@xopcai/xopc 0.0.142 → 0.0.143

package/dist/src/browser/providers/browser-ext-install.js

@@ -283,26 +283,46 @@ function spawnDetached(command, args) {
 		detached: true
 	}).unref();
 }
-function openChromeExtensionsPage() {
-	const chromeUrl = "chrome://extensions";
+function windowsExtensionManagerCandidates(env) {
+	const programFiles = [
+		env.PROGRAMFILES,
+		env["PROGRAMFILES(X86)"],
+		env.LOCALAPPDATA
+	].filter((path) => Boolean(path?.trim()));
+	const candidates = [];
+	for (const root of programFiles) candidates.push({
+		browser: "chrome",
+		executablePath: join(root, "Google", "Chrome", "Application", "chrome.exe"),
+		url: "chrome://extensions/"
+	});
+	for (const root of programFiles) candidates.push({
+		browser: "edge",
+		executablePath: join(root, "Microsoft", "Edge", "Application", "msedge.exe"),
+		url: "edge://extensions/"
+	});
+	return candidates;
+}
+function resolveWindowsExtensionManager(env = process.env) {
+	return windowsExtensionManagerCandidates(env).find(({ executablePath }) => existsSync(executablePath)) ?? null;
+}
+function openBrowserExtensionManager() {
+	const chromeUrl = "chrome://extensions/";
 	if (process.platform === "darwin") {
 		spawnDetached("open", [
 			"-a",
 			"Google Chrome",
 			chromeUrl
 		]);
-		return;
+		return "chrome";
 	}
 	if (process.platform === "win32") {
-		spawnDetached("cmd", [
-			"/c",
-			"start",
-			"chrome",
-			chromeUrl
-		]);
-		return;
+		const target = resolveWindowsExtensionManager();
+		if (!target) throw new Error("No compatible browser found. Install Google Chrome or Microsoft Edge, then try again.");
+		spawnDetached(target.executablePath, [target.url]);
+		return target.browser;
 	}
 	spawnDetached("xdg-open", [chromeUrl]);
+	return "chrome";
 }
 function revealFolderInFileManager(dir) {
 	if (process.platform === "darwin") {
@@ -316,16 +336,21 @@ function revealFolderInFileManager(dir) {
 	spawnDetached("xdg-open", [dir]);
 }
 /**
-* Open chrome://extensions and/or reveal the installed extension folder on the gateway host.
+* Open the compatible browser's extension manager and/or reveal the installed extension folder
+* on the gateway host.
 */
 async function openBrowserExtensionInstallUi(opts) {
 	const dir = (await browserExtDoctor({ cacheDir: opts.cacheDir })).extensionDir;
 	if (!dir) throw new Error("Extension not installed. Run xopc browser extension install first.");
-	if (opts.action === "chrome" || opts.action === "both") openChromeExtensionsPage();
+	let browser;
+	if (opts.action === "chrome" || opts.action === "both") browser = openBrowserExtensionManager();
 	if (opts.action === "folder" || opts.action === "both") revealFolderInFileManager(dir);
-	return { extensionDir: dir };
+	return {
+		extensionDir: dir,
+		browser
+	};
 }
 //#endregion
-export { BROWSER_EXT_REQUIRED_FILES, browserExtDoctor, computeNeedsRefresh, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, validateBrowserExtLayout };
+export { BROWSER_EXT_REQUIRED_FILES, browserExtDoctor, computeNeedsRefresh, ensureBrowserExtensionArtifacts, ensureBrowserExtensionOnStartup, openBrowserExtensionInstallUi, readInstalledExtensionDir, resolveBundledBrowserExtDir, resolveInstalledExtensionPath, resolveWindowsExtensionManager, validateBrowserExtLayout };
 
 //# sourceMappingURL=browser-ext-install.js.map

package/dist/src/browser/providers/browser-ext-install.js.map

@@ -1 +1 @@
-{"version":3,"file":"browser-ext-install.js","names":[],"sources":["../../../../src/browser/providers/browser-ext-install.ts"],"sourcesContent":["/**\n * Install bundled Chrome extension artifacts into {resolveBinDir()}/browser-ext/.\n * Fixed path — gateway upgrades overwrite in place so Chrome sideload paths stay stable.\n */\n\nimport {\n  existsSync,\n  mkdirSync,\n  readdirSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from 'node:fs';\nimport { readFile, readdir, rm } from 'node:fs/promises';\nimport { spawn } from 'node:child_process';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { resolveBinDir } from '../../config/paths.js';\nimport { resolvePackageRoot } from '../../infra/update-check.js';\nimport { writeTextAtomic } from '../../infra/write-file-atomic.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { assertCacheDir } from '../cache-dir-policy.js';\n\nconst log = createLogger('BrowserExtInstall');\n\nconst META_FILENAME = '.meta.json';\nconst STAGING_MAX_AGE_MS = 60 * 60 * 1000;\nconst INSTALLED_ARTIFACT_NAMES = ['manifest.json', 'popup.html', 'dist', 'icons'] as const;\n\nexport const BROWSER_EXT_REQUIRED_FILES = [\n  'manifest.json',\n  'popup.html',\n  'dist/background.js',\n  'dist/content.js',\n  'dist/popup.js',\n] as const;\n\nexport type BrowserExtBundledFrom = 'npm-dist' | 'git-dev' | 'electron-asar' | 'env-override';\n\nexport interface BrowserExtInstallMeta {\n  xopcVersion: string;\n  manifestVersion: string;\n  source: 'bundled';\n  bundledFrom: BrowserExtBundledFrom;\n  installedAt: string;\n  installPath: string;\n}\n\nexport interface BrowserExtDoctor {\n  bundledAvailable: boolean;\n  installed: boolean;\n  xopcVersion: string;\n  installedVersion?: string;\n  manifestVersion?: string;\n  extensionDir?: string;\n  cacheDir: string;\n  needsRefresh: boolean;\n  needsChromeReload?: boolean;\n  bundledFrom?: BrowserExtBundledFrom;\n  runtimeExtensionVersion?: string;\n}\n\nexport interface EnsureBrowserExtResult {\n  extensionDir: string;\n  xopcVersion: string;\n  copied: boolean;\n}\n\nfunction moduleDir(): string {\n  return dirname(fileURLToPath(import.meta.url));\n}\n\n/** Validate a directory contains a loadable extension tree. */\nexport function validateBrowserExtLayout(dir: string): boolean {\n  return BROWSER_EXT_REQUIRED_FILES.every((rel) => existsSync(join(dir, rel)));\n}\n\nfunction readManifestVersion(dir: string): string | undefined {\n  try {\n    const raw = readFileSync(join(dir, 'manifest.json'), 'utf8');\n    const parsed = JSON.parse(raw) as { version?: unknown };\n    return typeof parsed.version === 'string' ? parsed.version : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function readMeta(metaPath: string): Promise<BrowserExtInstallMeta | null> {\n  try {\n    const raw = await readFile(metaPath, 'utf8');\n    const parsed = JSON.parse(raw) as BrowserExtInstallMeta;\n    if (parsed && typeof parsed === 'object' && typeof parsed.xopcVersion === 'string') {\n      return parsed;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nfunction browserExtRoot(cacheDir: string): string {\n  return join(cacheDir, 'browser-ext');\n}\n\nfunction resolveMetaPath(cacheDir: string): string {\n  return join(browserExtRoot(cacheDir), META_FILENAME);\n}\n\n/** Resolve the installed extension directory (fixed `browser-ext/` root). */\nexport function resolveInstalledExtensionPath(\n  cacheDir: string,\n  _meta: BrowserExtInstallMeta | null,\n): string | null {\n  const root = browserExtRoot(cacheDir);\n  if (validateBrowserExtLayout(root)) {\n    return root;\n  }\n\n  return null;\n}\n\nfunction walkAncestorsForGitDevBundled(start: string): string | null {\n  let dir = start;\n  for (let i = 0; i < 12; i++) {\n    const candidate = join(dir, 'packages/browser-ext');\n    if (validateBrowserExtLayout(candidate)) {\n      return candidate;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/**\n * Resolve the bundled extension source directory (read-only).\n */\nexport async function resolveBundledBrowserExtDir(): Promise<{\n  dir: string;\n  bundledFrom: BrowserExtBundledFrom;\n} | null> {\n  const envOverride = process.env.XOPC_BROWSER_EXT_BUNDLED_ROOT?.trim();\n  if (envOverride && validateBrowserExtLayout(envOverride)) {\n    return { dir: envOverride, bundledFrom: 'env-override' };\n  }\n\n  const fromModule = join(moduleDir(), '../../../browser-ext');\n  if (validateBrowserExtLayout(fromModule)) {\n    const root = await resolvePackageRoot();\n    const bundledFrom: BrowserExtBundledFrom =\n      process.versions.electron && root && root.includes('app.asar') ? 'electron-asar' : 'npm-dist';\n    return { dir: fromModule, bundledFrom };\n  }\n\n  const gitDev = walkAncestorsForGitDevBundled(moduleDir());\n  if (gitDev) {\n    return { dir: gitDev, bundledFrom: 'git-dev' };\n  }\n\n  const root = await resolvePackageRoot();\n  if (root) {\n    const distBundled = join(root, 'dist/browser-ext');\n    if (validateBrowserExtLayout(distBundled)) {\n      const bundledFrom: BrowserExtBundledFrom =\n        process.versions.electron && root.includes('app.asar') ? 'electron-asar' : 'npm-dist';\n      return { dir: distBundled, bundledFrom };\n    }\n  }\n\n  return null;\n}\n\nexport function computeNeedsRefresh(params: {\n  force?: boolean;\n  bundledManifestVersion: string;\n  installedPath: string | null;\n  meta: BrowserExtInstallMeta | null;\n}): boolean {\n  if (params.force) return true;\n  if (!params.installedPath || !validateBrowserExtLayout(params.installedPath)) return true;\n\n  const installedManifest = readManifestVersion(params.installedPath);\n  if (!installedManifest || installedManifest !== params.bundledManifestVersion) return true;\n\n  if (!params.meta || params.meta.xopcVersion !== PACKAGE_VERSION) return true;\n\n  return false;\n}\n\nasync function cleanupStaleStaging(root: string): Promise<void> {\n  if (!existsSync(root)) return;\n  let entries: string[];\n  try {\n    entries = await readdir(root);\n  } catch {\n    return;\n  }\n  const now = Date.now();\n  for (const name of entries) {\n    if (!name.startsWith('.staging-')) continue;\n    const full = join(root, name);\n    try {\n      const st = statSync(full);\n      if (now - st.mtimeMs > STAGING_MAX_AGE_MS) {\n        await rm(full, { recursive: true, force: true });\n      }\n    } catch {\n      /* */\n    }\n  }\n}\n\nfunction removeInstalledArtifacts(root: string): void {\n  for (const name of INSTALLED_ARTIFACT_NAMES) {\n    const full = join(root, name);\n    if (existsSync(full)) {\n      rmSync(full, { recursive: true, force: true });\n    }\n  }\n}\n\nfunction promoteStagingToRoot(stagingDir: string, root: string): void {\n  removeInstalledArtifacts(root);\n  for (const name of readdirSync(stagingDir)) {\n    renameSync(join(stagingDir, name), join(root, name));\n  }\n  rmSync(stagingDir, { recursive: true, force: true });\n  if (!validateBrowserExtLayout(root)) {\n    throw new Error('Bundled browser extension copy failed validation');\n  }\n}\n\n/** Copy one bundled file (read/write works when src is inside Electron app.asar). */\nfunction copyBundledFile(src: string, dest: string): void {\n  mkdirSync(dirname(dest), { recursive: true });\n  writeFileSync(dest, readFileSync(src));\n}\n\nconst BROWSER_EXT_DIST_FILES = ['background.js', 'content.js', 'popup.js'] as const;\nconst BROWSER_EXT_ICON_FILES = ['icon-16.png', 'icon-32.png', 'icon-48.png', 'icon-128.png'] as const;\n\nfunction copyBundledTree(src: string, dest: string): void {\n  mkdirSync(dest, { recursive: true });\n  for (const name of ['manifest.json', 'popup.html']) {\n    copyBundledFile(join(src, name), join(dest, name));\n  }\n  for (const file of BROWSER_EXT_DIST_FILES) {\n    copyBundledFile(join(src, 'dist', file), join(dest, 'dist', file));\n  }\n  for (const icon of BROWSER_EXT_ICON_FILES) {\n    const iconSrc = join(src, 'icons', icon);\n    if (existsSync(iconSrc)) {\n      copyBundledFile(iconSrc, join(dest, 'icons', icon));\n    }\n  }\n  if (!validateBrowserExtLayout(dest)) {\n    throw new Error('Bundled browser extension copy failed validation');\n  }\n}\n\nexport async function browserExtDoctor(opts?: {\n  cacheDir?: string;\n  runtimeExtensionVersion?: string;\n}): Promise<BrowserExtDoctor> {\n  const resolvedCache = opts?.cacheDir?.trim()\n    ? assertCacheDir(opts.cacheDir)\n    : resolveBinDir();\n  const cacheDir = resolvedCache || resolveBinDir();\n\n  const bundled = await resolveBundledBrowserExtDir();\n  const bundledManifestVersion = bundled ? readManifestVersion(bundled.dir) : undefined;\n  const meta = await readMeta(resolveMetaPath(cacheDir));\n  const installedPath = resolveInstalledExtensionPath(cacheDir, meta);\n\n  const needsRefresh = bundled\n    ? computeNeedsRefresh({\n        force: false,\n        bundledManifestVersion: bundledManifestVersion ?? PACKAGE_VERSION,\n        installedPath,\n        meta,\n      })\n    : false;\n\n  const installed = Boolean(installedPath) && !needsRefresh;\n  const manifestVersion = installedPath ? readManifestVersion(installedPath) : undefined;\n\n  let needsChromeReload: boolean | undefined;\n  const runtimeVer = opts?.runtimeExtensionVersion?.trim();\n  if (runtimeVer && manifestVersion && runtimeVer !