@schovest/pi-coding-agent 0.7.3

package/dist/core/auth-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-storage.js","sourceRoot":"","sources":["../../src/core/auth-storage.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,WAAW,EACX,YAAY,GAIZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,QAAQ,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA0B/D,MAAM,uBAAuB,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAW,CAAC;AAO5E,MAAM,OAAO,sBAAsB;IAC1B,QAAQ,CAAS;IAEzB,YAAY,QAAQ,GAAW,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,EAAE;QAChE,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAAA,CACxC;IAEO,eAAe,GAAS;QAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;IAAA,CACD;IAEO,gBAAgB,GAAS;QAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;YAC5D,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IAAA,CACD;IAEO,wBAAwB,CAAC,IAAY,EAAc;QAC1D,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,EAAE,CAAC;QACnB,IAAI,SAAkB,CAAC;QAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,CAAC;gBACJ,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,GACT,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;oBAC7D,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,IAAI,CAAC;oBAC5C,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBACnD,MAAM,KAAK,CAAC;gBACb,CAAC;gBACD,SAAS,GAAG,KAAK,CAAC;gBAClB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,OAAO,EAAE,CAAC;oBACrC,0DAA0D;gBAC3D,CAAC;YACF,CAAC;QACF,CAAC;QAED,MAAO,SAAmB,IAAI,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAAA,CAC/E;IAED,QAAQ,CAAI,EAAkD,EAAK;QAClE,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,OAAiC,CAAC;QACtC,IAAI,CAAC;YACJ,OAAO,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC5D,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;YACX,CAAC;QACF,CAAC;IAAA,CACD;IAED,KAAK,CAAC,aAAa,CAAI,EAA2D,EAAc;QAC/F,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,OAA0C,CAAC;QAC/C,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,oBAAuC,CAAC;QAC5C,MAAM,kBAAkB,GAAG,GAAG,EAAE,CAAC;YAChC,IAAI,eAAe,EAAE,CAAC;gBACrB,MAAM,oBAAoB,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAC9E,CAAC;QAAA,CACD,CAAC;QAEF,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC5C,OAAO,EAAE;oBACR,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,CAAC;oBACT,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,KAAK;oBACjB,SAAS,EAAE,IAAI;iBACf;gBACD,KAAK,EAAE,KAAK;gBACZ,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;oBACvB,eAAe,GAAG,IAAI,CAAC;oBACvB,oBAAoB,GAAG,GAAG,CAAC;gBAAA,CAC3B;aACD,CAAC,CAAC;YAEH,kBAAkB,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3C,kBAAkB,EAAE,CAAC;YACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACxB,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;gBAC5D,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,kBAAkB,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,IAAI,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC;oBACJ,MAAM,OAAO,EAAE,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACR,iDAAiD;gBAClD,CAAC;YACF,CAAC;QACF,CAAC;IAAA,CACD;CACD;AAED,MAAM,OAAO,0BAA0B;IAC9B,KAAK,CAAqB;IAElC,QAAQ,CAAI,EAAkD,EAAK;QAClE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAAA,CACd;IAED,KAAK,CAAC,aAAa,CAAI,EAA2D,EAAc;QAC/F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAAA,CACd;CACD;AAED;;GAEG;AACH,MAAM,OAAO,WAAW;IACf,IAAI,GAAoB,EAAE,CAAC;IAC3B,gBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;IAClD,gBAAgB,CAA4C;IAC5D,SAAS,GAAiB,IAAI,CAAC;IAC/B,MAAM,GAAY,EAAE,CAAC;IACrB,OAAO,CAAqB;IAEpC,YAAoB,OAA2B,EAAE;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,EAAE,CAAC;IAAA,CACd;IAED,MAAM,CAAC,MAAM,CAAC,QAAiB,EAAe;QAC7C,OAAO,IAAI,WAAW,CAAC,IAAI,sBAAsB,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAAA,CACjG;IAED,MAAM,CAAC,WAAW,CAAC,OAA2B,EAAe;QAC5D,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;IAAA,CAChC;IAED,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAoB,EAAE,EAAe;QACxD,MAAM,OAAO,GAAG,IAAI,0BAA0B,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,OAAO,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAAA,CACxC;IAED;;;OAGG;IACH,gBAAgB,CAAC,QAAgB,EAAE,MAAc,EAAQ;QACxD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAAA,CAC5C;IAED;;OAEG;IACH,mBAAmB,CAAC,QAAgB,EAAQ;QAC3C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAAA,CACvC;IAED;;;OAGG;IACH,mBAAmB,CAAC,QAAkD,EAAQ;QAC7E,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;IAAA,CACjC;IAEO,WAAW,CAAC,KAAc,EAAQ;QACzC,MAAM,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAAA,CAClC;IAEO,gBAAgB,CAAC,OAA2B,EAAmB;QACtE,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,EAAE,CAAC;QACX,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;IAAA,CAC9C;IAED;;OAEG;IACH,MAAM,GAAS;QACd,IAAI,OAA2B,CAAC;QAChC,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClC,OAAO,GAAG,OAAO,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAAA,CAC7B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,SAAS,GAAG,KAAc,CAAC;YAChC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IAAA,CACD;IAEO,qBAAqB,CAAC,QAAgB,EAAE,UAAsC,EAAQ;QAC7F,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAoB,EAAE,GAAG,WAAW,EAAE,CAAC;gBACnD,IAAI,UAAU,EAAE,CAAC;oBAChB,MAAM,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;gBAC/B,CAAC;qBAAM,CAAC;oBACP,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAAA,CACpE,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IAAA,CACD;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB,EAA8B;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAAA,CACxC;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB,EAAE,UAA0B,EAAQ;QACvD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,UAAU,CAAC;QACjC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAAA,CACjD;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB,EAAQ;QAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAAA,CAChD;IAED;;OAEG;IACH,IAAI,GAAa;QAChB,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAAA,CAC9B;IAED;;OAEG;IACH,GAAG,CAAC,QAAgB,EAAW;QAC9B,OAAO,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;IAAA,CAC7B;IAED;;;OAGG;IACH,OAAO,CAAC,QAAgB,EAAW;QAClC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,OAAO,KAAK,CAAC;IAAA,CACb;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAc;QAC3C,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QACnF,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAAA,CAC7B;IAED;;OAEG;IACH,MAAM,GAAoB;QACzB,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAAA,CACxB;IAED,WAAW,GAAY;QACtB,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC;IAAA,CACf;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,UAA2B,EAAE,SAA8B,EAAiB;QACvF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IAAA,CACxD;IAED;;OAEG;IACH,MAAM,CAAC,QAAgB,EAAQ;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAAA,CACtB;IAED;;;OAGG;IACK,KAAK,CAAC,yBAAyB,CACtC,UAA2B,EAC4C;QACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;YAClE,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YAEtB,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACrC,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/E,CAAC;YAED,MAAM,UAAU,GAAqC,EAAE,CAAC;YACxD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC5B,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBACzB,CAAC;YACF,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACzB,CAAC;YAED,MAAM,MAAM,GAAoB;gBAC/B,GAAG,WAAW;gBACd,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,cAAc,EAAE;aAC5D,CAAC;YACF,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;YACnB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAAA,CACpE,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAAA,CACd;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,OAAuC,EAA+B;QACzG,0CAA0C;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEnC,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAED,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,4CAA4C;gBAC5C,OAAO,SAAS,CAAC;YAClB,CAAC;YAED,+BAA+B;YAC/B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC;YAEhD,IAAI,YAAY,EAAE,CAAC;gBAClB,gDAAgD;gBAChD,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC;oBAChE,IAAI,MAAM,EAAE,CAAC;wBACZ,OAAO,MAAM,CAAC,MAAM,CAAC;oBACtB,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;oBACxB,uEAAuE;oBACvE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACd,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAE1C,IAAI,WAAW,EAAE,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;wBACvE,iEAAiE;wBACjE,OAAO,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;oBACxC,CAAC;oBAED,iFAAiF;oBACjF,uEAAuE;oBACvE,OAAO,SAAS,CAAC;gBAClB,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,8CAA8C;gBAC9C,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;QAED,oCAAoC;QACpC,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,oEAAoE;QACpE,IAAI,OAAO,EAAE,eAAe,KAAK,KAAK,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;QACzD,CAAC;QAED,OAAO,SAAS,CAAC;IAAA,CACjB;IAED;;OAEG;IACH,iBAAiB,GAAG;QACnB,OAAO,iBAAiB,EAAE,CAAC;IAAA,CAC3B;CACD","sourcesContent":["/**\n * Credential storage for API keys and OAuth tokens.\n * Handles loading, saving, and refreshing credentials from auth.json.\n *\n * Uses file locking to prevent race conditions when multiple pi instances\n * try to refresh tokens simultaneously.\n */\n\nimport {\n\tfindEnvKeys,\n\tgetEnvApiKey,\n\ttype OAuthCredentials,\n\ttype OAuthLoginCallbacks,\n\ttype OAuthProviderId,\n} from \"@schovest/pi-ai\";\nimport { getOAuthApiKey, getOAuthProvider, getOAuthProviders } from \"@schovest/pi-ai/oauth\";\nimport { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"fs\";\nimport { dirname, join } from \"path\";\nimport lockfile from \"proper-lockfile\";\nimport { getAgentDir } from \"../config.ts\";\nimport { normalizePath } from \"../utils/paths.ts\";\nimport { resolveConfigValue } from \"./resolve-config-value.ts\";\n\nexport type ApiKeyCredential = {\n\ttype: \"api_key\";\n\tkey: string;\n};\n\nexport type OAuthCredential = {\n\ttype: \"oauth\";\n} & OAuthCredentials;\n\nexport type AuthCredential = ApiKeyCredential | OAuthCredential;\n\nexport type AuthStorageData = Record<string, AuthCredential>;\n\nexport type AuthStatus = {\n\tconfigured: boolean;\n\tsource?: \"stored\" | \"runtime\" | \"environment\" | \"fallback\" | \"models_json_key\" | \"models_json_command\";\n\tlabel?: string;\n};\n\ntype LockResult<T> = {\n\tresult: T;\n\tnext?: string;\n};\n\nconst AUTH_FILE_WRITE_OPTIONS = { encoding: \"utf-8\", mode: 0o600 } as const;\n\nexport interface AuthStorageBackend {\n\twithLock<T>(fn: (current: string | undefined) => LockResult<T>): T;\n\twithLockAsync<T>(fn: (current: string | undefined) => Promise<LockResult<T>>): Promise<T>;\n}\n\nexport class FileAuthStorageBackend implements AuthStorageBackend {\n\tprivate authPath: string;\n\n\tconstructor(authPath: string = join(getAgentDir(), \"auth.json\")) {\n\t\tthis.authPath = normalizePath(authPath);\n\t}\n\n\tprivate ensureParentDir(): void {\n\t\tconst dir = dirname(this.authPath);\n\t\tif (!existsSync(dir)) {\n\t\t\tmkdirSync(dir, { recursive: true, mode: 0o700 });\n\t\t}\n\t}\n\n\tprivate ensureFileExists(): void {\n\t\tif (!existsSync(this.authPath)) {\n\t\t\twriteFileSync(this.authPath, \"{}\", AUTH_FILE_WRITE_OPTIONS);\n\t\t\tchmodSync(this.authPath, 0o600);\n\t\t}\n\t}\n\n\tprivate acquireLockSyncWithRetry(path: string): () => void {\n\t\tconst maxAttempts = 10;\n\t\tconst delayMs = 20;\n\t\tlet lastError: unknown;\n\n\t\tfor (let attempt = 1; attempt <= maxAttempts; attempt++) {\n\t\t\ttry {\n\t\t\t\treturn lockfile.lockSync(path, { realpath: false });\n\t\t\t} catch (error) {\n\t\t\t\tconst code =\n\t\t\t\t\ttypeof error === \"object\" && error !