@pixelzx/genesis 2026.6.4-1 → 2026.6.5

package/dist/devices-cli-BKVbpwVc.js

@@ -1,498 +0,0 @@
-import { a as normalizeLowercaseStringOrEmpty, c as normalizeOptionalString, d as normalizeStringifiedOptionalString } from "./string-coerce-DPP_aYVc.js";
-import { n as defaultRuntime } from "./runtime-DDkDH9fa.js";
-import { t as sanitizeForLog } from "./ansi-cSbP14w0.js";
-import { r as theme } from "./theme-DD6pQv2_.js";
-import { a as isLoopbackHost } from "./net-BzaeD_3Q.js";
-import { n as normalizeDeviceAuthScopes } from "./device-auth-DtRVQUtN.js";
-import { i as GATEWAY_CLIENT_NAMES, r as GATEWAY_CLIENT_MODES } from "./client-info-DZtBR4jU.js";
-import { d as readConnectPairingRequiredMessage } from "./connect-error-details-dpux1X7K.js";
-import { n as buildGatewayConnectionDetails, r as callGateway } from "./call-Dk5rTl-p.js";
-import { n as formatTimeAgo } from "./format-relative-CkCeIUFz.js";
-import { n as withProgress } from "./progress-z1FWoV8k.js";
-import { g as summarizeDeviceTokens, i as formatDevicePairingForbiddenMessage, l as listDevicePairing, n as approveDevicePairing } from "./device-pairing-yKZ_7HHw.js";
-import { n as renderTable, t as getTerminalTableWidth } from "./table-ree5Et8O.js";
-//#region src/shared/device-pairing-access.ts
-function normalizeRoleList(...items) {
-	const roles = /* @__PURE__ */ new Set();
-	for (const item of items) {
-		if (!item) continue;
-		if (Array.isArray(item)) {
-			for (const role of item) {
-				const trimmed = role.trim();
-				if (trimmed) roles.add(trimmed);
-			}
-			continue;
-		}
-		const trimmed = item.trim();
-		if (trimmed) roles.add(trimmed);
-	}
-	const sorted = Array.from(roles);
-	sorted.sort();
-	return sorted;
-}
-function includesAll(allowed, requested) {
-	const allowedSet = new Set(allowed);
-	return requested.every((value) => allowedSet.has(value));
-}
-function summarizePendingDeviceAccess(request) {
-	return {
-		roles: normalizeRoleList(request.roles, request.role),
-		scopes: normalizeDeviceAuthScopes(request.scopes)
-	};
-}
-function summarizeApprovedDeviceAccess(device) {
-	const approvedRoles = normalizeRoleList(device.roles, device.role);
-	const tokenList = Array.isArray(device.tokens) ? device.tokens : device.tokens ? Object.values(device.tokens) : void 0;
-	return {
-		roles: tokenList === void 0 ? approvedRoles : normalizeRoleList(tokenList.filter((token) => !token.revokedAtMs).flatMap((token) => token.role ?? [])).filter((role) => approvedRoles.includes(role)),
-		scopes: normalizeDeviceAuthScopes(device.scopes)
-	};
-}
-function resolvePendingDeviceApprovalState(request, paired) {
-	const requested = summarizePendingDeviceAccess(request);
-	const approved = paired ? summarizeApprovedDeviceAccess(paired) : null;
-	if (!approved) return {
-		kind: "new-pairing",
-		requested,
-		approved: null
-	};
-	if (!includesAll(approved.roles, requested.roles)) return {
-		kind: "role-upgrade",
-		requested,
-		approved
-	};
-	if (!includesAll(approved.scopes, requested.scopes)) return {
-		kind: "scope-upgrade",
-		requested,
-		approved
-	};
-	return {
-		kind: "re-approval",
-		requested,
-		approved
-	};
-}
-//#endregion
-//#region src/cli/devices-cli.ts
-const FALLBACK_NOTICE = "Direct scope access failed; using local fallback.";
-const DEFAULT_DEVICES_TIMEOUT_MS = 1e4;
-const devicesCallOpts = (cmd, defaults) => cmd.option("--url <url>", "Gateway WebSocket URL (defaults to gateway.remote.url when configured)").option("--token <token>", "Gateway token (if required)").option("--password <password>", "Gateway password (password auth)").option("--timeout <ms>", "Timeout in ms", String(defaults?.timeoutMs ?? DEFAULT_DEVICES_TIMEOUT_MS)).option("--json", "Output JSON", false);
