@shulex/cxclawctl 0.1.8 → 0.1.10

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import { readFile as readFile6 } from "fs/promises";
+import { readFile as readFile7 } from "fs/promises";
 
 // src/auth.ts
 import open from "open";
@@ -12,7 +12,7 @@ var AUTH_SERVER_URL = "https://ai.solvea.cx/api_v2/ticket";
 // package.json
 var package_default = {
   name: "@shulex/cxclawctl",
-  version: "0.1.8",
+  version: "0.1.10",
   description: "Solvea CXClaw CLI and Codex plugin runtime",
   type: "module",
   bin: {
@@ -22,6 +22,7 @@ var package_default = {
     "bin",
     "dist/cli.js",
     "dist/cli.js.map",
+    "runtime",
     "capabilities.lock.json"
   ],
   scripts: {
@@ -33,6 +34,7 @@ var package_default = {
     "check:release": "tsx scripts/check-release.ts",
     "test:package": "tsx scripts/test-packed-package.ts",
     "release:prepare": "tsx scripts/prepare-release.ts",
+    "release:create": "tsx scripts/create-release.ts",
     "package:agent-plugin": "node scripts/package-agent-plugin.mjs",
     "package:codex-plugin": "node scripts/package-codex-plugin.mjs"
   },
@@ -67,6 +69,16 @@ var TOOL_SCHEMA_VERSION = "1";
 var SERVER_API_VERSION = "1";
 
 // src/http.ts
+var HttpError = class extends Error {
+  constructor(status, responseBody) {
+    super(`server returned ${status}: ${responseBody}`);
+    this.status = status;
+    this.responseBody = responseBody;
+    this.name = "HttpError";
+  }
+  status;
+  responseBody;
+};
 function unwrap(value) {
   if (value && typeof value === "object" && Object.keys(value).length === 1 && "data" in value) return value.data;
   return value;
@@ -86,10 +98,11 @@ async function request(session, path, init = {}, tenant = false) {
       const response = await fetch(`${AUTH_SERVER_URL}${path}`, { ...init, headers, signal: AbortSignal.timeout(3e4) });
       const text = await response.text();
       const value = text ? JSON.parse(text) : void 0;
-      if (!response.ok) throw new Error(`server returned ${response.status}: ${text}`);
+      if (!response.ok) throw new HttpError(response.status, text);
       return unwrap(value);
     } catch (error) {
       last = error;
+      if (error instanceof HttpError && error.status < 500) break;
       if (attempt < 2) await new Promise((r) => setTimeout(r, 200 * 2 ** attempt));
     }
   }
@@ -101,9 +114,15 @@ var post = (session, path, body, tenant = false) => request(session, path, { met
 import { AsyncEntry } from "@napi-rs/keyring";
 var options = process.platform === "linux" ? { linux: { store: "secret-service" } } : void 0;
 var entry = () => new AsyncEntry("com.solvea.cxclaw", "session", options);
+var SessionNotFoundError = class extends Error {
+  constructor() {
+    super("\u672A\u767B\u5F55");
+    this.name = "SessionNotFoundError";
+  }
+};
 async function loadSession() {
   const raw = await entry().getPassword();
-  if (!raw) throw new Error("\u672A\u767B\u5F55\uFF0C\u8BF7\u5148\u8FD0\u884C cxclawctl auth login");
+  if (!raw) throw new SessionNotFoundError();
   return JSON.parse(raw);
 }
 async function saveSession(session) {
@@ -114,32 +133,88 @@ async function deleteSession() {
   await entry().deleteCredential();
 }
 
