@skaile/workspaces 6.9.0 → 6.10.0

package/dist/chunk-JY2JXCL6.js

@@ -1,334 +0,0 @@
-import { loadDeclaredPlugins } from './chunk-TMQFOJ6F.js';
-import { unknownHarnessMessage, logErr, logWarn } from './chunk-V3EJYOP2.js';
-import { resolveAgentDefinitionDir, AgentRefResolutionError, normalizeAgentInstances, agentBlockKeyDiagnostics, agentInstanceDiagnostics, loadSkWorkspaceConfig, SKAILE_YAML_DEFAULT } from './chunk-FZO64PLQ.js';
-import fs from 'fs';
-import path from 'path';
-import { parse } from 'yaml';
-
-// cli/src/type-guards.ts
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-
-// cli/src/commands/validate-instances.ts
-var AGENT_MANIFEST_FILE = "agent.yaml";
-var TRIGGER_REQUIRED_FIELDS = {
-  schedule: ["cron", "prompt"],
-  webhook: ["prompt"],
-  channel: ["when"],
-  event: ["event"]
-};
-var err = (code, message, at) => ({
-  code,
-  severity: "error",
-  message,
-  path: at
-});
-function readAssetFacts(manifest) {
-  const facts = {
-    lifecycle: manifest.lifecycle,
-    hasIo: manifest.io !== void 0 && manifest.io !== null,
-    connectorSlots: [],
-    otherSlots: [],
-    triggerIds: []
-  };
-  for (const item of Array.isArray(manifest.composes) ? manifest.composes : []) {
-    if (!isRecord(item) || typeof item.id !== "string") continue;
-    (item.kind === "connector" ? facts.connectorSlots : facts.otherSlots).push(item.id);
-  }
-  for (const t of Array.isArray(manifest.triggers) ? manifest.triggers : []) {
-    if (isRecord(t) && typeof t.id === "string") facts.triggerIds.push(t.id);
-  }
-  return facts;
-}
-function agentDefinitionProblem(projectDir, definition) {
-  let dir;
-  try {
-    dir = resolveAgentDefinitionDir(projectDir, definition);
-  } catch (e) {
-    if (!(e instanceof AgentRefResolutionError)) throw e;
-    return e.message;
-  }
-  if (dir === void 0) {
-    return `agent.definition "${definition}": no ai-assets/ directory above the project`;
-  }
-  if (path.basename(dir) === AGENT_MANIFEST_FILE) dir = path.dirname(dir);
-  if (!fs.existsSync(path.join(dir, AGENT_MANIFEST_FILE))) {
-    return `agent.definition "${definition}": no ${AGENT_MANIFEST_FILE} in ${dir}`;
-  }
-  return null;
-}
-function loadAsset(projectDir, id, ref) {
-  const at = `agents.${id}.ref`;
-  let dir;
-  try {
-    dir = resolveAgentDefinitionDir(projectDir, ref);
-  } catch (e) {
-    if (!(e instanceof AgentRefResolutionError)) throw e;
-    return { diagnostic: err("agent_ref_unresolved", `agents.${id}: ${e.message}`, at) };
-  }
-  if (dir === void 0) {
-    return {
-      diagnostic: err(
-        "agent_ref_unresolved",
-        `agents.${id}: ref "${ref}" cannot be resolved \u2014 no ai-assets/ directory above the project`,
-        at
-      )
-    };
-  }
-  const manifestPath = path.join(dir, AGENT_MANIFEST_FILE);
-  let text;
-  try {
-    text = fs.readFileSync(manifestPath, "utf-8");
-  } catch {
-    return {
-      diagnostic: err(
-        "agent_ref_unresolved",
-        `agents.${id}: ref "${ref}" resolves to ${dir}, which has no ${AGENT_MANIFEST_FILE}`,
-        at
-      )
-    };
-  }
-  let manifest;
-  try {
-    manifest = parse(text);
-  } catch (e) {
-    return {
-      diagnostic: err(
-        "agent_manifest_invalid",
-        `agents.${id}: ${manifestPath} is not valid YAML: ${e instanceof Error ? e.message : String(e)}`,
-        at
-      )
-    };
-  }
-  if (!isRecord(manifest)) {
-    return {
-      diagnostic: err(
-        "agent_manifest_invalid",
-        `agents.${id}: ${manifestPath} is not a mapping`,
-        at
-      )
-    };
-  }
-  return { facts: readAssetFacts(manifest) };
-}
-function instanceRefProblem(projectDir, id, ref) {
-  const loaded = loadAsset(projectDir, id, ref);
-  return "diagnostic" in loaded && loaded.diagnostic.code === "agent_ref_unresolved" ? loaded.diagnostic.message : null;
-}
-function checkTriggers(id, triggers, assetTriggerIds) {
-  const out = [];
-  const seen = /* @__PURE__ */ new Set();
-  triggers.forEach((trigger, i) => {
-    const at = `agents.${id}.triggers[${i}]`;
-    if (seen.has(trigger.id)) {
-      out.push(
-        err(
-          "agent_trigger_duplicate",
-          `agents.${id}: trigger id "${trigger.id}" is declared twice`,
-          `${at}.id`
-        )
-      );
-      return;
-    }
-    seen.add(trigger.id);
-    if (!assetTriggerIds || assetTriggerIds.includes(trigger.id)) return;
-    if (!trigger.kind) {
-      out.push(
-        err(
-          "agent_trigger_unknown",
-          `agents.${id}: trigger "${trigger.id}" is not declared by the agent asset (${assetTriggerIds.length > 0 ? `has: ${assetTriggerIds.join(", ")}` : "it declares no triggers"}) \u2014 add \`kind\` and the trigger's fields to declare a new one`,
-          `${at}.id`
-        )
-      );
-      return;
-    }
-    const missing = TRIGGER_REQUIRED_FIELDS[trigger.kind].filter(
-      (field) => trigger[field] === void 0
-    );
-    if (missing.length > 0) {
-      out.push(
-        err(
-          "agent_trigger_incomplete",
-          `agents.${id}: trigger "${trigger.id}" (kind ${trigger.kind}) is not in the asset, so it must declare ${missing.join(", ")}`,
-          at
-        )
-      );
-    }
-  });
-  return out;
-}
-function checkConnectors(id, instance, facts, connectorIds) {
-  const out = [];
-  for (const [slot, connectorId] of Object.entries(instance.connectors ?? {})) {
-    const at = `agents.${id}.connectors.${slot}`;
-    if (!facts.connectorSlots.includes(slot)) {
-      const hint = facts.otherSlots.includes(slot) ? `"${slot}" is a slot of a non-connector item` : facts.connectorSlots.length > 0 ? `the asset's connector slots are: ${facts.connectorSlots.join(", ")}` : "the asset declares no connector slots";
-      out.push(
-        err(
-          "agent_connector_slot_unknown",
-          `agents.${id}: connectors.${slot} is not a connector slot id of the agent asset (${hint})`,
-          at
-        )
-      );
-    }
-    if (!connectorIds.includes(connectorId)) {
-      out.push(
-        err(
-          "agent_connector_unknown",
-          `agents.${id}: connectors.${slot} points at "${connectorId}", which is not in skaile.yaml connectors[]${connectorIds.length > 0 ? ` (has: ${connectorIds.join(", ")})` : ""}`,
-          at
-        )
-      );
-    }
-  }
-  return out;
-}
-function checkAgentInstances(projectDir, parsed) {
-  const diagnostics = [];
-  const instances = normalizeAgentInstances(parsed.agents, diagnostics);
-  const agent = isRecord(parsed.agent) ? parsed.agent : void 0;
-  diagnostics.push(...agentBlockKeyDiagnostics(parsed.agent));
-  if (agent?.subagents !== void 0) {
-    diagnostics.push(
-      err(
-        "agent_subagents_removed",
-        "`agent.subagents` was removed \u2014 declare each subagent as an agent asset and bind it under `agents:` with `lifecycle: role`",
-        "agent.subagents"
-      )
-    );
-  }
-  if (agent?.instances !== void 0) {
-    diagnostics.push(
-      err(
-        "misplaced_agent_instances",
-        "`agent.instances` is not a skaile.yaml key \u2014 declare instances under root `agents:`",
-        "agent.instances"
-      )
-    );
-  }
-  diagnostics.push(
-    ...agentInstanceDiagnostics({
-      agent: {
-        definition: typeof agent?.definition === "string" ? agent.definition : void 0,
-        instances
-      }
-    })
-  );
-  if (typeof agent?.definition === "string" && agent.definition !== "") {
-    const problem = agentDefinitionProblem(projectDir, agent.definition);
-    if (problem) diagnostics.push(err("agent_ref_unresolved", problem, "agent.definition"));
-  }
-  if (!instances) return diagnostics;
-  const connectorIds = (Array.isArray(parsed.connectors) ? parsed.connectors : []).flatMap(
-    (c) => isRecord(c) && typeof c.id === "string" ? [c.id] : []
-  );
-  for (const [id, instance] of Object.entries(instances)) {
-    const loaded = loadAsset(projectDir, id, instance.ref);
-    if ("diagnostic" in loaded) {
-      diagnostics.push(loaded.diagnostic, ...checkTriggers(id, instance.triggers ?? [], void 0));
-      continue;
-    }
-    const { facts } = loaded;
-    const lifecycle = instance.lifecycle ?? facts.lifecycle ?? "standing";
-    if (lifecycle === "role" && !facts.hasIo) {
-      diagnostics.push(
-        err(
-          "agent_role_missing_io",
-          `agents.${id}: lifecycle "role" needs the agent asset to declare \`io\` ({ input, output } JSON Schemas)`,
-          `agents.${id}.lifecycle`
-        )
-      );
-    }
-    diagnostics.push(...checkConnectors(id, instance, facts, connectorIds));
-    diagnostics.push(...checkTriggers(id, instance.triggers ?? [], facts.triggerIds));
-  }
-  return diagnostics;
-}
-function unknownKeyWarnings(diagnostics, label) {
-  return diagnostics.filter((d) => d.code === "unknown_config_key" || d.code === "unknown_profile_key").map((d) => `${label}: ${d.message}`);
-}
-var CONNECTOR_ERROR_CODES = [
-  "connector_missing_driver",
-  "connector_missing_id",
-  "connector_duplicate_id",
-  "connector_invalid_access"
-];
-var CONNECTOR_SERVE_REFUSAL_CODES = CONNECTOR_ERROR_CODES.filter(
-  (code) => code !== "connector_missing_driver"
-);
-function connectorErrorLines(diagnostics, label, codes = CONNECTOR_ERROR_CODES) {
-  return diagnostics.filter((d) => codes.includes(d.code)).map((d) => `${label} [connectors] \u2014 ${d.code}: ${d.path ? `${d.path}: ` : ""}${d.message}`);
-}
-var AGENT_CONFIG_KEY_CODES = ["deprecated_harness_key", "retired_agent_key"];
-function agentConfigKeyWarnings(diagnostics, label) {
-  return diagnostics.filter((d) => AGENT_CONFIG_KEY_CODES.includes(d.code)).map((d) => `${label} [agent-config] \u2014 ${d.code}: ${d.message}`);
-}
-async function unknownHarnessErrors(projectDir, config, label) {
-  const profiles = Object.entries(config.agent_config ?? {}).filter(
-    (e) => typeof e[1]?.harness === "string"
-  );
-  if (profiles.every(([, p]) => unknownHarnessMessage(p.harness) === void 0)) return [];
-  await loadDeclaredPlugins(projectDir);
-  const errors = [];
-  for (const [name, p] of profiles) {
-    const refusal = unknownHarnessMessage(p.harness);
-    if (refusal) errors.push(`${label}: agent-config.${name}.harness: ${refusal}`);
-  }
-  return errors;
-}
-async function reportUnknownHarnesses(projectDir) {
-  let config;
-  try {
-    config = loadSkWorkspaceConfig(projectDir)?.config;
-  } catch {
-    return 0;
-  }
-  if (!config) return 0;
-  const errors = await unknownHarnessErrors(projectDir, config, "skaile.yaml");
-  for (const line of errors) logErr(line);
-  return errors.length;
-}
-function agentInstanceDiagnostics2(projectDir) {
-  let parsed;
-  try {
-    parsed = parse(fs.readFileSync(path.join(projectDir, SKAILE_YAML_DEFAULT), "utf-8"));
-  } catch {
-    return [];
-  }
-  if (typeof parsed !== "object" || parsed === null) return [];
-  return checkAgentInstances(projectDir, parsed);
-}
-function agentInstanceLine(d) {
-  return `${SKAILE_YAML_DEFAULT} [agents] \u2014 ${d.code}: ${d.path ? `${d.path}: ` : ""}${d.message}`;
-}
-function agentInstanceErrorLines(projectDir) {
-  return agentInstanceDiagnostics2(projectDir).filter((d) => d.severity === "error" && d.code !== "agent_ref_unresolved").map(agentInstanceLine);
-}
-function agentInstanceWarningLines(projectDir) {
-  return agentInstanceDiagnostics2(projectDir).filter(
-    (d) => d.severity === "warning" && (d.code === "unknown_agent_instance_key" || d.code === "unknown_agent_key")
-  ).map(agentInstanceLine);
-}
-async function reportProjectConfig(projectDir, opts) {
-  let file;
-  try {
-    file = loadSkWorkspaceConfig(projectDir);
-  } catch {
-    return 0;
-  }
-  if (!file) return 0;
-  for (const line of unknownKeyWarnings(file.diagnostics ?? [], "skaile.yaml")) logWarn(line);
-  for (const line of agentConfigKeyWarnings(file.diagnostics ?? [], "skaile.yaml")) logWarn(line);
-  for (const line of agentInstanceWarningLines(projectDir)) logWarn(line);
-  const errors = [
-    ...opts.harness ? await unknownHarnessErrors(projectDir, file.config, "skaile.yaml") : [],
-    ...opts.instances ? agentInstanceErrorLines(projectDir) : []
-  ];
-  for (const line of errors) logErr(line);
-  return errors.length;
-}
-
-export { CONNECTOR_SERVE_REFUSAL_CODES, agentDefinitionProblem, agentInstanceErrorLines, agentInstanceWarningLines, checkAgentInstances, connectorErrorLines, instanceRefProblem, isRecord, reportProjectConfig, reportUnknownHarnesses, unknownHarnessErrors, unknownKeyWarnings };
-//# sourceMappingURL=chunk-JY2JXCL6.js.map
-//# sourceMappingURL=chunk-JY2JXCL6.js.map

package/dist/chunk-JY2JXCL6.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../cli/src/type-guards.ts","../cli/src/commands/validate-instances.ts","../cli/src/config-checks.ts"],"names":["parseYaml","agentInstanceDiagnostics","fs","path"],"mappings":";;;;;;;;AACO,SAAS,SAAS,KAAA,EAAkD;AACzE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;;;ACqBA,IAAM,mBAAA,GAAsB,YAAA;AAG5B,IAAM,uBAAA,GAAuF;AAAA,EAC3F,QAAA,EAAU,CAAC,MAAA,EAAQ,QAAQ,CAAA;AAAA,EAC3B,OAAA,EAAS,CAAC,QAAQ,CAAA;AAAA,EAClB,OAAA,EAAS,CAAC,MAAM,CAAA;AAAA,EAChB,KAAA,EAAO,CAAC,OAAO;AACjB,CAAA;AAEA,IAAM,GAAA,GAAM,CAAC,IAAA,EAAc,OAAA,EAAiB,EAAA,MAA4B;AAAA,EACtE,IAAA;AAAA,EACA,QAAA,EAAU,OAAA;AAAA,EACV,OAAA;AAAA,EACA,IAAA,EAAM;AACR,CAAA,CAAA;AAaA,SAAS,eAAe,QAAA,EAA+C;AACrE,EAAA,MAAM,KAAA,GAAoB;AAAA,IACxB,WAAW,QAAA,CAAS,SAAA;AAAA,IACpB,KAAA,EAAO,QAAA,CAAS,EAAA,KAAO,MAAA,IAAa,SAAS,EAAA,KAAO,IAAA;AAAA,IACpD,gBAAgB,EAAC;AAAA,IACjB,YAAY,EAAC;AAAA,IACb,YAAY;AAAC,GACf;AACA,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,GAAI,QAAA,CAAS,QAAA,GAAW,EAAC,EAAG;AAC5E,IAAA,IAAI,CAAC,QAAA,CAAS,IAAI,KAAK,OAAO,IAAA,CAAK,OAAO,QAAA,EAAU;AACpD,IAAA,CAAC,IAAA,CAAK,SAAS,WAAA,GAAc,KAAA,CAAM,iBAAiB,KAAA,CAAM,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,EAAE,CAAA;AAAA,EACpF;AACA,EAAA,KAAA,MAAW,CAAA,IAAK,MAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA,GAAI,QAAA,CAAS,QAAA,GAAW,EAAC,EAAG;AACzE,IAAA,IAAI,QAAA,CAAS,CAAC,CAAA,IAAK,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,EAAU,KAAA,CAAM,UAAA,CAAW,IAAA,CAAK,CAAA,CAAE,EAAE,CAAA;AAAA,EACzE;AACA,EAAA,OAAO,KAAA;AACT;AAOO,SAAS,sBAAA,CAAuB,YAAoB,UAAA,EAAmC;AAC5F,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,yBAAA,CAA0B,YAAY,UAAU,CAAA;AAAA,EACxD,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,EAAE,CAAA,YAAa,uBAAA,CAAA,EAA0B,MAAM,CAAA;AACnD,IAAA,OAAO,CAAA,CAAE,OAAA;AAAA,EACX;AACA,EAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,IAAA,OAAO,qBAAqB,UAAU,CAAA,4CAAA,CAAA;AAAA,EACxC;AACA,EAAA,IAAI,IAAA,CAAK,SAAS,GAAG,CAAA,KAAM,qBAAqB,GAAA,GAAM,IAAA,CAAK,QAAQ,GAAG,CAAA;AACtE,EAAA,IAAI,CAAC,GAAG,UAAA,CAAW,IAAA,CAAK,KAAK,GAAA,EAAK,mBAAmB,CAAC,CAAA,EAAG;AACvD,IAAA,OAAO,CAAA,kBAAA,EAAqB,UAAU,CAAA,MAAA,EAAS,mBAAmB,OAAO,GAAG,CAAA,CAAA;AAAA,EAC9E;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,SAAA,CACP,UAAA,EACA,EAAA,EACA,GAAA,EACoD;AACpD,EAAA,MAAM,EAAA,GAAK,UAAU,EAAE,CAAA,IAAA,CAAA;AACvB,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,yBAAA,CAA0B,YAAY,GAAG,CAAA;AAAA,EACjD,