-const callGatewayCli = async (method, opts, params) => withProgress({
-	label: `Devices ${method}`,
-	indeterminate: true,
-	enabled: opts.json !== true
-}, async () => await callGateway({
-	url: opts.url,
-	token: opts.token,
-	password: opts.password,
-	method,
-	params,
-	timeoutMs: Number(opts.timeout ?? DEFAULT_DEVICES_TIMEOUT_MS),
-	clientName: GATEWAY_CLIENT_NAMES.CLI,
-	mode: GATEWAY_CLIENT_MODES.CLI
-}));
-function normalizeErrorMessage(error) {
-	if (error instanceof Error) return error.message;
-	return String(error);
-}
-function shouldUseLocalPairingFallback(opts, error) {
-	if (!readConnectPairingRequiredMessage(normalizeLowercaseStringOrEmpty(normalizeErrorMessage(error)))) return false;
-	if (typeof opts.url === "string" && opts.url.trim().length > 0) return false;
-	const connection = buildGatewayConnectionDetails();
-	if (connection.urlSource !== "local loopback") return false;
-	try {
-		return isLoopbackHost(new URL(connection.url).hostname);
-	} catch {
-		return false;
-	}
-}
-function redactLocalPairedDevice(device) {
-	const { tokens, ...rest } = device;
-	return {
-		...rest,
-		tokens: summarizeDeviceTokens(tokens)
-	};
-}
-async function listPairingWithFallback(opts) {
-	try {
-		return parseDevicePairingList(await callGatewayCli("device.pair.list", opts, {}));
-	} catch (error) {
-		if (!shouldUseLocalPairingFallback(opts, error)) throw error;
-		if (opts.json !== true) defaultRuntime.log(theme.warn(FALLBACK_NOTICE));
-		const local = await listDevicePairing();
-		return {
-			pending: local.pending,
-			paired: local.paired.map((device) => redactLocalPairedDevice(device))
-		};
-	}
-}
-async function approvePairingWithFallback(opts, requestId) {
-	try {
-		return await callGatewayCli("device.pair.approve", opts, { requestId });
-	} catch (error) {
-		if (!shouldUseLocalPairingFallback(opts, error)) throw error;
-		if (opts.json !== true) defaultRuntime.log(theme.warn(FALLBACK_NOTICE));
-		const approved = await approveDevicePairing(requestId, { callerScopes: ["operator.admin"] });
-		if (!approved) return null;
-		if (approved.status === "forbidden") throw new Error(formatDevicePairingForbiddenMessage(approved), { cause: error });
-		return {
-			requestId,
-			device: redactLocalPairedDevice(approved.device)
-		};
-	}
-}
-function parseDevicePairingList(value) {
-	const obj = typeof value === "object" && value !== null ? value : {};
-	return {
-		pending: Array.isArray(obj.pending) ? obj.pending : [],
-		paired: Array.isArray(obj.paired) ? obj.paired : []
-	};
-}
-function selectLatestPendingRequest(pending) {
-	if (!pending?.length) return null;
-	return pending.reduce((latest, current) => {
-		const latestTs = typeof latest.ts === "number" ? latest.ts : 0;
-		return (typeof current.ts === "number" ? current.ts : 0) > latestTs ? current : latest;
-	});
-}
-function formatTokenSummary(tokens) {
-	if (!tokens || tokens.length === 0) return "none";
-	return tokens.map((t) => `${sanitizeForLog(t.role)}${t.revokedAtMs ? " (revoked)" : ""}`).toSorted((a, b) => a.localeCompare(b)).join(", ");
-}
-function formatPendingDeviceIdentity(request) {
-	const displayName = normalizeOptionalString(request.displayName);
-	if (displayName) return sanitizeForLog(displayName);
-	return sanitizeForLog(normalizeOptionalString(request.deviceId) ?? "");
-}
-function formatAccessSummary(access) {
