@xopcai/xopc 0.0.139 → 0.0.140

package/dist/src/agent/code-intelligence/binary.js

@@ -1,15 +1,16 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { init_paths } from "../../config/paths.js";
+import { init_paths, resolveBinDir } from "../../config/paths.js";
 import { createRequire } from "node:module";
 import { tmpdir } from "node:os";
 import { dirname, join, resolve } from "node:path";
-import { accessSync, chmodSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, realpathSync, renameSync, rmSync } from "node:fs";
+import { accessSync, chmodSync, constants, copyFileSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { execFile } from "node:child_process";
-import { createHash } from "node:crypto";
+import { createHash, randomBytes } from "node:crypto";
 import { promisify } from "node:util";
 import { Readable } from "node:stream";
+import lockfile from "proper-lockfile";
 import { pipeline } from "node:stream/promises";
 //#region src/agent/code-intelligence/binary.ts
 init_paths();
@@ -17,6 +18,7 @@ init_logger();
 const require = createRequire(import.meta.url);
 const log = createLogger("CodeIntelligenceBinary");
 const CBM_VERSION = "0.9.0";
+const CACHE_SCHEMA_VERSION = 1;
 const DOWNLOAD_TIMEOUT_MS = 2 * 6e4;
 const RELEASE_BASE_URL = `https://github.com/DeusData/codebase-memory-mcp/releases/download/v${CBM_VERSION}`;
 const execFileAsync = promisify(execFile);
@@ -38,8 +40,8 @@ function architectureName() {
 		default: throw new Error(`Code intelligence is not supported on ${process.arch}`);
 	}
 }
-function releaseUrl() {
-	return `${RELEASE_BASE_URL}/${archiveName()}`;
+function platformKey() {
+	return `${platformName()}-${architectureName()}`;
 }
 function archiveName() {
 	const platform = platformName();
@@ -47,9 +49,36 @@ function archiveName() {
 	const linuxPortable = platform === "linux" ? "-portable" : "";
 	return `codebase-memory-mcp-${platform}-${architectureName()}${linuxPortable}.${extension}`;
 }
+function releaseUrl() {
+	return `${RELEASE_BASE_URL}/${archiveName()}`;
+}
 function archiveExtension() {
 	return platformName() === "windows" ? "zip" : "tar.gz";
 }
+function cacheVersionRoot() {
+	return join(resolveBinDir(), "codebase-memory-mcp", `v${CBM_VERSION}`);
+}
+function cacheDir() {
+	return join(cacheVersionRoot(), platformKey());
+}
+function cacheBinaryPath() {
+	return join(cacheDir(), binaryName());
+}
+function cacheManifestPath(dir = cacheDir()) {
+	return join(dir, "manifest.json");
+}
+function legacyManagedBinaryPath() {
+	return join(resolveStateDir(), "code-intelligence", "bin", `v${CBM_VERSION}`, platformKey(), binaryName());
+}
+function isUsableBinary(path) {
+	if (!existsSync(path)) return false;
+	try {
+		accessSync(path, process.platform === "win32" ? constants.F_OK : constants.X_OK);
+		return true;
+	} catch {
+		return false;
+	}
+}
 function expectedSha256(checksums, filename) {
 	for (const line of checksums.split(/\r?\n/)) {
 		const match = /^([a-f0-9]{64})\s+\*?(.+)$/i.exec(line.trim());
@@ -67,16 +96,33 @@ async function sha256(path) {
 	});
 	return hash.digest("hex");
 }
-function managedBinaryPath(stateDir = resolveStateDir()) {
-	return join(stateDir, "code-intelligence", "bin", `v${CBM_VERSION}`, `${platformName()}-${architectureName()}`, binaryName());
+function readManagedManifest(dir = cacheDir()) {
+	try {
+		const parsed = JSON.parse(readFileSync(cacheManifestPath(dir), "utf8"));
+		if (parsed.schemaVersion !== CACHE_SCHEMA_VERSION || parsed.component !== "codebase-memory-mcp" || parsed.cbmVersion !== CBM_VERSION || parsed.platform !== platformName() || parsed.arch !== architectureName() || parsed.binaryName !== binaryName() || typeof parsed.binarySha256 !== "string" || typeof parsed.binarySize !== "number") return;
+		return parsed;
+	} catch {
+		return;
+	}
 }
-function isUsableBinary(path) {
-	if (!existsSync(path)) return false;
+function resolveSharedCachedBinary() {
+	const binary = cacheBinaryPath();
+	const manifest = readManagedManifest();
+	if (!manifest || !isUsableBinary(binary)) return void 0;
 	try {
-		accessSync(path, process.platform === "win32" ? constants.F_OK : constants.X_OK);
-		return true;
+		return statSync(binary).size === manifest.binarySize ? realpathSync(binary) : void 0;
 	} catch {
-		return false;
+		return;
+	}
+}
+async function verifySharedCachedBinary() {
+	const binary = resolveSharedCachedBinary();
+	const manifest = readManagedManifest();
+	if (!binary || !manifest) return void 0;
+	try {
+		return await sha256(binary) === manifest.binarySha256 ? binary : void 0;
+	} catch {
+		return;
 	}
 }
 function packageBinaryPath() {
@@ -86,21 +132,139 @@ function packageBinaryPath() {
 		return;
 	}
 }
-function resolveCodebaseMemoryBinary(explicitPath) {
-	const resourcesPath = process.resourcesPath;
-	const candidates = [
-		explicitPath,
-		process.env.XOPC_CBM_BINARY,
-		resourcesPath ? join(resourcesPath, "bin", binaryName()) : void 0,
-		packageBinaryPath()
-	].filter((value) => Boolean(value?.trim()));
-	for (const candidate of candidates) {
+function overrideBinaryPath(explicitPath) {
+	for (const candidate of [explicitPath, process.env.XOPC_CBM_BINARY]) {
+		if (!candidate?.trim()) continue;
 		const absolute = resolve(candidate);
 		if (isUsableBinary(absolute)) return realpathSync(absolute);
 	}
-	throw new Error(`codebase-memory-mcp binary is unavailable; checked ${candidates.join(", ") || "no candidate paths"}`);
 }
-/** Download the CBM executable into its final path atomically. */
+function bundledBinaryCandidates() {
+	const bundledPath = process.env.XOPC_CBM_BUNDLED_PATH?.trim();
+	const bundledManifestPath = process.env.XOPC_CBM_BUNDLED_MANIFEST_PATH?.trim();
+	const resourcesPath = process.resourcesPath;
+	const resourcePath = resourcesPath ? join(resourcesPath, "bin", binaryName()) : void 0;
+	const packagePath = packageBinaryPath();
+	const candidates = [];
+	if (bundledPath) candidates.push({
+		path: bundledPath,
+		source: "electron-bundle",
+		manifestPath: bundledManifestPath || join(dirname(bundledPath), "codebase-memory-mcp.manifest.json")
+	});
+	if (resourcePath && resourcePath !== bundledPath) candidates.push({
+		path: resourcePath,
+		source: "electron-bundle",
+		manifestPath: join(dirname(resourcePath), "codebase-memory-mcp.manifest.json")
+	});
+	if (packagePath) candidates.push({
+		path: packagePath,
+		source: "package-bundle"
+	});
+	candidates.push({
+		path: legacyManagedBinaryPath(),
+		source: "legacy-cache"
+	});
+	return candidates;
+}
+async function verifyBundledSource(candidate) {
