@makaio/framework 1.0.0-dev-1779051654000 → 1.0.0-dev-1781023871421

package/dist/clients/index.mjs

@@ -1,2 +1,2 @@
-import{z as e}from"zod";import*as t from"node:path";import{createBusNamespace as n}from"@makaio/framework/core";import{MakaioBus as r}from"@makaio/framework/bus";import{extensionToken as i,isUniversalRange as a,versionSatisfies as o}from"@makaio/framework/contracts";import{BaseService as s}from"@makaio/framework/service-base";import{index as c,integer as l,sqliteTable as u,text as d,unique as f,uniqueIndex as p}from"drizzle-orm/sqlite-core";import{and as m,eq as h,gt as ee,sql as te}from"drizzle-orm";import{executeTransaction as g,registerDrizzleHandlers as ne}from"@makaio/framework/storage/drizzle";import{ClientProfileNameSchema as _,ClientProfileSchema as re,ClientSubjects as ie,ClientSubjects as v,ClientWiringEntrySchema as ae,ManagedInstallDescriptorSchema as oe,SessionConfigIdSchema as se}from"@makaio/framework/contracts/client";import{randomUUID as y}from"node:crypto";import*as b from"node:fs/promises";import*as x from"node:os";import{CLIDetectionSubjects as ce}from"@makaio/framework/services/cli-detection/namespace";import{ClientStorageSubjects as le}from"@makaio/framework/services/settings/storage";import{SessionSubjects as ue}from"@makaio/framework/contracts/session";async function de(e,t,n,r,i){let a,o=(n.get(e)??Promise.resolve()).then(async()=>{let n=await i(r(await fe(e,t)));n.changed&&await pe(e,n.content),a=n.result}),s=o.then(()=>void 0,()=>void 0);n.set(e,s);try{await o}finally{n.get(e)===s&&n.delete(e)}return a}async function fe(e,t){let n;try{n=await b.readFile(e,`utf-8`)}catch(e){if(e.code===`ENOENT`)return t;throw e}return JSON.parse(n)}async function pe(e,n){let r=t.dirname(e),i=t.join(r,`${t.basename(e)}.${y()}.tmp`);await b.mkdir(r,{recursive:!0});try{await b.writeFile(i,`${JSON.stringify(n,null,2)}\n`,`utf-8`),await b.rename(i,e)}catch(e){throw await b.unlink(i).catch(()=>void 0),e}}var me=class e extends Error{code=`BINARY_NOT_FOUND`;constructor(t){super(`client.resolveBinary: no binary found for client '${t}' — install a managed version or ensure the binary is on PATH`),this.name=`BinaryNotFoundError`,Error.captureStackTrace?.(this,e)}},he=class{nextAccountSequence=1;accountIdsByIdentifier=new Map;accounts=new Map;upsertAccount(e){let t=_e(e.displayLabel),n=new Map;for(let t of e.identifiers)n.set(ge(e.clientId,t.scheme,t.value),t);let r=ve(n,this.accountIdsByIdentifier,`strong`),i=ve(n,this.accountIdsByIdentifier,`alias`),a=r[0]??(i.length===1?i[0]:i.length>1?ye(i):this.createAccount()),o=(r.length>0?xe(a,r,i):[]).flatMap(e=>this.mergeInto(a,e)),s=this.accounts.get(a);if(!s)throw Error(`Client account registry invariant violated: missing account ${a}`);for(let[e,t]of n){let n=this.accountIdsByIdentifier.get(e);r.length===0&&t.strength===`alias`&&n!==void 0&&n!==a||(s.identifiers.set(e,t),this.accountIdsByIdentifier.set(e,a))}return t!==void 0&&(s.displayLabel=t),{clientAccountId:a,displayLabel:s.displayLabel,mergedAccountIds:o}}clear(){this.accountIdsByIdentifier.clear(),this.accounts.clear(),this.nextAccountSequence=1}createAccount(){let e=`client-account-${this.nextAccountSequence}`;return this.nextAccountSequence+=1,this.accounts.set(e,{clientAccountId:e,identifiers:new Map}),e}mergeInto(e,t){if(e===t)return[];let n=this.accounts.get(e),r=this.accounts.get(t);if(!n||!r)return[];for(let[t,i]of r.identifiers)n.identifiers.set(t,i),this.accountIdsByIdentifier.set(t,e);return n.displayLabel===void 0&&r.displayLabel!==void 0&&(n.displayLabel=r.displayLabel),this.accounts.delete(t),[t]}};function ge(e,t,n){return`${e}\u0000${t}\u0000${n}`}function _e(e){return e?.trim()||void 0}function ve(e,t,n){let r=new Set;for(let[i,a]of e){if(a.strength!==n)continue;let e=t.get(i);e!==void 0&&r.add(e)}return Array.from(r).sort(S)}function ye(e){return[...e].sort(S)[0]}function S(e,t){let n=be(e),r=be(t);return n!==null&&r!==null&&n!==r?n-r:e.localeCompare(t)}function be(e){let t=e.match(/^client-account-(\d+)$/);return t?Number(t[1]):null}function xe(e,t,n){let r=new Set([...t,...n]);return r.delete(e),Array.from(r).sort(S)}function Se(e){return{subject:`config.prime`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}async function C(e,t){let n=await e.requestOptional(Se(t.clientId),t);return n.handled?n.data:{primed:!1}}function Ce(){let e=e=>async()=>{throw Error(`StrategyDependencies.${e} is not implemented`)};return{fetchText:e(`fetchText`),fetchJson:e(`fetchJson`),downloadFile:e(`downloadFile`),exec:e(`exec`),extractArchive:e(`extractArchive`),deleteFile:e(`deleteFile`),computeChecksum:e(`computeChecksum`),removeDirectory:e(`removeDirectory`)}}var we=class{resolveInstallVersion(e,t,n){let r=t.version;if(n===void 0)return{version:r,explicit:!1};let i=n.trim();if(i.length===0)throw Error(`Explicit version returned an empty version string`);if(i!==r)throw Error(`client.install: requested version ${i} for client '${e}' does not match pinned version ${r}`);return{version:i,explicit:!0}}};function Te(e){if(e!==void 0)return(t,n)=>{n!==null&&n>0?e(`downloading`,t/n*100):e(`downloading`,null)}}var Ee=class{#e;#t;constructor(e,t){this.#e=e,this.#t=t}async execute(e,t,n){if(e!==this.#e.version)throw Error(`npm managed install requested version ${e} but descriptor pins ${this.#e.version}`);n?.(`installing`,null);let r=`${this.#e.package}@${this.#e.version}`;return await this.#t.exec(`npm`,[`install`,r,`--prefix`,t,`--no-save`,`--ignore-scripts`]),n?.(`installing`,100),{installPath:t,version:this.#e.version,strategy:`npm`}}};function De(){if(process.platform!==`linux`)return!1;try{let e=process.report?.getReport?.();if(typeof e!=`object`||!e||!(`header`in e))return!0;let{header:t}=e;return typeof t!=`object`||!t?!0:!(`glibcVersionRuntime`in t)}catch{return!1}}function Oe(e){return e.replace(/[^0-9a-fA-F]/g,``).toUpperCase()}function w(e,t,n,r){let i=e.replaceAll(`{version}`,t);return n!==void 0&&(i=i.replaceAll(`{platform}`,n)),r!==void 0&&(i=i.replaceAll(`{binary}`,r)),i}function ke(e){let t=`${e.platform}-${e.arch}`;return e.platform===`linux`&&e.isMusl?`${t}-musl`:t}function Ae(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Signed manifest must be a JSON object`);let n=e,r=n.version;if(r!==t)throw Error(`Signed manifest version ${String(r)} does not match descriptor pin ${t}`);let i=n.platforms;if(typeof i!=`object`||!i||Array.isArray(i))throw Error(`Signed manifest must contain a platforms object`);return{version:r,platforms:i}}function je(e,t){let n=e.platforms[t];if(typeof n!=`object`||!n||Array.isArray(n))throw Error(`Signed manifest does not contain a platform entry for '${t}'`);let{binary:r,checksum:i}=n;if(typeof r!=`string`||!Me(r))throw Error(`Manifest entry for '${t}' has unsafe binary filename`);if(typeof i!=`string`||i.length===0)throw Error(`Manifest entry for '${t}' is missing a valid 'checksum' field`);return{binary:r,checksum:i}}function Me(e){return e.length>0&&e!==`.`&&e!==`..`&&!e.includes(`/`)&&!e.includes(`\\`)}var Ne=class{#e;#t;#n;constructor(e,t,n){this.#e=e,this.#t=t,this.#n={platform:n?.platform??process.platform,arch:n?.arch??process.arch,isMusl:n?.isMusl??De()}}async execute(e,n,r){if(e!==this.#e.version)throw Error(`signed-binary-bucket managed install requested version ${e} but descriptor pins ${this.#e.version}`);let{config:i}=this.#e,a=ke(this.#n),o=i.platforms[a];if(o===void 0)throw Error(`signed-binary-bucket descriptor has no platform entry for '${a}'. Supported platforms: ${Object.keys(i.platforms).join(`, `)}`);await b.mkdir(n,{recursive:!0});let s=t.join(n,`.gnupg`),c=t.join(n,`signing-key.asc`),l=t.join(n,`manifest.json`),u=t.join(n,`manifest.json.sig`);r?.(`resolving`,null),await this.#r(i,e,c,l,u),r?.(`verifying`,null);let d=await this.#i(i,s,c,l,u,a);r?.(`downloading`,null);let f=w(i.binaryPathTemplate,e,o,d.binary),p=t.resolve(n,d.binary);await this.#t.downloadFile(`${i.baseUrl}/${f}`,p,Te(r)),r?.(`verifying`,null);let m=await this.#t.computeChecksum(p);if(m!==d.checksum)throw Error(`Binary checksum mismatch: expected ${d.checksum} but computed ${m}`);return r?.(`installing`,null),this.#n.platform!==`win32`&&await b.chmod(p,493),await this.#t.removeDirectory(s),await this.#t.deleteFile(c),await this.#t.deleteFile(u),r?.(`installing`,100),{installPath:n,version:this.#e.version,strategy:`signed-binary-bucket`}}async#r(e,t,n,r,i){let a=`${e.baseUrl}/${w(e.manifestPathTemplate,t)}`,o=`${e.baseUrl}/${w(e.manifestSignaturePathTemplate,t)}`,s=await this.#t.fetchText(e.publicKeyUrl);await b.writeFile(n,s,`utf-8`),await this.#t.downloadFile(a,r),await this.#t.downloadFile(o,i)}async#i(e,t,n,r,i,a){await b.mkdir(t,{recursive:!0,mode:448}),await this.#t.exec(`gpg`,[`--homedir`,t,`--import`,n]);let o=await this.#t.exec(`gpg`,[`--homedir`,t,`--with-colons`,`--fingerprint`,`--list-keys`]),s=this.#a(o);if(Oe(s)!==Oe(e.publicKeyFingerprint))throw Error(`GPG key fingerprint mismatch: expected ${e.publicKeyFingerprint} but got ${s}`);await this.#t.exec(`gpg`,[`--homedir`,t,`--verify`,i,r]).catch(e=>{throw Error(`Manifest GPG signature verification failed: ${e.message}`)});let c=await b.readFile(r,`utf-8`);return je(Ae(JSON.parse(c),this.#e.version),a)}#a(e){for(let t of e.split(`
-`)){let e=t.split(`:`);if(e[0]===`fpr`&&e[9]!==void 0&&e[9].length>0)return e[9]}throw Error(`Could not extract GPG key fingerprint from output`)}};function Pe(e,t){let n=oe.safeParse(e);if(n.success)switch(n.data.type){case`npm`:return new Ee(n.data,t);case`signed-binary-bucket`:return new Ne(n.data,t)}}function Fe(e,n){let r=t.relative(e,n);return r!==``&&!r.startsWith(`..${t.sep}`)&&r!==`..`&&!t.isAbsolute(r)}function T(e,n){return!t.isAbsolute(e)||!t.isAbsolute(n)?!1:Fe(t.resolve(e),t.resolve(n))}function E(e,n){if(!e||!t.isAbsolute(e))throw Error(`${n} requires a non-empty absolute basePath`);return t.resolve(e)}async function Ie(e,n,r,i){let[a,...o]=r;if(Re(a))throw Error(`versionCommand[0] must be a relative path; received absolute path "${a}"`);if(a.split(/[/\\]/).includes(`..`))throw Error(`versionCommand[0] must not contain path traversal segments; received "${a}"`);let s=t.normalize(a),c=t.join(n,s),l=await b.realpath(n),u=await b.realpath(c);if(!Fe(l,u))throw Error(`versionCommand[0] must not escape the install directory; "${a}" resolves outside installPath`);let d;try{d=await e(u,o,{cwd:l})}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`Version verification failed: command "${c}" exited with an error: ${t}`,{cause:e})}let f=Le(i);if(!ze(d,f))throw Error(`Version mismatch: expected "${i}" but command output was "${d.trim()}"`)}function Le(e){return e[0]===`v`||e[0]===`V`?e.slice(1):e}function Re(e){return e.startsWith(`/`)||/^[A-Za-z]:[/\\]/.test(e)||e.startsWith(`\\`)}function ze(e,t){return(e.match(/[A-Za-z0-9][A-Za-z0-9._+-]*/g)??[]).some(e=>Le(e)===t)}var Be=class{strategyDeps;config;jobs=new Map;#e=!1;resolvedBasePath;constructor(e,t){this.strategyDeps=e,this.config=t,this.resolvedBasePath=E(t.basePath,`ClientBinaryJobRunner`)}startJob(e,t,n,r,i,a,o){let s={...e,status:`running`};return this.jobs.set(e.jobId,s),this.runJob(s,t,n,r,i,a,o),e.jobId}cancelAll(){this.#e=!0,this.jobs.clear()}safeOnProgress(e,t){try{e(t)}catch{}}emitProgressIfActive(e,t){return this.#e?!1:(this.safeOnProgress(e,t),!this.#e)}async runJob(e,t,n,r,i,a,o){try{let s=this.resolveTargetDir(e.clientId,e.version),c=Pe(t,this.strategyDeps);if(c===void 0)throw Error(`Unsupported managed install descriptor type: ${t.type}`);let l=await this.executeStrategy(e,c,s,n);if(this.#e)return;let u;try{if(u=await this.runPostInstall(e,l.installPath,a,n),this.#e)return;o!==void 0&&await this.runVersionVerification(e,l.installPath,o,n)}catch(e){throw this.#e||await this.cleanupStagedArtifact(l.installPath),e}if(this.#e)return;await this.finalizeSuccess(e,l,u,n,r,i)}catch(t){if(this.#e)return;let n=t instanceof Error?t.message:String(t),r=t instanceof Error&&`code`in t?String(t.code):void 0;try{await i({jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,status:`error`,activeVersion:null,error:{message:n,...r===void 0?{}:{code:r}}})}catch{}}finally{this.jobs.delete(e.jobId)}}async finalizeSuccess(e,t,n,r,i,a){if(!(e.makeActive&&!this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,stage:`activating`,progress:null,installPath:t.installPath,activeAfterCompletion:!0}))&&!this.#e){try{await i({jobId:e.jobId,clientId:e.clientId,version:t.version,installPath:t.installPath,makeActive:e.makeActive,reason:e.reason})}catch(e){try{await this.strategyDeps.removeDirectory(t.installPath)}catch{}throw e}if(!this.#e)try{await a({jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,status:`success`,installPath:t.installPath,activeVersion:e.makeActive?t.version:null,...n===void 0?{}:{metadata:{postInstall:n}}})}catch{}}}async cleanupStagedArtifact(e){try{await this.strategyDeps.removeDirectory(e)}catch{}}async executeStrategy(e,t,n,r){try{return await t.execute(e.version,n,(t,i)=>{this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:i,installPath:t===`installing`?n:void 0,activeAfterCompletion:e.makeActive})})}catch(e){throw this.#e||await this.cleanupStagedArtifact(n),e}}async runPostInstall(e,t,n,r){if(n===void 0)return;let i=this.resolvePostInstallHandler(n),a=this.buildProgressPayload(e,`post-install`,null,t,{kind:n.kind});if(!this.emitProgressIfActive(r,a))return;let o=await i({clientId:e.clientId,version:e.version,installPath:t,descriptor:n});return this.emitProgressIfActive(r,this.buildProgressPayload(e,`post-install`,100,t,{kind:n.kind,...o??{}})),o??void 0}async runVersionVerification(e,t,n,r){this.emitProgressIfActive(r,this.buildProgressPayload(e,`verifying`,null,t,{kind:`version-command`}))&&(this.#e||await Ie(this.strategyDeps.exec,t,n,e.version))}resolvePostInstallHandler(e){let t=this.config.postInstallHandlers?.get(e.kind);if(t===void 0)throw Error(`No post-install handler registered for kind "${e.kind}"`);return t}buildProgressPayload(e,t,n,r,i){return{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:n,installPath:r,activeAfterCompletion:e.makeActive,...i===void 0?{}:{metadata:i}}}resolveTargetDir(e,n){let r=t.resolve(this.resolvedBasePath,e,n);if(!T(this.resolvedBasePath,r))throw Error(`Invalid install target path for client "${e}" and version "${n}"`);return r}};const D=e.object({id:e.string(),clientId:e.string(),version:e.string(),installPath:e.string(),installedAt:e.number().int().nonnegative(),createdAt:e.number().int().nonnegative()}),O=e.object({clientId:e.string(),activeVersion:e.string().nullable(),updatedAt:e.number().int().nonnegative()}),k=e.object({previousActiveVersion:e.string().nullable(),activeVersion:e.string().nullable()}),A=n(`client-binary:storage`,{insertVersion:{request:D,response:e.object({success:e.boolean()})},recordInstalledVersion:{request:e.object({versionRecord:D,makeActive:e.boolean(),updatedAt:e.number().int().nonnegative()}),response:k},listVersions:{request:e.object({clientId:e.string()}),response:e.object({versions:e.array(D)})},getSnapshot:{request:e.object({clientId:e.string()}),response:e.object({state:O.nullable(),versions:e.array(D)})},loadAllVersions:{request:e.object({}),response:e.object({versions:e.array(D)})},upsertState:{request:O,response:e.object({success:e.boolean()})},setActiveVersion:{request:e.object({clientId:e.string(),activeVersion:e.string().nullable(),updatedAt:e.number().int().nonnegative()}),response:k},getState:{request:e.object({clientId:e.string()}),response:e.object({state:O.nullable()})},loadAllState:{request:e.object({}),response:e.object({states:e.array(O)})},loadSnapshot:{request:e.object({}),response:e.object({states:e.array(O),versions:e.array(D)})},removeVersionAndClearActive:{request:e.object({clientId:e.string(),version:e.string(),updatedAt:e.number().int().nonnegative()}),response:k.extend({removedVersion:e.string().nullable()})}}),j=A.subjects;var M=class{definitions=new Map;constructor(e=[]){for(let t of e)this.registerUnique(t)}getDefinition(e){return this.definitions.get(e)}listDefinitions(){return[...this.definitions.values()]}register(e){this.definitions.set(e.id,e)}registerUnique(e){if(this.definitions.has(e.id))throw Error(`ClientDefinitionRegistry: duplicate client definition id '${e.id}'`);this.definitions.set(e.id,e)}};function N(e,t,n,r,i){if(n===null){if(a(r))return;throw Error(`${e}: ${i} for client '${t}' did not report a version; requires ${r}`)}if(!o(n,r))throw Error(`${e}: ${i} ${n} for client '${t}' does not satisfy ${r}`)}var Ve=class{bus;resolvedBasePath;resolvedConfigBasePath;definitionLookup;constructor(e){this.bus=e.bus,this.resolvedBasePath=e.resolvedBasePath,this.resolvedConfigBasePath=e.resolvedConfigBasePath,this.definitionLookup=e.definitionLookup}async resolve(e){let t=this.definitionLookup.getDefinition(e);if(t===void 0)throw Error(`client.resolveBinary: no definition registered for client '${e}'`);let{state:n,versions:r}=await this.bus.request(j.getSnapshot,{clientId:e}),i=n?.activeVersion??null;return i===null?this.buildGlobalContext(e,t):this.buildManagedContext(e,i,t,r)}isInstallPathWithinBase(e){return T(this.resolvedBasePath,e)}async isExpectedInstallPath(e,n,r){if(!t.isAbsolute(e)||!this.isInstallPathWithinBase(e))return!1;let i=t.resolve(this.resolvedBasePath,n,r);if(!this.isInstallPathWithinBase(i))return!1;try{let[t,n,r]=await Promise.all([b.realpath(this.resolvedBasePath),b.realpath(i),b.realpath(e)]);return T(t,n)?r===n||T(n,r):!1}catch{return!1}}async buildManagedContext(e,n,r,i){let a=i.find(e=>e.version===n);if(a===void 0)throw Error(`client.resolveBinary: active version '${n}' is not installed for client '${e}'`);if(!await this.isExpectedInstallPath(a.installPath,e,n))throw Error(`client.resolveBinary: stored installPath "${a.installPath}" does not match the expected install directory for ${e}@${n}`);r.binary!==void 0&&N(`client.resolveBinary`,e,n,r.binary.supportedVersions,`managed binary version`);let o=P(r.versionCommand)?.[0];if(o===void 0)throw Error(`client.resolveBinary: definition for '${e}' has no versionCommand — cannot derive binary path`);let s=t.resolve(a.installPath,o),c=t.resolve(a.installPath);if(!s.startsWith(c+t.sep)&&s!==c)throw Error(`client.resolveBinary: versionCommand for '${e}' resolves outside the install directory`);let{configDir:l,env:u}=this.resolveIsolatedConfig(e,r);return{binaryPath:s,env:u,configDir:l,source:`managed`,version:n}}async buildGlobalContext(e,t){if(!t.binary?.name)throw Error(`client.resolveBinary: definition for '${e}' has no binary.name — cannot scan PATH`);let n={clientId:e,binaryName:t.binary.name,supportedVersions:t.binary.supportedVersions},{results:r}=await this.bus.request(v.scan,{targets:[n]}),i=r.find(t=>t.clientId===e);if(i===void 0||!i.found)throw new me(e);let a=i.version??null;return N(`client.resolveBinary`,e,a,t.binary.supportedVersions,`detected global binary version`),{binaryPath:null,env:{},configDir:this.resolveGlobalConfigDir(t),source:`global`,version:a}}resolveIsolatedConfig(e,n){let{configIsolation:r}=n;if(r===void 0)return{configDir:null,env:{}};let i=t.join(this.resolvedConfigBasePath,e,`config`),a=r.pathKind===`file`?t.join(i,t.basename(r.defaultPath)):i;return{configDir:i,env:{[r.envVar]:a}}}resolveGlobalConfigDir(e){let{configIsolation:n}=e;if(n===void 0)return null;let r=n.defaultPath,i=r===`~`?x.homedir():r.startsWith(`~/`)?t.join(x.homedir(),r.slice(2)):r,a=n.pathKind===`file`?t.dirname(i):i;if(!t.isAbsolute(a))throw Error(`ConfigIsolation defaultPath for '${e.id}' resolved to non-absolute path '${i}'; use an absolute or tilde-expanded path (e.g. '~/.myapp')`);return a}};function P(e){if(e===void 0)return;let{executable:t,args:n}=e,r=typeof t==`string`?t:t[process.platform]??t.default;if(typeof r!=`string`||r.trim()===``)throw Error(`client.resolveBinary: versionCommand executable is missing for this platform`);return[r,...n]}async function He(e,t){let{versions:n,states:r}=await e.request(j.loadSnapshot,{}),i=Map.groupBy(n,e=>e.clientId),a=new Map;for(let e of r)a.set(e.clientId,e.activeVersion);let o=new Map;for(let e of t.listDefinitions())e.managedInstall!==void 0&&o.set(e.id,e.managedInstall);return[...new Set(o.keys())].map(e=>{let t=o.get(e);if(t===void 0)throw Error(`assembleBinaryList: missing descriptor for client '${e}'`);let n=a.get(e)??null,r=(i.get(e)??[]).map(e=>({version:e.version,installPath:e.installPath,installedAt:e.installedAt,isActive:e.version===n})),s=t.version;return{clientId:e,installedVersions:r,activeVersion:n,pinnedVersion:s,updateAvailable:n!==null&&n!==s}})}var Ue=class extends s{config;definitionLookup;versionResolver;jobRunner;strategyDeps;resolvedBasePath;resolvedConfigBasePath;resolver;pendingClients=new Set;constructor(e=r,t,n=new M([]),i=Ce()){super(e),this.config=t,this.definitionLookup=n,this.resolvedBasePath=E(t.basePath,`ClientBinaryManager`),this.resolvedConfigBasePath=E(t.configBasePath,`ClientBinaryManager configBasePath`),this.strategyDeps=i,this.versionResolver=new we,this.jobRunner=new Be(i,t),this.resolver=new Ve({bus:e,resolvedBasePath:this.resolvedBasePath,resolvedConfigBasePath:this.resolvedConfigBasePath,definitionLookup:n})}async onInit(){this.registerHandler(v.list,async e=>{let t=await this.handleList();e.setResult({clients:t})}),this.registerHandler(v.install,async e=>{let t=await this.handleInstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(v.update,async e=>{let t=await this.handleUpdate(e.payload.clientId);e.setResult(t)}),this.registerHandler(v.setActive,async e=>{let t=await this.handleSetActive(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(v.uninstall,async e=>{let t=await this.handleUninstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(v.resolveBinary,async e=>{let t=await this.resolver.resolve(e.payload.clientId);e.setResult(t)})}onDestroy(){this.jobRunner.cancelAll(),this.pendingClients.clear()}async handleList(){return He(this.bus,this.definitionLookup)}async handleInstall(e,t){let{definition:n,descriptor:r}=this.requireManagedDefinition(e,`client.install`);return this.withClientLock(e,async()=>{let{version:i}=this.versionResolver.resolveInstallVersion(e,r,t);return n.binary!==void 0&&N(`client.install`,e,i,n.binary.supportedVersions,t===void 0?`resolved binary version`:`requested binary version`),{jobId:this.startInstallJob(e,i,r,n,!1,`install`),requestedVersion:t??null,resolvedVersion:i}})}async handleUpdate(e){let{definition:t,descriptor:n}=this.requireManagedDefinition(e,`client.update`);return this.withClientLock(e,async()=>{let{version:r}=this.versionResolver.resolveInstallVersion(e,n);return t.binary!==void 0&&N(`client.update`,e,r,t.binary.supportedVersions,`resolved binary version`),{jobId:this.startInstallJob(e,r,n,t,!0,`update`),resolvedVersion:r}})}async handleSetActive(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:n}=await this.bus.request(j.listVersions,{clientId:e}),r=n.find(e=>e.version===t);if(r===void 0)throw Error(`client.setActive: version '${t}' is not installed for client '${e}'`);let i=this.definitionLookup.getDefinition(e);if(i===void 0)throw Error(`client.setActive: no definition registered for client '${e}'`);i.binary!