@kici-dev/shared 0.1.13 → 0.1.15

package/dist/crypto.js

@@ -1,67 +0,0 @@
-import "./chunk-gOLHoazu.js";
-import crypto, { createHash } from "node:crypto";
-import { readFile } from "node:fs/promises";
-//#region src/crypto.ts
-/** Compute SHA-256 hex digest of a string or Buffer. */
-function sha256(input) {
-	return createHash("sha256").update(input).digest("hex");
-}
-/** Compute SHA-256 hex digest of a file's contents. */
-async function sha256File(filePath) {
-	return sha256(await readFile(filePath));
-}
-/**
-* Normalize line endings to LF so hashes computed on different platforms agree.
-*
-* Git for Windows ships with `core.autocrlf=true` in the system gitconfig, so a
-* `git clone` of a Linux-authored repo on a Windows host checks out text files
-* with CRLF in the working tree. The compiler hashed the LF source on Linux,
-* but the agent on Windows reads CRLF and computes a different hash — every
-* dispatch fails with a "lock file is out of date" error even though the
-* semantic content is identical.
-*
-* Applied at the boundaries where source / asset content enters the hash:
-*   - raw workflow source (`.kici/workflows/*.ts`) at hash time, in both the
-*     compiler (lockfile generation) and the agent (drift verification).
-*   - file content portions of the asset digest (`hashFiles` resolution) on
-*     both sides.
-*
-* Standalone `\r` is also collapsed to `\n` for safety against legacy
-* Mac-style endings, though TypeScript source files essentially never carry
-* those in practice.
-*/
-function normalizeLineEndings(input) {
-	return input.replace(/\r\n?/g, "\n");
-}
-/** HKDF info string for ECDH-derived AES keys (upload encryption). */
-const HKDF_INFO = "kici-upload-encryption";
-/** Empty salt — ECDH output is already high entropy. */
-const HKDF_SALT = Buffer.alloc(0);
-/**
-* Derive an AES-256 key from an X25519 ECDH shared secret using HKDF.
-*
-* Used by the compiler (encrypt) and agent (decrypt) for tarball uploads.
-* Keys must be DER-encoded (PKCS8 for private, SPKI for public).
-*/
-function deriveSharedSecret(ourPrivateKey, theirPublicKey) {
-	const ourKeyObj = crypto.createPrivateKey({
-		key: ourPrivateKey,
-		format: "der",
-		type: "pkcs8"
-	});
-	const theirKeyObj = crypto.createPublicKey({
-		key: theirPublicKey,
-		format: "der",
-		type: "spki"
-	});
-	const sharedSecret = crypto.diffieHellman({
-		publicKey: theirKeyObj,
-		privateKey: ourKeyObj
-	});
-	const derivedKey = crypto.hkdfSync("sha256", sharedSecret, HKDF_SALT, HKDF_INFO, 32);
-	return Buffer.from(derivedKey);
-}
-//#endregion
-export { deriveSharedSecret, normalizeLineEndings, sha256, sha256File };
-
-//# sourceMappingURL=crypto.js.map

package/dist/error.d.ts

@@ -1,16 +0,0 @@
-/**
- * Extract a human-readable error message from an unknown thrown value.
- */
-export declare function toErrorMessage(err: unknown): string;
-/**
- * Serialize an error into a structured object suitable for logging.
- *
- * Captures the message, error type name, common diagnostic fields
- * (`code`, `status`, response details), and the chained `cause`.
- * Falls back to a non-empty descriptor when `err.message` is empty —
- * an empty message field is a debugging dead end (we've hit it on
- * sync failures where the underlying library throws errors with no
- * message but populated `.code` / `.response.status`).
- */
-export declare function serializeError(err: unknown): Record<string, unknown>;
-//# sourceMappingURL=error.d.ts.map