+// runtime/auth-wait-state.mjs
+import { createHash } from "crypto";
+import { mkdir, readFile, readdir, rm, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+import { join } from "path";
+var markerRoot = join(tmpdir(), "cxclaw-auth-wait");
+var markerTtlMs = 15 * 60 * 1e3;
+var markerName = (sessionId, pid) => `${createHash("sha256").update(sessionId).digest("hex").slice(0, 24)}-${pid}.json`;
+async function withAuthWaitMarker(operation, env = process.env) {
+  const sessionId = env.CODEX_SESSION_ID ?? env.CODEX_THREAD_ID;
+  if (!sessionId) return operation();
+  await mkdir(markerRoot, { recursive: true, mode: 448 });
+  const path = join(markerRoot, markerName(sessionId, process.pid));
+  await writeFile(path, JSON.stringify({
+    sessionId,
+    threadId: env.CODEX_THREAD_ID ?? null,
+    pid: process.pid,
+    expiresAt: Date.now() + markerTtlMs
+  }), { mode: 384 });
+  try {
+    return await operation();
+  } finally {
+    await rm(path, { force: true }).catch(() => void 0);
+  }
+}
+
 // src/auth.ts
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+var loginInFlight;
 function publicAuthStatus(session) {
   return { ok: true, loggedIn: true, email: session.email, channel: session.channel, accessExpiresAt: session.accessExpiry };
 }
-async function login(channel) {
+async function authorizeDevice(channel, runtime) {
   const session = { channel, accessToken: "", refreshToken: "", accessExpiry: 0, employeeId: "", email: "" };
-  const start = await post(session, "/auth/device/start", { clientVersion: VERSION });
-  console.error(`\u8BF7\u5728\u6D4F\u89C8\u5668\u6253\u5F00\u4EE5\u4E0B\u5730\u5740\u5B8C\u6210\u9489\u9489\u6388\u6743\uFF1A
+  const start = await runtime.start(session);
+  try {
+    await runtime.openBrowser(start.verificationUriComplete);
+    runtime.log("\u9489\u9489\u6388\u6743\u9875\u5DF2\u6253\u5F00\uFF0C\u5F53\u524D\u547D\u4EE4\u4F1A\u6301\u7EED\u7B49\u5F85\u6388\u6743\u7ED3\u679C\uFF0C\u65E0\u9700\u56DE\u590D Codex\u3002");
+  } catch {
+    runtime.log(`\u672A\u80FD\u81EA\u52A8\u6253\u5F00\u6D4F\u89C8\u5668\uFF0C\u8BF7\u6253\u5F00\u4EE5\u4E0B\u5730\u5740\u5B8C\u6210\u9489\u9489\u6388\u6743\uFF1A
 ${start.verificationUriComplete}
 \u8BBE\u5907\u7801\uFF1A${start.userCode}`);
-  await open(start.verificationUriComplete).catch(() => void 0);
-  const deadline = Date.now() + start.expiresIn * 1e3;
-  while (Date.now() < deadline) {
-    await sleep(Math.max(2, start.interval) * 1e3);
+  }
+  const deadline = runtime.now() + start.expiresIn * 1e3;
+  let nextProgressAt = runtime.now() + 15e3;
+  while (runtime.now() < deadline) {
+    await runtime.sleep(Math.max(2, start.interval) * 1e3);
     try {
-      const token = await post(session, "/auth/device/token", { deviceCode: start.deviceCode, clientVersion: VERSION });
-      Object.assign(session, { accessToken: token.accessToken, refreshToken: token.refreshToken, accessExpiry: Math.floor(Date.now() / 1e3) + token.expiresIn, employeeId: token.employee.id, email: token.employee.email });
-      await saveSession(session);
+      const token = await runtime.poll(session, start.deviceCode);
+      Object.assign(session, { accessToken: token.accessToken, refreshToken: token.refreshToken, accessExpiry: Math.floor(runtime.now() / 1e3) + token.expiresIn, employeeId: token.employee.id, email: token.employee.email });
+      await runtime.save(session);
+      runtime.log("\u9489\u9489\u6388\u6743\u6210\u529F\uFF0C\u7EE7\u7EED\u6267\u884C\u5F53\u524D\u547D\u4EE4\u3002");
       return session;
     } catch (error) {
-      if (!String(error).includes("428")) throw error;
+      if (!(error instanceof HttpError) || error.status !== 428) throw error;
+      if (runtime.now() >= nextProgressAt) {
+        runtime.log("\u4ECD\u5728\u7B49\u5F85\u9489\u9489\u6388\u6743\u2026\u2026");
+        nextProgressAt = runtime.now() + 15e3;
+      }
     }
   }
   throw new Error("device authorization expired");
 }
+async function runLogin(channel) {
+  return withAuthWaitMarker(() => authorizeDevice(channel, {
+    start: (session) => post(session, "/auth/device/start", { clientVersion: VERSION }),
+    poll: (session, deviceCode) => post(session, "/auth/device/token", { deviceCode, clientVersion: VERSION }),
+    openBrowser: async (url) => {
+      await open(url);
+    },
+    save: saveSession,
+    sleep,
+    now: Date.now,
+    log: (message) => console.error(message)
+  }));
+}
+function login(channel) {
+  if (!loginInFlight) loginInFlight = runLogin(channel).finally(() => {
+    loginInFlight = void 0;
+  });
+  return loginInFlight;
+}
 async function ensureAccess(session) {
   if (session.accessToken && Date.now() / 1e3 + 30 < session.accessExpiry) return session;
   const token = await post(session, "/auth/refresh", { refreshToken: session.refreshToken, clientVersion: VERSION });
@@ -147,8 +222,24 @@ async function ensureAccess(session) {
   await saveSession(session);
   return session;
 }
-async function authenticated() {
-  return ensureAccess(await loadSession());
+async function resolveAuthenticated(runtime) {
+  try {
+    return await runtime.refresh(await runtime.load());
+  } catch (error) {
+    if (error instanceof SessionNotFoundError) {
+      console.error("CXClaw \u5C1A\u672A\u6388\u6743\uFF0C\u6B63\u5728\u81EA\u52A8\u53D1\u8D77\u9489\u9489\u6388\u6743\u3002");
+      return runtime.authorize();
+    }
+    if (error instanceof HttpError && error.status === 401) {
+      console.error("CXClaw \u767B\u5F55\u5DF2\u5931\u6548\uFF0C\u6B63\u5728\u91CD\u65B0\u53D1\u8D77\u9489\u9489\u6388\u6743\u3002");
+      await runtime.remove().catch(() => void 0);
+      return runtime.authorize();
+    }
+    throw error;
+  }
+}
+function authenticated() {
+  return resolveAuthenticated({ load: loadSession, refresh: ensureAccess, remove: deleteSession, authorize: () => login("stable") });
 }
 async function logout() {
   let session;
@@ -200,10 +291,10 @@ import { dirname as dirname2, resolve } from "path";
 import { fileURLToPath } from "url";
 
 // src/solvea/commands.ts
-import { readFile as readFile3 } from "fs/promises";
+import { readFile as readFile4 } from "fs/promises";
 
 // src/solvea/client.ts
-import { mkdir, readFile, writeFile } from "fs/promises";
+import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import { basename, dirname, extname } from "path";
 import { PutObjectCommand, S3Client } from "@aws-sdk/client-s3";
 var KNOWLEDGE_TYPES = /* @__PURE__ */ new Set(["QA", "LEARN_SELF", "FILE", "WEBSITE", "PRODUCT"]);
@@ -651,7 +742,7 @@ var SolveaClient = class {
     await client.send(new PutObjectCommand({
       Bucket: String(credentials.bucketName),
       Key: key,
-      Body: await readFile(filePath),
+      Body: await readFile2(filePath),
       ContentType: contentTypes[extname(filePath).toLowerCase()] ?? "application/octet-stream"
     }));
     return key;
@@ -668,8 +759,8 @@ var SolveaClient = class {
       signal: AbortSignal.timeout(3e4)
     });
     if (!response.ok) throw new Error(`HTTP ${response.status} GET ${path}: ${await response.text()}`);
-    await mkdir(dirname(target), { recursive: true });
-    await writeFile(target, new Uint8Array(await response.arrayBuffer()));
+    await mkdir2(dirname(target), { recursive: true });
+    await writeFile2(target, new Uint8Array(await response.arrayBuffer()));
     return target;
   }
   async downloadLabelTemplate(templateType, target) {
@@ -911,10 +1002,10 @@ var SolveaClient = class {
 };
 
