@seanhogg/builderforce-agents 2026.10.9 → 2026.10.11

package/dist/{dns-cli-C4f4Tyij.js → dns-cli-dr5dHzfI.js}

@@ -1,3 +1,3 @@
-import"./paths-5FcIFMsj.js";import{B as theme}from"./utils-DbaBVFaK.js";import"./session-key-EoB0qaG9.js";import"./builderforce-root-D64_sXEi.js";import{i as defaultRuntime}from"./subsystem-B3TqcCrZ.js";import"./registry-TdK-aV05.js";import"./logger-Bch0bx9c.js";import"./exec-DdcIjeyn.js";import"./agent-scope-DPtjOxzp.js";import"./src-CA0fU67C.js";import"./model-selection-9bRFKBI_.js";import"./env-file-D1MDi-AM.js";import"./boolean-Cnh1KNl1.js";import"./env-BIdU5BAp.js";import"./src-DTFqOIQD.js";import{r as loadConfig}from"./io-3R_ZyUxB.js";import"./manifest-registry-BJCfNV1a.js";import"./config-_1Ca6jGb.js";import{n as pickPrimaryTailnetIPv4,r as pickPrimaryTailnetIPv6}from"./tailnet-CTj65CYb.js";import{t as formatDocsLink}from"./links-BgWWaaOT.js";import{t as renderTable}from"./table-BoCHYKoQ.js";import{n as resolveWideAreaDiscoveryDomain,t as getWideAreaZonePath}from"./widearea-dns-CZR56vQb.js";import fs from"node:fs";import path from"node:path";import{spawnSync}from"node:child_process";function run(cmd,args,opts){let res=spawnSync(cmd,args,{encoding:`utf-8`,stdio:opts?.inherit?`inherit`:`pipe`});if(res.error)throw res.error;if(!opts?.allowFailure&&res.status!==0){let errText=typeof res.stderr==`string`&&res.stderr.trim()?res.stderr.trim():`exit ${res.status??`unknown`}`;throw Error(`${cmd} ${args.join(` `)} failed: ${errText}`)}return typeof res.stdout==`string`?res.stdout:``}function writeFileSudoIfNeeded(filePath,content){try{fs.writeFileSync(filePath,content,`utf-8`);return}catch(err){let code=err.code;if(code!==`EACCES`&&code!==`EPERM`)throw err instanceof Error?err:Error(String(err))}let res=spawnSync(`sudo`,[`tee`,filePath],{input:content,encoding:`utf-8`,stdio:[`pipe`,`ignore`,`inherit`]});if(res.error)throw res.error;if(res.status!==0)throw Error(`sudo tee ${filePath} failed: exit ${res.status??`unknown`}`)}function mkdirSudoIfNeeded(dirPath){try{fs.mkdirSync(dirPath,{recursive:!0});return}catch(err){let code=err.code;if(code!==`EACCES`&&code!==`EPERM`)throw err instanceof Error?err:Error(String(err))}run(`sudo`,[`mkdir`,`-p`,dirPath],{inherit:!0})}function zoneFileNeedsBootstrap(zonePath){if(!fs.existsSync(zonePath))return!0;try{let content=fs.readFileSync(zonePath,`utf-8`);return!/\bSOA\b/.test(content)||!/\bNS\b/.test(content)}catch{return!0}}function detectBrewPrefix(){let prefix=run(`brew`,[`--prefix`]).trim();if(!prefix)throw Error(`failed to resolve Homebrew prefix`);return prefix}function ensureImportLine(corefilePath,importGlob){let existing=fs.readFileSync(corefilePath,`utf-8`);return existing.includes(importGlob)?!1:(writeFileSudoIfNeeded(corefilePath,`${existing.replace(/\s*$/,``)}\n\nimport ${importGlob}\n`),!0)}function registerDnsCli(program){program.command(`dns`).description(`DNS helpers for wide-area discovery (Tailscale + CoreDNS)`).addHelpText(`after`,()=>`\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/dns`,`docs.builderforce.ai/cli/dns`)}\n`).command(`setup`).description(`Set up CoreDNS to serve your discovery domain for unicast DNS-SD (Wide-Area Bonjour)`).option(`--domain <domain>`,`Wide-area discovery domain (e.g. builderforce.internal)`).option(`--apply`,`Install/update CoreDNS config and (re)start the service (requires sudo)`,!1).action(async opts=>{let cfg=loadConfig(),tailnetIPv4=pickPrimaryTailnetIPv4(),tailnetIPv6=pickPrimaryTailnetIPv6(),wideAreaDomain=resolveWideAreaDiscoveryDomain({configDomain:opts.domain??cfg.discovery?.wideArea?.domain});if(!wideAreaDomain)throw Error(`No wide-area domain configured. Set discovery.wideArea.domain or pass --domain.`);let zonePath=getWideAreaZonePath(wideAreaDomain),tableWidth=Math.max(60,(process.stdout.columns??120)-1);if(defaultRuntime.log(theme.heading(`DNS setup`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Key`,header:`Key`,minWidth:18},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:[{Key:`Domain`,Value:wideAreaDomain},{Key:`Zone file`,Value:zonePath},{Key:`Tailnet IP`,Value:`${tailnetIPv4??`—`}${tailnetIPv6?` (v6 ${tailnetIPv6})`:``}`}]}).trimEnd()),defaultRuntime.log(``),defaultRuntime.log(theme.heading(`Recommended ~/.builderforce/builderforce.json:`)),defaultRuntime.log(JSON.stringify({gateway:{bind:`auto`},discovery:{wideArea:{enabled:!0,domain:wideAreaDomain}}},null,2)),defaultRuntime.log(``),defaultRuntime.log(theme.heading(`Tailscale admin (DNS → Nameservers):`)),defaultRuntime.log(theme.muted(`- Add nameserver: ${tailnetIPv4??`<this machine's tailnet IPv4>`}`)),defaultRuntime.log(theme.muted(`- Restrict to domain (Split DNS): ${wideAreaDomain.replace(/\.$/,``)}`)),!opts.apply){defaultRuntime.log(``),defaultRuntime.log(theme.muted(`Run with --apply to install CoreDNS and configure it.`));return}if(process.platform!==`darwin`)throw Error(`dns setup is currently supported on macOS only`);if(!tailnetIPv4&&!tailnetIPv6)throw Error(`no tailnet IP detected; ensure Tailscale is running on this machine`);let prefix=detectBrewPrefix(),etcDir=path.join(prefix,`etc`,`coredns`),corefilePath=path.join(etcDir,`Corefile`),confDir=path.join(etcDir,`conf.d`),importGlob=path.join(confDir,`*.server`),serverPath=path.join(confDir,`${wideAreaDomain.replace(/\.$/,``)}.server`);run(`brew`,[`list`,`coredns`],{allowFailure:!0}),run(`brew`,[`install`,`coredns`],{inherit:!0,allowFailure:!0}),mkdirSudoIfNeeded(confDir),fs.existsSync(corefilePath)?ensureImportLine(corefilePath,importGlob):writeFileSudoIfNeeded(corefilePath,`import ${importGlob}\n`);let bindArgs=[tailnetIPv4,tailnetIPv6].filter(v=>!!v?.trim());if(writeFileSudoIfNeeded(serverPath,[`${wideAreaDomain.replace(/\.$/,``)}:53 {`,`  bind ${bindArgs.join(` `)}`,`  file ${zonePath} {`,`    reload 10s`,`  }`,`  errors`,`  log`,`}`,``].join(`
+import"./paths-5FcIFMsj.js";import{B as theme}from"./utils-DbaBVFaK.js";import"./session-key-EoB0qaG9.js";import"./builderforce-root-D64_sXEi.js";import{i as defaultRuntime}from"./subsystem-B3TqcCrZ.js";import"./registry-TdK-aV05.js";import"./logger-Bch0bx9c.js";import"./exec-DdcIjeyn.js";import"./agent-scope-DPtjOxzp.js";import"./src-CA0fU67C.js";import"./model-selection-DG9J_VTz.js";import"./env-file-D1MDi-AM.js";import"./boolean-Cnh1KNl1.js";import"./env-BIdU5BAp.js";import"./src-DTFqOIQD.js";import{r as loadConfig}from"./io-BLBq4T2o.js";import"./manifest-registry-BJCfNV1a.js";import"./config-BgV_FYSq.js";import{n as pickPrimaryTailnetIPv4,r as pickPrimaryTailnetIPv6}from"./tailnet-CTj65CYb.js";import{t as formatDocsLink}from"./links-BgWWaaOT.js";import{t as renderTable}from"./table-BoCHYKoQ.js";import{n as resolveWideAreaDiscoveryDomain,t as getWideAreaZonePath}from"./widearea-dns-CZR56vQb.js";import fs from"node:fs";import path from"node:path";import{spawnSync}from"node:child_process";function run(cmd,args,opts){let res=spawnSync(cmd,args,{encoding:`utf-8`,stdio:opts?.inherit?`inherit`:`pipe`});if(res.error)throw res.error;if(!opts?.allowFailure&&res.status!==0){let errText=typeof res.stderr==`string`&&res.stderr.trim()?res.stderr.trim():`exit ${res.status??`unknown`}`;throw Error(`${cmd} ${args.join(` `)} failed: ${errText}`)}return typeof res.stdout==`string`?res.stdout:``}function writeFileSudoIfNeeded(filePath,content){try{fs.writeFileSync(filePath,content,`utf-8`);return}catch(err){let code=err.code;if(code!==`EACCES`&&code!==`EPERM`)throw err instanceof Error?err:Error(String(err))}let res=spawnSync(`sudo`,[`tee`,filePath],{input:content,encoding:`utf-8`,stdio:[`pipe`,`ignore`,`inherit`]});if(res.error)throw res.error;if(res.status!==0)throw Error(`sudo tee ${filePath} failed: exit ${res.status??`unknown`}`)}function mkdirSudoIfNeeded(dirPath){try{fs.mkdirSync(dirPath,{recursive:!0});return}catch(err){let code=err.code;if(code!==`EACCES`&&code!==`EPERM`)throw err instanceof Error?err:Error(String(err))}run(`sudo`,[`mkdir`,`-p`,dirPath],{inherit:!0})}function zoneFileNeedsBootstrap(zonePath){if(!fs.existsSync(zonePath))return!0;try{let content=fs.readFileSync(zonePath,`utf-8`);return!/\bSOA\b/.test(content)||!/\bNS\b/.test(content)}catch{return!0}}function detectBrewPrefix(){let prefix=run(`brew`,[`--prefix`]).trim();if(!prefix)throw Error(`failed to resolve Homebrew prefix`);return prefix}function ensureImportLine(corefilePath,importGlob){let existing=fs.readFileSync(corefilePath,`utf-8`);return existing.includes(importGlob)?!1:(writeFileSudoIfNeeded(corefilePath,`${existing.replace(/\s*$/,``)}\n\nimport ${importGlob}\n`),!0)}function registerDnsCli(program){program.command(`dns`).description(`DNS helpers for wide-area discovery (Tailscale + CoreDNS)`).addHelpText(`after`,()=>`\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/dns`,`docs.builderforce.ai/cli/dns`)}\n`).command(`setup`).description(`Set up CoreDNS to serve your discovery domain for unicast DNS-SD (Wide-Area Bonjour)`).option(`--domain <domain>`,`Wide-area discovery domain (e.g. builderforce.internal)`).option(`--apply`,`Install/update CoreDNS config and (re)start the service (requires sudo)`,!1).action(async opts=>{let cfg=loadConfig(),tailnetIPv4=pickPrimaryTailnetIPv4(),tailnetIPv6=pickPrimaryTailnetIPv6(),wideAreaDomain=resolveWideAreaDiscoveryDomain({configDomain:opts.domain??cfg.discovery?.wideArea?.domain});if(!wideAreaDomain)throw Error(`No wide-area domain configured. Set discovery.wideArea.domain or pass --domain.`);let zonePath=getWideAreaZonePath(wideAreaDomain),tableWidth=Math.max(60,(process.stdout.columns??120)-1);if(defaultRuntime.log(theme.heading(`DNS setup`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Key`,header:`Key`,minWidth:18},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:[{Key:`Domain`,Value:wideAreaDomain},{Key:`Zone file`,Value:zonePath},{Key:`Tailnet IP`,Value:`${tailnetIPv4??`—`}${tailnetIPv6?` (v6 ${tailnetIPv6})`:``}`}]}).trimEnd()),defaultRuntime.log(``),defaultRuntime.log(theme.heading(`Recommended ~/.builderforce/builderforce.json:`)),defaultRuntime.log(JSON.stringify({gateway:{bind:`auto`},discovery:{wideArea:{enabled:!0,domain:wideAreaDomain}}},null,2)),defaultRuntime.log(``),defaultRuntime.log(theme.heading(`Tailscale admin (DNS → Nameservers):`)),defaultRuntime.log(theme.muted(`- Add nameserver: ${tailnetIPv4??`<this machine's tailnet IPv4>`}`)),defaultRuntime.log(theme.muted(`- Restrict to domain (Split DNS): ${wideAreaDomain.replace(/\.$/,``)}`)),!opts.apply){defaultRuntime.log(``),defaultRuntime.log(theme.muted(`Run with --apply to install CoreDNS and configure it.`));return}if(process.platform!==`darwin`)throw Error(`dns setup is currently supported on macOS only`);if(!tailnetIPv4&&!tailnetIPv6)throw Error(`no tailnet IP detected; ensure Tailscale is running on this machine`);let prefix=detectBrewPrefix(),etcDir=path.join(prefix,`etc`,`coredns`),corefilePath=path.join(etcDir,`Corefile`),confDir=path.join(etcDir,`conf.d`),importGlob=path.join(confDir,`*.server`),serverPath=path.join(confDir,`${wideAreaDomain.replace(/\.$/,``)}.server`);run(`brew`,[`list`,`coredns`],{allowFailure:!0}),run(`brew`,[`install`,`coredns`],{inherit:!0,allowFailure:!0}),mkdirSudoIfNeeded(confDir),fs.existsSync(corefilePath)?ensureImportLine(corefilePath,importGlob):writeFileSudoIfNeeded(corefilePath,`import ${importGlob}\n`);let bindArgs=[tailnetIPv4,tailnetIPv6].filter(v=>!!v?.trim());if(writeFileSudoIfNeeded(serverPath,[`${wideAreaDomain.replace(/\.$/,``)}:53 {`,`  bind ${bindArgs.join(` `)}`,`  file ${zonePath} {`,`    reload 10s`,`  }`,`  errors`,`  log`,`}`,``].join(`
 `)),await fs.promises.mkdir(path.dirname(zonePath),{recursive:!0}),zoneFileNeedsBootstrap(zonePath)){let serial=`${new Date().getUTCFullYear()}${String(new Date().getUTCMonth()+1).padStart(2,`0`)}${String(new Date().getUTCDate()).padStart(2,`0`)}01`,zoneLines=[`; created by builderforce dns setup (will be overwritten by the gateway when wide-area discovery is enabled)`,`$ORIGIN ${wideAreaDomain}`,`$TTL 60`,`@ IN SOA ns1 hostmaster ${serial} 7200 3600 1209600 60`,`@ IN NS ns1`,tailnetIPv4?`ns1 IN A ${tailnetIPv4}`:null,tailnetIPv6?`ns1 IN AAAA ${tailnetIPv6}`:null,``].filter(line=>!!line);fs.writeFileSync(zonePath,zoneLines.join(`
 `),`utf-8`)}defaultRuntime.log(``),defaultRuntime.log(theme.heading(`Starting CoreDNS (sudo)…`)),run(`sudo`,[`brew`,`services`,`restart`,`coredns`],{inherit:!0}),cfg.discovery?.wideArea?.enabled!==!0&&(defaultRuntime.log(``),defaultRuntime.log(theme.muted(`Note: enable discovery.wideArea.enabled in ~/.builderforce/builderforce.json on the gateway and restart the gateway so it writes the DNS-SD zone.`)))})}export{registerDnsCli};