+	if (!isUsableBinary(candidate.path)) throw new Error(`source binary is unavailable at ${candidate.path}`);
+	if (candidate.source !== "electron-bundle") return;
+	if (!candidate.manifestPath) throw new Error("Electron CBM manifest path is missing");
+	let manifest;
+	try {
+		manifest = JSON.parse(readFileSync(candidate.manifestPath, "utf8"));
+	} catch (error) {
+		throw new Error(`Electron CBM manifest is unreadable: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	if (manifest.cbmVersion !== CBM_VERSION || manifest.platform !== platformName() || manifest.arch !== architectureName() || !/^[a-f0-9]{64}$/i.test(manifest.binarySha256)) throw new Error("Electron CBM manifest does not match this runtime");
+	const actual = await sha256(candidate.path);
+	if (actual !== manifest.binarySha256.toLowerCase()) throw new Error(`Electron CBM checksum mismatch: expected ${manifest.binarySha256}, got ${actual}`);
+}
+async function withCacheLock(fn) {
+	const versionRoot = cacheVersionRoot();
+	mkdirSync(versionRoot, { recursive: true });
+	const release = await lockfile.lock(versionRoot, {
+		realpath: false,
+		lockfilePath: join(versionRoot, `.${platformKey()}.install.lock`),
+		stale: 10 * 6e4,
+		retries: {
+			retries: 30,
+			factor: 1.2,
+			minTimeout: 100,
+			maxTimeout: 1e3
+		}
+	});
+	try {
+		return await fn();
+	} finally {
+		await release();
+	}
+}
+function cleanupStaleStaging(versionRoot) {
+	const prefix = `.${platformKey()}.staging-`;
+	const cutoff = Date.now() - 60 * 6e4;
+	try {
+		for (const entry of readdirSync(versionRoot)) {
+			if (!entry.startsWith(prefix)) continue;
+			const path = join(versionRoot, entry);
+			if (statSync(path).mtimeMs < cutoff) rmSync(path, {
+				recursive: true,
+				force: true
+			});
+		}
+	} catch {}
+}
+async function installInSharedCache(source, populate) {
+	const versionRoot = cacheVersionRoot();
+	const targetDir = cacheDir();
+	const stagingDir = join(versionRoot, `.${platformKey()}.staging-${process.pid}-${randomBytes(6).toString("hex")}`);
+	const stagingBinary = join(stagingDir, binaryName());
+	mkdirSync(stagingDir, { recursive: true });
+	try {
+		await populate(stagingBinary);
+		if (!isUsableBinary(stagingBinary)) throw new Error("staged codebase-memory-mcp binary is not executable");
+		if (process.platform !== "win32") chmodSync(stagingBinary, 493);
+		const binarySha256 = await sha256(stagingBinary);
+		const manifest = {
+			schemaVersion: CACHE_SCHEMA_VERSION,
+			component: "codebase-memory-mcp",
+			cbmVersion: CBM_VERSION,
+			platform: platformName(),
+			arch: architectureName(),
+			binaryName: binaryName(),
+			binarySha256,
+			binarySize: statSync(stagingBinary).size,
+			source,
+			installedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		writeFileSync(cacheManifestPath(stagingDir), `${JSON.stringify(manifest, null, 2)}\n`, "utf8");
+		rmSync(targetDir, {
+			recursive: true,
+			force: true
+		});
+		renameSync(stagingDir, targetDir);
+		return realpathSync(cacheBinaryPath());
+	} catch (error) {
+		rmSync(stagingDir, {
+			recursive: true,
+			force: true
+		});
+		throw error;
+	}
+}
+/** Resolve an explicit, shared, or bundled binary synchronously when already present. */
+function resolveCodebaseMemoryBinary(explicitPath) {
+	const overridden = overrideBinaryPath(explicitPath);
+	if (overridden) return overridden;
+	const shared = resolveSharedCachedBinary();
+	if (shared) return shared;
+	for (const candidate of bundledBinaryCandidates()) {
+		const absolute = resolve(candidate.path);
+		if (isUsableBinary(absolute)) return realpathSync(absolute);
+	}
+	throw new Error("codebase-memory-mcp binary is unavailable");
+}
+/** Download and checksum-verify the CBM executable into a caller-provided path. */
 async function downloadCodebaseMemoryBinary(destination, options = {}) {
 	const fetchImplementation = options.fetchImplementation ?? fetch;
 	const timeoutMs = options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS;
@@ -170,22 +334,39 @@ async function downloadCodebaseMemoryBinary(destination, options = {}) {
 	}
 }
 /**
-* Resolve a bundled or explicit binary first, then lazily download one for npm installs.
-* This deliberately keeps large GitHub Release downloads out of npm lifecycle scripts.
+* Resolve a shared, versioned user cache. Electron seeds it from its bundled binary;
+* CLI seeds it from a verified release download. This keeps both surfaces on one binary.
 */
 async function ensureCodebaseMemoryBinary(explicitPath) {
-	try {
-		return resolveCodebaseMemoryBinary(explicitPath);
-	} catch {
-		const destination = managedBinaryPath();
-		if (isUsableBinary(destination)) return realpathSync(destination);
+	const overridden = overrideBinaryPath(explicitPath);
+	if (overridden) return overridden;
+	const cached = await verifySharedCachedBinary();
+	if (cached) return cached;
+	return withCacheLock(async () => {
+		cleanupStaleStaging(cacheVersionRoot());
+		const afterLock = await verifySharedCachedBinary();
+		if (afterLock) return afterLock;
+		for (const candidate of bundledBinaryCandidates()) try {
+			await verifyBundledSource(candidate);
+			return await installInSharedCache(candidate.source, async (destination) => {
+				copyFileSync(candidate.path, destination);
+			});
+		} catch (error) {
+			log.warn({
+				err: error,
+				source: candidate.source,
+				path: candidate.path
+			}, "Code intelligence binary source was not usable");
+		}
 		log.info({
-			destination,
+			destination: cacheBinaryPath(),
 			version: CBM_VERSION,
 			timeoutMs: DOWNLOAD_TIMEOUT_MS
-		}, "Downloading code intelligence binary on demand");
-		return downloadCodebaseMemoryBinary(destination);
-	}
+		}, "Downloading code intelligence binary into shared cache");
+		return installInSharedCache("github-release", async (destination) => {
+			await downloadCodebaseMemoryBinary(destination);
+		});
+	});
 }
 //#endregion
 export { downloadCodebaseMemoryBinary, ensureCodebaseMemoryBinary, resolveCodebaseMemoryBinary };

package/dist/src/agent/code-intelligence/binary.js.map

@@ -1 +1 @@