== manifestVersion) {\n    needsChromeReload = true;\n  }\n\n  return {\n    bundledAvailable: Boolean(bundled),\n    installed,\n    xopcVersion: PACKAGE_VERSION,\n    installedVersion: meta?.xopcVersion,\n    manifestVersion,\n    extensionDir: installedPath ?? undefined,\n    cacheDir,\n    needsRefresh,\n    needsChromeReload,\n    bundledFrom: bundled?.bundledFrom,\n    runtimeExtensionVersion: runtimeVer,\n  };\n}\n\nexport async function ensureBrowserExtensionArtifacts(opts?: {\n  force?: boolean;\n  cacheDir?: string;\n}): Promise<EnsureBrowserExtResult> {\n  const resolvedCache = opts?.cacheDir?.trim()\n    ? assertCacheDir(opts.cacheDir)\n    : resolveBinDir();\n  const cacheDir = resolvedCache || resolveBinDir();\n\n  const bundled = await resolveBundledBrowserExtDir();\n  if (!bundled) {\n    throw new Error(\n      'Bundled browser extension not found. Reinstall xopc or run from a built checkout (pnpm run build).',\n    );\n  }\n\n  const bundledManifestVersion = readManifestVersion(bundled.dir) ?? PACKAGE_VERSION;\n  const root = browserExtRoot(cacheDir);\n  mkdirSync(root, { recursive: true });\n  await cleanupStaleStaging(root);\n\n  const meta = await readMeta(resolveMetaPath(cacheDir));\n  const installedPath = resolveInstalledExtensionPath(cacheDir, meta);\n  const needsRefresh = computeNeedsRefresh({\n    force: opts?.force,\n    bundledManifestVersion,\n    installedPath,\n    meta,\n  });\n\n  const extensionDir = root;\n\n  if (!needsRefresh && installedPath) {\n    return {\n      extensionDir: installedPath,\n      xopcVersion: PACKAGE_VERSION,\n      copied: false,\n    };\n  }\n\n  const stagingDir = join(root, `.staging-${process.pid}`);\n\n  if (existsSync(stagingDir)) {\n    rmSync(stagingDir, { recursive: true, force: true });\n  }\n  copyBundledTree(bundled.dir, stagingDir);\n  promoteStagingToRoot(stagingDir, root);\n\n  const nextMeta: BrowserExtInstallMeta = {\n    xopcVersion: PACKAGE_VERSION,\n    manifestVersion: bundledManifestVersion,\n    source: 'bundled',\n    bundledFrom: bundled.bundledFrom,\n    installedAt: new Date().toISOString(),\n    installPath: extensionDir,\n  };\n  await writeTextAtomic(resolveMetaPath(cacheDir), JSON.stringify(nextMeta, null, 2));\n\n  log.info(\n    { extensionDir, xopcVersion: PACKAGE_VERSION, bundledFrom: bundled.bundledFrom },\n    'Browser extension artifacts installed',\n  );\n\n  return {\n    extensionDir,\n    xopcVersion: PACKAGE_VERSION,\n    copied: true,\n  };\n}\n\n/** Gateway startup hook: ensure extension artifacts for the fixed extension backend. */\nexport async function ensureBrowserExtensionOnStartup(_config: unknown): Promise<void> {\n  await ensureBrowserExtensionArtifacts();\n}\n\nexport async function readInstalledExtensionDir(cacheDir?: string): Promise<string | null> {\n  const dir = cacheDir?.trim() ? assertCacheDir(cacheDir) : resolveBinDir();\n  const resolved = dir || resolveBinDir();\n  const meta = await readMeta(resolveMetaPath(resolved));\n  return resolveInstalledExtensionPath(resolved, meta);\n}\n\nexport type BrowserExtensionOpenAction = 'chrome' | 'folder' | 'both';\n\nfunction spawnDetached(command: string, args: readonly string[]): void {\n  spawn(command, [...args], { stdio: 'ignore', detached: true }).unref();\n}\n\nfunction openChromeExtensionsPage(): void {\n  const chromeUrl = 'chrome://extensions';\n  if (process.platform === 'darwin') {\n    spawnDetached('open', ['-a', 'Google Chrome', chromeUrl]);\n    return;\n  }\n  if (process.platform === 'win32') {\n    spawnDetached('cmd', ['/c', 'start', 'chrome', chromeUrl]);\n    return;\n  }\n  spawnDetached('xdg-open', [chromeUrl]);\n}\n\nfunction revealFolderInFileManager(dir: string): void {\n  if (process.platform === 'darwin') {\n    spawnDetached('open', [dir]);\n    return;\n  }\n  if (process.platform === 'win32') {\n    spawnDetached('explorer', [dir]);\n    return;\n  }\n  spawnDetached('xdg-open', [dir]);\n}\n\n/**\n * Open chrome://extensions and/or reveal the installed extension folder on the gateway host.\n */\nexport async function openBrowserExtensionInstallUi(opts: {\n  action: BrowserExtensionOpenAction;\n  cacheDir?: string;\n}): Promise<{ extensionDir: string }> {\n  const doctor = await browserExtDoctor({ cacheDir: opts.cacheDir });\n  const dir = doctor.extensionDir;\n  if (!dir) {\n    throw new Error('Extension not installed. Run xopc browser extension install first.');\n  }\n\n  if (opts.action === 'chrome' || opts.action === 'both') {\n    openChromeExtensionsPage();\n  }\n  if (opts.action === 'folder' || opts.action === 'both') {\n    revealFolderInFileManager(dir);\n  }\n\n  return { extensionDir: dir };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;sBAoB2D;YACL;wBAEa;aACd;uBACG;AAExD,MAAM,MAAM,aAAa,oBAAoB;AAE7C,MAAM,gBAAgB;AACtB,MAAM,qBAAqB,OAAU;AACrC,MAAM,2BAA2B;CAAC;CAAiB;CAAc;CAAQ;CAAQ;AAEjF,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACD;AAiCD,SAAS,YAAoB;AAC3B,QAAO,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;;;AAIhD,SAAgB,yBAAyB,KAAsB;AAC7D,QAAO,2BAA2B,OAAO,QAAQ,WAAW,KAAK,KAAK,IAAI,CAAC,CAAC;;AAG9E,SAAS,oBAAoB,KAAiC;AAC5D,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,KAAK,gBAAgB,EAAE,OAAO;EAC5D,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,SAAO,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU,KAAA;SACvD;AACN;;;AAIJ,eAAe,SAAS,UAAyD;AAC/E,KAAI;EACF,MAAM,MAAM,MAAM,SAAS,UAAU,OAAO;EAC5C,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,UAAU,OAAO,WAAW,YAAY,OAAO,OAAO,gBAAgB,SACxE,QAAO;AAET,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,eAAe,UAA0B;AAChD,QAAO,KAAK,UAAU,cAAc;;AAGtC,SAAS,gBAAgB,UAA0B;AACjD,QAAO,KAAK,eAAe,SAAS,EAAE,cAAc;;;AAItD,SAAgB,8BACd,UACA,OACe;CACf,MAAM,OAAO,eAAe,SAAS;AACrC,KAAI,yBAAyB,KAAK,CAChC,QAAO;AAGT,QAAO;;AAGT,SAAS,8BAA8B,OAA8B;CACnE,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,YAAY,KAAK,KAAK,uBAAuB;AACnD,MAAI,yBAAyB,UAAU,CACrC,QAAO;EAET,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK;AACpB,QAAM;;AAER,QAAO;;;;;AAMT,eAAsB,8BAGZ;CACR,MAAM,cAAc,QAAQ,IAAI,+BAA+B,MAAM;AACrE,KAAI,eAAe,yBAAyB,YAAY,CACtD,QAAO;EAAE,KAAK;EAAa,aAAa;EAAgB;CAG1D,MAAM,aAAa,KAAK,WAAW,EAAE,uBAAuB;AAC5D,KAAI,yBAAyB,WAAW,EAAE;EACxC,MAAM,OAAO,MAAM,oBAAoB;AAGvC,SAAO;GAAE,KAAK;GAAY,aADxB,QAAQ,SAAS,YAAY,QAAQ,KAAK,SAAS,WAAW,GAAG,kBAAkB;GAC9C;;CAGzC,MAAM,SAAS,8BAA8B,WAAW,CAAC;AACzD,KAAI,OACF,QAAO;EAAE,KAAK;EAAQ,aAAa;EAAW;CAGhD,MAAM,OAAO,MAAM,oBAAoB;AACvC,KAAI,MAAM;EACR,MAAM,cAAc,KAAK,MAAM,mBAAmB;AAClD,MAAI,yBAAyB,YAAY,CAGvC,QAAO;GAAE,KAAK;GAAa,aADzB,QAAQ,SAAS,YAAY,KAAK,SAAS,WAAW,GAAG,kBAAkB;GACrC;;AAI5C,QAAO;;AAGT,SAAgB,oBAAoB,QAKxB;AACV,KAAI,OAAO,MAAO,QAAO;AACzB,KAAI,CAAC,OAAO,iBAAiB,CAAC,yBAAyB,OAAO,cAAc,CAAE,QAAO;CAErF,MAAM,oBAAoB,oBAAoB,OAAO,cAAc;AACnE,KAAI,CAAC,qBAAqB,sBAAsB,OAAO,uBAAwB,QAAO;AAEtF,KAAI,CAAC,OAAO,QAAQ,OAAO,KAAK,gBAAgB,gBAAiB,QAAO;AAExE,QAAO;;AAGT,eAAe,oBAAoB,MAA6B;AAC9D,KAAI,CAAC,WAAW,KAAK,CAAE;CACvB,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,QAAQ,KAAK;SACvB;AACN;;CAEF,MAAM,MAAM,KAAK,KAAK;AACtB,MAAK,MAAM,QAAQ,SAAS;AAC1B,MAAI,CAAC,KAAK,WAAW,YAAY,CAAE;EACnC,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,MAAI;AAEF,OAAI,MADO,SAAS,KACR,CAAC,UAAU,mBACrB,OAAM,GAAG,MAAM;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;UAE5C;;;AAMZ,SAAS,yBAAyB,MAAoB;AACpD,MAAK,MAAM,QAAQ,0BAA0B;EAC3C,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,MAAI,WAAW,KAAK,CAClB,QAAO,MAAM;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAKpD,SAAS,qBAAqB,YAAoB,MAAoB;AACpE,0BAAyB,KAAK;AAC9B,MAAK,MAAM,QAAQ,YAAY,WAAW,CACxC,YAAW,KAAK,YAAY,KAAK,EAAE,KAAK,MAAM,KAAK,CAAC;AAEtD,QAAO,YAAY;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AACpD,KAAI,CAAC,yBAAyB,KAAK,CACjC,OAAM,IAAI,MAAM,mDAAmD;;;AAKvE,SAAS,gBAAgB,KAAa,MAAoB;AACxD,WAAU,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC7C,eAAc,MAAM,aAAa,IAAI,CAAC;;AAGxC,MAAM,yBAAyB;CAAC;CAAiB;CAAc;CAAW;AAC1E,MAAM,yBAAyB;CAAC;CAAe;CAAe;CAAe;CAAe;AAE5F,SAAS,gBAAgB,KAAa,MAAoB;AACxD,WAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AACpC,MAAK,MAAM,QAAQ,CAAC,iBAAiB,aAAa,CAChD,iBAAgB,KAAK,KAAK,KAAK,EAAE,KAAK,MAAM,KAAK,CAAC;AAEpD,MAAK,MAAM,QAAQ,uBACjB,iBAAgB,KAAK,KAAK,QAAQ,KAAK,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC;AAEpE,MAAK,MAAM,QAAQ,wBAAwB;EACzC,MAAM,UAAU,KAAK,KAAK,SAAS,KAAK;AACxC,MAAI,WAAW,QAAQ,CACrB,iBAAgB,SAAS,KAAK,MAAM,SAAS,KAAK,CAAC;;AAGvD,KAAI,CAAC,yBAAyB,KAAK,CACjC,OAAM,IAAI,MAAM,mDAAmD;;AAIvE,eAAsB,iBAAiB,MAGT;CAI5B,MAAM,YAHgB,MAAM,UAAU,MAAM,GACxC,eAAe,KAAK,SAAS,GAC7B,eAAe,KACe,eAAe;CAEjD,MAAM,UAAU,MAAM,6BAA6B;CACnD,MAAM,yBAAyB,UAAU,oBAAoB,QAAQ,IAAI,GAAG,KAAA;CAC5E,MAAM,OAAO,MAAM,SAAS,gBAAgB,SAAS,CAAC;CACtD,MAAM,gBAAgB,8BAA8B,UAAU,KAAK;CAEnE,MAAM,eAAe,UACjB,oBAAoB;EAClB,OAAO;EACP,wBAAwB,0BAA0B;EAClD;EACA;EACD,CAAC,GACF;CAEJ,MAAM,YAAY,QAAQ,cAAc,IAAI,CAAC;CAC7C,MAAM,kBAAkB,gBAAgB,oBAAoB,cAAc,GAAG,KAAA;CAE7E,IAAI;CACJ,MAAM,aAAa,MAAM,yBAAyB,MAAM;AACxD,KAAI,cAAc,mBAAmB,eAAe,gBAClD,qBAAoB;AAGtB,QAAO;EACL,kBAAkB,QAAQ,QAAQ;EAClC;EACA,aAAa;EACb,kBAAkB,MAAM;EACxB;EACA,cAAc,iBAAiB,KAAA;EAC/B;EACA;EACA;EACA,aAAa,SAAS;EACtB,yBAAyB;EAC1B;;AAGH,eAAsB,gCAAgC,MAGlB;CAIlC,MAAM,YAHgB,MAAM,UAAU,MAAM,GACxC,eAAe,KAAK,SAAS,GAC7B,eAAe,KACe,eAAe;CAEjD,MAAM,UAAU,MAAM,6BAA6B;AACnD,KAAI,CAAC,QACH,OAAM,IAAI,MACR,qGACD;CAGH,MAAM,yBAAyB,oBAAoB,QAAQ,IAAI,IAAI;CACnE,MAAM,OAAO,eAAe,SAAS;AACrC,WAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AACpC,OAAM,oBAAoB,KAAK;CAE/B,MAAM,OAAO,MAAM,SAAS,gBAAgB,SAAS,CAAC;CACtD,MAAM,gBAAgB,8BAA8B,UAAU,KAAK;CACnE,MAAM,eAAe,oBAAoB;EACvC,OAAO,MAAM;EACb;EACA;EACA;EACD,CAAC;CAEF,MAAM,eAAe;AAErB,KAAI,CAAC,gBAAgB,cACnB,QAAO;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACT;CAGH,MAAM,aAAa,KAAK,MAAM,YAAY,QAAQ,MAAM;AAExD,KAAI,WAAW,WAAW,CACxB,QAAO,YAAY;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAEtD,iBAAgB,QAAQ,KAAK,WAAW;AACxC,sBAAqB,YAAY,KAAK;CAEtC,MAAM,WAAkC;EACtC,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,aAAa,QAAQ;EACrB,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC,aAAa;EACd;AACD,OAAM,gBAAgB,gBAAgB,SAAS,EAAE,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC;AAEnF,KAAI,KACF;EAAE;EAAc,aAAa;EAAiB,aAAa,QAAQ;EAAa,EAChF,wCACD;AAED,QAAO;EACL;EACA,aAAa;EACb,QAAQ;EACT;;;AAIH,eAAsB,gCAAgC,SAAiC;AACrF,OAAM,iCAAiC;;AAGzC,eAAsB,0BAA0B,UAA2C;CAEzF,MAAM,YADM,UAAU,MAAM,GAAG,eAAe,SAAS,GAAG,eAAe,KACjD,eAAe;AAEvC,QAAO,8BAA8B,UAAU,MAD5B,SAAS,gBAAgB,SAAS,CAAC,CACF;;AAKtD,SAAS,cAAc,SAAiB,MAA+B;AACrE,OAAM,SAAS,CAAC,GAAG,KAAK,EAAE;EAAE,OAAO;EAAU,UAAU;EAAM,CAAC,CAAC,OAAO;;AAGxE,SAAS,2BAAiC;CACxC,MAAM,YAAY;AAClB,KAAI,QAAQ,aAAa,UAAU;AACjC,gBAAc,QAAQ;GAAC;GAAM;GAAiB;GAAU,CAAC;AACzD;;AAEF,KAAI,QAAQ,aAAa,SAAS;AAChC,gBAAc,OAAO;GAAC;GAAM;GAAS;GAAU;GAAU,CAAC;AAC1D;;AAEF,eAAc,YAAY,CAAC,UAAU,CAAC;;AAGxC,SAAS,0BAA0B,KAAmB;AACpD,KAAI,QAAQ,aAAa,UAAU;AACjC,gBAAc,QAAQ,CAAC,IAAI,CAAC;AAC5B;;AAEF,KAAI,QAAQ,aAAa,SAAS;AAChC,gBAAc,YAAY,CAAC,IAAI,CAAC;AAChC;;AAEF,eAAc,YAAY,CAAC,IAAI,CAAC;;;;;AAMlC,eAAsB,8BAA8B,MAGd;CAEpC,MAAM,OAAM,MADS,iBAAiB,EAAE,UAAU,KAAK,UAAU,CAAC,EAC/C;AACnB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,qEAAqE;AAGvF,KAAI,KAAK,WAAW,YAAY,KAAK,WAAW,OAC9C,2BAA0B;AAE5B,KAAI,KAAK,WAAW,YAAY,KAAK,WAAW,OAC9C,2BAA0B,IAAI;AAGhC,QAAO,EAAE,cAAc,KAAK"}
