@xopcai/xopc 0.0.142 → 0.0.143

package/dist/src/chat-commands/builtins/review.js.map

@@ -1 +1 @@
-{"version":3,"file":"review.js","names":[],"sources":["../../../../src/chat-commands/builtins/review.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { CommandDefinition, CommandContext } from '../types.js';\nimport { commandRegistry } from '../registry.js';\nimport { effectiveWorkspacePathForSession } from '../../session/session-workspace.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport { getProjectForSession } from '../../projects/workspace.js';\nimport {\n  buildReviewDiffBundle,\n  parseReviewTargetArgs,\n  resolveGitRoot,\n} from '../../review/review-git.js';\nimport {\n  formatReviewMarkdown,\n  type ReviewFinding,\n  type ReviewOutput,\n  type ReviewPriority,\n} from '../../review/review-types.js';\n\nconst MAX_DIFF_CHARS = 60_000;\nconst REVIEW_JUDGE_MAX_TOKENS = 16_384;\n\nasync function emitToolStart(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  args: Record<string, unknown>,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_start',\n    toolCallId,\n    toolName,\n    args,\n  });\n}\n\nasync function emitToolEnd(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  resultText: string,\n  details?: Record<string, unknown>,\n  isError = false,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'tool_execution_end',\n    toolCallId,\n    toolName,\n    isError,\n    result: {\n      content: [{ type: 'text', text: resultText }],\n      ...(details ? { details } : {}),\n    },\n  });\n}\n\nasync function emitToolTextDelta(\n  ctx: CommandContext,\n  toolCallId: string,\n  toolName: string,\n  delta: string,\n): Promise<void> {\n  if (!delta) return;\n  await ctx.emitEvent?.({\n    type: 'tool_execution_update',\n    toolCallId,\n    toolName,\n    args: {},\n    partialResult: {\n      content: [{ type: 'text', text: delta }],\n    },\n  });\n}\n\nfunction truncateForPrompt(text: string): { text: string; truncated: boolean } {\n  if (text.length <= MAX_DIFF_CHARS) return { text, truncated: false };\n  return {\n    text: text.slice(0, MAX_DIFF_CHARS) + '\\n\\n[diff truncated]',\n    truncated: true,\n  };\n}\n\nfunction extractJsonObject(raw: string): unknown {\n  const fenced = raw.match(/```(?:json)?\\s*([\\s\\S]*?)```/i);\n  const text = (fenced?.[1] ?? raw).trim();\n  const start = text.indexOf('{');\n  const end = text.lastIndexOf('}');\n  if (start < 0 || end <= start) throw new Error('review response did not contain JSON');\n  return JSON.parse(text.slice(start, end + 1));\n}\n\nfunction priorityFrom(raw: unknown): ReviewPriority {\n  const n = typeof raw === 'number' ? raw : Number.parseInt(String(raw ?? ''), 10);\n  if (n === 0 || n === 1 || n === 2 || n === 3) return n;\n  return 2;\n}\n\nfunction numberFrom(raw: unknown): number | undefined {\n  return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;\n}\n\nfunction stringFrom(raw: unknown): string {\n  return typeof raw === 'string' ? raw.trim() : '';\n}\n\nfunction parseReviewJson(raw: string, target: string): ReviewOutput {\n  const parsed = extractJsonObject(raw);\n  const rec = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : {};\n  const rawFindings = Array.isArray(rec.findings) ? rec.findings : [];\n  const findings: ReviewFinding[] = rawFindings\n    .map((item) => {\n      const f = item && typeof item === 'object' && !Array.isArray(item)\n        ? item as Record<string, unknown>\n        : {};\n      const loc = f.code_location && typeof f.code_location === 'object'\n        ? f.code_location as Record<string, unknown>\n        : {};\n      const range = loc.line_range && typeof loc.line_range === 'object'\n        ? loc.line_range as Record<string, unknown>\n        : {};\n      const title = stringFrom(f.title);\n      const body = stringFrom(f.body);\n      if (!title && !body) return undefined;\n      const finding: ReviewFinding = {\n        title: title || body.slice(0, 80),\n        body,\n        priority: priorityFrom(f.priority),\n      };\n      const confidenceScore = numberFrom(f.confidence_score ?? f.confidenceScore);\n      const filePath = stringFrom(loc.file_path ?? f.filePath);\n      const lineStart = numberFrom(range.start ?? f.lineStart);\n      const lineEnd = numberFrom(range.end ?? f.lineEnd);\n      if (confidenceScore !== undefined) finding.confidenceScore = confidenceScore;\n      if (filePath) finding.filePath = filePath;\n      if (lineStart !== undefined) finding.lineStart = lineStart;\n      if (lineEnd !== undefined) finding.lineEnd = lineEnd;\n      return finding;\n    })\n    .filter((item): item is ReviewFinding => Boolean(item));\n\n  const correctness = stringFrom(rec.overall_correctness ?? rec.overallCorrectness);\n  const overallCorrectness =\n    correctness === 'patch is correct' || correctness === 'patch is incorrect'\n      ? correctness\n      : 'unknown';\n  return {\n    type: 'review',\n    target,\n    summary: stringFrom(rec.summary) || `${findings.length} finding${findings.length === 1 ? '' : 's'}`,\n    findings,\n    overallCorrectness,\n    overallExplanation: stringFrom(rec.overall_explanation ?? rec.overallExplanation),\n    overallConfidenceScore: numberFrom(rec.overall_confidence_score ?? rec.overallConfidenceScore),\n    generatedAt: Date.now(),\n    source: 'model',\n  };\n}\n\nfunction previewText(text: string, max = 500): string {\n  const trimmed = text.trim();\n  return trimmed.length > max ? `${trimmed.slice(0, max)}…` : trimmed;\n}\n\nasync function reviewModelRef(ctx: CommandContext): Promise<string | undefined> {\n  const sessionOverride = await ctx.getSessionConfigStore?.()\n    ?.get(ctx.sessionKey)\n    .then((config) => config?.modelOverride?.trim())\n    .catch(() => undefined);\n  if (sessionOverride) return sessionOverride;\n\n  try {\n    const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey);\n    return profile.manifest.models.roles.review?.model?.trim() || profile.primaryModelRef;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction buildReviewPrompt(params: {\n  target: string;\n  status: string;\n  stat: string;\n  diff: string;\n  truncated: boolean;\n  instructions: string;\n}): string {\n  return [\n    'You are a senior code reviewer. Review the provided git diff for correctness bugs only.',\n    'Prioritize concrete regressions, broken behavior, missing required tests for changed behavior, data loss, security issues, and runtime/type errors.',\n    'Do not mention style, broad refactors, praise, or speculative improvements.',\n    'Return strict JSON only with this shape:',\n    '{\"findings\":[{\"title\":\"...\",\"body\":\"...\",\"priority\":1,\"confidence_score\":0.9,\"code_location\":{\"file_path\":\"path\",\"line_range\":{\"start\":12,\"end\":12}}}],\"overall_correctness\":\"patch is correct\",\"overall_explanation\":\"...\",\"overall_confidence_score\":0.8,\"summary\":\"...\"}',\n    'Use priority 0 for release-blocking, 1 for high, 2 for medium, 3 for low.',\n    params.instructions ? `Extra reviewer instructions: ${params.instructions}` : '',\n    `Target: ${params.target}`,\n    params.truncated ? 'The diff was truncated; only report findings supported by visible lines.' : '',\n    'Git status:',\n    params.status || '(clean)',\n    'Diff stat:',\n    params.stat || '(none)',\n    'Diff:',\n    params.diff || '(none)',\n  ].filter(Boolean).join('\\n\\n');\n}\n\nasync function resolveWorkspace(ctx: CommandContext): Promise<string> {\n  const sessionConfigStore = ctx.getSessionConfigStore?.();\n  const sessionConfig = sessionConfigStore\n    ? await sessionConfigStore.get(ctx.sessionKey).catch(() => null)\n    : null;\n  return effectiveWorkspacePathForSession(\n    ctx.config,\n    ctx.sessionKey,\n    sessionConfig,\n    getProjectForSession(ctx.sessionKey),\n  );\n}\n\nasync function buildReview(ctx: CommandContext, args: string): Promise<ReviewOutput> {\n  const workspace = await resolveWorkspace(ctx);\n  const cwd = await resolveGitRoot(workspace);\n  const reviewTarget = parseReviewTargetArgs(args);\n  const prepareToolCallId = `review_prepare_${randomUUID()}`;\n  await emitToolStart(ctx, prepareToolCallId, 'review.prepare_diff', {\n    target: args.trim() || 'uncommitted',\n    cwd,\n  });\n  let bundle: Awaited<ReturnType<typeof buildReviewDiffBundle>>;\n  try {\n    bundle = await buildReviewDiffBundle(cwd, reviewTarget);\n    await emitToolEnd(\n      ctx,\n      prepareToolCallId,\n      'review.prepare_diff',\n      [\n        `Target: ${bundle.targetLabel}`,\n        bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No diff stat.',\n      ].join('\\n\\n'),\n      {\n        target: bundle.targetLabel,\n        status: bundle.status,\n        stat: bundle.stat,\n      },\n    );\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    await emitToolEnd(ctx, prepareToolCallId, 'review.prepare_diff', em, { cwd }, true);\n    throw err;\n  }\n  const { text: diff, truncated } = truncateForPrompt(bundle.diff);\n  const target = bundle.targetLabel;\n  const instructions = reviewTarget.instructions ?? '';\n\n  if (!bundle.status.trim() && !bundle.diff.trim()) {\n    return {\n      type: 'review',\n      target,\n      summary: 'Working tree is clean.',\n      findings: [],\n      overallCorrectness: 'patch is correct',\n      overallExplanation: 'No uncommitted changes were found to review.',\n      generatedAt: Date.now(),\n      source: 'local',\n    };\n  }\n\n  const prompt = buildReviewPrompt({\n    target,\n    status: bundle.status,\n    stat: bundle.stat,\n    diff,\n    truncated,\n    instructions,\n  });\n  const reviewerModelRef = await reviewModelRef(ctx);\n  const judgeToolCallId = `review_judge_${randomUUID()}`;\n  await emitToolStart(ctx, judgeToolCallId, 'review.model_judge', {\n    target,\n    diffChars: diff.length,\n    truncated,\n    ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n  });\n  const answer = ctx.btwQuery\n    ? await ctx.btwQuery(prompt, {\n      maxTokens: REVIEW_JUDGE_MAX_TOKENS,\n      includeSessionContext: false,\n      onTextDelta: (delta) => emitToolTextDelta(ctx, judgeToolCallId, 'review.model_judge', delta),\n      ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n      })\n    : { text: '', error: 'Review model query is not available in this command context.' };\n  let judgeFailure = answer.error\n    ? { reason: `Reviewer model error: ${answer.error}` }\n    : answer.text\n      ? undefined\n      : { reason: 'Reviewer model returned no text.' };\n  if (answer?.text && !answer.error) {\n    try {\n      const parsed = parseReviewJson(answer.text, target);\n      await emitToolEnd(\n        ctx,\n        judgeToolCallId,\n        'review.model_judge',\n        parsed.summary || `${parsed.findings.length} findings`,\n        {\n          target,\n          findings: parsed.findings.length,\n          overallCorrectness: parsed.overallCorrectness,\n        },\n      );\n      return parsed;\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      judgeFailure = {\n        reason: `Reviewer model output could not be parsed: ${em}`,\n      };\n    }\n  }\n\n  const reason = judgeFailure?.reason ?? 'Reviewer model output could not be parsed.';\n  const fallback: ReviewOutput = {\n    type: 'review',\n    target,\n    summary: 'Review model did not complete; returned a local diff summary.',\n    findings: [],\n    overallCorrectness: 'unknown',\n    overallExplanation: [\n      reason,\n      bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No textual diff stat was available.',\n    ].join('\\n\\n'),\n    generatedAt: Date.now(),\n    source: 'local',\n  };\n  await emitToolEnd(\n    ctx,\n    judgeToolCallId,\n    'review.model_judge',\n    fallback.summary,\n    {\n      target,\n      findings: 0,\n      overallCorrectness: fallback.overallCorrectness,\n      fallback: true,\n      reason,\n      ...(answer.text ? { responsePreview: previewText(answer.text) } : {}),\n    },\n    true,\n  );\n  return fallback;\n}\n\nconst reviewCommand: CommandDefinition = {\n  id: 'coding.review',\n  name: 'review',\n  description: 'Review current workspace changes for correctness issues',\n  category: 'tool',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/review', '/review focus on auth and persistence'],\n  handler: async (ctx: CommandContext, args: string) => {\n    await ctx.setTyping(true);\n    const review = await buildReview(ctx, args);\n    return {\n      content: formatReviewMarkdown(review),\n      success: true,\n      metadata: { review },\n    };\n  },\n};\n\nexport function registerReviewCommand(): void {\n  