@crewx/sdk 0.9.0-rc.179 → 0.9.0-rc.180

package/dist/esm/publish/index.js

@@ -1,2 +1,2 @@
-import*as pe from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as Hi from'crypto';import {createHash}from'crypto';import {isIP}from'net';import*as te from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as Ls from'js-yaml';import {load}from'js-yaml';import*as vs from'os';import*as js from'tar';import {gunzipSync,gzipSync}from'zlib';var F=(e,n)=>()=>(e&&(n=e(e=0)),n);var m=F(()=>{});var U,Vn=F(()=>{m();U=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function Ot(e){return Zs.test(e)||Qs.test(e)}function Ie(){throw new U("INPUT_INVALID","JSON value is not projection-safe")}function ia(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Mt(e,n,t,i,o,r){if(n>i&&Ie(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(ea.test(e)||ta.test(e)&&!sa(o,r)||na.test(e))&&Ie(),e;if(typeof e=="number")return Number.isFinite(e)||Ie(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&Ie();let s=e;t.has(s)&&Ie(),t.add(s);try{if(Array.isArray(e))return e.map(c=>Mt(c,n+1,t,i,o,r));ia(s)||Ie();let a={};for(let[c,d]of Object.entries(e))Ot(c)&&Ie(),a[c]=Mt(d,n+1,t,i,[...o,c],r);return a}finally{t.delete(s);}}function ge(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>ra)&&Ie(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&Ie();let i=Mt(e,0,new Set,oa+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&Ie(),i}function nn(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function sa(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>nn(t,i))}function tn(e){try{let n=JSON.stringify(e);return n===void 0&&Ie(),n}catch{Ie();}}function Lt(e){return Array.isArray(e)?e.map(Lt):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Lt(e[n])])):e}function ie(e){return tn(Lt(e))}function Rt(e){return Buffer.byteLength(e,"utf8")}var Zs,Qs,ea,na,ta,oa,ra,Re=F(()=>{m();Vn();Zs=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,Qs=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,ea=/<\/?[A-Za-z][^>]*>/,na=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,ta=/^(?:https?|file|ftp|ws|wss):\/\//i;oa=8,ra=4;});var Ji=F(()=>{m();Re();});var Bn,wt=F(()=>{m();Bn=["text/plain","application/json"];});var Wi=F(()=>{m();wt();});function on(e){return ca.has(e)||da.test(e)||pa.test(e)}var Ki,ca,da,pa,Hn,gn,Ne,Ct,Ut,kt,xt,vt,Ge=F(()=>{m();Ki=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],ca=new Set(Ki),da=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,pa=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Hn=/^[A-Za-z0-9_]+$/,gn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,Ne=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ct=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Ut=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,kt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,xt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],vt=["inline","panel"];});function Ft(e){return typeof e=="string"&&Bn.includes(e)}var Xi=F(()=>{m();wt();Ge();});function zn(e){if(!jt(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!la(e.in)||Object.hasOwn(e,"out")&&!ua(e.out))}function la(e){return jt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&Ft(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function ua(e){return jt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&Ft(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function jt(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Vt=F(()=>{m();Wi();Xi();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function Gn(e){return fa.includes(e)}function Jn(e){return Number.isSafeInteger(e)&&e>=$n.min&&e<=$n.max}var fa,$n,Yi,Bt=F(()=>{m();fa=[5,15,30,60],$n=Object.freeze({min:15e3,max:6e5,default:3e5}),Yi=1;});function Kn(e){return Number.isSafeInteger(e)&&e>=Wn.min&&e<=Wn.max}function Xn(e){return ya.includes(e)}var Wn,qi,ya,Ht=F(()=>{m();Wn=Object.freeze({min:6e4,max:18e5,default:6e5}),qi=1,ya=["start","status","cancel"];});function fe(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.downloads!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.downloads===void 0?{}:{downloads:e.downloads},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=ge(t);return createHash("sha256").update(ie(i)).digest("hex")}function $t(e){return `${e.id}\0${e.version}`}function me(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new U("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Ia.test(e.sourceHash)))throw new U("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||fe(e)!==e.hash)throw new U("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!ma(i)))throw new U("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new U("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new U("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new U("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&zt(t.resultProjection),t.schedule!==void 0&&(!Gn(t.schedule.everyMinutes)||!Jn(t.schedule.timeoutMs)))throw new U("DEFINITION_UNSUPPORTED","UI action schedule declaration is invalid");if(t.job!==void 0&&(typeof t.job!="object"||Object.keys(t.job).some(i=>i!=="deadlineMs")||!Kn(t.job.deadlineMs)))throw new U("DEFINITION_UNSUPPORTED","UI action job declaration is invalid");if(t.jobAccess!==void 0&&(!Array.isArray(t.jobAccess)||t.jobAccess.length===0||new Set(t.jobAccess).size!==t.jobAccess.length||!t.jobAccess.every(Xn)||t.job!==void 0))throw new U("DEFINITION_UNSUPPORTED","UI action job control declaration is invalid");if(t.content!==void 0&&!zn(t.content))throw new U("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new U("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new U("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new U("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new U("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new U("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new U("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new U("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new U("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&zt(e.stateProjection),e.summaryProjection){zt(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new U("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new U("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(ga(r,o==="readTool"),n.has(r.name))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new U("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new U("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new U("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.downloads!==void 0&&e.downloads!==true)throw new U("DEFINITION_UNSUPPORTED","UI definition downloads is invalid");if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>nn(t,i))))throw new U("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function ga(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=ge(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let c=ge(a.structuredContent);if(Rt(tn(c))>4*1024)throw new Error("fixed result size")}}catch{throw new U("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function zt(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new U("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function ma(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Ia,Je=F(()=>{m();Re();Vn();Vt();Bt();Ht();Ia=/^[0-9a-f]{64}$/;});var J,we,Gt=F(()=>{m();J="dist/tools.json",we="dist/main.mjs";});var je,Jt=F(()=>{m();je="window";});function Zi(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!ha.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var ha,Qi=F(()=>{m();ha=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function K(e){throw new Wt(e)}function Ra(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function wa(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&K("CSP_ORIGIN_INVALID"),t.value}function Yn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=wa(e,n);Array.isArray(t)||K("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(r=>typeof r!="string"||r!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(r))&&K("CSP_ORIGIN_INVALID");let o=[];for(let r=0;r<t.length;r+=1)(!Object.prototype.hasOwnProperty.call(t,r)||typeof t[r]!="string")&&K("CSP_ORIGIN_INVALID"),o.push(t[r]);return Object.keys(t).length!==t.length&&K("CSP_ORIGIN_INVALID"),o}function Ca(e){let n;try{n=JSON.stringify(e);}catch{K("CSP_ORIGIN_INVALID");}return n===void 0&&K("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function to(e,n){/\s|\\/u.test(e)&&K("CSP_ORIGIN_INVALID");let t=Da.exec(e);t||K("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),o=t[2];(o.includes("@")||o.includes("%")||o.includes("*"))&&K("CSP_ORIGIN_INVALID"),(o.startsWith("[")?Sa:Ma).test(o)||K("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&K("CSP_ORIGIN_INVALID");let s;try{s=new URL(e);}catch{K("CSP_ORIGIN_INVALID");}(s.protocol!==`${i}:`||s.username!==""||s.password!==""||s.search!==""||s.hash!=="")&&K("CSP_ORIGIN_INVALID");let a=s.hostname.toLowerCase();if((!a||a.includes("%"))&&K("CSP_ORIGIN_INVALID"),!a.startsWith("[")){let d=a.endsWith(".")?a.slice(0,-1):a;(d.length===0||d.length>253)&&K("CSP_ORIGIN_INVALID"),d.split(".").some(p=>p.length>63||!La.test(p))&&K("CSP_ORIGIN_INVALID");}let c=s.origin;return (c==="null"||!c.startsWith(`${i}://`))&&K("CSP_ORIGIN_INVALID"),{origin:c,hostname:a}}function Ua(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function io(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function so(e){let n=Ua(e);return io(n,3221225472,24)?n!==3221225481&&n!==3221225482:Oa.some(([t,i])=>io(n,t,i))}function ka(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((r,s)=>r<<16n|BigInt(Number.parseInt(s,16)),0n)}function xa(e){let n=ka(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let o=Number(n&0xffffffffn);return so([o>>>24&255,o>>>16&255,o>>>8&255,o&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function va(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return so(t);if(i===6)return xa(t);let o=e.toLowerCase().replace(/\.$/,"");return !o||!o.includes(".")||n.has(o)?true:Na.some(r=>o===r||o.endsWith(`.${r}`))}function oo(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function ro(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function ao(e,n={}){if(e===void 0){let y=ro({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(y,"utf8").digest("hex")})}Ra(e)||K("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(y=>typeof y!="string")&&K("CSP_ORIGIN_INVALID"),t.some(y=>!Pa.has(y))&&K("CSP_AXIS_UNKNOWN");let i=Yn(e,"connectDomains"),o=Yn(e,"frameDomains"),r=Yn(e,"resourceDomains"),s=Yn(e,"baseUriDomains");(r.length>0||s.length>0)&&K("CSP_AXIS_UNSUPPORTED"),(Ca(e)>Ea||i.length>no||o.length>no||i.length+o.length>Ta||[...i,...o].some(y=>new TextEncoder().encode(y).byteLength>ba))&&K("CSP_LIMIT_EXCEEDED");let c=i.map(y=>to(y,"connectDomains")),d=o.map(y=>to(y,"frameDomains")),l=new Set((n.runtimeHostnames??[]).map(y=>y.toLowerCase().replace(/\.$/,"")));[...c,...d].some(y=>va(y.hostname,l))&&K("CSP_ORIGIN_FORBIDDEN");let p={declared:true,connectDomains:oo(c),frameDomains:oo(d)},u=ro(p);return Object.freeze({...p,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(u,"utf8").digest("hex")})}var Ea,no,Ta,ba,Pa,Na,Da,Sa,Ma,La,Oa,Wt,co=F(()=>{m();Ea=4096,no=16,Ta=32,ba=512,Pa=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),Na=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],Da=/^(https|wss):\/\/([^/?#]+)$/i,Sa=/^\[[^\]]+\](?::[0-9]+)?$/,Ma=/^[^:\[\]]+(?::[0-9]+)?$/,La=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,Oa=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],Wt=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function hn(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function f(e,n=e,t,i){throw new de(e,n,t,i)}function z(e,n){try{return n()}catch(t){throw t instanceof de?t.withPathPrefix(e):t}}function W(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function w(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function gc(e,n){let t={};for(let[i,o]of Object.entries(e))n.includes(i)||(t[i]=o);return t}function Y(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e).find(s=>!i.has(s));o!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",o,"unknown-key");let r=n.find(s=>!w(e,s));r!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",r,"missing-key");}function et(e,n=false,t=false,i=false){return Ba.test(e)||!i&&za.test(e)||Ha.test(e)||t&&po.test(e)||$a.test(e)&&!(n&&/^\s*data:/i.test(e)&&!po.test(e))}function Qn(e,n=new Set,t=0,i=false,o=false,r=""){if(typeof e=="string"){et(e,i,o)&&f("UNSAFE_VALUE","UNSAFE_VALUE",r,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&f("MANIFEST_INVALID","MANIFEST_INVALID",r),n.add(e);try{if(Array.isArray(e)){e.forEach((s,a)=>Qn(s,n,t+1,!1,!1,hn(r,`[${a}]`)));return}W(e)||f("MANIFEST_INVALID","MANIFEST_INVALID",r);for(let[s,a]of Object.entries(e))Qn(a,n,t+1,i&&t===0&&(s==="name"||s==="description"),o,hn(r,s));}finally{n.delete(e);}}}function De(e,n){let t=e[n];return typeof t!="string"&&f("MANIFEST_INVALID"),t}function _e(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&f("MANIFEST_INVALID"),i}function Kt(e){return Va.test(e)||f("MANIFEST_INVALID"),e}function rn(e){return ja.test(e)||f("TOKEN_INVALID"),e}function mc(e){return Po.test(e)||f("MANIFEST_INVALID"),e}function hc(e){W(e)||f("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=mc(t);W(i)||f("MANIFEST_INVALID");let r=i.type;if(r==="text"){Y(i,["type","maxLength"]),n[o]={type:r,maxLength:_e(i,"maxLength",1)};continue}if(r==="text-list"){Y(i,["type","max","itemMaxLength"]),n[o]={type:r,max:_e(i,"max",0),itemMaxLength:_e(i,"itemMaxLength",1)};continue}if(r==="step-list"){Y(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=_e(i,"min",0),a=_e(i,"max",1);s>a&&f("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:_e(i,"labelMaxLength",1),detailMaxLength:_e(i,"detailMaxLength",1)};continue}typeof r=="string"&&f("SCHEMA_TYPE_UNSUPPORTED"),f("MANIFEST_INVALID");}return n}function _c(e,n,t){let i=e[n];(!i||i.type!==t)&&f("MANIFEST_INVALID");}function qn(e,n,t){let i=De(e,"field");return Po.test(i)||f("MANIFEST_INVALID"),_c(n,i,t),i}function Ec(e,n){W(e)||f("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&f("MANIFEST_INVALID"),Ic.includes(t)||f("PRIMITIVE_UNKNOWN"),t){case "card-shell":return Y(e,["primitive"]),{primitive:t};case "meta-banner":return Y(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:rn(De(e,"badgeToken")),noticeToken:rn(De(e,"noticeToken"))};case "heading":return Y(e,["primitive","field"]),{primitive:t,field:qn(e,n,"text")};case "labeled-text":return Y(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&f("MANIFEST_INVALID"),{primitive:t,titleToken:rn(De(e,"titleToken")),field:qn(e,n,"text"),variant:"callout"};case "step-flow":return Y(e,["primitive","titleToken","field"]),{primitive:t,titleToken:rn(De(e,"titleToken")),field:qn(e,n,"step-list")};case "text-list":{Y(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:rn(De(e,"titleToken")),field:qn(e,n,"text-list")};return w(e,"emptyToken")&&(i.emptyToken=rn(De(e,"emptyToken"))),w(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&f("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return f("MANIFEST_INVALID")}function Tc(e,n){return Array.isArray(e)||f("MANIFEST_INVALID"),e.map(t=>Ec(t,n))}function q(e="v2 manifest exceeds a contract limit",n,t){return f("LIMIT_EXCEEDED",e,n,t)}function he(e="initial state is not projection-safe"){return f("INITIAL_STATE_INVALID",e)}function lo(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||pc.test(e)||lc.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),(et(e,true,true)||Ga.test(e)||Ja.test(e)||Wa.test(e))&&f("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Xt(e,n){return (typeof e!="string"||!Ne.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function bc(e){return (typeof e!="string"||!Ct.test(e)||e==="*"||e==="all")&&f("MANIFEST_INVALID","action capability is invalid"),e}function No(e){return (typeof e!="string"||!dc.test(e))&&f("MANIFEST_INVALID","resource hash is invalid"),e}function Yt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&q("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||f("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&f("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&f("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&q("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&f("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&q("v2 manifest array is too long",i,"array-too-long"),e.forEach((o,r)=>Yt(o,n,t+1,hn(i,`[${r}]`)));return}W(e)||f("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[o,r]of Object.entries(e))Yt(r,n,t+1,hn(i,o));}finally{n.delete(e);}}}function Do(e){return (typeof e!="string"||e.length>4096||!gn.test(e))&&(typeof e=="string"&&e.length>4096&&q("projection path is too long"),f("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>on(t))&&f("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function qt(e){W(e)||f("MANIFEST_INVALID","projection policy must be an object"),Y(e,["allow"]),Array.isArray(e.allow)||f("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&q("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=Do(i);t.has(o)&&f("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Pc(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","dataPaths must be an array"),e.length>uc&&q("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=Do(o);i.has(r)&&f("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>nn(r,s))||f("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Nc(e){Array.isArray(e)||f("MANIFEST_INVALID","deviceFeatures must be an array",void 0,"array"),e.length>fc&&f("MANIFEST_INVALID","deviceFeatures allow at most 16 names",void 0,"too-many-items");let n=[],t=new Set;for(let[i,o]of e.entries()){let r=`[${i}]`;typeof o!="string"&&f("MANIFEST_INVALID","a device feature name must be a string",r,"string"),o.length===0&&f("MANIFEST_INVALID","a device feature name must not be empty",r,"empty"),o.length>yc&&f("MANIFEST_INVALID","a device feature name is at most 32 characters",r,"too-long"),Ac.test(o)||f("MANIFEST_INVALID","a device feature name starts with a lowercase letter and holds only letters and digits",r,"format"),t.has(o)&&f("MANIFEST_INVALID","deviceFeatures contain a duplicate name",r,"duplicate-item"),t.add(o),n.push(o);}return n}function Dc(e){if(e!==false)return e!==true&&f("MANIFEST_INVALID","downloads must be true or false",void 0,"boolean"),true}function Sc(e){return (!W(e)||e.view!==true||Object.keys(e).some(n=>n!=="view"&&n!=="entry"))&&f("MANIFEST_INVALID",'share must be { "view": true } or { "view": true, "entry": "<path>" }',void 0,"share-shape"),w(e,"entry")?{view:true,entry:Lc(e.entry)}:{view:true}}function Lc(e){typeof e!="string"&&f("MANIFEST_INVALID","share.entry must be a string","entry","entry-shape");let n=(i,o)=>f("MANIFEST_INVALID",`share.entry ${o}`,"entry",i);e.length===0&&n("empty","must not be empty"),e.length>uo&&n("too-long",`must be at most ${uo} characters`),e.startsWith("/")&&n("absolute","must be relative to the App folder");let t=e.split("/");t.length>fo&&n("too-many-segments",`must have at most ${fo} segments`);for(let i of t)i.length===0&&n("empty-segment","must not contain an empty segment"),(i==="."||i==="..")&&n("dot-segment",'must not contain "." or ".." segments'),Mc.test(i)||n("segment-shape",'segments start with an ASCII letter or digit, then use only letters, digits, ".", "_" and "-"');return t[t.length-1].endsWith(".html")||n("extension","must name a file ending in .html"),e}function Oc(e){return (!W(e)||Object.keys(e).length!==1||typeof e.root!="string")&&f("MANIFEST_INVALID",'files must be exactly { "root": "<workspace folder>" }',void 0,"files-shape"),{root:kc(e.root)}}function kc(e){let n=e.normalize("NFC"),t=(r,s)=>f("MANIFEST_INVALID",`files.root ${s}`,"root",r);n.length===0&&t("empty","must not be empty"),Uc.test(n)&&t("forbidden-character","must not contain control characters, backslash or colon"),(n.startsWith("/")||n.startsWith("~"))&&t("absolute","must be relative to the workspace"),Array.from(n).length>yo&&t("too-long",`must be at most ${yo} characters`);let i=n.split("/"),o=i[0].toLowerCase().replace(/[. ]+$/,"");Cc.includes(o)&&t("reserved-folder","must not start in an App code folder or a tool folder"),i.length<Rc&&t("too-shallow","must name a folder inside a top-level folder, such as docs/trips"),i.length>Ao&&t("too-many-segments",`must have at most ${Ao} segments`);for(let r of i)r.length===0&&t("empty-segment","must not contain an empty segment"),(r==="."||r==="..")&&t("dot-segment",'must not contain "." or ".." segments'),Array.from(r).length>Io&&t("segment-too-long",`segments must be at most ${Io} characters`),wc.test(r)||t("segment-shape",'segments must start with a letter or digit and contain only letters, digits, combining marks, "_" or "-"');return n}function sn(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&f("MANIFEST_INVALID",`${n} is invalid`),e}function go(e,n){return (typeof e!="number"||!Number.isFinite(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function Zt(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||et(e))&&f("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||f("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&q("schema enum is too deep"),t.has(e)&&f("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&q("schema enum array is too long"),e.map(o=>Zt(o,n+1,t));W(e)||f("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))on(o)&&f("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Zt(r,n+1,t);return i}finally{t.delete(e);}}function xc(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","schema required must be an array"),e.length>64&&q("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!gn.test(o))&&f("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&q("schema required key is too long"),i.has(o)&&f("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&f("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function vc(e,n){let t=n?gn:Hn;return e.length>4096&&q("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>on(i)))&&f("MANIFEST_INVALID","schema property name is invalid"),e}function Qt(e,n=0,t=false){W(e)||f("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&q("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&f("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),f("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),Y(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(w(e,"enum")&&(Array.isArray(e.enum)||f("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&q("schema enum is too long"),r.enum=e.enum.map(a=>Zt(a))),i==="string"&&(w(e,"minLength")&&(r.minLength=sn(e.minLength,"schema minLength",4096)),w(e,"maxLength")&&(r.maxLength=sn(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&f("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(w(e,"minimum")&&(r.minimum=go(e.minimum,"schema minimum")),w(e,"maximum")&&(r.maximum=go(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&f("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(w(e,"minItems")&&(r.minItems=sn(e.minItems,"schema minItems",128)),w(e,"maxItems")&&(r.maxItems=sn(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&f("MANIFEST_INVALID","schema array length bounds are inverted"),w(e,"items")&&(r.items=Qt(e.items,n+1,false))),i==="object"){let a;if(w(e,"properties")){W(e.properties)||f("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&q("schema properties are too many"),a={};for(let[l,p]of d){let u=vc(l,t);a[u]=Qt(p,n+1,false);}r.properties=a;}w(e,"minProperties")&&(r.minProperties=sn(e.minProperties,"schema minProperties",64)),w(e,"maxProperties")&&(r.maxProperties=sn(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&f("MANIFEST_INVALID","schema object property bounds are inverted");let c=xc(e.required,a);c!==void 0&&(r.required=c),w(e,"additionalProperties")&&(e.additionalProperties!==false&&f("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>2097152)&&q("action inputSchema subtree is too large"),r}function Fc(e){let n=Qt(e,0,true);return (n.type!=="object"||!n.properties)&&f("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function jc(e){if(W(e)||f("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){Y(e,ic);let n=e.handler;return (typeof n!="string"||!Ut.test(n))&&f("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&w(e,"entry"))return Y(e,sc),e.entry!==we&&f("MANIFEST_INVALID",`skill backend entry must be ${we}`),{type:"skill",entry:we};if(e.type==="skill"){Y(e,oc,rc),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&f("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!kt.test(i))&&f("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=w(e,"env")?$c(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}f("MANIFEST_INVALID","action backend type is unsupported");}function Vc(e){W(e)||f("MANIFEST_INVALID","action must be an object"),Y(e,qa,Za),w(e,"_meta")&&z("_meta",()=>So(e._meta));let n=z("actionId",()=>Xt(e.actionId,"actionId"));Ot(n)&&f("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=z("capability",()=>bc(e.capability)),i=e.mutation;typeof i!="boolean"&&f("MANIFEST_INVALID","action mutation must be boolean","mutation");let o=z("inputSchema",()=>Fc(e.inputSchema)),r;if(w(e,"dataInputs")){Array.isArray(e.dataInputs)||f("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let y=o.properties,g=new Set,_=[];for(let E of e.dataInputs)(typeof E!="string"||!w(y,E)||g.has(E))&&f("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),g.add(E),_.push(E);r=_;}let s=z("resultProjection",()=>qt(e.resultProjection)),a=z("backend",()=>jc(e.backend)),c;w(e,"content")&&((a.type!=="skill"||!zn(e.content))&&f("MANIFEST_INVALID","action content declaration is invalid","content"),c=Gc(e.content));let d;if(w(e,"confirmation")){let y=e.confirmation;y!=="none"&&y!=="native"&&f("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=y;}let l;w(e,"schedule")&&(l=z("schedule",()=>zc(e.schedule,{backend:a,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let p;w(e,"job")&&(l!==void 0&&f("MANIFEST_INVALID","an action is either the scheduled run or a job, not both","job"),p=z("job",()=>Hc(e.job,{backend:a,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let u;return w(e,"jobAccess")&&(p!==void 0&&f("MANIFEST_INVALID","an action is either the job or a job control, not both","jobAccess"),u=z("jobAccess",()=>Bc(e.jobAccess,{backend:a,hasContent:c!==void 0}))),{actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...c===void 0?{}:{content:c},...r===void 0?{}:{dataInputs:r},...d===void 0?{}:{confirmation:d},...l===void 0?{}:{schedule:l},...p===void 0?{}:{job:p},...u===void 0?{}:{jobAccess:u}}}function Bc(e,n){return (n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==we)&&f("MANIFEST_INVALID","jobAccess needs a tool-mode action","jobAccess"),n.hasContent&&f("MANIFEST_INVALID","a job control action takes no content","jobAccess"),(!Array.isArray(e)||e.length===0)&&f("MANIFEST_INVALID","jobAccess must list at least one operation","jobAccess"),(new Set(e).size!==e.length||!e.every(Xn))&&f("MANIFEST_INVALID","jobAccess must name each operation once: start, status or cancel","jobAccess"),Object.freeze([...e])}function Hc(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==we)&&f("MANIFEST_INVALID","job needs a tool-mode action","job"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&f("MANIFEST_INVALID","a job action takes no content, dataInputs or native confirmation","job"),(n.inputSchema.required??[]).length>0&&f("MANIFEST_INVALID","a job action input must accept {}","inputSchema.required"),W(e)||f("MANIFEST_INVALID","job must be an object","job"),Y(e,[],nc);let t=w(e,"deadlineMs")?e.deadlineMs:Wn.default;return Kn(t)||f("MANIFEST_INVALID","job deadlineMs is invalid","job.deadlineMs"),{deadlineMs:t}}function zc(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==we)&&f("MANIFEST_INVALID","schedule needs a tool-mode action","schedule"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&f("MANIFEST_INVALID","a scheduled action takes no content, dataInputs or native confirmation","schedule"),(n.inputSchema.required??[]).length>0&&f("MANIFEST_INVALID","a scheduled action input must accept {}","inputSchema.required"),W(e)||f("MANIFEST_INVALID","schedule must be an object","schedule"),Y(e,Qa,ec),Gn(e.everyMinutes)||f("MANIFEST_INVALID","schedule everyMinutes is invalid","schedule.everyMinutes");let t=w(e,"timeoutMs")?e.timeoutMs:$n.default;return Jn(t)||f("MANIFEST_INVALID","schedule timeoutMs is invalid","schedule.timeoutMs"),{everyMinutes:e.everyMinutes,timeoutMs:t}}function $c(e){return Zi(e)||f("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function Gc(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Jc(e){return W(e)||f("INITIAL_STATE_INVALID","initialState must be an object"),Y(e,ac,cc),e.path!=="ui/state.json"&&f("MANIFEST_INVALID","initialState path is not fixed"),w(e,"hash")?{path:"ui/state.json",hash:No(e.hash)}:{path:"ui/state.json"}}function Wc(e){let n=["wasm","terminal","htmlDocuments","appBrowser"];return (!W(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&f("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{},...e.appBrowser===true?{appBrowser:true}:{}}}function Kc(e,n){let t;try{t=ao(e);}catch(i){let o=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return f("MANIFEST_INVALID",o,void 0,o.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&f("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&f("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function Xc(e,n){Qn(W(e)?gc(e,["csp","downloads","files","share"]):e,new Set,0,true,true),Yt(e),W(e)||f("MANIFEST_INVALID"),Y(e,Xa,Ya),w(e,"_meta")&&z("_meta",()=>So(e._meta)),e.manifestVersion!==2&&f("MANIFEST_INVALID");let t;w(e,"runtime")&&(t=z("runtime",()=>Wc(e.runtime)));let i;w(e,"csp")&&(i=z("csp",()=>Kc(e.csp,t)));let o=z("pluginId",()=>Xt(e.pluginId,"pluginId")),r=z("definitionId",()=>Xt(e.definitionId,"definitionId")),s=z("version",()=>_e(e,"version",1)),a=z("name",()=>lo(e.name,"name")),c=z("description",()=>lo(e.description,"description")),d;w(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&f("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let l;w(e,"tone")&&((typeof e.tone!="string"||!xt.includes(e.tone))&&f("MANIFEST_INVALID","tone is invalid","tone"),l=e.tone),e.entry!=="ui/index.html"&&f("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let p;w(e,"entryHash")&&(p=z("entryHash",()=>No(e.entryHash)));let u;w(e,"initialState")&&(u=z("initialState",()=>Jc(e.initialState)));let y;w(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&f("MANIFEST_INVALID","usage is invalid","usage"),y=e.usage);let g;w(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&f("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),g=e.detailPanel);let _;if(w(e,"displayModes")){((y??je)!==je||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&f("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let $=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(G=>typeof G!="string"||!$.has(G)))&&f("MANIFEST_INVALID","displayModes are invalid","displayModes"),_=e.displayModes;}(y??je)===je&&g!==void 0&&f("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let E=n.mode??"local";E!=="local"&&E!=="installed"&&E!=="published"&&f("MANIFEST_INVALID","manifest mode is invalid"),E!=="local"&&p===void 0&&f("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),E!=="local"&&u!==void 0&&u.hash===void 0&&f("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&f("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&q("surfaces exceed the v2 limit","surfaces","too-many-items");let k=[],x=new Set;for(let $ of e.surfaces)(typeof $!="string"||!vt.includes($))&&f("MANIFEST_INVALID","surface is unsupported","surfaces"),x.has($)&&f("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),x.add($),k.push($);W(e.size)||f("MANIFEST_INVALID","size must be an object","size"),z("size",()=>Y(e.size,["height"]));let P=z("size",()=>_e(e.size,"height",1));P>720&&q("size.height exceeds the v2 limit","size.height","too-large");let C=z("stateProjection",()=>qt(e.stateProjection)),B=e.summaryProjection===void 0?void 0:z("summaryProjection",()=>qt(e.summaryProjection));B!==void 0&&B.allow.some($=>!C.allow.includes($))&&f("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let N=z("dataPaths",()=>Pc(e.dataPaths,C.allow)),D=w(e,"deviceFeatures")?z("deviceFeatures",()=>Nc(e.deviceFeatures)):void 0,L=w(e,"downloads")?z("downloads",()=>Dc(e.downloads)):void 0,I=w(e,"share")?z("share",()=>Sc(e.share)):void 0,A=w(e,"files")?z("files",()=>Oc(e.files)):void 0;Array.isArray(e.actions)||f("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&q("actions exceed the v2 limit","actions","too-many-items");let h=[],T=new Set,V=0,v=0;for(let[$,G]of e.actions.entries()){let ae=`actions[${$}]`,ue=z(ae,()=>Vc(G));if(T.has(ue.actionId)&&f("MANIFEST_INVALID","actions contain a duplicate actionId",`${ae}.actionId`,"duplicate-item"),ue.schedule!==void 0&&(V+=1,V>Yi&&f("MANIFEST_INVALID","an App declares at most one scheduled action",`${ae}.schedule`,"duplicate-item")),ue.job!==void 0&&(v+=1,v>qi&&f("MANIFEST_INVALID","an App declares at most one job action",`${ae}.job`,"duplicate-item")),ue.backend.type==="core"&&ue.backend.handler==="state.set"){ue.mutation||f("MANIFEST_INVALID","state.set actions must be mutations",`${ae}.mutation`);for(let qs of Object.keys(ue.inputSchema.properties))C.allow.includes(qs)||f("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${ae}.inputSchema.properties`);}T.add(ue.actionId),h.push(ue);}return {manifestVersion:2,pluginId:o,definitionId:r,version:s,name:a,description:c,...d===void 0?{}:{icon:d},...l===void 0?{}:{tone:l},entry:"ui/index.html",...p===void 0?{}:{entryHash:p},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...u===void 0?{}:{initialState:u},...y===void 0?{}:{usage:y},...g===void 0?{}:{detailPanel:g},..._===void 0?{}:{displayModes:_},surfaces:k,size:{height:P},stateProjection:C,...B===void 0?{}:{summaryProjection:B},...N===void 0?{}:{dataPaths:N},...D===void 0?{}:{deviceFeatures:D},...L===void 0?{}:{downloads:L},...I===void 0?{}:{share:I},...A===void 0?{}:{files:A},actions:h}}function So(e){W(e)||f("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>tc)&&q("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function Yc(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.schedule===void 0?