?ao(r.definitionVersion):1;return {pluginId:n,...o===void 0?{}:{definitionId:o},...a===void 0?{}:{definitionVersion:a}}}function Wa(e){let n=Bn(e.pluginId);if(n===void 0)return;let t=Bn(e.definitionId),i=ao(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function Gt(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!ee(n))return !1;let t=n._meta;return ee(t)&&K(t,Le)}catch{return  false}}function Xa(e,n){if(e===xe)return n.builtinOnly===true;let t=n._meta,i=ee(t)?t[Le]:void 0;return ee(i)&&i.builtinOnly===true}function Ka(e,n){K(e,"server")&&j("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let s of Object.keys(e))Ht.includes(s)||j("MANIFEST_INVALID",s,"unknown-key");for(let s of zt)K(e,s)||j("MANIFEST_INVALID",s,"missing-key");e.manifest_version!==vt&&j("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${vt}"`),oo(e.version)||j("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;ee(t)||j("MANIFEST_INVALID","_meta","object"),K(t,Le)||j("MANIFEST_INVALID",ye(),"missing-key");let i=t[Le];ee(i)||j("MANIFEST_INVALID",ye(),"object");for(let s of Object.keys(i))Vt.includes(s)||io.includes(s)||j("MANIFEST_INVALID",ye(s),"unknown-key");for(let s of Vt)s==="actions"&&n!==void 0||K(i,s)||j("MANIFEST_INVALID",ye(s),"missing-key");if(n!==void 0&&K(i,"actions")&&j("MANIFEST_INVALID",ye("actions"),"two-truths",`actions are declared in both ${Y} and ${q}; a server.ts App keeps them in the tools file only`),Ya(i.actions),K(i,"definitionVersion")){let s=i.definitionVersion;(!Number.isSafeInteger(s)||s<1)&&j("MANIFEST_INVALID",ye("definitionVersion"),"positive-integer");}let r={};for(let s of to)K(e,s)&&(Ja(s,e[s]),r[s]=so(e[s]));let o={};for(let[s,c]of Object.entries(t))s!==Le&&(o[s]=c);let a={manifestVersion:2,pluginId:e.name,definitionId:K(i,"definitionId")?i.definitionId:e.name,version:K(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[s,c]of Object.entries(i))s==="definitionId"||s==="definitionVersion"||(a[s]=c);return n!==void 0&&(a.actions=n.map(s=>({...s,backend:{type:"skill",entry:be}}))),Object.keys(o).length>0&&(a._meta=o),{v2Input:a,...Object.keys(o).length>0?{vendorMeta:o}:{},passthrough:r}}function Ya(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=ee(n)?n.backend:void 0;ee(i)&&K(i,"entry")&&j("MANIFEST_INVALID",ye(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${Y} cannot name an entry; a server.ts App declares its actions in ${q}`);});}function qa(e,n,t){ee(e)||j("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",Y);let i;try{i=Ka(e,t);}catch(a){throw a instanceof Ee?new Ee(a.code,{...a.reason,file:Y}):a}let r;try{let a=an(i.v2Input,{mode:n.mode??"local"});a.manifestVersion!==2&&j("MANIFEST_INVALID","","v2-required"),r=a;}catch(a){throw a instanceof re?new Ee(a.code,ro(a,Y,Ha)):a}let o=e.tools;if(Array.isArray(o)){let a=new Set(r.actions.map(s=>s.actionId));o.forEach((s,c)=>{let d=s.name;if(!a.has(d))throw new Ee("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:Y})});}return {file:Y,manifest:r,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function Za(e,n){try{let t=an(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new Ee("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:xe});return {file:xe,manifest:t,v2Input:e}}catch(t){throw t instanceof re?new Ee(t.code,ro(t,xe,i=>i??"")):t}}function Bt(e){return oe(cn(e).definition)}function eo(e){let{entryHash:n,initialState:t,...i}=e,r={...i};return t!==void 0&&(r.initialState={path:t.path}),so(r)}function Qa(e,n){let t=eo(e),i=eo(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(o=>Q(t[o]??null)!==Q(i[o]??null))}function ec(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function nc(e,n){let t=Qa(e,n),i=ec(e,n),r="";try{let o=Bt(e),a=Bt(n);i=i||o!==a,r=` (definition hash ${o.slice(0,12)} vs ${a.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||j("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${Y} and ${xe} normalize to different definitions${r}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function _e(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:q},files:[]}}function no(e){return {..._e("","tools-needs-manifest-json","MANIFEST_INVALID",`${q} is read with ${Y} only`),files:e}}function tc(e,n){if(e.byteLength>n)return {failure:_e("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:_e("","invalid-json")}}if(!ee(t))return {failure:_e("","not-object","MANIFEST_INVALID",`${q} must be a JSON object`)};for(let r of Object.keys(t))if(r!=="schemaVersion"&&r!=="actions")return {failure:_e(r,"unknown-key")};for(let r of ["schemaVersion","actions"])if(!K(t,r))return {failure:_e(r,"missing-key")};if(t.schemaVersion!==1)return {failure:_e("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:_e("actions","array")};for(let[r,o]of i.entries()){if(!ee(o))return {failure:_e(`actions[${r}]`,"object")};if(K(o,"backend"))return {failure:_e(`actions[${r}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${q} cannot carry a backend`)}}return {actions:i}}function ic(e,n){let t=n.maxBytes??262144,i=[],r=new TextDecoder("utf-8",{fatal:true});for(let o of le){let a=e[o];if(a===void 0)continue;if(a.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:o},files:[o]}};let s;try{s=JSON.parse(r.decode(a));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:o},files:[o]}}}if(!ee(s))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${o} must be a JSON object`,file:o},files:[o]}};i.push({file:o,raw:s});}return {parsed:i}}function Jt(e,n={}){let{parsed:t,failure:i}=ic(e,n),r=le.filter(A=>e[A]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let o=e[q],a=o===void 0?void 0:tc(o,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:a===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:no(r),parseFailure:true,builtinOnly:false};let s=t[0],c=s.file===Y?$a(s.raw):Wa(s.raw),d=t.some(A=>Xa(A.file,A.raw)),l;if(a!==void 0){let A=t.some(I=>I.file===Y)?a.failure:no(r);if(A!==void 0)return {ok:false,rejection:A,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};l=a.actions;}let u=[];try{for(let A of t)u.push(A.file===Y?qa(A.raw,n,l):Za(A.raw,n));u.length===2&&nc(u[0].manifest,u[1].manifest);}catch(A){if(A instanceof Ee)return {ok:false,rejection:{code:A.code,reason:A.reason,files:A.code==="MANIFEST_DUAL_MISMATCH"?[...le]:A.reason.file===void 0||A.reason.file===q?r:[A.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw A}let f=u[0];return {ok:true,...f,identity:c??{pluginId:f.manifest.pluginId},files:r}}var Y,xe,le,vt,Le,Ht,zt,to,Vt,io,xa,ja,va,Va,Fa,Ee,$t=w(()=>{g();we();Ne();Pt();Ce();jt();Y="manifest.json",xe="ui-plugin.json",le=[Y,xe],vt="0.3",Le="dev.crewx",Ht=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),zt=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),to=Object.freeze(Ht.filter(e=>e!=="server"&&!zt.includes(e))),Vt=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),io=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp","deviceFeatures","downloads"]),xa=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,ja=256,va=/<\/?[A-Za-z][^>]*>/,Va=/^\s*javascript:/i,Fa=/data:[^,\s]*,/i;Ee=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});function Ao(e){if(e===void 0)return {kind:"none"};if(typeof e!="string")return {kind:"invalid",reason:"bad-path"};if(sc.test(e))return {kind:"url",declared:e};if(!dc(e))return {kind:"invalid",reason:"bad-path",declared:e};let n=e.lastIndexOf("."),t=n<0?void 0:oc.get(e.slice(n+1).toLowerCase());return t===void 0?{kind:"invalid",reason:"bad-type",declared:e}:{kind:"file",path:e,contentType:t}}function dc(e){return e.length===0||e.length>512||e.startsWith("/")||e.includes("\\")||e.includes("\0")?false:e.split("/").every(n=>n!==""&&n!=="."&&n!=="..")}async function Xt(e,n){let t=Ao(e);if(t.kind==="none")return {diagnostics:[]};if(t.kind==="url")return {diagnostics:[{code:"ICON_NOT_FILE",severity:"warning",declared:t.declared}]};if(t.kind==="invalid")return {diagnostics:[Wt(t.reason,t.declared)]};let i=await n(t.path);if(typeof i=="string")return {diagnostics:[Wt(i,t.path)]};let r=Io(t.contentType,i);if(!r.ok)return {diagnostics:[Wt(r.reason,t.path)]};let o={path:t.path,contentType:t.contentType,byteLength:i.byteLength,bytes:i},a=r.square===false?[{code:"ICON_NOT_SQUARE",severity:"warning",declared:t.path}]:[];return {file:o,diagnostics:a}}function Wt(e,n){return {code:"ICON_INVALID",severity:"error",reason:e,...n===void 0?{}:{declared:n}}}function Io(e,n){if(n.byteLength>262144)return {ok:false,reason:"too-large"};if(e==="image/png")return !uo(n,ac)||hc(n,12,16)!=="IHDR"||n.byteLength<24?{ok:false,reason:"bytes-mismatch"}:{ok:true,square:lo(fo(n,16),fo(n,20))};if(e==="image/jpeg"){if(!uo(n,cc))return {ok:false,reason:"bytes-mismatch"};let t=gc(n);return {ok:true,square:t===void 0?void 0:lo(t.width,t.height)}}return pc(n)}function pc(e){let n;try{n=rc.decode(e);}catch{return {ok:false,reason:"bytes-mismatch"}}return Ac(n)?{ok:false,reason:"unsafe-svg"}:lc.test(n)?{ok:true,square:Ic(n)}:{ok:false,reason:"bytes-mismatch"}}function Ac(e){if(uc.some(n=>n.test(e)))return  true;for(let n of e.matchAll(fc))if(!(n[1]??n[2]??n[3]??"").startsWith("#"))return  true;for(let n of e.matchAll(yc))if(co.lastIndex=n.index??0,!co.test(e))return  true;return  false}function Ic(e){let n=/<svg\b[^>]*>/i.exec(e)?.[0];if(n===void 0)return;let t=go(n,"viewBox");if(t!