commandRegistry.register(reviewCommand);\n}\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAEhC,eAAe,cACb,KACA,YACA,UACA,MACe;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACD,CAAC;;AAGJ,eAAe,YACb,KACA,YACA,UACA,YACA,SACA,UAAU,OACK;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACA,QAAQ;GACN,SAAS,CAAC;IAAE,MAAM;IAAQ,MAAM;IAAY,CAAC;GAC7C,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;GAC/B;EACF,CAAC;;AAGJ,eAAe,kBACb,KACA,YACA,UACA,OACe;AACf,KAAI,CAAC,MAAO;AACZ,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA,MAAM,EAAE;EACR,eAAe,EACb,SAAS,CAAC;GAAE,MAAM;GAAQ,MAAM;GAAO,CAAC,EACzC;EACF,CAAC;;AAGJ,SAAS,kBAAkB,MAAoD;AAC7E,KAAI,KAAK,UAAU,eAAgB,QAAO;EAAE;EAAM,WAAW;EAAO;AACpE,QAAO;EACL,MAAM,KAAK,MAAM,GAAG,eAAe,GAAG;EACtC,WAAW;EACZ;;AAGH,SAAS,kBAAkB,KAAsB;CAE/C,MAAM,QADS,IAAI,MAAM,gCACL,GAAG,MAAM,KAAK,MAAM;CACxC,MAAM,QAAQ,KAAK,QAAQ,IAAI;CAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,KAAI,QAAQ,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,uCAAuC;AACtF,QAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;;AAG/C,SAAS,aAAa,KAA8B;CAClD,MAAM,IAAI,OAAO,QAAQ,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO,GAAG,EAAE,GAAG;AAChF,KAAI,MAAM,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,EAAG,QAAO;AACrD,QAAO;;AAGT,SAAS,WAAW,KAAkC;AACpD,QAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,GAAG,MAAM,KAAA;;AAGjE,SAAS,WAAW,KAAsB;AACxC,QAAO,OAAO,QAAQ,WAAW,IAAI,MAAM,GAAG;;AAGhD,SAAS,gBAAgB,KAAa,QAA8B;CAClE,MAAM,SAAS,kBAAkB,IAAI;CACrC,MAAM,MAAM,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GACtE,SACA,EAAE;CAEN,MAAM,YADc,MAAM,QAAQ,IAAI,SAAS,GAAG,IAAI,WAAW,EAAE,EAEhE,KAAK,SAAS;EACb,MAAM,IAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAC9D,OACA,EAAE;EACN,MAAM,MAAM,EAAE,iBAAiB,OAAO,EAAE,kBAAkB,WACtD,EAAE,gBACF,EAAE;EACN,MAAM,QAAQ,IAAI,cAAc,OAAO,IAAI,eAAe,WACtD,IAAI,aACJ,EAAE;EACN,MAAM,QAAQ,WAAW,EAAE,MAAM;EACjC,MAAM,OAAO,WAAW,EAAE,KAAK;AAC/B,MAAI,CAAC,SAAS,CAAC,KAAM,QAAO,KAAA;EAC5B,MAAM,UAAyB;GAC7B,OAAO,SAAS,KAAK,MAAM,GAAG,GAAG;GACjC;GACA,UAAU,aAAa,EAAE,SAAS;GACnC;EACD,MAAM,kBAAkB,WAAW,EAAE,oBAAoB,EAAE,gBAAgB;EAC3E,MAAM,WAAW,WAAW,IAAI,aAAa,EAAE,SAAS;EACxD,MAAM,YAAY,WAAW,MAAM,SAAS,EAAE,UAAU;EACxD,MAAM,UAAU,WAAW,MAAM,OAAO,EAAE,QAAQ;AAClD,MAAI,oBAAoB,KAAA,EAAW,SAAQ,kBAAkB;AAC7D,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,MAAI,YAAY,KAAA,EAAW,SAAQ,UAAU;AAC7C,SAAO;GACP,CACD,QAAQ,SAAgC,QAAQ,KAAK,CAAC;CAEzD,MAAM,cAAc,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;CACjF,MAAM,qBACJ,gBAAgB,sBAAsB,gBAAgB,uBAClD,cACA;AACN,QAAO;EACL,MAAM;EACN;EACA,SAAS,WAAW,IAAI,QAAQ,IAAI,GAAG,SAAS,OAAO,UAAU,SAAS,WAAW,IAAI,KAAK;EAC9F;EACA;EACA,oBAAoB,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;EACjF,wBAAwB,WAAW,IAAI,4BAA4B,IAAI,uBAAuB;EAC9F,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;;AAGH,SAAS,YAAY,MAAc,MAAM,KAAa;CACpD,MAAM,UAAU,KAAK,MAAM;AAC3B,QAAO,QAAQ,SAAS,MAAM,GAAG,QAAQ,MAAM,GAAG,IAAI,CAAC,KAAK;;AAG9D,eAAe,eAAe,KAAkD;CAC9E,MAAM,kBAAkB,MAAM,IAAI,yBAAyB,EACvD,IAAI,IAAI,WAAW,CACpB,MAAM,WAAW,QAAQ,eAAe,MAAM,CAAC,CAC/C,YAAY,KAAA,EAAU;AACzB,KAAI,gBAAiB,QAAO;AAE5B,KAAI;EACF,MAAM,UAAU,uCAAuC,IAAI,QAAQ,IAAI,WAAW;AAClF,SAAO,QAAQ,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,IAAI,QAAQ;SAChE;AACN;;;AAIJ,SAAS,kBAAkB,QAOhB;AACT,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA,OAAO,eAAe,gCAAgC,OAAO,iBAAiB;EAC9E,WAAW,OAAO;EAClB,OAAO,YAAY,6EAA6E;EAChG;EACA,OAAO,UAAU;EACjB;EACA,OAAO,QAAQ;EACf;EACA,OAAO,QAAQ;EAChB,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;;AAGhC,eAAe,iBAAiB,KAAsC;CACpE,MAAM,qBAAqB,IAAI,yBAAyB;CACxD,MAAM,gBAAgB,qBAClB,MAAM,mBAAmB,IAAI,IAAI,WAAW,CAAC,YAAY,KAAK,GAC9D;AACJ,QAAO,iCACL,IAAI,QACJ,IAAI,YACJ,eACA,qBAAqB,IAAI,WAAW,CACrC;;AAGH,eAAe,YAAY,KAAqB,MAAqC;CAEnF,MAAM,MAAM,MAAM,eAAe,MADT,iBAAiB,IAAI,CACF;CAC3C,MAAM,eAAe,sBAAsB,KAAK;CAChD,MAAM,oBAAoB,kBAAkB,YAAY;AACxD,OAAM,cAAc,KAAK,mBAAmB,uBAAuB;EACjE,QAAQ,KAAK,MAAM,IAAI;EACvB;EACD,CAAC;CACF,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,sBAAsB,KAAK,aAAa;AACvD,QAAM,YACJ,KACA,mBACA,uBACA,CACE,WAAW,OAAO,eAClB,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,gBAChE,CAAC,KAAK,OAAO,EACd;GACE,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,MAAM,OAAO;GACd,CACF;UACM,KAAK;AAEZ,QAAM,YAAY,KAAK,mBAAmB,uBAD/B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,EACU,EAAE,KAAK,EAAE,KAAK;AACnF,QAAM;;CAER,MAAM,EAAE,MAAM,MAAM,cAAc,kBAAkB,OAAO,KAAK;CAChE,MAAM,SAAS,OAAO;CACtB,MAAM,eAAe,aAAa,gBAAgB;AAElD,KAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,OAAO,KAAK,MAAM,CAC9C,QAAO;EACL,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB;EACpB,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;CAGH,MAAM,SAAS,kBAAkB;EAC/B;EACA,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA;EACA;EACD,CAAC;CACF,MAAM,mBAAmB,MAAM,eAAe,IAAI;CAClD,MAAM,kBAAkB,gBAAgB,YAAY;AACpD,OAAM,cAAc,KAAK,iBAAiB,sBAAsB;EAC9D;EACA,WAAW,KAAK;EAChB;EACA,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EAC3D,CAAC;CACF,MAAM,SAAS,IAAI,WACf,MAAM,IAAI,SAAS,QAAQ;EAC3B,WAAW;EACX,uBAAuB;EACvB,cAAc,UAAU,kBAAkB,KAAK,iBAAiB,sBAAsB,MAAM;EAC5F,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EACzD,CAAC,GACF;EAAE,MAAM;EAAI,OAAO;EAAgE;CACvF,IAAI,eAAe,OAAO,QACtB,EAAE,QAAQ,yBAAyB,OAAO,SAAS,GACnD,OAAO,OACL,KAAA,IACA,EAAE,QAAQ,oCAAoC;AACpD,KAAI,QAAQ,QAAQ,CAAC,OAAO,MAC1B,KAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,MAAM,OAAO;AACnD,QAAM,YACJ,KACA,iBACA,sBACA,OAAO,WAAW,GAAG,OAAO,SAAS,OAAO,YAC5C;GACE;GACA,UAAU,OAAO,SAAS;GAC1B,oBAAoB,OAAO;GAC5B,CACF;AACD,SAAO;UACA,KAAK;AAEZ,iBAAe,EACb,QAAQ,8CAFC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAG1D;;CAIL,MAAM,SAAS,cAAc,UAAU;CACvC,MAAM,WAAyB;EAC7B,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB,CAClB,QACA,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,sCAChE,CAAC,KAAK,OAAO;EACd,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;AACD,OAAM,YACJ,KACA,iBACA,sBACA,SAAS,SACT;EACE;EACA,UAAU;EACV,oBAAoB,SAAS;EAC7B,UAAU;EACV;EACA,GAAI,OAAO,OAAO,EAAE,iBAAiB,YAAY,OAAO,KAAK,EAAE,GAAG,EAAE;EACrE,EACD,KACD;AACD,QAAO;;AAGT,MAAM,gBAAmC;CACvC,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,WAAW,wCAAwC;CAC9D,SAAS,OAAO,KAAqB,SAAiB;AACpD,QAAM,IAAI,UAAU,KAAK;EACzB,MAAM,SAAS,MAAM,YAAY,KAAK,KAAK;AAC3C,SAAO;GACL,SAAS,qBAAqB,OAAO;GACrC,SAAS;GACT,UAAU,EAAE,QAAQ;GACrB;;CAEJ;AAED,SAAgB,wBAA8B;AAC5C,iBAAgB,SAAS,cAAc"}
+{"version":3,"file":"review.js","names":[],"sources":["../../../../src/chat-commands/builtins/review.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { CommandDefinition, CommandContext } from '../types.js';\nimport { commandRegistry } from '../registry.js';\nimport { effectiveWorkspacePathForSession } from '../../session/session-workspace.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport { getProjectForSession } from '../../projects/workspace.js';\nimport {\n  buildReviewDiffBundle,\n  parseReviewTargetArgs,\n  resolveGitRoot,\n} from '../../review/review-git.js';\nimport {\n  formatReviewMarkdown,\n  type ReviewFinding,\n  type ReviewOutput,\n  type ReviewPriority,\n} from '../../review/review-types.js';\n\nconst MAX_DIFF_CHARS = 60_000;\nconst REVIEW_JUDGE_MAX_TOKENS = 16_384;\n\nasync function emitReviewStart(\n  ctx: CommandContext,\n  reviewId: string,\n  target: string,\n  stage: 'preparing' | 'reviewing',\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'review_start',\n    reviewId,\n    target,\n    stage,\n  });\n}\n\nasync function emitReviewEnd(\n  ctx: CommandContext,\n  reviewId: string,\n  status: 'complete' | 'error',\n  message?: string,\n): Promise<void> {\n  await ctx.emitEvent?.({\n    type: 'review_end',\n    reviewId,\n    status,\n    ...(message ? { message } : {}),\n  });\n}\n\nasync function emitReviewDelta(\n  ctx: CommandContext,\n  reviewId: string,\n  delta: string,\n): Promise<void> {\n  if (!delta) return;\n  await ctx.emitEvent?.({\n    type: 'review_delta',\n    reviewId,\n    delta,\n  });\n}\n\nfunction createReviewProgressExtractor(): (delta: string) => string {\n  const open = '<review_progress>';\n  const close = '</review_progress>';\n  let buffer = '';\n  let inside = false;\n\n  return (delta) => {\n    buffer += delta;\n    let visible = '';\n\n    while (buffer) {\n      if (!inside) {\n        const start = buffer.indexOf(open);\n        if (start < 0) {\n          buffer = buffer.slice(-Math.max(0, open.length - 1));\n          break;\n        }\n        buffer = buffer.slice(start + open.length);\n        inside = true;\n      }\n\n      const end = buffer.indexOf(close);\n      if (end < 0) {\n        const safeLength = Math.max(0, buffer.length - (close.length - 1));\n        visible += buffer.slice(0, safeLength);\n        buffer = buffer.slice(safeLength);\n        break;\n      }\n\n      visible += buffer.slice(0, end);\n      buffer = buffer.slice(end + close.length);\n      inside = false;\n    }\n\n    return visible;\n  };\n}\n\nfunction truncateForPrompt(text: string): { text: string; truncated: boolean } {\n  if (text.length <= MAX_DIFF_CHARS) return { text, truncated: false };\n  return {\n    text: text.slice(0, MAX_DIFF_CHARS) + '\\n\\n[diff truncated]',\n    truncated: true,\n  };\n}\n\nfunction extractJsonObject(raw: string): unknown {\n  const fenced = raw.match(/```(?:json)?\\s*([\\s\\S]*?)```/i);\n  const text = (fenced?.[1] ?? raw).trim();\n  const start = text.indexOf('{');\n  const end = text.lastIndexOf('}');\n  if (start < 0 || end <= start) throw new Error('review response did not contain JSON');\n  return JSON.parse(text.slice(start, end + 1));\n}\n\nfunction priorityFrom(raw: unknown): ReviewPriority {\n  const n = typeof raw === 'number' ? raw : Number.parseInt(String(raw ?? ''), 10);\n  if (n === 0 || n === 1 || n === 2 || n === 3) return n;\n  return 2;\n}\n\nfunction numberFrom(raw: unknown): number | undefined {\n  return typeof raw === 'number' && Number.isFinite(raw) ? raw : undefined;\n}\n\nfunction stringFrom(raw: unknown): string {\n  return typeof raw === 'string' ? raw.trim() : '';\n}\n\nfunction parseReviewJson(raw: string, target: string): ReviewOutput {\n  const parsed = extractJsonObject(raw);\n  const rec = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n    ? parsed as Record<string, unknown>\n    : {};\n  const rawFindings = Array.isArray(rec.findings) ? rec.findings : [];\n  const findings: ReviewFinding[] = rawFindings\n    .map((item) => {\n      const f = item && typeof item === 'object' && !Array.isArray(item)\n        ? item as Record<string, unknown>\n        : {};\n      const loc = f.code_location && typeof f.code_location === 'object'\n        ? f.code_location as Record<string, unknown>\n        : {};\n      const range = loc.line_range && typeof loc.line_range === 'object'\n        ? loc.line_range as Record<string, unknown>\n        : {};\n      const title = stringFrom(f.title);\n      const body = stringFrom(f.body);\n      if (!title && !body) return undefined;\n      const finding: ReviewFinding = {\n        title: title || body.slice(0, 80),\n        body,\n        priority: priorityFrom(f.priority),\n      };\n      const confidenceScore = numberFrom(f.confidence_score ?? f.confidenceScore);\n      const filePath = stringFrom(loc.file_path ?? f.filePath);\n      const lineStart = numberFrom(range.start ?? f.lineStart);\n      const lineEnd = numberFrom(range.end ?? f.lineEnd);\n      if (confidenceScore !== undefined) finding.confidenceScore = confidenceScore;\n      if (filePath) finding.filePath = filePath;\n      if (lineStart !== undefined) finding.lineStart = lineStart;\n      if (lineEnd !== undefined) finding.lineEnd = lineEnd;\n      return finding;\n    })\n    .filter((item): item is ReviewFinding => Boolean(item));\n\n  const correctness = stringFrom(rec.overall_correctness ?? rec.overallCorrectness);\n  const overallCorrectness =\n    correctness === 'patch is correct' || correctness === 'patch is incorrect'\n      ? correctness\n      : 'unknown';\n  return {\n    type: 'review',\n    target,\n    summary: stringFrom(rec.summary) || `${findings.length} finding${findings.length === 1 ? '' : 's'}`,\n    findings,\n    overallCorrectness,\n    overallExplanation: stringFrom(rec.overall_explanation ?? rec.overallExplanation),\n    overallConfidenceScore: numberFrom(rec.overall_confidence_score ?? rec.overallConfidenceScore),\n    generatedAt: Date.now(),\n    source: 'model',\n  };\n}\n\nasync function reviewModelRef(ctx: CommandContext): Promise<string | undefined> {\n  const sessionOverride = await ctx.getSessionConfigStore?.()\n    ?.get(ctx.sessionKey)\n    .then((config) => config?.modelOverride?.trim())\n    .catch(() => undefined);\n  if (sessionOverride) return sessionOverride;\n\n  try {\n    const profile = resolveEffectiveAgentProfileForSession(ctx.config, ctx.sessionKey);\n    return profile.manifest.models.roles.review?.model?.trim() || profile.primaryModelRef;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction buildReviewPrompt(params: {\n  target: string;\n  status: string;\n  stat: string;\n  diff: string;\n  truncated: boolean;\n  instructions: string;\n}): string {\n  return [\n    'You are a senior code reviewer. Review the provided git diff for correctness bugs only.',\n    'Prioritize concrete regressions, broken behavior, missing required tests for changed behavior, data loss, security issues, and runtime/type errors.',\n    'Do not mention style, broad refactors, praise, or speculative improvements.',\n    'Return exactly two XML-delimited sections and nothing else.',\n    'First write a concise, user-facing Markdown review draft inside <review_progress>...</review_progress>. State the scope and concrete evidence only; do not reveal hidden chain-of-thought.',\n    'Then put strict JSON inside <review_result>...</review_result> using this shape:',\n    '{\"findings\":[{\"title\":\"...\",\"body\":\"...\",\"priority\":1,\"confidence_score\":0.9,\"code_location\":{\"file_path\":\"path\",\"line_range\":{\"start\":12,\"end\":12}}}],\"overall_correctness\":\"patch is correct\",\"overall_explanation\":\"...\",\"overall_confidence_score\":0.8,\"summary\":\"...\"}',\n    'Use priority 0 for release-blocking, 1 for high, 2 for medium, 3 for low.',\n    params.instructions ? `Extra reviewer instructions: ${params.instructions}` : '',\n    `Target: ${params.target}`,\n    params.truncated ? 'The diff was truncated; only report findings supported by visible lines.' : '',\n    'Git status:',\n    params.status || '(clean)',\n    'Diff stat:',\n    params.stat || '(none)',\n    'Diff:',\n    params.diff || '(none)',\n  ].filter(Boolean).join('\\n\\n');\n}\n\nasync function resolveWorkspace(ctx: CommandContext): Promise<string> {\n  const sessionConfigStore = ctx.getSessionConfigStore?.