{}:{schedule:r.schedule},...r.job===void 0?{}:{job:r.job},...r.jobAccess===void 0?{}:{jobAccess:r.jobAccess},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.downloads===void 0?{}:{downloads:e.downloads},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function ei(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>nn(o.join("."),a));return (e.length>4096||et(e,false,false,s))&&he("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||he("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&he("state contains a non-JSON value"),t>8&&he("state is too deep"),n.has(e)&&he("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&he("state array is too long"),s=e.map(c=>ei(c,n,t+1,2097152,o,r));else {W(e)||he("state contains a non-plain object");let c={};for(let[d,l]of Object.entries(e))(d.length>4096||!Hn.test(d)||on(d))&&(d.length>4096&&he("state key is too long"),he("state contains a reserved or invalid key")),c[d]=ei(l,n,t+1,2097152,[...o,d],r);s=c;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&he("state subtree is too large"),s}finally{n.delete(e);}}function ti(e,n=[]){W(e)||he("initial state must be a JSON object");let t=ei(e,new Set,0,2097152,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&he(),t}function qc(e,n={}){Qn(e),W(e)||f("MANIFEST_INVALID"),Y(e,Ka),e.manifestVersion!==1&&f("MANIFEST_INVALID");let t=Kt(De(e,"pluginId")),i=Kt(De(e,"definitionId")),o=_e(e,"version",1),r=_e(e,"primitiveSet",1),s=n.supportedPrimitiveSet??Fa;(!Number.isSafeInteger(s)||s<1)&&f("MANIFEST_INVALID"),r>s&&f("PRIMITIVE_SET_UNSUPPORTED"),W(e.activation)||f("MANIFEST_INVALID"),Y(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&f("MANIFEST_INVALID");let a=Kt(De(e.activation,"language")),c=hc(e.schema),d=Tc(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:c,layout:d}}function Zc(e,n={}){return W(e)||f("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&f("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?Xc(e,n):qc(e,n)}function Ke(e,n={}){try{return Zc(e,n)}catch(t){if(t instanceof de)throw t;return f("MANIFEST_INVALID")}}function _n(e,n={}){let t=Ke(e,n);return t.manifestVersion===2?Yc(t):t}var Fa,ja,Va,Po,Ba,Ha,za,$a,po,Ga,Ja,Wa,Ka,Xa,Ya,qa,Za,Qa,ec,nc,tc,ic,oc,rc,sc,ac,cc,dc,pc,lc,uc,fc,yc,Ac,Ic,de,uo,fo,Mc,yo,Rc,Ao,Io,wc,Cc,Uc,ii=F(()=>{m();Jt();Re();Vt();Qi();Gt();Bt();Ht();co();Ge();Fa=1,ja=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Va=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Po=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Ba=/<\/?[A-Za-z][^>]*>/,Ha=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,za=/^(?:https?|file|ftp|ws|wss):\/\//i,$a=/^\s*(?:javascript|data):/i,po=/data:[^,\s]*,/i,Ga=/(?:https?|file|ftp|ws|wss):\/\//i,Ja=/javascript:/i,Wa=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,Ka=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],Xa=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],Ya=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","deviceFeatures","downloads","share","files"],qa=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Za=["confirmation","dataInputs","content","schedule","job","jobAccess","_meta"],Qa=["everyMinutes"],ec=["timeoutMs"],nc=["deadlineMs"],tc=4*1024,ic=["type","handler"],oc=["type","command"],rc=["env"],sc=["type","entry"],ac=["path"],cc=["hash"],dc=/^[0-9a-f]{64}$/,pc=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,lc=/[\r\n]/,uc=16,fc=16,yc=32,Ac=/^[a-z][A-Za-z0-9]{0,31}$/,Ic=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],de=class e extends Error{constructor(t,i=t,o,r){super(i);this.code=t;this.path=o;this.rule=r;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,hn(t,this.path),this.rule)}};uo=200,fo=3,Mc=/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;yo=200,Rc=2,Ao=4,Io=100,wc=/^[\p{L}\p{N}][\p{L}\p{N}\p{M}_-]*$/u,Cc=[".git",".crewx","node_modules","apps","skills"],Uc=/[\u0000-\u001f\u007f-\u009f\\:<>"|?*]/;});function Co(e){return typeof e=="string"&&e.length<=ed&&Qc.test(e)}function j(e,n,t,i,o){throw new Me(e,{path:n,rule:t,...i===void 0?{}:{message:i},...o===void 0?{}:{file:o}})}function oe(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Z(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function Te(e){let n=`_meta["${Ve}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function od(e){return e.toLowerCase().replace(/_/g,"-")}function rd(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return Te(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return Te("definitionVersion");case "definitionId":return Te("definitionId");default:return Te(`${t}${i}`)}}function Uo(e,n,t){return {path:t(e.path),rule:e.rule??od(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function ko(e){return JSON.parse(JSON.stringify(e))}function si(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&j("LIMIT_EXCEEDED",n,"string-too-long"),(nd.test(e)||td.test(e)||id.test(e))&&j("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||j("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&j("MANIFEST_INVALID",n,"non-json-value"),t>8&&j("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&j("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&j("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((o,r)=>si(o,`${n}[${r}]`,t+1,i));return}oe(e)||j("MANIFEST_INVALID",n,"non-plain-object");for(let[o,r]of Object.entries(e))si(r,n===""?o:`${n}.${o}`,t+1,i);}finally{i.delete(e);}}}function Ee(e,n){return (typeof e!="string"||e.length===0)&&j("MANIFEST_INVALID",n,"string"),e}function cn(e,n){return oe(e)||j("MANIFEST_INVALID",n,"object"),e}function sd(e,n){Array.isArray(e)||j("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>Ee(t,`${n}[${i}]`));}function ad(e,n){typeof e!="boolean"&&j("MANIFEST_INVALID",n,"boolean");}function En(e,n,t,i){for(let o of Object.keys(e))!t.includes(o)&&!i.includes(o)&&j("MANIFEST_INVALID",`${n}.${o}`,"unknown-key");for(let o of t)Z(e,o)||j("MANIFEST_INVALID",`${n}.${o}`,"missing-key");}function cd(e,n){if(e!=="icon")switch(si(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "license":Ee(n,e);return;case "author":{let t=cn(n,e);En(t,e,["name"],["email","url"]);for(let i of Object.keys(t))Ee(t[i],`${e}.${i}`);return}case "repository":{let t=cn(n,e);En(t,e,[],["type","url"]);for(let i of Object.keys(t))Ee(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=cn(t,o);En(r,o,["src","size"],["theme"]),Ee(r.src,`${o}.src`),Ee(r.size,`${o}.size`),Z(r,"theme")&&Ee(r.theme,`${o}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":sd(n,e);return;case "tools":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=cn(t,o);En(r,o,["name"],["description"]),Ee(r.name,`${o}.name`),Z(r,"description")&&Ee(r.description,`${o}.description`);});return}case "prompts":{Array.isArray(n)||j("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=cn(t,o);En(r,o,["name","text"],["description","arguments"]),Ee(r.name,`${o}.name`),Ee(r.text,`${o}.text`);});return}case "tools_generated":case "prompts_generated":ad(n,e);return;case "localization":case "compatibility":case "user_config":cn(n,e);return;default:j("MANIFEST_INVALID",e,"unknown-key");}}function nt(e){return typeof e=="string"&&Ne.test(e)?e:void 0}function xo(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function dd(e){let n=nt(e.name);if(n===void 0)return;let t=e._meta,i=oe(t)?t[Ve]:void 0,o=oe(i)?i:{},r=Z(o,"definitionId")?nt(o.definitionId):n,s=Z(o,"definitionVersion")?xo(o.definitionVersion):1;return {pluginId:n,...r===void 0?{}:{definitionId:r},...s===void 0?{}:{definitionVersion:s}}}function pd(e){let n=nt(e.pluginId);if(n===void 0)return;let t=nt(e.definitionId),i=xo(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function di(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!oe(n))return !1;let t=n._meta;return oe(t)&&Z(t,Ve)}catch{return  false}}function ld(e,n){if(e===le)return n.builtinOnly===true;let t=n._meta,i=oe(t)?t[Ve]:void 0;return oe(i)&&i.builtinOnly===true}function ud(e,n){Z(e,"server")&&j("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let a of Object.keys(e))ai.includes(a)||j("MANIFEST_INVALID",a,"unknown-key");for(let a of ci)Z(e,a)||j("MANIFEST_INVALID",a,"missing-key");e.manifest_version!==oi&&j("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${oi}"`),Co(e.version)||j("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;oe(t)||j("MANIFEST_INVALID","_meta","object"),Z(t,Ve)||j("MANIFEST_INVALID",Te(),"missing-key");let i=t[Ve];oe(i)||j("MANIFEST_INVALID",Te(),"object");for(let a of Object.keys(i))ri.includes(a)||wo.includes(a)||j("MANIFEST_INVALID",Te(a),"unknown-key");for(let a of ri)a==="actions"&&n!==void 0||Z(i,a)||j("MANIFEST_INVALID",Te(a),"missing-key");if(n!==void 0&&Z(i,"actions")&&j("MANIFEST_INVALID",Te("actions"),"two-truths",`actions are declared in both ${X} and ${J}; a server.ts App keeps them in the tools file only`),fd(i.actions),Z(i,"definitionVersion")){let a=i.definitionVersion;(!Number.isSafeInteger(a)||a<1)&&j("MANIFEST_INVALID",Te("definitionVersion"),"positive-integer");}let o={};for(let a of Ro)Z(e,a)&&(cd(a,e[a]),o[a]=ko(e[a]));let r={};for(let[a,c]of Object.entries(t))a!==Ve&&(r[a]=c);let s={manifestVersion:2,pluginId:e.name,definitionId:Z(i,"definitionId")?i.definitionId:e.name,version:Z(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[a,c]of Object.entries(i))a==="definitionId"||a==="definitionVersion"||(s[a]=c);return n!==void 0&&(s.actions=n.map(a=>({...a,backend:{type:"skill",entry:we}}))),Object.keys(r).length>0&&(s._meta=r),{v2Input:s,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:o}}function fd(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=oe(n)?n.backend:void 0;oe(i)&&Z(i,"entry")&&j("MANIFEST_INVALID",Te(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${X} cannot name an entry; a server.ts App declares its actions in ${J}`);});}function yd(e,n,t){oe(e)||j("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",X);let i;try{i=ud(e,t);}catch(s){throw s instanceof Me?new Me(s.code,{...s.reason,file:X}):s}let o;try{let s=Ke(i.v2Input,{mode:n.mode??"local"});s.manifestVersion!==2&&j("MANIFEST_INVALID","","v2-required"),o=s;}catch(s){throw s instanceof de?new Me(s.code,Uo(s,X,rd)):s}let r=e.tools;if(Array.isArray(r)){let s=new Set(o.actions.map(a=>a.actionId));r.forEach((a,c)=>{let d=a.name;if(!s.has(d))throw new Me("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:X})});}return {file:X,manifest:o,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function Ad(e,n){try{let t=Ke(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new Me("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:le});return {file:le,manifest:t,v2Input:e}}catch(t){throw t instanceof de?new Me(t.code,Uo(t,le,i=>i??"")):t}}function dn(e){return fe(_n(e).definition)}function Lo(e){let{entryHash:n,initialState:t,...i}=e,o={...i};return t!==void 0&&(o.initialState={path:t.path}),ko(o)}function Id(e,n){let t=Lo(e),i=Lo(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(r=>ie(t[r]??null)!==ie(i[r]??null))}function gd(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function md(e,n){let t=Id(e,n),i=gd(e,n),o="";try{let r=dn(e),s=dn(n);i=i||r!==s,o=` (definition hash ${r.slice(0,12)} vs ${s.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||j("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${X} and ${le} normalize to different definitions${o}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function Se(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:J},files:[]}}function Oo(e){return {...Se("","tools-needs-manifest-json","MANIFEST_INVALID",`${J} is read with ${X} only`),files:e}}function hd(e,n){if(e.byteLength>n)return {failure:Se("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:Se("","invalid-json")}}if(!oe(t))return {failure:Se("","not-object","MANIFEST_INVALID",`${J} must be a JSON object`)};for(let o of Object.keys(t))if(o!=="schemaVersion"&&o!=="actions")return {failure:Se(o,"unknown-key")};for(let o of ["schemaVersion","actions"])if(!Z(t,o))return {failure:Se(o,"missing-key")};if(t.schemaVersion!==1)return {failure:Se("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:Se("actions","array")};for(let[o,r]of i.entries()){if(!oe(r))return {failure:Se(`actions[${o}]`,"object")};if(Z(r,"backend"))return {failure:Se(`actions[${o}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${J} cannot carry a backend`)}}return {actions:i}}function _d(e,n){let t=n.maxBytes??262144,i=[],o=new TextDecoder("utf-8",{fatal:true});for(let r of ee){let s=e[r];if(s===void 0)continue;if(s.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:r},files:[r]}};let a;try{a=JSON.parse(o.decode(s));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:r},files:[r]}}}if(!oe(a))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${r} must be a JSON object`,file:r},files:[r]}};i.push({file:r,raw:a});}return {parsed:i}}function He(e,n={}){let{parsed:t,failure:i}=_d(e,n),o=ee.filter(y=>e[y]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let r=e[J],s=r===void 0?void 0:hd(r,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:s===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:Oo(o),parseFailure:true,builtinOnly:false};let a=t[0],c=a.file===X?dd(a.raw):pd(a.raw),d=t.some(y=>ld(y.file,y.raw)),l;if(s!==void 0){let y=t.some(g=>g.file===X)?s.failure:Oo(o);if(y!==void 0)return {ok:false,rejection:y,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};l=s.actions;}let p=[];try{for(let y of t)p.push(y.file===X?yd(y.raw,n,l):Ad(y.raw,n));p.length===2&&md(p[0].manifest,p[1].manifest);}catch(y){if(y instanceof Me)return {ok:false,rejection:{code:y.code,reason:y.reason,files:y.code==="MANIFEST_DUAL_MISMATCH"?[...ee]:y.reason.file===void 0||y.reason.file===J?o:[y.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw y}let u=p[0];return {ok:true,...u,identity:c??{pluginId:u.manifest.pluginId},files:o}}var X,le,ee,oi,Ve,ai,ci,Ro,ri,wo,Qc,ed,nd,td,id,Me,tt=F(()=>{m();Je();Re();Gt();Ge();ii();X="manifest.json",le="ui-plugin.json",ee=[X,le],oi="0.3",Ve="dev.crewx",ai=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),ci=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),Ro=Object.freeze(ai.filter(e=>e!=="server"&&!ci.includes(e))),ri=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),wo=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp","deviceFeatures","downloads","share","files"]),Qc=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,ed=256,nd=/<\/?[A-Za-z][^>]*>/,td=/^\s*javascript:/i,id=/data:[^,\s]*,/i;Me=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});function zo(e){if(e===void 0)return {kind:"none"};if(typeof e!="string")return {kind:"invalid",reason:"bad-path"};if(bd.test(e))return {kind:"url",declared:e};if(!Dd(e))return {kind:"invalid",reason:"bad-path",declared:e};let n=e.lastIndexOf("."),t=n<0?void 0:Ed.get(e.slice(n+1).toLowerCase());return t===void 0?{kind:"invalid",reason:"bad-type",declared:e}:{kind:"file",path:e,contentType:t}}function Dd(e){return e.length===0||e.length>512||e.startsWith("/")||e.includes("\\")||e.includes("\0")?false:e.split("/").every(n=>n!==""&&n!=="."&&n!=="..")}async function Tn(e,n){let t=zo(e);if(t.kind==="none")return {diagnostics:[]};if(t.kind==="url")return {diagnostics:[{code:"ICON_NOT_FILE",severity:"warning",declared:t.declared}]};if(t.kind==="invalid")return {diagnostics:[pi(t.reason,t.declared)]};let i=await n(t.path);if(typeof i=="string")return {diagnostics:[pi(i,t.path)]};let o=$o(t.contentType,i);if(!o.ok)return {diagnostics:[pi(o.reason,t.path)]};let r={path:t.path,contentType:t.contentType,byteLength:i.byteLength,bytes:i},s=o.square===false?[{code:"ICON_NOT_SQUARE",severity:"warning",declared:t.path}]:[];return {file:r,diagnostics:s}}function pi(e,n){return {code:"ICON_INVALID",severity:"error",reason:e,...n===void 0?{}:{declared:n}}}function $o(e,n){if(n.byteLength>262144)return {ok:false,reason:"too-large"};if(e==="image/png")return !Vo(n,Pd)||xd(n,12,16)!=="IHDR"||n.byteLength<24?{ok:false,reason:"bytes-mismatch"}:{ok:true,square:jo(Bo(n,16),Bo(n,20))};if(e==="image/jpeg"){if(!Vo(n,Nd))return {ok:false,reason:"bytes-mismatch"};let t=Ud(n);return {ok:true,square:t===void 0?void 0:jo(t.width,t.height)}}return Sd(n)}function Sd(e){let n;try{n=Td.decode(e);}catch{return {ok:false,reason:"bytes-mismatch"}}return wd(n)?{ok:false,reason:"unsafe-svg"}:Md.test(n)?{ok:true,square:Cd(n)}:{ok:false,reason:"bytes-mismatch"}}function wd(e){if(Ld.some(n=>n.test(e)))return  true;for(let n of e.matchAll(Od))if(!(n[1]??n[2]??n[3]??"").startsWith("#"))return  true;for(let n of e.matchAll(Rd))if(vo.lastIndex=n.index??0,!vo.test(e))return  true;return  false}function Cd(e){let n=/<svg\b[^>]*>/i.exec(e)?.[0];if(n===void 0)return;let t=Go(n,"viewBox");if(t!==void 0){let r=t.trim().split(/[\s,]+/).map(Number);return r.length===4&&r.every(Number.isFinite)?r[2]===r[3]:void 0}let i=Fo(n,"width"),o=Fo(n,"height");return i===void 0||o===void 0?void 0:i===o}function Go(e,n){let t=new RegExp(`\\s${n}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`).exec(e);return t?.[1]??t?.[2]}function Fo(e,n){let t=Go(e,n),i=t===void 0?null:/^\s*(\d+(?:\.\d+)?)(?:px)?\s*$/.exec(t);return i===null?void 0:Number(i[1])}function Ud(e){let n=2;for(;n+4<=e.byteLength;){if(e[n]!==255)return;let t=e[n+1];if(t===255){n+=1;continue}if(t===216||t===1||t>=208&&t<=215){n+=2;continue}if(t===217)return;let i=e[n+2]<<8|e[n+3];if(i<2)return;if(kd(t))return n+9>e.byteLength?void 0:{height:Ho(e,n+5),width:Ho(e,n+7)};n+=2+i;}}function kd(e){return e>=192&&e<=207&&e!==196&&e!==200&&e!==204}function jo(e,n){if(!(e<=0||n<=0))return e===n}function Vo(e,n){return e.byteLength>=n.length&&n.every((t,i)=>e[i]===t)}function xd(e,n,t){return String.fromCharCode(...e.subarray(n,t))}function Bo(e,n){return (e[n]<<24|e[n+1]<<16|e[n+2]<<8|e[n+3])>>>0}function Ho(e,n){return e[n]<<8|e[n+1]}var Ed,Td,bd,Pd,Nd,Md,Ld,Od,Rd,vo,li=F(()=>{m();Ed=new Map([["svg","image/svg+xml"],["png","image/png"],["jpg","image/jpeg"],["jpeg","image/jpeg"]]),Td=new TextDecoder("utf-8",{fatal:true}),bd=/^[A-Za-z][A-Za-z0-9+.-]*:/,Pd=[137,80,78,71,13,10,26,10],Nd=[255,216,255];Md=/^\s*(?:<\?[\s\S]*?\?>\s*|<!--[\s\S]*?-->\s*)*<svg(?=[\s/>])/,Ld=[/<script/i,/[\s"'/]on[a-z]+\s*=/i,/<foreignobject/i,/<!doctype/i,/<!entity/i,/<(?:iframe|embed|object)\b/i,/@import/i],Od=/(?:^|[\s"'/])(?:xlink:)?href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/gi,Rd=/url\(/gi,vo=/url\(\s*["']?#/iy;});var ui=F(()=>{m();Ji();tt();li();ii();Ge();});function S(e,n=e){throw new Le(e,n)}var Le,ot=F(()=>{m();Le=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var ir=F(()=>{m();});var or=F(()=>{m();Je();Re();ot();ir();});function sr(e,n){return rr.add(e),n!==void 0&&Kd.set(e,n),e}function pn(e){return e!==null&&typeof e=="object"&&rr.has(e)}var rr,Kd,rt=F(()=>{m();rr=new WeakSet,Kd=new WeakMap;});function Dn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function yi(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function dr(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))dr(n);return Object.freeze(e)}function re(e){throw new Oe("LINEAGE_INVALID",e)}function np(e){throw new Oe("LINEAGE_STALE",e)}function pr(e){if(!Dn(e)||!yi(e,qd,Zd)||!Dn(e.actions))return re("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!Dn(n)||!yi(n,Qd,ep))return re("Lineage action definition shape is invalid");return e}function tp(e){if(!Dn(e)||!yi(e,Xd,Yd))return re("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!ar.test(e.hash))return re("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!ar.test(e.sourceHash)))return re("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return re("Lineage compatibility marker is invalid");let n=pr(e.definition);if(n.version!==e.version)return re("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return re("Lineage source hash does not match its definition");let t;try{t=fe(n),me({...n,hash:e.hash});}catch{return re("Lineage definition is invalid")}return t!==e.hash?re("Lineage definition hash does not match"):dr({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function cr(e){return e.stateProjection?.allow??[]}function ip(e,n){let t=[],i=new Set(cr(n));cr(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,c]of Object.entries(e.actions)){let d=n.actions[a];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(c=>!a.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function op(e,n){return ie(e)===ie(n)}function Ai(e,n){if(!Array.isArray(e)||e.length===0)return re("Definition lineage is missing");if(!Dn(n)||typeof n.hash!="string")return re("Current definition is invalid");let t,i;try{let{hash:a,...c}=n;i=pr(c),t={...i,hash:a},me(t);}catch{return re("Current definition is invalid")}let o=e.map(tp),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return re("Lineage definition ids do not match");if(o.some((a,c)=>c>0&&a.version<=o[c-1].version))return re("Lineage generations are not in increasing version order");if(o.some((a,c)=>o.findIndex(d=>d.hash===a.hash)!==c))return re("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!op(s.definition,i))return np("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),c=new Set;for(let l of o)if(l.sourceHash===void 0)for(let p of Object.keys(l.definition.actions))a.has(p)&&c.add(p);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(l=>!c.has(l))){let l="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new Oe("LINEAGE_INVALID",`Lineage compatibility failed: ${l}`,[l])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(l=>l.compat==="break"))continue;let d=ip(o[a].definition,t);if(d.length>0)throw new Oe("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(o),current:t})}var Oe,ar,Xd,Yd,qd,Zd,Qd,ep,Ii=F(()=>{m();Je();Re();Oe=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},ar=/^[0-9a-f]{64}$/,Xd=["version","hash","definition"],Yd=["sourceHash","compat"],qd=["id","version","actions"],Zd=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","downloads","legacy"],Qd=["capabilities"],ep=["inputKeys","dataInputs","confirmation","resultProjection","content","env","schedule","job","jobAccess"];});var lr,ur,fr,yr,Ar=F(()=>{m();lr="text/html;profile=mcp-app",ur=["crewx_app_terminal_connect","crewx_app_html_viewer_open","crewx_app_browser","crewx_files_list","crewx_files_read","crewx_files_write","crewx_docs_share"],fr=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"],yr="text/html";});function Sn(e){return typeof e=="string"&&rp.includes(e)}function st(e,n){return e==="card"&&n?.type==="core"&&Sn(n.handler)}var rp,at=F(()=>{m();rp=Object.freeze(["card.secret-env"]);});function Ir(e,n=[],t){if(e.content!==void 0||e.confirmation!=="none")return "denied";let i=sp();return i&&Object.hasOwn(i,e.actionId)?i[e.actionId]:e.backend?.type==="core"&&e.backend.handler.startsWith("host.")?"denied":e.backend?.type==="core"&&e.backend.handler==="state.set"?"allowed":e.backend?.type==="core"&&Sn(e.backend.handler)||e.backend?.type==="skill"?"approval_required":e.backend===void 0&&n.includes(e.actionId)?"allowed":"denied"}function sp(e){return;}var gr=F(()=>{m();Je();rt();at();});function Ap(e){return On.has(e)&&(e.initialState===void 0||On.has(e.initialState))}function Tr(e,n,t,i){let o=i===void 0?void 0:Object.freeze({hash:i.hash,bytes:Object.freeze(i.bytes)}),r=Object.freeze({mimeType:yr,entryHash:e,html:n,bytes:Object.freeze(t),...o===void 0?{}:{initialState:o}});return o!==void 0&&On.add(o),On.add(r),r}function Ip(e){let n=[];return e?.terminal===true&&n.push({name:"crewx_app_terminal_connect",description:"Open a local-only terminal session for this App.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"A local terminal connection is ready for this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye}),e?.htmlDocuments===true&&n.push({name:"crewx_app_html_viewer_open",description:"List workspace HTML documents or open one through a short-lived Host capability.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"},operation:{type:"string",enum:["list","open"]},documentId:{type:"string"}},required:["threadId","instanceId","operation"],additionalProperties:false},textFallback:"Workspace HTML documents are available through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye}),e?.appBrowser===true&&n.push({name:"crewx_app_browser",description:"Grant this App a native Desktop browser window. Browser commands use the custom Host RPC, not this tool.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"Desktop browser access is granted to this App. Browser commands use the custom Host RPC ui/crewx-app-browser.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye}),n}function gp(e){let n=[];return e?.appFiles===true&&n.push({name:"crewx_files_list",description:"List the .md files of this App on the phone, sorted by ref, at most 200 per page. Pass `next` as `after` for the next page.",inputSchema:{type:"object",properties:{prefix:{type:"string",description:'A folder such as "workouts/". Omit for every file.'},after:{type:"string",description:"Return only refs after this one (the `next` of the previous page)."}},additionalProperties:false},textFallback:"The markdown files of this App are listed through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye},{name:"crewx_files_read",description:"Read one .md file: its text and its version (sha256 of the UTF-8 bytes).",inputSchema:{type:"object",properties:{ref:{...gi}},required:["ref"],additionalProperties:false},textFallback:"A markdown file of this App is read through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye},{name:"crewx_files_write",description:"Write one .md file (at most 256 KiB). expectedVersion null creates it and fails if it exists; a version string replaces it only if the file still has that version.",inputSchema:{type:"object",properties:{ref:{...gi},text:{type:"string",maxLength:256*1024},expectedVersion:{type:["string","null"],description:"null = create only, or the version the file had when you read it."}},required:["ref","text","expectedVersion"],additionalProperties:false},textFallback:"A markdown file of this App is written through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye}),e?.resultShare===true&&n.push({name:"crewx_docs_share",description:"Open the Host share sheet for one markdown file of this App; resolves when the sheet closes.",inputSchema:{type:"object",properties:{ref:{...gi}},required:["ref"],additionalProperties:false},textFallback:"The Host share sheet opens for a markdown file of this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:ye}),n}function ze(e,n,t){return (typeof e!="string"||!_r.test(e))&&S(n,`${t} must be a safe identifier`),e}function Mn(e,n,t){let i=e??t;return (typeof i!="string"||i.trim().length===0||i.length>dp)&&S("TOOL_INVALID",`${n} must be a meaningful description`),i}function hi(e){return (typeof e!="string"||e.length===0||e.length>ln||!/<html(?:\s|>)/i.test(e)||!/<\/html\s*>/i.test(e))&&S("HTML_INVALID","MCP App HTML must be a non-empty HTML document"),e}function Ln(e,n=0){try{let t=ge(e,n);return t.type!==void 0&&t.type!=="object"&&S("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Le)throw t;S("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function mp(e){return (typeof e!="string"||e.trim().length===0||e.length>pp)&&S("TOOL_INVALID","MCP App tools require a meaningful text fallback"),e}function hp(e){e===void 0&&S("TOOL_INVALID","MCP App tool visibility is required");let n=[...e];return (n.length===0||n.some(t=>t!=="model"&&t!=="app")||new Set(n).size!==n.length)&&S("TOOL_INVALID","MCP App tool visibility must contain model and/or app once"),n}function Pr(e){return (typeof e!="string"||!Er.test(e))&&S("RESOURCE_URI_INVALID","MCP App resource URI is not a registered ui:// URI"),e}function Nr(e){let n=ze(e.appId,"APP_ID_INVALID","Local App id"),t=Mn(e.name,"Local App name",n),i=Mn(e.description,"Local App description",`${t} interactive view`),o=lt(e.definition),r=hi(e.html),s=ct(e.entryHash,"Local App entry hash"),a=e.entryBytes===void 0?Array.from(new TextEncoder().encode(r)):pt(e.entryBytes,"Local App entry bytes");(dt(a)!==s||Mr(a)!==r)&&S("HTML_INVALID","Local App entry bytes do not match the HTML hash");let c=_p(e),d=[];Array.isArray(e.actions)||S("TOOL_INVALID","Local App actions must be an array");for(let P of e.actions){let C=ze(P.actionId,"TOOL_ID_INVALID","Local App action id");(d.includes(C)||!Object.prototype.hasOwnProperty.call(o.actions,C))&&S("TOOL_INVALID",`Local App action is not declared by the UI definition: ${C}`),d.push(C);}let l=ze(e.readToolName,"TOOL_ID_INVALID","Local App read tool name"),p=e.actionToolName===void 0?void 0:ze(e.actionToolName,"TOOL_ID_INVALID","Local App action tool name");d.length===0&&p!==void 0&&S("TOOL_INVALID","A static local App cannot register an action tool"),d.length>0&&p===void 0&&S("TOOL_INVALID","A stateful local App requires an action tool name"),p!==void 0&&p===l&&S("TOOL_ID_CONFLICT",`Local App read and action tools share a name: ${l}`);let u=[...Ip(e.runtime),...gp(e.hostTools)];u.some(P=>P.name===l||P.name===p)&&S("TOOL_ID_CONFLICT","Local App read or action tool conflicts with a requested Host capability");let y={name:l,description:`${t} current state`,inputSchema:yp,textFallback:`${t} current state is available through its open instance.`,visibility:Object.freeze(["model","app"]),kind:"read",resourceBinding:ye},g=[Object.freeze(y)];if(g.push(...u.map(P=>Object.freeze(P))),p!==void 0){let P={name:p,description:`${t} actions`,inputSchema:_i(e.actions),textFallback:`${t} action requests are handled by the open App instance.`,visibility:Object.freeze(["app"]),kind:"action",resourceBinding:ye,actionIds:Object.freeze([...d])};g.push(Object.freeze(P));}let _=[],E=new Set(g.map(P=>P.name));if(p!==void 0)for(let P of e.actions){let C=`${p}__${P.actionId}`;if(C.length>128||!_r.test(C)){_.push(Object.freeze({toolName:C,actionId:P.actionId,reason:"name_too_long"}));continue}if(E.has(C)){_.push(Object.freeze({toolName:C,actionId:P.actionId,reason:"name_collision"}));continue}let B=Ir({actionId:P.actionId,confirmation:o.actions[P.actionId]?.confirmation,content:o.actions[P.actionId]?.content,backend:P.backend},e.modelActions),N=Object.freeze([...Np(B,o.usage,P.backend)]),D={name:C,description:`${C} action`,inputSchema:Ln(P.inputSchema),textFallback:`${C} action requests are handled by the open App instance.`,visibility:N,kind:"action",resourceBinding:ye,actionId:P.actionId,actionIds:Object.freeze([P.actionId]),_meta:Object.freeze({ui:Object.freeze({visibility:N})})};g.push(Object.freeze(D)),E.add(C);}let k=Tr(s,r,a,c===void 0?void 0:{hash:c.hash,bytes:[...c.bytes]}),x={appId:n,name:t,description:i,...e.icon===void 0?{}:{icon:Lr(e.icon)},...e.tone===void 0?{}:{tone:Or(e.tone)},builtinOnly:false,definition:o,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},resourceBinding:ye,resource:k,tools:Object.freeze(g),toolDiagnostics:Object.freeze(_)};return ne(x)}function Dr(e={}){return new mi(e)}function _i(e){if(e.length===0)return Ln({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Ln(i.inputSchema));return Ln(Ep(n,t),br)}function _p(e){let n=e.definition.dataPaths??[];if(e.initialStateBytes===void 0){e.initialStateHash!==void 0&&S("STATE_INVALID","Initial state hash has no bytes"),e.initialState!==void 0&&ge(e.initialState,0,n);return}e.initialStateHash===void 0&&S("STATE_INVALID","Initial state bytes require a hash");let t=ct(e.initialStateHash,"Initial state hash"),i=pt(e.initialStateBytes,"Initial state bytes");dt(i)!==t&&S("STATE_INVALID","Initial state bytes do not match the hash");let o;try{let r=new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(i));o=ge(JSON.parse(r),0,n);}catch{S("STATE_INVALID","Initial state bytes are not projection-safe JSON");}return e.initialState!==void 0&&ie(o)!==ie(ge(e.initialState,0,n))&&S("STATE_INVALID","Initial state bytes do not match the state value"),{hash:t,bytes:Object.freeze([...i])}}function Ep(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}function Tp(e){let n=Rn(e),t=ze(n.appId,"APP_ID_INVALID","MCP App id"),i=hi(n.html);Pr(n.uiUri);let o=n.definition===void 0?void 0:lt(n.definition),r=e.provenance;r!==void 0&&(!pn(r)||r.appId!==t||r.definitionId!==o?.id||r.version!==o?.version||r.definitionHash!==o?.hash)&&S("TOOL_INVALID","Product App built-in registration provenance is not verified");let s=Object.freeze(n.tools.map(d=>ne(Rn(d)))),a=ne({...n,appId:t,html:i,...o===void 0?{}:{definition:o},...r===void 0?{}:{provenance:r},tools:s}),c=ne({uri:a.uiUri,mimeType:lr,text:i,...a.csp===void 0?{}:{_meta:{ui:{csp:a.csp}}}});return ne({appId:t,name:a.name,description:a.description,...a.icon===void 0?{}:{icon:a.icon},...a.tone===void 0?{}:{tone:a.tone},builtinOnly:a.builtinOnly,uiUri:a.uiUri,...o===void 0?{}:{definition:o},resourceBinding:Object.freeze({kind:"mcp",uri:a.uiUri}),resource:c,tools:s,descriptor:a})}function bp(e){(e.resourceBinding.kind!=="instance"||e.builtinOnly!==false)&&S("STATE_INVALID","Local App registration binding is invalid"),Object.prototype.hasOwnProperty.call(e,"uiUri")&&S("STATE_INVALID","Local App registration cannot contain uiUri");let n=ze(e.appId,"APP_ID_INVALID","Local App id"),t=lt(e.definition),i=e.provenance;i!==void 0&&(!pn(i)||i.appId!==n||i.definitionId!==t.id||i.version!==t.version||i.definitionHash!==t.hash)&&S("TOOL_INVALID","Product App local registration provenance is not verified");let o=Pp(e.resource),r=e.tools.map(a=>{ze(a.name,"TOOL_ID_INVALID","Local App tool name"),Mn(a.description,"Local App tool description","Local App tool"),mp(a.textFallback);let c=Ln(a.inputSchema,a.kind==="action"&&!("actionId"in a)?br:0);if((a.resourceBinding.kind!=="instance"||Object.prototype.hasOwnProperty.call(a,"resourceUri"))&&S("TOOL_INVALID","Local App tools cannot carry an MCP resource URI"),a.kind==="host")return (!fp.has(a.name)||a.visibility.length!==1||a.visibility[0]!=="app"||Object.prototype.hasOwnProperty.call(a,"actionId"))&&S("TOOL_INVALID","Local App Host tools must use an allow-listed name and app-only visibility"),ne({...a,inputSchema:c,visibility:Object.freeze(["app"])});if(a.kind==="action"){if("actionId"in a){let l=ze(a.actionId,"TOOL_ID_INVALID","Local App action id");Object.prototype.hasOwnProperty.call(t.actions,l)||S("TOOL_INVALID","Local App action tool references an undeclared action");let p=hp(a._meta.ui.visibility);return JSON.stringify(p)!