-	if (!access) return "none";
-	return `roles: ${access.roles.length > 0 ? access.roles.map((role) => sanitizeForLog(role)).join(", ") : "none"}; scopes: ${access.scopes.length > 0 ? access.scopes.map((scope) => sanitizeForLog(scope)).join(", ") : "none"}`;
-}
-function formatPendingApprovalKind(kind) {
-	switch (kind) {
-		case "new-pairing": return "new pairing";
-		case "role-upgrade": return "role upgrade";
-		case "scope-upgrade": return "scope upgrade";
-		case "re-approval": return "re-approval";
-	}
-	throw new Error("unsupported pending approval kind");
-}
-function indexPairedDevices(paired) {
-	const out = /* @__PURE__ */ new Map();
-	for (const device of paired ?? []) {
-		const deviceId = normalizeOptionalString(device.deviceId);
-		if (deviceId) out.set(deviceId, device);
-	}
-	return out;
-}
-function lookupPairedDevice(pairedByDeviceId, request) {
-	const normalizedDeviceId = normalizeOptionalString(request.deviceId);
-	if (!normalizedDeviceId) return;
-	const paired = pairedByDeviceId.get(normalizedDeviceId);
-	if (!paired) return;
-	const requestPublicKey = normalizeOptionalString(request.publicKey);
-	const pairedPublicKey = normalizeOptionalString(paired.publicKey);
-	if (requestPublicKey && pairedPublicKey && requestPublicKey !== pairedPublicKey) return;
-	return paired;
-}
-function quoteCliArg(value) {
-	if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) return value;
-	return `'${value.replaceAll("'", "'\\''")}'`;
-}
-function buildExplicitApproveCommand(opts, requestId) {
-	const args = [
-		"genesis",
-		"devices",
-		"approve",
-		requestId
-	];
-	const url = normalizeOptionalString(opts.url);
-	if (url) args.push("--url", url);
-	const timeout = normalizeOptionalString(opts.timeout);
-	if (timeout && timeout !== String(DEFAULT_DEVICES_TIMEOUT_MS)) args.push("--timeout", timeout);
-	if (opts.json === true) args.push("--json");
-	return args.map(quoteCliArg).join(" ");
-}
-function formatAuthFlagReminder(opts) {
-	const flags = [];
-	if (normalizeOptionalString(opts.token)) flags.push("--token");
-	if (normalizeOptionalString(opts.password)) flags.push("--password");
-	if (flags.length === 0) return "";
-	return `Reuse the same ${flags.join("/")} option${flags.length === 1 ? "" : "s"} when rerunning.`;
-}
-function resolveRequiredDeviceRole(opts) {
-	const deviceId = normalizeStringifiedOptionalString(opts.device) ?? "";
-	const role = normalizeStringifiedOptionalString(opts.role) ?? "";
-	if (deviceId && role) return {
-		deviceId,
-		role
-	};
-	defaultRuntime.error("--device and --role required");
-	defaultRuntime.exit(1);
-	return null;
-}
-function registerDevicesCli(program) {
-	const devices = program.command("devices").description("Device pairing and auth tokens");
-	devicesCallOpts(devices.command("list").description("List pending and paired devices").action(async (opts) => {
-		const list = await listPairingWithFallback(opts);
-		const pairedByDeviceId = indexPairedDevices(list.paired);
-		if (opts.json) {
-			defaultRuntime.writeJson(list);
-			return;
-		}
-		if (list.pending?.length) {
-			const tableWidth = getTerminalTableWidth();
-			defaultRuntime.log(`${theme.heading("Pending")} ${theme.muted(`(${list.pending.length})`)}`);
-			defaultRuntime.log(renderTable({
-				width: tableWidth,
-				columns: [
-					{
-						key: "Request",
-						header: "Request",
-						minWidth: 10
-					},
-					{
-						key: "Device",
-						header: "Device",
-						minWidth: 16,
-						flex: true
-					},
-					{
-						key: "Requested",