==void 0&&N(`client.setActive`,e,t,i.binary.supportedVersions,`requested binary version`);let a=P(i.versionCommand);if(a===void 0)throw Error(`client.setActive: no versionCommand registered for client '${e}'`);if(!await this.resolver.isExpectedInstallPath(r.installPath,e,t))throw Error(`client.setActive: stored installPath "${r.installPath}" does not match the expected install directory for ${e}@${t}`);return await Ie(this.strategyDeps.exec,r.installPath,a,t),await this.patchActiveVersion(e,t,`set-active`),{clientId:e,activeVersion:t}}finally{this.pendingClients.delete(e)}}async handleUninstall(e,n){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:r}=await this.bus.request(j.listVersions,{clientId:e}),i=r.find(e=>e.version===n);if(i===void 0)throw Error(`client.uninstall: version '${n}' is not installed for client '${e}'`);let{removedVersion:a,previousActiveVersion:o,activeVersion:s}=await this.bus.request(j.removeVersionAndClearActive,{clientId:e,version:n,updatedAt:Date.now()});if(a===null)throw Error(`client.uninstall: failed to delete version '${n}' for client '${e}'`);let c=i.installPath,l=typeof c==`string`&&c.length>0?t.resolve(c):null;if(typeof c!=`string`||c.length===0||l===null||!t.isAbsolute(c)||!await this.resolver.isExpectedInstallPath(l,e,n)?console.warn(`[ClientBinaryManager] Skipping removeDirectory: stored installPath "${String(c)}" does not match the expected install directory for ${e}@${n}`):await this.strategyDeps.removeDirectory(l).catch(t=>{console.warn(`[ClientBinaryManager] Failed to remove binary directory "${l}" for ${e}@${n}:`,t)}),o!==null&&s===null)try{await this.bus.emit(v.version.changed,{clientId:e,previousActiveVersion:o,activeVersion:null,reason:`uninstall`})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return{clientId:e,removedVersion:n,activeVersion:s}}finally{this.pendingClients.delete(e)}}async patchActiveVersion(e,t,n){let r=(await this.bus.request(j.setActiveVersion,{clientId:e,activeVersion:t,updatedAt:Date.now()})).previousActiveVersion;if(r!==t)try{await this.bus.emit(v.version.changed,{clientId:e,previousActiveVersion:r,activeVersion:t,reason:n})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return r}requireManagedDefinition(e,t){let n=this.definitionLookup.getDefinition(e);if(n===void 0)throw Error(`${t}: no definition registered for client '${e}'`);let r=n.managedInstall;if(r===void 0)throw Error(`${t}: client '${e}' does not declare a managed install descriptor`);return{definition:n,descriptor:r}}async withClientLock(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{return await t()}catch(t){throw this.pendingClients.delete(e),t}}startInstallJob(e,t,n,r,i,a){let o={jobId:crypto.randomUUID(),clientId:e,version:t,strategy:n.type,status:`pending`,makeActive:i,reason:a};return this.jobRunner.startJob(o,n,e=>{this.bus.emit(v.installJob.progress,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.progress:`,e)})},this.makeCompletionCallback(),async e=>{this.pendingClients.delete(e.clientId),await this.bus.emit(v.installJob.completed,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.completed:`,e)})},r.postInstall,P(r.versionCommand)),o.jobId}makeCompletionCallback(){return async({clientId:e,version:t,installPath:n,makeActive:r,reason:i})=>{let a=Date.now();await C(this.bus,{clientId:e,configDir:this.resolveManagedConfigDir(e),phase:`managed-install`,binaryVersion:t});let o=await this.bus.request(j.recordInstalledVersion,{versionRecord:{id:crypto.randomUUID(),clientId:e,version:t,installPath:n,installedAt:a,createdAt:a},makeActive:r,updatedAt:a});if(r&&o.previousActiveVersion!==o.activeVersion)try{await this.bus.emit(v.version.changed,{clientId:e,previousActiveVersion:o.previousActiveVersion,activeVersion:o.activeVersion,reason:i})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}}}resolveManagedConfigDir(e){return t.join(this.resolvedConfigBasePath,e,`config`)}};function F(e,t){return`${e}${t}`}function I(e,t){return`${e}${t}`}var We=class{records=new Map;bySupervisorSessionId=new Map;byPidClientId=new Map;byAdapterSessionClientId=new Map;set(e){let t=this.records.get(e.clientRuntimeId);t&&this.removeIndexEntries(t),this.records.set(e.clientRuntimeId,e),this.addIndexEntries(e)}setFromStorage(e,t,n){this.records.set(e.clientRuntimeId,e),e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),t-e.updatedAt<=n&&(e.pid!==void 0&&this.byPidClientId.set(F(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(I(e.adapterSessionId,e.clientId),e.clientRuntimeId))}delete(e){let t=this.records.get(e);t&&(this.removeIndexEntries(t),this.records.delete(e))}get(e){return this.records.get(e)}findByEvidence(e,t,n,r){if(e!==void 0){let t=this.bySupervisorSessionId.get(e);if(t!==void 0)return this.records.get(t)}if(t!==void 0){let e=this.byPidClientId.get(F(t,r));if(e!==void 0)return this.records.get(e)}if(n!==void 0){let e=this.byAdapterSessionClientId.get(I(n,r));if(e!==void 0)return this.records.get(e)}}values(){return this.records.values()}clear(){this.records.clear(),this.bySupervisorSessionId.clear(),this.byPidClientId.clear(),this.byAdapterSessionClientId.clear()}get size(){return this.records.size}addIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),e.pid!==void 0&&this.byPidClientId.set(F(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(I(e.adapterSessionId,e.clientId),e.clientRuntimeId)}removeIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.delete(e.supervisorSessionId),e.pid!==void 0&&this.byPidClientId.delete(F(e.pid,e.clientId)),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.delete(I(e.adapterSessionId,e.clientId))}};const L=[`observed`,`started`],R=e.object({clientRuntimeId:e.string(),clientId:e.string(),status:e.enum(L),supervisorSessionId:e.string().optional(),pid:e.number().int().positive().optional(),parentPid:e.number().int().positive().optional(),adapterSessionId:e.string().optional(),sessionId:e.string().optional(),cwd:e.string().optional(),argv:e.array(e.string()).optional(),metadata:e.record(e.string(),e.unknown()).optional(),observedAt:e.number().int().nonnegative(),createdAt:e.number().int().nonnegative(),updatedAt:e.number().int().nonnegative()}),z=n(`client-runtime:storage`,{upsert:{request:R,response:e.object({success:e.boolean()})},loadAll:{request:e.object({}),response:e.object({records:e.array(R)})}}),B=z.subjects;function Ge(e){return e.supervisorSessionId!==void 0||e.adapterSessionId!==void 0}function V(e){return{...e,argv:e.argv===void 0?void 0:[...e.argv],metadata:e.metadata===void 0?void 0:structuredClone(e.metadata)}}function Ke(e){return Math.max(Date.now(),e+1)}function qe(e,t){let n=!1;return t.supervisorSessionId!==void 0&&e.supervisorSessionId!==t.supervisorSessionId&&(e.supervisorSessionId=t.supervisorSessionId,n=!0),t.pid!==void 0&&e.pid!==t.pid&&(e.pid=t.pid,n=!0),t.parentPid!==void 0&&e.parentPid!==t.parentPid&&(e.parentPid=t.parentPid,n=!0),t.adapterSessionId!==void 0&&e.adapterSessionId!==t.adapterSessionId&&(e.adapterSessionId=t.adapterSessionId,n=!0),t.sessionId!==void 0&&e.sessionId!==t.sessionId&&(e.sessionId=t.sessionId,n=!0),t.cwd!==void 0&&e.cwd!==t.cwd&&(e.cwd=t.cwd,n=!0),t.argv!==void 0&&JSON.stringify(e.argv)!==JSON.stringify(t.argv)&&(e.argv=[...t.argv],n=!0),t.metadata!==void 0&&JSON.stringify(e.metadata)!==JSON.stringify(t.metadata)&&(e.metadata=structuredClone(t.metadata),n=!0),n}var Je=class{runtimeMap=new We;bus;constructor(e){this.bus=e}async loadFromStorage(){if(!this.bus)return;let e=await this.bus.requestOptional(B.loadAll,{});if(!e.handled)return;let t=Date.now();for(let n of e.data.records)this.runtimeMap.setFromStorage(V(n),t,864e5)}async upsertRuntime(e){let t=this.runtimeMap.findByEvidence(e.supervisorSessionId,e.pid,e.adapterSessionId,e.clientId);if(t){let n=t.status===`observed`,r=n&&Ge(e),i=qe(t,e),a=n&&e.observedAt>t.observedAt;return r&&(t.status=`started`),(i||r||a)&&(t.updatedAt=Ke(t.updatedAt),a&&(t.observedAt=e.observedAt),this.runtimeMap.set(t),await this.persistRecord(t)),{clientRuntimeId:t.clientRuntimeId,created:!1,promoted:r,record:V(t)}}let n=Date.now(),r=y(),i=Ge(e)?`started`:`observed`,a={clientRuntimeId:r,clientId:e.clientId,status:i,supervisorSessionId:e.supervisorSessionId,pid:e.pid,parentPid:e.parentPid,adapterSessionId:e.adapterSessionId,sessionId:e.sessionId,cwd:e.cwd,argv:e.argv?[...e.argv]:void 0,metadata:e.metadata?structuredClone(e.metadata):void 0,observedAt:e.observedAt,createdAt:n,updatedAt:n};return this.runtimeMap.set(a),await this.persistRecord(a),{clientRuntimeId:r,created:!0,promoted:!1,record:V(a)}}getRuntime(e){let t=this.runtimeMap.get(e);return t?V(t):void 0}clear(){this.runtimeMap.clear()}get size(){return this.runtimeMap.size}async persistRecord(e){this.bus&&await this.bus.requestOptional(B.upsert,V(e))}};const Ye=e.object({eventName:e.string(),receivedAt:e.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`),payload:e.record(e.string(),e.unknown()),metadata:e.record(e.string(),e.unknown()).optional()}),Xe=/^[a-z0-9-]+$/;function H(e,t=`canonicalizeClientId`){let n=e.trim().toLowerCase(),r=n.startsWith(`client:`)?n.slice(7):n;if(r.length===0)throw Error(`[${t}] clientId must be a non-empty string`);if(!Xe.test(r))throw Error(`[${t}] clientId must contain only lowercase letters, numbers, and hyphens after an optional client: prefix`);return r}function Ze(e){return{subject:`hook.received`,$meta:{namespace:`client:${H(e,`createRawClientHookReceivedSubject`)}`,isRequest:!1,local:!1,channel:!1}}}function Qe(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function $e(e,t){return Qe(e[t])}function et(e){return{clientId:e.clientId,source:`adapter-derived`,observedAt:Date.now(),...e.sessionId!==void 0&&{sessionId:e.sessionId},...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}}function tt(e){try{e().catch(nt)}catch(e){nt(e)}}function nt(e){(process.env.DEBUG||process.env.MAKAIO_DEBUG)&&console.debug(`[emitBestEffort] observed-semantics emission failed`,e)}function rt(e,t){return{subject:t,$meta:{namespace:`client:${H(e,`createClientWiringSubjectDef`)}`,isRequest:!0,local:!1,channel:!1}}}function it(e){return rt(e,`wiring.list`)}const at=e.string().min(1).refine(t.isAbsolute,{message:`projectDir must be an absolute path`}),ot=e.object({entries:e.array(ae)}),st=e.object({applied:e.number().int().nonnegative(),skipped:e.number().int().nonnegative()}),ct=e.object({removed:e.number().int().nonnegative()}),lt=e.object({clientId:e.string().trim().min(1),entries:e.array(ae)});function ut(e){if(e!==void 0&&!t.isAbsolute(e))throw Error(`projectDir must be an absolute path, got: ${e}`)}var dt=class extends s{accountRegistry;runtimeRegistry;latestSnapshots=new Map;activeIdentities=new Map;constructor(e=r,t=new he,n=new Je(e)){super(e),this.accountRegistry=t,this.runtimeRegistry=n}async onInit(){await this.runtimeRegistry.loadFromStorage(),this.registerHandler(v.account.observe,e=>this.handleAccountObserve(e)),this.registerHandler(v.usage.ingest,e=>this.handleUsageIngest(e)),this.registerHandler(v.scan,async e=>{let t=await this.scanClients(e.payload.targets);e.setResult({results:t})}),this.registerHandler(v.runtime.observe,e=>this.handleRuntimeObserve(e)),this.registerHandler(v.wiring.list,async e=>{let t=await this.listWirings(e.payload);e.setResult({results:t})}),this.registerHandler(v.account.activate,e=>{this.activeIdentities.set(e.payload.clientId,{clientAccountId:e.payload.clientAccountId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),e.setResult({accepted:!0})}),this.registerHandler(v.account.getActive,e=>{let t=this.activeIdentities.get(e.payload.clientId);e.setResult({identity:t??null})})}onDestroy(){this.latestSnapshots.clear(),this.activeIdentities.clear(),this.accountRegistry.clear(),this.runtimeRegistry.clear()}getLatestSnapshot(e){return this.latestSnapshots.get(e)}async handleAccountObserve(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),n=this.latestSnapshots.get(t.clientAccountId),r=mt(this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds)??n,t.displayLabel);r&&this.latestSnapshots.set(t.clientAccountId,r),r&&(t.mergedAccountIds.length>0||r!==n)&&await this.bus.emit(v.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,displayLabel:t.displayLabel})}async handleUsageIngest(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.account.identifiers,displayLabel:e.payload.account.displayLabel});this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds);let n=ft(t.clientAccountId,e.payload,t.displayLabel),r=mt(pt(this.latestSnapshots.get(t.clientAccountId),n),t.displayLabel);this.latestSnapshots.set(t.clientAccountId,r),await this.bus.emit(v.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,snapshot:r})}async handleRuntimeObserve(e){let{payload:t}=e;if(t.supervisorSessionId===void 0&&t.pid===void 0&&t.adapterSessionId===void 0)throw Error(`client.runtime.observe: at least one hard-evidence field is required (supervisorSessionId, pid, or adapterSessionId)`);let{record:n,...r}=await this.runtimeRegistry.upsertRuntime(t);(r.created||r.promoted)&&await this.bus.emit(v.runtime.started,{clientRuntimeId:n.clientRuntimeId,clientId:n.clientId,status:n.status,source:t.source,observedAt:t.observedAt,supervisorSessionId:n.supervisorSessionId,pid:n.pid,parentPid:n.parentPid,adapterSessionId:n.adapterSessionId,sessionId:n.sessionId,cwd:n.cwd,argv:n.argv,metadata:n.metadata}),e.setResult({clientRuntimeId:r.clientRuntimeId,created:r.created,promoted:r.promoted})}async scanClients(e){let t=e??await this.listScannableStoredClients();if(t.length===0)return[];let n=Array.from(new Set(t.map(e=>e.binaryName))),{results:r}=await this.bus.request(ce.scan,{binaries:n}),i=new Map(r.map(e=>[e.binary,e]));return t.map(e=>{let t=i.get(e.binaryName),n=t?.found??!1,r=t?.version;return{clientId:e.clientId,found:n,version:r,warningMessage:gt(n,r,e.supportedVersions)}})}async listScannableStoredClients(){let{clients:e}=await this.bus.request(le.list,{});return e.filter(ht).map(e=>({clientId:e.id,binaryName:e.binary.name,supportedVersions:e.binary.supportedVersions}))}async listWirings(e){ut(e.projectDir);let{clients:t}=await this.bus.request(le.list,{}),n=e.clientId===void 0?void 0:H(e.clientId,`listWirings`),r=t.filter(e=>e.enabled).filter(e=>n===void 0||e.id===n),i=await Promise.allSettled(r.map(async t=>{let n=it(t.id),r=await this.bus.requestOptional(n,{projectDir:e.projectDir,makaioCommand:e.makaioCommand});return r.handled?{clientId:t.id,entries:r.data.entries}:null}));for(let e=0;e<i.length;e++){let t=i[e];if(t.status===`rejected`){let n=t.reason instanceof Error?t.reason.message:String(t.reason);console.warn(`[ClientRuntimeService] wiring.list for ${r[e].id} failed: ${n}`)}}return i.filter(e=>e.status===`fulfilled`).map(e=>e.value).filter(e=>e!==null)}consolidateMergedSnapshots(e,t){let n=this.latestSnapshots.get(e),r=!1;for(let i of t){if(i===e)continue;let t=this.latestSnapshots.get(i);t&&(n===void 0||t.observedAt>n.observedAt)&&(n={...t,clientAccountId:e},r=!0),this.latestSnapshots.delete(i)}return n&&this.latestSnapshots.set(e,n),r?n:void 0}};function ft(e,t,n){return{clientAccountId:e,clientId:t.clientId,observedAt:t.observedAt,source:t.source,displayLabel:n,usage:{windows:t.usage.windows.map(e=>({...e}))},metadata:t.metadata?{...t.metadata}:void 0}}function pt(e,t){return e&&e.observedAt>t.observedAt?e:t}function mt(e,t){return!e||t===void 0||e.displayLabel===t?e:{...e,displayLabel:t}}function ht(e){return e.enabled&&e.binary!==void 0}function gt(e,t,n){if(e&&t!==void 0&&t!==`unknown`&&n!==void 0&&!o(t,n))return`Unsupported version: requires ${n}`}var _t=class extends s{constructor(e=r){super(e)}onInit(){this.registerHandler(v.config.prime,async e=>{e.setResult(await C(this.bus,e.payload))})}};const U=re,W=e.string().trim().min(1),G=n(`client-profile:storage`,{get:{request:e.object({clientId:W,name:_}),response:e.object({record:U.nullable()})},getById:{request:e.object({id:W}),response:e.object({record:U.nullable()})},list:{request:e.object({clientId:W}),response:e.object({records:e.array(U)})},set:{request:U,response:e.object({success:e.boolean()})},delete:{request:e.object({clientId:W,name:_}),response:e.object({success:e.boolean()})},clearDefault:{request:e.object({clientId:W}),response:e.object({success:e.boolean()})},setDefault:{request:e.object({clientId:W,name:_}),response:e.object({record:U.nullable()})}}),K=G.subjects;function vt(e,n,r){let i=t.resolve(e),a=t.resolve(n),o=t.relative(i,a);if(o!==``&&!o.startsWith(`..`)&&!t.isAbsolute(o))return a;throw Error(`${r} refused to access path outside client profile root`)}var yt=class extends s{clientsBasePath;constructor(e,t){super(e),this.clientsBasePath=t}async onInit(){this.registerCreateHandler(),this.registerListHandler(),this.registerGetHandler(),this.registerUpdateHandler(),this.registerDeleteHandler(),this.registerSetDefaultHandler()}registerCreateHandler(){this.registerHandler(v.profile.create,async e=>{let n=H(e.payload.clientId,`profile.create`),{name:r,description:i}=e.payload;if((await this.bus.request(K.get,{clientId:n,name:r})).record!==null)throw Error(`Profile '${r}' already exists for client '${n}'`);let a=t.join(this.clientsBasePath,n,`profiles`),o=vt(a,t.join(a,r),`profile.create`);await b.mkdir(o,{recursive:!0});try{await C(this.bus,{clientId:n,configDir:o,phase:`profile-create`});let t=Date.now(),a={id:y(),clientId:n,name:r,description:i??null,configDir:o,isDefault:!1,createdAt:t,updatedAt:t};await this.bus.request(K.set,a),e.setResult({profile:a})}catch(e){throw await b.rm(o,{recursive:!0,force:!0}),e}})}registerListHandler(){this.registerHandler(v.profile.list,async e=>{let t=H(e.payload.clientId,`profile.list`),n=await this.bus.request(K.list,{clientId:t});e.setResult({profiles:n.records})})}registerGetHandler(){this.registerHandler(v.profile.get,async e=>{let t=H(e.payload.clientId,`profile.get`),n=await this.bus.request(K.get,{clientId:t,name:e.payload.name});e.setResult({profile:n.record})})}registerUpdateHandler(){this.registerHandler(v.profile.update,async e=>{let t=H(e.payload.clientId,`profile.update`),{name:n,description:r}=e.payload,i=await this.bus.request(K.get,{clientId:t,name:n});if(i.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);let a={...i.record,description:r===void 0?i.record.description:r,updatedAt:Date.now()};await this.bus.request(K.set,a),e.setResult({profile:a})})}registerDeleteHandler(){this.registerHandler(v.profile.delete,async e=>{let n=H(e.payload.clientId,`profile.delete`),{name:r}=e.payload,i=await this.bus.request(K.get,{clientId:n,name:r});i.record!==null&&(vt(t.join(this.clientsBasePath,n,`profiles`),i.record.configDir,`profile.delete`),await b.rm(i.record.configDir,{recursive:!0,force:!0}));let a=await this.bus.request(K.delete,{clientId:n,name:r});e.setResult({success:a.success})})}registerSetDefaultHandler(){this.registerHandler(v.profile.setDefault,async e=>{let t=H(e.payload.clientId,`profile.setDefault`),{name:n}=e.payload,r=await this.bus.request(K.setDefault,{clientId:t,name:n});if(r.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);e.setResult({profile:r.record})})}};function bt(e){return{subject:`sessionConfig.setup`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}function xt(e){return{subject:`sessionConfig.destroy`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}const St=()=>Date.now();function Ct(){let e=x.platform();if(e===`darwin`||e===`linux`||e===`win32`)return e;throw Error(`client.sessionConfig does not support platform '${e}'`)}function wt(e,n,r){let i=se.safeParse(n);if(!i.success)throw Error(`${r} received an unsafe session ID`);let a=t.resolve(e),o=t.resolve(a,i.data),s=t.relative(a,o);if(s===``||!s.startsWith(`..`)&&!t.isAbsolute(s))return o;throw Error(`${r} refused to access path outside client sessions root`)}var Tt=class extends s{clientsBasePath;getNow;constructor(e,t,n=St){super(e),this.clientsBasePath=t,this.getNow=n}async onInit(){this.registerHandler(v.sessionConfig.create,async e=>{let{clientId:t,sessionId:n,profileName:r,baseConfigDir:i,projectDir:a,configInheritance:o=`full`}=e.payload,s=H(t,`sessionConfig.create`),c=this.resolveClientSessionDir(s,n,`sessionConfig.create`);await b.mkdir(c,{recursive:!0});try{let t=await this.resolveBaseConfigDir(s,c,r,i),n=bt(s),l=await this.bus.requestOptional(n,{sessionDir:c,baseConfigDir:t,projectDir:a,platform:Ct(),configInheritance:o}),u=l.handled?l.data.env??{}:{};await C(this.bus,{clientId:s,configDir:c,phase:`session-create`,projectDir:a}),e.setResult({sessionDir:c,env:u})}catch(e){throw await b.rm(c,{recursive:!0,force:!0}),e}}),this.registerHandler(v.sessionConfig.destroy,async e=>{let{clientId:t,sessionId:n}=e.payload,r=H(t,`sessionConfig.destroy`),i=this.resolveClientSessionDir(r,n,`sessionConfig.destroy`);await this.destroyClientSessionDir(r,i),e.setResult({success:!0})}),this.registerHandler(v.sessionConfig.cleanup,async e=>{let{clientId:t}=e.payload,n=t===void 0?void 0:H(t,`sessionConfig.cleanup`),r=await this.cleanupOrphanedDirs(n);e.setResult({removed:r})}),this.registerHandler(ue.closed,async e=>{await this.destroySessionDirsForSessionId(e.payload.sessionId)}),await this.cleanupOrphanedDirs()}async resolveBaseConfigDir(e,t,n,r){if(r!==void 0)return r;if(n!==void 0){let t=await this.bus.request(K.get,{clientId:e,name:n});if(t.record!==null)return t.record.configDir;throw Error(`Profile '${n}' not found for client '${e}'`)}let i=(await this.bus.request(K.list,{clientId:e})).records.find(e=>e.isDefault);return i?i.configDir:t}async cleanupOrphanedDirs(e){let n=[],r=this.getNow(),i=e===void 0?await this.listClientIds():[e];return await Promise.all(i.map(async e=>{let i=t.join(this.clientsBasePath,e,`sessions`),a=await b.readdir(i).catch(()=>[]);await Promise.all(a.map(async t=>{try{let a=wt(i,t,`sessionConfig.cleanup`),o=await b.stat(a),s=o.birthtimeMs>0?o.birthtimeMs:o.ctimeMs;o.isDirectory()&&r-s>36e5&&!await this.isActiveSession(t)&&(await this.destroyClientSessionDir(e,a),n.push(a))}catch{}}))})),n}async destroySessionDirsForSessionId(e){if(!se.safeParse(e).success)return;let t=await this.listClientIds();await Promise.all(t.map(async t=>{let n=this.resolveClientSessionDir(t,e,`session.closed`);await this.destroyClientSessionDir(t,n)}))}async destroyClientSessionDir(e,t){await b.stat(t).then(e=>e.isDirectory(),e=>{let t=e.code;if(t===`ENOENT`||t===`ENOTDIR`)return!1;throw e})&&(await this.bus.requestOptional(xt(e),{sessionDir:t,platform:Ct()}),await b.rm(t,{recursive:!0,force:!0}))}async isActiveSession(e){let t=await this.bus.requestOptional(ue.get,{sessionId:e});return t.handled&&t.data.session?.status===`active`}resolveClientSessionDir(e,n,r){return wt(t.join(this.clientsBasePath,e,`sessions`),n,r)}async listClientIds(){return(await b.readdir(this.clientsBasePath,{withFileTypes:!0}).catch(()=>[])).filter(e=>e.isDirectory()).map(e=>e.name)}};function Et(e,t){return r.registerNamespace(n(`client:${e}`,{"hook.received":Ye,...t})).subjects}function Dt(e,t){let n=e;for(let e of t.split(`.`)){if(typeof n!=`object`||!n||!(e in n))return!1;n=n[e]}return!0}function Ot(e,t,n){let r=Object.keys(n).filter(e=>!Dt(t,e));if(r.length!==0)throw Error(`[createClientNamespace] client:${e} was already registered without required subjects: ${r.join(`, `)}`)}function kt(e,t){let n=H(e,`createClientNamespace`),r=t??{},i=Et(n,r);return Ot(n,i,r),{namespaceDomain:`client:${n}`,subjects:i}}const q=u(`client_runtimes`,{id:d(`id`).primaryKey(),clientId:d(`client_id`).notNull(),status:d(`status`).notNull(),supervisorSessionId:d(`supervisor_session_id`),pid:l(`pid`),parentPid:l(`parent_pid`),adapterSessionId:d(`adapter_session_id`),sessionId:d(`session_id`),cwd:d(`cwd`),argv:d(`argv`,{mode:`json`}).$type(),metadata:d(`metadata`,{mode:`json`}).