package/dist/{doctor-completion-BSotFS6p.js → doctor-completion-94zme499.js}

@@ -1 +1 @@
-import{r as resolveCliName}from"./command-format-DTMaGKs7.js";import{t as resolveBuilderForceAgentsPackageRoot}from"./builderforce-root-DY1qbWNX.js";import{t as note}from"./note-DgDXuE0F.js";import{a as resolveCompletionCachePath,n as installCompletion,o as resolveShellFromEnv,r as isCompletionInstalled,s as usesSlowDynamicCompletion,t as completionCacheExists}from"./completion-cli-DpFvU4Qn.js";import{spawnSync}from"node:child_process";import path from"node:path";async function generateCompletionCache(){let root=await resolveBuilderForceAgentsPackageRoot({moduleUrl:import.meta.url,argv1:process.argv[1],cwd:process.cwd()});if(!root)return!1;let binPath=path.join(root,`builderforce.mjs`);return spawnSync(process.execPath,[binPath,`completion`,`--write-state`],{cwd:root,env:process.env,encoding:`utf-8`}).status===0}async function checkShellCompletionStatus(binName=`builderforce`){let shell=resolveShellFromEnv();return{shell,profileInstalled:await isCompletionInstalled(shell,binName),cacheExists:await completionCacheExists(shell,binName),cachePath:resolveCompletionCachePath(shell,binName),usesSlowPattern:await usesSlowDynamicCompletion(shell,binName)}}async function doctorShellCompletion(runtime,prompter,options={}){let cliName=resolveCliName(),status=await checkShellCompletionStatus(cliName);if(status.usesSlowPattern){if(note(`Your ${status.shell} profile uses slow dynamic completion (source <(...)).\nUpgrading to cached completion for faster shell startup...`,`Shell completion`),!status.cacheExists&&!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion upgraded. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`);return}if(status.profileInstalled&&!status.cacheExists){note(`Shell completion is configured in your ${status.shell} profile but the cache is missing.\nRegenerating cache...`,`Shell completion`),await generateCompletionCache()?note(`Completion cache regenerated at ${status.cachePath}`,`Shell completion`):note(`Failed to regenerate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}if(!status.profileInstalled){if(options.nonInteractive)return;if(await prompter.confirm({message:`Enable ${status.shell} shell completion for ${cliName}?`,initialValue:!0})){if(!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion installed. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`)}}}async function ensureCompletionCacheExists(binName=`builderforce`){return await completionCacheExists(resolveShellFromEnv(),binName)?!0:generateCompletionCache()}export{doctorShellCompletion as n,ensureCompletionCacheExists as r,checkShellCompletionStatus as t};
+import{r as resolveCliName}from"./command-format-DTMaGKs7.js";import{t as resolveBuilderForceAgentsPackageRoot}from"./builderforce-root-DY1qbWNX.js";import{t as note}from"./note-DgDXuE0F.js";import{a as resolveCompletionCachePath,n as installCompletion,o as resolveShellFromEnv,r as isCompletionInstalled,s as usesSlowDynamicCompletion,t as completionCacheExists}from"./completion-cli-n8UsdT91.js";import{spawnSync}from"node:child_process";import path from"node:path";async function generateCompletionCache(){let root=await resolveBuilderForceAgentsPackageRoot({moduleUrl:import.meta.url,argv1:process.argv[1],cwd:process.cwd()});if(!root)return!1;let binPath=path.join(root,`builderforce.mjs`);return spawnSync(process.execPath,[binPath,`completion`,`--write-state`],{cwd:root,env:process.env,encoding:`utf-8`}).status===0}async function checkShellCompletionStatus(binName=`builderforce`){let shell=resolveShellFromEnv();return{shell,profileInstalled:await isCompletionInstalled(shell,binName),cacheExists:await completionCacheExists(shell,binName),cachePath:resolveCompletionCachePath(shell,binName),usesSlowPattern:await usesSlowDynamicCompletion(shell,binName)}}async function doctorShellCompletion(runtime,prompter,options={}){let cliName=resolveCliName(),status=await checkShellCompletionStatus(cliName);if(status.usesSlowPattern){if(note(`Your ${status.shell} profile uses slow dynamic completion (source <(...)).\nUpgrading to cached completion for faster shell startup...`,`Shell completion`),!status.cacheExists&&!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion upgraded. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`);return}if(status.profileInstalled&&!status.cacheExists){note(`Shell completion is configured in your ${status.shell} profile but the cache is missing.\nRegenerating cache...`,`Shell completion`),await generateCompletionCache()?note(`Completion cache regenerated at ${status.cachePath}`,`Shell completion`):note(`Failed to regenerate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}if(!status.profileInstalled){if(options.nonInteractive)return;if(await prompter.confirm({message:`Enable ${status.shell} shell completion for ${cliName}?`,initialValue:!0})){if(!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion installed. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`)}}}async function ensureCompletionCacheExists(binName=`builderforce`){return await completionCacheExists(resolveShellFromEnv(),binName)?!0:generateCompletionCache()}export{doctorShellCompletion as n,ensureCompletionCacheExists as r,checkShellCompletionStatus as t};

package/dist/{doctor-completion-DVxbs-74.js → doctor-completion-CbF34DIH.js}

@@ -1 +1 @@
-import{t as resolveBuilderForceAgentsPackageRoot}from"./builderforce-root-D64_sXEi.js";import{r as resolveCliName}from"./command-format-D806O2pt.js";import{t as note}from"./note-B6NtFdXt.js";import{a as resolveCompletionCachePath,n as installCompletion,o as resolveShellFromEnv,r as isCompletionInstalled,s as usesSlowDynamicCompletion,t as completionCacheExists}from"./completion-cli-B2qcVd6q.js";import path from"node:path";import{spawnSync}from"node:child_process";async function generateCompletionCache(){let root=await resolveBuilderForceAgentsPackageRoot({moduleUrl:import.meta.url,argv1:process.argv[1],cwd:process.cwd()});if(!root)return!1;let binPath=path.join(root,`builderforce.mjs`);return spawnSync(process.execPath,[binPath,`completion`,`--write-state`],{cwd:root,env:process.env,encoding:`utf-8`}).status===0}async function checkShellCompletionStatus(binName=`builderforce`){let shell=resolveShellFromEnv();return{shell,profileInstalled:await isCompletionInstalled(shell,binName),cacheExists:await completionCacheExists(shell,binName),cachePath:resolveCompletionCachePath(shell,binName),usesSlowPattern:await usesSlowDynamicCompletion(shell,binName)}}async function doctorShellCompletion(runtime,prompter,options={}){let cliName=resolveCliName(),status=await checkShellCompletionStatus(cliName);if(status.usesSlowPattern){if(note(`Your ${status.shell} profile uses slow dynamic completion (source <(...)).\nUpgrading to cached completion for faster shell startup...`,`Shell completion`),!status.cacheExists&&!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion upgraded. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`);return}if(status.profileInstalled&&!status.cacheExists){note(`Shell completion is configured in your ${status.shell} profile but the cache is missing.\nRegenerating cache...`,`Shell completion`),await generateCompletionCache()?note(`Completion cache regenerated at ${status.cachePath}`,`Shell completion`):note(`Failed to regenerate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}if(!status.profileInstalled){if(options.nonInteractive)return;if(await prompter.confirm({message:`Enable ${status.shell} shell completion for ${cliName}?`,initialValue:!0})){if(!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion installed. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`)}}}async function ensureCompletionCacheExists(binName=`builderforce`){return await completionCacheExists(resolveShellFromEnv(),binName)?!0:generateCompletionCache()}export{doctorShellCompletion as n,ensureCompletionCacheExists as r,checkShellCompletionStatus as t};
+import{t as resolveBuilderForceAgentsPackageRoot}from"./builderforce-root-D64_sXEi.js";import{r as resolveCliName}from"./command-format-D806O2pt.js";import{t as note}from"./note-B6NtFdXt.js";import{a as resolveCompletionCachePath,n as installCompletion,o as resolveShellFromEnv,r as isCompletionInstalled,s as usesSlowDynamicCompletion,t as completionCacheExists}from"./completion-cli-gyvx5ZXu.js";import path from"node:path";import{spawnSync}from"node:child_process";async function generateCompletionCache(){let root=await resolveBuilderForceAgentsPackageRoot({moduleUrl:import.meta.url,argv1:process.argv[1],cwd:process.cwd()});if(!root)return!1;let binPath=path.join(root,`builderforce.mjs`);return spawnSync(process.execPath,[binPath,`completion`,`--write-state`],{cwd:root,env:process.env,encoding:`utf-8`}).status===0}async function checkShellCompletionStatus(binName=`builderforce`){let shell=resolveShellFromEnv();return{shell,profileInstalled:await isCompletionInstalled(shell,binName),cacheExists:await completionCacheExists(shell,binName),cachePath:resolveCompletionCachePath(shell,binName),usesSlowPattern:await usesSlowDynamicCompletion(shell,binName)}}async function doctorShellCompletion(runtime,prompter,options={}){let cliName=resolveCliName(),status=await checkShellCompletionStatus(cliName);if(status.usesSlowPattern){if(note(`Your ${status.shell} profile uses slow dynamic completion (source <(...)).\nUpgrading to cached completion for faster shell startup...`,`Shell completion`),!status.cacheExists&&!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion upgraded. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`);return}if(status.profileInstalled&&!status.cacheExists){note(`Shell completion is configured in your ${status.shell} profile but the cache is missing.\nRegenerating cache...`,`Shell completion`),await generateCompletionCache()?note(`Completion cache regenerated at ${status.cachePath}`,`Shell completion`):note(`Failed to regenerate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}if(!status.profileInstalled){if(options.nonInteractive)return;if(await prompter.confirm({message:`Enable ${status.shell} shell completion for ${cliName}?`,initialValue:!0})){if(!await generateCompletionCache()){note(`Failed to generate completion cache. Run \`${cliName} completion --write-state\` manually.`,`Shell completion`);return}await installCompletion(status.shell,!0,cliName),note(`Shell completion installed. Restart your shell or run: source ~/.${status.shell===`zsh`?`zshrc`:status.shell===`bash`?`bashrc`:`config/fish/config.fish`}`,`Shell completion`)}}}async function ensureCompletionCacheExists(binName=`builderforce`){return await completionCacheExists(resolveShellFromEnv(),binName)?!0:generateCompletionCache()}export{doctorShellCompletion as n,ensureCompletionCacheExists as r,checkShellCompletionStatus as t};

