@crewx/sdk 0.9.0-rc.23 → 0.9.0-rc.231

package/dist/esm/process/index.js

@@ -0,0 +1 @@
+import {spawnSync,spawn}from'child_process';var O=3e3;var b=2e3,g=25,L=100;function R(e){return e instanceof Error?e:e===void 0?void 0:new Error(String(e))}function y(e){return typeof e=="object"&&e!==null&&"code"in e?String(e.code):void 0}function S(e){return Number.isSafeInteger(e)&&e>0}function J(e){let r=e.trim();if(!r)return "";let n=/^(?:"([^"]+)"|'([^']+)')/.exec(r);return n?.[1]??n?.[2]??r.split(/\s+/,1)[0]??""}function B(e,r,n){let t=n==="win32"?e.toLowerCase():e,o=n==="win32"?r.toLowerCase():r;if(!o.trim())return  false;if(o==="agy"){let s=J(e).split(/[\\/]/).pop()??"",i=n==="win32"?s.toLowerCase():s;return i==="agy"||n==="win32"&&(i==="agy.exe"||i==="agy.cmd")}return t.includes(o)}function h(e,r,n){return r.some(t=>B(e,t,n))}function x(e,r){try{let n=spawnSync(e,r,{encoding:"utf8",timeout:O,windowsHide:!0});return {status:n.status,stdout:typeof n.stdout=="string"?n.stdout:"",stderr:typeof n.stderr=="string"?n.stderr:"",error:n.error}}catch(n){return {status:null,stdout:"",stderr:"",error:R(n)}}}function V(e,r){return new Promise(n=>{let t;try{t=spawn(e,r,{windowsHide:!0});}catch(a){n({status:null,stdout:"",stderr:"",error:R(a)});return}let o="",s="",i=false,u,m=setTimeout(()=>{try{t.kill();}catch{}u({status:null,stdout:o,stderr:s,error:new Error(`Command timed out after ${O}ms`)});},O);u=a=>{i||(i=true,clearTimeout(m),n(a));},t.stdout?.setEncoding("utf8"),t.stderr?.setEncoding("utf8"),t.stdout?.on("data",a=>{o+=String(a);}),t.stderr?.on("data",a=>{s+=String(a);}),t.once("error",a=>{u({status:null,stdout:o,stderr:s,error:a});}),t.once("close",a=>{u({status:a,stdout:o,stderr:s});});})}async function I(e,r,n){return n.runCommandAsync?n.runCommandAsync(e,r):n.runCommand?n.runCommand(e,r):V(e,r)}function G(e){return new Promise(r=>{setTimeout(r,Math.max(0,e));})}function E(){return new Promise(e=>{setImmediate(e);})}function w(e,r=process.kill){try{return r(e,0),"alive"}catch(n){return y(n)==="ESRCH"?"not_found":y(n)==="EPERM"?"alive":"unknown"}}function j(e,r){if(!S(e))return {status:"unknown"};let n=r.platform??process.platform,t=r.runCommand??x,o=n==="win32"?"powershell.exe":"ps",s=n==="win32"?["-NoLogo","-NoProfile","-NonInteractive","-ExecutionPolicy","Bypass","-Command",`$p = Get-CimInstance -ClassName Win32_Process -Filter 'ProcessId = ${e}' -ErrorAction Stop; if ($null -ne $p) { [Console]::Write([string]$p.CommandLine) }`]:["-p",String(e),"-o","command="],i;try{i=t(o,s);}catch{return {status:"unknown"}}if(i.error||i.status!==0)return {status:"unknown"};let u=i.stdout.trim();return u?{status:"found",commandLine:u}:{status:"not_found"}}function z(e,r){let n=w(-e,r),t=w(e,r);return n==="alive"||t==="alive"?"alive":n==="unknown"||t==="unknown"?"unknown":"not_found"}async function v(e,r,n,t){let o=Math.max(0,n),s=Math.max(1,t.pollIntervalMs??g),i=Date.now()+o,u,m=o===0,a=t.sleep?Promise.resolve().then(()=>t.sleep(o)).then(()=>{},()=>{}):new Promise(c=>{u=setTimeout(c,o);});a.then(()=>{m=true;});try{for(await E();;){let c=z(e,r);if(c==="not_found")return c;let f=i-Date.now();if(m||f<=0)return c;await Promise.race([a,G(Math.min(s,f))]);}}finally{u!==void 0&&clearTimeout(u);}}async function k(e,r,n,t,o){let s=await v(e,r,o.hardConfirmMs??L,{...o,sleep:void 0});return s==="not_found"?n?{status:"not_found",pid:e,method:t}:{status:"terminated",pid:e,method:t}:s==="alive"?{status:"failed",pid:e,method:t,error:"Process is still running after termination attempt"}:{status:"failed",pid:e,method:t,error:"Unable to verify process termination"}}function q(e,r,n={}){let t=j(e,n);if(t.status!=="found")return t.status;let o=n.platform??process.platform;return h(t.commandLine,r,o)?"owned":"not_owned"}async function Y(e,r,n={}){if(!S(e))return "unknown";let t=n.platform??process.platform,o=t==="win32"?"powershell.exe":"ps",s=t==="win32"?["-NoLogo","-NoProfile","-NonInteractive","-ExecutionPolicy","Bypass","-Command",`$p = Get-CimInstance -ClassName Win32_Process -Filter 'ProcessId = ${e}' -ErrorAction Stop; if ($null -ne $p) { [Console]::Write([string]$p.CommandLine) }`]:["-p",String(e),"-o","command="],i;try{i=await I(o,s,n);}catch{return "unknown"}if(i.error||i.status!==0)return "unknown";let u=i.stdout.trim();return u?h(u,r,t)?"owned":"not_owned":"not_found"}var Z=3e3,Q=/^(?:(\d+)-)?(?:(\d+):)?(\d{1,2}):(\d{2})$/,ee=/^\s*(\d+)\s+(\S+)\s+(\S+)\s*$/,ne=/^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\.(\d{6})([+-]\d{3})$/;function A(e){let r=Q.exec(e.trim());if(!r)return;let[,n="0",t="0",o="0",s="0"]=r;return ((Number(n)*24+Number(t))*60+Number(o))*60+Number(s)}function U(e){let r=e.trim(),n=ne.exec(r);if(n){let[,o,s,i,u,m,a,c,f]=n;return Date.UTC(Number(o),Number(s)-1,Number(i),Number(u),Number(m),Number(a),Math.trunc(Number(c)/1e3))-Number(f)*6e4}let t=Date.parse(r);return Number.isFinite(t)?t:void 0}function D(e,r){return r==="win32"?{command:"powershell.exe",args:["-NoLogo","-NoProfile","-NonInteractive","-ExecutionPolicy","Bypass","-Command",`$p = Get-CimInstance -ClassName Win32_Process -Filter 'ProcessId = ${e}' -ErrorAction Stop; if ($null -ne $p) { [Console]::Write($p.CreationDate.ToUniversalTime().ToString('o')) }`]}:{command:"ps",args:["-p",String(e),"-o","pgid=","-o","etime=","-o","stat="]}}function $(e,r,n){if(e.error)return {status:"unknown"};let t=e.stdout.trim();if(!t)return e.status===0||e.status===1?{status:"not_found"}:{status:"unknown"};if(e.status!==0)return {status:"unknown"};if(r==="win32"){let i=U(t);return i===void 0?{status:"unknown"}:{status:"found",startedAtMs:i,groupId:null}}let o=ee.exec(t),s=o?A(o[2]):void 0;return !o||s===void 0?{status:"unknown"}:o[3].startsWith("Z")?{status:"unknown"}:{status:"found",startedAtMs:n-s*1e3,groupId:Number(o[1])}}function re(e,r={}){if(!S(e))return {status:"unknown"};let n=r.platform??process.platform,{command:t,args:o}=D(e,n),s=r.runCommand??x,i;try{i=s(t,o);}catch{return {status:"unknown"}}return $(i,n,Date.now())}async function te(e,r={}){if(!S(e))return {status:"unknown"};let n=r.platform??process.platform,{command:t,args:o}=D(e,n),s;try{s=await I(t,o,r);}catch{return {status:"unknown"}}return $(s,n,Date.now())}async function oe(e,r={}){let n=r.platform??process.platform,t=n==="win32"?"taskkill":"process-group",o=l=>({status:"failed",pid:e,method:t,error:l});if(!S(e))return o("Invalid process ID");let s=r.kill??process.kill,i=w(e,s);if(i==="not_found")return {status:"not_found",pid:e,method:t};if(i!=="alive")return o("Unable to determine whether the process is alive");if(n==="win32"){let l;try{l=await I("taskkill",["/PID",String(e),"/T","/F"],r);}catch(P){l={status:null,stdout:"",stderr:"",error:R(P)};}let p=w(e,s);return p==="not_found"?l.status===0&&!l.error?{status:"terminated",pid:e,method:t}:{status:"not_found",pid:e,method:t}:o(p==="alive"?"Process is still running after termination attempt":"Unable to verify process termination")}let u,m=r.signal??"SIGKILL";try{s(-e,m);}catch(l){u=l;}if(m==="SIGKILL")return k(e,s,u,t,r);if(await v(e,s,r.graceMs??b,r)==="not_found")return u?{status:"not_found",pid:e,method:t}:{status:"terminated",pid:e,method:t};let c;try{s(-e,"SIGKILL");}catch(l){c=l;}let f=await k(e,s,c,t,r);return f.status==="terminated"?f:f.status==="not_found"?u?f:{status:"terminated",pid:e,method:t}:o(f.error??"Process termination failed")}var K=1e3,se=["SIGTERM","SIGINT","SIGHUP","SIGKILL"],ie=6e4,ue=100,ae=3e4,ce=1e3;function C(e,r,n){return Number.isFinite(e)&&e>=r&&e<=n}function de(e){return Number.isSafeInteger(e)&&e>1&&e!==process.pid}function N(e,r){try{return r(-e,0),"alive"}catch(n){let t=y(n);return t==="ESRCH"?"not_found":t==="EPERM"?"denied":"unknown"}}function M(e,r,n){try{return n(-e,r),"sent"}catch(t){let o=y(t);return o==="ESRCH"?"empty":o==="EPERM"?"denied":"failed"}}function _(){return performance.now()}async function T(e,r,n,t){let o=_()+n;for(;;){await E();let s=N(e,r);if(s==="not_found")return s;let i=o-_();if(i<=0)return s;await G(Math.min(t,i));}}async function me(e,r,n,t){for(;;){await E();let o=N(e,r);if(o==="not_found"||o==="alive")return o;let s=n-_();if(s<=0)return o;await G(Math.min(t,s));}}function d(e,r,n,t){return {status:r,groupId:e,...n?{lastSignal:n}:{},...t?{errorKind:t}:{}}}async function le(e,r={}){let n=r.signal??"SIGTERM",t=r.graceMs??b,o=r.hardConfirmMs??K,s=r.pollIntervalMs??g;if(!de(e))return d(e,"failed",void 0,"invalid_group_id");if(!se.includes(n)||!C(t,0,ie)||!C(o,ue,ae)||!C(s,1,ce))return d(e,"failed",void 0,"invalid_option");if((r.platform??process.platform)==="win32")return d(e,"unsupported",void 0,"unsupported_platform");let u=r.kill??process.kill,m=N(e,u);if(m==="not_found")return d(e,"exited");let a=t;if(m==="denied"&&n!=="SIGKILL"&&t>0){let p=_()+t,P=await me(e,u,p,s);if(P==="not_found")return d(e,"exited");if(P!=="alive")return d(e,"failed",void 0,P==="denied"?"probe_denied":"probe_failed");a=Math.max(0,p-_());}else if(m!=="alive")return d(e,"failed",void 0,m==="denied"?"probe_denied":"probe_failed");let c;if(n!=="SIGKILL"){let p=M(e,n,u);if(p==="empty")return d(e,"exited");if(p!=="sent")return d(e,"failed",void 0,p==="denied"?"signal_denied":"signal_failed");c=n;let P=await T(e,u,a,s);if(P==="not_found")return d(e,"exited",c);if(P!=="alive")return d(e,"failed",c,P==="denied"?"probe_denied":"probe_failed")}let f=M(e,"SIGKILL",u);if(f==="empty")return d(e,"exited",c);if(f!=="sent")return d(e,"failed",c,f==="denied"?"signal_denied":"signal_failed");c="SIGKILL";let l=await T(e,u,o,s);return l==="not_found"?d(e,"exited",c):l==="alive"?d(e,"failed",c,"still_running"):d(e,"failed",c,l==="denied"?"probe_denied":"probe_failed")}export{K as OWNED_GROUP_KILL_CONFIRM_MS,Z as PROCESS_START_TIME_TOLERANCE_MS,g as UNIX_PROCESS_POLL_INTERVAL_MS,L as UNIX_SIGKILL_CONFIRM_MS,b as UNIX_SIGTERM_GRACE_MS,q as checkProcessOwnership,Y as checkProcessOwnershipAsync,A as parseProcessElapsedSeconds,U as parseWindowsCreationDate,w as probeProcessLiveness,re as readProcessIdentity,te as readProcessIdentityAsync,le as terminateOwnedProcessGroup,oe as terminateProcessTree};

package/dist/esm/publish/index.js

@@ -0,0 +1,2 @@
+import*as pe from'path';import {resolve,isAbsolute,win32,relative,sep,dirname,join}from'path';import'url';import*as Ki from'crypto';import {createHash}from'crypto';import {isIP}from'net';import*as te from'fs';import {constants,readFileSync,existsSync,statSync,readdirSync}from'fs';import {realpath,stat,readdir,open,lstat}from'fs/promises';import*as Gs from'js-yaml';import {load}from'js-yaml';import'child_process';import*as qs from'os';import*as Qs from'tar';import {gunzipSync,gzipSync}from'zlib';var j=(e,n)=>()=>(e&&(n=e(e=0)),n);var I=j(()=>{});var C,Kn=j(()=>{I();C=class extends Error{constructor(t,i=t,o){super(i);this.code=t;this.currentRevision=o;}code;currentRevision;name="UiRuntimeError"};});function jt(e){return ua.test(e)||fa.test(e)}function me(){throw new C("INPUT_INVALID","JSON value is not projection-safe")}function Ia(e){let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function vt(e,n,t,i,o,r){if(n>i&&me(),e===null||typeof e=="string"||typeof e=="boolean")return typeof e=="string"&&(ya.test(e)||ma.test(e)&&!_a(o,r)||Aa.test(e))&&me(),e;if(typeof e=="number")return Number.isFinite(e)||me(),e;(typeof e!="object"||e===void 0||typeof e=="function"||typeof e=="bigint")&&me();let a=e;t.has(a)&&me(),t.add(a);try{if(Array.isArray(e))return e.map(c=>vt(c,n+1,t,i,o,r));Ia(a)||me();let s={};for(let[c,d]of Object.entries(e))jt(c)&&me(),s[c]=vt(d,n+1,t,i,[...o,c],r);return s}finally{t.delete(a);}}function Ie(e,n=0,t=[]){(!Number.isInteger(n)||n<0||n>ha)&&me(),(!Array.isArray(t)||t.some(o=>typeof o!="string"))&&me();let i=vt(e,0,new Set,ga+n,[],t);return (i===null||Array.isArray(i)||typeof i!="object")&&me(),i}function ln(e,n){if(!e||!n)return  false;let t=e.split("."),i=n.split(".");return t.length>=i.length&&i.every((o,r)=>t[r]===o)}function _a(e,n){if(e.length===0)return  false;let t=e.join(".");return n.some(i=>ln(t,i))}function un(e){try{let n=JSON.stringify(e);return n===void 0&&me(),n}catch{me();}}function Ft(e){return Array.isArray(e)?e.map(Ft):e!==null&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(n=>[n,Ft(e[n])])):e}function ie(e){return un(Ft(e))}function Vt(e){return Buffer.byteLength(e,"utf8")}var ua,fa,ya,Aa,ma,ga,ha,xe=j(()=>{I();Kn();ua=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,fa=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i,ya=/<\/?[A-Za-z][^>]*>/,Aa=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,ma=/^(?:https?|file|ftp|ws|wss):\/\//i;ga=8,ha=4;});var Zi=j(()=>{I();xe();});var Xn,Bt=j(()=>{I();Xn=["text/plain","application/json"];});var Qi=j(()=>{I();Bt();});function fn(e){return Pa.has(e)||Ta.test(e)||ba.test(e)}var eo,Pa,Ta,ba,Yn,Mn,Me,Ht,Gt,zt,$t,Jt,Ze=j(()=>{I();eo=["__proto__","prototype","constructor","proof","token","secret","password","cookie","authorization","private_key","private-key","stack","exception","plugin_text","url","uri","endpoint","path","filename","filepath","cwd","shell","directory","dir","folder"],Pa=new Set(eo),Ta=/(?:proof|token|secret|password|cookie|authorization|private[_-]?key|stack|exception|plugin[_-]?text)/i,ba=/(?:url|uri|endpoint|path|file(?:name|path)?|cwd|shell|directory|dir|folder)$/i;Yn=/^[A-Za-z0-9_]+$/,Mn=/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/,Me=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Ht=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/,Gt=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,zt=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/,$t=["blue","violet","emerald","amber","rose","sky","slate","indigo"],Jt=["inline","panel"];});function Wt(e){return typeof e=="string"&&Xn.includes(e)}var no=j(()=>{I();Bt();Ze();});function qn(e){if(!Kt(e))return  false;let n=Object.keys(e);return !(n.some(t=>t!=="in"&&t!=="out")||n.length===0||Object.hasOwn(e,"in")&&!Na(e.in)||Object.hasOwn(e,"out")&&!Sa(e.out))}function Na(e){return Kt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="required")&&Object.hasOwn(e,"mediaType")&&Wt(e.mediaType)&&(!Object.hasOwn(e,"required")||typeof e.required=="boolean"):false}function Sa(e){return Kt(e)?Object.keys(e).every(t=>t==="mediaType"||t==="range")&&Object.hasOwn(e,"mediaType")&&Wt(e.mediaType)&&(!Object.hasOwn(e,"range")||typeof e.range=="boolean"):false}function Kt(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}var Xt=j(()=>{I();Qi();no();new TextDecoder("utf-8",{fatal:true,ignoreBOM:true});});function Qn(e){return Da.includes(e)}function et(e){return Number.isSafeInteger(e)&&e>=Zn.min&&e<=Zn.max}var Da,Zn,to,Yt=j(()=>{I();Da=[5,15,30,60],Zn=Object.freeze({min:15e3,max:6e5,default:3e5}),to=1;});function tt(e){return Number.isSafeInteger(e)&&e>=nt.min&&e<=nt.max}function it(e){return Ma.includes(e)}var nt,io,Ma,qt=j(()=>{I();nt=Object.freeze({min:6e4,max:18e5,default:6e5}),io=1,Ma=["start","status","cancel"];});function ye(e){let t=e.renderer!==void 0||e.surfaces!==void 0||e.stateProjection!==void 0||e.dataPaths!==void 0||e.usage!==void 0||e.detailPanel!==void 0||e.displayModes!==void 0||e.summaryProjection!==void 0||e.downloads!==void 0||e.legacy!==void 0||Object.values(e.actions).some(o=>o.resultProjection!==void 0)?{id:e.id,version:e.version,...e.renderer===void 0?{}:{renderer:e.renderer},...e.surfaces===void 0?{}:{surfaces:e.surfaces},...e.stateProjection===void 0?{}:{stateProjection:e.stateProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.legacy===void 0?{}:{legacy:e.legacy},...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},...e.downloads===void 0?{}:{downloads:e.downloads},...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},actions:e.actions}:e.sourceHash===void 0?{id:e.id,version:e.version,actions:e.actions}:{id:e.id,version:e.version,sourceHash:e.sourceHash,actions:e.actions},i=Ie(t);return createHash("sha256").update(ie(i)).digest("hex")}function Qt(e){return `${e.id}\0${e.version}`}function ge(e){if(!/^\d+$/.test(String(e.version))||e.version<1||e.id.length<1||e.id.length>128)throw new C("DEFINITION_UNSUPPORTED","UI definition is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!Oa.test(e.sourceHash)))throw new C("DEFINITION_UNSUPPORTED","UI definition source hash is invalid");if(!/^[0-9a-f]{64}$/.test(e.hash)||ye(e)!==e.hash)throw new C("DEFINITION_UNSUPPORTED","UI definition hash is invalid");for(let[n,t]of Object.entries(e.actions)){if(!n||!Array.isArray(t.capabilities)||t.capabilities.some(i=>!Ra(i)))throw new C("DEFINITION_UNSUPPORTED","UI action declaration is invalid");if(t.confirmation!==void 0&&t.confirmation!=="none"&&t.confirmation!=="native")throw new C("DEFINITION_UNSUPPORTED","UI action confirmation is invalid");if(t.mutation!==void 0&&typeof t.mutation!="boolean")throw new C("DEFINITION_UNSUPPORTED","UI action mutation policy is invalid");if(t.inputKeys&&(!Array.isArray(t.inputKeys)||t.inputKeys.some(i=>typeof i!="string"||!i)))throw new C("DEFINITION_UNSUPPORTED","UI action input declaration is invalid");if(t.dataInputs!==void 0&&(!Array.isArray(t.dataInputs)||new Set(t.dataInputs).size!==t.dataInputs.length||t.dataInputs.some(i=>typeof i!="string"||!i||t.inputKeys!==void 0&&!t.inputKeys.includes(i))))throw new C("DEFINITION_UNSUPPORTED","UI action data input declaration is invalid");if(t.resultProjection&&Zt(t.resultProjection),t.schedule!==void 0&&(!Qn(t.schedule.everyMinutes)||!et(t.schedule.timeoutMs)))throw new C("DEFINITION_UNSUPPORTED","UI action schedule declaration is invalid");if(t.job!==void 0&&(typeof t.job!="object"||Object.keys(t.job).some(i=>i!=="deadlineMs")||!tt(t.job.deadlineMs)))throw new C("DEFINITION_UNSUPPORTED","UI action job declaration is invalid");if(t.jobAccess!==void 0&&(!Array.isArray(t.jobAccess)||t.jobAccess.length===0||new Set(t.jobAccess).size!==t.jobAccess.length||!t.jobAccess.every(it)||t.job!==void 0))throw new C("DEFINITION_UNSUPPORTED","UI action job control declaration is invalid");if(t.content!==void 0&&!qn(t.content))throw new C("DEFINITION_UNSUPPORTED","UI action content declaration is invalid");if(t.env!==void 0&&(!Array.isArray(t.env)||t.env.length===0||new Set(t.env).size!==t.env.length||t.env.some(i=>i!=="CREWX_APP_INSTANCE_ID"&&i!=="CREWX_THREAD_ID")))throw new C("DEFINITION_UNSUPPORTED","UI action environment declaration is invalid")}if(e.renderer!==void 0&&(!e.renderer||e.renderer.length>128))throw new C("DEFINITION_UNSUPPORTED","UI definition renderer is invalid");if(e.surfaces&&(!Array.isArray(e.surfaces)||e.surfaces.some(n=>!n||n.length>64)))throw new C("DEFINITION_UNSUPPORTED","UI definition surfaces are invalid");if(e.usage!==void 0&&e.usage!=="card"&&e.usage!=="window")throw new C("DEFINITION_UNSUPPORTED","UI definition usage is invalid");if(e.detailPanel!==void 0&&typeof e.detailPanel!="boolean")throw new C("DEFINITION_UNSUPPORTED","UI definition detailPanel is invalid");if(e.displayModes&&(!Array.isArray(e.displayModes)||e.displayModes.length===0||new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(n=>n!=="inline"&&n!=="floating"&&n!=="focused")))throw new C("DEFINITION_UNSUPPORTED","UI definition displayModes are invalid");if(e.usage==="card"&&e.displayModes!==void 0)throw new C("DEFINITION_UNSUPPORTED","Card definitions cannot declare displayModes");if(e.usage==="window"&&e.detailPanel!==void 0)throw new C("DEFINITION_UNSUPPORTED","Window definitions cannot declare detailPanel");if(e.stateProjection&&Zt(e.stateProjection),e.summaryProjection){Zt(e.summaryProjection);let n=new Set(e.stateProjection?.allow??[]);if(e.summaryProjection.allow.some(t=>!n.has(t)))throw new C("DEFINITION_UNSUPPORTED","UI summary projection exceeds state projection")}if(e.legacy!==void 0){if(!e.legacy||typeof e.legacy!="object"||Array.isArray(e.legacy)||Object.keys(e.legacy).some(o=>!["readTool","actionTool","hostTools","agentAccess"].includes(o)))throw new C("DEFINITION_UNSUPPORTED","UI legacy metadata is invalid");let n=new Set;for(let[o,r]of [["readTool",e.legacy.readTool],["actionTool",e.legacy.actionTool]])if(r!==void 0){if(wa(r,o==="readTool"),n.has(r.name))throw new C("DEFINITION_UNSUPPORTED","UI legacy tool names collide");n.add(r.name);}let t=e.legacy.hostTools;if(t!==void 0){if(!t||typeof t!="object"||Array.isArray(t))throw new C("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");let o={"doc.open":"crewx_app_html_viewer_open","pty.connect":"crewx_app_terminal_connect"};for(let[r,a]of Object.entries(t)){if(!Object.hasOwn(o,r)||o[r]!==a||typeof a!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(a)||n.has(a))throw new C("DEFINITION_UNSUPPORTED","UI legacy host tools are invalid");n.add(a);}}let i=e.legacy.agentAccess;if(i!==void 0&&(!i||typeof i!="object"||Array.isArray(i)||Object.entries(i).some(([o,r])=>!o||!Object.hasOwn(e.actions,o)||r!=="allowed"&&r!=="denied")))throw new C("DEFINITION_UNSUPPORTED","UI legacy agent access is invalid");if(e.legacy.actionTool!==void 0&&(!i||Object.keys(i).length===0))throw new C("DEFINITION_UNSUPPORTED","UI legacy action tool requires its complete agent access map")}if(e.downloads!==void 0&&e.downloads!==true)throw new C("DEFINITION_UNSUPPORTED","UI definition downloads is invalid");if(e.dataPaths!==void 0){let n=new Set(["__proto__","prototype","constructor"]);if(!Array.isArray(e.dataPaths)||e.dataPaths.length>16||new Set(e.dataPaths).size!==e.dataPaths.length||e.dataPaths.some(t=>typeof t!="string"||!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(t)||t.split(".").some(i=>n.has(i))||!(e.stateProjection?.allow??[]).some(i=>ln(t,i))))throw new C("DEFINITION_UNSUPPORTED","UI definition dataPaths are invalid")}}function wa(e,n){if(!e||typeof e!="object"||Array.isArray(e))throw new C("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");let t=e,i=["name","description","inputSchema","textFallback","visibility"],o=Object.hasOwn(t,"fixedResult");if(Object.keys(t).some(r=>!i.includes(r)&&!(n&&r==="fixedResult"))||i.some(r=>!Object.hasOwn(t,r))||typeof t.name!="string"||!/^[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(t.name)||typeof t.description!="string"||t.description.trim().length===0||t.description.length>8192||typeof t.textFallback!="string"||t.textFallback.trim().length===0||t.textFallback.length>16384||!t.inputSchema||typeof t.inputSchema!="object"||Array.isArray(t.inputSchema)||!Array.isArray(t.visibility)||t.visibility.length===0||t.visibility.some(r=>r!=="model"&&r!=="app")||new Set(t.visibility).size!==t.visibility.length)throw new C("DEFINITION_UNSUPPORTED","UI legacy tool metadata is invalid");try{let r=Ie(t.inputSchema);if(r.type!==void 0&&r.type!=="object")throw new Error("schema type");if(o){if(!n)throw new Error("fixed result location");let a=t.fixedResult;if(!a||typeof a!="object"||Array.isArray(a))throw new Error("fixed result");let s=a;if(Object.keys(s).sort().join(",")!=="argsPolicy,structuredContent"||s.argsPolicy!=="empty-only"&&s.argsPolicy!=="ignore"||!s.structuredContent||typeof s.structuredContent!="object"||Array.isArray(s.structuredContent))throw new Error("fixed result");let c=Ie(s.structuredContent);if(Vt(un(c))>4*1024)throw new Error("fixed result size")}}catch{throw new C("DEFINITION_UNSUPPORTED","UI legacy tool metadata is not projection-safe")}}function Zt(e){if(!Array.isArray(e.allow)||e.allow.some(n=>!/^[A-Za-z0-9_]+(?:\.[A-Za-z0-9_]+)*$/.test(n)))throw new C("DEFINITION_UNSUPPORTED","UI projection policy is invalid")}function Ra(e){return e.length>0&&e.length<=128&&e!=="*"&&e!=="all"&&!/[/*]/.test(e)}var Oa,Qe=j(()=>{I();xe();Kn();Xt();Yt();qt();Oa=/^[0-9a-f]{64}$/;});var $,ve,ei=j(()=>{I();$="dist/tools.json",ve="dist/main.mjs";});var Le,oo,oe,yn=j(()=>{I();Le="view.call",oo="crewxImage",oe="window";});function ro(e){if(!Array.isArray(e)||e.length===0)return  false;let n=new Set;for(let t of e){if(!Ca.some(i=>i===t)||n.has(t))return  false;n.add(t);}return  true}var Ca,so=j(()=>{I();Ca=["CREWX_APP_INSTANCE_ID","CREWX_THREAD_ID"];});function W(e){throw new ni(e)}function $a(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Ja(e,n){let t=Object.getOwnPropertyDescriptor(e,n);return (!t||!