+{"version":3,"file":"browser-ext-install.js","names":[],"sources":["../../../../src/browser/providers/browser-ext-install.ts"],"sourcesContent":["/**\n * Install bundled Chrome extension artifacts into {resolveBinDir()}/browser-ext/.\n * Fixed path — gateway upgrades overwrite in place so Chrome sideload paths stay stable.\n */\n\nimport {\n  existsSync,\n  mkdirSync,\n  readdirSync,\n  readFileSync,\n  renameSync,\n  rmSync,\n  statSync,\n  writeFileSync,\n} from 'node:fs';\nimport { readFile, readdir, rm } from 'node:fs/promises';\nimport { spawn } from 'node:child_process';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { resolveBinDir } from '../../config/paths.js';\nimport { resolvePackageRoot } from '../../infra/update-check.js';\nimport { writeTextAtomic } from '../../infra/write-file-atomic.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { assertCacheDir } from '../cache-dir-policy.js';\n\nconst log = createLogger('BrowserExtInstall');\n\nconst META_FILENAME = '.meta.json';\nconst STAGING_MAX_AGE_MS = 60 * 60 * 1000;\nconst INSTALLED_ARTIFACT_NAMES = ['manifest.json', 'popup.html', 'dist', 'icons'] as const;\n\nexport const BROWSER_EXT_REQUIRED_FILES = [\n  'manifest.json',\n  'popup.html',\n  'dist/background.js',\n  'dist/content.js',\n  'dist/popup.js',\n] as const;\n\nexport type BrowserExtBundledFrom = 'npm-dist' | 'git-dev' | 'electron-asar' | 'env-override';\n\nexport interface BrowserExtInstallMeta {\n  xopcVersion: string;\n  manifestVersion: string;\n  source: 'bundled';\n  bundledFrom: BrowserExtBundledFrom;\n  installedAt: string;\n  installPath: string;\n}\n\nexport interface BrowserExtDoctor {\n  bundledAvailable: boolean;\n  installed: boolean;\n  xopcVersion: string;\n  installedVersion?: string;\n  manifestVersion?: string;\n  extensionDir?: string;\n  cacheDir: string;\n  needsRefresh: boolean;\n  needsChromeReload?: boolean;\n  bundledFrom?: BrowserExtBundledFrom;\n  runtimeExtensionVersion?: string;\n}\n\nexport interface EnsureBrowserExtResult {\n  extensionDir: string;\n  xopcVersion: string;\n  copied: boolean;\n}\n\nfunction moduleDir(): string {\n  return dirname(fileURLToPath(import.meta.url));\n}\n\n/** Validate a directory contains a loadable extension tree. */\nexport function validateBrowserExtLayout(dir: string): boolean {\n  return BROWSER_EXT_REQUIRED_FILES.every((rel) => existsSync(join(dir, rel)));\n}\n\nfunction readManifestVersion(dir: string): string | undefined {\n  try {\n    const raw = readFileSync(join(dir, 'manifest.json'), 'utf8');\n    const parsed = JSON.parse(raw) as { version?: unknown };\n    return typeof parsed.version === 'string' ? parsed.version : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function readMeta(metaPath: string): Promise<BrowserExtInstallMeta | null> {\n  try {\n    const raw = await readFile(metaPath, 'utf8');\n    const parsed = JSON.parse(raw) as BrowserExtInstallMeta;\n    if (parsed && typeof parsed === 'object' && typeof parsed.xopcVersion === 'string') {\n      return parsed;\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nfunction browserExtRoot(cacheDir: string): string {\n  return join(cacheDir, 'browser-ext');\n}\n\nfunction resolveMetaPath(cacheDir: string): string {\n  return join(browserExtRoot(cacheDir), META_FILENAME);\n}\n\n/** Resolve the installed extension directory (fixed `browser-ext/` root). */\nexport function resolveInstalledExtensionPath(\n  cacheDir: string,\n  _meta: BrowserExtInstallMeta | null,\n): string | null {\n  const root = browserExtRoot(cacheDir);\n  if (validateBrowserExtLayout(root)) {\n    return root;\n  }\n\n  return null;\n}\n\nfunction walkAncestorsForGitDevBundled(start: string): string | null {\n  let dir = start;\n  for (let i = 0; i < 12; i++) {\n    const candidate = join(dir, 'packages/browser-ext');\n    if (validateBrowserExtLayout(candidate)) {\n      return candidate;\n    }\n    const parent = dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/**\n * Resolve the bundled extension source directory (read-only).\n */\nexport async function resolveBundledBrowserExtDir(): Promise<{\n  dir: string;\n  bundledFrom: BrowserExtBundledFrom;\n} | null> {\n  const envOverride = process.env.XOPC_BROWSER_EXT_BUNDLED_ROOT?.trim();\n  if (envOverride && validateBrowserExtLayout(envOverride)) {\n    return { dir: envOverride, bundledFrom: 'env-override' };\n  }\n\n  const fromModule = join(moduleDir(), '../../../browser-ext');\n  if (validateBrowserExtLayout(fromModule)) {\n    const root = await resolvePackageRoot();\n    const bundledFrom: BrowserExtBundledFrom =\n      process.versions.electron && root && root.includes('app.asar') ? 'electron-asar' : 'npm-dist';\n    return { dir: fromModule, bundledFrom };\n  }\n\n  const gitDev = walkAncestorsForGitDevBundled(moduleDir());\n  if (gitDev) {\n    return { dir: gitDev, bundledFrom: 'git-dev' };\n  }\n\n  const root = await resolvePackageRoot();\n  if (root) {\n    const distBundled = join(root, 'dist/browser-ext');\n    if (validateBrowserExtLayout(distBundled)) {\n      const bundledFrom: BrowserExtBundledFrom =\n        process.versions.electron && root.includes('app.asar') ? 'electron-asar' : 'npm-dist';\n      return { dir: distBundled, bundledFrom };\n    }\n  }\n\n  return null;\n}\n\nexport function computeNeedsRefresh(params: {\n  force?: boolean;\n  bundledManifestVersion: string;\n  installedPath: string | null;\n  meta: BrowserExtInstallMeta | null;\n}): boolean {\n  if (params.force) return true;\n  if (!params.installedPath || !validateBrowserExtLayout(params.installedPath)) return true;\n\n  const installedManifest = readManifestVersion(params.installedPath);\n  if (!installedManifest || installedManifest !== params.bundledManifestVersion) return true;\n\n  if (!params.meta || params.meta.xopcVersion !== PACKAGE_VERSION) return true;\n\n  return false;\n}\n\nasync function cleanupStaleStaging(root: string): Promise<void> {\n  if (!existsSync(root)) return;\n  let entries: string[];\n  try {\n    entries = await readdir(root);\n  } catch {\n    return;\n  }\n  const now = Date.now();\n  for (const name of entries) {\n    if (!name.startsWith('.staging-')) continue;\n    const full = join(root, name);\n    try {\n      const st = statSync(full);\n      if (now - st.mtimeMs > STAGING_MAX_AGE_MS) {\n        await rm(full, { recursive: true, force: true });\n      }\n    } catch {\n      /* */\n    }\n  }\n}\n\nfunction removeInstalledArtifacts(root: string): void {\n  for (const name of INSTALLED_ARTIFACT_NAMES) {\n    const full = join(root, name);\n    if (existsSync(full)) {\n      rmSync(full, { recursive: true, force: true });\n    }\n  }\n}\n\nfunction promoteStagingToRoot(stagingDir: string, root: string): void {\n  removeInstalledArtifacts(root);\n  for (const name of readdirSync(stagingDir)) {\n    renameSync(join(stagingDir, name), join(root, name));\n  }\n  rmSync(stagingDir, { recursive: true, force: true });\n  if (!validateBrowserExtLayout(root)) {\n    throw new Error('Bundled browser extension copy failed validation');\n  }\n}\n\n/** Copy one bundled file (read/write works when src is inside Electron app.asar). */\nfunction copyBundledFile(src: string, dest: string): void {\n  mkdirSync(dirname(dest), { recursive: true });\n  writeFileSync(dest, readFileSync(src));\n}\n\nconst BROWSER_EXT_DIST_FILES = ['background.js', 'content.js', 'popup.js'] as const;\nconst BROWSER_EXT_ICON_FILES = ['icon-16.png', 'icon-32.png', 'icon-48.png', 'icon-128.png'] as const;\n\nfunction copyBundledTree(src: string, dest: string): void {\n  mkdirSync(dest, { recursive: true });\n  for (const name of ['manifest.json', 'popup.html']) {\n    copyBundledFile(join(src, name), join(dest, name));\n  }\n  for (const file of BROWSER_EXT_DIST_FILES) {\n    copyBundledFile(join(src, 'dist', file), join(dest, 'dist', file));\n  }\n  for (const icon of BROWSER_EXT_ICON_FILES) {\n    const iconSrc = join(src, 'icons', icon);\n    if (existsSync(iconSrc)) {\n      copyBundledFile(iconSrc, join(dest, 'icons', icon));\n    }\n  }\n  if (!validateBrowserExtLayout(dest)) {\n    throw new Error('Bundled browser extension copy failed validation');\n  }\n}\n\nexport async function browserExtDoctor(opts?: {\n  cacheDir?: string;\n  runtimeExtensionVersion?: string;\n}): Promise<BrowserExtDoctor> {\n  const resolvedCache = opts?.cacheDir?.trim()\n    ? assertCacheDir(opts.cacheDir)\n    : resolveBinDir();\n  const cacheDir = resolvedCache || resolveBinDir();\n\n  const bundled = await resolveBundledBrowserExtDir();\n  const bundledManifestVersion = bundled ? readManifestVersion(bundled.dir) : undefined;\n  const meta = await readMeta(resolveMetaPath(cacheDir));\n  const installedPath = resolveInstalledExtensionPath(cacheDir, meta);\n\n  const needsRefresh = bundled\n    ? computeNeedsRefresh({\n        force: false,\n        bundledManifestVersion: bundledManifestVersion ?? PACKAGE_VERSION,\n        installedPath,\n        meta,\n      })\n    : false;\n\n  const installed = Boolean(installedPath) && !needsRefresh;\n  const manifestVersion = installedPath ? readManifestVersion(installedPath) : undefined;\n\n  let needsChromeReload: boolean | undefined;\n  const runtimeVer = opts?.runtimeExtensionVersion?.trim();\n  if (runtimeVer && manifestVersion && runtimeVer !