@loucompanion/forge-bridge 0.1.1-dev.03b8ba168599

package/dist/cli/cli.service.js

@@ -0,0 +1,770 @@
+import fs from "node:fs/promises";
+import { execFile } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import { createInterface } from "node:readline/promises";
+import { promisify } from "node:util";
+import { redactSecrets, redactText } from "../shared/redaction/redaction.js";
+import { defaultBridgeServiceConfig, ForgeBridgeService } from "../bridge/bridge.service.js";
+import { addRepoMapping, applyLocalConfigDefaults, providerStatusesFor, readLocalConfigSync, removeRepoMapping, resolveLocalConfigPath, writeLocalConfig } from "./local-config.js";
+import { BridgeSessionService } from "../session/session.service.js";
+import { failureResult, parseRunOnceDispatchPacket } from "../session/session.types.js";
+const apiKeySecretGrantEnv = "FORGE_API_KEY_SECRET_GRANT";
+const execFileAsync = promisify(execFile);
+export class ForgeBridgeCliService {
+    sessions;
+    bridgeFactory;
+    pairRunner;
+    constructor(sessions = new BridgeSessionService(), bridgeFactory = (config) => new ForgeBridgeService(config), pairRunner = claimBridgeRunner) {
+        this.sessions = sessions;
+        this.bridgeFactory = bridgeFactory;
+        this.pairRunner = pairRunner;
+    }
+    async run(argv, io = { stdout: process.stdout, stderr: process.stderr }) {
+        const args = parseArgs(argv);
+        if (!args.ok) {
+            io.stderr.write(`${args.error}\n`);
+            return 2;
+        }
+        if (args.command === "connect") {
+            const config = await withDetectedCliProviders(args.config);
+            const missing = [
+                ["server", config.serverUrl],
+                ["runner id", config.runnerId],
+                ["device token", config.deviceToken]
+            ].find(([, value]) => !value);
+            if (missing) {
+                io.stderr.write(`forge-bridge connect requires ${missing[0]}.\n`);
+                return 2;
+            }
+            const controller = new AbortController();
+            const stop = () => controller.abort("signal received");
+            process.once("SIGINT", stop);
+            process.once("SIGTERM", stop);
+            try {
+                await this.bridgeFactory(config).run(controller.signal);
+                return 0;
+            }
+            finally {
+                process.off("SIGINT", stop);
+                process.off("SIGTERM", stop);
+            }
+        }
+        if (args.command === "add-repo") {
+            try {
+                const config = await addRepoMapping(args.label, args.repoPath);
+                const normalizedLabel = args.label.trim();
+                const mapping = config.repoMappings?.find((entry) => entry.label.toLowerCase() === normalizedLabel.toLowerCase());
+                io.stdout.write(`Added repo ${mapping?.label ?? normalizedLabel}: ${mapping?.localPath ?? path.resolve(args.repoPath)}\n`);
+                return 0;
+            }
+            catch (error) {
+                io.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+                return 2;
+            }
+        }
+        if (args.command === "pair") {
+            try {
+                const current = readLocalConfigSync();
+                const code = await resolvePairingCode(args.code);
+                const repoRoot = await resolvePairRepoRoot(args.repoRoot, current.defaultRepoRoot);
+                await fs.mkdir(repoRoot, { recursive: true });
+                const pairArgs = await withDetectedPairCliProviders({ ...args, code, repoRoot });
+                const claim = await this.pairRunner(pairArgs);
+                const next = pairedConfig(current, pairArgs, claim);
+                await writeLocalConfig(next);
+                io.stdout.write(`Paired runner ${claim.runnerId}.\n`);
+                io.stdout.write(`Repo folder: ${repoRoot}\n`);
+                io.stdout.write(`Config: ${resolveLocalConfigPath()}\n`);
+                io.stdout.write("Start the bridge with: forge-bridge connect\n");
+                return 0;
+            }
+            catch (error) {
+                io.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+                return 1;