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,EAAE,CAAA,YAAa,uBAAA,CAAA,EAA0B,MAAM,CAAA;AACnD,IAAA,OAAO,EAAE,UAAA,EAAY,GAAA,CAAI,sBAAA,EAAwB,CAAA,OAAA,EAAU,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAA,EAAI,EAAE,CAAA,EAAE;AAAA,EACrF;AACA,EAAA,IAAI,QAAQ,MAAA,EAAW;AACrB,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,GAAA;AAAA,QACV,sBAAA;AAAA,QACA,CAAA,OAAA,EAAU,EAAE,CAAA,OAAA,EAAU,GAAG,CAAA,qEAAA,CAAA;AAAA,QACzB;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,mBAAmB,CAAA;AACvD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,EAAA,CAAG,YAAA,CAAa,YAAA,EAAc,OAAO,CAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,GAAA;AAAA,QACV,sBAAA;AAAA,QACA,UAAU,EAAE,CAAA,OAAA,EAAU,GAAG,CAAA,cAAA,EAAiB,GAAG,kBAAkB,mBAAmB,CAAA,CAAA;AAAA,QAClF;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,QAAA,GAAWA,MAAU,IAAI,CAAA;AAAA,EAC3B,SAAS,CAAA,EAAG;AACV,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,GAAA;AAAA,QACV,wBAAA;AAAA,QACA,CAAA,OAAA,EAAU,EAAE,CAAA,EAAA,EAAK,YAAY,CAAA,oBAAA,EAAuB,CAAA,YAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA,CAAA;AAAA,QAC9F;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,QAAQ,CAAA,EAAG;AACvB,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,GAAA;AAAA,QACV,wBAAA;AAAA,QACA,CAAA,OAAA,EAAU,EAAE,CAAA,EAAA,EAAK,YAAY,CAAA,iBAAA,CAAA;AAAA,QAC7B;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,cAAA,CAAe,QAAQ,CAAA,EAAE;AAC3C;AAOO,SAAS,kBAAA,CAAmB,UAAA,EAAoB,EAAA,EAAY,GAAA,EAA4B;AAC7F,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,UAAA,EAAY,EAAA,EAAI,GAAG,CAAA;AAC5C,EAAA,OAAO,YAAA,IAAgB,UAAU,MAAA,CAAO,UAAA,CAAW,SAAS,sBAAA,GACxD,MAAA,CAAO,WAAW,OAAA,GAClB,IAAA;AACN;AAOA,SAAS,aAAA,CACP,EAAA,EACA,QAAA,EACA,eAAA,EACc;AACd,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,OAAA,EAAS,CAAA,KAAM;AAC/B,IAAA,MAAM,EAAA,GAAK,CAAA,OAAA,EAAU,EAAE,CAAA,UAAA,EAAa,CAAC,CAAA,CAAA,CAAA;AACrC,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA,EAAG;AACxB,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,GAAA;AAAA,UACE,yBAAA;AAAA,UACA,CAAA,OAAA,EAAU,EAAE,CAAA,cAAA,EAAiB,OAAA,CAAQ,EAAE,CAAA,mBAAA,CAAA;AAAA,UACvC,GAAG,EAAE,CAAA,GAAA;AAAA;AACP,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,QAAQ,EAAE,CAAA;AACnB,IAAA,IAAI,CAAC,eAAA,IAAmB,eAAA,CAAgB,QAAA,CAAS,OAAA,CAAQ,EAAE,CAAA,EAAG;AAC9D,IAAA,IAAI,CAAC,QAAQ,IAAA,EAAM;AACjB,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,GAAA;AAAA,UACE,uBAAA;AAAA,UACA,CAAA,OAAA,EAAU,EAAE,CAAA,WAAA,EAAc,OAAA,CAAQ,EAAE,CAAA,sCAAA,EAAyC,eAAA,CAAgB,MAAA,GAAS,CAAA,GAAI,QAAQ,eAAA,CAAgB,IAAA,CAAK,IAAI,CAAC,KAAK,yBAAyB,CAAA,mEAAA,CAAA;AAAA,UAC1K,GAAG,EAAE,CAAA,GAAA;AAAA;AACP,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,uBAAA,CAAwB,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA;AAAA,MACpD,CAAC,KAAA,KAAW,OAAA,CAA+C,KAAK,CAAA,KAAM;AAAA,KACxE;AACA,IAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,GAAA;AAAA,UACE,0BAAA;AAAA,UACA,CAAA,OAAA,EAAU,EAAE,CAAA,WAAA,EAAc,OAAA,CAAQ,EAAE,CAAA,QAAA,EAAW,OAAA,CAAQ,IAAI,CAAA,0CAAA,EAA6C,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,UAC1H;AAAA;AACF,OACF;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,eAAA,CACP,EAAA,EACA,QAAA,EACA,KAAA,EACA,YAAA,EACc;AACd,EAAA,MAAM,MAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,WAAW,CAAA,IAAK,MAAA,CAAO,QAAQ,QAAA,CAAS,UAAA,IAAc,EAAE,CAAA,EAAG;AAC3E,IAAA,MAAM,EAAA,GAAK,CAAA,OAAA,EAAU,EAAE,CAAA,YAAA,EAAe,IAAI,CAAA,CAAA;AAC1C,IAAA,IAAI,CAAC,KAAA,CAAM,cAAA,CAAe,QAAA,CAAS,IAAI,CAAA,EAAG;AACxC,MAAA,MAAM,OAAO,KAAA,CAAM,UAAA,CAAW,SAAS,IAAI,CAAA,GACvC,IAAI,IAAI,CAAA,mCAAA,CAAA,GACR,MAAM,cAAA,CAAe,MAAA,GAAS,IAC5B,CAAA,iCAAA,EAAoC,KAAA,CAAM,eAAe,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA,GACnE,uCAAA;AACN,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,GAAA;AAAA,UACE,8BAAA;AAAA,UACA,CAAA,OAAA,EAAU,EAAE,CAAA,aAAA,EAAgB,IAAI,mDAAmD,IAAI,CAAA,CAAA,CAAA;AAAA,UACvF;AAAA;AACF,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,YAAA,CAAa,QAAA,CAAS,WAAW,CAAA,EAAG;AACvC,MAAA,GAAA,CAAI,IAAA;AAAA,QACF,GAAA;AAAA,UACE,yBAAA;AAAA,UACA,UAAU,EAAE,CAAA,aAAA,EAAgB,IAAI,CAAA,YAAA,EAAe,WAAW,CAAA,2CAAA,EAA8C,YAAA,CAAa,MAAA,GAAS,CAAA,GAAI,UAAU,YAAA,CAAa,IAAA,CAAK,IAAI,CAAC,MAAM,EAAE,CAAA,CAAA;AAAA,UAC3K;AAAA;AACF,OACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAQO,SAAS,mBAAA,CACd,YACA,MAAA,EACc;AACd,EAAA,MAAM,cAA4B,EAAC;AACnC,EAAA,MAAM,SAAA,GAAY,uBAAA,CAAwB,MAAA,CAAO,MAAA,EAAQ,WAAW,CAAA;AACpE,EAAA,MAAM,QAAQ,QAAA,CAAS,MAAA,CAAO,KAAK,CAAA,GAAI,OAAO,KAAA,GAAQ,MAAA;AACtD,EAAA,WAAA,CAAY,IAAA,CAAK,GAAG,wBAAA,CAAyB,MAAA,CAAO,KAAK,CAAC,CAAA;AAC1D,EAAA,IAAI,KAAA,EAAO,cAAc,MAAA,EAAW;AAClC,IAAA,WAAA,CAAY,IAAA;AAAA,MACV,GAAA;AAAA,QACE,yBAAA;AAAA,QACA,iIAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,IAAI,KAAA,EAAO,cAAc,MAAA,EAAW;AAClC,IAAA,WAAA,CAAY,IAAA;AAAA,MACV,GAAA;AAAA,QACE,2BAAA;AAAA,QACA,0FAAA;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF;AACA,EAAA,WAAA,CAAY,IAAA;AAAA,IACV,GAAG,wBAAA,CAAyB;AAAA,MAC1B,KAAA,EAAO;AAAA,QACL,YAAY,OAAO,KAAA,EAAO,UAAA,KAAe,QAAA,GAAW,MAAM,UAAA,GAAa,MAAA;AAAA,QACvE;AAAA;AACF,KACD;AAAA,GACH;AAEA,EAAA,IAAI,OAAO,KAAA,EAAO,UAAA,KAAe,QAAA,IAAY,KAAA,CAAM,eAAe,EAAA,EAAI;AACpE,IAAA,MAAM,OAAA,GAAU,sBAAA,CAAuB,UAAA,EAAY,KAAA,CAAM,UAAU,CAAA;AACnE,IAAA,IAAI,SAAS,WAAA,CAAY,IAAA,CAAK,IAAI,sBAAA,EAAwB,OAAA,EAAS,kBAAkB,CAAC,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,CAAC,WAAW,OAAO,WAAA;AAEvB,EAAA,MAAM,YAAA,GAAA,CAAgB,MAAM,OAAA,CAAQ,MAAA,CAAO,UAAU,CAAA,GAAI,MAAA,CAAO,UAAA,GAAa,EAAC,EAAG,OAAA;AAAA,IAAQ,CAAC,CAAA,KACxF,QAAA,CAAS,CAAC,CAAA,IAAK,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,GAAW,CAAC,CAAA,CAAE,EAAE,IAAI;AAAC,GACtD;AAEA,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,QAAQ,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtD,IAAA,MAAM,MAAA,GAAS,SAAA,CAAU,UAAA,EAAY,EAAA,EAAI,SAAS,GAAG,CAAA;AACrD,IAAA,IAAI,gBAAgB,MAAA,EAAQ;AAE1B,MAAA,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,UAAA,EAAY,GAAG,aAAA,CAAc,EAAA,EAAI,QAAA,CAAS,QAAA,IAAY,EAAC,EAAG,MAAS,CAAC,CAAA;AAC5F,MAAA;AAAA,IACF;AACA,IAAA,MAAM,EAAE,OAAM,GAAI,MAAA;AAClB,IAAA,MAAM,SAAA,GAAY,QAAA,CAAS,SAAA,IAAa,KAAA,CAAM,SAAA,IAAa,UAAA;AAC3D,IAAA,IAAI,SAAA,KAAc,MAAA,IAAU,CAAC,KAAA,CAAM,KAAA,EAAO;AACxC,MAAA,WAAA,CAAY,IAAA;AAAA,QACV,GAAA;AAAA,UACE,uBAAA;AAAA,UACA,UAAU,EAAE,CAAA,2FAAA,CAAA;AAAA,UACZ,UAAU,EAAE,CAAA,UAAA;AAAA;AACd,OACF;AAAA,IACF;AACA,IAAA,WAAA,CAAY,KAAK,GAAG,eAAA,CAAgB,IAAI,QAAA,EAAU,KAAA,EAAO,YAAY,CAAC,CAAA;AACtE,IAAA,WAAA,CAAY,IAAA,CAAK,GAAG,aAAA,CAAc,EAAA,EAAI,QAAA,CAAS,YAAY,EAAC,EAAG,KAAA,CAAM,UAAU,CAAC,CAAA;AAAA,EAClF;AACA,EAAA,OAAO,WAAA;AACT;ACvTO,SAAS,kBAAA,CAAmB,aAAoC,KAAA,EAAyB;AAC9F,EAAA,OAAO,YACJ,MAAA,CAAO,CAAC,MAAM,CAAA,CAAE,IAAA,KAAS,wBAAwB,CAAA,CAAE,IAAA,KAAS,qBAAqB,CAAA,CACjF,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACxC;AAGO,IAAM,qBAAA,GAA2C;AAAA,EACtD,0BAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF,CAAA;AAOO,IAAM,gCAAmD,qBAAA,CAAsB,MAAA;AAAA,EACpF,CAAC,SAAS,IAAA,KAAS;AACrB;AAMO,SAAS,mBAAA,CACd,WAAA,EACA,KAAA,EACA,KAAA,GAA2B,qBAAA,EACjB;AACV,EAAA,OAAO,WAAA,CACJ,MAAA,CAAO,CAAC,CAAA,KAAM,KAAA,CAAM,QAAA,CAAS,CAAA,CAAE,IAAI,CAAC,CAAA,CACpC,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,EAAG,KAAK,CAAA,qBAAA,EAAmB,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,IAAA,GAAO,CAAA,EAAG,CAAA,CAAE,IAAI,CAAA,EAAA,CAAA,GAAO,EAAE,CAAA,EAAG,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AAC/F;AAGO,IAAM,sBAAA,GAAyB,CAAC,wBAAA,EAA0B,mBAAmB,CAAA;AAO7E,SAAS,sBAAA,CACd,aACA,KAAA,EACU;AACV,EAAA,OAAO,WAAA,CACJ,OAAO,CAAC,CAAA,KAAO,uBAA6C,QAAA,CAAS,CAAA,CAAE,IAAI,CAAC,CAAA,CAC5E,IAAI,CAAC,CAAA,KAAM,GAAG,KAAK,CAAA,uBAAA,EAAqB,EAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACnE;AAWA,eAAsB,oBAAA,CACpB,UAAA,EACA,MAAA,EACA,KAAA,EACmB;AACnB,EAAA,MAAM,WAAW,MAAA,CAAO,OAAA,CAAQ,OAAO,YAAA,IAAgB,EAAE,CAAA,CAAE,MAAA;AAAA,IACzD,CAAC,CAAA,KAA0C,OAAO,CAAA,CAAE,CAAC,GAAG,OAAA,KAAY;AAAA,GACtE;AACA,EAAA,IAAI,QAAA,CAAS,KAAA,CAAM,CAAC,GAAG,CAAC,CAAA,KAAM,qBAAA,CAAsB,CAAA,CAAE,OAAO,CAAA,KAAM,MAAS,CAAA,SAAU,EAAC;AACvF,EAAA,MAAM,oBAAoB,UAAU,CAAA;AACpC,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,CAAC,CAAA,IAAK,QAAA,EAAU;AAChC,IAAA,MAAM,OAAA,GAAU,qBAAA,CAAsB,CAAA,CAAE,OAAO,CAAA;AAC/C,IAAA,IAAI,OAAA,SAAgB,IAAA,CAAK,CAAA,EAAG,KAAK,CAAA,eAAA,EAAkB,IAAI,CAAA,UAAA,EAAa,OAAO,CAAA,CAAE,CAAA;AAAA,EAC/E;AACA,EAAA,OAAO,MAAA;AACT;AAQA,eAAsB,uBAAuB,UAAA,EAAqC;AAChF,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,qBAAA,CAAsB,UAAU,CAAA,EAAG,MAAA;AAAA,EAC9C,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,QAAQ,OAAO,CAAA;AACpB,EAAA,MAAM,MAAA,GAAS,MAAM,oBAAA,CAAqB,UAAA,EAAY,QAAQ,aAAa,CAAA;AAC3E,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAA;AACtC,EAAA,OAAO,MAAA,CAAO,MAAA;AAChB;AAGA,SAASC,0BAAyB,UAAA,EAAkC;AAClE,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAASD,KAAAA,CAAUE,GAAG,YAAA,CAAaC,IAAAA,CAAK,KAAK,UAAA,EAAY,mBAAmB,CAAA,EAAG,OAAO,CAAC,CAAA;AAAA,EACzF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,SAAa,EAAC;AAC3D,EAAA,OAAO,mBAAA,CAAoB,YAAY,MAAiC,CAAA;AAC1E;AAGA,SAAS,kBAAkB,CAAA,EAAuB;AAChD,EAAA,OAAO,CAAA,EAAG,mBAAmB,CAAA,iBAAA,EAAe,CAAA,CAAE,IAAI,CAAA,EAAA,EAAK,CAAA,CAAE,IAAA,GAAO,CAAA,EAAG,EAAE,IAAI,CAAA,EAAA,CAAA,GAAO,EAAE,CAAA,EAAG,EAAE,OAAO,CAAA,CAAA;AAChG;AAYO,SAAS,wBAAwB,UAAA,EAA8B;AACpE,EAAA,OAAOF,yBAAAA,CAAyB,UAAU,CAAA,CACvC,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,KAAa,OAAA,IAAW,CAAA,CAAE,IAAA,KAAS,sBAAsB,CAAA,CACzE,IAAI,iBAAiB,CAAA;AAC1B;AAUO,SAAS,0BAA0B,UAAA,EAA8B;AACtE,EAAA,OAAOA,yBAAAA,CAAyB,UAAU,CAAA,CACvC,MAAA;AAAA,IACC,CAAC,MACC,CAAA,CAAE,QAAA,KAAa,cACd,CAAA,CAAE,IAAA,KAAS,4BAAA,IAAgC,CAAA,CAAE,IAAA,KAAS,mBAAA;AAAA,GAC3D,CACC,IAAI,iBAAiB,CAAA;AAC1B;AAYA,eAAsB,mBAAA,CACpB,YACA,IAAA,EACiB;AACjB,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,sBAAsB,UAAU,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,MAAM,OAAO,CAAA;AAClB,EAAA,KAAA,MAAW,IAAA,IAAQ,mBAAmB,IAAA,CAAK,WAAA,IAAe,EAAC,EAAG,aAAa,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA;AAC1F,EAAA,KAAA,MAAW,IAAA,IAAQ,uBAAuB,IAAA,CAAK,WAAA,IAAe,EAAC,EAAG,aAAa,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA;AAC9F,EAAA,KAAA,MAAW,IAAA,IAAQ,yBAAA,CAA0B,UAAU,CAAA,UAAW,IAAI,CAAA;AACtE,EAAA,MAAM,MAAA,GAAS;AAAA,IACb,GAAI,IAAA,CAAK,OAAA,GAAU,MAAM,oBAAA,CAAqB,YAAY,IAAA,CAAK,MAAA,EAAQ,aAAa,CAAA,GAAI,EAAC;AAAA,IACzF,GAAI,IAAA,CAAK,SAAA,GAAY,uBAAA,CAAwB,UAAU,IAAI;AAAC,GAC9D;AACA,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,EAAQ,MAAA,CAAO,IAAI,CAAA;AACtC,EAAA,OAAO,MAAA,CAAO,MAAA;AAChB","file":"chunk-JY2JXCL6.js","sourcesContent":["/** Narrow to a plain-object-shaped value (not `null`, not an array); fields stay `unknown`. */\nexport function isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value);\n}\n","/**\n * `skaile validate` rules for the root `agents:` map of one `skaile.yaml`.\n *\n * Normalisation errors, the `agent:` + `agents.default` conflict, and the\n * asset-dependent rules: every `ref` resolves to an `agent.yaml`, role\n * instances need the asset's `io`, `connectors` bind real connector slots to\n * real `connectors[]` ids, and trigger ids are unique and known.\n */\n\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport {\n  AgentRefResolutionError,\n  type AgentInstanceConfig,\n  type AgentInstanceTrigger,\n  agentBlockKeyDiagnostics,\n  agentInstanceDiagnostics,\n  type Diagnostic,\n  normalizeAgentInstances,\n  resolveAgentDefinitionDir,\n} from \"@skaile/workspaces/core\";\nimport { parse as parseYaml } from \"yaml\";\nimport { isRecord } from \"../type-guards.ts\";\n\nconst AGENT_MANIFEST_FILE = \"agent.yaml\";\n\n/** Fields a trigger needs when it declares itself in full (no asset trigger to override). */\nconst TRIGGER_REQUIRED_FIELDS: Record<NonNullable<AgentInstanceTrigger[\"kind\"]>, string[]> = {\n  schedule: [\"cron\", \"prompt\"],\n  webhook: [\"prompt\"],\n  channel: [\"when\"],\n  event: [\"event\"],\n};\n\nconst err = (code: string, message: string, at: string): Diagnostic => ({\n  code,\n  severity: \"error\",\n  message,\n  path: at,\n});\n\n/** The parts of an agent asset the instance rules read. */\ninterface AssetFacts {\n  lifecycle: unknown;\n  hasIo: boolean;\n  /** `composes[].id` of `kind: connector` items. */\n  connectorSlots: string[];\n  /** `composes[].id` of every other item that has one. */\n  otherSlots: string[];\n  triggerIds: string[];\n}\n\nfunction readAssetFacts(manifest: Record<string, unknown>): AssetFacts {\n  const facts: AssetFacts = {\n    lifecycle: manifest.lifecycle,\n    hasIo: manifest.io !== undefined && manifest.io !== null,\n    connectorSlots: [],\n    otherSlots: [],\n    triggerIds: [],\n  };\n  for (const item of Array.isArray(manifest.composes) ? manifest.composes : []) {\n    if (!isRecord(item) || typeof item.id !== \"string\") continue;\n    (item.kind === \"connector\" ? facts.connectorSlots : facts.otherSlots).push(item.id);\n  }\n  for (const t of Array.isArray(manifest.triggers) ? manifest.triggers : []) {\n    if (isRecord(t) && typeof t.id === \"string\") facts.triggerIds.push(t.id);\n  }\n  return facts;\n}\n\n/**\n * Why `agent.definition` does not resolve to an agent directory, or `null` when it does. One\n * rule for `validate` and `serve`, so the two print the same line (p1733): an `agent:` ref no\n * manifest declares, a path with no `agent.yaml`, an `ai-assets://` ref with no `ai-assets/`.\n */\nexport function agentDefinitionProblem(projectDir: string, definition: string): string | null {\n  let dir: string | undefined;\n  try {\n    dir = resolveAgentDefinitionDir(projectDir, definition);\n  } catch (e) {\n    if (!(e instanceof AgentRefResolutionError)) throw e;\n    return e.message;\n  }\n  if (dir === undefined) {\n    return `agent.definition \"${definition}\": no ai-assets/ directory above the project`;\n  }\n  if (path.basename(dir) === AGENT_MANIFEST_FILE) dir = path.dirname(dir);\n  if (!fs.existsSync(path.join(dir, AGENT_MANIFEST_FILE))) {\n    return `agent.definition \"${definition}\": no ${AGENT_MANIFEST_FILE} in ${dir}`;\n  }\n  return null;\n}\n\n/** Resolve an instance `ref` to its parsed `agent.yaml`, or an error diagnostic. */\nfunction loadAsset(\n  projectDir: string,\n  id: string,\n  ref: string,\n): { facts: AssetFacts } | { diagnostic: Diagnostic } {\n  const at = `agents.${id}.ref`;\n  let dir: string | undefined;\n  try {\n    dir = resolveAgentDefinitionDir(projectDir, ref);\n  } catch (e) {\n    if (!(e instanceof AgentRefResolutionError)) throw e;\n    return { diagnostic: err(\"agent_ref_unresolved\", `agents.${id}: ${e.message}`, at) };\n  }\n  if (dir === undefined) {\n    return {\n      diagnostic: err(\n        \"agent_ref_unresolved\",\n        `agents.${id}: ref \"${ref}\" cannot be resolved — no ai-assets/ directory above the project`,\n        at,\n      ),\n    };\n  }\n  const manifestPath = path.join(dir, AGENT_MANIFEST_FILE);\n  let text: string;\n  try {\n    text = fs.readFileSync(manifestPath, \"utf-8\");\n  } catch {\n    return {\n      diagnostic: err(\n        \"agent_ref_unresolved\",\n        `agents.${id}: ref \"${ref}\" resolves to ${dir}, which has no ${AGENT_MANIFEST_FILE}`,\n        at,\n      ),\n    };\n  }\n  let manifest: unknown;\n  try {\n    manifest = parseYaml(text);\n  } catch (e) {\n    return {\n      diagnostic: err(\n        \"agent_manifest_invalid\",\n        `agents.