-						header: "Requested",
-						minWidth: 20,
-						flex: true
-					},
-					{
-						key: "Approved",
-						header: "Approved",
-						minWidth: 20,
-						flex: true
-					},
-					{
-						key: "Age",
-						header: "Age",
-						minWidth: 8
-					},
-					{
-						key: "Status",
-						header: "Status",
-						minWidth: 12
-					}
-				],
-				rows: list.pending.map((req) => {
-					const approval = resolvePendingDeviceApprovalState(req, lookupPairedDevice(pairedByDeviceId, req));
-					const statusParts = [formatPendingApprovalKind(approval.kind)];
-					if (req.isRepair) statusParts.push("repair");
-					return {
-						Request: req.requestId,
-						Device: `${formatPendingDeviceIdentity(req)}${req.remoteIp ? ` · ${sanitizeForLog(req.remoteIp)}` : ""}`,
-						Requested: formatAccessSummary(approval.requested),
-						Approved: formatAccessSummary(approval.approved),
-						Age: typeof req.ts === "number" ? formatTimeAgo(Date.now() - req.ts) : "",
-						Status: statusParts.join(", ")
-					};
-				})
-			}).trimEnd());
-		}
-		if (list.paired?.length) {
-			const tableWidth = getTerminalTableWidth();
-			defaultRuntime.log(`${theme.heading("Paired")} ${theme.muted(`(${list.paired.length})`)}`);
-			defaultRuntime.log(renderTable({
-				width: tableWidth,
-				columns: [
-					{
-						key: "Device",
-						header: "Device",
-						minWidth: 16,
-						flex: true
-					},
-					{
-						key: "Roles",
-						header: "Roles",
-						minWidth: 12,
-						flex: true
-					},
-					{
-						key: "Scopes",
-						header: "Scopes",
-						minWidth: 12,
-						flex: true
-					},
-					{
-						key: "Tokens",
-						header: "Tokens",
-						minWidth: 12,
-						flex: true
-					},
-					{
-						key: "IP",
-						header: "IP",
-						minWidth: 12
-					}
-				],
-				rows: list.paired.map((device) => ({
-					Device: sanitizeForLog(device.displayName || device.deviceId),
-					Roles: device.roles?.length ? device.roles.map((role) => sanitizeForLog(role)).join(", ") : "",
-					Scopes: device.scopes?.length ? device.scopes.map((scope) => sanitizeForLog(scope)).join(", ") : "",
-					Tokens: formatTokenSummary(device.tokens),
-					IP: device.remoteIp ? sanitizeForLog(device.remoteIp) : ""
-				}))
-			}).trimEnd());
-		}
-		if (!list.pending?.length && !list.paired?.length) defaultRuntime.log(theme.muted("No device pairing entries."));
-	}));
-	devicesCallOpts(devices.command("remove").description("Remove a paired device entry").argument("<deviceId>", "Paired device id").action(async (deviceId, opts) => {
-		const trimmed = deviceId.trim();
-		if (!trimmed) {
-			defaultRuntime.error("deviceId is required");
-			defaultRuntime.exit(1);
-			return;
-		}
-		const result = await callGatewayCli("device.pair.remove", opts, { deviceId: trimmed });
-		if (opts.json) {
-			defaultRuntime.writeJson(result);
-			return;
-		}
-		defaultRuntime.log(`${theme.warn("Removed")} ${theme.command(trimmed)}`);
-	}));
-	devicesCallOpts(devices.command("clear").description("Clear paired devices from the gateway table").option("--pending", "Also reject all pending pairing requests", false).option("--yes", "Confirm destructive clear", false).action(async (opts) => {
-		if (!opts.yes) {
-			defaultRuntime.error("Refusing to clear pairing table without --yes");
-			defaultRuntime.exit(1);
-			return;
-		}
-		const list = parseDevicePairingList(await callGatewayCli("device.pair.list", opts, {}));
-		const removedDeviceIds = [];
-		const rejectedRequestIds = [];
-		const paired = Array.isArray(list.paired) ? list.paired : [];
