@robota-sdk/agent-cli 3.0.0-beta.10 → 3.0.0-beta.100

package/dist/node/command-executor-D_UBZHxh-CVZipoOV.js

@@ -0,0 +1,2 @@
+import{n as e}from"./rolldown-runtime-C9xYM0wc.js";import{r as t,s as n,w as r}from"./bounded-output-BdWv9SX3-28em7iHq.js";import{t as i}from"./rolldown-runtime-DK3Fl9T5-DK3Fl9T5.js";import{spawn as a}from"node:child_process";var o=e({n:()=>s,t:()=>d}),s=i({CommandExecutor:()=>d});const c=1e6;function l(e,n){let r=t({maxBytes:c}),i=t({maxBytes:c,retain:`tail`});return e.stdout?.on(`data`,e=>r.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(n),e.stdin?.end(),{stdoutOutput:r,stderrOutput:i}}function u(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var d=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,t,i){let o=e.timeout??600,s=o*1e3,c=JSON.stringify(t);return new Promise(d=>{let f=!1,p=r({executable:this.shellExecutable}),m=a(p.command,p.commandArgs(e.command),{cwd:t.cwd,env:n(process.env,i,t.env)}),{stdoutOutput:h,stderrOutput:g}=l(m,c),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},s);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(u(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{d as n,o as t};
+//# sourceMappingURL=command-executor-D_UBZHxh-CVZipoOV.js.map

package/dist/node/command-executor-D_UBZHxh-CVZipoOV.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-executor-D_UBZHxh-CVZipoOV.js","names":["e","r","t","i","n"],"sources":["../../../agent-core/dist/node/command-executor-D_UBZHxh.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{f as t,s as n,t as r}from\"./bounded-output-BdWv9SX3.js\";import{spawn as i}from\"node:child_process\";var a=e({CommandExecutor:()=>l});const o=1e6;function s(e,t){let n=r({maxBytes:o}),i=r({maxBytes:o,retain:`tail`});return e.stdout?.on(`data`,e=>n.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(t),e.stdin?.end(),{stdoutOutput:n,stderrOutput:i}}function c(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var l=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,r,a){let o=e.timeout??600,l=o*1e3,u=JSON.stringify(r);return new Promise(d=>{let f=!1,p=t({executable:this.shellExecutable}),m=i(p.command,p.commandArgs(e.command),{cwd:r.cwd,env:n(process.env,a,r.env)}),{stdoutOutput:h,stderrOutput:g}=s(m,u),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},l);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(c(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{a as n,l as t};\n//# sourceMappingURL=command-executor-D_UBZHxh.js.map"],"mappings":"6PAAiK,EAAEA,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,EAAEC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,EAAEA,EAAE,CAAC,SAAS,EAAE,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,QAAQ,GAAG,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,OAAO,GAAG,YAAY,CAAC,CAAC,EAAE,EAAE,OAAO,MAAM,CAAC,EAAE,EAAE,OAAO,IAAI,EAAE,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,QAAQ,OAAO,OAAO,UAAU,OAAO,EAAE,KAAK,GAAG,iBAAiB,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,GAAG,MAAM,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,eAAe,OAAO,IAAI,KAAK,6BAA6B,GAAG,YAAY,IAAI,eAAe,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,KAAK,UAAU,YAAY,EAAE,CAAC,KAAK,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,UAAU,CAAC,EAAE,OAAO,IAAI,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,EAAEC,EAAE,CAAC,WAAW,KAAK,eAAe,CAAC,EAAE,EAAEC,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,IAAIC,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,aAAa,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,SAAS,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,UAAU,OAAO,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,QAAQ,QAAQ,OAAO,UAAU,KAAK,gBAAgB,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/node/command-executor-D_UBZHxh-D7UrdAlN.js