==JSON.stringify(a.visibility)&&S("TOOL_INVALID","Local App action metadata visibility must match the tool visibility"),ne({...a,actionId:l,actionIds:Object.freeze([l]),inputSchema:c,visibility:p,_meta:{ui:{visibility:p}}})}let d=[...a.actionIds];return (d.length===0||d.some(l=>!Object.prototype.hasOwnProperty.call(t.actions,l)))&&S("TOOL_INVALID","Local App action tool references an undeclared action"),ne({...a,inputSchema:c,actionIds:Object.freeze(d)})}return ne({...a,inputSchema:c})}),s=ne({appId:n,name:Mn(e.name,"Local App name",e.appId),description:Mn(e.description,"Local App description",e.name),...e.icon===void 0?{}:{icon:Lr(e.icon)},...e.tone===void 0?{}:{tone:Or(e.tone)},builtinOnly:false,definition:t,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},...i===void 0?{}:{provenance:i},resourceBinding:ye,resource:o,tools:Object.freeze(r),toolDiagnostics:Object.freeze([...e.toolDiagnostics??[]])});return mr.has(e)?e:(mr.add(s),s)}function Pp(e){let n=hi(e.html),t=ct(e.entryHash,"Local App entry hash");if(Ap(e))return e;let i=pt(e.bytes,"Local App entry bytes");(dt(i)!==t||Mr(i)!==n)&&S("HTML_INVALID","Local App entry bytes do not match the HTML hash");let o=e.initialState===void 0?void 0:{hash:ct(e.initialState.hash,"Initial state hash"),bytes:pt(e.initialState.bytes,"Initial state bytes")};return o&&dt(o.bytes)!==o.hash&&S("STATE_INVALID","Initial state bytes do not match the hash"),Tr(t,n,i,o)}function Np(e,n,t){if(st(n,t))return ["model"];let i=t?.type==="core"&&Sn(t.handler);return e==="denied"||i?["app"]:["model","app"]}function Dp(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:false,definition:Sr(e.definition),...e.provenance===void 0?{}:{provenance:e.provenance},entryHash:e.resource.entryHash,resourceBinding:ye,tools:e.tools})}function Sp(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:e.builtinOnly,uiUri:e.uiUri,...e.definition===void 0?{}:{definition:Sr(e.definition)},resourceBinding:Object.freeze({kind:"mcp",uri:e.uiUri}),tools:e.tools})}function lt(e){try{if(Object.isFrozen(e))return me(e),ne(e);let n=Rn(e);return me(n),ne(n)}catch(n){if(n instanceof Le)throw n;S("STATE_INVALID","UI definition is not a valid immutable definition");}}function Sr(e){return ne({id:e.id,version:e.version,hash:e.hash})}function Mp(e){return e!==null&&typeof e=="object"&&typeof e.id=="string"&&Number.isSafeInteger(e.version)&&typeof e.hash=="string"}function hr(e,n,t){return `${e}\0${n}\0${t}`}function ct(e,n){return (typeof e!="string"||!cp.test(e))&&S("SERIALIZATION_INVALID",`${n} is invalid`),e}function dt(e){return createHash("sha256").update(Uint8Array.from(e)).digest("hex")}function pt(e,n){return (!Array.isArray(e)||e.some(t=>!Number.isInteger(t)||t<0||t>255))&&S("SERIALIZATION_INVALID",`${n} is invalid`),[...e]}function Mr(e){try{return new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(e))}catch{S("SERIALIZATION_INVALID","UTF-8 bytes are invalid");}}function Lr(e){return (typeof e!="string"||!lp.test(e))&&S("TOOL_INVALID","MCP App icon is invalid"),e}function Or(e){return (typeof e!="string"||!up.has(e))&&S("TOOL_INVALID","MCP App tone is invalid"),e}function Rn(e,n=new Map){if(e===null||typeof e!="object")return e;let t=e;if(n.has(t)&&S("SERIALIZATION_INVALID","MCP App value contains a cycle"),Array.isArray(e)){let r=[];n.set(t,r);for(let s of e)r.push(Rn(s,n));return n.delete(t),r}let i;try{i=Object.getPrototypeOf(e);}catch{S("SERIALIZATION_INVALID","MCP App value cannot be cloned");}i!==Object.prototype&&i!==null&&S("SERIALIZATION_INVALID","MCP App value must be plain JSON");let o={};n.set(t,o);for(let[r,s]of Object.entries(e))Object.defineProperty(o,r,{configurable:true,enumerable:true,value:Rn(s,n),writable:true});return n.delete(t),o}function ne(e,n=new Set){if(e===null||typeof e!="object"||n.has(e)||On.has(e))return e;n.add(e);for(let t of Object.values(e))ne(t,n);return Object.freeze(e),e}var _r,Er,cp,ln,dp,pp,lp,up,fp,ye,yp,On,mr,gi,br,mi,ut=F(()=>{m();or();Je();Re();rt();ot();Ii();Ar();gr();at();_r=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Er=/^ui:\/\/crewx\/([A-Za-z][A-Za-z0-9._-]{0,127})\/([0-9a-f]{12})$/,cp=/^[0-9a-f]{64}$/,ln=8*1024*1024,dp=8*1024,pp=16*1024,lp=/^[a-z][a-z0-9-]{0,63}$/,up=new Set(["blue","violet","emerald","amber","rose","sky","slate","indigo"]),fp=new Set(ur),new Set(fr),ye=Object.freeze({kind:"instance"}),yp=Object.freeze({type:"object",properties:Object.freeze({}),additionalProperties:false}),On=new WeakSet,mr=new WeakSet;gi={type:"string",description:'Relative path in NFC, 1 to 3 segments joined by "/", each [\\p{L}\\p{N}][\\p{L}\\p{N}\\p{M}_-]{0,99}, the last ending in ".md". At most 200 code points.'};br=4;mi=class{builtinApps;localApps;builtinDescriptors;builtinTools;mcpResources=new Map;localById=new Map;registrationById=new Map;launcherById=new Map;definitionByKey=new Map;handlerByKey=new Map;mcpToolByName=new Map;localToolByName=new Map;constructor(n){let t=n.builtins??n.builtin,i=[],o=[],r=[],s=new Set,a=new Set;for(let p of t?.listMcpApps()??[]){let u=Tp(p);s.has(u.appId)&&S("APP_ID_CONFLICT",`MCP App id is already registered: ${u.appId}`),s.add(u.appId);let y=u.tools;for(let g of y)a.has(g.name)&&S("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${g.name}`),a.add(g.name),this.mcpToolByName.set(g.name,g),r.push(g);this.mcpResources.set(u.resource.uri,u.resource),i.push(u),o.push(u.descriptor);}let c=(n.localApps??n.locals??[]).map(bp),d=new Set(c.flatMap(p=>p.tools.filter(u=>!(u.kind==="action"&&"actionId"in u)).map(u=>u.name))),l=[];for(let p of c){let u=p;s.has(u.appId)&&S("APP_ID_CONFLICT",`MCP App id is already registered: ${u.appId}`),s.add(u.appId);let y=[],g=[...u.toolDiagnostics??[]];for(let _ of u.tools){if(a.has(_.name)){if(_.kind==="host"&&this.localToolByName.get(_.name)?.kind==="host"){y.push(_);continue}if(_.kind==="action"&&"actionId"in _){g.push(Object.freeze({toolName:_.name,actionId:_.actionId,reason:"name_collision"}));continue}S("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${_.name}`);}if(_.kind==="action"&&"actionId"in _&&d.has(_.name)){g.push(Object.freeze({toolName:_.name,actionId:_.actionId,reason:"name_collision"}));continue}a.add(_.name),this.localToolByName.set(_.name,_),y.push(_);}(y.length!==u.tools.length||g.length!==(u.toolDiagnostics?.length??0))&&(u=ne({...u,tools:Object.freeze(y),toolDiagnostics:Object.freeze(g)})),l.push(u),this.localById.set(u.appId,u);}for(let p of i)this.registrationById.set(p.appId,p),this.launcherById.set(p.appId,Sp(p)),p.definition&&this.addDefinition(p.definition);for(let p of l)this.registrationById.set(p.appId,p),this.launcherById.set(p.appId,Dp(p)),this.addDefinition(p.definition);for(let p of n.definitions??[])this.addDefinition(p);for(let p of n.handlers??[])this.addHandler(p);this.builtinApps=Object.freeze(i),this.localApps=Object.freeze(l),this.builtinDescriptors=Object.freeze(o),this.builtinTools=Object.freeze(r);}getMcpApp(n){return this.builtinApps.find(t=>t.appId===n)?.descriptor??null}listMcpApps(){return this.builtinDescriptors}listMcpAppTools(){return this.builtinTools}resolveMcpAppTool(n){return this.mcpToolByName.get(n)??null}resolveMcpAppResource(n){return typeof n!="string"||!Er.test(n)?null:this.mcpResources.get(n)??null}requireMcpAppResource(n){Pr(n);let t=this.mcpResources.get(n);return t||S("RESOURCE_NOT_FOUND",`MCP App resource is not registered: ${n}`),t}listLocalMcpApps(){return this.localApps}getLocalMcpApp(n){return this.localById.get(n)??null}listLocalMcpAppTools(){return Object.freeze([...this.localToolByName.values()])}resolveLocalMcpAppTool(n){return this.localToolByName.get(n)??null}resolveLocalMcpAppResource(n,t){let i=this.localById.get(n);return !i||t!==void 0&&i.definition.hash!==t?null:i.resource}listRegistrations(){return Object.freeze([...this.builtinApps,...this.localApps])}getRegistration(n){return this.registrationById.get(n)??null}listLaunchers(){return Object.freeze([...this.launcherById.values()].filter(n=>{let t=this.registrationById.get(n.appId),i=t?"descriptor"in t?t.descriptor.provenance:t.provenance:void 0,o=pn(i)&&i.launcher===false;return t?.definition?.usage!=="card"&&!o}))}listCardApps(){return Object.freeze([...this.launcherById.values()].filter(n=>this.registrationById.get(n.appId)?.definition?.usage==="card"))}getLauncher(n){return this.launcherById.get(n)??null}resolveDefinition(n){if(!Mp(n))return null;let t=this.definitionByKey.get($t(n));if(!t||t.hash!==n.hash)return null;try{return fe(t)===t.hash?t:null}catch{return null}}resolveActionHandler(n,t,i){return typeof n!="string"||typeof i!="string"||!Number.isSafeInteger(t)?null:this.handlerByKey.get(hr(n,t,i))??null}addDefinition(n){let t=lt(n),i=$t(t),o=this.definitionByKey.get(i);o&&o.hash!==t.hash&&S("STATE_INVALID",`UI definition generation conflicts: ${i}`),o||this.definitionByKey.set(i,t);}addHandler(n){(!n||typeof n.definitionId!="string"||typeof n.actionId!="string"||!Number.isSafeInteger(n.version)||n.version<1||typeof n.handle!="function")&&S("STATE_INVALID","UI action handler registration is invalid");let t=hr(n.definitionId,n.version,n.actionId);this.handlerByKey.has(t)&&S("TOOL_INVALID",`Duplicate UI action handler registration: ${t}`),this.handlerByKey.set(t,Object.freeze({...n}));}};});function Lp(e,n){let t=Nr({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},...e.normalized.manifest.runtime===void 0?{}:{runtime:e.normalized.manifest.runtime},...e.normalized.manifest.deviceFeatures===void 0?{}:{deviceFeatures:e.normalized.manifest.deviceFeatures},...e.normalized.manifest.downloads===void 0?{}:{downloads:e.normalized.manifest.downloads},...e.normalized.manifest.share===void 0?{}:{share:e.normalized.manifest.share},...e.normalized.manifest.files===void 0?{}:{files:e.normalized.manifest.files},definition:e.definition,html:e.html,entryHash:e.entryHash,entryBytes:e.entryBytes,initialState:e.initialState,...e.initialStateHash===void 0?{}:{initialStateHash:e.initialStateHash},...e.initialStateBytes===void 0?{}:{initialStateBytes:e.initialStateBytes},readToolName:e.toolNames.read,...e.toolNames.action===void 0?{}:{actionToolName:e.toolNames.action},actions:e.normalized.manifest.actions.map(o=>({actionId:o.actionId,inputSchema:o.inputSchema,backend:o.backend})),...{}});return e.provenance===void 0?t:Object.freeze({...t,provenance:e.provenance})}function Rr(e){let n=e.normalized.manifest.actions;if(n.some(i=>i.backend.type==="skill")&&n.some(i=>i.backend.type==="core"))throw new Error("Mixed workspace App execution models");let t=Lp(e);Dr({localApps:[t],definitions:[e.definition]});}var wr=F(()=>{m();ut();});function Op(e){if(e===null||typeof e!="object"||!(Cr in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[Cr]}function Ur(e,n){let t=Op(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.preparedCandidates.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0,t.lastSnapshotCandidates=void 0,t.lastSnapshotCatalogFingerprint=void 0),t.rootIdentity=n,t}var Cr,kr=F(()=>{m();Cr=Symbol("crewx.workspace-app-scan-cache.state");});function Ae(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new M("NOT_FOUND"):n==="ELOOP"?new M("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new M("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new M("READ_DENIED"):new M("READ_DENIED")}function Up(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new M("READ_DENIED")}function Ei(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new M("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new M("PATH_ESCAPED");return n}function It(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function fn(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Ni(e,n){return e.dev===n.dev&&e.ino===n.ino}function Di(e,n){return Ni(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function ft(e){Up(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw Ae(i)}if(!t.isDirectory())throw new M("READ_DENIED");return {realRoot:n,identity:fn(t)}}async function Fr(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new M("READ_DENIED")}catch(r){throw r instanceof M?r:Ae(r)}if(!It(n,o))throw new M("PATH_ESCAPED");return o}async function yt(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw Ae(a)}if(!It(n,r)||t!==void 0&&!It(t,r))throw new M("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new M("READ_DENIED");if(!Ni(i,o)||!Ni(i,s)||i.dev!==s.dev)throw new M("PATH_ESCAPED")}async function un(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new M("PATH_ESCAPED")}if(t!==n.realRoot||!Di(n.identity,fn(i)))throw new M("PATH_ESCAPED")}function kp(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var M,Pi,Cp,vr,gt,jr,Mi=F(()=>{m();M=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},Pi=constants.O_NOFOLLOW,Cp=constants.O_NONBLOCK,vr=constants.O_RDONLY|(Pi??0)|(Cp??0);gt=class{async getRootIdentity(n){let t=await ft(n);return await un(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=Ei(t),o=await ft(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(c){let d=Ae(c);if(d.code==="NOT_FOUND")return [];throw d}if(!It(o.realRoot,s)||!a.isDirectory())throw new M("PATH_ESCAPED");try{let c=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await un(n,o),c.map(kp)}catch(c){let d=Ae(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new M("READ_DENIED");if(Pi===void 0)throw new M("UNSUPPORTED");let o=Ei(t),r=await ft(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new M("PATH_ESCAPED");let c;try{c=await open(s,vr);}catch(d){throw Ae(d)}try{let d;try{let g=await c.stat({bigint:!0});d=fn(g);}catch(g){throw Ae(g)}if(d.size>BigInt(i))throw new M("LIMIT_EXCEEDED");if(d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new M("LIMIT_EXCEEDED");await un(n,r);let l=await Fr(n,r.realRoot,o);await yt(s,r.realRoot,l,d);let p=new Uint8Array(new ArrayBuffer(Number(d.size))),u=0;for(;u<p.byteLength;){let g;try{g=(await c.read(p,u,p.byteLength-u,u)).bytesRead;}catch(_){throw Ae(_)}if(g<=0)throw new M("IDENTITY_CHANGED");u+=g;}let y;try{let g=await c.stat({bigint:!0});y=fn(g);}catch(g){throw Ae(g)}if(!Di(d,y))throw new M("IDENTITY_CHANGED");return await yt(s,r.realRoot,l,y),await un(n,r),new Uint8Array(p)}finally{await c.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new M("READ_DENIED");if(Pi===void 0)throw new M("UNSUPPORTED");let o=Ei(t),r=await ft(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new M("PATH_ESCAPED");let c;try{c=await open(s,vr);}catch(d){throw Ae(d)}try{let d;try{let u=await c.stat({bigint:!0});d=fn(u);}catch(u){throw Ae(u)}if(d.size>BigInt(i)||d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new M("LIMIT_EXCEEDED");await un(n,r);let l=await Fr(n,r.realRoot,o);await yt(s,r.realRoot,l,d);let p;try{let u=await c.stat({bigint:!0});p=fn(u);}catch(u){throw Ae(u)}if(!Di(d,p))throw new M("IDENTITY_CHANGED");return await yt(s,r.realRoot,l,p),await un(n,r),{...p,candidateRealPath:l??r.realRoot}}catch(d){throw d instanceof M?d:Ae(d)}finally{await c.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},jr=new gt;});function kn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Br(e){return typeof e=="string"&&Ne.test(e)?e:void 0}function Hp(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Ye(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function zp(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function $p(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Gp(e){return Vp.decode(e)}function Jp(e){return JSON.parse(Gp(e))}function Hr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Wp(e){if(e instanceof M)return Hr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Hr(n)}}function Ue(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Kp(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function Xp(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function zr(e,n,t,i){let o=Kp(e);if(!o)throw new M("READ_DENIED");return $p(await o.call(e,n,t,i))}async function Ri(e,n,t){let i=Xp(e);if(!i)throw new M("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new M("READ_DENIED");return o.map(zp).filter(r=>r!==null)}function Yp(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function qp(e){if(!kn(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(Ye))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function Zp(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function ht(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(Ye)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(Ye))})}function mt(e,n){let t=Object.keys(e).sort(Ye),i=[...n].sort(Ye);return t.length===i.length&&t.every((o,r)=>o===i[r])}function $r(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function Qp(e){let n;try{n=Jp(e);}catch{return}if(!kn(n)||!mt(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>wi)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!kn(s))return;let a=["packageDir","appId","definition","files"],c=Object.hasOwn(s,"lineage"),d=Object.hasOwn(s,"launcher"),l=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!mt(s,[...a,...l])||d&&s.launcher!==false)return;let p=$r(s.packageDir),u=Br(s.appId);if(!p||p.length!==2||p[0]!=="apps"||!Hp(p[1])||!u||t.has(s.packageDir)||!kn(s.definition)||!mt(s.definition,["id","version","hash"]))return;let y=Br(s.definition.id),g=s.definition.version,_=s.definition.hash;if(!y||!Number.isSafeInteger(g)||g<1||typeof _!="string"||!Oi.test(_)||!Array.isArray(s.files)||s.files.length<2||s.files.length>Ci)return;let E=new Set,k=[];for(let x of s.files){if(!kn(x)||!mt(x,["path","sha256"]))return;let P=$r(x.path);if(!P||typeof x.sha256!="string"||!Oi.test(x.sha256))return;let C=P.join("/"),B=`${s.packageDir}/${C}`;if(E.has(C)||i.has(B))return;E.add(C),i.add(B),k.push(Object.freeze({path:C,sha256:x.sha256}));}if(!ee.some(x=>E.has(x))||!E.has("ui/index.html")||(o+=k.length,o>vp))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...d?{launcher:false}:{},appId:u,definition:Object.freeze({id:y,version:g,hash:_}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(k.sort((x,P)=>Ye(x.path,P.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function Xe(e){let n=Wp(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function el(e,n,t,i,o){let r=[],s=async(a,c)=>{if(!Ue(i,o))throw new M("LIMIT_EXCEEDED");if(c>2)throw new M("LIMIT_EXCEEDED");let d=await Ri(e,n,a);for(let l of d){if(typeof l.name!="string"||l.name.length===0||l.name==="."||l.name===".."||/[\\/\u0000]/.test(l.name))throw new M("PATH_ESCAPED");let p=`${a}/${l.name}`;if(l.kind==="file"){if(r.push(p.slice(t.length+1)),r.length>Ci)throw new M("LIMIT_EXCEEDED")}else if(l.kind==="directory")await s(p,c+1);else throw l.kind==="symlink"?new M("PATH_ESCAPED"):new M("READ_DENIED")}};return await s(t,0),r.sort(Ye)}function nl(e){return ee.includes(e)?262144:e==="ui/index.html"?ln:e==="ui/state.json"?2097152:e.startsWith("ui/assets/")?jp:Fp}async function Gr(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:Bp};let o=qp(e.reservedIds),r=[],s=(I,A,h)=>Yp(I,"bundled",A),a=(I=[],A=false,h)=>({...h===void 0?{}:{indexHash:h},packages:I,diagnostics:r,incomplete:A,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!Oi.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let c;try{c=await zr(n,e.root,"bundle-index.json",xp);}catch(I){return r.push(s(Xe(I),"bundle-index.json")),a()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let l=Qp(c);if(l===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!Zp(ht(l.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,d);if(!Ue(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(I=>({indexEntry:I,failureCode:"LIMIT_EXCEEDED"})),true,d);let p;try{p=await Ri(n,e.root,"");}catch(I){return r.push(s(Xe(I),"bundle-index.json")),a(l.packages.map(A=>({indexEntry:A,failureCode:Xe(I)})),false,d)}if(!Ue(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(I=>({indexEntry:I,failureCode:"LIMIT_EXCEEDED"})),true,d);let u=p.find(I=>I.name==="bundle-index.json"&&I.kind==="file"),y=p.find(I=>I.name==="apps"&&I.kind==="directory"),g=I=>l.packages.map(A=>({indexEntry:A,failureCode:I}));if(!u)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(g("BUNDLE_INTEGRITY"),false,d);let _=p.filter(I=>I.name!=="bundle-index.json"&&I.name!=="apps");if(_.length>0){let I=_.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(I,"bundle-index.json")),a(g("BUNDLE_INTEGRITY"),false,d)}if(p.some(I=>I.name==="apps"&&I.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(g("PATH_ESCAPED"),false,d);let E=[];if(y)try{E=await Ri(n,e.root,"apps");}catch(I){return r.push(s(Xe(I),"apps")),a(g(Xe(I)),false,d)}if(!Ue(t,i)||E.length>wi)return r.push(s("LIMIT_EXCEEDED","apps")),a(g("LIMIT_EXCEEDED"),true,d);let k=new Map(l.packages.map(I=>[I.packageDir.slice(5),I])),x=E.filter(I=>!k.has(I.name));for(let I of x)r.push(s(I.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${I.name}`));if(x.length>0){let I=x.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(g(I),false,d)}let P=new Set,C=new Map,B=new Map;for(let I of l.packages){let A=C.get(I.appId)??[];A.push(I),C.set(I.appId,A);let h=`${I.definition.id}\0${String(I.definition.version)}`,T=B.get(h)??[];T.push(I),B.set(h,T);}for(let I of [...C.values(),...B.values()])if(I.length>1)for(let A of I)P.add(A);let N=[],D=c.byteLength,L=false;for(let I of l.packages){if(!Ue(t,i)){L=true,N.push({indexEntry:I,failureCode:"LIMIT_EXCEEDED"});continue}let A;try{let V=I.lineage[I.lineage.length-1];if(!V)throw new Oe("LINEAGE_INVALID","Definition lineage is missing");if(V.definition.id!==I.definition.id||V.version!==I.definition.version||V.hash!==I.definition.hash)throw new Oe("LINEAGE_STALE","Last lineage generation does not match bundle identity");A=Ai(I.lineage,{...V.definition,hash:V.hash}).entries;}catch(V){let v=V instanceof Oe?V.code:"LINEAGE_INVALID";r.push(s(v,I.packageDir)),N.push({indexEntry:I,failureCode:v});continue}let h=E.find(V=>V.name===I.packageDir.slice(5));if(!y||!h){N.push({indexEntry:I,failureCode:"BUNDLE_INTEGRITY"});continue}if(h.kind!=="directory"){N.push({indexEntry:I,failureCode:h.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let T;try{let V=await el(n,e.root,I.packageDir,t,i);if(!Ue(t,i)){L=!0,N.push({indexEntry:I,failureCode:"LIMIT_EXCEEDED"});continue}let v=I.files.map(G=>G.path);if(V.length!==v.length||V.some((G,ae)=>G!==v[ae])){N.push({indexEntry:I,failureCode:"BUNDLE_INTEGRITY"});continue}T=new Map;let $;for(let G of I.files){if(!Ue(t,i)){$="LIMIT_EXCEEDED",L=!0;break}if(D>=Li){$="LIMIT_EXCEEDED";break}let ae;try{ae=await zr(n,e.root,`${I.packageDir}/${G.path}`,nl(G.path));}catch(ue){$=Xe(ue);break}if(!Ue(t,i)){$="LIMIT_EXCEEDED",L=!0;break}if(D+ae.byteLength>Li){D=Li,$="LIMIT_EXCEEDED";break}if(D+=ae.byteLength,createHash("sha256").update(ae).digest("hex")!==G.sha256){$="BUNDLE_INTEGRITY";break}T.set(G.path,ae);}if($!==void 0){N.push({indexEntry:I,failureCode:$});continue}}catch(V){Ue(t,i)||(L=true),N.push({indexEntry:I,failureCode:Xe(V)});continue}N.push({indexEntry:I,lineage:A,files:T,...P.has(I)?{failureCode:"DUPLICATE_ID"}:{}});}return a(N,L,d)}var xp,wi,Ci,vp,Fp,jp,Li,Oi,Vp,Bp,Ui=F(()=>{m();Ii();Ge();tt();ut();Mi();xp=256*1024,wi=64,Ci=128,vp=wi*Ci,Fp=2*1024*1024,jp=8*1024*1024,Li=32*1024*1024,Oi=/^[0-9a-f]{64}$/,Vp=new TextDecoder("utf-8",{fatal:true}),Bp=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function il(e){if(typeof e!="string"||!Ne.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${ki}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${ki}${n}_read`,action:`${ki}${n}_action`}}function Wr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function rl(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function sl(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function vn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function os(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function al(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function rs(e){return ol.decode(e)}function cl(e){return JSON.parse(rs(e))}function dl(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function _t(e,n,t,i,o){let r={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...o?.reason===void 0?{}:{reason:Object.freeze({...o.reason})},...o?.files===void 0?{}:{files:Object.freeze([...o.files])}};return Object.freeze(r)}function Kr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function se(e){if(e instanceof M)return Kr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Kr(n)}}function Ze(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Xr(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function Yr(e){return e==="MANIFEST_DUAL_MISMATCH"?e:ss(e)}function pl(e){return ss(e.code)}function ss(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return as("UiPluginValidationError",e)}}function as(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function cs(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return as("McpAppContractError",e)}}function ke(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ll(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function ul(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(Wr(o)){let r=o.bin,s=typeof r=="string"?r:Wr(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let c=fl(a);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function fl(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function yl(){return globalThis.performance?.now()??Date.now()}function qe(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))qe(n);return Object.freeze(e)}function qr(e){return Object.freeze(Array.from(e))}async function Fn(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new M("NOT_FOUND");if(a.byteLength>i)throw new M("LIMIT_EXCEEDED");return new Uint8Array(a)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return ns(e,n.root,o,i);try{let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let c=await ns(e,n.root,o,i),d=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=d.candidateRealPath,ps(a,d)&&d.size===BigInt(c.byteLength)&&!ls(d,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:d}):r.cacheable=!1,c}catch(a){let c=!t.includes("/")&&se(a)==="NOT_FOUND"&&r.directoryListings.some(l=>l.relativePath===n.relativePath&&!Et(l.key,t)),d=t===J&&se(a)==="NOT_FOUND"&&Il(r.directoryListings,n.relativePath);throw !c&&!d&&(r.cacheable=false),a}}async function Al(e,n,t){if(n.pinnedFiles!==void 0)return {iconDiagnostics:[]};let i=await Tn(t,async r=>{try{return await Fn(e,n,r,262144)}catch(s){let a=se(s);return a==="NOT_FOUND"?"missing":a==="LIMIT_EXCEEDED"?"too-large":"bad-path"}}),o=i.file;return {...o===void 0?{}:{iconFile:{path:o.path,sha256:createHash("sha256").update(o.bytes).digest("hex"),contentType:o.contentType,byteLength:o.byteLength}},iconDiagnostics:i.diagnostics}}function Il(e,n){let t=e.find(o=>o.relativePath===n);if(t===void 0)return  false;if(!Et(t.key,"dist"))return  true;let i=e.find(o=>o.relativePath===`${n}/dist`);return i!==void 0&&!Et(i.key,"tools.json")}function ds(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function ml(e,n,t,i,o,r,s,a){let c=e.fingerprintVerifiedFile,d=ds(t,i),l=o.candidates.get(d),p=i.relativePath,u;try{u=await es(e,n,p);}catch(L){if(se(L)!=="NOT_FOUND")throw L}let y=u===void 0?void 0:{relativePath:p,key:u};if(y!==void 0&&(i.source==="apps"||i.source==="skills")&&!ee.some(L=>Et(y.key,L)))return ke(s,a)?l!==void 0&&l.candidate===void 0&&l.candidateRealPath===void 0&&l.files.length===0&&l.directoryListings.length===1&&l.directoryListings[0]?.relativePath===y.relativePath&&l.directoryListings[0]?.key===y.key&&(i.source==="apps"?l.diagnostic?.code==="MANIFEST_MISSING":l.diagnostic===void 0)&&typeof c=="function"?{memo:l}:typeof c!="function"?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([y]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let g=async L=>{if(L==="")return y;let I=`${i.relativePath}${L}`;try{let A=await es(e,n,I);return A===void 0?void 0:{relativePath:I,key:A}}catch(A){if(se(A)==="NOT_FOUND")return;throw A}},_=await Promise.all(Zr.map(g)),E=await Promise.all(gl.map(g));if(!ke(s,a))return {timeLimitReached:true};let k=typeof c=="function"&&_.every(L=>L!==void 0),x=_.filter(L=>L!==void 0),P=[...x,...E.filter(L=>L!==void 0)],C=new Map,B=l!==void 0&&k,N;if(l!==void 0&&typeof c=="function"){let L=await Promise.all(l.files.map(async I=>{if(!ke(s,a))return {kind:"time",file:I};try{let A=await c.call(e,n,I.relativePath,I.byteLimit);return {kind:"fingerprint",file:I,current:A}}catch(A){return se(A)==="NOT_FOUND"?{kind:"missing",file:I}:{kind:"error",file:I,error:A}}}));if(L.some(I=>I.kind==="time"))return {timeLimitReached:true};for(let I of L){if(I.kind==="error")throw I.error;if(I.kind==="missing"){B=false;continue}if(I.kind!=="fingerprint")continue;let{file:A,current:h}=I;C.set(A.relativePath,h),N??=h.candidateRealPath,(h.candidateRealPath!==l.candidateRealPath||!ps(h,A.fingerprint)||ls(h,r))&&(B=false);}}let D=l!==void 0&&l.directoryListings.length===P.length&&l.directoryListings.every((L,I)=>L.relativePath===P[I]?.relativePath&&L.key===P[I]?.key);return l!==void 0&&k&&D&&B&&N===l.candidateRealPath?{memo:l}:!k||x.length!==Zr.length?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(P),priorFingerprints:C,files:new Map,...N===void 0?{}:{candidateRealPath:N},cacheable:true}}}function Et(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function es(e,n,t){let i=us(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(os);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>vn(s.name,a.name)||vn(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function ps(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function ls(e,n){let t=e.mtimeNs-n;return t>=-Qr&&t<=Qr}function xi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function hl(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(ie(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function _l(e,n){let t={...e.definition,sourceHash:n},i;try{i=fe(t);}catch(r){throw r instanceof U&&r.code==="INPUT_INVALID"?new de("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{me(o);}catch{throw new de("MANIFEST_INVALID","normalized definition is invalid")}return o}function El(e,n){return e.actions.some(t=>t.backend.type==="core"&&t.backend.handler!=="state.set"&&!st(n,t.backend))}function Tl(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function us(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function ns(e,n,t,i){let o=Tl(e);if(!o)throw new M("READ_DENIED");return al(await o.call(e,n,t,i))}async function bl(e,n,t){let i=us(e);if(!i)throw new M("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new M("READ_DENIED");return o.map(os).filter(r=>r!==null)}function Pl(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(ts(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(ts(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function ts(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function be(e,n){e.diagnostic||(e.diagnostic=_t(n,e.source,e.relativePath,e.identity?.pluginId));}function Nl(e,n){let t=new Set,i=new Map;for(let r of e){let s=r.identity?.pluginId;if(s===void 0)continue;let a=i.get(s)??[];a.push(r),i.set(s,a);}for(let r of i.values()){if(r.length<2)continue;let s=r.filter(c=>c.provenance!==void 0);if(s.length>0){let c=r.find(d=>n.has(d));if(c){for(let d of s)t.add(d);for(let d of r)d!==c&&d.provenance===void 0&&be(d,"RESERVED_ID");continue}for(let d of r)d.provenance===void 0&&be(d,"RESERVED_ID");if(s.length>1)for(let d of s)be(d,"DUPLICATE_ID");continue}let a=r.filter(c=>c.source==="apps");if(a.length>1){for(let c of a)be(c,"DUPLICATE_ID");for(let c of r.filter(d=>d.source==="skills"))be(c,"DUPLICATE_ID");}else for(let c of r.filter(d=>d.source==="skills"))be(c,"DUPLICATE_ID");}let o=new Map;for(let r of e){if(r.diagnostic?.code==="RESERVED_ID"||t.has(r)||r.provenance===void 0&&!n.has(r)&&i.get(r.identity?.pluginId??"")?.some(c=>c.provenance!==void 0))continue;let s=r.identity?.definitionKey;if(s===void 0)continue;let a=o.get(s)??[];a.push(r),o.set(s,a);}for(let r of o.values())if(r.length>1)for(let s of r)be(s,"DUPLICATE_ID");return t}function Dl(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set([...t.appIds,...n.productBundleReservationMetadata?.reservedAppIds??[]]),a=new Set([...t.definitionIds,...n.productBundleReservationMetadata?.reservedDefinitionIds??[]]);for(let l of Pl(n)){for(let p of l.appIds??[])typeof p=="string"&&i.add(p);for(let p of l.definitionIds??[])typeof p=="string"&&o.add(p);for(let p of l.toolNames??[])typeof p=="string"&&r.add(p);}for(let l of e){let p=l.candidate;if(!p)continue;if(i.has(p.pluginId)||o.has(p.definitionId)){be(l,"RESERVED_ID");continue}[p.toolNames.read,p.toolNames.action].filter(y=>y!==void 0).some(y=>r.has(y))&&be(l,"DUPLICATE_ID");}let c=[...e.filter(l=>l.provenance!==void 0&&l.diagnostic===void 0).flatMap(l=>l.candidate?[l.candidate]:[]),...(n.productBundleReservationMetadata?.candidates??[]).filter(l=>n.productBundleReservationMetadata?.indexHash!==void 0&&l.provenance?.indexHash===n.productBundleReservationMetadata.indexHash)],d=new Set;for(let l of e){let p=l.candidate;if(!(!p||l.diagnostic||l.source!=="apps"||l.provenance!==void 0)&&e.filter(u=>u.source==="apps"&&u.identity?.pluginId===p.pluginId).length===1&&c.some(u=>u.pluginId===p.pluginId)&&!(a.has(p.definitionId)&&!c.some(u=>u.pluginId===p.pluginId&&u.definitionId===p.definitionId))&&!c.some(u=>u.pluginId!==p.pluginId&&u.definitionId===p.definitionId)&&!e.some(u=>u.identity?.pluginId!==p.pluginId&&u.identity?.definitionKey===`${p.definitionId}\0${p.version}`&&u.diagnostic?.code!=="RESERVED_ID"))try{Rr(p),d.add(l);}catch(u){be(l,u instanceof Le?cs(u.code):"EXEC_DENIED");}}for(let l of e){let p=l.candidate;p&&l.provenance===void 0&&!d.has(l)&&(s.has(p.pluginId)||a.has(p.definitionId))&&be(l,"RESERVED_ID");}return d}function Sl(e){return [...e].sort((n,t)=>{let i=Jr.indexOf(n.source)-Jr.indexOf(t.source);return i!==0?i:vn(n.relativePath,t.relativePath)})}function H(e,n,t){e.diagnostic=_t(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function is(e,n,t){let i=He(t,{mode:"local"});if(!i.ok&&i.parseFailure){H(n,Yr(i.rejection.code),Xr(i.rejection));return}let o=dl(i.identity);if(n.bundleIdentity===void 0)n.identity=o;else if(o?.pluginId!==n.bundleIdentity.appId||o.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){H(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){H(n,"RESERVED_ID");return}if(!i.ok){H(n,Yr(i.rejection.code),Xr(i.rejection));return}let r=i.manifest,s={pluginId:r.pluginId,definitionKey:`${r.definitionId}\0${String(r.version)}`};if(n.bundleIdentity===void 0&&(n.identity=s),r.actions.length>0)try{_i(r.actions.map(v=>({actionId:v.actionId,inputSchema:v.inputSchema})));}catch(v){if(v instanceof Le){H(n,cs(v.code));return}throw v}let a;try{a=await Fn(e,n,"ui/index.html",ln);}catch(v){H(n,Ze(se(v),"entry"));return}if(a.byteLength>ln){H(n,"LIMIT_EXCEEDED");return}let c;try{c=rs(a);}catch{H(n,"ENTRY_INVALID");return}if(a.byteLength===0||c.length===0){H(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(a).digest("hex");if(r.entryHash!