+            }
+        }
+        if (args.command === "remove-repo") {
+            try {
+                const result = await removeRepoMapping(args.label);
+                io.stdout.write(result.removed ? `Removed repo ${args.label}.\n` : `Repo ${args.label} was not configured.\n`);
+                return result.removed ? 0 : 1;
+            }
+            catch (error) {
+                io.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+                return 2;
+            }
+        }
+        if (args.command === "status") {
+            await writeStatus(args.config, args.checkUpdates, io);
+            return 0;
+        }
+        if (args.command === "cleanup") {
+            return await cleanupRepos(args.config, args.mode, args.force, io);
+        }
+        let redactionSecrets = readEnvSecretValuesForRedaction();
+        try {
+            const dispatchJson = await fs.readFile(args.dispatchPath, "utf8");
+            const dispatch = attachEnvSecretGrant(parseRunOnceDispatchPacket(JSON.parse(dispatchJson)));
+            redactionSecrets = exactSecrets(dispatch);
+            const result = await this.sessions.runOnce(dispatch, {
+                emit: async (event) => {
+                    const line = {
+                        type: "runner_event",
+                        event: redactSecrets(event, redactionSecrets)
+                    };
+                    io.stdout.write(`${JSON.stringify(line)}\n`);
+                }
+            });
+            await writeJsonAtomic(args.resultPath, redactSecrets(result, redactionSecrets));
+            return result.exitCode;
+        }
+        catch (error) {
+            const summary = redactText(error instanceof Error ? error.message : String(error), redactionSecrets);
+            await writeJsonAtomic(args.resultPath, failureResult(summary)).catch(() => undefined);
+            io.stderr.write(`${summary}\n`);
+            return 1;
+        }
+        finally {
+            delete process.env[apiKeySecretGrantEnv];
+        }
+    }
+}
+function attachEnvSecretGrant(dispatch) {
+    if (!dispatch.execution.requiresApiKeySecretGrant) {
+        delete process.env[apiKeySecretGrantEnv];
+        return dispatch;
+    }
+    const raw = process.env[apiKeySecretGrantEnv];
+    delete process.env[apiKeySecretGrantEnv];
+    if (!raw) {
+        return dispatch;
+    }
+    const grant = parseEnvSecretGrant(raw);
+    return {
+        ...dispatch,
+        apiKeySecretGrant: grant
+    };
+}
+function parseEnvSecretGrant(raw) {
+    const value = JSON.parse(raw);
+    if (!value || typeof value !== "object") {
+        throw new Error("API-key secret grant environment value must be an object.");
+    }
+    if (typeof value.grantId !== "string" ||
+        typeof value.provider !== "string" ||
+        typeof value.secret !== "string" ||
+        typeof value.expiresAt !== "string") {
+        throw new Error("API-key secret grant environment value is invalid.");
+    }
+    return {
+        grantId: value.grantId,
+        provider: value.provider,
+        secret: value.secret,
+        expiresAt: value.expiresAt
+    };
+}
+function exactSecrets(dispatch) {
+    return dispatch.apiKeySecretGrant?.secret ? [dispatch.apiKeySecretGrant.secret] : [];
+}
+function readEnvSecretValuesForRedaction() {
+    const raw = process.env[apiKeySecretGrantEnv];
+    if (!raw) {
+        return [];
+    }
+    try {
+        return [parseEnvSecretGrant(raw).secret];
+    }
+    catch {
+        return [];
+    }
+}
+export function parseArgs(argv) {
+    if (argv[0] === "connect") {
+        return parseConnectArgs(argv);
+    }
+    if (argv[0] === "pair") {
+        return parsePairArgs(argv);
+    }
+    if (argv[0] === "add-repo") {
+        if (!argv[1] || !argv[2] || argv.length > 3) {
+            return { ok: false, error: "Usage: forge-bridge add-repo <label> <path>" };
+        }
+        return { ok: true, command: "add-repo", label: argv[1], repoPath: argv[2] };
+    }
+    if (argv[0] === "remove-repo") {
+        if (!argv[1] || argv.length > 2) {
+            return { ok: false, error: "Usage: forge-bridge remove-repo <label>" };
+        }
+        return { ok: true, command: "remove-repo", label: argv[1] };
+    }