==void 0){let o=t.trim().split(/[\s,]+/).map(Number);return o.length===4&&o.every(Number.isFinite)?o[2]===o[3]:void 0}let i=po(n,"width"),r=po(n,"height");return i===void 0||r===void 0?void 0:i===r}function go(e,n){let t=new RegExp(`\\s${n}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`).exec(e);return t?.[1]??t?.[2]}function po(e,n){let t=go(e,n),i=t===void 0?null:/^\s*(\d+(?:\.\d+)?)(?:px)?\s*$/.exec(t);return i===null?void 0:Number(i[1])}function gc(e){let n=2;for(;n+4<=e.byteLength;){if(e[n]!==255)return;let t=e[n+1];if(t===255){n+=1;continue}if(t===216||t===1||t>=208&&t<=215){n+=2;continue}if(t===217)return;let i=e[n+2]<<8|e[n+3];if(i<2)return;if(mc(t))return n+9>e.byteLength?void 0:{height:yo(e,n+5),width:yo(e,n+7)};n+=2+i;}}function mc(e){return e>=192&&e<=207&&e!==196&&e!==200&&e!==204}function lo(e,n){if(!(e<=0||n<=0))return e===n}function uo(e,n){return e.byteLength>=n.length&&n.every((t,i)=>e[i]===t)}function hc(e,n,t){return String.fromCharCode(...e.subarray(n,t))}function fo(e,n){return (e[n]<<24|e[n+1]<<16|e[n+2]<<8|e[n+3])>>>0}function yo(e,n){return e[n]<<8|e[n+1]}var oc,rc,sc,ac,cc,lc,uc,fc,yc,co,Kt=w(()=>{g();oc=new Map([["svg","image/svg+xml"],["png","image/png"],["jpg","image/jpeg"],["jpeg","image/jpeg"]]),rc=new TextDecoder("utf-8",{fatal:true}),sc=/^[A-Za-z][A-Za-z0-9+.-]*:/,ac=[137,80,78,71,13,10,26,10],cc=[255,216,255];lc=/^\s*(?:<\?[\s\S]*?\?>\s*|<!--[\s\S]*?-->\s*)*<svg(?=[\s/>])/,uc=[/<script/i,/[\s"'/]on[a-z]+\s*=/i,/<foreignobject/i,/<!doctype/i,/<!entity/i,/<(?:iframe|embed|object)\b/i,/@import/i],fc=/(?:^|[\s"'/])(?:xlink:)?href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/gi,yc=/url\(/gi,co=/url\(\s*["']?#/iy;});var _o=w(()=>{g();});var To=w(()=>{g();Si();$t();Kt();jt();Ce();_o();});function E(e,n=e){throw new Te(e,n)}var Te,zn=w(()=>{g();Te=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var Do=w(()=>{g();});var No=w(()=>{g();we();Ne();zn();Do();});function Po(e,n){return bo.add(e),n!==void 0&&_c.set(e,n),e}function Ke(e){return e!==null&&typeof e=="object"&&bo.has(e)}var bo,_c,Gn=w(()=>{g();bo=new WeakSet,_c=new WeakMap;});function un(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Yt(e,n,t=[]){let i=new Set([...n,...t]),r=Object.keys(e);return n.every(o=>Object.hasOwn(e,o))&&r.every(o=>i.has(o))}function Oo(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Oo(n);return Object.freeze(e)}function ne(e){throw new De("LINEAGE_INVALID",e)}function Sc(e){throw new De("LINEAGE_STALE",e)}function Lo(e){if(!un(e)||!Yt(e,Dc,Nc)||!un(e.actions))return ne("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!un(n)||!Yt(n,bc,Pc))return ne("Lineage action definition shape is invalid");return e}function Mc(e){if(!un(e)||!Yt(e,Ec,Tc))return ne("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!So.test(e.hash))return ne("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!So.test(e.sourceHash)))return ne("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return ne("Lineage compatibility marker is invalid");let n=Lo(e.definition);if(n.version!==e.version)return ne("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return ne("Lineage source hash does not match its definition");let t;try{t=oe(n),de({...n,hash:e.hash});}catch{return ne("Lineage definition is invalid")}return t!==e.hash?ne("Lineage definition hash does not match"):Oo({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function Mo(e){return e.stateProjection?.allow??[]}function Oc(e,n){let t=[],i=new Set(Mo(n));Mo(e).some(s=>!i.has(s))&&t.push("S1_STATE_PROJECTION");let r=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(s=>!r.has(s))&&t.push("S2_DATA_PATHS");for(let[s,c]of Object.entries(e.actions)){let d=n.actions[s];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(s=>!Object.hasOwn(n.actions,s))&&t.push("S4_LEGACY_AGENT_ACTIONS");let a=e.summaryProjection?.allow;if(a!==void 0){let s=new Set(n.summaryProjection?.allow??[]);a.some(c=>!s.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function Lc(e,n){return Q(e)===Q(n)}function qt(e,n){if(!Array.isArray(e)||e.length===0)return ne("Definition lineage is missing");if(!un(n)||typeof n.hash!="string")return ne("Current definition is invalid");let t,i;try{let{hash:s,...c}=n;i=Lo(c),t={...i,hash:s},de(t);}catch{return ne("Current definition is invalid")}let r=e.map(Mc),o=r[0].definition.id;if(r.some(s=>s.definition.id!==o))return ne("Lineage definition ids do not match");if(r.some((s,c)=>c>0&&s.version<=r[c-1].version))return ne("Lineage generations are not in increasing version order");if(r.some((s,c)=>r.findIndex(d=>d.hash===s.hash)!==c))return ne("Lineage contains a duplicate hash");let a=r[r.length-1];if(a.version!==t.version||a.hash!==t.hash||a.definition.id!==t.id||!Lc(a.definition,i))return Sc("The last lineage generation does not match the current package");if(t.legacy!==void 0){let s=new Set(Object.keys(t.actions)),c=new Set;for(let l of r)if(l.sourceHash===void 0)for(let u of Object.keys(l.definition.actions))s.has(u)&&c.add(u);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(l=>!c.has(l))){let l="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new De("LINEAGE_INVALID",`Lineage compatibility failed: ${l}`,[l])}}for(let s=0;s<r.length-1;s+=1){if(r.slice(s,-1).some(l=>l.compat==="break"))continue;let d=Oc(r[s].definition,t);if(d.length>0)throw new De("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(r),current:t})}var De,So,Ec,Tc,Dc,Nc,bc,Pc,Zt=w(()=>{g();we();Ne();De=class extends Error{constructor(t,i=t,r=[]){super(i);this.code=t;this.violations=r;}code;violations;name="UiDefinitionLineageError"},So=/^[0-9a-f]{64}$/,Ec=["version","hash","definition"],Tc=["sourceHash","compat"],Dc=["id","version","actions"],Nc=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","downloads","legacy"],bc=["capabilities"],Pc=["inputKeys","dataInputs","confirmation","resultProjection","content","env","schedule","job","jobAccess"];});var Ro,Uo,Co,wo,ko=w(()=>{g();Ro="text/html;profile=mcp-app",Uo=["crewx_app_terminal_connect","crewx_app_html_viewer_open","crewx_app_browser"],Co=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"],wo="text/html";});function fn(e){return typeof e=="string"&&Rc.includes(e)}function Jn(e,n){return e==="card"&&n?.type==="core"&&fn(n.handler)}var Rc,$n=w(()=>{g();Rc=Object.freeze(["card.secret-env"]);});function xo(e,n=[],t){if(e.content!==void 0||e.confirmation!=="none")return "denied";let i=Uc();return i&&Object.hasOwn(i,e.actionId)?i[e.actionId]:e.backend?.type==="core"&&e.backend.handler.startsWith("host.")?"denied":e.backend?.type==="core"&&e.backend.handler==="state.set"?"allowed":e.backend?.type==="core"&&fn(e.backend.handler)||e.backend?.type==="skill"?"approval_required":e.backend===void 0&&n.includes(e.actionId)?"allowed":"denied"}function Uc(e){return;}var jo=w(()=>{g();we();Gn();$n();});function Bc(e){return In.has(e)&&(e.initialState===void 0||In.has(e.initialState))}function Ho(e,n,t,i){let r=i===void 0?void 0:Object.freeze({hash:i.hash,bytes:Object.freeze(i.bytes)}),o=Object.freeze({mimeType:wo,entryHash:e,html:n,bytes:Object.freeze(t),...r===void 0?{}:{initialState:r}});return r!==void 0&&In.add(r),In.add(o),o}function Hc(e){let n=[];return e?.terminal===true&&n.push({name:"crewx_app_terminal_connect",description:"Open a local-only terminal session for this App.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"A local terminal connection is ready for this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Se}),e?.htmlDocuments===true&&n.push({name:"crewx_app_html_viewer_open",description:"List workspace HTML documents or open one through a short-lived Host capability.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"},operation:{type:"string",enum:["list","open"]},documentId:{type:"string"}},required:["threadId","instanceId","operation"],additionalProperties:false},textFallback:"Workspace HTML documents are available through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Se}),e?.appBrowser===true&&n.push({name:"crewx_app_browser",description:"Grant this App a native Desktop browser window. Browser commands use the custom Host RPC, not this tool.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"Desktop browser access is granted to this App. Browser commands use the custom Host RPC ui/crewx-app-browser.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Se}),n}function Ue(e,n,t){return (typeof e!="string"||!Fo.test(e))&&E(n,`${t} must be a safe identifier`),e}function yn(e,n,t){let i=e??t;return (typeof i!="string"||i.trim().length===0||i.length>kc)&&E("TOOL_INVALID",`${n} must be a meaningful description`),i}function ei(e){return (typeof e!="string"||e.length===0||e.length>Ye||!/<html(?:\s|>)/i.test(e)||!/<\/html\s*>/i.test(e))&&E("HTML_INVALID","MCP App HTML must be a non-empty HTML document"),e}function An(e,n=0){try{let t=ce(e,n);return t.type!==void 0&&t.type!=="object"&&E("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Te)throw t;E("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function zc(e){return (typeof e!="string"||e.trim().length===0||e.length>xc)&&E("TOOL_INVALID","MCP App tools require a meaningful text fallback"),e}function Gc(e){e===void 0&&E("TOOL_INVALID","MCP App tool visibility is required");let n=[...e];return (n.length===0||n.some(t=>t!=="model"&&t!