== null && \"code\" in error\n\t\t\t\t\t\t? String((error as { code?: unknown }).code)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tif (code !== \"ELOCKED\" || attempt === maxAttempts) {\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t\tlastError = error;\n\t\t\t\tconst start = Date.now();\n\t\t\t\twhile (Date.now() - start < delayMs) {\n\t\t\t\t\t// Sleep synchronously to avoid changing callers to async.\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\tthrow (lastError as Error) ?? new Error(\"Failed to acquire auth storage lock\");\n\t}\n\n\twithLock<T>(fn: (current: string | undefined) => LockResult<T>): T {\n\t\tthis.ensureParentDir();\n\t\tthis.ensureFileExists();\n\n\t\tlet release: (() => void) | undefined;\n\t\ttry {\n\t\t\trelease = this.acquireLockSyncWithRetry(this.authPath);\n\t\t\tconst current = existsSync(this.authPath) ? readFileSync(this.authPath, \"utf-8\") : undefined;\n\t\t\tconst { result, next } = fn(current);\n\t\t\tif (next !== undefined) {\n\t\t\t\twriteFileSync(this.authPath, next, AUTH_FILE_WRITE_OPTIONS);\n\t\t\t\tchmodSync(this.authPath, 0o600);\n\t\t\t}\n\t\t\treturn result;\n\t\t} finally {\n\t\t\tif (release) {\n\t\t\t\trelease();\n\t\t\t}\n\t\t}\n\t}\n\n\tasync withLockAsync<T>(fn: (current: string | undefined) => Promise<LockResult<T>>): Promise<T> {\n\t\tthis.ensureParentDir();\n\t\tthis.ensureFileExists();\n\n\t\tlet release: (() => Promise<void>) | undefined;\n\t\tlet lockCompromised = false;\n\t\tlet lockCompromisedError: Error | undefined;\n\t\tconst throwIfCompromised = () => {\n\t\t\tif (lockCompromised) {\n\t\t\t\tthrow lockCompromisedError ?? new Error(\"Auth storage lock was compromised\");\n\t\t\t}\n\t\t};\n\n\t\ttry {\n\t\t\trelease = await lockfile.lock(this.authPath, {\n\t\t\t\tretries: {\n\t\t\t\t\tretries: 10,\n\t\t\t\t\tfactor: 2,\n\t\t\t\t\tminTimeout: 100,\n\t\t\t\t\tmaxTimeout: 10000,\n\t\t\t\t\trandomize: true,\n\t\t\t\t},\n\t\t\t\tstale: 30000,\n\t\t\t\tonCompromised: (err) => {\n\t\t\t\t\tlockCompromised = true;\n\t\t\t\t\tlockCompromisedError = err;\n\t\t\t\t},\n\t\t\t});\n\n\t\t\tthrowIfCompromised();\n\t\t\tconst current = existsSync(this.authPath) ? readFileSync(this.authPath, \"utf-8\") : undefined;\n\t\t\tconst { result, next } = await fn(current);\n\t\t\tthrowIfCompromised();\n\t\t\tif (next !== undefined) {\n\t\t\t\twriteFileSync(this.authPath, next, AUTH_FILE_WRITE_OPTIONS);\n\t\t\t\tchmodSync(this.authPath, 0o600);\n\t\t\t}\n\t\t\tthrowIfCompromised();\n\t\t\treturn result;\n\t\t} finally {\n\t\t\tif (release) {\n\t\t\t\ttry {\n\t\t\t\t\tawait release();\n\t\t\t\t} catch {\n\t\t\t\t\t// Ignore unlock errors when lock is compromised.\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n}\n\nexport class InMemoryAuthStorageBackend implements AuthStorageBackend {\n\tprivate value: string | undefined;\n\n\twithLock<T>(fn: (current: string | undefined) => LockResult<T>): T {\n\t\tconst { result, next } = fn(this.value);\n\t\tif (next !== undefined) {\n\t\t\tthis.value = next;\n\t\t}\n\t\treturn result;\n\t}\n\n\tasync withLockAsync<T>(fn: (current: string | undefined) => Promise<LockResult<T>>): Promise<T> {\n\t\tconst { result, next } = await fn(this.value);\n\t\tif (next !== undefined) {\n\t\t\tthis.value = next;\n\t\t}\n\t\treturn result;\n\t}\n}\n\n/**\n * Credential storage backed by a JSON file.\n */\nexport class AuthStorage {\n\tprivate data: AuthStorageData = {};\n\tprivate runtimeOverrides: Map<string, string> = new Map();\n\tprivate fallbackResolver?: (provider: string) => string | undefined;\n\tprivate loadError: Error | null = null;\n\tprivate errors: Error[] = [];\n\tprivate storage: AuthStorageBackend;\n\n\tprivate constructor(storage: AuthStorageBackend) {\n\t\tthis.storage = storage;\n\t\tthis.reload();\n\t}\n\n\tstatic create(authPath?: string): AuthStorage {\n\t\treturn new AuthStorage(new FileAuthStorageBackend(authPath ?? join(getAgentDir(), \"auth.json\")));\n\t}\n\n\tstatic fromStorage(storage: AuthStorageBackend): AuthStorage {\n\t\treturn new AuthStorage(storage);\n\t}\n\n\tstatic inMemory(data: AuthStorageData = {}): AuthStorage {\n\t\tconst storage = new InMemoryAuthStorageBackend();\n\t\tstorage.withLock(() => ({ result: undefined, next: JSON.stringify(data, null, 2) }));\n\t\treturn AuthStorage.fromStorage(storage);\n\t}\n\n\t/**\n\t * Set a runtime API key override (not persisted to disk).\n\t * Used for CLI --api-key flag.\n\t */\n\tsetRuntimeApiKey(provider: string, apiKey: string): void {\n\t\tthis.runtimeOverrides.set(provider, apiKey);\n\t}\n\n\t/**\n\t * Remove a runtime API key override.\n\t */\n\tremoveRuntimeApiKey(provider: string): void {\n\t\tthis.runtimeOverrides.delete(provider);\n\t}\n\n\t/**\n\t * Set a fallback resolver for API keys not found in auth.json or env vars.\n\t * Used for custom provider keys from models.json.\n\t */\n\tsetFallbackResolver(resolver: (provider: string) => string | undefined): void {\n\t\tthis.fallbackResolver = resolver;\n\t}\n\n\tprivate recordError(error: unknown): void {\n\t\tconst normalizedError = error instanceof Error ? error : new Error(String(error));\n\t\tthis.errors.push(normalizedError);\n\t}\n\n\tprivate parseStorageData(content: string | undefined): AuthStorageData {\n\t\tif (!content) {\n\t\t\treturn {};\n\t\t}\n\t\treturn JSON.parse(content) as AuthStorageData;\n\t}\n\n\t/**\n\t * Reload credentials from storage.\n\t */\n\treload(): void {\n\t\tlet content: string | undefined;\n\t\ttry {\n\t\t\tthis.storage.withLock((current) => {\n\t\t\t\tcontent = current;\n\t\t\t\treturn { result: undefined };\n\t\t\t});\n\t\t\tthis.data = this.parseStorageData(content);\n\t\t\tthis.loadError = null;\n\t\t} catch (error) {\n\t\t\tthis.loadError = error as Error;\n\t\t\tthis.recordError(error);\n\t\t}\n\t}\n\n\tprivate persistProviderChange(provider: string, credential: AuthCredential | undefined): void {\n\t\tif (this.loadError) {\n\t\t\treturn;\n\t\t}\n\n\t\ttry {\n\t\t\tthis.storage.withLock((current) => {\n\t\t\t\tconst currentData = this.parseStorageData(current);\n\t\t\t\tconst merged: AuthStorageData = { ...currentData };\n\t\t\t\tif (credential) {\n\t\t\t\t\tmerged[provider] = credential;\n\t\t\t\t} else {\n\t\t\t\t\tdelete merged[provider];\n\t\t\t\t}\n\t\t\t\treturn { result: undefined, next: JSON.stringify(merged, null, 2) };\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tthis.recordError(error);\n\t\t}\n\t}\n\n\t/**\n\t * Get credential for a provider.\n\t */\n\tget(provider: string): AuthCredential | undefined {\n\t\treturn this.data[provider] ?? undefined;\n\t}\n\n\t/**\n\t * Set credential for a provider.\n\t */\n\tset(provider: string, credential: AuthCredential): void {\n\t\tthis.data[provider] = credential;\n\t\tthis.persistProviderChange(provider, credential);\n\t}\n\n\t/**\n\t * Remove credential for a provider.\n\t */\n\tremove(provider: string): void {\n\t\tdelete this.data[provider];\n\t\tthis.persistProviderChange(provider, undefined);\n\t}\n\n\t/**\n\t * List all providers with credentials.\n\t */\n\tlist(): string[] {\n\t\treturn Object.keys(this.data);\n\t}\n\n\t/**\n\t * Check if credentials exist for a provider in auth.json.\n\t */\n\thas(provider: string): boolean {\n\t\treturn provider in this.data;\n\t}\n\n\t/**\n\t * Check if any form of auth is configured for a provider.\n\t * Unlike getApiKey(), this doesn't refresh OAuth tokens.\n\t */\n\thasAuth(provider: string): boolean {\n\t\tif (this.runtimeOverrides.has(provider)) return true;\n\t\tif (this.data[provider]) return true;\n\t\tif (getEnvApiKey(provider)) return true;\n\t\tif (this.fallbackResolver?.(provider)) return true;\n\t\treturn false;\n\t}\n\n\t/**\n\t * Return auth status without exposing credential values or refreshing tokens.\n\t */\n\tgetAuthStatus(provider: string): AuthStatus {\n\t\tif (this.data[provider]) {\n\t\t\treturn { configured: true, source: \"stored\" };\n\t\t}\n\n\t\tif (this.runtimeOverrides.has(provider)) {\n\t\t\treturn { configured: false, source: \"runtime\", label: \"--api-key\" };\n\t\t}\n\n\t\tconst envKeys = findEnvKeys(provider);\n\t\tif (envKeys?.[0]) {\n\t\t\treturn { configured: false, source: \"environment\", label: envKeys[0] };\n\t\t}\n\n\t\tif (this.fallbackResolver?.(provider)) {\n\t\t\treturn { configured: false, source: \"fallback\", label: \"custom provider config\" };\n\t\t}\n\n\t\treturn { configured: false };\n\t}\n\n\t/**\n\t * Get all credentials (for passing to getOAuthApiKey).\n\t */\n\tgetAll(): AuthStorageData {\n\t\treturn { ...this.data };\n\t}\n\n\tdrainErrors(): Error[] {\n\t\tconst drained = [...this.errors];\n\t\tthis.errors = [];\n\t\treturn drained;\n\t}\n\n\t/**\n\t * Login to an OAuth provider.\n\t */\n\tasync login(providerId: OAuthProviderId, callbacks: OAuthLoginCallbacks): Promise<void> {\n\t\tconst provider = getOAuthProvider(providerId);\n\t\tif (!provider) {\n\t\t\tthrow new Error(`Unknown OAuth provider: ${providerId}`);\n\t\t}\n\n\t\tconst credentials = await provider.login(callbacks);\n\t\tthis.set(providerId, { type: \"oauth\", ...credentials });\n\t}\n\n\t/**\n\t * Logout from a provider.\n\t */\n\tlogout(provider: string): void {\n\t\tthis.remove(provider);\n\t}\n\n\t/**\n\t * Refresh OAuth token with backend locking to prevent race conditions.\n\t * Multiple pi instances may try to refresh simultaneously when tokens expire.\n\t */\n\tprivate async refreshOAuthTokenWithLock(\n\t\tproviderId: OAuthProviderId,\n\t): Promise<{ apiKey: string; newCredentials: OAuthCredentials } | null> {\n\t\tconst provider = getOAuthProvider(providerId);\n\t\tif (!provider) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst result = await this.storage.withLockAsync(async (current) => {\n\t\t\tconst currentData = this.parseStorageData(current);\n\t\t\tthis.data = currentData;\n\t\t\tthis.loadError = null;\n\n\t\t\tconst cred = currentData[providerId];\n\t\t\tif (cred?.type !== \"oauth\") {\n\t\t\t\treturn { result: null };\n\t\t\t}\n\n\t\t\tif (Date.now() < cred.expires) {\n\t\t\t\treturn { result: { apiKey: provider.getApiKey(cred), newCredentials: cred } };\n\t\t\t}\n\n\t\t\tconst oauthCreds: Record<string, OAuthCredentials> = {};\n\t\t\tfor (const [key, value] of Object.entries(currentData)) {\n\t\t\t\tif (value.type === \"oauth\") {\n\t\t\t\t\toauthCreds[key] = value;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tconst refreshed = await getOAuthApiKey(providerId, oauthCreds);\n\t\t\tif (!refreshed) {\n\t\t\t\treturn { result: null };\n\t\t\t}\n\n\t\t\tconst merged: AuthStorageData = {\n\t\t\t\t...currentData,\n\t\t\t\t[providerId]: { type: \"oauth\", ...refreshed.newCredentials },\n\t\t\t};\n\t\t\tthis.data = merged;\n\t\t\tthis.loadError = null;\n\t\t\treturn { result: refreshed, next: JSON.stringify(merged, null, 2) };\n\t\t});\n\n\t\treturn result;\n\t}\n\n\t/**\n\t * Get API key for a provider.