@xopcai/xopc 0.0.106 → 0.0.107

package/dist/src/cli/commands/extension.js

@@ -1,13 +1,27 @@
+import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
+import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { checkEngineCompatibility } from "../../extensions/engine-check.js";
+import { ExtensionLoader } from "../../extensions/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
+import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
 import { colors } from "../utils/colors.js";
+import { createExtensionCreateCommand } from "./extension-create.js";
 import { createExtensionDevCommand } from "./extension-dev.js";
-import { createExtensionInstallCommand, createExtensionPublishCommand, createExtensionSearchCommand, createExtensionUpdateCommand } from "./extension-marketplace.js";
 import { createExtensionPackCommand } from "./extension-pack.js";
+import { createExtensionInstallCommand, createExtensionPublishCommand, createExtensionSearchCommand, createExtensionUpdateCommand } from "./extension-marketplace.js";
+import { join } from "node:path";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { createHash } from "node:crypto";
 import { Command } from "commander";
 //#region src/cli/commands/extension.ts
+init_loader();
+init_paths();
+init_package_version();
 init_logger();
 const log = createLogger("ExtensionCommands");
 function createExtensionListCommand() {
@@ -38,6 +52,129 @@ function createExtensionListCommand() {
 		}
 	});
 }
+function hashInstalledExtensionDir(extensionDir) {
+	if (!existsSync(extensionDir)) return void 0;
+	const hash = createHash("sha256");
+	const walk = (dir, prefix = "") => {
+		const entries = readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.name !== "node_modules").sort((a, b) => a.name.localeCompare(b.name));
+		for (const entry of entries) {
+			const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
+			const full = join(dir, entry.name);
+			if (entry.isDirectory()) walk(full, rel);
+			else if (entry.isFile()) {
+				const st = statSync(full);
+				hash.update(`file\0${rel}\0${st.size}\0`);
+				hash.update(readFileSync(full));
+				hash.update("\0");
+			}
+		}
+	};
+	walk(extensionDir);
+	return `dir-sha256-${hash.digest("base64")}`;
+}
+function readJson(path) {
+	try {
+		const raw = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : void 0;
+	} catch {
+		return;
+	}
+}
+function createExtensionInspectCommand() {
+	return new Command("inspect").description("Inspect an installed extension manifest and package contract").argument("<extension>", "Extension id").option("--json", "Output as JSON").option("--runtime", "Load the extension and include runtime registrations").action(async (extensionId, options) => {
+		try {
+			const lockEntry = await getExtensionLockfileManager().get(extensionId);
+			const extensionDir = join(resolveExtensionsDir(), extensionId);
+			const manifest = readJson(join(extensionDir, "xopc.extension.json")) ?? lockEntry?.manifest;
+			const packageJson = readJson(join(extensionDir, "package.json")) ?? lockEntry?.packageJson;
+			let runtime;
+			if (options.runtime) {
+				const loader = new ExtensionLoader({
+					workspaceDir: process.cwd(),
+					extensionsDir: resolveExtensionsDir()
+				});
+				const api = await loader.loadExtension({
+					id: extensionId,
+					name: String(manifest?.name ?? extensionId),
+					path: extensionDir,
+					source: "global",
+					enabled: true,
+					config: {}
+				});
+				const registry = loader.getRegistry();
+				runtime = api ? {
+					loaded: true,
+					tools: Array.from(registry.tools.keys()),
+					commands: Array.from(registry.commands.keys()),
+					hooks: Array.from(registry.hooks.keys()),
+					channels: registry.channelPlugins.map((p) => p.id),
+					httpRoutes: Array.from(registry.httpRoutes.keys()),
+					gatewayMethods: Array.from(registry.gatewayMethods.keys()),
+					services: Array.from(registry.services.keys()),
+					cliCommands: registry.getCliRegistrations().flatMap((r) => r.commands),
+					tui: registry.getTuiRegistrations().map((r) => r.extensionId)
+				} : {
+					loaded: false,
+					diagnostics: loader.getDiagnostics().getAll()
+				};
+			}
+			const runtimeContractCheck = buildRuntimeContractCheck(manifest, runtime);
+			const result = {
+				id: extensionId,
+				installed: Boolean(lockEntry),
+				path: existsSync(extensionDir) ? extensionDir : void 0,
+				lockEntry,
+				manifest,
+				packageJson,
+				runtime,
+				runtimeContractCheck
+			};
+			if (options.json) {
+				console.log(JSON.stringify(result, null, 2));
+				return;
+			}
+			if (!lockEntry && !manifest) {
+				console.error(colors.red("error:"), `Extension not found: ${extensionId}`);
+				process.exit(1);
+			}
+			console.log(`${colors.cyan(String(manifest?.name ?? extensionId))} (${extensionId})`);
+			if (manifest?.version || lockEntry?.version) console.log(`  Version: ${String(manifest?.version ?? lockEntry?.version)}`);
+			if (lockEntry) {
+				console.log(`  Source: ${lockEntry.source}`);
+				console.log(`  Resolved: ${lockEntry.resolved}`);
+				if (lockEntry.integrity) console.log(`  Integrity: ${lockEntry.integrity}`);
+			}
+			if (manifest?.main) console.log(`  Main: ${String(manifest.main)}`);
+			const engines = manifest?.engines;
+			if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);
+			const contracts = manifest?.contracts;
+			if (contracts) {
+				console.log("  Contracts:");
+				for (const [key, value] of Object.entries(contracts)) if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(", ")}`);
+			}
+			if (runtime) {
+				console.log("  Runtime:");
+				if (runtime.loaded === false) console.log("    loaded: false");
+				else for (const [key, value] of Object.entries(runtime)) {
+					if (key === "loaded") continue;
+					if (Array.isArray(value) && value.length > 0) console.log(`    ${key}: ${value.join(", ")}`);
+				}
+				if (runtimeContractCheck.length > 0) {
+					console.log("  Runtime contract check:");
+					for (const check of runtimeContractCheck) {
+						const marker = check.status === "registered" ? colors.green("✓") : colors.red("✗");
+						const suffix = check.status === "missing" ? " declared but not registered" : "";
+						console.log(`    ${marker} ${check.contract}.${check.declared}${suffix}`);
+					}
+				}
+			}
+		} catch (error) {
+			log.error({ error }, "Failed to inspect extension");
+			console.error(colors.red("Error:"), error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+	});
+}
 function createExtensionFreezeCommand() {
 	return new Command("freeze").description("Lock current extension versions").action(async () => {
 		try {
@@ -96,6 +233,241 @@ function createExtensionVerifyCommand() {
 		}
 	});
 }
+function listContractValues(manifest, key) {
+	const contracts = manifest.contracts;
+	if (typeof contracts !== "object" || contracts === null || Array.isArray(contracts)) return [];
+	const value = contracts[key];
+	return Array.isArray(value) ? value.filter((x) => typeof x === "string") : [];
+}
+function contractAllows(values, candidate) {
+	return values.some((value) => value === candidate || value.endsWith("*") && candidate.startsWith(value.slice(0, -1)));
+}
+function buildRuntimeContractCheck(manifest, runtime) {
+	if (!manifest || !runtime || runtime.loaded === false) return [];
+	const out = [];
+	for (const key of [
+		"tools",
+		"commands",
+		"hooks",
+		"channels",
+		"httpRoutes",
+		"gatewayMethods",
+		"services",
+		"cliCommands",
+		"tui"
+	]) {
+		const declared = listContractValues(manifest, key);
+		const registered = Array.isArray(runtime[key]) ? runtime[key].filter((x) => typeof x === "string") : [];
+		for (const item of declared) {
+			if (item.endsWith("*")) continue;
+			out.push({
+				contract: key,
+				declared: item,
+				status: registered.includes(item) ? "registered" : "missing"
+			});
+		}
+	}
+	return out;
+}
+function collectStringLiteralCalls(source, method) {
+	const out = [];
+	const re = new RegExp(`\\.${method}\\(\\s*['\"]([^'\"]+)['\"]`, "g");
+	for (const match of source.matchAll(re)) if (match[1]) out.push(match[1]);
+	return out;
+}
+function collectObjectNameRegistrations(source, method, field) {
+	const out = [];
+	const re = new RegExp(`\\.${method}\\(\\s*\\{[\\s\\S]*?\\b${field}\\s*:\\s*['\"]([^'\"]+)['\"]`, "g");
+	for (const match of source.matchAll(re)) if (match[1]) out.push(match[1]);
+	return out;
+}
+function diagnoseExtensionPackage(extensionId, extensionDir) {
+	const issues = [];
+	const manifest = readJson(join(extensionDir, "xopc.extension.json"));
+	if (!manifest) return [{
+		level: "error",
+		extensionId,
+		message: "Missing xopc.extension.json"
+	}];
+	const main = typeof manifest.main === "string" ? manifest.main : "";
+	if (!main) issues.push({
+		level: "error",
+		extensionId,
+		message: "manifest.main is required"
+	});
+	else if (!/\.(js|mjs|cjs)$/i.test(main)) issues.push({
+		level: "error",
+		extensionId,
+		message: `manifest.main must point at built JavaScript, got ${main}`
+	});
+	else if (!existsSync(join(extensionDir, main))) issues.push({
+		level: "error",
+		extensionId,
+		message: `manifest.main target does not exist: ${main}`
+	});
+	const engines = manifest.engines;
+	const xopcRange = typeof engines === "object" && engines !== null && !Array.isArray(engines) ? engines.xopc : void 0;
+	if (typeof xopcRange !== "string" || !xopcRange.trim()) issues.push({
+		level: "error",
+		extensionId,
+		message: "engines.xopc is required"
+	});
+	else {
+		const engineCheck = checkEngineCompatibility(PACKAGE_VERSION, xopcRange);
+		if (engineCheck.parseWarning || !engineCheck.compatible) issues.push({
+			level: "error",
+			extensionId,
+			message: engineCheck.reason ?? `xopc ${PACKAGE_VERSION} does not satisfy engines.xopc ${xopcRange}`
+		});
+	}
+	const pkg = readJson(join(extensionDir, "package.json"));
+	if (pkg) for (const issue of collectExtensionPackageDependencyIssues(pkg, { strictRuntimeSdkDeps: true })) issues.push({
+		level: "error",
+		extensionId,
+		message: issue.message
+	});
+	if (main && existsSync(join(extensionDir, main))) {
+		const source = readFileSync(join(extensionDir, main), "utf-8");
+		const checks = [
+			{
+				contract: "hooks",
+				values: collectStringLiteralCalls(source, "registerHook")
+			},
+			{
+				contract: "hooks",
+				values: collectStringLiteralCalls(source, "onHook")
+			},
+			{
+				contract: "httpRoutes",
+				values: collectStringLiteralCalls(source, "registerHttpRoute")
+			},
+			{
+				contract: "gatewayMethods",
+				values: collectStringLiteralCalls(source, "registerGatewayMethod")
+			},
+			{
+				contract: "tools",
+				values: collectObjectNameRegistrations(source, "registerTool", "name")
+			},
+			{
+				contract: "commands",
+				values: collectObjectNameRegistrations(source, "registerCommand", "name")
+			},
+			{
+				contract: "services",
+				values: collectObjectNameRegistrations(source, "registerService", "id")
+			}
+		];
+		for (const check of checks) {
+			const declared = listContractValues(manifest, check.contract);
