@makaio/framework 1.0.0-dev-1785409369816 → 1.0.0-dev-1787670071418

package/dist/clients/index.mjs

@@ -1 +1 @@
-import{n as e,r as t,t as n}from"../client-binary-version-verifier-taewmKTY.mjs";import{z as r}from"zod";import*as i from"node:fs/promises";import*as a from"node:path";import{randomUUID as o}from"node:crypto";import{createBusNamespace as s,hostLocalRequest as c}from"@makaio/framework/core";import{MakaioBus as l}from"@makaio/framework/bus";import{extensionToken as u,isUniversalRange as d,versionSatisfies as f}from"@makaio/framework/contracts";import{BaseService as p}from"@makaio/framework/service-base";import{index as m,unique as ee,uniqueIndex as te}from"drizzle-orm/sqlite-core";import{index as h,unique as ne,uniqueIndex as re}from"drizzle-orm/pg-core";import{defineDialectSchema as g,defineDualTable as _,didAffectRows as ie,executeTransaction as v,registerDrizzleHandlers as ae,resolveSchema as y}from"@makaio/framework/storage/drizzle";import{and as b,eq as x,gt as oe,sql as S}from"drizzle-orm";import{ClientProfileNameSchema as C,ClientProfileSchema as se,ClientSubjects as ce,ClientSubjects as w,ClientWiringEntrySchema as le,DEFAULT_FAILURE_POLICY as ue,SessionConfigLeaseIdSchema as de,deriveHookEventTransportMode as fe,isValidContributorId as pe,isValidTimeoutMs as me,validateClosedPolicy as he}from"@makaio/framework/contracts/client";import*as ge from"node:os";import{CLIDetectionSubjects as _e}from"@makaio/framework/services/cli-detection/namespace";import{ClientStorageSubjects as ve}from"@makaio/framework/services/settings/storage";import{SessionSubjects as ye}from"@makaio/framework/contracts/session";async function be(e,t,n,r,i){let a,o=(n.get(e)??Promise.resolve()).then(async()=>{let n=await i(r(await xe(e,t)));n.changed&&await Se(e,n.content),a=n.result}),s=o.then(()=>void 0,()=>void 0);n.set(e,s);try{await o}finally{n.get(e)===s&&n.delete(e)}return a}async function xe(e,t){let n;try{n=await i.readFile(e,`utf-8`)}catch(e){if(e.code===`ENOENT`)return t;throw e}return JSON.parse(n)}async function Se(e,t){let n=a.dirname(e),r=a.join(n,`${a.basename(e)}.${o()}.tmp`);await i.mkdir(n,{recursive:!0});try{await i.writeFile(r,`${JSON.stringify(t,null,2)}\n`,`utf-8`),await i.rename(r,e)}catch(e){throw await i.unlink(r).catch(()=>void 0),e}}var Ce=class e extends Error{code=`BINARY_NOT_FOUND`;constructor(t){super(`client.resolveBinary: no binary found for client '${t}' — install a managed version or ensure the binary is on PATH`),this.name=`BinaryNotFoundError`,Error.captureStackTrace?.(this,e)}},we=class{nextAccountSequence=1;accountIdsByIdentifier=new Map;accounts=new Map;upsertAccount(e){let t=Ee(e.displayLabel),n=new Map;for(let t of e.identifiers)n.set(Te(e.clientId,t.scheme,t.value),t);let r=De(n,this.accountIdsByIdentifier,`strong`),i=De(n,this.accountIdsByIdentifier,`alias`),a=r[0]??(i.length===1?i[0]:i.length>1?Oe(i):this.createAccount()),o=(r.length>0?je(a,r,i):[]).flatMap(e=>this.mergeInto(a,e)),s=this.accounts.get(a);if(!s)throw Error(`Client account registry invariant violated: missing account ${a}`);for(let[e,t]of n){let n=this.accountIdsByIdentifier.get(e);r.length===0&&t.strength===`alias`&&n!==void 0&&n!==a||(s.identifiers.set(e,t),this.accountIdsByIdentifier.set(e,a))}return t!==void 0&&(s.displayLabel=t),{clientAccountId:a,displayLabel:s.displayLabel,mergedAccountIds:o}}clear(){this.accountIdsByIdentifier.clear(),this.accounts.clear(),this.nextAccountSequence=1}createAccount(){let e=`client-account-${this.nextAccountSequence}`;return this.nextAccountSequence+=1,this.accounts.set(e,{clientAccountId:e,identifiers:new Map}),e}mergeInto(e,t){if(e===t)return[];let n=this.accounts.get(e),r=this.accounts.get(t);if(!n||!r)return[];for(let[t,i]of r.identifiers)n.identifiers.set(t,i),this.accountIdsByIdentifier.set(t,e);return n.displayLabel===void 0&&r.displayLabel!==void 0&&(n.displayLabel=r.displayLabel),this.accounts.delete(t),[t]}};function Te(e,t,n){return`${e}\u0000${t}\u0000${n}`}function Ee(e){return e?.trim()||void 0}function De(e,t,n){let r=new Set;for(let[i,a]of e){if(a.strength!==n)continue;let e=t.get(i);e!==void 0&&r.add(e)}return Array.from(r).sort(ke)}function Oe(e){return[...e].sort(ke)[0]}function ke(e,t){let n=Ae(e),r=Ae(t);return n!==null&&r!==null&&n!==r?n-r:e.localeCompare(t)}function Ae(e){let t=e.match(/^client-account-(\d+)$/);return t?Number(t[1]):null}function je(e,t,n){let r=new Set([...t,...n]);return r.delete(e),Array.from(r).sort(ke)}function Me(e){return{subject:`config.prime`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}async function T(e,t){let n=await e.requestOptional(Me(t.clientId),t);return n.handled?n.data:{primed:!1}}function Ne(){let e=e=>async()=>{throw Error(`StrategyDependencies.${e} is not implemented`)};return{fetchText:e(`fetchText`),fetchJson:e(`fetchJson`),downloadFile:e(`downloadFile`),exec:e(`exec`),extractArchive:e(`extractArchive`),deleteFile:e(`deleteFile`),computeChecksum:e(`computeChecksum`),removeDirectory:e(`removeDirectory`)}}var Pe=class{resolveInstallVersion(e,t,n){let r=t.version;if(n===void 0)return{version:r,explicit:!1};let i=n.trim();if(i.length===0)throw Error(`Explicit version returned an empty version string`);if(i!==r)throw Error(`client.install: requested version ${i} for client '${e}' does not match pinned version ${r}`);return{version:i,explicit:!0}}};function E(t,n){return!a.isAbsolute(t)||!a.isAbsolute(n)?!1:e(a.resolve(t),a.resolve(n))}function D(e,t){if(!e||!a.isAbsolute(e))throw Error(`${t} requires a non-empty absolute basePath`);return a.resolve(e)}var Fe=class{strategyDeps;config;jobs=new Map;#e=!1;resolvedBasePath;constructor(e,t){this.strategyDeps=e,this.config=t,this.resolvedBasePath=D(t.basePath,`ClientBinaryJobRunner`)}startJob(e,t,n,r,i,a,o){let s={...e,status:`running`};return this.jobs.set(e.jobId,s),this.runJob(s,t,n,r,i,a,o),e.jobId}cancelAll(){this.#e=!0,this.jobs.clear()}safeOnProgress(e,t){try{e(t)}catch{}}emitProgressIfActive(e,t){return this.#e?!1:(this.safeOnProgress(e,t),!this.#e)}async runJob(e,n,r,i,a,o,s){try{let c=this.resolveTargetDir(e.clientId,e.version),l=t(n,this.strategyDeps);if(l===void 0)throw Error(`Unsupported managed install descriptor type: ${n.type}`);let u=await this.executeStrategy(e,l,c,r);if(this.#e)return;let d;try{if(d=await this.runPostInstall(e,u.installPath,o,r),this.#e)return;s!==void 0&&await this.runVersionVerification(e,u.installPath,s,r)}catch(e){throw this.#e||await this.cleanupStagedArtifact(u.installPath),e}if(this.#e)return;await this.finalizeSuccess(e,u,d,r,i,a)}catch(t){if(this.#e)return;let n=t instanceof Error?t.message:String(t),r=t instanceof Error&&`code`in t?String(t.code):void 0;try{await a({jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,status:`error`,activeVersion:null,error:{message:n,...r===void 0?{}:{code:r}}})}catch{}}finally{this.jobs.delete(e.jobId)}}async finalizeSuccess(e,t,n,r,i,a){if(!(e.makeActive&&!this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,stage:`activating`,progress:null,installPath:t.installPath,activeAfterCompletion:!0}))&&!this.#e){try{await i({jobId:e.jobId,clientId:e.clientId,version:t.version,installPath:t.installPath,makeActive:e.makeActive,reason:e.reason})}catch(e){try{await this.strategyDeps.removeDirectory(t.installPath)}catch{}throw e}if(!this.#e)try{await a({jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,status:`success`,installPath:t.installPath,activeVersion:e.makeActive?t.version:null,...n===void 0?{}:{metadata:{postInstall:n}}})}catch{}}}async cleanupStagedArtifact(e){try{await this.strategyDeps.removeDirectory(e)}catch{}}async executeStrategy(e,t,n,r){try{return await t.execute(e.version,n,(t,i)=>{this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:i,installPath:t===`installing`?n:void 0,activeAfterCompletion:e.makeActive})})}catch(e){throw this.#e||await this.cleanupStagedArtifact(n),e}}async runPostInstall(e,t,n,r){if(n===void 0)return;let i=this.resolvePostInstallHandler(n),a=this.buildProgressPayload(e,`post-install`,null,t,{kind:n.kind});if(!this.emitProgressIfActive(r,a))return;let o=await i({clientId:e.clientId,version:e.version,installPath:t,descriptor:n});return this.emitProgressIfActive(r,this.buildProgressPayload(e,`post-install`,100,t,{kind:n.kind,...o??{}})),o??void 0}async runVersionVerification(e,t,r,i){this.emitProgressIfActive(i,this.buildProgressPayload(e,`verifying`,null,t,{kind:`version-command`}))&&(this.#e||await n(this.strategyDeps.exec,t,r,e.version))}resolvePostInstallHandler(e){let t=this.config.postInstallHandlers?.get(e.kind);if(t===void 0)throw Error(`No post-install handler registered for kind "${e.kind}"`);return t}buildProgressPayload(e,t,n,r,i){return{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:n,installPath:r,activeAfterCompletion:e.makeActive,...i===void 0?{}:{metadata:i}}}resolveTargetDir(e,t){let n=a.resolve(this.resolvedBasePath,e,t);if(!E(this.resolvedBasePath,n))throw Error(`Invalid install target path for client "${e}" and version "${t}"`);return n}};const O=r.object({id:r.string(),clientId:r.string(),version:r.string(),installPath:r.string(),installedAt:r.number().int().nonnegative(),createdAt:r.number().int().nonnegative()}),k=r.object({clientId:r.string(),activeVersion:r.string().nullable(),updatedAt:r.number().int().nonnegative()}),A=r.object({previousActiveVersion:r.string().nullable(),activeVersion:r.string().nullable()}),j=s(`client-binary:storage`,{insertVersion:{request:O,response:r.object({success:r.boolean()})},recordInstalledVersion:{request:r.object({versionRecord:O,makeActive:r.boolean(),updatedAt:r.number().int().nonnegative()}),response:A},listVersions:{request:r.object({clientId:r.string()}),response:r.object({versions:r.array(O)})},getSnapshot:{request:r.object({clientId:r.string()}),response:r.object({state:k.nullable(),versions:r.array(O)})},loadAllVersions:{request:r.object({}),response:r.object({versions:r.array(O)})},upsertState:{request:k,response:r.object({success:r.boolean()})},setActiveVersion:{request:r.object({clientId:r.string(),activeVersion:r.string().nullable(),updatedAt:r.number().int().nonnegative()}),response:A},getState:{request:r.object({clientId:r.string()}),response:r.object({state:k.nullable()})},loadAllState:{request:r.object({}),response:r.object({states:r.array(k)})},loadSnapshot:{request:r.object({}),response:r.object({states:r.array(k),versions:r.array(O)})},removeVersionAndClearActive:{request:r.object({clientId:r.string(),version:r.string(),updatedAt:r.number().int().nonnegative()}),response:A.extend({removedVersion:r.string().nullable()})}}),M=j.subjects;var N=class{definitions=new Map;constructor(e=[]){for(let t of e)this.registerUnique(t)}getDefinition(e){return this.definitions.get(e)}listDefinitions(){return[...this.definitions.values()]}register(e){this.definitions.set(e.id,e)}registerUnique(e){if(this.definitions.has(e.id))throw Error(`ClientDefinitionRegistry: duplicate client definition id '${e.id}'`);this.definitions.set(e.id,e)}};const Ie=process.env.MAKAIO_SKIP_CLIENT_VERSION_CHECK===`1`;function P(e,t,n,r,i){if(n===null){if(d(r))return;if(Ie){console.warn(`[SKIP_VERSION_CHECK] ${e}: ${i} for client '${t}' did not report a version; requires ${r}`);return}throw Error(`${e}: ${i} for client '${t}' did not report a version; requires ${r}`)}if(!f(n,r)){if(Ie){console.warn(`[SKIP_VERSION_CHECK] ${e}: ${i} ${n} for client '${t}' does not satisfy ${r} — check bypassed`);return}throw Error(`${e}: ${i} ${n} for client '${t}' does not satisfy ${r}`)}}var Le=class{bus;resolvedBasePath;resolvedConfigBasePath;definitionLookup;resolutionPolicy;constructor(e){this.bus=e.bus,this.resolvedBasePath=e.resolvedBasePath,this.resolvedConfigBasePath=e.resolvedConfigBasePath,this.definitionLookup=e.definitionLookup,this.resolutionPolicy=e.resolutionPolicy??`managed-first`}async resolve(e){let t=this.definitionLookup.getDefinition(e);if(t===void 0)throw Error(`client.resolveBinary: no definition registered for client '${e}'`);if(this.resolutionPolicy===`managed-first`){let{state:n,versions:r}=await this.bus.request(M.getSnapshot,{clientId:e}),i=n?.activeVersion??null;if(i!==null)return this.buildManagedContext(e,i,t,r)}return this.buildGlobalContext(e,t)}isInstallPathWithinBase(e){return E(this.resolvedBasePath,e)}async isExpectedInstallPath(e,t,n){if(!a.isAbsolute(e)||!this.isInstallPathWithinBase(e))return!1;let r=a.resolve(this.resolvedBasePath,t,n);if(!this.isInstallPathWithinBase(r))return!1;try{let[t,n,a]=await Promise.all([i.realpath(this.resolvedBasePath),i.realpath(r),i.realpath(e)]);return E(t,n)?a===n||E(n,a):!1}catch{return!1}}async buildManagedContext(e,t,n,r){let i=r.find(e=>e.version===t);if(i===void 0)throw Error(`client.resolveBinary: active version '${t}' is not installed for client '${e}'`);if(!await this.isExpectedInstallPath(i.installPath,e,t))throw Error(`client.resolveBinary: stored installPath "${i.installPath}" does not match the expected install directory for ${e}@${t}`);n.binary!==void 0&&P(`client.resolveBinary`,e,t,n.binary.supportedVersions,`managed binary version`);let o=F(n.versionCommand)?.[0];if(o===void 0)throw Error(`client.resolveBinary: definition for '${e}' has no versionCommand — cannot derive binary path`);let s=a.resolve(i.installPath,o),c=a.resolve(i.installPath);if(!s.startsWith(c+a.sep)&&s!==c)throw Error(`client.resolveBinary: versionCommand for '${e}' resolves outside the install directory`);let{configDir:l,env:u}=this.resolveIsolatedConfig(e,n);return{binaryPath:s,env:u,configDir:l,source:`managed`,version:t}}async buildGlobalContext(e,t){if(!t.binary?.name)throw Error(`client.resolveBinary: definition for '${e}' has no binary.name — cannot scan PATH`);let n={clientId:e,binaryName:t.binary.name,supportedVersions:t.binary.supportedVersions},{results:r}=await this.bus.request(w.scan,{targets:[n]}),i=r.find(t=>t.clientId===e);if(i===void 0||!i.found)throw new Ce(e);let o=i.version??null;P(`client.resolveBinary`,e,o,t.binary.supportedVersions,`detected global binary version`);let s=this.resolveGlobalConfigDir(t),c=i.binaryPath??null;if(c!==null&&!a.isAbsolute(c))throw Error(`client.resolveBinary: detected global binary path for '${e}' is not absolute`);return{binaryPath:c,env:{},configDir:s,source:`global`,version:o}}resolveIsolatedConfig(e,t){let{configIsolation:n}=t;if(n===void 0)return{configDir:null,env:{}};let r=a.join(this.resolvedConfigBasePath,e,`config`),i=n.pathKind===`file`?a.join(r,a.basename(n.defaultPath)):r;return{configDir:r,env:{[n.envVar]:i}}}resolveGlobalConfigDir(e){let{configIsolation:t}=e;if(t===void 0)return null;let n=t.defaultPath,r=n===`~`?ge.homedir():n.startsWith(`~/`)?a.join(ge.homedir(),n.slice(2)):n,i=t.pathKind===`file`?a.dirname(r):r;if(!a.isAbsolute(i))throw Error(`ConfigIsolation defaultPath for '${e.id}' resolved to non-absolute path '${r}'; use an absolute or tilde-expanded path (e.g. '~/.myapp')`);return i}};function F(e){if(e===void 0)return;let{executable:t,args:n}=e,r=typeof t==`string`?t:t[process.platform]??t.default;if(typeof r!=`string`||r.trim()===``)throw Error(`client.resolveBinary: versionCommand executable is missing for this platform`);return[r,...n]}async function Re(e,t){let{versions:n,states:r}=await e.request(M.loadSnapshot,{}),i=Map.groupBy(n,e=>e.clientId),a=new Map;for(let e of r)a.set(e.clientId,e.activeVersion);let o=new Map;for(let e of t.listDefinitions())e.managedInstall!==void 0&&o.set(e.id,e.managedInstall);return[...new Set(o.keys())].map(e=>{let t=o.get(e);if(t===void 0)throw Error(`assembleBinaryList: missing descriptor for client '${e}'`);let n=a.get(e)??null,r=(i.get(e)??[]).map(e=>({version:e.version,installPath:e.installPath,installedAt:e.installedAt,isActive:e.version===n})),s=t.version;return{clientId:e,installedVersions:r,activeVersion:n,pinnedVersion:s,updateAvailable:n!==null&&n!==s}})}var ze=class extends p{config;definitionLookup;versionResolver;jobRunner;strategyDeps;resolvedBasePath;resolvedConfigBasePath;resolver;pendingClients=new Set;constructor(e=l,t,n=new N([]),r=Ne()){super(e),this.config=t,this.definitionLookup=n,this.resolvedBasePath=D(t.basePath,`ClientBinaryManager`),this.resolvedConfigBasePath=D(t.configBasePath,`ClientBinaryManager configBasePath`),this.strategyDeps=r,this.versionResolver=new Pe,this.jobRunner=new Fe(r,t),this.resolver=new Le({bus:e,resolvedBasePath:this.resolvedBasePath,resolvedConfigBasePath:this.resolvedConfigBasePath,definitionLookup:n,...t.resolutionPolicy!==void 0&&{resolutionPolicy:t.resolutionPolicy}})}async onInit(){this.registerHandler(w.list,async e=>{let t=await this.handleList();e.setResult({clients:t})}),this.registerHandler(w.install,async e=>{let t=await this.handleInstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.update,async e=>{let t=await this.handleUpdate(e.payload.clientId);e.setResult(t)}),this.registerHandler(w.setActive,async e=>{let t=await this.handleSetActive(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.uninstall,async e=>{let t=await this.handleUninstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.resolveBinary,async e=>{let t=await this.resolver.resolve(e.payload.clientId);e.setResult(t)})}onDestroy(){this.jobRunner.cancelAll(),this.pendingClients.clear()}async handleList(){return Re(this.bus,this.definitionLookup)}async handleInstall(e,t){let{definition:n,descriptor:r}=this.requireManagedDefinition(e,`client.install`);return this.withClientLock(e,async()=>{let{version:i}=this.versionResolver.resolveInstallVersion(e,r,t);return n.binary!==void 0&&P(`client.install`,e,i,n.binary.supportedVersions,t===void 0?`resolved binary version`:`requested binary version`),{jobId:this.startInstallJob(e,i,r,n,!1,`install`),requestedVersion:t??null,resolvedVersion:i}})}async handleUpdate(e){let{definition:t,descriptor:n}=this.requireManagedDefinition(e,`client.update`);return this.withClientLock(e,async()=>{let{version:r}=this.versionResolver.resolveInstallVersion(e,n);return t.binary!==void 0&&P(`client.update`,e,r,t.binary.supportedVersions,`resolved binary version`),{jobId:this.startInstallJob(e,r,n,t,!0,`update`),resolvedVersion:r}})}async handleSetActive(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:r}=await this.bus.request(M.listVersions,{clientId:e}),i=r.find(e=>e.version===t);if(i===void 0)throw Error(`client.setActive: version '${t}' is not installed for client '${e}'`);let a=this.definitionLookup.getDefinition(e);if(a===void 0)throw Error(`client.setActive: no definition registered for client '${e}'`);a.binary!==void 0&&P(`client.setActive`,e,t,a.binary.supportedVersions,`requested binary version`);let o=F(a.versionCommand);if(o===void 0)throw Error(`client.setActive: no versionCommand registered for client '${e}'`);if(!await this.resolver.isExpectedInstallPath(i.installPath,e,t))throw Error(`client.setActive: stored installPath "${i.installPath}" does not match the expected install directory for ${e}@${t}`);return await n(this.strategyDeps.exec,i.installPath,o,t),await this.patchActiveVersion(e,t,`set-active`),{clientId:e,activeVersion:t}}finally{this.pendingClients.delete(e)}}async handleUninstall(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:n}=await this.bus.request(M.listVersions,{clientId:e}),r=n.find(e=>e.version===t);if(r===void 0)throw Error(`client.uninstall: version '${t}' is not installed for client '${e}'`);let{removedVersion:i,previousActiveVersion:o,activeVersion:s}=await this.bus.request(M.removeVersionAndClearActive,{clientId:e,version:t,updatedAt:Date.now()});if(i===null)throw Error(`client.uninstall: failed to delete version '${t}' for client '${e}'`);let c=r.installPath,l=typeof c==`string`&&c.length>0?a.resolve(c):null;if(typeof c!=`string`||c.length===0||l===null||!a.isAbsolute(c)||!await this.resolver.isExpectedInstallPath(l,e,t)?console.warn(`[ClientBinaryManager] Skipping removeDirectory: stored installPath "${String(c)}" does not match the expected install directory for ${e}@${t}`):await this.strategyDeps.removeDirectory(l).catch(n=>{console.warn(`[ClientBinaryManager] Failed to remove binary directory "${l}" for ${e}@${t}:`,n)}),o!==null&&s===null)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:o,activeVersion:null,reason:`uninstall`})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return{clientId:e,removedVersion:t,activeVersion:s}}finally{this.pendingClients.delete(e)}}async patchActiveVersion(e,t,n){let r=(await this.bus.request(M.setActiveVersion,{clientId:e,activeVersion:t,updatedAt:Date.now()})).previousActiveVersion;if(r!==t)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:r,activeVersion:t,reason:n})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return r}requireManagedDefinition(e,t){let n=this.definitionLookup.getDefinition(e);if(n===void 0)throw Error(`${t}: no definition registered for client '${e}'`);let r=n.managedInstall;if(r===void 0)throw Error(`${t}: client '${e}' does not declare a managed install descriptor`);return{definition:n,descriptor:r}}async withClientLock(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{return await t()}catch(t){throw this.pendingClients.delete(e),t}}startInstallJob(e,t,n,r,i,a){let o={jobId:crypto.randomUUID(),clientId:e,version:t,strategy:n.type,status:`pending`,makeActive:i,reason:a};return this.jobRunner.startJob(o,n,e=>{this.bus.emit(w.installJob.progress,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.progress:`,e)})},this.makeCompletionCallback(),async e=>{this.pendingClients.delete(e.clientId),await this.bus.emit(w.installJob.completed,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.completed:`,e)})},r.postInstall,F(r.versionCommand)),o.jobId}makeCompletionCallback(){return async({clientId:e,version:t,installPath:n,makeActive:r,reason:i})=>{let a=Date.now();await T(this.bus,{clientId:e,configDir:this.resolveManagedConfigDir(e),phase:`managed-install`,binaryVersion:t});let o=await this.bus.request(M.recordInstalledVersion,{versionRecord:{id:crypto.randomUUID(),clientId:e,version:t,installPath:n,installedAt:a,createdAt:a},makeActive:r,updatedAt:a});if(r&&o.previousActiveVersion!==o.activeVersion)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:o.previousActiveVersion,activeVersion:o.activeVersion,reason:i})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}}}resolveManagedConfigDir(e){return a.join(this.resolvedConfigBasePath,e,`config`)}};function I(e,t){return`${e}${t}`}function L(e,t){return`${e}${t}`}var Be=class{records=new Map;bySupervisorSessionId=new Map;byPidClientId=new Map;byAdapterSessionClientId=new Map;adapterOwnedSessions=new Set;set(e){let t=this.records.get(e.clientRuntimeId);t&&this.removeIndexEntries(t),this.records.set(e.clientRuntimeId,e),this.addIndexEntries(e)}setFromStorage(e,t,n){this.records.set(e.clientRuntimeId,e),e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),t-e.updatedAt<=n&&(e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId))}delete(e){let t=this.records.get(e);t&&(this.removeIndexEntries(t),t.adapterSessionId!==void 0&&this.adapterOwnedSessions.delete(L(t.adapterSessionId,t.clientId)),this.records.delete(e))}get(e){return this.records.get(e)}findByEvidence(e,t,n,r){if(e!==void 0){let t=this.bySupervisorSessionId.get(e);if(t!==void 0)return this.records.get(t)}if(t!==void 0){let e=this.byPidClientId.get(I(t,r));if(e!==void 0)return this.records.get(e)}if(n!==void 0){let e=this.byAdapterSessionClientId.get(L(n,r));if(e!==void 0)return this.records.get(e)}}values(){return this.records.values()}clear(){this.records.clear(),this.bySupervisorSessionId.clear(),this.byPidClientId.clear(),this.byAdapterSessionClientId.clear(),this.adapterOwnedSessions.clear()}markAdapterOwned(e,t){this.adapterOwnedSessions.add(L(e,t))}hasAdapterSession(e,t){return this.adapterOwnedSessions.has(L(e,t))}get size(){return this.records.size}addIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId)}removeIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.delete(e.supervisorSessionId),e.pid!==void 0&&this.byPidClientId.delete(I(e.pid,e.clientId)),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.delete(L(e.adapterSessionId,e.clientId))}};const R=[`observed`,`started`],z=r.object({clientRuntimeId:r.string(),clientId:r.string(),status:r.enum(R),supervisorSessionId:r.string().optional(),pid:r.number().int().positive().optional(),parentPid:r.number().int().positive().optional(),adapterSessionId:r.string().optional(),sessionId:r.string().optional(),cwd:r.string().optional(),argv:r.array(r.string()).optional(),metadata:r.record(r.string(),r.unknown()).optional(),observedAt:r.number().int().nonnegative(),createdAt:r.number().int().nonnegative(),updatedAt:r.number().int().nonnegative()}),B=s(`client-runtime:storage`,{upsert:{request:z,response:r.object({success:r.boolean()})},loadAll:{request:r.object({}),response:r.object({records:r.array(z)})}}),V=B.subjects;function Ve(e){return e.supervisorSessionId!==void 0||e.adapterSessionId!==void 0}function H(e){return{...e,argv:e.argv===void 0?void 0:[...e.argv],metadata:e.metadata===void 0?void 0:structuredClone(e.metadata)}}function He(e){return Math.max(Date.now(),e+1)}function Ue(e,t){let n=!1;return t.supervisorSessionId!==void 0&&e.supervisorSessionId!==t.supervisorSessionId&&(e.supervisorSessionId=t.supervisorSessionId,n=!0),t.pid!==void 0&&e.pid!==t.pid&&(e.pid=t.pid,n=!0),t.parentPid!==void 0&&e.parentPid!==t.parentPid&&(e.parentPid=t.parentPid,n=!0),t.adapterSessionId!==void 0&&e.adapterSessionId!==t.adapterSessionId&&(e.adapterSessionId=t.adapterSessionId,n=!0),t.sessionId!==void 0&&e.sessionId!==t.sessionId&&(e.sessionId=t.sessionId,n=!0),t.cwd!==void 0&&e.cwd!==t.cwd&&(e.cwd=t.cwd,n=!0),t.argv!==void 0&&JSON.stringify(e.argv)!==JSON.stringify(t.argv)&&(e.argv=[...t.argv],n=!0),t.metadata!==void 0&&JSON.stringify(e.metadata)!==JSON.stringify(t.metadata)&&(e.metadata=structuredClone(t.metadata),n=!0),n}var We=class{runtimeMap=new Be;bus;constructor(e){this.bus=e}async loadFromStorage(){if(!this.bus)return;let e=await this.bus.requestOptional(V.loadAll,{});if(!e.handled)return;let t=Date.now();for(let n of e.data.records)this.runtimeMap.setFromStorage(H(n),t,864e5)}async upsertRuntime(e){let t=this.runtimeMap.findByEvidence(e.supervisorSessionId,e.pid,e.adapterSessionId,e.clientId);if(t){let n=t.status===`observed`,r=n&&Ve(e),i=Ue(t,e),a=n&&e.observedAt>t.observedAt;return r&&(t.status=`started`),(i||r||a)&&(t.updatedAt=He(t.updatedAt),a&&(t.observedAt=e.observedAt),this.runtimeMap.set(t),await this.persistRecord(t)),{clientRuntimeId:t.clientRuntimeId,created:!1,promoted:r,record:H(t)}}let n=Date.now(),r=o(),i=Ve(e)?`started`:`observed`,a={clientRuntimeId:r,clientId:e.clientId,status:i,supervisorSessionId:e.supervisorSessionId,pid:e.pid,parentPid:e.parentPid,adapterSessionId:e.adapterSessionId,sessionId:e.sessionId,cwd:e.cwd,argv:e.argv?[...e.argv]:void 0,metadata:e.metadata?structuredClone(e.metadata):void 0,observedAt:e.observedAt,createdAt:n,updatedAt:n};return this.runtimeMap.set(a),await this.persistRecord(a),{clientRuntimeId:r,created:!0,promoted:!1,record:H(a)}}getRuntime(e){let t=this.runtimeMap.get(e);return t?H(t):void 0}markAdapterOwned(e,t){this.runtimeMap.markAdapterOwned(e,t)}hasAdapterSession(e,t){return this.runtimeMap.hasAdapterSession(e,t)}clear(){this.runtimeMap.clear()}get size(){return this.runtimeMap.size}async persistRecord(e){this.bus&&await this.bus.requestOptional(V.upsert,H(e))}};const U=r.object({eventName:r.string(),receivedAt:r.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`),payload:r.record(r.string(),r.unknown()),metadata:r.record(r.string(),r.unknown()).optional()}),Ge=/^[a-z0-9-]+$/;function W(e,t=`canonicalizeClientId`){let n=e.trim().toLowerCase(),r=n.startsWith(`client:`)?n.slice(7):n;if(r.length===0)throw Error(`[${t}] clientId must be a non-empty string`);if(!Ge.test(r))throw Error(`[${t}] clientId must contain only lowercase letters, numbers, and hyphens after an optional client: prefix`);return r}function Ke(e){return{subject:`hook.received`,$meta:{namespace:`client:${W(e,`createRawClientHookReceivedSubject`)}`,isRequest:!1,local:!1,channel:!1}}}const qe=5e3,Je=r.object({exitCode:r.number().int().min(0).max(255).default(0),stdout:r.string().default(``),stderr:r.string().default(``)}),Ye=Object.freeze({exitCode:0,stdout:``,stderr:``});function Xe(e){return{subject:`hook.handle`,$meta:{namespace:`client:${W(e,`createRawClientHookHandleSubject`)}`,isRequest:!0,local:!1,channel:!1,hostLocalRequest:!0}}}function Ze(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function Qe(e,t){return Ze(e[t])}function $e(e){return{clientId:e.clientId,source:`adapter-derived`,observedAt:Date.now(),...e.sessionId!==void 0&&{sessionId:e.sessionId},...