=="app")||new Set(n).size!==n.length)&&E("TOOL_INVALID","MCP App tool visibility must contain model and/or app once"),n}function Go(e){return (typeof e!="string"||!Bo.test(e))&&E("RESOURCE_URI_INVALID","MCP App resource URI is not a registered ui:// URI"),e}function Jo(e){let n=Ue(e.appId,"APP_ID_INVALID","Local App id"),t=yn(e.name,"Local App name",n),i=yn(e.description,"Local App description",`${t} interactive view`),r=Yn(e.definition),o=ei(e.html),a=Wn(e.entryHash,"Local App entry hash"),s=e.entryBytes===void 0?Array.from(new TextEncoder().encode(o)):Kn(e.entryBytes,"Local App entry bytes");(Xn(s)!==a||Xo(s)!==o)&&E("HTML_INVALID","Local App entry bytes do not match the HTML hash");let c=Jc(e),d=[];Array.isArray(e.actions)||E("TOOL_INVALID","Local App actions must be an array");for(let b of e.actions){let C=Ue(b.actionId,"TOOL_ID_INVALID","Local App action id");(d.includes(C)||!Object.prototype.hasOwnProperty.call(r.actions,C))&&E("TOOL_INVALID",`Local App action is not declared by the UI definition: ${C}`),d.push(C);}let l=Ue(e.readToolName,"TOOL_ID_INVALID","Local App read tool name"),u=e.actionToolName===void 0?void 0:Ue(e.actionToolName,"TOOL_ID_INVALID","Local App action tool name");d.length===0&&u!==void 0&&E("TOOL_INVALID","A static local App cannot register an action tool"),d.length>0&&u===void 0&&E("TOOL_INVALID","A stateful local App requires an action tool name"),u!==void 0&&u===l&&E("TOOL_ID_CONFLICT",`Local App read and action tools share a name: ${l}`);let f=Hc(e.runtime);f.some(b=>b.name===l||b.name===u)&&E("TOOL_ID_CONFLICT","Local App read or action tool conflicts with a requested Host capability");let A={name:l,description:`${t} current state`,inputSchema:Fc,textFallback:`${t} current state is available through its open instance.`,visibility:Object.freeze(["model","app"]),kind:"read",resourceBinding:Se},I=[Object.freeze(A)];if(I.push(...f.map(b=>Object.freeze(b))),u!==void 0){let b={name:u,description:`${t} actions`,inputSchema:ni(e.actions),textFallback:`${t} action requests are handled by the open App instance.`,visibility:Object.freeze(["app"]),kind:"action",resourceBinding:Se,actionIds:Object.freeze([...d])};I.push(Object.freeze(b));}let h=[],T=new Set(I.map(b=>b.name));if(u!==void 0)for(let b of e.actions){let C=`${u}__${b.actionId}`;if(C.length>128||!Fo.test(C)){h.push(Object.freeze({toolName:C,actionId:b.actionId,reason:"name_too_long"}));continue}if(T.has(C)){h.push(Object.freeze({toolName:C,actionId:b.actionId,reason:"name_collision"}));continue}let W=xo({actionId:b.actionId,confirmation:r.actions[b.actionId]?.confirmation,content:r.actions[b.actionId]?.content,backend:b.backend},e.modelActions),D=Object.freeze([...Yc(W,r.usage,b.backend)]),O={name:C,description:`${C} action`,inputSchema:An(b.inputSchema),textFallback:`${C} action requests are handled by the open App instance.`,visibility:D,kind:"action",resourceBinding:Se,actionId:b.actionId,actionIds:Object.freeze([b.actionId]),_meta:Object.freeze({ui:Object.freeze({visibility:D})})};I.push(Object.freeze(O)),T.add(C);}let G=Ho(a,o,s,c===void 0?void 0:{hash:c.hash,bytes:[...c.bytes]}),V={appId:n,name:t,description:i,...e.icon===void 0?{}:{icon:Ko(e.icon)},...e.tone===void 0?{}:{tone:Yo(e.tone)},builtinOnly:false,definition:r,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},resourceBinding:Se,resource:G,tools:Object.freeze(I),toolDiagnostics:Object.freeze(h)};return Z(V)}function $o(e={}){return new Qt(e)}function ni(e){if(e.length===0)return An({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,An(i.inputSchema));return An($c(n,t),zo)}function Jc(e){let n=e.definition.dataPaths??[];if(e.initialStateBytes===void 0){e.initialStateHash!==void 0&&E("STATE_INVALID","Initial state hash has no bytes"),e.initialState!==void 0&&ce(e.initialState,0,n);return}e.initialStateHash===void 0&&E("STATE_INVALID","Initial state bytes require a hash");let t=Wn(e.initialStateHash,"Initial state hash"),i=Kn(e.initialStateBytes,"Initial state bytes");Xn(i)!==t&&E("STATE_INVALID","Initial state bytes do not match the hash");let r;try{let o=new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(i));r=ce(JSON.parse(o),0,n);}catch{E("STATE_INVALID","Initial state bytes are not projection-safe JSON");}return e.initialState!==void 0&&Q(r)!==Q(ce(e.initialState,0,n))&&E("STATE_INVALID","Initial state bytes do not match the state value"),{hash:t,bytes:Object.freeze([...i])}}function $c(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}function Wc(e){let n=gn(e),t=Ue(n.appId,"APP_ID_INVALID","MCP App id"),i=ei(n.html);Go(n.uiUri);let r=n.definition===void 0?void 0:Yn(n.definition),o=e.provenance;o!==void 0&&(!Ke(o)||o.appId!==t||o.definitionId!==r?.id||o.version!==r?.version||o.definitionHash!==r?.hash)&&E("TOOL_INVALID","Product App built-in registration provenance is not verified");let a=Object.freeze(n.tools.map(d=>Z(gn(d)))),s=Z({...n,appId:t,html:i,...r===void 0?{}:{definition:r},...o===void 0?{}:{provenance:o},tools:a}),c=Z({uri:s.uiUri,mimeType:Ro,text:i,...s.csp===void 0?{}:{_meta:{ui:{csp:s.csp}}}});return Z({appId:t,name:s.name,description:s.description,...s.icon===void 0?{}:{icon:s.icon},...s.tone===void 0?{}:{tone:s.tone},builtinOnly:s.builtinOnly,uiUri:s.uiUri,...r===void 0?{}:{definition:r},resourceBinding:Object.freeze({kind:"mcp",uri:s.uiUri}),resource:c,tools:a,descriptor:s})}function Xc(e){(e.resourceBinding.kind!=="instance"||e.builtinOnly!==false)&&E("STATE_INVALID","Local App registration binding is invalid"),Object.prototype.hasOwnProperty.call(e,"uiUri")&&E("STATE_INVALID","Local App registration cannot contain uiUri");let n=Ue(e.appId,"APP_ID_INVALID","Local App id"),t=Yn(e.definition),i=e.provenance;i!==void 0&&(!Ke(i)||i.appId!==n||i.definitionId!==t.id||i.version!==t.version||i.definitionHash!==t.hash)&&E("TOOL_INVALID","Product App local registration provenance is not verified");let r=Kc(e.resource),o=e.tools.map(s=>{Ue(s.name,"TOOL_ID_INVALID","Local App tool name"),yn(s.description,"Local App tool description","Local App tool"),zc(s.textFallback);let c=An(s.inputSchema,s.kind==="action"&&!("actionId"in s)?zo:0);if((s.resourceBinding.kind!=="instance"||Object.prototype.hasOwnProperty.call(s,"resourceUri"))&&E("TOOL_INVALID","Local App tools cannot carry an MCP resource URI"),s.kind==="host")return (!Vc.has(s.name)||s.visibility.length!==1||s.visibility[0]!=="app"||Object.prototype.hasOwnProperty.call(s,"actionId"))&&E("TOOL_INVALID","Local App Host tools must use an allow-listed name and app-only visibility"),Z({...s,inputSchema:c,visibility:Object.freeze(["app"])});if(s.kind==="action"){if("actionId"in s){let l=Ue(s.actionId,"TOOL_ID_INVALID","Local App action id");Object.prototype.hasOwnProperty.call(t.actions,l)||E("TOOL_INVALID","Local App action tool references an undeclared action");let u=Gc(s._meta.ui.visibility);return JSON.stringify(u)!==JSON.stringify(s.visibility)&&E("TOOL_INVALID","Local App action metadata visibility must match the tool visibility"),Z({...s,actionId:l,actionIds:Object.freeze([l]),inputSchema:c,visibility:u,_meta:{ui:{visibility:u}}})}let d=[...s.actionIds];return (d.length===0||d.some(l=>!Object.prototype.hasOwnProperty.call(t.actions,l)))&&E("TOOL_INVALID","Local App action tool references an undeclared action"),Z({...s,inputSchema:c,actionIds:Object.freeze(d)})}return Z({...s,inputSchema:c})}),a=Z({appId:n,name:yn(e.name,"Local App name",e.appId),description:yn(e.description,"Local App description",e.name),...e.icon===void 0?{}:{icon:Ko(e.icon)},...e.tone===void 0?{}:{tone:Yo(e.tone)},builtinOnly:false,definition:t,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...i===void 0?{}:{provenance:i},resourceBinding:Se,resource:r,tools:Object.freeze(o),toolDiagnostics:Object.freeze([...e.toolDiagnostics??[]])});return vo.has(e)?e:(vo.add(a),a)}function Kc(e){let n=ei(e.html),t=Wn(e.entryHash,"Local App entry hash");if(Bc(e))return e;let i=Kn(e.bytes,"Local App entry bytes");(Xn(i)!==t||Xo(i)!==n)&&E("HTML_INVALID","Local App entry bytes do not match the HTML hash");let r=e.initialState===void 0?void 0:{hash:Wn(e.initialState.hash,"Initial state hash"),bytes:Kn(e.initialState.bytes,"Initial state bytes")};return r&&Xn(r.bytes)!==r.hash&&E("STATE_INVALID","Initial state bytes do not match the hash"),Ho(t,n,i,r)}function Yc(e,n,t){if(Jn(n,t))return ["model"];let i=t?.type==="core"&&fn(t.handler);return e==="denied"||i?["app"]:["model","app"]}function qc(e){return Z({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:false,definition:Wo(e.definition),...e.provenance===void 0?{}:{provenance:e.provenance},entryHash:e.resource.entryHash,resourceBinding:Se,tools:e.tools})}function Zc(e){return Z({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:e.builtinOnly,uiUri:e.uiUri,...e.definition===void 0?{}:{definition:Wo(e.definition)},resourceBinding:Object.freeze({kind:"mcp",uri:e.uiUri}),tools:e.tools})}function Yn(e){try{if(Object.isFrozen(e))return de(e),Z(e);let n=gn(e);return de(n),Z(n)}catch(n){if(n instanceof Te)throw n;E("STATE_INVALID","UI definition is not a valid immutable definition");}}function Wo(e){return Z({id:e.id,version:e.version,hash:e.hash})}function Qc(e){return e!==null&&typeof e=="object"&&typeof e.id=="string"&&Number.isSafeInteger(e.version)&&typeof e.hash=="string"}function Vo(e,n,t){return `${e}\0${n}\0${t}`}function Wn(e,n){return (typeof e!