-		for (const device of paired) {
-			const deviceId = normalizeOptionalString(device.deviceId) ?? "";
-			if (!deviceId) continue;
-			await callGatewayCli("device.pair.remove", opts, { deviceId });
-			removedDeviceIds.push(deviceId);
-		}
-		if (opts.pending) {
-			const pending = Array.isArray(list.pending) ? list.pending : [];
-			for (const req of pending) {
-				const requestId = normalizeOptionalString(req.requestId) ?? "";
-				if (!requestId) continue;
-				await callGatewayCli("device.pair.reject", opts, { requestId });
-				rejectedRequestIds.push(requestId);
-			}
-		}
-		if (opts.json) {
-			defaultRuntime.writeJson({
-				removedDevices: removedDeviceIds,
-				rejectedPending: rejectedRequestIds
-			});
-			return;
-		}
-		defaultRuntime.log(`${theme.warn("Cleared")} ${removedDeviceIds.length} paired device${removedDeviceIds.length === 1 ? "" : "s"}`);
-		if (opts.pending) defaultRuntime.log(`${theme.warn("Rejected")} ${rejectedRequestIds.length} pending request${rejectedRequestIds.length === 1 ? "" : "s"}`);
-	}));
-	devicesCallOpts(devices.command("approve").description("Approve a pending device pairing request").argument("[requestId]", "Pending request id").option("--latest", "Show the most recent pending request to approve explicitly", false).action(async (requestId, opts) => {
-		let pairingList = null;
-		let resolvedRequestId = requestId?.trim();
-		const usingImplicitSelection = !resolvedRequestId || Boolean(opts.latest);
-		let selectedRequest = null;
-		if (usingImplicitSelection) {
-			pairingList = await listPairingWithFallback(opts);
-			selectedRequest = selectLatestPendingRequest(pairingList.pending);
-			resolvedRequestId = selectedRequest?.requestId?.trim();
-		}
-		if (!resolvedRequestId) {
-			defaultRuntime.error("No pending device pairing requests to approve");
-			defaultRuntime.exit(1);
-			return;
-		}
-		if (usingImplicitSelection) {
-			const req = selectedRequest;
-			const approval = resolvePendingDeviceApprovalState(req, lookupPairedDevice(indexPairedDevices(pairingList?.paired), req));
-			const approveCommand = buildExplicitApproveCommand(opts, req.requestId);
-			const authReminder = formatAuthFlagReminder(opts);
-			if (opts.json) {
-				defaultRuntime.writeJson({
-					selected: req,
-					approvalState: {
-						kind: approval.kind,
-						requested: approval.requested,
-						approved: approval.approved
-					},
-					approveCommand,
-					requiresAuthFlags: {
-						token: Boolean(normalizeOptionalString(opts.token)),
-						password: Boolean(normalizeOptionalString(opts.password))
-					}
-				});
-				defaultRuntime.exit(1);
-				return;
-			}
-			defaultRuntime.log(`${theme.warn("Selected pending device request")} ${theme.command(req.requestId)}`);
-			defaultRuntime.log(`  Device: ${formatPendingDeviceIdentity(req)}`);
-			defaultRuntime.log(`  Requested: ${formatAccessSummary(approval.requested)}`);
-			if (approval.approved) defaultRuntime.log(`  Approved: ${formatAccessSummary(approval.approved)}`);
-			if (req.remoteIp) defaultRuntime.log(`  IP:     ${sanitizeForLog(req.remoteIp)}`);
-			switch (approval.kind) {
-				case "scope-upgrade":
-					defaultRuntime.log("  Note:   Already paired. Requested scopes exceed the current approval, so reconnect stays blocked until you approve this upgrade.");
-					break;
-				case "role-upgrade":
-					defaultRuntime.log("  Note:   Already paired. Requested role exceeds the current approval, so reconnect stays blocked until you approve this upgrade.");