== manifestVersion) {\n    needsChromeReload = true;\n  }\n\n  return {\n    bundledAvailable: Boolean(bundled),\n    installed,\n    xopcVersion: PACKAGE_VERSION,\n    installedVersion: meta?.xopcVersion,\n    manifestVersion,\n    extensionDir: installedPath ?? undefined,\n    cacheDir,\n    needsRefresh,\n    needsChromeReload,\n    bundledFrom: bundled?.bundledFrom,\n    runtimeExtensionVersion: runtimeVer,\n  };\n}\n\nexport async function ensureBrowserExtensionArtifacts(opts?: {\n  force?: boolean;\n  cacheDir?: string;\n}): Promise<EnsureBrowserExtResult> {\n  const resolvedCache = opts?.cacheDir?.trim()\n    ? assertCacheDir(opts.cacheDir)\n    : resolveBinDir();\n  const cacheDir = resolvedCache || resolveBinDir();\n\n  const bundled = await resolveBundledBrowserExtDir();\n  if (!bundled) {\n    throw new Error(\n      'Bundled browser extension not found. Reinstall xopc or run from a built checkout (pnpm run build).',\n    );\n  }\n\n  const bundledManifestVersion = readManifestVersion(bundled.dir) ?? PACKAGE_VERSION;\n  const root = browserExtRoot(cacheDir);\n  mkdirSync(root, { recursive: true });\n  await cleanupStaleStaging(root);\n\n  const meta = await readMeta(resolveMetaPath(cacheDir));\n  const installedPath = resolveInstalledExtensionPath(cacheDir, meta);\n  const needsRefresh = computeNeedsRefresh({\n    force: opts?.force,\n    bundledManifestVersion,\n    installedPath,\n    meta,\n  });\n\n  const extensionDir = root;\n\n  if (!needsRefresh && installedPath) {\n    return {\n      extensionDir: installedPath,\n      xopcVersion: PACKAGE_VERSION,\n      copied: false,\n    };\n  }\n\n  const stagingDir = join(root, `.staging-${process.pid}`);\n\n  if (existsSync(stagingDir)) {\n    rmSync(stagingDir, { recursive: true, force: true });\n  }\n  copyBundledTree(bundled.dir, stagingDir);\n  promoteStagingToRoot(stagingDir, root);\n\n  const nextMeta: BrowserExtInstallMeta = {\n    xopcVersion: PACKAGE_VERSION,\n    manifestVersion: bundledManifestVersion,\n    source: 'bundled',\n    bundledFrom: bundled.bundledFrom,\n    installedAt: new Date().toISOString(),\n    installPath: extensionDir,\n  };\n  await writeTextAtomic(resolveMetaPath(cacheDir), JSON.stringify(nextMeta, null, 2));\n\n  log.info(\n    { extensionDir, xopcVersion: PACKAGE_VERSION, bundledFrom: bundled.bundledFrom },\n    'Browser extension artifacts installed',\n  );\n\n  return {\n    extensionDir,\n    xopcVersion: PACKAGE_VERSION,\n    copied: true,\n  };\n}\n\n/** Gateway startup hook: ensure extension artifacts for the fixed extension backend. */\nexport async function ensureBrowserExtensionOnStartup(_config: unknown): Promise<void> {\n  await ensureBrowserExtensionArtifacts();\n}\n\nexport async function readInstalledExtensionDir(cacheDir?: string): Promise<string | null> {\n  const dir = cacheDir?.trim() ? assertCacheDir(cacheDir) : resolveBinDir();\n  const resolved = dir || resolveBinDir();\n  const meta = await readMeta(resolveMetaPath(resolved));\n  return resolveInstalledExtensionPath(resolved, meta);\n}\n\nexport type BrowserExtensionOpenAction = 'chrome' | 'folder' | 'both';\n\ntype ExtensionManagerBrowser = 'chrome' | 'edge';\n\ninterface ExtensionManagerTarget {\n  browser: ExtensionManagerBrowser;\n  executablePath: string;\n  url: string;\n}\n\nfunction spawnDetached(command: string, args: readonly string[]): void {\n  spawn(command, [...args], { stdio: 'ignore', detached: true }).unref();\n}\n\nfunction windowsExtensionManagerCandidates(env: NodeJS.ProcessEnv): ExtensionManagerTarget[] {\n  const programFiles = [env.PROGRAMFILES, env['PROGRAMFILES(X86)'], env.LOCALAPPDATA].filter(\n    (path): path is string => Boolean(path?.trim()),\n  );\n  const candidates: ExtensionManagerTarget[] = [];\n\n  for (const root of programFiles) {\n    candidates.push({\n      browser: 'chrome',\n      executablePath: join(root, 'Google', 'Chrome', 'Application', 'chrome.exe'),\n      url: 'chrome://extensions/',\n    });\n  }\n  for (const root of programFiles) {\n    candidates.push({\n      browser: 'edge',\n      executablePath: join(root, 'Microsoft', 'Edge', 'Application', 'msedge.exe'),\n      url: 'edge://extensions/',\n    });\n  }\n\n  return candidates;\n}\n\nexport function resolveWindowsExtensionManager(\n  env: NodeJS.ProcessEnv = process.env,\n): ExtensionManagerTarget | null {\n  return windowsExtensionManagerCandidates(env).find(({ executablePath }) => existsSync(executablePath)) ?? null;\n}\n\nfunction openBrowserExtensionManager(): ExtensionManagerBrowser | undefined {\n  const chromeUrl = 'chrome://extensions/';\n  if (process.platform === 'darwin') {\n    spawnDetached('open', ['-a', 'Google Chrome', chromeUrl]);\n    return 'chrome';\n  }\n  if (process.platform === 'win32') {\n    const target = resolveWindowsExtensionManager();\n    if (!target) {\n      throw new Error(\n        'No compatible browser found. Install Google Chrome or Microsoft Edge, then try again.',\n      );\n    }\n    spawnDetached(target.executablePath, [target.url]);\n    return target.browser;\n  }\n  spawnDetached('xdg-open', [chromeUrl]);\n  return 'chrome';\n}\n\nfunction revealFolderInFileManager(dir: string): void {\n  if (process.platform === 'darwin') {\n    spawnDetached('open', [dir]);\n    return;\n  }\n  if (process.platform === 'win32') {\n    spawnDetached('explorer', [dir]);\n    return;\n  }\n  spawnDetached('xdg-open', [dir]);\n}\n\n/**\n * Open the compatible browser's extension manager and/or reveal the installed extension folder\n * on the gateway host.\n */\nexport async function openBrowserExtensionInstallUi(opts: {\n  action: BrowserExtensionOpenAction;\n  cacheDir?: string;\n}): Promise<{ extensionDir: string; browser?: ExtensionManagerBrowser }> {\n  const doctor = await browserExtDoctor({ cacheDir: opts.cacheDir });\n  const dir = doctor.extensionDir;\n  if (!dir) {\n    throw new Error('Extension not installed. Run xopc browser extension install first.');\n  }\n\n  let browser: ExtensionManagerBrowser | undefined;\n  if (opts.action === 'chrome' || opts.action === 'both') {\n    browser = openBrowserExtensionManager();\n  }\n  if (opts.action === 'folder' || opts.action === 'both') {\n    revealFolderInFileManager(dir);\n  }\n\n  return { extensionDir: dir, browser };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;sBAoB2D;YACL;wBAEa;aACd;uBACG;AAExD,MAAM,MAAM,aAAa,oBAAoB;AAE7C,MAAM,gBAAgB;AACtB,MAAM,qBAAqB,OAAU;AACrC,MAAM,2BAA2B;CAAC;CAAiB;CAAc;CAAQ;CAAQ;AAEjF,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACA;CACD;AAiCD,SAAS,YAAoB;AAC3B,QAAO,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;;;AAIhD,SAAgB,yBAAyB,KAAsB;AAC7D,QAAO,2BAA2B,OAAO,QAAQ,WAAW,KAAK,KAAK,IAAI,CAAC,CAAC;;AAG9E,SAAS,oBAAoB,KAAiC;AAC5D,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,KAAK,gBAAgB,EAAE,OAAO;EAC5D,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,SAAO,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU,KAAA;SACvD;AACN;;;AAIJ,eAAe,SAAS,UAAyD;AAC/E,KAAI;EACF,MAAM,MAAM,MAAM,SAAS,UAAU,OAAO;EAC5C,MAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,UAAU,OAAO,WAAW,YAAY,OAAO,OAAO,gBAAgB,SACxE,QAAO;AAET,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,eAAe,UAA0B;AAChD,QAAO,KAAK,UAAU,cAAc;;AAGtC,SAAS,gBAAgB,UAA0B;AACjD,QAAO,KAAK,eAAe,SAAS,EAAE,cAAc;;;AAItD,SAAgB,8BACd,UACA,OACe;CACf,MAAM,OAAO,eAAe,SAAS;AACrC,KAAI,yBAAyB,KAAK,CAChC,QAAO;AAGT,QAAO;;AAGT,SAAS,8BAA8B,OAA8B;CACnE,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,KAAK;EAC3B,MAAM,YAAY,KAAK,KAAK,uBAAuB;AACnD,MAAI,yBAAyB,UAAU,CACrC,QAAO;EAET,MAAM,SAAS,QAAQ,IAAI;AAC3B,MAAI,WAAW,IAAK;AACpB,QAAM;;AAER,QAAO;;;;;AAMT,eAAsB,8BAGZ;CACR,MAAM,cAAc,QAAQ,IAAI,+BAA+B,MAAM;AACrE,KAAI,eAAe,yBAAyB,YAAY,CACtD,QAAO;EAAE,KAAK;EAAa,aAAa;EAAgB;CAG1D,MAAM,aAAa,KAAK,WAAW,EAAE,uBAAuB;AAC5D,KAAI,yBAAyB,WAAW,EAAE;EACxC,MAAM,OAAO,MAAM,oBAAoB;AAGvC,SAAO;GAAE,KAAK;GAAY,aADxB,QAAQ,SAAS,YAAY,QAAQ,KAAK,SAAS,WAAW,GAAG,kBAAkB;GAC9C;;CAGzC,MAAM,SAAS,8BAA8B,WAAW,CAAC;AACzD,KAAI,OACF,QAAO;EAAE,KAAK;EAAQ,aAAa;EAAW;CAGhD,MAAM,OAAO,MAAM,oBAAoB;AACvC,KAAI,MAAM;EACR,MAAM,cAAc,KAAK,MAAM,mBAAmB;AAClD,MAAI,yBAAyB,YAAY,CAGvC,QAAO;GAAE,KAAK;GAAa,aADzB,QAAQ,SAAS,YAAY,KAAK,SAAS,WAAW,GAAG,kBAAkB;GACrC;;AAI5C,QAAO;;AAGT,SAAgB,oBAAoB,QAKxB;AACV,KAAI,OAAO,MAAO,QAAO;AACzB,KAAI,CAAC,OAAO,iBAAiB,CAAC,yBAAyB,OAAO,cAAc,CAAE,QAAO;CAErF,MAAM,oBAAoB,oBAAoB,OAAO,cAAc;AACnE,KAAI,CAAC,qBAAqB,sBAAsB,OAAO,uBAAwB,QAAO;AAEtF,KAAI,CAAC,OAAO,QAAQ,OAAO,KAAK,gBAAgB,gBAAiB,QAAO;AAExE,QAAO;;AAGT,eAAe,oBAAoB,MAA6B;AAC9D,KAAI,CAAC,WAAW,KAAK,CAAE;CACvB,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,QAAQ,KAAK;SACvB;AACN;;CAEF,MAAM,MAAM,KAAK,KAAK;AACtB,MAAK,MAAM,QAAQ,SAAS;AAC1B,MAAI,CAAC,KAAK,WAAW,YAAY,CAAE;EACnC,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,MAAI;AAEF,OAAI,MADO,SAAS,KACR,CAAC,UAAU,mBACrB,OAAM,GAAG,MAAM;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;UAE5C;;;AAMZ,SAAS,yBAAyB,MAAoB;AACpD,MAAK,MAAM,QAAQ,0BAA0B;EAC3C,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,MAAI,WAAW,KAAK,CAClB,QAAO,MAAM;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;;;AAKpD,SAAS,qBAAqB,YAAoB,MAAoB;AACpE,0BAAyB,KAAK;AAC9B,MAAK,MAAM,QAAQ,YAAY,WAAW,CACxC,YAAW,KAAK,YAAY,KAAK,EAAE,KAAK,MAAM,KAAK,CAAC;AAEtD,QAAO,YAAY;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AACpD,KAAI,CAAC,yBAAyB,KAAK,CACjC,OAAM,IAAI,MAAM,mDAAmD;;;AAKvE,SAAS,gBAAgB,KAAa,MAAoB;AACxD,WAAU,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC7C,eAAc,MAAM,aAAa,IAAI,CAAC;;AAGxC,MAAM,yBAAyB;CAAC;CAAiB;CAAc;CAAW;AAC1E,MAAM,yBAAyB;CAAC;CAAe;CAAe;CAAe;CAAe;AAE5F,SAAS,gBAAgB,KAAa,MAAoB;AACxD,WAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AACpC,MAAK,MAAM,QAAQ,CAAC,iBAAiB,aAAa,CAChD,iBAAgB,KAAK,KAAK,KAAK,EAAE,KAAK,MAAM,KAAK,CAAC;AAEpD,MAAK,MAAM,QAAQ,uBACjB,iBAAgB,KAAK,KAAK,QAAQ,KAAK,EAAE,KAAK,MAAM,QAAQ,KAAK,CAAC;AAEpE,MAAK,MAAM,QAAQ,wBAAwB;EACzC,MAAM,UAAU,KAAK,KAAK,SAAS,KAAK;AACxC,MAAI,WAAW,QAAQ,CACrB,iBAAgB,SAAS,KAAK,MAAM,SAAS,KAAK,CAAC;;AAGvD,KAAI,CAAC,yBAAyB,KAAK,CACjC,OAAM,IAAI,MAAM,mDAAmD;;AAIvE,eAAsB,iBAAiB,MAGT;CAI5B,MAAM,YAHgB,MAAM,UAAU,MAAM,GACxC,eAAe,KAAK,SAAS,GAC7B,eAAe,KACe,eAAe;CAEjD,MAAM,UAAU,MAAM,6BAA6B;CACnD,MAAM,yBAAyB,UAAU,oBAAoB,QAAQ,IAAI,GAAG,KAAA;CAC5E,MAAM,OAAO,MAAM,SAAS,gBAAgB,SAAS,CAAC;CACtD,MAAM,gBAAgB,8BAA8B,UAAU,KAAK;CAEnE,MAAM,eAAe,UACjB,oBAAoB;EAClB,OAAO;EACP,wBAAwB,0BAA0B;EAClD;EACA;EACD,CAAC,GACF;CAEJ,MAAM,YAAY,QAAQ,cAAc,IAAI,CAAC;CAC7C,MAAM,kBAAkB,gBAAgB,oBAAoB,cAAc,GAAG,KAAA;CAE7E,IAAI;CACJ,MAAM,aAAa,MAAM,yBAAyB,MAAM;AACxD,KAAI,cAAc,mBAAmB,eAAe,gBAClD,qBAAoB;AAGtB,QAAO;EACL,kBAAkB,QAAQ,QAAQ;EAClC;EACA,aAAa;EACb,kBAAkB,MAAM;EACxB;EACA,cAAc,iBAAiB,KAAA;EAC/B;EACA;EACA;EACA,aAAa,SAAS;EACtB,yBAAyB;EAC1B;;AAGH,eAAsB,gCAAgC,MAGlB;CAIlC,MAAM,YAHgB,MAAM,UAAU,MAAM,GACxC,eAAe,KAAK,SAAS,GAC7B,eAAe,KACe,eAAe;CAEjD,MAAM,UAAU,MAAM,6BAA6B;AACnD,KAAI,CAAC,QACH,OAAM,IAAI,MACR,qGACD;CAGH,MAAM,yBAAyB,oBAAoB,QAAQ,IAAI,IAAI;CACnE,MAAM,OAAO,eAAe,SAAS;AACrC,WAAU,MAAM,EAAE,WAAW,MAAM,CAAC;AACpC,OAAM,oBAAoB,KAAK;CAE/B,MAAM,OAAO,MAAM,SAAS,gBAAgB,SAAS,CAAC;CACtD,MAAM,gBAAgB,8BAA8B,UAAU,KAAK;CACnE,MAAM,eAAe,oBAAoB;EACvC,OAAO,MAAM;EACb;EACA;EACA;EACD,CAAC;CAEF,MAAM,eAAe;AAErB,KAAI,CAAC,gBAAgB,cACnB,QAAO;EACL,cAAc;EACd,aAAa;EACb,QAAQ;EACT;CAGH,MAAM,aAAa,KAAK,MAAM,YAAY,QAAQ,MAAM;AAExD,KAAI,WAAW,WAAW,CACxB,QAAO,YAAY;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAEtD,iBAAgB,QAAQ,KAAK,WAAW;AACxC,sBAAqB,YAAY,KAAK;CAEtC,MAAM,WAAkC;EACtC,aAAa;EACb,iBAAiB;EACjB,QAAQ;EACR,aAAa,QAAQ;EACrB,8BAAa,IAAI,MAAM,EAAC,aAAa;EACrC,aAAa;EACd;AACD,OAAM,gBAAgB,gBAAgB,SAAS,EAAE,KAAK,UAAU,UAAU,MAAM,EAAE,CAAC;AAEnF,KAAI,KACF;EAAE;EAAc,aAAa;EAAiB,aAAa,QAAQ;EAAa,EAChF,wCACD;AAED,QAAO;EACL;EACA,aAAa;EACb,QAAQ;EACT;;;AAIH,eAAsB,gCAAgC,SAAiC;AACrF,OAAM,iCAAiC;;AAGzC,eAAsB,0BAA0B,UAA2C;CAEzF,MAAM,YADM,UAAU,MAAM,GAAG,eAAe,SAAS,GAAG,eAAe,KACjD,eAAe;AAEvC,QAAO,8BAA8B,UAAU,MAD5B,SAAS,gBAAgB,SAAS,CAAC,CACF;;AAatD,SAAS,cAAc,SAAiB,MAA+B;AACrE,OAAM,SAAS,CAAC,GAAG,KAAK,EAAE;EAAE,OAAO;EAAU,UAAU;EAAM,CAAC,CAAC,OAAO;;AAGxE,SAAS,kCAAkC,KAAkD;CAC3F,MAAM,eAAe;EAAC,IAAI;EAAc,IAAI;EAAsB,IAAI;EAAa,CAAC,QACjF,SAAyB,QAAQ,MAAM,MAAM,CAAC,CAChD;CACD,MAAM,aAAuC,EAAE;AAE/C,MAAK,MAAM,QAAQ,aACjB,YAAW,KAAK;EACd,SAAS;EACT,gBAAgB,KAAK,MAAM,UAAU,UAAU,eAAe,aAAa;EAC3E,KAAK;EACN,CAAC;AAEJ,MAAK,MAAM,QAAQ,aACjB,YAAW,KAAK;EACd,SAAS;EACT,gBAAgB,KAAK,MAAM,aAAa,QAAQ,eAAe,aAAa;EAC5E,KAAK;EACN,CAAC;AAGJ,QAAO;;AAGT,SAAgB,+BACd,MAAyB,QAAQ,KACF;AAC/B,QAAO,kCAAkC,IAAI,CAAC,MAAM,EAAE,qBAAqB,WAAW,eAAe,CAAC,IAAI;;AAG5G,SAAS,8BAAmE;CAC1E,MAAM,YAAY;AAClB,KAAI,QAAQ,aAAa,UAAU;AACjC,gBAAc,QAAQ;GAAC;GAAM;GAAiB;GAAU,CAAC;AACzD,SAAO;;AAET,KAAI,QAAQ,aAAa,SAAS;EAChC,MAAM,SAAS,gCAAgC;AAC/C,MAAI,CAAC,OACH,OAAM,IAAI,MACR,wFACD;AAEH,gBAAc,OAAO,gBAAgB,CAAC,OAAO,IAAI,CAAC;AAClD,SAAO,OAAO;;AAEhB,eAAc,YAAY,CAAC,UAAU,CAAC;AACtC,QAAO;;AAGT,SAAS,0BAA0B,KAAmB;AACpD,KAAI,QAAQ,aAAa,UAAU;AACjC,gBAAc,QAAQ,CAAC,IAAI,CAAC;AAC5B;;AAEF,KAAI,QAAQ,aAAa,SAAS;AAChC,gBAAc,YAAY,CAAC,IAAI,CAAC;AAChC;;AAEF,eAAc,YAAY,CAAC,IAAI,CAAC;;;;;;AAOlC,eAAsB,8BAA8B,MAGqB;CAEvE,MAAM,OAAM,MADS,iBAAiB,EAAE,UAAU,KAAK,UAAU,CAAC,EAC/C;AACnB,KAAI,CAAC,IACH,OAAM,IAAI,MAAM,qEAAqE;CAGvF,IAAI;AACJ,KAAI,KAAK,WAAW,YAAY,KAAK,WAAW,OAC9C,WAAU,6BAA6B;AAEzC,KAAI,KAAK,WAAW,YAAY,KAAK,WAAW,OAC9C,2BAA0B,IAAI;AAGhC,QAAO;EAAE,cAAc;EAAK;EAAS"}