${id}: ${manifestPath} is not valid YAML: ${e instanceof Error ? e.message : String(e)}`,\n        at,\n      ),\n    };\n  }\n  if (!isRecord(manifest)) {\n    return {\n      diagnostic: err(\n        \"agent_manifest_invalid\",\n        `agents.${id}: ${manifestPath} is not a mapping`,\n        at,\n      ),\n    };\n  }\n  return { facts: readAssetFacts(manifest) };\n}\n\n/**\n * Why the `ref` of an `agents:` instance does not resolve, as the `agent_ref_unresolved` line\n * `validate` prints (`agents.<id>: …`), or `null` when it resolves. `serve` refuses a project\n * with such an instance like `validate` does.\n */\nexport function instanceRefProblem(projectDir: string, id: string, ref: string): string | null {\n  const loaded = loadAsset(projectDir, id, ref);\n  return \"diagnostic\" in loaded && loaded.diagnostic.code === \"agent_ref_unresolved\"\n    ? loaded.diagnostic.message\n    : null;\n}\n\n/**\n * Trigger rules. Duplicate ids are always an error; the asset-dependent rules\n * (known id, complete full declaration) run only when `assetTriggerIds` is\n * known — i.e. the instance's `ref` resolved.\n */\nfunction checkTriggers(\n  id: string,\n  triggers: AgentInstanceTrigger[],\n  assetTriggerIds: string[] | undefined,\n): Diagnostic[] {\n  const out: Diagnostic[] = [];\n  const seen = new Set<string>();\n  triggers.forEach((trigger, i) => {\n    const at = `agents.${id}.triggers[${i}]`;\n    if (seen.has(trigger.id)) {\n      out.push(\n        err(\n          \"agent_trigger_duplicate\",\n          `agents.${id}: trigger id \"${trigger.id}\" is declared twice`,\n          `${at}.id`,\n        ),\n      );\n      return;\n    }\n    seen.add(trigger.id);\n    if (!assetTriggerIds || assetTriggerIds.includes(trigger.id)) return;\n    if (!trigger.kind) {\n      out.push(\n        err(\n          \"agent_trigger_unknown\",\n          `agents.${id}: trigger \"${trigger.id}\" is not declared by the agent asset (${assetTriggerIds.length > 0 ? `has: ${assetTriggerIds.join(\", \")}` : \"it declares no triggers\"}) — add \\`kind\\` and the trigger's fields to declare a new one`,\n          `${at}.id`,\n        ),\n      );\n      return;\n    }\n    const missing = TRIGGER_REQUIRED_FIELDS[trigger.kind].filter(\n      (field) => (trigger as unknown as Record<string, unknown>)[field] === undefined,\n    );\n    if (missing.length > 0) {\n      out.push(\n        err(\n          \"agent_trigger_incomplete\",\n          `agents.${id}: trigger \"${trigger.id}\" (kind ${trigger.kind}) is not in the asset, so it must declare ${missing.join(\", \")}`,\n          at,\n        ),\n      );\n    }\n  });\n  return out;\n}\n\nfunction checkConnectors(\n  id: string,\n  instance: AgentInstanceConfig,\n  facts: AssetFacts,\n  connectorIds: string[],\n): Diagnostic[] {\n  const out: Diagnostic[] = [];\n  for (const [slot, connectorId] of Object.entries(instance.connectors ?? {})) {\n    const at = `agents.${id}.connectors.${slot}`;\n    if (!facts.connectorSlots.includes(slot)) {\n      const hint = facts.otherSlots.includes(slot)\n        ? `\"${slot}\" is a slot of a non-connector item`\n        : facts.connectorSlots.length > 0\n          ? `the asset's connector slots are: ${facts.connectorSlots.join(\", \")}`\n          : \"the asset declares no connector slots\";\n      out.push(\n        err(\n          \"agent_connector_slot_unknown\",\n          `agents.${id}: connectors.${slot} is not a connector slot id of the agent asset (${hint})`,\n          at,\n        ),\n      );\n    }\n    if (!connectorIds.includes(connectorId)) {\n      out.push(\n        err(\n          \"agent_connector_unknown\",\n          `agents.${id}: connectors.${slot} points at \"${connectorId}\", which is not in skaile.yaml connectors[]${connectorIds.length > 0 ? ` (has: ${connectorIds.join(\", \")})` : \"\"}`,\n          at,\n        ),\n      );\n    }\n  }\n  return out;\n}\n\n/**\n * Diagnostics for the `agents:` map of a parsed `skaile.yaml`.\n *\n * @param projectDir - Directory of the `skaile.yaml`; local and catalog refs resolve against it.\n * @param parsed - The raw YAML document.\n */\nexport function checkAgentInstances(\n  projectDir: string,\n  parsed: Record<string, unknown>,\n): Diagnostic[] {\n  const diagnostics: Diagnostic[] = [];\n  const instances = normalizeAgentInstances(parsed.agents, diagnostics);\n  const agent = isRecord(parsed.agent) ? parsed.agent : undefined;\n  diagnostics.push(...agentBlockKeyDiagnostics(parsed.agent));\n  if (agent?.subagents !== undefined) {\n    diagnostics.push(\n      err(\n        \"agent_subagents_removed\",\n        \"`agent.subagents` was removed — declare each subagent as an agent asset and bind it under `agents:` with `lifecycle: role`\",\n        \"agent.subagents\",\n      ),\n    );\n  }\n  if (agent?.instances !== undefined) {\n    diagnostics.push(\n      err(\n        \"misplaced_agent_instances\",\n        \"`agent.instances` is not a skaile.yaml key — declare instances under root `agents:`\",\n        \"agent.instances\",\n      ),\n    );\n  }\n  diagnostics.push(\n    ...agentInstanceDiagnostics({\n      agent: {\n        definition: typeof agent?.definition === \"string\" ? agent.definition : undefined,\n        instances,\n      },\n    }),\n  );\n  // `serve` refuses an `agent.definition` that does not resolve, so `validate` must too (p1733).\n  if (typeof agent?.definition === \"string\" && agent.definition !== \"\") {\n    const problem = agentDefinitionProblem(projectDir, agent.definition);\n    if (problem) diagnostics.push(err(\"agent_ref_unresolved\", problem, \"agent.definition\"));\n  }\n  if (!instances) return diagnostics;\n\n  const connectorIds = (Array.isArray(parsed.connectors) ? parsed.connectors : []).flatMap((c) =>\n    isRecord(c) && typeof c.id === \"string\" ? [c.id] : [],\n  );\n\n  for (const [id, instance] of Object.entries(instances)) {\n    const loaded = loadAsset(projectDir, id, instance.ref);\n    if (\"diagnostic\" in loaded) {\n      // Asset-independent trigger rules still apply when the ref is broken.\n      diagnostics.push(loaded.diagnostic, ...checkTriggers(id, instance.triggers ?? [], undefined));\n      continue;\n    }\n    const { facts } = loaded;\n    const lifecycle = instance.lifecycle ?? facts.lifecycle ?? \"standing\";\n    if (lifecycle === \"role\" && !facts.hasIo) {\n      diagnostics.push(\n        err(\n          \"agent_role_missing_io\",\n          `agents.${id}: lifecycle \"role\" needs the agent asset to declare \\`io\\` ({ input, output } JSON Schemas)`,\n          `agents.${id}.lifecycle`,\n        ),\n      );\n    }\n    diagnostics.push(...checkConnectors(id, instance, facts, connectorIds));\n    diagnostics.push(...checkTriggers(id, instance.triggers ?? [], facts.triggerIds));\n  }\n  return diagnostics;\n}\n","/**\n * Checks of a project's `skaile.yaml` that `validate`, `check`, `doctor` and `run` share:\n * keys nothing reads (p1474) and a `harness:` no harness registers (p1022).\n */\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport type { Diagnostic, SkWorkspaceConfig } from \"@skaile/workspaces/core\";\nimport { loadSkWorkspaceConfig, SKAILE_YAML_DEFAULT } from \"@skaile/workspaces/core\";\nimport { parse as parseYaml } from \"yaml\";\nimport { checkAgentInstances } from \"./commands/validate-instances.ts\";\nimport { unknownHarnessMessage } from \"./harness-error.ts\";\nimport { logErr, logWarn } from \"./helpers.ts\";\nimport { loadDeclaredPlugins } from \"./plugin-store/index.ts\";\n\n/** One warning line per key of the file that nothing reads. */\nexport function unknownKeyWarnings(diagnostics: readonly Diagnostic[], label: string): string[] {\n  return diagnostics\n    .filter((d) => d.code === \"unknown_config_key\" || d.code === \"unknown_profile_key\")\n    .map((d) => `${label}: ${d.message}`);\n}\n\n/** `skaile.yaml` connector diagnostics that fail `validate` and refuse `serve` (the runner cannot mount it right). */\nexport const CONNECTOR_ERROR_CODES: readonly string[] = [\n  \"connector_missing_driver\",\n  \"connector_missing_id\",\n  \"connector_duplicate_id\",\n  \"connector_invalid_access\",\n];\n\n/**\n * The connector diagnostics that also refuse `serve`: an id the runner cannot address, one it\n * drops, an `access` it cannot read. A missing `driver` (or the old `adapter:` spelling) is not\n * among them: `serve` keeps starting and warns with the same text as a `validation_warning`.\n */\nexport const CONNECTOR_SERVE_REFUSAL_CODES: readonly string[] = CONNECTOR_ERROR_CODES.filter(\n  (code) => code !== \"connector_missing_driver\",\n);\n\n/**\n * One error line per connector the runner cannot mount or mounts wrongly: no `driver`, no `id`, a\n * duplicate `id`, an unknown `access`. `codes` narrows it to the ones that apply (default: all).\n */\nexport function connectorErrorLines(\n  diagnostics: readonly Diagnostic[],\n  label: string,\n  codes: readonly string[] = CONNECTOR_ERROR_CODES,\n): string[] {\n  return diagnostics\n    .filter((d) => codes.includes(d.code))\n    .map((d) => `${label} [connectors] — ${d.code}: ${d.path ? `${d.path}: ` : \"\"}${d.message}`);\n}\n\n/** The `agent-config` key diagnostics that name a replacement: the old `driver` and the retired `agent`. */\nexport const AGENT_CONFIG_KEY_CODES = [\"deprecated_harness_key\", \"retired_agent_key\"] as const;\n\n/**\n * One warning line per `agent-config` key that is deprecated (`driver`, p1873) or retired\n * (`agent`, p1874): still read or ignored, and `skaile migrate harness` fixes it. `validate`,\n * `check`, `doctor`, `run` and `config show` print the same line.\n */\nexport function agentConfigKeyWarnings(\n  diagnostics: readonly Diagnostic[],\n  label: string,\n): string[] {\n  return diagnostics\n    .filter((d) => (AGENT_CONFIG_KEY_CODES as readonly string[]).includes(d.code))\n    .map((d) => `${label} [agent-config] — ${d.code}: ${d.message}`);\n}\n\n/**\n * One error line per `agent-config` profile whose `harness:` nothing registers. The harnesses of\n * the plugins the project declares count, so they are loaded before the verdict, and only when\n * some profile names a harness the built-in ones do not.\n *\n * @param projectDir - Project whose `plugins:` are loaded.\n * @param config - The decoded config file.\n * @param label - File name for the line.\n */\nexport async function unknownHarnessErrors(\n  projectDir: string,\n  config: SkWorkspaceConfig,\n  label: string,\n): Promise<string[]> {\n  const profiles = Object.entries(config.agent_config ?? {}).filter(\n    (e): e is [string, { harness: string }] => typeof e[1]?.harness === \"string\",\n  );\n  if (profiles.every(([, p]) => unknownHarnessMessage(p.harness) === undefined)) return [];\n  await loadDeclaredPlugins(projectDir);\n  const errors: string[] = [];\n  for (const [name, p] of profiles) {\n    const refusal = unknownHarnessMessage(p.harness);\n    if (refusal) errors.push(`${label}: agent-config.${name}.harness: ${refusal}`);\n  }\n  return errors;\n}\n\n/**\n * Print the `✗` line for each `agent-config` profile whose `harness:` nothing registers and\n * return how many were printed. The harness check `install`, `list` and `config show` share with\n * `validate`, `check` and `run` (p1754); a file that does not load is not this function's to\n * report.\n */\nexport async function reportUnknownHarnesses(projectDir: string): Promise<number> {\n  let config: SkWorkspaceConfig | undefined;\n  try {\n    config = loadSkWorkspaceConfig(projectDir)?.config;\n  } catch {\n    return 0;\n  }\n  if (!config) return 0;\n  const errors = await unknownHarnessErrors(projectDir, config, \"skaile.yaml\");\n  for (const line of errors) logErr(line);\n  return errors.length;\n}\n\n/** The `agents:` / `agent:` diagnostics of the project's `skaile.yaml` as `validate` gives them. */\nfunction agentInstanceDiagnostics(projectDir: string): Diagnostic[] {\n  let parsed: unknown;\n  try {\n    parsed = parseYaml(fs.readFileSync(path.join(projectDir, SKAILE_YAML_DEFAULT), \"utf-8\"));\n  } catch {\n    return [];\n  }\n  if (typeof parsed !== \"object\" || parsed === null) return [];\n  return checkAgentInstances(projectDir, parsed as Record<string, unknown>);\n}\n\n/** One line the way `validate` prints a diagnostic of the `agents:` map. */\nfunction agentInstanceLine(d: Diagnostic): string {\n  return `${SKAILE_YAML_DEFAULT} [agents] — ${d.code}: ${d.path ? `${d.path}: ` : \"\"}${d.message}`;\n}\n\n/**\n * The errors `skaile validate` gives the `agents:` map of the project's `skaile.yaml`, as the\n * lines `validate` prints (p1512): a lifecycle or memory scope that is none of the known ones, a\n * `role` instance whose agent declares no `io`, a connector or trigger the agent does not have.\n * `install`, `check`, `run`, `repl` and `rebuild` refuse the project with them, so they never\n * accept what `validate` rejects. A ref that does not resolve is left out: `install` resolves a\n * catalog ref itself and `check` reports an unbound ref as a gap.\n *\n * @param projectDir - Project directory.\n */\nexport function agentInstanceErrorLines(projectDir: string): string[] {\n  return agentInstanceDiagnostics(projectDir)\n    .filter((d) => d.severity === \"error\" && d.code !== \"agent_ref_unresolved\")\n    .map(agentInstanceLine);\n}\n\n/**\n * The warnings `skaile validate` gives for keys of `agent:` and `agents:` that nothing reads\n * (p1712), as the lines `validate` prints: `agents.audit.colour`, `agent.modle`,\n * `agents.<id>.model.preffered`. Without them a typo leaves the default model or budget in\n * place and says nothing.\n *\n * @param projectDir - Project directory.\n */\nexport function agentInstanceWarningLines(projectDir: string): string[] {\n  return agentInstanceDiagnostics(projectDir)\n    .filter(\n      (d) =>\n        d.severity === \"warning\" &&\n        (d.code === \"unknown_agent_instance_key\" || d.code === \"unknown_agent_key\"),\n    )\n    .map(agentInstanceLine);\n}\n\n/**\n * The checks of the project's own `skaile.yaml`, printed: `!` lines for unknown keys (also the\n * ones of `agent:` and `agents:`, p1712), `✗` lines for an unknown harness and for an `agents:`\n * map `validate` rejects. Returns the number of errors printed. A file that does not load is not\n * this function's to report: the command reads it again and says so.\n *\n * @param projectDir - Project directory.\n * @param opts.harness - Also refuse an unknown `harness:` (`check`, `doctor`).\n * @param opts.instances - Also refuse an `agents:` map `validate` rejects (p1512).\n */\nexport async function reportProjectConfig(\n  projectDir: string,\n  opts: { harness: boolean; instances?: boolean },\n): Promise<number> {\n  let file: ReturnType<typeof loadSkWorkspaceConfig>;\n  try {\n    file = loadSkWorkspaceConfig(projectDir);\n  } catch {\n    return 0;\n  }\n  if (!file) return 0;\n  for (const line of unknownKeyWarnings(file.diagnostics ?? [], \"skaile.yaml\")) logWarn(line);\n  for (const line of agentConfigKeyWarnings(file.diagnostics ?? [], \"skaile.yaml\")) logWarn(line);\n  for (const line of agentInstanceWarningLines(projectDir)) logWarn(line);\n  const errors = [\n    ...(opts.harness ? await unknownHarnessErrors(projectDir, file.config, \"skaile.yaml\") : []),\n    ...(opts.instances ? agentInstanceErrorLines(projectDir) : []),\n  ];\n  for (const line of errors) logErr(line);\n  return errors.length;\n}\n"]}