$type(),observedAt:l(`observed_at`).notNull(),createdAt:l(`created_at`).notNull(),updatedAt:l(`updated_at`).notNull()},e=>[c(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),c(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),c(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)]),At=new Set(L);function jt(e){if(!At.has(e.status))throw Error(`Unknown ClientRuntimeStatus in DB: '${e.status}'`);return{clientRuntimeId:e.id,clientId:e.clientId,status:e.status,supervisorSessionId:e.supervisorSessionId??void 0,pid:e.pid??void 0,parentPid:e.parentPid??void 0,adapterSessionId:e.adapterSessionId??void 0,sessionId:e.sessionId??void 0,cwd:e.cwd??void 0,argv:e.argv??void 0,metadata:e.metadata??void 0,observedAt:e.observedAt,createdAt:e.createdAt,updatedAt:e.updatedAt}}function Mt(e,t,n){let r=e.on(B.upsert,async e=>{let n=e.payload,r={clientId:n.clientId,status:n.status,supervisorSessionId:n.supervisorSessionId??null,pid:n.pid??null,parentPid:n.parentPid??null,adapterSessionId:n.adapterSessionId??null,sessionId:n.sessionId??null,cwd:n.cwd??null,argv:n.argv??null,metadata:n.metadata??null,observedAt:n.observedAt,updatedAt:n.updatedAt};await t.insert(q).values({id:n.clientRuntimeId,createdAt:n.createdAt,...r}).onConflictDoUpdate({target:q.id,set:r,setWhere:ee(te`excluded.updated_at`,q.updatedAt)}),e.setResult({success:!0})}),i=e.on(B.loadAll,async e=>{let n=await t.select().from(q);e.setResult({records:n.map(jt)})});return()=>{r(),i()}}const J=u(`client_binary_versions`,{id:d(`id`).primaryKey(),clientId:d(`client_id`).notNull(),version:d(`version`).notNull(),installPath:d(`install_path`).notNull(),installedAt:l(`installed_at`).notNull(),createdAt:l(`created_at`).notNull()},e=>[c(`idx_client_binary_versions_client_id`).on(e.clientId),f(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)]),Y=u(`client_binary_state`,{clientId:d(`client_id`).primaryKey(),activeVersion:d(`active_version`),updatedAt:l(`updated_at`).notNull()});function X(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}function Z(e){return{clientId:e.clientId,activeVersion:e.activeVersion??null,updatedAt:e.updatedAt}}function Nt(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}async function Pt(e,t){await e.insert(J).values(Nt(t)).onConflictDoNothing({target:[J.clientId,J.version]})}function Ft(e,t,n){return{clientId:e,activeVersion:t,updatedAt:n}}async function It(e,t,n,r){await e.insert(Y).values(Ft(t,n,r)).onConflictDoUpdate({target:Y.clientId,set:{activeVersion:n,updatedAt:r}})}async function Lt(e,t){await Pt(e,t)}async function Rt(e,t,n,r){return g(e,async e=>{let[i]=await e.select().from(Y).where(h(Y.clientId,t.clientId)).limit(1),a=i?.activeVersion??null;return await Pt(e,t),n?(await It(e,t.clientId,t.version,r),{previousActiveVersion:a,activeVersion:t.version}):{previousActiveVersion:a,activeVersion:a}})}async function zt(e,t){return g(e,async e=>{let[n]=await e.select().from(Y).where(h(Y.clientId,t)).limit(1),r=await e.select().from(J).where(h(J.clientId,t));return{state:n?Z(n):null,versions:r.map(X)}})}async function Bt(e){return g(e,async e=>{let t=await e.select().from(Y),n=await e.select().from(J);return{states:t.map(Z),versions:n.map(X)}})}async function Vt(e,t){let n={clientId:t.clientId,activeVersion:t.activeVersion??null,updatedAt:t.updatedAt};await e.insert(Y).values(n).onConflictDoUpdate({target:Y.clientId,set:n})}async function Ht(e,t,n,r){return g(e,async e=>{let[i]=await e.select().from(Y).where(h(Y.clientId,t)).limit(1),a=i?.activeVersion??null;return await It(e,t,n,r),{previousActiveVersion:a,activeVersion:n}})}async function Ut(e,t,n,r){return g(e,async e=>{let[i]=await e.select().from(Y).where(h(Y.clientId,t)).limit(1),a=i?.activeVersion??null;if(!(((await e.delete(J).where(m(h(J.clientId,t),h(J.version,n)))).rowsAffected??0)>0))return{removedVersion:null,previousActiveVersion:a,activeVersion:a};await e.update(Y).set({activeVersion:null,updatedAt:r}).where(m(h(Y.clientId,t),h(Y.activeVersion,n)));let[o]=await e.select().from(Y).where(h(Y.clientId,t)).limit(1);return{removedVersion:n,previousActiveVersion:a,activeVersion:o?.activeVersion??null}})}function Wt(e,t,n){let r=[e.on(j.insertVersion,async e=>{await Lt(t,e.payload),e.setResult({success:!0})}),e.on(j.recordInstalledVersion,async e=>{let{versionRecord:n,makeActive:r,updatedAt:i}=e.payload,a=await Rt(t,n,r,i);e.setResult(a)}),e.on(j.listVersions,async e=>{let n=await t.select().from(J).where(h(J.clientId,e.payload.clientId));e.setResult({versions:n.map(X)})}),e.on(j.getSnapshot,async e=>{let{state:n,versions:r}=await zt(t,e.payload.clientId);e.setResult({state:n,versions:r})}),e.on(j.loadAllVersions,async e=>{let n=await t.select().from(J);e.setResult({versions:n.map(X)})}),e.on(j.upsertState,async e=>{await Vt(t,e.payload),e.setResult({success:!0})}),e.on(j.setActiveVersion,async e=>{let{clientId:n,activeVersion:r,updatedAt:i}=e.payload,a=await Ht(t,n,r,i);e.setResult(a)}),e.on(j.getState,async e=>{let[n]=await t.select().from(Y).where(h(Y.clientId,e.payload.clientId)).limit(1);e.setResult({state:n?Z(n):null})}),e.on(j.loadAllState,async e=>{let n=await t.select().from(Y);e.setResult({states:n.map(Z)})}),e.on(j.loadSnapshot,async e=>{let{states:n,versions:r}=await Bt(t);e.setResult({states:n,versions:r})}),e.on(j.removeVersionAndClearActive,async e=>{let{clientId:n,version:r,updatedAt:i}=e.payload,a=await Ut(t,n,r,i);e.setResult(a)})];return()=>{for(let e of r)e()}}const Q=u(`client_profiles`,{id:d(`id`).primaryKey(),clientId:d(`client_id`).notNull(),name:d(`name`).notNull(),description:d(`description`),configDir:d(`config_dir`).notNull(),isDefault:l(`is_default`,{mode:`boolean`}).notNull().default(!1),createdAt:l(`created_at`).notNull(),updatedAt:l(`updated_at`).notNull()},e=>[p(`uq_client_profiles_client_name`).on(e.clientId,e.name),p(`uq_client_profiles_default`).on(e.clientId).where(te`${e.isDefault} = 1`),c(`idx_client_profiles_client_id`).on(e.clientId)]);function $(e){return{id:e.id,clientId:e.clientId,name:e.name,description:e.description??null,configDir:e.configDir,isDefault:e.isDefault,createdAt:e.createdAt,updatedAt:e.updatedAt}}async function Gt(e,t,n){let r=Date.now();return g(e,async e=>{let[i]=await e.select().from(Q).where(m(h(Q.clientId,t),h(Q.name,n))).limit(1);if(i===void 0)return null;await e.update(Q).set({isDefault:!1,updatedAt:r}).where(m(h(Q.clientId,t),h(Q.isDefault,!0))),await e.update(Q).set({isDefault:!0,updatedAt:r}).where(m(h(Q.clientId,t),h(Q.name,n)));let[a]=await e.select().from(Q).where(m(h(Q.clientId,t),h(Q.name,n))).limit(1);return a===void 0?null:$(a)})}function Kt(e,t,n){let r=[e.on(K.get,async e=>{let{clientId:n,name:r}=e.payload,[i]=await t.select().from(Q).where(m(h(Q.clientId,n),h(Q.name,r))).limit(1);e.setResult({record:i?$(i):null})}),e.on(K.getById,async e=>{let[n]=await t.select().from(Q).where(h(Q.id,e.payload.id)).limit(1);e.setResult({record:n?$(n):null})}),e.on(K.list,async e=>{let n=await t.select().from(Q).where(h(Q.clientId,e.payload.clientId));e.setResult({records:n.map($)})}),e.on(K.set,async e=>{let n=e.payload,r={id:n.id,clientId:n.clientId,name:n.name,description:n.description??null,configDir:n.configDir,isDefault:n.isDefault,createdAt:n.createdAt,updatedAt:n.updatedAt};await t.insert(Q).values(r).onConflictDoUpdate({target:Q.id,set:{name:n.name,description:n.description??null,configDir:n.configDir,isDefault:n.isDefault,updatedAt:n.updatedAt}}),e.setResult({success:!0})}),e.on(K.delete,async e=>{let{clientId:n,name:r}=e.payload,i=await t.delete(Q).where(m(h(Q.clientId,n),h(Q.name,r)));e.setResult({success:(i.rowsAffected??0)>0})}),e.on(K.clearDefault,async e=>{await t.update(Q).set({isDefault:!1,updatedAt:Date.now()}).where(m(h(Q.clientId,e.payload.clientId),h(Q.isDefault,!0))),e.setResult({success:!0})}),e.on(K.setDefault,async e=>{let{clientId:n,name:r}=e.payload,i=await Gt(t,n,r);e.setResult({record:i})})];return()=>{for(let e of r)e()}}var qt=class{runtimeService;binaryManager;configPrimeService;profileService;sessionConfigService;constructor(e,t,n,r,i){this.runtimeService=e,this.binaryManager=t,this.configPrimeService=n,this.profileService=r,this.sessionConfigService=i}async init(){let e=(await Promise.allSettled([this.runtimeService.init(),this.binaryManager.init(),this.configPrimeService.init(),this.profileService.init(),this.sessionConfigService.init()])).filter(e=>e.status===`rejected`);if(e.length>0){for(let t=1;t<e.length;t++)console.warn(`[ClientsCoreService] Multiple init failures, secondary:`,e[t].reason);throw e[0].reason}}async destroy(){let e=(await Promise.allSettled([this.runtimeService.destroy(),this.binaryManager.destroy(),this.configPrimeService.destroy(),this.profileService.destroy(),this.sessionConfigService.destroy()])).filter(e=>e.status===`rejected`);for(let t of e)console.warn(`[ClientsCoreService] destroy failure:`,t.reason)}};const Jt=i(`makaio.clients-core`);function Yt(e){let t=[],n=()=>{for(let e of[...t].reverse())e()};try{for(let n of e)t.push(n())}catch(e){throw n(),e}return n}function Xt(e={}){let{definitions:n=[],strategyDependencies:r,postInstallHandlers:i}=e,a=[...n];return{name:`makaio.clients-core`,displayName:`Clients Core`,version:`0.1.0`,critical:!0,namespaces:[A,z,G],storage:{registerHandlers:ne((e,t,n)=>Yt([()=>Mt(e,t,n),()=>Wt(e,t,n),()=>Kt(e,t,n)]))},create:e=>{let n=new M(a),o=t.join(e.makaioHome,`clients`),s=new Ue(e.bus,{basePath:t.join(e.makaioHome,`binaries`),configBasePath:o,postInstallHandlers:i},n,r),c=new yt(e.bus,o),l=new Tt(e.bus,o);return new qt(new dt(e.bus),s,new _t(e.bus),c,l)}}}async function Zt(e){let t=await r.requestOptional(v.resolveBinary,{clientId:e});return t.handled?t.data:void 0}function Qt(e,t,n){return[...n??[],e,...t].map(tn).join(` `)}function $t(e,t,n,r){return Qt(e,[...t.split(` `),n],r)}function en(e){return e.runtimeCapabilities.hookEvents.filter(e=>e.frameworkSubject!==void 0).map(e=>({eventName:e.name}))}function tn(e){return/^[A-Za-z0-9_@%+=:,./-]+$/.test(e)?e:`'${e.replaceAll(`'`,`'\\''`)}'`}export{at as AbsolutePathSchema,me as BinaryNotFoundError,L as CLIENT_RUNTIME_STATUSES,he as ClientAccountRegistry,Be as ClientBinaryJobRunner,Ue as ClientBinaryManager,O as ClientBinaryStateRecordSchema,A as ClientBinaryStorageNamespace,j as ClientBinaryStorageSubjects,D as ClientBinaryVersionRecordSchema,we as ClientBinaryVersionResolver,_t as ClientConfigPrimeService,M as ClientDefinitionRegistry,U as ClientProfileRecordSchema,yt as ClientProfileService,G as ClientProfileStorageNamespace,K as ClientProfileStorageSubjects,Je as ClientRuntimeRegistry,dt as ClientRuntimeService,z as ClientRuntimeStorageNamespace,B as ClientRuntimeStorageSubjects,Tt as ClientSessionConfigService,ie as ClientSubjects,lt as ClientWiringAggregatedResultSchema,st as ClientWiringApplyResponseSchema,ae as ClientWiringEntrySchema,ot as ClientWiringListResponseSchema,ct as ClientWiringRemoveResponseSchema,qt as ClientsCoreService,Jt as ClientsCoreToken,Ye as RawClientHookPayloadSchema,R as RuntimeRecordSchema,ut as assertAbsoluteProjectDir,de as atomicModifyFile,Qt as buildClientCommand,et as buildClientSessionBase,$t as buildHookCommand,H as canonicalizeClientId,kt as createClientNamespace,it as createClientWiringListSubjectDef,rt as createClientWiringSubjectDef,Xt as createClientsCorePackage,Ze as createRawClientHookReceivedSubject,en as deriveSessionEventDescriptors,tt as emitBestEffort,T as isPathWithinBase,$e as pickNonEmptyString,Qe as pickNonEmptyStringValue,Yt as registerStorageHandlersWithRollback,E as resolveAndValidateBasePath,Zt as resolveClientBinary};
+import{z as e}from"zod";import*as t from"node:fs/promises";import*as n from"node:path";import{randomUUID as r}from"node:crypto";import{createBusNamespace as i}from"@makaio/framework/core";import{MakaioBus as a}from"@makaio/framework/bus";import{extensionToken as o,isUniversalRange as s,versionSatisfies as c}from"@makaio/framework/contracts";import{BaseService as l}from"@makaio/framework/service-base";import{index as u,integer as d,sqliteTable as f,text as p,unique as m,uniqueIndex as h}from"drizzle-orm/sqlite-core";import{and as g,eq as _,gt as ee,sql as te}from"drizzle-orm";import{didAffectRows as ne,executeTransaction as v,registerDrizzleHandlers as re}from"@makaio/framework/storage/drizzle";import{ClientProfileNameSchema as y,ClientProfileSchema as ie,ClientSubjects as ae,ClientSubjects as b,ClientWiringEntrySchema as x,ManagedInstallDescriptorSchema as oe,SessionConfigIdSchema as se}from"@makaio/framework/contracts/client";import*as S from"node:os";import{CLIDetectionSubjects as ce}from"@makaio/framework/services/cli-detection/namespace";import{ClientStorageSubjects as le}from"@makaio/framework/services/settings/storage";import{SessionSubjects as ue}from"@makaio/framework/contracts/session";async function de(e,t,n,r,i){let a,o=(n.get(e)??Promise.resolve()).then(async()=>{let n=await i(r(await fe(e,t)));n.changed&&await pe(e,n.content),a=n.result}),s=o.then(()=>void 0,()=>void 0);n.set(e,s);try{await o}finally{n.get(e)===s&&n.delete(e)}return a}async function fe(e,n){let r;try{r=await t.readFile(e,`utf-8`)}catch(e){if(e.code===`ENOENT`)return n;throw e}return JSON.parse(r)}async function pe(e,i){let a=n.dirname(e),o=n.join(a,`${n.basename(e)}.${r()}.tmp`);await t.mkdir(a,{recursive:!0});try{await t.writeFile(o,`${JSON.stringify(i,null,2)}\n`,`utf-8`),await t.rename(o,e)}catch(e){throw await t.unlink(o).catch(()=>void 0),e}}var me=class e extends Error{code=`BINARY_NOT_FOUND`;constructor(t){super(`client.resolveBinary: no binary found for client '${t}' — install a managed version or ensure the binary is on PATH`),this.name=`BinaryNotFoundError`,Error.captureStackTrace?.(this,e)}},he=class{nextAccountSequence=1;accountIdsByIdentifier=new Map;accounts=new Map;upsertAccount(e){let t=_e(e.displayLabel),n=new Map;for(let t of e.identifiers)n.set(ge(e.clientId,t.scheme,t.value),t);let r=ve(n,this.accountIdsByIdentifier,`strong`),i=ve(n,this.accountIdsByIdentifier,`alias`),a=r[0]??(i.length===1?i[0]:i.length>1?ye(i):this.createAccount()),o=(r.length>0?xe(a,r,i):[]).flatMap(e=>this.mergeInto(a,e)),s=this.accounts.get(a);if(!s)throw Error(`Client account registry invariant violated: missing account ${a}`);for(let[e,t]of n){let n=this.accountIdsByIdentifier.get(e);r.length===0&&t.strength===`alias`&&n!==void 0&&n!==a||(s.identifiers.set(e,t),this.accountIdsByIdentifier.set(e,a))}return t!==void 0&&(s.displayLabel=t),{clientAccountId:a,displayLabel:s.displayLabel,mergedAccountIds:o}}clear(){this.accountIdsByIdentifier.clear(),this.accounts.clear(),this.nextAccountSequence=1}createAccount(){let e=`client-account-${this.nextAccountSequence}`;return this.nextAccountSequence+=1,this.accounts.set(e,{clientAccountId:e,identifiers:new Map}),e}mergeInto(e,t){if(e===t)return[];let n=this.accounts.get(e),r=this.accounts.get(t);if(!n||!r)return[];for(let[t,i]of r.identifiers)n.identifiers.set(t,i),this.accountIdsByIdentifier.set(t,e);return n.displayLabel===void 0&&r.displayLabel!==void 0&&(n.displayLabel=r.displayLabel),this.accounts.delete(t),[t]}};function ge(e,t,n){return`${e}\u0000${t}\u0000${n}`}function _e(e){return e?.trim()||void 0}function ve(e,t,n){let r=new Set;for(let[i,a]of e){if(a.strength!==n)continue;let e=t.get(i);e!==void 0&&r.add(e)}return Array.from(r).sort(C)}function ye(e){return[...e].sort(C)[0]}function C(e,t){let n=be(e),r=be(t);return n!==null&&r!==null&&n!==r?n-r:e.localeCompare(t)}function be(e){let t=e.match(/^client-account-(\d+)$/);return t?Number(t[1]):null}function xe(e,t,n){let r=new Set([...t,...n]);return r.delete(e),Array.from(r).sort(C)}function Se(e){return{subject:`config.prime`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}async function w(e,t){let n=await e.requestOptional(Se(t.clientId),t);return n.handled?n.data:{primed:!1}}function Ce(){let e=e=>async()=>{throw Error(`StrategyDependencies.${e} is not implemented`)};return{fetchText:e(`fetchText`),fetchJson:e(`fetchJson`),downloadFile:e(`downloadFile`),exec:e(`exec`),extractArchive:e(`extractArchive`),deleteFile:e(`deleteFile`),computeChecksum:e(`computeChecksum`),removeDirectory:e(`removeDirectory`)}}var we=class{resolveInstallVersion(e,t,n){let r=t.version;if(n===void 0)return{version:r,explicit:!1};let i=n.trim();if(i.length===0)throw Error(`Explicit version returned an empty version string`);if(i!==r)throw Error(`client.install: requested version ${i} for client '${e}' does not match pinned version ${r}`);return{version:i,explicit:!0}}};function Te(e){if(e!==void 0)return(t,n)=>{n!==null&&n>0?e(`downloading`,t/n*100):e(`downloading`,null)}}var Ee=class{#e;#t;constructor(e,t){this.#e=e,this.#t=t}async execute(e,t,n){if(e!==this.#e.version)throw Error(`npm managed install requested version ${e} but descriptor pins ${this.#e.version}`);n?.(`installing`,null);let r=`${this.#e.package}@${this.#e.version}`;return await this.#t.exec(`npm`,[`install`,r,`--prefix`,t,`--no-save`,`--ignore-scripts`]),n?.(`installing`,100),{installPath:t,version:this.#e.version,strategy:`npm`}}};function De(){if(process.platform!==`linux`)return!1;try{let e=process.report?.getReport?.();if(typeof e!=`object`||!e||!(`header`in e))return!0;let{header:t}=e;return typeof t!=`object`||!t?!0:!(`glibcVersionRuntime`in t)}catch{return!1}}function Oe(e){return e.replace(/[^0-9a-fA-F]/g,``).toUpperCase()}function T(e,t,n,r){let i=e.replaceAll(`{version}`,t);return n!==void 0&&(i=i.replaceAll(`{platform}`,n)),r!==void 0&&(i=i.replaceAll(`{binary}`,r)),i}function ke(e){let t=`${e.platform}-${e.arch}`;return e.platform===`linux`&&e.isMusl?`${t}-musl`:t}function Ae(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Signed manifest must be a JSON object`);let n=e,r=n.version;if(r!==t)throw Error(`Signed manifest version ${String(r)} does not match descriptor pin ${t}`);let i=n.platforms;if(typeof i!=`object`||!i||Array.isArray(i))throw Error(`Signed manifest must contain a platforms object`);return{version:r,platforms:i}}function je(e,t){let n=e.platforms[t];if(typeof n!=`object`||!n||Array.isArray(n))throw Error(`Signed manifest does not contain a platform entry for '${t}'`);let{binary:r,checksum:i}=n;if(typeof r!=`string`||!Me(r))throw Error(`Manifest entry for '${t}' has unsafe binary filename`);if(typeof i!=`string`||i.length===0)throw Error(`Manifest entry for '${t}' is missing a valid 'checksum' field`);return{binary:r,checksum:i}}function Me(e){return e.length>0&&e!==`.`&&e!==`..`&&!e.includes(`/`)&&!e.includes(`\\`)}var Ne=class{#e;#t;#n;constructor(e,t,n){this.#e=e,this.#t=t,this.#n={platform:n?.platform??process.platform,arch:n?.arch??process.arch,isMusl:n?.isMusl??De()}}async execute(e,r,i){if(e!==this.#e.version)throw Error(`signed-binary-bucket managed install requested version ${e} but descriptor pins ${this.#e.version}`);let{config:a}=this.#e,o=ke(this.#n),s=a.platforms[o];if(s===void 0)throw Error(`signed-binary-bucket descriptor has no platform entry for '${o}'. Supported platforms: ${Object.keys(a.platforms).join(`, `)}`);await t.mkdir(r,{recursive:!0});let c=n.join(r,`.gnupg`),l=n.join(r,`signing-key.asc`),u=n.join(r,`manifest.json`),d=n.join(r,`manifest.json.sig`);i?.(`resolving`,null),await this.#r(a,e,l,u,d),i?.(`verifying`,null);let f=await this.#i(a,c,l,u,d,o);i?.(`downloading`,null);let p=T(a.binaryPathTemplate,e,s,f.binary),m=n.resolve(r,f.binary);await this.#t.downloadFile(`${a.baseUrl}/${p}`,m,Te(i)),i?.(`verifying`,null);let h=await this.#t.computeChecksum(m);if(h!==f.checksum)throw Error(`Binary checksum mismatch: expected ${f.checksum} but computed ${h}`);return i?.(`installing`,null),this.#n.platform!==`win32`&&await t.chmod(m,493),await this.#t.removeDirectory(c),await this.#t.deleteFile(l),await this.#t.deleteFile(d),i?.(`installing`,100),{installPath:r,version:this.#e.version,strategy:`signed-binary-bucket`}}async#r(e,n,r,i,a){let o=`${e.baseUrl}/${T(e.manifestPathTemplate,n)}`,s=`${e.baseUrl}/${T(e.manifestSignaturePathTemplate,n)}`,c=await this.#t.fetchText(e.publicKeyUrl);await t.writeFile(r,c,`utf-8`),await this.#t.downloadFile(o,i),await this.#t.downloadFile(s,a)}async#i(e,n,r,i,a,o){await t.mkdir(n,{recursive:!0,mode:448}),await this.#t.exec(`gpg`,[`--homedir`,n,`--import`,r]);let s=await this.#t.exec(`gpg`,[`--homedir`,n,`--with-colons`,`--fingerprint`,`--list-keys`]),c=this.#a(s);if(Oe(c)!==Oe(e.publicKeyFingerprint))throw Error(`GPG key fingerprint mismatch: expected ${e.publicKeyFingerprint} but got ${c}`);await this.#t.exec(`gpg`,[`--homedir`,n,`--verify`,a,i]).catch(e=>{throw Error(`Manifest GPG signature verification failed: ${e.message}`)});let l=await t.readFile(i,`utf-8`);return je(Ae(JSON.parse(l),this.#e.version),o)}#a(e){for(let t of e.split(`