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}}function et(e){try{e().catch(tt)}catch(e){tt(e)}}function tt(e){(process.env.DEBUG||process.env.MAKAIO_DEBUG)&&console.debug(`[emitBestEffort] observed-semantics emission failed`,e)}function nt(e,t){return{subject:t,$meta:{namespace:`client:${W(e,`createClientWiringSubjectDef`)}`,isRequest:!0,local:!1,channel:!1}}}function rt(e){return nt(e,`wiring.list`)}const it=r.string().min(1).refine(a.isAbsolute,{message:`projectDir must be an absolute path`}),at=r.object({entries:r.array(le)}),ot=r.object({applied:r.number().int().nonnegative(),skipped:r.number().int().nonnegative()}),st=r.object({removed:r.number().int().nonnegative()}),ct=r.object({clientId:r.string().trim().min(1),entries:r.array(le)});function lt(e){if(e!==void 0&&!a.isAbsolute(e))throw Error(`projectDir must be an absolute path, got: ${e}`)}var ut=class extends p{accountRegistry;runtimeRegistry;latestSnapshots=new Map;activeIdentities=new Map;constructor(e=l,t=new we,n=new We(e)){super(e),this.accountRegistry=t,this.runtimeRegistry=n}async onInit(){await this.runtimeRegistry.loadFromStorage(),this.registerHandler(w.account.observe,e=>this.handleAccountObserve(e)),this.registerHandler(w.usage.ingest,e=>this.handleUsageIngest(e)),this.registerHandler(w.scan,async e=>{let t=await this.scanClients(e.payload.targets);e.setResult({results:t})}),this.registerHandler(w.runtime.observe,e=>this.handleRuntimeObserve(e)),this.registerHandler(w.runtime.isAdapterManaged,e=>{let{adapterSessionId:t,clientId:n}=e.payload;e.setResult({managed:this.runtimeRegistry.hasAdapterSession(t,n)})}),this.registerHandler(w.wiring.list,async e=>{let t=await this.listWirings(e.payload);e.setResult({results:t})}),this.registerHandler(w.account.activate,e=>{this.activeIdentities.set(e.payload.clientId,{clientAccountId:e.payload.clientAccountId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),e.setResult({accepted:!0})}),this.registerHandler(w.account.getActive,e=>{let t=this.activeIdentities.get(e.payload.clientId);e.setResult({identity:t??null})})}onDestroy(){this.latestSnapshots.clear(),this.activeIdentities.clear(),this.accountRegistry.clear(),this.runtimeRegistry.clear()}getLatestSnapshot(e){return this.latestSnapshots.get(e)}async handleAccountObserve(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),n=this.latestSnapshots.get(t.clientAccountId),r=pt(this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds)??n,t.displayLabel);r&&this.latestSnapshots.set(t.clientAccountId,r),r&&(t.mergedAccountIds.length>0||r!==n)&&await this.bus.emit(w.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,displayLabel:t.displayLabel})}async handleUsageIngest(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.account.identifiers,displayLabel:e.payload.account.displayLabel});this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds);let n=dt(t.clientAccountId,e.payload,t.displayLabel),r=pt(ft(this.latestSnapshots.get(t.clientAccountId),n),t.displayLabel);this.latestSnapshots.set(t.clientAccountId,r),await this.bus.emit(w.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,snapshot:r})}async handleRuntimeObserve(e){let{payload:t}=e;if(t.supervisorSessionId===void 0&&t.pid===void 0&&t.adapterSessionId===void 0)throw Error(`client.runtime.observe: at least one hard-evidence field is required (supervisorSessionId, pid, or adapterSessionId)`);let{record:n,...r}=await this.runtimeRegistry.upsertRuntime(t);t.source.layer===`adapter`&&t.adapterSessionId!==void 0&&this.runtimeRegistry.markAdapterOwned(t.adapterSessionId,t.clientId),(r.created||r.promoted)&&await this.bus.emit(w.runtime.started,{clientRuntimeId:n.clientRuntimeId,clientId:n.clientId,status:n.status,source:t.source,observedAt:t.observedAt,supervisorSessionId:n.supervisorSessionId,pid:n.pid,parentPid:n.parentPid,adapterSessionId:n.adapterSessionId,sessionId:n.sessionId,cwd:n.cwd,argv:n.argv,metadata:n.metadata}),e.setResult({clientRuntimeId:r.clientRuntimeId,created:r.created,promoted:r.promoted})}async scanClients(e){let t=e??await this.listScannableStoredClients();if(t.length===0)return[];let n=Array.from(new Set(t.map(e=>e.binaryName))),{results:r}=await this.bus.request(_e.scan,{binaries:n}),i=new Map(r.map(e=>[e.binary,e]));return t.map(e=>{let t=i.get(e.binaryName),n=t?.found??!1,r=t?.version,a=t?.path;return{clientId:e.clientId,found:n,...a!==void 0&&{binaryPath:a},version:r,warningMessage:ht(n,r,e.supportedVersions)}})}async listScannableStoredClients(){let{clients:e}=await this.bus.request(ve.list,{});return e.filter(mt).map(e=>({clientId:e.id,binaryName:e.binary.name,supportedVersions:e.binary.supportedVersions}))}async listWirings(e){lt(e.projectDir);let{clients:t}=await this.bus.request(ve.list,{}),n=e.clientId===void 0?void 0:W(e.clientId,`listWirings`),r=t.filter(e=>e.enabled).filter(e=>n===void 0||e.id===n),i=await Promise.allSettled(r.map(async t=>{let n=rt(t.id),r=await this.bus.requestOptional(n,{projectDir:e.projectDir,makaioCommand:e.makaioCommand});return r.handled?{clientId:t.id,entries:r.data.entries}:null}));for(let e=0;e<i.length;e++){let t=i[e];if(t.status===`rejected`){let n=t.reason instanceof Error?t.reason.message:String(t.reason);console.warn(`[ClientRuntimeService] wiring.list for ${r[e].id} failed: ${n}`)}}return i.filter(e=>e.status===`fulfilled`).map(e=>e.value).filter(e=>e!==null)}consolidateMergedSnapshots(e,t){let n=this.latestSnapshots.get(e),r=!1;for(let i of t){if(i===e)continue;let t=this.latestSnapshots.get(i);t&&(n===void 0||t.observedAt>n.observedAt)&&(n={...t,clientAccountId:e},r=!0),this.latestSnapshots.delete(i)}return n&&this.latestSnapshots.set(e,n),r?n:void 0}};function dt(e,t,n){return{clientAccountId:e,clientId:t.clientId,observedAt:t.observedAt,source:t.source,displayLabel:n,usage:{windows:t.usage.windows.map(e=>({...e}))},metadata:t.metadata?{...t.metadata}:void 0}}function ft(e,t){return e&&e.observedAt>t.observedAt?e:t}function pt(e,t){return!e||t===void 0||e.displayLabel===t?e:{...e,displayLabel:t}}function mt(e){return e.enabled&&e.binary!==void 0}function ht(e,t,n){if(e&&t!==void 0&&t!==`unknown`&&n!==void 0&&!f(t,n))return`Unsupported version: requires ${n}`}var gt=class extends p{constructor(e=l){super(e)}onInit(){this.registerHandler(w.config.prime,async e=>{e.setResult(await T(this.bus,e.payload))})}};const G=se,K=r.string().trim().min(1),_t=s(`client-profile:storage`,{get:{request:r.object({clientId:K,name:C}),response:r.object({record:G.nullable()})},getById:{request:r.object({id:K}),response:r.object({record:G.nullable()})},list:{request:r.object({clientId:K}),response:r.object({records:r.array(G)})},set:{request:G,response:r.object({success:r.boolean()})},delete:{request:r.object({clientId:K,name:C}),response:r.object({success:r.boolean()})},clearDefault:{request:r.object({clientId:K}),response:r.object({success:r.boolean()})},setDefault:{request:r.object({clientId:K,name:C}),response:r.object({record:G.nullable()})}}),q=_t.subjects;function vt(e,t,n){let r=a.resolve(e),i=a.resolve(t),o=a.relative(r,i);if(o!==``&&!o.startsWith(`..`)&&!a.isAbsolute(o))return i;throw Error(`${n} refused to access path outside client profile root`)}var yt=class extends p{clientsBasePath;constructor(e,t){super(e),this.clientsBasePath=t}async onInit(){this.registerCreateHandler(),this.registerListHandler(),this.registerGetHandler(),this.registerUpdateHandler(),this.registerDeleteHandler(),this.registerSetDefaultHandler()}registerCreateHandler(){this.registerHandler(w.profile.create,async e=>{let t=W(e.payload.clientId,`profile.create`),{name:n,description:r}=e.payload;if((await this.bus.request(q.get,{clientId:t,name:n})).record!==null)throw Error(`Profile '${n}' already exists for client '${t}'`);let s=a.join(this.clientsBasePath,t,`profiles`),c=vt(s,a.join(s,n),`profile.create`);await i.mkdir(c,{recursive:!0});try{await T(this.bus,{clientId:t,configDir:c,phase:`profile-create`});let i=Date.now(),a={id:o(),clientId:t,name:n,description:r??null,configDir:c,isDefault:!1,createdAt:i,updatedAt:i};await this.bus.request(q.set,a),e.setResult({profile:a})}catch(e){throw await i.rm(c,{recursive:!0,force:!0}),e}})}registerListHandler(){this.registerHandler(w.profile.list,async e=>{let t=W(e.payload.clientId,`profile.list`),n=await this.bus.request(q.list,{clientId:t});e.setResult({profiles:n.records})})}registerGetHandler(){this.registerHandler(w.profile.get,async e=>{let t=W(e.payload.clientId,`profile.get`),n=await this.bus.request(q.get,{clientId:t,name:e.payload.name});e.setResult({profile:n.record})})}registerUpdateHandler(){this.registerHandler(w.profile.update,async e=>{let t=W(e.payload.clientId,`profile.update`),{name:n,description:r}=e.payload,i=await this.bus.request(q.get,{clientId:t,name:n});if(i.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);let a={...i.record,description:r===void 0?i.record.description:r,updatedAt:Date.now()};await this.bus.request(q.set,a),e.setResult({profile:a})})}registerDeleteHandler(){this.registerHandler(w.profile.delete,async e=>{let t=W(e.payload.clientId,`profile.delete`),{name:n}=e.payload,r=await this.bus.request(q.get,{clientId:t,name:n});r.record!==null&&(vt(a.join(this.clientsBasePath,t,`profiles`),r.record.configDir,`profile.delete`),await i.rm(r.record.configDir,{recursive:!0,force:!0}));let o=await this.bus.request(q.delete,{clientId:t,name:n});e.setResult({success:o.success})})}registerSetDefaultHandler(){this.registerHandler(w.profile.setDefault,async e=>{let t=W(e.payload.clientId,`profile.setDefault`),{name:n}=e.payload,r=await this.bus.request(q.setDefault,{clientId:t,name:n});if(r.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);e.setResult({profile:r.record})})}};function bt(e){return{subject:`sessionConfig.setup`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}function xt(e){return{subject:`sessionConfig.destroy`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}const St=()=>Date.now();function Ct(){let e=ge.platform();if(e===`darwin`||e===`linux`||e===`win32`)return e;throw Error(`client.sessionConfig does not support platform '${e}'`)}function wt(e,t,n){let r=de.safeParse(t);if(!r.success)throw Error(`${n} received an unsafe lease ID`);let i=a.resolve(e),o=a.resolve(i,r.data),s=a.relative(i,o);if(s===``||!s.startsWith(`..`)&&!a.isAbsolute(s))return o;throw Error(`${n} refused to access path outside client sessions root`)}var Tt=class extends p{clientsBasePath;getNow;liveLeasesByClient=new Map;liveLeasesByOwner=new Map;constructor(e,t,n=St){super(e),this.clientsBasePath=t,this.getNow=n}async onInit(){this.registerCreateHandler(),this.registerHandler(w.sessionConfig.destroy,async e=>{let{clientId:t,leaseId:n}=e.payload,r=W(t,`sessionConfig.destroy`),i=this.resolveClientSessionDir(r,n,`sessionConfig.destroy`),a=this.getLiveLease(r,n);a===void 0?await this.destroyClientSessionDir(r,i):await this.releaseLiveLease(a),e.setResult({success:!0})}),this.registerHandler(w.sessionConfig.cleanup,async e=>{let{clientId:t}=e.payload,n=t===void 0?void 0:W(t,`sessionConfig.cleanup`),r=await this.cleanupOrphanedDirs(n);e.setResult({removed:r})}),this.registerHandler(ye.closed,async e=>{await this.destroyOwnedLeases(e.payload.sessionId)}),await this.cleanupOrphanedDirs()}registerCreateHandler(){this.registerHandler(w.sessionConfig.create,async e=>{let{clientId:t,leaseId:n,ownerSessionId:r,profileName:a,baseConfigDir:o,projectDir:s,configInheritance:c=`full`}=e.payload,l=W(t,`sessionConfig.create`),u=this.resolveClientSessionDir(l,n,`sessionConfig.create`),d=this.reserveLiveLease({clientId:l,leaseId:n,...r===void 0?{}:{ownerSessionId:r}});try{await i.mkdir(u,{recursive:!0});let t=await this.resolveBaseConfigDir(l,u,a,o),r=bt(l),f=await this.bus.requestOptional(r,{sessionDir:u,baseConfigDir:t,projectDir:s,platform:Ct(),configInheritance:c}),p=f.handled?f.data.env??{}:{},m=f.handled?f.data.authMaterialized:!1;if(await T(this.bus,{clientId:l,configDir:u,phase:`session-create`,projectDir:s}),d.releaseRequested)throw Error(`Config lease '${n}' was released while it was being created`);e.setResult({sessionDir:u,env:p,authMaterialized:m}),d.state=`ready`}catch(e){try{await this.beginLeaseCleanup(d)}catch(t){throw AggregateError([e,t],`Client session config creation and rollback both failed`)}throw e}finally{d.settleCreation(),d.state===`released`&&this.untrackLiveLease(d)}})}async resolveBaseConfigDir(e,t,n,r){if(r!==void 0)return r;if(n!==void 0){let t=await this.bus.request(q.get,{clientId:e,name:n});if(t.record!==null)return t.record.configDir;throw Error(`Profile '${n}' not found for client '${e}'`)}let i=(await this.bus.request(q.list,{clientId:e})).records.find(e=>e.isDefault);return i?i.configDir:t}async cleanupOrphanedDirs(e){let t=[],n=this.getNow(),r=e===void 0?await this.listClientIds():[e];return await Promise.all(r.map(async e=>{let r=a.join(this.clientsBasePath,e,`sessions`),o=await i.readdir(r).catch(()=>[]);await Promise.all(o.map(async a=>{if(!de.safeParse(a).success)return;let o=wt(r,a,`sessionConfig.cleanup`),s;try{s=await i.stat(o)}catch(e){let t=e.code;if(t===`ENOENT`||t===`ENOTDIR`)return;throw e}let c=s.birthtimeMs>0?s.birthtimeMs:s.ctimeMs;s.isDirectory()&&n-c>36e5&&!this.isLiveLease(e,a)&&(await this.destroyClientSessionDir(e,o),t.push(o))}))})),t}async destroyOwnedLeases(e){let t=[...this.liveLeasesByOwner.get(e)??[]],n=(await Promise.allSettled(t.map(async e=>{this.getLiveLease(e.clientId,e.leaseId)===e&&await this.releaseLiveLease(e)}))).flatMap(e=>e.status===`rejected`?[e.reason]:[]);if(n.length>0)throw AggregateError(n,`Failed to release config leases owned by session '${e}'`)}async destroyClientSessionDir(e,t){try{await this.bus.requestOptional(xt(e),{sessionDir:t,platform:Ct()})}finally{await i.rm(t,{recursive:!0,force:!0})}}isLiveLease(e,t){return this.getLiveLease(e,t)!==void 0}getLiveLease(e,t){return this.liveLeasesByClient.get(e)?.get(t)}resolveClientSessionDir(e,t,n){return wt(a.join(this.clientsBasePath,e,`sessions`),t,n)}reserveLiveLease(e){if(this.isLiveLease(e.clientId,e.leaseId))throw Error(`Config lease '${e.leaseId}' is already active for client '${e.clientId}'`);let t=Promise.withResolvers(),n={...e,state:`creating`,releaseRequested:!1,creationSettled:t.promise,settleCreation:()=>t.resolve()},r=this.liveLeasesByClient.get(n.clientId)??new Map;if(r.set(n.leaseId,n),this.liveLeasesByClient.set(n.clientId,r),n.ownerSessionId!==void 0){let e=this.liveLeasesByOwner.get(n.ownerSessionId)??new Set;e.add(n),this.liveLeasesByOwner.set(n.ownerSessionId,e)}return n}async releaseLiveLease(e){if(this.getLiveLease(e.clientId,e.leaseId)!==e){e.releasePromise!==void 0&&await e.releasePromise;return}if(e.releaseRequested=!0,e.state===`creating`){await e.creationSettled,e.releasePromise!==void 0&&await e.releasePromise;return}await this.beginLeaseCleanup(e)}beginLeaseCleanup(e){if(e.releasePromise!==void 0)return e.releasePromise;if(this.getLiveLease(e.clientId,e.leaseId)!==e)return Promise.resolve();let t=e.state===`creating`;e.state=`releasing`;let n=this.resolveClientSessionDir(e.clientId,e.leaseId,`sessionConfig.release`);return e.releasePromise=this.destroyClientSessionDir(e.clientId,n).finally(()=>{e.state=`released`,t||this.untrackLiveLease(e)}),e.releasePromise}untrackLiveLease(e){let t=this.liveLeasesByClient.get(e.clientId);if(t?.get(e.leaseId)===e&&(t.delete(e.leaseId),t.size===0&&this.liveLeasesByClient.delete(e.clientId),e.ownerSessionId!==void 0)){let t=this.liveLeasesByOwner.get(e.ownerSessionId);t?.delete(e),t?.size===0&&this.liveLeasesByOwner.delete(e.ownerSessionId)}}async listClientIds(){return(await i.readdir(this.clientsBasePath,{withFileTypes:!0}).catch(()=>[])).filter(e=>e.isDirectory()).map(e=>e.name)}};const Et=new Set([`hook.received`,`hook.handle`]);function Dt(e,t){return l.registerNamespace(s(`client:${e}`,{"hook.received":U,"hook.handle":c({request:U,response:Je}),...t})).subjects}function Ot(e,t){let n=Object.keys(t).filter(e=>Et.has(e));if(n.length===0)return;let r=n.join(`, `);throw Error([`[createClientNamespace] additionalSchemas for client:${e}`,`cannot override reserved shared hook subjects: ${r}`].join(` `))}function kt(e,t){let n=e;for(let e of t.split(`.`)){if(typeof n!=`object`||!n||!(e in n))return!1;n=n[e]}return!0}function At(e,t,n){let r=Object.keys(n).filter(e=>!kt(t,e));if(r.length!==0)throw Error(`[createClientNamespace] client:${e} was already registered without required subjects: ${r.join(`, `)}`)}function jt(e,t){let n=W(e,`createClientNamespace`),r=t??{};Ot(n,r);let i=Dt(n,r);return At(n,i,r),{namespaceDomain:`client:${n}`,subjects:i}}const Mt=_(`client_runtimes`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),status:e.text(`status`).notNull(),supervisorSessionId:e.text(`supervisor_session_id`),pid:e.int4(`pid`),parentPid:e.int4(`parent_pid`),adapterSessionId:e.text(`adapter_session_id`),sessionId:e.text(`session_id`),cwd:e.text(`cwd`),argv:e.jsonCol(`argv`),metadata:e.jsonCol(`metadata`),observedAt:e.epochMs(`observed_at`).notNull(),createdAt:e.epochMs(`created_at`).notNull(),updatedAt:e.epochMs(`updated_at`).notNull()}),{sqlite:e=>[m(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),m(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),m(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)],postgres:e=>[h(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),h(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),h(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)]}),Nt=Mt.sqlite,Pt=Mt.postgres,Ft=g({clientRuntimes:Nt},{clientRuntimes:Pt}),It=new Set(R);function Lt(e){if(!It.has(e.status))throw Error(`Unknown ClientRuntimeStatus in DB: '${e.status}'`);return{clientRuntimeId:e.id,clientId:e.clientId,status:e.status,supervisorSessionId:e.supervisorSessionId??void 0,pid:e.pid??void 0,parentPid:e.parentPid??void 0,adapterSessionId:e.adapterSessionId??void 0,sessionId:e.sessionId??void 0,cwd:e.cwd??void 0,argv:e.argv??void 0,metadata:e.metadata??void 0,observedAt:e.observedAt,createdAt:e.createdAt,updatedAt:e.updatedAt}}function Rt(e,t){let{clientRuntimes:n}=y(t,Ft),r=e.on(V.upsert,async e=>{let r=e.payload,i={clientId:r.clientId,status:r.status,supervisorSessionId:r.supervisorSessionId??null,pid:r.pid??null,parentPid:r.parentPid??null,adapterSessionId:r.adapterSessionId??null,sessionId:r.sessionId??null,cwd:r.cwd??null,argv:r.argv??null,metadata:r.metadata??null,observedAt:r.observedAt,updatedAt:r.updatedAt};await t.insert(n).values({id:r.clientRuntimeId,createdAt:r.createdAt,...i}).onConflictDoUpdate({target:n.id,set:i,setWhere:oe(S`excluded.updated_at`,n.updatedAt)}),e.setResult({success:!0})}),i=e.on(V.loadAll,async e=>{let r=await t.select().from(n);e.setResult({records:r.map(Lt)})});return()=>{r(),i()}}const zt=_(`client_binary_versions`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),version:e.text(`version`).notNull(),installPath:e.text(`install_path`).notNull(),installedAt:e.epochMs(`installed_at`).notNull(),createdAt:e.epochMs(`created_at`).notNull()}),{sqlite:e=>[ee(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)],postgres:e=>[ne(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)]}),Bt=zt.sqlite,Vt=_(`client_binary_state`,e=>({clientId:e.text(`client_id`).primaryKey(),activeVersion:e.text(`active_version`),updatedAt:e.epochMs(`updated_at`).notNull()})),Ht=Vt.sqlite,Ut=zt.postgres,Wt=Vt.postgres,J=g({clientBinaryVersions:Bt,clientBinaryState:Ht},{clientBinaryVersions:Ut,clientBinaryState:Wt});function Y(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}function X(e){return{clientId:e.clientId,activeVersion:e.activeVersion??null,updatedAt:e.updatedAt}}function Gt(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}async function Kt(e,t,n){await e.insert(n).values(Gt(t)).onConflictDoNothing({target:[n.clientId,n.version]})}function qt(e,t,n){return{clientId:e,activeVersion:t,updatedAt:n}}async function Jt(e,t,n,r,i){await e.insert(i).values(qt(t,n,r)).onConflictDoUpdate({target:i.clientId,set:{activeVersion:n,updatedAt:r}})}async function Yt(e,t){let{clientBinaryVersions:n}=y(e,J);await Kt(e,t,n)}async function Xt(e,t,n,r){let{clientBinaryVersions:i,clientBinaryState:a}=y(e,J);return v(e,async e=>{let[o]=await e.select().from(a).where(x(a.clientId,t.clientId)).limit(1),s=o?.activeVersion??null;return await Kt(e,t,i),n?(await Jt(e,t.clientId,t.version,r,a),{previousActiveVersion:s,activeVersion:t.version}):{previousActiveVersion:s,activeVersion:s}})}async function Zt(e,t){let{clientBinaryVersions:n,clientBinaryState:r}=y(e,J);return v(e,async e=>{let[i]=await e.select().from(r).where(x(r.clientId,t)).limit(1),a=await e.select().from(n).where(x(n.clientId,t));return{state:i?X(i):null,versions:a.map(Y)}})}async function Qt(e){let{clientBinaryVersions:t,clientBinaryState:n}=y(e,J);return v(e,async e=>{let r=await e.select().from(n),i=await e.select().from(t);return{states:r.map(X),versions:i.map(Y)}})}async function $t(e,t){let{clientBinaryState:n}=y(e,J),r={clientId:t.clientId,activeVersion:t.activeVersion??null,updatedAt:t.updatedAt};await e.insert(n).values(r).onConflictDoUpdate({target:n.clientId,set:r})}async function en(e,t,n,r){let{clientBinaryState:i}=y(e,J);return v(e,async e=>{let[a]=await e.select().from(i).where(x(i.clientId,t)).limit(1),o=a?.activeVersion??null;return await Jt(e,t,n,r,i),{previousActiveVersion:o,activeVersion:n}})}async function tn(e,t,n,r){let{clientBinaryVersions:i,clientBinaryState:a}=y(e,J);return v(e,async e=>{let[o]=await e.select().from(a).where(x(a.clientId,t)).limit(1),s=o?.activeVersion??null;if(!ie(await e.delete(i).where(b(x(i.clientId,t),x(i.version,n)))))return{removedVersion:null,previousActiveVersion:s,activeVersion:s};await e.update(a).set({activeVersion:null,updatedAt:r}).where(b(x(a.clientId,t),x(a.activeVersion,n)));let[c]=await e.select().from(a).where(x(a.clientId,t)).limit(1);return{removedVersion:n,previousActiveVersion:s,activeVersion:c?.activeVersion??null}})}function nn(e,t){let{clientBinaryVersions:n,clientBinaryState:r}=y(t,J),i=[e.on(M.insertVersion,async e=>{await Yt(t,e.payload),e.setResult({success:!0})}),e.on(M.recordInstalledVersion,async e=>{let{versionRecord:n,makeActive:r,updatedAt:i}=e.payload,a=await Xt(t,n,r,i);e.setResult(a)}),e.on(M.listVersions,async e=>{let r=await t.select().from(n).where(x(n.clientId,e.payload.clientId));e.setResult({versions:r.map(Y)})}),e.on(M.getSnapshot,async e=>{let{state:n,versions:r}=await Zt(t,e.payload.clientId);e.setResult({state:n,versions:r})}),e.on(M.loadAllVersions,async e=>{let r=await t.select().from(n);e.setResult({versions:r.map(Y)})}),e.on(M.upsertState,async e=>{await $t(t,e.payload),e.setResult({success:!0})}),e.on(M.setActiveVersion,async e=>{let{clientId:n,activeVersion:r,updatedAt:i}=e.payload,a=await en(t,n,r,i);e.setResult(a)}),e.on(M.getState,async e=>{let[n]=await t.select().from(r).where(x(r.clientId,e.payload.clientId)).limit(1);e.setResult({state:n?X(n):null})}),e.on(M.loadAllState,async e=>{let n=await t.select().from(r);e.setResult({states:n.map(X)})}),e.on(M.loadSnapshot,async e=>{let{states:n,versions:r}=await Qt(t);e.setResult({states:n,versions:r})}),e.on(M.removeVersionAndClearActive,async e=>{let{clientId:n,version:r,updatedAt:i}=e.payload,a=await tn(t,n,r,i);e.setResult(a)})];return()=>{for(let e of i)e()}}const rn=_(`client_profiles`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),name:e.text(`name`).notNull(),description:e.text(`description`),configDir:e.text(`config_dir`).notNull(),isDefault:e.bool(`is_default`).notNull().default(!1),createdAt:e.epochMs(`created_at`).notNull(),updatedAt:e.epochMs(`updated_at`).notNull()}),{sqlite:e=>[te(`uq_client_profiles_client_name`).on(e.clientId,e.name),te(`uq_client_profiles_default`).on(e.clientId).where(S`${e.isDefault} = 1`)],postgres:e=>[re(`uq_client_profiles_client_name`).on(e.clientId,e.name),re(`uq_client_profiles_default`).on(e.clientId).where(S`${e.isDefault} = true`)]}),an=rn.sqlite,on=rn.postgres,sn=g({clientProfiles:an},{clientProfiles:on});function Z(e){return{id:e.id,clientId:e.clientId,name:e.name,description:e.description??null,configDir:e.configDir,isDefault:e.isDefault,createdAt:e.createdAt,updatedAt:e.updatedAt}}async function cn(e,t,n){let{clientProfiles:r}=y(e,sn),i=Date.now();return v(e,async e=>{let[a]=await e.select().from(r).where(b(x(r.clientId,t),x(r.name,n))).limit(1);if(a===void 0)return null;await e.update(r).set({isDefault:!1,updatedAt:i}).where(b(x(r.clientId,t),x(r.isDefault,!0))),await e.update(r).set({isDefault:!0,updatedAt:i}).where(b(x(r.clientId,t),x(r.name,n)));let[o]=await e.select().from(r).where(b(x(r.clientId,t),x(r.name,n))).limit(1);return o===void 0?null:Z(o)})}function ln(e,t){let{clientProfiles:n}=y(t,sn),r=[e.on(q.get,async e=>{let{clientId:r,name:i}=e.payload,[a]=await t.select().from(n).where(b(x(n.clientId,r),x(n.name,i))).limit(1);e.setResult({record:a?Z(a):null})}),e.on(q.getById,async e=>{let[r]=await t.select().from(n).where(x(n.id,e.payload.id)).limit(1);e.setResult({record:r?Z(r):null})}),e.on(q.list,async e=>{let r=await t.select().from(n).where(x(n.clientId,e.payload.clientId));e.setResult({records:r.map(Z)})}),e.on(q.set,async e=>{let r=e.payload,i={id:r.id,clientId:r.clientId,name:r.name,description:r.description??null,configDir:r.configDir,isDefault:r.isDefault,createdAt:r.createdAt,updatedAt:r.updatedAt};await t.insert(n).values(i).onConflictDoUpdate({target:n.id,set:{name:r.name,description:r.description??null,configDir:r.configDir,isDefault:r.isDefault,updatedAt:r.updatedAt}}),e.setResult({success:!0})}),e.on(q.delete,async e=>{let{clientId:r,name:i}=e.payload,a=await t.delete(n).where(b(x(n.clientId,r),x(n.name,i)));e.setResult({success:ie(a)})}),e.on(q.clearDefault,async e=>{await t.update(n).set({isDefault:!1,updatedAt:Date.now()}).where(b(x(n.clientId,e.payload.clientId),x(n.isDefault,!0))),e.setResult({success:!0})}),e.on(q.setDefault,async e=>{let{clientId:n,name:r}=e.payload,i=await cn(t,n,r);e.setResult({record:i})})];return()=>{for(let e of r)e()}}function un(e,t){return`${e}\0${t}`}function dn(e){let t=e=>typeof e==`string`&&e.trim().length>0;if(typeof e!=`object`||!e)throw Error(`Provider contract catalog must be an object`);if(!t(e.clientId)||!t(e.contractId)||!t(e.version))throw Error(`Provider contract catalog requires non-empty clientId, contractId, and version`);if(!Array.isArray(e.supportedInteractions)||e.supportedInteractions.length===0)throw Error(`Provider contract catalog requires supported interactions`);if(e.supportedInteractions.some(e=>!t(e))||new Set(e.supportedInteractions).size!==e.supportedInteractions.length)throw Error(`Provider contract catalog interactions must be non-empty and unique`);if(!Array.isArray(e.blockability)||e.blockability.length!==e.supportedInteractions.length)throw Error(`Provider contract catalog requires complete blockability metadata`);let n=new Map;for(let r of e.blockability){if(!t(r.interaction)||typeof r.blockable!=`boolean`||n.has(r.interaction))throw Error(`Provider contract catalog blockability metadata must be complete and unique`);n.set(r.interaction,r.blockable)}if(e.supportedInteractions.some(e=>!n.has(e))||typeof e.validate!=`function`)throw Error(`Provider contract catalog must provide blockability metadata and a validator for every interaction`)}var fn=class{entries=new Map;registerProviderContract(e,t){dn(t);let n=un(t.clientId,t.contractId),r=this.entries.get(n);if(r)throw Error(`Provider contract collision: contract '${t.contractId}' for client '${t.clientId}' is already registered by extension '${r.extensionId}'; extension '${e}' cannot claim it`);this.entries.set(n,{extensionId:e,catalog:t})}unregisterProviderContract(e,t,n){let r=un(t,n),i=this.entries.get(r);i&&i.extensionId===e&&this.entries.delete(r)}unregisterAllByExtension(e){for(let[t,n]of this.entries)n.extensionId===e&&this.entries.delete(t)}getProviderContract(e,t){let n=un(e,t);return this.entries.get(n)?.catalog}getProviderContractsByClient(e){let t=[];for(let n of this.entries.values())n.catalog.clientId===e&&t.push(n.catalog);return t}getAllProviderContracts(){return[...this.entries.values()].map(e=>e.catalog)}clear(){this.entries.clear()}};function pn(e,t){return`${e}/${t}`}function mn(e,t,n){switch(e.kind){case`event-name`:return e.name===t;case`capability`:return n.includes(e.capability)}}function hn(e,t){let n=t.definition.priority-e.definition.priority;return n===0?e.ordinal-t.ordinal:n}function gn(e){return Array.isArray(e)&&e.length>0&&e.every(e=>typeof e!=`object`||!e?!1:e.kind===`event-name`?typeof e.name==`string`&&e.name.trim().length>0:e.kind===`capability`&&typeof e.capability==`string`&&e.capability.trim().length>0)}function _n(e){return e.lane===`canonical`?e.clientIds===void 0||Array.isArray(e.clientIds)&&e.clientIds.length>0&&e.clientIds.every(e=>typeof e==`string`&&e.trim().length>0):e.lane===`provider`?typeof e.clientId==`string`&&e.clientId.trim().length>0&&typeof e.contractId==`string`&&e.contractId.trim().length>0:!1}function vn(e,t){if(typeof t!