package/dist/error.js

@@ -1,58 +0,0 @@
-import "./chunk-gOLHoazu.js";
-//#region src/error.ts
-/**
-* Extract a human-readable error message from an unknown thrown value.
-*/
-function toErrorMessage(err) {
-	return err instanceof Error ? err.message : String(err);
-}
-/**
-* Serialize an error into a structured object suitable for logging.
-*
-* Captures the message, error type name, common diagnostic fields
-* (`code`, `status`, response details), and the chained `cause`.
-* Falls back to a non-empty descriptor when `err.message` is empty —
-* an empty message field is a debugging dead end (we've hit it on
-* sync failures where the underlying library throws errors with no
-* message but populated `.code` / `.response.status`).
-*/
-function serializeError(err) {
-	if (err === null || err === void 0) return { message: String(err) };
-	if (typeof err !== "object") return { message: String(err) };
-	const e = err;
-	const out = {};
-	const rawMessage = err instanceof Error ? err.message : e.message;
-	out.message = rawMessage && rawMessage.length > 0 ? rawMessage : `<${describeShape(err)}>`;
-	if (err instanceof Error && err.name && err.name !== "Error") out.name = err.name;
-	if (typeof e.code === "string" || typeof e.code === "number") out.code = e.code;
-	const response = e.response;
-	if (response && typeof response === "object") {
-		if (typeof response.status === "number") out.status = response.status;
-		if (response.statusText) out.statusText = response.statusText;
-		if (response.data !== void 0) out.responseData = trimResponseData(response.data);
-	}
-	if (e.cause !== void 0) out.cause = serializeError(e.cause);
-	return out;
-}
-/**
-* Describe an error's shape when its `.message` is empty so logs
-* still convey something useful (vs. a bare `error: ""`).
-*/
-function describeShape(err) {
-	const ctor = err.constructor?.name;
-	if (ctor && ctor !== "Object") return `${ctor} with empty message`;
-	const keys = Object.keys(err).slice(0, 5).join(",");
-	return keys ? `object{${keys}}` : "empty error";
-}
-/**
-* Cap response payload size to keep logs readable.
-*/
-function trimResponseData(data) {
-	const s = typeof data === "string" ? data : JSON.stringify(data);
-	if (s.length <= 500) return data;
-	return s.slice(0, 500) + `…(+${s.length - 500} chars)`;
-}
-//#endregion
-export { serializeError, toErrorMessage };
-
-//# sourceMappingURL=error.js.map

package/dist/error.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=error.test.d.ts.map

package/dist/format-bytes.d.ts

@@ -1,5 +0,0 @@
-/**
- * Format bytes to a human-readable string.
- */
-export declare function formatBytes(bytes: number): string;
-//# sourceMappingURL=format-bytes.d.ts.map

package/dist/format-bytes.js

@@ -1,15 +0,0 @@
-import "./chunk-gOLHoazu.js";
-//#region src/format-bytes.ts
-/**
-* Format bytes to a human-readable string.
-*/
-function formatBytes(bytes) {
-	if (bytes < 1024) return `${bytes} B`;
-	if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
-	if (bytes < 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
-	return `${(bytes / (1024 * 1024 * 1024)).toFixed(1)} GB`;
-}
-//#endregion
-export { formatBytes };
-
-//# sourceMappingURL=format-bytes.js.map

package/dist/format-bytes.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=format-bytes.test.d.ts.map

package/dist/format-duration.d.ts

@@ -1,11 +0,0 @@
-/**
- * Format seconds into human-readable uptime.
- * Examples: "45s", "3m 12s", "2h 15m", "1d 3h 12m"
- */
-export declare function formatUptime(seconds: number): string;
-/**
- * Format a duration in milliseconds to a human-readable string.
- * Examples: "0s", "0.3s", "12.3s", "1m 23s", "1h 2m 3s"
- */
-export declare function formatDuration(ms: number): string;
-//# sourceMappingURL=format-duration.d.ts.map