("value"in t))&&W("CSP_ORIGIN_INVALID"),t.value}function ot(e,n){if(!Object.prototype.hasOwnProperty.call(e,n))return [];let t=Ja(e,n);Array.isArray(t)||W("CSP_ORIGIN_INVALID"),Reflect.ownKeys(t).some(r=>typeof r!="string"||r!=="length"&&!/^(?:0|[1-9][0-9]*)$/.test(r))&&W("CSP_ORIGIN_INVALID");let o=[];for(let r=0;r<t.length;r+=1)(!Object.prototype.hasOwnProperty.call(t,r)||typeof t[r]!="string")&&W("CSP_ORIGIN_INVALID"),o.push(t[r]);return Object.keys(t).length!==t.length&&W("CSP_ORIGIN_INVALID"),o}function Wa(e){let n;try{n=JSON.stringify(e);}catch{W("CSP_ORIGIN_INVALID");}return n===void 0&&W("CSP_ORIGIN_INVALID"),new TextEncoder().encode(n).byteLength}function po(e,n){/\s|\\/u.test(e)&&W("CSP_ORIGIN_INVALID");let t=Va.exec(e);t||W("CSP_ORIGIN_INVALID");let i=t[1].toLowerCase(),o=t[2];(o.includes("@")||o.includes("%")||o.includes("*"))&&W("CSP_ORIGIN_INVALID"),(o.startsWith("[")?Ba:Ha).test(o)||W("CSP_ORIGIN_INVALID"),i==="wss"&&n!=="connectDomains"&&W("CSP_ORIGIN_INVALID");let a;try{a=new URL(e);}catch{W("CSP_ORIGIN_INVALID");}(a.protocol!==`${i}:`||a.username!==""||a.password!==""||a.search!==""||a.hash!=="")&&W("CSP_ORIGIN_INVALID");let s=a.hostname.toLowerCase();if((!s||s.includes("%"))&&W("CSP_ORIGIN_INVALID"),!s.startsWith("[")){let d=s.endsWith(".")?s.slice(0,-1):s;(d.length===0||d.length>253)&&W("CSP_ORIGIN_INVALID"),d.split(".").some(l=>l.length>63||!Ga.test(l))&&W("CSP_ORIGIN_INVALID");}let c=a.origin;return (c==="null"||!c.startsWith(`${i}://`))&&W("CSP_ORIGIN_INVALID"),{origin:c,hostname:s}}function Ka(e){let n=e.split(".").map(Number);return ((n[0]*256+n[1])*256+n[2])*256+n[3]}function lo(e,n,t){let i=4294967295<<32-t>>>0;return (e&i)===(n&i)}function yo(e){let n=Ka(e);return lo(n,3221225472,24)?n!==3221225481&&n!==3221225482:za.some(([t,i])=>lo(n,t,i))}function Xa(e){let n=e.indexOf("::"),t=(n<0?e:e.slice(0,n)).split(":").filter(Boolean),i=n<0?[]:e.slice(n+2).split(":").filter(Boolean);return (n<0?t:[...t,...Array(8-t.length-i.length).fill("0"),...i]).reduce((r,a)=>r<<16n|BigInt(Number.parseInt(a,16)),0n)}function Ya(e){let n=Xa(e),t=Number(n>>112n),i=Number(n>>96n&0xffffn);if(n>>32n===0xffffn){let o=Number(n&0xffffffffn);return yo([o>>>24&255,o>>>16&255,o>>>8&255,o&255].join("."))}return t<8192||t>16383||t===8193&&i<=511||t===8193&&i===3512||t===8194||t===16383&&i<=4095}function qa(e,n){let t=e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e,i=isIP(t);if(i===4)return yo(t);if(i===6)return Ya(t);let o=e.toLowerCase().replace(/\.$/,"");return !o||!o.includes(".")||n.has(o)?true:ja.some(r=>o===r||o.endsWith(`.${r}`))}function uo(e){return Object.freeze([...new Set(e.map(n=>n.origin))].sort())}function fo(e){return JSON.stringify({baseUriDomains:[],connectDomains:e.connectDomains,declared:e.declared,frameDomains:e.frameDomains,resourceDomains:[]})}function Ao(e,n={}){if(e===void 0){let f=fo({declared:false,connectDomains:[],frameDomains:[]});return Object.freeze({declared:false,connectDomains:Object.freeze([]),frameDomains:Object.freeze([]),resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(f,"utf8").digest("hex")})}$a(e)||W("CSP_ORIGIN_INVALID");let t=Reflect.ownKeys(e);t.some(f=>typeof f!="string")&&W("CSP_ORIGIN_INVALID"),t.some(f=>!Fa.has(f))&&W("CSP_AXIS_UNKNOWN");let i=ot(e,"connectDomains"),o=ot(e,"frameDomains"),r=ot(e,"resourceDomains"),a=ot(e,"baseUriDomains");(r.length>0||a.length>0)&&W("CSP_AXIS_UNSUPPORTED"),(Wa(e)>Ua||i.length>co||o.length>co||i.length+o.length>xa||[...i,...o].some(f=>new TextEncoder().encode(f).byteLength>va))&&W("CSP_LIMIT_EXCEEDED");let c=i.map(f=>po(f,"connectDomains")),d=o.map(f=>po(f,"frameDomains")),p=new Set((n.runtimeHostnames??[]).map(f=>f.toLowerCase().replace(/\.$/,"")));[...c,...d].some(f=>qa(f.hostname,p))&&W("CSP_ORIGIN_FORBIDDEN");let l={declared:true,connectDomains:uo(c),frameDomains:uo(d)},y=fo(l);return Object.freeze({...l,resourceDomains:Object.freeze([]),baseUriDomains:Object.freeze([]),cspHash:createHash("sha256").update(y,"utf8").digest("hex")})}var Ua,co,xa,va,Fa,ja,Va,Ba,Ha,Ga,za,ni,mo=j(()=>{I();Ua=4096,co=16,xa=32,va=512,Fa=new Set(["connectDomains","frameDomains","resourceDomains","baseUriDomains"]),ja=["localhost","local","internal","home.arpa","test","example","invalid","onion","lan","corp","home","intranet","private","localdomain"],Va=/^(https|wss):\/\/([^/?#]+)$/i,Ba=/^\[[^\]]+\](?::[0-9]+)?$/,Ha=/^[^:\[\]]+(?::[0-9]+)?$/,Ga=/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/,za=[[0,8],[1681915904,10],[167772160,8],[2130706432,8],[2851995648,16],[2886729728,12],[3221225984,24],[3227017984,24],[3232235520,16],[3323068416,15],[3325256704,24],[3405803776,24],[3758096384,4],[4026531840,4]],ni=class extends Error{constructor(t){super(t);this.code=t;}code;name="UiPluginCspNormalizationError"};});function On(e,n){return n===void 0||n===""?e:e===""?n:n.startsWith("[")?`${e}${n}`:`${e}.${n}`}function u(e,n=e,t,i){throw new de(e,n,t,i)}function z(e,n){try{return n()}catch(t){throw t instanceof de?t.withPathPrefix(e):t}}function J(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function R(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function wc(e,n){let t={};for(let[i,o]of Object.entries(e))n.includes(i)||(t[i]=o);return t}function X(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e).find(a=>!i.has(a));o!==void 0&&u("MANIFEST_INVALID","MANIFEST_INVALID",o,"unknown-key");let r=n.find(a=>!R(e,a));r!==void 0&&u("MANIFEST_INVALID","MANIFEST_INVALID",r,"missing-key");}function ct(e,n=false,t=false,i=false){return nc.test(e)||!i&&ic.test(e)||tc.test(e)||t&&Io.test(e)||oc.test(e)&&!(n&&/^\s*data:/i.test(e)&&!Io.test(e))}function at(e,n=new Set,t=0,i=false,o=false,r=""){if(typeof e=="string"){ct(e,i,o)&&u("UNSAFE_VALUE","UNSAFE_VALUE",r,"unsafe-value");return}if(!(e===null||typeof e!="object")){(t>8||n.has(e))&&u("MANIFEST_INVALID","MANIFEST_INVALID",r),n.add(e);try{if(Array.isArray(e)){e.forEach((a,s)=>at(a,n,t+1,!1,!1,On(r,`[${s}]`)));return}J(e)||u("MANIFEST_INVALID","MANIFEST_INVALID",r);for(let[a,s]of Object.entries(e))at(s,n,t+1,i&&t===0&&(a==="name"||a==="description"),o,On(r,a));}finally{n.delete(e);}}}function Oe(e,n){let t=e[n];return typeof t!="string"&&u("MANIFEST_INVALID"),t}function Ee(e,n,t){let i=e[n];return (!Number.isSafeInteger(i)||i<t)&&u("MANIFEST_INVALID"),i}function ti(e){return ec.test(e)||u("MANIFEST_INVALID"),e}function An(e){return Qa.test(e)||u("TOKEN_INVALID"),e}function Rc(e){return wo.test(e)||u("MANIFEST_INVALID"),e}function Cc(e){J(e)||u("MANIFEST_INVALID");let n={};for(let[t,i]of Object.entries(e)){let o=Rc(t);J(i)||u("MANIFEST_INVALID");let r=i.type;if(r==="text"){X(i,["type","maxLength"]),n[o]={type:r,maxLength:Ee(i,"maxLength",1)};continue}if(r==="text-list"){X(i,["type","max","itemMaxLength"]),n[o]={type:r,max:Ee(i,"max",0),itemMaxLength:Ee(i,"itemMaxLength",1)};continue}if(r==="step-list"){X(i,["type","min","max","labelMaxLength","detailMaxLength"]);let a=Ee(i,"min",0),s=Ee(i,"max",1);a>s&&u("MANIFEST_INVALID"),n[o]={type:r,min:a,max:s,labelMaxLength:Ee(i,"labelMaxLength",1),detailMaxLength:Ee(i,"detailMaxLength",1)};continue}typeof r=="string"&&u("SCHEMA_TYPE_UNSUPPORTED"),u("MANIFEST_INVALID");}return n}function kc(e,n,t){let i=e[n];(!i||i.type!==t)&&u("MANIFEST_INVALID");}function rt(e,n,t){let i=Oe(e,"field");return wo.test(i)||u("MANIFEST_INVALID"),kc(n,i,t),i}function Uc(e,n){J(e)||u("MANIFEST_INVALID");let t=e.primitive;switch(typeof t!="string"&&u("MANIFEST_INVALID"),Oc.includes(t)||u("PRIMITIVE_UNKNOWN"),t){case "card-shell":return X(e,["primitive"]),{primitive:t};case "meta-banner":return X(e,["primitive","badgeToken","noticeToken"]),{primitive:t,badgeToken:An(Oe(e,"badgeToken")),noticeToken:An(Oe(e,"noticeToken"))};case "heading":return X(e,["primitive","field"]),{primitive:t,field:rt(e,n,"text")};case "labeled-text":return X(e,["primitive","titleToken","field","variant"]),e.variant!=="callout"&&u("MANIFEST_INVALID"),{primitive:t,titleToken:An(Oe(e,"titleToken")),field:rt(e,n,"text"),variant:"callout"};case "step-flow":return X(e,["primitive","titleToken","field"]),{primitive:t,titleToken:An(Oe(e,"titleToken")),field:rt(e,n,"step-list")};case "text-list":{X(e,["primitive","titleToken","field"],["emptyToken","hideWhenEmpty"]);let i={primitive:t,titleToken:An(Oe(e,"titleToken")),field:rt(e,n,"text-list")};return R(e,"emptyToken")&&(i.emptyToken=An(Oe(e,"emptyToken"))),R(e,"hideWhenEmpty")&&(typeof e.hideWhenEmpty!="boolean"&&u("MANIFEST_INVALID"),i.hideWhenEmpty=e.hideWhenEmpty),i}}return u("MANIFEST_INVALID")}function xc(e,n){return Array.isArray(e)||u("MANIFEST_INVALID"),e.map(t=>Uc(t,n))}function q(e="v2 manifest exceeds a contract limit",n,t){return u("LIMIT_EXCEEDED",e,n,t)}function he(e="initial state is not projection-safe"){return u("INITIAL_STATE_INVALID",e)}function go(e,n){return (typeof e!="string"||e.length===0||e.length>4096||e.trim().length===0||bc.test(e)||Nc.test(e))&&u("MANIFEST_INVALID",`${n} is invalid`),(ct(e,true,true)||rc.test(e)||sc.test(e)||ac.test(e))&&u("UNSAFE_VALUE",`${n} contains an unsafe value`),e}function ii(e,n){return (typeof e!="string"||!Me.test(e))&&u("MANIFEST_INVALID",`${n} is invalid`),e}function vc(e){return (typeof e!="string"||!Ht.test(e)||e==="*"||e==="all")&&u("MANIFEST_INVALID","action capability is invalid"),e}function Ro(e){return (typeof e!="string"||!Tc.test(e))&&u("MANIFEST_INVALID","resource hash is invalid"),e}function oi(e,n=new Set,t=0,i=""){if(typeof e=="string"){e.length>4096&&q("v2 manifest string is too long",i,"string-too-long");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||u("MANIFEST_INVALID","v2 manifest contains a non-finite number",i,"non-finite-number");return}(e===void 0||typeof e=="function"||typeof e=="bigint")&&u("MANIFEST_INVALID","v2 manifest contains a non-JSON value",i,"non-json-value"),typeof e!="object"&&u("MANIFEST_INVALID","MANIFEST_INVALID",i),t>8&&q("v2 manifest nesting is too deep",i,"too-deep"),n.has(e)&&u("MANIFEST_INVALID","v2 manifest contains a cycle",i,"cycle"),n.add(e);try{if(Array.isArray(e)){e.length>128&&q("v2 manifest array is too long",i,"array-too-long"),e.forEach((o,r)=>oi(o,n,t+1,On(i,`[${r}]`)));return}J(e)||u("MANIFEST_INVALID","v2 manifest contains a non-plain object",i,"non-plain-object");for(let[o,r]of Object.entries(e))oi(r,n,t+1,On(i,o));}finally{n.delete(e);}}}function Co(e){return (typeof e!="string"||e.length>4096||!Mn.test(e))&&(typeof e=="string"&&e.length>4096&&q("projection path is too long"),u("MANIFEST_INVALID","projection paths must be canonical exact paths")),e.split(".").some(t=>fn(t)||t===oo)&&u("MANIFEST_INVALID","projection paths cannot address reserved state keys"),e}function ri(e){J(e)||u("MANIFEST_INVALID","projection policy must be an object"),X(e,["allow"]),Array.isArray(e.allow)||u("MANIFEST_INVALID","projection allow must be an array"),e.allow.length>128&&q("projection allowlist is too long");let n=[],t=new Set;for(let i of e.allow){let o=Co(i);t.has(o)&&u("MANIFEST_INVALID","projection allowlist contains a duplicate path"),t.add(o),n.push(o);}return {allow:n}}function Fc(e,n){if(e===void 0)return;Array.isArray(e)||u("MANIFEST_INVALID","dataPaths must be an array"),e.length>Sc&&q("dataPaths exceed the v2 limit");let t=[],i=new Set;for(let o of e){let r=Co(o);i.has(r)&&u("MANIFEST_INVALID","dataPaths contain a duplicate path"),n.some(a=>ln(r,a))||u("MANIFEST_INVALID","dataPaths must be projection-allowed"),i.add(r),t.push(r);}return t}function jc(e){Array.isArray(e)||u("MANIFEST_INVALID","deviceFeatures must be an array",void 0,"array"),e.length>Dc&&u("MANIFEST_INVALID","deviceFeatures allow at most 16 names",void 0,"too-many-items");let n=[],t=new Set;for(let[i,o]of e.entries()){let r=`[${i}]`;typeof o!="string"&&u("MANIFEST_INVALID","a device feature name must be a string",r,"string"),o.length===0&&u("MANIFEST_INVALID","a device feature name must not be empty",r,"empty"),o.length>Mc&&u("MANIFEST_INVALID","a device feature name is at most 32 characters",r,"too-long"),Lc.test(o)||u("MANIFEST_INVALID","a device feature name starts with a lowercase letter and holds only letters and digits",r,"format"),t.has(o)&&u("MANIFEST_INVALID","deviceFeatures contain a duplicate name",r,"duplicate-item"),t.add(o),n.push(o);}return n}function Vc(e){if(e!==false)return e!==true&&u("MANIFEST_INVALID","downloads must be true or false",void 0,"boolean"),true}function Bc(e){return typeof e!="boolean"&&u("MANIFEST_INVALID","desktopOnly must be true or false",void 0,"boolean"),e}function Hc(e){return (!J(e)||e.view!==true||Object.keys(e).some(n=>n!=="view"&&n!=="entry"))&&u("MANIFEST_INVALID",'share must be { "view": true } or { "view": true, "entry": "<path>" }',void 0,"share-shape"),R(e,"entry")?{view:true,entry:zc(e.entry)}:{view:true}}function zc(e){typeof e!="string"&&u("MANIFEST_INVALID","share.entry must be a string","entry","entry-shape");let n=(i,o)=>u("MANIFEST_INVALID",`share.entry ${o}`,"entry",i);e.length===0&&n("empty","must not be empty"),e.length>ho&&n("too-long",`must be at most ${ho} characters`),e.startsWith("/")&&n("absolute","must be relative to the App folder");let t=e.split("/");t.length>_o&&n("too-many-segments",`must have at most ${_o} segments`);for(let i of t)i.length===0&&n("empty-segment","must not contain an empty segment"),(i==="."||i==="..")&&n("dot-segment",'must not contain "." or ".." segments'),Gc.test(i)||n("segment-shape",'segments start with an ASCII letter or digit, then use only letters, digits, ".", "_" and "-"');return t[t.length-1].endsWith(".html")||n("extension","must name a file ending in .html"),e}function $c(e){return (!J(e)||Object.keys(e).length!==1||typeof e.root!="string")&&u("MANIFEST_INVALID",'files must be exactly { "root": "<workspace folder>" }',void 0,"files-shape"),{root:Yc(e.root)}}function Yc(e){let n=e.normalize("NFC"),t=(r,a)=>u("MANIFEST_INVALID",`files.root ${a}`,"root",r);n.length===0&&t("empty","must not be empty"),Xc.test(n)&&t("forbidden-character","must not contain control characters, backslash or colon"),(n.startsWith("/")||n.startsWith("~"))&&t("absolute","must be relative to the workspace"),Array.from(n).length>Eo&&t("too-long",`must be at most ${Eo} characters`);let i=n.split("/"),o=i[0].toLowerCase().replace(/[. ]+$/,"");Kc.includes(o)&&t("reserved-folder","must not start in an App code folder or a tool folder"),i.length<Jc&&t("too-shallow","must name a folder inside a top-level folder, such as docs/trips"),i.length>Po&&t("too-many-segments",`must have at most ${Po} segments`);for(let r of i)r.length===0&&t("empty-segment","must not contain an empty segment"),(r==="."||r==="..")&&t("dot-segment",'must not contain "." or ".." segments'),Array.from(r).length>To&&t("segment-too-long",`segments must be at most ${To} characters`),Wc.test(r)||t("segment-shape",'segments must start with a letter or digit and contain only letters, digits, combining marks, "_" or "-"');return n}function mn(e,n,t=Number.MAX_SAFE_INTEGER){return (!Number.isSafeInteger(e)||e<0||e>t)&&u("MANIFEST_INVALID",`${n} is invalid`),e}function bo(e,n){return (typeof e!="number"||!Number.isFinite(e))&&u("MANIFEST_INVALID",`${n} is invalid`),e}function si(e,n=0,t=new Set){if(typeof e=="string")return (e.length>4096||ct(e))&&u("UNSAFE_VALUE","schema enum contains an unsafe string"),e;if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||u("MANIFEST_INVALID","schema enum contains a non-finite number"),e;(n>8||typeof e!="object"||e===void 0)&&q("schema enum is too deep"),t.has(e)&&u("MANIFEST_INVALID","schema enum contains a cycle"),t.add(e);try{if(Array.isArray(e))return e.length>128&&q("schema enum array is too long"),e.map(o=>si(o,n+1,t));J(e)||u("MANIFEST_INVALID","schema enum contains a non-plain object");let i={};for(let[o,r]of Object.entries(e))fn(o)&&u("MANIFEST_INVALID","schema enum contains a reserved key"),i[o]=si(r,n+1,t);return i}finally{t.delete(e);}}function qc(e,n){if(e===void 0)return;Array.isArray(e)||u("MANIFEST_INVALID","schema required must be an array"),e.length>64&&q("schema required list is too long");let t=[],i=new Set;for(let o of e)(typeof o!="string"||!Mn.test(o))&&u("MANIFEST_INVALID","schema required contains an invalid key"),o.length>4096&&q("schema required key is too long"),i.has(o)&&u("MANIFEST_INVALID","schema required contains a duplicate key"),n&&!Object.prototype.hasOwnProperty.call(n,o)&&u("MANIFEST_INVALID","schema required references an undeclared property"),i.add(o),t.push(o);return t}function Zc(e,n){let t=n?Mn:Yn;return e.length>4096&&q("schema property name is too long"),(!t.test(e)||e.split(".").some(i=>fn(i)))&&u("MANIFEST_INVALID","schema property name is invalid"),e}function ai(e,n=0,t=false){J(e)||u("MANIFEST_INVALID","action inputSchema must be an object"),n>8&&q("action inputSchema is too deep");let i=e.type;i!=="object"&&i!=="string"&&i!=="number"&&i!=="integer"&&i!=="boolean"&&i!=="array"&&i!=="null"&&(typeof i=="string"&&u("SCHEMA_TYPE_UNSUPPORTED","action inputSchema type is unsupported"),u("MANIFEST_INVALID","action inputSchema type is required"));let o=["type","enum"];i==="string"&&o.push("minLength","maxLength"),i==="array"&&o.push("minItems","maxItems","items"),i==="object"&&o.push("minProperties","maxProperties","properties","required","additionalProperties"),(i==="number"||i==="integer")&&o.push("minimum","maximum"),X(e,["type"],o.filter(s=>s!=="type"));let r={type:i};if(R(e,"enum")&&(Array.isArray(e.enum)||u("MANIFEST_INVALID","schema enum must be an array"),e.enum.length>128&&q("schema enum is too long"),r.enum=e.enum.map(s=>si(s))),i==="string"&&(R(e,"minLength")&&(r.minLength=mn(e.minLength,"schema minLength",4096)),R(e,"maxLength")&&(r.maxLength=mn(e.maxLength,"schema maxLength",4096)),r.minLength!==void 0&&r.maxLength!==void 0&&r.minLength>r.maxLength&&u("MANIFEST_INVALID","schema string length bounds are inverted")),(i==="number"||i==="integer")&&(R(e,"minimum")&&(r.minimum=bo(e.minimum,"schema minimum")),R(e,"maximum")&&(r.maximum=bo(e.maximum,"schema maximum")),r.minimum!==void 0&&r.maximum!==void 0&&r.minimum>r.maximum&&u("MANIFEST_INVALID","schema numeric bounds are inverted")),i==="array"&&(R(e,"minItems")&&(r.minItems=mn(e.minItems,"schema minItems",128)),R(e,"maxItems")&&(r.maxItems=mn(e.maxItems,"schema maxItems",128)),r.minItems!==void 0&&r.maxItems!==void 0&&r.minItems>r.maxItems&&u("MANIFEST_INVALID","schema array length bounds are inverted"),R(e,"items")&&(r.items=ai(e.items,n+1,false))),i==="object"){let s;if(R(e,"properties")){J(e.properties)||u("MANIFEST_INVALID","schema properties must be an object");let d=Object.entries(e.properties);d.length>64&&q("schema properties are too many"),s={};for(let[p,l]of d){let y=Zc(p,t);s[y]=ai(l,n+1,false);}r.properties=s;}R(e,"minProperties")&&(r.minProperties=mn(e.minProperties,"schema minProperties",64)),R(e,"maxProperties")&&(r.maxProperties=mn(e.maxProperties,"schema maxProperties",64)),r.minProperties!==void 0&&r.maxProperties!==void 0&&r.minProperties>r.maxProperties&&u("MANIFEST_INVALID","schema object property bounds are inverted");let c=qc(e.required,s);c!==void 0&&(r.required=c),R(e,"additionalProperties")&&(e.additionalProperties!==false&&u("MANIFEST_INVALID","schema additionalProperties must be false"),r.additionalProperties=false);}let a=JSON.stringify(r);return (a===void 0||Buffer.byteLength(a,"utf8")>2097152)&&q("action inputSchema subtree is too large"),r}function Qc(e){let n=ai(e,0,true);return (n.type!=="object"||!n.properties)&&u("MANIFEST_INVALID","action inputSchema must declare object properties"),n}function ed(e){if(J(e)||u("MANIFEST_INVALID","action backend must be an object"),e.type==="core"){X(e,Ic);let n=e.handler;return (typeof n!="string"||!Gt.test(n))&&u("MANIFEST_INVALID","core backend handler is invalid"),{type:"core",handler:n}}if(e.type==="skill"&&R(e,"entry"))return X(e,_c),e.entry!==ve&&u("MANIFEST_INVALID",`skill backend entry must be ${ve}`),{type:"skill",entry:ve};if(e.type==="skill"){X(e,gc,hc),(!Array.isArray(e.command)||e.command.length===0||e.command.length>16)&&u("MANIFEST_INVALID","skill backend command is invalid");let n=[];for(let i of e.command)(typeof i!="string"||i.length===0||i.length>256||!zt.test(i))&&u("MANIFEST_INVALID","skill backend command token is invalid"),n.push(i);let t=R(e,"env")?sd(e.env):void 0;return {type:"skill",command:n,...t===void 0?{}:{env:t}}}u("MANIFEST_INVALID","action backend type is unsupported");}function nd(e){J(e)||u("MANIFEST_INVALID","action must be an object"),X(e,lc,uc),R(e,"_meta")&&z("_meta",()=>ko(e._meta));let n=z("actionId",()=>ii(e.actionId,"actionId"));jt(n)&&u("MANIFEST_INVALID",`actionId "${n}" is not projection-safe`,"actionId");let t=z("capability",()=>vc(e.capability)),i=e.mutation;typeof i!="boolean"&&u("MANIFEST_INVALID","action mutation must be boolean","mutation");let o=z("inputSchema",()=>Qc(e.inputSchema)),r;if(R(e,"dataInputs")){Array.isArray(e.dataInputs)||u("MANIFEST_INVALID","action dataInputs must be an array","dataInputs");let f=o.properties,g=new Set,E=[];for(let P of e.dataInputs)(typeof P!="string"||!R(f,P)||g.has(P))&&u("MANIFEST_INVALID","action dataInputs must be unique declared properties","dataInputs"),g.add(P),E.push(P);r=E;}let a=z("resultProjection",()=>ri(e.resultProjection)),s=z("backend",()=>ed(e.backend)),c;R(e,"content")&&((s.type!=="skill"||!qn(e.content))&&u("MANIFEST_INVALID","action content declaration is invalid","content"),c=ad(e.content));let d;if(R(e,"confirmation")){let f=e.confirmation;f!=="none"&&f!=="native"&&u("MANIFEST_INVALID","action confirmation is invalid","confirmation"),d=f;}let p;R(e,"schedule")&&(p=z("schedule",()=>rd(e.schedule,{backend:s,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let l;R(e,"job")&&(p!==void 0&&u("MANIFEST_INVALID","an action is either the scheduled run or a job, not both","job"),l=z("job",()=>od(e.job,{backend:s,inputSchema:o,hasContent:c!==void 0,hasDataInputs:r!==void 0,confirmation:d})));let y;return R(e,"jobAccess")&&(l!==void 0&&u("MANIFEST_INVALID","an action is either the job or a job control, not both","jobAccess"),y=z("jobAccess",()=>id(e.jobAccess,{backend:s,hasContent:c!==void 0}))),{actionId:n,capability:t,mutation:i,inputSchema:o,resultProjection:a,backend:s,...c===void 0?{}:{content:c},...r===void 0?{}:{dataInputs:r},...d===void 0?{}:{confirmation:d},...p===void 0?{}:{schedule:p},...l===void 0?{}:{job:l},...y===void 0?{}:{jobAccess:y}}}function td(e,n,t){e.backend.type!=="core"||e.backend.handler!==Le||((n??oe)!==oe&&u("MANIFEST_INVALID","view.call is only available to screen Apps",`${t}.backend.handler`),e.mutation!==false&&u("MANIFEST_INVALID","view.call must be read-only",`${t}.mutation`),e.confirmation!=="none"&&u("MANIFEST_INVALID","view.call requires confirmation none",`${t}.confirmation`),(e.content!==void 0||e.schedule!==void 0||e.job!==void 0||e.jobAccess!==void 0)&&u("MANIFEST_INVALID","view.call cannot declare content, jobs, or schedules",t),e.resultProjection===void 0&&u("MANIFEST_INVALID","view.call requires resultProjection",`${t}.resultProjection`));}function id(e,n){return (n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==ve)&&u("MANIFEST_INVALID","jobAccess needs a tool-mode action","jobAccess"),n.hasContent&&u("MANIFEST_INVALID","a job control action takes no content","jobAccess"),(!Array.isArray(e)||e.length===0)&&u("MANIFEST_INVALID","jobAccess must list at least one operation","jobAccess"),(new Set(e).size!==e.length||!e.every(it))&&u("MANIFEST_INVALID","jobAccess must name each operation once: start, status or cancel","jobAccess"),Object.freeze([...e])}function od(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==ve)&&u("MANIFEST_INVALID","job needs a tool-mode action","job"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&u("MANIFEST_INVALID","a job action takes no content, dataInputs or native confirmation","job"),(n.inputSchema.required??