=`object`||!t||Array.isArray(t))return{code:`invalid-contributor-lane`,message:`Contributor definition must be an object`,extensionName:e};let n={...typeof t.id==`string`&&{contributorId:t.id},extensionName:e};if(!Number.isFinite(t.priority))return{...n,code:`invalid-priority`,message:`Contributor '${t.id}' priority must be a finite number`};if(!gn(t.selectors))return{...n,code:`invalid-selectors`,message:`Contributor '${t.id}' requires non-empty valid selectors`};if(typeof t.respond!=`function`)return{...n,code:`invalid-respond`,message:`Contributor '${t.id}' respond must be a function`};if(!_n(t))return{...n,code:`invalid-contributor-lane`,message:`Contributor '${t.id}' has an invalid lane or target identity`};if(!pe(t.id))return{...n,code:`invalid-contributor-id`,message:`Contributor ID is empty or invalid`};if(!me(t.timeoutMs))return{...n,code:`invalid-timeout-ms`,message:`Contributor '${t.id}' has an invalid timeoutMs: ${String(t.timeoutMs)}; must be a positive finite number`}}function yn(e,t,n,r){let i=[],a=new Set;for(let o of t){let t=vn(e,o);if(t){i.push(t);continue}let s=pn(e,o.id);if(a.has(s)){i.push({code:`invalid-contributor-id`,message:`Duplicate contributor ID '${o.id}' within the same extension batch '${e}'`,contributorId:o.id,extensionName:e});continue}if(r.has(s)){i.push({code:`invalid-contributor-id`,message:`Contributor ID '${o.id}' is already registered by extension '${e}'`,contributorId:o.id,extensionName:e});continue}a.add(s),bn(e,o,n,i)}return i}function bn(e,t,n,r){let i=t.failurePolicy??`open`;if(t.lane===`provider`){let a=n.getProviderContract(t.clientId,t.contractId);if(!a){r.push({code:`inactive-provider-contract`,message:`Provider contributor requires active contract '${t.contractId}' for client '${t.clientId}'`,contributorId:t.id,extensionName:e});return}xn(e,t,[a],i,r);return}xn(e,t,t.clientIds?t.clientIds.flatMap(e=>n.getProviderContractsByClient(e)):n.getAllProviderContracts(),i,r)}function xn(e,t,n,r,i){for(let a of t.selectors){let o=a.kind===`capability`?a.capability:a.name,s=n.filter(e=>e.supportedInteractions.includes(o));if((t.lane===`provider`||a.kind===`capability`)&&s.length===0){i.push({code:`unsupported-interaction`,message:`Interaction '${o}' is not supported by an eligible active provider contract`,contributorId:t.id,extensionName:e});continue}if(r===`closed`){if(s.length===0){i.push({code:`closed-policy-on-non-blockable`,message:`Closed failure policy requires blockability proof for interaction '${o}', but no contract declares it for an eligible active client`,contributorId:t.id,extensionName:e});continue}for(let n of s)for(let r of he([a],n))i.push({code:`closed-policy-on-non-blockable`,message:r,contributorId:t.id,extensionName:e})}}}var Sn=class{contractRegistry;contributors=new Map;extensionIndex=new Map;nextOrdinal=1;constructor(e){this.contractRegistry=e}installContributors(e,t){let n=yn(e,t,this.contractRegistry,this.contributors);if(n.length>0)return{errors:n};let r=this.extensionIndex.get(e)??new Set;for(let n of t){let t=pn(e,n.id),i=Object.freeze({...n,selectors:Object.freeze(n.selectors.map(e=>Object.freeze({...e})))}),a=Object.freeze({namespacedId:t,extensionId:e,ordinal:this.nextOrdinal,definition:i});this.nextOrdinal+=1,this.contributors.set(t,a),r.add(t)}return this.extensionIndex.set(e,r),{errors:[]}}removeContributors(e){let t=this.extensionIndex.get(e);if(t){for(let e of t)this.contributors.delete(e);this.extensionIndex.delete(e)}}snapshot(e,t,n,r=[]){let i=[];for(let a of this.contributors.values()){let{definition:o}=a;o.lane===`provider`&&(o.clientId!==e||o.contractId!==t)||o.lane===`canonical`&&o.clientIds!==void 0&&!o.clientIds.includes(e)||a.definition.selectors.some(e=>mn(e,n,r))&&i.push(a)}return i.sort(hn),Object.freeze(i)}clear(){this.contributors.clear(),this.extensionIndex.clear(),this.nextOrdinal=1}};function Cn(e,t){return{filter:e=>!!e.clientHookResponses,async processActivated(n,r,i){let a=r.clientHookResponses;if(!a)return;let o={extensionName:n,extensionContext:i,getProviderContract:(e,n)=>t.getProviderContract(e,n)},s;try{s=await a.createContributors(o)}catch(e){throw Error(`[ClientHookResponseContributionProcessor] createContributors failed for '${n}': ${e instanceof Error?e.message:String(e)}`,{cause:e})}let c=e.installContributors(n,s);if(c.errors.length>0){let e=c.errors.map(e=>`[${e.code}] ${e.contributorId??`<unknown>`}: ${e.message}`).join(`; `);throw Error(`[ClientHookResponseContributionProcessor] Contributor validation failed for '${n}': ${e}`)}},async processStopped(t){e.removeContributors(t)}}}var wn=class{runtimeService;binaryManager;configPrimeService;profileService;sessionConfigService;providerContractRegistry;hookResponseRegistry;constructor(e,t,n,r,i,a,o){this.runtimeService=e,this.binaryManager=t,this.configPrimeService=n,this.profileService=r,this.sessionConfigService=i,this.providerContractRegistry=a,this.hookResponseRegistry=o}async init(){let e=(await Promise.allSettled([this.runtimeService.init(),this.binaryManager.init(),this.configPrimeService.init(),this.profileService.init(),this.sessionConfigService.init()])).filter(e=>e.status===`rejected`);if(e.length>0){for(let t=1;t<e.length;t++)console.warn(`[ClientsCoreService] Multiple init failures, secondary:`,e[t].reason);throw e[0].reason}}async destroy(){let e=(await Promise.allSettled([this.runtimeService.destroy(),this.binaryManager.destroy(),this.configPrimeService.destroy(),this.profileService.destroy(),this.sessionConfigService.destroy()])).filter(e=>e.status===`rejected`);if(e.length>0)throw AggregateError(e.map(e=>e.reason),`ClientsCoreService failed to tear down cleanly`)}};const Tn=u(`makaio.clients-core`);function En(e){let t=[],n=()=>{for(let e of[...t].reverse())e()};try{for(let n of e)t.push(n())}catch(e){throw n(),e}return n}function Dn(e={}){let{definitions:t=[],strategyDependencies:n,postInstallHandlers:r,binaryResolutionPolicy:i}=e,o=[...t],s=new fn,c=new Sn(s);return{name:`makaio.clients-core`,displayName:`Clients Core`,version:`0.1.0`,critical:!0,namespaces:[j,B,_t],storage:{registerHandlers:ae((e,t)=>En([()=>Rt(e,t),()=>nn(e,t),()=>ln(e,t)]))},create:e=>{let t=new N(o),l=a.join(e.makaioHome,`clients`),u=new ze(e.bus,{basePath:a.join(e.makaioHome,`binaries`),configBasePath:l,postInstallHandlers:r,...i!==void 0&&{resolutionPolicy:i}},t,n),d=new yt(e.bus,l),f=new Tt(e.bus,l);return new wn(new ut(e.bus),u,new gt(e.bus),d,f,s,c)},runtimeBoot:{configure:e=>{e.registerContributionProcessor(Cn(c,s))}}}}async function On(e,t){let n=await e.requestOptional(w.resolveBinary,{clientId:t});return n.handled?n.data:void 0}function kn(e,t,n){return[...n??[],e,...t].map(Mn).join(` `)}function An(e,t,n,r,i){return kn(e,[...i??[],...t.split(` `),n],r)}function jn(e){return e.runtimeCapabilities.hookEvents.map(e=>({eventName:e.name,mode:fe(e)}))}function Mn(e){return/^[A-Za-z0-9_@%+=:,./-]+$/.test(e)?e:`'${e.replaceAll(`'`,`'\\''`)}'`}function Nn(e){if(e===void 0)return!0;if(!Array.isArray(e))return`canonicalEffects must be an array`;for(let t of e){if(typeof t!=`object`||!t||t.kind!==`context.append`||typeof t.value!=`string`)return`canonicalEffects must contain complete context.append effects`;if(Object.keys(t).some(e=>e!==`kind`&&e!==`value`))return`canonicalEffects must contain only kind and value`}return!0}function Pn(e,t,n){return e===void 0?!0:typeof e!=`object`||!e||Array.isArray(e)||e.clientId!==t||e.contractId!==n||typeof e.effects!=`object`||e.effects===null||Array.isArray(e.effects)?`providerEnvelope must contain the exact clientId, contractId, and an effects object`:Object.keys(e).some(e=>e!==`clientId`&&e!==`contractId`&&e!==`effects`)?`providerEnvelope must contain only clientId, contractId, and effects`:!0}function Fn(e,t,n,r,i,a){if(!r)return`Provider contributor requires active contract '${t.contractId}'`;if(r.clientId!==n||r.clientId!==t.clientId)return`Provider contract client '${r.clientId}' does not match '${t.clientId}'`;if(r.contractId!==t.contractId)return`Provider contract '${r.contractId}' does not match '${t.contractId}'`;let o=Pn(e.providerEnvelope,t.clientId,t.contractId);return o===!0?r.validate(e,{clientId:n,eventName:i,eventPayload:a}):o}function In(e,t,n,r,i,a){if(e===void 0)return!0;if(typeof e!=`object`||!e||Array.isArray(e))return`Contributor response must be an object or undefined`;let o=t.lane===`canonical`?[`canonicalEffects`]:[`providerEnvelope`];return Object.keys(e).some(e=>!o.includes(e))?`Contributor response contains keys outside the ${t.lane} lane`:t.lane===`canonical`?Nn(e.canonicalEffects):Fn(e,t,n,r,i,a)}const Q=Symbol(`contributor-timeout`);function Ln(e){return e.failurePolicy??ue}function Rn(e){return e.namespacedId??e.definition.id}function $(e,t){return e===`closed`?`closed-failure`:t}function zn(e){if(!e)return;let t=[];return e.canonicalEffects&&t.push(...e.canonicalEffects),e.providerEnvelope&&t.push(e.providerEnvelope),t.length>0?t:void 0}function Bn(e,t,n){let r=t-Date.now();return r<=0||n.signal.aborted?(n.abort(Error(`Contributor deadline expired`)),Promise.resolve(Q)):new Promise((i,a)=>{let o=!1,s=e=>{o||(o=!0,clearTimeout(c),n.signal.removeEventListener(`abort`,l),i(e))},c=setTimeout(()=>{n.abort(Error(`Contributor timeout`)),s(Q)},r),l=()=>s(Q);n.signal.addEventListener(`abort`,l,{once:!0}),e.then(e=>{Date.now()>=t?(n.abort(Error(`Contributor timeout`)),s(Q)):s(e)},e=>{o||(o=!0,clearTimeout(c),n.signal.removeEventListener(`abort`,l),a(e))})})}function Vn(e){let t=[],n=[],r=`Request deadline already expired before collection started`;for(let i of e){let e=Rn(i),a=$(Ln(i.definition),`timeout`);t.push({contributorId:e,outcome:a,durationMs:0}),n.push({contributorId:e,severity:`error`,message:r})}let i=t.find(e=>e.outcome===`closed-failure`);return{outcomes:t,diagnostics:n,closedFailure:i?{contributorId:i.contributorId,detail:r}:void 0}}function Hn(e,t){if(t.aborted){e.abort(t.reason);return}let n=()=>{e.abort(t.reason)};t.addEventListener(`abort`,n,{once:!0}),e.signal.addEventListener(`abort`,()=>{t.removeEventListener(`abort`,n)},{once:!0})}function Un(e,t,n,r,i,a){let{definition:o}=e,s=Rn(e),c=Date.now(),l=c+o.timeoutMs,u=n===void 0?l:Math.min(n,l),d=u-c,f=new AbortController;r&&Hn(f,r);let p={clientId:t,deadline:u,remainingBudgetMs:d,signal:f.signal,eventName:i,eventPayload:a};if(f.signal.aborted)return{contributorId:s,definition:o,startMs:c,abort:f,settled:Promise.resolve({tag:`timeout`})};let m;try{let e=o.respond(p);m=e instanceof Promise?e:Promise.resolve(e)}catch(e){m=Promise.reject(e)}return{contributorId:s,definition:o,startMs:c,abort:f,settled:Bn(m,u,f).then(e=>e===Q?{tag:`timeout`}:{tag:`ok`,response:e},e=>({tag:`rejected`,error:e}))}}function Wn(e,t,n,r,i,a){let{contributorId:o,definition:s,startMs:c,abort:l}=e,u=Date.now()-c,d=Ln(s);if(l.signal.aborted||l.abort(Error(`Collection complete`)),t.tag===`timeout`){let e=`Contributor timed out after ${u}ms`;return{outcome:{contributorId:o,outcome:$(d,`timeout`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e}}}if(t.tag===`rejected`){let e=`Contributor rejected: ${t.error instanceof Error?t.error.message:String(t.error)}`;return{outcome:{contributorId:o,outcome:$(d,`rejection`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e,cause:t.error}}}let{response:f}=t,p=In(f,s,n,r,i,a);if(p!==!0){let e=`Validation failed: ${p}`;return{outcome:{contributorId:o,outcome:$(d,`rejection`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e}}}return{outcome:{contributorId:o,outcome:`success`,durationMs:u,effects:zn(f)}}}function Gn(e,t){let n=e.find(e=>e.outcome===`closed-failure`);if(!n)return{outcomes:e,diagnostics:t};let r={contributorId:n.contributorId,detail:t.find(e=>e.contributorId===n.contributorId)?.message??`Closed failure`};return{outcomes:e.map(e=>{if(e.effects){let{effects:t,...n}=e;return n}return e}),diagnostics:t,closedFailure:r}}async function Kn(e,t,n,r,i,a,o){if(e.length===0)return{outcomes:[],diagnostics:[]};if(n!==void 0&&n<=Date.now())return Vn(e);let s=e.map(e=>Un(e,t,n,r,i,a)),c=await Promise.all(s.map(e=>e.settled)),l=[],u=[];for(let e=0;e<s.length;e++){let{outcome:n,diagnostic:r}=Wn(s[e],c[e],t,o,i,a);l.push(n),r&&u.push(r)}return Gn(l,u)}export{it as AbsolutePathSchema,Ce as BinaryNotFoundError,R as CLIENT_RUNTIME_STATUSES,we as ClientAccountRegistry,Fe as ClientBinaryJobRunner,ze as ClientBinaryManager,k as ClientBinaryStateRecordSchema,j as ClientBinaryStorageNamespace,M as ClientBinaryStorageSubjects,O as ClientBinaryVersionRecordSchema,Pe as ClientBinaryVersionResolver,gt as ClientConfigPrimeService,N as ClientDefinitionRegistry,Je as ClientHookHandleResponseSchema,fn as ClientHookProviderContractRegistry,Sn as ClientHookResponseRegistry,G as ClientProfileRecordSchema,yt as ClientProfileService,_t as ClientProfileStorageNamespace,q as ClientProfileStorageSubjects,We as ClientRuntimeRegistry,ut as ClientRuntimeService,B as ClientRuntimeStorageNamespace,V as ClientRuntimeStorageSubjects,Tt as ClientSessionConfigService,ce as ClientSubjects,ct as ClientWiringAggregatedResultSchema,ot as ClientWiringApplyResponseSchema,le as ClientWiringEntrySchema,at as ClientWiringListResponseSchema,st as ClientWiringRemoveResponseSchema,wn as ClientsCoreService,Tn as ClientsCoreToken,qe as DEFAULT_HOOK_HANDLE_TIMEOUT_MS,Ye as NOOP_HOOK_HANDLE_RESPONSE,U as RawClientHookPayloadSchema,z as RuntimeRecordSchema,lt as assertAbsoluteProjectDir,be as atomicModifyFile,kn as buildClientCommand,$e as buildClientSessionBase,An as buildHookCommand,W as canonicalizeClientId,Mt as clientRuntimesDual,Kn as collectContributions,Cn as createClientHookResponseContributionProcessor,jt as createClientNamespace,rt as createClientWiringListSubjectDef,nt as createClientWiringSubjectDef,Dn as createClientsCorePackage,Xe as createRawClientHookHandleSubject,Ke as createRawClientHookReceivedSubject,t as createStrategy,jn as deriveSessionEventDescriptors,et as emitBestEffort,E as isPathWithinBase,Qe as pickNonEmptyString,Ze as pickNonEmptyStringValue,nn as registerDrizzleClientBinaryStorage,ln as registerDrizzleProfileStorage,Rt as registerDrizzleRuntimeStorage,En as registerStorageHandlersWithRollback,D as resolveAndValidateBasePath,On as resolveClientBinary,n as verifyInstalledVersion};
+import{n as e,r as t,t as n}from"../client-binary-version-verifier-0lCKZOTg.mjs";import{z as r}from"zod";import*as i from"node:fs/promises";import*as a from"node:path";import{randomUUID as o}from"node:crypto";import{createBusNamespace as s,hostLocalRequest as c}from"@makaio/framework/core";import{MakaioBus as l}from"@makaio/framework/bus";import{extensionToken as u,isUniversalRange as d,versionSatisfies as f}from"@makaio/framework/contracts";import{BaseService as p}from"@makaio/framework/service-base";import{index as m,unique as ee,uniqueIndex as te}from"drizzle-orm/sqlite-core";import{index as h,unique as ne,uniqueIndex as re}from"drizzle-orm/pg-core";import{defineDialectSchema as g,defineDualTable as _,didAffectRows as ie,executeTransaction as v,registerDrizzleHandlers as ae,resolveSchema as y}from"@makaio/framework/storage/drizzle";import{and as b,eq as x,gt as oe,sql as S}from"drizzle-orm";import{ClientProfileNameSchema as C,ClientProfileSchema as se,ClientSubjects as ce,ClientSubjects as w,ClientWiringEntrySchema as le,DEFAULT_FAILURE_POLICY as ue,SessionConfigLeaseIdSchema as de,deriveHookEventTransportMode as fe,isValidContributorId as pe,isValidTimeoutMs as me,validateClosedPolicy as he}from"@makaio/framework/contracts/client";import{SessionSubjects as ge}from"@makaio/framework/contracts/session";import*as _e from"node:os";import{CLIDetectionSubjects as ve}from"@makaio/framework/services/cli-detection/namespace";import{ClientStorageSubjects as ye}from"@makaio/framework/services/settings/storage";async function be(e,t,n,r,i){let a,o=(n.get(e)??Promise.resolve()).then(async()=>{let n=await i(r(await xe(e,t)));n.changed&&await Se(e,n.content),a=n.result}),s=o.then(()=>void 0,()=>void 0);n.set(e,s);try{await o}finally{n.get(e)===s&&n.delete(e)}return a}async function xe(e,t){let n;try{n=await i.readFile(e,`utf-8`)}catch(e){if(e.code===`ENOENT`)return t;throw e}return JSON.parse(n)}async function Se(e,t){let n=a.dirname(e),r=a.join(n,`${a.basename(e)}.${o()}.tmp`);await i.mkdir(n,{recursive:!0});try{await i.writeFile(r,`${JSON.stringify(t,null,2)}\n`,`utf-8`),await i.rename(r,e)}catch(e){throw await i.unlink(r).catch(()=>void 0),e}}var Ce=class e extends Error{code=`BINARY_NOT_FOUND`;constructor(t){super(`client.resolveBinary: no binary found for client '${t}' — install a managed version or ensure the binary is on PATH`),this.name=`BinaryNotFoundError`,Error.captureStackTrace?.(this,e)}},we=class{nextAccountSequence=1;accountIdsByIdentifier=new Map;accounts=new Map;upsertAccount(e){let t=Ee(e.displayLabel),n=new Map;for(let t of e.identifiers)n.set(Te(e.clientId,t.scheme,t.value),t);let r=De(n,this.accountIdsByIdentifier,`strong`),i=De(n,this.accountIdsByIdentifier,`alias`),a=r[0]??(i.length===1?i[0]:i.length>1?Oe(i):this.createAccount()),o=(r.length>0?je(a,r,i):[]).flatMap(e=>this.mergeInto(a,e)),s=this.accounts.get(a);if(!s)throw Error(`Client account registry invariant violated: missing account ${a}`);for(let[e,t]of n){let n=this.accountIdsByIdentifier.get(e);r.length===0&&t.strength===`alias`&&n!==void 0&&n!==a||(s.identifiers.set(e,t),this.accountIdsByIdentifier.set(e,a))}return t!==void 0&&(s.displayLabel=t),{clientAccountId:a,displayLabel:s.displayLabel,mergedAccountIds:o}}clear(){this.accountIdsByIdentifier.clear(),this.accounts.clear(),this.nextAccountSequence=1}createAccount(){let e=`client-account-${this.nextAccountSequence}`;return this.nextAccountSequence+=1,this.accounts.set(e,{clientAccountId:e,identifiers:new Map}),e}mergeInto(e,t){if(e===t)return[];let n=this.accounts.get(e),r=this.accounts.get(t);if(!n||!r)return[];for(let[t,i]of r.identifiers)n.identifiers.set(t,i),this.accountIdsByIdentifier.set(t,e);return n.displayLabel===void 0&&r.displayLabel!==void 0&&(n.displayLabel=r.displayLabel),this.accounts.delete(t),[t]}};function Te(e,t,n){return`${e}\u0000${t}\u0000${n}`}function Ee(e){return e?.trim()||void 0}function De(e,t,n){let r=new Set;for(let[i,a]of e){if(a.strength!==n)continue;let e=t.get(i);e!==void 0&&r.add(e)}return Array.from(r).sort(ke)}function Oe(e){return[...e].sort(ke)[0]}function ke(e,t){let n=Ae(e),r=Ae(t);return n!==null&&r!==null&&n!==r?n-r:e.localeCompare(t)}function Ae(e){let t=e.match(/^client-account-(\d+)$/);return t?Number(t[1]):null}function je(e,t,n){let r=new Set([...t,...n]);return r.delete(e),Array.from(r).sort(ke)}function Me(e){return{subject:`config.prime`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}async function T(e,t){let n=await e.requestOptional(Me(t.clientId),t);return n.handled?n.data:{primed:!1}}function Ne(){let e=e=>async()=>{throw Error(`StrategyDependencies.${e} is not implemented`)};return{fetchText:e(`fetchText`),fetchJson:e(`fetchJson`),downloadFile:e(`downloadFile`),exec:e(`exec`),extractArchive:e(`extractArchive`),deleteFile:e(`deleteFile`),computeChecksum:e(`computeChecksum`),removeDirectory:e(`removeDirectory`)}}var Pe=class{resolveInstallVersion(e,t,n){let r=t.version;if(n===void 0)return{version:r,explicit:!1};let i=n.trim();if(i.length===0)throw Error(`Explicit version returned an empty version string`);if(i!==r)throw Error(`client.install: requested version ${i} for client '${e}' does not match pinned version ${r}`);return{version:i,explicit:!0}}};function E(t,n){return!a.isAbsolute(t)||!a.isAbsolute(n)?!1:e(a.resolve(t),a.resolve(n))}function D(e,t){if(!e||!a.isAbsolute(e))throw Error(`${t} requires a non-empty absolute basePath`);return a.resolve(e)}var Fe=class{strategyDeps;config;jobs=new Map;#e=!1;resolvedBasePath;constructor(e,t){this.strategyDeps=e,this.config=t,this.resolvedBasePath=D(t.basePath,`ClientBinaryJobRunner`)}startJob(e,t,n,r,i,a,o){let s={...e,status:`running`};return this.jobs.set(e.jobId,s),this.runJob(s,t,n,r,i,a,o),e.jobId}cancelAll(){this.#e=!0,this.jobs.clear()}safeOnProgress(e,t){try{e(t)}catch{}}emitProgressIfActive(e,t){return this.#e?!1:(this.safeOnProgress(e,t),!this.#e)}async runJob(e,n,r,i,a,o,s){try{let c=this.resolveTargetDir(e.clientId,e.version),l=t(n,this.strategyDeps);if(l===void 0)throw Error(`Unsupported managed install descriptor type: ${n.type}`);let u=await this.executeStrategy(e,l,c,r);if(this.#e)return;let d;try{if(d=await this.runPostInstall(e,u.installPath,o,r),this.#e)return;s!==void 0&&await this.runVersionVerification(e,u.installPath,s,r)}catch(e){throw this.#e||await this.cleanupStagedArtifact(u.installPath),e}if(this.#e)return;await this.finalizeSuccess(e,u,d,r,i,a)}catch(t){if(this.#e)return;let n=t instanceof Error?t.message:String(t),r=t instanceof Error&&`code`in t?String(t.code):void 0;try{await a({jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,status:`error`,activeVersion:null,error:{message:n,...r===void 0?{}:{code:r}}})}catch{}}finally{this.jobs.delete(e.jobId)}}async finalizeSuccess(e,t,n,r,i,a){if(!(e.makeActive&&!this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,stage:`activating`,progress:null,installPath:t.installPath,activeAfterCompletion:!0}))&&!this.#e){try{await i({jobId:e.jobId,clientId:e.clientId,version:t.version,installPath:t.installPath,makeActive:e.makeActive,reason:e.reason})}catch(e){try{await this.strategyDeps.removeDirectory(t.installPath)}catch{}throw e}if(!this.#e)try{await a({jobId:e.jobId,clientId:e.clientId,version:t.version,strategy:e.strategy,status:`success`,installPath:t.installPath,activeVersion:e.makeActive?t.version:null,...n===void 0?{}:{metadata:{postInstall:n}}})}catch{}}}async cleanupStagedArtifact(e){try{await this.strategyDeps.removeDirectory(e)}catch{}}async executeStrategy(e,t,n,r){try{return await t.execute(e.version,n,(t,i)=>{this.emitProgressIfActive(r,{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:i,installPath:t===`installing`?n:void 0,activeAfterCompletion:e.makeActive})})}catch(e){throw this.#e||await this.cleanupStagedArtifact(n),e}}async runPostInstall(e,t,n,r){if(n===void 0)return;let i=this.resolvePostInstallHandler(n),a=this.buildProgressPayload(e,`post-install`,null,t,{kind:n.kind});if(!this.emitProgressIfActive(r,a))return;let o=await i({clientId:e.clientId,version:e.version,installPath:t,descriptor:n});return this.emitProgressIfActive(r,this.buildProgressPayload(e,`post-install`,100,t,{kind:n.kind,...o??{}})),o??void 0}async runVersionVerification(e,t,r,i){this.emitProgressIfActive(i,this.buildProgressPayload(e,`verifying`,null,t,{kind:`version-command`}))&&(this.#e||await n(this.strategyDeps.exec,t,r,e.version))}resolvePostInstallHandler(e){let t=this.config.postInstallHandlers?.get(e.kind);if(t===void 0)throw Error(`No post-install handler registered for kind "${e.kind}"`);return t}buildProgressPayload(e,t,n,r,i){return{jobId:e.jobId,clientId:e.clientId,version:e.version,strategy:e.strategy,stage:t,progress:n,installPath:r,activeAfterCompletion:e.makeActive,...i===void 0?{}:{metadata:i}}}resolveTargetDir(e,t){let n=a.resolve(this.resolvedBasePath,e,t);if(!E(this.resolvedBasePath,n))throw Error(`Invalid install target path for client "${e}" and version "${t}"`);return n}};const O=r.object({id:r.string(),clientId:r.string(),version:r.string(),installPath:r.string(),installedAt:r.number().int().nonnegative(),createdAt:r.number().int().nonnegative()}),k=r.object({clientId:r.string(),activeVersion:r.string().nullable(),updatedAt:r.number().int().nonnegative()}),A=r.object({previousActiveVersion:r.string().nullable(),activeVersion:r.string().nullable()}),j=s(`client-binary:storage`,{insertVersion:{request:O,response:r.object({success:r.boolean()})},recordInstalledVersion:{request:r.object({versionRecord:O,makeActive:r.boolean(),updatedAt:r.number().int().nonnegative()}),response:A},listVersions:{request:r.object({clientId:r.string()}),response:r.object({versions:r.array(O)})},getSnapshot:{request:r.object({clientId:r.string()}),response:r.object({state:k.nullable(),versions:r.array(O)})},loadAllVersions:{request:r.object({}),response:r.object({versions:r.array(O)})},upsertState:{request:k,response:r.object({success:r.boolean()})},setActiveVersion:{request:r.object({clientId:r.string(),activeVersion:r.string().nullable(),updatedAt:r.number().int().nonnegative()}),response:A},getState:{request:r.object({clientId:r.string()}),response:r.object({state:k.nullable()})},loadAllState:{request:r.object({}),response:r.object({states:r.array(k)})},loadSnapshot:{request:r.object({}),response:r.object({states:r.array(k),versions:r.array(O)})},removeVersionAndClearActive:{request:r.object({clientId:r.string(),version:r.string(),updatedAt:r.number().int().nonnegative()}),response:A.extend({removedVersion:r.string().nullable()})}}),M=j.subjects;var N=class{definitions=new Map;constructor(e=[]){for(let t of e)this.registerUnique(t)}getDefinition(e){return this.definitions.get(e)}listDefinitions(){return[...this.definitions.values()]}register(e){this.definitions.set(e.id,e)}registerUnique(e){if(this.definitions.has(e.id))throw Error(`ClientDefinitionRegistry: duplicate client definition id '${e.id}'`);this.definitions.set(e.id,e)}};const Ie=process.env.MAKAIO_SKIP_CLIENT_VERSION_CHECK===`1`;function P(e,t,n,r,i){if(n===null){if(d(r))return;if(Ie){console.warn(`[SKIP_VERSION_CHECK] ${e}: ${i} for client '${t}' did not report a version; requires ${r}`);return}throw Error(`${e}: ${i} for client '${t}' did not report a version; requires ${r}`)}if(!f(n,r)){if(Ie){console.warn(`[SKIP_VERSION_CHECK] ${e}: ${i} ${n} for client '${t}' does not satisfy ${r} — check bypassed`);return}throw Error(`${e}: ${i} ${n} for client '${t}' does not satisfy ${r}`)}}var Le=class{bus;resolvedBasePath;resolvedConfigBasePath;definitionLookup;resolutionPolicy;constructor(e){this.bus=e.bus,this.resolvedBasePath=e.resolvedBasePath,this.resolvedConfigBasePath=e.resolvedConfigBasePath,this.definitionLookup=e.definitionLookup,this.resolutionPolicy=e.resolutionPolicy??`managed-first`}async resolve(e){let t=this.definitionLookup.getDefinition(e);if(t===void 0)throw Error(`client.resolveBinary: no definition registered for client '${e}'`);if(this.resolutionPolicy===`managed-first`){let{state:n,versions:r}=await this.bus.request(M.getSnapshot,{clientId:e}),i=n?.activeVersion??null;if(i!==null)return this.buildManagedContext(e,i,t,r)}return this.buildGlobalContext(e,t)}isInstallPathWithinBase(e){return E(this.resolvedBasePath,e)}async isExpectedInstallPath(e,t,n){if(!a.isAbsolute(e)||!this.isInstallPathWithinBase(e))return!1;let r=a.resolve(this.resolvedBasePath,t,n);if(!this.isInstallPathWithinBase(r))return!1;try{let[t,n,a]=await Promise.all([i.realpath(this.resolvedBasePath),i.realpath(r),i.realpath(e)]);return E(t,n)?a===n||E(n,a):!1}catch{return!1}}async buildManagedContext(e,t,n,r){let i=r.find(e=>e.version===t);if(i===void 0)throw Error(`client.resolveBinary: active version '${t}' is not installed for client '${e}'`);if(!await this.isExpectedInstallPath(i.installPath,e,t))throw Error(`client.resolveBinary: stored installPath "${i.installPath}" does not match the expected install directory for ${e}@${t}`);n.binary!==void 0&&P(`client.resolveBinary`,e,t,n.binary.supportedVersions,`managed binary version`);let o=F(n.versionCommand)?.[0];if(o===void 0)throw Error(`client.resolveBinary: definition for '${e}' has no versionCommand — cannot derive binary path`);let s=a.resolve(i.installPath,o),c=a.resolve(i.installPath);if(!s.startsWith(c+a.sep)&&s!==c)throw Error(`client.resolveBinary: versionCommand for '${e}' resolves outside the install directory`);let{configDir:l,env:u}=this.resolveIsolatedConfig(e,n);return{binaryPath:s,env:u,configDir:l,source:`managed`,version:t}}async buildGlobalContext(e,t){if(!t.binary?.name)throw Error(`client.resolveBinary: definition for '${e}' has no binary.name — cannot scan PATH`);let n={clientId:e,binaryName:t.binary.name,supportedVersions:t.binary.supportedVersions},{results:r}=await this.bus.request(w.scan,{targets:[n]}),i=r.find(t=>t.clientId===e);if(i===void 0||!i.found)throw new Ce(e);let o=i.version??null;P(`client.resolveBinary`,e,o,t.binary.supportedVersions,`detected global binary version`);let s=this.resolveGlobalConfigDir(t),c=i.binaryPath??null;if(c!==null&&!a.isAbsolute(c))throw Error(`client.resolveBinary: detected global binary path for '${e}' is not absolute`);return{binaryPath:c,env:{},configDir:s,source:`global`,version:o}}resolveIsolatedConfig(e,t){let{configIsolation:n}=t;if(n===void 0)return{configDir:null,env:{}};let r=a.join(this.resolvedConfigBasePath,e,`config`),i=n.pathKind===`file`?a.join(r,a.basename(n.defaultPath)):r;return{configDir:r,env:{[n.envVar]:i}}}resolveGlobalConfigDir(e){let{configIsolation:t}=e;if(t===void 0)return null;let n=t.defaultPath,r=n===`~`?_e.homedir():n.startsWith(`~/`)?a.join(_e.homedir(),n.slice(2)):n,i=t.pathKind===`file`?a.dirname(r):r;if(!a.isAbsolute(i))throw Error(`ConfigIsolation defaultPath for '${e.id}' resolved to non-absolute path '${r}'; use an absolute or tilde-expanded path (e.g. '~/.myapp')`);return i}};function F(e){if(e===void 0)return;let{executable:t,args:n}=e,r=typeof t==`string`?t:t[process.platform]??t.default;if(typeof r!