+`)){let e=t.split(`:`);if(e[0]===`fpr`&&e[9]!==void 0&&e[9].length>0)return e[9]}throw Error(`Could not extract GPG key fingerprint from output`)}};function Pe(e,t){let n=oe.safeParse(e);if(n.success)switch(n.data.type){case`npm`:return new Ee(n.data,t);case`signed-binary-bucket`:return new Ne(n.data,t)}}function Fe(e,t){let r=n.relative(e,t);return r!==``&&!r.startsWith(`..${n.sep}`)&&r!==`..`&&!n.isAbsolute(r)}function E(e,t){return!n.isAbsolute(e)||!n.isAbsolute(t)?!1:Fe(n.resolve(e),n.resolve(t))}function D(e,t){if(!e||!n.isAbsolute(e))throw Error(`${t} requires a non-empty absolute basePath`);return n.resolve(e)}async function Ie(e,r,i,a){let[o,...s]=i;if(Re(o))throw Error(`versionCommand[0] must be a relative path; received absolute path "${o}"`);if(o.split(/[/\\]/).includes(`..`))throw Error(`versionCommand[0] must not contain path traversal segments; received "${o}"`);let c=n.normalize(o),l=n.join(r,c),u=await t.realpath(r),d=await t.realpath(l);if(!Fe(u,d))throw Error(`versionCommand[0] must not escape the install directory; "${o}" resolves outside installPath`);let f;try{f=await e(d,s,{cwd:u})}catch(e){let t=e instanceof Error?e.message:String(e);throw Error(`Version verification failed: command "${l}" exited with an error: ${t}`,{cause:e})}let p=Le(a);if(!ze(f,p))throw Error(`Version mismatch: expected "${a}" but command output was "${f.trim()}"`)}function Le(e){return e[0]===`v`||e[0]===`V`?e.slice(1):e}function Re(e){return e.startsWith(`/`)||/^[A-Za-z]:[/\\]/.test(e)||e.startsWith(`\\`)}function ze(e,t){return(e.match(/[A-Za-z0-9][A-Za-z0-9._+-]*/g)??[]).some(e=>Le(e)===t)}var Be=class{strategyDeps;config;jobs=new Map;#e=!1;resolvedBasePath;constructor(e,t){this.strategyDeps=e,this.config=t,this.resolvedBasePath=D(t.basePath,`ClientBinaryJobRunner`)}startJob(e,t,n,r,i,a,o){let s={...e,status:`running`};return this.jobs.set(e.jobId,s),this.runJob(s,t,n,r,i,a,o),e.jobId}cancelAll(){this.#e=!0,this.jobs.clear()}safeOnProgress(e,t){try{e(t)}catch{}}emitProgressIfActive(e,t){return this.#e?!1:(this.safeOnProgress(e,t),!this.#e)}async runJob(e,t,n,r,i,a,o){try{let s=this.resolveTargetDir(e.clientId,e.version),c=Pe(t,this.strategyDeps);if(c===void 0)throw Error(`Unsupported managed install descriptor type: ${t.type}`);let l=await this.executeStrategy(e,c,s,n);if(this.#e)return;let u;try{if(u=await this.runPostInstall(e,l.installPath,a,n),this.#e)return;o!==void 0&&await this.runVersionVerification(e,l.installPath,o,n)}catch(e){throw this.#e||await this.cleanupStagedArtifact(l.installPath),e}if(this.#e)return;await this.finalizeSuccess(e,l,u,n,r,i)}catch(t){if(this.#e)return;let n=t instanceof Error?t.message:String(t),r=t instanceof Error&&`code`in t?String(t.code):void 0;try{await i({jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,status:`error`,activeVersion:null,error:{message:n,...r===void 0?{}:{code:r}}})}catch{}}finally{this.jobs.delete(e.jobId)}}async finalizeSuccess(e,t,n,r,i,a){if(!(e.makeActive&&!this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,stage:`activating`,progress:null,installPath:t.installPath,activeAfterCompletion:!0}))&&!this.#e){try{await i({jobId:e.jobId,clientId:e.clientId,version:t.version,installPath:t.installPath,makeActive:e.makeActive,reason:e.reason})}catch(e){try{await this.strategyDeps.removeDirectory(t.installPath)}catch{}throw e}if(!this.#e)try{await a({jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,status:`success`,installPath:t.installPath,activeVersion:e.makeActive?t.version:null,...n===void 0?{}:{metadata:{postInstall:n}}})}catch{}}}async cleanupStagedArtifact(e){try{await this.strategyDeps.removeDirectory(e)}catch{}}async executeStrategy(e,t,n,r){try{return await t.execute(e.version,n,(t,i)=>{this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:i,installPath:t===`installing`?n:void 0,activeAfterCompletion:e.makeActive})})}catch(e){throw this.#e||await this.cleanupStagedArtifact(n),e}}async runPostInstall(e,t,n,r){if(n===void 0)return;let i=this.resolvePostInstallHandler(n),a=this.buildProgressPayload(e,`post-install`,null,t,{kind:n.kind});if(!this.emitProgressIfActive(r,a))return;let o=await i({clientId:e.clientId,version:e.version,installPath:t,descriptor:n});return this.emitProgressIfActive(r,this.buildProgressPayload(e,`post-install`,100,t,{kind:n.kind,...o??{}})),o??void 0}async runVersionVerification(e,t,n,r){this.emitProgressIfActive(r,this.buildProgressPayload(e,`verifying`,null,t,{kind:`version-command`}))&&(this.#e||await Ie(this.strategyDeps.exec,t,n,e.version))}resolvePostInstallHandler(e){let t=this.config.postInstallHandlers?.get(e.kind);if(t===void 0)throw Error(`No post-install handler registered for kind "${e.kind}"`);return t}buildProgressPayload(e,t,n,r,i){return{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:n,installPath:r,activeAfterCompletion:e.makeActive,...i===void 0?{}:{metadata:i}}}resolveTargetDir(e,t){let r=n.resolve(this.resolvedBasePath,e,t);if(!E(this.resolvedBasePath,r))throw Error(`Invalid install target path for client "${e}" and version "${t}"`);return r}};const O=e.object({id:e.string(),clientId:e.string(),version:e.string(),installPath:e.string(),installedAt:e.number().int().nonnegative(),createdAt:e.number().int().nonnegative()}),k=e.object({clientId:e.string(),activeVersion:e.string().nullable(),updatedAt:e.number().int().nonnegative()}),A=e.object({previousActiveVersion:e.string().nullable(),activeVersion:e.string().nullable()}),j=i(`client-binary:storage`,{insertVersion:{request:O,response:e.object({success:e.boolean()})},recordInstalledVersion:{request:e.object({versionRecord:O,makeActive:e.boolean(),updatedAt:e.number().int().nonnegative()}),response:A},listVersions:{request:e.object({clientId:e.string()}),response:e.object({versions:e.array(O)})},getSnapshot:{request:e.object({clientId:e.string()}),response:e.object({state:k.nullable(),versions:e.array(O)})},loadAllVersions:{request:e.object({}),response:e.object({versions:e.array(O)})},upsertState:{request:k,response:e.object({success:e.boolean()})},setActiveVersion:{request:e.object({clientId:e.string(),activeVersion:e.string().nullable(),updatedAt:e.number().int().nonnegative()}),response:A},getState:{request:e.object({clientId:e.string()}),response:e.object({state:k.nullable()})},loadAllState:{request:e.object({}),response:e.object({states:e.array(k)})},loadSnapshot:{request:e.object({}),response:e.object({states:e.array(k),versions:e.array(O)})},removeVersionAndClearActive:{request:e.object({clientId:e.string(),version:e.string(),updatedAt:e.number().int().nonnegative()}),response:A.extend({removedVersion:e.string().nullable()})}}),M=j.subjects;var N=class{definitions=new Map;constructor(e=[]){for(let t of e)this.registerUnique(t)}getDefinition(e){return this.definitions.get(e)}listDefinitions(){return[...this.definitions.values()]}register(e){this.definitions.set(e.id,e)}registerUnique(e){if(this.definitions.has(e.id))throw Error(`ClientDefinitionRegistry: duplicate client definition id '${e.id}'`);this.definitions.set(e.id,e)}};function P(e,t,n,r,i){if(n===null){if(s(r))return;throw Error(`${e}: ${i} for client '${t}' did not report a version; requires ${r}`)}if(!c(n,r))throw Error(`${e}: ${i} ${n} for client '${t}' does not satisfy ${r}`)}var Ve=class{bus;resolvedBasePath;resolvedConfigBasePath;definitionLookup;constructor(e){this.bus=e.bus,this.resolvedBasePath=e.resolvedBasePath,this.resolvedConfigBasePath=e.resolvedConfigBasePath,this.definitionLookup=e.definitionLookup}async resolve(e){let t=this.definitionLookup.getDefinition(e);if(t===void 0)throw Error(`client.resolveBinary: no definition registered for client '${e}'`);let{state:n,versions:r}=await this.bus.request(M.getSnapshot,{clientId:e}),i=n?.activeVersion??null;return i===null?this.buildGlobalContext(e,t):this.buildManagedContext(e,i,t,r)}isInstallPathWithinBase(e){return E(this.resolvedBasePath,e)}async isExpectedInstallPath(e,r,i){if(!n.isAbsolute(e)||!this.isInstallPathWithinBase(e))return!1;let a=n.resolve(this.resolvedBasePath,r,i);if(!this.isInstallPathWithinBase(a))return!1;try{let[n,r,i]=await Promise.all([t.realpath(this.resolvedBasePath),t.realpath(a),t.realpath(e)]);return E(n,r)?i===r||E(r,i):!1}catch{return!1}}async buildManagedContext(e,t,r,i){let a=i.find(e=>e.version===t);if(a===void 0)throw Error(`client.resolveBinary: active version '${t}' is not installed for client '${e}'`);if(!await this.isExpectedInstallPath(a.installPath,e,t))throw Error(`client.resolveBinary: stored installPath "${a.installPath}" does not match the expected install directory for ${e}@${t}`);r.binary!==void 0&&P(`client.resolveBinary`,e,t,r.binary.supportedVersions,`managed binary version`);let o=F(r.versionCommand)?.[0];if(o===void 0)throw Error(`client.resolveBinary: definition for '${e}' has no versionCommand — cannot derive binary path`);let s=n.resolve(a.installPath,o),c=n.resolve(a.installPath);if(!s.startsWith(c+n.sep)&&s!==c)throw Error(`client.resolveBinary: versionCommand for '${e}' resolves outside the install directory`);let{configDir:l,env:u}=this.resolveIsolatedConfig(e,r);return{binaryPath:s,env:u,configDir:l,source:`managed`,version:t}}async buildGlobalContext(e,t){if(!t.binary?.name)throw Error(`client.resolveBinary: definition for '${e}' has no binary.name — cannot scan PATH`);let n={clientId:e,binaryName:t.binary.name,supportedVersions:t.binary.supportedVersions},{results:r}=await this.bus.request(b.scan,{targets:[n]}),i=r.find(t=>t.clientId===e);if(i===void 0||!i.found)throw new me(e);let a=i.version??null;return P(`client.resolveBinary`,e,a,t.binary.supportedVersions,`detected global binary version`),{binaryPath:null,env:{},configDir:this.resolveGlobalConfigDir(t),source:`global`,version:a}}resolveIsolatedConfig(e,t){let{configIsolation:r}=t;if(r===void 0)return{configDir:null,env:{}};let i=n.join(this.resolvedConfigBasePath,e,`config`),a=r.pathKind===`file`?n.join(i,n.basename(r.defaultPath)):i;return{configDir:i,env:{[r.envVar]:a}}}resolveGlobalConfigDir(e){let{configIsolation:t}=e;if(t===void 0)return null;let r=t.defaultPath,i=r===`~`?S.homedir():r.startsWith(`~/`)?n.join(S.homedir(),r.slice(2)):r,a=t.pathKind===`file`?n.dirname(i):i;if(!n.isAbsolute(a))throw Error(`ConfigIsolation defaultPath for '${e.id}' resolved to non-absolute path '${i}'; use an absolute or tilde-expanded path (e.g. '~/.myapp')`);return a}};function F(e){if(e===void 0)return;let{executable:t,args:n}=e,r=typeof t==`string`?t:t[process.platform]??t.default;if(typeof r!=`string`||r.trim()===``)throw Error(`client.resolveBinary: versionCommand executable is missing for this platform`);return[r,...n]}async function He(e,t){let{versions:n,states:r}=await e.request(M.loadSnapshot,{}),i=Map.groupBy(n,e=>e.clientId),a=new Map;for(let e of r)a.set(e.clientId,e.activeVersion);let o=new Map;for(let e of t.listDefinitions())e.managedInstall!==void 0&&o.set(e.id,e.managedInstall);return[...new Set(o.keys())].map(e=>{let t=o.get(e);if(t===void 0)throw Error(`assembleBinaryList: missing descriptor for client '${e}'`);let n=a.get(e)??null,r=(i.get(e)??[]).map(e=>({version:e.version,installPath:e.installPath,installedAt:e.installedAt,isActive:e.version===n})),s=t.version;return{clientId:e,installedVersions:r,activeVersion:n,pinnedVersion:s,updateAvailable:n!==null&&n!==s}})}var Ue=class extends l{config;definitionLookup;versionResolver;jobRunner;strategyDeps;resolvedBasePath;resolvedConfigBasePath;resolver;pendingClients=new Set;constructor(e=a,t,n=new N([]),r=Ce()){super(e),this.config=t,this.definitionLookup=n,this.resolvedBasePath=D(t.basePath,`ClientBinaryManager`),this.resolvedConfigBasePath=D(t.configBasePath,`ClientBinaryManager configBasePath`),this.strategyDeps=r,this.versionResolver=new we,this.jobRunner=new Be(r,t),this.resolver=new Ve({bus:e,resolvedBasePath:this.resolvedBasePath,resolvedConfigBasePath:this.resolvedConfigBasePath,definitionLookup:n})}async onInit(){this.registerHandler(b.list,async e=>{let t=await this.handleList();e.setResult({clients:t})}),this.registerHandler(b.install,async e=>{let t=await this.handleInstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(b.update,async e=>{let t=await this.handleUpdate(e.payload.clientId);e.setResult(t)}),this.registerHandler(b.setActive,async e=>{let t=await this.handleSetActive(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(b.uninstall,async e=>{let t=await this.handleUninstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(b.resolveBinary,async e=>{let t=await this.resolver.resolve(e.payload.clientId);e.setResult(t)})}onDestroy(){this.jobRunner.cancelAll(),this.pendingClients.clear()}async handleList(){return He(this.bus,this.definitionLookup)}async handleInstall(e,t){let{definition:n,descriptor:r}=this.requireManagedDefinition(e,`client.install`);return this.withClientLock(e,async()=>{let{version:i}=this.versionResolver.resolveInstallVersion(e,r,t);return n.binary!==void 0&&P(`client.install`,e,i,n.binary.supportedVersions,t===void 0?`resolved binary version`:`requested binary version`),{jobId:this.startInstallJob(e,i,r,n,!1,`install`),requestedVersion:t??null,resolvedVersion:i}})}async handleUpdate(e){let{definition:t,descriptor:n}=this.requireManagedDefinition(e,`client.update`);return this.withClientLock(e,async()=>{let{version:r}=this.versionResolver.resolveInstallVersion(e,n);return t.binary!==void 0&&P(`client.update`,e,r,t.binary.supportedVersions,`resolved binary version`),{jobId:this.startInstallJob(e,r,n,t,!0,`update`),resolvedVersion:r}})}async handleSetActive(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:n}=await this.bus.request(M.listVersions,{clientId:e}),r=n.find(e=>e.version===t);if(r===void 0)throw Error(`client.setActive: version '${t}' is not installed for client '${e}'`);let i=this.definitionLookup.getDefinition(e);if(i===void 0)throw Error(`client.setActive: no definition registered for client '${e}'`);i.binary!==void 0&&P(`client.setActive`,e,t,i.binary.supportedVersions,`requested binary version`);let a=F(i.versionCommand);if(a===void 0)throw Error(`client.setActive: no versionCommand registered for client '${e}'`);if(!await this.resolver.isExpectedInstallPath(r.installPath,e,t))throw Error(`client.setActive: stored installPath "${r.installPath}" does not match the expected install directory for ${e}@${t}`);return await Ie(this.strategyDeps.exec,r.installPath,a,t),await this.patchActiveVersion(e,t,`set-active`),{clientId:e,activeVersion:t}}finally{this.pendingClients.delete(e)}}async handleUninstall(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:r}=await this.bus.request(M.listVersions,{clientId:e}),i=r.find(e=>e.version===t);if(i===void 0)throw Error(`client.uninstall: version '${t}' is not installed for client '${e}'`);let{removedVersion:a,previousActiveVersion:o,activeVersion:s}=await this.bus.request(M.removeVersionAndClearActive,{clientId:e,version:t,updatedAt:Date.now()});if(a===null)throw Error(`client.uninstall: failed to delete version '${t}' for client '${e}'`);let c=i.installPath,l=typeof c==`string`&&c.length>0?n.resolve(c):null;if(typeof c!=`string`||c.length===0||l===null||!n.isAbsolute(c)||!await this.resolver.isExpectedInstallPath(l,e,t)?console.warn(`[ClientBinaryManager] Skipping removeDirectory: stored installPath "${String(c)}" does not match the expected install directory for ${e}@${t}`):await this.strategyDeps.removeDirectory(l).catch(n=>{console.warn(`[ClientBinaryManager] Failed to remove binary directory "${l}" for ${e}@${t}:`,n)}),o!==null&&s===null)try{await this.bus.emit(b.version.changed,{clientId:e,previousActiveVersion:o,activeVersion:null,reason:`uninstall`})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return{clientId:e,removedVersion:t,activeVersion:s}}finally{this.pendingClients.delete(e)}}async patchActiveVersion(e,t,n){let r=(await this.bus.request(M.setActiveVersion,{clientId:e,activeVersion:t,updatedAt:Date.now()})).previousActiveVersion;if(r!==t)try{await this.bus.emit(b.version.changed,{clientId:e,previousActiveVersion:r,activeVersion:t,reason:n})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return r}requireManagedDefinition(e,t){let n=this.definitionLookup.getDefinition(e);if(n===void 0)throw Error(`${t}: no definition registered for client '${e}'`);let r=n.managedInstall;if(r===void 0)throw Error(`${t}: client '${e}' does not declare a managed install descriptor`);return{definition:n,descriptor:r}}async withClientLock(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{return await t()}catch(t){throw this.pendingClients.delete(e),t}}startInstallJob(e,t,n,r,i,a){let o={jobId:crypto.randomUUID(),clientId:e,version:t,strategy:n.type,status:`pending`,makeActive:i,reason:a};return this.jobRunner.startJob(o,n,e=>{this.bus.emit(b.installJob.progress,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.progress:`,e)})},this.makeCompletionCallback(),async e=>{this.pendingClients.delete(e.clientId),await this.bus.emit(b.installJob.completed,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.completed:`,e)})},r.postInstall,F(r.versionCommand)),o.jobId}makeCompletionCallback(){return async({clientId:e,version:t,installPath:n,makeActive:r,reason:i})=>{let a=Date.now();await w(this.bus,{clientId:e,configDir:this.resolveManagedConfigDir(e),phase:`managed-install`,binaryVersion:t});let o=await this.bus.request(M.recordInstalledVersion,{versionRecord:{id:crypto.randomUUID(),clientId:e,version:t,installPath:n,installedAt:a,createdAt:a},makeActive:r,updatedAt:a});if(r&&o.previousActiveVersion!==o.activeVersion)try{await this.bus.emit(b.version.changed,{clientId:e,previousActiveVersion:o.previousActiveVersion,activeVersion:o.activeVersion,reason:i})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}}}resolveManagedConfigDir(e){return n.join(this.resolvedConfigBasePath,e,`config`)}};function I(e,t){return`${e}${t}`}function L(e,t){return`${e}${t}`}var We=class{records=new Map;bySupervisorSessionId=new Map;byPidClientId=new Map;byAdapterSessionClientId=new Map;set(e){let t=this.records.get(e.clientRuntimeId);t&&this.removeIndexEntries(t),this.records.set(e.clientRuntimeId,e),this.addIndexEntries(e)}setFromStorage(e,t,n){this.records.set(e.clientRuntimeId,e),e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),t-e.updatedAt<=n&&(e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId))}delete(e){let t=this.records.get(e);t&&(this.removeIndexEntries(t),this.records.delete(e))}get(e){return this.records.get(e)}findByEvidence(e,t,n,r){if(e!==void 0){let t=this.bySupervisorSessionId.get(e);if(t!==void 0)return this.records.get(t)}if(t!==void 0){let e=this.byPidClientId.get(I(t,r));if(e!==void 0)return this.records.get(e)}if(n!==void 0){let e=this.byAdapterSessionClientId.get(L(n,r));if(e!==void 0)return this.records.get(e)}}values(){return this.records.values()}clear(){this.records.clear(),this.bySupervisorSessionId.clear(),this.byPidClientId.clear(),this.byAdapterSessionClientId.clear()}get size(){return this.records.size}addIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId)}removeIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.delete(e.supervisorSessionId),e.pid!==void 0&&this.byPidClientId.delete(I(e.pid,e.clientId)),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.delete(L(e.adapterSessionId,e.clientId))}};const R=[`observed`,`started`],z=e.object({clientRuntimeId:e.string(),clientId:e.string(),status:e.enum(R),supervisorSessionId:e.string().optional(),pid:e.number().int().positive().optional(),parentPid:e.number().int().positive().optional(),adapterSessionId:e.string().optional(),sessionId:e.string().optional(),cwd:e.string().optional(),argv:e.array(e.string()).optional(),metadata:e.record(e.string(),e.unknown()).optional(),observedAt:e.number().int().nonnegative(),createdAt:e.number().int().nonnegative(),updatedAt:e.number().int().nonnegative()}),B=i(`client-runtime:storage`,{upsert:{request:z,response:e.object({success:e.boolean()})},loadAll:{request:e.object({}),response:e.object({records:e.array(z)})}}),V=B.subjects;function Ge(e){return e.supervisorSessionId!==void 0||e.adapterSessionId!==void 0}function H(e){return{...e,argv:e.argv===void 0?void 0:[...e.argv],metadata:e.metadata===void 0?void 0:structuredClone(e.metadata)}}function Ke(e){return Math.max(Date.now(),e+1)}function qe(e,t){let n=!1;return t.supervisorSessionId!==void 0&&e.supervisorSessionId!==t.supervisorSessionId&&(e.supervisorSessionId=t.supervisorSessionId,n=!0),t.pid!==void 0&&e.pid!==t.pid&&(e.pid=t.pid,n=!0),t.parentPid!==void 0&&e.parentPid!==t.parentPid&&(e.parentPid=t.parentPid,n=!0),t.adapterSessionId!==void 0&&e.adapterSessionId!==t.adapterSessionId&&(e.adapterSessionId=t.adapterSessionId,n=!0),t.sessionId!==void 0&&e.sessionId!==t.sessionId&&(e.sessionId=t.sessionId,n=!0),t.cwd!==void 0&&e.cwd!==t.cwd&&(e.cwd=t.cwd,n=!0),t.argv!==void 0&&JSON.stringify(e.argv)!==JSON.stringify(t.argv)&&(e.argv=[...t.argv],n=!0),t.metadata!==void 0&&JSON.stringify(e.metadata)!==JSON.stringify(t.metadata)&&(e.metadata=structuredClone(t.metadata),n=!0),n}var Je=class{runtimeMap=new We;bus;constructor(e){this.bus=e}async loadFromStorage(){if(!this.bus)return;let e=await this.bus.requestOptional(V.loadAll,{});if(!e.handled)return;let t=Date.now();for(let n of e.data.records)this.runtimeMap.setFromStorage(H(n),t,864e5)}async upsertRuntime(e){let t=this.runtimeMap.findByEvidence(e.supervisorSessionId,e.pid,e.adapterSessionId,e.clientId);if(t){let n=t.status===`observed`,r=n&&Ge(e),i=qe(t,e),a=n&&e.observedAt>t.observedAt;return r&&(t.status=`started`),(i||r||a)&&(t.updatedAt=Ke(t.updatedAt),a&&(t.observedAt=e.observedAt),this.runtimeMap.set(t),await this.persistRecord(t)),{clientRuntimeId:t.clientRuntimeId,created:!1,promoted:r,record:H(t)}}let n=Date.now(),i=r(),a=Ge(e)?`started`:`observed`,o={clientRuntimeId:i,clientId:e.clientId,status:a,supervisorSessionId:e.supervisorSessionId,pid:e.pid,parentPid:e.parentPid,adapterSessionId:e.adapterSessionId,sessionId:e.sessionId,cwd:e.cwd,argv:e.argv?[...e.argv]:void 0,metadata:e.metadata?structuredClone(e.metadata):void 0,observedAt:e.observedAt,createdAt:n,updatedAt:n};return this.runtimeMap.set(o),await this.persistRecord(o),{clientRuntimeId:i,created:!0,promoted:!1,record:H(o)}}getRuntime(e){let t=this.runtimeMap.get(e);return t?H(t):void 0}clear(){this.runtimeMap.clear()}get size(){return this.runtimeMap.size}async persistRecord(e){this.bus&&await this.bus.requestOptional(V.upsert,H(e))}};const Ye=e.object({eventName:e.string(),receivedAt:e.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`),payload:e.record(e.string(),e.unknown()),metadata:e.record(e.string(),e.unknown()).optional()}),Xe=/^[a-z0-9-]+$/;function U(e,t=`canonicalizeClientId`){let n=e.trim().toLowerCase(),r=n.startsWith(`client:`)?n.slice(7):n;if(r.length===0)throw Error(`[${t}] clientId must be a non-empty string`);if(!Xe.test(r))throw Error(`[${t}] clientId must contain only lowercase letters, numbers, and hyphens after an optional client: prefix`);return r}function Ze(e){return{subject:`hook.received`,$meta:{namespace:`client:${U(e,`createRawClientHookReceivedSubject`)}`,isRequest:!1,local:!1,channel:!1}}}const Qe=5e3,$e=e.object({exitCode:e.number().int().min(0).max(255).default(0),stdout:e.string().default(``),stderr:e.string().default(``)});function et(e){return{subject:`hook.handle`,$meta:{namespace:`client:${U(e,`createRawClientHookHandleSubject`)}`,isRequest:!0,local:!1,channel:!1}}}function tt(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function nt(e,t){return tt(e[t])}function rt(e){return{clientId:e.clientId,source:`adapter-derived`,observedAt:Date.now(),...e.sessionId!==void 0&&{sessionId:e.sessionId},...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}}function it(e){try{e().catch(at)}catch(e){at(e)}}function at(e){(process.env.DEBUG||process.env.MAKAIO_DEBUG)&&console.debug(`[emitBestEffort] observed-semantics emission failed`,e)}function ot(e,t){return{subject:t,$meta:{namespace:`client:${U(e,`createClientWiringSubjectDef`)}`,isRequest:!0,local:!1,channel:!1}}}function st(e){return ot(e,`wiring.list`)}const ct=e.string().min(1).refine(n.isAbsolute,{message:`projectDir must be an absolute path`}),lt=e.object({entries:e.array(x)}),ut=e.object({applied:e.number().int().nonnegative(),skipped:e.number().int().nonnegative()}),dt=e.object({removed:e.number().int().nonnegative()}),ft=e.object({clientId:e.string().trim().min(1),entries:e.array(x)});function pt(e){if(e!==void 0&&!n.isAbsolute(e))throw Error(`projectDir must be an absolute path, got: ${e}`)}var mt=class extends l{accountRegistry;runtimeRegistry;latestSnapshots=new Map;activeIdentities=new Map;constructor(e=a,t=new he,n=new Je(e)){super(e),this.accountRegistry=t,this.runtimeRegistry=n}async onInit(){await this.runtimeRegistry.loadFromStorage(),this.registerHandler(b.account.observe,e=>this.handleAccountObserve(e)),this.registerHandler(b.usage.ingest,e=>this.handleUsageIngest(e)),this.registerHandler(b.scan,async e=>{let t=await this.scanClients(e.payload.targets);e.setResult({results:t})}),this.registerHandler(b.runtime.observe,e=>this.handleRuntimeObserve(e)),this.registerHandler(b.wiring.list,async e=>{let t=await this.listWirings(e.payload);e.setResult({results:t})}),this.registerHandler(b.account.activate,e=>{this.activeIdentities.set(e.payload.clientId,{clientAccountId:e.payload.clientAccountId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),e.setResult({accepted:!0})}),this.registerHandler(b.account.getActive,e=>{let t=this.activeIdentities.get(e.payload.clientId);e.setResult({identity:t??null})})}onDestroy(){this.latestSnapshots.clear(),this.activeIdentities.clear(),this.accountRegistry.clear(),this.runtimeRegistry.clear()}getLatestSnapshot(e){return this.latestSnapshots.get(e)}async handleAccountObserve(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),n=this.latestSnapshots.get(t.clientAccountId),r=_t(this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds)??n,t.displayLabel);r&&this.latestSnapshots.set(t.clientAccountId,r),r&&(t.mergedAccountIds.length>0||r!==n)&&await this.bus.emit(b.