==void 0&&r.entryHash!==d){H(n,"ENTRY_INVALID");return}let l={},p,u;if(r.initialState!==void 0){try{p=await Fn(e,n,"ui/state.json",2097152);}catch(v){H(n,Ze(se(v),"initial"));return}if(p.byteLength>2097152){H(n,"LIMIT_EXCEEDED");return}try{let v=cl(p),$=r.dataPaths??[],G=ti(v,$);l=ge(G,0,$),tn(l);}catch{H(n,"INITIAL_STATE_INVALID");return}if(u=createHash("sha256").update(p).digest("hex"),r.initialState.hash!==void 0&&r.initialState.hash!==u){H(n,"INITIAL_STATE_INVALID");return}}let y={...r,entryHash:d,...r.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:u}}},g=_n(y),_=hl(y,a,p??new Uint8Array),E;try{E=_l(g,_);}catch(v){if(v instanceof de){H(n,pl(v));return}throw v}let k;if(n.bundleLineage!==void 0){let v=n.bundleLineage[n.bundleLineage.length-1];if(!v){H(n,"LINEAGE_INVALID");return}let{legacy:$,...G}=v.definition,{hash:ae,...ue}=E;if(ie(G)!==ie(ue)){H(n,"LINEAGE_STALE");return}if($!==void 0&&(E={...E,legacy:$}),$!==void 0)try{E={...E,hash:fe(E)},me(E);}catch{H(n,"LINEAGE_INVALID");return}k=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==r.pluginId){H(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==E.id||n.bundleIdentity.version!==E.version||n.bundleIdentity.definitionHash!==E.hash)){H(n,"LINEAGE_STALE");return}let x=await Al(e,n,i.mcpb?.icon),P=il(r.pluginId),C=r.actions.length===0?{read:P.read}:P,B=qe(g),N=qe(y),D=qe(E),L=qe({...g.handlers}),I=qr(a),A=p===void 0?void 0:qr(p),h=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:I}),...A===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:u,bytes:A})}}),T={appId:r.pluginId,pluginId:r.pluginId,definitionId:r.definitionId,version:r.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:qe(i.mcpb)},relativePath:n.relativePath,manifest:N,normalized:B,name:r.name,description:r.description,...r.icon===void 0?{}:{icon:r.icon},...r.tone===void 0?{}:{tone:r.tone},...x.iconFile===void 0?{}:{iconFile:Object.freeze({...x.iconFile})},...x.iconDiagnostics.length===0?{}:{iconDiagnostics:Object.freeze([...x.iconDiagnostics])},definition:D,handlers:L,resources:h,html:c,entryBytes:I,entryHash:d,initialState:qe(l),...A===void 0?{}:{initialStateBytes:A},...u===void 0?{}:{initialStateHash:u},sourceHash:_,toolNames:Object.freeze(C)},V=n.provenance===void 0?{...T,source:n.source}:{...T,provenance:n.provenance,lineage:k??[]};n.candidate=Object.freeze(V),El(r,E.usage)&&H(n,"EXEC_DENIED");}async function fs(e,n){let t={};for(let i of ee)try{t[i]=await Fn(e,n,i,262144);}catch(o){if(se(o)==="NOT_FOUND")continue;return {files:t,failure:Ze(se(o),"manifest")}}if(t[X]!==void 0)try{t[J]=await Fn(e,n,J,262144);}catch(i){if(se(i)!=="NOT_FOUND")return {files:t,failure:Ze(se(i),"manifest")}}return {files:t}}function vi(e){return ee.some(n=>e[n]!==void 0)}async function Ml(e,n){let{files:t,failure:i}=await fs(e,n);if(i!==void 0){H(n,i);return}let o=t[X];return o!==void 0&&!di(o)&&(delete t[X],delete t[J]),vi(t)?t:void 0}function Ll(e,n,t,i=tl,o=false,r=new Set){let s=Sl(e),a=Nl(s,r),c=Object.freeze(s.filter(u=>u.candidate!==void 0&&u.diagnostic===void 0&&!a.has(u)).map(u=>u.candidate)),d=Object.freeze(s.filter(u=>u.diagnostic!==void 0).map(u=>u.diagnostic)),l=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(s.filter(u=>u.source==="bundled"&&u.diagnostic===void 0&&t!==void 0&&u.candidate?.provenance?.indexHash===t).map(u=>u.candidate)),diagnostics:Object.freeze(d.filter(u=>u.source==="bundled").map(u=>Object.freeze({...u}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,p={apps:c,diagnostics:d,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...l===void 0?{}:{productBundleSnapshotMetadata:l}};return Object.defineProperty(p,"candidates",{configurable:false,enumerable:false,get:()=>c}),Object.freeze(p)}function Ol(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Rl(e,n){if(Ol(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??jr,options:t}}async function ys(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=Rl(n,t),r=o.clock??yl,s=r(),a=await Gr(o.productBundle,i,s,r),c=r(),d=BigInt(Date.now())*1000000n,l=[],p=0,u,y=false,g,_;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{_=await i.getRootIdentity(e),g=Ur(o.scanCache,_),g.scanStartedAtNs=d;}catch(N){if(se(N)!=="NOT_FOUND")throw N}let E=g!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,k=new Set,x=true;l.push(...a.diagnostics.map(N=>({source:N.source,root:o.productBundle?.root??e,name:"",relativePath:N.relativePath,diagnostic:N})));let P=a.reservedIds;a.incomplete&&(u="time_limit");for(let N of a.packages){if(!ke(c,r)){y=true,u="time_limit";break}let D=N.indexEntry,L=D.packageDir,I=N.files===void 0?void 0:ul(L,N.files),A=a.indexHash===void 0?void 0:sr(Object.freeze({kind:"bundled",launcher:D.launcher!==false,indexHash:a.indexHash,packageDir:L,appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash,files:D.files}),I),h={source:"bundled",root:o.productBundle?.root??e,name:L.slice(5),relativePath:L,...A===void 0?{}:{provenance:A},...N.files===void 0?{}:{pinnedFiles:N.files},...N.lineage===void 0?{}:{bundleLineage:N.lineage},bundleIdentity:{appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash},identity:ll(D)};if(l.push(h),p+=1,N.failureCode!==void 0){H(h,N.failureCode);continue}if(N.files?.has(J)===true){H(h,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:J}});continue}let T={};for(let V of ee){let v=N.files?.get(V);v!==void 0&&(T[V]=v);}if(!vi(T)){H(h,"BUNDLE_INTEGRITY");continue}if(await is(i,h,T),!ke(c,r)){y=true,u="time_limit";break}}let C=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let N of C){let{source:D,directory:L}=N,I;try{I=await bl(i,e,L);}catch(h){if(se(h)==="NOT_FOUND")continue;E=false,x=false,l.push({source:D,root:e,name:"",relativePath:D,diagnostic:_t(Ze(se(h),"manifest"),D,D)});continue}let A=I.filter(h=>h.kind==="directory"||h.kind==="symlink").filter(h=>sl(h.name)).map(h=>({source:D,root:e,name:h.name,relativePath:rl(D,h.name)})).sort((h,T)=>vn(h.relativePath,T.relativePath));for(let h of A){let T={...h};if(l.push(T),_!==void 0?k.add(ds(_,T)):E=false,!ke(c,r)){y=true,u="time_limit";break e}let V;if(g!==void 0&&_!==void 0){try{let G=await ml(i,e,_,T,g,d,c,r);if(G.timeLimitReached){y=!0,u="time_limit";break e}T.scanContext=G.context,V=G.memo;}catch(G){E=false,H(T,Ze(se(G),"manifest"));continue}V===void 0&&(E=false);}if(V!==void 0){if(T.candidate=V.candidate,T.diagnostic=V.diagnostic,T.identity=V.identity,D==="skills"&&V.candidate===void 0&&V.diagnostic===void 0)continue;if(p>=64){H(T,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){H(T,"LIMIT_EXCEEDED");continue}if(p+=1,!ke(c,r)){y=true,u="time_limit";break e}continue}let v;if(D==="skills"&&(v=await Ml(i,T),v===void 0)){T.diagnostic===void 0&&xi(T);continue}if(p>=64){H(T,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){H(T,"LIMIT_EXCEEDED");continue}if(!ke(c,r)){y=true,u="time_limit";break e}if(p+=1,v===void 0){let G=await fs(i,T);if(G.failure!==void 0||!vi(G.files)){H(T,G.failure??Ze("NOT_FOUND","manifest")),xi(T);continue}v=G.files;}if(await is(i,T,v),xi(T),!ke(c,r)){y=true,u="time_limit";break e}}}if(g!==void 0&&_!==void 0){let N=[...k].sort(vn),D=g.lastCandidateKeys,L=D!==void 0&&D.length===N.length&&D.every((A,h)=>A===N[h]);if(E=E&&L,x&&!y&&u===void 0)for(let A of g.candidates.keys())try{JSON.parse(A)[0]===_.realPath&&!k.has(A)&&g.candidates.delete(A);}catch{g.candidates.delete(A);}let I=[...g.candidates.keys()].filter(A=>{try{return JSON.parse(A)[0]===_.realPath}catch{return  false}});E=E&&I.length===k.size&&I.every(A=>k.has(A))&&!y&&u===void 0,g.lastCandidateScanUnchanged=E,x&&!y&&u===void 0&&(g.lastCandidateKeys=Object.freeze(N));}y&&l.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:_t("DISCOVERY_TIME_LIMIT","apps","apps")});let B=Dl(l,o,P);return Ll(l,u,a.indexHash,P,o.productBundle!==void 0,B)}var tl,ki,Jr,ol,Zr,gl,Qr,As=F(()=>{m();Je();Vn();Re();ui();li();Ge();ut();wr();at();ot();kr();Mi();rt();Ui();Ui();tl=ht([]),ki="crewx_local_app_";Jr=["bundled","apps","skills"],ol=new TextDecoder("utf-8",{fatal:true});Zr=["","/ui"],gl=["/dist"],Qr=2000000000n;});m();ui();m();Jt();m();var Wo="SKILL.md",Bd=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function Ko(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Hd(e){return e.isDirectory()||e.isSymbolicLink()}function Qo(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function fi(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(Bd);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!Ko(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=Ko(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function zd(e){return [join(e,Wo),join(e,"skill",Wo)]}function Xo(e,n){if(!Qo(e))return null;for(let t of zd(e)){if(!existsSync(t))continue;let o=fi(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function Yo(e){try{return readdirSync(e,{withFileTypes:!0}).filter(Hd)}catch{return []}}function qo(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function er(e){let n=[],t=new Set;for(let i of e)if(Qo(i))for(let o of Yo(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of Yo(r))qo(Xo(join(r,s.name),s.name),t,n);continue}qo(Xo(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}m();tt();var $d=/^[A-Za-z0-9_$.[\]"-]{0,200}$/,Gd=/^[a-z][a-z0-9-]{0,63}$/,Jd="<unknown>";function Wd(e){return typeof e=="string"&&(ee.includes(e)||e===J)}function nr(e){if(typeof e!="object"||e===null)return;let{file:n,path:t,rule:i}=e;if(!(typeof i!="string"||!Gd.test(i)))return {...Wd(n)?{file:n}:{},path:typeof t=="string"&&$d.test(t)?t:Jd,rule:i}}function tr(e){if(!Array.isArray(e))return;let n=ee.filter(t=>e.includes(t));return n.length>0?n:void 0}As();var Cl=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Pt(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Ul(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Ul(e,n){let t=new TextEncoder().encode(Nt(e)),i=kl(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function kl(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Nt(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function Tt(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function ms(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:Nt(t)}function xl(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function hs(e){return Object.freeze({packageRoot:e})}function vl(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??je,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function _s(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function Fl(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=vl(t),s=Pt(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",c=t.releaseVersion??String(t.version),d={appId:t.pluginId,name:t.name,description:a,version:c,..._s(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:hs(e.packageRoot)},definitionHash:s,...t.manifest.csp===void 0?{}:{connectDomains:Object.freeze([...t.manifest.csp.connectDomains])}};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:d.appId,capabilities:o,summary:Object.freeze(d)}}function jl(e){let n=Vl(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},..._s(["skill"]),skillName:e.skill.name,localDefinitionRef:hs(e.packageRoot),definitionHash:Pt({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function Vl(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function Q(e,n,t,i,o){let r=nr(o?.reason),s=tr(o?.files);return Object.freeze({code:e,source:n,relativePath:Bl(t),...i===void 0?{}:{appId:i},...r===void 0?{}:{reason:r},...s===void 0?{}:{files:s}})}function Bl(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function Es(e){return Q(e.code,e.source,e.relativePath,e.pluginId,e)}function Hl(e,n){let t=ms(e,n.dir);if(!t)return {diagnostic:Q("PATH_ESCAPED","node_modules","node_modules")};let i=xl(t);if(!i)return {diagnostic:Q("PATH_ESCAPED","node_modules",t)};let o=fi(n.skillMdPath);if(!o.readable)return {diagnostic:Q("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:Q("SKILL_INVALID",i,t)};let r=zl(n.dir,n.skillMdPath);if(!r)return {diagnostic:Q("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Pt({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:Q("SKILL_READ_FAILED",i,t)}}}function zl(e,n){let t=relative(e,n).split(sep).join("/");try{return Nt(t)}catch{return null}}function $l(e){if(!Cl.test(e.appId))return {diagnostic:Q("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??je,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Gl(e){return e.builtinCatalog}function Jl(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Nt(n)}catch{return null}}function Wl(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Kl(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Jl(s);if(!a){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let c=o.get(a);if(c&&JSON.stringify(c)!==JSON.stringify(s)){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let c=r.get(s);if(!c){t.push(Q("INSTALLED_MISSING","installed",s,a.appId));continue}let d=Wl(a);if(!d){t.push(Q("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==c.appId||a.definitionHash!==void 0&&a.definitionHash!==c.summary.definitionHash){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let l={...c.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:d},p=e.indexOf(c);p>=0&&(e[p]={...c,summary:Object.freeze(l)});}}function Xl(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r==="bundled"){let s=o.filter(a=>a.source==="apps"&&a.summary.definition!==void 0);if(s.length===1){for(let a of o)a.source==="bundled"?i.add(a):a!==s[0]&&(i.add(a),n.push(Q("RESERVED_ID",a.source,bt(a),a.appId)));continue}}if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(c=>c.source!==r))i.add(a),n.push(Q("RESERVED_ID",a.source,bt(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(Q("DUPLICATE_ID",a.source,bt(a),a.appId));continue}for(let s of o)i.add(s),n.push(Q("DUPLICATE_ID",s.source,bt(s),s.appId));}return e.filter(o=>!i.has(o))}function bt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Yl(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(Es)}function ql(e){return e.filesystem}function Zl(e,n){let t=ql(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{productBundleReservationMetadata:i}}}async function Ts(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Gl(n),i=await ys(e,Zl(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],c=[],d=new Set;for(let A of r)for(let h of er([A])){let T=ms(e,h.dir);(T===null||!d.has(T))&&(c.push(h),T!==null&&d.add(T));}for(let A of c){let h=Hl(e,A);"diagnostic"in h?s.push(h.diagnostic):a.push(h);}let l=new Map,p=n.registeredProductBundle?.indexHash,u=(n.registeredProductBundle?.candidates??[]).filter(A=>p!==void 0&&A.provenance?.indexHash===p),y=[...new Set([...i.apps??i.candidates??[],...i.productBundleSnapshotMetadata?.candidates??[]]),...u],g=new Set(u),_=new Set(p===void 0?[]:(t?.listMcpApps()??[]).filter(A=>A.provenance?.indexHash===p).map(A=>A.appId));for(let A of y){if(g.has(A)&&A.provenance?.indexHash===p&&_.has(A.appId))continue;let h=A.provenance===void 0?`workspace\0${A.relativePath}`:`bundled\0${A.provenance.indexHash}\0${A.provenance.packageDir}`;l.set(h,{candidate:A,packageRoot:A.relativePath});}let E=new Map(a.map(A=>[A.packageRoot,A])),k=[];for(let A of l.values()){let h=A.candidate.provenance===void 0?E.get(A.packageRoot):void 0,T=Fl(A,h);k.push({...T.packageRoot===void 0?{}:{packageRoot:T.packageRoot},source:T.source,appId:T.appId,summary:T.summary});}let x=new Set([...l.values()].filter(A=>A.candidate.provenance===void 0).map(A=>A.packageRoot)),P=o===void 0?new Set:new Set(i.diagnostics.filter(A=>A.code==="RESERVED_ID"&&A.source!=="bundled").map(A=>A.relativePath)),C=new Set(o?.reservedAppIds??[]);for(let A of a){let h=jl(A);if(!(x.has(A.packageRoot)||P.has(A.packageRoot))){if(C.has(h.appId)){s.push(Q("RESERVED_ID",A.source,A.packageRoot,h.appId));continue}k.push({packageRoot:h.packageRoot,source:h.source,appId:h.appId,summary:h.summary});}}let B=[...Yl(i.diagnostics,new Set(a.map(A=>A.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(A=>A.source==="bundled").map(Es)??[]],N=[];if(t)for(let A of t.listMcpApps()){let h=$l(A);"diagnostic"in h?B.push(h.diagnostic):N.push(h);}let D=Xl([...k,...N],B);Kl(D,n,B);let L=D.map(A=>A.summary).sort((A,h)=>Tt(A.appId,h.appId)),I=[...B].sort((A,h)=>Tt(A.relativePath,h.relativePath)||Tt(A.code,h.code)||Tt(A.appId??"",h.appId??""));return Object.freeze({items:Object.freeze(L),diagnostics:Object.freeze(I)})}m();m();m();function Ql(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function yn(e,n){try{return Ql(n).test(e)}catch{return  false}}function Dt(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>yn(t[i+r],o))}function eu(e,n){return e.split("/").some(t=>yn(t,n))}var bs=[{label:".env*",test:e=>yn(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>yn(e,"*.key")},{label:"*.pem",test:e=>yn(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Dt(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Dt(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Dt(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Dt(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>eu(n,".crewx")}];function An(e,n,t){for(let i of bs)if(i.test(e,n,t))return i.label;return null}m();var xe=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new xe(e,n)}function Ps(e,n){if(!n||/[\\\u0000]/.test(n)||pe.posix.isAbsolute(n)||n.split("/").some(y=>!y||y==="."||y===".."))throw b("PACKAGE_PATH_TRAVERSAL","package root must be a safe workspace-relative path");let t=pe.resolve(e),i=pe.resolve(t,...n.split("/"));if(!i.startsWith(`${t}${pe.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","package root escaped the workspace");function o(y,g){let _;try{_=te.lstatSync(y);}catch{throw b("PACKAGE_FILE_INVALID",`package directory is missing: ${g}`)}if(_.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${g}`);if(!_.isDirectory())throw b("PACKAGE_FILE_INVALID",`not a package directory: ${g}`)}o(t,".");let r=t,s="",a=null;for(let y of n.split("/"))r=pe.join(r,y),s=s?`${s}/${y}`:y,o(r,s),a??=An(y,s,true);let c=[],d=[];function l(y,g){o(y,g);let _=te.readdirSync(y,{withFileTypes:true});for(let E of _){let k=`${g}/${E.name}`,x=pe.join(y,E.name);if(E.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${k}`);let P=An(E.name,k,E.isDirectory());P?d.push({path:k,rule:P}):E.isDirectory()?l(x,k):E.isFile()&&c.push(k);}}a?d.push({path:n,rule:a}):l(i,n);let p=new TextEncoder,u=(y,g)=>Buffer.compare(p.encode(y),p.encode(g));return c.sort(u),d.sort((y,g)=>u(y.path,g.path)),{included:c,excluded:d}}function Ns(e){let n=[],t=[];function i(o,r,s){let a;try{a=te.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((c,d)=>c.name.localeCompare(d.name));for(let c of a){let d=r?`${r}/${c.name}`:c.name,l=pe.join(o,c.name);if(c.isSymbolicLink()){let p;try{p=te.statSync(l);}catch{t.push({path:d,rule:"symlink"});continue}if(p.isDirectory()){t.push({path:d,rule:s??"symlink-dir"});continue}let u=s??An(c.name,d,false);u?t.push({path:d,rule:u}):t.push({path:d,rule:"symlink"});continue}if(c.isDirectory()){let p=s??An(c.name,d,true);i(l,d,p);continue}if(c.isFile()){let p=s??An(c.name,d,false);p?t.push({path:d,rule:p}):n.push(d);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}m();var nu=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function tu(e){return e.includes(0)}function Bi(e,n,t){let i=[];for(let o of n){let r=pe.join(e,o),s;try{let c=t?.get(o);s=c===void 0?te.readFileSync(r):Buffer.from(c);}catch{continue}if(tu(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((c,d)=>{for(let{rule:l,regex:p}of nu)p.test(c)&&i.push({path:o,line:d+1,rule:l});});}return i}m();var Ms=/^[a-z0-9-]+$/,iu=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,ou=/^[A-Za-z_][A-Za-z0-9_]*$/;function ru(e){let n=pe.join(e,"crewx.yaml");if(!te.existsSync(n))return {};let t;try{t=Ls.load(te.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function su(e){return Hi.createHash("sha256").update(e).digest("hex")}function Os(e){let n;try{n=te.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${pe.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return Hi.createHash("sha256").update(new Uint8Array(te.readFileSync(e))).digest("hex")}function au(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Rs(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||pe.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function cu(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function ws(e){if(!iu.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function Cs(e,n,t={}){let i=ru(e),o=i.name??pe.basename(e);if(!Ms.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${Ms} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");ws(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let l of s){if(typeof l!="string"||!ou.test(l))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(l)}"`);a.push(l);}let c=n.map(l=>(Rs(l),{path:l,sha256:Os(pe.join(e,l))})).sort((l,p)=>l.path<p.path?-1:l.path>p.path?1:0),d={name:o,version:r,type:"template",description:i.description??"",files:c,requiredEnv:a};return i.crewxMinVersion&&(d.crewxMinVersion=i.crewxMinVersion),d}function du(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function Us(e,n){if(cu(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(ws(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let s=n.includedFiles.includes(`${i}manifest.json`),a=n.includedFiles.includes(`${i}ui-plugin.json`);if(!s&&!a)throw b("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(s&&!a)throw b("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw b("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(Rs(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?Os(pe.join(e,s)):su(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>au(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:du(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}m();function ks(e){return Hi.createHash("sha256").update(e).digest("hex")}function Vs(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||pe.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=pe.resolve(e),i=pe.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${pe.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function xs(e,n){let t=Vs(e,n),i;try{i=te.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(te.readFileSync(t))}async function Bs(e,n,t={}){let i=pe.join(e,".crewx","publish");te.mkdirSync(i,{recursive:true});let o=pe.join(i,`${n.name}-${n.version}.tgz`),r=pe.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=te.mkdtempSync(pe.join(vs.tmpdir(),"crewx-publish-"));try{let a=new Set,c=[];for(let d of n.files){if(a.has(d.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(d.path);let l=t.generatedFiles?.get(d.path);if(d.generated===!0&&l===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(d.path)){let y=xs(e,d.path);if(t.sourceFileHashes.get(d.path)!==ks(y))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let p=l??xs(e,d.path);if(ks(p)!==d.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${d.path}`);let u=Vs(s,d.path);te.mkdirSync(pe.dirname(u),{recursive:!0}),te.writeFileSync(u,new Uint8Array(p)),c.push(d.path);}te.writeFileSync(pe.join(s,"manifest.json"),JSON.stringify(n,null,2)),await js.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...c]),te.renameSync(r,o);}finally{try{te.rmSync(r,{force:!0});}catch{}te.rmSync(s,{recursive:true,force:true});}return o}m();m();var In="/api/v1";var uu=201,fu=200,yu=409,zi=401,Hs={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Au(){return process.env.WI013_FAKE_UPLOAD==="1"}function Iu(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function gu(e){return e.replace(/\/+$/,"")}async function jn(e){try{return await e.json()}catch{return null}}function zs(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function mu(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function hu(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function $s(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(Hs,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(Hs[s],a)}}async function _u(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=gu(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${In}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let c=await jn(a),d=mu(c),l=hu(c),p=r&&l!==void 0?l:i,u;if(a.status===uu)u="created";else if(r&&a.status===fu){if(d===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");u="existing";}else if(a.status===yu){if(r)throw $s(c,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);u="existing";}else throw a.status===zi?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let y="not-needed",g=null;if(u==="existing"&&!r){let D;try{D=await fetch(`${n}${In}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let L=await jn(D);if(D.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${D.status}`);let A=zs(L,"publisher items",D.status)?.items;if(!Array.isArray(A))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${D.status}`);let h=A.find(T=>!T||typeof T!="object"?false:T.slug===i);if(!h||typeof h.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${D.status}`);if(g=h.version,g!==e.manifest.version){let T;try{T=await fetch(`${n}${In}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!T.ok)throw await jn(T),T.status===zi?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${T.status})`):T.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${T.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${T.status}`);y="applied";}}let _=te.readFileSync(e.tgzPath),E=Au()?Iu(_):_,k=new FormData;k.set("archive",new Blob([new Uint8Array(E)],{type:"application/gzip"}),`${p}-${e.manifest.version}.tgz`);let x=r&&d!==void 0?d:i,P;try{P=await fetch(`${n}${In}/publisher/items/${encodeURIComponent(x)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:k});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(P.status===zi)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!P.ok){let D=await jn(P);if(r){let L=$s(D,p);if(L)throw L}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${P.status}`)}let C=await jn(P),B=zs(C,"upload",P.status),N=typeof B.contentId=="string"&&B.contentId.length>0?B.contentId:d;if(r&&N===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:p,version:e.manifest.version,...N===void 0?{}:{contentId:N},artifactChecksum:B.artifactChecksum,artifactSizeBytes:B.artifactSizeBytes,submitOutcome:u,versionUpdate:y,serverVersionBefore:g}}var Eu=1e4,Tu=100*1024*1024;function $i(e){return Hi.createHash("sha256").update(e).digest("hex")}function bu(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function $e(e,n){if(!n||n.includes("\\")||n.includes("\0")||pe.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=pe.resolve(e,...n.split("/")),i=pe.resolve(e);if(t!==i&&!t.startsWith(`${i}${pe.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=te.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(te.readFileSync(t))}async function Pu(e,n,t){let i=`${n}/${X}`;if(!t.includes(i))return [];let o={[X]:$e(e,i)},r=`${n}/${J}`;t.includes(r)&&(o[J]=$e(e,r));let s=He(o,{mode:"local"});if(!s.ok)return [];let{diagnostics:a}=await Tn(s.mcpb?.icon,async d=>{let l=`${n}/${d}`;return t.includes(l)?$e(e,l):"missing"}),c=a.find(d=>d.code==="ICON_INVALID");if(c!==void 0)throw b("ICON_INVALID",`${c.reason??"invalid"} at ${c.declared??"icon"}`);return a.flatMap(d=>d.code==="ICON_INVALID"?[]:[{code:d.code,path:d.declared??"icon"}])}function Js(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new xe("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function Ks(e,n,t,i){let o=Js(t.maxFileCount??t.maxFiles,Eu,"max file count"),r=Js(t.maxTotalBytes??t.maxBytes,Tu,"max total bytes");if(n.length>o)throw new xe("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let c=i?.get(a);if(c!==void 0?s+=c.byteLength:s+=$e(e,a).byteLength,s>r)throw new xe("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function Nu(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function Du(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function Su(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function Mu(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function Gi(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function Lu(e,n,t){let i=He({[le]:t},{mode:"published"});if(!i.ok)throw b("APP_UI_MANIFEST_INVALID",`generated ${le} does not read: ${Gi(i.rejection)}`);if(dn(i.manifest)!==dn(n))throw b("APP_UI_MANIFEST_INVALID",`generated ${le} normalizes to a different definition hash than the source`);let o=e[X];if(o===void 0)return;let r=e[J],s=He({[X]:o,[le]:t,...r===void 0?{}:{[J]:r}},{mode:"local"});if(!s.ok)throw b("APP_UI_MANIFEST_INVALID",Gi(s.rejection))}function Ou(e,n,t,i){let o={};for(let y of ee){let g=`${t}/${y}`;i.includes(g)&&(o[y]=$e(e,g));}let r=`${t}/${J}`;if(o[X]!==void 0&&i.includes(r)&&(o[J]=$e(e,r)),Object.keys(o).length===0)throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let s=He(o,{mode:"local"});if(!s.ok)throw b("APP_UI_MANIFEST_INVALID",Gi(s.rejection));if(s.manifest.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT",`${s.file} identity no longer matches the selected App`);let a=o[le],c=a===void 0?void 0:$i(a),d=`${t}/ui/index.html`;if(!i.includes(d))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let l=$i($e(e,d)),p=JSON.parse(JSON.stringify(s.v2Input));if(p.entryHash=l,Object.prototype.hasOwnProperty.call(p,"initialState")){let y=p.initialState;if(!bu(y)||y.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let g=`${t}/ui/state.json`;if(!i.includes(g))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let _=$e(e,g);p.initialState={...y,hash:$i(_)};}let u;try{let y=Ke(p,{mode:"published"});u=new Uint8Array(Buffer.from(JSON.stringify(y),"utf8"));}catch(y){throw y instanceof de?b("APP_UI_MANIFEST_INVALID",y.code):b("APP_UI_MANIFEST_INVALID")}return Lu(o,s.manifest,u),{bytes:u,...c===void 0?{}:{legacySourceHash:c}}}async function Ru(e,n){let{included:t,excluded:i}=Ns(e);Ks(e,t,n);let o=Cs(e,t,{version:n.version}),r=Bi(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function wu(e,n){Du(n);let t=await Ts(e),i=Su(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=Mu(i),{included:r,excluded:s}=Ps(e,o),a=await Pu(e,o,r),c=new Map,d=new Map;if(i.capabilities.includes("screen")){let y=Ou(e,i,o,r),g=`${o}/${le}`;if(c.set(g,y.bytes),y.legacySourceHash!==void 0)d.set(g,y.legacySourceHash);else {r.push(g);let _=new TextEncoder;r.sort((E,k)=>Buffer.compare(_.encode(E),_.encode(k)));}}if(i.capabilities.includes("skill")&&!r.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");Ks(e,r,n,c);let l={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:r,generatedFiles:c},p=Us(e,l),u=Bi(e,r,c);return {plan:{manifest:p,included:r,excluded:s,secretFindings:u,warnings:a},archiveOptions:{generatedFiles:c,sourceFileHashes:d}}}async function Xs(e,n){let t=pe.resolve(e);if(Nu(n))return wu(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return Ru(t,n)}async function KI(e,n={}){return (await Xs(e,n)).plan}function Cu(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new xe("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function Ys(e,n={}){let t=pe.resolve(e),i=await Xs(t,n);i.plan.secretFindings.length>0&&Cu(i.plan.secretFindings);let o=await Bs(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function XI(e,n={}){return Ys(e,n)}async function YI(e,n){let t=await Ys(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
-export{Tu as DEFAULT_PUBLISH_MAX_BYTES,Eu as DEFAULT_PUBLISH_MAX_FILES,bs as EXCLUDE_RULES,In as MARKETPLACE_API_PREFIX,xe as PublishError,YI as packApp,Ys as packPublish,XI as packTemplate,KI as planPublish,_u as uploadToMarketplace};
