@devicelink/dlink 0.3.5 → 0.3.8

package/README.md

@@ -68,6 +68,30 @@ Run `dlink` to start the interactive agent. Once running, type these in the cons
 - Credentials are stored encrypted on your machine.
 - Access tokens are short-lived and refreshed automatically.
 
+## Anonymous usage data
+
+The CLI reports anonymous usage data so we can see where setup breaks. It is on
+by default. To turn it off:
+
+```bash
+export DLINK_TELEMETRY=0     # or the cross-tool standard: DO_NOT_TRACK=1
+```
+
+**What is sent:** a random install id (a UUID generated on first run and stored
+in your config directory as `telemetry.json`), the CLI version, Node major
+version, OS platform, OS major version, CPU architecture, and lifecycle events
+- the agent started, config loaded, sign-in requested/completed, socket
+connected/disconnected, session ready, the *name* of any tool invoked
+(`fs_read`, `fs_list`, ...), and exit or crash reasons.
+
+**What is never sent:** file names, file contents, directory paths, tool
+arguments, tool results, your hostname, username, email address, machine id, or
+anything about the folders you share. Your IP address is not recorded either -
+events are sent with geolocation disabled and the IP field suppressed.
+
+The install id is random and is not derived from your hardware, so it cannot be
+linked back to your machine. Delete `telemetry.json` at any time to reset it.
+
 ## Links
 
 - Website: [devicelink.ai](https://devicelink.ai)

package/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import Oo from"node:crypto";var fe=class{debug;headless;headlessReason;constructor(e,t=!1,r=""){this.debug=e,this.headless=t,this.headlessReason=r}};var ce=class{name;concurrency;constructor(e,t){this.name=e,this.concurrency=t}};var he=class o{status;output;error;constructor(e,t,r){this.status=e,this.output=t,this.error=r}static success(e){return new o("success",e,null)}static failure(e){return new o("failure",null,e)}static cancelled(e){return new o("cancelled",null,e)}},ct=class{promise;resolveFn;rejectFn;constructor(){this.promise=new Promise((e,t)=>{this.resolveFn=e,this.rejectFn=t})}resolve(e){this.resolveFn(e)}reject(e){this.rejectFn(e)}};var U=class{name;lane;priority;locks;maxAttempts;cancellable;constructor(e){this.name=e.name,this.lane=e.lane,this.priority=e.priority,this.locks=e.locks,this.maxAttempts=e.maxAttempts,this.cancellable=e.cancellable}},B=class{options;constructor(e){this.options=e}},ee=class{type;input;constructor(e,t){this.type=e,this.input=t}},ut=class{bus;logger;notifier;flags;signal;engine;get headless(){return this.flags.headless}dispatchFn;constructor(e){this.bus=e.bus,this.engine=e.engine,this.logger=e.logger,this.notifier=e.notifier,this.flags=e.flags,this.signal=e.signal,this.dispatchFn=e.dispatch}dispatch(e,t){let r=t||new Be(null,null,null,null);return this.dispatchFn(e,r)}};var lt=class{ts;message;constructor(e,t){this.ts=t?.ts??Date.now(),this.message=e}},ne=class{id;ts;groupKey;kind;scope;message;category;constructor(e,t){this.id=crypto.randomUUID(),this.ts=t?.ts??Date.now(),this.kind=t?.kind??"info",this.scope=t?.scope??"default",this.message=e,this.groupKey=t?.groupKey,this.category=t?.category??[]}},dt=class{ts;jobId;jobType;state;attempt;maxAttempts;lane;priority;error;nextRunAt;constructor(e){this.ts=e.ts,this.jobId=e.jobId,this.jobType=e.jobType,this.state=e.state,this.attempt=e.attempt,this.maxAttempts=e.maxAttempts,this.lane=e.lane,this.priority=e.priority,this.error=e.error,this.nextRunAt=e.nextRunAt}};var Se=class{jobs;constructor(e){this.jobs=e}},We=class{id;jobType;inputJson;state;lane;priority;locks;attempts;maxAttempts;nextRunAt;cancellable;parentId;dedupeKey;lastError;createdAt;updatedAt;constructor(e){this.id=e.id,this.jobType=e.jobType,this.inputJson=e.inputJson,this.state=e.state,this.lane=e.lane,this.priority=e.priority,this.locks=e.locks,this.attempts=e.attempts,this.maxAttempts=e.maxAttempts,this.nextRunAt=e.nextRunAt,this.cancellable=e.cancellable,this.parentId=e.parentId,this.dedupeKey=e.dedupeKey,this.lastError=e.lastError,this.createdAt=e.createdAt,this.updatedAt=e.updatedAt}};var pt=class{state;constructor(e){this.state=e??new Se({})}async load(){return new Se(structuredClone(this.state.jobs))}async save(e){this.state=new Se(structuredClone(e.jobs))}};var Ie=class{engine;bus;logger;notifier;flags;signal;get headless(){return this.flags.headless}constructor(e){this.engine=e.engine,this.bus=e.bus,this.logger=e.logger,this.notifier=e.notifier,this.flags=e.flags,this.signal=e.signal}on(e,t){return this.bus.on(e,t)}};var ft=class{version=1;controlBaseUrl;bridgeWsUrl;directories;device;tokens;constructor(){this.directories=[]}},ht=class{_configuration;loader;get configuration(){return this._configuration}constructor(e,t){this._configuration=e,this.loader=t}apply(e){this._configuration=e}};import _e from"node:path";import sn from"node:os";import ar from"node:fs";import So from"node:path";import Eo from"env-paths";var ko="DeviceLink",_o=Eo(ko,{suffix:""});function To(){if(process.env.DEVICELINK_DATA_DIR)return process.env.DEVICELINK_DATA_DIR;let o=process.env.DEVICELINK_ENV,e=_o.config;return!o||o==="production"?e:So.join(e,o)}function me(){return To()}import cr from"dotenv";import ue from"lodash/get.js";import yt from"lodash/isArray.js";import ur from"lodash/isObject.js";import an from"lodash/isString.js";import le from"lodash/isEmpty.js";import Do from"lodash/defaultTo.js";import{createRequire as wo}from"node:module";var Ro=wo(import.meta.url),Co=Ro("node-machine-id");function mt(o=!0){try{let e=Co.machineIdSync(o);if(e&&typeof e=="string"&&e.trim().length>0)return e.trim()}catch{}}import Xr from"node:path";import Yt from"node:fs";import Qt from"node:crypto";import Xt from"lodash/get.js";import ge from"lodash/isEmpty.js";var gt=class{_notifier;argv;envFile;processEnv;configFileContent;getPrivateKey;_lastGeneratedPrivateKey;constructor(e){this._notifier=e.notifier,this.argv=e.argv,this.envFile=e.envFile,this.processEnv=e.processEnv,this.configFileContent=e.configFileContent,this.getPrivateKey=e.getPrivateKey}getLastGeneratedPrivateKey(){let e=this._lastGeneratedPrivateKey;return this._lastGeneratedPrivateKey=void 0,e}ensureDeviceKeys(){let e=this.getDevicePrivateKey(),t=this.getDevicePublicKey();if(e&&t)return{publicKey:t,privateKey:e};if(e&&!t)try{let s=Qt.createPrivateKey(e);return t=Qt.createPublicKey(s).export({format:"pem",type:"spki"}).toString("utf8"),this._notifier.info("Derived public key from private key",{scope:"system"}),{publicKey:t,privateKey:e}}catch{this._notifier.warn("Failed to derive public key from private key, generating new keypair",{scope:"system"})}t&&!e&&this._notifier.warn("Public key found but no private key, generating new keypair",{scope:"system"}),this._notifier.info("Generating new Ed25519 keypair...",{scope:"system"});let{publicKey:r,privateKey:n}=Qt.generateKeyPairSync("ed25519"),i=r.export({format:"pem",type:"spki"}).toString("utf8"),a=n.export({format:"pem",type:"pkcs8"}).toString("utf8");return this._lastGeneratedPrivateKey=a,this._notifier.info("Generated new Ed25519 keypair",{scope:"system"}),{publicKey:i,privateKey:a}}getDevicePrivateKey(){if(this.getPrivateKey){let r=this.getPrivateKey();if(r&&!ge(r))return this._notifier.info("Using private key from secret storage cache",{scope:"system"}),r}if(this.argv?.privateKeyFile){let r=this.loadKeyFromFile(this.argv.privateKeyFile);if(r)return this._notifier.info(`Found private key from --private-key-file: ${this.argv.privateKeyFile}`,{scope:"system"}),r;this._notifier.warn(`Failed to load private key from file: ${this.argv.privateKeyFile}`,{scope:"system"})}let e=this.safeGetEnvValue("DLINK_DEVICE_PRIVATE_KEY");if(e&&!ge(e))return this._notifier.info("Found private key in env file",{scope:"system"}),e;let t=this.processEnv.DLINK_DEVICE_PRIVATE_KEY;if(t&&!ge(t))return this._notifier.info("Found private key in process env",{scope:"system"}),t}getDevicePublicKey(){if(this.argv?.publicKeyFile){let n=this.loadKeyFromFile(this.argv.publicKeyFile);if(n)return this._notifier.info(`Found public key from --public-key-file: ${this.argv.publicKeyFile}`,{scope:"system"}),n;this._notifier.warn(`Failed to load public key from file: ${this.argv.publicKeyFile}`,{scope:"system"})}let e=Xt(this.safeGetConfigValue("device"),"keys.public");if(e&&!ge(String(e)))return this._notifier.info("Found public key in config file",{scope:"system"}),String(e);let t=this.safeGetEnvValue("DLINK_DEVICE_PUBLIC_KEY");if(t&&!ge(t))return this._notifier.info("Found public key in env file",{scope:"system"}),t;let r=this.processEnv.DLINK_DEVICE_PUBLIC_KEY;if(r&&!ge(r))return this._notifier.info("Found public key in process env",{scope:"system"}),r}loadKeyFromFile(e){if(!e||ge(e))return;let t=this.getApplicationConfigFolder(),r=[e,Xr.join(t,e)];for(let n of r)try{let i=Xr.resolve(n);if(Yt.existsSync(i))if(Yt.statSync(i).isFile()){let s=Yt.readFileSync(i,"utf8").trim();if(ge(s))this._notifier.warn(`Key file is empty: ${i}`,{scope:"system"});else return this._notifier.info(`Loaded key from file: ${i}`,{scope:"system"}),s}else this._notifier.warn(`Path is not a file: ${i}`,{scope:"system"})}catch(i){let a=i instanceof Error?i.message:String(i);this._notifier.warn(`Failed to read key file ${n}: ${a}`,{scope:"system"})}this._notifier.warn(`Key file not found: ${e} (tried: ${r.join(", ")})`,{scope:"system"})}safeGetEnvValue(e){try{return Xt(this.envFile,`parsed.${e}`)}catch{return}}safeGetConfigValue(e){try{return Xt(this.configFileContent,e)}catch{return}}getApplicationConfigFolder(){return me()}};import Zr from"node:crypto";function en(o){let e=o.trim();e=e.replace(/\\/g,"/"),e=e.replace(/(^\/\/+)|\/{2,}/g,(l,d)=>d?"//":"/"),e.length>1&&e.endsWith("/")&&(e=e.replace(/\/+$/g,"")),e===""&&(e="/"),e=e.replace(/^([a-zA-Z]):(?=\/|$)/,(l,d)=>`${String(d).toUpperCase()}:`);let t=e.startsWith("/")||e.startsWith("//")||/^[A-Z]:\//.test(e),r=e.startsWith("//")?"//":e.startsWith("/")?"/":"",n="",i=e.match(/^([A-Z]:)(\/|$)/);i?(n=i[1],e=e.slice(n.length),e.startsWith("/")&&(e=e.slice(1))):e=e.replace(/^\/+/,"");let a=e.split("/").filter(Boolean),s=[];for(let l of a)if(l!=="."){if(l===".."){s.length>0&&s[s.length-1]!==".."?s.pop():t||s.push("..");continue}s.push(l)}let c=s.join("/");return n?c=`${n}/${c}`.replace(/\/+$/g,""):t&&(c=`${r}${c}`.replace(/\/+$/g,"")),c=c.toLowerCase(),c}function Zt(o,e=[3,3,3,3]){let t=en(o),n=Zr.createHash("sha256").update(t,"utf8").digest("base64url").replace(/[^a-zA-Z0-9]/g,"").toLowerCase(),i=e.reduce((c,l)=>c+l,0),a=n.length>=i?n:n.padEnd(i,n),s=0;return e.map(c=>a.slice(s,s+=c)).join("-")}function er(o){let e=en(o),r=Zr.createHash("sha256").update(e,"utf8").digest("hex").slice(0,32),n=r.slice(0,8),i=r.slice(8,12),a=r.slice(12,16),s=r.slice(16,20),c=r.slice(20,32);return`${n}-${i}-${a}-${s}-${c}`}import*as Q from"node:crypto";function tr(o){let e=Q.createPublicKey(o);if(e.asymmetricKeyType!=="ed25519")throw new Error(`Unexpected key type: ${e.asymmetricKeyType}`);let t=e.export({format:"der",type:"spki"});return Q.createHash("sha256").update(t).digest("base64url").slice(0,16).toUpperCase()}function rr(o){let e=Buffer.from(`${o.deviceId}|${o.ts}|${o.nonce}`,"utf8"),t=Q.createPrivateKey(o.privateKeyPem);return Q.sign(null,e,t).toString("base64")}function nr(o){let e=Q.createHash("sha256").update(o.refreshToken,"utf8").digest("hex"),t=Buffer.from(`${o.deviceId}|${o.ts}|${o.nonce}|${e}`,"utf8"),r=Q.createPrivateKey(o.privateKeyPem);return Q.sign(null,t,r).toString("base64")}function or(o){return new Promise(e=>setTimeout(e,o))}import*as tn from"node:path";var rn=process.platform==="win32";function ir(o){let e=tn.resolve(o);return rn?e.toLowerCase():e}import*as oe from"node:path";import*as nn from"node:os";function Ee(o){return o.replace(/\\/g,"/")}function on(o){return/^[A-Za-z]:[\\/]/.test(o)||/^[A-Za-z]:$/.test(o.trim())}function Io(o){return on(o)?o.replace(/\//g,"\\"):o}function sr(o){if(o==null)return;let e=String(o).trim();if(e==="")return;if(e.startsWith("~"))return Ee(e);if(!on(e))try{let l=oe.resolve(e),d=oe.resolve(nn.homedir()),p=oe.relative(d,l);if(!p.startsWith("..")&&!oe.isAbsolute(p))return p===""?"~":"~/"+Ee(p)}catch{}let r=Io(e).match(/^([A-Za-z]:)\\(?:[Uu][Ss][Ee][Rr][Ss])\\([^\\]+)(\\.*)?$/);if(r){let l=(r[3]??"").replace(/\\/g,"/");return l?"~"+l:"~"}let n=e.match(/^\/mnt\/[a-z]\/(?:[Uu][Ss][Ee][Rr][Ss])\/[^/]+(\/.*)?$/i);if(n){let l=n[1]??"";return l?"~"+Ee(l):"~"}let i=e.match(/^\/Users\/[^/]+(\/.*)?$/);if(i){let l=i[1]??"";return l?"~"+Ee(l):"~"}let a=e.match(/^\/home\/[^/]+(\/.*)?$/);if(a){let l=a[1]??"";return l?"~"+Ee(l):"~"}let s=e.match(/^\/usr\/home\/[^/]+(\/.*)?$/);if(s){let l=s[1]??"";return l?"~"+Ee(l):"~"}let c=e.match(/^\/export\/home\/[^/]+(\/.*)?$/);if(c){let l=c[1]??"";return l?"~"+Ee(l):"~"}try{return oe.basename(oe.resolve(e))}catch{return e.split(/[/\\]/).pop()??e}}function L(o){if(o instanceof Error)return o.message;if(typeof o=="object"&&o!==null&&"message"in o){let e=o.message;if(typeof e=="string")return e}return String(o)}function ke(o){if(typeof o!="object"||o===null||!("code"in o))return;let e=o.code;return typeof e=="string"?e:void 0}var De={version:1,controlBaseUrl:"",bridgeWsUrl:"",directories:[],device:void 0},bt=class{_notifier;argv;config=De;envFile=cr.config({quiet:!0});processEnv={};productionEnv={};configFileContent={};_privateKeyCache=void 0;_privateKeyToStore=void 0;constructor(e){this._notifier=e,this.loadProductionEnv()}loadProductionEnv(){let e=[_e.resolve(_e.dirname(process.argv[1]??"."),".env.production"),_e.resolve(process.cwd(),".env.production")];for(let t of e)try{if(ar.existsSync(t)){let r=cr.config({path:t,quiet:!0});r.parsed&&(this.productionEnv=r.parsed);return}}catch{}}setPrivateKeyCache(e){this._privateKeyCache=e}getPrivateKeyToStore(){return this._privateKeyToStore}withDefaultConfig(){return this.config.version=De.version,this.config.controlBaseUrl=De.controlBaseUrl,this.config.bridgeWsUrl=De.bridgeWsUrl,this.config.directories=De.directories,this.config.device=De.device,this}withProcessEnv(){return this.processEnv={NODE_ENV:process.env.NODE_ENV,APPDATA:process.env.APPDATA,npm_package_version:process.env.npm_package_version,DLINK_DEVICE_ID:process.env.DLINK_DEVICE_ID,DLINK_DEVICE_NAME:process.env.DLINK_DEVICE_NAME,DLINK_DEVICE_TAG:process.env.DLINK_DEVICE_TAG,DLINK_CONTROL_URL:process.env.DLINK_CONTROL_URL,DLINK_BRIDGE_URL:process.env.DLINK_BRIDGE_URL,DLINK_DIRECTORIES:process.env.DLINK_DIRECTORIES},this}withArgv(e){return this.argv=e,this}withEnviromentFile(e){return this.envFile=cr.config({path:e,quiet:!0}),this}withConfigFile(e){try{let t=this.getApplicationConfigFolder(),r=_e.join(t,e);if(ar.existsSync(r)){let n=ar.readFileSync(r,"utf8"),i=JSON.parse(n);ur(i)&&!yt(i)?this.configFileContent=i:this._notifier.warn(`Config file ${e} does not contain a valid object`,{scope:"system"})}}catch(t){let r=t instanceof Error?t.message:String(t);this._notifier.warn(`Failed to load config file ${e}: ${r}`,{scope:"system"})}return this}build(){return this.config.controlBaseUrl=this.getControlBaseUrl(),this.config.bridgeWsUrl=this.getBridgeWsUrl(),this.config.directories=this.getDirectories(),this.config.device=this.getDevice(),this.config.tokens=this.getTokens(),this.config}getConfigValue(e,t){let r=this.safeGetConfigValue(e);return r===void 0?t?.defaultValue:r}firstSet(...e){return e.find(t=>t!=null&&String(t).trim()!=="")}getControlBaseUrl(){return this.firstSet(this.argv?.controlUrl,this.safeGetEnvValue("DLINK_CONTROL_URL"),this.safeGetConfigValue("controlBaseUrl"),this.processEnv.DLINK_CONTROL_URL,this.productionEnv.DLINK_CONTROL_URL)}getBridgeWsUrl(){return this.firstSet(this.argv?.bridgeWsUrl,this.safeGetEnvValue("DLINK_BRIDGE_URL"),this.safeGetConfigValue("bridgeWsUrl"),this.processEnv.DLINK_BRIDGE_URL,this.productionEnv.DLINK_BRIDGE_URL)}getDirectories(){let e=[];if(e.push(this.createDirectoryFromPath(process.cwd())),this.argv?.rootPath)try{e.push(...this.parseDirectoriesFromString(this.argv.rootPath))}catch{e.push(this.createDirectoryFromPath(this.argv.rootPath))}let t=this.safeGetEnvValue("DLINK_DIRECTORIES")??this.safeGetEnvValue("DLINK_ROOTS");if(t)try{e.push(...this.parseDirectoriesFromString(t))}catch{}let r=this.safeGetConfigValue("directories")??this.safeGetConfigValue("roots");if(r)try{e.push(...this.parseDirectoriesFromValue(r))}catch{}let n=this.processEnv.DLINK_DIRECTORIES??this.processEnv.DLINK_ROOTS;if(n)try{e.push(...this.parseDirectoriesFromString(n))}catch{}return this.deduplicateDirectories(e)}deduplicateDirectories(e){let t=new Set,r=[];for(let n of e){let i=ir(n.path);t.has(i)||(t.add(i),r.push(n))}return r}getDevice(){let e=this.getDeviceId();if(!e){this._notifier.warn("No device ID found from any source (argv, env, config, process env, or machine ID)",{scope:"system"});return}let t=this.getDeviceName();t||(t=sn.hostname()||"Unknown Device");let r=this.getDeviceTag(),n=new gt({notifier:this._notifier,argv:this.argv,envFile:this.envFile,processEnv:this.processEnv,configFileContent:this.configFileContent,getPrivateKey:()=>this._privateKeyCache}),{publicKey:i}=n.ensureDeviceKeys();this._privateKeyToStore=n.getLastGeneratedPrivateKey();let a={id:e,name:t,tag:r||"",keys:{public:i}};return this._notifier.info(`Created device: id=${a.id?.substring(0,8)}..., name=${a.name}, tag=${a.tag||"(empty)"}`,{scope:"system"}),a}getDeviceId(){this._notifier.info("Checking env file for DLINK_DEVICE_ID...",{scope:"system"});let e=this.safeGetEnvValue("DLINK_DEVICE_ID");if(e&&!le(e))return this._notifier.info(`Found device ID in env file: ${e.substring(0,8)}...`,{scope:"system"}),e;this._notifier.info("Checking config file for deviceId...",{scope:"system"});let t=this.safeGetConfigValue("deviceId")??ue(this.safeGetConfigValue("device"),"id");if(t&&!le(String(t)))return this._notifier.info(`Found device ID in config file: ${String(t).substring(0,8)}...`,{scope:"system"}),String(t);this._notifier.info("Checking process env for DLINK_DEVICE_ID...",{scope:"system"});let r=this.processEnv.DLINK_DEVICE_ID;if(r&&!le(r))return this._notifier.info(`Found device ID in process env: ${r.substring(0,8)}...`,{scope:"system"}),r;this._notifier.info("Trying machine ID as fallback...",{scope:"system"});let n=mt(!0);if(n)return this._notifier.info(`Using machine ID: ${n.substring(0,8)}...`,{scope:"system"}),n;this._notifier.error("Failed to get machine ID in getDeviceId()",{scope:"system"}),this._notifier.warn("No device ID found in any source",{scope:"system"})}getDeviceName(){let e=this.safeGetEnvValue("DLINK_DEVICE_NAME");if(e&&!le(e))return e;let t=ue(this.safeGetConfigValue("device"),"name");if(t&&!le(String(t)))return String(t);let r=this.processEnv.DLINK_DEVICE_NAME;if(r&&!le(r))return r;let n=sn.hostname();if(n&&!le(n))return n}getDeviceTag(){let e=this.safeGetEnvValue("DLINK_DEVICE_TAG");if(e)return e;let t=ue(this.safeGetConfigValue("device"),"tag");if(t)return String(t);let r=this.processEnv.DLINK_DEVICE_TAG;if(r)return r}getTokens(){let e=this.safeGetConfigValue("tokens");if(!e||!ur(e)||yt(e))return;let t=e,r={},n=ue(t,"accessTokenExpSec");if(typeof n=="number"&&(r.accessTokenExpSec=n),r.accessTokenExpSec!==void 0)return r}safeGetEnvValue(e){try{return ue(this.envFile,`parsed.${e}`)}catch{return}}safeGetConfigValue(e){try{return ue(this.configFileContent,e)}catch{return}}parseDirectoriesFromString(e){try{let t=JSON.parse(e);return this.parseDirectoriesFromValue(t)}catch{return[this.createDirectoryFromPath(e)]}}parseDirectoriesFromValue(e){if(yt(e))return e.map(r=>this.parseDirectoryFromValue(r)).filter(r=>r!==null);if(an(e))return[this.createDirectoryFromPath(e)];let t=this.parseDirectoryFromValue(e);return t?[t]:[]}parseDirectoryFromValue(e){if(an(e))return this.createDirectoryFromPath(e);if(ur(e)&&!yt(e)){let t=e,r=er(ue(t,"path")),n=ue(t,"path"),i=Do(ue(t,"name"),n?_e.basename(n):"");if(!le(r)&&!le(n)){let a=Zt(n);return{id:String(r),name:String(i),path:String(n),tag:a}}}return null}createDirectoryFromPath(e){let t=_e.resolve(e),r=er(t),n=_e.basename(t),i=Zt(t);return{id:r,name:n,path:t,tag:i}}getApplicationConfigFolder(){return me()}};var Be=class{dedupeKey;parentId;overridePriority;overrideLane;constructor(e,t,r,n){this.dedupeKey=e,this.parentId=t,this.overridePriority=r,this.overrideLane=n}},lr=class{phase;flags;constructor(e){this.phase="idle",this.flags=e??new fe(!1)}},vt=class{argv;configurationContext;bus;notifier;logger;storage;secrets;runtime;lanes;laneActive;registry;orchestrators;orchestratorSubscriptions=new Map;orchestratorAbort;jobs;queue;locksHeldBy;completions;dedupeIndex;engineAbort;jobAbort;stopping;running;wakeFn;wakePromise;constructor(e){this.argv=e.argv,this.bus=e.bus,this.logger=e.logger,this.notifier=e.notifier,this.storage=e.storage,this.secrets=e.secrets,this.runtime=new lr(e.flags),this.lanes=new Map;for(let n of e.lanes)this.lanes.set(n.name,n);this.laneActive=new Map;for(let n of e.lanes)this.laneActive.set(n.name,0);this.registry=new Map,this.orchestrators=[],this.orchestratorAbort=new AbortController,this.jobs=new Map,this.queue=[],this.locksHeldBy=new Map,this.completions=new Map,this.dedupeIndex=new Map,this.engineAbort=new AbortController,this.jobAbort=new Map,this.stopping=!1,this.running=!1,this.wakeFn=null,this.wakePromise=this.resetWake();let t=new ft,r=new bt(this.notifier);this.configurationContext=new ht(t,r)}applyConfiguration(e){this.configurationContext.apply(e)}setPhase(e){this.runtime.phase=e}getBus(){return this.bus}hasRunningJobs(){for(let[,e]of this.laneActive)if(e>0)return!0;return!1}register(e){let t=e.options.name;if(this.registry.has(t))throw new Error(`JobType already registered: ${t}`);this.registry.set(t,e)}registerOrchestrator(e){if(this.orchestrators.some(n=>n.name===e.name))throw new Error(`Orchestrator already registered: ${e.name}`);let r=new Ie({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});e.onRegister?.(r),this.setupOrchestratorSubscriptions(e,r),this.orchestrators.push(e)}setupOrchestratorSubscriptions(e,t){let r=e.handlers?.();if(r){let n=[];Object.keys(r).forEach(i=>{let a=r[i];a&&n.push(this.bus.on(i,s=>{Promise.resolve(a(s,t)).catch(c=>{let l=c instanceof Error?c.message:String(c);this.logger.error(`handler error (${e.name}/${String(i)}): ${l}`),this.notifier.error(`handler error (${e.name}/${String(i)}): ${l}`,{scope:"system"})})}))}),this.orchestratorSubscriptions.set(e.name,n)}}async init(){let e=await this.storage.load();for(let[t,r]of Object.entries(e.jobs))this.jobs.set(t,new We(r));for(let t of this.jobs.values())t.state==="running"&&(t.state="queued",t.nextRunAt=Date.now(),t.updatedAt=Date.now()),t.dedupeKey&&this.dedupeIndex.set(t.dedupeKey,t.id),t.state==="queued"&&this.queue.push(t.id)}async start(){if(!this.running){this.running=!0,this.runtime.phase="running",process.on("uncaughtException",e=>{this.notifier.error(`uncaughtException: ${e.stack?e.stack:String(e)}`,{scope:"system"}),this.requestStop("uncaughtException")}),process.on("unhandledRejection",e=>{this.notifier.error(`unhandledRejection: ${String(e)}`,{scope:"system"})}),this.bus.emit("engine:started",Date.now());try{await this.startOrchestratorsSafe(),await this.loopGuarded()}finally{await this.stopOrchestratorsSafe(),await this.persist(),this.bus.emit("engine:stopped",Date.now())}}}requestStop(e){if(!this.stopping){this.stopping=!0,this.runtime.phase="stopping",this.bus.emit("engine:stopping",e),this.engineAbort.abort(new Error(`Stopping: ${e}`)),this.orchestratorAbort.abort(new Error(`Stopping: ${e}`));for(let[t,r]of this.jobAbort.entries())this.jobs.get(t)?.cancellable&&r.abort(new Error("Cancelled by user"));this.wake()}}async dispatch(e,t){let r=t||new Be(null,null,null,null),n=e.type.options.name;if(!this.registry.has(n)){let p=new Error(`JobType not registered: ${n}`);return he.failure(p)}if(r.dedupeKey){let p=this.dedupeIndex.get(r.dedupeKey);if(p){let f=this.jobs.get(p);if(f&&(f.state==="queued"||f.state==="running")){let g=this.completions.get(p);if(g)return await g.promise}}}let i=this.newId(),a=new ct;this.completions.set(i,a);let s=r.overrideLane?r.overrideLane:e.type.options.lane,c=r.overridePriority!==null?r.overridePriority:e.type.options.priority,l=new We({id:i,jobType:n,inputJson:e.input===void 0?"null":JSON.stringify(e.input),state:"queued",lane:s,priority:c,locks:e.type.options.locks,attempts:0,maxAttempts:e.type.options.maxAttempts,nextRunAt:Date.now(),cancellable:e.type.options.cancellable,parentId:r.parentId,dedupeKey:r.dedupeKey,lastError:null,createdAt:Date.now(),updatedAt:Date.now()});return this.jobs.set(i,l),this.queue.push(i),r.dedupeKey&&this.dedupeIndex.set(r.dedupeKey,i),this.emitJobEvent(l,"queued",null,null),await this.persist(),this.wake(),await a.promise}async loopGuarded(){for(;!this.stopping;)try{await this.loopOnce()}catch(e){this.notifier.error(`Engine loop error: ${String(e)}`,{scope:"system"}),await new Promise(t=>setTimeout(t,250))}}async loopOnce(){let e=0;for(;;){let t=this.pickNextRunnable();if(!t)break;e+=1,this.runJobSafe(t)}e===0&&(await this.wakePromise,this.wakePromise=this.resetWake())}async runJobSafe(e){try{await this.runJobInternal(e)}catch(t){this.notifier.error(`runJobInternal crashed: ${String(t)}`,{scope:"system"});let r=this.completions.get(e);r&&r.resolve(he.failure(new Error(String(t))))}finally{this.wake()}}pickNextRunnable(){let e=Date.now(),t=null,r=Number.NEGATIVE_INFINITY,n=Number.POSITIVE_INFINITY;for(let a of this.queue){let s=this.jobs.get(a);s&&s.state==="queued"&&(this.stopping&&s.lane!=="console"||s.nextRunAt>e||this.canRunInLane(s.lane)&&this.canAcquireLocks(s)&&(s.priority>r||s.priority===r&&s.nextRunAt<n)&&(r=s.priority,n=s.nextRunAt,t=a))}if(!t)return null;let i=this.queue.indexOf(t);return i>=0&&this.queue.splice(i,1),t}canRunInLane(e){let t=this.lanes.get(e);if(!t)return!1;let r=this.laneActive.get(e);return r===void 0?!1:r<t.concurrency}canAcquireLocks(e){for(let t of e.locks){let r=this.locksHeldBy.get(t);if(r&&r!==e.id&&!(e.parentId&&r===e.parentId))return!1}return!0}acquireLocks(e){for(let t of e.locks)this.locksHeldBy.get(t)||this.locksHeldBy.set(t,e.id)}releaseLocks(e){for(let t of e.locks)this.locksHeldBy.get(t)===e.id&&this.locksHeldBy.delete(t)}async runJobInternal(e){let t=this.jobs.get(e);if(!t)return;let r=this.registry.get(t.jobType);if(!r){this.completeFailure(e,new Error(`No registered JobType: ${t.jobType}`));return}let n=this.laneActive.get(t.lane);if(n===void 0){this.completeFailure(e,new Error(`Unknown lane: ${t.lane}`));return}let i=new AbortController;if(this.jobAbort.set(e,i),t.cancellable){let s=this.engineAbort.signal;s.aborted?i.abort(s.reason instanceof Error?s.reason:new Error("Stopped")):s.addEventListener("abort",()=>i.abort(s.reason instanceof Error?s.reason:new Error("Stopped")),{once:!0})}this.laneActive.set(t.lane,n+1),this.acquireLocks(t),t.state="running",t.updatedAt=Date.now(),await this.persist(),this.emitJobEvent(t,"running",null,null);let a=new ut({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:i.signal,dispatch:async(s,c)=>this.dispatch(s,c)});try{let s=JSON.parse(t.inputJson),c=s===null?void 0:s,l=await r.run(c,a);t.state="succeeded",t.updatedAt=Date.now(),t.lastError=null,await this.persist(),this.emitJobEvent(t,"succeeded",null,null),this.completeSuccess(e,l)}catch(s){let c=s instanceof Error?s:new Error("Unknown error");if(t.attempts+=1,t.updatedAt=Date.now(),t.lastError=c.message,i.signal.aborted)t.state="failed",await this.persist(),this.emitJobEvent(t,"failed",c.message,null),this.notifier.error(`Job ${t.jobType} (${e.substring(0,8)}) cancelled: ${c.message}`),this.completeCancelled(e,c);else if(t.attempts<t.maxAttempts&&!this.stopping){let p=No(t.attempts);t.state="queued",t.nextRunAt=Date.now()+p,await this.persist(),this.queue.push(t.id),this.emitJobEvent(t,"queued",c.message,t.nextRunAt),this.notifier.warn(`Job ${t.jobType} (${e.substring(0,8)}) failed, retrying in ${p}ms (attempt ${t.attempts}/${t.maxAttempts}): ${c.message}`)}else t.state="failed",await this.persist(),this.emitJobEvent(t,"failed",c.message,null),this.notifier.error(`Job ${t.jobType} (${e.substring(0,8)}) failed after ${t.attempts} attempt(s): ${c.message}`),this.completeFailure(e,c)}finally{this.releaseLocks(t);let s=this.laneActive.get(t.lane);s!==void 0&&this.laneActive.set(t.lane,Math.max(0,s-1)),this.jobAbort.delete(e),this.wake()}}async startOrchestratorsSafe(){let e=new Ie({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});for(let t of this.orchestrators)Promise.resolve().then(()=>t.onStart?.(e)).then(()=>t.onStarted?.(e)).catch(r=>this.notifier.error(`Orchestrator start failed (${t.name}): ${String(r)}`,{scope:"system"}))}async stopOrchestratorsSafe(){let e=new Ie({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});for(let t=this.orchestrators.length-1;t>=0;t--){let r=this.orchestrators[t];try{await r.onStop?.(e),r.onStopped?.(e)}catch(i){this.notifier.error(`Orchestrator stop failed (${r.name}): ${String(i)}`,{scope:"system"})}let n=this.orchestratorSubscriptions.get(r.name);if(n){for(let i of n)i.unsubscribe();this.orchestratorSubscriptions.delete(r.name)}}}emitJobEvent(e,t,r,n){this.bus.emit("job:event",new dt({ts:Date.now(),jobId:e.id,jobType:e.jobType,state:t,attempt:e.attempts,maxAttempts:e.maxAttempts,lane:e.lane,priority:e.priority,error:r,nextRunAt:n}))}completeSuccess(e,t){let r=this.completions.get(e);r&&r.resolve(he.success(t))}completeFailure(e,t){let r=this.completions.get(e);r&&r.resolve(he.failure(t))}completeCancelled(e,t){let r=this.completions.get(e);r&&r.resolve(he.cancelled(t))}async persist(){let e={};for(let[t,r]of this.jobs.entries())e[t]=r;await this.storage.save(new Se(e))}wake(){this.wakeFn&&this.wakeFn()}resetWake(){return new Promise(e=>{this.wakeFn=e})}newId(){return Oo.randomBytes(8).toString("hex")}};function No(o){let r=Math.min(3e4,300*2**(o-1)),n=Math.floor(Math.random()*200);return r+n}var St=class{handlers;constructor(){this.handlers=new Map}on(e,t){let r=this.handlers.get(e),n=r||[];return n.push(t),this.handlers.set(e,n),{unsubscribe:()=>{let i=this.handlers.get(e);if(!i)return;let a=i.filter(s=>s!==t);this.handlers.set(e,a)}}}emit(e,t){let r=this.handlers.get(e);if(r)for(let n of r)n(t)}};import*as ye from"node:crypto";import*as be from"node:fs/promises";import*as kt from"node:path";var Po="DeviceLink-SecretStorage-v1",Je=12,Et=16,Fo=32,Mo="secrets.enc.json";function Lo(){return kt.join(me(),Mo)}function $o(o){return ye.pbkdf2Sync(o,Po,1e5,Fo,"sha256")}var pr=class{secretsPath;key;cache={};loaded=!1;constructor(e,t){this.secretsPath=e,this.key=t}async load(){if(!this.loaded){try{let e=await be.readFile(this.secretsPath,"utf8"),t=this.decrypt(e);this.cache=JSON.parse(t)}catch{this.cache={}}this.loaded=!0}}async save(){await be.mkdir(kt.dirname(this.secretsPath),{recursive:!0});let e=JSON.stringify(this.cache),t=this.encrypt(e),r=this.secretsPath+".tmp";await be.writeFile(r,t,"utf8"),await be.rename(r,this.secretsPath)}encrypt(e){let t=ye.randomBytes(Je),r=ye.createCipheriv("aes-256-gcm",this.key,t,{authTagLength:Et}),n=Buffer.concat([r.update(e,"utf8"),r.final()]),i=r.getAuthTag();return Buffer.concat([t,i,n]).toString("base64url")}decrypt(e){let t=Buffer.from(e,"base64url"),r=t.subarray(0,Je),n=t.subarray(Je,Je+Et),i=t.subarray(Je+Et),a=ye.createDecipheriv("aes-256-gcm",this.key,r,{authTagLength:Et});return a.setAuthTag(n),a.update(i)+a.final("utf8")}async get(e){await this.load();let t=this.cache[e];return t===void 0?{ok:!1}:{ok:!0,value:t}}async set(e,t){await this.load(),this.cache[e]=t,await this.save()}async delete(e){await this.load(),this.cache[e]!==void 0&&(delete this.cache[e],await this.save())}};async function cn(){let o=mt(!0);if(!o)throw new Error("Secret storage requires machine ID");let e=$o(o),t=Lo();return new pr(t,e)}var _t=class{},fr=class{ok;config;constructor(e,t){this.ok=e,this.config=t}},hr=class extends B{constructor(){super(new U({name:"load-config",lane:"main",priority:1e3,locks:["GLOBAL"],maxAttempts:3,cancellable:!0}))}async run(e,t){t.notifier.info("Loading configuration...",{scope:"system"});let r=t.engine.configurationContext.loader,n=await t.engine.secrets.get("devicePrivateKey");r.setPrivateKeyCache(n.ok&&n.value?n.value:void 0),r.withDefaultConfig(),r.withArgv(t.engine.argv),t.engine.argv.enviromentFile&&r.withEnviromentFile(t.engine.argv.enviromentFile),r.withConfigFile("config.json"),r.withProcessEnv();let i=r.build(),a=r.getPrivateKeyToStore();return a&&await t.engine.secrets.set("devicePrivateKey",a),this.updateUi(i,t),t.notifier.success("Configuration loaded"),t.engine.applyConfiguration(i),t.bus.emit("config:loaded",i),new fr(!0,i)}updateUi(e,t){let r={scope:"system"};t.notifier.info(`Control base URL: ${e.controlBaseUrl}`,r),t.notifier.info(`Bridge WebSocket URL: ${e.bridgeWsUrl}`,r),t.notifier.info(`Directories: ${e.directories.map(n=>n.path).join(", ")}`,r),t.notifier.info(`Device: ${e.device?.id}`,r),t.notifier.info(`Device name: ${e.device?.name}`,r),t.notifier.info(`Device tag: ${e.device?.tag}`,r),t.notifier.info(`Device keys public: ${e.device?.keys?.public?"***":"(none)"}`,r)}},mr=new hr;function un(o){return new ee(mr,o)}var gr=class{ok;constructor(e){this.ok=e}},yr=class extends B{constructor(){super(new U({name:"console-command",lane:"console",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){return t.notifier.info(`Executing console command: ${e.kind}`),await new Promise(r=>setTimeout(r,2e3)),t.notifier.info(`Console command executed: ${e.kind}`),t.notifier.success(`Console command executed: ${e.kind}`),new gr(!0)}},ln=new yr;var br=class{ok;constructor(e){this.ok=e}},vr=class extends B{constructor(){super(new U({name:"contact-server",lane:"main",priority:900,locks:["GLOBAL"],maxAttempts:8,cancellable:!0}))}async run(e,t){return t.notifier.info(`contact server mode=${e.mode}`,{scope:"system"}),await new Promise(r=>setTimeout(r,200)),new br(!0)}},dn=new vr;var Sr=class{ok;constructor(e){this.ok=e}},Er=class extends B{constructor(){super(new U({name:"send-server-result",lane:"io",priority:200,locks:[],maxAttempts:10,cancellable:!0}))}async run(e,t){return t.notifier.info(`send result requestId=${e.requestId}`,{scope:"system"}),await new Promise(r=>setTimeout(r,10)),new Sr(!0)}},pn=new Er;import Ko from"node:crypto";var H=class{constructor(e,t){this.context=e;this.handler=t}execute(e){return this.handler(this.context,e)}};async function ie(o,e,t){let r=`${o.configuration.controlBaseUrl}${e}`,n=await fetch(r,t);if(!n.ok){let i=await n.text().catch(s=>{let c=s instanceof Error?s.message:String(s);return o.notifier.error(`Failed to read HTTP error response body: ${c}`),""}),a=new Error(`HTTP ${n.status}: ${i}`);a.status=n.status;try{a.body=i?JSON.parse(i):void 0}catch{a.body=void 0}if(n.status===429){let s=n.headers.get("Retry-After");if(s!==null){let c=parseInt(s,10);Number.isFinite(c)&&c>=0&&(a.retryAfterSec=c)}}throw a}return n.json()}function fn(o){return new H(o,async(e,t)=>ie(e,"/api/device/authorize/start",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}function hn(o){return new H(o,async(e,t)=>ie(e,"/api/device/authorize/prove",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}import{z as te}from"zod";var jo=te.union([te.object({status:te.literal("pending"),needs_proof:te.boolean()}),te.object({status:te.literal("approved"),needs_proof:te.boolean()}),te.object({error:te.literal("access_denied")}),te.object({error:te.literal("expired_token")})]);function mn(o){return new H(o,async(e,t)=>{let r=new URL("/api/device/authorize/stream",e.configuration.controlBaseUrl);r.searchParams.set("device_code",t.deviceCode);let n=e.notifier,i=new AbortController,a=setTimeout(()=>{n.error("[deviceAuthStream] Timeout reached, aborting"),i.abort()},Math.max(1e3,t.timeoutMs));if(t.signal){let s=t.signal;s.addEventListener("abort",()=>{let c="reason"in s&&s.reason!=null?String(s.reason):"";n.warn(`[deviceAuthStream] External signal aborted: ${c}`),i.abort()})}try{let s=await fetch(r.toString(),{method:"GET",headers:{Accept:"text/event-stream"},signal:i.signal});if(!s.ok||!s.body){let p=await s.text().catch(f=>{let g=f instanceof Error?f.message:String(f);return n.error(`[deviceAuthStream] Failed to read response body (${s.status}): ${g}`),""});throw n.error(`[deviceAuthStream] Response error: ${s.status} - ${p}`),new Error(`device/authorize/stream failed (${s.status}): ${p}`)}let c=s.body.getReader(),l=new TextDecoder("utf-8"),d="";for(;;){let{value:p,done:f}=await c.read();if(f){n.error("[deviceAuthStream] Stream ended unexpectedly");break}for(d+=l.decode(p,{stream:!0});;){let g=d.indexOf(`