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,displayLabel:t.displayLabel})}async handleUsageIngest(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.account.identifiers,displayLabel:e.payload.account.displayLabel});this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds);let n=ht(t.clientAccountId,e.payload,t.displayLabel),r=_t(gt(this.latestSnapshots.get(t.clientAccountId),n),t.displayLabel);this.latestSnapshots.set(t.clientAccountId,r),await this.bus.emit(b.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,snapshot:r})}async handleRuntimeObserve(e){let{payload:t}=e;if(t.supervisorSessionId===void 0&&t.pid===void 0&&t.adapterSessionId===void 0)throw Error(`client.runtime.observe: at least one hard-evidence field is required (supervisorSessionId, pid, or adapterSessionId)`);let{record:n,...r}=await this.runtimeRegistry.upsertRuntime(t);(r.created||r.promoted)&&await this.bus.emit(b.runtime.started,{clientRuntimeId:n.clientRuntimeId,clientId:n.clientId,status:n.status,source:t.source,observedAt:t.observedAt,supervisorSessionId:n.supervisorSessionId,pid:n.pid,parentPid:n.parentPid,adapterSessionId:n.adapterSessionId,sessionId:n.sessionId,cwd:n.cwd,argv:n.argv,metadata:n.metadata}),e.setResult({clientRuntimeId:r.clientRuntimeId,created:r.created,promoted:r.promoted})}async scanClients(e){let t=e??await this.listScannableStoredClients();if(t.length===0)return[];let n=Array.from(new Set(t.map(e=>e.binaryName))),{results:r}=await this.bus.request(ce.scan,{binaries:n}),i=new Map(r.map(e=>[e.binary,e]));return t.map(e=>{let t=i.get(e.binaryName),n=t?.found??!1,r=t?.version;return{clientId:e.clientId,found:n,version:r,warningMessage:yt(n,r,e.supportedVersions)}})}async listScannableStoredClients(){let{clients:e}=await this.bus.request(le.list,{});return e.filter(vt).map(e=>({clientId:e.id,binaryName:e.binary.name,supportedVersions:e.binary.supportedVersions}))}async listWirings(e){pt(e.projectDir);let{clients:t}=await this.bus.request(le.list,{}),n=e.clientId===void 0?void 0:U(e.clientId,`listWirings`),r=t.filter(e=>e.enabled).filter(e=>n===void 0||e.id===n),i=await Promise.allSettled(r.map(async t=>{let n=st(t.id),r=await this.bus.requestOptional(n,{projectDir:e.projectDir,makaioCommand:e.makaioCommand});return r.handled?{clientId:t.id,entries:r.data.entries}:null}));for(let e=0;e<i.length;e++){let t=i[e];if(t.status===`rejected`){let n=t.reason instanceof Error?t.reason.message:String(t.reason);console.warn(`[ClientRuntimeService] wiring.list for ${r[e].id} failed: ${n}`)}}return i.filter(e=>e.status===`fulfilled`).map(e=>e.value).filter(e=>e!==null)}consolidateMergedSnapshots(e,t){let n=this.latestSnapshots.get(e),r=!1;for(let i of t){if(i===e)continue;let t=this.latestSnapshots.get(i);t&&(n===void 0||t.observedAt>n.observedAt)&&(n={...t,clientAccountId:e},r=!0),this.latestSnapshots.delete(i)}return n&&this.latestSnapshots.set(e,n),r?n:void 0}};function ht(e,t,n){return{clientAccountId:e,clientId:t.clientId,observedAt:t.observedAt,source:t.source,displayLabel:n,usage:{windows:t.usage.windows.map(e=>({...e}))},metadata:t.metadata?{...t.metadata}:void 0}}function gt(e,t){return e&&e.observedAt>t.observedAt?e:t}function _t(e,t){return!e||t===void 0||e.displayLabel===t?e:{...e,displayLabel:t}}function vt(e){return e.enabled&&e.binary!==void 0}function yt(e,t,n){if(e&&t!==void 0&&t!==`unknown`&&n!==void 0&&!c(t,n))return`Unsupported version: requires ${n}`}var bt=class extends l{constructor(e=a){super(e)}onInit(){this.registerHandler(b.config.prime,async e=>{e.setResult(await w(this.bus,e.payload))})}};const W=ie,G=e.string().trim().min(1),xt=i(`client-profile:storage`,{get:{request:e.object({clientId:G,name:y}),response:e.object({record:W.nullable()})},getById:{request:e.object({id:G}),response:e.object({record:W.nullable()})},list:{request:e.object({clientId:G}),response:e.object({records:e.array(W)})},set:{request:W,response:e.object({success:e.boolean()})},delete:{request:e.object({clientId:G,name:y}),response:e.object({success:e.boolean()})},clearDefault:{request:e.object({clientId:G}),response:e.object({success:e.boolean()})},setDefault:{request:e.object({clientId:G,name:y}),response:e.object({record:W.nullable()})}}),K=xt.subjects;function St(e,t,r){let i=n.resolve(e),a=n.resolve(t),o=n.relative(i,a);if(o!==``&&!o.startsWith(`..`)&&!n.isAbsolute(o))return a;throw Error(`${r} refused to access path outside client profile root`)}var Ct=class extends l{clientsBasePath;constructor(e,t){super(e),this.clientsBasePath=t}async onInit(){this.registerCreateHandler(),this.registerListHandler(),this.registerGetHandler(),this.registerUpdateHandler(),this.registerDeleteHandler(),this.registerSetDefaultHandler()}registerCreateHandler(){this.registerHandler(b.profile.create,async e=>{let i=U(e.payload.clientId,`profile.create`),{name:a,description:o}=e.payload;if((await this.bus.request(K.get,{clientId:i,name:a})).record!==null)throw Error(`Profile '${a}' already exists for client '${i}'`);let s=n.join(this.clientsBasePath,i,`profiles`),c=St(s,n.join(s,a),`profile.create`);await t.mkdir(c,{recursive:!0});try{await w(this.bus,{clientId:i,configDir:c,phase:`profile-create`});let t=Date.now(),n={id:r(),clientId:i,name:a,description:o??null,configDir:c,isDefault:!1,createdAt:t,updatedAt:t};await this.bus.request(K.set,n),e.setResult({profile:n})}catch(e){throw await t.rm(c,{recursive:!0,force:!0}),e}})}registerListHandler(){this.registerHandler(b.profile.list,async e=>{let t=U(e.payload.clientId,`profile.list`),n=await this.bus.request(K.list,{clientId:t});e.setResult({profiles:n.records})})}registerGetHandler(){this.registerHandler(b.profile.get,async e=>{let t=U(e.payload.clientId,`profile.get`),n=await this.bus.request(K.get,{clientId:t,name:e.payload.name});e.setResult({profile:n.record})})}registerUpdateHandler(){this.registerHandler(b.profile.update,async e=>{let t=U(e.payload.clientId,`profile.update`),{name:n,description:r}=e.payload,i=await this.bus.request(K.get,{clientId:t,name:n});if(i.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);let a={...i.record,description:r===void 0?i.record.description:r,updatedAt:Date.now()};await this.bus.request(K.set,a),e.setResult({profile:a})})}registerDeleteHandler(){this.registerHandler(b.profile.delete,async e=>{let r=U(e.payload.clientId,`profile.delete`),{name:i}=e.payload,a=await this.bus.request(K.get,{clientId:r,name:i});a.record!==null&&(St(n.join(this.clientsBasePath,r,`profiles`),a.record.configDir,`profile.delete`),await t.rm(a.record.configDir,{recursive:!0,force:!0}));let o=await this.bus.request(K.delete,{clientId:r,name:i});e.setResult({success:o.success})})}registerSetDefaultHandler(){this.registerHandler(b.profile.setDefault,async e=>{let t=U(e.payload.clientId,`profile.setDefault`),{name:n}=e.payload,r=await this.bus.request(K.setDefault,{clientId:t,name:n});if(r.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);e.setResult({profile:r.record})})}};function wt(e){return{subject:`sessionConfig.setup`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}function Tt(e){return{subject:`sessionConfig.destroy`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}const Et=()=>Date.now();function Dt(){let e=S.platform();if(e===`darwin`||e===`linux`||e===`win32`)return e;throw Error(`client.sessionConfig does not support platform '${e}'`)}function Ot(e,t,r){let i=se.safeParse(t);if(!i.success)throw Error(`${r} received an unsafe session ID`);let a=n.resolve(e),o=n.resolve(a,i.data),s=n.relative(a,o);if(s===``||!s.startsWith(`..`)&&!n.isAbsolute(s))return o;throw Error(`${r} refused to access path outside client sessions root`)}var kt=class extends l{clientsBasePath;getNow;constructor(e,t,n=Et){super(e),this.clientsBasePath=t,this.getNow=n}async onInit(){this.registerHandler(b.sessionConfig.create,async e=>{let{clientId:n,sessionId:r,profileName:i,baseConfigDir:a,projectDir:o,configInheritance:s=`full`}=e.payload,c=U(n,`sessionConfig.create`),l=this.resolveClientSessionDir(c,r,`sessionConfig.create`);await t.mkdir(l,{recursive:!0});try{let t=await this.resolveBaseConfigDir(c,l,i,a),n=wt(c),r=await this.bus.requestOptional(n,{sessionDir:l,baseConfigDir:t,projectDir:o,platform:Dt(),configInheritance:s}),u=r.handled?r.data.env??{}:{};await w(this.bus,{clientId:c,configDir:l,phase:`session-create`,projectDir:o}),e.setResult({sessionDir:l,env:u})}catch(e){throw await t.rm(l,{recursive:!0,force:!0}),e}}),this.registerHandler(b.sessionConfig.destroy,async e=>{let{clientId:t,sessionId:n}=e.payload,r=U(t,`sessionConfig.destroy`),i=this.resolveClientSessionDir(r,n,`sessionConfig.destroy`);await this.destroyClientSessionDir(r,i),e.setResult({success:!0})}),this.registerHandler(b.sessionConfig.cleanup,async e=>{let{clientId:t}=e.payload,n=t===void 0?void 0:U(t,`sessionConfig.cleanup`),r=await this.cleanupOrphanedDirs(n);e.setResult({removed:r})}),this.registerHandler(ue.closed,async e=>{await this.destroySessionDirsForSessionId(e.payload.sessionId)}),await this.cleanupOrphanedDirs()}async resolveBaseConfigDir(e,t,n,r){if(r!==void 0)return r;if(n!==void 0){let t=await this.bus.request(K.get,{clientId:e,name:n});if(t.record!==null)return t.record.configDir;throw Error(`Profile '${n}' not found for client '${e}'`)}let i=(await this.bus.request(K.list,{clientId:e})).records.find(e=>e.isDefault);return i?i.configDir:t}async cleanupOrphanedDirs(e){let r=[],i=this.getNow(),a=e===void 0?await this.listClientIds():[e];return await Promise.all(a.map(async e=>{let a=n.join(this.clientsBasePath,e,`sessions`),o=await t.readdir(a).catch(()=>[]);await Promise.all(o.map(async n=>{try{let o=Ot(a,n,`sessionConfig.cleanup`),s=await t.stat(o),c=s.birthtimeMs>0?s.birthtimeMs:s.ctimeMs;s.isDirectory()&&i-c>36e5&&!await this.isActiveSession(n)&&(await this.destroyClientSessionDir(e,o),r.push(o))}catch{}}))})),r}async destroySessionDirsForSessionId(e){if(!se.safeParse(e).success)return;let t=await this.listClientIds();await Promise.all(t.map(async t=>{let n=this.resolveClientSessionDir(t,e,`session.closed`);await this.destroyClientSessionDir(t,n)}))}async destroyClientSessionDir(e,n){await t.stat(n).then(e=>e.isDirectory(),e=>{let t=e.code;if(t===`ENOENT`||t===`ENOTDIR`)return!1;throw e})&&(await this.bus.requestOptional(Tt(e),{sessionDir:n,platform:Dt()}),await t.rm(n,{recursive:!0,force:!0}))}async isActiveSession(e){let t=await this.bus.requestOptional(ue.get,{sessionId:e});return t.handled&&t.data.session?.status===`active`}resolveClientSessionDir(e,t,r){return Ot(n.join(this.clientsBasePath,e,`sessions`),t,r)}async listClientIds(){return(await t.readdir(this.clientsBasePath,{withFileTypes:!0}).catch(()=>[])).filter(e=>e.isDirectory()).map(e=>e.name)}};const At=new Set([`hook.received`,`hook.handle`]);function jt(e,t){return a.registerNamespace(i(`client:${e}`,{"hook.received":Ye,"hook.handle":{request:Ye,response:$e},...t})).subjects}function Mt(e,t){let n=Object.keys(t).filter(e=>At.has(e));if(n.length===0)return;let r=n.join(`, `);throw Error([`[createClientNamespace] additionalSchemas for client:${e}`,`cannot override reserved shared hook subjects: ${r}`].join(` `))}function Nt(e,t){let n=e;for(let e of t.split(`.`)){if(typeof n!=`object`||!n||!(e in n))return!1;n=n[e]}return!0}function Pt(e,t,n){let r=Object.keys(n).filter(e=>!Nt(t,e));if(r.length!==0)throw Error(`[createClientNamespace] client:${e} was already registered without required subjects: ${r.join(`, `)}`)}function Ft(e,t){let n=U(e,`createClientNamespace`),r=t??{};Mt(n,r);let i=jt(n,r);return Pt(n,i,r),{namespaceDomain:`client:${n}`,subjects:i}}const q=f(`client_runtimes`,{id:p(`id`).primaryKey(),clientId:p(`client_id`).notNull(),status:p(`status`).notNull(),supervisorSessionId:p(`supervisor_session_id`),pid:d(`pid`),parentPid:d(`parent_pid`),adapterSessionId:p(`adapter_session_id`),sessionId:p(`session_id`),cwd:p(`cwd`),argv:p(`argv`,{mode:`json`}).$type(),metadata:p(`metadata`,{mode:`json`}).$type(),observedAt:d(`observed_at`).notNull(),createdAt:d(`created_at`).notNull(),updatedAt:d(`updated_at`).notNull()},e=>[u(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),u(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),u(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)]),It=new Set(R);function Lt(e){if(!It.has(e.status))throw Error(`Unknown ClientRuntimeStatus in DB: '${e.status}'`);return{clientRuntimeId:e.id,clientId:e.clientId,status:e.status,supervisorSessionId:e.supervisorSessionId??void 0,pid:e.pid??void 0,parentPid:e.parentPid??void 0,adapterSessionId:e.adapterSessionId??void 0,sessionId:e.sessionId??void 0,cwd:e.cwd??void 0,argv:e.argv??void 0,metadata:e.metadata??void 0,observedAt:e.observedAt,createdAt:e.createdAt,updatedAt:e.updatedAt}}function Rt(e,t,n){let r=e.on(V.upsert,async e=>{let n=e.payload,r={clientId:n.clientId,status:n.status,supervisorSessionId:n.supervisorSessionId??null,pid:n.pid??null,parentPid:n.parentPid??null,adapterSessionId:n.adapterSessionId??null,sessionId:n.sessionId??null,cwd:n.cwd??null,argv:n.argv??null,metadata:n.metadata??null,observedAt:n.observedAt,updatedAt:n.updatedAt};await t.insert(q).values({id:n.clientRuntimeId,createdAt:n.createdAt,...r}).onConflictDoUpdate({target:q.id,set:r,setWhere:ee(te`excluded.updated_at`,q.updatedAt)}),e.setResult({success:!0})}),i=e.on(V.loadAll,async e=>{let n=await t.select().from(q);e.setResult({records:n.map(Lt)})});return()=>{r(),i()}}const J=f(`client_binary_versions`,{id:p(`id`).primaryKey(),clientId:p(`client_id`).notNull(),version:p(`version`).notNull(),installPath:p(`install_path`).notNull(),installedAt:d(`installed_at`).notNull(),createdAt:d(`created_at`).notNull()},e=>[m(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)]),Y=f(`client_binary_state`,{clientId:p(`client_id`).primaryKey(),activeVersion:p(`active_version`),updatedAt:d(`updated_at`).notNull()});function X(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}function Z(e){return{clientId:e.clientId,activeVersion:e.activeVersion??null,updatedAt:e.updatedAt}}function zt(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}async function Bt(e,t){await e.insert(J).values(zt(t)).onConflictDoNothing({target:[J.clientId,J.version]})}function Vt(e,t,n){return{clientId:e,activeVersion:t,updatedAt:n}}async function Ht(e,t,n,r){await e.insert(Y).values(Vt(t,n,r)).onConflictDoUpdate({target:Y.clientId,set:{activeVersion:n,updatedAt:r}})}async function Ut(e,t){await Bt(e,t)}async function Wt(e,t,n,r){return v(e,async e=>{let[i]=await e.select().from(Y).where(_(Y.clientId,t.clientId)).limit(1),a=i?.activeVersion??null;return await Bt(e,t),n?(await Ht(e,t.clientId,t.version,r),{previousActiveVersion:a,activeVersion:t.version}):{previousActiveVersion:a,activeVersion:a}})}async function Gt(e,t){return v(e,async e=>{let[n]=await e.select().from(Y).where(_(Y.clientId,t)).limit(1),r=await e.select().from(J).where(_(J.clientId,t));return{state:n?Z(n):null,versions:r.map(X)}})}async function Kt(e){return v(e,async e=>{let t=await e.select().from(Y),n=await e.select().from(J);return{states:t.map(Z),versions:n.map(X)}})}async function qt(e,t){let n={clientId:t.clientId,activeVersion:t.activeVersion??null,updatedAt:t.updatedAt};await e.insert(Y).values(n).onConflictDoUpdate({target:Y.clientId,set:n})}async function Jt(e,t,n,r){return v(e,async e=>{let[i]=await e.select().from(Y).where(_(Y.clientId,t)).limit(1),a=i?.activeVersion??null;return await Ht(e,t,n,r),{previousActiveVersion:a,activeVersion:n}})}async function Yt(e,t,n,r){return v(e,async e=>{let[i]=await e.select().from(Y).where(_(Y.clientId,t)).limit(1),a=i?.activeVersion??null;if(!ne(await e.delete(J).where(g(_(J.clientId,t),_(J.version,n)))))return{removedVersion:null,previousActiveVersion:a,activeVersion:a};await e.update(Y).set({activeVersion:null,updatedAt:r}).where(g(_(Y.clientId,t),_(Y.activeVersion,n)));let[o]=await e.select().from(Y).where(_(Y.clientId,t)).limit(1);return{removedVersion:n,previousActiveVersion:a,activeVersion:o?.activeVersion??null}})}function Xt(e,t,n){let r=[e.on(M.insertVersion,async e=>{await Ut(t,e.payload),e.setResult({success:!0})}),e.on(M.recordInstalledVersion,async e=>{let{versionRecord:n,makeActive:r,updatedAt:i}=e.payload,a=await Wt(t,n,r,i);e.setResult(a)}),e.on(M.listVersions,async e=>{let n=await t.select().from(J).where(_(J.clientId,e.payload.clientId));e.setResult({versions:n.map(X)})}),e.on(M.getSnapshot,async e=>{let{state:n,versions:r}=await Gt(t,e.payload.clientId);e.setResult({state:n,versions:r})}),e.on(M.loadAllVersions,async e=>{let n=await t.select().from(J);e.setResult({versions:n.map(X)})}),e.on(M.upsertState,async e=>{await qt(t,e.payload),e.setResult({success:!0})}),e.on(M.setActiveVersion,async e=>{let{clientId:n,activeVersion:r,updatedAt:i}=e.payload,a=await Jt(t,n,r,i);e.setResult(a)}),e.on(M.getState,async e=>{let[n]=await t.select().from(Y).where(_(Y.clientId,e.payload.clientId)).limit(1);e.setResult({state:n?Z(n):null})}),e.on(M.loadAllState,async e=>{let n=await t.select().from(Y);e.setResult({states:n.map(Z)})}),e.on(M.loadSnapshot,async e=>{let{states:n,versions:r}=await Kt(t);e.setResult({states:n,versions:r})}),e.on(M.removeVersionAndClearActive,async e=>{let{clientId:n,version:r,updatedAt:i}=e.payload,a=await Yt(t,n,r,i);e.setResult(a)})];return()=>{for(let e of r)e()}}const Q=f(`client_profiles`,{id:p(`id`).primaryKey(),clientId:p(`client_id`).notNull(),name:p(`name`).notNull(),description:p(`description`),configDir:p(`config_dir`).notNull(),isDefault:d(`is_default`,{mode:`boolean`}).notNull().default(!1),createdAt:d(`created_at`).notNull(),updatedAt:d(`updated_at`).notNull()},e=>[h(`uq_client_profiles_client_name`).on(e.clientId,e.name),h(`uq_client_profiles_default`).on(e.clientId).where(te`${e.isDefault} = 1`)]);function $(e){return{id:e.id,clientId:e.clientId,name:e.name,description:e.description??null,configDir:e.configDir,isDefault:e.isDefault,createdAt:e.createdAt,updatedAt:e.updatedAt}}async function Zt(e,t,n){let r=Date.now();return v(e,async e=>{let[i]=await e.select().from(Q).where(g(_(Q.clientId,t),_(Q.name,n))).limit(1);if(i===void 0)return null;await e.update(Q).set({isDefault:!1,updatedAt:r}).where(g(_(Q.clientId,t),_(Q.isDefault,!0))),await e.update(Q).set({isDefault:!0,updatedAt:r}).where(g(_(Q.clientId,t),_(Q.name,n)));let[a]=await e.select().from(Q).where(g(_(Q.clientId,t),_(Q.name,n))).limit(1);return a===void 0?null:$(a)})}function Qt(e,t,n){let r=[e.on(K.get,async e=>{let{clientId:n,name:r}=e.payload,[i]=await t.select().from(Q).where(g(_(Q.clientId,n),_(Q.name,r))).limit(1);e.setResult({record:i?$(i):null})}),e.on(K.getById,async e=>{let[n]=await t.select().from(Q).where(_(Q.id,e.payload.id)).limit(1);e.setResult({record:n?$(n):null})}),e.on(K.list,async e=>{let n=await t.select().from(Q).where(_(Q.clientId,e.payload.clientId));e.setResult({records:n.map($)})}),e.on(K.set,async e=>{let n=e.payload,r={id:n.id,clientId:n.clientId,name:n.name,description:n.description??null,configDir:n.configDir,isDefault:n.isDefault,createdAt:n.createdAt,updatedAt:n.updatedAt};await t.insert(Q).values(r).onConflictDoUpdate({target:Q.id,set:{name:n.name,description:n.description??null,configDir:n.configDir,isDefault:n.isDefault,updatedAt:n.updatedAt}}),e.setResult({success:!0})}),e.on(K.delete,async e=>{let{clientId:n,name:r}=e.payload,i=await t.delete(Q).where(g(_(Q.clientId,n),_(Q.name,r)));e.setResult({success:ne(i)})}),e.on(K.clearDefault,async e=>{await t.update(Q).set({isDefault:!1,updatedAt:Date.now()}).where(g(_(Q.clientId,e.payload.clientId),_(Q.isDefault,!0))),e.setResult({success:!0})}),e.on(K.setDefault,async e=>{let{clientId:n,name:r}=e.payload,i=await Zt(t,n,r);e.setResult({record:i})})];return()=>{for(let e of r)e()}}var $t=class{runtimeService;binaryManager;configPrimeService;profileService;sessionConfigService;constructor(e,t,n,r,i){this.runtimeService=e,this.binaryManager=t,this.configPrimeService=n,this.profileService=r,this.sessionConfigService=i}async init(){let e=(await Promise.allSettled([this.runtimeService.init(),this.binaryManager.init(),this.configPrimeService.init(),this.profileService.init(),this.sessionConfigService.init()])).filter(e=>e.status===`rejected`);if(e.length>0){for(let t=1;t<e.length;t++)console.warn(`[ClientsCoreService] Multiple init failures, secondary:`,e[t].reason);throw e[0].reason}}async destroy(){let e=(await Promise.allSettled([this.runtimeService.destroy(),this.binaryManager.destroy(),this.configPrimeService.destroy(),this.profileService.destroy(),this.sessionConfigService.destroy()])).filter(e=>e.status===`rejected`);for(let t of e)console.warn(`[ClientsCoreService] destroy failure:`,t.reason)}};const en=o(`makaio.clients-core`);function tn(e){let t=[],n=()=>{for(let e of[...t].reverse())e()};try{for(let n of e)t.push(n())}catch(e){throw n(),e}return n}function nn(e={}){let{definitions:t=[],strategyDependencies:r,postInstallHandlers:i}=e,a=[...t];return{name:`makaio.clients-core`,displayName:`Clients Core`,version:`0.1.0`,critical:!0,namespaces:[j,B,xt],storage:{registerHandlers:re((e,t,n)=>tn([()=>Rt(e,t,n),()=>Xt(e,t,n),()=>Qt(e,t,n)]))},create:e=>{let t=new N(a),o=n.join(e.makaioHome,`clients`),s=new Ue(e.bus,{basePath:n.join(e.makaioHome,`binaries`),configBasePath:o,postInstallHandlers:i},t,r),c=new Ct(e.bus,o),l=new kt(e.bus,o);return new $t(new mt(e.bus),s,new bt(e.bus),c,l)}}}async function rn(e){let t=await a.requestOptional(b.resolveBinary,{clientId:e});return t.handled?t.data:void 0}function an(e,t,n){return[...n??[],e,...t].map(cn).join(` `)}function on(e,t,n,r,i){return an(e,[...i??[],...t.split(` `),n],r)}function sn(e){return e.runtimeCapabilities.hookEvents.filter(e=>e.frameworkSubject!==void 0).map(e=>({eventName:e.name,mode:e.mode}))}function cn(e){return/^[A-Za-z0-9_@%+=:,./-]+$/.test(e)?e:`'${e.replaceAll(`'`,`'\\''`)}'`}export{ct as AbsolutePathSchema,me as BinaryNotFoundError,R as CLIENT_RUNTIME_STATUSES,he as ClientAccountRegistry,Be as ClientBinaryJobRunner,Ue as ClientBinaryManager,k as ClientBinaryStateRecordSchema,j as ClientBinaryStorageNamespace,M as ClientBinaryStorageSubjects,O as ClientBinaryVersionRecordSchema,we as ClientBinaryVersionResolver,bt as ClientConfigPrimeService,N as ClientDefinitionRegistry,$e as ClientHookHandleResponseSchema,W as ClientProfileRecordSchema,Ct as ClientProfileService,xt as ClientProfileStorageNamespace,K as ClientProfileStorageSubjects,Je as ClientRuntimeRegistry,mt as ClientRuntimeService,B as ClientRuntimeStorageNamespace,V as ClientRuntimeStorageSubjects,kt as ClientSessionConfigService,ae as ClientSubjects,ft as ClientWiringAggregatedResultSchema,ut as ClientWiringApplyResponseSchema,x as ClientWiringEntrySchema,lt as ClientWiringListResponseSchema,dt as ClientWiringRemoveResponseSchema,$t as ClientsCoreService,en as ClientsCoreToken,Qe as DEFAULT_HOOK_HANDLE_TIMEOUT_MS,Ye as RawClientHookPayloadSchema,z as RuntimeRecordSchema,pt as assertAbsoluteProjectDir,de as atomicModifyFile,an as buildClientCommand,rt as buildClientSessionBase,on as buildHookCommand,U as canonicalizeClientId,Ft as createClientNamespace,st as createClientWiringListSubjectDef,ot as createClientWiringSubjectDef,nn as createClientsCorePackage,et as createRawClientHookHandleSubject,Ze as createRawClientHookReceivedSubject,sn as deriveSessionEventDescriptors,it as emitBestEffort,E as isPathWithinBase,nt as pickNonEmptyString,tt as pickNonEmptyStringValue,tn as registerStorageHandlersWithRollback,D as resolveAndValidateBasePath,rn as resolveClientBinary};