+import*as de from'path';import {resolve,relative,sep,isAbsolute,join}from'path';import'url';import*as zi from'crypto';import {createHash}from'crypto';import {isIP}from'net';import*as te from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as Ls from'js-yaml';import {load}from'js-yaml';import*as Fs from'os';import*as Vs from'tar';import {gunzipSync,gzipSync}from'zlib';var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var m=j(()=>{});var k,Bn=j(()=>{m();k=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function Rt(e){return Qs.test(e)||ea.test(e)}function Ae(){throw new k("INPUT_INVALID","JSON value is not projection-safe")}function oa(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ot(e,n,t,i,o,r){if(n>i&&Ae(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(na.test(e)||ia.test(e)&&!aa(o,r)||ta.test(e))&&Ae(),e;if(typeof e=="number")return Number.isFinite(e)||Ae(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&Ae();let s=e;t.has(s)&&Ae(),t.add(s);try{if(Array.isArray(e))return e.map(c=>Ot(c,n+1,t,i,o,r));oa(s)||Ae();let a={};for(let[c,d]of Object.entries(e))Rt(c)&&Ae(),a[c]=Ot(d,n+1,t,i,[...o,c],r);return a}finally{t.delete(s);}}function Ie(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>sa)&&Ae(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&Ae();let i=Ot(e,0,new Set,ra+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&Ae(),i}function tn(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function aa(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>tn(t,i))}function on(e){try{let n=JSON.stringify(e);return n===void 0&&Ae(),n}catch{Ae();}}function Lt(e){return Array.isArray(e)?e.map(Lt):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Lt(e[n])])):e}function ie(e){return on(Lt(e))}function wt(e){return Buffer.byteLength(e,"utf8")}var Qs,ea,na,ta,ia,ra,sa,we=j(()=>{m();Bn();Qs=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,ea=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,na=/<\/?[A-Za-z][^>]*>/,ta=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,ia=/^(?:https?|file|ftp|ws|wss):\/\//i;ra=8,sa=4;});var Wi=j(()=>{m();we();});var Hn,Ct=j(()=>{m();Hn=["text/plain","application/json"];});var Ki=j(()=>{m();Ct();});function rn(e){return da.has(e)||pa.test(e)||la.test(e)}var Xi,da,pa,la,zn,mn,Ne,kt,Ut,xt,vt,Ft,Je=j(()=>{m();Xi=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],da=new Set(Xi),pa=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,la=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;zn=/^[A-Za-z0-9_]+$/,mn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,Ne=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,kt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Ut=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,xt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,vt=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Ft=["inline","panel"];});function jt(e){return typeof e=="string"&&Hn.includes(e)}var Yi=j(()=>{m();Ct();Je();});function $n(e){if(!Vt(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!ua(e.in)||Object.hasOwn(e,"out")&&!fa(e.out))}function ua(e){return Vt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&jt(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function fa(e){return Vt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&jt(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function Vt(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Bt=j(()=>{m();Ki();Yi();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function Jn(e){return ya.includes(e)}function Wn(e){return Number.isSafeInteger(e)&&e>=Gn.min&&e<=Gn.max}var ya,Gn,qi,Ht=j(()=>{m();ya=[5,15,30,60],Gn=Object.freeze({min:15e3,max:6e5,default:3e5}),qi=1;});function Xn(e){return Number.isSafeInteger(e)&&e>=Kn.min&&e<=Kn.max}function Yn(e){return Aa.includes(e)}var Kn,Zi,Aa,zt=j(()=>{m();Kn=Object.freeze({min:6e4,max:18e5,default:6e5}),Zi=1,Aa=["start","status","cancel"];});function ue(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.downloads!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.downloads===void 0?{}:{downloads:e.downloads},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=Ie(t);return createHash("sha256").update(ie(i)).digest("hex")}function Gt(e){return `${e.id}\0${e.version}`}function ge(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new k("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!ga.test(e.sourceHash)))throw new k("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ue(e)!==e.hash)throw new k("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!ha(i)))throw new k("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new k("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new k("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new k("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&$t(t.resultProjection),t.schedule!==void 0&&(!Jn(t.schedule.everyMinutes)||!Wn(t.schedule.timeoutMs)))throw new k("DEFINITION_UNSUPPORTED","UI action schedule declaration is invalid");if(t.job!==void 0&&(typeof t.job!="object"||Object.keys(t.job).some(i=>i!=="deadlineMs")||!Xn(t.job.deadlineMs)))throw new k("DEFINITION_UNSUPPORTED","UI action job declaration is invalid");if(t.jobAccess!==void 0&&(!Array.isArray(t.jobAccess)||t.jobAccess.length===0||new Set(t.jobAccess).size!==t.jobAccess.length||!t.jobAccess.every(Yn)||t.job!==void 0))throw new k("DEFINITION_UNSUPPORTED","UI action job control declaration is invalid");if(t.content!==void 0&&!$n(t.content))throw new k("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new k("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new k("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new k("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new k("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new k("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new k("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new k("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new k("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&$t(e.stateProjection),e.summaryProjection){$t(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new k("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new k("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(ma(r,o==="readTool"),n.has(r.name))throw new k("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new k("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,s]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==s||typeof s!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(s)||n.has(s))throw new k("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(s);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new k("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new k("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.downloads!==void 0&&e.downloads!==true)throw new k("DEFINITION_UNSUPPORTED","UI definition downloads is invalid");if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>tn(t,i))))throw new k("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function ma(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new k("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new k("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=Ie(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let s=t.fixedResult;if(!s||typeof s!="object"||Array.isArray(s))throw new Error("fixed result");let a=s;if(Object.keys(a).sort().join(",")!=="argsPolicy,structuredContent"||a.argsPolicy!=="empty-only"&&a.argsPolicy!=="ignore"||!a.structuredContent||typeof a.structuredContent!="object"||Array.isArray(a.structuredContent))throw new Error("fixed result");let c=Ie(a.structuredContent);if(wt(on(c))>4*1024)throw new Error("fixed result size")}}catch{throw new k("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function $t(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new k("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function ha(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var ga,We=j(()=>{m();we();Bn();Bt();Ht();zt();ga=/^[0-9a-f]{64}$/;});var G,Ce,Jt=j(()=>{m();G="dist/tools.json",Ce="dist/main.mjs";});var Ve,Wt=j(()=>{m();Ve="window";});function Qi(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!_a.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var _a,eo=j(()=>{m();_a=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function W(e){throw new Kt(e)}function wa(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Ca(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&W("CSP_ORIGIN_INVALID"),t.value}function qn(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=Ca(e,n);Array.isArray(t)||W("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(r=>typeof r!="string"||r!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(r))&&W("CSP_ORIGIN_INVALID");let o=[];for(let r=0;r<t.length;r+=1)(!Object.prototype.hasOwnProperty.call(t,r)||typeof t[r]!="string")&&W("CSP_ORIGIN_INVALID"),o.push(t[r]);return Object.keys(t).length!==t.length&&W("CSP_ORIGIN_INVALID"),o}function ka(e){let n;try{n=JSON.stringify(e);}catch{W("CSP_ORIGIN_INVALID");}return n===void 0&&W("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function io(e,n){/\s|\\/u.test(e)&&W("CSP_ORIGIN_INVALID");let t=Sa.exec(e);t||W("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),o=t[2];(o.includes("@")||o.includes("%")||o.includes("*"))&&W("CSP_ORIGIN_INVALID"),(o.startsWith("[")?Ma:Oa).test(o)||W("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&W("CSP_ORIGIN_INVALID");let s;try{s=new URL(e);}catch{W("CSP_ORIGIN_INVALID");}(s.protocol!==`${i}:`||s.username!==""||s.password!==""||s.search!==""||s.hash!=="")&&W("CSP_ORIGIN_INVALID");let a=s.hostname.toLowerCase();if((!a||a.includes("%"))&&W("CSP_ORIGIN_INVALID"),!a.startsWith("[")){let d=a.endsWith(".")?a.slice(0,-1):a;(d.length===0||d.length>253)&&W("CSP_ORIGIN_INVALID"),d.split(".").some(p=>p.length>63||!La.test(p))&&W("CSP_ORIGIN_INVALID");}let c=s.origin;return (c==="null"||!c.startsWith(`${i}://`))&&W("CSP_ORIGIN_INVALID"),{origin:c,hostname:a}}function Ua(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function oo(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function ao(e){let n=Ua(e);return oo(n,3221225472,24)?n!==3221225481&&n!==3221225482:Ra.some(([t,i])=>oo(n,t,i))}function xa(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((r,s)=>r<<16n|BigInt(Number.parseInt(s,16)),0n)}function va(e){let n=xa(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let o=Number(n&0xffffffffn);return ao([o>>>24&255,o>>>16&255,o>>>8&255,o&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function Fa(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return ao(t);if(i===6)return va(t);let o=e.toLowerCase().replace(/\.$/,"");return !o||!o.includes(".")||n.has(o)?true:Da.some(r=>o===r||o.endsWith(`.${r}`))}function ro(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function so(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function co(e,n={}){if(e===void 0){let y=so({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(y,"utf8").digest("hex")})}wa(e)||W("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(y=>typeof y!="string")&&W("CSP_ORIGIN_INVALID"),t.some(y=>!Na.has(y))&&W("CSP_AXIS_UNKNOWN");let i=qn(e,"connectDomains"),o=qn(e,"frameDomains"),r=qn(e,"resourceDomains"),s=qn(e,"baseUriDomains");(r.length>0||s.length>0)&&W("CSP_AXIS_UNSUPPORTED"),(ka(e)>Ta||i.length>to||o.length>to||i.length+o.length>ba||[...i,...o].some(y=>new TextEncoder().encode(y).byteLength>Pa))&&W("CSP_LIMIT_EXCEEDED");let c=i.map(y=>io(y,"connectDomains")),d=o.map(y=>io(y,"frameDomains")),l=new Set((n.runtimeHostnames??[]).map(y=>y.toLowerCase().replace(/\.$/,"")));[...c,...d].some(y=>Fa(y.hostname,l))&&W("CSP_ORIGIN_FORBIDDEN");let p={declared:true,connectDomains:ro(c),frameDomains:ro(d)},u=so(p);return Object.freeze({...p,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(u,"utf8").digest("hex")})}var Ta,to,ba,Pa,Na,Da,Sa,Ma,Oa,La,Ra,Kt,po=j(()=>{m();Ta=4096,to=16,ba=32,Pa=512,Na=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),Da=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],Sa=/^(https|wss):\/\/([^/?#]+)$/i,Ma=/^\[[^\]]+\](?::[0-9]+)?$/,Oa=/^[^:\[\]]+(?::[0-9]+)?$/,La=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,Ra=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],Kt=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function _n(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function f(e,n=e,t,i){throw new ce(e,n,t,i)}function $(e,n){try{return n()}catch(t){throw t instanceof ce?t.withPathPrefix(e):t}}function J(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function w(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function mc(e,n){let t={};for(let[i,o]of Object.entries(e))n.includes(i)||(t[i]=o);return t}function X(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e).find(s=>!i.has(s));o!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",o,"unknown-key");let r=n.find(s=>!w(e,s));r!==void 0&&f("MANIFEST_INVALID","MANIFEST_INVALID",r,"missing-key");}function nt(e,n=false,t=false,i=false){return Ha.test(e)||!i&&$a.test(e)||za.test(e)||t&&lo.test(e)||Ga.test(e)&&!(n&&/^\s*data:/i.test(e)&&!lo.test(e))}function et(e,n=new Set,t=0,i=false,o=false,r=""){if(typeof e=="string"){nt(e,i,o)&&f("UNSAFE_VALUE","UNSAFE_VALUE",r,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&f("MANIFEST_INVALID","MANIFEST_INVALID",r),n.add(e);try{if(Array.isArray(e)){e.forEach((s,a)=>et(s,n,t+1,!1,!1,_n(r,`[${a}]`)));return}J(e)||f("MANIFEST_INVALID","MANIFEST_INVALID",r);for(let[s,a]of Object.entries(e))et(a,n,t+1,i&&t===0&&(s==="name"||s==="description"),o,_n(r,s));}finally{n.delete(e);}}}function De(e,n){let t=e[n];return typeof t!="string"&&f("MANIFEST_INVALID"),t}function he(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&f("MANIFEST_INVALID"),i}function Xt(e){return Ba.test(e)||f("MANIFEST_INVALID"),e}function sn(e){return Va.test(e)||f("TOKEN_INVALID"),e}function hc(e){return No.test(e)||f("MANIFEST_INVALID"),e}function _c(e){J(e)||f("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=hc(t);J(i)||f("MANIFEST_INVALID");let r=i.type;if(r==="text"){X(i,["type","maxLength"]),n[o]={type:r,maxLength:he(i,"maxLength",1)};continue}if(r==="text-list"){X(i,["type","max","itemMaxLength"]),n[o]={type:r,max:he(i,"max",0),itemMaxLength:he(i,"itemMaxLength",1)};continue}if(r==="step-list"){X(i,["type","min","max","labelMaxLength","detailMaxLength"]);let s=he(i,"min",0),a=he(i,"max",1);s>a&&f("MANIFEST_INVALID"),n[o]={type:r,min:s,max:a,labelMaxLength:he(i,"labelMaxLength",1),detailMaxLength:he(i,"detailMaxLength",1)};continue}typeof r=="string"&&f("SCHEMA_TYPE_UNSUPPORTED"),f("MANIFEST_INVALID");}return n}function Ec(e,n,t){let i=e[n];(!i||i.type!==t)&&f("MANIFEST_INVALID");}function Zn(e,n,t){let i=De(e,"field");return No.test(i)||f("MANIFEST_INVALID"),Ec(n,i,t),i}function Tc(e,n){J(e)||f("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&f("MANIFEST_INVALID"),gc.includes(t)||f("PRIMITIVE_UNKNOWN"),t){case "card-shell":return X(e,["primitive"]),{primitive:t};case "meta-banner":return X(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:sn(De(e,"badgeToken")),noticeToken:sn(De(e,"noticeToken"))};case "heading":return X(e,["primitive","field"]),{primitive:t,field:Zn(e,n,"text")};case "labeled-text":return X(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&f("MANIFEST_INVALID"),{primitive:t,titleToken:sn(De(e,"titleToken")),field:Zn(e,n,"text"),variant:"callout"};case "step-flow":return X(e,["primitive","titleToken","field"]),{primitive:t,titleToken:sn(De(e,"titleToken")),field:Zn(e,n,"step-list")};case "text-list":{X(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:sn(De(e,"titleToken")),field:Zn(e,n,"text-list")};return w(e,"emptyToken")&&(i.emptyToken=sn(De(e,"emptyToken"))),w(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&f("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return f("MANIFEST_INVALID")}function bc(e,n){return Array.isArray(e)||f("MANIFEST_INVALID"),e.map(t=>Tc(t,n))}function q(e="v2 manifest exceeds a contract limit",n,t){return f("LIMIT_EXCEEDED",e,n,t)}function me(e="initial state is not projection-safe"){return f("INITIAL_STATE_INVALID",e)}function uo(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||lc.test(e)||uc.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),(nt(e,true,true)||Ja.test(e)||Wa.test(e)||Ka.test(e))&&f("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function Yt(e,n){return (typeof e!="string"||!Ne.test(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function Pc(e){return (typeof e!="string"||!kt.test(e)||e==="*"||e==="all")&&f("MANIFEST_INVALID","action capability is invalid"),e}function Do(e){return (typeof e!="string"||!pc.test(e))&&f("MANIFEST_INVALID","resource hash is invalid"),e}function qt(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&q("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||f("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&f("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&f("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&q("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&f("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&q("v2 manifest array is too long",i,"array-too-long"),e.forEach((o,r)=>qt(o,n,t+1,_n(i,`[${r}]`)));return}J(e)||f("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[o,r]of Object.entries(e))qt(r,n,t+1,_n(i,o));}finally{n.delete(e);}}}function So(e){return (typeof e!="string"||e.length>4096||!mn.test(e))&&(typeof e=="string"&&e.length>4096&&q("projection path is too long"),f("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>rn(t))&&f("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function Zt(e){J(e)||f("MANIFEST_INVALID","projection policy must be an object"),X(e,["allow"]),Array.isArray(e.allow)||f("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&q("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=So(i);t.has(o)&&f("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Nc(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","dataPaths must be an array"),e.length>fc&&q("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=So(o);i.has(r)&&f("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(s=>tn(r,s))||f("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function Dc(e){Array.isArray(e)||f("MANIFEST_INVALID","deviceFeatures must be an array",void 0,"array"),e.length>yc&&f("MANIFEST_INVALID","deviceFeatures allow at most 16 names",void 0,"too-many-items");let n=[],t=new Set;for(let[i,o]of e.entries()){let r=`[${i}]`;typeof o!="string"&&f("MANIFEST_INVALID","a device feature name must be a string",r,"string"),o.length===0&&f("MANIFEST_INVALID","a device feature name must not be empty",r,"empty"),o.length>Ac&&f("MANIFEST_INVALID","a device feature name is at most 32 characters",r,"too-long"),Ic.test(o)||f("MANIFEST_INVALID","a device feature name starts with a lowercase letter and holds only letters and digits",r,"format"),t.has(o)&&f("MANIFEST_INVALID","deviceFeatures contain a duplicate name",r,"duplicate-item"),t.add(o),n.push(o);}return n}function Sc(e){if(e!==false)return e!==true&&f("MANIFEST_INVALID","downloads must be true or false",void 0,"boolean"),true}function Mc(e){return typeof e!="boolean"&&f("MANIFEST_INVALID","desktopOnly must be true or false",void 0,"boolean"),e}function Oc(e){return (!J(e)||e.view!==true||Object.keys(e).some(n=>n!=="view"&&n!=="entry"))&&f("MANIFEST_INVALID",'share must be { "view": true } or { "view": true, "entry": "<path>" }',void 0,"share-shape"),w(e,"entry")?{view:true,entry:Rc(e.entry)}:{view:true}}function Rc(e){typeof e!="string"&&f("MANIFEST_INVALID","share.entry must be a string","entry","entry-shape");let n=(i,o)=>f("MANIFEST_INVALID",`share.entry ${o}`,"entry",i);e.length===0&&n("empty","must not be empty"),e.length>fo&&n("too-long",`must be at most ${fo} characters`),e.startsWith("/")&&n("absolute","must be relative to the App folder");let t=e.split("/");t.length>yo&&n("too-many-segments",`must have at most ${yo} segments`);for(let i of t)i.length===0&&n("empty-segment","must not contain an empty segment"),(i==="."||i==="..")&&n("dot-segment",'must not contain "." or ".." segments'),Lc.test(i)||n("segment-shape",'segments start with an ASCII letter or digit, then use only letters, digits, ".", "_" and "-"');return t[t.length-1].endsWith(".html")||n("extension","must name a file ending in .html"),e}function wc(e){return (!J(e)||Object.keys(e).length!==1||typeof e.root!="string")&&f("MANIFEST_INVALID",'files must be exactly { "root": "<workspace folder>" }',void 0,"files-shape"),{root:vc(e.root)}}function vc(e){let n=e.normalize("NFC"),t=(r,s)=>f("MANIFEST_INVALID",`files.root ${s}`,"root",r);n.length===0&&t("empty","must not be empty"),xc.test(n)&&t("forbidden-character","must not contain control characters, backslash or colon"),(n.startsWith("/")||n.startsWith("~"))&&t("absolute","must be relative to the workspace"),Array.from(n).length>Ao&&t("too-long",`must be at most ${Ao} characters`);let i=n.split("/"),o=i[0].toLowerCase().replace(/[. ]+$/,"");Uc.includes(o)&&t("reserved-folder","must not start in an App code folder or a tool folder"),i.length<Cc&&t("too-shallow","must name a folder inside a top-level folder, such as docs/trips"),i.length>Io&&t("too-many-segments",`must have at most ${Io} segments`);for(let r of i)r.length===0&&t("empty-segment","must not contain an empty segment"),(r==="."||r==="..")&&t("dot-segment",'must not contain "." or ".." segments'),Array.from(r).length>go&&t("segment-too-long",`segments must be at most ${go} characters`),kc.test(r)||t("segment-shape",'segments must start with a letter or digit and contain only letters, digits, combining marks, "_" or "-"');return n}function an(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&f("MANIFEST_INVALID",`${n} is invalid`),e}function mo(e,n){return (typeof e!="number"||!Number.isFinite(e))&&f("MANIFEST_INVALID",`${n} is invalid`),e}function Qt(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||nt(e))&&f("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||f("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&q("schema enum is too deep"),t.has(e)&&f("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&q("schema enum array is too long"),e.map(o=>Qt(o,n+1,t));J(e)||f("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))rn(o)&&f("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=Qt(r,n+1,t);return i}finally{t.delete(e);}}function Fc(e,n){if(e===void 0)return;Array.isArray(e)||f("MANIFEST_INVALID","schema required must be an array"),e.length>64&&q("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!mn.test(o))&&f("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&q("schema required key is too long"),i.has(o)&&f("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&f("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function jc(e,n){let t=n?mn:zn;return e.length>4096&&q("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>rn(i)))&&f("MANIFEST_INVALID","schema property name is invalid"),e}function ei(e,n=0,t=false){J(e)||f("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&q("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&f("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),f("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),X(e,["type"],o.filter(a=>a!=="type"));let r={type:i};if(w(e,"enum")&&(Array.isArray(e.enum)||f("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&q("schema enum is too long"),r.enum=e.enum.map(a=>Qt(a))),i==="string"&&(w(e,"minLength")&&(r.minLength=an(e.minLength,"schema minLength",4096)),w(e,"maxLength")&&(r.maxLength=an(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&f("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(w(e,"minimum")&&(r.minimum=mo(e.minimum,"schema minimum")),w(e,"maximum")&&(r.maximum=mo(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&f("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(w(e,"minItems")&&(r.minItems=an(e.minItems,"schema minItems",128)),w(e,"maxItems")&&(r.maxItems=an(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&f("MANIFEST_INVALID","schema array length bounds are inverted"),w(e,"items")&&(r.items=ei(e.items,n+1,false))),i==="object"){let a;if(w(e,"properties")){J(e.properties)||f("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&q("schema properties are too many"),a={};for(let[l,p]of d){let u=jc(l,t);a[u]=ei(p,n+1,false);}r.properties=a;}w(e,"minProperties")&&(r.minProperties=an(e.minProperties,"schema minProperties",64)),w(e,"maxProperties")&&(r.maxProperties=an(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&f("MANIFEST_INVALID","schema object property bounds are inverted");let c=Fc(e.required,a);c!==void 0&&(r.required=c),w(e,"additionalProperties")&&(e.additionalProperties!==false&&f("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let s=JSON.stringify(r);return (s===void 0||Buffer.byteLength(s,"utf8")>2097152)&&q("action inputSchema subtree is too large"),r}function Vc(e){let n=ei(e,0,true);return (n.type!=="object"||!n.properties)&&f("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function Bc(e){if(J(e)||f("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){X(e,oc);let n=e.handler;return (typeof n!="string"||!Ut.test(n))&&f("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&w(e,"entry"))return X(e,ac),e.entry!==Ce&&f("MANIFEST_INVALID",`skill backend entry must be ${Ce}`),{type:"skill",entry:Ce};if(e.type==="skill"){X(e,rc,sc),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&f("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!xt.test(i))&&f("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=w(e,"env")?Jc(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}f("MANIFEST_INVALID","action backend type is unsupported");}function Hc(e){J(e)||f("MANIFEST_INVALID","action must be an object"),X(e,Za,Qa),w(e,"_meta")&&$("_meta",()=>Mo(e._meta));let n=$("actionId",()=>Yt(e.actionId,"actionId"));Rt(n)&&f("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=$("capability",()=>Pc(e.capability)),i=e.mutation;typeof i!="boolean"&&f("MANIFEST_INVALID","action mutation must be boolean","mutation");let o=$("inputSchema",()=>Vc(e.inputSchema)),r;if(w(e,"dataInputs")){Array.isArray(e.dataInputs)||f("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let y=o.properties,g=new Set,_=[];for(let E of e.dataInputs)(typeof E!="string"||!w(y,E)||g.has(E))&&f("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),g.add(E),_.push(E);r=_;}let s=$("resultProjection",()=>Zt(e.resultProjection)),a=$("backend",()=>Bc(e.backend)),c;w(e,"content")&&((a.type!=="skill"||!$n(e.content))&&f("MANIFEST_INVALID","action content declaration is invalid","content"),c=Wc(e.content));let d;if(w(e,"confirmation")){let y=e.confirmation;y!=="none"&&y!=="native"&&f("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=y;}let l;w(e,"schedule")&&(l=$("schedule",()=>Gc(e.schedule,{backend:a,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let p;w(e,"job")&&(l!==void 0&&f("MANIFEST_INVALID","an action is either the scheduled run or a job, not both","job"),p=$("job",()=>$c(e.job,{backend:a,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let u;return w(e,"jobAccess")&&(p!==void 0&&f("MANIFEST_INVALID","an action is either the job or a job control, not both","jobAccess"),u=$("jobAccess",()=>zc(e.jobAccess,{backend:a,hasContent:c!==void 0}))),{actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:s,backend:a,...c===void 0?{}:{content:c},...r===void 0?{}:{dataInputs:r},...d===void 0?{}:{confirmation:d},...l===void 0?{}:{schedule:l},...p===void 0?{}:{job:p},...u===void 0?{}:{jobAccess:u}}}function zc(e,n){return (n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==Ce)&&f("MANIFEST_INVALID","jobAccess needs a tool-mode action","jobAccess"),n.hasContent&&f("MANIFEST_INVALID","a job control action takes no content","jobAccess"),(!Array.isArray(e)||e.length===0)&&f("MANIFEST_INVALID","jobAccess must list at least one operation","jobAccess"),(new Set(e).size!==e.length||!e.every(Yn))&&f("MANIFEST_INVALID","jobAccess must name each operation once: start, status or cancel","jobAccess"),Object.freeze([...e])}function $c(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==Ce)&&f("MANIFEST_INVALID","job needs a tool-mode action","job"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&f("MANIFEST_INVALID","a job action takes no content, dataInputs or native confirmation","job"),(n.inputSchema.required??[]).length>0&&f("MANIFEST_INVALID","a job action input must accept {}","inputSchema.required"),J(e)||f("MANIFEST_INVALID","job must be an object","job"),X(e,[],tc);let t=w(e,"deadlineMs")?e.deadlineMs:Kn.default;return Xn(t)||f("MANIFEST_INVALID","job deadlineMs is invalid","job.deadlineMs"),{deadlineMs:t}}function Gc(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==Ce)&&f("MANIFEST_INVALID","schedule needs a tool-mode action","schedule"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&f("MANIFEST_INVALID","a scheduled action takes no content, dataInputs or native confirmation","schedule"),(n.inputSchema.required??[]).length>0&&f("MANIFEST_INVALID","a scheduled action input must accept {}","inputSchema.required"),J(e)||f("MANIFEST_INVALID","schedule must be an object","schedule"),X(e,ec,nc),Jn(e.everyMinutes)||f("MANIFEST_INVALID","schedule everyMinutes is invalid","schedule.everyMinutes");let t=w(e,"timeoutMs")?e.timeoutMs:Gn.default;return Wn(t)||f("MANIFEST_INVALID","schedule timeoutMs is invalid","schedule.timeoutMs"),{everyMinutes:e.everyMinutes,timeoutMs:t}}function Jc(e){return Qi(e)||f("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function Wc(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function Kc(e){return J(e)||f("INITIAL_STATE_INVALID","initialState must be an object"),X(e,cc,dc),e.path!=="ui/state.json"&&f("MANIFEST_INVALID","initialState path is not fixed"),w(e,"hash")?{path:"ui/state.json",hash:Do(e.hash)}:{path:"ui/state.json"}}function Xc(e){let n=["wasm","terminal","htmlDocuments","appBrowser"];return (!J(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&f("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{},...e.appBrowser===true?{appBrowser:true}:{}}}function Yc(e,n){let t;try{t=co(e);}catch(i){let o=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return f("MANIFEST_INVALID",o,void 0,o.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&f("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&f("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function qc(e,n){et(J(e)?mc(e,["csp","downloads","files","share"]):e,new Set,0,true,true),qt(e),J(e)||f("MANIFEST_INVALID"),X(e,Ya,qa),w(e,"_meta")&&$("_meta",()=>Mo(e._meta)),e.manifestVersion!==2&&f("MANIFEST_INVALID");let t;w(e,"runtime")&&(t=$("runtime",()=>Xc(e.runtime)));let i;w(e,"csp")&&(i=$("csp",()=>Yc(e.csp,t)));let o=$("pluginId",()=>Yt(e.pluginId,"pluginId")),r=$("definitionId",()=>Yt(e.definitionId,"definitionId")),s=$("version",()=>he(e,"version",1)),a=$("name",()=>uo(e.name,"name")),c=$("description",()=>uo(e.description,"description")),d;w(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&f("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let l;w(e,"tone")&&((typeof e.tone!="string"||!vt.includes(e.tone))&&f("MANIFEST_INVALID","tone is invalid","tone"),l=e.tone),e.entry!=="ui/index.html"&&f("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let p;w(e,"entryHash")&&(p=$("entryHash",()=>Do(e.entryHash)));let u;w(e,"initialState")&&(u=$("initialState",()=>Kc(e.initialState)));let y;w(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&f("MANIFEST_INVALID","usage is invalid","usage"),y=e.usage);let g;w(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&f("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),g=e.detailPanel);let _;if(w(e,"displayModes")){((y??Ve)!==Ve||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&f("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let F=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(le=>typeof le!="string"||!F.has(le)))&&f("MANIFEST_INVALID","displayModes are invalid","displayModes"),_=e.displayModes;}(y??Ve)===Ve&&g!==void 0&&f("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let E=n.mode??"local";E!=="local"&&E!=="installed"&&E!=="published"&&f("MANIFEST_INVALID","manifest mode is invalid"),E!=="local"&&p===void 0&&f("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),E!=="local"&&u!==void 0&&u.hash===void 0&&f("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&f("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&q("surfaces exceed the v2 limit","surfaces","too-many-items");let U=[],x=new Set;for(let F of e.surfaces)(typeof F!="string"||!Ft.includes(F))&&f("MANIFEST_INVALID","surface is unsupported","surfaces"),x.has(F)&&f("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),x.add(F),U.push(F);J(e.size)||f("MANIFEST_INVALID","size must be an object","size"),$("size",()=>X(e.size,["height"]));let P=$("size",()=>he(e.size,"height",1));P>720&&q("size.height exceeds the v2 limit","size.height","too-large");let C=$("stateProjection",()=>Zt(e.stateProjection)),H=e.summaryProjection===void 0?void 0:$("summaryProjection",()=>Zt(e.summaryProjection));H!==void 0&&H.allow.some(F=>!C.allow.includes(F))&&f("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let N=$("dataPaths",()=>Nc(e.dataPaths,C.allow)),D=w(e,"deviceFeatures")?$("deviceFeatures",()=>Dc(e.deviceFeatures)):void 0,O=w(e,"downloads")?$("downloads",()=>Sc(e.downloads)):void 0,I=w(e,"share")?$("share",()=>Oc(e.share)):void 0,A=w(e,"files")?$("files",()=>wc(e.files)):void 0,h=w(e,"desktopOnly")?$("desktopOnly",()=>Mc(e.desktopOnly)):void 0;Array.isArray(e.actions)||f("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&q("actions exceed the v2 limit","actions","too-many-items");let T=[],B=new Set,v=0,Y=0;for(let[F,le]of e.actions.entries()){let Pe=`actions[${F}]`,Re=$(Pe,()=>Hc(le));if(B.has(Re.actionId)&&f("MANIFEST_INVALID","actions contain a duplicate actionId",`${Pe}.actionId`,"duplicate-item"),Re.schedule!==void 0&&(v+=1,v>qi&&f("MANIFEST_INVALID","an App declares at most one scheduled action",`${Pe}.schedule`,"duplicate-item")),Re.job!==void 0&&(Y+=1,Y>Zi&&f("MANIFEST_INVALID","an App declares at most one job action",`${Pe}.job`,"duplicate-item")),Re.backend.type==="core"&&Re.backend.handler==="state.set"){Re.mutation||f("MANIFEST_INVALID","state.set actions must be mutations",`${Pe}.mutation`);for(let Zs of Object.keys(Re.inputSchema.properties))C.allow.includes(Zs)||f("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${Pe}.inputSchema.properties`);}B.add(Re.actionId),T.push(Re);}return {manifestVersion:2,pluginId:o,definitionId:r,version:s,name:a,description:c,...d===void 0?{}:{icon:d},...l===void 0?{}:{tone:l},entry:"ui/index.html",...p===void 0?{}:{entryHash:p},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...u===void 0?{}:{initialState:u},...y===void 0?{}:{usage:y},...g===void 0?{}:{detailPanel:g},..._===void 0?{}:{displayModes:_},surfaces:U,size:{height:P},stateProjection:C,...H===void 0?{}:{summaryProjection:H},...N===void 0?{}:{dataPaths:N},...D===void 0?{}:{deviceFeatures:D},...O===void 0?{}:{downloads:O},...I===void 0?{}:{share:I},...A===void 0?{}:{files:A},...h===void 0?{}:{desktopOnly:h},actions:T}}function Mo(e){J(e)||f("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>ic)&&q("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function Zc(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.schedule===void 0?{}:{schedule:r.schedule},...r.job===void 0?{}:{job:r.job},...r.jobAccess===void 0?{}:{jobAccess:r.jobAccess},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let s=r.backend.type==="skill"||r.backend.type==="core"&&r.backend.handler==="state.set";t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:s?"allowed":"denied",...s?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.downloads===void 0?{}:{downloads:e.downloads},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function ni(e,n,t,i,o,r){if(typeof e=="string"){let s=o.length>0&&r.some(a=>tn(o.join("."),a));return (e.length>4096||nt(e,false,false,s))&&me("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||me("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&me("state contains a non-JSON value"),t>8&&me("state is too deep"),n.has(e)&&me("state contains a cycle"),n.add(e);try{let s;if(Array.isArray(e))e.length>128&&me("state array is too long"),s=e.map(c=>ni(c,n,t+1,2097152,o,r));else {J(e)||me("state contains a non-plain object");let c={};for(let[d,l]of Object.entries(e))(d.length>4096||!zn.test(d)||rn(d))&&(d.length>4096&&me("state key is too long"),me("state contains a reserved or invalid key")),c[d]=ni(l,n,t+1,2097152,[...o,d],r);s=c;}let a=JSON.stringify(s);return (a===void 0||Buffer.byteLength(a,"utf8")>i)&&me("state subtree is too large"),s}finally{n.delete(e);}}function ii(e,n=[]){J(e)||me("initial state must be a JSON object");let t=ni(e,new Set,0,2097152,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&me(),t}function Qc(e,n={}){et(e),J(e)||f("MANIFEST_INVALID"),X(e,Xa),e.manifestVersion!