+    if (argv[0] === "status") {
+        let checkUpdates = false;
+        for (let index = 1; index < argv.length; index += 1) {
+            const arg = argv[index];
+            if (arg === "--check-updates") {
+                checkUpdates = true;
+            }
+            else {
+                return { ok: false, error: `Unknown argument: ${arg}` };
+            }
+        }
+        return { ok: true, command: "status", config: configuredBridgeServiceConfig(), checkUpdates };
+    }
+    if (argv[0] === "cleanup") {
+        return parseCleanupArgs(argv);
+    }
+    if (argv[0] !== "run-once") {
+        return {
+            ok: false,
+            error: usage()
+        };
+    }
+    let dispatchPath = null;
+    let resultPath = null;
+    for (let index = 1; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === "--dispatch") {
+            dispatchPath = argv[++index] ?? null;
+        }
+        else if (arg === "--result") {
+            resultPath = argv[++index] ?? null;
+        }
+        else {
+            return { ok: false, error: `Unknown argument: ${arg}` };
+        }
+    }
+    if (!dispatchPath || !resultPath) {
+        return { ok: false, error: "run-once requires --dispatch and --result." };
+    }
+    return {
+        ok: true,
+        command: "run-once",
+        dispatchPath: path.resolve(dispatchPath),
+        resultPath: path.resolve(resultPath)
+    };
+}
+function parseConnectArgs(argv) {
+    let serverUrl = null;
+    let runnerId = null;
+    let deviceToken = null;
+    let repoRoot = null;
+    let heartbeatIntervalMs = null;
+    const cliProviders = [];
+    const projectLabels = [];
+    let cleanupWorktrees = null;
+    for (let index = 1; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === "--server") {
+            serverUrl = argv[++index] ?? null;
+        }
+        else if (arg === "--runner-id") {
+            runnerId = argv[++index] ?? null;
+        }
+        else if (arg === "--device-token") {
+            deviceToken = argv[++index] ?? null;
+        }
+        else if (arg === "--repo-root") {
+            repoRoot = argv[++index] ?? null;
+        }
+        else if (arg === "--cli-provider") {
+            cliProviders.push(...splitCsv(argv[++index] ?? ""));
+        }
+        else if (arg === "--project-label") {
+            projectLabels.push(...splitCsv(argv[++index] ?? ""));
+        }
+        else if (arg === "--heartbeat-interval-ms") {
+            heartbeatIntervalMs = Number(argv[++index] ?? "");
+            if (!Number.isFinite(heartbeatIntervalMs) || heartbeatIntervalMs <= 0) {
+                return { ok: false, error: "--heartbeat-interval-ms must be a positive number." };
+            }
+        }
+        else if (arg === "--no-cleanup-worktrees") {
+            cleanupWorktrees = false;
+        }
+        else if (arg === "--cleanup-worktrees") {
+            cleanupWorktrees = true;
+        }
+        else {
+            return { ok: false, error: `Unknown argument: ${arg}` };
+        }
+    }
+    const localConfig = readLocalConfigSync();
+    if (serverUrl === null && !process.env.FORGE_URL?.trim() && !localConfig.serverUrl?.trim()) {
+        return { ok: false, error: "forge-bridge connect requires --server or FORGE_URL." };
+    }
+    const overrides = {};
+    if (serverUrl !== null)
+        overrides.serverUrl = serverUrl;
+    if (runnerId !== null)
+        overrides.runnerId = runnerId;
+    if (deviceToken !== null)
+        overrides.deviceToken = deviceToken;
+    if (repoRoot !== null)
+        overrides.defaultRepoRoot = path.resolve(repoRoot);
+    if (cliProviders.length > 0)
+        overrides.cliProviders = cliProviders;
+    if (projectLabels.length > 0)
+        overrides.projectLabels = projectLabels;
+    if (heartbeatIntervalMs !== null)
+        overrides.heartbeatIntervalMs = heartbeatIntervalMs;
+    if (cleanupWorktrees !== null)
+        overrides.cleanupWorktrees = cleanupWorktrees;
+    return {
+        ok: true,
+        command: "connect",
+        config: configuredBridgeServiceConfig(overrides, localConfig)
+    };
+}
+function parsePairArgs(argv) {
+    const localConfig = readLocalConfigSync();
+    const defaultConfig = configuredBridgeServiceConfig({}, localConfig);