\n\t * Priority:\n\t * 1. Runtime override (CLI --api-key)\n\t * 2. API key from auth.json\n\t * 3. OAuth token from auth.json (auto-refreshed with locking)\n\t * 4. Environment variable\n\t * 5. Fallback resolver (models.json custom providers)\n\t */\n\tasync getApiKey(providerId: string, options?: { includeFallback?: boolean }): Promise<string | undefined> {\n\t\t// Runtime override takes highest priority\n\t\tconst runtimeKey = this.runtimeOverrides.get(providerId);\n\t\tif (runtimeKey) {\n\t\t\treturn runtimeKey;\n\t\t}\n\n\t\tconst cred = this.data[providerId];\n\n\t\tif (cred?.type === \"api_key\") {\n\t\t\treturn resolveConfigValue(cred.key);\n\t\t}\n\n\t\tif (cred?.type === \"oauth\") {\n\t\t\tconst provider = getOAuthProvider(providerId);\n\t\t\tif (!provider) {\n\t\t\t\t// Unknown OAuth provider, can't get API key\n\t\t\t\treturn undefined;\n\t\t\t}\n\n\t\t\t// Check if token needs refresh\n\t\t\tconst needsRefresh = Date.now() >= cred.expires;\n\n\t\t\tif (needsRefresh) {\n\t\t\t\t// Use locked refresh to prevent race conditions\n\t\t\t\ttry {\n\t\t\t\t\tconst result = await this.refreshOAuthTokenWithLock(providerId);\n\t\t\t\t\tif (result) {\n\t\t\t\t\t\treturn result.apiKey;\n\t\t\t\t\t}\n\t\t\t\t} catch (error) {\n\t\t\t\t\tthis.recordError(error);\n\t\t\t\t\t// Refresh failed - re-read file to check if another instance succeeded\n\t\t\t\t\tthis.reload();\n\t\t\t\t\tconst updatedCred = this.data[providerId];\n\n\t\t\t\t\tif (updatedCred?.type === \"oauth\" && Date.now() < updatedCred.expires) {\n\t\t\t\t\t\t// Another instance refreshed successfully, use those credentials\n\t\t\t\t\t\treturn provider.getApiKey(updatedCred);\n\t\t\t\t\t}\n\n\t\t\t\t\t// Refresh truly failed - return undefined so model discovery skips this provider\n\t\t\t\t\t// User can /login to re-authenticate (credentials preserved for retry)\n\t\t\t\t\treturn undefined;\n\t\t\t\t}\n\t\t\t} else {\n\t\t\t\t// Token not expired, use current access token\n\t\t\t\treturn provider.getApiKey(cred);\n\t\t\t}\n\t\t}\n\n\t\t// Fall back to environment variable\n\t\tconst envKey = getEnvApiKey(providerId);\n\t\tif (envKey) return envKey;\n\n\t\t// Fall back to custom resolver (e.g., models.json custom providers)\n\t\tif (options?.includeFallback !== false) {\n\t\t\treturn this.fallbackResolver?.(providerId) ?? undefined;\n\t\t}\n\n\t\treturn undefined;\n\t}\n\n\t/**\n\t * Get all registered OAuth providers\n\t */\n\tgetOAuthProviders() {\n\t\treturn getOAuthProviders();\n\t}\n}\n"]}

package/dist/core/background-process-manager.d.ts

@@ -0,0 +1,52 @@
+import type { ChildProcess } from "node:child_process";
+import { OutputAccumulator } from "./tools/output-accumulator.ts";
+export interface BackgroundProcess {
+    id: string;
+    pid: number;
+    command: string;
+    cwd: string;
+    startedAt: number;
+    endedAt?: number;
+    exitCode?: number | null;
+    status: "running" | "completed";
+    output: OutputAccumulator;
+    child: ChildProcess;
+}
+export type BackgroundProcessCompletedCallback = (proc: BackgroundProcess) => void;
+/** Fired whenever the set of background processes changes (added, completed, killed). */
+export type BackgroundProcessChangeCallback = () => void;
+/**
+ * Manages background processes that were timed out and moved off the bash tool's
+ * critical path. Each process keeps streaming its output into an OutputAccumulator
+ * and fires completion callbacks when it exits.
+ */
+export declare class BackgroundProcessManager {
+    private readonly processes;
+    private readonly completedCallbacks;
+    private readonly changeCallbacks;
+    private emitChange;
+    /**
+     * Adopt a running child process as a background process.
+     * Sets up independent output capture and exit monitoring.
+     *
+     * The caller must have already removed any existing `data` listeners that
+     * belonged to a different output sink, so that this manager becomes the sole
+     * consumer of stdout/stderr.
+     */
+    adopt(child: ChildProcess, command: string, cwd: string): BackgroundProcess;
+    /** Kill a running background process by id. No-op if not found or already completed. */
+    kill(id: string): void;
+    /** Kill all running background processes. Called during shutdown. */
+    killAll(): void;
+    getAll(): BackgroundProcess[];
+    getById(id: string): BackgroundProcess | undefined;
+    /** Remove a completed process from the registry. Also untracks its PID. */
+    remove(id: string): void;
+    /** Count of currently running background processes. */
+    getRunningCount(): number;
+    /** Register a callback fired when any background process exits. Returns an unsubscribe function. */
+    onCompleted(cb: BackgroundProcessCompletedCallback): () => void;
+    /** Register a callback fired when the process set changes (added/completed/killed). Returns an unsubscribe function. */
+    onChange(cb: BackgroundProcessChangeCallback): () => void;
+}
+//# sourceMappingURL=background-process-manager.d.ts.map

package/dist/core/background-process-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-process-manager.d.ts","sourceRoot":"","sources":["../../src/core/background-process-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IAChC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,KAAK,EAAE,YAAY,CAAC;CACpB;AAED,MAAM,MAAM,kCAAkC,GAAG,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAEnF,yFAAyF;AACzF,MAAM,MAAM,+BAA+B,GAAG,MAAM,IAAI,CAAC;AAEzD;;;;GAIG;AACH,qBAAa,wBAAwB;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;IAClE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAiD;IACpF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA8C;IAE9E,OAAO,CAAC,UAAU;IAIlB;;;;;;;OAOG;IACH,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAkD1E;IAED,wFAAwF;IACxF,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAKrB;IAED,qEAAqE;IACrE,OAAO,IAAI,IAAI,CAMd;IAED,MAAM,IAAI,iBAAiB,EAAE,CAE5B;IAED,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEjD;IAED,2EAA2E;IAC3E,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAMvB;IAED,uDAAuD;IACvD,eAAe,IAAI,MAAM,CAMxB;IAED,oGAAoG;IACpG,WAAW,CAAC,EAAE,EAAE,kCAAkC,GAAG,MAAM,IAAI,CAK9D;IAED,wHAAwH;IACxH,QAAQ,CAAC,EAAE,EAAE,+BAA+B,GAAG,MAAM,IAAI,CAKxD;CACD","sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { killProcessTree, untrackDetachedChildPid } from \"../utils/shell.ts\";\nimport { OutputAccumulator } from \"./tools/output-accumulator.ts\";\n\nexport interface BackgroundProcess {\n\tid: string;\n\tpid: number;\n\tcommand: string;\n\tcwd: string;\n\tstartedAt: number;\n\tendedAt?: number;\n\texitCode?: number | null;\n\tstatus: \"running\" | \"completed\";\n\toutput: OutputAccumulator;\n\tchild: ChildProcess;\n}\n\nexport type BackgroundProcessCompletedCallback = (proc: BackgroundProcess) => void;\n\n/** Fired whenever the set of background processes changes (added, completed, killed). */\nexport type BackgroundProcessChangeCallback = () => void;\n\n/**\n * Manages background processes that were timed out and moved off the bash tool's\n * critical path. Each process keeps streaming its output into an OutputAccumulator\n * and fires completion callbacks when it exits.\n */\nexport class BackgroundProcessManager {\n\tprivate readonly processes = new Map<string, BackgroundProcess>();\n\tprivate readonly completedCallbacks = new Set<BackgroundProcessCompletedCallback>();\n\tprivate readonly changeCallbacks = new Set<BackgroundProcessChangeCallback>();\n\n\tprivate emitChange(): void {\n\t\tfor (const cb of this.changeCallbacks) cb();\n\t}\n\n\t/**\n\t * Adopt a running child process as a background process.\n\t * Sets up independent output capture and exit monitoring.\n\t *\n\t * The caller must have already removed any existing `data` listeners that\n\t * belonged to a different output sink, so that this manager becomes the sole\n\t * consumer of stdout/stderr.\n\t */\n\tadopt(child: ChildProcess, command: string, cwd: string): BackgroundProcess {\n\t\tconst id = randomUUID();\n\t\tconst output = new OutputAccumulator({ tempFilePrefix: \"pi-bash-bg\" });\n\n\t\tconst handleData = (data: Buffer): void => {\n\t\t\ttry {\n\t\t\t\toutput.append(data);\n\t\t\t} catch {\n\t\t\t\t// OutputAccumulator finished — ignore late data\n\t\t\t}\n\t\t};\n\n\t\tchild.stdout?.on(\"data\", handleData);\n\t\tchild.stderr?.on(\"data\", handleData);\n\n\t\tconst proc: BackgroundProcess = {\n\t\t\tid,\n\t\t\tpid: child.pid!,\n\t\t\tcommand,\n\t\t\tcwd,\n\t\t\tstartedAt: Date.now(),\n\t\t\tstatus: \"running\",\n\t\t\toutput,\n\t\t\tchild,\n\t\t};\n\n\t\tthis.processes.set(id, proc);\n\t\tthis.emitChange();\n\n\t\t// Use 'close' instead of 'exit' to ensure all stdio data has been flushed\n\t\t// before we finalize the output. The 'exit' event fires when the process\n\t\t// terminates but stdio streams may still have buffered data.\n\t\tchild.once(\"close\", (code) => {\n\t\t\tproc.status = \"completed\";\n\t\t\tproc.endedAt = Date.now();\n\t\t\tproc.exitCode = code;\n\t\t\ttry {\n\t\t\t\toutput.finish();\n\t\t\t} catch {\n\t\t\t\t// Already finished — race with stdout end\n\t\t\t}\n\t\t\t// Untrack PID so trackedDetachedChildPids doesn't grow unbounded.\n\t\t\tuntrackDetachedChildPid(proc.pid);\n\t\t\tfor (const cb of this.completedCallbacks) {\n\t\t\t\tcb(proc);\n\t\t\t}\n\t\t\tthis.emitChange();\n\t\t});\n\n\t\treturn proc;\n\t}\n\n\t/** Kill a running background process by id. No-op if not found or already completed. */\n\tkill(id: string): void {\n\t\tconst proc = this.processes.get(id);\n\t\tif (!proc || proc.status !== \"running\") return;\n\t\tkillProcessTree(proc.pid);\n\t\t// The exit handler registered in adopt() will update status and fire callbacks.\n\t}\n\n\t/** Kill all running background processes. Called during shutdown. */\n\tkillAll(): void {\n\t\tfor (const proc of this.processes.values()) {\n\t\t\tif (proc.status === \"running\") {\n\t\t\t\tkillProcessTree(proc.pid);\n\t\t\t}\n\t\t}\n\t}\n\n\tgetAll(): BackgroundProcess[] {\n\t\treturn [...this.processes.values()];\n\t}\n\n\tgetById(id: string): BackgroundProcess | undefined {\n\t\treturn this.processes.get(id);\n\t}\n\n\t/** Remove a completed process from the registry. Also untracks its PID. */\n\tremove(id: string): void {\n\t\tconst proc = this.processes.get(id);\n\t\tif (!proc) return;\n\t\tuntrackDetachedChildPid(proc.pid);\n\t\tthis.processes.delete(id);\n\t\tthis.emitChange();\n\t}\n\n\t/** Count of currently running background processes. */\n\tgetRunningCount(): number {\n\t\tlet count = 0;\n\t\tfor (const proc of this.processes.values()) {\n\t\t\tif (proc.status === \"running\") count++;\n\t\t}\n\t\treturn count;\n\t}\n\n\t/** Register a callback fired when any background process exits. Returns an unsubscribe function. */\n\tonCompleted(cb: BackgroundProcessCompletedCallback): () => void {\n\t\tthis.completedCallbacks.add(cb);\n\t\treturn () => {\n\t\t\tthis.completedCallbacks.delete(cb);\n\t\t};\n\t}\n\n\t/** Register a callback fired when the process set changes (added/completed/killed). Returns an unsubscribe function. */\n\tonChange(cb: BackgroundProcessChangeCallback): () => void {\n\t\tthis.changeCallbacks.add(cb);\n\t\treturn () => {\n\t\t\tthis.changeCallbacks.delete(cb);\n\t\t};\n\t}\n}\n"]}

package/dist/core/background-process-manager.js

@@ -0,0 +1,127 @@
+import { randomUUID } from "node:crypto";
+import { killProcessTree, untrackDetachedChildPid } from "../utils/shell.js";
+import { OutputAccumulator } from "./tools/output-accumulator.js";
+/**
+ * Manages background processes that were timed out and moved off the bash tool's
+ * critical path. Each process keeps streaming its output into an OutputAccumulator
+ * and fires completion callbacks when it exits.