 // src/solvea/input.ts
-import { readFile as readFile2 } from "fs/promises";
+import { readFile as readFile3 } from "fs/promises";
 async function jsonData(args, required = true) {
   const file = option(args, "--data-file");
-  const raw = file ? await readFile2(file, "utf8") : option(args, "--data");
+  const raw = file ? await readFile3(file, "utf8") : option(args, "--data");
   if (!raw) {
     if (required) throw new Error("--data or --data-file is required");
     return {};
@@ -925,7 +1016,7 @@ async function jsonData(args, required = true) {
 }
 async function jsonValue(args) {
   const file = option(args, "--data-file");
-  const raw = file ? await readFile2(file, "utf8") : option(args, "--data", true);
+  const raw = file ? await readFile3(file, "utf8") : option(args, "--data", true);
   return JSON.parse(raw);
 }
 function requireFlag(args, name, command) {
@@ -1108,7 +1199,7 @@ function enabled(args, command) {
 }
 async function data2(args) {
   const file = option(args, "--data-file");
-  const raw = file ? await readFile3(file, "utf8") : option(args, "--data");
+  const raw = file ? await readFile4(file, "utf8") : option(args, "--data");
   if (!raw) throw new Error("--data or --data-file is required");
   const parsed = JSON.parse(raw);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("request data must be a JSON object");
@@ -1453,13 +1544,13 @@ async function runResourceCommand(session, resource, action2, args) {
 
 // src/doctor.ts
 import { access } from "fs/promises";
-import { join } from "path";
+import { join as join2 } from "path";
 async function diagnose() {
   const root2 = packageRoot();
   const requiredFiles = [
     "package.json"
   ];
-  await Promise.all(requiredFiles.map((path) => access(join(root2, path))));
+  await Promise.all(requiredFiles.map((path) => access(join2(root2, path))));
   const expectedPluginVersion = process.env.CXCLAW_PLUGIN_VERSION || null;
   if (expectedPluginVersion && expectedPluginVersion !== VERSION) {
     throw new Error(
@@ -1511,9 +1602,9 @@ function publicTenant(t) {
 