==1&&f("MANIFEST_INVALID");let t=Xt(De(e,"pluginId")),i=Xt(De(e,"definitionId")),o=he(e,"version",1),r=he(e,"primitiveSet",1),s=n.supportedPrimitiveSet??ja;(!Number.isSafeInteger(s)||s<1)&&f("MANIFEST_INVALID"),r>s&&f("PRIMITIVE_SET_UNSUPPORTED"),J(e.activation)||f("MANIFEST_INVALID"),X(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&f("MANIFEST_INVALID");let a=Xt(De(e.activation,"language")),c=_c(e.schema),d=bc(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:a},schema:c,layout:d}}function ed(e,n={}){return J(e)||f("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&f("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?qc(e,n):Qc(e,n)}function Xe(e,n={}){try{return ed(e,n)}catch(t){if(t instanceof ce)throw t;return f("MANIFEST_INVALID")}}function En(e,n={}){let t=Xe(e,n);return t.manifestVersion===2?Zc(t):t}var ja,Va,Ba,No,Ha,za,$a,Ga,lo,Ja,Wa,Ka,Xa,Ya,qa,Za,Qa,ec,nc,tc,ic,oc,rc,sc,ac,cc,dc,pc,lc,uc,fc,yc,Ac,Ic,gc,ce,fo,yo,Lc,Ao,Cc,Io,go,kc,Uc,xc,oi=j(()=>{m();Wt();we();Bt();eo();Jt();Ht();zt();po();Je();ja=1,Va=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,Ba=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,No=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,Ha=/<\/?[A-Za-z][^>]*>/,za=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,$a=/^(?:https?|file|ftp|ws|wss):\/\//i,Ga=/^\s*(?:javascript|data):/i,lo=/data:[^,\s]*,/i,Ja=/(?:https?|file|ftp|ws|wss):\/\//i,Wa=/javascript:/i,Ka=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,Xa=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],Ya=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],qa=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","deviceFeatures","downloads","share","files","desktopOnly"],Za=["actionId","capability","mutation","inputSchema","resultProjection","backend"],Qa=["confirmation","dataInputs","content","schedule","job","jobAccess","_meta"],ec=["everyMinutes"],nc=["timeoutMs"],tc=["deadlineMs"],ic=4*1024,oc=["type","handler"],rc=["type","command"],sc=["env"],ac=["type","entry"],cc=["path"],dc=["hash"],pc=/^[0-9a-f]{64}$/,lc=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,uc=/[\r\n]/,fc=16,yc=16,Ac=32,Ic=/^[a-z][A-Za-z0-9]{0,31}$/,gc=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],ce=class e extends Error{constructor(t,i=t,o,r){super(i);this.code=t;this.path=o;this.rule=r;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,_n(t,this.path),this.rule)}};fo=200,yo=3,Lc=/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;Ao=200,Cc=2,Io=4,go=100,kc=/^[\p{L}\p{N}][\p{L}\p{N}\p{M}_-]*$/u,Uc=[".git",".crewx","node_modules","apps","skills"],xc=/[\u0000-\u001f\u007f-\u009f\\:<>"|?*]/;});function ko(e){return typeof e=="string"&&e.length<=td&&nd.test(e)}function V(e,n,t,i,o){throw new Me(e,{path:n,rule:t,...i===void 0?{}:{message:i},...o===void 0?{}:{file:o}})}function oe(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Z(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function Ee(e){let n=`_meta["${Be}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function sd(e){return e.toLowerCase().replace(/_/g,"-")}function ad(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return Ee(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return Ee("definitionVersion");case "definitionId":return Ee("definitionId");default:return Ee(`${t}${i}`)}}function Uo(e,n,t){return {path:t(e.path),rule:e.rule??sd(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function xo(e){return JSON.parse(JSON.stringify(e))}function ai(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&V("LIMIT_EXCEEDED",n,"string-too-long"),(id.test(e)||od.test(e)||rd.test(e))&&V("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||V("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&V("MANIFEST_INVALID",n,"non-json-value"),t>8&&V("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&V("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&V("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((o,r)=>ai(o,`${n}[${r}]`,t+1,i));return}oe(e)||V("MANIFEST_INVALID",n,"non-plain-object");for(let[o,r]of Object.entries(e))ai(r,n===""?o:`${n}.${o}`,t+1,i);}finally{i.delete(e);}}}function _e(e,n){return (typeof e!="string"||e.length===0)&&V("MANIFEST_INVALID",n,"string"),e}function dn(e,n){return oe(e)||V("MANIFEST_INVALID",n,"object"),e}function cd(e,n){Array.isArray(e)||V("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>_e(t,`${n}[${i}]`));}function dd(e,n){typeof e!="boolean"&&V("MANIFEST_INVALID",n,"boolean");}function Tn(e,n,t,i){for(let o of Object.keys(e))!t.includes(o)&&!i.includes(o)&&V("MANIFEST_INVALID",`${n}.${o}`,"unknown-key");for(let o of t)Z(e,o)||V("MANIFEST_INVALID",`${n}.${o}`,"missing-key");}function pd(e,n){if(e!=="icon")switch(ai(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "license":_e(n,e);return;case "author":{let t=dn(n,e);Tn(t,e,["name"],["email","url"]);for(let i of Object.keys(t))_e(t[i],`${e}.${i}`);return}case "repository":{let t=dn(n,e);Tn(t,e,[],["type","url"]);for(let i of Object.keys(t))_e(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=dn(t,o);Tn(r,o,["src","size"],["theme"]),_e(r.src,`${o}.src`),_e(r.size,`${o}.size`),Z(r,"theme")&&_e(r.theme,`${o}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":cd(n,e);return;case "tools":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=dn(t,o);Tn(r,o,["name"],["description"]),_e(r.name,`${o}.name`),Z(r,"description")&&_e(r.description,`${o}.description`);});return}case "prompts":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=dn(t,o);Tn(r,o,["name","text"],["description","arguments"]),_e(r.name,`${o}.name`),_e(r.text,`${o}.text`);});return}case "tools_generated":case "prompts_generated":dd(n,e);return;case "localization":case "compatibility":case "user_config":dn(n,e);return;default:V("MANIFEST_INVALID",e,"unknown-key");}}function tt(e){return typeof e=="string"&&Ne.test(e)?e:void 0}function vo(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function ld(e){let n=tt(e.name);if(n===void 0)return;let t=e._meta,i=oe(t)?t[Be]:void 0,o=oe(i)?i:{},r=Z(o,"definitionId")?tt(o.definitionId):n,s=Z(o,"definitionVersion")?vo(o.definitionVersion):1;return {pluginId:n,...r===void 0?{}:{definitionId:r},...s===void 0?{}:{definitionVersion:s}}}function ud(e){let n=tt(e.pluginId);if(n===void 0)return;let t=tt(e.definitionId),i=vo(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function pi(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!oe(n))return !1;let t=n._meta;return oe(t)&&Z(t,Be)}catch{return  false}}function fd(e,n){if(e===pe)return n.builtinOnly===true;let t=n._meta,i=oe(t)?t[Be]:void 0;return oe(i)&&i.builtinOnly===true}function yd(e,n){Z(e,"server")&&V("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let a of Object.keys(e))ci.includes(a)||V("MANIFEST_INVALID",a,"unknown-key");for(let a of di)Z(e,a)||V("MANIFEST_INVALID",a,"missing-key");e.manifest_version!==ri&&V("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${ri}"`),ko(e.version)||V("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;oe(t)||V("MANIFEST_INVALID","_meta","object"),Z(t,Be)||V("MANIFEST_INVALID",Ee(),"missing-key");let i=t[Be];oe(i)||V("MANIFEST_INVALID",Ee(),"object");for(let a of Object.keys(i))si.includes(a)||Co.includes(a)||V("MANIFEST_INVALID",Ee(a),"unknown-key");for(let a of si)a==="actions"&&n!==void 0||Z(i,a)||V("MANIFEST_INVALID",Ee(a),"missing-key");if(n!==void 0&&Z(i,"actions")&&V("MANIFEST_INVALID",Ee("actions"),"two-truths",`actions are declared in both ${K} and ${G}; a server.ts App keeps them in the tools file only`),Ad(i.actions),Z(i,"definitionVersion")){let a=i.definitionVersion;(!Number.isSafeInteger(a)||a<1)&&V("MANIFEST_INVALID",Ee("definitionVersion"),"positive-integer");}let o={};for(let a of wo)Z(e,a)&&(pd(a,e[a]),o[a]=xo(e[a]));let r={};for(let[a,c]of Object.entries(t))a!==Be&&(r[a]=c);let s={manifestVersion:2,pluginId:e.name,definitionId:Z(i,"definitionId")?i.definitionId:e.name,version:Z(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[a,c]of Object.entries(i))a==="definitionId"||a==="definitionVersion"||(s[a]=c);return n!==void 0&&(s.actions=n.map(a=>({...a,backend:{type:"skill",entry:Ce}}))),Object.keys(r).length>0&&(s._meta=r),{v2Input:s,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:o}}function Ad(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=oe(n)?n.backend:void 0;oe(i)&&Z(i,"entry")&&V("MANIFEST_INVALID",Ee(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${K} cannot name an entry; a server.ts App declares its actions in ${G}`);});}function Id(e,n,t){oe(e)||V("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",K);let i;try{i=yd(e,t);}catch(s){throw s instanceof Me?new Me(s.code,{...s.reason,file:K}):s}let o;try{let s=Xe(i.v2Input,{mode:n.mode??"local"});s.manifestVersion!==2&&V("MANIFEST_INVALID","","v2-required"),o=s;}catch(s){throw s instanceof ce?new Me(s.code,Uo(s,K,ad)):s}let r=e.tools;if(Array.isArray(r)){let s=new Set(o.actions.map(a=>a.actionId));r.forEach((a,c)=>{let d=a.name;if(!s.has(d))throw new Me("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:K})});}return {file:K,manifest:o,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function gd(e,n){try{let t=Xe(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new Me("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:pe});return {file:pe,manifest:t,v2Input:e}}catch(t){throw t instanceof ce?new Me(t.code,Uo(t,pe,i=>i??"")):t}}function pn(e){return ue(En(e).definition)}function Lo(e){let{entryHash:n,initialState:t,...i}=e,o={...i};return t!==void 0&&(o.initialState={path:t.path}),xo(o)}function md(e,n){let t=Lo(e),i=Lo(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(r=>ie(t[r]??null)!==ie(i[r]??null))}function hd(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function _d(e,n){let t=md(e,n),i=hd(e,n),o="";try{let r=pn(e),s=pn(n);i=i||r!==s,o=` (definition hash ${r.slice(0,12)} vs ${s.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||V("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${K} and ${pe} normalize to different definitions${o}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function Se(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:G},files:[]}}function Ro(e){return {...Se("","tools-needs-manifest-json","MANIFEST_INVALID",`${G} is read with ${K} only`),files:e}}function Ed(e,n){if(e.byteLength>n)return {failure:Se("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:Se("","invalid-json")}}if(!oe(t))return {failure:Se("","not-object","MANIFEST_INVALID",`${G} must be a JSON object`)};for(let o of Object.keys(t))if(o!=="schemaVersion"&&o!=="actions")return {failure:Se(o,"unknown-key")};for(let o of ["schemaVersion","actions"])if(!Z(t,o))return {failure:Se(o,"missing-key")};if(t.schemaVersion!==1)return {failure:Se("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:Se("actions","array")};for(let[o,r]of i.entries()){if(!oe(r))return {failure:Se(`actions[${o}]`,"object")};if(Z(r,"backend"))return {failure:Se(`actions[${o}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${G} cannot carry a backend`)}}return {actions:i}}function Td(e,n){let t=n.maxBytes??262144,i=[],o=new TextDecoder("utf-8",{fatal:true});for(let r of ee){let s=e[r];if(s===void 0)continue;if(s.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:r},files:[r]}};let a;try{a=JSON.parse(o.decode(s));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:r},files:[r]}}}if(!oe(a))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${r} must be a JSON object`,file:r},files:[r]}};i.push({file:r,raw:a});}return {parsed:i}}function ze(e,n={}){let{parsed:t,failure:i}=Td(e,n),o=ee.filter(y=>e[y]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let r=e[G],s=r===void 0?void 0:Ed(r,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:s===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:Ro(o),parseFailure:true,builtinOnly:false};let a=t[0],c=a.file===K?ld(a.raw):ud(a.raw),d=t.some(y=>fd(y.file,y.raw)),l;if(s!==void 0){let y=t.some(g=>g.file===K)?s.failure:Ro(o);if(y!==void 0)return {ok:false,rejection:y,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};l=s.actions;}let p=[];try{for(let y of t)p.push(y.file===K?Id(y.raw,n,l):gd(y.raw,n));p.length===2&&_d(p[0].manifest,p[1].manifest);}catch(y){if(y instanceof Me)return {ok:false,rejection:{code:y.code,reason:y.reason,files:y.code==="MANIFEST_DUAL_MISMATCH"?[...ee]:y.reason.file===void 0||y.reason.file===G?o:[y.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw y}let u=p[0];return {ok:true,...u,identity:c??{pluginId:u.manifest.pluginId},files:o}}var K,pe,ee,ri,Be,ci,di,wo,si,Co,nd,td,id,od,rd,Me,it=j(()=>{m();We();we();Jt();Je();oi();K="manifest.json",pe="ui-plugin.json",ee=[K,pe],ri="0.3",Be="dev.crewx",ci=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),di=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),wo=Object.freeze(ci.filter(e=>e!=="server"&&!di.includes(e))),si=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),Co=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp","deviceFeatures","downloads","share","files","desktopOnly"]),nd=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,td=256,id=/<\/?[A-Za-z][^>]*>/,od=/^\s*javascript:/i,rd=/data:[^,\s]*,/i;Me=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});function $o(e){if(e===void 0)return {kind:"none"};if(typeof e!="string")return {kind:"invalid",reason:"bad-path"};if(Nd.test(e))return {kind:"url",declared:e};if(!Md(e))return {kind:"invalid",reason:"bad-path",declared:e};let n=e.lastIndexOf("."),t=n<0?void 0:bd.get(e.slice(n+1).toLowerCase());return t===void 0?{kind:"invalid",reason:"bad-type",declared:e}:{kind:"file",path:e,contentType:t}}function Md(e){return e.length===0||e.length>512||e.startsWith("/")||e.includes("\\")||e.includes("\0")?false:e.split("/").every(n=>n!==""&&n!=="."&&n!=="..")}async function bn(e,n){let t=$o(e);if(t.kind==="none")return {diagnostics:[]};if(t.kind==="url")return {diagnostics:[{code:"ICON_NOT_FILE",severity:"warning",declared:t.declared}]};if(t.kind==="invalid")return {diagnostics:[li(t.reason,t.declared)]};let i=await n(t.path);if(typeof i=="string")return {diagnostics:[li(i,t.path)]};let o=Go(t.contentType,i);if(!o.ok)return {diagnostics:[li(o.reason,t.path)]};let r={path:t.path,contentType:t.contentType,byteLength:i.byteLength,bytes:i},s=o.square===false?[{code:"ICON_NOT_SQUARE",severity:"warning",declared:t.path}]:[];return {file:r,diagnostics:s}}function li(e,n){return {code:"ICON_INVALID",severity:"error",reason:e,...n===void 0?{}:{declared:n}}}function Go(e,n){if(n.byteLength>262144)return {ok:false,reason:"too-large"};if(e==="image/png")return !Bo(n,Dd)||Fd(n,12,16)!=="IHDR"||n.byteLength<24?{ok:false,reason:"bytes-mismatch"}:{ok:true,square:Vo(Ho(n,16),Ho(n,20))};if(e==="image/jpeg"){if(!Bo(n,Sd))return {ok:false,reason:"bytes-mismatch"};let t=xd(n);return {ok:true,square:t===void 0?void 0:Vo(t.width,t.height)}}return Od(n)}function Od(e){let n;try{n=Pd.decode(e);}catch{return {ok:false,reason:"bytes-mismatch"}}return kd(n)?{ok:false,reason:"unsafe-svg"}:Ld.test(n)?{ok:true,square:Ud(n)}:{ok:false,reason:"bytes-mismatch"}}function kd(e){if(Rd.some(n=>n.test(e)))return  true;for(let n of e.matchAll(wd))if(!(n[1]??n[2]??n[3]??"").startsWith("#"))return  true;for(let n of e.matchAll(Cd))if(Fo.lastIndex=n.index??0,!Fo.test(e))return  true;return  false}function Ud(e){let n=/<svg\b[^>]*>/i.exec(e)?.[0];if(n===void 0)return;let t=Jo(n,"viewBox");if(t!==void 0){let r=t.trim().split(/[\s,]+/).map(Number);return r.length===4&&r.every(Number.isFinite)?r[2]===r[3]:void 0}let i=jo(n,"width"),o=jo(n,"height");return i===void 0||o===void 0?void 0:i===o}function Jo(e,n){let t=new RegExp(`\\s${n}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`).exec(e);return t?.[1]??t?.[2]}function jo(e,n){let t=Jo(e,n),i=t===void 0?null:/^\s*(\d+(?:\.\d+)?)(?:px)?\s*$/.exec(t);return i===null?void 0:Number(i[1])}function xd(e){let n=2;for(;n+4<=e.byteLength;){if(e[n]!==255)return;let t=e[n+1];if(t===255){n+=1;continue}if(t===216||t===1||t>=208&&t<=215){n+=2;continue}if(t===217)return;let i=e[n+2]<<8|e[n+3];if(i<2)return;if(vd(t))return n+9>e.byteLength?void 0:{height:zo(e,n+5),width:zo(e,n+7)};n+=2+i;}}function vd(e){return e>=192&&e<=207&&e!==196&&e!==200&&e!==204}function Vo(e,n){if(!(e<=0||n<=0))return e===n}function Bo(e,n){return e.byteLength>=n.length&&n.every((t,i)=>e[i]===t)}function Fd(e,n,t){return String.fromCharCode(...e.subarray(n,t))}function Ho(e,n){return (e[n]<<24|e[n+1]<<16|e[n+2]<<8|e[n+3])>>>0}function zo(e,n){return e[n]<<8|e[n+1]}var bd,Pd,Nd,Dd,Sd,Ld,Rd,wd,Cd,Fo,ui=j(()=>{m();bd=new Map([["svg","image/svg+xml"],["png","image/png"],["jpg","image/jpeg"],["jpeg","image/jpeg"]]),Pd=new TextDecoder("utf-8",{fatal:true}),Nd=/^[A-Za-z][A-Za-z0-9+.-]*:/,Dd=[137,80,78,71,13,10,26,10],Sd=[255,216,255];Ld=/^\s*(?:<\?[\s\S]*?\?>\s*|<!--[\s\S]*?-->\s*)*<svg(?=[\s/>])/,Rd=[/<script/i,/[\s"'/]on[a-z]+\s*=/i,/<foreignobject/i,/<!doctype/i,/<!entity/i,/<(?:iframe|embed|object)\b/i,/@import/i],wd=/(?:^|[\s"'/])(?:xlink:)?href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/gi,Cd=/url\(/gi,Fo=/url\(\s*["']?#/iy;});var fi=j(()=>{m();Wi();it();ui();oi();Je();});function S(e,n=e){throw new Oe(e,n)}var Oe,rt=j(()=>{m();Oe=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var or=j(()=>{m();});var rr=j(()=>{m();We();we();rt();or();});function ar(e,n){return sr.add(e),n!==void 0&&Yd.set(e,n),e}function ln(e){return e!==null&&typeof e=="object"&&sr.has(e)}var sr,Yd,st=j(()=>{m();sr=new WeakSet,Yd=new WeakMap;});function Sn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Ai(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function pr(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))pr(n);return Object.freeze(e)}function re(e){throw new Le("LINEAGE_INVALID",e)}function ip(e){throw new Le("LINEAGE_STALE",e)}function lr(e){if(!Sn(e)||!Ai(e,Qd,ep)||!Sn(e.actions))return re("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!Sn(n)||!Ai(n,np,tp))return re("Lineage action definition shape is invalid");return e}function op(e){if(!Sn(e)||!Ai(e,qd,Zd))return re("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!cr.test(e.hash))return re("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!cr.test(e.sourceHash)))return re("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return re("Lineage compatibility marker is invalid");let n=lr(e.definition);if(n.version!==e.version)return re("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return re("Lineage source hash does not match its definition");let t;try{t=ue(n),ge({...n,hash:e.hash});}catch{return re("Lineage definition is invalid")}return t!==e.hash?re("Lineage definition hash does not match"):pr({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function dr(e){return e.stateProjection?.allow??[]}function rp(e,n){let t=[],i=new Set(dr(n));dr(e).some(a=>!i.has(a))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(a=>!o.has(a))&&t.push("S2_DATA_PATHS");for(let[a,c]of Object.entries(e.actions)){let d=n.actions[a];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(a=>!Object.hasOwn(n.actions,a))&&t.push("S4_LEGACY_AGENT_ACTIONS");let s=e.summaryProjection?.allow;if(s!==void 0){let a=new Set(n.summaryProjection?.allow??[]);s.some(c=>!a.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function sp(e,n){return ie(e)===ie(n)}function Ii(e,n){if(!Array.isArray(e)||e.length===0)return re("Definition lineage is missing");if(!Sn(n)||typeof n.hash!="string")return re("Current definition is invalid");let t,i;try{let{hash:a,...c}=n;i=lr(c),t={...i,hash:a},ge(t);}catch{return re("Current definition is invalid")}let o=e.map(op),r=o[0].definition.id;if(o.some(a=>a.definition.id!==r))return re("Lineage definition ids do not match");if(o.some((a,c)=>c>0&&a.version<=o[c-1].version))return re("Lineage generations are not in increasing version order");if(o.some((a,c)=>o.findIndex(d=>d.hash===a.hash)!==c))return re("Lineage contains a duplicate hash");let s=o[o.length-1];if(s.version!==t.version||s.hash!==t.hash||s.definition.id!==t.id||!sp(s.definition,i))return ip("The last lineage generation does not match the current package");if(t.legacy!==void 0){let a=new Set(Object.keys(t.actions)),c=new Set;for(let l of o)if(l.sourceHash===void 0)for(let p of Object.keys(l.definition.actions))a.has(p)&&c.add(p);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(l=>!c.has(l))){let l="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new Le("LINEAGE_INVALID",`Lineage compatibility failed: ${l}`,[l])}}for(let a=0;a<o.length-1;a+=1){if(o.slice(a,-1).some(l=>l.compat==="break"))continue;let d=rp(o[a].definition,t);if(d.length>0)throw new Le("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(o),current:t})}var Le,cr,qd,Zd,Qd,ep,np,tp,gi=j(()=>{m();We();we();Le=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},cr=/^[0-9a-f]{64}$/,qd=["version","hash","definition"],Zd=["sourceHash","compat"],Qd=["id","version","actions"],ep=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","downloads","legacy"],np=["capabilities"],tp=["inputKeys","dataInputs","confirmation","resultProjection","content","env","schedule","job","jobAccess"];});var ur,fr,yr,Ar,Ir=j(()=>{m();ur="text/html;profile=mcp-app",fr=["crewx_app_terminal_connect","crewx_app_html_viewer_open","crewx_app_browser","crewx_files_list","crewx_files_read","crewx_files_write","crewx_docs_share"],yr=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"],Ar="text/html";});function Mn(e){return typeof e=="string"&&ap.includes(e)}function at(e,n){return e==="card"&&n?.type==="core"&&Mn(n.handler)}var ap,ct=j(()=>{m();ap=Object.freeze(["card.secret-env"]);});function gr(e,n=[],t){if(e.content!==void 0||e.confirmation!=="none")return "denied";let i=cp();return i&&Object.hasOwn(i,e.actionId)?i[e.actionId]:e.backend?.type==="core"&&e.backend.handler.startsWith("host.")?"denied":e.backend?.type==="core"&&e.backend.handler==="state.set"?"allowed":e.backend?.type==="core"&&Mn(e.backend.handler)||e.backend?.type==="skill"?"approval_required":e.backend===void 0&&n.includes(e.actionId)?"allowed":"denied"}function cp(e){return;}var mr=j(()=>{m();We();st();ct();});function gp(e){return Rn.has(e)&&(e.initialState===void 0||Rn.has(e.initialState))}function br(e,n,t,i){let o=i===void 0?void 0:Object.freeze({hash:i.hash,bytes:Object.freeze(i.bytes)}),r=Object.freeze({mimeType:Ar,entryHash:e,html:n,bytes:Object.freeze(t),...o===void 0?{}:{initialState:o}});return o!==void 0&&Rn.add(o),Rn.add(r),r}function mp(e){let n=[];return e?.terminal===true&&n.push({name:"crewx_app_terminal_connect",description:"Open a local-only terminal session for this App.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"A local terminal connection is ready for this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe}),e?.htmlDocuments===true&&n.push({name:"crewx_app_html_viewer_open",description:"List workspace HTML documents or open one through a short-lived Host capability.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"},operation:{type:"string",enum:["list","open"]},documentId:{type:"string"}},required:["threadId","instanceId","operation"],additionalProperties:false},textFallback:"Workspace HTML documents are available through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe}),e?.appBrowser===true&&n.push({name:"crewx_app_browser",description:"Grant this App a native Desktop browser window. Browser commands use the custom Host RPC, not this tool.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"Desktop browser access is granted to this App. Browser commands use the custom Host RPC ui/crewx-app-browser.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe}),n}function hp(e){let n=[];return e?.appFiles===true&&n.push({name:"crewx_files_list",description:"List the .md files of this App on the phone, sorted by ref, at most 200 per page. Pass `next` as `after` for the next page.",inputSchema:{type:"object",properties:{prefix:{type:"string",description:'A folder such as "workouts/". Omit for every file.'},after:{type:"string",description:"Return only refs after this one (the `next` of the previous page)."}},additionalProperties:false},textFallback:"The markdown files of this App are listed through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe},{name:"crewx_files_read",description:"Read one .md file: its text and its version (sha256 of the UTF-8 bytes).",inputSchema:{type:"object",properties:{ref:{...mi}},required:["ref"],additionalProperties:false},textFallback:"A markdown file of this App is read through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe},{name:"crewx_files_write",description:"Write one .md file (at most 256 KiB). expectedVersion null creates it and fails if it exists; a version string replaces it only if the file still has that version.",inputSchema:{type:"object",properties:{ref:{...mi},text:{type:"string",maxLength:256*1024},expectedVersion:{type:["string","null"],description:"null = create only, or the version the file had when you read it."}},required:["ref","text","expectedVersion"],additionalProperties:false},textFallback:"A markdown file of this App is written through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe}),e?.resultShare===true&&n.push({name:"crewx_docs_share",description:"Open the Host share sheet for one markdown file of this App; resolves when the sheet closes.",inputSchema:{type:"object",properties:{ref:{...mi}},required:["ref"],additionalProperties:false},textFallback:"The Host share sheet opens for a markdown file of this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:fe}),n}function $e(e,n,t){return (typeof e!="string"||!Er.test(e))&&S(n,`${t} must be a safe identifier`),e}function On(e,n,t){let i=e??t;return (typeof i!="string"||i.trim().length===0||i.length>lp)&&S("TOOL_INVALID",`${n} must be a meaningful description`),i}function _i(e){return (typeof e!="string"||e.length===0||e.length>un||!/<html(?:\s|>)/i.test(e)||!/<\/html\s*>/i.test(e))&&S("HTML_INVALID","MCP App HTML must be a non-empty HTML document"),e}function Ln(e,n=0){try{let t=Ie(e,n);return t.type!==void 0&&t.type!=="object"&&S("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Oe)throw t;S("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function _p(e){return (typeof e!="string"||e.trim().length===0||e.length>up)&&S("TOOL_INVALID","MCP App tools require a meaningful text fallback"),e}function Ep(e){e===void 0&&S("TOOL_INVALID","MCP App tool visibility is required");let n=[...e];return (n.length===0||n.some(t=>t!=="model"&&t!=="app")||new Set(n).size!==n.length)&&S("TOOL_INVALID","MCP App tool visibility must contain model and/or app once"),n}function Nr(e){return (typeof e!="string"||!Tr.test(e))&&S("RESOURCE_URI_INVALID","MCP App resource URI is not a registered ui:// URI"),e}function Dr(e){let n=$e(e.appId,"APP_ID_INVALID","Local App id"),t=On(e.name,"Local App name",n),i=On(e.description,"Local App description",`${t} interactive view`),o=ut(e.definition),r=_i(e.html),s=dt(e.entryHash,"Local App entry hash"),a=e.entryBytes===void 0?Array.from(new TextEncoder().encode(r)):lt(e.entryBytes,"Local App entry bytes");(pt(a)!==s||Or(a)!==r)&&S("HTML_INVALID","Local App entry bytes do not match the HTML hash");let c=Tp(e),d=[];Array.isArray(e.actions)||S("TOOL_INVALID","Local App actions must be an array");for(let P of e.actions){let C=$e(P.actionId,"TOOL_ID_INVALID","Local App action id");(d.includes(C)||!Object.prototype.hasOwnProperty.call(o.actions,C))&&S("TOOL_INVALID",`Local App action is not declared by the UI definition: ${C}`),d.push(C);}let l=$e(e.readToolName,"TOOL_ID_INVALID","Local App read tool name"),p=e.actionToolName===void 0?void 0:$e(e.actionToolName,"TOOL_ID_INVALID","Local App action tool name");d.length===0&&p!==void 0&&S("TOOL_INVALID","A static local App cannot register an action tool"),d.length>0&&p===void 0&&S("TOOL_INVALID","A stateful local App requires an action tool name"),p!==void 0&&p===l&&S("TOOL_ID_CONFLICT",`Local App read and action tools share a name: ${l}`);let u=[...mp(e.runtime),...hp(e.hostTools)];u.some(P=>P.name===l||P.name===p)&&S("TOOL_ID_CONFLICT","Local App read or action tool conflicts with a requested Host capability");let y={name:l,description:`${t} current state`,inputSchema:Ip,textFallback:`${t} current state is available through its open instance.`,visibility:Object.freeze(["model","app"]),kind:"read",resourceBinding:fe},g=[Object.freeze(y)];if(g.push(...u.map(P=>Object.freeze(P))),p!==void 0){let P={name:p,description:`${t} actions`,inputSchema:Ei(e.actions),textFallback:`${t} action requests are handled by the open App instance.`,visibility:Object.freeze(["app"]),kind:"action",resourceBinding:fe,actionIds:Object.freeze([...d])};g.push(Object.freeze(P));}let _=[],E=new Set(g.map(P=>P.name));if(p!==void 0)for(let P of e.actions){let C=`${p}__${P.actionId}`;if(C.length>128||!Er.test(C)){_.push(Object.freeze({toolName:C,actionId:P.actionId,reason:"name_too_long"}));continue}if(E.has(C)){_.push(Object.freeze({toolName:C,actionId:P.actionId,reason:"name_collision"}));continue}let H=gr({actionId:P.actionId,confirmation:o.actions[P.actionId]?.confirmation,content:o.actions[P.actionId]?.content,backend:P.backend},e.modelActions),N=Object.freeze([...Sp(H,o.usage,P.backend)]),D={name:C,description:`${C} action`,inputSchema:Ln(P.inputSchema),textFallback:`${C} action requests are handled by the open App instance.`,visibility:N,kind:"action",resourceBinding:fe,actionId:P.actionId,actionIds:Object.freeze([P.actionId]),_meta:Object.freeze({ui:Object.freeze({visibility:N})})};g.push(Object.freeze(D)),E.add(C);}let U=br(s,r,a,c===void 0?void 0:{hash:c.hash,bytes:[...c.bytes]}),x={appId:n,name:t,description:i,...e.icon===void 0?{}:{icon:Lr(e.icon)},...e.tone===void 0?{}:{tone:Rr(e.tone)},builtinOnly:false,definition:o,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},resourceBinding:fe,resource:U,tools:Object.freeze(g),toolDiagnostics:Object.freeze(_)};return ne(x)}function Sr(e={}){return new hi(e)}function Ei(e){if(e.length===0)return Ln({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Ln(i.inputSchema));return Ln(bp(n,t),Pr)}function Tp(e){let n=e.definition.dataPaths??[];if(e.initialStateBytes===void 0){e.initialStateHash!==void 0&&S("STATE_INVALID","Initial state hash has no bytes"),e.initialState!==void 0&&Ie(e.initialState,0,n);return}e.initialStateHash===void 0&&S("STATE_INVALID","Initial state bytes require a hash");let t=dt(e.initialStateHash,"Initial state hash"),i=lt(e.initialStateBytes,"Initial state bytes");pt(i)!==t&&S("STATE_INVALID","Initial state bytes do not match the hash");let o;try{let r=new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(i));o=Ie(JSON.parse(r),0,n);}catch{S("STATE_INVALID","Initial state bytes are not projection-safe JSON");}return e.initialState!==void 0&&ie(o)!==ie(Ie(e.initialState,0,n))&&S("STATE_INVALID","Initial state bytes do not match the state value"),{hash:t,bytes:Object.freeze([...i])}}function bp(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}function Pp(e){let n=wn(e),t=$e(n.appId,"APP_ID_INVALID","MCP App id"),i=_i(n.html);Nr(n.uiUri);let o=n.definition===void 0?void 0:ut(n.definition),r=e.provenance;r!==void 0&&(!ln(r)||r.appId!==t||r.definitionId!==o?.id||r.version!==o?.version||r.definitionHash!==o?.hash)&&S("TOOL_INVALID","Product App built-in registration provenance is not verified");let s=Object.freeze(n.tools.map(d=>ne(wn(d)))),a=ne({...n,appId:t,html:i,...o===void 0?{}:{definition:o},...r===void 0?{}:{provenance:r},tools:s}),c=ne({uri:a.uiUri,mimeType:ur,text:i,...a.csp===void 0?{}:{_meta:{ui:{csp:a.csp}}}});return ne({appId:t,name:a.name,description:a.description,...a.icon===void 0?{}:{icon:a.icon},...a.tone===void 0?{}:{tone:a.tone},builtinOnly:a.builtinOnly,uiUri:a.uiUri,...o===void 0?{}:{definition:o},resourceBinding:Object.freeze({kind:"mcp",uri:a.uiUri}),resource:c,tools:s,descriptor:a})}function Np(e){(e.resourceBinding.kind!=="instance"||e.builtinOnly!==false)&&S("STATE_INVALID","Local App registration binding is invalid"),Object.prototype.hasOwnProperty.call(e,"uiUri")&&S("STATE_INVALID","Local App registration cannot contain uiUri");let n=$e(e.appId,"APP_ID_INVALID","Local App id"),t=ut(e.definition),i=e.provenance;i!==void 0&&(!ln(i)||i.appId!==n||i.definitionId!==t.id||i.version!==t.version||i.definitionHash!==t.hash)&&S("TOOL_INVALID","Product App local registration provenance is not verified");let o=Dp(e.resource),r=e.tools.map(a=>{$e(a.name,"TOOL_ID_INVALID","Local App tool name"),On(a.description,"Local App tool description","Local App tool"),_p(a.textFallback);let c=Ln(a.inputSchema,a.kind==="action"&&!("actionId"in a)?Pr:0);if((a.resourceBinding.kind!=="instance"||Object.prototype.hasOwnProperty.call(a,"resourceUri"))&&S("TOOL_INVALID","Local App tools cannot carry an MCP resource URI"),a.kind==="host")return (!Ap.has(a.name)||a.visibility.length!==1||a.visibility[0]!=="app"||Object.prototype.hasOwnProperty.call(a,"actionId"))&&S("TOOL_INVALID","Local App Host tools must use an allow-listed name and app-only visibility"),ne({...a,inputSchema:c,visibility:Object.freeze(["app"])});if(a.kind==="action"){if("actionId"in a){let l=$e(a.actionId,"TOOL_ID_INVALID","Local App action id");Object.prototype.hasOwnProperty.call(t.actions,l)||S("TOOL_INVALID","Local App action tool references an undeclared action");let p=Ep(a._meta.ui.visibility);return JSON.stringify(p)!==JSON.stringify(a.visibility)&&S("TOOL_INVALID","Local App action metadata visibility must match the tool visibility"),ne({...a,actionId:l,actionIds:Object.freeze([l]),inputSchema:c,visibility:p,_meta:{ui:{visibility:p}}})}let d=[...a.actionIds];return (d.length===0||d.some(l=>!Object.prototype.hasOwnProperty.call(t.actions,l)))&&S("TOOL_INVALID","Local App action tool references an undeclared action"),ne({...a,inputSchema:c,actionIds:Object.freeze(d)})}return ne({...a,inputSchema:c})}),s=ne({appId:n,name:On(e.name,"Local App name",e.appId),description:On(e.description,"Local App description",e.name),...e.icon===void 0?{}:{icon:Lr(e.icon)},...e.tone===void 0?{}:{tone:Rr(e.tone)},builtinOnly:false,definition:t,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},...i===void 0?{}:{provenance:i},resourceBinding:fe,resource:o,tools:Object.freeze(r),toolDiagnostics:Object.freeze([...e.toolDiagnostics??