package/dist/chunk-KNY356I3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/codex-app-server.ts"],"names":[],"mappings":";;;;;AAsCO,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,YACW,IAAA,EACT;AACA,IAAA,KAAA,CAAM,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAA;AAFvB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGT,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AAAA,EAJW,IAAA;AAKb;AAOA,IAAM,MAAA,GAAS,CAAC,KAAA,KACd,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA;AACrE,IAAM,OAAA,GAAU,CAAC,KAAA,KACf,OAAO,KAAA,KAAU,QAAA,IAAa,OAAO,KAAA,KAAU,QAAA,IAAY,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AACvF,SAAS,KAAA,CAAM,KAAA,EAA2B,QAAA,EAAkB,OAAA,EAAyB;AACnF,EAAA,MAAM,SAAS,KAAA,IAAS,QAAA;AACxB,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA,IAAK,MAAA,IAAU,KAAK,MAAA,GAAS,OAAA;AAC3D,IAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,EAAA,OAAO,MAAA;AACT;AAGO,IAAM,oBAAA,GAAN,MAAM,qBAAA,CAAqB;AAAA,EAcxB,YAA6B,OAAA,EAAgC;AAAhC,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACnC,IAAA,IAAA,CAAK,OAAA,GAAU,KAAA,CAAM,OAAA,CAAQ,gBAAA,EAAkB,MAAQ,GAAO,CAAA;AAC9D,IAAA,IAAA,CAAK,eAAA,GAAkB,KAAA,CAAM,OAAA,CAAQ,sBAAA,EAAwB,KAAQ,GAAO,CAAA;AAC5E,IAAA,IAAA,CAAK,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,kBAAA,EAAoB,IAAI,IAAI,CAAA;AAC1D,IAAA,IAAA,CAAK,UAAA,GAAa,MAAM,OAAA,CAAQ,aAAA,EAAe,OAAO,IAAA,EAAM,EAAA,GAAK,OAAO,IAAI,CAAA;AAI5E,IAAA,MAAM,SAAS,gBAAA,CAAiB,OAAA,CAAQ,SAAS,OAAA,CAAQ,IAAA,EAAM,kBAAkB,CAAA;AACjF,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,OAAA,EAAS,OAAO,IAAA,EAAM;AAAA,MAC9C,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAK,OAAA,CAAQ,GAAA;AAAA,MACb,KAAA,EAAO,MAAA;AAAA,MACP,QAAA,EAAU,OAAA,CAAQ,YAAA,KAAiB,IAAA,IAAQ,QAAQ,QAAA,KAAa;AAAA,KACjE,CAAA;AACD,IAAA,IAAA,CAAK,SAAS,IAAI,OAAA;AAAA,MAAQ,CAAC,OAAA,KACzB,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,MAAM;AAC7B,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,OAAA,EAAQ;AAAA,MACV,CAAC;AAAA,KACH;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,WAAA,CAAY,MAAM,CAAA;AACpC,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAC,CAAA;AAEnE,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,MAAA,EAAO;AACzB,IAAA,IAAA,CAAK,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACjD,IAAA,IAAA,CAAK,KAAA,CAAM,MAAM,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACvD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,EAAA,CAAG,OAAA,EAAS,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA;AAAA,EACpD;AAAA,EA9BqC,OAAA;AAAA,EAbpB,OAAA,uBAAc,GAAA,EAAqB;AAAA,EACnC,SAAA,uBAAgB,GAAA,EAAsC;AAAA,EACtD,OAAA;AAAA,EACA,eAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA;AAAA,EACA,MAAA;AAAA,EACT,QAAA,GAAW,KAAA;AAAA,EACX,WAAA,GAAc,KAAA;AAAA,EACd,MAAA,GAAS,CAAA;AAAA,EACT,MAAA,GAAS,EAAA;AAAA;AAAA,EAmCjB,aAAa,OAAA,CACX,OAAA,EACA,MAAA,EAC+B;AAC/B,IAAA,IAAI,MAAA;AACJ,IAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,EAAQ,IAAA,CAAK,QAAQ,CAAA;AACzC,IAAA,IAAI;AACF,MAAA,IAAI,MAAA,EAAQ,OAAA,EAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AAC3D,MAAA,MAAA,GAAS,IAAI,sBAAqB,OAAO,CAAA;AACzC,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,KAAA,EAAO,EAAE,IAAA,EAAM,MAAM,CAAA;AACvD,MAAA,MAAM,MAAA,CAAO,QAAQ,YAAA,EAAc;AAAA,QACjC,YAAY,OAAA,CAAQ,UAAA;AAAA,QACpB,YAAA,EAAc,EAAE,eAAA,EAAiB,IAAA;AAAK,OACvC,CAAA;AACD,MAAA,MAAA,CAAO,KAAA,CAAM,EAAE,MAAA,EAAQ,aAAA,EAAe,CAAA;AACtC,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,QAAQ,OAAA,EAAQ;AACtB,MAAA,MAAM,KAAA,YAAiB,mBAAA,GAAsB,KAAA,GAAQ,IAAI,oBAAoB,SAAS,CAAA;AAAA,IACxF,CAAA,SAAE;AACA,MAAA,MAAA,EAAQ,mBAAA,CAAoB,SAAS,KAAK,CAAA;AAAA,IAC5C;AAAA,EACF;AAAA;AAAA,EAGA,OAAA,CACE,QACA,MAAA,EACsC;AACtC,IAAA,IAAI,IAAA,CAAK,UAAU,OAAO,OAAA,CAAQ,OAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAC1E,IAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAA,IAAQ,IAAA,CAAK,QAAA;AAC5B,MAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,UAAU,CAAC,CAAA;AAC3D,IAAA,MAAM,KAAK,IAAA,CAAK,MAAA,EAAA;AAChB,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM,IAAA,CAAK,KAAK,SAAS,CAAA,EAAG,KAAK,OAAO,CAAA;AACjE,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI;AAAA,QACnB,OAAA;AAAA,QACA,MAAA;AAAA,QACA,KAAA;AAAA,QACA,GAAI,MAAA,KAAW,eAAA,IACf,MAAA,KAAW,IAAA,IACX,cAAc,MAAA,IACd,OAAO,MAAA,CAAO,QAAA,KAAa,WACvB,EAAE,cAAA,EAAgB,MAAA,CAAO,QAAA,KACzB;AAAC,OACN,CAAA;AACD,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,QAAQ,CAAA;AAAA,MACnC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,MACtB;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAA,CAAK,KAAK,QAAQ,CAAA;AAClB,IAAA,IAAI,KAAA;AACJ,IAAA,MAAM,QAAQ,IAAA,CAAK;AAAA,MACjB,IAAA,CAAK,MAAA;AAAA,MACL,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY;AAC7B,QAAA,KAAA,GAAQ,UAAA,CAAW,SAAS,GAAI,CAAA;AAAA,MAClC,CAAC;AAAA,KACF,CAAA;AACD,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AAAA;AAAA,EAGA,IAAI,oBAAA,GAAgC;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,WAAA,EAAa,OAAO,KAAA;AAC9B,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,YAAA,IAAgB,OAAA,CAAQ,QAAA,KAAa,OAAA,IAAW,CAAC,IAAA,CAAK,KAAA,CAAM,GAAA,EAAK,OAAO,IAAA;AAE1F,IAAA,OAAO,CAAC,iBAAA,CAAkB,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAAA,EAC1C;AAAA,EAEQ,KAAK,IAAA,EAAyC;AACpD,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,MAAA,GAAS,EAAA;AACd,IAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAO,EAAG;AAC3C,MAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,MAAA,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IAC9C;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AACnB,IAAA,KAAA,MAAW,cAAc,IAAA,CAAK,SAAA,CAAU,MAAA,EAAO,aAAc,KAAA,EAAM;AACnE,IAAA,IAAA,CAAK,UAAU,KAAA,EAAM;AACrB,IAAA,IAAI,IAAA,CAAK,QAAQ,YAAA,IAAgB,OAAA,CAAQ,aAAa,OAAA,IAAW,IAAA,CAAK,MAAM,GAAA,EAAK;AAC/E,MAAA,IAAI;AACF,QAAA,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MACzC,CAAA,CAAA,MAAQ;AACN,QAAA,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA;AAAA,MAC3B;AAAA,IACF,CAAA,MAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChC,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,OAAA,CAAQ,OAAA,GAAU,IAAI,mBAAA,CAAoB,IAAI,CAAC,CAAA;AAAA,IACtD,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEQ,MAAM,KAAA,EAAsB;AAClC,IAAA,IAAI,IAAA,CAAK,QAAA,EAAU,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACzD,IAAA,MAAM,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC;AAAA,CAAA;AACrC,IAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,IAAA,IAAA,CAAK,KAAA,CAAM,KAAA,CAAM,KAAA,CAAM,IAAI,CAAA;AAAA,EAC7B;AAAA,EAEQ,QAAQ,KAAA,EAAqB;AACnC,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,MAAA,IAAU,KAAA;AACf,IAAA,IAAI;AACF,MAAA,WAAS;AACP,QAAA,MAAM,GAAA,GAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA;AACpC,QAAA,IAAI,MAAM,CAAA,EAAG;AACb,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,GAAG,GAAG,CAAA;AACrC,QAAA,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA;AACvC,QAAA,IAAI,MAAA,CAAO,WAAW,IAAI,CAAA,GAAI,KAAK,UAAA,EAAY,MAAM,IAAI,mBAAA,CAAoB,UAAU,CAAA;AACvF,QAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,QAAA,MAAM,KAAA,GAAiB,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACtC,QAAA,IAAI,CAAC,MAAA,CAAO,KAAK,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC5D,QAAA,IAAI,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AACpC,UAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,YAAA,IAAI,CAAC,QAAQ,KAAA,CAAM,EAAE,GAAG,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAChE,YAAA,KAAK,KAAK,mBAAA,CAAoB,KAAA,CAAM,IAAI,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,UACpE,OAAO,IAAA,CAAK,OAAA,CAAQ,iBAAiB,KAAA,CAAM,MAAA,EAAQ,MAAM,MAAM,CAAA;AAAA,QACjE,CAAA,MAAO;AACL,UAAA,IACE,OAAO,KAAA,CAAM,EAAA,KAAO,QAAA,IACpB,CAAC,MAAA,CAAO,aAAA,CAAc,KAAA,CAAM,EAAE,CAAA,IAC9B,OAAA,IAAW,KAAA,KAAU,QAAA,IAAY,KAAA;AAEjC,YAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAC1C,UAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,MAAM,EAAE,CAAA;AACzC,UAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,UAAA,YAAA,CAAa,QAAQ,KAAK,CAAA;AAC1B,UAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,EAAE,CAAA;AAC5B,UAAA,IAAI,WAAW,KAAA,EAAO;AAGpB,YAAA,MAAM,UACJ,OAAA,CAAQ,cAAA,IACR,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,KAAA,CAAM,KAAA,CAAM,IAAA,KAAS,UACrB,KAAA,CAAM,KAAA,CAAM,OAAA,KAAY,CAAA,+BAAA,EAAkC,QAAQ,cAAc,CAAA,CAAA;AAClF,YAAA,OAAA,CAAQ,MAAA;AAAA,cACN,UAAU,IAAI,2BAAA,EAA4B,GAAI,IAAI,oBAAoB,UAAU;AAAA,aAClF;AAAA,UACF,CAAA,MAAO,OAAA,CAAQ,OAAA,CAAQ,KAAA,CAAM,MAAM,CAAA;AAAA,QACrC;AACA,QAAA,IAAI,KAAK,QAAA,EAAU;AAAA,MACrB;AACA,MAAA,IAAI,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,MAAM,IAAI,IAAA,CAAK,UAAA;AACxC,QAAA,MAAM,IAAI,oBAAoB,UAAU,CAAA;AAAA,IAC5C,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,MAAc,mBAAA,CACZ,EAAA,EACA,MAAA,EACA,MAAA,EACe;AACf,IAAA,IAAI,IAAA,CAAK,UAAU,GAAA,CAAI,EAAE,KAAK,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,CAAK,QAAA;AACxD,MAAA,OAAO,IAAA,CAAK,KAAK,UAAU,CAAA;AAC7B,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAA,EAAI,UAAU,CAAA;AACjC,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,QAAQ,eAAA,IAAmB,EAAC,EAAG,MAAM,CAAA,GACpE,IAAA,CAAK,OAAA,CAAQ,eAAA,GAAkB,MAAoC,CAAA,GACnE,KAAA,CAAA;AACJ,MAAA,IAAI,CAAC,OAAA,EAAS,MAAM,IAAI,oBAAoB,UAAU,CAAA;AACtD,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,IAAA,CAAK;AAAA,QAChC,OAAA,CAAQ,OAAA,EAAQ,CAAE,IAAA,CAAK,MAAM;AAC3B,UAAA,IAAI,IAAA,CAAK,YAAY,UAAA,CAAW,MAAA,CAAO,SAAS,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACtF,UAAA,OAAQ,OAAA;AAAA,YACN,MAAA;AAAA,YACA,UAAA,CAAW;AAAA,WACb;AAAA,QACF,CAAC,CAAA;AAAA,QACD,IAAI,OAAA,CAAe,CAAC,CAAA,EAAG,MAAA,KAAW;AAChC,UAAA,UAAA,CAAW,MAAA,CAAO,gBAAA;AAAA,YAChB,OAAA;AAAA,YACA,MAAM,MAAA,CAAO,IAAI,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAAA,YAC9C,EAAE,MAAM,IAAA;AAAK,WACf;AACA,UAAA,KAAA,GAAQ,WAAW,MAAM;AACvB,YAAA,UAAA,CAAW,KAAA,EAAM;AACjB,YAAA,MAAA,CAAO,IAAI,mBAAA,CAAoB,SAAS,CAAC,CAAA;AAAA,UAC3C,CAAA,EAAG,KAAK,eAAe,CAAA;AAAA,QACzB,CAAC;AAAA,OACF,CAAA;AACD,MAAA,MAAM,UAAU,IAAA,CAAK,OAAA,CAAQ,uBAAA,GAA0B,MAAA,EAAQ,MAAM,CAAA,IAAK,IAAA;AAC1E,MAAA,IACE,CAAC,OAAA,IACD,IAAA,CAAK,QAAA,IACL,UAAA,CAAW,MAAA,CAAO,OAAA,IAClB,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA,KAAM,UAAA;AAE3B,QAAA,MAAM,IAAI,oBAAoB,QAAQ,CAAA;AACxC,MAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAA;AAAA,IAC3B,CAAA,CAAA,MAAQ;AACN,MAAA,IAAI,CAAC,KAAK,QAAA,EAAU;AAClB,QAAA,IAAI;AACF,UAAA,IAAA,CAAK,KAAA,CAAM,EAAE,EAAA,EAAI,KAAA,EAAO,EAAE,MAAM,CAAA,KAAA,EAAQ,OAAA,EAAS,6BAAA,EAA8B,EAAG,CAAA;AAAA,QACpF,CAAA,CAAA,MAAQ;AACN,UAAA,IAAA,CAAK,KAAK,UAAU,CAAA;AAAA,QACtB;AAAA,MACF;AAAA,IACF,CAAA,SAAE;AACA,MAAA,YAAA,CAAa,KAAK,CAAA;AAClB,MAAA,UAAA,CAAW,KAAA,EAAM;AACjB,MAAA,IAAA,CAAK,SAAA,CAAU,OAAO,EAAE,CAAA;AAAA,IAC1B;AAAA,EACF;AACF","file":"chunk-KNY356I3.js","sourcesContent":["import { CodexNativeStateUnavailable } from \"./codex/native-state.js\";\nimport { spawn, type ChildProcessWithoutNullStreams } from \"node:child_process\";\n// Narrow module, not the `core` barrel: the barrel's chunks carry `import.meta`,\n// which breaks consumers that transpile this entry to CommonJS.\nimport { resolveAgentExec, wrapAgentCommand } from \"./agent-exec.js\";\nimport { processGroupAlive } from \"../../core/src/process-alive.js\";\nimport type { NativeRequests, NativeServerRequests } from \"./codex/native-protocol.generated.js\";\n\n/** The retained native request types, exposed only through this client surface. */\nexport type CodexRequestMethod = keyof NativeRequests;\n/** Native callback handlers receive cancellation when their process is disposed. */\nexport type CodexServerRequestHandlers = {\n  [M in keyof NativeServerRequests]?: (\n    params: NativeServerRequests[M][\"params\"],\n    signal: AbortSignal,\n  ) => Promise<NativeServerRequests[M][\"result\"]>;\n};\n/** Explicit process inputs keep managed callers from inheriting ambient credentials. */\nexport interface CodexAppServerOptions {\n  command: string;\n  args: string[];\n  cwd: string;\n  env: Record<string, string>;\n  clientInfo: NativeRequests[\"initialize\"][\"params\"][\"clientInfo\"];\n  requestTimeoutMs?: number;\n  serverRequestTimeoutMs?: number;\n  maxPendingRequests?: number;\n  maxFrameBytes?: number;\n  /** Isolate and reap the native process group on POSIX. */\n  processGroup?: boolean;\n  onServerRequest?: CodexServerRequestHandlers;\n  /** Final synchronous lifecycle veto before a callback reply; cannot grant a missing handler. */\n  canReplyToServerRequest?: (method: string, params: unknown) => boolean;\n  onNotification?: (method: string, params: unknown) => void;\n  /** Exactly once on terminal failure or disposal, even with no RPC pending. */\n  onClose?: (error: CodexAppServerError) => void;\n}\n/** Safe error codes never contain stderr, native errors, RPC payloads or credentials. */\nexport class CodexAppServerError extends Error {\n  constructor(\n    readonly code: \"closed\" | \"process\" | \"protocol\" | \"timeout\" | \"rejected\" | \"capacity\",\n  ) {\n    super(`Codex App Server ${code}`);\n    this.name = \"CodexAppServerError\";\n  }\n}\ntype Pending = {\n  resolve: (value: unknown) => void;\n  reject: (error: CodexAppServerError | CodexNativeStateUnavailable) => void;\n  timer: ReturnType<typeof setTimeout>;\n  resumeThreadId?: string;\n};\nconst record = (value: unknown): value is Record<string, unknown> =>\n  value !== null && typeof value === \"object\" && !Array.isArray(value);\nconst validId = (value: unknown): value is string | number =>\n  typeof value === \"string\" || (typeof value === \"number\" && Number.isSafeInteger(value));\nfunction bound(value: number | undefined, fallback: number, maximum: number): number {\n  const result = value ?? fallback;\n  if (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n    throw new CodexAppServerError(\"protocol\");\n  return result;\n}\n\n/** One initialized stdio process with correlated, bounded requests and terminal disposal. */\nexport class CodexAppServerClient {\n  private readonly pending = new Map<number, Pending>();\n  private readonly callbacks = new Map<string | number, AbortController>();\n  private readonly timeout: number;\n  private readonly callbackTimeout: number;\n  private readonly capacity: number;\n  private readonly frameLimit: number;\n  private readonly child: ChildProcessWithoutNullStreams;\n  private readonly closed: Promise<void>;\n  private terminal = false;\n  private childClosed = false;\n  private nextId = 1;\n  private buffer = \"\";\n\n  private constructor(private readonly options: CodexAppServerOptions) {\n    this.timeout = bound(options.requestTimeoutMs, 15_000, 300_000);\n    this.callbackTimeout = bound(options.serverRequestTimeoutMs, 30_000, 300_000);\n    this.capacity = bound(options.maxPendingRequests, 64, 1024);\n    this.frameLimit = bound(options.maxFrameBytes, 1024 * 1024, 16 * 1024 * 1024);\n    // With the uid split on, the app server runs as the agent uid through the\n    // launch shim. A process-group kill of the shim still ends it: the launcher\n    // kills the agent's whole group when the shim dies.