+ */
+export class BackgroundProcessManager {
+    processes = new Map();
+    completedCallbacks = new Set();
+    changeCallbacks = new Set();
+    emitChange() {
+        for (const cb of this.changeCallbacks)
+            cb();
+    }
+    /**
+     * Adopt a running child process as a background process.
+     * Sets up independent output capture and exit monitoring.
+     *
+     * The caller must have already removed any existing `data` listeners that
+     * belonged to a different output sink, so that this manager becomes the sole
+     * consumer of stdout/stderr.
+     */
+    adopt(child, command, cwd) {
+        const id = randomUUID();
+        const output = new OutputAccumulator({ tempFilePrefix: "pi-bash-bg" });
+        const handleData = (data) => {
+            try {
+                output.append(data);
+            }
+            catch {
+                // OutputAccumulator finished — ignore late data
+            }
+        };
+        child.stdout?.on("data", handleData);
+        child.stderr?.on("data", handleData);
+        const proc = {
+            id,
+            pid: child.pid,
+            command,
+            cwd,
+            startedAt: Date.now(),
+            status: "running",
+            output,
+            child,
+        };
+        this.processes.set(id, proc);
+        this.emitChange();
+        // Use 'close' instead of 'exit' to ensure all stdio data has been flushed
+        // before we finalize the output. The 'exit' event fires when the process
+        // terminates but stdio streams may still have buffered data.
+        child.once("close", (code) => {
+            proc.status = "completed";
+            proc.endedAt = Date.now();
+            proc.exitCode = code;
+            try {
+                output.finish();
+            }
+            catch {
+                // Already finished — race with stdout end
+            }
+            // Untrack PID so trackedDetachedChildPids doesn't grow unbounded.
+            untrackDetachedChildPid(proc.pid);
+            for (const cb of this.completedCallbacks) {
+                cb(proc);
+            }
+            this.emitChange();
+        });
+        return proc;
+    }
+    /** Kill a running background process by id. No-op if not found or already completed. */
+    kill(id) {
+        const proc = this.processes.get(id);
+        if (!proc || proc.status !== "running")
+            return;
+        killProcessTree(proc.pid);
+        // The exit handler registered in adopt() will update status and fire callbacks.
+    }
+    /** Kill all running background processes. Called during shutdown. */
+    killAll() {
+        for (const proc of this.processes.values()) {
+            if (proc.status === "running") {
+                killProcessTree(proc.pid);
+            }
+        }
+    }
+    getAll() {
+        return [...this.processes.values()];
+    }
+    getById(id) {
+        return this.processes.get(id);
+    }
+    /** Remove a completed process from the registry. Also untracks its PID. */
+    remove(id) {
+        const proc = this.processes.get(id);
+        if (!proc)
+            return;
+        untrackDetachedChildPid(proc.pid);
+        this.processes.delete(id);
+        this.emitChange();
+    }
+    /** Count of currently running background processes. */
+    getRunningCount() {
+        let count = 0;
+        for (const proc of this.processes.values()) {
+            if (proc.status === "running")
+                count++;
+        }
+        return count;
+    }
+    /** Register a callback fired when any background process exits. Returns an unsubscribe function. */
+    onCompleted(cb) {
+        this.completedCallbacks.add(cb);
+        return () => {
+            this.completedCallbacks.delete(cb);
+        };
+    }
+    /** Register a callback fired when the process set changes (added/completed/killed). Returns an unsubscribe function. */
+    onChange(cb) {
+        this.changeCallbacks.add(cb);
+        return () => {
+            this.changeCallbacks.delete(cb);
+        };
+    }
+}
+//# sourceMappingURL=background-process-manager.js.map

package/dist/core/background-process-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"background-process-manager.js","sourceRoot":"","sources":["../../src/core/background-process-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAoBlE;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IACnB,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,kBAAkB,GAAG,IAAI,GAAG,EAAsC,CAAC;IACnE,eAAe,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEtE,UAAU,GAAS;QAC1B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe;YAAE,EAAE,EAAE,CAAC;IAAA,CAC5C;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAmB,EAAE,OAAe,EAAE,GAAW,EAAqB;QAC3E,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACR,kDAAgD;YACjD,CAAC;QAAA,CACD,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACrC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAErC,MAAM,IAAI,GAAsB;YAC/B,EAAE;YACF,GAAG,EAAE,KAAK,CAAC,GAAI;YACf,OAAO;YACP,GAAG;YACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,SAAS;YACjB,MAAM;YACN,KAAK;SACL,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,0EAA0E;QAC1E,yEAAyE;QACzE,6DAA6D;QAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC;gBACJ,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACR,4CAA0C;YAC3C,CAAC;YACD,kEAAkE;YAClE,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1C,EAAE,CAAC,IAAI,CAAC,CAAC;YACV,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAAA,CAClB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC;IAAA,CACZ;IAED,wFAAwF;IACxF,IAAI,CAAC,EAAU,EAAQ;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QAC/C,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,gFAAgF;IADtD,CAE1B;IAED,qEAAqE;IACrE,OAAO,GAAS;QACf,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;IAAA,CACD;IAED,MAAM,GAAwB;QAC7B,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACpC;IAED,OAAO,CAAC,EAAU,EAAiC;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAA,CAC9B;IAED,2EAA2E;IAC3E,MAAM,CAAC,EAAU,EAAQ;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,UAAU,EAAE,CAAC;IAAA,CAClB;IAED,uDAAuD;IACvD,eAAe,GAAW;QACzB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;gBAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IAAA,CACb;IAED,oGAAoG;IACpG,WAAW,CAAC,EAAsC,EAAc;QAC/D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAA,CACnC,CAAC;IAAA,CACF;IAED,wHAAwH;IACxH,QAAQ,CAAC,EAAmC,EAAc;QACzD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAA,CAChC,CAAC;IAAA,CACF;CACD","sourcesContent":["import type { ChildProcess } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { killProcessTree, untrackDetachedChildPid } from \"../utils/shell.ts\";\nimport { OutputAccumulator } from \"./tools/output-accumulator.ts\";\n\nexport interface BackgroundProcess {\n\tid: string;\n\tpid: number;\n\tcommand: string;\n\tcwd: string;\n\tstartedAt: number;\n\tendedAt?: number;\n\texitCode?: number | null;\n\tstatus: \"running\" | \"completed\";\n\toutput: OutputAccumulator;\n\tchild: ChildProcess;\n}\n\nexport type BackgroundProcessCompletedCallback = (proc: BackgroundProcess) => void;\n\n/** Fired whenever the set of background processes changes (added, completed, killed). */\nexport type BackgroundProcessChangeCallback = () => void;\n\n/**\n * Manages background processes that were timed out and moved off the bash tool's\n * critical path. Each process keeps streaming its output into an OutputAccumulator\n * and fires completion callbacks when it exits.\n */\nexport class BackgroundProcessManager {\n\tprivate readonly processes = new Map<string, BackgroundProcess>();\n\tprivate readonly completedCallbacks = new Set<BackgroundProcessCompletedCallback>();\n\tprivate readonly changeCallbacks = new Set<BackgroundProcessChangeCallback>();\n\n\tprivate emitChange(): void {\n\t\tfor (const cb of this.changeCallbacks) cb();\n\t}\n\n\t/**\n\t * Adopt a running child process as a background process.\n\t * Sets up independent output capture and exit monitoring.\n\t *\n\t * The caller must have already removed any existing `data` listeners that\n\t * belonged to a different output sink, so that this manager becomes the sole\n\t * consumer of stdout/stderr.\n\t */\n\tadopt(child: ChildProcess, command: string, cwd: string): BackgroundProcess {\n\t\tconst id = randomUUID();\n\t\tconst output = new OutputAccumulator({ tempFilePrefix: \"pi-bash-bg\" });\n\n\t\tconst handleData = (data: Buffer): void => {\n\t\t\ttry {\n\t\t\t\toutput.append(data);\n\t\t\t} catch {\n\t\t\t\t// OutputAccumulator finished — ignore late data\n\t\t\t}\n\t\t};\n\n\t\tchild.stdout?.on(\"data\", handleData);\n\t\tchild.stderr?.on(\"data\", handleData);\n\n\t\tconst proc: BackgroundProcess = {\n\t\t\tid,\n\t\t\tpid: child.pid!,\n\t\t\tcommand,\n\t\t\tcwd,\n\t\t\tstartedAt: Date.now(),\n\t\t\tstatus: \"running\",\n\t\t\toutput,\n\t\t\tchild,\n\t\t};\n\n\t\tthis.processes.set(id, proc);\n\t\tthis.emitChange();\n\n\t\t// Use 'close' instead of 'exit' to ensure all stdio data has been flushed\n\t\t// before we finalize the output. The 'exit' event fires when the process\n\t\t// terminates but stdio streams may still have buffered data.\n\t\tchild.once(\"close\", (code) => {\n\t\t\tproc.status = \"completed\";\n\t\t\tproc.endedAt = Date.now();\n\t\t\tproc.exitCode = code;\n\t\t\ttry {\n\t\t\t\toutput.finish();\n\t\t\t} catch {\n\t\t\t\t// Already finished — race with stdout end\n\t\t\t}\n\t\t\t// Untrack PID so trackedDetachedChildPids doesn't grow unbounded.\n\t\t\tuntrackDetachedChildPid(proc.pid);\n\t\t\tfor (const cb of this.completedCallbacks) {\n\t\t\t\tcb(proc);\n\t\t\t}\n\t\t\tthis.emitChange();\n\t\t});\n\n\t\treturn proc;\n\t}\n\n\t/** Kill a running background process by id. No-op if not found or already completed. */\n\tkill(id: string): void {\n\t\tconst proc = this.processes.get(id);\n\t\tif (!proc || proc.status !== \"running\") return;\n\t\tkillProcessTree(proc.pid);\n\t\t// The exit handler registered in adopt() will update status and fire callbacks.\n\t}\n\n\t/** Kill all running background processes. Called during shutdown. */\n\tkillAll(): void {\n\t\tfor (const proc of this.processes.values()) {\n\t\t\tif (proc.status === \"running\") {\n\t\t\t\tkillProcessTree(proc.pid);\n\t\t\t}\n\t\t}\n\t}\n\n\tgetAll(): BackgroundProcess[] {\n\t\treturn [...this.processes.values()];\n\t}\n\n\tgetById(id: string): BackgroundProcess | undefined {\n\t\treturn this.processes.get(id);\n\t}\n\n\t/** Remove a completed process from the registry. Also untracks its PID. */\n\tremove(id: string): void {\n\t\tconst proc = this.processes.get(id);\n\t\tif (!proc) return;\n\t\tuntrackDetachedChildPid(proc.pid);\n\t\tthis.processes.delete(id);\n\t\tthis.emitChange();\n\t}\n\n\t/** Count of currently running background processes. */\n\tgetRunningCount(): number {\n\t\tlet count = 0;\n\t\tfor (const proc of this.processes.values()) {\n\t\t\tif (proc.status === \"running\") count++;\n\t\t}\n\t\treturn count;\n\t}\n\n\t/** Register a callback fired when any background process exits. Returns an unsubscribe function. */\n\tonCompleted(cb: BackgroundProcessCompletedCallback): () => void {\n\t\tthis.completedCallbacks.add(cb);\n\t\treturn () => {\n\t\t\tthis.completedCallbacks.delete(cb);\n\t\t};\n\t}\n\n\t/** Register a callback fired when the process set changes (added/completed/killed). Returns an unsubscribe function. */\n\tonChange(cb: BackgroundProcessChangeCallback): () => void {\n\t\tthis.changeCallbacks.add(cb);\n\t\treturn () => {\n\t\t\tthis.changeCallbacks.delete(cb);\n\t\t};\n\t}\n}\n"]}

package/dist/core/bash-executor.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Bash command execution with streaming support and cancellation.