+    let serverUrl = defaultConfig.serverUrl;
+    let code = null;
+    let name = null;
+    let fingerprint = null;
+    let repoRoot = null;
+    let cleanupWorktrees = null;
+    const cliProviders = [];
+    const projectLabels = [];
+    for (let index = 1; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === "--server") {
+            serverUrl = argv[++index] ?? "";
+        }
+        else if (arg === "--code") {
+            code = argv[++index] ?? null;
+        }
+        else if (arg === "--name") {
+            name = argv[++index] ?? null;
+        }
+        else if (arg === "--fingerprint") {
+            fingerprint = argv[++index] ?? null;
+        }
+        else if (arg === "--repo-root") {
+            repoRoot = argv[++index] ?? null;
+        }
+        else if (arg === "--cli-provider") {
+            cliProviders.push(...splitCsv(argv[++index] ?? ""));
+        }
+        else if (arg === "--project-label") {
+            projectLabels.push(...splitCsv(argv[++index] ?? ""));
+        }
+        else if (arg === "--cleanup-worktrees") {
+            cleanupWorktrees = true;
+        }
+        else if (arg === "--no-cleanup-worktrees") {
+            cleanupWorktrees = false;
+        }
+        else if (!arg.startsWith("-") && code === null) {
+            code = arg;
+        }
+        else {
+            return { ok: false, error: `Unknown argument: ${arg}` };
+        }
+    }
+    if (!serverUrl.trim()) {
+        return { ok: false, error: "forge-bridge pair requires --server or configured serverUrl." };
+    }
+    const defaultName = `Local bridge ${os.hostname()}`;
+    const user = os.userInfo().username;
+    return {
+        ok: true,
+        command: "pair",
+        serverUrl,
+        code: normalizePairingCode(code),
+        name: name?.trim() || defaultName,
+        fingerprint: fingerprint?.trim() || `local-bridge:${os.hostname()}:${user}`,
+        repoRoot: repoRoot?.trim() ? path.resolve(repoRoot) : undefined,
+        cleanupWorktrees: cleanupWorktrees ?? localConfig.cleanupWorktrees ?? false,
+        cliProviders: cliProviders.length > 0 ? cliProviders : localConfig.cliProviders && localConfig.cliProviders.length > 0 ? [...localConfig.cliProviders] : ["codex"],
+        projectLabels: projectLabels.length > 0 ? projectLabels : localConfig.projectLabels ? [...localConfig.projectLabels] : []
+    };
+}
+function parseCleanupArgs(argv) {
+    let mode = "stale";
+    let force = false;
+    for (let index = 1; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (arg === "--stale") {
+            mode = "stale";
+        }
+        else if (arg === "--merged") {
+            mode = "merged";
+        }
+        else if (arg === "--all") {
+            mode = "all";
+        }
+        else if (arg === "--force") {
+            force = true;
+        }
+        else {
+            return { ok: false, error: `Unknown argument: ${arg}` };
+        }
+    }
+    return { ok: true, command: "cleanup", config: configuredBridgeServiceConfig(), mode, force };
+}
+function configuredBridgeServiceConfig(overrides = {}, localConfig = readLocalConfigSync()) {
+    return {
+        ...applyLocalConfigDefaults(defaultBridgeServiceConfig(), localConfig),
+        ...overrides
+    };
+}
+function splitCsv(value) {
+    return value
+        .split(",")
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0);
+}
+async function claimBridgeRunner(args) {
+    if (!args.code) {
+        throw new Error("Pairing code is required.");
+    }
+    const response = await fetch(new URL("/api/runners/claim", normalizeServerUrl(args.serverUrl)), {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            code: args.code,
+            name: args.name,
+            fingerprint: args.fingerprint,
+            cliProviders: args.cliProviders,
+            projectLabels: args.projectLabels
+        })
+    });
+    if (!response.ok) {
+        throw new Error(`Pairing failed (${response.status}): ${await response.text()}`);
+    }
+    const value = await response.json();
+    if (!value.runnerId || !value.deviceToken) {
+        throw new Error("Pairing response did not include runner credentials.");
+    }
+    return {
+        runnerId: value.runnerId,