[]).length>0&&u("MANIFEST_INVALID","a job action input must accept {}","inputSchema.required"),J(e)||u("MANIFEST_INVALID","job must be an object","job"),X(e,[],Ac);let t=R(e,"deadlineMs")?e.deadlineMs:nt.default;return tt(t)||u("MANIFEST_INVALID","job deadlineMs is invalid","job.deadlineMs"),{deadlineMs:t}}function rd(e,n){(n.backend.type!=="skill"||!("entry"in n.backend)||n.backend.entry!==ve)&&u("MANIFEST_INVALID","schedule needs a tool-mode action","schedule"),(n.hasContent||n.hasDataInputs||n.confirmation!==void 0&&n.confirmation!=="none")&&u("MANIFEST_INVALID","a scheduled action takes no content, dataInputs or native confirmation","schedule"),(n.inputSchema.required??[]).length>0&&u("MANIFEST_INVALID","a scheduled action input must accept {}","inputSchema.required"),J(e)||u("MANIFEST_INVALID","schedule must be an object","schedule"),X(e,fc,yc),Qn(e.everyMinutes)||u("MANIFEST_INVALID","schedule everyMinutes is invalid","schedule.everyMinutes");let t=R(e,"timeoutMs")?e.timeoutMs:Zn.default;return et(t)||u("MANIFEST_INVALID","schedule timeoutMs is invalid","schedule.timeoutMs"),{everyMinutes:e.everyMinutes,timeoutMs:t}}function sd(e){return ro(e)||u("MANIFEST_INVALID","skill backend env is invalid"),Object.freeze([...e])}function ad(e){return Object.freeze({...e.in===void 0?{}:{in:Object.freeze({...e.in})},...e.out===void 0?{}:{out:Object.freeze({...e.out})}})}function cd(e){return J(e)||u("INITIAL_STATE_INVALID","initialState must be an object"),X(e,Ec,Pc),e.path!=="ui/state.json"&&u("MANIFEST_INVALID","initialState path is not fixed"),R(e,"hash")?{path:"ui/state.json",hash:Ro(e.hash)}:{path:"ui/state.json"}}function dd(e){let n=["wasm","terminal","htmlDocuments","appBrowser"];return (!J(e)||Object.keys(e).length===0||Object.keys(e).some(t=>!n.includes(t)||e[t]!==true))&&u("MANIFEST_INVALID","runtime must contain only known capability flags set to true"),{...e.wasm===true?{wasm:true}:{},...e.terminal===true?{terminal:true}:{},...e.htmlDocuments===true?{htmlDocuments:true}:{},...e.appBrowser===true?{appBrowser:true}:{}}}function pd(e,n){let t;try{t=Ao(e);}catch(i){let o=i!==null&&typeof i=="object"&&"code"in i&&typeof i.code=="string"?i.code:"CSP_ORIGIN_INVALID";return u("MANIFEST_INVALID",o,void 0,o.toLowerCase().replace(/_/g,"-"))}if(t.frameDomains.length>0&&u("MANIFEST_INVALID","external origins in csp are not enabled in this rollout",void 0,"csp-not-enabled"),t.connectDomains.length!==0)return n?.terminal===true&&u("MANIFEST_INVALID","runtime.terminal cannot be combined with csp.connectDomains","connectDomains","terminal-with-connect-domains"),Object.freeze({connectDomains:t.connectDomains})}function ld(e,n){at(J(e)?wc(e,["csp","downloads","files","share"]):e,new Set,0,true,true),oi(e),J(e)||u("MANIFEST_INVALID"),X(e,dc,pc),R(e,"_meta")&&z("_meta",()=>ko(e._meta)),e.manifestVersion!==2&&u("MANIFEST_INVALID");let t;R(e,"runtime")&&(t=z("runtime",()=>dd(e.runtime)));let i;R(e,"csp")&&(i=z("csp",()=>pd(e.csp,t)));let o=z("pluginId",()=>ii(e.pluginId,"pluginId")),r=z("definitionId",()=>ii(e.definitionId,"definitionId")),a=z("version",()=>Ee(e,"version",1)),s=z("name",()=>go(e.name,"name")),c=z("description",()=>go(e.description,"description")),d;R(e,"icon")&&((typeof e.icon!="string"||!/^[a-z][a-z0-9-]{0,63}$/.test(e.icon))&&u("MANIFEST_INVALID","icon is invalid","icon"),d=e.icon);let p;R(e,"tone")&&((typeof e.tone!="string"||!$t.includes(e.tone))&&u("MANIFEST_INVALID","tone is invalid","tone"),p=e.tone),e.entry!=="ui/index.html"&&u("MANIFEST_INVALID","entry path is not fixed","entry","fixed-value");let l;R(e,"entryHash")&&(l=z("entryHash",()=>Ro(e.entryHash)));let y;R(e,"initialState")&&(y=z("initialState",()=>cd(e.initialState)));let f;R(e,"usage")&&(e.usage!=="card"&&e.usage!=="window"&&u("MANIFEST_INVALID","usage is invalid","usage"),f=e.usage);let g;R(e,"detailPanel")&&(typeof e.detailPanel!="boolean"&&u("MANIFEST_INVALID","detailPanel is invalid","detailPanel"),g=e.detailPanel);let E;if(R(e,"displayModes")){((f??oe)!==oe||!Array.isArray(e.displayModes)||e.displayModes.length===0)&&u("MANIFEST_INVALID","displayModes are only valid for window Apps","displayModes");let F=new Set(["inline","floating","focused"]);(new Set(e.displayModes).size!==e.displayModes.length||e.displayModes.some(fe=>typeof fe!="string"||!F.has(fe)))&&u("MANIFEST_INVALID","displayModes are invalid","displayModes"),E=e.displayModes;}(f??oe)===oe&&g!==void 0&&u("MANIFEST_INVALID","detailPanel is card-only","detailPanel");let P=n.mode??"local";P!=="local"&&P!=="installed"&&P!=="published"&&u("MANIFEST_INVALID","manifest mode is invalid"),P!=="local"&&l===void 0&&u("MANIFEST_INVALID","installed manifests require entryHash","entryHash","required-when-installed"),P!=="local"&&y!==void 0&&y.hash===void 0&&u("MANIFEST_INVALID","installed manifests require initialState.hash","initialState.hash","required-when-installed"),(!Array.isArray(e.surfaces)||e.surfaces.length===0)&&u("MANIFEST_INVALID","surfaces are invalid","surfaces"),e.surfaces.length>2&&q("surfaces exceed the v2 limit","surfaces","too-many-items");let U=[],x=new Set;for(let F of e.surfaces)(typeof F!="string"||!Jt.includes(F))&&u("MANIFEST_INVALID","surface is unsupported","surfaces"),x.has(F)&&u("MANIFEST_INVALID","surfaces contain a duplicate","surfaces","duplicate-item"),x.add(F),U.push(F);J(e.size)||u("MANIFEST_INVALID","size must be an object","size"),z("size",()=>X(e.size,["height"]));let T=z("size",()=>Ee(e.size,"height",1));T>720&&q("size.height exceeds the v2 limit","size.height","too-large");let k=z("stateProjection",()=>ri(e.stateProjection)),H=e.summaryProjection===void 0?void 0:z("summaryProjection",()=>ri(e.summaryProjection));H!==void 0&&H.allow.some(F=>!k.allow.includes(F))&&u("MANIFEST_INVALID","summaryProjection must be a subset of stateProjection.allow","summaryProjection");let S=z("dataPaths",()=>Fc(e.dataPaths,k.allow)),D=R(e,"deviceFeatures")?z("deviceFeatures",()=>jc(e.deviceFeatures)):void 0,w=R(e,"downloads")?z("downloads",()=>Vc(e.downloads)):void 0,m=R(e,"share")?z("share",()=>Hc(e.share)):void 0,A=R(e,"files")?z("files",()=>$c(e.files)):void 0,h=R(e,"desktopOnly")?z("desktopOnly",()=>Bc(e.desktopOnly)):void 0;Array.isArray(e.actions)||u("MANIFEST_INVALID","actions must be an array","actions"),e.actions.length>32&&q("actions exceed the v2 limit","actions","too-many-items");let b=[],B=new Set,v=0,Y=0;for(let[F,fe]of e.actions.entries()){let _e=`actions[${F}]`,De=z(_e,()=>nd(fe));if(td(De,f,_e),B.has(De.actionId)&&u("MANIFEST_INVALID","actions contain a duplicate actionId",`${_e}.actionId`,"duplicate-item"),De.schedule!==void 0&&(v+=1,v>to&&u("MANIFEST_INVALID","an App declares at most one scheduled action",`${_e}.schedule`,"duplicate-item")),De.job!==void 0&&(Y+=1,Y>io&&u("MANIFEST_INVALID","an App declares at most one job action",`${_e}.job`,"duplicate-item")),De.backend.type==="core"&&De.backend.handler==="state.set"){De.mutation||u("MANIFEST_INVALID","state.set actions must be mutations",`${_e}.mutation`);for(let la of Object.keys(De.inputSchema.properties))k.allow.includes(la)||u("MANIFEST_INVALID","state.set input paths must be projection-allowed",`${_e}.inputSchema.properties`);}B.add(De.actionId),b.push(De);}return {manifestVersion:2,pluginId:o,definitionId:r,version:a,name:s,description:c,...d===void 0?{}:{icon:d},...p===void 0?{}:{tone:p},entry:"ui/index.html",...l===void 0?{}:{entryHash:l},...t===void 0?{}:{runtime:t},...i===void 0?{}:{csp:i},...y===void 0?{}:{initialState:y},...f===void 0?{}:{usage:f},...g===void 0?{}:{detailPanel:g},...E===void 0?{}:{displayModes:E},surfaces:U,size:{height:T},stateProjection:k,...H===void 0?{}:{summaryProjection:H},...S===void 0?{}:{dataPaths:S},...D===void 0?{}:{deviceFeatures:D},...w===void 0?{}:{downloads:w},...m===void 0?{}:{share:m},...A===void 0?{}:{files:A},...h===void 0?{}:{desktopOnly:h},actions:b}}function ko(e){J(e)||u("MANIFEST_INVALID","_meta must be an object");let n=JSON.stringify(e);(n===void 0||Buffer.byteLength(n,"utf8")>mc)&&q("_meta exceeds the 4 KiB limit",void 0,"meta-too-large");}function ud(e){let n={},t={};for(let r of e.actions){n[r.actionId]={capabilities:[r.capability],inputKeys:Object.keys(r.inputSchema.properties??{}),...r.backend.type==="core"&&r.backend.handler===Le?{mutation:r.mutation}:{},...r.dataInputs===void 0?{}:{dataInputs:r.dataInputs},resultProjection:r.resultProjection,...r.confirmation===void 0?{}:{confirmation:r.confirmation},...r.content===void 0?{}:{content:r.content},...r.schedule===void 0?{}:{schedule:r.schedule},...r.job===void 0?{}:{job:r.job},...r.jobAccess===void 0?{}:{jobAccess:r.jobAccess},...r.backend.type!=="skill"||r.backend.env===void 0?{}:{env:r.backend.env}};let a=r.backend.type==="skill"||r.backend.type==="core"&&(r.backend.handler==="state.set"||r.backend.handler===Le);t[r.actionId]={actionId:r.actionId,mutation:r.mutation,backend:r.backend,launchPolicy:a?"allowed":"denied",...a?{}:{denialCode:"EXEC_DENIED"}};}let i={id:e.definitionId,version:e.version,renderer:"sandbox-html",...e.usage===void 0?{}:{usage:e.usage},...e.detailPanel===void 0?{}:{detailPanel:e.detailPanel},...e.displayModes===void 0?{}:{displayModes:e.displayModes},surfaces:e.surfaces,stateProjection:e.stateProjection,...e.summaryProjection===void 0?{}:{summaryProjection:e.summaryProjection},...e.dataPaths===void 0?{}:{dataPaths:e.dataPaths},...e.downloads===void 0?{}:{downloads:e.downloads},actions:n},o={entry:{path:"ui/index.html",...e.entryHash===void 0?{}:{hash:e.entryHash}},...e.initialState===void 0?{}:{initialState:e.initialState}};return {manifest:e,definition:i,handlers:t,resources:o}}function ci(e,n,t,i,o,r){if(typeof e=="string"){let a=o.length>0&&r.some(s=>ln(o.join("."),s));return (e.length>4096||ct(e,false,false,a))&&he("state contains an unsafe string"),e}if(e===null||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||he("state contains a non-finite number"),e;(e===void 0||typeof e!="object"||typeof e=="function"||typeof e=="bigint")&&he("state contains a non-JSON value"),t>8&&he("state is too deep"),n.has(e)&&he("state contains a cycle"),n.add(e);try{let a;if(Array.isArray(e))e.length>128&&he("state array is too long"),a=e.map(c=>ci(c,n,t+1,2097152,o,r));else {J(e)||he("state contains a non-plain object");let c={};for(let[d,p]of Object.entries(e))(d.length>4096||!Yn.test(d)||fn(d))&&(d.length>4096&&he("state key is too long"),he("state contains a reserved or invalid key")),c[d]=ci(p,n,t+1,2097152,[...o,d],r);a=c;}let s=JSON.stringify(a);return (s===void 0||Buffer.byteLength(s,"utf8")>i)&&he("state subtree is too large"),a}finally{n.delete(e);}}function pi(e,n=[]){J(e)||he("initial state must be a JSON object");let t=ci(e,new Set,0,2097152,[],n);return (t===null||Array.isArray(t)||typeof t!="object")&&he(),t}function fd(e,n={}){at(e),J(e)||u("MANIFEST_INVALID"),X(e,cc),e.manifestVersion!==1&&u("MANIFEST_INVALID");let t=ti(Oe(e,"pluginId")),i=ti(Oe(e,"definitionId")),o=Ee(e,"version",1),r=Ee(e,"primitiveSet",1),a=n.supportedPrimitiveSet??Za;(!Number.isSafeInteger(a)||a<1)&&u("MANIFEST_INVALID"),r>a&&u("PRIMITIVE_SET_UNSUPPORTED"),J(e.activation)||u("MANIFEST_INVALID"),X(e.activation,["kind","language"]),e.activation.kind!=="fenced-code"&&u("MANIFEST_INVALID");let s=ti(Oe(e.activation,"language")),c=Cc(e.schema),d=xc(e.layout,c);return {manifestVersion:1,pluginId:t,definitionId:i,version:o,primitiveSet:r,activation:{kind:"fenced-code",language:s},schema:c,layout:d}}function yd(e,n={}){return J(e)||u("MANIFEST_INVALID"),Object.hasOwn(e,"lineage")&&u("MANIFEST_INVALID","lineage is only allowed in product bundle indexes"),e.manifestVersion===2?ld(e,n):fd(e,n)}function nn(e,n={}){try{return yd(e,n)}catch(t){if(t instanceof de)throw t;return u("MANIFEST_INVALID")}}function wn(e,n={}){let t=nn(e,n);return t.manifestVersion===2?ud(t):t}var Za,Qa,ec,wo,nc,tc,ic,oc,Io,rc,sc,ac,cc,dc,pc,lc,uc,fc,yc,Ac,mc,Ic,gc,hc,_c,Ec,Pc,Tc,bc,Nc,Sc,Dc,Mc,Lc,Oc,de,ho,_o,Gc,Eo,Jc,Po,To,Wc,Kc,Xc,li=j(()=>{I();yn();xe();Xt();so();ei();Yt();qt();mo();Ze();Za=1,Qa=/^[a-z][a-zA-Z0-9]*(\.[a-zA-Z0-9]+)+$/,ec=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,wo=/^[A-Za-z][A-Za-z0-9_-]{0,63}$/,nc=/<\/?[A-Za-z][^>]*>/,tc=/^(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)/,ic=/^(?:https?|file|ftp|ws|wss):\/\//i,oc=/^\s*(?:javascript|data):/i,Io=/data:[^,\s]*,/i,rc=/(?:https?|file|ftp|ws|wss):\/\//i,sc=/javascript:/i,ac=/(?:^[\s]*|[\s"'(=])(?:[A-Za-z]:[\\/]|\\\\|~[\\/]|\/)(?=[^\s"'<>])[^\s"'<>]*/,cc=["manifestVersion","pluginId","definitionId","version","primitiveSet","activation","schema","layout"],dc=["manifestVersion","pluginId","definitionId","version","name","description","entry","surfaces","size","stateProjection","actions"],pc=["_meta","icon","tone","entryHash","runtime","csp","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","deviceFeatures","downloads","share","files","desktopOnly"],lc=["actionId","capability","mutation","inputSchema","resultProjection","backend"],uc=["confirmation","dataInputs","content","schedule","job","jobAccess","_meta"],fc=["everyMinutes"],yc=["timeoutMs"],Ac=["deadlineMs"],mc=4*1024,Ic=["type","handler"],gc=["type","command"],hc=["env"],_c=["type","entry"],Ec=["path"],Pc=["hash"],Tc=/^[0-9a-f]{64}$/,bc=/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F]/,Nc=/[\r\n]/,Sc=16,Dc=16,Mc=32,Lc=/^[a-z][A-Za-z0-9]{0,31}$/,Oc=["card-shell","meta-banner","heading","labeled-text","step-flow","text-list"],de=class e extends Error{constructor(t,i=t,o,r){super(i);this.code=t;this.path=o;this.rule=r;}code;path;rule;name="UiPluginValidationError";withPathPrefix(t){return new e(this.code,this.message,On(t,this.path),this.rule)}};ho=200,_o=3,Gc=/^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;Eo=200,Jc=2,Po=4,To=100,Wc=/^[\p{L}\p{N}][\p{L}\p{N}\p{M}_-]*$/u,Kc=[".git",".crewx","node_modules","apps","skills"],Xc=/[\u0000-\u001f\u007f-\u009f\\:<>"|?*]/;});function Vo(e){return typeof e=="string"&&e.length<=md&&Ad.test(e)}function V(e,n,t,i,o){throw new we(e,{path:n,rule:t,...i===void 0?{}:{message:i},...o===void 0?{}:{file:o}})}function re(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Z(e,n){return Object.prototype.hasOwnProperty.call(e,n)}function be(e){let n=`_meta["${Je}"]`;return e===void 0||e===""?n:e.startsWith("[")?`${n}${e}`:`${n}.${e}`}function _d(e){return e.toLowerCase().replace(/_/g,"-")}function Ed(e){if(e===void 0||e==="")return "";let n=/^([^.[]+)(.*)$/.exec(e);if(!n)return be(e);let[,t,i]=n;switch(t){case "pluginId":return `name${i}`;case "name":return `display_name${i}`;case "description":return `description${i}`;case "_meta":return `_meta${i}`;case "version":return be("definitionVersion");case "definitionId":return be("definitionId");default:return be(`${t}${i}`)}}function Bo(e,n,t){return {path:t(e.path),rule:e.rule??_d(e.code),...e.message!==e.code?{message:e.message}:{},file:n}}function Ho(e){return JSON.parse(JSON.stringify(e))}function yi(e,n,t=0,i=new Set){if(typeof e=="string"){e.length>4096&&V("LIMIT_EXCEEDED",n,"string-too-long"),(Id.test(e)||gd.test(e)||hd.test(e))&&V("UNSAFE_VALUE",n,"unsafe-value");return}if(!(e===null||typeof e=="boolean")){if(typeof e=="number"){Number.isFinite(e)||V("MANIFEST_INVALID",n,"non-finite-number");return}typeof e!="object"&&V("MANIFEST_INVALID",n,"non-json-value"),t>8&&V("LIMIT_EXCEEDED",n,"too-deep"),i.has(e)&&V("MANIFEST_INVALID",n,"cycle"),i.add(e);try{if(Array.isArray(e)){e.length>128&&V("LIMIT_EXCEEDED",n,"array-too-long"),e.forEach((o,r)=>yi(o,`${n}[${r}]`,t+1,i));return}re(e)||V("MANIFEST_INVALID",n,"non-plain-object");for(let[o,r]of Object.entries(e))yi(r,n===""?o:`${n}.${o}`,t+1,i);}finally{i.delete(e);}}}function Pe(e,n){return (typeof e!="string"||e.length===0)&&V("MANIFEST_INVALID",n,"string"),e}function gn(e,n){return re(e)||V("MANIFEST_INVALID",n,"object"),e}function Pd(e,n){Array.isArray(e)||V("MANIFEST_INVALID",n,"array"),e.forEach((t,i)=>Pe(t,`${n}[${i}]`));}function Td(e,n){typeof e!="boolean"&&V("MANIFEST_INVALID",n,"boolean");}function Rn(e,n,t,i){for(let o of Object.keys(e))!t.includes(o)&&!i.includes(o)&&V("MANIFEST_INVALID",`${n}.${o}`,"unknown-key");for(let o of t)Z(e,o)||V("MANIFEST_INVALID",`${n}.${o}`,"missing-key");}function bd(e,n){if(e!=="icon")switch(yi(n,e),e){case "long_description":case "homepage":case "documentation":case "support":case "license":Pe(n,e);return;case "author":{let t=gn(n,e);Rn(t,e,["name"],["email","url"]);for(let i of Object.keys(t))Pe(t[i],`${e}.${i}`);return}case "repository":{let t=gn(n,e);Rn(t,e,[],["type","url"]);for(let i of Object.keys(t))Pe(t[i],`${e}.${i}`);return}case "icons":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=gn(t,o);Rn(r,o,["src","size"],["theme"]),Pe(r.src,`${o}.src`),Pe(r.size,`${o}.size`),Z(r,"theme")&&Pe(r.theme,`${o}.theme`);});return}case "screenshots":case "keywords":case "privacy_policies":Pd(n,e);return;case "tools":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=gn(t,o);Rn(r,o,["name"],["description"]),Pe(r.name,`${o}.name`),Z(r,"description")&&Pe(r.description,`${o}.description`);});return}case "prompts":{Array.isArray(n)||V("MANIFEST_INVALID",e,"array"),n.forEach((t,i)=>{let o=`${e}[${i}]`,r=gn(t,o);Rn(r,o,["name","text"],["description","arguments"]),Pe(r.name,`${o}.name`),Pe(r.text,`${o}.text`);});return}case "tools_generated":case "prompts_generated":Td(n,e);return;case "localization":case "compatibility":case "user_config":gn(n,e);return;default:V("MANIFEST_INVALID",e,"unknown-key");}}function dt(e){return typeof e=="string"&&Me.test(e)?e:void 0}function Go(e){return Number.isSafeInteger(e)&&e>=1?e:void 0}function Nd(e){let n=dt(e.name);if(n===void 0)return;let t=e._meta,i=re(t)?t[Je]:void 0,o=re(i)?i:{},r=Z(o,"definitionId")?dt(o.definitionId):n,a=Z(o,"definitionVersion")?Go(o.definitionVersion):1;return {pluginId:n,...r===void 0?{}:{definitionId:r},...a===void 0?{}:{definitionVersion:a}}}function Sd(e){let n=dt(e.pluginId);if(n===void 0)return;let t=dt(e.definitionId),i=Go(e.version);return {pluginId:n,...t===void 0?{}:{definitionId:t},...i===void 0?{}:{definitionVersion:i}}}function Ii(e){try{let n=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));if(!re(n))return !1;let t=n._meta;return re(t)&&Z(t,Je)}catch{return  false}}function Dd(e,n){if(e===le)return n.builtinOnly===true;let t=n._meta,i=re(t)?t[Je]:void 0;return re(i)&&i.builtinOnly===true}function Md(e,n){Z(e,"server")&&V("MANIFEST_INVALID","server","server-unsupported","phase 1 runs CrewX-owned Apps only");for(let s of Object.keys(e))Ai.includes(s)||V("MANIFEST_INVALID",s,"unknown-key");for(let s of mi)Z(e,s)||V("MANIFEST_INVALID",s,"missing-key");e.manifest_version!==ui&&V("MANIFEST_INVALID","manifest_version","unsupported-version",`manifest_version must be "${ui}"`),Vo(e.version)||V("MANIFEST_INVALID","version","semver","version must be a semver.org version such as 0.1.0");let t=e._meta;re(t)||V("MANIFEST_INVALID","_meta","object"),Z(t,Je)||V("MANIFEST_INVALID",be(),"missing-key");let i=t[Je];re(i)||V("MANIFEST_INVALID",be(),"object");for(let s of Object.keys(i))fi.includes(s)||jo.includes(s)||V("MANIFEST_INVALID",be(s),"unknown-key");for(let s of fi)s==="actions"&&n!==void 0||Z(i,s)||V("MANIFEST_INVALID",be(s),"missing-key");if(n!==void 0&&Z(i,"actions")&&V("MANIFEST_INVALID",be("actions"),"two-truths",`actions are declared in both ${K} and ${$}; a server.ts App keeps them in the tools file only`),Ld(i.actions),Z(i,"definitionVersion")){let s=i.definitionVersion;(!Number.isSafeInteger(s)||s<1)&&V("MANIFEST_INVALID",be("definitionVersion"),"positive-integer");}let o={};for(let s of Fo)Z(e,s)&&(bd(s,e[s]),o[s]=Ho(e[s]));let r={};for(let[s,c]of Object.entries(t))s!==Je&&(r[s]=c);let a={manifestVersion:2,pluginId:e.name,definitionId:Z(i,"definitionId")?i.definitionId:e.name,version:Z(i,"definitionVersion")?i.definitionVersion:1,name:e.display_name,description:e.description};for(let[s,c]of Object.entries(i))s==="definitionId"||s==="definitionVersion"||(a[s]=c);return n!==void 0&&(a.actions=n.map(s=>{let{viewCall:c,...d}=s;return {...d,backend:c===true?{type:"core",handler:"view.call"}:{type:"skill",entry:ve}}})),Object.keys(r).length>0&&(a._meta=r),{v2Input:a,...Object.keys(r).length>0?{vendorMeta:r}:{},passthrough:o}}function Ld(e){Array.isArray(e)&&e.forEach((n,t)=>{let i=re(n)?n.backend:void 0;re(i)&&Z(i,"entry")&&V("MANIFEST_INVALID",be(`actions[${t}].backend.entry`),"entry-not-authorable",`an action in ${K} cannot name an entry; a server.ts App declares its actions in ${$}`);});}function Od(e,n,t){re(e)||V("MANIFEST_INVALID","","not-object","manifest.json must be a JSON object",K);let i;try{i=Md(e,t);}catch(a){throw a instanceof we?new we(a.code,{...a.reason,file:K}):a}let o;try{let a=nn(i.v2Input,{mode:n.mode??"local"});a.manifestVersion!==2&&V("MANIFEST_INVALID","","v2-required"),o=a;}catch(a){throw a instanceof de?new we(a.code,Bo(a,K,Ed)):a}let r=e.tools;if(Array.isArray(r)){let a=new Set(o.actions.map(s=>s.actionId));r.forEach((s,c)=>{let d=s.name;if(!a.has(d))throw new we("MANIFEST_INVALID",{path:`tools[${c}].name`,rule:"tool-not-action",message:"every tools[].name must be an action id",file:K})});}return {file:K,manifest:o,v2Input:i.v2Input,releaseVersion:e.version,...Object.keys(i.passthrough).length>0?{mcpb:i.passthrough}:{}}}function wd(e,n){try{let t=nn(e,{mode:n.mode??"local"});if(t.manifestVersion!==2)throw new we("MANIFEST_INVALID",{path:"manifestVersion",rule:"v2-required",message:"a workspace App requires manifestVersion 2",file:le});return {file:le,manifest:t,v2Input:e}}catch(t){throw t instanceof de?new we(t.code,Bo(t,le,i=>i??"")):t}}function hn(e){return ye(wn(e).definition)}function xo(e){let{entryHash:n,initialState:t,...i}=e,o={...i};return t!==void 0&&(o.initialState={path:t.path}),Ho(o)}function Rd(e,n){let t=xo(e),i=xo(n);return [...new Set([...Object.keys(t),...Object.keys(i)])].sort().filter(r=>ie(t[r]??null)!==ie(i[r]??null))}function Cd(e,n){return e.entryHash!==void 0&&n.entryHash!==void 0&&e.entryHash!==n.entryHash||e.initialState?.hash!==void 0&&n.initialState?.hash!==void 0&&e.initialState.hash!==n.initialState.hash}function kd(e,n){let t=Rd(e,n),i=Cd(e,n),o="";try{let r=hn(e),a=hn(n);i=i||r!==a,o=` (definition hash ${r.slice(0,12)} vs ${a.slice(0,12)})`;}catch{i=true;}t.length===0&&!i||V("MANIFEST_DUAL_MISMATCH","","dual-manifest-mismatch",`${K} and ${le} normalize to different definitions${o}`+(t.length>0?`; differing fields: ${t.join(", ")}`:""));}function Te(e,n,t="MANIFEST_INVALID",i){return {code:t,reason:{path:e,rule:n,...i===void 0?{}:{message:i},file:$},files:[]}}function vo(e){return {...Te("","tools-needs-manifest-json","MANIFEST_INVALID",`${$} is read with ${K} only`),files:e}}function Ud(e,n){if(e.byteLength>n)return {failure:Te("","file-too-large","LIMIT_EXCEEDED")};let t;try{t=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(e));}catch{return {failure:Te("","invalid-json")}}if(!re(t))return {failure:Te("","not-object","MANIFEST_INVALID",`${$} must be a JSON object`)};for(let o of Object.keys(t))if(o!=="schemaVersion"&&o!=="actions")return {failure:Te(o,"unknown-key")};for(let o of ["schemaVersion","actions"])if(!Z(t,o))return {failure:Te(o,"missing-key")};if(t.schemaVersion!==1)return {failure:Te("schemaVersion","unsupported-version","MANIFEST_INVALID",`schemaVersion must be ${1}`)};let i=t.actions;if(!Array.isArray(i))return {failure:Te("actions","array")};for(let[o,r]of i.entries()){if(!re(r))return {failure:Te(`actions[${o}]`,"object")};if(Z(r,"backend"))return {failure:Te(`actions[${o}].backend`,"tools-backend","MANIFEST_INVALID",`an action in ${$} cannot carry a backend`)};if(Z(r,"viewCall")&&r.viewCall!