package/dist/src/capabilities/store-connector.d.ts

@@ -7,7 +7,6 @@ export type StoreConnectorInstallPlan = {
     definition: ConnectorDefinition;
     permissions: ConnectorPermissions;
     requiresRestart: false;
-    requiresOAuth: boolean;
 };
 export declare function listStoreConnectors(config: Config, params: SkillsStoreListParams): Promise<import("../agent/skills/skills-marketplace.js").SkillsStoreListResponse>;
 export declare function getStoreConnectorInstallPlan(config: Config, packageName: string, version?: string): Promise<StoreConnectorInstallPlan>;

package/dist/src/capabilities/store-connector.js

@@ -79,7 +79,8 @@ function readConnectorManifest(value, packageName, version, sha256) {
 	const transport = serverTemplate.transport;
 	if (!localPackage && transport !== "streamable-http" && transport !== "sse") throw new Error("Store connectors must use streamable-http or sse transport.");
 	const authMode = asRecord(manifest.auth, "Connector auth").mode;
-	if (authMode !== "none" && authMode !== "apiKey" && authMode !== "oauth") throw new Error("Connector auth mode must be none, apiKey, or oauth.");
+	if (authMode !== "none" && authMode !== "apiKey") throw new Error("Store connectors support only none or apiKey authentication.");
+	const normalizedAuth = { mode: authMode };
 	const category = asString(manifest.category, "Connector category");
 	if (![
 		"code",
@@ -97,7 +98,6 @@ function readConnectorManifest(value, packageName, version, sha256) {
 		"context",
 		"events",
 		"auth.apiKey",
-		"auth.oauth",
 		"runtime.mcp.stdio",
 		"runtime.mcp.sse",
 		"runtime.mcp.streamableHttp"
@@ -118,7 +118,7 @@ function readConnectorManifest(value, packageName, version, sha256) {
 		source: "store",
 		capabilities,
 		...Array.isArray(manifest.tags) ? { tags: asStringArray(manifest.tags, "Connector tags") } : {},
-		auth: { mode: authMode },
+		auth: normalizedAuth,
 		setup,
 		runtime: {
 			type: "mcp",
@@ -173,13 +173,11 @@ async function getStoreConnectorInstallPlan(config, packageName, version) {
 		version: detail.latestVersion.version,
 		permissions: definition.permissions ?? {},
 		requiresRestart: false,
-		requiresOAuth: definition.auth.mode === "oauth",
 		definition
 	};
 }
 async function installStoreConnector(config, packageName, input, version) {
 	const plan = await getStoreConnectorInstallPlan(config, packageName, version);
-	if (plan.requiresOAuth && plan.definition.id !== "github") throw new Error("OAuth installation for store connectors is not available yet. Use an API-key connector or the built-in GitHub connector.");
 	return {
 		instance: await installConnectorDefinition(config, plan.definition, input),
 		plan

package/dist/src/capabilities/store-connector.js.map

@@ -1 +1 @@
-{"version":3,"file":"store-connector.js","names":[],"sources":["../../../src/capabilities/store-connector.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { isIP } from 'node:net';\n\nimport AdmZip from 'adm-zip';\n\nimport type { Config } from '../config/schema.js';\nimport { installConnectorDefinition } from '../connectors/install.js';\nimport type {\n  ConnectorDefinition,\n  ConnectorInstallInput,\n  ConnectorPermissions,\n} from '../connectors/types.js';\nimport {\n  downloadConnectorStoreZipBuffer,\n  fetchStoreConnectorPackageDetail,\n  listConnectorPackages,\n  resolveSkillsStoreBaseUrl,\n  type SkillsStoreListParams,\n} from '../agent/skills/marketplace/adapters/store/store-api-client.js';\n\ntype JsonRecord = Record<string, unknown>;\n\nexport type StoreConnectorInstallPlan = {\n  packageName: string;\n  version: string;\n  definition: ConnectorDefinition;\n  permissions: ConnectorPermissions;\n  requiresRestart: false;\n  requiresOAuth: boolean;\n};\n\nfunction asRecord(value: unknown, label: string): JsonRecord {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object.`);\n  }\n  return value as JsonRecord;\n}\n\nfunction asString(value: unknown, label: string): string {\n  if (typeof value !== 'string' || !value.trim()) {\n    throw new Error(`${label} must be a non-empty string.`);\n  }\n  return value.trim();\n}\n\nfunction asStringArray(value: unknown, label: string): string[] {\n  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string' || !item.trim())) {\n    throw new Error(`${label} must be an array of non-empty strings.`);\n  }\n  return value.map((item) => item.trim());\n}\n\nconst NPM_PACKAGE_NAME = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/;\nconst EXACT_SEMVER = /^v?(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/;\n\nfunction assertSafeRemoteUrl(value: unknown): string {\n  const urlString = asString(value, 'Connector MCP endpoint');\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    throw new Error('Connector MCP endpoint must be a valid URL.');\n  }\n  const hostname = url.hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (\n    url.protocol !== 'https:' ||\n    url.username ||\n    url.password ||\n    hostname === 'localhost' ||\n    hostname.endsWith('.localhost') ||\n    isIP(hostname)\n  ) {\n    throw new Error('Store connectors must use a public HTTPS MCP endpoint.');\n  }\n  return url.toString();\n}\n\nfunction readPermissions(value: unknown, isLocal: boolean): ConnectorPermissions {\n  const permissions = asRecord(value, 'Connector permissions');\n  if (permissions.localExec !== isLocal) {\n    if (isLocal) throw new Error('Local Store connectors must explicitly allow local command execution.');\n    throw new Error('Store connectors must explicitly deny local command execution.');\n  }\n  const filesystem = permissions.filesystem === undefined\n    ? []\n    : asStringArray(permissions.filesystem, 'Connector filesystem permissions');\n  if (filesystem.length > 0) {\n    throw new Error('Store connectors cannot request filesystem access.');\n  }\n  const networkDomains = asStringArray(permissions.networkDomains, 'Connector network domains');\n  if (!isLocal && networkDomains.length === 0) {\n    throw new Error('Store connectors must declare at least one network domain.');\n  }\n  return {\n    ...(permissions.data === undefined ? {} : { data: asStringArray(permissions.data, 'Connector data permissions') }),\n    networkDomains,\n    localExec: isLocal,\n    filesystem,\n  };\n}\n\nfunction readPinnedLocalRuntime(runtime: JsonRecord, template: JsonRecord): { registry: 'npm'; name: string; version: string } | null {\n  if (runtime.localPackage === undefined) return null;\n  const localPackage = asRecord(runtime.localPackage, 'Connector localPackage');\n  if (localPackage.registry !== 'npm') {\n    throw new Error('Local Store connectors must use the npm registry.');\n  }\n  const name = asString(localPackage.name, 'Connector local package name');\n  const version = asString(localPackage.version, 'Connector local package version');\n  if (!NPM_PACKAGE_NAME.test(name) || !EXACT_SEMVER.test(version)) {\n    throw new Error('Local Store connectors must use a valid exact npm package version.');\n  }\n  if (template.command !== 'npx' ||\n    JSON.stringify(asStringArray(template.args, 'Connector local MCP arguments')) !== JSON.stringify(['--yes', `${name}@${version}`])) {\n    throw new Error('Local Store connectors must use the pinned npx launch form.');\n  }\n  for (const field of ['url', 'env', 'cwd', 'workingDirectory', 'headers', 'transport']) {\n    if (field in template) throw new Error('Local Store connectors cannot define additional MCP process fields.');\n  }\n  return { registry: 'npm', name, version };\n}\n\nfunction readConnectorManifest(\n  value: unknown,\n  packageName: string,\n  version: string,\n  sha256: string,\n): ConnectorDefinition {\n  const manifest = asRecord(value, 'Connector manifest');\n  if (asString(manifest.id, 'Connector id') !== packageName) {\n    throw new Error('Connector manifest id does not match the store package name.');\n  }\n  const runtime = asRecord(manifest.runtime, 'Connector runtime');\n  if (runtime.type !== 'mcp') {\n    throw new Error('Store connectors must use the MCP runtime.');\n  }\n  const serverTemplate = asRecord(runtime.serverTemplate, 'Connector MCP serverTemplate');\n  const localPackage = readPinnedLocalRuntime(runtime, serverTemplate);\n  const transport = serverTemplate.transport;\n  if (!localPackage && transport !== 'streamable-http' && transport !== 'sse') {\n    throw new Error('Store connectors must use streamable-http or sse transport.');\n  }\n  const auth = asRecord(manifest.auth, 'Connector auth');\n  const authMode = auth.mode;\n  if (authMode !== 'none' && authMode !== 'apiKey' && authMode !== 'oauth') {\n    throw new Error('Connector auth mode must be none, apiKey, or oauth.');\n  }\n  const category = asString(manifest.category, 'Connector category');\n  if (!['code', 'docs', 'browser', 'data', 'automation', 'custom'].includes(category)) {\n    throw new Error(`Unsupported connector category: ${category}`);\n  }\n  const capabilities = asStringArray(manifest.capabilities, 'Connector capabilities');\n  const allowedCapabilities = new Set([\n    'tools', 'resources', 'prompts', 'context', 'events', 'auth.apiKey', 'auth.oauth',\n    'runtime.mcp.stdio', 'runtime.mcp.sse', 'runtime.mcp.streamableHttp',\n  ]);\n  if (capabilities.some((capability) => !allowedCapabilities.has(capability))) {\n    throw new Error('Connector manifest contains an unsupported capability.');\n  }\n  const setup = manifest.setup === undefined ? {} : asRecord(manifest.setup, 'Connector setup');\n  const permissions = readPermissions(manifest.permissions, Boolean(localPackage));\n  const endpoint = localPackage ? undefined : assertSafeRemoteUrl(serverTemplate.url);\n  const hostname = endpoint ? new URL(endpoint).hostname : undefined;\n  if (hostname && permissions.networkDomains?.length && !permissions.networkDomains.includes(hostname)) {\n    throw new Error('Connector network permissions must include the MCP endpoint host.');\n  }\n\n  return {\n    id: packageName,\n    version,\n    displayName: asString(manifest.displayName, 'Connector displayName'),\n    description: asString(manifest.description, 'Connector description'),\n    category: category as ConnectorDefinition['category'],\n    kind: 'mcp',\n    source: 'store',\n    capabilities: capabilities as ConnectorDefinition['capabilities'],\n    ...