+        deviceToken: value.deviceToken
+    };
+}
+function pairedConfig(current, args, claim) {
+    return {
+        ...current,
+        schemaVersion: 2,
+        serverUrl: args.serverUrl,
+        runnerId: claim.runnerId,
+        deviceToken: claim.deviceToken,
+        deviceName: args.name,
+        defaultRepoRoot: args.repoRoot ?? current.defaultRepoRoot,
+        cleanupWorktrees: args.cleanupWorktrees,
+        cliProviders: [...args.cliProviders],
+        providerStatuses: current.providerStatuses ?? providerStatusesFor(args.cliProviders),
+        projectLabels: [...args.projectLabels],
+        supportsApiSecretGrant: current.supportsApiSecretGrant ?? true,
+        supportsManagedWorktrees: current.supportsManagedWorktrees ?? true,
+        supportsManagedForgeArtifacts: current.supportsManagedForgeArtifacts ?? true,
+        supportsRunnerAuthoredPhaseArtifacts: current.supportsRunnerAuthoredPhaseArtifacts ?? true,
+        repoMappings: current.repoMappings ?? []
+    };
+}
+async function resolvePairingCode(code) {
+    const normalized = normalizePairingCode(code);
+    if (normalized) {
+        return normalized;
+    }
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        throw new Error("Pairing code is required. Run `forge-bridge pair <code>` or use an interactive terminal.");
+    }
+    const prompt = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await prompt.question("Pairing code: ");
+        const clean = normalizePairingCode(answer);
+        if (!clean) {
+            throw new Error("Pairing code is required.");
+        }
+        return clean;
+    }
+    finally {
+        prompt.close();
+    }
+}
+async function resolvePairRepoRoot(repoRoot, configuredRoot) {
+    const fallback = path.resolve(repoRoot ?? configuredRoot ?? path.join(os.homedir(), "ForgeRepos"));
+    if (repoRoot?.trim()) {
+        return fallback;
+    }
+    if (!process.stdin.isTTY || !process.stdout.isTTY) {
+        return fallback;
+    }
+    const prompt = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await prompt.question(`Repo folder [${fallback}]: `);
+        return path.resolve(answer.trim() || fallback);
+    }
+    finally {
+        prompt.close();
+    }
+}
+function normalizePairingCode(code) {
+    return code?.replace(/[\s-]/g, "").trim() ?? "";
+}
+function normalizeServerUrl(serverUrl) {
+    return serverUrl.endsWith("/") ? serverUrl : `${serverUrl}/`;
+}
+function usage() {
+    return "Usage: forge-bridge run-once --dispatch <dispatch-json-path> --result <result-json-path> | forge-bridge pair [code] [--server <url>] | forge-bridge connect --server <url> --runner-id <id> --device-token <token> | forge-bridge add-repo <label> <path> | forge-bridge remove-repo <label> | forge-bridge status [--check-updates] | forge-bridge cleanup [--stale|--merged|--all|--force]";
+}
+async function writeJsonAtomic(outputPath, value) {
+    await fs.mkdir(path.dirname(outputPath), { recursive: true });
+    const tempPath = `${outputPath}.${process.pid}.${Date.now()}.tmp`;
+    await fs.writeFile(tempPath, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+    await fs.rename(tempPath, outputPath);
+}
+async function writeStatus(config, checkUpdates, io) {
+    const detected = await detectCliProviders([...new Set([...config.cliProviders, "codex", "cursor"])]);
+    const repos = config.repoMappings.filter((mapping) => mapping.localPath?.trim());
+    io.stdout.write(`Forge bridge ${config.version}\n`);
+    io.stdout.write(`Config: ${resolveLocalConfigPath()}\n`);
+    io.stdout.write(`Server: ${config.serverUrl || "not configured"}\n`);
+    io.stdout.write(`Device: ${config.runnerId || "not configured"}${config.deviceName ? ` (${config.deviceName})` : ""}\n`);
+    io.stdout.write(`Device token: ${config.deviceToken ? "configured" : "missing"}\n`);
+    io.stdout.write(`Active sessions: 0\n`);
+    io.stdout.write("Repos:\n");
+    if (repos.length === 0) {
+        io.stdout.write("  none\n");
+    }
+    else {
+        for (const repo of repos) {
+            io.stdout.write(`  ${repo.name ?? repo.repoId ?? "repo"} -> ${repo.localPath}\n`);
+        }
+    }
+    io.stdout.write("Detected CLIs:\n");
+    for (const cli of detected) {
