@reason-machines/cli-linux-x64 0.2.419 → 0.2.421

package/bin/vm-hands/vm-hands-entry-lite-pkc4ry5x.js

@@ -1,539 +0,0 @@
-// @bun
-import{sb as p6,ub as d6,vb as l6}from"./vm-hands-entry-lite-s9xf5z69.js";import{Bb as N7,Cb as H7,Db as w4,Eb as C7,Fb as j7,Ib as T3,yb as F7,zb as Y7}from"./vm-hands-entry-lite-pfzczmaa.js";import{$b as b3,Ac as s4,Bc as y0,Cc as m0,Dc as $2,Gc as W7,Jc as c4,Oc as z7,Xb as a6,Yb as i6,_b as o6,ac as t6,bc as e6,cc as $7,dc as J7,fc as Z7,gc as Q7,mc as K7,qc as B7,rc as V7,tc as G7,uc as U7,vc as j4,wc as D4,yc as X7}from"./vm-hands-entry-lite-fpp2bs9y.js";import{$c as P3,Tc as A3,Uc as _3}from"./vm-hands-entry-lite-vsa7t6m9.js";import{id as c6,jd as n6,kd as r6}from"./vm-hands-entry-lite-j2ng164q.js";import{rd as u6}from"./vm-hands-entry-lite-2m5dwrdf.js";import{td as J1}from"./vm-hands-entry-lite-gt497d5x.js";import{ud as v6}from"./vm-hands-entry-lite-d2w8tghq.js";import{Cd as V2,Dd as G2,Ed as l3,Gd as s3,Id as c3,Jd as n3,Nd as r3,Pd as m6}from"./vm-hands-entry-lite-c2g3wmkp.js";import{Xd as Q2,_d as u7,he as p7}from"./vm-hands-entry-lite-fzkfajew.js";import{$e as s5,$f as O6,Af as t5,Bf as e5,Cf as $6,Df as J6,Ef as Z6,Ff as Q6,Gf as K6,Hf as B6,If as V6,Jf as G6,Kf as U6,Lf as X6,Mf as W6,Nf as z6,Of as F6,Pf as Y6,Qf as N6,Rf as H6,Sf as C6,Wf as j6,Xe as A1,Xf as D6,Ye as _1,Yf as w6,Ze as k3,Zf as M6,_e as Y2,_f as L6,af as S3,ag as I6,bf as W4,cf as z4,df as D0,gg as Q8,hf as Y0,hg as K8,ig as B8,jg as V8,kf as d,kg as G8,lf as y1,lg as U8,ng as X8,of as Z8,og as W8,pg as z8,qf as x1,qg as F8,rg as Y8,sf as c5,sg as N8,tf as n5,tg as H8,uf as J2,ug as C8,vf as r5,vg as j8,wg as D8,xf as a5,yf as i5,zf as o5}from"./vm-hands-entry-lite-tytfs183.js";import{Ag as I7,Dg as n8,Fg as t1}from"./vm-hands-entry-lite-tchc7z17.js";import{Qg as S5,Ug as a8,Vg as q5}from"./vm-hands-entry-lite-jp9q2vsx.js";import{$g as M7,Zg as D7,_g as w7,dh as L7,gh as O7}from"./vm-hands-entry-lite-s823n1q9.js";import{wh as h6}from"./vm-hands-entry-lite-ntx8fdyq.js";import{Ch as I3,Ph as s6}from"./vm-hands-entry-lite-9qep7pka.js";import{Di as Z2}from"./vm-hands-entry-lite-28s7v15d.js";import{pj as S6,qj as b6}from"./vm-hands-entry-lite-1exfjv79.js";import{Bj as D1,Cj as w1,Dj as M1,Ej as L1,Fj as R0}from"./vm-hands-entry-lite-714wspqb.js";import{Yj as c8,Zj as A6}from"./vm-hands-entry-lite-6nwbqg37.js";import{bk as O3,dk as t0,jk as l4}from"./vm-hands-entry-lite-feybcq63.js";import{Bk as _6,Ck as P6,Dk as T6,Ek as R6,Gk as q6,Hk as g6,Jk as E6,Kk as k6}from"./vm-hands-entry-lite-3rqdzqhk.js";import{Vk as X}from"./vm-hands-entry-lite-q8wkrzer.js";import{dl as M8,jl as f6,kl as y6,ll as x6,nl as b1}from"./vm-hands-entry-lite-gxper06w.js";import{pl as F4}from"./vm-hands-entry-lite-0k13wmzm.js";import{ql as H}from"./vm-hands-entry-lite-magmzx9c.js";import{wl as x4}from"./vm-hands-entry-lite-ejkba2nk.js";import{request as s7}from"http";import{request as c7}from"https";import{lookup as n7}from"dns/promises";import{isIP as r7}from"net";async function a7($){let J=new URL($.url);return await new Promise((Z,Q)=>{let K=(J.protocol==="https:"?c7:s7)(J,{method:"POST",headers:{...$.headers,"accept-encoding":"identity"},signal:$.signal,timeout:s3},(B)=>Z({response:B,close:()=>{B.destroy(),K.destroy(),B.socket?.destroy()}}));K.once("error",Q),K.once("timeout",()=>K.destroy(Object.assign(Error("custom_endpoint_timeout"),{code:"ETIMEDOUT"}))),K.end($.body)})}var a3=new Set(["ENOTFOUND","EAI_AGAIN","EAI_NONAME","EAI_NODATA","EAI_FAIL","DNSException"]),i7=new Set(["ECONNREFUSED","ETIMEDOUT","ECONNRESET","EHOSTUNREACH","ENETUNREACH","EHOSTDOWN","ENETDOWN","EPIPE","ECONNABORTED","EADDRNOTAVAIL","ConnectionRefused","ConnectionClosed","ConnectionTimedOut","Timeout"]);function i3($,J=0){if(!$||typeof $!=="object"||J>3)return null;let Z=$.code;if(typeof Z==="string"){if(a3.has(Z))return"custom_endpoint_host_not_found";if(i7.has(Z))return"custom_endpoint_connection_failed";if(/^(?:ERR_TLS_|ERR_SSL_|CERT_|UNABLE_TO_(?:GET|VERIFY|DECRYPT)|DEPTH_ZERO_SELF_SIGNED|SELF_SIGNED_CERT|HOSTNAME_MISMATCH|EPROTO$)/.test(Z))return"custom_endpoint_tls_failed"}for(let Q of[...$ instanceof AggregateError?$.errors:[],$.cause]){let K=i3(Q,J+1);if(K)return K}return null}async function o7($,J){let Z=i3($),Q=new URL(J).hostname.replace(/^\[|\]$/g,"");if(Z!==null&&Z!=="custom_endpoint_connection_failed"||r7(Q)!==0)return Z;let K;return await Promise.race([n7(Q).then(()=>!0,(V)=>!a3.has(String(V?.code))),new Promise((V)=>{K=setTimeout(()=>V(!0),5000)})]).finally(()=>clearTimeout(K))?Z:"custom_endpoint_host_not_found"}function t7($){for(let J=42;;J++){if(J===127)J=256;let Z=String.fromCodePoint(J);if(!$.includes(Z))return Z}}function e7($,J){let Z=Buffer.from($),Q=Buffer.from(J),K=new Uint32Array(Z.length);for(let V=1,U=0;V<Z.length;V++){while(U&&Z[V]!==Z[U])U=K[U-1];if(Z[V]===Z[U])U++;K[V]=U}let B=0;return(V,U=!1)=>{let z=Buffer.allocUnsafe(V.length*Q.length+B),W=0;for(let G of V){while(B&&Z[B]!==G){let F=K[B-1];W+=Z.copy(z,W,0,B-F),B=F}if(Z[B]===G){if(B++,B===Z.length)W+=Q.copy(z,W),B=0}else z[W++]=G}if(U)W+=Z.copy(z,W,0,B),B=0;return z.subarray(0,W)}}async function o3($){$.signal.throwIfAborted();let J=n3.safeParse($.payload);if(!J.success)throw new H("custom_endpoint_invalid_request","Invalid local model request.");let Z=J.data,Q=r3.parse(await $.credential($.signal));if(!c3(Z,{baseUrl:Z.baseUrl,api:Q.api,execution:"device"}))throw new H("custom_endpoint_invalid_request","The request does not match the configured API.");$.signal.throwIfAborted();let K,B,V=0,U=0,z=0,W=t7(Q.apiKey),G=e7(Q.apiKey,W),F=async(N,C)=>{$.signal.throwIfAborted(),await new Promise((L,D)=>{let j=()=>{$.signal.removeEventListener("abort",j),D($.signal.reason)};if($.signal.addEventListener("abort",j,{once:!0}),$.signal.aborted){j();return}Promise.resolve().then(()=>{return $.signal.throwIfAborted(),$.emit(N,C)}).then(()=>{$.signal.removeEventListener("abort",j),L()},(M)=>{$.signal.removeEventListener("abort",j),D(M)})})},Y=async(N)=>{if(V+=N.length,V>G2)throw new H("custom_endpoint_response_too_large","Local model response exceeds the transport limit.");for(let C=0;C<N.length;C+=V2){if(z>=l3)throw new H("custom_endpoint_response_too_large","Local model response exceeds the chunk limit.");await F(`custom_endpoint.chunk.${z++}`,{eof:!1,data:N.subarray(C,C+V2).toString("base64")})}};try{let N=await a7({url:Z.url,body:Z.body,signal:$.signal,headers:{...Z.headers,...Q.api==="anthropic-messages"?{"x-api-key":Q.apiKey}:{authorization:`Bearer ${Q.apiKey}`}}});K=N.response,B=N.close;let C=K.statusCode??500;if(C>=300&&C<400)throw new H("custom_endpoint_redirect_refused","Local model redirects are not followed.");if(K.headers["content-encoding"]&&K.headers["content-encoding"]!=="identity")throw new H("custom_endpoint_encoding_unsupported","The local server must honor identity encoding.");let L={};for(let D of["content-type","retry-after","x-request-id","request-id"]){let j=K.headers[D];if(typeof j==="string")L[D]=j.replaceAll(Q.apiKey,W).slice(0,4096)}await F("custom_endpoint.headers",{status:C,statusText:(K.statusMessage??"").replaceAll(Q.apiKey,W).slice(0,256),headers:L});for await(let D of K){$.signal.throwIfAborted();let j=Buffer.isBuffer(D)?D:Buffer.from(D);if(U+=j.length,U>G2)throw new H("custom_endpoint_response_too_large","Local model response exceeds the transport limit.");await Y(G(j))}return await Y(G(Buffer.alloc(0),!0)),await F(`custom_endpoint.chunk.${z}`,{eof:!0}),{bytes:V,chunks:z}}catch(N){if($.signal.throwIfAborted(),N instanceof H)throw N;throw new H((K?null:await o7(N,Z.url))??"custom_endpoint_request_failed","The local model server could not complete the request.")}finally{B?.()}}import{join as t3}from"path";function $9($,J){return $===t3(J,".ara","workspace")||$===t3(J,".reason","workspace")}function e3($,J){let Z=$.filter((Q)=>$9(Q.path,J));return Z.length===1?Z[0].path:null}var J9=/^[a-f0-9]{64}$/;var U2=32,Z9=/^\/[^\x00-\x1f\x7f\\]*$/;function H1($){if(typeof $!=="string"||$.length>4096||!Z9.test($))return!1;if($==="/")return!0;return $.split("/").slice(1).every((J)=>J!==""&&J!=="."&&J!=="..")}function C1($,J){let Z=J==="win32"?/^([A-Za-z]):[\\/]*(.*)$/.exec($):null;if(!Z)return $;let Q=Z[2].split(/[\\/]+/).filter(Boolean).join("/");return`/${Z[1].toUpperCase()}:${Q?`/${Q}`:""}`}function j1($){if(!$||typeof $!=="object"||Array.isArray($))return;let J=$;if(!H1(J.home)||!Array.isArray(J.roots)||J.roots.length>U2)return;let Z=[];for(let Q of J.roots){if(!Q||typeof Q!=="object"||Array.isArray(Q))return;let{path_fingerprint:K,path:B}=Q;if(typeof K!=="string"||!J9.test(K)||!H1(B))return;Z.push({path_fingerprint:K,path:B})}return{home:J.home,roots:Z}}function Q9($){let J=/^Reason contributor (rc_[0-9a-f]{32})$/.exec($.name)?.[1];return $.email.toLowerCase()==="343777287+reason-contributors@users.noreply.github.com"&&J?J:void 0}function K9($){return Q9($)??$.email.toLowerCase()}function X2($){let J=/^Co-authored-by:\s*([^<>\r\n]+) <([^<>\s]+)>$/i.exec($.trim());return J?K9({name:J[1],email:J[2]}):$.trim().toLowerCase()}var s0=($)=>$.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/[a-z]/gi,(J)=>`[${J.toLowerCase()}${J.toUpperCase()}]`),B9=[...D1.map(($)=>`/(${$.map(s0).join("/")})(/|$)`),...w1.map(($)=>`/(${$.map(s0).join("/")})(/|$)`),...[...M1].map(($)=>`/(${s0($)})$`),`/${s0(".env.")}[^/]*$`,...L1.map(($)=>`/[^/]*${s0($)}$`)],$4=`function localGithubSandboxProfile(root, temporary) {
-  return ['(version 1)','(deny default)','(import "system.sb")','(allow process-exec process-fork)',
-    '(allow file-read* (subpath "/bin") (subpath "/sbin") (subpath "/usr/bin") (subpath "/usr/sbin") (subpath "/usr/libexec") (subpath "/usr/share") (subpath "/private/var/select") (literal "/private/var/db/xcode_select_link"))',
-    '(allow file-read-metadata (path-ancestors "/opt/homebrew/bin") (path-ancestors "/usr/local/bin") (path-ancestors "/Library/Developer/CommandLineTools"))',
-    '(allow file-read* (subpath "/opt/homebrew/Cellar") (subpath "/opt/homebrew/opt") (subpath "/opt/homebrew/bin") (subpath "/opt/homebrew/lib") (subpath "/opt/homebrew/share") (subpath "/opt/homebrew/include") (subpath "/usr/local/Cellar") (subpath "/usr/local/opt") (subpath "/usr/local/bin") (subpath "/usr/local/lib") (subpath "/usr/local/share") (subpath "/usr/local/include") (subpath "/Library/Developer/CommandLineTools"))',
-    '(allow file-read* file-write* (subpath '+JSON.stringify(root)+') (subpath '+JSON.stringify(temporary)+'))',
-    '(allow file-read-metadata (path-ancestors '+JSON.stringify(root)+') (path-ancestors '+JSON.stringify(temporary)+'))',
-    '(deny file-read* file-write* (subpath "/opt/homebrew/etc") (subpath "/usr/local/etc") (literal "/private/etc/master.passwd"))',
-    '(deny file-write* (subpath "/opt/homebrew") (subpath "/usr/local") (subpath "/Library/Developer") (subpath "/cores"))',
-    ...${JSON.stringify(B9)}.map(pattern => '(deny file-read* file-write* (regex #"'+pattern+'"))'),
-    '(deny network*)','(deny mach-lookup)','(deny process-info*)','(allow process-info* (target same-sandbox))','(allow process-info-listpids)','(allow file-read-metadata (subpath "/dev"))','(deny signal)','(allow signal (target same-sandbox))'].join('\\n');
-}`;import{spawn as G9,spawnSync as U9}from"child_process";import*as T from"fs";import*as b from"path";import{homedir as X9}from"os";function J4($,J,Z,Q="gh"){if(!["gh","git"].includes(Q))throw Error("local_device_gh_unavailable");let K=$.realpathSync(Z);if(process.platform==="win32"){let V=(U)=>U.toLowerCase()===K.toLowerCase()||U.toLowerCase().startsWith(K.toLowerCase()+J.sep);for(let U of new Set([process.env.ProgramW6432,process.env.ProgramFiles])){if(!U)continue;try{let z=$.realpathSync(Q==="gh"?`${U}\\GitHub CLI\\gh.exe`:`${U}\\Git\\cmd\\git.exe`);if(!V(z)&&z.toLowerCase().startsWith(U.toLowerCase()+"\\")&&$.statSync(z).isFile())return z}catch{}}throw Error("local_device_gh_unavailable")}let B=Q==="git"&&process.platform==="darwin"?"/Library/Developer/CommandLineTools/usr/bin/git":"/usr/bin/"+Q;for(let V of["/opt/homebrew/bin/"+Q,"/usr/local/bin/"+Q,B])try{let U=$.realpathSync(V);if(U===K||U.startsWith(K+J.sep)||!["/opt/homebrew/","/usr/local/","/usr/bin/",...Q==="git"?["/Library/Developer/CommandLineTools/"]:[]].some((W)=>U.startsWith(W)))continue;let z=$.statSync(U);if(!z.isFile()||(z.mode&18)!==0||![0,process.getuid()].includes(z.uid))continue;return $.accessSync(U,$.constants.X_OK),U}catch{continue}throw Error("local_device_gh_unavailable")}function Z4($,J){let Z=1;for(let Q=0;Q<J;Q+=1)if($.charCodeAt(Q)===10)Z+=1;return Z}var Q4=[{name:"private_key",regex:/-----BEGIN\s+(?:[A-Z0-9_-]+\s+)?PRIVATE\s+KEY-----/i},{name:"github_pat",regex:/\bgh[pousr]_[A-Za-z0-9_]{36,}\b/},{name:"github_fine_grained_pat",regex:/\bgithub_pat_[A-Za-z0-9_]{36,}\b/},{name:"gitlab_pat",regex:/\bglpat-[0-9a-zA-Z_-]{20,}\b/},{name:"slack_token",regex:/\bxox[baprs]-[0-9]{10,}-[0-9]{10,}-[0-9a-zA-Z]{24}\b/},{name:"stripe_live_key",regex:/\b[sr]k_live_[0-9a-zA-Z]{24,}\b/},{name:"bearer_jwt",regex:/\bBearer\s+ey[A-Za-z0-9_-]{20,}\.ey[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}\b/}];function W2($){let J=$.trim().replaceAll("\\","/");if(!J)return{valid:!1,reason:"empty_path"};if(J.startsWith("/"))return{valid:!1,reason:"absolute_path_forbidden"};if(J.split("/").includes("..")||J.includes("../")||J.endsWith("/.."))return{valid:!1,reason:"path_traversal_forbidden"};if(J===".git"||J.startsWith(".git/")||J.includes("/.git/"))return{valid:!1,reason:"git_directory_entry_forbidden"};return{valid:!0}}function K4($){return[...new Set($.map((J)=>J.trim()).filter((J)=>J.length>=8))]}function B4($,J){return[...J.matchAll(new RegExp($.regex.source,`${$.regex.flags}g`))]}function O1($,J=[],Z={}){let Q=[],K=Z.published??new Set,B=K4(J).filter((V)=>!K.has(V));for(let V of $){let U=W2(V.path);if(!U.valid){Q.push({path:V.path,reason:U.reason??"invalid_path"});continue}let z=V.content??"",W=B.map((G)=>({secret:G,offset:z.indexOf(G)})).filter((G)=>G.offset>=0).sort((G,F)=>G.offset-F.offset);if(W.length>0){let G=[...new Set(W.flatMap((F)=>Z.secretNames?.(F.secret)??[]))];Q.push({path:V.path,reason:"literal_secret_detected",ruleId:"forbidden_secret_value",line:Z4(z,W[0].offset),...G.length>0?{secretNames:G}:{}})}for(let G of Q4){let F=B4(G,z).find((Y)=>!K.has(Y[0]));if(F){Q.push({path:V.path,reason:`credential_pattern_detected: ${G.name}`,pattern:G.name,ruleId:G.name,line:Z4(z,F.index)});break}}}return{clean:Q.length===0,violations:Q,scannedObjectCount:$.length}}function V4($,J=[]){let Z=K4(J),Q=new Set;for(let{content:K}of $){for(let B of Z)if(K.includes(B))Q.add(B);for(let B of Q4)for(let V of B4(B,K))Q.add(V[0])}return[...Q]}function V9($,J){let Z=0;for(let Q=$.indexOf(J);Q>=0;Q=$.indexOf(J,Q+J.length))Z+=1;return Z}function G4($,J,Z){let Q=(K,B)=>K.reduce((V,U)=>V+V9(U,B),0);return new Set($.filter((K)=>Q(J,K)<=Q(Z,K)))}var _0=4194304,V0=process.platform==="win32",n0=process.env.SystemRoot??"C:\\Windows",W9=($)=>V0?U9(b.win32.join(n0,"System32","taskkill.exe"),["/PID",String($),"/T","/F"],{stdio:"ignore",windowsHide:!0}):process.kill(-$,"SIGKILL"),c0=V0?[b.win32.join(n0,"System32"),n0].join(";"):"/usr/bin:/bin:/usr/sbin:/sbin",I1=V0?{SystemRoot:n0,WINDIR:n0}:{},z9=($)=>V0?b.win32.resolve($,"..","..","bin","sh.exe"):"/bin/sh",U4=536870912,z2=/^[a-f0-9]{40}$/,F9=($,J,Z)=>new Promise((Q)=>{if(Z.signal?.aborted){Q({status:null,error:Error("cancelled"),stdout:Buffer.alloc(0),stderr:Buffer.alloc(0)});return}let K;try{K=G9($,J,{cwd:Z.cwd,env:Z.env,...V0?{windowsHide:!0}:{detached:!0},stdio:["pipe","pipe","pipe"]})}catch{Q({status:null,error:Error("spawn_failed"),stdout:Buffer.alloc(0),stderr:Buffer.alloc(0)});return}let B=Buffer.alloc(0),V=Buffer.alloc(0),U,z=!1,W=(N)=>{if(U??=Error(N),K.pid)try{W9(K.pid)}catch{}},G=()=>W("cancelled"),F=setTimeout(()=>W("timeout"),Z.timeout);Z.signal?.addEventListener("abort",G,{once:!0});let Y=(N)=>{if(z)return;z=!0,clearTimeout(F),Z.signal?.removeEventListener("abort",G),Q({status:N,stdout:B,stderr:V,...U?{error:U}:{}})};if(K.stdout.on("data",(N)=>{if(B.length+V.length+N.length>Z.maxBuffer)W("output_limit");else B=Buffer.concat([B,N])}),K.stderr.on("data",(N)=>{if(B.length+V.length+N.length>Z.maxBuffer)W("output_limit");else V=Buffer.concat([V,N])}),K.on("error",()=>{if(W("spawn_failed"),!K.pid)Y(null)}),K.on("close",(N)=>Y(N)),K.stdin.on("error",()=>W("input_failed")),K.stdin.end(Z.input),Z.signal?.aborted)G()}),Y9={command:F9,gh:($,J)=>J4(T,b,$,J),home:X9};function I($){throw Error($)}function F2($,J){let[Z,Q]=V0?[$.toLowerCase(),J.toLowerCase()]:[$,J];return Q===Z||Q.startsWith(Z+b.sep)}function N9($,J){let Z=new Set($.split(/\r?\n/).map(X2));return J.filter((Q)=>{let K=X2(Q);if(Z.has(K))return!1;return Z.add(K),!0})}var H9=new Set(["repoFullName","branch","head","base","defaultBranch","expectedBaseRef","baseSha","remoteHeadSha","expectedHeadSha"]),C9=($)=>JSON.stringify($,(J,Z)=>H9.has(J)?void 0:Z);function X4($,J,Z){let Q=[...new Set($.map((B)=>`${J(B.path)}${B.line?`:${B.line}`:""} (${B.reason==="literal_secret_detected"?`value of ${B.secretNames?.length?B.secretNames.slice(0,3).join(", "):"a session variable"}`:`${B.ruleId??"credential"} credential`})`))].slice(0,10),K=$.some((B)=>B.reason==="literal_secret_detected");I(`local_device_gh_secret_scan_failed: the change adds text matching a secret that the base does not already contain: ${Q.join("; ")}. Nothing was sent. ${Z}${K?" If the line is ordinary code, that variable's value is too generic to tell apart from code: tell the person which variable matched so they can change its value.":""}`)}async function Y4($,J,Z=Y9){let Q=A1.parse($),K="local_device_gh_prepare_setup";try{if(!["darwin","linux","win32"].includes(process.platform))I("local_device_gh_platform_unavailable");J.assertCurrent();let B=T.realpathSync(J.root);if(B===b.parse(B).root)I("local_device_gh_root_unavailable");if(!D0(Q)&&!J.forbiddenSecretValues)I("local_device_gh_secret_scope_unavailable");if(!D0(Q)&&J.readOnly)I("local_device_gh_read_only");if(!D0(Q)){let w=O1([{path:"github-operation",content:C9(Q)}],J.forbiddenSecretValues,J.secretNames?{secretNames:J.secretNames}:{});if(!w.clean)X4(w.violations,()=>`the ${Q.kind} request text`,"Remove it from the pull request text and try again.")}let V=Z.gh(B),U=Z.home(),z=Z.gh(B,"git"),W=J.privateDirectory?T.realpathSync(J.privateDirectory):T.realpathSync(U);if(!D0(Q)&&(!J.privateDirectory||F2(B,W)))I("local_device_gh_private_scope_unavailable");let G={...I1,PATH:V0?[b.dirname(z),c0].join(";"):c0,HOME:U,GH_CONFIG_DIR:V0&&process.env.APPDATA?b.join(process.env.APPDATA,"GitHub CLI"):b.join(U,".config","gh"),GH_PROMPT_DISABLED:"1",GH_PAGER:V0?"":"/bin/cat",GH_HOST:"github.com",GIT_CONFIG_NOSYSTEM:"1",GIT_CONFIG_SYSTEM:"/dev/null",GIT_CONFIG_GLOBAL:"/dev/null",GIT_TERMINAL_PROMPT:"0",GIT_NO_REPLACE_OBJECTS:"1",GIT_LFS_SKIP_SMUDGE:"1",...process.platform==="linux"?Object.fromEntries(["DBUS_SESSION_BUS_ADDRESS","XDG_RUNTIME_DIR"].flatMap((w)=>process.env[w]?[[w,process.env[w]]]:[])):{}},F=async(w,_,P=W,g,f=_0)=>{J.assertCurrent();let y=await Z.command(w,_,{cwd:P,env:G,input:g,maxBuffer:f,timeout:Math.max(1,Math.min(60000,(J.deadlineMs??Date.now()+60000)-Date.now())),signal:J.signal});if(J.assertCurrent(),y.error||y.status!==0)I("local_device_gh_command_failed");return y.stdout},Y=async(w)=>(await F(V,w)).toString("utf8").trim(),N=async(w,_="application/vnd.github+json")=>{W4(Q.repoFullName,w,{headers:{accept:_}}),J.assertCurrent();let P=await Z.command(V,["api","--hostname","github.com","--method","GET","--include","-H",`Accept: ${_}`,w],{cwd:W,env:G,maxBuffer:_0,timeout:Math.max(1,Math.min(25000,(J.deadlineMs??Date.now()+25000)-Date.now())),signal:J.signal});if(J.assertCurrent(),P.error&&P.status===null)I("local_device_gh_response_unavailable");let g=P.stdout.toString("utf8").match(/^HTTP\/[^ ]+ ([0-9]{3})[^\r\n]*\r?\n([\s\S]*?)\r?\n\r?\n([\s\S]*)$/);if(!g)I("local_device_gh_response_invalid");let f=Number(g[1]);if(f>=200&&f<300&&P.status!==0)I("local_device_gh_response_unavailable");if(Buffer.byteLength(g[3])>Y2)I("local_device_gh_response_too_large");let y={};for(let r of g[2].split(/\r?\n/)){let o=r.indexOf(":"),j0=r.slice(0,o).toLowerCase();if(["link","content-type"].includes(j0))y[j0]=r.slice(o+1).trim().slice(0,8192)}return{kind:"read",status:f,headers:y,body:f>=200&&f<300?g[3]:JSON.stringify({message:"local_device_gh_request_failed"})}};if(Q.kind==="read")return N(Q.path,Q.accept);if(Q.kind==="pr_review_context"){let[w,_]=Q.repoFullName.split("/"),P=await Y(["api","graphql","--hostname","github.com","-f",`query=${z4}`,"-f",`owner=${w}`,"-f",`repo=${_}`,"-F",`number=${Q.number}`,...Q.after?["-f",`after=${Q.after}`]:[]]);if(Buffer.byteLength(P)>Y2)I("local_device_gh_response_too_large");let g=JSON.parse(P);if(g.errors||g.data?.repository?.nameWithOwner?.toLowerCase()!==Q.repoFullName.toLowerCase()||g.data.repository.pullRequest?.number!==Q.number)I("local_device_gh_response_invalid");return{kind:"pr_review_context",body:P}}if(Q.kind==="pr_merge"){let w=await N(`/repos/${Q.repoFullName}/pulls/${Q.number}`),_=JSON.parse(w.body),P=(y)=>y.number===Q.number&&y.html_url===`https://github.com/${Q.repoFullName}/pull/${Q.number}`&&y.base?.repo?.full_name?.toLowerCase()===Q.repoFullName.toLowerCase()&&y.base?.ref===Q.expectedBaseRef&&y.head?.sha===Q.expectedHeadSha;if(w.status!==200||!P(_)||_.state!=="open"||_.draft!==!1||_.head?.sha!==Q.expectedHeadSha||_.base?.repo?.full_name?.toLowerCase()!==Q.repoFullName.toLowerCase())I("local_device_gh_merge_target_changed");await Y(["pr","merge",String(Q.number),`--repo=${Q.repoFullName}`,`--${Q.method}`,"--match-head-commit",Q.expectedHeadSha,...Q.commitBody!==void 0&&Q.method!=="rebase"?[`--body=${Q.commitBody}`]:[]]);let g=await N(`/repos/${Q.repoFullName}/pulls/${Q.number}`),f=JSON.parse(g.body);if(g.status!==200||!P(f)||f.merged!==!0)I("local_device_gh_merge_unconfirmed");return{kind:"pr_merge",number:Q.number,merged:!0}}if(Q.kind==="pr_create"){if(Q.head===Q.base)I("local_device_gh_default_branch");let w=await Y(["pr","create","--repo",Q.repoFullName,"--head",Q.head,"--base",Q.base,`--title=${Q.title}`,`--body=${Q.body}`,...Q.draft?["--draft"]:[]]);if(!new RegExp("^https://github\\.com/"+Q.repoFullName.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")+"/pull/[1-9][0-9]*$").test(w))I("local_device_gh_mutation_unconfirmed");return{kind:"pr_create",url:w}}if(Q.kind==="pr_mutation"){let w=Q.mutation,_=w.action==="edit"?["edit",...w.title!==void 0?[`--title=${w.title}`]:[],...w.body!==void 0?[`--body=${w.body}`]:[],...w.base?[`--base=${w.base}`]:[]]:w.action==="metadata"?["edit",`--${w.change}-${w.field}=${w.value}`]:w.action==="ready"?["ready"]:w.action==="draft"?["ready","--undo"]:["close"];return await Y(["pr",..._,String(Q.number),"--repo",Q.repoFullName]),{kind:"pr_mutation",number:Q.number,applied:!0}}if(!J.repoPath)I("local_device_gh_workspace_unavailable");let C=T.realpathSync(J.repoPath);if(!F2(B,C))I("local_device_gh_workspace_unavailable");let L=`https://github.com/${Q.repoFullName}.git`,D="!'"+(V0?V.replace(/\\/g,"/"):V).replace(/'/g,"'\\''")+"' auth git-credential",j=F4($4),M=(w,_,P)=>process.platform==="darwin"?["/usr/bin/sandbox-exec",["-p",w,_,...P]]:[_,P],O=async(w,_,P,g=_0)=>{let f=F2(W,w),y=["-c","core.hooksPath=/dev/null","-c","core.fsmonitor=false","-c","credential.helper=","-c","http.extraheader=",...f?["-c",`credential.https://github.com.helper=${D}`]:[],"-c","protocol.ext.allow=never","-c","protocol.file.allow=never","-c","protocol.ssh.allow=never",..._];if(f)return F(z,y,w,P,g);let r=b.join(C,".ara-local-gh-tmp");if(T.mkdirSync(r,{recursive:!0,mode:448}),T.lstatSync(r).isSymbolicLink()||T.realpathSync(r)!==r)I("local_device_gh_workspace_unavailable");J.assertCurrent();let o=await Z.command(...M(j(C,r),z,y),{cwd:w,input:P,maxBuffer:g,timeout:Math.max(1,Math.min(25000,(J.deadlineMs??Date.now()+25000)-Date.now())),signal:J.signal,env:{...I1,PATH:c0,HOME:C,TMPDIR:r,GIT_CONFIG_NOSYSTEM:"1",GIT_CONFIG_SYSTEM:"/dev/null",GIT_CONFIG_GLOBAL:"/dev/null",GIT_TERMINAL_PROMPT:"0",GIT_NO_REPLACE_OBJECTS:"1",GIT_LFS_SKIP_SMUDGE:"1"}});if(J.assertCurrent(),o.error||o.status!==0)I("local_device_gh_collection_failed");return o.stdout},A=async(w,_)=>(await O(w,_)).toString("utf8").trim(),S=async(w,_)=>{let P=b.join(w,".ara-local-gh-tmp");if(T.mkdirSync(P,{recursive:!0,mode:448}),T.lstatSync(P).isSymbolicLink()||T.realpathSync(P)!==P)I("local_device_gh_workspace_unavailable");J.assertCurrent();let g=await Z.command(...M(j(w,P),z9(z),["-c",'printf "%s\\n" "$1" > .git/shallow',"sh",_]),{cwd:w,maxBuffer:65536,timeout:Math.max(1,Math.min(25000,(J.deadlineMs??Date.now()+25000)-Date.now())),signal:J.signal,env:{...I1,PATH:c0,HOME:w,TMPDIR:P}});if(J.assertCurrent(),g.error||g.status!==0)I("local_device_gh_materialization_failed")},v=async(w)=>{let _=new Map;if(w.length===0)return _;let P=await O(m,["cat-file","--batch"],[...new Set(w)].join(`