 // src/update.ts
 import { spawn } from "child_process";
-import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
+import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
 import { homedir, platform } from "os";
-import { isAbsolute, join as join2 } from "path";
+import { isAbsolute, join as join3 } from "path";
 var exec = (command, args, options3 = {}) => new Promise((resolve5, reject) => {
   const chunks = [];
   const child = spawn(command, args, {
@@ -1586,11 +1677,11 @@ async function update() {
 async function installScheduler() {
   const invocation = schedulerInvocation();
   if (platform() === "darwin") {
-    const dir = join2(homedir(), "Library/LaunchAgents");
-    const path = join2(dir, "com.solvea.cxclaw.update.plist");
+    const dir = join3(homedir(), "Library/LaunchAgents");
+    const path = join3(dir, "com.solvea.cxclaw.update.plist");
     const programArguments = [invocation.command, ...invocation.args].map((value) => `<string>${xml(value)}</string>`).join("");
-    await mkdir2(dir, { recursive: true });
-    await writeFile2(
+    await mkdir3(dir, { recursive: true });
+    await writeFile3(
       path,
       `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -1602,18 +1693,18 @@ async function installScheduler() {
     return;
   }
   if (platform() === "linux") {
-    const dir = join2(homedir(), ".config/systemd/user");
+    const dir = join3(homedir(), ".config/systemd/user");
     const command = [invocation.command, ...invocation.args].map(systemdArg).join(" ");
-    await mkdir2(dir, { recursive: true });
-    await writeFile2(
-      join2(dir, "cxclaw-update.service"),
+    await mkdir3(dir, { recursive: true });
+    await writeFile3(
+      join3(dir, "cxclaw-update.service"),
       `[Service]
 Type=oneshot
 ExecStart=${command}
 `
     );
-    await writeFile2(
-      join2(dir, "cxclaw-update.timer"),
+    await writeFile3(
+      join3(dir, "cxclaw-update.timer"),
       "[Timer]\nOnBootSec=5m\nOnUnitActiveSec=6h\nPersistent=true\n[Install]\nWantedBy=timers.target\n"
     );
     await exec("systemctl", ["--user", "daemon-reload"]);
@@ -1652,12 +1743,12 @@ async function installMarketplace(channel) {
 // src/workflows/runtime.ts
 import { execFile } from "child_process";
 import { promises as fs } from "fs";
-import { join as join3, resolve as resolve2 } from "path";
+import { join as join4, resolve as resolve2 } from "path";
 import { promisify } from "util";
 var exec2 = promisify(execFile);
-var workspace = () => resolve2(process.env.WORKSPACE_DIR ?? join3(process.cwd(), "workspace"));
-var root = () => join3(workspace(), "runtime-inspector");
-var dirs = () => ({ output: join3(root(), "outputs"), state: join3(root(), "state"), tmp: join3(root(), "tmp") });
+var workspace = () => resolve2(process.env.WORKSPACE_DIR ?? join4(process.cwd(), "workspace"));
+var root = () => join4(workspace(), "runtime-inspector");
+var dirs = () => ({ output: join4(root(), "outputs"), state: join4(root(), "state"), tmp: join4(root(), "tmp") });
 var timestamp = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[-:TZ.]/g, "").slice(0, 15);
 var readJson = async (path, fallback) => {
   try {
@@ -1693,26 +1784,26 @@ async function prepare(args) {
   await fs.mkdir(tmp, { recursive: true });
   const batches = [];
   for (let i = 0; i < records.length; i += batchSize) batches.push(records.slice(i, i + batchSize));
-  await Promise.all(batches.map((batch, i) => writeJson(join3(tmp, `batch_${String(i).padStart(3, "0")}.json`), batch)));
-  await writeJson(join3(state2, "inspect.json"), { status: "batched", total_records: records.length, total_batches: batches.length, batch_size: batchSize, source: source ?? "auto-generated", written_at: (/* @__PURE__ */ new Date()).toISOString() });
+  await Promise.all(batches.map((batch, i) => writeJson(join4(tmp, `batch_${String(i).padStart(3, "0")}.json`), batch)));
+  await writeJson(join4(state2, "inspect.json"), { status: "batched", total_records: records.length, total_batches: batches.length, batch_size: batchSize, source: source ?? "auto-generated", written_at: (/* @__PURE__ */ new Date()).toISOString() });
   return { status: "batched", totalRecords: records.length, totalBatches: batches.length, tmp };
 }
 async function processBatches() {
   const { tmp, output, state: state2 } = dirs();
-  const current = await readJson(join3(state2, "inspect.json"), {});
+  const current = await readJson(join4(state2, "inspect.json"), {});
   if (current.status !== "batched") throw new Error(`runtime state must be batched, got ${String(current.status ?? "missing")}`);
   const names = (await fs.readdir(tmp)).filter((name) => /^batch_\d+\.json$/.test(name)).sort();
   if (!names.length) throw new Error(`no batch files found in ${tmp}`);
   const records = [];
-  for (const name of names) for (const row of await readJson(join3(tmp, name), [])) records.push({ ...row, _processed: true, _summary: `processed: ${JSON.stringify(row).slice(0, 60)}`, _at: (/* @__PURE__ */ new Date()).toISOString() });
-  const path = join3(output, `results_${timestamp()}.json`);
+  for (const name of names) for (const row of await readJson(join4(tmp, name), [])) records.push({ ...row, _processed: true, _summary: `processed: ${JSON.stringify(row).slice(0, 60)}`, _at: (/* @__PURE__ */ new Date()).toISOString() });
+  const path = join4(output, `results_${timestamp()}.json`);
   await writeJson(path, { total: records.length, processed_at: (/* @__PURE__ */ new Date()).toISOString(), source: current.source, records });
-  await writeJson(join3(state2, "inspect.json"), { status: "done", total_processed: records.length, results_path: path, done_at: (/* @__PURE__ */ new Date()).toISOString() });
+  await writeJson(join4(state2, "inspect.json"), { status: "done", total_processed: records.length, results_path: path, done_at: (/* @__PURE__ */ new Date()).toISOString() });
   return { status: "done", total: records.length, resultsPath: path };
 }
 async function state() {
   const { state: stateDir2, output, tmp } = dirs();
-  return { state: await readJson(join3(stateDir2, "inspect.json"), null), outputFiles: await fs.readdir(output).catch(() => []), tmpFiles: await fs.readdir(tmp).catch(() => []) };
+  return { state: await readJson(join4(stateDir2, "inspect.json"), null), outputFiles: await fs.readdir(output).catch(() => []), tmpFiles: await fs.readdir(tmp).catch(() => []) };
 }
 async function verify() {
   const snapshot = await state();
@@ -1739,7 +1830,7 @@ async function sandbox(args) {
 }
 async function model(args) {
   if (option(args, "--scenario", true) !== "truncation") throw new Error("only --scenario truncation is supported");
-  const target = join3(dirs().tmp, "truncation_test.md");
+  const target = join4(dirs().tmp, "truncation_test.md");
   return { scenario: "truncation", target, instruction: "Use the Codex write_file tool to write 60+ long technical paragraphs, then inspect SLG model_response stop_reason and output_tokens." };
 }
 async function runRuntime(action2, args) {
@@ -1752,9 +1843,9 @@ async function runRuntime(action2, args) {
   if (action2 === "write-test") {
     const { output, state: stateDir2 } = dirs();
     const runId = timestamp();
-    await writeJson(join3(output, `${runId}_test.json`), { run_id: runId, written_at: (/* @__PURE__ */ new Date()).toISOString() });
-    const current = await readJson(join3(stateDir2, "inspect.json"), {});
-    await writeJson(join3(stateDir2, "inspect.json"), { ...current, last_run_id: runId, write_count: Number(current.write_count ?? 0) + 1 });
+    await writeJson(join4(output, `${runId}_test.json`), { run_id: runId, written_at: (/* @__PURE__ */ new Date()).toISOString() });
+    const current = await readJson(join4(stateDir2, "inspect.json"), {});
+    await writeJson(join4(stateDir2, "inspect.json"), { ...current, last_run_id: runId, write_count: Number(current.write_count ?? 0) + 1 });
     return { ok: true, runId };
   }
   throw new Error("runtime action must be prepare, process, state, verify, sandbox, model, or write-test");
@@ -1763,10 +1854,10 @@ async function runRuntime(action2, args) {
 // src/workflows/solvea-kit.ts
 import ExcelJS from "exceljs";
 import { promises as fs2 } from "fs";
-import { dirname as dirname3, join as join4, resolve as resolve3 } from "path";
-var workspace2 = () => resolve3(process.env.WORKSPACE_DIR ?? join4(process.cwd(), "workspace"));
-var outputDir = (owner) => join4(workspace2(), "outputs", owner);
-var stateDir = (owner) => join4(workspace2(), "state", owner);
+import { dirname as dirname3, join as join5, resolve as resolve3 } from "path";
+var workspace2 = () => resolve3(process.env.WORKSPACE_DIR ?? join5(process.cwd(), "workspace"));
+var outputDir = (owner) => join5(workspace2(), "outputs", owner);
+var stateDir = (owner) => join5(workspace2(), "state", owner);
 var now = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[-:TZ.]/g, "").slice(0, 15);
 var readJson2 = async (path) => JSON.parse(await fs2.readFile(path, "utf8"));
 var writeJson2 = async (path, value) => {
@@ -1796,7 +1887,7 @@ function labelsFrom(value) {
 async function generateLabelImport(args) {
   const input = option(args, "--input") ?? option(args, "--data-file", true);
   const init = args.includes("--init");
-  const output = option(args, "--output") ?? join4(stateDir("solvea-kit"), init ? "labels_init.xlsx" : "labels_update.xlsx");
+  const output = option(args, "--output") ?? join5(stateDir("solvea-kit"), init ? "labels_init.xlsx" : "labels_update.xlsx");
   const labels = labelsFrom(await readJson2(input));
   const workbook = new ExcelJS.Workbook();
   const sheet = workbook.addWorksheet("labels");
@@ -1836,9 +1927,9 @@ async function classifyIntents(args) {
   if (!noExcel && !option(args, "--xlsx")) throw new Error("provide --xlsx or --no-excel");
   const intents = Object.entries(TAXONOMY).map(([name, l2s]) => ({ name, definition: `Customer requests and issues related to ${name}.`, count: 0, pct: 0, sub_intents: l2s.map((l2) => ({ name: l2, definition: "", count: 0, pct: 0, samples: [], is_new: false })), samples: [], is_new: false }));
   const result = { meta: { run_id: runId, total: 0, classified: 0, n_known: intents.length, n_new: 0, mode: noExcel ? "no-excel" : "structured" }, intents, new_intents: [] };
-  const resultPath = join4(outputDir(owner), `results_${runId}.json`);
+  const resultPath = join5(outputDir(owner), `results_${runId}.json`);
   await writeJson2(resultPath, result);
-  await writeJson2(join4(stateDir(owner), "progress.json"), { status: "ready", run_id: runId, results_path: resultPath, updated_at: (/* @__PURE__ */ new Date()).toISOString() });
+  await writeJson2(join5(stateDir(owner), "progress.json"), { status: "ready", run_id: runId, results_path: resultPath, updated_at: (/* @__PURE__ */ new Date()).toISOString() });
   return { ...result.meta, resultsPath: resultPath };
 }
 async function runSolveaKitWorkflow(action2, args) {
@@ -1848,7 +1939,7 @@ async function runSolveaKitWorkflow(action2, args) {
 }
 