+ *
+ * This module provides a unified bash execution implementation used by:
+ * - AgentSession.executeBash() for interactive and RPC modes
+ * - Direct calls from modes that need bash execution
+ */
+import type { BashOperations } from "./tools/bash.ts";
+export interface BashExecutorOptions {
+    /** Callback for streaming output chunks (already sanitized) */
+    onChunk?: (chunk: string) => void;
+    /** AbortSignal for cancellation */
+    signal?: AbortSignal;
+}
+export interface BashResult {
+    /** Combined stdout + stderr output (sanitized, possibly truncated) */
+    output: string;
+    /** Process exit code (undefined if killed/cancelled) */
+    exitCode: number | undefined;
+    /** Whether the command was cancelled via signal */
+    cancelled: boolean;
+    /** Whether the output was truncated */
+    truncated: boolean;
+    /** Path to temp file containing full output (if output exceeded truncation threshold) */
+    fullOutputPath?: string;
+}
+/**
+ * Execute a bash command using custom BashOperations.
+ * Used for remote execution (SSH, containers, etc.).
+ */
+export declare function executeBashWithOperations(command: string, cwd: string, operations: BashOperations, options?: BashExecutorOptions): Promise<BashResult>;
+//# sourceMappingURL=bash-executor.d.ts.map

package/dist/core/bash-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-executor.d.ts","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAOtD,MAAM,WAAW,mBAAmB;IACnC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,mCAAmC;IACnC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;IACnB,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;;GAGG;AACH,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,cAAc,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,UAAU,CAAC,CAqGrB","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `pi-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/bash-executor.js

@@ -0,0 +1,111 @@
+/**
+ * Bash command execution with streaming support and cancellation.
+ *
+ * This module provides a unified bash execution implementation used by:
+ * - AgentSession.executeBash() for interactive and RPC modes
+ * - Direct calls from modes that need bash execution
+ */
+import { randomBytes } from "node:crypto";
+import { createWriteStream } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { stripAnsi } from "../utils/ansi.js";
+import { sanitizeBinaryOutput } from "../utils/shell.js";
+import { DEFAULT_MAX_BYTES, truncateTail } from "./tools/truncate.js";
+// ============================================================================
+// Implementation
+// ============================================================================
+/**
+ * Execute a bash command using custom BashOperations.
+ * Used for remote execution (SSH, containers, etc.).
+ */
+export async function executeBashWithOperations(command, cwd, operations, options) {
+    const outputChunks = [];
+    let outputBytes = 0;
+    const maxOutputBytes = DEFAULT_MAX_BYTES * 2;
+    let tempFilePath;
+    let tempFileStream;
+    let totalBytes = 0;
+    const ensureTempFile = () => {
+        if (tempFilePath) {
+            return;
+        }
+        const id = randomBytes(8).toString("hex");
+        tempFilePath = join(tmpdir(), `pi-bash-${id}.log`);
+        tempFileStream = createWriteStream(tempFilePath);
+        for (const chunk of outputChunks) {
+            tempFileStream.write(chunk);
+        }
+    };
+    const decoder = new TextDecoder();
+    const onData = (data) => {
+        totalBytes += data.length;
+        // Sanitize: strip ANSI, replace binary garbage, normalize newlines
+        const text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\r/g, "");
+        // Start writing to temp file if exceeds threshold
+        if (totalBytes > DEFAULT_MAX_BYTES) {
+            ensureTempFile();
+        }
+        if (tempFileStream) {
+            tempFileStream.write(text);
+        }
+        // Keep rolling buffer
+        outputChunks.push(text);
+        outputBytes += text.length;
+        while (outputBytes > maxOutputBytes && outputChunks.length > 1) {
+            const removed = outputChunks.shift();
+            outputBytes -= removed.length;
+        }
+        // Stream to callback
+        if (options?.onChunk) {
+            options.onChunk(text);
+        }
+    };
+    try {
+        const result = await operations.exec(command, cwd, {
+            onData,
+            signal: options?.signal,
+        });
+        const fullOutput = outputChunks.join("");
+        const truncationResult = truncateTail(fullOutput);
+        if (truncationResult.truncated) {
+            ensureTempFile();
+        }
+        if (tempFileStream) {
+            tempFileStream.end();
+        }
+        const cancelled = options?.signal?.aborted ?? false;
+        return {
+            output: truncationResult.truncated ? truncationResult.content : fullOutput,
+            exitCode: cancelled ? undefined : (result.exitCode ?? undefined),
+            cancelled,
+            truncated: truncationResult.truncated,
+            fullOutputPath: tempFilePath,
+        };
+    }
+    catch (err) {
+        // Check if it was an abort
+        if (options?.signal?.aborted) {
+            const fullOutput = outputChunks.join("");
+            const truncationResult = truncateTail(fullOutput);
+            if (truncationResult.truncated) {
+                ensureTempFile();
+            }
+            if (tempFileStream) {
+                tempFileStream.end();
+            }
+            return {
+                output: truncationResult.truncated ? truncationResult.content : fullOutput,
+                exitCode: undefined,
+                cancelled: true,
+                truncated: truncationResult.truncated,
+                fullOutputPath: tempFilePath,
+            };
+        }
+        if (tempFileStream) {
+            tempFileStream.end();
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=bash-executor.js.map

package/dist/core/bash-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash-executor.js","sourceRoot":"","sources":["../../src/core/bash-executor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AA0BtE,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAe,EACf,GAAW,EACX,UAA0B,EAC1B,OAA6B,EACP;IACtB,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,cAAc,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAE7C,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAuC,CAAC;IAC5C,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC;QAC5B,IAAI,YAAY,EAAE,CAAC;YAClB,OAAO;QACR,CAAC;QACD,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAElC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC;QAChC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC;QAE1B,mEAAmE;QACnE,MAAM,IAAI,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAExG,kDAAkD;QAClD,IAAI,UAAU,GAAG,iBAAiB,EAAE,CAAC;YACpC,cAAc,EAAE,CAAC;QAClB,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAED,sBAAsB;QACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,OAAO,WAAW,GAAG,cAAc,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAG,CAAC;YACtC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QAED,qBAAqB;QACrB,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IAAA,CACD,CAAC;IAEF,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YAClD,MAAM;YACN,MAAM,EAAE,OAAO,EAAE,MAAM;SACvB,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;YAChC,cAAc,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;YAC1E,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC;YAChE,SAAS;YACT,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,cAAc,EAAE,YAAY;SAC5B,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,2BAA2B;QAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,MAAM,gBAAgB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,gBAAgB,CAAC,SAAS,EAAE,CAAC;gBAChC,cAAc,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,cAAc,EAAE,CAAC;gBACpB,cAAc,CAAC,GAAG,EAAE,CAAC;YACtB,CAAC;YACD,OAAO;gBACN,MAAM,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;gBAC1E,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,gBAAgB,CAAC,SAAS;gBACrC,cAAc,EAAE,YAAY;aAC5B,CAAC;QACH,CAAC;QAED,IAAI,cAAc,EAAE,CAAC;YACpB,cAAc,CAAC,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,GAAG,CAAC;IACX,CAAC;AAAA,CACD","sourcesContent":["/**\n * Bash command execution with streaming support and cancellation.\n *\n * This module provides a unified bash execution implementation used by:\n * - AgentSession.executeBash() for interactive and RPC modes\n * - Direct calls from modes that need bash execution\n */\n\nimport { randomBytes } from \"node:crypto\";\nimport { createWriteStream, type WriteStream } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport { stripAnsi } from \"../utils/ansi.ts\";\nimport { sanitizeBinaryOutput } from \"../utils/shell.ts\";\nimport type { BashOperations } from \"./tools/bash.ts\";\nimport { DEFAULT_MAX_BYTES, truncateTail } from \"./tools/truncate.ts\";\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface BashExecutorOptions {\n\t/** Callback for streaming output chunks (already sanitized) */\n\tonChunk?: (chunk: string) => void;\n\t/** AbortSignal for cancellation */\n\tsignal?: AbortSignal;\n}\n\nexport interface BashResult {\n\t/** Combined stdout + stderr output (sanitized, possibly truncated) */\n\toutput: string;\n\t/** Process exit code (undefined if killed/cancelled) */\n\texitCode: number | undefined;\n\t/** Whether the command was cancelled via signal */\n\tcancelled: boolean;\n\t/** Whether the output was truncated */\n\ttruncated: boolean;\n\t/** Path to temp file containing full output (if output exceeded truncation threshold) */\n\tfullOutputPath?: string;\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\n/**\n * Execute a bash command using custom BashOperations.\n * Used for remote execution (SSH, containers, etc.).