+import bi from"node:crypto";var be=class{debug;headless;headlessReason;constructor(e,t=!1,r=""){this.debug=e,this.headless=t,this.headlessReason=r}};var me=class{name;concurrency;constructor(e,t){this.name=e,this.concurrency=t}};var Se=class o{status;output;error;constructor(e,t,r){this.status=e,this.output=t,this.error=r}static success(e){return new o("success",e,null)}static failure(e){return new o("failure",null,e)}static cancelled(e){return new o("cancelled",null,e)}},mt=class{promise;resolveFn;rejectFn;constructor(){this.promise=new Promise((e,t)=>{this.resolveFn=e,this.rejectFn=t})}resolve(e){this.resolveFn(e)}reject(e){this.rejectFn(e)}};var B=class{name;lane;priority;locks;maxAttempts;cancellable;constructor(e){this.name=e.name,this.lane=e.lane,this.priority=e.priority,this.locks=e.locks,this.maxAttempts=e.maxAttempts,this.cancellable=e.cancellable}},q=class{options;constructor(e){this.options=e}},ne=class{type;input;constructor(e,t){this.type=e,this.input=t}},gt=class{bus;logger;notifier;flags;signal;engine;get headless(){return this.flags.headless}dispatchFn;constructor(e){this.bus=e.bus,this.engine=e.engine,this.logger=e.logger,this.notifier=e.notifier,this.flags=e.flags,this.signal=e.signal,this.dispatchFn=e.dispatch}dispatch(e,t){let r=t||new Ve(null,null,null,null);return this.dispatchFn(e,r)}};var yt=class{ts;message;constructor(e,t){this.ts=t?.ts??Date.now(),this.message=e}},ce=class{id;ts;groupKey;kind;scope;message;category;constructor(e,t){this.id=crypto.randomUUID(),this.ts=t?.ts??Date.now(),this.kind=t?.kind??"info",this.scope=t?.scope??"default",this.message=e,this.groupKey=t?.groupKey,this.category=t?.category??[]}},vt=class{ts;jobId;jobType;state;attempt;maxAttempts;lane;priority;error;nextRunAt;constructor(e){this.ts=e.ts,this.jobId=e.jobId,this.jobType=e.jobType,this.state=e.state,this.attempt=e.attempt,this.maxAttempts=e.maxAttempts,this.lane=e.lane,this.priority=e.priority,this.error=e.error,this.nextRunAt=e.nextRunAt}};var Re=class{jobs;constructor(e){this.jobs=e}},Ye=class{id;jobType;inputJson;state;lane;priority;locks;attempts;maxAttempts;nextRunAt;cancellable;parentId;dedupeKey;lastError;createdAt;updatedAt;constructor(e){this.id=e.id,this.jobType=e.jobType,this.inputJson=e.inputJson,this.state=e.state,this.lane=e.lane,this.priority=e.priority,this.locks=e.locks,this.attempts=e.attempts,this.maxAttempts=e.maxAttempts,this.nextRunAt=e.nextRunAt,this.cancellable=e.cancellable,this.parentId=e.parentId,this.dedupeKey=e.dedupeKey,this.lastError=e.lastError,this.createdAt=e.createdAt,this.updatedAt=e.updatedAt}};var bt=class{state;constructor(e){this.state=e??new Re({})}async load(){return new Re(structuredClone(this.state.jobs))}async save(e){this.state=new Re(structuredClone(e.jobs))}};var Fe=class{engine;bus;logger;notifier;flags;signal;get headless(){return this.flags.headless}constructor(e){this.engine=e.engine,this.bus=e.bus,this.logger=e.logger,this.notifier=e.notifier,this.flags=e.flags,this.signal=e.signal}on(e,t){return this.bus.on(e,t)}};var St=class{version=1;controlBaseUrl;bridgeWsUrl;directories;device;tokens;constructor(){this.directories=[]}},_t=class{_configuration;loader;get configuration(){return this._configuration}constructor(e,t){this._configuration=e,this.loader=t}apply(e){this._configuration=e}};import xe from"node:path";import On from"node:os";import Rr from"node:fs";import Xo from"node:path";import Zo from"env-paths";var ei="DeviceLink",ti=Zo(ei,{suffix:""});function ri(){if(process.env.DEVICELINK_DATA_DIR)return process.env.DEVICELINK_DATA_DIR;let o=process.env.DEVICELINK_ENV,e=ti.config;return!o||o==="production"?e:Xo.join(e,o)}function ue(){return ri()}import Cr from"dotenv";import ge from"lodash/get.js";import Ct from"lodash/isArray.js";import xr from"lodash/isObject.js";import Nn from"lodash/isString.js";import ye from"lodash/isEmpty.js";import vi from"lodash/defaultTo.js";import{createRequire as ni}from"node:module";var oi=ni(import.meta.url),ii=oi("node-machine-id");function Et(o=!0){try{let e=ii.machineIdSync(o);if(e&&typeof e=="string"&&e.trim().length>0)return e.trim()}catch{}}import _n from"node:path";import dr from"node:fs";import pr from"node:crypto";import fr from"lodash/get.js";import _e from"lodash/isEmpty.js";var kt=class{_notifier;argv;envFile;processEnv;configFileContent;getPrivateKey;_lastGeneratedPrivateKey;constructor(e){this._notifier=e.notifier,this.argv=e.argv,this.envFile=e.envFile,this.processEnv=e.processEnv,this.configFileContent=e.configFileContent,this.getPrivateKey=e.getPrivateKey}getLastGeneratedPrivateKey(){let e=this._lastGeneratedPrivateKey;return this._lastGeneratedPrivateKey=void 0,e}ensureDeviceKeys(){let e=this.getDevicePrivateKey(),t=this.getDevicePublicKey();if(e&&t)return{publicKey:t,privateKey:e};if(e&&!t)try{let s=pr.createPrivateKey(e);return t=pr.createPublicKey(s).export({format:"pem",type:"spki"}).toString("utf8"),this._notifier.info("Derived public key from private key",{scope:"system"}),{publicKey:t,privateKey:e}}catch{this._notifier.warn("Failed to derive public key from private key, generating new keypair",{scope:"system"})}t&&!e&&this._notifier.warn("Public key found but no private key, generating new keypair",{scope:"system"}),this._notifier.info("Generating new Ed25519 keypair...",{scope:"system"});let{publicKey:r,privateKey:n}=pr.generateKeyPairSync("ed25519"),i=r.export({format:"pem",type:"spki"}).toString("utf8"),a=n.export({format:"pem",type:"pkcs8"}).toString("utf8");return this._lastGeneratedPrivateKey=a,this._notifier.info("Generated new Ed25519 keypair",{scope:"system"}),{publicKey:i,privateKey:a}}getDevicePrivateKey(){if(this.getPrivateKey){let r=this.getPrivateKey();if(r&&!_e(r))return this._notifier.info("Using private key from secret storage cache",{scope:"system"}),r}if(this.argv?.privateKeyFile){let r=this.loadKeyFromFile(this.argv.privateKeyFile);if(r)return this._notifier.info(`Found private key from --private-key-file: ${this.argv.privateKeyFile}`,{scope:"system"}),r;this._notifier.warn(`Failed to load private key from file: ${this.argv.privateKeyFile}`,{scope:"system"})}let e=this.safeGetEnvValue("DLINK_DEVICE_PRIVATE_KEY");if(e&&!_e(e))return this._notifier.info("Found private key in env file",{scope:"system"}),e;let t=this.processEnv.DLINK_DEVICE_PRIVATE_KEY;if(t&&!_e(t))return this._notifier.info("Found private key in process env",{scope:"system"}),t}getDevicePublicKey(){if(this.argv?.publicKeyFile){let n=this.loadKeyFromFile(this.argv.publicKeyFile);if(n)return this._notifier.info(`Found public key from --public-key-file: ${this.argv.publicKeyFile}`,{scope:"system"}),n;this._notifier.warn(`Failed to load public key from file: ${this.argv.publicKeyFile}`,{scope:"system"})}let e=fr(this.safeGetConfigValue("device"),"keys.public");if(e&&!_e(String(e)))return this._notifier.info("Found public key in config file",{scope:"system"}),String(e);let t=this.safeGetEnvValue("DLINK_DEVICE_PUBLIC_KEY");if(t&&!_e(t))return this._notifier.info("Found public key in env file",{scope:"system"}),t;let r=this.processEnv.DLINK_DEVICE_PUBLIC_KEY;if(r&&!_e(r))return this._notifier.info("Found public key in process env",{scope:"system"}),r}loadKeyFromFile(e){if(!e||_e(e))return;let t=this.getApplicationConfigFolder(),r=[e,_n.join(t,e)];for(let n of r)try{let i=_n.resolve(n);if(dr.existsSync(i))if(dr.statSync(i).isFile()){let s=dr.readFileSync(i,"utf8").trim();if(_e(s))this._notifier.warn(`Key file is empty: ${i}`,{scope:"system"});else return this._notifier.info(`Loaded key from file: ${i}`,{scope:"system"}),s}else this._notifier.warn(`Path is not a file: ${i}`,{scope:"system"})}catch(i){let a=i instanceof Error?i.message:String(i);this._notifier.warn(`Failed to read key file ${n}: ${a}`,{scope:"system"})}this._notifier.warn(`Key file not found: ${e} (tried: ${r.join(", ")})`,{scope:"system"})}safeGetEnvValue(e){try{return fr(this.envFile,`parsed.${e}`)}catch{return}}safeGetConfigValue(e){try{return fr(this.configFileContent,e)}catch{return}}getApplicationConfigFolder(){return ue()}};import En from"node:crypto";function kn(o){let e=o.trim();e=e.replace(/\\/g,"/"),e=e.replace(/(^\/\/+)|\/{2,}/g,(l,d)=>d?"//":"/"),e.length>1&&e.endsWith("/")&&(e=e.replace(/\/+$/g,"")),e===""&&(e="/"),e=e.replace(/^([a-zA-Z]):(?=\/|$)/,(l,d)=>`${String(d).toUpperCase()}:`);let t=e.startsWith("/")||e.startsWith("//")||/^[A-Z]:\//.test(e),r=e.startsWith("//")?"//":e.startsWith("/")?"/":"",n="",i=e.match(/^([A-Z]:)(\/|$)/);i?(n=i[1],e=e.slice(n.length),e.startsWith("/")&&(e=e.slice(1))):e=e.replace(/^\/+/,"");let a=e.split("/").filter(Boolean),s=[];for(let l of a)if(l!=="."){if(l===".."){s.length>0&&s[s.length-1]!==".."?s.pop():t||s.push("..");continue}s.push(l)}let c=s.join("/");return n?c=`${n}/${c}`.replace(/\/+$/g,""):t&&(c=`${r}${c}`.replace(/\/+$/g,"")),c=c.toLowerCase(),c}function hr(o,e=[3,3,3,3]){let t=kn(o),n=En.createHash("sha256").update(t,"utf8").digest("base64url").replace(/[^a-zA-Z0-9]/g,"").toLowerCase(),i=e.reduce((c,l)=>c+l,0),a=n.length>=i?n:n.padEnd(i,n),s=0;return e.map(c=>a.slice(s,s+=c)).join("-")}function mr(o){let e=kn(o),r=En.createHash("sha256").update(e,"utf8").digest("hex").slice(0,32),n=r.slice(0,8),i=r.slice(8,12),a=r.slice(12,16),s=r.slice(16,20),c=r.slice(20,32);return`${n}-${i}-${a}-${s}-${c}`}import*as ee from"node:crypto";function gr(o){let e=ee.createPublicKey(o);if(e.asymmetricKeyType!=="ed25519")throw new Error(`Unexpected key type: ${e.asymmetricKeyType}`);let t=e.export({format:"der",type:"spki"});return ee.createHash("sha256").update(t).digest("base64url").slice(0,16).toUpperCase()}function yr(o){let e=Buffer.from(`${o.deviceId}|${o.ts}|${o.nonce}`,"utf8"),t=ee.createPrivateKey(o.privateKeyPem);return ee.sign(null,e,t).toString("base64")}function vr(o){let e=ee.createHash("sha256").update(o.refreshToken,"utf8").digest("hex"),t=Buffer.from(`${o.deviceId}|${o.ts}|${o.nonce}|${e}`,"utf8"),r=ee.createPrivateKey(o.privateKeyPem);return ee.sign(null,t,r).toString("base64")}function br(o){return new Promise(e=>setTimeout(e,o))}import*as Tn from"node:path";var wn=process.platform==="win32";function Sr(o){let e=Tn.resolve(o);return wn?e.toLowerCase():e}import*as le from"node:path";import*as Rn from"node:os";function Ce(o){return o.replace(/\\/g,"/")}function Cn(o){return/^[A-Za-z]:[\\/]/.test(o)||/^[A-Za-z]:$/.test(o.trim())}function ci(o){return Cn(o)?o.replace(/\//g,"\\"):o}function _r(o){if(o==null)return;let e=String(o).trim();if(e==="")return;if(e.startsWith("~"))return Ce(e);if(!Cn(e))try{let l=le.resolve(e),d=le.resolve(Rn.homedir()),p=le.relative(d,l);if(!p.startsWith("..")&&!le.isAbsolute(p))return p===""?"~":"~/"+Ce(p)}catch{}let r=ci(e).match(/^([A-Za-z]:)\\(?:[Uu][Ss][Ee][Rr][Ss])\\([^\\]+)(\\.*)?$/);if(r){let l=(r[3]??"").replace(/\\/g,"/");return l?"~"+l:"~"}let n=e.match(/^\/mnt\/[a-z]\/(?:[Uu][Ss][Ee][Rr][Ss])\/[^/]+(\/.*)?$/i);if(n){let l=n[1]??"";return l?"~"+Ce(l):"~"}let i=e.match(/^\/Users\/[^/]+(\/.*)?$/);if(i){let l=i[1]??"";return l?"~"+Ce(l):"~"}let a=e.match(/^\/home\/[^/]+(\/.*)?$/);if(a){let l=a[1]??"";return l?"~"+Ce(l):"~"}let s=e.match(/^\/usr\/home\/[^/]+(\/.*)?$/);if(s){let l=s[1]??"";return l?"~"+Ce(l):"~"}let c=e.match(/^\/export\/home\/[^/]+(\/.*)?$/);if(c){let l=c[1]??"";return l?"~"+Ce(l):"~"}try{return le.basename(le.resolve(e))}catch{return e.split(/[/\\]/).pop()??e}}import Er from"lodash/get.js";import ui from"lodash/isObject.js";import Tt from"lodash/isString.js";function K(o){if(o instanceof Error)return o.message;let e=Er(o,"message");return Tt(e)?e:String(o)}function oe(o){if(!ui(o))return;let e=Er(o,"code");return Tt(e)?e:void 0}function Y(o){return Tt(oe(o))&&Tt(Er(o,"message"))}function L(o,e={}){return{code:oe(o)??e.code??"INTERNAL",message:K(o)||e.message||"An unexpected error occurred."}}import li from"lodash/isBoolean.js";import xn from"lodash/isFinite.js";import di from"lodash/isInteger.js";import Dn from"lodash/isPlainObject.js";import An from"lodash/isString.js";import kr from"lodash/isUndefined.js";import pi from"lodash/omit.js";import fi from"lodash/omitBy.js";import hi from"lodash/toNumber.js";var mi=/^[+-]?(\d+\.?\d*|\.\d+)([eE][+-]?\d+)?$/;function In(o){return Dn(o)?o:{}}var wt=class{_found;constructor(e){this._found=e}exists(){return!kr(this._found)}unknown(){return this._found}string(){return An(this._found)?this._found:null}number(){if(xn(this._found))return this._found;if(!An(this._found)||!mi.test(this._found.trim()))return null;let e=hi(this._found);return xn(e)?e:null}integer(){let e=this.number();return e!==null&&di(e)?e:null}boolean(){return li(this._found)?this._found:this._found==="true"?!0:this._found==="false"?!1:null}object(){return Dn(this._found)?this._found:null}list(){return Array.isArray(this._found)?this._found:null}},Rt=class o{_value;constructor(e){this._value=In(e)}set(e,t){return kr(t)?this:new o({...this._value,[e]:t})}merge(e){return new o({...this._value,...fi(In(e),kr)})}drop(e){return new o(pi(this._value,e))}has(e){return e in this._value}property(e){return new wt(this._value[e])}string(e){return this.property(e).string()}value(){return this._value}toJSON(){return this._value}};function Tr(o){return new Rt(o)}import gi from"lodash/isUndefined.js";import yi from"lodash/omitBy.js";function wr(o){return yi(o,gi)}var Le={version:1,controlBaseUrl:"",bridgeWsUrl:"",directories:[],device:void 0},xt=class{_notifier;argv;config=Le;envFile=Cr.config({quiet:!0});processEnv={};productionEnv={};configFileContent={};_privateKeyCache=void 0;_privateKeyToStore=void 0;constructor(e){this._notifier=e,this.loadProductionEnv()}loadProductionEnv(){let e=[xe.resolve(xe.dirname(process.argv[1]??"."),".env.production"),xe.resolve(process.cwd(),".env.production")];for(let t of e)try{if(Rr.existsSync(t)){let r=Cr.config({path:t,quiet:!0});r.parsed&&(this.productionEnv=r.parsed);return}}catch{}}setPrivateKeyCache(e){this._privateKeyCache=e}getPrivateKeyToStore(){return this._privateKeyToStore}withDefaultConfig(){return this.config.version=Le.version,this.config.controlBaseUrl=Le.controlBaseUrl,this.config.bridgeWsUrl=Le.bridgeWsUrl,this.config.directories=Le.directories,this.config.device=Le.device,this}withProcessEnv(){return this.processEnv={NODE_ENV:process.env.NODE_ENV,APPDATA:process.env.APPDATA,npm_package_version:process.env.npm_package_version,DLINK_DEVICE_ID:process.env.DLINK_DEVICE_ID,DLINK_DEVICE_NAME:process.env.DLINK_DEVICE_NAME,DLINK_DEVICE_TAG:process.env.DLINK_DEVICE_TAG,DLINK_CONTROL_URL:process.env.DLINK_CONTROL_URL,DLINK_BRIDGE_URL:process.env.DLINK_BRIDGE_URL,DLINK_DIRECTORIES:process.env.DLINK_DIRECTORIES},this}withArgv(e){return this.argv=e,this}withEnviromentFile(e){return this.envFile=Cr.config({path:e,quiet:!0}),this}withConfigFile(e){try{let t=this.getApplicationConfigFolder(),r=xe.join(t,e);if(Rr.existsSync(r)){let n=Rr.readFileSync(r,"utf8"),i=JSON.parse(n);xr(i)&&!Ct(i)?this.configFileContent=i:this._notifier.warn(`Config file ${e} does not contain a valid object`,{scope:"system"})}}catch(t){let r=t instanceof Error?t.message:String(t);this._notifier.warn(`Failed to load config file ${e}: ${r}`,{scope:"system"})}return this}build(){return this.config.controlBaseUrl=this.getControlBaseUrl(),this.config.bridgeWsUrl=this.getBridgeWsUrl(),this.config.directories=this.getDirectories(),this.config.device=this.getDevice(),this.config.tokens=this.getTokens(),this.config}getConfigValue(e,t){let r=this.safeGetConfigValue(e);return r===void 0?t?.defaultValue:r}firstSet(...e){return e.find(t=>t!=null&&String(t).trim()!=="")}getControlBaseUrl(){return this.firstSet(this.argv?.controlUrl,this.safeGetEnvValue("DLINK_CONTROL_URL"),this.safeGetConfigValue("controlBaseUrl"),this.processEnv.DLINK_CONTROL_URL,this.productionEnv.DLINK_CONTROL_URL)}getBridgeWsUrl(){return this.firstSet(this.argv?.bridgeWsUrl,this.safeGetEnvValue("DLINK_BRIDGE_URL"),this.safeGetConfigValue("bridgeWsUrl"),this.processEnv.DLINK_BRIDGE_URL,this.productionEnv.DLINK_BRIDGE_URL)}getDirectories(){let e=[];if(e.push(this.createDirectoryFromPath(process.cwd())),this.argv?.rootPath)try{e.push(...this.parseDirectoriesFromString(this.argv.rootPath))}catch{e.push(this.createDirectoryFromPath(this.argv.rootPath))}let t=this.safeGetEnvValue("DLINK_DIRECTORIES")??this.safeGetEnvValue("DLINK_ROOTS");if(t)try{e.push(...this.parseDirectoriesFromString(t))}catch{}let r=this.safeGetConfigValue("directories")??this.safeGetConfigValue("roots");if(r)try{e.push(...this.parseDirectoriesFromValue(r))}catch{}let n=this.processEnv.DLINK_DIRECTORIES??this.processEnv.DLINK_ROOTS;if(n)try{e.push(...this.parseDirectoriesFromString(n))}catch{}return this.deduplicateDirectories(e)}deduplicateDirectories(e){let t=new Set,r=[];for(let n of e){let i=Sr(n.path);t.has(i)||(t.add(i),r.push(n))}return r}getDevice(){let e=this.getDeviceId();if(!e){this._notifier.warn("No device ID found from any source (argv, env, config, process env, or machine ID)",{scope:"system"});return}let t=this.getDeviceName();t||(t=On.hostname()||"Unknown Device");let r=this.getDeviceTag(),n=new kt({notifier:this._notifier,argv:this.argv,envFile:this.envFile,processEnv:this.processEnv,configFileContent:this.configFileContent,getPrivateKey:()=>this._privateKeyCache}),{publicKey:i}=n.ensureDeviceKeys();this._privateKeyToStore=n.getLastGeneratedPrivateKey();let a={id:e,name:t,tag:r||"",keys:{public:i}};return this._notifier.info(`Created device: id=${a.id?.substring(0,8)}..., name=${a.name}, tag=${a.tag||"(empty)"}`,{scope:"system"}),a}getDeviceId(){this._notifier.info("Checking env file for DLINK_DEVICE_ID...",{scope:"system"});let e=this.safeGetEnvValue("DLINK_DEVICE_ID");if(e&&!ye(e))return this._notifier.info(`Found device ID in env file: ${e.substring(0,8)}...`,{scope:"system"}),e;this._notifier.info("Checking config file for deviceId...",{scope:"system"});let t=this.safeGetConfigValue("deviceId")??ge(this.safeGetConfigValue("device"),"id");if(t&&!ye(String(t)))return this._notifier.info(`Found device ID in config file: ${String(t).substring(0,8)}...`,{scope:"system"}),String(t);this._notifier.info("Checking process env for DLINK_DEVICE_ID...",{scope:"system"});let r=this.processEnv.DLINK_DEVICE_ID;if(r&&!ye(r))return this._notifier.info(`Found device ID in process env: ${r.substring(0,8)}...`,{scope:"system"}),r;this._notifier.info("Trying machine ID as fallback...",{scope:"system"});let n=Et(!0);if(n)return this._notifier.info(`Using machine ID: ${n.substring(0,8)}...`,{scope:"system"}),n;this._notifier.error("Failed to get machine ID in getDeviceId()",{scope:"system"}),this._notifier.warn("No device ID found in any source",{scope:"system"})}getDeviceName(){let e=this.safeGetEnvValue("DLINK_DEVICE_NAME");if(e&&!ye(e))return e;let t=ge(this.safeGetConfigValue("device"),"name");if(t&&!ye(String(t)))return String(t);let r=this.processEnv.DLINK_DEVICE_NAME;if(r&&!ye(r))return r;let n=On.hostname();if(n&&!ye(n))return n}getDeviceTag(){let e=this.safeGetEnvValue("DLINK_DEVICE_TAG");if(e)return e;let t=ge(this.safeGetConfigValue("device"),"tag");if(t)return String(t);let r=this.processEnv.DLINK_DEVICE_TAG;if(r)return r}getTokens(){let e=this.safeGetConfigValue("tokens");if(!e||!xr(e)||Ct(e))return;let t=e,r={},n=ge(t,"accessTokenExpSec");if(typeof n=="number"&&(r.accessTokenExpSec=n),r.accessTokenExpSec!==void 0)return r}safeGetEnvValue(e){try{return ge(this.envFile,`parsed.${e}`)}catch{return}}safeGetConfigValue(e){try{return ge(this.configFileContent,e)}catch{return}}parseDirectoriesFromString(e){try{let t=JSON.parse(e);return this.parseDirectoriesFromValue(t)}catch{return[this.createDirectoryFromPath(e)]}}parseDirectoriesFromValue(e){if(Ct(e))return e.map(r=>this.parseDirectoryFromValue(r)).filter(r=>r!==null);if(Nn(e))return[this.createDirectoryFromPath(e)];let t=this.parseDirectoryFromValue(e);return t?[t]:[]}parseDirectoryFromValue(e){if(Nn(e))return this.createDirectoryFromPath(e);if(xr(e)&&!Ct(e)){let t=e,r=mr(ge(t,"path")),n=ge(t,"path"),i=vi(ge(t,"name"),n?xe.basename(n):"");if(!ye(r)&&!ye(n)){let a=hr(n);return{id:String(r),name:String(i),path:String(n),tag:a}}}return null}createDirectoryFromPath(e){let t=xe.resolve(e),r=mr(t),n=xe.basename(t),i=hr(t);return{id:r,name:n,path:t,tag:i}}getApplicationConfigFolder(){return ue()}};var Ve=class{dedupeKey;parentId;overridePriority;overrideLane;constructor(e,t,r,n){this.dedupeKey=e,this.parentId=t,this.overridePriority=r,this.overrideLane=n}},Ar=class{phase;flags;constructor(e){this.phase="idle",this.flags=e??new be(!1)}},At=class{argv;configurationContext;bus;notifier;logger;storage;secrets;runtime;lanes;laneActive;registry;orchestrators;orchestratorSubscriptions=new Map;orchestratorAbort;jobs;queue;locksHeldBy;completions;dedupeIndex;engineAbort;jobAbort;stopping;running;wakeFn;wakePromise;constructor(e){this.argv=e.argv,this.bus=e.bus,this.logger=e.logger,this.notifier=e.notifier,this.storage=e.storage,this.secrets=e.secrets,this.runtime=new Ar(e.flags),this.lanes=new Map;for(let n of e.lanes)this.lanes.set(n.name,n);this.laneActive=new Map;for(let n of e.lanes)this.laneActive.set(n.name,0);this.registry=new Map,this.orchestrators=[],this.orchestratorAbort=new AbortController,this.jobs=new Map,this.queue=[],this.locksHeldBy=new Map,this.completions=new Map,this.dedupeIndex=new Map,this.engineAbort=new AbortController,this.jobAbort=new Map,this.stopping=!1,this.running=!1,this.wakeFn=null,this.wakePromise=this.resetWake();let t=new St,r=new xt(this.notifier);this.configurationContext=new _t(t,r)}applyConfiguration(e){this.configurationContext.apply(e)}setPhase(e){this.runtime.phase=e}getBus(){return this.bus}hasRunningJobs(){for(let[,e]of this.laneActive)if(e>0)return!0;return!1}register(e){let t=e.options.name;if(this.registry.has(t))throw new Error(`JobType already registered: ${t}`);this.registry.set(t,e)}registerOrchestrator(e){if(this.orchestrators.some(n=>n.name===e.name))throw new Error(`Orchestrator already registered: ${e.name}`);let r=new Fe({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});e.onRegister?.(r),this.setupOrchestratorSubscriptions(e,r),this.orchestrators.push(e)}setupOrchestratorSubscriptions(e,t){let r=e.handlers?.();if(r){let n=[];Object.keys(r).forEach(i=>{let a=r[i];a&&n.push(this.bus.on(i,s=>{Promise.resolve(a(s,t)).catch(c=>{let l=c instanceof Error?c.message:String(c);this.logger.error(`handler error (${e.name}/${String(i)}): ${l}`),this.notifier.error(`handler error (${e.name}/${String(i)}): ${l}`,{scope:"system"})})}))}),this.orchestratorSubscriptions.set(e.name,n)}}async init(){let e=await this.storage.load();for(let[t,r]of Object.entries(e.jobs))this.jobs.set(t,new Ye(r));for(let t of this.jobs.values())t.state==="running"&&(t.state="queued",t.nextRunAt=Date.now(),t.updatedAt=Date.now()),t.dedupeKey&&this.dedupeIndex.set(t.dedupeKey,t.id),t.state==="queued"&&this.queue.push(t.id)}async start(){if(!this.running){this.running=!0,this.runtime.phase="running",process.on("uncaughtException",e=>{this.notifier.error(`uncaughtException: ${e.stack?e.stack:String(e)}`,{scope:"system"}),this.bus.emit("engine:crashed",{reason:"uncaughtException",detail:e instanceof Error?`${e.name}: ${e.message}`:String(e)}),this.requestStop("uncaughtException")}),process.on("unhandledRejection",e=>{this.notifier.error(`unhandledRejection: ${String(e)}`,{scope:"system"}),this.bus.emit("engine:crashed",{reason:"unhandledRejection",detail:String(e)})}),this.bus.emit("engine:started",Date.now());try{await this.startOrchestratorsSafe(),await this.loopGuarded()}finally{await this.stopOrchestratorsSafe(),await this.persist(),this.bus.emit("engine:stopped",Date.now())}}}requestStop(e){if(!this.stopping){this.stopping=!0,this.runtime.phase="stopping",this.bus.emit("engine:stopping",e),this.engineAbort.abort(new Error(`Stopping: ${e}`)),this.orchestratorAbort.abort(new Error(`Stopping: ${e}`));for(let[t,r]of this.jobAbort.entries())this.jobs.get(t)?.cancellable&&r.abort(new Error("Cancelled by user"));this.wake()}}async dispatch(e,t){let r=t||new Ve(null,null,null,null),n=e.type.options.name;if(!this.registry.has(n)){let p=new Error(`JobType not registered: ${n}`);return Se.failure(p)}if(r.dedupeKey){let p=this.dedupeIndex.get(r.dedupeKey);if(p){let f=this.jobs.get(p);if(f&&(f.state==="queued"||f.state==="running")){let m=this.completions.get(p);if(m)return await m.promise}}}let i=this.newId(),a=new mt;this.completions.set(i,a);let s=r.overrideLane?r.overrideLane:e.type.options.lane,c=r.overridePriority!==null?r.overridePriority:e.type.options.priority,l=new Ye({id:i,jobType:n,inputJson:e.input===void 0?"null":JSON.stringify(e.input),state:"queued",lane:s,priority:c,locks:e.type.options.locks,attempts:0,maxAttempts:e.type.options.maxAttempts,nextRunAt:Date.now(),cancellable:e.type.options.cancellable,parentId:r.parentId,dedupeKey:r.dedupeKey,lastError:null,createdAt:Date.now(),updatedAt:Date.now()});return this.jobs.set(i,l),this.queue.push(i),r.dedupeKey&&this.dedupeIndex.set(r.dedupeKey,i),this.emitJobEvent(l,"queued",null,null),await this.persist(),this.wake(),await a.promise}async loopGuarded(){for(;!this.stopping;)try{await this.loopOnce()}catch(e){this.notifier.error(`Engine loop error: ${String(e)}`,{scope:"system"}),await new Promise(t=>setTimeout(t,250))}}async loopOnce(){let e=0;for(;;){let t=this.pickNextRunnable();if(!t)break;e+=1,this.runJobSafe(t)}e===0&&(await this.wakePromise,this.wakePromise=this.resetWake())}async runJobSafe(e){try{await this.runJobInternal(e)}catch(t){this.notifier.error(`runJobInternal crashed: ${String(t)}`,{scope:"system"});let r=this.completions.get(e);r&&r.resolve(Se.failure(new Error(String(t))))}finally{this.wake()}}pickNextRunnable(){let e=Date.now(),t=null,r=Number.NEGATIVE_INFINITY,n=Number.POSITIVE_INFINITY;for(let a of this.queue){let s=this.jobs.get(a);s&&s.state==="queued"&&(this.stopping&&s.lane!=="console"||s.nextRunAt>e||this.canRunInLane(s.lane)&&this.canAcquireLocks(s)&&(s.priority>r||s.priority===r&&s.nextRunAt<n)&&(r=s.priority,n=s.nextRunAt,t=a))}if(!t)return null;let i=this.queue.indexOf(t);return i>=0&&this.queue.splice(i,1),t}canRunInLane(e){let t=this.lanes.get(e);if(!t)return!1;let r=this.laneActive.get(e);return r===void 0?!1:r<t.concurrency}canAcquireLocks(e){for(let t of e.locks){let r=this.locksHeldBy.get(t);if(r&&r!==e.id&&!(e.parentId&&r===e.parentId))return!1}return!0}acquireLocks(e){for(let t of e.locks)this.locksHeldBy.get(t)||this.locksHeldBy.set(t,e.id)}releaseLocks(e){for(let t of e.locks)this.locksHeldBy.get(t)===e.id&&this.locksHeldBy.delete(t)}async runJobInternal(e){let t=this.jobs.get(e);if(!t)return;let r=this.registry.get(t.jobType);if(!r){this.completeFailure(e,new Error(`No registered JobType: ${t.jobType}`));return}let n=this.laneActive.get(t.lane);if(n===void 0){this.completeFailure(e,new Error(`Unknown lane: ${t.lane}`));return}let i=new AbortController;if(this.jobAbort.set(e,i),t.cancellable){let s=this.engineAbort.signal;s.aborted?i.abort(s.reason instanceof Error?s.reason:new Error("Stopped")):s.addEventListener("abort",()=>i.abort(s.reason instanceof Error?s.reason:new Error("Stopped")),{once:!0})}this.laneActive.set(t.lane,n+1),this.acquireLocks(t),t.state="running",t.updatedAt=Date.now(),await this.persist(),this.emitJobEvent(t,"running",null,null);let a=new gt({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:i.signal,dispatch:async(s,c)=>this.dispatch(s,c)});try{let s=JSON.parse(t.inputJson),c=s===null?void 0:s,l=await r.run(c,a);t.state="succeeded",t.updatedAt=Date.now(),t.lastError=null,await this.persist(),this.emitJobEvent(t,"succeeded",null,null),this.completeSuccess(e,l)}catch(s){let c=s instanceof Error?s:new Error("Unknown error");if(t.attempts+=1,t.updatedAt=Date.now(),t.lastError=c.message,i.signal.aborted)t.state="failed",await this.persist(),this.emitJobEvent(t,"failed",c.message,null),this.notifier.error(`Job ${t.jobType} (${e.substring(0,8)}) cancelled: ${c.message}`),this.completeCancelled(e,c);else if(t.attempts<t.maxAttempts&&!this.stopping){let p=Si(t.attempts);t.state="queued",t.nextRunAt=Date.now()+p,await this.persist(),this.queue.push(t.id),this.emitJobEvent(t,"queued",c.message,t.nextRunAt),this.notifier.warn(`Job ${t.jobType} (${e.substring(0,8)}) failed, retrying in ${p}ms (attempt ${t.attempts}/${t.maxAttempts}): ${c.message}`)}else t.state="failed",await this.persist(),this.emitJobEvent(t,"failed",c.message,null),this.notifier.error(`Job ${t.jobType} (${e.substring(0,8)}) failed after ${t.attempts} attempt(s): ${c.message}`),this.completeFailure(e,c)}finally{this.releaseLocks(t);let s=this.laneActive.get(t.lane);s!==void 0&&this.laneActive.set(t.lane,Math.max(0,s-1)),this.jobAbort.delete(e),this.wake()}}async startOrchestratorsSafe(){let e=new Fe({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});for(let t of this.orchestrators)Promise.resolve().then(()=>t.onStart?.(e)).then(()=>t.onStarted?.(e)).catch(r=>this.notifier.error(`Orchestrator start failed (${t.name}): ${String(r)}`,{scope:"system"}))}async stopOrchestratorsSafe(){let e=new Fe({engine:this,bus:this.bus,logger:this.logger,notifier:this.notifier,flags:this.runtime.flags,signal:this.orchestratorAbort.signal});for(let t=this.orchestrators.length-1;t>=0;t--){let r=this.orchestrators[t];try{await r.onStop?.(e),r.onStopped?.(e)}catch(i){this.notifier.error(`Orchestrator stop failed (${r.name}): ${String(i)}`,{scope:"system"})}let n=this.orchestratorSubscriptions.get(r.name);if(n){for(let i of n)i.unsubscribe();this.orchestratorSubscriptions.delete(r.name)}}}emitJobEvent(e,t,r,n){this.bus.emit("job:event",new vt({ts:Date.now(),jobId:e.id,jobType:e.jobType,state:t,attempt:e.attempts,maxAttempts:e.maxAttempts,lane:e.lane,priority:e.priority,error:r,nextRunAt:n}))}completeSuccess(e,t){let r=this.completions.get(e);r&&r.resolve(Se.success(t))}completeFailure(e,t){let r=this.completions.get(e);r&&r.resolve(Se.failure(t))}completeCancelled(e,t){let r=this.completions.get(e);r&&r.resolve(Se.cancelled(t))}async persist(){let e={};for(let[t,r]of this.jobs.entries())e[t]=r;await this.storage.save(new Re(e))}wake(){this.wakeFn&&this.wakeFn()}resetWake(){return new Promise(e=>{this.wakeFn=e})}newId(){return bi.randomBytes(8).toString("hex")}};function Si(o){let r=Math.min(3e4,300*2**(o-1)),n=Math.floor(Math.random()*200);return r+n}var It=class{handlers;constructor(){this.handlers=new Map}on(e,t){let r=this.handlers.get(e),n=r||[];return n.push(t),this.handlers.set(e,n),{unsubscribe:()=>{let i=this.handlers.get(e);if(!i)return;let a=i.filter(s=>s!==t);this.handlers.set(e,a)}}}emit(e,t){let r=this.handlers.get(e);if(r)for(let n of r)n(t)}};import*as Ee from"node:crypto";import*as ke from"node:fs/promises";import*as Ot from"node:path";var _i="DeviceLink-SecretStorage-v1",Qe=12,Dt=16,Ei=32,ki="secrets.enc.json";function Ti(){return Ot.join(ue(),ki)}function wi(o){return Ee.pbkdf2Sync(o,_i,1e5,Ei,"sha256")}var Dr=class{secretsPath;key;cache={};loaded=!1;constructor(e,t){this.secretsPath=e,this.key=t}async load(){if(!this.loaded){try{let e=await ke.readFile(this.secretsPath,"utf8"),t=this.decrypt(e);this.cache=JSON.parse(t)}catch{this.cache={}}this.loaded=!0}}async save(){await ke.mkdir(Ot.dirname(this.secretsPath),{recursive:!0});let e=JSON.stringify(this.cache),t=this.encrypt(e),r=this.secretsPath+".tmp";await ke.writeFile(r,t,"utf8"),await ke.rename(r,this.secretsPath)}encrypt(e){let t=Ee.randomBytes(Qe),r=Ee.createCipheriv("aes-256-gcm",this.key,t,{authTagLength:Dt}),n=Buffer.concat([r.update(e,"utf8"),r.final()]),i=r.getAuthTag();return Buffer.concat([t,i,n]).toString("base64url")}decrypt(e){let t=Buffer.from(e,"base64url"),r=t.subarray(0,Qe),n=t.subarray(Qe,Qe+Dt),i=t.subarray(Qe+Dt),a=Ee.createDecipheriv("aes-256-gcm",this.key,r,{authTagLength:Dt});return a.setAuthTag(n),a.update(i)+a.final("utf8")}async get(e){await this.load();let t=this.cache[e];return t===void 0?{ok:!1}:{ok:!0,value:t}}async set(e,t){await this.load(),this.cache[e]=t,await this.save()}async delete(e){await this.load(),this.cache[e]!==void 0&&(delete this.cache[e],await this.save())}};async function Pn(){let o=Et(!0);if(!o)throw new Error("Secret storage requires machine ID");let e=wi(o),t=Ti();return new Dr(t,e)}var Nt=class{},Or=class{ok;config;constructor(e,t){this.ok=e,this.config=t}},Nr=class extends q{constructor(){super(new B({name:"load-config",lane:"main",priority:1e3,locks:["GLOBAL"],maxAttempts:3,cancellable:!0}))}async run(e,t){t.notifier.info("Loading configuration...",{scope:"system"});let r=t.engine.configurationContext.loader,n=await t.engine.secrets.get("devicePrivateKey");r.setPrivateKeyCache(n.ok&&n.value?n.value:void 0),r.withDefaultConfig(),r.withArgv(t.engine.argv),t.engine.argv.enviromentFile&&r.withEnviromentFile(t.engine.argv.enviromentFile),r.withConfigFile("config.json"),r.withProcessEnv();let i=r.build(),a=r.getPrivateKeyToStore();return a&&await t.engine.secrets.set("devicePrivateKey",a),this.updateUi(i,t),t.notifier.success("Configuration loaded"),t.engine.applyConfiguration(i),t.bus.emit("config:loaded",i),new Or(!0,i)}updateUi(e,t){let r={scope:"system"};t.notifier.info(`Control base URL: ${e.controlBaseUrl}`,r),t.notifier.info(`Bridge WebSocket URL: ${e.bridgeWsUrl}`,r),t.notifier.info(`Directories: ${e.directories.map(n=>n.path).join(", ")}`,r),t.notifier.info(`Device: ${e.device?.id}`,r),t.notifier.info(`Device name: ${e.device?.name}`,r),t.notifier.info(`Device tag: ${e.device?.tag}`,r),t.notifier.info(`Device keys public: ${e.device?.keys?.public?"***":"(none)"}`,r)}},Pr=new Nr;function Fn(o){return new ne(Pr,o)}var Fr=class{ok;constructor(e){this.ok=e}},Lr=class extends q{constructor(){super(new B({name:"console-command",lane:"console",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){return t.notifier.info(`Executing console command: ${e.kind}`),await new Promise(r=>setTimeout(r,2e3)),t.notifier.info(`Console command executed: ${e.kind}`),t.notifier.success(`Console command executed: ${e.kind}`),new Fr(!0)}},Ln=new Lr;var Mr=class{ok;constructor(e){this.ok=e}},$r=class extends q{constructor(){super(new B({name:"contact-server",lane:"main",priority:900,locks:["GLOBAL"],maxAttempts:8,cancellable:!0}))}async run(e,t){return t.notifier.info(`contact server mode=${e.mode}`,{scope:"system"}),await new Promise(r=>setTimeout(r,200)),new Mr(!0)}},Mn=new $r;var jr=class{ok;constructor(e){this.ok=e}},Kr=class extends q{constructor(){super(new B({name:"send-server-result",lane:"io",priority:200,locks:[],maxAttempts:10,cancellable:!0}))}async run(e,t){return t.notifier.info(`send result requestId=${e.requestId}`,{scope:"system"}),await new Promise(r=>setTimeout(r,10)),new jr(!0)}},$n=new Kr;import Ci from"node:crypto";import te from"lodash/get.js";import Pt from"lodash/isPlainObject.js";import Xe from"lodash/isString.js";var V=class{constructor(e,t){this.context=e;this.handler=t}execute(e){return this.handler(this.context,e)}};async function de(o,e,t){let r=`${o.configuration.controlBaseUrl}${e}`,n=await fetch(r,t);if(!n.ok){let i=await n.text().catch(s=>{let c=s instanceof Error?s.message:String(s);return o.notifier.error(`Failed to read HTTP error response body: ${c}`),""}),a=new Error(`HTTP ${n.status}: ${i}`);a.status=n.status;try{a.body=i?JSON.parse(i):void 0}catch{a.body=void 0}if(n.status===429){let s=n.headers.get("Retry-After");if(s!==null){let c=parseInt(s,10);Number.isFinite(c)&&c>=0&&(a.retryAfterSec=c)}}throw a}return n.json()}function jn(o){return new V(o,async(e,t)=>de(e,"/api/device/authorize/start",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}function Kn(o){return new V(o,async(e,t)=>de(e,"/api/device/authorize/prove",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}import{z as ie}from"zod";var Ri=ie.union([ie.object({status:ie.literal("pending"),needs_proof:ie.boolean()}),ie.object({status:ie.literal("approved"),needs_proof:ie.boolean()}),ie.object({error:ie.literal("access_denied")}),ie.object({error:ie.literal("expired_token")})]);function Un(o){return new V(o,async(e,t)=>{let r=new URL("/api/device/authorize/stream",e.configuration.controlBaseUrl);r.searchParams.set("device_code",t.deviceCode);let n=e.notifier,i=new AbortController,a=setTimeout(()=>{n.error("[deviceAuthStream] Timeout reached, aborting"),i.abort()},Math.max(1e3,t.timeoutMs));if(t.signal){let s=t.signal;s.addEventListener("abort",()=>{let c="reason"in s&&s.reason!=null?String(s.reason):"";n.warn(`[deviceAuthStream] External signal aborted: ${c}`),i.abort()})}try{let s=await fetch(r.toString(),{method:"GET",headers:{Accept:"text/event-stream"},signal:i.signal});if(!s.ok||!s.body){let p=await s.text().catch(f=>{let m=f instanceof Error?f.message:String(f);return n.error(`[deviceAuthStream] Failed to read response body (${s.status}): ${m}`),""});throw n.error(`[deviceAuthStream] Response error: ${s.status} - ${p}`),new Error(`device/authorize/stream failed (${s.status}): ${p}`)}let c=s.body.getReader(),l=new TextDecoder("utf-8"),d="";for(;;){let{value:p,done:f}=await c.read();if(f){n.error("[deviceAuthStream] Stream ended unexpectedly");break}for(d+=l.decode(p,{stream:!0});;){let m=d.indexOf(`
 
-`);if(g===-1)break;let m=d.slice(0,g);d=d.slice(g+2);let h=null,y=null;for(let _ of m.split(`
