agent-afk 5.84.11 → 5.84.12

package/dist/cli.mjs

@@ -878,7 +878,7 @@ Retrying it verbatim will fail the same way. Fix the underlying cause, change th
 
 `).trim()}function _5(e){return(e?.textContent??"").replace(/\s+/g," ").trim().length}async function yP(e,t){let{JSDOM:n,Readability:r,turndown:o}=await C5(),s=new n(e,{url:t}).window.document,a=(s.title??"").trim(),l=(()=>{try{let m=s.cloneNode(!0);return new r(m).parse()}catch{return null}})();if(l&&typeof l.content=="string"&&l.content.trim().length>0){let m=hP(o.turndown(l.content)),f=(l.title??"").trim()||a,g=typeof l.length=="number"&&l.length>0?l.length:(l.textContent??"").replace(/\s+/g," ").trim().length;return{title:f,markdown:m,textLength:g,usedFallback:!1}}let c=s.body,d=c?.innerHTML??"",u=hP(o.turndown(d));return{title:a,markdown:u,textLength:_5(c),usedFallback:!0}}var mv,bP=k(()=>{"use strict";mv=null});function P5(e,t){return new Promise((n,r)=>{if(t?.aborted){r(t.reason??new Error("aborted"));return}let o=()=>{clearTimeout(i),r(t?.reason??new Error("aborted"))},i=setTimeout(()=>{t?.removeEventListener("abort",o),n()},e);t?.addEventListener("abort",o,{once:!0})})}function wP(e,t,n){let r=Math.min(t*2**e,n);return Math.round(Math.random()*r)}function M5(e,t){let n=e.headers.get("retry-after");if(n===null)return null;let r=Number(n.trim());return!Number.isFinite(r)||r<0?null:Math.min(r*1e3,t)}async function SP(e,t,n={},r={}){let o=r.retries??3,i=r.baseDelayMs??500,s=r.maxDelayMs??1e4,a=r.sleep??P5,l=n.signal??void 0,c;for(let d=0;d<=o;d++){if(l?.aborted)throw l.reason??new Error("aborted");try{let u=await e(t,n);if(!I5.has(u.status)||d===o)return u;let m=M5(u,s)??wP(d,i,s);j("[web/retryFetch] retrying",{url:t,attempt:d,status:u.status,waitMs:m}),await u.body?.cancel().catch(()=>{}),await a(m,l)}catch(u){if(l?.aborted||(c=u,d===o))throw u;let m=wP(d,i,s);j("[web/retryFetch] retrying after error",{url:t,attempt:d,waitMs:m}),await a(m,l)}}throw c??new Error("retryFetch: exhausted without a result")}var I5,vP=k(()=>{"use strict";Se();I5=new Set([429,502,503,504])});import{BlockList as O5,isIP as gv}from"node:net";import{lookup as $5}from"node:dns/promises";import{Agent as D5}from"undici";function TP(){let e=v.AFK_WEB_ALLOW_PRIVATE_HOSTS?.trim().toLowerCase();return e==="1"||e==="true"}function B5(e){return e.startsWith("[")&&e.endsWith("]")?e.slice(1,-1):e}function fv(e){let t=gv(e);return t===0?!1:N5.check(e,t===4?"ipv4":"ipv6")}async function EP(e){return $5(e,{all:!0,verbatim:!0})}async function hv(e,t={}){if(t.allowPrivateHosts??TP())return{allowed:!0};let n;try{n=new URL(e)}catch{return{allowed:!1,reason:`"${e}" is not a valid absolute URL`}}if(n.protocol!=="http:"&&n.protocol!=="https:")return{allowed:!1,reason:`protocol "${n.protocol}" not supported (http/https only)`};let r=B5(n.hostname),o=(a,l)=>`refusing to fetch ${l} \u2014 internal/private address ${a} (loopback, link-local, cloud metadata, or RFC1918 space). Set AFK_WEB_ALLOW_PRIVATE_HOSTS=1 to allow private-host access.`;if(gv(r)!==0)return fv(r)?{allowed:!1,reason:o(r,r)}:{allowed:!0};let i=t.lookupFn??EP,s;try{s=await i(r)}catch{return{allowed:!0}}for(let a of s)if(fv(a.address))return{allowed:!1,reason:o(a.address,`${r} (resolved)`)};return{allowed:!0}}async function Yc(e,t={}){let n=await hv(e,t);if(!n.allowed)throw new Cn(n.reason)}async function Fm(e,t,n={},r={}){let o={...r.lookupFn!==void 0?{lookupFn:r.lookupFn}:{},...r.allowPrivateHosts!==void 0?{allowPrivateHosts:r.allowPrivateHosts}:{}},i=t;for(let s=0;s<=kP;s++){await Yc(i,o);let a={...n,redirect:"manual",...e===globalThis.fetch&&!(r.allowPrivateHosts??TP())?{dispatcher:U5}:{}},l=await SP(e,i,a,r.retry??{});if(!j5.has(l.status))return l;let c=l.headers.get("location");if(c===null||c.trim()==="")return l;let d;try{d=new URL(c,l.url||i).toString()}catch{return l}await l.body?.cancel().catch(()=>{}),i=d}throw new Cn(`too many redirects (>${kP}) starting from ${t}`)}var F5,L5,N5,Cn,U5,kP,j5,yv=k(()=>{"use strict";G();vP();F5=[["0.0.0.0",8],["10.0.0.0",8],["100.64.0.0",10],["127.0.0.0",8],["169.254.0.0",16],["172.16.0.0",12],["192.168.0.0",16]],L5=[["::",96],["64:ff9b::",96],["fc00::",7],["fe80::",10]],N5=(()=>{let e=new O5;for(let[t,n]of F5)e.addSubnet(t,n,"ipv4");for(let[t,n]of L5)e.addSubnet(t,n,"ipv6");return e})(),Cn=class extends Error{constructor(t){super(t),this.name="EgressBlockedError"}};U5=new D5({connect:{lookup(e,t,n){EP(e).then(r=>{let o=r.find(s=>fv(s.address));if(o!==void 0){n(new Cn(`refusing to connect to ${e} (resolved) \u2014 internal/private address ${o.address} (loopback, link-local, cloud metadata, or RFC1918 space). Set AFK_WEB_ALLOW_PRIVATE_HOSTS=1 to allow private-host access.`),"",0);return}let i=r[0];if(i===void 0){n(new Error(`DNS lookup returned no addresses for ${e}`),"",0);return}n(null,i.address,gv(i.address))},r=>n(r,"",0))}}});kP=20,j5=new Set([301,302,303,307,308])});import{readFileSync as H5}from"node:fs";import{join as W5}from"path";function K5(e){let n=e.replace(/[.+?()[\]{}/\\^$|]/g,"\\$&").replace(/\*/g,"[^.]*");return new RegExp(`^${n}$`,"i")}function xP(e,t){return K5(t).test(e)}function z5(e,t){if(e!==void 0){let n=e.trim().toLowerCase();if(n==="1"||n==="true"||n==="yes")return!0;if(n==="0"||n==="false"||n==="no")return!1}if(t!==void 0){if(G5.has(t))return!0;if(q5.has(t))return!1}return!1}function RP(e){return e===void 0||e.trim()===""?[]:e.split(",").map(t=>t.trim().toLowerCase()).filter(t=>t.length>0)}function J5(e){if(e===void 0||e===""||e==="playwright")return"playwright";throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${e}`)}function AP(e){let t=e===void 0||e.trim()===""?"default":e.trim();return pc(t),t}function V5(e){if(e===void 0)return!1;let t=e.trim().toLowerCase();return t==="1"||t==="true"||t==="yes"}function Y5(e){try{return H5(e,"utf8")}catch(t){if(t.code==="ENOENT")return;throw t}}function X5(e,t){let n={...e};if(typeof t.headless=="boolean"&&(n.headless=t.headless),Array.isArray(t.allowedDomains)&&(n.allowedDomains=t.allowedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),Array.isArray(t.blockedDomains)&&(n.blockedDomains=t.blockedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),typeof t.domSnapshots=="boolean"&&(n.domSnapshots=t.domSnapshots),t.backend==="playwright")n.backend="playwright";else if(t.backend!==void 0)throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${String(t.backend)}`);return typeof t.defaultProfile=="string"&&(n.defaultProfile=AP(t.defaultProfile)),n}function CP(e){let t=e?.env??v,n=e?.readFileSync??Y5,r=e?.surface??t.AGENT_SURFACE,o=z5(t.AFK_BROWSER_HEADLESS,r),i=RP(t.AFK_BROWSER_ALLOWED_DOMAINS),s=RP(t.AFK_BROWSER_BLOCKED_DOMAINS),a=V5(t.AFK_BROWSER_DOM_SNAPSHOTS),l=J5(t.AFK_BROWSER_BACKEND),c=AP(t.AFK_BROWSER_DEFAULT_PROFILE),d={headless:o,allowedDomains:i,blockedDomains:s,domSnapshots:a,backend:l,configPath:null,defaultProfile:c},u=t.AFK_BROWSER_CONFIG,m=u!==void 0&&u.trim()!==""?u.trim():W5(vn(),"browser.json"),f=n(m);if(f===void 0)return d;let g;try{g=JSON.parse(f)}catch(y){throw new Error(`Failed to parse browser config at ${m}: ${String(y)}`)}if(typeof g!="object"||g===null||Array.isArray(g))throw new Error(`Browser config at ${m} must be a JSON object`);let h=X5(d,g);return h.configPath=m,h}function Lm(e,t){let n;try{n=new URL(e).hostname.toLowerCase()}catch{return{allowed:!1,reason:`invalid URL: ${e}`}}for(let r of t.blockedDomains)if(xP(n,r))return{allowed:!1,reason:`blocked by AFK_BROWSER_BLOCKED_DOMAINS: ${r}`};return t.allowedDomains.length>0&&!t.allowedDomains.some(o=>xP(n,o))?{allowed:!1,reason:"not in AFK_BROWSER_ALLOWED_DOMAINS"}:{allowed:!0}}var G5,q5,Nm=k(()=>{"use strict";G();q();G5=new Set(["daemon","subagent","telegram","afk"]),q5=new Set(["repl","interactive","cli"])});import{existsSync as Q5,readFileSync as Z5}from"node:fs";import{createRequire as e3}from"node:module";import{dirname as t3,join as n3}from"node:path";function PP(e){if(typeof e=="string")return e;let t=[],n=e;for(let r=0;r<o3&&n instanceof Error;r++)t.push(n.message),n=n.cause;return t.length>0?t.join(" | "):String(e)}function Ft(e){let t=PP(e);return IP.some(n=>t.includes(n))}function i3(){try{let t=e3(import.meta.url).resolve("playwright/package.json"),n=JSON.parse(Z5(t,"utf8"));if(typeof n!="object"||n===null)return;let r=n.bin,o=typeof r=="string"?r:typeof r=="object"&&r!==null?r.playwright:void 0;if(typeof o!="string"||o.length===0)return;let i=n3(t3(t),o);return Q5(i)?`node ${/\s/.test(i)?`"${i}"`:i} install chromium`:void 0}catch{return}}function Xc(){return _P??=i3()??r3,_P}function bv(e){return e.includes("install chromium")}function ln(e,t){let n=PP(e),r=t?.latched===!0?` ${s3}`:"";if(n.includes("Executable doesn't exist")){let o="";return t?.headless===!0?o=" This launch was headless, which needs the `chromium_headless_shell-*` build.":t?.headless===!1&&(o=" This launch was headed, which needs the full `chromium-*` build \u2014 the headless shell alone does not satisfy it."),`browser tools require the Playwright chromium binary. Install via: ${Xc()}.${o}${r}`}return`browser tools require the optional \`playwright\` peer dependency. Install via: pnpm add playwright (then ${Xc()}). Or pick a different tool.${r}`}function Qc(e,t,n=!1){if(!Ft(e))return e;let r=e instanceof Error?e.message:String(e);return new Error(`${r}
 
-${ln(e,{headless:t,latched:n})}`,{cause:e})}var IP,r3,o3,_P,s3,Bm=k(()=>{"use strict";IP=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],r3="pnpm exec playwright install chromium",o3=4;s3="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Ri from"node:fs";import Um from"node:path";import{randomBytes as a3}from"node:crypto";import{chromium as l3}from"playwright";function c3(){try{return"5.84.11"}catch{}try{let e=Um.resolve(import.meta.dirname,"../../../package.json"),t=Ri.readFileSync(e,"utf8"),n=JSON.parse(t);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var d3,jm,MP=k(()=>{"use strict";Bm();q();Se();d3=c3(),jm=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(t){this.config=t}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(t){this.launchFailure={error:t}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=l3.launch({headless:this.config.headless}).then(t=>(this.browser=t,this.launchPromise=void 0,this.clearLaunchFailure(),t)).catch(t=>{this.launchPromise=void 0;let n=Qc(t,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(t){let n=this.sessions.get(t);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),i=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),s={context:i,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(t,s),i}async ensurePage(t){let n=this.sessions.get(t);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(t);let r=this.sessions.get(t);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${t}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",i=>{i.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",i=>{i.isNavigationRequest()&&i.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",i=>{i.frame()===o.mainFrame()&&i.request().isNavigationRequest()&&(r.lastHttpStatus=i.status())}),o.on("dialog",i=>{r.openDialog=i}),o}getPage(t){return this.sessions.get(t)?.page}async renderHtml(t,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),i;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){i=l,await a.abort("blockedbyclient")}});let s=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",s,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(t,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(m){throw i??m}if(i!==void 0)throw i;let c=await a.content();if(i!==void 0)throw i;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",s),await o.close().catch(()=>{})}}getConsoleErrorCount(t){return this.sessions.get(t)?.consoleErrors??0}getLastHttpStatus(t){return this.sessions.get(t)?.lastHttpStatus??null}hasOpenDialog(t){return this.sessions.get(t)?.openDialog!==void 0}async dismissDialog(t,n=!0){let r=this.sessions.get(t);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(t){this.clearLaunchFailure();let n=this.sessions.get(t);n!==void 0&&(this.sessions.delete(t),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let t=[...this.sessions.keys()];if(await Promise.all(t.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${d3}`}}loadStorageState(t){let n=mc(t);try{if(!Ri.existsSync(n))return;let r=JSON.parse(Ri.readFileSync(n,"utf8"));return j("[browser/vault] restored session",{profile:t,file:n}),r}catch(r){j("[browser/vault] ignoring unreadable vault",{profile:t,file:n,err:r});return}}async saveStorageState(t,n){try{let r=mc(t);if(!Ri.existsSync(r))return;let o=await n.storageState(),i=Um.join(Um.dirname(r),`.${Um.basename(r)}.${process.pid}.${a3(4).toString("hex")}.tmp`);Ri.writeFileSync(i,JSON.stringify(o),{mode:384}),Ri.chmodSync(i,384),Ri.renameSync(i,r),j("[browser/vault] saved session",{profile:t,file:r})}catch(r){j("[browser/vault] save failed",{profile:t,err:r})}}}});import{createHash as u3}from"crypto";function OP(e){return!!(e.role==="textbox"&&e.kind==="password"||e.label&&p3.test(e.label))}function $P(e){return u3("sha256").update(e,"utf8").digest("hex").slice(0,8)}function DP(e){let t=e.replace(/\s+/g," ").trim();return t.length<=80?t:t.slice(0,77)+"..."}var p3,Hm=k(()=>{"use strict";p3=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as m3}from"node:crypto";function f3(e){return e?e.replace(/\s+/g," ").trim().slice(0,200):""}function g3(e,t,n){return`el_${m3("sha256").update(`${e}:${t}:${n}`).digest("hex").slice(0,6)}`}function h3(e){let t=e.replace(/\s+/g," ").trim(),n=4e3;return t.length<=n?t:t.slice(0,n)+"\u2026[truncated]"}function FP(e){return e.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function NP(e,t){let n=e.role??"",r=e.name??"";LP.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&t.push(e);for(let i of e.children??[])NP(i,t)}async function y3(e){return e.evaluate(t=>{let n=Array.from(document.querySelectorAll(t)),r=[];for(let o of n){let i=o.getBoundingClientRect(),s=o;if(i.width===0&&i.height===0){let d=window.getComputedStyle(s);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(i.left),y:Math.round(i.top),w:Math.round(i.width),h:Math.round(i.height)}})}return r},BP).catch(()=>[])}async function b3(e){return e.evaluate(t=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(t)),o=[];for(let i of r){let s=i.tagName.toLowerCase(),a=i.getAttribute("role")??"",l=i.getAttribute("aria-label")??i.getAttribute("placeholder")??(i.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[s]??"");if(s==="input"){let h=i.type;h==="checkbox"?c="checkbox":h==="radio"?c="radio":h==="button"||h==="submit"||h==="reset"?c="button":h==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in i?i.value:void 0,u=d!==void 0?String(d):void 0,m=i.disabled??!1,f=s==="input"?i.checked:void 0,g={role:c,name:l,disabled:m};u!==void 0&&(g.value=u),f!==void 0&&(g.checked=f),o.push(g)}return o},BP).catch(()=>[])}function w3(e){let n=e.accessibility;return n!==null&&typeof n=="object"?n:null}async function Wm(e,t){let n=t.maxElements??80,r=t.includeHidden??!1,o=[],i=w3(e),s=i?i.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=y3(e),l=e.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(e.url()),d=e.title().catch(()=>""),[u,m,f,g,h]=await Promise.all([s,a,l,c,d]),y,b=!1;u!==null?(y=[],NP(u,y)):(o.push("observation skipped accessibility tree (returned null)"),b=!0,y=(await b3(e)).filter(F=>LP.has(F.role??"")));let w=new Map;for(let P of m){let F=FP(P.name),W=w.get(F);(!W||W.bbox.w===0&&P.bbox.w>0)&&w.set(F,P)}let S=y.map(P=>({ax:P,dom:w.get(FP(P.name??""))})),T=r?S:S.filter(P=>P.dom?P.dom.bbox.w>0||P.dom.bbox.h>0:!0);T.sort((P,F)=>{let W=P.dom?.bbox.y??0,L=F.dom?.bbox.y??0;if(W!==L)return W-L;let H=P.dom?.bbox.x??0,M=F.dom?.bbox.x??0;return H-M}),T.length>200&&o.push("page has 200+ interactive elements; consider scoping");let A=T.slice(0,n).map((P,F)=>{let W=P.ax.role??"generic",L=P.ax.name??"",H=g3(W,L,F),M=P.dom?.bbox??{x:0,y:0,w:0,h:0},U=P.dom?.type??null,N=null;P.ax.value!==void 0&&P.ax.value!==null&&(N=String(P.ax.value)),P.ax.checked!==void 0&&(N=String(P.ax.checked)),OP({role:W,kind:U})&&(N="[redacted]");let $={disabled:P.ax.disabled??!1};P.ax.checked!==void 0&&($.checked=P.ax.checked===!0||P.ax.checked==="mixed"),P.ax.selected!==void 0&&($.selected=P.ax.selected),P.ax.expanded!==void 0&&($.expanded=P.ax.expanded);let _;P.dom?.testId?_=`[data-testid="${P.dom.testId}"]`:P.dom?.id&&(_=`#${P.dom.id}`);let B={id:H,role:W,label:f3(L),kind:U,value:N,state:$,bbox:M};return _!==void 0&&(B.selector=_),B}),O="idle";try{let P=await e.evaluate(()=>document.readyState);P==="loading"?O="loading":P==="interactive"?O="navigating":O="idle"}catch{O="navigating"}O!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),b&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let R=h3(f),I=`obs_${t.observationCounter.toString(36)}`,C=new Date().toISOString();return{observationId:I,url:g,title:h,textSummary:R,interactive:A,status:{httpStatus:t.httpStatus??null,loadingState:O,hasDialog:t.hasDialog??!1,consoleErrors:t.consoleErrors??0},warnings:o,screenshotPath:t.screenshotPath??null,capturedAt:C}}var LP,BP,UP=k(()=>{"use strict";Hm();LP=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);BP="a[href], button, input, select, textarea, [role], [tabindex], label"});async function jP(e,t){try{let n=await e.nth(t).evaluate(s=>{let a=s,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${t}`,o=0;for(let s=0;s<r.length;s++)o=o*31+r.charCodeAt(s)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function wv(e,t){let n=Math.min(t,5);return(await Promise.all(Array.from({length:n},(o,i)=>jP(e,i)))).filter(o=>o!==null)}async function S3(e){let t=new Set,n=[];for(let{loc:r,count:o}of e)for(let i=0;i<o;i++){let s;try{s=await r.nth(i).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}t.has(s)||(t.add(s),n.push({key:s,locator:r,index:i}))}return n}async function Sv(e,t,n){switch(t.kind){case"element_id":return v3(e,t,n);case"selector":return k3(e,t);case"semantic":return T3(e,t)}}async function v3(e,t,n){let r=n.get(t.elementId);if(r===void 0)return{outcome:"not_found",query:t};if(r.selector!==void 0){let l=e.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=e.getByRole(r.role,{name:r.label,exact:!0}),i=await o.count();if(i===0)return{outcome:"not_found",query:t};if(i===1)return{outcome:"resolved",locator:o};let s=await wv(o,i);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:s}}async function k3(e,t){let n=e.locator(t.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:t};if(r===1)return{outcome:"resolved",locator:n};let o=await wv(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${t.selector}]`},candidates:o}}async function T3(e,t){return t.role!==void 0?E3(e,t.text,t.role):x3(e,t.text,t)}async function E3(e,t,n){let r=e.getByRole(n,{name:t}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:t,role:n}};if(o===1)return{outcome:"resolved",locator:r};let i=await wv(r,o);return{outcome:"ambiguous_target",query:{text:t,role:n},candidates:i}}async function x3(e,t,n){let r=e.getByRole("button",{name:t}),o=e.getByRole("link",{name:t}),i=e.getByLabel(t,{exact:!1}),[s,a,l]=await Promise.all([r.count(),o.count(),i.count()]);if(s+a+l===0)return{outcome:"not_found",query:n};let d=[];s>0&&d.push({loc:r,count:s}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:i,count:l});let u=await S3(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let h=u[0];return h===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:h.locator.nth(h.index)}}let m=u.slice(0,5),f=[];for(let h=0;h<m.length;h++){let y=m[h];if(y===void 0)continue;let b=await jP(y.locator,y.index);if(b!==null){let w=`${b.role}:${b.label}:${h}`,S=0;for(let T=0;T<w.length;T++)S=S*31+w.charCodeAt(T)>>>0;f.push({...b,id:`el_${S.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:t},candidates:f}}var HP=k(()=>{"use strict"});async function vv(e,t,n,r){let o=e.url();if(o===n)return null;let i=Lm(o,t);if(i.allowed)return null;try{await e.