-					break;
-				case "re-approval":
-					defaultRuntime.log("  Note:   Already paired. Approval-bound device details changed, so Genesis created a fresh request instead of silently reusing the old approval.");
-					break;
-				case "new-pairing":
-					defaultRuntime.log("  Note:   First-time device pairing request.");
-					break;
-			}
-			defaultRuntime.error(`Approve this exact request with: ${approveCommand}`);
-			if (authReminder) defaultRuntime.error(authReminder);
-			defaultRuntime.exit(1);
-			return;
-		}
-		const result = await approvePairingWithFallback(opts, resolvedRequestId);
-		if (!result) {
-			defaultRuntime.error("unknown requestId");
-			defaultRuntime.exit(1);
-			return;
-		}
-		if (opts.json) {
-			defaultRuntime.writeJson(result);
-			return;
-		}
-		const deviceId = result?.device?.deviceId;
-		defaultRuntime.log(`${theme.success("Approved")} ${theme.command(deviceId ?? "ok")} ${theme.muted(`(${resolvedRequestId})`)}`);
-	}));
-	devicesCallOpts(devices.command("reject").description("Reject a pending device pairing request").argument("<requestId>", "Pending request id").action(async (requestId, opts) => {
-		const result = await callGatewayCli("device.pair.reject", opts, { requestId });
-		if (opts.json) {
-			defaultRuntime.writeJson(result);
-			return;
-		}
-		const deviceId = result?.deviceId;
-		defaultRuntime.log(`${theme.warn("Rejected")} ${theme.command(deviceId ?? "ok")}`);
-	}));
-	devicesCallOpts(devices.command("rotate").description("Rotate a device token for a role").requiredOption("--device <id>", "Device id").requiredOption("--role <role>", "Role name").option("--scope <scope...>", "Scopes to attach to the token (repeatable)").action(async (opts) => {
-		const required = resolveRequiredDeviceRole(opts);
-		if (!required) return;
-		const result = await callGatewayCli("device.token.rotate", opts, {
-			deviceId: required.deviceId,
-			role: required.role,
-			scopes: Array.isArray(opts.scope) ? opts.scope : void 0
-		});
-		defaultRuntime.writeJson(result);
-	}));
-	devicesCallOpts(devices.command("revoke").description("Revoke a device token for a role").requiredOption("--device <id>", "Device id").requiredOption("--role <role>", "Role name").action(async (opts) => {
-		const required = resolveRequiredDeviceRole(opts);
-		if (!required) return;
-		const result = await callGatewayCli("device.token.revoke", opts, {
-			deviceId: required.deviceId,
-			role: required.role
-		});
-		defaultRuntime.writeJson(result);
-	}));
-}
-//#endregion
-export { registerDevicesCli };

package/dist/diagnostics-gh3UN_iV.js

@@ -1,154 +0,0 @@
-import { a as normalizeLowercaseStringOrEmpty, c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-DPP_aYVc.js";
-import { t as loadSessionStore } from "./store-load-CZTVJ-lZ.js";
-import "./sessions-qbJQTdke.js";
-import { r as getSessionBindingService } from "./session-binding-service-UsMQYRwd.js";
-import { i as toAcpRuntimeError } from "./errors-BuUb3AyG.js";
-import { a as getAcpRuntimeBackend, n as getAcpSessionManager, s as requireAcpRuntimeBackend } from "./manager-BCKuWA67.js";
-import { r as resolveSessionStorePathForAcp } from "./session-meta-BsAXgcig.js";
-import { t as formatAcpRuntimeErrorText } from "./error-text-DZ-INkf-.js";
-import { C as stopWithText, E as resolveAcpCommandBindingContext, n as ACP_DOCTOR_USAGE, p as formatAcpCapabilitiesText, r as ACP_INSTALL_USAGE, s as ACP_SESSIONS_USAGE } from "./shared-DQiRllSJ.js";
-import { r as resolveBundledPluginInstallCommandHint } from "./bundled-sources-BXqlf5lx.js";