="string"||!wc.test(e))&&E("SERIALIZATION_INVALID",`${n} is invalid`),e}function Xn(e){return createHash("sha256").update(Uint8Array.from(e)).digest("hex")}function Kn(e,n){return (!Array.isArray(e)||e.some(t=>!Number.isInteger(t)||t<0||t>255))&&E("SERIALIZATION_INVALID",`${n} is invalid`),[...e]}function Xo(e){try{return new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(e))}catch{E("SERIALIZATION_INVALID","UTF-8 bytes are invalid");}}function Ko(e){return (typeof e!="string"||!jc.test(e))&&E("TOOL_INVALID","MCP App icon is invalid"),e}function Yo(e){return (typeof e!="string"||!vc.has(e))&&E("TOOL_INVALID","MCP App tone is invalid"),e}function gn(e,n=new Map){if(e===null||typeof e!="object")return e;let t=e;if(n.has(t)&&E("SERIALIZATION_INVALID","MCP App value contains a cycle"),Array.isArray(e)){let o=[];n.set(t,o);for(let a of e)o.push(gn(a,n));return n.delete(t),o}let i;try{i=Object.getPrototypeOf(e);}catch{E("SERIALIZATION_INVALID","MCP App value cannot be cloned");}i!==Object.prototype&&i!==null&&E("SERIALIZATION_INVALID","MCP App value must be plain JSON");let r={};n.set(t,r);for(let[o,a]of Object.entries(e))Object.defineProperty(r,o,{configurable:true,enumerable:true,value:gn(a,n),writable:true});return n.delete(t),r}function Z(e,n=new Set){if(e===null||typeof e!="object"||n.has(e)||In.has(e))return e;n.add(e);for(let t of Object.values(e))Z(t,n);return Object.freeze(e),e}var Fo,Bo,wc,Ye,kc,xc,jc,vc,Vc,Se,Fc,In,vo,zo,Qt,qn=w(()=>{g();No();we();Ne();Gn();zn();Zt();ko();jo();$n();Fo=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Bo=/^ui:\/\/crewx\/([A-Za-z][A-Za-z0-9._-]{0,127})\/([0-9a-f]{12})$/,wc=/^[0-9a-f]{64}$/,Ye=8*1024*1024,kc=8*1024,xc=16*1024,jc=/^[a-z][a-z0-9-]{0,63}$/,vc=new Set(["blue","violet","emerald","amber","rose","sky","slate","indigo"]),Vc=new Set(Uo),new Set(Co),Se=Object.freeze({kind:"instance"}),Fc=Object.freeze({type:"object",properties:Object.freeze({}),additionalProperties:false}),In=new WeakSet,vo=new WeakSet;zo=4;Qt=class{builtinApps;localApps;builtinDescriptors;builtinTools;mcpResources=new Map;localById=new Map;registrationById=new Map;launcherById=new Map;definitionByKey=new Map;handlerByKey=new Map;mcpToolByName=new Map;localToolByName=new Map;constructor(n){let t=n.builtins??n.builtin,i=[],r=[],o=[],a=new Set,s=new Set;for(let u of t?.listMcpApps()??[]){let f=Wc(u);a.has(f.appId)&&E("APP_ID_CONFLICT",`MCP App id is already registered: ${f.appId}`),a.add(f.appId);let A=f.tools;for(let I of A)s.has(I.name)&&E("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${I.name}`),s.add(I.name),this.mcpToolByName.set(I.name,I),o.push(I);this.mcpResources.set(f.resource.uri,f.resource),i.push(f),r.push(f.descriptor);}let c=(n.localApps??n.locals??[]).map(Xc),d=new Set(c.flatMap(u=>u.tools.filter(f=>!(f.kind==="action"&&"actionId"in f)).map(f=>f.name))),l=[];for(let u of c){let f=u;a.has(f.appId)&&E("APP_ID_CONFLICT",`MCP App id is already registered: ${f.appId}`),a.add(f.appId);let A=[],I=[...f.toolDiagnostics??[]];for(let h of f.tools){if(s.has(h.name)){if(h.kind==="host"&&this.localToolByName.get(h.name)?.kind==="host"){A.push(h);continue}if(h.kind==="action"&&"actionId"in h){I.push(Object.freeze({toolName:h.name,actionId:h.actionId,reason:"name_collision"}));continue}E("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${h.name}`);}if(h.kind==="action"&&"actionId"in h&&d.has(h.name)){I.push(Object.freeze({toolName:h.name,actionId:h.actionId,reason:"name_collision"}));continue}s.add(h.name),this.localToolByName.set(h.name,h),A.push(h);}(A.length!==f.tools.length||I.length!==(f.toolDiagnostics?.length??0))&&(f=Z({...f,tools:Object.freeze(A),toolDiagnostics:Object.freeze(I)})),l.push(f),this.localById.set(f.appId,f);}for(let u of i)this.registrationById.set(u.appId,u),this.launcherById.set(u.appId,Zc(u)),u.definition&&this.addDefinition(u.definition);for(let u of l)this.registrationById.set(u.appId,u),this.launcherById.set(u.appId,qc(u)),this.addDefinition(u.definition);for(let u of n.definitions??[])this.addDefinition(u);for(let u of n.handlers??[])this.addHandler(u);this.builtinApps=Object.freeze(i),this.localApps=Object.freeze(l),this.builtinDescriptors=Object.freeze(r),this.builtinTools=Object.freeze(o);}getMcpApp(n){return this.builtinApps.find(t=>t.appId===n)?.descriptor??null}listMcpApps(){return this.builtinDescriptors}listMcpAppTools(){return this.builtinTools}resolveMcpAppTool(n){return this.mcpToolByName.get(n)??null}resolveMcpAppResource(n){return typeof n!="string"||!Bo.test(n)?null:this.mcpResources.get(n)??null}requireMcpAppResource(n){Go(n);let t=this.mcpResources.get(n);return t||E("RESOURCE_NOT_FOUND",`MCP App resource is not registered: ${n}`),t}listLocalMcpApps(){return this.localApps}getLocalMcpApp(n){return this.localById.get(n)??null}listLocalMcpAppTools(){return Object.freeze([...this.localToolByName.values()])}resolveLocalMcpAppTool(n){return this.localToolByName.get(n)??null}resolveLocalMcpAppResource(n,t){let i=this.localById.get(n);return !i||t!==void 0&&i.definition.hash!==t?null:i.resource}listRegistrations(){return Object.freeze([...this.builtinApps,...this.localApps])}getRegistration(n){return this.registrationById.get(n)??null}listLaunchers(){return Object.freeze([...this.launcherById.values()].filter(n=>{let t=this.registrationById.get(n.appId),i=t?"descriptor"in t?t.descriptor.provenance:t.provenance:void 0,r=Ke(i)&&i.launcher===false;return t?.definition?.usage!=="card"&&!r}))}listCardApps(){return Object.freeze([...this.launcherById.values()].filter(n=>this.registrationById.get(n.appId)?.definition?.usage==="card"))}getLauncher(n){return this.launcherById.get(n)??null}resolveDefinition(n){if(!Qc(n))return null;let t=this.definitionByKey.get(bt(n));if(!t||t.hash!==n.hash)return null;try{return oe(t)===t.hash?t:null}catch{return null}}resolveActionHandler(n,t,i){return typeof n!="string"||typeof i!="string"||!Number.isSafeInteger(t)?null:this.handlerByKey.get(Vo(n,t,i))??null}addDefinition(n){let t=Yn(n),i=bt(t),r=this.definitionByKey.get(i);r&&r.hash!==t.hash&&E("STATE_INVALID",`UI definition generation conflicts: ${i}`),r||this.definitionByKey.set(i,t);}addHandler(n){(!n||typeof n.definitionId!="string"||typeof n.actionId!="string"||!Number.isSafeInteger(n.version)||n.version<1||typeof n.handle!="function")&&E("STATE_INVALID","UI action handler registration is invalid");let t=Vo(n.definitionId,n.version,n.actionId);this.handlerByKey.has(t)&&E("TOOL_INVALID",`Duplicate UI action handler registration: ${t}`),this.handlerByKey.set(t,Object.freeze({...n}));}};});function ed(e){let n=Jo({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},...e.normalized.manifest.runtime===void 0?{}:{runtime:e.normalized.manifest.runtime},...e.normalized.manifest.deviceFeatures===void 0?{}:{deviceFeatures:e.normalized.manifest.deviceFeatures},...e.normalized.manifest.downloads===void 0?{}:{downloads:e.normalized.manifest.downloads},definition:e.definition,html:e.html,entryHash:e.entryHash,entryBytes:e.entryBytes,initialState:e.initialState,...e.initialStateHash===void 0?{}:{initialStateHash:e.initialStateHash},...e.initialStateBytes===void 0?{}:{initialStateBytes:e.initialStateBytes},readToolName:e.toolNames.read,...e.toolNames.action===void 0?{}:{actionToolName:e.toolNames.action},actions:e.normalized.manifest.actions.map(i=>({actionId:i.actionId,inputSchema:i.inputSchema,backend:i.backend}))});return e.provenance===void 0?n:Object.freeze({...n,provenance:e.provenance})}function qo(e){let n=e.normalized.manifest.actions;if(n.some(i=>i.backend.type==="skill")&&n.some(i=>i.backend.type==="core"))throw new Error("Mixed workspace App execution models");let t=ed(e);$o({localApps:[t],definitions:[e.definition]});}var Zo=w(()=>{g();qn();});function Qo(){return Object.freeze({[ti]:{candidates:new Map,assetCatalogs:new Map,preparedCandidates:new Map}})}function nd(e){if(e===null||typeof e!="object"||!(ti in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[ti]}function er(e,n){let t=nd(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.preparedCandidates.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0,t.lastSnapshotCandidates=void 0,t.lastSnapshotCatalogFingerprint=void 0),t.rootIdentity=n,t}var ti,nr=w(()=>{g();ti=Symbol("crewx.workspace-app-scan-cache.state");});function se(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new _("NOT_FOUND"):n==="ELOOP"?new _("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new _("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new _("READ_DENIED"):new _("READ_DENIED")}function rd(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new _("READ_DENIED")}function ii(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new _("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new _("PATH_ESCAPED");return n}function nt(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Ze(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function ai(e,n){return e.dev===n.dev&&e.ino===n.ino}function ci(e,n){return ai(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function Zn(e){rd(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw se(i)}if(!t.isDirectory())throw new _("READ_DENIED");return {realRoot:n,identity:Ze(t)}}async function or(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,r;try{if(i=resolve(e,t[0],t[1]),r=await realpath(i),!