();\n  const sessionConfig = sessionConfigStore\n    ? await sessionConfigStore.get(ctx.sessionKey).catch(() => null)\n    : null;\n  return effectiveWorkspacePathForSession(\n    ctx.config,\n    ctx.sessionKey,\n    sessionConfig,\n    getProjectForSession(ctx.sessionKey),\n  );\n}\n\nasync function buildReview(ctx: CommandContext, args: string): Promise<ReviewOutput> {\n  const workspace = await resolveWorkspace(ctx);\n  const cwd = await resolveGitRoot(workspace);\n  const reviewTarget = parseReviewTargetArgs(args);\n  const reviewId = `review_${randomUUID()}`;\n  await emitReviewStart(ctx, reviewId, args.trim() || 'current workspace changes', 'preparing');\n  let bundle: Awaited<ReturnType<typeof buildReviewDiffBundle>>;\n  try {\n    bundle = await buildReviewDiffBundle(cwd, reviewTarget);\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    await emitReviewEnd(ctx, reviewId, 'error', em);\n    throw err;\n  }\n  const { text: diff, truncated } = truncateForPrompt(bundle.diff);\n  const target = bundle.targetLabel;\n  const instructions = reviewTarget.instructions ?? '';\n  await emitReviewStart(ctx, reviewId, target, 'preparing');\n\n  if (!bundle.status.trim() && !bundle.diff.trim()) {\n    const review: ReviewOutput = {\n      type: 'review',\n      target,\n      summary: 'Working tree is clean.',\n      findings: [],\n      overallCorrectness: 'patch is correct',\n      overallExplanation: 'No uncommitted changes were found to review.',\n      generatedAt: Date.now(),\n      source: 'local',\n    };\n    await emitReviewEnd(ctx, reviewId, 'complete');\n    return review;\n  }\n\n  const prompt = buildReviewPrompt({\n    target,\n    status: bundle.status,\n    stat: bundle.stat,\n    diff,\n    truncated,\n    instructions,\n  });\n  const reviewerModelRef = await reviewModelRef(ctx);\n  await emitReviewStart(ctx, reviewId, target, 'reviewing');\n  const extractReviewProgress = createReviewProgressExtractor();\n  const answer = ctx.btwQuery\n    ? await ctx.btwQuery(prompt, {\n      maxTokens: REVIEW_JUDGE_MAX_TOKENS,\n      includeSessionContext: false,\n      onTextDelta: (delta) => emitReviewDelta(ctx, reviewId, extractReviewProgress(delta)),\n      ...(reviewerModelRef ? { modelRef: reviewerModelRef } : {}),\n      })\n    : { text: '', error: 'Review model query is not available in this command context.' };\n  let judgeFailure = answer.error\n    ? { reason: `Reviewer model error: ${answer.error}` }\n    : answer.text\n      ? undefined\n      : { reason: 'Reviewer model returned no text.' };\n  if (answer?.text && !answer.error) {\n    try {\n      const parsed = parseReviewJson(answer.text, target);\n      await emitReviewEnd(ctx, reviewId, 'complete');\n      return parsed;\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      judgeFailure = {\n        reason: `Reviewer model output could not be parsed: ${em}`,\n      };\n    }\n  }\n\n  const reason = judgeFailure?.reason ?? 'Reviewer model output could not be parsed.';\n  const fallback: ReviewOutput = {\n    type: 'review',\n    target,\n    summary: 'Review model did not complete; returned a local diff summary.',\n    findings: [],\n    overallCorrectness: 'unknown',\n    overallExplanation: [\n      reason,\n      bundle.stat.trim() ? `Changed files:\\n${bundle.stat.trim()}` : 'No textual diff stat was available.',\n    ].join('\\n\\n'),\n    generatedAt: Date.now(),\n    source: 'local',\n  };\n  await emitReviewEnd(ctx, reviewId, 'error', reason);\n  return fallback;\n}\n\nconst reviewCommand: CommandDefinition = {\n  id: 'coding.review',\n  name: 'review',\n  description: 'Review current workspace changes for correctness issues',\n  category: 'tool',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/review', '/review focus on auth and persistence'],\n  handler: async (ctx: CommandContext, args: string) => {\n    await ctx.setTyping(true);\n    const review = await buildReview(ctx, args);\n    return {\n      content: formatReviewMarkdown(review),\n      success: true,\n      metadata: { review },\n    };\n  },\n};\n\nexport function registerReviewCommand(): void {\n  commandRegistry.register(reviewCommand);\n}\n"],"mappings":";;;;;;;;AAmBA,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAEhC,eAAe,gBACb,KACA,UACA,QACA,OACe;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA;EACD,CAAC;;AAGJ,eAAe,cACb,KACA,UACA,QACA,SACe;AACf,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACA,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;EAC/B,CAAC;;AAGJ,eAAe,gBACb,KACA,UACA,OACe;AACf,KAAI,CAAC,MAAO;AACZ,OAAM,IAAI,YAAY;EACpB,MAAM;EACN;EACA;EACD,CAAC;;AAGJ,SAAS,gCAA2D;CAClE,MAAM,OAAO;CACb,MAAM,QAAQ;CACd,IAAI,SAAS;CACb,IAAI,SAAS;AAEb,SAAQ,UAAU;AAChB,YAAU;EACV,IAAI,UAAU;AAEd,SAAO,QAAQ;AACb,OAAI,CAAC,QAAQ;IACX,MAAM,QAAQ,OAAO,QAAQ,KAAK;AAClC,QAAI,QAAQ,GAAG;AACb,cAAS,OAAO,MAAM,CAAC,KAAK,IAAI,GAAG,GAAgB,CAAC;AACpD;;AAEF,aAAS,OAAO,MAAM,QAAQ,GAAY;AAC1C,aAAS;;GAGX,MAAM,MAAM,OAAO,QAAQ,MAAM;AACjC,OAAI,MAAM,GAAG;IACX,MAAM,aAAa,KAAK,IAAI,GAAG,OAAO,SAAU,GAAkB;AAClE,eAAW,OAAO,MAAM,GAAG,WAAW;AACtC,aAAS,OAAO,MAAM,WAAW;AACjC;;AAGF,cAAW,OAAO,MAAM,GAAG,IAAI;AAC/B,YAAS,OAAO,MAAM,MAAM,GAAa;AACzC,YAAS;;AAGX,SAAO;;;AAIX,SAAS,kBAAkB,MAAoD;AAC7E,KAAI,KAAK,UAAU,eAAgB,QAAO;EAAE;EAAM,WAAW;EAAO;AACpE,QAAO;EACL,MAAM,KAAK,MAAM,GAAG,eAAe,GAAG;EACtC,WAAW;EACZ;;AAGH,SAAS,kBAAkB,KAAsB;CAE/C,MAAM,QADS,IAAI,MAAM,gCACL,GAAG,MAAM,KAAK,MAAM;CACxC,MAAM,QAAQ,KAAK,QAAQ,IAAI;CAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,KAAI,QAAQ,KAAK,OAAO,MAAO,OAAM,IAAI,MAAM,uCAAuC;AACtF,QAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;;AAG/C,SAAS,aAAa,KAA8B;CAClD,MAAM,IAAI,OAAO,QAAQ,WAAW,MAAM,OAAO,SAAS,OAAO,OAAO,GAAG,EAAE,GAAG;AAChF,KAAI,MAAM,KAAK,MAAM,KAAK,MAAM,KAAK,MAAM,EAAG,QAAO;AACrD,QAAO;;AAGT,SAAS,WAAW,KAAkC;AACpD,QAAO,OAAO,QAAQ,YAAY,OAAO,SAAS,IAAI,GAAG,MAAM,KAAA;;AAGjE,SAAS,WAAW,KAAsB;AACxC,QAAO,OAAO,QAAQ,WAAW,IAAI,MAAM,GAAG;;AAGhD,SAAS,gBAAgB,KAAa,QAA8B;CAClE,MAAM,SAAS,kBAAkB,IAAI;CACrC,MAAM,MAAM,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GACtE,SACA,EAAE;CAEN,MAAM,YADc,MAAM,QAAQ,IAAI,SAAS,GAAG,IAAI,WAAW,EAAE,EAEhE,KAAK,SAAS;EACb,MAAM,IAAI,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAC9D,OACA,EAAE;EACN,MAAM,MAAM,EAAE,iBAAiB,OAAO,EAAE,kBAAkB,WACtD,EAAE,gBACF,EAAE;EACN,MAAM,QAAQ,IAAI,cAAc,OAAO,IAAI,eAAe,WACtD,IAAI,aACJ,EAAE;EACN,MAAM,QAAQ,WAAW,EAAE,MAAM;EACjC,MAAM,OAAO,WAAW,EAAE,KAAK;AAC/B,MAAI,CAAC,SAAS,CAAC,KAAM,QAAO,KAAA;EAC5B,MAAM,UAAyB;GAC7B,OAAO,SAAS,KAAK,MAAM,GAAG,GAAG;GACjC;GACA,UAAU,aAAa,EAAE,SAAS;GACnC;EACD,MAAM,kBAAkB,WAAW,EAAE,oBAAoB,EAAE,gBAAgB;EAC3E,MAAM,WAAW,WAAW,IAAI,aAAa,EAAE,SAAS;EACxD,MAAM,YAAY,WAAW,MAAM,SAAS,EAAE,UAAU;EACxD,MAAM,UAAU,WAAW,MAAM,OAAO,EAAE,QAAQ;AAClD,MAAI,oBAAoB,KAAA,EAAW,SAAQ,kBAAkB;AAC7D,MAAI,SAAU,SAAQ,WAAW;AACjC,MAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,MAAI,YAAY,KAAA,EAAW,SAAQ,UAAU;AAC7C,SAAO;GACP,CACD,QAAQ,SAAgC,QAAQ,KAAK,CAAC;CAEzD,MAAM,cAAc,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;CACjF,MAAM,qBACJ,gBAAgB,sBAAsB,gBAAgB,uBAClD,cACA;AACN,QAAO;EACL,MAAM;EACN;EACA,SAAS,WAAW,IAAI,QAAQ,IAAI,GAAG,SAAS,OAAO,UAAU,SAAS,WAAW,IAAI,KAAK;EAC9F;EACA;EACA,oBAAoB,WAAW,IAAI,uBAAuB,IAAI,mBAAmB;EACjF,wBAAwB,WAAW,IAAI,4BAA4B,IAAI,uBAAuB;EAC9F,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;;AAGH,eAAe,eAAe,KAAkD;CAC9E,MAAM,kBAAkB,MAAM,IAAI,yBAAyB,EACvD,IAAI,IAAI,WAAW,CACpB,MAAM,WAAW,QAAQ,eAAe,MAAM,CAAC,CAC/C,YAAY,KAAA,EAAU;AACzB,KAAI,gBAAiB,QAAO;AAE5B,KAAI;EACF,MAAM,UAAU,uCAAuC,IAAI,QAAQ,IAAI,WAAW;AAClF,SAAO,QAAQ,SAAS,OAAO,MAAM,QAAQ,OAAO,MAAM,IAAI,QAAQ;SAChE;AACN;;;AAIJ,SAAS,kBAAkB,QAOhB;AACT,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,OAAO,eAAe,gCAAgC,OAAO,iBAAiB;EAC9E,WAAW,OAAO;EAClB,OAAO,YAAY,6EAA6E;EAChG;EACA,OAAO,UAAU;EACjB;EACA,OAAO,QAAQ;EACf;EACA,OAAO,QAAQ;EAChB,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;;AAGhC,eAAe,iBAAiB,KAAsC;CACpE,MAAM,qBAAqB,IAAI,yBAAyB;CACxD,MAAM,gBAAgB,qBAClB,MAAM,mBAAmB,IAAI,IAAI,WAAW,CAAC,YAAY,KAAK,GAC9D;AACJ,QAAO,iCACL,IAAI,QACJ,IAAI,YACJ,eACA,qBAAqB,IAAI,WAAW,CACrC;;AAGH,eAAe,YAAY,KAAqB,MAAqC;CAEnF,MAAM,MAAM,MAAM,eAAe,MADT,iBAAiB,IAAI,CACF;CAC3C,MAAM,eAAe,sBAAsB,KAAK;CAChD,MAAM,WAAW,UAAU,YAAY;AACvC,OAAM,gBAAgB,KAAK,UAAU,KAAK,MAAM,IAAI,6BAA6B,YAAY;CAC7F,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,sBAAsB,KAAK,aAAa;UAChD,KAAK;AAEZ,QAAM,cAAc,KAAK,UAAU,SADxB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACZ;AAC/C,QAAM;;CAER,MAAM,EAAE,MAAM,MAAM,cAAc,kBAAkB,OAAO,KAAK;CAChE,MAAM,SAAS,OAAO;CACtB,MAAM,eAAe,aAAa,gBAAgB;AAClD,OAAM,gBAAgB,KAAK,UAAU,QAAQ,YAAY;AAEzD,KAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE;EAChD,MAAM,SAAuB;GAC3B,MAAM;GACN;GACA,SAAS;GACT,UAAU,EAAE;GACZ,oBAAoB;GACpB,oBAAoB;GACpB,aAAa,KAAK,KAAK;GACvB,QAAQ;GACT;AACD,QAAM,cAAc,KAAK,UAAU,WAAW;AAC9C,SAAO;;CAGT,MAAM,SAAS,kBAAkB;EAC/B;EACA,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA;EACA;EACD,CAAC;CACF,MAAM,mBAAmB,MAAM,eAAe,IAAI;AAClD,OAAM,gBAAgB,KAAK,UAAU,QAAQ,YAAY;CACzD,MAAM,wBAAwB,+BAA+B;CAC7D,MAAM,SAAS,IAAI,WACf,MAAM,IAAI,SAAS,QAAQ;EAC3B,WAAW;EACX,uBAAuB;EACvB,cAAc,UAAU,gBAAgB,KAAK,UAAU,sBAAsB,MAAM,CAAC;EACpF,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;EACzD,CAAC,GACF;EAAE,MAAM;EAAI,OAAO;EAAgE;CACvF,IAAI,eAAe,OAAO,QACtB,EAAE,QAAQ,yBAAyB,OAAO,SAAS,GACnD,OAAO,OACL,KAAA,IACA,EAAE,QAAQ,oCAAoC;AACpD,KAAI,QAAQ,QAAQ,CAAC,OAAO,MAC1B,KAAI;EACF,MAAM,SAAS,gBAAgB,OAAO,MAAM,OAAO;AACnD,QAAM,cAAc,KAAK,UAAU,WAAW;AAC9C,SAAO;UACA,KAAK;AAEZ,iBAAe,EACb,QAAQ,8CAFC,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,IAG1D;;CAIL,MAAM,SAAS,cAAc,UAAU;CACvC,MAAM,WAAyB;EAC7B,MAAM;EACN;EACA,SAAS;EACT,UAAU,EAAE;EACZ,oBAAoB;EACpB,oBAAoB,CAClB,QACA,OAAO,KAAK,MAAM,GAAG,mBAAmB,OAAO,KAAK,MAAM,KAAK,sCAChE,CAAC,KAAK,OAAO;EACd,aAAa,KAAK,KAAK;EACvB,QAAQ;EACT;AACD,OAAM,cAAc,KAAK,UAAU,SAAS,OAAO;AACnD,QAAO;;AAGT,MAAM,gBAAmC;CACvC,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,WAAW,wCAAwC;CAC9D,SAAS,OAAO,KAAqB,SAAiB;AACpD,QAAM,IAAI,UAAU,KAAK;EACzB,MAAM,SAAS,MAAM,YAAY,KAAK,KAAK;AAC3C,SAAO;GACL,SAAS,qBAAqB,OAAO;GACrC,SAAS;GACT,UAAU,EAAE,QAAQ;GACrB;;CAEJ;AAED,SAAgB,wBAA8B;AAC5C,iBAAgB,SAAS,cAAc"}

package/dist/src/chat-commands/builtins/workflow.js

@@ -1,6 +1,5 @@
 import { extractProfileAgentId } from "../../config/agent-profile.js";
 import { createWorkflowCatalog } from "../../agent/workflow/catalog.js";
-import { getLastWorkflowMemory } from "../../agent/workflow/last-run-memory.js";
 import { commandRegistry } from "../registry.js";
 import { bulletList, code, joinBlocks, section } from "../format-output.js";
 //#region src/chat-commands/builtins/workflow.ts
@@ -19,13 +18,12 @@ import { bulletList, code, joinBlocks, section } from "../format-output.js";
 * `/workflows` and `/workflow view` make discovery cheap, which is the missing
 * piece.
 */
-const VIEW_MAX_LINES = 200;
 function formatEntryDetail(entry) {
 	const tags = entry.tags?.length ? `[${entry.tags.join(", ")}] ` : "";
 	const agents = entry.estimatedAgents ? ` (~${entry.estimatedAgents.min}–${entry.estimatedAgents.max} agents)` : "";
 	return `${tags}${entry.description}${agents}`;
 }
-function formatWorkflowListContent(entries, userDir) {
+function formatWorkflowListContent(entries) {
 	const grouped = {
 		builtin: entries.filter((e) => e.source === "builtin"),
 		user: entries.filter((e) => e.source === "user")
@@ -42,8 +40,8 @@ function formatWorkflowListContent(entries, userDir) {
 	})))));
 	blocks.push(joinBlocks(section("How to run"), bulletList([
 		`Plain language: "run the ${exampleName} workflow"`,
-		`Inspect source: ${code(`/workflow view ${exampleName}`)}`,
-		`Add your own: drop a ${code(".js")} at ${code(userDir)}`
+		`Inspect its visual structure: ${code(`/workflow view ${exampleName}`)}`,
+		"Create and edit workflows in the Workflow Studio."
 	])));
 	return joinBlocks(...blocks);
 }
@@ -58,14 +56,13 @@ const workflowsCommand = {
 		"group"
 	],
 	handler: async (_ctx) => {
-		const catalog = createWorkflowCatalog();
-		const entries = catalog.list();
+		const entries = createWorkflowCatalog().list();
 		if (entries.length === 0) return {
-			content: `No workflows found. Drop a script at ${code(`${catalog.userDir}/<name>.js`)} to add one.`,
+			content: "No workflows found. Create one in the Workflow Studio.",
 			success: true
 		};
 		return {
-			content: formatWorkflowListContent(entries, catalog.userDir),
+			content: formatWorkflowListContent(entries),
 			success: true
 		};
 	}
@@ -96,11 +93,9 @@ const workflowCommand = {
 			const catalog = createWorkflowCatalog();
 			try {
 				const loaded = catalog.load(target);
-				const lines = loaded.script.split("\n");
-				const visible = lines.length > VIEW_MAX_LINES ? [...lines.slice(0, VIEW_MAX_LINES), `… (truncated; ${lines.length - VIEW_MAX_LINES} more lines)`] : lines;
-				const source = loaded.source === "user" ? loaded.path ?? "user" : "built-in";
+				const nodeSummary = loaded.graph.nodes.map((node) => `${node.title} (${node.kind})`).join(" → ");
 				return {
-					content: joinBlocks(`**${loaded.name}** (${source}) — ${loaded.meta.description}`, "```js\n" + visible.join("\n") + "\n```"),
+					content: joinBlocks(`**${loaded.title}** (${loaded.metadata.source}) — ${loaded.description}`, `Flow: ${nodeSummary}`, `Revision: ${loaded.revision}`),
 					success: true
 				};
 			} catch (e) {
@@ -111,33 +106,8 @@ const workflowCommand = {
 			}
 		}
 		if (subLower === "run" || subLower === "start") return runWorkflowFromCommand(ctx, target);
-		if (subLower === "save") {
-			if (!target) return {
-				content: `usage: ${code("/workflow save <name>")}`,
-				success: false
-			};
-			const last = getLastWorkflowMemory().get(ctx.sessionKey);
-			if (!last) return {
-				content: "No workflow has run successfully in this session yet. Run one first (e.g. ask \"run the audit_repo workflow\"), then `/workflow save <name>`.",
-				success: false
-			};
-			const catalog = createWorkflowCatalog();
-			try {
-				const script = last.metaName === target ? last.script : rewriteMetaName(last.script, target);
-				const { path } = catalog.save(target, script);
-				return {
-					content: joinBlocks(`✓ Saved workflow **${target}** → ${code(path)}`, bulletList([`Trigger with ${code(`/${target}`)} or "run the ${target} workflow"`, `Inspect with ${code(`/workflow view ${target}`)}`])),
-					success: true
-				};
-			} catch (e) {
-				return {
-					content: `error: ${e instanceof Error ? e.message : String(e)}`,
-					success: false
-				};
-			}
-		}
 		return {
-			content: joinBlocks(`Unknown subcommand "${sub}". Available: list, view ${code("<name>")}, save ${code("<name>")}.`, `Run directly with ${code("/workflow run <name> [--goal \"...\"] [--json '{...}']")}.`),
+			content: joinBlocks(`Unknown subcommand "${sub}". Available: list, view ${code("<name>")}, run ${code("<name>")}.`, `Run directly with ${code("/workflow run <name> [--goal \"...\"] [--json '{...}']")}.`),
 			success: false
 		};
 	}
@@ -271,21 +241,6 @@ function tokenizeArgs(raw) {
 	}
 	return tokens;
 }
-/**
-* Replace the `name` field inside the FIRST `export const meta = { ... }` literal.