-`)+`
-`,_0*8);for(let g=0;g<P.length;){let f=P.indexOf(10,g),[y,r,o]=P.subarray(g,f).toString("utf8").split(" ");if(f<0||!y||r!=="blob"||!/^[0-9]+$/.test(o??""))I("local_device_gh_object_invalid");_.set(y,P.subarray(f+1,f+1+Number(o)).toString("utf8")),g=f+1+Number(o)+1}return _},s=async(w,_,P)=>{let g=b.join(C,".ara-local-gh-tmp"),f=j(C,g)+`
-(allow file-read* file-write* (subpath ${JSON.stringify(C)}))
-(allow file-read* (subpath ${JSON.stringify(w)}))
-(allow file-read-metadata (path-ancestors ${JSON.stringify(w)}))`,y=async(o,j0)=>{J.assertCurrent();let p0=await Z.command(...M(f,o,j0),{cwd:C,maxBuffer:_0,timeout:Math.max(1,Math.min(25000,(J.deadlineMs??Date.now()+25000)-Date.now())),signal:J.signal,env:{...I1,PATH:c0,HOME:C,TMPDIR:g,GIT_INDEX_FILE:b.join(C,".git","index"),OPENSSL_CONF:"/dev/null",GIT_CONFIG_NOSYSTEM:"1",GIT_CONFIG_SYSTEM:"/dev/null",GIT_CONFIG_GLOBAL:"/dev/null",GIT_TERMINAL_PROMPT:"0",GIT_NO_REPLACE_OBJECTS:"1",GIT_LFS_SKIP_SMUDGE:"1"}});if(J.assertCurrent(),p0.error||p0.status!==0)I("local_device_gh_materialization_failed")},r=["--git-dir="+w,"--work-tree="+C,"-c","core.hooksPath=/dev/null","-c","core.fsmonitor=false","-c","credential.helper=","-c","http.extraheader=","-c","protocol.allow=never"];await y(z,[...r,"read-tree",_]),await y(z,[...r,"checkout-index","--all","--index"]),await O(C,["update-ref","refs/heads/"+P,_]),await O(C,["symbolic-ref","HEAD","refs/heads/"+P])};K="local_device_gh_prepare_metadata";let z0=await N(`/repos/${Q.repoFullName}`);if(z0.status!==200)I("local_device_gh_repository_unavailable");let C0=JSON.parse(z0.body);if(C0.full_name?.toLowerCase()!==Q.repoFullName.toLowerCase()||C0.default_branch!==Q.defaultBranch||Q.kind==="publish"&&C0.permissions?.push!==!0)I("local_device_gh_repository_authority_changed");if(Q.branch===Q.defaultBranch)I("local_device_gh_default_branch");K="local_device_gh_prepare_private_init";let m=T.mkdtempSync(b.join(W,"github-publication-"));T.chmodSync(m,448);let Y1=!1;try{if(await O(m,["init","--bare","--template="]),Q.kind==="prepare"){if(K="local_device_gh_prepare_fetch",await O(m,["fetch","--depth=1","--no-tags","--no-recurse-submodules",L,Q.baseSha]),await A(m,["rev-parse","FETCH_HEAD"])!==Q.baseSha)K="local_device_gh_prepare_base_mismatch",I("local_device_gh_base_changed");K="local_device_gh_prepare_checkout_validation";let u=b.join(C,".git"),Q0=!1;if(T.existsSync(u)){if(!T.lstatSync(u).isDirectory()||T.lstatSync(u).isSymbolicLink()||["objects/info/alternates","info/grafts"].some((c)=>T.existsSync(b.join(u,c))))I("local_device_gh_repository_layout_invalid");let i=await O(C,["rev-parse","--verify","-q","HEAD"]).then((c)=>c.toString("utf8").trim(),()=>null),K0=await O(C,["config","--local","--get","remote.origin.url"]).then((c)=>c.toString("utf8").trim(),()=>"");if(i!==null||K0){if(i!==Q.baseSha||await A(C,["branch","--show-current"])!==Q.branch)I("local_device_gh_checkout_exists");return{kind:"prepare",headSha:Q.baseSha}}Q0=!0}let t=T.readdirSync(C).filter((i)=>!(Q0&&i===".git")),U0=[".ara-local-gh-tmp",".reason-local-gh-tmp"];if(t.some((i)=>!U0.includes(i))||t.some((i)=>{let K0=b.join(C,i);return!T.lstatSync(K0).isDirectory()||T.lstatSync(K0).isSymbolicLink()||T.readdirSync(K0).length>0}))I("local_device_gh_checkout_not_empty");if(K="local_device_gh_prepare_checkout_init",!Q0)await O(C,["init","--template="]);K="local_device_gh_prepare_materialization";let F0=await O(m,["pack-objects","--stdout","--revs"],Q.baseSha+`
-`,U4);return await S(C,Q.baseSha),await O(C,["index-pack","--strict","--stdin"],F0,65536),await O(C,["remote","add","origin",L]),await s(m,Q.baseSha,Q.branch),{kind:"prepare",headSha:Q.baseSha}}let w=b.join(C,".git");if(!T.lstatSync(w).isDirectory()||T.lstatSync(w).isSymbolicLink()||["objects/info/alternates","info/grafts"].some((u)=>T.existsSync(b.join(w,u))))I("local_device_gh_repository_layout_invalid");if(await A(C,["branch","--show-current"])!==Q.branch)I("local_device_gh_branch_changed");let _=await A(C,["rev-parse","--verify","HEAD"]);if(!z2.test(_))I("local_device_gh_head_invalid");let P=await N(`/repos/${Q.repoFullName}/commits/${Q.baseSha}`);if(P.status!==200||JSON.parse(P.body).sha!==Q.baseSha)I("local_device_gh_base_unverified");let g=await N(`/repos/${Q.repoFullName}/git/ref/heads/${encodeURIComponent(Q.branch)}`);if(Q.remoteHeadSha===null?g.status!==404:g.status!==200||JSON.parse(g.body).object?.sha!==Q.remoteHeadSha)I("local_device_gh_remote_changed");let f=[...(await A(C,["rev-list","--objects","--no-object-names",_,"--not",Q.baseSha])).split(`
-`),...(await A(C,["rev-list","--objects","--no-object-names","--no-walk",Q.baseSha])).split(`
-`)].filter(Boolean);if(f.some((u)=>!z2.test(u)))I("local_device_gh_object_invalid");let y=await O(C,["pack-objects","--stdout"],[...new Set(f)].join(`
-`)+`
-`,U4);if(T.writeFileSync(b.join(m,"shallow"),Q.baseSha+`
-`,{flag:"wx",mode:384}),await O(m,["index-pack","--strict","--stdin"],y,65536),await O(m,["merge-base","--is-ancestor",Q.baseSha,_]),Q.remoteHeadSha)await O(m,["merge-base","--is-ancestor",Q.remoteHeadSha,_]);let r=await O(m,["show","-s","--format=%B",_]),o=(await O(m,["interpret-trailers","--parse"],r)).toString("utf8"),j0=Q.contributorTrailers?{expectedTrailers:Q.contributorTrailers,missingFromHead:N9(o,Q.contributorTrailers)}:void 0,p0=(await A(m,["rev-list","--objects","--no-object-names",_,"--not",Q.baseSha,...Q.remoteHeadSha?[Q.remoteHeadSha]:[]])).split(`
-`).filter(Boolean);if(p0.length>5000)I("local_device_gh_collection_too_large");let d0=[],v3=0;for(let u of p0){if(!z2.test(u))I("local_device_gh_object_invalid");let Q0=await A(m,["cat-file","-t",u]);if(!["blob","commit","tree"].includes(Q0))I("local_device_gh_object_invalid");let t=await O(m,["cat-file",Q0,u]);if(v3+=t.length,v3>_0)I("local_device_gh_collection_too_large");if(Q0==="tree"){let U0=0;while(U0<t.length){let F0=t.indexOf(32,U0),i=t.indexOf(0,F0+1);if(F0<U0||i<=F0||i+21>t.length)I("local_device_gh_object_invalid");let K0=t.subarray(F0+1,i).toString("utf8");if(K0.includes("/")||!W2(K0).valid)I("local_device_gh_object_invalid");U0=i+21}}d0.push({path:`object-${u}`,content:t.toString("utf8")})}let u3=J.secretNames?{secretNames:J.secretNames}:{},l0=O1(d0,J.forbiddenSecretValues,u3),p3=new Map;if(!l0.clean)try{let u=(await O(m,["diff","--no-renames","--no-abbrev","--raw","-z",Q.baseSha,_])).toString("utf8").split("\x00"),Q0=[],t=[];for(let c=0;c+1<u.length;c+=2){let[,d7,l7,B2,N1]=u[c].slice(1).match(/^([0-7]{6}) ([0-7]{6}) ([0-9a-f]{40}) ([0-9a-f]{40}) /)??[];if(!B2||!N1)continue;if(d7!=="160000"&&!/^0+$/.test(B2))Q0.push(B2);if(l7!=="160000"&&!/^0+$/.test(N1))t.push(N1),p3.set(`object-${N1}`,u[c+1])}let U0=await v([...Q0,...t]),F0=new Set(l0.violations.map((c)=>c.path)),i=V4(d0.filter((c)=>F0.has(c.path)),J.forbiddenSecretValues),K0=G4(i,t.map((c)=>U0.get(c)??""),Q0.map((c)=>U0.get(c)??""));if(K0.size>0)l0=O1(d0,J.forbiddenSecretValues,{...u3,published:K0})}catch{}if(!l0.clean)X4(l0.violations,(u)=>p3.get(u)??`an object in the pushed history (${u})`,"Remove it from the files and commit again; a commit or message in the pushed history that holds it must be amended before this branch can be pushed.");await O(m,["push","--no-recurse-submodules",L,`${_}:refs/heads/${Q.branch}`]);let d3=await N(`/repos/${Q.repoFullName}/git/ref/heads/${encodeURIComponent(Q.branch)}`);if(d3.status!==200||JSON.parse(d3.body).object?.sha!==_)I("local_device_gh_push_unconfirmed");return{kind:"publish",headSha:_,scannedObjectCount:d0.length,...j0?{attribution:j0}:{}}}catch(w){throw Y1=!0,w}finally{try{T.rmSync(m,{recursive:!0,force:!0})}catch(w){if(!Y1||Q.kind!=="prepare")throw K=null,w}}}catch(B){if(Q.kind==="prepare"&&Q.diagnosticsVersion===1&&K&&!J.signal?.aborted)throw new _1(K);throw B}}var P0=X.object({profile:X.string().regex(/^(Default|Profile [0-9]+)$/),extension_instance_id:X.string().min(1).max(1024)}).strict(),N2={ready:X.literal(!0),boot_generation:X.string().uuid(),proof_ready:X.literal(!1),result:X.literal("metadata_only")},j9=X.object({...N2,version:X.literal(2),development_only:X.literal(!1),image:X.literal(!0),video:X.literal(!1),source_bound:X.literal(!1),profiles:X.array(P0.shape.profile).min(1).max(16),extension_instance_ids:X.array(P0.shape.extension_instance_id.max(512)).min(1).max(16)}).strict().refine(($)=>new Set($.profiles).size===$.profiles.length&&$.profiles.length===$.extension_instance_ids.length),D9=X.object({...N2,version:X.literal(3),development_only:X.literal(!1),image:X.literal(!0),video:X.literal(!0),source_bound:X.literal(!1),max_seconds:X.literal(15),profiles:X.array(P0.shape.profile).min(1).max(16),extension_instance_ids:X.array(P0.shape.extension_instance_id.max(512)).min(1).max(16)}).strict().refine(($)=>new Set($.profiles).size===$.profiles.length&&$.profiles.length===$.extension_instance_ids.length),H2=X.union([j9,D9]),QK=X.union([X.object({...N2,version:X.literal(1),development_only:X.literal(!0),profile:P0.shape.profile,extension_instance_id:P0.shape.extension_instance_id,max_seconds:X.literal(15)}).strict(),H2]);import{createServer as w9,request as M9}from"http";import{connect as L9,isIP as O9}from"net";var M4=120000,I9=15000;function A9($,J,Z){let Q=j4(J).toLowerCase().replace(/\.$/,"");if(!Q||O9(Q))return!1;return $.some((K)=>{if(!w4.test(K))return!1;let B=K.lastIndexOf(":"),V=B>0?K.slice(0,B):K;if(B>0&&Number(K.slice(B+1))!==Z)return!1;return V.startsWith("*.")?Q.endsWith(V.slice(1)):Q===V})}function _9($,J){let Z=/^\[?([^\]]+?)\]?:([0-9]{1,5})$/.exec($),Q=Z?Z[1]:$,K=Z?Number(Z[2]):J;return Q&&K>=1&&K<=65535?{host:Q,port:K}:null}async function C2($,J,Z){if(!A9(Z,$,J))return null;let Q=await D4($);return Q.ok?Q.addresses[0]:null}function r0($,J){$.end(`HTTP/1.1 ${J} ${J===403?"Forbidden":"Bad Gateway"}\r
-Connection: close\r
-Content-Length: 0\r
-\r
-`)}function N4($,J){return new Promise((Z,Q)=>{let K=L9({host:$,port:J}),B=setTimeout(()=>K.destroy(Error("connect_timeout")),I9);K.once("connect",()=>{clearTimeout(B),Z(K)}),K.once("error",(V)=>{clearTimeout(B),Q(V)})})}function H4($,J,Z){for(let Q of[$,J])Q.on("error",()=>{$.destroy(),J.destroy()}),Q.on("close",()=>{$.destroy(),J.destroy()});if(J.setTimeout(M4,()=>J.destroy()),Z.length)J.write(Z);$.pipe(J).pipe($)}function C4($,J){let Z={...$,host:J};return delete Z["proxy-authorization"],delete Z["proxy-connection"],Z}async function L4($,J=()=>{}){let Z=[...$],Q=new Set,K=(U)=>{Q.add(U),U.once("close",()=>Q.delete(U))},B=w9((U,z)=>{(async()=>{let W;try{W=new URL(U.url??"")}catch{W=new URL("invalid:")}let G=Number(W.port||80),F=W.protocol==="http:"?await C2(W.hostname,G,Z):null;if(!F){J(),z.writeHead(403,{connection:"close"}).end();return}let Y=M9({host:F,port:G,method:U.method,path:`${W.pathname}${W.search}`,headers:C4(U.headers,W.host),agent:!1,timeout:M4},(N)=>{z.writeHead(N.statusCode??502,N.headers),N.pipe(z)});Y.on("timeout",()=>Y.destroy()),Y.on("error",()=>{if(!z.headersSent)z.writeHead(502);z.end()}),z.on("close",()=>Y.destroy()),U.pipe(Y)})().catch(()=>{if(!z.headersSent)z.writeHead(502);z.end()})});B.on("connection",K),B.on("connect",(U,z,W)=>{K(z),z.on("error",()=>z.destroy()),(async()=>{let G=_9(U.url??"",443),F=G?await C2(G.host,G.port,Z):null;if(!G||!F){J(),r0(z,403);return}let Y=await N4(F,G.port).catch(()=>null);if(!Y){r0(z,502);return}if(z.destroyed){Y.destroy();return}K(Y),z.write(`HTTP/1.1 200 Connection Established\r
-\r
-`),H4(z,Y,W)})().catch(()=>z.destroy())}),B.on("upgrade",(U,z,W)=>{K(z),z.on("error",()=>z.destroy()),(async()=>{let G;try{G=new URL(U.url??"")}catch{r0(z,403);return}let F=Number(G.port||80),Y=["http:","ws:"].includes(G.protocol)?await C2(G.hostname,F,Z):null;if(!Y){J(),r0(z,403);return}let N=await N4(Y,F).catch(()=>null);if(!N){r0(z,502);return}K(N);let C=C4(U.headers,G.host),L=[`${U.method} ${G.pathname}${G.search} HTTP/1.1`];for(let[D,j]of Object.entries(C))for(let M of Array.isArray(j)?j:j===void 0?[]:[j])L.push(`${D}: ${M}`);N.write(`${L.join(`\r
-`)}\r
-\r
-`),H4(z,N,W)})().catch(()=>z.destroy())}),await new Promise((U,z)=>{B.once("error",z),B.listen(0,"127.0.0.1",()=>U())});let{port:V}=B.address();return{url:`http://127.0.0.1:${V}`,close(){B.close();for(let U of Q)U.destroy()}}}import{createHash as P2,randomUUID as q9}from"crypto";import{closeSync as k1,constants as e,fchownSync as g9,fstatSync as w0,fsyncSync as E9,linkSync as S4,lstatSync as O2,mkdirSync as b4,openSync as g1,readSync as h4,realpathSync as I2,unlinkSync as f4,writeSync as k9}from"fs";import{isAbsolute as S9,join as b9,relative as f9,sep as y9}from"path";import{platform as A2}from"os";import{getSystemErrorName as x9}from"util";var O4={type:"string",format:"uuid"},P4=String.raw`^(?![\\/])(?![A-Za-z]:[\\/])(?!.*(?:^|[\\/])\.\.(?:[\\/]|$))(?!.*\u0000)(?=.*\S)[\s\S]+$`,P1={type:"string",minLength:1,maxLength:4096,pattern:P4},j2=X.string().min(1).max(4096).regex(new RegExp(P4)),T1={device_id:X.string().uuid(),root_id:X.string().uuid(),timeout_ms:X.number().int().min(1000).max(60000).optional()},R1={device_id:O4,root_id:O4,timeout_ms:{type:"integer",minimum:1000,maximum:60000}},zK={read:{schema:X.object({...T1,path:j2,offset:X.number().int().min(0).optional(),max_bytes:X.number().int().min(1).max(131072).optional()}).strict(),inputSchema:{type:"object",required:["device_id","root_id","path"],properties:{...R1,path:P1,offset:{type:"integer",minimum:0},max_bytes:{type:"integer",minimum:1,maximum:131072}},additionalProperties:!1}},write:{schema:X.object({...T1,path:j2,content:X.string().max(131072),mode:X.enum(["overwrite","append"]).optional(),create_parents:X.boolean().optional()}).strict(),inputSchema:{type:"object",required:["device_id","root_id","path","content"],properties:{...R1,path:P1,content:{type:"string",maxLength:131072},mode:{type:"string",enum:["overwrite","append"]},create_parents:{type:"boolean"}},additionalProperties:!1}},exec:{schema:X.object({...T1,command:X.string().min(1).max(16000),cwd:j2.optional(),mode:X.enum(["confined","host"]).optional()}).strict(),inputSchema:{type:"object",required:["device_id","root_id","command"],properties:{...R1,command:{type:"string",minLength:1,maxLength:16000},cwd:P1,mode:{type:"string",enum:["confined","host"],description:"Defaults to host: the existing permitted login shell with OS/account access, requiring execute and environment-discovery permission. Request confined explicitly for a scrubbed shell without network."}},additionalProperties:!1}}},X0=1073741824,a0=600000,I4=String.raw`(?!\.{1,2}(?:/|(?![\s\S])))[^/\\\u0000]+`,T4=String.raw`^(?![A-Za-z]:/)(?=[\s\S]*\S)${I4}(?:/${I4})*(?![\s\S])`,R4=new RegExp(T4);function q4($){return typeof $==="string"&&$.length>0&&$.length<=4096&&R4.test($)}var D2=X.string().min(1).max(4096).regex(R4),w2={...P1,pattern:T4},g4=X.string().regex(/^[a-f0-9]{64}$/),E4=X.object({kind:X.literal("workspace"),path:D2}).strict(),P9=X.discriminatedUnion("kind",[E4,X.object({kind:X.literal("attachment"),attachment_id:X.string().min(1).max(120),sha256:g4}).strict()]),q1=1,i0="cloud_workspace_id",M2="cloud_workspace",L2=1,T9=X.discriminatedUnion("kind",[E4,X.object({kind:X.literal("attachment"),download_url:X.string().min(1).max(16384),size_bytes:X.number().int().min(0).max(X0),sha256:g4}).strict()]),k4=X.object({source_version:X.literal(q1),source:T9,url:X.string().min(1).max(16384),transfer_cloud_scope:X.object({sandboxId:X.string().min(1).max(256),revision:X.number().int().nonnegative(),brainFence:X.string().uuid()}).strict().optional(),[i0]:X.string().min(1).max(160).optional()}).strict(),FK=X.object({ready:X.literal(!0),cloud_source_version:X.literal(q1),source_kinds:X.array(X.enum(["workspace","attachment"]))});var A4=X.object({...T1,timeout_ms:X.number().int().min(1000).max(a0).optional(),source_path:D2,destination_path:D2,idempotency_key:X.string().min(1).max(160).regex(/^[A-Za-z0-9._:-]+$/).optional()}).strict(),_4={type:"object",required:["device_id","root_id","source_path","destination_path"],properties:{...R1,timeout_ms:{type:"integer",minimum:1000,maximum:a0},source_path:w2,destination_path:w2,idempotency_key:{type:"string",minLength:1,maxLength:160,pattern:"^[A-Za-z0-9._:-]+$"}},additionalProperties:!1},R9={oneOf:[{type:"object",required:["kind","path"],properties:{kind:{type:"string",const:"workspace"},path:w2},additionalProperties:!1},{type:"object",required:["kind","attachment_id","sha256"],properties:{kind:{type:"string",const:"attachment"},attachment_id:{type:"string",minLength:1,maxLength:120},sha256:{type:"string",pattern:"^[a-f0-9]{64}$"}},additionalProperties:!1}]},YK=X.union([A4,A4.omit({source_path:!0}).extend({source:P9}).strict()]),NK={..._4,required:["device_id","root_id","destination_path"],properties:{..._4.properties,source:R9},oneOf:[{required:["source_path"],not:{required:["source"]}},{required:["source"],not:{required:["source_path"]}}]};var T2=65536;function p($){throw new H($,$)}function S1($){return typeof $==="object"&&$!==null&&"code"in $&&typeof $.code==="string"?$.code:void 0}function E1($,J,Z){if(J.throwIfAborted(),$ instanceof H||$ instanceof Error&&$.name==="AbortError")throw $;return p(Z)}function h9($,J,Z){let Q;switch(S1($)){case"ENOENT":Q=Z==="export"?"transfer_source_missing":"transfer_path_unavailable";break;case"EACCES":case"EPERM":case"EROFS":Q="transfer_permission_denied";break;case"ELOOP":case"ENOTDIR":Q="transfer_path_unsafe";break;case"EEXIST":Q="transfer_destination_exists";break;default:Q="transfer_path_unavailable"}return E1($,J,Q)}function m9($){if(typeof $!=="string"||$.length>16384)return p("transfer_url_invalid");let J;try{J=new URL($)}catch{return p("transfer_url_invalid")}if(J.protocol!=="https:"||J.username||J.password||J.hash)return p("transfer_url_invalid");return J.href}var _2=e.O_RDONLY|e.O_DIRECTORY|e.O_NOFOLLOW;async function v9(){if(A2()==="win32"){let W=new Map,G,F=-1,Y=()=>Object.assign(Error("transfer_path_unsafe"),{code:"ELOOP"}),N=(j)=>{let M=f9(G,j);return M===""||M!==".."&&!M.startsWith(`..${y9}`)&&!S9(M)},C=(j)=>{let M=O2(j);if(M.isSymbolicLink())throw Y();if(!M.isDirectory())throw Object.assign(Error("transfer_path_unsafe"),{code:"ENOTDIR"});let O=I2(j);if(G??=O,!N(O))throw Y();return W.set(F,{path:j,real:O}),F--},L=(j)=>{let M=W.get(j);if(I2(M.path)!==M.real)throw Y();return M.path},D=(j,M)=>{if(b1(M))throw Object.assign(Error("transfer_path_invalid"),{code:"ENOTDIR"});return b9(W.get(j).path,M)};return{root:C,openDirectory:(j,M)=>C(D(j,M)),open:(j,M,O,A=384)=>{let S=D(j,M);if(O2(S,{throwIfNoEntry:!1})?.isSymbolicLink())throw Y();L(j);let v=g1(S,O,A);try{let s=w0(v),z0=O2(S);if(z0.isSymbolicLink()||s.ino!==z0.ino||s.dev!==z0.dev||!N(I2(S)))throw Y()}catch(s){throw k1(v),s}return v},mkdir:(j,M)=>{let O=D(j,M);L(j),b4(O)},link:(j,M,O)=>{let A=D(j,M),S=D(j,O);L(j),S4(A,S)},unlink:(j,M)=>f4(D(j,M)),closeDirectory:(j)=>{W.delete(j)},inherit:()=>{},close:()=>{}}}let $={root:(W)=>g1(W,_2),closeDirectory:k1,inherit:u9};if(A2()==="linux")return{...$,openDirectory:(W,G)=>g1(`/proc/self/fd/${W}/${G}`,_2),open:(W,G,F,Y=384)=>g1(`/proc/self/fd/${W}/${G}`,F,Y),mkdir:(W,G)=>b4(`/proc/self/fd/${W}/${G}`,{mode:448}),link:(W,G,F)=>S4(`/proc/self/fd/${W}/${G}`,`/proc/self/fd/${W}/${F}`),unlink:(W,G)=>f4(`/proc/self/fd/${W}/${G}`),close:()=>{}};if(A2()!=="darwin")return p("transfer_platform_unsupported");let{dlopen:J,FFIType:Z,ptr:Q,read:K}=await import("bun:ffi"),B=J("/usr/lib/libSystem.B.dylib",{__error:{args:[],returns:Z.ptr},openat:{args:[Z.i32,Z.ptr,Z.i32,Z.i32,Z.i32,Z.i32,Z.i32,Z.i32,Z.i32],returns:Z.i32},mkdirat:{args:[Z.i32,Z.ptr,Z.i32],returns:Z.i32},linkat:{args:[Z.i32,Z.ptr,Z.i32,Z.ptr,Z.i32],returns:Z.i32},unlinkat:{args:[Z.i32,Z.ptr,Z.i32],returns:Z.i32}}),V=B.symbols.__error();if(V===null)return B.close(),p("transfer_path_unavailable");let U=(W)=>{if(W<0){let G=x9(-K.i32(V));throw Object.assign(Error("transfer_path_unavailable"),{code:G})}return W},z=(W,G,F,Y=384)=>U(B.symbols.openat(W,Q(Buffer.from(`${G}\x00`)),F,Y,0,0,0,0,Y));return{...$,openDirectory:(W,G)=>z(W,G,_2),open:z,mkdir:(W,G)=>{U(B.symbols.mkdirat(W,Q(Buffer.from(`${G}\x00`)),448))},link:(W,G,F)=>{U(B.symbols.linkat(W,Q(Buffer.from(`${G}\x00`)),W,Q(Buffer.from(`${F}\x00`)),0))},unlink:(W,G)=>{U(B.symbols.unlinkat(W,Q(Buffer.from(`${G}\x00`)),0))},close:()=>B.close()}}function u9($,J){let Z=w0($),Q=w0(J);if(Q.uid!==Z.uid||Q.gid!==Z.gid)g9(J,Z.uid,Z.gid)}function p9($,J,Z,Q){if(!q4(Z))return p("transfer_path_invalid");let K=Z.split("/"),B=$.root(J);try{for(let V of K.slice(0,-1)){let U;try{U=$.openDirectory(B,V)}catch(z){if(!Q||S1(z)!=="ENOENT")throw z;try{$.mkdir(B,V)}catch(W){if(S1(W)!=="EEXIST")throw W}U=$.openDirectory(B,V),$.inherit(B,U)}$.closeDirectory(B),B=U}return{fd:B,leaf:K.at(-1)}}catch(V){throw $.closeDirectory(B),V}}function y4($,J){let Z=w0($,{bigint:!0});if(!Z.isFile()||Z.size>X0)return p("transfer_file_invalid");let Q=P2("sha256"),K=Buffer.alloc(T2),B=0;while(!0){J.throwIfAborted();let U=h4($,K,0,K.length,B);if(!U)break;if(B+=U,B>X0)return p("transfer_size_exceeded");Q.update(K.subarray(0,U))}let V=w0($,{bigint:!0});if(BigInt(B)!==Z.size||V.size!==Z.size||V.mtimeNs!==Z.mtimeNs||V.ctimeNs!==Z.ctimeNs)return p("transfer_source_changed");return{size_bytes:B,sha256:Q.digest("hex")}}async function T0($){$.signal.throwIfAborted();try{let J=m9($.payload.url),Z=await v9(),Q,K,B;try{if(Q=p9(Z,$.root,$.path,$.direction==="import"),$.direction==="export"){K=Z.open(Q.fd,Q.leaf,e.O_RDONLY|e.O_NOFOLLOW|e.O_NONBLOCK);let Y=w0(K,{bigint:!0});if(!Y.isFile()||Y.size>X0)return p("transfer_file_invalid");let N=P2("sha256"),C=0,L=K,D,j=new ReadableStream({pull(S){try{$.signal.throwIfAborted();let v=Buffer.alloc(T2),s=h4(L,v,0,v.length,C);if(!s){S.close();return}if(C+=s,C>Y.size)return p("transfer_source_changed");N.update(v.subarray(0,s)),S.enqueue(v.subarray(0,s))}catch(v){throw D=v,v}}});try{let S=await($.fetchImpl??fetch)(J,Object.assign({method:"PUT",body:j,redirect:"error",signal:$.signal,headers:{"content-type":"application/octet-stream","content-length":String(Y.size)}},{duplex:"half"}));if(D!==void 0)throw D;if(!S.ok)return p("transfer_upload_failed");await S.body?.cancel()}catch(S){if(D!==void 0)throw D;return E1(S,$.signal,"transfer_upload_failed")}let M=w0(K,{bigint:!0});if(BigInt(C)!==Y.size||M.size!==Y.size||M.mtimeNs!==Y.mtimeNs||M.ctimeNs!==Y.ctimeNs)return p("transfer_source_changed");let O=N.digest("hex"),A=y4(K,$.signal);if(A.size_bytes!==C||A.sha256!==O)return p("transfer_source_changed");return{size_bytes:C,sha256:O,outcome:"copied"}}let V=$.payload.size_bytes,U=$.payload.sha256;if(typeof V!=="number"||!Number.isSafeInteger(V)||V<0||V>X0||typeof U!=="string"||!/^[a-f0-9]{64}$/.test(U))return p("transfer_receipt_invalid");let z;try{z=Z.open(Q.fd,Q.leaf,e.O_RDONLY|e.O_NOFOLLOW|e.O_NONBLOCK)}catch(Y){if(S1(Y)!=="ENOENT")throw Y}if(z!==void 0){try{let Y=y4(z,$.signal);if(Y.size_bytes===V&&Y.sha256===U)return{...Y,outcome:"already_present"}}finally{k1(z)}return p("transfer_destination_exists")}B=`.reason-copy-${q9()}`,K=Z.open(Q.fd,B,e.O_CREAT|e.O_EXCL|e.O_WRONLY|e.O_NOFOLLOW,384),Z.inherit(Q.fd,K);let W;try{let Y=await($.fetchImpl??fetch)(J,{redirect:"error",signal:$.signal});if(!Y.ok||!Y.body)return p("transfer_download_failed");W=Y.body.getReader()}catch(Y){return E1(Y,$.signal,"transfer_download_failed")}let G=P2("sha256"),F=0;try{while(!0){$.signal.throwIfAborted();let Y=await W.read().catch((N)=>E1(N,$.signal,"transfer_download_failed"));if(Y.done)break;if(F+=Y.value.length,F>V)return p("transfer_size_mismatch");G.update(Y.value);for(let N=0;N<Y.value.length;)$.signal.throwIfAborted(),N+=k9(K,Y.value,N,Math.min(T2,Y.value.length-N))}}finally{await W.cancel().catch(()=>{})}if(F!==V||G.digest("hex")!==U)return p("transfer_hash_mismatch");return E9(K),await $.beforeCommit?.(),$.signal.throwIfAborted(),Z.link(Q.fd,B,Q.leaf),{size_bytes:V,sha256:U,outcome:"copied"}}finally{try{if(K!==void 0)k1(K)}finally{try{if(Q){if(B)try{Z.unlink(Q.fd,B)}catch{}Z.closeDirectory(Q.fd)}}finally{Z.close()}}}}catch(J){return h9(J,$.signal,$.direction)}}import{spawn as l9}from"child_process";import{mkdtempSync as s9,rmSync as c9,writeFileSync as n9}from"fs";import{constants as r9,platform as a9,tmpdir as i9}from"os";import{join as p4}from"path";import{gunzipSync as d9,gzipSync as PK}from"zlib";var v4=900000,RK=v4+60000,o0=49152,m4=($)=>X.string().min(1).max($).regex(/^[A-Za-z0-9+/]+=*$/),u4=X.object({version:X.literal(1),script_gzip:m4(163840),stdin_gzip:m4(65536),cwd:X.string().min(1).max(4096).startsWith("/"),env:X.record(X.string().regex(/^[A-Z_][A-Z0-9_]{0,63}$/),X.string().max(4096)).refine(($)=>Object.keys($).length<=16,"too many variables"),timeout_ms:X.number().int().min(1000).max(v4)}).strict(),R2=X.string().max(o0+256),qK=X.object({exit_code:X.number().int().min(0).max(255),stdout:R2,stderr:R2,combined:R2.optional()}).strict();function q2($){return d9(Buffer.from($,"base64")).toString("utf8")}var o9="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",t9=["RUSTUP_HOME","TZ","LC_ALL"],e9=2000,$$=100;function E2(){return a9()==="linux"&&process.geteuid?.()===0}function g2($){let J=Math.floor($/2),Z=[],Q=0,K=Buffer.alloc(0),B=0;return{push(V){B+=V.length;let U=V;if(Q<J){let z=U.subarray(0,J-Q);Z.push(z),Q+=z.length,U=U.subarray(z.length)}if(U.length)K=Buffer.concat([K,U]).subarray(-J)},text(){let V=B-Q-K.length;return Buffer.concat(Z).toString("utf8")+(V>0?`