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:i.reason}}var WP=k(()=>{"use strict";Nm()});import{randomBytes as R3}from"crypto";import{mkdir as A3,stat as C3,writeFile as _3}from"fs/promises";import{join as kv}from"path";import{gzip as I3}from"zlib";import{promisify as P3}from"util";function M3(e){return kv(ti(e),"browser")}function O3(e){return kv(M3(e),"screenshots")}function $3(){return new Date().toISOString().replace(/[:.]/g,"-")}function D3(){return R3(3).toString("hex")}async function Tv(e,t,n){if(t.length>KP)throw new Error(`writeScreenshotSidecar: buffer exceeds ${KP} byte cap (received ${t.length} bytes). Refusing to write oversized screenshot.`);let r=O3(e);await A3(r,{recursive:!0});let o=`${$3()}-${D3()}-${n}.png`,i=kv(r,o);await _3(i,t);let{size:s}=await C3(i);return{path:i,bytes:s}}var ZIe,KP,GP=k(()=>{"use strict";q();Hm();ZIe=P3(I3);KP=5*1024*1024});var zP={};ap(zP,{PlaywrightProvider:()=>Ev});function qP(e){switch(e.kind){case"semantic":return e.role!==void 0?`semantic('${e.text}', role='${e.role}')`:`semantic('${e.text}')`;case"element_id":return`element_id(${e.elementId})`;case"selector":return`selector(${e.selector})`}}var Ev,JP=k(()=>{"use strict";MP();UP();HP();Nm();WP();GP();Ev=class{name="playwright";config;launcher;sessions=new Map;constructor(t){this.config=t,this.launcher=new jm(t)}async open(t){let n=Lm(t.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:t.url,reason:n.reason};let{sessionId:r}=t,o=await this.launcher.ensurePage(r),i=this.ensureSessionState(r),s=null,a=null;try{await o.goto(t.url,{timeout:t.timeoutMs??3e4,waitUntil:t.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await vv(o,this.config,t.url,()=>this.close({sessionId:r}));if(u!==null)return u}(t.screenshot===!0||a!==null)&&(s=await this.captureScreenshot(o,r,"browser_open")),i.observationCounter+=1;let d=await Wm(o,{observationCounter:i.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(i,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),i=null;t.screenshot===!0&&(i=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let s=await Wm(r,{observationCounter:o.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:t.includeHidden,maxElements:t.maxElements});return this.updateSessionFromObservation(o,s.interactive,s.url,s.title,"browser_observe"),s}async act(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),i=r.url(),s=t.timeoutMs??3e4,a=await Sv(r,t.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${qP(t.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(t.action){case"click":await l.click({timeout:s});break;case"fill":await l.fill(t.value??"");break;case"press":await l.press(t.value??"");break;case"select":await l.selectOption(t.value??"");break;case"hover":await l.hover({timeout:s});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:s});break;case"wait_for":await l.waitFor({timeout:s,state:"visible"});break}};try{await d()}catch(h){if(h instanceof Error&&/navigation|net::ERR/i.test(h.message))try{await d()}catch(y){c=y}else c=h}let u=await vv(r,this.config,i,()=>this.close({sessionId:n}));if(u!==null)return u;let m=null;(t.screenshot===!0||c!==null)&&(m=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await Wm(r,{observationCounter:o.observationCounter,screenshotPath:m,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),g=`browser_act:${t.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,g),c!==null)throw c;return f}async render(t){return this.launcher.renderHtml(t.url,{timeoutMs:t.timeoutMs??3e4,waitUntil:t.waitFor??"load",signal:t.signal,requestGuard:t.requestGuard})}async screenshot(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),i;if(t.target!==void 0){let d=await Sv(r,t.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${qP(t.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");i=await d.locator.screenshot()}else i=await r.screenshot({fullPage:t.fullPage??!1});let{path:s,bytes:a}=await Tv(n,i,"browser_screenshot"),l=0,c=0;if(t.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:s,bytes:a,width:l,height:c,dataBase64:i.toString("base64"),mediaType:"image/png"}}async extract(t){throw new Error("browser_extract not implemented in Phase 1")}async close(t){await this.launcher.closeSession(t.sessionId),this.sessions.delete(t.sessionId)}describe(t){let n=this.sessions.get(t);if(n===void 0)return null;let r=this.launcher.getPage(t);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(t){let n=this.sessions.get(t);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(t,r),r}updateSessionFromObservation(t,n,r,o,i){t.knownElements=new Map(n.map(s=>[s.id,s])),t.currentUrl=r,t.currentTitle=o,t.lastAction=i,t.lastActionAt=new Date().toISOString()}async captureScreenshot(t,n,r){try{let o=await t.screenshot({fullPage:!1}),{path:i}=await Tv(n,o,r);return i}catch{return null}}}});var Ci={};ap(Ci,{__resetBrowserRegistryForTests:()=>U3,browserProviderActive:()=>N3,closeBrowserProvider:()=>xv,getBrowserProvider:()=>L3,peekBrowserProvider:()=>B3});function VP(){Promise.resolve(xv()).then(()=>{process.exit(130)})}function YP(){Promise.resolve(xv()).then(()=>{process.exit(143)})}function XP(){tr=null}function F3(){Km||(process.on("SIGINT",VP),process.on("SIGTERM",YP),process.on("exit",XP),Km=!0)}function QP(){Km&&(process.removeListener("SIGINT",VP),process.removeListener("SIGTERM",YP),process.removeListener("exit",XP),Km=!1)}async function L3(e){return tr!==null?tr:(Ai!==null||(Ai=(async()=>{let{PlaywrightProvider:t}=await Promise.resolve().then(()=>(JP(),zP)),n=CP(e),r=new t(n);return F3(),tr=r,Ai=null,r})()),Ai)}async function xv(){if(tr===null)return;let e=tr;tr=null,Ai=null,QP(),await e.shutdown()}function N3(){return tr!==null}function B3(){return tr}function U3(){tr=null,Ai=null,QP()}var tr,Ai,Km,_i=k(()=>{"use strict";Nm();tr=null,Ai=null,Km=!1});async function ZP(e,t){try{return await yP(e,t)}catch(n){return j("[web/scrape] extraction failed",{url:t,err:n}),{title:"",markdown:"",textLength:0,usedFallback:!0}}}async function q3(e,t){let{getBrowserProvider:n}=await Promise.resolve().then(()=>(_i(),Ci));return(await n()).render({url:e,timeoutMs:t.timeoutMs,signal:t.signal,requestGuard:t.requestGuard})}async function eM(e,t){let n=t.fetchFn??globalThis.fetch,r=t.renderFn??q3,o=t.lookupFn!==void 0?{lookupFn:t.lookupFn}:{},i=null,s=e,a=null,l=null;try{let d=await Fm(n,e,{headers:G3,signal:t.signal},o);a=d.status,s=d.url||e;let u=d.headers.get("content-type")??"";if(d.ok){if(K3.test(u))throw new Error(`web_scrape markdown mode received binary content (${u.split(";")[0]}). Use mode: "raw" to fetch the bytes, or a different tool.`);let m=await d.text();if(W3.test(u)&&!H3.test(u))return{title:"",markdown:m.trim(),finalUrl:s,usedRender:!1};if(i=await ZP(m,s),t.signal.aborted)throw t.signal.reason??new Error("aborted")}}catch(d){if(t.signal.aborted||d instanceof Cn||d instanceof Error&&d.message.startsWith("web_scrape markdown mode received binary"))throw d;l=d}if(!(i===null||i.textLength<200)&&i!==null)return{title:i.title,markdown:i.markdown,finalUrl:s,usedRender:!1};try{await Yc(e,o);let d=await r(e,{timeoutMs:t.timeoutMs,signal:t.signal,requestGuard:m=>Yc(m,o)});d.finalUrl!==e&&/^https?:\/\//i.test(d.finalUrl)&&await Yc(d.finalUrl,o);let u=await ZP(d.html,d.finalUrl);if(t.signal.aborted)throw t.signal.reason??new Error("aborted");if(i===null||u.textLength>=i.textLength)return{title:u.title,markdown:u.markdown,finalUrl:d.finalUrl,usedRender:!0}}catch(d){if(t.signal.aborted||d instanceof Cn)throw d;if(i===null){let u=d instanceof Error?d.message:String(d),m=l instanceof Error?l.message:`HTTP ${a??"error"}`,f=new Error(`web_scrape could not retrieve ${e}: fetch failed (${m}) and render failed (${u}).`);throw f.cause=d,f}}if(i!==null)return{title:i.title,markdown:i.markdown,finalUrl:s,usedRender:!1};throw new Error(`web_scrape could not retrieve any content from ${e} (HTTP ${a??"error"}).`)}var H3,W3,K3,G3,tM=k(()=>{"use strict";bP();yv();Se();H3=/(text\/html|application\/xhtml\+xml)/i,W3=/(application\/json|\/xml|\+xml|text\/|application\/(java|ecma)script|csv)/i,K3=/(image\/|audio\/|video\/|application\/pdf|application\/zip|application\/octet-stream|font\/)/i,G3={"User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/web_scrape",Accept:"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"}});function V3(e){let t=e.fetchFn??globalThis.fetch;return{name:"exa",async search(n,{limit:r,signal:o}){let i=await t(z3,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","x-api-key":e.apiKey,"User-Agent":"agent-afk/web_scrape"},body:JSON.stringify({query:n,type:"auto",numResults:Math.min(Math.max(r,1),J3),contents:{highlights:{numSentences:3,highlightsPerUrl:1}}}),signal:o});if(!i.ok){let l="";try{let d=await i.text(),u=Ar(d);u&&(l=`: ${u.length>200?u.slice(0,200)+"\u2026":u}`)}catch{}let c=i.statusText?` ${i.statusText}`:"";throw new Error(`Exa Search HTTP ${i.status}${c}${l}`)}let s;try{s=await i.json()}catch(l){throw new Error(`Exa Search response was not JSON: ${l instanceof Error?l.message:String(l)}`)}return(s.results??[]).slice(0,r).map(l=>({title:(l.title??"").trim()||"(untitled)",url:l.url??"",description:(l.highlights?.[0]??"").trim()})).filter(l=>l.url.length>0)}}}function nM(e){return e.exaApiKey!==void 0&&e.exaApiKey.trim()!==""?V3({apiKey:e.exaApiKey,fetchFn:e.fetchFn}):{error:'web_scrape search mode requires a search backend. Set EXA_API_KEY (free tier at https://exa.ai) to enable it. Use mode: "markdown" to read a known URL, or mode: "raw" for a direct fetch.'}}function rM(e,t){if(t.length===0)return`# Search results for "${e}"
+${ln(e,{headless:t,latched:n})}`,{cause:e})}var IP,r3,o3,_P,s3,Bm=k(()=>{"use strict";IP=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],r3="pnpm exec playwright install chromium",o3=4;s3="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Ri from"node:fs";import Um from"node:path";import{randomBytes as a3}from"node:crypto";import{chromium as l3}from"playwright";function c3(){try{return"5.84.12"}catch{}try{let e=Um.resolve(import.meta.dirname,"../../../package.json"),t=Ri.readFileSync(e,"utf8"),n=JSON.parse(t);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var d3,jm,MP=k(()=>{"use strict";Bm();q();Se();d3=c3(),jm=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(t){this.config=t}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(t){this.launchFailure={error:t}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=l3.launch({headless:this.config.headless}).then(t=>(this.browser=t,this.launchPromise=void 0,this.clearLaunchFailure(),t)).catch(t=>{this.launchPromise=void 0;let n=Qc(t,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(t){let n=this.sessions.get(t);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),i=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),s={context:i,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(t,s),i}async ensurePage(t){let n=this.sessions.get(t);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(t);let r=this.sessions.get(t);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${t}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",i=>{i.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",i=>{i.isNavigationRequest()&&i.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",i=>{i.frame()===o.mainFrame()&&i.request().isNavigationRequest()&&(r.lastHttpStatus=i.status())}),o.on("dialog",i=>{r.openDialog=i}),o}getPage(t){return this.sessions.get(t)?.page}async renderHtml(t,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),i;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){i=l,await a.abort("blockedbyclient")}});let s=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",s,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(t,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(m){throw i??m}if(i!==void 0)throw i;let c=await a.content();if(i!==void 0)throw i;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",s),await o.close().catch(()=>{})}}getConsoleErrorCount(t){return this.sessions.get(t)?.consoleErrors??0}getLastHttpStatus(t){return this.sessions.get(t)?.lastHttpStatus??null}hasOpenDialog(t){return this.sessions.get(t)?.openDialog!==void 0}async dismissDialog(t,n=!0){let r=this.sessions.get(t);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(t){this.clearLaunchFailure();let n=this.sessions.get(t);n!==void 0&&(this.sessions.delete(t),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let t=[...this.sessions.keys()];if(await Promise.all(t.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${d3}`}}loadStorageState(t){let n=mc(t);try{if(!Ri.existsSync(n))return;let r=JSON.parse(Ri.readFileSync(n,"utf8"));return j("[browser/vault] restored session",{profile:t,file:n}),r}catch(r){j("[browser/vault] ignoring unreadable vault",{profile:t,file:n,err:r});return}}async saveStorageState(t,n){try{let r=mc(t);if(!Ri.existsSync(r))return;let o=await n.storageState(),i=Um.join(Um.dirname(r),`.${Um.basename(r)}.${process.pid}.${a3(4).toString("hex")}.tmp`);Ri.writeFileSync(i,JSON.stringify(o),{mode:384}),Ri.chmodSync(i,384),Ri.renameSync(i,r),j("[browser/vault] saved session",{profile:t,file:r})}catch(r){j("[browser/vault] save failed",{profile:t,err:r})}}}});import{createHash as u3}from"crypto";function OP(e){return!!(e.role==="textbox"&&e.kind==="password"||e.label&&p3.test(e.label))}function $P(e){return u3("sha256").update(e,"utf8").digest("hex").slice(0,8)}function DP(e){let t=e.replace(/\s+/g," ").trim();return t.length<=80?t:t.slice(0,77)+"..."}var p3,Hm=k(()=>{"use strict";p3=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as m3}from"node:crypto";function f3(e){return e?e.replace(/\s+/g," ").trim().slice(0,200):""}function g3(e,t,n){return`el_${m3("sha256").update(`${e}:${t}:${n}`).digest("hex").slice(0,6)}`}function h3(e){let t=e.replace(/\s+/g," ").trim(),n=4e3;return t.length<=n?t:t.slice(0,n)+"\u2026[truncated]"}function FP(e){return e.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function NP(e,t){let n=e.role??"",r=e.name??"";LP.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&t.push(e);for(let i of e.children??[])NP(i,t)}async function y3(e){return e.evaluate(t=>{let n=Array.from(document.querySelectorAll(t)),r=[];for(let o of n){let i=o.getBoundingClientRect(),s=o;if(i.width===0&&i.height===0){let d=window.getComputedStyle(s);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(i.left),y:Math.round(i.top),w:Math.round(i.width),h:Math.round(i.height)}})}return r},BP).catch(()=>[])}async function b3(e){return e.evaluate(t=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(t)),o=[];for(let i of r){let s=i.tagName.toLowerCase(),a=i.getAttribute("role")??"",l=i.getAttribute("aria-label")??i.getAttribute("placeholder")??(i.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[s]??"");if(s==="input"){let h=i.type;h==="checkbox"?c="checkbox":h==="radio"?c="radio":h==="button"||h==="submit"||h==="reset"?c="button":h==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in i?i.value:void 0,u=d!==void 0?String(d):void 0,m=i.disabled??!1,f=s==="input"?i.checked:void 0,g={role:c,name:l,disabled:m};u!==void 0&&(g.value=u),f!==void 0&&(g.checked=f),o.push(g)}return o},BP).catch(()=>[])}function w3(e){let n=e.accessibility;return n!==null&&typeof n=="object"?n:null}async function Wm(e,t){let n=t.maxElements??80,r=t.includeHidden??!1,o=[],i=w3(e),s=i?i.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=y3(e),l=e.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(e.url()),d=e.title().catch(()=>""),[u,m,f,g,h]=await Promise.all([s,a,l,c,d]),y,b=!1;u!==null?(y=[],NP(u,y)):(o.push("observation skipped accessibility tree (returned null)"),b=!0,y=(await b3(e)).filter(F=>LP.has(F.role??"")));let w=new Map;for(let P of m){let F=FP(P.name),W=w.get(F);(!W||W.bbox.w===0&&P.bbox.w>0)&&w.set(F,P)}let S=y.map(P=>({ax:P,dom:w.get(FP(P.name??""))})),T=r?S:S.filter(P=>P.dom?P.dom.bbox.w>0||P.dom.bbox.h>0:!0);T.sort((P,F)=>{let W=P.dom?.bbox.y??0,L=F.dom?.bbox.y??0;if(W!==L)return W-L;let H=P.dom?.bbox.x??0,M=F.dom?.bbox.x??0;return H-M}),T.length>200&&o.push("page has 200+ interactive elements; consider scoping");let A=T.slice(0,n).map((P,F)=>{let W=P.ax.role??"generic",L=P.ax.name??"",H=g3(W,L,F),M=P.dom?.bbox??{x:0,y:0,w:0,h:0},U=P.dom?.type??null,N=null;P.ax.value!==void 0&&P.ax.value!==null&&(N=String(P.ax.value)),P.ax.checked!==void 0&&(N=String(P.ax.checked)),OP({role:W,kind:U})&&(N="[redacted]");let $={disabled:P.ax.disabled??!1};P.ax.checked!==void 0&&($.checked=P.ax.checked===!0||P.ax.checked==="mixed"),P.ax.selected!==void 0&&($.selected=P.ax.selected),P.ax.expanded!==void 0&&($.expanded=P.ax.expanded);let _;P.dom?.testId?_=`[data-testid="${P.dom.testId}"]`:P.dom?.id&&(_=`#${P.dom.id}`);let B={id:H,role:W,label:f3(L),kind:U,value:N,state:$,bbox:M};return _!==void 0&&(B.selector=_),B}),O="idle";try{let P=await e.evaluate(()=>document.readyState);P==="loading"?O="loading":P==="interactive"?O="navigating":O="idle"}catch{O="navigating"}O!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),b&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let R=h3(f),I=`obs_${t.observationCounter.toString(36)}`,C=new Date().toISOString();return{observationId:I,url:g,title:h,textSummary:R,interactive:A,status:{httpStatus:t.httpStatus??null,loadingState:O,hasDialog:t.hasDialog??!1,consoleErrors:t.consoleErrors??0},warnings:o,screenshotPath:t.screenshotPath??null,capturedAt:C}}var LP,BP,UP=k(()=>{"use strict";Hm();LP=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);BP="a[href], button, input, select, textarea, [role], [tabindex], label"});async function jP(e,t){try{let n=await e.nth(t).evaluate(s=>{let a=s,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${t}`,o=0;for(let s=0;s<r.length;s++)o=o*31+r.charCodeAt(s)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function wv(e,t){let n=Math.min(t,5);return(await Promise.all(Array.from({length:n},(o,i)=>jP(e,i)))).filter(o=>o!==null)}async function S3(e){let t=new Set,n=[];for(let{loc:r,count:o}of e)for(let i=0;i<o;i++){let s;try{s=await r.nth(i).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}t.has(s)||(t.add(s),n.push({key:s,locator:r,index:i}))}return n}async function Sv(e,t,n){switch(t.kind){case"element_id":return v3(e,t,n);case"selector":return k3(e,t);case"semantic":return T3(e,t)}}async function v3(e,t,n){let r=n.get(t.elementId);if(r===void 0)return{outcome:"not_found",query:t};if(r.selector!==void 0){let l=e.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=e.getByRole(r.role,{name:r.label,exact:!0}),i=await o.count();if(i===0)return{outcome:"not_found",query:t};if(i===1)return{outcome:"resolved",locator:o};let s=await wv(o,i);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:s}}async function k3(e,t){let n=e.locator(t.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:t};if(r===1)return{outcome:"resolved",locator:n};let o=await wv(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${t.selector}]`},candidates:o}}async function T3(e,t){return t.role!==void 0?E3(e,t.text,t.role):x3(e,t.text,t)}async function E3(e,t,n){let r=e.getByRole(n,{name:t}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:t,role:n}};if(o===1)return{outcome:"resolved",locator:r};let i=await wv(r,o);return{outcome:"ambiguous_target",query:{text:t,role:n},candidates:i}}async function x3(e,t,n){let r=e.getByRole("button",{name:t}),o=e.getByRole("link",{name:t}),i=e.getByLabel(t,{exact:!1}),[s,a,l]=await Promise.all([r.count(),o.count(),i.count()]);if(s+a+l===0)return{outcome:"not_found",query:n};let d=[];s>0&&d.push({loc:r,count:s}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:i,count:l});let u=await S3(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let h=u[0];return h===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:h.locator.nth(h.index)}}let m=u.slice(0,5),f=[];for(let h=0;h<m.length;h++){let y=m[h];if(y===void 0)continue;let b=await jP(y.locator,y.index);if(b!==null){let w=`${b.role}:${b.label}:${h}`,S=0;for(let T=0;T<w.length;T++)S=S*31+w.charCodeAt(T)>>>0;f.push({...b,id:`el_${S.