-`))_.startsWith("event:")&&(h=_.slice(6).trim()),_.startsWith("data:")&&(y=_.slice(5).trim());if(!h||!y)continue;let k;try{k=JSON.parse(y)}catch(_){n.error(`[deviceAuthStream] Failed to parse event data as JSON: ${String(_)}`);continue}let b=jo.safeParse(k);if(!b.success){n.error(`[deviceAuthStream] Event validation failed (${h}): ${String(b.error)}`);continue}let T=b.data;if(h==="approved"||h==="denied"||h==="expired")return T;if(h==="pending"){"status"in T&&T.status==="pending"&&T.needs_proof===!0&&n.warn("[deviceAuthStream] pending: needs_proof=true (unexpected before approval)");continue}n.warn(`[deviceAuthStream] Unknown event type: ${h}`)}}throw n.error("[deviceAuthStream] Stream ended unexpectedly without completion"),new Error("Device authorization stream ended without completion")}catch(s){if(s instanceof Error&&s.name==="AbortError")n.warn(`[deviceAuthStream] Aborted: ${s.message??""}`);else{let c=s instanceof Error?s.message:String(s);n.error(`[deviceAuthStream] Error: ${c}`)}throw s}finally{clearTimeout(a)}})}function gn(o){return new H(o,async(e,t)=>ie(e,"/api/device/authorize/token",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}function yn(o){return new H(o,async(e,t)=>{let r=new AbortController,n=3e4,i=setTimeout(()=>{r.abort()},n);try{let a=await ie(e,"/api/device/authorize/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t),signal:r.signal});return clearTimeout(i),a}catch(a){throw clearTimeout(i),a instanceof Error&&a.name==="AbortError"?new Error(`Refresh token request timed out after ${n}ms`):a}})}function bn(o){return new H(o,async(e,t)=>ie(e,"/api/device/enrollment/start",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}var Oe=class{deviceAuthStartCall;deviceAuthProveCall;deviceAuthStreamCall;deviceAuthTokenCall;deviceAuthRefreshCall;deviceEnrollmentStartCall;constructor(e,t){let r={configuration:e,notifier:t};this.deviceAuthStartCall=fn(r),this.deviceAuthProveCall=hn(r),this.deviceAuthStreamCall=mn(r),this.deviceAuthTokenCall=gn(r),this.deviceAuthRefreshCall=yn(r),this.deviceEnrollmentStartCall=bn(r)}deviceAuthStart(e){return this.deviceAuthStartCall.execute(e)}deviceEnrollmentStart(e){return this.deviceEnrollmentStartCall.execute(e)}deviceAuthProve(e){return this.deviceAuthProveCall.execute(e)}deviceAuthStream(e){return this.deviceAuthStreamCall.execute(e)}deviceAuthToken(e){return this.deviceAuthTokenCall.execute(e)}deviceAuthRefresh(e){return this.deviceAuthRefreshCall.execute(e)}};function Uo(o){if(typeof o!="object"||o===null)return!1;let e=o;if(e.ok!==!0)return!1;let t=e.data;if(typeof t!="object"||t===null)return!1;let r=t;return r.ok===!0&&typeof r.access_token=="string"&&typeof r.refresh_token=="string"&&typeof r.expires_in_sec=="number"&&typeof r.device_id=="string"}function Bo(o){return o.ok===!0&&typeof o.access_token=="string"}var Tt=class{constructor(e){this.reason=e}},_r=["REFRESH_EXPIRED","REFRESH_REVOKED","REFRESH_NOT_FOUND","DEVICE_NOT_FOUND"],se=class{constructor(e,t,r,n,i,a,s){this.ok=e;this.accessToken=t;this.refreshToken=r;this.expiresInSec=n;this.error=i;this.retryAfterSec=a;this.errorCode=s}},kr=class extends B{constructor(){super(new U({name:"refresh-tokens",lane:"io",priority:900,locks:["AUTH_REFRESH"],maxAttempts:5,cancellable:!0}))}async run(e,t){let r=t.engine.configurationContext.configuration;if(!r.controlBaseUrl)return new se(!1,void 0,void 0,void 0,"controlBaseUrl missing");if(!r.device?.id)return new se(!1,void 0,void 0,void 0,"device.id missing");let n=await t.engine.secrets.get("devicePrivateKey");if(!n.ok||!n.value)return new se(!1,void 0,void 0,void 0,"device private key missing");let i=n.value,a=await t.engine.secrets.get("refreshToken");if(!a.ok||!a.value)return new se(!1,void 0,void 0,void 0,"refresh token missing");let s=a.value;t.notifier.info(`Refreshing tokens (job) reason=${e.reason}`,{scope:"system",category:["token-refresh"]});let c=Date.now(),l=Ko.randomBytes(16).toString("base64url"),d=nr({deviceId:r.device.id,ts:c,nonce:l,refreshToken:s,privateKeyPem:i}),p=new Oe(r,t.notifier),f;try{f=await p.deviceAuthRefresh({device_id:r.device.id,refresh_token:s,ts:c,nonce:l,sig:d})}catch(m){let h=m instanceof Error?m.message:String(m),y=m,k=y.retryAfterSec,b=y.status,T=y.body,_=T?.error,I=b===401&&_!=null&&typeof _=="object"&&_.code==="REFRESH_NOT_FOUND"?"REFRESH_NOT_FOUND":void 0;return I==="REFRESH_NOT_FOUND"?(t.notifier.warn("Refresh token not found; clearing stored refresh token and stopping automatic refresh. Please run signin.",{category:["token-refresh"]}),await t.engine.secrets.delete("refreshToken").catch(E=>{let w=E instanceof Error?E.message:String(E);t.logger.warn(`Could not clear stored refresh token: ${w}`,{category:["token-refresh"]}),t.notifier.warn(`Could not clear stored refresh token: ${w}`,{category:["token-refresh"]})}),new se(!1,void 0,void 0,void 0,"Refresh token not found",void 0,"REFRESH_NOT_FOUND")):(t.notifier.error(`Refresh tokens failed: ${h}`,{category:["token-refresh"]}),new se(!1,void 0,void 0,void 0,h,k,I))}let g=this.normalizeRefreshResponse(f);if(!g){let m=this.extractErrorMessage(f),h=this.extractErrorCode(f);return t.notifier.error(`Refresh tokens failed: ${m}`,{category:["token-refresh"]}),new se(!1,void 0,void 0,void 0,m,void 0,h)}return g.refresh_token&&await t.engine.secrets.set("refreshToken",g.refresh_token),new se(!0,g.access_token,g.refresh_token,g.expires_in_sec)}normalizeRefreshResponse(e){if(Uo(e))return e.data;if(this.looksLikeDomainRefresh(e)){let t=e;return Bo(t)?t:null}return null}looksLikeDomainRefresh(e){if(typeof e!="object"||e===null)return!1;let t=e;return t.ok===!0||t.ok===!1}extractErrorMessage(e){if(typeof e!="object"||e===null)return"Unknown error";let t=e;if(t.ok===!1){let r=t.error;if(typeof r=="object"&&r!==null){let i=r.message;if(typeof i=="string"&&i.length>0)return i}}return t.ok===!0&&"data"in t?"Bad refresh response: missing token fields":"Unknown error"}extractErrorCode(e){if(typeof e!="object"||e===null)return;let t=e;if(t.ok!==!1)return;let r=t.error;if(typeof r!="object"||r===null)return;let n=r.code;return typeof n=="string"?n:void 0}},Tr=new kr;function vn(o){return new ee(Tr,o)}var wt=class{name;filePath;buffer;timer;subs;constructor(e){this.name="telemetry-orchestrator",this.filePath=e,this.buffer=[],this.timer=null,this.subs=[]}async onStart(e){this.subs.push(e.on("log",t=>this.onLog(t))),this.subs.push(e.on("job:event",t=>this.onJob(t))),this.subs.push(e.on("notify:event",t=>this.onNotify(t)))}async onStarted(e){return Promise.resolve()}async onStop(e){for(let t of this.subs)t.unsubscribe();this.subs=[],await this.flush()}async onStopped(e){return Promise.resolve()}onLog(e){this.push({kind:"log",...e})}onJob(e){this.push({kind:"job",...e})}onNotify(e){this.push({...e,kind:"ui"})}push(e){this.buffer.push(JSON.stringify(e)),this.timer||(this.timer=setTimeout(()=>void this.flush(),1e3)),this.buffer.length>200&&this.flush()}async flush(){this.timer&&(clearTimeout(this.timer),this.timer=null),this.buffer.length}};function Sn(o,e){return e.headless?o.on("notify:event",t=>{qo(t,e.debug)}):null}function qo(o,e){if(!e&&!Wo(o))return;let t=`[agent] ${o.message}`;switch(o.kind){case"error":console.error(t);break;case"warning":console.warn(t);break;default:console.log(t);break}}function Wo(o){return o.kind==="error"||o.kind==="warning"||o.kind==="success"||o.scope==="system"}var Rt=class{name="os-signals-orchestrator";sigint;sigterm;async onStart(e){let t=r=>{e.notifier.warn(`received ${r}`,{scope:"system"}),e.engine.requestStop(r)};this.sigint=()=>t("SIGINT"),this.sigterm=()=>t("SIGTERM"),process.on("SIGINT",this.sigint),process.on("SIGTERM",this.sigterm)}async onStarted(e){return Promise.resolve()}async onStop(e){this.sigint&&process.off("SIGINT",this.sigint),this.sigterm&&process.off("SIGTERM",this.sigterm),this.sigint=void 0,this.sigterm=void 0,e.notifier.info("OS signal handlers removed",{scope:"system"})}async onStopped(e){return Promise.resolve()}};import xi from"react";import{render as Ai}from"ink";import{useEffect as bi,useCallback as Rr}from"react";import{Box as Cr,useApp as vi,useInput as Si}from"ink";import{useEffect as Jo,useState as Ho}from"react";function En(){let[o,e]=Ho(()=>{let t=process.stdout.columns||80,r=process.stdout.rows||24;return[t,r]});return Jo(()=>{let t=()=>{let r=process.stdout.columns||80,n=process.stdout.rows||24;e([r,n])};return process.stdout.on("resize",t),t(),()=>{process.stdout.off("resize",t)}},[]),o}import Rn,{useEffect as Ct,useState as Cn}from"react";import{Box as Pe,Text as N}from"ink";import{createContext as Go,useContext as Vo,useReducer as zo,useMemo as Ne,useEffect as kn,useState as Yo}from"react";import{jsx as ei}from"react/jsx-runtime";var _n=Go(null);function Qo(o,e){let t=o.messages,r=t.findIndex(n=>n.id===e.id);if(r!==-1){let n=t[r],i=[...t];return i[r]={...e,id:n.id,ts:n.ts},{...o,messages:i}}if(e.groupKey)for(let n=t.length-1;n>=0;n--){let i=t[n];if(i.groupKey===e.groupKey){let a=[...t];return a[n]={...e,id:i.id,ts:i.ts,groupKey:i.groupKey},{...o,messages:a}}}return{...o,messages:[...t.slice(-380),e]}}function Xo(o,e){switch(e.type){case"SET_INPUT":return{...o,input:e.payload};case"ADD_MESSAGE":return Qo(o,e.payload);case"SET_MESSAGES":return{...o,messages:e.payload};case"SET_ENGINE_STATE":return{...o,engineState:e.payload};case"ADD_COMMAND_TO_HISTORY":{if(!e.payload)return o;let t=o.commandHistory.length===0||o.commandHistory[o.commandHistory.length-1]!==e.payload?[...o.commandHistory,e.payload]:o.commandHistory;return{...o,commandHistory:t}}case"SET_HISTORY_INDEX":return{...o,historyIndex:e.payload};case"SET_IS_PROCESSING":return{...o,isProcessing:e.payload};case"SET_DEBUG_ENABLED":return{...o,debugEnabled:e.payload};case"SET_CONNECTION_STATUS":return{...o,connectionStatus:e.payload};case"SET_CONNECTION_RETRY":return{...o,connectionRetryInSec:e.payload};case"SET_REFRESH_COUNTDOWN":return{...o,refreshCountdownSec:e.payload};case"SET_DEVICE_ID":return{...o,deviceId:e.payload};case"RESET_INPUT":return{...o,input:""};case"RESET_HISTORY_INDEX":return{...o,historyIndex:-1};case"RESET_HISTORY_INDEX_IF_TYPING":if(o.historyIndex!==-1){let t=o.commandHistory[o.historyIndex];if(t!==void 0&&o.input!==t)return{...o,historyIndex:-1}}return o;default:return o}}var Zo={input:"",messages:[],engineState:"IDLE",commandHistory:[],historyIndex:-1,isProcessing:!1,debugEnabled:!1,connectionStatus:"disconnected",connectionRetryInSec:null,refreshCountdownSec:null,deviceId:null};function Tn({engine:o,bus:e,children:t}){let[r,n]=zo(Xo,Zo),[i,a]=Yo(()=>Object.freeze({phase:o.runtime.phase,flags:Object.freeze({debug:o.runtime.flags.debug})}));kn(()=>{e.emit("ui:initialized",Date.now())},[e]),kn(()=>{let c=E=>E==="running"?"RUNNING":E==="stopping"?"STOPPING":E==="booting"?"IDLE":"STOPPED",l=e.on("notify:event",E=>{if(n({type:"ADD_MESSAGE",payload:E}),E.groupKey?.startsWith("auth:refresh"))if(E.kind==="info"){let w=E.message.match(/refresh scheduled in (\d+)s/);if(w){let x=parseInt(w[1],10);isNaN(x)||n({type:"SET_REFRESH_COUNTDOWN",payload:x})}}else E.kind==="success"&&E.message.includes("refresh completed")&&n({type:"SET_REFRESH_COUNTDOWN",payload:null})}),d=()=>{let E=o.runtime;n({type:"SET_ENGINE_STATE",payload:c(E.phase)}),n({type:"SET_DEBUG_ENABLED",payload:E.flags.debug});let w=o.configurationContext.configuration.device?.id??null;n({type:"SET_DEVICE_ID",payload:w}),a(Object.freeze({phase:E.phase,flags:Object.freeze({debug:E.flags.debug})}))};d();let p=e.on("engine:started",()=>{n({type:"SET_ENGINE_STATE",payload:"RUNNING"}),d()}),f=e.on("engine:stopping",()=>{n({type:"SET_ENGINE_STATE",payload:"STOPPING"}),d()}),g=e.on("engine:stopped",()=>{n({type:"SET_ENGINE_STATE",payload:"STOPPED"}),d()}),m=e.on("ws:connecting",()=>{n({type:"SET_CONNECTION_STATUS",payload:"connecting"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),h=e.on("ws:connected",()=>{n({type:"SET_CONNECTION_STATUS",payload:"connected"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),y=e.on("ws:disconnected",()=>{n({type:"SET_CONNECTION_STATUS",payload:"disconnected"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),k=e.on("ws:retrying",E=>{n({type:"SET_CONNECTION_STATUS",payload:"connecting"}),n({type:"SET_CONNECTION_RETRY",payload:E.retryInSec})}),b=e.on("runtime:debug:changed",({enabled:E})=>{n({type:"SET_DEBUG_ENABLED",payload:E});let w=o.runtime;a(Object.freeze({phase:w.phase,flags:Object.freeze({debug:E})}))}),T=e.on("config:loaded",E=>{let w=E.device?.id??null;n({type:"SET_DEVICE_ID",payload:w})}),_=new ne("Welcome to DeviceLink Agent UI",{ts:Date.now(),kind:"status"}),I=new ne('Type "help" for commands. Start bridge with: start or run',{ts:Date.now(),kind:"status"});return n({type:"SET_MESSAGES",payload:[_,I]}),()=>{l.unsubscribe(),p.unsubscribe(),f.unsubscribe(),g.unsubscribe(),m.unsubscribe(),h.unsubscribe(),y.unsubscribe(),k.unsubscribe(),b.unsubscribe(),T.unsubscribe()}},[e,o,n]);let s=Ne(()=>({state:r,dispatch:n,engine:o,bus:e,runtime:i}),[r,o,e,i]);return ei(_n.Provider,{value:s,children:t})}function Te(){let o=Vo(_n);if(!o)throw new Error("useAppContext must be used within AppContextProvider");return o}function wn(o){let{state:e}=Te(),t=c=>!(c.category?.includes("token-refresh")||c.groupKey?.startsWith("auth:refresh")&&c.kind==="info"&&c.message.includes("refresh scheduled in")),r=o?.displayFilter??t,n=Ne(()=>e.messages.filter(r),[e.messages,r]),i=Ne(()=>c=>e.messages.filter(c),[e.messages]),a=Ne(()=>c=>e.messages.filter(l=>l.kind===c),[e.messages]),s=Ne(()=>c=>e.messages.filter(l=>l.scope===c),[e.messages]);return Ne(()=>({rawMessages:e.messages,messagesToDisplay:n,getFilteredMessages:i,getMessagesByKind:a,getMessagesByScope:s}),[e.messages,n,i,a,s])}import{Fragment as Fe,jsx as P,jsxs as W}from"react/jsx-runtime";function ti(o){return o==="RUNNING"?"green":o==="STOPPING"?"yellow":o==="STOPPED"?"red":"gray"}function ri(o){return o==="connected"?"green":o==="connecting"?"yellow":"red"}function ni(o){return o==="connected"?"connected":o==="connecting"?"trying":"disconnected"}function xn(o,e){return o.length<=e?o:o.slice(0,Math.max(0,e-3))+"..."}function oi(o){let{state:e}=Te(),t="DeviceLink Agent",r=e.debugEnabled,n=e.deviceId??"not signed in",i=e.engineState,a=ti(i),s=e.isProcessing,c=e.connectionStatus,l=e.connectionRetryInSec,d=e.refreshCountdownSec,[p,f]=Cn(d),[g,m]=Cn(l);Ct(()=>{f(d)},[d]),Ct(()=>{m(l)},[l]),Ct(()=>{if(d===null||d<=0){f(null);return}f(d);let E=setInterval(()=>{f(w=>w===null||w<=1?null:w-1)},1e3);return()=>clearInterval(E)},[d]),Ct(()=>{if(l===null||l<=0){m(null);return}m(l);let E=setInterval(()=>{m(w=>w===null||w<=1?null:w-1)},1e3);return()=>clearInterval(E)},[l]);let h=ni(c),y=ri(c),k=t.length,b=30,T=o.width-k-2,_=[];if(_.push(P(N,{color:y,children:h},"conn")),g!==null&&g>0&&_.push(W(N,{color:y,children:["retry in ",g,"s"]},"retry")),p!==null&&p>0&&p<=5&&_.push(W(N,{color:"cyan",children:["refresh in ",p,"s"]},"refresh")),T>=b){let E=xn(n,Math.max(5,T-50));return W(Pe,{justifyContent:"space-between",width:o.width,children:[W(Pe,{children:[P(N,{bold:!0,children:t}),r&&W(Fe,{children:[P(N,{children:" "}),P(N,{color:"yellow",bold:!0,children:"[DEBUG]"})]})]}),W(Pe,{children:[s&&P(Fe,{children:P(N,{dimColor:!0,children:"\u23F3 "})}),P(N,{dimColor:!0,children:"device "}),W(N,{children:[E," "]}),P(N,{children:"\xB7 "}),P(N,{color:a,children:i}),_.length>0&&W(Fe,{children:[P(N,{children:" \xB7 "}),_.map((w,x)=>W(Rn.Fragment,{children:[x>0&&P(N,{children:" \xB7 "}),w]},x))]})]})]})}let I=xn(n,o.width-8);return W(Pe,{flexDirection:"column",width:o.width,children:[W(Pe,{children:[P(N,{bold:!0,children:t}),r&&W(Fe,{children:[P(N,{children:" "}),P(N,{color:"yellow",bold:!0,children:"[DEBUG]"})]})]}),W(Pe,{children:[s&&P(Fe,{children:P(N,{dimColor:!0,children:"\u23F3 "})}),P(N,{dimColor:!0,children:"device "}),W(N,{children:[I," "]}),P(N,{children:"\xB7 "}),P(N,{color:a,children:i}),_.length>0&&W(Fe,{children:[P(N,{children:" \xB7 "}),_.map((E,w)=>W(Rn.Fragment,{children:[w>0&&P(N,{children:" \xB7 "}),E]},w))]})]})]})}var An=oi;import On,{useMemo as In}from"react";import{Box as ii,Text as we}from"ink";import{jsx as Re,jsxs as Dn}from"react/jsx-runtime";function si(o){return o==="error"?"red":o==="warning"?"yellow":o==="success"?"green":o==="info"?"cyan":"white"}function ai(o){return o==="error"?"ERROR":o==="warning"?"WARN":o==="success"?"SUCCESS":o==="info"?"INFO":o==="status"?"STATUS":"INFO"}function ci(o){let e=new Date(o),t=String(e.getHours()).padStart(2,"0"),r=String(e.getMinutes()).padStart(2,"0"),n=String(e.getSeconds()).padStart(2,"0");return`${t}:${r}:${n}`}function ui(o,e){if(typeof o!="string"&&(o=String(o??"")),o.length<=e)return[o];let t=[],r="",n=o.split(/(\s+)/);for(let i of n)if((r+i).length<=e)r+=i;else{r&&t.push(r),r="";let a=i;for(;a.length>e;)t.push(a.slice(0,e)),a=a.slice(e);r=a}return r&&t.push(r),t.length>0?t:[o]}var li=On.memo(function(e){let{messagesToDisplay:t}=wn(),r=e.height??14,c=Math.max(20,e.width-9-8-2-2),l=In(()=>t.slice(-r),[t,r]),p=In(()=>l.flatMap(f=>{let g=ci(f.ts),m=ai(f.kind);return ui(f.message,c).map((y,k)=>({msg:f,lineIndex:k,time:k===0?g:"",kind:k===0?m:"",message:y,isContinuation:k>0}))}),[l,c]).slice(-r);return Re(ii,{flexDirection:"column",borderStyle:"round",borderColor:"gray",paddingX:1,height:r+2,width:e.width,children:p.length===0?Re(we,{dimColor:!0,children:"(no messages)"}):p.map(f=>Re(di,{item:f},`${f.msg.id}:${f.lineIndex}`))})},(o,e)=>o.height===e.height&&o.width===e.width),di=On.memo(function({item:e}){return Dn(we,{children:[e.time&&Dn(we,{dimColor:!0,children:[e.time," "]}),e.kind&&Re(we,{color:si(e.msg.kind,e.msg.scope),children:e.kind}),e.kind&&Re(we,{children:" "}),e.isContinuation&&Re(we,{dimColor:!0,children:" "}),Re(we,{dimColor:e.msg.scope==="system",children:e.message})]})}),Nn=li;import pi from"react";import{Box as xt,Text as wr,useFocus as fi}from"ink";import hi from"ink-text-input";import{jsx as Me,jsxs as Pn}from"react/jsx-runtime";var mi=pi.memo(function(e){let{state:t,dispatch:r}=Te(),{isFocused:n}=fi({autoFocus:!0,isActive:!t.isProcessing}),i=e.isPassphraseMode?"passphrase> ":"dlink> ",a=Math.max(10,e.width-i.length-2);return Pn(xt,{flexDirection:"column",width:e.width,children:[Pn(xt,{width:e.width,children:[Me(wr,{color:e.isPassphraseMode?"cyan":"green",children:i}),Me(xt,{width:a,children:t.isProcessing?Me(wr,{dimColor:!0,italic:!0,children:"Processing..."}):Me(hi,{value:t.input,onChange:s=>r({type:"SET_INPUT",payload:s}),onSubmit:e.onSubmit,placeholder:n?void 0:e.isPassphraseMode?"Enter passphrase...":'Type a command or "help"',mask:e.isPassphraseMode?"*":void 0},`input-${t.historyIndex}-${e.isPassphraseMode?"passphrase":"normal"}`)})]}),e.passphraseError&&Me(xt,{marginTop:1,children:Me(wr,{color:"red",children:e.passphraseError})})]})}),Fn=mi;import{Component as gi}from"react";import{Box as Le,Text as At}from"ink";import{Fragment as yi,jsx as de,jsxs as Mn}from"react/jsx-runtime";var He=class extends gi{constructor(e){super(e),this.state={hasError:!1,error:null}}static getDerivedStateFromError(e){return{hasError:!0,error:e}}componentDidCatch(e,t){this.props.onError&&this.props.onError(e,t)}render(){return this.state.hasError&&this.state.error?de(Le,{flexDirection:"column",padding:1,children:de(Le,{borderStyle:"round",borderColor:"red",paddingX:1,children:Mn(Le,{flexDirection:"column",children:[de(At,{color:"red",bold:!0,children:"\u26A0\uFE0F  Application Error"}),de(Le,{height:1}),de(At,{color:"red",children:this.state.error.message}),this.state.error.stack&&Mn(yi,{children:[de(Le,{height:1}),de(At,{dimColor:!0,children:this.state.error.stack})]}),de(Le,{height:1}),de(At,{dimColor:!0,children:"Press Ctrl+C to exit"})]})})}):this.props.children}};import{jsx as ve,jsxs as ki}from"react/jsx-runtime";function Ei(){let{exit:o}=vi(),{state:e,dispatch:t,engine:r,bus:n}=Te(),[i,a]=En(),s=i,c=a,l=Rr(m=>n.emit("console:command",m),[n]),d=Math.max(5,c-5),p=Math.min(d-3,Math.max(5,Math.floor(d*.7)));Si((m,h)=>{if(h.ctrl&&m==="c"){r.requestStop("user exit");return}if(!e.isProcessing&&(h.upArrow||h.downArrow)){if(e.commandHistory.length===0)return;if(h.upArrow){let y=e.historyIndex===-1?e.commandHistory.length-1:Math.max(0,e.historyIndex-1);t({type:"SET_HISTORY_INDEX",payload:y}),t({type:"SET_INPUT",payload:e.commandHistory[y]})}else if(h.downArrow){if(e.historyIndex===-1)return;let y=e.historyIndex+1;y>=e.commandHistory.length?(t({type:"SET_HISTORY_INDEX",payload:-1}),t({type:"SET_INPUT",payload:""})):(t({type:"SET_HISTORY_INDEX",payload:y}),t({type:"SET_INPUT",payload:e.commandHistory[y]}))}}}),bi(()=>{t({type:"RESET_HISTORY_INDEX_IF_TYPING"})},[e.input,t]);let f=Rr(async m=>{let h=m.trim();t({type:"RESET_INPUT"}),t({type:"RESET_HISTORY_INDEX"}),h&&t({type:"ADD_COMMAND_TO_HISTORY",payload:h}),t({type:"SET_IS_PROCESSING",payload:!0});try{await l(h)}catch(y){let k=L(y),b=new ne(`Command failed: ${k}`,{ts:Date.now(),kind:"error"});t({type:"ADD_MESSAGE",payload:b})}finally{t({type:"SET_IS_PROCESSING",payload:!1})}},[t,o,l,r]),g=Rr((m,h)=>{let y=new ne(`UI Error: ${m.message}`,{ts:Date.now(),kind:"error"});t({type:"ADD_MESSAGE",payload:y})},[t]);return ve(He,{onError:g,children:ki(Cr,{flexDirection:"column",padding:1,width:s,children:[ve(An,{width:s-2}),ve(Cr,{height:1}),ve(Nn,{height:p,width:s-2}),ve(Cr,{height:1}),ve(Fn,{width:s-2,onSubmit:f})]})})}function xr({engine:o,bus:e}){return ve(Tn,{engine:o,bus:e,children:ve(Ei,{})})}import Ar from"node:fs";import _i from"node:os";import Ir from"node:tty";function Ti(o){let e=o.setRawMode;return typeof e!="function"||(o.setRawMode=t=>{try{return e.call(o,t)}catch(r){let n=typeof r=="object"&&r!==null&&"code"in r?r.code:void 0;if(n==="EPERM"||n==="EINVAL")return o;throw r}}),o}var Ge;function Dr(){if(Ge!==void 0)return Ge;let o;if(process.stdin.isTTY)o=process.stdin;else try{if(_i.platform()==="win32")try{let e=Ar.openSync("CONIN$","rs");o=new Ir.ReadStream(e)}catch{let e=Ar.openSync("\\\\.\\CONIN$","rs");o=new Ir.ReadStream(e)}else{let e=Ar.openSync("/dev/tty","rs");o=new Ir.ReadStream(e)}}catch{return Ge=null,null}return Ge=Ti(o),Ge}function wi(){return Dr()===null}var Ri=new Set(["1","true","yes","on"]),$n=new Set(["0","false","no","off"]);function Ln(o){let e=o.trim().toLowerCase();if(e!==""){if(Ri.has(e))return!0;if($n.has(e))return!1}}function Ci(o){for(let e of o){let t=e.trim(),r=t.toLowerCase();if(r==="--headless")return"on";if(r.startsWith("--headless=")){let n=t.slice(t.indexOf("=")+1).trim().toLowerCase();return $n.has(n)?"off":"on"}}return"unset"}function jn(o){let e=Ci(o);if(e==="on")return{headless:!0,reason:"CLI: --headless"};if(e==="off")return{headless:!1,reason:"CLI: --headless=false"};let t=process.env.HEADLESS;if(t!==void 0&&t.trim()!==""){let i=Ln(t);if(i!==void 0)return{headless:i,reason:i?"env: HEADLESS":"env: HEADLESS=false"}}let r=process.env.DLINK_HEADLESS;if(r!==void 0&&r.trim()!==""){let i=Ln(r);if(i!==void 0)return{headless:i,reason:i?"env: DLINK_HEADLESS":"env: DLINK_HEADLESS=false"}}return wi()?{headless:!0,reason:"no TTY stdin (Docker/CI/background)"}:{headless:!1,reason:"TTY available (interactive)"}}function Kn(o,e){let t=o.runtime.flags.headless?null:Dr();if(!t){o.runtime.flags.headless?console.log(`[agent] Headless UI (${o.runtime.flags.headlessReason})`):console.warn(`[agent] No TTY stdin; non-interactive boot (${o.runtime.flags.headlessReason})`),e.emit("ui:initialized",Date.now());let n=setInterval(()=>{},6e4);return new Promise(i=>{process.on("SIGTERM",()=>{clearInterval(n),i()}),process.on("SIGINT",()=>{clearInterval(n),i()})})}let{waitUntilExit:r}=Ai(xi.createElement(xr,{engine:o,bus:e}),{stdin:t});return r()}var It=class{handlers=new Map;subcommandHandlers=new Map;command(e,t){if(this.handlers.has(e))throw new Error(`Command '${e}' is already registered`);return this.handlers.set(e,t),this}subcommand(e,t,r){this.subcommandHandlers.has(e)||this.subcommandHandlers.set(e,new Map);let n=this.subcommandHandlers.get(e);if(n.has(t))throw new Error(`Subcommand '${e} ${t}' is already registered`);return n.set(t,r),this}commandStringToArgv(e){let t=[],r="",n=!1,i="";for(let a=0;a<e.length;a++){let s=e[a];s==='"'||s==="'"?n&&s===i?(t.push(r),r="",n=!1,i=""):n?r+=s:(r&&(t.push(r),r=""),n=!0,i=s):s===" "&&!n?r&&(t.push(r),r=""):r+=s}return(n||r)&&t.push(r),["node","script",...t]}parseString(e){let t=this.commandStringToArgv(e);return this.parse(t)}parse(e){let t=e.slice(2);if(t.length===0)return null;let r={command:"",args:[],options:{}},n=0;for(;n<t.length&&t[n]?.startsWith("--");)n++;if(n>=t.length||!t[n])return null;for(r.command=t[n],n++;n<t.length&&t[n]?.startsWith("--");)n++;for(n<t.length&&t[n]&&!t[n].startsWith("--")&&(r.subcommand=t[n],n++);n<t.length;){let i=t[n];if(i.startsWith("--")){let a=i.slice(2);if(a.includes("=")){let[s,c]=a.split("=",2);r.options[s]=c||!0}else{let s=t[n+1];s&&!s.startsWith("--")?(r.options[a]=s,n++):r.options[a]=!0}}else r.args.push(i);n++}return r}async execute(e){let t=this.parse(e);if(!t)return!1;if(t.subcommand){let n=this.subcommandHandlers.get(t.command);if(n){let i=n.get(t.subcommand);if(i)return await i(t),!0}}let r=this.handlers.get(t.command);return r?(await r(t),!0):!1}hasCommand(e,t){return t?this.subcommandHandlers.get(e)?.has(t)??!1:this.handlers.has(e)}getCommands(){return Array.from(this.handlers.keys())}};var Or=class{kind;payloadJson;constructor(e,t){this.kind=e,this.payloadJson=t}},Dt=class{matchers=[];register(e){return this.matchers.push(e),this}build(e){let t=[e.command];e.subcommand&&t.push(e.subcommand);for(let r of this.matchers){let n=r(t,e);if(n.handled){let i;if(n.job)i=n.job;else if(n.kind)i=this.createCommandInput(n.kind,e);else return null;return i}}return null}createCommandInput(e,t){let r={command:t.command,subcommand:t.subcommand,args:t.args,options:t.options};return new Or(e,JSON.stringify(r))}};var Ot=class{name="console-orchestrator";commandParser;commandJobBuilder;constructor(){this.commandParser=new It,this.commandJobBuilder=new Dt,this.setupCommandMappings()}onRegister(e){}async onStart(e){e.notifier.info("Starting console orchestrator (UI)",{scope:"system"}),e.on("console:command",async t=>{try{let r=this.commandParser.parseString(t);if(!r){e.notifier.warn("Invalid command format");return}let n=this.commandJobBuilder.build(r);if(!n){e.notifier.warn(`Unknown command: ${r.command}${r.subcommand?" "+r.subcommand:""}`);return}switch(n.kind){case"signin":e.bus.emit("auth:signin:requested",void 0),e.notifier.info("Sign-in requested");break;case"signout":e.bus.emit("auth:signout:requested",void 0),e.notifier.info("Sign-out requested");break;case"debug-on":e.flags.debug=!0,e.bus.emit("runtime:debug:changed",{enabled:!0}),e.notifier.success("Debug mode enabled");break;case"debug-off":e.flags.debug=!1,e.bus.emit("runtime:debug:changed",{enabled:!1}),e.notifier.success("Debug mode disabled");break;case"replace":e.bus.emit("auth:session_conflict:resolve",{choice:"USE_NEW"});break;default:e.notifier.warn(`Command not implemented: ${n.kind}`);break}}catch(r){let n=L(r);e.notifier.error(`Command failed: ${n}`,{scope:"system"})}})}async onStarted(e){e.notifier.info("Console orchestrator started",{scope:"system"}),Kn(e.engine,e.bus)}async onStop(e){e.notifier.info("UI exited, stopping engine",{scope:"system"}),e.engine&&e.engine.requestStop("UI exited")}async onStopped(e){}setupCommandMappings(){let e=this.commandJobBuilder;e.register(t=>{if(t.length===1){let r=t[0];if(r==="start"||r==="run")return{handled:!0,kind:"start"};if(r==="stop")return{handled:!0,kind:"stop"};if(r==="signin")return{handled:!0,kind:"signin"};if(r==="signout")return{handled:!0,kind:"signout"};if(r==="status")return{handled:!0,kind:"status"};if(r==="doctor")return{handled:!0,kind:"doctor"};if(r==="replace"||r==="yes"||r==="y")return{handled:!0,kind:"replace"}}return{handled:!1}}),e.register(t=>{if(t.length===2){let[r,n]=t;if(r==="roots"){if(n==="add")return{handled:!0,kind:"roots-add"};if(n==="list")return{handled:!0,kind:"roots-list"}}if(r==="debug"){if(n==="on")return{handled:!0,kind:"debug-on"};if(n==="off")return{handled:!0,kind:"debug-off"}}}return{handled:!1}}),e.register((t,r)=>{if(t.length===1&&t[0]==="debug"&&r.args.length>0){let n=r.args[0];if(n==="on")return{handled:!0,kind:"debug-on"};if(n==="off")return{handled:!0,kind:"debug-off"}}return{handled:!1}})}};import Ce from"ws";var Nt=class{ws=null;state={kind:"DISCONNECTED"};stopped=!1;connecting=!1;connId=0;connectionTimeout=null;heartbeatInterval=null;heartbeatTimeout=null;awaitingPong=!1;sendQueue=[];url;abortSignal;connectionTimeoutMs;heartbeatIntervalMs;pongTimeoutMs;maxSendQueueSize;sendQueueItemTtlMs;onStateChangeCallback;onErrorCallback;onConnectedCallback;onDisconnectedCallback;onMessageCallback;constructor(e,t={}){this.url=e,this.abortSignal=t.abortSignal,this.connectionTimeoutMs=t.connectionTimeoutMs??1e4,this.heartbeatIntervalMs=t.heartbeatIntervalMs??2e4,this.pongTimeoutMs=t.pongTimeoutMs??1e4,this.maxSendQueueSize=t.maxSendQueueSize??1e3,this.sendQueueItemTtlMs=t.sendQueueItemTtlMs??6e4,this.abortSignal&&this.abortSignal.addEventListener("abort",()=>{this.stop()},{once:!0})}registerOnStateChangeCallback(e){this.onStateChangeCallback=e}registerOnErrorCallback(e){this.onErrorCallback=e}registerOnConnectedCallback(e){this.onConnectedCallback=e}registerOnDisconnectedCallback(e){this.onDisconnectedCallback=e}registerOnMessageCallback(e){this.onMessageCallback=e}getState(){return this.state}getSocket(){return this.ws}isConnected(){return this.ws?.readyState===Ce.OPEN}async connect(){if(this.stopped)throw new Error("Socket is stopped");if(!(this.connecting||this.isConnected())){this.connecting=!0,this.updateState({kind:"CONNECTING"});try{await this.connectWebSocketOnce()}catch(e){let t=e instanceof Error?e:new Error(String(e));throw this.onErrorCallback?.(t),this.updateState({kind:"DISCONNECTED"}),t}finally{this.connecting=!1}}}stop(){this.stopped=!0,this.disconnect(!0)}reset(){this.stopped=!1}disconnect(e=!1){e&&(this.stopped=!0),this.connectionTimeout&&(clearTimeout(this.connectionTimeout),this.connectionTimeout=null),this.stopHeartbeat();let t=this.ws;this.ws=null,this.connecting=!1,t&&this.closeGracefullyThenTerminate(t,1e3,"client disconnect",2e3),this.updateState({kind:"DISCONNECTED"})}send(e,t){if(this.stopped){t?.(new Error("Socket is stopped"));return}let r=this.ws;if(r&&r.readyState===Ce.OPEN){r.send(e,i=>t?.(i??void 0));return}let n=Date.now();if(this.pruneSendQueue(n),this.sendQueue.length>=this.maxSendQueueSize){t?.(new Error(`Send queue full (max ${this.maxSendQueueSize})`));return}this.sendQueue.push({data:e,cb:t,expiresAt:n+this.sendQueueItemTtlMs})}closeGracefullyThenTerminate(e,t,r,n){try{(e.readyState===Ce.OPEN||e.readyState===Ce.CONNECTING)&&e.close(t,r)}catch{}let i=setTimeout(()=>{try{e.terminate()}catch{}},n);e.once("close",()=>clearTimeout(i))}async connectWebSocketOnce(){let e=++this.connId;return new Promise((t,r)=>{if(this.stopped){r(new Error("Socket is stopped"));return}let n=!1,i=!1,a=()=>{this.connectionTimeout&&(clearTimeout(this.connectionTimeout),this.connectionTimeout=null)},s=()=>{i||(i=!0,a(),t())},c=(d,p)=>{i||(i=!0,a(),p&&this.closeGracefullyThenTerminate(p,1e3,"connect failed",1500),r(d))},l;try{l=new Ce(this.url),this.connectionTimeout=setTimeout(()=>{c(new Error(`Connection timeout: unable to connect to ${this.url} within ${this.connectionTimeoutMs}ms`),l)},this.connectionTimeoutMs),l.on("open",()=>{if(n=!0,e!==this.connId){this.closeGracefullyThenTerminate(l,1e3,"stale connection",500);return}this.ws=l,this.retryResetOnConnect(),this.updateState({kind:"CONNECTED"}),this.onConnectedCallback?.(l),this.startHeartbeat(e),this.flushSendQueue(),s()}),l.on("error",d=>{if(e!==this.connId)return;let p=d instanceof Error?d:new Error(String(d));if(!n&&!i){c(p,l);return}this.onErrorCallback?.(p)}),l.on("close",(d,p)=>{if(e!==this.connId)return;let f=p?.toString?.()||"";if(!n&&!i){this.ws=null,this.stopHeartbeat(),this.updateState({kind:"DISCONNECTED"}),c(new Error(`WebSocket closed before connection established: ${d} ${f}`),l);return}this.ws===l&&(this.ws=null),this.stopHeartbeat(),this.updateState({kind:"DISCONNECTED"}),this.onDisconnectedCallback?.(d,f||`code ${d}`)}),l.on("message",d=>{if(e!==this.connId){this.onErrorCallback?.(new Error("Message ignored - connection ID mismatch"));return}if(this.ws!==l){this.onErrorCallback?.(new Error("Message ignored - socket mismatch"));return}this.onMessageCallback?.(d)}),l.on("pong",()=>{e===this.connId&&(this.awaitingPong=!1,this.heartbeatTimeout&&(clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=null))}),this.abortSignal&&this.abortSignal.addEventListener("abort",()=>{e===this.connId&&(this.closeGracefullyThenTerminate(l,1e3,"aborted",1e3),i||c(new Error("Connection aborted"),l))},{once:!0})}catch(d){let p=d instanceof Error?d:new Error(String(d));r(p)}})}retryResetOnConnect(){}startHeartbeat(e){this.stopHeartbeat(),this.ws&&(this.awaitingPong=!1,this.heartbeatInterval=setInterval(()=>{if(this.stopped||e!==this.connId)return;let r=this.ws;if(!(!r||r.readyState!==Ce.OPEN)){if(this.awaitingPong){this.closeGracefullyThenTerminate(r,4e3,"pong timeout",1e3);return}this.awaitingPong=!0;try{r.ping()}catch{this.closeGracefullyThenTerminate(r,1011,"ping failed",1e3);return}this.heartbeatTimeout&&clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=setTimeout(()=>{if(e!==this.connId)return;let n=this.ws;n&&this.closeGracefullyThenTerminate(n,4e3,"pong timeout",1e3)},this.pongTimeoutMs)}},this.heartbeatIntervalMs))}stopHeartbeat(){this.awaitingPong=!1,this.heartbeatInterval&&(clearInterval(this.heartbeatInterval),this.heartbeatInterval=null),this.heartbeatTimeout&&(clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=null)}flushSendQueue(){let e=this.ws;if(!e||e.readyState!==Ce.OPEN)return;let t=Date.now();this.pruneSendQueue(t);let r=this.sendQueue;this.sendQueue=[];for(let n of r)e.send(n.data,i=>n.cb?.(i??void 0))}pruneSendQueue(e){if(this.sendQueue.length===0)return;let t=[];for(let r of this.sendQueue)r.expiresAt>=e?t.push(r):r.cb?.(new Error("Send dropped: queued item expired"));this.sendQueue=t}updateState(e){this.state=e,this.onStateChangeCallback?.(e)}};var Pt=class{name="websocket-orchestrator";socket=null;stopped=!1;connectLoopInFlight=null;retryAttempt=0;countdownTimer=null;lastUrl=null;async onStart(e){e.notifier.info("WS: orchestrator started",{scope:"system"})}async onStarted(e){let t=e.engine.configurationContext.configuration;await this.isConnectableToBridge(t,e)&&this.ensureStarted(e,"onStarted")}async onStop(e){this.stopped=!0,this.clearCountdown(),this.socket&&(e.notifier.info("WS: stopping socket (onStop)",{scope:"system"}),this.socket.stop(),this.socket=null),e.notifier.info("WS: orchestrator stopped",{scope:"system"})}handlers(){let e=async(t,r)=>{if(this.stopped)return;let n=r.engine.configurationContext.configuration;await this.isConnectableToBridge(n,r)&&this.ensureStarted(r,t)};return{"config:cache:validated":async(t,r)=>e("config:cache:validated",r),"auth:signout:requested":async(t,r)=>{r.notifier.info("WS: sign-out requested -> disconnecting"),this.stopped=!0,this.clearCountdown(),this.socket?.stop(),this.socket=null},"ws:disconnect":async(t,r)=>{r.notifier.info("WS: disconnect requested",{scope:"system"}),this.stopped=!0,this.clearCountdown(),this.socket?.stop(),this.socket=null},"auth:ws:reconnect":async(t,r)=>{r.notifier.info("WS: reconnect requested by auth",{scope:"system"}),this.retryAttempt=0,this.clearCountdown(),this.stopped=!0,this.socket?.stop(),this.connectLoopInFlight&&await this.connectLoopInFlight.catch(()=>{}),this.socket=null,this.stopped=!1,this.ensureStarted(r,"auth:ws:reconnect")},"ws:tx":async(t,r)=>{let n=this.socket?.getSocket();if(!n||n.readyState!==1){r.notifier.info("WS: TX dropped (not connected)",{scope:"system"});return}n.send(t.text)}}}ensureStarted(e,t){if(this.connectLoopInFlight){e.notifier.info(`WS: connect loop already running (reason=${t})`,{scope:"system"});return}let r=this.socket?.getSocket();if(r&&r.readyState<=1){e.notifier.info(`WS: already connected/connecting, skipping (reason=${t})`,{scope:"system"});return}this.connectLoopInFlight=this.startOrJoinConnectLoop(e,t).finally(()=>{this.connectLoopInFlight=null})}async startOrJoinConnectLoop(e,t){this.stopped=!1;let r=e.engine.configurationContext.configuration;if(!await this.isConnectableToBridge(r,e))return;let i=String(r.bridgeWsUrl);if(this.lastUrl=i,e.notifier.info(`WS: ensure connection (reason=${t}) url=${i}`,{scope:"system"}),!this.socket){let a=new Nt(i,{abortSignal:e.signal,connectionTimeoutMs:1e4,heartbeatIntervalMs:2e4,pongTimeoutMs:1e4});this.socket=a,a.registerOnStateChangeCallback(s=>this.handleStateChange(s,e)),a.registerOnErrorCallback(s=>{e.notifier.error(`WS: transport error: ${s.message}`)}),a.registerOnConnectedCallback(s=>{this.socket===a&&(this.retryAttempt=0,this.clearCountdown(),e.notifier.success(e.flags.debug?`WS: connected (${i})`:"WS: connected"),e.bus.emit("ws:connected",{url:i,attempt:0}))}),a.registerOnDisconnectedCallback((s,c)=>{if(this.socket!==a){e.notifier.info(`WS: ignoring stale disconnect (code=${s})`,{scope:"system"});return}if(e.notifier.warn(`WS: disconnected code=${s} reason=${c||"-"}`),e.bus.emit("ws:disconnected",{code:s,reason:c}),this.stopped){e.notifier.info(`WS: stopped flag set, skipping auto-reconnect (code=${s})`,{scope:"system"});return}if(s===4001){e.notifier.info("WS: auth disconnect (4001) -> waiting for auth",{scope:"system"});return}if(s===4011){this.stopped=!0,this.socket?.stop(),this.socket=null;return}this.ensureStarted(e,"socket:disconnected")}),a.registerOnMessageCallback(s=>{if(this.socket!==a)return;let c=typeof s=="string"?s:s.toString("utf8");e.bus.emit("ws:rx",{text:c})})}for(;!this.stopped;)try{let a=this.retryAttempt+1;e.notifier.info(`WS: connecting attempt #${a} to ${i}`,{scope:"system",groupKey:"ws:connecting"}),e.bus.emit("ws:connecting",{url:i,attempt:a}),await this.socket.connect();return}catch(a){if(this.stopped)return;this.retryAttempt+=1;let s=this.computeBackoffMs(this.retryAttempt),c=Math.max(1,Math.ceil(s/1e3)),l=L(a);e.notifier.warn(`WS: connect failed (attempt=${this.retryAttempt}) -> retry in ${c}s (${l})`,{scope:"system",category:["websocket-connect"],groupKey:"ws:connect-retry"});let d={retryInSec:c,attempt:this.retryAttempt};e.bus.emit("ws:retrying",d),this.startCountdown(c,e),await this.interruptibleSleep(s)}}async isConnectableToBridge(e,t){if(!e.device?.id)return t.notifier.error("WS: cannot connect: device.id missing"),!1;if(!e.bridgeWsUrl)return t.notifier.error("WS: cannot connect: bridgeWsUrl missing"),!1;if(!e.device?.keys?.public)return t.notifier.error("WS: cannot connect: device public key missing"),!1;let r=await t.engine.secrets.get("refreshToken");return!!r.ok&&!!r.value?!0:(t.notifier.warn("WS: not connecting (no tokens). Run signin."),!1)}handleStateChange(e,t){e.kind==="CONNECTING"&&t.notifier.info(`WS: state CONNECTING (url=${this.lastUrl})`,{scope:"system"}),e.kind==="CONNECTED"&&t.notifier.info(`WS: state CONNECTED (url=${this.lastUrl})`,{scope:"system"}),e.kind==="DISCONNECTED"&&t.notifier.info(`WS: state DISCONNECTED (url=${this.lastUrl})`,{scope:"system"})}computeBackoffMs(e){let t=Math.min(3e4,1e3*Math.pow(2,Math.min(e-1,5))),r=t*(.2*(Math.random()*2-1));return Math.max(250,Math.floor(t+r))}startCountdown(e,t){this.clearCountdown();let r=e;this.countdownTimer=setInterval(()=>{if(r-=1,r<=0){this.clearCountdown();return}let n={retryInSec:r,attempt:this.retryAttempt};t.bus.emit("ws:retrying",n)},1e3)}clearCountdown(){this.countdownTimer&&(clearInterval(this.countdownTimer),this.countdownTimer=null)}async interruptibleSleep(e){let r=Date.now();for(;Date.now()-r<e;){if(this.stopped)return;await or(100)}}};import Un from"node:fs";import Ii from"node:path";var Ft=class{static save(e){let t=this.getApplicationConfigFolder(),r=Ii.join(t,"config.json"),n=this.stripSecrets(e);return Un.mkdirSync(t,{recursive:!0}),Un.writeFileSync(r,JSON.stringify(n,null,2),"utf8"),r}static stripSecrets(e){let t=e.device?{id:e.device.id,name:e.device.name,tag:e.device.tag,keys:{public:e.device.keys.public}}:void 0,r=e.tokens?