-{"version":3,"file":"binary.js","names":[],"sources":["../../../../src/agent/code-intelligence/binary.ts"],"sourcesContent":["import { createRequire } from 'node:module';\nimport {\n  accessSync,\n  chmodSync,\n  constants,\n  copyFileSync,\n  createReadStream,\n  createWriteStream,\n  existsSync,\n  mkdirSync,\n  mkdtempSync,\n  realpathSync,\n  renameSync,\n  rmSync,\n} from 'node:fs';\nimport { execFile } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { tmpdir } from 'node:os';\nimport { pipeline } from 'node:stream/promises';\nimport { Readable } from 'node:stream';\nimport { dirname, join, resolve } from 'node:path';\nimport { promisify } from 'node:util';\n\nimport { resolveStateDir } from '../../config/paths.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst require = createRequire(import.meta.url);\nconst log = createLogger('CodeIntelligenceBinary');\n\nconst CBM_VERSION = '0.9.0';\nconst DOWNLOAD_TIMEOUT_MS = 2 * 60_000;\nconst RELEASE_BASE_URL = `https://github.com/DeusData/codebase-memory-mcp/releases/download/v${CBM_VERSION}`;\nconst execFileAsync = promisify(execFile);\n\ntype FetchImplementation = typeof fetch;\n\nexport interface DownloadCodebaseMemoryBinaryOptions {\n  fetchImplementation?: FetchImplementation;\n  timeoutMs?: number;\n}\n\nfunction binaryName(): string {\n  return process.platform === 'win32' ? 'codebase-memory-mcp.exe' : 'codebase-memory-mcp';\n}\n\nfunction platformName(): string {\n  switch (process.platform) {\n    case 'darwin':\n      return 'darwin';\n    case 'linux':\n      return 'linux';\n    case 'win32':\n      return 'windows';\n    default:\n      throw new Error(`Code intelligence is not supported on ${process.platform}`);\n  }\n}\n\nfunction architectureName(): string {\n  switch (process.arch) {\n    case 'arm64':\n      return 'arm64';\n    case 'x64':\n      return 'amd64';\n    default:\n      throw new Error(`Code intelligence is not supported on ${process.arch}`);\n  }\n}\n\nfunction releaseUrl(): string {\n  return `${RELEASE_BASE_URL}/${archiveName()}`;\n}\n\nfunction archiveName(): string {\n  const platform = platformName();\n  const extension = platform === 'windows' ? 'zip' : 'tar.gz';\n  const linuxPortable = platform === 'linux' ? '-portable' : '';\n  return `codebase-memory-mcp-${platform}-${architectureName()}${linuxPortable}.${extension}`;\n}\n\nfunction archiveExtension(): 'zip' | 'tar.gz' {\n  return platformName() === 'windows' ? 'zip' : 'tar.gz';\n}\n\nfunction expectedSha256(checksums: string, filename: string): string {\n  for (const line of checksums.split(/\\r?\\n/)) {\n    const match = /^([a-f0-9]{64})\\s+\\*?(.+)$/i.exec(line.trim());\n    if (match?.[2] === filename) return match[1].toLowerCase();\n  }\n  throw new Error(`checksums.txt does not contain ${filename}`);\n}\n\nasync function sha256(path: string): Promise<string> {\n  const hash = createHash('sha256');\n  await new Promise<void>((resolvePromise, reject) => {\n    const input = createReadStream(path);\n    input.on('data', (chunk: Buffer) => hash.update(chunk));\n    input.once('error', reject);\n    input.once('end', resolvePromise);\n  });\n  return hash.digest('hex');\n}\n\nfunction managedBinaryPath(stateDir = resolveStateDir()): string {\n  return join(\n    stateDir,\n    'code-intelligence',\n    'bin',\n    `v${CBM_VERSION}`,\n    `${platformName()}-${architectureName()}`,\n    binaryName(),\n  );\n}\n\nfunction isUsableBinary(path: string): boolean {\n  if (!existsSync(path)) return false;\n  try {\n    accessSync(path, process.platform === 'win32' ? constants.F_OK : constants.X_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction packageBinaryPath(): string | undefined {\n  try {\n    const packageJson = require.resolve('codebase-memory-mcp/package.json');\n    return join(dirname(packageJson), 'bin', binaryName());\n  } catch {\n    return undefined;\n  }\n}\n\nexport function resolveCodebaseMemoryBinary(explicitPath?: string): string {\n  const resourcesPath = (process as NodeJS.Process & { resourcesPath?: string }).resourcesPath;\n  const candidates = [\n    explicitPath,\n    process.env.XOPC_CBM_BINARY,\n    resourcesPath ? join(resourcesPath, 'bin', binaryName()) : undefined,\n    packageBinaryPath(),\n  ].filter((value): value is string => Boolean(value?.trim()));\n\n  for (const candidate of candidates) {\n    const absolute = resolve(candidate);\n    if (isUsableBinary(absolute)) {\n      return realpathSync(absolute);\n    }\n  }\n\n  throw new Error(\n    `codebase-memory-mcp binary is unavailable; checked ${candidates.join(', ') || 'no candidate paths'}`,\n  );\n}\n\n/** Download the CBM executable into its final path atomically. */\nexport async function downloadCodebaseMemoryBinary(\n  destination: string,\n  options: DownloadCodebaseMemoryBinaryOptions = {},\n): Promise<string> {\n  const fetchImplementation = options.fetchImplementation ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS;\n  const temporaryPath = `${destination}.${process.pid}.part`;\n  const abortController = new AbortController();\n  const tempDir = mkdtempSync(join(tmpdir(), 'xopc-cbm-'));\n  const archivePath = join(tempDir, `cbm.${archiveExtension()}`);\n  let timedOut = false;\n  let rejectTimeout: ((error: Error) => void) | undefined;\n  const timeoutPromise = new Promise<never>((_resolve, reject) => {\n    rejectTimeout = reject;\n  });\n  const timer = setTimeout(() => {\n    timedOut = true;\n    abortController.abort();\n    rejectTimeout?.(new Error(`download timed out after ${timeoutMs}ms`));\n  }, timeoutMs);\n\n  try {\n    mkdirSync(dirname(destination), { recursive: true });\n    rmSync(temporaryPath, { force: true });\n    await Promise.race([\n      (async () => {\n        const checksumsResponse = await fetchImplementation(`${RELEASE_BASE_URL}/checksums.txt`, {\n          redirect: 'follow',\n          signal: abortController.signal,\n        });\n        if (!checksumsResponse.ok) {\n          throw new Error(`GitHub Releases returned HTTP ${checksumsResponse.status} for checksums.txt`);\n        }\n        const expectedChecksum = expectedSha256(await checksumsResponse.text(), archiveName());\n        const response = await fetchImplementation(releaseUrl(), {\n          redirect: 'follow',\n          signal: abortController.signal,\n        });\n        if (!response.ok) {\n          throw new Error(`GitHub Releases returned HTTP ${response.status}`);\n        }\n        if (!response.body) {\n          throw new Error('GitHub Releases returned an empty response body');\n        }\n\n        await pipeline(\n          Readable.fromWeb(response.body as import('node:stream/web').ReadableStream),\n          createWriteStream(archivePath, { mode: 0o600 }),\n        );\n        const actualChecksum = await sha256(archivePath);\n        if (actualChecksum !