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:t},candidates:f}}var HP=k(()=>{"use strict"});async function vv(e,t,n,r){let o=e.url();if(o===n)return null;let i=Lm(o,t);if(i.allowed)return null;try{await e.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:i.reason}}var WP=k(()=>{"use strict";Nm()});import{randomBytes as R3}from"crypto";import{mkdir as A3,stat as C3,writeFile as _3}from"fs/promises";import{join as kv}from"path";import{gzip as I3}from"zlib";import{promisify as P3}from"util";function M3(e){return kv(ti(e),"browser")}function O3(e){return kv(M3(e),"screenshots")}function $3(){return new Date().toISOString().replace(/[:.]/g,"-")}function D3(){return R3(3).toString("hex")}async function Tv(e,t,n){if(t.length>KP)throw new Error(`writeScreenshotSidecar: buffer exceeds ${KP} byte cap (received ${t.length} bytes). Refusing to write oversized screenshot.`);let r=O3(e);await A3(r,{recursive:!0});let o=`${$3()}-${D3()}-${n}.png`,i=kv(r,o);await _3(i,t);let{size:s}=await C3(i);return{path:i,bytes:s}}var ZIe,KP,GP=k(()=>{"use strict";q();Hm();ZIe=P3(I3);KP=5*1024*1024});var zP={};ap(zP,{PlaywrightProvider:()=>Ev});function qP(e){switch(e.kind){case"semantic":return e.role!==void 0?`semantic('${e.text}', role='${e.role}')`:`semantic('${e.text}')`;case"element_id":return`element_id(${e.elementId})`;case"selector":return`selector(${e.selector})`}}var Ev,JP=k(()=>{"use strict";MP();UP();HP();Nm();WP();GP();Ev=class{name="playwright";config;launcher;sessions=new Map;constructor(t){this.config=t,this.launcher=new jm(t)}async open(t){let n=Lm(t.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:t.url,reason:n.reason};let{sessionId:r}=t,o=await this.launcher.ensurePage(r),i=this.ensureSessionState(r),s=null,a=null;try{await o.goto(t.url,{timeout:t.timeoutMs??3e4,waitUntil:t.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await vv(o,this.config,t.url,()=>this.close({sessionId:r}));if(u!==null)return u}(t.screenshot===!0||a!==null)&&(s=await this.captureScreenshot(o,r,"browser_open")),i.observationCounter+=1;let d=await Wm(o,{observationCounter:i.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(i,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),i=null;t.screenshot===!0&&(i=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let s=await Wm(r,{observationCounter:o.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:t.includeHidden,maxElements:t.maxElements});return this.updateSessionFromObservation(o,s.interactive,s.url,s.title,"browser_observe"),s}async act(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),i=r.url(),s=t.timeoutMs??3e4,a=await Sv(r,t.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${qP(t.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(t.action){case"click":await l.click({timeout:s});break;case"fill":await l.fill(t.value??"");break;case"press":await l.press(t.value??"");break;case"select":await l.selectOption(t.value??"");break;case"hover":await l.hover({timeout:s});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:s});break;case"wait_for":await l.waitFor({timeout:s,state:"visible"});break}};try{await d()}catch(h){if(h instanceof Error&&/navigation|net::ERR/i.test(h.message))try{await d()}catch(y){c=y}else c=h}let u=await vv(r,this.config,i,()=>this.close({sessionId:n}));if(u!==null)return u;let m=null;(t.screenshot===!0||c!==null)&&(m=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await Wm(r,{observationCounter:o.observationCounter,screenshotPath:m,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),g=`browser_act:${t.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,g),c!==null)throw c;return f}async render(t){return this.launcher.renderHtml(t.url,{timeoutMs:t.timeoutMs??3e4,waitUntil:t.waitFor??"load",signal:t.signal,requestGuard:t.requestGuard})}async screenshot(t){let{sessionId:n}=t,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),i;if(t.target!==void 0){let d=await Sv(r,t.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${qP(t.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");i=await d.locator.screenshot()}else i=await r.screenshot({fullPage:t.fullPage??!1});let{path:s,bytes:a}=await Tv(n,i,"browser_screenshot"),l=0,c=0;if(t.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:s,bytes:a,width:l,height:c,dataBase64:i.toString("base64"),mediaType:"image/png"}}async extract(t){throw new Error("browser_extract not implemented in Phase 1")}async close(t){await this.launcher.closeSession(t.sessionId),this.sessions.delete(t.sessionId)}describe(t){let n=this.sessions.get(t);if(n===void 0)return null;let r=this.launcher.getPage(t);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(t){let n=this.sessions.get(t);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(t,r),r}updateSessionFromObservation(t,n,r,o,i){t.knownElements=new Map(n.map(s=>[s.id,s])),t.currentUrl=r,t.currentTitle=o,t.lastAction=i,t.lastActionAt=new Date().toISOString()}async captureScreenshot(t,n,r){try{let o=await t.screenshot({fullPage:!1}),{path:i}=await Tv(n,o,r);return i}catch{return null}}}});var Ci={};ap(Ci,{__resetBrowserRegistryForTests:()=>U3,browserProviderActive:()=>N3,closeBrowserProvider:()=>xv,getBrowserProvider:()=>L3,peekBrowserProvider:()=>B3});function VP(){Promise.resolve(xv()).then(()=>{process.exit(130)})}function YP(){Promise.resolve(xv()).then(()=>{process.exit(143)})}function XP(){tr=null}function F3(){Km||(process.on("SIGINT",VP),process.on("SIGTERM",YP),process.on("exit",XP),Km=!0)}function QP(){Km&&(process.removeListener("SIGINT",VP),process.removeListener("SIGTERM",YP),process.removeListener("exit",XP),Km=!1)}async function L3(e){return tr!==null?tr:(Ai!==null||(Ai=(async()=>{let{PlaywrightProvider:t}=await Promise.resolve().then(()=>(JP(),zP)),n=CP(e),r=new t(n);return F3(),tr=r,Ai=null,r})()),Ai)}async function xv(){if(tr===null)return;let e=tr;tr=null,Ai=null,QP(),await e.shutdown()}function N3(){return tr!==null}function B3(){return tr}function U3(){tr=null,Ai=null,QP()}var tr,Ai,Km,_i=k(()=>{"use strict";Nm();tr=null,Ai=null,Km=!1});async function ZP(e,t){try{return await yP(e,t)}catch(n){return j("[web/scrape] extraction failed",{url:t,err:n}),{title:"",markdown:"",textLength:0,usedFallback:!0}}}async function q3(e,t){let{getBrowserProvider:n}=await Promise.resolve().then(()=>(_i(),Ci));return(await n()).render({url:e,timeoutMs:t.timeoutMs,signal:t.signal,requestGuard:t.requestGuard})}async function eM(e,t){let n=t.fetchFn??globalThis.fetch,r=t.renderFn??q3,o=t.lookupFn!==void 0?{lookupFn:t.lookupFn}:{},i=null,s=e,a=null,l=null;try{let d=await Fm(n,e,{headers:G3,signal:t.signal},o);a=d.status,s=d.url||e;let u=d.headers.get("content-type")??"";if(d.ok){if(K3.test(u))throw new Error(`web_scrape markdown mode received binary content (${u.split(";")[0]}). Use mode: "raw" to fetch the bytes, or a different tool.`);let m=await d.text();if(W3.test(u)&&!H3.test(u))return{title:"",markdown:m.trim(),finalUrl:s,usedRender:!1};if(i=await ZP(m,s),t.signal.aborted)throw t.signal.reason??new Error("aborted")}}catch(d){if(t.signal.aborted||d instanceof Cn||d instanceof Error&&d.message.startsWith("web_scrape markdown mode received binary"))throw d;l=d}if(!(i===null||i.textLength<200)&&i!==null)return{title:i.title,markdown:i.markdown,finalUrl:s,usedRender:!1};try{await Yc(e,o);let d=await r(e,{timeoutMs:t.timeoutMs,signal:t.signal,requestGuard:m=>Yc(m,o)});d.finalUrl!==e&&/^https?:\/\//i.test(d.finalUrl)&&await Yc(d.finalUrl,o);let u=await ZP(d.html,d.finalUrl);if(t.signal.aborted)throw t.signal.reason??new Error("aborted");if(i===null||u.textLength>=i.textLength)return{title:u.title,markdown:u.markdown,finalUrl:d.finalUrl,usedRender:!0}}catch(d){if(t.signal.aborted||d instanceof Cn)throw d;if(i===null){let u=d instanceof Error?d.message:String(d),m=l instanceof Error?l.message:`HTTP ${a??"error"}`,f=new Error(`web_scrape could not retrieve ${e}: fetch failed (${m}) and render failed (${u}).`);throw f.cause=d,f}}if(i!==null)return{title:i.title,markdown:i.markdown,finalUrl:s,usedRender:!1};throw new Error(`web_scrape could not retrieve any content from ${e} (HTTP ${a??"error"}).`)}var H3,W3,K3,G3,tM=k(()=>{"use strict";bP();yv();Se();H3=/(text\/html|application\/xhtml\+xml)/i,W3=/(application\/json|\/xml|\+xml|text\/|application\/(java|ecma)script|csv)/i,K3=/(image\/|audio\/|video\/|application\/pdf|application\/zip|application\/octet-stream|font\/)/i,G3={"User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/web_scrape",Accept:"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"}});function V3(e){let t=e.fetchFn??globalThis.fetch;return{name:"exa",async search(n,{limit:r,signal:o}){let i=await t(z3,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","x-api-key":e.apiKey,"User-Agent":"agent-afk/web_scrape"},body:JSON.stringify({query:n,type:"auto",numResults:Math.min(Math.max(r,1),J3),contents:{highlights:{numSentences:3,highlightsPerUrl:1}}}),signal:o});if(!i.ok){let l="";try{let d=await i.text(),u=Ar(d);u&&(l=`: ${u.length>200?u.slice(0,200)+"\u2026":u}`)}catch{}let c=i.statusText?` ${i.statusText}`:"";throw new Error(`Exa Search HTTP ${i.status}${c}${l}`)}let s;try{s=await i.json()}catch(l){throw new Error(`Exa Search response was not JSON: ${l instanceof Error?l.message:String(l)}`)}return(s.results??[]).slice(0,r).map(l=>({title:(l.title??"").trim()||"(untitled)",url:l.url??"",description:(l.highlights?.[0]??"").trim()})).filter(l=>l.url.length>0)}}}function nM(e){return e.exaApiKey!==void 0&&e.exaApiKey.trim()!==""?V3({apiKey:e.exaApiKey,fetchFn:e.fetchFn}):{error:'web_scrape search mode requires a search backend. Set EXA_API_KEY (free tier at https://exa.ai) to enable it. Use mode: "markdown" to read a known URL, or mode: "raw" for a direct fetch.'}}function rM(e,t){if(t.length===0)return`# Search results for "${e}"
 
 (no results)`;let n=[`# Search results for "${e}"`,""];return t.forEach((r,o)=>{n.push(`## ${o+1}. ${r.title}`),r.url&&n.push(r.url),r.description&&n.push(r.description),n.push("")}),n.join(`
 `).trimEnd()}var z3,J3,oM=k(()=>{"use strict";go();z3="https://api.exa.ai/search",J3=10});function Gm(e){if(e instanceof Error&&e.name==="TimeoutError")return"timeout";let t=e instanceof Error?e.message:String(e);return/Timeout\s+\d+\s*ms exceeded/i.test(t)?"timeout":void 0}var Ii=k(()=>{"use strict";Bm()});function tX(e){if(!e||typeof e!="object")return{error:"Invalid input: expected an object"};let t=e,n=t.mode??"markdown";if(n!=="markdown"&&n!=="raw"&&n!=="search")return{error:`Invalid input: mode must be one of "markdown", "raw", "search" (got ${JSON.stringify(n)})`};let r=n,o,i;if(r==="search"){if(typeof t.query!="string"||t.query.length===0)return{error:'Invalid input: search mode requires a non-empty "query" string'};i=t.query}else{if(typeof t.url!="string"||t.url.length===0)return{error:`Invalid input: ${r} mode requires a non-empty "url" string`};let l;try{l=new URL(t.url)}catch{return{error:`Invalid input: "${t.url}" is not a valid absolute URL`}}if(l.protocol!=="http:"&&l.protocol!=="https:")return{error:`Invalid input: protocol "${l.protocol}" not supported (http/https only)`};o=l.toString()}let s=Y3;if(t.timeout_ms!==void 0){if(typeof t.timeout_ms!="number"||!Number.isFinite(t.timeout_ms)||t.timeout_ms<=0)return{error:"Invalid input: timeout_ms must be a positive finite number"};s=Math.min(t.timeout_ms,X3)}let a=Q3;if(t.max_bytes!==void 0){if(typeof t.max_bytes!="number"||!Number.isFinite(t.max_bytes)||t.max_bytes<=0)return{error:"Invalid input: max_bytes must be a positive finite number"};a=Math.min(t.max_bytes,Z3)}return{mode:r,url:o,query:i,timeoutMs:s,maxBytes:a}}function Rv(e,t){return Buffer.byteLength(e,"utf8")<=t?{content:e,truncated:!1}:{content:Rr(e,t),truncated:!0}}function nX(e={}){let t=e.fetchFn??globalThis.fetch,n=e.env??process.env,r=e.lookupFn!==void 0?{lookupFn:e.lookupFn}:{};return async(o,i)=>{if(typeof t!="function")return{content:"web_scrape unavailable: global fetch() is not present in this runtime (agent-afk requires Node 20+).",isError:!0};let s=tX(o);if("error"in s)return{content:s.error,isError:!0};if(i.aborted){let u=i.reason;return{content:`web_scrape aborted: ${u instanceof Error?u.message:String(u??"aborted")}`,isError:!0}}let a=new AbortController,l=()=>{a.abort(i.reason)},c,d=()=>{let u=a.signal.reason;return u instanceof Error?u.message:String(u??"aborted")};try{if(i.addEventListener("abort",l,{once:!0}),c=setTimeout(()=>{a.abort(new Error(`web_scrape timeout after ${s.timeoutMs}ms`))},s.timeoutMs),s.url!==void 0){let m=await hv(s.url,r);if(a.signal.aborted)return{content:`web_scrape aborted: ${d()}`,isError:!0};if(!m.allowed)return{content:`web_scrape blocked: ${m.reason}`,isError:!0}}if(s.mode==="raw"){let m;try{let h={method:"GET",headers:{"User-Agent":"agent-afk/web_scrape",Accept:"*/*"},signal:a.signal};m=await Fm(t,s.url,h,r)}catch(h){return a.signal.aborted?{content:`web_scrape aborted: ${d()}`,isError:!0}:h instanceof Cn?{content:`web_scrape blocked: ${h.message}`,isError:!0}:{content:`web_scrape network error: ${h instanceof Error?h.message:String(h)}`,isError:!0}}if(!m.ok)return{content:`web_scrape HTTP ${m.status} ${m.statusText||""}`.trimEnd()+` for ${s.url}`,isError:!0};let f;try{f=await m.text()}catch(h){return{content:`web_scrape read error: ${h instanceof Error?h.message:String(h)}`,isError:!0}}let g=Rv(f,s.maxBytes);return{content:g.content,...g.truncated?{truncated:!0}:{}}}if(s.mode==="markdown")try{let m=await eM(s.url,{fetchFn:t,renderFn:e.renderFn,timeoutMs:s.timeoutMs,signal:a.signal,...e.lookupFn!==void 0?{lookupFn:e.lookupFn}:{}});if(m.markdown.trim().length===0)return{content:`web_scrape extracted no readable content from ${s.url}.`,isError:!0};let f=Rv(m.markdown,s.maxBytes);return{content:f.content,...f.truncated?{truncated:!0}:{}}}catch(m){if(a.signal.aborted)return{content:`web_scrape aborted: ${d()}`,isError:!0};if(m instanceof Cn)return{content:`web_scrape blocked: ${m.message}`,isError:!0};let f=m instanceof Error?m.message:String(m),g=Ft(m)&&!bv(f)?` (the render fallback needs the optional Playwright browser \u2014 run \`${Xc()}\`)`:"";return{content:`web_scrape markdown error: ${f}${g}`,isError:!0}}let u=nM({exaApiKey:n.EXA_API_KEY,fetchFn:t});if("error"in u)return{content:u.error,isError:!0};try{let m=await u.search(s.query,{limit:eX,timeoutMs:s.timeoutMs,signal:a.signal}),f=Rv(rM(s.query,m),s.maxBytes);return{content:f.content,...f.truncated?{truncated:!0}:{}}}catch(m){return a.signal.aborted?{content:`web_scrape aborted: ${d()}`,isError:!0}:{content:`web_scrape search error (${u.name}): ${m instanceof Error?m.message:String(m)}`,isError:!0}}}finally{c!==void 0&&clearTimeout(c),i.removeEventListener("abort",l)}}}var Y3,X3,Q3,Z3,eX,iM,sM=k(()=>{"use strict";tM();oM();yv();bi();Ii();Y3=3e4,X3=12e4,Q3=1e5,Z3=1e6,eX=10;iM=nX()});import{existsSync as lM,mkdirSync as rX,readFileSync as oX,renameSync as iX,unlinkSync as sX,writeFileSync as aX}from"node:fs";import{dirname as aM,join as lX}from"node:path";import{randomBytes as cX}from"node:crypto";function cn(e){let t=e??gw();if(!lM(t))return[];try{let n=oX(t,"utf-8");return JSON.parse(n)}catch(n){let r=n instanceof Error?n.message:String(n);return console.error(`[schedule-store] failed to parse ${t}: ${r}`),[]}}function Pi(e,t){let n=t??gw();rX(aM(n),{recursive:!0});let r=lX(aM(n),`.schedules.json.${process.pid}.${cX(4).toString("hex")}.tmp`),o=JSON.stringify(e,null,2);try{aX(r,o,"utf-8"),iX(r,n)}catch(i){try{lM(r)&&sX(r)}catch{}throw i}}function qm(e,t){let n=cn(t),r=n.map(l=>l.id),o=dX(e.name),i=uX(o,r),s=new Date().toISOString(),a={...e,notifyOn:e.notifyOn??"failure",id:i,createdAt:s,updatedAt:s};return n.push(a),Pi(n,t),a}function zm(e,t){let n=cn(t),r=n.length,o=n.filter(i=>i.id!==e);return o.length===r?!1:(Pi(o,t),!0)}function Zc(e,t){return cn(t).find(n=>n.id===e)}function dX(e){return e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/-{2,}/g,"-").replace(/^-+|-+$/g,"")}function uX(e,t){if(!t.includes(e))return e;let n=2;for(;t.includes(`${e}-${n}`);)n+=1;return`${e}-${n}`}function cM(e){return{taskId:e.id,command:e.command,trigger:e.trigger??"cron",...e.cron!==void 0?{cronExpression:e.cron}:{},...e.notifyOn!==void 0?{notifyOn:e.notifyOn}:{},...e.notifyChat!==void 0?{notifyChat:e.notifyChat}:{}}}var Jm=k(()=>{"use strict";q()});import{existsSync as pX,readFileSync as mX}from"node:fs";import{join as fX}from"node:path";async function _n(e,t,n){let r;try{let o=fX(hp("default"),"port");if(!pX(o))return{synced:!1,detail:"daemon-not-detected (no port file)"};let i=mX(o,"utf-8").trim();if(r=parseInt(i,10),Number.isNaN(r))return{synced:!1,detail:"daemon-not-detected (invalid port file)"}}catch{return{synced:!1,detail:"daemon-not-detected (unreadable port file)"}}try{let o=await fetch(`http://localhost:${r}${t}`,{method:e,headers:{"Content-Type":"application/json"},body:n!==void 0?JSON.stringify(n):void 0,signal:AbortSignal.timeout(2e3)});return o.ok?{synced:!0,detail:"synced"}:e==="POST"&&o.status===409?{synced:!0,detail:"already-registered"}:e==="DELETE"&&o.status===404?{synced:!0,detail:"not-registered"}:{synced:!1,detail:`daemon-rejected (HTTP ${o.status})`}}catch{return{synced:!1,detail:"daemon-unreachable (stale port file or network error)"}}}var bo,Av=k(()=>{"use strict";q();bo="Change saved to schedules.json, but a running daemon (if any) did not pick it up \u2014 it will apply on the next daemon (re)start."});import{existsSync as gX}from"node:fs";import{readFile as hX}from"node:fs/promises";var dM,uM,pM,mM,fM=k(()=>{"use strict";Jm();q();Av();dM=async(e,t)=>{if(!e||typeof e!="object")return{content:"Invalid input: expected object",isError:!0};let n=e;if(typeof n.name!="string"||!n.name)return{content:"Invalid input: name required",isError:!0};if(typeof n.command!="string"||!n.command)return{content:"Invalid input: command required",isError:!0};if(typeof n.cron!="string"||!n.cron)return{content:"Invalid input: cron required",isError:!0};let r=n.cron.trim().split(/\s+/);if(r.length!==5&&r.length!==6)return{content:"Invalid input: cron must be a 5 or 6-field expression",isError:!0};let o=n.notifyChat;if(o!==void 0&&typeof o!="number"&&typeof o!="string")return{content:"Invalid input: notifyChat must be a number (chat id) or string (chat id or alias name)",isError:!0};let i=qm({name:n.name,command:n.command,cron:n.cron,trigger:n.trigger??"cron",notifyOn:n.notifyOn,...o!==void 0?{notifyChat:o}:{},enabled:typeof n.enabled=="boolean"?n.enabled:!0}),s=i.enabled?await _n("POST","/tasks",{taskId:i.id,command:i.command,cron:i.cron,trigger:i.trigger,notifyOn:i.notifyOn,...i.notifyChat!==void 0?{notifyChat:i.notifyChat}:{}}):await _n("DELETE",`/tasks/${i.id}`);return{content:JSON.stringify({id:i.id,name:i.name,cron:i.cron,enabled:i.enabled,daemonSynced:s.synced,syncDetail:s.detail,...s.synced?{}:{syncNote:bo}})}},uM=async(e,t)=>{let n=cn();return{content:JSON.stringify(n.map(r=>({id:r.id,name:r.name,cron:r.cron,trigger:r.trigger,enabled:r.enabled,notifyOn:r.notifyOn})))}},pM=async(e,t)=>{if(!e||typeof e!="object")return{content:"Invalid input: expected object",isError:!0};let n=e;if(typeof n.taskId!="string"||!n.taskId)return{content:"Invalid input: taskId required",isError:!0};let r=n.taskId,o=typeof n.limit=="number"?Math.min(Math.max(1,n.limit),50):10,i=Wn();if(!gX(i))return{content:JSON.stringify([])};let s;try{let c=await hX(i);s=(c.length>1048576?c.subarray(c.length-1048576):c).toString("utf-8")}catch{return{content:JSON.stringify([])}}let a=s.split(`
@@ -1233,7 +1233,7 @@ The sub-agent that just finished returned output that reads like **decision-driv
 Single-pass sub-agent reports are prone to confident hallucination \u2014 polished output that falls apart on re-derivation. Before acting on these conclusions, consider dispatching \`/shadow-verify\`. Independent verifiers will re-derive the 2\u20133 most load-bearing claims from scratch (without seeing the original reasoning) and flag any that don't hold up.