{accessTokenExpSec:e.tokens.accessTokenExpSec}:void 0;return{...e,device:t,tokens:r}}static getApplicationConfigFolder(){return me()}};var Mt=class{name="main-orchestrator";bootStarted=!1;saveTimer=null;saveInFlight=null;latestConfigToSave=null;saveDebounceMs=500;async onStop(e){await this.flushSaveOnStop()}handlers(){return{"ui:initialized":async(e,t)=>{this.bootStarted||(this.bootStarted=!0,t.engine.setPhase("booting"),t.notifier.info("Booting..."),t.engine.dispatch(un(new _t)))},"config:save:requested":async(e,t)=>{this.latestConfigToSave=e,this.saveTimer&&clearTimeout(this.saveTimer),this.saveTimer=setTimeout(()=>{this.performSave(t)},this.saveDebounceMs)}}}async performSave(e){this.saveInFlight||(this.saveInFlight=(async()=>{for(;this.latestConfigToSave;){let t=this.latestConfigToSave;this.latestConfigToSave=null;try{let r=Ft.save(t);e.notifier.info(`Config saved to: ${r}`,{scope:"system"}),e.bus.emit("config:saved",void 0)}catch(r){let n=L(r);e.notifier.error(`Failed to save configuration: ${n}`)}}})().finally(()=>{this.saveInFlight=null}),await this.saveInFlight)}async flushSaveOnStop(){this.saveTimer&&(clearTimeout(this.saveTimer),this.saveTimer=null)}};import{decodeJwt as ds}from"jose";import Pr from"node:crypto";import{z as u}from"zod";var Di=u.object({name:u.string().min(1),description:u.string().optional(),inputSchema:u.any().optional(),outputSchema:u.any().optional(),defaults:u.record(u.string(),u.unknown()).optional(),version:u.string().optional(),errorCodes:u.array(u.string()).optional()}),Oi=u.object({id:u.string().min(1),name:u.string().min(1),path:u.string().optional(),path_hint:u.string().optional(),policy:u.any().optional()}),Ni=u.object({type:u.literal("connect"),device_id:u.string().min(1),agent_version:u.string().min(1),protocol_version:u.number().int().min(1).default(2),capabilities:u.array(u.string()).default([]),platform:u.string().optional(),hostname:u.string().optional(),device_tag:u.string().optional(),ts:u.number(),nonce:u.string().min(8),sig:u.string().min(16),access_token:u.string().optional(),refresh_token:u.string().min(20).optional(),public_key_pem:u.string().optional()}).passthrough(),Pi=u.object({type:u.literal("connect_ack"),ok:u.literal(!0),session_id:u.string().min(1),device_id:u.string().min(1),server_time:u.number(),auth:u.object({device_proof:u.literal("ok"),access_token:u.enum(["ok","expired","invalid","missing"])}),next:u.array(u.enum(["refresh_access_token","session_init"])).min(1),workspace_id:u.string().optional()}).strict(),Fi=u.object({type:u.literal("connect_ack"),ok:u.literal(!1),session_id:u.string().optional(),server_time:u.number(),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),Mi=u.union([Pi,Fi]),Li=u.object({type:u.literal("refresh_access_token"),device_id:u.string().min(1),ts:u.number(),nonce:u.string().min(8),refresh_token:u.string().min(20),sig:u.string().min(16),session_id:u.string().min(1).optional()}).strict(),$i=u.object({type:u.literal("refresh_access_token_ack"),ok:u.literal(!0),access_token:u.string().min(1),refresh_token:u.string().min(20),expires_in_sec:u.number().int().positive().optional(),next:u.array(u.literal("session_init")).default(["session_init"])}).strict(),ji=u.object({type:u.literal("refresh_access_token_ack"),ok:u.literal(!1),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),Ki=u.union([$i,ji]),Ui=u.object({type:u.literal("session_init"),device_id:u.string().min(1),session_id:u.string().min(1)}).strict(),Bi=u.object({type:u.literal("session_init_ack"),ok:u.literal(!0),device_id:u.string().min(1),session_id:u.string().min(1),mode:u.enum(["ACTIVE","ACTIVE_RECLAIMED","STANDBY"]),reason:u.string().optional(),server_time:u.number(),next:u.array(u.enum(["tools_publish","directories_publish"])).optional(),server_protocol_version:u.number().default(2),min_agent_version:u.string().optional(),upgrade_message:u.string().optional(),upgrade_url:u.string().optional()}).passthrough(),qi=u.object({type:u.literal("session_init_ack"),ok:u.literal(!1),device_id:u.string().min(1),server_time:u.number(),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).passthrough(),Wi=u.union([Bi,qi]),Ji=u.object({type:u.literal("session_conflict"),device_id:u.string().min(1),new_session_id:u.string().min(1),max_sessions:u.number().int().positive(),active_count:u.number().int().nonnegative(),deadline_ms:u.number().int().positive(),message:u.string().min(1),choices:u.array(u.object({id:u.enum(["USE_NEW","KEEP_OLD"]),default:u.boolean().optional(),prompt:u.string().optional()})).min(1)}).strict(),Hi=u.object({type:u.literal("session_conflict_resolve"),device_id:u.string().min(1),new_session_id:u.string().min(1),choice:u.enum(["USE_NEW","KEEP_OLD"])}).strict(),Gi=u.object({type:u.literal("session_conflict_resolve_ack"),ok:u.literal(!0),device_id:u.string().min(1),choice:u.enum(["USE_NEW","KEEP_OLD"]),next:u.array(u.enum(["session_init"])).optional()}).strict(),Vi=u.object({type:u.literal("session_conflict_resolve_ack"),ok:u.literal(!1),device_id:u.string().min(1),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),zi=u.union([Gi,Vi]),Yi=u.object({type:u.literal("quiesce"),session_id:u.string().min(1),reason:u.enum(["SESSION_REPLACED"]),deadline_ms:u.number().int().positive()}).strict(),Qi=u.object({type:u.literal("quiesce_ack"),session_id:u.string().min(1),status:u.enum(["IDLE","BUSY"])}).strict(),Xi=u.object({type:u.literal("tools_publish"),device_id:u.string().min(1),workspace_id:u.string().optional(),tools:u.array(Di).default([]),tools_version:u.string().optional()}).strict(),Zi=u.object({type:u.literal("tools_publish_ack"),ok:u.boolean(),device_id:u.string().min(1),tools_version:u.string().optional(),error:u.object({code:u.string().min(1),message:u.string().min(1)}).optional()}).strict(),es=u.object({type:u.literal("directories_publish"),device_id:u.string().min(1),workspace_id:u.string().optional(),directories:u.array(Oi).default([])}).strict(),ts=u.object({type:u.literal("directories_publish_ack"),ok:u.boolean(),device_id:u.string().min(1),error:u.object({code:u.string().min(1),message:u.string().min(1)}).optional()}).strict(),rs=u.object({blocked_extensions:u.array(u.string()).default([]),allowed_extensions:u.array(u.string()).default([]),blocked_patterns:u.array(u.string()).default([]),max_file_size_bytes:u.number().default(10485760)}).passthrough(),ns=u.object({workspace_id:u.string(),organization_id:u.string(),workspace_name:u.string().optional(),user_id:u.string(),user_email:u.string().optional(),connector:u.string().optional(),connector_policies:u.object({max_response_chars:u.number(),timeout_ms:u.number()}).passthrough().optional(),file_policies:rs.optional()}).passthrough(),Bn=u.object({type:u.literal("tool_call"),job_id:u.string().min(1),device_id:u.string().min(1).optional(),workspace_id:u.string().optional(),tool:u.string().min(1),args:u.record(u.string(),u.unknown()).default({}),context:ns.optional()}).passthrough(),os=u.object({type:u.enum(["error","warning","info"]),description:u.string().min(1)}),Lt=u.object({type:u.literal("tool_result"),job_id:u.string().min(1),tool:u.string().min(1),ok:u.boolean(),result:u.unknown().optional(),error:u.unknown().optional(),messages:u.array(os).optional(),timing:u.object({execution_ms:u.number(),execution_sec:u.number()}).optional()}).strict().superRefine((o,e)=>{o.ok&&o.result===void 0&&e.addIssue({code:u.ZodIssueCode.custom,message:"tool_result ok=true should include result",path:["result"]}),!o.ok&&o.error===void 0&&e.addIssue({code:u.ZodIssueCode.custom,message:"tool_result ok=false should include error",path:["error"]})}),qn=u.object({type:u.literal("disconnect_notice"),code:u.number().int(),reason:u.string(),at:u.number()}).strict(),Wn=u.object({type:u.literal("promoted_active"),workspaceId:u.string().min(1)}).strict(),Jn=u.object({type:u.literal("demoted_standby"),workspaceId:u.string().min(1)}).strict(),Xl=u.union([Ni,Li,Ui,Hi,Xi,es,Bn,Lt,Qi,qn,Wn,Jn]),$t=u.union([Mi,Ki,Wi,Ji,zi,Zi,ts,Bn,Yi,qn,Wn,Jn]);import{z as v}from"zod";var is=v.object({device_id:v.string().optional(),device_name:v.string().optional(),platform:v.string().optional(),public_key_pem:v.string().min(1)}),td=v.object({device_code:v.string(),user_code:v.string(),verification_uri:v.string(),verification_uri_complete:v.string(),expires_in:v.number(),interval:v.number(),challenge_id:v.string(),challenge:v.string()}),rd=is.extend({enrollment_jws:v.string().min(1)}),nd=v.union([v.object({status:v.literal("pending"),needs_proof:v.boolean()}),v.object({status:v.literal("approved"),needs_proof:v.boolean()}),v.object({error:v.literal("access_denied")}),v.object({error:v.literal("expired_token")})]),od=v.object({device_code:v.string(),challenge_id:v.string(),challenge:v.string(),signature_b64:v.string()}),id=v.object({ok:v.literal(!0)}),sd=v.object({device_code:v.string()}),ad=v.object({access_token:v.string(),refresh_token:v.string(),token_type:v.literal("Bearer"),expires_in:v.number(),device_id:v.string()}),cd=v.object({device_id:v.string().min(1),refresh_token:v.string().min(1),ts:v.number().int(),nonce:v.string().min(8),sig:v.string().min(16)}),ss=v.object({ok:v.literal(!0),access_token:v.string().min(10),refresh_token:v.string().min(10),expires_in_sec:v.number().int().positive(),device_id:v.string().min(1)}),as=v.object({ok:v.literal(!1),error:v.object({code:v.string(),message:v.string()})}),ud=v.union([ss,as]);function Hn(o){return{ok:!0,data:o}}function xe(o){return{ok:!1,error:o}}var Gn={invalid_enrollment_token:"Enrollment key is invalid or could not be verified (wrong controller URL, bad signature, or server signing keys do not match the key issuer).",invalid_enrollment_scope:"Enrollment key does not match this device account or organization membership.",enrollment_jwt_expired:"This enrollment key file has expired (JWT). Issue a new key under Organization \u2192 Devices and update ENROLMENT_KEY / your .devicelink file.",enrollment_ticket_invalid:"Enrollment key could not be accepted (already used, expired, or out of sync). Issue a new key under Organization \u2192 Devices.",enrollment_ticket_already_used:"This enrollment key was already used (single-use). Issue a new key under Organization \u2192 Devices.",enrollment_ticket_expired:"This enrollment key has expired. Issue a new key under Organization \u2192 Devices.",server_misconfigured:"Server cannot verify enrollment keys (OAuth keys missing on controller).",enrollment_start_failed:"Device enrollment failed. See controller logs."};function cs(o){if(typeof o!="object"||o===null)return;let e=o;if(e.body&&typeof e.body=="object"&&e.body!==null&&"error"in e.body){let t=e.body.error;if(typeof t=="string")return t}if(o instanceof Error){let t=o.message.match(/"error"\s*:\s*"([^"]+)"/);if(t?.[1])return t[1]}}function Vn(o){let e=cs(o);return e&&Gn[e]?Gn[e]:e?`Enrollment failed (${e}). ${L(o)}`:L(o)}var Ve=class{timeout=null;interval=null;totalSec=0;remainingSec=0;stepSec=1;task=null;stepCb=null;setStep(e){return this.stepSec=Math.max(1,e),this}schedule(e,t){return this.task=e,this.totalSec=t,this.remainingSec=t,this}onStep(e){return this.stepCb=e,this}start(){return this.clear(),this.remainingSec<=0?(this.runTask(),this):(this.stepCb?.(this.stepSec,this.remainingSec),this.interval=setInterval(()=>{this.remainingSec-=this.stepSec,this.remainingSec<=0?this.runTask():this.stepCb?.(this.stepSec,this.remainingSec)},this.stepSec*1e3),this)}stop(){return this.clear(),this}restart(){return this.remainingSec=this.totalSec,this.start()}runTask(){if(this.clear(),this.task)try{this.task()}catch(e){throw new Error(`Scheduler task failed: ${e}`)}}clear(){this.timeout&&(clearTimeout(this.timeout),this.timeout=null),this.interval&&(clearInterval(this.interval),this.interval=null)}};import{access as zn,readFile as us}from"node:fs/promises";import{constants as Yn}from"node:fs";function ls(o){return(o.trim().split(".")[0]??"").startsWith("eyJ")}function Nr(){let o=process.env.ENROLMENT_KEY?.trim()??process.env.DLINK_ENROLMENT_KEY?.trim();return o?ls(o)?{kind:"inline",jws:o}:{kind:"path",path:o}:{kind:"none"}}function Xn(o){let e=o?.trim();if(e)return`file:${e}`;let t=Nr();return t.kind==="none"?"none":t.kind==="inline"?"ENROLMENT_KEY(inline JWS)":`file:${t.path}`}async function Qn(o){try{let t=(await us(o,"utf8")).trim();return t?{ok:!0,jws:t}:{ok:!1,error:"empty_file"}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function Zn(o){let e=o?.trim();if(e)try{return await zn(e,Yn.R_OK),!0}catch{return!1}let t=Nr();if(t.kind==="inline")return t.jws.trim().length>0;if(t.kind==="path")try{return await zn(t.path,Yn.R_OK),!0}catch{return!1}return!1}async function eo(o){let e=o?.trim();if(e)return Qn(e);let t=Nr();if(t.kind==="none")return{ok:!1,error:"not_configured"};if(t.kind==="inline"){let r=t.jws.trim();return r?{ok:!0,jws:r}:{ok:!1,error:"empty_file"}}return Qn(t.path)}var jt=class{name="auth-orchestrator";phase="IDLE";connectionId=null;sessionId=null;accessToken;rejectedByConflict=!1;refreshGroupKey="auth:refresh";refreshCycle=0;refreshScheduler=null;refreshRetryScheduler=null;lastRefreshPlan;refreshInFlight;conflictTimer=null;pendingConflictRequest=null;signinStarted=!1;async onStart(e){e.notifier.info("Auth orchestrator started",{scope:"system"})}async onStop(e){this.clearTimers(),this.resetConnectionState(),e.notifier.info("Auth orchestrator stopped",{scope:"system"})}handlers(){return{"config:loaded":this.onEventConfigLoaded.bind(this),"config:cache:validated":this.onEventConfigCacheValidated.bind(this),"auth:signin:requested":this.onEventAuthSigninRequested.bind(this),"auth:signin:completed":async(e,t)=>{t.notifier.info("Auth: signin completed; requesting ws reconnect",{scope:"system"}),this.rejectedByConflict=!1,this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.ensureAccessExpPersisted(t,"signin"),await this.ensureRefreshScheduling(t,"signin"),t.bus.emit("auth:ws:reconnect",void 0)},"auth:signout:requested":async(e,t)=>{t.notifier.info("Signing out\u2026"),this.clearTimers(),this.accessToken=void 0;try{await t.engine.secrets.delete("refreshToken")}catch{}let n={...t.engine.configurationContext.configuration,tokens:void 0};t.engine.applyConfiguration(n),t.bus.emit("config:save:requested",n),this.resetConnectionState(),t.engine.setPhase("idle"),t.bus.emit("auth:tokens:updated",{accessToken:"",refreshToken:"",expSec:void 0}),t.bus.emit("ws:disconnect",{reason:"signout"}),t.notifier.success("Signed out successfully")},"auth:session_conflict:resolve":async(e,t)=>{this.sendSessionConflictResolve(t,e.choice)},"ws:connected":async(e,t)=>{this.resetConnectionState();let r=await t.engine.secrets.get("refreshToken"),n=!!r.ok&&!!r.value,i=!!this.accessToken;if(t.notifier.info(`Auth: ws connected; tokens access=${i} refresh=${n}`,{scope:"system"}),!i&&!n){t.notifier.warn("Auth: no tokens; run signin");return}await this.sendConnect(t)},"ws:rx":async(e,t)=>{this.onInbound(e.text,t)},"ws:disconnected":async(e,t)=>{if(t.notifier.warn(`Auth: ws disconnected code=${e.code} reason=${e.reason??"-"}`,{scope:"system"}),this.resetConnectionState(),e.code===4011){t.notifier.warn('Connection rejected - another device is active on this workspace. Run "signin" to try again.'),this.rejectedByConflict=!0,t.bus.emit("ws:disconnect",{reason:"REPLACEMENT_REJECTED"});return}if(e.code===4001){let r=await t.engine.secrets.get("refreshToken");if(!r.ok||!r.value){t.notifier.warn("Auth: token invalid and no refresh; please sign in"),await this.teardownTokens(t,"AUTH_REQUIRED");return}await this.requestRefresh(t,{force:!0,reason:"ws_4001"})&&t.bus.emit("auth:ws:reconnect",void 0)}}}}async onEventConfigLoaded(e,t){if(t.notifier.info("Initializing with cached configuration",{scope:"system"}),!e.device?.id){t.notifier.error("Device ID is not available");return}if(!e.device.keys?.public){t.notifier.error("Device public key is not available");return}t.bus.emit("config:cache:validated",void 0)}async onEventConfigCacheValidated(e,t){this.ensureAccessExpPersisted(t,"boot"),await this.ensureRefreshScheduling(t,"boot");let r=await t.engine.secrets.get("refreshToken"),n=!!r.ok&&!!r.value,i=!!this.accessToken,a=this.isAccessLikelyUsable(t);if(t.notifier.info(`Auth: cache validated; access=${i} refresh=${n} accessOk=${a}`,{scope:"system"}),!i&&!n){if(t.headless&&await Zn(t.engine.argv.enrollmentFile)){t.notifier.info("Headless: enrollment certificate present; starting device authorization (approve the pending request under Organization \u2192 Devices).",{scope:"system"}),t.bus.emit("auth:signin:requested",void 0);return}t.notifier.warn("Auth: not signed in; run signin");return}}isAccessLikelyUsable(e){let t=this.accessToken;if(!t)return!1;let n=e.engine.configurationContext.configuration?.tokens?.accessTokenExpSec??this.tryDecodeExp(t);if(!n)return!0;let i=Math.floor(Date.now()/1e3);return n>i}async waitForApproval(e,t,r){let n=Date.now()+t.expires_in*1e3;r.notifier.info("Waiting for approval... (streaming)",{scope:"system"});try{return await e.deviceAuthStream({deviceCode:t.device_code,timeoutMs:Math.max(1e3,n-Date.now()),signal:r.signal})}catch(i){let a=i instanceof Error?i.message:String(i);return r.notifier.error(`Failed to wait for approval: ${a}`),null}}async onEventAuthSigninRequested(e,t){if(this.signinStarted){t.notifier.warn("Sign-in already in progress",{scope:"system"});return}this.signinStarted=!0;try{let r=t.engine.configurationContext.configuration;if(!r.controlBaseUrl){t.notifier.error("Control base URL is not set");return}if(!r.device?.id){t.notifier.error("Device ID is not available");return}if(!r.device.keys?.public){t.notifier.error("Device public key is not available");return}let n=await t.engine.secrets.get("devicePrivateKey");if(!n.ok||!n.value){t.notifier.error("Device private key is not available (secret storage)");return}let i=n.value,a=r.device.name,s=process.platform,c=r.device.keys.public,l=tr(c),d=new Oe(r,t.notifier);t.notifier.info("Starting device authentication...");let p=await eo(t.engine.argv.enrollmentFile),f;if(p.ok){t.notifier.info(t.engine.argv.enrollmentFile?"Using enrollment key from --enrollment-file":"Using ENROLMENT_KEY / DLINK_ENROLMENT_KEY from environment",{scope:"system"});try{f=await d.deviceEnrollmentStart({device_id:r.device.id,device_name:a,platform:s,public_key_pem:c,enrollment_jws:p.jws})}catch(b){t.notifier.error(Vn(b),{scope:"system"});return}t.notifier.info("Approve this device in the dashboard: Organization \u2192 Devices (pending), or use the verification link below.",{scope:"system"})}else{if(p.error!=="not_configured"){t.notifier.error(p.error==="empty_file"?"Enrollment key is empty":`Could not load enrollment key: ${p.error}`);return}f=await d.deviceAuthStart({device_id:r.device.id,device_name:a,platform:s,public_key_pem:c})}t.notifier.info("DeviceLink sign-in"),t.notifier.info(`User code: ${f.user_code}`),t.notifier.info(`Device fingerprint: ${l}`),t.notifier.info(`Verification URL: ${f.verification_uri_complete}`);let g=await this.waitForApproval(d,f,t);if(!g)return;if("error"in g){if(g.error==="access_denied"){t.notifier.error("Sign-in denied in browser.");return}if(g.error==="expired_token"){t.notifier.error("Sign-in expired. Run `signin` again.");return}t.notifier.error(`Unexpected error: ${g.error}`);return}if(g.status!=="approved"){t.notifier.error(`Unexpected status: ${g.status}`);return}if(g.needs_proof){t.notifier.info("Sending proof-of-possession signature...",{scope:"system"});let b=Pr.createPrivateKey(i),T=Buffer.from(f.challenge,"base64url"),I=Pr.sign(null,T,b).toString("base64");await d.deviceAuthProve({device_code:f.device_code,challenge_id:f.challenge_id,challenge:f.challenge,signature_b64:I}),t.notifier.info("Proof-of-possession verified",{scope:"system"})}t.notifier.info("Fetching tokens...",{scope:"system"});let m=await d.deviceAuthToken({device_code:f.device_code}),h="tag";await t.engine.secrets.set("refreshToken",m.refresh_token),this.accessToken=m.access_token;let y=this.tryDecodeExp(m.access_token),k={...r,controlBaseUrl:r.controlBaseUrl,device:{...r.device,id:m.device_id,name:a,tag:h,keys:{public:c}},tokens:{...r.tokens??{},accessTokenExpSec:y??void 0}};t.engine.applyConfiguration(k),t.bus.emit("config:save:requested",k),t.bus.emit("auth:signin:completed",void 0),t.notifier.success("Signed in successfully \u2705")}catch(r){let n=ke(r);if(n&&["ECONNREFUSED","ENOTFOUND","ETIMEDOUT"].includes(n)){t.notifier.error(`Network error: ${L(r)}`);return}t.notifier.error(`Sign-in failed: ${L(r)}`)}finally{this.signinStarted=!1}}async sendConnect(e){let t=e.engine.configurationContext.configuration,r=t.device,n=await e.engine.secrets.get("devicePrivateKey");if(!r?.id||!n.ok||!n.value){e.notifier.warn("Cannot connect: device not configured");return}let i=n.value,a=await e.engine.secrets.get("refreshToken"),s=a.ok?a.value:void 0,c=Date.now(),l=Pr.randomBytes(16).toString("base64url"),d=rr({deviceId:r.id,ts:c,nonce:l,privateKeyPem:i}),p={type:"connect",device_id:r.id,agent_version:String(t.version??"1"),protocol_version:2,capabilities:["file_policies","context_v2"],ts:c,nonce:l,sig:d,platform:process.platform,hostname:r.name,device_tag:r.tag,access_token:this.accessToken,refresh_token:s,public_key_pem:r.keys.public};this.phase="CONNECT_SENT",e.notifier.info("Auth: sending connect",{scope:"system"}),this.send(e,p)}async sendSessionInit(e,t){let n=e.engine.configurationContext.configuration.device;if(!n?.id||!this.sessionId){e.notifier.error("Cannot send session_init: device ID or session ID not available");return}let i={type:"session_init",device_id:n.id,session_id:this.sessionId};this.phase="WAIT_SESSION_INIT_ACK",e.notifier.info("Auth: sending session_init",{scope:"system"}),this.send(e,i)}onInbound(e,t){let r;try{r=JSON.parse(e)}catch{t.notifier.error("Unexpected message format");return}let n=$t.safeParse(r);if(!n.success){let a=n.error.message;t.notifier.error(`Unexpected message format: ${a}`);return}let i=n.data;switch(i.type){case"connect_ack":t.bus.emit("auth:connect_ack",i),this.onConnectAck(t,i);return;case"session_init_ack":t.bus.emit("auth:session_init_ack",i),this.onSessionInitAck(t,i);return;case"disconnect_notice":this.onDisconnectNotice(t,i);return;case"session_conflict":t.bus.emit("auth:session_conflict",i),this.handleSessionConflict(t,i);return;case"quiesce":this.handleQuiesce(t,i);return;default:return}}async handleSessionConflict(e,t){this.conflictTimer&&(clearTimeout(this.conflictTimer),this.conflictTimer=null),this.pendingConflictRequest=t,e.notifier.warn(`Another device is already connected to this workspace. Type "replace" to disconnect it, or this connection will be rejected in ${Math.round(t.deadline_ms/1e3)}s.`);let r=Math.min(t.deadline_ms,15e3);this.conflictTimer=setTimeout(()=>{this.conflictTimer=null,this.pendingConflictRequest?.new_session_id===t.new_session_id&&(e.notifier.info("No response - keeping existing device connected."),this.sendSessionConflictResolve(e,"KEEP_OLD"))},r)}async handleQuiesce(e,t){if(e.notifier.warn("This device is being replaced by another connection. Finishing in-flight operations..."),e.engine.hasRunningJobs?.()??!1){let i=Math.min(t.deadline_ms-2e3,12e3),a=Date.now();for(;Date.now()-a<i&&(e.engine.hasRunningJobs?.()??!1);)await new Promise(s=>setTimeout(s,500))}let n=e.engine.hasRunningJobs?.()??!1?"BUSY":"IDLE";this.send(e,{type:"quiesce_ack",session_id:t.session_id,status:n}),e.notifier.info("Device replaced by new connection. Disconnecting.")}sendSessionConflictResolve(e,t){let r=this.pendingConflictRequest;r&&(this.conflictTimer&&(clearTimeout(this.conflictTimer),this.conflictTimer=null),this.pendingConflictRequest=null,this.send(e,{type:"session_conflict_resolve",device_id:r.device_id,new_session_id:r.new_session_id,choice:t}))}async onConnectAck(e,t){if(!t.ok){e.notifier.error(`Connect rejected: ${t.error.code} ${t.error.message}`),this.phase="IDLE";return}this.sessionId=t.session_id;let r=t.auth.access_token;if(e.notifier.info(`Auth: connect_ack ok auth.access=${r} next=[${t.next.join(",")}]`,{scope:"system"}),t.next.includes("refresh_access_token")){let n=await e.engine.secrets.get("refreshToken");if(!n.ok||!n.value){e.notifier.warn("Auth: server requested refresh but no refresh token; please sign in"),await this.teardownTokens(e,"NO_REFRESH_TOKEN");return}await this.requestRefresh(e,{force:!0,reason:"connect_ack_next"})?e.bus.emit("auth:ws:reconnect",void 0):e.notifier.warn("Auth: refresh failed; please sign in");return}if(t.next.includes("session_init")){await this.sendSessionInit(e,t);return}if(r==="invalid"||r==="missing"){e.notifier.warn("Auth: access token invalid; please sign in again"),await this.teardownTokens(e,"INVALID_ACCESS");return}e.notifier.warn("Auth: connect_ack had no next; staying idle",{scope:"system"})}onSessionInitAck(e,t){if(!t.ok){e.notifier.error(`Session init failed: ${t.error.code} ${t.error.message}`),this.phase="IDLE";return}this.sessionId=t.session_id,this.phase="READY",e.notifier.success(`Session ready (${t.mode})`),this.ensureRefreshScheduling(e,"manual"),t.next&&(t.next.includes("tools_publish")&&e.bus.emit("meta:data:requested:tools",void 0),t.next.includes("directories_publish")&&e.bus.emit("meta:data:requested:directories",void 0))}onDisconnectNotice(e,t){e.notifier.warn(`Server disconnect_notice: ${t.reason} (code=${t.code})`)}async requestRefresh(e,t){return this.refreshInFlight?this.refreshInFlight:(this.refreshInFlight=(async()=>{try{return await this.withTimeout(this.dispatchRefreshJob(e,t),6e4,"Refresh operation")}catch(r){throw r instanceof Error&&r.message.includes("timed out")&&e.notifier.error(`Auth: refresh timed out: ${r.message}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"}),r}finally{this.refreshInFlight=void 0}})(),this.refreshInFlight)}async withTimeout(e,t,r){return Promise.race([e,new Promise((n,i)=>{setTimeout(()=>{i(new Error(`${r} timed out after ${t}ms`))},t)})])}async dispatchRefreshJob(e,t){let r=await e.engine.secrets.get("refreshToken");if(!r.ok||!r.value)return!1;if(!t.force){let s=await this.shouldRefreshNow(e);if(!s.ok)return e.notifier.info(`Auth: skip refresh (${s.reason})`,{scope:"system",category:["token-refresh"]}),!1}e.notifier.info(`Auth: dispatch refresh job (${t.reason})`,{scope:"system",category:["token-refresh"]});let n=vn(new Tt(t.reason)),i=await e.engine.dispatch(n);if(e.notifier.info(`Auth: refresh job dispatch completed (status=${i.status})`,{scope:"system",category:["token-refresh"]}),i.status!=="success"){let s=i.error?.message??"Unknown error";e.notifier.error(`Auth: refresh job failed: ${s}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"});let c=i.output;return c?.errorCode&&_r.includes(c.errorCode)?(await this.teardownTokens(e,c.errorCode),!1):(this.scheduleRefreshRetry(e,t.reason,c?.retryAfterSec),!1)}let a=i.output;if(!a.ok||!a.accessToken){let s=a.error??"Unknown refresh failure";return e.notifier.error(`Auth: refresh failed: ${s}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"}),a.errorCode&&_r.includes(a.errorCode)?(await this.teardownTokens(e,a.errorCode),!1):(this.scheduleRefreshRetry(e,t.reason,a.retryAfterSec),!1)}return this.accessToken=a.accessToken,this.persistTokens(e,a.accessToken,a.expiresInSec),await this.ensureRefreshScheduling(e,"manual"),e.bus.emit("auth:tokens:updated",{accessToken:a.accessToken,refreshToken:a.refreshToken??"",expSec:e.engine.configurationContext.configuration.tokens?.accessTokenExpSec}),!0}scheduleRefreshRetry(e,t,r){this.refreshRetryScheduler&&this.refreshRetryScheduler.stop();let n=this.computeRefreshRetryMs(e,t,r),i=Math.max(1,Math.ceil(n/1e3));this.refreshRetryScheduler=new Ve().schedule(()=>{this.requestRefresh(e,{force:!0,reason:"retry"}).then(a=>{a&&e.bus.emit("auth:ws:reconnect",void 0)})},i).start()}computeRefreshRetryMs(e,t,r){let n=e.engine.configurationContext.loader,i=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_AFTER_MIN_SEC",{defaultValue:1}),a=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_AFTER_MAX_SEC",{defaultValue:300}),s=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_BASE_SEC",{defaultValue:2}),c=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_JITTER_SEC",{defaultValue:1}),l=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_MAX_SEC",{defaultValue:30});if(typeof r=="number"&&Number.isFinite(r)&&r>=0){let g=Math.min(a*1e3,Math.max(i*1e3,r*1e3)),m=Math.max(1,Math.ceil(g/1e3));return e.notifier.warn(`Auth: refresh retry scheduled in ${m}s (honoring Retry-After, ${t})`,{scope:"system",category:["token-refresh"],groupKey:"auth:refresh-retry"}),g}let p=Math.min(l*1e3,s*1e3+Math.floor(Math.random()*(c+1))*1e3),f=Math.max(1,Math.ceil(p/1e3));return e.notifier.warn(`Auth: refresh retry scheduled in ${f}s (${t})`,{scope:"system",category:["token-refresh"],groupKey:"auth:refresh-retry"}),p}async ensureRefreshScheduling(e,t){let r=await e.engine.secrets.get("refreshToken");!r.ok||!r.value||(this.accessToken&&!e.engine.configurationContext.configuration.tokens?.accessTokenExpSec&&this.ensureAccessExpPersisted(e,t),this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.scheduleSilentRefresh(e,t))}async scheduleSilentRefresh(e,t){let r=await e.engine.secrets.get("refreshToken");if(!r.ok||!r.value)return;this.refreshScheduler&&this.refreshScheduler.stop();let n=e.engine.configurationContext.loader,i=n.getConfigValue("DL_ACCESS_REFRESH_MIN_DELAY_SEC",{defaultValue:2}),a=e.engine.configurationContext.configuration,s=this.accessToken,c=a.tokens?.accessTokenExpSec??(s?this.tryDecodeExp(s):null),l=c??null,d=this.getRefreshGroupKey(e);if(this.lastRefreshPlan&&this.lastRefreshPlan.exp===l&&this.lastRefreshPlan.groupKey===d)return;this.lastRefreshPlan={exp:l,groupKey:d};let p=b=>{let T=new Ve().schedule(()=>{this.requestRefresh(e,{force:b.force,reason:"timer"}).then(_=>{_&&e.notifier.success("Auth: refresh completed",{scope:"system",groupKey:d,category:["token-refresh"]})})},b.delaySec);b.log&&(T=T.onStep((_,I)=>b.log(I))),this.refreshScheduler=T.start()};if(!c){e.headless||e.notifier.info(`Auth: no exp; scheduling refresh in ${i}s [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]}),p({delaySec:i,force:!0});return}let f=Math.floor(Date.now()/1e3),g=n.getConfigValue("DL_ACCESS_REFRESH_MARGIN_SEC",{defaultValue:5}),m=n.getConfigValue("DL_ACCESS_REFRESH_JITTER_SEC",{defaultValue:2}),h=m>0?Math.floor(Math.random()*(m+1)):0,y=c-g-h,k=Math.max(i,y-f);e.headless||e.notifier.info(`Auth: refresh scheduled in ${k}s (exp=${c} now=${f} margin=${g} jitter=${h}) [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]}),p({delaySec:k,force:!1,log:b=>{e.headless||e.notifier.info(`Auth: refresh scheduled in ${b}s (exp=${c} now=${f} margin=${g} jitter=${h}) [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]})}})}getRefreshGroupKey(e){return this.refreshCycle++,`${this.refreshGroupKey}:${this.refreshCycle}`}async shouldRefreshNow(e){let t=await e.engine.secrets.get("refreshToken");if(!t.ok||!t.value)return{ok:!1,reason:"no_refresh_token"};let r=e.engine.configurationContext.configuration,n=this.accessToken,i=r.tokens?.accessTokenExpSec??(n?this.tryDecodeExp(n):null);if(!i)return{ok:!0,reason:"no_exp_assume_refresh"};let a=Math.floor(Date.now()/1e3),c=e.engine.configurationContext.loader.getConfigValue("DL_ACCESS_REFRESH_MARGIN_SEC",{defaultValue:300}),l=i-a;return l<=c?{ok:!0,reason:`within_margin remaining=${l}s margin=${c}s`}:{ok:!1,reason:`too_early remaining=${l}s margin=${c}s`}}ensureAccessExpPersisted(e,t){let r=e.engine.configurationContext.configuration,n=this.accessToken,i=r.tokens?.accessTokenExpSec;if(!n||typeof i=="number"&&Number.isFinite(i))return;let a=this.tryDecodeExp(n);if(!a)return;let s={...r,tokens:{...r.tokens??{},accessTokenExpSec:a}};e.engine.applyConfiguration(s),e.bus.emit("config:save:requested",s),e.notifier.info(`Auth: derived accessTokenExpSec=${a} (${t})`,{scope:"system"})}persistTokens(e,t,r){let n=e.engine.configurationContext.configuration,i=this.tryDecodeExp(t),a=typeof r=="number"&&Number.isFinite(r)?Math.floor(Date.now()/1e3)+r:void 0,s={...n,tokens:{...n.tokens??{},accessTokenExpSec:i??a}};e.engine.applyConfiguration(s),e.bus.emit("config:save:requested",s),e.notifier.info(`Auth: tokens updated exp=${s.tokens?.accessTokenExpSec??"-"}`,{scope:"system"})}async teardownTokens(e,t){this.accessToken=void 0;let n={...e.engine.configurationContext.configuration,tokens:void 0};e.engine.applyConfiguration(n),e.bus.emit("config:save:requested",n),this.clearTimers(),this.resetConnectionState(),e.bus.emit("auth:signout:requested",void 0),e.notifier.warn(`Auth: signed out (${t}). Please run signin.`)}tryDecodeExp(e){try{let t=ds(e);return typeof t.exp=="number"?t.exp:null}catch{return null}}send(e,t){e.bus.emit("ws:tx",{text:JSON.stringify(t)})}resetConnectionState(){this.connectionId=null,this.sessionId=null,this.phase="IDLE"}clearTimers(){this.refreshScheduler&&(this.refreshScheduler.stop(),this.refreshScheduler=null),this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.conflictTimer&&clearTimeout(this.conflictTimer),this.conflictTimer=null,this.pendingConflictRequest=null}};import Mr from"node:fs/promises";import Lr from"node:path";var J=class{config;constructor(e){this.config=e}async execute(e){try{let t=await this.executeTool(e);return Hn(t)}catch(t){if(this.isToolError(t))return xe(t);let r=t instanceof Error?t.message:"An unexpected error occurred";return xe({code:"INTERNAL",message:r})}}isToolError(e){if(typeof e!="object"||e===null||!("code"in e)||!("message"in e))return!1;let t=e;return typeof t.code=="string"&&typeof t.message=="string"}};import oo from"node:path";import to from"node:fs";function ps(o){let e=o.replace(/\\/g,"/");return e.includes("/secrets/")||e.startsWith("secrets/")?{shouldIgnore:!0,reason:"denylist:secrets",matchedRule:"secrets/"}:e.includes("/.env")||e.startsWith(".env")?{shouldIgnore:!0,reason:"denylist:env",matchedRule:".env"}:e.includes("/id_rsa")||e.endsWith("/id_rsa")?{shouldIgnore:!0,reason:"denylist:ssh",matchedRule:"id_rsa"}:e.includes("/id_ed25519")||e.endsWith("/id_ed25519")?{shouldIgnore:!0,reason:"denylist:ssh",matchedRule:"id_ed25519"}:e.endsWith(".pem")?{shouldIgnore:!0,reason:"denylist:pem",matchedRule:"*.pem"}:e.endsWith(".key")?{shouldIgnore:!0,reason:"denylist:key",matchedRule:"*.key"}:e.endsWith(".p12")?{shouldIgnore:!0,reason:"denylist:p12",matchedRule:"*.p12"}:e.endsWith(".pfx")?{shouldIgnore:!0,reason:"denylist:pfx",matchedRule:"*.pfx"}:null}var ro=[{pattern:"node_modules",type:"exact"},{pattern:".git",type:"exact"},{pattern:"dist",type:"exact"},{pattern:"build",type:"exact"},{pattern:".next",type:"exact"},{pattern:".cache",type:"exact"},{pattern:".DS_Store",type:"exact"},{pattern:"Thumbs.db",type:"exact"},{pattern:"*.tmp",type:"glob"},{pattern:"*.log",type:"glob"},{pattern:".env*",type:"glob"}];function fs(o,e,t){let r=o.directories.find(a=>a.id===e);if(!r)return ro;let n=[],i=oo.join(r.path,".devicelinkignore");if(to.existsSync(i))try{let s=to.readFileSync(i,"utf-8").split(`
-`).map(c=>c.trim()).filter(c=>c&&!c.startsWith("#"));for(let c of s)c.includes("*")||c.includes("?")?n.push({pattern:c,type:"glob"}):c.startsWith("/")?n.push({pattern:c.slice(1),type:"prefix"}):n.push({pattern:c,type:"exact"})}catch(a){console.warn(`[ignore] Failed to read .devicelinkignore: ${a}`)}return n.push(...ro),n}function z(o,e,t,r,n){let i=ps(o);if(i)return i;if(n&&!e){let l=oo.extname(o).toLowerCase();if(l&&n.blocked_extensions?.includes(l))return{shouldIgnore:!0,reason:"policy:blocked_extension",matchedRule:l};if(n.allowed_extensions&&n.allowed_extensions.length>0&&l&&!n.allowed_extensions.includes(l))return{shouldIgnore:!0,reason:"policy:not_in_allowlist",matchedRule:l};if(n.blocked_patterns){for(let d of n.blocked_patterns)if(no(o,d,!1))return{shouldIgnore:!0,reason:"policy:blocked_pattern",matchedRule:d}}}let a=fs(r,t.directory_id,t.workspace_id),s=o.replace(/\\/g,"/"),c=s.split("/").filter(Boolean);for(let l of a){let d=!1;if(l.type==="exact"?d=c.some(p=>p===l.pattern):l.type==="prefix"?d=s.startsWith(l.pattern):l.type==="glob"&&(!l.pattern.includes("/")&&!l.pattern.includes("*")&&!l.pattern.includes("?")?d=c.some(p=>p.toLowerCase()===l.pattern.toLowerCase()):d=no(s,l.pattern,e)),d)return{shouldIgnore:!0,matchedRule:l.pattern}}return{shouldIgnore:!1}}function no(o,e,t){let r="^",n=0;for(;n<e.length;){let i=e[n];i==="*"?n+1<e.length&&e[n+1]==="*"?(r+=".*",n+=2):(r+="[^/]*",n++):i==="?"?(r+="[^/]",n++):"\\^$|.+(){}[]".includes(i)?(r+="\\"+i,n++):(r+=i,n++)}r+="$";try{return new RegExp(r,"i").test(o)}catch{return o.toLowerCase().includes(e.toLowerCase())}}import Fr from"node:fs/promises";import re from"node:path";function io(o){let e=(o??"").trim();if(!e)return".";if(e.includes("\0"))throw A("INVALID_INPUT","Path contains null byte.");if(e.startsWith("/"))throw A("PATH_ESCAPE","Absolute paths are not allowed. Use a path relative to the root.",{hint:'Use relative paths like "src/file.ts" or "." for the root directory. Paths must be relative to the configured root.'});if(/^[a-zA-Z]:[\\/]/.test(e)||e.startsWith("\\\\")||e.startsWith("//"))throw A("PATH_ESCAPE","Absolute/drive/UNC paths are not allowed. Use a path relative to the root.",{hint:'Use relative paths like "src/file.ts" or "." for the root directory. Do not use drive letters (C:) or UNC paths (\\\\server).'});let t=e.replace(/\\/g,"/"),r=re.posix.normalize(t);if(r===".."||r.startsWith("../"))throw A("PATH_ESCAPE","Path escapes the root.",{hint:'Paths cannot use ".." to escape the configured root directory. Use paths relative to the root, like "src/file.ts" or "subdir/file.ts".'});if(/^[a-zA-Z]+:\/\//.test(r))throw A("INVALID_INPUT","URL-style paths are not allowed.",{hint:'Paths cannot use URL schemes (like "http://" or "file://"). Use simple relative paths like "src/file.ts".'});return r===""?".":r}async function X(o,e){let t=io(e),r=re.resolve(o),n=await Fr.realpath(r),i=re.resolve(n,t==="."?"":t),a=re.relative(n,i);if(a.startsWith("..")||re.isAbsolute(a))throw A("PATH_ESCAPE","Path escapes the root.",{hint:"The resolved path escapes the configured root directory. Ensure the path stays within the root boundaries."});try{let s=await Fr.realpath(i),c=re.relative(n,s);if(c.startsWith("..")||re.isAbsolute(c))throw A("PATH_ESCAPE","Symlink/junction escape detected.",{hint:"A symlink or junction in the path resolves outside the configured root directory. Ensure all symlinks stay within the root boundaries."});return{absTarget:s,rel:t}}catch(s){if(ke(s)!=="ENOENT")throw s;let c=t.split("/").filter(Boolean);for(let l=c.length;l>0;l--){let d=c.slice(0,l).join("/"),p=c.slice(l).join("/"),f=re.resolve(n,d);try{let g=await Fr.realpath(f),m=re.relative(n,g);if(m.startsWith("..")||re.isAbsolute(m))throw A("PATH_ESCAPE","Symlink/junction escape detected.",{hint:"A symlink or junction in the path resolves outside the configured root directory. Ensure all symlinks stay within the root boundaries."});return{absTarget:p?re.join(g,p):g,rel:t}}catch(g){if(ke(g)==="ENOENT")continue;throw g}}throw A("NOT_FOUND","Path not found.",{hint:"The specified path does not exist. Verify the path is correct and that the file or directory exists within the configured root."})}}function F(o){return{workspace_id:o.workspace_id,device_id:o.device_id,directory_id:o.directory_id,path:io(o.path)}}function K(o,e){let t=String(ke(o)??"");return t==="ENOENT"?$e("NOT_FOUND","Path not found.",{fs_code:t}):t==="ENOTDIR"?$e("NOT_A_DIRECTORY","Path is not a directory.",{fs_code:t}):t==="EISDIR"?$e("NOT_A_FILE","Path is a directory, not a file.",{fs_code:t}):t==="EACCES"||t==="EPERM"?$e("PERMISSION_DENIED","Permission denied.",{fs_code:t}):$e("INTERNAL",e,{fs_code:t})}function A(o,e,t){return $e(o,e,t)}function $e(o,e,t){return{code:o,message:e,details:t}}function G(o,e){if(Array.isArray(o.directories)&&o.directories.length===0)throw A("UNKNOWN_DIRECTORY","No directories configured.",{hint:"No directories configured. This may happen if the agent was restarted with different directory configuration. If you have only one directory configured, it will be used automatically.",requested_directory_id:e,available_directory_ids:o.directories.map(r=>r.id),available_paths:o.directories.map(r=>r.path),directory_count:o.directories.length});let t=o.directories.find(r=>r.id===e);if(!t&&o.directories.length===1&&(t=o.directories[0]),!t){let r=o.directories.map(a=>a.id).join(", ")||"none",n=o.directories.map(a=>a.path).join(", ")||"none",i=e===void 0?"undefined (missing)":String(e);throw A("UNKNOWN_DIRECTORY",`Unknown directory_id: ${i}`,{hint:`The directory_id "${i}" does not match any configured directory. Available directory IDs: ${r}. Available paths: ${n}. This may happen if the agent was restarted with different directory configuration. If you have only one directory configured, it will be used automatically.`,requested_directory_id:e,available_directory_ids:o.directories.map(a=>a.id),available_paths:o.directories.map(a=>a.path),directory_count:o.directories.length})}return t}function M(o,e,t,r,n){let i={operation:o,path:e.path||".",directory_id:e.directory_id,workspace_id:e.workspace_id,device_id:e.device_id,success:t,error:r?r.substring(0,200):void 0,metadata:n,timestamp:Date.now()},a=`[FS_AUDIT] ${o} ${t?"SUCCESS":"FAILED"} directory=${i.directory_id} path=${i.path}${i.workspace_id?` workspace=${i.workspace_id}`:""}${i.device_id?` device=${i.device_id}`:""}${i.error?` error=${i.error}`:""}${n?` ${JSON.stringify(n)}`:""}`}function hs(o,e,t){let r=[...o],n=t==="asc"?1:-1;return r.sort((i,a)=>{if(e==="name")return n*i.name.localeCompare(a.name);if(e==="mtime"){let s=i.mtime??0,c=a.mtime??0;return n*(s-c)}if(e==="size"){let s=i.size??0,c=a.size??0;return n*(s-c)}return 0}),r}function ms(o,e){return e==="all"?o:e==="files"?o.filter(t=>t.type==="file"||t.type==="symlink"):e==="dirs"?o.filter(t=>t.type==="dir"):o}var Kt=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),{absTarget:n,rel:i}=await X(r.path,e.path),a=Math.min(Math.max(e.limit??200,1),1e3),s=Math.max(e.offset??0,0),c=e.include_hidden??!1,l=e.only??"all",d=e.sort??"name",p=e.order??"asc",f=e.detail??"stat";try{if(!(await Mr.stat(n)).isDirectory()){let C=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("list",C,!1,"Path is not a directory."),A("NOT_A_DIRECTORY","Path is not a directory.",{path:i,hint:"The path must point to a directory, not a file. Use fs_read to read files, or provide a directory path for listing."})}}catch(S){if(S?.code&&S?.message&&typeof S?.code=="string"){let C=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("list",C,!1,S.message),S}throw K(S,"Failed to list directory.")}let g;try{g=await Mr.readdir(n,{withFileTypes:!0})}catch(S){throw K(S,"Failed to read directory.")