==true)return {failure:Te(`actions[${o}].viewCall`,"view-call-marker","MANIFEST_INVALID","viewCall must be the exact marker true")}}return {actions:i}}function xd(e,n){let t=n.maxBytes??262144,i=[],o=new TextDecoder("utf-8",{fatal:true});for(let r of ee){let a=e[r];if(a===void 0)continue;if(a.byteLength>t)return {parsed:i,failure:{code:"LIMIT_EXCEEDED",reason:{path:"",rule:"file-too-large",file:r},files:[r]}};let s;try{s=JSON.parse(o.decode(a));}catch{return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"invalid-json",file:r},files:[r]}}}if(!re(s))return {parsed:i,failure:{code:"MANIFEST_INVALID",reason:{path:"",rule:"not-object",message:`${r} must be a JSON object`,file:r},files:[r]}};i.push({file:r,raw:s});}return {parsed:i}}function Ke(e,n={}){let{parsed:t,failure:i}=xd(e,n),o=ee.filter(f=>e[f]!==void 0);if(i!==void 0)return {ok:false,rejection:i,parseFailure:true,builtinOnly:false};let r=e[$],a=r===void 0?void 0:Ud(r,n.maxBytes??262144);if(t.length===0)return {ok:false,rejection:a===void 0?{code:"MANIFEST_INVALID",reason:{path:"",rule:"no-manifest-file",message:"neither manifest.json nor ui-plugin.json is present"},files:[]}:vo(o),parseFailure:true,builtinOnly:false};let s=t[0],c=s.file===K?Nd(s.raw):Sd(s.raw),d=t.some(f=>Dd(f.file,f.raw)),p;if(a!==void 0){let f=t.some(g=>g.file===K)?a.failure:vo(o);if(f!==void 0)return {ok:false,rejection:f,parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};p=a.actions;}let l=[];try{for(let f of t)l.push(f.file===K?Od(f.raw,n,p):wd(f.raw,n));l.length===2&&kd(l[0].manifest,l[1].manifest);}catch(f){if(f instanceof we)return {ok:false,rejection:{code:f.code,reason:f.reason,files:f.code==="MANIFEST_DUAL_MISMATCH"?[...ee]:f.reason.file===void 0||f.reason.file===$?o:[f.reason.file]},parseFailure:false,...c===void 0?{}:{identity:c},builtinOnly:d};throw f}let y=l[0];return {ok:true,...y,identity:c??{pluginId:y.manifest.pluginId},files:o}}var K,le,ee,ui,Je,Ai,mi,Fo,fi,jo,Ad,md,Id,gd,hd,we,pt=j(()=>{I();Qe();xe();ei();Ze();li();K="manifest.json",le="ui-plugin.json",ee=[K,le],ui="0.3",Je="dev.crewx",Ai=Object.freeze(["manifest_version","name","display_name","version","description","long_description","author","repository","homepage","documentation","support","icon","icons","screenshots","localization","server","tools","tools_generated","prompts","prompts_generated","keywords","license","privacy_policies","compatibility","user_config","_meta"]),mi=Object.freeze(["manifest_version","name","display_name","version","description","_meta"]),Fo=Object.freeze(Ai.filter(e=>e!=="server"&&!mi.includes(e))),fi=Object.freeze(["entry","surfaces","size","stateProjection","actions"]),jo=Object.freeze(["definitionId","definitionVersion","icon","tone","entryHash","runtime","initialState","usage","detailPanel","displayModes","summaryProjection","dataPaths","focusedAiDataPaths","csp","deviceFeatures","downloads","share","files","desktopOnly"]),Ad=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$/,md=256,Id=/<\/?[A-Za-z][^>]*>/,gd=/^\s*javascript:/i,hd=/data:[^,\s]*,/i;we=class extends Error{constructor(t,i){super(`${t}: ${i.path||"<file>"} (${i.rule})`);this.code=t;this.reason=i;}code;reason};});function Yo(e){if(e===void 0)return {kind:"none"};if(typeof e!="string")return {kind:"invalid",reason:"bad-path"};if(jd.test(e))return {kind:"url",declared:e};if(!Hd(e))return {kind:"invalid",reason:"bad-path",declared:e};let n=e.lastIndexOf("."),t=n<0?void 0:vd.get(e.slice(n+1).toLowerCase());return t===void 0?{kind:"invalid",reason:"bad-type",declared:e}:{kind:"file",path:e,contentType:t}}function Hd(e){return e.length===0||e.length>512||e.startsWith("/")||e.includes("\\")||e.includes("\0")?false:e.split("/").every(n=>n!==""&&n!=="."&&n!=="..")}async function Cn(e,n){let t=Yo(e);if(t.kind==="none")return {diagnostics:[]};if(t.kind==="url")return {diagnostics:[{code:"ICON_NOT_FILE",severity:"warning",declared:t.declared}]};if(t.kind==="invalid")return {diagnostics:[gi(t.reason,t.declared)]};let i=await n(t.path);if(typeof i=="string")return {diagnostics:[gi(i,t.path)]};let o=qo(t.contentType,i);if(!o.ok)return {diagnostics:[gi(o.reason,t.path)]};let r={path:t.path,contentType:t.contentType,byteLength:i.byteLength,bytes:i},a=o.square===false?[{code:"ICON_NOT_SQUARE",severity:"warning",declared:t.path}]:[];return {file:r,diagnostics:a}}function gi(e,n){return {code:"ICON_INVALID",severity:"error",reason:e,...n===void 0?{}:{declared:n}}}function qo(e,n){if(n.byteLength>262144)return {ok:false,reason:"too-large"};if(e==="image/png")return !Wo(n,Vd)||Zd(n,12,16)!=="IHDR"||n.byteLength<24?{ok:false,reason:"bytes-mismatch"}:{ok:true,square:Jo(Ko(n,16),Ko(n,20))};if(e==="image/jpeg"){if(!Wo(n,Bd))return {ok:false,reason:"bytes-mismatch"};let t=Yd(n);return {ok:true,square:t===void 0?void 0:Jo(t.width,t.height)}}return Gd(n)}function Gd(e){let n;try{n=Fd.decode(e);}catch{return {ok:false,reason:"bytes-mismatch"}}return Kd(n)?{ok:false,reason:"unsafe-svg"}:zd.test(n)?{ok:true,square:Xd(n)}:{ok:false,reason:"bytes-mismatch"}}function Kd(e){if($d.some(n=>n.test(e)))return  true;for(let n of e.matchAll(Jd))if(!(n[1]??n[2]??n[3]??"").startsWith("#"))return  true;for(let n of e.matchAll(Wd))if(zo.lastIndex=n.index??0,!zo.test(e))return  true;return  false}function Xd(e){let n=/<svg\b[^>]*>/i.exec(e)?.[0];if(n===void 0)return;let t=Zo(n,"viewBox");if(t!==void 0){let r=t.trim().split(/[\s,]+/).map(Number);return r.length===4&&r.every(Number.isFinite)?r[2]===r[3]:void 0}let i=$o(n,"width"),o=$o(n,"height");return i===void 0||o===void 0?void 0:i===o}function Zo(e,n){let t=new RegExp(`\\s${n}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`).exec(e);return t?.[1]??t?.[2]}function $o(e,n){let t=Zo(e,n),i=t===void 0?null:/^\s*(\d+(?:\.\d+)?)(?:px)?\s*$/.exec(t);return i===null?void 0:Number(i[1])}function Yd(e){let n=2;for(;n+4<=e.byteLength;){if(e[n]!==255)return;let t=e[n+1];if(t===255){n+=1;continue}if(t===216||t===1||t>=208&&t<=215){n+=2;continue}if(t===217)return;let i=e[n+2]<<8|e[n+3];if(i<2)return;if(qd(t))return n+9>e.byteLength?void 0:{height:Xo(e,n+5),width:Xo(e,n+7)};n+=2+i;}}function qd(e){return e>=192&&e<=207&&e!==196&&e!==200&&e!==204}function Jo(e,n){if(!(e<=0||n<=0))return e===n}function Wo(e,n){return e.byteLength>=n.length&&n.every((t,i)=>e[i]===t)}function Zd(e,n,t){return String.fromCharCode(...e.subarray(n,t))}function Ko(e,n){return (e[n]<<24|e[n+1]<<16|e[n+2]<<8|e[n+3])>>>0}function Xo(e,n){return e[n]<<8|e[n+1]}var vd,Fd,jd,Vd,Bd,zd,$d,Jd,Wd,zo,hi=j(()=>{I();vd=new Map([["svg","image/svg+xml"],["png","image/png"],["jpg","image/jpeg"],["jpeg","image/jpeg"]]),Fd=new TextDecoder("utf-8",{fatal:true}),jd=/^[A-Za-z][A-Za-z0-9+.-]*:/,Vd=[137,80,78,71,13,10,26,10],Bd=[255,216,255];zd=/^\s*(?:<\?[\s\S]*?\?>\s*|<!--[\s\S]*?-->\s*)*<svg(?=[\s/>])/,$d=[/<script/i,/[\s"'/]on[a-z]+\s*=/i,/<foreignobject/i,/<!doctype/i,/<!entity/i,/<(?:iframe|embed|object)\b/i,/@import/i],Jd=/(?:^|[\s"'/])(?:xlink:)?href\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'>]+))/gi,Wd=/url\(/gi,zo=/url\(\s*["']?#/iy;});var _i=j(()=>{I();Zi();pt();hi();li();Ze();});function O(e,n=e){throw new Re(e,n)}var Re,ut=j(()=>{I();Re=class extends Error{constructor(t,i=t){super(i);this.code=t;}code;name="McpAppContractError"};});var pr=j(()=>{I();});var lr=j(()=>{I();Qe();xe();ut();pr();});function fr(e,n){return ur.add(e),n!==void 0&&pp.set(e,n),e}function _n(e){return e!==null&&typeof e=="object"&&ur.has(e)}var ur,pp,ft=j(()=>{I();ur=new WeakSet,pp=new WeakMap;});function vn(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function Pi(e,n,t=[]){let i=new Set([...n,...t]),o=Object.keys(e);return n.every(r=>Object.hasOwn(e,r))&&o.every(r=>i.has(r))}function mr(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))mr(n);return Object.freeze(e)}function se(e){throw new Ce("LINEAGE_INVALID",e)}function Ip(e){throw new Ce("LINEAGE_STALE",e)}function Ir(e){if(!vn(e)||!Pi(e,fp,yp)||!vn(e.actions))return se("Lineage definition shape is invalid");for(let n of Object.values(e.actions))if(!vn(n)||!Pi(n,Ap,mp))return se("Lineage action definition shape is invalid");return e}function gp(e){if(!vn(e)||!Pi(e,lp,up))return se("Lineage entry shape is invalid");if(!Number.isSafeInteger(e.version)||e.version<1||typeof e.hash!="string"||!yr.test(e.hash))return se("Lineage entry identity is invalid");if(e.sourceHash!==void 0&&(typeof e.sourceHash!="string"||!yr.test(e.sourceHash)))return se("Lineage source hash is invalid");if(e.compat!==void 0&&e.compat!=="break")return se("Lineage compatibility marker is invalid");let n=Ir(e.definition);if(n.version!==e.version)return se("Lineage version does not match its definition");if(e.sourceHash!==void 0&&n.sourceHash!==e.sourceHash)return se("Lineage source hash does not match its definition");let t;try{t=ye(n),ge({...n,hash:e.hash});}catch{return se("Lineage definition is invalid")}return t!==e.hash?se("Lineage definition hash does not match"):mr({version:e.version,hash:e.hash,definition:n,...e.sourceHash===void 0?{}:{sourceHash:e.sourceHash},...e.compat===void 0?{}:{compat:e.compat}})}function Ar(e){return e.stateProjection?.allow??[]}function hp(e,n){let t=[],i=new Set(Ar(n));Ar(e).some(s=>!i.has(s))&&t.push("S1_STATE_PROJECTION");let o=new Set(n.dataPaths??[]);(e.dataPaths??[]).some(s=>!o.has(s))&&t.push("S2_DATA_PATHS");for(let[s,c]of Object.entries(e.actions)){let d=n.actions[s];if(d&&(c.confirmation??"native")==="native"&&(d.confirmation??"native")!=="native"){t.push("S3_ACTION_CONFIRMATION");break}}Object.keys(e.legacy?.agentAccess??{}).some(s=>!Object.hasOwn(n.actions,s))&&t.push("S4_LEGACY_AGENT_ACTIONS");let a=e.summaryProjection?.allow;if(a!==void 0){let s=new Set(n.summaryProjection?.allow??[]);a.some(c=>!s.has(c))&&t.push("S5_SUMMARY_PROJECTION");}return t}function _p(e,n){return ie(e)===ie(n)}function Ti(e,n){if(!Array.isArray(e)||e.length===0)return se("Definition lineage is missing");if(!vn(n)||typeof n.hash!="string")return se("Current definition is invalid");let t,i;try{let{hash:s,...c}=n;i=Ir(c),t={...i,hash:s},ge(t);}catch{return se("Current definition is invalid")}let o=e.map(gp),r=o[0].definition.id;if(o.some(s=>s.definition.id!==r))return se("Lineage definition ids do not match");if(o.some((s,c)=>c>0&&s.version<=o[c-1].version))return se("Lineage generations are not in increasing version order");if(o.some((s,c)=>o.findIndex(d=>d.hash===s.hash)!==c))return se("Lineage contains a duplicate hash");let a=o[o.length-1];if(a.version!==t.version||a.hash!==t.hash||a.definition.id!==t.id||!_p(a.definition,i))return Ip("The last lineage generation does not match the current package");if(t.legacy!==void 0){let s=new Set(Object.keys(t.actions)),c=new Set;for(let p of o)if(p.sourceHash===void 0)for(let l of Object.keys(p.definition.actions))s.has(l)&&c.add(l);let d=Object.keys(t.legacy.agentAccess??{});if(d.length!==c.size||d.some(p=>!c.has(p))){let p="S4_LEGACY_AGENT_ACCESS_COMPLETE";throw new Ce("LINEAGE_INVALID",`Lineage compatibility failed: ${p}`,[p])}}for(let s=0;s<o.length-1;s+=1){if(o.slice(s,-1).some(p=>p.compat==="break"))continue;let d=hp(o[s].definition,t);if(d.length>0)throw new Ce("LINEAGE_INVALID",`Lineage compatibility failed: ${d.join(", ")}`,d)}return Object.freeze({entries:Object.freeze(o),current:t})}var Ce,yr,lp,up,fp,yp,Ap,mp,bi=j(()=>{I();Qe();xe();Ce=class extends Error{constructor(t,i=t,o=[]){super(i);this.code=t;this.violations=o;}code;violations;name="UiDefinitionLineageError"},yr=/^[0-9a-f]{64}$/,lp=["version","hash","definition"],up=["sourceHash","compat"],fp=["id","version","actions"],yp=["sourceHash","usage","detailPanel","displayModes","renderer","surfaces","stateProjection","dataPaths","summaryProjection","downloads","legacy"],Ap=["capabilities"],mp=["inputKeys","mutation","dataInputs","confirmation","resultProjection","content","env","schedule","job","jobAccess"];});var gr,hr,_r,Er,Pr=j(()=>{I();gr="text/html;profile=mcp-app",hr=["crewx_app_terminal_connect","crewx_app_html_viewer_open","crewx_app_browser","crewx_files_list","crewx_files_read","crewx_files_write","crewx_docs_share"],_r=["crewx_listWorkspaces","crewx_queryAgent","crewx_executeAgent","crewx_getTaskResult","crewx_listTasks","crewx_listAgents","callBrowser","openTab","listTabs","closeTab"],Er="text/html";});function Fn(e){return typeof e=="string"&&Ep.includes(e)}function yt(e,n){return e==="card"&&n?.type==="core"&&Fn(n.handler)}var Ep,At=j(()=>{I();Ep=Object.freeze(["card.secret-env"]);});function Tr(e,n=[],t){if(e.content!==void 0||e.confirmation!=="none")return "denied";let i=Pp();return i&&Object.hasOwn(i,e.actionId)?i[e.actionId]:e.backend?.type==="core"&&e.backend.handler.startsWith("host.")?"denied":e.backend?.type==="core"&&e.backend.handler===Le?(e.usage??oe)===oe&&e.mutation===false&&e.resultProjection!==void 0&&Array.isArray(e.resultProjection.allow)&&e.env===void 0&&e.job===void 0&&e.jobAccess===void 0&&e.schedule===void 0?"allowed":"denied":e.backend?.type==="core"&&e.backend.handler==="state.set"?"allowed":e.backend?.type==="core"&&Fn(e.backend.handler)||e.backend?.type==="skill"?"approval_required":e.backend===void 0&&n.includes(e.actionId)?"allowed":"denied"}function Pp(e){return;}var br=j(()=>{I();yn();Qe();ft();At();});function wp(e){return Bn.has(e)&&(e.initialState===void 0||Bn.has(e.initialState))}function Lr(e,n,t,i){let o=i===void 0?void 0:Object.freeze({hash:i.hash,bytes:Object.freeze(i.bytes)}),r=Object.freeze({mimeType:Er,entryHash:e,html:n,bytes:Object.freeze(t),...o===void 0?{}:{initialState:o}});return o!==void 0&&Bn.add(o),Bn.add(r),r}function Rp(e){let n=[];return e?.terminal===true&&n.push({name:"crewx_app_terminal_connect",description:"Open a local-only terminal session for this App.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"A local terminal connection is ready for this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae}),e?.htmlDocuments===true&&n.push({name:"crewx_app_html_viewer_open",description:"List workspace HTML documents or open one through a short-lived Host capability.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"},operation:{type:"string",enum:["list","open"]},documentId:{type:"string"}},required:["threadId","instanceId","operation"],additionalProperties:false},textFallback:"Workspace HTML documents are available through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae}),e?.appBrowser===true&&n.push({name:"crewx_app_browser",description:"Grant this App a native Desktop browser window. Browser commands use the custom Host RPC, not this tool.",inputSchema:{type:"object",properties:{workspace:{type:"string"},threadId:{type:"string"},instanceId:{type:"string"}},required:["threadId","instanceId"],additionalProperties:false},textFallback:"Desktop browser access is granted to this App. Browser commands use the custom Host RPC ui/crewx-app-browser.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae}),n}function Cp(e){let n=[];return e?.appFiles===true&&n.push({name:"crewx_files_list",description:"List the .md files of this App on the phone, sorted by ref, at most 200 per page. Pass `next` as `after` for the next page.",inputSchema:{type:"object",properties:{prefix:{type:"string",description:'A folder such as "workouts/". Omit for every file.'},after:{type:"string",description:"Return only refs after this one (the `next` of the previous page)."}},additionalProperties:false},textFallback:"The markdown files of this App are listed through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae},{name:"crewx_files_read",description:"Read one .md file: its text and its version (sha256 of the UTF-8 bytes).",inputSchema:{type:"object",properties:{ref:{...Ni}},required:["ref"],additionalProperties:false},textFallback:"A markdown file of this App is read through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae},{name:"crewx_files_write",description:"Write one .md file (at most 256 KiB). expectedVersion null creates it and fails if it exists; a version string replaces it only if the file still has that version.",inputSchema:{type:"object",properties:{ref:{...Ni},text:{type:"string",maxLength:256*1024},expectedVersion:{type:["string","null"],description:"null = create only, or the version the file had when you read it."}},required:["ref","text","expectedVersion"],additionalProperties:false},textFallback:"A markdown file of this App is written through this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae}),e?.resultShare===true&&n.push({name:"crewx_docs_share",description:"Open the Host share sheet for one markdown file of this App; resolves when the sheet closes.",inputSchema:{type:"object",properties:{ref:{...Ni}},required:["ref"],additionalProperties:false},textFallback:"The Host share sheet opens for a markdown file of this App.",visibility:Object.freeze(["app"]),kind:"host",resourceBinding:Ae}),n}function Xe(e,n,t){return (typeof e!="string"||!Dr.test(e))&&O(n,`${t} must be a safe identifier`),e}function jn(e,n,t){let i=e??t;return (typeof i!="string"||i.trim().length===0||i.length>Np)&&O("TOOL_INVALID",`${n} must be a meaningful description`),i}function Di(e){return (typeof e!="string"||e.length===0||e.length>En||!/<html(?:\s|>)/i.test(e)||!/<\/html\s*>/i.test(e))&&O("HTML_INVALID","MCP App HTML must be a non-empty HTML document"),e}function Vn(e,n=0){try{let t=Ie(e,n);return t.type!==void 0&&t.type!=="object"&&O("TOOL_INVALID","MCP App inputSchema must describe an object"),t}catch(t){if(t instanceof Re)throw t;O("TOOL_INVALID","MCP App inputSchema must be projection-safe JSON");}}function kp(e){return (typeof e!="string"||e.trim().length===0||e.length>Sp)&&O("TOOL_INVALID","MCP App tools require a meaningful text fallback"),e}function Up(e){e===void 0&&O("TOOL_INVALID","MCP App tool visibility is required");let n=[...e];return (n.length===0||n.some(t=>t!=="model"&&t!=="app")||new Set(n).size!==n.length)&&O("TOOL_INVALID","MCP App tool visibility must contain model and/or app once"),n}function wr(e){return (typeof e!="string"||!Mr.test(e))&&O("RESOURCE_URI_INVALID","MCP App resource URI is not a registered ui:// URI"),e}function Rr(e){let n=Xe(e.appId,"APP_ID_INVALID","Local App id"),t=jn(e.name,"Local App name",n),i=jn(e.description,"Local App description",`${t} interactive view`),o=ht(e.definition),r=Di(e.html),a=mt(e.entryHash,"Local App entry hash"),s=e.entryBytes===void 0?Array.from(new TextEncoder().encode(r)):gt(e.entryBytes,"Local App entry bytes");(It(s)!==a||Ur(s)!==r)&&O("HTML_INVALID","Local App entry bytes do not match the HTML hash");let c=xp(e),d=[];Array.isArray(e.actions)||O("TOOL_INVALID","Local App actions must be an array");for(let T of e.actions){let k=Xe(T.actionId,"TOOL_ID_INVALID","Local App action id");(d.includes(k)||!Object.prototype.hasOwnProperty.call(o.actions,k))&&O("TOOL_INVALID",`Local App action is not declared by the UI definition: ${k}`),d.push(k);}let p=Xe(e.readToolName,"TOOL_ID_INVALID","Local App read tool name"),l=e.actionToolName===void 0?void 0:Xe(e.actionToolName,"TOOL_ID_INVALID","Local App action tool name");d.length===0&&l!==void 0&&O("TOOL_INVALID","A static local App cannot register an action tool"),d.length>0&&l===void 0&&O("TOOL_INVALID","A stateful local App requires an action tool name"),l!==void 0&&l===p&&O("TOOL_ID_CONFLICT",`Local App read and action tools share a name: ${p}`);let y=[...Rp(e.runtime),...Cp(e.hostTools)];y.some(T=>T.name===p||T.name===l)&&O("TOOL_ID_CONFLICT","Local App read or action tool conflicts with a requested Host capability");let f={name:p,description:`${t} current state`,inputSchema:Op,textFallback:`${t} current state is available through its open instance.`,visibility:Object.freeze(["model","app"]),kind:"read",resourceBinding:Ae},g=[Object.freeze(f)];if(g.push(...y.map(T=>Object.freeze(T))),l!==void 0){let T={name:l,description:`${t} actions`,inputSchema:Mi(e.actions),textFallback:`${t} action requests are handled by the open App instance.`,visibility:Object.freeze(["app"]),kind:"action",resourceBinding:Ae,actionIds:Object.freeze([...d])};g.push(Object.freeze(T));}let E=[],P=new Set(g.map(T=>T.name));if(l!==void 0)for(let T of e.actions){let k=`${l}__${T.actionId}`;if(k.length>128||!Dr.test(k)){E.push(Object.freeze({toolName:k,actionId:T.actionId,reason:"name_too_long"}));continue}if(P.has(k)){E.push(Object.freeze({toolName:k,actionId:T.actionId,reason:"name_collision"}));continue}let H=Tr({actionId:T.actionId,confirmation:o.actions[T.actionId]?.confirmation,content:o.actions[T.actionId]?.content,usage:o.usage,mutation:o.actions[T.actionId]?.mutation,resultProjection:o.actions[T.actionId]?.resultProjection,env:o.actions[T.actionId]?.env,job:o.actions[T.actionId]?.job,jobAccess:o.actions[T.actionId]?.jobAccess,schedule:o.actions[T.actionId]?.schedule,backend:T.backend},e.modelActions),S=Object.freeze([...Bp(H,o.usage,T.backend)]),D={name:k,description:`${k} action`,inputSchema:Vn(T.inputSchema),textFallback:`${k} action requests are handled by the open App instance.`,visibility:S,kind:"action",resourceBinding:Ae,actionId:T.actionId,actionIds:Object.freeze([T.actionId]),_meta:Object.freeze({ui:Object.freeze({visibility:S})})};g.push(Object.freeze(D)),P.add(k);}let U=Lr(a,r,s,c===void 0?void 0:{hash:c.hash,bytes:[...c.bytes]}),x={appId:n,name:t,description:i,...e.icon===void 0?{}:{icon:xr(e.icon)},...e.tone===void 0?{}:{tone:vr(e.tone)},builtinOnly:false,definition:o,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},resourceBinding:Ae,resource:U,tools:Object.freeze(g),toolDiagnostics:Object.freeze(E)};return ne(x)}function Cr(e={}){return new Si(e)}function Mi(e){if(e.length===0)return Vn({type:"object",properties:{},additionalProperties:false});let n=e.map(i=>i.actionId),t=new Map;for(let i of e)t.set(i.actionId,Vn(i.inputSchema));return Vn(vp(n,t),Or)}function xp(e){let n=e.definition.dataPaths??[];if(e.initialStateBytes===void 0){e.initialStateHash!==void 0&&O("STATE_INVALID","Initial state hash has no bytes"),e.initialState!==void 0&&Ie(e.initialState,0,n);return}e.initialStateHash===void 0&&O("STATE_INVALID","Initial state bytes require a hash");let t=mt(e.initialStateHash,"Initial state hash"),i=gt(e.initialStateBytes,"Initial state bytes");It(i)!==t&&O("STATE_INVALID","Initial state bytes do not match the hash");let o;try{let r=new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(i));o=Ie(JSON.parse(r),0,n);}catch{O("STATE_INVALID","Initial state bytes are not projection-safe JSON");}return e.initialState!==void 0&&ie(o)!==ie(Ie(e.initialState,0,n))&&O("STATE_INVALID","Initial state bytes do not match the state value"),{hash:t,bytes:Object.freeze([...i])}}function vp(e,n){let t=e.map(i=>({type:"object",properties:{actionId:{type:"string",const:i},input:n.get(i)??{type:"object"}},required:["actionId","input"],additionalProperties:false}));return Object.freeze({type:"object",oneOf:Object.freeze(t),properties:Object.freeze({actionId:Object.freeze({type:"string",enum:Object.freeze([...e])}),input:Object.freeze({type:"object"})}),required:Object.freeze(["actionId","input"]),additionalProperties:false})}function Fp(e){let n=Hn(e),t=Xe(n.appId,"APP_ID_INVALID","MCP App id"),i=Di(n.html);wr(n.uiUri);let o=n.definition===void 0?void 0:ht(n.definition),r=e.provenance;r!==void 0&&(!_n(r)||r.appId!==t||r.definitionId!==o?.id||r.version!==o?.version||r.definitionHash!==o?.hash)&&O("TOOL_INVALID","Product App built-in registration provenance is not verified");let a=Object.freeze(n.tools.map(d=>ne(Hn(d)))),s=ne({...n,appId:t,html:i,...o===void 0?{}:{definition:o},...r===void 0?{}:{provenance:r},tools:a}),c=ne({uri:s.uiUri,mimeType:gr,text:i,...s.csp===void 0?{}:{_meta:{ui:{csp:s.csp}}}});return ne({appId:t,name:s.name,description:s.description,...s.icon===void 0?{}:{icon:s.icon},...s.tone===void 0?{}:{tone:s.tone},builtinOnly:s.builtinOnly,uiUri:s.uiUri,...o===void 0?{}:{definition:o},resourceBinding:Object.freeze({kind:"mcp",uri:s.uiUri}),resource:c,tools:a,descriptor:s})}function jp(e){(e.resourceBinding.kind!=="instance"||e.builtinOnly!