 
 Skip when: the findings are purely exploratory, the sub-agent ran inside an already-verifying orchestrator, the user is about to dismiss the report, or the stakes are low (read-only Q&A).`,dne=sne.map(e=>new RegExp(`(?:^|-)${e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:-|$)`,"i"));function une(e){return e?dne.some(t=>t.test(e)):!1}function pne(e){return lne.some(t=>t.test(e))}function mne(e){let t=0;for(let n of ane)n.test(e)&&t++;return t}function rN(){let e=!1,t=new Set;return n=>{if(n.event==="Stop")return e=!1,{};if(n.event!=="SubagentStop")return{};let r=n.lastMessage??"";return r.length<600?{}:une(n.agentType)?{}:pne(r)?{}:mne(r)<2?{}:e||t.has(n.subagentId)?{}:(e=!0,t.add(n.subagentId),{injectContext:cne})}}Er();Tr();var oN=300,fne="ask_question gate: no interactive operator is attached to this surface (no elicitation handler \u2014 daemon/scheduled/one-shot run), so the question cannot be answered now. The operator has been notified asynchronously. Do not re-ask or wait. Choose the most reasonable interpretation, state the assumption explicitly in your final report for async review, and proceed. If no safe assumption exists and the next action would be irreversible, end the turn with a Blocked terminal state naming exactly what the operator must supply.";function gne(e){tn(e).catch(()=>{})}function iN(e={}){let t=e.hasHandler??(()=>Ye.hasHandler()),n=e.notify??gne;return function(o){if(o.event!=="PreToolUse")return{};if(o.toolName!=="ask_question")return{};if(t())return{};try{let s=(typeof o.input=="object"&&o.input!==null?String(o.input.question??""):"").trim(),a=s.length<=oN?s:`${s.slice(0,oN)}\u2026(truncated)`;n(`\u{1F514} AFK question (auto-gated; agent proceeds on a stated assumption):
-`+(a!==""?a:"(question text unavailable)"))}catch{}return{decision:"block",reason:fne}}}var hne="safe-destruct observe-only: destructive-command attempt",yne=[{id:"rm-recursive-force",re:/\brm\s+-(?=[a-z]*r)(?=[a-z]*f)[a-z]+/i},{id:"rm-recursive-force-split",re:/\brm\s+-[a-z]*r[a-z]*\s+-[a-z]*f|\brm\s+-[a-z]*f[a-z]*\s+-[a-z]*r/i},{id:"rm-recursive-force-long",re:/\brm\s+[^|&;\n]*--recursive\b[^|&;\n]*--force\b|\brm\s+[^|&;\n]*--force\b[^|&;\n]*--recursive\b/i},{id:"rm-no-preserve-root",re:/\brm\b[^|&;\n]*--no-preserve-root\b/i},{id:"git-reset-hard",re:/\bgit\s+reset\s+--hard\b/i},{id:"git-clean-force",re:/\bgit\s+clean\s+-[a-z]*f|\bgit\s+clean\s+[^|&;\n]*--force\b/i},{id:"git-push-force",re:/\bgit\s+push\b[^|&;\n]*--force\b|\bgit\s+push\b[^|&;\n]*(?<![\w-])-f\b/i},{id:"git-branch-force-delete",re:/\bgit\s+branch\s+[^|&;\n]*-D\b/},{id:"dd-to-device",re:/\bof=\/dev\/(?!null\b|zero\b|random\b|urandom\b|stdout\b|stderr\b|tty\b)\S/i},{id:"mkfs",re:/\bmkfs(\.\w+)?\b/i},{id:"redirect-to-block-device",re:/>\s*\/dev\/(sd|nvme|hd|disk|mmcblk|vd)\w*/i},{id:"find-delete",re:/\bfind\b[^|&;\n]*-delete\b|\bfind\b[^|&;\n]*-exec\s+rm\b/i},{id:"shred",re:/\bshred\b/i},{id:"sql-drop-truncate-delete",re:/\b(drop\s+(table|database|schema|index)\b|truncate\s+table\b|delete\s+from\b)/i},{id:"docker-destructive",re:/\bdocker\s+(system\s+prune|volume\s+(rm|prune)|image\s+prune|container\s+prune|network\s+prune)\b|\bdocker\b[^|&;\n]*\brmi?\s+[^|&;\n]*-f/i},{id:"kubectl-delete",re:/\bkubectl\s+delete\b/i},{id:"terraform-destroy",re:/\bterraform\s+destroy\b/i}];function bne(e){if(!e)return[];let t=[];for(let{id:n,re:r}of yne)r.test(e)&&t.push(n);return t}function sN(){return function(t){if(t.event!=="PreToolUse")return{};if(t.toolName!=="bash")return{};let n=t.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=bne(r);return o.length===0?{}:{decision:"approve",reason:`${hne} [${o.join(", ")}]`}}}var wne="release-boundary observe-only: publish/deploy/sync-boundary command",Sne=[{id:"npm-publish",re:/\bnpm\s+publish\b/i},{id:"pnpm-publish",re:/\bpnpm\s+publish\b/i},{id:"yarn-publish",re:/\byarn\s+(?:npm\s+)?publish\b/i},{id:"cargo-publish",re:/\bcargo\s+publish\b/i},{id:"pypi-twine-upload",re:/\btwine\s+upload\b/i},{id:"poetry-publish",re:/\bpoetry\s+publish\b/i},{id:"gem-push",re:/\bgem\s+push\b/i},{id:"docker-push",re:/\bdocker\s+(?:image\s+)?push\b/i},{id:"gh-release-create",re:/\bgh\s+release\s+create\b/i},{id:"terraform-apply",re:/\bterraform\s+apply\b/i},{id:"kubectl-apply",re:/\bkubectl\s+apply\b/i},{id:"git-push-mirror",re:/\bgit\s+push\b[^|&;\n]*--mirror\b/i},{id:"git-push-tags",re:/\bgit\s+push\b[^|&;\n]*--(?:tags|follow-tags)\b/i}];function vne(e){if(!e)return[];let t=[];for(let{id:n,re:r}of Sne)r.test(e)&&t.push(n);return t}function aN(){return function(t){if(t.event!=="PreToolUse")return{};if(t.toolName!=="bash")return{};let n=t.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=vne(r);return o.length===0?{}:{decision:"approve",reason:`${wne} [${o.join(", ")}]`}}}pn();Cd();jS();function lN(e){return function(n){if(n.event!=="PreToolUse")return{};if(n.parentSessionId)return{};if(e()!=="plan")return{};let{toolName:r}=n;if(or(r)==="write")return{decision:"block",reason:`plan mode: ${r} is refused. Use /plan off to exit plan mode.`};if(r==="worktree"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.action??""):"";if(o!=="list")return{decision:"block",reason:`plan mode: worktree "${o}" is refused (mutates the worktree registry). Only action "list" is allowed in plan mode. Use /plan off to act.`}}if(r==="bash"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.command??""):"",i=bm(o);if(i.mutating)return{decision:"block",reason:`plan mode: bash refused \u2014 command looks state-mutating (${i.reason??"mutation detected"}). Read-only investigation (git status/log/diff, ls, cat, grep, find) is allowed. Use /plan off to act.`}}return{}}}import qa from"path";Ti();Cd();import cN from"path";var kne=["rm -rf","rm ","sudo","eval ","chmod","chown","git push --force","git push -f","git reset --hard","mkfs","fdisk","diskutil eraseDisk","dd if=","dd of=","| sh","| bash","|sh","|bash"],Tne=["git push","git reset","git commit","git stash drop","git stash clear","npm install","pnpm install","yarn","pip install","apt ","apt-get ","brew install","tee "," > "," >> ","mv ","cp ","mkdir","touch","pnpm build","tsc ","eslint --fix"],Ene=["pnpm test","vitest","jest","pytest","cargo test","go test","git status","git log","git diff","git show","ls ","cat ","head ","tail ","find ","grep ","echo ","printf "];function xne(e){return typeof e=="object"&&e!==null&&"command"in e?String(e.command??""):typeof e=="string"?e:""}function Rne(e){if(typeof e!="object"||e===null)return"";let t=e;return typeof t.file_path=="string"?t.file_path:typeof t.path=="string"?t.path:""}function Ane(e){for(let t of kne)if(e.includes(t))return"high";for(let t of Tne)if(e.includes(t))return"medium";for(let t of Ene)if(e.includes(t))return"safe";return"medium"}function Cne(e,t){if(!e)return"safe";let n=Ne(cN.resolve(t.cwd,e)),r=nv();for(let o of r)if(n===o||n.startsWith(o+"/"))return"high";if(n.includes("/.git/"))return"high";if(t.workspaceRoot!==void 0){let o=Ne(t.workspaceRoot);if(cN.relative(o,n).startsWith(".."))return"high"}return n.includes("/node_modules/")?"medium":"safe"}var _ne=new Set(["delete","drop","remove","destroy","truncate","purge","wipe","write","create","update","insert","upsert","patch","rename","exec","execute","run","eval","send","push","publish","deploy","post","merge","rollback","reset","terminate","provision","scale","disable","charge","refund","revoke"]);function Ine(e){return e.split("__").slice(1).join("__").split(/[_-]+/).filter(Boolean)}function dN(e,t,n){let r=e.toLowerCase();if(r==="bash"){let o=xne(t);return Ane(o)}if(r==="write_file"||r==="edit_file"){let o=Rne(t);return Cne(o,n)}if(or(e)==="read")return"safe";if(r==="send_telegram")return"medium";if(r.startsWith("mcp__"))return Ine(r).some(i=>_ne.has(i))?"high":"medium";if(r==="create_schedule"||r==="cancel_schedule")return"high";if(r==="worktree"){let o=typeof t=="object"&&t!==null?t:{},i=typeof o.action=="string"?o.action:"";return i==="list"?"safe":i==="remove"&&o.force===!0?"high":"medium"}return r==="browser_act"||r==="browser_open"||r==="web_scrape"?"medium":"safe"}Er();ve();Ha();NS();Ti();import iE from"path";import{lstatSync as Pne}from"fs";import{spawnSync as Mne}from"child_process";var One=new Set(["node_modules","dist","build",".next","coverage",".cache","__pycache__",".turbo",".parcel-cache","out","target"]),$ne=/[*?$`(){};|&<>'"\\]/;function Dne(e){return e==="--recursive"?!0:e.startsWith("--")?!1:/^-[A-Za-z]+$/.test(e)&&/[rR]/.test(e)}function Fne(e){if(!/^rm\b/.test(e)||$ne.test(e))return null;let t=e.trim().split(/\s+/),n=[],r=!1,o=!1;for(let i of t.slice(1)){if(!o&&i==="--"){o=!0;continue}if(!o&&i.startsWith("-")){Dne(i)&&(r=!0);continue}n.push(i)}return n.length===0?null:{targets:n,recursive:r}}function Lne(e,t){try{return Pne(e).isDirectory()?Mne("git",["check-ignore","--quiet","--",e],{cwd:t,stdio:"ignore"}).status===0:!1}catch(n){return n.code==="ENOENT"}}function uN(e,t,n){let r=Fne(e);if(r===null||!r.recursive)return!1;let o=Ne(n);for(let i of r.targets){if(i==="/"||i==="."||i===".."||i==="~"||i.startsWith("~/")||i==="$HOME"||i.startsWith("$HOME/")||i===".git"||i.startsWith(".git/"))return!1;let s=Ne(iE.resolve(t,i));if(s===o||!s.startsWith(o+iE.sep)||!One.has(iE.basename(s))||!Lne(s,o))return!1}return!0}var Nne=3e5,pN=300;function mN(e,t,n,r){let o=r?.approvalTimeoutMs??Nne,i=r?.promptForApproval??!0,s=r?.traceWriter,a=r?.sessionId,l=r?.route??((d,u)=>Ye.route(d,u));async function c(d,u,m,f){let g=Date.now(),h=Bne(d,u),y=new AbortController,b=()=>y.abort();m&&(m.aborted?y.abort():m.addEventListener("abort",b,{once:!0}));let w=Symbol("afk-approval-timeout"),S,T,E=new Promise(I=>{T=()=>{S||(S=setTimeout(()=>{y.abort(),I(w)},o),S.unref?.())}});function A(I,C){let P=Date.now()-g,F=I.decision==="block";return en(s,{hookEvent:"PreToolUse",...F?{decision:"block"}:{},...F&&I.reason!==void 0?{reason:I.reason}:{},...F?{blockedTool:d}:{},durationMs:P,approvalOutcome:C}),I}let O;try{let I=f??a;O=await Promise.race([l(h,{signal:y.signal,onActive:T,...I!==void 0?{sessionId:I}:{}}),E])}finally{S&&clearTimeout(S),m&&m.removeEventListener("abort",b)}if(O===w)return A(zd(d,`no approval arrived within ${Math.round(o/1e3)}s`),"timeout");if(O.action!=="accept")return A(zd(d,O.action==="cancel"?"the operator cancelled the approval prompt":"no operator approval was available"),O.action==="cancel"?"cancel":"decline");let R=String(O.content?.choice??"").toLowerCase();return R==="approve"?A({},"approved"):R==="deny"?A(zd(d,"the operator denied it"),"denied"):A(zd(d,"the approval prompt returned an unrecognised choice"),"unrecognised")}return function(u,m){if(u.event!=="PreToolUse")return{};if(e()!=="autonomous")return{};let{toolName:f}=u,g=Date.now();if(f==="send_telegram")return{};let h=n?.()??t??process.cwd(),y=u.cwd,b=y??h,S=(y!==void 0?jne(y,h):void 0)??h,T=dN(f,u.input,{cwd:b,workspaceRoot:S});if(T==="high"&&f==="bash"){let E=typeof u.input=="object"&&u.input!==null&&"command"in u.input?String(u.input.command??""):"";if(E&&uN(E,b,S))return en(s,{hookEvent:"PreToolUse",blockedTool:f,durationMs:Date.now()-g,approvalOutcome:"carve-out"}),{}}if(T!=="high")return{};if(u.parentSessionId!==void 0||!i){let E=zd(f,"AFK mode runs autonomously without a human watching");return en(s,{hookEvent:"PreToolUse",decision:"block",...E.reason!==void 0?{reason:E.reason}:{},blockedTool:f,durationMs:Date.now()-g,approvalOutcome:"hard-block"}),E}return c(f,u.input,m,u.sessionId)}}function Bne(e,t){let n=Une(t);return{serverName:"agent-afk",message:`AFK: \`${e}\` is high-risk / irreversible and AFK mode runs unattended. Approve this single call?`+(n?`
+`+(a!==""?a:"(question text unavailable)"))}catch{}return{decision:"block",reason:fne}}}var hne="safe-destruct observe-only: destructive-command attempt",yne=[{id:"rm-recursive-force",re:/\brm\s+-(?=[a-z]*r)(?=[a-z]*f)[a-z]+/i},{id:"rm-recursive-force-split",re:/\brm\s+-[a-z]*r[a-z]*\s+-[a-z]*f|\brm\s+-[a-z]*f[a-z]*\s+-[a-z]*r/i},{id:"rm-recursive-force-long",re:/\brm\s+[^|&;\n]*--recursive\b[^|&;\n]*--force\b|\brm\s+[^|&;\n]*--force\b[^|&;\n]*--recursive\b/i},{id:"rm-no-preserve-root",re:/\brm\b[^|&;\n]*--no-preserve-root\b/i},{id:"git-reset-hard",re:/\bgit\s+reset\s+--hard\b/i},{id:"git-clean-force",re:/\bgit\s+clean\s+-[a-z]*f|\bgit\s+clean\s+[^|&;\n]*--force\b/i},{id:"git-push-force",re:/\bgit\s+push\b[^|&;\n]*--force\b|\bgit\s+push\b[^|&;\n]*(?<![\w-])-f\b/i},{id:"git-branch-force-delete",re:/\bgit\s+branch\s+[^|&;\n]*-D\b/},{id:"dd-to-device",re:/\bof=\/dev\/(?!null\b|zero\b|random\b|urandom\b|stdout\b|stderr\b|tty\b)\S/i},{id:"mkfs",re:/\bmkfs(\.\w+)?\b/i},{id:"redirect-to-block-device",re:/>\s*\/dev\/(sd|nvme|hd|disk|mmcblk|vd)\w*/i},{id:"find-delete",re:/\bfind\b[^|&;\n]*-delete\b|\bfind\b[^|&;\n]*-exec\s+rm\b/i},{id:"shred",re:/\bshred\b/i},{id:"sql-drop-truncate-delete",re:/\b(drop\s+(table|database|schema|index)\b|truncate\s+table\b|delete\s+from\b)/i},{id:"docker-destructive",re:/\bdocker\s+(system\s+prune|volume\s+(rm|prune)|image\s+prune|container\s+prune|network\s+prune)\b|\bdocker\b[^|&;\n]*\brmi?\s+[^|&;\n]*-f/i},{id:"kubectl-delete",re:/\bkubectl\s+delete\b/i},{id:"terraform-destroy",re:/\bterraform\s+destroy\b/i}];function bne(e){if(!e)return[];let t=[];for(let{id:n,re:r}of yne)r.test(e)&&t.push(n);return t}function sN(){return function(t){if(t.event!=="PreToolUse")return{};if(t.toolName!=="bash")return{};let n=t.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=bne(r);return o.length===0?{}:{decision:"approve",reason:`${hne} [${o.join(", ")}]`}}}var wne="release-boundary observe-only: publish/deploy/sync-boundary command",Sne=[{id:"npm-publish",re:/\bnpm\s+publish\b/i},{id:"pnpm-publish",re:/\bpnpm\s+publish\b/i},{id:"yarn-publish",re:/\byarn\s+(?:npm\s+)?publish\b/i},{id:"cargo-publish",re:/\bcargo\s+publish\b/i},{id:"pypi-twine-upload",re:/\btwine\s+upload\b/i},{id:"poetry-publish",re:/\bpoetry\s+publish\b/i},{id:"gem-push",re:/\bgem\s+push\b/i},{id:"docker-push",re:/\bdocker\s+(?:image\s+)?push\b/i},{id:"gh-release-create",re:/\bgh\s+release\s+create\b/i},{id:"terraform-apply",re:/\bterraform\s+apply\b/i},{id:"kubectl-apply",re:/\bkubectl\s+apply\b/i},{id:"git-push-mirror",re:/\bgit\s+push\b[^|&;\n]*--mirror\b/i},{id:"git-push-tags",re:/\bgit\s+push\b[^|&;\n]*--(?:tags|follow-tags)\b/i}];function vne(e){if(!e)return[];let t=[];for(let{id:n,re:r}of Sne)r.test(e)&&t.push(n);return t}function aN(){return function(t){if(t.event!=="PreToolUse")return{};if(t.toolName!=="bash")return{};let n=t.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=vne(r);return o.length===0?{}:{decision:"approve",reason:`${wne} [${o.join(", ")}]`}}}pn();Cd();jS();function lN(e){return function(n){if(n.event!=="PreToolUse")return{};if(n.parentSessionId)return{};if(e()!=="plan")return{};let{toolName:r}=n;if(or(r)==="write")return{decision:"block",reason:`plan mode: ${r} is refused. Use /plan off to exit plan mode.`};if(r==="worktree"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.action??""):"";if(o!=="list")return{decision:"block",reason:`plan mode: worktree "${o}" is refused (mutates the worktree registry). Only action "list" is allowed in plan mode. Use /plan off to act.`}}if(r==="bash"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.command??""):"",i=bm(o);if(i.mutating)return{decision:"block",reason:`plan mode: bash refused \u2014 command looks state-mutating (${i.reason??"mutation detected"}). Read-only investigation (git status/log/diff, ls, cat, grep, find) is allowed. Use /plan off to act.`}}return{}}}import qa from"path";Ti();Cd();import cN from"path";var kne=["rm -rf","rm ","sudo","eval ","chmod","chown","git push --force","git push -f","git reset --hard","mkfs","fdisk","diskutil eraseDisk","dd if=","dd of=","| sh","| bash","|sh","|bash"],Tne=["git push","git reset","git commit","git stash drop","git stash clear","npm install","pnpm install","yarn","pip install","apt ","apt-get ","brew install","tee "," > "," >> ","mv ","cp ","mkdir","touch","pnpm build","tsc ","eslint --fix"],Ene=["pnpm test","vitest","jest","pytest","cargo test","go test","git status","git log","git diff","git show","ls ","cat ","head ","tail ","find ","grep ","echo ","printf "];function xne(e){return typeof e=="object"&&e!==null&&"command"in e?String(e.command??""):typeof e=="string"?e:""}function Rne(e){if(typeof e!="object"||e===null)return"";let t=e;return typeof t.file_path=="string"?t.file_path:typeof t.path=="string"?t.path:""}function Ane(e){for(let t of kne)if(e.includes(t))return"high";for(let t of Tne)if(e.includes(t))return"medium";for(let t of Ene)if(e.includes(t))return"safe";return"medium"}function Cne(e,t){if(!e)return"safe";let n=Ne(cN.resolve(t.cwd,e)),r=nv();for(let o of r)if(n===o||n.startsWith(o+"/"))return"high";if(n.includes("/.git/"))return"high";if(t.workspaceRoot!==void 0){let o=Ne(t.workspaceRoot);if(cN.relative(o,n).startsWith(".."))return"high"}return n.includes("/node_modules/")?"medium":"safe"}var _ne=new Set(["delete","drop","remove","destroy","truncate","purge","wipe","write","create","update","insert","upsert","patch","rename","exec","execute","run","eval","send","push","publish","deploy","post","merge","rollback","reset","terminate","provision","scale","disable","charge","refund","revoke"]);function Ine(e){return e.split("__").slice(1).join("__").split(/[_-]+/).filter(Boolean)}function dN(e,t,n){let r=e.toLowerCase();if(r==="bash"){let o=xne(t);return Ane(o)}if(r==="write_file"||r==="edit_file"){let o=Rne(t);return Cne(o,n)}if(or(e)==="read")return"safe";if(r==="send_telegram")return"medium";if(r.startsWith("mcp__"))return Ine(r).some(i=>_ne.has(i))?"high":"medium";if(r==="create_schedule"||r==="cancel_schedule")return"high";if(r==="worktree"){let o=typeof t=="object"&&t!==null?t:{},i=typeof o.action=="string"?o.action:"";return i==="list"?"safe":i==="remove"&&o.force===!0?"high":"medium"}return r==="browser_act"||r==="browser_open"||r==="web_scrape"?"medium":"safe"}Er();ve();Ha();NS();Ti();import iE from"path";import{lstatSync as Pne}from"fs";import{spawnSync as Mne}from"child_process";var One=new Set(["node_modules","dist","build",".next","coverage",".cache","__pycache__",".turbo",".parcel-cache","out","target"]),$ne=/[*?$`(){};|&<>'"\\\r\n]/;function Dne(e){return e==="--recursive"?!0:e.startsWith("--")?!1:/^-[A-Za-z]+$/.test(e)&&/[rR]/.test(e)}function Fne(e){if(!/^rm\b/.test(e)||$ne.test(e))return null;let t=e.trim().split(/\s+/),n=[],r=!1,o=!1;for(let i of t.slice(1)){if(!o&&i==="--"){o=!0;continue}if(!o&&i.startsWith("-")){Dne(i)&&(r=!0);continue}n.push(i)}return n.length===0?null:{targets:n,recursive:r}}function Lne(e,t){try{return Pne(e).isDirectory()?Mne("git",["check-ignore","--quiet","--",e],{cwd:t,stdio:"ignore"}).status===0:!1}catch(n){return n.code==="ENOENT"}}function uN(e,t,n){let r=Fne(e);if(r===null||!r.recursive)return!1;let o=Ne(n);for(let i of r.targets){if(i==="/"||i==="."||i===".."||i==="~"||i.startsWith("~/")||i==="$HOME"||i.startsWith("$HOME/")||i===".git"||i.startsWith(".git/"))return!1;let s=Ne(iE.resolve(t,i));if(s===o||!s.startsWith(o+iE.sep)||!One.has(iE.basename(s))||!Lne(s,o))return!1}return!0}var Nne=3e5,pN=300;function mN(e,t,n,r){let o=r?.approvalTimeoutMs??Nne,i=r?.promptForApproval??!0,s=r?.traceWriter,a=r?.sessionId,l=r?.route??((d,u)=>Ye.route(d,u));async function c(d,u,m,f){let g=Date.now(),h=Bne(d,u),y=new AbortController,b=()=>y.abort();m&&(m.aborted?y.abort():m.addEventListener("abort",b,{once:!0}));let w=Symbol("afk-approval-timeout"),S,T,E=new Promise(I=>{T=()=>{S||(S=setTimeout(()=>{y.abort(),I(w)},o),S.unref?.())}});function A(I,C){let P=Date.now()-g,F=I.decision==="block";return en(s,{hookEvent:"PreToolUse",...F?{decision:"block"}:{},...F&&I.reason!==void 0?{reason:I.reason}:{},...F?{blockedTool:d}:{},durationMs:P,approvalOutcome:C}),I}let O;try{let I=f??a;O=await Promise.race([l(h,{signal:y.signal,onActive:T,...I!==void 0?{sessionId:I}:{}}),E])}finally{S&&clearTimeout(S),m&&m.removeEventListener("abort",b)}if(O===w)return A(zd(d,`no approval arrived within ${Math.round(o/1e3)}s`),"timeout");if(O.action!=="accept")return A(zd(d,O.action==="cancel"?"the operator cancelled the approval prompt":"no operator approval was available"),O.action==="cancel"?"cancel":"decline");let R=String(O.content?.choice??"").toLowerCase();return R==="approve"?A({},"approved"):R==="deny"?A(zd(d,"the operator denied it"),"denied"):A(zd(d,"the approval prompt returned an unrecognised choice"),"unrecognised")}return function(u,m){if(u.event!=="PreToolUse")return{};if(e()!=="autonomous")return{};let{toolName:f}=u,g=Date.now();if(f==="send_telegram")return{};let h=n?.()??t??process.cwd(),y=u.cwd,b=y??h,S=(y!==void 0?jne(y,h):void 0)??h,T=dN(f,u.input,{cwd:b,workspaceRoot:S});if(T==="high"&&f==="bash"){let E=typeof u.input=="object"&&u.input!==null&&"command"in u.input?String(u.input.command??""):"";if(E&&uN(E,b,S))return en(s,{hookEvent:"PreToolUse",blockedTool:f,durationMs:Date.now()-g,approvalOutcome:"carve-out"}),{}}if(T!=="high")return{};if(u.parentSessionId!==void 0||!i){let E=zd(f,"AFK mode runs autonomously without a human watching");return en(s,{hookEvent:"PreToolUse",decision:"block",...E.reason!==void 0?{reason:E.reason}:{},blockedTool:f,durationMs:Date.now()-g,approvalOutcome:"hard-block"}),E}return c(f,u.input,m,u.sessionId)}}function Bne(e,t){let n=Une(t);return{serverName:"agent-afk",message:`AFK: \`${e}\` is high-risk / irreversible and AFK mode runs unattended. Approve this single call?`+(n?`
 