}let m=c?g:g.filter(S=>!S.name.startsWith(".")),h=[],y=0,k={total_entries:0,files:0,dirs:0,symlinks:0,hidden:0,ignored:0,total_file_bytes:0},b=new Map,T=e.context?e.context.file_policies:void 0,_={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path};for(let S of m){let C=Lr.join(n,S.name),pe=(i==="."?S.name:Lr.posix.join(i,S.name)).replace(/\\/g,"/"),Z="other";S.isDirectory()?Z="dir":S.isFile()?Z="file":S.isSymbolicLink()&&(Z="symlink");let ot=S.name.startsWith(".");if(z(pe,S.isDirectory(),_,this.config,T).shouldIgnore){y++,k.ignored++;continue}k.total_entries++,Z==="file"?k.files++:Z==="dir"?k.dirs++:Z==="symlink"&&k.symlinks++,ot&&k.hidden++;let it,Qr;if(f==="stat"||f==="digest")try{let at=await Mr.stat(C);at.isFile()&&(it=at.size,k.total_file_bytes=(k.total_file_bytes??0)+at.size),Qr=Math.floor(at.mtimeMs/1e3)}catch{}let st=Z==="file"?Lr.extname(S.name).slice(1):void 0;st&&(f==="stat"||f==="digest")&&b.set(st,(b.get(st)??0)+1),h.push({name:S.name,path:pe,type:Z,size:it,mtime:Qr,ext:st,hidden:ot,ignored:!1})}f==="digest"&&b.size>0&&(k.by_ext=Array.from(b.entries()).map(([S,C])=>({ext:S,count:C})).sort((S,C)=>C.count-S.count).slice(0,10));let I=ms(h,l),E=hs(I,d,p),w=E.slice(s,s+a),x=s+w.length,O=x<E.length,V={count:w.length,limit:a,offset:s,has_more:O,next_offset:O?x:void 0},j=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i}),D={items:w,meta:V,context:j,filtered:{ignored_count:y}};return f==="digest"&&(D.summary=k),M("list",j,!0,void 0,{file_count:w.length}),D}};import so from"node:fs/promises";var je=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),{absTarget:n,rel:i}=await X(r.path,e.path),a=e.context?e.context.file_policies:void 0,s={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},c=z(i,!1,s,this.config,a);if(c.shouldIgnore){let m=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("read",m,!1,`Access denied: ${c.reason||c.matchedRule||"blocked"}`),A("PERMISSION_DENIED",`Access denied: ${c.reason||c.matchedRule||"blocked"}`,{path:i,reason:c.reason})}let l=Math.max(e.offset??0,0),d=Math.min(Math.max(e.limit??4e4,1),2e5),p=e.encoding??"utf-8",f;try{f=await so.stat(n)}catch(m){let h=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("read",h,!1,K(m,"Failed to stat file.").message),K(m,"Failed to stat file.")}if(!f.isFile()){let m=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("read",m,!1,"Path is not a file."),A("NOT_A_FILE","Path is not a file.",{path:i,hint:"The path must point to a file, not a directory. Use fs_list or fs_tree to explore directories, or provide a file path to read."})}let g;try{g=await so.open(n,"r")}catch(m){let h=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("read",h,!1,K(m,"Failed to open file.").message),K(m,"Failed to open file.")}try{let m=Buffer.alloc(d),{bytesRead:h}=await g.read(m,0,d,l),k=m.subarray(0,h).toString(p),b=l+h,T=h<d,_=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});return M("read",_,!0,void 0,{bytes_read:h}),{content:k,bytes_read:h,next_offset:b,eof:T,context:_}}catch(m){let h=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw M("read",h,!1,m?.message||String(m)),m}finally{await g.close()}}};import $r from"node:fs/promises";var Ut=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),{absTarget:n,rel:i}=await X(r.path,e.path),a=!1,s;try{s=await $r.readlink(n),a=!0}catch(p){if(p?.code==="ENOENT")throw K(p,"Path not found.")}let c;try{c=a?await $r.stat(n):await $r.lstat(n)}catch(p){throw K(p,"Failed to stat path.")}let l="other";c.isDirectory()?l="dir":c.isFile()?l="file":a&&(l="symlink");let d=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});return M("info",d,!0),{type:l,size:c.isFile()?c.size:void 0,mtime:Math.floor(c.mtimeMs/1e3),ctime:Math.floor(c.ctimeMs/1e3),atime:Math.floor(c.atimeMs/1e3),is_symlink:a,target:a?s:void 0,context:d}}};import Kr from"node:fs/promises";import ae from"node:path";import jr from"node:fs/promises";import ao from"node:path";function gs(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];if(n==="*")r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/]*",r++);else if(n==="?")t+="[^/]",r++;else if(n==="{"){let i=e.indexOf("}",r);if(i===-1)t+="\\{",r++;else{let a=e.substring(r+1,i).split(",");t+="("+a.map(s=>s.trim().replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")+")",r=i+1}}else"\\^$|.+()[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return!1}}async function ys(o,e,t,r,n,i,a,s){let c;try{c=await jr.readFile(o,"utf-8")}catch{return 0}let l=c.split(/\r?\n/),d=0,p;if(r==="regex")try{p=new RegExp(t,n?"g":"gi")}catch{let f=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");p=new RegExp(f,n?"g":"gi")}else{let f=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");p=new RegExp(f,n?"g":"gi")}for(let f=0;f<l.length&&d<a;f++){let g=l[f];if(p.test(g)){p.lastIndex=0;let m=Math.max(0,f-i),h=Math.min(l.length-1,f+i),y=l.slice(m,h+1);s.push({path:e,line:f+1,preview:g.trim(),snippet:y}),d++}}return d}async function co(o,e,t,r,n,i,a,s,c,l,d,p,f,g,m){if(d.value>=c||p.length>=l)return;let h;try{h=await jr.readdir(o,{withFileTypes:!0})}catch{return}for(let y of h){if(d.value>=c||p.length>=l)break;let k=ao.join(o,y.name),b=e==="."?y.name:ao.posix.join(e,y.name);if(z(b,y.isDirectory(),g,m).shouldIgnore){f.value++;continue}if(y.isFile()){if(i&&!gs(b,i))continue;d.value++,await ys(k,b,r,n,a,s,l-p.length,p)}else y.isDirectory()&&await co(k,b,t,r,n,i,a,s,c,l,d,p,f,g,m)}}var Ke=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),n=e.query;if(!n||n.length===0)throw A("INVALID_INPUT","Query is required.",{hint:'Query should be a search pattern to find in file contents. Use a substring (default) or regex pattern (with mode="regex"). Examples: "function", "import.*from", "TODO"'});let i=e.mode??"substring",a=e.file_glob,s=Math.min(Math.max(e.max_files??2e3,1),1e4),c=Math.min(Math.max(e.max_matches??200,1),1e3),l=Math.min(Math.max(e.context_lines??2,0),10),d=e.case_sensitive??!1,{absTarget:p,rel:f}=await X(r.path,e.path??".");if(f!==".")try{if(!(await jr.stat(p)).isDirectory())throw A("NOT_A_DIRECTORY","Grep path is not a directory.",{path:f,hint:'The grep path must be a directory. Grep searches within directories recursively. Use "." to search from the root, or provide a directory path.'})}catch(b){throw b?.code&&b?.message&&typeof b?.code=="string"?b:K(b,"Failed to stat grep path.")}let g={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},m=[],h={value:0},y={value:0};await co(p,f,r.path,n,i,a,d,l,s,c,h,m,y,g,this.config);let k=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:f});return M("grep",k,!0,void 0,{file_count:h.value,match_count:m.length}),{matches:m,meta:{files_scanned:h.value,matches:m.length,truncated:h.value>=s||m.length>=c},context:k,filtered:{ignored_count:y.value}}}};import bs from"lodash/isEmpty.js";var Ue=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),n=e.default_limit??12e3,i=e.default_encoding??"utf-8",a=[];if(e.items&&Array.isArray(e.items)&&(a=e.items),bs(a))throw A("INVALID_INPUT","fs_read_many expects { items: [{path,...}] }",{receivedKeys:Object.keys(e??{}),hint:'Provide an "items" array with at least one object containing a "path" property. Each item can optionally include "offset", "limit", and "encoding". Example: { items: [{ path: "file1.ts" }, { path: "file2.ts", limit: 5000 }] }'});let s=e.context?e.context.file_policies:void 0,c=[],l={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},d=new je(this.config);for(let f of a)try{let g=z(f.path,!1,l,this.config,s);if(g.shouldIgnore){c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:"PERMISSION_DENIED",message:`Access denied: ${g.reason||g.matchedRule||"blocked"}`}});continue}let m={directory_id:t,path:f.path,workspace_id:e.workspace_id,device_id:e.device_id,offset:f.offset??0,limit:f.limit??n,encoding:f.encoding??i},h=await d.execute(m);if(!h.ok){c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:h.error.code,message:h.error.message}});continue}c.push({path:f.path,content:h.data.content,bytes_read:h.data.bytes_read,truncated:!h.data.eof})}catch(g){let m=g,h=m?.code??"INTERNAL",y=m?.message??g?.message??String(g);c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:h,message:y}})}let p=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:"."});return M("read_many",p,!0,void 0,{file_count:c.length}),{files:c,context:p}}};function uo(o,e,t){if(!(e.length>=t)){if(o.type==="file"){e.push(o.path);return}if(o.children)for(let r of o.children){if(e.length>=t)break;uo(r,e,t)}}}function vs(o){let e=t=>{let r=t.toLowerCase(),n=r.split("/");return r==="readme.md"||r.endsWith("/readme.md")||r.includes("/readme.md")?0:r.endsWith(".md")?1:r.endsWith("package.json")||r.endsWith("pyproject.toml")||r.endsWith("go.mod")||r.endsWith("cargo.toml")||r.endsWith("pom.xml")||r.endsWith("build.gradle")?2:r.includes("dockerfile")||r.includes("compose")||r.endsWith(".env.example")?3:n.includes("config")||n.includes("conf")||n.includes("settings")?4:n.includes("ci")||n.includes(".github")||n.includes(".gitlab")||n.includes("jenkins")||r.includes("workflow")?5:r.endsWith(".ts")||r.endsWith(".tsx")||r.endsWith(".js")||r.endsWith(".jsx")||r.endsWith(".py")||r.endsWith(".go")||r.endsWith(".rs")||r.endsWith(".java")?6:7};return[...o].sort((t,r)=>{let n=e(t),i=e(r);return n!==i?n-i:t.localeCompare(r)})}function lo(o,e,t,r){let n={path:o.path,name:o.name,type:o.type,depth:e,size:o.size,mtime:o.mtime,ext:o.ext,hidden:o.hidden,ignored:o.ignored};if(r?.has(o.path)?n.error=r.get(o.path):o.type==="other"&&o.name==="<readdir_error>"&&(n.error={code:"INTERNAL",message:"Failed to read directory"}),t.push(n),o.children)for(let i of o.children)lo(i,e+1,t,r)}async function po(o,e,t,r,n,i,a,s,c,l,d,p,f,g,m,h,y){if(s.value>=a)return m.reason="MAX_ENTRIES",null;if(t>r)return m.reason="MAX_DEPTH",null;let k=e==="."?".":e.replace(/\\/g,"/"),b;try{b=await Kr.lstat(o)}catch(x){let O=x,V=O?.code??"INTERNAL",j=O?.message??L(x);l.total_entries++;let R={name:ae.basename(e)||e,type:"other",path:k,hidden:ae.basename(e)?.startsWith("."),ignored:!1};return h&&h.set(k,{code:V,message:`Failed to stat: ${j}`}),n==="files"||n==="dirs"?null:(s.value++,R)}let T="other";if(b.isDirectory()?T="dir":b.isFile()?T="file":b.isSymbolicLink()&&(T="symlink"),z(k,b.isDirectory(),f,g,y).shouldIgnore)return c.value++,l.ignored++,null;l.total_entries++,T==="file"?l.files++:T==="dir"?l.dirs++:T==="symlink"&&l.symlinks++;let I=ae.basename(e)?.startsWith(".");I&&l.hidden++;let E=T==="file"?ae.extname(ae.basename(e)||e).slice(1):void 0;E&&(p==="stat"||p==="digest")&&d.set(E,(d.get(E)??0)+1),T==="file"&&(p==="stat"||p==="digest")&&(l.total_file_bytes=(l.total_file_bytes??0)+(b.size??0));let w={name:ae.basename(e)||e,type:T,path:k,size:(p==="stat"||p==="digest")&&b.isFile()?b.size:void 0,mtime:p==="stat"||p==="digest"?Math.floor(b.mtimeMs/1e3):void 0,ext:E,hidden:I,ignored:!1};if(n==="files"&&T!=="file"&&T!=="symlink"||n==="dirs"&&T!=="dir")return null;if(s.value++,T==="dir"&&t<r){let x,O;try{x=await Kr.readdir(o,{withFileTypes:!0})}catch(R){let D=R,S=D?.code??"INTERNAL",C=D?.message??L(R);O={code:S,message:C},x=[]}let V=i?x:x.filter(R=>!R.name.startsWith("."));V.sort((R,D)=>{let S=R.isDirectory()?0:1,C=D.isDirectory()?0:1;return S!==C?S-C:R.name.localeCompare(D.name)});let j=[];O&&h&&h.set(k,{code:O.code,message:`Failed to read directory: ${O.message}`});for(let R of V){if(s.value>=a)break;let D=ae.join(o,R.name),S=e==="."?R.name:ae.posix.join(e,R.name),C=S.replace(/\\/g,"/");if(z(C,R.isDirectory(),f,g,y).shouldIgnore){c.value++,l.ignored++;continue}try{let pe=await po(D,S,t+1,r,n,i,a,s,c,l,d,p,f,g,m,h,y);pe&&j.push(pe)}catch(pe){let Z=pe,ot=Z?.code??"INTERNAL",Yr=Z?.message??L(pe);h&&h.set(C,{code:ot,message:`Failed to build subtree: ${Yr}`}),l.total_entries++;let it={name:ae.basename(S)||S,type:"other",path:C,hidden:ae.basename(S)?.startsWith("."),ignored:!1};if(n==="files"||n==="dirs")continue;s.value++,j.push(it)}}j.length>0&&(w.children=j)}return w}var Bt=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),{absTarget:n,rel:i}=await X(r.path,e.path),a=Math.min(Math.max(e.max_depth??3,1),20),s=e.only??"all",c=e.include_hidden??!1,l=Math.min(Math.max(e.max_entries??5e3,1),2e4),d=e.detail??"stat",p=e.include_display??!1,f=Math.min(Math.max(e.max_display_rows??2e3,1),2e4);try{if(!(await Kr.stat(n)).isDirectory())throw A("NOT_A_DIRECTORY","Path is not a directory.",{path:i,hint:"The path must point to a directory to build a tree. Provide a directory path, not a file."})}catch(R){throw R?.code&&R?.message&&typeof R?.code=="string"?R:K(R,"Failed to build tree.")}let g=e.context?e.context.file_policies:void 0,m={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},h={reason:void 0},y={value:0},k={value:0},b={total_entries:0,files:0,dirs:0,symlinks:0,hidden:0,ignored:0,total_file_bytes:0},T=new Map,_=new Map,I=await po(n,i,0,a,s,c,l,y,k,b,T,d,m,this.config,h,_,g);if(!I)throw A("INTERNAL","Failed to build tree (empty result).");let E=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});d==="digest"&&T.size>0&&(b.by_ext=Array.from(T.entries()).map(([R,D])=>({ext:R,count:D})).sort((R,D)=>D.count-R.count).slice(0,10));let w={tree:I,context:E,filtered:{ignored_count:k.value}};if(p){let R=[];lo(I,0,R,_),R.length>f&&(R.length=f,w.truncated=w.truncated??{reason:"MAX_ENTRIES",continuation:"Display rows truncated; reduce max_entries/max_depth or lower max_display_rows"}),w.display={rows:R}}h.reason&&(w.truncated={reason:h.reason,continuation:h.reason==="MAX_ENTRIES"?"Reduce max_entries or list this folder with fs_list instead":"Reduce max_depth or list this folder with fs_list instead"}),(d==="digest"||e.include_summary)&&(w.summary=b);let x={};if(e.grep?.query)try{let R=new Ke(this.config),D={directory_id:t,workspace_id:e.workspace_id,device_id:e.device_id,path:e.path??".",query:e.grep.query,mode:e.grep.mode??"substring",file_glob:e.grep.file_glob,max_files:e.grep.max_files??2e3,max_matches:e.grep.max_matches??200,context_lines:e.grep.context_lines??2,case_sensitive:e.grep.case_sensitive??!1},S=await R.execute(D);S.ok&&(x.grep={matches:S.data.matches,meta:S.data.meta,context:S.data.context})}catch{}let O=e.read?.paths?.filter(Boolean)??[],V=[];if(e.read?.auto){let R=Math.min(Math.max(e.read.auto.max_files??10,1),50),D=[];uo(I,D,3e3),V=vs(D).slice(0,R)}let j=Array.from(new Set([...O,...V])).slice(0,50);if(j.length>0)try{let R=Math.min(Math.max(e.read?.auto?.max_bytes_each??2e4,1),2e5),D=new Ue(this.config),S={directory_id:t,workspace_id:e.workspace_id,device_id:e.device_id,default_limit:R,default_encoding:"utf-8",items:j.map(Y=>({path:Y}))},C=await D.execute(S);C.ok&&(x.read_many={files:C.data.files.map(Y=>({path:Y.path,content:Y.content,bytes_read:Y.bytes_read,truncated:Y.truncated,error:Y.error})),context:C.data.context})}catch{}return Object.keys(x).length>0&&(w.extras=x),M("tree",E,!0,void 0,{file_count:y.value}),w}};import Ur from"node:fs/promises";import ze from"node:path";function Ss(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];if(n==="*")r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/\\\\]*",r++);else if(n==="?")t+="[^/\\\\]",r++;else if(n==="["){let i=e.indexOf("]",r);if(i===-1)t+="\\[",r++;else{let a=e.substring(r+1,i);a.startsWith("!")?t+="[^"+a.substring(1)+"]":t+="["+a+"]",r=i+1}}else"\\^$|.+(){}[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return o.toLowerCase().includes(e.toLowerCase())}}function Es(o,e,t){return t==="glob"?Ss(o,e):o.toLowerCase().includes(e.toLowerCase())}function ks(o,e,t){let r=100;if(e){for(let n of e)if(o.path.startsWith(n)){r+=50;break}}if(t){for(let n of t)if(o.path.startsWith(n)){r-=30;break}}return o.name===o.path.split("/").pop()&&(r+=20),r}function _s(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];n==="*"?r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/]*",r++):n==="?"?(t+="[^/]",r++):"\\^$|.+(){}[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return!1}}async function Br(o,e,t,r,n,i,a,s,c,l,d,p,f,g,m,h,y,k){if(l.length>=c)return;let b;try{b=await Ur.readdir(o,{withFileTypes:!0})}catch{return}let T=s?b:b.filter(_=>!_.name.startsWith("."));for(let _ of T){if(l.length>=c)break;let I=ze.join(o,_.name),E=e==="."?_.name:ze.posix.join(e,_.name);if(z(E,_.isDirectory(),p,f,k).shouldIgnore){d.value++;continue}if(g&&!_s(E,g)){i&&_.isDirectory()&&await Br(I,E,t,r,n,i,a,s,c,l,d,p,f,g,m,h,y,k);continue}let x=Es(_.name,r,n),O="other";if(_.isDirectory()?O="dir":_.isFile()?O="file":_.isSymbolicLink()&&(O="symlink"),x&&(a==="all"||a==="files"&&(O==="file"||O==="symlink")||a==="dirs"&&O==="dir")){let j,R;if(y!==!1)try{let C=await Ur.stat(I);j=C.isFile()?C.size:void 0,R=Math.floor(C.mtimeMs/1e3)}catch{}let D=O==="file"?ze.extname(_.name).slice(1):void 0,S=ks({name:_.name,path:E},m,h);l.push({name:_.name,path:E,type:O,size:j,mtime:R,ext:D,hidden:_.name.startsWith("."),ignored:!1,score:S,matched:"name"})}i&&O==="dir"&&await Br(I,E,t,r,n,i,a,s,c,l,d,p,f,g,m,h,y)}}var qt=class extends J{async executeTool(e){let t=e.directory_id,r=G(this.config,t),n=e.query;if(!n||n.length===0)throw A("INVALID_INPUT","Query is required.",{hint:'Query should be a pattern to match file or directory names. Use a substring (default) or glob pattern (with mode="glob"). Examples: "config", "*.ts", "test/**"'});let i=e.mode??"substring",a=e.recursive??!0,s=e.only??"all",c=e.include_hidden??!1,l=Math.min(Math.max(e.max_results??200,1),2e4),d=Math.max(e.offset??0,0),p=e.file_glob,f=e.prefer_paths,g=e.avoid_paths,m=e.include_stats!==!1,{absTarget:h,rel:y}=await X(r.path,e.path??"."),k=h,b=y,T=[];if(y!==".")try{let S=await Ur.stat(h);if(!S.isDirectory())if(S.isFile()){k=ze.dirname(h);let C=ze.posix.dirname(y);b=C==="."?".":C,T.push({type:"warning",description:`Search path "${y}" is not a directory (it's a file). Searching the directory containing it instead: "${b}"`})}else throw A("NOT_A_DIRECTORY","Search path is not a directory.",{path:y,hint:'The search path must be a directory. Search looks for files/directories matching the query within directories. Use "." to search from the root, or provide a directory path.'})}catch(S){throw S?.code&&S?.message&&typeof S?.code=="string"?S:K(S,"Failed to stat search path.")}let _=e.context?e.context.file_policies:void 0,I={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},E=[],w={value:0};await Br(k,b,r.path,n,i,a,s,c,l+d,E,w,I,this.config,p,f,g,m,_),E.sort((S,C)=>{let Y=(C.score??0)-(S.score??0);return Y!==0?Y:S.name.localeCompare(C.name)});let x=E.slice(d,d+l),O=d+x.length,V=O<E.length,j={count:x.length,limit:l,offset:d,has_more:V,next_offset:V?O:void 0},R=F({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:b});M("search",R,!0,void 0,{file_count:x.length});let D={results:x,meta:j,context:R,filtered:{ignored_count:w.value}};return T.length>0&&(D.messages=T),D}};function Ts(o){if(typeof o!="object"||o===null||!("code"in o)||!("message"in o))return!1;let e=o;return typeof e.code=="string"&&typeof e.message=="string"}var Wt=class{config;executers=new Map;constructor(e){this.config=e,this.initializeExecuters()}initializeExecuters(){this.executers.set("fs_list",new Kt(this.config)),this.executers.set("fs_read",new je(this.config)),this.executers.set("fs_info",new Ut(this.config)),this.executers.set("fs_tree",new Bt(this.config)),this.executers.set("fs_search",new qt(this.config)),this.executers.set("fs_grep",new Ke(this.config)),this.executers.set("fs_read_many",new Ue(this.config))}async executeTool(e,t){let r=this.executers.get(e);if(!r)return xe({code:"UNKNOWN_TOOL",message:`Unknown tool: ${e}`,details:{toolName:e}});try{return await r.execute(t)}catch(n){return Ts(n)?xe(n):xe({code:"INTERNAL",message:n instanceof Error?n.message:"Unknown error",details:{raw:String(n)}})}}getExecuter(e){return this.executers.get(e)}hasTool(e){return this.executers.has(e)}getRegisteredTools(){return Array.from(this.executers.keys())}};import fo from"lodash/isObject.js";import Ae from"lodash/get.js";function Ye(o){let e=Date.now()-o,t=parseFloat((e/1e3).toFixed(2));return{execution_ms:e,execution_sec:t}}function ws(o){return fo(o)&&typeof Ae(o,"ok")=="boolean"}function Rs(o){let e=ws(o),t=e?!!Ae(o,"ok"):!0,r,n,i;if(t){if(e?r=Ae(o,"data")??Ae(o,"result")??o:r=o,fo(r)&&Array.isArray(Ae(r,"messages"))){i=Ae(r,"messages");let a={...r};delete a.messages,r=a}}else e?n=Ae(o,"error")??o:n=o;return{ok:t,result:r,error:n,messages:i}}function ho(o,e,t,r){let n=Ye(r),{ok:i,result:a,error:s,messages:c}=Rs(t);return{type:"tool_result",job_id:o,tool:e,ok:i,timing:n,...i?{result:a??null,...c?{messages:c}:{}}:{error:s??{code:"UNKNOWN",message:"Unknown error"},...c?{messages:c}:{}}}}function mo(o,e,t,r){let n=Ye(r),i=t instanceof Error?t.message:String(t);return{type:"tool_result",job_id:o,tool:e,ok:!1,error:i,timing:n}}var $=class{toolName;jobId;ok;elapsedSec;raw;constructor(e,t,r,n){this.toolName=e,this.jobId=t,this.ok=r.ok,this.elapsedSec=n,this.raw=r}getStatusIcon(){return this.ok?"\u2713":"\u2717"}getStatusText(){return this.ok?"SUCCESS":"FAILED"}toString(){let e=this.getStatusIcon(),t=this.getDescription();return`${e} ${this.toolName} (${t}, elapsed=${this.elapsedSec}s)`}};var Qe=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let d=this.raw.error;return d&&typeof d=="object"&&"message"in d?`error: ${String(d.message)}`:"error"}if(!this.output)return"no result";let{items:e,meta:t,filtered:r,context:n}=this.output,i=e?.length??0,a=r?.ignored_count??0,s=n?.path??"unknown",c=[];i>0&&c.push(`${i} item${i!==1?"s":""}`),a>0&&c.push(`${a} ignored`),t?.has_more&&c.push("has_more");let l=c.length>0?c.join(", "):"empty";return`path=${s}, ${l}`}};var Xe=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let c=this.raw.error;return c&&typeof c=="object"&&"message"in c?`error: ${String(c.message)}`:"error"}if(!this.output)return"no result";let{bytes_read:e,eof:t,context:r}=this.output,n=r?.path??"unknown",i=e??0,a=!t,s=[`path=${n}`,`${i} bytes`];return a&&s.push("truncated"),s.join(", ")}};var Ze=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let a=this.raw.error;return a&&typeof a=="object"&&"message"in a?`error: ${String(a.message)}`:"error"}if(!this.output)return"no result";let{type:e,size:t,context:r}=this.output,n=r?.path??"unknown",i=t!==void 0?`${t} bytes`:"no size";return`path=${n}, type=${e}, ${i}`}};var et=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let c=this.raw.error;return c&&typeof c=="object"&&"message"in c?`error: ${String(c.message)}`:"error"}if(!this.output)return"no result";let{tree:e,filtered:t,summary:r,context:n}=this.output,i=n?.path??"unknown",a=t?.ignored_count??0,s=[`path=${i}`];if(r){let{total_entries:c,files:l,dirs:d}=r;c!==void 0&&s.push(`${c} entries`),l!==void 0&&s.push(`${l} files`),d!==void 0&&s.push(`${d} dirs`)}else if(e){let c=d=>{let p=1;if(d.children)for(let f of d.children)p+=c(f);return p},l=c(e);s.push(`${l} nodes`)}return a>0&&s.push(`${a} ignored`),this.output.truncated&&s.push("truncated"),s.join(", ")}};var tt=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let l=this.raw.error;return l&&typeof l=="object"&&"message"in l?`error: ${String(l.message)}`:"error"}if(!this.output)return"no result";let{results:e,meta:t,filtered:r,context:n}=this.output,i=n?.path??"unknown",a=e?.length??0,s=r?.ignored_count??0,c=[`path=${i}`,`${a} result${a!==1?"s":""}`];return s>0&&c.push(`${s} ignored`),t?.has_more&&c.push("has_more"),c.join(", ")}};var rt=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let d=this.raw.error;return d&&typeof d=="object"&&"message"in d?`error: ${String(d.message)}`:"error"}if(!this.output)return"no result";let{matches:e,meta:t,filtered:r,context:n}=this.output,i=n?.path??"unknown",a=e?.length??0,s=t?.files_scanned??0,c=r?.ignored_count??0,l=[`path=${i}`,`${a} match${a!==1?"es":""}`,`${s} file${s!==1?"s":""} scanned`];return c>0&&l.push(`${c} ignored`),t?.truncated&&l.push("truncated"),l.join(", ")}};var nt=class extends ${output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok){let s=this.raw.error;return s&&typeof s=="object"&&"message"in s?`error: ${String(s.message)}`:"error"}if(!this.output)return"no result";let{files:e}=this.output,t=e?.length??0,r=e?.filter(s=>!s.error).length??0,n=t-r,i=e?.reduce((s,c)=>s+(c.bytes_read??0),0)??0,a=[`${t} file${t!==1?"s":""}`,`${r} success`];return n>0&&a.push(`${n} error${n!==1?"s":""}`),i>0&&a.push(`${i} bytes`),a.join(", ")}};function qr(o,e,t,r){switch(o){case"fs_list":return new Qe(o,e,t,r);case"fs_read":return new Xe(o,e,t,r);case"fs_info":return new Ze(o,e,t,r);case"fs_tree":return new et(o,e,t,r);case"fs_search":return new tt(o,e,t,r);case"fs_grep":return new rt(o,e,t,r);case"fs_read_many":return new nt(o,e,t,r);default:{class n extends ${getDescription(){return this.ok?"completed":"failed"}}return new n(o,e,t,r)}}}var Jt=class{name="tools-orchestrator";handlers(){return{"ws:connected":async(e,t)=>{t.notifier.info(`WS connected: ${e.url}`,{scope:"system"})},"ws:rx":async(e,t)=>{try{let r=JSON.parse(e.text),n=$t.safeParse(r);if(!n.success){t.notifier.error("Unexpected message format",{scope:"system"});return}n.success&&n.data.type==="tool_call"&&await this.handleToolCall(n.data,t)}catch{t.notifier.error("Unexpected message format",{scope:"system"})}}}}async handleToolCall(e,t){let r=e.tool,n=e.job_id,i=e.args??{},a=i.directory_id,s=t.engine.configurationContext.configuration,c=s.directories.map(p=>p.id).join(", ")||"none",l=s.directories.map(p=>p.path).join(", ")||"none";t.notifier.info(`Tool call: ${r} (job=${n}, directory_id=${a||"MISSING"}, available_ids=[${c}], available_paths=[${l}], directory_count=${s.directories.length})`,{scope:"system"}),t.notifier.info(`Executing: ${r}`);let d=Date.now();try{let f=await new Wt(s).executeTool(r,i),g=ho(n,r,f,d);Lt.parse(g),t.bus.emit("ws:tx",{text:JSON.stringify(g)});let m=Ye(d),h=qr(r,n,f,m.execution_sec);h.ok?t.notifier.success(h.toString()):t.notifier.error(h.toString())}catch(p){let f=mo(n,r,p,d);Lt.parse(f),t.bus.emit("ws:tx",{text:JSON.stringify(f)});let g=Ye(d),m={ok:!1,error:p instanceof Error?{code:"INTERNAL",message:p.message}:{code:"INTERNAL",message:String(p)}},h=qr(r,n,m,g.execution_sec);t.notifier.error(h.toString())}}};var Wr=[{name:"fs_list",version:"1.0",description:"List files and folders at a relative path inside a shared folder.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},limit:{type:"integer",minimum:1,maximum:1e3,default:200},offset:{type:"integer",minimum:0,default:0},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},sort:{type:"string",enum:["name","mtime","size"],default:"name"},order:{type:"string",enum:["asc","desc"],default:"asc"},detail:{type:"string",enum:["basic","stat","digest"],default:"stat"}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_read",version:"1.0",description:"Read the contents of a SINGLE text file inside a shared folder. For reading many files at once, prefer fs_read_many instead of multiple fs_read calls.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",minLength:1},offset:{type:"integer",minimum:0,default:0},limit:{type:"integer",minimum:1,maximum:2e5,default:4e4},encoding:{type:"string",default:"utf-8"}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_FILE","PERMISSION_DENIED","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_info",version:"1.0",description:"Get metadata about a file or directory (type, size, timestamps, symlink).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",minLength:1}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","PERMISSION_DENIED","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_tree",version:"1.0",description:"Return a directory tree from a relative path up to max_depth.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},max_depth:{type:"integer",minimum:1,maximum:20,default:3},max_entries:{type:"integer",minimum:1,maximum:2e4,default:5e3},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},detail:{type:"string",enum:["basic","stat","digest"],default:"stat"},include_display:{type:"boolean",default:!1},max_display_rows:{type:"integer",minimum:1,maximum:2e4,default:2e3}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_search",version:"1.0",description:"Search for files/folders by name inside a root, optionally recursively.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},query:{type:"string",minLength:1},mode:{type:"string",enum:["substring","glob"],default:"substring"},recursive:{type:"boolean",default:!0},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},max_results:{type:"integer",minimum:1,maximum:2e4,default:200}},required:["query"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_grep",version:"1.0",description:"Search for text content inside files (like grep/ripgrep).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},query:{type:"string",minLength:1},mode:{type:"string",enum:["substring","regex"],default:"substring"},file_glob:{type:"string"},max_files:{type:"integer",minimum:1,maximum:1e4,default:2e3},max_matches:{type:"integer",minimum:1,maximum:1e3,default:200},context_lines:{type:"integer",minimum:0,maximum:10,default:2},case_sensitive:{type:"boolean",default:!1}},required:["query"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL"]},{name:"fs_read_many",version:"1.0",description:"Read multiple files in a single call (batch read). Prefer this over multiple fs_read calls when you need to read several files\u2014fewer round-trips and better performance (up to 50 items per call).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},items:{type:"array",minItems:1,maxItems:50,items:{type:"object",properties:{path:{type:"string",minLength:1},offset:{type:"integer",minimum:0,default:0},limit:{type:"integer",minimum:1,maximum:2e5},encoding:{type:"string"}},required:["path"]}},default_limit:{type:"integer",minimum:1,maximum:2e5,default:12e3},default_encoding:{type:"string",default:"utf-8"}},required:["items"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_FILE","INVALID_INPUT","INTERNAL"]}];var Jr=class extends B{constructor(){super(new U({name:"tools-job",lane:"worker",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){t.notifier.info("Executing supported tools job");let n=t.engine.configurationContext.configuration.device?.id;if(!n){t.notifier.error("Cannot publish tools: device ID not available");return}let i={type:"tools_publish",device_id:n,tools:Wr};t.bus.emit("ws:tx",{text:JSON.stringify(i)}),t.notifier.success(`\u2192 tools_publish (count=${Wr.length})`)}},Hr=new Jr;function go(){return new ee(Hr,void 0)}var Gr=class extends B{constructor(){super(new U({name:"directories-job",lane:"worker",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){t.notifier.info("Executing directories job");let r=t.engine.configurationContext.configuration,n=r.device?.id;if(!n){t.notifier.error("Cannot publish directories: device ID not available");return}let i=r.directories.map(s=>({id:s.id,name:s.name,path:sr(s.path)??s.name,path_hint:s.tag||void 0})),a={type:"directories_publish",device_id:n,directories:i};t.bus.emit("ws:tx",{text:JSON.stringify(a)}),t.notifier.success(`\u2192 directories_publish (dirs=${a.directories.length})`)}},Vr=new Gr;function yo(){return new ee(Vr,void 0)}var Ht=class{name="meta-data-orchestrator";onRegister(e){e.engine.register(Hr),e.engine.register(Vr)}handlers(){return{"meta:data:requested:tools":async(e,t)=>{t.notifier.info("MetaData: tools requested -> dispatching supported tools job"),t.engine.dispatch(go())},"meta:data:requested:directories":async(e,t)=>{t.notifier.info("MetaData: directories requested -> dispatching directories job"),t.engine.dispatch(yo())}}}};var Gt=class{constructor(e){this.argv=e;let t=e.map(p=>p.trim()?.toLowerCase()),r=e.map(p=>p.trim()),n=this.parseKeyValue(t,r,["--env"]);n.match&&(this.enviromentFile=n.value);let i=this.parseKeyValue(t,r,["--root"]);i.match&&(this.rootPath=i.value);let a=this.parseKeyValue(t,r,["--control-url"]);a.match&&(this.controlUrl=a.value);let s=this.parseKeyValue(t,r,["--bridge-ws-url"]);s.match&&(this.bridgeWsUrl=s.value);let c=this.parseKeyValue(t,r,["--private-key-file"]);c.match&&c.value&&(this.privateKeyFile=c.value);let l=this.parseKeyValue(t,r,["--public-key-file"]);l.match&&l.value&&(this.publicKeyFile=l.value);let d=this.parseKeyValue(t,r,["--enrollment-file"]);d.match&&d.value&&(this.enrollmentFile=d.value)}enviromentFile;rootPath;controlUrl;bridgeWsUrl;privateKeyFile;publicKeyFile;enrollmentFile;parseKeyValue(e,t,r){let n=r.map(i=>i.toLowerCase()?.trim()).filter(i=>i!==void 0);if(n.length===0)return{match:!1,value:void 0};for(let i of n){let a=e.findIndex(s=>{let c=s.toLowerCase();return c===i||c.startsWith(i+"=")});if(a!==-1){let s=t[a],c=s.toLowerCase().indexOf("=");return c!==-1?{match:!0,value:s.substring(c+1)||void 0}:{match:!0,value:t[a+1]??void 0}}}return{match:!1,value:void 0}}};var Vt=class{bus;flags;constructor(e,t){this.bus=e,this.flags=t??new fe(!1)}info(e,t){return this.push(e,t)}warn(e,t){let r=Object.assign({},t,{kind:"warning"});return this.push(e,r)}error(e,t){let r=Object.assign({},t,{kind:"error"});return this.push(e,r)}success(e,t){let r=Object.assign({},t,{kind:"success"});return this.push(e,r)}push(e,t){if((t?.scope??"default")==="system"&&!this.flags.debug&&!this.flags.headless)return null;let n=new ne(e,t);return this.bus.emit("notify:event",n),n}};var zt=class{bus;constructor(e){this.bus=e}info(e,t){this.push(e,Object.assign({},t,{level:"info"}))}warn(e,t){this.push(e,Object.assign({},t,{level:"warn"}))}error(e,t){this.push(e,Object.assign({},t,{level:"error"}))}debug(e,t){this.push(e,Object.assign({},t,{level:"debug"}))}success(e,t){this.push(e,Object.assign({},t,{level:"success"}))}push(e,t){let r=new lt(e,t);this.bus.emit("log",r)}};import zr from"dotenv";import{existsSync as Cs}from"node:fs";import{join as xs}from"node:path";function bo(o){zr.config({quiet:!0});let e=xs(process.cwd(),"apps","agent",".env");Cs(e)&&zr.config({path:e,override:!0,quiet:!0}),o.enviromentFile&&zr.config({path:o.enviromentFile,override:!0,quiet:!0})}async function As(){let o=new St,e=new pt,t=await cn(),r=new Gt(process.argv);bo(r);let n=jn(process.argv);if(n.headless){let l=Xn(r.enrollmentFile);console.log(`[agent] Headless boot (${n.reason})`),console.log(`[agent] Enrollment: ${l}`),l==="none"&&console.log("[agent] No enrollment key (set ENROLMENT_KEY or DLINK_ENROLMENT_KEY, or use --enrollment-file)")}let i=new fe(!1,n.headless,n.reason),a=new zt(o),s=new Vt(o,i);Sn(o,i);let c=new vt({bus:o,argv:r,logger:a,notifier:s,storage:e,secrets:t,flags:i,lanes:[new ce("console",1),new ce("supervisor",1),new ce("main",1),new ce("ws",1),new ce("worker",8),new ce("io",4)]});c.register(mr),c.register(Tr),c.register(ln),c.register(dn),c.register(pn),c.registerOrchestrator(new Ot),c.registerOrchestrator(new wt("./engine_state/telemetry.ndjson")),c.registerOrchestrator(new Rt),c.registerOrchestrator(new Mt),c.registerOrchestrator(new jt),c.registerOrchestrator(new Pt),c.registerOrchestrator(new Jt),c.registerOrchestrator(new Ht),await c.init(),await c.start()}As();
+`);if(m===-1)break;let g=d.slice(0,m);d=d.slice(m+2);let h=null,y=null;for(let E of g.split(`