=`string`||r.trim()===``)throw Error(`client.resolveBinary: versionCommand executable is missing for this platform`);return[r,...n]}async function Re(e,t){let{versions:n,states:r}=await e.request(M.loadSnapshot,{}),i=Map.groupBy(n,e=>e.clientId),a=new Map;for(let e of r)a.set(e.clientId,e.activeVersion);let o=new Map;for(let e of t.listDefinitions())e.managedInstall!==void 0&&o.set(e.id,e.managedInstall);return[...new Set(o.keys())].map(e=>{let t=o.get(e);if(t===void 0)throw Error(`assembleBinaryList: missing descriptor for client '${e}'`);let n=a.get(e)??null,r=(i.get(e)??[]).map(e=>({version:e.version,installPath:e.installPath,installedAt:e.installedAt,isActive:e.version===n})),s=t.version;return{clientId:e,installedVersions:r,activeVersion:n,pinnedVersion:s,updateAvailable:n!==null&&n!==s}})}var ze=class extends p{config;definitionLookup;versionResolver;jobRunner;strategyDeps;resolvedBasePath;resolvedConfigBasePath;resolver;pendingClients=new Set;constructor(e=l,t,n=new N([]),r=Ne()){super(e),this.config=t,this.definitionLookup=n,this.resolvedBasePath=D(t.basePath,`ClientBinaryManager`),this.resolvedConfigBasePath=D(t.configBasePath,`ClientBinaryManager configBasePath`),this.strategyDeps=r,this.versionResolver=new Pe,this.jobRunner=new Fe(r,t),this.resolver=new Le({bus:e,resolvedBasePath:this.resolvedBasePath,resolvedConfigBasePath:this.resolvedConfigBasePath,definitionLookup:n,...t.resolutionPolicy!==void 0&&{resolutionPolicy:t.resolutionPolicy}})}async onInit(){this.registerHandler(w.list,async e=>{let t=await this.handleList();e.setResult({clients:t})}),this.registerHandler(w.install,async e=>{let t=await this.handleInstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.update,async e=>{let t=await this.handleUpdate(e.payload.clientId);e.setResult(t)}),this.registerHandler(w.setActive,async e=>{let t=await this.handleSetActive(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.uninstall,async e=>{let t=await this.handleUninstall(e.payload.clientId,e.payload.version);e.setResult(t)}),this.registerHandler(w.resolveBinary,async e=>{let t=await this.resolver.resolve(e.payload.clientId);e.setResult(t)})}onDestroy(){this.jobRunner.cancelAll(),this.pendingClients.clear()}async handleList(){return Re(this.bus,this.definitionLookup)}async handleInstall(e,t){let{definition:n,descriptor:r}=this.requireManagedDefinition(e,`client.install`);return this.withClientLock(e,async()=>{let{version:i}=this.versionResolver.resolveInstallVersion(e,r,t);return n.binary!==void 0&&P(`client.install`,e,i,n.binary.supportedVersions,t===void 0?`resolved binary version`:`requested binary version`),{jobId:this.startInstallJob(e,i,r,n,!1,`install`),requestedVersion:t??null,resolvedVersion:i}})}async handleUpdate(e){let{definition:t,descriptor:n}=this.requireManagedDefinition(e,`client.update`);return this.withClientLock(e,async()=>{let{version:r}=this.versionResolver.resolveInstallVersion(e,n);return t.binary!==void 0&&P(`client.update`,e,r,t.binary.supportedVersions,`resolved binary version`),{jobId:this.startInstallJob(e,r,n,t,!0,`update`),resolvedVersion:r}})}async handleSetActive(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:r}=await this.bus.request(M.listVersions,{clientId:e}),i=r.find(e=>e.version===t);if(i===void 0)throw Error(`client.setActive: version '${t}' is not installed for client '${e}'`);let a=this.definitionLookup.getDefinition(e);if(a===void 0)throw Error(`client.setActive: no definition registered for client '${e}'`);a.binary!==void 0&&P(`client.setActive`,e,t,a.binary.supportedVersions,`requested binary version`);let o=F(a.versionCommand);if(o===void 0)throw Error(`client.setActive: no versionCommand registered for client '${e}'`);if(!await this.resolver.isExpectedInstallPath(i.installPath,e,t))throw Error(`client.setActive: stored installPath "${i.installPath}" does not match the expected install directory for ${e}@${t}`);return await n(this.strategyDeps.exec,i.installPath,o,t),await this.patchActiveVersion(e,t,`set-active`),{clientId:e,activeVersion:t}}finally{this.pendingClients.delete(e)}}async handleUninstall(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{let{versions:n}=await this.bus.request(M.listVersions,{clientId:e}),r=n.find(e=>e.version===t);if(r===void 0)throw Error(`client.uninstall: version '${t}' is not installed for client '${e}'`);let{removedVersion:i,previousActiveVersion:o,activeVersion:s}=await this.bus.request(M.removeVersionAndClearActive,{clientId:e,version:t,updatedAt:Date.now()});if(i===null)throw Error(`client.uninstall: failed to delete version '${t}' for client '${e}'`);let c=r.installPath,l=typeof c==`string`&&c.length>0?a.resolve(c):null;if(typeof c!=`string`||c.length===0||l===null||!a.isAbsolute(c)||!await this.resolver.isExpectedInstallPath(l,e,t)?console.warn(`[ClientBinaryManager] Skipping removeDirectory: stored installPath "${String(c)}" does not match the expected install directory for ${e}@${t}`):await this.strategyDeps.removeDirectory(l).catch(n=>{console.warn(`[ClientBinaryManager] Failed to remove binary directory "${l}" for ${e}@${t}:`,n)}),o!==null&&s===null)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:o,activeVersion:null,reason:`uninstall`})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return{clientId:e,removedVersion:t,activeVersion:s}}finally{this.pendingClients.delete(e)}}async patchActiveVersion(e,t,n){let r=(await this.bus.request(M.setActiveVersion,{clientId:e,activeVersion:t,updatedAt:Date.now()})).previousActiveVersion;if(r!==t)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:r,activeVersion:t,reason:n})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}return r}requireManagedDefinition(e,t){let n=this.definitionLookup.getDefinition(e);if(n===void 0)throw Error(`${t}: no definition registered for client '${e}'`);let r=n.managedInstall;if(r===void 0)throw Error(`${t}: client '${e}' does not declare a managed install descriptor`);return{definition:n,descriptor:r}}async withClientLock(e,t){if(this.pendingClients.has(e))throw Error(`Operation already in progress for client "${e}"`);this.pendingClients.add(e);try{return await t()}catch(t){throw this.pendingClients.delete(e),t}}startInstallJob(e,t,n,r,i,a){let o={jobId:crypto.randomUUID(),clientId:e,version:t,strategy:n.type,status:`pending`,makeActive:i,reason:a};return this.jobRunner.startJob(o,n,e=>{this.bus.emit(w.installJob.progress,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.progress:`,e)})},this.makeCompletionCallback(),async e=>{this.pendingClients.delete(e.clientId),await this.bus.emit(w.installJob.completed,e).catch(e=>{console.warn(`[ClientBinaryManager] Failed to emit client.installJob.completed:`,e)})},r.postInstall,F(r.versionCommand)),o.jobId}makeCompletionCallback(){return async({clientId:e,version:t,installPath:n,makeActive:r,reason:i})=>{let a=Date.now();await T(this.bus,{clientId:e,configDir:this.resolveManagedConfigDir(e),phase:`managed-install`,binaryVersion:t});let o=await this.bus.request(M.recordInstalledVersion,{versionRecord:{id:crypto.randomUUID(),clientId:e,version:t,installPath:n,installedAt:a,createdAt:a},makeActive:r,updatedAt:a});if(r&&o.previousActiveVersion!==o.activeVersion)try{await this.bus.emit(w.version.changed,{clientId:e,previousActiveVersion:o.previousActiveVersion,activeVersion:o.activeVersion,reason:i})}catch(e){console.warn(`[ClientBinaryManager] Failed to emit client.version.changed:`,e)}}}resolveManagedConfigDir(e){return a.join(this.resolvedConfigBasePath,e,`config`)}};function I(e,t){return`${e}${t}`}function L(e,t){return`${e}${t}`}var Be=class{records=new Map;bySupervisorSessionId=new Map;byPidClientId=new Map;byAdapterSessionClientId=new Map;adapterOwnedSessions=new Set;set(e){let t=this.records.get(e.clientRuntimeId);t&&this.removeIndexEntries(t),this.records.set(e.clientRuntimeId,e),this.addIndexEntries(e)}setFromStorage(e,t,n){this.records.set(e.clientRuntimeId,e),e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),t-e.updatedAt<=n&&(e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId))}delete(e){let t=this.records.get(e);t&&(this.removeIndexEntries(t),t.adapterSessionId!==void 0&&this.adapterOwnedSessions.delete(L(t.adapterSessionId,t.clientId)),this.records.delete(e))}get(e){return this.records.get(e)}findByEvidence(e,t,n,r){if(e!==void 0){let t=this.bySupervisorSessionId.get(e);if(t!==void 0)return this.records.get(t)}if(t!==void 0){let e=this.byPidClientId.get(I(t,r));if(e!==void 0)return this.records.get(e)}if(n!==void 0){let e=this.byAdapterSessionClientId.get(L(n,r));if(e!==void 0)return this.records.get(e)}}values(){return this.records.values()}clear(){this.records.clear(),this.bySupervisorSessionId.clear(),this.byPidClientId.clear(),this.byAdapterSessionClientId.clear(),this.adapterOwnedSessions.clear()}markAdapterOwned(e,t){this.adapterOwnedSessions.add(L(e,t))}hasAdapterSession(e,t){return this.adapterOwnedSessions.has(L(e,t))}get size(){return this.records.size}addIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.set(e.supervisorSessionId,e.clientRuntimeId),e.pid!==void 0&&this.byPidClientId.set(I(e.pid,e.clientId),e.clientRuntimeId),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.set(L(e.adapterSessionId,e.clientId),e.clientRuntimeId)}removeIndexEntries(e){e.supervisorSessionId!==void 0&&this.bySupervisorSessionId.delete(e.supervisorSessionId),e.pid!==void 0&&this.byPidClientId.delete(I(e.pid,e.clientId)),e.adapterSessionId!==void 0&&this.byAdapterSessionClientId.delete(L(e.adapterSessionId,e.clientId))}};const R=[`observed`,`started`],z=r.object({clientRuntimeId:r.string(),clientId:r.string(),status:r.enum(R),supervisorSessionId:r.string().optional(),pid:r.number().int().positive().optional(),parentPid:r.number().int().positive().optional(),adapterSessionId:r.string().optional(),sessionId:r.string().optional(),cwd:r.string().optional(),argv:r.array(r.string()).optional(),metadata:r.record(r.string(),r.unknown()).optional(),observedAt:r.number().int().nonnegative(),createdAt:r.number().int().nonnegative(),updatedAt:r.number().int().nonnegative()}),B=s(`client-runtime:storage`,{upsert:{request:z,response:r.object({success:r.boolean()})},loadAll:{request:r.object({}),response:r.object({records:r.array(z)})}}),V=B.subjects;function Ve(e){return e.supervisorSessionId!==void 0||e.adapterSessionId!==void 0}function H(e){return{...e,argv:e.argv===void 0?void 0:[...e.argv],metadata:e.metadata===void 0?void 0:structuredClone(e.metadata)}}function He(e){return Math.max(Date.now(),e+1)}function Ue(e,t){let n=!1;return t.supervisorSessionId!==void 0&&e.supervisorSessionId!==t.supervisorSessionId&&(e.supervisorSessionId=t.supervisorSessionId,n=!0),t.pid!==void 0&&e.pid!==t.pid&&(e.pid=t.pid,n=!0),t.parentPid!==void 0&&e.parentPid!==t.parentPid&&(e.parentPid=t.parentPid,n=!0),t.adapterSessionId!==void 0&&e.adapterSessionId!==t.adapterSessionId&&(e.adapterSessionId=t.adapterSessionId,n=!0),t.sessionId!==void 0&&e.sessionId!==t.sessionId&&(e.sessionId=t.sessionId,n=!0),t.cwd!==void 0&&e.cwd!==t.cwd&&(e.cwd=t.cwd,n=!0),t.argv!==void 0&&JSON.stringify(e.argv)!==JSON.stringify(t.argv)&&(e.argv=[...t.argv],n=!0),t.metadata!==void 0&&JSON.stringify(e.metadata)!==JSON.stringify(t.metadata)&&(e.metadata=structuredClone(t.metadata),n=!0),n}var We=class{runtimeMap=new Be;bus;constructor(e){this.bus=e}async loadFromStorage(){if(!this.bus)return;let e=await this.bus.requestOptional(V.loadAll,{});if(!e.handled)return;let t=Date.now();for(let n of e.data.records)this.runtimeMap.setFromStorage(H(n),t,864e5)}async upsertRuntime(e){let t=this.runtimeMap.findByEvidence(e.supervisorSessionId,e.pid,e.adapterSessionId,e.clientId);if(t){let n=t.status===`observed`,r=n&&Ve(e),i=Ue(t,e),a=n&&e.observedAt>t.observedAt;return r&&(t.status=`started`),(i||r||a)&&(t.updatedAt=He(t.updatedAt),a&&(t.observedAt=e.observedAt),this.runtimeMap.set(t),await this.persistRecord(t)),{clientRuntimeId:t.clientRuntimeId,created:!1,promoted:r,record:H(t)}}let n=Date.now(),r=o(),i=Ve(e)?`started`:`observed`,a={clientRuntimeId:r,clientId:e.clientId,status:i,supervisorSessionId:e.supervisorSessionId,pid:e.pid,parentPid:e.parentPid,adapterSessionId:e.adapterSessionId,sessionId:e.sessionId,cwd:e.cwd,argv:e.argv?[...e.argv]:void 0,metadata:e.metadata?structuredClone(e.metadata):void 0,observedAt:e.observedAt,createdAt:n,updatedAt:n};return this.runtimeMap.set(a),await this.persistRecord(a),{clientRuntimeId:r,created:!0,promoted:!1,record:H(a)}}getRuntime(e){let t=this.runtimeMap.get(e);return t?H(t):void 0}markAdapterOwned(e,t){this.runtimeMap.markAdapterOwned(e,t)}hasAdapterSession(e,t){return this.runtimeMap.hasAdapterSession(e,t)}clear(){this.runtimeMap.clear()}get size(){return this.runtimeMap.size}async persistRecord(e){this.bus&&await this.bus.requestOptional(V.upsert,H(e))}};const U=r.object({eventName:r.string(),receivedAt:r.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`),payload:r.record(r.string(),r.unknown()),metadata:r.record(r.string(),r.unknown()).optional()}),Ge=/^[a-z0-9-]+$/;function W(e,t=`canonicalizeClientId`){let n=e.trim().toLowerCase(),r=n.startsWith(`client:`)?n.slice(7):n;if(r.length===0)throw Error(`[${t}] clientId must be a non-empty string`);if(!Ge.test(r))throw Error(`[${t}] clientId must contain only lowercase letters, numbers, and hyphens after an optional client: prefix`);return r}function Ke(e){return{subject:`hook.received`,$meta:{namespace:`client:${W(e,`createRawClientHookReceivedSubject`)}`,isRequest:!1,local:!1,channel:!1}}}const qe=5e3,Je=r.object({exitCode:r.number().int().min(0).max(255).default(0),stdout:r.string().default(``),stderr:r.string().default(``)}),Ye=Object.freeze({exitCode:0,stdout:``,stderr:``});function Xe(e){return{subject:`hook.handle`,$meta:{namespace:`client:${W(e,`createRawClientHookHandleSubject`)}`,isRequest:!0,local:!1,channel:!1,hostLocalRequest:!0}}}function Ze(e){if(typeof e!=`string`)return;let t=e.trim();return t.length>0?t:void 0}function Qe(e,t){return Ze(e[t])}function $e(e){return{clientId:e.clientId,source:`adapter-derived`,observedAt:Date.now(),...e.sessionId!==void 0&&{sessionId:e.sessionId},...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}}function et(e){try{e().catch(tt)}catch(e){tt(e)}}function tt(e){(process.env.DEBUG||process.env.MAKAIO_DEBUG)&&console.debug(`[emitBestEffort] observed-semantics emission failed`,e)}function nt(e,t){return{subject:t,$meta:{namespace:`client:${W(e,`createClientWiringSubjectDef`)}`,isRequest:!0,local:!1,channel:!1}}}function rt(e){return nt(e,`wiring.list`)}const it=r.string().min(1).refine(a.isAbsolute,{message:`projectDir must be an absolute path`}),at=r.object({entries:r.array(le)}),ot=r.object({applied:r.number().int().nonnegative(),skipped:r.number().int().nonnegative()}),st=r.object({removed:r.number().int().nonnegative()}),ct=r.object({clientId:r.string().trim().min(1),entries:r.array(le)});function lt(e){if(e!==void 0&&!a.isAbsolute(e))throw Error(`projectDir must be an absolute path, got: ${e}`)}var ut=class extends p{accountRegistry;runtimeRegistry;latestSnapshots=new Map;activeIdentities=new Map;constructor(e=l,t=new we,n=new We(e)){super(e),this.accountRegistry=t,this.runtimeRegistry=n}async onInit(){await this.runtimeRegistry.loadFromStorage(),this.registerHandler(w.account.observe,e=>this.handleAccountObserve(e)),this.registerHandler(w.usage.ingest,e=>this.handleUsageIngest(e)),this.registerHandler(w.scan,async e=>{let t=await this.scanClients(e.payload.targets);e.setResult({results:t})}),this.registerHandler(w.runtime.observe,e=>this.handleRuntimeObserve(e)),this.registerHandler(w.runtime.isAdapterManaged,e=>{let{adapterSessionId:t,clientId:n}=e.payload;e.setResult({managed:this.runtimeRegistry.hasAdapterSession(t,n)})}),this.registerHandler(w.wiring.list,async e=>{let t=await this.listWirings(e.payload);e.setResult({results:t})}),this.registerHandler(w.account.activate,e=>{this.activeIdentities.set(e.payload.clientId,{clientAccountId:e.payload.clientAccountId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),e.setResult({accepted:!0})}),this.registerHandler(w.account.getActive,e=>{let t=this.activeIdentities.get(e.payload.clientId);e.setResult({identity:t??null})})}onDestroy(){this.latestSnapshots.clear(),this.activeIdentities.clear(),this.accountRegistry.clear(),this.runtimeRegistry.clear()}getLatestSnapshot(e){return this.latestSnapshots.get(e)}async handleAccountObserve(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.identifiers,displayLabel:e.payload.displayLabel}),n=this.latestSnapshots.get(t.clientAccountId),r=pt(this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds)??n,t.displayLabel);r&&this.latestSnapshots.set(t.clientAccountId,r),r&&(t.mergedAccountIds.length>0||r!==n)&&await this.bus.emit(w.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,displayLabel:t.displayLabel})}async handleUsageIngest(e){let t=this.accountRegistry.upsertAccount({clientId:e.payload.clientId,identifiers:e.payload.account.identifiers,displayLabel:e.payload.account.displayLabel});this.consolidateMergedSnapshots(t.clientAccountId,t.mergedAccountIds);let n=dt(t.clientAccountId,e.payload,t.displayLabel),r=pt(ft(this.latestSnapshots.get(t.clientAccountId),n),t.displayLabel);this.latestSnapshots.set(t.clientAccountId,r),await this.bus.emit(w.usage.snapshot,r),e.setResult({clientAccountId:t.clientAccountId,snapshot:r})}async handleRuntimeObserve(e){let{payload:t}=e;if(t.supervisorSessionId===void 0&&t.pid===void 0&&t.adapterSessionId===void 0)throw Error(`client.runtime.observe: at least one hard-evidence field is required (supervisorSessionId, pid, or adapterSessionId)`);let{record:n,...r}=await this.runtimeRegistry.upsertRuntime(t);t.source.layer===`adapter`&&t.adapterSessionId!==void 0&&this.runtimeRegistry.markAdapterOwned(t.adapterSessionId,t.clientId),(r.created||r.promoted)&&await this.bus.emit(w.runtime.started,{clientRuntimeId:n.clientRuntimeId,clientId:n.clientId,status:n.status,source:t.source,observedAt:t.observedAt,supervisorSessionId:n.supervisorSessionId,pid:n.pid,parentPid:n.parentPid,adapterSessionId:n.adapterSessionId,sessionId:n.sessionId,cwd:n.cwd,argv:n.argv,metadata:n.metadata}),e.setResult({clientRuntimeId:r.clientRuntimeId,created:r.created,promoted:r.promoted})}async scanClients(e){let t=e??await this.listScannableStoredClients();if(t.length===0)return[];let n=Array.from(new Set(t.map(e=>e.binaryName))),{results:r}=await this.bus.request(ve.scan,{binaries:n}),i=new Map(r.map(e=>[e.binary,e]));return t.map(e=>{let t=i.get(e.binaryName),n=t?.found??!1,r=t?.version,a=t?.path;return{clientId:e.clientId,found:n,...a!==void 0&&{binaryPath:a},version:r,warningMessage:ht(n,r,e.supportedVersions)}})}async listScannableStoredClients(){let{clients:e}=await this.bus.request(ye.list,{});return e.filter(mt).map(e=>({clientId:e.id,binaryName:e.binary.name,supportedVersions:e.binary.supportedVersions}))}async listWirings(e){lt(e.projectDir);let{clients:t}=await this.bus.request(ye.list,{}),n=e.clientId===void 0?void 0:W(e.clientId,`listWirings`),r=t.filter(e=>e.enabled).filter(e=>n===void 0||e.id===n),i=await Promise.allSettled(r.map(async t=>{let n=rt(t.id),r=await this.bus.requestOptional(n,{projectDir:e.projectDir,makaioCommand:e.makaioCommand});return r.handled?{clientId:t.id,entries:r.data.entries}:null}));for(let e=0;e<i.length;e++){let t=i[e];if(t.status===`rejected`){let n=t.reason instanceof Error?t.reason.message:String(t.reason);console.warn(`[ClientRuntimeService] wiring.list for ${r[e].id} failed: ${n}`)}}return i.filter(e=>e.status===`fulfilled`).map(e=>e.value).filter(e=>e!==null)}consolidateMergedSnapshots(e,t){let n=this.latestSnapshots.get(e),r=!1;for(let i of t){if(i===e)continue;let t=this.latestSnapshots.get(i);t&&(n===void 0||t.observedAt>n.observedAt)&&(n={...t,clientAccountId:e},r=!0),this.latestSnapshots.delete(i)}return n&&this.latestSnapshots.set(e,n),r?n:void 0}};function dt(e,t,n){return{clientAccountId:e,clientId:t.clientId,observedAt:t.observedAt,source:t.source,displayLabel:n,usage:{windows:t.usage.windows.map(e=>({...e}))},metadata:t.metadata?{...t.metadata}:void 0}}function ft(e,t){return e&&e.observedAt>t.observedAt?e:t}function pt(e,t){return!e||t===void 0||e.displayLabel===t?e:{...e,displayLabel:t}}function mt(e){return e.enabled&&e.binary!==void 0}function ht(e,t,n){if(e&&t!==void 0&&t!==`unknown`&&n!==void 0&&!f(t,n))return`Unsupported version: requires ${n}`}var gt=class extends p{constructor(e=l){super(e)}onInit(){this.registerHandler(w.config.prime,async e=>{e.setResult(await T(this.bus,e.payload))})}};const G=se,K=r.string().trim().min(1),_t=s(`client-profile:storage`,{get:{request:r.object({clientId:K,name:C}),response:r.object({record:G.nullable()})},getById:{request:r.object({id:K}),response:r.object({record:G.nullable()})},list:{request:r.object({clientId:K}),response:r.object({records:r.array(G)})},set:{request:G,response:r.object({success:r.boolean()})},delete:{request:r.object({clientId:K,name:C}),response:r.object({success:r.boolean()})},clearDefault:{request:r.object({clientId:K}),response:r.object({success:r.boolean()})},setDefault:{request:r.object({clientId:K,name:C}),response:r.object({record:G.nullable()})}}),q=_t.subjects;function vt(e,t,n){let r=a.resolve(e),i=a.resolve(t),o=a.relative(r,i);if(o!==``&&!o.startsWith(`..`)&&!a.isAbsolute(o))return i;throw Error(`${n} refused to access path outside client profile root`)}var yt=class extends p{clientsBasePath;constructor(e,t){super(e),this.clientsBasePath=t}async onInit(){this.registerCreateHandler(),this.registerListHandler(),this.registerGetHandler(),this.registerUpdateHandler(),this.registerDeleteHandler(),this.registerSetDefaultHandler()}registerCreateHandler(){this.registerHandler(w.profile.create,async e=>{let t=W(e.payload.clientId,`profile.create`),{name:n,description:r}=e.payload;if((await this.bus.request(q.get,{clientId:t,name:n})).record!==null)throw Error(`Profile '${n}' already exists for client '${t}'`);let s=a.join(this.clientsBasePath,t,`profiles`),c=vt(s,a.join(s,n),`profile.create`);await i.mkdir(c,{recursive:!0});try{await T(this.bus,{clientId:t,configDir:c,phase:`profile-create`});let i=Date.now(),a={id:o(),clientId:t,name:n,description:r??null,configDir:c,isDefault:!1,createdAt:i,updatedAt:i};await this.bus.request(q.set,a),e.setResult({profile:a})}catch(e){throw await i.rm(c,{recursive:!0,force:!0}),e}})}registerListHandler(){this.registerHandler(w.profile.list,async e=>{let t=W(e.payload.clientId,`profile.list`),n=await this.bus.request(q.list,{clientId:t});e.setResult({profiles:n.records})})}registerGetHandler(){this.registerHandler(w.profile.get,async e=>{let t=W(e.payload.clientId,`profile.get`),n=await this.bus.request(q.get,{clientId:t,name:e.payload.name});e.setResult({profile:n.record})})}registerUpdateHandler(){this.registerHandler(w.profile.update,async e=>{let t=W(e.payload.clientId,`profile.update`),{name:n,description:r}=e.payload,i=await this.bus.request(q.get,{clientId:t,name:n});if(i.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);let a={...i.record,description:r===void 0?i.record.description:r,updatedAt:Date.now()};await this.bus.request(q.set,a),e.setResult({profile:a})})}registerDeleteHandler(){this.registerHandler(w.profile.delete,async e=>{let t=W(e.payload.clientId,`profile.delete`),{name:n}=e.payload,r=await this.bus.request(q.get,{clientId:t,name:n});r.record!==null&&(vt(a.join(this.clientsBasePath,t,`profiles`),r.record.configDir,`profile.delete`),await i.rm(r.record.configDir,{recursive:!0,force:!0}));let o=await this.bus.request(q.delete,{clientId:t,name:n});e.setResult({success:o.success})})}registerSetDefaultHandler(){this.registerHandler(w.profile.setDefault,async e=>{let t=W(e.payload.clientId,`profile.setDefault`),{name:n}=e.payload,r=await this.bus.request(q.setDefault,{clientId:t,name:n});if(r.record===null)throw Error(`Profile '${n}' not found for client '${t}'`);e.setResult({profile:r.record})})}};function bt(e){return{subject:`sessionConfig.setup`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}function xt(e){return{subject:`sessionConfig.destroy`,$meta:{namespace:`client:${e}`,isRequest:!0,local:!1,channel:!1}}}const St=()=>Date.now();function Ct(){let e=_e.platform();if(e===`darwin`||e===`linux`||e===`win32`)return e;throw Error(`client.sessionConfig does not support platform '${e}'`)}function wt(e,t,n){let r=de.safeParse(t);if(!r.success)throw Error(`${n} received an unsafe lease ID`);let i=a.resolve(e),o=a.resolve(i,r.data),s=a.relative(i,o);if(s===``||!s.startsWith(`..`)&&!a.isAbsolute(s))return o;throw Error(`${n} refused to access path outside client sessions root`)}var Tt=class extends p{clientsBasePath;getNow;liveLeasesByClient=new Map;liveLeasesByOwner=new Map;constructor(e,t,n=St){super(e),this.clientsBasePath=t,this.getNow=n}async onInit(){this.registerCreateHandler(),this.registerHandler(w.sessionConfig.destroy,async e=>{let{clientId:t,leaseId:n}=e.payload,r=W(t,`sessionConfig.destroy`),i=this.resolveClientSessionDir(r,n,`sessionConfig.destroy`),a=this.getLiveLease(r,n);a===void 0?await this.destroyClientSessionDir(r,i):await this.releaseLiveLease(a),e.setResult({success:!0})}),this.registerHandler(w.sessionConfig.cleanup,async e=>{let{clientId:t}=e.payload,n=t===void 0?void 0:W(t,`sessionConfig.cleanup`),r=await this.cleanupOrphanedDirs(n);e.setResult({removed:r})}),this.registerHandler(ge.closed,async e=>{await this.destroyOwnedLeases(e.payload.sessionId)}),await this.cleanupOrphanedDirs()}registerCreateHandler(){this.registerHandler(w.sessionConfig.create,async e=>{let{clientId:t,leaseId:n,ownerSessionId:r,profileName:a,baseConfigDir:o,projectDir:s,configInheritance:c=`full`}=e.payload,l=W(t,`sessionConfig.create`),u=this.resolveClientSessionDir(l,n,`sessionConfig.create`),d=this.reserveLiveLease({clientId:l,leaseId:n,...r===void 0?{}:{ownerSessionId:r}});try{await i.mkdir(u,{recursive:!0});let t=await this.resolveBaseConfigDir(l,u,a,o),r=bt(l),f=await this.bus.requestOptional(r,{sessionDir:u,baseConfigDir:t,projectDir:s,platform:Ct(),configInheritance:c}),p=f.handled?f.data.env??{}:{},m=f.handled?f.data.authMaterialized:!1;if(await T(this.bus,{clientId:l,configDir:u,phase:`session-create`,projectDir:s}),d.releaseRequested)throw Error(`Config lease '${n}' was released while it was being created`);e.setResult({sessionDir:u,env:p,authMaterialized:m}),d.state=`ready`}catch(e){try{await this.beginLeaseCleanup(d)}catch(t){throw AggregateError([e,t],`Client session config creation and rollback both failed`)}throw e}finally{d.settleCreation(),d.state===`released`&&this.untrackLiveLease(d)}})}async resolveBaseConfigDir(e,t,n,r){if(r!==void 0)return r;if(n!==void 0){let t=await this.bus.request(q.get,{clientId:e,name:n});if(t.record!==null)return t.record.configDir;throw Error(`Profile '${n}' not found for client '${e}'`)}let i=(await this.bus.request(q.list,{clientId:e})).records.find(e=>e.isDefault);return i?i.configDir:t}async cleanupOrphanedDirs(e){let t=[],n=this.getNow(),r=e===void 0?await this.listClientIds():[e];return await Promise.all(r.map(async e=>{let r=a.join(this.clientsBasePath,e,`sessions`),o=await i.readdir(r).catch(()=>[]);await Promise.all(o.map(async a=>{if(!de.safeParse(a).success)return;let o=wt(r,a,`sessionConfig.cleanup`),s;try{s=await i.stat(o)}catch(e){let t=e.code;if(t===`ENOENT`||t===`ENOTDIR`)return;throw e}let c=s.birthtimeMs>0?s.birthtimeMs:s.ctimeMs;s.isDirectory()&&n-c>36e5&&!this.isLiveLease(e,a)&&(await this.destroyClientSessionDir(e,o),t.push(o))}))})),t}async destroyOwnedLeases(e){let t=[...this.liveLeasesByOwner.get(e)??[]],n=(await Promise.allSettled(t.map(async e=>{this.getLiveLease(e.clientId,e.leaseId)===e&&await this.releaseLiveLease(e)}))).flatMap(e=>e.status===`rejected`?[e.reason]:[]);if(n.length>0)throw AggregateError(n,`Failed to release config leases owned by session '${e}'`)}async destroyClientSessionDir(e,t){try{await this.bus.requestOptional(xt(e),{sessionDir:t,platform:Ct()})}finally{await i.rm(t,{recursive:!0,force:!0})}}isLiveLease(e,t){return this.getLiveLease(e,t)!==void 0}getLiveLease(e,t){return this.liveLeasesByClient.get(e)?.get(t)}resolveClientSessionDir(e,t,n){return wt(a.join(this.clientsBasePath,e,`sessions`),t,n)}reserveLiveLease(e){if(this.isLiveLease(e.clientId,e.leaseId))throw Error(`Config lease '${e.leaseId}' is already active for client '${e.clientId}'`);let t=Promise.withResolvers(),n={...e,state:`creating`,releaseRequested:!1,creationSettled:t.promise,settleCreation:()=>t.resolve()},r=this.liveLeasesByClient.get(n.clientId)??new Map;if(r.set(n.leaseId,n),this.liveLeasesByClient.set(n.clientId,r),n.ownerSessionId!