package/dist/{embedded-helpers-CEsr3aQ0.js → embedded-helpers-C9jpiwlw.js}

@@ -1,4 +1,4 @@
-import{D as truncateUtf16Safe}from"./utils-DbaBVFaK.js";import{t as stableStringify}from"./src-DTFqOIQD.js";import{s as formatSandboxToolPolicyBlockedMessage}from"./sandbox-BZibn6PX.js";import{t as sanitizeContentBlocksImages}from"./tool-images-B7b_OiMz.js";import path from"node:path";import{createHash}from"node:crypto";import fs from"node:fs/promises";function normalizeProviderId(provider){if(!provider)return``;let normalized=provider.trim().toLowerCase();return normalized===`z.ai`||normalized===`z-ai`?`zai`:normalized}function isBinaryThinkingProvider(provider){return normalizeProviderId(provider)===`zai`}const XHIGH_MODEL_REFS=[`openai/gpt-5.2`,`openai-codex/gpt-5.3-codex`,`openai-codex/gpt-5.3-codex-spark`,`openai-codex/gpt-5.2-codex`,`openai-codex/gpt-5.1-codex`,`github-copilot/gpt-5.2-codex`,`github-copilot/gpt-5.2`],XHIGH_MODEL_SET=new Set(XHIGH_MODEL_REFS.map(entry=>entry.toLowerCase())),XHIGH_MODEL_IDS=new Set(XHIGH_MODEL_REFS.map(entry=>entry.split(`/`)[1]?.toLowerCase()).filter(entry=>!!entry));function normalizeThinkLevel(raw){if(!raw)return;let key=raw.trim().toLowerCase(),collapsed=key.replace(/[\s_-]+/g,``);if(collapsed===`xhigh`||collapsed===`extrahigh`)return`xhigh`;if([`off`].includes(key))return`off`;if([`on`,`enable`,`enabled`].includes(key))return`low`;if([`min`,`minimal`].includes(key))return`minimal`;if([`low`,`thinkhard`,`think-hard`,`think_hard`].includes(key))return`low`;if([`mid`,`med`,`medium`,`thinkharder`,`think-harder`,`harder`].includes(key))return`medium`;if([`high`,`ultra`,`ultrathink`,`think-hard`,`thinkhardest`,`highest`,`max`].includes(key))return`high`;if([`think`].includes(key))return`minimal`}function supportsXHighThinking(provider,model){let modelKey=model?.trim().toLowerCase();if(!modelKey)return!1;let providerKey=provider?.trim().toLowerCase();return providerKey?XHIGH_MODEL_SET.has(`${providerKey}/${modelKey}`):XHIGH_MODEL_IDS.has(modelKey)}function listThinkingLevels(provider,model){let levels=[`off`,`minimal`,`low`,`medium`,`high`];return supportsXHighThinking(provider,model)&&levels.push(`xhigh`),levels}function listThinkingLevelLabels(provider,model){return isBinaryThinkingProvider(provider)?[`off`,`on`]:listThinkingLevels(provider,model)}function formatThinkingLevels(provider,model,separator=`, `){return listThinkingLevelLabels(provider,model).join(separator)}function formatXHighModelHint(){let refs=[...XHIGH_MODEL_REFS];return refs.length===0?`unknown model`:refs.length===1?refs[0]:refs.length===2?`${refs[0]} or ${refs[1]}`:`${refs.slice(0,-1).join(`, `)} or ${refs[refs.length-1]}`}function normalizeOnOffFullLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`].includes(key))return`off`;if([`full`,`all`,`everything`].includes(key))return`full`;if([`on`,`minimal`,`true`,`yes`,`1`].includes(key))return`on`}function normalizeVerboseLevel(raw){return normalizeOnOffFullLevel(raw)}function normalizeUsageDisplay(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`,`disable`,`disabled`].includes(key))return`off`;if([`on`,`true`,`yes`,`1`,`enable`,`enabled`].includes(key)||[`tokens`,`token`,`tok`,`minimal`,`min`].includes(key))return`tokens`;if([`full`,`session`].includes(key))return`full`}function resolveResponseUsageMode(raw){return normalizeUsageDisplay(raw)??`off`}function normalizeElevatedLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`].includes(key))return`off`;if([`full`,`auto`,`auto-approve`,`autoapprove`].includes(key))return`full`;if([`ask`,`prompt`,`approval`,`approve`].includes(key))return`ask`;if([`on`,`true`,`yes`,`1`].includes(key))return`on`}function normalizeReasoningLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`,`hide`,`hidden`,`disable`,`disabled`].includes(key))return`off`;if([`on`,`true`,`yes`,`1`,`show`,`visible`,`enable`,`enabled`].includes(key))return`on`;if([`stream`,`streaming`,`draft`,`live`].includes(key))return`stream`}function isBase64Signature(value){let trimmed=value.trim();if(!trimmed)return!1;let compact=trimmed.replace(/\s+/g,``);if(!/^[A-Za-z0-9+/=_-]+$/.test(compact))return!1;let isUrl=compact.includes(`-`)||compact.includes(`_`);try{let buf=Buffer.from(compact,isUrl?`base64url`:`base64`);if(buf.length===0)return!1;let encoded=buf.toString(isUrl?`base64url`:`base64`),normalize=input=>input.replace(/=+$/g,``);return normalize(encoded)===normalize(compact)}catch{return!1}}function stripThoughtSignatures(content,options){if(!Array.isArray(content))return content;let allowBase64Only=options?.allowBase64Only??!1,includeCamelCase=options?.includeCamelCase??!1,shouldStripSignature=value=>allowBase64Only?typeof value!=`string`||!isBase64Signature(value):typeof value==`string`&&value.startsWith(`msg_`);return content.map(block=>{if(!block||typeof block!=`object`)return block;let rec=block,stripSnake=shouldStripSignature(rec.thought_signature),stripCamel=includeCamelCase?shouldStripSignature(rec.thoughtSignature):!1;if(!stripSnake&&!stripCamel)return block;let next={...rec};return stripSnake&&delete next.thought_signature,stripCamel&&delete next.thoughtSignature,next})}const DEFAULT_BOOTSTRAP_MAX_CHARS=2e4,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS=15e4;function resolveBootstrapMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_MAX_CHARS}function resolveBootstrapTotalMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapTotalMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS}function trimBootstrapContent(content,fileName,maxChars){let trimmed=content.trimEnd();if(trimmed.length<=maxChars)return{content:trimmed,truncated:!1,maxChars,originalLength:trimmed.length};let headChars=Math.floor(maxChars*.7),tailChars=Math.floor(maxChars*.2),head=trimmed.slice(0,headChars),tail=trimmed.slice(-tailChars);return{content:[head,[``,`[...truncated, read ${fileName} for full content...]`,`…(truncated ${fileName}: kept ${headChars}+${tailChars} chars of ${trimmed.length})…`,``].join(`
+import{D as truncateUtf16Safe}from"./utils-DbaBVFaK.js";import{t as stableStringify}from"./src-DTFqOIQD.js";import{s as formatSandboxToolPolicyBlockedMessage}from"./sandbox-C4AKi2EX.js";import{t as sanitizeContentBlocksImages}from"./tool-images-B7b_OiMz.js";import path from"node:path";import{createHash}from"node:crypto";import fs from"node:fs/promises";function normalizeProviderId(provider){if(!provider)return``;let normalized=provider.trim().toLowerCase();return normalized===`z.ai`||normalized===`z-ai`?`zai`:normalized}function isBinaryThinkingProvider(provider){return normalizeProviderId(provider)===`zai`}const XHIGH_MODEL_REFS=[`openai/gpt-5.2`,`openai-codex/gpt-5.3-codex`,`openai-codex/gpt-5.3-codex-spark`,`openai-codex/gpt-5.2-codex`,`openai-codex/gpt-5.1-codex`,`github-copilot/gpt-5.2-codex`,`github-copilot/gpt-5.2`],XHIGH_MODEL_SET=new Set(XHIGH_MODEL_REFS.map(entry=>entry.toLowerCase())),XHIGH_MODEL_IDS=new Set(XHIGH_MODEL_REFS.map(entry=>entry.split(`/`)[1]?.toLowerCase()).filter(entry=>!!entry));function normalizeThinkLevel(raw){if(!raw)return;let key=raw.trim().toLowerCase(),collapsed=key.replace(/[\s_-]+/g,``);if(collapsed===`xhigh`||collapsed===`extrahigh`)return`xhigh`;if([`off`].includes(key))return`off`;if([`on`,`enable`,`enabled`].includes(key))return`low`;if([`min`,`minimal`].includes(key))return`minimal`;if([`low`,`thinkhard`,`think-hard`,`think_hard`].includes(key))return`low`;if([`mid`,`med`,`medium`,`thinkharder`,`think-harder`,`harder`].includes(key))return`medium`;if([`high`,`ultra`,`ultrathink`,`think-hard`,`thinkhardest`,`highest`,`max`].includes(key))return`high`;if([`think`].includes(key))return`minimal`}function supportsXHighThinking(provider,model){let modelKey=model?.trim().toLowerCase();if(!modelKey)return!1;let providerKey=provider?.trim().toLowerCase();return providerKey?XHIGH_MODEL_SET.has(`${providerKey}/${modelKey}`):XHIGH_MODEL_IDS.has(modelKey)}function listThinkingLevels(provider,model){let levels=[`off`,`minimal`,`low`,`medium`,`high`];return supportsXHighThinking(provider,model)&&levels.push(`xhigh`),levels}function listThinkingLevelLabels(provider,model){return isBinaryThinkingProvider(provider)?[`off`,`on`]:listThinkingLevels(provider,model)}function formatThinkingLevels(provider,model,separator=`, `){return listThinkingLevelLabels(provider,model).join(separator)}function formatXHighModelHint(){let refs=[...XHIGH_MODEL_REFS];return refs.length===0?`unknown model`:refs.length===1?refs[0]:refs.length===2?`${refs[0]} or ${refs[1]}`:`${refs.slice(0,-1).join(`, `)} or ${refs[refs.length-1]}`}function normalizeOnOffFullLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`].includes(key))return`off`;if([`full`,`all`,`everything`].includes(key))return`full`;if([`on`,`minimal`,`true`,`yes`,`1`].includes(key))return`on`}function normalizeVerboseLevel(raw){return normalizeOnOffFullLevel(raw)}function normalizeUsageDisplay(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`,`disable`,`disabled`].includes(key))return`off`;if([`on`,`true`,`yes`,`1`,`enable`,`enabled`].includes(key)||[`tokens`,`token`,`tok`,`minimal`,`min`].includes(key))return`tokens`;if([`full`,`session`].includes(key))return`full`}function resolveResponseUsageMode(raw){return normalizeUsageDisplay(raw)??