package/dist/{clients-namespace-UHj5wt-l.d.mts → clients-namespace-GmSJpBUV.d.mts}

@@ -2,7 +2,7 @@ import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import * as _$_makaio_storage_core0 from "@makaio/framework/storage";
 
-//#region packages/services/core/src/settings/storage/clients-namespace.d.ts
+//#region services/core/src/settings/storage/clients-namespace.d.ts
 /**
  * Schema for a client record returned from storage.
  *
@@ -29,8 +29,8 @@ declare const ClientRecordSchema: z.ZodObject<{
     }, z.core.$strip>>>;
   }, z.core.$strip>>;
   defaultApprovalPolicy: z.ZodEnum<{
-    "always-ask": "always-ask";
     reject: "reject";
+    "always-ask": "always-ask";
     "full-access": "full-access";
   }>;
   logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -84,8 +84,8 @@ declare const ClientStorageNamespace: _$_makaio_storage_core0.StorageNamespaceDe
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -127,8 +127,8 @@ declare const ClientStorageNamespace: _$_makaio_storage_core0.StorageNamespaceDe
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -172,8 +172,8 @@ declare const ClientStorageNamespace: _$_makaio_storage_core0.StorageNamespaceDe
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -219,8 +219,8 @@ declare const ClientStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -262,8 +262,8 @@ declare const ClientStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -307,8 +307,8 @@ declare const ClientStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0
           }, z.core.$strip>>>;
         }, z.core.$strip>>;
         defaultApprovalPolicy: z.ZodEnum<{
-          "always-ask": "always-ask";
           reject: "reject";
+          "always-ask": "always-ask";
           "full-access": "full-access";
         }>;
         logSources: z.ZodOptional<z.ZodArray<z.ZodObject<{

package/dist/{config-namespace-ChZOpi1W.d.mts → config-namespace-CPY9YsR8.d.mts}

@@ -3,7 +3,7 @@ import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import * as _$zod_v4_core0 from "zod/v4/core";
 
-//#region packages/contracts/src/config/config-schema.d.ts
+//#region core/contracts/src/config/config-schema.d.ts
 /**
  * Bootstrap config schema for Makaio runtime configuration.
  *
@@ -65,7 +65,7 @@ type Config = z.infer<typeof ConfigSchema>;
  */
 type RelayConfig = NonNullable<Config['relay']>;
 //#endregion
-//#region packages/contracts/src/model/schemas.d.ts
+//#region core/contracts/src/model/schemas.d.ts
 /**
  * Standardized reasoning levels used across the Makaio Framework.
  *
@@ -319,7 +319,7 @@ type DiscoveredAIModel = Omit<AIModel, 'labId'> & {
   labId?: string;
 };
 //#endregion
-//#region packages/contracts/src/config/config-subjects.d.ts
+//#region core/contracts/src/config/config-subjects.d.ts
 /**
  * Config domain schemas.
  *
@@ -445,7 +445,7 @@ type ConfigUpdateRequest = z.infer<typeof ConfigSchemas.update.request>;
  */
 type ConfigUpdateResponse = z.infer<typeof ConfigSchemas.update.response>;
 //#endregion
-//#region packages/contracts/src/config/config-namespace.d.ts
+//#region core/contracts/src/config/config-namespace.d.ts
 /**
  * Config namespace definition.
  * Defines the `config` subjects for explicit registration by composition roots.