-*
-* Why text-level (not AST re-emit)? The parser already accepted the script
-* once (the runtime ran it), so the surrounding code is unchanged. A targeted
-* regex on the `name: '...'` slot inside the first object literal keeps the
-* user's formatting / comments / quote style intact, which an AST round-trip
-* would smash. The match anchors to the first `name:` after `export const meta`
-* and only touches that single value.
-*/
-function rewriteMetaName(script, newName) {
-	const re = /(export\s+const\s+meta\s*=\s*\{[^}]*?\bname\s*:\s*)(['"`])([^'"`]*)\2/;
-	if (!re.test(script)) throw new Error("could not locate meta.name in the recorded script to rewrite");
-	return script.replace(re, (_m, prefix, quote) => `${prefix}${quote}${newName}${quote}`);
-}
 function registerWorkflowCommands() {
 	commandRegistry.register(workflowsCommand);
 	commandRegistry.register(workflowCommand);

package/dist/src/chat-commands/builtins/workflow.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.js","names":[],"sources":["../../../../src/chat-commands/builtins/workflow.ts"],"sourcesContent":["/**\n * `/workflows` and `/workflow <subcommand>` — read-only commands for browsing\n * saved workflows.\n *\n * Why only read commands here? Slash command results are sent to the user; they\n * are NOT injected back into the agent's turn. Triggering a workflow run from\n * the slash layer would require a non-trivial cross-cutting \"inject this as the\n * next user message\" hook that doesn't exist yet. Instead, the workflow tool\n * understands `name`, and its description tells the model to prefer that route\n * whenever a user mentions a saved workflow by name. Plain text — \"run the\n * audit_repo workflow\" — works end-to-end.\n *\n * `/workflows` and `/workflow view` make discovery cheap, which is the missing\n * piece.\n */\n\nimport { commandRegistry } from '../registry.js';\nimport type { CommandContext, CommandDefinition } from '../types.js';\nimport { bulletList, code, joinBlocks, section } from '../format-output.js';\n\nimport { createWorkflowCatalog } from '../../agent/workflow/catalog.js';\nimport { getLastWorkflowMemory } from '../../agent/workflow/last-run-memory.js';\nimport type { CatalogEntry } from '../../agent/workflow/catalog.js';\nimport { extractProfileAgentId } from '../../config/agent-profile.js';\n\nconst VIEW_MAX_LINES = 200;\n\nfunction formatEntryDetail(entry: CatalogEntry): string {\n  const tags = entry.tags?.length ? `[${entry.tags.join(', ')}] ` : '';\n  const agents = entry.estimatedAgents\n    ? ` (~${entry.estimatedAgents.min}–${entry.estimatedAgents.max} agents)`\n    : '';\n  return `${tags}${entry.description}${agents}`;\n}\n\nfunction formatWorkflowListContent(entries: CatalogEntry[], userDir: string): string {\n  const grouped = {\n    builtin: entries.filter((e) => e.source === 'builtin'),\n    user: entries.filter((e) => e.source === 'user'),\n  };\n  const exampleName = entries[0]?.name ?? 'audit_repo';\n  const blocks: string[] = [];\n\n  if (grouped.user.length > 0) {\n    blocks.push(\n      joinBlocks(\n        section('User workflows'),\n        bulletList(grouped.user.map((e) => ({ label: e.name, detail: formatEntryDetail(e) }))),\n      ),\n    );\n  }\n  if (grouped.builtin.length > 0) {\n    blocks.push(\n      joinBlocks(\n        section('Built-in workflows'),\n        bulletList(grouped.builtin.map((e) => ({ label: e.name, detail: formatEntryDetail(e) }))),\n      ),\n    );\n  }\n\n  blocks.push(\n    joinBlocks(\n      section('How to run'),\n      bulletList([\n        `Plain language: \"run the ${exampleName} workflow\"`,\n        `Inspect source: ${code(`/workflow view ${exampleName}`)}`,\n        `Add your own: drop a ${code('.js')} at ${code(userDir)}`,\n      ]),\n    ),\n  );\n\n  return joinBlocks(...blocks);\n}\n\nconst workflowsCommand: CommandDefinition = {\n  id: 'system.workflows',\n  name: 'workflows',\n  description: 'List saved workflows (built-in + ~/.xopc/workflows/)',\n  category: 'system',\n  scope: ['global', 'private', 'group'],\n  handler: async (_ctx: CommandContext) => {\n    const catalog = createWorkflowCatalog();\n    const entries = catalog.list();\n    if (entries.length === 0) {\n      return {\n        content: `No workflows found. Drop a script at ${code(`${catalog.userDir}/<name>.js`)} to add one.`,\n        success: true,\n      };\n    }\n    return { content: formatWorkflowListContent(entries, catalog.userDir), success: true };\n  },\n};\n\nexport const workflowCommand: CommandDefinition = {\n  id: 'system.workflow',\n  name: 'workflow',\n  description: 'Inspect or manage saved workflows. Subcommands: list, view <name>',\n  category: 'system',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/workflow list', '/workflow view audit_repo'],\n  handler: async (ctx: CommandContext, args: string) => {\n    const trimmed = args.trim();\n    if (!trimmed || trimmed.toLowerCase() === 'list') {\n      return workflowsCommand.handler(ctx, '');\n    }\n    const [sub, ...rest] = trimmed.split(/\\s+/);\n    const subLower = sub.toLowerCase();\n    const target = rest.join(' ').trim();\n\n    if (subLower === 'view' || subLower === 'show' || subLower === 'cat') {\n      if (!target) {\n        return { content: `usage: ${code('/workflow view <name>')}`, success: false };\n      }\n      const catalog = createWorkflowCatalog();\n      try {\n        const loaded = catalog.load(target);\n        const lines = loaded.script.split('\\n');\n        const visible =\n          lines.length > VIEW_MAX_LINES\n            ? [...lines.slice(0, VIEW_MAX_LINES), `… (truncated; ${lines.length - VIEW_MAX_LINES} more lines)`]\n            : lines;\n        const source = loaded.source === 'user' ? loaded.path ?? 'user' : 'built-in';\n        return {\n          content: joinBlocks(\n            `**${loaded.name}** (${source}) — ${loaded.meta.description}`,\n            '```js\\n' + visible.join('\\n') + '\\n```',\n          ),\n          success: true,\n        };\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return { content: `error: ${message}`, success: false };\n      }\n    }\n\n    if (subLower === 'run' || subLower === 'start') {\n      return runWorkflowFromCommand(ctx, target);\n    }\n\n    if (subLower === 'save') {\n      if (!target) {\n        return { content: `usage: ${code('/workflow save <name>')}`, success: false };\n      }\n      const last = getLastWorkflowMemory().get(ctx.sessionKey);\n      if (!last) {\n        return {\n          content:\n            'No workflow has run successfully in this session yet. Run one first (e.g. ask \"run the audit_repo workflow\"), then `/workflow save <name>`.',\n          success: false,\n        };\n      }\n      const catalog = createWorkflowCatalog();\n      try {\n        // Allow the user to rename: if target differs from meta.name, rewrite it\n        // before saving so the file is addressable as `target`.\n        const script =\n          last.metaName === target ? last.script : rewriteMetaName(last.script, target);\n        const { path } = catalog.save(target, script);\n        return {\n          content: joinBlocks(\n            `✓ Saved workflow **${target}** → ${code(path)}`,\n            bulletList([\n              `Trigger with ${code(`/${target}`)} or \"run the ${target} workflow\"`,\n              `Inspect with ${code(`/workflow view ${target}`)}`,\n            ]),\n          ),\n          success: true,\n        };\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return { content: `error: ${message}`, success: false };\n      }\n    }\n\n    return {\n      content: joinBlocks(\n        `Unknown subcommand \"${sub}\". Available: list, view ${code('<name>')}, save ${code('<name>')}.`,\n        `Run directly with ${code('/workflow run <name> [--goal \"...\"] [--json \\'{...}\\']')}.`,\n      ),\n      success: false,\n    };\n  },\n};\n\nasync function runWorkflowFromCommand(ctx: CommandContext, args: string) {\n  if (!ctx.workflowRunApis) {\n    return {\n      content: 'Workflow runs are not available in this context.',\n      success: false,\n    };\n  }\n\n  let parsed: { name: string; goal?: string; input?: unknown };\n  try {\n    parsed = parseWorkflowRunArgs(args);\n  } catch (err) {\n    return {\n      content: `error: ${err instanceof Error ? err.message : String(err)}`,\n      success: false,\n    };\n  }\n  if (!parsed.name) {\n    return {\n      content: `usage: ${code('/workflow run <name> [--goal \"...\"] [--json \\'{...}\\']')}`,\n      success: false,\n    };\n  }\n\n  const catalog = createWorkflowCatalog();\n  try {\n    catalog.load(parsed.name);\n  } catch (e) {\n    const message = e instanceof Error ? e.message : String(e);\n    return { content: `error: ${message}`, success: false };\n  }\n\n  const agentId = extractProfileAgentId(ctx.sessionKey, ctx.config);\n  const source =\n    ctx.source === 'webui' || ctx.channelId === 'webchat'\n      ? ({ kind: 'webui' as const, sessionKey: ctx.sessionKey })\n      : ({ kind: 'chat' as const, sessionKey: ctx.sessionKey });\n  const result = await ctx.workflowRunApis.startWorkflowRun({\n    agentId,\n    definitionId: parsed.name,\n    goal: parsed.goal,\n    input: parsed.input,\n    parentSessionKey: ctx.sessionKey,\n    source,\n  });\n\n  if (result.ok === false) {\n    return {\n      content: `error: ${result.message}`,\n      success: false,\n      metadata: {\n        workflowRun: {\n          ok: false,\n          definitionId: parsed.name,\n          code: result.code,\n          message: result.message,\n        },\n      },\n    };\n  }\n\n  const content = joinBlocks(\n    `Started workflow **${parsed.name}**.`,\n    bulletList([\n      { label: 'runId', detail: code(result.runId) },\n      { label: 'sessionKey', detail: code(result.sessionKey) },\n    ]),\n  );\n\n  return {\n    content,\n    success: true,\n    metadata: {\n      workflowRun: {\n        ok: true,\n        definitionId: parsed.name,\n        runId: result.runId,\n        sessionKey: result.sessionKey,\n        parentSessionKey: ctx.sessionKey,\n      },\n    },\n  };\n}\n\nfunction parseWorkflowRunArgs(raw: string): { name: string; goal?: string; input?: unknown } {\n  const tokens = tokenizeArgs(raw);\n  const name = tokens.shift()?.trim() ?? '';\n  let goal: string | undefined;\n  let input: unknown;\n\n  for (let i = 0; i < tokens.length; i += 1) {\n    const token = tokens[i];\n    if (token === '--goal' || token === '-g') {\n      goal = tokens[++i]?.trim() || undefined;\n      continue;\n    }\n    if (token.startsWith('--goal=')) {\n      goal = token.slice('--goal='.length).trim() || undefined;\n      continue;\n    }\n    if (token === '--json' || token === '--input') {\n      const value = tokens[++i];\n      input = parseJsonArg(value, token);\n      continue;\n    }\n    if (token.startsWith('--json=')) {\n      input = parseJsonArg(token.slice('--json='.length), '--json');\n      continue;\n    }\n    if (token.startsWith('--input=')) {\n      input = parseJsonArg(token.slice('--input='.length), '--input');\n      continue;\n    }\n    if (!goal) {\n      goal = [token, ...tokens.slice(i + 1)].join(' ').trim() || undefined;\n      break;\n    }\n  }\n\n  return { name, goal, input };\n}\n\nfunction parseJsonArg(value: string | undefined, flag: string): unknown {\n  if (!value?.trim()) {\n    throw new Error(`${flag} requires a JSON value`);\n  }\n  try {\n    return JSON.parse(value);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    throw new Error(`${flag} is not valid JSON: ${message}`);\n  }\n}\n\nfunction tokenizeArgs(raw: string): string[] {\n  const tokens: string[] = [];\n  const re = /\"([^\"\\\\]*(?:\\\\.[^\"\\\\]*)*)\"|'([^'\\\\]*(?:\\\\.[^'\\\\]*)*)'|(\\S+)/g;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(raw)) !== null) {\n    const value = match[1] ?? match[2] ?? match[3] ?? '';\n    tokens.push(value.replace(/\\\\([\"'\\\\])/g, '$1'));\n  }\n  return tokens;\n}\n\n/**\n * Replace the `name` field inside the FIRST `export const meta = { ... }` literal.\n *\n * Why text-level (not AST re-emit)? The parser already accepted the script\n * once (the runtime ran it), so the surrounding code is unchanged. A targeted\n * regex on the `name: '...'` slot inside the first object literal keeps the\n * user's formatting / comments / quote style intact, which an AST round-trip\n * would smash. The match anchors to the first `name:` after `export const meta`\n * and only touches that single value.\n */\nfunction rewriteMetaName(script: string, newName: string): string {\n  const re = /(export\\s+const\\s+meta\\s*=\\s*\\{[^}]*?