(await stat(r,{bigint:!0})).isDirectory())throw new _("READ_DENIED")}catch(o){throw o instanceof _?o:se(o)}if(!nt(n,r))throw new _("PATH_ESCAPED");return r}async function Qn(e,n,t,i){let r,o,a;try{r=await lstat(e,{bigint:!0}),o=await realpath(e),a=await stat(o,{bigint:!0});}catch(s){throw se(s)}if(!nt(n,o)||t!==void 0&&!nt(t,o))throw new _("PATH_ESCAPED");if(!r.isFile()||!a.isFile())throw new _("READ_DENIED");if(!ai(i,r)||!ai(i,a)||i.dev!==a.dev)throw new _("PATH_ESCAPED")}async function qe(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new _("PATH_ESCAPED")}if(t!==n.realRoot||!ci(n.identity,Ze(i)))throw new _("PATH_ESCAPED")}function sd(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var _,si,od,ir,Qe,tt,rr,sr,pi=w(()=>{g();_=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},si=constants.O_NOFOLLOW,od=constants.O_NONBLOCK,ir=constants.O_RDONLY|(si??0)|(od??0);Qe=class{async getRootIdentity(n){let t=await Zn(n);return await qe(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=ii(t),r=await Zn(n),o=resolve(n,...i),a,s;try{a=await realpath(o),s=await stat(a,{bigint:!0});}catch(c){let d=se(c);if(d.code==="NOT_FOUND")return [];throw d}if(!nt(r.realRoot,a)||!s.isDirectory())throw new _("PATH_ESCAPED");try{let c=await readdir(a,{withFileTypes:!0,encoding:"utf8"});return await qe(n,r),c.map(sd)}catch(c){let d=se(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");if(si===void 0)throw new _("UNSUPPORTED");let r=ii(t),o=await Zn(n),a=resolve(n,...r),s=relative(n,a);if(s===".."||s.startsWith(`..${sep}`)||isAbsolute(s))throw new _("PATH_ESCAPED");let c;try{c=await open(a,ir);}catch(d){throw se(d)}try{let d;try{let I=await c.stat({bigint:!0});d=Ze(I);}catch(I){throw se(I)}if(d.size>BigInt(i))throw new _("LIMIT_EXCEEDED");if(d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new _("LIMIT_EXCEEDED");await qe(n,o);let l=await or(n,o.realRoot,r);await Qn(a,o.realRoot,l,d);let u=new Uint8Array(new ArrayBuffer(Number(d.size))),f=0;for(;f<u.byteLength;){let I;try{I=(await c.read(u,f,u.byteLength-f,f)).bytesRead;}catch(h){throw se(h)}if(I<=0)throw new _("IDENTITY_CHANGED");f+=I;}let A;try{let I=await c.stat({bigint:!0});A=Ze(I);}catch(I){throw se(I)}if(!ci(d,A))throw new _("IDENTITY_CHANGED");return await Qn(a,o.realRoot,l,A),await qe(n,o),new Uint8Array(u)}finally{await c.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");if(si===void 0)throw new _("UNSUPPORTED");let r=ii(t),o=await Zn(n),a=resolve(n,...r),s=relative(n,a);if(s===".."||s.startsWith(`..${sep}`)||isAbsolute(s))throw new _("PATH_ESCAPED");let c;try{c=await open(a,ir);}catch(d){throw se(d)}try{let d;try{let f=await c.stat({bigint:!0});d=Ze(f);}catch(f){throw se(f)}if(d.size>BigInt(i)||d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new _("LIMIT_EXCEEDED");await qe(n,o);let l=await or(n,o.realRoot,r);await Qn(a,o.realRoot,l,d);let u;try{let f=await c.stat({bigint:!0});u=Ze(f);}catch(f){throw se(f)}if(!ci(d,u))throw new _("IDENTITY_CHANGED");return await Qn(a,o.realRoot,l,u),await qe(n,o),{...u,candidateRealPath:l??o.realRoot}}catch(d){throw d instanceof _?d:se(d)}finally{await c.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},tt=new Qe,rr=tt,sr=Qe;});function En(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function cr(e){return typeof e=="string"&&me.test(e)?e:void 0}function fd(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function ve(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let a=t[o]-i[o];if(a!==0)return a}return t.byteLength-i.byteLength}function yd(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Ad(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Id(e){return ld.decode(e)}function gd(e){return JSON.parse(Id(e))}function dr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function md(e){if(e instanceof _)return dr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return dr(n)}}function Me(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function hd(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function _d(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function pr(e,n,t,i){let r=hd(e);if(!r)throw new _("READ_DENIED");return Ad(await r.call(e,n,t,i))}async function fi(e,n,t){let i=_d(e);if(!i)throw new _("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new _("READ_DENIED");return r.map(yd).filter(o=>o!==null)}function Ed(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Td(e){if(!En(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,r)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+r+" must be an array");let o=[];for(let a=0;a<i.length;a+=1){let s=i[a];if(typeof s!="string"||s.length===0)throw new TypeError("productBundle.reservedIds."+r+" must contain non-empty strings");o.push(s);}return Object.freeze([...new Set(o)].sort(ve))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function Dd(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function Tn(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(ve)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(ve))})}function it(e,n){let t=Object.keys(e).sort(ve),i=[...n].sort(ve);return t.length===i.length&&t.every((r,o)=>r===i[o])}function lr(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function Nd(e){let n;try{n=gd(e);}catch{return}if(!En(n)||!it(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>yi)return;let t=new Set,i=new Set,r=0,o=[];for(let a of n.packages){if(!En(a))return;let s=["packageDir","appId","definition","files"],c=Object.hasOwn(a,"lineage"),d=Object.hasOwn(a,"launcher"),l=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!it(a,[...s,...l])||d&&a.launcher!==false)return;let u=lr(a.packageDir),f=cr(a.appId);if(!u||u.length!==2||u[0]!=="apps"||!fd(u[1])||!f||t.has(a.packageDir)||!En(a.definition)||!it(a.definition,["id","version","hash"]))return;let A=cr(a.definition.id),I=a.definition.version,h=a.definition.hash;if(!A||!Number.isSafeInteger(I)||I<1||typeof h!="string"||!ui.test(h)||!Array.isArray(a.files)||a.files.length<2||a.files.length>Ai)return;let T=new Set,G=[];for(let V of a.files){if(!En(V)||!it(V,["path","sha256"]))return;let b=lr(V.path);if(!b||typeof V.sha256!="string"||!ui.test(V.sha256))return;let C=b.join("/"),W=`${a.packageDir}/${C}`;if(T.has(C)||i.has(W))return;T.add(C),i.add(W),G.push(Object.freeze({path:C,sha256:V.sha256}));}if(!le.some(V=>T.has(V))||!T.has("ui/index.html")||(r+=G.length,r>cd))return;t.add(a.packageDir),o.push(Object.freeze({packageDir:a.packageDir,...d?{launcher:false}:{},appId:f,definition:Object.freeze({id:A,version:I,hash:h}),lineage:Array.isArray(a.lineage)?a.lineage:[],files:Object.freeze(G.sort((V,b)=>ve(V.path,b.path)))}));}return Object.freeze({version:1,packages:Object.freeze(o)})}function je(e){let n=md(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function bd(e,n,t,i,r){let o=[],a=async(s,c)=>{if(!Me(i,r))throw new _("LIMIT_EXCEEDED");if(c>2)throw new _("LIMIT_EXCEEDED");let d=await fi(e,n,s);for(let l of d){if(typeof l.name!="string"||l.name.length===0||l.name==="."||l.name===".."||/[\\/\u0000]/.test(l.name))throw new _("PATH_ESCAPED");let u=`${s}/${l.name}`;if(l.kind==="file"){if(o.push(u.slice(t.length+1)),o.length>Ai)throw new _("LIMIT_EXCEEDED")}else if(l.kind==="directory")await a(u,c+1);else throw l.kind==="symlink"?new _("PATH_ESCAPED"):new _("READ_DENIED")}};return await a(t,0),o.sort(ve)}function Pd(e){return le.includes(e)?262144:e==="ui/index.html"?Ye:e==="ui/state.json"?2097152:e.startsWith("ui/assets/")?pd:dd}async function ur(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:ud};let r=Td(e.reservedIds),o=[],a=(y,m,N)=>Ed(y,"bundled",m),s=(y=[],m=false,N)=>({...N===void 0?{}:{indexHash:N},packages:y,diagnostics:o,incomplete:m,reservedIds:r});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!ui.test(e.expectedIndexHash))return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let c;try{c=await pr(n,e.root,"bundle-index.json",ad);}catch(y){return o.push(a(je(y),"bundle-index.json")),s()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let l=Nd(c);if(l===void 0)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();if(!Dd(Tn(l.packages),r))return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s([],false,d);if(!Me(t,i))return o.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(l.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,d);let u;try{u=await fi(n,e.root,"");}catch(y){return o.push(a(je(y),"bundle-index.json")),s(l.packages.map(m=>({indexEntry:m,failureCode:je(y)})),false,d)}if(!Me(t,i))return o.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(l.packages.map(y=>({indexEntry:y,failureCode:"LIMIT_EXCEEDED"})),true,d);let f=u.find(y=>y.name==="bundle-index.json"&&y.kind==="file"),A=u.find(y=>y.name==="apps"&&y.kind==="directory"),I=y=>l.packages.map(m=>({indexEntry:m,failureCode:y}));if(!f)return o.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s(I("BUNDLE_INTEGRITY"),false,d);let h=u.filter(y=>y.name!=="bundle-index.json"&&y.name!=="apps");if(h.length>0){let y=h.some(m=>m.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return o.push(a(y,"bundle-index.json")),s(I("BUNDLE_INTEGRITY"),false,d)}if(u.some(y=>y.name==="apps"&&y.kind!