 Input: ${n}`:""),mode:"form",title:"AFK high-risk approval",requestedSchema:{type:"object",properties:{choice:{type:"string",title:"Approve this high-risk operation?",enum:["approve","deny"],description:"'approve' runs this single call. 'deny' refuses it (the model gets an error and should push an Asking summary or take a safe path)."}},required:["choice"]}}}function Une(e){let t;try{t=typeof e=="string"?e:JSON.stringify(e)}catch{t=String(e)}return t?(t=Ve(t),t.length>pN?`${t.slice(0,pN)}\u2026 [truncated]`:t):""}function zd(e,t){return{decision:"block",reason:`AFK mode: ${e} is refused \u2014 this op is high-risk or irreversible, and ${t}. Push an Asking summary to Telegram (send_telegram) and stop, or have the operator run /afk off and take over.`}}function jne(e,t){let n=qa.resolve(e),r=qa.resolve(t);if(n===r)return r;let o=qa.relative(r,n);if(o!==""&&!o.startsWith("..")&&!qa.isAbsolute(o))return oa(n)??n;let i=oa(r),s=oa(n);if(i!==void 0&&s!==void 0&&qa.dirname(i)===qa.dirname(s))return s}Xe();yi();import{mkdirSync as Kne,rmSync as Gne,writeFileSync as qne}from"fs";import{join as sE}from"path";Le();hm();function Hne(e){let t=new Set;for(let a of e.nodes){if(t.has(a.id))throw new Error(`Duplicate node ID: ${a.id}`);t.add(a.id)}let n=new Set;for(let a of e.edges){if(!t.has(a.from))throw new Error(`Edge references non-existent node: ${a.from}`);if(!t.has(a.to))throw new Error(`Edge references non-existent node: ${a.to}`);let l=`${a.from}->${a.to}`;if(n.has(l))throw new Error(`Duplicate edge: ${a.from} -> ${a.to}`);n.add(l)}let r=fN(e),o=new Map(r.inDegree),i=[];for(let[a,l]of o)l===0&&i.push(a);let s=0;for(;i.length>0;){let a=i.shift();s+=1;for(let l of r.downstream.get(a)??[]){let c=o.get(l)-1;o.set(l,c),c===0&&i.push(l)}}if(s!==t.size)throw new Error("Cycle detected in DAG")}function fN(e){let t=new Map,n=new Map,r=new Map;for(let o of e.nodes)t.set(o.id,new Set),n.set(o.id,new Set),r.set(o.id,0);for(let o of e.edges)t.get(o.from).add(o.to),n.get(o.to).add(o.from),r.set(o.to,r.get(o.to)+1);return{downstream:t,upstream:n,inDegree:r}}function Wne(e,t,n){let r=[e];for(;r.length>0;){let o=r.shift();for(let i of t.get(o)??[])n.has(i)||(n.add(i),r.push(i))}}async function gN(e,t,n={}){if(e.nodes.length===0)return{outputs:{},failed:[],skipped:[]};Hne(e);let{failFast:r=!0,nodeTimeoutMs:o,maxConcurrency:i=8}=n,s=o!==void 0&&Number.isFinite(o)&&o>0,a=fN(e),l=new Map(e.nodes.map(y=>[y.id,y])),c={},d=[],u=new Set,m=new Set,f=new Map(a.inDegree),g=new AbortController,h=()=>{g.signal.aborted||g.abort(t.reason)};t.aborted?g.abort(t.reason):t.addEventListener("abort",h,{once:!0});try{for(;!g.signal.aborted;){let y=[];for(let[w,S]of f)S===0&&!m.has(w)&&!u.has(w)&&y.push(w);if(y.length===0)break;let b=await ia(y,i,async w=>{let S=l.get(w),T=new AbortController,E=()=>{T.signal.aborted||T.abort(g.signal.reason)};g.signal.aborted?T.abort(g.signal.reason):g.signal.addEventListener("abort",E,{once:!0});let A;s&&!T.signal.aborted&&(A=setTimeout(()=>{T.signal.aborted||T.abort(new yt(`DAG node "${w}" exceeded nodeTimeoutMs of ${o}ms`,o))},o));let O={};for(let R of a.upstream.get(w)??[])O[R]=c[R];try{let R=await S.run(O,T.signal);return{id:w,result:R}}finally{A!==void 0&&clearTimeout(A),g.signal.removeEventListener("abort",E)}});for(let w=0;w<b.length;w++){let S=b[w];if(S.status==="fulfilled"){let{id:T,result:E}=S.value;c[T]=E,m.add(T),f.delete(T);for(let A of a.downstream.get(T)??[])f.set(A,f.get(A)-1)}else{let T=S.reason instanceof Error?S.reason:new Error(String(S.reason)),E=y[w];d.push({id:E,error:T}),m.add(E),f.delete(E),Wne(E,a.downstream,u),r&&g.abort("fail-fast")}}}}finally{t.removeEventListener("abort",h)}return{outputs:c,failed:d,skipped:Array.from(u)}}pt();Le();async function oh(e){let{manager:t,parentSession:n,nodes:r,edges:o,failFast:i,nodeTimeoutMs:s}=e,a=n.abortSignal??new AbortController().signal,l=r.map(c=>({id:c.id,async run(d,u){let m=await t.forkSubagent({parent:{sessionId:n.sessionId},config:{model:c.model??"sonnet",systemPrompt:c.systemPrompt,...c.canUseTool!==void 0?{canUseTool:c.canUseTool}:{},...c.cwd!==void 0?{cwd:c.cwd}:{},...c.readRoots!==void 0?{readRoots:c.readRoots}:{},...c.writeRoots!==void 0?{writeRoots:c.writeRoots}:{},...c.apiKey!==void 0?{apiKey:c.apiKey}:{},...c.maxToolUseIterations!==void 0?{maxToolUseIterations:c.maxToolUseIterations}:{}},idPrefix:c.idPrefix??`dag-${c.id}`,...c.outputSchema!==void 0?{outputSchema:c.outputSchema}:{},agentType:c.agentType??c.idPrefix??`dag-${c.id}`,...c.parentId!==void 0?{parentId:c.parentId}:{}}),f=()=>{m.cancel().catch(()=>{})};u.aborted?m.cancel().catch(()=>{}):u.addEventListener("abort",f,{once:!0});try{if(u.aborted)throw new DOMException("Aborted","AbortError");let g=c.promptBuilder(d),h=await m.runToResult(g);if(h.status!=="succeeded"){let b,w=u.reason;throw w instanceof yt?b=new Error(`Subagent ${c.id} aborted: ${w.message}`,h.error?{cause:h.error}:{}):b=h.error??new Error(`Subagent ${c.id} ${h.status}`),n$(b,{partialOutput:h.partialOutput,subagentId:h.id})}if(h.output!==void 0)return h.output;let y=h.message?.content;return typeof y=="string"?$n(y,h.stopReason):y}finally{u.removeEventListener("abort",f),await m.teardown().catch(()=>{})}}}));return gN({nodes:l,edges:o},a,{failFast:i,nodeTimeoutMs:s})}Ue();Xn();Mi();xr();q();var hN=1e3,ih=36e5,yN=1,bN=1e3;function zne(e){if(typeof e!="object"||e===null)throw new Error("Compose tool input must be an object");let t=e,n=t.nodes;if(!Array.isArray(n)||n.length===0)throw new Error('Compose tool requires a non-empty "nodes" array');let r=20;if(n.length>r)throw new Error(`Compose tool supports at most ${r} nodes (got ${n.length}). Split into multiple compose calls for larger workloads.`);let o=[],i=new Set;for(let g of n){if(typeof g!="object"||g===null)throw new Error("Each node must be an object");let h=g,y=h.id;if(typeof y!="string"||y.trim().length===0)throw new Error('Each node must have a non-empty "id" string');if(!/^[A-Za-z0-9_-]+$/.test(y)){let S=y.replace(/[\x00-\x1f\x7f]/g,"?").slice(0,32);throw new Error(`Node id "${S}" must match /^[A-Za-z0-9_-]+$/ (alphanumeric, underscore, hyphen)`)}if(i.has(y))throw new Error(`Duplicate node ID: ${y}`);i.add(y);let b=h.prompt;if(typeof b!="string"||b.trim().length===0)throw new Error(`Node "${y}" must have a non-empty "prompt" string`);let w;if(h.model!==void 0){if(typeof h.model!="string")throw new Error(`Node "${y}" model must be a string`);w=h.model}o.push({id:y,prompt:b,model:w})}let s;if(t.edges!==void 0){if(!Array.isArray(t.edges))throw new Error('"edges" must be an array');s=[];for(let g of t.edges){if(typeof g!="object"||g===null)throw new Error("Each edge must be an object");let h=g;if(typeof h.from!="string"||typeof h.to!="string")throw new Error('Each edge must have "from" and "to" strings');if(!i.has(h.from))throw new Error(`Edge references non-existent node: ${h.from}`);if(!i.has(h.to))throw new Error(`Edge references non-existent node: ${h.to}`);s.push({from:h.from,to:h.to})}}let a;if(t.fail_fast!==void 0){if(typeof t.fail_fast!="boolean")throw new Error('"fail_fast" must be a boolean');a=t.fail_fast}let l=[],c;if(t.node_timeout_ms!==void 0){let g=t.node_timeout_ms;if(typeof g!="number"||!Number.isFinite(g)||g<=0)throw new Error('"node_timeout_ms" must be a positive finite number (milliseconds)');if(g<hN)throw new Error(`"node_timeout_ms" must be at least ${hN}ms (got ${g}). Sub-second timeouts are almost always a unit mistake.`);c=Math.min(ih,g),g>ih&&l.push(`node_timeout_ms clamped: requested ${g}ms exceeds the maximum ${ih}ms; using ${ih}ms.`)}let d="max_tool_rounds_per_node",u="max_tool_calls_per_node",m=t[d]!==void 0?d:u;t[d]!==void 0&&t[u]!==void 0?l.push(`both "${d}" and the deprecated "${u}" were supplied; using "${d}" and ignoring the deprecated key.`):t[u]!==void 0&&l.push(`"${u}" is deprecated \u2014 use "${d}". The unit is tool-use ROUNDS (a round with N parallel calls costs 1), and spending the budget now triggers a tools-stripped wind-down round instead of cancelling the node.`);let f;if(t[m]!==void 0){let g=t[m];if(typeof g!="number"||!Number.isFinite(g)||g<=0)throw new Error(`"${m}" must be a positive finite number`);if(!Number.isInteger(g))throw new Error(`"${m}" must be an integer (got ${g}). Tool-use rounds are discrete events; fractional budgets are not meaningful.`);if(g<yN)throw new Error(`"${m}" must be at least ${yN}`);if(g>bN)throw new Error(`"${m}" must be at most ${bN} (got ${g}). A larger budget no longer constrains useful work.`);f=g}return{parsed:{nodes:o,edges:s,fail_fast:a,node_timeout_ms:c,max_tool_rounds_per_node:f},warnings:l}}var Jd=8e3,wN=500,SN=4e3;function Jne(e){if(e==null)return;let t=typeof e=="string"?e:JSON.stringify(e);if(t.length!==0)return t.length>SN?t.slice(0,SN)+`
 \u2026 (truncated)`:t}function Vne(e,t,n,r){try{let o=sE(lt(),e,"compose",t);Kne(o,{recursive:!0});let i=sE(o,`${n}.txt`);return qne(i,r,"utf8"),i}catch{return}}function Yne(e,t){let n=[],r=[];for(let[o,i]of Object.entries(e.outputs)){let s=typeof i=="string"?i:i!=null?JSON.stringify(i):"(no output)",a;if(s.length>Jd){let l=Vne(t.sessionId,t.callId,o,s);r.push({nodeId:o,emittedChars:Jd,totalChars:s.length,...l!==void 0?{spillPath:l}:{}});let c=l!==void 0?`
@@ -1773,7 +1773,7 @@ ${T}
 ${E}`})}return{fileBlocks:l,warnings:c}}async function zK(e,t,n,r,o="summary",i,s){let a=T1(e.text,e.attachments);r.onUserMessage&&await Promise.resolve(r.onUserMessage(a)).catch(()=>{}),r.setInFlight(!0),fl(process.stdout,iu(process.cwd(),!0));let l="",c=0,d=!1,u=!1,m=!1,f=!1,g=!1,h,y=!1,b=!1,w={abort:null},S=0,T=3e3,E=[],A=new Map,O=e.text.startsWith("/")?e.text.split(/[\s:]/)[0]?.slice(1):void 0,R=()=>{let L=r.subagentControl;L?.hasPromotableForeground()&&L.promoteActiveForeground().then(H=>{for(let M of H)(i??{fn:console.log}).fn(p.dim(`  \u2192 subagent backgrounded as ${M.jobId}: ${M.label}`))}).catch(()=>{})},I=r.getCompositor?r.getCompositor():null,C=()=>new Ml({out:Ol(i),thinkingMode:o,...O?{activeSkillName:O}:{},onCancel:()=>{t.interrupt().catch(L=>{Ke()&&console.error("  "+p.error("session.interrupt() failed:"),L)})},...r.subagentControl?{onBackground:R}:{},...s?.history?{history:s.history}:{},...s?.autocompleteState?{autocompleteState:s.autocompleteState}:{},...s?.promptText!==void 0?{promptText:s.promptText}:{},...r.scrollRegion?{scrollRegion:r.scrollRegion}:{},...I?{compositor:I}:{},...r.onStageChange?{onStageChange:r.onStageChange}:{}}),P=C(),F=async()=>{if(!f){f=!0;try{await P.dispose()}catch{}}},W=async()=>{await P.arm();let L=P.getCompositor();if(i&&L){let H=L;i.fn=M=>H.commitAbove(M),i.suppressSubagentCompletion=!0}r.setActiveCompositor?.(L),r.setInterruptNotifier?.(H=>P.setInterrupting(H)),r.rearmStatus?.()};try{I?I.commitAbove(""):console.log(),r.setSoftStopHandler&&r.setSoftStopHandler(()=>{y=!0,P.setSoftStopping(!0),t.interrupt().catch(_=>{Ke()&&console.error("  "+p.error("soft-stop session.interrupt() failed:"),_)});let $=r.subagentControl;$?.hasActiveForeground()&&$.cancelActiveForeground().catch(_=>{Ke()&&console.error("  "+p.error("soft-stop cancelActiveForeground() failed:"),_)})}),r.setPauseInterruptHandler&&r.setPauseInterruptHandler(()=>{b=!0,t.interrupt().catch($=>{Ke()&&console.error("  "+p.error("pause-interrupt session.interrupt() failed:"),$)})}),await W(),r.setBackgroundHandler&&r.subagentControl&&r.setBackgroundHandler(R);let{fileBlocks:L,warnings:H}=qK(e.text,{rootDir:process.cwd()});for(let $ of H)(i??{fn:console.log}).fn(p.dim(`  @-file: ${$}`));let M=L.length>0||e.attachments.length>0?GK(e.text,e.attachments,void 0,L):e.text,U=t.sendMessageStream(M);if(await ra(($,_)=>{P.process($,_)},async()=>{for await(let $ of U){if(y||b)break;if($.type==="chunk"&&$.chunk.type==="content"?(l=d?WK(l,$.chunk.content):l+$.chunk.content,d=!1,u=!0):$.type==="message"&&!u&&(l=$.message.content),$.type==="stream_retry"&&(l=l.slice(0,c),d=l.length>0),$.type==="chunk"&&$.chunk.type==="tool_use_detail"){let _=$.chunk,B={toolName:_.toolName,toolUseId:_.toolUseId,input:_.toolInput,..._.toolInputRaw!==void 0&&{inputRaw:_.toolInputRaw}};A.set(_.toolUseId,B),E.push(B)}else if($.type==="chunk"&&$.chunk.type==="tool_result"){let _=$.chunk;c=l.length,d=!0;let B=A.get(_.toolUseId);if(B&&(B.result=_.content,B.isError=_.isError,A.delete(_.toolUseId)),r.onContextProgress){let K=Date.now();if(K-S>=T){S=K;try{let Q=r.onContextProgress();Q instanceof Promise&&await Q}catch(Q){Ke()&&console.error("  "+p.error("onContextProgress (status refresh) failed:"),Q)}}}}if($.type==="paused"){if(r.setPausedState?.(!0),await F(),I&&$.autoResume===!0){let _=new AbortController;w.abort=_;let B=$.resetsAt?$.resetsAt.toLocaleTimeString(void 0,{hour:"2-digit",minute:"2-digit"}):null,K=B?`Keep waiting \u2014 auto-resumes at ${B}`:"Keep waiting \u2014 auto-resume in progress",Q="Switch model / provider  (type /model after)",ee="Stop waiting",ge=[p.warning("  \u23F3 Usage limit reached.")+(B?p.dim(`  Auto-resumes at ${B}.`):""),p.dim("  Tip: run `claude login` in another terminal to switch account \u2014 this turn resumes on it automatically."),""];dr(I,{header:ge,options:[K,Q,ee],signal:_.signal,initialIndex:0}).then(z=>{if(w.abort=null,!z)return;let re=z[0];re===void 0||re===K||(b=!0,re===Q&&(i??{fn:console.log}).fn(p.dim("  Hint: type /model <name> to switch, then send your message again.")),t.interrupt().catch(ae=>{Ke()&&console.error("  "+p.error("picker pause-interrupt session.interrupt() failed:"),ae)}))}).catch(z=>{Ke()&&console.error("  "+p.error("picker promise rejected:"),z)})}else(i??{fn:console.log}).fn(CC({reason:$.reason,...$.resetsAt!==void 0?{resetsAt:$.resetsAt}:{},...$.accountId!==void 0?{accountId:$.accountId}:{},...$.autoResume!==void 0?{autoResume:$.autoResume}:{}}));continue}if($.type==="resumed"){r.setPausedState?.(!1),w.abort?.abort(),w.abort=null;let _=$.hotSwapped&&$.accountId?`\u25B6 Resumed on ${$.accountId}`:"\u25B6 Resumed";l="",c=0,d=!1,u=!1,E.length=0,A.clear(),g=!1,h=void 0,m=!1,P=C(),f=!1,await W(),(i??{fn:console.log}).fn(p.success(_));continue}if($.type==="error"){await F(),Bs(Os($.error)),m=!0;continue}P.process($),$.type==="done"&&(g=!0,h=$.metadata)}}),await F(),y){let $=i?i.fn:console.log,_=I?I.getPendingCount():0,B=_>0?` \xB7 ${_} queued`:"";$(p.warning(`\u23F8 Stopped${B} \u2014 work so far kept.`)+p.dim("  Send a message to continue.")),$("")}if(b){let $=i?i.fn:console.log;$(p.dim("\u25B6 Ending wait \u2014 running your next command\u2026")),$("")}if(g&&!y&&!b){zi(n,a,l,h,E),r.onTurnComplete&&await r.onTurnComplete(a,l).catch(()=>{}),ml(process.stdout),aU(process.stdout,"afk: turn complete");let $=B=>{i?i.fn(B):console.log(B)},_=hb(l);if(_){$(KK(_)),$("");let B=$U(E);if(r.onTerminalState)try{r.onTerminalState(_,{doneHasCorroboratingEvidence:B})}catch{}if(n.permissionMode==="autonomous"){let K=_.kind==="done"&&Lc().verifyDone===!0&&!B;FU(_,void 0,{unverified:K})}}if(Yme(h,n,$),r.onAfterTurn){let B=r.onAfterTurn();B instanceof Promise&&await B.catch(()=>{})}}}catch(L){await F(),m||Bs(Os(L))}finally{await F(),fl(process.stdout,iu(process.cwd(),!1)),i&&(i.fn=i.idleFn,i.suppressSubagentCompletion=!1),r.setActiveCompositor?.(null),r.setInterruptNotifier?.(null),r.setBackgroundHandler?.(null),r.setSoftStopHandler?.(null),r.setPausedState?.(!1),r.setPauseInterruptHandler?.(null),w.abort?.abort(),w.abort=null,r.setInFlight(!1),r.rearmStatus?.()}}function Vme(e,t){let n=Math.round(e*100),r=ue(t);if(e>=1){let o=Math.round((e-1)*t);return{tier:"over",text:`  context OVER ${Math.round(t/1e3)}k tok by ~${ue(o)} tok \u2014 model output may be silently truncated`}}return e>=.95?{tier:"near",text:`  context ${n}% used of ${r} \u2014 near limit; output may soon truncate (consider /clear or a fresh session)`}:e>=.8?{tier:"caution",text:`  context ${n}% used of ${r} \u2014 approaching limit`}:e>.5?{tier:"normal",text:`  context ${n}% used of ${r}`}:{tier:"quiet",text:null}}function Yme(e,t,n=console.log){if(!e)return;let r=[];e.durationMs&&r.push(Re(e.durationMs)),e.totalCostUsd!==void 0&&r.push(it(e.totalCostUsd));let o=Number(e.usage?.input_tokens??0),i=Number(e.usage?.output_tokens??0);o+i>0&&r.push(ue(o+i)+" tok"),r.length>0&&n(p.dim("  \u25E6 "+r.join("  \xB7  ")));let s=FE(t),a=qt(t.model),l=Vme(s,a);if(l.text!==null){let d=l.tier==="over"||l.tier==="near"?p.error:l.tier==="caution"?p.warning:p.dim;n(d(l.text))}let c=HK(Hh(Gg()),new Date,{autoResume:L_()});if(c.text!==null){let d=c.tier==="over"||c.tier==="near"?p.error:c.tier==="caution"?p.warning:p.dim;n(d(c.text))}n("")}var Xme=5e3,Qme=3,Zme="[auto-resume] The background task above has finished. Continue the work it was dispatched for.";async function efe(e,t){if(e.firstTurnHook&&e.stats.totalTurns===0){let n=e.firstTurnHook;e.firstTurnHook=void 0;try{await n(t)}catch(r){e.completionWriter.fn(p.warning("\u26A0 ")+"first-turn hook failed: "+(r instanceof Error?r.message:String(r)))}}}async function JK(e,t,n,r,o,i,s,a){let{contextPane:l,loopStageBar:c,verdictLedger:d,shellPassthrough:u,bgResultNotifier:m}=s,f=null,g=[];e.session.current.waitForInitialization().then(async O=>{Ke()&&(f=Jh(O)),await Ou(e.session.current),Ke()&&(g=zx())}).catch(()=>{});let h=e.initialInput!==void 0?{text:e.initialInput,attachments:[]}:void 0,y,b=!1,w=!1,S,T,E,A=0;for(m.onInjectable=()=>{A>=Qme||!o.isAwaitingInput()||!o.bufferIsEmpty()||(A++,ml(process.stdout),h={text:Zme,attachments:[]},o.abortPendingRead())};;){if(f&&(e.replRenderer.writeLine(f),e.replRenderer.writeLine(""),f=null),g.length>0){for(let M of g)e.replRenderer.writeLine(M);e.replRenderer.writeLine(""),g=[]}let O=u.drainNotifications();for(let{job:M,result:U}of O){let N=U.errorReason===void 0?"\u2713":"\u2717",$=U.errorReason==="abort"?"killed":U.errorReason==="timeout"?"timed out":U.errorReason==="signal-killed"?"killed by signal":`exit ${U.exitCode??0}`,_=Math.max(0,Math.round(U.durationMs/100)/10);e.replRenderer.writeLine(p.dim(`  ${N} [${M.id}] ${$} \xB7 ${_}s \xB7 `)+M.command)}let R=m.drainNotifications();for(let{job:M}of R){let U=M.status==="completed"?"\u2713":M.status==="failed"?"\u2717":"\u2298",N=M.endedAt!==void 0?Math.max(0,Math.round((M.endedAt-M.startedAt)/100)/10):0,$=M.label.length>60?`${M.label.slice(0,60)}\u2026`:M.label;e.replRenderer.writeLine(p.dim(`  ${U} [${M.jobId}] subagent ${M.status} \xB7 ${N}s \xB7 `)+$)}let I=l.renderIfChanged(e.stats.sessionId);if(I.length>0){for(let M of I)e.replRenderer.writeLine(M);e.replRenderer.writeLine("")}let C,P;if(h===void 0){let M=await e.session.current.takePendingPlanExitSeed();M!==void 0&&(e.stats.permissionMode=M.mode,h={text:M.message,attachments:[]})}if(h!==void 0){let M=h;h=void 0;let U=Ll(e.stats.permissionMode),N=ns({buffer:M.text,promptText:U,isTTY:!!process.stdout.isTTY,attachmentSummary:Tl([...M.attachments])});e.replRenderer.writeLine(N),C=M.text.trim(),P=M.attachments}else{let M=y;y=void 0;let U=await o.readLine({promptFn:()=>Ll(e.stats.permissionMode),...M!==void 0?{initialBuffer:M}:{},onSigint:r,onShiftTab:()=>{pb(e.slashCtx).catch(()=>{}),e.statusLine.rearm()}});C=U.text.trim(),P=U.attachments}if(!C&&P.length===0)continue;if(C.startsWith("!")){let M=/^(0|false|off|no)$/i.test(v.AFK_SHELL_PASSTHROUGH??"");if(e.options.shellPassthrough!==!1&&!M&&(b||(b=!0,e.replRenderer.writeLine(p.dim("  \u2139  ! prefix shells out. Pass --no-shell-passthrough (or set AFK_SHELL_PASSTHROUGH=0) to send ! text to the model instead."))),await u.dispatch(C))){e.statusLine.rearm();continue}}let F=!1;if(C.startsWith("/")){let M=await vU(C,e.slashCtx,P);if(M.handled){if(M.result==="exit"){e.rl.close();return}if((C==="/clear"||C.startsWith("/clear "))&&(await t.rotateOnClear(),e.replRenderer.writeLine(p.dim(`  transcript: ${t.path()}`)),d.reset(),S=void 0),M.result!==null&&typeof M.result=="object"&&"kind"in M.result&&M.result.kind==="submit"){h={text:M.result.message,attachments:P??[]},e.statusLine.rearm();continue}if(M.result!==null&&typeof M.result=="object"&&"kind"in M.result&&M.result.kind==="prefill"){y=M.result.message,e.statusLine.rearm();continue}e.statusLine.rearm();continue}F=!0}a.push(C),await efe(e,C);let W=C;if(F){let M=DE(C);if(M){let U=M.name.replace(/^\//,"").split(":").pop()??"";if(U&&Wx(U)){let N={skillName:U,rawArgs:M.args,source:"plugin",capabilities:{compose:!0,subagents:!0}},$=e.session.current.sessionId,_=ps($),B=Date.now();j(`[afk trace] preflight.start commandName=${U}`);let K=!1,Q=await us(N,{cwd:e.stats.cwd??process.cwd(),artifactDir:_},ee=>{Ke()&&e.replRenderer.writeLine(p.warning(`\u26A0 preflight(${U}) failed: `)+(ee instanceof Error?ee.message:String(ee)))});K=Q!==null,j(`[afk trace] preflight.end commandName=${U} durationMs=${Date.now()-B} success=${K}`),W=Gx(Q?.manifestBlock,C)}}}let L=u.drainInjections();L.length>0&&(W=L+W);let H=m.drainInjections();if(H.length>0&&(W=H+W),S!==void 0&&(W=S+`
 