\\bname\\s*:\\s*)(['\"`])([^'\"`]*)\\2/;\n  if (!re.test(script)) {\n    throw new Error('could not locate meta.name in the recorded script to rewrite');\n  }\n  return script.replace(re, (_m, prefix, quote) => `${prefix}${quote}${newName}${quote}`);\n}\n\nexport function registerWorkflowCommands(): void {\n  commandRegistry.register(workflowsCommand);\n  commandRegistry.register(workflowCommand);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAyBA,MAAM,iBAAiB;AAEvB,SAAS,kBAAkB,OAA6B;CACtD,MAAM,OAAO,MAAM,MAAM,SAAS,IAAI,MAAM,KAAK,KAAK,KAAK,CAAC,MAAM;CAClE,MAAM,SAAS,MAAM,kBACjB,MAAM,MAAM,gBAAgB,IAAI,GAAG,MAAM,gBAAgB,IAAI,YAC7D;AACJ,QAAO,GAAG,OAAO,MAAM,cAAc;;AAGvC,SAAS,0BAA0B,SAAyB,SAAyB;CACnF,MAAM,UAAU;EACd,SAAS,QAAQ,QAAQ,MAAM,EAAE,WAAW,UAAU;EACtD,MAAM,QAAQ,QAAQ,MAAM,EAAE,WAAW,OAAO;EACjD;CACD,MAAM,cAAc,QAAQ,IAAI,QAAQ;CACxC,MAAM,SAAmB,EAAE;AAE3B,KAAI,QAAQ,KAAK,SAAS,EACxB,QAAO,KACL,WACE,QAAQ,iBAAiB,EACzB,WAAW,QAAQ,KAAK,KAAK,OAAO;EAAE,OAAO,EAAE;EAAM,QAAQ,kBAAkB,EAAE;EAAE,EAAE,CAAC,CACvF,CACF;AAEH,KAAI,QAAQ,QAAQ,SAAS,EAC3B,QAAO,KACL,WACE,QAAQ,qBAAqB,EAC7B,WAAW,QAAQ,QAAQ,KAAK,OAAO;EAAE,OAAO,EAAE;EAAM,QAAQ,kBAAkB,EAAE;EAAE,EAAE,CAAC,CAC1F,CACF;AAGH,QAAO,KACL,WACE,QAAQ,aAAa,EACrB,WAAW;EACT,4BAA4B,YAAY;EACxC,mBAAmB,KAAK,kBAAkB,cAAc;EACxD,wBAAwB,KAAK,MAAM,CAAC,MAAM,KAAK,QAAQ;EACxD,CAAC,CACH,CACF;AAED,QAAO,WAAW,GAAG,OAAO;;AAG9B,MAAM,mBAAsC;CAC1C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,SAAS,OAAO,SAAyB;EACvC,MAAM,UAAU,uBAAuB;EACvC,MAAM,UAAU,QAAQ,MAAM;AAC9B,MAAI,QAAQ,WAAW,EACrB,QAAO;GACL,SAAS,wCAAwC,KAAK,GAAG,QAAQ,QAAQ,YAAY,CAAC;GACtF,SAAS;GACV;AAEH,SAAO;GAAE,SAAS,0BAA0B,SAAS,QAAQ,QAAQ;GAAE,SAAS;GAAM;;CAEzF;AAED,MAAa,kBAAqC;CAChD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,kBAAkB,4BAA4B;CACzD,SAAS,OAAO,KAAqB,SAAiB;EACpD,MAAM,UAAU,KAAK,MAAM;AAC3B,MAAI,CAAC,WAAW,QAAQ,aAAa,KAAK,OACxC,QAAO,iBAAiB,QAAQ,KAAK,GAAG;EAE1C,MAAM,CAAC,KAAK,GAAG,QAAQ,QAAQ,MAAM,MAAM;EAC3C,MAAM,WAAW,IAAI,aAAa;EAClC,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC,MAAM;AAEpC,MAAI,aAAa,UAAU,aAAa,UAAU,aAAa,OAAO;AACpE,OAAI,CAAC,OACH,QAAO;IAAE,SAAS,UAAU,KAAK,wBAAwB;IAAI,SAAS;IAAO;GAE/E,MAAM,UAAU,uBAAuB;AACvC,OAAI;IACF,MAAM,SAAS,QAAQ,KAAK,OAAO;IACnC,MAAM,QAAQ,OAAO,OAAO,MAAM,KAAK;IACvC,MAAM,UACJ,MAAM,SAAS,iBACX,CAAC,GAAG,MAAM,MAAM,GAAG,eAAe,EAAE,iBAAiB,MAAM,SAAS,eAAe,cAAc,GACjG;IACN,MAAM,SAAS,OAAO,WAAW,SAAS,OAAO,QAAQ,SAAS;AAClE,WAAO;KACL,SAAS,WACP,KAAK,OAAO,KAAK,MAAM,OAAO,MAAM,OAAO,KAAK,eAChD,YAAY,QAAQ,KAAK,KAAK,GAAG,QAClC;KACD,SAAS;KACV;YACM,GAAG;AAEV,WAAO;KAAE,SAAS,UADF,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KACnB,SAAS;KAAO;;;AAI3D,MAAI,aAAa,SAAS,aAAa,QACrC,QAAO,uBAAuB,KAAK,OAAO;AAG5C,MAAI,aAAa,QAAQ;AACvB,OAAI,CAAC,OACH,QAAO;IAAE,SAAS,UAAU,KAAK,wBAAwB;IAAI,SAAS;IAAO;GAE/E,MAAM,OAAO,uBAAuB,CAAC,IAAI,IAAI,WAAW;AACxD,OAAI,CAAC,KACH,QAAO;IACL,SACE;IACF,SAAS;IACV;GAEH,MAAM,UAAU,uBAAuB;AACvC,OAAI;IAGF,MAAM,SACJ,KAAK,aAAa,SAAS,KAAK,SAAS,gBAAgB,KAAK,QAAQ,OAAO;IAC/E,MAAM,EAAE,SAAS,QAAQ,KAAK,QAAQ,OAAO;AAC7C,WAAO;KACL,SAAS,WACP,sBAAsB,OAAO,OAAO,KAAK,KAAK,IAC9C,WAAW,CACT,gBAAgB,KAAK,IAAI,SAAS,CAAC,eAAe,OAAO,aACzD,gBAAgB,KAAK,kBAAkB,SAAS,GACjD,CAAC,CACH;KACD,SAAS;KACV;YACM,GAAG;AAEV,WAAO;KAAE,SAAS,UADF,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KACnB,SAAS;KAAO;;;AAI3D,SAAO;GACL,SAAS,WACP,uBAAuB,IAAI,2BAA2B,KAAK,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,IAC7F,qBAAqB,KAAK,yDAAyD,CAAC,GACrF;GACD,SAAS;GACV;;CAEJ;AAED,eAAe,uBAAuB,KAAqB,MAAc;AACvE,KAAI,CAAC,IAAI,gBACP,QAAO;EACL,SAAS;EACT,SAAS;EACV;CAGH,IAAI;AACJ,KAAI;AACF,WAAS,qBAAqB,KAAK;UAC5B,KAAK;AACZ,SAAO;GACL,SAAS,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GACnE,SAAS;GACV;;AAEH,KAAI,CAAC,OAAO,KACV,QAAO;EACL,SAAS,UAAU,KAAK,yDAAyD;EACjF,SAAS;EACV;CAGH,MAAM,UAAU,uBAAuB;AACvC,KAAI;AACF,UAAQ,KAAK,OAAO,KAAK;UAClB,GAAG;AAEV,SAAO;GAAE,SAAS,UADF,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACnB,SAAS;GAAO;;CAGzD,MAAM,UAAU,sBAAsB,IAAI,YAAY,IAAI,OAAO;CACjE,MAAM,SACJ,IAAI,WAAW,WAAW,IAAI,cAAc,YACvC;EAAE,MAAM;EAAkB,YAAY,IAAI;EAAY,GACtD;EAAE,MAAM;EAAiB,YAAY,IAAI;EAAY;CAC5D,MAAM,SAAS,MAAM,IAAI,gBAAgB,iBAAiB;EACxD;EACA,cAAc,OAAO;EACrB,MAAM,OAAO;EACb,OAAO,OAAO;EACd,kBAAkB,IAAI;EACtB;EACD,CAAC;AAEF,KAAI,OAAO,OAAO,MAChB,QAAO;EACL,SAAS,UAAU,OAAO;EAC1B,SAAS;EACT,UAAU,EACR,aAAa;GACX,IAAI;GACJ,cAAc,OAAO;GACrB,MAAM,OAAO;GACb,SAAS,OAAO;GACjB,EACF;EACF;AAWH,QAAO;EACL,SATc,WACd,sBAAsB,OAAO,KAAK,MAClC,WAAW,CACT;GAAE,OAAO;GAAS,QAAQ,KAAK,OAAO,MAAM;GAAE,EAC9C;GAAE,OAAO;GAAc,QAAQ,KAAK,OAAO,WAAW;GAAE,CACzD,CAAC,CAIK;EACP,SAAS;EACT,UAAU,EACR,aAAa;GACX,IAAI;GACJ,cAAc,OAAO;GACrB,OAAO,OAAO;GACd,YAAY,OAAO;GACnB,kBAAkB,IAAI;GACvB,EACF;EACF;;AAGH,SAAS,qBAAqB,KAA+D;CAC3F,MAAM,SAAS,aAAa,IAAI;CAChC,MAAM,OAAO,OAAO,OAAO,EAAE,MAAM,IAAI;CACvC,IAAI;CACJ,IAAI;AAEJ,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,GAAG;EACzC,MAAM,QAAQ,OAAO;AACrB,MAAI,UAAU,YAAY,UAAU,MAAM;AACxC,UAAO,OAAO,EAAE,IAAI,MAAM,IAAI,KAAA;AAC9B;;AAEF,MAAI,MAAM,WAAW,UAAU,EAAE;AAC/B,UAAO,MAAM,MAAM,EAAiB,CAAC,MAAM,IAAI,KAAA;AAC/C;;AAEF,MAAI,UAAU,YAAY,UAAU,WAAW;GAC7C,MAAM,QAAQ,OAAO,EAAE;AACvB,WAAQ,aAAa,OAAO,MAAM;AAClC;;AAEF,MAAI,MAAM,WAAW,UAAU,EAAE;AAC/B,WAAQ,aAAa,MAAM,MAAM,EAAiB,EAAE,SAAS;AAC7D;;AAEF,MAAI,MAAM,WAAW,WAAW,EAAE;AAChC,WAAQ,aAAa,MAAM,MAAM,EAAkB,EAAE,UAAU;AAC/D;;AAEF,MAAI,CAAC,MAAM;AACT,UAAO,CAAC,OAAO,GAAG,OAAO,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAA;AAC3D;;;AAIJ,QAAO;EAAE;EAAM;EAAM;EAAO;;AAG9B,SAAS,aAAa,OAA2B,MAAuB;AACtE,KAAI,CAAC,OAAO,MAAM,CAChB,OAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB;AAElD,KAAI;AACF,SAAO,KAAK,MAAM,MAAM;UACjB,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,QAAM,IAAI,MAAM,GAAG,KAAK,sBAAsB,UAAU;;;AAI5D,SAAS,aAAa,KAAuB;CAC3C,MAAM,SAAmB,EAAE;CAC3B,MAAM,KAAK;CACX,IAAI;AACJ,SAAQ,QAAQ,GAAG,KAAK,IAAI,MAAM,MAAM;EACtC,MAAM,QAAQ,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM;AAClD,SAAO,KAAK,MAAM,QAAQ,eAAe,KAAK,CAAC;;AAEjD,QAAO;;;;;;;;;;;;AAaT,SAAS,gBAAgB,QAAgB,SAAyB;CAChE,MAAM,KAAK;AACX,KAAI,CAAC,GAAG,KAAK,OAAO,CAClB,OAAM,IAAI,MAAM,+DAA+D;AAEjF,QAAO,OAAO,QAAQ,KAAK,IAAI,QAAQ,UAAU,GAAG,SAAS,QAAQ,UAAU,QAAQ;;AAGzF,SAAgB,2BAAiC;AAC/C,iBAAgB,SAAS,iBAAiB;AAC1C,iBAAgB,SAAS,gBAAgB"}
+{"version":3,"file":"workflow.js","names":[],"sources":["../../../../src/chat-commands/builtins/workflow.ts"],"sourcesContent":["/**\n * `/workflows` and `/workflow <subcommand>` — read-only commands for browsing\n * saved workflows.\n *\n * Why only read commands here? Slash command results are sent to the user; they\n * are NOT injected back into the agent's turn. Triggering a workflow run from\n * the slash layer would require a non-trivial cross-cutting \"inject this as the\n * next user message\" hook that doesn't exist yet. Instead, the workflow tool\n * understands `name`, and its description tells the model to prefer that route\n * whenever a user mentions a saved workflow by name. Plain text — \"run the\n * audit_repo workflow\" — works end-to-end.\n *\n * `/workflows` and `/workflow view` make discovery cheap, which is the missing\n * piece.\n */\n\nimport { commandRegistry } from '../registry.js';\nimport type { CommandContext, CommandDefinition } from '../types.js';\nimport { bulletList, code, joinBlocks, section } from '../format-output.js';\n\nimport { createWorkflowCatalog } from '../../agent/workflow/catalog.js';\nimport type { CatalogEntry } from '../../agent/workflow/catalog.js';\nimport { extractProfileAgentId } from '../../config/agent-profile.js';\n\nfunction formatEntryDetail(entry: CatalogEntry): string {\n  const tags = entry.tags?.length ? `[${entry.tags.join(', ')}] ` : '';\n  const agents = entry.estimatedAgents\n    ? ` (~${entry.estimatedAgents.min}–${entry.estimatedAgents.max} agents)`\n    : '';\n  return `${tags}${entry.description}${agents}`;\n}\n\nfunction formatWorkflowListContent(entries: CatalogEntry[]): string {\n  const grouped = {\n    builtin: entries.filter((e) => e.source === 'builtin'),\n    user: entries.filter((e) => e.source === 'user'),\n  };\n  const exampleName = entries[0]?.name ?? 'audit_repo';\n  const blocks: string[] = [];\n\n  if (grouped.user.length > 0) {\n    blocks.push(\n      joinBlocks(\n        section('User workflows'),\n        bulletList(grouped.user.map((e) => ({ label: e.name, detail: formatEntryDetail(e) }))),\n      ),\n    );\n  }\n  if (grouped.builtin.length > 0) {\n    blocks.push(\n      joinBlocks(\n        section('Built-in workflows'),\n        bulletList(grouped.builtin.map((e) => ({ label: e.name, detail: formatEntryDetail(e) }))),\n      ),\n    );\n  }\n\n  blocks.push(\n    joinBlocks(\n      section('How to run'),\n      bulletList([\n        `Plain language: \"run the ${exampleName} workflow\"`,\n        `Inspect its visual structure: ${code(`/workflow view ${exampleName}`)}`,\n        'Create and edit workflows in the Workflow Studio.',\n      ]),\n    ),\n  );\n\n  return joinBlocks(...blocks);\n}\n\nconst workflowsCommand: CommandDefinition = {\n  id: 'system.workflows',\n  name: 'workflows',\n  description: 'List saved workflows (built-in + ~/.xopc/workflows/)',\n  category: 'system',\n  scope: ['global', 'private', 'group'],\n  handler: async (_ctx: CommandContext) => {\n    const catalog = createWorkflowCatalog();\n    const entries = catalog.list();\n    if (entries.length === 0) {\n      return {\n        content: 'No workflows found. Create one in the Workflow Studio.',\n        success: true,\n      };\n    }\n    return { content: formatWorkflowListContent(entries), success: true };\n  },\n};\n\nexport const workflowCommand: CommandDefinition = {\n  id: 'system.workflow',\n  name: 'workflow',\n  description: 'Inspect or manage saved workflows. Subcommands: list, view <name>',\n  category: 'system',\n  scope: ['global', 'private', 'group'],\n  acceptsArgs: true,\n  examples: ['/workflow list', '/workflow view audit_repo'],\n  handler: async (ctx: CommandContext, args: string) => {\n    const trimmed = args.trim();\n    if (!trimmed || trimmed.toLowerCase() === 'list') {\n      return workflowsCommand.handler(ctx, '');\n    }\n    const [sub, ...rest] = trimmed.split(/\\s+/);\n    const subLower = sub.toLowerCase();\n    const target = rest.join(' ').trim();\n\n    if (subLower === 'view' || subLower === 'show' || subLower === 'cat') {\n      if (!target) {\n        return { content: `usage: ${code('/workflow view <name>')}`, success: false };\n      }\n      const catalog = createWorkflowCatalog();\n      try {\n        const loaded = catalog.load(target);\n        const nodeSummary = loaded.graph.nodes.map((node) => `${node.title} (${node.kind})`).join(' → ');\n        return {\n          content: joinBlocks(\n            `**${loaded.title}** (${loaded.metadata.source}) — ${loaded.description}`,\n            `Flow: ${nodeSummary}`,\n            `Revision: ${loaded.revision}`,\n          ),\n          success: true,\n        };\n      } catch (e) {\n        const message = e instanceof Error ? e.message : String(e);\n        return { content: `error: ${message}`, success: false };\n      }\n    }\n\n    if (subLower === 'run' || subLower === 'start') {\n      return runWorkflowFromCommand(ctx, target);\n    }\n\n    return {\n      content: joinBlocks(\n        `Unknown subcommand \"${sub}\". Available: list, view ${code('<name>')}, run ${code('<name>')}.`,\n        `Run directly with ${code('/workflow run <name> [--goal \"...\"] [--json \\'{...}\\']')}.`,\n      ),\n      success: false,\n    };\n  },\n};\n\nasync function runWorkflowFromCommand(ctx: CommandContext, args: string) {\n  if (!ctx.workflowRunApis) {\n    return {\n      content: 'Workflow runs are not available in this context.',\n      success: false,\n    };\n  }\n\n  let parsed: { name: string; goal?: string; input?: unknown };\n  try {\n    parsed = parseWorkflowRunArgs(args);\n  } catch (err) {\n    return {\n      content: `error: ${err instanceof Error ? err.message : String(err)}`,\n      success: false,\n    };\n  }\n  if (!parsed.name) {\n    return {\n      content: `usage: ${code('/workflow run <name> [--goal \"...\"] [--json \\'{...}\\']')}`,\n      success: false,\n    };\n  }\n\n  const catalog = createWorkflowCatalog();\n  try {\n    catalog.load(parsed.name);\n  } catch (e) {\n    const message = e instanceof Error ? e.message : String(e);\n    return { content: `error: ${message}`, success: false };\n  }\n\n  const agentId = extractProfileAgentId(ctx.sessionKey, ctx.config);\n  const source =\n    ctx.source === 'webui' || ctx.channelId === 'webchat'\n      ? ({ kind: 'webui' as const, sessionKey: ctx.sessionKey })\n      : ({ kind: 'chat' as const, sessionKey: ctx.sessionKey });\n  const result = await ctx.workflowRunApis.startWorkflowRun({\n    agentId,\n    definitionId: parsed.name,\n    goal: parsed.goal,\n    input: parsed.input,\n    parentSessionKey: ctx.sessionKey,\n    source,\n  });\n\n  if (result.ok === false) {\n    return {\n      content: `error: ${result.message}`,\n      success: false,\n      metadata: {\n        workflowRun: {\n          ok: false,\n          definitionId: parsed.name,\n          code: result.code,\n          message: result.message,\n        },\n      },\n    };\n  }\n\n  const content = joinBlocks(\n    `Started workflow **${parsed.name}**.`,\n    bulletList([\n      { label: 'runId', detail: code(result.runId) },\n      { label: 'sessionKey', detail: code(result.sessionKey) },\n    ]),\n  );\n\n  return {\n    content,\n    success: true,\n    metadata: {\n      workflowRun: {\n        ok: true,\n        definitionId: parsed.name,\n        runId: result.runId,\n        sessionKey: result.sessionKey,\n        parentSessionKey: ctx.sessionKey,\n      },\n    },\n  };\n}\n\nfunction parseWorkflowRunArgs(raw: string): { name: string; goal?: string; input?: unknown } {\n  const tokens = tokenizeArgs(raw);\n  const name = tokens.shift()?.trim() ?? '';\n  let goal: string | undefined;\n  let input: unknown;\n\n  for (let i = 0; i < tokens.length; i += 1) {\n    const token = tokens[i];\n    if (token === '--goal' || token === '-g') {\n      goal = tokens[++i]?.trim() || undefined;\n      continue;\n    }\n    if (token.startsWith('--goal=')) {\n      goal = token.slice('--goal='.length).trim() || undefined;\n      continue;\n    }\n    if (token === '--json' || token === '--input') {\n      const value = tokens[++i];\n      input = parseJsonArg(value, token);\n      continue;\n    }\n    if (token.startsWith('--json=')) {\n      input = parseJsonArg(token.slice('--json='.length), '--json');\n      continue;\n    }\n    if (token.startsWith('--input=')) {\n      input = parseJsonArg(token.slice('--input='.length), '--input');\n      continue;\n    }\n    if (!goal) {\n      goal = [token, ...tokens.slice(i + 1)].join(' ').trim() || undefined;\n      break;\n    }\n  }\n\n  return { name, goal, input };\n}\n\nfunction parseJsonArg(value: string | undefined, flag: string): unknown {\n  if (!value?.trim()) {\n    throw new Error(`${flag} requires a JSON value`);\n  }\n  try {\n    return JSON.parse(value);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    throw new Error(`${flag} is not valid JSON: ${message}`);\n  }\n}\n\nfunction tokenizeArgs(raw: string): string[] {\n  const tokens: string[] = [];\n  const re = /\"([^\"\\\\]*(?:\\\\.