=="directory"))return o.push(a("PATH_ESCAPED","apps")),s(I("PATH_ESCAPED"),false,d);let T=[];if(A)try{T=await fi(n,e.root,"apps");}catch(y){return o.push(a(je(y),"apps")),s(I(je(y)),false,d)}if(!Me(t,i)||T.length>yi)return o.push(a("LIMIT_EXCEEDED","apps")),s(I("LIMIT_EXCEEDED"),true,d);let G=new Map(l.packages.map(y=>[y.packageDir.slice(5),y])),V=T.filter(y=>!G.has(y.name));for(let y of V)o.push(a(y.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${y.name}`));if(V.length>0){let y=V.some(m=>m.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return s(I(y),false,d)}let b=new Set,C=new Map,W=new Map;for(let y of l.packages){let m=C.get(y.appId)??[];m.push(y),C.set(y.appId,m);let N=`${y.definition.id}\0${String(y.definition.version)}`,L=W.get(N)??[];L.push(y),W.set(N,L);}for(let y of [...C.values(),...W.values()])if(y.length>1)for(let m of y)b.add(m);let D=[],O=c.byteLength,S=false;for(let y of l.packages){if(!Me(t,i)){S=true,D.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let m;try{let P=y.lineage[y.lineage.length-1];if(!P)throw new De("LINEAGE_INVALID","Definition lineage is missing");if(P.definition.id!==y.definition.id||P.version!==y.definition.version||P.hash!==y.definition.hash)throw new De("LINEAGE_STALE","Last lineage generation does not match bundle identity");m=qt(y.lineage,{...P.definition,hash:P.hash}).entries;}catch(P){let R=P instanceof De?P.code:"LINEAGE_INVALID";o.push(a(R,y.packageDir)),D.push({indexEntry:y,failureCode:R});continue}let N=T.find(P=>P.name===y.packageDir.slice(5));if(!A||!N){D.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}if(N.kind!=="directory"){D.push({indexEntry:y,failureCode:N.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let L;try{let P=await bd(n,e.root,y.packageDir,t,i);if(!Me(t,i)){S=!0,D.push({indexEntry:y,failureCode:"LIMIT_EXCEEDED"});continue}let R=y.files.map(v=>v.path);if(P.length!==R.length||P.some((v,ge)=>v!==R[ge])){D.push({indexEntry:y,failureCode:"BUNDLE_INTEGRITY"});continue}L=new Map;let J;for(let v of y.files){if(!Me(t,i)){J="LIMIT_EXCEEDED",S=!0;break}if(O>=li){J="LIMIT_EXCEEDED";break}let ge;try{ge=await pr(n,e.root,`${y.packageDir}/${v.path}`,Pd(v.path));}catch(ct){J=je(ct);break}if(!Me(t,i)){J="LIMIT_EXCEEDED",S=!0;break}if(O+ge.byteLength>li){O=li,J="LIMIT_EXCEEDED";break}if(O+=ge.byteLength,createHash("sha256").update(ge).digest("hex")!==v.sha256){J="BUNDLE_INTEGRITY";break}L.set(v.path,ge);}if(J!==void 0){D.push({indexEntry:y,failureCode:J});continue}}catch(P){Me(t,i)||(S=true),D.push({indexEntry:y,failureCode:je(P)});continue}D.push({indexEntry:y,lineage:m,files:L,...b.has(y)?{failureCode:"DUPLICATE_ID"}:{}});}return s(D,S,d)}var ad,yi,Ai,cd,dd,pd,li,ui,ld,ud,Ii=w(()=>{g();Zt();Ce();$t();qn();pi();ad=256*1024,yi=64,Ai=128,cd=yi*Ai,dd=2*1024*1024,pd=8*1024*1024,li=32*1024*1024,ui=/^[0-9a-f]{64}$/,ld=new TextDecoder("utf-8",{fatal:true}),ud=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});var kr={};zr(kr,{AppDiscoveryFsError:()=>_,LOCAL_APP_TOOL_PREFIX:()=>Od,MCP_APP_WORKSPACE_TOOL_PREFIX:()=>Ld,NodeAppDiscoveryFs:()=>Qe,NodeAppDiscoveryFsAdapter:()=>sr,WORKSPACE_APP_TOOL_PREFIX:()=>en,createWorkspaceAppScanCache:()=>Qo,defaultAppDiscoveryFs:()=>tt,defaultNodeAppDiscoveryFs:()=>rr,deriveWorkspaceAppToolName:()=>Rd,deriveWorkspaceAppToolNames:()=>hi,discoverWorkspaceAppCandidates:()=>sp,discoverWorkspaceApps:()=>_i,isWorkspacePackage:()=>Md,productAppBundleReservations:()=>Tn,scanWorkspaceApps:()=>ap});function Md(e,n){let t=n.split("/");return t.length===2&&t[0]===e&&/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t[1])}function hi(e){if(typeof e!="string"||!me.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${en}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${en}${n}_read`,action:`${en}${n}_action`}}function Rd(e,n="read"){let t=hi(e);return n==="read"?t.read:t.action}function yr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Cd(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function wd(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Nn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),r=Math.min(t.byteLength,i.byteLength);for(let o=0;o<r;o+=1){let a=t[o]-i[o];if(a!==0)return a}return t.byteLength-i.byteLength}function br(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let r=n.isFile;return typeof r=="function"&&r.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function kd(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Pr(e){return Ud.decode(e)}function xd(e){return JSON.parse(Pr(e))}function jd(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function ot(e,n,t,i,r){let o={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...r?.reason===void 0?{}:{reason:Object.freeze({...r.reason})},...r?.files===void 0?{}:{files:Object.freeze([...r.files])}};return Object.freeze(o)}function Ar(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function te(e){if(e instanceof _)return Ar(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Ar(n)}}function Fe(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Ir(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function gr(e){return e==="MANIFEST_DUAL_MISMATCH"?e:Sr(e)}function vd(e){return Sr(e.code)}function Sr(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return Mr("UiPluginValidationError",e)}}function Mr(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function Or(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return Mr("McpAppContractError",e)}}function Oe(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Vd(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Fd(e,n){let t=n.get("package.json");if(t!==void 0)try{let r=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(yr(r)){let o=r.bin,a=typeof o=="string"?o:yr(o)?Object.values(o).find(s=>typeof s=="string"):void 0;for(let s of [a,r.main]){if(typeof s!="string")continue;let c=Bd(s);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(r=>n.has(r))}function Bd(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Hd(){return globalThis.performance?.now()??Date.now()}function Ve(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Ve(n);return Object.freeze(e)}function mr(e){return Object.freeze(Array.from(e))}async function bn(e,n,t,i){if(n.pinnedFiles!==void 0){let s=n.pinnedFiles.get(t);if(s===void 0)throw new _("NOT_FOUND");if(s.byteLength>i)throw new _("LIMIT_EXCEEDED");return new Uint8Array(s)}let r=`${n.relativePath}/${t}`,o=n.scanContext,a=e.fingerprintVerifiedFile;if(o===void 0||!o.cacheable||typeof a!="function")return Tr(e,n.root,r,i);try{let s=o.priorFingerprints.get(r)??await a.call(e,o.workspaceRoot,r,i);o.candidateRealPath=s.candidateRealPath;let c=await Tr(e,n.root,r,i),d=await a.call(e,o.workspaceRoot,r,i);return o.candidateRealPath=d.candidateRealPath,Rr(s,d)&&d.size===BigInt(c.byteLength)&&!Ur(d,o.scanStartedAtNs)?o.files.set(r,{relativePath:r,byteLimit:i,fingerprint:d}):o.cacheable=!1,c}catch(s){let c=!t.includes("/")&&te(s)==="NOT_FOUND"&&o.directoryListings.some(l=>l.relativePath===n.relativePath&&!rt(l.key,t)),d=t===q&&te(s)==="NOT_FOUND"&&Gd(o.directoryListings,n.relativePath);throw !c&&!d&&(o.cacheable=false),s}}async function zd(e,n,t){if(n.pinnedFiles!==void 0)return {iconDiagnostics:[]};let i=await Xt(t,async o=>{try{return await bn(e,n,o,262144)}catch(a){let s=te(a);return s==="NOT_FOUND"?"missing":s==="LIMIT_EXCEEDED"?"too-large":"bad-path"}}),r=i.file;return {...r===void 0?{}:{iconFile:{path:r.path,sha256:createHash("sha256").update(r.bytes).digest("hex"),contentType:r.contentType,byteLength:r.byteLength}},iconDiagnostics:i.diagnostics}}function Gd(e,n){let t=e.find(r=>r.relativePath===n);if(t===void 0)return  false;if(!rt(t.key,"dist"))return  true;let i=e.find(r=>r.relativePath===`${n}/dist`);return i!==void 0&&!rt(i.key,"tools.json")}function Lr(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function $d(e,n,t,i,r,o,a,s){let c=e.fingerprintVerifiedFile,d=Lr(t,i),l=r.candidates.get(d),u=i.relativePath,f;try{f=await Er(e,n,u);}catch(S){if(te(S)!=="NOT_FOUND")throw S}let A=f===void 0?void 0:{relativePath:u,key:f};if(A!==void 0&&(i.source==="apps"||i.source==="skills")&&!le.some(S=>rt(A.key,S)))return Oe(a,s)?l!==void 0&&l.candidate===void 0&&l.candidateRealPath===void 0&&l.files.length===0&&l.directoryListings.length===1&&l.directoryListings[0]?.relativePath===A.relativePath&&l.directoryListings[0]?.key===A.key&&(i.source==="apps"?l.diagnostic?.code==="MANIFEST_MISSING":l.diagnostic===void 0)&&typeof c=="function"?{memo:l}:typeof c!="function"?{}:{context:{state:r,cacheKey:d,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze([A]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let I=async S=>{if(S==="")return A;let y=`${i.relativePath}${S}`;try{let m=await Er(e,n,y);return m===void 0?void 0:{relativePath:y,key:m}}catch(m){if(te(m)==="NOT_FOUND")return;throw m}},h=await Promise.all(hr.map(I)),T=await Promise.all(Jd.map(I));if(!Oe(a,s))return {timeLimitReached:true};let G=typeof c=="function"&&h.every(S=>S!==void 0),V=h.filter(S=>S!==void 0),b=[...V,...T.filter(S=>S!==void 0)],C=new Map,W=l!==void 0&&G,D;if(l!==void 0&&typeof c=="function"){let S=await Promise.all(l.files.map(async y=>{if(!Oe(a,s))return {kind:"time",file:y};try{let m=await c.call(e,n,y.relativePath,y.byteLimit);return {kind:"fingerprint",file:y,current:m}}catch(m){return te(m)==="NOT_FOUND"?