\n */\nexport async function executeBashWithOperations(\n\tcommand: string,\n\tcwd: string,\n\toperations: BashOperations,\n\toptions?: BashExecutorOptions,\n): Promise<BashResult> {\n\tconst outputChunks: string[] = [];\n\tlet outputBytes = 0;\n\tconst maxOutputBytes = DEFAULT_MAX_BYTES * 2;\n\n\tlet tempFilePath: string | undefined;\n\tlet tempFileStream: WriteStream | undefined;\n\tlet totalBytes = 0;\n\n\tconst ensureTempFile = () => {\n\t\tif (tempFilePath) {\n\t\t\treturn;\n\t\t}\n\t\tconst id = randomBytes(8).toString(\"hex\");\n\t\ttempFilePath = join(tmpdir(), `pi-bash-${id}.log`);\n\t\ttempFileStream = createWriteStream(tempFilePath);\n\t\tfor (const chunk of outputChunks) {\n\t\t\ttempFileStream.write(chunk);\n\t\t}\n\t};\n\n\tconst decoder = new TextDecoder();\n\n\tconst onData = (data: Buffer) => {\n\t\ttotalBytes += data.length;\n\n\t\t// Sanitize: strip ANSI, replace binary garbage, normalize newlines\n\t\tconst text = sanitizeBinaryOutput(stripAnsi(decoder.decode(data, { stream: true }))).replace(/\\r/g, \"\");\n\n\t\t// Start writing to temp file if exceeds threshold\n\t\tif (totalBytes > DEFAULT_MAX_BYTES) {\n\t\t\tensureTempFile();\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.write(text);\n\t\t}\n\n\t\t// Keep rolling buffer\n\t\toutputChunks.push(text);\n\t\toutputBytes += text.length;\n\t\twhile (outputBytes > maxOutputBytes && outputChunks.length > 1) {\n\t\t\tconst removed = outputChunks.shift()!;\n\t\t\toutputBytes -= removed.length;\n\t\t}\n\n\t\t// Stream to callback\n\t\tif (options?.onChunk) {\n\t\t\toptions.onChunk(text);\n\t\t}\n\t};\n\n\ttry {\n\t\tconst result = await operations.exec(command, cwd, {\n\t\t\tonData,\n\t\t\tsignal: options?.signal,\n\t\t});\n\n\t\tconst fullOutput = outputChunks.join(\"\");\n\t\tconst truncationResult = truncateTail(fullOutput);\n\t\tif (truncationResult.truncated) {\n\t\t\tensureTempFile();\n\t\t}\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\t\tconst cancelled = options?.signal?.aborted ?? false;\n\n\t\treturn {\n\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\texitCode: cancelled ? undefined : (result.exitCode ?? undefined),\n\t\t\tcancelled,\n\t\t\ttruncated: truncationResult.truncated,\n\t\t\tfullOutputPath: tempFilePath,\n\t\t};\n\t} catch (err) {\n\t\t// Check if it was an abort\n\t\tif (options?.signal?.aborted) {\n\t\t\tconst fullOutput = outputChunks.join(\"\");\n\t\t\tconst truncationResult = truncateTail(fullOutput);\n\t\t\tif (truncationResult.truncated) {\n\t\t\t\tensureTempFile();\n\t\t\t}\n\t\t\tif (tempFileStream) {\n\t\t\t\ttempFileStream.end();\n\t\t\t}\n\t\t\treturn {\n\t\t\t\toutput: truncationResult.truncated ? truncationResult.content : fullOutput,\n\t\t\t\texitCode: undefined,\n\t\t\t\tcancelled: true,\n\t\t\t\ttruncated: truncationResult.truncated,\n\t\t\t\tfullOutputPath: tempFilePath,\n\t\t\t};\n\t\t}\n\n\t\tif (tempFileStream) {\n\t\t\ttempFileStream.end();\n\t\t}\n\n\t\tthrow err;\n\t}\n}\n"]}

package/dist/core/claude-plugin-manager.d.ts

@@ -0,0 +1,110 @@
+import type { PathMetadata } from "./package-manager.ts";
+import type { SettingsManager, SettingsScope } from "./settings-manager.ts";
+export type PluginInstallSpec = {
+    type: "marketplace";
+    name: string;
+    marketplace: string;
+} | {
+    type: "source";
+    source: string;
+};
+export interface MarketplacePluginEntry {
+    name: string;
+    source: {
+        url: string;
+        ref?: string;
+    };
+}
+export interface MarketplaceCatalog {
+    plugins: MarketplacePluginEntry[];
+}
+export interface PluginDiagnostic {
+    field: string;
+    message: string;
+    path?: string;
+}
+export interface ClaudePluginManifest {
+    name: string;
+    skills: string[];
+    commands: string[];
+    mcpServers: Record<string, ClaudeMcpServer>;
+    diagnostics: PluginDiagnostic[];
+    root: string;
+}
+interface ClaudeMcpServer {
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    [key: string]: unknown;
+}
+interface PluginManagerOptions {
+    cwd: string;
+    agentDir: string;
+    settingsManager: SettingsManager;
+}
+interface PluginInstallOptions {
+    local?: boolean;
+}
+export interface ConfiguredPlugin {
+    name: string;
+    source: string;
+    marketplace?: string;
+    enabled: boolean;
+    ref?: string;
+    scope: Exclude<SettingsScope, "global"> | "user";
+    installedPath?: string;
+}
+export interface PluginSearchResult {
+    name: string;
+    marketplace: string;
+    source: string;
+    ref?: string;
+    installed: boolean;
+}
+export interface PluginResourcePaths {
+    skills: Array<{
+        path: string;
+        metadata: PathMetadata;
+    }>;
+    prompts: Array<{
+        path: string;
+        metadata: PathMetadata;
+    }>;
+    diagnostics: PluginDiagnostic[];
+}
+export declare function parsePluginInstallSpec(input: string): PluginInstallSpec;
+export declare function readMarketplaceCatalog(root: string): MarketplaceCatalog;
+export declare function readClaudePluginManifest(root: string): ClaudePluginManifest;
+export declare class PluginManager {
+    private cwd;
+    private agentDir;
+    private settingsManager;
+    constructor(options: PluginManagerOptions);
+    addMarketplace(name: string, source: string): void;
+    removeMarketplace(name: string): boolean;
+    listMarketplaces(): Array<{
+        name: string;
+        source: string;
+    }>;
+    searchMarketplaces(query?: string, options?: {
+        marketplace?: string;
+    }): Promise<PluginSearchResult[]>;
+    install(spec: string, options?: PluginInstallOptions): Promise<ConfiguredPlugin>;
+    listConfiguredPlugins(): ConfiguredPlugin[];
+    update(name?: string): Promise<void>;
+    remove(name: string, options?: PluginInstallOptions): boolean;
+    resolveEnabledPluginResources(): PluginResourcePaths;
+    private resolveMarketplaceSource;
+    private prepareMarketplaceRoot;
+    private preparePluginRoot;
+    private cloneOrUpdate;
+    private upsertPluginSettings;
+    private writeMcpServers;
+    private removeMcpServers;
+    private getPluginStorageRoot;
+    private getInstalledPluginPath;
+    private getSkillPaths;
+    private getPromptPaths;
+}
+export {};
+//# sourceMappingURL=claude-plugin-manager.d.ts.map

package/dist/core/claude-plugin-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-plugin-manager.d.ts","sourceRoot":"","sources":["../../src/core/claude-plugin-manager.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAGX,eAAe,EACf,aAAa,EACb,MAAM,uBAAuB,CAAC;AAI/B,MAAM,MAAM,iBAAiB,GAC1B;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE;QACP,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;CACF;AAED,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,sBAAsB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5C,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACb;AAED,UAAU,eAAe;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,UAAU,oBAAoB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,eAAe,CAAC;CACjC;AAED,UAAU,oBAAoB;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACxD,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;IACzD,WAAW,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAsFD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAWvE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAuBvE;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAwC3E;AAgDD,qBAAa,aAAa;IACzB,OAAO,CAAC,GAAG,CAAS;IACpB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAkB;IAEzC,YAAY,OAAO,EAAE,oBAAoB,EAIxC;IAED,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAIjD;IAED,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQvC;IAED,gBAAgB,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAK1D;IAEK,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAgC1G;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0BrF;IAED,qBAAqB,IAAI,gBAAgB,EAAE,CAmB1C;IAEK,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBzC;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAyB5D;IAED,6BAA6B,IAAI,mBAAmB,CAwBnD;YAEa,wBAAwB;YAiBxB,sBAAsB;YActB,iBAAiB;YAuCjB,aAAa;IAY3B,OAAO,CAAC,oBAAoB;IAa5B,OAAO,CAAC,eAAe;IAcvB,OAAO,CAAC,gBAAgB;IAsBxB,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,sBAAsB;IAiB9B,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,cAAc;CAGtB","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from \"node:fs\";\nimport { basename, dirname, join, resolve, sep } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { CONFIG_DIR_NAME } from \"../config.ts\";\nimport { type GitSource, parseGitUrl } from \"../utils/git.ts\";\nimport { resolvePath } from \"../utils/paths.ts\";\nimport type { PathMetadata } from \"./package-manager.ts\";\nimport type {\n\tInstalledPluginSettings,\n\tPluginMarketplaceSettings,\n\tSettingsManager,\n\tSettingsScope,\n} from \"./settings-manager.ts\";\n\nconst execFileAsync = promisify(execFile);\n\nexport type PluginInstallSpec =\n\t| { type: \"marketplace\"; name: string; marketplace: string }\n\t| { type: \"source\"; source: string };\n\nexport interface MarketplacePluginEntry {\n\tname: string;\n\tsource: {\n\t\turl: string;\n\t\tref?: string;\n\t};\n}\n\nexport interface MarketplaceCatalog {\n\tplugins: MarketplacePluginEntry[];\n}\n\nexport interface PluginDiagnostic {\n\tfield: string;\n\tmessage: string;\n\tpath?: string;\n}\n\nexport interface ClaudePluginManifest {\n\tname: string;\n\tskills: string[];\n\tcommands: string[];\n\tmcpServers: Record<string, ClaudeMcpServer>;\n\tdiagnostics: PluginDiagnostic[];\n\troot: string;\n}\n\ninterface ClaudeMcpServer {\n\tcommand?: string;\n\targs?: string[];\n\tenv?: Record<string, string>;\n\t[key: string]: unknown;\n}\n\ninterface PluginManagerOptions {\n\tcwd: string;\n\tagentDir: string;\n\tsettingsManager: SettingsManager;\n}\n\ninterface PluginInstallOptions {\n\tlocal?: boolean;\n}\n\nexport interface ConfiguredPlugin {\n\tname: string;\n\tsource: string;\n\tmarketplace?: string;\n\tenabled: boolean;\n\tref?: string;\n\tscope: Exclude<SettingsScope, \"global\"> | \"user\";\n\tinstalledPath?: string;\n}\n\nexport interface PluginSearchResult {\n\tname: string;\n\tmarketplace: string;\n\tsource: string;\n\tref?: string;\n\tinstalled: boolean;\n}\n\nexport interface PluginResourcePaths {\n\tskills: Array<{ path: string; metadata: PathMetadata }>;\n\tprompts: Array<{ path: string; metadata: PathMetadata }>;\n\tdiagnostics: PluginDiagnostic[];\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction getStringArray(value: unknown): string[] {\n\treturn Array.isArray(value) ? value.filter((entry): entry is string => typeof entry === \"string\") : [];\n}\n\nfunction getStringRecord(value: unknown): Record<string, string> | undefined {\n\tif (!isRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst result: Record<string, string> = {};\n\tfor (const [key, entry] of Object.entries(value)) {\n\t\tif (typeof entry === \"string\") {\n\t\t\tresult[key] = entry;\n\t\t}\n\t}\n\treturn result;\n}\n\nfunction normalizePluginName(name: string): string {\n\treturn (\n\t\tname\n\t\t\t.trim()\n\t\t\t.replace(/[^A-Za-z0-9_.