+        const models = cli.models.length > 0 ? `, ${cli.models.length} models` : "";
+        io.stdout.write(`  ${cli.provider}: ${cli.found ? `${cli.version || "found"}${models}` : "not found"}\n`);
+    }
+    if (checkUpdates) {
+        io.stdout.write("Update check: no update channel configured.\n");
+    }
+}
+async function cleanupRepos(config, mode, force, io) {
+    const repos = config.repoMappings.filter((mapping) => mapping.localPath?.trim());
+    if (repos.length === 0) {
+        io.stdout.write("No repos configured.\n");
+        return 0;
+    }
+    let failures = 0;
+    for (const repo of repos) {
+        const repoPath = path.resolve(repo.localPath);
+        const worktreeRoot = path.join(path.dirname(repoPath), ".forge-worktrees", path.basename(repoPath));
+        if (!force) {
+            const action = mode === "all" ? "remove" : "prune";
+            io.stdout.write(`[dry-run] Would ${action} ${worktreeRoot}\n`);
+            continue;
+        }
+        try {
+            if (mode === "all") {
+                await fs.rm(worktreeRoot, { recursive: true, force: true });
+                await runGit(repoPath, ["worktree", "prune"]);
+                io.stdout.write(`Removed ${worktreeRoot}\n`);
+            }
+            else {
+                await runGit(repoPath, ["worktree", "prune"]);
+                io.stdout.write(`Pruned stale worktree metadata for ${repoPath}\n`);
+            }
+        }
+        catch (error) {
+            failures += 1;
+            io.stderr.write(`${repoPath}: ${error instanceof Error ? error.message : String(error)}\n`);
+        }
+    }
+    return failures === 0 ? 0 : 1;
+}
+async function detectCliProviders(providers) {
+    const results = [];
+    for (const provider of providers) {
+        let detected = null;
+        for (const probe of cliProbeCommandsFor(provider)) {
+            try {
+                detected = await execVersionCommand(probe);
+                break;
+            }
+            catch {
+                // Try the next provider-specific probe.
+            }
+        }
+        results.push({
+            provider,
+            found: detected !== null,
+            version: detected ? versionLine(`${detected.stdout || detected.stderr}`) : "",
+            models: detected ? await detectCliModels(provider) : []
+        });
+    }
+    return results;
+}
+function cliProbeCommandsFor(provider) {
+    const normalized = provider.toLowerCase();
+    if (normalized === "codex") {
+        return [
+            { command: "codex", args: ["-V"] },
+            { command: "codex", args: ["--version"] }
+        ];
+    }
+    if (normalized === "cursor") {
+        return [
+            { command: "cursor-agent", args: ["-v"] },
+            { command: "agent", args: ["-v"] },
+            { command: "cursor-agent", args: ["--version"] },
+            { command: "agent", args: ["--version"] }
+        ];
+    }
+    return [
+        { command: provider, args: ["--version"] },
+        { command: provider, args: ["-V"] }
+    ];
+}
+async function execVersionCommand(probe, timeout = 2000) {
+    try {
+        return await execFileAsync(probe.command, probe.args, { timeout });
+    }
+    catch (error) {
+        if (process.platform !== "win32") {
+            throw error;
+        }
+        return await execFileAsync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", windowsCommandLine(probe)], { timeout });
+    }
+}
+function windowsCommandLine(probe) {
+    return [probe.command, ...probe.args].map(quoteWindowsCommandLineArg).join(" ");
+}
+function quoteWindowsCommandLineArg(value) {
+    if (value.length > 0 && !/[\s"]/.test(value)) {
+        return value;
+    }
+    return `"${value.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\+)$/g, "$1$1")}"`;
+}
+function versionLine(output) {
+    const lines = output
+        .trim()
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+    return lines.at(-1) ?? "";
+}
+async function detectCliModels(provider) {
+    const normalized = provider.toLowerCase();
+    try {
+        if (normalized === "codex") {
+            const result = await execFileAsync("codex", ["debug", "models"], { timeout: 5000, maxBuffer: 10 * 1024 * 1024 });