\n    const target = wrapAgentCommand(options.command, options.args, resolveAgentExec());\n    this.child = spawn(target.command, target.args, {\n      cwd: options.cwd,\n      env: options.env,\n      stdio: \"pipe\",\n      detached: options.processGroup === true && process.platform !== \"win32\",\n    });\n    this.closed = new Promise((resolve) =>\n      this.child.once(\"close\", () => {\n        this.childClosed = true;\n        resolve();\n      }),\n    );\n    this.child.stdout.setEncoding(\"utf8\");\n    this.child.stdout.on(\"data\", (chunk: string) => this.receive(chunk));\n    // Drain without retaining raw diagnostic output: native stderr can contain secrets.\n    this.child.stderr.resume();\n    this.child.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdin.on(\"error\", () => this.fail(\"process\"));\n    this.child.stdout.on(\"error\", () => this.fail(\"process\"));\n    this.child.stderr.on(\"error\", () => this.fail(\"process\"));\n    this.child.once(\"exit\", () => this.fail(\"process\"));\n  }\n\n  /** Spawn and finish the native initialize/initialized handshake before returning. */\n  static async connect(\n    options: CodexAppServerOptions,\n    signal?: AbortSignal,\n  ): Promise<CodexAppServerClient> {\n    let client: CodexAppServerClient | undefined;\n    const abort = () => client?.fail(\"closed\");\n    try {\n      if (signal?.aborted) throw new CodexAppServerError(\"closed\");\n      client = new CodexAppServerClient(options);\n      signal?.addEventListener(\"abort\", abort, { once: true });\n      await client.request(\"initialize\", {\n        clientInfo: options.clientInfo,\n        capabilities: { experimentalApi: true },\n      });\n      client.write({ method: \"initialized\" });\n      return client;\n    } catch (error) {\n      await client?.dispose();\n      throw error instanceof CodexAppServerError ? error : new CodexAppServerError(\"process\");\n    } finally {\n      signal?.removeEventListener(\"abort\", abort);\n    }\n  }\n\n  /** Timeout closes this generation, so late replies can never satisfy a later request. */\n  request<M extends CodexRequestMethod>(\n    method: M,\n    params: NativeRequests[M][\"params\"],\n  ): Promise<NativeRequests[M][\"result\"]> {\n    if (this.terminal) return Promise.reject(new CodexAppServerError(\"closed\"));\n    if (this.pending.size >= this.capacity)\n      return Promise.reject(new CodexAppServerError(\"capacity\"));\n    const id = this.nextId++;\n    return new Promise((resolve, reject) => {\n      const timer = setTimeout(() => this.fail(\"timeout\"), this.timeout);\n      this.pending.set(id, {\n        resolve: resolve as (value: unknown) => void,\n        reject,\n        timer,\n        ...(method === \"thread/resume\" &&\n        params !== null &&\n        \"threadId\" in params &&\n        typeof params.threadId === \"string\"\n          ? { resumeThreadId: params.threadId }\n          : {}),\n      });\n      try {\n        this.write({ id, method, params });\n      } catch {\n        this.fail(\"protocol\");\n      }\n    });\n  }\n\n  /** Reject pending work immediately and wait a bounded interval for process shutdown. */\n  async dispose(): Promise<void> {\n    this.fail(\"closed\");\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    await Promise.race([\n      this.closed,\n      new Promise<void>((resolve) => {\n        timer = setTimeout(resolve, 1000);\n      }),\n    ]);\n    clearTimeout(timer);\n  }\n\n  /** Positive exit proof for callers that may replace a failed native generation. */\n  get terminationConfirmed(): boolean {\n    if (!this.childClosed) return false;\n    if (!this.options.processGroup || process.platform === \"win32\" || !this.child.pid) return true;\n    // A group left holding only unreaped zombies runs nothing; a bare kill(-pid, 0) says otherwise.\n    return !processGroupAlive(this.child.pid);\n  }\n\n  private fail(code: CodexAppServerError[\"code\"]): void {\n    if (this.terminal) return;\n    this.terminal = true;\n    this.buffer = \"\";\n    for (const request of this.pending.values()) {\n      clearTimeout(request.timer);\n      request.reject(new CodexAppServerError(code));\n    }\n    this.pending.clear();\n    for (const controller of this.callbacks.values()) controller.abort();\n    this.callbacks.clear();\n    if (this.options.processGroup && process.platform !== \"win32\" && this.child.pid) {\n      try {\n        process.kill(-this.child.pid, \"SIGKILL\");\n      } catch {\n        this.child.kill(\"SIGKILL\");\n      }\n    } else this.child.kill(\"SIGKILL\");\n    try {\n      this.options.onClose?.(new CodexAppServerError(code));\n    } catch {\n      // Observer failures cannot interrupt transport cleanup.\n    }\n  }\n\n  private write(frame: unknown): void {\n    if (this.terminal) throw new CodexAppServerError(\"closed\");\n    const line = `${JSON.stringify(frame)}\\n`;\n    if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n    this.child.stdin.write(line);\n  }\n\n  private receive(chunk: string): void {\n    if (this.terminal) return;\n    this.buffer += chunk;\n    try {\n      for (;;) {\n        const end = this.buffer.indexOf(\"\\n\");\n        if (end < 0) break;\n        const line = this.buffer.slice(0, end);\n        this.buffer = this.buffer.slice(end + 1);\n        if (Buffer.byteLength(line) > this.frameLimit) throw new CodexAppServerError(\"protocol\");\n        if (!line.trim()) continue;\n        const frame: unknown = JSON.parse(line);\n        if (!record(frame)) throw new CodexAppServerError(\"protocol\");\n        if (typeof frame.method === \"string\") {\n          if (\"id\" in frame) {\n            if (!validId(frame.id)) throw new CodexAppServerError(\"protocol\");\n            void this.handleServerRequest(frame.id, frame.method, frame.params);\n          } else this.options.onNotification?.(frame.method, frame.params);\n        } else {\n          if (\n            typeof frame.id !== \"number\" ||\n            !Number.isSafeInteger(frame.id) ||\n            \"error\" in frame === \"result\" in frame\n          )\n            throw new CodexAppServerError(\"protocol\");\n          const request = this.pending.get(frame.id);\n          if (!request) throw new CodexAppServerError(\"protocol\");\n          clearTimeout(request.timer);\n          this.pending.delete(frame.id);\n          if (\"error\" in frame) {\n            // Pinned 0.153.4 thread_store_resume_read_error maps only missing rollout\n            // to this exact invalid-request message. Never retain raw native errors.\n            const missing =\n              request.resumeThreadId &&\n              record(frame.error) &&\n              frame.error.code === -32600 &&\n              frame.error.message === `no rollout found for thread id ${request.resumeThreadId}`;\n            request.reject(\n              missing ? new CodexNativeStateUnavailable() : new CodexAppServerError(\"rejected\"),\n            );\n          } else request.resolve(frame.result);\n        }\n        if (this.terminal) return;\n      }\n      if (Buffer.byteLength(this.buffer) > this.frameLimit)\n        throw new CodexAppServerError(\"protocol\");\n    } catch {\n      this.fail(\"protocol\");\n    }\n  }\n\n  private async handleServerRequest(\n    id: string | number,\n    method: string,\n    params: unknown,\n  ): Promise<void> {\n    if (this.callbacks.has(id) || this.callbacks.size >= this.capacity)\n      return this.fail(\"protocol\");\n    const controller = new AbortController();\n    this.callbacks.set(id, controller);\n    let timer: ReturnType<typeof setTimeout> | undefined;\n    try {\n      const handler = Object.hasOwn(this.options.onServerRequest ?? {}, method)\n        ? this.options.onServerRequest?.[method as keyof NativeServerRequests]\n        : undefined;\n      if (!handler) throw new CodexAppServerError(\"rejected\");\n      const result = await Promise.race([\n        Promise.resolve().then(() => {\n          if (this.terminal || controller.signal.aborted) throw new CodexAppServerError(\"closed\");\n          return (handler as (params: unknown, signal: AbortSignal) => Promise<unknown>)(\n            params,\n            controller.signal,\n          );\n        }),\n        new Promise<never>((_, reject) => {\n          controller.signal.addEventListener(\n            \"abort\",\n            () => reject(new CodexAppServerError(\"closed\")),\n            { once: true },\n          );\n          timer = setTimeout(() => {\n            controller.abort();\n            reject(new CodexAppServerError(\"timeout\"));\n          }, this.callbackTimeout);\n        }),\n      ]);\n      const current = this.options.canReplyToServerRequest?.(method, params) ?? true;\n      if (\n        !current ||\n        this.terminal ||\n        controller.signal.aborted ||\n        this.callbacks.get(id) !== controller\n      )\n        throw new CodexAppServerError(\"closed\");\n      this.write({ id, result });\n    } catch {\n      if (!this.terminal) {\n        try {\n          this.write({ id, error: { code: -32603, message: \"Codex client request failed\" } });\n        } catch {\n          this.fail(\"protocol\");\n        }\n      }\n    } finally {\n      clearTimeout(timer);\n      controller.abort();\n      this.callbacks.delete(id);\n    }\n  }\n}\n"]}

package/dist/chunk-LOO5CB5M.js

@@ -1,12 +0,0 @@
-// bridge/src/codex/native-state.ts
-var CODEX_NATIVE_STATE_FORMAT = "codex-0.153.4-managed-v1";
-var CodexNativeStateUnavailable = class extends Error {
-  constructor() {
-    super("CODEX_NATIVE_STATE_UNAVAILABLE");
-    this.name = "CodexNativeStateUnavailable";
-  }
-};
-
-export { CODEX_NATIVE_STATE_FORMAT, CodexNativeStateUnavailable };
-//# sourceMappingURL=chunk-LOO5CB5M.js.map
-//# sourceMappingURL=chunk-LOO5CB5M.js.map

package/dist/chunk-LOO5CB5M.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../bridge/src/codex/native-state.ts"],"names":[],"mappings":";AACO,IAAM,yBAAA,GAA4B;AAGlC,IAAM,2BAAA,GAAN,cAA0C,KAAA,CAAM;AAAA,EACrD,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,gCAAgC,CAAA;AACtC,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AACF","file":"chunk-LOO5CB5M.js","sourcesContent":["/** Managed layout pinned to Codex 0.153.4; publishing alone does not prove durable custody. */\nexport const CODEX_NATIVE_STATE_FORMAT = \"codex-0.153.4-managed-v1\";\n\n/** Positive state absence/incompatibility only; never an auth, transport, or policy failure. */\nexport class CodexNativeStateUnavailable extends Error {\n  constructor() {\n    super(\"CODEX_NATIVE_STATE_UNAVAILABLE\");\n    this.name = \"CodexNativeStateUnavailable\";\n  }\n}\n"]}

package/dist/chunk-MDCI4RSG.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../core/src/run-state-ignore.ts","../core/src/logging/sinks/sqlite-runtime.ts","../core/src/logging/sinks/sqlite-sink.ts","../core/src/logging/config.ts","../core/src/logging/retention.ts","../core/src/logging/log-safe-text.ts","../core/src/logging/sinks/on-log-bridge-sink.ts","../core/src/logging/sinks/ws-log-sink.ts"],"names":["path","existsSync"],"mappings":";;;;;;;AAUO,IAAM,2BAAA,GAAiD;AAAA,EAC5D,2BAAA;AAAA,EACA,sCAAA;AAAA;AAAA,EAEA,kBAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA;AACF;AAGA,IAAM,mBAAA,GAAyC;AAAA,EAC7C,SAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAA;AAYO,SAAS,sBAAsB,UAAA,EAA8B;AAClE,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,UAAA,EAAY,YAAY,CAAA;AAC/C,EAAA,IAAI;AACF,IAAA,IAAI,CAAC,WAAW,IAAA,CAAK,UAAA,EAAY,aAAa,CAAC,CAAA,SAAU,EAAC;AAC1D,IAAA,IAAI,CAAC,WAAW,IAAA,CAAK,UAAA,EAAY,MAAM,CAAC,CAAA,SAAU,EAAC;AACnD,IAAA,MAAM,WAAW,UAAA,CAAW,SAAS,IAAI,YAAA,CAAa,SAAA,EAAW,OAAO,CAAA,GAAI,EAAA;AAC5E,IAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AAC9D,IAAA,IAAI,mBAAA,CAAoB,IAAA,CAAK,CAAC,CAAA,KAAM,IAAA,CAAK,IAAI,CAAC,CAAC,CAAA,EAAG,OAAO,EAAC;AAC1D,IAAA,MAAM,OAAA,GAAU,4BAA4B,MAAA,CAAO,CAAC,MAAM,CAAC,IAAA,CAAK,GAAA,CAAI,CAAC,CAAC,CAAA;AACtE,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAClC,IAAA,MAAM,SAAS,QAAA,IAAY,CAAC,SAAS,QAAA,CAAS,IAAI,IAAI,IAAA,GAAO,EAAA;AAC7D,IAAA,aAAA,CAAc,SAAA,EAAW,GAAG,QAAQ,CAAA,EAAG,MAAM,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC;AAAA,CAAI,CAAA;AACtE,IAAA,OAAO,OAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACF;ACxCA,IAAM,WAAA,GAAc,aAAA,CAAc,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA;AAGjD,IAAM,KAAA,GAAQ,OAAQ,UAAA,CAAiC,GAAA,KAAQ,WAAA;AAyC/D,SAAS,cAAc,IAAA,EAAuC;AAC5D,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,CAAC,MAAA,KAAW;AACf,MAAA,MAAM,GAAA,GAAO,WAAW,MAAA,GAAY,IAAA,CAAK,KAAI,GAAI,IAAA,CAAK,IAAI,MAAM,CAAA;AAGhE,MAAA,OAAO,EAAE,OAAA,EAAS,MAAA,CAAO,GAAA,EAAK,OAAA,IAAW,CAAC,CAAA,EAAE;AAAA,IAC9C,CAAA;AAAA,IACA,GAAA,EAAK,CAAC,MAAA,KAAY,MAAA,KAAW,MAAA,GAAY,KAAK,GAAA,EAAI,GAAI,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA;AAAA,IACrE,GAAA,EAAK,CAAC,MAAA,KAAY,MAAA,KAAW,MAAA,GAAY,KAAK,GAAA,EAAI,GAAI,IAAA,CAAK,GAAA,CAAI,MAAM;AAAA,GACvE;AACF;AAEA,SAAS,aAAA,CAAcA,OAAc,IAAA,EAA2C;AAC9E,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,WAAA,CAAY,YAAY,CAAA;AAQ7C,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAASA,KAAAA,EAAM,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA,GAAI,IAAI,SAASA,KAAI,CAAA;AACrF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,GAAA,KAAQ;AACb,MAAA,EAAA,CAAG,KAAK,GAAG,CAAA;AAAA,IACb,CAAA;AAAA,IACA,SAAS,CAAC,GAAA,KAAQ,cAAc,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,IAC/C,WAAA,EAAa,CAAC,EAAA,KAAO,EAAA,CAAG,YAAY,EAAE,CAAA;AAAA,IACtC,OAAO,MAAM;AACX,MAAA,EAAA,CAAG,KAAA,EAAM;AAAA,IACX;AAAA,GACF;AACF;AAQA,SAAS,iBAAA,GAEP;AACA,EAAA,MAAM,WAAW,OAAA,CAAQ,WAAA;AACzB,EAAA,OAAA,CAAQ,WAAA,GAAc,SAAyB,OAAA,EAAA,GAA4B,IAAA,EAAiB;AAC1F,IAAA,MAAM,KAAA,GAAQ,KAAK,CAAC,CAAA;AACpB,IAAA,MAAM,IAAA,GAAO,OAAO,KAAA,KAAU,QAAA,GAAW,QAAS,KAAA,EAAyC,IAAA;AAC3F,IAAA,MAAM,IAAA,GAAO,OAAO,OAAA,KAAY,QAAA,GAAW,UAAU,OAAA,EAAS,OAAA;AAC9D,IAAA,IAAI,SAAS,qBAAA,IAAyB,SAAA,CAAU,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA,EAAG;AAClE,IAAA,OAAQ,QAAA,CAAuC,IAAA,CAAK,OAAA,EAAS,OAAA,EAAS,GAAG,IAAI,CAAA;AAAA,EAC/E,CAAA;AACA,EAAA,IAAI;AACF,IAAA,OAAO,YAAY,aAAa,CAAA;AAAA,EAClC,CAAA,SAAE;AACA,IAAA,OAAA,CAAQ,WAAA,GAAc,QAAA;AAAA,EACxB;AACF;AAEA,SAAS,cAAA,CAAeA,OAAc,IAAA,EAA2C;AAC/E,EAAA,MAAM,EAAE,YAAA,EAAa,GAAI,iBAAA,EAAkB;AAC3C,EAAA,MAAM,EAAA,GAAK,IAAA,CAAK,QAAA,GAAW,IAAI,YAAA,CAAaA,KAAAA,EAAM,EAAE,QAAA,EAAU,IAAA,EAAM,CAAA,GAAI,IAAI,aAAaA,KAAI,CAAA;AAC7F,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAC,GAAA,KAAQ;AACb,MAAA,EAAA,CAAG,KAAK,GAAG,CAAA;AAAA,IACb,CAAA;AAAA,IACA,SAAS,CAAC,GAAA,KAAQ,cAAc,EAAA,CAAG,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,IAC/C,WAAA,EACE,CAAC,EAAA,KACD,CAAA,GAAI,IAAA,KAAS;AACX,MAAA,