== expectedChecksum) {\n          throw new Error(\n            `checksum mismatch for ${archiveName()}: expected ${expectedChecksum}, got ${actualChecksum}`,\n          );\n        }\n        if (archiveExtension() === 'tar.gz') {\n          await execFileAsync('tar', ['-xzf', archivePath, '-C', tempDir, '--no-same-owner']);\n        } else {\n          await execFileAsync('powershell', [\n            '-NoProfile',\n            '-Command',\n            `Expand-Archive -Path '${archivePath}' -DestinationPath '${tempDir}' -Force`,\n          ]);\n        }\n\n        const extracted = join(tempDir, binaryName());\n        if (!isUsableBinary(extracted)) {\n          throw new Error(`binary was not present after extracting ${archiveExtension()} archive`);\n        }\n        copyFileSync(extracted, temporaryPath);\n      })(),\n      timeoutPromise,\n    ]);\n    if (timedOut) throw new Error(`download timed out after ${timeoutMs}ms`);\n    if (process.platform !== 'win32') chmodSync(temporaryPath, 0o755);\n    renameSync(temporaryPath, destination);\n    return realpathSync(destination);\n  } catch (error) {\n    const reason = timedOut\n      ? `download timed out after ${timeoutMs}ms`\n      : error instanceof Error\n        ? error.message\n        : String(error);\n    throw new Error(\n      `Unable to download codebase-memory-mcp from GitHub Releases: ${reason}. ` +\n      'Check network access or set XOPC_CBM_BINARY to a trusted executable.',\n    );\n  } finally {\n    clearTimeout(timer);\n    rmSync(temporaryPath, { force: true });\n    rmSync(tempDir, { recursive: true, force: true });\n  }\n}\n\n/**\n * Resolve a bundled or explicit binary first, then lazily download one for npm installs.\n * This deliberately keeps large GitHub Release downloads out of npm lifecycle scripts.\n */\nexport async function ensureCodebaseMemoryBinary(explicitPath?: string): Promise<string> {\n  try {\n    return resolveCodebaseMemoryBinary(explicitPath);\n  } catch {\n    const destination = managedBinaryPath();\n    if (isUsableBinary(destination)) return realpathSync(destination);\n\n    log.info(\n      { destination, version: CBM_VERSION, timeoutMs: DOWNLOAD_TIMEOUT_MS },\n      'Downloading code intelligence binary on demand',\n    );\n    return downloadCodebaseMemoryBinary(destination);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;YAuBwD;aACH;AAErD,MAAM,UAAU,cAAc,OAAO,KAAK,IAAI;AAC9C,MAAM,MAAM,aAAa,yBAAyB;AAElD,MAAM,cAAc;AACpB,MAAM,sBAAsB,IAAI;AAChC,MAAM,mBAAmB,sEAAsE;AAC/F,MAAM,gBAAgB,UAAU,SAAS;AASzC,SAAS,aAAqB;AAC5B,QAAO,QAAQ,aAAa,UAAU,4BAA4B;;AAGpE,SAAS,eAAuB;AAC9B,SAAQ,QAAQ,UAAhB;EACE,KAAK,SACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,yCAAyC,QAAQ,WAAW;;;AAIlF,SAAS,mBAA2B;AAClC,SAAQ,QAAQ,MAAhB;EACE,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,yCAAyC,QAAQ,OAAO;;;AAI9E,SAAS,aAAqB;AAC5B,QAAO,GAAG,iBAAiB,GAAG,aAAa;;AAG7C,SAAS,cAAsB;CAC7B,MAAM,WAAW,cAAc;CAC/B,MAAM,YAAY,aAAa,YAAY,QAAQ;CACnD,MAAM,gBAAgB,aAAa,UAAU,cAAc;AAC3D,QAAO,uBAAuB,SAAS,GAAG,kBAAkB,GAAG,cAAc,GAAG;;AAGlF,SAAS,mBAAqC;AAC5C,QAAO,cAAc,KAAK,YAAY,QAAQ;;AAGhD,SAAS,eAAe,WAAmB,UAA0B;AACnE,MAAK,MAAM,QAAQ,UAAU,MAAM,QAAQ,EAAE;EAC3C,MAAM,QAAQ,8BAA8B,KAAK,KAAK,MAAM,CAAC;AAC7D,MAAI,QAAQ,OAAO,SAAU,QAAO,MAAM,GAAG,aAAa;;AAE5D,OAAM,IAAI,MAAM,kCAAkC,WAAW;;AAG/D,eAAe,OAAO,MAA+B;CACnD,MAAM,OAAO,WAAW,SAAS;AACjC,OAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,MAAM,QAAQ,iBAAiB,KAAK;AACpC,QAAM,GAAG,SAAS,UAAkB,KAAK,OAAO,MAAM,CAAC;AACvD,QAAM,KAAK,SAAS,OAAO;AAC3B,QAAM,KAAK,OAAO,eAAe;GACjC;AACF,QAAO,KAAK,OAAO,MAAM;;AAG3B,SAAS,kBAAkB,WAAW,iBAAiB,EAAU;AAC/D,QAAO,KACL,UACA,qBACA,OACA,IAAI,eACJ,GAAG,cAAc,CAAC,GAAG,kBAAkB,IACvC,YAAY,CACb;;AAGH,SAAS,eAAe,MAAuB;AAC7C,KAAI,CAAC,WAAW,KAAK,CAAE,QAAO;AAC9B,KAAI;AACF,aAAW,MAAM,QAAQ,aAAa,UAAU,UAAU,OAAO,UAAU,KAAK;AAChF,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,oBAAwC;AAC/C,KAAI;AAEF,SAAO,KAAK,QADQ,QAAQ,QAAQ,mCACL,CAAC,EAAE,OAAO,YAAY,CAAC;SAChD;AACN;;;AAIJ,SAAgB,4BAA4B,cAA+B;CACzE,MAAM,gBAAiB,QAAwD;CAC/E,MAAM,aAAa;EACjB;EACA,QAAQ,IAAI;EACZ,gBAAgB,KAAK,eAAe,OAAO,YAAY,CAAC,GAAG,KAAA;EAC3D,mBAAmB;EACpB,CAAC,QAAQ,UAA2B,QAAQ,OAAO,MAAM,CAAC,CAAC;AAE5D,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,eAAe,SAAS,CAC1B,QAAO,aAAa,SAAS;;AAIjC,OAAM,IAAI,MACR,sDAAsD,WAAW,KAAK,KAAK,IAAI,uBAChF;;;AAIH,eAAsB,6BACpB,aACA,UAA+C,EAAE,EAChC;CACjB,MAAM,sBAAsB,QAAQ,uBAAuB;CAC3D,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,gBAAgB,GAAG,YAAY,GAAG,QAAQ,IAAI;CACpD,MAAM,kBAAkB,IAAI,iBAAiB;CAC7C,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;CACxD,MAAM,cAAc,KAAK,SAAS,OAAO,kBAAkB,GAAG;CAC9D,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,iBAAiB,IAAI,SAAgB,UAAU,WAAW;AAC9D,kBAAgB;GAChB;CACF,MAAM,QAAQ,iBAAiB;AAC7B,aAAW;AACX,kBAAgB,OAAO;AACvB,kCAAgB,IAAI,MAAM,4BAA4B,UAAU,IAAI,CAAC;IACpE,UAAU;AAEb,KAAI;AACF,YAAU,QAAQ,YAAY,EAAE,EAAE,WAAW,MAAM,CAAC;AACpD,SAAO,eAAe,EAAE,OAAO,MAAM,CAAC;AACtC,QAAM,QAAQ,KAAK,EAChB,YAAY;GACX,MAAM,oBAAoB,MAAM,oBAAoB,GAAG,iBAAiB,iBAAiB;IACvF,UAAU;IACV,QAAQ,gBAAgB;IACzB,CAAC;AACF,OAAI,CAAC,kBAAkB,GACrB,OAAM,IAAI,MAAM,iCAAiC,kBAAkB,OAAO,oBAAoB;GAEhG,MAAM,mBAAmB,eAAe,MAAM,kBAAkB,MAAM,EAAE,aAAa,CAAC;GACtF,MAAM,WAAW,MAAM,oBAAoB,YAAY,EAAE;IACvD,UAAU;IACV,QAAQ,gBAAgB;IACzB,CAAC;AACF,OAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,iCAAiC,SAAS,SAAS;AAErE,OAAI,CAAC,SAAS,KACZ,OAAM,IAAI,MAAM,kDAAkD;AAGpE,SAAM,SACJ,SAAS,QAAQ,SAAS,KAAiD,EAC3E,kBAAkB,aAAa,EAAE,MAAM,KAAO,CAAC,CAChD;GACD,MAAM,iBAAiB,MAAM,OAAO,YAAY;AAChD,OAAI,mBAAmB,iBACrB,OAAM,IAAI,MACR,yBAAyB,aAAa,CAAC,aAAa,iBAAiB,QAAQ,iBAC9E;AAEH,OAAI,kBAAkB,KAAK,SACzB,OAAM,cAAc,OAAO;IAAC;IAAQ;IAAa;IAAM;IAAS;IAAkB,CAAC;OAEnF,OAAM,cAAc,cAAc;IAChC;IACA;IACA,yBAAyB,YAAY,sBAAsB,QAAQ;IACpE,CAAC;GAGJ,MAAM,YAAY,KAAK,SAAS,YAAY,CAAC;AAC7C,OAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,MAAM,2CAA2C,kBAAkB,CAAC,UAAU;AAE1F,gBAAa,WAAW,cAAc;MACpC,EACJ,eACD,CAAC;AACF,MAAI,SAAU,OAAM,IAAI,MAAM,4BAA4B,UAAU,IAAI;AACxE,MAAI,QAAQ,aAAa,QAAS,WAAU,eAAe,IAAM;AACjE,aAAW,eAAe,YAAY;AACtC,SAAO,aAAa,YAAY;UACzB,OAAO;EACd,MAAM,SAAS,WACX,4BAA4B,UAAU,MACtC,iBAAiB,QACf,MAAM,UACN,OAAO,MAAM;AACnB,QAAM,IAAI,MACR,gEAAgE,OAAO,wEAExE;WACO;AACR,eAAa,MAAM;AACnB,SAAO,eAAe,EAAE,OAAO,MAAM,CAAC;AACtC,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;;;;;AAQrD,eAAsB,2BAA2B,cAAwC;AACvF,KAAI;AACF,SAAO,4BAA4B,aAAa;SAC1C;EACN,MAAM,cAAc,mBAAmB;AACvC,MAAI,eAAe,YAAY,CAAE,QAAO,aAAa,YAAY;AAEjE,MAAI,KACF;GAAE;GAAa,SAAS;GAAa,WAAW;GAAqB,EACrE,iDACD;AACD,SAAO,6BAA6B,YAAY"}