`off`}function normalizeElevatedLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`].includes(key))return`off`;if([`full`,`auto`,`auto-approve`,`autoapprove`].includes(key))return`full`;if([`ask`,`prompt`,`approval`,`approve`].includes(key))return`ask`;if([`on`,`true`,`yes`,`1`].includes(key))return`on`}function normalizeReasoningLevel(raw){if(!raw)return;let key=raw.toLowerCase();if([`off`,`false`,`no`,`0`,`hide`,`hidden`,`disable`,`disabled`].includes(key))return`off`;if([`on`,`true`,`yes`,`1`,`show`,`visible`,`enable`,`enabled`].includes(key))return`on`;if([`stream`,`streaming`,`draft`,`live`].includes(key))return`stream`}function isBase64Signature(value){let trimmed=value.trim();if(!trimmed)return!1;let compact=trimmed.replace(/\s+/g,``);if(!/^[A-Za-z0-9+/=_-]+$/.test(compact))return!1;let isUrl=compact.includes(`-`)||compact.includes(`_`);try{let buf=Buffer.from(compact,isUrl?`base64url`:`base64`);if(buf.length===0)return!1;let encoded=buf.toString(isUrl?`base64url`:`base64`),normalize=input=>input.replace(/=+$/g,``);return normalize(encoded)===normalize(compact)}catch{return!1}}function stripThoughtSignatures(content,options){if(!Array.isArray(content))return content;let allowBase64Only=options?.allowBase64Only??!1,includeCamelCase=options?.includeCamelCase??!1,shouldStripSignature=value=>allowBase64Only?typeof value!=`string`||!isBase64Signature(value):typeof value==`string`&&value.startsWith(`msg_`);return content.map(block=>{if(!block||typeof block!=`object`)return block;let rec=block,stripSnake=shouldStripSignature(rec.thought_signature),stripCamel=includeCamelCase?shouldStripSignature(rec.thoughtSignature):!1;if(!stripSnake&&!stripCamel)return block;let next={...rec};return stripSnake&&delete next.thought_signature,stripCamel&&delete next.thoughtSignature,next})}const DEFAULT_BOOTSTRAP_MAX_CHARS=2e4,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS=15e4;function resolveBootstrapMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_MAX_CHARS}function resolveBootstrapTotalMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapTotalMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS}function trimBootstrapContent(content,fileName,maxChars){let trimmed=content.trimEnd();if(trimmed.length<=maxChars)return{content:trimmed,truncated:!1,maxChars,originalLength:trimmed.length};let headChars=Math.floor(maxChars*.7),tailChars=Math.floor(maxChars*.2),head=trimmed.slice(0,headChars),tail=trimmed.slice(-tailChars);return{content:[head,[``,`[...truncated, read ${fileName} for full content...]`,`…(truncated ${fileName}: kept ${headChars}+${tailChars} chars of ${trimmed.length})…`,``].join(`
 `),tail].join(`
 `),truncated:!0,maxChars,originalLength:trimmed.length}}function clampToBudget(content,budget){return budget<=0?``:content.length<=budget?content:budget<=3?truncateUtf16Safe(content,budget):`${truncateUtf16Safe(content,budget-1)}…`}async function ensureSessionHeader(params){let file=params.sessionFile;try{await fs.stat(file);return}catch{}await fs.mkdir(path.dirname(file),{recursive:!0});let entry={type:`session`,version:2,id:params.sessionId,timestamp:new Date().toISOString(),cwd:params.cwd};await fs.writeFile(file,`${JSON.stringify(entry)}\n`,`utf-8`)}function buildBootstrapContextFiles(files,opts){let maxChars=opts?.maxChars??DEFAULT_BOOTSTRAP_MAX_CHARS,remainingTotalChars=Math.max(1,Math.floor(opts?.totalMaxChars??Math.max(maxChars,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS))),result=[];for(let file of files){if(remainingTotalChars<=0)break;if(file.missing){let cappedMissingText=clampToBudget(`[MISSING] Expected at: ${file.path}`,remainingTotalChars);if(!cappedMissingText)break;remainingTotalChars=Math.max(0,remainingTotalChars-cappedMissingText.length),result.push({path:file.path,content:cappedMissingText});continue}if(remainingTotalChars<64){opts?.warn?.(`remaining bootstrap budget is ${remainingTotalChars} chars (<64); skipping additional bootstrap files`);break}let fileMaxChars=Math.max(1,Math.min(maxChars,remainingTotalChars)),trimmed=trimBootstrapContent(file.content??``,file.name,fileMaxChars),contentWithinBudget=clampToBudget(trimmed.content,remainingTotalChars);contentWithinBudget&&((trimmed.truncated||contentWithinBudget.length<trimmed.content.length)&&opts?.warn?.(`workspace bootstrap file ${file.name} is ${trimmed.originalLength} chars (limit ${trimmed.maxChars}); truncating in injected context`),remainingTotalChars=Math.max(0,remainingTotalChars-contentWithinBudget.length),result.push({path:file.path,content:contentWithinBudget}))}return result}function sanitizeGoogleTurnOrdering(messages){let GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT=`(session bootstrap)`,first=messages[0],role=first?.role,content=first?.content;return role===`user`&&typeof content==`string`&&content.trim()===GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT||role!==`assistant`?messages:[{role:`user`,content:GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT,timestamp:Date.now()},...messages]}function formatBillingErrorMessage(provider,model){let providerName=provider?.trim(),modelName=model?.trim(),providerLabel=providerName&&modelName?`${providerName} (${modelName})`:providerName||void 0;return providerLabel?`⚠️ ${providerLabel} returned a billing error — your API key has run out of credits or has an insufficient balance. Check your ${providerName} billing dashboard and top up or switch to a different API key.`:`⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.`}const BILLING_ERROR_USER_MESSAGE=formatBillingErrorMessage();function formatRateLimitOrOverloadedErrorCopy(raw){if(isRateLimitErrorMessage(raw))return`⚠️ API rate limit reached. Please try again later.`;if(isOverloadedErrorMessage(raw))return`The AI service is temporarily overloaded. Please try again in a moment.`}function isContextOverflowError(errorMessage){if(!errorMessage)return!1;let lower=errorMessage.toLowerCase(),hasRequestSizeExceeds=lower.includes(`request size exceeds`),hasContextWindow=lower.includes(`context window`)||lower.includes(`context length`)||lower.includes(`maximum context length`);return lower.includes(`request_too_large`)||lower.includes(`request exceeds the maximum size`)||lower.includes(`context length exceeded`)||lower.includes(`maximum context length`)||lower.includes(`prompt is too long`)||lower.includes(`exceeds model context window`)||hasRequestSizeExceeds&&hasContextWindow||lower.includes(`context overflow:`)||lower.includes(`413`)&&lower.includes(`too large`)}const CONTEXT_WINDOW_TOO_SMALL_RE=/context window.*(too small|minimum is)/i,CONTEXT_OVERFLOW_HINT_RE=/context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i,RATE_LIMIT_HINT_RE=/rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;function isLikelyContextOverflowError(errorMessage){return!errorMessage||CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)||isRateLimitErrorMessage(errorMessage)?!1:isContextOverflowError(errorMessage)?!0:RATE_LIMIT_HINT_RE.test(errorMessage)?!1:CONTEXT_OVERFLOW_HINT_RE.test(errorMessage)}function isCompactionFailureError(errorMessage){if(!errorMessage)return!1;let lower=errorMessage.toLowerCase();return lower.includes(`summarization failed`)||lower.includes(`auto-compaction`)||lower.includes(`compaction failed`)||lower.includes(`compaction`)?isLikelyContextOverflowError(errorMessage)?!0:lower.includes(`context overflow`):!1}const ERROR_PAYLOAD_PREFIX_RE=/^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i,FINAL_TAG_RE=/<\s*\/?\s*final\s*>/gi,ERROR_PREFIX_RE=/^(?:error|api\s*error|openai\s*error|anthropic\s*error|gateway\s*error|request failed|failed|exception)[:\s-]+/i,CONTEXT_OVERFLOW_ERROR_HEAD_RE=/^(?:context overflow:|request_too_large\b|request size exceeds\b|request exceeds the maximum size\b|context length exceeded\b|maximum context length\b|prompt is too long\b|exceeds model context window\b)/i,BILLING_ERROR_HEAD_RE=/^(?:error[:\s-]+)?billing(?:\s+error)?(?:[:\s-]+|$)|^(?:error[:\s-]+)?(?:credit balance|insufficient credits?|payment required|http\s*402\b)/i,HTTP_STATUS_PREFIX_RE=/^(?:http\s*)?(\d{3})\s+(.+)$/i,HTTP_STATUS_CODE_PREFIX_RE=/^(?:http\s*)?(\d{3})(?:\s+([\s\S]+))?$/i,HTML_ERROR_PREFIX_RE=/^\s*(?:<!doctype\s+html\b|<html\b)/i,CLOUDFLARE_HTML_ERROR_CODES=new Set([521,522,523,524,525,526,530]),TRANSIENT_HTTP_ERROR_CODES=new Set([500,502,503,521,522,523,524,529]),HTTP_ERROR_HINTS=[`error`,`bad request`,`not found`,`unauthorized`,`forbidden`,`internal server`,`service unavailable`,`gateway`,`rate limit`,`overloaded`,`timeout`,`timed out`,`invalid`,`too many requests`,`permission`];function extractLeadingHttpStatus(raw){let match=raw.match(HTTP_STATUS_CODE_PREFIX_RE);if(!match)return null;let code=Number(match[1]);return Number.isFinite(code)?{code,rest:(match[2]??``).trim()}:null}function isCloudflareOrHtmlErrorPage(raw){let trimmed=raw.trim();if(!trimmed)return!1;let status=extractLeadingHttpStatus(trimmed);return!status||status.code<500?!1:CLOUDFLARE_HTML_ERROR_CODES.has(status.code)?!0:status.code<600&&HTML_ERROR_PREFIX_RE.test(status.rest)&&/<\/html>/i.test(status.rest)}function isTransientHttpError(raw){let trimmed=raw.trim();if(!trimmed)return!1;let status=extractLeadingHttpStatus(trimmed);return status?TRANSIENT_HTTP_ERROR_CODES.has(status.code):!1}function stripFinalTagsFromText(text){return text&&text.replace(FINAL_TAG_RE,``)}function collapseConsecutiveDuplicateBlocks(text){let trimmed=text.trim();if(!trimmed)return text;let blocks=trimmed.split(/\n{2,}/);if(blocks.length<2)return text;let normalizeBlock=value=>value.trim().replace(/\s+/g,` `),result=[],lastNormalized=null;for(let block of blocks){let normalized=normalizeBlock(block);lastNormalized&&normalized===lastNormalized||(result.push(block.trim()),lastNormalized=normalized)}return result.length===blocks.length?text:result.join(`
 