==void 0){let e=this.liveLeasesByOwner.get(n.ownerSessionId)??new Set;e.add(n),this.liveLeasesByOwner.set(n.ownerSessionId,e)}return n}async releaseLiveLease(e){if(this.getLiveLease(e.clientId,e.leaseId)!==e){e.releasePromise!==void 0&&await e.releasePromise;return}if(e.releaseRequested=!0,e.state===`creating`){await e.creationSettled,e.releasePromise!==void 0&&await e.releasePromise;return}await this.beginLeaseCleanup(e)}beginLeaseCleanup(e){if(e.releasePromise!==void 0)return e.releasePromise;if(this.getLiveLease(e.clientId,e.leaseId)!==e)return Promise.resolve();let t=e.state===`creating`;e.state=`releasing`;let n=this.resolveClientSessionDir(e.clientId,e.leaseId,`sessionConfig.release`);return e.releasePromise=this.destroyClientSessionDir(e.clientId,n).finally(()=>{e.state=`released`,t||this.untrackLiveLease(e)}),e.releasePromise}untrackLiveLease(e){let t=this.liveLeasesByClient.get(e.clientId);if(t?.get(e.leaseId)===e&&(t.delete(e.leaseId),t.size===0&&this.liveLeasesByClient.delete(e.clientId),e.ownerSessionId!==void 0)){let t=this.liveLeasesByOwner.get(e.ownerSessionId);t?.delete(e),t?.size===0&&this.liveLeasesByOwner.delete(e.ownerSessionId)}}async listClientIds(){return(await i.readdir(this.clientsBasePath,{withFileTypes:!0}).catch(()=>[])).filter(e=>e.isDirectory()).map(e=>e.name)}};const Et=new Set([`hook.received`,`hook.handle`]);function Dt(e,t){return l.registerNamespace(s(`client:${e}`,{"hook.received":U,"hook.handle":c({request:U,response:Je}),...t})).subjects}function Ot(e,t){let n=Object.keys(t).filter(e=>Et.has(e));if(n.length===0)return;let r=n.join(`, `);throw Error([`[createClientNamespace] additionalSchemas for client:${e}`,`cannot override reserved shared hook subjects: ${r}`].join(` `))}function kt(e,t){let n=e;for(let e of t.split(`.`)){if(typeof n!=`object`||!n||!(e in n))return!1;n=n[e]}return!0}function At(e,t,n){let r=Object.keys(n).filter(e=>!kt(t,e));if(r.length!==0)throw Error(`[createClientNamespace] client:${e} was already registered without required subjects: ${r.join(`, `)}`)}function jt(e,t){let n=W(e,`createClientNamespace`),r=t??{};Ot(n,r);let i=Dt(n,r);return At(n,i,r),{namespaceDomain:`client:${n}`,subjects:i}}const Mt=_(`client_runtimes`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),status:e.text(`status`).notNull(),supervisorSessionId:e.text(`supervisor_session_id`),pid:e.int4(`pid`),parentPid:e.int4(`parent_pid`),adapterSessionId:e.text(`adapter_session_id`),sessionId:e.text(`session_id`),cwd:e.text(`cwd`),argv:e.jsonCol(`argv`),metadata:e.jsonCol(`metadata`),observedAt:e.epochMs(`observed_at`).notNull(),createdAt:e.epochMs(`created_at`).notNull(),updatedAt:e.epochMs(`updated_at`).notNull()}),{sqlite:e=>[m(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),m(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),m(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)],postgres:e=>[h(`idx_client_runtimes_supervisor_session_id`).on(e.supervisorSessionId),h(`idx_client_runtimes_pid_client_id`).on(e.pid,e.clientId),h(`idx_client_runtimes_adapter_session_id_client_id`).on(e.adapterSessionId,e.clientId)]}),Nt=Mt.sqlite,Pt=Mt.postgres,Ft=g({clientRuntimes:Nt},{clientRuntimes:Pt}),It=new Set(R);function Lt(e){if(!It.has(e.status))throw Error(`Unknown ClientRuntimeStatus in DB: '${e.status}'`);return{clientRuntimeId:e.id,clientId:e.clientId,status:e.status,supervisorSessionId:e.supervisorSessionId??void 0,pid:e.pid??void 0,parentPid:e.parentPid??void 0,adapterSessionId:e.adapterSessionId??void 0,sessionId:e.sessionId??void 0,cwd:e.cwd??void 0,argv:e.argv??void 0,metadata:e.metadata??void 0,observedAt:e.observedAt,createdAt:e.createdAt,updatedAt:e.updatedAt}}function Rt(e,t){let{clientRuntimes:n}=y(t,Ft),r=e.on(V.upsert,async e=>{let r=e.payload,i={clientId:r.clientId,status:r.status,supervisorSessionId:r.supervisorSessionId??null,pid:r.pid??null,parentPid:r.parentPid??null,adapterSessionId:r.adapterSessionId??null,sessionId:r.sessionId??null,cwd:r.cwd??null,argv:r.argv??null,metadata:r.metadata??null,observedAt:r.observedAt,updatedAt:r.updatedAt};await t.insert(n).values({id:r.clientRuntimeId,createdAt:r.createdAt,...i}).onConflictDoUpdate({target:n.id,set:i,setWhere:oe(S`excluded.updated_at`,n.updatedAt)}),e.setResult({success:!0})}),i=e.on(V.loadAll,async e=>{let r=await t.select().from(n);e.setResult({records:r.map(Lt)})});return()=>{r(),i()}}const zt=_(`client_binary_versions`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),version:e.text(`version`).notNull(),installPath:e.text(`install_path`).notNull(),installedAt:e.epochMs(`installed_at`).notNull(),createdAt:e.epochMs(`created_at`).notNull()}),{sqlite:e=>[ee(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)],postgres:e=>[ne(`uq_client_binary_versions_client_version`).on(e.clientId,e.version)]}),Bt=zt.sqlite,Vt=_(`client_binary_state`,e=>({clientId:e.text(`client_id`).primaryKey(),activeVersion:e.text(`active_version`),updatedAt:e.epochMs(`updated_at`).notNull()})),Ht=Vt.sqlite,Ut=zt.postgres,Wt=Vt.postgres,J=g({clientBinaryVersions:Bt,clientBinaryState:Ht},{clientBinaryVersions:Ut,clientBinaryState:Wt});function Y(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}function X(e){return{clientId:e.clientId,activeVersion:e.activeVersion??null,updatedAt:e.updatedAt}}function Gt(e){return{id:e.id,clientId:e.clientId,version:e.version,installPath:e.installPath,installedAt:e.installedAt,createdAt:e.createdAt}}async function Kt(e,t,n){await e.insert(n).values(Gt(t)).onConflictDoNothing({target:[n.clientId,n.version]})}function qt(e,t,n){return{clientId:e,activeVersion:t,updatedAt:n}}async function Jt(e,t,n,r,i){await e.insert(i).values(qt(t,n,r)).onConflictDoUpdate({target:i.clientId,set:{activeVersion:n,updatedAt:r}})}async function Yt(e,t){let{clientBinaryVersions:n}=y(e,J);await Kt(e,t,n)}async function Xt(e,t,n,r){let{clientBinaryVersions:i,clientBinaryState:a}=y(e,J);return v(e,async e=>{let[o]=await e.select().from(a).where(x(a.clientId,t.clientId)).limit(1),s=o?.activeVersion??null;return await Kt(e,t,i),n?(await Jt(e,t.clientId,t.version,r,a),{previousActiveVersion:s,activeVersion:t.version}):{previousActiveVersion:s,activeVersion:s}})}async function Zt(e,t){let{clientBinaryVersions:n,clientBinaryState:r}=y(e,J);return v(e,async e=>{let[i]=await e.select().from(r).where(x(r.clientId,t)).limit(1),a=await e.select().from(n).where(x(n.clientId,t));return{state:i?X(i):null,versions:a.map(Y)}})}async function Qt(e){let{clientBinaryVersions:t,clientBinaryState:n}=y(e,J);return v(e,async e=>{let r=await e.select().from(n),i=await e.select().from(t);return{states:r.map(X),versions:i.map(Y)}})}async function $t(e,t){let{clientBinaryState:n}=y(e,J),r={clientId:t.clientId,activeVersion:t.activeVersion??null,updatedAt:t.updatedAt};await e.insert(n).values(r).onConflictDoUpdate({target:n.clientId,set:r})}async function en(e,t,n,r){let{clientBinaryState:i}=y(e,J);return v(e,async e=>{let[a]=await e.select().from(i).where(x(i.clientId,t)).limit(1),o=a?.activeVersion??null;return await Jt(e,t,n,r,i),{previousActiveVersion:o,activeVersion:n}})}async function tn(e,t,n,r){let{clientBinaryVersions:i,clientBinaryState:a}=y(e,J);return v(e,async e=>{let[o]=await e.select().from(a).where(x(a.clientId,t)).limit(1),s=o?.activeVersion??null;if(!ie(await e.delete(i).where(b(x(i.clientId,t),x(i.version,n)))))return{removedVersion:null,previousActiveVersion:s,activeVersion:s};await e.update(a).set({activeVersion:null,updatedAt:r}).where(b(x(a.clientId,t),x(a.activeVersion,n)));let[c]=await e.select().from(a).where(x(a.clientId,t)).limit(1);return{removedVersion:n,previousActiveVersion:s,activeVersion:c?.activeVersion??null}})}function nn(e,t){let{clientBinaryVersions:n,clientBinaryState:r}=y(t,J),i=[e.on(M.insertVersion,async e=>{await Yt(t,e.payload),e.setResult({success:!0})}),e.on(M.recordInstalledVersion,async e=>{let{versionRecord:n,makeActive:r,updatedAt:i}=e.payload,a=await Xt(t,n,r,i);e.setResult(a)}),e.on(M.listVersions,async e=>{let r=await t.select().from(n).where(x(n.clientId,e.payload.clientId));e.setResult({versions:r.map(Y)})}),e.on(M.getSnapshot,async e=>{let{state:n,versions:r}=await Zt(t,e.payload.clientId);e.setResult({state:n,versions:r})}),e.on(M.loadAllVersions,async e=>{let r=await t.select().from(n);e.setResult({versions:r.map(Y)})}),e.on(M.upsertState,async e=>{await $t(t,e.payload),e.setResult({success:!0})}),e.on(M.setActiveVersion,async e=>{let{clientId:n,activeVersion:r,updatedAt:i}=e.payload,a=await en(t,n,r,i);e.setResult(a)}),e.on(M.getState,async e=>{let[n]=await t.select().from(r).where(x(r.clientId,e.payload.clientId)).limit(1);e.setResult({state:n?X(n):null})}),e.on(M.loadAllState,async e=>{let n=await t.select().from(r);e.setResult({states:n.map(X)})}),e.on(M.loadSnapshot,async e=>{let{states:n,versions:r}=await Qt(t);e.setResult({states:n,versions:r})}),e.on(M.removeVersionAndClearActive,async e=>{let{clientId:n,version:r,updatedAt:i}=e.payload,a=await tn(t,n,r,i);e.setResult(a)})];return()=>{for(let e of i)e()}}const rn=_(`client_profiles`,e=>({id:e.text(`id`).primaryKey(),clientId:e.text(`client_id`).notNull(),name:e.text(`name`).notNull(),description:e.text(`description`),configDir:e.text(`config_dir`).notNull(),isDefault:e.bool(`is_default`).notNull().default(!1),createdAt:e.epochMs(`created_at`).notNull(),updatedAt:e.epochMs(`updated_at`).notNull()}),{sqlite:e=>[te(`uq_client_profiles_client_name`).on(e.clientId,e.name),te(`uq_client_profiles_default`).on(e.clientId).where(S`${e.isDefault} = 1`)],postgres:e=>[re(`uq_client_profiles_client_name`).on(e.clientId,e.name),re(`uq_client_profiles_default`).on(e.clientId).where(S`${e.isDefault} = true`)]}),an=rn.sqlite,on=rn.postgres,sn=g({clientProfiles:an},{clientProfiles:on});function Z(e){return{id:e.id,clientId:e.clientId,name:e.name,description:e.description??null,configDir:e.configDir,isDefault:e.isDefault,createdAt:e.createdAt,updatedAt:e.updatedAt}}async function cn(e,t,n){let{clientProfiles:r}=y(e,sn),i=Date.now();return v(e,async e=>{let[a]=await e.select().from(r).where(b(x(r.clientId,t),x(r.name,n))).limit(1);if(a===void 0)return null;await e.update(r).set({isDefault:!1,updatedAt:i}).where(b(x(r.clientId,t),x(r.isDefault,!0))),await e.update(r).set({isDefault:!0,updatedAt:i}).where(b(x(r.clientId,t),x(r.name,n)));let[o]=await e.select().from(r).where(b(x(r.clientId,t),x(r.name,n))).limit(1);return o===void 0?null:Z(o)})}function ln(e,t){let{clientProfiles:n}=y(t,sn),r=[e.on(q.get,async e=>{let{clientId:r,name:i}=e.payload,[a]=await t.select().from(n).where(b(x(n.clientId,r),x(n.name,i))).limit(1);e.setResult({record:a?Z(a):null})}),e.on(q.getById,async e=>{let[r]=await t.select().from(n).where(x(n.id,e.payload.id)).limit(1);e.setResult({record:r?Z(r):null})}),e.on(q.list,async e=>{let r=await t.select().from(n).where(x(n.clientId,e.payload.clientId));e.setResult({records:r.map(Z)})}),e.on(q.set,async e=>{let r=e.payload,i={id:r.id,clientId:r.clientId,name:r.name,description:r.description??null,configDir:r.configDir,isDefault:r.isDefault,createdAt:r.createdAt,updatedAt:r.updatedAt};await t.insert(n).values(i).onConflictDoUpdate({target:n.id,set:{name:r.name,description:r.description??null,configDir:r.configDir,isDefault:r.isDefault,updatedAt:r.updatedAt}}),e.setResult({success:!0})}),e.on(q.delete,async e=>{let{clientId:r,name:i}=e.payload,a=await t.delete(n).where(b(x(n.clientId,r),x(n.name,i)));e.setResult({success:ie(a)})}),e.on(q.clearDefault,async e=>{await t.update(n).set({isDefault:!1,updatedAt:Date.now()}).where(b(x(n.clientId,e.payload.clientId),x(n.isDefault,!0))),e.setResult({success:!0})}),e.on(q.setDefault,async e=>{let{clientId:n,name:r}=e.payload,i=await cn(t,n,r);e.setResult({record:i})})];return()=>{for(let e of r)e()}}function un(e,t){return`${e}\0${t}`}function dn(e){let t=e=>typeof e==`string`&&e.trim().length>0;if(typeof e!=`object`||!e)throw Error(`Provider contract catalog must be an object`);if(!t(e.clientId)||!t(e.contractId)||!t(e.version))throw Error(`Provider contract catalog requires non-empty clientId, contractId, and version`);if(!Array.isArray(e.supportedInteractions)||e.supportedInteractions.length===0)throw Error(`Provider contract catalog requires supported interactions`);if(e.supportedInteractions.some(e=>!t(e))||new Set(e.supportedInteractions).size!==e.supportedInteractions.length)throw Error(`Provider contract catalog interactions must be non-empty and unique`);if(!Array.isArray(e.blockability)||e.blockability.length!==e.supportedInteractions.length)throw Error(`Provider contract catalog requires complete blockability metadata`);let n=new Map;for(let r of e.blockability){if(!t(r.interaction)||typeof r.blockable!=`boolean`||n.has(r.interaction))throw Error(`Provider contract catalog blockability metadata must be complete and unique`);n.set(r.interaction,r.blockable)}if(e.supportedInteractions.some(e=>!n.has(e))||typeof e.validate!=`function`)throw Error(`Provider contract catalog must provide blockability metadata and a validator for every interaction`)}var fn=class{entries=new Map;registerProviderContract(e,t){dn(t);let n=un(t.clientId,t.contractId),r=this.entries.get(n);if(r)throw Error(`Provider contract collision: contract '${t.contractId}' for client '${t.clientId}' is already registered by extension '${r.extensionId}'; extension '${e}' cannot claim it`);this.entries.set(n,{extensionId:e,catalog:t})}unregisterProviderContract(e,t,n){let r=un(t,n),i=this.entries.get(r);i&&i.extensionId===e&&this.entries.delete(r)}unregisterAllByExtension(e){for(let[t,n]of this.entries)n.extensionId===e&&this.entries.delete(t)}getProviderContract(e,t){let n=un(e,t);return this.entries.get(n)?.catalog}getProviderContractsByClient(e){let t=[];for(let n of this.entries.values())n.catalog.clientId===e&&t.push(n.catalog);return t}getAllProviderContracts(){return[...this.entries.values()].map(e=>e.catalog)}clear(){this.entries.clear()}};function pn(e,t){return`${e}/${t}`}function mn(e,t,n){switch(e.kind){case`event-name`:return e.name===t;case`capability`:return n.includes(e.capability)}}function hn(e,t){let n=t.definition.priority-e.definition.priority;return n===0?e.ordinal-t.ordinal:n}function gn(e){return Array.isArray(e)&&e.length>0&&e.every(e=>typeof e!=`object`||!e?!1:e.kind===`event-name`?typeof e.name==`string`&&e.name.trim().length>0:e.kind===`capability`&&typeof e.capability==`string`&&e.capability.trim().length>0)}function _n(e){return e.lane===`canonical`?e.clientIds===void 0||Array.isArray(e.clientIds)&&e.clientIds.length>0&&e.clientIds.every(e=>typeof e==`string`&&e.trim().length>0):e.lane===`provider`?typeof e.clientId==`string`&&e.clientId.trim().length>0&&typeof e.contractId==`string`&&e.contractId.trim().length>0:!1}function vn(e,t){if(typeof t!=`object`||!t||Array.isArray(t))return{code:`invalid-contributor-lane`,message:`Contributor definition must be an object`,extensionName:e};let n={...typeof t.id==`string`&&{contributorId:t.id},extensionName:e};if(!Number.isFinite(t.priority))return{...n,code:`invalid-priority`,message:`Contributor '${t.id}' priority must be a finite number`};if(!gn(t.selectors))return{...n,code:`invalid-selectors`,message:`Contributor '${t.id}' requires non-empty valid selectors`};if(typeof t.respond!=`function`)return{...n,code:`invalid-respond`,message:`Contributor '${t.id}' respond must be a function`};if(!_n(t))return{...n,code:`invalid-contributor-lane`,message:`Contributor '${t.id}' has an invalid lane or target identity`};if(!pe(t.id))return{...n,code:`invalid-contributor-id`,message:`Contributor ID is empty or invalid`};if(!me(t.timeoutMs))return{...n,code:`invalid-timeout-ms`,message:`Contributor '${t.id}' has an invalid timeoutMs: ${String(t.timeoutMs)}; must be a positive finite number`}}function yn(e,t,n,r){let i=[],a=new Set;for(let o of t){let t=vn(e,o);if(t){i.push(t);continue}let s=pn(e,o.id);if(a.has(s)){i.push({code:`invalid-contributor-id`,message:`Duplicate contributor ID '${o.id}' within the same extension batch '${e}'`,contributorId:o.id,extensionName:e});continue}if(r.has(s)){i.push({code:`invalid-contributor-id`,message:`Contributor ID '${o.id}' is already registered by extension '${e}'`,contributorId:o.id,extensionName:e});continue}a.add(s),bn(e,o,n,i)}return i}function bn(e,t,n,r){let i=t.failurePolicy??`open`;if(t.lane===`provider`){let a=n.getProviderContract(t.clientId,t.contractId);if(!a){r.push({code:`inactive-provider-contract`,message:`Provider contributor requires active contract '${t.contractId}' for client '${t.clientId}'`,contributorId:t.id,extensionName:e});return}xn(e,t,[a],i,r);return}xn(e,t,t.clientIds?t.clientIds.flatMap(e=>n.getProviderContractsByClient(e)):n.getAllProviderContracts(),i,r)}function xn(e,t,n,r,i){for(let a of t.selectors){let o=a.kind===`capability`?a.capability:a.name,s=n.filter(e=>e.supportedInteractions.includes(o));if((t.lane===`provider`||a.kind===`capability`)&&s.length===0){i.push({code:`unsupported-interaction`,message:`Interaction '${o}' is not supported by an eligible active provider contract`,contributorId:t.id,extensionName:e});continue}if(r===`closed`){if(s.length===0){i.push({code:`closed-policy-on-non-blockable`,message:`Closed failure policy requires blockability proof for interaction '${o}', but no contract declares it for an eligible active client`,contributorId:t.id,extensionName:e});continue}for(let n of s)for(let r of he([a],n))i.push({code:`closed-policy-on-non-blockable`,message:r,contributorId:t.id,extensionName:e})}}}var Sn=class{contractRegistry;contributors=new Map;extensionIndex=new Map;nextOrdinal=1;constructor(e){this.contractRegistry=e}installContributors(e,t){let n=yn(e,t,this.contractRegistry,this.contributors);if(n.length>0)return{errors:n};let r=this.extensionIndex.get(e)??new Set;for(let n of t){let t=pn(e,n.id),i=Object.freeze({...n,selectors:Object.freeze(n.selectors.map(e=>Object.freeze({...e})))}),a=Object.freeze({namespacedId:t,extensionId:e,ordinal:this.nextOrdinal,definition:i});this.nextOrdinal+=1,this.contributors.set(t,a),r.add(t)}return this.extensionIndex.set(e,r),{errors:[]}}removeContributors(e){let t=this.extensionIndex.get(e);if(t){for(let e of t)this.contributors.delete(e);this.extensionIndex.delete(e)}}snapshot(e,t,n,r=[]){let i=[];for(let a of this.contributors.values()){let{definition:o}=a;o.lane===`provider`&&(o.clientId!==e||o.contractId!==t)||o.lane===`canonical`&&o.clientIds!==void 0&&!o.clientIds.includes(e)||a.definition.selectors.some(e=>mn(e,n,r))&&i.push(a)}return i.sort(hn),Object.freeze(i)}clear(){this.contributors.clear(),this.extensionIndex.clear(),this.nextOrdinal=1}};function Cn(e,t){return{filter:e=>!!e.clientHookResponses,async processActivated(n,r,i){let a=r.clientHookResponses;if(!a)return;let o={extensionName:n,extensionContext:i,getProviderContract:(e,n)=>t.getProviderContract(e,n)},s;try{s=await a.createContributors(o)}catch(e){throw Error(`[ClientHookResponseContributionProcessor] createContributors failed for '${n}': ${e instanceof Error?e.message:String(e)}`,{cause:e})}let c=e.installContributors(n,s);if(c.errors.length>0){let e=c.errors.map(e=>`[${e.code}] ${e.contributorId??`<unknown>`}: ${e.message}`).join(`; `);throw Error(`[ClientHookResponseContributionProcessor] Contributor validation failed for '${n}': ${e}`)}},async processStopped(t){e.removeContributors(t)}}}var wn=class{runtimeService;binaryManager;configPrimeService;profileService;sessionConfigService;providerContractRegistry;hookResponseRegistry;constructor(e,t,n,r,i,a,o){this.runtimeService=e,this.binaryManager=t,this.configPrimeService=n,this.profileService=r,this.sessionConfigService=i,this.providerContractRegistry=a,this.hookResponseRegistry=o}async init(){let e=(await Promise.allSettled([this.runtimeService.init(),this.binaryManager.init(),this.configPrimeService.init(),this.profileService.init(),this.sessionConfigService.init()])).filter(e=>e.status===`rejected`);if(e.length>0){for(let t=1;t<e.length;t++)console.warn(`[ClientsCoreService] Multiple init failures, secondary:`,e[t].reason);throw e[0].reason}}async destroy(){let e=(await Promise.allSettled([this.runtimeService.destroy(),this.binaryManager.destroy(),this.configPrimeService.destroy(),this.profileService.destroy(),this.sessionConfigService.destroy()])).filter(e=>e.status===`rejected`);if(e.length>0)throw AggregateError(e.map(e=>e.reason),`ClientsCoreService failed to tear down cleanly`)}};const Tn=u(`makaio.clients-core`);function En(e){let t=[],n=()=>{for(let e of[...t].reverse())e()};try{for(let n of e)t.push(n())}catch(e){throw n(),e}return n}function Dn(e={}){let{definitions:t=[],strategyDependencies:n,postInstallHandlers:r,binaryResolutionPolicy:i}=e,o=[...t],s=new fn,c=new Sn(s);return{name:`makaio.clients-core`,displayName:`Clients Core`,version:`0.1.0`,critical:!0,namespaces:[j,B,_t],storage:{registerHandlers:ae((e,t)=>En([()=>Rt(e,t),()=>nn(e,t),()=>ln(e,t)]))},create:e=>{let t=new N(o),l=a.join(e.makaioHome,`clients`),u=new ze(e.bus,{basePath:a.join(e.makaioHome,`binaries`),configBasePath:l,postInstallHandlers:r,...i!==void 0&&{resolutionPolicy:i}},t,n),d=new yt(e.bus,l),f=new Tt(e.bus,l);return new wn(new ut(e.bus),u,new gt(e.bus),d,f,s,c)},runtimeBoot:{configure:e=>{e.registerContributionProcessor(Cn(c,s))}}}}async function On(e,t){let n=await e.requestOptional(w.resolveBinary,{clientId:t});return n.handled?n.data:void 0}function kn(e,t,n){return[...n??[],e,...t].map(Mn).join(` `)}function An(e,t,n,r,i){return kn(e,[...i??[],...t.split(` `),n],r)}function jn(e){return e.runtimeCapabilities.hookEvents.map(e=>({eventName:e.name,mode:fe(e)}))}function Mn(e){return/^[A-Za-z0-9_@%+=:,./-]+$/.test(e)?e:`'${e.replaceAll(`'`,`'\\''`)}'`}function Nn(e){if(e===void 0)return!0;if(!Array.isArray(e))return`canonicalEffects must be an array`;for(let t of e){if(typeof t!=`object`||!t||t.kind!==`context.append`||typeof t.value!=`string`)return`canonicalEffects must contain complete context.append effects`;if(Object.keys(t).some(e=>e!==`kind`&&e!==`value`))return`canonicalEffects must contain only kind and value`}return!0}function Pn(e,t,n){return e===void 0?!0:typeof e!=`object`||!e||Array.isArray(e)||e.clientId!==t||e.contractId!==n||typeof e.effects!=`object`||e.effects===null||Array.isArray(e.effects)?`providerEnvelope must contain the exact clientId, contractId, and an effects object`:Object.keys(e).some(e=>e!==`clientId`&&e!==`contractId`&&e!==`effects`)?`providerEnvelope must contain only clientId, contractId, and effects`:!0}function Fn(e,t,n,r,i,a){if(!r)return`Provider contributor requires active contract '${t.contractId}'`;if(r.clientId!==n||r.clientId!==t.clientId)return`Provider contract client '${r.clientId}' does not match '${t.clientId}'`;if(r.contractId!==t.contractId)return`Provider contract '${r.contractId}' does not match '${t.contractId}'`;let o=Pn(e.providerEnvelope,t.clientId,t.contractId);return o===!0?r.validate(e,{clientId:n,eventName:i,eventPayload:a}):o}function In(e,t,n,r,i,a){if(e===void 0)return!0;if(typeof e!=`object`||!e||Array.isArray(e))return`Contributor response must be an object or undefined`;let o=t.lane===`canonical`?[`canonicalEffects`]:[`providerEnvelope`];return Object.keys(e).some(e=>!o.includes(e))?`Contributor response contains keys outside the ${t.lane} lane`:t.lane===`canonical`?Nn(e.canonicalEffects):Fn(e,t,n,r,i,a)}const Q=Symbol(`contributor-timeout`);function Ln(e){return e.failurePolicy??ue}function Rn(e){return e.namespacedId??e.definition.id}function $(e,t){return e===`closed`?`closed-failure`:t}function zn(e){if(!e)return;let t=[];return e.canonicalEffects&&t.push(...e.canonicalEffects),e.providerEnvelope&&t.push(e.providerEnvelope),t.length>0?t:void 0}function Bn(e,t,n){let r=t-Date.now();return r<=0||n.signal.aborted?(n.abort(Error(`Contributor deadline expired`)),Promise.resolve(Q)):new Promise((i,a)=>{let o=!1,s=e=>{o||(o=!0,clearTimeout(c),n.signal.removeEventListener(`abort`,l),i(e))},c=setTimeout(()=>{n.abort(Error(`Contributor timeout`)),s(Q)},r),l=()=>s(Q);n.signal.addEventListener(`abort`,l,{once:!0}),e.then(e=>{Date.now()>=t?(n.abort(Error(`Contributor timeout`)),s(Q)):s(e)},e=>{o||(o=!0,clearTimeout(c),n.signal.removeEventListener(`abort`,l),a(e))})})}function Vn(e){let t=[],n=[],r=`Request deadline already expired before collection started`;for(let i of e){let e=Rn(i),a=$(Ln(i.definition),`timeout`);t.push({contributorId:e,outcome:a,durationMs:0}),n.push({contributorId:e,severity:`error`,message:r})}let i=t.find(e=>e.outcome===`closed-failure`);return{outcomes:t,diagnostics:n,closedFailure:i?{contributorId:i.contributorId,detail:r}:void 0}}function Hn(e,t){if(t.aborted){e.abort(t.reason);return}let n=()=>{e.abort(t.reason)};t.addEventListener(`abort`,n,{once:!0}),e.signal.addEventListener(`abort`,()=>{t.removeEventListener(`abort`,n)},{once:!0})}function Un(e,t,n,r,i,a){let{definition:o}=e,s=Rn(e),c=Date.now(),l=c+o.timeoutMs,u=n===void 0?l:Math.min(n,l),d=u-c,f=new AbortController;r&&Hn(f,r);let p={clientId:t,deadline:u,remainingBudgetMs:d,signal:f.signal,eventName:i,eventPayload:a};if(f.signal.aborted)return{contributorId:s,definition:o,startMs:c,abort:f,settled:Promise.resolve({tag:`timeout`})};let m;try{let e=o.respond(p);m=e instanceof Promise?e:Promise.resolve(e)}catch(e){m=Promise.reject(e)}return{contributorId:s,definition:o,startMs:c,abort:f,settled:Bn(m,u,f).then(e=>e===Q?{tag:`timeout`}:{tag:`ok`,response:e},e=>({tag:`rejected`,error:e}))}}function Wn(e,t,n,r,i,a){let{contributorId:o,definition:s,startMs:c,abort:l}=e,u=Date.now()-c,d=Ln(s);if(l.signal.aborted||l.abort(Error(`Collection complete`)),t.tag===`timeout`){let e=`Contributor timed out after ${u}ms`;return{outcome:{contributorId:o,outcome:$(d,`timeout`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e}}}if(t.tag===`rejected`){let e=`Contributor rejected: ${t.error instanceof Error?t.error.message:String(t.error)}`;return{outcome:{contributorId:o,outcome:$(d,`rejection`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e,cause:t.error}}}let{response:f}=t,p=In(f,s,n,r,i,a);if(p!==!0){let e=`Validation failed: ${p}`;return{outcome:{contributorId:o,outcome:$(d,`rejection`),durationMs:u},diagnostic:{contributorId:o,severity:`error`,message:e}}}return{outcome:{contributorId:o,outcome:`success`,durationMs:u,effects:zn(f)}}}function Gn(e,t){let n=e.find(e=>e.outcome===`closed-failure`);if(!n)return{outcomes:e,diagnostics:t};let r={contributorId:n.contributorId,detail:t.find(e=>e.contributorId===n.contributorId)?.message??`Closed failure`};return{outcomes:e.map(e=>{if(e.effects){let{effects:t,...n}=e;return n}return e}),diagnostics:t,closedFailure:r}}async function Kn(e,t,n,r,i,a,o){if(e.length===0)return{outcomes:[],diagnostics:[]};if(n!==void 0&&n<=Date.now())return Vn(e);let s=e.map(e=>Un(e,t,n,r,i,a)),c=await Promise.all(s.map(e=>e.settled)),l=[],u=[];for(let e=0;e<s.length;e++){let{outcome:n,diagnostic:r}=Wn(s[e],c[e],t,o,i,a);l.push(n),r&&u.push(r)}return Gn(l,u)}export{it as AbsolutePathSchema,Ce as BinaryNotFoundError,R as CLIENT_RUNTIME_STATUSES,we as ClientAccountRegistry,Fe as ClientBinaryJobRunner,ze as ClientBinaryManager,k as ClientBinaryStateRecordSchema,j as ClientBinaryStorageNamespace,M as ClientBinaryStorageSubjects,O as ClientBinaryVersionRecordSchema,Pe as ClientBinaryVersionResolver,gt as ClientConfigPrimeService,N as ClientDefinitionRegistry,Je as ClientHookHandleResponseSchema,fn as ClientHookProviderContractRegistry,Sn as ClientHookResponseRegistry,G as ClientProfileRecordSchema,yt as ClientProfileService,_t as ClientProfileStorageNamespace,q as ClientProfileStorageSubjects,We as ClientRuntimeRegistry,ut as ClientRuntimeService,B as ClientRuntimeStorageNamespace,V as ClientRuntimeStorageSubjects,Tt as ClientSessionConfigService,ce as ClientSubjects,ct as ClientWiringAggregatedResultSchema,ot as ClientWiringApplyResponseSchema,le as ClientWiringEntrySchema,at as ClientWiringListResponseSchema,st as ClientWiringRemoveResponseSchema,wn as ClientsCoreService,Tn as ClientsCoreToken,qe as DEFAULT_HOOK_HANDLE_TIMEOUT_MS,Ye as NOOP_HOOK_HANDLE_RESPONSE,U as RawClientHookPayloadSchema,z as RuntimeRecordSchema,lt as assertAbsoluteProjectDir,be as atomicModifyFile,kn as buildClientCommand,$e as buildClientSessionBase,An as buildHookCommand,W as canonicalizeClientId,Mt as clientRuntimesDual,Kn as collectContributions,Cn as createClientHookResponseContributionProcessor,jt as createClientNamespace,rt as createClientWiringListSubjectDef,nt as createClientWiringSubjectDef,Dn as createClientsCorePackage,Xe as createRawClientHookHandleSubject,Ke as createRawClientHookReceivedSubject,t as createStrategy,jn as deriveSessionEventDescriptors,et as emitBestEffort,E as isPathWithinBase,Qe as pickNonEmptyString,Ze as pickNonEmptyStringValue,nn as registerDrizzleClientBinaryStorage,ln as registerDrizzleProfileStorage,Rt as registerDrizzleRuntimeStorage,En as registerStorageHandlersWithRollback,D as resolveAndValidateBasePath,On as resolveClientBinary,n as verifyInstalledVersion};