EAAA,CAAG,KAAK,OAAO,CAAA;AACf,MAAA,IAAI;AACF,QAAA,EAAA,CAAG,GAAG,IAAI,CAAA;AACV,QAAA,EAAA,CAAG,KAAK,QAAQ,CAAA;AAAA,MAClB,SAAS,GAAA,EAAK;AACZ,QAAA,EAAA,CAAG,KAAK,UAAU,CAAA;AAClB,QAAA,MAAM,GAAA;AAAA,MACR;AAAA,IACF,CAAA;AAAA,IACF,OAAO,MAAM;AACX,MAAA,EAAA,CAAG,KAAA,EAAM;AAAA,IACX;AAAA,GACF;AACF;AAMO,SAAS,UAAA,CAAWA,KAAAA,EAAc,IAAA,GAA0B,EAAC,EAAqB;AACvF,EAAA,OAAO,QAAQ,aAAA,CAAcA,KAAAA,EAAM,IAAI,CAAA,GAAI,cAAA,CAAeA,OAAM,IAAI,CAAA;AACtE;;;AC7IA,IAAM,MAAA,GAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AA+BR,IAAM,aAAN,MAAoC;AAAA,EACjC,EAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA,GAAS,KAAA;AAAA,EAEjB,YAAY,IAAA,EAAyB;AACnC,IAAA,IAAA,CAAK,EAAA,GAAK,UAAA,CAAW,IAAA,CAAK,IAAI,CAAA;AAC9B,IAAA,IAAI,IAAA,CAAK,SAAS,UAAA,EAAY;AAE5B,MAAA,IAAA,CAAK,EAAA,CAAG,KAAK,4BAA4B,CAAA;AACzC,MAAA,IAAA,CAAK,EAAA,CAAG,KAAK,2BAA2B,CAAA;AAAA,IAC1C;AACA,IAAA,IAAA,CAAK,EAAA,CAAG,KAAK,MAAM,CAAA;AACnB,IAAA,IAAI,IAAA,CAAK,SAAS,UAAA,EAAY;AAE5B,MAAA,iBAAA,CAAkB,KAAK,IAAI,CAAA;AAAA,IAC7B;AACA,IAAA,IAAA,CAAK,UAAA,GAAa,KAAK,EAAA,CAAG,OAAA;AAAA,MACxB,CAAA;AAAA,mHAAA;AAAA,KAEF;AACA,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,EAAA,CAAG,WAAA,CAAY,CAAC,OAAA,KAAwB;AAC7D,MAAA,KAAA,MAAW,CAAA,IAAK,SAAS,IAAA,CAAK,UAAA,CAAW,IAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,IAC5D,CAAC,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,KAAA,EAAuB;AAC3B,IAAA,IAAI,KAAK,MAAA,EAAQ;AACjB,IAAA,IAAA,CAAK,UAAA,CAAW,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,KAAK,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,WAAW,OAAA,EAA2B;AACpC,IAAA,IAAI,IAAA,CAAK,MAAA,IAAU,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG;AACzC,IAAA,IAAA,CAAK,WAAW,OAAO,CAAA;AAAA,EACzB;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAI,KAAK,MAAA,EAAQ;AACjB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AACd,IAAA,IAAA,CAAK,GAAG,KAAA,EAAM;AAAA,EAChB;AAAA,EAEA,MAAM,CAAA,EAA6B;AACjC,IAAA,IAAI,KAAK,MAAA,EAAQ,OAAO,EAAE,OAAA,EAAS,EAAC,EAAE;AACtC,IAAA,MAAM,KAAA,GAAkB,CAAC,yBAAyB,CAAA;AAClD,IAAA,MAAM,MAAA,GAAkC,EAAE,UAAA,EAAY,CAAA,CAAE,SAAA,EAAU;AAElE,IAAA,IAAI,CAAA,CAAE,QAAQ,IAAA,EAAM;AAClB,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,MAAA,MAAA,CAAO,KAAA,GAAQ,EAAE,MAAA,CAAO,IAAA;AAAA,IAC1B;AACA,IAAA,IAAI,CAAA,CAAE,QAAQ,OAAA,EAAS;AACrB,MAAA,KAAA,CAAM,KAAK,oBAAoB,CAAA;AAC/B,MAAA,MAAA,CAAO,QAAA,GAAW,EAAE,MAAA,CAAO,OAAA;AAAA,IAC7B;AACA,IAAA,IAAI,CAAA,CAAE,QAAQ,QAAA,EAAU;AACtB,MAAA,KAAA,CAAM,KAAK,sBAAsB,CAAA;AACjC,MAAA,MAAA,CAAO,SAAA,GAAY,EAAE,MAAA,CAAO,QAAA;AAAA,IAC9B;AACA,IAAA,IAAI,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,MAAA,CAAO,SAAS,CAAA,EAAG;AACnC,MAAA,MAAM,YAAA,GAAe,CAAA,CAAE,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA;AACnE,MAAA,KAAA,CAAM,IAAA,CAAK,CAAA,UAAA,EAAa,YAAY,CAAA,CAAA,CAAG,CAAA;AACvC,MAAA,CAAA,CAAE,MAAA,CAAO,OAAA,CAAQ,CAAC,GAAA,EAAK,CAAA,KAAM;AAC3B,QAAA,MAAA,CAAO,CAAA,MAAA,EAAS,CAAC,CAAA,CAAE,CAAA,GAAI,GAAA;AAAA,MACzB,CAAC,CAAA;AAAA,IACH;AACA,IAAA,IAAI,EAAE,KAAA,EAAO;AACX,MAAA,KAAA,CAAM,KAAK,qBAAqB,CAAA;AAChC,MAAA,MAAA,CAAO,SAAS,CAAA,CAAE,KAAA;AAAA,IACpB;AACA,IAAA,IAAI,EAAE,KAAA,EAAO;AACX,MAAA,KAAA,CAAM,KAAK,oBAAoB,CAAA;AAC/B,MAAA,MAAA,CAAO,SAAS,CAAA,CAAE,KAAA;AAAA,IACpB;AACA,IAAA,IAAI,EAAE,MAAA,EAAQ;AAGZ,MAAA,MAAM,OAAA,GAAU,CAAA,CAAE,MAAA,CAAO,OAAA,CAAQ,WAAW,MAAM,CAAA;AAClD,MAAA,KAAA,CAAM,KAAK,kCAAkC,CAAA;AAC7C,MAAA,MAAA,CAAO,OAAA,GAAU,IAAI,OAAO,CAAA,CAAA,CAAA;AAAA,IAC9B;AACA,IAAA,IAAI,EAAE,MAAA,EAAQ;AACZ,MAAA,KAAA,CAAM,KAAK,cAAc,CAAA;AACzB,MAAA,MAAA,CAAO,UAAU,CAAA,CAAE,MAAA;AAAA,IACrB;AAEA,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,KAAA,IAAS,KAAK,GAAI,CAAA;AAC3C,IAAA,MAAA,CAAO,SAAS,KAAA,GAAQ,CAAA;AAExB,IAAA,MAAM,GAAA,GAAM,CAAA;AAAA;AAAA,YAAA,EAEF,KAAA,CAAM,IAAA,CAAK,OAAO,CAAC;AAAA;AAAA,kBAAA,CAAA;AAI7B,IAAA,MAAM,OAAO,IAAA,CAAK,EAAA,CAAG,QAAQ,GAAG,CAAA,CAAE,IAAiB,MAAM,CAAA;AAEzD,IAAA,MAAM,OAAA,GAAU,KAAK,MAAA,GAAS,KAAA;AAC9B,IAAA,MAAM,SAAS,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,KAAK,CAAA,GAAI,IAAA;AAChD,IAAA,MAAM,OAAA,GAAsB,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAC7C,IAAI,CAAA,CAAE,EAAA;AAAA,MACN,WAAW,CAAA,CAAE,SAAA;AAAA,MACb,WAAW,CAAA,CAAE,UAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,QAAA,EAAU,EAAE,QAAA,IAAY;AAAA,OAC1B;AAAA,MACA,OAAO,CAAA,CAAE,KAAA;AAAA,MACT,SAAS,CAAA,CAAE,OAAA;AAAA,MACX,MAAM,CAAA,CAAE,SAAA,GAAY,KAAK,KAAA,CAAM,CAAA,CAAE,SAAS,CAAA,GAAI,MAAA;AAAA,MAC9C,OAAO,CAAA,CAAE,UAAA,GAAa,KAAK,KAAA,CAAM,CAAA,CAAE,UAAU,CAAA,GAAI;AAAA,KACnD,CAAE,CAAA;AAEF,IAAA,OAAO;AAAA,MACL,OAAA;AAAA,MACA,YAAY,OAAA,GAAU,OAAA,CAAQ,QAAQ,MAAA,GAAS,CAAC,EAAE,EAAA,GAAK;AAAA,KACzD;AAAA,EACF;AAAA;AAAA;AAAA,EAIQ,MAAM,CAAA,EAAsC;AAClD,IAAA,OAAO;AAAA,MACL,KAAK,CAAA,CAAE,EAAA;AAAA,MACP,YAAY,CAAA,CAAE,SAAA;AAAA,MACd,aAAa,CAAA,CAAE,SAAA;AAAA,MACf,KAAA,EAAO,EAAE,MAAA,CAAO,IAAA;AAAA,MAChB,QAAA,EAAU,EAAE,MAAA,CAAO,OAAA;AAAA,MACnB,SAAA,EAAW,CAAA,CAAE,MAAA,CAAO,QAAA,IAAY,IAAA;AAAA,MAChC,QAAQ,CAAA,CAAE,KAAA;AAAA,MACV,UAAU,CAAA,CAAE,OAAA;AAAA,MACZ,YAAY,CAAA,CAAE,IAAA,GAAO,KAAK,SAAA,CAAU,CAAA,CAAE,IAAI,CAAA,GAAI,IAAA;AAAA,MAC9C,aAAa,CAAA,CAAE,KAAA,GAAQ,KAAK,SAAA,CAAU,CAAA,CAAE,KAAK,CAAA,GAAI;AAAA,KACnD;AAAA,EACF;AACF;AAMA,SAAS,kBAAkB,MAAA,EAAsB;AAC/C,EAAA,KAAA,MAAW,CAAA,IAAK,CAAC,MAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,IAAA,CAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,IAAA,CAAM,CAAA,EAAG;AAC1D,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,GAAG,GAAK,CAAA;AAAA,IACpB,CAAA,CAAA,MAAQ;AAAA,IAGR;AAAA,EACF;AACF;;;ACvLA,IAAM,WAAA,GAA8B,CAAC,YAAA,EAAc,WAAA,EAAa,KAAK,CAAA;AACrE,IAAM,YAAA,GAA2B,CAAC,OAAA,EAAS,MAAA,EAAQ,QAAQ,OAAO,CAAA;AAY3D,SAAS,sBAAsB,KAAA,EAAmD;AACvF,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,SAAA,IAAa,EAAC;AACjC,EAAA,MAAM,OAAA,GAAU,QAAQ,GAAA,CAAI,eAAA;AAC5B,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,gBAAA;AAE7B,EAAA,MAAM,IAAA,GAAO,OAAA,IAAW,IAAA,CAAK,IAAA,IAAQ,YAAA;AACrC,EAAA,IAAI,CAAC,WAAA,CAAY,QAAA,CAAS,IAAI,CAAA,EAAG;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAI,CAAA,CAAE,CAAA;AAAA,EACjD;AACA,EAAA,MAAM,KAAA,GAAQ,QAAA,IAAY,IAAA,CAAK,KAAA,IAAS,MAAA;AACxC,EAAA,IAAI,CAAC,YAAA,CAAa,QAAA,CAAS,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,KAAK,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO;AAAA,IACL,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,IAAA;AAAA,IACA,KAAA;AAAA,IACA,WAAW,IAAA,CAAK;AAAA,GAClB;AACF;AAWO,SAAS,wBAAA,CACd,GAAA,EACA,IAAA,GAA8B,EAAC,EACrB;AACV,EAAA,MAAM,QAAQ,EAAC;AACf,EAAA,IAAI,GAAA,CAAI,SAAS,KAAA,EAAO;AACtB,IAAA,KAAA,CAAM,IAAA,CAAK,IAAI,QAAA,EAAU,CAAA;AAAA,EAC3B,CAAA,MAAA,IAAW,GAAA,CAAI,IAAA,KAAS,WAAA,EAAa;AACnC,IAAA,KAAA,CAAM,KAAK,IAAI,UAAA,CAAW,EAAE,IAAA,EAAM,UAAA,EAAY,CAAC,CAAA;AAAA,EACjD,CAAA,MAAO;AACL,IAAA,IAAI,CAAC,IAAI,aAAA,EAAe;AACtB,MAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,IAClE;AACA,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,eAAe,SAAS,CAAA;AAClD,IAAA,SAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAClC,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,SAAS,CAAA;AACvC,IAAA,KAAA,CAAM,KAAK,IAAI,UAAA,CAAW,EAAE,IAAA,EAAM,MAAA,EAAQ,CAAC,CAAA;AAC3C,IAAA,qBAAA,CAAsB,IAAI,aAAa,CAAA;AAAA,EACzC;AAEA,EAAA,IAAI,KAAK,MAAA,KAAW,KAAA,QAAa,IAAA,CAAK,IAAI,YAAY,CAAA;AACtD,EAAA,OAAO,IAAI,QAAA,CAAS;AAAA,IAClB,WAAW,GAAA,CAAI,SAAA;AAAA,IACf,OAAO,GAAA,CAAI,KAAA;AAAA,IACX;AAAA,GACD,CAAA;AACH;ACtDO,IAAM,sBAAA,GAAgE,OAAO,MAAA,CAAO;AAAA,EACzF,UAAA,EAAY,GAAA;AAAA,EACZ,UAAA,EAAY;AACd,CAAC;AAED,IAAM,MAAA,GAAS,KAAA;AAGf,IAAM,UAAA,GAAa,GAAA;AAOnB,IAAM,eAAA,GAAkB,GAAA;AAGxB,IAAM,eAAA,GAAkB,GAAA;AAIxB,IAAM,YAAA,GAAe,CAAA;AAAA;AAAA,CAAA,CAAA;AAIrB,IAAM,cAAA,GAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,CAAA,CAAA;AAYhB,SAAS,qBACd,UAAA,EAC6B;AAC7B,EAAA,OAAO;AAAA,IACL,YAAY,gBAAA,CAAiB,UAAA,EAAY,UAAU,CAAA,GAC/C,UAAA,CAAW,aACX,sBAAA,CAAuB,UAAA;AAAA,IAC3B,YAAY,gBAAA,CAAiB,UAAA,EAAY,UAAU,CAAA,GAC/C,UAAA,CAAW,aACX,sBAAA,CAAuB;AAAA,GAC7B;AACF;AAEA,SAAS,gBAAA,GAAkC;AACzC,EAAA,OAAO,IAAI,OAAA,CAAc,CAAC,OAAA,KAAY,YAAA,CAAa,OAAO,CAAC,CAAA;AAC7D;AAOA,eAAe,cAAA,CACb,MACA,MAAA,EACiB;AACjB,EAAA,IAAI,OAAA,GAAU,CAAA;AACd,EAAA,KAAA,IAAS,IAAA,GAAO,CAAA,EAAG,IAAA,GAAO,eAAA,EAAiB,IAAA,EAAA,EAAQ;AACjD,IAAA,MAAM,EAAE,OAAA,EAAQ,GAAI,IAAA,CAAK,IAAI,MAAM,CAAA;AACnC,IAAA,OAAA,IAAW,OAAA;AACX,IAAA,IAAI,UAAU,UAAA,EAAY;AAC1B,IAAA,MAAM,gBAAA,EAAiB;AAAA,EACzB;AACA,EAAA,OAAO,OAAA;AACT;AAWA,eAAsB,oBAAA,CACpB,QACA,SAAA,EACqC;AACrC,EAAA,MAAM,MAAA,GAAqC,EAAE,YAAA,EAAc,CAAA,EAAG,gBAAgB,CAAA,EAAE;AAChF,EAAA,IAAI,CAACC,UAAAA,CAAW,MAAM,CAAA,EAAG,OAAO,MAAA;AAChC,EAAA,IAAI,UAAU,UAAA,IAAc,IAAA,IAAQ,SAAA,CAAU,UAAA,IAAc,MAAM,OAAO,MAAA;AAEzE,EAAA,MAAM,EAAA,GAAK,WAAW,MAAM,CAAA;AAC5B,EAAA,IAAI;AACF,IAAA,EAAA,CAAG,IAAA,CAAK,CAAA,sBAAA,EAAyB,eAAe,CAAA,CAAE,CAAA;AAClD,IAAA,IAAI,SAAA,CAAU,cAAc,IAAA,EAAM;AAChC,MAAA,MAAM,MAAA,GAAS,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,SAAA,CAAU,UAAA,GAAa,MAAM,CAAA,CAAE,WAAA,EAAY;AAChF,MAAA,MAAA,CAAO,eAAe,MAAM,cAAA,CAAe,EAAA,CAAG,OAAA,CAAQ,YAAY,CAAA,EAAG;AAAA,QACnE,OAAA,EAAS,MAAA;AAAA,QACT,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH;AACA,IAAA,IAAI,SAAA,CAAU,cAAc,IAAA,EAAM;AAChC,MAAA,MAAA,CAAO,iBAAiB,MAAM,cAAA,CAAe,EAAA,CAAG,OAAA,CAAQ,cAAc,CAAA,EAAG;AAAA,QACvE,OAAO,SAAA,CAAU,UAAA;AAAA,QACjB,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,EAAA,CAAG,KAAA,EAAM;AAAA,EACX;AACF;AC1HA,IAAM,kBAAA,GAAqB,EAAA;AAE3B,IAAM,cAAA,GAAiB,iBAAA;AAEvB,IAAM,MAAA,GAAS,UAAA;AACf,IAAM,QAAA,GAAW,oDAAA;AAIjB,IAAM,YAAA,GAAyB;AAAA,EAC7B,+BAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA;AACF,CAAA;AAGA,IAAM,GAAA,GAAM,sDAAA;AACZ,IAAM,cAAA,GAAiB,cAAA;AACvB,IAAM,aAAA,GAAgB,SAAA;AACtB,IAAM,aAAA,GAAgB,oBAAA;AACtB,IAAM,MAAA,GAAS,qCAAA;AAEf,IAAM,UAAA,GACJ,kGAAA;AAGF,IAAM,SAAA,GAAY,gCAAA;AAClB,IAAM,kBAAA,GAAqB,UAAA;AAC3B,IAAM,aAAA,GACJ,yPAAA;AAGF,SAAS,cAAc,KAAA,EAAuB;AAC5C,EAAA,IAAI,UAAA,GAAa,MAAM,IAAA,EAAK;AAC5B,EAAA,WAAS;AACP,IAAA,IAAI,WAAW,UAAA,CAAW,IAAI,GAAG,UAAA,GAAa,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,SAAA,IACvD,WAAW,UAAA,CAAW,GAAG,GAAG,UAAA,GAAa,UAAA,CAAW,MAAM,CAAC,CAAA;AAAA,SAC/D;AAAA,EACP;AACA,EAAA,OAAO,UAAA,CAAW,SAAS,GAAG,CAAA,eAAgB,UAAA,CAAW,KAAA,CAAM,GAAG,EAAE,CAAA;AACpE,EAAA,OAAO,UAAA;AACT;AAGO,SAAS,gBAAgB,KAAA,EAAuB;AACrD,EAAA,OAAO,UAAA,CAAW,QAAQ,CAAA,CACvB,MAAA,CAAO,cAAc,KAAK,CAAA,EAAG,MAAM,CAAA,CACnC,MAAA,CAAO,KAAK,CAAA,CACZ,KAAA,CAAM,GAAG,kBAAkB,CAAA;AAChC;AAQO,SAAS,QAAQ,KAAA,EAAuB;AAC7C,EAAA,MAAM,UAAA,GAAa,cAAc,KAAK,CAAA;AACtC,EAAA,IAAI,CAAC,YAAY,OAAO,aAAA;AACxB,EAAA,MAAM,IAAA,GAAO,gBAAgB,UAAU,CAAA;AACvC,EAAA,MAAM,WAAW,UAAA,CAAW,KAAA,CAAM,WAAW,WAAA,CAAY,GAAG,IAAI,CAAC,CAAA;AACjE,EAAA,MAAM,GAAA,GAAM,QAAA,CAAS,WAAA,CAAY,GAAG,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,MAAM,CAAA,GAAI,QAAA,CAAS,MAAM,GAAA,GAAM,CAAC,CAAA,CAAE,WAAA,EAAY,GAAI,EAAA;AAC9D,EAAA,OAAO,cAAA,CAAe,IAAA,CAAK,GAAG,CAAA,GAAI,CAAA,MAAA,EAAS,IAAI,CAAA,EAAA,EAAK,GAAG,CAAA,CAAA,GAAK,CAAA,MAAA,EAAS,IAAI,CAAA,CAAA,CAAA;AAC3E;AAEA,SAAS,QAAA,CAAS,KAAA,EAAe,MAAA,EAAgB,IAAA,EAAc,IAAA,EAAsB;AACnF,EAAA,MAAM,WAAW,IAAA,CAAK,KAAA,CAAM,cAAc,CAAA,GAAI,CAAC,CAAA,IAAK,EAAA;AACpD,EAAA,MAAM,IAAA,GAAO,WAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAC,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA;AAC1D,EAAA,IAAI,IAAA,KAAS,EAAA,IAAM,IAAA,KAAS,GAAA,IAAO,QAAA,CAAS,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA,EAAG,OAAO,KAAA;AACxE,EAAA,MAAMD,QAAO,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAC,CAAA,CAAE,CAAC,CAAA,IAAK,EAAA;AACzC,EAAA,OAAO,CAAA,EAAG,MAAM,CAAA,EAAG,IAAI,IAAI,OAAA,CAAQA,KAAI,CAAC,CAAA,EAAG,QAAQ,CAAA,CAAA;AACrD;AAEA,SAAS,WAAW,KAAA,EAAuB;AACzC,EAAA,IAAI,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,KAAA;AAClC,EAAA,MAAM,UAAU,KAAA,CAAM,KAAA,CAAM,aAAa,CAAA,GAAI,CAAC,CAAA,IAAK,EAAA;AACnD,EAAA,MAAM,YAAA,GAAe,KAAA,CAAM,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA;AAC/C,EAAA,MAAM,WAAW,YAAA,CAAa,KAAA,CAAM,cAAc,CAAA,GAAI,CAAC,CAAA,IAAK,EAAA;AAC5D,EAAA,MAAM,IAAA,GAAO,WAAW,YAAA,CAAa,KAAA,CAAM,GAAG,CAAC,QAAA,CAAS,MAAM,CAAA,GAAI,YAAA;AAElE,EAAA,IAAI,SAAS,MAAA,IAAU,QAAA,CAAS,IAAA,CAAK,IAAI,GAAG,OAAO,KAAA;AACnD,EAAA,IAAI,CAAC,IAAA,IAAQ,kBAAA,CAAmB,IAAA,CAAK,IAAI,KAAK,UAAA,CAAW,IAAA,CAAK,IAAI,CAAA,EAAG,OAAO,KAAA;AAC5E,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACrC,EAAA,IAAI,UAAU,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,SAAS,CAAC,CAAC,CAAA,CAAA,EAAI,UAAA,CAAW,SAAS,CAAC,CAAA,IAAK,EAAE,CAAC,GAAG,QAAQ,CAAA,CAAA;AACzF,EAAA,MAAM,SAAS,aAAA,CAAc,IAAA,CAAK,IAAI,CAAA,IAAK,MAAA,CAAO,KAAK,IAAI,CAAA;AAC3D,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,cAAc,IAAA,CAAK,IAAI,GAAG,OAAO,KAAA;AACjD,EAAA,OAAO,GAAG,OAAO,CAAA,EAAG,QAAQ,IAAI,CAAC,GAAG,QAAQ,CAAA,CAAA;AAC9C;AAWO,SAAS,aAAa,IAAA,EAAsB;AACjD,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,KAAA,MAAW,QAAQ,YAAA,EAAc;AAC/B,IAAA,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,IAAA,EAAM,MAAM,CAAA;AAAA,EAChC;AACA,EAAA,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,GAAA,EAAK,QAAQ,CAAA;AAC/B,EAAA,OAAO,GAAA,CAAI,OAAA,CAAQ,MAAA,EAAQ,UAAU,CAAA;AACvC;;;ACnHO,IAAM,kBAAN,MAAyC;AAAA,EAC9C,YAA6B,KAAA,EAA+B;AAA/B,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAAA,EAAgC;AAAA,EAAhC,KAAA;AAAA,EAE7B,MAAM,KAAA,EAAuB;AAC3B,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,MAAA,CAAO,QAAA,GACrB,CAAA,EAAG,MAAM,MAAA,CAAO,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,MAAA,CAAO,OAAO,IAAI,KAAA,CAAM,MAAA,CAAO,QAAQ,CAAA,CAAA,GACrE,CAAA,EAAG,KAAA,CAAM,OAAO,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,MAAA,CAAO,OAAO,CAAA,CAAA;AAChD,IAAA,IAAI,IAAA,GAAO,IAAI,KAAA,CAAM,KAAK,MAAM,GAAG,CAAA,EAAA,EAAK,MAAM,OAAO,CAAA,CAAA;AACrD,IAAA,IAAI,KAAA,CAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,MAAM,IAAI,CAAA,CAAE,SAAS,CAAA,EAAG;AACpD,MAAA,IAAA,IAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,IAAI,CAAC,CAAA,CAAA;AAAA,IACxC;AACA,IAAA,IAAI,KAAA,CAAM,OAAO,OAAA,EAAS;AACxB,MAAA,IAAA,IAAQ,CAAA,QAAA,EAAM,KAAA,CAAM,KAAA,CAAM,OAAO,CAAA,CAAA;AAAA,IACnC;AACA,IAAA,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACjB;AAAA,EAEA,WAAW,OAAA,EAA2B;AACpC,IAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,KAAA,GAAc;AAAA,EAEd;AACF;;;ACfO,IAAM,YAAN,MAAmC;AAAA,EACvB,IAAA;AAAA,EAEjB,YAAY,IAAA,EAAwB;AAClC,IAAA,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AAAA,EACnB;AAAA,EAEA,MAAM,KAAA,EAAuB;AAC3B,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,IAAA,CAAK,EAAE,IAAA,EAAM,WAAA,EAAa,OAAO,CAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,WAAW,OAAA,EAA2B;AACpC,IAAA,KAAA,MAAW,CAAA,IAAK,OAAA,EAAS,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,KAAA,GAAc;AAAA,EAEd;AACF","file":"chunk-MDCI4RSG.js","sourcesContent":["/**\n * Run state `skaile` writes into a project and that belongs to one machine: the compiled-prompt\n * snapshot of every run, the ledger of the agent files an install wrote, the log database of a\n * run and the install history. The generated `.gitignore` lists them.\n */\n\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\n\n/** `.gitignore` lines for the run state files; `skaile init` writes them too. */\nexport const RUN_STATE_GITIGNORE_ENTRIES: readonly string[] = [\n  \".skaile/composition-runs/\",\n  \".skaile/agent-instances-managed.json\",\n  // The per-session log database (SQLite, with its -shm/-wal files) and the install history.