-import { n as resolveBoundAcpThreadSessionKey } from "./targets-CMdwh9lR.js";
-import { existsSync } from "node:fs";
-import path from "node:path";
-//#region src/auto-reply/reply/commands-acp/install-hints.ts
-function resolveAcpInstallCommandHint(cfg) {
-	const configured = normalizeOptionalString(cfg.acp?.runtime?.installCommand);
-	if (configured) return configured;
-	const workspaceDir = process.cwd();
-	const backendId = normalizeOptionalLowercaseString(cfg.acp?.backend) ?? "acpx";
-	if (backendId === "acpx") {
-		const workspaceLocalPath = path.join(workspaceDir, "extensions", "acpx");
-		if (existsSync(workspaceLocalPath)) return `genesis plugins install ${workspaceLocalPath}`;
-		const bundledInstallHint = resolveBundledPluginInstallCommandHint({
-			pluginId: backendId,
-			workspaceDir
-		});
-		if (bundledInstallHint) {
-			const localPath = bundledInstallHint.replace(/^genesis plugins install /u, "");
-			const resolvedLocalPath = path.resolve(localPath);
-			const relativeToWorkspace = path.relative(workspaceDir, resolvedLocalPath);
-			if ((relativeToWorkspace.length === 0 || !relativeToWorkspace.startsWith("..") && !path.isAbsolute(relativeToWorkspace)) && existsSync(resolvedLocalPath)) return bundledInstallHint;
-		}
-		return "genesis plugins install acpx";
-	}
-	return `Install and enable the plugin that provides ACP backend "${backendId}".`;
-}
-//#endregion
-//#region src/auto-reply/reply/commands-acp/diagnostics.ts
-async function handleAcpDoctorAction(params, restTokens) {
-	if (restTokens.length > 0) return stopWithText(`⚠️ ${ACP_DOCTOR_USAGE}`);
-	const backendId = normalizeOptionalString(params.cfg.acp?.backend) ?? "acpx";
-	const installHint = resolveAcpInstallCommandHint(params.cfg);
-	const registeredBackend = getAcpRuntimeBackend(backendId);
-	const managerSnapshot = getAcpSessionManager().getObservabilitySnapshot(params.cfg);
-	const lines = [
-		"ACP doctor:",
-		"-----",
-		`configuredBackend: ${backendId}`
-	];
-	lines.push(`activeRuntimeSessions: ${managerSnapshot.runtimeCache.activeSessions}`);
-	lines.push(`runtimeIdleTtlMs: ${managerSnapshot.runtimeCache.idleTtlMs}`);
-	lines.push(`evictedIdleRuntimes: ${managerSnapshot.runtimeCache.evictedTotal}`);
-	lines.push(`activeTurns: ${managerSnapshot.turns.active}`);
-	lines.push(`queueDepth: ${managerSnapshot.turns.queueDepth}`);
-	lines.push(`turnLatencyMs: avg=${managerSnapshot.turns.averageLatencyMs}, max=${managerSnapshot.turns.maxLatencyMs}`);
-	lines.push(`turnCounts: completed=${managerSnapshot.turns.completed}, failed=${managerSnapshot.turns.failed}`);
-	const errorStatsText = Object.entries(managerSnapshot.errorsByCode).map(([code, count]) => `${code}=${count}`).join(", ") || "(none)";
-	lines.push(`errorCodes: ${errorStatsText}`);
-	if (registeredBackend) lines.push(`registeredBackend: ${registeredBackend.id}`);
-	else lines.push("registeredBackend: (none)");
-	if (registeredBackend?.runtime.doctor) try {
-		const report = await registeredBackend.runtime.doctor();
-		lines.push(`runtimeDoctor: ${report.ok ? "ok" : "error"} (${report.message})`);
-		if (report.code) lines.push(`runtimeDoctorCode: ${report.code}`);
-		if (report.installCommand) lines.push(`runtimeDoctorInstall: ${report.installCommand}`);
-		for (const detail of report.details ?? []) lines.push(`runtimeDoctorDetail: ${detail}`);
-	} catch (error) {
-		lines.push(`runtimeDoctor: error (${toAcpRuntimeError({
-			error,
-			fallbackCode: "ACP_TURN_FAILED",
-			fallbackMessage: "Runtime doctor failed."