+`))E.startsWith("event:")&&(h=E.slice(6).trim()),E.startsWith("data:")&&(y=E.slice(5).trim());if(!h||!y)continue;let _;try{_=JSON.parse(y)}catch(E){n.error(`[deviceAuthStream] Failed to parse event data as JSON: ${String(E)}`);continue}let v=Ri.safeParse(_);if(!v.success){n.error(`[deviceAuthStream] Event validation failed (${h}): ${String(v.error)}`);continue}let k=v.data;if(h==="approved"||h==="denied"||h==="expired")return k;if(h==="pending"){"status"in k&&k.status==="pending"&&k.needs_proof===!0&&n.warn("[deviceAuthStream] pending: needs_proof=true (unexpected before approval)");continue}n.warn(`[deviceAuthStream] Unknown event type: ${h}`)}}throw n.error("[deviceAuthStream] Stream ended unexpectedly without completion"),new Error("Device authorization stream ended without completion")}catch(s){if(s instanceof Error&&s.name==="AbortError")n.warn(`[deviceAuthStream] Aborted: ${s.message??""}`);else{let c=s instanceof Error?s.message:String(s);n.error(`[deviceAuthStream] Error: ${c}`)}throw s}finally{clearTimeout(a)}})}function Bn(o){return new V(o,async(e,t)=>de(e,"/api/device/authorize/token",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}function qn(o){return new V(o,async(e,t)=>{let r=new AbortController,n=3e4,i=setTimeout(()=>{r.abort()},n);try{let a=await de(e,"/api/device/authorize/refresh",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t),signal:r.signal});return clearTimeout(i),a}catch(a){throw clearTimeout(i),a instanceof Error&&a.name==="AbortError"?new Error(`Refresh token request timed out after ${n}ms`):a}})}function Wn(o){return new V(o,async(e,t)=>de(e,"/api/device/enrollment/start",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(t)}))}var Me=class{deviceAuthStartCall;deviceAuthProveCall;deviceAuthStreamCall;deviceAuthTokenCall;deviceAuthRefreshCall;deviceEnrollmentStartCall;constructor(e,t){let r={configuration:e,notifier:t};this.deviceAuthStartCall=jn(r),this.deviceAuthProveCall=Kn(r),this.deviceAuthStreamCall=Un(r),this.deviceAuthTokenCall=Bn(r),this.deviceAuthRefreshCall=qn(r),this.deviceEnrollmentStartCall=Wn(r)}deviceAuthStart(e){return this.deviceAuthStartCall.execute(e)}deviceEnrollmentStart(e){return this.deviceEnrollmentStartCall.execute(e)}deviceAuthProve(e){return this.deviceAuthProveCall.execute(e)}deviceAuthStream(e){return this.deviceAuthStreamCall.execute(e)}deviceAuthToken(e){return this.deviceAuthTokenCall.execute(e)}deviceAuthRefresh(e){return this.deviceAuthRefreshCall.execute(e)}};function xi(o){if(!Pt(o)||te(o,"ok")!==!0)return!1;let e=te(o,"data");return Pt(e)?te(e,"ok")===!0&&Xe(te(e,"access_token"))&&Xe(te(e,"refresh_token"))&&typeof te(e,"expires_in_sec")=="number"&&Xe(te(e,"device_id")):!1}function Ai(o){return o.ok===!0&&typeof o.access_token=="string"}var Ft=class{constructor(e){this.reason=e}},Br=["REFRESH_EXPIRED","REFRESH_REVOKED","REFRESH_NOT_FOUND","DEVICE_NOT_FOUND"],pe=class{constructor(e,t,r,n,i,a,s){this.ok=e;this.accessToken=t;this.refreshToken=r;this.expiresInSec=n;this.error=i;this.retryAfterSec=a;this.errorCode=s}},Ur=class extends q{constructor(){super(new B({name:"refresh-tokens",lane:"io",priority:900,locks:["AUTH_REFRESH"],maxAttempts:5,cancellable:!0}))}async run(e,t){let r=t.engine.configurationContext.configuration;if(!r.controlBaseUrl)return new pe(!1,void 0,void 0,void 0,"controlBaseUrl missing");if(!r.device?.id)return new pe(!1,void 0,void 0,void 0,"device.id missing");let n=await t.engine.secrets.get("devicePrivateKey");if(!n.ok||!n.value)return new pe(!1,void 0,void 0,void 0,"device private key missing");let i=n.value,a=await t.engine.secrets.get("refreshToken");if(!a.ok||!a.value)return new pe(!1,void 0,void 0,void 0,"refresh token missing");let s=a.value;t.notifier.info(`Refreshing tokens (job) reason=${e.reason}`,{scope:"system",category:["token-refresh"]});let c=Date.now(),l=Ci.randomBytes(16).toString("base64url"),d=vr({deviceId:r.device.id,ts:c,nonce:l,refreshToken:s,privateKeyPem:i}),p=new Me(r,t.notifier),f;try{f=await p.deviceAuthRefresh({device_id:r.device.id,refresh_token:s,ts:c,nonce:l,sig:d})}catch(g){let h=g instanceof Error?g.message:String(g),y=g,_=y.retryAfterSec,v=y.status,k=y.body,E=k?.error,C=v===401&&E!=null&&typeof E=="object"&&E.code==="REFRESH_NOT_FOUND"?"REFRESH_NOT_FOUND":void 0;return C==="REFRESH_NOT_FOUND"?(t.notifier.warn("Refresh token not found; clearing stored refresh token and stopping automatic refresh. Please run signin.",{category:["token-refresh"]}),await t.engine.secrets.delete("refreshToken").catch(S=>{let T=S instanceof Error?S.message:String(S);t.logger.warn(`Could not clear stored refresh token: ${T}`,{category:["token-refresh"]}),t.notifier.warn(`Could not clear stored refresh token: ${T}`,{category:["token-refresh"]})}),new pe(!1,void 0,void 0,void 0,"Refresh token not found",void 0,"REFRESH_NOT_FOUND")):(t.notifier.error(`Refresh tokens failed: ${h}`,{category:["token-refresh"]}),new pe(!1,void 0,void 0,void 0,h,_,C))}let m=this.normalizeRefreshResponse(f);if(!m){let g=this.extractErrorMessage(f),h=this.extractErrorCode(f);return t.notifier.error(`Refresh tokens failed: ${g}`,{category:["token-refresh"]}),new pe(!1,void 0,void 0,void 0,g,void 0,h)}return m.refresh_token&&await t.engine.secrets.set("refreshToken",m.refresh_token),new pe(!0,m.access_token,m.refresh_token,m.expires_in_sec)}normalizeRefreshResponse(e){if(xi(e))return e.data;if(this.looksLikeDomainRefresh(e)){let t=e;return Ai(t)?t:null}return null}looksLikeDomainRefresh(e){if(typeof e!="object"||e===null)return!1;let t=e;return t.ok===!0||t.ok===!1}extractErrorMessage(e){if(!Pt(e))return"Unknown error";if(te(e,"ok")===!1){let t=te(e,"error.message");if(Xe(t)&&t.length>0)return t}return te(e,"ok")===!0&&"data"in e?"Bad refresh response: missing token fields":"Unknown error"}extractErrorCode(e){if(!Pt(e)||te(e,"ok")!==!1)return;let t=te(e,"error.code");return Xe(t)?t:void 0}},qr=new Ur;function Jn(o){return new ne(qr,o)}import ss from"lodash/truncate.js";import zi from"lodash/isEmpty.js";import Yi from"lodash/trim.js";import Qi from"lodash/trimEnd.js";import Xi from"node:os";import Ii from"lodash/isEmpty.js";import Di from"lodash/isString.js";import{randomUUID as Oi}from"node:crypto";import{existsSync as Ni,mkdirSync as Pi,readFileSync as Fi,writeFileSync as Li}from"node:fs";import Hn from"node:path";var Mi="telemetry.json";function $i(){return Hn.join(ue(),Mi)}function Gn(){let o=$i();try{if(Ni(o)){let t=JSON.parse(Fi(o,"utf8"));if(Di(t.anonymous_id)&&!Ii(t.anonymous_id))return t.anonymous_id}}catch{}let e=Oi().replace(/-/g,"");try{Pi(Hn.dirname(o),{recursive:!0});let t={anonymous_id:e,created_at:new Date().toISOString()};Li(o,JSON.stringify(t,null,2),"utf8")}catch{}return e}import ji from"lodash/compact.js";import Ki from"lodash/isString.js";import Ui from"lodash/trim.js";import{existsSync as Bi,readFileSync as qi}from"node:fs";import Vn from"node:path";import{fileURLToPath as Wi}from"node:url";var Wr;function Ji(){try{let o=Vn.dirname(Wi(import.meta.url)),e=Vn.join(o,"package.json");if(!Bi(e))return;let t=JSON.parse(qi(e,"utf8"));if(t.name==="@devicelink/dlink"&&Ki(t.version))return t.version}catch{return}}function $e(){if(Wr===void 0){let o=[process.env.DLINK_AGENT_VERSION,process.env.npm_package_version,Ji()].map(e=>Ui(e));Wr=ji(o)[0]??"unknown"}return Wr}import Hi from"lodash/toLower.js";import Gi from"lodash/trim.js";var Vi=new Set(["1","true","yes","on"]),Jr=new Set(["0","false","no","off"]);function Lt(o){let e=Hi(Gi(o));if(Vi.has(e))return!0;if(Jr.has(e))return!1}function Mt(o,e){return Lt(process.env[o]??"")??e}var Zi="https://eu.i.posthog.com",es=1e4,ts=20,rs=500,ns=4e3;function os(o){return o.split(".")[0]||"unknown"}function is(){return!Mt("DLINK_TELEMETRY",!0)||Mt("DO_NOT_TRACK",!1)?!1:!!zn()}function zn(){let o=Yi(process.env.DLINK_POSTHOG_KEY||process.env.POSTHOG_PROJECT_TOKEN);return zi(o)?void 0:o}var $t=class{key;host;enabled;distinctId;base;queue;timer;inFlight;constructor(){this.key=zn(),this.host=Qi(process.env.DLINK_POSTHOG_HOST||Zi,"/"),this.enabled=is(),this.distinctId=this.enabled?Gn():"disabled",this.queue=[],this.timer=null,this.inFlight=new Set,this.base={$lib:"dlink-cli",$geoip_disable:!0,$ip:null,service:"agent",agent_version:$e(),node_version:process.versions.node.split(".")[0],os_platform:process.platform,os_release:os(Xi.release()),arch:process.arch,is_ci:Mt("CI",!1),environment:process.env.DEVICELINK_ENV??"production"}}get isEnabled(){return this.enabled}get anonymousId(){return this.distinctId}capture(e,t){if(this.enabled&&!(this.queue.length>=rs)){if(this.queue.push({event:e,distinct_id:this.distinctId,properties:{...this.base,...t},timestamp:new Date().toISOString()}),this.queue.length>=ts){this.flush();return}this.timer||(this.timer=setTimeout(()=>void this.flush(),es),this.timer.unref?.())}}async flush(){if(this.timer&&(clearTimeout(this.timer),this.timer=null),!this.enabled||this.queue.length===0)return;let e=this.queue.splice(0,this.queue.length),t=this.post(e).finally(()=>this.inFlight.delete(t));this.inFlight.add(t),await t}async shutdown(){await this.flush(),await Promise.allSettled([...this.inFlight])}async post(e){if(!this.key)return;let t=new AbortController,r=setTimeout(()=>t.abort(),ns);r.unref?.();try{await fetch(`${this.host}/batch/`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({api_key:this.key,batch:e}),signal:t.signal})}catch{}finally{clearTimeout(r)}}};var G={CLI_STARTED:"cli:session:started",CLI_EXITED:"cli:session:exited",CLI_CRASHED:"cli:session:crashed",CLI_CONFIG_LOADED:"cli:config:loaded",CLI_SIGNIN_REQUESTED:"cli:auth:signin_requested",CLI_SIGNIN_COMPLETED:"cli:auth:signin_completed",CLI_SIGNOUT:"cli:auth:signout",CLI_TOKENS_REFRESHED:"cli:auth:tokens_refreshed",CLI_WS_CONNECTED:"cli:socket:connected",CLI_WS_DISCONNECTED:"cli:socket:disconnected",CLI_WS_RETRYING:"cli:socket:retrying",CLI_SESSION_READY:"cli:socket:session_ready",CLI_SESSION_CONFLICT:"cli:socket:session_conflict",CLI_TOOL_CALL:"cli:tool:call_received"};var jt=class{name="telemetry-orchestrator";client;startedAt;reachedReady;toolCalls;constructor(){this.client=new $t,this.startedAt=Date.now(),this.reachedReady=!1,this.toolCalls=0}handlers(){return{"config:loaded":()=>{this.client.capture(G.CLI_CONFIG_LOADED)},"auth:signin:requested":()=>{this.client.capture(G.CLI_SIGNIN_REQUESTED)},"auth:signin:completed":()=>{this.client.capture(G.CLI_SIGNIN_COMPLETED,{seconds_since_start:this.elapsedSec()})},"auth:signout:requested":()=>{this.client.capture(G.CLI_SIGNOUT)},"auth:tokens:updated":()=>{this.client.capture(G.CLI_TOKENS_REFRESHED)},"ws:connected":()=>{this.client.capture(G.CLI_WS_CONNECTED)},"ws:disconnected":e=>{this.client.capture(G.CLI_WS_DISCONNECTED,{code:e.code})},"ws:retrying":e=>{this.client.capture(G.CLI_WS_RETRYING,{attempt:e.attempt,retry_in_sec:e.retryInSec})},"auth:session_init_ack":e=>{this.reachedReady=!0,this.client.capture(G.CLI_SESSION_READY,{mode:e.ok?e.mode??null:null,reason:e.ok?e.reason??null:null,seconds_since_start:this.elapsedSec()})},"auth:session_conflict":()=>{this.client.capture(G.CLI_SESSION_CONFLICT)},"tool:call":e=>{this.toolCalls+=1,this.client.capture(G.CLI_TOOL_CALL,{tool:e.tool,call_index:this.toolCalls})},"engine:crashed":e=>{this.client.capture(G.CLI_CRASHED,{reason:e.reason,detail:ss(e.detail,{length:200,omission:""})||null,uptime_sec:this.elapsedSec(),reached_session_ready:this.reachedReady,tool_calls:this.toolCalls})}}}async onStart(e){this.client.capture(G.CLI_STARTED,{headless:e.headless})}async onStop(e){this.client.capture(G.CLI_EXITED,{uptime_sec:this.elapsedSec(),reached_session_ready:this.reachedReady,tool_calls:this.toolCalls}),await this.client.shutdown()}elapsedSec(){return Math.round((Date.now()-this.startedAt)/1e3)}};function Yn(o,e){return e.headless?o.on("notify:event",t=>{as(t,e.debug)}):null}function as(o,e){if(!e&&!cs(o))return;let t=`[agent] ${o.message}`;switch(o.kind){case"error":console.error(t);break;case"warning":console.warn(t);break;default:console.log(t);break}}function cs(o){return o.kind==="error"||o.kind==="warning"||o.kind==="success"||o.scope==="system"}var Kt=class{name="os-signals-orchestrator";sigint;sigterm;async onStart(e){let t=r=>{e.notifier.warn(`received ${r}`,{scope:"system"}),e.engine.requestStop(r)};this.sigint=()=>t("SIGINT"),this.sigterm=()=>t("SIGTERM"),process.on("SIGINT",this.sigint),process.on("SIGTERM",this.sigterm)}async onStarted(e){return Promise.resolve()}async onStop(e){this.sigint&&process.off("SIGINT",this.sigint),this.sigterm&&process.off("SIGTERM",this.sigterm),this.sigint=void 0,this.sigterm=void 0,e.notifier.info("OS signal handlers removed",{scope:"system"})}async onStopped(e){return Promise.resolve()}};import Js from"react";import{render as Hs}from"ink";import{useEffect as Ls,useCallback as Gr}from"react";import{Box as Vr,useApp as Ms,useInput as $s}from"ink";import{useEffect as us,useState as ls}from"react";function Qn(){let[o,e]=ls(()=>{let t=process.stdout.columns||80,r=process.stdout.rows||24;return[t,r]});return us(()=>{let t=()=>{let r=process.stdout.columns||80,n=process.stdout.rows||24;e([r,n])};return process.stdout.on("resize",t),t(),()=>{process.stdout.off("resize",t)}},[]),o}import ro,{useEffect as Ut,useState as no}from"react";import{Box as Ke,Text as O}from"ink";import{createContext as ds,useContext as ps,useReducer as fs,useMemo as je,useEffect as Xn,useState as hs}from"react";import{jsx as vs}from"react/jsx-runtime";var Zn=ds(null);function ms(o,e){let t=o.messages,r=t.findIndex(n=>n.id===e.id);if(r!==-1){let n=t[r],i=[...t];return i[r]={...e,id:n.id,ts:n.ts},{...o,messages:i}}if(e.groupKey)for(let n=t.length-1;n>=0;n--){let i=t[n];if(i.groupKey===e.groupKey){let a=[...t];return a[n]={...e,id:i.id,ts:i.ts,groupKey:i.groupKey},{...o,messages:a}}}return{...o,messages:[...t.slice(-380),e]}}function gs(o,e){switch(e.type){case"SET_INPUT":return{...o,input:e.payload};case"ADD_MESSAGE":return ms(o,e.payload);case"SET_MESSAGES":return{...o,messages:e.payload};case"SET_ENGINE_STATE":return{...o,engineState:e.payload};case"ADD_COMMAND_TO_HISTORY":{if(!e.payload)return o;let t=o.commandHistory.length===0||o.commandHistory[o.commandHistory.length-1]!==e.payload?[...o.commandHistory,e.payload]:o.commandHistory;return{...o,commandHistory:t}}case"SET_HISTORY_INDEX":return{...o,historyIndex:e.payload};case"SET_IS_PROCESSING":return{...o,isProcessing:e.payload};case"SET_DEBUG_ENABLED":return{...o,debugEnabled:e.payload};case"SET_CONNECTION_STATUS":return{...o,connectionStatus:e.payload};case"SET_CONNECTION_RETRY":return{...o,connectionRetryInSec:e.payload};case"SET_REFRESH_COUNTDOWN":return{...o,refreshCountdownSec:e.payload};case"SET_DEVICE_ID":return{...o,deviceId:e.payload};case"RESET_INPUT":return{...o,input:""};case"RESET_HISTORY_INDEX":return{...o,historyIndex:-1};case"RESET_HISTORY_INDEX_IF_TYPING":if(o.historyIndex!==-1){let t=o.commandHistory[o.historyIndex];if(t!==void 0&&o.input!==t)return{...o,historyIndex:-1}}return o;default:return o}}var ys={input:"",messages:[],engineState:"IDLE",commandHistory:[],historyIndex:-1,isProcessing:!1,debugEnabled:!1,connectionStatus:"disconnected",connectionRetryInSec:null,refreshCountdownSec:null,deviceId:null};function eo({engine:o,bus:e,children:t}){let[r,n]=fs(gs,ys),[i,a]=hs(()=>Object.freeze({phase:o.runtime.phase,flags:Object.freeze({debug:o.runtime.flags.debug})}));Xn(()=>{e.emit("ui:initialized",Date.now())},[e]),Xn(()=>{let c=S=>S==="running"?"RUNNING":S==="stopping"?"STOPPING":S==="booting"?"IDLE":"STOPPED",l=e.on("notify:event",S=>{if(n({type:"ADD_MESSAGE",payload:S}),S.groupKey?.startsWith("auth:refresh"))if(S.kind==="info"){let T=S.message.match(/refresh scheduled in (\d+)s/);if(T){let D=parseInt(T[1],10);isNaN(D)||n({type:"SET_REFRESH_COUNTDOWN",payload:D})}}else S.kind==="success"&&S.message.includes("refresh completed")&&n({type:"SET_REFRESH_COUNTDOWN",payload:null})}),d=()=>{let S=o.runtime;n({type:"SET_ENGINE_STATE",payload:c(S.phase)}),n({type:"SET_DEBUG_ENABLED",payload:S.flags.debug});let T=o.configurationContext.configuration.device?.id??null;n({type:"SET_DEVICE_ID",payload:T}),a(Object.freeze({phase:S.phase,flags:Object.freeze({debug:S.flags.debug})}))};d();let p=e.on("engine:started",()=>{n({type:"SET_ENGINE_STATE",payload:"RUNNING"}),d()}),f=e.on("engine:stopping",()=>{n({type:"SET_ENGINE_STATE",payload:"STOPPING"}),d()}),m=e.on("engine:stopped",()=>{n({type:"SET_ENGINE_STATE",payload:"STOPPED"}),d()}),g=e.on("ws:connecting",()=>{n({type:"SET_CONNECTION_STATUS",payload:"connecting"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),h=e.on("ws:connected",()=>{n({type:"SET_CONNECTION_STATUS",payload:"connected"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),y=e.on("ws:disconnected",()=>{n({type:"SET_CONNECTION_STATUS",payload:"disconnected"}),n({type:"SET_CONNECTION_RETRY",payload:null})}),_=e.on("ws:retrying",S=>{n({type:"SET_CONNECTION_STATUS",payload:"connecting"}),n({type:"SET_CONNECTION_RETRY",payload:S.retryInSec})}),v=e.on("runtime:debug:changed",({enabled:S})=>{n({type:"SET_DEBUG_ENABLED",payload:S});let T=o.runtime;a(Object.freeze({phase:T.phase,flags:Object.freeze({debug:S})}))}),k=e.on("config:loaded",S=>{let T=S.device?.id??null;n({type:"SET_DEVICE_ID",payload:T})}),E=new ce("Welcome to DeviceLink Agent UI",{ts:Date.now(),kind:"status"}),C=new ce('Type "help" for commands. Start bridge with: start or run',{ts:Date.now(),kind:"status"});return n({type:"SET_MESSAGES",payload:[E,C]}),()=>{l.unsubscribe(),p.unsubscribe(),f.unsubscribe(),m.unsubscribe(),g.unsubscribe(),h.unsubscribe(),y.unsubscribe(),_.unsubscribe(),v.unsubscribe(),k.unsubscribe()}},[e,o,n]);let s=je(()=>({state:r,dispatch:n,engine:o,bus:e,runtime:i}),[r,o,e,i]);return vs(Zn.Provider,{value:s,children:t})}function Ae(){let o=ps(Zn);if(!o)throw new Error("useAppContext must be used within AppContextProvider");return o}function to(o){let{state:e}=Ae(),t=c=>!(c.category?.includes("token-refresh")||c.groupKey?.startsWith("auth:refresh")&&c.kind==="info"&&c.message.includes("refresh scheduled in")),r=o?.displayFilter??t,n=je(()=>e.messages.filter(r),[e.messages,r]),i=je(()=>c=>e.messages.filter(c),[e.messages]),a=je(()=>c=>e.messages.filter(l=>l.kind===c),[e.messages]),s=je(()=>c=>e.messages.filter(l=>l.scope===c),[e.messages]);return je(()=>({rawMessages:e.messages,messagesToDisplay:n,getFilteredMessages:i,getMessagesByKind:a,getMessagesByScope:s}),[e.messages,n,i,a,s])}import{Fragment as Ue,jsx as F,jsxs as J}from"react/jsx-runtime";function bs(o){return o==="RUNNING"?"green":o==="STOPPING"?"yellow":o==="STOPPED"?"red":"gray"}function Ss(o){return o==="connected"?"green":o==="connecting"?"yellow":"red"}function _s(o){return o==="connected"?"connected":o==="connecting"?"trying":"disconnected"}function oo(o,e){return o.length<=e?o:o.slice(0,Math.max(0,e-3))+"..."}function Es(o){let{state:e}=Ae(),t="DeviceLink Agent",r=e.debugEnabled,n=e.deviceId??"not signed in",i=e.engineState,a=bs(i),s=e.isProcessing,c=e.connectionStatus,l=e.connectionRetryInSec,d=e.refreshCountdownSec,[p,f]=no(d),[m,g]=no(l);Ut(()=>{f(d)},[d]),Ut(()=>{g(l)},[l]),Ut(()=>{if(d===null||d<=0){f(null);return}f(d);let S=setInterval(()=>{f(T=>T===null||T<=1?null:T-1)},1e3);return()=>clearInterval(S)},[d]),Ut(()=>{if(l===null||l<=0){g(null);return}g(l);let S=setInterval(()=>{g(T=>T===null||T<=1?null:T-1)},1e3);return()=>clearInterval(S)},[l]);let h=_s(c),y=Ss(c),_=t.length,v=30,k=o.width-_-2,E=[];if(E.push(F(O,{color:y,children:h},"conn")),m!==null&&m>0&&E.push(J(O,{color:y,children:["retry in ",m,"s"]},"retry")),p!==null&&p>0&&p<=5&&E.push(J(O,{color:"cyan",children:["refresh in ",p,"s"]},"refresh")),k>=v){let S=oo(n,Math.max(5,k-50));return J(Ke,{justifyContent:"space-between",width:o.width,children:[J(Ke,{children:[F(O,{bold:!0,children:t}),r&&J(Ue,{children:[F(O,{children:" "}),F(O,{color:"yellow",bold:!0,children:"[DEBUG]"})]})]}),J(Ke,{children:[s&&F(Ue,{children:F(O,{dimColor:!0,children:"\u23F3 "})}),F(O,{dimColor:!0,children:"device "}),J(O,{children:[S," "]}),F(O,{children:"\xB7 "}),F(O,{color:a,children:i}),E.length>0&&J(Ue,{children:[F(O,{children:" \xB7 "}),E.map((T,D)=>J(ro.Fragment,{children:[D>0&&F(O,{children:" \xB7 "}),T]},D))]})]})]})}let C=oo(n,o.width-8);return J(Ke,{flexDirection:"column",width:o.width,children:[J(Ke,{children:[F(O,{bold:!0,children:t}),r&&J(Ue,{children:[F(O,{children:" "}),F(O,{color:"yellow",bold:!0,children:"[DEBUG]"})]})]}),J(Ke,{children:[s&&F(Ue,{children:F(O,{dimColor:!0,children:"\u23F3 "})}),F(O,{dimColor:!0,children:"device "}),J(O,{children:[C," "]}),F(O,{children:"\xB7 "}),F(O,{color:a,children:i}),E.length>0&&J(Ue,{children:[F(O,{children:" \xB7 "}),E.map((S,T)=>J(ro.Fragment,{children:[T>0&&F(O,{children:" \xB7 "}),S]},T))]})]})]})}var io=Es;import co,{useMemo as so}from"react";import{Box as ks,Text as Ie}from"ink";import{jsx as De,jsxs as ao}from"react/jsx-runtime";function Ts(o){return o==="error"?"red":o==="warning"?"yellow":o==="success"?"green":o==="info"?"cyan":"white"}function ws(o){return o==="error"?"ERROR":o==="warning"?"WARN":o==="success"?"SUCCESS":o==="info"?"INFO":o==="status"?"STATUS":"INFO"}function Rs(o){let e=new Date(o),t=String(e.getHours()).padStart(2,"0"),r=String(e.getMinutes()).padStart(2,"0"),n=String(e.getSeconds()).padStart(2,"0");return`${t}:${r}:${n}`}function Cs(o,e){if(typeof o!="string"&&(o=String(o??"")),o.length<=e)return[o];let t=[],r="",n=o.split(/(\s+)/);for(let i of n)if((r+i).length<=e)r+=i;else{r&&t.push(r),r="";let a=i;for(;a.length>e;)t.push(a.slice(0,e)),a=a.slice(e);r=a}return r&&t.push(r),t.length>0?t:[o]}var xs=co.memo(function(e){let{messagesToDisplay:t}=to(),r=e.height??14,c=Math.max(20,e.width-9-8-2-2),l=so(()=>t.slice(-r),[t,r]),p=so(()=>l.flatMap(f=>{let m=Rs(f.ts),g=ws(f.kind);return Cs(f.message,c).map((y,_)=>({msg:f,lineIndex:_,time:_===0?m:"",kind:_===0?g:"",message:y,isContinuation:_>0}))}),[l,c]).slice(-r);return De(ks,{flexDirection:"column",borderStyle:"round",borderColor:"gray",paddingX:1,height:r+2,width:e.width,children:p.length===0?De(Ie,{dimColor:!0,children:"(no messages)"}):p.map(f=>De(As,{item:f},`${f.msg.id}:${f.lineIndex}`))})},(o,e)=>o.height===e.height&&o.width===e.width),As=co.memo(function({item:e}){return ao(Ie,{children:[e.time&&ao(Ie,{dimColor:!0,children:[e.time," "]}),e.kind&&De(Ie,{color:Ts(e.msg.kind,e.msg.scope),children:e.kind}),e.kind&&De(Ie,{children:" "}),e.isContinuation&&De(Ie,{dimColor:!0,children:" "}),De(Ie,{dimColor:e.msg.scope==="system",children:e.message})]})}),uo=xs;import Is from"react";import{Box as Bt,Text as Hr,useFocus as Ds}from"ink";import Os from"ink-text-input";import{jsx as Be,jsxs as lo}from"react/jsx-runtime";var Ns=Is.memo(function(e){let{state:t,dispatch:r}=Ae(),{isFocused:n}=Ds({autoFocus:!0,isActive:!t.isProcessing}),i=e.isPassphraseMode?"passphrase> ":"dlink> ",a=Math.max(10,e.width-i.length-2);return lo(Bt,{flexDirection:"column",width:e.width,children:[lo(Bt,{width:e.width,children:[Be(Hr,{color:e.isPassphraseMode?"cyan":"green",children:i}),Be(Bt,{width:a,children:t.isProcessing?Be(Hr,{dimColor:!0,italic:!0,children:"Processing..."}):Be(Os,{value:t.input,onChange:s=>r({type:"SET_INPUT",payload:s}),onSubmit:e.onSubmit,placeholder:n?void 0:e.isPassphraseMode?"Enter passphrase...":'Type a command or "help"',mask:e.isPassphraseMode?"*":void 0},`input-${t.historyIndex}-${e.isPassphraseMode?"passphrase":"normal"}`)})]}),e.passphraseError&&Be(Bt,{marginTop:1,children:Be(Hr,{color:"red",children:e.passphraseError})})]})}),po=Ns;import{Component as Ps}from"react";import{Box as qe,Text as qt}from"ink";import{Fragment as Fs,jsx as ve,jsxs as fo}from"react/jsx-runtime";var Ze=class extends Ps{constructor(e){super(e),this.state={hasError:!1,error:null}}static getDerivedStateFromError(e){return{hasError:!0,error:e}}componentDidCatch(e,t){this.props.onError&&this.props.onError(e,t)}render(){return this.state.hasError&&this.state.error?ve(qe,{flexDirection:"column",padding:1,children:ve(qe,{borderStyle:"round",borderColor:"red",paddingX:1,children:fo(qe,{flexDirection:"column",children:[ve(qt,{color:"red",bold:!0,children:"\u26A0\uFE0F  Application Error"}),ve(qe,{height:1}),ve(qt,{color:"red",children:this.state.error.message}),this.state.error.stack&&fo(Fs,{children:[ve(qe,{height:1}),ve(qt,{dimColor:!0,children:this.state.error.stack})]}),ve(qe,{height:1}),ve(qt,{dimColor:!0,children:"Press Ctrl+C to exit"})]})})}):this.props.children}};import{jsx as Te,jsxs as Ks}from"react/jsx-runtime";function js(){let{exit:o}=Ms(),{state:e,dispatch:t,engine:r,bus:n}=Ae(),[i,a]=Qn(),s=i,c=a,l=Gr(g=>n.emit("console:command",g),[n]),d=Math.max(5,c-5),p=Math.min(d-3,Math.max(5,Math.floor(d*.7)));$s((g,h)=>{if(h.ctrl&&g==="c"){r.requestStop("user exit");return}if(!e.isProcessing&&(h.upArrow||h.downArrow)){if(e.commandHistory.length===0)return;if(h.upArrow){let y=e.historyIndex===-1?e.commandHistory.length-1:Math.max(0,e.historyIndex-1);t({type:"SET_HISTORY_INDEX",payload:y}),t({type:"SET_INPUT",payload:e.commandHistory[y]})}else if(h.downArrow){if(e.historyIndex===-1)return;let y=e.historyIndex+1;y>=e.commandHistory.length?(t({type:"SET_HISTORY_INDEX",payload:-1}),t({type:"SET_INPUT",payload:""})):(t({type:"SET_HISTORY_INDEX",payload:y}),t({type:"SET_INPUT",payload:e.commandHistory[y]}))}}}),Ls(()=>{t({type:"RESET_HISTORY_INDEX_IF_TYPING"})},[e.input,t]);let f=Gr(async g=>{let h=g.trim();t({type:"RESET_INPUT"}),t({type:"RESET_HISTORY_INDEX"}),h&&t({type:"ADD_COMMAND_TO_HISTORY",payload:h}),t({type:"SET_IS_PROCESSING",payload:!0});try{await l(h)}catch(y){let _=K(y),v=new ce(`Command failed: ${_}`,{ts:Date.now(),kind:"error"});t({type:"ADD_MESSAGE",payload:v})}finally{t({type:"SET_IS_PROCESSING",payload:!1})}},[t,o,l,r]),m=Gr((g,h)=>{let y=new ce(`UI Error: ${g.message}`,{ts:Date.now(),kind:"error"});t({type:"ADD_MESSAGE",payload:y})},[t]);return Te(Ze,{onError:m,children:Ks(Vr,{flexDirection:"column",padding:1,width:s,children:[Te(io,{width:s-2}),Te(Vr,{height:1}),Te(uo,{height:p,width:s-2}),Te(Vr,{height:1}),Te(po,{width:s-2,onSubmit:f})]})})}function zr({engine:o,bus:e}){return Te(eo,{engine:o,bus:e,children:Te(js,{})})}import Yr from"node:fs";import Us from"node:os";import Qr from"node:tty";function Bs(o){let e=o.setRawMode;return typeof e!="function"||(o.setRawMode=t=>{try{return e.call(o,t)}catch(r){let n=typeof r=="object"&&r!==null&&"code"in r?r.code:void 0;if(n==="EPERM"||n==="EINVAL")return o;throw r}}),o}var et;function Xr(){if(et!==void 0)return et;let o;if(process.stdin.isTTY)o=process.stdin;else try{if(Us.platform()==="win32")try{let e=Yr.openSync("CONIN$","rs");o=new Qr.ReadStream(e)}catch{let e=Yr.openSync("\\\\.\\CONIN$","rs");o=new Qr.ReadStream(e)}else{let e=Yr.openSync("/dev/tty","rs");o=new Qr.ReadStream(e)}}catch{return et=null,null}return et=Bs(o),et}function qs(){return Xr()===null}function Ws(o){for(let e of o){let t=e.trim(),r=t.toLowerCase();if(r==="--headless")return"on";if(r.startsWith("--headless=")){let n=t.slice(t.indexOf("=")+1).trim().toLowerCase();return Jr.has(n)?"off":"on"}}return"unset"}function ho(o){let e=Ws(o);if(e==="on")return{headless:!0,reason:"CLI: --headless"};if(e==="off")return{headless:!1,reason:"CLI: --headless=false"};let t=process.env.HEADLESS;if(t!==void 0&&t.trim()!==""){let i=Lt(t);if(i!==void 0)return{headless:i,reason:i?"env: HEADLESS":"env: HEADLESS=false"}}let r=process.env.DLINK_HEADLESS;if(r!==void 0&&r.trim()!==""){let i=Lt(r);if(i!==void 0)return{headless:i,reason:i?"env: DLINK_HEADLESS":"env: DLINK_HEADLESS=false"}}return qs()?{headless:!0,reason:"no TTY stdin (Docker/CI/background)"}:{headless:!1,reason:"TTY available (interactive)"}}function mo(o,e){let t=o.runtime.flags.headless?null:Xr();if(!t){o.runtime.flags.headless?console.log(`[agent] Headless UI (${o.runtime.flags.headlessReason})`):console.warn(`[agent] No TTY stdin; non-interactive boot (${o.runtime.flags.headlessReason})`),e.emit("ui:initialized",Date.now());let n=setInterval(()=>{},6e4);return new Promise(i=>{process.on("SIGTERM",()=>{clearInterval(n),i()}),process.on("SIGINT",()=>{clearInterval(n),i()})})}let{waitUntilExit:r}=Hs(Js.createElement(zr,{engine:o,bus:e}),{stdin:t});return r()}var Wt=class{handlers=new Map;subcommandHandlers=new Map;command(e,t){if(this.handlers.has(e))throw new Error(`Command '${e}' is already registered`);return this.handlers.set(e,t),this}subcommand(e,t,r){this.subcommandHandlers.has(e)||this.subcommandHandlers.set(e,new Map);let n=this.subcommandHandlers.get(e);if(n.has(t))throw new Error(`Subcommand '${e} ${t}' is already registered`);return n.set(t,r),this}commandStringToArgv(e){let t=[],r="",n=!1,i="";for(let a=0;a<e.length;a++){let s=e[a];s==='"'||s==="'"?n&&s===i?(t.push(r),r="",n=!1,i=""):n?r+=s:(r&&(t.push(r),r=""),n=!0,i=s):s===" "&&!n?r&&(t.push(r),r=""):r+=s}return(n||r)&&t.push(r),["node","script",...t]}parseString(e){let t=this.commandStringToArgv(e);return this.parse(t)}parse(e){let t=e.slice(2);if(t.length===0)return null;let r={command:"",args:[],options:{}},n=0;for(;n<t.length&&t[n]?.startsWith("--");)n++;if(n>=t.length||!t[n])return null;for(r.command=t[n],n++;n<t.length&&t[n]?.startsWith("--");)n++;for(n<t.length&&t[n]&&!t[n].startsWith("--")&&(r.subcommand=t[n],n++);n<t.length;){let i=t[n];if(i.startsWith("--")){let a=i.slice(2);if(a.includes("=")){let[s,c]=a.split("=",2);r.options[s]=c||!0}else{let s=t[n+1];s&&!s.startsWith("--")?(r.options[a]=s,n++):r.options[a]=!0}}else r.args.push(i);n++}return r}async execute(e){let t=this.parse(e);if(!t)return!1;if(t.subcommand){let n=this.subcommandHandlers.get(t.command);if(n){let i=n.get(t.subcommand);if(i)return await i(t),!0}}let r=this.handlers.get(t.command);return r?(await r(t),!0):!1}hasCommand(e,t){return t?this.subcommandHandlers.get(e)?.has(t)??!1:this.handlers.has(e)}getCommands(){return Array.from(this.handlers.keys())}};var Zr=class{kind;payloadJson;constructor(e,t){this.kind=e,this.payloadJson=t}},Jt=class{matchers=[];register(e){return this.matchers.push(e),this}build(e){let t=[e.command];e.subcommand&&t.push(e.subcommand);for(let r of this.matchers){let n=r(t,e);if(n.handled){let i;if(n.job)i=n.job;else if(n.kind)i=this.createCommandInput(n.kind,e);else return null;return i}}return null}createCommandInput(e,t){let r={command:t.command,subcommand:t.subcommand,args:t.args,options:t.options};return new Zr(e,JSON.stringify(r))}};var Ht=class{name="console-orchestrator";commandParser;commandJobBuilder;constructor(){this.commandParser=new Wt,this.commandJobBuilder=new Jt,this.setupCommandMappings()}onRegister(e){}async onStart(e){e.notifier.info("Starting console orchestrator (UI)",{scope:"system"}),e.on("console:command",async t=>{try{let r=this.commandParser.parseString(t);if(!r){e.notifier.warn("Invalid command format");return}let n=this.commandJobBuilder.build(r);if(!n){e.notifier.warn(`Unknown command: ${r.command}${r.subcommand?" "+r.subcommand:""}`);return}switch(n.kind){case"signin":e.bus.emit("auth:signin:requested",void 0),e.notifier.info("Sign-in requested");break;case"signout":e.bus.emit("auth:signout:requested",void 0),e.notifier.info("Sign-out requested");break;case"debug-on":e.flags.debug=!0,e.bus.emit("runtime:debug:changed",{enabled:!0}),e.notifier.success("Debug mode enabled");break;case"debug-off":e.flags.debug=!1,e.bus.emit("runtime:debug:changed",{enabled:!1}),e.notifier.success("Debug mode disabled");break;case"replace":e.bus.emit("auth:session_conflict:resolve",{choice:"USE_NEW"});break;default:e.notifier.warn(`Command not implemented: ${n.kind}`);break}}catch(r){let n=K(r);e.notifier.error(`Command failed: ${n}`,{scope:"system"})}})}async onStarted(e){e.notifier.info("Console orchestrator started",{scope:"system"}),mo(e.engine,e.bus)}async onStop(e){e.notifier.info("UI exited, stopping engine",{scope:"system"}),e.engine&&e.engine.requestStop("UI exited")}async onStopped(e){}setupCommandMappings(){let e=this.commandJobBuilder;e.register(t=>{if(t.length===1){let r=t[0];if(r==="start"||r==="run")return{handled:!0,kind:"start"};if(r==="stop")return{handled:!0,kind:"stop"};if(r==="signin")return{handled:!0,kind:"signin"};if(r==="signout")return{handled:!0,kind:"signout"};if(r==="status")return{handled:!0,kind:"status"};if(r==="doctor")return{handled:!0,kind:"doctor"};if(r==="replace"||r==="yes"||r==="y")return{handled:!0,kind:"replace"}}return{handled:!1}}),e.register(t=>{if(t.length===2){let[r,n]=t;if(r==="roots"){if(n==="add")return{handled:!0,kind:"roots-add"};if(n==="list")return{handled:!0,kind:"roots-list"}}if(r==="debug"){if(n==="on")return{handled:!0,kind:"debug-on"};if(n==="off")return{handled:!0,kind:"debug-off"}}}return{handled:!1}}),e.register((t,r)=>{if(t.length===1&&t[0]==="debug"&&r.args.length>0){let n=r.args[0];if(n==="on")return{handled:!0,kind:"debug-on"};if(n==="off")return{handled:!0,kind:"debug-off"}}return{handled:!1}})}};import Oe from"ws";var Gt=class{ws=null;state={kind:"DISCONNECTED"};stopped=!1;connecting=!1;connId=0;connectionTimeout=null;heartbeatInterval=null;heartbeatTimeout=null;awaitingPong=!1;sendQueue=[];url;abortSignal;connectionTimeoutMs;heartbeatIntervalMs;pongTimeoutMs;maxSendQueueSize;sendQueueItemTtlMs;onStateChangeCallback;onErrorCallback;onConnectedCallback;onDisconnectedCallback;onMessageCallback;constructor(e,t={}){this.url=e,this.abortSignal=t.abortSignal,this.connectionTimeoutMs=t.connectionTimeoutMs??1e4,this.heartbeatIntervalMs=t.heartbeatIntervalMs??2e4,this.pongTimeoutMs=t.pongTimeoutMs??1e4,this.maxSendQueueSize=t.maxSendQueueSize??1e3,this.sendQueueItemTtlMs=t.sendQueueItemTtlMs??6e4,this.abortSignal&&this.abortSignal.addEventListener("abort",()=>{this.stop()},{once:!0})}registerOnStateChangeCallback(e){this.onStateChangeCallback=e}registerOnErrorCallback(e){this.onErrorCallback=e}registerOnConnectedCallback(e){this.onConnectedCallback=e}registerOnDisconnectedCallback(e){this.onDisconnectedCallback=e}registerOnMessageCallback(e){this.onMessageCallback=e}getState(){return this.state}getSocket(){return this.ws}isConnected(){return this.ws?.readyState===Oe.OPEN}async connect(){if(this.stopped)throw new Error("Socket is stopped");if(!(this.connecting||this.isConnected())){this.connecting=!0,this.updateState({kind:"CONNECTING"});try{await this.connectWebSocketOnce()}catch(e){let t=e instanceof Error?e:new Error(String(e));throw this.onErrorCallback?.(t),this.updateState({kind:"DISCONNECTED"}),t}finally{this.connecting=!1}}}stop(){this.stopped=!0,this.disconnect(!0)}reset(){this.stopped=!1}disconnect(e=!1){e&&(this.stopped=!0),this.connectionTimeout&&(clearTimeout(this.connectionTimeout),this.connectionTimeout=null),this.stopHeartbeat();let t=this.ws;this.ws=null,this.connecting=!1,t&&this.closeGracefullyThenTerminate(t,1e3,"client disconnect",2e3),this.updateState({kind:"DISCONNECTED"})}send(e,t){if(this.stopped){t?.(new Error("Socket is stopped"));return}let r=this.ws;if(r&&r.readyState===Oe.OPEN){r.send(e,i=>t?.(i??void 0));return}let n=Date.now();if(this.pruneSendQueue(n),this.sendQueue.length>=this.maxSendQueueSize){t?.(new Error(`Send queue full (max ${this.maxSendQueueSize})`));return}this.sendQueue.push({data:e,cb:t,expiresAt:n+this.sendQueueItemTtlMs})}closeGracefullyThenTerminate(e,t,r,n){try{(e.readyState===Oe.OPEN||e.readyState===Oe.CONNECTING)&&e.close(t,r)}catch{}let i=setTimeout(()=>{try{e.terminate()}catch{}},n);e.once("close",()=>clearTimeout(i))}async connectWebSocketOnce(){let e=++this.connId;return new Promise((t,r)=>{if(this.stopped){r(new Error("Socket is stopped"));return}let n=!1,i=!1,a=()=>{this.connectionTimeout&&(clearTimeout(this.connectionTimeout),this.connectionTimeout=null)},s=()=>{i||(i=!0,a(),t())},c=(d,p)=>{i||(i=!0,a(),p&&this.closeGracefullyThenTerminate(p,1e3,"connect failed",1500),r(d))},l;try{l=new Oe(this.url),this.connectionTimeout=setTimeout(()=>{c(new Error(`Connection timeout: unable to connect to ${this.url} within ${this.connectionTimeoutMs}ms`),l)},this.connectionTimeoutMs),l.on("open",()=>{if(n=!0,e!==this.connId){this.closeGracefullyThenTerminate(l,1e3,"stale connection",500);return}this.ws=l,this.retryResetOnConnect(),this.updateState({kind:"CONNECTED"}),this.onConnectedCallback?.(l),this.startHeartbeat(e),this.flushSendQueue(),s()}),l.on("error",d=>{if(e!==this.connId)return;let p=d instanceof Error?d:new Error(String(d));if(!n&&!i){c(p,l);return}this.onErrorCallback?.(p)}),l.on("close",(d,p)=>{if(e!==this.connId)return;let f=p?.toString?.()||"";if(!n&&!i){this.ws=null,this.stopHeartbeat(),this.updateState({kind:"DISCONNECTED"}),c(new Error(`WebSocket closed before connection established: ${d} ${f}`),l);return}this.ws===l&&(this.ws=null),this.stopHeartbeat(),this.updateState({kind:"DISCONNECTED"}),this.onDisconnectedCallback?.(d,f||`code ${d}`)}),l.on("message",d=>{if(e!==this.connId){this.onErrorCallback?.(new Error("Message ignored - connection ID mismatch"));return}if(this.ws!==l){this.onErrorCallback?.(new Error("Message ignored - socket mismatch"));return}this.onMessageCallback?.(d)}),l.on("pong",()=>{e===this.connId&&(this.awaitingPong=!1,this.heartbeatTimeout&&(clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=null))}),this.abortSignal&&this.abortSignal.addEventListener("abort",()=>{e===this.connId&&(this.closeGracefullyThenTerminate(l,1e3,"aborted",1e3),i||c(new Error("Connection aborted"),l))},{once:!0})}catch(d){let p=d instanceof Error?d:new Error(String(d));r(p)}})}retryResetOnConnect(){}startHeartbeat(e){this.stopHeartbeat(),this.ws&&(this.awaitingPong=!1,this.heartbeatInterval=setInterval(()=>{if(this.stopped||e!==this.connId)return;let r=this.ws;if(!(!r||r.readyState!==Oe.OPEN)){if(this.awaitingPong){this.closeGracefullyThenTerminate(r,4e3,"pong timeout",1e3);return}this.awaitingPong=!0;try{r.ping()}catch{this.closeGracefullyThenTerminate(r,1011,"ping failed",1e3);return}this.heartbeatTimeout&&clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=setTimeout(()=>{if(e!==this.connId)return;let n=this.ws;n&&this.closeGracefullyThenTerminate(n,4e3,"pong timeout",1e3)},this.pongTimeoutMs)}},this.heartbeatIntervalMs))}stopHeartbeat(){this.awaitingPong=!1,this.heartbeatInterval&&(clearInterval(this.heartbeatInterval),this.heartbeatInterval=null),this.heartbeatTimeout&&(clearTimeout(this.heartbeatTimeout),this.heartbeatTimeout=null)}flushSendQueue(){let e=this.ws;if(!e||e.readyState!==Oe.OPEN)return;let t=Date.now();this.pruneSendQueue(t);let r=this.sendQueue;this.sendQueue=[];for(let n of r)e.send(n.data,i=>n.cb?.(i??void 0))}pruneSendQueue(e){if(this.sendQueue.length===0)return;let t=[];for(let r of this.sendQueue)r.expiresAt>=e?t.push(r):r.cb?.(new Error("Send dropped: queued item expired"));this.sendQueue=t}updateState(e){this.state=e,this.onStateChangeCallback?.(e)}};var Vt=class{name="websocket-orchestrator";socket=null;stopped=!1;connectLoopInFlight=null;retryAttempt=0;countdownTimer=null;lastUrl=null;async onStart(e){e.notifier.info("WS: orchestrator started",{scope:"system"})}async onStarted(e){let t=e.engine.configurationContext.configuration;await this.isConnectableToBridge(t,e)&&this.ensureStarted(e,"onStarted")}async onStop(e){this.stopped=!0,this.clearCountdown(),this.socket&&(e.notifier.info("WS: stopping socket (onStop)",{scope:"system"}),this.socket.stop(),this.socket=null),e.notifier.info("WS: orchestrator stopped",{scope:"system"})}handlers(){let e=async(t,r)=>{if(this.stopped)return;let n=r.engine.configurationContext.configuration;await this.isConnectableToBridge(n,r)&&this.ensureStarted(r,t)};return{"config:cache:validated":async(t,r)=>e("config:cache:validated",r),"auth:signout:requested":async(t,r)=>{r.notifier.info("WS: sign-out requested -> disconnecting"),this.stopped=!0,this.clearCountdown(),this.socket?.stop(),this.socket=null},"ws:disconnect":async(t,r)=>{r.notifier.info("WS: disconnect requested",{scope:"system"}),this.stopped=!0,this.clearCountdown(),this.socket?.stop(),this.socket=null},"auth:ws:reconnect":async(t,r)=>{r.notifier.info("WS: reconnect requested by auth",{scope:"system"}),this.retryAttempt=0,this.clearCountdown(),this.stopped=!0,this.socket?.stop(),this.connectLoopInFlight&&await this.connectLoopInFlight.catch(()=>{}),this.socket=null,this.stopped=!1,this.ensureStarted(r,"auth:ws:reconnect")},"ws:tx":async(t,r)=>{let n=this.socket?.getSocket();if(!n||n.readyState!==1){r.notifier.info("WS: TX dropped (not connected)",{scope:"system"});return}n.send(t.text)}}}ensureStarted(e,t){if(this.connectLoopInFlight){e.notifier.info(`WS: connect loop already running (reason=${t})`,{scope:"system"});return}let r=this.socket?.getSocket();if(r&&r.readyState<=1){e.notifier.info(`WS: already connected/connecting, skipping (reason=${t})`,{scope:"system"});return}this.connectLoopInFlight=this.startOrJoinConnectLoop(e,t).finally(()=>{this.connectLoopInFlight=null})}async startOrJoinConnectLoop(e,t){this.stopped=!1;let r=e.engine.configurationContext.configuration;if(!await this.isConnectableToBridge(r,e))return;let i=String(r.bridgeWsUrl);if(this.lastUrl=i,e.notifier.info(`WS: ensure connection (reason=${t}) url=${i}`,{scope:"system"}),!this.socket){let a=new Gt(i,{abortSignal:e.signal,connectionTimeoutMs:1e4,heartbeatIntervalMs:2e4,pongTimeoutMs:1e4});this.socket=a,a.registerOnStateChangeCallback(s=>this.handleStateChange(s,e)),a.registerOnErrorCallback(s=>{e.notifier.error(`WS: transport error: ${s.message}`)}),a.registerOnConnectedCallback(s=>{this.socket===a&&(this.retryAttempt=0,this.clearCountdown(),e.notifier.success(e.flags.debug?`WS: connected (${i})`:"WS: connected"),e.bus.emit("ws:connected",{url:i,attempt:0}))}),a.registerOnDisconnectedCallback((s,c)=>{if(this.socket!==a){e.notifier.info(`WS: ignoring stale disconnect (code=${s})`,{scope:"system"});return}if(e.notifier.warn(`WS: disconnected code=${s} reason=${c||"-"}`),e.bus.emit("ws:disconnected",{code:s,reason:c}),this.stopped){e.notifier.info(`WS: stopped flag set, skipping auto-reconnect (code=${s})`,{scope:"system"});return}if(s===4001){e.notifier.info("WS: auth disconnect (4001) -> waiting for auth",{scope:"system"});return}if(s===4011){this.stopped=!0,this.socket?.stop(),this.socket=null;return}this.ensureStarted(e,"socket:disconnected")}),a.registerOnMessageCallback(s=>{if(this.socket!