==false)&&O("STATE_INVALID","Local App registration binding is invalid"),Object.prototype.hasOwnProperty.call(e,"uiUri")&&O("STATE_INVALID","Local App registration cannot contain uiUri");let n=Xe(e.appId,"APP_ID_INVALID","Local App id"),t=ht(e.definition),i=e.provenance;i!==void 0&&(!_n(i)||i.appId!==n||i.definitionId!==t.id||i.version!==t.version||i.definitionHash!==t.hash)&&O("TOOL_INVALID","Product App local registration provenance is not verified");let o=Vp(e.resource),r=e.tools.map(s=>{Xe(s.name,"TOOL_ID_INVALID","Local App tool name"),jn(s.description,"Local App tool description","Local App tool"),kp(s.textFallback);let c=Vn(s.inputSchema,s.kind==="action"&&!("actionId"in s)?Or:0);if((s.resourceBinding.kind!=="instance"||Object.prototype.hasOwnProperty.call(s,"resourceUri"))&&O("TOOL_INVALID","Local App tools cannot carry an MCP resource URI"),s.kind==="host")return (!Lp.has(s.name)||s.visibility.length!==1||s.visibility[0]!=="app"||Object.prototype.hasOwnProperty.call(s,"actionId"))&&O("TOOL_INVALID","Local App Host tools must use an allow-listed name and app-only visibility"),ne({...s,inputSchema:c,visibility:Object.freeze(["app"])});if(s.kind==="action"){if("actionId"in s){let p=Xe(s.actionId,"TOOL_ID_INVALID","Local App action id");Object.prototype.hasOwnProperty.call(t.actions,p)||O("TOOL_INVALID","Local App action tool references an undeclared action");let l=Up(s._meta.ui.visibility);return JSON.stringify(l)!==JSON.stringify(s.visibility)&&O("TOOL_INVALID","Local App action metadata visibility must match the tool visibility"),ne({...s,actionId:p,actionIds:Object.freeze([p]),inputSchema:c,visibility:l,_meta:{ui:{visibility:l}}})}let d=[...s.actionIds];return (d.length===0||d.some(p=>!Object.prototype.hasOwnProperty.call(t.actions,p)))&&O("TOOL_INVALID","Local App action tool references an undeclared action"),ne({...s,inputSchema:c,actionIds:Object.freeze(d)})}return ne({...s,inputSchema:c})}),a=ne({appId:n,name:jn(e.name,"Local App name",e.appId),description:jn(e.description,"Local App description",e.name),...e.icon===void 0?{}:{icon:xr(e.icon)},...e.tone===void 0?{}:{tone:vr(e.tone)},builtinOnly:false,definition:t,...e.runtime===void 0?{}:{runtime:Object.freeze({...e.runtime})},...e.deviceFeatures===void 0?{}:{deviceFeatures:Object.freeze([...e.deviceFeatures])},...e.downloads===void 0?{}:{downloads:e.downloads},...e.share===void 0?{}:{share:Object.freeze({...e.share})},...e.files===void 0?{}:{files:Object.freeze({...e.files})},...i===void 0?{}:{provenance:i},resourceBinding:Ae,resource:o,tools:Object.freeze(r),toolDiagnostics:Object.freeze([...e.toolDiagnostics??[]])});return Nr.has(e)?e:(Nr.add(a),a)}function Vp(e){let n=Di(e.html),t=mt(e.entryHash,"Local App entry hash");if(wp(e))return e;let i=gt(e.bytes,"Local App entry bytes");(It(i)!==t||Ur(i)!==n)&&O("HTML_INVALID","Local App entry bytes do not match the HTML hash");let o=e.initialState===void 0?void 0:{hash:mt(e.initialState.hash,"Initial state hash"),bytes:gt(e.initialState.bytes,"Initial state bytes")};return o&&It(o.bytes)!==o.hash&&O("STATE_INVALID","Initial state bytes do not match the hash"),Lr(t,n,i,o)}function Bp(e,n,t){if(yt(n,t))return ["model"];if(t?.type==="core"&&t.handler===Le)return ["model"];let i=t?.type==="core"&&Fn(t.handler);return e==="denied"||i?["app"]:["model","app"]}function Hp(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:false,definition:kr(e.definition),...e.provenance===void 0?{}:{provenance:e.provenance},entryHash:e.resource.entryHash,resourceBinding:Ae,tools:e.tools})}function Gp(e){return ne({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},builtinOnly:e.builtinOnly,uiUri:e.uiUri,...e.definition===void 0?{}:{definition:kr(e.definition)},resourceBinding:Object.freeze({kind:"mcp",uri:e.uiUri}),tools:e.tools})}function ht(e){try{if(Object.isFrozen(e))return ge(e),ne(e);let n=Hn(e);return ge(n),ne(n)}catch(n){if(n instanceof Re)throw n;O("STATE_INVALID","UI definition is not a valid immutable definition");}}function kr(e){return ne({id:e.id,version:e.version,hash:e.hash})}function zp(e){return e!==null&&typeof e=="object"&&typeof e.id=="string"&&Number.isSafeInteger(e.version)&&typeof e.hash=="string"}function Sr(e,n,t){return `${e}\0${n}\0${t}`}function mt(e,n){return (typeof e!="string"||!bp.test(e))&&O("SERIALIZATION_INVALID",`${n} is invalid`),e}function It(e){return createHash("sha256").update(Uint8Array.from(e)).digest("hex")}function gt(e,n){return (!Array.isArray(e)||e.some(t=>!Number.isInteger(t)||t<0||t>255))&&O("SERIALIZATION_INVALID",`${n} is invalid`),[...e]}function Ur(e){try{return new TextDecoder("utf-8",{fatal:!0}).decode(Uint8Array.from(e))}catch{O("SERIALIZATION_INVALID","UTF-8 bytes are invalid");}}function xr(e){return (typeof e!="string"||!Dp.test(e))&&O("TOOL_INVALID","MCP App icon is invalid"),e}function vr(e){return (typeof e!="string"||!Mp.has(e))&&O("TOOL_INVALID","MCP App tone is invalid"),e}function Hn(e,n=new Map){if(e===null||typeof e!="object")return e;let t=e;if(n.has(t)&&O("SERIALIZATION_INVALID","MCP App value contains a cycle"),Array.isArray(e)){let r=[];n.set(t,r);for(let a of e)r.push(Hn(a,n));return n.delete(t),r}let i;try{i=Object.getPrototypeOf(e);}catch{O("SERIALIZATION_INVALID","MCP App value cannot be cloned");}i!==Object.prototype&&i!==null&&O("SERIALIZATION_INVALID","MCP App value must be plain JSON");let o={};n.set(t,o);for(let[r,a]of Object.entries(e))Object.defineProperty(o,r,{configurable:true,enumerable:true,value:Hn(a,n),writable:true});return n.delete(t),o}function ne(e,n=new Set){if(e===null||typeof e!="object"||n.has(e)||Bn.has(e))return e;n.add(e);for(let t of Object.values(e))ne(t,n);return Object.freeze(e),e}var Dr,Mr,bp,En,Np,Sp,Dp,Mp,Lp,Ae,Op,Bn,Nr,Ni,Or,Si,_t=j(()=>{I();lr();Qe();xe();ft();ut();bi();Pr();yn();br();At();Dr=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/,Mr=/^ui:\/\/crewx\/([A-Za-z][A-Za-z0-9._-]{0,127})\/([0-9a-f]{12})$/,bp=/^[0-9a-f]{64}$/,En=8*1024*1024,Np=8*1024,Sp=16*1024,Dp=/^[a-z][a-z0-9-]{0,63}$/,Mp=new Set(["blue","violet","emerald","amber","rose","sky","slate","indigo"]),Lp=new Set(hr),new Set(_r),Ae=Object.freeze({kind:"instance"}),Op=Object.freeze({type:"object",properties:Object.freeze({}),additionalProperties:false}),Bn=new WeakSet,Nr=new WeakSet;Ni={type:"string",description:'Relative path in NFC, 1 to 3 segments joined by "/", each [\\p{L}\\p{N}][\\p{L}\\p{N}\\p{M}_-]{0,99}, the last ending in ".md". At most 200 code points.'};Or=4;Si=class{builtinApps;localApps;builtinDescriptors;builtinTools;mcpResources=new Map;localById=new Map;registrationById=new Map;launcherById=new Map;definitionByKey=new Map;handlerByKey=new Map;mcpToolByName=new Map;localToolByName=new Map;constructor(n){let t=n.builtins??n.builtin,i=[],o=[],r=[],a=new Set,s=new Set;for(let l of t?.listMcpApps()??[]){let y=Fp(l);a.has(y.appId)&&O("APP_ID_CONFLICT",`MCP App id is already registered: ${y.appId}`),a.add(y.appId);let f=y.tools;for(let g of f)s.has(g.name)&&O("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${g.name}`),s.add(g.name),this.mcpToolByName.set(g.name,g),r.push(g);this.mcpResources.set(y.resource.uri,y.resource),i.push(y),o.push(y.descriptor);}let c=(n.localApps??n.locals??[]).map(jp),d=new Set(c.flatMap(l=>l.tools.filter(y=>!(y.kind==="action"&&"actionId"in y)).map(y=>y.name))),p=[];for(let l of c){let y=l;a.has(y.appId)&&O("APP_ID_CONFLICT",`MCP App id is already registered: ${y.appId}`),a.add(y.appId);let f=[],g=[...y.toolDiagnostics??[]];for(let E of y.tools){if(s.has(E.name)){if(E.kind==="host"&&this.localToolByName.get(E.name)?.kind==="host"){f.push(E);continue}if(E.kind==="action"&&"actionId"in E){g.push(Object.freeze({toolName:E.name,actionId:E.actionId,reason:"name_collision"}));continue}O("TOOL_ID_CONFLICT",`MCP App tool name is already registered: ${E.name}`);}if(E.kind==="action"&&"actionId"in E&&d.has(E.name)){g.push(Object.freeze({toolName:E.name,actionId:E.actionId,reason:"name_collision"}));continue}s.add(E.name),this.localToolByName.set(E.name,E),f.push(E);}(f.length!==y.tools.length||g.length!==(y.toolDiagnostics?.length??0))&&(y=ne({...y,tools:Object.freeze(f),toolDiagnostics:Object.freeze(g)})),p.push(y),this.localById.set(y.appId,y);}for(let l of i)this.registrationById.set(l.appId,l),this.launcherById.set(l.appId,Gp(l)),l.definition&&this.addDefinition(l.definition);for(let l of p)this.registrationById.set(l.appId,l),this.launcherById.set(l.appId,Hp(l)),this.addDefinition(l.definition);for(let l of n.definitions??[])this.addDefinition(l);for(let l of n.handlers??[])this.addHandler(l);this.builtinApps=Object.freeze(i),this.localApps=Object.freeze(p),this.builtinDescriptors=Object.freeze(o),this.builtinTools=Object.freeze(r);}getMcpApp(n){return this.builtinApps.find(t=>t.appId===n)?.descriptor??null}listMcpApps(){return this.builtinDescriptors}listMcpAppTools(){return this.builtinTools}resolveMcpAppTool(n){return this.mcpToolByName.get(n)??null}resolveMcpAppResource(n){return typeof n!="string"||!Mr.test(n)?null:this.mcpResources.get(n)??null}requireMcpAppResource(n){wr(n);let t=this.mcpResources.get(n);return t||O("RESOURCE_NOT_FOUND",`MCP App resource is not registered: ${n}`),t}listLocalMcpApps(){return this.localApps}getLocalMcpApp(n){return this.localById.get(n)??null}listLocalMcpAppTools(){return Object.freeze([...this.localToolByName.values()])}resolveLocalMcpAppTool(n){return this.localToolByName.get(n)??null}resolveLocalMcpAppResource(n,t){let i=this.localById.get(n);return !i||t!==void 0&&i.definition.hash!==t?null:i.resource}listRegistrations(){return Object.freeze([...this.builtinApps,...this.localApps])}getRegistration(n){return this.registrationById.get(n)??null}listLaunchers(){return Object.freeze([...this.launcherById.values()].filter(n=>{let t=this.registrationById.get(n.appId),i=t?"descriptor"in t?t.descriptor.provenance:t.provenance:void 0,o=_n(i)&&i.launcher===false;return t?.definition?.usage!=="card"&&!o}))}listCardApps(){return Object.freeze([...this.launcherById.values()].filter(n=>this.registrationById.get(n.appId)?.definition?.usage==="card"))}getLauncher(n){return this.launcherById.get(n)??null}resolveDefinition(n){if(!zp(n))return null;let t=this.definitionByKey.get(Qt(n));if(!t||t.hash!==n.hash)return null;try{return ye(t)===t.hash?t:null}catch{return null}}resolveActionHandler(n,t,i){return typeof n!="string"||typeof i!="string"||!Number.isSafeInteger(t)?null:this.handlerByKey.get(Sr(n,t,i))??null}addDefinition(n){let t=ht(n),i=Qt(t),o=this.definitionByKey.get(i);o&&o.hash!==t.hash&&O("STATE_INVALID",`UI definition generation conflicts: ${i}`),o||this.definitionByKey.set(i,t);}addHandler(n){(!n||typeof n.definitionId!="string"||typeof n.actionId!="string"||!Number.isSafeInteger(n.version)||n.version<1||typeof n.handle!="function")&&O("STATE_INVALID","UI action handler registration is invalid");let t=Sr(n.definitionId,n.version,n.actionId);this.handlerByKey.has(t)&&O("TOOL_INVALID",`Duplicate UI action handler registration: ${t}`),this.handlerByKey.set(t,Object.freeze({...n}));}};});function $p(e,n){let t=Rr({appId:e.appId,name:e.name,description:e.description,...e.icon===void 0?{}:{icon:e.icon},...e.tone===void 0?{}:{tone:e.tone},...e.normalized.manifest.runtime===void 0?{}:{runtime:e.normalized.manifest.runtime},...e.normalized.manifest.deviceFeatures===void 0?{}:{deviceFeatures:e.normalized.manifest.deviceFeatures},...e.normalized.manifest.downloads===void 0?{}:{downloads:e.normalized.manifest.downloads},...e.normalized.manifest.share===void 0?{}:{share:e.normalized.manifest.share},...e.normalized.manifest.files===void 0?{}:{files:e.normalized.manifest.files},definition:e.definition,html:e.html,entryHash:e.entryHash,entryBytes:e.entryBytes,initialState:e.initialState,...e.initialStateHash===void 0?{}:{initialStateHash:e.initialStateHash},...e.initialStateBytes===void 0?{}:{initialStateBytes:e.initialStateBytes},readToolName:e.toolNames.read,...e.toolNames.action===void 0?{}:{actionToolName:e.toolNames.action},actions:e.normalized.manifest.actions.map(o=>({actionId:o.actionId,inputSchema:o.inputSchema,backend:o.backend})),...{}});return e.provenance===void 0?t:Object.freeze({...t,provenance:e.provenance})}function Fr(e){let n=e.normalized.manifest.actions;if(n.some(i=>i.backend.type==="skill")&&n.some(i=>i.backend.type==="core"))throw new Error("Mixed workspace App execution models");let t=$p(e);Cr({localApps:[t],definitions:[e.definition]});}var jr=j(()=>{I();_t();});function Jp(e){if(e===null||typeof e!="object"||!(Vr in e))throw new TypeError("scanCache must be created by createWorkspaceAppScanCache");return e[Vr]}function Br(e,n){let t=Jp(e),i=t.rootIdentity;return i!==void 0&&(i.dev!==n.dev||i.ino!==n.ino||i.realPath!==n.realPath)&&(t.candidates.clear(),t.assetCatalogs.clear(),t.preparedCandidates.clear(),t.lastCandidateScanUnchanged=void 0,t.lastCandidateKeys=void 0,t.scanStartedAtNs=void 0,t.lastAssetCatalogsUnchanged=void 0,t.lastSnapshot=void 0,t.lastSnapshotBuildInputs=void 0,t.lastSnapshotCandidates=void 0,t.lastSnapshotCatalogFingerprint=void 0),t.rootIdentity=n,t}var Vr,Hr=j(()=>{I();Vr=Symbol("crewx.workspace-app-scan-cache.state");});function je(e){if(e instanceof _)return e;let n=typeof e=="object"&&e!==null&&"code"in e?String(e.code):"";return n==="ENOENT"?new _("NOT_FOUND"):n==="ELOOP"?new _("PATH_ESCAPED"):n==="EFBIG"||n==="EOVERFLOW"?new _("LIMIT_EXCEEDED"):n==="EACCES"||n==="EPERM"||n==="ENOTDIR"?new _("READ_DENIED"):new _("READ_DENIED")}function Yp(e){if(typeof e!="string"||e.length===0||!isAbsolute(e))throw new _("READ_DENIED")}function Kr(e){if(typeof e!="string"||isAbsolute(e)||/[\\\u0000]/.test(e))throw new _("PATH_ESCAPED");if(process.platform==="win32"&&(win32.isAbsolute(e)||e.includes(":")||/^(?:[A-Za-z]:|[\\/]{2}[?.][\\/])/u.test(e)))throw new _("PATH_ESCAPED");if(e==="")return [];let n=e.split("/");if(n.some(t=>t.length===0||t==="."||t===".."))throw new _("PATH_ESCAPED");if(process.platform==="win32"&&n.some(t=>/[ .]$/u.test(t)||/^(?:con|prn|aux|nul|conin\$|conout\$|com[1-9¹²³]|lpt[1-9¹²³])(?:\.|$)/iu.test(t)))throw new _("PATH_ESCAPED");return n}function ke(e,n){let t=relative(e,n);return t===""||t!==".."&&!t.startsWith(`..${sep}`)&&!isAbsolute(t)}function Tn(e){if(typeof e.dev!="bigint"||typeof e.ino!="bigint"||typeof e.size!="bigint"||typeof e.mtimeNs!="bigint"||typeof e.ctimeNs!="bigint"||e.dev<0n||e.ino<=0n||e.size<0n)throw new _("UNSUPPORTED");return {dev:e.dev,ino:e.ino,size:e.size,mtimeNs:e.mtimeNs,ctimeNs:e.ctimeNs}}function Et(e,n){return ke(e,n)&&ke(n,e)}function Ve(e,n){return e.dev===n.dev&&e.ino===n.ino}function bn(e,n){return Ve(e,n)&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function qp(){let e=constants;if(e.O_NOFOLLOW===void 0){if(process.platform!=="win32")throw new _("UNSUPPORTED");return constants.O_RDONLY}return constants.O_RDONLY|e.O_NOFOLLOW|(e.O_NONBLOCK??0)}async function Pn(e,n){let t,i,o;try{if(t=await lstat(e,{bigint:!0}),!t.isDirectory()&&!t.isSymbolicLink())throw new _("READ_DENIED");if(i=await realpath(e),n!==void 0&&!ke(n,i))throw new _("PATH_ESCAPED");o=await stat(i,{bigint:!0});}catch(s){throw s instanceof _?s:je(s)}if(!o.isDirectory())throw new _("READ_DENIED");let r=Tn(t),a=Tn(o);if(!t.isSymbolicLink()&&!Ve(r,a))throw new _("PATH_ESCAPED");return {lexicalPath:e,lexicalIdentity:r,realPath:i,identity:a}}async function wi(e){Yp(e);let n=await Pn(e);return {...n,realRoot:n.realPath}}async function Tt(e,n){let t;try{t=await Pn(e.lexicalPath,n);}catch(i){throw i instanceof _?i:new _("PATH_ESCAPED")}if(t.realPath!==e.realPath||!Ve(t.lexicalIdentity,e.lexicalIdentity)||!Ve(t.identity,e.identity))throw new _("PATH_ESCAPED");return t}async function bt(e,n){let t;try{t=await Pn(e);}catch(i){throw i instanceof _?i:new _("PATH_ESCAPED")}if(t.realPath!==n.realRoot||!Ve(t.lexicalIdentity,n.lexicalIdentity)||!bn(t.identity,n.identity))throw new _("PATH_ESCAPED")}async function Xr(e,n,t){let i,o,r;try{if(i=await lstat(e,{bigint:!0}),i.isSymbolicLink())throw new _("PATH_ESCAPED");if(!i.isFile())throw new _("READ_DENIED");if(o=await realpath(e),!ke(n,o)||t!==void 0&&!ke(t,o))throw new _("PATH_ESCAPED");r=await stat(o,{bigint:!0});}catch(c){throw c instanceof _?c:je(c)}if(!r.isFile())throw new _("READ_DENIED");let a=Tn(i),s=Tn(r);if(!Ve(a,s))throw new _("PATH_ESCAPED");if(!bn(a,s))throw new _("IDENTITY_CHANGED");return {realPath:o,lexicalIdentity:a,identity:s}}async function Zp(e,n){let t=Kr(n),i=await wi(e),o=resolve(e,...t),r=relative(e,o);if(r===".."||r.startsWith(`..${sep}`)||isAbsolute(r))throw new _("PATH_ESCAPED");let a;t.length>=2&&(t[0]==="apps"||t[0]==="skills")&&(a=await Pn(resolve(e,t[0],t[1]),i.realRoot));let s=[i];for(let f=1;f<t.length;f+=1){let g=f===2&&a!==void 0?a:await Pn(resolve(e,...t.slice(0,f)),i.realRoot);if(a!==void 0&&f>=2&&!ke(a.realPath,g.realPath))throw new _("PATH_ESCAPED");s.push(g);}let c=await Xr(o,i.realRoot,a?.realPath),d=dirname(c.realPath);if(!ke(i.realRoot,d)||a!==void 0&&!ke(a.realPath,d))throw new _("PATH_ESCAPED");let p=[],l=d;for(;ke(i.realRoot,l)&&(p.push(l),!Et(l,i.realRoot));){let f=dirname(l);if(Et(f,l))throw new _("PATH_ESCAPED");l=f;}if(p.length===0||!Et(p.at(-1),i.realRoot))throw new _("PATH_ESCAPED");let y=[];for(let f of p.reverse()){let g=await Pn(f,i.realRoot);if(!Et(g.realPath,f))throw new _("PATH_ESCAPED");y.push(g);}await bt(e,i);for(let f of s.slice(1))await Tt(f,i.realRoot);for(let f of y)await Tt(f,i.realRoot);return await Yr({...c,fullPath:o},c.identity,i.realRoot,a?.realPath),{root:i,directories:s,canonicalDirectories:y,...a===void 0?{}:{candidateRealPath:a.realPath},fullPath:o,realPath:c.realPath,lexicalIdentity:c.lexicalIdentity,identity:c.identity}}async function Yr(e,n,t,i){let o=await Xr(e.fullPath,t,i);if(o.realPath!==e.realPath||!Ve(o.lexicalIdentity,e.lexicalIdentity)||!Ve(o.identity,e.identity))throw new _("PATH_ESCAPED");if(!bn(n,o.lexicalIdentity)||!bn(n,o.identity))throw new _("IDENTITY_CHANGED")}async function Oi(e,n){await bt(e.root.lexicalPath,e.root);for(let t of e.directories.slice(1))await Tt(t,e.root.realRoot);for(let t of e.canonicalDirectories)await Tt(t,e.root.realRoot);await Yr(e,n,e.root.realRoot,e.candidateRealPath);}async function zr(e,n,t,i){if(!Number.isSafeInteger(t)||t<0)throw new _("READ_DENIED");let o=qp(),r=await Zp(e,n);if(r.identity.size>BigInt(t)||r.identity.size>BigInt(Number.MAX_SAFE_INTEGER))throw new _("LIMIT_EXCEEDED");let a;try{a=await open(r.realPath,o);}catch(s){try{await Oi(r,r.identity);}catch(c){throw c instanceof _?c:new _("PATH_ESCAPED")}throw je(s)}try{let s;try{let p=await a.stat({bigint:!0});if(!p.isFile())throw new _("READ_DENIED");s=Tn(p);}catch(p){throw je(p)}if(!Ve(r.identity,s))throw new _("PATH_ESCAPED");if(!bn(r.identity,s))throw new _("IDENTITY_CHANGED");await Oi(r,s);let c=await i(a,s),d;try{let p=await a.stat({bigint:!0});if(!p.isFile())throw new _("READ_DENIED");d=Tn(p);}catch(p){throw je(p)}if(!bn(s,d))throw new _("IDENTITY_CHANGED");return await Oi(r,d),{value:c,snapshot:d,candidateRealPath:r.candidateRealPath??r.root.realRoot}}catch(s){throw s instanceof _?s:je(s)}finally{await a.close().catch(()=>{});}}function Qp(e){return e.isSymbolicLink()?{name:e.name,kind:"symlink"}:e.isDirectory()?{name:e.name,kind:"directory"}:e.isFile()?{name:e.name,kind:"file"}:{name:e.name,kind:"other"}}var _,Nt,qr,ki=j(()=>{I();_=class extends Error{constructor(t){super(t);this.code=t;}code;name="AppDiscoveryFsError"};Nt=class{async getRootIdentity(n){let t=await wi(n);return await bt(n,t),{dev:t.identity.dev,ino:t.identity.ino,realPath:t.realRoot}}async listDirectory(n,t){let i=Kr(t),o=await wi(n),r=resolve(n,...i),a,s;try{a=await realpath(r),s=await stat(a,{bigint:!0});}catch(c){let d=je(c);if(d.code==="NOT_FOUND")return [];throw d}if(!ke(o.realRoot,a)||!s.isDirectory())throw new _("PATH_ESCAPED");try{let c=await readdir(a,{withFileTypes:!0,encoding:"utf8"});return await bt(n,o),c.map(Qp)}catch(c){let d=je(c);if(d.code==="NOT_FOUND")return [];throw d}}async readdir(n,t){return this.listDirectory(n,t)}async readDirectory(n,t){return this.listDirectory(n,t)}async readVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");return (await zr(n,t,i,async(r,a)=>{let s=new Uint8Array(new ArrayBuffer(Number(a.size))),c=0;for(;c<s.byteLength;){let d;try{d=(await r.read(s,c,s.byteLength-c,c)).bytesRead;}catch(p){throw je(p)}if(d<=0)throw new _("IDENTITY_CHANGED");c+=d;}return new Uint8Array(s)})).value}async fingerprintVerifiedFile(n,t,i){if(!Number.isSafeInteger(i)||i<0)throw new _("READ_DENIED");let o=await zr(n,t,i,async()=>{});return {...o.snapshot,candidateRealPath:o.candidateRealPath}}async readFileVerified(n,t,i){return this.readVerifiedFile(n,t,i)}},qr=new Nt;});function Gn(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Qr(e){return typeof e=="string"&&Me.test(e)?e:void 0}function sl(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function on(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let a=t[r]-i[r];if(a!==0)return a}return t.byteLength-i.byteLength}function al(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function cl(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function dl(e){return ol.decode(e)}function pl(e){return JSON.parse(dl(e))}function es(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ll(e){if(e instanceof _)return es(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return es(n)}}function Be(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function ul(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function fl(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function ns(e,n,t,i){let o=ul(e);if(!o)throw new _("READ_DENIED");return cl(await o.call(e,n,t,i))}async function vi(e,n,t){let i=fl(e);if(!i)throw new _("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new _("READ_DENIED");return o.map(al).filter(r=>r!==null)}function yl(e,n,t,i){return Object.freeze({code:e,...{},source:n,relativePath:t})}function Al(e){if(!Gn(e))throw new TypeError("productBundle.reservedIds must be an object with appIds and definitionIds arrays");try{let n=Reflect.ownKeys(e);if(n.length!==2||!n.includes("appIds")||!n.includes("definitionIds"))throw new TypeError("productBundle.reservedIds must contain exactly appIds and definitionIds");let t=(i,o)=>{if(!Array.isArray(i))throw new TypeError("productBundle.reservedIds."+o+" must be an array");let r=[];for(let a=0;a<i.length;a+=1){let s=i[a];if(typeof s!="string"||s.length===0)throw new TypeError("productBundle.reservedIds."+o+" must contain non-empty strings");r.push(s);}return Object.freeze([...new Set(r)].sort(on))};return Object.freeze({appIds:t(e.appIds,"appIds"),definitionIds:t(e.definitionIds,"definitionIds")})}catch(n){throw n instanceof TypeError?n:new TypeError("productBundle.reservedIds must be a valid reservation object")}}function ml(e,n){return e.appIds.length===n.appIds.length&&e.appIds.every((t,i)=>t===n.appIds[i])&&e.definitionIds.length===n.definitionIds.length&&e.definitionIds.every((t,i)=>t===n.definitionIds[i])}function Mt(e){return Object.freeze({appIds:Object.freeze([...new Set(e.map(n=>n.appId))].sort(on)),definitionIds:Object.freeze([...new Set(e.map(n=>n.definition.id))].sort(on))})}function Dt(e,n){let t=Object.keys(e).sort(on),i=[...n].sort(on);return t.length===i.length&&t.every((o,r)=>o===i[r])}function ts(e){if(typeof e!="string"||e.length===0||e.startsWith("/")||/[\\\u0000]/.test(e))return;let n=e.split("/");if(!n.some(t=>t.length===0||t==="."||t===".."))return n}function Il(e){let n;try{n=pl(e);}catch{return}if(!Gn(n)||!Dt(n,["version","packages"])||n.version!==1||!Array.isArray(n.packages)||n.packages.length>Fi)return;let t=new Set,i=new Set,o=0,r=[];for(let a of n.packages){if(!Gn(a))return;let s=["packageDir","appId","definition","files"],c=Object.hasOwn(a,"lineage"),d=Object.hasOwn(a,"launcher"),p=[...c?["lineage"]:[],...d?["launcher"]:[]];if(!Dt(a,[...s,...p])||d&&a.launcher!