-[reason: ${V} bytes of output omitted]
-`:"")+K.toString("utf8")}}}async function d4($,J){if(!E2())throw new H("workspace_setup_requires_root","Workspace setup runs only on a root Linux worker.");let Z=u4.safeParse($);if(!Z.success)throw new H("invalid_request","Reason sent an invalid workspace setup.");let Q=Z.data,K,B;try{K=q2(Q.script_gzip),B=q2(Q.stdin_gzip)}catch{throw new H("invalid_request","Reason sent an unreadable workspace setup.")}J.throwIfAborted();let V=s9(p4(i9(),"reason-workspace-setup-"));try{let U=p4(V,"setup.sh");n9(U,K,{mode:384});let z={PATH:o9,LANG:"C.UTF-8",HOME:"/root",USER:"root",LOGNAME:"root",SHELL:"/bin/bash",TMPDIR:"/tmp"};for(let A of t9)if(process.env[A])z[A]=process.env[A];Object.assign(z,Q.env);let W=l9("/bin/bash",[U],{cwd:Q.cwd,env:z,detached:!0,stdio:["pipe","pipe","pipe"]}),G=g2(o0),F=g2(o0),Y=g2(o0);W.stdout.on("data",(A)=>{G.push(A),Y.push(A)}),W.stderr.on("data",(A)=>{F.push(A),Y.push(A)}),W.stdin.on("error",()=>{}),W.stdin.end(B);let N=(A)=>{try{if(W.pid)process.kill(-W.pid,A)}catch{}},C=!1,L,D=()=>{N("SIGTERM"),L??=setTimeout(()=>N("SIGKILL"),e9)},j=setTimeout(()=>{C=!0,D()},Q.timeout_ms);J.addEventListener("abort",D,{once:!0});let M=await new Promise((A,S)=>{W.once("error",()=>S(new H("workspace_setup_start_failed","The workspace setup did not start."))),W.once("exit",(v,s)=>A({code:v,signal:s}))}).finally(()=>{clearTimeout(j),clearTimeout(L),J.removeEventListener("abort",D)});await new Promise((A)=>{let S=setTimeout(A,$$);W.once("close",()=>{clearTimeout(S),A()})}),W.stdout.destroy(),W.stderr.destroy(),J.throwIfAborted();let O=C?124:M.signal?128+(r9.signals[M.signal]??0):M.code??1;return{exit_code:Math.min(255,O),stdout:G.text(),stderr:F.text(),...O!==0?{combined:Y.text()}:{}}}finally{c9(V,{recursive:!0,force:!0})}}import{chmodSync as J$,mkdtempSync as Z$,realpathSync as n4,rmSync as Q$}from"fs";import{tmpdir as K$}from"os";import{dirname as B$,join as k2,sep as V$}from"path";function S2($){return c4($,s4($)!==null).repoPath}function r4($,J){let Z;try{if(typeof J!=="string")throw Error("invalid");Z=[t0,void 0].map((K)=>B$(l4({kind:"managed",workspaceId:J,...K?{layout:K}:{}})))}catch{throw new H("cloud_copy_workspace_invalid","The Cloud copy workspace is invalid.")}let Q;for(let K of Z)try{Q=n4(k2($,K));break}catch{}if(Q===void 0)throw new H("cloud_copy_workspace_unavailable","The Session workspace is not on this computer.");if(!Q.startsWith(`${$}${V$}`))throw new H("cloud_copy_workspace_invalid","The Cloud copy workspace is outside this worker's root.");return Q}async function a4($){$.signal.throwIfAborted();let J=$.source;if(J.kind==="workspace"){let Q=S2($.runtimeRoot);if(R0(Q)||R0(k2(Q,J.path)))throw new H("protected_path","Credential and secret paths are unavailable to local tasks.");return T0({direction:"export",root:Q,path:J.path,payload:{url:$.url},signal:$.signal,fetchImpl:$.fetchImpl})}let Z=Z$(k2(K$(),`reason-cloud-copy-${process.pid}-`));try{J$(Z,448);let Q=n4(Z);await T0({direction:"import",root:Q,path:"source",payload:{url:J.download_url,size_bytes:J.size_bytes,sha256:J.sha256},signal:$.signal,fetchImpl:$.fetchImpl});let K=await T0({direction:"export",root:Q,path:"source",payload:{url:$.url},signal:$.signal,fetchImpl:$.fetchImpl});if(K.size_bytes!==J.size_bytes||K.sha256!==J.sha256)throw new H("transfer_source_changed","The verified attachment changed before export.");return K}finally{Q$(Z,{recursive:!0,force:!0})}}import{constants as Z0}from"fs";import{closeSync as A7,existsSync as G0,fstatSync as _7,ftruncateSync as uZ,lstatSync as R3,mkdirSync as pZ,mkdtempSync as dZ,openSync as P7,readSync as lZ,realpathSync as B0,rmSync as sZ,statSync as F1,writeSync as cZ}from"fs";import{homedir as U1,platform as R,tmpdir as nZ}from"os";import{dirname as X1,isAbsolute as rZ,join as T7,relative as q3,resolve as aZ,sep as iZ}from"path";import{spawn as oZ}from"child_process";import{createHash as z$,randomBytes as F$}from"crypto";var b2=30000,G$=1800000,U$=5000,f1=30000,X$=x1+15000,i4=/^\/app\/local-runtime\/operations\/[0-9a-fA-F-]{36}\/heartbeat$/,W$=[/^\/app\/local-runtime\/operations\/claim$/,i4];class f2{options;current=null;connecting=null;retryAt=0;failures=0;nextId=0;closed=!1;reconnectTimer=null;constructor($){this.options=$}now(){return(this.options.now??Date.now)()}jitter($){return Math.floor((this.options.random??Math.random)()*$)}async request($,J,Z){Z?.throwIfAborted();let Q=this.current;if(!Q)return this.connect(),null;if(Q.pending.size>=Q.maxInFlight)return null;let K=String(++this.nextId),B=new Promise((z)=>Q.pending.set(K,{path:$,resolve:z}));if(!this.send(Q,{t:"req",id:K,path:$,body:J}))return Q.pending.delete(K),null;let V;if(W$.some((z)=>z.test($)))V=setTimeout(()=>{if(Q.pending.has(K))this.drop(Q)},X$);else{let z=()=>{if(!Q.pending.has(K))return;let W=this.now()-Q.lastFrameAt;if(W>=f1)this.drop(Q);else V=setTimeout(z,f1-W)};V=setTimeout(z,f1)}if(B.finally(()=>clearTimeout(V)),!Z)return await B;let U=new Promise((z,W)=>{let G=()=>{if(Q.pending.delete(K),clearTimeout(V),this.send(Q,{t:"abort",id:K}),this.now()-Q.lastFrameAt>f1)this.drop(Q);W(Z.reason)};if(Z.aborted)G();else Z.addEventListener("abort",G,{once:!0}),B.finally(()=>Z.removeEventListener("abort",G))});return await Promise.race([B,U])}cadence(){return this.current?.cadence??null}close(){if(this.closed=!0,this.reconnectTimer)clearTimeout(this.reconnectTimer);for(let $ of[this.current,this.connecting])if($)this.drop($)}send($,J){try{return $.socket.send(JSON.stringify(J)),!0}catch{return this.drop($),!1}}drop($){if($.dropped)return;$.dropped=!0,this.settle($);try{$.socket.close()}catch{}}settle($){for(let J of $.pending.values())J.resolve(null);if($.pending.clear(),this.current===$)this.current=null,this.retryAt=Math.max(this.retryAt,this.now()+this.jitter(U$));if(this.connecting===$){this.connecting=null,this.failures+=1;let J=Math.min(G$,b2*2**Math.min(this.failures-1,10));this.retryAt=Math.max(this.retryAt,this.now()+J/2+this.jitter(J/2))}}connect(){if(this.closed||this.connecting||this.now()<this.retryAt)return;let $=this.options.WebSocket??globalThis.WebSocket;if(!$){this.retryAt=Number.POSITIVE_INFINITY;return}let J=new URL(y1,this.options.apiOrigin);J.protocol=J.protocol==="https:"?"wss:":"ws:",J.searchParams.set("device_id",this.options.deviceId);let Z;try{Z=new $(J.toString())}catch{this.failures+=1,this.retryAt=this.now()+b2;return}let Q={socket:Z,pending:new Map,maxInFlight:0,cadence:null,lastFrameAt:this.now(),dropped:!1};this.connecting=Q,Z.onmessage=(K)=>this.receive(Q,K.data),Z.onclose=()=>this.settle(Q),Z.onerror=()=>this.settle(Q)}receive($,J){if(typeof J!=="string")return;let Z;try{Z=JSON.parse(J)}catch{return}if($.lastFrameAt=this.now(),Z.t==="res"){let Q=$.pending.get(Z.id);$.pending.delete(Z.id),Q?.resolve({status:Z.status,body:Z.body,retryAfter:Z.retry_after??null});return}if(Z.t==="challenge"&&this.connecting===$){let Q;try{Q=this.options.signHello(Z.challenge)}catch{this.drop($);return}this.send($,{t:"hello",...Q});return}if(Z.t==="ready"&&this.connecting===$){this.connecting=null,this.failures=0,$.maxInFlight=Math.max(1,Math.min(Z.max_in_flight,1000)),$.cadence=Z.cadence??null;let Q=this.current;if(this.current=$,Q){for(let[K,B]of Q.pending){if(!i4.test(B.path))continue;Q.pending.delete(K),this.send(Q,{t:"abort",id:K}),B.resolve(null)}if(Q.pending.size===0)this.drop(Q)}return}if(Z.t==="fallback"){this.retryAt=this.now()+Math.max(b2,Math.min(Z.retry_after_ms,86400000)),this.drop($);return}if(Z.t==="reconnect"&&this.current===$&&!this.reconnectTimer)this.reconnectTimer=setTimeout(()=>{this.reconnectTimer=null,this.retryAt=0,this.connect()},Math.max(0,Math.min(Z.after_ms,60000)))}}var x2=["fs.read","fs.write","fs.export","fs.import","exec.run","exec.full","process.run.v1","process.full.v1","preview.serve.v1","pty.start","git.run","process.list","ports.list","computer.use","browser.use","browser.recording.v1","browser.pr-proof.v1","hands.connect","jobs.control","environment.install","github.local.v1","inference.custom.v1","display.stream.v1","automation.call.v1","simulator.call.v1","simulator.stream.v1","tunnel.open","tunnel.close","workspace.setup.v1"];function JB($,J={}){let Z=Y$($),Q=J.rootPathsSupported===!0?j1($.root_paths):void 0;return{supported_operations:[...$.supported_operations],...J.accountRootMetadataSupported===!0&&typeof $.account_root_fingerprint==="string"&&/^[a-f0-9]{64}$/.test($.account_root_fingerprint)?{account_root_fingerprint:$.account_root_fingerprint}:{},...J.workspaceRootMetadataSupported===!0&&typeof $.workspace_root_fingerprint==="string"&&/^[a-f0-9]{64}$/.test($.workspace_root_fingerprint)?{workspace_root_fingerprint:$.workspace_root_fingerprint}:{},...J.accountRootPathSupported===!0&&typeof $.account_root_path==="string"&&$.account_root_path.startsWith("/")&&$.account_root_path.length<=4096?{account_root_path:$.account_root_path}:{},...J.homeContainedRootsSupported===!0&&Array.isArray($.home_contained_root_fingerprints)&&$.home_contained_root_fingerprints.length<=32&&$.home_contained_root_fingerprints.every((K)=>/^[a-f0-9]{64}$/.test(K))?{home_contained_root_fingerprints:[...$.home_contained_root_fingerprints]}:{},...Q?{root_paths:Q}:{},...Object.keys(Z).length?{operation_constraints:Z}:{},...$.hands_worker_artifact_sha256&&$.hands_worker_entrypoint?{hands_worker_artifact_sha256:$.hands_worker_artifact_sha256,hands_worker_entrypoint:$.hands_worker_entrypoint}:{},...$.hands_slots!==void 0?{hands_slots:$.hands_slots}:{}}}function Y$($){let J=(Q)=>Q===null||typeof Q==="boolean"||typeof Q==="number"&&Number.isFinite(Q)||typeof Q==="string"&&Q.length<=512,Z={};for(let Q of $.supported_operations){let K=$.operation_constraints?.[Q];if(!K||typeof K!=="object"||Array.isArray(K))continue;if(!("ready"in K)||typeof K.ready!=="boolean")continue;let B={};for(let[V,U]of Object.entries(K).slice(0,32)){if(!V.length||V.length>64||["__proto__","constructor","prototype"].includes(V))continue;if(J(U)||Array.isArray(U)&&U.length<=64&&U.every(J))B[V]=U}if(Object.keys(B).length)Z[Q]=B}return Z}class W0 extends Error{status;code;retryAfter;constructor($,J,Z,Q=null){super(Z);this.status=$;this.code=J;this.retryAfter=Q;this.name="LocalRuntimeHttpError"}}class h1 extends Error{timeoutMs;constructor($){super(`Reason Device request did not answer within ${$}ms.`);this.timeoutMs=$;this.name="LocalRuntimeRequestTimeoutError"}}function N$($){return $===408||$===429||$===500||$===502||$===503||$===504}function H$($){if($ instanceof W0)return!1;if($ instanceof h1)return!0;if(!($ instanceof Error))return!1;if($.name==="AbortError")return!1;if($ instanceof TypeError&&$.message.toLowerCase().includes("fetch failed"))return!0;for(let J of[$,$.cause])if(J&&typeof J==="object"&&"code"in J){let Z=String(J.code);if(["ECONNRESET","ECONNREFUSED","ETIMEDOUT","EHOSTUNREACH","ENOTFOUND","EAI_AGAIN","ConnectionClosed","ConnectionRefused","UND_ERR_SOCKET","UND_ERR_CONNECT_TIMEOUT"].includes(Z))return!0}return!1}function C$($,J,Z=500){if(J instanceof W0&&J.retryAfter){let B=parseFloat(J.retryAfter);if(Number.isFinite(B)&&B>0)return Math.min(B*1000,1e4)}let Q=Z*2**$,K=Math.floor(Math.random()*200);return Math.min(Q+K,5000)}async function j$($,J){if(J?.aborted)throw J.reason??new DOMException("The operation was aborted.","AbortError");await new Promise((Z,Q)=>{let K=()=>{clearTimeout(B),Q(J?.reason??new DOMException("The operation was aborted.","AbortError"))},B=setTimeout(()=>{J?.removeEventListener("abort",K),Z()},$);J?.addEventListener("abort",K,{once:!0})})}function ZB($){return $ instanceof W0&&$.status===401&&($.code==="device_revoked"||$.code==="invalid_device_credential")}function o4($){return Buffer.byteLength(JSON.stringify($)??"null","utf8")}function t4($){return z$("sha256").update($??"").digest("hex")}function D$($){return Q8({method:$.method,pathAndQuery:$.route,timestamp:$.timestamp,nonce:$.nonce,challenge:$.challenge,bodySha256:$.bodySha256})}function e4($){return Boolean($)&&typeof $==="object"&&!Array.isArray($)}var w$=20000,M$=1e4,$8=[2000,4000],L$=30000,O$=15000;function J8($){return $?{keepalive:!1}:{}}class y2 extends Error{constructor($){super(`Reason Device proof challenge did not answer within ${$}ms.`)}}class I${fetchImpl;proofStore;proofOptions;apiOrigin;spareChallenge=null;sessions=new Map;sessionsClosed=!1;constructor($,J=fetch,Z,Q={}){this.fetchImpl=J;this.proofStore=Z;this.proofOptions=Q;let K=new URL($);if(K.protocol!=="https:"&&K.hostname!=="127.0.0.1"&&K.hostname!=="localhost"&&K.hostname!=="[::1]"&&K.hostname!=="::1")throw Error("Reason Device API must use HTTPS, except for localhost development.");this.apiOrigin=K.origin}async parseResponse($){if($.status===204)return null;let J=await $.json().catch(()=>({}));if(!$.ok){let{code:Z,message:Q}=K8(J,$.status),K=$.headers?.get?.("retry-after")??null;throw new W0($.status,Z,Q,K)}return J}async challenge($,J,Z={fresh:!1}){let Q=this.proofOptions.challengeAttemptTimeoutsMs??$8;for(let K of Q)try{return await this.challengeAttempt($,J,K,Z.fresh)}catch(B){if(J?.aborted||!(B instanceof y2))throw B;Z.fresh=!0}return await this.challengeAttempt($,J,null,Z.fresh)}async challengeAttempt($,J,Z,Q=!1){let K=JSON.stringify({device_id:$}),B=Z===null?null:new AbortController,V=B&&Z!==null?setTimeout(()=>B.abort(new y2(Z)),Z):null;try{let U=await this.fetchImpl(`${this.apiOrigin}${d.authChallenge.path}`,{method:"POST",redirect:"error",headers:{accept:"application/json","content-type":"application/json"},body:K,...J8(Q),signal:B?J?AbortSignal.any([J,B.signal]):B.signal:J});return B8(await this.parseResponse(U))}catch(U){if(!J?.aborted&&B?.signal.aborted)throw B.signal.reason;throw U}finally{if(V)clearTimeout(V)}}async takeSpareChallenge($){let J=this.spareChallenge;if(this.spareChallenge=null,!J||J.deviceId!==$)return null;let Z=await J.challenge,Q=(this.proofOptions.now??Date.now)();return Z&&Date.parse(Z.expires_at)-Q>=w$?Z:null}refillSpareChallenge($){let J=this.challengeAttempt($,void 0,$8[0]??2000).catch(()=>null);this.spareChallenge={deviceId:$,challenge:J}}async proofHeaders($,J,Z,Q,K=!1,B,V){let U=B&&Date.parse(B.expires_at)-(this.proofOptions.now??Date.now)()>=M$?B:null,z=!U&&K?await this.takeSpareChallenge(Z.deviceId):null,W=U??z??await this.challenge(Z.deviceId,Q,V);if(K)this.refillSpareChallenge(Z.deviceId);let G=t4(J),F=this.signProof("POST",$,W.challenge,G);return{"x-device-id":Z.deviceId,"x-device-timestamp":F.timestamp,"x-device-nonce":F.nonce,"x-device-challenge":W.challenge,"x-device-body-sha256":G,"x-device-signature":F.signature}}signProof($,J,Z,Q){let K=String(Math.trunc((this.proofOptions.now??Date.now)())),B=(this.proofOptions.nonce??(()=>F$(24)))();if(B.byteLength<16||B.byteLength>32)throw Error("Invalid Reason Device proof nonce.");let V=Buffer.from(B).toString("base64url"),U=this.proofStore.sign(D$({method:$,route:J,timestamp:K,nonce:V,challenge:Z,bodySha256:Q}));if(!/^[A-Za-z0-9_-]{8,128}$/.test(U))throw Error("Reason Device proof boundary returned an invalid signature.");return{timestamp:K,nonce:V,signature:U}}sessionFor($,J){if(!this.proofOptions.deviceSession||this.sessionsClosed||!J||!Z8($.path))return null;let Z=this.sessions.get(J.deviceId);if(!Z)Z=new f2({apiOrigin:this.apiOrigin,deviceId:J.deviceId,signHello:(Q)=>this.signProof("GET",y1,Q,t4("")),...this.proofOptions.webSocket?{WebSocket:this.proofOptions.webSocket}:{},...this.proofOptions.now?{now:this.proofOptions.now}:{}}),this.sessions.set(J.deviceId,Z);return Z}sessionCadence($){let J=this.proofOptions.deviceSession&&!this.sessionsClosed?this.sessions.get($.deviceId)?.cadence()??null:null;return J?{presenceIntervalMs:J.presence_interval_ms,claimWaitMs:J.claim_wait_ms}:null}close(){this.sessionsClosed=!0;for(let $ of this.sessions.values())$.close();this.sessions.clear()}async request($,J){if(J.body!==void 0&&o4(J.body)>Y0)throw Error("Reason Device request exceeds the 256 KB protocol limit.");if(J.authorization!==void 0&&J.device!==void 0)throw Error("Reason Device request cannot combine bearer and proof authentication.");let Z=J.authorization!==void 0,Q=J.device!==void 0;if(!($.auth==="none"?!Z&&!Q:$.auth==="registration_bearer"?Z&&!Q:Z!==Q))throw Error(`Reason Device request used invalid authentication for ${$.path}.`);let B=J.body===void 0?void 0:JSON.stringify(J.body),V=this.proofOptions.maxAttempts??4,U=this.proofOptions.sleep??j$,z=this.sessionFor($,J.device),W=Math.max(L$,(J.holdMs??0)+O$),G={fresh:!1},F;for(let Y=0;Y<V;Y+=1)try{let N=await z?.request($.path,J.sessionBody===void 0?B??"":JSON.stringify(J.sessionBody),J.signal)??null;if(N)return await this.parseResponse(new Response(N.status===204?null:N.body,{status:N.status,headers:N.retryAfter===null?{}:{"retry-after":N.retryAfter}}));let C=new AbortController,L=setTimeout(()=>C.abort(new h1(W)),W),D=J.signal?AbortSignal.any([J.signal,C.signal]):C.signal;try{let j=J.device===void 0?{}:await this.proofHeaders($.path,B,J.device,D,J.useSpareChallenge===!0&&Y===0,Y===0?J.issuedChallenge:void 0,G),M=await this.fetchImpl(`${this.apiOrigin}${$.path}`,{method:"POST",redirect:"error",headers:{...J.authorization===void 0?{}:{authorization:`Bearer ${J.authorization}`},...j,accept:"application/json",...J.body===void 0?{}:{"content-type":"application/json"}},body:B,...J8(G.fresh),signal:D});return await this.parseResponse(M)}catch(j){if(!J.signal?.aborted&&C.signal.aborted)throw C.signal.reason;throw j}finally{clearTimeout(L)}}catch(N){if(F=N,N instanceof h1)G.fresh=!0;if(J.signal?.aborted)throw N;let C=J.device!==void 0&&N instanceof W0&&N.status===401&&["invalid_device_proof","device_proof_replayed"].includes(N.code),L=N instanceof W0&&N$(N.status),D=H$(N),j=J.transientRetryOwner!=="caller"&&(L||D);if((C||j)&&Y+1<V){let M=C?0:C$(Y,N,this.proofOptions.retryBaseDelayMs??500);if(M>0)await U(M,J.signal);continue}if(C&&Y+1>=V)throw Error("Reason Device proof retry was exhausted.");throw N}throw F??Error("Reason Device request failed.")}async register($,J,Z){let Q=await this.request(d.register,{authorization:$,body:J,signal:Z});return V8(Q)}async enroll($,J,Z,Q){let K=await this.request(d.enroll,{body:{...Z,enrollment_ticket:$,code_verifier:J},signal:Q});return G8(K)}async heartbeat($,J,Z,Q){let K=await this.request(d.heartbeat,{device:$,body:J,signal:Z,...Q?{issuedChallenge:Q}:{}});return U8(K)}async syncRoots($,J,Z){let Q=await this.request(d.rootsSync,{device:$,body:{roots:J},signal:Z});return X8(Q)}async identity($,J){let Z=await this.request(d.identity,{device:$,signal:J});return W8(Z)}async disconnect($,J,Z,Q=[]){let K=await this.request(d.disconnect,{device:$,body:Z?{successor_device_id:Z,...Q.length?{successor_roots:Q}:{}}:{},signal:J});return z8(K)}async deviceLifecycle($,J,Z){let Q=await this.request(d.lifecycle,{device:$,body:J,signal:Z});Y8(Q)}async localSubscription($,J,Z){return F8(await this.request(d.localSubscription,{device:$,body:J,signal:Z}))}async ownerWorkspaces($,J){let Q=(await this.request(d.ownerWorkspaces,{device:$,body:{},signal:J}))?.organizations;if(!Array.isArray(Q))throw Error("Reason returned an invalid workspace list.");return Q.flatMap((K)=>{let B=K;return typeof B?.id==="string"?[{id:B.id,...typeof B.name==="string"&&B.name.trim()?{name:B.name.trim()}:{},blocked:B.blocked===!0}]:[]})}async ownerWorkspaceEnrollment($,J,Z){return this.request(d.ownerWorkspaceEnrollment,{device:$,body:J,signal:Z})}async liveSessionWorktrees($,J,Z){let Q=await this.request(d.sessionWorktrees,{device:$,body:{worktree_ids:[...J]},signal:Z}).catch((K)=>{if(K instanceof W0&&K.status===404)return null;throw K});if(Q===null)return null;if(!e4(Q)||!Array.isArray(Q.live)||!Q.live.every((K)=>typeof K==="string"&&J.includes(K)))throw Error("Reason returned an invalid Session worktree answer.");return Q.live}async claimOperation($,J={}){let Z=Math.max(J.waitMs??25000,0),Q=(V)=>({wait_ms:Math.min(Z,V),...J.instanceGeneration===void 0?{}:{instance_generation:J.instanceGeneration}}),K=this.sessionCadence($)?.claimWaitMs,B=await this.request(d.operationClaim,{device:$,body:Q(30000),holdMs:Math.min(Z,30000),...K===void 0?{}:{sessionBody:Q(Math.min(K,x1))},signal:J.signal});if(B===null)return null;return N8(B,x2)}async operationHeartbeat($,J,Z={}){let Q=(V)=>this.request(d.operationHeartbeat.forOperation(J.operation_id),{device:$,body:{attempt_id:J.attempt_id,attempt_token:J.attempt_token,...Z.controlAckSeq===void 0?{}:{control_ack_seq:Z.controlAckSeq},...V?{client_retry_count:Z.clientRetryCount}:{},...V&&Z.waitMs!==void 0?{wait_ms:Math.min(Math.max(Z.waitMs,0),30000)}:{}},signal:Z.signal,transientRetryOwner:Z.transientRetryOwner,...V&&Z.waitMs!==void 0?{holdMs:Math.min(Math.max(Z.waitMs,0),30000)}:{}}),K=(Z.clientRetryCount??0)>0||Z.waitMs!==void 0,B;try{B=await Q(K)}catch(V){if(!K||!(V instanceof W0)||V.status!==400||V.code!=="invalid_operation_heartbeat")throw V;B=await Q(!1)}return H8(B)}async operationEvents($,J,Z){if(!Number.isInteger(Z.eventSeqStart)||Z.eventSeqStart<0||Z.events.length<1||Z.events.length>100||Z.events.some((K)=>!/^[A-Za-z0-9._:-]{1,64}$/.test(K.kind)||!e4(K.payload)))throw Error("Invalid Reason Device operation event batch.");let Q=await this.request(d.operationEvents.forOperation(J.operation_id),{device:$,body:{attempt_id:J.attempt_id,attempt_token:J.attempt_token,event_seq_start:Z.eventSeqStart,events:Z.events},signal:Z.signal,transientRetryOwner:Z.transientRetryOwner,...this.proofOptions.prefetchEventChallenges===!0?{useSpareChallenge:!0}:{}});return C8(Q)}async completeOperation($,J,Z,Q){let K={attempt_id:J.attempt_id,attempt_token:J.attempt_token,status:Z.status,...Z.result===void 0?{}:{result:Z.result},...Z.error_code?{error_code:Z.error_code}:{}};if(o4(K)>Y0)throw Error("Reason Device operation result exceeds the 256 KB protocol limit.");let B=await this.request(d.operationComplete.forOperation(J.operation_id),{device:$,body:K,signal:Q});return D8(B)}async operationCustomEndpointCredential($,J,Z){let{CustomEndpointDeviceCredentialSchema:Q}=await import("./custom-endpoint-device-j012b4bd.js");return Q.parse(await this.request(d.operationCustomEndpointCredential.forOperation(J.operation_id),{device:$,body:{attempt_id:J.attempt_id,attempt_token:J.attempt_token},signal:Z}))}async operationEnvironment($,J,Z,Q){let K=await this.request(d.operationEnvironment.forOperation(J.operation_id),{device:$,body:{attempt_id:J.attempt_id,attempt_token:J.attempt_token,snapshot_id:Z},signal:Q,...this.proofOptions.prefetchEventChallenges===!0?{useSpareChallenge:!0}:{}});return j8(K)}async acknowledgeOperationEnvironment($,J,Z,Q){await this.request(d.operationEnvironmentAck.forOperation(J.operation_id),{device:$,body:{attempt_id:J.attempt_id,attempt_token:J.attempt_token,...Z},signal:Q,...this.proofOptions.prefetchEventChallenges===!0?