package/dist/{embedded-helpers-DK8_apW0.js → embedded-helpers-DdU30lmt.js}

@@ -1,4 +1,4 @@
-import{E as truncateUtf16Safe}from"./utils-BP60e80M.js";import{t as stableStringify}from"./src-HrLX5bhG.js";import{s as formatSandboxToolPolicyBlockedMessage}from"./sandbox-z9t_PRf9.js";import{t as sanitizeContentBlocksImages}from"./tool-images-CCpqFtrL.js";import path from"node:path";import{createHash}from"node:crypto";import fs from"node:fs/promises";function isBase64Signature(value){let trimmed=value.trim();if(!trimmed)return!1;let compact=trimmed.replace(/\s+/g,``);if(!/^[A-Za-z0-9+/=_-]+$/.test(compact))return!1;let isUrl=compact.includes(`-`)||compact.includes(`_`);try{let buf=Buffer.from(compact,isUrl?`base64url`:`base64`);if(buf.length===0)return!1;let encoded=buf.toString(isUrl?`base64url`:`base64`),normalize=input=>input.replace(/=+$/g,``);return normalize(encoded)===normalize(compact)}catch{return!1}}function stripThoughtSignatures(content,options){if(!Array.isArray(content))return content;let allowBase64Only=options?.allowBase64Only??!1,includeCamelCase=options?.includeCamelCase??!1,shouldStripSignature=value=>allowBase64Only?typeof value!=`string`||!isBase64Signature(value):typeof value==`string`&&value.startsWith(`msg_`);return content.map(block=>{if(!block||typeof block!=`object`)return block;let rec=block,stripSnake=shouldStripSignature(rec.thought_signature),stripCamel=includeCamelCase?shouldStripSignature(rec.thoughtSignature):!1;if(!stripSnake&&!stripCamel)return block;let next={...rec};return stripSnake&&delete next.thought_signature,stripCamel&&delete next.thoughtSignature,next})}const DEFAULT_BOOTSTRAP_MAX_CHARS=2e4,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS=15e4;function resolveBootstrapMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_MAX_CHARS}function resolveBootstrapTotalMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapTotalMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS}function trimBootstrapContent(content,fileName,maxChars){let trimmed=content.trimEnd();if(trimmed.length<=maxChars)return{content:trimmed,truncated:!1,maxChars,originalLength:trimmed.length};let headChars=Math.floor(maxChars*.7),tailChars=Math.floor(maxChars*.2),head=trimmed.slice(0,headChars),tail=trimmed.slice(-tailChars);return{content:[head,[``,`[...truncated, read ${fileName} for full content...]`,`…(truncated ${fileName}: kept ${headChars}+${tailChars} chars of ${trimmed.length})…`,``].join(`
+import{E as truncateUtf16Safe}from"./utils-BP60e80M.js";import{t as stableStringify}from"./src-HrLX5bhG.js";import{s as formatSandboxToolPolicyBlockedMessage}from"./sandbox-DvKMuAXL.js";import{t as sanitizeContentBlocksImages}from"./tool-images-CCpqFtrL.js";import path from"node:path";import{createHash}from"node:crypto";import fs from"node:fs/promises";function isBase64Signature(value){let trimmed=value.trim();if(!trimmed)return!1;let compact=trimmed.replace(/\s+/g,``);if(!/^[A-Za-z0-9+/=_-]+$/.test(compact))return!1;let isUrl=compact.includes(`-`)||compact.includes(`_`);try{let buf=Buffer.from(compact,isUrl?`base64url`:`base64`);if(buf.length===0)return!1;let encoded=buf.toString(isUrl?`base64url`:`base64`),normalize=input=>input.replace(/=+$/g,``);return normalize(encoded)===normalize(compact)}catch{return!1}}function stripThoughtSignatures(content,options){if(!Array.isArray(content))return content;let allowBase64Only=options?.allowBase64Only??!1,includeCamelCase=options?.includeCamelCase??!1,shouldStripSignature=value=>allowBase64Only?typeof value!=`string`||!isBase64Signature(value):typeof value==`string`&&value.startsWith(`msg_`);return content.map(block=>{if(!block||typeof block!=`object`)return block;let rec=block,stripSnake=shouldStripSignature(rec.thought_signature),stripCamel=includeCamelCase?shouldStripSignature(rec.thoughtSignature):!1;if(!stripSnake&&!stripCamel)return block;let next={...rec};return stripSnake&&delete next.thought_signature,stripCamel&&delete next.thoughtSignature,next})}const DEFAULT_BOOTSTRAP_MAX_CHARS=2e4,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS=15e4;function resolveBootstrapMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_MAX_CHARS}function resolveBootstrapTotalMaxChars(cfg){let raw=cfg?.agents?.defaults?.bootstrapTotalMaxChars;return typeof raw==`number`&&Number.isFinite(raw)&&raw>0?Math.floor(raw):DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS}function trimBootstrapContent(content,fileName,maxChars){let trimmed=content.trimEnd();if(trimmed.length<=maxChars)return{content:trimmed,truncated:!1,maxChars,originalLength:trimmed.length};let headChars=Math.floor(maxChars*.7),tailChars=Math.floor(maxChars*.2),head=trimmed.slice(0,headChars),tail=trimmed.slice(-tailChars);return{content:[head,[``,`[...truncated, read ${fileName} for full content...]`,`…(truncated ${fileName}: kept ${headChars}+${tailChars} chars of ${trimmed.length})…`,``].join(`
 `),tail].join(`
 `),truncated:!0,maxChars,originalLength:trimmed.length}}function clampToBudget(content,budget){return budget<=0?``:content.length<=budget?content:budget<=3?truncateUtf16Safe(content,budget):`${truncateUtf16Safe(content,budget-1)}…`}async function ensureSessionHeader(params){let file=params.sessionFile;try{await fs.stat(file);return}catch{}await fs.mkdir(path.dirname(file),{recursive:!0});let entry={type:`session`,version:2,id:params.sessionId,timestamp:new Date().toISOString(),cwd:params.cwd};await fs.writeFile(file,`${JSON.stringify(entry)}\n`,`utf-8`)}function buildBootstrapContextFiles(files,opts){let maxChars=opts?.maxChars??DEFAULT_BOOTSTRAP_MAX_CHARS,remainingTotalChars=Math.max(1,Math.floor(opts?.totalMaxChars??Math.max(maxChars,DEFAULT_BOOTSTRAP_TOTAL_MAX_CHARS))),result=[];for(let file of files){if(remainingTotalChars<=0)break;if(file.missing){let cappedMissingText=clampToBudget(`[MISSING] Expected at: ${file.path}`,remainingTotalChars);if(!cappedMissingText)break;remainingTotalChars=Math.max(0,remainingTotalChars-cappedMissingText.length),result.push({path:file.path,content:cappedMissingText});continue}if(remainingTotalChars<64){opts?.warn?.(`remaining bootstrap budget is ${remainingTotalChars} chars (<64); skipping additional bootstrap files`);break}let fileMaxChars=Math.max(1,Math.min(maxChars,remainingTotalChars)),trimmed=trimBootstrapContent(file.content??``,file.name,fileMaxChars),contentWithinBudget=clampToBudget(trimmed.content,remainingTotalChars);contentWithinBudget&&((trimmed.truncated||contentWithinBudget.length<trimmed.content.length)&&opts?.warn?.(`workspace bootstrap file ${file.name} is ${trimmed.originalLength} chars (limit ${trimmed.maxChars}); truncating in injected context`),remainingTotalChars=Math.max(0,remainingTotalChars-contentWithinBudget.length),result.push({path:file.path,content:contentWithinBudget}))}return result}function sanitizeGoogleTurnOrdering(messages){let GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT=`(session bootstrap)`,first=messages[0],role=first?.role,content=first?.content;return role===`user`&&typeof content==`string`&&content.trim()===GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT||role!==`assistant`?messages:[{role:`user`,content:GOOGLE_TURN_ORDER_BOOTSTRAP_TEXT,timestamp:Date.now()},...messages]}function formatBillingErrorMessage(provider,model){let providerName=provider?.trim(),modelName=model?.trim(),providerLabel=providerName&&modelName?`${providerName} (${modelName})`:providerName||void 0;return providerLabel?`⚠️ ${providerLabel} returned a billing error — your API key has run out of credits or has an insufficient balance. Check your ${providerName} billing dashboard and top up or switch to a different API key.`:`⚠️ API provider returned a billing error — your API key has run out of credits or has an insufficient balance. Check your provider's billing dashboard and top up or switch to a different API key.`}const BILLING_ERROR_USER_MESSAGE=formatBillingErrorMessage();function formatRateLimitOrOverloadedErrorCopy(raw){if(isRateLimitErrorMessage(raw))return`⚠️ API rate limit reached. Please try again later.`;if(isOverloadedErrorMessage(raw))return`The AI service is temporarily overloaded. Please try again in a moment.`}function isContextOverflowError(errorMessage){if(!errorMessage)return!1;let lower=errorMessage.toLowerCase(),hasRequestSizeExceeds=lower.includes(`request size exceeds`),hasContextWindow=lower.includes(`context window`)||lower.includes(`context length`)||lower.includes(`maximum context length`);return lower.includes(`request_too_large`)||lower.includes(`request exceeds the maximum size`)||lower.includes(`context length exceeded`)||lower.includes(`maximum context length`)||lower.includes(`prompt is too long`)||lower.includes(`exceeds model context window`)||hasRequestSizeExceeds&&hasContextWindow||lower.includes(`context overflow:`)||lower.includes(`413`)&&lower.includes(`too large`)}const CONTEXT_WINDOW_TOO_SMALL_RE=/context window.*(too small|minimum is)/i,CONTEXT_OVERFLOW_HINT_RE=/context.*overflow|context window.*(too (?:large|long)|exceed|over|limit|max(?:imum)?|requested|sent|tokens)|prompt.*(too (?:large|long)|exceed|over|limit|max(?:imum)?)|(?:request|input).*(?:context|window|length|token).*(too (?:large|long)|exceed|over|limit|max(?:imum)?)/i,RATE_LIMIT_HINT_RE=/rate limit|too many requests|requests per (?:minute|hour|day)|quota|throttl|429\b/i;function isLikelyContextOverflowError(errorMessage){return!errorMessage||CONTEXT_WINDOW_TOO_SMALL_RE.test(errorMessage)||isRateLimitErrorMessage(errorMessage)?!1:isContextOverflowError(errorMessage)?!0:RATE_LIMIT_HINT_RE.test(errorMessage)?!1:CONTEXT_OVERFLOW_HINT_RE.test(errorMessage)}function isCompactionFailureError(errorMessage){if(!errorMessage)return!1;let lower=errorMessage.toLowerCase();return lower.includes(`summarization failed`)||lower.includes(`auto-compaction`)||lower.includes(`compaction failed`)||lower.includes(`compaction`)?isLikelyContextOverflowError(errorMessage)?!0:lower.includes(`context overflow`):!1}const ERROR_PAYLOAD_PREFIX_RE=/^(?:error|api\s*error|apierror|openai\s*error|anthropic\s*error|gateway\s*error)[:\s-]+/i,FINAL_TAG_RE=/<\s*\/?\s*final\s*>/gi,ERROR_PREFIX_RE=/^(?:error|api\s*error|openai\s*error|anthropic\s*error|gateway\s*error|request failed|failed|exception)[:\s-]+/i,CONTEXT_OVERFLOW_ERROR_HEAD_RE=/^(?:context overflow:|request_too_large\b|request size exceeds\b|request exceeds the maximum size\b|context length exceeded\b|maximum context length\b|prompt is too long\b|exceeds model context window\b)/i,BILLING_ERROR_HEAD_RE=/^(?:error[:\s-]+)?billing(?:\s+error)?(?:[:\s-]+|$)|^(?:error[:\s-]+)?(?:credit balance|insufficient credits?|payment required|http\s*402\b)/i,HTTP_STATUS_PREFIX_RE=/^(?:http\s*)?(\d{3})\s+(.+)$/i,HTTP_STATUS_CODE_PREFIX_RE=/^(?:http\s*)?(\d{3})(?:\s+([\s\S]+))?$/i,HTML_ERROR_PREFIX_RE=/^\s*(?:<!doctype\s+html\b|<html\b)/i,CLOUDFLARE_HTML_ERROR_CODES=new Set([521,522,523,524,525,526,530]),TRANSIENT_HTTP_ERROR_CODES=new Set([500,502,503,521,522,523,524,529]),HTTP_ERROR_HINTS=[`error`,`bad request`,`not found`,`unauthorized`,`forbidden`,`internal server`,`service unavailable`,`gateway`,`rate limit`,`overloaded`,`timeout`,`timed out`,`invalid`,`too many requests`,`permission`];function extractLeadingHttpStatus(raw){let match=raw.match(HTTP_STATUS_CODE_PREFIX_RE);if(!match)return null;let code=Number(match[1]);return Number.isFinite(code)?{code,rest:(match[2]??``).trim()}:null}function isCloudflareOrHtmlErrorPage(raw){let trimmed=raw.trim();if(!trimmed)return!1;let status=extractLeadingHttpStatus(trimmed);return!status||status.code<500?!1:CLOUDFLARE_HTML_ERROR_CODES.has(status.code)?!0:status.code<600&&HTML_ERROR_PREFIX_RE.test(status.rest)&&/<\/html>/i.test(status.rest)}function isTransientHttpError(raw){let trimmed=raw.trim();if(!trimmed)return!1;let status=extractLeadingHttpStatus(trimmed);return status?TRANSIENT_HTTP_ERROR_CODES.has(status.code):!1}function stripFinalTagsFromText(text){return text&&text.replace(FINAL_TAG_RE,``)}function collapseConsecutiveDuplicateBlocks(text){let trimmed=text.trim();if(!trimmed)return text;let blocks=trimmed.split(/\n{2,}/);if(blocks.length<2)return text;let normalizeBlock=value=>value.trim().replace(/\s+/g,` `),result=[],lastNormalized=null;for(let block of blocks){let normalized=normalizeBlock(block);lastNormalized&&normalized===lastNormalized||(result.push(block.trim()),lastNormalized=normalized)}return result.length===blocks.length?text:result.join(`
 