 // src/workflows/support.ts
-import { readFile as readFile4 } from "fs/promises";
+import { readFile as readFile5 } from "fs/promises";
 import { basename as basename3 } from "path";
 var safe = (value) => encodeURIComponent(value);
 var docsMcpUrl = process.env.CXCLAW_DOCS_MCP_URL ?? "https://solvea-39f11a36.mintlify.app/mcp";
@@ -1923,7 +2014,7 @@ async function runSupport(session, action2, args) {
     const attachments = [];
     for (const file of options2(args, "--attachment")) {
       const form = new FormData();
-      form.append("file", new Blob([await readFile4(file)]), basename3(file));
+      form.append("file", new Blob([await readFile5(file)]), basename3(file));
       const tenant = session.tenant;
       const base = tenant?.businessUrl?.replace(/\/$/, "");
       if (!tenant || !base || !tenant.businessToken) throw new Error("no tenant selected");
@@ -1954,24 +2045,24 @@ async function runSupport(session, action2, args) {
 }
 
 // src/workflows/common.ts
-import { mkdir as mkdir3, readFile as readFile5, writeFile as writeFile3 } from "fs/promises";
-import { dirname as dirname4, join as join5, resolve as resolve4 } from "path";
+import { mkdir as mkdir4, readFile as readFile6, writeFile as writeFile4 } from "fs/promises";
+import { dirname as dirname4, join as join6, resolve as resolve4 } from "path";
 import { homedir as homedir2 } from "os";
-var workspaceRoot = () => resolve4(process.env.CXCLAW_WORKSPACE ?? join5(homedir2(), ".cxclaw", "workspace"));
-var stateRoot = (domain) => resolve4(process.env.CXCLAW_STATE_DIR ?? join5(workspaceRoot(), "state"), domain);
-var outputRoot = (domain) => resolve4(process.env.CXCLAW_OUTPUT_DIR ?? join5(workspaceRoot(), "outputs"), domain);
+var workspaceRoot = () => resolve4(process.env.CXCLAW_WORKSPACE ?? join6(homedir2(), ".cxclaw", "workspace"));
+var stateRoot = (domain) => resolve4(process.env.CXCLAW_STATE_DIR ?? join6(workspaceRoot(), "state"), domain);
+var outputRoot = (domain) => resolve4(process.env.CXCLAW_OUTPUT_DIR ?? join6(workspaceRoot(), "outputs"), domain);
 async function ensureParent(file) {
-  await mkdir3(dirname4(file), { recursive: true });
+  await mkdir4(dirname4(file), { recursive: true });
 }
 async function ensureDir(directory) {
-  await mkdir3(directory, { recursive: true });
+  await mkdir4(directory, { recursive: true });
 }
 async function readJson3(file) {
-  return JSON.parse(await readFile5(file, "utf8"));
+  return JSON.parse(await readFile6(file, "utf8"));
 }
 async function writeJson3(file, value) {
   await ensureParent(file);
-  await writeFile3(file, `${JSON.stringify(value, null, 2)}
+  await writeFile4(file, `${JSON.stringify(value, null, 2)}
 `, "utf8");
 }
 function intOption(args, name, fallback) {
@@ -1989,7 +2080,7 @@ function htmlEscape(value) {
 }
 async function writeHtml(file, title, body) {
   await ensureParent(file);
-  await writeFile3(file, `<!doctype html><html><head><meta charset="utf-8"><title>${htmlEscape(title)}</title><style>body{font-family:system-ui,sans-serif;margin:2rem;line-height:1.5}pre{white-space:pre-wrap;background:#f6f8fa;padding:1rem;border-radius:8px}.card{border:1px solid #ddd;border-radius:8px;padding:1rem;margin:1rem 0}</style></head><body><h1>${htmlEscape(title)}</h1>${body}</body></html>`, "utf8");
+  await writeFile4(file, `<!doctype html><html><head><meta charset="utf-8"><title>${htmlEscape(title)}</title><style>body{font-family:system-ui,sans-serif;margin:2rem;line-height:1.5}pre{white-space:pre-wrap;background:#f6f8fa;padding:1rem;border-radius:8px}.card{border:1px solid #ddd;border-radius:8px;padding:1rem;margin:1rem 0}</style></head><body><h1>${htmlEscape(title)}</h1>${body}</body></html>`, "utf8");
 }
 function asRows(value) {
   if (Array.isArray(value)) return value.filter((item) => item && typeof item === "object");
@@ -2196,13 +2287,13 @@ async function runLocalAgentWorkflow(action2, args) {
 }
 async function writeFileText(file, content) {
   await ensureParent(file);
-  const { writeFile: writeFile4 } = await import("fs/promises");
-  await writeFile4(file, `${content}
+  const { writeFile: writeFile5 } = await import("fs/promises");
+  await writeFile5(file, `${content}
 `, "utf8");
 }
 
 // src/workflows/tester.ts
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import ExcelJS2 from "exceljs";
 async function casesFrom(file) {
   if (file.endsWith(".json")) return asRows(await readJson3(file));
@@ -2224,7 +2315,7 @@ async function casesFrom(file) {
 }
 async function createSheet(args) {
   const cases = option(args, "--cases-file") ? await casesFrom(option(args, "--cases-file")) : [];
-  const output = option(args, "--output") ?? join6(outputRoot("agent-tester"), `cases_${Date.now()}.xlsx`);
+  const output = option(args, "--output") ?? join7(outputRoot("agent-tester"), `cases_${Date.now()}.xlsx`);
   await ensureParent(output);
   const workbook = new ExcelJS2.Workbook();
   const sheet = workbook.addWorksheet("cases");
@@ -2250,7 +2341,7 @@ async function runAgentTester(session, action2, args) {
 }
 