{useSpareChallenge:!0}:{}})}}var A$=new Set(["process.run.v1","process.full.v1","computer.use","browser.use"]),e0=new Set(["jobs.control","environment.install","tunnel.open","tunnel.close","display.stream.v1","automation.call.v1","workspace.setup.v1","simulator.call.v1","simulator.stream.v1"]);function m1($,J){if(A$.has($))return!1;if(e0.has($)&&!J.runtimeDirectory)return!1;if(($==="inference.custom.v1"||$==="preview.serve.v1"||$==="simulator.call.v1"||$==="simulator.stream.v1")&&(J.executionMode!=="unsandboxed"||!J.runtimeDirectory))return!1;if(J.executionMode!=="unsandboxed"&&(["exec.full","hands.connect","pty.start","browser.pr-proof.v1"].includes($)||e0.has($)))return!1;return!0}import{accessSync as _$,constants as P$,existsSync as T$,statSync as R$}from"fs";import{basename as q$,isAbsolute as g$}from"path";var $1=["-lic"],w8="/bin/zsh",E$=new Set(["zsh","bash"]),L8=20000,h2=60000,k$=65536,S$=64,b$=8192,f$=new Set(["NODE_OPTIONS","PATH","ZDOTDIR","BASH_ENV","ENV"]),y$=["DYLD_","LD_"];function x$($){let J=$.toUpperCase();return f$.has(J)||y$.some((Z)=>J.startsWith(Z))}function O8($=process.env){return!0}function h$($){if(!g$($)||$.includes("\x00"))return!1;if(!E$.has(q$($)))return!1;try{if(!R$($).isFile())return!1;return _$($,P$.X_OK),!0}catch{return!1}}function q0($=process.env){if(process.platform==="win32")return M8()??w8;let J=$.SHELL?.trim();if(J&&h$(J))return J;return w8}function m2($=process.env){return O8($)&&T$(q0($))}function v2($=process.env){if(!O8($))throw new H("full_control_disabled","Full-control execution is unavailable on this Reason Device.")}function u2($){if(typeof $!=="string"||$.length===0||$.includes("\x00")||Buffer.byteLength($,"utf8")>k$)throw new H("invalid_payload","command is missing or too large.");return $}function p2($){if($===void 0||$===null)return{forwarded:{},ignored:[]};if(typeof $!=="object"||Array.isArray($))throw new H("invalid_payload","env must be an object of strings.");let J=Object.entries($);if(J.length>S$)throw new H("invalid_payload","env has too many entries.");let Z={},Q=[];for(let[K,B]of J){if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(K)||typeof B!=="string"||B.includes("\x00")||Buffer.byteLength(B,"utf8")>b$)throw new H("invalid_payload","env entry is invalid or too large.");if(x$(K)){Q.push(K);continue}Z[K]=B}return{forwarded:Z,ignored:Q}}async function I8($){let J=$.processEnv??process.env;if(v2(J),$.signal.aborted)throw new H("cancelled","Operation was cancelled.");let Z=u2($.command),Q=q0(J),{forwarded:K,ignored:B}=p2($.requestEnv),V=await $.spawn(Q,[...$1,Z],{cwd:$.cwd,timeoutMs:$.timeoutMs,signal:$.signal,env:{...J,...K}});return{exit_code:V.exitCode,signal:V.signal,stdout:V.stdout,stderr:V.stderr,timed_out:V.timedOut,truncated:V.truncated,shell:Q,shell_flags:[...$1],login:!0,interactive:!0,sandbox:"none",ignored_env:B}}function A8($=process.env){return{transport:"shell",shell:`${q0($)} ${$1.join(" ")}`,login_shell:!0,interactive_shell:!0,rc_files_loaded:!0,sandbox:"none",network:!0,environment:"inherited",privilege:"user",sudo:"argv_exact_nopasswd_only",activation:"explicit_device_grant",max_timeout_ms:h2}}import{readFile as m$,readdir as v$,readlink as u$,realpath as p$}from"fs/promises";import{basename as d$,relative as l$,sep as s$}from"path";var M0="/proc",c$=250,_8=500,n$=50,r$=250,a$=1024,P8=4096,i$=1,o$=3,T8=9,t$="0A",e$=/^socket:\[(\d+)\]$/,d2={readDirectory:($)=>v$($),readLink:($)=>u$($),readTextFile:($)=>m$($,"utf8"),realPath:($)=>p$($)};function q8($,J){return J===$||J.startsWith(`${$}${s$}`)}function $J($,J){return l$($,J)||"."}async function g8($){let J;try{J=await $.readDirectory(M0)}catch{return[]}return J.filter((Z)=>/^[0-9]+$/.test(Z)).map((Z)=>Number(Z)).filter((Z)=>Number.isSafeInteger(Z)&&Z>0).sort((Z,Q)=>Z-Q)}async function E8($,J){try{let Q=(await J.readTextFile(`${M0}/${$}/comm`)).slice(0,P8).split(`
-`,1)[0]?.trim();if(Q)return Q}catch{}try{let Q=(await J.readTextFile(`${M0}/${$}/cmdline`)).slice(0,P8).split("\x00",1)[0]?.trim();return Q?d$(Q):null}catch{return null}}async function k8($,J=d2){let Z;try{Z=await J.readLink(`${M0}/${$}/cwd`)}catch{return null}if(!Z)return null;try{return await J.realPath(Z)}catch{return null}}async function S8($,J=d2){let Z=[];for(let Q of await g8(J)){if(Z.length>=c$)break;let K=await k8(Q,J);if(!K||!q8($,K))continue;Z.push({pid:Q,command:await E8(Q,J),cwd:$J($,K)})}return{processes:Z}}function R8($){let J=[];for(let Z=0;Z<8;Z+=2)J.unshift(Number.parseInt($.slice(Z,Z+2),16));return J}function JJ($){let J=[];for(let z=0;z<16;z+=2)J.push($[z]<<8|$[z+1]);if(J.slice(0,5).every((z)=>z===0)&&J[5]===65535)return`::ffff:${$.slice(12).join(".")}`;let Z=-1,Q=0,K=-1;for(let z=0;z<=J.length;z+=1){if(z<J.length&&J[z]===0){if(K<0)K=z;continue}if(K>=0){let W=z-K;if(W>Q)Z=K,Q=W;K=-1}}let B=J.map((z)=>z.toString(16));if(Q<2)return B.join(":");let V=B.slice(0,Z).join(":"),U=B.slice(Z+Q).join(":");return`${V}::${U}`}function ZJ($,J){if(/^[0-9A-Fa-f]{8}$/.test($)){let Z=R8($);if(Z.every((Q)=>Q===0))return`*:${J}`;return`${Z.join(".")}:${J}`}if(/^[0-9A-Fa-f]{32}$/.test($)){let Z=[];for(let Q=0;Q<4;Q+=1)Z.push(...R8($.slice(Q*8,Q*8+8)));if(Z.every((Q)=>Q===0))return`*:${J}`;return`[${JJ(Z)}]:${J}`}return null}function QJ($,J){let Z=[];for(let Q of $.split(`
-`).slice(1)){if(Z.length>=J)break;let K=Q.trim().split(/\s+/);if(K.length<=T8)continue;if(K[o$]?.toUpperCase()!==t$)continue;let B=K[i$]??"",V=B.lastIndexOf(":");if(V<0)continue;let U=Number.parseInt(B.slice(V+1),16);if(!Number.isInteger(U)||U<=0||U>65535)continue;let z=ZJ(B.slice(0,V),U),W=K[T8];if(!z||!W||!/^[0-9]+$/.test(W))continue;Z.push({inode:W,port:U,address:z})}return Z}async function KJ($){let J=[];for(let Z of["tcp","tcp6"]){if(J.length>=_8)break;let Q;try{Q=await $.readTextFile(`${M0}/net/${Z}`)}catch{continue}J.push(...QJ(Q,_8-J.length))}return J}async function BJ($,J){let Z=new Map;if($.size===0)return Z;for(let Q of await g8(J)){if(Z.size>=$.size)break;let K;try{K=await J.readDirectory(`${M0}/${Q}/fd`)}catch{continue}for(let B of K.slice(0,a$)){let V;try{V=await J.readLink(`${M0}/${Q}/fd/${B}`)}catch{continue}let U=V.match(e$)?.[1];if(!U||!$.has(U)||Z.has(U))continue;Z.set(U,Q)}}return Z}async function b8($,J=d2){let Z=await KJ(J),Q=await BJ(new Set(Z.map((G)=>G.inode)),J),K=[];for(let G of Z){let F=Q.get(G.inode);if(F===void 0)continue;K.push({pid:F,port:G.port,address:G.address})}K.sort((G,F)=>G.pid-F.pid||G.port-F.port||(G.address<F.address?-1:G.address>F.address?1:0));let B=[...new Set(K.map((G)=>G.pid))].slice(0,n$),V=await Promise.all(B.map(async(G)=>[G,await k8(G,J)])),U=new Map(V),z=K.filter((G)=>{let F=U.get(G.pid);return Boolean(F&&q8($,F))}),W=new Map(await Promise.all([...new Set(z.map((G)=>G.pid))].map(async(G)=>[G,await E8(G,J)])));return{ports:z.slice(0,r$).map((G)=>({pid:G.pid,command:W.get(G.pid)??null,address:G.address}))}}import{posix as s2}from"path";var v1=200,VJ=250,GJ=250;async function u1($,J){let Z=await $(J);if(Z.timedOut||Z.truncated||Z.exitCode!==0&&Z.exitCode!==1)throw new H("process_inspection_failed","Reading this Mac's processes did not complete.");let Q=[],K=null;for(let B of Z.stdout.split(/\r?\n/))if(B.startsWith("p")){let V=Number(B.slice(1));if(K=Number.isInteger(V)&&V>0?{pid:V,command:null,names:[]}:null,K)Q.push(K)}else if(K&&B.startsWith("c"))K.command=B.slice(1)||null;else if(K&&B.startsWith("n"))K.names.push(B.slice(1));return Q}function l2($,J){return J===$||J.startsWith($==="/"?$:`${$}/`)}var f8="/System/Volumes/Data",UJ=["/tmp","/var","/etc"];function c2($){let J=s2.normalize($);if(J.startsWith(`${f8}/`))J=J.slice(f8.length);return UJ.find((Q)=>J===Q||J.startsWith(`${Q}/`))?`/private${J}`:J}function y8($){return $&&s2.isAbsolute($)?c2($):null}async function x8($,J){let Z=new Map;for(let Q=0;Q<J.length;Q+=v1){let K=J.slice(Q,Q+v1).join(",");for(let B of await u1($,["-a","-p",K,"-d","cwd","-Fpcn"]))Z.set(B.pid,{command:B.command,cwd:y8(B.names[0])})}return Z}async function h8($,J){let Z=c2($),Q=(await u1(J,["-d","cwd","-Fpn"])).filter((B)=>{let V=y8(B.names[0]);return V!==null&&l2(Z,V)}).map((B)=>B.pid).slice(0,VJ),K=await x8(J,Q);return{processes:Q.flatMap((B)=>{let V=K.get(B);return V?.cwd&&l2(Z,V.cwd)?[{pid:B,command:V.command,cwd:s2.relative(Z,V.cwd)||"."}]:[]})}}async function m8($,J){let Z=c2($),Q=["-nP","-iTCP","-sTCP:LISTEN","-Fpcn"],K=await u1(J,Q),B=await x8(J,K.map((W)=>W.pid)),V=K.map((W)=>W.pid).filter((W)=>{let G=B.get(W)?.cwd;return Boolean(G&&l2(Z,G))});if(V.length===0)return{ports:[]};let U=new Set(K.flatMap((W)=>W.names.map((G)=>`${W.pid} ${G}`))),z=[];for(let W=0;W<V.length;W+=v1){let G=V.slice(W,W+v1).join(",");for(let F of await u1(J,["-a","-p",G,...Q]))for(let Y of F.names)if(U.has(`${F.pid} ${Y}`))z.push({pid:F.pid,command:F.command,address:Y})}return{ports:z.slice(0,GJ)}}import{join as LJ}from"path";import{spawn as HJ}from"child_process";import{randomUUID as CJ}from"crypto";import{chmodSync as p8,lstatSync as d8,mkdirSync as jJ,readdirSync as DJ,statSync as wJ,unlinkSync as MJ}from"fs";import{join as r2}from"path";var n2={targets:24,assets:128,sourceFiles:2000,sourceBytes:20000000,outputBytes:20000000};var p1=($,J=0,Z=1e6)=>typeof $==="number"&&Number.isFinite($)&&$>=J&&$<=Z;var L0=()=>{throw Error("proof_visual_contract_invalid")};class v8 extends Error{constructor(){super("proof_visual_contract_invalid")}}function WJ($){if(!J1($)||$.version!==1)return L0();if(typeof $.route!=="string"||!$.route.startsWith("/")||$.route.length>512||/[\x00-\x20\x7f\\?#%]/.test($.route)||$.route.startsWith("//"))throw new v8;if(!J1($.viewport)||!p1($.viewport.width,1,4096)||!p1($.viewport.height,1,4096)||!Array.isArray($.targets)||$.targets.length<1||$.targets.length>n2.targets||Object.keys($).some((Q)=>!["version","route","viewport","targets","additionalViewports"].includes(Q)))return L0();let J=$.targets.map((Q)=>{if(!J1(Q)||typeof Q.id!=="string"||!/^[a-zA-Z0-9_-]{1,64}$/.test(Q.id)||typeof Q.selector!=="string"||!Q.selector.trim()||Q.selector.length>256||/[\x00-\x1f\x7f]/.test(Q.selector)||Object.keys(Q).some((K)=>!["id","selector"].includes(K)))return L0();return{id:Q.id,selector:Q.selector}});if(new Set(J.map((Q)=>Q.id)).size!==J.length)return L0();let Z;if($.additionalViewports!==void 0){if(!Array.isArray($.additionalViewports)||$.additionalViewports.length<1||$.additionalViewports.length>3)return L0();Z=$.additionalViewports.map((K)=>{if(!J1(K)||!p1(K.width,1,4096)||!Number.isInteger(K.width)||!p1(K.height,1,4096)||!Number.isInteger(K.height)||Object.keys(K).some((B)=>!["width","height"].includes(B)))return L0();return{width:K.width,height:K.height}});let Q=[$.viewport,...Z].map((K)=>`${K.width}x${K.height}`);if(new Set(Q).size!==Q.length)return L0()}return{version:1,route:$.route,viewport:{width:$.viewport.width,height:$.viewport.height},targets:J,...Z?{additionalViewports:Z}:{}}}var FJ=["organizationId","userId","sessionId","runId"],YJ=[...FJ,"prUrl","headSha","skillDigest","evidenceKind"],OB=[...YJ,"contextId","preparedAt","captureId","startedAt","finishedAt","sha256","kind","visualPlan","visualObservation"];var NJ={"image/png":{kind:"image",directory:"/tmp/ara-public-screenshots",extension:"png",maxBytes:8388608},"video/webm":{kind:"video",directory:"/tmp/ara-public-recordings",extension:"webm",maxBytes:10551296}};function u8($){return NJ[$].directory}var l8=10485760;function s8($={}){let J=$.directory??u8("video/webm"),Z=null;return{async start(Q){if(Z)throw Error("cloud_browser_recording_active");let K=Q?.seconds;if(!Number.isInteger(K)||Number(K)<1||Number(K)>15||!Q||Object.keys(Q).some((D)=>D!=="seconds"))throw Error("cloud_browser_recording_seconds_1_to_15_required");jJ(J,{recursive:!0,mode:457});let B=d8(J);if(!B.isDirectory()||B.isSymbolicLink()||B.uid!==process.getuid?.())throw Error("cloud_browser_recording_directory_invalid");p8(J,457);let V=DJ(J).filter((D)=>/^[a-f0-9-]{36}\.webm$/.test(D)).map((D)=>({name:D,time:wJ(r2(J,D)).mtimeMs})).sort((D,j)=>j.time-D.time);for(let D of V.slice(9))MJ(r2(J,D.name));let U=r2(J,`${CJ()}.webm`),z=["-f","x11grab","-framerate","12","-i",$.display??":99"],W=($.spawn??HJ)($.ffmpeg??"ffmpeg",["-nostdin","-hide_banner","-loglevel","error","-y",...z,"-t",String(K),"-vf","scale=1280:-2","-c:v","libvpx","-deadline","realtime","-b:v","700k","-an","-fs",String(l8),"-progress","pipe:1",U],{stdio:["ignore","pipe","ignore"],...$.env?{env:$.env}:{}}),G,F,Y=!1,N=new Promise((D,j)=>{G=D,F=j});W.stdout.on("data",(D)=>{if(/frame=\s*[1-9]/.test(String(D)))Y=!0,G()});let C=new Promise((D,j)=>{W.once("error",()=>{F(Error("cloud_browser_recording_unavailable")),j(Error("cloud_browser_recording_unavailable"))}),W.once("exit",(M)=>{try{if(M!==0&&M!==255)throw Error();let O=d8(U);if(!Y||!O.isFile()||O.isSymbolicLink()||O.uid!==process.getuid?.()||O.size<128||O.size>l8+65536)throw Error();p8(U,420),G(),D({path:U,mimeType:"video/webm"})}catch{F(Error("cloud_browser_recording_failed")),j(Error("cloud_browser_recording_failed"))}})});C.catch(()=>{});let L=setTimeout(()=>W.kill("SIGKILL"),(Number(K)+5)*1000);C.finally(()=>clearTimeout(L)).catch(()=>{}),Z={done:C,stop:()=>{return W.kill("SIGINT"),C}};try{await N}catch(D){throw Z=null,D}return{recording:!0,seconds:Number(K)}},async stop(){if(!Z)throw Error("cloud_browser_recording_not_started");let Q=Z;return Z=null,Q.stop()},async close(){if(Z)await this.stop().catch(()=>{})}}}function r8($,J={}){if($.executionMode!=="unsandboxed"||!$.runtimeDirectory||(J.platform??process.platform)!=="linux")return null;let Z=(J.components??a8)(),Q=Z?.features.display?Z.ffmpeg:null;if(!Q)return null;let K=LJ($.runtimeDirectory,"recordings"),B=null;return{async start(V){let U=await(J.desktop??n8)();return B??=s8({directory:K,display:U.display,ffmpeg:Q,env:{HOME:c8(),PATH:"/usr/local/bin:/usr/bin:/bin",XAUTHORITY:U.xauthority},...J.spawn?{spawn:J.spawn}:{}}),B.start(V)},async stop(){if(!B)throw Error("cloud_browser_recording_not_started");return B.stop()},async close(){await B?.close()}}}import{spawn as Y3}from"child_process";import{createHash as uJ,randomUUID as pJ}from"crypto";import{existsSync as J0,mkdirSync as U3,mkdtempSync as N3,readdirSync as o1,readFileSync as H3,renameSync as dJ,rmSync as K1,statSync as n1,writeFileSync as lJ}from"fs";import{homedir as C3,tmpdir as C5}from"os";import{basename as j5,dirname as X3,join as q,relative as D5,resolve as W3,sep as w5}from"path";var n=X.string().min(1).max(200),$0=X.number().finite().min(0).max(1e4),d1=X.string().min(1).max(4096).refine(($)=>!$.includes("\x00")),i8=X.string().regex(/^[A-Za-z0-9][A-Za-z0-9.-]{0,254}$/),i2=X.object({id:X.string().min(1).max(500).optional(),label:X.string().min(1).max(500).optional()}).strict(),o2=["home","lock","side_button","siri","apple_pay"],OJ=X.enum(["tree","screenshot","both","none"]),IJ=X.object({...i2.shape,gone:X.boolean().optional()}).strict().refine(($)=>Boolean($.id||$.label),"wait_for needs an id or label"),N0={observe:OJ.optional(),wait_for:IJ.optional(),timeout:X.number().min(0).max(20).optional()},a2=X.discriminatedUnion("action",[X.object({action:X.literal("tap"),x:$0.optional(),y:$0.optional(),...i2.shape,duration:X.number().min(0).max(10).optional()}).strict().refine(($)=>$.x!==void 0&&$.y!==void 0||Boolean($.id||$.label),"pass x and y, or an id or label"),X.object({action:X.literal("swipe"),x:$0,y:$0,x2:$0,y2:$0,duration:X.number().min(0.05).max(5).optional()}).strict(),X.object({action:X.literal("type"),text:X.string().min(1).max(4000)}).strict(),X.object({action:X.literal("button"),name:X.enum(o2)}).strict(),X.object({action:X.literal("sleep"),seconds:X.number().min(0).max(10)}).strict()]),t2=X.discriminatedUnion("action",[X.object({action:X.literal("devices")}).strict(),X.object({action:X.literal("boot"),device:n}).strict(),X.object({action:X.literal("shutdown"),device:n}).strict(),X.object({action:X.literal("build"),path:d1.optional(),scheme:X.string().min(1).max(200).optional(),configuration:X.string().min(1).max(100).optional(),device:n.optional(),wait:X.boolean().optional()}).strict(),X.object({action:X.literal("run"),path:d1.optional(),scheme:X.string().min(1).max(200).optional(),configuration:X.string().min(1).max(100).optional(),device:n.optional(),steps:X.array(X.lazy(()=>a2)).max(30).optional(),...N0}).strict(),X.object({action:X.literal("build_status"),build_id:X.string().regex(/^build-[0-9a-z-]{4,64}$/),device:n.optional(),wait:X.boolean().optional()}).strict(),X.object({action:X.literal("launch"),device:n.optional(),app_path:d1.optional(),bundle_id:i8.optional(),steps:X.array(X.lazy(()=>a2)).max(30).optional(),...N0}).strict().refine(($)=>Boolean($.app_path)!==Boolean($.bundle_id),"pass exactly one of app_path or bundle_id"),X.object({action:X.literal("terminate"),device:n.optional(),bundle_id:i8}).strict(),X.object({action:X.literal("logs"),device:n.optional(),after:X.number().int().min(0).optional()}).strict(),X.object({action:X.literal("screenshot"),device:n.optional(),scale:X.union([X.literal(1),X.literal(2)]).optional(),save_path:d1.optional()}).strict(),X.object({action:X.literal("chrome"),device:n.optional()}).strict(),X.object({action:X.literal("inspect"),device:n.optional()}).strict(),X.object({action:X.literal("tap"),device:n.optional(),x:$0.optional(),y:$0.optional(),...i2.shape,duration:X.number().min(0).max(10).optional(),...N0}).strict().refine(($)=>$.x!==void 0&&$.y!==void 0||Boolean($.id||$.label),"pass x and y, or an id or label"),X.object({action:X.literal("swipe"),device:n.optional(),x:$0,y:$0,x2:$0,y2:$0,duration:X.number().min(0.05).max(5).optional(),...N0}).strict(),X.object({action:X.literal("type"),device:n.optional(),text:X.string().min(1).max(4000),...N0}).strict(),X.object({action:X.literal("button"),device:n.optional(),name:X.enum(o2),...N0}).strict(),X.object({action:X.literal("open_url"),device:n.optional(),url:X.string().min(1).max(4000),...N0}).strict(),X.object({action:X.literal("steps"),device:n.optional(),steps:X.array(a2).min(1).max(30),...N0}).strict(),X.object({action:X.literal("appearance"),device:n.optional(),mode:X.enum(["light","dark"])}).strict()]),o8=X.object({udid:X.string(),name:X.string(),runtime:X.string(),state:X.enum(["booted","shutdown","booting","shutting_down"]),kind:X.enum(["iphone","ipad","other"])}).strict(),uB=X.object({text:X.string(),error:X.string().optional(),device:o8.optional(),devices:X.array(o8).optional(),image:X.object({mime:X.literal("image/jpeg"),data:X.string(),width:X.number(),height:X.number()}).strict().optional(),build:X.object({id:X.string(),status:X.enum(["running","succeeded","failed"]),app_path:X.string().optional(),bundle_id:X.string().optional(),errors:X.array(X.string()),log_tail:X.string(),elapsed_ms:X.number()}).strict().optional(),logs:X.object({lines:X.array(X.string()),next:X.number()}).strict().optional(),screen:X.string().optional(),chrome:X.object({identifier:X.string(),screen:X.object({width:X.number(),height:X.number()}).strict(),inset:X.object({top:X.number(),left:X.number(),bottom:X.number(),right:X.number()}).strict(),padding:X.object({top:X.number(),left:X.number(),bottom:X.number(),right:X.number()}).strict(),screen_mask:X.string().optional(),pieces:X.record(X.enum(["topLeft","top","topRight","right","bottomRight","bottom","bottomLeft","left"]),X.object({image:X.string(),width:X.number(),height:X.number()}).strict()),buttons:X.array(X.object({name:X.string(),image:X.string(),x:X.number(),y:X.number(),width:X.number(),height:X.number()}).strict())}).strict().optional()}).strict();var pB=X.object({device_id:X.uuid().optional(),root_id:X.uuid().optional()}),l1={device_id:{type:"string",format:"uuid",description:"Reason machine id from devices.list; omit for the machine this Session runs on."},root_id:{type:"string",format:"uuid"},device:{type:"string",description:"Simulator UDID or exact name. Required for boot and shutdown; for other actions omit it for the booted one."},path:{type:"string",description:"build or run: a .xcodeproj, .xcworkspace, or a folder holding one (project.yml is generated with XcodeGen), absolute or relative to the Session's folder. Omit it when the folder holds one app project."},scheme:{type:"string"},configuration:{type:"string"},build_id:{type:"string",description:"build_status (required): the build_id a build or run returned."},app_path:{type:"string",description:"launch: the built .app from build_status (or pass bundle_id instead)."},bundle_id:{type:"string",description:"terminate (required); launch: an installed app's bundle id instead of app_path."},after:{type:"integer",minimum:0,description:"logs: only lines after this sequence number."},x:{type:"number",description:"tap (with y, unless id or label is given) or swipe (required): start point in device points."},y:{type:"number"},x2:{type:"number",description:"swipe (required, with y2): end point in device points."},y2:{type:"number"},id:{type:"string",description:"tap: accessibility identifier from inspect (instead of x and y)."},label:{type:"string",description:"tap: accessibility label from inspect (instead of x and y)."},duration:{type:"number",description:"tap: seconds held (above 0.5 is a long press); swipe: seconds."},text:{type:"string",description:"type (required): the text to type."},name:{type:"string",enum:[...o2],description:"button (required)."},url:{type:"string",description:"open_url (required): the URL or deep link."},mode:{type:"string",enum:["light","dark"],description:"appearance (required)."},steps:{type:"array",maxItems:30,description:"steps (required, at least one) or launch and run: run in order in one call (after launch, once the app is up). Each item is {action:'tap', id|label|x,y} | {action:'swipe', x,y,x2,y2} | {action:'type', text} | {action:'button', name} | {action:'sleep', seconds}. Taps by id or label wait for their element to appear.",items:{type:"object"}},observe:{type:"string",enum:["tree","screenshot","both","none"],description:"After tap, swipe, type, button, open_url, launch or steps: what to return about the settled screen. Default tree (the accessibility tree, so no separate inspect is needed); screenshot or both to see it."},wait_for:{type:"object",description:"After the action, wait until this element is on screen: {id} or {label}; add gone:true to wait for it to disappear.",properties:{id:{type:"string"},label:{type:"string"},gone:{type:"boolean"}},additionalProperties:!1},timeout:{type:"number",description:"Seconds to wait for wait_for (default 5, max 20)."},wait:{type:"boolean",description:"build or build_status: wait for the build to finish (up to ~45 s) instead of returning at once."},save_path:{type:"string",description:"screenshot: also save the full-resolution PNG at this path (absolute or relative to the Session's folder), for example to show the user."}},e8=t2.options.map(($)=>$.shape).filter(($)=>$.action.value!=="chrome"),AJ={tap:[{required:["x","y"]},{required:["id"]},{required:["label"]}],launch:[{required:["app_path"],without:["bundle_id"]},{required:["bundle_id"],without:["app_path"]}]},t8=new Set;function _J($,J){let{description:Z,...Q}=$==="steps"&&J==="steps"?{...l1.steps,minItems:1}:l1[$];if(Z===void 0||t8.has($))return Q;return t8.add($),{...Q,description:Z}}var PJ=e8.flatMap(($)=>{let J=$.action.value,Z=Object.keys($).filter((K)=>Object.hasOwn(l1,K)),Q=Z.filter((K)=>!$[K].safeParse(void 0).success);return(AJ[J]??[{required:[]}]).map((K)=>({type:"object",properties:Object.fromEntries([["action",{type:"string",const:J}],...["device_id","root_id",...Z].filter((B)=>!K.without?.includes(B)).map((B)=>[B,_J(B,J)])]),required:["action",...Q,...K.required],additionalProperties:!1}))}),TJ={type:"object",properties:{action:{type:"string",enum:e8.map(($)=>$.action.value)},...l1},required:["action"],additionalProperties:!1},dB={...TJ,anyOf:PJ};import{spawn as Z3}from"child_process";import{createHash as qJ}from"crypto";import{existsSync as $3,mkdirSync as s1,mkdtempSync as gJ,readdirSync as $5,readFileSync as J5,renameSync as EJ,rmSync as Z5,symlinkSync as J3,writeFileSync as Z1}from"fs";import{homedir as kJ}from"os";import{dirname as V5,join as k}from"path";import{createInterface as SJ}from"readline";var e2=`// Reason's simulator host: one warm process per booted iOS Simulator.