[^\"\\\\]*)*)\"|'([^'\\\\]*(?:\\\\.[^'\\\\]*)*)'|(\\S+)/g;\n  let match: RegExpExecArray | null;\n  while ((match = re.exec(raw)) !== null) {\n    const value = match[1] ?? match[2] ?? match[3] ?? '';\n    tokens.push(value.replace(/\\\\([\"'\\\\])/g, '$1'));\n  }\n  return tokens;\n}\n\nexport function registerWorkflowCommands(): void {\n  commandRegistry.register(workflowsCommand);\n  commandRegistry.register(workflowCommand);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAwBA,SAAS,kBAAkB,OAA6B;CACtD,MAAM,OAAO,MAAM,MAAM,SAAS,IAAI,MAAM,KAAK,KAAK,KAAK,CAAC,MAAM;CAClE,MAAM,SAAS,MAAM,kBACjB,MAAM,MAAM,gBAAgB,IAAI,GAAG,MAAM,gBAAgB,IAAI,YAC7D;AACJ,QAAO,GAAG,OAAO,MAAM,cAAc;;AAGvC,SAAS,0BAA0B,SAAiC;CAClE,MAAM,UAAU;EACd,SAAS,QAAQ,QAAQ,MAAM,EAAE,WAAW,UAAU;EACtD,MAAM,QAAQ,QAAQ,MAAM,EAAE,WAAW,OAAO;EACjD;CACD,MAAM,cAAc,QAAQ,IAAI,QAAQ;CACxC,MAAM,SAAmB,EAAE;AAE3B,KAAI,QAAQ,KAAK,SAAS,EACxB,QAAO,KACL,WACE,QAAQ,iBAAiB,EACzB,WAAW,QAAQ,KAAK,KAAK,OAAO;EAAE,OAAO,EAAE;EAAM,QAAQ,kBAAkB,EAAE;EAAE,EAAE,CAAC,CACvF,CACF;AAEH,KAAI,QAAQ,QAAQ,SAAS,EAC3B,QAAO,KACL,WACE,QAAQ,qBAAqB,EAC7B,WAAW,QAAQ,QAAQ,KAAK,OAAO;EAAE,OAAO,EAAE;EAAM,QAAQ,kBAAkB,EAAE;EAAE,EAAE,CAAC,CAC1F,CACF;AAGH,QAAO,KACL,WACE,QAAQ,aAAa,EACrB,WAAW;EACT,4BAA4B,YAAY;EACxC,iCAAiC,KAAK,kBAAkB,cAAc;EACtE;EACD,CAAC,CACH,CACF;AAED,QAAO,WAAW,GAAG,OAAO;;AAG9B,MAAM,mBAAsC;CAC1C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,SAAS,OAAO,SAAyB;EAEvC,MAAM,UADU,uBACO,CAAC,MAAM;AAC9B,MAAI,QAAQ,WAAW,EACrB,QAAO;GACL,SAAS;GACT,SAAS;GACV;AAEH,SAAO;GAAE,SAAS,0BAA0B,QAAQ;GAAE,SAAS;GAAM;;CAExE;AAED,MAAa,kBAAqC;CAChD,IAAI;CACJ,MAAM;CACN,aAAa;CACb,UAAU;CACV,OAAO;EAAC;EAAU;EAAW;EAAQ;CACrC,aAAa;CACb,UAAU,CAAC,kBAAkB,4BAA4B;CACzD,SAAS,OAAO,KAAqB,SAAiB;EACpD,MAAM,UAAU,KAAK,MAAM;AAC3B,MAAI,CAAC,WAAW,QAAQ,aAAa,KAAK,OACxC,QAAO,iBAAiB,QAAQ,KAAK,GAAG;EAE1C,MAAM,CAAC,KAAK,GAAG,QAAQ,QAAQ,MAAM,MAAM;EAC3C,MAAM,WAAW,IAAI,aAAa;EAClC,MAAM,SAAS,KAAK,KAAK,IAAI,CAAC,MAAM;AAEpC,MAAI,aAAa,UAAU,aAAa,UAAU,aAAa,OAAO;AACpE,OAAI,CAAC,OACH,QAAO;IAAE,SAAS,UAAU,KAAK,wBAAwB;IAAI,SAAS;IAAO;GAE/E,MAAM,UAAU,uBAAuB;AACvC,OAAI;IACF,MAAM,SAAS,QAAQ,KAAK,OAAO;IACnC,MAAM,cAAc,OAAO,MAAM,MAAM,KAAK,SAAS,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,CAAC,KAAK,MAAM;AAChG,WAAO;KACL,SAAS,WACP,KAAK,OAAO,MAAM,MAAM,OAAO,SAAS,OAAO,MAAM,OAAO,eAC5D,SAAS,eACT,aAAa,OAAO,WACrB;KACD,SAAS;KACV;YACM,GAAG;AAEV,WAAO;KAAE,SAAS,UADF,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KACnB,SAAS;KAAO;;;AAI3D,MAAI,aAAa,SAAS,aAAa,QACrC,QAAO,uBAAuB,KAAK,OAAO;AAG5C,SAAO;GACL,SAAS,WACP,uBAAuB,IAAI,2BAA2B,KAAK,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,IAC5F,qBAAqB,KAAK,yDAAyD,CAAC,GACrF;GACD,SAAS;GACV;;CAEJ;AAED,eAAe,uBAAuB,KAAqB,MAAc;AACvE,KAAI,CAAC,IAAI,gBACP,QAAO;EACL,SAAS;EACT,SAAS;EACV;CAGH,IAAI;AACJ,KAAI;AACF,WAAS,qBAAqB,KAAK;UAC5B,KAAK;AACZ,SAAO;GACL,SAAS,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GACnE,SAAS;GACV;;AAEH,KAAI,CAAC,OAAO,KACV,QAAO;EACL,SAAS,UAAU,KAAK,yDAAyD;EACjF,SAAS;EACV;CAGH,MAAM,UAAU,uBAAuB;AACvC,KAAI;AACF,UAAQ,KAAK,OAAO,KAAK;UAClB,GAAG;AAEV,SAAO;GAAE,SAAS,UADF,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;GACnB,SAAS;GAAO;;CAGzD,MAAM,UAAU,sBAAsB,IAAI,YAAY,IAAI,OAAO;CACjE,MAAM,SACJ,IAAI,WAAW,WAAW,IAAI,cAAc,YACvC;EAAE,MAAM;EAAkB,YAAY,IAAI;EAAY,GACtD;EAAE,MAAM;EAAiB,YAAY,IAAI;EAAY;CAC5D,MAAM,SAAS,MAAM,IAAI,gBAAgB,iBAAiB;EACxD;EACA,cAAc,OAAO;EACrB,MAAM,OAAO;EACb,OAAO,OAAO;EACd,kBAAkB,IAAI;EACtB;EACD,CAAC;AAEF,KAAI,OAAO,OAAO,MAChB,QAAO;EACL,SAAS,UAAU,OAAO;EAC1B,SAAS;EACT,UAAU,EACR,aAAa;GACX,IAAI;GACJ,cAAc,OAAO;GACrB,MAAM,OAAO;GACb,SAAS,OAAO;GACjB,EACF;EACF;AAWH,QAAO;EACL,SATc,WACd,sBAAsB,OAAO,KAAK,MAClC,WAAW,CACT;GAAE,OAAO;GAAS,QAAQ,KAAK,OAAO,MAAM;GAAE,EAC9C;GAAE,OAAO;GAAc,QAAQ,KAAK,OAAO,WAAW;GAAE,CACzD,CAAC,CAIK;EACP,SAAS;EACT,UAAU,EACR,aAAa;GACX,IAAI;GACJ,cAAc,OAAO;GACrB,OAAO,OAAO;GACd,YAAY,OAAO;GACnB,kBAAkB,IAAI;GACvB,EACF;EACF;;AAGH,SAAS,qBAAqB,KAA+D;CAC3F,MAAM,SAAS,aAAa,IAAI;CAChC,MAAM,OAAO,OAAO,OAAO,EAAE,MAAM,IAAI;CACvC,IAAI;CACJ,IAAI;AAEJ,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK,GAAG;EACzC,MAAM,QAAQ,OAAO;AACrB,MAAI,UAAU,YAAY,UAAU,MAAM;AACxC,UAAO,OAAO,EAAE,IAAI,MAAM,IAAI,KAAA;AAC9B;;AAEF,MAAI,MAAM,WAAW,UAAU,EAAE;AAC/B,UAAO,MAAM,MAAM,EAAiB,CAAC,MAAM,IAAI,KAAA;AAC/C;;AAEF,MAAI,UAAU,YAAY,UAAU,WAAW;GAC7C,MAAM,QAAQ,OAAO,EAAE;AACvB,WAAQ,aAAa,OAAO,MAAM;AAClC;;AAEF,MAAI,MAAM,WAAW,UAAU,EAAE;AAC/B,WAAQ,aAAa,MAAM,MAAM,EAAiB,EAAE,SAAS;AAC7D;;AAEF,MAAI,MAAM,WAAW,WAAW,EAAE;AAChC,WAAQ,aAAa,MAAM,MAAM,EAAkB,EAAE,UAAU;AAC/D;;AAEF,MAAI,CAAC,MAAM;AACT,UAAO,CAAC,OAAO,GAAG,OAAO,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,KAAA;AAC3D;;;AAIJ,QAAO;EAAE;EAAM;EAAM;EAAO;;AAG9B,SAAS,aAAa,OAA2B,MAAuB;AACtE,KAAI,CAAC,OAAO,MAAM,CAChB,OAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB;AAElD,KAAI;AACF,SAAO,KAAK,MAAM,MAAM;UACjB,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,QAAM,IAAI,MAAM,GAAG,KAAK,sBAAsB,UAAU;;;AAI5D,SAAS,aAAa,KAAuB;CAC3C,MAAM,SAAmB,EAAE;CAC3B,MAAM,KAAK;CACX,IAAI;AACJ,SAAQ,QAAQ,GAAG,KAAK,IAAI,MAAM,MAAM;EACtC,MAAM,QAAQ,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM;AAClD,SAAO,KAAK,MAAM,QAAQ,eAAe,KAAK,CAAC;;AAEjD,QAAO;;AAGT,SAAgB,2BAAiC;AAC/C,iBAAgB,SAAS,iBAAiB;AAC1C,iBAAgB,SAAS,gBAAgB"}

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v29).`,
+		message: `SQLite schema v${status.dbVersion} (current release v36).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/extension-create.js

@@ -109,8 +109,8 @@ function sourceFor(id, template) {
 	const toolName = `${id.replace(/-/g, "_")}_echo`;
 	if (template === "provider") return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\n\nexport default function register(api: ExtensionApi) {\n  api.registerProvider({\n    id: '${id}',\n    name: '${id}',\n    models: [],\n    createStream: async function* () {\n      yield { type: 'text', text: 'Provider template: implement createStream().' };\n    },\n  } as any);\n}\n`;
 	if (template === "ui") return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\n\nexport default function register(api: ExtensionApi) {\n  api.logger.info('${id} UI extension loaded');\n}\n`;
-	if (template === "channel") return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\nimport type { ChannelPlugin } from '@xopcai/xopc/extension-sdk/channel';\n\nconst plugin: ChannelPlugin = {\n  id: '${id}' as any,\n  meta: { id: '${id}' as any, name: '${id}', description: '${id} channel' } as any,\n  capabilities: { inbound: true, outbound: true } as any,\n  async init() {},\n  async start() {},\n  async stop() {},\n  config: {\n    resolveAccounts() { return []; },\n  } as any,\n};\n\nexport default function register(api: ExtensionApi) {\n  api.registerChannel({ plugin });\n}\n`;
-	return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\n\nexport default function register(api: ExtensionApi) {\n  api.registerTool({\n    name: '${toolName}',\n    description: 'Echo input text',\n    parameters: {\n      type: 'object',\n      properties: { text: { type: 'string' } },\n      required: ['text'],\n    },\n    async execute(_toolCallId, params) {\n      return { content: [{ type: 'text', text: String((params as any).text) }] };\n    },\n  });\n}\n`;
+	if (template === "channel") return `import type { ChannelPlugin, ExtensionApi } from '@xopcai/xopc/extension-sdk';\n\nconst plugin: ChannelPlugin = {\n  id: '${id}' as any,\n  meta: { id: '${id}' as any, name: '${id}', description: '${id} channel' } as any,\n  capabilities: { inbound: true, outbound: true } as any,\n  async init() {},\n  async start() {},\n  async stop() {},\n  config: {\n    resolveAccounts() { return []; },\n  } as any,\n};\n\nexport default function register(api: ExtensionApi) {\n  api.registerChannel({ plugin });\n}\n`;
+	return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\n\nexport default function register(api: ExtensionApi) {\n  api.registerTool({\n    name: '${toolName}',\n    label: 'Echo text',\n    description: 'Echo input text',\n    parameters: {\n      type: 'object',\n      properties: { text: { type: 'string' } },\n      required: ['text'],\n    },\n    async execute(_toolCallId, params) {\n      return {\n        content: [{ type: 'text', text: String((params as any).text) }],\n        details: {},\n      };\n    },\n  });\n}\n`;
 }
 function createExtensionCreateCommand() {
 	return new Command("create").description("Create a new independent extension package").argument("<name>", "Extension id / package suffix").option("--template <type>", `Template: ${TEMPLATE_TYPES.join(", ")}`, "tool").option("--dir <path>", "Output directory (default: ./<name>)").action((name, opts) => {

package/dist/src/cli/commands/extension-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"extension-create.js","names":[],"sources":["../../../../src/cli/commands/extension-create.ts"],"sourcesContent":["import { existsSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { Command } from 'commander';\n\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { colors } from '../utils/colors.js';\n\nconst TEMPLATE_TYPES = ['tool', 'ui', 'provider', 'channel'] as const;\ntype TemplateType = (typeof TEMPLATE_TYPES)[number];\n\nfunction toPackageName(name: string): string {\n  return name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '');\n}\n\nfunction writeJson(path: string, value: unknown): void {\n  writeFileSync(path, `${JSON.stringify(value, null, 2)}\\n`);\n}\n\nfunction basePackageJson(id: string, template: TemplateType): Record<string, unknown> {\n  const scripts: Record<string, string> = {\n    build: template === 'ui' ? 'tsc -p tsconfig.json && npm run build:ui' : 'tsc -p tsconfig.json',\n    prepack: 'npm run build',\n  };\n  if (template === 'ui') scripts['build:ui'] = 'node scripts/build-ui.mjs';\n  const devDependencies: Record<string, string> = {\n    '@xopcai/xopc': `^${PACKAGE_VERSION}`,\n    typescript: '^6.0.0',\n  };\n  if (template === 'ui') {\n    devDependencies['@xopcai/extension-ui-sdk'] = `^${PACKAGE_VERSION}`;\n    devDependencies.esbuild = '^0.28.1';\n  }\n  return {\n    name: `xopc-extension-${id}`,\n    version: '0.1.0',\n    type: 'module',\n    main: 'dist/index.js',\n    files: ['dist', 'ui', 'xopc.extension.json', 'README.md', 'LICENSE'],\n    keywords: ['xopc', 'xopc-extension'],\n    license: 'MIT',\n    scripts,\n    devDependencies,\n    peerDependencies: {\n      '@xopcai/xopc': `>=${PACKAGE_VERSION} <1.0.0`,\n    },\n    peerDependenciesMeta: {\n      '@xopcai/xopc': { optional: true },\n    },\n  };\n}\n\nfunction manifestFor(id: string, template: TemplateType): Record<string, unknown> {\n  const base: Record<string, unknown> = {\n    id,\n    name: id.split('-').map((s) => s[0]?.toUpperCase() + s.slice(1)).join(' '),\n    description: `xopc ${template} extension`,\n    version: '0.1.0',\n    kind: template === 'provider' ? 'provider' : template === 'channel' ? 'channel' : template === 'tool' ? 'tool' : 'utility',\n    main: 'dist/index.js',\n    engines: { xopc: `>=${PACKAGE_VERSION} <1.0.0` },\n  };\n  if (template === 'tool') {\n    base.contracts = { tools: [`${id.replace(/-/g, '_')}_echo`] };\n  } else if (template === 'provider') {\n    base.providers = [id];\n    base.contracts = { providers: [id] };\n  } else if (template === 'channel') {\n    base.channels = [id];\n    base.contracts = { channels: [id] };\n    base.activation = { onChannels: [id] };\n    base.channelContributions = {\n      [id]: {\n        label: base.name,\n        description: `Channel integration for ${base.name}`,\n        configPath: `channels.