 `+W,S=void 0),e.hookRegistry)try{let M={event:"UserPromptSubmit",prompt:W,sessionId:e.stats.sessionId},U=await e.hookRegistry.dispatch(M);U.injectContext&&(W=U.injectContext+W)}catch(M){if(M instanceof Ee){e.replRenderer.writeLine(p.warning("\u2298 Turn blocked by hook")+(M.reason?p.dim(`: ${Ar(M.reason)}`):"")),e.statusLine.rearm();continue}if(M instanceof Vn){e.replRenderer.writeLine(p.warning("\u2298 Turn blocked by hook")+p.dim(`: handler timed out after ${M.timeoutMs}ms`)),e.statusLine.rearm();continue}throw M}if(T=void 0,E=void 0,await zK({text:W,attachments:P},e.session.current,e.stats,{setInFlight(M){n.turnInFlight=M},...e.subagentControl?{subagentControl:e.subagentControl}:{},async onUserMessage(M){await t.appendUser(M)},async onTurnComplete(M,U){if(await t.appendTurn(M,U),e.stats.sessionId)try{Do(e.stats)}catch(N){w||(w=!0,e.replRenderer.writeLine(p.warning("\u26A0 ")+"session autosave failed \u2014 this conversation may not be resumable: "+(N instanceof Error?N.message:String(N))))}},async onAfterTurn(){await e.contextSampler.onTurn(e.stats.totalTurns),await e.gitStatusSampler.refresh(),e.statusLine.rearm(),c?.repaint("observing")},rearmStatus:()=>e.statusLine.rearm(),onTerminalState:(M,U)=>{d?.push(M),T=M.kind,E=U?.doneHasCorroboratingEvidence},setActiveCompositor:M=>{n.activeCompositor=M},setInterruptNotifier:M=>{n.notifyInterrupting=M},scrollRegion:e.statusLine,getCompositor:()=>o.getCompositor(),setBackgroundHandler:M=>o.setBackgroundHandler(M),setSoftStopHandler:i,setPausedState:M=>o.setPausedState(M),setPauseInterruptHandler:M=>o.setPauseInterruptHandler(M),async onContextProgress(){await e.contextSampler.refresh(),e.statusLine.repaint(Nn(e.stats,e.contextSampler,e.gitStatusSampler))},...c?{onStageChange:M=>c.repaint(M)}:{}},e.stats.thinkingUi??e.options.thinkingUi,e.completionWriter,o.toRunTurnRefs(Ll(e.stats.permissionMode))),e.hookRegistry)try{let M=await e.hookRegistry.dispatch({event:"Stop",sessionId:e.stats.sessionId,...T!==void 0?{terminalState:T}:{},...E!==void 0?{doneHasCorroboratingEvidence:E}:{}},void 0,Xme);M.injectContext&&M.injectContext.trim().length>0&&(S=M.injectContext)}catch(M){if(M instanceof ct)throw M;M instanceof Vn?(j("[stop hook] handler timed out"),e.completionWriter.fn(p.dim("  [stop hook] timed out"))):M instanceof Ee?e.completionWriter.fn(p.dim(`  [stop hook] blocked: ${Ar(M.reason??"no reason given")}`)):j("[stop hook] unexpected error: "+String(M))}}}function tfe(e,t){if(e!==void 0){let n=e.toLowerCase();return!(n==="0"||n==="false"||n==="off"||n==="no")}return typeof t=="boolean"?t:!0}async function VK(e,t,n,r){let o=await xK(),i=new ub({rl:e.rl,history:o,statusLine:e.statusLine}),s=tfe(v.AFK_SUGGEST_GHOST,e.suggestGhostConfig),a;try{let{installSoftStop:l}=await IK(e,i,n,t,r,s,{getLoopStageBar:()=>a?.loopStageBar});a=UK(e,n),await JK(e,t,n,r,i,l,a,o)}finally{n.tryAbortShellForeground=null,a?.shellPassthrough.drainOnExit(),a?.bgResultNotifier.dispose(),a?.loopStageBar.stop(),a?.bgStatusBar.stop(),a?.verdictLedger.stop(),a?.contextPane.dispose();let l=c=>console.log(c);e.completionWriter.fn=l,e.completionWriter.idleFn=l,await i.dispose(),e.inputSurfaceRef&&(e.inputSurfaceRef.current=null)}}Mc();pa();import{execFile as nfe}from"node:child_process";import{dirname as rfe,isAbsolute as ofe,resolve as ife}from"node:path";import{promisify as sfe}from"node:util";var YK=sfe(nfe),afe=3e3,lfe=new Set(["empty","orphaned-dir","orphaned-registration","dead-owner"]);async function cfe(){let t=(await YK("git",["rev-parse","--git-common-dir"])).stdout.trim();if(!t)throw new Error("Not in a git repository.");let n=ofe(t)?t:ife(process.cwd(),t);return rfe(n)}async function XK(e){if(e?.disabled)return{ran:!1,removedCount:0,skippedReason:"disabled"};let t;try{t=await cfe()}catch{return{ran:!1,removedCount:0,skippedReason:"not-in-repo"}}let n,r=new Promise(o=>{n=setTimeout(()=>o("timeout"),afe)});try{let o=dn({execFile:YK,repoRoot:t,dryRun:!1,scope:"interactive",bypassSoftLaunch:!0}),i=await Promise.race([o,r]);if(i==="timeout")return{ran:!1,removedCount:0,skippedReason:"timeout"};let s=i;return s.warnings.some(c=>c.toLowerCase().includes("contested"))?{ran:!1,removedCount:0,skippedReason:"lock-contested"}:{ran:!0,removedCount:s.candidates.filter(c=>lfe.has(c.verdict)&&s.removed.includes(c.path)).length}}catch{return{ran:!1,removedCount:0,skippedReason:"error"}}finally{n&&clearTimeout(n)}}Fp();Mc();import{promises as dfe}from"node:fs";import{dirname as ufe,join as eG}from"node:path";import{randomBytes as pfe}from"node:crypto";var mfe=["Generate a 2-4 word kebab-case slug describing this work request.","Rules:","- ASCII lowercase letters and digits only, separated by single hyphens","- 2 to 4 hyphen-separated words","- Maximum 30 characters total","- No prefix, no quotes, no punctuation other than hyphens","- Output ONLY the slug \u2014 no explanation, no preamble","Examples: fix-cleanup-race, add-telegram-allowlist, refactor-prompt-loader, debug-flaky-test"].join(`
-`),QK=/^[a-z0-9]+(-[a-z0-9]+){1,3}$/,yR=30,ffe=1024,gfe=8e3,hfe="haiku";async function yfe(e,t){let n=e.trim();if(n.length===0)return t.onSkip?.("empty-message"),null;if(n.startsWith("/"))return t.onSkip?.("slash-command"),null;let r=vfe(n,ffe),o=new AbortController,i=setTimeout(()=>o.abort(),t.timeoutMs??gfe),s=t.signal?kfe([t.signal,o.signal]):o.signal,a;try{t.slugGenerator?a=await t.slugGenerator(r,s):a=await Ks({token:t.token,model:t.model??hfe,system:mfe,user:r,maxTokens:32,signal:s})}catch(u){let m=u instanceof Error?u.message:String(u);return t.onSkip?.("slug-generator-error",m.slice(0,200)),null}finally{clearTimeout(i)}let l=bfe(a);if(l===null)return t.onSkip?.("invalid-slug-output",a.slice(0,60)),null;let c=ufe(t.worktreePath);return await wfe(l,c)}function bfe(e){let t=e.trim().toLowerCase();if(t.length===0)return null;if(QK.test(t)&&t.length<=yR)return t;let n=t.replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");if(n.length===0)return null;let r=n.split("-").filter(i=>i.length>0).slice(0,4);if(r.length<2)return null;let o=r[0];for(let i=1;i<r.length;i++){let s=`${o}-${r[i]}`;if(s.length>yR)break;o=s}return QK.test(o)?o:null}async function wfe(e,t){if(!await Sfe(eG(t,e)))return e;let n=pfe(2).toString("hex");return`${e.split("-").slice(0,3).join("-").slice(0,yR-5)}-${n}`}async function Sfe(e){try{return await dfe.access(e),!0}catch{return!1}}function vfe(e,t){let n=Buffer.from(e,"utf8");if(n.length<=t)return e;let r=t;for(;r>0&&n[r]!==void 0&&(n[r]&192)===128;)r--;return n.slice(0,r).toString("utf8")}function kfe(e){let t=AbortSignal.any;if(typeof t=="function")return t.call(AbortSignal,e);let n=new AbortController;for(let r of e){if(r.aborted)return n.abort(r.reason),n.signal;r.addEventListener("abort",()=>n.abort(r.reason),{once:!0})}return n.signal}async function tG(e){let t,n,r=eG(e.deferred.repoRoot,".afk-worktrees","unnamed"),o=await yfe(e.message,{token:e.token,...e.model!==void 0?{model:e.model}:{},...e.timeoutMs!==void 0?{timeoutMs:e.timeoutMs}:{},worktreePath:r,...e.signal!==void 0?{signal:e.signal}:{},...e.slugGenerator!==void 0?{slugGenerator:e.slugGenerator}:{},onSkip:(a,l)=>{t=a,n=l}}),i=t??"unknown",s=n;if(o!==null){let l=`${Zp(e.branchPrefix)}${o}`;try{let c=await e.deferred.create(l);return ZK(e.session,c.path),{status:"created",path:c.path,branch:c.branch,slug:o}}catch(c){i="create-failed",s=(c instanceof Error?c.message:String(c)).slice(0,200)}}try{let a=await e.deferred.create(!0);return ZK(e.session,a.path),{status:"created-fallback",path:a.path,branch:a.branch,reason:i,...s!==void 0?{detail:s}:{}}}catch(a){return{status:"failed",reason:a instanceof Error?a.message:String(a)}}}function ZK(e,t){e&&e.setCwd(t),Tfe(t)}function Tfe(e){try{process.chdir(e)}catch{}}Ht();q();import{spawn as rG}from"child_process";import{existsSync as oG,mkdirSync as Cfe,readFileSync as iG,unlinkSync as nG,writeFileSync as sG}from"fs";import{get as _fe}from"https";import{join as aG}from"path";import{readFileSync as Efe}from"fs";import{dirname as xfe,join as Rfe}from"path";import{fileURLToPath as Afe}from"url";function gr(){try{return"5.84.11"}catch{}try{let e=xfe(Afe(import.meta.url));for(let t of["../../package.json","../package.json"])try{let n=JSON.parse(Efe(Rfe(e,t),"utf-8"));if(typeof n.version=="string")return n.version}catch{}}catch{}return"0.0.0-unknown"}G();var Ife=64*1024,Pfe=10800*1e3,Mfe=800,Ofe=3600*1e3,$fe="update-check.json",Dfe="pending-update.json";function bR(){return aG(Is(),$fe)}function Bu(){return aG(Is(),Dfe)}function wR(){let e=Is();oG(e)||Cfe(e,{recursive:!0})}function lG(e,t){let n=a=>a.split(/[-+]/,1)[0]??a,r=a=>a.includes("-"),o=n(e).split(".").map(Number),i=n(t).split(".").map(Number),s=Math.max(o.length,i.length);for(let a=0;a<s;a++){let l=o[a]??0,c=i[a]??0;if(c>l)return!0;if(c<l)return!1}return r(e)&&!r(t)}function cG(){try{let e=iG(bR(),"utf-8"),t=JSON.parse(e);if(typeof t.latestVersion=="string"&&typeof t.checkedAt=="number")return t}catch{}return null}function dG(){try{wR();let e=`
+`),QK=/^[a-z0-9]+(-[a-z0-9]+){1,3}$/,yR=30,ffe=1024,gfe=8e3,hfe="haiku";async function yfe(e,t){let n=e.trim();if(n.length===0)return t.onSkip?.("empty-message"),null;if(n.startsWith("/"))return t.onSkip?.("slash-command"),null;let r=vfe(n,ffe),o=new AbortController,i=setTimeout(()=>o.abort(),t.timeoutMs??gfe),s=t.signal?kfe([t.signal,o.signal]):o.signal,a;try{t.slugGenerator?a=await t.slugGenerator(r,s):a=await Ks({token:t.token,model:t.model??hfe,system:mfe,user:r,maxTokens:32,signal:s})}catch(u){let m=u instanceof Error?u.message:String(u);return t.onSkip?.("slug-generator-error",m.slice(0,200)),null}finally{clearTimeout(i)}let l=bfe(a);if(l===null)return t.onSkip?.("invalid-slug-output",a.slice(0,60)),null;let c=ufe(t.worktreePath);return await wfe(l,c)}function bfe(e){let t=e.trim().toLowerCase();if(t.length===0)return null;if(QK.test(t)&&t.length<=yR)return t;let n=t.replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");if(n.length===0)return null;let r=n.split("-").filter(i=>i.length>0).slice(0,4);if(r.length<2)return null;let o=r[0];for(let i=1;i<r.length;i++){let s=`${o}-${r[i]}`;if(s.length>yR)break;o=s}return QK.test(o)?o:null}async function wfe(e,t){if(!await Sfe(eG(t,e)))return e;let n=pfe(2).toString("hex");return`${e.split("-").slice(0,3).join("-").slice(0,yR-5)}-${n}`}async function Sfe(e){try{return await dfe.access(e),!0}catch{return!1}}function vfe(e,t){let n=Buffer.from(e,"utf8");if(n.length<=t)return e;let r=t;for(;r>0&&n[r]!==void 0&&(n[r]&192)===128;)r--;return n.slice(0,r).toString("utf8")}function kfe(e){let t=AbortSignal.any;if(typeof t=="function")return t.call(AbortSignal,e);let n=new AbortController;for(let r of e){if(r.aborted)return n.abort(r.reason),n.signal;r.addEventListener("abort",()=>n.abort(r.reason),{once:!0})}return n.signal}async function tG(e){let t,n,r=eG(e.deferred.repoRoot,".afk-worktrees","unnamed"),o=await yfe(e.message,{token:e.token,...e.model!==void 0?{model:e.model}:{},...e.timeoutMs!==void 0?{timeoutMs:e.timeoutMs}:{},worktreePath:r,...e.signal!==void 0?{signal:e.signal}:{},...e.slugGenerator!==void 0?{slugGenerator:e.slugGenerator}:{},onSkip:(a,l)=>{t=a,n=l}}),i=t??"unknown",s=n;if(o!==null){let l=`${Zp(e.branchPrefix)}${o}`;try{let c=await e.deferred.create(l);return ZK(e.session,c.path),{status:"created",path:c.path,branch:c.branch,slug:o}}catch(c){i="create-failed",s=(c instanceof Error?c.message:String(c)).slice(0,200)}}try{let a=await e.deferred.create(!0);return ZK(e.session,a.path),{status:"created-fallback",path:a.path,branch:a.branch,reason:i,...s!==void 0?{detail:s}:{}}}catch(a){return{status:"failed",reason:a instanceof Error?a.message:String(a)}}}function ZK(e,t){e&&e.setCwd(t),Tfe(t)}function Tfe(e){try{process.chdir(e)}catch{}}Ht();q();import{spawn as rG}from"child_process";import{existsSync as oG,mkdirSync as Cfe,readFileSync as iG,unlinkSync as nG,writeFileSync as sG}from"fs";import{get as _fe}from"https";import{join as aG}from"path";import{readFileSync as Efe}from"fs";import{dirname as xfe,join as Rfe}from"path";import{fileURLToPath as Afe}from"url";function gr(){try{return"5.84.12"}catch{}try{let e=xfe(Afe(import.meta.url));for(let t of["../../package.json","../package.json"])try{let n=JSON.parse(Efe(Rfe(e,t),"utf-8"));if(typeof n.version=="string")return n.version}catch{}}catch{}return"0.0.0-unknown"}G();var Ife=64*1024,Pfe=10800*1e3,Mfe=800,Ofe=3600*1e3,$fe="update-check.json",Dfe="pending-update.json";function bR(){return aG(Is(),$fe)}function Bu(){return aG(Is(),Dfe)}function wR(){let e=Is();oG(e)||Cfe(e,{recursive:!0})}function lG(e,t){let n=a=>a.split(/[-+]/,1)[0]??a,r=a=>a.includes("-"),o=n(e).split(".").map(Number),i=n(t).split(".").map(Number),s=Math.max(o.length,i.length);for(let a=0;a<s;a++){let l=o[a]??0,c=i[a]??0;if(c>l)return!0;if(c<l)return!1}return r(e)&&!r(t)}function cG(){try{let e=iG(bR(),"utf-8"),t=JSON.parse(e);if(typeof t.latestVersion=="string"&&typeof t.checkedAt=="number")return t}catch{}return null}function dG(){try{wR();let e=`
       const https = require('https');
       const fs = require('fs');
       const url = 'https://registry.npmjs.org/agent-afk/latest';

package/dist/index.mjs

@@ -1,7 +1,7 @@
 var oS=Object.defineProperty;var be=(t,e)=>()=>(t&&(e=t(t=0)),e);var Sd=(t,e)=>{for(var n in e)oS(t,n,{get:e[n],enumerable:!0})};function uo(t){return co.find(e=>e.name===t)}function ma(t){return process.env[t]!==void 0}var co,b,P=be(()=>{"use strict";co=[{name:"AFK_COMPACT_KEEP_LAST_TURNS",description:"Number of recent turns the compactor keeps verbatim during /compact. Default tuned in compact-handler.ts.",type:"number",required:!1,example:"6",category:"model"},{name:"AFK_COMPACT_MODEL",description:"Override the model used by the /compact summarizer. Falls back to a cheap default (haiku-class).",type:"string",required:!1,example:"claude-haiku-4-5",category:"model"},{name:"AFK_COMPACT_SHRINK_FRACTION",description:"Context-fullness fraction (0\u20131, exclusive) at/above which /compact and auto-compaction relax the keep-window so a short-but-full session (few turns, huge tool exchanges) can still be summarized instead of no-oping on turn count. Default 0.7 (see shared/compaction.ts DEFAULT_COMPACT_SHRINK_THRESHOLD).",type:"number",required:!1,example:"0.8",category:"model"},{name:"AFK_DEFAULT_SUBAGENT_MODEL",description:"Override the default model used when a subagent is dispatched without an explicit model.",type:"string",required:!1,example:"sonnet",category:"model"},{name:"AFK_DIAGNOSE_BASELINE",description:"Kill switch for /diagnose reproducer baseline execution. When set to '0', the /diagnose skill skips executing the detected reproducer command for a ground-truth baseline; default enabled (runs). Set to '0' to disable.",type:"boolean",required:!1,default:"1",example:"0",category:"debug"},{name:"AFK_DISABLE_PROMPT_CACHE",description:"Disable Anthropic prompt caching when set to 1/true/yes/on. Unset = caching enabled.",type:"boolean",required:!1,default:"0",example:"1",category:"model"},{name:"AFK_DISABLE_BASH_INTERPRETER_GUARD",description:"Skip ONLY the bash interpreter-eval denylist (python -c, node -e, sh -c, ...) when set to 1, leaving the rest of path-approval intact. Applies on interactive surfaces (REPL/Telegram), where the denylist is active but your workflow legitimately runs interpreter one-liners. The restricted-root substring check is unaffected. Default: denylist active on interactive surfaces; headless already fails open (opt in with AFK_FORCE_BASH_INTERPRETER_GUARD=1). To disable all of path-approval + bash restriction instead, use AFK_DISABLE_PATH_APPROVAL=1.",type:"boolean",required:!1,default:"0",example:"1",category:"process"},{name:"AFK_DISABLE_PATH_APPROVAL",description:"Skip the path-approval + bash-restriction hooks entirely when set to 1. Use for headless flows that need wide-open file access (CI scripts, batch jobs). Default: hooks enabled. Note: on headless surfaces (afk chat, daemon) no grant manager is wired, so the interpreter denylist (python -c, node -e, sh -c, ...) fails OPEN by default \u2014 opt headless flows into it with AFK_FORCE_BASH_INTERPRETER_GUARD=1, or set this var to 1 to disable all of path-approval.",type:"boolean",required:!1,default:"0",example:"1",category:"process"},{name:"AFK_FORCE_BASH_INTERPRETER_GUARD",description:"Apply the bash interpreter-eval denylist (python -c, node -e, sh -c, ...) even on headless surfaces (afk chat, daemon) where no grant manager is wired. By default the denylist fires only on interactive surfaces (REPL/Telegram), failing open on headless so legitimate automation is not hard-blocked with no recourse. Set to 1 to opt headless flows back into the guard. Overridden by AFK_DISABLE_BASH_INTERPRETER_GUARD=1. Default: off (headless fails open).",type:"boolean",required:!1,default:"0",example:"1",category:"process"},{name:"AFK_EFFORT",description:"Effort hint guiding adaptive-thinking depth, forwarded as Anthropic output_config.effort (model-gated; ignored where unsupported). Accepts low | medium | high | xhigh | max.",type:"string",required:!1,example:"medium",category:"model"},{name:"AFK_MAX_BUDGET_USD",description:"Cumulative USD budget ceiling for the session. Aborts the turn when the running cost crosses this.",type:"number",required:!1,default:"5.00",example:"10.00",category:"model"},{name:"AFK_MAX_OUTPUT_TOKENS",description:"Cap on output tokens per turn. Falls back to provider default when unset.",type:"number",required:!1,example:"8192",category:"model"},{name:"AFK_MAX_TOKENS",description:"Deprecated and inert: not read by the generation path. Use AFK_MAX_OUTPUT_TOKENS (or --max-output-tokens) to cap per-response output tokens; falls back to the model output ceiling when unset.",type:"number",required:!1,default:"4096",example:"8192",category:"model"},{name:"AFK_MAX_TOOL_USE_ITERATIONS",description:"Opt-in ceiling on tool-use rounds per turn for TOP-LEVEL (non-subagent) sessions, on both providers. Mirrors the maxToolUseIterations config key / max_tool_use_iterations tool param. Unset, non-numeric, or <=0 means unlimited (the default \u2014 zero behavior change): a top-level turn ends only when the model stops calling tools, the abort signal fires, the provider errors, or the dollar budget trips. A positive integer N makes top-level turns wind down gracefully after N tool rounds (one tools-stripped final round). An explicit config/CLI value wins over this env default. Does NOT affect subagent forks \u2014 they keep their own non-zero anti-hang default (SUBAGENT_DEFAULT_MAX_TOOL_USE_ITERATIONS) regardless of this var.",type:"number",required:!1,default:"0",example:"150",category:"model"},{name:"AFK_MEMORY_EVIDENCE_GATE",description:'Opt-in (set to 1) evidence gate for durable memory writes. When enabled, a codebase fact (memory_update category "convention") stored without an `evidence` citation is recalled as [unverified], and memory_search results carry a verification verdict. User preferences and agent reflections are never gated. Default off \u2014 memory behaves identically to legacy when unset.',type:"boolean",required:!1,example:"1",category:"misc"},{name:"AFK_MICROCOMPACT_KEEP_LAST",description:"Number of the most-recent tool_result blocks that tool-result microcompaction keeps intact regardless of size, so the agent does not lose the tool output it is actively reasoning over. Older results are the safe ones to trim. Default 4 (see shared/compaction.ts DEFAULT_MICROCOMPACT_KEEP_LAST). Values <= 0 protect nothing.",type:"number",required:!1,default:"4",example:"3",category:"model"},{name:"AFK_MICROCOMPACT_TOOL_RESULT_BYTES",description:"Byte threshold (tool_result content length) at/above