-]+/g, \"-\")\n\t\t\t.replace(/^-+|-+$/g, \"\") || \"plugin\"\n\t);\n}\n\nfunction readJsonObject(path: string): Record<string, unknown> {\n\tconst parsed = JSON.parse(readFileSync(path, \"utf-8\"));\n\tif (!isRecord(parsed)) {\n\t\tthrow new Error(`Expected JSON object in ${path}`);\n\t}\n\treturn parsed;\n}\n\nfunction collectMarkdownFiles(dir: string): string[] {\n\tconst files: string[] = [];\n\tif (!existsSync(dir)) {\n\t\treturn files;\n\t}\n\tfor (const entry of readdirSync(dir, { withFileTypes: true })) {\n\t\tif (entry.name.startsWith(\".\")) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst fullPath = join(dir, entry.name);\n\t\tif (entry.isDirectory()) {\n\t\t\tfiles.push(...collectMarkdownFiles(fullPath));\n\t\t} else if (entry.isFile() && entry.name.endsWith(\".md\")) {\n\t\t\tfiles.push(fullPath);\n\t\t}\n\t}\n\treturn files;\n}\n\nfunction resolveEntries(root: string, entries: string[], fallbackDirs: string[]): string[] {\n\tconst resolved: string[] = [];\n\tif (entries.length > 0) {\n\t\tfor (const entry of entries) {\n\t\t\tconst path = resolve(root, entry);\n\t\t\tif (!existsSync(path)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst stats = statSync(path);\n\t\t\tif (stats.isDirectory() && (entry.includes(\"commands\") || basename(dirname(path)) === \"commands\")) {\n\t\t\t\tresolved.push(...collectMarkdownFiles(path));\n\t\t\t} else {\n\t\t\t\tresolved.push(path);\n\t\t\t}\n\t\t}\n\t\treturn resolved;\n\t}\n\n\tfor (const dir of fallbackDirs) {\n\t\tconst path = join(root, dir);\n\t\tif (existsSync(path)) {\n\t\t\tresolved.push(...collectMarkdownFiles(path));\n\t\t}\n\t}\n\treturn resolved;\n}\n\nexport function parsePluginInstallSpec(input: string): PluginInstallSpec {\n\tconst trimmed = input.trim();\n\tconst marketplaceMatch = trimmed.match(/^([^@\\s/]+)@([^@\\s/]+)$/);\n\tif (marketplaceMatch) {\n\t\treturn {\n\t\t\ttype: \"marketplace\",\n\t\t\tname: marketplaceMatch[1] ?? \"\",\n\t\t\tmarketplace: marketplaceMatch[2] ?? \"\",\n\t\t};\n\t}\n\treturn { type: \"source\", source: trimmed };\n}\n\nexport function readMarketplaceCatalog(root: string): MarketplaceCatalog {\n\tconst path = join(root, \".claude-plugin\", \"marketplace.json\");\n\tconst raw = readJsonObject(path);\n\tconst rawPlugins = Array.isArray(raw.plugins) ? raw.plugins : [];\n\tconst plugins: MarketplacePluginEntry[] = [];\n\tfor (const rawPlugin of rawPlugins) {\n\t\tif (!isRecord(rawPlugin) || typeof rawPlugin.name !== \"string\" || !isRecord(rawPlugin.source)) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst url = rawPlugin.source.url;\n\t\tif (typeof url !== \"string\") {\n\t\t\tcontinue;\n\t\t}\n\t\tconst ref = rawPlugin.source.ref;\n\t\tplugins.push({\n\t\t\tname: rawPlugin.name,\n\t\t\tsource: {\n\t\t\t\turl,\n\t\t\t\t...(typeof ref === \"string\" ? { ref } : {}),\n\t\t\t},\n\t\t});\n\t}\n\treturn { plugins };\n}\n\nexport function readClaudePluginManifest(root: string): ClaudePluginManifest {\n\tconst path = join(root, \".claude-plugin\", \"plugin.json\");\n\tconst raw = readJsonObject(path);\n\tconst manifestName = typeof raw.name === \"string\" ? raw.name : basename(root);\n\tconst diagnostics: PluginDiagnostic[] = [];\n\tfor (const field of [\"hooks\", \"agents\", \"session\", \"sessionHooks\"]) {\n\t\tif (field in raw) {\n\t\t\tdiagnostics.push({\n\t\t\t\tfield,\n\t\t\t\tmessage: `Claude plugin field \"${field}\" is not supported by Pi`,\n\t\t\t\tpath,\n\t\t\t});\n\t\t}\n\t}\n\n\tconst mcpServers: Record<string, ClaudeMcpServer> = {};\n\tif (isRecord(raw.mcpServers)) {\n\t\tfor (const [name, value] of Object.entries(raw.mcpServers)) {\n\t\t\tif (!isRecord(value)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmcpServers[name] = {\n\t\t\t\t...value,\n\t\t\t\t...(typeof value.command === \"string\" ? { command: value.command } : {}),\n\t\t\t\t...(Array.isArray(value.args)\n\t\t\t\t\t? { args: value.args.filter((arg): arg is string => typeof arg === \"string\") }\n\t\t\t\t\t: {}),\n\t\t\t\t...(value.env ? { env: getStringRecord(value.env) } : {}),\n\t\t\t};\n\t\t}\n\t}\n\n\treturn {\n\t\tname: normalizePluginName(manifestName),\n\t\tskills: getStringArray(raw.skills),\n\t\tcommands: getStringArray(raw.commands),\n\t\tmcpServers,\n\t\tdiagnostics,\n\t\troot,\n\t};\n}\n\nfunction readRawConfigObject(filePath: string): Record<string, unknown> {\n\tif (!existsSync(filePath)) {\n\t\treturn {};\n\t}\n\ttry {\n\t\treturn readJsonObject(filePath);\n\t} catch {\n\t\treturn {};\n\t}\n}\n\nfunction writeRawConfigObject(filePath: string, raw: Record<string, unknown>): void {\n\tmkdirSync(dirname(filePath), { recursive: true });\n\twriteFileSync(filePath, `${JSON.stringify(raw, null, 2)}\\n`, \"utf-8\");\n}\n\nfunction getServersObject(raw: Record<string, unknown>): Record<string, unknown> {\n\tconst servers = raw.mcpServers;\n\treturn isRecord(servers) ? servers : {};\n}\n\nfunction replaceClaudePluginRoot(value: string, root: string): string {\n\treturn value.replace(/\\$\\{CLAUDE_PLUGIN_ROOT\\}/g, root);\n}\n\nfunction convertMcpServer(server: ClaudeMcpServer, root: string): ClaudeMcpServer {\n\treturn {\n\t\t...server,\n\t\t...(server.command ? { command: replaceClaudePluginRoot(server.command, root) } : {}),\n\t\t...(server.args ? { args: server.args.map((arg) => replaceClaudePluginRoot(arg, root)) } : {}),\n\t\t...(server.env\n\t\t\t? {\n\t\t\t\t\tenv: Object.fromEntries(\n\t\t\t\t\t\tObject.entries(server.env).map(([key, value]) => [key, replaceClaudePluginRoot(value, root)]),\n\t\t\t\t\t),\n\t\t\t\t}\n\t\t\t: {}),\n\t};\n}\n\nfunction isInside(target: string, root: string): boolean {\n\tconst resolvedTarget = resolve(target);\n\tconst resolvedRoot = resolve(root);\n\treturn resolvedTarget === resolvedRoot || resolvedTarget.startsWith(`${resolvedRoot}${sep}`);\n}\n\nexport class PluginManager {\n\tprivate cwd: string;\n\tprivate agentDir: string;\n\tprivate settingsManager: SettingsManager;\n\n\tconstructor(options: PluginManagerOptions) {\n\t\tthis.cwd = resolvePath(options.cwd);\n\t\tthis.agentDir = resolvePath(options.agentDir);\n\t\tthis.settingsManager = options.settingsManager;\n\t}\n\n\taddMarketplace(name: string, source: string): void {\n\t\tconst marketplaces = this.settingsManager.getPluginMarketplaces();\n\t\tmarketplaces[name] = { source };\n\t\tthis.settingsManager.setPluginMarketplaces(marketplaces);\n\t}\n\n\tremoveMarketplace(name: string): boolean {\n\t\tconst marketplaces = this.settingsManager.getPluginMarketplaces();\n\t\tif (!marketplaces[name]) {\n\t\t\treturn false;\n\t\t}\n\t\tdelete marketplaces[name];\n\t\tthis.settingsManager.setPluginMarketplaces(marketplaces);\n\t\treturn true;\n\t}\n\n\tlistMarketplaces(): Array<{ name: string; source: string }> {\n\t\treturn Object.entries(this.settingsManager.getPluginMarketplaces()).map(([name, value]) => ({\n\t\t\tname,\n\t\t\tsource: value.source,\n\t\t}));\n\t}\n\n\tasync searchMarketplaces(query?: string, options?: { marketplace?: string }): Promise<PluginSearchResult[]> {\n\t\tconst marketplaces = this.settingsManager.getPluginMarketplaces();\n\t\tconst normalizedQuery = query?.trim().toLowerCase();\n\t\tconst installedPlugins = this.listConfiguredPlugins();\n\t\tconst results: PluginSearchResult[] = [];\n\n\t\tfor (const [marketplaceName, marketplace] of Object.entries(marketplaces)) {\n\t\t\tif (options?.marketplace && marketplaceName !== options.marketplace) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst marketplaceRoot = await this.prepareMarketplaceRoot(marketplaceName, marketplace);\n\t\t\tconst catalog = readMarketplaceCatalog(marketplaceRoot);\n\t\t\tfor (const entry of catalog.plugins) {\n\t\t\t\tconst haystack = [entry.name, entry.source.url, marketplaceName].join(\" \").toLowerCase();\n\t\t\t\tif (normalizedQuery && !haystack.includes(normalizedQuery)) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tresults.push({\n\t\t\t\t\tname: entry.name,\n\t\t\t\t\tmarketplace: marketplaceName,\n\t\t\t\t\tsource: entry.source.url,\n\t\t\t\t\t...(entry.source.ref ? { ref: entry.source.ref } : {}),\n\t\t\t\t\tinstalled: installedPlugins.some(\n\t\t\t\t\t\t(plugin) =>\n\t\t\t\t\t\t\t(plugin.marketplace === marketplaceName && plugin.name === entry.name) ||\n\t\t\t\t\t\t\tplugin.source === entry.source.url,\n\t\t\t\t\t),\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\treturn results;\n\t}\n\n\tasync install(spec: string, options?: PluginInstallOptions): Promise<ConfiguredPlugin> {\n\t\tconst parsed = parsePluginInstallSpec(spec);\n\t\tconst source =\n\t\t\tparsed.type === \"marketplace\"\n\t\t\t\t? await this.resolveMarketplaceSource(parsed.name, parsed.marketplace)\n\t\t\t\t: { url: parsed.source };\n\t\tconst requestedName = parsed.type === \"marketplace\" ? parsed.name : undefined;\n\t\tconst pluginRoot = await this.preparePluginRoot(source.url, source.ref, options, requestedName);\n\t\tconst manifest = readClaudePluginManifest(pluginRoot);\n\t\tconst scope = options?.local ? \"project\" : \"global\";\n\t\tthis.writeMcpServers(manifest, scope);\n\t\tconst storedSource = source.url;\n\t\tconst settingsEntry: InstalledPluginSettings = {\n\t\t\tname: manifest.name,\n\t\t\tsource: storedSource,\n\t\t\tenabled: true,\n\t\t\t...(parsed.type === \"marketplace\" ? { marketplace: parsed.marketplace } : {}),\n\t\t\t...(source.ref ? { ref: source.ref } : {}),\n\t\t};\n\t\tthis.upsertPluginSettings(settingsEntry, options);\n\t\treturn {\n\t\t\t...settingsEntry,\n\t\t\tenabled: true,\n\t\t\tscope: options?.local ? \"project\" : \"user\",\n\t\t\tinstalledPath: pluginRoot,\n\t\t};\n\t}\n\n\tlistConfiguredPlugins(): ConfiguredPlugin[] {\n\t\tconst plugins: ConfiguredPlugin[] = [];\n\t\tfor (const plugin of this.settingsManager.getGlobalSettings().plugins ?? []) {\n\t\t\tplugins.push({\n\t\t\t\t...plugin,\n\t\t\t\tenabled: plugin.enabled !