${id}`,\n        capabilities: { multiAccount: false, streaming: false, media: false },\n        configSchema: { type: 'object', additionalProperties: true },\n      },\n    };\n  } else {\n    base.contracts = {};\n    base.ui = {\n      main: 'ui/panel.html',\n      permissions: ['theme'],\n      contributions: {\n        pages: [{ id: `${id}.page`, title: base.name, path: id, entrypoint: 'ui/panel.html', showInNav: true }],\n      },\n    };\n  }\n  return base;\n}\n\nfunction buildUiScriptSource(): string {\n  return `import { build } from 'esbuild';\\n\\nawait build({\\n  entryPoints: ['ui/panel-entry.ts'],\\n  outfile: 'ui/panel.bundle.js',\\n  bundle: true,\\n  format: 'esm',\\n  platform: 'browser',\\n  target: ['es2022'],\\n  sourcemap: false,\\n});\\n`;\n}\n\nfunction uiPanelEntrySource(id: string): string {\n  return `import { createExtensionClient } from '@xopcai/extension-ui-sdk';\\n\\nconst root = document.getElementById('root');\\nconst client = createExtensionClient();\\n\\nasync function main() {\\n  await client.whenReady();\\n  const theme = await client.theme.getTheme();\\n  if (root) {\\n    root.innerHTML = \\`<main style=\"font-family: system-ui; padding: 16px\">\\n      <h1>${id}</h1>\\n      <p>Theme mode: \\${theme.mode}</p>\\n      <button id=\"notify\">Show notification</button>\\n    </main>\\`;\\n    document.getElementById('notify')?.addEventListener('click', () => {\\n      void client.ui.showNotification({ type: 'info', message: '${id} is ready' });\\n    });\\n  }\\n}\\n\\nvoid main();\\n`;\n}\n\nfunction sourceFor(id: string, template: TemplateType): string {\n  const toolName = `${id.replace(/-/g, '_')}_echo`;\n  if (template === 'provider') {\n    return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerProvider({\\n    id: '${id}',\\n    name: '${id}',\\n    models: [],\\n    createStream: async function* () {\\n      yield { type: 'text', text: 'Provider template: implement createStream().' };\\n    },\\n  } as any);\\n}\\n`;\n  }\n  if (template === 'ui') {\n    return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.logger.info('${id} UI extension loaded');\\n}\\n`;\n  }\n  if (template === 'channel') {\n    return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\nimport type { ChannelPlugin } from '@xopcai/xopc/extension-sdk/channel';\\n\\nconst plugin: ChannelPlugin = {\\n  id: '${id}' as any,\\n  meta: { id: '${id}' as any, name: '${id}', description: '${id} channel' } as any,\\n  capabilities: { inbound: true, outbound: true } as any,\\n  async init() {},\\n  async start() {},\\n  async stop() {},\\n  config: {\\n    resolveAccounts() { return []; },\\n  } as any,\\n};\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerChannel({ plugin });\\n}\\n`;\n  }\n  return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerTool({\\n    name: '${toolName}',\\n    description: 'Echo input text',\\n    parameters: {\\n      type: 'object',\\n      properties: { text: { type: 'string' } },\\n      required: ['text'],\\n    },\\n    async execute(_toolCallId, params) {\\n      return { content: [{ type: 'text', text: String((params as any).text) }] };\\n    },\\n  });\\n}\\n`;\n}\n\nexport function createExtensionCreateCommand(): Command {\n  return new Command('create')\n    .description('Create a new independent extension package')\n    .argument('<name>', 'Extension id / package suffix')\n    .option('--template <type>', `Template: ${TEMPLATE_TYPES.join(', ')}`, 'tool')\n    .option('--dir <path>', 'Output directory (default: ./<name>)')\n    .action((name: string, opts: { template: string; dir?: string }) => {\n      const id = toPackageName(name);\n      if (!id) {\n        console.error(colors.red('error:'), 'Invalid extension name');\n        process.exit(1);\n      }\n      const template = opts.template as TemplateType;\n      if (!TEMPLATE_TYPES.includes(template)) {\n        console.error(colors.red('error:'), `Unknown template: ${opts.template}`);\n        process.exit(1);\n      }\n      const root = resolve(opts.dir?.trim() || id);\n      if (existsSync(root)) {\n        console.error(colors.red('error:'), `Directory already exists: ${root}`);\n        process.exit(1);\n      }\n      mkdirSync(join(root, 'src'), { recursive: true });\n      writeJson(join(root, 'package.json'), basePackageJson(id, template));\n      writeJson(join(root, 'xopc.extension.json'), manifestFor(id, template));\n      writeJson(join(root, 'tsconfig.json'), {\n        compilerOptions: {\n          target: 'ES2022',\n          module: 'NodeNext',\n          moduleResolution: 'NodeNext',\n          declaration: true,\n          outDir: 'dist',\n          rootDir: 'src',\n          strict: true,\n          skipLibCheck: true,\n        },\n        include: ['src/**/*.ts'],\n      });\n      writeFileSync(join(root, 'src', 'index.ts'), sourceFor(id, template));\n      if (template === 'ui') {\n        mkdirSync(join(root, 'ui'), { recursive: true });\n        mkdirSync(join(root, 'scripts'), { recursive: true });\n        writeFileSync(join(root, 'ui', 'panel.html'), '<!doctype html><html><body><div id=\"root\"></div><script type=\"module\" src=\"./panel.bundle.js\"></script></body></html>\\n');\n        writeFileSync(join(root, 'ui', 'panel-entry.ts'), uiPanelEntrySource(id));\n        writeFileSync(join(root, 'scripts', 'build-ui.mjs'), buildUiScriptSource());\n      }\n      writeFileSync(join(root, 'README.md'), `# ${id}\\n\\nGenerated xopc extension.\\n`);\n      writeFileSync(join(root, 'LICENSE'), 'MIT\\n');\n      console.log(colors.green('✓'), `Created extension package at ${root}`);\n      console.log(colors.cyan('Next:'), `cd ${root} && npm install && npm run build && xopc extensions pack . --dry-run`);\n    });\n}\n"],"mappings":";;;;;;sBAK2D;AAG3D,MAAM,iBAAiB;CAAC;CAAQ;CAAM;CAAY;CAAU;AAG5D,SAAS,cAAc,MAAsB;AAC3C,QAAO,KAAK,MAAM,CAAC,aAAa,CAAC,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,YAAY,GAAG;;AAGzF,SAAS,UAAU,MAAc,OAAsB;AACrD,eAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,EAAE,CAAC,IAAI;;AAG5D,SAAS,gBAAgB,IAAY,UAAiD;CACpF,MAAM,UAAkC;EACtC,OAAO,aAAa,OAAO,6CAA6C;EACxE,SAAS;EACV;AACD,KAAI,aAAa,KAAM,SAAQ,cAAc;CAC7C,MAAM,kBAA0C;EAC9C,gBAAgB,IAAI;EACpB,YAAY;EACb;AACD,KAAI,aAAa,MAAM;AACrB,kBAAgB,8BAA8B,IAAI;AAClD,kBAAgB,UAAU;;AAE5B,QAAO;EACL,MAAM,kBAAkB;EACxB,SAAS;EACT,MAAM;EACN,MAAM;EACN,OAAO;GAAC;GAAQ;GAAM;GAAuB;GAAa;GAAU;EACpE,UAAU,CAAC,QAAQ,iBAAiB;EACpC,SAAS;EACT;EACA;EACA,kBAAkB,EAChB,gBAAgB,KAAK,gBAAgB,UACtC;EACD,sBAAsB,EACpB,gBAAgB,EAAE,UAAU,MAAM,EACnC;EACF;;AAGH,SAAS,YAAY,IAAY,UAAiD;CAChF,MAAM,OAAgC;EACpC;EACA,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,IAAI,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI;EAC1E,aAAa,QAAQ,SAAS;EAC9B,SAAS;EACT,MAAM,aAAa,aAAa,aAAa,aAAa,YAAY,YAAY,aAAa,SAAS,SAAS;EACjH,MAAM;EACN,SAAS,EAAE,MAAM,KAAK,gBAAgB,UAAU;EACjD;AACD,KAAI,aAAa,OACf,MAAK,YAAY,EAAE,OAAO,CAAC,GAAG,GAAG,QAAQ,MAAM,IAAI,CAAC,OAAO,EAAE;UACpD,aAAa,YAAY;AAClC,OAAK,YAAY,CAAC,GAAG;AACrB,OAAK,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;YAC3B,aAAa,WAAW;AACjC,OAAK,WAAW,CAAC,GAAG;AACpB,OAAK,YAAY,EAAE,UAAU,CAAC,GAAG,EAAE;AACnC,OAAK,aAAa,EAAE,YAAY,CAAC,GAAG,EAAE;AACtC,OAAK,uBAAuB,GACzB,KAAK;GACJ,OAAO,KAAK;GACZ,aAAa,2BAA2B,KAAK;GAC7C,YAAY,YAAY;GACxB,cAAc;IAAE,cAAc;IAAO,WAAW;IAAO,OAAO;IAAO;GACrE,cAAc;IAAE,MAAM;IAAU,sBAAsB;IAAM;GAC7D,EACF;QACI;AACL,OAAK,YAAY,EAAE;AACnB,OAAK,KAAK;GACR,MAAM;GACN,aAAa,CAAC,QAAQ;GACtB,eAAe,EACb,OAAO,CAAC;IAAE,IAAI,GAAG,GAAG;IAAQ,OAAO,KAAK;IAAM,MAAM;IAAI,YAAY;IAAiB,WAAW;IAAM,CAAC,EACxG;GACF;;AAEH,QAAO;;AAGT,SAAS,sBAA8B;AACrC,QAAO;;AAGT,SAAS,mBAAmB,IAAoB;AAC9C,QAAO,8WAA8W,GAAG,kQAAkQ,GAAG;;AAG/nB,SAAS,UAAU,IAAY,UAAgC;CAC7D,MAAM,WAAW,GAAG,GAAG,QAAQ,MAAM,IAAI,CAAC;AAC1C,KAAI,aAAa,WACf,QAAO,gKAAgK,GAAG,iBAAiB,GAAG;AAEhM,KAAI,aAAa,KACf,QAAO,gJAAgJ,GAAG;AAE5J,KAAI,aAAa,UACf,QAAO,wLAAwL,GAAG,4BAA4B,GAAG,mBAAmB,GAAG,mBAAmB,GAAG;AAE/Q,QAAO,8JAA8J,SAAS;;AAGhL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,6CAA6C,CACzD,SAAS,UAAU,gCAAgC,CACnD,OAAO,qBAAqB,aAAa,eAAe,KAAK,KAAK,IAAI,OAAO,CAC7E,OAAO,gBAAgB,uCAAuC,CAC9D,QAAQ,MAAc,SAA6C;EAClE,MAAM,KAAK,cAAc,KAAK;AAC9B,MAAI,CAAC,IAAI;AACP,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,yBAAyB;AAC7D,WAAQ,KAAK,EAAE;;EAEjB,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,eAAe,SAAS,SAAS,EAAE;AACtC,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,qBAAqB,KAAK,WAAW;AACzE,WAAQ,KAAK,EAAE;;EAEjB,MAAM,OAAO,QAAQ,KAAK,KAAK,MAAM,IAAI,GAAG;AAC5C,MAAI,WAAW,KAAK,EAAE;AACpB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,6BAA6B,OAAO;AACxE,WAAQ,KAAK,EAAE;;AAEjB,YAAU,KAAK,MAAM,MAAM,EAAE,EAAE,WAAW,MAAM,CAAC;AACjD,YAAU,KAAK,MAAM,eAAe,EAAE,gBAAgB,IAAI,SAAS,CAAC;AACpE,YAAU,KAAK,MAAM,sBAAsB,EAAE,YAAY,IAAI,SAAS,CAAC;AACvE,YAAU,KAAK,MAAM,gBAAgB,EAAE;GACrC,iBAAiB;IACf,QAAQ;IACR,QAAQ;IACR,kBAAkB;IAClB,aAAa;IACb,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,cAAc;IACf;GACD,SAAS,CAAC,cAAc;GACzB,CAAC;AACF,gBAAc,KAAK,MAAM,OAAO,WAAW,EAAE,UAAU,IAAI,SAAS,CAAC;AACrE,MAAI,aAAa,MAAM;AACrB,aAAU,KAAK,MAAM,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAChD,aAAU,KAAK,MAAM,UAAU,EAAE,EAAE,WAAW,MAAM,CAAC;AACrD,iBAAc,KAAK,MAAM,MAAM,aAAa,EAAE,iIAA0H;AACxK,iBAAc,KAAK,MAAM,MAAM,iBAAiB,EAAE,mBAAmB,GAAG,CAAC;AACzE,iBAAc,KAAK,MAAM,WAAW,eAAe,EAAE,qBAAqB,CAAC;;AAE7E,gBAAc,KAAK,MAAM,YAAY,EAAE,KAAK,GAAG,iCAAiC;AAChF,gBAAc,KAAK,MAAM,UAAU,EAAE,QAAQ;AAC7C,UAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,gCAAgC,OAAO;AACtE,UAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,MAAM,KAAK,sEAAsE;GACnH"}
+{"version":3,"file":"extension-create.js","names":[],"sources":["../../../../src/cli/commands/extension-create.ts"],"sourcesContent":["import { existsSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport { Command } from 'commander';\n\nimport { PACKAGE_VERSION } from '../../package-version.js';\nimport { colors } from '../utils/colors.js';\n\nconst TEMPLATE_TYPES = ['tool', 'ui', 'provider', 'channel'] as const;\ntype TemplateType = (typeof TEMPLATE_TYPES)[number];\n\nfunction toPackageName(name: string): string {\n  return name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, '-').replace(/^-+|-+$/g, '');\n}\n\nfunction writeJson(path: string, value: unknown): void {\n  writeFileSync(path, `${JSON.stringify(value, null, 2)}\\n`);\n}\n\nfunction basePackageJson(id: string, template: TemplateType): Record<string, unknown> {\n  const scripts: Record<string, string> = {\n    build: template === 'ui' ? 'tsc -p tsconfig.json && npm run build:ui' : 'tsc -p tsconfig.json',\n    prepack: 'npm run build',\n  };\n  if (template === 'ui') scripts['build:ui'] = 'node scripts/build-ui.mjs';\n  const devDependencies: Record<string, string> = {\n    '@xopcai/xopc': `^${PACKAGE_VERSION}`,\n    typescript: '^6.0.0',\n  };\n  if (template === 'ui') {\n    devDependencies['@xopcai/extension-ui-sdk'] = `^${PACKAGE_VERSION}`;\n    devDependencies.esbuild = '^0.28.1';\n  }\n  return {\n    name: `xopc-extension-${id}`,\n    version: '0.1.0',\n    type: 'module',\n    main: 'dist/index.js',\n    files: ['dist', 'ui', 'xopc.extension.json', 'README.md', 'LICENSE'],\n    keywords: ['xopc', 'xopc-extension'],\n    license: 'MIT',\n    scripts,\n    devDependencies,\n    peerDependencies: {\n      '@xopcai/xopc': `>=${PACKAGE_VERSION} <1.0.0`,\n    },\n    peerDependenciesMeta: {\n      '@xopcai/xopc': { optional: true },\n    },\n  };\n}\n\nfunction manifestFor(id: string, template: TemplateType): Record<string, unknown> {\n  const base: Record<string, unknown> = {\n    id,\n    name: id.split('-').map((s) => s[0]?.toUpperCase() + s.slice(1)).join(' '),\n    description: `xopc ${template} extension`,\n    version: '0.1.0',\n    kind: template === 'provider' ? 'provider' : template === 'channel' ? 'channel' : template === 'tool' ? 'tool' : 'utility',\n    main: 'dist/index.js',\n    engines: { xopc: `>=${PACKAGE_VERSION} <1.0.0` },\n  };\n  if (template === 'tool') {\n    base.contracts = { tools: [`${id.replace(/-/g, '_')}_echo`] };\n  } else if (template === 'provider') {\n    base.providers = [id];\n    base.contracts = { providers: [id] };\n  } else if (template === 'channel') {\n    base.channels = [id];\n    base.contracts = { channels: [id] };\n    base.activation = { onChannels: [id] };\n    base.channelContributions = {\n      [id]: {\n        label: base.name,\n        description: `Channel integration for ${base.name}`,\n        configPath: `channels.${id}`,\n        capabilities: { multiAccount: false, streaming: false, media: false },\n        configSchema: { type: 'object', additionalProperties: true },\n      },\n    };\n  } else {\n    base.contracts = {};\n    base.ui = {\n      main: 'ui/panel.html',\n      permissions: ['theme'],\n      contributions: {\n        pages: [{ id: `${id}.page`, title: base.name, path: id, entrypoint: 'ui/panel.html', showInNav: true }],\n      },\n    };\n  }\n  return base;\n}\n\nfunction buildUiScriptSource(): string {\n  return `import { build } from 'esbuild';\\n\\nawait build({\\n  entryPoints: ['ui/panel-entry.ts'],\\n  outfile: 'ui/panel.bundle.js',\\n  bundle: true,\\n  format: 'esm',\\n  platform: 'browser',\\n  target: ['es2022'],\\n  sourcemap: false,\\n});\\n`;\n}\n\nfunction uiPanelEntrySource(id: string): string {\n  return `import { createExtensionClient } from '@xopcai/extension-ui-sdk';\\n\\nconst root = document.getElementById('root');\\nconst client = createExtensionClient();\\n\\nasync function main() {\\n  await client.whenReady();\\n  const theme = await client.theme.getTheme();\\n  if (root) {\\n    root.innerHTML = \\`<main style=\"font-family: system-ui; padding: 16px\">\\n      <h1>${id}</h1>\\n      <p>Theme mode: \\${theme.mode}</p>\\n      <button id=\"notify\">Show notification</button>\\n    </main>\\`;\\n    document.getElementById('notify')?.addEventListener('click', () => {\\n      void client.ui.showNotification({ type: 'info', message: '${id} is ready' });\\n    });\\n  }\\n}\\n\\nvoid main();\\n`;\n}\n\nfunction sourceFor(id: string, template: TemplateType): string {\n  const toolName = `${id.replace(/-/g, '_')}_echo`;\n  if (template === 'provider') {\n    return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerProvider({\\n    id: '${id}',\\n    name: '${id}',\\n    models: [],\\n    createStream: async function* () {\\n      yield { type: 'text', text: 'Provider template: implement createStream().' };\\n    },\\n  } as any);\\n}\\n`;\n  }\n  if (template === 'ui') {\n    return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.logger.info('${id} UI