+			for (const value of check.values) if (!contractAllows(declared, value)) issues.push({
+				level: "error",
+				extensionId,
+				message: `Runtime registers ${check.contract}:${value} but manifest contracts.${check.contract} does not declare it`
+			});
+		}
+	}
+	return issues;
+}
+function createExtensionDoctorCommand() {
+	return new Command("doctor").description("Diagnose installed extension package contracts").option("--json", "Output as JSON").option("--fix", "Refresh lockfile snapshots and installed file integrity for valid installed extensions").action(async (options) => {
+		try {
+			const ctx = getContextWithOpts();
+			const cfg = loadConfig(ctx.configPath);
+			const extensionsConfig = typeof cfg.extensions === "object" && cfg.extensions !== null && !Array.isArray(cfg.extensions) ? cfg.extensions : void 0;
+			const enabledIds = Array.isArray(extensionsConfig?.enabled) ? extensionsConfig.enabled.filter((x) => typeof x === "string") : [];
+			const lockfileManager = getExtensionLockfileManager();
+			const extensions = await lockfileManager.list();
+			const issues = [];
+			const lockDir = resolveExtensionsDir();
+			const lockedIds = new Set(extensions.map((entry) => entry.name));
+			for (const entry of extensions) {
+				const extensionDir = join(lockDir, entry.name);
+				if (!existsSync(extensionDir)) {
+					issues.push({
+						level: "error",
+						extensionId: entry.name,
+						message: "Lockfile entry exists but extension directory is missing; reinstall the extension"
+					});
+					continue;
+				}
+				const entryIssues = diagnoseExtensionPackage(entry.name, extensionDir);
+				issues.push(...entryIssues);
+				if (options.fix && entryIssues.length === 0) await lockfileManager.upsert(entry.name, {
+					...entry,
+					manifest: readJson(join(extensionDir, "xopc.extension.json")),
+					packageJson: readJson(join(extensionDir, "package.json")),
+					installedIntegrity: hashInstalledExtensionDir(extensionDir)
+				});
+			}
+			for (const enabledId of enabledIds) if (!lockedIds.has(enabledId) && !existsSync(join(lockDir, enabledId))) if (options.fix && extensionsConfig) {
+				extensionsConfig.enabled = enabledIds.filter((id) => id !== enabledId);
+				issues.push({
+					level: "warning",
+					extensionId: enabledId,
+					message: "Removed from extensions.enabled because it is not installed"
+				});
+			} else issues.push({
+				level: "error",
+				extensionId: enabledId,
+				message: "Configured in extensions.enabled but not installed"
+			});
+			if (options.fix && extensionsConfig) await saveConfig(cfg, ctx.configPath);
+			if (existsSync(lockDir)) for (const dirent of readdirSync(lockDir, { withFileTypes: true })) {
+				if (!dirent.isDirectory() || lockedIds.has(dirent.name)) continue;
+				const extensionDir = join(lockDir, dirent.name);
+				const entryIssues = diagnoseExtensionPackage(dirent.name, extensionDir);
+				if (entryIssues.length > 0) {
+					issues.push(...entryIssues);
+					issues.push({
+						level: "error",
+						extensionId: dirent.name,
+						message: "Extension directory is not recorded in the lockfile and cannot be auto-fixed until package contract errors are resolved"
+					});
+					continue;
+				}
+				if (!options.fix) issues.push({
+					level: "warning",
+					extensionId: dirent.name,
+					message: "Extension directory is not recorded in the lockfile"
+				});
+				if (options.fix) {
+					const manifest = readJson(join(extensionDir, "xopc.extension.json"));
+					const packageJson = readJson(join(extensionDir, "package.json"));
+					await lockfileManager.upsert(dirent.name, {
+						name: dirent.name,
+						version: String(manifest?.version ?? packageJson?.version ?? "0.0.0"),
+						resolved: extensionDir,
+						source: "local",
+						manifest,
+						packageJson,
+						installedIntegrity: hashInstalledExtensionDir(extensionDir)
+					});
+				}
+			}
+			if (options.json) {
+				console.log(JSON.stringify({
+					ok: issues.every((i) => i.level !== "error"),
+					issues
+				}, null, 2));
+				return;
+			}
+			if (issues.length === 0) {
+				console.log(colors.green("✓"), options.fix ? "All installed extensions satisfy the package contract; lockfile snapshots refreshed" : "All installed extensions satisfy the package contract");
+				return;
+			}
+			for (const issue of issues) {
+				const marker = issue.level === "error" ? colors.red("✗") : colors.yellow("⚠");
+				console.log(marker, `${issue.extensionId}: ${issue.message}`);
+			}
+			if (issues.some((i) => i.level === "error")) process.exit(1);
+		} catch (error) {
+			log.error({ error }, "Failed to run extension doctor");
+			console.error(colors.red("Error:"), error instanceof Error ? error.message : String(error));
+			process.exit(1);
+		}
+	});
+}
 function createExtensionAuditCommand() {
 	return new Command("audit").description("Audit extensions for security issues").action(async () => {
 		try {
@@ -121,10 +493,10 @@ function createExtensionAuditCommand() {
 	});
 }
 function registerExtensionCommands(program) {
-	const extensions = new Command("extensions").description("Manage extensions").addCommand(createExtensionListCommand()).addCommand(createExtensionFreezeCommand()).addCommand(createExtensionHealthCommand()).addCommand(createExtensionVerifyCommand()).addCommand(createExtensionAuditCommand()).addCommand(createExtensionPackCommand()).addCommand(createExtensionDevCommand()).addCommand(createExtensionInstallCommand()).addCommand(createExtensionSearchCommand()).addCommand(createExtensionPublishCommand()).addCommand(createExtensionUpdateCommand());
+	const extensions = new Command("extensions").description("Manage extensions").addCommand(createExtensionListCommand()).addCommand(createExtensionInspectCommand()).addCommand(createExtensionFreezeCommand()).addCommand(createExtensionHealthCommand()).addCommand(createExtensionVerifyCommand()).addCommand(createExtensionDoctorCommand()).addCommand(createExtensionAuditCommand()).addCommand(createExtensionPackCommand()).addCommand(createExtensionCreateCommand()).addCommand(createExtensionDevCommand()).addCommand(createExtensionInstallCommand()).addCommand(createExtensionSearchCommand()).addCommand(createExtensionPublishCommand()).addCommand(createExtensionUpdateCommand());
 	program.addCommand(extensions);
 }
 //#endregion
-export { createExtensionAuditCommand, createExtensionFreezeCommand, createExtensionHealthCommand, createExtensionListCommand, createExtensionVerifyCommand, registerExtensionCommands };
+export { createExtensionAuditCommand, createExtensionDoctorCommand, createExtensionFreezeCommand, createExtensionHealthCommand, createExtensionInspectCommand, createExtensionListCommand, createExtensionVerifyCommand, registerExtensionCommands };
 
 //# sourceMappingURL=extension.js.map

package/dist/src/cli/commands/extension.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension.js","names":[],"sources":["../../../../src/cli/commands/extension.ts"],"sourcesContent":["import { Command } from 'commander';\nimport { createLogger } from '../../utils/logger.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport {\n  getExtensionHealthChecker,\n  checkAllExtensionsHealth,\n} from '../../extensions/health.js';\nimport { colors } from '../utils/colors.js';\nimport { createExtensionPackCommand } from './extension-pack.js';\nimport { createExtensionDevCommand } from './extension-dev.js';\nimport {\n  createExtensionInstallCommand,\n  createExtensionPublishCommand,\n  createExtensionSearchCommand,\n  createExtensionUpdateCommand,\n} from './extension-marketplace.js';\n\nconst log = createLogger('ExtensionCommands');\n\n// ============================================\n// Extension List Command\n// ============================================\n\nexport function createExtensionListCommand(): Command {\n  return new Command('list')\n    .description('List installed extensions')\n    .option('--json', 'Output as JSON')\n    .action(async (options) => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n        const extensions = await lockfileManager.list();\n\n        if (options.json) {\n          console.log(JSON.stringify(extensions, null, 2));\n          return;\n        }\n\n        if (extensions.length === 0) {\n          console.log('No extensions installed.');\n          return;\n        }\n\n        console.log(`Installed extensions (${extensions.length}):`);\n        console.log();\n\n        for (const ext of extensions) {\n          console.log(`${colors.cyan(ext.name)}@${ext.version}`);\n          console.log(`  Source: ${ext.source}`);\n          console.log(`  Resolved: ${ext.resolved}`);\n          console.log(`  Installed: ${new Date(ext.installedAt).toLocaleString()}`);\n          console.log();\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to list extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Freeze Command\n// ============================================\n\nexport function createExtensionFreezeCommand(): Command {\n  return new Command('freeze')\n    .description('Lock current extension versions')\n    .action(async () => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n        await lockfileManager.freeze();\n\n        console.log(colors.green('✓'), 'Extension versions locked');\n      } catch (error) {\n        log.error({ error }, 'Failed to freeze extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Health Command\n// ============================================\n\nexport function createExtensionHealthCommand(): Command {\n  return new Command('health')\n    .description('Check extension health')\n    .option('--json', 'Output as JSON')\n    .action(async (options) => {\n      try {\n        const checker = getExtensionHealthChecker();\n        const report = await checkAllExtensionsHealth();\n\n        if (options.json) {\n          console.log(JSON.stringify(report, null, 2));\n          return;\n        }\n\n        console.log(checker.formatReport(report));\n\n        // Exit with error code if there are errors\n        if (report.summary.error > 0) {\n          process.exit(1);\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to check extension health');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Verify Command\n// ============================================\n\nexport function createExtensionVerifyCommand(): Command {\n  return new Command('verify')\n    .description('Verify extension integrity')\n    .argument('[extension]', 'Specific extension to verify (default: all)')\n    .action(async (extensionId) => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n\n        if (extensionId) {\n          const result = await lockfileManager.verify(extensionId);\n\n          if (result.valid) {\n            console.log(colors.green('✓'), `Extension \"${extensionId}\" is valid`);\n          } else {\n            console.log(colors.red('✗'), `Extension \"${extensionId}\" is invalid: ${result.reason}`);\n            process.exit(1);\n          }\n        } else {\n          const results = await lockfileManager.verifyAll();\n          