 // src/workflows/delivery.ts
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 import ExcelJS3 from "exceljs";
 var KNOWN_INTENTS = ["Product Recommendation", "Discount Inquiry", "Price Inquiry", "Stock Availability", "Payment Issues", "Request Invoice", "Modify Order", "Check Order Status", "Cancel Order", "Track Shipment", "Shipping Exception", "Missing Items", "Wrong Items Received", "Damaged Package", "Product Usage", "Return and exchange"];
 async function loadRows(file) {
@@ -2284,7 +2375,7 @@ async function writeRows(file, rows) {
   const keys = [...new Set(rows.flatMap((row) => Object.keys(row)))];
   sheet.addRow(keys);
   rows.forEach((row) => sheet.addRow(keys.map((key) => row[key] ?? "")));
-  await ensureDir(join7(file, ".."));
+  await ensureDir(join8(file, ".."));
   await workbook.xlsx.writeFile(file);
 }
 function classify(text) {
@@ -2305,13 +2396,13 @@ async function classifyCases(args, domain) {
   const intents = [...grouped.entries()].map(([name, items]) => ({ name, definition: `Customer requests and issues related to ${name}.`, count: items.length, pct: rows.length ? items.length / rows.length : 0, samples: items.slice(0, 5), is_new: name === "New Intent" }));
   const runId = option(args, "--run-id") ?? Date.now().toString();
   const result = { meta: { run_id: runId, total: rows.length, classified: rows.length, mode: noExcel ? "no-excel" : "structured", domain }, intents, new_intents: intents.filter((item) => item.is_new) };
-  const out = option(args, "--results") ?? join7(outputRoot(domain), `results_${runId}.json`);
+  const out = option(args, "--results") ?? join8(outputRoot(domain), `results_${runId}.json`);
   await writeJson3(out, result);
-  await writeJson3(join7(stateRoot(domain), "progress.json"), { status: "classified", run_id: runId, results_path: out, updated_at: (/* @__PURE__ */ new Date()).toISOString() });
+  await writeJson3(join8(stateRoot(domain), "progress.json"), { status: "classified", run_id: runId, results_path: out, updated_at: (/* @__PURE__ */ new Date()).toISOString() });
   return { ...result.meta, resultsPath: out };
 }
 async function plan(domain, args) {
-  const file = join7(stateRoot(domain), "progress.json");
+  const file = join8(stateRoot(domain), "progress.json");
   let current = {};
   try {
     current = await readJson3(file);
@@ -2335,7 +2426,7 @@ async function plan(domain, args) {
 async function runBatch(client, args, domain) {
   const input = option(args, "--input") ?? option(args, "--test-file", true);
   const rows = await loadRows(input);
-  const output = option(args, "--output") ?? join7(outputRoot(domain), `test_results_${Date.now()}.json`);
+  const output = option(args, "--output") ?? join8(outputRoot(domain), `test_results_${Date.now()}.json`);
   const workers = Math.max(1, Math.min(intOption(args, "--workers", 4), 16));
   const results = [];
   let cursor = 0;
@@ -2359,7 +2450,7 @@ async function runBatch(client, args, domain) {
   return { output, total: results.length, succeeded: results.filter((row) => row.ok).length, failed: results.filter((row) => !row.ok).length };
 }
 async function createAgents(client, args, domain) {
-  const state2 = await readJson3(join7(stateRoot(domain), "progress.json")).catch(() => ({}));
+  const state2 = await readJson3(join8(stateRoot(domain), "progress.json")).catch(() => ({}));
   const resultsPath = option(args, "--results") ?? (typeof state2.results_path === "string" ? state2.results_path : void 0);
   if (!resultsPath) throw new Error("classification results are required");
   const result = await readJson3(resultsPath);
@@ -2370,12 +2461,12 @@ async function createAgents(client, args, domain) {
   return { created, count: created.length };
 }
 async function renderReport(args, domain) {
-  const progress = await readJson3(join7(stateRoot(domain), "progress.json")).catch(() => ({}));
+  const progress = await readJson3(join8(stateRoot(domain), "progress.json")).catch(() => ({}));
   const resultsFile = option(args, "--results") ?? option(args, "--input") ?? (typeof progress.results_path === "string" ? progress.results_path : void 0);
   if (!resultsFile) throw new Error("--results/--input is required, or run classify first");
   const value = await readJson3(resultsFile);
   const rows = asRows(value.results ?? value.items ?? value);
-  const output = option(args, "--html") ?? option(args, "--output") ?? join7(outputRoot(domain), `${domain}_report.html`);
+  const output = option(args, "--html") ?? option(args, "--output") ?? join8(outputRoot(domain), `${domain}_report.html`);
   const body = `<p>Total: ${rows.length}</p>${rows.map((row, index) => `<div class="card"><h2>${index + 1}. ${htmlEscape(row.intent ?? row.question ?? row.message ?? "Case")}</h2><pre>${htmlEscape(JSON.stringify(row, null, 2))}</pre></div>`).join("")}`;
   await writeHtml(output, option(args, "--title") ?? `${domain} report`, body);
   const md = option(args, "--md");
@@ -2386,12 +2477,12 @@ Total: ${rows.length}
   return { output, count: rows.length };
 }
 async function genExcel(args, domain) {
-  const progress = await readJson3(join7(stateRoot(domain), "progress.json")).catch(() => ({}));
+  const progress = await readJson3(join8(stateRoot(domain), "progress.json")).catch(() => ({}));
   const input = option(args, "--results") ?? option(args, "--items") ?? (typeof progress.results_path === "string" ? progress.results_path : void 0);
   if (!input) throw new Error("--results or --items is required, or run classify first");
   const value = await readJson3(input);
   const rows = asRows(value);
-  const output = option(args, "--output") ?? join7(outputRoot(domain), `${domain}_results.xlsx`);
+  const output = option(args, "--output") ?? join8(outputRoot(domain), `${domain}_results.xlsx`);
   await writeRows(output, rows);
   return { output, count: rows.length };
 }
@@ -2431,7 +2522,7 @@ async function runDomain(session, domain, action2, args) {
 }
 