{kind:"missing",file:y}:{kind:"error",file:y,error:m}}}));if(S.some(y=>y.kind==="time"))return {timeLimitReached:true};for(let y of S){if(y.kind==="error")throw y.error;if(y.kind==="missing"){W=false;continue}if(y.kind!=="fingerprint")continue;let{file:m,current:N}=y;C.set(m.relativePath,N),D??=N.candidateRealPath,(N.candidateRealPath!==l.candidateRealPath||!Rr(N,m.fingerprint)||Ur(N,o))&&(W=false);}}let O=l!==void 0&&l.directoryListings.length===b.length&&l.directoryListings.every((S,y)=>S.relativePath===b[y]?.relativePath&&S.key===b[y]?.key);return l!==void 0&&G&&O&&W&&D===l.candidateRealPath?{memo:l}:!G||V.length!==hr.length?{}:{context:{state:r,cacheKey:d,workspaceRoot:n,scanStartedAtNs:o,directoryListings:Object.freeze(b),priorFingerprints:C,files:new Map,...D===void 0?{}:{candidateRealPath:D},cacheable:true}}}function rt(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function Er(e,n,t){let i=Cr(e);if(typeof i!="function")return;let r=await i.call(e,n,t);if(!Array.isArray(r)||r.some(a=>typeof a=="string"))return;let o=r.map(br);if(!o.some(a=>a===null))return JSON.stringify(o.slice().sort((a,s)=>Nn(a.name,s.name)||Nn(a.kind,s.kind)).map(a=>[a.name,a.kind]))}function Rr(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Ur(e,n){let t=e.mtimeNs-n;return t>=-_r&&t<=_r}function gi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,r=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!r||n.files.size===0&&!r)return;let o=Object.freeze({...!r&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,o);}function Wd(e,n,t){let i=createHash("sha256"),r=new TextEncoder().encode(Q(e)),o=a=>{let s=new Uint8Array(8);new DataView(s.buffer).setBigUint64(0,BigInt(a)),i.update(s);};return o(r.byteLength),i.update(r),o(n.byteLength),i.update(n),o(t.byteLength),i.update(t),i.digest("hex")}function Xd(e,n){let t={...e.definition,sourceHash:n},i;try{i=oe(t);}catch(o){throw o instanceof U&&o.code==="INPUT_INVALID"?new re("MANIFEST_INVALID","normalized definition is invalid"):o}let r={...t,hash:i};try{de(r);}catch{throw new re("MANIFEST_INVALID","normalized definition is invalid")}return r}function Kd(e,n){return e.actions.some(t=>t.backend.type==="core"&&t.backend.handler!=="state.set"&&!Jn(n,t.backend))}function Yd(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Cr(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function Tr(e,n,t,i){let r=Yd(e);if(!r)throw new _("READ_DENIED");return kd(await r.call(e,n,t,i))}async function qd(e,n,t){let i=Cr(e);if(!i)throw new _("READ_DENIED");let r=await i.call(e,n,t);if(!Array.isArray(r))throw new _("READ_DENIED");return r.map(br).filter(o=>o!==null)}function Zd(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(Dr(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(Dr(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function Dr(e){let n=[],t=[],i=[];for(let r of e.listMcpApps())typeof r.appId=="string"&&n.push(r.appId),r.definition&&typeof r.definition.id=="string"&&t.push(r.definition.id);for(let r of e.listMcpAppTools())typeof r.name=="string"&&i.push(r.name);return {appIds:n,definitionIds:t,toolNames:i}}function Ae(e,n){e.diagnostic||(e.diagnostic=ot(n,e.source,e.relativePath,e.identity?.pluginId));}function Qd(e,n){let t=new Set,i=new Map;for(let o of e){let a=o.identity?.pluginId;if(a===void 0)continue;let s=i.get(a)??[];s.push(o),i.set(a,s);}for(let o of i.values()){if(o.length<2)continue;let a=o.filter(c=>c.provenance!==void 0);if(a.length>0){let c=o.find(d=>n.has(d));if(c){for(let d of a)t.add(d);for(let d of o)d!==c&&d.provenance===void 0&&Ae(d,"RESERVED_ID");continue}for(let d of o)d.provenance===void 0&&Ae(d,"RESERVED_ID");if(a.length>1)for(let d of a)Ae(d,"DUPLICATE_ID");continue}let s=o.filter(c=>c.source==="apps");if(s.length>1){for(let c of s)Ae(c,"DUPLICATE_ID");for(let c of o.filter(d=>d.source==="skills"))Ae(c,"DUPLICATE_ID");}else for(let c of o.filter(d=>d.source==="skills"))Ae(c,"DUPLICATE_ID");}let r=new Map;for(let o of e){if(o.diagnostic?.code==="RESERVED_ID"||t.has(o)||o.provenance===void 0&&!n.has(o)&&i.get(o.identity?.pluginId??"")?.some(c=>c.provenance!==void 0))continue;let a=o.identity?.definitionKey;if(a===void 0)continue;let s=r.get(a)??[];s.push(o),r.set(a,s);}for(let o of r.values())if(o.length>1)for(let a of o)Ae(a,"DUPLICATE_ID");return t}function ep(e,n,t){let i=new Set,r=new Set,o=new Set,a=new Set([...t.appIds,...n.productBundleReservationMetadata?.reservedAppIds??[]]),s=new Set([...t.definitionIds,...n.productBundleReservationMetadata?.reservedDefinitionIds??[]]);for(let l of Zd(n)){for(let u of l.appIds??[])typeof u=="string"&&i.add(u);for(let u of l.definitionIds??[])typeof u=="string"&&r.add(u);for(let u of l.toolNames??[])typeof u=="string"&&o.add(u);}for(let l of e){let u=l.candidate;if(!u)continue;if(i.has(u.pluginId)||r.has(u.definitionId)){Ae(l,"RESERVED_ID");continue}[u.toolNames.read,u.toolNames.action].filter(A=>A!==void 0).some(A=>o.has(A))&&Ae(l,"DUPLICATE_ID");}let c=[...e.filter(l=>l.provenance!==void 0&&l.diagnostic===void 0).flatMap(l=>l.candidate?[l.candidate]:[]),...(n.productBundleReservationMetadata?.candidates??[]).filter(l=>n.productBundleReservationMetadata?.indexHash!==void 0&&l.provenance?.indexHash===n.productBundleReservationMetadata.indexHash)],d=new Set;for(let l of e){let u=l.candidate;if(!(!u||l.diagnostic||l.source!=="apps"||l.provenance!==void 0)&&e.filter(f=>f.source==="apps"&&f.identity?.pluginId===u.pluginId).length===1&&c.some(f=>f.pluginId===u.pluginId)&&!(s.has(u.definitionId)&&!c.some(f=>f.pluginId===u.pluginId&&f.definitionId===u.definitionId))&&!c.some(f=>f.pluginId!==u.pluginId&&f.definitionId===u.definitionId)&&!e.some(f=>f.identity?.pluginId!==u.pluginId&&f.identity?.definitionKey===`${u.definitionId}\0${u.version}`&&f.diagnostic?.code!=="RESERVED_ID"))try{qo(u),d.add(l);}catch(f){Ae(l,f instanceof Te?Or(f.code):"EXEC_DENIED");}}for(let l of e){let u=l.candidate;u&&l.provenance===void 0&&!d.has(l)&&(a.has(u.pluginId)||s.has(u.definitionId))&&Ae(l,"RESERVED_ID");}return d}function np(e){return [...e].sort((n,t)=>{let i=fr.indexOf(n.source)-fr.indexOf(t.source);return i!==0?i:Nn(n.relativePath,t.relativePath)})}function F(e,n,t){e.diagnostic=ot(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function Nr(e,n,t){let i=Jt(t,{mode:"local"});if(!i.ok&&i.parseFailure){F(n,gr(i.rejection.code),Ir(i.rejection));return}let r=jd(i.identity);if(n.bundleIdentity===void 0)n.identity=r;else if(r?.pluginId!==n.bundleIdentity.appId||r.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){F(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){F(n,"RESERVED_ID");return}if(!i.ok){F(n,gr(i.rejection.code),Ir(i.rejection));return}let o=i.manifest,a={pluginId:o.pluginId,definitionKey:`${o.definitionId}\0${String(o.version)}`};if(n.bundleIdentity===void 0&&(n.identity=a),o.actions.length>0)try{ni(o.actions.map(R=>({actionId:R.actionId,inputSchema:R.inputSchema})));}catch(R){if(R instanceof Te){F(n,Or(R.code));return}throw R}let s;try{s=await bn(e,n,"ui/index.html",Ye);}catch(R){F(n,Fe(te(R),"entry"));return}if(s.byteLength>Ye){F(n,"LIMIT_EXCEEDED");return}let c;try{c=Pr(s);}catch{F(n,"ENTRY_INVALID");return}if(s.byteLength===0||c.length===0){F(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(s).digest("hex");if(o.entryHash!==void 0&&o.entryHash!==d){F(n,"ENTRY_INVALID");return}let l={},u,f;if(o.initialState!==void 0){try{u=await bn(e,n,"ui/state.json",2097152);}catch(R){F(n,Fe(te(R),"initial"));return}if(u.byteLength>2097152){F(n,"LIMIT_EXCEEDED");return}try{let R=xd(u),J=o.dataPaths??[],v=xt(R,J);l=ce(v,0,J),ze(l);}catch{F(n,"INITIAL_STATE_INVALID");return}if(f=createHash("sha256").update(u).digest("hex"),o.initialState.hash!==void 0&&o.initialState.hash!==f){F(n,"INITIAL_STATE_INVALID");return}}let A={...o,entryHash:d,...o.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:f}}},I=cn(A),h=Wd(A,s,u??new Uint8Array),T;try{T=Xd(I,h);}catch(R){if(R instanceof re){F(n,vd(R));return}throw R}let G;if(n.bundleLineage!==void 0){let R=n.bundleLineage[n.bundleLineage.length-1];if(!R){F(n,"LINEAGE_INVALID");return}let{legacy:J,...v}=R.definition,{hash:ge,...ct}=T;if(Q(v)!==Q(ct)){F(n,"LINEAGE_STALE");return}if(J!==void 0&&(T={...T,legacy:J}),J!==void 0)try{T={...T,hash:oe(T)},de(T);}catch{F(n,"LINEAGE_INVALID");return}G=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==o.pluginId){F(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==T.id||n.bundleIdentity.version!==T.version||n.bundleIdentity.definitionHash!==T.hash)){F(n,"LINEAGE_STALE");return}let V=await zd(e,n,i.mcpb?.icon),b=hi(o.pluginId),C=o.actions.length===0?{read:b.read}:b,W=Ve(I),D=Ve(A),O=Ve(T),S=Ve({...I.handlers}),y=mr(s),m=u===void 0?void 0:mr(u),N=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:y}),...m===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:f,bytes:m})}}),L={appId:o.pluginId,pluginId:o.pluginId,definitionId:o.definitionId,version:o.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:Ve(i.mcpb)},relativePath:n.relativePath,manifest:D,normalized:W,name:o.name,description:o.description,...o.icon===void 0?{}:{icon:o.icon},...o.tone===void 0?{}:{tone:o.tone},...V.iconFile===void 0?{}:{iconFile:Object.freeze({...V.iconFile})},...V.iconDiagnostics.length===0?{}:{iconDiagnostics:Object.freeze([...V.iconDiagnostics])},definition:O,handlers:S,resources:N,html:c,entryBytes:y,entryHash:d,initialState:Ve(l),...m===void 0?