extension loaded');\\n}\\n`;\n  }\n  if (template === 'channel') {\n    return `import type { ChannelPlugin, ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nconst plugin: ChannelPlugin = {\\n  id: '${id}' as any,\\n  meta: { id: '${id}' as any, name: '${id}', description: '${id} channel' } as any,\\n  capabilities: { inbound: true, outbound: true } as any,\\n  async init() {},\\n  async start() {},\\n  async stop() {},\\n  config: {\\n    resolveAccounts() { return []; },\\n  } as any,\\n};\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerChannel({ plugin });\\n}\\n`;\n  }\n  return `import type { ExtensionApi } from '@xopcai/xopc/extension-sdk';\\n\\nexport default function register(api: ExtensionApi) {\\n  api.registerTool({\\n    name: '${toolName}',\\n    label: 'Echo text',\\n    description: 'Echo input text',\\n    parameters: {\\n      type: 'object',\\n      properties: { text: { type: 'string' } },\\n      required: ['text'],\\n    },\\n    async execute(_toolCallId, params) {\\n      return {\\n        content: [{ type: 'text', text: String((params as any).text) }],\\n        details: {},\\n      };\\n    },\\n  });\\n}\\n`;\n}\n\nexport function createExtensionCreateCommand(): Command {\n  return new Command('create')\n    .description('Create a new independent extension package')\n    .argument('<name>', 'Extension id / package suffix')\n    .option('--template <type>', `Template: ${TEMPLATE_TYPES.join(', ')}`, 'tool')\n    .option('--dir <path>', 'Output directory (default: ./<name>)')\n    .action((name: string, opts: { template: string; dir?: string }) => {\n      const id = toPackageName(name);\n      if (!id) {\n        console.error(colors.red('error:'), 'Invalid extension name');\n        process.exit(1);\n      }\n      const template = opts.template as TemplateType;\n      if (!TEMPLATE_TYPES.includes(template)) {\n        console.error(colors.red('error:'), `Unknown template: ${opts.template}`);\n        process.exit(1);\n      }\n      const root = resolve(opts.dir?.trim() || id);\n      if (existsSync(root)) {\n        console.error(colors.red('error:'), `Directory already exists: ${root}`);\n        process.exit(1);\n      }\n      mkdirSync(join(root, 'src'), { recursive: true });\n      writeJson(join(root, 'package.json'), basePackageJson(id, template));\n      writeJson(join(root, 'xopc.extension.json'), manifestFor(id, template));\n      writeJson(join(root, 'tsconfig.json'), {\n        compilerOptions: {\n          target: 'ES2022',\n          module: 'NodeNext',\n          moduleResolution: 'NodeNext',\n          declaration: true,\n          outDir: 'dist',\n          rootDir: 'src',\n          strict: true,\n          skipLibCheck: true,\n        },\n        include: ['src/**/*.ts'],\n      });\n      writeFileSync(join(root, 'src', 'index.ts'), sourceFor(id, template));\n      if (template === 'ui') {\n        mkdirSync(join(root, 'ui'), { recursive: true });\n        mkdirSync(join(root, 'scripts'), { recursive: true });\n        writeFileSync(join(root, 'ui', 'panel.html'), '<!doctype html><html><body><div id=\"root\"></div><script type=\"module\" src=\"./panel.bundle.js\"></script></body></html>\\n');\n        writeFileSync(join(root, 'ui', 'panel-entry.ts'), uiPanelEntrySource(id));\n        writeFileSync(join(root, 'scripts', 'build-ui.mjs'), buildUiScriptSource());\n      }\n      writeFileSync(join(root, 'README.md'), `# ${id}\\n\\nGenerated xopc extension.\\n`);\n      writeFileSync(join(root, 'LICENSE'), 'MIT\\n');\n      console.log(colors.green('✓'), `Created extension package at ${root}`);\n      console.log(colors.cyan('Next:'), `cd ${root} && npm install && npm run build && xopc extensions pack . --dry-run`);\n    });\n}\n"],"mappings":";;;;;;sBAK2D;AAG3D,MAAM,iBAAiB;CAAC;CAAQ;CAAM;CAAY;CAAU;AAG5D,SAAS,cAAc,MAAsB;AAC3C,QAAO,KAAK,MAAM,CAAC,aAAa,CAAC,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,YAAY,GAAG;;AAGzF,SAAS,UAAU,MAAc,OAAsB;AACrD,eAAc,MAAM,GAAG,KAAK,UAAU,OAAO,MAAM,EAAE,CAAC,IAAI;;AAG5D,SAAS,gBAAgB,IAAY,UAAiD;CACpF,MAAM,UAAkC;EACtC,OAAO,aAAa,OAAO,6CAA6C;EACxE,SAAS;EACV;AACD,KAAI,aAAa,KAAM,SAAQ,cAAc;CAC7C,MAAM,kBAA0C;EAC9C,gBAAgB,IAAI;EACpB,YAAY;EACb;AACD,KAAI,aAAa,MAAM;AACrB,kBAAgB,8BAA8B,IAAI;AAClD,kBAAgB,UAAU;;AAE5B,QAAO;EACL,MAAM,kBAAkB;EACxB,SAAS;EACT,MAAM;EACN,MAAM;EACN,OAAO;GAAC;GAAQ;GAAM;GAAuB;GAAa;GAAU;EACpE,UAAU,CAAC,QAAQ,iBAAiB;EACpC,SAAS;EACT;EACA;EACA,kBAAkB,EAChB,gBAAgB,KAAK,gBAAgB,UACtC;EACD,sBAAsB,EACpB,gBAAgB,EAAE,UAAU,MAAM,EACnC;EACF;;AAGH,SAAS,YAAY,IAAY,UAAiD;CAChF,MAAM,OAAgC;EACpC;EACA,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,IAAI,aAAa,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI;EAC1E,aAAa,QAAQ,SAAS;EAC9B,SAAS;EACT,MAAM,aAAa,aAAa,aAAa,aAAa,YAAY,YAAY,aAAa,SAAS,SAAS;EACjH,MAAM;EACN,SAAS,EAAE,MAAM,KAAK,gBAAgB,UAAU;EACjD;AACD,KAAI,aAAa,OACf,MAAK,YAAY,EAAE,OAAO,CAAC,GAAG,GAAG,QAAQ,MAAM,IAAI,CAAC,OAAO,EAAE;UACpD,aAAa,YAAY;AAClC,OAAK,YAAY,CAAC,GAAG;AACrB,OAAK,YAAY,EAAE,WAAW,CAAC,GAAG,EAAE;YAC3B,aAAa,WAAW;AACjC,OAAK,WAAW,CAAC,GAAG;AACpB,OAAK,YAAY,EAAE,UAAU,CAAC,GAAG,EAAE;AACnC,OAAK,aAAa,EAAE,YAAY,CAAC,GAAG,EAAE;AACtC,OAAK,uBAAuB,GACzB,KAAK;GACJ,OAAO,KAAK;GACZ,aAAa,2BAA2B,KAAK;GAC7C,YAAY,YAAY;GACxB,cAAc;IAAE,cAAc;IAAO,WAAW;IAAO,OAAO;IAAO;GACrE,cAAc;IAAE,MAAM;IAAU,sBAAsB;IAAM;GAC7D,EACF;QACI;AACL,OAAK,YAAY,EAAE;AACnB,OAAK,KAAK;GACR,MAAM;GACN,aAAa,CAAC,QAAQ;GACtB,eAAe,EACb,OAAO,CAAC;IAAE,IAAI,GAAG,GAAG;IAAQ,OAAO,KAAK;IAAM,MAAM;IAAI,YAAY;IAAiB,WAAW;IAAM,CAAC,EACxG;GACF;;AAEH,QAAO;;AAGT,SAAS,sBAA8B;AACrC,QAAO;;AAGT,SAAS,mBAAmB,IAAoB;AAC9C,QAAO,8WAA8W,GAAG,kQAAkQ,GAAG;;AAG/nB,SAAS,UAAU,IAAY,UAAgC;CAC7D,MAAM,WAAW,GAAG,GAAG,QAAQ,MAAM,IAAI,CAAC;AAC1C,KAAI,aAAa,WACf,QAAO,gKAAgK,GAAG,iBAAiB,GAAG;AAEhM,KAAI,aAAa,KACf,QAAO,gJAAgJ,GAAG;AAE5J,KAAI,aAAa,UACf,QAAO,6HAA6H,GAAG,4BAA4B,GAAG,mBAAmB,GAAG,mBAAmB,GAAG;AAEpN,QAAO,8JAA8J,SAAS;;AAGhL,SAAgB,+BAAwC;AACtD,QAAO,IAAI,QAAQ,SAAS,CACzB,YAAY,6CAA6C,CACzD,SAAS,UAAU,gCAAgC,CACnD,OAAO,qBAAqB,aAAa,eAAe,KAAK,KAAK,IAAI,OAAO,CAC7E,OAAO,gBAAgB,uCAAuC,CAC9D,QAAQ,MAAc,SAA6C;EAClE,MAAM,KAAK,cAAc,KAAK;AAC9B,MAAI,CAAC,IAAI;AACP,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,yBAAyB;AAC7D,WAAQ,KAAK,EAAE;;EAEjB,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,eAAe,SAAS,SAAS,EAAE;AACtC,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,qBAAqB,KAAK,WAAW;AACzE,WAAQ,KAAK,EAAE;;EAEjB,MAAM,OAAO,QAAQ,KAAK,KAAK,MAAM,IAAI,GAAG;AAC5C,MAAI,WAAW,KAAK,EAAE;AACpB,WAAQ,MAAM,OAAO,IAAI,SAAS,EAAE,6BAA6B,OAAO;AACxE,WAAQ,KAAK,EAAE;;AAEjB,YAAU,KAAK,MAAM,MAAM,EAAE,EAAE,WAAW,MAAM,CAAC;AACjD,YAAU,KAAK,MAAM,eAAe,EAAE,gBAAgB,IAAI,SAAS,CAAC;AACpE,YAAU,KAAK,MAAM,sBAAsB,EAAE,YAAY,IAAI,SAAS,CAAC;AACvE,YAAU,KAAK,MAAM,gBAAgB,EAAE;GACrC,iBAAiB;IACf,QAAQ;IACR,QAAQ;IACR,kBAAkB;IAClB,aAAa;IACb,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,cAAc;IACf;GACD,SAAS,CAAC,cAAc;GACzB,CAAC;AACF,gBAAc,KAAK,MAAM,OAAO,WAAW,EAAE,UAAU,IAAI,SAAS,CAAC;AACrE,MAAI,aAAa,MAAM;AACrB,aAAU,KAAK,MAAM,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAChD,aAAU,KAAK,MAAM,UAAU,EAAE,EAAE,WAAW,MAAM,CAAC;AACrD,iBAAc,KAAK,MAAM,MAAM,aAAa,EAAE,iIAA0H;AACxK,iBAAc,KAAK,MAAM,MAAM,iBAAiB,EAAE,mBAAmB,GAAG,CAAC;AACzE,iBAAc,KAAK,MAAM,WAAW,eAAe,EAAE,qBAAqB,CAAC;;AAE7E,gBAAc,KAAK,MAAM,YAAY,EAAE,KAAK,GAAG,iCAAiC;AAChF,gBAAc,KAAK,MAAM,UAAU,EAAE,QAAQ;AAC7C,UAAQ,IAAI,OAAO,MAAM,IAAI,EAAE,gCAAgC,OAAO;AACtE,UAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,MAAM,KAAK,sEAAsE;GACnH"}

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,9 +1,10 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
-import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
+import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
-import { installExtensionFromStoreZip, installFromLocal, installFromNpm, peekExtensionIdFromStoreZip, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
+import { installFromLocal, installFromNpm, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
+import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
 import { fetchRegistry, findExtension, getExtensionMarketplaceStoreBaseUrl, listExtensions, searchExtensions } from "../../extensions/marketplace.js";
 import { colors } from "../utils/colors.js";
 import { validateExtensionPackageDirectory } from "./extension-pack.js";
@@ -36,13 +37,6 @@ function readInstalledSnapshots(targetDir, extensionId) {
 function sha256Integrity(buffer) {
 	return `sha256-${createHash("sha256").update(buffer).digest("base64")}`;
 }
-function normalizeIntegrity(raw) {
-	const value = raw?.trim();
-	if (!value) return void 0;
-	if (value.startsWith("sha256-")) return value;
-	if (/^[a-f0-9]{64}$/i.test(value)) return `sha256-${Buffer.from(value, "hex").toString("base64")}`;
-	return value;
-}
 function printManifestSummary(params) {
 	const manifest = params.manifest;
 	console.log("");
@@ -122,15 +116,11 @@ async function upsertNpmExtensionLock(lock, targetDir, result, spec) {
 }
 async function installExtensionFromStoreWithLock(params) {
 	try {
-		const { downloadUrl, version, integrity: expectedIntegrityRaw } = await resolveExtensionZipDownloadUrl(params.storeBase, params.packageName, params.version);
+		const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(params.storeBase, params.packageName, params.version);
 		console.log(colors.cyan("📦"), `Downloading ${params.packageName}@${version} from xopc-store (${params.storeBase})…`);
 		const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);
+		verifyStoreArtifactSha256(buf, sha256);
 		const actualIntegrity = sha256Integrity(buf);
-		const expectedIntegrity = normalizeIntegrity(expectedIntegrityRaw);
-		if (expectedIntegrity && expectedIntegrity !== actualIntegrity) return {
-			ok: false,
-			error: `Extension artifact checksum mismatch: expected ${expectedIntegrity}, got ${actualIntegrity}`
-		};
 		const manifest = peekExtensionManifestFromStoreZip(buf);
 		if (!await confirmInstall({
 			source: "store",
@@ -143,30 +133,46 @@ async function installExtensionFromStoreWithLock(params) {
 			ok: false,
 			error: "Install cancelled"
 		};
-		if (params.force) {
-			const id = peekExtensionIdFromStoreZip(buf);
-			if (id && existsSync(join(params.targetDir, id))) rmSync(join(params.targetDir, id), {
-				recursive: true,
-				force: true
+		const transaction = await stageExtensionStoreZip(buf, params.targetDir);
+		const lockSnapshot = await params.lock.load();
+		let lockWriteStarted = false;
+		try {
+			commitStagedExtensionInstall(transaction, params.force ?? false);
+			lockWriteStarted = true;
+			await params.lock.upsert(transaction.extensionId, {
+				name: transaction.extensionId,
+				version,
+				resolved: params.packageName,
+				source: "store",
+				artifactUrl: downloadUrl,
+				integrity: actualIntegrity,
+				...readInstalledSnapshots(params.targetDir, transaction.extensionId)
 			});
+		} catch (err) {
+			const rollbackErrors = [];
+			try {
+				rollbackStagedExtensionInstall(transaction);
+			} catch (rollbackErr) {
+				rollbackErrors.push(`files: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);
+			}
+			if (lockWriteStarted) try {
+				await params.lock.save(lockSnapshot);
+			} catch (rollbackErr) {
+				rollbackErrors.push(`lockfile: ${rollbackErr instanceof Error ? rollbackErr.message : String(rollbackErr)}`);
+			}
+			const message = err instanceof Error ? err.message : String(err);
+			const suffix = rollbackErrors.length > 0 ? ` Rollback incomplete (${rollbackErrors.join("; ")}).` : "";
+			throw new Error(`${message}${suffix}`, { cause: err });
+		}
+		try {
+			finalizeStagedExtensionInstall(transaction);
+		} catch (cleanupErr) {
+			const message = cleanupErr instanceof Error ? cleanupErr.message : String(cleanupErr);
+			console.warn(colors.yellow("warning:"), `Installed extension, but temporary backup cleanup failed: ${message}`);
 		}
-		const result = await installExtensionFromStoreZip(buf, params.targetDir);
-		if (!result.ok || !result.extensionId) return {
-			ok: false,
-			error: result.error ?? "install failed"
-		};
-		await params.lock.upsert(result.extensionId, {
-			name: result.extensionId,
-			version,
-			resolved: params.packageName,
-			source: "store",
-			artifactUrl: downloadUrl,
-			integrity: actualIntegrity,
-			...readInstalledSnapshots(params.targetDir, result.extensionId)
-		});
 		return {
 			ok: true,
-			extensionId: result.extensionId,
+			extensionId: transaction.extensionId,
 			version
 		};
 	} catch (e) {
@@ -177,7 +183,7 @@ async function installExtensionFromStoreWithLock(params) {
 	}
 }
 function createExtensionInstallCommand() {
-	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "Explicit source spec: store:<id>, npm:<package>, or a local extension directory").option("-f, --force", "Remove existing extension folder (manifest id) before store or local install", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
+	return new Command("install").description("Install extension from xopc-store (store.xopc.ai), npm, or a local directory into ~/.xopc/extensions").argument("<target>", "Explicit source spec: store:<id>, npm:<package>, or a local extension directory").option("-f, --force", "Replace an existing store or local extension with the same manifest id", false).option("-y, --yes", "Skip interactive install confirmation", false).action(async (target, opts) => {
 		const cfg = loadConfig(getContextWithOpts().configPath);
 		const targetDir = resolveExtensionsDir();
 		const lock = getExtensionLockfileManager();