package/dist/contracts/adapter/index.d.mts

@@ -1,3 +1,3 @@
-import { C as AdapterRuntimeOptionsSchema, D as AdapterNamespace, E as AdapterSessionStatusSchema, O as AdapterSubjects, S as AdapterRuntimeOptions, T as AdapterSessionStatus, _ as RehydrateAgentResponse, a as AgentSelection, b as StartAgentResponse, c as AgentSelectionKindMap, d as SessionDiscoveredSchema, f as SessionLinked, g as RehydrateAgentRequest, h as SessionUsageSchema, i as AdapterSelectionSchema, l as AgentSelectionSchema, m as SessionUsage, n as ProviderContextSchema, o as AgentSelectionBase, p as SessionLinkedSchema, r as AdapterSelection, s as AgentSelectionBaseSchema, t as ProviderContext, u as SessionDiscovered, v as RehydrateAgentSchema, w as AdapterSchemas, x as StartAgentSchema, y as StartAgentRequest } from "../../index-DQWMu5fS.mjs";
-import { a as ROOT_SESSION_LINEAGE_KIND, c as SUBAGENT_SESSION_LINEAGE_KIND, d as SessionLineageKindSchema, f as SessionLineageSchema, i as ForkSessionLineageSchema, l as SessionLineage, n as CompressSessionLineageSchema, o as RootSessionLineageSchema, p as SubagentSessionLineageSchema, r as FORK_SESSION_LINEAGE_KIND, s as SESSION_LINEAGE_KINDS, t as COMPRESS_SESSION_LINEAGE_KIND, u as SessionLineageKind } from "../../session-lineage-B0cpHfuc.mjs";
-export { AdapterNamespace, AdapterRuntimeOptions, AdapterRuntimeOptionsSchema, AdapterSchemas, AdapterSelection, AdapterSelectionSchema, AdapterSessionStatus, AdapterSessionStatusSchema, AdapterSubjects, AgentSelection, AgentSelectionBase, AgentSelectionBaseSchema, AgentSelectionKindMap, AgentSelectionSchema, COMPRESS_SESSION_LINEAGE_KIND, CompressSessionLineageSchema, FORK_SESSION_LINEAGE_KIND, ForkSessionLineageSchema, ProviderContext, ProviderContextSchema, ROOT_SESSION_LINEAGE_KIND, RehydrateAgentRequest, RehydrateAgentResponse, RehydrateAgentSchema, RootSessionLineageSchema, SESSION_LINEAGE_KINDS, SUBAGENT_SESSION_LINEAGE_KIND, SessionDiscovered, SessionDiscoveredSchema, SessionLineage, SessionLineageKind, SessionLineageKindSchema, SessionLineageSchema, SessionLinked, SessionLinkedSchema, SessionUsage, SessionUsageSchema, StartAgentRequest, StartAgentResponse, StartAgentSchema, SubagentSessionLineageSchema };
+import { C as AdapterNamespace, S as AdapterSchemas, _ as StartAgentRequest, a as AgentSelection, b as AdapterRuntimeOptions, c as AgentSelectionKindMap, d as SessionDiscoveredSchema, f as SessionUsage, g as RehydrateAgentSchema, h as RehydrateAgentResponse, i as AdapterSelectionSchema, l as AgentSelectionSchema, m as RehydrateAgentRequest, n as ProviderContextSchema, o as AgentSelectionBase, p as SessionUsageSchema, r as AdapterSelection, s as AgentSelectionBaseSchema, t as ProviderContext, u as SessionDiscovered, v as StartAgentResponse, w as AdapterSubjects, x as AdapterRuntimeOptionsSchema, y as StartAgentSchema } from "../../index-Caig6TeF.mjs";
+import { a as ROOT_SESSION_LINEAGE_KIND, c as SUBAGENT_SESSION_LINEAGE_KIND, d as SessionLineageKindSchema, f as SessionLineageSchema, i as ForkSessionLineageSchema, l as SessionLineage, n as CompressSessionLineageSchema, o as RootSessionLineageSchema, p as SubagentSessionLineageSchema, r as FORK_SESSION_LINEAGE_KIND, s as SESSION_LINEAGE_KINDS, t as COMPRESS_SESSION_LINEAGE_KIND, u as SessionLineageKind } from "../../session-lineage-CRsc9g1x.mjs";
+export { AdapterNamespace, AdapterRuntimeOptions, AdapterRuntimeOptionsSchema, AdapterSchemas, AdapterSelection, AdapterSelectionSchema, AdapterSubjects, AgentSelection, AgentSelectionBase, AgentSelectionBaseSchema, AgentSelectionKindMap, AgentSelectionSchema, COMPRESS_SESSION_LINEAGE_KIND, CompressSessionLineageSchema, FORK_SESSION_LINEAGE_KIND, ForkSessionLineageSchema, ProviderContext, ProviderContextSchema, ROOT_SESSION_LINEAGE_KIND, RehydrateAgentRequest, RehydrateAgentResponse, RehydrateAgentSchema, RootSessionLineageSchema, SESSION_LINEAGE_KINDS, SUBAGENT_SESSION_LINEAGE_KIND, SessionDiscovered, SessionDiscoveredSchema, SessionLineage, SessionLineageKind, SessionLineageKindSchema, SessionLineageSchema, SessionUsage, SessionUsageSchema, StartAgentRequest, StartAgentResponse, StartAgentSchema, SubagentSessionLineageSchema };

package/dist/contracts/adapter/index.mjs

@@ -1 +1 @@
-import{ct as e,f as t,g as n,i as r,lt as i,n as a,r as o,st as s,ut as c,x as l,xt as u}from"../../schemas-Bn8aqDIE.mjs";import{COMPRESS_SESSION_LINEAGE_KIND as d,CompressSessionLineageSchema as f,FORK_SESSION_LINEAGE_KIND as p,ForkSessionLineageSchema as m,ROOT_SESSION_LINEAGE_KIND as h,RootSessionLineageSchema as g,SESSION_LINEAGE_KINDS as _,SUBAGENT_SESSION_LINEAGE_KIND as v,SessionLineageKindSchema as y,SessionLineageSchema as b,SubagentSessionLineageSchema as x}from"./schemas/session-lineage.mjs";import{n as S,r as C,t as w}from"../../adapter-CpF2aK_-.mjs";export{w as AdapterNamespace,u as AdapterRuntimeOptionsSchema,C as AdapterSchemas,e as AdapterSelectionSchema,a as AdapterSessionStatusSchema,S as AdapterSubjects,i as AgentSelectionBaseSchema,c as AgentSelectionSchema,d as COMPRESS_SESSION_LINEAGE_KIND,f as CompressSessionLineageSchema,p as FORK_SESSION_LINEAGE_KIND,m as ForkSessionLineageSchema,s as ProviderContextSchema,h as ROOT_SESSION_LINEAGE_KIND,n as RehydrateAgentSchema,g as RootSessionLineageSchema,_ as SESSION_LINEAGE_KINDS,v as SUBAGENT_SESSION_LINEAGE_KIND,r as SessionDiscoveredSchema,y as SessionLineageKindSchema,b as SessionLineageSchema,o as SessionLinkedSchema,t as SessionUsageSchema,l as StartAgentSchema,x as SubagentSessionLineageSchema};
+import{ct as e,l as t,lt as n,p as r,st as i,t as a,ut as o,v as s,xt as c}from"../../schemas-CaLhkkLn.mjs";import{COMPRESS_SESSION_LINEAGE_KIND as l,CompressSessionLineageSchema as u,FORK_SESSION_LINEAGE_KIND as d,ForkSessionLineageSchema as f,ROOT_SESSION_LINEAGE_KIND as p,RootSessionLineageSchema as m,SESSION_LINEAGE_KINDS as h,SUBAGENT_SESSION_LINEAGE_KIND as g,SessionLineageKindSchema as _,SessionLineageSchema as v,SubagentSessionLineageSchema as y}from"./schemas/session-lineage.mjs";import{n as b,r as x,t as S}from"../../adapter-C1eI-fGV.mjs";export{S as AdapterNamespace,c as AdapterRuntimeOptionsSchema,x as AdapterSchemas,e as AdapterSelectionSchema,b as AdapterSubjects,n as AgentSelectionBaseSchema,o as AgentSelectionSchema,l as COMPRESS_SESSION_LINEAGE_KIND,u as CompressSessionLineageSchema,d as FORK_SESSION_LINEAGE_KIND,f as ForkSessionLineageSchema,i as ProviderContextSchema,p as ROOT_SESSION_LINEAGE_KIND,r as RehydrateAgentSchema,m as RootSessionLineageSchema,h as SESSION_LINEAGE_KINDS,g as SUBAGENT_SESSION_LINEAGE_KIND,a as SessionDiscoveredSchema,_ as SessionLineageKindSchema,v as SessionLineageSchema,t as SessionUsageSchema,s as StartAgentSchema,y as SubagentSessionLineageSchema};

package/dist/contracts/adapter/schemas/session-lineage.d.mts

@@ -1,2 +1,2 @@
-import { a as ROOT_SESSION_LINEAGE_KIND, c as SUBAGENT_SESSION_LINEAGE_KIND, d as SessionLineageKindSchema, f as SessionLineageSchema, i as ForkSessionLineageSchema, l as SessionLineage, n as CompressSessionLineageSchema, o as RootSessionLineageSchema, p as SubagentSessionLineageSchema, r as FORK_SESSION_LINEAGE_KIND, s as SESSION_LINEAGE_KINDS, t as COMPRESS_SESSION_LINEAGE_KIND, u as SessionLineageKind } from "../../../session-lineage-B0cpHfuc.mjs";
+import { a as ROOT_SESSION_LINEAGE_KIND, c as SUBAGENT_SESSION_LINEAGE_KIND, d as SessionLineageKindSchema, f as SessionLineageSchema, i as ForkSessionLineageSchema, l as SessionLineage, n as CompressSessionLineageSchema, o as RootSessionLineageSchema, p as SubagentSessionLineageSchema, r as FORK_SESSION_LINEAGE_KIND, s as SESSION_LINEAGE_KINDS, t as COMPRESS_SESSION_LINEAGE_KIND, u as SessionLineageKind } from "../../../session-lineage-CRsc9g1x.mjs";
 export { COMPRESS_SESSION_LINEAGE_KIND, CompressSessionLineageSchema, FORK_SESSION_LINEAGE_KIND, ForkSessionLineageSchema, ROOT_SESSION_LINEAGE_KIND, RootSessionLineageSchema, SESSION_LINEAGE_KINDS, SUBAGENT_SESSION_LINEAGE_KIND, SessionLineage, SessionLineageKind, SessionLineageKindSchema, SessionLineageSchema, SubagentSessionLineageSchema };

package/dist/contracts/artifact/index.d.mts

@@ -0,0 +1,2 @@
+import { $ as ArtifactObservationSchema, A as ArtifactDraft, B as BeforeArtifactHookRegistration, C as ArtifactStatusChangedPayload, Ct as ConfidenceMetadataSchema, D as ArtifactKindDefinition, Dt as LocalRefSchema, E as ArtifactDataOf, Et as LocalRef, F as ArtifactLifecycleHookRegistration, G as ArtifactCompareRequestSchema, H as ArtifactActor, I as ArtifactLifecycleSemanticEvent, J as ArtifactConflictPolicy, K as ArtifactCompareResponse, L as ArtifactReactionHookContext, M as ArtifactHookFilter, N as ArtifactLifecycleHookDefinition, O as ArtifactOf, Ot as RelationTypeRegistration, P as ArtifactLifecycleHookEvent, Q as ArtifactObservation, R as ArtifactReactionHookRegistration, S as ArtifactSchemas, St as ConfidenceMetadata, T as AnyArtifactKindDefinition, Tt as EvidenceRefSchema, U as ArtifactActorSchema, V as defineArtifactLifecycleHooks, W as ArtifactCompareRequest, X as ArtifactKindRegistration, Y as ArtifactConflictPolicySchema, Z as ArtifactKindRegistrationSchema, _ as ArtifactResolveRequest, _t as ArtifactScopeSchema, a as ArtifactKindListRequest, at as ArtifactRefSchema, b as ArtifactReviseResponse, bt as ConfidenceLevel, c as ArtifactKindRegisterResponse, ct as ArtifactRelationQueryTargetSchema, d as ArtifactQueryResponse, dt as ArtifactRelationTargetSchema, et as ArtifactQueryRequest, f as ArtifactRelationAddedPayload, ft as ArtifactRepresentations, g as ArtifactRelationTypeRegisterResponse, gt as ArtifactScope, h as ArtifactRelationTypeRegisterRequest, ht as ArtifactRevisionSchema, i as ArtifactKindChangedPayload, it as ArtifactRef, j as ArtifactDraftPatch, k as defineArtifactKind, kt as RelationTypeRegistrationSchema, l as ArtifactNamespace, lt as ArtifactRelationSchema, m as ArtifactRelationTypeListResponse, mt as ArtifactRevision, n as ArtifactCreateResponse, nt as ArtifactQueryScope, o as ArtifactKindListResponse, ot as ArtifactRelation, p as ArtifactRelationTypeListRequest, pt as ArtifactRepresentationsSchema, q as ArtifactCompareResponseSchema, r as ArtifactCreatedPayload, rt as ArtifactQueryScopeSchema, s as ArtifactKindRegisterRequest, st as ArtifactRelationQueryTarget, t as ArtifactCreateRequest, tt as ArtifactQueryRequestSchema, u as ArtifactObservationAddedPayload, ut as ArtifactRelationTarget, v as ArtifactResolveResponse, vt as ConfidenceBasis, w as ArtifactSubjects, wt as EvidenceRef, x as ArtifactRevisedPayload, xt as ConfidenceLevelSchema, y as ArtifactReviseRequest, yt as ConfidenceBasisSchema, z as BeforeArtifactHookContext } from "../../index-B3PK4FIn.mjs";
+export { AnyArtifactKindDefinition, ArtifactActor, ArtifactActorSchema, ArtifactCompareRequest, ArtifactCompareRequestSchema, ArtifactCompareResponse, ArtifactCompareResponseSchema, ArtifactConflictPolicy, ArtifactConflictPolicySchema, ArtifactCreateRequest, ArtifactCreateResponse, ArtifactCreatedPayload, ArtifactDataOf, ArtifactDraft, ArtifactDraftPatch, ArtifactHookFilter, ArtifactKindChangedPayload, ArtifactKindDefinition, ArtifactKindListRequest, ArtifactKindListResponse, ArtifactKindRegisterRequest, ArtifactKindRegisterResponse, ArtifactKindRegistration, ArtifactKindRegistrationSchema, ArtifactLifecycleHookDefinition, ArtifactLifecycleHookEvent, ArtifactLifecycleHookRegistration, ArtifactLifecycleSemanticEvent, ArtifactNamespace, ArtifactObservation, ArtifactObservationAddedPayload, ArtifactObservationSchema, ArtifactOf, ArtifactQueryRequest, ArtifactQueryRequestSchema, ArtifactQueryResponse, ArtifactQueryScope, ArtifactQueryScopeSchema, ArtifactReactionHookContext, ArtifactReactionHookRegistration, ArtifactRef, ArtifactRefSchema, ArtifactRelation, ArtifactRelationAddedPayload, ArtifactRelationQueryTarget, ArtifactRelationQueryTargetSchema, ArtifactRelationSchema, ArtifactRelationTarget, ArtifactRelationTargetSchema, ArtifactRelationTypeListRequest, ArtifactRelationTypeListResponse, ArtifactRelationTypeRegisterRequest, ArtifactRelationTypeRegisterResponse, ArtifactRepresentations, ArtifactRepresentationsSchema, ArtifactResolveRequest, ArtifactResolveResponse, ArtifactReviseRequest, ArtifactReviseResponse, ArtifactRevisedPayload, ArtifactRevision, ArtifactRevisionSchema, ArtifactSchemas, ArtifactScope, ArtifactScopeSchema, ArtifactStatusChangedPayload, ArtifactSubjects, BeforeArtifactHookContext, BeforeArtifactHookRegistration, ConfidenceBasis, ConfidenceBasisSchema, ConfidenceLevel, ConfidenceLevelSchema, ConfidenceMetadata, ConfidenceMetadataSchema, EvidenceRef, EvidenceRefSchema, LocalRef, LocalRefSchema, RelationTypeRegistration, RelationTypeRegistrationSchema, defineArtifactKind, defineArtifactLifecycleHooks };

package/dist/contracts/artifact/index.mjs

@@ -0,0 +1 @@
+import{C as e,E as t,S as n,T as r,_ as i,a,b as o,c as s,d as c,f as l,g as u,h as d,i as f,l as p,m,n as h,o as g,p as _,r as v,s as y,t as b,u as x,v as S,w as C,x as w,y as T}from"../../artifact-B3npq1cy.mjs";export{g as ArtifactActorSchema,y as ArtifactCompareRequestSchema,s as ArtifactCompareResponseSchema,p as ArtifactConflictPolicySchema,x as ArtifactKindRegistrationSchema,b as ArtifactNamespace,c as ArtifactObservationSchema,l as ArtifactQueryRequestSchema,_ as ArtifactQueryScopeSchema,m as ArtifactRefSchema,d as ArtifactRelationQueryTargetSchema,u as ArtifactRelationSchema,i as ArtifactRelationTargetSchema,S as ArtifactRepresentationsSchema,T as ArtifactRevisionSchema,h as ArtifactSchemas,o as ArtifactScopeSchema,v as ArtifactSubjects,w as ConfidenceBasisSchema,n as ConfidenceLevelSchema,e as ConfidenceMetadataSchema,C as EvidenceRefSchema,r as LocalRefSchema,t as RelationTypeRegistrationSchema,a as defineArtifactKind,f as defineArtifactLifecycleHooks};