@@ -0,0 +1,2 @@
+;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
+import{n as e}from"./rolldown-runtime-rs7quPpn.js";import{r as t,s as n,w as r}from"./bounded-output-BdWv9SX3-C4ucXwLR.js";import{t as i}from"./rolldown-runtime-DK3Fl9T5-BeX3Bzvn.js";import{spawn as a}from"node:child_process";var o=e({n:()=>s,t:()=>d}),s=i({CommandExecutor:()=>d});const c=1e6;function l(e,n){let r=t({maxBytes:c}),i=t({maxBytes:c,retain:`tail`});return e.stdout?.on(`data`,e=>r.append(e)),e.stderr?.on(`data`,e=>i.append(e)),e.stdin?.on(`error`,()=>{}),e.stdin?.write(n),e.stdin?.end(),{stdoutOutput:r,stderrOutput:i}}function u(e,t,n,r){if(e===0)return{outcome:`allow`,source:`command`,stdout:n};if(e===2)return{outcome:`deny`,source:`command`,reason:r.trim()||`Blocked by hook`};let i=r.trim()?`: ${r.trim()}`:``;return{outcome:`error`,source:`command`,kind:`nonzero-exit`,reason:e===null?`Hook terminated by signal ${t??`unknown`}${i}`:`Hook exited ${e}${i}`}}var d=class{shellExecutable;type=`command`;constructor(e){this.shellExecutable=e}execute(e,t,i){let o=e.timeout??600,s=o*1e3,c=JSON.stringify(t);return new Promise(d=>{let f=!1,p=r({executable:this.shellExecutable}),m=a(p.command,p.commandArgs(e.command),{cwd:t.cwd,env:n(process.env,i,t.env)}),{stdoutOutput:h,stderrOutput:g}=l(m,c),_=setTimeout(()=>{f||(f=!0,m.kill(`SIGTERM`),d({outcome:`error`,source:`command`,kind:`timeout`,reason:`Hook timed out after ${o}s`}))},s);m.on(`close`,(e,t)=>{f||(f=!0,clearTimeout(_),d(u(e,t,h.toString(),g.toString())))}),m.on(`error`,e=>{f||(f=!0,clearTimeout(_),d({outcome:`error`,source:`command`,kind:`spawn-failure`,reason:e.message}))})})}};export{d as n,o as t};

package/dist/node/desktop-host.d.ts

@@ -0,0 +1,53 @@
+import { i as TConfigEnvironment, r as IProductConfig, t as IProductCliArtifact } from "./artifact-DrPhOb_v.js";
+//#region src/desktop-host.d.ts
+interface IDesktopCliResult {
+  readonly exitCode: number | null;
+  readonly stdout: string;
+  readonly stderr: string;
+}
+interface IDesktopTrustQuestion {
+  readonly folder: string;
+  readonly loads: readonly string[];
+}
+type TDesktopTrustChoice = 'trust' | 'restricted' | 'quit';
+interface IDesktopDaemonEndpoint {
+  readonly id: string;
+  readonly url: string;
+  readonly port: number;
+}
+type TDesktopAttachment = {
+  readonly ok: true;
+  readonly endpoint: IDesktopDaemonEndpoint;
+} | {
+  readonly ok: false;
+  readonly detail: string;
+};
+interface IDesktopCliControllerOptions {
+  readonly artifact: IProductCliArtifact;
+  /** Snapshot supplied by the Electron main process; product aliases are scoped to the artifact. */
+  readonly environment: TConfigEnvironment;
+  /** The consumer wrapper runs its own packaged CLI executable with these args and curated env. */
+  readonly execute: (args: readonly string[], environment: Readonly<Record<string, string>>) => Promise<IDesktopCliResult>;
+  /** Main process displays a native trust prompt; no daemon starts until it resolves. */
+  readonly chooseTrust: (question: IDesktopTrustQuestion) => Promise<TDesktopTrustChoice>;
+}
+declare function parseDesktopTrustStatus(stdout: string): {
+  readonly trusted: boolean;
+  readonly question?: IDesktopTrustQuestion;
+  readonly providerEnvRefs: readonly string[];
+} | undefined;
+declare function parseDesktopDaemonStart(stdout: string): IDesktopDaemonEndpoint | undefined;
+declare function desktopContentSecurityPolicy(port: number | undefined): string;
+/** One attachment owner for initial launch and reconnect. The CLI daemon outlives this controller. */
+declare function createDesktopCliController(options: IDesktopCliControllerOptions): Readonly<{
+  config: IProductConfig;
+  userDataPath: string;
+  start: () => Promise<TDesktopAttachment>;
+  reconnect: () => Promise<TDesktopAttachment>;
+  current: () => Promise<TDesktopAttachment> | null;
+  port: () => number | undefined;
+  csp: () => string;
+}>;
+//#endregion
+export { IDesktopCliControllerOptions, IDesktopCliResult, IDesktopDaemonEndpoint, IDesktopTrustQuestion, TDesktopAttachment, TDesktopTrustChoice, createDesktopCliController, desktopContentSecurityPolicy, parseDesktopDaemonStart, parseDesktopTrustStatus };
+//# sourceMappingURL=desktop-host.d.ts.map

package/dist/node/desktop-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-host.d.ts","names":[],"sources":["../../src/desktop-host.ts"],"mappings":";;UASiB;WACN;WACA;WACA;;UAEM;WACN;WACA;;KAEC;UACK;WACN;WACA;WACA;;KAEC;WACG;WAAmB,UAAU;;WAC7B;WAAoB;;UAElB;WACN,UAAU;;WAEV,aAAa;;WAEb,UAAU,yBAAyB,aAAa,SAAS,4BAA4B,QAAQ;;WAE7F,cAAc,UAAU,0BAA0B,QAAQ;;iBAsBrD,wBAAwB;WAC7B;WACA,WAAW;WACX;;iBAkBK,wBAAwB,iBAAiB;iBAUzC,6BAA6B;;iBAM7B,2BAA2B,SAAS,+BAA4B;UAA5B;;EAuDhC,aAAA,QAAQ;EAAR,iBAAA,QAAQ;EAoBX,eAAA,QAAQ;EACX;EACD"}