package/dist/format-duration.js

@@ -1,32 +0,0 @@
-import "./chunk-gOLHoazu.js";
-//#region src/format-duration.ts
-/**
-* Format seconds into human-readable uptime.
-* Examples: "45s", "3m 12s", "2h 15m", "1d 3h 12m"
-*/
-function formatUptime(seconds) {
-	if (seconds < 60) return `${seconds}s`;
-	if (seconds < 3600) return `${Math.floor(seconds / 60)}m ${seconds % 60}s`;
-	const hours = Math.floor(seconds / 3600);
-	const mins = Math.floor(seconds % 3600 / 60);
-	if (hours < 24) return `${hours}h ${mins}m`;
-	return `${Math.floor(hours / 24)}d ${hours % 24}h ${mins}m`;
-}
-/**
-* Format a duration in milliseconds to a human-readable string.
-* Examples: "0s", "0.3s", "12.3s", "1m 23s", "1h 2m 3s"
-*/
-function formatDuration(ms) {
-	if (ms < 0) return "0s";
-	const totalSeconds = ms / 1e3;
-	if (totalSeconds < 60) return `${totalSeconds.toFixed(1)}s`;
-	const hours = Math.floor(totalSeconds / 3600);
-	const minutes = Math.floor(totalSeconds % 3600 / 60);
-	const seconds = Math.floor(totalSeconds % 60);
-	if (hours > 0) return `${hours}h ${minutes}m ${seconds}s`;
-	return `${minutes}m ${seconds}s`;
-}
-//#endregion
-export { formatDuration, formatUptime };
-
-//# sourceMappingURL=format-duration.js.map

package/dist/format-duration.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=format-duration.test.d.ts.map

package/dist/idempotency.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=idempotency.test.d.ts.map

package/dist/logger.d.ts

@@ -1,60 +0,0 @@
-import winston from 'winston';
-/** Set the service name for all loggers in this process. Call once at startup. */
-export declare function setServiceName(name: 'platform' | 'orchestrator' | 'agent'): void;
-/** Get the current service name (for testing/inspection). */
-export declare function getServiceName(): string | undefined;
-/**
- * Build the rotated log filename. When a stable instance ID is available in the
- * environment, append it so multiple processes (e.g. several orchestrators or
- * agents) can safely share one KICI_LOG_DIR without racing on the same file.
- *
- * Precedence matches the tier that owns each variable:
- * orchestrator (KICI_CLUSTER_INSTANCE_ID) > agent (KICI_AGENT_ID) > platform
- * (KICI_PLATFORM_INSTANCE_ID). Sanitize defensively to filesystem-safe characters.
- */
-export declare function buildLogFilename(serviceName: string | undefined): string;
-/** Log level type */
-export type LogLevel = 'error' | 'warn' | 'info' | 'debug';
-/** Minimal logger interface for dependency injection (avoids coupling to winston). */
-export interface Logger {
-    info(message: string, meta?: Record<string, unknown>): void;
-    warn(message: string, meta?: Record<string, unknown>): void;
-    error(message: string, meta?: Record<string, unknown>): void;
-}
-/** Logger creation options */
-interface LoggerOptions {
-    /**
-     * Use JSON format (default: auto-detected from KICI_LOG_FORMAT env var, with
-     * a TTY fallback). Passing an explicit boolean wins over the env var.
-     */
-    json?: boolean;
-    /** Log level (default: 'info') */
-    level?: LogLevel;
-    /** Optional prefix for all messages */
-    prefix?: string;
-}
-/**
- * Create a winston logger instance.
- *
- * @param options - Logger configuration options
- * @returns Configured winston logger
- */
-export declare function createLogger(options?: LoggerOptions): winston.Logger;
-/**
- * Default singleton logger instance for simple use cases. If KICI_LOG_DIR is
- * set but setServiceName() hasn't been called yet (CLI tools, scripts),
- * the file transport stays deferred and is attached only once a service
- * name is known — protecting against writing to `kici-<instanceId>-*.log`.
- */
-export declare const logger: winston.Logger;
-/**
- * Wrap an async startup function so that any thrown error is logged
- * through the structured (JSON-aware) logger before the process exits.
- *
- * Without this guard, a top-level `await` rejection in an ESM entry
- * point is printed by Node.js's default handler (multi-line, not JSON),
- * which breaks log aggregators like ELK.
- */
-export declare function guardStartup(log: winston.Logger, fn: () => Promise<void>): Promise<void>;
-export {};
-//# sourceMappingURL=logger.d.ts.map