\n  \".skaile/logs.db*\",\n  \".skaile/history.yaml\",\n  // Agent-file hashes of the harness a project left, kept until `harness set --clean` runs.\n  \".skaile/harness-switch-hashes.json\",\n];\n\n/** Lines of a `.gitignore` that already ignore the whole `.skaile/` folder. */\nconst WHOLE_SKAILE_FOLDER: readonly string[] = [\n  \".skaile\",\n  \".skaile/\",\n  \"/.skaile\",\n  \"/.skaile/\",\n  \".skaile/*\",\n];\n\n/**\n * Add the run state files to the project's `.gitignore` when it misses them: existing projects get\n * the lines on the next write of one of the files. Only a skaile project (a `skaile.yaml` in\n * `projectDir`) that is a git checkout (a `.git` there) is touched: a folder that is neither, or\n * an unrelated repository the command happens to run in, keeps its `.gitignore` as it is. A\n * checkout without a `.gitignore` gets one; a failed write is ignored (the entries are a courtesy).\n *\n * @param projectDir - Project folder that holds `.skaile/`.\n * @returns The lines added, empty when none were missing.\n */\nexport function ensureRunStateIgnored(projectDir: string): string[] {\n  const gitignore = join(projectDir, \".gitignore\");\n  try {\n    if (!existsSync(join(projectDir, \"skaile.yaml\"))) return [];\n    if (!existsSync(join(projectDir, \".git\"))) return [];\n    const existing = existsSync(gitignore) ? readFileSync(gitignore, \"utf-8\") : \"\";\n    const have = new Set(existing.split(\"\\n\").map((l) => l.trim()));\n    if (WHOLE_SKAILE_FOLDER.some((l) => have.has(l))) return [];\n    const missing = RUN_STATE_GITIGNORE_ENTRIES.filter((e) => !have.has(e));\n    if (missing.length === 0) return [];\n    const prefix = existing && !existing.endsWith(\"\\n\") ? \"\\n\" : \"\";\n    writeFileSync(gitignore, `${existing}${prefix}${missing.join(\"\\n\")}\\n`);\n    return missing;\n  } catch {\n    return [];\n  }\n}\n","/**\n * Runtime-portable embedded SQLite for the logging sink.\n *\n * The log store needs a synchronous, embedded SQLite driver. Bun ships\n * `bun:sqlite`; Node 22.5+ ships `node:sqlite`. This shim selects the right\n * one at runtime so the CLI and runtime run unmodified under either — no Bun\n * dependency baked into the published build.\n *\n * Both drivers accept `$`-prefixed named-parameter keys directly, so callers\n * use one binding convention. The only API gap is transactions: `bun:sqlite`\n * has `db.transaction()`, `node:sqlite` does not — {@link openSqlite}\n * synthesizes it with manual `BEGIN`/`COMMIT`/`ROLLBACK`.\n */\nimport { createRequire } from \"node:module\";\n\nconst nodeRequire = createRequire(import.meta.url);\n\n/** True when executing under the Bun runtime. */\nconst isBun = typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\";\n\n/** A prepared statement bound with `$`-prefixed named parameters. */\nexport interface PortableStatement {\n  /** Returns the number of rows the statement changed. */\n  run(params?: Record<string, unknown>): PortableRunResult;\n  all<T = unknown>(params?: Record<string, unknown>): T[];\n  get<T = unknown>(params?: Record<string, unknown>): T | undefined;\n}\n\n/** Outcome of {@link PortableStatement.run}, normalised across drivers. */\nexport interface PortableRunResult {\n  changes: number;\n}\n\n/** A synchronous embedded SQLite handle, uniform across Bun and Node. */\nexport interface PortableDatabase {\n  exec(sql: string): void;\n  prepare(sql: string): PortableStatement;\n  /** Wrap `fn` so the statements it runs commit as one transaction. */\n  transaction<A extends unknown[]>(fn: (...args: A) => void): (...args: A) => void;\n  close(): void;\n}\n\nexport interface OpenSqliteOptions {\n  /** Open read-only. The database file must already exist. */\n  readonly?: boolean;\n}\n\n/** Minimal structural shape shared by `bun:sqlite` and `node:sqlite` handles. */\ninterface RawStatement {\n  run(params?: unknown): unknown;\n  all(params?: unknown): unknown[];\n  get(params?: unknown): unknown;\n}\ninterface RawDatabase {\n  exec(sql: string): unknown;\n  prepare(sql: string): RawStatement;\n  close(): void;\n}\n\nfunction wrapStatement(stmt: RawStatement): PortableStatement {\n  return {\n    run: (params) => {\n      const raw = (params === undefined ? stmt.run() : stmt.run(params)) as\n        | { changes?: number | bigint }\n        | undefined;\n      return { changes: Number(raw?.changes ?? 0) };\n    },\n    all: (params) => (params === undefined ? stmt.all() : stmt.all(params)) as never,\n    get: (params) => (params === undefined ? stmt.get() : stmt.get(params)) as never,\n  };\n}\n\nfunction openBunSqlite(path: string, opts: OpenSqliteOptions): PortableDatabase {\n  const { Database } = nodeRequire(\"bun:sqlite\") as {\n    Database: new (\n      p: string,\n      o?: { readonly?: boolean },\n    ) => RawDatabase & {\n      transaction<A extends unknown[]>(fn: (...args: A) => void): (...args: A) => void;\n    };\n  };\n  const db = opts.readonly ? new Database(path, { readonly: true }) : new Database(path);\n  return {\n    exec: (sql) => {\n      db.exec(sql);\n    },\n    prepare: (sql) => wrapStatement(db.prepare(sql)),\n    transaction: (fn) => db.transaction(fn),\n    close: () => {\n      db.close();\n    },\n  };\n}\n\n/**\n * Load `node:sqlite` without Node's \"SQLite is an experimental feature\"\n * `ExperimentalWarning` (Node 22.5–23). The warning is emitted synchronously by\n * the `require`, so the filter is installed for that one call only; every other\n * warning, before or after, is passed through untouched.\n */\nfunction requireNodeSqlite(): {\n  DatabaseSync: new (p: string, o?: { readOnly?: boolean }) => RawDatabase;\n} {\n  const original = process.emitWarning;\n  process.emitWarning = function (this: unknown, warning: string | Error, ...args: unknown[]) {\n    const first = args[0];\n    const type = typeof first === \"string\" ? first : (first as { type?: string } | undefined)?.type;\n    const text = typeof warning === \"string\" ? warning : warning?.message;\n    if (type === \"ExperimentalWarning\" && /sqlite/i.test(text ?? \"\")) return;\n    return (original as (...a: unknown[]) => void).call(process, warning, ...args);\n  } as typeof process.emitWarning;\n  try {\n    return nodeRequire(\"node:sqlite\");\n  } finally {\n    process.emitWarning = original;\n  }\n}\n\nfunction openNodeSqlite(path: string, opts: OpenSqliteOptions): PortableDatabase {\n  const { DatabaseSync } = requireNodeSqlite();\n  const db = opts.readonly ? new DatabaseSync(path, { readOnly: true }) : new DatabaseSync(path);\n  return {\n    exec: (sql) => {\n      db.exec(sql);\n    },\n    prepare: (sql) => wrapStatement(db.prepare(sql)),\n    transaction:\n      (fn) =>\n      (...args) => {\n        db.exec(\"BEGIN\");\n        try {\n          fn(...args);\n          db.exec(\"COMMIT\");\n        } catch (err) {\n          db.exec(\"ROLLBACK\");\n          throw err;\n        }\n      },\n    close: () => {\n      db.close();\n    },\n  };\n}\n\n/**\n * Open an embedded SQLite database using the runtime's native driver —\n * `bun:sqlite` under Bun, `node:sqlite` under Node 22.5+.\n */\nexport function openSqlite(path: string, opts: OpenSqliteOptions = {}): PortableDatabase {\n  return isBun ? openBunSqlite(path, opts) : openNodeSqlite(path, opts);\n}\n","import { chmodSync } from \"node:fs\";\nimport type { LogEntry, LogQuery, LogQueryResult } from \"@skaile/workspaces/types\";\nimport { openSqlite, type PortableDatabase, type PortableStatement } from \"./sqlite-runtime.js\";\nimport type { LogSink } from \"./types.js\";\n\nexport interface SqliteSinkOptions {\n  path: string; // ':memory:' or filesystem path\n}\n\nconst SCHEMA = `\nCREATE TABLE IF NOT EXISTS log_entries (\n  id            TEXT PRIMARY KEY,\n  timestamp     TEXT NOT NULL,\n  session_id    TEXT NOT NULL,\n  kind          TEXT NOT NULL,\n  subkind       TEXT NOT NULL,\n  instance      TEXT,\n  level         TEXT NOT NULL,\n  message       TEXT NOT NULL,\n  data_json     TEXT,\n  error_json    TEXT\n);\nCREATE INDEX IF NOT EXISTS idx_logs_timestamp ON log_entries(timestamp);\nCREATE INDEX IF NOT EXISTS idx_logs_kind_level ON log_entries(kind, level);\nCREATE INDEX IF NOT EXISTS idx_logs_source ON log_entries(kind, subkind, instance);\n`;\n\ninterface LogEntryRow {\n  id: string;\n  timestamp: string;\n  session_id: string;\n  kind: string;\n  subkind: string;\n  instance: string | null;\n  level: string;\n  message: string;\n  data_json: string | null;\n  error_json: string | null;\n}\n\nexport class SqliteSink implements LogSink {\n  private db: PortableDatabase;\n  private insertStmt: PortableStatement;\n  private insertMany: (entries: LogEntry[]) => void;\n  private closed = false;\n\n  constructor(opts: SqliteSinkOptions) {\n    this.db = openSqlite(opts.path);\n    if (opts.path !== \":memory:\") {\n      // Wait for a concurrent skaile process on the same logs.db instead of SQLITE_BUSY.\n      this.db.exec(\"PRAGMA busy_timeout = 5000\");\n      this.db.exec(\"PRAGMA journal_mode = WAL\");\n    }\n    this.db.exec(SCHEMA);\n    if (opts.path !== \":memory:\") {\n      // Group-writable so a co-grouped host process can open read-write for retention.\n      makeGroupWritable(opts.path);\n    }\n    this.insertStmt = this.db.prepare(\n      `INSERT INTO log_entries (id, timestamp, session_id, kind, subkind, instance, level, message, data_json, error_json)\n       VALUES ($id, $timestamp, $session_id, $kind, $subkind, $instance, $level, $message, $data_json, $error_json)`,\n    );\n    this.insertMany = this.db.transaction((entries: LogEntry[]) => {\n      for (const e of entries) this.insertStmt.run(this.toRow(e));\n    });\n  }\n\n  write(entry: LogEntry): void {\n    if (this.closed) return;\n    this.insertStmt.run(this.toRow(entry));\n  }\n\n  writeBatch(entries: LogEntry[]): void {\n    if (this.closed || entries.length === 0) return;\n    this.insertMany(entries);\n  }\n\n  close(): void {\n    if (this.closed) return;\n    this.closed = true;\n    this.db.close();\n  }\n\n  query(q: LogQuery): LogQueryResult {\n    if (this.closed) return { entries: [] };\n    const where: string[] = [\"session_id = $sessionId\"];\n    const params: Record<string, unknown> = { $sessionId: q.sessionId };\n\n    if (q.source?.kind) {\n      where.push(\"kind = $kind\");\n      params.$kind = q.source.kind;\n    }\n    if (q.source?.subkind) {\n      where.push(\"subkind = $subkind\");\n      params.$subkind = q.source.subkind;\n    }\n    if (q.source?.instance) {\n      where.push(\"instance = $instance\");\n      params.$instance = q.source.instance;\n    }\n    if (q.levels && q.levels.length > 0) {\n      const placeholders = q.levels.map((_, i) => `$level${i}`).join(\", \");\n      where.push(`level IN (${placeholders})`);\n      q.levels.forEach((lvl, i) => {\n        params[`$level${i}`] = lvl;\n      });\n    }\n    if (q.since) {\n      where.push(\"timestamp >= $since\");\n      params.$since = q.since;\n    }\n    if (q.until) {\n      where.push(\"timestamp < $until\");\n      params.$until = q.until;\n    }\n    if (q.search) {\n      // Escape SQL LIKE wildcards so a search for \"100%\" matches the literal string,\n      // not \"100<anything>\". \\\\ is also escaped because it's the escape character itself.\n      const escaped = q.search.replace(/[\\\\%_]/g, \"\\\\$&\");\n      where.push(\"message LIKE $search ESCAPE '\\\\'\");\n      params.$search = `%${escaped}%`;\n    }\n    if (q.cursor) {\n      where.push(\"id < $cursor\");\n      params.$cursor = q.cursor;\n    }\n\n    const limit = Math.min(q.limit ?? 500, 5000);\n    params.$limit = limit + 1;\n\n    const sql = `SELECT id, timestamp, session_id, kind, subkind, instance, level, message, data_json, error_json\n      FROM log_entries\n      WHERE ${where.join(\" AND \")}\n      ORDER BY id DESC\n      LIMIT $limit`;\n\n    const rows = this.db.prepare(sql).all<LogEntryRow>(params);\n\n    const hasMore = rows.length > limit;\n    const sliced = hasMore ? rows.slice(0, limit) : rows;\n    const entries: LogEntry[] = sliced.map((r) => ({\n      id: r.id,\n      timestamp: r.timestamp,\n      sessionId: r.session_id,\n      source: {\n        kind: r.kind as LogEntry[\"source\"][\"kind\"],\n        subkind: r.subkind,\n        instance: r.instance ?? undefined,\n      },\n      level: r.level as LogEntry[\"level\"],\n      message: r.message,\n      data: r.data_json ? JSON.parse(r.data_json) : undefined,\n      error: r.error_json ? JSON.parse(r.error_json) : undefined,\n    }));\n\n    return {\n      entries,\n      nextCursor: hasMore ? entries[entries.length - 1].id : undefined,\n    };\n  }\n\n  // Both bun:sqlite and node:sqlite bind `$name` SQL placeholders from\n  // matching `$`-prefixed object keys.\n  private toRow(e: LogEntry): Record<string, unknown> {\n    return {\n      $id: e.id,\n      $timestamp: e.timestamp,\n      $session_id: e.sessionId,\n      $kind: e.source.kind,\n      $subkind: e.source.subkind,\n      $instance: e.source.instance ?? null,\n      $level: e.level,\n      $message: e.message,\n      $data_json: e.data ? JSON.stringify(e.data) : null,\n      $error_json: e.error ? JSON.stringify(e.error) : null,\n    };\n  }\n}\n\n/**\n * Best-effort `chmod 0664` on the db file and its WAL/SHM siblings. Swallows all\n * errors (missing sibling, EPERM when not the owner) so logging never throws.\n */\nfunction makeGroupWritable(dbPath: string): void {\n  for (const p of [dbPath, `${dbPath}-wal`, `${dbPath}-shm`]) {\n    try {\n      chmodSync(p, 0o664);\n    } catch {\n      // Sibling may not exist yet, or this process may not own the file.\n      // Either way, retention degrades cleanly — never break logging.\n    }\n  }\n}\n","import { mkdirSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { LogLevel, LogStoreConfig, LogStoreMode } from \"@skaile/workspaces/types\";\nimport { ensureRunStateIgnored } from \"../run-state-ignore.js\";\nimport { LogStore } from \"./log-store.js\";\nimport { NoOpSink } from \"./sinks/no-op-sink.js\";\nimport { SqliteSink } from \"./sinks/sqlite-sink.js\";\nimport { StdoutSink } from \"./sinks/stdout-sink.js\";\n\nconst VALID_MODES: LogStoreMode[] = [\"persistent\", \"ephemeral\", \"off\"];\nconst VALID_LEVELS: LogLevel[] = [\"debug\", \"info\", \"warn\", \"error\"];\n\nexport interface ResolveLogStoreConfigInput {\n  sessionId: string;\n  workspacePath?: string;\n  yamlBlock?: Partial<{\n    mode: LogStoreMode;\n    level: LogLevel;\n    retention: { maxEntries?: number; maxAgeDays?: number };\n  }>;\n}\n\nexport function resolveLogStoreConfig(input: ResolveLogStoreConfigInput): LogStoreConfig {\n  const yaml = input.yamlBlock ?? {};\n  const envMode = process.env.SKAILE_LOG_MODE as LogStoreMode | undefined;\n  const envLevel = process.env.SKAILE_LOG_LEVEL as LogLevel | undefined;\n\n  const mode = envMode ?? yaml.mode ?? \"persistent\";\n  if (!VALID_MODES.includes(mode)) {\n    throw new Error(`Invalid logging.mode: ${mode}`);\n  }\n  const level = envLevel ?? yaml.level ?? \"info\";\n  if (!VALID_LEVELS.includes(level)) {\n    throw new Error(`Invalid logging.level: ${level}`);\n  }\n\n  return {\n    sessionId: input.sessionId,\n    workspacePath: input.workspacePath,\n    mode,\n    level,\n    retention: yaml.retention,\n  };\n}\n\nexport interface CreateLogStoreOptions {\n  /**\n   * Mirror every entry to stdout as well (default `true`, for container logs).