== false,\n\t\t\t\tscope: \"user\",\n\t\t\t\tinstalledPath: this.getInstalledPluginPath(plugin, \"user\"),\n\t\t\t});\n\t\t}\n\t\tfor (const plugin of this.settingsManager.getProjectSettings().plugins ?? []) {\n\t\t\tplugins.push({\n\t\t\t\t...plugin,\n\t\t\t\tenabled: plugin.enabled !== false,\n\t\t\t\tscope: \"project\",\n\t\t\t\tinstalledPath: this.getInstalledPluginPath(plugin, \"project\"),\n\t\t\t});\n\t\t}\n\t\treturn plugins;\n\t}\n\n\tasync update(name?: string): Promise<void> {\n\t\tlet matched = false;\n\t\tfor (const plugin of this.listConfiguredPlugins()) {\n\t\t\tif (name && plugin.name !== name) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tmatched = true;\n\t\t\tconst local = plugin.scope === \"project\";\n\t\t\tconst pluginRoot = await this.preparePluginRoot(plugin.source, plugin.ref, { local }, plugin.name);\n\t\t\tconst manifest = readClaudePluginManifest(pluginRoot);\n\t\t\tthis.writeMcpServers(manifest, local ? \"project\" : \"global\");\n\t\t\tthis.upsertPluginSettings(\n\t\t\t\t{\n\t\t\t\t\tname: manifest.name,\n\t\t\t\t\tsource: plugin.source,\n\t\t\t\t\tenabled: plugin.enabled,\n\t\t\t\t\t...(plugin.marketplace ? { marketplace: plugin.marketplace } : {}),\n\t\t\t\t\t...(plugin.ref ? { ref: plugin.ref } : {}),\n\t\t\t\t},\n\t\t\t\t{ local },\n\t\t\t);\n\t\t}\n\t\tif (name && !matched) {\n\t\t\tthrow new Error(`No matching plugin found for ${name}`);\n\t\t}\n\t}\n\n\tremove(name: string, options?: PluginInstallOptions): boolean {\n\t\tconst scope = options?.local ? \"project\" : \"global\";\n\t\tconst settings =\n\t\t\tscope === \"project\"\n\t\t\t\t? (this.settingsManager.getProjectSettings().plugins ?? [])\n\t\t\t\t: (this.settingsManager.getGlobalSettings().plugins ?? []);\n\t\tconst removedPlugins = settings.filter((plugin) => plugin.name === name || plugin.source === name);\n\t\tconst next = settings.filter((plugin) => plugin.name !== name && plugin.source !== name);\n\t\tif (next.length === settings.length) {\n\t\t\treturn false;\n\t\t}\n\t\tfor (const plugin of removedPlugins) {\n\t\t\tthis.removeMcpServers(plugin.name, scope);\n\t\t}\n\t\tif (scope === \"project\") {\n\t\t\tthis.settingsManager.setProjectPlugins(next);\n\t\t} else {\n\t\t\tthis.settingsManager.setPlugins(next);\n\t\t}\n\t\tconst root = this.getPluginStorageRoot(options);\n\t\tconst target = join(root, normalizePluginName(name));\n\t\tif (isInside(target, root)) {\n\t\t\trmSync(target, { recursive: true, force: true });\n\t\t}\n\t\treturn true;\n\t}\n\n\tresolveEnabledPluginResources(): PluginResourcePaths {\n\t\tconst skills: Array<{ path: string; metadata: PathMetadata }> = [];\n\t\tconst prompts: Array<{ path: string; metadata: PathMetadata }> = [];\n\t\tconst diagnostics: PluginDiagnostic[] = [];\n\t\tfor (const plugin of this.listConfiguredPlugins()) {\n\t\t\tif (!plugin.enabled || !plugin.installedPath || !existsSync(plugin.installedPath)) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tconst manifest = readClaudePluginManifest(plugin.installedPath);\n\t\t\tdiagnostics.push(...manifest.diagnostics);\n\t\t\tconst metadata: PathMetadata = {\n\t\t\t\tsource: plugin.source,\n\t\t\t\tscope: plugin.scope,\n\t\t\t\torigin: \"package\",\n\t\t\t\tbaseDir: plugin.installedPath,\n\t\t\t};\n\t\t\tfor (const path of this.getSkillPaths(manifest)) {\n\t\t\t\tskills.push({ path, metadata });\n\t\t\t}\n\t\t\tfor (const path of this.getPromptPaths(manifest)) {\n\t\t\t\tprompts.push({ path, metadata });\n\t\t\t}\n\t\t}\n\t\treturn { skills, prompts, diagnostics };\n\t}\n\n\tprivate async resolveMarketplaceSource(\n\t\tpluginName: string,\n\t\tmarketplaceName: string,\n\t): Promise<{ url: string; ref?: string }> {\n\t\tconst marketplace = this.settingsManager.getPluginMarketplaces()[marketplaceName];\n\t\tif (!marketplace) {\n\t\t\tthrow new Error(`Unknown plugin marketplace: ${marketplaceName}`);\n\t\t}\n\t\tconst marketplaceRoot = await this.prepareMarketplaceRoot(marketplaceName, marketplace);\n\t\tconst catalog = readMarketplaceCatalog(marketplaceRoot);\n\t\tconst entry = catalog.plugins.find((plugin) => plugin.name === pluginName);\n\t\tif (!entry) {\n\t\t\tthrow new Error(`Plugin ${pluginName} was not found in marketplace ${marketplaceName}`);\n\t\t}\n\t\treturn entry.source;\n\t}\n\n\tprivate async prepareMarketplaceRoot(name: string, marketplace: PluginMarketplaceSettings): Promise<string> {\n\t\tconst source = marketplace.source;\n\t\tif (existsSync(resolvePath(source, this.cwd, { trim: true }))) {\n\t\t\treturn resolvePath(source, this.cwd, { trim: true });\n\t\t}\n\t\tconst parsed = parseGitUrl(source);\n\t\tif (!parsed) {\n\t\t\tthrow new Error(`Unsupported marketplace source: ${source}`);\n\t\t}\n\t\tconst target = join(this.agentDir, \"plugin-marketplaces\", normalizePluginName(name));\n\t\tawait this.cloneOrUpdate(parsed, target);\n\t\treturn target;\n\t}\n\n\tprivate async preparePluginRoot(\n\t\tsource: string,\n\t\tref: string | undefined,\n\t\toptions: PluginInstallOptions | undefined,\n\t\trequestedName: string | undefined,\n\t): Promise<string> {\n\t\tconst resolvedLocal = resolvePath(source, this.cwd, { trim: true });\n\t\tconst shouldCloneLocalGit = existsSync(join(resolvedLocal, \".git\")) && ref;\n\t\tconst parsedGit = parseGitUrl(source);\n\t\tconst parsed =\n\t\t\tparsedGit ??\n\t\t\t(shouldCloneLocalGit\n\t\t\t\t? ({\n\t\t\t\t\t\ttype: \"git\",\n\t\t\t\t\t\trepo: resolvedLocal,\n\t\t\t\t\t\thost: \"local\",\n\t\t\t\t\t\tpath: normalizePluginName(requestedName ?? basename(resolvedLocal)),\n\t\t\t\t\t\tref,\n\t\t\t\t\t\tpinned: Boolean(ref),\n\t\t\t\t\t} satisfies GitSource)\n\t\t\t\t: null);\n\t\tif (!parsed && existsSync(resolvedLocal)) {\n\t\t\treturn resolvedLocal;\n\t\t}\n\t\tif (!parsed) {\n\t\t\tthrow new Error(`Unsupported plugin source: ${source}`);\n\t\t}\n\t\tconst provisionalName = normalizePluginName(requestedName ?? basename(parsed.path));\n\t\tconst provisionalTarget = join(this.getPluginStorageRoot(options), provisionalName);\n\t\tawait this.cloneOrUpdate({ ...parsed, ...(ref ? { ref, pinned: true } : {}) }, provisionalTarget);\n\t\tconst manifest = readClaudePluginManifest(provisionalTarget);\n\t\tconst finalTarget = join(this.getPluginStorageRoot(options), manifest.name);\n\t\tif (finalTarget !== provisionalTarget) {\n\t\t\trmSync(finalTarget, { recursive: true, force: true });\n\t\t\trenameSync(provisionalTarget, finalTarget);\n\t\t}\n\t\treturn finalTarget;\n\t}\n\n\tprivate async cloneOrUpdate(source: GitSource, target: string): Promise<void> {\n\t\tif (!existsSync(target)) {\n\t\t\tmkdirSync(dirname(target), { recursive: true });\n\t\t\tawait execFileAsync(\"git\", [\"clone\", source.repo, target]);\n\t\t} else {\n\t\t\tawait execFileAsync(\"git\", [\"fetch\", \"origin\"], { cwd: target });\n\t\t}\n\t\tif (source.ref) {\n\t\t\tawait execFileAsync(\"git\", [\"checkout\", source.ref], { cwd: target });\n\t\t}\n\t}\n\n\tprivate upsertPluginSettings(entry: InstalledPluginSettings, options?: PluginInstallOptions): void {\n\t\tconst current = options?.local\n\t\t\t? (this.settingsManager.getProjectSettings().plugins ?? [])\n\t\t\t: (this.settingsManager.getGlobalSettings().plugins ?? []);\n\t\tconst next = current.filter((plugin) => plugin.name !== entry.name && plugin.source !== entry.source);\n\t\tnext.push(entry);\n\t\tif (options?.local) {\n\t\t\tthis.settingsManager.setProjectPlugins(next);\n\t\t} else {\n\t\t\tthis.settingsManager.setPlugins(next);\n\t\t}\n\t}\n\n\tprivate writeMcpServers(manifest: ClaudePluginManifest, scope: SettingsScope): void {\n\t\tif (Object.keys(manifest.mcpServers).length === 0) {\n\t\t\treturn;\n\t\t}\n\t\tconst path = scope === \"project\" ? join(this.cwd, CONFIG_DIR_NAME, \"mcp.json\") : join(this.agentDir, \"mcp.json\");\n\t\tconst raw = readRawConfigObject(path);\n\t\tconst servers = getServersObject(raw);\n\t\tfor (const [serverName, server] of Object.entries(manifest.mcpServers)) {\n\t\t\tservers[`${manifest.name}-${serverName}`] = convertMcpServer(server, manifest.root);\n\t\t}\n\t\traw.mcpServers = servers;\n\t\twriteRawConfigObject(path, raw);\n\t}\n\n\tprivate removeMcpServers(pluginName: string, scope: SettingsScope): void {\n\t\tconst path = scope === \"project\" ? join(this.cwd, CONFIG_DIR_NAME, \"mcp.json\") : join(this.agentDir, \"mcp.json\");\n\t\tif (!existsSync(path)) {\n\t\t\treturn;\n\t\t}\n\t\tconst raw = readRawConfigObject(path);\n\t\tconst servers = getServersObject(raw);\n\t\tconst prefix = `${pluginName}-`;\n\t\tlet changed = false;\n\t\tfor (const serverName of Object.keys(servers)) {\n\t\t\tif (serverName.startsWith(prefix)) {\n\t\t\t\tdelete servers[serverName];\n\t\t\t\tchanged = true;\n\t\t\t}\n\t\t}\n\t\tif (!changed) {\n\t\t\treturn;\n\t\t}\n\t\traw.mcpServers = servers;\n\t\twriteRawConfigObject(path, raw);\n\t}\n\n\tprivate getPluginStorageRoot(options?: PluginInstallOptions): string {\n\t\treturn options?.local ? join(this.cwd, CONFIG_DIR_NAME, \"plugins\") : join(this.agentDir, \"plugins\");\n\t}\n\n\tprivate getInstalledPluginPath(plugin: InstalledPluginSettings, scope: \"user\" | \"project\"): string | undefined {\n\t\tconst storageRoot =\n\t\t\tscope === \"project\" ? join(this.cwd, CONFIG_DIR_NAME, \"plugins\") : join(this.agentDir, \"plugins\");\n\t\tconst stored = join(storageRoot, plugin.name);\n\t\tif (existsSync(stored)) {\n\t\t\treturn stored;\n\t\t}\n\t\tconst resolvedSource = resolvePath(\n\t\t\tplugin.source,\n\t\t\tscope === \"project\" ? join(this.cwd, CONFIG_DIR_NAME) : this.agentDir,\n\t\t\t{\n\t\t\t\ttrim: true,\n\t\t\t},\n\t\t);\n\t\treturn existsSync(resolvedSource) ? resolvedSource : undefined;\n\t}\n\n\tprivate getSkillPaths(manifest: ClaudePluginManifest): string[] {\n\t\tif (manifest.skills.length > 0) {\n\t\t\treturn manifest.skills.map((entry) => resolve(manifest.root, entry)).filter((path) => existsSync(path));\n\t\t}\n\t\tconst convention = join(manifest.root, \"skills\");\n\t\treturn existsSync(convention) ? [convention] : [];\n\t}\n\n\tprivate getPromptPaths(manifest: ClaudePluginManifest): string[] {\n\t\treturn resolveEntries(manifest.root, manifest.commands, [\"commands\", join(\".claude\", \"commands\")]);\n\t}\n}\n"]}