let hasErrors = false;\n\n          for (const result of results) {\n            if (result.valid) {\n              console.log(colors.green('✓'), result.extensionId);\n            } else {\n              console.log(colors.red('✗'), `${result.extensionId}: ${result.reason}`);\n              hasErrors = true;\n            }\n          }\n\n          if (hasErrors) {\n            process.exit(1);\n          }\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to verify extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Audit Command\n// ============================================\n\nexport function createExtensionAuditCommand(): Command {\n  return new Command('audit')\n    .description('Audit extensions for security issues')\n    .action(async () => {\n      try {\n        const checker = getExtensionHealthChecker();\n\n        // Check for orphaned extensions\n        const orphaned = await checker.findOrphaned();\n\n        if (orphaned.length > 0) {\n          console.log(colors.yellow('⚠'), 'Orphaned extensions found:');\n          for (const ext of orphaned) {\n            console.log(`  - ${ext}`);\n          }\n          console.log();\n          console.log('These extensions are installed but not in the lockfile.');\n          console.log('Run `xopc extensions freeze` to add them.');\n        } else {\n          console.log(colors.green('✓'), 'No orphaned extensions found');\n        }\n\n        // Run health check\n        const report = await checkAllExtensionsHealth();\n\n        if (report.summary.error > 0 || report.summary.warning > 0) {\n          console.log();\n          console.log(checker.formatReport(report));\n        } else {\n          console.log(colors.green('✓'), 'All extensions are healthy');\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to audit extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Register All Commands\n// ============================================\n\nexport function registerExtensionCommands(program: Command): void {\n  const extensions = new Command('extensions')\n    .description('Manage extensions')\n    .addCommand(createExtensionListCommand())\n    .addCommand(createExtensionFreezeCommand())\n    .addCommand(createExtensionHealthCommand())\n    .addCommand(createExtensionVerifyCommand())\n    .addCommand(createExtensionAuditCommand())\n    .addCommand(createExtensionPackCommand())\n    .addCommand(createExtensionDevCommand())\n    .addCommand(createExtensionInstallCommand())\n    .addCommand(createExtensionSearchCommand())\n    .addCommand(createExtensionPublishCommand())\n    .addCommand(createExtensionUpdateCommand());\n\n  program.addCommand(extensions);\n}\n"],"mappings":";;;;;;;;;;aACqD;AAgBrD,MAAM,MAAM,aAAa,oBAAoB;AAM7C,SAAgB,6BAAsC;AACpD,QAAO,IAAI,QAAQ,OAAO,CACvB,YAAY,4BAA4B,CACxC,OAAO,UAAU,iBAAiB,CAClC,OAAO,OAAO,YAAY;AACzB,MAAI;GAEF,MAAM,aAAa,MADK,6BACgB,CAAC,MAAM;AAE/C,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;AAChD;;AAGF,OAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,IAAI,2BAA2B;AACvC;;AAGF,WAAQ,IAAI,yBAAyB,WAAW,OAAO,IAAI;AAC3D,WAAQ,KAAK;AAEb,QAAK,MAAM,OAAO,YAAY;AAC5B,YAAQ,IAAI,GAAG,OAAO,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU;AACtD,YAAQ,IAAI,aAAa,IAAI,SAAS;AACtC,YAAQ,IAAI,eAAe,IAAI,WAAW;AAC1C,YAAQ,IAAI,gBAAgB,IAAI,KAAK,IAAI,YAAY,CAAC,gBAAgB,GAAG;AACzE,YAAQ,KAAK;;WAER,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,4BAA4B;AACjD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,kCAAkC,CAC9C,OAAO,YAAY;AAClB,MAAI;AAEF,SADwB,6BACH,CAAC,QAAQ;AAE9B,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,4BAA4B;WACpD,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,8BAA8B;AACnD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yBAAyB,CACrC,OAAO,UAAU,iBAAiB,CAClC,OAAO,OAAO,YAAY;AACzB,MAAI;GACF,MAAM,UAAU,2BAA2B;GAC3C,MAAM,SAAS,MAAM,0BAA0B;AAE/C,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;AAC5C;;AAGF,WAAQ,IAAI,QAAQ,aAAa,OAAO,CAAC;AAGzC,OAAI,OAAO,QAAQ,QAAQ,EACzB,SAAQ,KAAK,EAAE;WAEV,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,mCAAmC;AACxD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,6BAA6B,CACzC,SAAS,eAAe,8CAA8C,CACtE,OAAO,OAAO,gBAAgB;AAC7B,MAAI;GACF,MAAM,kBAAkB,6BAA6B;AAErD,OAAI,aAAa;IACf,MAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AAExD,QAAI,OAAO,MACT,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,cAAc,YAAY,YAAY;SAChE;AACL,aAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,cAAc,YAAY,gBAAgB,OAAO,SAAS;AACvF,aAAQ,KAAK,EAAE;;UAEZ;IACL,MAAM,UAAU,MAAM,gBAAgB,WAAW;IACjD,IAAI,YAAY;AAEhB,SAAK,MAAM,UAAU,QACnB,KAAI,OAAO,MACT,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,YAAY;SAC7C;AACL,aAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,GAAG,OAAO,YAAY,IAAI,OAAO,SAAS;AACvE,iBAAY;;AAIhB,QAAI,UACF,SAAQ,KAAK,EAAE;;WAGZ,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,8BAA8B;AACnD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,8BAAuC;AACrD,QAAO,IAAI,QAAQ,QAAQ,CACxB,YAAY,uCAAuC,CACnD,OAAO,YAAY;AAClB,MAAI;GACF,MAAM,UAAU,2BAA2B;GAG3C,MAAM,WAAW,MAAM,QAAQ,cAAc;AAE7C,OAAI,SAAS,SAAS,GAAG;AACvB,YAAQ,IAAI,OAAO,OAAO,IAAI,EAAE,6BAA6B;AAC7D,SAAK,MAAM,OAAO,SAChB,SAAQ,IAAI,OAAO,MAAM;AAE3B,YAAQ,KAAK;AACb,YAAQ,IAAI,0DAA0D;AACtE,YAAQ,IAAI,4CAA4C;SAExD,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,+BAA+B;GAIhE,MAAM,SAAS,MAAM,0BAA0B;AAE/C,OAAI,OAAO,QAAQ,QAAQ,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC1D,YAAQ,KAAK;AACb,YAAQ,IAAI,QAAQ,aAAa,OAAO,CAAC;SAEzC,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,6BAA6B;WAEvD,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,6BAA6B;AAClD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,0BAA0B,SAAwB;CAChE,MAAM,aAAa,IAAI,QAAQ,aAAa,CACzC,YAAY,oBAAoB,CAChC,WAAW,4BAA4B,CAAC,CACxC,WAAW,8BAA8B,CAAC,CAC1C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,6BAA6B,CAAC,CACzC,WAAW,4BAA4B,CAAC,CACxC,WAAW,2BAA2B,CAAC,CACvC,WAAW,+BAA+B,CAAC,CAC3C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,+BAA+B,CAAC,CAC3C,WAAW,8BAA8B,CAAC;AAE7C,SAAQ,WAAW,WAAW"}
+{"version":3,"file":"extension.js","names":[],"sources":["../../../../src/cli/commands/extension.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { Command } from 'commander';\n\nimport { loadConfig, saveConfig } from '../../config/loader.js';\nimport { resolveExtensionsDir } from '../../config/paths.js';\nimport { checkEngineCompatibility } from '../../extensions/engine-check.js';\nimport { ExtensionLoader } from '../../extensions/loader.js';\nimport { collectExtensionPackageDependencyIssues } from '../../extensions/package-contract.js';\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { getExtensionLockfileManager } from '../../extensions/lockfile.js';\nimport {\n  getExtensionHealthChecker,\n  checkAllExtensionsHealth,\n} from '../../extensions/health.js';\nimport { getContextWithOpts } from '../context.js';\nimport { colors } from '../utils/colors.js';\nimport { createExtensionPackCommand } from './extension-pack.js';\nimport { createExtensionCreateCommand } from './extension-create.js';\nimport { createExtensionDevCommand } from './extension-dev.js';\nimport {\n  createExtensionInstallCommand,\n  createExtensionPublishCommand,\n  createExtensionSearchCommand,\n  createExtensionUpdateCommand,\n} from './extension-marketplace.js';\n\nconst log = createLogger('ExtensionCommands');\n\n// ============================================\n// Extension List Command\n// ============================================\n\nexport function createExtensionListCommand(): Command {\n  return new Command('list')\n    .description('List installed extensions')\n    .option('--json', 'Output as JSON')\n    .action(async (options) => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n        const extensions = await lockfileManager.list();\n\n        if (options.json) {\n          console.log(JSON.stringify(extensions, null, 2));\n          return;\n        }\n\n        if (extensions.length === 0) {\n          console.log('No extensions installed.');\n          return;\n        }\n\n        console.log(`Installed extensions (${extensions.length}):`);\n        console.log();\n\n        for (const ext of extensions) {\n          console.log(`${colors.cyan(ext.name)}@${ext.version}`);\n          console.log(`  Source: ${ext.source}`);\n          console.log(`  Resolved: ${ext.resolved}`);\n          console.log(`  Installed: ${new Date(ext.installedAt).toLocaleString()}`);\n          console.log();\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to list extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Inspect Command\n// ============================================\n\nfunction hashInstalledExtensionDir(extensionDir: string): string | undefined {\n  if (!existsSync(extensionDir)) return undefined;\n  const hash = createHash('sha256');\n  const walk = (dir: string, prefix = '') => {\n    const entries = readdirSync(dir, { withFileTypes: true })\n      .filter((entry) => entry.name !== 'node_modules')\n      .sort((a, b) => a.name.localeCompare(b.name));\n    for (const entry of entries) {\n      const rel = prefix ? `${prefix}/${entry.name}` : entry.name;\n      const full = join(dir, entry.name);\n      if (entry.isDirectory()) {\n        walk(full, rel);\n      } else if (entry.isFile()) {\n        const st = statSync(full);\n        hash.update(`file\\0${rel}\\0${st.size}\\0`);\n        hash.update(readFileSync(full));\n        hash.update('\\0');\n      }\n    }\n  };\n  walk(extensionDir);\n  return `dir-sha256-${hash.digest('base64')}`;\n}\n\nfunction readJson(path: string): Record<string, unknown> | undefined {\n  try {\n    const raw = JSON.parse(readFileSync(path, 'utf-8')) as unknown;\n    return typeof raw === 'object' && raw !