\n   * A CLI host that already renders the entries itself passes `false` so a\n   * record is not printed twice.\n   */\n  stdout?: boolean;\n}\n\nexport function createLogStoreFromConfig(\n  cfg: LogStoreConfig,\n  opts: CreateLogStoreOptions = {},\n): LogStore {\n  const sinks = [];\n  if (cfg.mode === \"off\") {\n    sinks.push(new NoOpSink());\n  } else if (cfg.mode === \"ephemeral\") {\n    sinks.push(new SqliteSink({ path: \":memory:\" }));\n  } else {\n    if (!cfg.workspacePath) {\n      throw new Error(\"logging.mode=persistent requires workspacePath\");\n    }\n    const dir = path.join(cfg.workspacePath, \".skaile\");\n    mkdirSync(dir, { recursive: true });\n    const dbPath = path.join(dir, \"logs.db\");\n    sinks.push(new SqliteSink({ path: dbPath }));\n    ensureRunStateIgnored(cfg.workspacePath);\n  }\n  // Include stdout for live container logs (dev-friendly) unless the host opts out.\n  if (opts.stdout !== false) sinks.push(new StdoutSink());\n  return new LogStore({\n    sessionId: cfg.sessionId,\n    level: cfg.level,\n    sinks,\n  });\n}\n","/**\n * Retention for the per-session structured-log SQLite store (`logs.db`).\n *\n * Mirrors the platform's `enforceLogsRetention`\n * (`platform/backend/libs/session/src/logs-retention.utils.ts`): the same\n * age-then-count semantics, batch size, pass ceiling and busy timeout. The\n * platform trims the host copy of the file once per wake; in broker mode that\n * copy is not the file the runner writes, so the runner trims its own file at\n * boot. In docker mode both trim the same file with the same rules, which is\n * harmless: a second pass finds nothing left to delete.\n */\nimport { existsSync } from \"node:fs\";\nimport type { LogStoreRetention } from \"@skaile/workspaces/types\";\nimport { isRetentionValue } from \"./retention-value.js\";\nimport { openSqlite, type PortableStatement } from \"./sinks/sqlite-runtime.js\";\n\n/** Rows removed by one {@link enforceLogsRetention} run. */\nexport interface EnforceLogsRetentionResult {\n  deletedByAge: number;\n  deletedByCount: number;\n}\n\n/**\n * The platform's cloud-mode retention defaults (docker and broker). Used when\n * `skaile.yaml` has no `logging.retention` value for a field.\n */\nexport const DEFAULT_LOGS_RETENTION: Readonly<Required<LogStoreRetention>> = Object.freeze({\n  maxEntries: 100_000,\n  maxAgeDays: 7,\n});\n\nconst DAY_MS = 86_400_000;\n\n/** Rows deleted per statement. Caps both the write lock and the loop stall. */\nconst BATCH_SIZE = 500;\n\n/**\n * Pass ceiling per statement. Concurrent inserts keep refilling the count-trim\n * delete-set, so \"loop until a short batch\" is not a guaranteed bound;\n * leftovers are trimmed on the next boot.\n */\nconst MAX_TRIM_PASSES = 200;\n\n/** Wait on a lock held by another connection instead of failing with SQLITE_BUSY. */\nconst BUSY_TIMEOUT_MS = 2_000;\n\n// `LIMIT` directly on `DELETE` needs SQLITE_ENABLE_UPDATE_DELETE_LIMIT; the\n// `id IN (SELECT ... LIMIT)` form works under both bun:sqlite and node:sqlite.\nconst AGE_TRIM_SQL = `DELETE FROM log_entries WHERE id IN (\n  SELECT id FROM log_entries WHERE timestamp < $cutoff ORDER BY id LIMIT $batch\n)`;\n\nconst COUNT_TRIM_SQL = `DELETE FROM log_entries WHERE id IN (\n  SELECT id FROM log_entries\n  WHERE id NOT IN (SELECT id FROM log_entries ORDER BY id DESC LIMIT $keep)\n  ORDER BY id LIMIT $batch\n)`;\n\n/**\n * Overlay the configured retention on {@link DEFAULT_LOGS_RETENTION}, field by\n * field. A value that is not a non-negative finite number counts as unset.\n * `0` is a valid value: `maxEntries: 0` or `maxAgeDays: 0` deletes every row,\n * as it does on the platform.\n */\nexport function resolveLogsRetention(\n  configured: LogStoreRetention | undefined,\n): Required<LogStoreRetention> {\n  return {\n    maxEntries: isRetentionValue(configured?.maxEntries)\n      ? configured.maxEntries\n      : DEFAULT_LOGS_RETENTION.maxEntries,\n    maxAgeDays: isRetentionValue(configured?.maxAgeDays)\n      ? configured.maxAgeDays\n      : DEFAULT_LOGS_RETENTION.maxAgeDays,\n  };\n}\n\nfunction yieldToEventLoop(): Promise<void> {\n  return new Promise<void>((resolve) => setImmediate(resolve));\n}\n\n/**\n * Run one bounded delete until it stops filling a batch. Each statement is its\n * own implicit transaction, so no lock is held across the yield and the\n * in-process sink can write between batches.\n */\nasync function runBoundedTrim(\n  stmt: PortableStatement,\n  params: Record<string, unknown>,\n): Promise<number> {\n  let deleted = 0;\n  for (let pass = 0; pass < MAX_TRIM_PASSES; pass++) {\n    const { changes } = stmt.run(params);\n    deleted += changes;\n    if (changes < BATCH_SIZE) break;\n    await yieldToEventLoop();\n  }\n  return deleted;\n}\n\n/**\n * Delete rows older than `maxAgeDays`, then keep at most the `maxEntries`\n * newest rows (by ULID id). Uses its own connection with a busy timeout, in\n * bounded batches that yield to the event loop between passes.\n *\n * Returns zero counts when the file does not exist or the policy is empty.\n * Other failures (lock timeout, not a log store) reject; the caller decides\n * how loud to be.\n */\nexport async function enforceLogsRetention(\n  dbPath: string,\n  retention: LogStoreRetention,\n): Promise<EnforceLogsRetentionResult> {\n  const result: EnforceLogsRetentionResult = { deletedByAge: 0, deletedByCount: 0 };\n  if (!existsSync(dbPath)) return result;\n  if (retention.maxAgeDays == null && retention.maxEntries == null) return result;\n\n  const db = openSqlite(dbPath);\n  try {\n    db.exec(`PRAGMA busy_timeout = ${BUSY_TIMEOUT_MS}`);\n    if (retention.maxAgeDays != null) {\n      const cutoff = new Date(Date.now() - retention.maxAgeDays * DAY_MS).toISOString();\n      result.deletedByAge = await runBoundedTrim(db.prepare(AGE_TRIM_SQL), {\n        $cutoff: cutoff,\n        $batch: BATCH_SIZE,\n      });\n    }\n    if (retention.maxEntries != null) {\n      result.deletedByCount = await runBoundedTrim(db.prepare(COUNT_TRIM_SQL), {\n        $keep: retention.maxEntries,\n        $batch: BATCH_SIZE,\n      });\n    }\n    return result;\n  } finally {\n    db.close();\n  }\n}\n","/**\n * Log-safe rendering of free text that may quote customer document paths.\n *\n * Rule (skaile-ai/platform#6909): logs carry ids and fingerprints, never document\n * paths, file names or folder names. Runner rows reach the zone log store on the\n * broker fleet, and SharePoint/OneDrive folder names routinely carry customer,\n * project and company names.\n *\n * The fingerprint is an unsalted sha256 prefix on purpose and matches the\n * platform's `backend/libs/log-sink/src/log-safe-path.ts`: the pinned literal\n * `\"Kunde AG/Projekt Nordwind/Vertrag final.pdf\"` -> `<path#bdead54ccb34>.pdf`\n * is shared with the platform tests, so an operator can match a tag across both.\n */\nimport { createHash } from \"node:crypto\";\n\nconst FINGERPRINT_LENGTH = 12;\n// Short and alphanumeric only, so a folder like `Kunde.Siemens` does not leak its tail.\nconst SAFE_EXTENSION = /^[a-z0-9]{1,5}$/;\n\nconst QUOTED = \"<quoted>\";\nconst PATH_TAG = /^<path#(?:[0-9a-f]{12}|none)>(?:\\.[a-z0-9]{1,5})?$/;\n\n// Each span is bounded and single-line so the scan stays linear on long input.\n// A single-quote span opens and closes on a non-word boundary, so `don't` survives.\nconst QUOTED_SPANS: RegExp[] = [\n  /(?<!\\w)'[^\\n]{1,512}?'(?!\\w)/g,\n  /\"[^\"\\n]{1,512}\"/g,\n  /“[^”\\n]{1,512}”/g,\n  /‘[^’\\n]{1,512}’/g,\n  /`[^`\\n]{1,512}`/g,\n];\n\n// The host may be empty (`file:///srv/x`).\nconst URL = /\\b([a-z][a-z0-9+.-]{0,31}:\\/\\/)([^\\s/?#]*)([^\\s]*)/gi;\nconst TRAILING_PUNCT = /[.,;:)\\]}]+$/;\nconst LEADING_PUNCT = /^[([{]+/;\nconst SLASH_BETWEEN = /[^/\\\\][/\\\\]+[^/\\\\]/;\nconst ROOTED = /^(?:\\/|\\.\\/|~\\/|[A-Za-z]:\\\\|\\\\\\\\)\\S/;\n// A slash that is not a path: a MIME type or a protocol version.\nconst NOT_A_PATH =\n  /^(?:(?:application|text|image|audio|video|multipart|font|model)\\/[\\w.+-]+|HTTPS?\\/\\d(?:\\.\\d)?)$/i;\n// `key=value`: only the value is a candidate, so the key stays readable and the tag of the\n// value matches the platform's tag for the same path.\nconst KEY_VALUE = /^([A-Za-z_][\\w.-]{0,63})=(.+)$/;\nconst DIGITS_AND_SLASHES = /^[\\d/]+$/;\nconst DOCUMENT_NAME =\n  /^.+\\.(?:doc|docx|docm|dot|dotx|xls|xlsx|xlsm|ppt|pptx|pptm|pdf|csv|tsv|txt|rtf|odt|ods|odp|odg|pages|key|numbers|vsd|vsdx|one|mpp|dwg|msg|eml|ics|vcf|md|json|xml|htm|html|zip|7z|rar|tar|gz|png|jpg|jpeg|gif|tif|tiff|heic|webp|bmp|svg|mp3|mp4|mov)$/i;\n\n/** Trims and strips leading `./` / `/` and trailing `/`, so `/a/b/` and `a/b` fingerprint alike. */\nfunction normalizePath(value: string): string {\n  let normalized = value.trim();\n  for (;;) {\n    if (normalized.startsWith(\"./\")) normalized = normalized.slice(2);\n    else if (normalized.startsWith(\"/\")) normalized = normalized.slice(1);\n    else break;\n  }\n  while (normalized.endsWith(\"/\")) normalized = normalized.slice(0, -1);\n  return normalized;\n}\n\n/** First 12 hex characters of the sha256 of the normalized path (the platform's `pathFingerprint`). */\nexport function pathFingerprint(value: string): string {\n  return createHash(\"sha256\")\n    .update(normalizePath(value), \"utf8\")\n    .digest(\"hex\")\n    .slice(0, FINGERPRINT_LENGTH);\n}\n\n/**\n * `<path#12hex>[.ext]` for a path, or `<path#none>` when it is empty after\n * normalizing (the platform's `pathTag`). The extension is kept only when short\n * and alphanumeric. Like the platform, the hash normalizes the normalized path\n * once more, so the two agree on every input.\n */\nexport function pathTag(value: string): string {\n  const normalized = normalizePath(value);\n  if (!normalized) return \"<path#none>\";\n  const hash = pathFingerprint(normalized);\n  const basename = normalized.slice(normalized.lastIndexOf(\"/\") + 1);\n  const dot = basename.lastIndexOf(\".\");\n  const ext = dot > 0 ? basename.slice(dot + 1).toLowerCase() : \"\";\n  return SAFE_EXTENSION.test(ext) ? `<path#${hash}>.${ext}` : `<path#${hash}>`;\n}\n\nfunction scrubUrl(match: string, scheme: string, host: string, rest: string): string {\n  const trailing = rest.match(TRAILING_PUNCT)?.[0] ?? \"\";\n  const body = trailing ? rest.slice(0, -trailing.length) : rest;\n  if (body === \"\" || body === \"/\" || PATH_TAG.test(body.slice(1))) return match;\n  const path = body.split(/[?#]/, 1)[0] ?? \"\";\n  return `${scheme}${host}/${pathTag(path)}${trailing}`;\n}\n\nfunction scrubToken(token: string): string {\n  if (token.includes(\"://\")) return token;\n  const leading = token.match(LEADING_PUNCT)?.[0] ?? \"\";\n  const afterLeading = token.slice(leading.length);\n  const trailing = afterLeading.match(TRAILING_PUNCT)?.[0] ?? \"\";\n  const core = trailing ? afterLeading.slice(0, -trailing.length) : afterLeading;\n  // Skip only a token that IS a tag: `<quoted>/Projekt/Vertrag.pdf` still holds names.\n  if (core === QUOTED || PATH_TAG.test(core)) return token;\n  if (!core || DIGITS_AND_SLASHES.test(core) || NOT_A_PATH.test(core)) return token;\n  const keyValue = core.match(KEY_VALUE);\n  if (keyValue) return `${leading}${keyValue[1]}=${scrubToken(keyValue[2] ?? \"\")}${trailing}`;\n  const isPath = SLASH_BETWEEN.test(core) || ROOTED.test(core);\n  if (!isPath && !DOCUMENT_NAME.test(core)) return token;\n  return `${leading}${pathTag(core)}${trailing}`;\n}\n\n/**\n * Removes document paths and names from free text whose names are not known\n * up front, such as a connector's error message: quoted spans become\n * `<quoted>`, URL paths and slash paths become `<path#…>` fingerprints (a URL\n * keeps its scheme and host), and bare document file names are fingerprinted.\n * Version numbers, host names and digit ratios/dates are left alone. Idempotent.\n * Words of a path that contains spaces and is not quoted can survive outside\n * the slash-bearing token; quote paths at the source when that matters.\n */\nexport function scrubLogText(text: string): string {\n  let out = text;\n  for (const span of QUOTED_SPANS) {\n    out = out.replace(span, QUOTED);\n  }\n  out = out.replace(URL, scrubUrl);\n  return out.replace(/\\S+/g, scrubToken);\n}\n","import type { LogEntry, LogSink } from \"@skaile/workspaces/types\";\n\n/**\n * OnLogBridgeSink — forwards every entry as a single formatted text line to\n * a legacy `onLog(line)` callback. Used as a back-compat bridge for callers\n * that historically received plain text lines from the runner.\n *\n * Format: `[level] [kind:subkind[:instance]] message [data-json] [— error.message]`\n */\nexport class OnLogBridgeSink implements LogSink {\n  constructor(private readonly onLog: (line: string) => void) {}\n\n  write(entry: LogEntry): void {\n    const tag = entry.source.instance\n      ? `${entry.source.kind}:${entry.source.subkind}:${entry.source.instance}`\n      : `${entry.source.kind}:${entry.source.subkind}`;\n    let line = `[${entry.level}] [${tag}] ${entry.message}`;\n    if (entry.data && Object.keys(entry.data).length > 0) {\n      line += ` ${JSON.stringify(entry.data)}`;\n    }\n    if (entry.error?.message) {\n      line += ` — ${entry.error.message}`;\n    }\n    this.onLog(line);\n  }\n\n  writeBatch(entries: LogEntry[]): void {\n    for (const e of entries) this.write(e);\n  }\n\n  close(): void {\n    /* no-op */\n  }\n}\n","import type { LogEntry, LogEntryEvent } from \"@skaile/workspaces/types\";\nimport type { LogSink } from \"./types.js\";\n\nexport interface WsLogSinkOptions {\n  /**\n   * Transport send callback. Typically wired to `transport.send` on the\n   * runner's `WebSocketServerTransport`. The transport already drops sends\n   * when no client is connected — this sink does not buffer.\n   */\n  send: (event: LogEntryEvent) => void;\n}\n\n/**\n * Forwards every LogEntry recorded by LogStore as a `log_entry` AgentEvent\n * over the configured transport. Used by the runner to make container-side\n * structured logs visible to the platform gateway in real time. Historical\n * reads still go through SQLite — this sink is for live tail only.\n */\nexport class WsLogSink implements LogSink {\n  private readonly send: (event: LogEntryEvent) => void;\n\n  constructor(opts: WsLogSinkOptions) {\n    this.send = opts.send;\n  }\n\n  write(entry: LogEntry): void {\n    try {\n      this.send({ type: \"log_entry\", entry });\n    } catch {\n      // Logging must never break the agent — drop on transport failure.\n    }\n  }\n\n  writeBatch(entries: LogEntry[]): void {\n    for (const e of entries) this.write(e);\n  }\n\n  close(): void {\n    /* nothing to release — transport lifecycle is owned by the caller */\n  }\n}\n"]}