package/dist/entry.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import{y as resolveRequiredHomeDir}from"./paths-BHg-VHB4.js";import{t as isValidProfileName}from"./profile-utils-BKdObK6T.js";import{c as hasHelpOrVersion}from"./argv-BgQk38nl.js";import{t as normalizeWindowsArgv}from"./windows-argv-ClCYQujd.js";import"./registry-Cv7CoWAs.js";import"./utils-BP60e80M.js";import"./subsystem-C4b1Von0.js";import"./boolean-ssGoaBPk.js";import{r as normalizeEnv,t as isTruthyEnvValue}from"./env-BoE8QSib.js";import{t as installProcessWarningFilter}from"./warning-filter-nSTjpMIH.js";import{spawn}from"node:child_process";import process$1 from"node:process";import os from"node:os";import path from"node:path";function takeValue(raw,next){if(raw.includes(`=`)){let[,value]=raw.split(`=`,2);return{value:(value??``).trim()||null,consumedNext:!1}}return{value:(next??``).trim()||null,consumedNext:!!next}}function parseCliProfileArgs(argv){if(argv.length<2)return{ok:!0,profile:null,argv};let out=argv.slice(0,2),profile=null,sawDev=!1,sawCommand=!1,args=argv.slice(2);for(let i=0;i<args.length;i+=1){let arg=args[i];if(arg!==void 0){if(sawCommand){out.push(arg);continue}if(arg===`--dev`){if(profile&&profile!==`dev`)return{ok:!1,error:`Cannot combine --dev with --profile`};sawDev=!0,profile=`dev`;continue}if(arg===`--profile`||arg.startsWith(`--profile=`)){if(sawDev)return{ok:!1,error:`Cannot combine --dev with --profile`};let next=args[i+1],{value,consumedNext}=takeValue(arg,next);if(consumedNext&&(i+=1),!value)return{ok:!1,error:`--profile requires a value`};if(!isValidProfileName(value))return{ok:!1,error:`Invalid --profile (use letters, numbers, "_", "-" only)`};profile=value;continue}if(!arg.startsWith(`-`)){sawCommand=!0,out.push(arg);continue}out.push(arg)}}return{ok:!0,profile,argv:out}}function resolveProfileStateDir(profile,env,homedir){let suffix=profile.toLowerCase()===`default`?``:`-${profile}`;return path.join(resolveRequiredHomeDir(env,homedir),`.builderforce${suffix}`)}function applyCliProfileEnv(params){let env=params.env??process.env,homedir=params.homedir??os.homedir,profile=params.profile.trim();if(!profile)return;env.BUILDERFORCE_AGENTS_PROFILE=profile;let stateDir=env.BUILDERFORCE_AGENTS_STATE_DIR?.trim()||resolveProfileStateDir(profile,env,homedir);env.BUILDERFORCE_AGENTS_STATE_DIR?.trim()||(env.BUILDERFORCE_AGENTS_STATE_DIR=stateDir),env.BUILDERFORCE_AGENTS_CONFIG_PATH?.trim()||(env.BUILDERFORCE_AGENTS_CONFIG_PATH=path.join(stateDir,`builderforce.json`)),profile===`dev`&&!env.BUILDERFORCE_AGENTS_GATEWAY_PORT?.trim()&&(env.BUILDERFORCE_AGENTS_GATEWAY_PORT=`19001`)}function shouldSkipRespawnForArgv(argv){return hasHelpOrVersion(argv)}const defaultSignals=process$1.platform===`win32`?[`SIGTERM`,`SIGINT`,`SIGBREAK`]:[`SIGTERM`,`SIGINT`,`SIGHUP`,`SIGQUIT`];function attachChildProcessBridge(child,{signals=defaultSignals,onSignal}={}){let listeners=new Map;for(let signal of signals){let listener=()=>{onSignal?.(signal);try{child.kill(signal)}catch{}};try{process$1.on(signal,listener),listeners.set(signal,listener)}catch{}}let detach=()=>{for(let[signal,listener]of listeners)process$1.off(signal,listener);listeners.clear()};return child.once(`exit`,detach),child.once(`error`,detach),{detach}}process$1.title=`builderforce`,installProcessWarningFilter(),normalizeEnv(),process$1.argv.includes(`--no-color`)&&(process$1.env.NO_COLOR=`1`,process$1.env.FORCE_COLOR=`0`);const EXPERIMENTAL_WARNING_FLAG=`--disable-warning=ExperimentalWarning`;function hasExperimentalWarningSuppressed(){let nodeOptions=process$1.env.NODE_OPTIONS??``;if(nodeOptions.includes(EXPERIMENTAL_WARNING_FLAG)||nodeOptions.includes(`--no-warnings`))return!0;for(let arg of process$1.execArgv)if(arg===EXPERIMENTAL_WARNING_FLAG||arg===`--no-warnings`)return!0;return!1}function ensureExperimentalWarningSuppressed(){if(shouldSkipRespawnForArgv(process$1.argv)||isTruthyEnvValue(process$1.env.BUILDERFORCE_AGENTS_NO_RESPAWN)||isTruthyEnvValue(process$1.env.BUILDERFORCE_AGENTS_NODE_OPTIONS_READY)||hasExperimentalWarningSuppressed())return!1;process$1.env.BUILDERFORCE_AGENTS_NODE_OPTIONS_READY=`1`;let child=spawn(process$1.execPath,[EXPERIMENTAL_WARNING_FLAG,...process$1.execArgv,...process$1.argv.slice(1)],{stdio:`inherit`,env:process$1.env});return attachChildProcessBridge(child),child.once(`exit`,(code,signal)=>{if(signal){process$1.exitCode=1;return}process$1.exit(code??1)}),child.once(`error`,error=>{console.error(`[builderforce] Failed to respawn CLI:`,error instanceof Error?error.stack??error.message:error),process$1.exit(1)}),!0}if(process$1.argv=normalizeWindowsArgv(process$1.argv),!ensureExperimentalWarningSuppressed()){let parsed=parseCliProfileArgs(process$1.argv);parsed.ok||(console.error(`[builderforce] ${parsed.error}`),process$1.exit(2)),parsed.profile&&(applyCliProfileEnv({profile:parsed.profile}),process$1.argv=parsed.argv),import(`./run-main-DLcDEJgv.js`).then(({runCli})=>runCli(process$1.argv)).catch(error=>{console.error(`[builderforce] Failed to start CLI:`,error instanceof Error?error.stack??error.message:error),process$1.exitCode=1})}export{};
+import{y as resolveRequiredHomeDir}from"./paths-BHg-VHB4.js";import{t as isValidProfileName}from"./profile-utils-BKdObK6T.js";import{c as hasHelpOrVersion}from"./argv-BgQk38nl.js";import{t as normalizeWindowsArgv}from"./windows-argv-ClCYQujd.js";import"./registry-Cv7CoWAs.js";import"./utils-BP60e80M.js";import"./subsystem-C4b1Von0.js";import"./boolean-ssGoaBPk.js";import{r as normalizeEnv,t as isTruthyEnvValue}from"./env-BoE8QSib.js";import{t as installProcessWarningFilter}from"./warning-filter-nSTjpMIH.js";import{spawn}from"node:child_process";import process$1 from"node:process";import os from"node:os";import path from"node:path";function takeValue(raw,next){if(raw.includes(`=`)){let[,value]=raw.split(`=`,2);return{value:(value??``).trim()||null,consumedNext:!1}}return{value:(next??``).trim()||null,consumedNext:!!next}}function parseCliProfileArgs(argv){if(argv.length<2)return{ok:!0,profile:null,argv};let out=argv.slice(0,2),profile=null,sawDev=!1,sawCommand=!1,args=argv.slice(2);for(let i=0;i<args.length;i+=1){let arg=args[i];if(arg!==void 0){if(sawCommand){out.push(arg);continue}if(arg===`--dev`){if(profile&&profile!==`dev`)return{ok:!1,error:`Cannot combine --dev with --profile`};sawDev=!0,profile=`dev`;continue}if(arg===`--profile`||arg.startsWith(`--profile=`)){if(sawDev)return{ok:!1,error:`Cannot combine --dev with --profile`};let next=args[i+1],{value,consumedNext}=takeValue(arg,next);if(consumedNext&&(i+=1),!value)return{ok:!1,error:`--profile requires a value`};if(!isValidProfileName(value))return{ok:!1,error:`Invalid --profile (use letters, numbers, "_", "-" only)`};profile=value;continue}if(!arg.startsWith(`-`)){sawCommand=!0,out.push(arg);continue}out.push(arg)}}return{ok:!0,profile,argv:out}}function resolveProfileStateDir(profile,env,homedir){let suffix=profile.toLowerCase()===`default`?``:`-${profile}`;return path.join(resolveRequiredHomeDir(env,homedir),`.builderforce${suffix}`)}function applyCliProfileEnv(params){let env=params.env??process.env,homedir=params.homedir??os.homedir,profile=params.profile.trim();if(!profile)return;env.BUILDERFORCE_AGENTS_PROFILE=profile;let stateDir=env.BUILDERFORCE_AGENTS_STATE_DIR?.trim()||resolveProfileStateDir(profile,env,homedir);env.BUILDERFORCE_AGENTS_STATE_DIR?.trim()||(env.BUILDERFORCE_AGENTS_STATE_DIR=stateDir),env.BUILDERFORCE_AGENTS_CONFIG_PATH?.trim()||(env.BUILDERFORCE_AGENTS_CONFIG_PATH=path.join(stateDir,`builderforce.json`)),profile===`dev`&&!env.BUILDERFORCE_AGENTS_GATEWAY_PORT?.trim()&&(env.BUILDERFORCE_AGENTS_GATEWAY_PORT=`19001`)}function shouldSkipRespawnForArgv(argv){return hasHelpOrVersion(argv)}const defaultSignals=process$1.platform===`win32`?[`SIGTERM`,`SIGINT`,`SIGBREAK`]:[`SIGTERM`,`SIGINT`,`SIGHUP`,`SIGQUIT`];function attachChildProcessBridge(child,{signals=defaultSignals,onSignal}={}){let listeners=new Map;for(let signal of signals){let listener=()=>{onSignal?.(signal);try{child.kill(signal)}catch{}};try{process$1.on(signal,listener),listeners.set(signal,listener)}catch{}}let detach=()=>{for(let[signal,listener]of listeners)process$1.off(signal,listener);listeners.clear()};return child.once(`exit`,detach),child.once(`error`,detach),{detach}}process$1.title=`builderforce`,installProcessWarningFilter(),normalizeEnv(),process$1.argv.includes(`--no-color`)&&(process$1.env.NO_COLOR=`1`,process$1.env.FORCE_COLOR=`0`);const EXPERIMENTAL_WARNING_FLAG=`--disable-warning=ExperimentalWarning`;function hasExperimentalWarningSuppressed(){let nodeOptions=process$1.env.NODE_OPTIONS??``;if(nodeOptions.includes(EXPERIMENTAL_WARNING_FLAG)||nodeOptions.includes(`--no-warnings`))return!0;for(let arg of process$1.execArgv)if(arg===EXPERIMENTAL_WARNING_FLAG||arg===`--no-warnings`)return!0;return!1}function ensureExperimentalWarningSuppressed(){if(shouldSkipRespawnForArgv(process$1.argv)||isTruthyEnvValue(process$1.env.BUILDERFORCE_AGENTS_NO_RESPAWN)||isTruthyEnvValue(process$1.env.BUILDERFORCE_AGENTS_NODE_OPTIONS_READY)||hasExperimentalWarningSuppressed())return!1;process$1.env.BUILDERFORCE_AGENTS_NODE_OPTIONS_READY=`1`;let child=spawn(process$1.execPath,[EXPERIMENTAL_WARNING_FLAG,...process$1.execArgv,...process$1.argv.slice(1)],{stdio:`inherit`,env:process$1.env});return attachChildProcessBridge(child),child.once(`exit`,(code,signal)=>{if(signal){process$1.exitCode=1;return}process$1.exit(code??1)}),child.once(`error`,error=>{console.error(`[builderforce] Failed to respawn CLI:`,error instanceof Error?error.stack??error.message:error),process$1.exit(1)}),!0}if(process$1.argv=normalizeWindowsArgv(process$1.argv),!ensureExperimentalWarningSuppressed()){let parsed=parseCliProfileArgs(process$1.argv);parsed.ok||(console.error(`[builderforce] ${parsed.error}`),process$1.exit(2)),parsed.profile&&(applyCliProfileEnv({profile:parsed.profile}),process$1.argv=parsed.argv),import(`./run-main-DQMbgbcF.js`).then(({runCli})=>runCli(process$1.argv)).catch(error=>{console.error(`[builderforce] Failed to start CLI:`,error instanceof Error?error.stack??error.message:error),process$1.exitCode=1})}export{};