== null && !Array.isArray(raw)\n      ? (raw as Record<string, unknown>)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nexport function createExtensionInspectCommand(): Command {\n  return new Command('inspect')\n    .description('Inspect an installed extension manifest and package contract')\n    .argument('<extension>', 'Extension id')\n    .option('--json', 'Output as JSON')\n    .option('--runtime', 'Load the extension and include runtime registrations')\n    .action(async (extensionId: string, options: { json?: boolean; runtime?: boolean }) => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n        const lockEntry = await lockfileManager.get(extensionId);\n        const extensionDir = join(resolveExtensionsDir(), extensionId);\n        const manifest = readJson(join(extensionDir, 'xopc.extension.json')) ?? lockEntry?.manifest;\n        const packageJson = readJson(join(extensionDir, 'package.json')) ?? lockEntry?.packageJson;\n        let runtime: Record<string, unknown> | undefined;\n        if (options.runtime) {\n          const loader = new ExtensionLoader({\n            workspaceDir: process.cwd(),\n            extensionsDir: resolveExtensionsDir(),\n          });\n          const api = await loader.loadExtension({\n            id: extensionId,\n            name: String(manifest?.name ?? extensionId),\n            path: extensionDir,\n            source: 'global',\n            enabled: true,\n            config: {},\n          });\n          const registry = loader.getRegistry();\n          runtime = api\n            ? {\n                loaded: true,\n                tools: Array.from(registry.tools.keys()),\n                commands: Array.from(registry.commands.keys()),\n                hooks: Array.from(registry.hooks.keys()),\n                channels: registry.channelPlugins.map((p) => p.id),\n                httpRoutes: Array.from(registry.httpRoutes.keys()),\n                gatewayMethods: Array.from(registry.gatewayMethods.keys()),\n                services: Array.from(registry.services.keys()),\n                cliCommands: registry.getCliRegistrations().flatMap((r) => r.commands),\n                tui: registry.getTuiRegistrations().map((r) => r.extensionId),\n              }\n            : { loaded: false, diagnostics: loader.getDiagnostics().getAll() };\n        }\n\n        const runtimeContractCheck = buildRuntimeContractCheck(manifest, runtime);\n        const result = {\n          id: extensionId,\n          installed: Boolean(lockEntry),\n          path: existsSync(extensionDir) ? extensionDir : undefined,\n          lockEntry,\n          manifest,\n          packageJson,\n          runtime,\n          runtimeContractCheck,\n        };\n\n        if (options.json) {\n          console.log(JSON.stringify(result, null, 2));\n          return;\n        }\n\n        if (!lockEntry && !manifest) {\n          console.error(colors.red('error:'), `Extension not found: ${extensionId}`);\n          process.exit(1);\n        }\n\n        console.log(`${colors.cyan(String(manifest?.name ?? extensionId))} (${extensionId})`);\n        if (manifest?.version || lockEntry?.version) {\n          console.log(`  Version: ${String(manifest?.version ?? lockEntry?.version)}`);\n        }\n        if (lockEntry) {\n          console.log(`  Source: ${lockEntry.source}`);\n          console.log(`  Resolved: ${lockEntry.resolved}`);\n          if (lockEntry.integrity) console.log(`  Integrity: ${lockEntry.integrity}`);\n        }\n        if (manifest?.main) console.log(`  Main: ${String(manifest.main)}`);\n        const engines = manifest?.engines as Record<string, unknown> | undefined;\n        if (engines?.xopc) console.log(`  engines.xopc: ${String(engines.xopc)}`);\n        const contracts = manifest?.contracts as Record<string, unknown> | undefined;\n        if (contracts) {\n          console.log('  Contracts:');\n          for (const [key, value] of Object.entries(contracts)) {\n            if (Array.isArray(value) && value.length > 0) {\n              console.log(`    ${key}: ${value.join(', ')}`);\n            }\n          }\n        }\n        if (runtime) {\n          console.log('  Runtime:');\n          if (runtime.loaded === false) {\n            console.log('    loaded: false');\n          } else {\n            for (const [key, value] of Object.entries(runtime)) {\n              if (key === 'loaded') continue;\n              if (Array.isArray(value) && value.length > 0) {\n                console.log(`    ${key}: ${value.join(', ')}`);\n              }\n            }\n          }\n          if (runtimeContractCheck.length > 0) {\n            console.log('  Runtime contract check:');\n            for (const check of runtimeContractCheck) {\n              const marker = check.status === 'registered' ? colors.green('✓') : colors.red('✗');\n              const suffix = check.status === 'missing' ? ' declared but not registered' : '';\n              console.log(`    ${marker} ${check.contract}.${check.declared}${suffix}`);\n            }\n          }\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to inspect extension');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Freeze Command\n// ============================================\n\nexport function createExtensionFreezeCommand(): Command {\n  return new Command('freeze')\n    .description('Lock current extension versions')\n    .action(async () => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n        await lockfileManager.freeze();\n\n        console.log(colors.green('✓'), 'Extension versions locked');\n      } catch (error) {\n        log.error({ error }, 'Failed to freeze extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Health Command\n// ============================================\n\nexport function createExtensionHealthCommand(): Command {\n  return new Command('health')\n    .description('Check extension health')\n    .option('--json', 'Output as JSON')\n    .action(async (options) => {\n      try {\n        const checker = getExtensionHealthChecker();\n        const report = await checkAllExtensionsHealth();\n\n        if (options.json) {\n          console.log(JSON.stringify(report, null, 2));\n          return;\n        }\n\n        console.log(checker.formatReport(report));\n\n        // Exit with error code if there are errors\n        if (report.summary.error > 0) {\n          process.exit(1);\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to check extension health');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Verify Command\n// ============================================\n\nexport function createExtensionVerifyCommand(): Command {\n  return new Command('verify')\n    .description('Verify extension integrity')\n    .argument('[extension]', 'Specific extension to verify (default: all)')\n    .action(async (extensionId) => {\n      try {\n        const lockfileManager = getExtensionLockfileManager();\n\n        if (extensionId) {\n          const result = await lockfileManager.verify(extensionId);\n\n          if (result.valid) {\n            console.log(colors.green('✓'), `Extension \"${extensionId}\" is valid`);\n          } else {\n            console.log(colors.red('✗'), `Extension \"${extensionId}\" is invalid: ${result.reason}`);\n            process.exit(1);\n          }\n        } else {\n          const results = await lockfileManager.verifyAll();\n          let hasErrors = false;\n\n          for (const result of results) {\n            if (result.valid) {\n              console.log(colors.green('✓'), result.extensionId);\n            } else {\n              console.log(colors.red('✗'), `${result.extensionId}: ${result.reason}`);\n              hasErrors = true;\n            }\n          }\n\n          if (hasErrors) {\n            process.exit(1);\n          }\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to verify extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Doctor Command\n// ============================================\n\ninterface DoctorIssue {\n  level: 'error' | 'warning';\n  extensionId: string;\n  message: string;\n}\n\nfunction listContractValues(manifest: Record<string, unknown>, key: string): string[] {\n  const contracts = manifest.contracts;\n  if (typeof contracts !== 'object' || contracts === null || Array.isArray(contracts)) return [];\n  const value = (contracts as Record<string, unknown>)[key];\n  return Array.isArray(value) ? value.filter((x): x is string => typeof x === 'string') : [];\n}\n\nfunction contractAllows(values: string[], candidate: string): boolean {\n  return values.some((value) => value === candidate || (value.endsWith('*') && candidate.startsWith(value.slice(0, -1))));\n}\n\nfunction buildRuntimeContractCheck(\n  manifest: Record<string, unknown> | undefined,\n  runtime: Record<string, unknown> | undefined,\n): Array<{ contract: string; declared: string; status: 'registered' | 'missing' }> {\n  if (!manifest || !runtime || runtime.loaded === false) return [];\n  const out: Array<{ contract: string; declared: string; status: 'registered' | 'missing' }> = [];\n  for (const key of ['tools', 'commands', 'hooks', 'channels', 'httpRoutes', 'gatewayMethods', 'services', 'cliCommands', 'tui']) {\n    const declared = listContractValues(manifest, key);\n    const registered = Array.isArray(runtime[key]) ? (runtime[key] as unknown[]).filter((x): x is string => typeof x === 'string') : [];\n    for (const item of declared) {\n      if (item.endsWith('*')) continue;\n      out.push({\n        contract: key,\n        declared: item,\n        status: registered.includes(item) ? 'registered' : 'missing',\n      });\n    }\n  }\n  return out;\n}\n\nfunction collectStringLiteralCalls(source: string, method: string): string[] {\n  const out: string[] = [];\n  const re = new RegExp(`\\\\.${method}\\\\(\\\\s*['\\\"]([^'\\\"]+)['\\\"]`, 'g');\n  for (const match of source.matchAll(re)) {\n    if (match[1]) out.push(match[1]);\n  }\n  return out;\n}\n\nfunction collectObjectNameRegistrations(source: string, method: string, field: string): string[] {\n  const out: string[] = [];\n  const re = new RegExp(`\\\\.${method}\\\\(\\\\s*\\\\{[\\\\s\\\\S]*?\\\\b${field}\\\\s*:\\\\s*['\\\"]([^'\\\"]+)['\\\"]`, 'g');\n  for (const match of source.matchAll(re)) {\n    if (match[1]) out.push(match[1]);\n  }\n  return out;\n}\n\nfunction diagnoseExtensionPackage(extensionId: string, extensionDir: string): DoctorIssue[] {\n  const issues: DoctorIssue[] = [];\n  const manifest = readJson(join(extensionDir, 'xopc.extension.json'));\n  if (!manifest) {\n    return [{ level: 'error', extensionId, message: 'Missing xopc.extension.json' }];\n  }\n\n  const main = typeof manifest.main === 'string' ? manifest.main : '';\n  if (!main) {\n    issues.push({ level: 'error', extensionId, message: 'manifest.main is required' });\n  } else if (!/\\.(js|mjs|cjs)$/i.test(main)) {\n    issues.push({ level: 'error', extensionId, message: `manifest.main must point at built JavaScript, got ${main}` });\n  } else if (!existsSync(join(extensionDir, main))) {\n    issues.push({ level: 'error', extensionId, message: `manifest.main target does not exist: ${main}` });\n  }\n\n  const engines = manifest.engines;\n  const xopcRange = typeof engines === 'object' && engines !== null && !Array.isArray(engines)\n    ? (engines as Record<string, unknown>).xopc\n    : undefined;\n  if (typeof xopcRange !== 'string' || !xopcRange.trim()) {\n    issues.push({ level: 'error', extensionId, message: 'engines.xopc is required' });\n  } else {\n    const engineCheck = checkEngineCompatibility(PACKAGE_VERSION, xopcRange);\n    if (engineCheck.parseWarning || !engineCheck.compatible) {\n      issues.push({\n        level: 'error',\n        extensionId,\n        message: engineCheck.reason ?? `xopc ${PACKAGE_VERSION} does not satisfy engines.xopc ${xopcRange}`,\n      });\n    }\n  }\n\n  const pkg = readJson(join(extensionDir, 'package.json'));\n  if (pkg) {\n    for (const issue of collectExtensionPackageDependencyIssues(pkg, { strictRuntimeSdkDeps: true })) {\n      issues.push({ level: 'error', extensionId, message: issue.message });\n    }\n  }\n\n  if (main && existsSync(join(extensionDir, main))) {\n    const source = readFileSync(join(extensionDir, main), 'utf-8');\n    const checks: Array<{ contract: string; values: string[] }> = [\n      { contract: 'hooks', values: collectStringLiteralCalls(source, 'registerHook') },\n      { contract: 'hooks', values: collectStringLiteralCalls(source, 'onHook') },\n      { contract: 'httpRoutes', values: collectStringLiteralCalls(source, 'registerHttpRoute') },\n      { contract: 'gatewayMethods', values: collectStringLiteralCalls(source, 'registerGatewayMethod') },\n      { contract: 'tools', values: collectObjectNameRegistrations(source, 'registerTool', 'name') },\n      { contract: 'commands', values: collectObjectNameRegistrations(source, 'registerCommand', 'name') },\n      { contract: 'services', values: collectObjectNameRegistrations(source, 'registerService', 'id') },\n    ];\n    for (const check of checks) {\n      const declared = listContractValues(manifest, check.contract);\n      for (const value of check.values) {\n        if (!contractAllows(declared, value)) {\n          issues.push({\n            level: 'error',\n            extensionId,\n            message: `Runtime registers ${check.contract}:${value} but manifest contracts.