package/dist/node/desktop-host.js

@@ -0,0 +1,2 @@
+import{D as e,O as t,k as n,t as r}from"./product-host-CwqVX6Xg.js";import{join as i}from"node:path";const a=[`PATH`,`HOME`,`USERPROFILE`,`SystemRoot`,`TEMP`,`TMP`,`LANG`,`LC_ALL`,`XDG_RUNTIME_DIR`,`DISPLAY`,`WAYLAND_DISPLAY`,`XAUTHORITY`,`DBUS_SESSION_BUS_ADDRESS`,`APPDATA`,`LOCALAPPDATA`,`PROGRAMDATA`],o=/^ws:\/\/127\.0\.0\.1:([0-9]{1,5})\/?\?token=([A-Za-z0-9%._~-]+)$/u;function s(e){let t=e.split(/\r?\n/u).filter(e=>e.trim()!==``);if(t.length===1)try{let e=JSON.parse(t[0]);return typeof e==`object`&&e&&!Array.isArray(e)?e:void 0}catch{return}}function c(e){let t=s(e);if(t===void 0)return;let n=t.providerEnvRefs;if(!(n!==void 0&&(!Array.isArray(n)||n.length>128||!n.every(e=>typeof e==`string`&&/^[A-Za-z_][A-Za-z0-9_]*$/u.test(e))))){if(t.state===`trusted`)return t.askable===!1?{trusted:!0,providerEnvRefs:Object.freeze([...new Set(n??[])])}:void 0;if(t.askable===!0&&typeof t.workspace==`string`&&t.workspace.trim()!==``){let e=Array.isArray(t.loads)?t.loads.filter(e=>typeof e==`string`):[];return{trusted:!1,question:{folder:t.workspace,loads:e.slice(0,64)},providerEnvRefs:[]}}return{trusted:!1,providerEnvRefs:[]}}}function l(e){let t=s(e);if(typeof t?.id!=`string`||t.id.trim()===``||typeof t.url!=`string`)return;let n=o.exec(t.url);if(!n)return;let r=Number(n[1]);return Number.isInteger(r)&&r>0&&r<=65535?{id:t.id,url:t.url,port:r}:void 0}function u(e){return`default-src 'self'; connect-src ${e===void 0?`'none'`:`ws://127.0.0.1:${e}`}; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'`}function d(o){let s=Object.freeze({...o.environment}),d=r(o.artifact).resolveRuntime({environment:s}).config,f=n(s,e(d)),p=null,m=null,h,g=!1,_=(e=[])=>{let n={};for(let e of a)f[e]!==void 0&&(n[e]=f[e]);for(let t of e)f[t]!==void 0&&(n[t]=f[t]);for(let{section:e,field:r,descriptor:i}of t()){if(i.exposure===`private`||!i.consumers.includes(`cli`))continue;let t=d[e][r];t!==void 0&&(n[i.variable]=typeof t==`string`?t:JSON.stringify(t))}return f.PRODUCT_CONFIG_FILE!==void 0&&(n.PRODUCT_CONFIG_FILE=f.PRODUCT_CONFIG_FILE),n};async function v(){let e=[],t=g?void 0:await o.execute([`trust`,`status`,`--json`],_()),n=t?.exitCode===0?c(t.stdout):void 0;if(!g&&n?.question!==void 0){let t=await o.chooseTrust(n.question);if(t!==`trust`&&t!==`restricted`&&t!==`quit`)return{ok:!1,detail:`Desktop trust answer was invalid.`};if(t===`quit`)return{ok:!1,detail:`Desktop launch cancelled.`};if(t===`restricted`&&(g=!0),t===`trust`){let t=await o.execute([`trust`,`--yes`],_());if(t.exitCode!==0)return{ok:!1,detail:t.stderr.trim()||`Workspace trust grant failed.`};let n=await o.execute([`trust`,`status`,`--json`],_()),r=n.exitCode===0?c(n.stdout):void 0;if(r?.trusted!==!0)return{ok:!1,detail:`Workspace trust could not be confirmed after grant.`};e=r.providerEnvRefs}}else e=n?.providerEnvRefs??[];let r=await o.execute([`daemon`,`start`,`--json`,...g?[`--restricted-workspace`]:[]],_(g?[]:e)),i=r.exitCode===0?l(r.stdout):void 0;return i===void 0?{ok:!1,detail:r.stderr.trim()||`Desktop daemon did not return a loopback endpoint.`}:{ok:!0,endpoint:i}}let y=()=>{if(m!==null)return m;let e=v().then(e=>(h=e.ok?e.endpoint.port:void 0,m=null,e),e=>{throw h=void 0,m=null,e});return p=m=e,e};return Object.freeze({config:d,userDataPath:i(d.storage.userRoot,`desktop`),start:y,reconnect:y,current:()=>p,port:()=>h,csp:()=>u(h)})}export{d as createDesktopCliController,u as desktopContentSecurityPolicy,l as parseDesktopDaemonStart,c as parseDesktopTrustStatus};
+//# sourceMappingURL=desktop-host.js.map