 // src/workflows/kb-builder.ts
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import ExcelJS4 from "exceljs";
 var clean = (value) => String(value ?? "").replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
 var absolute = (href, base) => {
@@ -2465,7 +2556,7 @@ async function crawl(args) {
     }
   }
   const result = { url, mode: option(args, "--mode") ?? "auto", pages, fetchedAt: (/* @__PURE__ */ new Date()).toISOString(), total: pages.length };
-  const output = option(args, "--output") ?? join8(outputRoot("kb-builder"), "crawl_result.json");
+  const output = option(args, "--output") ?? join9(outputRoot("kb-builder"), "crawl_result.json");
   await writeJson3(output, result);
   return { ...result, output };
 }
@@ -2480,13 +2571,13 @@ async function directoryPlan(args) {
   }
   const tree = [...groups.entries()].map(([name, pages]) => ({ name, children: pages.slice(0, 100).map((page2) => ({ name: String(page2.title ?? page2.url), sourceUrl: page2.url })) }));
   const result = { source: option(args, "--crawl-result"), generatedAt: (/* @__PURE__ */ new Date()).toISOString(), tree, confirmed: false };
-  const output = option(args, "--output") ?? join8(outputRoot("kb-builder"), "directory_plan.json");
+  const output = option(args, "--output") ?? join9(outputRoot("kb-builder"), "directory_plan.json");
   await writeJson3(output, result);
-  if (flag(args, "--write-confirmed-tree")) await writeJson3(join8(stateRoot("kb-builder"), "confirmed_tree.json"), { ...result, confirmed: true });
+  if (flag(args, "--write-confirmed-tree")) await writeJson3(join9(stateRoot("kb-builder"), "confirmed_tree.json"), { ...result, confirmed: true });
   return { output, directories: tree.length, pages: rows.length, tree };
 }
 async function createDirectories(client, args) {
-  const file = option(args, "--tree-file") ?? join8(stateRoot("kb-builder"), "confirmed_tree.json");
+  const file = option(args, "--tree-file") ?? join9(stateRoot("kb-builder"), "confirmed_tree.json");
   const value = await readJson3(file);
   const tree = Array.isArray(value.tree) ? value.tree : Array.isArray(value) ? value : [];
   if (!tree.length) throw new Error("confirmed directory tree is empty");
@@ -2509,12 +2600,12 @@ async function createDirectories(client, args) {
 async function extractWebQa(args) {
   const input = await readJson3(option(args, "--crawl-result", true));
   const pages = asRows(input.pages ?? input).slice(0, intOption(args, "--max-pages", 80));
-  const outputDir2 = option(args, "--output-dir") ?? join8(outputRoot("kb-builder"), "qa_parts");
+  const outputDir2 = option(args, "--output-dir") ?? join9(outputRoot("kb-builder"), "qa_parts");
   await ensureDir(outputDir2);
   const parts = pages.map((page2, index) => ({ question: String(page2.title ?? page2.url), answer: String(page2.text ?? "").slice(0, intOption(args, "--answer-limit", 3500)), sourceUrl: page2.url, sourceTitle: page2.title, index }));
   const files = [];
   for (const [index, part] of parts.entries()) {
-    const file = join8(outputDir2, `part_${String(index + 1).padStart(4, "0")}.json`);
+    const file = join9(outputDir2, `part_${String(index + 1).padStart(4, "0")}.json`);
     await writeJson3(file, { items: [part] });
     files.push(file);
   }
@@ -2580,9 +2671,9 @@ async function importQa(client, args) {
     items.push(...Array.isArray(value) ? value : value.items && Array.isArray(value.items) ? value.items : [value]);
   }
   if (fromDir) {
-    const { readdir } = await import("fs/promises");
-    for (const file of (await readdir(fromDir)).filter((name) => name.endsWith(".json")).sort()) {
-      const value = await readJson3(join8(fromDir, file));
+    const { readdir: readdir2 } = await import("fs/promises");
+    for (const file of (await readdir2(fromDir)).filter((name) => name.endsWith(".json")).sort()) {
+      const value = await readJson3(join9(fromDir, file));
       items.push(...Array.isArray(value) ? value : value.items && Array.isArray(value.items) ? value.items : [value]);
     }
   }
@@ -2590,7 +2681,7 @@ async function importQa(client, args) {
   if (!Number.isSafeInteger(maxDepth) || maxDepth <= 0) throw new Error("--max-depth must be a positive integer");
   const normalized = validateQaItems(items, maxDepth);
   const plan2 = { items, count: items.length, createdAt: (/* @__PURE__ */ new Date()).toISOString() };
-  const planFile = join8(outputRoot("kb-builder"), `qa_import_plan_${Date.now()}.json`);
+  const planFile = join9(outputRoot("kb-builder"), `qa_import_plan_${Date.now()}.json`);
   await writeJson3(planFile, plan2);
   if (flag(args, "--dry-run")) return { dryRun: true, planFile, count: items.length };
   const directories = flattenDirectories(asRows(await client.listDirectories()));
@@ -2665,7 +2756,7 @@ async function importTemplates(client, args) {
     });
   }
   const items = rows.map((row) => ({ name: String(row.name ?? row.Name ?? "").trim(), content: String(row.content ?? row.Content ?? row.template ?? ""), status: row.status ?? row.Status ?? "ENABLED", scene: row.scene ?? row.Scene })).filter((item) => item.name && item.content);
-  const output = option(args, "--output") ?? join8(outputRoot("kb-builder"), `template_import_plan_${Date.now()}.json`);
+  const output = option(args, "--output") ?? join9(outputRoot("kb-builder"), `template_import_plan_${Date.now()}.json`);
   await writeJson3(output, { items, count: items.length });
   if (flag(args, "--dry-run")) return { dryRun: true, output, count: items.length };
   const results = [];
@@ -2680,13 +2771,13 @@ async function exportKnowledge(client, args) {
     const value = await client.listKnowledge({ directoryId: id, keyword: option(args, "--keyword") ?? "", type: option(args, "--type") ?? "ALL", pageSize: intOption(args, "--page-size", 1e3) });
     rows.push(...asRows(value).map((row) => ({ ...row, directoryId: id, directoryName: directories.find((dir) => Number(dir.id ?? dir.directoryId) === id)?.name ?? "" })));
   }
-  const output = option(args, "--output") ?? join8(outputRoot("kb-builder"), `knowledge_${Date.now()}.xlsx`);
+  const output = option(args, "--output") ?? join9(outputRoot("kb-builder"), `knowledge_${Date.now()}.xlsx`);
   const workbook = new ExcelJS4.Workbook();
   const sheet = workbook.addWorksheet("knowledge");
   const keys = [...new Set(rows.flatMap((row) => Object.keys(row)))];
   sheet.addRow(keys);
   for (const row of rows) sheet.addRow(keys.map((key) => row[key] ?? ""));
-  await ensureDir(join8(output, ".."));
+  await ensureDir(join9(output, ".."));
   await workbook.xlsx.writeFile(output);
   return { output, count: rows.length };
 }
@@ -2727,7 +2818,7 @@ async function extractTicketQa(args) {
     const answer = String(record[replyCol] ?? "").trim();
     if (question && question !== `${brand}:`) items.push({ question, answer, sourceRow: number });
   });
-  const output = option(args, "--output") ?? join8(outputRoot("kb-builder"), `ticket_qa_${Date.now()}.json`);
+  const output = option(args, "--output") ?? join9(outputRoot("kb-builder"), `ticket_qa_${Date.now()}.json`);
   const result = { brand, count: items.length, items };
   await writeJson3(output, result);
   if (flag(args, "--dry-run")) return { dryRun: true, output, count: items.length };
@@ -2735,12 +2826,12 @@ async function extractTicketQa(args) {
 }
 