${check.contract} does not declare it`,\n          });\n        }\n      }\n    }\n  }\n\n  return issues;\n}\n\nexport function createExtensionDoctorCommand(): Command {\n  return new Command('doctor')\n    .description('Diagnose installed extension package contracts')\n    .option('--json', 'Output as JSON')\n    .option('--fix', 'Refresh lockfile snapshots and installed file integrity for valid installed extensions')\n    .action(async (options: { json?: boolean; fix?: boolean }) => {\n      try {\n        const ctx = getContextWithOpts();\n        const cfg = loadConfig(ctx.configPath) as Record<string, unknown>;\n        const extensionsConfig =\n          typeof cfg.extensions === 'object' && cfg.extensions !== null && !Array.isArray(cfg.extensions)\n            ? (cfg.extensions as Record<string, unknown>)\n            : undefined;\n        const enabledIds = Array.isArray(extensionsConfig?.enabled)\n          ? extensionsConfig.enabled.filter((x): x is string => typeof x === 'string')\n          : [];\n        const lockfileManager = getExtensionLockfileManager();\n        const extensions = await lockfileManager.list();\n        const issues: DoctorIssue[] = [];\n        const lockDir = resolveExtensionsDir();\n        const lockedIds = new Set(extensions.map((entry) => entry.name));\n        for (const entry of extensions) {\n          const extensionDir = join(lockDir, entry.name);\n          if (!existsSync(extensionDir)) {\n            issues.push({ level: 'error', extensionId: entry.name, message: 'Lockfile entry exists but extension directory is missing; reinstall the extension' });\n            continue;\n          }\n          const entryIssues = diagnoseExtensionPackage(entry.name, extensionDir);\n          issues.push(...entryIssues);\n          if (options.fix && entryIssues.length === 0) {\n            await lockfileManager.upsert(entry.name, {\n              ...entry,\n              manifest: readJson(join(extensionDir, 'xopc.extension.json')),\n              packageJson: readJson(join(extensionDir, 'package.json')),\n              installedIntegrity: hashInstalledExtensionDir(extensionDir),\n            });\n          }\n        }\n\n        for (const enabledId of enabledIds) {\n          if (!lockedIds.has(enabledId) && !existsSync(join(lockDir, enabledId))) {\n            if (options.fix && extensionsConfig) {\n              extensionsConfig.enabled = enabledIds.filter((id) => id !== enabledId);\n              issues.push({ level: 'warning', extensionId: enabledId, message: 'Removed from extensions.enabled because it is not installed' });\n            } else {\n              issues.push({ level: 'error', extensionId: enabledId, message: 'Configured in extensions.enabled but not installed' });\n            }\n          }\n        }\n        if (options.fix && extensionsConfig) {\n          await saveConfig(cfg as Parameters<typeof saveConfig>[0], ctx.configPath);\n        }\n\n        if (existsSync(lockDir)) {\n          for (const dirent of readdirSync(lockDir, { withFileTypes: true })) {\n            if (!dirent.isDirectory() || lockedIds.has(dirent.name)) continue;\n            const extensionDir = join(lockDir, dirent.name);\n            const entryIssues = diagnoseExtensionPackage(dirent.name, extensionDir);\n            if (entryIssues.length > 0) {\n              issues.push(...entryIssues);\n              issues.push({ level: 'error', extensionId: dirent.name, message: 'Extension directory is not recorded in the lockfile and cannot be auto-fixed until package contract errors are resolved' });\n              continue;\n            }\n            if (!options.fix) {\n              issues.push({ level: 'warning', extensionId: dirent.name, message: 'Extension directory is not recorded in the lockfile' });\n            }\n            if (options.fix) {\n              const manifest = readJson(join(extensionDir, 'xopc.extension.json'));\n              const packageJson = readJson(join(extensionDir, 'package.json'));\n              await lockfileManager.upsert(dirent.name, {\n                name: dirent.name,\n                version: String(manifest?.version ?? packageJson?.version ?? '0.0.0'),\n                resolved: extensionDir,\n                source: 'local',\n                manifest,\n                packageJson,\n                installedIntegrity: hashInstalledExtensionDir(extensionDir),\n              });\n            }\n          }\n        }\n\n        if (options.json) {\n          console.log(JSON.stringify({ ok: issues.every((i) => i.level !== 'error'), issues }, null, 2));\n          return;\n        }\n\n        if (issues.length === 0) {\n          console.log(colors.green('✓'), options.fix\n            ? 'All installed extensions satisfy the package contract; lockfile snapshots refreshed'\n            : 'All installed extensions satisfy the package contract');\n          return;\n        }\n        for (const issue of issues) {\n          const marker = issue.level === 'error' ? colors.red('✗') : colors.yellow('⚠');\n          console.log(marker, `${issue.extensionId}: ${issue.message}`);\n        }\n        if (issues.some((i) => i.level === 'error')) process.exit(1);\n      } catch (error) {\n        log.error({ error }, 'Failed to run extension doctor');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Extension Audit Command\n// ============================================\n\nexport function createExtensionAuditCommand(): Command {\n  return new Command('audit')\n    .description('Audit extensions for security issues')\n    .action(async () => {\n      try {\n        const checker = getExtensionHealthChecker();\n\n        // Check for orphaned extensions\n        const orphaned = await checker.findOrphaned();\n\n        if (orphaned.length > 0) {\n          console.log(colors.yellow('⚠'), 'Orphaned extensions found:');\n          for (const ext of orphaned) {\n            console.log(`  - ${ext}`);\n          }\n          console.log();\n          console.log('These extensions are installed but not in the lockfile.');\n          console.log('Run `xopc extensions freeze` to add them.');\n        } else {\n          console.log(colors.green('✓'), 'No orphaned extensions found');\n        }\n\n        // Run health check\n        const report = await checkAllExtensionsHealth();\n\n        if (report.summary.error > 0 || report.summary.warning > 0) {\n          console.log();\n          console.log(checker.formatReport(report));\n        } else {\n          console.log(colors.green('✓'), 'All extensions are healthy');\n        }\n      } catch (error) {\n        log.error({ error }, 'Failed to audit extensions');\n        console.error(colors.red('Error:'), error instanceof Error ? error.message : String(error));\n        process.exit(1);\n      }\n    });\n}\n\n// ============================================\n// Register All Commands\n// ============================================\n\nexport function registerExtensionCommands(program: Command): void {\n  const extensions = new Command('extensions')\n    .description('Manage extensions')\n    .addCommand(createExtensionListCommand())\n    .addCommand(createExtensionInspectCommand())\n    .addCommand(createExtensionFreezeCommand())\n    .addCommand(createExtensionHealthCommand())\n    .addCommand(createExtensionVerifyCommand())\n    .addCommand(createExtensionDoctorCommand())\n    .addCommand(createExtensionAuditCommand())\n    .addCommand(createExtensionPackCommand())\n    .addCommand(createExtensionCreateCommand())\n    .addCommand(createExtensionDevCommand())\n    .addCommand(createExtensionInstallCommand())\n    .addCommand(createExtensionSearchCommand())\n    .addCommand(createExtensionPublishCommand())\n    .addCommand(createExtensionUpdateCommand());\n\n  program.addCommand(extensions);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;aAMgE;YACH;sBAIF;aACN;AAkBrD,MAAM,MAAM,aAAa,oBAAoB;AAM7C,SAAgB,6BAAsC;AACpD,QAAO,IAAI,QAAQ,OAAO,CACvB,YAAY,4BAA4B,CACxC,OAAO,UAAU,iBAAiB,CAClC,OAAO,OAAO,YAAY;AACzB,MAAI;GAEF,MAAM,aAAa,MADK,6BACgB,CAAC,MAAM;AAE/C,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU,YAAY,MAAM,EAAE,CAAC;AAChD;;AAGF,OAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,IAAI,2BAA2B;AACvC;;AAGF,WAAQ,IAAI,yBAAyB,WAAW,OAAO,IAAI;AAC3D,WAAQ,KAAK;AAEb,QAAK,MAAM,OAAO,YAAY;AAC5B,YAAQ,IAAI,GAAG,OAAO,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,UAAU;AACtD,YAAQ,IAAI,aAAa,IAAI,SAAS;AACtC,YAAQ,IAAI,eAAe,IAAI,WAAW;AAC1C,YAAQ,IAAI,gBAAgB,IAAI,KAAK,IAAI,YAAY,CAAC,gBAAgB,GAAG;AACzE,YAAQ,KAAK;;WAER,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,4BAA4B;AACjD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAS,0BAA0B,cAA0C;AAC3E,KAAI,CAAC,WAAW,aAAa,CAAE,QAAO,KAAA;CACtC,MAAM,OAAO,WAAW,SAAS;CACjC,MAAM,QAAQ,KAAa,SAAS,OAAO;EACzC,MAAM,UAAU,YAAY,KAAK,EAAE,eAAe,MAAM,CAAC,CACtD,QAAQ,UAAU,MAAM,SAAS,eAAe,CAChD,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAC/C,OAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,MAAM,SAAS,MAAM;GACvD,MAAM,OAAO,KAAK,KAAK,MAAM,KAAK;AAClC,OAAI,MAAM,aAAa,CACrB,MAAK,MAAM,IAAI;YACN,MAAM,QAAQ,EAAE;IACzB,MAAM,KAAK,SAAS,KAAK;AACzB,SAAK,OAAO,SAAS,IAAI,IAAI,GAAG,KAAK,IAAI;AACzC,SAAK,OAAO,aAAa,KAAK,CAAC;AAC/B,SAAK,OAAO,KAAK;;;;AAIvB,MAAK,aAAa;AAClB,QAAO,cAAc,KAAK,OAAO,SAAS;;AAG5C,SAAS,SAAS,MAAmD;AACnE,KAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,MAAM,QAAQ,CAAC;AACnD,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,CAAC,MAAM,QAAQ,IAAI,GAChE,MACD,KAAA;SACE;AACN;;;AAIJ,SAAgB,gCAAyC;AACvD,QAAO,IAAI,QAAQ,UAAU,CAC1B,YAAY,+DAA+D,CAC3E,SAAS,eAAe,eAAe,CACvC,OAAO,UAAU,iBAAiB,CAClC,OAAO,aAAa,uDAAuD,CAC3E,OAAO,OAAO,aAAqB,YAAmD;AACrF,MAAI;GAEF,MAAM,YAAY,MADM,6BACe,CAAC,IAAI,YAAY;GACxD,MAAM,eAAe,KAAK,sBAAsB,EAAE,YAAY;GAC9D,MAAM,WAAW,SAAS,KAAK,cAAc,sBAAsB,CAAC,IAAI,WAAW;GACnF,MAAM,cAAc,SAAS,KAAK,cAAc,eAAe,CAAC,IAAI,WAAW;GAC/E,IAAI;AACJ,OAAI,QAAQ,SAAS;IACnB,MAAM,SAAS,IAAI,gBAAgB;KACjC,cAAc,QAAQ,KAAK;KAC3B,eAAe,sBAAsB;KACtC,CAAC;IACF,MAAM,MAAM,MAAM,OAAO,cAAc;KACrC,IAAI;KACJ,MAAM,OAAO,UAAU,QAAQ,YAAY;KAC3C,MAAM;KACN,QAAQ;KACR,SAAS;KACT,QAAQ,EAAE;KACX,CAAC;IACF,MAAM,WAAW,OAAO,aAAa;AACrC,cAAU,MACN;KACE,QAAQ;KACR,OAAO,MAAM,KAAK,SAAS,MAAM,MAAM,CAAC;KACxC,UAAU,MAAM,KAAK,SAAS,SAAS,MAAM,CAAC;KAC9C,OAAO,MAAM,KAAK,SAAS,MAAM,MAAM,CAAC;KACxC,UAAU,SAAS,eAAe,KAAK,MAAM,EAAE,GAAG;KAClD,YAAY,MAAM,KAAK,SAAS,WAAW,MAAM,CAAC;KAClD,gBAAgB,MAAM,KAAK,SAAS,eAAe,MAAM,CAAC;KAC1D,UAAU,MAAM,KAAK,SAAS,SAAS,MAAM,CAAC;KAC9C,aAAa,SAAS,qBAAqB,CAAC,SAAS,MAAM,EAAE,SAAS;KACtE,KAAK,SAAS,qBAAqB,CAAC,KAAK,MAAM,EAAE,YAAY;KAC9D,GACD;KAAE,QAAQ;KAAO,aAAa,OAAO,gBAAgB,CAAC,QAAQ;KAAE;;GAGtE,MAAM,uBAAuB,0BAA0B,UAAU,QAAQ;GACzE,MAAM,SAAS;IACb,IAAI;IACJ,WAAW,QAAQ,UAAU;IAC7B,MAAM,WAAW,aAAa,GAAG,eAAe,KAAA;IAChD;IACA;IACA;IACA;IACA;IACD;AAED,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;AAC5C;;AAGF,OAAI,CAAC,aAAa,CAAC,UAAU;AAC3B,YAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,wBAAwB,cAAc;AAC1E,YAAQ,KAAK,EAAE;;AAGjB,WAAQ,IAAI,GAAG,OAAO,KAAK,OAAO,UAAU,QAAQ,YAAY,CAAC,CAAC,IAAI,YAAY,GAAG;AACrF,OAAI,UAAU,WAAW,WAAW,QAClC,SAAQ,IAAI,cAAc,OAAO,UAAU,WAAW,WAAW,QAAQ,GAAG;AAE9E,OAAI,WAAW;AACb,YAAQ,IAAI,aAAa,UAAU,SAAS;AAC5C,YAAQ,IAAI,eAAe,UAAU,WAAW;AAChD,QAAI,UAAU,UAAW,SAAQ,IAAI,gBAAgB,UAAU,YAAY;;AAE7E,OAAI,UAAU,KAAM,SAAQ,IAAI,WAAW,OAAO,SAAS,KAAK,GAAG;GACnE,MAAM,UAAU,UAAU;AAC1B,OAAI,SAAS,KAAM,SAAQ,IAAI,mBAAmB,OAAO,QAAQ,KAAK,GAAG;GACzE,MAAM,YAAY,UAAU;AAC5B,OAAI,WAAW;AACb,YAAQ,IAAI,eAAe;AAC3B,SAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,UAAU,CAClD,KAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EACzC,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG;;AAIpD,OAAI,SAAS;AACX,YAAQ,IAAI,aAAa;AACzB,QAAI,QAAQ,WAAW,MACrB,SAAQ,IAAI,oBAAoB;QAEhC,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,EAAE;AAClD,SAAI,QAAQ,SAAU;AACtB,SAAI,MAAM,QAAQ,MAAM,IAAI,MAAM,SAAS,EACzC,SAAQ,IAAI,OAAO,IAAI,IAAI,MAAM,KAAK,KAAK,GAAG;;AAIpD,QAAI,qBAAqB,SAAS,GAAG;AACnC,aAAQ,IAAI,4BAA4B;AACxC,UAAK,MAAM,SAAS,sBAAsB;MACxC,MAAM,SAAS,MAAM,WAAW,eAAe,OAAO,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI;MAClF,MAAM,SAAS,MAAM,WAAW,YAAY,iCAAiC;AAC7E,cAAQ,IAAI,OAAO,OAAO,GAAG,MAAM,SAAS,GAAG,MAAM,WAAW,SAAS;;;;WAIxE,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,8BAA8B;AACnD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,kCAAkC,CAC9C,OAAO,YAAY;AAClB,MAAI;AAEF,SADwB,6BACH,CAAC,QAAQ;AAE9B,WAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,4BAA4B;WACpD,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,8BAA8B;AACnD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,yBAAyB,CACrC,OAAO,UAAU,iBAAiB,CAClC,OAAO,OAAO,YAAY;AACzB,MAAI;GACF,MAAM,UAAU,2BAA2B;GAC3C,MAAM,SAAS,MAAM,0BAA0B;AAE/C,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;AAC5C;;AAGF,WAAQ,IAAI,QAAQ,aAAa,OAAO,CAAC;AAGzC,OAAI,OAAO,QAAQ,QAAQ,EACzB,SAAQ,KAAK,EAAE;WAEV,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,mCAAmC;AACxD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,6BAA6B,CACzC,SAAS,eAAe,8CAA8C,CACtE,OAAO,OAAO,gBAAgB;AAC7B,MAAI;GACF,MAAM,kBAAkB,6BAA6B;AAErD,OAAI,aAAa;IACf,MAAM,SAAS,MAAM,gBAAgB,OAAO,YAAY;AAExD,QAAI,OAAO,MACT,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,cAAc,YAAY,YAAY;SAChE;AACL,aAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,cAAc,YAAY,gBAAgB,OAAO,SAAS;AACvF,aAAQ,KAAK,EAAE;;UAEZ;IACL,MAAM,UAAU,MAAM,gBAAgB,WAAW;IACjD,IAAI,YAAY;AAEhB,SAAK,MAAM,UAAU,QACnB,KAAI,OAAO,MACT,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,OAAO,YAAY;SAC7C;AACL,aAAQ,IAAI,OAAO,IAAI,IAAI,EAAE,GAAG,OAAO,YAAY,IAAI,OAAO,SAAS;AACvE,iBAAY;;AAIhB,QAAI,UACF,SAAQ,KAAK,EAAE;;WAGZ,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,8BAA8B;AACnD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAaN,SAAS,mBAAmB,UAAmC,KAAuB;CACpF,MAAM,YAAY,SAAS;AAC3B,KAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,MAAM,QAAQ,UAAU,CAAE,QAAO,EAAE;CAC9F,MAAM,QAAS,UAAsC;AACrD,QAAO,MAAM,QAAQ,MAAM,GAAG,MAAM,QAAQ,MAAmB,OAAO,MAAM,SAAS,GAAG,EAAE;;AAG5F,SAAS,eAAe,QAAkB,WAA4B;AACpE,QAAO,OAAO,MAAM,UAAU,UAAU,aAAc,MAAM,SAAS,IAAI,IAAI,UAAU,WAAW,MAAM,MAAM,GAAG,GAAG,CAAC,CAAE;;AAGzH,SAAS,0BACP,UACA,SACiF;AACjF,KAAI,CAAC,YAAY,CAAC,WAAW,QAAQ,WAAW,MAAO,QAAO,EAAE;CAChE,MAAM,MAAuF,EAAE;AAC/F,MAAK,MAAM,OAAO;EAAC;EAAS;EAAY;EAAS;EAAY;EAAc;EAAkB;EAAY;EAAe;EAAM,EAAE;EAC9H,MAAM,WAAW,mBAAmB,UAAU,IAAI;EAClD,MAAM,aAAa,MAAM,QAAQ,QAAQ,KAAK,GAAI,QAAQ,KAAmB,QAAQ,MAAmB,OAAO,MAAM,SAAS,GAAG,EAAE;AACnI,OAAK,MAAM,QAAQ,UAAU;AAC3B,OAAI,KAAK,SAAS,IAAI,CAAE;AACxB,OAAI,KAAK;IACP,UAAU;IACV,UAAU;IACV,QAAQ,WAAW,SAAS,KAAK,GAAG,eAAe;IACpD,CAAC;;;AAGN,QAAO;;AAGT,SAAS,0BAA0B,QAAgB,QAA0B;CAC3E,MAAM,MAAgB,EAAE;CACxB,MAAM,KAAK,IAAI,OAAO,MAAM,OAAO,6BAA6B,IAAI;AACpE,MAAK,MAAM,SAAS,OAAO,SAAS,GAAG,CACrC,KAAI,MAAM,GAAI,KAAI,KAAK,MAAM,GAAG;AAElC,QAAO;;AAGT,SAAS,+BAA+B,QAAgB,QAAgB,OAAyB;CAC/F,MAAM,MAAgB,EAAE;CACxB,MAAM,KAAK,IAAI,OAAO,MAAM,OAAO,yBAAyB,MAAM,+BAA+B,IAAI;AACrG,MAAK,MAAM,SAAS,OAAO,SAAS,GAAG,CACrC,KAAI,MAAM,GAAI,KAAI,KAAK,MAAM,GAAG;AAElC,QAAO;;AAGT,SAAS,yBAAyB,aAAqB,cAAqC;CAC1F,MAAM,SAAwB,EAAE;CAChC,MAAM,WAAW,SAAS,KAAK,cAAc,sBAAsB,CAAC;AACpE,KAAI,CAAC,SACH,QAAO,CAAC;EAAE,OAAO;EAAS;EAAa,SAAS;EAA+B,CAAC;CAGlF,MAAM,OAAO,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO;AACjE,KAAI,CAAC,KACH,QAAO,KAAK;EAAE,OAAO;EAAS;EAAa,SAAS;EAA6B,CAAC;UACzE,CAAC,mBAAmB,KAAK,KAAK,CACvC,QAAO,KAAK;EAAE,OAAO;EAAS;EAAa,SAAS,qDAAqD;EAAQ,CAAC;UACzG,CAAC,WAAW,KAAK,cAAc,KAAK,CAAC,CAC9C,QAAO,KAAK;EAAE,OAAO;EAAS;EAAa,SAAS,wCAAwC;EAAQ,CAAC;CAGvG,MAAM,UAAU,SAAS;CACzB,MAAM,YAAY,OAAO,YAAY,YAAY,YAAY,QAAQ,CAAC,MAAM,QAAQ,QAAQ,GACvF,QAAoC,OACrC,KAAA;AACJ,KAAI,OAAO,cAAc,YAAY,CAAC,UAAU,MAAM,CACpD,QAAO,KAAK;EAAE,OAAO;EAAS;EAAa,SAAS;EAA4B,CAAC;MAC5E;EACL,MAAM,cAAc,yBAAyB,iBAAiB,UAAU;AACxE,MAAI,YAAY,gBAAgB,CAAC,YAAY,WAC3C,QAAO,KAAK;GACV,OAAO;GACP;GACA,SAAS,YAAY,UAAU,QAAQ,gBAAgB,iCAAiC;GACzF,CAAC;;CAIN,MAAM,MAAM,SAAS,KAAK,cAAc,eAAe,CAAC;AACxD,KAAI,IACF,MAAK,MAAM,SAAS,wCAAwC,KAAK,EAAE,sBAAsB,MAAM,CAAC,CAC9F,QAAO,KAAK;EAAE,OAAO;EAAS;EAAa,SAAS,MAAM;EAAS,CAAC;AAIxE,KAAI,QAAQ,WAAW,KAAK,cAAc,KAAK,CAAC,EAAE;EAChD,MAAM,SAAS,aAAa,KAAK,cAAc,KAAK,EAAE,QAAQ;EAC9D,MAAM,SAAwD;GAC5D;IAAE,UAAU;IAAS,QAAQ,0BAA0B,QAAQ,eAAe;IAAE;GAChF;IAAE,UAAU;IAAS,QAAQ,0BAA0B,QAAQ,SAAS;IAAE;GAC1E;IAAE,UAAU;IAAc,QAAQ,0BAA0B,QAAQ,oBAAoB;IAAE;GAC1F;IAAE,UAAU;IAAkB,QAAQ,0BAA0B,QAAQ,wBAAwB;IAAE;GAClG;IAAE,UAAU;IAAS,QAAQ,+BAA+B,QAAQ,gBAAgB,OAAO;IAAE;GAC7F;IAAE,UAAU;IAAY,QAAQ,+BAA+B,QAAQ,mBAAmB,OAAO;IAAE;GACnG;IAAE,UAAU;IAAY,QAAQ,+BAA+B,QAAQ,mBAAmB,KAAK;IAAE;GAClG;AACD,OAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,WAAW,mBAAmB,UAAU,MAAM,SAAS;AAC7D,QAAK,MAAM,SAAS,MAAM,OACxB,KAAI,CAAC,eAAe,UAAU,MAAM,CAClC,QAAO,KAAK;IACV,OAAO;IACP;IACA,SAAS,qBAAqB,MAAM,SAAS,GAAG,MAAM,0BAA0B,MAAM,SAAS;IAChG,CAAC;;;AAMV,QAAO;;AAGT,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,iDAAiD,CAC7D,OAAO,UAAU,iBAAiB,CAClC,OAAO,SAAS,yFAAyF,CACzG,OAAO,OAAO,YAA+C;AAC5D,MAAI;GACF,MAAM,MAAM,oBAAoB;GAChC,MAAM,MAAM,WAAW,IAAI,WAAW;GACtC,MAAM,mBACJ,OAAO,IAAI,eAAe,YAAY,IAAI,eAAe,QAAQ,CAAC,MAAM,QAAQ,IAAI,WAAW,GAC1F,IAAI,aACL,KAAA;GACN,MAAM,aAAa,MAAM,QAAQ,kBAAkB,QAAQ,GACvD,iBAAiB,QAAQ,QAAQ,MAAmB,OAAO,MAAM,SAAS,GAC1E,EAAE;GACN,MAAM,kBAAkB,6BAA6B;GACrD,MAAM,aAAa,MAAM,gBAAgB,MAAM;GAC/C,MAAM,SAAwB,EAAE;GAChC,MAAM,UAAU,sBAAsB;GACtC,MAAM,YAAY,IAAI,IAAI,WAAW,KAAK,UAAU,MAAM,KAAK,CAAC;AAChE,QAAK,MAAM,SAAS,YAAY;IAC9B,MAAM,eAAe,KAAK,SAAS,MAAM,KAAK;AAC9C,QAAI,CAAC,WAAW,aAAa,EAAE;AAC7B,YAAO,KAAK;MAAE,OAAO;MAAS,aAAa,MAAM;MAAM,SAAS;MAAqF,CAAC;AACtJ;;IAEF,MAAM,cAAc,yBAAyB,MAAM,MAAM,aAAa;AACtE,WAAO,KAAK,GAAG,YAAY;AAC3B,QAAI,QAAQ,OAAO,YAAY,WAAW,EACxC,OAAM,gBAAgB,OAAO,MAAM,MAAM;KACvC,GAAG;KACH,UAAU,SAAS,KAAK,cAAc,sBAAsB,CAAC;KAC7D,aAAa,SAAS,KAAK,cAAc,eAAe,CAAC;KACzD,oBAAoB,0BAA0B,aAAa;KAC5D,CAAC;;AAIN,QAAK,MAAM,aAAa,WACtB,KAAI,CAAC,UAAU,IAAI,UAAU,IAAI,CAAC,WAAW,KAAK,SAAS,UAAU,CAAC,CACpE,KAAI,QAAQ,OAAO,kBAAkB;AACnC,qBAAiB,UAAU,WAAW,QAAQ,OAAO,OAAO,UAAU;AACtE,WAAO,KAAK;KAAE,OAAO;KAAW,aAAa;KAAW,SAAS;KAA+D,CAAC;SAEjI,QAAO,KAAK;IAAE,OAAO;IAAS,aAAa;IAAW,SAAS;IAAsD,CAAC;AAI5H,OAAI,QAAQ,OAAO,iBACjB,OAAM,WAAW,KAAyC,IAAI,WAAW;AAG3E,OAAI,WAAW,QAAQ,CACrB,MAAK,MAAM,UAAU,YAAY,SAAS,EAAE,eAAe,MAAM,CAAC,EAAE;AAClE,QAAI,CAAC,OAAO,aAAa,IAAI,UAAU,IAAI,OAAO,KAAK,CAAE;IACzD,MAAM,eAAe,KAAK,SAAS,OAAO,KAAK;IAC/C,MAAM,cAAc,yBAAyB,OAAO,MAAM,aAAa;AACvE,QAAI,YAAY,SAAS,GAAG;AAC1B,YAAO,KAAK,GAAG,YAAY;AAC3B,YAAO,KAAK;MAAE,OAAO;MAAS,aAAa,OAAO;MAAM,SAAS;MAA2H,CAAC;AAC7L;;AAEF,QAAI,CAAC,QAAQ,IACX,QAAO,KAAK;KAAE,OAAO;KAAW,aAAa,OAAO;KAAM,SAAS;KAAuD,CAAC;AAE7H,QAAI,QAAQ,KAAK;KACf,MAAM,WAAW,SAAS,KAAK,cAAc,sBAAsB,CAAC;KACpE,MAAM,cAAc,SAAS,KAAK,cAAc,eAAe,CAAC;AAChE,WAAM,gBAAgB,OAAO,OAAO,MAAM;MACxC,MAAM,OAAO;MACb,SAAS,OAAO,UAAU,WAAW,aAAa,WAAW,QAAQ;MACrE,UAAU;MACV,QAAQ;MACR;MACA;MACA,oBAAoB,0BAA0B,aAAa;MAC5D,CAAC;;;AAKR,OAAI,QAAQ,MAAM;AAChB,YAAQ,IAAI,KAAK,UAAU;KAAE,IAAI,OAAO,OAAO,MAAM,EAAE,UAAU,QAAQ;KAAE;KAAQ,EAAE,MAAM,EAAE,CAAC;AAC9F;;AAGF,OAAI,OAAO,WAAW,GAAG;AACvB,YAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,QAAQ,MACnC,wFACA,wDAAwD;AAC5D;;AAEF,QAAK,MAAM,SAAS,QAAQ;IAC1B,MAAM,SAAS,MAAM,UAAU,UAAU,OAAO,IAAI,IAAI,GAAG,OAAO,OAAO,IAAI;AAC7E,YAAQ,IAAI,QAAQ,GAAG,MAAM,YAAY,IAAI,MAAM,UAAU;;AAE/D,OAAI,OAAO,MAAM,MAAM,EAAE,UAAU,QAAQ,CAAE,SAAQ,KAAK,EAAE;WACrD,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,iCAAiC;AACtD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,8BAAuC;AACrD,QAAO,IAAI,QAAQ,QAAQ,CACxB,YAAY,uCAAuC,CACnD,OAAO,YAAY;AAClB,MAAI;GACF,MAAM,UAAU,2BAA2B;GAG3C,MAAM,WAAW,MAAM,QAAQ,cAAc;AAE7C,OAAI,SAAS,SAAS,GAAG;AACvB,YAAQ,IAAI,OAAO,OAAO,IAAI,EAAE,6BAA6B;AAC7D,SAAK,MAAM,OAAO,SAChB,SAAQ,IAAI,OAAO,MAAM;AAE3B,YAAQ,KAAK;AACb,YAAQ,IAAI,0DAA0D;AACtE,YAAQ,IAAI,4CAA4C;SAExD,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,+BAA+B;GAIhE,MAAM,SAAS,MAAM,0BAA0B;AAE/C,OAAI,OAAO,QAAQ,QAAQ,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC1D,YAAQ,KAAK;AACb,YAAQ,IAAI,QAAQ,aAAa,OAAO,CAAC;SAEzC,SAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,6BAA6B;WAEvD,OAAO;AACd,OAAI,MAAM,EAAE,OAAO,EAAE,6BAA6B;AAClD,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;AAC3F,WAAQ,KAAK,EAAE;;GAEjB;;AAON,SAAgB,0BAA0B,SAAwB;CAChE,MAAM,aAAa,IAAI,QAAQ,aAAa,CACzC,YAAY,oBAAoB,CAChC,WAAW,4BAA4B,CAAC,CACxC,WAAW,+BAA+B,CAAC,CAC3C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,6BAA6B,CAAC,CACzC,WAAW,4BAA4B,CAAC,CACxC,WAAW,8BAA8B,CAAC,CAC1C,WAAW,2BAA2B,CAAC,CACvC,WAAW,+BAA+B,CAAC,CAC3C,WAAW,8BAA8B,CAAC,CAC1C,WAAW,+BAA+B,CAAC,CAC3C,WAAW,8BAA8B,CAAC;AAE7C,SAAQ,WAAW,WAAW"}

package/dist/src/cli/commands/gateway/logs.js

@@ -1,7 +1,7 @@
 import { getContextWithOpts } from "../../context.js";
+import path from "node:path";
 import { existsSync, statSync, watch } from "node:fs";
 import { readFile } from "node:fs/promises";
-import path from "node:path";
 import { Command } from "commander";
 //#region src/cli/commands/gateway/logs.ts
 function parseLineCount(value) {

package/dist/src/cli/commands/gateway/run-foreground.js

@@ -1,6 +1,6 @@
 //#region src/cli/commands/gateway/run-foreground.ts
 async function ensureGatewayReady(configPath, workspacePath, port) {
-	const [{ initWorkspace }, { seedMainAgentProfileMarkdown }] = await Promise.all([import("../../utils/init-workspace.js"), import("../../../agent/context/workspace-seed.js")]);
+	const { initWorkspace } = await import("../../utils/init-workspace.js");
 	const result = await initWorkspace({
 		configPath,
 		workspacePath,
@@ -17,7 +17,6 @@ async function ensureGatewayReady(configPath, workspacePath, port) {