+            return parseCodexModelCatalog(result.stdout);
+        }
+        if (normalized === "cursor") {
+            const result = await execVersionCommand({ command: "cursor-agent", args: ["models"] }, 10_000);
+            return parseCursorModelList(`${result.stdout || result.stderr}`);
+        }
+    }
+    catch {
+        return [];
+    }
+    return [];
+}
+export function parseCodexModelCatalog(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!isRecord(parsed) || !Array.isArray(parsed.models)) {
+            return [];
+        }
+        const entries = parsed.models
+            .map((entry, index) => {
+            if (!isRecord(entry) || typeof entry.slug !== "string") {
+                return null;
+            }
+            const visibility = typeof entry.visibility === "string" ? entry.visibility.toLowerCase() : "list";
+            if (visibility !== "list") {
+                return null;
+            }
+            const priority = typeof entry.priority === "number" && Number.isFinite(entry.priority) ? entry.priority : index;
+            return { slug: entry.slug, priority, index };
+        })
+            .filter((entry) => entry !== null)
+            .sort((left, right) => left.priority - right.priority || left.index - right.index)
+            .map((entry) => entry.slug);
+        return uniqueModels(entries);
+    }
+    catch {
+        return [];
+    }
+}
+export function parseCursorModelList(raw) {
+    return uniqueModels(raw
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0 && !line.toLowerCase().startsWith("available models"))
+        .map((line) => line.split(/\s+-\s+/, 1)[0]?.trim() ?? "")
+        .filter((model) => model.length > 0));
+}
+function uniqueModels(models) {
+    const seen = new Set();
+    const result = [];
+    for (const model of models) {
+        const trimmed = model.trim();
+        const key = trimmed.toLowerCase();
+        if (!trimmed || seen.has(key)) {
+            continue;
+        }
+        seen.add(key);
+        result.push(trimmed);
+    }
+    return result;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+async function withDetectedCliProviders(config) {
+    const detected = await detectCliProviders(configuredProviderCandidates(config.cliProviders));
+    const found = detected.filter((result) => result.found);
+    if (found.length === 0) {
+        return config;
+    }
+    const cliProviders = uniqueProviders([...config.cliProviders, ...found.map((result) => result.provider)]);
+    const providerStatuses = { ...config.providerStatuses };
+    for (const result of found) {
+        const existing = providerStatuses[result.provider];
+        providerStatuses[result.provider] = {
+            signedIn: existing?.signedIn ?? true,
+            version: result.version || existing?.version || "",
+            models: result.models.length > 0
+                ? result.models
+                : existing?.models ?? providerStatusesFor([result.provider])[result.provider]?.models ?? []
+        };
+    }
+    return {
+        ...config,
+        cliProviders,
+        providerStatuses
+    };
+}
+async function withDetectedPairCliProviders(args) {
+    const detectedConfig = await withDetectedCliProviders({
+        ...defaultBridgeServiceConfig({
+            serverUrl: args.serverUrl,
+            cliProviders: [...args.cliProviders],
+            providerStatuses: providerStatusesFor(args.cliProviders),
+            projectLabels: [...args.projectLabels],
+            cleanupWorktrees: args.cleanupWorktrees,
+            defaultRepoRoot: args.repoRoot ?? defaultBridgeServiceConfig().defaultRepoRoot
+        })
+    });
+    return {
+        ...args,
+        cliProviders: detectedConfig.cliProviders
+    };
+}
+function configuredProviderCandidates(providers) {
+    return uniqueProviders([...providers, "codex", "cursor"]);
+}
+function uniqueProviders(providers) {
+    return providers
+        .map((provider) => provider.trim())
+        .filter((provider) => provider.length > 0)
+        .filter((provider, index, all) => all.findIndex((candidate) => candidate.toLowerCase() === provider.toLowerCase()) === index);
+}
+async function runGit(cwd, args) {
+    await execFileAsync("git", args, { cwd, timeout: 10_000 });
+}