package/dist/logger.js

@@ -1,181 +0,0 @@
-import "./chunk-gOLHoazu.js";
-import { toErrorMessage } from "./error.js";
-import { getRequestContext } from "./request-context.js";
-import winston from "winston";
-import pc from "picocolors";
-import DailyRotateFile from "winston-daily-rotate-file";
-//#region src/logger.ts
-let _serviceName;
-/**
-* Tracked set of loggers still waiting for the service name so they can
-* add their rotated-file transport with the right filename. Module-level
-* `createLogger()` calls resolve before the service's `setServiceName()`
-* runs; if we built the file transport eagerly, every such logger would
-* write to `kici-<instanceId>-*.log` (undefined service name) instead of
-* `<service>-<instanceId>-*.log`. Holding them here lets setServiceName
-* attach the correct transport once, in one place.
-*/
-const _pendingFileTransportLoggers = /* @__PURE__ */ new Set();
-function buildFileTransport() {
-	const dir = process.env.KICI_LOG_DIR;
-	if (!dir || dir === "undefined") return void 0;
-	return new DailyRotateFile({
-		dirname: dir,
-		filename: buildLogFilename(_serviceName),
-		datePattern: "YYYY-MM-DD",
-		maxSize: process.env.KICI_LOG_MAX_SIZE ?? "500m",
-		maxFiles: `${process.env.KICI_LOG_RETENTION_DAYS ?? "7"}d`,
-		format: winston.format.combine(winston.format.timestamp(), winston.format((info) => {
-			if (_serviceName) info["service"] = _serviceName;
-			const ctx = getRequestContext();
-			if (ctx.requestId) info["requestId"] = ctx.requestId;
-			if (ctx.runId) info["runId"] = ctx.runId;
-			if (ctx.jobId) info["jobId"] = ctx.jobId;
-			if (ctx.routingKey) info["routingKey"] = ctx.routingKey;
-			if (ctx.traceId) info["traceId"] = ctx.traceId;
-			if (ctx.spanId) info["spanId"] = ctx.spanId;
-			return info;
-		})(), winston.format.json()),
-		zippedArchive: true
-	});
-}
-/** Set the service name for all loggers in this process. Call once at startup. */
-function setServiceName(name) {
-	_serviceName = name;
-	for (const logger of _pendingFileTransportLoggers) {
-		const transport = buildFileTransport();
-		if (transport) logger.add(transport);
-	}
-	_pendingFileTransportLoggers.clear();
-}
-/** Get the current service name (for testing/inspection). */
-function getServiceName() {
-	return _serviceName;
-}
-/**
-* Build the rotated log filename. When a stable instance ID is available in the
-* environment, append it so multiple processes (e.g. several orchestrators or
-* agents) can safely share one KICI_LOG_DIR without racing on the same file.
-*
-* Precedence matches the tier that owns each variable:
-* orchestrator (KICI_CLUSTER_INSTANCE_ID) > agent (KICI_AGENT_ID) > platform
-* (KICI_PLATFORM_INSTANCE_ID). Sanitize defensively to filesystem-safe characters.
-*/
-function buildLogFilename(serviceName) {
-	const base = serviceName ?? "kici";
-	const suffix = (process.env.KICI_CLUSTER_INSTANCE_ID || process.env.KICI_AGENT_ID || process.env.KICI_PLATFORM_INSTANCE_ID || "").replace(/[^A-Za-z0-9_.-]+/g, "_");
-	return suffix ? `${base}-${suffix}-%DATE%.log` : `${base}-%DATE%.log`;
-}
-/**
-* Pick the default JSON-vs-plain selection for `createLogger` callers that do
-* not pass an explicit `json` option. Honours the operator-controlled
-* `KICI_LOG_FORMAT` env var (`json` / `plain` / `auto`); anything else
-* (including typos and unset) falls back to TTY detection so a piped CLI
-* still produces machine-readable JSON.
-*/
-function pickJsonDefault() {
-	const envFormat = process.env.KICI_LOG_FORMAT;
-	if (envFormat === "json") return true;
-	if (envFormat === "plain") return false;
-	return !process.stdout.isTTY;
-}
-/**
-* Create a winston logger instance.
-*
-* @param options - Logger configuration options