package/dist/{exec-approvals-cli-YuOu7mVg.js → exec-approvals-cli-CS_uabo7.js}

@@ -1,3 +1,3 @@
-import"./paths-5FcIFMsj.js";import{B as theme,z as isRich}from"./utils-DbaBVFaK.js";import"./session-key-EoB0qaG9.js";import"./builderforce-root-D64_sXEi.js";import{i as defaultRuntime}from"./subsystem-B3TqcCrZ.js";import"./registry-TdK-aV05.js";import"./logger-Bch0bx9c.js";import"./exec-DdcIjeyn.js";import"./agent-scope-DPtjOxzp.js";import"./src-CA0fU67C.js";import"./model-selection-9bRFKBI_.js";import"./env-file-D1MDi-AM.js";import"./boolean-Cnh1KNl1.js";import"./env-BIdU5BAp.js";import"./src-DTFqOIQD.js";import"./io-3R_ZyUxB.js";import"./manifest-registry-BJCfNV1a.js";import"./config-_1Ca6jGb.js";import"./message-channel-D_jXxXQj.js";import"./client-xfoidwPI.js";import"./call-BbRf8gFM.js";import{n as formatTimeAgo}from"./format-relative-niF9gXss.js";import{t as formatDocsLink}from"./links-BgWWaaOT.js";import"./progress-BfOtdN6b.js";import{c as readExecApprovalsSnapshot,p as saveExecApprovals}from"./exec-approvals-BpVPDVtV.js";import{n as callGatewayFromCli}from"./gateway-rpc-BXR_lVIx.js";import"./systemd-BG3_QT6W.js";import"./service-D-NLDyK3.js";import{t as renderTable}from"./table-BoCHYKoQ.js";import{t as describeUnknownError}from"./shared-XAatqRQ6.js";import{i as resolveNodeId,r as nodesCallOpts}from"./rpc-BLqXRn5R.js";import JSON5 from"json5";import fs from"node:fs/promises";async function readStdin(){let chunks=[];for await(let chunk of process.stdin)chunks.push(Buffer.isBuffer(chunk)?chunk:Buffer.from(String(chunk)));return Buffer.concat(chunks).toString(`utf8`)}async function resolveTargetNodeId(opts){if(opts.gateway)return null;let raw=opts.node?.trim()??``;return raw?await resolveNodeId(opts,raw):null}async function loadSnapshot(opts,nodeId){return await callGatewayFromCli(nodeId?`exec.approvals.node.get`:`exec.approvals.get`,opts,nodeId?{nodeId}:{})}function loadSnapshotLocal(){let snapshot=readExecApprovalsSnapshot();return{path:snapshot.path,exists:snapshot.exists,hash:snapshot.hash,file:snapshot.file}}function saveSnapshotLocal(file){return saveExecApprovals(file),loadSnapshotLocal()}async function loadSnapshotTarget(opts){if(!opts.gateway&&!opts.node)return{snapshot:loadSnapshotLocal(),nodeId:null,source:`local`};let nodeId=await resolveTargetNodeId(opts);return{snapshot:await loadSnapshot(opts,nodeId),nodeId,source:nodeId?`node`:`gateway`}}function exitWithError(message){throw defaultRuntime.error(message),defaultRuntime.exit(1),Error(message)}function requireTrimmedNonEmpty(value,message){let trimmed=value.trim();return trimmed||exitWithError(message),trimmed}async function loadWritableSnapshotTarget(opts){let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);source===`local`&&defaultRuntime.log(theme.muted(`Writing local approvals.`));let targetLabel=source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`,baseHash=snapshot.hash;return baseHash||exitWithError(`Exec approvals hash missing; reload and retry.`),{snapshot,nodeId,source,targetLabel,baseHash}}async function saveSnapshotTargeted(params){let next=params.source===`local`?saveSnapshotLocal(params.file):await saveSnapshot(params.opts,params.nodeId,params.file,params.baseHash);if(params.opts.json){defaultRuntime.log(JSON.stringify(next));return}defaultRuntime.log(theme.muted(`Target: ${params.targetLabel}`)),renderApprovalsSnapshot(next,params.targetLabel)}function formatCliError(err){let msg=describeUnknownError(err);return msg.includes(`
+import"./paths-5FcIFMsj.js";import{B as theme,z as isRich}from"./utils-DbaBVFaK.js";import"./session-key-EoB0qaG9.js";import"./builderforce-root-D64_sXEi.js";import{i as defaultRuntime}from"./subsystem-B3TqcCrZ.js";import"./registry-TdK-aV05.js";import"./logger-Bch0bx9c.js";import"./exec-DdcIjeyn.js";import"./agent-scope-DPtjOxzp.js";import"./src-CA0fU67C.js";import"./model-selection-DG9J_VTz.js";import"./env-file-D1MDi-AM.js";import"./boolean-Cnh1KNl1.js";import"./env-BIdU5BAp.js";import"./src-DTFqOIQD.js";import"./io-BLBq4T2o.js";import"./manifest-registry-BJCfNV1a.js";import"./config-BgV_FYSq.js";import"./message-channel-D_jXxXQj.js";import"./client-xfoidwPI.js";import"./call-T8ciwMTA.js";import{n as formatTimeAgo}from"./format-relative-niF9gXss.js";import{t as formatDocsLink}from"./links-BgWWaaOT.js";import"./progress-BfOtdN6b.js";import{c as readExecApprovalsSnapshot,p as saveExecApprovals}from"./exec-approvals-BpVPDVtV.js";import{n as callGatewayFromCli}from"./gateway-rpc-B02y0PnE.js";import"./systemd-BG3_QT6W.js";import"./service-D-NLDyK3.js";import{t as renderTable}from"./table-BoCHYKoQ.js";import{t as describeUnknownError}from"./shared-XAatqRQ6.js";import{i as resolveNodeId,r as nodesCallOpts}from"./rpc-CbUnwStf.js";import JSON5 from"json5";import fs from"node:fs/promises";async function readStdin(){let chunks=[];for await(let chunk of process.stdin)chunks.push(Buffer.isBuffer(chunk)?chunk:Buffer.from(String(chunk)));return Buffer.concat(chunks).toString(`utf8`)}async function resolveTargetNodeId(opts){if(opts.gateway)return null;let raw=opts.node?.trim()??``;return raw?await resolveNodeId(opts,raw):null}async function loadSnapshot(opts,nodeId){return await callGatewayFromCli(nodeId?`exec.approvals.node.get`:`exec.approvals.get`,opts,nodeId?{nodeId}:{})}function loadSnapshotLocal(){let snapshot=readExecApprovalsSnapshot();return{path:snapshot.path,exists:snapshot.exists,hash:snapshot.hash,file:snapshot.file}}function saveSnapshotLocal(file){return saveExecApprovals(file),loadSnapshotLocal()}async function loadSnapshotTarget(opts){if(!opts.gateway&&!opts.node)return{snapshot:loadSnapshotLocal(),nodeId:null,source:`local`};let nodeId=await resolveTargetNodeId(opts);return{snapshot:await loadSnapshot(opts,nodeId),nodeId,source:nodeId?`node`:`gateway`}}function exitWithError(message){throw defaultRuntime.error(message),defaultRuntime.exit(1),Error(message)}function requireTrimmedNonEmpty(value,message){let trimmed=value.trim();return trimmed||exitWithError(message),trimmed}async function loadWritableSnapshotTarget(opts){let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);source===`local`&&defaultRuntime.log(theme.muted(`Writing local approvals.`));let targetLabel=source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`,baseHash=snapshot.hash;return baseHash||exitWithError(`Exec approvals hash missing; reload and retry.`),{snapshot,nodeId,source,targetLabel,baseHash}}async function saveSnapshotTargeted(params){let next=params.source===`local`?saveSnapshotLocal(params.file):await saveSnapshot(params.opts,params.nodeId,params.file,params.baseHash);if(params.opts.json){defaultRuntime.log(JSON.stringify(next));return}defaultRuntime.log(theme.muted(`Target: ${params.targetLabel}`)),renderApprovalsSnapshot(next,params.targetLabel)}function formatCliError(err){let msg=describeUnknownError(err);return msg.includes(`
 `)?msg.split(`
 `)[0]:msg}function renderApprovalsSnapshot(snapshot,targetLabel){let rich=isRich(),heading=text=>rich?theme.heading(text):text,muted=text=>rich?theme.muted(text):text,tableWidth=Math.max(60,(process.stdout.columns??120)-1),file=snapshot.file??{version:1},defaults=file.defaults??{},defaultsParts=[defaults.security?`security=${defaults.security}`:null,defaults.ask?`ask=${defaults.ask}`:null,defaults.askFallback?`askFallback=${defaults.askFallback}`:null,typeof defaults.autoAllowSkills==`boolean`?`autoAllowSkills=${defaults.autoAllowSkills?`on`:`off`}`:null].filter(Boolean),agents=file.agents??{},allowlistRows=[],now=Date.now();for(let[agentId,agent]of Object.entries(agents)){let allowlist=Array.isArray(agent.allowlist)?agent.allowlist:[];for(let entry of allowlist){let pattern=entry?.pattern?.trim()??``;if(!pattern)continue;let lastUsedAt=typeof entry.lastUsedAt==`number`?entry.lastUsedAt:null;allowlistRows.push({Target:targetLabel,Agent:agentId,Pattern:pattern,LastUsed:lastUsedAt?formatTimeAgo(Math.max(0,now-lastUsedAt)):muted(`unknown`)})}}let summaryRows=[{Field:`Target`,Value:targetLabel},{Field:`Path`,Value:snapshot.path},{Field:`Exists`,Value:snapshot.exists?`yes`:`no`},{Field:`Hash`,Value:snapshot.hash},{Field:`Version`,Value:String(file.version??1)},{Field:`Socket`,Value:file.socket?.path??`default`},{Field:`Defaults`,Value:defaultsParts.length>0?defaultsParts.join(`, `):`none`},{Field:`Agents`,Value:String(Object.keys(agents).length)},{Field:`Allowlist`,Value:String(allowlistRows.length)}];if(defaultRuntime.log(heading(`Approvals`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:summaryRows}).trimEnd()),allowlistRows.length===0){defaultRuntime.log(``),defaultRuntime.log(muted(`No allowlist entries.`));return}defaultRuntime.log(``),defaultRuntime.log(heading(`Allowlist`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Target`,header:`Target`,minWidth:10},{key:`Agent`,header:`Agent`,minWidth:8},{key:`Pattern`,header:`Pattern`,minWidth:20,flex:!0},{key:`LastUsed`,header:`Last Used`,minWidth:10}],rows:allowlistRows}).trimEnd())}async function saveSnapshot(opts,nodeId,file,baseHash){return await callGatewayFromCli(nodeId?`exec.approvals.node.set`:`exec.approvals.set`,opts,nodeId?{nodeId,file,baseHash}:{file,baseHash})}function resolveAgentKey(value){return(value?.trim()??``)||`*`}function normalizeAllowlistEntry(entry){return(entry?.pattern?.trim()??``)||null}function ensureAgent(file,agentKey){let agents=file.agents??{},entry=agents[agentKey]??{};return file.agents=agents,entry}function isEmptyAgent(agent){let allowlist=Array.isArray(agent.allowlist)?agent.allowlist:[];return!agent.security&&!agent.ask&&!agent.askFallback&&agent.autoAllowSkills===void 0&&allowlist.length===0}async function loadWritableAllowlistAgent(opts){let{snapshot,nodeId,source,targetLabel,baseHash}=await loadWritableSnapshotTarget(opts),file=snapshot.file??{version:1};file.version=1;let agentKey=resolveAgentKey(opts.agent),agent=ensureAgent(file,agentKey);return{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries:Array.isArray(agent.allowlist)?agent.allowlist:[]}}function registerExecApprovalsCli(program){let formatExample=(cmd,desc)=>`  ${theme.command(cmd)}\n    ${theme.muted(desc)}`,approvals=program.command(`approvals`).alias(`exec-approvals`).description(`Manage exec approvals (gateway or node host)`).addHelpText(`after`,()=>`\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/approvals`,`docs.builderforce.ai/cli/approvals`)}\n`);nodesCallOpts(approvals.command(`get`).description(`Fetch exec approvals snapshot`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).action(async opts=>{try{let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);if(opts.json){defaultRuntime.log(JSON.stringify(snapshot));return}source===`local`&&(defaultRuntime.log((text=>isRich()?theme.muted(text):text)(`Showing local approvals.`)),defaultRuntime.log(``)),renderApprovalsSnapshot(snapshot,source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`)}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}})),nodesCallOpts(approvals.command(`set`).description(`Replace exec approvals with a JSON file`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--file <path>`,`Path to JSON file to upload`).option(`--stdin`,`Read JSON from stdin`,!1).action(async opts=>{try{!opts.file&&!opts.stdin&&exitWithError(`Provide --file or --stdin.`),opts.file&&opts.stdin&&exitWithError(`Use either --file or --stdin (not both).`);let{source,nodeId,targetLabel,baseHash}=await loadWritableSnapshotTarget(opts),raw=opts.stdin?await readStdin():await fs.readFile(String(opts.file),`utf8`),file;try{file=JSON5.parse(raw)}catch(err){exitWithError(`Failed to parse approvals JSON: ${String(err)}`)}file.version=1,await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}}));let allowlist=approvals.command(`allowlist`).description(`Edit the per-agent allowlist`).addHelpText(`after`,()=>`\n${theme.heading(`Examples:`)}\n${formatExample(`builderforce approvals allowlist add "~/Projects/**/bin/rg"`,`Allowlist a local binary pattern for the main agent.`)}\n${formatExample(`builderforce approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"`,`Allowlist on a specific node/agent.`)}\n${formatExample(`builderforce approvals allowlist add --agent "*" "/usr/bin/uname"`,`Allowlist for all agents (wildcard).`)}\n${formatExample(`builderforce approvals allowlist remove "~/Projects/**/bin/rg"`,`Remove an allowlist pattern.`)}\n\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/approvals`,`docs.builderforce.ai/cli/approvals`)}\n`);nodesCallOpts(allowlist.command(`add <pattern>`).description(`Add a glob pattern to an allowlist`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(pattern,opts)=>{try{let trimmed=requireTrimmedNonEmpty(pattern,`Pattern required.`),{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries}=await loadWritableAllowlistAgent(opts);if(allowlistEntries.some(entry=>normalizeAllowlistEntry(entry)===trimmed)){defaultRuntime.log(`Already allowlisted.`);return}allowlistEntries.push({pattern:trimmed,lastUsedAt:Date.now()}),agent.allowlist=allowlistEntries,file.agents={...file.agents,[agentKey]:agent},await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}})),nodesCallOpts(allowlist.command(`remove <pattern>`).description(`Remove a glob pattern from an allowlist`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(pattern,opts)=>{try{let trimmed=requireTrimmedNonEmpty(pattern,`Pattern required.`),{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries}=await loadWritableAllowlistAgent(opts),nextEntries=allowlistEntries.filter(entry=>normalizeAllowlistEntry(entry)!==trimmed);if(nextEntries.length===allowlistEntries.length){defaultRuntime.log(`Pattern not found.`);return}if(nextEntries.length===0?delete agent.allowlist:agent.allowlist=nextEntries,isEmptyAgent(agent)){let agents={...file.agents};delete agents[agentKey],file.agents=Object.keys(agents).length>0?agents:void 0}else file.agents={...file.agents,[agentKey]:agent};await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}}))}export{registerExecApprovalsCli};