-		}).message})`);
-	}
-	try {
-		const backend = requireAcpRuntimeBackend(backendId);
-		const capabilities = backend.runtime.getCapabilities ? await backend.runtime.getCapabilities({}) : {
-			controls: [],
-			configOptionKeys: []
-		};
-		lines.push("healthy: yes");
-		lines.push(`capabilities: ${formatAcpCapabilitiesText(capabilities.controls ?? [])}`);
-		if ((capabilities.configOptionKeys?.length ?? 0) > 0) lines.push(`configKeys: ${capabilities.configOptionKeys?.join(", ")}`);
-		return stopWithText(lines.join("\n"));
-	} catch (error) {
-		const acpError = toAcpRuntimeError({
-			error,
-			fallbackCode: "ACP_TURN_FAILED",
-			fallbackMessage: "ACP backend doctor failed."
-		});
-		lines.push("healthy: no");
-		lines.push(formatAcpRuntimeErrorText(acpError));
-		lines.push(`next: ${installHint}`);
-		lines.push(`next: genesis config set plugins.entries.${backendId}.enabled true`);
-		if (normalizeLowercaseStringOrEmpty(backendId) === "acpx") lines.push("next: verify acpx is installed (`acpx --help`).");
-		return stopWithText(lines.join("\n"));
-	}
-}
-function handleAcpInstallAction(params, restTokens) {
-	if (restTokens.length > 0) return stopWithText(`⚠️ ${ACP_INSTALL_USAGE}`);
-	const backendId = normalizeOptionalString(params.cfg.acp?.backend) ?? "acpx";
-	const installHint = resolveAcpInstallCommandHint(params.cfg);
-	return stopWithText([
-		"ACP install:",
-		"-----",
-		`configuredBackend: ${backendId}`,
-		`run: ${installHint}`,
-		`then: genesis config set plugins.entries.${backendId}.enabled true`,
-		"then: /acp doctor"
-	].join("\n"));
-}
-function formatAcpSessionLine(params) {
-	const acp = params.entry.acp;
-	if (!acp) return "";
-	const marker = params.currentSessionKey === params.key ? "*" : " ";
-	const label = normalizeOptionalString(params.entry.label) || acp.agent;
-	const threadText = params.threadId ? `, thread:${params.threadId}` : "";
-	return `${marker} ${label} (${acp.mode}, ${acp.state}, backend:${acp.backend}${threadText}) -> ${params.key}`;
-}
-function handleAcpSessionsAction(params, restTokens) {
-	if (restTokens.length > 0) return stopWithText(ACP_SESSIONS_USAGE);
-	const currentSessionKey = resolveBoundAcpThreadSessionKey(params) || params.sessionKey;
-	if (!currentSessionKey) return stopWithText("⚠️ Missing session key.");
-	const { storePath } = resolveSessionStorePathForAcp({
-		cfg: params.cfg,
-		sessionKey: currentSessionKey
-	});
-	let store;
-	try {
-		store = loadSessionStore(storePath);
-	} catch {
-		store = {};
-	}
-	const bindingContext = resolveAcpCommandBindingContext(params);
-	const normalizedChannel = bindingContext.channel;
-	const normalizedAccountId = bindingContext.accountId || void 0;
-	const bindingService = getSessionBindingService();
-	const rows = Object.entries(store).filter(([, entry]) => Boolean(entry?.acp)).toSorted(([, a], [, b]) => (b?.updatedAt ?? 0) - (a?.updatedAt ?? 0)).slice(0, 20).map(([key, entry]) => {
-		const bindingThreadId = bindingService.listBySession(key).find((binding) => (!normalizedChannel || binding.conversation.channel === normalizedChannel) && (!normalizedAccountId || binding.conversation.accountId === normalizedAccountId))?.conversation.conversationId;
-		return formatAcpSessionLine({
-			key,
-			entry,
-			currentSessionKey,
-			threadId: bindingThreadId
-		});
-	}).filter(Boolean);
-	if (rows.length === 0) return stopWithText("ACP sessions:\n-----\n(none)");
-	return stopWithText([
-		"ACP sessions:",
-		"-----",
-		...rows
-	].join("\n"));
-}
-//#endregion
-export { handleAcpDoctorAction, handleAcpInstallAction, handleAcpSessionsAction };