-* @returns Configured winston logger
-*/
-function createLogger(options = {}) {
-	const { json = pickJsonDefault(), level = "info", prefix } = options;
-	const TOKEN_MASK_RE = /kat_[0-9a-f]{64}/gi;
-	const maskTokens = (value) => {
-		if (typeof value === "string") return value.replace(TOKEN_MASK_RE, "kat_***");
-		if (Array.isArray(value)) return value.map(maskTokens);
-		if (value !== null && typeof value === "object") {
-			const masked = {};
-			for (const [k, v] of Object.entries(value)) masked[k] = maskTokens(v);
-			return masked;
-		}
-		return value;
-	};
-	const tokenMaskFormat = winston.format((info) => {
-		if (typeof info.message === "string") info.message = info.message.replace(TOKEN_MASK_RE, "kat_***");
-		for (const key of Object.keys(info)) {
-			if (key === "level" || key === "message") continue;
-			info[key] = maskTokens(info[key]);
-		}
-		return info;
-	});
-	const traceContextFormat = winston.format((info) => {
-		if (_serviceName) info["service"] = _serviceName;
-		const ctx = getRequestContext();
-		if (ctx.requestId) info["requestId"] = ctx.requestId;
-		if (ctx.runId) info["runId"] = ctx.runId;
-		if (ctx.jobId) info["jobId"] = ctx.jobId;
-		if (ctx.routingKey) info["routingKey"] = ctx.routingKey;
-		if (ctx.traceId) info["traceId"] = ctx.traceId;
-		if (ctx.spanId) info["spanId"] = ctx.spanId;
-		return info;
-	});
-	const prettyFormat = winston.format.printf(({ level, message, requestId }) => {
-		const traceStr = typeof requestId === "string" ? `${pc.dim(`[${requestId.slice(0, 8)}]`)} ` : "";
-		const prefixStr = prefix ? `${prefix} ` : "";
-		if (level === "info") return `${traceStr}${prefixStr}${message}`;
-		let coloredLevel;
-		switch (level) {
-			case "error":
-				coloredLevel = pc.red(level);
-				break;
-			case "warn":
-				coloredLevel = pc.yellow(level);
-				break;
-			case "debug":
-				coloredLevel = pc.gray(level);
-				break;
-			default: coloredLevel = level;
-		}
-		return `${traceStr}${coloredLevel}: ${prefixStr}${message}`;
-	});
-	const jsonFormat = winston.format.combine(winston.format.timestamp(), traceContextFormat(), tokenMaskFormat(), winston.format.json());
-	const prettyPipeline = winston.format.combine(traceContextFormat(), tokenMaskFormat(), prettyFormat);
-	const loggerInstance = winston.createLogger({
-		level,
-		format: json ? jsonFormat : prettyPipeline,
-		transports: [new winston.transports.Console()]
-	});
-	if (process.env.KICI_LOG_DIR) if (_serviceName) {
-		const transport = buildFileTransport();
-		if (transport) loggerInstance.add(transport);
-	} else _pendingFileTransportLoggers.add(loggerInstance);
-	return loggerInstance;
-}
-/**
-* Default singleton logger instance for simple use cases. If KICI_LOG_DIR is
-* set but setServiceName() hasn't been called yet (CLI tools, scripts),
-* the file transport stays deferred and is attached only once a service
-* name is known — protecting against writing to `kici-<instanceId>-*.log`.
-*/
-const logger = createLogger();
-/**
-* Wrap an async startup function so that any thrown error is logged
-* through the structured (JSON-aware) logger before the process exits.
-*
-* Without this guard, a top-level `await` rejection in an ESM entry
-* point is printed by Node.js's default handler (multi-line, not JSON),
-* which breaks log aggregators like ELK.
-*/
-async function guardStartup(log, fn) {
-	try {
-		await fn();
-	} catch (error) {
-		log.error("Fatal startup error", {
-			error: toErrorMessage(error),
-			stack: error instanceof Error ? error.stack : void 0
-		});
-		process.exit(1);
-	}
-}
-//#endregion
-export { buildLogFilename, createLogger, getServiceName, guardStartup, logger, setServiceName };
-
-//# sourceMappingURL=logger.js.map