(Array.isArray(manifest.tags) ? { tags: asStringArray(manifest.tags, 'Connector tags') } : {}),\n    auth: { mode: authMode },\n    setup: setup as ConnectorDefinition['setup'],\n    runtime: {\n      type: 'mcp',\n      serverId: asString(runtime.serverId, 'Connector MCP serverId'),\n      serverTemplate: localPackage ? serverTemplate : { ...serverTemplate, url: endpoint },\n      ...(localPackage ? { localPackage } : {}),\n    },\n    permissions,\n    provenance: { packageName, sha256 },\n  };\n}\n\nfunction readConnectorManifestFromArchive(buffer: Buffer): unknown {\n  let archive: AdmZip;\n  try {\n    archive = new AdmZip(buffer);\n  } catch {\n    throw new Error('Store connector artifact is not a valid zip archive.');\n  }\n  const entry = archive.getEntries().find((candidate) => {\n    const path = candidate.entryName.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n    return !candidate.isDirectory && (path === 'xopc.connector.json' || path.endsWith('/xopc.connector.json'));\n  });\n  if (!entry) {\n    throw new Error('Store connector artifact is missing xopc.connector.json.');\n  }\n  try {\n    return JSON.parse(entry.getData().toString('utf8'));\n  } catch {\n    throw new Error('Store connector manifest is not valid JSON.');\n  }\n}\n\nexport async function listStoreConnectors(config: Config, params: SkillsStoreListParams) {\n  return listConnectorPackages(resolveSkillsStoreBaseUrl(config), params);\n}\n\nexport async function getStoreConnectorInstallPlan(\n  config: Config,\n  packageName: string,\n  version?: string,\n): Promise<StoreConnectorInstallPlan> {\n  const storeBaseUrl = resolveSkillsStoreBaseUrl(config);\n  const detail = await fetchStoreConnectorPackageDetail(storeBaseUrl, packageName, version);\n  const sha256 = detail.latestVersion.sha256;\n  if (!sha256 || !/^[a-f0-9]{64}$/i.test(sha256)) {\n    throw new Error('Store connector version is missing a valid SHA-256 checksum.');\n  }\n  const archive = await downloadConnectorStoreZipBuffer(storeBaseUrl, detail.latestVersion.downloadUrl);\n  const actualSha256 = createHash('sha256').update(archive).digest('hex');\n  if (actualSha256 !== sha256.toLowerCase()) {\n    throw new Error('Store connector artifact checksum verification failed.');\n  }\n  const artifactManifest = readConnectorManifestFromArchive(archive);\n  const definition = readConnectorManifest(\n    artifactManifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  const storeManifest = readConnectorManifest(\n    detail.latestVersion.manifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  if (JSON.stringify(definition.runtime) !== JSON.stringify(storeManifest.runtime)) {\n    throw new Error('Store connector metadata does not match its verified artifact.');\n  }\n  return {\n    packageName: detail.name,\n    version: detail.latestVersion.version,\n    permissions: definition.permissions ?? {},\n    requiresRestart: false,\n    requiresOAuth: definition.auth.mode === 'oauth',\n    definition,\n  };\n}\n\nexport async function installStoreConnector(\n  config: Config,\n  packageName: string,\n  input: ConnectorInstallInput,\n  version?: string,\n) {\n  const plan = await getStoreConnectorInstallPlan(config, packageName, version);\n  if (plan.requiresOAuth && plan.definition.id !== 'github') {\n    throw new Error('OAuth installation for store connectors is not available yet. Use an API-key connector or the built-in GitHub connector.');\n  }\n  const instance = await installConnectorDefinition(config, plan.definition, input);\n  return { instance, plan };\n}\n"],"mappings":";;;;;;AA+BA,SAAS,SAAS,OAAgB,OAA2B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,MAAM,qBAAqB;AAEhD,QAAO;;AAGT,SAAS,SAAS,OAAgB,OAAuB;AACvD,KAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,MAAM,8BAA8B;AAEzD,QAAO,MAAM,MAAM;;AAGrB,SAAS,cAAc,OAAgB,OAAyB;AAC9D,KAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,SAAS,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM,CAAC,CACzF,OAAM,IAAI,MAAM,GAAG,MAAM,yCAAyC;AAEpE,QAAO,MAAM,KAAK,SAAS,KAAK,MAAM,CAAC;;AAGzC,MAAM,mBAAmB;AACzB,MAAM,eAAe;AAErB,SAAS,oBAAoB,OAAwB;CACnD,MAAM,YAAY,SAAS,OAAO,yBAAyB;CAC3D,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,UAAU;SAClB;AACN,QAAM,IAAI,MAAM,8CAA8C;;CAEhE,MAAM,WAAW,IAAI,SAAS,aAAa,CAAC,QAAQ,YAAY,GAAG;AACnE,KACE,IAAI,aAAa,YACjB,IAAI,YACJ,IAAI,YACJ,aAAa,eACb,SAAS,SAAS,aAAa,IAC/B,KAAK,SAAS,CAEd,OAAM,IAAI,MAAM,yDAAyD;AAE3E,QAAO,IAAI,UAAU;;AAGvB,SAAS,gBAAgB,OAAgB,SAAwC;CAC/E,MAAM,cAAc,SAAS,OAAO,wBAAwB;AAC5D,KAAI,YAAY,cAAc,SAAS;AACrC,MAAI,QAAS,OAAM,IAAI,MAAM,wEAAwE;AACrG,QAAM,IAAI,MAAM,iEAAiE;;CAEnF,MAAM,aAAa,YAAY,eAAe,KAAA,IAC1C,EAAE,GACF,cAAc,YAAY,YAAY,mCAAmC;AAC7E,KAAI,WAAW,SAAS,EACtB,OAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,iBAAiB,cAAc,YAAY,gBAAgB,4BAA4B;AAC7F,KAAI,CAAC,WAAW,eAAe,WAAW,EACxC,OAAM,IAAI,MAAM,6DAA6D;AAE/E,QAAO;EACL,GAAI,YAAY,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,cAAc,YAAY,MAAM,6BAA6B,EAAE;EACjH;EACA,WAAW;EACX;EACD;;AAGH,SAAS,uBAAuB,SAAqB,UAAiF;AACpI,KAAI,QAAQ,iBAAiB,KAAA,EAAW,QAAO;CAC/C,MAAM,eAAe,SAAS,QAAQ,cAAc,yBAAyB;AAC7E,KAAI,aAAa,aAAa,MAC5B,OAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,OAAO,SAAS,aAAa,MAAM,+BAA+B;CACxE,MAAM,UAAU,SAAS,aAAa,SAAS,kCAAkC;AACjF,KAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,aAAa,KAAK,QAAQ,CAC7D,OAAM,IAAI,MAAM,qEAAqE;AAEvF,KAAI,SAAS,YAAY,SACvB,KAAK,UAAU,cAAc,SAAS,MAAM,gCAAgC,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC,CACjI,OAAM,IAAI,MAAM,8DAA8D;AAEhF,MAAK,MAAM,SAAS;EAAC;EAAO;EAAO;EAAO;EAAoB;EAAW;EAAY,CACnF,KAAI,SAAS,SAAU,OAAM,IAAI,MAAM,sEAAsE;AAE/G,QAAO;EAAE,UAAU;EAAO;EAAM;EAAS;;AAG3C,SAAS,sBACP,OACA,aACA,SACA,QACqB;CACrB,MAAM,WAAW,SAAS,OAAO,qBAAqB;AACtD,KAAI,SAAS,SAAS,IAAI,eAAe,KAAK,YAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,SAAS,SAAS,SAAS,oBAAoB;AAC/D,KAAI,QAAQ,SAAS,MACnB,OAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,iBAAiB,SAAS,QAAQ,gBAAgB,+BAA+B;CACvF,MAAM,eAAe,uBAAuB,SAAS,eAAe;CACpE,MAAM,YAAY,eAAe;AACjC,KAAI,CAAC,gBAAgB,cAAc,qBAAqB,cAAc,MACpE,OAAM,IAAI,MAAM,8DAA8D;CAGhF,MAAM,WADO,SAAS,SAAS,MAAM,iBAChB,CAAC;AACtB,KAAI,aAAa,UAAU,aAAa,YAAY,aAAa,QAC/D,OAAM,IAAI,MAAM,sDAAsD;CAExE,MAAM,WAAW,SAAS,SAAS,UAAU,qBAAqB;AAClE,KAAI,CAAC;EAAC;EAAQ;EAAQ;EAAW;EAAQ;EAAc;EAAS,CAAC,SAAS,SAAS,CACjF,OAAM,IAAI,MAAM,mCAAmC,WAAW;CAEhE,MAAM,eAAe,cAAc,SAAS,cAAc,yBAAyB;CACnF,MAAM,sBAAsB,IAAI,IAAI;EAClC;EAAS;EAAa;EAAW;EAAW;EAAU;EAAe;EACrE;EAAqB;EAAmB;EACzC,CAAC;AACF,KAAI,aAAa,MAAM,eAAe,CAAC,oBAAoB,IAAI,WAAW,CAAC,CACzE,OAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,QAAQ,SAAS,UAAU,KAAA,IAAY,EAAE,GAAG,SAAS,SAAS,OAAO,kBAAkB;CAC7F,MAAM,cAAc,gBAAgB,SAAS,aAAa,QAAQ,aAAa,CAAC;CAChF,MAAM,WAAW,eAAe,KAAA,IAAY,oBAAoB,eAAe,IAAI;CACnF,MAAM,WAAW,WAAW,IAAI,IAAI,SAAS,CAAC,WAAW,KAAA;AACzD,KAAI,YAAY,YAAY,gBAAgB,UAAU,CAAC,YAAY,eAAe,SAAS,SAAS,CAClG,OAAM,IAAI,MAAM,oEAAoE;AAGtF,QAAO;EACL,IAAI;EACJ;EACA,aAAa,SAAS,SAAS,aAAa,wBAAwB;EACpE,aAAa,SAAS,SAAS,aAAa,wBAAwB;EAC1D;EACV,MAAM;EACN,QAAQ;EACM;EACd,GAAI,MAAM,QAAQ,SAAS,KAAK,GAAG,EAAE,MAAM,cAAc,SAAS,MAAM,iBAAiB,EAAE,GAAG,EAAE;EAChG,MAAM,EAAE,MAAM,UAAU;EACjB;EACP,SAAS;GACP,MAAM;GACN,UAAU,SAAS,QAAQ,UAAU,yBAAyB;GAC9D,gBAAgB,eAAe,iBAAiB;IAAE,GAAG;IAAgB,KAAK;IAAU;GACpF,GAAI,eAAe,EAAE,cAAc,GAAG,EAAE;GACzC;EACD;EACA,YAAY;GAAE;GAAa;GAAQ;EACpC;;AAGH,SAAS,iCAAiC,QAAyB;CACjE,IAAI;AACJ,KAAI;AACF,YAAU,IAAI,OAAO,OAAO;SACtB;AACN,QAAM,IAAI,MAAM,uDAAuD;;CAEzE,MAAM,QAAQ,QAAQ,YAAY,CAAC,MAAM,cAAc;EACrD,MAAM,OAAO,UAAU,UAAU,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AACxE,SAAO,CAAC,UAAU,gBAAgB,SAAS,yBAAyB,KAAK,SAAS,uBAAuB;GACzG;AACF,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,2DAA2D;AAE7E,KAAI;AACF,SAAO,KAAK,MAAM,MAAM,SAAS,CAAC,SAAS,OAAO,CAAC;SAC7C;AACN,QAAM,IAAI,MAAM,8CAA8C;;;AAIlE,eAAsB,oBAAoB,QAAgB,QAA+B;AACvF,QAAO,sBAAsB,0BAA0B,OAAO,EAAE,OAAO;;AAGzE,eAAsB,6BACpB,QACA,aACA,SACoC;CACpC,MAAM,eAAe,0BAA0B,OAAO;CACtD,MAAM,SAAS,MAAM,iCAAiC,cAAc,aAAa,QAAQ;CACzF,MAAM,SAAS,OAAO,cAAc;AACpC,KAAI,CAAC,UAAU,CAAC,kBAAkB,KAAK,OAAO,CAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,MAAM,gCAAgC,cAAc,OAAO,cAAc,YAAY;CACrG,MAAM,eAAe,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;AACvE,KAAI,iBAAiB,OAAO,aAAa,CACvC,OAAM,IAAI,MAAM,yDAAyD;CAG3E,MAAM,aAAa,sBADM,iCAAiC,QAExC,EAChB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;CACD,MAAM,gBAAgB,sBACpB,OAAO,cAAc,UACrB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;AACD,KAAI,KAAK,UAAU,WAAW,QAAQ,KAAK,KAAK,UAAU,cAAc,QAAQ,CAC9E,OAAM,IAAI,MAAM,iEAAiE;AAEnF,QAAO;EACL,aAAa,OAAO;EACpB,SAAS,OAAO,cAAc;EAC9B,aAAa,WAAW,eAAe,EAAE;EACzC,iBAAiB;EACjB,eAAe,WAAW,KAAK,SAAS;EACxC;EACD;;AAGH,eAAsB,sBACpB,QACA,aACA,OACA,SACA;CACA,MAAM,OAAO,MAAM,6BAA6B,QAAQ,aAAa,QAAQ;AAC7E,KAAI,KAAK,iBAAiB,KAAK,WAAW,OAAO,SAC/C,OAAM,IAAI,MAAM,2HAA2H;AAG7I,QAAO;EAAE,UAAA,MADc,2BAA2B,QAAQ,KAAK,YAAY,MAAM;EAC9D;EAAM"}
+{"version":3,"file":"store-connector.js","names":[],"sources":["../../../src/capabilities/store-connector.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { isIP } from 'node:net';\n\nimport AdmZip from 'adm-zip';\n\nimport type { Config } from '../config/schema.js';\nimport { installConnectorDefinition } from '../connectors/install.js';\nimport type {\n  ConnectorDefinition,\n  ConnectorInstallInput,\n  ConnectorPermissions,\n} from '../connectors/types.js';\nimport {\n  downloadConnectorStoreZipBuffer,\n  fetchStoreConnectorPackageDetail,\n  listConnectorPackages,\n  resolveSkillsStoreBaseUrl,\n  type SkillsStoreListParams,\n} from '../agent/skills/marketplace/adapters/store/store-api-client.js';\n\ntype JsonRecord = Record<string, unknown>;\n\nexport type StoreConnectorInstallPlan = {\n  packageName: string;\n  version: string;\n  definition: ConnectorDefinition;\n  permissions: ConnectorPermissions;\n  requiresRestart: false;\n};\n\nfunction asRecord(value: unknown, label: string): JsonRecord {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) {\n    throw new Error(`${label} must be an object.`);\n  }\n  return value as JsonRecord;\n}\n\nfunction asString(value: unknown, label: string): string {\n  if (typeof value !== 'string' || !value.trim()) {\n    throw new Error(`${label} must be a non-empty string.`);\n  }\n  return value.trim();\n}\n\nfunction asStringArray(value: unknown, label: string): string[] {\n  if (!Array.isArray(value) || value.some((item) => typeof item !== 'string' || !item.trim())) {\n    throw new Error(`${label} must be an array of non-empty strings.`);\n  }\n  return value.map((item) => item.trim());\n}\n\nconst NPM_PACKAGE_NAME = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/;\nconst EXACT_SEMVER = /^v?