package/dist/{exec-approvals-cli-BPFi82B0.js → exec-approvals-cli-ktB7M7WE.js}

@@ -1,3 +1,3 @@
-import"./paths-BHg-VHB4.js";import"./registry-Cv7CoWAs.js";import{R as isRich,z as theme}from"./utils-BP60e80M.js";import{p as defaultRuntime}from"./subsystem-C4b1Von0.js";import"./boolean-ssGoaBPk.js";import"./env-BoE8QSib.js";import"./auth-profiles-C1VbcUOm.js";import"./src-DvWaTze9.js";import"./logger-wuOr7HKl.js";import"./session-key-CksCYipj.js";import"./builderforce-root-DY1qbWNX.js";import"./exec-COgsU9ql.js";import"./agent-scope-CufEmNj_.js";import"./env-file-DeS6x2OL.js";import"./src-HrLX5bhG.js";import"./io-CohJffHG.js";import"./manifest-registry-009gLJ4l.js";import"./config-toczWD3q.js";import"./client-CGgp3zkQ.js";import"./call-DmAU4cRX.js";import"./message-channel-z5YRpR2d.js";import{n as formatTimeAgo}from"./format-relative-CruqE52s.js";import{c as readExecApprovalsSnapshot,p as saveExecApprovals}from"./exec-approvals-D7ZPAZpt.js";import{t as formatDocsLink}from"./links-BKzP7VVP.js";import"./progress-Cqb-jAjT.js";import{n as callGatewayFromCli}from"./gateway-rpc-ByUcnQ7W.js";import"./systemd-DdVd5Yet.js";import"./service-EKJG69M3.js";import{t as renderTable}from"./table-BFCCZDsp.js";import{t as describeUnknownError}from"./shared-rsjJRWla.js";import{i as resolveNodeId,r as nodesCallOpts}from"./rpc-DcQNGQlj.js";import JSON5 from"json5";import fs from"node:fs/promises";async function readStdin(){let chunks=[];for await(let chunk of process.stdin)chunks.push(Buffer.isBuffer(chunk)?chunk:Buffer.from(String(chunk)));return Buffer.concat(chunks).toString(`utf8`)}async function resolveTargetNodeId(opts){if(opts.gateway)return null;let raw=opts.node?.trim()??``;return raw?await resolveNodeId(opts,raw):null}async function loadSnapshot(opts,nodeId){return await callGatewayFromCli(nodeId?`exec.approvals.node.get`:`exec.approvals.get`,opts,nodeId?{nodeId}:{})}function loadSnapshotLocal(){let snapshot=readExecApprovalsSnapshot();return{path:snapshot.path,exists:snapshot.exists,hash:snapshot.hash,file:snapshot.file}}function saveSnapshotLocal(file){return saveExecApprovals(file),loadSnapshotLocal()}async function loadSnapshotTarget(opts){if(!opts.gateway&&!opts.node)return{snapshot:loadSnapshotLocal(),nodeId:null,source:`local`};let nodeId=await resolveTargetNodeId(opts);return{snapshot:await loadSnapshot(opts,nodeId),nodeId,source:nodeId?`node`:`gateway`}}function exitWithError(message){throw defaultRuntime.error(message),defaultRuntime.exit(1),Error(message)}function requireTrimmedNonEmpty(value,message){let trimmed=value.trim();return trimmed||exitWithError(message),trimmed}async function loadWritableSnapshotTarget(opts){let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);source===`local`&&defaultRuntime.log(theme.muted(`Writing local approvals.`));let targetLabel=source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`,baseHash=snapshot.hash;return baseHash||exitWithError(`Exec approvals hash missing; reload and retry.`),{snapshot,nodeId,source,targetLabel,baseHash}}async function saveSnapshotTargeted(params){let next=params.source===`local`?saveSnapshotLocal(params.file):await saveSnapshot(params.opts,params.nodeId,params.file,params.baseHash);if(params.opts.json){defaultRuntime.log(JSON.stringify(next));return}defaultRuntime.log(theme.muted(`Target: ${params.targetLabel}`)),renderApprovalsSnapshot(next,params.targetLabel)}function formatCliError(err){let msg=describeUnknownError(err);return msg.includes(`
+import"./paths-BHg-VHB4.js";import"./registry-Cv7CoWAs.js";import{R as isRich,z as theme}from"./utils-BP60e80M.js";import{p as defaultRuntime}from"./subsystem-C4b1Von0.js";import"./boolean-ssGoaBPk.js";import"./env-BoE8QSib.js";import"./auth-profiles-pt7Tr4HA.js";import"./src-DvWaTze9.js";import"./logger-wuOr7HKl.js";import"./session-key-CksCYipj.js";import"./builderforce-root-DY1qbWNX.js";import"./exec-COgsU9ql.js";import"./agent-scope-CufEmNj_.js";import"./env-file-DeS6x2OL.js";import"./src-HrLX5bhG.js";import"./io-D9hC2aG0.js";import"./manifest-registry-009gLJ4l.js";import"./config-BpChMIJ6.js";import"./client-CGgp3zkQ.js";import"./call-Du2LiaX6.js";import"./message-channel-z5YRpR2d.js";import{n as formatTimeAgo}from"./format-relative-CruqE52s.js";import{c as readExecApprovalsSnapshot,p as saveExecApprovals}from"./exec-approvals-D7ZPAZpt.js";import{t as formatDocsLink}from"./links-BKzP7VVP.js";import"./progress-Cqb-jAjT.js";import{n as callGatewayFromCli}from"./gateway-rpc-ff1RVb0_.js";import"./systemd-DdVd5Yet.js";import"./service-EKJG69M3.js";import{t as renderTable}from"./table-BFCCZDsp.js";import{t as describeUnknownError}from"./shared-rsjJRWla.js";import{i as resolveNodeId,r as nodesCallOpts}from"./rpc-Cwm4gchc.js";import JSON5 from"json5";import fs from"node:fs/promises";async function readStdin(){let chunks=[];for await(let chunk of process.stdin)chunks.push(Buffer.isBuffer(chunk)?chunk:Buffer.from(String(chunk)));return Buffer.concat(chunks).toString(`utf8`)}async function resolveTargetNodeId(opts){if(opts.gateway)return null;let raw=opts.node?.trim()??``;return raw?await resolveNodeId(opts,raw):null}async function loadSnapshot(opts,nodeId){return await callGatewayFromCli(nodeId?`exec.approvals.node.get`:`exec.approvals.get`,opts,nodeId?{nodeId}:{})}function loadSnapshotLocal(){let snapshot=readExecApprovalsSnapshot();return{path:snapshot.path,exists:snapshot.exists,hash:snapshot.hash,file:snapshot.file}}function saveSnapshotLocal(file){return saveExecApprovals(file),loadSnapshotLocal()}async function loadSnapshotTarget(opts){if(!opts.gateway&&!opts.node)return{snapshot:loadSnapshotLocal(),nodeId:null,source:`local`};let nodeId=await resolveTargetNodeId(opts);return{snapshot:await loadSnapshot(opts,nodeId),nodeId,source:nodeId?`node`:`gateway`}}function exitWithError(message){throw defaultRuntime.error(message),defaultRuntime.exit(1),Error(message)}function requireTrimmedNonEmpty(value,message){let trimmed=value.trim();return trimmed||exitWithError(message),trimmed}async function loadWritableSnapshotTarget(opts){let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);source===`local`&&defaultRuntime.log(theme.muted(`Writing local approvals.`));let targetLabel=source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`,baseHash=snapshot.hash;return baseHash||exitWithError(`Exec approvals hash missing; reload and retry.`),{snapshot,nodeId,source,targetLabel,baseHash}}async function saveSnapshotTargeted(params){let next=params.source===`local`?saveSnapshotLocal(params.file):await saveSnapshot(params.opts,params.nodeId,params.file,params.baseHash);if(params.opts.json){defaultRuntime.log(JSON.stringify(next));return}defaultRuntime.log(theme.muted(`Target: ${params.targetLabel}`)),renderApprovalsSnapshot(next,params.targetLabel)}function formatCliError(err){let msg=describeUnknownError(err);return msg.includes(`
 `)?msg.split(`
 `)[0]:msg}function renderApprovalsSnapshot(snapshot,targetLabel){let rich=isRich(),heading=text=>rich?theme.heading(text):text,muted=text=>rich?theme.muted(text):text,tableWidth=Math.max(60,(process.stdout.columns??120)-1),file=snapshot.file??{version:1},defaults=file.defaults??{},defaultsParts=[defaults.security?`security=${defaults.security}`:null,defaults.ask?`ask=${defaults.ask}`:null,defaults.askFallback?`askFallback=${defaults.askFallback}`:null,typeof defaults.autoAllowSkills==`boolean`?`autoAllowSkills=${defaults.autoAllowSkills?`on`:`off`}`:null].filter(Boolean),agents=file.agents??{},allowlistRows=[],now=Date.now();for(let[agentId,agent]of Object.entries(agents)){let allowlist=Array.isArray(agent.allowlist)?agent.allowlist:[];for(let entry of allowlist){let pattern=entry?.pattern?.trim()??``;if(!pattern)continue;let lastUsedAt=typeof entry.lastUsedAt==`number`?entry.lastUsedAt:null;allowlistRows.push({Target:targetLabel,Agent:agentId,Pattern:pattern,LastUsed:lastUsedAt?formatTimeAgo(Math.max(0,now-lastUsedAt)):muted(`unknown`)})}}let summaryRows=[{Field:`Target`,Value:targetLabel},{Field:`Path`,Value:snapshot.path},{Field:`Exists`,Value:snapshot.exists?`yes`:`no`},{Field:`Hash`,Value:snapshot.hash},{Field:`Version`,Value:String(file.version??1)},{Field:`Socket`,Value:file.socket?.path??`default`},{Field:`Defaults`,Value:defaultsParts.length>0?defaultsParts.join(`, `):`none`},{Field:`Agents`,Value:String(Object.keys(agents).length)},{Field:`Allowlist`,Value:String(allowlistRows.length)}];if(defaultRuntime.log(heading(`Approvals`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Field`,header:`Field`,minWidth:8},{key:`Value`,header:`Value`,minWidth:24,flex:!0}],rows:summaryRows}).trimEnd()),allowlistRows.length===0){defaultRuntime.log(``),defaultRuntime.log(muted(`No allowlist entries.`));return}defaultRuntime.log(``),defaultRuntime.log(heading(`Allowlist`)),defaultRuntime.log(renderTable({width:tableWidth,columns:[{key:`Target`,header:`Target`,minWidth:10},{key:`Agent`,header:`Agent`,minWidth:8},{key:`Pattern`,header:`Pattern`,minWidth:20,flex:!0},{key:`LastUsed`,header:`Last Used`,minWidth:10}],rows:allowlistRows}).trimEnd())}async function saveSnapshot(opts,nodeId,file,baseHash){return await callGatewayFromCli(nodeId?`exec.approvals.node.set`:`exec.approvals.set`,opts,nodeId?{nodeId,file,baseHash}:{file,baseHash})}function resolveAgentKey(value){return(value?.trim()??``)||`*`}function normalizeAllowlistEntry(entry){return(entry?.pattern?.trim()??``)||null}function ensureAgent(file,agentKey){let agents=file.agents??{},entry=agents[agentKey]??{};return file.agents=agents,entry}function isEmptyAgent(agent){let allowlist=Array.isArray(agent.allowlist)?agent.allowlist:[];return!agent.security&&!agent.ask&&!agent.askFallback&&agent.autoAllowSkills===void 0&&allowlist.length===0}async function loadWritableAllowlistAgent(opts){let{snapshot,nodeId,source,targetLabel,baseHash}=await loadWritableSnapshotTarget(opts),file=snapshot.file??{version:1};file.version=1;let agentKey=resolveAgentKey(opts.agent),agent=ensureAgent(file,agentKey);return{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries:Array.isArray(agent.allowlist)?agent.allowlist:[]}}function registerExecApprovalsCli(program){let formatExample=(cmd,desc)=>`  ${theme.command(cmd)}\n    ${theme.muted(desc)}`,approvals=program.command(`approvals`).alias(`exec-approvals`).description(`Manage exec approvals (gateway or node host)`).addHelpText(`after`,()=>`\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/approvals`,`docs.builderforce.ai/cli/approvals`)}\n`);nodesCallOpts(approvals.command(`get`).description(`Fetch exec approvals snapshot`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).action(async opts=>{try{let{snapshot,nodeId,source}=await loadSnapshotTarget(opts);if(opts.json){defaultRuntime.log(JSON.stringify(snapshot));return}source===`local`&&(defaultRuntime.log((text=>isRich()?theme.muted(text):text)(`Showing local approvals.`)),defaultRuntime.log(``)),renderApprovalsSnapshot(snapshot,source===`local`?`local`:nodeId?`node:${nodeId}`:`gateway`)}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}})),nodesCallOpts(approvals.command(`set`).description(`Replace exec approvals with a JSON file`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--file <path>`,`Path to JSON file to upload`).option(`--stdin`,`Read JSON from stdin`,!1).action(async opts=>{try{!opts.file&&!opts.stdin&&exitWithError(`Provide --file or --stdin.`),opts.file&&opts.stdin&&exitWithError(`Use either --file or --stdin (not both).`);let{source,nodeId,targetLabel,baseHash}=await loadWritableSnapshotTarget(opts),raw=opts.stdin?await readStdin():await fs.readFile(String(opts.file),`utf8`),file;try{file=JSON5.parse(raw)}catch(err){exitWithError(`Failed to parse approvals JSON: ${String(err)}`)}file.version=1,await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}}));let allowlist=approvals.command(`allowlist`).description(`Edit the per-agent allowlist`).addHelpText(`after`,()=>`\n${theme.heading(`Examples:`)}\n${formatExample(`builderforce approvals allowlist add "~/Projects/**/bin/rg"`,`Allowlist a local binary pattern for the main agent.`)}\n${formatExample(`builderforce approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"`,`Allowlist on a specific node/agent.`)}\n${formatExample(`builderforce approvals allowlist add --agent "*" "/usr/bin/uname"`,`Allowlist for all agents (wildcard).`)}\n${formatExample(`builderforce approvals allowlist remove "~/Projects/**/bin/rg"`,`Remove an allowlist pattern.`)}\n\n${theme.muted(`Docs:`)} ${formatDocsLink(`/cli/approvals`,`docs.builderforce.ai/cli/approvals`)}\n`);nodesCallOpts(allowlist.command(`add <pattern>`).description(`Add a glob pattern to an allowlist`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(pattern,opts)=>{try{let trimmed=requireTrimmedNonEmpty(pattern,`Pattern required.`),{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries}=await loadWritableAllowlistAgent(opts);if(allowlistEntries.some(entry=>normalizeAllowlistEntry(entry)===trimmed)){defaultRuntime.log(`Already allowlisted.`);return}allowlistEntries.push({pattern:trimmed,lastUsedAt:Date.now()}),agent.allowlist=allowlistEntries,file.agents={...file.agents,[agentKey]:agent},await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}})),nodesCallOpts(allowlist.command(`remove <pattern>`).description(`Remove a glob pattern from an allowlist`).option(`--node <node>`,`Target node id/name/IP`).option(`--gateway`,`Force gateway approvals`,!1).option(`--agent <id>`,`Agent id (defaults to "*")`).action(async(pattern,opts)=>{try{let trimmed=requireTrimmedNonEmpty(pattern,`Pattern required.`),{nodeId,source,targetLabel,baseHash,file,agentKey,agent,allowlistEntries}=await loadWritableAllowlistAgent(opts),nextEntries=allowlistEntries.filter(entry=>normalizeAllowlistEntry(entry)!==trimmed);if(nextEntries.length===allowlistEntries.length){defaultRuntime.log(`Pattern not found.`);return}if(nextEntries.length===0?delete agent.allowlist:agent.allowlist=nextEntries,isEmptyAgent(agent)){let agents={...file.agents};delete agents[agentKey],file.agents=Object.keys(agents).length>0?agents:void 0}else file.agents={...file.agents,[agentKey]:agent};await saveSnapshotTargeted({opts,source,nodeId,file,baseHash,targetLabel})}catch(err){defaultRuntime.error(formatCliError(err)),defaultRuntime.exit(1)}}))}export{registerExecApprovalsCli};