 		console.log("");
 		console.log("💡 Tip: run `xopc onboard` anytime to configure models, channels, and more.");
 		console.log("");
-		seedMainAgentProfileMarkdown(result.config);
 	}
 }
 async function runGatewayFromCliOptions(options, ctx) {

package/dist/src/cli/commands/gateway/run-foreground.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-foreground.js","names":[],"sources":["../../../../../src/cli/commands/gateway/run-foreground.ts"],"sourcesContent":["import type { CLIContext } from '../../registry.js';\n\nexport type GatewayRunCliOptions = {\n  bind?: string;\n  port?: string | number;\n  token?: string;\n  tailscale?: string;\n  tailscaleResetOnExit?: boolean;\n  force?: boolean;\n  hotReload?: boolean;\n  foreground?: boolean;\n};\n\nasync function ensureGatewayReady(\n  configPath: string,\n  workspacePath: string,\n  port: number,\n): Promise<void> {\n  const [{ initWorkspace }, { seedMainAgentProfileMarkdown }] = await Promise.all([\n    import('../../utils/init-workspace.js'),\n    import('../../../agent/context/workspace-seed.js'),\n  ]);\n  const result = await initWorkspace({\n    configPath,\n    workspacePath,\n    gatewayPort: port,\n  });\n\n  if (result.configCreated || result.workspaceCreated) {\n    console.log('');\n    console.log('👋 Welcome to xopc! Running first-time setup before starting the gateway...');\n    console.log('');\n    console.log('✅ First-time setup complete!');\n    console.log(`   Config:    ${configPath}`);\n    console.log(`   Workspace: ${workspacePath}`);\n    console.log(`   Token:     ${result.token.slice(0, 8)}...${result.token.slice(-8)}`);\n    console.log('');\n    console.log('💡 Tip: run `xopc onboard` anytime to configure models, channels, and more.');\n    console.log('');\n    seedMainAgentProfileMarkdown(result.config);\n  }\n}\n\nexport async function runGatewayFromCliOptions(\n  options: GatewayRunCliOptions,\n  ctx: CLIContext,\n): Promise<void> {\n  const tailscaleModes = new Set(['off', 'serve', 'funnel']);\n  const tailscaleRaw =\n    typeof options.tailscale === 'string' ? options.tailscale.trim().toLowerCase() : undefined;\n  const tailscaleOverride =\n    tailscaleRaw && tailscaleModes.has(tailscaleRaw)\n      ? (tailscaleRaw as 'off' | 'serve' | 'funnel')\n      : undefined;\n  if (tailscaleRaw && !tailscaleOverride) {\n    console.error(`Invalid --tailscale mode \"${tailscaleRaw}\". Use: off, serve, funnel.`);\n    process.exit(1);\n  }\n\n  if (tailscaleOverride && tailscaleOverride !== 'off') {\n    process.env.XOPC_GATEWAY_TAILSCALE_MODE = tailscaleOverride;\n  }\n  if (options.tailscaleResetOnExit === true) {\n    process.env.XOPC_GATEWAY_TAILSCALE_RESET_ON_EXIT = '1';\n  }\n\n  const [{ loadConfig }, { resolveConfigPath }, { runGatewayLoop }, gatewayPorts] = await Promise.all([\n    import('../../../config/index.js'),\n    import('../../../config/paths.js'),\n    import('../../../gateway/run-loop.js'),\n    import('../../../gateway/ports.js'),\n  ]);\n  const { checkPortAvailable, forceFreePortAndWait } = gatewayPorts;\n  const config = loadConfig(ctx.configPath);\n\n  const bindFromFlagRaw =\n    typeof options.bind === 'string' && options.bind.trim().length > 0\n      ? options.bind.trim().toLowerCase()\n      : undefined;\n  const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n  const bindFromFlag = bindFromFlagRaw && bindModes.has(bindFromFlagRaw)\n    ? (bindFromFlagRaw as import('../../../config/schema.js').GatewayBindMode)\n    : undefined;\n  if (bindFromFlagRaw && !bindFromFlag) {\n    console.error(`Invalid --bind mode \"${bindFromFlagRaw}\". Use: loopback, lan, auto, custom, tailnet.`);\n    process.exit(1);\n  }\n\n  const portRaw = options.port;\n  const portFromFlag =\n    portRaw !== undefined && portRaw !== null && String(portRaw).trim().length > 0\n      ? parseInt(String(portRaw), 10)\n      : undefined;\n\n  const { resolveGatewayListenPlan } = await import('../../../gateway/listen.js');\n  const listenPlan = resolveGatewayListenPlan({\n    cfg: config,\n    bindOverride: bindFromFlag,\n  });\n  const bindHost = listenPlan.bindHost;\n  const port =\n    portFromFlag !== undefined && Number.isFinite(portFromFlag)\n      ? portFromFlag\n      : (typeof config.gateway.port === 'number' ? config.gateway.port : 18790);\n\n  await ensureGatewayReady(ctx.configPath, ctx.workspacePath, port);\n\n  const effectiveConfig = loadConfig(ctx.configPath);\n  const { resolveGatewayAuth, assertGatewayAuthConfigured } = await import('../../../gateway/auth.js');\n  const { assertGatewayRuntimeConfig } = await import('../../../gateway/runtime-config.js');\n\n  let auth = resolveGatewayAuth({ authConfig: effectiveConfig.gateway?.auth });\n  if (typeof options.token === 'string' && options.token.trim().length > 0) {\n    auth = { mode: 'token', token: options.token.trim() };\n  }\n  try {\n    assertGatewayAuthConfigured(auth);\n    assertGatewayRuntimeConfig({\n      cfg: effectiveConfig,\n      auth,\n      bindOverride: bindFromFlag,\n      port,\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    console.error(`Gateway refused to start: ${message}`);\n    process.exit(1);\n  }\n\n  if (options.force) {\n    try {\n      const result = await forceFreePortAndWait(port, {\n        timeoutMs: 2000,\n        sigtermTimeoutMs: 700,\n      });\n      if (result.killed.length > 0) {\n        console.log(`Force killed ${result.killed.length} process(es) on port ${port}`);\n        if (result.escalatedToSigkill) {\n          console.log('Escalated to SIGKILL');\n        }\n      }\n    } catch (err) {\n      console.error(`Failed to free port ${port}: ${String(err)}`);\n      process.exit(1);\n    }\n  }\n\n  const portAvailable = await checkPortAvailable(port, bindHost);\n  if (!portAvailable) {\n    console.error(`Port ${port} is already in use. Use --force to kill existing process.`);\n    process.exit(1);\n  }\n\n  console.log('🚀 Starting xopc gateway...');\n  console.log(`   Bind: ${listenPlan.bindMode} (${bindHost})`);\n  console.log(`   Port: ${port}`);\n  console.log('');\n  console.log('Press Ctrl+C to stop');\n  console.log('');\n\n  await runGatewayLoop({\n    configPath: ctx.configPath || resolveConfigPath(),\n    port,\n    start: async () => {\n      const { GatewayServer } = await import('../../../gateway/index.js');\n      const server = new GatewayServer({\n        bindHost: listenPlan.bindHost,\n        bind: listenPlan.bindMode,\n        customBindHost: listenPlan.customBindHost,\n        port,\n        token: options.token || config?.gateway?.auth?.token,\n        verbose: ctx.isVerbose,\n        configPath: ctx.configPath,\n        enableHotReload: options.hotReload,\n      });\n      await server.start();\n\n      const displayHost = bindHost === '0.0.0.0' ? 'localhost' : bindHost;\n      const token = options.token || config?.gateway?.auth?.token;\n      console.log('✅ Gateway started');\n      console.log(`   URL: http://${displayHost}:${port}`);\n      if (token) {\n        console.log(`   Token: ${token.slice(0, 8)}...${token.slice(-8)}`);\n      }\n      console.log('');\n\n      return server;\n    },\n  });\n}\n"],"mappings":";AAaA,eAAe,mBACb,YACA,eACA,MACe;CACf,MAAM,CAAC,EAAE,iBAAiB,EAAE,kCAAkC,MAAM,QAAQ,IAAI,CAC9E,OAAO,kCACP,OAAO,4CACR,CAAC;CACF,MAAM,SAAS,MAAM,cAAc;EACjC;EACA;EACA,aAAa;EACd,CAAC;AAEF,KAAI,OAAO,iBAAiB,OAAO,kBAAkB;AACnD,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,8EAA8E;AAC1F,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,+BAA+B;AAC3C,UAAQ,IAAI,iBAAiB,aAAa;AAC1C,UAAQ,IAAI,iBAAiB,gBAAgB;AAC7C,UAAQ,IAAI,iBAAiB,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,OAAO,MAAM,MAAM,GAAG,GAAG;AACpF,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,8EAA8E;AAC1F,UAAQ,IAAI,GAAG;AACf,+BAA6B,OAAO,OAAO;;;AAI/C,eAAsB,yBACpB,SACA,KACe;CACf,MAAM,iBAAiB,IAAI,IAAI;EAAC;EAAO;EAAS;EAAS,CAAC;CAC1D,MAAM,eACJ,OAAO,QAAQ,cAAc,WAAW,QAAQ,UAAU,MAAM,CAAC,aAAa,GAAG,KAAA;CACnF,MAAM,oBACJ,gBAAgB,eAAe,IAAI,aAAa,GAC3C,eACD,KAAA;AACN,KAAI,gBAAgB,CAAC,mBAAmB;AACtC,UAAQ,MAAM,6BAA6B,aAAa,6BAA6B;AACrF,UAAQ,KAAK,EAAE;;AAGjB,KAAI,qBAAqB,sBAAsB,MAC7C,SAAQ,IAAI,8BAA8B;AAE5C,KAAI,QAAQ,yBAAyB,KACnC,SAAQ,IAAI,uCAAuC;CAGrD,MAAM,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAE,kBAAkB,gBAAgB,MAAM,QAAQ,IAAI;EAClG,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACR,CAAC;CACF,MAAM,EAAE,oBAAoB,yBAAyB;CACrD,MAAM,SAAS,WAAW,IAAI,WAAW;CAEzC,MAAM,kBACJ,OAAO,QAAQ,SAAS,YAAY,QAAQ,KAAK,MAAM,CAAC,SAAS,IAC7D,QAAQ,KAAK,MAAM,CAAC,aAAa,GACjC,KAAA;CAEN,MAAM,eAAe,mBAAmB,IADlB,IAAI;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CACzB,CAAC,IAAI,gBAAgB,GACjE,kBACD,KAAA;AACJ,KAAI,mBAAmB,CAAC,cAAc;AACpC,UAAQ,MAAM,wBAAwB,gBAAgB,+CAA+C;AACrG,UAAQ,KAAK,EAAE;;CAGjB,MAAM,UAAU,QAAQ;CACxB,MAAM,eACJ,YAAY,KAAA,KAAa,YAAY,QAAQ,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,IACzE,SAAS,OAAO,QAAQ,EAAE,GAAG,GAC7B,KAAA;CAEN,MAAM,EAAE,6BAA6B,MAAM,OAAO;CAClD,MAAM,aAAa,yBAAyB;EAC1C,KAAK;EACL,cAAc;EACf,CAAC;CACF,MAAM,WAAW,WAAW;CAC5B,MAAM,OACJ,iBAAiB,KAAA,KAAa,OAAO,SAAS,aAAa,GACvD,eACC,OAAO,OAAO,QAAQ,SAAS,WAAW,OAAO,QAAQ,OAAO;AAEvE,OAAM,mBAAmB,IAAI,YAAY,IAAI,eAAe,KAAK;CAEjE,MAAM,kBAAkB,WAAW,IAAI,WAAW;CAClD,MAAM,EAAE,oBAAoB,gCAAgC,MAAM,OAAO;CACzE,MAAM,EAAE,+BAA+B,MAAM,OAAO;CAEpD,IAAI,OAAO,mBAAmB,EAAE,YAAY,gBAAgB,SAAS,MAAM,CAAC;AAC5E,KAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,MAAM,CAAC,SAAS,EACrE,QAAO;EAAE,MAAM;EAAS,OAAO,QAAQ,MAAM,MAAM;EAAE;AAEvD,KAAI;AACF,8BAA4B,KAAK;AACjC,6BAA2B;GACzB,KAAK;GACL;GACA,cAAc;GACd;GACD,CAAC;UACK,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAQ,MAAM,6BAA6B,UAAU;AACrD,UAAQ,KAAK,EAAE;;AAGjB,KAAI,QAAQ,MACV,KAAI;EACF,MAAM,SAAS,MAAM,qBAAqB,MAAM;GAC9C,WAAW;GACX,kBAAkB;GACnB,CAAC;AACF,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,WAAQ,IAAI,gBAAgB,OAAO,OAAO,OAAO,uBAAuB,OAAO;AAC/E,OAAI,OAAO,mBACT,SAAQ,IAAI,uBAAuB;;UAGhC,KAAK;AACZ,UAAQ,MAAM,uBAAuB,KAAK,IAAI,OAAO,IAAI,GAAG;AAC5D,UAAQ,KAAK,EAAE;;AAKnB,KAAI,CAAC,MADuB,mBAAmB,MAAM,SAAS,EAC1C;AAClB,UAAQ,MAAM,QAAQ,KAAK,2DAA2D;AACtF,UAAQ,KAAK,EAAE;;AAGjB,SAAQ,IAAI,8BAA8B;AAC1C,SAAQ,IAAI,YAAY,WAAW,SAAS,IAAI,SAAS,GAAG;AAC5D,SAAQ,IAAI,YAAY,OAAO;AAC/B,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,uBAAuB;AACnC,SAAQ,IAAI,GAAG;AAEf,OAAM,eAAe;EACnB,YAAY,IAAI,cAAc,mBAAmB;EACjD;EACA,OAAO,YAAY;GACjB,MAAM,EAAE,kBAAkB,MAAM,OAAO;GACvC,MAAM,SAAS,IAAI,cAAc;IAC/B,UAAU,WAAW;IACrB,MAAM,WAAW;IACjB,gBAAgB,WAAW;IAC3B;IACA,OAAO,QAAQ,SAAS,QAAQ,SAAS,MAAM;IAC/C,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,iBAAiB,QAAQ;IAC1B,CAAC;AACF,SAAM,OAAO,OAAO;GAEpB,MAAM,cAAc,aAAa,YAAY,cAAc;GAC3D,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS,MAAM;AACtD,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,IAAI,kBAAkB,YAAY,GAAG,OAAO;AACpD,OAAI,MACF,SAAQ,IAAI,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,MAAM,MAAM,GAAG,GAAG;AAEpE,WAAQ,IAAI,GAAG;AAEf,UAAO;;EAEV,CAAC"}