[]])});return hr.has(e)?e:(hr.add(s),s)}function Dp(e){let n=_i(e.html),t=dt(e.entryHash,"Local App entry hash");if(gp(e))return e;let i=lt(e.bytes,"Local App entry bytes");(pt(i)!==t||Or(i)!==n)&&S("HTML_INVALID","Local App entry bytes do not match the HTML hash");let o=e.initialState===void 0?void 0:{hash:dt(e.initialState.hash,"Initial state hash"),bytes:lt(e.initialState.bytes,"Initial state bytes")};return o&&pt(o.bytes)!==o.hash&&S("STATE_INVALID","Initial state bytes do not match the hash"),br(t,n,i,o)}function Sp(e,n,t){if(at(n,t))return ["model"];let i=t?.type==="core"&&Mn(t.handler);return e==="denied"||i?["app"]:["model","app"]}function Mp(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:false,definition:Mr(e.definition),...e.provenance===void 0?{}:{provenance:e.provenance},entryHash:e.resource.entryHash,resourceBinding:fe,tools:e.tools})}function Op(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:e.builtinOnly,uiUri:e.uiUri,...e.definition===void 0?{}:{definition:Mr(e.definition)},resourceBinding:Object.freeze({kind:"mcp",uri:e.uiUri}),tools:e.tools})}function ut(e){try{if(Object.isFrozen(e))return ge(e),ne(e);let n=wn(e);return ge(n),ne(n)}catch(n){if(n instanceof Oe)throw n;S("STATE_INVALID","UI definition is not a valid immutable definition");}}function Mr(e){return ne({id:e.id,version:e.version,hash:e.hash})}function Lp(e){return e!==null&&typeof e=="object"&&typeof e.id=="string"&&Number.isSafeInteger(e.version)&&typeof e.hash=="string"}function _r(e,n,t){return `${e}\0${n}\0${t}`}function dt(e,n){return (typeof e!="string"||!pp.test(e))&&S("SERIALIZATION_INVALID",`${n} is invalid`),e}function pt(e){return createHash("sha256").update(Uint8Array.from(e)).digest("hex")}function lt(e,n){return (!Array.isArray(e)||e.some(t=>!Number.isInteger(t)||t<0||t>255))&&S("SERIALIZATION_INVALID",`${n} is invalid`),[...e]}function Or(e){try{return new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(e))}catch{S("SERIALIZATION_INVALID","UTF-8 bytes are invalid");}}function Lr(e){return (typeof e!="string"||!fp.test(e))&&S("TOOL_INVALID","MCP App icon is invalid"),e}function Rr(e){return (typeof e!="string"||!yp.has(e))&&S("TOOL_INVALID","MCP App tone is invalid"),e}function wn(e,n=new Map){if(e===null||typeof e!="object")return e;let t=e;if(n.has(t)&&S("SERIALIZATION_INVALID","MCP App value contains a cycle"),Array.isArray(e)){let r=[];n.set(t,r);for(let s of e)r.push(wn(s,n));return n.delete(t),r}let i;try{i=Object.getPrototypeOf(e);}catch{S("SERIALIZATION_INVALID","MCP App value cannot be cloned");}i!==Object.prototype&&i!==null&&S("SERIALIZATION_INVALID","MCP App value must be plain JSON");let o={};n.set(t,o);for(let[r,s]of Object.entries(e))Object.defineProperty(o,r,{configurable:true,enumerable:true,value:wn(s,n),writable:true});return n.delete(t),o}function ne(e,n=new Set){if(e===null||typeof e!="object"||n.has(e)||Rn.has(e))return e;n.add(e);for(let t of Object.values(e))ne(t,n);return Object.freeze(e),e}var Er,Tr,pp,un,lp,up,fp,yp,Ap,fe,Ip,Rn,hr,mi,Pr,hi,ft=j(()=>{m();rr();We();we();st();rt();gi();Ir();mr();ct();Er=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Tr=/^ui:\/\/crewx\/([A-Za-z][A-Za-z0-9._-]{0,127})\/([0-9a-f]{12})$/,pp=/^[0-9a-f]{64}$/,un=8*1024*1024,lp=8*1024,up=16*1024,fp=/^[a-z][a-z0-9-]{0,63}$/,yp=new Set(["blue","violet","emerald","amber","rose","sky","slate","indigo"]),Ap=new Set(fr),new Set(yr),fe=Object.freeze({kind:"instance"}),Ip=Object.freeze({type:"object",properties:Object.freeze({}),additionalProperties:false}),Rn=new WeakSet,hr=new WeakSet;mi={type:"string",description:'Relative path in NFC, 1 to 3 segments joined by "/", each [\\p{L}\\p{N}][\\p{L}\\p{N}\\p{M}_-]{0,99}, the last ending in ".md". At most 200 code points.'};Pr=4;hi=class{builtinApps;localApps;builtinDescriptors;builtinTools;mcpResources=new Map;localById=new Map;registrationById=new Map;launcherById=new Map;definitionByKey=new Map;handlerByKey=new Map;mcpToolByName=new Map;localToolByName=new Map;constructor(n){let t=n.builtins??n.builtin,i=[],o=[],r=[],s=new Set,a=new Set;for(let p of t?.listMcpApps()??[]){let u=Pp(p);s.has(u.appId)&&S("APP_ID_CONFLICT",`MCP App id is already registered: ${u.appId}`),s.add(u.appId);let y=u.tools;for(let g of y)a.has(g.name)&&S("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${g.name}`),a.add(g.name),this.mcpToolByName.set(g.name,g),r.push(g);this.mcpResources.set(u.resource.uri,u.resource),i.push(u),o.push(u.descriptor);}let c=(n.localApps??n.locals??[]).map(Np),d=new Set(c.flatMap(p=>p.tools.filter(u=>!(u.kind==="action"&&"actionId"in u)).map(u=>u.name))),l=[];for(let p of c){let u=p;s.has(u.appId)&&S("APP_ID_CONFLICT",`MCP App id is already registered: ${u.appId}`),s.add(u.appId);let y=[],g=[...u.toolDiagnostics??[]];for(let _ of u.tools){if(a.has(_.name)){if(_.kind==="host"&&this.localToolByName.get(_.name)?.kind==="host"){y.push(_);continue}if(_.kind==="action"&&"actionId"in _){g.push(Object.freeze({toolName:_.name,actionId:_.actionId,reason:"name_collision"}));continue}S("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${_.name}`);}if(_.kind==="action"&&"actionId"in _&&d.has(_.name)){g.push(Object.freeze({toolName:_.name,actionId:_.actionId,reason:"name_collision"}));continue}a.add(_.name),this.localToolByName.set(_.name,_),y.push(_);}(y.length!==u.tools.length||g.length!==(u.toolDiagnostics?.length??0))&&(u=ne({...u,tools:Object.freeze(y),toolDiagnostics:Object.freeze(g)})),l.push(u),this.localById.set(u.appId,u);}for(let p of i)this.registrationById.set(p.appId,p),this.launcherById.set(p.appId,Op(p)),p.definition&&this.addDefinition(p.definition);for(let p of l)this.registrationById.set(p.appId,p),this.launcherById.set(p.appId,Mp(p)),this.addDefinition(p.definition);for(let p of n.definitions??[])this.addDefinition(p);for(let p of n.handlers??[])this.addHandler(p);this.builtinApps=Object.freeze(i),this.localApps=Object.freeze(l),this.builtinDescriptors=Object.freeze(o),this.builtinTools=Object.freeze(r);}getMcpApp(n){return this.builtinApps.find(t=>t.appId===n)?.descriptor??null}listMcpApps(){return this.builtinDescriptors}listMcpAppTools(){return this.builtinTools}resolveMcpAppTool(n){return this.mcpToolByName.get(n)??null}resolveMcpAppResource(n){return typeof n!="string"||!Tr.test(n)?null:this.mcpResources.get(n)??null}requireMcpAppResource(n){Nr(n);let t=this.mcpResources.get(n);return t||S("RESOURCE_NOT_FOUND",`MCP App resource is not registered: ${n}`),t}listLocalMcpApps(){return this.localApps}getLocalMcpApp(n){return this.localById.get(n)??null}listLocalMcpAppTools(){return Object.freeze([...this.localToolByName.values()])}resolveLocalMcpAppTool(n){return this.localToolByName.get(n)??null}resolveLocalMcpAppResource(n,t){let i=this.localById.get(n);return !i||t!==void 0&&i.definition.hash!==t?null:i.resource}listRegistrations(){return Object.freeze([...this.builtinApps,...this.localApps])}getRegistration(n){return this.registrationById.get(n)??null}listLaunchers(){return Object.freeze([...this.launcherById.values()].filter(n=>{let t=this.registrationById.get(n.appId),i=t?"descriptor"in t?t.descriptor.provenance:t.provenance:void 0,o=ln(i)&&i.launcher===false;return t?.definition?.usage!=="card"&&!o}))}listCardApps(){return Object.freeze([...this.launcherById.values()].filter(n=>this.registrationById.get(n.appId)?.definition?.usage==="card"))}getLauncher(n){return this.launcherById.get(n)??null}resolveDefinition(n){if(!Lp(n))return null;let t=this.definitionByKey.get(Gt(n));if(!t||t.hash!==n.hash)return null;try{return ue(t)===t.hash?t:null}catch{return null}}resolveActionHandler(n,t,i){return typeof n!="string"||typeof i!="string"||!Number.isSafeInteger(t)?null:this.handlerByKey.get(_r(n,t,i))??null}addDefinition(n){let t=ut(n),i=Gt(t),o=this.definitionByKey.get(i);o&&o.hash!==t.hash&&S("STATE_INVALID",`UI definition generation conflicts: ${i}`),o||this.definitionByKey.set(i,t);}addHandler(n){(!n||typeof n.definitionId!="string"||typeof n.actionId!="string"||!Number.isSafeInteger(n.version)||n.version<1||typeof n.handle!="function")&&S("STATE_INVALID","UI action handler registration is invalid");let t=_r(n.definitionId,n.version,n.actionId);this.handlerByKey.has(t)&&S("TOOL_INVALID",`Duplicate UI action handler registration: ${t}`),this.handlerByKey.set(t,Object.freeze({...n}));}};});function Rp(e,n){let t=Dr({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},...e.normalized.manifest.runtime===void 0?{}:{runtime:e.normalized.manifest.runtime},...e.normalized.manifest.deviceFeatures===void 0?{}:{deviceFeatures:e.normalized.manifest.deviceFeatures},...e.normalized.manifest.downloads===void 0?{}:{downloads:e.normalized.manifest.downloads},...e.normalized.manifest.share===void 0?{}:{share:e.normalized.manifest.share},...e.normalized.manifest.files===void 0?{}:{files:e.normalized.manifest.files},definition:e.definition,html:e.html,entryHash:e.entryHash,entryBytes:e.entryBytes,initialState:e.initialState,...e.initialStateHash===void 0?{}:{initialStateHash:e.initialStateHash},...e.initialStateBytes===void 0?{}:{initialStateBytes:e.initialStateBytes},readToolName:e.toolNames.read,...e.toolNames.action===void 0?{}:{actionToolName:e.toolNames.action},actions:e.normalized.manifest.actions.map(o=>({actionId:o.actionId,inputSchema:o.inputSchema,backend:o.backend})),...{}});return e.provenance===void 0?t:Object.freeze({...t,provenance:e.provenance})}function wr(e){let n=e.normalized.manifest.actions;if(n.some(i=>i.backend.type==="skill")&&n.some(i=>i.backend.type==="core"))throw new Error("Mixed workspace App execution models");let t=Rp(e);Sr({localApps:[t],definitions:[e.definition]});}var Cr=j(()=>{m();ft();});function wp(e){if(e===null||typeof e!="object"||!(kr in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[kr]}function Ur(e,n){let t=wp(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.preparedCandidates.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0,t.lastSnapshotCandidates=void 0,t.lastSnapshotCatalogFingerprint=void 0),t.rootIdentity=n,t}var kr,xr=j(()=>{m();kr=Symbol("crewx.workspace-app-scan-cache.state");});function ye(e){let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new M("NOT_FOUND"):n==="ELOOP"?new M("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new M("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new M("READ_DENIED"):new M("READ_DENIED")}function xp(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new M("READ_DENIED")}function Ti(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new M("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new M("PATH_ESCAPED");return n}function gt(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function yn(e){return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Di(e,n){return e.dev===n.dev&&e.ino===n.ino}function Si(e,n){return Di(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}async function yt(e){xp(e);let n,t;try{n=await realpath(e),t=await stat(n,{bigint:!0});}catch(i){throw ye(i)}if(!t.isDirectory())throw new M("READ_DENIED");return {realRoot:n,identity:yn(t)}}async function jr(e,n,t){if(t.length<2||t[0]!=="apps"&&t[0]!=="skills")return;let i,o;try{if(i=resolve(e,t[0],t[1]),o=await realpath(i),!(await stat(o,{bigint:!0})).isDirectory())throw new M("READ_DENIED")}catch(r){throw r instanceof M?r:ye(r)}if(!gt(n,o))throw new M("PATH_ESCAPED");return o}async function At(e,n,t,i){let o,r,s;try{o=await lstat(e,{bigint:!0}),r=await realpath(e),s=await stat(r,{bigint:!0});}catch(a){throw ye(a)}if(!gt(n,r)||t!==void 0&&!gt(t,r))throw new M("PATH_ESCAPED");if(!o.isFile()||!s.isFile())throw new M("READ_DENIED");if(!Di(i,o)||!Di(i,s)||i.dev!==s.dev)throw new M("PATH_ESCAPED")}async function fn(e,n){let t,i;try{t=await realpath(e),i=await stat(t,{bigint:!0});}catch{throw new M("PATH_ESCAPED")}if(t!==n.realRoot||!Si(n.identity,yn(i)))throw new M("PATH_ESCAPED")}function vp(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var M,Ni,Up,Fr,mt,Vr,Oi=j(()=>{m();M=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"},Ni=constants.O_NOFOLLOW,Up=constants.O_NONBLOCK,Fr=constants.O_RDONLY|(Ni??0)|(Up??0);mt=class{async getRootIdentity(n){let t=await yt(n);return await fn(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=Ti(t),o=await yt(n),r=resolve(n,...i),s,a;try{s=await realpath(r),a=await stat(s,{bigint:!0});}catch(c){let d=ye(c);if(d.code==="NOT_FOUND")return [];throw d}if(!gt(o.realRoot,s)||!a.isDirectory())throw new M("PATH_ESCAPED");try{let c=await readdir(s,{withFileTypes:!0,encoding:"utf8"});return await fn(n,o),c.map(vp)}catch(c){let d=ye(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new M("READ_DENIED");if(Ni===void 0)throw new M("UNSUPPORTED");let o=Ti(t),r=await yt(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new M("PATH_ESCAPED");let c;try{c=await open(s,Fr);}catch(d){throw ye(d)}try{let d;try{let g=await c.stat({bigint:!0});d=yn(g);}catch(g){throw ye(g)}if(d.size>BigInt(i))throw new M("LIMIT_EXCEEDED");if(d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new M("LIMIT_EXCEEDED");await fn(n,r);let l=await jr(n,r.realRoot,o);await At(s,r.realRoot,l,d);let p=new Uint8Array(new ArrayBuffer(Number(d.size))),u=0;for(;u<p.byteLength;){let g;try{g=(await c.read(p,u,p.byteLength-u,u)).bytesRead;}catch(_){throw ye(_)}if(g<=0)throw new M("IDENTITY_CHANGED");u+=g;}let y;try{let g=await c.stat({bigint:!0});y=yn(g);}catch(g){throw ye(g)}if(!Si(d,y))throw new M("IDENTITY_CHANGED");return await At(s,r.realRoot,l,y),await fn(n,r),new Uint8Array(p)}finally{await c.close().catch(()=>{});}}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new M("READ_DENIED");if(Ni===void 0)throw new M("UNSUPPORTED");let o=Ti(t),r=await yt(n),s=resolve(n,...o),a=relative(n,s);if(a===".."||a.startsWith(`..${sep}`)||isAbsolute(a))throw new M("PATH_ESCAPED");let c;try{c=await open(s,Fr);}catch(d){throw ye(d)}try{let d;try{let u=await c.stat({bigint:!0});d=yn(u);}catch(u){throw ye(u)}if(d.size>BigInt(i)||d.size>BigInt(Number.MAX_SAFE_INTEGER))throw new M("LIMIT_EXCEEDED");await fn(n,r);let l=await jr(n,r.realRoot,o);await At(s,r.realRoot,l,d);let p;try{let u=await c.stat({bigint:!0});p=yn(u);}catch(u){throw ye(u)}if(!Si(d,p))throw new M("IDENTITY_CHANGED");return await At(s,r.realRoot,l,p),await fn(n,r),{...p,candidateRealPath:l??r.realRoot}}catch(d){throw d instanceof M?d:ye(d)}finally{await c.close().catch(()=>{});}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},Vr=new mt;});function xn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Hr(e){return typeof e=="string"&&Ne.test(e)?e:void 0}function $p(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function qe(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function Gp(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Jp(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Wp(e){return Hp.decode(e)}function Kp(e){return JSON.parse(Wp(e))}function zr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function Xp(e){if(e instanceof M)return zr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return zr(n)}}function Ue(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Yp(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function qp(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function $r(e,n,t,i){let o=Yp(e);if(!o)throw new M("READ_DENIED");return Jp(await o.call(e,n,t,i))}async function wi(e,n,t){let i=qp(e);if(!i)throw new M("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new M("READ_DENIED");return o.map(Gp).filter(r=>r!==null)}function Zp(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Qp(e){if(!xn(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let s=0;s<i.length;s+=1){let a=i[s];if(typeof a!="string"||a.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(a);}return Object.freeze([...new Set(r)].sort(qe))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function el(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function _t(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(qe)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(qe))})}function ht(e,n){let t=Object.keys(e).sort(qe),i=[...n].sort(qe);return t.length===i.length&&t.every((o,r)=>o===i[r])}function Gr(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function nl(e){let n;try{n=Kp(e);}catch{return}if(!xn(n)||!ht(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>Ci)return;let t=new Set,i=new Set,o=0,r=[];for(let s of n.packages){if(!xn(s))return;let a=["packageDir","appId","definition","files"],c=Object.hasOwn(s,"lineage"),d=Object.hasOwn(s,"launcher"),l=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!ht(s,[...a,...l])||d&&s.launcher!==false)return;let p=Gr(s.packageDir),u=Hr(s.appId);if(!p||p.length!==2||p[0]!=="apps"||!$p(p[1])||!u||t.has(s.packageDir)||!xn(s.definition)||!ht(s.definition,["id","version","hash"]))return;let y=Hr(s.definition.id),g=s.definition.version,_=s.definition.hash;if(!y||!Number.isSafeInteger(g)||g<1||typeof _!="string"||!Ri.test(_)||!Array.isArray(s.files)||s.files.length<2||s.files.length>ki)return;let E=new Set,U=[];for(let x of s.files){if(!xn(x)||!ht(x,["path","sha256"]))return;let P=Gr(x.path);if(!P||typeof x.sha256!="string"||!Ri.test(x.sha256))return;let C=P.join("/"),H=`${s.packageDir}/${C}`;if(E.has(C)||i.has(H))return;E.add(C),i.add(H),U.push(Object.freeze({path:C,sha256:x.sha256}));}if(!ee.some(x=>E.has(x))||!E.has("ui/index.html")||(o+=U.length,o>jp))return;t.add(s.packageDir),r.push(Object.freeze({packageDir:s.packageDir,...d?{launcher:false}:{},appId:u,definition:Object.freeze({id:y,version:g,hash:_}),lineage:Array.isArray(s.lineage)?s.lineage:[],files:Object.freeze(U.sort((x,P)=>qe(x.path,P.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function Ye(e){let n=Xp(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function tl(e,n,t,i,o){let r=[],s=async(a,c)=>{if(!Ue(i,o))throw new M("LIMIT_EXCEEDED");if(c>2)throw new M("LIMIT_EXCEEDED");let d=await wi(e,n,a);for(let l of d){if(typeof l.name!="string"||l.name.length===0||l.name==="."||l.name===".."||/[\\/\u0000]/.test(l.name))throw new M("PATH_ESCAPED");let p=`${a}/${l.name}`;if(l.kind==="file"){if(r.push(p.slice(t.length+1)),r.length>ki)throw new M("LIMIT_EXCEEDED")}else if(l.kind==="directory")await s(p,c+1);else throw l.kind==="symlink"?new M("PATH_ESCAPED"):new M("READ_DENIED")}};return await s(t,0),r.sort(qe)}function il(e){return ee.includes(e)?262144:e==="ui/index.html"?un:e==="ui/state.json"?2097152:e.startsWith("ui/assets/")?Bp:Vp}async function Jr(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:zp};let o=Qp(e.reservedIds),r=[],s=(I,A,h)=>Zp(I,"bundled",A),a=(I=[],A=false,h)=>({...h===void 0?{}:{indexHash:h},packages:I,diagnostics:r,incomplete:A,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!Ri.test(e.expectedIndexHash))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let c;try{c=await $r(n,e.root,"bundle-index.json",Fp);}catch(I){return r.push(s(Ye(I),"bundle-index.json")),a()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();let l=nl(c);if(l===void 0)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a();if(!el(_t(l.packages),o))return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a([],false,d);if(!Ue(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(I=>({indexEntry:I,failureCode:"LIMIT_EXCEEDED"})),true,d);let p;try{p=await wi(n,e.root,"");}catch(I){return r.push(s(Ye(I),"bundle-index.json")),a(l.packages.map(A=>({indexEntry:A,failureCode:Ye(I)})),false,d)}if(!Ue(t,i))return r.push(s("LIMIT_EXCEEDED","bundle-index.json")),a(l.packages.map(I=>({indexEntry:I,failureCode:"LIMIT_EXCEEDED"})),true,d);let u=p.find(I=>I.name==="bundle-index.json"&&I.kind==="file"),y=p.find(I=>I.name==="apps"&&I.kind==="directory"),g=I=>l.packages.map(A=>({indexEntry:A,failureCode:I}));if(!u)return r.push(s("BUNDLE_INTEGRITY","bundle-index.json")),a(g("BUNDLE_INTEGRITY"),false,d);let _=p.filter(I=>I.name!=="bundle-index.json"&&I.name!=="apps");if(_.length>0){let I=_.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(s(I,"bundle-index.json")),a(g("BUNDLE_INTEGRITY"),false,d)}if(p.some(I=>I.name==="apps"&&I.kind!=="directory"))return r.push(s("PATH_ESCAPED","apps")),a(g("PATH_ESCAPED"),false,d);let E=[];if(y)try{E=await wi(n,e.root,"apps");}catch(I){return r.push(s(Ye(I),"apps")),a(g(Ye(I)),false,d)}if(!Ue(t,i)||E.length>Ci)return r.push(s("LIMIT_EXCEEDED","apps")),a(g("LIMIT_EXCEEDED"),true,d);let U=new Map(l.packages.map(I=>[I.packageDir.slice(5),I])),x=E.filter(I=>!U.has(I.name));for(let I of x)r.push(s(I.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${I.name}`));if(x.length>0){let I=x.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return a(g(I),false,d)}let P=new Set,C=new Map,H=new Map;for(let I of l.packages){let A=C.get(I.appId)??[];A.push(I),C.set(I.appId,A);let h=`${I.definition.id}\0${String(I.definition.version)}`,T=H.get(h)??[];T.push(I),H.set(h,T);}for(let I of [...C.values(),...H.values()])if(I.length>1)for(let A of I)P.add(A);let N=[],D=c.byteLength,O=false;for(let I of l.packages){if(!Ue(t,i)){O=true,N.push({indexEntry:I,failureCode:"LIMIT_EXCEEDED"});continue}let A;try{let B=I.lineage[I.lineage.length-1];if(!B)throw new Le("LINEAGE_INVALID","Definition lineage is missing");if(B.definition.id!==I.definition.id||B.version!==I.definition.version||B.hash!==I.definition.hash)throw new Le("LINEAGE_STALE","Last lineage generation does not match bundle identity");A=Ii(I.lineage,{...B.definition,hash:B.hash}).entries;}catch(B){let v=B instanceof Le?B.code:"LINEAGE_INVALID";r.push(s(v,I.packageDir)),N.push({indexEntry:I,failureCode:v});continue}let h=E.find(B=>B.name===I.packageDir.slice(5));if(!y||!h){N.push({indexEntry:I,failureCode:"BUNDLE_INTEGRITY"});continue}if(h.kind!=="directory"){N.push({indexEntry:I,failureCode:h.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let T;try{let B=await tl(n,e.root,I.packageDir,t,i);if(!Ue(t,i)){O=!0,N.push({indexEntry:I,failureCode:"LIMIT_EXCEEDED"});continue}let v=I.files.map(F=>F.path);if(B.length!==v.length||B.some((F,le)=>F!==v[le])){N.push({indexEntry:I,failureCode:"BUNDLE_INTEGRITY"});continue}T=new Map;let Y;for(let F of I.files){if(!Ue(t,i)){Y="LIMIT_EXCEEDED",O=!0;break}if(D>=Li){Y="LIMIT_EXCEEDED";break}let le;try{le=await $r(n,e.root,`${I.packageDir}/${F.path}`,il(F.path));}catch(Pe){Y=Ye(Pe);break}if(!Ue(t,i)){Y="LIMIT_EXCEEDED",O=!0;break}if(D+le.byteLength>Li){D=Li,Y="LIMIT_EXCEEDED";break}if(D+=le.byteLength,createHash("sha256").update(le).digest("hex")!==F.sha256){Y="BUNDLE_INTEGRITY";break}T.set(F.path,le);}if(Y!==void 0){N.push({indexEntry:I,failureCode:Y});continue}}catch(B){Ue(t,i)||(O=true),N.push({indexEntry:I,failureCode:Ye(B)});continue}N.push({indexEntry:I,lineage:A,files:T,...P.has(I)?{failureCode:"DUPLICATE_ID"}:{}});}return a(N,O,d)}var Fp,Ci,ki,jp,Vp,Bp,Li,Ri,Hp,zp,Ui=j(()=>{m();gi();Je();it();ft();Oi();Fp=256*1024,Ci=64,ki=128,jp=Ci*ki,Vp=2*1024*1024,Bp=8*1024*1024,Li=32*1024*1024,Ri=/^[0-9a-f]{64}$/,Hp=new TextDecoder("utf-8",{fatal:true}),zp=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function rl(e){if(typeof e!="string"||!Ne.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${xi}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${xi}${n}_read`,action:`${xi}${n}_action`}}function Kr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function al(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function cl(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function Fn(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function rs(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function dl(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function ss(e){return sl.decode(e)}function pl(e){return JSON.parse(ss(e))}function ll(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function Et(e,n,t,i,o){let r={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...o?.reason===void 0?{}:{reason:Object.freeze({...o.reason})},...o?.files===void 0?{}:{files:Object.freeze([...o.files])}};return Object.freeze(r)}function Xr(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function se(e){if(e instanceof M)return Xr(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return Xr(n)}}function Qe(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function Yr(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function qr(e){return e==="MANIFEST_DUAL_MISMATCH"?e:as(e)}function ul(e){return as(e.code)}function as(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return cs("UiPluginValidationError",e)}}function cs(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function ds(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return cs("McpAppContractError",e)}}function xe(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function fl(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function yl(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(Kr(o)){let r=o.bin,s=typeof r=="string"?r:Kr(r)?Object.values(r).find(a=>typeof a=="string"):void 0;for(let a of [s,o.main]){if(typeof a!="string")continue;let c=Al(a);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function Al(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Il(){return globalThis.performance?.now()??Date.now()}function Ze(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))Ze(n);return Object.freeze(e)}function Zr(e){return Object.freeze(Array.from(e))}async function jn(e,n,t,i){if(n.pinnedFiles!==void 0){let a=n.pinnedFiles.get(t);if(a===void 0)throw new M("NOT_FOUND");if(a.byteLength>i)throw new M("LIMIT_EXCEEDED");return new Uint8Array(a)}let o=`${n.relativePath}/${t}`,r=n.scanContext,s=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof s!="function")return ts(e,n.root,o,i);try{let a=r.priorFingerprints.get(o)??await s.call(e,r.workspaceRoot,o,i);r.candidateRealPath=a.candidateRealPath;let c=await ts(e,n.root,o,i),d=await s.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=d.candidateRealPath,ls(a,d)&&d.size===BigInt(c.byteLength)&&!us(d,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:d}):r.cacheable=!1,c}catch(a){let c=!t.includes("/")&&se(a)==="NOT_FOUND"&&r.directoryListings.some(l=>l.relativePath===n.relativePath&&!Tt(l.key,t)),d=t===G&&se(a)==="NOT_FOUND"&&ml(r.directoryListings,n.relativePath);throw !c&&!d&&(r.cacheable=false),a}}async function gl(e,n,t){if(n.pinnedFiles!==void 0)return {iconDiagnostics:[]};let i=await bn(t,async r=>{try{return await jn(e,n,r,262144)}catch(s){let a=se(s);return a==="NOT_FOUND"?"missing":a==="LIMIT_EXCEEDED"?"too-large":"bad-path"}}),o=i.file;return {...o===void 0?{}:{iconFile:{path:o.path,sha256:createHash("sha256").update(o.bytes).digest("hex"),contentType:o.contentType,byteLength:o.byteLength}},iconDiagnostics:i.diagnostics}}function ml(e,n){let t=e.find(o=>o.relativePath===n);if(t===void 0)return  false;if(!Tt(t.key,"dist"))return  true;let i=e.find(o=>o.relativePath===`${n}/dist`);return i!==void 0&&!Tt(i.key,"tools.json")}function ps(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function _l(e,n,t,i,o,r,s,a){let c=e.fingerprintVerifiedFile,d=ps(t,i),l=o.candidates.get(d),p=i.relativePath,u;try{u=await ns(e,n,p);}catch(O){if(se(O)!=="NOT_FOUND")throw O}let y=u===void 0?void 0:{relativePath:p,key:u};if(y!==void 0&&(i.source==="apps"||i.source==="skills")&&!ee.some(O=>Tt(y.key,O)))return xe(s,a)?l!==void 0&&l.candidate===void 0&&l.candidateRealPath===void 0&&l.files.length===0&&l.directoryListings.length===1&&l.directoryListings[0]?.relativePath===y.relativePath&&l.directoryListings[0]?.key===y.key&&(i.source==="apps"?l.diagnostic?.code==="MANIFEST_MISSING":l.diagnostic===void 0)&&typeof c=="function"?{memo:l}:typeof c!="function"?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([y]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let g=async O=>{if(O==="")return y;let I=`${i.relativePath}${O}`;try{let A=await ns(e,n,I);return A===void 0?void 0:{relativePath:I,key:A}}catch(A){if(se(A)==="NOT_FOUND")return;throw A}},_=await Promise.all(Qr.map(g)),E=await Promise.all(hl.map(g));if(!xe(s,a))return {timeLimitReached:true};let U=typeof c=="function"&&_.every(O=>O!==void 0),x=_.filter(O=>O!==void 0),P=[...x,...E.filter(O=>O!==void 0)],C=new Map,H=l!==void 0&&U,N;if(l!==void 0&&typeof c=="function"){let O=await Promise.all(l.files.map(async I=>{if(!xe(s,a))return {kind:"time",file:I};try{let A=await c.call(e,n,I.relativePath,I.byteLimit);return {kind:"fingerprint",file:I,current:A}}catch(A){return se(A)==="NOT_FOUND"?{kind:"missing",file:I}:{kind:"error",file:I,error:A}}}));if(O.some(I=>I.kind==="time"))return {timeLimitReached:true};for(let I of O){if(I.kind==="error")throw I.error;if(I.kind==="missing"){H=false;continue}if(I.kind!=="fingerprint")continue;let{file:A,current:h}=I;C.set(A.relativePath,h),N??=h.candidateRealPath,(h.candidateRealPath!==l.candidateRealPath||!ls(h,A.fingerprint)||us(h,r))&&(H=false);}}let D=l!==void 0&&l.directoryListings.length===P.length&&l.directoryListings.every((O,I)=>O.relativePath===P[I]?.relativePath&&O.key===P[I]?.key);return l!==void 0&&U&&D&&H&&N===l.candidateRealPath?{memo:l}:!U||x.length!==Qr.length?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(P),priorFingerprints:C,files:new Map,...N===void 0?{}:{candidateRealPath:N},cacheable:true}}}function Tt(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function ns(e,n,t){let i=fs(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(s=>typeof s=="string"))return;let r=o.map(rs);if(!r.some(s=>s===null))return JSON.stringify(r.slice().sort((s,a)=>Fn(s.name,a.name)||Fn(s.kind,a.kind)).map(s=>[s.name,s.kind]))}function ls(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function us(e,n){let t=e.mtimeNs-n;return t>=-es&&t<=es}function vi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function El(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(ie(e)),r=s=>{let a=new Uint8Array(8);new DataView(a.buffer).setBigUint64(0,BigInt(s)),i.update(a);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function Tl(e,n){let t={...e.definition,sourceHash:n},i;try{i=ue(t);}catch(r){throw r instanceof k&&r.code==="INPUT_INVALID"?new ce("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{ge(o);}catch{throw new ce("MANIFEST_INVALID","normalized definition is invalid")}return o}function bl(e,n){return e.actions.some(t=>t.backend.type==="core"&&t.backend.handler!=="state.set"&&!at(n,t.backend))}function Pl(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function fs(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function ts(e,n,t,i){let o=Pl(e);if(!o)throw new M("READ_DENIED");return dl(await o.call(e,n,t,i))}async function Nl(e,n,t){let i=fs(e);if(!i)throw new M("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new M("READ_DENIED");return o.map(rs).filter(r=>r!==null)}function Dl(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(is(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(is(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function is(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function Te(e,n){e.diagnostic||(e.diagnostic=Et(n,e.source,e.relativePath,e.identity?.pluginId));}function Sl(e,n){let t=new Set,i=new Map;for(let r of e){let s=r.identity?.pluginId;if(s===void 0)continue;let a=i.get(s)??[];a.push(r),i.set(s,a);}for(let r of i.values()){if(r.length<2)continue;let s=r.filter(c=>c.provenance!==void 0);if(s.length>0){let c=r.find(d=>n.has(d));if(c){for(let d of s)t.add(d);for(let d of r)d!==c&&d.provenance===void 0&&Te(d,"RESERVED_ID");continue}for(let d of r)d.provenance===void 0&&Te(d,"RESERVED_ID");if(s.length>1)for(let d of s)Te(d,"DUPLICATE_ID");continue}let a=r.filter(c=>c.source==="apps");if(a.length>1){for(let c of a)Te(c,"DUPLICATE_ID");for(let c of r.filter(d=>d.source==="skills"))Te(c,"DUPLICATE_ID");}else for(let c of r.filter(d=>d.source==="skills"))Te(c,"DUPLICATE_ID");}let o=new Map;for(let r of e){if(r.diagnostic?.code==="RESERVED_ID"||t.has(r)||r.provenance===void 0&&!n.has(r)&&i.get(r.identity?.pluginId??"")?.some(c=>c.provenance!==void 0))continue;let s=r.identity?.definitionKey;if(s===void 0)continue;let a=o.get(s)??[];a.push(r),o.set(s,a);}for(let r of o.values())if(r.length>1)for(let s of r)Te(s,"DUPLICATE_ID");return t}function Ml(e,n,t){let i=new Set,o=new Set,r=new Set,s=new Set([...t.appIds,...n.productBundleReservationMetadata?.reservedAppIds??[]]),a=new Set([...t.definitionIds,...n.productBundleReservationMetadata?.reservedDefinitionIds??[]]);for(let l of Dl(n)){for(let p of l.appIds??[])typeof p=="string"&&i.add(p);for(let p of l.definitionIds??[])typeof p=="string"&&o.add(p);for(let p of l.toolNames??[])typeof p=="string"&&r.add(p);}for(let l of e){let p=l.candidate;if(!p)continue;if(i.has(p.pluginId)||o.has(p.definitionId)){Te(l,"RESERVED_ID");continue}[p.toolNames.read,p.toolNames.action].filter(y=>y!==void 0).some(y=>r.has(y))&&Te(l,"DUPLICATE_ID");}let c=[...e.filter(l=>l.provenance!==void 0&&l.diagnostic===void 0).flatMap(l=>l.candidate?[l.candidate]:[]),...(n.productBundleReservationMetadata?.candidates??[]).filter(l=>n.productBundleReservationMetadata?.indexHash!==void 0&&l.provenance?.indexHash===n.productBundleReservationMetadata.indexHash)],d=new Set;for(let l of e){let p=l.candidate;if(!(!p||l.diagnostic||l.source!=="apps"||l.provenance!==void 0)&&e.filter(u=>u.source==="apps"&&u.identity?.pluginId===p.pluginId).length===1&&c.some(u=>u.pluginId===p.pluginId)&&!(a.has(p.definitionId)&&!c.some(u=>u.pluginId===p.pluginId&&u.definitionId===p.definitionId))&&!c.some(u=>u.pluginId!==p.pluginId&&u.definitionId===p.definitionId)&&!e.some(u=>u.identity?.pluginId!==p.pluginId&&u.identity?.definitionKey===`${p.definitionId}\0${p.version}`&&u.diagnostic?.code!=="RESERVED_ID"))try{wr(p),d.add(l);}catch(u){Te(l,u instanceof Oe?ds(u.code):"EXEC_DENIED");}}for(let l of e){let p=l.candidate;p&&l.provenance===void 0&&!d.has(l)&&(s.has(p.pluginId)||a.has(p.definitionId))&&Te(l,"RESERVED_ID");}return d}function Ol(e){return [...e].sort((n,t)=>{let i=Wr.indexOf(n.source)-Wr.indexOf(t.source);return i!==0?i:Fn(n.relativePath,t.relativePath)})}function z(e,n,t){e.diagnostic=Et(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function os(e,n,t){let i=ze(t,{mode:"local"});if(!i.ok&&i.parseFailure){z(n,qr(i.rejection.code),Yr(i.rejection));return}let o=ll(i.identity);if(n.bundleIdentity===void 0)n.identity=o;else if(o?.pluginId!==n.bundleIdentity.appId||o.