-//
-// Built on the Mac on first use (cli/simulator-host.ts) against the MIT
-// FBSimulatorControl frameworks that the pinned AXe ships, so loading
-// SimulatorKit and connecting to the simulator happen once per process
-// instead of once per action (about a second each, three under load).
-//
-//   simulator-host serve <udid>
-//     Newline JSON requests on stdin, one newline JSON reply each on stdout,
-//     in order: {"id":1,"op":"tap","x":100,"y":200} -> {"id":1,"ok":true}.
-//     Ops: touch (phase down|move|up), tap, swipe, button, text, key, tree.
-//     Coordinates are device points. \`tree\` answers AXe describe-ui's JSON.
-//   simulator-host stream <udid> <fps> <max pixels> <kbps>
-//     H.264 (Main, level 4.2) as Annex-B on stdout, encoded with VideoToolbox
-//     straight from the simulator's framebuffer. Every keyframe carries
-//     SPS/PPS, and every access unit is followed by an AUD, so a reader that
-//     splits at AUDs has each frame as soon as it is written.
-//
-// Both modes exit when stdin closes, so they never outlive the worker.
-
-import CoreMedia
-import CoreVideo
-import Darwin
-import FBControlCore
-import FBSimulatorControl
-import Foundation
-import IOSurface
-import VideoToolbox
-
-@objc final class SilentReporter: NSObject, FBEventReporter {
-  var metadata: [String: String] = [:]
-  func report(_ subject: FBEventReporterSubject) {}
-  func addMetadata(_ metadata: [String: String]) {}
-}
-
-let logger: FBControlCoreLogger = FBControlCoreLoggerFactory.systemLoggerWriting(toStderr: false, withDebugLogging: false)
-
-func fail(_ message: String) -> Never {
-  FileHandle.standardError.write(Data((message + "\\n").utf8))
-  exit(1)
-}
-
-/// Writes all of \`data\` to stdout; a closed reader ends the process.
-func writeOut(_ data: Data) {
-  data.withUnsafeBytes { (buffer: UnsafeRawBufferPointer) in
-    var offset = 0
-    while offset < buffer.count {
-      let written = Darwin.write(1, buffer.baseAddress!.advanced(by: offset), buffer.count - offset)
-      if written <= 0 {
-        if written < 0 && errno == EINTR { continue }
-        exit(0)
-      }
-      offset += written
-    }
-  }
-}
-
-@MainActor
-func simulator(_ udid: String) async throws -> FBSimulator {
-  try FBSimulatorControlFrameworkLoader.essentialFrameworks.loadPrivateFrameworks(logger)
-  try FBSimulatorControlFrameworkLoader.xcodeFrameworks.loadPrivateFrameworks(logger)
-  FBControlCoreGlobalConfiguration.defaultLogger = logger
-  let configuration = FBSimulatorControlConfiguration(deviceSetPath: nil, logger: logger, reporter: SilentReporter())
-  let set = try FBSimulatorControl.withConfiguration(configuration).set
-  guard let target = set.allSimulators.first(where: { $0.udid == udid }) else { fail("simulator_not_found") }
-  guard target.state == .booted else { fail("simulator_not_booted") }
-  return target
-}
-
-// MARK: - serve
-
-/// US keyboard: character -> (HID usage, shift).
-let keyboard: [Character: (UInt32, Bool)] = {
-  var map: [Character: (UInt32, Bool)] = [:]
-  for (index, letter) in "abcdefghijklmnopqrstuvwxyz".enumerated() {
-    map[letter] = (UInt32(4 + index), false)
-    map[Character(letter.uppercased())] = (UInt32(4 + index), true)
-  }
-  for (index, digit) in "1234567890".enumerated() { map[digit] = (UInt32(30 + index), false) }
-  for (index, symbol) in "!@#$%^&*()".enumerated() { map[symbol] = (UInt32(30 + index), true) }
-  let plain: [(Character, UInt32)] = [("\\n", 40), ("\\t", 43), (" ", 44), ("-", 45), ("=", 46), ("[", 47), ("]", 48),
-    ("\\\\", 49), (";", 51), ("'", 52), ("\`", 53), (",", 54), (".", 55), ("/", 56)]
-  let shifted: [(Character, UInt32)] = [("_", 45), ("+", 46), ("{", 47), ("}", 48), ("|", 49), (":", 51), ("\\"", 52),
-    ("~", 53), ("<", 54), (">", 55), ("?", 56)]
-  for (character, usage) in plain { map[character] = (usage, false) }
-  for (character, usage) in shifted { map[character] = (usage, true) }
-  return map
-}()
-
-let buttons: [String: FBSimulatorHIDButton] = [
-  "home": .homeButton, "lock": .lock, "side_button": .sideButton, "siri": .siri, "apple_pay": .applePay,
-]
-
-/// AXe describe-ui's keys (its schema), so the worker parses one format either way.
-let treeKeys: Set<FBAXKeys> = [.label, .frame, .value, .uniqueID, .type, .title, .frameDict, .help, .enabled,
-  .customActions, .role, .roleDescription, .subrole, .contentRequired, .pid]
-
-func withTraits(_ value: Any) -> Any {
-  if let list = value as? [Any] { return list.map(withTraits) }
-  guard var element = value as? [String: Any] else { return value }
-  for (key, child) in element { element[key] = withTraits(child) }
-  if element["type"] != nil && element["traits"] == nil { element["traits"] = [String]() }
-  return element
-}
-
-func hasChildren(_ value: Any) -> Bool {
-  let roots = (value as? [[String: Any]]) ?? ((value as? [String: Any]).map { [$0] } ?? [])
-  return roots.contains { (($0["children"] as? [Any])?.isEmpty == false) }
-}
-
-@MainActor
-func readTree(_ target: FBSimulator) async throws -> String {
-  var latest: Any = []
-  for attempt in 0..<4 {
-    let element = try await target.accessibilityElementForFrontmostApplication()
-    defer { element.close() }
-    let response = try element.serialize(with: FBAccessibilityRequestOptions(nestedFormat: true, keys: treeKeys))
-    latest = withTraits(response.elements)
-    if hasChildren(latest) { break }
-    if attempt < 3 { try await Task.sleep(for: .milliseconds(50 << attempt)) }
-  }
-  let data = try JSONSerialization.data(withJSONObject: latest)
-  return String(decoding: data, as: UTF8.self)
-}
-
-@MainActor
-func handle(_ request: [String: Any], target: FBSimulator, hid: FBSimulatorHID) async throws -> [String: Any] {
-  let number = { (key: String) -> Double in
-    guard let value = request[key] as? Double else { throw NSError(domain: "simulator-host", code: 1, userInfo: [NSLocalizedDescriptionKey: "missing \\(key)"]) }
-    return value
-  }
-  switch request["op"] as? String {
-  case "touch":
-    let direction: FBSimulatorHIDDirection = (request["phase"] as? String) == "up" ? .up : .down
-    try await hid.send(event: .touch(direction: direction, x: try number("x"), y: try number("y")), logger: logger)
-  case "tap":
-    let duration = request["duration"] as? Double ?? 0
-    let event: FBSimulatorHIDEvent = duration > 0
-      ? .tapAt(x: try number("x"), y: try number("y"), duration: duration) : .tapAt(x: try number("x"), y: try number("y"))
-    try await hid.send(event: event, logger: logger)
-  case "swipe":
-    try await hid.send(event: .swipe(try number("x"), yStart: try number("y"), xEnd: try number("x2"), yEnd: try number("y2"),
-      delta: request["delta"] as? Double ?? 10, duration: request["duration"] as? Double ?? 0.3), logger: logger)
-  case "button":
-    guard let button = buttons[request["name"] as? String ?? ""] else { throw NSError(domain: "simulator-host", code: 1, userInfo: [NSLocalizedDescriptionKey: "unknown button"]) }
-    try await hid.send(event: .shortButtonPress(button), logger: logger)
-  case "text":
-    var events: [FBSimulatorHIDEvent] = []
-    for character in request["text"] as? String ?? "" {
-      guard let (usage, shift) = keyboard[character] else {
-        throw NSError(domain: "simulator-host", code: 2, userInfo: [NSLocalizedDescriptionKey: "unsupported character"])
-      }
-      if shift { events.append(.keyboard(direction: .down, keyCode: 225)) }
-      events.append(.keyboard(direction: .down, keyCode: usage))
-      events.append(.keyboard(direction: .up, keyCode: usage))
-      if shift { events.append(.keyboard(direction: .up, keyCode: 225)) }
-    }
-    if !events.isEmpty { try await hid.send(event: .composite(events), logger: logger) }
-  case "key":
-    let direction: FBSimulatorHIDDirection = (request["down"] as? Bool) == false ? .up : .down
-    try await hid.send(event: .keyboard(direction: direction, keyCode: UInt32(try number("usage"))), logger: logger)
-  case "tree":
-    return ["tree": try await readTree(target)]
-  default:
-    throw NSError(domain: "simulator-host", code: 1, userInfo: [NSLocalizedDescriptionKey: "unknown op"])
-  }
-  return [:]
-}
-
-@MainActor
-func serve(_ udid: String) async {
-  let target: FBSimulator
-  let hid: FBSimulatorHID
-  do {
-    target = try await simulator(udid)
-    hid = try await target.connectToHID()
-  } catch {
-    fail("connect_failed: \\(error.localizedDescription)")
-  }
-  writeOut(Data("{\\"ready\\":true}\\n".utf8))
-  do {
-    for try await line in FileHandle.standardInput.bytes.lines {
-      guard let request = (try? JSONSerialization.jsonObject(with: Data(line.utf8))) as? [String: Any] else { continue }
-      var reply: [String: Any]
-      do {
-        reply = try await handle(request, target: target, hid: hid)
-        reply["ok"] = true
-      } catch {
-        reply = ["ok": false, "error": error.localizedDescription]
-      }
-      reply["id"] = request["id"] ?? 0
-      var data = (try? JSONSerialization.data(withJSONObject: reply)) ?? Data("{\\"ok\\":false}".utf8)
-      data.append(0x0A)
-      writeOut(data)
-    }
-  } catch {}
-  exit(0)
-}
-
-// MARK: - stream
-
-let startCode = Data([0, 0, 0, 1])
-let accessUnitDelimiter = Data([0, 0, 0, 1, 0x09, 0xF0])
-
-struct BitReader {
-  let bytes: [UInt8]
-  var position = 0
-  mutating func bit() -> UInt32? {
-    guard position < bytes.count * 8 else { return nil }
-    defer { position += 1 }
-    return UInt32(bytes[position >> 3] >> (7 - UInt8(position & 7)) & 1)
-  }
-  mutating func bits(_ count: Int) -> UInt32? {
-    var value: UInt32 = 0
-    for _ in 0..<count { guard let next = bit() else { return nil }; value = value << 1 | next }
-    return value
-  }
-  mutating func ue() -> UInt32? {
-    var zeros = 0
-    while true { guard let next = bit() else { return nil }; if next == 1 { break }; zeros += 1; if zeros > 31 { return nil } }
-    guard let rest = bits(zeros) else { return nil }
-    return (1 << zeros) - 1 + rest
-  }
-}
-
-struct BitWriter {
-  var bytes: [UInt8] = []
-  var count = 0
-  mutating func bit(_ value: UInt32) {
-    if count & 7 == 0 { bytes.append(0) }
-    if value & 1 == 1 { bytes[bytes.count - 1] |= 1 << (7 - UInt8(count & 7)) }
-    count += 1
-  }
-  mutating func bits(_ value: UInt32, _ width: Int) { for shift in stride(from: width - 1, through: 0, by: -1) { bit(value >> UInt32(shift)) } }
-  mutating func ue(_ value: UInt32) {
-    let coded = value + 1
-    let width = 32 - coded.leadingZeroBitCount
-    bits(0, width - 1)
-    bits(coded, width)
-  }
-}
-
-/// The SPS with a VUI that says frames come out in decode order, one at a time. VideoToolbox writes no
-/// bitstream restriction, so a browser decoder may hold the newest frames back for reordering; on a
-/// screen that stops changing, the last one would never be shown. Any SPS this does not expect is kept.
-func lowDelaySps(_ nal: Data) -> Data {
-  var raw: [UInt8] = []
-  var zeros = 0
-  for byte in nal.dropFirst() {
-    if zeros >= 2 && byte == 3 { zeros = 0; continue }
-    raw.append(byte)
-    zeros = byte == 0 ? zeros + 1 : 0
-  }
-  var reader = BitReader(bytes: raw)
-  var writer = BitWriter()
-  func copyBits(_ width: Int) -> UInt32? { guard let value = reader.bits(width) else { return nil }; writer.bits(value, width); return value }
-  func copyUe() -> UInt32? { guard let value = reader.ue() else { return nil }; writer.ue(value); return value }
-  guard let profile = copyBits(8), copyBits(16) != nil, copyUe() != nil else { return nal }
-  if [100, 110, 122, 244, 44, 83, 86, 118, 128, 138, 139, 134, 135].contains(profile) {
-    guard let chroma = copyUe() else { return nal }
-    if chroma == 3 { guard copyBits(1) != nil else { return nal } }
-    guard copyUe() != nil, copyUe() != nil, copyBits(1) != nil, let scaling = copyBits(1), scaling == 0 else { return nal }
-  }
-  guard copyUe() != nil, let pocType = copyUe() else { return nal }
-  if pocType == 0 { guard copyUe() != nil else { return nal } } else if pocType != 2 { return nal }
-  guard let references = copyUe(), copyBits(1) != nil, copyUe() != nil, copyUe() != nil, let frameOnly = copyBits(1) else { return nal }
-  if frameOnly == 0 { guard copyBits(1) != nil else { return nal } }
-  guard copyBits(1) != nil, let cropping = copyBits(1) else { return nal }
-  if cropping == 1 { for _ in 0..<4 { guard copyUe() != nil else { return nal } } }
-  guard reader.bits(1) == 0 else { return nal }
-  writer.bit(1) // vui_parameters_present_flag
-  writer.bits(0, 6) // aspect ratio, overscan, video signal, chroma location, timing, NAL HRD
-  writer.bit(0) // VCL HRD
-  writer.bit(0) // pic_struct_present_flag
-  writer.bit(1) // bitstream_restriction_flag
-  writer.bit(1) // motion_vectors_over_pic_boundaries_flag
-  writer.ue(2); writer.ue(1); writer.ue(16); writer.ue(16)
-  writer.ue(0) // max_num_reorder_frames
-  writer.ue(max(1, references)) // max_dec_frame_buffering
-  writer.bit(1) // rbsp_stop_one_bit
-  while writer.count & 7 != 0 { writer.bit(0) }
-  var out = Data([nal.first!])
-  zeros = 0
-  for byte in writer.bytes {
-    if zeros >= 2 && byte <= 3 { out.append(3); zeros = 0 }
-    out.append(byte)
-    zeros = byte == 0 ? zeros + 1 : 0
-  }
-  return out
-}
-
-final class Encoder: NSObject, FBFramebufferConsumer, @unchecked Sendable {
-  let queue = DispatchQueue(label: "simulator-host.encode")
-  let fps: Int
-  let maxPixels: Double
-  let kbps: Int
-  var surface: IOSurface?
-  var dirty = true
-  var forceKey = true
-  var session: VTCompressionSession?
-  var transfer: VTPixelTransferSession?
-  var size = (width: 0, height: 0)
-  var frames: Int64 = 0
-
-  init(fps: Int, maxPixels: Double, kbps: Int) {
-    self.fps = fps
-    self.maxPixels = maxPixels
-    self.kbps = kbps
-  }
-
-  func didChange(_ surface: IOSurface?) {
-    self.surface = surface
-    dirty = true
-    forceKey = true
-  }
-
-  func didReceiveDamageRect() { dirty = true }
-
-  /// The encoded picture: the framebuffer scaled to stay within \`maxPixels\`, even sides.
-  func outputSize(_ surface: IOSurface) -> (width: Int, height: Int) {
-    let width = Double(IOSurfaceGetWidth(surface)), height = Double(IOSurfaceGetHeight(surface))
-    let fit = min(1, (maxPixels / (width * height)).squareRoot())
-    let even = { (value: Double) in max(2, Int(value * fit) / 2 * 2) }
-    return (even(width), even(height))
-  }
-
-  func makeSession(_ width: Int, _ height: Int) {
-    if let session { VTCompressionSessionInvalidate(session) }
-    var created: VTCompressionSession?
-    let status = VTCompressionSessionCreate(allocator: nil, width: Int32(width), height: Int32(height),
-      codecType: kCMVideoCodecType_H264, encoderSpecification: nil, imageBufferAttributes: nil,
-      compressedDataAllocator: nil, outputCallback: nil, refcon: nil, compressionSessionOut: &created)
-    guard status == noErr, let created else { fail("encoder_failed \\(status)") }
-    let set = { (key: CFString, value: CFTypeRef) in _ = VTSessionSetProperty(created, key: key, value: value) }
-    set(kVTCompressionPropertyKey_RealTime, kCFBooleanTrue)
-    set(kVTCompressionPropertyKey_ProfileLevel, kVTProfileLevel_H264_Main_4_2)
-    set(kVTCompressionPropertyKey_AllowFrameReordering, kCFBooleanFalse)
-    set(kVTCompressionPropertyKey_MaxFrameDelayCount, 0 as CFNumber)
-    set(kVTCompressionPropertyKey_ExpectedFrameRate, fps as CFNumber)
-    set(kVTCompressionPropertyKey_AverageBitRate, (kbps * 1000) as CFNumber)
-    // Keyframes come from a (re)start or a framebuffer change; this is only a safety net.
-    set(kVTCompressionPropertyKey_MaxKeyFrameIntervalDuration, 60 as CFNumber)
-    VTCompressionSessionPrepareToEncodeFrames(created)
-    session = created
-    size = (width, height)
-    var createdTransfer: VTPixelTransferSession?
-    VTPixelTransferSessionCreate(allocator: nil, pixelTransferSessionOut: &createdTransfer)
-    transfer = createdTransfer
-  }
-
-  func tick() {
-    guard dirty, let surface else { return }
-    dirty = false
-    let wanted = outputSize(surface)
-    if session == nil || wanted.width != size.width || wanted.height != size.height { makeSession(wanted.width, wanted.height) }
-    guard let session, let transfer, let pool = VTCompressionSessionGetPixelBufferPool(session) else { return }
-    var source: Unmanaged<CVPixelBuffer>?
-    guard CVPixelBufferCreateWithIOSurface(nil, surface, nil, &source) == kCVReturnSuccess, let source else { return }
-    let input = source.takeRetainedValue()
-    var output: CVPixelBuffer?
-    guard CVPixelBufferPoolCreatePixelBuffer(nil, pool, &output) == kCVReturnSuccess, let output else { return }
-    guard VTPixelTransferSessionTransferImage(transfer, from: input, to: output) == noErr else { return }
-    let time = CMTime(value: frames, timescale: CMTimeScale(fps))
-    frames += 1
-    let options = forceKey ? [kVTEncodeFrameOptionKey_ForceKeyFrame: kCFBooleanTrue] as CFDictionary : nil
-    forceKey = false
-    VTCompressionSessionEncodeFrame(session, imageBuffer: output, presentationTimeStamp: time, duration: .invalid,
-      frameProperties: options, infoFlagsOut: nil) { status, _, sample in
-      guard status == noErr, let sample else { return }
-      Encoder.write(sample)
-    }
-  }
-
-  /// One access unit as Annex-B, then the next unit's AUD: the reader splits at AUDs, so the unit is complete now.
-  static func write(_ sample: CMSampleBuffer) {
-    guard let block = CMSampleBufferGetDataBuffer(sample), let format = CMSampleBufferGetFormatDescription(sample) else { return }
-    let attachments = CMSampleBufferGetSampleAttachmentsArray(sample, createIfNecessary: false) as? [[CFString: Any]]
-    let key = !((attachments?.first?[kCMSampleAttachmentKey_NotSync] as? Bool) ?? false)
-    var unit = Data()
-    if key {
-      var count = 0
-      CMVideoFormatDescriptionGetH264ParameterSetAtIndex(format, parameterSetIndex: 0, parameterSetPointerOut: nil,
-        parameterSetSizeOut: nil, parameterSetCountOut: &count, nalUnitHeaderLengthOut: nil)
-      for index in 0..<count {
-        var pointer: UnsafePointer<UInt8>?
-        var length = 0
-        CMVideoFormatDescriptionGetH264ParameterSetAtIndex(format, parameterSetIndex: index, parameterSetPointerOut: &pointer,
-          parameterSetSizeOut: &length, parameterSetCountOut: nil, nalUnitHeaderLengthOut: nil)
-        guard let pointer, length > 0 else { continue }
-        let set = Data(bytes: pointer, count: length)
-        unit.append(startCode)
-        unit.append(set[set.startIndex] & 0x1F == 7 ? lowDelaySps(set) : set)
-      }
-    }
-    var total = 0
-    var base: UnsafeMutablePointer<CChar>?
-    guard CMBlockBufferGetDataPointer(block, atOffset: 0, lengthAtOffsetOut: nil, totalLengthOut: &total, dataPointerOut: &base) == noErr,
-      let base else { return }
-    var offset = 0
-    while offset + 4 <= total {
-      var length: UInt32 = 0
-      memcpy(&length, base.advanced(by: offset), 4)
-      let nal = Int(CFSwapInt32BigToHost(length))
-      offset += 4
-      guard offset + nal <= total else { break }
-      unit.append(startCode)
-      base.advanced(by: offset).withMemoryRebound(to: UInt8.self, capacity: nal) { unit.append($0, count: nal) }
-      offset += nal
-    }
-    unit.append(accessUnitDelimiter)
-    writeOut(unit)
-  }
-}
-
-@MainActor
-func stream(_ udid: String, fps: Int, maxPixels: Double, kbps: Int) async {
-  let target: FBSimulator
-  let framebuffer: FBFramebuffer
-  do {
-    target = try await simulator(udid)
-    framebuffer = try FBFramebuffer.mainScreenSurface(for: target, logger: logger)
-  } catch {
-    fail("connect_failed: \\(error.localizedDescription)")
-  }
-  let encoder = Encoder(fps: fps, maxPixels: maxPixels, kbps: kbps)
-  let first = framebuffer.attach(encoder, on: encoder.queue)
-  encoder.queue.async { if let first, encoder.surface == nil { encoder.surface = first } }
-  writeOut(accessUnitDelimiter)
-  let timer = DispatchSource.makeTimerSource(queue: encoder.queue)
-  timer.schedule(deadline: .now(), repeating: .nanoseconds(1_000_000_000 / max(1, fps)))
-  timer.setEventHandler { encoder.tick() }
-  timer.resume()
-  // "key" on stdin asks for a keyframe; end of stdin ends the stream.
-  do {
-    for try await line in FileHandle.standardInput.bytes.lines where line == "key" {
-      encoder.queue.async { encoder.forceKey = true; encoder.dirty = true }
-    }
-  } catch {}
-  framebuffer.detach(encoder)
-  _ = target
-  exit(0)
-}
-
-// MARK: - main
-
-signal(SIGPIPE, SIG_IGN)
-let arguments = CommandLine.arguments
-guard arguments.count >= 3 else { fail("usage: simulator-host serve|stream <udid> ...") }
-switch arguments[1] {
-case "serve":
-  await serve(arguments[2])
-case "stream":
-  guard arguments.count == 6, let fps = Int(arguments[3]), let maxPixels = Double(arguments[4]), let kbps = Int(arguments[5]) else {
-    fail("usage: simulator-host stream <udid> <fps> <max pixels> <kbps>")
-  }
-  await stream(arguments[2], fps: fps, maxPixels: maxPixels, kbps: kbps)
-default:
-  fail("usage: simulator-host serve|stream <udid> ...")