package/dist/logger.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=logger.test.d.ts.map

package/dist/package-manager.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=package-manager.test.d.ts.map

package/dist/request-context.d.ts

@@ -1,42 +0,0 @@
-import { AsyncLocalStorage } from 'node:async_hooks';
-/** Trace context fields propagated through the request lifecycle. */
-export interface RequestContext {
-    /** Unique trace ID for a webhook event (UUIDv4). Always present once set. */
-    requestId: string;
-    /** Workflow run ID, set when a workflow run is created. */
-    runId?: string;
-    /** Job ID, set when processing a specific job. */
-    jobId?: string;
-    /** Routing key (e.g. "github:12345"), set when handling a webhook for a source. */
-    routingKey?: string;
-    /** OTel trace ID, set when telemetry is active. */
-    traceId?: string;
-    /** OTel span ID, set when telemetry is active. */
-    spanId?: string;
-}
-/**
- * AsyncLocalStorage instance for propagating request context
- * through async call chains without explicit parameter passing.
- *
- * Usage:
- * ```ts
- * requestContext.run({ requestId: crypto.randomUUID() }, async () => {
- *   // All code in this callback (and its async descendants) can read the context
- *   log.info('Processing webhook'); // auto-enriched with requestId
- * });
- * ```
- */
-export declare const requestContext: AsyncLocalStorage<RequestContext>;
-/**
- * Get the current request context, or an empty object if outside a `run()` scope.
- * Safe to call anywhere -- never throws.
- */
-export declare function getRequestContext(): Partial<RequestContext>;
-/**
- * Merge additional fields into the current request context.
- * No-op if called outside a `run()` scope.
- *
- * @param fields - Partial context fields to merge into the current store
- */
-export declare function enrichRequestContext(fields: Partial<RequestContext>): void;
-//# sourceMappingURL=request-context.d.ts.map

package/dist/request-context.js

@@ -1,37 +0,0 @@
-import "./chunk-gOLHoazu.js";
-import { AsyncLocalStorage } from "node:async_hooks";
-//#region src/request-context.ts
-/**
-* AsyncLocalStorage instance for propagating request context
-* through async call chains without explicit parameter passing.
-*
-* Usage:
-* ```ts
-* requestContext.run({ requestId: crypto.randomUUID() }, async () => {
-*   // All code in this callback (and its async descendants) can read the context
-*   log.info('Processing webhook'); // auto-enriched with requestId
-* });
-* ```
-*/
-const requestContext = new AsyncLocalStorage();
-/**
-* Get the current request context, or an empty object if outside a `run()` scope.
-* Safe to call anywhere -- never throws.
-*/
-function getRequestContext() {
-	return requestContext.getStore() ?? {};
-}
-/**
-* Merge additional fields into the current request context.
-* No-op if called outside a `run()` scope.
-*
-* @param fields - Partial context fields to merge into the current store
-*/
-function enrichRequestContext(fields) {
-	const store = requestContext.getStore();
-	if (store) Object.assign(store, fields);
-}
-//#endregion
-export { enrichRequestContext, getRequestContext, requestContext };
-
-//# sourceMappingURL=request-context.js.map