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){z(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){z(n,"RESERVED_ID");return}if(!i.ok){z(n,qr(i.rejection.code),Yr(i.rejection));return}let r=i.manifest,s={pluginId:r.pluginId,definitionKey:`${r.definitionId}\0${String(r.version)}`};if(n.bundleIdentity===void 0&&(n.identity=s),r.actions.length>0)try{Ei(r.actions.map(v=>({actionId:v.actionId,inputSchema:v.inputSchema})));}catch(v){if(v instanceof Oe){z(n,ds(v.code));return}throw v}let a;try{a=await jn(e,n,"ui/index.html",un);}catch(v){z(n,Qe(se(v),"entry"));return}if(a.byteLength>un){z(n,"LIMIT_EXCEEDED");return}let c;try{c=ss(a);}catch{z(n,"ENTRY_INVALID");return}if(a.byteLength===0||c.length===0){z(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(a).digest("hex");if(r.entryHash!==void 0&&r.entryHash!==d){z(n,"ENTRY_INVALID");return}let l={},p,u;if(r.initialState!==void 0){try{p=await jn(e,n,"ui/state.json",2097152);}catch(v){z(n,Qe(se(v),"initial"));return}if(p.byteLength>2097152){z(n,"LIMIT_EXCEEDED");return}try{let v=pl(p),Y=r.dataPaths??[],F=ii(v,Y);l=Ie(F,0,Y),on(l);}catch{z(n,"INITIAL_STATE_INVALID");return}if(u=createHash("sha256").update(p).digest("hex"),r.initialState.hash!==void 0&&r.initialState.hash!==u){z(n,"INITIAL_STATE_INVALID");return}}let y={...r,entryHash:d,...r.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:u}}},g=En(y),_=El(y,a,p??new Uint8Array),E;try{E=Tl(g,_);}catch(v){if(v instanceof ce){z(n,ul(v));return}throw v}let U;if(n.bundleLineage!==void 0){let v=n.bundleLineage[n.bundleLineage.length-1];if(!v){z(n,"LINEAGE_INVALID");return}let{legacy:Y,...F}=v.definition,{hash:le,...Pe}=E;if(ie(F)!==ie(Pe)){z(n,"LINEAGE_STALE");return}if(Y!==void 0&&(E={...E,legacy:Y}),Y!==void 0)try{E={...E,hash:ue(E)},ge(E);}catch{z(n,"LINEAGE_INVALID");return}U=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==r.pluginId){z(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==E.id||n.bundleIdentity.version!==E.version||n.bundleIdentity.definitionHash!==E.hash)){z(n,"LINEAGE_STALE");return}let x=await gl(e,n,i.mcpb?.icon),P=rl(r.pluginId),C=r.actions.length===0?{read:P.read}:P,H=Ze(g),N=Ze(y),D=Ze(E),O=Ze({...g.handlers}),I=Zr(a),A=p===void 0?void 0:Zr(p),h=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:I}),...A===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:u,bytes:A})}}),T={appId:r.pluginId,pluginId:r.pluginId,definitionId:r.definitionId,version:r.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:Ze(i.mcpb)},relativePath:n.relativePath,manifest:N,normalized:H,name:r.name,description:r.description,...r.icon===void 0?{}:{icon:r.icon},...r.tone===void 0?{}:{tone:r.tone},...x.iconFile===void 0?{}:{iconFile:Object.freeze({...x.iconFile})},...x.iconDiagnostics.length===0?{}:{iconDiagnostics:Object.freeze([...x.iconDiagnostics])},definition:D,handlers:O,resources:h,html:c,entryBytes:I,entryHash:d,initialState:Ze(l),...A===void 0?{}:{initialStateBytes:A},...u===void 0?{}:{initialStateHash:u},sourceHash:_,toolNames:Object.freeze(C)},B=n.provenance===void 0?{...T,source:n.source}:{...T,provenance:n.provenance,lineage:U??[]};n.candidate=Object.freeze(B),bl(r,E.usage)&&z(n,"EXEC_DENIED");}async function ys(e,n){let t={};for(let i of ee)try{t[i]=await jn(e,n,i,262144);}catch(o){if(se(o)==="NOT_FOUND")continue;return {files:t,failure:Qe(se(o),"manifest")}}if(t[K]!==void 0)try{t[G]=await jn(e,n,G,262144);}catch(i){if(se(i)!=="NOT_FOUND")return {files:t,failure:Qe(se(i),"manifest")}}return {files:t}}function Fi(e){return ee.some(n=>e[n]!==void 0)}async function Ll(e,n){let{files:t,failure:i}=await ys(e,n);if(i!==void 0){z(n,i);return}let o=t[K];return o!==void 0&&!pi(o)&&(delete t[K],delete t[G]),Fi(t)?t:void 0}function Rl(e,n,t,i=ol,o=false,r=new Set){let s=Ol(e),a=Sl(s,r),c=Object.freeze(s.filter(u=>u.candidate!==void 0&&u.diagnostic===void 0&&!a.has(u)).map(u=>u.candidate)),d=Object.freeze(s.filter(u=>u.diagnostic!==void 0).map(u=>u.diagnostic)),l=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(s.filter(u=>u.source==="bundled"&&u.diagnostic===void 0&&t!==void 0&&u.candidate?.provenance?.indexHash===t).map(u=>u.candidate)),diagnostics:Object.freeze(d.filter(u=>u.source==="bundled").map(u=>Object.freeze({...u}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,p={apps:c,diagnostics:d,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...l===void 0?{}:{productBundleSnapshotMetadata:l}};return Object.defineProperty(p,"candidates",{configurable:false,enumerable:false,get:()=>c}),Object.freeze(p)}function wl(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Cl(e,n){if(wl(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??Vr,options:t}}async function As(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=Cl(n,t),r=o.clock??Il,s=r(),a=await Jr(o.productBundle,i,s,r),c=r(),d=BigInt(Date.now())*1000000n,l=[],p=0,u,y=false,g,_;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{_=await i.getRootIdentity(e),g=Ur(o.scanCache,_),g.scanStartedAtNs=d;}catch(N){if(se(N)!=="NOT_FOUND")throw N}let E=g!==void 0&&o.productBundle===void 0&&a.packages.length===0&&a.diagnostics.length===0,U=new Set,x=true;l.push(...a.diagnostics.map(N=>({source:N.source,root:o.productBundle?.root??e,name:"",relativePath:N.relativePath,diagnostic:N})));let P=a.reservedIds;a.incomplete&&(u="time_limit");for(let N of a.packages){if(!xe(c,r)){y=true,u="time_limit";break}let D=N.indexEntry,O=D.packageDir,I=N.files===void 0?void 0:yl(O,N.files),A=a.indexHash===void 0?void 0:ar(Object.freeze({kind:"bundled",launcher:D.launcher!==false,indexHash:a.indexHash,packageDir:O,appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash,files:D.files}),I),h={source:"bundled",root:o.productBundle?.root??e,name:O.slice(5),relativePath:O,...A===void 0?{}:{provenance:A},...N.files===void 0?{}:{pinnedFiles:N.files},...N.lineage===void 0?{}:{bundleLineage:N.lineage},bundleIdentity:{appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash},identity:fl(D)};if(l.push(h),p+=1,N.failureCode!==void 0){z(h,N.failureCode);continue}if(N.files?.has(G)===true){z(h,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:G}});continue}let T={};for(let B of ee){let v=N.files?.get(B);v!==void 0&&(T[B]=v);}if(!Fi(T)){z(h,"BUNDLE_INTEGRITY");continue}if(await os(i,h,T),!xe(c,r)){y=true,u="time_limit";break}}let C=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let N of C){let{source:D,directory:O}=N,I;try{I=await Nl(i,e,O);}catch(h){if(se(h)==="NOT_FOUND")continue;E=false,x=false,l.push({source:D,root:e,name:"",relativePath:D,diagnostic:Et(Qe(se(h),"manifest"),D,D)});continue}let A=I.filter(h=>h.kind==="directory"||h.kind==="symlink").filter(h=>cl(h.name)).map(h=>({source:D,root:e,name:h.name,relativePath:al(D,h.name)})).sort((h,T)=>Fn(h.relativePath,T.relativePath));for(let h of A){let T={...h};if(l.push(T),_!==void 0?U.add(ps(_,T)):E=false,!xe(c,r)){y=true,u="time_limit";break e}let B;if(g!==void 0&&_!==void 0){try{let F=await _l(i,e,_,T,g,d,c,r);if(F.timeLimitReached){y=!0,u="time_limit";break e}T.scanContext=F.context,B=F.memo;}catch(F){E=false,z(T,Qe(se(F),"manifest"));continue}B===void 0&&(E=false);}if(B!==void 0){if(T.candidate=B.candidate,T.diagnostic=B.diagnostic,T.identity=B.identity,D==="skills"&&B.candidate===void 0&&B.diagnostic===void 0)continue;if(p>=64){z(T,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){z(T,"LIMIT_EXCEEDED");continue}if(p+=1,!xe(c,r)){y=true,u="time_limit";break e}continue}let v;if(D==="skills"&&(v=await Ll(i,T),v===void 0)){T.diagnostic===void 0&&vi(T);continue}if(p>=64){z(T,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){z(T,"LIMIT_EXCEEDED");continue}if(!xe(c,r)){y=true,u="time_limit";break e}if(p+=1,v===void 0){let F=await ys(i,T);if(F.failure!==void 0||!Fi(F.files)){z(T,F.failure??Qe("NOT_FOUND","manifest")),vi(T);continue}v=F.files;}if(await os(i,T,v),vi(T),!xe(c,r)){y=true,u="time_limit";break e}}}if(g!==void 0&&_!==void 0){let N=[...U].sort(Fn),D=g.lastCandidateKeys,O=D!==void 0&&D.length===N.length&&D.every((A,h)=>A===N[h]);if(E=E&&O,x&&!y&&u===void 0)for(let A of g.candidates.keys())try{JSON.parse(A)[0]===_.realPath&&!U.has(A)&&g.candidates.delete(A);}catch{g.candidates.delete(A);}let I=[...g.candidates.keys()].filter(A=>{try{return JSON.parse(A)[0]===_.realPath}catch{return  false}});E=E&&I.length===U.size&&I.every(A=>U.has(A))&&!y&&u===void 0,g.lastCandidateScanUnchanged=E,x&&!y&&u===void 0&&(g.lastCandidateKeys=Object.freeze(N));}y&&l.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:Et("DISCOVERY_TIME_LIMIT","apps","apps")});let H=Ml(l,o,P);return Rl(l,u,a.indexHash,P,o.productBundle!==void 0,H)}var ol,xi,Wr,sl,Qr,hl,es,Is=j(()=>{m();We();Bn();we();fi();ui();Je();ft();Cr();ct();rt();xr();Oi();st();Ui();Ui();ol=_t([]),xi="crewx_local_app_";Wr=["bundled","apps","skills"],sl=new TextDecoder("utf-8",{fatal:true});Qr=["","/ui"],hl=["/dist"],es=2000000000n;});m();fi();m();Wt();m();var Ko="SKILL.md",zd=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function Xo(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function $d(e){return e.isDirectory()||e.isSymbolicLink()}function er(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function yi(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(zd);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!Xo(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=Xo(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function Gd(e){return [join(e,Ko),join(e,"skill",Ko)]}function Yo(e,n){if(!er(e))return null;for(let t of Gd(e)){if(!existsSync(t))continue;let o=yi(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function qo(e){try{return readdirSync(e,{withFileTypes:!0}).filter($d)}catch{return []}}function Zo(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function nr(e){let n=[],t=new Set;for(let i of e)if(er(i))for(let o of qo(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let s of qo(r))Zo(Yo(join(r,s.name),s.name),t,n);continue}Zo(Yo(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}m();it();var Jd=/^[A-Za-z0-9_$.[\]"-]{0,200}$/,Wd=/^[a-z][a-z0-9-]{0,63}$/,Kd="<unknown>";function Xd(e){return typeof e=="string"&&(ee.includes(e)||e===G)}function tr(e){if(typeof e!="object"||e===null)return;let{file:n,path:t,rule:i}=e;if(!(typeof i!="string"||!Wd.test(i)))return {...Xd(n)?{file:n}:{},path:typeof t=="string"&&Jd.test(t)?t:Kd,rule:i}}function ir(e){if(!Array.isArray(e))return;let n=ee.filter(t=>e.includes(t));return n.length>0?n:void 0}Is();var Ul=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Nt(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?xl(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function xl(e,n){let t=new TextEncoder().encode(Dt(e)),i=vl(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function vl(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function Dt(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function bt(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function hs(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:Dt(t)}function Fl(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function _s(e){return Object.freeze({packageRoot:e})}function jl(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Ve,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function Es(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function Vl(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=jl(t),s=Nt(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),a=t.description||n?.skill.description||"",c=t.releaseVersion??String(t.version),d={appId:t.pluginId,name:t.name,description:a,version:c,...Es(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:_s(e.packageRoot)},definitionHash:s,...t.manifest.csp===void 0?{}:{connectDomains:Object.freeze([...t.manifest.csp.connectDomains])}};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:d.appId,capabilities:o,summary:Object.freeze(d)}}function Bl(e){let n=Hl(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...Es(["skill"]),skillName:e.skill.name,localDefinitionRef:_s(e.packageRoot),definitionHash:Nt({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function Hl(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function Q(e,n,t,i,o){let r=tr(o?.reason),s=ir(o?.files);return Object.freeze({code:e,source:n,relativePath:zl(t),...i===void 0?{}:{appId:i},...r===void 0?{}:{reason:r},...s===void 0?{}:{files:s}})}function zl(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function Ts(e){return Q(e.code,e.source,e.relativePath,e.pluginId,e)}function $l(e,n){let t=hs(e,n.dir);if(!t)return {diagnostic:Q("PATH_ESCAPED","node_modules","node_modules")};let i=Fl(t);if(!i)return {diagnostic:Q("PATH_ESCAPED","node_modules",t)};let o=yi(n.skillMdPath);if(!o.readable)return {diagnostic:Q("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:Q("SKILL_INVALID",i,t)};let r=Gl(n.dir,n.skillMdPath);if(!r)return {diagnostic:Q("PATH_ESCAPED",i,t)};try{let s=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Nt({relativePath:r,fileBytes:s}),source:i}}catch{return {diagnostic:Q("SKILL_READ_FAILED",i,t)}}}function Gl(e,n){let t=relative(e,n).split(sep).join("/");try{return Dt(t)}catch{return null}}function Jl(e){if(!Ul.test(e.appId))return {diagnostic:Q("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??Ve,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function Wl(e){return e.builtinCatalog}function Kl(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return Dt(n)}catch{return null}}function Xl(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function Yl(e,n,t){let i=n.installed??[],o=new Map;for(let s of i){let a=Kl(s);if(!a){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let c=o.get(a);if(c&&JSON.stringify(c)!==JSON.stringify(s)){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",a));continue}o.set(a,s);}let r=new Map;for(let s of e)s.packageRoot!==void 0&&r.set(s.packageRoot,s);for(let[s,a]of o){let c=r.get(s);if(!c){t.push(Q("INSTALLED_MISSING","installed",s,a.appId));continue}let d=Xl(a);if(!d){t.push(Q("INSTALLED_CONTENT_ID_MISSING","installed",s,a.appId));continue}if(a.appId!==void 0&&a.appId!==c.appId||a.definitionHash!==void 0&&a.definitionHash!==c.summary.definitionHash){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",s,a.appId));continue}let l={...c.summary,origin:"installed",...a.slug===void 0?{}:{slug:a.slug},marketplaceContentId:d},p=e.indexOf(c);p>=0&&(e[p]={...c,summary:Object.freeze(l)});}}function ql(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(s=>s.source==="builtin")?"builtin":o.some(s=>s.source==="bundled")?"bundled":void 0;if(r==="bundled"){let s=o.filter(a=>a.source==="apps"&&a.summary.definition!==void 0);if(s.length===1){for(let a of o)a.source==="bundled"?i.add(a):a!==s[0]&&(i.add(a),n.push(Q("RESERVED_ID",a.source,Pt(a),a.appId)));continue}}if(r!==void 0){let s=o.filter(a=>a.source===r);for(let a of o.filter(c=>c.source!==r))i.add(a),n.push(Q("RESERVED_ID",a.source,Pt(a),a.appId));if(s.length>1)for(let a of s)i.add(a),n.push(Q("DUPLICATE_ID",a.source,Pt(a),a.appId));continue}for(let s of o)i.add(s),n.push(Q("DUPLICATE_ID",s.source,Pt(s),s.appId));}return e.filter(o=>!i.has(o))}function Pt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function Zl(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(Ts)}function Ql(e){return e.filesystem}function eu(e,n){let t=Ql(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{productBundleReservationMetadata:i}}}async function bs(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=Wl(n),i=await As(e,eu(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],s=[],a=[],c=[],d=new Set;for(let A of r)for(let h of nr([A])){let T=hs(e,h.dir);(T===null||!d.has(T))&&(c.push(h),T!==null&&d.add(T));}for(let A of c){let h=$l(e,A);"diagnostic"in h?s.push(h.diagnostic):a.push(h);}let l=new Map,p=n.registeredProductBundle?.indexHash,u=(n.registeredProductBundle?.candidates??[]).filter(A=>p!==void 0&&A.provenance?.indexHash===p),y=[...new Set([...i.apps??i.candidates??[],...i.productBundleSnapshotMetadata?.candidates??[]]),...u],g=new Set(u),_=new Set(p===void 0?[]:(t?.listMcpApps()??[]).filter(A=>A.provenance?.indexHash===p).map(A=>A.appId));for(let A of y){if(g.has(A)&&A.provenance?.indexHash===p&&_.has(A.appId))continue;let h=A.provenance===void 0?`workspace\0${A.relativePath}`:`bundled\0${A.provenance.indexHash}\0${A.provenance.packageDir}`;l.set(h,{candidate:A,packageRoot:A.relativePath});}let E=new Map(a.map(A=>[A.packageRoot,A])),U=[];for(let A of l.values()){let h=A.candidate.provenance===void 0?E.get(A.packageRoot):void 0,T=Vl(A,h);U.push({...T.packageRoot===void 0?{}:{packageRoot:T.packageRoot},source:T.source,appId:T.appId,summary:T.summary});}let x=new Set([...l.values()].filter(A=>A.candidate.provenance===void 0).map(A=>A.packageRoot)),P=o===void 0?new Set:new Set(i.diagnostics.filter(A=>A.code==="RESERVED_ID"&&A.source!=="bundled").map(A=>A.relativePath)),C=new Set(o?.reservedAppIds??[]);for(let A of a){let h=Bl(A);if(!(x.has(A.packageRoot)||P.has(A.packageRoot))){if(C.has(h.appId)){s.push(Q("RESERVED_ID",A.source,A.packageRoot,h.appId));continue}U.push({packageRoot:h.packageRoot,source:h.source,appId:h.appId,summary:h.summary});}}let H=[...Zl(i.diagnostics,new Set(a.map(A=>A.packageRoot))),...s,...n.registeredProductBundle?.diagnostics.filter(A=>A.source==="bundled").map(Ts)??[]],N=[];if(t)for(let A of t.listMcpApps()){let h=Jl(A);"diagnostic"in h?H.push(h.diagnostic):N.push(h);}let D=ql([...U,...N],H);Yl(D,n,H);let O=D.map(A=>A.summary).sort((A,h)=>bt(A.appId,h.appId)),I=[...H].sort((A,h)=>bt(A.relativePath,h.relativePath)||bt(A.code,h.code)||bt(A.appId??"",h.appId??""));return Object.freeze({items:Object.freeze(O),diagnostics:Object.freeze(I)})}m();m();m();function nu(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function An(e,n){try{return nu(n).test(e)}catch{return  false}}function St(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>An(t[i+r],o))}function tu(e,n){return e.split("/").some(t=>An(t,n))}var Ps=[{label:".env*",test:e=>An(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>An(e,"*.key")},{label:"*.pem",test:e=>An(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&St(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&St(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&St(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&St(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>tu(n,".crewx")}];function In(e,n,t){for(let i of Ps)if(i.test(e,n,t))return i.label;return null}m();var ve=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function b(e,n){return new ve(e,n)}function Ns(e,n){if(!n||/[\\\u0000]/.test(n)||de.posix.isAbsolute(n)||n.split("/").some(y=>!y||y==="."||y===".."))throw b("PACKAGE_PATH_TRAVERSAL","package root must be a safe workspace-relative path");let t=de.resolve(e),i=de.resolve(t,...n.split("/"));if(!i.startsWith(`${t}${de.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","package root escaped the workspace");function o(y,g){let _;try{_=te.lstatSync(y);}catch{throw b("PACKAGE_FILE_INVALID",`package directory is missing: ${g}`)}if(_.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${g}`);if(!_.isDirectory())throw b("PACKAGE_FILE_INVALID",`not a package directory: ${g}`)}o(t,".");let r=t,s="",a=null;for(let y of n.split("/"))r=de.join(r,y),s=s?`${s}/${y}`:y,o(r,s),a??=In(y,s,true);let c=[],d=[];function l(y,g){o(y,g);let _=te.readdirSync(y,{withFileTypes:true});for(let E of _){let U=`${g}/${E.name}`,x=de.join(y,E.name);if(E.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${U}`);let P=In(E.name,U,E.isDirectory());P?d.push({path:U,rule:P}):E.isDirectory()?l(x,U):E.isFile()&&c.push(U);}}a?d.push({path:n,rule:a}):l(i,n);let p=new TextEncoder,u=(y,g)=>Buffer.compare(p.encode(y),p.encode(g));return c.sort(u),d.sort((y,g)=>u(y.path,g.path)),{included:c,excluded:d}}function Ds(e){let n=[],t=[];function i(o,r,s){let a;try{a=te.readdirSync(o,{withFileTypes:!0});}catch{return}a.sort((c,d)=>c.name.localeCompare(d.name));for(let c of a){let d=r?`${r}/${c.name}`:c.name,l=de.join(o,c.name);if(c.isSymbolicLink()){let p;try{p=te.statSync(l);}catch{t.push({path:d,rule:"symlink"});continue}if(p.isDirectory()){t.push({path:d,rule:s??"symlink-dir"});continue}let u=s??In(c.name,d,false);u?t.push({path:d,rule:u}):t.push({path:d,rule:"symlink"});continue}if(c.isDirectory()){let p=s??In(c.name,d,true);i(l,d,p);continue}if(c.isFile()){let p=s??In(c.name,d,false);p?t.push({path:d,rule:p}):n.push(d);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}m();var iu=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function ou(e){return e.includes(0)}function Hi(e,n,t){let i=[];for(let o of n){let r=de.join(e,o),s;try{let c=t?.get(o);s=c===void 0?te.readFileSync(r):Buffer.from(c);}catch{continue}if(ou(s))continue;s.toString("utf8").split(/\r\n|\r|\n/).forEach((c,d)=>{for(let{rule:l,regex:p}of iu)p.test(c)&&i.push({path:o,line:d+1,rule:l});});}return i}m();var Os=/^[a-z0-9-]+$/,ru=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,su=/^[A-Za-z_][A-Za-z0-9_]*$/;function au(e){let n=de.join(e,"crewx.yaml");if(!te.existsSync(n))return {};let t;try{t=Ls.load(te.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function cu(e){return zi.createHash("sha256").update(e).digest("hex")}function Rs(e){let n;try{n=te.lstatSync(e);}catch{throw b("PACKAGE_FILE_INVALID",`file is not readable: ${de.basename(e)}`)}if(n.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return zi.createHash("sha256").update(new Uint8Array(te.readFileSync(e))).digest("hex")}function du(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let s=t[r]-i[r];if(s!==0)return s}return t.byteLength-i.byteLength}function ws(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||de.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw b("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function pu(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw b("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function Cs(e){if(!ru.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function ks(e,n,t={}){let i=au(e),o=i.name??de.basename(e);if(!Os.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${Os} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");Cs(r);let s=Array.isArray(i.requiredEnv)?i.requiredEnv:[],a=[];for(let l of s){if(typeof l!="string"||!su.test(l))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(l)}"`);a.push(l);}let c=n.map(l=>(ws(l),{path:l,sha256:Rs(de.join(e,l))})).sort((l,p)=>l.path<p.path?-1:l.path>p.path?1:0),d={name:o,version:r,type:"template",description:i.description??"",files:c,requiredEnv:a};return i.crewxMinVersion&&(d.crewxMinVersion=i.crewxMinVersion),d}function lu(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw b("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function Us(e,n){if(pu(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(Cs(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(s=>s!=="screen"&&s!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw b("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let s=n.includedFiles.includes(`${i}manifest.json`),a=n.includedFiles.includes(`${i}ui-plugin.json`);if(!s&&!a)throw b("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(s&&!a)throw b("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw b("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(s=>{if(ws(s),!s.startsWith(i))throw b("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let a=n.generatedFiles?.get(s);return a!==void 0&&o.add(s),{path:s,sha256:a===void 0?Rs(de.join(e,s)):cu(a),...a===void 0?{}:{generated:true}}}).sort((s,a)=>du(s.path,a.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:lu(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}m();function xs(e){return zi.createHash("sha256").update(e).digest("hex")}function Bs(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||de.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw b("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=de.resolve(e),i=de.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${de.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function vs(e,n){let t=Bs(e,n),i;try{i=te.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw b("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw b("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(te.readFileSync(t))}async function Hs(e,n,t={}){let i=de.join(e,".crewx","publish");te.mkdirSync(i,{recursive:true});let o=de.join(i,`${n.name}-${n.version}.tgz`),r=de.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),s=te.mkdtempSync(de.join(Fs.tmpdir(),"crewx-publish-"));try{let a=new Set,c=[];for(let d of n.files){if(a.has(d.path))throw b("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");a.add(d.path);let l=t.generatedFiles?.get(d.path);if(d.generated===!0&&l===void 0)throw b("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(d.path)){let y=vs(e,d.path);if(t.sourceFileHashes.get(d.path)!==xs(y))throw b("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let p=l??vs(e,d.path);if(xs(p)!==d.sha256)throw b("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${d.path}`);let u=Bs(s,d.path);te.mkdirSync(de.dirname(u),{recursive:!0}),te.writeFileSync(u,new Uint8Array(p)),c.push(d.path);}te.writeFileSync(de.join(s,"manifest.json"),JSON.stringify(n,null,2)),await Vs.create({gzip:!0,file:r,cwd:s,portable:!0,noMtime:!0},["manifest.json",...c]),te.renameSync(r,o);}finally{try{te.rmSync(r,{force:!0});}catch{}te.rmSync(s,{recursive:true,force:true});}return o}m();m();var gn="/api/v1";var yu=201,Au=200,Iu=409,$i=401,zs={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function gu(){return process.env.WI013_FAKE_UPLOAD==="1"}function mu(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function hu(e){return e.replace(/\/+$/,"")}async function Vn(e){try{return await e.json()}catch{return null}}function $s(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function _u(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Eu(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function Gs(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(zs,r))continue;let s=r,a=s==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return b(zs[s],a)}}async function Tu(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=hu(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,s=o?.appId,a;try{a=await fetch(`${n}${gn}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...s===void 0?{}:{appId:s}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let c=await Vn(a),d=_u(c),l=Eu(c),p=r&&l!==void 0?l:i,u;if(a.status===yu)u="created";else if(r&&a.status===Au){if(d===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");u="existing";}else if(a.status===Iu){if(r)throw Gs(c,i)??b("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);u="existing";}else throw a.status===$i?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${a.status}`);let y="not-needed",g=null;if(u==="existing"&&!r){let D;try{D=await fetch(`${n}${gn}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let O=await Vn(D);if(D.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${D.status}`);let A=$s(O,"publisher items",D.status)?.items;if(!Array.isArray(A))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${D.status}`);let h=A.find(T=>!T||typeof T!="object"?false:T.slug===i);if(!h||typeof h.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${D.status}`);if(g=h.version,g!==e.manifest.version){let T;try{T=await fetch(`${n}${gn}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!T.ok)throw await Vn(T),T.status===$i?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${T.status})`):T.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${T.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${T.status}`);y="applied";}}let _=te.readFileSync(e.tgzPath),E=gu()?mu(_):_,U=new FormData;U.set("archive",new Blob([new Uint8Array(E)],{type:"application/gzip"}),`${p}-${e.manifest.version}.tgz`);let x=r&&d!==void 0?d:i,P;try{P=await fetch(`${n}${gn}/publisher/items/${encodeURIComponent(x)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:U});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(P.status===$i)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!P.ok){let D=await Vn(P);if(r){let O=Gs(D,p);if(O)throw O}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${P.status}`)}let C=await Vn(P),H=$s(C,"upload",P.status),N=typeof H.contentId=="string"&&H.contentId.length>0?H.contentId:d;if(r&&N===void 0)throw b("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:p,version:e.manifest.version,...N===void 0?{}:{contentId:N},artifactChecksum:H.artifactChecksum,artifactSizeBytes:H.artifactSizeBytes,submitOutcome:u,versionUpdate:y,serverVersionBefore:g}}var bu=1e4,Pu=100*1024*1024;function Gi(e){return zi.createHash("sha256").update(e).digest("hex")}function Nu(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function Ge(e,n){if(!n||n.includes("\\")||n.includes("\0")||de.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=de.resolve(e,...n.split("/")),i=de.resolve(e);if(t!==i&&!t.startsWith(`${i}${de.sep}`))throw b("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=te.lstatSync(t);}catch{throw b("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw b("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw b("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(te.readFileSync(t))}async function Du(e,n,t){let i=`${n}/${K}`;if(!t.includes(i))return [];let o={[K]:Ge(e,i)},r=`${n}/${G}`;t.includes(r)&&(o[G]=Ge(e,r));let s=ze(o,{mode:"local"});if(!s.ok)return [];let{diagnostics:a}=await bn(s.mcpb?.icon,async d=>{let l=`${n}/${d}`;return t.includes(l)?Ge(e,l):"missing"}),c=a.find(d=>d.code==="ICON_INVALID");if(c!==void 0)throw b("ICON_INVALID",`${c.reason??"invalid"} at ${c.declared??"icon"}`);return a.flatMap(d=>d.code==="ICON_INVALID"?[]:[{code:d.code,path:d.declared??"icon"}])}function Ws(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new ve("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function Xs(e,n,t,i){let o=Ws(t.maxFileCount??t.maxFiles,bu,"max file count"),r=Ws(t.maxTotalBytes??t.maxBytes,Pu,"max total bytes");if(n.length>o)throw new ve("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let s=0;for(let a of n){let c=i?.get(a);if(c!==void 0?s+=c.byteLength:s+=Ge(e,a).byteLength,s>r)throw new ve("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function Su(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function Mu(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw b("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw b("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw b("APP_ID_REQUIRED")}function Ou(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw b("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw b("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function Lu(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw b("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function Ji(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function Ru(e,n,t){let i=ze({[pe]:t},{mode:"published"});if(!i.ok)throw b("APP_UI_MANIFEST_INVALID",`generated ${pe} does not read: ${Ji(i.rejection)}`);if(pn(i.manifest)!==pn(n))throw b("APP_UI_MANIFEST_INVALID",`generated ${pe} normalizes to a different definition hash than the source`);let o=e[K];if(o===void 0)return;let r=e[G],s=ze({[K]:o,[pe]:t,...r===void 0?{}:{[G]:r}},{mode:"local"});if(!s.ok)throw b("APP_UI_MANIFEST_INVALID",Ji(s.rejection))}function wu(e,n,t,i){let o={};for(let y of ee){let g=`${t}/${y}`;i.includes(g)&&(o[y]=Ge(e,g));}let r=`${t}/${G}`;if(o[K]!==void 0&&i.includes(r)&&(o[G]=Ge(e,r)),Object.keys(o).length===0)throw b("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let s=ze(o,{mode:"local"});if(!s.ok)throw b("APP_UI_MANIFEST_INVALID",Ji(s.rejection));if(s.manifest.pluginId!==n.appId)throw b("APP_DEFINITION_CONFLICT",`${s.file} identity no longer matches the selected App`);let a=o[pe],c=a===void 0?void 0:Gi(a),d=`${t}/ui/index.html`;if(!i.includes(d))throw b("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let l=Gi(Ge(e,d)),p=JSON.parse(JSON.stringify(s.v2Input));if(p.entryHash=l,Object.prototype.hasOwnProperty.call(p,"initialState")){let y=p.initialState;if(!Nu(y)||y.path!=="ui/state.json")throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let g=`${t}/ui/state.json`;if(!i.includes(g))throw b("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let _=Ge(e,g);p.initialState={...y,hash:Gi(_)};}let u;try{let y=Xe(p,{mode:"published"});u=new Uint8Array(Buffer.from(JSON.stringify(y),"utf8"));}catch(y){throw y instanceof ce?b("APP_UI_MANIFEST_INVALID",y.code):b("APP_UI_MANIFEST_INVALID")}return Ru(o,s.manifest,u),{bytes:u,...c===void 0?{}:{legacySourceHash:c}}}async function Cu(e,n){let{included:t,excluded:i}=Ds(e);Xs(e,t,n);let o=ks(e,t,{version:n.version}),r=Hi(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function ku(e,n){Mu(n);let t=await bs(e),i=Ou(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw b("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=Lu(i),{included:r,excluded:s}=Ns(e,o),a=await Du(e,o,r),c=new Map,d=new Map;if(i.capabilities.includes("screen")){let y=wu(e,i,o,r),g=`${o}/${pe}`;if(c.set(g,y.bytes),y.legacySourceHash!==void 0)d.set(g,y.legacySourceHash);else {r.push(g);let _=new TextEncoder;r.sort((E,U)=>Buffer.compare(_.encode(E),_.encode(U)));}}if(i.capabilities.includes("skill")&&!r.includes(`${o}/SKILL.md`))throw b("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");Xs(e,r,n,c);let l={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:r,generatedFiles:c},p=Us(e,l),u=Hi(e,r,c);return {plan:{manifest:p,included:r,excluded:s,secretFindings:u,warnings:a},archiveOptions:{generatedFiles:c,sourceFileHashes:d}}}async function Ys(e,n){let t=de.resolve(e);if(Su(n))return ku(t,n);if(n.expectedDefinitionHash!==void 0)throw b("APP_ID_REQUIRED");return Cu(t,n)}async function YI(e,n={}){return (await Ys(e,n)).plan}function Uu(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new ve("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function qs(e,n={}){let t=de.resolve(e),i=await Ys(t,n);i.plan.secretFindings.length>0&&Uu(i.plan.secretFindings);let o=await Hs(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function qI(e,n={}){return qs(e,n)}async function ZI(e,n){let t=await qs(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
+export{Pu as DEFAULT_PUBLISH_MAX_BYTES,bu as DEFAULT_PUBLISH_MAX_FILES,Ps as EXCLUDE_RULES,gn as MARKETPLACE_API_PREFIX,ve as PublishError,ZI as packApp,qs as packPublish,qI as packTemplate,YI as planPublish,Tu as uploadToMarketplace};