package/dist/node/desktop-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktop-host.js","names":[],"sources":["../../src/desktop-host.ts"],"sourcesContent":["import { join } from 'node:path';\n\nimport { embeddedProductIdentity, productConfigEntries, scopeProductEnvironment } from '@robota-sdk/product-config';\n\nimport { createProductCliHost } from './product-host.js';\n\nimport type { TConfigEnvironment } from '@robota-sdk/product-config';\nimport type { IProductCliArtifact } from './product/artifact.js';\n\nexport interface IDesktopCliResult {\n  readonly exitCode: number | null;\n  readonly stdout: string;\n  readonly stderr: string;\n}\nexport interface IDesktopTrustQuestion {\n  readonly folder: string;\n  readonly loads: readonly string[];\n}\nexport type TDesktopTrustChoice = 'trust' | 'restricted' | 'quit';\nexport interface IDesktopDaemonEndpoint {\n  readonly id: string;\n  readonly url: string;\n  readonly port: number;\n}\nexport type TDesktopAttachment =\n  | { readonly ok: true; readonly endpoint: IDesktopDaemonEndpoint }\n  | { readonly ok: false; readonly detail: string };\n\nexport interface IDesktopCliControllerOptions {\n  readonly artifact: IProductCliArtifact;\n  /** Snapshot supplied by the Electron main process; product aliases are scoped to the artifact. */\n  readonly environment: TConfigEnvironment;\n  /** The consumer wrapper runs its own packaged CLI executable with these args and curated env. */\n  readonly execute: (args: readonly string[], environment: Readonly<Record<string, string>>) => Promise<IDesktopCliResult>;\n  /** Main process displays a native trust prompt; no daemon starts until it resolves. */\n  readonly chooseTrust: (question: IDesktopTrustQuestion) => Promise<TDesktopTrustChoice>;\n}\n\nconst OS_VARIABLES = [\n  'PATH', 'HOME', 'USERPROFILE', 'SystemRoot', 'TEMP', 'TMP', 'LANG', 'LC_ALL',\n  'XDG_RUNTIME_DIR', 'DISPLAY', 'WAYLAND_DISPLAY', 'XAUTHORITY', 'DBUS_SESSION_BUS_ADDRESS',\n  'APPDATA', 'LOCALAPPDATA', 'PROGRAMDATA',\n] as const;\nconst DAEMON_URL = /^ws:\\/\\/127\\.0\\.0\\.1:([0-9]{1,5})\\/?\\?token=([A-Za-z0-9%._~-]+)$/u;\n\nfunction singleJsonLine(stdout: string): Record<string, unknown> | undefined {\n  const lines = stdout.split(/\\r?\\n/u).filter((line) => line.trim() !== '');\n  if (lines.length !== 1) return undefined;\n  try {\n    const value: unknown = JSON.parse(lines[0]!);\n    return typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? value as Record<string, unknown> : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function parseDesktopTrustStatus(stdout: string): {\n  readonly trusted: boolean;\n  readonly question?: IDesktopTrustQuestion;\n  readonly providerEnvRefs: readonly string[];\n} | undefined {\n  const value = singleJsonLine(stdout);\n  if (value === undefined) return undefined;\n  const refs = value.providerEnvRefs;\n  if (refs !== undefined && (!Array.isArray(refs) || refs.length > 128 ||\n    !refs.every((name) => typeof name === 'string' && /^[A-Za-z_][A-Za-z0-9_]*$/u.test(name)))) return undefined;\n  if (value.state === 'trusted') {\n    if (value.askable !