which a tool_result block becomes a microcompaction candidate. When /compact and auto-compaction would otherwise no-op on a short-but-full session, microcompaction clears large/old tool_result CONTENT in place (largest first) \u2014 replacing it with a short placeholder, never removing the block \u2014 to reclaim context deterministically (no LLM call). Blocks below this size are left intact. Default 2048 (see shared/compaction.ts DEFAULT_MICROCOMPACT_TOOL_RESULT_BYTES).",type:"number",required:!1,default:"2048",example:"4096",category:"model"},{name:"AFK_MODEL",description:"Default model for agent turns. Accepts slot names (local, small, medium, large), fixed-identity aliases (opus, sonnet, haiku, fable), or full model IDs. Migration: AFK_MODEL=sonnet now pins the fixed Sonnet identity rather than following a rebound medium tier.",type:"string",required:!1,default:"medium",example:"claude-opus-5",category:"model"},{name:"AFK_MODEL_TTFB_TIMEOUT_MS",description:"Per-request time-to-first-token timeout (ms) for the anthropic-direct streaming loop. Bounds how long a single model call may stall BEFORE its first streamed CONTENT token (a text/thinking delta or tool_use); the connection-level message_start and keep-alive pings do NOT count. Once a content token streams, the timer is cleared and the rest of the response is governed instead by the progress-aware AFK_MODEL_STALL_TIMEOUT_MS window, so a normal slow call (below the bound) and any actively-streaming extended-thinking response are never aborted. NOTE: a request whose FIRST token takes longer than the bound \u2014 e.g. a very large opus_1m prefill \u2014 is aborted, retried once, then surfaces as an error (raise this value or set 0 for such workloads); this trims the degrading-call tail instead of a silent ~10-min hang on the SDK default. Default 180000 (180s \u2248 2\xD7 the measured p99 ttfb). Set to 0 to disable.",type:"number",required:!1,default:"180000",example:"120000",category:"model"},{name:"AFK_MODEL_STALL_TIMEOUT_MS",description:"Progress-aware POST-first-byte stall window (ms) for the anthropic-direct streaming loop. Bounds how long a stream that has ALREADY produced content may then go completely silent. Every streamed output event resets the window, so this is NOT a total-round cap: a legitimately long, actively-streaming round (large code emission, extended thinking) survives indefinitely, while a stream wedged mid-flight is aborted and surfaces as a real terminal error instead of hanging. Complements AFK_MODEL_TTFB_TIMEOUT_MS, which governs only the window BEFORE the first token; this one takes over after it. Default 1200000 (20min) \u2014 above the 18.5min maximum post-first-byte stream duration observed across 86,076 rounds in 12,381 local traces (p99 122s, p99.9 234s), so no healthy round trips it. Set to 0 to disable (issue #762).",type:"number",required:!1,default:"1200000",example:"600000",category:"model"},{name:"AFK_SUBAGENT_TIMEOUT_MS",description:"Foreground forked-subagent wall-clock budget in ms; 0 disables the cap; explicit per-fork config.timeoutMs and the 60-min background mode still win. Bounds how long a single forked child turn may run before `withTimeout` aborts its controller (cascading through the AbortGraph to descendants) and the parent receives a legible TimeoutError tool_result instead of hanging. Default 2700000 (45 min \u2248 headroom over the longest healthy review/research agent observed in production). Unset, empty, or unparseable input falls back to the default; a negative value is treated as invalid and also falls back. Set to 0 to opt a whole session back into unbounded child turns. Does NOT affect the background dispatch budget (SUBAGENT_BACKGROUND_TIMEOUT_MS) or a per-fork config.timeoutMs \u2014 both take precedence.",type:"number",required:!1,default:"2700000",example:"3600000",category:"model"},{name:"AFK_SUBAGENT_IDLE_TIMEOUT_MS",description:"Forked-subagent progress-aware idle-watchdog window in ms; 0 disables the watchdog; an explicit per-fork config.idleTimeoutMs still wins. Fires when a forked child produces no observable output event for this window, aborting the same controller the wall-clock timeout targets so partial output is preserved and the run classifies as a failure. This is distinct from AFK_SUBAGENT_TIMEOUT_MS, the blunt wall-clock that bounds total turn time: the idle watchdog is the tighter first-to-fire bound and never fires while the stream is legitimately parked on a provider-communicated backoff (OAuth pause, or a rate-limit event carrying a retry-after), extending the deadline for the pause window instead. Default 480000 (8 min) clears the worst-case transient-429 backoff the watchdog is currently blind to (about 363s) with roughly 2 min of margin, while staying materially tighter than the 45-min wall-clock. Unset, empty, or unparseable input falls back to the default; a negative value is treated as invalid and also falls back. Set to 0 to disable the idle watchdog for a whole session (the wall-clock still applies). v1 applies to forked sub-agent turns only, not top-level or daemon sessions.",type:"number",required:!1,default:"480000",example:"300000",category:"model"},{name:"AFK_VISION_MODELS",description:'Comma-separated override for image (vision) capability detection on the openai-compatible provider. Each token force-enables a model id by exact or substring match (e.g. "qwen2.5-vl" matches a local VL id); prefix a token with "!" to force-disable. Use to send images to a local vision-language model AFK does not recognise by name, or to blacklist a mis-detected id. Built-in detection already covers gpt-4o/4.1/5.x, o1/o3/o4-mini, Claude, and common VL families.',type:"string",required:!1,example:"qwen2.5-vl,!gpt-4o-mini",category:"model"},{name:"AFK_MODEL_LOCAL",description:'Bind the "local" capability tier (cheapest/fastest, user-configured) to a model id. Overrides afk.config.json models.local. Point at a local Ollama, LM Studio, or any OpenAI-compatible shim.',type:"string",required:!1,example:"llama3.2:3b",category:"model"},{name:"AFK_MODEL_LOCAL_API_KEY",description:'Per-slot API key for the "local" tier. Overrides global credentials for this tier only.',type:"string",required:!1,category:"model",secret:!0},{name:"AFK_MODEL_LOCAL_BASE_URL",description:'Per-slot endpoint base URL for the "local" tier. Anthropic Messages base or OpenAI-compatible base per the tier provider.',type:"string",required:!1,example:"http://localhost:11434/v1",category:"model"},{name:"AFK_MODEL_LARGE",description:'Bind the "large" capability tier (most capable) to a model id/alias. Overrides afk.config.json models.large.',type:"string",required:!1,example:"claude-opus-5",category:"model"},{name:"AFK_MODEL_LARGE_API_KEY",description:'Per-slot API key for the "large" tier (Stage 2). Overrides global credentials for this tier only.',type:"string",required:!1,category:"model",secret:!0},{name:"AFK_MODEL_LARGE_BASE_URL",description:'Per-slot endpoint base URL for the "large" tier (Stage 2). Anthropic Messages base or OpenAI-compatible base per the tier provider.',type:"string",required:!1,example:"http://localhost:8080/v1",category:"model"},{name:"AFK_MODEL_MEDIUM",description:'Bind the "medium" capability tier (general-use) to a model id/alias. Overrides afk.config.json models.medium.',type:"string",required:!1,example:"claude-sonnet-5",category:"model"},{name:"AFK_MODEL_MEDIUM_API_KEY",description:'Per-slot API key for the "medium" tier (Stage 2). Overrides global credentials for this tier only.',type:"string",required:!1,category:"model",secret:!0},{name:"AFK_MODEL_MEDIUM_BASE_URL",description:'Per-slot endpoint base URL for the "medium" tier (Stage 2). Anthropic Messages base or OpenAI-compatible base per the tier provider.',type:"string",required:!1,example:"http://localhost:8080/v1",category:"model"},{name:"AFK_MODEL_SMALL",description:'Bind the "small" capability tier (cheap/fast) to a model id/alias. Overrides afk.config.json models.small.',type:"string",required:!1,example:"gpt-4o-mini",category:"model"},{name:"AFK_MODEL_SMALL_API_KEY",description:'Per-slot API key for the "small" tier (Stage 2). Overrides global credentials for this tier only.',type:"string",required:!1,category:"model",secret:!0},{name:"AFK_MODEL_SMALL_BASE_URL",description:'Per-slot endpoint base URL for the "small" tier (Stage 2). Anthropic Messages base or OpenAI-compatible base per the tier provider.',type:"string",required:!1,example:"http://localhost:8080/v1",category:"model"},{name:"AFK_OVERLOAD_PAUSE_MS",description:"Wall-clock ceiling (ms) for the bounded pause after a mid-stream overload (529) exhausts its retry budget. Overrides the per-surface default for ALL surfaces: 0 disables the pause (fail fast). Interactive surfaces (cli/repl/telegram) default to 600000; daemon/cron default to 0 so an always-on runner never silently parks on upstream capacity.",type:"number",required:!1,example:"600000",category:"model"},{name:"AFK_PROMPT_CACHE_TTL",description:"TTL for Anthropic prompt-cache blocks. Accepts 5m or 1h.",type:"string",required:!1,default:"1h",example:"1h",category:"model"},{name:"AFK_SUGGEST_ENABLED",description:"Enable the LLM-backed ghost-text suggestion tier in the interactive REPL. Set to 1/true/yes/on to activate. Off by default.",type:"boolean",required:!1,category:"model"},{name:"AFK_SUGGEST_GHOST",description:"Enable REPL ghost-text inline suggestions (Tier-1 history/dropdown + optional Tier-2 LLM). 1 = on (default), 0 = off. Set 0/false/off/no to disable all ghost text. Tier-2 LLM is separately gated by AFK_SUGGEST_ENABLED.",type:"boolean",required:!1,default:"1",example:"0",category:"model"},{name:"AFK_SUGGEST_MODEL",description:"Override the small model used for REPL ghost-text suggestions. Falls back to AFK_COMPACT_MODEL or haiku-class for anthropic, or the session model for other providers.",type:"string",required:!1,category:"model"},{name:"AFK_TASK_BUDGET",description:"Per-task token budget ceiling. Aborts when cumulative usage would exceed it.",type:"number",required:!1,default:"100000",example:"200000",category:"model"},{name:"AFK_TEMPERATURE",description:"Numeric temperature override for model sampling. Provider default if unset.",type:"number",required:!1,example:"0.7",category:"model"},{name:"AFK_THINKING",description:"Extended-thinking mode. Accepts adaptive | disabled | enabled:<N> | enabled:max. Defaults to the model-appropriate mode when unset (adaptive on current models).",type:"string",required:!1,default:"adaptive",example:"adaptive",category:"model"},{name:"AFK_THINKING_UI",description:"Default thinking-display mode for the interactive REPL: summary | live | digest | off. Display-only \u2014 controls how extended-thinking blocks render, never whether thinking runs (cost/latency unaffected). Overridden per-launch by --thinking-ui and mutable mid-session via /thinking. Precedence: --thinking-ui flag > this env > interactive.thinkingUi config > live. Invalid values are ignored.",type:"string",required:!1,default:"live",example:"digest",category:"misc"},{name:"AFK_TIMEOUT_MS",description:"Per-turn timeout in milliseconds. Provider/SDK default if unset.",type:"number",required:!1,example:"120000",category:"model"},{name:"CLAUDE_MODEL",description:"Legacy alias for AFK_MODEL \u2014 supported for back-compat with pre-AFK_* deployments.",type:"string",required:!1,example:"sonnet",category:"model"},{name:"AFK_SYSTEM_PROMPT",description:'Raw operator-overlay prompt. Highest-priority overlay (over afk.config.json and AFK.md). Appended on top of the framework base (prompts/system-prompt.md) under an "# Operator configuration" header \u2014 it augments, never replaces, the base.',type:"string",required:!1,example:"You are a helpful agent.",category:"model"},{name:"AFK_DUMP_PROMPT",description:"Write the resolved system prompt to a file at startup. Accepts a path or 1 for default location.",type:"string",required:!1,example:"/tmp/afk-prompt.txt",category:"debug"},{name:"ANTHROPIC_API_KEY",description:"Anthropic API key. Tier-1 credential \u2014 overrides keychain OAuth and CLAUDE_CODE_OAUTH_TOKEN.",type:"string",required:!1,category:"auth",secret:!0},{name:"CLAUDE_CODE_OAUTH_TOKEN",description:"Claude Code OAuth token. Tier-2 credential \u2014 used when ANTHROPIC_API_KEY is unset; falls back to keychain.",type:"string",required:!1,category:"auth",secret:!0},{name:"OPENAI_API_KEY",description:"OpenAI API key for the openai-compatible provider (gpt-*, o1*, o3*, o4* models).",type:"string",required:!1,category:"auth",secret:!0},{name:"CODEX_API_KEY",description:"Fallback OpenAI API key for the openai-compatible provider, read after OPENAI_API_KEY. Legacy name from the removed @openai/codex-sdk integration \u2014 prefer OPENAI_API_KEY.",type:"string",required:!1,category:"auth",secret:!0},{name:"AFK_LOCAL_API_KEY",description:"Placeholder API key for local Anthropic-compatible servers (vllm-mlx, etc.). Set when AFK_LOCAL_BASE_URL is configured.",type:"string",required:!1,default:"local",example:"local",category:"auth",secret:!0},{name:"AFK_LOCAL_BASE_URL",description:"Base URL for a self-hosted Anthropic-compatible server. When set, routes traffic away from api.anthropic.com.",type:"string",required:!1,example:"http://127.0.0.1:8080",category:"model"},{name:"AFK_OPENAI_BASE_URL",description:"Base URL override for the OpenAI-compatible provider. Used for local shims (mlx_lm.server, Ollama, vLLM, LM Studio). The OpenAI SDK appends `/chat/completions` itself \u2014 a value ending in `/chat/completions` will be stripped at config-load time with a one-shot warning.",type:"string",required:!1,example:"http://127.0.0.1:8000/v1",category:"model"},{name:"AFK_OPENAI_USE_RESPONSES",description:"Opt the OpenAI-compatible provider into the OpenAI Responses API instead of Chat Completions for API-key sessions. Truthy values: 1, true, yes, on. The ChatGPT-subscription OAuth path uses Responses automatically regardless of this flag.",type:"boolean",required:!1,example:"1",category:"model"},{name:"AFK_OPENAI_CHATGPT_OAUTH",description:"Opt into using ChatGPT-subscription OAuth credentials from ~/.codex/auth.json (auth_mode: chatgpt) as OpenAI provider auth. Off by default. READ-ONLY: AFK never refreshes these tokens \u2014 re-run `codex` when the access token expires. Routes requests over the Responses API to the private ChatGPT backend (chatgpt.com/backend-api).",type:"boolean",required:!1,example:"1",category:"model"},{name:"AFK_PROVIDER",description:"Force provider selection (anthropic | anthropic-direct | openai | openai-compatible | openai-codex). Overrides the model-name heuristic. Same surface as the --provider CLI flag; CLI flag wins when both are set.",type:"string",required:!1,example:"openai-compatible",category:"model"},{name:"EXA_API_KEY",description:"Exa (exa.ai) search API key, enabling web_scrape search mode. Free tier (20k requests/month) available at https://exa.ai. When unset, search mode returns an actionable error; markdown and raw modes are unaffected.",type:"string",required:!1,category:"auth",secret:!0},{name:"TELEGRAM_BOT_TOKEN",description:"Telegram bot token from @BotFather. Required to run the Telegram bot surface.",type:"string",required:!1,category:"telegram",secret:!0},{name:"AFK_TELEGRAM_BOT_TOKEN",description:"Alternative env var name for the Telegram bot token, accepted by the setup wizard.",type:"string",required:!1,category:"telegram",secret:!0},{name:"AFK_TELEGRAM_ALLOWED_CHAT_IDS",description:"Comma-separated list of Telegram chat IDs allowed to interact with the bot. Required when the bot is running.",type:"string",required:!1,example:"123456789,987654321",category:"telegram"},{name:"AFK_TELEGRAM_TAG_ONLY_CHAT_IDS",description:"Comma-separated list of Telegram chat IDs where the bot answers only when addressed (a reply to the bot, an @mention of the bot, or a text_mention resolving to the bot). Slash-commands are unaffected; chats not listed behave as usual. The afk.config.json telegram.tagOnlyChats block takes precedence. Requires Telegram privacy mode OFF (BotFather /setprivacy Disable) for non-addressed group messages to reach the bot.",type:"string",required:!1,example:"-100987654321,123456789",category:"telegram"},{name:"AFK_TELEGRAM_PRIMARY_CHAT_ID",description:"Default chat ID for outbound notifications (primary-mode routing). When unset, notifications go to the first private/DM chat in AFK_TELEGRAM_ALLOWED_CHAT_IDS. The afk.config.json telegram.notify block takes precedence.",type:"string",required:!1,example:"123456789",category:"telegram"},{name:"AFK_TELEGRAM_NOTIFY_MODE",description:"Outbound notification fan-out: primary (default \u2014 one chat), broadcast (every allowed chat), or custom (afk.config.json telegram.notify.targets). The afk.config.json telegram.notify.mode takes precedence.",type:"string",required:!1,example:"broadcast",category:"telegram"},{name:"TELEGRAM_DATA_DIR",description:"Override the directory where Telegram bot state is stored. Defaults to ~/.afk/state/telegram/.",type:"string",required:!1,category:"telegram"},{name:"TELEGRAM_VERBOSE",description:"Set to a truthy value ('1'/'true'/'yes'/'on', case-insensitive) to log per-message details from the Telegram bot \u2014 chat IDs, message text, latency.",type:"boolean",required:!1,example:"true",category:"telegram"},{name:"AFK_TELEGRAM_TRACE",description:"Set to 1 to dump raw bridge traffic between the agent and the Telegram bot \u2014 debugging only.",type:"boolean",required:!1,example:"1",category:"debug"},{name:"AFK_TELEGRAM_CWD",description:"Override the working directory used by the Telegram bot when spawning agent sessions.",type:"string",required:!1,category:"telegram"},{name:"AFK_HOME",description:"Override the AFK home directory. Default: ~/.afk/.",type:"string",required:!1,default:"~/.afk",example:"/opt/afk",category:"paths"},{name:"AFK_STATE_DIR",description:"Override the entire AFK state tier (sessions/, todos/, transcripts/, memory/, daemon/, etc.), not just one subdirectory. Must be an absolute path (not /). Default: $AFK_HOME/state/.",type:"string",required:!1,category:"paths"},{name:"AFK_FRAMEWORK_DIR",description:"Override the AFK agent-framework directory used for telemetry and briefs. Default: $AFK_HOME/agent-framework/.",type:"string",required:!1,category:"paths"},{name:"AFK_COMPANION_PRIMER",description:'Opt-in: absolute path to a single companion-primer file. When set, its content is bounded (capped, fenced as <companion-primer>) and appended to the system prompt at session start for top-level sessions (chat/REPL/telegram/daemon), as lower-authority "reflections, not facts" context. Unset (default) = no-op. Only the one named file is ever read \u2014 never a directory or repo walk.',type:"string",required:!1,example:"/Users/me/Projects/afk-companion/PRIMER.md",category:"paths"},{name:"HOME",description:"Standard Unix home directory. Used as the fallback when AFK_HOME is unset.",type:"string",required:!1,category:"process"},{name:"PATH",description:"System PATH. Read for executable resolution (git, gh, etc.) in tool handlers.",type:"string",required:!1,category:"process"},{name:"AFK_DAEMON_CWD",description:"Working directory used by the daemon process for spawned agent sessions.",type:"string",required:!1,category:"daemon"},{name:"AFK_DAEMON_TASK",description:"Default task description for the daemon. Falls back to afk.config.json daemon.task.",type:"string",required:!1,category:"daemon"},{name:"AFK_DAEMON_TASK_ID",description:"Task identifier the daemon uses to scope its state directory and telemetry.",type:"string",required:!1,category:"daemon"},{name:"AFK_DAEMON_HOST",description:"Bind address for the daemon control HTTP surface. Defaults to 127.0.0.1 (loopback only). The control surface is unauthenticated, so bind a non-loopback address such as 0.0.0.0 only on a trusted or firewalled network. Overridden by the --host flag.",type:"string",required:!1,category:"daemon"},{name:"AFK_SESSIONSTART_COOLDOWN_MS",description:"Cooldown in milliseconds between SessionStart trigger fires in the daemon. Prevents thundering-herd on rapid restarts.",type:"number",required:!1,category:"daemon"},{name:"AFK_WORKTREE_AUTONAME",description:"Auto-rename worktree branches based on the first user message in interactive mode. 1 = on (default), 0 = off.",type:"boolean",required:!1,default:"1",example:"0",category:"worktree"},{name:"AFK_WORKTREE_BRANCH_PREFIX",description:"Branch-name prefix for AFK-managed worktrees. Default afk/. Set to empty string to drop the prefix.",type:"string",required:!1,default:"afk/",example:"wt/",category:"worktree"},{name:"AFK_WORKTREE_BASE",description:"Override the base git ref for worktrees created with --worktree. By default AFK bases worktrees on the remote's default branch (e.g. origin/main), fetched fresh. Set this to pin a different ref, or to HEAD to base on the local checkout. Overridden per-session by --worktree-base.",type:"string",required:!1,example:"origin/main",category:"worktree"},{name:"AFK_WORKTREE_BOOT_PRUNE",description:"When set, the daemon prunes stale worktrees at boot in addition to the cron-driven sweep.",type:"boolean",required:!1,category:"worktree"},{name:"AFK_WORKTREE_PRUNE_DISABLE",description:"Disable the worktree prune job entirely. Useful for long-running tests.",type:"boolean",required:!1,category:"worktree"},{name:"AFK_WORKTREE_MAX_AGE_CLEAN",description:"Maximum age (in days) before a clean worktree is auto-pruned. Default 14.",type:"number",required:!1,default:"14",category:"worktree"},{name:"AFK_WORKTREE_MAX_AGE_DIRTY",description:"Maximum age (in days) before a dirty worktree is auto-pruned. Default 30.",type:"number",required:!1,default:"30",category:"worktree"},{name:"AFK_WORKTREE_SWEEP_ROOT",description:"Override the root directory under which AFK worktrees are tracked for pruning.",type:"string",required:!1,category:"worktree"},{name:"AFK_ALLOW_PROJECT_MCP",description:"Opt-in to loading + spawning MCP servers declared in <cwd>/.mcp.json. Fail-closed: when unset (or 0), project-local servers are NOT spawned; set to a truthy value (1/true/yes/on) to load them. A project-local .mcp.json spawns arbitrary commands on session start, so it is off by default to prevent code execution when entering an untrusted repo (issue #571). Skipped servers are listed in a startup warning with the opt-in instruction.",type:"boolean",required:!1,example:"1",category:"mcp"},{name:"AFK_AUTO_ROUTING",description:"Auto-route bare slash inputs to matching skills. Applies to interactive, chat, telegram, and daemon surfaces.",type:"boolean",required:!1,example:"true",category:"routing"},{name:"AFK_INTERNAL",description:'Tier gate. Set to exactly `1` to unlock \u2014 only the literal string "1" unlocks (other truthy values like "true"/"yes" leave the tier locked). When unlocked, skills tagged `audience: \'internal\'` (e.g. /audit-fit, harvest/distill plugins) become visible at end-user surfaces (slash-command list, --help, tab-complete, system-prompt skill manifest). Default unset = public tier \u2014 internal skills are hidden. Not an access-control boundary; it gates surfacing, not the underlying registry.',type:"boolean",required:!1,example:"1",category:"routing"},{name:"AFK_SHELL_PASSTHROUGH",description:"Enable the interactive REPL `!cmd` / `!