==false)return;let l=ts(a.packageDir),y=Qr(a.appId);if(!l||l.length!==2||l[0]!=="apps"||!sl(l[1])||!y||t.has(a.packageDir)||!Gn(a.definition)||!Dt(a.definition,["id","version","hash"]))return;let f=Qr(a.definition.id),g=a.definition.version,E=a.definition.hash;if(!f||!Number.isSafeInteger(g)||g<1||typeof E!="string"||!xi.test(E)||!Array.isArray(a.files)||a.files.length<2||a.files.length>ji)return;let P=new Set,U=[];for(let x of a.files){if(!Gn(x)||!Dt(x,["path","sha256"]))return;let T=ts(x.path);if(!T||typeof x.sha256!="string"||!xi.test(x.sha256))return;let k=T.join("/"),H=`${a.packageDir}/${k}`;if(P.has(k)||i.has(H))return;P.add(k),i.add(H),U.push(Object.freeze({path:k,sha256:x.sha256}));}if(!ee.some(x=>P.has(x))||!P.has("ui/index.html")||(o+=U.length,o>nl))return;t.add(a.packageDir),r.push(Object.freeze({packageDir:a.packageDir,...d?{launcher:false}:{},appId:y,definition:Object.freeze({id:f,version:g,hash:E}),lineage:Array.isArray(a.lineage)?a.lineage:[],files:Object.freeze(U.sort((x,T)=>on(x.path,T.path)))}));}return Object.freeze({version:1,packages:Object.freeze(r)})}function tn(e){let n=ll(e);return n==="PATH_ESCAPED"||n==="IDENTITY_CHANGED"||n==="TOCTOU"?"PATH_ESCAPED":n==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":"BUNDLE_INTEGRITY"}async function gl(e,n,t,i,o){let r=[],a=async(s,c)=>{if(!Be(i,o))throw new _("LIMIT_EXCEEDED");if(c>2)throw new _("LIMIT_EXCEEDED");let d=await vi(e,n,s);for(let p of d){if(typeof p.name!="string"||p.name.length===0||p.name==="."||p.name===".."||/[\\/\u0000]/.test(p.name))throw new _("PATH_ESCAPED");let l=`${s}/${p.name}`;if(p.kind==="file"){if(r.push(l.slice(t.length+1)),r.length>ji)throw new _("LIMIT_EXCEEDED")}else if(p.kind==="directory")await a(l,c+1);else throw p.kind==="symlink"?new _("PATH_ESCAPED"):new _("READ_DENIED")}};return await a(t,0),r.sort(on)}function hl(e){return ee.includes(e)?262144:e==="ui/index.html"?En:e==="ui/state.json"?2097152:e.startsWith("ui/assets/")?il:tl}async function is(e,n,t,i){if(e===void 0)return {packages:[],diagnostics:[],incomplete:false,reservedIds:rl};let o=Al(e.reservedIds),r=[],a=(m,A,h)=>yl(m,"bundled",A),s=(m=[],A=false,h)=>({...h===void 0?{}:{indexHash:h},packages:m,diagnostics:r,incomplete:A,reservedIds:o});if(typeof e.root!="string"||e.root.length===0||typeof e.expectedIndexHash!="string"||!xi.test(e.expectedIndexHash))return r.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let c;try{c=await ns(n,e.root,"bundle-index.json",el);}catch(m){return r.push(a(tn(m),"bundle-index.json")),s()}let d=createHash("sha256").update(c).digest("hex");if(d!==e.expectedIndexHash)return r.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();let p=Il(c);if(p===void 0)return r.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s();if(!ml(Mt(p.packages),o))return r.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s([],false,d);if(!Be(t,i))return r.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(p.packages.map(m=>({indexEntry:m,failureCode:"LIMIT_EXCEEDED"})),true,d);let l;try{l=await vi(n,e.root,"");}catch(m){return r.push(a(tn(m),"bundle-index.json")),s(p.packages.map(A=>({indexEntry:A,failureCode:tn(m)})),false,d)}if(!Be(t,i))return r.push(a("LIMIT_EXCEEDED","bundle-index.json")),s(p.packages.map(m=>({indexEntry:m,failureCode:"LIMIT_EXCEEDED"})),true,d);let y=l.find(m=>m.name==="bundle-index.json"&&m.kind==="file"),f=l.find(m=>m.name==="apps"&&m.kind==="directory"),g=m=>p.packages.map(A=>({indexEntry:A,failureCode:m}));if(!y)return r.push(a("BUNDLE_INTEGRITY","bundle-index.json")),s(g("BUNDLE_INTEGRITY"),false,d);let E=l.filter(m=>m.name!=="bundle-index.json"&&m.name!=="apps");if(E.length>0){let m=E.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return r.push(a(m,"bundle-index.json")),s(g("BUNDLE_INTEGRITY"),false,d)}if(l.some(m=>m.name==="apps"&&m.kind!=="directory"))return r.push(a("PATH_ESCAPED","apps")),s(g("PATH_ESCAPED"),false,d);let P=[];if(f)try{P=await vi(n,e.root,"apps");}catch(m){return r.push(a(tn(m),"apps")),s(g(tn(m)),false,d)}if(!Be(t,i)||P.length>Fi)return r.push(a("LIMIT_EXCEEDED","apps")),s(g("LIMIT_EXCEEDED"),true,d);let U=new Map(p.packages.map(m=>[m.packageDir.slice(5),m])),x=P.filter(m=>!U.has(m.name));for(let m of x)r.push(a(m.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY",`apps/${m.name}`));if(x.length>0){let m=x.some(A=>A.kind==="symlink")?"PATH_ESCAPED":"BUNDLE_INTEGRITY";return s(g(m),false,d)}let T=new Set,k=new Map,H=new Map;for(let m of p.packages){let A=k.get(m.appId)??[];A.push(m),k.set(m.appId,A);let h=`${m.definition.id}\0${String(m.definition.version)}`,b=H.get(h)??[];b.push(m),H.set(h,b);}for(let m of [...k.values(),...H.values()])if(m.length>1)for(let A of m)T.add(A);let S=[],D=c.byteLength,w=false;for(let m of p.packages){if(!Be(t,i)){w=true,S.push({indexEntry:m,failureCode:"LIMIT_EXCEEDED"});continue}let A;try{let B=m.lineage[m.lineage.length-1];if(!B)throw new Ce("LINEAGE_INVALID","Definition lineage is missing");if(B.definition.id!==m.definition.id||B.version!==m.definition.version||B.hash!==m.definition.hash)throw new Ce("LINEAGE_STALE","Last lineage generation does not match bundle identity");A=Ti(m.lineage,{...B.definition,hash:B.hash}).entries;}catch(B){let v=B instanceof Ce?B.code:"LINEAGE_INVALID";r.push(a(v,m.packageDir)),S.push({indexEntry:m,failureCode:v});continue}let h=P.find(B=>B.name===m.packageDir.slice(5));if(!f||!h){S.push({indexEntry:m,failureCode:"BUNDLE_INTEGRITY"});continue}if(h.kind!=="directory"){S.push({indexEntry:m,failureCode:h.kind==="symlink"?"PATH_ESCAPED":"BUNDLE_INTEGRITY"});continue}let b;try{let B=await gl(n,e.root,m.packageDir,t,i);if(!Be(t,i)){w=!0,S.push({indexEntry:m,failureCode:"LIMIT_EXCEEDED"});continue}let v=m.files.map(F=>F.path);if(B.length!==v.length||B.some((F,fe)=>F!==v[fe])){S.push({indexEntry:m,failureCode:"BUNDLE_INTEGRITY"});continue}b=new Map;let Y;for(let F of m.files){if(!Be(t,i)){Y="LIMIT_EXCEEDED",w=!0;break}if(D>=Ui){Y="LIMIT_EXCEEDED";break}let fe;try{fe=await ns(n,e.root,`${m.packageDir}/${F.path}`,hl(F.path));}catch(_e){Y=tn(_e);break}if(!Be(t,i)){Y="LIMIT_EXCEEDED",w=!0;break}if(D+fe.byteLength>Ui){D=Ui,Y="LIMIT_EXCEEDED";break}if(D+=fe.byteLength,createHash("sha256").update(fe).digest("hex")!==F.sha256){Y="BUNDLE_INTEGRITY";break}b.set(F.path,fe);}if(Y!==void 0){S.push({indexEntry:m,failureCode:Y});continue}}catch(B){Be(t,i)||(w=true),S.push({indexEntry:m,failureCode:tn(B)});continue}S.push({indexEntry:m,lineage:A,files:b,...T.has(m)?{failureCode:"DUPLICATE_ID"}:{}});}return s(S,w,d)}var el,Fi,ji,nl,tl,il,Ui,xi,ol,rl,Vi=j(()=>{I();bi();Ze();pt();_t();ki();el=256*1024,Fi=64,ji=128,nl=Fi*ji,tl=2*1024*1024,il=8*1024*1024,Ui=32*1024*1024,xi=/^[0-9a-f]{64}$/,ol=new TextDecoder("utf-8",{fatal:true}),rl=Object.freeze({appIds:Object.freeze([]),definitionIds:Object.freeze([])});});function El(e){if(typeof e!="string"||!Me.test(e))throw new TypeError("pluginId must be a safe UI plugin identifier");let n=`${Bi}${e}`.length+7<=128?e:`hash_${createHash("sha256").update(e,"utf8").digest("hex")}`;return {read:`${Bi}${n}_read`,action:`${Bi}${n}_action`}}function rs(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;try{let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}catch{return  false}}function Tl(e,n){return n.length===0||n==="."||n===".."||/[\\/\u0000]/.test(n)?e==="skills"?"skills":"apps":`${e==="skills"?"skills":"apps"}/${n}`}function bl(e){return e.length>0&&e!=="."&&e!==".."&&!/[\\/\u0000]/.test(e)}function $n(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let a=t[r]-i[r];if(a!==0)return a}return t.byteLength-i.byteLength}function ms(e){if(typeof e=="string")return {name:e,kind:"directory"};if(e===null||typeof e!="object")return null;let n=e;if(typeof n.name!="string")return null;if(n.kind==="file"||n.kind==="directory"||n.kind==="symlink"||n.kind==="other")return {name:n.name,kind:n.kind};if(n.type==="file"||n.type==="directory"||n.type==="symlink"||n.type==="other")return {name:n.name,kind:n.type};let t=n.isDirectory;if(typeof t=="function"&&t.call(e))return {name:n.name,kind:"directory"};let i=n.isSymbolicLink;if(typeof i=="function"&&i.call(e))return {name:n.name,kind:"symlink"};let o=n.isFile;return typeof o=="function"&&o.call(e)?{name:n.name,kind:"file"}:{name:n.name,kind:"other"}}function Nl(e){if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("filesystem port returned an invalid byte array")}function Is(e){return Pl.decode(e)}function Sl(e){return JSON.parse(Is(e))}function Dl(e){if(e===void 0)return;let n=e.definitionId!==void 0&&e.definitionVersion!==void 0?`${e.definitionId}\0${String(e.definitionVersion)}`:void 0;return {pluginId:e.pluginId,...n===void 0?{}:{definitionKey:n}}}function Lt(e,n,t,i,o){let r={code:e,...i===void 0?{}:{pluginId:i},source:n,relativePath:t,...o?.reason===void 0?{}:{reason:Object.freeze({...o.reason})},...o?.files===void 0?{}:{files:Object.freeze([...o.files])}};return Object.freeze(r)}function ss(e){switch(e){case "ENOENT":return "NOT_FOUND";case "ELOOP":case "EXDEV":return "PATH_ESCAPED";case "EFBIG":case "EOVERFLOW":return "LIMIT_EXCEEDED";case "EACCES":case "EPERM":case "ENOTDIR":return "READ_DENIED";default:return e}}function ae(e){if(e instanceof _)return ss(e.code);if(e!==null&&typeof e=="object"&&"code"in e){let n=e.code;if(typeof n=="string")return ss(n)}}function sn(e,n){return e==="PATH_ESCAPED"||e==="IDENTITY_CHANGED"||e==="TOCTOU"?"PATH_ESCAPED":e==="LIMIT_EXCEEDED"?"LIMIT_EXCEEDED":n==="manifest"&&e==="NOT_FOUND"?"MANIFEST_MISSING":n==="entry"?"ENTRY_INVALID":n==="initial"?"INITIAL_STATE_INVALID":"MANIFEST_INVALID"}function as(e){return {reason:e.reason,...e.code==="MANIFEST_DUAL_MISMATCH"?{files:e.files}:{}}}function cs(e){return e==="MANIFEST_DUAL_MISMATCH"?e:gs(e)}function Ml(e){return gs(e.code)}function gs(e){switch(e){case "MANIFEST_INVALID":case "PRIMITIVE_UNKNOWN":case "PRIMITIVE_SET_UNSUPPORTED":case "SCHEMA_TYPE_UNSUPPORTED":case "TOKEN_INVALID":case "UNSAFE_VALUE":return "MANIFEST_INVALID";case "LIMIT_EXCEEDED":return "LIMIT_EXCEEDED";case "INITIAL_STATE_INVALID":return "INITIAL_STATE_INVALID";default:return hs("UiPluginValidationError",e)}}function hs(e,n){throw new Error(`Unmapped ${e} code: ${String(n)}`)}function _s(e){switch(e){case "APP_ID_INVALID":case "TOOL_ID_INVALID":case "RESOURCE_URI_INVALID":case "TOOL_INVALID":case "SERIALIZATION_INVALID":return "MANIFEST_INVALID";case "APP_ID_CONFLICT":case "TOOL_ID_CONFLICT":return "DUPLICATE_ID";case "RESOURCE_NOT_FOUND":case "HTML_INVALID":return "ENTRY_INVALID";case "STATE_INVALID":case "STATE_PROJECTION_INVALID":case "BUTTON_INVALID":return "INITIAL_STATE_INVALID";default:return hs("McpAppContractError",e)}}function He(e,n){let t=n();return Number.isFinite(t)&&Number.isFinite(e)&&t-e<=5e3}function Ll(e){return {pluginId:e.appId,definitionKey:`${e.definition.id}\0${String(e.definition.version)}`}}function Ol(e,n){let t=n.get("package.json");if(t!==void 0)try{let o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(t));if(rs(o)){let r=o.bin,a=typeof r=="string"?r:rs(r)?Object.values(r).find(s=>typeof s=="string"):void 0;for(let s of [a,o.main]){if(typeof s!="string")continue;let c=wl(s);if(c&&n.has(c))return c}}}catch{}return [`${e.slice(e.lastIndexOf("/")+1)}.js`,"index.js","main.js"].find(o=>n.has(o))}function wl(e){if(e.startsWith("/")||e.includes("\\")||e.includes("\0"))return;let n=e.split("/").filter(t=>t!==".");if(!(n.length===0||n.some(t=>t.length===0||t==="..")))return n.join("/")}function Rl(){return globalThis.performance?.now()??Date.now()}function rn(e){if(e===null||typeof e!="object"||Object.isFrozen(e))return e;for(let n of Object.values(e))rn(n);return Object.freeze(e)}function ds(e){return Object.freeze(Array.from(e))}async function Jn(e,n,t,i){if(n.pinnedFiles!==void 0){let s=n.pinnedFiles.get(t);if(s===void 0)throw new _("NOT_FOUND");if(s.byteLength>i)throw new _("LIMIT_EXCEEDED");return new Uint8Array(s)}let o=`${n.relativePath}/${t}`,r=n.scanContext,a=e.fingerprintVerifiedFile;if(r===void 0||!r.cacheable||typeof a!="function")return fs(e,n.root,o,i);try{let s=r.priorFingerprints.get(o)??await a.call(e,r.workspaceRoot,o,i);r.candidateRealPath=s.candidateRealPath;let c=await fs(e,n.root,o,i),d=await a.call(e,r.workspaceRoot,o,i);return r.candidateRealPath=d.candidateRealPath,Ps(s,d)&&d.size===BigInt(c.byteLength)&&!Ts(d,r.scanStartedAtNs)?r.files.set(o,{relativePath:o,byteLimit:i,fingerprint:d}):r.cacheable=!1,c}catch(s){let c=!t.includes("/")&&ae(s)==="NOT_FOUND"&&r.directoryListings.some(p=>p.relativePath===n.relativePath&&!Ot(p.key,t)),d=t===$&&ae(s)==="NOT_FOUND"&&kl(r.directoryListings,n.relativePath);throw !c&&!d&&(r.cacheable=false),s}}async function Cl(e,n,t){if(n.pinnedFiles!==void 0)return {iconDiagnostics:[]};let i=await Cn(t,async r=>{try{return await Jn(e,n,r,262144)}catch(a){let s=ae(a);return s==="NOT_FOUND"?"missing":s==="LIMIT_EXCEEDED"?"too-large":"bad-path"}}),o=i.file;return {...o===void 0?{}:{iconFile:{path:o.path,sha256:createHash("sha256").update(o.bytes).digest("hex"),contentType:o.contentType,byteLength:o.byteLength}},iconDiagnostics:i.diagnostics}}function kl(e,n){let t=e.find(o=>o.relativePath===n);if(t===void 0)return  false;if(!Ot(t.key,"dist"))return  true;let i=e.find(o=>o.relativePath===`${n}/dist`);return i!==void 0&&!Ot(i.key,"tools.json")}function Es(e,n){return JSON.stringify([e.realPath,n.source,n.relativePath])}async function xl(e,n,t,i,o,r,a,s){let c=e.fingerprintVerifiedFile,d=Es(t,i),p=o.candidates.get(d),l=i.relativePath,y;try{y=await us(e,n,l);}catch(w){if(ae(w)!=="NOT_FOUND")throw w}let f=y===void 0?void 0:{relativePath:l,key:y};if(f!==void 0&&(i.source==="apps"||i.source==="skills")&&!ee.some(w=>Ot(f.key,w)))return He(a,s)?p!==void 0&&p.candidate===void 0&&p.candidateRealPath===void 0&&p.files.length===0&&p.directoryListings.length===1&&p.directoryListings[0]?.relativePath===f.relativePath&&p.directoryListings[0]?.key===f.key&&(i.source==="apps"?p.diagnostic?.code==="MANIFEST_MISSING":p.diagnostic===void 0)&&typeof c=="function"?{memo:p}:typeof c!="function"?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze([f]),priorFingerprints:new Map,files:new Map,cacheable:true}}:{timeLimitReached:true};let g=async w=>{if(w==="")return f;let m=`${i.relativePath}${w}`;try{let A=await us(e,n,m);return A===void 0?void 0:{relativePath:m,key:A}}catch(A){if(ae(A)==="NOT_FOUND")return;throw A}},E=await Promise.all(ps.map(g)),P=await Promise.all(Ul.map(g));if(!He(a,s))return {timeLimitReached:true};let U=typeof c=="function"&&E.every(w=>w!==void 0),x=E.filter(w=>w!==void 0),T=[...x,...P.filter(w=>w!==void 0)],k=new Map,H=p!==void 0&&U,S;if(p!==void 0&&typeof c=="function"){let w=await Promise.all(p.files.map(async m=>{if(!He(a,s))return {kind:"time",file:m};try{let A=await c.call(e,n,m.relativePath,m.byteLimit);return {kind:"fingerprint",file:m,current:A}}catch(A){return ae(A)==="NOT_FOUND"?{kind:"missing",file:m}:{kind:"error",file:m,error:A}}}));if(w.some(m=>m.kind==="time"))return {timeLimitReached:true};for(let m of w){if(m.kind==="error")throw m.error;if(m.kind==="missing"){H=false;continue}if(m.kind!=="fingerprint")continue;let{file:A,current:h}=m;k.set(A.relativePath,h),S??=h.candidateRealPath,(h.candidateRealPath!==p.candidateRealPath||!Ps(h,A.fingerprint)||Ts(h,r))&&(H=false);}}let D=p!==void 0&&p.directoryListings.length===T.length&&p.directoryListings.every((w,m)=>w.relativePath===T[m]?.relativePath&&w.key===T[m]?.key);return p!==void 0&&U&&D&&H&&S===p.candidateRealPath?{memo:p}:!U||x.length!==ps.length?{}:{context:{state:o,cacheKey:d,workspaceRoot:n,scanStartedAtNs:r,directoryListings:Object.freeze(T),priorFingerprints:k,files:new Map,...S===void 0?{}:{candidateRealPath:S},cacheable:true}}}function Ot(e,n){try{let t=JSON.parse(e);return Array.isArray(t)&&t.some(i=>Array.isArray(i)&&i[0]===n)}catch{return  true}}async function us(e,n,t){let i=bs(e);if(typeof i!="function")return;let o=await i.call(e,n,t);if(!Array.isArray(o)||o.some(a=>typeof a=="string"))return;let r=o.map(ms);if(!r.some(a=>a===null))return JSON.stringify(r.slice().sort((a,s)=>$n(a.name,s.name)||$n(a.kind,s.kind)).map(a=>[a.name,a.kind]))}function Ps(e,n){return e.dev===n.dev&&e.ino===n.ino&&e.size===n.size&&e.mtimeNs===n.mtimeNs&&e.ctimeNs===n.ctimeNs}function Ts(e,n){let t=e.mtimeNs-n;return t>=-ls&&t<=ls}function Hi(e){let n=e.scanContext,t=e.source==="skills"&&e.candidate===void 0&&e.diagnostic===void 0&&n?.files.size===0,i=e.source==="apps"&&e.candidate===void 0&&e.diagnostic?.code==="MANIFEST_MISSING"&&n?.files.size===0,o=t||i;if(n===void 0||!n.cacheable||n.candidateRealPath===void 0&&!o||n.files.size===0&&!o)return;let r=Object.freeze({...!o&&n.candidateRealPath!==void 0?{candidateRealPath:n.candidateRealPath}:{},directoryListings:n.directoryListings,files:Object.freeze([...n.files.values()]),...e.candidate===void 0?{}:{candidate:e.candidate},...e.diagnostic===void 0?{}:{diagnostic:e.diagnostic},...e.identity===void 0?{}:{identity:e.identity},...e.provenance===void 0?{}:{provenance:e.provenance}});n.state.candidates.set(n.cacheKey,r);}function vl(e,n,t){let i=createHash("sha256"),o=new TextEncoder().encode(ie(e)),r=a=>{let s=new Uint8Array(8);new DataView(s.buffer).setBigUint64(0,BigInt(a)),i.update(s);};return r(o.byteLength),i.update(o),r(n.byteLength),i.update(n),r(t.byteLength),i.update(t),i.digest("hex")}function Fl(e,n){let t={...e.definition,sourceHash:n},i;try{i=ye(t);}catch(r){throw r instanceof C&&r.code==="INPUT_INVALID"?new de("MANIFEST_INVALID","normalized definition is invalid"):r}let o={...t,hash:i};try{ge(o);}catch{throw new de("MANIFEST_INVALID","normalized definition is invalid")}return o}function jl(e,n){return e.actions.some(t=>t.backend.type==="core"&&t.backend.handler!=="state.set"&&!(t.backend.handler===Le&&(n??oe)===oe)&&!yt(n,t.backend))}function Vl(e){if(typeof e.readVerifiedFile=="function")return e.readVerifiedFile;if(typeof e.readFileVerified=="function")return e.readFileVerified}function bs(e){if(typeof e.listDirectory=="function")return e.listDirectory;if(typeof e.readDirectory=="function")return e.readDirectory;if(typeof e.readdir=="function")return e.readdir}async function fs(e,n,t,i){let o=Vl(e);if(!o)throw new _("READ_DENIED");return Nl(await o.call(e,n,t,i))}async function Bl(e,n,t){let i=bs(e);if(!i)throw new _("READ_DENIED");let o=await i.call(e,n,t);if(!Array.isArray(o))throw new _("READ_DENIED");return o.map(ms).filter(r=>r!==null)}function Hl(e){let n=[];for(let t of [e.reserved,e.builtin])t&&n.push(t);return e.builtins&&"listMcpApps"in e.builtins?n.push(ys(e.builtins)):e.builtins&&n.push(e.builtins),e.builtinCatalog&&n.push(ys(e.builtinCatalog)),n.push({...e.reservedAppIds===void 0?{}:{appIds:e.reservedAppIds},...e.reservedDefinitionIds===void 0?{}:{definitionIds:e.reservedDefinitionIds},...e.reservedToolNames===void 0?{}:{toolNames:e.reservedToolNames}}),n}function ys(e){let n=[],t=[],i=[];for(let o of e.listMcpApps())typeof o.appId=="string"&&n.push(o.appId),o.definition&&typeof o.definition.id=="string"&&t.push(o.definition.id);for(let o of e.listMcpAppTools())typeof o.name=="string"&&i.push(o.name);return {appIds:n,definitionIds:t,toolNames:i}}function Ne(e,n){e.diagnostic||(e.diagnostic=Lt(n,e.source,e.relativePath,e.identity?.pluginId));}function Gl(e,n){let t=new Set,i=new Map;for(let r of e){let a=r.identity?.pluginId;if(a===void 0)continue;let s=i.get(a)??[];s.push(r),i.set(a,s);}for(let r of i.values()){if(r.length<2)continue;let a=r.filter(c=>c.provenance!==void 0);if(a.length>0){let c=r.find(d=>n.has(d));if(c){for(let d of a)t.add(d);for(let d of r)d!==c&&d.provenance===void 0&&Ne(d,"RESERVED_ID");continue}for(let d of r)d.provenance===void 0&&Ne(d,"RESERVED_ID");if(a.length>1)for(let d of a)Ne(d,"DUPLICATE_ID");continue}let s=r.filter(c=>c.source==="apps");if(s.length>1){for(let c of s)Ne(c,"DUPLICATE_ID");for(let c of r.filter(d=>d.source==="skills"))Ne(c,"DUPLICATE_ID");}else for(let c of r.filter(d=>d.source==="skills"))Ne(c,"DUPLICATE_ID");}let o=new Map;for(let r of e){if(r.diagnostic?.code==="RESERVED_ID"||t.has(r)||r.provenance===void 0&&!n.has(r)&&i.get(r.identity?.pluginId??"")?.some(c=>c.provenance!==void 0))continue;let a=r.identity?.definitionKey;if(a===void 0)continue;let s=o.get(a)??[];s.push(r),o.set(a,s);}for(let r of o.values())if(r.length>1)for(let a of r)Ne(a,"DUPLICATE_ID");return t}function zl(e,n,t){let i=new Set,o=new Set,r=new Set,a=new Set([...t.appIds,...n.productBundleReservationMetadata?.reservedAppIds??[]]),s=new Set([...t.definitionIds,...n.productBundleReservationMetadata?.reservedDefinitionIds??[]]);for(let p of Hl(n)){for(let l of p.appIds??[])typeof l=="string"&&i.add(l);for(let l of p.definitionIds??[])typeof l=="string"&&o.add(l);for(let l of p.toolNames??[])typeof l=="string"&&r.add(l);}for(let p of e){let l=p.candidate;if(!l)continue;if(i.has(l.pluginId)||o.has(l.definitionId)){Ne(p,"RESERVED_ID");continue}[l.toolNames.read,l.toolNames.action].filter(f=>f!==void 0).some(f=>r.has(f))&&Ne(p,"DUPLICATE_ID");}let c=[...e.filter(p=>p.provenance!==void 0&&p.diagnostic===void 0).flatMap(p=>p.candidate?[p.candidate]:[]),...(n.productBundleReservationMetadata?.candidates??[]).filter(p=>n.productBundleReservationMetadata?.indexHash!==void 0&&p.provenance?.indexHash===n.productBundleReservationMetadata.indexHash)],d=new Set;for(let p of e){let l=p.candidate;if(!(!l||p.diagnostic||p.source!=="apps"||p.provenance!==void 0)&&e.filter(y=>y.source==="apps"&&y.identity?.pluginId===l.pluginId).length===1&&c.some(y=>y.pluginId===l.pluginId)&&!(s.has(l.definitionId)&&!c.some(y=>y.pluginId===l.pluginId&&y.definitionId===l.definitionId))&&!c.some(y=>y.pluginId!==l.pluginId&&y.definitionId===l.definitionId)&&!e.some(y=>y.identity?.pluginId!==l.pluginId&&y.identity?.definitionKey===`${l.definitionId}\0${l.version}`&&y.diagnostic?.code!=="RESERVED_ID"))try{Fr(l),d.add(p);}catch(y){Ne(p,y instanceof Re?_s(y.code):"EXEC_DENIED");}}for(let p of e){let l=p.candidate;l&&p.provenance===void 0&&!d.has(p)&&(a.has(l.pluginId)||s.has(l.definitionId))&&Ne(p,"RESERVED_ID");}return d}function $l(e){return [...e].sort((n,t)=>{let i=os.indexOf(n.source)-os.indexOf(t.source);return i!==0?i:$n(n.relativePath,t.relativePath)})}function G(e,n,t){e.diagnostic=Lt(n,e.source,e.relativePath,e.identity?.pluginId,t);}async function As(e,n,t){let i=Ke(t,{mode:"local"});if(!i.ok&&i.parseFailure){G(n,cs(i.rejection.code),as(i.rejection));return}let o=Dl(i.identity);if(n.bundleIdentity===void 0)n.identity=o;else if(o?.pluginId!==n.bundleIdentity.appId||o.definitionKey!==`${n.bundleIdentity.definitionId}\0${String(n.bundleIdentity.version)}`){G(n,"BUNDLE_INTEGRITY");return}if(!i.ok&&i.builtinOnly){G(n,"RESERVED_ID");return}if(!i.ok){G(n,cs(i.rejection.code),as(i.rejection));return}let r=i.manifest,a={pluginId:r.pluginId,definitionKey:`${r.definitionId}\0${String(r.version)}`};if(n.bundleIdentity===void 0&&(n.identity=a),r.actions.length>0)try{Mi(r.actions.map(v=>({actionId:v.actionId,inputSchema:v.inputSchema})));}catch(v){if(v instanceof Re){G(n,_s(v.code));return}throw v}let s;try{s=await Jn(e,n,"ui/index.html",En);}catch(v){G(n,sn(ae(v),"entry"));return}if(s.byteLength>En){G(n,"LIMIT_EXCEEDED");return}let c;try{c=Is(s);}catch{G(n,"ENTRY_INVALID");return}if(s.byteLength===0||c.length===0){G(n,"ENTRY_INVALID");return}let d=createHash("sha256").update(s).digest("hex");if(r.entryHash!==void 0&&r.entryHash!==d){G(n,"ENTRY_INVALID");return}let p={},l,y;if(r.initialState!==void 0){try{l=await Jn(e,n,"ui/state.json",2097152);}catch(v){G(n,sn(ae(v),"initial"));return}if(l.byteLength>2097152){G(n,"LIMIT_EXCEEDED");return}try{let v=Sl(l),Y=r.dataPaths??[],F=pi(v,Y);p=Ie(F,0,Y),un(p);}catch{G(n,"INITIAL_STATE_INVALID");return}if(y=createHash("sha256").update(l).digest("hex"),r.initialState.hash!==void 0&&r.initialState.hash!==y){G(n,"INITIAL_STATE_INVALID");return}}let f={...r,entryHash:d,...r.initialState===void 0?