== false) return undefined;\n    return { trusted: true, providerEnvRefs: Object.freeze([...(new Set((refs ?? []) as string[]))]) };\n  }\n  if (value.askable === true && typeof value.workspace === 'string' && value.workspace.trim() !== '') {\n    const loads = Array.isArray(value.loads) ? value.loads.filter((row): row is string => typeof row === 'string') : [];\n    return { trusted: false, question: { folder: value.workspace, loads: loads.slice(0, 64) }, providerEnvRefs: [] };\n  }\n  return { trusted: false, providerEnvRefs: [] };\n}\n\nexport function parseDesktopDaemonStart(stdout: string): IDesktopDaemonEndpoint | undefined {\n  const value = singleJsonLine(stdout);\n  if (typeof value?.id !== 'string' || value.id.trim() === '' || typeof value.url !== 'string') return undefined;\n  const match = DAEMON_URL.exec(value.url);\n  if (!match) return undefined;\n  const port = Number(match[1]);\n  return Number.isInteger(port) && port > 0 && port <= 65_535\n    ? { id: value.id, url: value.url, port } : undefined;\n}\n\nexport function desktopContentSecurityPolicy(port: number | undefined): string {\n  const connect = port === undefined ? \"'none'\" : `ws://127.0.0.1:${port}`;\n  return `default-src 'self'; connect-src ${connect}; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'`;\n}\n\n/** One attachment owner for initial launch and reconnect. The CLI daemon outlives this controller. */\nexport function createDesktopCliController(options: IDesktopCliControllerOptions) {\n  const environment = Object.freeze({ ...options.environment });\n  const runtime = createProductCliHost(options.artifact).resolveRuntime({ environment });\n  const config = runtime.config;\n  const scoped = scopeProductEnvironment(environment, embeddedProductIdentity(config));\n  let latest: Promise<TDesktopAttachment> | null = null;\n  let inFlight: Promise<TDesktopAttachment> | null = null;\n  let settledPort: number | undefined;\n  let restricted = false;\n\n  const childEnvironment = (refs: readonly string[] = []): Record<string, string> => {\n    const output: Record<string, string> = {};\n    for (const key of OS_VARIABLES) if (scoped[key] !== undefined) output[key] = scoped[key]!;\n    for (const key of refs) if (scoped[key] !== undefined) output[key] = scoped[key]!;\n    for (const { section, field, descriptor } of productConfigEntries()) {\n      if (descriptor.exposure === 'private' || !descriptor.consumers.includes('cli')) continue;\n      const value = (config[section] as Readonly<Record<string, unknown>>)[field];\n      if (value !== undefined) output[descriptor.variable] = typeof value === 'string' ? value : JSON.stringify(value);\n    }\n    if (scoped.PRODUCT_CONFIG_FILE !== undefined) output.PRODUCT_CONFIG_FILE = scoped.PRODUCT_CONFIG_FILE;\n    return output;\n  };\n\n  async function attach(): Promise<TDesktopAttachment> {\n    let refs: readonly string[] = [];\n    const status = restricted\n      ? undefined\n      : await options.execute(['trust', 'status', '--json'], childEnvironment());\n    const trust = status?.exitCode === 0 ? parseDesktopTrustStatus(status.stdout) : undefined;\n    if (!restricted && trust?.question !