-}
-`;var Q5=process.arch==="arm64"?"arm64-apple-macos":"x86_64-apple-macos",bJ=180000,fJ=15000,yJ=30000,xJ=600000,hJ=["SimDevice","SimDeviceSet","SimDeviceType","SimRuntime"].map(($)=>`@interface ${$} : NSObject
-@end
-`).join("");function K5($,J,Z){return new Promise((Q)=>{let K=Z3($,J,{stdio:["ignore","pipe","pipe"],timeout:Z}),B="";K.stdout.on("data",(V)=>{B+=V}),K.stderr.on("data",(V)=>{B+=V}),K.once("error",(V)=>Q({code:-1,output:String(V)})),K.once("close",(V)=>Q({code:V??-1,output:B}))})}var B5=new Map;function Q3($){let J=k(V5($),"Frameworks"),Z=B5.get(J);if(!Z)B5.set(J,Z=mJ(J));return Z}async function mJ($){if(process.platform!=="darwin"||!$3(k($,"FBSimulatorControl.framework")))return null;let J=await K5("xcrun",["swiftc","--version"],30000);if(J.code!==0)return null;let Z=qJ("sha256").update(e2).update(J.output).update($).digest("hex").slice(0,16),Q=k(kJ(),".local","share","reason","simulator","host"),K=k(Q,Z,"simulator-host");if($3(K))return K;s1(Q,{recursive:!0,mode:448});let B=gJ(k(Q,".staging-"));try{let V=k(B,"Frameworks"),U=k(V,"FBSimulatorControl.framework"),z=k(U,"Modules","FBSimulatorControl.swiftmodule");s1(z,{recursive:!0});for(let L of $5($))if(L!=="FBSimulatorControl.framework")J3(k($,L),k(V,L));let W=k($,"FBSimulatorControl.framework");J3(k(W,"FBSimulatorControl"),k(U,"FBSimulatorControl")),J3(k(W,"Headers"),k(U,"Headers")),Z1(k(U,"Modules","module.modulemap"),J5(k(W,"Modules","module.modulemap")));let G=J5(k(W,"Modules","FBSimulatorControl.swiftmodule",`${Q5}.swiftinterface`),"utf8");Z1(k(z,`${Q5}.swiftinterface`),G.replace(/FBSimulatorControl\.(?=[A-Za-z_])/g,"").replace(/IOSurface\.IOSurface/g,"IOSurface"));let F=k(B,"include","CoreSimulator");s1(F,{recursive:!0}),Z1(k(F,"module.modulemap"),`module CoreSimulator {
-  header "CoreSimulator.h"
-  export *
-}
-`),Z1(k(F,"CoreSimulator.h"),`#import <Foundation/Foundation.h>
-${hJ}`);let Y=k(B,"main.swift");Z1(Y,e2);let N=k(B,"simulator-host"),C=await K5("xcrun",["swiftc","-O","-F",V,"-I",k(B,"include"),"-module-cache-path",k(B,"cache"),"-Xlinker","-rpath","-Xlinker",$,Y,"-o",N],bJ);if(C.code!==0||!$3(N))return process.stderr.write(`Reason: the simulator host did not build; simulator actions use AXe.
-${C.output.slice(-2000)}
-`),null;s1(V5(K),{recursive:!0}),EJ(N,K);for(let L of $5(Q))if(L!==Z&&!L.startsWith(".staging-"))Z5(k(Q,L),{recursive:!0,force:!0});return K}catch{return null}finally{Z5(B,{recursive:!0,force:!0})}}class Q1 extends Error{}class E0 extends Error{}class G5{child;onGone;nextId=1;pending=new Map;idle;gone=!1;constructor($,J){this.child=$;this.onGone=J;SJ({input:$.stdout}).on("line",(Q)=>{let K;try{K=JSON.parse(Q)}catch{return}let B=this.pending.get(Number(K.id));if(!B)return;if(this.pending.delete(Number(K.id)),clearTimeout(B.timer),K.ok===!0)B.resolve(K);else B.reject(new Q1(String(K.error??"The simulator refused the action.")))}),$.once("exit",()=>this.end()),$.once("error",()=>this.end()),this.touch()}call($){if(this.gone)return Promise.reject(new E0("The simulator host has exited."));this.touch();let J=this.nextId++;return new Promise((Z,Q)=>{let K=setTimeout(()=>{this.pending.delete(J),Q(new E0("The simulator host did not answer.")),this.close()},yJ);this.pending.set(J,{resolve:Z,reject:Q,timer:K}),this.child.stdin.write(`${JSON.stringify({id:J,...$})}
-`)})}close(){if(this.child.exitCode===null&&this.child.signalCode===null)this.child.kill("SIGTERM");this.end()}touch(){clearTimeout(this.idle),this.idle=setTimeout(()=>this.close(),xJ),this.idle.unref?.()}end(){if(this.gone)return;this.gone=!0,clearTimeout(this.idle);for(let $ of this.pending.values())clearTimeout($.timer),$.reject(new E0("The simulator host has exited."));this.pending.clear(),this.onGone()}}var g0=new Map;async function c1($,J,Z=!1){let Q=g0.get(J);if(!Q){let K={started:vJ($,J)};g0.set(J,Q=K),K.started.then((B)=>{if(K.host=B,!B&&g0.get(J)===K)g0.delete(J)})}if(Q.host!==void 0)return Q.host;return Z?Q.started:null}async function vJ($,J){let Z=await Q3($);if(!Z)return null;let Q=Z3(Z,["serve",J],{stdio:["pipe","pipe","ignore"]});if(!await new Promise((V)=>{let U=setTimeout(()=>V(!1),fJ);Q.stdout.once("data",(z)=>{clearTimeout(U),V(String(z).includes('"ready":true'))}),Q.once("exit",()=>{clearTimeout(U),V(!1)}),Q.once("error",()=>{clearTimeout(U),V(!1)})})){if(Q.exitCode===null)Q.kill("SIGTERM");return null}let B=new G5(Q,()=>{let V=g0.get(J);if(V&&(V.host===B||V.host===void 0))g0.delete(J)});return B}function U5($,J,Z,Q,K){return Z3($,["stream",J,String(Z),String(Math.round(Q)),String(K)],{stdio:["pipe","pipe","ignore"]})}var k0={version:"1.8.0",url:"https://github.com/cameroncooke/AXe/releases/download/v1.8.0/AXe-macOS-v1.8.0-universal.tar.gz",sha256:"7b76340b72e90d0f211bc7c4636f15009076eff07acef2f2b632b175debd8834"},sJ=50000,cJ=112640,nJ=174080,K3=2,rJ=60000,aJ=2000,iJ=300,oJ=40,tJ=new Set(["file:","javascript:","data:","vbscript:","blob:"]);function f0($,J,Z={}){return new Promise((Q,K)=>{let B=Y3($,J,{cwd:Z.cwd,stdio:["ignore","pipe","pipe"],signal:Z.signal}),V=[],U=[];B.stdout.on("data",(W)=>V.push(W)),B.stderr.on("data",(W)=>U.push(W));let z=setTimeout(()=>B.kill("SIGKILL"),Z.timeoutMs??sJ);B.on("error",(W)=>{clearTimeout(z),K(W)}),B.on("close",(W)=>{clearTimeout(z),Q({code:W??-1,stdout:Buffer.concat(V).toString("utf8"),stderr:Buffer.concat(U).toString("utf8")})})})}function E($,J){throw new H($,J)}async function l($,J,Z,Q={}){let K=await f0($,J,Q);if(K.code!==0)E("simulator_command_failed",`${Z} failed: ${(K.stderr||K.stdout).trim().slice(-1500)}`);return K.stdout}function B1(){return process.platform==="darwin"&&J0("/Library/Developer/PrivateFrameworks/CoreSimulator.framework")&&J0("/usr/bin/xcrun")}var B3=null;function O0(){return q(C3(),".local","share","reason","simulator","axe")}function j3(){let $=q(O0(),k0.version,"axe");if(J0($))return Promise.resolve($);return B3??=(async()=>{U3(O0(),{recursive:!0,mode:448});let J=N3(q(O0(),".staging-"));try{let Z=q(J,"axe.tgz");await q5(k0.url,k0.sha256,Z);let Q=q(J,"tree");if(U3(Q),await l("tar",["-xzf",Z,"-C",Q],"Extracting AXe"),!J0(q(Q,"axe"))||!J0(q(Q,"Frameworks")))E("simulator_axe_missing","The AXe archive has an unexpected layout.");K1(q(O0(),k0.version),{recursive:!0,force:!0}),dJ(Q,q(O0(),k0.version));for(let K of o1(O0()))if(K!==k0.version&&!K.startsWith(".staging-"))K1(q(O0(),K),{recursive:!0,force:!0});return $}finally{K1(J,{recursive:!0,force:!0}),B3=null}})(),B3}var M5=j3;async function L5($){let J=await j3().catch(()=>null);return J?c1(J,$.udid).catch(()=>null):null}async function r1($,J,Z){let Q=await j3().catch(()=>E("simulator_axe_missing","AXe could not be installed on this Mac.")),K=await f0(Q,[...$,"--udid",J]);if(K.code===0)return K.stdout;let B=(K.stderr||K.stdout).trim();if(/no (matching |accessibility )?element|element not found|could not find|no elements? match/i.test(B))E("simulator_element_not_found",B.slice(-500));return E("simulator_command_failed",`${Z} failed: ${B.slice(-1500)}`)}function eJ($){let J=$.match(/SimRuntime\.([A-Za-z]+)-(\d+)-(\d+)(?:-(\d+))?$/);return J?`${J[1]} ${J[2]}.${J[3]}${J[4]?`.${J[4]}`:""}`:$}function $Z($){switch($){case"Booted":return"booted";case"Booting":return"booting";case"Shutting Down":return"shutting_down";default:return"shutdown"}}async function D3(){let J=JSON.parse(await l("xcrun",["simctl","list","devices","available","-j"],"Listing simulators")).devices??{},Z=[];for(let[Q,K]of Object.entries(J)){if(!Q.includes("SimRuntime.iOS"))continue;for(let B of K){if(B.isAvailable===!1)continue;let V=B.name.toLowerCase();if(B.deviceTypeIdentifier)z3.set(B.udid,B.deviceTypeIdentifier);Z.push({udid:B.udid,name:B.name,runtime:eJ(Q),state:$Z(B.state),kind:V.includes("iphone")?"iphone":V.includes("ipad")?"ipad":"other"})}}return Z.sort((Q,K)=>Number(K.state==="booted")-Number(Q.state==="booted")||K.runtime.localeCompare(Q.runtime,void 0,{numeric:!0})||Q.name.localeCompare(K.name))}var z3=new Map,F3=null;async function a($,J){let Z=await D3(),Q;if($){let K=Z.filter((B)=>B.udid===$||B.name===$);if(Q=K.find((B)=>B.state==="booted")??K[0],!Q)E("simulator_device_not_found",`No simulator named "${$}". Call devices to list them.`)}else{let K=Z.filter((B)=>B.state==="booted");if(Q=K.find((B)=>B.udid===F3)??K.find((B)=>B.kind==="iphone")??K[0],!Q)E("simulator_not_booted","No simulator is booted. Call devices, then boot one.")}if(J.booted&&Q.state!=="booted")E("simulator_not_booted",`${Q.name} is not booted. Boot it first.`);return F3=Q.udid,Q}function x($){return`${$.name} (${$.runtime})`}async function JZ($){if($.state!=="booted"){let J=await f0("xcrun",["simctl","boot",$.udid]);if(J.code!==0&&!/current state: Booted/i.test(J.stderr))E("simulator_command_failed",`Booting ${$.name} failed: ${J.stderr.trim().slice(-1000)}`);await l("xcrun",["simctl","bootstatus",$.udid,"-b"],`Waiting for ${$.name} to boot`,{timeoutMs:45000})}return F3=$.udid,{...$,state:"booted"}}function w3($,J){let Z=W3($,J),Q=D5($,Z);if(Q.startsWith("..")||Q.startsWith(w5)||W3($,Q)!==Z)E("simulator_path_outside_root",`${J} is outside this machine's granted folder (${$}). Pass a path inside it, or one relative to it.`);return Z}var X5=4,ZZ=new Set(["node_modules","Pods","DerivedData","build","Carthage","vendor"]);function QZ($){let J=[],Z=(Q,K)=>{let B;try{B=o1(Q)}catch{return}if(B.includes("project.yml")||B.some((V)=>V.endsWith(".xcworkspace")||V.endsWith(".xcodeproj"))){J.push(Q);return}if(K>=X5)return;for(let V of B.sort()){if(V.startsWith(".")||ZZ.has(V))continue;let U=q(Q,V);try{if(n1(U).isDirectory())Z(U,K+1)}catch{}}};if(Z($,0),J.length===1)return J[0];if(!J.length)E("simulator_project_not_found",`No Xcode project or project.yml within ${X5} folders of ${$}; pass path.`);return E("simulator_project_not_found",`${$} holds several Xcode projects; pass path as one of: ${J.map((Q)=>D5($,Q)||".").join(", ")}.`)}var b0=new Map;async function KZ($){if($.endsWith(".xcworkspace"))return{flag:"-workspace",path:$,dir:X3($)};if($.endsWith(".xcodeproj"))return{flag:"-project",path:$,dir:X3($)};if(!n1($).isDirectory())E("simulator_project_not_found",`${$} is not a project, workspace or folder.`);let J=(K)=>o1($).filter((B)=>B.endsWith(K)).sort();if(J0(q($,"project.yml")))await l("xcodegen",["generate","--quiet"],"xcodegen generate",{cwd:$,timeoutMs:45000}).catch((K)=>J0("/opt/homebrew/bin/xcodegen")?l("/opt/homebrew/bin/xcodegen",["generate","--quiet"],"xcodegen generate",{cwd:$,timeoutMs:45000}):Promise.reject(K));let Z=J(".xcworkspace")[0];if(Z)return{flag:"-workspace",path:q($,Z),dir:$};let Q=J(".xcodeproj")[0];if(Q)return{flag:"-project",path:q($,Q),dir:$};return E("simulator_project_not_found",`No .xcodeproj or .xcworkspace in ${$}.`)}async function O5($){let J=JSON.parse(await l("xcodebuild",["-list","-json",$.flag,$.path],"Listing schemes"));return J.workspace?.schemes??J.project?.schemes??[]}async function BZ($){let J=(await O5($))[0];if(!J)E("simulator_build_no_scheme",`${$.path} has no schemes; pass scheme.`);return J}function VZ($){let J=[],Z=new Set;return $.forEach((Q,K)=>{if(J.length>=20||!/(^|\s)error: /.test(Q)||Q.startsWith("note:")||Z.has(Q))return;Z.add(Q);let B=$.slice(K+1,K+3).filter((V)=>V.trim()!==""&&!/(^|\s)(error|warning|note): /.test(V));J.push([Q,...B].join(`
-`).slice(0,800))}),J}async function GZ($,J,Z){if($.ended=Date.now(),J!==0){if($.log.some((B)=>B.includes("does not contain a scheme named"))){let B=await O5(Z).catch(()=>[]);if(B.length)$.log.push(`error: this project's schemes are: ${B.join(", ")}`)}$.status="failed";return}let Q=q($.productsDir,`${$.configuration}-iphonesimulator`),K=J0(Q)?o1(Q).filter((B)=>B.endsWith(".app")).map((B)=>q(Q,B)).sort((B,V)=>n1(V).mtimeMs-n1(B).mtimeMs):[];if($.appPath=K[0],$.appPath)$.bundleId=await _5($.appPath).catch(()=>{return});if($.status=$.appPath?"succeeded":"failed",!$.appPath)$.log.push("error: the build succeeded but produced no .app for the iOS Simulator")}async function W5($,J){let Z=$.path?w3(J,$.path):QZ(J),Q=await KZ(Z),K=$.scheme??await BZ(Q),B=$.configuration??"Debug",V=await a($.device,{booted:!1}).catch(()=>null),U=V?`platform=iOS Simulator,id=${V.udid}`:"generic/platform=iOS Simulator",z=uJ("sha256").update(Q.path).digest("hex").slice(0,16),W=q(C3(),"Library","Caches","reason","simulator-builds",z),G={id:`build-${pJ().slice(0,8)}`,status:"running",started:Date.now(),log:[],productsDir:q(W,"Build","Products"),configuration:B};b0.set(G.id,G);for(let[C,L]of b0)if(b0.size>20&&L.status!=="running")b0.delete(C);let F=Y3("xcodebuild",[Q.flag,Q.path,"-scheme",K,"-configuration",B,"-destination",U,"-derivedDataPath",W,"-skipMacroValidation","build"],{cwd:Q.dir,stdio:["ignore","pipe","pipe"]}),Y="",N=(C)=>{let L=(Y+C.toString("utf8")).split(`
-`);if(Y=L.pop()??"",G.log.push(...L),G.log.length>5000)G.log.splice(0,G.log.length-5000)};return F.stdout.on("data",N),F.stderr.on("data",N),F.on("error",(C)=>{G.log.push(`error: ${C.message}`),G.status="failed",G.ended=Date.now()}),F.on("close",(C)=>{if(Y)G.log.push(Y);GZ(G,C??-1,Q)}),{text:`Build ${G.id} started: ${K} (${B}) for ${V?x(V):"the iOS Simulator"}. Poll build_status with this build_id; a first build can take minutes, later ones are incremental.`,build:I5(G)}}function I5($){return{id:$.id,status:$.status,errors:VZ($.log),log_tail:$.log.slice(-oJ).join(`
-`).slice(-4000),elapsed_ms:($.ended??Date.now())-$.started,...$.appPath?{app_path:$.appPath}:{},...$.bundleId?{bundle_id:$.bundleId}:{}}}var UZ=45000,XZ=30000;async function V3($,J=UZ){let Z=Date.now()+J;while(b0.get($)?.status==="running"&&Date.now()<Z)await Bun.sleep(500);let Q=A5($);return Q.build?.status==="running"?{...Q,text:`${Q.text} Still running: call build_status with wait again.`}:Q}function A5($){let J=b0.get($);if(!J)E("simulator_build_not_found",`No build ${$} on this Mac (a worker restart forgets builds); start a new one.`);let Z=I5(J);return{text:J.status==="running"?`Build ${$} is running (${Math.round(Z.elapsed_ms/1000)} s).`:J.status==="succeeded"?`Build ${$} succeeded: ${J.appPath}. Launch it with app_path.`:`Build ${$} failed with ${Z.errors.length} error(s).`,build:Z}}async function _5($){return(await l("plutil",["-extract","CFBundleIdentifier","raw","-o","-",q($,"Info.plist")],"Reading the bundle id")).trim()}var H0=new Map;function WZ($,J){H0.get($.udid)?.stop();let Z=Y3("script",["-q","/dev/null","xcrun","simctl","launch","--console-pty","--terminate-running-process",$.udid,J],{stdio:["ignore","pipe","pipe"]}),Q={udid:$.udid,bundleId:J,lines:[],first:0,stop:()=>Z.kill("SIGTERM")};H0.set($.udid,Q);let K="",B=(V)=>{let U=(K+V.toString("utf8").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\r]/g,"")).split(`
-`);K=U.pop()??"",Q.lines.push(...U);let z=Q.lines.length-aJ;if(z>0)Q.lines.splice(0,z),Q.first+=z};return Z.stdout.on("data",B),Z.stderr.on("data",B),new Promise((V)=>{let U=setTimeout(()=>V(null),15000),z=()=>{let W=Q.lines.concat(K).join(`
-`).match(new RegExp(`${J.replace(/\./g,"\\.")}: (\\d+)`))?.[1];if(W)clearTimeout(U),V(Number(W))};Z.stdout.on("data",z),Z.on("close",()=>{clearTimeout(U),V(null)})})}async function zZ($,J){let Z=await a($.device,{booted:!0}),Q=$.bundle_id;if($.app_path){let B=FZ(J,$.app_path);await l("xcrun",["simctl","install",Z.udid,B],`Installing ${j5(B)}`),Q=await _5(B)}if($.bundle_id){if((await f0("xcrun",["simctl","get_app_container",Z.udid,$.bundle_id])).code!==0)E("simulator_app_not_installed",`${$.bundle_id} is not installed on ${x(Z)}.`)}let K=await WZ(Z,Q);if(K===null){let B=H0.get(Z.udid)?.lines.slice(-20).join(`
-`)??"";E("simulator_launch_failed",`${Q} did not start on ${x(Z)}.${B?`
-${B}`:""}`)}return{text:`Launched ${Q} on ${x(Z)} (pid ${K}). Its console is captured; read it with logs.`,device:Z}}function FZ($,J){let Z=W3(J),Q=q(C3(),"Library","Caches","reason","simulator-builds")+w5;return Z.startsWith(Q)&&Z.endsWith(".app")?Z:w3($,Z)}function YZ($,J){let Z=H0.get($.udid);if(!Z)return{text:`No app launched by Reason is running on ${x($)}; launch one to capture its capture.`,logs:{lines:[],next:0}};let Q=Math.max(J??0,Z.first,Z.first+Z.lines.length-iJ),K=Z.lines.slice(Q-Z.first).map((B)=>B.slice(0,2000));return{text:`${K.length} console line(s) from ${Z.bundleId} on ${x($)}.`,logs:{lines:K,next:Z.first+Z.lines.length}}}var a1=new Map;function z5($,...J){let Z=a1.get($.udid);if(!Z)return;for(let[Q,K]of J)if(Q>Z.width||K>Z.height)E("simulator_point_off_screen",`(${Q}, ${K}) is off ${$.name}'s ${Z.width}x${Z.height}-point screen.`)}function F5($,J){if($.kind==="ipad")return 2;return J===750||J===828||J===640?2:3}async function M3($,J=1,Z){let Q=N3(q(C5(),"reason-sim-"));try{let K=q(Q,"screen.png");if(await l("xcrun",["simctl","io",$.udid,"screenshot","--type=png",K],"Taking a screenshot"),Z){U3(X3(Z),{recursive:!0});let N=await l("sips",["-g","pixelWidth","-g","pixelHeight",K],"Reading the screenshot size"),C=Number(N.match(/pixelWidth: (\d+)/)?.[1]),L=Number(N.match(/pixelHeight: (\d+)/)?.[1]),D=2/F5($,C);await l("sips",["-z",String(Math.round(L*D)),String(Math.round(C*D)),K,"--out",Z],"Saving the screenshot")}let B=await l("sips",["-g","pixelWidth","-g","pixelHeight",K],"Reading the screenshot size"),V=Number(B.match(/pixelWidth: (\d+)/)?.[1]),U=Number(B.match(/pixelHeight: (\d+)/)?.[1]),z=F5($,V),W=Math.round(V/z),G=Math.round(U/z);a1.set($.udid,{width:W,height:G});let F=Buffer.alloc(0),Y=J===2?nJ:cJ;for(let N of[70,50,35]){let C=q(Q,`screen-${N}.jpg`);if(await l("sips",["-z",String(G*J),String(W*J),"-s","format","jpeg","-s","formatOptions",String(N),K,"--out",C],"Encoding the screenshot"),F=H3(C),F.byteLength<=Y)break}return{text:`Screenshot of ${x($)} at ${W}x${G} points: image pixels are tap coordinates.`+(Z?` Saved at ${Z}.`:""),device:$,image:{mime:"image/jpeg",data:F.toString("base64"),width:W,height:G}}}finally{K1(Q,{recursive:!0,force:!0})}}async function NZ($){let J=await L5($);if(J)try{return String((await J.call({op:"tree"})).tree)}catch{}return r1(["describe-ui"],$.udid,"Reading the accessibility tree")}async function i1($){let J=JSON.parse(await NZ($)),Z={lines:[],compact:[],ids:new Set,labels:new Set,targets:[]},Q=(K,B,V="")=>{let U=(K.role??K.type??"?").replace(/^AX/,""),z=K.AXLabel||K.title||"",W=K.AXValue?` value="${String(K.AXValue).slice(0,120)}"`:"",G=K.AXUniqueId?` id=${K.AXUniqueId}`:"";if(K.AXUniqueId)Z.ids.add(K.AXUniqueId);if(z)Z.labels.add(z);let F=K.frame;if(U==="Application"&&F&&!Z.bounds)Z.bounds={width:F.width,height:F.height};if(F&&F.width>0&&F.height>0&&(K.AXUniqueId||K.AXLabel))Z.targets.push({...K.AXUniqueId?{id:K.AXUniqueId.trim()}:{},...K.AXLabel?{label:K.AXLabel.trim()}:{},role:U,frame:F});let Y=Boolean(z||G||W||!["Group","Other"].includes(U));if(Y){let N=`${"  ".repeat(Math.min(B,12))}${U} "${z.slice(0,160)}"${G}${W}`+(F?` (${Math.round(F.x)},${Math.round(F.y)} ${Math.round(F.width)}x${Math.round(F.height)})`:"")+(K.enabled===!1?" disabled":"");Z.lines.push(N);let C=U==="Image"&&!G,L=(U==="StaticText"||U==="Image")&&!G&&z!==""&&V.includes(z);if(!C&&!L)Z.compact.push(N)}for(let N of K.children??[])Q(N,Y?B+1:B,z||V)};for(let K of J)Q(K,0);return Z}function P5($,J,Z=!1){let Q=(Z?$.compact:$.lines).join(`
-`);return Q.length>J?`${Q.slice(0,J)}
-\u2026 (truncated)`:Q}async function HZ($){let J=await i1($);return{text:`Accessibility tree of ${x($)} (frames in points; tap by id or label):
-${P5(J,rJ)}`,device:$}}var CZ=450,jZ=1e4;function DZ($,J){let Z=J.id?$.ids.has(J.id):[...$.labels].some((Q)=>Q===J.label||Q.includes(J.label));return J.gone?!Z:Z}async function I0($,J,Z){let Q=J.observe??"tree";if(Q==="none"&&!J.wait_for)return Z;let K=null,B="";if(J.wait_for){let U=Date.now()+(J.timeout??5)*1000,z=J.wait_for,W=z.id?`id ${z.id}`:`"${z.label}"`;for(;;){if(K=await i1($),DZ(K,z)){B=` ${W} is ${z.gone?"gone":"on screen"}.`;break}if(Date.now()>=U){B=z.gone?` Waited ${J.timeout??5} s: ${W} is still on screen.`:` Waited ${J.timeout??5} s: ${W} is not in the visible accessibility tree. Lists only build their visible rows, so check the screen below: it may be open with that element further down (scroll to it), or wait for something at its top.`;break}await Bun.sleep(250)}}else await Bun.sleep(CZ);let V={...Z,text:`${Z.text}${B}`};if(Q==="tree"||Q==="both")K??=await i1($),V.screen=P5(K,jZ,!0),V.text+=`
-Screen now:
-${V.screen}`;if(Q==="screenshot"||Q==="both"){let U=await M3($);V.image=U.image}return V}function Y5($){return`'${$.replace(/'/g,"'\\''")}'`}function wZ($){switch($.action){case"tap":if($.x!==void 0&&$.y!==void 0)return $.duration?`touch -x ${$.x} -y ${$.y} --down --up --delay ${$.duration}`:`tap -x ${$.x} -y ${$.y}`;return $.id?`tap --id ${Y5($.id)}`:`tap --label ${Y5($.label)}`;case"swipe":return`swipe --start-x ${$.x} --start-y ${$.y} --end-x ${$.x2} --end-y ${$.y2} --duration ${$.duration??0.3}`;case"button":return`button ${$.name.replace("_","-")}`;case"sleep":return`sleep ${$.seconds}`}}var T5=0.35,MZ=new Set(["Button","Link","Cell","MenuItem","Switch","Toggle","CheckBox","PopUpButton","TextField","SecureTextField","SearchField","TextArea","Slider","Tab","RadioButton"]);function LZ($,J){let Z=$.targets.filter((W)=>J.id!==void 0?W.id===J.id.trim():W.label===J.label?.trim()),Q=(W)=>({x:W.frame.x+W.frame.width/2,y:W.frame.y+W.frame.height/2}),K=$.bounds,B=K?Z.filter((W)=>{let{x:G,y:F}=Q(W);return G>=0&&F>=0&&G<=K.width&&F<=K.height}):Z,V=B.length?B:Z,U=V.filter((W)=>MZ.has(W.role)),z=(U.length?U:V)[0];return z?Q(z):null}async function OZ($,J,Z,Q,K){let B=Date.now()+Z*1000;for(;;){let V=LZ(await i1($),J);if(V)return V;if(Date.now()>=B){let U=J.id!==void 0?`--id '${J.id}'`:`--label '${J.label}'`;return E("simulator_element_not_found",`Error: Step ${Q} failed: [tap]
-No accessibility element matched ${U}. Make sure the app is on the expected screen, then inspect it and prefer an id when there is one.