(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/;\n\nfunction assertSafeRemoteUrl(value: unknown): string {\n  const urlString = asString(value, 'Connector MCP endpoint');\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    throw new Error('Connector MCP endpoint must be a valid URL.');\n  }\n  const hostname = url.hostname.toLowerCase().replace(/^\\[|\\]$/g, '');\n  if (\n    url.protocol !== 'https:' ||\n    url.username ||\n    url.password ||\n    hostname === 'localhost' ||\n    hostname.endsWith('.localhost') ||\n    isIP(hostname)\n  ) {\n    throw new Error('Store connectors must use a public HTTPS MCP endpoint.');\n  }\n  return url.toString();\n}\n\nfunction readPermissions(value: unknown, isLocal: boolean): ConnectorPermissions {\n  const permissions = asRecord(value, 'Connector permissions');\n  if (permissions.localExec !== isLocal) {\n    if (isLocal) throw new Error('Local Store connectors must explicitly allow local command execution.');\n    throw new Error('Store connectors must explicitly deny local command execution.');\n  }\n  const filesystem = permissions.filesystem === undefined\n    ? []\n    : asStringArray(permissions.filesystem, 'Connector filesystem permissions');\n  if (filesystem.length > 0) {\n    throw new Error('Store connectors cannot request filesystem access.');\n  }\n  const networkDomains = asStringArray(permissions.networkDomains, 'Connector network domains');\n  if (!isLocal && networkDomains.length === 0) {\n    throw new Error('Store connectors must declare at least one network domain.');\n  }\n  return {\n    ...(permissions.data === undefined ? {} : { data: asStringArray(permissions.data, 'Connector data permissions') }),\n    networkDomains,\n    localExec: isLocal,\n    filesystem,\n  };\n}\n\nfunction readPinnedLocalRuntime(runtime: JsonRecord, template: JsonRecord): { registry: 'npm'; name: string; version: string } | null {\n  if (runtime.localPackage === undefined) return null;\n  const localPackage = asRecord(runtime.localPackage, 'Connector localPackage');\n  if (localPackage.registry !== 'npm') {\n    throw new Error('Local Store connectors must use the npm registry.');\n  }\n  const name = asString(localPackage.name, 'Connector local package name');\n  const version = asString(localPackage.version, 'Connector local package version');\n  if (!NPM_PACKAGE_NAME.test(name) || !EXACT_SEMVER.test(version)) {\n    throw new Error('Local Store connectors must use a valid exact npm package version.');\n  }\n  if (template.command !== 'npx' ||\n    JSON.stringify(asStringArray(template.args, 'Connector local MCP arguments')) !== JSON.stringify(['--yes', `${name}@${version}`])) {\n    throw new Error('Local Store connectors must use the pinned npx launch form.');\n  }\n  for (const field of ['url', 'env', 'cwd', 'workingDirectory', 'headers', 'transport']) {\n    if (field in template) throw new Error('Local Store connectors cannot define additional MCP process fields.');\n  }\n  return { registry: 'npm', name, version };\n}\n\nfunction readConnectorManifest(\n  value: unknown,\n  packageName: string,\n  version: string,\n  sha256: string,\n): ConnectorDefinition {\n  const manifest = asRecord(value, 'Connector manifest');\n  if (asString(manifest.id, 'Connector id') !== packageName) {\n    throw new Error('Connector manifest id does not match the store package name.');\n  }\n  const runtime = asRecord(manifest.runtime, 'Connector runtime');\n  if (runtime.type !== 'mcp') {\n    throw new Error('Store connectors must use the MCP runtime.');\n  }\n  const serverTemplate = asRecord(runtime.serverTemplate, 'Connector MCP serverTemplate');\n  const localPackage = readPinnedLocalRuntime(runtime, serverTemplate);\n  const transport = serverTemplate.transport;\n  if (!localPackage && transport !== 'streamable-http' && transport !== 'sse') {\n    throw new Error('Store connectors must use streamable-http or sse transport.');\n  }\n  const auth = asRecord(manifest.auth, 'Connector auth');\n  const authMode = auth.mode;\n  if (authMode !== 'none' && authMode !== 'apiKey') {\n    throw new Error('Store connectors support only none or apiKey authentication.');\n  }\n  const normalizedAuth: ConnectorDefinition['auth'] = { mode: authMode };\n  const category = asString(manifest.category, 'Connector category');\n  if (!['code', 'docs', 'browser', 'data', 'automation', 'custom'].includes(category)) {\n    throw new Error(`Unsupported connector category: ${category}`);\n  }\n  const capabilities = asStringArray(manifest.capabilities, 'Connector capabilities');\n  const allowedCapabilities = new Set([\n    'tools', 'resources', 'prompts', 'context', 'events', 'auth.apiKey',\n    'runtime.mcp.stdio', 'runtime.mcp.sse', 'runtime.mcp.streamableHttp',\n  ]);\n  if (capabilities.some((capability) => !allowedCapabilities.has(capability))) {\n    throw new Error('Connector manifest contains an unsupported capability.');\n  }\n  const setup = manifest.setup === undefined ? {} : asRecord(manifest.setup, 'Connector setup');\n  const permissions = readPermissions(manifest.permissions, Boolean(localPackage));\n  const endpoint = localPackage ? undefined : assertSafeRemoteUrl(serverTemplate.url);\n  const hostname = endpoint ? new URL(endpoint).hostname : undefined;\n  if (hostname && permissions.networkDomains?.length && !permissions.networkDomains.includes(hostname)) {\n    throw new Error('Connector network permissions must include the MCP endpoint host.');\n  }\n\n  return {\n    id: packageName,\n    version,\n    displayName: asString(manifest.displayName, 'Connector displayName'),\n    description: asString(manifest.description, 'Connector description'),\n    category: category as ConnectorDefinition['category'],\n    kind: 'mcp',\n    source: 'store',\n    capabilities: capabilities as ConnectorDefinition['capabilities'],\n    ...(Array.isArray(manifest.tags) ? { tags: asStringArray(manifest.tags, 'Connector tags') } : {}),\n    auth: normalizedAuth,\n    setup: setup as ConnectorDefinition['setup'],\n    runtime: {\n      type: 'mcp',\n      serverId: asString(runtime.serverId, 'Connector MCP serverId'),\n      serverTemplate: localPackage ? serverTemplate : { ...serverTemplate, url: endpoint },\n      ...(localPackage ? { localPackage } : {}),\n    },\n    permissions,\n    provenance: { packageName, sha256 },\n  };\n}\n\nfunction readConnectorManifestFromArchive(buffer: Buffer): unknown {\n  let archive: AdmZip;\n  try {\n    archive = new AdmZip(buffer);\n  } catch {\n    throw new Error('Store connector artifact is not a valid zip archive.');\n  }\n  const entry = archive.getEntries().find((candidate) => {\n    const path = candidate.entryName.replace(/\\\\/g, '/').replace(/^\\/+/, '');\n    return !candidate.isDirectory && (path === 'xopc.connector.json' || path.endsWith('/xopc.connector.json'));\n  });\n  if (!entry) {\n    throw new Error('Store connector artifact is missing xopc.connector.json.');\n  }\n  try {\n    return JSON.parse(entry.getData().toString('utf8'));\n  } catch {\n    throw new Error('Store connector manifest is not valid JSON.');\n  }\n}\n\nexport async function listStoreConnectors(config: Config, params: SkillsStoreListParams) {\n  return listConnectorPackages(resolveSkillsStoreBaseUrl(config), params);\n}\n\nexport async function getStoreConnectorInstallPlan(\n  config: Config,\n  packageName: string,\n  version?: string,\n): Promise<StoreConnectorInstallPlan> {\n  const storeBaseUrl = resolveSkillsStoreBaseUrl(config);\n  const detail = await fetchStoreConnectorPackageDetail(storeBaseUrl, packageName, version);\n  const sha256 = detail.latestVersion.sha256;\n  if (!sha256 || !/^[a-f0-9]{64}$/i.test(sha256)) {\n    throw new Error('Store connector version is missing a valid SHA-256 checksum.');\n  }\n  const archive = await downloadConnectorStoreZipBuffer(storeBaseUrl, detail.latestVersion.downloadUrl);\n  const actualSha256 = createHash('sha256').update(archive).digest('hex');\n  if (actualSha256 !== sha256.toLowerCase()) {\n    throw new Error('Store connector artifact checksum verification failed.');\n  }\n  const artifactManifest = readConnectorManifestFromArchive(archive);\n  const definition = readConnectorManifest(\n    artifactManifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  const storeManifest = readConnectorManifest(\n    detail.latestVersion.manifest,\n    detail.name,\n    detail.latestVersion.version,\n    actualSha256,\n  );\n  if (JSON.stringify(definition.runtime) !== JSON.stringify(storeManifest.runtime)) {\n    throw new Error('Store connector metadata does not match its verified artifact.');\n  }\n  return {\n    packageName: detail.name,\n    version: detail.latestVersion.version,\n    permissions: definition.permissions ?? {},\n    requiresRestart: false,\n    definition,\n  };\n}\n\nexport async function installStoreConnector(\n  config: Config,\n  packageName: string,\n  input: ConnectorInstallInput,\n  version?: string,\n) {\n  const plan = await getStoreConnectorInstallPlan(config, packageName, version);\n  const instance = await installConnectorDefinition(config, plan.definition, input);\n  return { instance, plan };\n}\n"],"mappings":";;;;;;AA8BA,SAAS,SAAS,OAAgB,OAA2B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,OAAM,IAAI,MAAM,GAAG,MAAM,qBAAqB;AAEhD,QAAO;;AAGT,SAAS,SAAS,OAAgB,OAAuB;AACvD,KAAI,OAAO,UAAU,YAAY,CAAC,MAAM,MAAM,CAC5C,OAAM,IAAI,MAAM,GAAG,MAAM,8BAA8B;AAEzD,QAAO,MAAM,MAAM;;AAGrB,SAAS,cAAc,OAAgB,OAAyB;AAC9D,KAAI,CAAC,MAAM,QAAQ,MAAM,IAAI,MAAM,MAAM,SAAS,OAAO,SAAS,YAAY,CAAC,KAAK,MAAM,CAAC,CACzF,OAAM,IAAI,MAAM,GAAG,MAAM,yCAAyC;AAEpE,QAAO,MAAM,KAAK,SAAS,KAAK,MAAM,CAAC;;AAGzC,MAAM,mBAAmB;AACzB,MAAM,eAAe;AAErB,SAAS,oBAAoB,OAAwB;CACnD,MAAM,YAAY,SAAS,OAAO,yBAAyB;CAC3D,IAAI;AACJ,KAAI;AACF,QAAM,IAAI,IAAI,UAAU;SAClB;AACN,QAAM,IAAI,MAAM,8CAA8C;;CAEhE,MAAM,WAAW,IAAI,SAAS,aAAa,CAAC,QAAQ,YAAY,GAAG;AACnE,KACE,IAAI,aAAa,YACjB,IAAI,YACJ,IAAI,YACJ,aAAa,eACb,SAAS,SAAS,aAAa,IAC/B,KAAK,SAAS,CAEd,OAAM,IAAI,MAAM,yDAAyD;AAE3E,QAAO,IAAI,UAAU;;AAGvB,SAAS,gBAAgB,OAAgB,SAAwC;CAC/E,MAAM,cAAc,SAAS,OAAO,wBAAwB;AAC5D,KAAI,YAAY,cAAc,SAAS;AACrC,MAAI,QAAS,OAAM,IAAI,MAAM,wEAAwE;AACrG,QAAM,IAAI,MAAM,iEAAiE;;CAEnF,MAAM,aAAa,YAAY,eAAe,KAAA,IAC1C,EAAE,GACF,cAAc,YAAY,YAAY,mCAAmC;AAC7E,KAAI,WAAW,SAAS,EACtB,OAAM,IAAI,MAAM,qDAAqD;CAEvE,MAAM,iBAAiB,cAAc,YAAY,gBAAgB,4BAA4B;AAC7F,KAAI,CAAC,WAAW,eAAe,WAAW,EACxC,OAAM,IAAI,MAAM,6DAA6D;AAE/E,QAAO;EACL,GAAI,YAAY,SAAS,KAAA,IAAY,EAAE,GAAG,EAAE,MAAM,cAAc,YAAY,MAAM,6BAA6B,EAAE;EACjH;EACA,WAAW;EACX;EACD;;AAGH,SAAS,uBAAuB,SAAqB,UAAiF;AACpI,KAAI,QAAQ,iBAAiB,KAAA,EAAW,QAAO;CAC/C,MAAM,eAAe,SAAS,QAAQ,cAAc,yBAAyB;AAC7E,KAAI,aAAa,aAAa,MAC5B,OAAM,IAAI,MAAM,oDAAoD;CAEtE,MAAM,OAAO,SAAS,aAAa,MAAM,+BAA+B;CACxE,MAAM,UAAU,SAAS,aAAa,SAAS,kCAAkC;AACjF,KAAI,CAAC,iBAAiB,KAAK,KAAK,IAAI,CAAC,aAAa,KAAK,QAAQ,CAC7D,OAAM,IAAI,MAAM,qEAAqE;AAEvF,KAAI,SAAS,YAAY,SACvB,KAAK,UAAU,cAAc,SAAS,MAAM,gCAAgC,CAAC,KAAK,KAAK,UAAU,CAAC,SAAS,GAAG,KAAK,GAAG,UAAU,CAAC,CACjI,OAAM,IAAI,MAAM,8DAA8D;AAEhF,MAAK,MAAM,SAAS;EAAC;EAAO;EAAO;EAAO;EAAoB;EAAW;EAAY,CACnF,KAAI,SAAS,SAAU,OAAM,IAAI,MAAM,sEAAsE;AAE/G,QAAO;EAAE,UAAU;EAAO;EAAM;EAAS;;AAG3C,SAAS,sBACP,OACA,aACA,SACA,QACqB;CACrB,MAAM,WAAW,SAAS,OAAO,qBAAqB;AACtD,KAAI,SAAS,SAAS,IAAI,eAAe,KAAK,YAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