== undefined) {\n      const choice = await options.chooseTrust(trust.question);\n      if (choice !== 'trust' && choice !== 'restricted' && choice !== 'quit')\n        return { ok: false, detail: 'Desktop trust answer was invalid.' };\n      if (choice === 'quit') return { ok: false, detail: 'Desktop launch cancelled.' };\n      if (choice === 'restricted') restricted = true;\n      if (choice === 'trust') {\n        const grant = await options.execute(['trust', '--yes'], childEnvironment());\n        if (grant.exitCode !== 0) return { ok: false, detail: grant.stderr.trim() || 'Workspace trust grant failed.' };\n        const renewed = await options.execute(['trust', 'status', '--json'], childEnvironment());\n        const renewedTrust = renewed.exitCode === 0 ? parseDesktopTrustStatus(renewed.stdout) : undefined;\n        if (renewedTrust?.trusted !== true)\n          return { ok: false, detail: 'Workspace trust could not be confirmed after grant.' };\n        refs = renewedTrust.providerEnvRefs;\n      }\n    } else refs = trust?.providerEnvRefs ?? [];\n    const result = await options.execute(\n      ['daemon', 'start', '--json', ...(restricted ? ['--restricted-workspace'] : [])],\n      childEnvironment(restricted ? [] : refs),\n    );\n    const endpoint = result.exitCode === 0 ? parseDesktopDaemonStart(result.stdout) : undefined;\n    return endpoint === undefined\n      ? { ok: false, detail: result.stderr.trim() || 'Desktop daemon did not return a loopback endpoint.' }\n      : { ok: true, endpoint };\n  }\n\n  const start = (): Promise<TDesktopAttachment> => {\n    if (inFlight !== null) return inFlight;\n    const pending = attach().then((result) => {\n      settledPort = result.ok ? result.endpoint.port : undefined;\n      inFlight = null;\n      return result;\n    }, (error: unknown) => {\n      settledPort = undefined;\n      inFlight = null;\n      throw error;\n    });\n    latest = inFlight = pending;\n    return pending;\n  };\n\n  return Object.freeze({\n    config,\n    userDataPath: join(config.storage.userRoot, 'desktop'),\n    start,\n    reconnect: start,\n    current: (): Promise<TDesktopAttachment> | null => latest,\n    port: (): number | undefined => settledPort,\n    csp: (): string => desktopContentSecurityPolicy(settledPort),\n  });\n}\n"],"mappings":"qGAsCA,MAAM,EAAe,CACnB,OAAQ,OAAQ,cAAe,aAAc,OAAQ,MAAO,OAAQ,SACpE,kBAAmB,UAAW,kBAAmB,aAAc,2BAC/D,UAAW,eAAgB,aAC7B,EACM,EAAa,oEAEnB,SAAS,EAAe,EAAqD,CAC3E,IAAM,EAAQ,EAAO,MAAM,QAAQ,CAAC,CAAC,OAAQ,GAAS,EAAK,KAAK,IAAM,EAAE,EACpE,KAAM,SAAW,EACrB,GAAI,CACF,IAAM,EAAiB,KAAK,MAAM,EAAM,EAAG,EAC3C,OAAO,OAAO,GAAU,UAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,EACtE,EAAmC,IAAA,EACzC,MAAQ,CACN,MACF,CACF,CAEA,SAAgB,EAAwB,EAI1B,CACZ,IAAM,EAAQ,EAAe,CAAM,EACnC,GAAI,IAAU,IAAA,GAAW,OACzB,IAAM,EAAO,EAAM,gBACf,SAAS,IAAA,KAAc,CAAC,MAAM,QAAQ,CAAI,GAAK,EAAK,OAAS,KAC/D,CAAC,EAAK,MAAO,GAAS,OAAO,GAAS,UAAY,4BAA4B,KAAK,CAAI,CAAC,IAC1F,IAAI,EAAM,QAAU,UAElB,OADI,EAAM,UAAY,GACf,CAAE,QAAS,GAAM,gBAAiB,OAAO,OAAO,CAAC,GAAI,IAAI,IAAK,GAAQ,CAAC,CAAc,CAAE,CAAC,CAAE,EADpE,OAG/B,GAAI,EAAM,UAAY,IAAQ,OAAO,EAAM,WAAc,UAAY,EAAM,UAAU,KAAK,IAAM,GAAI,CAClG,IAAM,EAAQ,MAAM,QAAQ,EAAM,KAAK,EAAI,EAAM,MAAM,OAAQ,GAAuB,OAAO,GAAQ,QAAQ,EAAI,CAAC,EAClH,MAAO,CAAE,QAAS,GAAO,SAAU,CAAE,OAAQ,EAAM,UAAW,MAAO,EAAM,MAAM,EAAG,EAAE,CAAE,EAAG,gBAAiB,CAAC,CAAE,CACjH,CACA,MAAO,CAAE,QAAS,GAAO,gBAAiB,CAAC,CAAE,CAL7C,CAMF,CAEA,SAAgB,EAAwB,EAAoD,CAC1F,IAAM,EAAQ,EAAe,CAAM,EACnC,GAAI,OAAO,GAAO,IAAO,UAAY,EAAM,GAAG,KAAK,IAAM,IAAM,OAAO,EAAM,KAAQ,SAAU,OAC9F,IAAM,EAAQ,EAAW,KAAK,EAAM,GAAG,EACvC,GAAI,CAAC,EAAO,OACZ,IAAM,EAAO,OAAO,EAAM,EAAE,EAC5B,OAAO,OAAO,UAAU,CAAI,GAAK,EAAO,GAAK,GAAQ,MACjD,CAAE,GAAI,EAAM,GAAI,IAAK,EAAM,IAAK,MAAK,EAAI,IAAA,EAC/C,CAEA,SAAgB,EAA6B,EAAkC,CAE7E,MAAO,mCADS,IAAS,IAAA,GAAY,SAAW,kBAAkB,IAChB,4EACpD,CAGA,SAAgB,EAA2B,EAAuC,CAChF,IAAM,EAAc,OAAO,OAAO,CAAE,GAAG,EAAQ,WAAY,CAAC,EAEtD,EADU,EAAqB,EAAQ,QAAQ,CAAC,CAAC,eAAe,CAAE,aAAY,CAC/D,CAAC,CAAC,OACjB,EAAS,EAAwB,EAAa,EAAwB,CAAM,CAAC,EAC/E,EAA6C,KAC7C,EAA+C,KAC/C,EACA,EAAa,GAEX,GAAoB,EAA0B,CAAC,IAA8B,CACjF,IAAM,EAAiC,CAAC,EACxC,IAAK,IAAM,KAAO,EAAkB,EAAO,KAAS,IAAA,KAAW,EAAO,GAAO,EAAO,IACpF,IAAK,IAAM,KAAO,EAAU,EAAO,KAAS,IAAA,KAAW,EAAO,GAAO,EAAO,IAC5E,IAAK,GAAM,CAAE,UAAS,QAAO,gBAAgB,EAAqB,EAAG,CACnE,GAAI,EAAW,WAAa,WAAa,CAAC,EAAW,UAAU,SAAS,KAAK,EAAG,SAChF,IAAM,EAAS,EAAO,EAAQ,CAAuC,GACjE,IAAU,IAAA,KAAW,EAAO,EAAW,UAAY,OAAO,GAAU,SAAW,EAAQ,KAAK,UAAU,CAAK,EACjH,CAEA,OADI,EAAO,sBAAwB,IAAA,KAAW,EAAO,oBAAsB,EAAO,qBAC3E,CACT,EAEA,eAAe,GAAsC,CACnD,IAAI,EAA0B,CAAC,EACzB,EAAS,EACX,IAAA,GACA,MAAM,EAAQ,QAAQ,CAAC,QAAS,SAAU,QAAQ,EAAG,EAAiB,CAAC,EACrE,EAAQ,GAAQ,WAAa,EAAI,EAAwB,EAAO,MAAM,EAAI,IAAA,GAChF,GAAI,CAAC,GAAc,GAAO,WAAa,IAAA,GAAW,CAChD,IAAM,EAAS,MAAM,EAAQ,YAAY,EAAM,QAAQ,EACvD,GAAI,IAAW,SAAW,IAAW,cAAgB,IAAW,OAC9D,MAAO,CAAE,GAAI,GAAO,OAAQ,mCAAoC,EAClE,GAAI,IAAW,OAAQ,MAAO,CAAE,GAAI,GAAO,OAAQ,2BAA4B,EAE/E,GADI,IAAW,eAAc,EAAa,IACtC,IAAW,QAAS,CACtB,IAAM,EAAQ,MAAM,EAAQ,QAAQ,CAAC,QAAS,OAAO,EAAG,EAAiB,CAAC,EAC1E,GAAI,EAAM,WAAa,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,EAAM,OAAO,KAAK,GAAK,+BAAgC,EAC7G,IAAM,EAAU,MAAM,EAAQ,QAAQ,CAAC,QAAS,SAAU,QAAQ,EAAG,EAAiB,CAAC,EACjF,EAAe,EAAQ,WAAa,EAAI,EAAwB,EAAQ,MAAM,EAAI,IAAA,GACxF,GAAI,GAAc,UAAY,GAC5B,MAAO,CAAE,GAAI,GAAO,OAAQ,qDAAsD,EACpF,EAAO,EAAa,eACtB,CACF,KAAO,GAAO,GAAO,iBAAmB,CAAC,EACzC,IAAM,EAAS,MAAM,EAAQ,QAC3B,CAAC,SAAU,QAAS,SAAU,GAAI,EAAa,CAAC,wBAAwB,EAAI,CAAC,CAAE,EAC/E,EAAiB,EAAa,CAAC,EAAI,CAAI,CACzC,EACM,EAAW,EAAO,WAAa,EAAI,EAAwB,EAAO,MAAM,EAAI,IAAA,GAClF,OAAO,IAAa,IAAA,GAChB,CAAE,GAAI,GAAO,OAAQ,EAAO,OAAO,KAAK,GAAK,oDAAqD,EAClG,CAAE,GAAI,GAAM,UAAS,CAC3B,CAEA,IAAM,MAA2C,CAC/C,GAAI,IAAa,KAAM,OAAO,EAC9B,IAAM,EAAU,EAAO,CAAC,CAAC,KAAM,IAC7B,EAAc,EAAO,GAAK,EAAO,SAAS,KAAO,IAAA,GACjD,EAAW,KACJ,GACL,GAAmB,CAGrB,KAFA,GAAc,IAAA,GACd,EAAW,KACL,CACR,CAAC,EAED,MADA,GAAS,EAAW,EACb,CACT,EAEA,OAAO,OAAO,OAAO,CACnB,SACA,aAAc,EAAK,EAAO,QAAQ,SAAU,SAAS,EACrD,QACA,UAAW,EACX,YAAmD,EACnD,SAAgC,EAChC,QAAmB,EAA6B,CAAW,CAC7D,CAAC,CACH"}