package/dist/zx.d.ts

@@ -1,8 +0,0 @@
-/**
- * Initialize zx for cross-platform execution.
- * Sets the quote function required by zx 8+ on all platforms.
- * On Windows, also configures pwsh as shell.
- * Call this at the start of any script/binary entry point using zx.
- */
-export declare function initZx(): void;
-//# sourceMappingURL=zx.d.ts.map

package/dist/zx.js

@@ -1,78 +0,0 @@
-import "./chunk-gOLHoazu.js";
-import { execSync } from "node:child_process";
-import { $, quote, quotePowerShell, usePwsh } from "zx";
-//#region src/zx.ts
-const PWSH_INSTALL_DOCS = "https://learn.microsoft.com/en-us/powershell/scripting/install/install-powershell-on-windows";
-/**
-* Initialize zx for cross-platform execution.
-* Sets the quote function required by zx 8+ on all platforms.
-* On Windows, also configures pwsh as shell.
-* Call this at the start of any script/binary entry point using zx.
-*/
-function initZx() {
-	if (process.platform === "win32") {
-		try {
-			usePwsh();
-		} catch {
-			ensurePwshWindows();
-			usePwsh();
-		}
-		$.quote = quotePowerShell;
-	} else $.quote = quote;
-}
-/**
-* Ensure PowerShell Core (pwsh) is installed on Windows.
-* Attempts automatic installation via winget using the built-in powershell.exe.
-* If winget is unavailable, prints installation instructions and exits.
-*/
-function ensurePwshWindows() {
-	console.error("PowerShell Core (pwsh) is required but not found in PATH.\nKiCI uses pwsh for cross-platform command execution.\n");
-	let hasWinget = false;
-	try {
-		execSync("powershell.exe -NoProfile -Command \"Get-Command winget -ErrorAction Stop\"", {
-			stdio: "ignore",
-			timeout: 1e4
-		});
-		hasWinget = true;
-	} catch {}
-	if (!hasWinget) {
-		console.error(`Automatic installation is not possible (winget not found).
-Please install PowerShell Core manually:
-  ${PWSH_INSTALL_DOCS}\n`);
-		process.exit(1);
-	}
-	console.error("Attempting to install PowerShell Core via winget...\n");
-	try {
-		execSync("powershell.exe -NoProfile -Command \"winget install --id Microsoft.PowerShell --accept-source-agreements --accept-package-agreements -e --silent\"", {
-			stdio: "inherit",
-			timeout: 3e5
-		});
-	} catch {
-		console.error(`
-Automatic installation failed.
-Please install PowerShell Core manually:
-  ${PWSH_INSTALL_DOCS}\n`);
-		process.exit(1);
-	}
-	try {
-		const pwshPath = execSync("powershell.exe -NoProfile -Command \"(Get-Command pwsh -ErrorAction Stop).Source\"", {
-			encoding: "utf-8",
-			timeout: 1e4
-		}).trim();
-		if (pwshPath) {
-			const pwshDir = pwshPath.replace(/\\pwsh\.exe$/i, "");
-			process.env.PATH = `${pwshDir};${process.env.PATH}`;
-		}
-	} catch {
-		console.error(`
-PowerShell Core was installed but cannot be found in PATH.
-Please restart your terminal or add pwsh to PATH manually.
-See: ${PWSH_INSTALL_DOCS}\n`);
-		process.exit(1);
-	}
-	console.error("PowerShell Core installed successfully.\n");
-}
-//#endregion
-export { initZx };
-
-//# sourceMappingURL=zx.js.map