,SAAS,SAAS,SAAS,oBAAoB;AAC/D,KAAI,QAAQ,SAAS,MACnB,OAAM,IAAI,MAAM,6CAA6C;CAE/D,MAAM,iBAAiB,SAAS,QAAQ,gBAAgB,+BAA+B;CACvF,MAAM,eAAe,uBAAuB,SAAS,eAAe;CACpE,MAAM,YAAY,eAAe;AACjC,KAAI,CAAC,gBAAgB,cAAc,qBAAqB,cAAc,MACpE,OAAM,IAAI,MAAM,8DAA8D;CAGhF,MAAM,WADO,SAAS,SAAS,MAAM,iBAChB,CAAC;AACtB,KAAI,aAAa,UAAU,aAAa,SACtC,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,iBAA8C,EAAE,MAAM,UAAU;CACtE,MAAM,WAAW,SAAS,SAAS,UAAU,qBAAqB;AAClE,KAAI,CAAC;EAAC;EAAQ;EAAQ;EAAW;EAAQ;EAAc;EAAS,CAAC,SAAS,SAAS,CACjF,OAAM,IAAI,MAAM,mCAAmC,WAAW;CAEhE,MAAM,eAAe,cAAc,SAAS,cAAc,yBAAyB;CACnF,MAAM,sBAAsB,IAAI,IAAI;EAClC;EAAS;EAAa;EAAW;EAAW;EAAU;EACtD;EAAqB;EAAmB;EACzC,CAAC;AACF,KAAI,aAAa,MAAM,eAAe,CAAC,oBAAoB,IAAI,WAAW,CAAC,CACzE,OAAM,IAAI,MAAM,yDAAyD;CAE3E,MAAM,QAAQ,SAAS,UAAU,KAAA,IAAY,EAAE,GAAG,SAAS,SAAS,OAAO,kBAAkB;CAC7F,MAAM,cAAc,gBAAgB,SAAS,aAAa,QAAQ,aAAa,CAAC;CAChF,MAAM,WAAW,eAAe,KAAA,IAAY,oBAAoB,eAAe,IAAI;CACnF,MAAM,WAAW,WAAW,IAAI,IAAI,SAAS,CAAC,WAAW,KAAA;AACzD,KAAI,YAAY,YAAY,gBAAgB,UAAU,CAAC,YAAY,eAAe,SAAS,SAAS,CAClG,OAAM,IAAI,MAAM,oEAAoE;AAGtF,QAAO;EACL,IAAI;EACJ;EACA,aAAa,SAAS,SAAS,aAAa,wBAAwB;EACpE,aAAa,SAAS,SAAS,aAAa,wBAAwB;EAC1D;EACV,MAAM;EACN,QAAQ;EACM;EACd,GAAI,MAAM,QAAQ,SAAS,KAAK,GAAG,EAAE,MAAM,cAAc,SAAS,MAAM,iBAAiB,EAAE,GAAG,EAAE;EAChG,MAAM;EACC;EACP,SAAS;GACP,MAAM;GACN,UAAU,SAAS,QAAQ,UAAU,yBAAyB;GAC9D,gBAAgB,eAAe,iBAAiB;IAAE,GAAG;IAAgB,KAAK;IAAU;GACpF,GAAI,eAAe,EAAE,cAAc,GAAG,EAAE;GACzC;EACD;EACA,YAAY;GAAE;GAAa;GAAQ;EACpC;;AAGH,SAAS,iCAAiC,QAAyB;CACjE,IAAI;AACJ,KAAI;AACF,YAAU,IAAI,OAAO,OAAO;SACtB;AACN,QAAM,IAAI,MAAM,uDAAuD;;CAEzE,MAAM,QAAQ,QAAQ,YAAY,CAAC,MAAM,cAAc;EACrD,MAAM,OAAO,UAAU,UAAU,QAAQ,OAAO,IAAI,CAAC,QAAQ,QAAQ,GAAG;AACxE,SAAO,CAAC,UAAU,gBAAgB,SAAS,yBAAyB,KAAK,SAAS,uBAAuB;GACzG;AACF,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,2DAA2D;AAE7E,KAAI;AACF,SAAO,KAAK,MAAM,MAAM,SAAS,CAAC,SAAS,OAAO,CAAC;SAC7C;AACN,QAAM,IAAI,MAAM,8CAA8C;;;AAIlE,eAAsB,oBAAoB,QAAgB,QAA+B;AACvF,QAAO,sBAAsB,0BAA0B,OAAO,EAAE,OAAO;;AAGzE,eAAsB,6BACpB,QACA,aACA,SACoC;CACpC,MAAM,eAAe,0BAA0B,OAAO;CACtD,MAAM,SAAS,MAAM,iCAAiC,cAAc,aAAa,QAAQ;CACzF,MAAM,SAAS,OAAO,cAAc;AACpC,KAAI,CAAC,UAAU,CAAC,kBAAkB,KAAK,OAAO,CAC5C,OAAM,IAAI,MAAM,+DAA+D;CAEjF,MAAM,UAAU,MAAM,gCAAgC,cAAc,OAAO,cAAc,YAAY;CACrG,MAAM,eAAe,WAAW,SAAS,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;AACvE,KAAI,iBAAiB,OAAO,aAAa,CACvC,OAAM,IAAI,MAAM,yDAAyD;CAG3E,MAAM,aAAa,sBADM,iCAAiC,QAExC,EAChB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;CACD,MAAM,gBAAgB,sBACpB,OAAO,cAAc,UACrB,OAAO,MACP,OAAO,cAAc,SACrB,aACD;AACD,KAAI,KAAK,UAAU,WAAW,QAAQ,KAAK,KAAK,UAAU,cAAc,QAAQ,CAC9E,OAAM,IAAI,MAAM,iEAAiE;AAEnF,QAAO;EACL,aAAa,OAAO;EACpB,SAAS,OAAO,cAAc;EAC9B,aAAa,WAAW,eAAe,EAAE;EACzC,iBAAiB;EACjB;EACD;;AAGH,eAAsB,sBACpB,QACA,aACA,OACA,SACA;CACA,MAAM,OAAO,MAAM,6BAA6B,QAAQ,aAAa,QAAQ;AAE7E,QAAO;EAAE,UAAA,MADc,2BAA2B,QAAQ,KAAK,YAAY,MAAM;EAC9D;EAAM"}

package/dist/src/chat-commands/builtins/review.js

@@ -8,42 +8,62 @@ import { randomUUID } from "node:crypto";
 //#region src/chat-commands/builtins/review.ts
 const MAX_DIFF_CHARS = 6e4;
 const REVIEW_JUDGE_MAX_TOKENS = 16384;
-async function emitToolStart(ctx, toolCallId, toolName, args) {
+async function emitReviewStart(ctx, reviewId, target, stage) {
 	await ctx.emitEvent?.({
-		type: "tool_execution_start",
-		toolCallId,
-		toolName,
-		args
+		type: "review_start",
+		reviewId,
+		target,
+		stage
 	});
 }
-async function emitToolEnd(ctx, toolCallId, toolName, resultText, details, isError = false) {
+async function emitReviewEnd(ctx, reviewId, status, message) {
 	await ctx.emitEvent?.({
-		type: "tool_execution_end",
-		toolCallId,
-		toolName,
-		isError,
-		result: {
-			content: [{
-				type: "text",
-				text: resultText
-			}],
-			...details ? { details } : {}
-		}
+		type: "review_end",
+		reviewId,
+		status,
+		...message ? { message } : {}
 	});
 }
-async function emitToolTextDelta(ctx, toolCallId, toolName, delta) {
+async function emitReviewDelta(ctx, reviewId, delta) {
 	if (!delta) return;
 	await ctx.emitEvent?.({
-		type: "tool_execution_update",
-		toolCallId,
-		toolName,
-		args: {},
-		partialResult: { content: [{
-			type: "text",
-			text: delta
-		}] }
+		type: "review_delta",
+		reviewId,
+		delta
 	});
 }
+function createReviewProgressExtractor() {
+	const open = "<review_progress>";
+	const close = "</review_progress>";
+	let buffer = "";
+	let inside = false;
+	return (delta) => {
+		buffer += delta;
+		let visible = "";
+		while (buffer) {
+			if (!inside) {
+				const start = buffer.indexOf(open);
+				if (start < 0) {
+					buffer = buffer.slice(-Math.max(0, 16));
+					break;
+				}
+				buffer = buffer.slice(start + 17);
+				inside = true;
+			}
+			const end = buffer.indexOf(close);
+			if (end < 0) {
+				const safeLength = Math.max(0, buffer.length - 17);
+				visible += buffer.slice(0, safeLength);
+				buffer = buffer.slice(safeLength);
+				break;
+			}
+			visible += buffer.slice(0, end);
+			buffer = buffer.slice(end + 18);
+			inside = false;
+		}
+		return visible;
+	};
+}
 function truncateForPrompt(text) {
 	if (text.length <= MAX_DIFF_CHARS) return {
 		text,
@@ -111,10 +131,6 @@ function parseReviewJson(raw, target) {
 		source: "model"
 	};
 }
-function previewText(text, max = 500) {
-	const trimmed = text.trim();
-	return trimmed.length > max ? `${trimmed.slice(0, max)}…` : trimmed;
-}
 async function reviewModelRef(ctx) {
 	const sessionOverride = await ctx.getSessionConfigStore?.()?.get(ctx.sessionKey).then((config) => config?.modelOverride?.trim()).catch(() => void 0);
 	if (sessionOverride) return sessionOverride;
@@ -130,7 +146,9 @@ function buildReviewPrompt(params) {
 		"You are a senior code reviewer. Review the provided git diff for correctness bugs only.",
 		"Prioritize concrete regressions, broken behavior, missing required tests for changed behavior, data loss, security issues, and runtime/type errors.",
 		"Do not mention style, broad refactors, praise, or speculative improvements.",
-		"Return strict JSON only with this shape:",
+		"Return exactly two XML-delimited sections and nothing else.",
+		"First write a concise, user-facing Markdown review draft inside <review_progress>...</review_progress>. State the scope and concrete evidence only; do not reveal hidden chain-of-thought.",
+		"Then put strict JSON inside <review_result>...</review_result> using this shape:",
 		"{\"findings\":[{\"title\":\"...\",\"body\":\"...\",\"priority\":1,\"confidence_score\":0.9,\"code_location\":{\"file_path\":\"path\",\"line_range\":{\"start\":12,\"end\":12}}}],\"overall_correctness\":\"patch is correct\",\"overall_explanation\":\"...\",\"overall_confidence_score\":0.8,\"summary\":\"...\"}",
 		"Use priority 0 for release-blocking, 1 for high, 2 for medium, 3 for low.",
 		params.instructions ? `Extra reviewer instructions: ${params.instructions}` : "",
@@ -152,36 +170,33 @@ async function resolveWorkspace(ctx) {
 async function buildReview(ctx, args) {
 	const cwd = await resolveGitRoot(await resolveWorkspace(ctx));
 	const reviewTarget = parseReviewTargetArgs(args);
-	const prepareToolCallId = `review_prepare_${randomUUID()}`;
-	await emitToolStart(ctx, prepareToolCallId, "review.prepare_diff", {
-		target: args.trim() || "uncommitted",
-		cwd
-	});
+	const reviewId = `review_${randomUUID()}`;
+	await emitReviewStart(ctx, reviewId, args.trim() || "current workspace changes", "preparing");
 	let bundle;
 	try {
 		bundle = await buildReviewDiffBundle(cwd, reviewTarget);
-		await emitToolEnd(ctx, prepareToolCallId, "review.prepare_diff", [`Target: ${bundle.targetLabel}`, bundle.stat.trim() ? `Changed files:\n${bundle.stat.trim()}` : "No diff stat."].join("\n\n"), {
-			target: bundle.targetLabel,
-			status: bundle.status,
-			stat: bundle.stat
-		});
 	} catch (err) {
-		await emitToolEnd(ctx, prepareToolCallId, "review.prepare_diff", err instanceof Error ? err.message : String(err), { cwd }, true);
+		await emitReviewEnd(ctx, reviewId, "error", err instanceof Error ? err.message : String(err));
 		throw err;
 	}
 	const { text: diff, truncated } = truncateForPrompt(bundle.diff);
 	const target = bundle.targetLabel;
 	const instructions = reviewTarget.instructions ?? "";
-	if (!bundle.status.trim() && !bundle.diff.trim()) return {
-		type: "review",
-		target,
-		summary: "Working tree is clean.",
-		findings: [],
-		overallCorrectness: "patch is correct",
-		overallExplanation: "No uncommitted changes were found to review.",
-		generatedAt: Date.now(),
-		source: "local"
-	};
+	await emitReviewStart(ctx, reviewId, target, "preparing");
+	if (!bundle.status.trim() && !bundle.diff.trim()) {
+		const review = {
+			type: "review",
+			target,
+			summary: "Working tree is clean.",
+			findings: [],
+			overallCorrectness: "patch is correct",
+			overallExplanation: "No uncommitted changes were found to review.",
+			generatedAt: Date.now(),
+			source: "local"
+		};
+		await emitReviewEnd(ctx, reviewId, "complete");
+		return review;
+	}
 	const prompt = buildReviewPrompt({
 		target,
 		status: bundle.status,
@@ -191,17 +206,12 @@ async function buildReview(ctx, args) {
 		instructions
 	});
 	const reviewerModelRef = await reviewModelRef(ctx);
-	const judgeToolCallId = `review_judge_${randomUUID()}`;
-	await emitToolStart(ctx, judgeToolCallId, "review.model_judge", {
-		target,
-		diffChars: diff.length,
-		truncated,
-		...reviewerModelRef ? { modelRef: reviewerModelRef } : {}
-	});
+	await emitReviewStart(ctx, reviewId, target, "reviewing");
+	const extractReviewProgress = createReviewProgressExtractor();
 	const answer = ctx.btwQuery ? await ctx.btwQuery(prompt, {
 		maxTokens: REVIEW_JUDGE_MAX_TOKENS,
 		includeSessionContext: false,
-		onTextDelta: (delta) => emitToolTextDelta(ctx, judgeToolCallId, "review.model_judge", delta),
+		onTextDelta: (delta) => emitReviewDelta(ctx, reviewId, extractReviewProgress(delta)),
 		...reviewerModelRef ? { modelRef: reviewerModelRef } : {}
 	}) : {
 		text: "",
@@ -210,11 +220,7 @@ async function buildReview(ctx, args) {
 	let judgeFailure = answer.error ? { reason: `Reviewer model error: ${answer.error}` } : answer.text ? void 0 : { reason: "Reviewer model returned no text." };
 	if (answer?.text && !answer.error) try {
 		const parsed = parseReviewJson(answer.text, target);
-		await emitToolEnd(ctx, judgeToolCallId, "review.model_judge", parsed.summary || `${parsed.findings.length} findings`, {
-			target,
-			findings: parsed.findings.length,
-			overallCorrectness: parsed.overallCorrectness
-		});
+		await emitReviewEnd(ctx, reviewId, "complete");
 		return parsed;
 	} catch (err) {
 		judgeFailure = { reason: `Reviewer model output could not be parsed: ${err instanceof Error ? err.message : String(err)}` };
@@ -230,14 +236,7 @@ async function buildReview(ctx, args) {
 		generatedAt: Date.now(),
 		source: "local"
 	};
-	await emitToolEnd(ctx, judgeToolCallId, "review.model_judge", fallback.summary, {
-		target,
-		findings: 0,
-		overallCorrectness: fallback.overallCorrectness,
-		fallback: true,
-		reason,
-		...answer.text ? { responsePreview: previewText(answer.text) } : {}
-	}, true);
+	await emitReviewEnd(ctx, reviewId, "error", reason);
 	return fallback;
 }
 const reviewCommand = {