+{"version":3,"file":"binary.js","names":[],"sources":["../../../../src/agent/code-intelligence/binary.ts"],"sourcesContent":["import { execFile } from 'node:child_process';\nimport { createHash, randomBytes } from 'node:crypto';\nimport {\n  accessSync,\n  chmodSync,\n  constants,\n  copyFileSync,\n  createReadStream,\n  createWriteStream,\n  existsSync,\n  mkdirSync,\n  mkdtempSync,\n  readdirSync,\n  readFileSync,\n  realpathSync,\n  renameSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from 'node:fs';\nimport { createRequire } from 'node:module';\nimport { tmpdir } from 'node:os';\nimport { dirname, join, resolve } from 'node:path';\nimport { Readable } from 'node:stream';\nimport { pipeline } from 'node:stream/promises';\nimport { promisify } from 'node:util';\n\nimport lockfile from 'proper-lockfile';\n\nimport { resolveBinDir, resolveStateDir } from '../../config/paths.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst require = createRequire(import.meta.url);\nconst log = createLogger('CodeIntelligenceBinary');\n\nconst CBM_VERSION = '0.9.0';\nconst CACHE_SCHEMA_VERSION = 1;\nconst DOWNLOAD_TIMEOUT_MS = 2 * 60_000;\nconst RELEASE_BASE_URL = `https://github.com/DeusData/codebase-memory-mcp/releases/download/v${CBM_VERSION}`;\nconst execFileAsync = promisify(execFile);\n\ntype FetchImplementation = typeof fetch;\ntype ManagedBinarySource = 'github-release' | 'electron-bundle' | 'package-bundle' | 'legacy-cache';\n\ninterface ManagedBinaryManifest {\n  schemaVersion: number;\n  component: 'codebase-memory-mcp';\n  cbmVersion: string;\n  platform: string;\n  arch: string;\n  binaryName: string;\n  binarySha256: string;\n  binarySize: number;\n  source: ManagedBinarySource;\n  installedAt: string;\n}\n\ninterface BundledBinaryManifest {\n  cbmVersion: string;\n  platform: string;\n  arch: string;\n  binarySha256: string;\n}\n\ninterface BinarySourceCandidate {\n  path: string;\n  source: Exclude<ManagedBinarySource, 'github-release'>;\n  manifestPath?: string;\n}\n\nexport interface DownloadCodebaseMemoryBinaryOptions {\n  fetchImplementation?: FetchImplementation;\n  timeoutMs?: number;\n}\n\nfunction binaryName(): string {\n  return process.platform === 'win32' ? 'codebase-memory-mcp.exe' : 'codebase-memory-mcp';\n}\n\nfunction platformName(): string {\n  switch (process.platform) {\n    case 'darwin':\n      return 'darwin';\n    case 'linux':\n      return 'linux';\n    case 'win32':\n      return 'windows';\n    default:\n      throw new Error(`Code intelligence is not supported on ${process.platform}`);\n  }\n}\n\nfunction architectureName(): string {\n  switch (process.arch) {\n    case 'arm64':\n      return 'arm64';\n    case 'x64':\n      return 'amd64';\n    default:\n      throw new Error(`Code intelligence is not supported on ${process.arch}`);\n  }\n}\n\nfunction platformKey(): string {\n  return `${platformName()}-${architectureName()}`;\n}\n\nfunction archiveName(): string {\n  const platform = platformName();\n  const extension = platform === 'windows' ? 'zip' : 'tar.gz';\n  const linuxPortable = platform === 'linux' ? '-portable' : '';\n  return `codebase-memory-mcp-${platform}-${architectureName()}${linuxPortable}.${extension}`;\n}\n\nfunction releaseUrl(): string {\n  return `${RELEASE_BASE_URL}/${archiveName()}`;\n}\n\nfunction archiveExtension(): 'zip' | 'tar.gz' {\n  return platformName() === 'windows' ? 'zip' : 'tar.gz';\n}\n\nfunction cacheVersionRoot(): string {\n  return join(resolveBinDir(), 'codebase-memory-mcp', `v${CBM_VERSION}`);\n}\n\nfunction cacheDir(): string {\n  return join(cacheVersionRoot(), platformKey());\n}\n\nfunction cacheBinaryPath(): string {\n  return join(cacheDir(), binaryName());\n}\n\nfunction cacheManifestPath(dir = cacheDir()): string {\n  return join(dir, 'manifest.json');\n}\n\nfunction legacyManagedBinaryPath(): string {\n  return join(\n    resolveStateDir(),\n    'code-intelligence',\n    'bin',\n    `v${CBM_VERSION}`,\n    platformKey(),\n    binaryName(),\n  );\n}\n\nfunction isUsableBinary(path: string): boolean {\n  if (!existsSync(path)) return false;\n  try {\n    accessSync(path, process.platform === 'win32' ? constants.F_OK : constants.X_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction expectedSha256(checksums: string, filename: string): string {\n  for (const line of checksums.split(/\\r?\\n/)) {\n    const match = /^([a-f0-9]{64})\\s+\\*?(.+)$/i.exec(line.trim());\n    if (match?.[2] === filename) return match[1].toLowerCase();\n  }\n  throw new Error(`checksums.txt does not contain ${filename}`);\n}\n\nasync function sha256(path: string): Promise<string> {\n  const hash = createHash('sha256');\n  await new Promise<void>((resolvePromise, reject) => {\n    const input = createReadStream(path);\n    input.on('data', (chunk: Buffer) => hash.update(chunk));\n    input.once('error', reject);\n    input.once('end', resolvePromise);\n  });\n  return hash.digest('hex');\n}\n\nfunction readManagedManifest(dir = cacheDir()): ManagedBinaryManifest | undefined {\n  try {\n    const parsed = JSON.parse(readFileSync(cacheManifestPath(dir), 'utf8')) as Partial<ManagedBinaryManifest>;\n    if (\n      parsed.schemaVersion !== CACHE_SCHEMA_VERSION ||\n      parsed.component !== 'codebase-memory-mcp' ||\n      parsed.cbmVersion !== CBM_VERSION ||\n      parsed.platform !== platformName() ||\n      parsed.arch !== architectureName() ||\n      parsed.binaryName !== binaryName() ||\n      typeof parsed.binarySha256 !== 'string' ||\n      typeof parsed.binarySize !== 'number'\n    ) {\n      return undefined;\n    }\n    return parsed as ManagedBinaryManifest;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction resolveSharedCachedBinary(): string | undefined {\n  const binary = cacheBinaryPath();\n  const manifest = readManagedManifest();\n  if (!manifest || !isUsableBinary(binary)) return undefined;\n  try {\n    return statSync(binary).size === manifest.binarySize ? realpathSync(binary) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function verifySharedCachedBinary(): Promise<string | undefined> {\n  const binary = resolveSharedCachedBinary();\n  const manifest = readManagedManifest();\n  if (!binary || !manifest) return undefined;\n  try {\n    return (await sha256(binary)) === manifest.binarySha256 ? binary : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction packageBinaryPath(): string | undefined {\n  try {\n    const packageJson = require.resolve('codebase-memory-mcp/package.json');\n    return join(dirname(packageJson), 'bin', binaryName());\n  } catch {\n    return undefined;\n  }\n}\n\nfunction overrideBinaryPath(explicitPath?: string): string | undefined {\n  for (const candidate of [explicitPath, process.env.XOPC_CBM_BINARY]) {\n    if (!candidate?.trim()) continue;\n    const absolute = resolve(candidate);\n    if (isUsableBinary(absolute)) return realpathSync(absolute);\n  }\n  return undefined;\n}\n\nfunction bundledBinaryCandidates(): BinarySourceCandidate[] {\n  const bundledPath = process.env.XOPC_CBM_BUNDLED_PATH?.trim();\n  const bundledManifestPath = process.env.XOPC_CBM_BUNDLED_MANIFEST_PATH?.trim();\n  const resourcesPath = (process as NodeJS.Process & { resourcesPath?: string }).resourcesPath;\n  const resourcePath = resourcesPath ? join(resourcesPath, 'bin', binaryName()) : undefined;\n  const packagePath = packageBinaryPath();\n  const candidates: BinarySourceCandidate[] = [];\n\n  if (bundledPath) {\n    candidates.push({\n      path: bundledPath,\n      source: 'electron-bundle',\n      manifestPath: bundledManifestPath || join(dirname(bundledPath), 'codebase-memory-mcp.manifest.json'),\n    });\n  }\n  if (resourcePath && resourcePath !