==a)return;let c=typeof s=="string"?s:s.toString("utf8");e.bus.emit("ws:rx",{text:c})})}for(;!this.stopped;)try{let a=this.retryAttempt+1;e.notifier.info(`WS: connecting attempt #${a} to ${i}`,{scope:"system",groupKey:"ws:connecting"}),e.bus.emit("ws:connecting",{url:i,attempt:a}),await this.socket.connect();return}catch(a){if(this.stopped)return;this.retryAttempt+=1;let s=this.computeBackoffMs(this.retryAttempt),c=Math.max(1,Math.ceil(s/1e3)),l=K(a);e.notifier.warn(`WS: connect failed (attempt=${this.retryAttempt}) -> retry in ${c}s (${l})`,{scope:"system",category:["websocket-connect"],groupKey:"ws:connect-retry"});let d={retryInSec:c,attempt:this.retryAttempt};e.bus.emit("ws:retrying",d),this.startCountdown(c,e),await this.interruptibleSleep(s)}}async isConnectableToBridge(e,t){if(!e.device?.id)return t.notifier.error("WS: cannot connect: device.id missing"),!1;if(!e.bridgeWsUrl)return t.notifier.error("WS: cannot connect: bridgeWsUrl missing"),!1;if(!e.device?.keys?.public)return t.notifier.error("WS: cannot connect: device public key missing"),!1;let r=await t.engine.secrets.get("refreshToken");return!!r.ok&&!!r.value?!0:(t.notifier.warn("WS: not connecting (no tokens). Run signin."),!1)}handleStateChange(e,t){e.kind==="CONNECTING"&&t.notifier.info(`WS: state CONNECTING (url=${this.lastUrl})`,{scope:"system"}),e.kind==="CONNECTED"&&t.notifier.info(`WS: state CONNECTED (url=${this.lastUrl})`,{scope:"system"}),e.kind==="DISCONNECTED"&&t.notifier.info(`WS: state DISCONNECTED (url=${this.lastUrl})`,{scope:"system"})}computeBackoffMs(e){let t=Math.min(3e4,1e3*Math.pow(2,Math.min(e-1,5))),r=t*(.2*(Math.random()*2-1));return Math.max(250,Math.floor(t+r))}startCountdown(e,t){this.clearCountdown();let r=e;this.countdownTimer=setInterval(()=>{if(r-=1,r<=0){this.clearCountdown();return}let n={retryInSec:r,attempt:this.retryAttempt};t.bus.emit("ws:retrying",n)},1e3)}clearCountdown(){this.countdownTimer&&(clearInterval(this.countdownTimer),this.countdownTimer=null)}async interruptibleSleep(e){let r=Date.now();for(;Date.now()-r<e;){if(this.stopped)return;await br(100)}}};import go from"node:fs";import Gs from"node:path";var zt=class{static save(e){let t=this.getApplicationConfigFolder(),r=Gs.join(t,"config.json"),n=this.stripSecrets(e);return go.mkdirSync(t,{recursive:!0}),go.writeFileSync(r,JSON.stringify(n,null,2),"utf8"),r}static stripSecrets(e){let t=e.device?{id:e.device.id,name:e.device.name,tag:e.device.tag,keys:{public:e.device.keys.public}}:void 0,r=e.tokens?{accessTokenExpSec:e.tokens.accessTokenExpSec}:void 0;return{...e,device:t,tokens:r}}static getApplicationConfigFolder(){return ue()}};var Yt=class{name="main-orchestrator";bootStarted=!1;saveTimer=null;saveInFlight=null;latestConfigToSave=null;saveDebounceMs=500;async onStop(e){await this.flushSaveOnStop()}handlers(){return{"ui:initialized":async(e,t)=>{this.bootStarted||(this.bootStarted=!0,t.engine.setPhase("booting"),t.notifier.info("Booting..."),t.engine.dispatch(Fn(new Nt)))},"config:save:requested":async(e,t)=>{this.latestConfigToSave=e,this.saveTimer&&clearTimeout(this.saveTimer),this.saveTimer=setTimeout(()=>{this.performSave(t)},this.saveDebounceMs)}}}async performSave(e){this.saveInFlight||(this.saveInFlight=(async()=>{for(;this.latestConfigToSave;){let t=this.latestConfigToSave;this.latestConfigToSave=null;try{let r=zt.save(t);e.notifier.info(`Config saved to: ${r}`,{scope:"system"}),e.bus.emit("config:saved",void 0)}catch(r){let n=K(r);e.notifier.error(`Failed to save configuration: ${n}`)}}})().finally(()=>{this.saveInFlight=null}),await this.saveInFlight)}async flushSaveOnStop(){this.saveTimer&&(clearTimeout(this.saveTimer),this.saveTimer=null)}};import{decodeJwt as xa}from"jose";import tn from"node:crypto";import{z as u}from"zod";var Vs=u.object({name:u.string().min(1),description:u.string().optional(),inputSchema:u.any().optional(),outputSchema:u.any().optional(),defaults:u.record(u.string(),u.unknown()).optional(),version:u.string().optional(),errorCodes:u.array(u.string()).optional()}),zs=u.object({id:u.string().min(1),name:u.string().min(1),path:u.string().optional(),path_hint:u.string().optional(),policy:u.any().optional()}),Ys=u.object({type:u.literal("connect"),device_id:u.string().min(1),agent_version:u.string().min(1),protocol_version:u.number().int().min(1).default(2),capabilities:u.array(u.string()).default([]),platform:u.string().optional(),hostname:u.string().optional(),device_tag:u.string().optional(),ts:u.number(),nonce:u.string().min(8),sig:u.string().min(16),access_token:u.string().optional(),refresh_token:u.string().min(20).optional(),public_key_pem:u.string().optional()}).passthrough(),Qs=u.object({type:u.literal("connect_ack"),ok:u.literal(!0),session_id:u.string().min(1),device_id:u.string().min(1),server_time:u.number(),auth:u.object({device_proof:u.literal("ok"),access_token:u.enum(["ok","expired","invalid","missing"])}),next:u.array(u.enum(["refresh_access_token","session_init"])).min(1),workspace_id:u.string().optional()}).strict(),Xs=u.object({type:u.literal("connect_ack"),ok:u.literal(!1),session_id:u.string().optional(),server_time:u.number(),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),Zs=u.union([Qs,Xs]),ea=u.object({type:u.literal("refresh_access_token"),device_id:u.string().min(1),ts:u.number(),nonce:u.string().min(8),refresh_token:u.string().min(20),sig:u.string().min(16),session_id:u.string().min(1).optional()}).strict(),ta=u.object({type:u.literal("refresh_access_token_ack"),ok:u.literal(!0),access_token:u.string().min(1),refresh_token:u.string().min(20),expires_in_sec:u.number().int().positive().optional(),next:u.array(u.literal("session_init")).default(["session_init"])}).strict(),ra=u.object({type:u.literal("refresh_access_token_ack"),ok:u.literal(!1),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),na=u.union([ta,ra]),oa=u.object({type:u.literal("session_init"),device_id:u.string().min(1),session_id:u.string().min(1)}).strict(),ia=u.object({type:u.literal("session_init_ack"),ok:u.literal(!0),device_id:u.string().min(1),session_id:u.string().min(1),mode:u.enum(["ACTIVE","ACTIVE_RECLAIMED","STANDBY"]),reason:u.string().optional(),server_time:u.number(),next:u.array(u.enum(["tools_publish","directories_publish"])).optional(),server_protocol_version:u.number().default(2),min_agent_version:u.string().optional(),upgrade_message:u.string().optional(),upgrade_url:u.string().optional()}).passthrough(),sa=u.object({type:u.literal("session_init_ack"),ok:u.literal(!1),device_id:u.string().min(1),server_time:u.number(),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).passthrough(),aa=u.union([ia,sa]),ca=u.object({type:u.literal("session_conflict"),device_id:u.string().min(1),new_session_id:u.string().min(1),max_sessions:u.number().int().positive(),active_count:u.number().int().nonnegative(),deadline_ms:u.number().int().positive(),message:u.string().min(1),choices:u.array(u.object({id:u.enum(["USE_NEW","KEEP_OLD"]),default:u.boolean().optional(),prompt:u.string().optional()})).min(1)}).strict(),ua=u.object({type:u.literal("session_conflict_resolve"),device_id:u.string().min(1),new_session_id:u.string().min(1),choice:u.enum(["USE_NEW","KEEP_OLD"])}).strict(),la=u.object({type:u.literal("session_conflict_resolve_ack"),ok:u.literal(!0),device_id:u.string().min(1),choice:u.enum(["USE_NEW","KEEP_OLD"]),next:u.array(u.enum(["session_init"])).optional()}).strict(),da=u.object({type:u.literal("session_conflict_resolve_ack"),ok:u.literal(!1),device_id:u.string().min(1),error:u.object({code:u.string().min(1),message:u.string().min(1)})}).strict(),pa=u.union([la,da]),fa=u.object({type:u.literal("quiesce"),session_id:u.string().min(1),reason:u.enum(["SESSION_REPLACED"]),deadline_ms:u.number().int().positive()}).strict(),ha=u.object({type:u.literal("quiesce_ack"),session_id:u.string().min(1),status:u.enum(["IDLE","BUSY"])}).strict(),ma=u.object({type:u.literal("tools_publish"),device_id:u.string().min(1),workspace_id:u.string().optional(),tools:u.array(Vs).default([]),tools_version:u.string().optional()}).strict(),ga=u.object({type:u.literal("tools_publish_ack"),ok:u.boolean(),device_id:u.string().min(1),tools_version:u.string().optional(),error:u.object({code:u.string().min(1),message:u.string().min(1)}).optional()}).strict(),ya=u.object({type:u.literal("directories_publish"),device_id:u.string().min(1),workspace_id:u.string().optional(),directories:u.array(zs).default([])}).strict(),va=u.object({type:u.literal("directories_publish_ack"),ok:u.boolean(),device_id:u.string().min(1),error:u.object({code:u.string().min(1),message:u.string().min(1)}).optional()}).strict(),ba=u.object({blocked_extensions:u.array(u.string()).default([]),allowed_extensions:u.array(u.string()).default([]),blocked_patterns:u.array(u.string()).default([]),max_file_size_bytes:u.number().default(10485760)}).passthrough(),Sa=u.object({workspace_id:u.string(),organization_id:u.string(),workspace_name:u.string().optional(),user_id:u.string(),user_email:u.string().optional(),connector:u.string().optional(),connector_policies:u.object({max_response_chars:u.number(),timeout_ms:u.number()}).passthrough().optional(),file_policies:ba.optional()}).passthrough(),yo=u.object({type:u.literal("tool_call"),job_id:u.string().min(1),device_id:u.string().min(1).optional(),workspace_id:u.string().optional(),tool:u.string().min(1),args:u.record(u.string(),u.unknown()).default({}),context:Sa.optional()}).passthrough(),_a=u.object({type:u.enum(["error","warning","info"]),description:u.string().min(1)}),Qt=u.object({type:u.literal("tool_result"),job_id:u.string().min(1),tool:u.string().min(1),ok:u.boolean(),result:u.unknown().optional(),error:u.unknown().optional(),messages:u.array(_a).optional(),timing:u.object({execution_ms:u.number(),execution_sec:u.number()}).optional()}).strict().superRefine((o,e)=>{o.ok&&o.result===void 0&&e.addIssue({code:u.ZodIssueCode.custom,message:"tool_result ok=true should include result",path:["result"]}),!o.ok&&o.error===void 0&&e.addIssue({code:u.ZodIssueCode.custom,message:"tool_result ok=false should include error",path:["error"]})}),vo=u.object({type:u.literal("disconnect_notice"),code:u.number().int(),reason:u.string(),at:u.number()}).strict(),bo=u.object({type:u.literal("promoted_active"),workspaceId:u.string().min(1)}).strict(),So=u.object({type:u.literal("demoted_standby"),workspaceId:u.string().min(1)}).strict(),_f=u.union([Ys,ea,oa,ua,ma,ya,yo,Qt,ha,vo,bo,So]),Xt=u.union([Zs,na,aa,ca,pa,ga,va,yo,fa,vo,bo,So]);import{z as b}from"zod";var Ea=b.object({device_id:b.string().optional(),device_name:b.string().optional(),platform:b.string().optional(),agent_version:b.string().optional(),public_key_pem:b.string().min(1)}),Tf=b.object({device_code:b.string(),user_code:b.string(),verification_uri:b.string(),verification_uri_complete:b.string(),expires_in:b.number(),interval:b.number(),challenge_id:b.string(),challenge:b.string()}),wf=Ea.extend({enrollment_jws:b.string().min(1)}),Rf=b.union([b.object({status:b.literal("pending"),needs_proof:b.boolean()}),b.object({status:b.literal("approved"),needs_proof:b.boolean()}),b.object({error:b.literal("access_denied")}),b.object({error:b.literal("expired_token")})]),Cf=b.object({device_code:b.string(),challenge_id:b.string(),challenge:b.string(),signature_b64:b.string()}),xf=b.object({ok:b.literal(!0)}),Af=b.object({device_code:b.string()}),If=b.object({access_token:b.string(),refresh_token:b.string(),token_type:b.literal("Bearer"),expires_in:b.number(),device_id:b.string()}),Df=b.object({device_id:b.string().min(1),refresh_token:b.string().min(1),ts:b.number().int(),nonce:b.string().min(8),sig:b.string().min(16)}),ka=b.object({ok:b.literal(!0),access_token:b.string().min(10),refresh_token:b.string().min(10),expires_in_sec:b.number().int().positive(),device_id:b.string().min(1)}),Ta=b.object({ok:b.literal(!1),error:b.object({code:b.string(),message:b.string()})}),Of=b.union([ka,Ta]);function _o(o){return{ok:!0,data:o}}function Ne(o){return{ok:!1,error:o}}var Eo={invalid_enrollment_token:"Enrollment key is invalid or could not be verified (wrong controller URL, bad signature, or server signing keys do not match the key issuer).",invalid_enrollment_scope:"Enrollment key does not match this device account or organization membership.",enrollment_jwt_expired:"This enrollment key file has expired (JWT). Issue a new key under Organization \u2192 Devices and update ENROLMENT_KEY / your .devicelink file.",enrollment_ticket_invalid:"Enrollment key could not be accepted (already used, expired, or out of sync). Issue a new key under Organization \u2192 Devices.",enrollment_ticket_already_used:"This enrollment key was already used (single-use). Issue a new key under Organization \u2192 Devices.",enrollment_ticket_expired:"This enrollment key has expired. Issue a new key under Organization \u2192 Devices.",server_misconfigured:"Server cannot verify enrollment keys (OAuth keys missing on controller).",enrollment_start_failed:"Device enrollment failed. See controller logs."};function wa(o){if(typeof o!="object"||o===null)return;let e=o;if(e.body&&typeof e.body=="object"&&e.body!==null&&"error"in e.body){let t=e.body.error;if(typeof t=="string")return t}if(o instanceof Error){let t=o.message.match(/"error"\s*:\s*"([^"]+)"/);if(t?.[1])return t[1]}}function ko(o){let e=wa(o);return e&&Eo[e]?Eo[e]:e?`Enrollment failed (${e}). ${K(o)}`:K(o)}var tt=class{timeout=null;interval=null;totalSec=0;remainingSec=0;stepSec=1;task=null;stepCb=null;setStep(e){return this.stepSec=Math.max(1,e),this}schedule(e,t){return this.task=e,this.totalSec=t,this.remainingSec=t,this}onStep(e){return this.stepCb=e,this}start(){return this.clear(),this.remainingSec<=0?(this.runTask(),this):(this.stepCb?.(this.stepSec,this.remainingSec),this.interval=setInterval(()=>{this.remainingSec-=this.stepSec,this.remainingSec<=0?this.runTask():this.stepCb?.(this.stepSec,this.remainingSec)},this.stepSec*1e3),this)}stop(){return this.clear(),this}restart(){return this.remainingSec=this.totalSec,this.start()}runTask(){if(this.clear(),this.task)try{this.task()}catch(e){throw new Error(`Scheduler task failed: ${e}`)}}clear(){this.timeout&&(clearTimeout(this.timeout),this.timeout=null),this.interval&&(clearInterval(this.interval),this.interval=null)}};import{access as To,readFile as Ra}from"node:fs/promises";import{constants as wo}from"node:fs";function Ca(o){return(o.trim().split(".")[0]??"").startsWith("eyJ")}function en(){let o=process.env.ENROLMENT_KEY?.trim()??process.env.DLINK_ENROLMENT_KEY?.trim();return o?Ca(o)?{kind:"inline",jws:o}:{kind:"path",path:o}:{kind:"none"}}function Co(o){let e=o?.trim();if(e)return`file:${e}`;let t=en();return t.kind==="none"?"none":t.kind==="inline"?"ENROLMENT_KEY(inline JWS)":`file:${t.path}`}async function Ro(o){try{let t=(await Ra(o,"utf8")).trim();return t?{ok:!0,jws:t}:{ok:!1,error:"empty_file"}}catch(e){return{ok:!1,error:e instanceof Error?e.message:String(e)}}}async function xo(o){let e=o?.trim();if(e)try{return await To(e,wo.R_OK),!0}catch{return!1}let t=en();if(t.kind==="inline")return t.jws.trim().length>0;if(t.kind==="path")try{return await To(t.path,wo.R_OK),!0}catch{return!1}return!1}async function Ao(o){let e=o?.trim();if(e)return Ro(e);let t=en();if(t.kind==="none")return{ok:!1,error:"not_configured"};if(t.kind==="inline"){let r=t.jws.trim();return r?{ok:!0,jws:r}:{ok:!1,error:"empty_file"}}return Ro(t.path)}var Zt=class{name="auth-orchestrator";phase="IDLE";connectionId=null;sessionId=null;accessToken;rejectedByConflict=!1;refreshGroupKey="auth:refresh";refreshCycle=0;refreshScheduler=null;refreshRetryScheduler=null;lastRefreshPlan;refreshInFlight;conflictTimer=null;pendingConflictRequest=null;signinStarted=!1;async onStart(e){e.notifier.info("Auth orchestrator started",{scope:"system"})}async onStop(e){this.clearTimers(),this.resetConnectionState(),e.notifier.info("Auth orchestrator stopped",{scope:"system"})}handlers(){return{"config:loaded":this.onEventConfigLoaded.bind(this),"config:cache:validated":this.onEventConfigCacheValidated.bind(this),"auth:signin:requested":this.onEventAuthSigninRequested.bind(this),"auth:signin:completed":async(e,t)=>{t.notifier.info("Auth: signin completed; requesting ws reconnect",{scope:"system"}),this.rejectedByConflict=!1,this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.ensureAccessExpPersisted(t,"signin"),await this.ensureRefreshScheduling(t,"signin"),t.bus.emit("auth:ws:reconnect",void 0)},"auth:signout:requested":async(e,t)=>{t.notifier.info("Signing out\u2026"),this.clearTimers(),this.accessToken=void 0;try{await t.engine.secrets.delete("refreshToken")}catch{}let n={...t.engine.configurationContext.configuration,tokens:void 0};t.engine.applyConfiguration(n),t.bus.emit("config:save:requested",n),this.resetConnectionState(),t.engine.setPhase("idle"),t.bus.emit("auth:tokens:updated",{accessToken:"",refreshToken:"",expSec:void 0}),t.bus.emit("ws:disconnect",{reason:"signout"}),t.notifier.success("Signed out successfully")},"auth:session_conflict:resolve":async(e,t)=>{this.sendSessionConflictResolve(t,e.choice)},"ws:connected":async(e,t)=>{this.resetConnectionState();let r=await t.engine.secrets.get("refreshToken"),n=!!r.ok&&!!r.value,i=!!this.accessToken;if(t.notifier.info(`Auth: ws connected; tokens access=${i} refresh=${n}`,{scope:"system"}),!i&&!n){t.notifier.warn("Auth: no tokens; run signin");return}await this.sendConnect(t)},"ws:rx":async(e,t)=>{this.onInbound(e.text,t)},"ws:disconnected":async(e,t)=>{if(t.notifier.warn(`Auth: ws disconnected code=${e.code} reason=${e.reason??"-"}`,{scope:"system"}),this.resetConnectionState(),e.code===4011){t.notifier.warn('Connection rejected - another device is active on this workspace. Run "signin" to try again.'),this.rejectedByConflict=!0,t.bus.emit("ws:disconnect",{reason:"REPLACEMENT_REJECTED"});return}if(e.code===4001){let r=await t.engine.secrets.get("refreshToken");if(!r.ok||!r.value){t.notifier.warn("Auth: token invalid and no refresh; please sign in"),await this.teardownTokens(t,"AUTH_REQUIRED");return}await this.requestRefresh(t,{force:!0,reason:"ws_4001"})&&t.bus.emit("auth:ws:reconnect",void 0)}}}}async onEventConfigLoaded(e,t){if(t.notifier.info("Initializing with cached configuration",{scope:"system"}),!e.device?.id){t.notifier.error("Device ID is not available");return}if(!e.device.keys?.public){t.notifier.error("Device public key is not available");return}t.bus.emit("config:cache:validated",void 0)}async onEventConfigCacheValidated(e,t){this.ensureAccessExpPersisted(t,"boot"),await this.ensureRefreshScheduling(t,"boot");let r=await t.engine.secrets.get("refreshToken"),n=!!r.ok&&!!r.value,i=!!this.accessToken,a=this.isAccessLikelyUsable(t);if(t.notifier.info(`Auth: cache validated; access=${i} refresh=${n} accessOk=${a}`,{scope:"system"}),!i&&!n){if(t.headless&&await xo(t.engine.argv.enrollmentFile)){t.notifier.info("Headless: enrollment certificate present; starting device authorization (approve the pending request under Organization \u2192 Devices).",{scope:"system"}),t.bus.emit("auth:signin:requested",void 0);return}t.notifier.warn("Auth: not signed in; run signin");return}}isAccessLikelyUsable(e){let t=this.accessToken;if(!t)return!1;let n=e.engine.configurationContext.configuration?.tokens?.accessTokenExpSec??this.tryDecodeExp(t);if(!n)return!0;let i=Math.floor(Date.now()/1e3);return n>i}async waitForApproval(e,t,r){let n=Date.now()+t.expires_in*1e3;r.notifier.info("Waiting for approval... (streaming)",{scope:"system"});try{return await e.deviceAuthStream({deviceCode:t.device_code,timeoutMs:Math.max(1e3,n-Date.now()),signal:r.signal})}catch(i){let a=i instanceof Error?i.message:String(i);return r.notifier.error(`Failed to wait for approval: ${a}`),null}}async onEventAuthSigninRequested(e,t){if(this.signinStarted){t.notifier.warn("Sign-in already in progress",{scope:"system"});return}this.signinStarted=!0;try{let r=t.engine.configurationContext.configuration;if(!r.controlBaseUrl){t.notifier.error("Control base URL is not set");return}if(!r.device?.id){t.notifier.error("Device ID is not available");return}if(!r.device.keys?.public){t.notifier.error("Device public key is not available");return}let n=await t.engine.secrets.get("devicePrivateKey");if(!n.ok||!n.value){t.notifier.error("Device private key is not available (secret storage)");return}let i=n.value,a=r.device.name,s=process.platform,c=r.device.keys.public,l=gr(c),d=new Me(r,t.notifier);t.notifier.info("Starting device authentication...");let p=await Ao(t.engine.argv.enrollmentFile),f;if(p.ok){t.notifier.info(t.engine.argv.enrollmentFile?"Using enrollment key from --enrollment-file":"Using ENROLMENT_KEY / DLINK_ENROLMENT_KEY from environment",{scope:"system"});try{f=await d.deviceEnrollmentStart({device_id:r.device.id,device_name:a,platform:s,agent_version:$e(),public_key_pem:c,enrollment_jws:p.jws})}catch(v){t.notifier.error(ko(v),{scope:"system"});return}t.notifier.info("Approve this device in the dashboard: Organization \u2192 Devices (pending), or use the verification link below.",{scope:"system"})}else{if(p.error!=="not_configured"){t.notifier.error(p.error==="empty_file"?"Enrollment key is empty":`Could not load enrollment key: ${p.error}`);return}f=await d.deviceAuthStart({device_id:r.device.id,device_name:a,platform:s,agent_version:$e(),public_key_pem:c})}t.notifier.info("DeviceLink sign-in"),t.notifier.info(`User code: ${f.user_code}`),t.notifier.info(`Device fingerprint: ${l}`),t.notifier.info(`Verification URL: ${f.verification_uri_complete}`);let m=await this.waitForApproval(d,f,t);if(!m)return;if("error"in m){if(m.error==="access_denied"){t.notifier.error("Sign-in denied in browser.");return}if(m.error==="expired_token"){t.notifier.error("Sign-in expired. Run `signin` again.");return}t.notifier.error(`Unexpected error: ${m.error}`);return}if(m.status!=="approved"){t.notifier.error(`Unexpected status: ${m.status}`);return}if(m.needs_proof){t.notifier.info("Sending proof-of-possession signature...",{scope:"system"});let v=tn.createPrivateKey(i),k=Buffer.from(f.challenge,"base64url"),C=tn.sign(null,k,v).toString("base64");await d.deviceAuthProve({device_code:f.device_code,challenge_id:f.challenge_id,challenge:f.challenge,signature_b64:C}),t.notifier.info("Proof-of-possession verified",{scope:"system"})}t.notifier.info("Fetching tokens...",{scope:"system"});let g=await d.deviceAuthToken({device_code:f.device_code}),h="tag";await t.engine.secrets.set("refreshToken",g.refresh_token),this.accessToken=g.access_token;let y=this.tryDecodeExp(g.access_token),_={...r,controlBaseUrl:r.controlBaseUrl,device:{...r.device,id:g.device_id,name:a,tag:h,keys:{public:c}},tokens:{...r.tokens??{},accessTokenExpSec:y??void 0}};t.engine.applyConfiguration(_),t.bus.emit("config:save:requested",_),t.bus.emit("auth:signin:completed",void 0),t.notifier.success("Signed in successfully \u2705")}catch(r){let n=oe(r);if(n&&["ECONNREFUSED","ENOTFOUND","ETIMEDOUT"].includes(n)){t.notifier.error(`Network error: ${K(r)}`);return}t.notifier.error(`Sign-in failed: ${K(r)}`)}finally{this.signinStarted=!1}}async sendConnect(e){let r=e.engine.configurationContext.configuration.device,n=await e.engine.secrets.get("devicePrivateKey");if(!r?.id||!n.ok||!n.value){e.notifier.warn("Cannot connect: device not configured");return}let i=n.value,a=await e.engine.secrets.get("refreshToken"),s=a.ok?a.value:void 0,c=Date.now(),l=tn.randomBytes(16).toString("base64url"),d=yr({deviceId:r.id,ts:c,nonce:l,privateKeyPem:i}),p={type:"connect",device_id:r.id,agent_version:$e(),protocol_version:2,capabilities:["file_policies","context_v2"],ts:c,nonce:l,sig:d,platform:process.platform,hostname:r.name,device_tag:r.tag,access_token:this.accessToken,refresh_token:s,public_key_pem:r.keys.public};this.phase="CONNECT_SENT",e.notifier.info("Auth: sending connect",{scope:"system"}),this.send(e,p)}async sendSessionInit(e,t){let n=e.engine.configurationContext.configuration.device;if(!n?.id||!this.sessionId){e.notifier.error("Cannot send session_init: device ID or session ID not available");return}let i={type:"session_init",device_id:n.id,session_id:this.sessionId};this.phase="WAIT_SESSION_INIT_ACK",e.notifier.info("Auth: sending session_init",{scope:"system"}),this.send(e,i)}onInbound(e,t){let r;try{r=JSON.parse(e)}catch{t.notifier.error("Unexpected message format");return}let n=Xt.safeParse(r);if(!n.success){let a=n.error.message;t.notifier.error(`Unexpected message format: ${a}`);return}let i=n.data;switch(i.type){case"connect_ack":t.bus.emit("auth:connect_ack",i),this.onConnectAck(t,i);return;case"session_init_ack":t.bus.emit("auth:session_init_ack",i),this.onSessionInitAck(t,i);return;case"disconnect_notice":this.onDisconnectNotice(t,i);return;case"session_conflict":t.bus.emit("auth:session_conflict",i),this.handleSessionConflict(t,i);return;case"quiesce":this.handleQuiesce(t,i);return;default:return}}async handleSessionConflict(e,t){this.conflictTimer&&(clearTimeout(this.conflictTimer),this.conflictTimer=null),this.pendingConflictRequest=t,e.notifier.warn(`Another device is already connected to this workspace. Type "replace" to disconnect it, or this connection will be rejected in ${Math.round(t.deadline_ms/1e3)}s.`);let r=Math.min(t.deadline_ms,15e3);this.conflictTimer=setTimeout(()=>{this.conflictTimer=null,this.pendingConflictRequest?.new_session_id===t.new_session_id&&(e.notifier.info("No response - keeping existing device connected."),this.sendSessionConflictResolve(e,"KEEP_OLD"))},r)}async handleQuiesce(e,t){if(e.notifier.warn("This device is being replaced by another connection. Finishing in-flight operations..."),e.engine.hasRunningJobs?.()??!1){let i=Math.min(t.deadline_ms-2e3,12e3),a=Date.now();for(;Date.now()-a<i&&(e.engine.hasRunningJobs?.()??!1);)await new Promise(s=>setTimeout(s,500))}let n=e.engine.hasRunningJobs?.()??!1?"BUSY":"IDLE";this.send(e,{type:"quiesce_ack",session_id:t.session_id,status:n}),e.notifier.info("Device replaced by new connection. Disconnecting.")}sendSessionConflictResolve(e,t){let r=this.pendingConflictRequest;r&&(this.conflictTimer&&(clearTimeout(this.conflictTimer),this.conflictTimer=null),this.pendingConflictRequest=null,this.send(e,{type:"session_conflict_resolve",device_id:r.device_id,new_session_id:r.new_session_id,choice:t}))}async onConnectAck(e,t){if(!t.ok){e.notifier.error(`Connect rejected: ${t.error.code} ${t.error.message}`),this.phase="IDLE";return}this.sessionId=t.session_id;let r=t.auth.access_token;if(e.notifier.info(`Auth: connect_ack ok auth.access=${r} next=[${t.next.join(",")}]`,{scope:"system"}),t.next.includes("refresh_access_token")){let n=await e.engine.secrets.get("refreshToken");if(!n.ok||!n.value){e.notifier.warn("Auth: server requested refresh but no refresh token; please sign in"),await this.teardownTokens(e,"NO_REFRESH_TOKEN");return}await this.requestRefresh(e,{force:!0,reason:"connect_ack_next"})?e.bus.emit("auth:ws:reconnect",void 0):e.notifier.warn("Auth: refresh failed; please sign in");return}if(t.next.includes("session_init")){await this.sendSessionInit(e,t);return}if(r==="invalid"||r==="missing"){e.notifier.warn("Auth: access token invalid; please sign in again"),await this.teardownTokens(e,"INVALID_ACCESS");return}e.notifier.warn("Auth: connect_ack had no next; staying idle",{scope:"system"})}onSessionInitAck(e,t){if(!t.ok){e.notifier.error(`Session init failed: ${t.error.code} ${t.error.message}`),this.phase="IDLE";return}this.sessionId=t.session_id,this.phase="READY",e.notifier.success(`Session ready (${t.mode})`),this.ensureRefreshScheduling(e,"manual"),t.next&&(t.next.includes("tools_publish")&&e.bus.emit("meta:data:requested:tools",void 0),t.next.includes("directories_publish")&&e.bus.emit("meta:data:requested:directories",void 0))}onDisconnectNotice(e,t){e.notifier.warn(`Server disconnect_notice: ${t.reason} (code=${t.code})`)}async requestRefresh(e,t){return this.refreshInFlight?this.refreshInFlight:(this.refreshInFlight=(async()=>{try{return await this.withTimeout(this.dispatchRefreshJob(e,t),6e4,"Refresh operation")}catch(r){throw r instanceof Error&&r.message.includes("timed out")&&e.notifier.error(`Auth: refresh timed out: ${r.message}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"}),r}finally{this.refreshInFlight=void 0}})(),this.refreshInFlight)}async withTimeout(e,t,r){return Promise.race([e,new Promise((n,i)=>{setTimeout(()=>{i(new Error(`${r} timed out after ${t}ms`))},t)})])}async dispatchRefreshJob(e,t){let r=await e.engine.secrets.get("refreshToken");if(!r.ok||!r.value)return!1;if(!t.force){let s=await this.shouldRefreshNow(e);if(!s.ok)return e.notifier.info(`Auth: skip refresh (${s.reason})`,{scope:"system",category:["token-refresh"]}),!1}e.notifier.info(`Auth: dispatch refresh job (${t.reason})`,{scope:"system",category:["token-refresh"]});let n=Jn(new Ft(t.reason)),i=await e.engine.dispatch(n);if(e.notifier.info(`Auth: refresh job dispatch completed (status=${i.status})`,{scope:"system",category:["token-refresh"]}),i.status!=="success"){let s=i.error?.message??"Unknown error";e.notifier.error(`Auth: refresh job failed: ${s}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"});let c=i.output;return c?.errorCode&&Br.includes(c.errorCode)?(await this.teardownTokens(e,c.errorCode),!1):(this.scheduleRefreshRetry(e,t.reason,c?.retryAfterSec),!1)}let a=i.output;if(!a.ok||!a.accessToken){let s=a.error??"Unknown refresh failure";return e.notifier.error(`Auth: refresh failed: ${s}`,{category:["token-refresh"],groupKey:"auth:refresh-failure"}),a.errorCode&&Br.includes(a.errorCode)?(await this.teardownTokens(e,a.errorCode),!1):(this.scheduleRefreshRetry(e,t.reason,a.retryAfterSec),!1)}return this.accessToken=a.accessToken,this.persistTokens(e,a.accessToken,a.expiresInSec),await this.ensureRefreshScheduling(e,"manual"),e.bus.emit("auth:tokens:updated",{accessToken:a.accessToken,refreshToken:a.refreshToken??"",expSec:e.engine.configurationContext.configuration.tokens?.accessTokenExpSec}),!0}scheduleRefreshRetry(e,t,r){this.refreshRetryScheduler&&this.refreshRetryScheduler.stop();let n=this.computeRefreshRetryMs(e,t,r),i=Math.max(1,Math.ceil(n/1e3));this.refreshRetryScheduler=new tt().schedule(()=>{this.requestRefresh(e,{force:!0,reason:"retry"}).then(a=>{a&&e.bus.emit("auth:ws:reconnect",void 0)})},i).start()}computeRefreshRetryMs(e,t,r){let n=e.engine.configurationContext.loader,i=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_AFTER_MIN_SEC",{defaultValue:1}),a=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_AFTER_MAX_SEC",{defaultValue:300}),s=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_BASE_SEC",{defaultValue:2}),c=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_JITTER_SEC",{defaultValue:1}),l=n.getConfigValue("DL_ACCESS_REFRESH_RETRY_MAX_SEC",{defaultValue:30});if(typeof r=="number"&&Number.isFinite(r)&&r>=0){let m=Math.min(a*1e3,Math.max(i*1e3,r*1e3)),g=Math.max(1,Math.ceil(m/1e3));return e.notifier.warn(`Auth: refresh retry scheduled in ${g}s (honoring Retry-After, ${t})`,{scope:"system",category:["token-refresh"],groupKey:"auth:refresh-retry"}),m}let p=Math.min(l*1e3,s*1e3+Math.floor(Math.random()*(c+1))*1e3),f=Math.max(1,Math.ceil(p/1e3));return e.notifier.warn(`Auth: refresh retry scheduled in ${f}s (${t})`,{scope:"system",category:["token-refresh"],groupKey:"auth:refresh-retry"}),p}async ensureRefreshScheduling(e,t){let r=await e.engine.secrets.get("refreshToken");!r.ok||!r.value||(this.accessToken&&!e.engine.configurationContext.configuration.tokens?.accessTokenExpSec&&this.ensureAccessExpPersisted(e,t),this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.scheduleSilentRefresh(e,t))}async scheduleSilentRefresh(e,t){let r=await e.engine.secrets.get("refreshToken");if(!r.ok||!r.value)return;this.refreshScheduler&&this.refreshScheduler.stop();let n=e.engine.configurationContext.loader,i=n.getConfigValue("DL_ACCESS_REFRESH_MIN_DELAY_SEC",{defaultValue:2}),a=e.engine.configurationContext.configuration,s=this.accessToken,c=a.tokens?.accessTokenExpSec??(s?this.tryDecodeExp(s):null),l=c??null,d=this.getRefreshGroupKey(e);if(this.lastRefreshPlan&&this.lastRefreshPlan.exp===l&&this.lastRefreshPlan.groupKey===d)return;this.lastRefreshPlan={exp:l,groupKey:d};let p=v=>{let k=new tt().schedule(()=>{this.requestRefresh(e,{force:v.force,reason:"timer"}).then(E=>{E&&e.notifier.success("Auth: refresh completed",{scope:"system",groupKey:d,category:["token-refresh"]})})},v.delaySec);v.log&&(k=k.onStep((E,C)=>v.log(C))),this.refreshScheduler=k.start()};if(!c){e.headless||e.notifier.info(`Auth: no exp; scheduling refresh in ${i}s [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]}),p({delaySec:i,force:!0});return}let f=Math.floor(Date.now()/1e3),m=n.getConfigValue("DL_ACCESS_REFRESH_MARGIN_SEC",{defaultValue:5}),g=n.getConfigValue("DL_ACCESS_REFRESH_JITTER_SEC",{defaultValue:2}),h=g>0?Math.floor(Math.random()*(g+1)):0,y=c-m-h,_=Math.max(i,y-f);e.headless||e.notifier.info(`Auth: refresh scheduled in ${_}s (exp=${c} now=${f} margin=${m} jitter=${h}) [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]}),p({delaySec:_,force:!1,log:v=>{e.headless||e.notifier.info(`Auth: refresh scheduled in ${v}s (exp=${c} now=${f} margin=${m} jitter=${h}) [${t}]`,{scope:"system",groupKey:d,category:["token-refresh"]})}})}getRefreshGroupKey(e){return this.refreshCycle++,`${this.refreshGroupKey}:${this.refreshCycle}`}async shouldRefreshNow(e){let t=await e.engine.secrets.get("refreshToken");if(!t.ok||!t.value)return{ok:!1,reason:"no_refresh_token"};let r=e.engine.configurationContext.configuration,n=this.accessToken,i=r.tokens?.accessTokenExpSec??(n?this.tryDecodeExp(n):null);if(!i)return{ok:!0,reason:"no_exp_assume_refresh"};let a=Math.floor(Date.now()/1e3),c=e.engine.configurationContext.loader.getConfigValue("DL_ACCESS_REFRESH_MARGIN_SEC",{defaultValue:300}),l=i-a;return l<=c?{ok:!0,reason:`within_margin remaining=${l}s margin=${c}s`}:{ok:!1,reason:`too_early remaining=${l}s margin=${c}s`}}ensureAccessExpPersisted(e,t){let r=e.engine.configurationContext.configuration,n=this.accessToken,i=r.tokens?.accessTokenExpSec;if(!n||typeof i=="number"&&Number.isFinite(i))return;let a=this.tryDecodeExp(n);if(!a)return;let s={...r,tokens:{...r.tokens??{},accessTokenExpSec:a}};e.engine.applyConfiguration(s),e.bus.emit("config:save:requested",s),e.notifier.info(`Auth: derived accessTokenExpSec=${a} (${t})`,{scope:"system"})}persistTokens(e,t,r){let n=e.engine.configurationContext.configuration,i=this.tryDecodeExp(t),a=typeof r=="number"&&Number.isFinite(r)?Math.floor(Date.now()/1e3)+r:void 0,s={...n,tokens:{...n.tokens??{},accessTokenExpSec:i??a}};e.engine.applyConfiguration(s),e.bus.emit("config:save:requested",s),e.notifier.info(`Auth: tokens updated exp=${s.tokens?.accessTokenExpSec??"-"}`,{scope:"system"})}async teardownTokens(e,t){this.accessToken=void 0;let n={...e.engine.configurationContext.configuration,tokens:void 0};e.engine.applyConfiguration(n),e.bus.emit("config:save:requested",n),this.clearTimers(),this.resetConnectionState(),e.bus.emit("auth:signout:requested",void 0),e.notifier.warn(`Auth: signed out (${t}). Please run signin.`)}tryDecodeExp(e){try{let t=xa(e);return typeof t.exp=="number"?t.exp:null}catch{return null}}send(e,t){e.bus.emit("ws:tx",{text:JSON.stringify(t)})}resetConnectionState(){this.connectionId=null,this.sessionId=null,this.phase="IDLE"}clearTimers(){this.refreshScheduler&&(this.refreshScheduler.stop(),this.refreshScheduler=null),this.refreshRetryScheduler&&(this.refreshRetryScheduler.stop(),this.refreshRetryScheduler=null),this.conflictTimer&&clearTimeout(this.conflictTimer),this.conflictTimer=null,this.pendingConflictRequest=null}};import nn from"node:fs/promises";import on from"node:path";var H=class{config;constructor(e){this.config=e}async execute(e){try{let t=await this.executeTool(e);return _o(t)}catch(t){return Y(t)?Ne(t):Ne(L(t,{message:"An unexpected error occurred"}))}}};import No from"node:path";import Io from"node:fs";import Aa from"lodash/get.js";function fe(o){return Aa(o,["context","file_policies"])}function Ia(o){let e=o.replace(/\\/g,"/");return e.includes("/secrets/")||e.startsWith("secrets/")?{shouldIgnore:!0,reason:"denylist:secrets",matchedRule:"secrets/"}:e.includes("/.env")||e.startsWith(".env")?{shouldIgnore:!0,reason:"denylist:env",matchedRule:".env"}:e.includes("/id_rsa")||e.startsWith("id_rsa")?{shouldIgnore:!0,reason:"denylist:ssh",matchedRule:"id_rsa"}:e.includes("/id_ed25519")||e.startsWith("id_ed25519")?{shouldIgnore:!0,reason:"denylist:ssh",matchedRule:"id_ed25519"}:e.endsWith(".pem")?{shouldIgnore:!0,reason:"denylist:pem",matchedRule:"*.pem"}:e.endsWith(".key")?{shouldIgnore:!0,reason:"denylist:key",matchedRule:"*.key"}:e.endsWith(".p12")?{shouldIgnore:!0,reason:"denylist:p12",matchedRule:"*.p12"}:e.endsWith(".pfx")?{shouldIgnore:!0,reason:"denylist:pfx",matchedRule:"*.pfx"}:null}var Do=[{pattern:"node_modules",type:"exact"},{pattern:".git",type:"exact"},{pattern:"dist",type:"exact"},{pattern:"build",type:"exact"},{pattern:".next",type:"exact"},{pattern:".cache",type:"exact"},{pattern:".DS_Store",type:"exact"},{pattern:"Thumbs.db",type:"exact"},{pattern:"*.tmp",type:"glob"},{pattern:"*.log",type:"glob"},{pattern:".env*",type:"glob"}];function Da(o,e,t){let r=o.directories.find(a=>a.id===e);if(!r)return Do;let n=[],i=No.join(r.path,".devicelinkignore");if(Io.existsSync(i))try{let s=Io.readFileSync(i,"utf-8").split(`