+{"version":3,"file":"run-foreground.js","names":[],"sources":["../../../../../src/cli/commands/gateway/run-foreground.ts"],"sourcesContent":["import type { CLIContext } from '../../registry.js';\n\nexport type GatewayRunCliOptions = {\n  bind?: string;\n  port?: string | number;\n  token?: string;\n  tailscale?: string;\n  tailscaleResetOnExit?: boolean;\n  force?: boolean;\n  hotReload?: boolean;\n  foreground?: boolean;\n};\n\nasync function ensureGatewayReady(\n  configPath: string,\n  workspacePath: string,\n  port: number,\n): Promise<void> {\n  const { initWorkspace } = await import('../../utils/init-workspace.js');\n  const result = await initWorkspace({\n    configPath,\n    workspacePath,\n    gatewayPort: port,\n  });\n\n  if (result.configCreated || result.workspaceCreated) {\n    console.log('');\n    console.log('👋 Welcome to xopc! Running first-time setup before starting the gateway...');\n    console.log('');\n    console.log('✅ First-time setup complete!');\n    console.log(`   Config:    ${configPath}`);\n    console.log(`   Workspace: ${workspacePath}`);\n    console.log(`   Token:     ${result.token.slice(0, 8)}...${result.token.slice(-8)}`);\n    console.log('');\n    console.log('💡 Tip: run `xopc onboard` anytime to configure models, channels, and more.');\n    console.log('');\n  }\n}\n\nexport async function runGatewayFromCliOptions(\n  options: GatewayRunCliOptions,\n  ctx: CLIContext,\n): Promise<void> {\n  const tailscaleModes = new Set(['off', 'serve', 'funnel']);\n  const tailscaleRaw =\n    typeof options.tailscale === 'string' ? options.tailscale.trim().toLowerCase() : undefined;\n  const tailscaleOverride =\n    tailscaleRaw && tailscaleModes.has(tailscaleRaw)\n      ? (tailscaleRaw as 'off' | 'serve' | 'funnel')\n      : undefined;\n  if (tailscaleRaw && !tailscaleOverride) {\n    console.error(`Invalid --tailscale mode \"${tailscaleRaw}\". Use: off, serve, funnel.`);\n    process.exit(1);\n  }\n\n  if (tailscaleOverride && tailscaleOverride !== 'off') {\n    process.env.XOPC_GATEWAY_TAILSCALE_MODE = tailscaleOverride;\n  }\n  if (options.tailscaleResetOnExit === true) {\n    process.env.XOPC_GATEWAY_TAILSCALE_RESET_ON_EXIT = '1';\n  }\n\n  const [{ loadConfig }, { resolveConfigPath }, { runGatewayLoop }, gatewayPorts] = await Promise.all([\n    import('../../../config/index.js'),\n    import('../../../config/paths.js'),\n    import('../../../gateway/run-loop.js'),\n    import('../../../gateway/ports.js'),\n  ]);\n  const { checkPortAvailable, forceFreePortAndWait } = gatewayPorts;\n  const config = loadConfig(ctx.configPath);\n\n  const bindFromFlagRaw =\n    typeof options.bind === 'string' && options.bind.trim().length > 0\n      ? options.bind.trim().toLowerCase()\n      : undefined;\n  const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n  const bindFromFlag = bindFromFlagRaw && bindModes.has(bindFromFlagRaw)\n    ? (bindFromFlagRaw as import('../../../config/schema.js').GatewayBindMode)\n    : undefined;\n  if (bindFromFlagRaw && !bindFromFlag) {\n    console.error(`Invalid --bind mode \"${bindFromFlagRaw}\". Use: loopback, lan, auto, custom, tailnet.`);\n    process.exit(1);\n  }\n\n  const portRaw = options.port;\n  const portFromFlag =\n    portRaw !== undefined && portRaw !== null && String(portRaw).trim().length > 0\n      ? parseInt(String(portRaw), 10)\n      : undefined;\n\n  const { resolveGatewayListenPlan } = await import('../../../gateway/listen.js');\n  const listenPlan = resolveGatewayListenPlan({\n    cfg: config,\n    bindOverride: bindFromFlag,\n  });\n  const bindHost = listenPlan.bindHost;\n  const port =\n    portFromFlag !== undefined && Number.isFinite(portFromFlag)\n      ? portFromFlag\n      : (typeof config.gateway.port === 'number' ? config.gateway.port : 18790);\n\n  await ensureGatewayReady(ctx.configPath, ctx.workspacePath, port);\n\n  const effectiveConfig = loadConfig(ctx.configPath);\n  const { resolveGatewayAuth, assertGatewayAuthConfigured } = await import('../../../gateway/auth.js');\n  const { assertGatewayRuntimeConfig } = await import('../../../gateway/runtime-config.js');\n\n  let auth = resolveGatewayAuth({ authConfig: effectiveConfig.gateway?.auth });\n  if (typeof options.token === 'string' && options.token.trim().length > 0) {\n    auth = { mode: 'token', token: options.token.trim() };\n  }\n  try {\n    assertGatewayAuthConfigured(auth);\n    assertGatewayRuntimeConfig({\n      cfg: effectiveConfig,\n      auth,\n      bindOverride: bindFromFlag,\n      port,\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    console.error(`Gateway refused to start: ${message}`);\n    process.exit(1);\n  }\n\n  if (options.force) {\n    try {\n      const result = await forceFreePortAndWait(port, {\n        timeoutMs: 2000,\n        sigtermTimeoutMs: 700,\n      });\n      if (result.killed.length > 0) {\n        console.log(`Force killed ${result.killed.length} process(es) on port ${port}`);\n        if (result.escalatedToSigkill) {\n          console.log('Escalated to SIGKILL');\n        }\n      }\n    } catch (err) {\n      console.error(`Failed to free port ${port}: ${String(err)}`);\n      process.exit(1);\n    }\n  }\n\n  const portAvailable = await checkPortAvailable(port, bindHost);\n  if (!portAvailable) {\n    console.error(`Port ${port} is already in use. Use --force to kill existing process.`);\n    process.exit(1);\n  }\n\n  console.log('🚀 Starting xopc gateway...');\n  console.log(`   Bind: ${listenPlan.bindMode} (${bindHost})`);\n  console.log(`   Port: ${port}`);\n  console.log('');\n  console.log('Press Ctrl+C to stop');\n  console.log('');\n\n  await runGatewayLoop({\n    configPath: ctx.configPath || resolveConfigPath(),\n    port,\n    start: async () => {\n      const { GatewayServer } = await import('../../../gateway/index.js');\n      const server = new GatewayServer({\n        bindHost: listenPlan.bindHost,\n        bind: listenPlan.bindMode,\n        customBindHost: listenPlan.customBindHost,\n        port,\n        token: options.token || config?.gateway?.auth?.token,\n        verbose: ctx.isVerbose,\n        configPath: ctx.configPath,\n        enableHotReload: options.hotReload,\n      });\n      await server.start();\n\n      const displayHost = bindHost === '0.0.0.0' ? 'localhost' : bindHost;\n      const token = options.token || config?.gateway?.auth?.token;\n      console.log('✅ Gateway started');\n      console.log(`   URL: http://${displayHost}:${port}`);\n      if (token) {\n        console.log(`   Token: ${token.slice(0, 8)}...${token.slice(-8)}`);\n      }\n      console.log('');\n\n      return server;\n    },\n  });\n}\n"],"mappings":";AAaA,eAAe,mBACb,YACA,eACA,MACe;CACf,MAAM,EAAE,kBAAkB,MAAM,OAAO;CACvC,MAAM,SAAS,MAAM,cAAc;EACjC;EACA;EACA,aAAa;EACd,CAAC;AAEF,KAAI,OAAO,iBAAiB,OAAO,kBAAkB;AACnD,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,8EAA8E;AAC1F,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,+BAA+B;AAC3C,UAAQ,IAAI,iBAAiB,aAAa;AAC1C,UAAQ,IAAI,iBAAiB,gBAAgB;AAC7C,UAAQ,IAAI,iBAAiB,OAAO,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,OAAO,MAAM,MAAM,GAAG,GAAG;AACpF,UAAQ,IAAI,GAAG;AACf,UAAQ,IAAI,8EAA8E;AAC1F,UAAQ,IAAI,GAAG;;;AAInB,eAAsB,yBACpB,SACA,KACe;CACf,MAAM,iBAAiB,IAAI,IAAI;EAAC;EAAO;EAAS;EAAS,CAAC;CAC1D,MAAM,eACJ,OAAO,QAAQ,cAAc,WAAW,QAAQ,UAAU,MAAM,CAAC,aAAa,GAAG,KAAA;CACnF,MAAM,oBACJ,gBAAgB,eAAe,IAAI,aAAa,GAC3C,eACD,KAAA;AACN,KAAI,gBAAgB,CAAC,mBAAmB;AACtC,UAAQ,MAAM,6BAA6B,aAAa,6BAA6B;AACrF,UAAQ,KAAK,EAAE;;AAGjB,KAAI,qBAAqB,sBAAsB,MAC7C,SAAQ,IAAI,8BAA8B;AAE5C,KAAI,QAAQ,yBAAyB,KACnC,SAAQ,IAAI,uCAAuC;CAGrD,MAAM,CAAC,EAAE,cAAc,EAAE,qBAAqB,EAAE,kBAAkB,gBAAgB,MAAM,QAAQ,IAAI;EAClG,OAAO;EACP,OAAO;EACP,OAAO;EACP,OAAO;EACR,CAAC;CACF,MAAM,EAAE,oBAAoB,yBAAyB;CACrD,MAAM,SAAS,WAAW,IAAI,WAAW;CAEzC,MAAM,kBACJ,OAAO,QAAQ,SAAS,YAAY,QAAQ,KAAK,MAAM,CAAC,SAAS,IAC7D,QAAQ,KAAK,MAAM,CAAC,aAAa,GACjC,KAAA;CAEN,MAAM,eAAe,mBAAmB,IADlB,IAAI;EAAC;EAAQ;EAAY;EAAO;EAAW;EAAS,CACzB,CAAC,IAAI,gBAAgB,GACjE,kBACD,KAAA;AACJ,KAAI,mBAAmB,CAAC,cAAc;AACpC,UAAQ,MAAM,wBAAwB,gBAAgB,+CAA+C;AACrG,UAAQ,KAAK,EAAE;;CAGjB,MAAM,UAAU,QAAQ;CACxB,MAAM,eACJ,YAAY,KAAA,KAAa,YAAY,QAAQ,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,IACzE,SAAS,OAAO,QAAQ,EAAE,GAAG,GAC7B,KAAA;CAEN,MAAM,EAAE,6BAA6B,MAAM,OAAO;CAClD,MAAM,aAAa,yBAAyB;EAC1C,KAAK;EACL,cAAc;EACf,CAAC;CACF,MAAM,WAAW,WAAW;CAC5B,MAAM,OACJ,iBAAiB,KAAA,KAAa,OAAO,SAAS,aAAa,GACvD,eACC,OAAO,OAAO,QAAQ,SAAS,WAAW,OAAO,QAAQ,OAAO;AAEvE,OAAM,mBAAmB,IAAI,YAAY,IAAI,eAAe,KAAK;CAEjE,MAAM,kBAAkB,WAAW,IAAI,WAAW;CAClD,MAAM,EAAE,oBAAoB,gCAAgC,MAAM,OAAO;CACzE,MAAM,EAAE,+BAA+B,MAAM,OAAO;CAEpD,IAAI,OAAO,mBAAmB,EAAE,YAAY,gBAAgB,SAAS,MAAM,CAAC;AAC5E,KAAI,OAAO,QAAQ,UAAU,YAAY,QAAQ,MAAM,MAAM,CAAC,SAAS,EACrE,QAAO;EAAE,MAAM;EAAS,OAAO,QAAQ,MAAM,MAAM;EAAE;AAEvD,KAAI;AACF,8BAA4B,KAAK;AACjC,6BAA2B;GACzB,KAAK;GACL;GACA,cAAc;GACd;GACD,CAAC;UACK,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAQ,MAAM,6BAA6B,UAAU;AACrD,UAAQ,KAAK,EAAE;;AAGjB,KAAI,QAAQ,MACV,KAAI;EACF,MAAM,SAAS,MAAM,qBAAqB,MAAM;GAC9C,WAAW;GACX,kBAAkB;GACnB,CAAC;AACF,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,WAAQ,IAAI,gBAAgB,OAAO,OAAO,OAAO,uBAAuB,OAAO;AAC/E,OAAI,OAAO,mBACT,SAAQ,IAAI,uBAAuB;;UAGhC,KAAK;AACZ,UAAQ,MAAM,uBAAuB,KAAK,IAAI,OAAO,IAAI,GAAG;AAC5D,UAAQ,KAAK,EAAE;;AAKnB,KAAI,CAAC,MADuB,mBAAmB,MAAM,SAAS,EAC1C;AAClB,UAAQ,MAAM,QAAQ,KAAK,2DAA2D;AACtF,UAAQ,KAAK,EAAE;;AAGjB,SAAQ,IAAI,8BAA8B;AAC1C,SAAQ,IAAI,YAAY,WAAW,SAAS,IAAI,SAAS,GAAG;AAC5D,SAAQ,IAAI,YAAY,OAAO;AAC/B,SAAQ,IAAI,GAAG;AACf,SAAQ,IAAI,uBAAuB;AACnC,SAAQ,IAAI,GAAG;AAEf,OAAM,eAAe;EACnB,YAAY,IAAI,cAAc,mBAAmB;EACjD;EACA,OAAO,YAAY;GACjB,MAAM,EAAE,kBAAkB,MAAM,OAAO;GACvC,MAAM,SAAS,IAAI,cAAc;IAC/B,UAAU,WAAW;IACrB,MAAM,WAAW;IACjB,gBAAgB,WAAW;IAC3B;IACA,OAAO,QAAQ,SAAS,QAAQ,SAAS,MAAM;IAC/C,SAAS,IAAI;IACb,YAAY,IAAI;IAChB,iBAAiB,QAAQ;IAC1B,CAAC;AACF,SAAM,OAAO,OAAO;GAEpB,MAAM,cAAc,aAAa,YAAY,cAAc;GAC3D,MAAM,QAAQ,QAAQ,SAAS,QAAQ,SAAS,MAAM;AACtD,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,IAAI,kBAAkB,YAAY,GAAG,OAAO;AACpD,OAAI,MACF,SAAQ,IAAI,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,MAAM,MAAM,GAAG,GAAG;AAEpE,WAAQ,IAAI,GAAG;AAEf,UAAO;;EAEV,CAAC"}

package/dist/src/cli/commands/image.js

@@ -8,8 +8,8 @@ import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
 import "../../agent/image/index.js";
 import { colors } from "../utils/colors.js";
-import { mkdir, writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
 import { Command } from "commander";
 //#region src/cli/commands/image.ts
 init_loader();

package/dist/src/cli/commands/init.js

@@ -1,13 +1,13 @@
-import { createLogger } from "../../utils/logger/index.js";
-import { init_logger } from "../../utils/logger.js";
 import { resolveStateDir } from "../../config/paths-state.js";
 import { resolveAgentWorkspaceDir } from "../../agent/agent-scope.js";
+import { createLogger } from "../../utils/logger/index.js";
+import { init_logger } from "../../utils/logger.js";
 import { WORKSPACE_FILES, init_paths, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveConfigPath } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
-import { mkdir, writeFile } from "fs/promises";
 import { join } from "path";
 import { existsSync } from "fs";
+import { mkdir, writeFile } from "fs/promises";
 import { Command } from "commander";
 //#region src/cli/commands/init.ts
 init_logger();