-(${Q-1} of ${K} steps had completed.)`)}await Bun.sleep(250)}}async function S0($,J,Z){let Q=await L5($);if(!Q)return N5($,J,Z);for(let[K,B]of J.entries()){try{switch(B.action){case"tap":{let U=B.x!==void 0&&B.y!==void 0?{x:B.x,y:B.y}:await OZ($,B,Z,K+1,J.length);await Q.call(B.duration?{op:"tap",...U,duration:B.duration}:{op:"tap",...U});break}case"swipe":await Q.call({op:"swipe",x:B.x,y:B.y,x2:B.x2,y2:B.y2,duration:B.duration??0.3});break;case"button":await Q.call({op:"button",name:B.name});break;case"type":await Q.call({op:"text",text:B.text}).catch((U)=>U instanceof Q1?r1(["type",B.text],$.udid,`Step ${K+1} (typing)`):Promise.reject(U));break;case"sleep":await Bun.sleep(B.seconds*1000);break}}catch(U){if(U instanceof E0)return await N5($,J.slice(K),Z),`Ran ${J.length} step(s) on ${x($)}.`;if(U instanceof Q1)E("simulator_command_failed",`Step ${K+1} failed: ${U.message}
-(${K} of ${J.length} steps had completed.)`);throw U}let V=J[K+1];if(B.action!=="sleep"&&V&&V.action!=="sleep")await Bun.sleep(T5*1000)}return`Ran ${J.length} step(s) on ${x($)}.`}async function N5($,J,Z){let Q=[],K=[],B=0,V=0,U=async()=>{if(Q.length===0)return;let z=["batch","--ax-cache","perStep","--wait-timeout",String(Z)];for(let W of Q)z.push("--step",W);try{await r1(z,$.udid,`Steps ${V+1}-${V+B}`)}catch(W){if(W instanceof H){let G=W.message.replace(/Step (\d+) failed/,(F,Y)=>{let N=K[Number(Y)-1];return N?`Step ${N} failed`:F});E(W.code,`${G}
-(${V} of ${J.length} steps had completed before this batch.)`)}throw W}V+=B,Q=[],K=[],B=0};for(let[z,W]of J.entries()){if(W.action==="type"){await U(),await r1(["type",W.text],$.udid,`Step ${V+1} (typing)`),V+=1;continue}Q.push(wZ(W)),B+=1,K.push(z+1);let G=J[z+1];if(W.action!=="sleep"&&G&&G.action!=="sleep")Q.push(`sleep ${T5}`),K.push(z+1)}return await U(),`Ran ${J.length} step(s) on ${x($)}.`}var IZ=["topLeft","top","topRight","right","bottomRight","bottom","bottomLeft","left"],H5=new Map,AZ=`ObjC.import("AppKit");
-function run(argv) {
-  const [input, output, width, height] = argv;
-  const w = Number(width), h = Number(height);
-  const image = $.NSImage.alloc.initWithContentsOfFile(input);
-  const rep = $.NSBitmapImageRep.alloc.initWithBitmapDataPlanesPixelsWidePixelsHighBitsPerSampleSamplesPerPixelHasAlphaIsPlanarColorSpaceNameBytesPerRowBitsPerPixel(
-    null, w, h, 8, 4, true, false, $.NSDeviceRGBColorSpace, 0, 0);
-  $.NSGraphicsContext.saveGraphicsState;
-  $.NSGraphicsContext.setCurrentContext($.NSGraphicsContext.graphicsContextWithBitmapImageRep(rep));
-  image.drawInRectFromRectOperationFraction($.NSMakeRect(0, 0, w, h), $.NSZeroRect, $.NSCompositingOperationCopy, 1);
-  $.NSGraphicsContext.restoreGraphicsState;
-  rep.representationUsingTypeProperties($.NSBitmapImageFileTypePNG, $()).writeToFileAtomically(output, true);
-}`;async function G3($,J,Z){let Q=await l("sips",["-g","pixelWidth","-g","pixelHeight",$],"Reading the frame size"),K=Number(Q.match(/pixelWidth: ([\d.]+)/)?.[1]),B=Number(Q.match(/pixelHeight: ([\d.]+)/)?.[1]);if(Z!==void 0)K=K*Z/B,B=Z;let V=N3(q(C5(),"reason-chrome-"));try{let U=q(V,"render.js"),z=q(V,"out.png");if(lJ(U,AZ),await l("osascript",["-l","JavaScript",U,$,z,String(Math.max(1,Math.round(K*J))),String(Math.max(1,Math.round(B*J)))],"Rendering the frame"),!J0(z))E("simulator_command_failed",`Rendering ${j5($)} produced no image.`);return{image:H3(z).toString("base64"),width:K,height:B}}finally{K1(V,{recursive:!0,force:!0})}}async function _Z($){if(!z3.has($.udid))await D3();let J=z3.get($.udid),Q=JSON.parse(await l("xcrun",["simctl","list","devicetypes","-j"],"Listing device types")).devicetypes?.find((K)=>K.identifier===J)?.bundlePath;if(!Q)E("simulator_command_failed",`No device type bundle for ${$.name}.`);return Q}async function PZ($){let J=await _Z($),Z=a1.get($.udid)??($.state==="booted"?(await M3($),a1.get($.udid)):void 0);if(!Z)E("simulator_not_booted",`${$.name} is not booted.`);let Q=H5.get(J);if(Q)return{text:`Frame of ${x($)}.`,device:$,chrome:Q};let K=q(J,"Contents","Resources"),B=JSON.parse(await l("plutil",["-convert","json","-o","-",q(K,"profile.plist")],"Reading the device profile")),V=B.framebufferMask?q(K,`${B.framebufferMask}.pdf`):null,U=V&&J0(V)?await G3(V,K3,Z.height):null,z=B.chromeIdentifier?.split(".").pop(),W=z?q("/Library/Developer/DeviceKit/Chrome",`${z}.devicechrome`,"Contents","Resources"):"";if(!z||!J0(q(W,"chrome.json")))E("simulator_command_failed",`${$.name} has no device frame in this Xcode.`);let G=JSON.parse(H3(q(W,"chrome.json"),"utf8")),F={};for(let M of IZ){let O=G.images[M];if(!O)E("simulator_command_failed",`${$.name}'s frame has no ${M} piece.`);F[M]=await G3(q(W,`${O}.pdf`),K3)}let{sizing:Y}=G.images,N={top:Y.topHeight,left:Y.leftWidth,bottom:Y.bottomHeight,right:Y.rightWidth},C=Z.width+N.left+N.right,L=Z.height+N.top+N.bottom,D=[];for(let M of G.inputs??[]){let O=q(W,`${M.image}.pdf`);if(!J0(O))continue;let A=await G3(O,K3),{x:S,y:v}=M.offsets.normal,s=(C0,m,Y1)=>C0<0?m+C0-Y1:C0,z0=M.anchor==="left"?{x:S-A.width,y:s(v,L,A.height)}:M.anchor==="right"?{x:C+S,y:s(v,L,A.height)}:M.anchor==="top"?{x:s(S,C,A.width),y:v-A.height}:{x:s(S,C,A.width),y:L+v};D.push({name:M.name,image:A.image,...z0,width:A.width,height:A.height})}let j={identifier:G.identifier,screen:{width:Z.width,height:Z.height},inset:N,padding:G.images.devicePadding??{top:0,left:0,bottom:0,right:0},pieces:F,buttons:D,...U?{screen_mask:U.image}:{}};return H5.set(J,j),{text:`Frame of ${x($)}.`,device:$,chrome:j}}var TZ=new Set(["simulator_command_failed","simulator_launch_failed","simulator_point_off_screen","simulator_build_no_scheme","simulator_element_not_found","simulator_path_outside_root","simulator_project_not_found"]);async function V1($){try{return await R5($)}catch(J){if(J instanceof H&&TZ.has(J.code))return{text:J.message,error:J.code};throw J}}async function R5($){if(!B1())E("simulator_xcode_missing","Xcode's iOS Simulator is not available on this Mac.");let J=t2.safeParse($.payload);if(!J.success)E("simulator_invalid_request",J.error.issues.map((Q)=>Q.message).join("; "));let Z=J.data;switch(Z.action){case"devices":{let Q=await D3(),K=Q.filter((B)=>B.state==="booted");return{text:`${K.length} booted (${K.map(x).join(", ")||"none"}), ${Q.length} available.`,devices:Q}}case"boot":{let Q=await JZ(await a(Z.device,{booted:!1}));return{text:`${x(Q)} is booted.`,device:Q}}case"shutdown":{let Q=await a(Z.device,{booted:!1});H0.get(Q.udid)?.stop(),H0.delete(Q.udid);let K=await f0("xcrun",["simctl","shutdown",Q.udid]);if(K.code!==0&&!/current state: Shutdown/i.test(K.stderr))E("simulator_command_failed",K.stderr.trim().slice(-1000));return{text:`${x(Q)} is shut down.`,device:{...Q,state:"shutdown"}}}case"build":{let Q=await W5(Z,$.root);return Z.wait&&Q.build?V3(Q.build.id):Q}case"build_status":return Z.wait?V3(Z.build_id):A5(Z.build_id);case"run":{let Q=await W5({...Z,action:"build"},$.root),K=await V3(Q.build.id,XZ);if(K.build?.status!=="succeeded"||!K.build.app_path)return K;let B=await R5({root:$.root,payload:{action:"launch",app_path:K.build.app_path,...Z.device?{device:Z.device}:{},...Z.steps?{steps:Z.steps}:{},...Z.observe?{observe:Z.observe}:{},...Z.wait_for?{wait_for:Z.wait_for}:{},...Z.timeout!==void 0?{timeout:Z.timeout}:{}}});return{...B,text:`Built in ${Math.round(K.build.elapsed_ms/1000)} s. ${B.text}`,build:K.build}}case"launch":{let Q=await zZ(Z,$.root);if(!Q.device)return Q;if(Z.steps?.length)Q.text+=` ${await S0(Q.device,Z.steps,Z.timeout??8)}`;else if(!Z.wait_for)await Bun.sleep(1000);return I0(Q.device,Z,Q)}case"steps":{let Q=await a(Z.device,{booted:!0});return I0(Q,Z,{text:await S0(Q,Z.steps,Z.timeout??5),device:Q})}case"terminate":{let Q=await a(Z.device,{booted:!0});if(H0.get(Q.udid)?.bundleId===Z.bundle_id)H0.get(Q.udid)?.stop();return await f0("xcrun",["simctl","terminate",Q.udid,Z.bundle_id]),{text:`Terminated ${Z.bundle_id} on ${x(Q)}.`,device:Q}}case"logs":return YZ(await a(Z.device,{booted:!1}),Z.after);case"screenshot":return M3(await a(Z.device,{booted:!0}),Z.scale,Z.save_path?w3($.root,Z.save_path):void 0);case"chrome":return PZ(await a(Z.device,{booted:!1}));case"inspect":return HZ(await a(Z.device,{booted:!0}));case"tap":{let Q=await a(Z.device,{booted:!0}),K=Z.x!==void 0&&Z.y!==void 0;if(K)z5(Q,[Z.x,Z.y]);await S0(Q,[K?{action:"tap",x:Z.x,y:Z.y,...Z.duration&&Z.duration>0?{duration:Z.duration}:{}}:Z.id?{action:"tap",id:Z.id}:{action:"tap",label:Z.label}],3);let B=K?`(${Z.x}, ${Z.y})`:Z.id?`id ${Z.id}`:`"${Z.label}"`;return I0(Q,Z,{text:`Tapped ${B} on ${x(Q)}.`,device:Q})}case"swipe":{let Q=await a(Z.device,{booted:!0});return z5(Q,[Z.x,Z.y],[Z.x2,Z.y2]),await S0(Q,[{action:"swipe",x:Z.x,y:Z.y,x2:Z.x2,y2:Z.y2,...Z.duration!==void 0?{duration:Z.duration}:{}}],3),I0(Q,Z,{text:`Swiped (${Z.x}, ${Z.y}) \u2192 (${Z.x2}, ${Z.y2}) on ${x(Q)}.`,device:Q})}case"type":{let Q=await a(Z.device,{booted:!0});return await S0(Q,[{action:"type",text:Z.text}],3),I0(Q,Z,{text:`Typed ${Z.text.length} character(s) on ${x(Q)}.`,device:Q})}case"button":{let Q=await a(Z.device,{booted:!0});return await S0(Q,[{action:"button",name:Z.name}],3),I0(Q,Z,{text:`Pressed ${Z.name} on ${x(Q)}.`,device:Q})}case"open_url":{let Q=await a(Z.device,{booted:!0}),K;try{K=new URL(Z.url)}catch{E("simulator_invalid_request","open_url needs an absolute URL.")}if(tJ.has(K.protocol))E("simulator_invalid_request",`${K.protocol} URLs are not allowed.`);return await l("xcrun",["simctl","openurl",Q.udid,K.href],"Opening the URL"),I0(Q,Z,{text:`Opened ${K.href} on ${x(Q)}.`,device:Q})}case"appearance":{let Q=await a(Z.device,{booted:!0});return await l("xcrun",["simctl","ui",Q.udid,"appearance",Z.mode],"Setting the appearance"),{text:`${x(Q)} is in ${Z.mode} mode.`,device:Q}}}}import{mkdtempSync as RZ,readFileSync as qZ,rmSync as gZ}from"fs";import{tmpdir as EZ}from"os";import{join as g5}from"path";import{spawn as b5}from"child_process";var kZ=/^[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}$/i,G1=1,SZ=[{bit:8,dx:0,dy:1},{bit:16,dx:0,dy:-1},{bit:32,dx:1,dy:0},{bit:64,dx:-1,dy:0}],E5=60,bZ=8,f5=B1;var k5={65293:40,65421:40,65307:41,65288:42,65289:43,65535:76,65360:74,65367:77,65365:75,65366:78,65361:80,65362:82,65363:79,65364:81,65505:225,65506:229,65507:224,65508:228,65513:226,65514:230,65515:227,65516:231,65511:227,65512:231,65509:57},fZ=(()=>{let $={" ":44};"abcdefghijklmnopqrstuvwxyz".split("").forEach((Z,Q)=>{$[Z]=4+Q,$[Z.toUpperCase()]=4+Q}),"1234567890".split("").forEach((Z,Q)=>{$[Z]=30+Q}),"!@#$%^&*()".split("").forEach((Z,Q)=>{$[Z]=30+Q});let J=[["-","_",45],["=","+",46],["[","{",47],["]","}",48],["\\","|",49],[";",":",51],["'",'"',52],["`","~",53],[",","<",54],[".",">",55],["/","?",56]];for(let[Z,Q,K]of J)$[Z]=K,$[Q]=K;return $})();function yZ($){if(k5[$]!==void 0)return k5[$];return $>=32&&$<=126?fZ[String.fromCharCode($)]??null:null}function y5($,J){let Z=b5("xcrun",["simctl","pbcopy",$],{stdio:["pipe","ignore","ignore"]});Z.once("error",()=>{}),Z.stdin.end(J)}function xZ($,J){let Z=0,Q={x:0,y:0},K=(B)=>{J.call(B).catch(()=>{})};return{pointer(B,V,U){let z=(U&G1)!==0;if(z&&!(Z&G1))K({op:"touch",phase:"down",x:B,y:V});else if(z&&(B!==Q.x||V!==Q.y))K({op:"touch",phase:"move",x:B,y:V});else if(!z&&Z&G1)K({op:"touch",phase:"up",x:B,y:V});for(let W of SZ)if(U&W.bit&&!(Z&W.bit))K({op:"swipe",x:B,y:V,x2:B+W.dx*E5,y2:V+W.dy*E5,duration:0.08});Z=U,Q={x:B,y:V}},key(B,V){let U=yZ(V);if(U!==null)K({op:"key",usage:U,down:B})},clipboard(B){y5($,B)},close(){if(Z&G1)K({op:"touch",phase:"up",...Q});Z=0}}}function hZ($,J){let Z=null,Q="",K,B=(V)=>{V1({payload:{...V,device:$,observe:"none"},root:J}).catch(()=>{})};return{pointer(V,U,z){let W=(z&G1)!==0;if(W&&!Z)Z={x:V,y:U,at:Date.now()};if(!W&&Z){let G=(Date.now()-Z.at)/1000;if(Math.hypot(V-Z.x,U-Z.y)>bZ)B({action:"swipe",x:Z.x,y:Z.y,x2:V,y2:U,duration:Math.min(Math.max(G,0.05),1)});else B({action:"tap",x:Z.x,y:Z.y,...G>0.5?{duration:Math.min(G,10)}:{}});Z=null}},key(V,U){if(!V)return;let z=U===65293?`
-`:U>=32&&U<=126?String.fromCharCode(U):null;if(z===null)return;Q+=z,clearTimeout(K),K=setTimeout(()=>{let W=Q;Q="",B({action:"type",text:W})},250)},clipboard(V){y5($,V)},close(){clearTimeout(K),Z=null}}}function mZ($,J,Z){return new Promise((Q,K)=>{let B=b5($,J,{stdio:"ignore",signal:Z});B.once("error",K),B.once("exit",(V)=>Q(V??-1))})}async function vZ($,J){let Z=RZ(g5(EZ(),"reason-simulator-stream-"));try{let Q=g5(Z,"screen.png");if(await mZ("xcrun",["simctl","io",$,"screenshot","--type=png",Q],J)!==0)throw new H("simulator_not_booted","That simulator is not booted.");let K=qZ(Q).subarray(16,24);return{width:K.readUInt32BE(0),height:K.readUInt32BE(4)}}finally{gZ(Z,{recursive:!0,force:!0})}}async function x5($,J={}){let{udid:Z,...Q}=$.payload;if(typeof Z!=="string"||!kZ.test(Z)||!Q.video)throw new H("invalid_display_request","Reason simulator stream request is malformed.");let K=await M5().catch(()=>{throw new H("simulator_axe_missing","AXe could not be installed on this Mac.")}),B=await V1({payload:{action:"screenshot",device:Z},root:$.root});if(B.error||!B.image)throw new H("simulator_not_booted","That simulator is not booted.");let V={width:B.image.width,height:B.image.height},U=await Q3(K),z=U?await c1(K,Z,!0):null,W=U?null:await S5();if(!U&&!W)throw new H("display_video_unsupported","This Mac can build neither the simulator host nor find an H.264 ffmpeg.");let G={kind:"simulator",udid:Z,axe:K,points:V,sound:null,size:U?V:await vZ(Z,$.signal),stream:U?(F,Y,N)=>U5(U,Z,Math.min(F,60),N,Y):null,input:z?xZ(Z,z):hZ(Z,$.root)};return await t1({payload:Q,signal:$.signal},{...J,video:{desktop:async()=>G,...W?{ffmpeg:()=>W}:{}}})}var R7=131072,tZ=131072,eZ=128,q7=8192,f3=30000,y3=15000,$Q=/^[a-z][a-z0-9_]{0,63}$/,JQ=new Set(["jobs.control","fs.read","fs.write"]),h5=new Set(["cancelled","run_finished","run_cancelled","driver_handoff","driver_stopped"]);function e1($){return $.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/[a-z]/gi,(J)=>`[${J.toLowerCase()}${J.toUpperCase()}]`)}function m5($){return $.map(e1).join("/")}function L3($,J){let Z=[];for(let Q=0;Q<$.length;Q+=J)Z.push($.slice(Q,Q+J));return Z}var ZQ=[...L3(D1,4).map(($)=>`/(${$.map(m5).join("|")})(/|$)`),...L3(w1,4).map(($)=>`/(${$.map(m5).join("|")})$`),...L3([...M1],6).map(($)=>`/(${$.map(e1).join("|")})$`),`/${e1(".env")}\\.[^/]+$`,`/[^/]+(${L1.map(e1).join("|")})$`],g3=new Set(["add","am","apply","branch","checkout","cherry-pick","clean","commit","merge","mv","rebase","remote","reset","restore","revert","rm","stash","switch","tag"]),g7=new Set(["blame","diff","for-each-ref","grep","log","ls-files","rev-list","rev-parse","shortlog","show","status"]);function E7($){return[$.requiredPermission,...$.additionalPermissions??[]]}function QQ($){return v6($)}function E3(){if(R()==="darwin")return G0("/usr/bin/sandbox-exec");if(R()==="linux"||R()==="win32")return p6();return!1}function v5(){if(R()==="linux")return G0("/proc");if(R()==="win32")return c6()!==null;if(!E3())return!1;if(R()==="darwin")return G0("/usr/sbin/lsof");return!1}function k7(){return R()==="darwin"?"/bin/zsh":d6()}function W1($){return Boolean($)&&typeof $==="object"&&!Array.isArray($)}function KQ($){if(!W1($))throw new H("invalid_payload","Operation payload must be an object.");if(Buffer.byteLength(JSON.stringify($),"utf8")>Y0)throw new H("payload_too_large","Operation payload exceeds 256 KB.");return $}function u0($,J){let Z=$[J];if(Z===void 0||Z===null)return;if(typeof Z!=="string")throw new H("invalid_payload",`${J} must be a string.`);return Z}function K2($,J,Z=q7){let Q=u0($,J);if(!Q||Buffer.byteLength(Q,"utf8")>Z||Q.includes("\x00"))throw new H("invalid_payload",`${J} is missing or too large.`);return Q}function BQ($,J,Z){let Q=$[J];if(typeof Q!=="string"||Q.includes("\x00")||Buffer.byteLength(Q,"utf8")>Z)throw new H("invalid_payload",`${J} is missing or too large.`);return Q}function z1($,J,Z,Q){if($===void 0||$===null)return J;if(typeof $!=="number"||!Number.isInteger($))throw new H("invalid_payload","Expected a bounded integer.");return Math.min(Math.max($,Z),Q)}function A0($,J){if(R()==="win32")[$,J]=[$.toLowerCase(),J.toLowerCase()];return J===$||J.startsWith(`${$}${iZ}`)}function x0($){if(S6($))throw new H("protected_path","This path is on Reason's credential denylist. The Mac's owner can allow it with `reason permissions protected allow <path>` or Request permission in Files.")}function h($){let J;try{J=B0($.path)}catch(Z){if(process.platform==="darwin"&&G7(Z))throw U7($.path);throw new H("root_unavailable","The granted root is unavailable.")}if(J!==$.path||!F1(J).isDirectory())throw new H("root_changed","The granted root changed after registration.");return x0(J),J}function x3($,J="."){if(!J||J.includes("\x00")||rZ(J))throw new H("path_outside_root","Paths must be relative to the granted root.");if(R()==="win32"&&J.split(/[\\/]/).some(b1))throw new H("invalid_path","Windows reserves this file name.");let Z=aZ($,J);if(!A0($,Z))throw new H("path_outside_root","Path escapes the granted root.");return Z}function v0($,J=".",Z=!1){let Q=x3($,J),K;try{K=B0(Q)}catch(B){if(y7(B))throw x7();throw new H("path_not_found","Path does not exist.")}if(!A0($,K))throw new H("symlink_escape","Path resolves outside the granted root.");if(!Z)x0(K);return K}function VQ($,J){let Z=x3($,J);if(x0(Z),G0(Z)){let B=B0(Z);if(!A0($,B))throw new H("symlink_escape","Write target resolves outside the granted root.");if(R3(Z).isSymbolicLink())throw new H("symlink_escape","Writing through a symlink is not allowed.");return x0(B),B}let Q=X1(Z);while(!G0(Q)){let B=X1(Q);if(B===Q)throw new H("path_outside_root","No safe write parent.");Q=B}let K=B0(Q);if(!A0($,K))throw new H("symlink_escape","Write parent resolves outside the granted root.");return x0(K),Z}function S7($,J){return q3($,J)||"."}function GQ($,J=R7){let Z=Buffer.from($,"utf8");if(Z.byteLength<=J)return{value:$,truncated:!1};return{value:Z.subarray(0,J).toString("utf8"),truncated:!0}}function b7($,J){return{...u6({home:$,temporaryDirectory:J}),ZDOTDIR:J,BASH_ENV:"/dev/null",ENV:"/dev/null",GIT_CONFIG_NOSYSTEM:"1",GIT_CONFIG_GLOBAL:"/dev/null",GIT_TERMINAL_PROMPT:"0",GIT_OPTIONAL_LOCKS:"0"}}function UQ($,J,Z,Q=!1){return["(version 1)","(deny default)",'(import "system.sb")',"(allow process*)",'(allow file-read* (subpath "/opt/homebrew") (subpath "/usr/local"))',...Q?['(allow file-read* (subpath "/dev"))']:[],`(allow file-read* (subpath ${JSON.stringify($)}))`,`(allow file-read* file-write* (subpath ${JSON.stringify(J)}))`,...Z?[`(allow file-write* (subpath ${JSON.stringify($)}))`]:[],...ZQ.map((K)=>`(deny file-read* file-write* (regex #"${K}"))`),...b6($,Z),"(deny network*)"].join(`
-`)}async function h3($,J,Z){return new Promise((Q,K)=>{let B="",V="",U=!1,z=!1,W=!1,G;try{G=oZ($,J,{cwd:Z.cwd,env:Z.env,shell:!1,stdio:["ignore","pipe","pipe"],...f6()}),y6(G)}catch(L){K(L);return}let F=(L,D)=>{if(W)return;W=!0,clearTimeout(C),Z.signal.removeEventListener("abort",N),Q({exitCode:L,signal:D,stdout:B,stderr:V,timedOut:z,truncated:U})},Y=(L,D)=>{let j=`${L}${String(D)}`,M=GQ(j);return U||=M.truncated,M.value};G.stdout.on("data",(L)=>{B=Y(B,L)}),G.stderr.on("data",(L)=>{V=Y(V,L)}),G.once("error",K),G.once("exit",F);let N=()=>{try{if(R()==="win32"&&G.pid)x6(G.pid);else G.kill("SIGTERM")}catch{}};Z.signal.addEventListener("abort",N,{once:!0});let C=setTimeout(()=>{z=!0,N()},Z.timeoutMs)})}var u5=null;function XQ(){return u5??=l6({scrubEnvironment:b7,spawnCaptured:h3,isProtectedPath:R0}),u5}var WQ=async($,J,Z)=>{if(R()==="linux"||R()==="win32")return XQ()($,J,Z);if(R()!=="darwin"||!G0("/usr/bin/sandbox-exec"))throw new H("sandbox_unavailable","Confined command execution is unavailable on this operating system.");let Q=dZ(T7(nZ(),"reason-device-"));try{return await h3("/usr/bin/sandbox-exec",["-p",UQ(Z.root,Q,Z.allowWrite,Z.allowProcessInspection===!0),$,...J],{cwd:Z.cwd,timeoutMs:Z.timeoutMs,signal:Z.signal,env:b7(Z.root,Q)})}finally{sZ(Q,{recursive:!0,force:!0})}};function zQ($){let J=$.args;if(J===void 0)return[];if(!Array.isArray(J)||J.length>eZ)throw new H("invalid_payload","args must be a bounded string array.");return J.map((Z)=>{if(typeof Z!=="string"||Z.includes("\x00")||Buffer.byteLength(Z,"utf8")>q7)throw new H("invalid_payload","Command argument is invalid or too large.");return Z})}async function f7($,J,Z,Q={}){if($.signal.aborted)throw new H("cancelled","Operation was cancelled.");let K=h($.root),B=Q.cwd??K,V=await $.runCommand(J,Z,{cwd:B,root:K,allowWrite:Q.allowWrite===!0,timeoutMs:Q.timeoutMs??y3,signal:$.signal});if(V.exitCode!==0&&/permission denied|operation not permitted|EACCES|EPERM/i.test(V.stderr))await $.emit("permission.denied",{operation:"bash",provenance:$.worker?.executionMode==="unsandboxed"?"os_permission_unknown":"sandbox_policy"});return{exit_code:V.exitCode,signal:V.signal,stdout:V.stdout,stderr:V.stderr,timed_out:V.timedOut,truncated:V.truncated}}function y7($){let J=$ instanceof Error&&"code"in $?$.code:null;return J==="EACCES"||J==="EPERM"}var x7=()=>new H("path_unreadable","The path is not readable.");function FQ($){try{return P7($,Z0.O_RDONLY)}catch(J){throw y7(J)?x7():J}}function p5($,J){let Z=m0()?Z2():null;return Z?Q2(Z,{op:"fs",capability:$,root:J.root,payload:J.payload},J.signal).then((Q)=>Q.value):YQ($,J)}function YQ($,J){return $==="fs.read"?NQ(J):CQ(J)}async function NQ($){let J=h($.root),Z=v0(J,K2($.payload,"path"));if(!F1(Z).isFile())throw new H("not_a_file","Read target is not a file.");let Q=z1($.payload.offset,0,0,Number.MAX_SAFE_INTEGER),K=z1($.payload.max_bytes,65536,1,R7),B=u0($.payload,"encoding");if(B!==void 0&&B!=="base64")throw new H("invalid_payload","encoding must be base64.");let V=FQ(Z),U,z;try{U=_7(V).size;let G=Buffer.alloc(Math.max(0,Math.min(K,U-Q)));z=G.subarray(0,G.byteLength?lZ(V,G,0,G.byteLength,Q):0)}finally{A7(V)}let W=B==="base64"||z.includes(0);return{path:S7(J,Z),content:W?z.toString("base64"):z.toString("utf8"),encoding:W?"base64":"utf8",offset:Q,bytes:z.byteLength,size:U,truncated:Q+z.byteLength<U}}function HQ($,J,Z=R()){let Q=$==="append"?Z0.O_APPEND:Z0.O_TRUNC;if(Z==="win32")return J?Z0.O_WRONLY|($==="append"?Z0.O_APPEND:0):Z0.O_WRONLY|Z0.O_CREAT|Z0.O_EXCL;return Z0.O_WRONLY|Z0.O_NOFOLLOW|Q|(J?0:Z0.O_CREAT|Z0.O_EXCL)}async function CQ($){let J=h($.root),Z=K2($.payload,"path"),Q=BQ($.payload,"content",tZ),K=u0($.payload,"mode")??"overwrite";if(!["create","overwrite","append"].includes(K))throw new H("invalid_payload","mode must be create, overwrite, or append.");let B=VQ(J,Z);if($.payload.create_parents===!0||$.payload.create_directories===!0){pZ(X1(B),{recursive:!0,mode:448});let W=B0(X1(B));if(!A0(J,W))throw new H("symlink_escape","Write parent escaped root.")}if(!G0(X1(B)))throw new H("path_not_found","Write parent does not exist.");if(K==="create"&&G0(B))throw new H("path_exists","Create mode will not overwrite an existing file.");let V=G0(B),U=V?R3(B):null,z=P7(B,HQ(K,V),384);try{let W=_7(z),G=U??(R()==="win32"?R3(B):null);if(G&&(W.ino!==G.ino||W.dev!==G.dev||R()==="win32"&&!A0(J,B0(B))))throw new H("symlink_escape","The write target changed between validation and opening.");if(R()==="win32"&&U&&K!=="append")uZ(z,0);cZ(z,Q,null,"utf8")}finally{A7(z)}return{path:S7(J,B),bytes_written:Buffer.byteLength(Q,"utf8"),mode:K}}async function jQ($){let J=h($.root),Z=K2($.payload,"command",65536),Q=v0(J,u0($.payload,"cwd")??".");if(!F1(Q).isDirectory())throw new H("invalid_cwd","cwd is not a directory.");let K=z1($.payload.timeout_ms,y3,100,f3);return f7($,k7(),["-lc",Z],{cwd:Q,allowWrite:$.root.permissions.write,timeoutMs:K})}async function DQ($){let J=C7.safeParse($.payload),Z=$.worker;if(!J.success||!$.claimOwner||(Z?!Z.runtimeDirectory:R()!=="darwin"))throw new H("preview_unavailable","Preview servers are unavailable on this computer.");let Q=h($.root),K=A6(Q,J.data.workspace),B=K.boundary===Q?Q:v0(K.anchor,q3(K.anchor,K.boundary)||"."),V=v0(B,q3(B,K.path)||".");if(!F1(V).isDirectory())throw new H("invalid_cwd","The Session checkout is not a directory.");let U=Math.min(Date.parse(J.data.expires_at),Date.now()+Y7);if(!(U>Date.now()))throw new H("process_authority_lost","The preview server lease is unavailable.");let z=(j)=>$.emit("progress",{process:j});if(!Z?.runtimeDirectory){if($.claim.local_github_authority)throw new H("local_device_gh_confinement_unavailable","Only a worker runs a local GitHub Session's dev server.");return{...await T3({claim:$.claim,root:B,cwd:V,command:J.data.command,mode:"host",shell:q0(),environment:process.env,expiresAtMs:U,signal:$.signal,emit:z})}}let W={directory:T7(Z.runtimeDirectory,"processes")},G={deniedPorts:a6([$.apiOrigin])},F=B7(),Y=V7(),N=m0(),C=J.data.egress?$2(N):null;if(J.data.egress&&(C===null||!y0(Z.executionMode==="unsandboxed")))throw new H("preview_egress_unavailable","This computer cannot hold a dev server to the run's network allowlist; no command was dispatched.");let L=J.data.egress?await L4(J.data.egress.allowed_domains):null,D=L?[`export ${["HTTP_PROXY","HTTPS_PROXY","http_proxy","https_proxy"].map((j)=>`${j}=${L.url}`).join(" ")}`,"export NO_PROXY=localhost,127.0.0.1,::1 no_proxy=localhost,127.0.0.1,::1 NODE_USE_ENV_PROXY=1",J.data.command].join(`