== bundledPath) {\n    candidates.push({\n      path: resourcePath,\n      source: 'electron-bundle',\n      manifestPath: join(dirname(resourcePath), 'codebase-memory-mcp.manifest.json'),\n    });\n  }\n  if (packagePath) candidates.push({ path: packagePath, source: 'package-bundle' });\n  candidates.push({ path: legacyManagedBinaryPath(), source: 'legacy-cache' });\n  return candidates;\n}\n\nasync function verifyBundledSource(candidate: BinarySourceCandidate): Promise<void> {\n  if (!isUsableBinary(candidate.path)) {\n    throw new Error(`source binary is unavailable at ${candidate.path}`);\n  }\n  if (candidate.source !== 'electron-bundle') return;\n  if (!candidate.manifestPath) throw new Error('Electron CBM manifest path is missing');\n\n  let manifest: BundledBinaryManifest;\n  try {\n    manifest = JSON.parse(readFileSync(candidate.manifestPath, 'utf8')) as BundledBinaryManifest;\n  } catch (error) {\n    throw new Error(\n      `Electron CBM manifest is unreadable: ${error instanceof Error ? error.message : String(error)}`,\n    );\n  }\n  if (\n    manifest.cbmVersion !== CBM_VERSION ||\n    manifest.platform !== platformName() ||\n    manifest.arch !== architectureName() ||\n    !/^[a-f0-9]{64}$/i.test(manifest.binarySha256)\n  ) {\n    throw new Error('Electron CBM manifest does not match this runtime');\n  }\n  const actual = await sha256(candidate.path);\n  if (actual !== manifest.binarySha256.toLowerCase()) {\n    throw new Error(`Electron CBM checksum mismatch: expected ${manifest.binarySha256}, got ${actual}`);\n  }\n}\n\nasync function withCacheLock<T>(fn: () => Promise<T>): Promise<T> {\n  const versionRoot = cacheVersionRoot();\n  mkdirSync(versionRoot, { recursive: true });\n  const release = await lockfile.lock(versionRoot, {\n    realpath: false,\n    lockfilePath: join(versionRoot, `.${platformKey()}.install.lock`),\n    stale: 10 * 60_000,\n    retries: { retries: 30, factor: 1.2, minTimeout: 100, maxTimeout: 1_000 },\n  });\n  try {\n    return await fn();\n  } finally {\n    await release();\n  }\n}\n\nfunction cleanupStaleStaging(versionRoot: string): void {\n  const prefix = `.${platformKey()}.staging-`;\n  const cutoff = Date.now() - 60 * 60_000;\n  try {\n    for (const entry of readdirSync(versionRoot)) {\n      if (!entry.startsWith(prefix)) continue;\n      const path = join(versionRoot, entry);\n      if (statSync(path).mtimeMs < cutoff) rmSync(path, { recursive: true, force: true });\n    }\n  } catch {\n    // Best-effort cleanup; installation remains safe under the cache lock.\n  }\n}\n\nasync function installInSharedCache(\n  source: ManagedBinarySource,\n  populate: (destination: string) => Promise<void>,\n): Promise<string> {\n  const versionRoot = cacheVersionRoot();\n  const targetDir = cacheDir();\n  const stagingDir = join(versionRoot, `.${platformKey()}.staging-${process.pid}-${randomBytes(6).toString('hex')}`);\n  const stagingBinary = join(stagingDir, binaryName());\n  mkdirSync(stagingDir, { recursive: true });\n\n  try {\n    await populate(stagingBinary);\n    if (!isUsableBinary(stagingBinary)) {\n      throw new Error('staged codebase-memory-mcp binary is not executable');\n    }\n    if (process.platform !== 'win32') chmodSync(stagingBinary, 0o755);\n    const binarySha256 = await sha256(stagingBinary);\n    const manifest: ManagedBinaryManifest = {\n      schemaVersion: CACHE_SCHEMA_VERSION,\n      component: 'codebase-memory-mcp',\n      cbmVersion: CBM_VERSION,\n      platform: platformName(),\n      arch: architectureName(),\n      binaryName: binaryName(),\n      binarySha256,\n      binarySize: statSync(stagingBinary).size,\n      source,\n      installedAt: new Date().toISOString(),\n    };\n    writeFileSync(cacheManifestPath(stagingDir), `${JSON.stringify(manifest, null, 2)}\\n`, 'utf8');\n\n    rmSync(targetDir, { recursive: true, force: true });\n    renameSync(stagingDir, targetDir);\n    return realpathSync(cacheBinaryPath());\n  } catch (error) {\n    rmSync(stagingDir, { recursive: true, force: true });\n    throw error;\n  }\n}\n\n/** Resolve an explicit, shared, or bundled binary synchronously when already present. */\nexport function resolveCodebaseMemoryBinary(explicitPath?: string): string {\n  const overridden = overrideBinaryPath(explicitPath);\n  if (overridden) return overridden;\n\n  const shared = resolveSharedCachedBinary();\n  if (shared) return shared;\n\n  for (const candidate of bundledBinaryCandidates()) {\n    const absolute = resolve(candidate.path);\n    if (isUsableBinary(absolute)) return realpathSync(absolute);\n  }\n\n  throw new Error('codebase-memory-mcp binary is unavailable');\n}\n\n/** Download and checksum-verify the CBM executable into a caller-provided path. */\nexport async function downloadCodebaseMemoryBinary(\n  destination: string,\n  options: DownloadCodebaseMemoryBinaryOptions = {},\n): Promise<string> {\n  const fetchImplementation = options.fetchImplementation ?? fetch;\n  const timeoutMs = options.timeoutMs ?? DOWNLOAD_TIMEOUT_MS;\n  const temporaryPath = `${destination}.${process.pid}.part`;\n  const abortController = new AbortController();\n  const tempDir = mkdtempSync(join(tmpdir(), 'xopc-cbm-'));\n  const archivePath = join(tempDir, `cbm.${archiveExtension()}`);\n  let timedOut = false;\n  let rejectTimeout: ((error: Error) => void) | undefined;\n  const timeoutPromise = new Promise<never>((_resolve, reject) => {\n    rejectTimeout = reject;\n  });\n  const timer = setTimeout(() => {\n    timedOut = true;\n    abortController.abort();\n    rejectTimeout?.