package/dist/node/headless.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
+import{R as e,c as t,g as n,h as r,l as i,m as a,o,p as s,s as c,t as l,u}from"./cli-core-QK7sBRp8.js";if(r(c(process.argv)))try{let e=u({});s(e),a(e.config.identity.cliName),i(e.environment),n(o(e))}catch(e){process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1}else try{let n=u({});s(n),a(n.config.identity.cliName);let r=t();!r.serve||r.printMode||r.goal!==void 0||r.positional.length>0||r.reset||r.configure||r.configureProvider!==void 0||r.checkUpdate||r.help||r.version?(process.stderr.write(`This headless runtime accepts only --serve.
+`),process.exitCode=2):l({productRuntime:n},e).catch(e=>{process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=1})}catch(e){process.stderr.write(`${e instanceof Error?e.message:String(e)}\n`),process.exitCode=2}export{};

package/dist/node/host.d.ts

@@ -0,0 +1,3 @@
+import { t as IProductCliArtifact } from "./artifact-DrPhOb_v.js";
+import { n as createProductCliHost, t as IProductCliHost } from "./product-host-DYR8lHfh.js";
+export { type IProductCliArtifact, IProductCliHost, createProductCliHost };

package/dist/node/host.js

@@ -0,0 +1 @@
+import{t as e}from"./product-host-CwqVX6Xg.js";export{e as createProductCliHost};

package/dist/node/http-executor-ADn4locH-D-8crzF8.js

@@ -0,0 +1,2 @@
+import{n as e}from"./rolldown-runtime-C9xYM0wc.js";import{r as t}from"./verdict-decoder-Dz_rjoIZ-DA8BKB83.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-DK3Fl9T5.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};
+//# sourceMappingURL=http-executor-ADn4locH-D-8crzF8.js.map

package/dist/node/http-executor-ADn4locH-D-8crzF8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-executor-ADn4locH-D-8crzF8.js","names":["e","t"],"sources":["../../../agent-core/dist/node/http-executor-ADn4locH.js"],"sourcesContent":["import{t as e}from\"./rolldown-runtime-DK3Fl9T5.js\";import{t}from\"./verdict-decoder-Dz_rjoIZ.js\";var n=e({HttpExecutor:()=>i});function r(e){return e.replace(/\\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var i=class{type=`http`;async execute(e,n){let i=(e.timeout??10)*1e3,o={\"Content-Type\":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))o[t]=r(n);try{let r=await fetch(e.url,{method:`POST`,headers:o,body:JSON.stringify(n),signal:AbortSignal.timeout(i)});return r.ok?t(await r.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${r.status} ${r.statusText}`}}catch(e){return a(e)}}};function a(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{n,i as t};\n//# sourceMappingURL=http-executor-ADn4locH.js.map"],"mappings":"qMAAoG,EAAEA,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,QAAQ,+BAA+B,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,GAAG,OAAO,IAAI,IAAK,GAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,OAAO,MAAM,QAAQ,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,SAAS,IAAI,IAAI,EAAE,CAAC,eAAe,kBAAkB,EAAE,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,MAAM,EAAE,IAAI,CAAC,OAAO,OAAO,QAAQ,EAAE,KAAK,KAAK,UAAU,CAAC,EAAE,OAAO,YAAY,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAGC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,cAAc,OAAO,QAAQ,EAAE,OAAO,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,QAAQ,OAAO,OAAO,KAAK,aAAa,OAAO,EAAE,OAAO,eAAe,UAAU,oBAAoB,OAAO,aAAa,MAAM,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC"}

package/dist/node/http-executor-ADn4locH-uz5KV6N-.js

@@ -0,0 +1,2 @@
+;(function(){var v=parseInt(process.versions.node.split('.')[0],10);if(v<22){process.stderr.write('\n✗ Node.js 22+ is required (current: '+process.version+')\n\nUpgrade:\n  nvm:   nvm install 22 && nvm use 22\n  Volta: volta install node@22\n  Download: https://nodejs.org/en/download\n\n');process.exit(1);}})();
+import{n as e}from"./rolldown-runtime-rs7quPpn.js";import{r as t}from"./verdict-decoder-Dz_rjoIZ-qM0jJVsB.js";import{t as n}from"./rolldown-runtime-DK3Fl9T5-BeX3Bzvn.js";var r=e({n:()=>i,t:()=>o}),i=n({HttpExecutor:()=>o});function a(e){return e.replace(/\$([A-Za-z_][A-Za-z0-9_]*)/g,(e,t)=>{let n=process.env[t];return n===void 0?e:n})}var o=class{type=`http`;async execute(e,n){let r=(e.timeout??10)*1e3,i={"Content-Type":`application/json`};if(e.headers)for(let[t,n]of Object.entries(e.headers))i[t]=a(n);try{let a=await fetch(e.url,{method:`POST`,headers:i,body:JSON.stringify(n),signal:AbortSignal.timeout(r)});return a.ok?t(await a.text(),`http`,n.hook_event_name):{outcome:`error`,source:`http`,kind:`http-status`,reason:`HTTP ${a.status} ${a.statusText}`}}catch(e){return s(e)}}};function s(e){return{outcome:`error`,source:`http`,kind:e instanceof Error&&e.name===`TimeoutError`?`timeout`:`transport-failure`,reason:e instanceof Error?e.message:String(e)}}export{o as n,r as t};