package/dist/clients/managed-install.d.mts

@@ -1,2 +1,2 @@
-import { a as StrategyDependencies, i as InstallStrategy, n as createStrategy, r as InstallArtifact, t as verifyInstalledVersion } from "../client-binary-version-verifier-CgjM_vGF.mjs";
+import { a as StrategyDependencies, i as InstallStrategy, n as createStrategy, r as InstallArtifact, t as verifyInstalledVersion } from "../client-binary-version-verifier-lcv83Hq3.mjs";
 export { type InstallArtifact, type InstallStrategy, type StrategyDependencies, createStrategy, verifyInstalledVersion };

package/dist/clients/managed-install.mjs

@@ -1 +1 @@
-import{r as e,t}from"../client-binary-version-verifier-taewmKTY.mjs";export{e as createStrategy,t as verifyInstalledVersion};
+import{r as e,t}from"../client-binary-version-verifier-0lCKZOTg.mjs";export{e as createStrategy,t as verifyInstalledVersion};

package/dist/code-execution/worker-entry.d.mts

@@ -0,0 +1,21 @@
+import { l as CodeExecutionWorkerOutcome, u as CodeExecutionWorkerTask } from "../types-DnK6Wa_Y.mjs";
+
+//#region runtimes/node/src/code-execution/worker-entry.d.ts
+/**
+ * Execute one materialized program invocation inside a Piscina worker thread.
+ *
+ * Registers this invocation's import allowlist and a scoped TypeScript loader,
+ * reaches the program's entry namespace through the generated module the
+ * materializer wrote for it, invokes the requested export with the JSON
+ * argument, validates the returned value, and always removes both registrations
+ * before returning.
+ *
+ * Both registrations are keyed to this invocation alone — the allowlist to its
+ * program root, the loader to its namespace — so a worker thread serving
+ * invocations in sequence never lets one invocation's rules decide another's.
+ * @param task - Structured-clone-safe task describing this invocation.
+ * @returns Clone-safe outcome envelope for the host thread.
+ */
+declare function executeCodeInWorker(task: CodeExecutionWorkerTask): Promise<CodeExecutionWorkerOutcome>;
+//#endregion
+export { executeCodeInWorker as default, executeCodeInWorker };

package/dist/code-execution/worker-entry.mjs

@@ -0,0 +1 @@
+import{f as e,h as t,l as n,m as r}from"../types-Cwza95hS.mjs";import{builtinModules as i,registerHooks as a}from"node:module";import{JsonValueSchema as o,snapshotJsonBoundary as s}from"@makaio/framework/contracts";import{register as c}from"tsx/esm/api";const l=new Set(i),u=/^[a-z][a-z\d+.-]*:/i,d=new Set([`ERR_MODULE_NOT_FOUND`,`ERR_PACKAGE_PATH_NOT_EXPORTED`,`ERR_PACKAGE_IMPORT_NOT_DEFINED`,`ERR_UNSUPPORTED_DIR_IMPORT`]),f=new WeakSet;var p=class extends Error{code=`ERR_MODULE_NOT_FOUND`;constructor(e,t){super(`Cannot find package '${e}' imported from ${t}`),this.name=`UnsupportedImportError`}};function m(e){try{return!(e instanceof Error)||!(`code`in e)?void 0:typeof e.code==`string`?e.code:void 0}catch{return}}function h(e){return e instanceof p||(typeof e==`object`||typeof e==`function`)&&e!==null&&f.has(e)}function g(e){if(e===``||e.startsWith(`.`)||e.startsWith(`/`)||u.test(e))return;let t=e.split(`/`),n=e.startsWith(`@`)?t.slice(0,2).join(`/`):t[0]??``;return n===``||l.has(n)?void 0:n}function _(e,t){let n=new Set(t);return a({resolve(t,r,i){let a=r.parentURL;if(a!==void 0&&e.some(e=>a.startsWith(e))){let e=g(t);if(e!==void 0&&!n.has(e))throw new p(e,a)}try{return i(t,r)}catch(e){throw d.has(m(e)??``)&&(typeof e==`object`||typeof e==`function`)&&e!==null&&f.add(e),e}}})}const v={"prototype-key":`The invoked export returned a value carrying a "__proto__" own key.`,"non-plain-object":`The invoked export returned an object that is not JSON data; only plain objects and arrays are.`,"symbol-key":`The invoked export returned a value that cannot be transported as JSON.`,"non-enumerable-key":`The invoked export returned a value that cannot be transported as JSON.`,"extra-array-key":`The invoked export returned a value that cannot be transported as JSON.`,"cyclic-reference":`The invoked export returned a non-serializable cyclic value.`,"nesting-too-deep":`The invoked export returned a value exceeding the maximum JSON container nesting.`,"negative-zero":`The invoked export returned -0, which JSON would transport as 0.`,"unreadable-value":`The invoked export returned a value that cannot be read into a JSON boundary snapshot.`};function y(e,n,r){return{kind:`failed`,code:e,message:t(n,r)}}function b(e){return typeof e==`function`}function x(e){return typeof e==`object`&&!!e}async function S(t,n){try{return{ok:!0,moduleNamespace:await t(n.entryNamespaceUrl,n.parentUrl)}}catch(t){return{ok:!1,outcome:y(h(t)?`unsupported_import`:`compilation_failed`,e(t),n.redactedPaths)}}}function C(e,t){let n=s(e);if(!n.ok)return{ok:!1,message:v[n.violation.kind]};let i=o.safeParse(n.value);if(!i.success)return{ok:!1,message:n.value===void 0?`The invoked export returned a value that has no JSON representation.`:`The invoked export returned a value that is not JSON-safe.`};let a=r(i.data);return a>t?{ok:!1,message:`The invoked export returned ${a} serialized bytes, which exceeds the limit of ${t}.`}:{ok:!0,value:i.data}}async function w(e,t){try{await e.unregister()}catch(e){console.warn(`[code-execution] Failed to unregister the loader for namespace %s: %s`,t,e)}}async function T(t){let r=_(t.programRootUrls,t.allowedPackages),i=c({namespace:t.namespace,tsconfig:!1});try{let r=await S((e,t)=>i.import(e,t),t);if(!r.ok)return r.outcome;let a=r.moduleNamespace[n];if(!x(a))return y(`provider_failed`,`The entry module was not reached through a generated "${n}" export.`,t.redactedPaths);let o=a[t.exportName];if(!b(o)){let e=o===void 0?`is not exported`:`is ${typeof o}, not a function`;return y(`entrypoint_not_found`,`Export "${t.exportName}" ${e}.`,t.redactedPaths)}let s;try{s=await o(t.arguments)}catch(n){return y(`handler_failed`,e(n),t.redactedPaths)}let c=C(s,t.maxResultBytes);return c.ok?{kind:`completed`,value:c.value}:y(`invalid_result`,c.message,t.redactedPaths)}finally{await w(i,t.namespace),r.deregister()}}export{T as default,T as executeCodeInWorker};