{}:{initialStateBytes:m},...f===void 0?{}:{initialStateHash:f},sourceHash:h,toolNames:Object.freeze(C)},P=n.provenance===void 0?{...L,source:n.source}:{...L,provenance:n.provenance,lineage:G??[]};n.candidate=Object.freeze(P),Kd(o,T.usage)&&F(n,"EXEC_DENIED");}async function wr(e,n){let t={};for(let i of le)try{t[i]=await bn(e,n,i,262144);}catch(r){if(te(r)==="NOT_FOUND")continue;return {files:t,failure:Fe(te(r),"manifest")}}if(t[Y]!==void 0)try{t[q]=await bn(e,n,q,262144);}catch(i){if(te(i)!=="NOT_FOUND")return {files:t,failure:Fe(te(i),"manifest")}}return {files:t}}function mi(e){return le.some(n=>e[n]!==void 0)}async function tp(e,n){let{files:t,failure:i}=await wr(e,n);if(i!==void 0){F(n,i);return}let r=t[Y];return r!==void 0&&!Gt(r)&&(delete t[Y],delete t[q]),mi(t)?t:void 0}function ip(e,n,t,i=Sd,r=false,o=new Set){let a=np(e),s=Qd(a,o),c=Object.freeze(a.filter(f=>f.candidate!==void 0&&f.diagnostic===void 0&&!s.has(f)).map(f=>f.candidate)),d=Object.freeze(a.filter(f=>f.diagnostic!==void 0).map(f=>f.diagnostic)),l=r?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(a.filter(f=>f.source==="bundled"&&f.diagnostic===void 0&&t!==void 0&&f.candidate?.provenance?.indexHash===t).map(f=>f.candidate)),diagnostics:Object.freeze(d.filter(f=>f.source==="bundled").map(f=>Object.freeze({...f}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,u={apps:c,diagnostics:d,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...l===void 0?{}:{productBundleSnapshotMetadata:l}};return Object.defineProperty(u,"candidates",{configurable:false,enumerable:false,get:()=>c}),Object.freeze(u)}function op(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function rp(e,n){if(op(e))return {fs:e,options:n??{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??tt,options:t}}async function _i(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:r}=rp(n,t),o=r.clock??Hd,a=o(),s=await ur(r.productBundle,i,a,o),c=o(),d=BigInt(Date.now())*1000000n,l=[],u=0,f,A=false,I,h;if(r.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{h=await i.getRootIdentity(e),I=er(r.scanCache,h),I.scanStartedAtNs=d;}catch(D){if(te(D)!=="NOT_FOUND")throw D}let T=I!==void 0&&r.productBundle===void 0&&s.packages.length===0&&s.diagnostics.length===0,G=new Set,V=true;l.push(...s.diagnostics.map(D=>({source:D.source,root:r.productBundle?.root??e,name:"",relativePath:D.relativePath,diagnostic:D})));let b=s.reservedIds;s.incomplete&&(f="time_limit");for(let D of s.packages){if(!Oe(c,o)){A=true,f="time_limit";break}let O=D.indexEntry,S=O.packageDir,y=D.files===void 0?void 0:Fd(S,D.files),m=s.indexHash===void 0?void 0:Po(Object.freeze({kind:"bundled",launcher:O.launcher!==false,indexHash:s.indexHash,packageDir:S,appId:O.appId,definitionId:O.definition.id,version:O.definition.version,definitionHash:O.definition.hash,files:O.files}),y),N={source:"bundled",root:r.productBundle?.root??e,name:S.slice(5),relativePath:S,...m===void 0?{}:{provenance:m},...D.files===void 0?{}:{pinnedFiles:D.files},...D.lineage===void 0?{}:{bundleLineage:D.lineage},bundleIdentity:{appId:O.appId,definitionId:O.definition.id,version:O.definition.version,definitionHash:O.definition.hash},identity:Vd(O)};if(l.push(N),u+=1,D.failureCode!==void 0){F(N,D.failureCode);continue}if(D.files?.has(q)===true){F(N,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:q}});continue}let L={};for(let P of le){let R=D.files?.get(P);R!==void 0&&(L[P]=R);}if(!mi(L)){F(N,"BUNDLE_INTEGRITY");continue}if(await Nr(i,N,L),!Oe(c,o)){A=true,f="time_limit";break}}let C=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let D of C){let{source:O,directory:S}=D,y;try{y=await qd(i,e,S);}catch(N){if(te(N)==="NOT_FOUND")continue;T=false,V=false,l.push({source:O,root:e,name:"",relativePath:O,diagnostic:ot(Fe(te(N),"manifest"),O,O)});continue}let m=y.filter(N=>N.kind==="directory"||N.kind==="symlink").filter(N=>wd(N.name)).map(N=>({source:O,root:e,name:N.name,relativePath:Cd(O,N.name)})).sort((N,L)=>Nn(N.relativePath,L.relativePath));for(let N of m){let L={...N};if(l.push(L),h!==void 0?G.add(Lr(h,L)):T=false,!Oe(c,o)){A=true,f="time_limit";break e}let P;if(I!==void 0&&h!==void 0){try{let v=await $d(i,e,h,L,I,d,c,o);if(v.timeLimitReached){A=!0,f="time_limit";break e}L.scanContext=v.context,P=v.memo;}catch(v){T=false,F(L,Fe(te(v),"manifest"));continue}P===void 0&&(T=false);}if(P!==void 0){if(L.candidate=P.candidate,L.diagnostic=P.diagnostic,L.identity=P.identity,O==="skills"&&P.candidate===void 0&&P.diagnostic===void 0)continue;if(u>=64){F(L,"LIMIT_EXCEEDED");continue}if(N.relativePath.split("/").length-1>2){F(L,"LIMIT_EXCEEDED");continue}if(u+=1,!Oe(c,o)){A=true,f="time_limit";break e}continue}let R;if(O==="skills"&&(R=await tp(i,L),R===void 0)){L.diagnostic===void 0&&gi(L);continue}if(u>=64){F(L,"LIMIT_EXCEEDED");continue}if(N.relativePath.split("/").length-1>2){F(L,"LIMIT_EXCEEDED");continue}if(!Oe(c,o)){A=true,f="time_limit";break e}if(u+=1,R===void 0){let v=await wr(i,L);if(v.failure!==void 0||!mi(v.files)){F(L,v.failure??Fe("NOT_FOUND","manifest")),gi(L);continue}R=v.files;}if(await Nr(i,L,R),gi(L),!Oe(c,o)){A=true,f="time_limit";break e}}}if(I!==void 0&&h!==void 0){let D=[...G].sort(Nn),O=I.lastCandidateKeys,S=O!==void 0&&O.length===D.length&&O.every((m,N)=>m===D[N]);if(T=T&&S,V&&!A&&f===void 0)for(let m of I.candidates.keys())try{JSON.parse(m)[0]===h.realPath&&!G.has(m)&&I.candidates.delete(m);}catch{I.candidates.delete(m);}let y=[...I.candidates.keys()].filter(m=>{try{return JSON.parse(m)[0]===h.realPath}catch{return  false}});T=T&&y.length===G.size&&y.every(m=>G.has(m))&&!A&&f===void 0,I.lastCandidateScanUnchanged=T,V&&!A&&f===void 0&&(I.lastCandidateKeys=Object.freeze(D));}A&&l.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:ot("DISCOVERY_TIME_LIMIT","apps","apps")});let W=ep(l,r,b);return ip(l,f,s.indexHash,b,r.productBundle!==void 0,W)}var Sd,en,Od,Ld,fr,Ud,hr,Jd,_r,sp,ap,xr=w(()=>{g();we();Pn();Ne();To();Kt();Ce();qn();Zo();$n();zn();nr();pi();Gn();Ii();Ii();Sd=Tn([]);en="crewx_local_app_",Od=en,Ld=en;fr=["bundled","apps","skills"],Ud=new TextDecoder("utf-8",{fatal:true});hr=["","/ui"],Jd=["/dist"],_r=2000000000n;sp=_i,ap=_i;});g();var jr="SKILL.md",up=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function vr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function fp(e){return e.isDirectory()||e.isSymbolicLink()}function Br(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}var yp=["index.js","main.js"];function Vf(e,n){let t=join(e,"package.json");if(existsSync(t))try{let r=JSON.parse(readFileSync(t,"utf8"));if(r.bin){let o=typeof r.bin=="string"?r.bin:Object.values(r.bin).find(a=>typeof a=="string");if(o){let a=resolve(e,o);if(existsSync(a))return a}}if(typeof r.main=="string"){let o=resolve(e,r.main);if(existsSync(o))return o}}catch{}let i=resolve(e,`${n}.js`);if(existsSync(i))return i;for(let r of yp){let o=resolve(e,r);if(existsSync(o))return o}}function Ap(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(up);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!vr(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let r=vr(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(r?.version??i.version)=="string"?{version:r?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Ip(e){return [join(e,jr),join(e,"skill",jr)]}function st(e,n){if(!Br(e))return null;for(let t of Ip(e)){if(!existsSync(t))continue;let r=Ap(t).frontmatter;return {name:r.name??n,...r.version===void 0?{}:{version:r.version},...r.description===void 0?{}:{description:r.description},skillMdPath:t,dir:e}}return null}function Ei(e){try{return readdirSync(e,{withFileTypes:!0}).filter(fp)}catch{return []}}function gp(e){return e.length===0||/[\\\u0000]/.test(e)?false:e.split("/").every(n=>n.length>0&&n!=="."&&n!=="..")}function Vr(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function at(e){let n=[],t=new Set;for(let i of e)if(Br(i))for(let r of Ei(i)){if(r.name.startsWith("@")){let o=join(i,r.name);for(let a of Ei(o))Vr(st(join(o,a.name),a.name),t,n);continue}Vr(st(join(i,r.name),r.name),t,n);}return n.sort((i,r)=>i.name.localeCompare(r.name))}function mp(e,n){if(!gp(e))throw new Error(`Skill not found: ${e}`);for(let i of n){let r=st(join(i,e),e);if(r)return r;for(let o of Ei(i)){if(!o.name.startsWith("@"))continue;let a=st(join(i,o.name,e),e);if(a)return a}}let t=at(n).find(i=>i.name===e);if(t)return t;throw new Error(`Skill not found: ${e}`)}async function Ff(e){if(!e||e.root===null)return {skills:[],diagnostics:[]};let{discoverWorkspaceApps:n}=await Promise.resolve().then(()=>(xr(),kr)),t=await n(e.root,{productBundle:e}),i=[],r=new Set;for(let o of t.apps){let a=o.provenance?.kind==="bundled"?o.provenance.packageDir:void 0;if(!a)continue;let s=join(e.root,...a.split("/"));for(let c of at([dirname(s)]))resolve(c.dir)!==resolve(s)||r.has(c.name)||(r.add(c.name),i.push(c));for(let c of [join(s,"skill"),join(s,"skills")])for(let d of at([c]))r.has(d.name)||(r.add(d.name),i.push(d));}return {skills:i.sort((o,a)=>o.name.localeCompare(a.name)),diagnostics:t.diagnostics.filter(o=>o.source==="bundled")}}var Bf=at,Hf=mp;
+export{at as discover,Ff as discoverBundledProductSkills,Bf as discoverSkills,Vf as findEntrypoint,Ap as readSkillFrontmatter,mp as resolve,Hf as resolveSkill};