{}:{initialState:{path:"ui/state.json",hash:y}}},g=wn(f),E=vl(f,s,l??new Uint8Array),P;try{P=Fl(g,E);}catch(v){if(v instanceof de){G(n,Ml(v));return}throw v}let U;if(n.bundleLineage!==void 0){let v=n.bundleLineage[n.bundleLineage.length-1];if(!v){G(n,"LINEAGE_INVALID");return}let{legacy:Y,...F}=v.definition,{hash:fe,..._e}=P;if(ie(F)!==ie(_e)){G(n,"LINEAGE_STALE");return}if(Y!==void 0&&(P={...P,legacy:Y}),Y!==void 0)try{P={...P,hash:ye(P)},ge(P);}catch{G(n,"LINEAGE_INVALID");return}U=n.bundleLineage;}if(n.bundleIdentity!==void 0&&n.bundleIdentity.appId!==r.pluginId){G(n,"BUNDLE_INTEGRITY");return}if(n.bundleIdentity!==void 0&&(n.bundleIdentity.definitionId!==P.id||n.bundleIdentity.version!==P.version||n.bundleIdentity.definitionHash!==P.hash)){G(n,"LINEAGE_STALE");return}let x=await Cl(e,n,i.mcpb?.icon),T=El(r.pluginId),k=r.actions.length===0?{read:T.read}:T,H=rn(g),S=rn(f),D=rn(P),w=rn({...g.handlers}),m=ds(s),A=l===void 0?void 0:ds(l),h=Object.freeze({...n.provenance===void 0?{}:{provenance:n.provenance},entry:Object.freeze({path:"ui/index.html",hash:d,bytes:m}),...A===void 0?{}:{initialState:Object.freeze({path:"ui/state.json",hash:y,bytes:A})}}),b={appId:r.pluginId,pluginId:r.pluginId,definitionId:r.definitionId,version:r.version,...i.releaseVersion===void 0?{}:{releaseVersion:i.releaseVersion},manifestFile:i.file,...i.mcpb===void 0?{}:{mcpb:rn(i.mcpb)},relativePath:n.relativePath,manifest:S,normalized:H,name:r.name,description:r.description,...r.icon===void 0?{}:{icon:r.icon},...r.tone===void 0?{}:{tone:r.tone},...x.iconFile===void 0?{}:{iconFile:Object.freeze({...x.iconFile})},...x.iconDiagnostics.length===0?{}:{iconDiagnostics:Object.freeze([...x.iconDiagnostics])},definition:D,handlers:w,resources:h,html:c,entryBytes:m,entryHash:d,initialState:rn(p),...A===void 0?{}:{initialStateBytes:A},...y===void 0?{}:{initialStateHash:y},sourceHash:E,toolNames:Object.freeze(k)},B=n.provenance===void 0?{...b,source:n.source}:{...b,provenance:n.provenance,lineage:U??[]};n.candidate=Object.freeze(B),jl(r,P.usage)&&G(n,"EXEC_DENIED");}async function Ns(e,n){let t={};for(let i of ee)try{t[i]=await Jn(e,n,i,262144);}catch(o){if(ae(o)==="NOT_FOUND")continue;return {files:t,failure:sn(ae(o),"manifest")}}if(t[K]!==void 0)try{t[$]=await Jn(e,n,$,262144);}catch(i){if(ae(i)!=="NOT_FOUND")return {files:t,failure:sn(ae(i),"manifest")}}return {files:t}}function Gi(e){return ee.some(n=>e[n]!==void 0)}async function Jl(e,n){let{files:t,failure:i}=await Ns(e,n);if(i!==void 0){G(n,i);return}let o=t[K];return o!==void 0&&!Ii(o)&&(delete t[K],delete t[$]),Gi(t)?t:void 0}function Wl(e,n,t,i=_l,o=false,r=new Set){let a=$l(e),s=Gl(a,r),c=Object.freeze(a.filter(y=>y.candidate!==void 0&&y.diagnostic===void 0&&!s.has(y)).map(y=>y.candidate)),d=Object.freeze(a.filter(y=>y.diagnostic!==void 0).map(y=>y.diagnostic)),p=o?Object.freeze({...t===void 0?{}:{indexHash:t},candidates:Object.freeze(a.filter(y=>y.source==="bundled"&&y.diagnostic===void 0&&t!==void 0&&y.candidate?.provenance?.indexHash===t).map(y=>y.candidate)),diagnostics:Object.freeze(d.filter(y=>y.source==="bundled").map(y=>Object.freeze({...y}))),reservedAppIds:Object.freeze([...i.appIds]),reservedDefinitionIds:Object.freeze([...i.definitionIds])}):void 0,l={apps:c,diagnostics:d,complete:n===void 0,...n===void 0?{}:{incompleteReason:n},...t===void 0?{}:{productBundleIndexHash:t},...p===void 0?{}:{productBundleSnapshotMetadata:p}};return Object.defineProperty(l,"candidates",{configurable:false,enumerable:false,get:()=>c}),Object.freeze(l)}function Kl(e){if(e===null||typeof e!="object"&&typeof e!="function")return  false;let n=e;return typeof n.readVerifiedFile=="function"||typeof n.readFileVerified=="function"||typeof n.listDirectory=="function"||typeof n.readDirectory=="function"||typeof n.readdir=="function"}function Xl(e,n){if(Kl(e))return {fs:e,options:{}};let t=e??n??{};return {fs:t.filesystem??t.fileSystem??t.fs??qr,options:t}}async function Ss(e,n,t){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");let{fs:i,options:o}=Xl(n,t),r=o.clock??Rl,a=r(),s=await is(o.productBundle,i,a,r),c=r(),d=BigInt(Date.now())*1000000n,p=[],l=0,y,f=false,g,E;if(o.scanCache!==void 0&&typeof i.getRootIdentity=="function"&&typeof i.fingerprintVerifiedFile=="function")try{E=await i.getRootIdentity(e),g=Br(o.scanCache,E),g.scanStartedAtNs=d;}catch(S){if(ae(S)!=="NOT_FOUND")throw S}let P=g!==void 0&&o.productBundle===void 0&&s.packages.length===0&&s.diagnostics.length===0,U=new Set,x=true;p.push(...s.diagnostics.map(S=>({source:S.source,root:o.productBundle?.root??e,name:"",relativePath:S.relativePath,diagnostic:S})));let T=s.reservedIds;s.incomplete&&(y="time_limit");for(let S of s.packages){if(!He(c,r)){f=true,y="time_limit";break}let D=S.indexEntry,w=D.packageDir,m=S.files===void 0?void 0:Ol(w,S.files),A=s.indexHash===void 0?void 0:fr(Object.freeze({kind:"bundled",launcher:D.launcher!==false,indexHash:s.indexHash,packageDir:w,appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash,files:D.files}),m),h={source:"bundled",root:o.productBundle?.root??e,name:w.slice(5),relativePath:w,...A===void 0?{}:{provenance:A},...S.files===void 0?{}:{pinnedFiles:S.files},...S.lineage===void 0?{}:{bundleLineage:S.lineage},bundleIdentity:{appId:D.appId,definitionId:D.definition.id,version:D.definition.version,definitionHash:D.definition.hash},identity:Ll(D)};if(p.push(h),l+=1,S.failureCode!==void 0){G(h,S.failureCode);continue}if(S.files?.has($)===true){G(h,"EXEC_DENIED",{reason:{path:"",rule:"bundled-tool-mode-unsupported",file:$}});continue}let b={};for(let B of ee){let v=S.files?.get(B);v!==void 0&&(b[B]=v);}if(!Gi(b)){G(h,"BUNDLE_INTEGRITY");continue}if(await As(i,h,b),!He(c,r)){f=true,y="time_limit";break}}let k=[{source:"apps",directory:"apps"},{source:"skills",directory:"skills"}];e:for(let S of k){let{source:D,directory:w}=S,m;try{m=await Bl(i,e,w);}catch(h){if(ae(h)==="NOT_FOUND")continue;P=false,x=false,p.push({source:D,root:e,name:"",relativePath:D,diagnostic:Lt(sn(ae(h),"manifest"),D,D)});continue}let A=m.filter(h=>h.kind==="directory"||h.kind==="symlink").filter(h=>bl(h.name)).map(h=>({source:D,root:e,name:h.name,relativePath:Tl(D,h.name)})).sort((h,b)=>$n(h.relativePath,b.relativePath));for(let h of A){let b={...h};if(p.push(b),E!==void 0?U.add(Es(E,b)):P=false,!He(c,r)){f=true,y="time_limit";break e}let B;if(g!==void 0&&E!==void 0){try{let F=await xl(i,e,E,b,g,d,c,r);if(F.timeLimitReached){f=!0,y="time_limit";break e}b.scanContext=F.context,B=F.memo;}catch(F){P=false,G(b,sn(ae(F),"manifest"));continue}B===void 0&&(P=false);}if(B!==void 0){if(b.candidate=B.candidate,b.diagnostic=B.diagnostic,b.identity=B.identity,D==="skills"&&B.candidate===void 0&&B.diagnostic===void 0)continue;if(l>=64){G(b,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){G(b,"LIMIT_EXCEEDED");continue}if(l+=1,!He(c,r)){f=true,y="time_limit";break e}continue}let v;if(D==="skills"&&(v=await Jl(i,b),v===void 0)){b.diagnostic===void 0&&Hi(b);continue}if(l>=64){G(b,"LIMIT_EXCEEDED");continue}if(h.relativePath.split("/").length-1>2){G(b,"LIMIT_EXCEEDED");continue}if(!He(c,r)){f=true,y="time_limit";break e}if(l+=1,v===void 0){let F=await Ns(i,b);if(F.failure!==void 0||!Gi(F.files)){G(b,F.failure??sn("NOT_FOUND","manifest")),Hi(b);continue}v=F.files;}if(await As(i,b,v),Hi(b),!He(c,r)){f=true,y="time_limit";break e}}}if(g!==void 0&&E!==void 0){let S=[...U].sort($n),D=g.lastCandidateKeys,w=D!==void 0&&D.length===S.length&&D.every((A,h)=>A===S[h]);if(P=P&&w,x&&!f&&y===void 0)for(let A of g.candidates.keys())try{JSON.parse(A)[0]===E.realPath&&!U.has(A)&&g.candidates.delete(A);}catch{g.candidates.delete(A);}let m=[...g.candidates.keys()].filter(A=>{try{return JSON.parse(A)[0]===E.realPath}catch{return  false}});P=P&&m.length===U.size&&m.every(A=>U.has(A))&&!f&&y===void 0,g.lastCandidateScanUnchanged=P,x&&!f&&y===void 0&&(g.lastCandidateKeys=Object.freeze(S));}f&&p.push({source:"apps",root:e,name:"",relativePath:"apps",diagnostic:Lt("DISCOVERY_TIME_LIMIT","apps","apps")});let H=zl(p,o,T);return Wl(p,y,s.indexHash,T,o.productBundle!==void 0,H)}var _l,Bi,os,Pl,ps,Ul,ls,Ds=j(()=>{I();Qe();Kn();xe();yn();_i();hi();Ze();_t();jr();At();ut();Hr();ki();ft();Vi();Vi();_l=Mt([]),Bi="crewx_local_app_";os=["bundled","apps","skills"],Pl=new TextDecoder("utf-8",{fatal:true});ps=["","/ui"],Ul=["/dist"],ls=2000000000n;});I();_i();I();yn();I();var er="SKILL.md",ip=/^---\s*\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;function nr(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function op(e){return e.isDirectory()||e.isSymbolicLink()}function sr(e){try{return existsSync(e)&&statSync(e).isDirectory()}catch{return  false}}function Ei(e){let n;try{n=readFileSync(e,"utf8");}catch{return {frontmatter:{},readable:false,valid:false,hasFrontmatter:false}}let t=n.match(ip);if(!t)return {frontmatter:{},readable:true,valid:true,hasFrontmatter:false};try{let i=load(t[1]??"");if(!nr(i))return {frontmatter:{},readable:!0,valid:!1,hasFrontmatter:!0};let o=nr(i.metadata)?i.metadata:void 0;return {frontmatter:{...typeof i.name=="string"?{name:i.name}:{},...typeof(o?.version??i.version)=="string"?{version:o?.version??i.version}:{},...typeof i.description=="string"?{description:i.description}:{}},readable:!0,valid:!0,hasFrontmatter:!0}}catch{return {frontmatter:{},readable:true,valid:false,hasFrontmatter:true}}}function rp(e){return [join(e,er),join(e,"skill",er)]}function tr(e,n){if(!sr(e))return null;for(let t of rp(e)){if(!existsSync(t))continue;let o=Ei(t).frontmatter;return {name:o.name??n,...o.version===void 0?{}:{version:o.version},...o.description===void 0?{}:{description:o.description},skillMdPath:t,dir:e}}return null}function ir(e){try{return readdirSync(e,{withFileTypes:!0}).filter(op)}catch{return []}}function or(e,n,t){!e||n.has(e.name)||(n.add(e.name),t.push(e));}function ar(e){let n=[],t=new Set;for(let i of e)if(sr(i))for(let o of ir(i)){if(o.name.startsWith("@")){let r=join(i,o.name);for(let a of ir(r))or(tr(join(r,a.name),a.name),t,n);continue}or(tr(join(i,o.name),o.name),t,n);}return n.sort((i,o)=>i.name.localeCompare(o.name))}I();pt();var sp=/^[A-Za-z0-9_$.[\]"-]{0,200}$/,ap=/^[a-z][a-z0-9-]{0,63}$/,cp="<unknown>";function dp(e){return typeof e=="string"&&(ee.includes(e)||e===$)}function cr(e){if(typeof e!="object"||e===null)return;let{file:n,path:t,rule:i}=e;if(!(typeof i!="string"||!ap.test(i)))return {...dp(n)?{file:n}:{},path:typeof t=="string"&&sp.test(t)?t:cp,rule:i}}function dr(e){if(!Array.isArray(e))return;let n=ee.filter(t=>e.includes(t));return n.length>0?n:void 0}Ds();var ql=/^[A-Za-z][A-Za-z0-9._-]{0,127}$/;function Ct(e){let n="screenHash"in e?e.screenHash:void 0,i=("skillHash"in e?e.skillHash:void 0)??(e.relativePath!==void 0&&e.fileBytes!==void 0?Zl(e.relativePath,e.fileBytes):void 0);if(n!==void 0&&i!==void 0){let o=JSON.stringify({screenHash:n,skillHash:i});return createHash("sha256").update(o,"utf8").digest("hex")}if(n!==void 0)return n;if(i!==void 0)return i;throw new TypeError("App definition hash input must contain a screenHash or skill bytes")}function Zl(e,n){let t=new TextEncoder().encode(kt(e)),i=Ql(n),o=new Uint8Array(t.byteLength+1+i.byteLength);return o.set(t,0),o[t.byteLength]=0,o.set(i,t.byteLength+1),createHash("sha256").update(o).digest("hex")}function Ql(e){if(typeof e=="string")return new TextEncoder().encode(e);if(e instanceof Uint8Array)return new Uint8Array(e);if(e instanceof ArrayBuffer)return new Uint8Array(e.slice(0));if(Array.isArray(e)&&e.every(n=>Number.isInteger(n)&&n>=0&&n<=255))return Uint8Array.from(e);throw new TypeError("fileBytes must be UTF-8 text or bytes")}function kt(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))throw new TypeError("relative path must be package-relative");let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");if(!n||n.split("/").some(t=>t===".."))throw new TypeError("relative path must stay inside the package");return n}function wt(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let a=t[r]-i[r];if(a!==0)return a}return t.byteLength-i.byteLength}function Os(e,n){let t=relative(e,n).split(sep).join("/");return !t||t===".."||t.startsWith("../")||isAbsolute(t)?null:kt(t)}function eu(e){return e==="apps"||e.startsWith("apps/")?"apps":e==="skills"||e.startsWith("skills/")?"skills":e==="node_modules"||e.startsWith("node_modules/")?"node_modules":null}function ws(e){return Object.freeze({packageRoot:e})}function nu(e){return Object.freeze({id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??oe,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}})}function Rs(e){return {capabilities:Object.freeze([...e]),origin:"local",ownership:"unknown",shareability:"unknown",sharingAvailability:"unavailable"}}function tu(e,n){let t=e.candidate,i=t.provenance!==void 0,o=n&&!i?["screen","skill"]:["screen"],r=nu(t),a=Ct(n?{screenHash:r.hash,skillHash:n.skillHash}:{screenHash:r.hash}),s=t.description||n?.skill.description||"",c=t.releaseVersion??String(t.version),d={appId:t.pluginId,name:t.name,description:s,version:c,...Rs(o),definition:r,...n===void 0||i?{}:{skillName:n.skill.name},...i?{provenance:t.provenance}:{localDefinitionRef:ws(e.packageRoot)},definitionHash:a,...t.manifest.csp===void 0?{}:{connectDomains:Object.freeze([...t.manifest.csp.connectDomains])}};return {...i?{}:{packageRoot:e.packageRoot},source:i?"bundled":t.source,appId:d.appId,capabilities:o,summary:Object.freeze(d)}}function iu(e){let n=ou(e.skill.name),t={appId:n,name:e.skill.name,description:e.skill.description??"",...e.skill.version===void 0?{}:{version:e.skill.version},...Rs(["skill"]),skillName:e.skill.name,localDefinitionRef:ws(e.packageRoot),definitionHash:Ct({skillHash:e.skillHash})};return {packageRoot:e.packageRoot,source:e.source,appId:n,capabilities:["skill"],summary:Object.freeze(t)}}function ou(e){return `skill.${e.replace(/^@/,"").replace(/\//g,".").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"").slice(0,122)||"unnamed"}`}function Q(e,n,t,i,o){let r=cr(o?.reason),a=dr(o?.files);return Object.freeze({code:e,source:n,relativePath:ru(t),...i===void 0?{}:{appId:i},...r===void 0?{}:{reason:r},...a===void 0?{}:{files:a}})}function ru(e){if(typeof e!="string"||e.length===0||isAbsolute(e)||/[\\\u0000]/.test(e))return "<unknown>";let n=e.split("/").filter(t=>t.length>0&&t!==".").join("/");return n.split("/").some(t=>t==="..")?"<unknown>":n}function Cs(e){return Q(e.code,e.source,e.relativePath,e.pluginId,e)}function su(e,n){let t=Os(e,n.dir);if(!t)return {diagnostic:Q("PATH_ESCAPED","node_modules","node_modules")};let i=eu(t);if(!i)return {diagnostic:Q("PATH_ESCAPED","node_modules",t)};let o=Ei(n.skillMdPath);if(!o.readable)return {diagnostic:Q("SKILL_READ_FAILED",i,t)};if(!o.valid)return {diagnostic:Q("SKILL_INVALID",i,t)};let r=au(n.dir,n.skillMdPath);if(!r)return {diagnostic:Q("PATH_ESCAPED",i,t)};try{let a=new Uint8Array(readFileSync(n.skillMdPath));return {skill:n,packageRoot:t,relativeSkillPath:r,skillHash:Ct({relativePath:r,fileBytes:a}),source:i}}catch{return {diagnostic:Q("SKILL_READ_FAILED",i,t)}}}function au(e,n){let t=relative(e,n).split(sep).join("/");try{return kt(t)}catch{return null}}function cu(e){if(!ql.test(e.appId))return {diagnostic:Q("BUILTIN_INVALID","builtin",`builtin/${e.appId||"unknown"}`)};let n=e.definition===void 0?void 0:{id:e.definition.id,version:e.definition.version,hash:e.definition.hash,usage:e.definition.usage??oe,...e.definition.detailPanel===void 0?{}:{detailPanel:e.definition.detailPanel},...e.definition.displayModes===void 0?{}:{displayModes:e.definition.displayModes},...e.definition.summaryProjection===void 0?{}:{summaryProjection:e.definition.summaryProjection}},t=n?.hash??createHash("sha256").update(JSON.stringify({appId:e.appId,name:e.name,description:e.description}),"utf8").digest("hex"),i={appId:e.appId,name:e.name,description:e.description,...n===void 0?{}:{version:String(n.version),definition:n},capabilities:["screen"],origin:"builtin",ownership:"unknown",shareability:"forbidden",sharingAvailability:"unavailable",definitionHash:t};return {source:"builtin",appId:e.appId,summary:Object.freeze(i)}}function du(e){return e.builtinCatalog}function pu(e){let n=e.packageRoot??e.relativePath??e.packageRootPath;if(n===void 0)return null;try{return kt(n)}catch{return null}}function lu(e){let n=e.marketplaceContentId;return typeof n=="string"&&n.length>0?n:void 0}function uu(e,n,t){let i=n.installed??[],o=new Map;for(let a of i){let s=pu(a);if(!s){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed","installed"));continue}let c=o.get(s);if(c&&JSON.stringify(c)!==JSON.stringify(a)){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",s));continue}o.set(s,a);}let r=new Map;for(let a of e)a.packageRoot!==void 0&&r.set(a.packageRoot,a);for(let[a,s]of o){let c=r.get(a);if(!c){t.push(Q("INSTALLED_MISSING","installed",a,s.appId));continue}let d=lu(s);if(!d){t.push(Q("INSTALLED_CONTENT_ID_MISSING","installed",a,s.appId));continue}if(s.appId!==void 0&&s.appId!==c.appId||s.definitionHash!==void 0&&s.definitionHash!==c.summary.definitionHash){t.push(Q("INSTALLED_IDENTITY_MISMATCH","installed",a,s.appId));continue}let p={...c.summary,origin:"installed",...s.slug===void 0?{}:{slug:s.slug},marketplaceContentId:d},l=e.indexOf(c);l>=0&&(e[l]={...c,summary:Object.freeze(p)});}}function fu(e,n){let t=new Map;for(let o of e){let r=t.get(o.appId)??[];r.push(o),t.set(o.appId,r);}let i=new Set;for(let o of t.values()){if(o.length<2)continue;let r=o.some(a=>a.source==="builtin")?"builtin":o.some(a=>a.source==="bundled")?"bundled":void 0;if(r==="bundled"){let a=o.filter(s=>s.source==="apps"&&s.summary.definition!==void 0);if(a.length===1){for(let s of o)s.source==="bundled"?i.add(s):s!==a[0]&&(i.add(s),n.push(Q("RESERVED_ID",s.source,Rt(s),s.appId)));continue}}if(r!==void 0){let a=o.filter(s=>s.source===r);for(let s of o.filter(c=>c.source!==r))i.add(s),n.push(Q("RESERVED_ID",s.source,Rt(s),s.appId));if(a.length>1)for(let s of a)i.add(s),n.push(Q("DUPLICATE_ID",s.source,Rt(s),s.appId));continue}for(let a of o)i.add(a),n.push(Q("DUPLICATE_ID",a.source,Rt(a),a.appId));}return e.filter(o=>!i.has(o))}function Rt(e){return e.packageRoot??e.summary.provenance?.packageDir??`builtin/${e.appId}`}function yu(e,n){return e.filter(t=>!(t.code==="MANIFEST_MISSING"&&n.has(t.relativePath))).map(Cs)}function Au(e){return e.filesystem}function mu(e,n){let t=Au(e),i=e.registeredProductBundle;return {...t===void 0?{}:{filesystem:t},...e.productBundle===void 0?{}:{productBundle:e.productBundle},...n===void 0?{}:{builtinCatalog:n},...i===void 0?{}:{productBundleReservationMetadata:i}}}async function ks(e,n={}){if(typeof e!="string"||e.length===0)throw new TypeError("workspaceRoot must be explicit");if(n.productBundle!==void 0&&n.registeredProductBundle!==void 0)throw new TypeError("registeredProductBundle cannot be combined with product bundle discovery");let t=du(n),i=await Ss(e,mu(n,t)),o=n.registeredProductBundle??i.productBundleSnapshotMetadata,r=[join(e,"skills"),join(e,"node_modules"),join(e,"apps")],a=[],s=[],c=[],d=new Set;for(let A of r)for(let h of ar([A])){let b=Os(e,h.dir);(b===null||!d.has(b))&&(c.push(h),b!==null&&d.add(b));}for(let A of c){let h=su(e,A);"diagnostic"in h?a.push(h.diagnostic):s.push(h);}let p=new Map,l=n.registeredProductBundle?.indexHash,y=(n.registeredProductBundle?.candidates??[]).filter(A=>l!==void 0&&A.provenance?.indexHash===l),f=[...new Set([...i.apps??i.candidates??[],...i.productBundleSnapshotMetadata?.candidates??[]]),...y],g=new Set(y),E=new Set(l===void 0?[]:(t?.listMcpApps()??[]).filter(A=>A.provenance?.indexHash===l).map(A=>A.appId));for(let A of f){if(g.has(A)&&A.provenance?.indexHash===l&&E.has(A.appId))continue;let h=A.provenance===void 0?`workspace\0${A.relativePath}`:`bundled\0${A.provenance.indexHash}\0${A.provenance.packageDir}`;p.set(h,{candidate:A,packageRoot:A.relativePath});}let P=new Map(s.map(A=>[A.packageRoot,A])),U=[];for(let A of p.values()){let h=A.candidate.provenance===void 0?P.get(A.packageRoot):void 0,b=tu(A,h);U.push({...b.packageRoot===void 0?{}:{packageRoot:b.packageRoot},source:b.source,appId:b.appId,summary:b.summary});}let x=new Set([...p.values()].filter(A=>A.candidate.provenance===void 0).map(A=>A.packageRoot)),T=o===void 0?new Set:new Set(i.diagnostics.filter(A=>A.code==="RESERVED_ID"&&A.source!=="bundled").map(A=>A.relativePath)),k=new Set(o?.reservedAppIds??[]);for(let A of s){let h=iu(A);if(!(x.has(A.packageRoot)||T.has(A.packageRoot))){if(k.has(h.appId)){a.push(Q("RESERVED_ID",A.source,A.packageRoot,h.appId));continue}U.push({packageRoot:h.packageRoot,source:h.source,appId:h.appId,summary:h.summary});}}let H=[...yu(i.diagnostics,new Set(s.map(A=>A.packageRoot))),...a,...n.registeredProductBundle?.diagnostics.filter(A=>A.source==="bundled").map(Cs)??[]],S=[];if(t)for(let A of t.listMcpApps()){let h=cu(A);"diagnostic"in h?H.push(h.diagnostic):S.push(h);}let D=fu([...U,...S],H);uu(D,n,H);let w=D.map(A=>A.summary).sort((A,h)=>wt(A.appId,h.appId)),m=[...H].sort((A,h)=>wt(A.relativePath,h.relativePath)||wt(A.code,h.code)||wt(A.appId??"",h.appId??""));return Object.freeze({items:Object.freeze(w),diagnostics:Object.freeze(m)})}I();I();I();function Iu(e){let n=o=>o.replace(/[.+^${}()|[\]\\]/g,"\\$&"),i=e.split("/").map(o=>o==="**"?".*":o.split("*").map(n).join("[^/]*"));return new RegExp(`^${i.join("\\/")}$`)}function Nn(e,n){try{return Iu(n).test(e)}catch{return  false}}function Ut(e,...n){let t=e.split("/");if(t.length<n.length)return  false;let i=t.length-n.length;return n.every((o,r)=>Nn(t[i+r],o))}function gu(e,n){return e.split("/").some(t=>Nn(t,n))}var Us=[{label:".npmrc",test:e=>e===".npmrc"},{label:".env*",test:e=>Nn(e,".env*")},{label:".git/",test:(e,n,t)=>t&&e===".git"},{label:"memory/",test:(e,n,t)=>t&&e==="memory"},{label:"*.key",test:e=>Nn(e,"*.key")},{label:"*.pem",test:e=>Nn(e,"*.pem")},{label:"auth.json",test:e=>e==="auth.json"},{label:"node_modules/",test:(e,n,t)=>t&&e==="node_modules"},{label:"conversations/",test:(e,n,t)=>t&&e==="conversations"},{label:".crewx/threads/",test:(e,n,t)=>t&&Ut(n,".crewx","threads")},{label:".crewx/crewx.db",test:(e,n,t)=>!t&&Ut(n,".crewx","crewx.db")},{label:".crewx/*.log",test:(e,n,t)=>!t&&Ut(n,".crewx","*.log")},{label:".crewx/publish/",test:(e,n,t)=>t&&Ut(n,".crewx","publish")},{label:".crewx/",test:(e,n)=>gu(n,".crewx")}];function Sn(e,n,t){for(let i of Us)if(i.test(e,n,t))return i.label;return null}I();var Ge=class extends Error{constructor(t,i){super(`publish: [${t}]${i?` ${i}`:""}`);this.code=t;}code;name="PublishError"};function N(e,n){return new Ge(e,n)}function xs(e,n){if(!n||/[\\\u0000]/.test(n)||pe.posix.isAbsolute(n)||n.split("/").some(f=>!f||f==="."||f===".."))throw N("PACKAGE_PATH_TRAVERSAL","package root must be a safe workspace-relative path");let t=pe.resolve(e),i=pe.resolve(t,...n.split("/"));if(!i.startsWith(`${t}${pe.sep}`))throw N("PACKAGE_PATH_TRAVERSAL","package root escaped the workspace");function o(f,g){let E;try{E=te.lstatSync(f);}catch{throw N("PACKAGE_FILE_INVALID",`package directory is missing: ${g}`)}if(E.isSymbolicLink())throw N("PACKAGE_SYMLINK",`symlink is not publishable: ${g}`);if(!E.isDirectory())throw N("PACKAGE_FILE_INVALID",`not a package directory: ${g}`)}o(t,".");let r=t,a="",s=null;for(let f of n.split("/"))r=pe.join(r,f),a=a?`${a}/${f}`:f,o(r,a),s??=Sn(f,a,true);let c=[],d=[];function p(f,g){o(f,g);let E=te.readdirSync(f,{withFileTypes:true});for(let P of E){let U=`${g}/${P.name}`,x=pe.join(f,P.name);if(P.isSymbolicLink())throw N("PACKAGE_SYMLINK",`symlink is not publishable: ${U}`);let T=Sn(P.name,U,P.isDirectory());T?d.push({path:U,rule:T}):P.isDirectory()?p(x,U):P.isFile()&&c.push(U);}}s?d.push({path:n,rule:s}):p(i,n);let l=new TextEncoder,y=(f,g)=>Buffer.compare(l.encode(f),l.encode(g));return c.sort(y),d.sort((f,g)=>y(f.path,g.path)),{included:c,excluded:d}}function vs(e){let n=[],t=[];function i(o,r,a){let s;try{s=te.readdirSync(o,{withFileTypes:!0});}catch{return}s.sort((c,d)=>c.name.localeCompare(d.name));for(let c of s){let d=r?