package/dist/contracts/client/index.d.mts

@@ -1,3 +1,3 @@
-import { C as PostInstallDescriptorSchema, D as VersionCommandSchema, E as VersionCommand, S as PostInstallDescriptor, T as SignedBinaryBucketInstallDescriptorSchema, _ as LogSourceDefinitionSchema, a as ClientDefinitionSchema, b as NpmInstallDescriptor, c as ClientRuntimeCapabilities, d as ClientToolCapabilityAnnotationSchema, f as ClientToolDefinition, g as LogSourceDefinition, h as ConfigIsolationSchema, i as ClientDefinitionInput, l as ClientRuntimeCapabilitiesSchema, m as ConfigIsolation, n as ClientBinaryCompatibilitySchema, o as ClientHookEventDeclaration, p as ClientToolDefinitionSchema, r as ClientDefinition, s as ClientHookEventDeclarationSchema, t as ClientBinaryCompatibility, u as ClientToolCapabilityAnnotation, v as ManagedInstallDescriptor, w as SignedBinaryBucketInstallDescriptor, x as NpmInstallDescriptorSchema, y as ManagedInstallDescriptorSchema } from "../../definition-DB7bbFSa.mjs";
-import { $ as ClientSessionTurnCompletedSchema, $t as ClientIdentifierStrength, A as SessionConfigIdSchema, At as ClientSetActiveResponse, B as SessionConfigTeardownResponseSchema, Bt as InstallError, C as SessionConfigCleanupRequest, Cn as ClientExecutionContext, Ct as ClientInstallRequest, D as SessionConfigDestroyRequest, Dn as ClientResolveBinarySchema, Dt as ClientListResponse, E as SessionConfigCreateResponse, En as ClientResolveBinaryResponse, Et as ClientListRequest, F as SessionConfigSetupResponse, Ft as ClientUpdateRequest, G as ClientSessionObservedBaseSchema, Gt as InstalledVersionEntrySchema, H as ClientNamespace, Ht as InstallStage, I as SessionConfigSetupResponseSchema, It as ClientUpdateResponse, J as ClientSessionToolPost, Jt as ClientAccountIdentifier, K as ClientSessionStarted, Kt as ManagedInstallStrategy, L as SessionConfigTeardownRequest, Lt as ClientUpdateSchema, M as SessionConfigInheritanceSchema, Mt as ClientUninstallRequest, N as SessionConfigSetupRequest, Nt as ClientUninstallResponse, O as SessionConfigDestroyResponse, Ot as ClientListSchema, P as SessionConfigSetupRequestSchema, Pt as ClientUninstallSchema, Q as ClientSessionTurnCompleted, Qt as ClientAccountObserveSchema, R as SessionConfigTeardownRequestSchema, Rt as ClientVersionChanged, S as ProfileUpdateResponse, Sn as ClientSchemas, St as ClientInstallProgressSchema, T as SessionConfigCreateRequest, Tn as ClientResolveBinaryRequest, Tt as ClientInstallSchema, U as ClientSubjects, Ut as InstallStageSchema, V as createClientDefinition, Vt as InstallErrorSchema, W as ClientSessionObservedBase, Wt as InstalledVersionEntry, X as ClientSessionToolPre, Xt as ClientAccountObserveRequest, Y as ClientSessionToolPostSchema, Yt as ClientAccountIdentifierSchema, Z as ClientSessionToolPreSchema, Zt as ClientAccountObserveResponse, _ as ProfileListRequest, _n as ClientUsageSnapshotSchema, _t as ClientBinaryListEntry, a as ClientConfigPrimeSchema, an as ClientScanResultSchema, at as ClientWiringEntrySchema, b as ProfileSetDefaultResponse, bn as ClientUsageWindows, bt as ClientInstallCompletedSchema, c as ClientProfileSchema, cn as ClientSessionAccountObserveRequest, ct as ClientRuntimeObserveRequest, d as ProfileCreateRequest, dn as ClientSessionLocator, dt as ClientRuntimeSource, en as ClientIdentifierStrengthSchema, et as ClientSessionTurnStarted, f as ProfileCreateResponse, fn as ClientSessionLocatorSchema, ft as ClientRuntimeSourceLayer, g as ProfileGetResponse, gn as ClientUsageSnapshot, gt as ClientRuntimeStartedSchema, h as ProfileGetRequest, hn as ClientUsageIngestSchema, ht as ClientRuntimeStarted, i as ClientConfigPrimeResponse, in as ClientScanResult, it as ClientWiringEntry, j as SessionConfigInheritance, jt as ClientSetActiveSchema, k as SessionConfigEnvSchema, kt as ClientSetActiveRequest, l as ClientProfileSchemas, ln as ClientSessionAccountObserveResponse, lt as ClientRuntimeObserveResponse, m as ProfileDeleteResponse, mn as ClientUsageIngestResponse, mt as ClientRuntimeSourceSchema, n as ClientConfigPrimePhaseSchema, nn as ClientIdentityObservationSchema, nt as ClientSessionUserPromptSubmitted, o as ClientProfile, on as ClientScanTarget, ot as ClientRuntimeEvidenceBase, p as ProfileDeleteRequest, pn as ClientUsageIngestRequest, pt as ClientRuntimeSourceLayerSchema, q as ClientSessionStartedSchema, qt as ManagedInstallStrategySchema, r as ClientConfigPrimeRequest, rn as ClientMetadataSchema, rt as ClientSessionUserPromptSubmittedSchema, s as ClientProfileNameSchema, sn as ClientScanTargetSchema, st as ClientRuntimeEvidenceBaseSchema, t as ClientConfigPrimePhase, tn as ClientIdentityObservation, tt as ClientSessionTurnStartedSchema, u as ClientSessionConfigSchemas, un as ClientSessionAccountObserveSchema, ut as ClientRuntimeObserveSchema, v as ProfileListResponse, vn as ClientUsageWindow, vt as ClientBinaryListEntrySchema, w as SessionConfigCleanupResponse, wn as ClientExecutionContextSchema, wt as ClientInstallResponse, x as ProfileUpdateRequest, xn as ClientUsageWindowsSchema, xt as ClientInstallProgress, y as ProfileSetDefaultRequest, yn as ClientUsageWindowSchema, yt as ClientInstallCompleted, z as SessionConfigTeardownResponse, zt as ClientVersionChangedSchema } from "../../index-DwCA1HWa.mjs";
+import { C as PostInstallDescriptorSchema, D as VersionCommandSchema, E as VersionCommand, S as PostInstallDescriptor, T as SignedBinaryBucketInstallDescriptorSchema, _ as LogSourceDefinitionSchema, a as ClientDefinitionSchema, b as NpmInstallDescriptor, c as ClientRuntimeCapabilities, d as ClientToolCapabilityAnnotationSchema, f as ClientToolDefinition, g as LogSourceDefinition, h as ConfigIsolationSchema, i as ClientDefinitionInput, l as ClientRuntimeCapabilitiesSchema, m as ConfigIsolation, n as ClientBinaryCompatibilitySchema, o as ClientHookEventDeclaration, p as ClientToolDefinitionSchema, r as ClientDefinition, s as ClientHookEventDeclarationSchema, t as ClientBinaryCompatibility, u as ClientToolCapabilityAnnotation, v as ManagedInstallDescriptor, w as SignedBinaryBucketInstallDescriptor, x as NpmInstallDescriptorSchema, y as ManagedInstallDescriptorSchema } from "../../definition-BLCdXGzh.mjs";
+import { $ as ClientSessionTurnCompletedSchema, $t as ClientIdentifierStrength, A as SessionConfigIdSchema, At as ClientSetActiveResponse, B as SessionConfigTeardownResponseSchema, Bt as InstallError, C as SessionConfigCleanupRequest, Cn as ClientExecutionContext, Ct as ClientInstallRequest, D as SessionConfigDestroyRequest, Dn as ClientResolveBinarySchema, Dt as ClientListResponse, E as SessionConfigCreateResponse, En as ClientResolveBinaryResponse, Et as ClientListRequest, F as SessionConfigSetupResponse, Ft as ClientUpdateRequest, G as ClientSessionObservedBaseSchema, Gt as InstalledVersionEntrySchema, H as ClientNamespace, Ht as InstallStage, I as SessionConfigSetupResponseSchema, It as ClientUpdateResponse, J as ClientSessionToolPost, Jt as ClientAccountIdentifier, K as ClientSessionStarted, Kt as ManagedInstallStrategy, L as SessionConfigTeardownRequest, Lt as ClientUpdateSchema, M as SessionConfigInheritanceSchema, Mt as ClientUninstallRequest, N as SessionConfigSetupRequest, Nt as ClientUninstallResponse, O as SessionConfigDestroyResponse, Ot as ClientListSchema, P as SessionConfigSetupRequestSchema, Pt as ClientUninstallSchema, Q as ClientSessionTurnCompleted, Qt as ClientAccountObserveSchema, R as SessionConfigTeardownRequestSchema, Rt as ClientVersionChanged, S as ProfileUpdateResponse, Sn as ClientSchemas, St as ClientInstallProgressSchema, T as SessionConfigCreateRequest, Tn as ClientResolveBinaryRequest, Tt as ClientInstallSchema, U as ClientSubjects, Ut as InstallStageSchema, V as createClientDefinition, Vt as InstallErrorSchema, W as ClientSessionObservedBase, Wt as InstalledVersionEntry, X as ClientSessionToolPre, Xt as ClientAccountObserveRequest, Y as ClientSessionToolPostSchema, Yt as ClientAccountIdentifierSchema, Z as ClientSessionToolPreSchema, Zt as ClientAccountObserveResponse, _ as ProfileListRequest, _n as ClientUsageSnapshotSchema, _t as ClientBinaryListEntry, a as ClientConfigPrimeSchema, an as ClientScanResultSchema, at as ClientWiringEntrySchema, b as ProfileSetDefaultResponse, bn as ClientUsageWindows, bt as ClientInstallCompletedSchema, c as ClientProfileSchema, cn as ClientSessionAccountObserveRequest, ct as ClientRuntimeObserveRequest, d as ProfileCreateRequest, dn as ClientSessionLocator, dt as ClientRuntimeSource, en as ClientIdentifierStrengthSchema, et as ClientSessionTurnStarted, f as ProfileCreateResponse, fn as ClientSessionLocatorSchema, ft as ClientRuntimeSourceLayer, g as ProfileGetResponse, gn as ClientUsageSnapshot, gt as ClientRuntimeStartedSchema, h as ProfileGetRequest, hn as ClientUsageIngestSchema, ht as ClientRuntimeStarted, i as ClientConfigPrimeResponse, in as ClientScanResult, it as ClientWiringEntry, j as SessionConfigInheritance, jt as ClientSetActiveSchema, k as SessionConfigEnvSchema, kt as ClientSetActiveRequest, l as ClientProfileSchemas, ln as ClientSessionAccountObserveResponse, lt as ClientRuntimeObserveResponse, m as ProfileDeleteResponse, mn as ClientUsageIngestResponse, mt as ClientRuntimeSourceSchema, n as ClientConfigPrimePhaseSchema, nn as ClientIdentityObservationSchema, nt as ClientSessionUserPromptSubmitted, o as ClientProfile, on as ClientScanTarget, ot as ClientRuntimeEvidenceBase, p as ProfileDeleteRequest, pn as ClientUsageIngestRequest, pt as ClientRuntimeSourceLayerSchema, q as ClientSessionStartedSchema, qt as ManagedInstallStrategySchema, r as ClientConfigPrimeRequest, rn as ClientMetadataSchema, rt as ClientSessionUserPromptSubmittedSchema, s as ClientProfileNameSchema, sn as ClientScanTargetSchema, st as ClientRuntimeEvidenceBaseSchema, t as ClientConfigPrimePhase, tn as ClientIdentityObservation, tt as ClientSessionTurnStartedSchema, u as ClientSessionConfigSchemas, un as ClientSessionAccountObserveSchema, ut as ClientRuntimeObserveSchema, v as ProfileListResponse, vn as ClientUsageWindow, vt as ClientBinaryListEntrySchema, w as SessionConfigCleanupResponse, wn as ClientExecutionContextSchema, wt as ClientInstallResponse, x as ProfileUpdateRequest, xn as ClientUsageWindowsSchema, xt as ClientInstallProgress, y as ProfileSetDefaultRequest, yn as ClientUsageWindowSchema, yt as ClientInstallCompleted, z as SessionConfigTeardownResponse, zt as ClientVersionChangedSchema } from "../../index-CelJCBjk.mjs";
 export { ClientAccountIdentifier, ClientAccountIdentifierSchema, ClientAccountObserveRequest, ClientAccountObserveResponse, ClientAccountObserveSchema, ClientBinaryCompatibility, ClientBinaryCompatibilitySchema, ClientBinaryListEntry, ClientBinaryListEntrySchema, ClientConfigPrimePhase, ClientConfigPrimePhaseSchema, ClientConfigPrimeRequest, ClientConfigPrimeResponse, ClientConfigPrimeSchema, ClientDefinition, ClientDefinitionInput, ClientDefinitionSchema, ClientExecutionContext, ClientExecutionContextSchema, ClientHookEventDeclaration, ClientHookEventDeclarationSchema, ClientIdentifierStrength, ClientIdentifierStrengthSchema, ClientIdentityObservation, ClientIdentityObservationSchema, ClientInstallCompleted, ClientInstallCompletedSchema, ClientInstallProgress, ClientInstallProgressSchema, ClientInstallRequest, ClientInstallResponse, ClientInstallSchema, ClientListRequest, ClientListResponse, ClientListSchema, ClientMetadataSchema, ClientNamespace, ClientProfile, ClientProfileNameSchema, ClientProfileSchema, ClientProfileSchemas, ClientResolveBinaryRequest, ClientResolveBinaryResponse, ClientResolveBinarySchema, ClientRuntimeCapabilities, ClientRuntimeCapabilitiesSchema, ClientRuntimeEvidenceBase, ClientRuntimeEvidenceBaseSchema, ClientRuntimeObserveRequest, ClientRuntimeObserveResponse, ClientRuntimeObserveSchema, ClientRuntimeSource, ClientRuntimeSourceLayer, ClientRuntimeSourceLayerSchema, ClientRuntimeSourceSchema, ClientRuntimeStarted, ClientRuntimeStartedSchema, ClientScanResult, ClientScanResultSchema, ClientScanTarget, ClientScanTargetSchema, ClientSchemas, ClientSessionAccountObserveRequest, ClientSessionAccountObserveResponse, ClientSessionAccountObserveSchema, ClientSessionConfigSchemas, ClientSessionLocator, ClientSessionLocatorSchema, ClientSessionObservedBase, ClientSessionObservedBaseSchema, ClientSessionStarted, ClientSessionStartedSchema, ClientSessionToolPost, ClientSessionToolPostSchema, ClientSessionToolPre, ClientSessionToolPreSchema, ClientSessionTurnCompleted, ClientSessionTurnCompletedSchema, ClientSessionTurnStarted, ClientSessionTurnStartedSchema, ClientSessionUserPromptSubmitted, ClientSessionUserPromptSubmittedSchema, ClientSetActiveRequest, ClientSetActiveResponse, ClientSetActiveSchema, ClientSubjects, ClientToolCapabilityAnnotation, ClientToolCapabilityAnnotationSchema, ClientToolDefinition, ClientToolDefinitionSchema, ClientUninstallRequest, ClientUninstallResponse, ClientUninstallSchema, ClientUpdateRequest, ClientUpdateResponse, ClientUpdateSchema, ClientUsageIngestRequest, ClientUsageIngestResponse, ClientUsageIngestSchema, ClientUsageSnapshot, ClientUsageSnapshotSchema, ClientUsageWindow, ClientUsageWindowSchema, ClientUsageWindows, ClientUsageWindowsSchema, ClientVersionChanged, ClientVersionChangedSchema, ClientWiringEntry, ClientWiringEntrySchema, ConfigIsolation, ConfigIsolationSchema, InstallError, InstallErrorSchema, InstallStage, InstallStageSchema, InstalledVersionEntry, InstalledVersionEntrySchema, LogSourceDefinition, LogSourceDefinitionSchema, ManagedInstallDescriptor, ManagedInstallDescriptorSchema, ManagedInstallStrategy, ManagedInstallStrategySchema, NpmInstallDescriptor, NpmInstallDescriptorSchema, PostInstallDescriptor, PostInstallDescriptorSchema, ProfileCreateRequest, ProfileCreateResponse, ProfileDeleteRequest, ProfileDeleteResponse, ProfileGetRequest, ProfileGetResponse, ProfileListRequest, ProfileListResponse, ProfileSetDefaultRequest, ProfileSetDefaultResponse, ProfileUpdateRequest, ProfileUpdateResponse, SessionConfigCleanupRequest, SessionConfigCleanupResponse, SessionConfigCreateRequest, SessionConfigCreateResponse, SessionConfigDestroyRequest, SessionConfigDestroyResponse, SessionConfigEnvSchema, SessionConfigIdSchema, SessionConfigInheritance, SessionConfigInheritanceSchema, SessionConfigSetupRequest, SessionConfigSetupRequestSchema, SessionConfigSetupResponse, SessionConfigSetupResponseSchema, SessionConfigTeardownRequest, SessionConfigTeardownRequestSchema, SessionConfigTeardownResponse, SessionConfigTeardownResponseSchema, SignedBinaryBucketInstallDescriptor, SignedBinaryBucketInstallDescriptorSchema, VersionCommand, VersionCommandSchema, createClientDefinition };

package/dist/contracts/client/index.mjs

@@ -1 +1 @@
-import{a as e,c as t,d as n,f as r,i,l as a,n as o,o as s,p as c,r as l,s as u,t as d,u as f}from"../../profile-Cq4A7kQa.mjs";import{a as p,c as m,d as h,f as g,i as _,l as v,n as y,o as b,p as x,r as S,s as C,t as w,u as T}from"../../account-identity-Bg_vKkcs.mjs";import{A as E,B as D,C as O,D as k,E as A,F as j,G as M,H as N,I as P,L as F,M as I,N as L,O as R,P as z,R as B,S as V,T as H,U,V as W,W as G,_ as K,a as q,b as J,c as Y,d as X,f as Z,g as Q,h as $,i as ee,j as te,k as ne,l as re,m as ie,n as ae,o as oe,p as se,r as ce,s as le,t as ue,u as de,v as fe,w as pe,x as me,y as he,z as ge}from"../../client-DMWXCWhM.mjs";export{w as ClientAccountIdentifierSchema,y as ClientAccountObserveSchema,L as ClientBinaryCompatibilitySchema,fe as ClientBinaryListEntrySchema,d as ClientConfigPrimePhaseSchema,o as ClientConfigPrimeSchema,z as ClientDefinitionSchema,te as ClientExecutionContextSchema,j as ClientHookEventDeclarationSchema,S as ClientIdentifierStrengthSchema,_ as ClientIdentityObservationSchema,he as ClientInstallCompletedSchema,J as ClientInstallProgressSchema,me as ClientInstallSchema,V as ClientListSchema,p as ClientMetadataSchema,ae as ClientNamespace,l as ClientProfileNameSchema,i as ClientProfileSchema,e as ClientProfileSchemas,I as ClientResolveBinarySchema,P as ClientRuntimeCapabilitiesSchema,se as ClientRuntimeEvidenceBaseSchema,ie as ClientRuntimeObserveSchema,$ as ClientRuntimeSourceLayerSchema,Q as ClientRuntimeSourceSchema,K as ClientRuntimeStartedSchema,b as ClientScanResultSchema,C as ClientScanTargetSchema,ee as ClientSchemas,m as ClientSessionAccountObserveSchema,s as ClientSessionConfigSchemas,v as ClientSessionLocatorSchema,q as ClientSessionObservedBaseSchema,oe as ClientSessionStartedSchema,le as ClientSessionToolPostSchema,Y as ClientSessionToolPreSchema,re as ClientSessionTurnCompletedSchema,de as ClientSessionTurnStartedSchema,X as ClientSessionUserPromptSubmittedSchema,O as ClientSetActiveSchema,ce as ClientSubjects,F as ClientToolCapabilityAnnotationSchema,B as ClientToolDefinitionSchema,pe as ClientUninstallSchema,H as ClientUpdateSchema,T as ClientUsageIngestSchema,h as ClientUsageSnapshotSchema,g as ClientUsageWindowSchema,x as ClientUsageWindowsSchema,A as ClientVersionChangedSchema,Z as ClientWiringEntrySchema,ge as ConfigIsolationSchema,k as InstallErrorSchema,R as InstallStageSchema,ne as InstalledVersionEntrySchema,D as LogSourceDefinitionSchema,W as ManagedInstallDescriptorSchema,E as ManagedInstallStrategySchema,N as NpmInstallDescriptorSchema,U as PostInstallDescriptorSchema,u as SessionConfigEnvSchema,t as SessionConfigIdSchema,a as SessionConfigInheritanceSchema,f as SessionConfigSetupRequestSchema,n as SessionConfigSetupResponseSchema,r as SessionConfigTeardownRequestSchema,c as SessionConfigTeardownResponseSchema,G as SignedBinaryBucketInstallDescriptorSchema,M as VersionCommandSchema,ue as createClientDefinition};
+import{a as e,c as t,d as n,f as r,i,l as a,n as o,o as s,p as c,r as l,s as u,t as d,u as f}from"../../profile-6ynCD5k3.mjs";import{a as p,c as m,d as h,f as g,i as _,l as v,n as y,o as b,p as x,r as S,s as C,t as w,u as T}from"../../account-identity-DT5NOtFi.mjs";import{A as E,B as D,C as O,D as k,E as A,F as j,G as M,H as N,I as P,L as F,M as I,N as L,O as R,P as z,R as B,S as V,T as H,U,V as W,W as G,_ as K,a as q,b as J,c as Y,d as X,f as Z,g as Q,h as $,i as ee,j as te,k as ne,l as re,m as ie,n as ae,o as oe,p as se,r as ce,s as le,t as ue,u as de,v as fe,w as pe,x as me,y as he,z as ge}from"../../client-bx74gm4R.mjs";export{w as ClientAccountIdentifierSchema,y as ClientAccountObserveSchema,L as ClientBinaryCompatibilitySchema,fe as ClientBinaryListEntrySchema,d as ClientConfigPrimePhaseSchema,o as ClientConfigPrimeSchema,z as ClientDefinitionSchema,te as ClientExecutionContextSchema,j as ClientHookEventDeclarationSchema,S as ClientIdentifierStrengthSchema,_ as ClientIdentityObservationSchema,he as ClientInstallCompletedSchema,J as ClientInstallProgressSchema,me as ClientInstallSchema,V as ClientListSchema,p as ClientMetadataSchema,ae as ClientNamespace,l as ClientProfileNameSchema,i as ClientProfileSchema,e as ClientProfileSchemas,I as ClientResolveBinarySchema,P as ClientRuntimeCapabilitiesSchema,se as ClientRuntimeEvidenceBaseSchema,ie as ClientRuntimeObserveSchema,$ as ClientRuntimeSourceLayerSchema,Q as ClientRuntimeSourceSchema,K as ClientRuntimeStartedSchema,b as ClientScanResultSchema,C as ClientScanTargetSchema,ee as ClientSchemas,m as ClientSessionAccountObserveSchema,s as ClientSessionConfigSchemas,v as ClientSessionLocatorSchema,q as ClientSessionObservedBaseSchema,oe as ClientSessionStartedSchema,le as ClientSessionToolPostSchema,Y as ClientSessionToolPreSchema,re as ClientSessionTurnCompletedSchema,de as ClientSessionTurnStartedSchema,X as ClientSessionUserPromptSubmittedSchema,O as ClientSetActiveSchema,ce as ClientSubjects,F as ClientToolCapabilityAnnotationSchema,B as ClientToolDefinitionSchema,pe as ClientUninstallSchema,H as ClientUpdateSchema,T as ClientUsageIngestSchema,h as ClientUsageSnapshotSchema,g as ClientUsageWindowSchema,x as ClientUsageWindowsSchema,A as ClientVersionChangedSchema,Z as ClientWiringEntrySchema,ge as ConfigIsolationSchema,k as InstallErrorSchema,R as InstallStageSchema,ne as InstalledVersionEntrySchema,D as LogSourceDefinitionSchema,W as ManagedInstallDescriptorSchema,E as ManagedInstallStrategySchema,N as NpmInstallDescriptorSchema,U as PostInstallDescriptorSchema,u as SessionConfigEnvSchema,t as SessionConfigIdSchema,a as SessionConfigInheritanceSchema,f as SessionConfigSetupRequestSchema,n as SessionConfigSetupResponseSchema,r as SessionConfigTeardownRequestSchema,c as SessionConfigTeardownResponseSchema,G as SignedBinaryBucketInstallDescriptorSchema,M as VersionCommandSchema,ue as createClientDefinition};

package/dist/contracts/common/index.d.mts

@@ -1,2 +1,2 @@
-import { a as FocusContext, i as ActionIntent, n as SurfaceVisibility, r as isSurfaceVisible, t as SurfaceType } from "../../index-D2jejYlV.mjs";
+import { a as FocusContext, i as ActionIntent, n as SurfaceVisibility, r as isSurfaceVisible, t as SurfaceType } from "../../index-B80L4YqA.mjs";
 export { ActionIntent, FocusContext, SurfaceType, SurfaceVisibility, isSurfaceVisible };

package/dist/contracts/config/index.d.mts

@@ -1,8 +1,8 @@
-import { a as ConfigUpdateRequest, b as RelayConfig, i as ConfigSchemas, l as AIModelSchema, n as ConfigSubjects, o as ConfigUpdateResponse, r as ConfigGetResponse, t as ConfigNamespace, v as Config, y as ConfigSchema } from "../../config-namespace-ChZOpi1W.mjs";
+import { a as ConfigUpdateRequest, b as RelayConfig, i as ConfigSchemas, l as AIModelSchema, n as ConfigSubjects, o as ConfigUpdateResponse, r as ConfigGetResponse, t as ConfigNamespace, v as Config, y as ConfigSchema } from "../../config-namespace-CPY9YsR8.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 
-//#region packages/contracts/src/config/credential-ref.d.ts
+//#region core/contracts/src/config/credential-ref.d.ts
 /**
  * Check whether a credential ref was issued by the account-manager.
  *
@@ -66,7 +66,7 @@ declare function brandCredentialRecord(creds: Record<string, string> | null | un
  */
 declare function unbrandCredentials(credentials: Record<string, CredentialRef> | undefined): Record<string, string> | undefined;
 //#endregion
-//#region packages/contracts/src/config/provider-defaults.d.ts
+//#region core/contracts/src/config/provider-defaults.d.ts
 /**
  * Provider defaults configuration without display/enabled fields.
  *
@@ -257,7 +257,7 @@ declare const BaseAdapterConfigSchema: z.ZodObject<{
   }, z.core.$strip>>>;
 }, z.core.$strip>;
 //#endregion
-//#region packages/contracts/src/config/provider-config-file.d.ts
+//#region core/contracts/src/config/provider-config-file.d.ts
 /**
  * Canonical schema version string for provider config files.
  */
@@ -297,7 +297,7 @@ declare const ProviderConfigFileSchema: z.ZodObject<{
  */
 type ProviderConfigFile = z.infer<typeof ProviderConfigFileSchema>;
 //#endregion
-//#region packages/contracts/src/config/adapter-file.d.ts
+//#region core/contracts/src/config/adapter-file.d.ts
 /**
  * Canonical schema version string for adapter config files.
  */
@@ -327,7 +327,7 @@ declare const AdapterFileSchema: z.ZodObject<{
   clientId: z.ZodOptional<z.ZodString>;
   protocol: z.ZodOptional<z.ZodString>;
   providerDefinitionIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
-  settings: z.ZodOptional<z.ZodCustom<Record<string, unknown>, Record<string, unknown>>>;
+  settings: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
   bindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
     providerConfigId: z.ZodString;
     isDefault: z.ZodOptional<z.ZodBoolean>;
@@ -338,7 +338,7 @@ declare const AdapterFileSchema: z.ZodObject<{
  */
 type AdapterFile = z.infer<typeof AdapterFileSchema>;
 //#endregion
-//#region packages/contracts/src/config/provider-config-name.d.ts
+//#region core/contracts/src/config/provider-config-name.d.ts
 /**
  * Convert a provider-config display name into its canonical routing slug.
  *
@@ -380,7 +380,7 @@ declare function resolveCanonicalProviderConfigName(options: {
   definitionId: string;
 }): string | undefined;
 //#endregion
-//#region packages/contracts/src/config/adapters-file.d.ts
+//#region core/contracts/src/config/adapters-file.d.ts
 /**
  * Configuration for a single provider entry inside `adapters.json`.
  */