package/dist/code-execution-Ckmn8OZu.mjs

@@ -0,0 +1 @@
+import{o as e,s as t}from"./json-value-BBZ6uGwc.mjs";import{n}from"./capability-j3NekkIu.mjs";import{z as r}from"zod";import{createBusNamespace as i}from"@makaio/framework/core";const a=`code-execution`,o=[`trusted-code-only`,`isolated`],s=[`completed`,`failed`,`timed_out`,`cancelled`],c=[`provider_unavailable`,`invalid_provider`,`invalid_program`,`unsupported_import`,`compilation_failed`,`entrypoint_not_found`,`handler_failed`,`invalid_result`,`provider_failed`],l=[...c,`execution_timeout`,`cancelled`],u=[`timeout`,`cancellation`],d=512,f=255,p=1024,m=256,h=/^[A-Za-z]:/,g=/[<>:"|?*]|\p{Cc}/u,_=/[. ]$/,v=/^(?:CON|PRN|AUX|NUL|(?:COM|LPT)[0-9\u00B9\u00B2\u00B3])(?:\.|$)/i,y=new TextEncoder,b=e=>t=>t.split(`/`).every(e),x=r.string().min(1).refine(e=>!e.includes(`\0`),{message:`virtual path must not contain NUL bytes`}).refine(e=>e.isWellFormed(),{message:`virtual path must be well-formed Unicode (no unpaired surrogates)`}).refine(e=>!e.includes(`\\`),{message:`virtual path must use POSIX separators (no backslashes)`}).refine(e=>!e.startsWith(`/`)&&!h.test(e),{message:`virtual path must be relative (no leading / or drive letter)`}).refine(b(e=>e.length>0&&e!==`.`&&e!==`..`),{message:`virtual path must be normalized (no empty, ".", or ".." segments)`}).refine(b(e=>!g.test(e)),{message:`virtual path must not contain < > : " | ? * or control characters`}).refine(b(e=>!_.test(e)),{message:`virtual path segments must not end with "." or a space`}).refine(b(e=>!v.test(e)),{message:`virtual path must not use a reserved device name (CON, PRN, AUX, NUL, COM0-COM9, LPT0-LPT9, COM¹-COM³, LPT¹-LPT³)`}).refine(b(e=>y.encode(e).byteLength<=255),{message:`virtual path segments must not exceed 255 UTF-8 bytes`}).refine(e=>y.encode(e).byteLength<=p,{message:`virtual path must not exceed ${p} UTF-8 bytes`}),S=r.string().refine(e=>e.isWellFormed(),{message:`program source must be well-formed Unicode (no unpaired surrogates)`}),C=t(r.record(x,S),{prototypeKey:`"__proto__" is not a valid virtual path`,nonPlainObject:`the module set must be a plain object mapping virtual paths to sources`,symbolKey:`the module set carries a symbol-keyed property, which cannot be transported as JSON`,nonEnumerableKey:`the module set carries a non-enumerable property, which the record parse would drop`,extraArrayKey:`the module set must be a plain object, not an array with extra own properties`}),w=r.strictObject({files:C,entryFile:x,exportName:r.string().min(1).max(256)}).refine(e=>Object.hasOwn(e.files,e.entryFile),{message:`entryFile must name one of the program files`,path:[`entryFile`]}),T=r.strictObject({providerId:r.string().min(1).max(256).optional(),runtime:r.string().min(1).max(256).optional(),language:r.string().min(1).max(256).optional(),moduleFormat:r.string().min(1).max(256).optional(),trust:r.enum(o).optional()}),E=r.strictObject({invocationId:r.string().min(1).max(256),program:w,arguments:t(e,{prototypeKey:`"__proto__" is not a valid argument key`,nonPlainObject:`the invocation arguments must be JSON data: only plain objects and arrays are transportable`,symbolKey:`the invocation arguments carry a symbol-keyed property, which cannot be transported as JSON`,nonEnumerableKey:`the invocation arguments carry a non-enumerable property, which the record parse would drop`,extraArrayKey:`the invocation arguments carry an array with extra own properties, which the array rebuild would drop`}),requirements:T.optional(),timeoutMs:r.number().int().positive()}),D=r.enum(l),O=r.enum(c),k=e=>r.strictObject({code:e,message:r.string().min(1).max(512)}),A=r.discriminatedUnion(`status`,[r.strictObject({status:r.literal(`completed`),value:t(e,{prototypeKey:`"__proto__" is not a valid result key`,nonPlainObject:`the result must be JSON data: only plain objects and arrays are transportable`,symbolKey:`the result carries a symbol-keyed property, which cannot be transported as JSON`,nonEnumerableKey:`the result carries a non-enumerable property, which the record parse would drop`,extraArrayKey:`the result carries an array with extra own properties, which the array rebuild would drop`})}),r.strictObject({status:r.literal(`failed`),error:k(O)}),r.strictObject({status:r.literal(`timed_out`),error:k(r.literal(`execution_timeout`))}),r.strictObject({status:r.literal(`cancelled`),error:k(r.literal(`cancelled`))})]),j={execute:{request:E,response:A}},M=i(`code-execution`,j),N=M.subjects;function P(e){return e.length<=512?e:`${e.slice(0,511)}…`}function F(e){return e===`timeout`?{status:`timed_out`,error:{code:`execution_timeout`,message:`The execution exceeded its wall-clock budget before completing.`}}:{status:`cancelled`,error:{code:`cancelled`,message:`The execution was cancelled before it completed.`}}}function I(e){let t=e.signal.reason;return F(t===`timeout`||t===`cancellation`?t:Date.now()>=e.deadlineEpochMs?`timeout`:`cancellation`)}const L={transports:[]};function R(e,t){return e.emit(n.register,{capabilityId:a,provider:t},L)}function z(e,t){return e.emit(n.unregister,{capabilityId:a,providerId:t},L)}export{l as C,c as S,o as T,x as _,F as a,u as b,d as c,D as d,A as f,j as g,T as h,I as i,m as l,E as m,z as n,M as o,w as p,P as r,N as s,R as t,O as u,p as v,s as w,a as x,f as y};

package/dist/code-execution-CweDSWco.mjs

@@ -0,0 +1 @@
+import{d as e,f as t,h as n,l as r,m as i,p as a,u as o}from"./types-Cwza95hS.mjs";import{fileURLToPath as s,pathToFileURL as c}from"node:url";import{mkdir as l,mkdtemp as u,realpath as d,rm as f,stat as p,symlink as ee,writeFile as m}from"node:fs/promises";import{basename as te,dirname as h,extname as g,isAbsolute as _,join as v,resolve as y,sep as b}from"node:path";import{randomUUID as ne}from"node:crypto";import{NPM_PACKAGE_NAME_MAX_LENGTH as x,isNpmPackageName as re}from"@makaio/framework/utils";import{CODE_EXECUTION_IDENTIFIER_MAX_LENGTH as S,CodeExecutionProgramSchema as ie,CodeExecutionVirtualPathSchema as ae,JsonValueSchema as C,codeExecutionAbortOutcome as w,snapshotJsonBoundary as T}from"@makaio/framework/contracts";import{tmpdir as oe}from"node:os";import se from"piscina";async function E(e){if(!_(e))return[e];let t=new Set([e]);try{t.add(await d(e))}catch{}return[...t]}function D(e){return _(e)?[e,c(e).href]:[e]}async function ce(e){return(await E(e)).flatMap(D)}async function le(e){let t=new Map;for(let[n,r]of e.packageRoots)try{let e=await d(r);if(!(await p(e)).isDirectory())throw Error(`Package root is not a directory.`);t.set(n,e)}catch{throw Error(`A configured package root could not be resolved.`)}return{packageRoots:t,redactions:await ue({...e,packageRoots:new Map([...e.packageRoots,...[...t].map(([e,t])=>[`resolved:${e}`,t])])})}}async function ue(t){let n=new Set,r=t=>{let r=e(t);r.length>=4&&n.add(r)},i=t=>{let r=e(t);r.length>0&&n.add(r)};for(let e of Object.values(t.environment))r(e);for(let e of[...t.packageRoots.values(),...t.workerPaths])for(let t of await ce(e))i(t);return[...n]}const O={admitted:!1,refusal:`aborted`},de={admitted:!1,refusal:`queue_full`};var fe=class{maxQueued;available;waiting=[];constructor(e,t){this.maxQueued=t,this.available=e}acquire(e){return e.aborted?Promise.resolve(O):this.available>0?(--this.available,Promise.resolve({admitted:!0,release:this.createRelease()})):this.waiting.length>=this.maxQueued?Promise.resolve(de):new Promise(t=>{let n=()=>{e.removeEventListener(`abort`,r),t({admitted:!0,release:this.createRelease()})},r=()=>{let e=this.waiting.indexOf(n);e>=0&&this.waiting.splice(e,1),t(O)};e.addEventListener(`abort`,r,{once:!0}),this.waiting.push(n)})}createRelease(){let e=!1;return()=>{if(e)return;e=!0;let t=this.waiting.shift();t===void 0?this.available+=1:t()}}};function pe(e){return typeof e==`object`&&!!e&&!Array.isArray(e)&&`program`in e&&`arguments`in e}function k(e){return{status:`failed`,error:{code:`invalid_program`,message:e}}}function me(e){let t={program:void 0,arguments:void 0},n;try{t.program=Reflect.get(e,`program`),t.arguments=Reflect.get(e,`arguments`),n=T(t)}catch{return k(`The invocation could not be read into a stable JSON boundary snapshot.`)}if(!n.ok||!pe(n.value))return k(`The invocation could not be read into a stable JSON boundary snapshot.`);let r=ie.safeParse(n.value.program);return r.success?{program:r.data,arguments:n.value.arguments}:k(`The invocation program does not satisfy the CodeExecution contract.`)}function A(e){return e instanceof Error&&e.name===`AbortError`}function he(e){return A(e)||e instanceof Error&&e.message===`Terminating worker thread`}function ge(e,t){if(!Number.isFinite(t))throw Error(`Option "${e}" must be a finite number, received ${t}.`);return t}function j(e,t,n){if(t.trim().length===0)throw Error(`Option "${e}" must be a non-empty string.`);if(n!==void 0&&t.length>n)throw Error(`Option "${e}" must contain at most ${n} characters.`);return t}function M(e,t,n){if(!Number.isInteger(t)||t<n)throw Error(`Option "${e}" must be an integer of at least ${n}, received ${t}.`);return t}const _e={"prototype-key":`The invocation arguments carry a "__proto__" key, which cannot be transported as JSON.`,"non-plain-object":`The invocation arguments are not JSON data: only plain objects and arrays are transportable, so values such as a Date, a Map, or a class instance must be converted before they are submitted.`,"symbol-key":`The invocation arguments carry a symbol-keyed property, which cannot be transported as JSON.`,"non-enumerable-key":`The invocation arguments carry a non-enumerable property that the record parse would drop.`,"extra-array-key":`The invocation arguments carry an array with extra own properties that the array rebuild would drop.`,"cyclic-reference":`The invocation arguments contain a cyclic reference and cannot be transported as JSON.`,"nesting-too-deep":`The invocation arguments exceed the maximum JSON container nesting.`,"negative-zero":`The invocation arguments contain -0, which JSON would transport as 0.`,"unreadable-value":`The invocation arguments could not be read into a stable JSON boundary snapshot.`};function ve(e){if(e.length===0)return a(`invalid_program`,`The export name must not be empty.`);if(!(e.length<=S))return a(`invalid_program`,`The export name is ${e.length} characters, which exceeds the limit of ${S}.`)}function N(e,t){let n=T(e);if(!n.ok)return a(`invalid_program`,_e[n.violation.kind]);let r=C.safeParse(n.value);if(!r.success)return a(`invalid_program`,`The invocation arguments carry a value with no JSON form — a function, undefined, a bigint, a symbol, or a non-finite number — which cannot be transported as JSON.`);let o;try{o=i(r.data)}catch{return a(`invalid_program`,`The invocation arguments have no JSON representation.`)}if(!(o<=t))return a(`invalid_program`,`The invocation arguments serialize to ${o} bytes, which exceeds the limit of ${t}.`)}function P(e,t){return ve(e.program.exportName)??N(e.arguments,t)}const F=`${JSON.stringify({type:`module`},null,2)}\n`,I=`package.json`,L=`node_modules`,R=`__makaio-entry-namespace.mjs`,ye=new Map([[H(I),`the generated program manifest`],[H(L),`provider-configured package links`],[H(R),`the generated entry namespace module`]]),z=new Set([`.ts`,`.mts`,`.js`,`.mjs`]),be=[...z].join(`, `);var B=class extends Error{code;constructor(e,t){super(t),this.code=e,this.name=`VirtualProgramError`}},V=class extends B{rootLease;constructor(e,t){super(e.code,e.message),this.rootLease=t,this.name=`UnreleasedProgramRootError`}};function xe(e){return e instanceof B?e:(console.warn(`[code-execution] Failed to materialize a program root: %s`,e),new B(`provider_failed`,`The program root could not be materialized.`))}function Se(e){let t=new Map;for(let[n,r]of Object.entries(e??{})){if(!re(n))throw Error(`Configured package name "${n}" is not an ordinary bare package specifier.`);if(n.length>x)throw Error(`Configured package name is ${n.length} characters, which exceeds the limit of ${x}.`);if(!_(r))throw Error(`Configured package root for "${n}" must be an absolute path.`);t.set(n,y(r))}return t}function H(e){return e.normalize(`NFC`).toLowerCase().toUpperCase().normalize(`NFC`)}function U(e,t,n){let r=Object.keys(e.files);if(r.length>t)throw new B(`invalid_program`,`Program declares ${r.length} files, which exceeds the limit of ${t}.`);let i=0;for(let t of Object.values(e.files)){if(!t.isWellFormed())throw new B(`invalid_program`,`A program source is not well-formed Unicode (no unpaired surrogates).`);if(i+=Buffer.byteLength(t,`utf8`),i>n)throw new B(`invalid_program`,`Program sources exceed the aggregate limit of ${n} UTF-8 bytes.`)}we([...r,e.entryFile]),Ce(e),Te(r),W(r),Ee(r)}function Ce(e){if(!Object.hasOwn(e.files,e.entryFile))throw new B(`invalid_program`,`Entry file "${e.entryFile}" is not one of the declared program files.`)}function W(e){for(let t of e){let e=g(t);if(!z.has(e))throw new B(`invalid_program`,`Virtual path "${t}" ${e===``?`carries no file extension`:`carries the extension "${e}"`}; this provider executes ${be} sources.`)}}function we(e){for(let t of e){let e=ae.safeParse(t);if(!e.success)throw new B(`invalid_program`,`A virtual path is not canonical: ${e.error.issues[0]?.message??`it violates the virtual path rules`}.`)}}function Te(e){for(let t of e){let e=t.split(`/`)[0]??``,n=ye.get(H(e));if(n!==void 0)throw new B(`invalid_program`,`Virtual path "${t}" claims the root name "${e}", which is reserved for ${n}.`)}}function Ee(e){let t=e.map(e=>({original:e,originalSegments:e.split(`/`),foldedSegments:e.split(`/`).map(H)})).sort(De),n;for(let e of t){if(n!==void 0&&Oe(n.foldedSegments,e.foldedSegments))throw new B(`invalid_program`,`Virtual paths "${n.original}" and "${e.original}" name the same file.`);if(n!==void 0&&ke(n.foldedSegments,e.foldedSegments)){let t=e.originalSegments.slice(0,n.originalSegments.length).join(`/`);throw new B(`invalid_program`,`Virtual path "${n.original}" is declared as a file and as the directory "${t}".`)}n=e}}function De(e,t){for(let n=0;n<Math.min(e.foldedSegments.length,t.foldedSegments.length);n+=1){let r=e.foldedSegments[n]??``,i=t.foldedSegments[n]??``;if(r<i)return-1;if(r>i)return 1}return e.foldedSegments.length-t.foldedSegments.length}function Oe(e,t){return e.length===t.length&&e.every((e,n)=>e===t[n])}function ke(e,t){return e.length<t.length&&e.every((e,n)=>e===t[n])}function G(e,t,n,r,i){let a=y(e),o=y(a,n);if(!o.startsWith(a+b))throw new B(i,`${r} "${n}" resolves outside the program root.`);for(let e of t){let t=y(e),a=y(t,n);if(!a.startsWith(t+b))throw new B(i,`${r} "${n}" resolves outside the program root.`);let o=Buffer.byteLength(a,`utf8`);if(o>=1024)throw new B(i,`${r} resolves to ${o} UTF-8 bytes once the program root is prepended, which leaves no room inside the 1024-byte budget.`)}return o}function K(e,t){return G(e,t,I,`Program manifest`,`provider_failed`)}function q(e,t){return G(e,t,R,`Entry namespace module`,`provider_failed`)}function Ae(e){return`import * as entry from ${JSON.stringify(c(e).href)};\nexport const ${r} = entry;\n`}function J(e,t,n){return G(e,t,n,`Virtual path`,`invalid_program`)}function Y(e,t,n){return G(e,t,`${L}/${n}`,`Package link`,`provider_failed`)}function je(e,t,n,r){K(e,t),q(e,t);for(let r of Object.keys(n.files))J(e,t,r);for(let n of r.keys())Y(e,t,n)}async function Me(e){let t=Ne(e.program);U(t,e.maxProgramFiles,e.maxSourceBytes);let n;try{let r=await u(v(oe(),`makaio-code-execution-`));n=r;let i=await E(r);je(r,i,t,e.packageRoots);let a=K(r,i);await m(a,F,`utf8`),await Pe(r,i,t.files),await Fe(r,i,e.packageRoots);let o=J(r,i,t.entryFile),s=q(r,i);return await m(s,Ae(o),`utf8`),{root:r,rootUrls:i.map(e=>c(`${e}${b}`).href),entryNamespaceUrl:c(s).href,parentUrl:c(a).href,redactedPaths:i.flatMap(D),cleanup:()=>Z(r)}}catch(e){let t=xe(e);if(n!==void 0){let e=n,r={root:e,cleanup:()=>Z(e)};if(!await r.cleanup())throw console.warn(`[code-execution] Failed to remove a partially materialized program root: %s`,n),new V(t,r)}throw t}}function Ne(e){let t=e.files,n=Object.create(null);for(let e of Object.keys(t))n[e]=t[e];return{files:n,entryFile:e.entryFile,exportName:e.exportName}}async function X(e){for(let t of await Promise.allSettled(e))if(t.status===`rejected`)throw t.reason}function Pe(e,t,n){return X(Object.entries(n).map(async([n,r])=>{let i=J(e,t,n);await l(h(i),{recursive:!0}),await m(i,r,`utf8`)}))}function Fe(e,t,n){return X([...n].map(async([n,r])=>{let i=Y(e,t,n);await l(h(i),{recursive:!0}),await ee(r,i,`junction`)}))}async function Z(e){try{return await f(e,{recursive:!0,force:!0,maxRetries:2,retryDelay:25}),!0}catch{return!1}}var Ie=class{removeRoot;roots=new Map;attempts=new Map;constructor(e=Z){this.removeRoot=e}get pending(){return[...this.roots.keys()]}async release(e){await this.attempt(e.root,()=>e.cleanup())||console.warn(`[code-execution] Retained a program root for a later removal attempt: %s`,e.root)}async retry(e){let t=Date.now();await this.retryRoots(e.filter(e=>{let n=this.roots.get(e);return n!==void 0&&t-n>=5e3}))}async retryAll(){return await this.retryRoots(this.pending),this.pending}async retryRoots(e){await Promise.all(e.filter(e=>this.roots.has(e)).map(e=>this.attempt(e,()=>this.removeRoot(e))))}async attempt(e,t){let n=this.attempts.get(e);if(n!==void 0)return n;let r=this.runAttempt(e,t);this.attempts.set(e,r);try{return await r}finally{this.attempts.get(e)===r&&this.attempts.delete(e)}}async runAttempt(e,t){let n=!1;try{n=await t()}catch(e){console.warn(`[code-execution] Failed to release a program root: %s`,e)}return n?this.roots.delete(e):this.roots.set(e,Date.now()),n}};const Q=`code-execution`,Le=[`--import=tsx`],Re=[],ze=Object.freeze({});function Be(e){return Object.freeze({TSX_TSCONFIG_PATH:v(e,Q,`worker-tsconfig.json`)})}function Ve(e){return e.mode===`source`?{filename:v(e.moduleDir,Q,`worker-entry.ts`),execArgv:Le,env:Be(e.moduleDir)}:{filename:v(e.moduleDir,Q,`worker-entry.mjs`),execArgv:Re,env:ze}}function He(e){let t=s(e),n=h(t);return Ve({moduleDir:te(n)===Q?h(n):n,mode:g(t)===`.ts`?`source`:`dist`})}function $(){return a(`provider_unavailable`,`This CodeExecution provider has been disposed.`)}function Ue(e){return e instanceof V?e.rootLease:void 0}function We(e,t){return a(`provider_unavailable`,`This CodeExecution provider is at capacity: ${e} invocations are executing and ${t} are waiting.`)}var Ge=class{id;displayName;priority;runtime=`node`;language=`typescript`;moduleFormat=`esm`;trust=`trusted-code-only`;workerEntry;workerExecArgv;workerLoaderEnv;environment;packageRoots;maxConcurrency;maxQueuedInvocations;idleTimeoutMs;maxProgramFiles;maxSourceBytes;maxResultBytes;maxArgumentBytes;maxInvocationsPerWorker;admission;inFlight=new Set;quiescing=new Set;draining=new Set;retained=new Ie;runtimeConfiguration;generation;disposed=!1;disposal;constructor(e={}){let t=He(import.meta.url);this.id=j(`id`,e.id??`piscina-code-execution`,S),this.displayName=j(`displayName`,e.displayName??`Local (Piscina)`),this.priority=ge(`priority`,e.priority??0),this.workerEntry=t.filename,this.workerExecArgv=[...t.execArgv],this.workerLoaderEnv=Object.freeze({...t.env}),this.environment=Object.freeze({...e.environment}),this.packageRoots=Se(e.packageRoots),this.maxConcurrency=M(`maxConcurrency`,e.maxConcurrency??4,1),this.maxQueuedInvocations=M(`maxQueuedInvocations`,e.maxQueuedInvocations??16,0),this.idleTimeoutMs=M(`idleTimeoutMs`,e.idleTimeoutMs??3e4,0),this.maxInvocationsPerWorker=M(`maxInvocationsPerWorker`,e.maxInvocationsPerWorker??64,1),this.maxProgramFiles=M(`maxProgramFiles`,e.maxProgramFiles??256,1),this.maxSourceBytes=M(`maxSourceBytes`,e.maxSourceBytes??5242880,1),this.maxResultBytes=M(`maxResultBytes`,e.maxResultBytes??1048576,1),this.maxArgumentBytes=M(`maxArgumentBytes`,e.maxArgumentBytes??1048576,1),this.admission=new fe(this.maxConcurrency,this.maxQueuedInvocations)}async execute(e,t){if(this.disposed)return $();let n=this.runInvocation(e,t);this.inFlight.add(n);try{return await n}finally{this.inFlight.delete(n)}}dispose(){return this.disposed=!0,this.disposal??=this.destroyPoolAndDrain(),this.disposal}async destroyPoolAndDrain(){let e=[...this.generation===void 0?[]:[this.generation],...this.draining];this.generation=void 0;let t=await Promise.allSettled(e.map(e=>this.tearDown(e)));await Promise.allSettled([...this.inFlight]),await Promise.allSettled([...this.quiescing]);let n=await this.retained.retryAll();n.length>0&&console.warn(`[code-execution] Program roots still on disk after disposal: %s`,n.join(`, `));let r=t.filter(e=>e.status===`rejected`).map(e=>e.reason);if(r.length>0)throw AggregateError(r,`The CodeExecution provider could not tear down every worker pool.`)}async runInvocation(e,t){let n=me(e);if(`status`in n)return n;let r,i,o,s,c;try{U(n.program,this.maxProgramFiles,this.maxSourceBytes);let e=P(n,this.maxArgumentBytes);if(e!==void 0)return e;let l=C.safeParse(n.arguments);if(!l.success)return a(`invalid_program`,`The invocation arguments do not satisfy the CodeExecution contract.`);let u={program:n.program,arguments:l.data},d=await this.admission.acquire(t.signal);if(!d.admitted)return d.refusal===`aborted`?w(t):We(this.maxConcurrency,this.maxQueuedInvocations);if(s=d.release,this.disposed)return $();if(t.signal.aborted)return w(t);if(r=await this.resolveRuntimeConfiguration(),this.disposed)return $();if(t.signal.aborted)return w(t);if(i=await Me({program:u.program,packageRoots:r.packageRoots,maxProgramFiles:this.maxProgramFiles,maxSourceBytes:this.maxSourceBytes}),o=i,this.disposed)return $();if(t.signal.aborted)return w(t);let f=this.createTask(u,i,r),p=await this.dispatch(f,t.signal);return c=p.teardown,p.kind===`aborted`?w(t):p.kind===`failed`?this.toFailureOutcome(p.error,f.redactedPaths):this.toOutcome(p.value,f.redactedPaths)}catch(e){return o=Ue(e)??o,this.toFailureOutcome(e,[...i?.redactedPaths??[],...r?.redactions??[]])}finally{this.trackRelease(o,s,c)}}async quiesce(e,t,n){let r=this.retained.pending;e!==void 0&&await this.retained.release(e),n!==void 0&&await Promise.allSettled([n]),t?.(),await this.retained.retry(r)}trackRelease(e,t,n){let r=this.quiesce(e,t,n);this.quiescing.add(r),r.catch(e=>{console.warn(`[code-execution] Failed to release an invocation: %s`,e)}).finally(()=>this.quiescing.delete(r))}async dispatch(e,t){let n=this.submit(e,t);try{return{kind:`completed`,value:await n.running,teardown:n.generation.teardown}}catch(e){let r=n.generation.teardown;return t.aborted&&A(e)?{kind:`aborted`,teardown:r}:{kind:`failed`,error:e,teardown:r}}}submit(e,t){let n=this.acquireGeneration();n.submitted+=1,n.outstanding+=1;let r=n.pool.run(e,{signal:t});return n.submitted>=this.maxInvocationsPerWorker&&this.retire(n),{generation:n,running:r.finally(()=>{--n.outstanding,this.tearDownIfDrained(n)})}}retire(e){this.generation===e&&(this.generation=void 0),e.retired=!0,this.draining.add(e),this.tearDownIfDrained(e)}handlePoolError(e,t){e.failed||(e.failed=!0,this.retire(e),this.tearDown(e).catch(e=>{console.warn(`[code-execution] Failed to tear down a failed worker generation: %s`,e)}),console.warn(`[code-execution] Worker generation failed: %s`,t))}tearDownIfDrained(e){!e.retired||e.outstanding>0||this.tearDown(e).then(()=>this.draining.delete(e)).catch(e=>{console.warn(`[code-execution] Failed to tear down a drained worker generation: %s`,e)})}tearDown(e){return e.teardown??=e.pool.destroy(),e.teardown}createTask(e,t,n){return{entryNamespaceUrl:t.entryNamespaceUrl,parentUrl:t.parentUrl,programRootUrls:t.rootUrls,allowedPackages:[...n.packageRoots.keys()],exportName:e.program.exportName,arguments:e.arguments,namespace:`makaio-code-execution-${ne()}`,maxResultBytes:this.maxResultBytes,redactedPaths:[...t.redactedPaths,...n.redactions]}}resolveRuntimeConfiguration(){if(this.runtimeConfiguration!==void 0)return this.runtimeConfiguration;let e=le({environment:this.environment,packageRoots:this.packageRoots,workerPaths:[this.workerEntry,...Object.values(this.workerLoaderEnv)]});return this.runtimeConfiguration=e,e.catch(()=>{this.runtimeConfiguration===e&&(this.runtimeConfiguration=void 0)}),e}acquireGeneration(){if(this.generation!==void 0)return this.generation;let e=new se({filename:this.workerEntry,execArgv:[...this.workerExecArgv],env:{...this.environment,...this.workerLoaderEnv},minThreads:0,maxThreads:this.maxConcurrency,idleTimeout:this.idleTimeoutMs}),t={pool:e,submitted:0,outstanding:0,retired:!1,failed:!1};return e.on(`error`,e=>this.handlePoolError(t,e)),this.generation=t,this.generation}toOutcome(e,t){let r=o.safeParse(e);if(!r.success)return a(`invalid_provider`,`The execution worker returned a malformed outcome envelope.`);if(r.data.kind===`completed`){let e=i(r.data.value);return e>this.maxResultBytes?a(`invalid_result`,`The execution returned ${e} serialized bytes, which exceeds the limit of ${this.maxResultBytes}.`):{status:`completed`,value:r.data.value}}return a(r.data.code,n(r.data.message,t))}toFailureOutcome(e,r){return e instanceof B?a(e.code,n(e.message,r)):this.disposed&&he(e)?$():a(`provider_failed`,n(t(e),r))}};export{Ge as t};