 // src/workflows/desk.ts
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 import ExcelJS5 from "exceljs";
 var taskId = (args) => option(args, "--task-id") ?? (/* @__PURE__ */ new Date()).toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
-var taskDir = (args) => join9(stateRoot("solvea-desk"), taskId(args));
+var taskDir = (args) => join10(stateRoot("solvea-desk"), taskId(args));
 async function saveDatasource(dir, name, rows) {
-  const file = join9(dir, name);
+  const file = join10(dir, name);
   await ensureParent(file);
   const workbook = new ExcelJS5.Workbook();
   const sheet = workbook.addWorksheet("data");
@@ -2763,7 +2854,7 @@ async function fetchTickets(client, args) {
     if (pageRows.length < pageSize2) break;
   }
   const output = await saveDatasource(dir, "datasource.xlsx", rows);
-  await writeJson3(join9(dir, "metadata.json"), { taskId: taskId(args), rows: rows.length, output });
+  await writeJson3(join10(dir, "metadata.json"), { taskId: taskId(args), rows: rows.length, output });
   return { taskId: taskId(args), output, count: rows.length };
 }
 async function fetchSources(client, args) {
@@ -2774,7 +2865,7 @@ async function fetchSources(client, args) {
   const rows = asRows(value).slice(0, intOption(args, "--max-rows", 1e4));
   sources.tickets = rows;
   const output = await saveDatasource(dir, "datasource.xlsx", rows);
-  await writeJson3(join9(dir, "sources.json"), sources);
+  await writeJson3(join10(dir, "sources.json"), sources);
   return { taskId: taskId(args), output, count: rows.length };
 }
 async function tags(client, action2, args) {
@@ -2801,10 +2892,10 @@ async function tags(client, action2, args) {
   throw new Error(`unknown tag action: ${action2}`);
 }
 async function renderReport2(args) {
-  const dir = taskDir(args), dataFile = option(args, "--report-data") ?? join9(dir, "report_data.json"), notesFile = option(args, "--notes") ?? join9(dir, "calculation_notes.json");
+  const dir = taskDir(args), dataFile = option(args, "--report-data") ?? join10(dir, "report_data.json"), notesFile = option(args, "--notes") ?? join10(dir, "calculation_notes.json");
   const data3 = await readJson3(dataFile);
   if (flag(args, "--validate-only")) return { valid: true, dataFile };
-  const output = option(args, "--output") ?? join9(outputRoot("solvea-desk"), taskId(args), `${option(args, "--report-slug") ?? "report"}.html`);
+  const output = option(args, "--output") ?? join10(outputRoot("solvea-desk"), taskId(args), `${option(args, "--report-slug") ?? "report"}.html`);
   const body = `<pre>${htmlEscape(JSON.stringify({ data: data3, notes: await readJson3(notesFile).catch(() => ({})) }, null, 2))}</pre>`;
   await writeHtml(output, option(args, "--report-slug") ?? "Solvea Desk report", body);
   return { output, valid: true };
@@ -2835,6 +2926,7 @@ async function runAuth(action2, args) {
     const session = await login(option(args, "--channel") ?? "stable");
     return print(publicAuthStatus(session));
   }
+  if (action2 === "ensure") return print(publicAuthStatus(await authenticated()));
   if (action2 === "logout") {
     await logout();
     return print({ ok: true, loggedOut: true });
@@ -2850,7 +2942,7 @@ async function runAuth(action2, args) {
   if (action2 === "refresh") {
     return print(publicAuthStatus(await authenticated()));
   }
-  throw new Error("auth action must be login, logout, status, or refresh");
+  throw new Error("auth action must be login, ensure, logout, status, or refresh");
 }
 async function runTenant(action2, args) {
   const session = await authenticated();
@@ -2923,7 +3015,7 @@ async function main(args = process.argv.slice(2)) {
     if (flag(args, "--scheduled")) await new Promise((resolve5) => setTimeout(resolve5, Math.random() * 18e5));
     return print(await update());
   }
-  if (command === "commands" || command === "capabilities") console.log(await readFile6(new URL("../capabilities.lock.json", import.meta.url), "utf8"));
+  if (command === "commands" || command === "capabilities") console.log(await readFile7(new URL("../capabilities.lock.json", import.meta.url), "utf8"));
   else throw new Error(`unknown command: ${command}`);
 }
 main().catch((error) => {