(new Error(`download timed out after ${timeoutMs}ms`));\n  }, timeoutMs);\n\n  try {\n    mkdirSync(dirname(destination), { recursive: true });\n    rmSync(temporaryPath, { force: true });\n    await Promise.race([\n      (async () => {\n        const checksumsResponse = await fetchImplementation(`${RELEASE_BASE_URL}/checksums.txt`, {\n          redirect: 'follow',\n          signal: abortController.signal,\n        });\n        if (!checksumsResponse.ok) {\n          throw new Error(`GitHub Releases returned HTTP ${checksumsResponse.status} for checksums.txt`);\n        }\n        const expectedChecksum = expectedSha256(await checksumsResponse.text(), archiveName());\n        const response = await fetchImplementation(releaseUrl(), {\n          redirect: 'follow',\n          signal: abortController.signal,\n        });\n        if (!response.ok) throw new Error(`GitHub Releases returned HTTP ${response.status}`);\n        if (!response.body) throw new Error('GitHub Releases returned an empty response body');\n\n        await pipeline(\n          Readable.fromWeb(response.body as import('node:stream/web').ReadableStream),\n          createWriteStream(archivePath, { mode: 0o600 }),\n        );\n        const actualChecksum = await sha256(archivePath);\n        if (actualChecksum !== expectedChecksum) {\n          throw new Error(\n            `checksum mismatch for ${archiveName()}: expected ${expectedChecksum}, got ${actualChecksum}`,\n          );\n        }\n        if (archiveExtension() === 'tar.gz') {\n          await execFileAsync('tar', ['-xzf', archivePath, '-C', tempDir, '--no-same-owner']);\n        } else {\n          await execFileAsync('powershell', [\n            '-NoProfile',\n            '-Command',\n            `Expand-Archive -Path '${archivePath}' -DestinationPath '${tempDir}' -Force`,\n          ]);\n        }\n\n        const extracted = join(tempDir, binaryName());\n        if (!isUsableBinary(extracted)) {\n          throw new Error(`binary was not present after extracting ${archiveExtension()} archive`);\n        }\n        copyFileSync(extracted, temporaryPath);\n      })(),\n      timeoutPromise,\n    ]);\n    if (timedOut) throw new Error(`download timed out after ${timeoutMs}ms`);\n    if (process.platform !== 'win32') chmodSync(temporaryPath, 0o755);\n    renameSync(temporaryPath, destination);\n    return realpathSync(destination);\n  } catch (error) {\n    const reason = timedOut\n      ? `download timed out after ${timeoutMs}ms`\n      : error instanceof Error\n        ? error.message\n        : String(error);\n    throw new Error(\n      `Unable to download codebase-memory-mcp from GitHub Releases: ${reason}. ` +\n      'Check network access or set XOPC_CBM_BINARY to a trusted executable.',\n    );\n  } finally {\n    clearTimeout(timer);\n    rmSync(temporaryPath, { force: true });\n    rmSync(tempDir, { recursive: true, force: true });\n  }\n}\n\n/**\n * Resolve a shared, versioned user cache. Electron seeds it from its bundled binary;\n * CLI seeds it from a verified release download. This keeps both surfaces on one binary.\n */\nexport async function ensureCodebaseMemoryBinary(explicitPath?: string): Promise<string> {\n  const overridden = overrideBinaryPath(explicitPath);\n  if (overridden) return overridden;\n\n  const cached = await verifySharedCachedBinary();\n  if (cached) return cached;\n\n  return withCacheLock(async () => {\n    cleanupStaleStaging(cacheVersionRoot());\n    const afterLock = await verifySharedCachedBinary();\n    if (afterLock) return afterLock;\n\n    for (const candidate of bundledBinaryCandidates()) {\n      try {\n        await verifyBundledSource(candidate);\n        return await installInSharedCache(candidate.source, async (destination) => {\n          copyFileSync(candidate.path, destination);\n        });\n      } catch (error) {\n        log.warn(\n          { err: error, source: candidate.source, path: candidate.path },\n          'Code intelligence binary source was not usable',\n        );\n      }\n    }\n\n    log.info(\n      { destination: cacheBinaryPath(), version: CBM_VERSION, timeoutMs: DOWNLOAD_TIMEOUT_MS },\n      'Downloading code intelligence binary into shared cache',\n    );\n    return installInSharedCache('github-release', async (destination) => {\n      await downloadCodebaseMemoryBinary(destination);\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;YA6BuE;aAClB;AAErD,MAAM,UAAU,cAAc,OAAO,KAAK,IAAI;AAC9C,MAAM,MAAM,aAAa,yBAAyB;AAElD,MAAM,cAAc;AACpB,MAAM,uBAAuB;AAC7B,MAAM,sBAAsB,IAAI;AAChC,MAAM,mBAAmB,sEAAsE;AAC/F,MAAM,gBAAgB,UAAU,SAAS;AAoCzC,SAAS,aAAqB;AAC5B,QAAO,QAAQ,aAAa,UAAU,4BAA4B;;AAGpE,SAAS,eAAuB;AAC9B,SAAQ,QAAQ,UAAhB;EACE,KAAK,SACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,yCAAyC,QAAQ,WAAW;;;AAIlF,SAAS,mBAA2B;AAClC,SAAQ,QAAQ,MAAhB;EACE,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,yCAAyC,QAAQ,OAAO;;;AAI9E,SAAS,cAAsB;AAC7B,QAAO,GAAG,cAAc,CAAC,GAAG,kBAAkB;;AAGhD,SAAS,cAAsB;CAC7B,MAAM,WAAW,cAAc;CAC/B,MAAM,YAAY,aAAa,YAAY,QAAQ;CACnD,MAAM,gBAAgB,aAAa,UAAU,cAAc;AAC3D,QAAO,uBAAuB,SAAS,GAAG,kBAAkB,GAAG,cAAc,GAAG;;AAGlF,SAAS,aAAqB;AAC5B,QAAO,GAAG,iBAAiB,GAAG,aAAa;;AAG7C,SAAS,mBAAqC;AAC5C,QAAO,cAAc,KAAK,YAAY,QAAQ;;AAGhD,SAAS,mBAA2B;AAClC,QAAO,KAAK,eAAe,EAAE,uBAAuB,IAAI,cAAc;;AAGxE,SAAS,WAAmB;AAC1B,QAAO,KAAK,kBAAkB,EAAE,aAAa,CAAC;;AAGhD,SAAS,kBAA0B;AACjC,QAAO,KAAK,UAAU,EAAE,YAAY,CAAC;;AAGvC,SAAS,kBAAkB,MAAM,UAAU,EAAU;AACnD,QAAO,KAAK,KAAK,gBAAgB;;AAGnC,SAAS,0BAAkC;AACzC,QAAO,KACL,iBAAiB,EACjB,qBACA,OACA,IAAI,eACJ,aAAa,EACb,YAAY,CACb;;AAGH,SAAS,eAAe,MAAuB;AAC7C,KAAI,CAAC,WAAW,KAAK,CAAE,QAAO;AAC9B,KAAI;AACF,aAAW,MAAM,QAAQ,aAAa,UAAU,UAAU,OAAO,UAAU,KAAK;AAChF,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,eAAe,WAAmB,UAA0B;AACnE,MAAK,MAAM,QAAQ,UAAU,MAAM,QAAQ,EAAE;EAC3C,MAAM,QAAQ,8BAA8B,KAAK,KAAK,MAAM,CAAC;AAC7D,MAAI,QAAQ,OAAO,SAAU,QAAO,MAAM,GAAG,aAAa;;AAE5D,OAAM,IAAI,MAAM,kCAAkC,WAAW;;AAG/D,eAAe,OAAO,MAA+B;CACnD,MAAM,OAAO,WAAW,SAAS;AACjC,OAAM,IAAI,SAAe,gBAAgB,WAAW;EAClD,MAAM,QAAQ,iBAAiB,KAAK;AACpC,QAAM,GAAG,SAAS,UAAkB,KAAK,OAAO,MAAM,CAAC;AACvD,QAAM,KAAK,SAAS,OAAO;AAC3B,QAAM,KAAK,OAAO,eAAe;GACjC;AACF,QAAO,KAAK,OAAO,MAAM;;AAG3B,SAAS,oBAAoB,MAAM,UAAU,EAAqC;AAChF,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,aAAa,kBAAkB,IAAI,EAAE,OAAO,CAAC;AACvE,MACE,OAAO,kBAAkB,wBACzB,OAAO,cAAc,yBACrB,OAAO,eAAe,eACtB,OAAO,aAAa,cAAc,IAClC,OAAO,SAAS,kBAAkB,IAClC,OAAO,eAAe,YAAY,IAClC,OAAO,OAAO,iBAAiB,YAC/B,OAAO,OAAO,eAAe,SAE7B;AAEF,SAAO;SACD;AACN;;;AAIJ,SAAS,4BAAgD;CACvD,MAAM,SAAS,iBAAiB;CAChC,MAAM,WAAW,qBAAqB;AACtC,KAAI,CAAC,YAAY,CAAC,eAAe,OAAO,CAAE,QAAO,KAAA;AACjD,KAAI;AACF,SAAO,SAAS,OAAO,CAAC,SAAS,SAAS,aAAa,aAAa,OAAO,GAAG,KAAA;SACxE;AACN;;;AAIJ,eAAe,2BAAwD;CACrE,MAAM,SAAS,2BAA2B;CAC1C,MAAM,WAAW,qBAAqB;AACtC,KAAI,CAAC,UAAU,CAAC,SAAU,QAAO,KAAA;AACjC,KAAI;AACF,SAAQ,MAAM,OAAO,OAAO,KAAM,SAAS,eAAe,SAAS,KAAA;SAC7D;AACN;;;AAIJ,SAAS,oBAAwC;AAC/C,KAAI;AAEF,SAAO,KAAK,QADQ,QAAQ,QAAQ,mCACL,CAAC,EAAE,OAAO,YAAY,CAAC;SAChD;AACN;;;AAIJ,SAAS,mBAAmB,cAA2C;AACrE,MAAK,MAAM,aAAa,CAAC,cAAc,QAAQ,IAAI,gBAAgB,EAAE;AACnE,MAAI,CAAC,WAAW,MAAM,CAAE;EACxB,MAAM,WAAW,QAAQ,UAAU;AACnC,MAAI,eAAe,SAAS,CAAE,QAAO,aAAa,SAAS;;;AAK/D,SAAS,0BAAmD;CAC1D,MAAM,cAAc,QAAQ,IAAI,uBAAuB,MAAM;CAC7D,MAAM,sBAAsB,QAAQ,IAAI,gCAAgC,MAAM;CAC9E,MAAM,gBAAiB,QAAwD;CAC/E,MAAM,eAAe,gBAAgB,KAAK,eAAe,OAAO,YAAY,CAAC,GAAG,KAAA;CAChF,MAAM,cAAc,mBAAmB;CACvC,MAAM,aAAsC,EAAE;AAE9C,KAAI,YACF,YAAW,KAAK;EACd,MAAM;EACN,QAAQ;EACR,cAAc,uBAAuB,KAAK,QAAQ,YAAY,EAAE,oCAAoC;EACrG,CAAC;AAEJ,KAAI,gBAAgB,iBAAiB,YACnC,YAAW,KAAK;EACd,MAAM;EACN,QAAQ;EACR,cAAc,KAAK,QAAQ,aAAa,EAAE,oCAAoC;EAC/E,CAAC;AAEJ,KAAI,YAAa,YAAW,KAAK;EAAE,MAAM;EAAa,QAAQ;EAAkB,CAAC;AACjF,YAAW,KAAK;EAAE,MAAM,yBAAyB;EAAE,QAAQ;EAAgB,CAAC;AAC5E,QAAO;;AAGT,eAAe,oBAAoB,WAAiD;AAClF,KAAI,CAAC,eAAe,UAAU,KAAK,CACjC,OAAM,IAAI,MAAM,mCAAmC,UAAU,OAAO;AAEtE,KAAI,UAAU,WAAW,kBAAmB;AAC5C,KAAI,CAAC,UAAU,aAAc,OAAM,IAAI,MAAM,wCAAwC;CAErF,IAAI;AACJ,KAAI;AACF,aAAW,KAAK,MAAM,aAAa,UAAU,cAAc,OAAO,CAAC;UAC5D,OAAO;AACd,QAAM,IAAI,MACR,wCAAwC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAC/F;;AAEH,KACE,SAAS,eAAe,eACxB,SAAS,aAAa,cAAc,IACpC,SAAS,SAAS,kBAAkB,IACpC,CAAC,kBAAkB,KAAK,SAAS,aAAa,CAE9C,OAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,SAAS,MAAM,OAAO,UAAU,KAAK;AAC3C,KAAI,WAAW,SAAS,aAAa,aAAa,CAChD,OAAM,IAAI,MAAM,4CAA4C,SAAS,aAAa,QAAQ,SAAS;;AAIvG,eAAe,cAAiB,IAAkC;CAChE,MAAM,cAAc,kBAAkB;AACtC,WAAU,aAAa,EAAE,WAAW,MAAM,CAAC;CAC3C,MAAM,UAAU,MAAM,SAAS,KAAK,aAAa;EAC/C,UAAU;EACV,cAAc,KAAK,aAAa,IAAI,aAAa,CAAC,eAAe;EACjE,OAAO,KAAK;EACZ,SAAS;GAAE,SAAS;GAAI,QAAQ;GAAK,YAAY;GAAK,YAAY;GAAO;EAC1E,CAAC;AACF,KAAI;AACF,SAAO,MAAM,IAAI;WACT;AACR,QAAM,SAAS;;;AAInB,SAAS,oBAAoB,aAA2B;CACtD,MAAM,SAAS,IAAI,aAAa,CAAC;CACjC,MAAM,SAAS,KAAK,KAAK,GAAG,KAAK;AACjC,KAAI;AACF,OAAK,MAAM,SAAS,YAAY,YAAY,EAAE;AAC5C,OAAI,CAAC,MAAM,WAAW,OAAO,CAAE;GAC/B,MAAM,OAAO,KAAK,aAAa,MAAM;AACrC,OAAI,SAAS,KAAK,CAAC,UAAU,OAAQ,QAAO,MAAM;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;;SAE/E;;AAKV,eAAe,qBACb,QACA,UACiB;CACjB,MAAM,cAAc,kBAAkB;CACtC,MAAM,YAAY,UAAU;CAC5B,MAAM,aAAa,KAAK,aAAa,IAAI,aAAa,CAAC,WAAW,QAAQ,IAAI,GAAG,YAAY,EAAE,CAAC,SAAS,MAAM,GAAG;CAClH,MAAM,gBAAgB,KAAK,YAAY,YAAY,CAAC;AACpD,WAAU,YAAY,EAAE,WAAW,MAAM,CAAC;AAE1C,KAAI;AACF,QAAM,SAAS,cAAc;AAC7B,MAAI,CAAC,eAAe,cAAc,CAChC,OAAM,IAAI,MAAM,sDAAsD;AAExE,MAAI,QAAQ,aAAa,QAAS,WAAU,eAAe,IAAM;EACjE,MAAM,eAAe,MAAM,OAAO,cAAc;EAChD,MAAM,WAAkC;GACtC,eAAe;GACf,WAAW;GACX,YAAY;GACZ,UAAU,cAAc;GACxB,MAAM,kBAAkB;GACxB,YAAY,YAAY;GACxB;GACA,YAAY,SAAS,cAAc,CAAC;GACpC;GACA,8BAAa,IAAI,MAAM,EAAC,aAAa;GACtC;AACD,gBAAc,kBAAkB,WAAW,EAAE,GAAG,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC,KAAK,OAAO;AAE9F,SAAO,WAAW;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACnD,aAAW,YAAY,UAAU;AACjC,SAAO,aAAa,iBAAiB,CAAC;UAC/B,OAAO;AACd,SAAO,YAAY;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AACpD,QAAM;;;;AAKV,SAAgB,4BAA4B,cAA+B;CACzE,MAAM,aAAa,mBAAmB,aAAa;AACnD,KAAI,WAAY,QAAO;CAEvB,MAAM,SAAS,2BAA2B;AAC1C,KAAI,OAAQ,QAAO;AAEnB,MAAK,MAAM,aAAa,yBAAyB,EAAE;EACjD,MAAM,WAAW,QAAQ,UAAU,KAAK;AACxC,MAAI,eAAe,SAAS,CAAE,QAAO,aAAa,SAAS;;AAG7D,OAAM,IAAI,MAAM,4CAA4C;;;AAI9D,eAAsB,6BACpB,aACA,UAA+C,EAAE,EAChC;CACjB,MAAM,sBAAsB,QAAQ,uBAAuB;CAC3D,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,gBAAgB,GAAG,YAAY,GAAG,QAAQ,IAAI;CACpD,MAAM,kBAAkB,IAAI,iBAAiB;CAC7C,MAAM,UAAU,YAAY,KAAK,QAAQ,EAAE,YAAY,CAAC;CACxD,MAAM,cAAc,KAAK,SAAS,OAAO,kBAAkB,GAAG;CAC9D,IAAI,WAAW;CACf,IAAI;CACJ,MAAM,iBAAiB,IAAI,SAAgB,UAAU,WAAW;AAC9D,kBAAgB;GAChB;CACF,MAAM,QAAQ,iBAAiB;AAC7B,aAAW;AACX,kBAAgB,OAAO;AACvB,kCAAgB,IAAI,MAAM,4BAA4B,UAAU,IAAI,CAAC;IACpE,UAAU;AAEb,KAAI;AACF,YAAU,QAAQ,YAAY,EAAE,EAAE,WAAW,MAAM,CAAC;AACpD,SAAO,eAAe,EAAE,OAAO,MAAM,CAAC;AACtC,QAAM,QAAQ,KAAK,EAChB,YAAY;GACX,MAAM,oBAAoB,MAAM,oBAAoB,GAAG,iBAAiB,iBAAiB;IACvF,UAAU;IACV,QAAQ,gBAAgB;IACzB,CAAC;AACF,OAAI,CAAC,kBAAkB,GACrB,OAAM,IAAI,MAAM,iCAAiC,kBAAkB,OAAO,oBAAoB;GAEhG,MAAM,mBAAmB,eAAe,MAAM,kBAAkB,MAAM,EAAE,aAAa,CAAC;GACtF,MAAM,WAAW,MAAM,oBAAoB,YAAY,EAAE;IACvD,UAAU;IACV,QAAQ,gBAAgB;IACzB,CAAC;AACF,OAAI,CAAC,SAAS,GAAI,OAAM,IAAI,MAAM,iCAAiC,SAAS,SAAS;AACrF,OAAI,CAAC,SAAS,KAAM,OAAM,IAAI,MAAM,kDAAkD;AAEtF,SAAM,SACJ,SAAS,QAAQ,SAAS,KAAiD,EAC3E,kBAAkB,aAAa,EAAE,MAAM,KAAO,CAAC,CAChD;GACD,MAAM,iBAAiB,MAAM,OAAO,YAAY;AAChD,OAAI,mBAAmB,iBACrB,OAAM,IAAI,MACR,yBAAyB,aAAa,CAAC,aAAa,iBAAiB,QAAQ,iBAC9E;AAEH,OAAI,kBAAkB,KAAK,SACzB,OAAM,cAAc,OAAO;IAAC;IAAQ;IAAa;IAAM;IAAS;IAAkB,CAAC;OAEnF,OAAM,cAAc,cAAc;IAChC;IACA;IACA,yBAAyB,YAAY,sBAAsB,QAAQ;IACpE,CAAC;GAGJ,MAAM,YAAY,KAAK,SAAS,YAAY,CAAC;AAC7C,OAAI,CAAC,eAAe,UAAU,CAC5B,OAAM,IAAI,MAAM,2CAA2C,kBAAkB,CAAC,UAAU;AAE1F,gBAAa,WAAW,cAAc;MACpC,EACJ,eACD,CAAC;AACF,MAAI,SAAU,OAAM,IAAI,MAAM,4BAA4B,UAAU,IAAI;AACxE,MAAI,QAAQ,aAAa,QAAS,WAAU,eAAe,IAAM;AACjE,aAAW,eAAe,YAAY;AACtC,SAAO,aAAa,YAAY;UACzB,OAAO;EACd,MAAM,SAAS,WACX,4BAA4B,UAAU,MACtC,iBAAiB,QACf,MAAM,UACN,OAAO,MAAM;AACnB,QAAM,IAAI,MACR,gEAAgE,OAAO,wEAExE;WACO;AACR,eAAa,MAAM;AACnB,SAAO,eAAe,EAAE,OAAO,MAAM,CAAC;AACtC,SAAO,SAAS;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;;;;;AAQrD,eAAsB,2BAA2B,cAAwC;CACvF,MAAM,aAAa,mBAAmB,aAAa;AACnD,KAAI,WAAY,QAAO;CAEvB,MAAM,SAAS,MAAM,0BAA0B;AAC/C,KAAI,OAAQ,QAAO;AAEnB,QAAO,cAAc,YAAY;AAC/B,sBAAoB,kBAAkB,CAAC;EACvC,MAAM,YAAY,MAAM,0BAA0B;AAClD,MAAI,UAAW,QAAO;AAEtB,OAAK,MAAM,aAAa,yBAAyB,CAC/C,KAAI;AACF,SAAM,oBAAoB,UAAU;AACpC,UAAO,MAAM,qBAAqB,UAAU,QAAQ,OAAO,gBAAgB;AACzE,iBAAa,UAAU,MAAM,YAAY;KACzC;WACK,OAAO;AACd,OAAI,KACF;IAAE,KAAK;IAAO,QAAQ,UAAU;IAAQ,MAAM,UAAU;IAAM,EAC9D,iDACD;;AAIL,MAAI,KACF;GAAE,aAAa,iBAAiB;GAAE,SAAS;GAAa,WAAW;GAAqB,EACxF,yDACD;AACD,SAAO,qBAAqB,kBAAkB,OAAO,gBAAgB;AACnE,SAAM,6BAA6B,YAAY;IAC/C;GACF"}

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
+import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import "../agent-manifest/index.js";
-import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 //#region src/config/agent-profile.ts

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
+import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths, resolveUserProfilePath } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.139",
+  "version": "0.0.140",
   "description": "Local-first AI system that remembers context, coordinates AI, and sustains long-term progress.",
   "type": "module",
   "main": "dist/src/index.js",

package/dist/gateway/static/root/assets/settings-advanced-gate-Cir7UEDe.js

@@ -1 +0,0 @@
-import{hr as e}from"./index-YWf7ByKE.js";function t(t){let{children:n,fallback:r}=t,i=r===void 0?null:r;return e()?n:i}export{t};

package/dist/gateway/static/root/assets/skill-reload-api-loLlXXAj.js

@@ -1 +0,0 @@
-import{n as e}from"./rolldown-runtime-aKtaBQYM.js";import{o as t,t as n}from"./fetch-BID89uCH.js";import{pr as r}from"./index-YWf7ByKE.js";var i=e({reloadSkills:()=>a});async function a(){let e=await n(t(`/api/skills/reload`),{method:`POST`});if(!e.ok)throw Error(await r(e))}export{i as n,a as t};