package/dist/code-execution-DqkQjKa1.mjs

@@ -0,0 +1 @@
+import{t as e}from"./package-DttKA9wN.mjs";import{CODE_EXECUTION_CAPABILITY_ID as t,CODE_EXECUTION_IDENTIFIER_MAX_LENGTH as n,CODE_EXECUTION_TRUST_LEVELS as r,CodeExecutionOutcomeSchema as i,CodeExecutionRequestSchema as a,CodeExecutionSubjects as o,boundCodeExecutionFailureMessage as s,codeExecutionAbortOutcomeForReason as c,dep as l,extensionToken as u}from"@makaio/framework/contracts";import{BaseService as d}from"@makaio/framework/service-base";function f(e,t){if(!Number.isFinite(e)||e<0)throw TypeError(`Execution budget "timeoutMs" must be a finite, non-negative number, received ${e}.`);let n=Date.now()+e;return t===void 0||!Number.isFinite(t)?n:Math.min(n,t)}function p(e){let{timeoutMs:t,requestDeadlineEpochMs:n,callerSignal:r}=e,i=f(t,n),a=new AbortController,o,s,c=()=>void 0,l=new Promise(e=>{c=e}),u=()=>{p(`cancellation`)};function d(){clearTimeout(s),s=void 0,r?.removeEventListener(`abort`,u)}function p(e){o===void 0&&(o=e,d(),a.abort(e),c(e))}function m(){let e=i-Date.now();if(e<=0){p(`timeout`);return}s=setTimeout(m,Math.min(e,2147483647)),s.unref?.()}return r?.aborted===!0?p(`cancellation`):(r?.addEventListener(`abort`,u,{once:!0}),m()),{context:{signal:a.signal,deadlineEpochMs:i},get abortReason(){return o},aborted:l,release:d}}function m(e){return typeof e==`string`&&e.length>0}function h(e){return m(e)&&e.length<=n}function g(e){try{let{id:t,displayName:n,priority:r,runtime:i,language:a,moduleFormat:o,trust:s,execute:c}=e;return!h(t)||!m(n)||typeof r!=`number`||!Number.isFinite(r)||!h(i)||!h(a)||!h(o)||!_(s)||typeof c!=`function`?void 0:{id:t,priority:r,runtime:i,language:a,moduleFormat:o,trust:s,execute:c,provider:e}}catch{return}}function _(e){return typeof e==`string`&&r.includes(e)}function v(e,t){return t===void 0?!0:(t.providerId===void 0||t.providerId===e.id)&&(t.runtime===void 0||t.runtime===e.runtime)&&(t.language===void 0||t.language===e.language)&&(t.moduleFormat===void 0||t.moduleFormat===e.moduleFormat)&&(t.trust===void 0||t.trust===e.trust)}function y(e,t){return e.priority===t.priority?e.id===t.id?0:e.id<t.id?-1:1:t.priority-e.priority}function b(e){let t=new Set;for(let n of e){if(t.has(n.id))return!0;t.add(n.id)}return!1}function x(e,t){let n=e.map(g).filter(e=>e!==void 0),r=n.length!==e.length;if(b(n))return{admitted:!1,code:`invalid_provider`};let[i]=n.filter(e=>v(e,t)).sort(y);return i===void 0?{admitted:!1,code:r?`invalid_provider`:`provider_unavailable`}:{admitted:!0,id:i.id,execute:i.execute,provider:i.provider}}const S=`[CodeExecutionService]`,C={provider_unavailable:`No registered code-execution provider satisfies the request requirements`,invalid_provider:`A registered code-execution provider does not satisfy the provider contract`};function w(e,t){try{let n=e.safeParse(t);return n.success?{ok:!0,value:n.data}:{ok:!1,cause:n.error}}catch(e){return{ok:!1,cause:e}}}function T(e,t){return{status:`failed`,error:{code:e,message:s(t)}}}function E(e,t,n){try{return Promise.resolve(Reflect.apply(e.execute,e.provider,[t,n.context]))}catch(e){return Promise.reject(e)}}var D=class extends d{capabilities;constructor(e,t){super(e),this.capabilities=t}onInit(){this.registerHandler(o.execute,async e=>{e.setResult(await this.dispatch(e.payload,e.signal,e.deadline))})}async dispatch(e,t,n){let r=w(a,e);return r.ok?this.route(r.value,t,n):(console.error(`${S} rejected an invocation that failed request validation:`,r.cause),T(`invalid_program`,`The invocation failed request contract validation`))}async route(e,n,r){let i=p({timeoutMs:e.timeoutMs,requestDeadlineEpochMs:r,callerSignal:n});try{if(i.abortReason!==void 0)return c(i.abortReason);let n=x(this.capabilities.getProviders(t),e.requirements);if(!n.admitted)return T(n.code,C[n.code]);let r=e.invocationId,a=E(n,e,i),o=this.invoke(a,n.id,r,i);return await Promise.race([o,i.aborted.then(c)])}finally{i.release()}}async invoke(e,t,n,r){let a;try{a=await e}catch(e){return r.abortReason===void 0?(this.logDiagnostic(n,t,`execute() rejected`,e),T(`provider_failed`,`Provider '${t}' failed while executing the invocation`)):c(r.abortReason)}if(r.abortReason!==void 0)return c(r.abortReason);let o=w(i,a);return o.ok?o.value:(this.logDiagnostic(n,t,`returned a non-conforming outcome`,o.cause),T(`invalid_provider`,`Provider '${t}' returned a value that is not a terminal outcome`))}logDiagnostic(e,t,n,r){console.error(`${S} provider '${t}' ${n} for invocation '${e}':`,r)}};const O=u(`code-execution`),k={name:O.name,displayName:`Code Execution`,version:`0.1.0`,critical:!0,dependencies:[l(e.name)],create:t=>{let n=t.getService(e);if(n===void 0)throw Error(`CapabilityService is not available for CodeExecutionService`);return new D(t.bus,n)}};export{p as a,x as i,k as n,D as r,O as t};

package/dist/{compression-74fFeBha.mjs → compression-CtgeVLpP.mjs}

@@ -1 +1 @@
-import{t as e}from"./json-value-DmU8ibo_.mjs";import{a as t}from"./visibility-qhGWmpSJ.mjs";import"./model-BGgVmRnN.mjs";import{f as n}from"./shared-BQ0CHIVy.mjs";import{z as r}from"zod";const i=`adapter identity must be provided at the top level; contextOverrides cannot supply adapter identity`;function a(e){let t={adapterId:e.adapterId,adapterName:e.adapterName},n={adapterId:e.contextOverrides?.adapterId,adapterName:e.contextOverrides?.adapterName},r=[];!o(t)&&o(n)&&(n.adapterId!==void 0&&r.push({field:`adapterId`,message:i}),n.adapterName!==void 0&&r.push({field:`adapterName`,message:i}));for(let e of[`adapterId`,`adapterName`]){let i=n[e];if(i===void 0)continue;let a=t[e];if(a===void 0){o(t)&&r.push({field:e,message:`contextOverrides.${e} cannot supply adapter identity when top-level adapter identity is present`});continue}a!==i&&r.push({field:e,message:`contextOverrides.${e} must match top-level ${e} when both are provided`})}return{issues:r,effectiveIdentity:{adapterId:t.adapterId??n.adapterId,adapterName:t.adapterName??n.adapterName}}}function o(e){return e.adapterId!==void 0||e.adapterName!==void 0}const s=r.object({readOnly:r.boolean().optional(),destructive:r.boolean().optional(),idempotent:r.boolean().optional(),requiresApproval:r.boolean().optional()}),c=r.object({name:r.string(),description:r.string(),annotations:s.optional(),toolsetName:r.string()}),l=r.object({code:r.string(),message:r.string(),details:r.unknown().optional()}),u=r.object({toolName:r.string(),toolsetName:r.string()}),d=c.extend({inputSchema:r.record(r.string(),r.unknown()).optional()}),f=r.object({name:r.string(),description:r.string(),version:r.string(),toolCount:r.number(),configSchema:r.record(r.string(),r.unknown()).optional()}),p=r.object({cwd:r.string().optional(),env:r.record(r.string(),r.string()).optional(),sessionId:r.string().optional(),agentId:r.string().optional(),adapterId:r.string().optional(),adapterName:r.string().optional(),adapterSessionId:r.string().optional(),turnId:r.string().optional(),turnContext:r.record(r.string(),r.unknown()).optional(),reasoning:r.string().optional(),toolCallId:r.string().optional(),constraints:r.record(r.string(),r.unknown()).optional()});function m(e,t){let{issues:n}=a(e);for(let e of n)t.addIssue({code:r.ZodIssueCode.custom,message:e.message,path:[`contextOverrides`,e.field]})}const h=r.object({toolName:r.string(),input:r.unknown(),adapterId:r.string().optional(),adapterName:r.string().optional(),contextOverrides:p.optional()}).superRefine(m),g={list:{request:r.object({toolsetName:r.string().optional(),adapterId:r.string().optional(),adapterName:r.string().optional()}),response:r.object({tools:r.array(d),toolsets:r.array(f)})},execute:{request:h,response:r.discriminatedUnion(`success`,[r.object({success:r.literal(!0),data:r.unknown()}),r.object({success:r.literal(!1),error:l})])},registered:r.object({toolsetName:r.string(),toolsetVersion:r.string(),toolNames:r.array(r.string())}),started:u.extend({executionId:r.string(),timestamp:r.number()}),completed:u.extend({executionId:r.string(),timestamp:r.number(),durationMs:r.number()}),error:u.extend({executionId:r.string(),timestamp:r.number(),error:l}),registryChanged:r.object({revision:r.number().int().positive(),reason:r.enum([`toolset-registered`,`toolset-unregistered`,`plugin-loaded`,`plugin-unloaded`]),toolsetName:r.string()})},_=r.object({name:r.string(),permission_policy:r.enum([`always_allow`,`always_ask`,`always_deny`])}),v=r.array(_).superRefine((e,t)=>{let n=new Set;e.forEach((e,i)=>{if(n.has(e.name)){t.addIssue({code:r.ZodIssueCode.custom,path:[i,`name`],message:`Duplicate MCP tool policy name "${e.name}"`});return}n.add(e.name)})}),y=r.object({type:r.literal(`stdio`),command:r.string(),args:r.array(r.string()).optional(),env:r.record(r.string(),r.string()).optional(),alwaysLoad:r.boolean().optional()}),b=r.object({url:r.string().url(),headers:r.record(r.string(),r.string()).optional(),tools:v.optional(),alwaysLoad:r.boolean().optional()}),x=b.extend({type:r.literal(`sse`)}),S=b.extend({type:r.literal(`http`)}),C=r.discriminatedUnion(`type`,[y,x,S]),w=r.enum([`direct`,`discovery`,`hidden`]),T=w.exclude([`hidden`]),E=r.record(r.string(),w).optional(),D=r.string().max(256).refine(e=>(e.match(/\*/g)?.length??0)<=10,{message:`Pattern must contain at most 10 wildcard characters`}),O=r.object({transport:C,exposureMode:T.optional(),toolExposure:E}),k=r.object({enabled:r.boolean(),maxAttempts:r.number().int().positive(),baseDelayMs:r.number().int().positive(),maxDelayMs:r.number().int().positive()}).refine(e=>e.maxDelayMs>=e.baseDelayMs,{message:`maxDelayMs must be >= baseDelayMs`,path:[`maxDelayMs`]});r.object({servers:r.record(r.string(),O),hideTools:r.array(D).optional(),exposeTools:r.array(D).optional(),defaultExposureMode:T.optional(),autoReconnect:k.optional()}),r.object({servers:r.array(r.string()).optional(),exposeTools:r.array(D).optional(),hideTools:r.array(D).optional(),serverOverrides:r.record(r.string(),r.object({exposureMode:T.optional(),toolExposure:E})).optional()});const A=r.object({directTools:r.array(D).optional(),discoveryTools:r.array(D).optional(),toolExposure:E}),j=r.object({name:r.string(),transport:C,exposureMode:T}),M=r.object({fullName:r.string(),originalName:r.string(),serverName:r.string(),description:r.string().optional(),inputSchema:r.record(r.string(),r.unknown()),exposureMode:w,enabled:r.boolean(),enabledBy:r.enum([`discovery`,`toolset`]).optional(),enabledAt:r.number().int().nonnegative().optional(),exposed:r.boolean()}),N=r.object({sessionId:r.string(),projectId:r.string().nullable(),profileId:r.string().nullable(),servers:r.array(j),directTools:r.array(M),discoverableTools:r.array(M)}),P=N.omit({projectId:!0,profileId:!0}),F=r.object({agentId:r.string(),adapterId:r.string(),adapterName:r.string(),adapterSessionId:r.string(),sessionId:r.string()}),I={"server.connected":r.object({serverName:r.string(),toolCount:r.number().int().nonnegative()}),"server.disconnected":r.object({serverName:r.string(),reason:r.string()}),"server.reconnecting":r.object({serverName:r.string(),attempt:r.number().int().positive()}),"server.error":r.object({serverName:r.string(),error:r.string()}),"tools.updated":r.object({added:r.array(r.string()),removed:r.array(r.string())}),"tools.enabled":r.object({tools:r.array(r.string()),source:r.enum([`discovery`,`toolset`])}),"session.resolve":{request:r.object({sessionId:r.string(),profileId:r.string().nullable(),projectId:r.string().nullable(),profileMcpConfig:A.optional()}),response:N},"session.register":{request:F.extend({contextOverrides:p,pinned:r.boolean().optional()}),response:r.object({port:r.number().int().positive()})},"session.unregister":{request:r.object({adapterSessionId:r.string()}),response:r.object({})}},L=r.looseObject({kind:r.string(),providerConfigId:r.string().optional(),model:r.string().optional(),reasoningEffort:t.optional(),cwd:r.string().optional(),systemPrompt:n.optional(),allowedTools:r.array(r.string()).optional(),disallowedTools:r.array(r.string()).optional(),env:r.record(r.string(),r.string()).optional(),mcpSessionContext:P.optional(),allowedDirectories:r.array(r.string()).optional(),adapterConfig:e.optional()}),R=L.extend({kind:r.literal(`adapter`),adapterName:r.string().trim().min(1).optional(),adapterId:r.string().trim().min(1).optional()}).refine(e=>!!e.adapterName||!!e.adapterId,{message:`AdapterSelection requires at least one of 'adapterName' or 'adapterId'`}),z=L,B=L.safeExtend({kind:r.literal(`canonical-model`),model:r.string().trim().min(1)}),V=r.enum([`auto`,`manual`,`off`]);export{z as a,T as c,I as d,N as f,a as g,g as h,L as i,A as l,C as m,B as n,k as o,D as p,R as r,w as s,V as t,P as u};
+import{n as e}from"./json-value-BBZ6uGwc.mjs";import{a as t}from"./visibility-DtDLRBdr.mjs";import"./model-DrzPt3ou.mjs";import{f as n}from"./shared-B9AWRm9A.mjs";import{z as r}from"zod";const i=`adapter identity must be provided at the top level; contextOverrides cannot supply adapter identity`;function a(e){let t={adapterId:e.adapterId,adapterName:e.adapterName},n={adapterId:e.contextOverrides?.adapterId,adapterName:e.contextOverrides?.adapterName},r=[];!o(t)&&o(n)&&(n.adapterId!==void 0&&r.push({field:`adapterId`,message:i}),n.adapterName!==void 0&&r.push({field:`adapterName`,message:i}));for(let e of[`adapterId`,`adapterName`]){let i=n[e];if(i===void 0)continue;let a=t[e];if(a===void 0){o(t)&&r.push({field:e,message:`contextOverrides.${e} cannot supply adapter identity when top-level adapter identity is present`});continue}a!==i&&r.push({field:e,message:`contextOverrides.${e} must match top-level ${e} when both are provided`})}return{issues:r,effectiveIdentity:{adapterId:t.adapterId??n.adapterId,adapterName:t.adapterName??n.adapterName}}}function o(e){return e.adapterId!==void 0||e.adapterName!==void 0}const s=r.object({readOnly:r.boolean().optional(),destructive:r.boolean().optional(),idempotent:r.boolean().optional(),requiresApproval:r.boolean().optional()}),c=r.object({name:r.string(),description:r.string(),annotations:s.optional(),toolsetName:r.string()}),l=r.object({code:r.string(),message:r.string(),details:r.unknown().optional()}),u=r.object({toolName:r.string(),toolsetName:r.string()}),d=c.extend({inputSchema:r.record(r.string(),r.unknown()).optional()}),f=r.object({name:r.string(),description:r.string(),version:r.string(),toolCount:r.number(),configSchema:r.record(r.string(),r.unknown()).optional()}),p=r.object({cwd:r.string().optional(),env:r.record(r.string(),r.string()).optional(),sessionId:r.string().optional(),agentId:r.string().optional(),adapterId:r.string().optional(),adapterName:r.string().optional(),adapterSessionId:r.string().optional(),turnId:r.string().optional(),turnContext:r.record(r.string(),r.unknown()).optional(),reasoning:r.string().optional(),toolCallId:r.string().optional(),constraints:r.record(r.string(),r.unknown()).optional()});function m(e,t){let{issues:n}=a(e);for(let e of n)t.addIssue({code:r.ZodIssueCode.custom,message:e.message,path:[`contextOverrides`,e.field]})}const h=r.object({toolName:r.string(),input:r.unknown(),adapterId:r.string().optional(),adapterName:r.string().optional(),contextOverrides:p.optional()}).superRefine(m),g={list:{request:r.object({toolsetName:r.string().optional(),adapterId:r.string().optional(),adapterName:r.string().optional()}),response:r.object({tools:r.array(d),toolsets:r.array(f)})},execute:{request:h,response:r.discriminatedUnion(`success`,[r.object({success:r.literal(!0),data:r.unknown()}),r.object({success:r.literal(!1),error:l})])},registered:r.object({toolsetName:r.string(),toolsetVersion:r.string(),toolNames:r.array(r.string())}),started:u.extend({executionId:r.string(),timestamp:r.number()}),completed:u.extend({executionId:r.string(),timestamp:r.number(),durationMs:r.number()}),error:u.extend({executionId:r.string(),timestamp:r.number(),error:l}),registryChanged:r.object({revision:r.number().int().positive(),reason:r.enum([`toolset-registered`,`toolset-unregistered`,`plugin-loaded`,`plugin-unloaded`]),toolsetName:r.string()})},_=r.object({name:r.string(),permission_policy:r.enum([`always_allow`,`always_ask`,`always_deny`])}),v=r.array(_).superRefine((e,t)=>{let n=new Set;e.forEach((e,i)=>{if(n.has(e.name)){t.addIssue({code:r.ZodIssueCode.custom,path:[i,`name`],message:`Duplicate MCP tool policy name "${e.name}"`});return}n.add(e.name)})}),y=r.object({type:r.literal(`stdio`),command:r.string(),args:r.array(r.string()).optional(),env:r.record(r.string(),r.string()).optional(),alwaysLoad:r.boolean().optional()}),b=r.object({url:r.string().url(),headers:r.record(r.string(),r.string()).optional(),tools:v.optional(),alwaysLoad:r.boolean().optional()}),x=b.extend({type:r.literal(`sse`)}),S=b.extend({type:r.literal(`http`)}),C=r.discriminatedUnion(`type`,[y,x,S]),w=r.enum([`direct`,`discovery`,`hidden`]),T=w.exclude([`hidden`]),E=r.record(r.string(),w).optional(),D=r.string().max(256).refine(e=>(e.match(/\*/g)?.length??0)<=10,{message:`Pattern must contain at most 10 wildcard characters`}),O=r.object({transport:C,exposureMode:T.optional(),toolExposure:E}),k=r.object({enabled:r.boolean(),maxAttempts:r.number().int().positive(),baseDelayMs:r.number().int().positive(),maxDelayMs:r.number().int().positive()}).refine(e=>e.maxDelayMs>=e.baseDelayMs,{message:`maxDelayMs must be >= baseDelayMs`,path:[`maxDelayMs`]});r.object({servers:r.record(r.string(),O),hideTools:r.array(D).optional(),exposeTools:r.array(D).optional(),defaultExposureMode:T.optional(),autoReconnect:k.optional()}),r.object({servers:r.array(r.string()).optional(),exposeTools:r.array(D).optional(),hideTools:r.array(D).optional(),serverOverrides:r.record(r.string(),r.object({exposureMode:T.optional(),toolExposure:E})).optional()});const A=r.object({directTools:r.array(D).optional(),discoveryTools:r.array(D).optional(),toolExposure:E}),j=r.object({name:r.string(),transport:C,exposureMode:T}),M=r.object({fullName:r.string(),originalName:r.string(),serverName:r.string(),description:r.string().optional(),inputSchema:r.record(r.string(),r.unknown()),exposureMode:w,enabled:r.boolean(),enabledBy:r.enum([`discovery`,`toolset`]).optional(),enabledAt:r.number().int().nonnegative().optional(),exposed:r.boolean()}),N=r.object({sessionId:r.string(),projectId:r.string().nullable(),profileId:r.string().nullable(),servers:r.array(j),directTools:r.array(M),discoverableTools:r.array(M)}),P=N.omit({projectId:!0,profileId:!0}),F=r.object({agentId:r.string(),adapterId:r.string(),adapterName:r.string(),adapterSessionId:r.string(),sessionId:r.string()}),I={"server.connected":r.object({serverName:r.string(),toolCount:r.number().int().nonnegative()}),"server.disconnected":r.object({serverName:r.string(),reason:r.string()}),"server.reconnecting":r.object({serverName:r.string(),attempt:r.number().int().positive()}),"server.error":r.object({serverName:r.string(),error:r.string()}),"tools.updated":r.object({added:r.array(r.string()),removed:r.array(r.string())}),"tools.enabled":r.object({tools:r.array(r.string()),source:r.enum([`discovery`,`toolset`])}),"session.resolve":{request:r.object({sessionId:r.string(),profileId:r.string().nullable(),projectId:r.string().nullable(),profileMcpConfig:A.optional()}),response:N},"session.register":{request:F.extend({contextOverrides:p,pinned:r.boolean().optional()}),response:r.object({port:r.number().int().positive()})},"session.unregister":{request:r.object({adapterSessionId:r.string()}),response:r.object({})}},L=r.looseObject({kind:r.string(),providerConfigId:r.string().optional(),model:r.string().optional(),reasoningEffort:t.optional(),cwd:r.string().optional(),systemPrompt:n.optional(),allowedTools:r.array(r.string()).optional(),disallowedTools:r.array(r.string()).optional(),env:r.record(r.string(),r.string()).optional(),mcpSessionContext:P.optional(),allowedDirectories:r.array(r.string()).optional(),adapterConfig:e.optional()}),R=L.extend({kind:r.literal(`adapter`),adapterName:r.string().trim().min(1).optional(),adapterId:r.string().trim().min(1).optional(),machineId:r.string().trim().min(1).optional()}).refine(e=>!!e.adapterName||!!e.adapterId,{message:`AdapterSelection requires at least one of 'adapterName' or 'adapterId'`}).refine(e=>!e.adapterId||!!e.machineId,{message:`AdapterSelection requires 'machineId' when 'adapterId' is supplied`,path:[`machineId`]}).refine(e=>!e.machineId||!!e.adapterId,{message:`AdapterSelection requires 'adapterId' when 'machineId' is supplied`,path:[`adapterId`]}),z=L,B=L.safeExtend({kind:r.literal(`canonical-model`),model:r.string().trim().min(1)}),V=r.enum([`auto`,`manual`,`off`]);export{z as a,T as c,I as d,N as f,a as g,g as h,L as i,A as l,C as m,B as n,k as o,D as p,R as r,w as s,V as t,P as u};

package/dist/{config-namespace-TVX-hG4I.mjs → config-namespace-CjWvw8ij.mjs}

@@ -1 +1 @@
-import{i as e,n as t,t as n}from"./visibility-qhGWmpSJ.mjs";import"./model-BGgVmRnN.mjs";import{o as r,s as i}from"./selection-BNwTKEVT.mjs";import{t as a}from"./timeout-DWDhddRJ.mjs";import{z as o}from"zod";import{createBusNamespace as s}from"@makaio/framework/core";const c=o.object({$schema:o.literal(`makaio/config/v1`).default(`makaio/config/v1`),mode:o.enum([`local`,`remote`,`hybrid`]).default(`local`),role:o.enum([`main-dev-machine`,`server`]).default(`main-dev-machine`),bus:o.object({remote:o.object({url:o.string().url().optional(),secret:o.string().optional()}).optional()}).optional(),relay:o.object({url:o.string().url().optional(),token:o.string().optional(),autoReconnect:o.boolean().optional().default(!0),maxReconnectAttempts:o.number().int().min(0).optional().default(5),heartbeatInterval:o.number().int().positive().optional().default(3e4)}).optional(),features:o.object({voiceBridge:o.boolean().default(!1)}).optional(),fileWatcher:o.object({backend:o.enum([`auto`,`watchman`,`parcel`,`chokidar`]).default(`auto`)}).optional()}),l=o.object({anthropic:o.string().url(),openai:o.string().url()}).partial().strict(),u=o.object({model:o.string().optional().describe(`Model identifier (adapter-specific, e.g., sonnet, opus)`),timeouts:a.optional().describe(`Timeout overrides for this provider`),cwd:o.string().optional().describe(`Working directory for agent execution`),env:o.record(o.string(),o.string()).optional().describe(`Environment variables to pass to agent execution`),providerSettings:o.record(o.string(),o.unknown()).optional().describe(`Provider-specific configuration (non-credential settings only)`)}).strict(),d=u.safeExtend({providerId:o.string().optional().describe(`FK to the providers table (stable provider ID, e.g. "anthropic")`),definitionId:o.string().optional().describe(`Provider definition identifier for schema lookup`),name:o.string().describe(`Display name for UI`),baseUrl:o.string().url().optional().describe(`Provider endpoint URL`),availableModels:o.array(e).optional().describe(`Models from this provider`),modelFilterMode:n.optional().describe(`Controls default visibility for models without explicit overrides`),modelVisibility:o.record(o.string(),t).optional().describe(`Sparse per-model visibility overrides`),isDefault:o.boolean().default(!1).describe(`Whether this is the default provider for inheritance`),enabled:o.boolean().default(!0).describe(`Whether this provider is enabled (disabled providers are not loaded)`)}),f=o.object({$schema:o.literal(`makaio/adapter-config/v2`),defaults:u.optional(),providers:o.record(o.string(),d).default(()=>({}))}),p=`makaio/provider-config/v2`,m=o.object({$schema:o.literal(p),definitionId:o.string().trim().min(1),name:o.string().trim().min(1).optional(),auth:r,managedBy:i.optional(),endpointOverrides:l.optional(),modelFilterMode:n.optional(),modelVisibility:o.record(o.string(),t).optional(),isDefault:o.boolean().optional(),enabled:o.boolean().optional()}).strict().superRefine((e,t)=>{let{method:n}=e.auth;n.owner===`provider`&&n.providerDefinitionId!==e.definitionId&&t.addIssue({code:o.ZodIssueCode.custom,message:`Provider-owned auth methods must belong to the containing provider definition.`,path:[`auth`,`method`,`providerDefinitionId`]}),e.enabled===!1&&e.isDefault===!0&&t.addIssue({code:o.ZodIssueCode.custom,message:`A disabled provider config cannot be the default.`,path:[`isDefault`]})}),h={get:{request:o.object({}),response:o.object({config:c})},update:{request:o.object({config:c}),response:o.object({success:o.boolean()})}},g=s(`config`,h),_=g.subjects;export{m as a,u as c,p as i,l,_ as n,f as o,h as r,d as s,g as t,c as u};
+import{i as e,n as t,t as n}from"./visibility-DtDLRBdr.mjs";import"./model-DrzPt3ou.mjs";import{o as r,s as i}from"./selection-DL3ric7K.mjs";import{t as a}from"./timeout-DVlN2Zhy.mjs";import{z as o}from"zod";import{createBusNamespace as s}from"@makaio/framework/core";const c=o.object({$schema:o.literal(`makaio/config/v1`).default(`makaio/config/v1`),mode:o.enum([`local`,`remote`,`hybrid`]).default(`local`),role:o.enum([`main-dev-machine`,`server`]).default(`main-dev-machine`),bus:o.object({remote:o.object({url:o.string().url().optional(),secret:o.string().optional()}).optional()}).optional(),relay:o.object({url:o.string().url().optional(),token:o.string().optional(),autoReconnect:o.boolean().optional().default(!0),maxReconnectAttempts:o.number().int().min(0).optional().default(5),heartbeatInterval:o.number().int().positive().optional().default(3e4)}).optional(),features:o.object({voiceBridge:o.boolean().default(!1)}).optional(),fileWatcher:o.object({backend:o.enum([`auto`,`watchman`,`parcel`,`chokidar`]).default(`auto`)}).optional()}),l=o.object({anthropic:o.string().url(),openai:o.string().url()}).partial().strict(),u=o.object({model:o.string().optional().describe(`Model identifier (adapter-specific, e.g., sonnet, opus)`),timeouts:a.optional().describe(`Timeout overrides for this provider`),cwd:o.string().optional().describe(`Working directory for agent execution`),env:o.record(o.string(),o.string()).optional().describe(`Environment variables to pass to agent execution`),providerSettings:o.record(o.string(),o.unknown()).optional().describe(`Provider-specific configuration (non-credential settings only)`)}).strict(),d=u.safeExtend({providerId:o.string().optional().describe(`FK to the providers table (stable provider ID, e.g. "anthropic")`),definitionId:o.string().optional().describe(`Provider definition identifier for schema lookup`),name:o.string().describe(`Display name for UI`),baseUrl:o.string().url().optional().describe(`Provider endpoint URL`),availableModels:o.array(e).optional().describe(`Models from this provider`),modelFilterMode:n.optional().describe(`Controls default visibility for models without explicit overrides`),modelVisibility:o.record(o.string(),t).optional().describe(`Sparse per-model visibility overrides`),isDefault:o.boolean().default(!1).describe(`Whether this is the default provider for inheritance`),enabled:o.boolean().default(!0).describe(`Whether this provider is enabled (disabled providers are not loaded)`)}),f=o.object({$schema:o.literal(`makaio/adapter-config/v2`),defaults:u.optional(),providers:o.record(o.string(),d).default(()=>({}))}),p=`makaio/provider-config/v2`,m=o.object({$schema:o.literal(p),definitionId:o.string().trim().min(1),name:o.string().trim().min(1).optional(),auth:r,managedBy:i.optional(),endpointOverrides:l.optional(),modelFilterMode:n.optional(),modelVisibility:o.record(o.string(),t).optional(),isDefault:o.boolean().optional(),enabled:o.boolean().optional()}).strict().superRefine((e,t)=>{let{method:n}=e.auth;n.owner===`provider`&&n.providerDefinitionId!==e.definitionId&&t.addIssue({code:o.ZodIssueCode.custom,message:`Provider-owned auth methods must belong to the containing provider definition.`,path:[`auth`,`method`,`providerDefinitionId`]}),e.enabled===!1&&e.isDefault===!0&&t.addIssue({code:o.ZodIssueCode.custom,message:`A disabled provider config cannot be the default.`,path:[`isDefault`]})}),h={get:{request:o.object({}),response:o.object({config:c})},update:{request:o.object({config:c}),response:o.object({success:o.boolean()})}},g=s(`config`,h),_=g.subjects;export{m as a,u as c,p as i,l,_ as n,f as o,h as r,d as s,g as t,c as u};