-`):J.data.command;try{return{...await T3({claim:$.claim,root:V,cwd:V,command:D,mode:"host",shell:Y,expiresAtMs:U,signal:$.signal,emit:z,...N?{jobsUser:{...N,...C!==null?{modelGid:C}:{}}}:{},environment:{...F.variables,HOME:F.home,PATH:F.path,TMPDIR:F.temporaryDirectory,SHELL:Y},journals:W,preview:G})}}finally{L?.close()}}async function wQ($){v2();let J=h($.root),Z=u2($.payload.command),Q=v0(J,u0($.payload,"cwd")??".");if(!F1(Q).isDirectory())throw new H("invalid_cwd","cwd is not a directory.");let K=z1($.payload.timeout_ms,L8,100,h2),{ignored:B}=p2($.payload.env);return await $.emit("progress",{shell:q0(),shell_flags:[...$1],sandbox:"none",ignored_env:B}),I8({command:Z,cwd:Q,timeoutMs:K,signal:$.signal,spawn:$.spawnFullControl,requestEnv:$.payload.env})}async function MQ($){let J=h($.root),Z=zQ($.payload),Q=Z[0];if(!Q||!g7.has(Q)&&!g3.has(Q))throw new H("git_command_not_allowed","Git subcommand is not in the Device allowlist.");if(Z.some((V)=>V==="-C"||V==="-c"||V.startsWith("--git-dir")||V.startsWith("--work-tree")||V.startsWith("--config-env")||V.startsWith("--exec-path")))throw new H("git_argument_not_allowed","Git path/config overrides are not allowed.");let K=g3.has(Q);if(K&&!$.root.permissions.write)throw new H("permission_denied","Mutating Git commands require the write grant.");let B=v0(J,u0($.payload,"cwd")??".");return f7($,"git",["-c","core.hooksPath=/dev/null","-c","credential.helper=",...Z],{cwd:B,allowWrite:K||process.platform==="win32"&&$.root.permissions.write,timeoutMs:z1($.payload.timeout_ms,y3,100,f3)})}function h7($,J){return async(Z)=>{let Q=await $.runCommand("/usr/sbin/lsof",Z,{cwd:J,root:J,allowWrite:!1,allowProcessInspection:!0,timeoutMs:1e4,signal:$.signal});if($.signal.aborted)throw new H("cancelled","Operation was cancelled.");return Q}}async function LQ($){let J=h($.root);if(R()==="linux")return S8(J);if(R()==="win32")return n6(J);return h8(J,h7($,J))}async function OQ($){let J=h($.root);if(R()==="linux")return b8(J);if(R()==="win32")return r6(J);return m8(J,h7($,J))}var h0=new Map;function m7($){let J,Z={promise:new Promise((Q)=>{J=Q}),grant:J};return h0.set($,Z),()=>{if(h0.get($)===Z)h0.delete($)}}function _G($){if($.capability!=="hands.connect"||!W1($.payload)||$.payload[J2]!==!0)return()=>{};return m7($.operation_id)}function PG($,J){if($.capability!=="hands.connect"||J.kind!==r5||!W1($.payload)||$.payload[J2]!==!0)return!1;return h0.get($.operation_id)?.grant(),!0}async function IQ($){let{[J2]:J,...Z}=$.payload;if(J!==void 0&&(J!==!0||!$.worker))throw new H("invalid_payload","Reason sent an invalid workspace grant request.");let Q=J===!0&&!h0.has($.operationId)?m7($.operationId):()=>{};try{return await AQ({...$,payload:Z},J===!0?h0.get($.operationId).promise:void 0)}finally{Q()}}async function AQ($,J){let Z=$.worker?r8($.worker):null,Q=$.claim.environment;delete $.claim.environment;let K=$.worker&&Q&&m3({deviceId:$.deviceId},$.root.id,$.runId,Q.payload,Q.authority)?Q.payload:void 0;return $.runHandsRelay({...J?{workspaceGrant:J}:{},...$.claimedAtMs===void 0?{}:{claimedAtMs:$.claimedAtMs},claimOwner:$.claimOwner,...K?{claimEnvironment:K}:{},localGithubConfinement:Boolean($.claim.local_github_authority),...$.worker?{headless:!0,runtimeDirectory:$.worker.runtimeDirectory,...$.worker.handsSlots?{handsSlots:$.worker.handsSlots}:{},...$.worker.ownComputer?{ownComputer:!0}:{},hostExecution:$.worker.executionMode==="unsandboxed",...$.worker.executionMode==="unsandboxed"&&$.worker.readiness?.["pty.start"]===!0?{managedPty:{version:1,startupVerified:!0}}:{},deviceIdentity:{deviceId:$.deviceId,rootId:$.root.id,apiOrigin:$.apiOrigin},...Z?{desktopRecording:Z}:{}}:{},root:h($.root),runId:$.runId,operationId:$.operationId,attemptId:$.attemptId,payload:$.payload,signal:$.signal,emitEvent:(B,V,U)=>$.emit(B,V,U)})}async function _Q($){if($.worker){if(!$.root.permissions.read||!$.root.permissions.write)throw new H("permission_denied","Bound Hands terminals require the workspace read/write grants.");let{workspace:J,session:Z}=i6($.payload,$.operationId);return $7({root:h($.root),runId:$.runId,deviceId:$.deviceId,rootId:$.root.id,workspace:J,session:Z,owner:$.claimOwner,authority:$.claimAuthority,signal:$.signal,emit:(Q,K)=>$.emit(Q,K)})}return $.runPtySession({root:h($.root),runId:$.runId,operationId:$.operationId,payload:$.payload,signal:$.signal,emitEvent:(J,Z)=>$.emit(J,Z)})}function d5($,J){let Z=m0()?Z2():null;return Z?Q2(Z,{op:"transfer",direction:J,root:$.root,payload:$.payload,worker:Boolean($.worker)},$.signal).then((Q)=>Q.value):PQ(J,{root:$.root,payload:$.payload,signal:$.signal,worker:Boolean($.worker),fetchImpl:$.fetchImpl,beforeCommit:()=>$.emit("progress",{phase:"file_transfer_verified"})})}async function PQ($,J){let Z=h(J.root),Q=i0 in J.payload;if(Q&&!J.worker)throw new H("cloud_copy_workspace_invalid","Only a worker resolves a Cloud copy workspace.");let K=Q?r4(Z,J.payload[i0]):Z;if("source"in J.payload||"source_version"in J.payload){if($!=="export"||!Q)throw new H("cloud_copy_source_unsupported","Explicit sources require the private Cloud exporter.");let U=k4.safeParse(J.payload);if(!U.success)throw new H("invalid_payload","Invalid Cloud export request.");return a4({runtimeRoot:K,source:U.data.source,url:U.data.url,signal:J.signal,fetchImpl:J.fetchImpl})}let B=K2(J.payload,"path",4096),V=$==="import"&&Q?S2(K):K;return x0(x3(V,B)),T0({direction:$,root:V,path:B,payload:J.payload,signal:J.signal,fetchImpl:J.fetchImpl,beforeCommit:J.beforeCommit})}var v7={"inference.custom.v1":{requiredPermission:"read",additionalPermissions:["execute","discover_environment"],execute:($)=>{if(!$.customEndpointCredential||!$.claimOwner)throw new H("custom_endpoint_credential_unavailable","Local model credentials require a signed Device claim.");return o3({payload:$.payload,signal:$.signal,credential:$.customEndpointCredential,emit:(J,Z)=>$.emit(J,Z,$.signal)})}},"fs.read":{requiredPermission:"read",execute:($)=>p5("fs.read",$)},"fs.write":{requiredPermission:"write",execute:($)=>p5("fs.write",$)},"fs.export":{requiredPermission:"read",execute:($)=>d5($,"export")},"fs.import":{requiredPermission:"write",execute:($)=>d5($,"import")},"preview.serve.v1":{requiredPermission:"execute",additionalPermissions:["discover_environment"],available:()=>R()==="darwin"&&m2(),execute:DQ},"exec.run":{requiredPermission:"execute",available:E3,execute:jQ},"exec.full":{requiredPermission:"execute",additionalPermissions:["discover_environment"],available:()=>m2(),execute:wQ},"git.run":{requiredPermission:"execute",available:()=>E3()&&QQ("git"),execute:MQ},"process.list":{requiredPermission:"read",additionalPermissions:["discover_environment"],available:v5,execute:LQ},"ports.list":{requiredPermission:"read",additionalPermissions:["discover_environment"],available:v5,execute:OQ},"hands.connect":{requiredPermission:"execute",additionalPermissions:["read","write","discover_environment"],available:()=>R()==="darwin"||Boolean(X7()),execute:IQ},"pty.start":{requiredPermission:"execute",additionalPermissions:["discover_environment"],available:L7,execute:_Q},"display.stream.v1":{requiredPermission:"execute",additionalPermissions:["discover_environment"],available:I7,execute:($)=>{let J=Z2();return J?Q2(J,{op:"display",payload:$.payload,proxy:($.relay.loadProxy??h6)()},$.signal):t1({payload:$.payload,signal:$.signal},$.relay)}},"automation.call.v1":{requiredPermission:"execute",additionalPermissions:["read","discover_environment"],available:()=>u7(),execute:($)=>p7({runId:$.runId,payload:$.payload,signal:$.signal,...$.worker?.userChrome?{userChrome:$.worker.userChrome}:{}})},"simulator.call.v1":{requiredPermission:"execute",additionalPermissions:["read","discover_environment"],available:B1,execute:($)=>V1({payload:$.payload,root:h($.root)})},"simulator.stream.v1":{requiredPermission:"execute",additionalPermissions:["read","discover_environment"],available:f5,execute:($)=>x5({payload:$.payload,root:h($.root),signal:$.signal},$.relay)},"jobs.control":{requiredPermission:"execute",additionalPermissions:["read","write","discover_environment"],available:()=>!0,execute:($)=>J7({root:h($.root),runId:$.runId,payload:$.payload,signal:$.signal})},"github.local.v1":{requiredPermission:"read",additionalPermissions:["execute","discover_environment"],available:()=>R()==="darwin"?G0("/usr/bin/sandbox-exec"):R()==="linux"||R()==="win32",execute:async($)=>{let J=A1.parse($.payload),Z=S3.parse($.claim.local_github_authority);if(Z.userId!==$.claimOwner?.user_id||Z.deviceId!==$.deviceId||Z.rootId!==$.root.id||Z.runId!==$.runId||Z.repoFullName!==J.repoFullName||!Z.readOnly&&!$.root.permissions.write||!D0(J)&&(Z.readOnly||Z.generation===null&&!(J.kind==="pr_merge"&&Z.merge?.source==="human")&&!(J.kind==="pr_mutation"&&Z.contributorRefresh)))throw Error("local_device_gh_authority_changed");return Z7({root:h($.root),runId:$.runId,request:J,authority:Z,signal:$.signal,leaseUntil:$.claim.lease_until},(Q)=>Y4(J,Q))}},"environment.install":{requiredPermission:"execute",additionalPermissions:["read","write","discover_environment"],execute:async($)=>b3({root:h($.root),runId:$.runId,payload:$.payload})},"browser.pr-proof.v1":{requiredPermission:"read",additionalPermissions:["execute"],available:()=>!1,execute:async($)=>{if(!$.proveMac)throw new H("capability_unsupported","PR proof host is not installed.");return $.proveMac()}},"tunnel.open":{requiredPermission:"execute",additionalPermissions:["read","write","discover_environment"],execute:($)=>t6({root:h($.root),runId:$.runId,owner:$.claimOwner,payload:$.payload,signal:$.signal})},"tunnel.close":{requiredPermission:"execute",additionalPermissions:["read","write","discover_environment"],execute:($)=>e6({root:h($.root),runId:$.runId,owner:$.claimOwner,payload:$.payload,signal:$.signal})},"workspace.setup.v1":{requiredPermission:"execute",additionalPermissions:["read","write"],available:E2,execute:($)=>d4($.payload,$.signal)}};function TQ($,J){try{let Z=e3($,B0(J)),Q=Z?$.find((K)=>K.path===Z):void 0;return Q&&/^[a-f0-9]{64}$/.test(Q.pathFingerprint)?Q.pathFingerprint:void 0}catch{return}}function RQ($,J){try{let Z=B0(J);return $.some((Q)=>Q.path===Z)?C1(Z,R()):void 0}catch{return}}function qQ($,J){try{let Z=B0(J),Q=$.find((K)=>K.path===Z);return Q&&/^[a-f0-9]{64}$/.test(Q.pathFingerprint)?Q.pathFingerprint:void 0}catch{return}}function gQ($,J){try{let Z=B0(J);if(!$.some((Q)=>Q.path===Z))return;return $.filter((Q)=>Q.path!==Z&&A0(Z,Q.path)&&/^[a-f0-9]{64}$/.test(Q.pathFingerprint)).map((Q)=>Q.pathFingerprint)}catch{return}}function EQ($,J,Z=R()){try{return j1({home:C1(B0(J),Z),roots:$.map((Q)=>({path_fingerprint:Q.pathFingerprint,path:C1(Q.path,Z)})).filter((Q)=>/^[a-f0-9]{64}$/.test(Q.path_fingerprint)&&H1(Q.path)).slice(0,U2)})}catch{return}}function TG($,J={}){let Z=J.worker?J.worker.handsSlots??1:J.handsSlots===1?1:void 0,Q=Boolean(J.worker)||R()==="darwin",K=Q?qQ($,U1()):void 0,B=!J.worker&&R()==="darwin"?TQ($,U1()):void 0,V=Q?RQ($,U1()):void 0,U=!J.worker&&R()==="darwin"?gQ($,U1()):void 0,z=Q?EQ($,U1()):void 0,W=x2.filter((G)=>{if(e0.has(G)&&!J.worker)return!1;if(J.worker&&!m1(G,J.worker))return!1;let F=v7[G];if(!F)return!1;return(G==="hands.connect"&&(J.terminalOnlyHands===!0||Boolean(J.worker))||(G==="pty.start"||G==="preview.serve.v1")&&Boolean(J.worker)||G==="browser.pr-proof.v1"&&Boolean(J.productionProof)?!0:F.available?.()??!0)&&$.some((N)=>(!J.worker||G!=="pty.start"||N.permissions.read&&N.permissions.write)&&E7(F).every((C)=>N.permissions[C]))});return{supported_operations:W,...K?{account_root_fingerprint:K}:{},...B?{workspace_root_fingerprint:B}:{},...V?{account_root_path:V}:{},...U?{home_contained_root_fingerprints:U}:{},...z?{root_paths:z}:{},...W.includes("hands.connect")?{hands_worker_artifact_sha256:P3,hands_worker_entrypoint:_3,...Z?{hands_slots:Z}:{}}:{},max_payload_bytes:Y0,max_result_bytes:Y0,operation_constraints:{...W.includes("browser.pr-proof.v1")&&J.productionProof?{"browser.pr-proof.v1":H2.parse(J.productionProof)}:{},...W.includes("exec.run")?{"exec.run":{transport:"shell",shell:k7(),sandbox:R()==="linux"?"linux_sandbox_runtime":R()==="win32"?"windows_srt":"macos_seatbelt",network:!1,max_timeout_ms:f3}}:{},...W.includes("exec.full")?{"exec.full":A8()}:{},"git.run":{read_only_subcommands:[...g7].sort(),mutating_subcommands:[...g3].sort(),push:!1,credential_helpers:!1},"fs.export":{transport:"https_signed_url",max_bytes:X0,max_timeout_ms:a0,result:"sha256_and_size"},"fs.import":{transport:"https_signed_url",max_bytes:X0,max_timeout_ms:a0,atomic:!0,overwrite:!1},"hands.connect":{transport:"wss_relay",worker:"ara_hands",worker_version:A3,protocol_version:I3,worker_artifact_sha256:P3,worker_entrypoint:_3,policy_mode:"full_access",policy_version:1,workspace_base:O3,workspace_layout:t0,...Z?{slots:Z}:{},browser_state:J.worker?"optional_headless":J.terminalOnlyHands===!0?"disabled_terminal_only":R()==="darwin"?"optional_isolated_per_session":"isolated_per_session",max_session_ms:43200000},...W.includes("pty.start")?{"pty.start":{transport:"wss_relay",shell:"login_shell",resize:!0,slots:M7,max_session_ms:D7,max_buffered_output_bytes:w7}}:{},...J.worker?Object.fromEntries(W.filter((G)=>G!=="browser.pr-proof.v1").map((G)=>[G,{ready:J.worker?.readiness?.[G]===!0,...J.worker?.readiness?.[G]!==!0&&J.worker?.probing?.includes(G)?{probing:!0}:{},execution_mode:m1(G,{...J.worker,executionMode:"sandboxed"})?"confined":"host",...G==="pty.start"?{transport:"wss_relay",worker:"ara_hands",shell:"bound_job",protocol_version:s6,environment:"private_snapshot",receipt:"metadata_only",...J.worker?.persistentTerminals&&!m0()?{persistent_terminals:!0}:{}}:{},...G==="github.local.v1"?{contributor_attribution:2,prepare_diagnostics:1,...J.worker?.githubSignedIn!==void 0?{gh_authenticated:J.worker.githubSignedIn}:{}}:{},...G==="hands.connect"?{transport:"wss_relay",worker:"ara_hands",slots:Z,session_group:C6,...J.worker?.ownComputer?{[j6]:D6}:{},workspace_base:O3,workspace_layout:t0,browser_state:"optional_headless",desktop:!1,worker_version:A3,protocol_version:I3,...J.worker?.readiness?.["environment.install"]===!0&&W.includes("environment.install")?{environment_delivery:c5,[i5]:a5}:{},...J.worker?{[Z6]:e5}:{},...J.worker?{[t5]:o5}:{},...J.worker?{[J6]:$6}:{},...J.worker?.handsBrowser?{[G6]:V6}:{},[B6]:K6,[X6]:U6,...y0(J.worker?.executionMode==="unsandboxed")?{[z6]:W6}:{},...y0(J.worker?.executionMode==="unsandboxed")&&$2()!==null?{[Y6]:F6}:{},...y0(J.worker?.executionMode==="unsandboxed")&&m0()?{[H6]:N6}:{}}:{},...G==="fs.export"?{cloud_source_version:q1,source_kinds:["workspace","attachment"],[M2]:L2}:{},...G==="fs.import"?{[M2]:L2}:{},...G===F7&&$2()!==null&&y0(J.worker?.executionMode==="unsandboxed")?{[H7]:N7}:{},...G==="tunnel.open"?{carried_jobs:w6}:{},...G==="jobs.control"?{[L6]:M6}:{},...G==="display.stream.v1"&&J.worker?.displayVideo?{[P6]:_6,[R6]:T6.join(","),[q6]:g6,[E6]:k6}:{},...G==="automation.call.v1"&&J.worker?.userChrome?{[O6]:!0}:{},...G==="automation.call.v1"&&J.worker?.cloudSessions?{[I6]:!0}:{}}])):{}}}}function m3($,J,Z,Q,K){let B=K7.safeParse(Q);return B.success&&K!==void 0&&K.device_id===$.deviceId&&B.data.device_id===$.deviceId&&B.data.root_id===J&&B.data.run_id===Z&&B.data.binding.kind===K.binding&&B.data.binding.target_revision===K.target_revision&&B.data.binding.root_grant_revision===K.root_grant_revision&&B.data.binding.target_generation===K.target_generation&&B.data.binding.target_fence_id===K.target_fence_id}async function RG($,J,Z,Q,K){if(J.capability!=="hands.connect"||Z.kind!==n5||!Q.operationEnvironment||!Q.acknowledgeOperationEnvironment)return!1;let B=Z.payload.snapshot_id;if(Z.payload.version!==1||typeof B!=="string"||Object.keys(Z.payload).length!==2)throw new H("environment_unavailable","Reason sent an invalid environment delivery.");let V=$.roots.find((W)=>W.id===J.root_id);if(!V)throw new H("root_not_granted","The Hands root is no longer granted.");let U=await Q.operationEnvironment($,J,B,K);if(!m3($,V.id,J.run_id,U.payload,U.authority)||U.payload.snapshot_id!==B)throw new H("environment_unavailable","The delivered environment does not match this Hands.");let z=b3({root:h(V),operationId:J.operation_id,payload:U.payload});return await Q.acknowledgeOperationEnvironment($,J,{snapshot_id:z.snapshot_id,installed_revision:z.installed_revision,installed:!0},K),!0}async function qG($,J,Z,Q){if(J.capability!=="hands.connect"||Z.kind!==Q6)return!1;let{version:K,run_id:B,target_generation:V,target_fence_id:U}=Z.payload;if(K!==1||Object.keys(Z.payload).length!==4||typeof B!=="string"||typeof V!=="number"||typeof U!=="string")throw new H("hands_rebind_unavailable","Reason sent an invalid Hands rebind.");let z=$.roots.find((W)=>W.id===J.root_id);if(!z)throw new H("root_not_granted","The Hands root is no longer granted.");return await o6({operationId:J.operation_id,root:h(z),runId:B,targetGeneration:V,fenceId:U,...Q?{signal:Q}:{}}),!0}async function gG($,J,Z){if(J.capability!=="github.local.v1")return l5($,J,Z);try{let Q=await l5($,J,Z);if(Q.status==="succeeded"||k3(J.payload,Q.status,Q.error_code))return Q;return{status:Q.status,error_code:Q.status==="cancelled"?"operation_cancelled":"local_github_unavailable"}}catch{return{status:Z.signal.aborted?"cancelled":"failed",error_code:Z.signal.aborted?"operation_cancelled":"local_github_unavailable"}}}async function l5($,J,Z){if(e0.has(J.capability)&&!Z.worker)return{status:"failed",error_code:"capability_not_granted"};if(Z.worker&&!m1(J.capability,Z.worker))return{status:"failed",error_code:"capability_not_granted"};if(Z.worker&&Z.worker.readiness?.[J.capability]!==!0)return{status:"failed",error_code:"capability_unavailable"};if(J.local_github_authority){let G=S3.safeParse(J.local_github_authority);if(!G.success||G.data.deviceId!==$.deviceId||G.data.rootId!==J.root_id||G.data.runId!==J.run_id||G.data.userId!==J.owner?.user_id||!["github.local.v1","hands.connect","environment.install","jobs.control","preview.serve.v1"].includes(J.capability))return{status:"failed",error_code:"local_device_gh_capability_denied"}}let Q=v7[J.capability];if(!Q)return{status:"failed",error_code:"capability_unsupported"};if(Q.available&&!Q.available()&&!(["hands.connect","pty.start","preview.serve.v1"].includes(J.capability)&&Z.worker)&&!Z.runCommand&&!Z.runHandsRelay&&!Z.spawnFullControl&&!Z.runPtySession&&!(J.capability==="browser.pr-proof.v1"&&Z.proveMac))return{status:"failed",error_code:"capability_unavailable"};if(J.protocol_version!==2)return{status:"failed",error_code:"protocol_unsupported"};let K=$.roots.find((G)=>G.id===J.root_id);if(!K)return{status:"failed",error_code:"root_not_granted"};if((J.capability==="fs.export"||J.capability==="fs.import")&&W1(J.payload)&&(("source"in J.payload)||("source_version"in J.payload))){let G=Boolean(Z.worker||$.worker)&&i0 in J.payload;if(J.capability!=="fs.export"||!G)return{status:"failed",error_code:"cloud_copy_source_unsupported"}}if(J.owner&&(J.owner.device_id!==$.deviceId||J.owner.organization_id!==$.orgId))return{status:"failed",error_code:"capability_not_granted"};if((J.capability==="tunnel.open"||J.capability==="tunnel.close")&&!J.owner)return{status:"failed",error_code:"preview_unavailable"};if(J.capability==="environment.install"&&!m3($,K.id,J.run_id,J.payload,J.authority))return{status:"failed",error_code:"environment_unavailable"};if(E7(Q).some((G)=>!K.permissions[G]))return{status:"failed",error_code:"permission_denied"};let B=0,V=async(G,F,Y)=>{if(["environment.install","github.local.v1"].includes(J.capability)||J.capability==="inference.custom.v1"&&(G==="started"||G==="completed"))return;await Z.emit?.({sequence:B++,kind:G,capability:J.capability,data:F,...(G==="hands.reconnected"||J.capability==="inference.custom.v1")&&Y?{deliverySignal:Y}:{}})},U=J.capability==="hands.connect"||J.capability==="display.stream.v1"||J.capability==="simulator.stream.v1"||JQ.has(J.capability)||J.capability==="pty.start",z,W=async(G,F,Y)=>{let N=z;z=void 0,await Promise.all([N,V(G,F,Y)])};try{if(U)z=V("started"),z.catch(()=>{return});else await V("started");let G={...Z.proxy===void 0?{}:{loadProxy:()=>Z.proxy??null},...Z.handsLaunch?.takePrespawnedWorker?{takePrespawnedWorker:Z.handsLaunch.takePrespawnedWorker}:{},...Z.handsLaunch?.adoptSpawnedWorker?{adoptSpawnedWorker:Z.handsLaunch.adoptSpawnedWorker}:{}},F=await Q.execute({...Z.proveMac?{proveMac:()=>Z.proveMac(J,Z.signal,(Y)=>V("pr-proof.started.v1",Y))}:{},claim:J,worker:Z.worker,claimOwner:J.owner,claimAuthority:J.authority,organizationId:$.orgId,deviceId:$.deviceId,apiOrigin:$.apiOrigin,root:K,payload:KQ(J.payload),runId:J.run_id,operationId:J.operation_id,attemptId:J.attempt_id,...Z.handsLaunch?{claimedAtMs:Z.handsLaunch.claimedAtMs}:{},signal:Z.signal,...Z.customEndpointCredential?{customEndpointCredential:Z.customEndpointCredential}:{},fetchImpl:Z.fetchImpl??fetch,relay:G,runCommand:Z.runCommand??WQ,spawnFullControl:Z.spawnFullControl??h3,emit:U?W:V,runHandsRelay:Z.runHandsRelay??((Y)=>z7(Y,G)),runPtySession:Z.runPtySession??O7});if(J.capability==="github.local.v1")s5.parse(F);if(!W1(F))throw new H("invalid_result","Operation result must be a JSON object.");if(Buffer.byteLength(JSON.stringify(F)??"null","utf8")>Y0)throw new H("result_too_large","Operation result exceeds 256 KB.");return await(U?W:V)("completed",{ok:!0}),{status:"succeeded",result:F,error_code:null}}catch(G){let F=Z.signal.reason instanceof H&&h5.has(Z.signal.reason.code)?Z.signal.reason.code:G instanceof H&&h5.has(G.code)?G.code:null;if(Z.signal.aborted||F)return{status:"cancelled",...G instanceof j7?{result:{process_terminal_observation:G.observation}}:{},error_code:["environment.install","github.local.v1","inference.custom.v1"].includes(J.capability)?"operation_cancelled":F??"cancelled"};if(["fs.read","fs.write"].includes(J.capability)&&G instanceof Error&&"code"in G&&["EACCES","EPERM"].includes(String(G.code)))await V("permission.denied",{operation:J.capability==="fs.read"?"read":"write",provenance:"os_permission_unknown"});let Y=J.capability==="inference.custom.v1"?G instanceof H&&m6(G.code)?G.code:"custom_endpoint_unavailable":J.capability==="github.local.v1"?G instanceof _1&&k3(J.payload,"failed",G.code)?G.code:"local_github_unavailable":J.capability==="environment.install"?"environment_install_failed":G instanceof H&&$Q.test(G.code)?G.code:"capability_failed",N=J.capability==="hands.connect"&&G instanceof W7?Q7(G.expiryDiagnostic):null;return await V("completed",{ok:!1,error_code:Y,...N?{expiry_diagnostic:N}:{}}),{status:"failed",error_code:Y}}}
-export{JB as Ia,W0 as Ja,N$ as Ka,H$ as La,ZB as Ma,I$ as Na,j9 as Oa,D9 as Pa,E2 as Qa,q0 as Ra,WJ as Sa,JQ as Ta,k7 as Ua,b7 as Va,UQ as Wa,h3 as Xa,WQ as Ya,YQ as Za,HQ as _a,_G as $a,PG as ab,PQ as bb,v7 as cb,TQ as db,RQ as eb,qQ as fb,gQ as gb,EQ as hb,TG as ib,RG as jb,qG as kb,gG as lb};