+`).map(c=>c.trim()).filter(c=>c&&!c.startsWith("#"));for(let c of s)c.includes("*")||c.includes("?")?n.push({pattern:c,type:"glob"}):c.startsWith("/")?n.push({pattern:c.slice(1),type:"prefix"}):n.push({pattern:c,type:"exact"})}catch(a){console.warn(`[ignore] Failed to read .devicelinkignore: ${a}`)}return n.push(...Do),n}function Q(o,e,t,r,n){let i=Ia(o);if(i)return i;if(n&&!e){let l=No.extname(o).toLowerCase();if(l&&n.blocked_extensions?.includes(l))return{shouldIgnore:!0,reason:"policy:blocked_extension",matchedRule:l};if(n.allowed_extensions&&n.allowed_extensions.length>0&&l&&!n.allowed_extensions.includes(l))return{shouldIgnore:!0,reason:"policy:not_in_allowlist",matchedRule:l};if(n.blocked_patterns){for(let d of n.blocked_patterns)if(Oo(o,d,!1))return{shouldIgnore:!0,reason:"policy:blocked_pattern",matchedRule:d}}}let a=Da(r,t.directory_id,t.workspace_id),s=o.replace(/\\/g,"/"),c=s.split("/").filter(Boolean);for(let l of a){let d=!1;if(l.type==="exact"?d=c.some(p=>p===l.pattern):l.type==="prefix"?d=s.startsWith(l.pattern):l.type==="glob"&&(!l.pattern.includes("/")&&!l.pattern.includes("*")&&!l.pattern.includes("?")?d=c.some(p=>p.toLowerCase()===l.pattern.toLowerCase()):d=Oo(s,l.pattern,e)),d)return{shouldIgnore:!0,matchedRule:l.pattern}}return{shouldIgnore:!1}}function Oo(o,e,t){let r="^",n=0;for(;n<e.length;){let i=e[n];i==="*"?n+1<e.length&&e[n+1]==="*"?(r+=".*",n+=2):(r+="[^/]*",n++):i==="?"?(r+="[^/]",n++):"\\^$|.+(){}[]".includes(i)?(r+="\\"+i,n++):(r+=i,n++)}r+="$";try{return new RegExp(r,"i").test(o)}catch{return o.toLowerCase().includes(e.toLowerCase())}}import rn from"node:fs/promises";import se from"node:path";function Po(o){let e=(o??"").trim();if(!e)return".";if(e.includes("\0"))throw A("INVALID_INPUT","Path contains null byte.");if(e.startsWith("/"))throw A("PATH_ESCAPE","Absolute paths are not allowed. Use a path relative to the root.",{hint:'Use relative paths like "src/file.ts" or "." for the root directory. Paths must be relative to the configured root.'});if(/^[a-zA-Z]:[\\/]/.test(e)||e.startsWith("\\\\")||e.startsWith("//"))throw A("PATH_ESCAPE","Absolute/drive/UNC paths are not allowed. Use a path relative to the root.",{hint:'Use relative paths like "src/file.ts" or "." for the root directory. Do not use drive letters (C:) or UNC paths (\\\\server).'});let t=e.replace(/\\/g,"/");if(/^[a-zA-Z]+:\/\//.test(t))throw A("INVALID_INPUT","URL-style paths are not allowed.",{hint:'Paths cannot use URL schemes (like "http://" or "file://"). Use simple relative paths like "src/file.ts".'});let r=se.posix.normalize(t);if(r===".."||r.startsWith("../"))throw A("PATH_ESCAPE","Path escapes the root.",{hint:'Paths cannot use ".." to escape the configured root directory. Use paths relative to the root, like "src/file.ts" or "subdir/file.ts".'});return r===""?".":r}async function re(o,e){let t=Po(e),r=se.resolve(o),n=await rn.realpath(r),i=se.resolve(n,t==="."?"":t),a=se.relative(n,i);if(a.startsWith("..")||se.isAbsolute(a))throw A("PATH_ESCAPE","Path escapes the root.",{hint:"The resolved path escapes the configured root directory. Ensure the path stays within the root boundaries."});try{let s=await rn.realpath(i),c=se.relative(n,s);if(c.startsWith("..")||se.isAbsolute(c))throw A("PATH_ESCAPE","Symlink/junction escape detected.",{hint:"A symlink or junction in the path resolves outside the configured root directory. Ensure all symlinks stay within the root boundaries."});return{absTarget:s,rel:t}}catch(s){if(oe(s)!=="ENOENT")throw s;let c=t.split("/").filter(Boolean);for(let l=c.length;l>0;l--){let d=c.slice(0,l).join("/"),p=c.slice(l).join("/"),f=se.resolve(n,d);try{let m=await rn.realpath(f),g=se.relative(n,m);if(g.startsWith("..")||se.isAbsolute(g))throw A("PATH_ESCAPE","Symlink/junction escape detected.",{hint:"A symlink or junction in the path resolves outside the configured root directory. Ensure all symlinks stay within the root boundaries."});return{absTarget:p?se.join(m,p):m,rel:t}}catch(m){if(oe(m)==="ENOENT")continue;throw m}}throw A("NOT_FOUND","Path not found.",{hint:"The specified path does not exist. Verify the path is correct and that the file or directory exists within the configured root."})}}function N(o){return{workspace_id:o.workspace_id,device_id:o.device_id,directory_id:o.directory_id,path:Po(o.path)}}function U(o,e){let t=String(oe(o)??"");return t==="ENOENT"?We("NOT_FOUND","Path not found.",{fs_code:t}):t==="ENOTDIR"?We("NOT_A_DIRECTORY","Path is not a directory.",{fs_code:t}):t==="EISDIR"?We("NOT_A_FILE","Path is a directory, not a file.",{fs_code:t}):t==="EACCES"||t==="EPERM"?We("PERMISSION_DENIED","Permission denied.",{fs_code:t}):We("INTERNAL",e,{fs_code:t})}function A(o,e,t){return We(o,e,t)}function We(o,e,t){return{code:o,message:e,details:t}}function z(o,e){if(Array.isArray(o.directories)&&o.directories.length===0)throw A("UNKNOWN_DIRECTORY","No directories configured.",{hint:"No directories configured. This may happen if the agent was restarted with different directory configuration. If you have only one directory configured, it will be used automatically.",requested_directory_id:e,available_directory_ids:o.directories.map(r=>r.id),available_paths:o.directories.map(r=>r.path),directory_count:o.directories.length});let t=o.directories.find(r=>r.id===e);if(!t&&o.directories.length===1&&(t=o.directories[0]),!t){let r=o.directories.map(a=>a.id).join(", ")||"none",n=o.directories.map(a=>a.path).join(", ")||"none",i=e===void 0?"undefined (missing)":String(e);throw A("UNKNOWN_DIRECTORY",`Unknown directory_id: ${i}`,{hint:`The directory_id "${i}" does not match any configured directory. Available directory IDs: ${r}. Available paths: ${n}. This may happen if the agent was restarted with different directory configuration. If you have only one directory configured, it will be used automatically.`,requested_directory_id:e,available_directory_ids:o.directories.map(a=>a.id),available_paths:o.directories.map(a=>a.path),directory_count:o.directories.length})}return t}function P(o,e,t,r,n){let i={operation:o,path:e.path||".",directory_id:e.directory_id,workspace_id:e.workspace_id,device_id:e.device_id,success:t,error:r?r.substring(0,200):void 0,metadata:n,timestamp:Date.now()},a=`[FS_AUDIT] ${o} ${t?"SUCCESS":"FAILED"} directory=${i.directory_id} path=${i.path}${i.workspace_id?` workspace=${i.workspace_id}`:""}${i.device_id?` device=${i.device_id}`:""}${i.error?` error=${i.error}`:""}${n?` ${JSON.stringify(n)}`:""}`}import Fo from"lodash/orderBy.js";import Oa from"lodash/clamp.js";import Na from"lodash/take.js";import Pa from"lodash/map.js";function Fa(o,e,t){return Fo(o,[e==="name"?"name":e==="mtime"?n=>n.mtime??0:n=>n.size??0],[t])}function La(o,e){return e==="all"?o:e==="files"?o.filter(t=>t.type==="file"||t.type==="symlink"):e==="dirs"?o.filter(t=>t.type==="dir"):o}var er=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),{absTarget:n,rel:i}=await re(r.path,e.path),a=Oa(e.limit??200,1,1e3),s=Math.max(e.offset??0,0),c=e.include_hidden??!1,l=e.only??"all",d=e.sort??"name",p=e.order??"asc",f=e.detail??"stat";try{if(!(await nn.stat(n)).isDirectory()){let x=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("list",x,!1,"Path is not a directory."),A("NOT_A_DIRECTORY","Path is not a directory.",{path:i,hint:"The path must point to a directory, not a file. Use fs_read to read files, or provide a directory path for listing."})}}catch(w){if(Y(w)){let x=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("list",x,!1,L(w).message),w}throw U(w,"Failed to list directory.")}let m;try{m=await nn.readdir(n,{withFileTypes:!0})}catch(w){throw U(w,"Failed to read directory.")}let g=c?m:m.filter(w=>!w.name.startsWith(".")),h=[],y=0,_={total_entries:0,files:0,dirs:0,symlinks:0,hidden:0,ignored:0,total_file_bytes:0},v=new Map,k=fe(e),E={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path};for(let w of g){let x=on.join(n,w.name),we=(i==="."?w.name:on.posix.join(i,w.name)).replace(/\\/g,"/"),ae="other";w.isDirectory()?ae="dir":w.isFile()?ae="file":w.isSymbolicLink()&&(ae="symlink");let pt=w.name.startsWith(".");if(Q(we,w.isDirectory(),E,this.config,k).shouldIgnore){y++,_.ignored++;continue}_.total_entries++,ae==="file"?_.files++:ae==="dir"?_.dirs++:ae==="symlink"&&_.symlinks++,pt&&_.hidden++;let bn,Sn;if(f==="stat"||f==="digest")try{let ht=await nn.stat(x);ht.isFile()&&(bn=ht.size,_.total_file_bytes=(_.total_file_bytes??0)+ht.size),Sn=Math.floor(ht.mtimeMs/1e3)}catch{}let ft=ae==="file"?on.extname(w.name).slice(1):void 0;ft&&(f==="stat"||f==="digest")&&v.set(ft,(v.get(ft)??0)+1),h.push({name:w.name,path:we,type:ae,size:bn,mtime:Sn,ext:ft,hidden:pt,ignored:!1})}f==="digest"&&v.size>0&&(_.by_ext=Na(Fo(Pa([...v.entries()],([w,x])=>({ext:w,count:x})),["count"],["desc"]),10));let C=La(h,l),S=Fa(C,d,p),T=S.slice(s,s+a),D=s+T.length,I=D<S.length,X={count:T.length,limit:a,offset:s,has_more:I,next_offset:I?D:void 0},$=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i}),j={items:T,meta:X,context:$,filtered:{ignored_count:y}};return f==="digest"&&(j.summary=_),P("list",$,!0,void 0,{file_count:T.length}),j}};import Lo from"node:fs/promises";var Je=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),{absTarget:n,rel:i}=await re(r.path,e.path),a=fe(e),s={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},c=Q(i,!1,s,this.config,a);if(c.shouldIgnore){let h=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",h,!1,`Access denied: ${c.reason||c.matchedRule||"blocked"}`),A("PERMISSION_DENIED",`Access denied: ${c.reason||c.matchedRule||"blocked"}`,{path:i,reason:c.reason})}let l=Math.max(e.offset??0,0),d=Math.min(Math.max(e.limit??4e4,1),2e5),p=e.encoding??"utf-8",f;try{f=await Lo.stat(n)}catch(h){let y=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",y,!1,U(h,"Failed to stat file.").message),U(h,"Failed to stat file.")}if(!f.isFile()){let h=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",h,!1,"Path is not a file."),A("NOT_A_FILE","Path is not a file.",{path:i,hint:"The path must point to a file, not a directory. Use fs_list or fs_tree to explore directories, or provide a file path to read."})}let m=a?.max_file_size_bytes;if(typeof m=="number"&&m>0&&f.size>m){let h=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",h,!1,`File exceeds the policy size limit (${f.size} > ${m}).`),A("PERMISSION_DENIED",`File exceeds the maximum size allowed by policy (${f.size} > ${m} bytes).`,{path:i,reason:"policy:max_file_size_bytes"})}let g;try{g=await Lo.open(n,"r")}catch(h){let y=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",y,!1,U(h,"Failed to open file.").message),U(h,"Failed to open file.")}try{let h=Buffer.alloc(d),{bytesRead:y}=await g.read(h,0,d,l),v=h.subarray(0,y).toString(p),k=l+y,E=y<d,C=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});return P("read",C,!0,void 0,{bytes_read:y}),{content:v,bytes_read:y,next_offset:k,eof:E,context:C}}catch(h){let y=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});throw P("read",y,!1,L(h).message),h}finally{await g.close()}}};import sn from"node:fs/promises";var tr=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),{absTarget:n,rel:i}=await re(r.path,e.path),a=!1,s;try{s=await sn.readlink(n),a=!0}catch(p){if(oe(p)==="ENOENT")throw U(p,"Path not found.")}let c;try{c=a?await sn.stat(n):await sn.lstat(n)}catch(p){throw U(p,"Failed to stat path.")}let l="other";c.isDirectory()?l="dir":c.isFile()?l="file":a&&(l="symlink");let d=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});return P("info",d,!0),{type:l,size:c.isFile()?c.size:void 0,mtime:Math.floor(c.mtimeMs/1e3),ctime:Math.floor(c.ctimeMs/1e3),atime:Math.floor(c.atimeMs/1e3),is_symlink:a,target:a?s:void 0,context:d}}};import un from"node:fs/promises";import he from"node:path";import cn from"node:fs/promises";import Mo from"node:path";import an from"lodash/clamp.js";function Ma(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];if(n==="*")r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/]*",r++);else if(n==="?")t+="[^/]",r++;else if(n==="{"){let i=e.indexOf("}",r);if(i===-1)t+="\\{",r++;else{let a=e.substring(r+1,i).split(",");t+="("+a.map(s=>s.trim().replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")+")",r=i+1}}else"\\^$|.+()[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return!1}}async function $a(o,e,t,r,n,i,a,s){let c;try{c=await cn.readFile(o,"utf-8")}catch{return 0}let l=c.split(/\r?\n/),d=0,p;if(r==="regex")try{p=new RegExp(t,n?"g":"gi")}catch{let f=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");p=new RegExp(f,n?"g":"gi")}else{let f=t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");p=new RegExp(f,n?"g":"gi")}for(let f=0;f<l.length&&d<a;f++){let m=l[f];if(p.test(m)){p.lastIndex=0;let g=Math.max(0,f-i),h=Math.min(l.length-1,f+i),y=l.slice(g,h+1);s.push({path:e,line:f+1,preview:m.trim(),snippet:y}),d++}}return d}async function $o(o,e,t,r,n,i,a,s,c,l,d,p,f,m,g){if(d.value>=c||p.length>=l)return;let h;try{h=await cn.readdir(o,{withFileTypes:!0})}catch{return}for(let y of h){if(d.value>=c||p.length>=l)break;let _=Mo.join(o,y.name),v=e==="."?y.name:Mo.posix.join(e,y.name);if(Q(v,y.isDirectory(),m,g).shouldIgnore){f.value++;continue}if(y.isFile()){if(i&&!Ma(v,i))continue;d.value++,await $a(_,v,r,n,a,s,l-p.length,p)}else y.isDirectory()&&await $o(_,v,t,r,n,i,a,s,c,l,d,p,f,m,g)}}var He=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),n=e.query;if(!n||n.length===0)throw A("INVALID_INPUT","Query is required.",{hint:'Query should be a search pattern to find in file contents. Use a substring (default) or regex pattern (with mode="regex"). Examples: "function", "import.*from", "TODO"'});let i=e.mode??"substring",a=e.file_glob,s=an(e.max_files??2e3,1,1e4),c=an(e.max_matches??200,1,1e3),l=an(e.context_lines??2,0,10),d=e.case_sensitive??!1,{absTarget:p,rel:f}=await re(r.path,e.path??".");if(f!==".")try{if(!(await cn.stat(p)).isDirectory())throw A("NOT_A_DIRECTORY","Grep path is not a directory.",{path:f,hint:'The grep path must be a directory. Grep searches within directories recursively. Use "." to search from the root, or provide a directory path.'})}catch(v){throw Y(v)?v:U(v,"Failed to stat grep path.")}let m={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},g=[],h={value:0},y={value:0};await $o(p,f,r.path,n,i,a,d,l,s,c,h,g,y,m,this.config);let _=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:f});return P("grep",_,!0,void 0,{file_count:h.value,match_count:g.length}),{matches:g,meta:{files_scanned:h.value,matches:g.length,truncated:h.value>=s||g.length>=c},context:_,filtered:{ignored_count:y.value}}}};import ja from"lodash/isEmpty.js";var Ge=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),n=e.default_limit??12e3,i=e.default_encoding??"utf-8",a=[];if(e.items&&Array.isArray(e.items)&&(a=e.items),ja(a))throw A("INVALID_INPUT","fs_read_many expects { items: [{path,...}] }",{receivedKeys:Object.keys(e),hint:'Provide an "items" array with at least one object containing a "path" property. Each item can optionally include "offset", "limit", and "encoding". Example: { items: [{ path: "file1.ts" }, { path: "file2.ts", limit: 5000 }] }'});let s=fe(e),c=[],l={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},d=new Je(this.config);for(let f of a)try{let m=Q(f.path,!1,l,this.config,s);if(m.shouldIgnore){c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:"PERMISSION_DENIED",message:`Access denied: ${m.reason||m.matchedRule||"blocked"}`}});continue}let g={directory_id:t,path:f.path,workspace_id:e.workspace_id,device_id:e.device_id,offset:f.offset??0,limit:f.limit??n,encoding:f.encoding??i},h=await d.execute(g);if(!h.ok){c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:h.error.code,message:h.error.message}});continue}c.push({path:f.path,content:h.data.content,bytes_read:h.data.bytes_read,truncated:!h.data.eof})}catch(m){let{code:g,message:h}=L(m);c.push({path:f.path,content:"",bytes_read:0,truncated:!1,error:{code:g,message:h}})}let p=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:"."});return P("read_many",p,!0,void 0,{file_count:c.length}),{files:c,context:p}}};import rt from"lodash/clamp.js";import Ka from"lodash/compact.js";import Ko from"lodash/orderBy.js";import Ua from"lodash/uniq.js";import jo from"lodash/take.js";function Uo(o,e,t){if(!(e.length>=t)){if(o.type==="file"){e.push(o.path);return}if(o.children)for(let r of o.children){if(e.length>=t)break;Uo(r,e,t)}}}function Ba(o){let e=t=>{let r=t.toLowerCase(),n=r.split("/");return r==="readme.md"||r.endsWith("/readme.md")||r.includes("/readme.md")?0:r.endsWith(".md")?1:r.endsWith("package.json")||r.endsWith("pyproject.toml")||r.endsWith("go.mod")||r.endsWith("cargo.toml")||r.endsWith("pom.xml")||r.endsWith("build.gradle")?2:r.includes("dockerfile")||r.includes("compose")||r.endsWith(".env.example")?3:n.includes("config")||n.includes("conf")||n.includes("settings")?4:n.includes("ci")||n.includes(".github")||n.includes(".gitlab")||n.includes("jenkins")||r.includes("workflow")?5:r.endsWith(".ts")||r.endsWith(".tsx")||r.endsWith(".js")||r.endsWith(".jsx")||r.endsWith(".py")||r.endsWith(".go")||r.endsWith(".rs")||r.endsWith(".java")?6:7};return[...o].sort((t,r)=>{let n=e(t),i=e(r);return n!==i?n-i:t.localeCompare(r)})}function Bo(o,e,t,r){let n={path:o.path,name:o.name,type:o.type,depth:e,size:o.size,mtime:o.mtime,ext:o.ext,hidden:o.hidden,ignored:o.ignored};if(r?.has(o.path)?n.error=r.get(o.path):o.type==="other"&&o.name==="<readdir_error>"&&(n.error={code:"INTERNAL",message:"Failed to read directory"}),t.push(n),o.children)for(let i of o.children)Bo(i,e+1,t,r)}async function qo(o,e,t,r,n,i,a,s,c,l,d,p,f,m,g,h,y){if(s.value>=a)return g.reason="MAX_ENTRIES",null;if(t>r)return g.reason="MAX_DEPTH",null;let _=e==="."?".":e.replace(/\\/g,"/"),v;try{v=await un.lstat(o)}catch(D){let{code:I,message:X}=L(D);l.total_entries++;let $={name:he.basename(e)||e,type:"other",path:_,hidden:he.basename(e)?.startsWith("."),ignored:!1};return h&&h.set(_,{code:I,message:`Failed to stat: ${X}`}),n==="files"||n==="dirs"?null:(s.value++,$)}let k="other";if(v.isDirectory()?k="dir":v.isFile()?k="file":v.isSymbolicLink()&&(k="symlink"),Q(_,v.isDirectory(),f,m,y).shouldIgnore)return c.value++,l.ignored++,null;l.total_entries++,k==="file"?l.files++:k==="dir"?l.dirs++:k==="symlink"&&l.symlinks++;let C=he.basename(e)?.startsWith(".");C&&l.hidden++;let S=k==="file"?he.extname(he.basename(e)||e).slice(1):void 0;S&&(p==="stat"||p==="digest")&&d.set(S,(d.get(S)??0)+1),k==="file"&&(p==="stat"||p==="digest")&&(l.total_file_bytes=(l.total_file_bytes??0)+(v.size??0));let T={name:he.basename(e)||e,type:k,path:_,size:(p==="stat"||p==="digest")&&v.isFile()?v.size:void 0,mtime:p==="stat"||p==="digest"?Math.floor(v.mtimeMs/1e3):void 0,ext:S,hidden:C,ignored:!1};if(n==="files"&&k!=="file"&&k!=="symlink"||n==="dirs"&&k!=="dir")return null;if(s.value++,k==="dir"&&t<r){let D,I;try{D=await un.readdir(o,{withFileTypes:!0})}catch(R){I=L(R),D=[]}let X=Ko(i?D:D.filter(R=>!R.name.startsWith(".")),[R=>R.isDirectory()?0:1,"name"],["asc","asc"]),$=[];I&&h&&h.set(_,{code:I.code,message:`Failed to read directory: ${I.message}`});for(let R of X){if(s.value>=a)break;let j=he.join(o,R.name),w=e==="."?R.name:he.posix.join(e,R.name),x=w.replace(/\\/g,"/");if(Q(x,R.isDirectory(),f,m,y).shouldIgnore){c.value++,l.ignored++;continue}try{let we=await qo(j,w,t+1,r,n,i,a,s,c,l,d,p,f,m,g,h,y);we&&$.push(we)}catch(we){let{code:ae,message:pt}=L(we);h&&h.set(x,{code:ae,message:`Failed to build subtree: ${pt}`}),l.total_entries++;let vn={name:he.basename(w)||w,type:"other",path:x,hidden:he.basename(w)?.startsWith("."),ignored:!1};if(n==="files"||n==="dirs")continue;s.value++,$.push(vn)}}$.length>0&&(T.children=$)}return T}var rr=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),{absTarget:n,rel:i}=await re(r.path,e.path),a=rt(e.max_depth??3,1,20),s=e.only??"all",c=e.include_hidden??!1,l=rt(e.max_entries??5e3,1,2e4),d=e.detail??"stat",p=e.include_display??!1,f=rt(e.max_display_rows??2e3,1,2e4);try{if(!(await un.stat(n)).isDirectory())throw A("NOT_A_DIRECTORY","Path is not a directory.",{path:i,hint:"The path must point to a directory to build a tree. Provide a directory path, not a file."})}catch(R){throw Y(R)?R:U(R,"Failed to build tree.")}let m=fe(e),g={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},h={reason:void 0},y={value:0},_={value:0},v={total_entries:0,files:0,dirs:0,symlinks:0,hidden:0,ignored:0,total_file_bytes:0},k=new Map,E=new Map,C=await qo(n,i,0,a,s,c,l,y,_,v,k,d,g,this.config,h,E,m);if(!C)throw A("INTERNAL","Failed to build tree (empty result).");let S=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:i});d==="digest"&&k.size>0&&(v.by_ext=jo(Ko([...k.entries()].map(([R,j])=>({ext:R,count:j})),["count"],["desc"]),10));let T={tree:C,context:S,filtered:{ignored_count:_.value}};if(p){let R=[];Bo(C,0,R,E),R.length>f&&(R.length=f,T.truncated=T.truncated??{reason:"MAX_ENTRIES",continuation:"Display rows truncated; reduce max_entries/max_depth or lower max_display_rows"}),T.display={rows:R}}h.reason&&(T.truncated={reason:h.reason,continuation:h.reason==="MAX_ENTRIES"?"Reduce max_entries or list this folder with fs_list instead":"Reduce max_depth or list this folder with fs_list instead"}),(d==="digest"||e.include_summary)&&(T.summary=v);let D={};if(e.grep?.query)try{let R=new He(this.config),j={directory_id:t,workspace_id:e.workspace_id,device_id:e.device_id,path:e.path??".",query:e.grep.query,mode:e.grep.mode??"substring",file_glob:e.grep.file_glob,max_files:e.grep.max_files??2e3,max_matches:e.grep.max_matches??200,context_lines:e.grep.context_lines??2,case_sensitive:e.grep.case_sensitive??!1},w=await R.execute(j);w.ok&&(D.grep={matches:w.data.matches,meta:w.data.meta,context:w.data.context})}catch{}let I=Ka(e.read?.paths),X=[];if(e.read?.auto){let R=rt(e.read.auto.max_files??10,1,50),j=[];Uo(C,j,3e3),X=Ba(j).slice(0,R)}let $=jo(Ua([...I,...X]),50);if($.length>0)try{let R=rt(e.read?.auto?.max_bytes_each??2e4,1,2e5),j=new Ge(this.config),w={directory_id:t,workspace_id:e.workspace_id,device_id:e.device_id,default_limit:R,default_encoding:"utf-8",items:$.map(Z=>({path:Z}))},x=await j.execute(w);x.ok&&(D.read_many={files:x.data.files.map(Z=>({path:Z.path,content:Z.content,bytes_read:Z.bytes_read,truncated:Z.truncated,error:Z.error})),context:x.data.context})}catch{}return Object.keys(D).length>0&&(T.extras=D),P("tree",S,!0,void 0,{file_count:y.value}),T}};import ln from"node:fs/promises";import nt from"node:path";import qa from"lodash/clamp.js";import Wa from"lodash/orderBy.js";function Ja(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];if(n==="*")r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/\\\\]*",r++);else if(n==="?")t+="[^/\\\\]",r++;else if(n==="["){let i=e.indexOf("]",r);if(i===-1)t+="\\[",r++;else{let a=e.substring(r+1,i);a.startsWith("!")?t+="[^"+a.substring(1)+"]":t+="["+a+"]",r=i+1}}else"\\^$|.+(){}[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return o.toLowerCase().includes(e.toLowerCase())}}function Ha(o,e,t){return t==="glob"?Ja(o,e):o.toLowerCase().includes(e.toLowerCase())}function Ga(o,e,t){let r=100;if(e){for(let n of e)if(o.path.startsWith(n)){r+=50;break}}if(t){for(let n of t)if(o.path.startsWith(n)){r-=30;break}}return o.name===o.path.split("/").pop()&&(r+=20),r}function Va(o,e){let t="^",r=0;for(;r<e.length;){let n=e[r];n==="*"?r+1<e.length&&e[r+1]==="*"?(t+=".*",r+=2):(t+="[^/]*",r++):n==="?"?(t+="[^/]",r++):"\\^$|.+(){}[]".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}t+="$";try{return new RegExp(t,"i").test(o)}catch{return!1}}async function dn(o,e,t,r,n,i,a,s,c,l,d,p,f,m,g,h,y,_){if(l.length>=c)return;let v;try{v=await ln.readdir(o,{withFileTypes:!0})}catch{return}let k=s?v:v.filter(E=>!E.name.startsWith("."));for(let E of k){if(l.length>=c)break;let C=nt.join(o,E.name),S=e==="."?E.name:nt.posix.join(e,E.name);if(Q(S,E.isDirectory(),p,f,_).shouldIgnore){d.value++;continue}if(m&&!Va(S,m)){i&&E.isDirectory()&&await dn(C,S,t,r,n,i,a,s,c,l,d,p,f,m,g,h,y,_);continue}let D=Ha(E.name,r,n),I="other";if(E.isDirectory()?I="dir":E.isFile()?I="file":E.isSymbolicLink()&&(I="symlink"),D&&(a==="all"||a==="files"&&(I==="file"||I==="symlink")||a==="dirs"&&I==="dir")){let $,R;if(y!==!1)try{let x=await ln.stat(C);$=x.isFile()?x.size:void 0,R=Math.floor(x.mtimeMs/1e3)}catch{}let j=I==="file"?nt.extname(E.name).slice(1):void 0,w=Ga({name:E.name,path:S},g,h);l.push({name:E.name,path:S,type:I,size:$,mtime:R,ext:j,hidden:E.name.startsWith("."),ignored:!1,score:w,matched:"name"})}i&&I==="dir"&&await dn(C,S,t,r,n,i,a,s,c,l,d,p,f,m,g,h,y)}}var nr=class extends H{async executeTool(e){let t=e.directory_id,r=z(this.config,t),n=e.query;if(!n||n.length===0)throw A("INVALID_INPUT","Query is required.",{hint:'Query should be a pattern to match file or directory names. Use a substring (default) or glob pattern (with mode="glob"). Examples: "config", "*.ts", "test/**"'});let i=e.mode??"substring",a=e.recursive??!0,s=e.only??"all",c=e.include_hidden??!1,l=qa(e.max_results??200,1,2e4),d=Math.max(e.offset??0,0),p=e.file_glob,f=e.prefer_paths,m=e.avoid_paths,g=e.include_stats!==!1,{absTarget:h,rel:y}=await re(r.path,e.path??"."),_=h,v=y,k=[];if(y!==".")try{let x=await ln.stat(h);if(!x.isDirectory())if(x.isFile()){_=nt.dirname(h);let Z=nt.posix.dirname(y);v=Z==="."?".":Z,k.push({type:"warning",description:`Search path "${y}" is not a directory (it's a file). Searching the directory containing it instead: "${v}"`})}else throw A("NOT_A_DIRECTORY","Search path is not a directory.",{path:y,hint:'The search path must be a directory. Search looks for files/directories matching the query within directories. Use "." to search from the root, or provide a directory path.'})}catch(x){throw Y(x)?x:U(x,"Failed to stat search path.")}let E=fe(e),C={directory_id:t,workspace_id:e.workspace_id,directory_path:r.path},S=[],T={value:0};await dn(_,v,r.path,n,i,a,s,c,l+d,S,T,C,this.config,p,f,m,g,E);let D=Wa(S,[x=>x.score??0,"name"],["desc","asc"]),I=D.slice(d,d+l),X=d+I.length,$=X<D.length,R={count:I.length,limit:l,offset:d,has_more:$,next_offset:$?X:void 0},j=N({workspace_id:e.workspace_id,device_id:e.device_id,directory_id:t,path:v});P("search",j,!0,void 0,{file_count:I.length});let w={results:I,meta:R,context:j,filtered:{ignored_count:T.value}};return k.length>0&&(w.messages=k),w}};var or=class{config;executers=new Map;constructor(e){this.config=e,this.initializeExecuters()}initializeExecuters(){this.executers.set("fs_list",new er(this.config)),this.executers.set("fs_read",new Je(this.config)),this.executers.set("fs_info",new tr(this.config)),this.executers.set("fs_tree",new rr(this.config)),this.executers.set("fs_search",new nr(this.config)),this.executers.set("fs_grep",new He(this.config)),this.executers.set("fs_read_many",new Ge(this.config))}async executeTool(e,t){let r=this.executers.get(e);if(!r)return Ne({code:"UNKNOWN_TOOL",message:`Unknown tool: ${e}`,details:{toolName:e}});try{return await r.execute(t)}catch(n){return Y(n)?Ne(n):Ne({...L(n),details:{raw:String(n)}})}}getExecuter(e){return this.executers.get(e)}hasTool(e){return this.executers.has(e)}getRegisteredTools(){return Array.from(this.executers.keys())}};import Wo from"lodash/isObject.js";import Pe from"lodash/get.js";function ot(o){let e=Date.now()-o,t=parseFloat((e/1e3).toFixed(2));return{execution_ms:e,execution_sec:t}}function za(o){return Wo(o)&&typeof Pe(o,"ok")=="boolean"}function Ya(o){let e=za(o),t=e?!!Pe(o,"ok"):!0,r,n,i;if(t){if(e?r=Pe(o,"data")??Pe(o,"result")??o:r=o,Wo(r)&&Array.isArray(Pe(r,"messages"))){i=Pe(r,"messages");let a={...r};delete a.messages,r=a}}else e?n=Pe(o,"error")??o:n=o;return{ok:t,result:r,error:n,messages:i}}function Jo(o,e,t,r){let n=ot(r),{ok:i,result:a,error:s,messages:c}=Ya(t);return wr({type:"tool_result",job_id:o,tool:e,ok:i,timing:n,...i?{result:a??null}:{error:s??{code:"UNKNOWN",message:"Unknown error"}},messages:c})}function Ho(o,e,t,r){let n=ot(r);return{type:"tool_result",job_id:o,tool:e,ok:!1,error:L(t),timing:n}}var M=class{toolName;jobId;ok;elapsedSec;raw;constructor(e,t,r,n){this.toolName=e,this.jobId=t,this.ok=r.ok,this.elapsedSec=n,this.raw=r}getErrorDescription(){return`error: ${K(this.raw.error)}`}getStatusIcon(){return this.ok?"\u2713":"\u2717"}getStatusText(){return this.ok?"SUCCESS":"FAILED"}toString(){let e=this.getStatusIcon(),t=this.getDescription();return`${e} ${this.toolName} (${t}, elapsed=${this.elapsedSec}s)`}};var it=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{items:e,meta:t,filtered:r,context:n}=this.output,i=e?.length??0,a=r?.ignored_count??0,s=n?.path??"unknown",c=[];i>0&&c.push(`${i} item${i!==1?"s":""}`),a>0&&c.push(`${a} ignored`),t?.has_more&&c.push("has_more");let l=c.length>0?c.join(", "):"empty";return`path=${s}, ${l}`}};var st=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{bytes_read:e,eof:t,context:r}=this.output,n=r?.path??"unknown",i=e??0,a=!t,s=[`path=${n}`,`${i} bytes`];return a&&s.push("truncated"),s.join(", ")}};var at=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{type:e,size:t,context:r}=this.output,n=r?.path??"unknown",i=t!==void 0?`${t} bytes`:"no size";return`path=${n}, type=${e}, ${i}`}};var ct=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{tree:e,filtered:t,summary:r,context:n}=this.output,i=n?.path??"unknown",a=t?.ignored_count??0,s=[`path=${i}`];if(r){let{total_entries:c,files:l,dirs:d}=r;c!==void 0&&s.push(`${c} entries`),l!==void 0&&s.push(`${l} files`),d!==void 0&&s.push(`${d} dirs`)}else if(e){let c=d=>{let p=1;if(d.children)for(let f of d.children)p+=c(f);return p},l=c(e);s.push(`${l} nodes`)}return a>0&&s.push(`${a} ignored`),this.output.truncated&&s.push("truncated"),s.join(", ")}};var ut=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{results:e,meta:t,filtered:r,context:n}=this.output,i=n?.path??"unknown",a=e?.length??0,s=r?.ignored_count??0,c=[`path=${i}`,`${a} result${a!==1?"s":""}`];return s>0&&c.push(`${s} ignored`),t?.has_more&&c.push("has_more"),c.join(", ")}};var lt=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{matches:e,meta:t,filtered:r,context:n}=this.output,i=n?.path??"unknown",a=e?.length??0,s=t?.files_scanned??0,c=r?.ignored_count??0,l=[`path=${i}`,`${a} match${a!==1?"es":""}`,`${s} file${s!==1?"s":""} scanned`];return c>0&&l.push(`${c} ignored`),t?.truncated&&l.push("truncated"),l.join(", ")}};var dt=class extends M{output;constructor(e,t,r,n){super(e,t,r,n),this.output=r.ok?r.data:void 0}getDescription(){if(!this.ok)return this.getErrorDescription();if(!this.output)return"no result";let{files:e}=this.output,t=e?.length??0,r=e?.filter(s=>!s.error).length??0,n=t-r,i=e?.reduce((s,c)=>s+(c.bytes_read??0),0)??0,a=[`${t} file${t!==1?"s":""}`,`${r} success`];return n>0&&a.push(`${n} error${n!==1?"s":""}`),i>0&&a.push(`${i} bytes`),a.join(", ")}};function pn(o,e,t,r){switch(o){case"fs_list":return new it(o,e,t,r);case"fs_read":return new st(o,e,t,r);case"fs_info":return new at(o,e,t,r);case"fs_tree":return new ct(o,e,t,r);case"fs_search":return new ut(o,e,t,r);case"fs_grep":return new lt(o,e,t,r);case"fs_read_many":return new dt(o,e,t,r);default:{class n extends M{getDescription(){return this.ok?"completed":"failed"}}return new n(o,e,t,r)}}}var ir=class{name="tools-orchestrator";handlers(){return{"ws:connected":async(e,t)=>{t.notifier.info(`WS connected: ${e.url}`,{scope:"system"})},"ws:rx":async(e,t)=>{try{let r=JSON.parse(e.text),n=Xt.safeParse(r);if(!n.success){t.notifier.error("Unexpected message format",{scope:"system"});return}n.success&&n.data.type==="tool_call"&&(t.bus.emit("tool:call",n.data),await this.handleToolCall(n.data,t))}catch{t.notifier.error("Unexpected message format",{scope:"system"})}}}}async handleToolCall(e,t){let r=e.tool,n=e.job_id,i=Tr(e.args).set("workspace_id",e.workspace_id).set("device_id",e.device_id).set("context",e.context).value(),a=i.directory_id,s=t.engine.configurationContext.configuration,c=s.directories.map(p=>p.id).join(", ")||"none",l=s.directories.map(p=>p.path).join(", ")||"none";t.notifier.info(`Tool call: ${r} (job=${n}, directory_id=${a||"MISSING"}, available_ids=[${c}], available_paths=[${l}], directory_count=${s.directories.length})`,{scope:"system"}),t.notifier.info(`Executing: ${r}`);let d=Date.now();try{let f=await new or(s).executeTool(r,i),m=Jo(n,r,f,d);Qt.parse(m),t.bus.emit("ws:tx",{text:JSON.stringify(m)});let g=ot(d),h=pn(r,n,f,g.execution_sec);h.ok?t.notifier.success(h.toString()):t.notifier.error(h.toString())}catch(p){let f=Ho(n,r,p,d);Qt.parse(f),t.bus.emit("ws:tx",{text:JSON.stringify(f)});let m=ot(d),g={ok:!1,error:L(p)},h=pn(r,n,g,m.execution_sec);t.notifier.error(h.toString())}}};var fn=[{name:"fs_list",version:"1.0",description:"List files and folders at a relative path inside a shared folder.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},limit:{type:"integer",minimum:1,maximum:1e3,default:200},offset:{type:"integer",minimum:0,default:0},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},sort:{type:"string",enum:["name","mtime","size"],default:"name"},order:{type:"string",enum:["asc","desc"],default:"asc"},detail:{type:"string",enum:["basic","stat","digest"],default:"stat"}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_read",version:"1.0",description:"Read the contents of a SINGLE text file inside a shared folder. For reading many files at once, prefer fs_read_many instead of multiple fs_read calls.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",minLength:1},offset:{type:"integer",minimum:0,default:0},limit:{type:"integer",minimum:1,maximum:2e5,default:4e4},encoding:{type:"string",default:"utf-8"}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_FILE","PERMISSION_DENIED","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_info",version:"1.0",description:"Get metadata about a file or directory (type, size, timestamps, symlink).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",minLength:1}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","PERMISSION_DENIED","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_tree",version:"1.0",description:"Return a directory tree from a relative path up to max_depth.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},max_depth:{type:"integer",minimum:1,maximum:20,default:3},max_entries:{type:"integer",minimum:1,maximum:2e4,default:5e3},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},detail:{type:"string",enum:["basic","stat","digest"],default:"stat"},include_display:{type:"boolean",default:!1},max_display_rows:{type:"integer",minimum:1,maximum:2e4,default:2e3}},required:["path"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_search",version:"1.0",description:"Search for files/folders by name inside a root, optionally recursively.",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},query:{type:"string",minLength:1},mode:{type:"string",enum:["substring","glob"],default:"substring"},recursive:{type:"boolean",default:!0},include_hidden:{type:"boolean",default:!1},only:{type:"string",enum:["all","files","dirs"],default:"all"},max_results:{type:"integer",minimum:1,maximum:2e4,default:200}},required:["query"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","INVALID_INPUT","INTERNAL","UNKNOWN_ROOT"]},{name:"fs_grep",version:"1.0",description:"Search for text content inside files (like grep/ripgrep).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},path:{type:"string",default:"."},query:{type:"string",minLength:1},mode:{type:"string",enum:["substring","regex"],default:"substring"},file_glob:{type:"string"},max_files:{type:"integer",minimum:1,maximum:1e4,default:2e3},max_matches:{type:"integer",minimum:1,maximum:1e3,default:200},context_lines:{type:"integer",minimum:0,maximum:10,default:2},case_sensitive:{type:"boolean",default:!1}},required:["query"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_DIRECTORY","INVALID_INPUT","INTERNAL"]},{name:"fs_read_many",version:"1.0",description:"Read multiple files in a single call (batch read). Prefer this over multiple fs_read calls when you need to read several files\u2014fewer round-trips and better performance (up to 50 items per call).",inputSchema:{type:"object",properties:{directory_id:{type:"string",minLength:1},items:{type:"array",minItems:1,maxItems:50,items:{type:"object",properties:{path:{type:"string",minLength:1},offset:{type:"integer",minimum:0,default:0},limit:{type:"integer",minimum:1,maximum:2e5},encoding:{type:"string"}},required:["path"]}},default_limit:{type:"integer",minimum:1,maximum:2e5,default:12e3},default_encoding:{type:"string",default:"utf-8"}},required:["items"]},errorCodes:["PATH_ESCAPE","NOT_FOUND","NOT_A_FILE","INVALID_INPUT","INTERNAL"]}];var hn=class extends q{constructor(){super(new B({name:"tools-job",lane:"worker",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){t.notifier.info("Executing supported tools job");let n=t.engine.configurationContext.configuration.device?.id;if(!n){t.notifier.error("Cannot publish tools: device ID not available");return}let i={type:"tools_publish",device_id:n,tools:fn};t.bus.emit("ws:tx",{text:JSON.stringify(i)}),t.notifier.success(`\u2192 tools_publish (count=${fn.length})`)}},mn=new hn;function Go(){return new ne(mn,void 0)}var gn=class extends q{constructor(){super(new B({name:"directories-job",lane:"worker",priority:1e3,locks:[],maxAttempts:1,cancellable:!1}))}async run(e,t){t.notifier.info("Executing directories job");let r=t.engine.configurationContext.configuration,n=r.device?.id;if(!n){t.notifier.error("Cannot publish directories: device ID not available");return}let i=r.directories.map(s=>({id:s.id,name:s.name,path:_r(s.path)??s.name,path_hint:s.tag||void 0})),a={type:"directories_publish",device_id:n,directories:i};t.bus.emit("ws:tx",{text:JSON.stringify(a)}),t.notifier.success(`\u2192 directories_publish (dirs=${a.directories.length})`)}},yn=new gn;function Vo(){return new ne(yn,void 0)}var sr=class{name="meta-data-orchestrator";onRegister(e){e.engine.register(mn),e.engine.register(yn)}handlers(){return{"meta:data:requested:tools":async(e,t)=>{t.notifier.info("MetaData: tools requested -> dispatching supported tools job"),t.engine.dispatch(Go())},"meta:data:requested:directories":async(e,t)=>{t.notifier.info("MetaData: directories requested -> dispatching directories job"),t.engine.dispatch(Vo())}}}};var ar=class{constructor(e){this.argv=e;let t=e.map(p=>p.trim()?.toLowerCase()),r=e.map(p=>p.trim()),n=this.parseKeyValue(t,r,["--env"]);n.match&&(this.enviromentFile=n.value);let i=this.parseKeyValue(t,r,["--root"]);i.match&&(this.rootPath=i.value);let a=this.parseKeyValue(t,r,["--control-url"]);a.match&&(this.controlUrl=a.value);let s=this.parseKeyValue(t,r,["--bridge-ws-url"]);s.match&&(this.bridgeWsUrl=s.value);let c=this.parseKeyValue(t,r,["--private-key-file"]);c.match&&c.value&&(this.privateKeyFile=c.value);let l=this.parseKeyValue(t,r,["--public-key-file"]);l.match&&l.value&&(this.publicKeyFile=l.value);let d=this.parseKeyValue(t,r,["--enrollment-file"]);d.match&&d.value&&(this.enrollmentFile=d.value)}enviromentFile;rootPath;controlUrl;bridgeWsUrl;privateKeyFile;publicKeyFile;enrollmentFile;parseKeyValue(e,t,r){let n=r.map(i=>i.toLowerCase()?.trim()).filter(i=>i!==void 0);if(n.length===0)return{match:!1,value:void 0};for(let i of n){let a=e.findIndex(s=>{let c=s.toLowerCase();return c===i||c.startsWith(i+"=")});if(a!==-1){let s=t[a],c=s.toLowerCase().indexOf("=");return c!==-1?{match:!0,value:s.substring(c+1)||void 0}:{match:!0,value:t[a+1]??void 0}}}return{match:!1,value:void 0}}};var cr=class{bus;flags;constructor(e,t){this.bus=e,this.flags=t??new be(!1)}info(e,t){return this.push(e,t)}warn(e,t){let r=Object.assign({},t,{kind:"warning"});return this.push(e,r)}error(e,t){let r=Object.assign({},t,{kind:"error"});return this.push(e,r)}success(e,t){let r=Object.assign({},t,{kind:"success"});return this.push(e,r)}push(e,t){if((t?.scope??"default")==="system"&&!this.flags.debug&&!this.flags.headless)return null;let n=new ce(e,t);return this.bus.emit("notify:event",n),n}};var ur=class{bus;constructor(e){this.bus=e}info(e,t){this.push(e,Object.assign({},t,{level:"info"}))}warn(e,t){this.push(e,Object.assign({},t,{level:"warn"}))}error(e,t){this.push(e,Object.assign({},t,{level:"error"}))}debug(e,t){this.push(e,Object.assign({},t,{level:"debug"}))}success(e,t){this.push(e,Object.assign({},t,{level:"success"}))}push(e,t){let r=new yt(e,t);this.bus.emit("log",r)}};import lr from"dotenv";import{existsSync as zo}from"node:fs";import{join as Qa,resolve as Xa,dirname as Za}from"node:path";function Yo(o){lr.config({quiet:!0});let e=Qa(process.cwd(),"apps","agent",".env");zo(e)&&lr.config({path:e,override:!0,quiet:!0}),o.enviromentFile&&lr.config({path:o.enviromentFile,override:!0,quiet:!0});let t=Xa(Za(process.argv[1]??"."),".env.production");zo(t)&&lr.config({path:t,override:!1,quiet:!0})}async function ec(){let o=new It,e=new bt,t=await Pn(),r=new ar(process.argv);Yo(r);let n=ho(process.argv);if(n.headless){let l=Co(r.enrollmentFile);console.log(`[agent] Headless boot (${n.reason})`),console.log(`[agent] Enrollment: ${l}`),l==="none"&&console.log("[agent] No enrollment key (set ENROLMENT_KEY or DLINK_ENROLMENT_KEY, or use --enrollment-file)")}let i=new be(!1,n.headless,n.reason),a=new ur(o),s=new cr(o,i);Yn(o,i);let c=new At({bus:o,argv:r,logger:a,notifier:s,storage:e,secrets:t,flags:i,lanes:[new me("console",1),new me("supervisor",1),new me("main",1),new me("ws",1),new me("worker",8),new me("io",4)]});c.register(Pr),c.register(qr),c.register(Ln),c.register(Mn),c.register($n),c.registerOrchestrator(new Ht),c.registerOrchestrator(new jt),c.registerOrchestrator(new Kt),c.registerOrchestrator(new Yt),c.registerOrchestrator(new Zt),c.registerOrchestrator(new Vt),c.registerOrchestrator(new ir),c.registerOrchestrator(new sr),await c.init(),await c.start()}ec();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devicelink/dlink",
-  "version": "0.3.5",
+  "version": "0.3.8",
   "description": "DeviceLink CLI agent — secure, local-first device access with explicit user consent",
   "private": false,
   "type": "module",