`${r}/${c.name}`:c.name,p=pe.join(o,c.name);if(c.isSymbolicLink()){let l;try{l=te.statSync(p);}catch{t.push({path:d,rule:"symlink"});continue}if(l.isDirectory()){t.push({path:d,rule:a??"symlink-dir"});continue}let y=a??Sn(c.name,d,false);y?t.push({path:d,rule:y}):t.push({path:d,rule:"symlink"});continue}if(c.isDirectory()){let l=a??Sn(c.name,d,true);i(p,d,l);continue}if(c.isFile()){let l=a??Sn(c.name,d,false);l?t.push({path:d,rule:l}):n.push(d);}}}return i(e,"",null),n.sort(),t.sort((o,r)=>o.path<r.path?-1:o.path>r.path?1:0),{included:n,excluded:t}}I();var hu=[{rule:"token-prefix",regex:/\b(?:sk-|ghp_|xoxb-)[A-Za-z0-9_-]{10,}/},{rule:"private-key",regex:/-----BEGIN [A-Z ]*PRIVATE KEY-----/},{rule:"aws-access-key",regex:/\bAKIA[0-9A-Z]{16}\b/}];function _u(e){return e.includes(0)}function Wi(e,n,t){let i=[];for(let o of n){let r=pe.join(e,o),a;try{let c=t?.get(o);a=c===void 0?te.readFileSync(r):Buffer.from(c);}catch{continue}if(_u(a))continue;a.toString("utf8").split(/\r\n|\r|\n/).forEach((c,d)=>{for(let{rule:p,regex:l}of hu)l.test(c)&&i.push({path:o,line:d+1,rule:p});});}return i}I();var cn=class extends Error{constructor(t,i,o=t,r){super(o);this.code=t;this.step=i;this.detail=r;this.name="AppInstallError";}code;step;detail};I();I();I();I();I();I();var Pu=["dependencies","devDependencies","optionalDependencies","peerDependencies"];function Ye(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}function ue(e,n){return new cn(e,"dependencies",n)}function Vs(e,n){try{let t=te.lstatSync(e);if(t.isSymbolicLink()||!t.isFile())throw new Error("not a regular file");return JSON.parse(te.readFileSync(e,"utf8"))}catch(t){let i=t!==null&&typeof t=="object"&&"code"in t?String(t.code):"";throw n==="package-lock.json"?ue("DEPS_LOCKFILE_MISSING","package-lock.json is missing or invalid."):i==="ENOENT"?ue("DEPS_INSTALL_FAILED","package.json is missing."):ue("DEPS_INSTALL_FAILED","package.json is invalid.")}}function Tu(e){let n=e.dependencies;if(n!==void 0){if(!Ye(n)||Object.values(n).some(t=>typeof t!="string"))throw ue("DEPS_INSTALL_FAILED","package.json dependencies must be a string map.");return Object.keys(n).length===0?void 0:n}}function bu(e,n){let t=Ye(e)?e:{},i=Ye(n)?n:{},o=Object.keys(t).sort(),r=Object.keys(i).sort();return o.length===r.length&&o.every((a,s)=>a===r[s]&&t[a]===i[a])}function Nu(e,n){for(let t of Pu){let i=e[t];if(!bu(i,n[t]))throw ue("DEPS_LOCKFILE_MISSING","package-lock.json is out of sync with package.json.")}if(typeof e.name=="string"&&typeof n.name=="string"&&e.name!==n.name||typeof e.version=="string"&&typeof n.version=="string"&&e.version!==n.version)throw ue("DEPS_LOCKFILE_MISSING","package-lock.json is out of sync with package.json.")}function Bs(e){let n=pe.join(e,"package.json");if(!te.existsSync(n))return "skipped";let t=Vs(n,"package.json");if(!Ye(t))throw ue("DEPS_INSTALL_FAILED","package.json must contain an object.");if(Tu(t)===void 0)return "skipped";let i=pe.join(e,"package-lock.json"),o=Vs(i,"package-lock.json");if(!Ye(o)||!Number.isInteger(o.lockfileVersion)||o.lockfileVersion<2||!Ye(o.packages))throw ue("DEPS_LOCKFILE_MISSING","package-lock.json is missing a supported npm lockfile package map.");let r=o.packages,a=r[""];if(!Ye(a))throw ue("DEPS_LOCKFILE_MISSING","package-lock.json has no root package entry.");Nu(t,a);for(let[s,c]of Object.entries(r)){if(s==="")continue;if(!Ye(c))throw ue("DEPS_LOCKFILE_MISSING","package-lock.json contains an invalid package entry.");let d=c;if(d.link===true)throw ue("DEPS_REGISTRY_REFUSED",`package-lock.json contains a linked dependency at ${s}.`);if(typeof d.resolved=="string"&&!d.resolved.startsWith("https://registry.npmjs.org/"))throw ue("DEPS_REGISTRY_REFUSED",`package-lock.json contains a non-registry dependency at ${s}.`);if(typeof d.integrity!="string"||d.integrity.trim().length===0)throw ue("DEPS_REGISTRY_REFUSED",`package-lock.json has no integrity for ${s}.`)}return "ready"}I();var Hs=/^[a-z0-9-]+$/,Su=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,Du=/^[A-Za-z_][A-Za-z0-9_]*$/;function Mu(e){let n=pe.join(e,"crewx.yaml");if(!te.existsSync(n))return {};let t;try{t=Gs.load(te.readFileSync(n,"utf8"));}catch{return {}}if(!t||typeof t!="object")return {};let i=t.metadata;if(!i||typeof i!="object")return {};let o=i;return {name:typeof o.name=="string"?o.name:void 0,version:typeof o.version=="string"?o.version:void 0,description:typeof o.description=="string"?o.description:void 0,requiredEnv:o.requiredEnv,crewxMinVersion:typeof o.crewxMinVersion=="string"?o.crewxMinVersion:void 0}}function Lu(e){return Ki.createHash("sha256").update(e).digest("hex")}function zs(e){let n;try{n=te.lstatSync(e);}catch{throw N("PACKAGE_FILE_INVALID",`file is not readable: ${pe.basename(e)}`)}if(n.isSymbolicLink())throw N("PACKAGE_SYMLINK","symlink content is not publishable");if(!n.isFile())throw N("PACKAGE_FILE_INVALID","only regular files are publishable");return Ki.createHash("sha256").update(new Uint8Array(te.readFileSync(e))).digest("hex")}function Ou(e,n){let t=new TextEncoder().encode(e),i=new TextEncoder().encode(n),o=Math.min(t.byteLength,i.byteLength);for(let r=0;r<o;r+=1){let a=t[r]-i[r];if(a!==0)return a}return t.byteLength-i.byteLength}function $s(e){if(typeof e!="string"||e.length===0||e.includes("\\")||e.includes("\0")||pe.posix.isAbsolute(e)||e.split("/").some(n=>n===".."||n.length===0))throw N("PACKAGE_PATH_TRAVERSAL","manifest file path must be a non-empty POSIX relative path")}function wu(e){if(!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(e))throw N("APP_PACKAGE_ROOT_INVALID","packageRoot must be apps/<safe-id> or skills/<safe-id>")}function Js(e){if(!Su.test(e))throw new Error(`publish: invalid version "${e}" \u2014 must be semver (e.g. 1.0.0)`)}function Ws(e,n,t={}){let i=Mu(e),o=i.name??pe.basename(e);if(!Hs.test(o))throw new Error(`publish: invalid name "${o}" \u2014 must match ${Hs} (lowercase letters, numbers, hyphen only)`);let r=t.version??i.version;if(!r)throw new Error("publish: version is required \u2014 set crewx.yaml metadata.version or pass opts.version");Js(r);let a=Array.isArray(i.requiredEnv)?i.requiredEnv:[],s=[];for(let p of a){if(typeof p!="string"||!Du.test(p))throw new Error(`publish: requiredEnv must contain names only (no values), got "${String(p)}"`);s.push(p);}let c=n.map(p=>($s(p),{path:p,sha256:zs(pe.join(e,p))})).sort((p,l)=>p.path<l.path?-1:p.path>l.path?1:0),d={name:o,version:r,type:"template",description:i.description??"",files:c,requiredEnv:s};return i.crewxMinVersion&&(d.crewxMinVersion=i.crewxMinVersion),d}function Ru(e){let n=e.toLowerCase().replace(/[^a-z0-9-]+/g,"-").replace(/-+/g,"-").replace(/^-+|-+$/g,"");if(!n)throw N("APP_PACKAGE_ROOT_INVALID","appId cannot produce a marketplace name");return n}function Ks(e,n){if(wu(n.packageRoot),!n.version)throw new Error("publish: version is required for App publishing \u2014 pass opts.version");if(Js(n.version),typeof n.description!="string")throw new Error("publish: App description must be a string");let t=[...new Set(n.capabilities)].sort();if(t.length===0||t.some(a=>a!=="screen"&&a!=="skill"))throw new Error("publish: App capabilities must contain screen or skill");let i=`${n.packageRoot}/`;if(t.includes("screen")){if(typeof n.definitionId!="string"||n.definitionId.length===0)throw N("APP_UI_MANIFEST_INVALID","screen App manifests require definitionId");let a=n.includedFiles.includes(`${i}manifest.json`),s=n.includedFiles.includes(`${i}ui-plugin.json`);if(!a&&!s)throw N("APP_UI_MANIFEST_INVALID","screen App is missing manifest.json or ui-plugin.json");if(a&&!s)throw N("APP_UI_MANIFEST_INVALID","a manifest.json App must also ship a generated ui-plugin.json");if(!n.includedFiles.includes(`${i}ui/index.html`))throw N("APP_UI_MANIFEST_INVALID","screen App is missing ui/index.html")}if(t.includes("skill")&&!n.includedFiles.includes(`${i}SKILL.md`))throw N("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");let o=new Set,r=n.includedFiles.map(a=>{if($s(a),!a.startsWith(i))throw N("PACKAGE_PATH_TRAVERSAL","App manifest file is outside packageRoot");let s=n.generatedFiles?.get(a);return s!==void 0&&o.add(a),{path:a,sha256:s===void 0?zs(pe.join(e,a)):Lu(s),...s===void 0?{}:{generated:true}}}).sort((a,s)=>Ou(a.path,s.path));if(o.size>0&&(o.size!==1||!o.has(`${i}ui-plugin.json`)))throw new Error("publish: only the generated ui-plugin.json may be present in an App package");return {manifestVersion:1,name:Ru(n.appId),version:n.version,type:"app",description:n.description,appId:n.appId,...n.definitionId===void 0?{}:{definitionId:n.definitionId},...n.definitionHash===void 0?{}:{definitionHash:n.definitionHash},capabilities:t,packageRoot:n.packageRoot,files:r,requiredEnv:[]}}I();function Xs(e){return Ki.createHash("sha256").update(e).digest("hex")}function ea(e,n){if(typeof n!="string"||n.length===0||n.includes("\\")||n.includes("\0")||pe.posix.isAbsolute(n)||n.split("/").some(o=>o===".."||o.length===0))throw N("PACKAGE_PATH_TRAVERSAL","archive paths must be non-empty POSIX relative paths");let t=pe.resolve(e),i=pe.resolve(t,...n.split("/"));if(i!==t&&!i.startsWith(`${t}${pe.sep}`))throw N("PACKAGE_PATH_TRAVERSAL","archive path escaped its root");return i}function Ys(e,n){let t=ea(e,n),i;try{i=te.lstatSync(t);}catch{throw N("PACKAGE_FILE_INVALID","manifest file is missing")}if(i.isSymbolicLink())throw N("PACKAGE_SYMLINK","symlink content is not publishable");if(!i.isFile())throw N("PACKAGE_FILE_INVALID","only regular files are publishable");return new Uint8Array(te.readFileSync(t))}async function na(e,n,t={}){let i=pe.join(e,".crewx","publish");te.mkdirSync(i,{recursive:true});let o=pe.join(i,`${n.name}-${n.version}.tgz`),r=pe.join(i,`.${n.name}-${n.version}.${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}.tmp.tgz`),a=te.mkdtempSync(pe.join(qs.tmpdir(),"crewx-publish-"));try{let s=new Set,c=[];for(let d of n.files){if(s.has(d.path))throw N("PACKAGE_PATH_TRAVERSAL","manifest contains duplicate file paths");s.add(d.path);let p=t.generatedFiles?.get(d.path);if(d.generated===!0&&p===void 0)throw N("PACKAGE_GENERATED_FILE_MISSING","generated manifest file bytes are missing");if(t.sourceFileHashes?.has(d.path)){let f=Ys(e,d.path);if(t.sourceFileHashes.get(d.path)!==Xs(f))throw N("PACKAGE_STAGED_BYTES_MISMATCH","workspace source changed before staging")}let l=p??Ys(e,d.path);if(Xs(l)!==d.sha256)throw N("PACKAGE_STAGED_BYTES_MISMATCH",`staged bytes differ for ${d.path}`);let y=ea(a,d.path);te.mkdirSync(pe.dirname(y),{recursive:!0}),te.writeFileSync(y,new Uint8Array(l)),c.push(d.path);}te.writeFileSync(pe.join(a,"manifest.json"),JSON.stringify(n,null,2)),await Qs.create({gzip:!0,file:r,cwd:a,portable:!0,noMtime:!0},["manifest.json",...c]),te.renameSync(r,o);}finally{try{te.rmSync(r,{force:!0});}catch{}te.rmSync(a,{recursive:true,force:true});}return o}I();I();var Dn="/api/v1";var Uu=201,xu=200,vu=409,Xi=401,ta={APP_NAME_CONFLICT:"APP_NAME_CONFLICT",CONTENT_SUSPENDED:"PUBLISH_CONTENT_SUSPENDED",CONTENT_REJECTED:"CONTENT_REJECTED",APP_VERSION_MUST_INCREASE:"APP_VERSION_MUST_INCREASE",APP_VERSION_INVALID:"APP_VERSION_INVALID"};function Fu(){return process.env.WI013_FAKE_UPLOAD==="1"}function ju(e){let n=gunzipSync(new Uint8Array(e)),t=gzipSync(new Uint8Array(n),{level:1});if(Buffer.compare(new Uint8Array(t),new Uint8Array(e))===0)throw new Error("publish: [E_MALFORMED] Re-gzipped upload bytes are identical to the original \u2014 tamper is a no-op");return t}function Vu(e){return e.replace(/\/+$/,"")}async function Wn(e){try{return await e.json()}catch{return null}}function ia(e,n,t){let i=e;if(!i||i.success!==true||i.data===void 0)throw new Error(`publish: [E_MALFORMED] ${n} response envelope is malformed (expected { success: true, data }) \u2014 HTTP ${t}`);return i.data}function Bu(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.contentId=="string"&&n.contentId.length>0)return n.contentId;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.contentId=="string"&&t.contentId.length>0?t.contentId:void 0}function Hu(e){if(!e||typeof e!="object"||Array.isArray(e))return;let n=e;if(typeof n.slug=="string"&&n.slug.length>0)return n.slug;if(!n.data||typeof n.data!="object"||Array.isArray(n.data))return;let t=n.data;return typeof t.slug=="string"&&t.slug.length>0?t.slug:void 0}function oa(e,n){if(!e||typeof e!="object"||Array.isArray(e))return;let t=e,i=t.data&&typeof t.data=="object"&&!Array.isArray(t.data)?t.data:void 0,o=[t.code,t.message,i?.code,i?.message];for(let r of o){if(typeof r!="string"||!Object.prototype.hasOwnProperty.call(ta,r))continue;let a=r,s=a==="APP_NAME_CONFLICT"?`marketplace name is already in use: ${n}`:void 0;return N(ta[a],s)}}async function Gu(e){if(!e.baseUrl.trim())throw new Error("publish: [E_ENV_MISSING] Marketplace base URL is required");if(!e.accessToken.trim())throw new Error("publish: [E_AUTH_EXPIRED] A valid bearer token is required");let n=Vu(e.baseUrl),t=e.accessPolicy??"private",i=e.manifest.name,o=e.manifest.type==="app"?e.manifest:void 0,r=o!==void 0,a=o?.appId,s;try{s=await fetch(`${n}${Dn}/publisher/items`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({slug:i,displayName:i,description:e.manifest.description,type:e.manifest.type,version:e.manifest.version,accessPolicy:t,...a===void 0?{}:{appId:a}})});}catch{throw new Error("publish: [E_NETWORK] Submit request failed (network)")}let c=await Wn(s),d=Bu(c),p=Hu(c),l=r&&p!==void 0?p:i,y;if(s.status===Uu)y="created";else if(r&&s.status===xu){if(d===void 0)throw N("PUBLISH_CONTENT_ID_MISSING","App republish did not return an opaque contentId");y="existing";}else if(s.status===vu){if(r)throw oa(c,i)??N("APP_NAME_CONFLICT",`marketplace name is already in use: ${i}`);y="existing";}else throw s.status===Xi?new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)"):new Error(`publish: [E_HTTP] Submit request failed \u2014 HTTP ${s.status}`);let f="not-needed",g=null;if(y==="existing"&&!r){let D;try{D=await fetch(`${n}${Dn}/publisher/items`,{method:"GET",headers:{Authorization:`Bearer ${e.accessToken}`}});}catch{throw new Error("publish: [E_NETWORK] Publisher items request failed (network)")}let w=await Wn(D);if(D.status!==200)throw new Error(`publish: [E_HTTP] Publisher items request failed \u2014 HTTP ${D.status}`);let A=ia(w,"publisher items",D.status)?.items;if(!Array.isArray(A))throw new Error(`publish: [E_MALFORMED] Publisher items response is malformed (expected data.items[]) \u2014 HTTP ${D.status}`);let h=A.find(b=>!b||typeof b!="object"?false:b.slug===i);if(!h||typeof h.version!="string")throw new Error(`publish: [E_MALFORMED] Publisher items response does not contain slug "${i}" \u2014 HTTP ${D.status}`);if(g=h.version,g!==e.manifest.version){let b;try{b=await fetch(`${n}${Dn}/publisher/items/${encodeURIComponent(i)}`,{method:"PUT",headers:{Authorization:`Bearer ${e.accessToken}`,"Content-Type":"application/json"},body:JSON.stringify({version:e.manifest.version})});}catch{throw new Error("publish: [E_NETWORK] Version update request failed (network)")}if(!b.ok)throw await Wn(b),b.status===Xi?new Error(`publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP ${b.status})`):b.status===403?new Error(`publish: [E_FORBIDDEN] Version update is forbidden; only the item owner can update an existing item (HTTP ${b.status})`):new Error(`publish: [E_HTTP] Version update failed \u2014 HTTP ${b.status}`);f="applied";}}let E=te.readFileSync(e.tgzPath),P=Fu()?ju(E):E,U=new FormData;U.set("archive",new Blob([new Uint8Array(P)],{type:"application/gzip"}),`${l}-${e.manifest.version}.tgz`);let x=r&&d!==void 0?d:i,T;try{T=await fetch(`${n}${Dn}/publisher/items/${encodeURIComponent(x)}/upload`,{method:"POST",headers:{Authorization:`Bearer ${e.accessToken}`},body:U});}catch{throw new Error("publish: [E_NETWORK] Upload request failed (network)")}if(T.status===Xi)throw new Error("publish: [E_AUTH_EXPIRED] Authentication is expired or missing \u2014 please log in again (HTTP 401)");if(!T.ok){let D=await Wn(T);if(r){let w=oa(D,l);if(w)throw w}throw new Error(`publish: [E_HTTP] Upload request failed \u2014 HTTP ${T.status}`)}let k=await Wn(T),H=ia(k,"upload",T.status),S=typeof H.contentId=="string"&&H.contentId.length>0?H.contentId:d;if(r&&S===void 0)throw N("PUBLISH_CONTENT_ID_MISSING","App upload did not return an opaque contentId");return {slug:l,version:e.manifest.version,...S===void 0?{}:{contentId:S},artifactChecksum:H.artifactChecksum,artifactSizeBytes:H.artifactSizeBytes,submitOutcome:y,versionUpdate:f,serverVersionBefore:g}}var zu=1e4,$u=100*1024*1024;function Yi(e){return Ki.createHash("sha256").update(e).digest("hex")}function Ju(e){if(e===null||typeof e!="object"||Array.isArray(e))return  false;let n=Object.getPrototypeOf(e);return n===Object.prototype||n===null}function qe(e,n){if(!n||n.includes("\\")||n.includes("\0")||pe.posix.isAbsolute(n)||n.split("/").some(r=>r===".."||r.length===0))throw N("PACKAGE_PATH_TRAVERSAL","workspace file path is not a safe relative path");let t=pe.resolve(e,...n.split("/")),i=pe.resolve(e);if(t!==i&&!t.startsWith(`${i}${pe.sep}`))throw N("PACKAGE_PATH_TRAVERSAL","workspace file path escaped the workspace root");let o;try{o=te.lstatSync(t);}catch{throw N("PACKAGE_FILE_INVALID",`workspace file is missing: ${n}`)}if(o.isSymbolicLink())throw N("PACKAGE_SYMLINK",`symlink is not publishable: ${n}`);if(!o.isFile())throw N("PACKAGE_FILE_INVALID",`not a regular file: ${n}`);return new Uint8Array(te.readFileSync(t))}async function Wu(e,n,t){let i=`${n}/${K}`;if(!t.includes(i))return [];let o={[K]:qe(e,i)},r=`${n}/${$}`;t.includes(r)&&(o[$]=qe(e,r));let a=Ke(o,{mode:"local"});if(!a.ok)return [];let{diagnostics:s}=await Cn(a.mcpb?.icon,async d=>{let p=`${n}/${d}`;return t.includes(p)?qe(e,p):"missing"}),c=s.find(d=>d.code==="ICON_INVALID");if(c!==void 0)throw N("ICON_INVALID",`${c.reason??"invalid"} at ${c.declared??"icon"}`);return s.flatMap(d=>d.code==="ICON_INVALID"?[]:[{code:d.code,path:d.declared??"icon"}])}function sa(e,n,t){let i=e??n;if(!Number.isSafeInteger(i)||i<=0)throw new Ge("PACKAGE_SIZE_LIMIT",`${t} must be a positive integer`);return i}function ca(e,n,t,i){let o=sa(t.maxFileCount??t.maxFiles,zu,"max file count"),r=sa(t.maxTotalBytes??t.maxBytes,$u,"max total bytes");if(n.length>o)throw new Ge("PACKAGE_SIZE_LIMIT",`package exceeds file count limit (${o})`);let a=0;for(let s of n){let c=i?.get(s);if(c!==void 0?a+=c.byteLength:a+=qe(e,s).byteLength,a>r)throw new Ge("PACKAGE_SIZE_LIMIT",`package exceeds byte limit (${r})`)}}function Ku(e){return e.appId!==void 0||e.expectedDefinitionHash!==void 0}function Xu(e){let n=e.appId!==void 0,t=e.expectedDefinitionHash!==void 0;if(!n&&t)throw N("APP_ID_REQUIRED","appId is required with expectedDefinitionHash");if(n&&!t)throw N("APP_DEFINITION_HASH_REQUIRED","expectedDefinitionHash is required with appId");if(!n||!t)throw N("APP_ID_REQUIRED")}function Yu(e,n){let t=e.filter(i=>i.appId===n);if(t.length===0)throw N("APP_NOT_FOUND",`no publishable App matches ${n}`);if(t.length!==1)throw N("APP_AMBIGUOUS",`more than one App matches ${n}`);return t[0]}function qu(e){let n=e.localDefinitionRef?.packageRoot;if(!n||!/^(?:apps|skills)\/[A-Za-z][A-Za-z0-9._-]{0,127}$/.test(n))throw N("APP_PACKAGE_ROOT_INVALID","selected App is not rooted in apps/<safe-id> or skills/<safe-id>");return n}function qi(e){let{path:n,rule:t}=e.reason;return `${e.code} at ${n===""?"<file>":n} (${t})`+(e.files.length>0?` [${e.files.join(", ")}]`:"")}function Zu(e,n,t){let i=Ke({[le]:t},{mode:"published"});if(!i.ok)throw N("APP_UI_MANIFEST_INVALID",`generated ${le} does not read: ${qi(i.rejection)}`);if(hn(i.manifest)!==hn(n))throw N("APP_UI_MANIFEST_INVALID",`generated ${le} normalizes to a different definition hash than the source`);let o=e[K];if(o===void 0)return;let r=e[$],a=Ke({[K]:o,[le]:t,...r===void 0?{}:{[$]:r}},{mode:"local"});if(!a.ok)throw N("APP_UI_MANIFEST_INVALID",qi(a.rejection))}function Qu(e,n,t,i){let o={};for(let f of ee){let g=`${t}/${f}`;i.includes(g)&&(o[f]=qe(e,g));}let r=`${t}/${$}`;if(o[K]!==void 0&&i.includes(r)&&(o[$]=qe(e,r)),Object.keys(o).length===0)throw N("APP_UI_MANIFEST_INVALID","selected screen App has no package manifest.json or ui-plugin.json");let a=Ke(o,{mode:"local"});if(!a.ok)throw N("APP_UI_MANIFEST_INVALID",qi(a.rejection));if(a.manifest.pluginId!==n.appId)throw N("APP_DEFINITION_CONFLICT",`${a.file} identity no longer matches the selected App`);let s=o[le],c=s===void 0?void 0:Yi(s),d=`${t}/ui/index.html`;if(!i.includes(d))throw N("APP_UI_MANIFEST_INVALID","screen entry is outside package scope");let p=Yi(qe(e,d)),l=JSON.parse(JSON.stringify(a.v2Input));if(l.entryHash=p,Object.prototype.hasOwnProperty.call(l,"initialState")){let f=l.initialState;if(!Ju(f)||f.path!=="ui/state.json")throw N("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState must reference ui/state.json inside the package");let g=`${t}/ui/state.json`;if(!i.includes(g))throw N("APP_INITIAL_STATE_OUT_OF_SCOPE","initialState reference is outside the selected package");let E=qe(e,g);l.initialState={...f,hash:Yi(E)};}let y;try{let f=nn(l,{mode:"published"});y=new Uint8Array(Buffer.from(JSON.stringify(f),"utf8"));}catch(f){throw f instanceof de?N("APP_UI_MANIFEST_INVALID",f.code):N("APP_UI_MANIFEST_INVALID")}return Zu(o,a.manifest,y),{bytes:y,...c===void 0?{}:{legacySourceHash:c}}}async function ef(e,n){let{included:t,excluded:i}=vs(e);ca(e,t,n);let o=Ws(e,t,{version:n.version}),r=Wi(e,t);return {plan:{manifest:o,included:t,excluded:i,secretFindings:r},archiveOptions:{}}}async function nf(e,n){Xu(n);let t=await ks(e),i=Yu(t.items,n.appId);if(i.definitionHash!==n.expectedDefinitionHash)throw N("APP_DEFINITION_CONFLICT",`definitionHash changed for ${n.appId}`);let o=qu(i);try{Bs(pe.resolve(e,o));}catch(f){throw f instanceof cn?N("PACKAGE_FILE_INVALID",`App dependency lockfile: ${f.message}`):f}let{included:r,excluded:a}=xs(e,o),s=await Wu(e,o,r),c=new Map,d=new Map;if(i.capabilities.includes("screen")){let f=Qu(e,i,o,r),g=`${o}/${le}`;if(c.set(g,f.bytes),f.legacySourceHash!==void 0)d.set(g,f.legacySourceHash);else {r.push(g);let E=new TextEncoder;r.sort((P,U)=>Buffer.compare(E.encode(P),E.encode(U)));}}if(i.capabilities.includes("skill")&&!r.includes(`${o}/SKILL.md`))throw N("APP_SKILL_MISSING","skill capability requires package-root SKILL.md");ca(e,r,n,c);let p={appId:i.appId,version:n.version??"",description:i.description,capabilities:i.capabilities,packageRoot:o,...i.definition?.id===void 0?{}:{definitionId:i.definition.id},definitionHash:i.definitionHash,includedFiles:r,generatedFiles:c},l=Ks(e,p),y=Wi(e,r,c);return {plan:{manifest:l,included:r,excluded:a,secretFindings:y,warnings:s},archiveOptions:{generatedFiles:c,sourceFileHashes:d}}}async function da(e,n){let t=pe.resolve(e);if(Ku(n))return nf(t,n);if(n.expectedDefinitionHash!==void 0)throw N("APP_ID_REQUIRED");return ef(t,n)}async function fg(e,n={}){return (await da(e,n)).plan}function tf(e){let n=e.map(t=>`${t.path}:${t.line} (${t.rule})`).join(", ");throw new Ge("PUBLISH_SECRET_FINDINGS",`aborted \u2014 secret findings must be resolved before packing: ${n}`)}async function pa(e,n={}){let t=pe.resolve(e),i=await da(t,n);i.plan.secretFindings.length>0&&tf(i.plan.secretFindings);let o=await na(t,i.plan.manifest,i.archiveOptions);return {manifest:i.plan.manifest,tgzPath:o}}async function yg(e,n={}){return pa(e,n)}async function Ag(e,n){let t=await pa(e,n);if(t.manifest.type!=="app")throw new Error("publish: App pack unexpectedly produced a template manifest");return t}
+export{$u as DEFAULT_PUBLISH_MAX_BYTES,zu as DEFAULT_PUBLISH_MAX_FILES,Us as EXCLUDE_RULES,Dn as MARKETPLACE_API_PREFIX,Ge as PublishError,Ag as packApp,pa as packPublish,yg as packTemplate,fg as planPublish,Gu as uploadToMarketplace};