&cmd` shell-passthrough feature. On by default. Set to 0, false, off, or no (case-insensitive) to disable, so inputs beginning with ! are sent to the model as literal text instead of being executed as shell commands. Equivalent to the --no-shell-passthrough flag.",type:"boolean",required:!1,default:"1",example:"0",category:"misc"},{name:"AFK_BG_AUTO_DELIVER",description:"Auto-deliver background subagent results into the model context on the next user turn (interactive REPL). On by default. Set to 0, false, off, or no (case-insensitive) to disable, restoring the manual /bgsub:join retrieval flow.",type:"boolean",required:!1,default:"1",example:"0",category:"misc"},{name:"AFK_BANNER_PLAIN",description:"Suppress the ANSI-colored banner at REPL startup. Useful for non-TTY captures and CI logs.",type:"boolean",required:!1,example:"1",category:"misc"},{name:"AFK_PLAIN_OUTPUT",description:"Force the interactive REPL to fully behave like a non-TTY surface for rendering purposes, even when stdout/stdin ARE a TTY: append-only plain-stdout output instead of the TerminalCompositor live overlay (both the persistent between-turn compositor AND the per-turn StreamRenderer overlay), AND the input surface downgrades to the simple non-TTY line reader instead of the fancy compositor-backed input box. Same code path already used for non-TTY surfaces (pipes, CI). Full opt-out escape hatch for tmux/SSH/multiplexer sessions where cursor-up redraws and DECSTBM scroll regions misbehave \u2014 trades the live overlay and fancy input UX for reliability. Opt-in \u2014 default TTY behavior (live overlay + fancy input) is unchanged unless this var is set. Truthy values: 1, true (case-insensitive).",type:"boolean",required:!1,example:"1",category:"misc"},{name:"AFK_SPINNER_TIPS",description:"Show rotating tips in the loading spinner during long calls. 1 = on, 0 = off.",type:"boolean",required:!1,category:"misc"},{name:"AFK_GOBLIN_SPINNER",description:"Goblin-themed working spinner (olive frames + goblin verbs) while the agent runs tools. 1 = on (default), 0 = classic dim spinner.",type:"boolean",required:!1,example:"0",category:"misc"},{name:"AFK_TERM_TITLE",description:'Set the terminal/tab title (OSC 2) to reflect afk state \u2014 "afk \u2014 <cwd> \xB7 running" during a turn, "afk \u2014 <cwd>" when idle, cleared on exit. 1 = on (default when stdout is a TTY), 0 = leave the title alone. TTY-only.',type:"boolean",required:!1,example:"0",category:"misc"},{name:"AFK_NOTIFY",description:"Emit a desktop completion notification (OSC 9) on turn completion, for terminals that map OSC 9 to system notifications (iTerm2, kitty, WezTerm). Opt-in and off by default (intrusive). 1 = on. TTY-only.",type:"boolean",required:!1,example:"1",category:"misc"},{name:"AFK_SHOW_DIFFS",description:"Show inline diffs in the tool-lane output for edit/write tool calls. 1 = on, 0 = off.",type:"boolean",required:!1,category:"misc"},{name:"AFK_SKILL_STREAM_VERBOSE",description:"Verbose streaming output when a skill is dispatched. Logs sub-agent setup, intermediate events, and final result.",type:"boolean",required:!1,category:"debug"},{name:"FORCE_COLOR",description:"Standard Node convention. Force-enable ANSI color output even when stdout is not a TTY.",type:"string",required:!1,example:"1",category:"process"},{name:"NO_COLOR",description:"Standard convention (https://no-color.org). When set to any non-empty value, disables ANSI color output.",type:"string",required:!1,example:"1",category:"process"},{name:"AFK_THEME",description:"TUI color palette for the interactive REPL and all CLI rendering: dark | light | auto. Display-only \u2014 swaps the semantic color palette, never behavior (cost/latency unaffected). auto detects from COLORFGBG and falls back to dark. Overridden per-launch by --theme and mutable mid-session via /theme. Precedence: --theme flag > this env > config theme > auto-detect > dark. Invalid values are ignored (dark).",type:"string",required:!1,default:"dark",example:"light",category:"misc"},{name:"COLORFGBG",description:'Terminal-set "foreground;background" color hint (e.g. "15;0"), read only for AFK_THEME=auto detection. The trailing field is the background color index; >= 7 is treated as a light background, otherwise dark. Not set by AFK \u2014 emitted by some terminals (rxvt, Konsole, iTerm2). Absent or unparseable => dark.',type:"string",required:!1,example:"15;0",category:"process"},{name:"AFK_DEBUG",description:"Enable verbose debug logging across the codebase. Accepts 1 to enable.",type:"boolean",required:!1,example:"1",category:"debug"},{name:"AFK_DEBUG_CLIPBOARD",description:"Debug bracketed-paste and image-paste handling in the interactive REPL.",type:"boolean",required:!1,category:"debug"},{name:"AFK_DEBUG_COMPOSITOR",description:"Gate compositor phase-boundary traces to stderr; any truthy value enables.",type:"boolean",required:!1,category:"debug"},{name:"AFK_TRACE_DISABLED",description:"Disable the agent trace subsystem entirely. Set to 1 to skip trace file writes.",type:"boolean",required:!1,example:"1",category:"debug"},{name:"AFK_SESSION_LEDGER_DISABLED",description:"Disable the per-session durable event ledger (state/sessions/<id>/events.jsonl). Set to 1 to skip ledger writes; live cross-surface watching (e.g. the Telegram /watch command) will report no activity for sessions started while disabled.",type:"boolean",required:!1,example:"1",category:"debug"},{name:"AFK_RUN_RECEIPT_DISABLED",description:"Disable the post-session run receipt (state/receipts/<label>.json and .md). Set to 1 to skip receipt writes; the underlying witness trace is unaffected. Receipts are also implicitly off when AFK_TRACE_DISABLED=1 (no trace to summarize).",type:"boolean",required:!1,example:"1",category:"debug"},{name:"DEBUG",description:"Standard Node `debug`-package convention. When set to 1, enables verbose logging in several modules alongside AFK_DEBUG.",type:"string",required:!1,category:"debug"},{name:"AGENT_AFK_ASCII",description:"Force the interactive REPL tool-lane renderer to ASCII-only glyphs instead of the default Unicode box-drawing set. Accepts 1/true/yes (case-insensitive). Useful for terminals whose font lacks \u2503\u251C\u2570\u251C glyphs.",type:"boolean",required:!1,example:"1",category:"debug"},{name:"AGENT_SURFACE",description:"Internal surface marker propagated to subprocesses. Identifies which AFK surface (cli, telegram, daemon) spawned the process.",type:"string",required:!1,example:"cli",category:"process"},{name:"CI",description:"Standard CI-detection convention. Auto-set by GitHub Actions, CircleCI, etc. Used to switch off TTY-only UX.",type:"string",required:!1,example:"true",category:"process"},{name:"NODE_ENV",description:"Standard Node environment marker. test | development | production. Used by routing-telemetry.ts to suppress test-time writes.",type:"string",required:!1,example:"production",category:"process"},{name:"VITEST",description:"Set automatically by Vitest. Used at runtime to short-circuit code paths that should not fire in tests.",type:"string",required:!1,category:"process"},{name:"NO_UPDATE_NOTIFIER",description:"Disable the update-available notifier on CLI startup. Standard convention shared with many Node CLIs.",type:"boolean",required:!1,category:"process"},{name:"AFK_BROWSER_HEADLESS",description:"Override the default headless mode for native browser-control tools. `1`/`true` forces headless; `0`/`false` forces headed. When unset the default is headless on every AFK surface \u2014 the CLI entrypoint reports surface `afk`, which is in the headless set \u2014 so watching the agent work in a visible window is opt-in via `AFK_BROWSER_HEADLESS=0`, not implied by running the REPL. Note headed and headless use different chromium downloads (`chromium-*` vs `chromium_headless_shell-*`).",type:"boolean",required:!1,example:"1",category:"browser"},{name:"AFK_BROWSER_ALLOWED_DOMAINS",description:"Comma-separated allowlist of URL host globs. When set, browser_open and any navigation that targets a host outside the list returns status: blocked_by_policy. Unset means no allowlist (permissive). Patterns use simple `*` glob matching against the URL host. Combines with AFK_BROWSER_BLOCKED_DOMAINS \u2014 block wins.",type:"string",required:!1,example:"github.com,*.atlassian.net",category:"browser"},{name:"AFK_BROWSER_BLOCKED_DOMAINS",description:"Comma-separated blocklist of URL host globs. Browser navigation that matches any entry returns status: blocked_by_policy regardless of the allowlist.",type:"string",required:!1,example:"*.ads.example.com",category:"browser"},{name:"AFK_BROWSER_DOM_SNAPSHOTS",description:"Phase 2 opt-in: when set to 1, every browser_act writes a gzipped DOM snapshot sidecar under ~/.afk/state/witness/<sid>/browser/dom-snapshots/. Off by default because snapshots are large; useful for post-mortem analysis of failed actions.",type:"boolean",required:!1,example:"1",category:"browser"},{name:"AFK_BROWSER_BACKEND",description:"Select the browser provider backend. Phase 1 supports only `playwright`. Reserved for future `cdp` / `mcp` adapters. Unset defaults to `playwright`.",type:"string",required:!1,example:"playwright",category:"browser"},{name:"AFK_BROWSER_CONFIG",description:"Absolute path to an alternate browser config file. Overrides the default ~/.afk/config/browser.json lookup. Useful for per-project overrides in CI.",type:"string",required:!1,example:"/path/to/browser.json",category:"browser"},{name:"AFK_BROWSER_DEFAULT_PROFILE",description:"Name of the persistent session-vault profile the agent reuses for browser sessions. The context restores its login from (and saves it back to) ~/.afk/state/browser/<profile>/storageState.json, so a human runs `afk browser login --profile <name>` once and the agent reuses that authenticated session across unattended runs. Unset defaults to `default` (a fresh, empty profile \u2014 identical to pre-vault behavior). Allowed charset: [A-Za-z0-9_-], max 128 chars.",type:"string",required:!1,example:"work",category:"browser"},{name:"AFK_WRITE_DENYLIST",description:"Comma-separated list of additional path globs that the write_file tool refuses to write to.",type:"string",required:!1,example:"**/.env,**/secrets/**",category:"misc"},{name:"AFK_READ_DENYLIST",description:"Colon-separated list of additional absolute paths the read_file/grep/glob/list_directory tools refuse to read, and that the bash-restriction hook refuses to let a shell command reference on interactive surfaces (REPL, Telegram) \u2014 on headless surfaces (afk chat, daemon) bash fails open regardless of this list. A leading ~/ is expanded (~user/ is not \u2014 spell those absolutely). Built-in credential entries (~/.ssh, ~/.aws, ~/.afk/config, \u2026) always apply on top and cannot be removed. One built-in exception exists: ~/.afk/config/mcp.json (the MCP registry) IS readable \u2014 paths listed here outrank that carve-out, so set this to ~/.afk/config/mcp.json if your registry holds inline secrets rather than ${VAR} placeholders.",type:"string",required:!1,example:"/Users/me/project/.env:/Users/me/secrets",category:"misc"},{name:"AFK_WRITE_DIFF",description:"Show a diff preview before each write_file tool call. Defaults provider-controlled when unset.",type:"boolean",required:!1,category:"misc"},{name:"AFK_WEB_ALLOW_PRIVATE_HOSTS",description:"Opt out of the web_scrape SSRF egress guard. When unset (default) the guard is ACTIVE: the markdown, raw, and headless-render paths refuse loopback (127/8, ::1), link-local (169.254/16 \u2014 including the 169.254.169.254 cloud instance-metadata endpoint), RFC1918 (10/8, 172.16/12, 192.168/16), carrier-grade NAT (100.64/10), IPv6 unique-local (fc00::/7), 0.0.0.0/8, and the IPv4-mapped/compatible IPv6 forms of all of those. Hostnames are resolved and the RESOLVED addresses are classified (DNS-rebinding guard), and the check is re-applied on every redirect hop. Set to 1/true to allow private-host access \u2014 needed only to scrape a local dev server. Enabling it restores a model-reachable SSRF path (issue #575).",type:"boolean",required:!1,example:"1",category:"misc"},{name:"AFK_DEMO_CLEAN",description:"Explicit opt-in to capture-mode. When set to 1, suppresses high-frequency repaint drivers (spinner ticker, live thinking-preview) so recorded artifacts contain each state once instead of once per timer tick.",type:"boolean",required:!1,example:"1",category:"misc"},{name:"SCRIPT",description:"Set by script(1) on BSD/macOS/Linux to the typescript filename while a terminal session is being recorded. Presence of a non-empty value triggers capture-mode.",type:"string",required:!1,example:"/tmp/typescript",category:"process"},{name:"ASCIINEMA_REC",description:"Set to 1 by asciinema rec while a session is being recorded. Triggers capture-mode.",type:"boolean",required:!1,example:"1",category:"process"},{name:"AFK_SESSION_ID",description:"Override the browser session ID used by the native browser-control tools. Defaults to 'default' for single-session use. Subagents inherit the parent's session by default. Set this when running multiple concurrent AFK processes that should each manage an isolated browser context.",type:"string",required:!1,default:"default",example:"session-abc123",category:"browser"},{name:"SHELL",description:"Standard POSIX env var pointing to the user's login shell binary. Used by shell-init and worktree commands to auto-detect the correct shell syntax for emitted wrapper code.",type:"string",required:!1,example:"/bin/zsh",category:"process"},{name:"PAGER",description:"Standard POSIX env var naming the user's preferred pager (with optional flags). Used by /transcript to render the full session in a scrollable viewer; falls back to `less -R` when unset.",type:"string",required:!1,example:"less -R",category:"process"},{name:"VISUAL",description:"Standard POSIX env var naming the user's preferred full-screen editor (with optional flags). Consulted FIRST by the /editor slash command (and its key chord) to compose a long prompt externally; takes precedence over EDITOR. No fallback editor is assumed \u2014 if neither VISUAL nor EDITOR is set, /editor prints a hint instead of guessing.",type:"string",required:!1,example:"nvim",category:"process"},{name:"EDITOR",description:"Standard POSIX env var naming the user's preferred editor (with optional flags). Consulted by the /editor slash command AFTER VISUAL, as the standard fallback. No default editor is assumed when both are unset \u2014 /editor prints a hint telling the user to set one.",type:"string",required:!1,example:"vim",category:"process"},{name:"AFK_DIFF_LINES",description:"Maximum number of diff lines shown in the inline diff render during write_file tool calls. Set to 0 for no cap. Non-integer values are silently ignored and the default applies.",type:"number",required:!1,example:"50",category:"misc"},{name:"AFK_SHELL_WRAPPER",description:"Set to 1 or true by the optional afk shell wrapper function (installed via `afk shell-init`). Signals that the parent shell has the wrapper active so the post-exit cd can fire.",type:"boolean",required:!1,example:"1",category:"process"},{name:"AFK_USER_CARD_MAX_ROWS",description:'Maximum number of visual rows emitted by renderUserCard before collapsing the remainder into a dim "\u2026(N lines collapsed)" summary row. Defaults to 24. Non-integer or non-positive values are silently ignored and the default applies.',type:"number",required:!1,example:"24",category:"misc"}],b={get AFK_COMPACT_KEEP_LAST_TURNS(){return process.env.AFK_COMPACT_KEEP_LAST_TURNS},get AFK_COMPACT_MODEL(){return process.env.AFK_COMPACT_MODEL},get AFK_COMPACT_SHRINK_FRACTION(){return process.env.AFK_COMPACT_SHRINK_FRACTION},get AFK_COMPANION_PRIMER(){return process.env.AFK_COMPANION_PRIMER},get AFK_DEFAULT_SUBAGENT_MODEL(){return process.env.AFK_DEFAULT_SUBAGENT_MODEL},get AFK_DIAGNOSE_BASELINE(){return process.env.AFK_DIAGNOSE_BASELINE},get AFK_DISABLE_BASH_INTERPRETER_GUARD(){return process.env.AFK_DISABLE_BASH_INTERPRETER_GUARD},get AFK_DISABLE_PATH_APPROVAL(){return process.env.AFK_DISABLE_PATH_APPROVAL},get AFK_DISABLE_PROMPT_CACHE(){return process.env.AFK_DISABLE_PROMPT_CACHE},get AFK_EFFORT(){return process.env.AFK_EFFORT},get AFK_FORCE_BASH_INTERPRETER_GUARD(){return process.env.AFK_FORCE_BASH_INTERPRETER_GUARD},get AFK_MAX_BUDGET_USD(){return process.env.AFK_MAX_BUDGET_USD},get AFK_MAX_OUTPUT_TOKENS(){return process.env.AFK_MAX_OUTPUT_TOKENS},get AFK_MAX_TOKENS(){return process.env.AFK_MAX_TOKENS},get AFK_MAX_TOOL_USE_ITERATIONS(){return process.env.AFK_MAX_TOOL_USE_ITERATIONS},get AFK_MEMORY_EVIDENCE_GATE(){return process.env.AFK_MEMORY_EVIDENCE_GATE},get AFK_MICROCOMPACT_KEEP_LAST(){return process.env.AFK_MICROCOMPACT_KEEP_LAST},get AFK_MICROCOMPACT_TOOL_RESULT_BYTES(){return process.env.AFK_MICROCOMPACT_TOOL_RESULT_BYTES},get AFK_MODEL(){return process.env.AFK_MODEL},get AFK_MODEL_TTFB_TIMEOUT_MS(){return process.env.AFK_MODEL_TTFB_TIMEOUT_MS},get AFK_MODEL_STALL_TIMEOUT_MS(){return process.env.AFK_MODEL_STALL_TIMEOUT_MS},get AFK_MODEL_LARGE(){return process.env.AFK_MODEL_LARGE},get AFK_MODEL_LARGE_API_KEY(){return process.env.AFK_MODEL_LARGE_API_KEY},get AFK_MODEL_LARGE_BASE_URL(){return process.env.AFK_MODEL_LARGE_BASE_URL},get AFK_MODEL_LOCAL(){return process.env.AFK_MODEL_LOCAL},get AFK_MODEL_LOCAL_API_KEY(){return process.env.AFK_MODEL_LOCAL_API_KEY},get AFK_MODEL_LOCAL_BASE_URL(){return process.env.AFK_MODEL_LOCAL_BASE_URL},get AFK_MODEL_MEDIUM(){return process.env.AFK_MODEL_MEDIUM},get AFK_MODEL_MEDIUM_API_KEY(){return process.env.AFK_MODEL_MEDIUM_API_KEY},get AFK_MODEL_MEDIUM_BASE_URL(){return process.env.AFK_MODEL_MEDIUM_BASE_URL},get AFK_MODEL_SMALL(){return process.env.AFK_MODEL_SMALL},get AFK_MODEL_SMALL_API_KEY(){return process.env.AFK_MODEL_SMALL_API_KEY},get AFK_MODEL_SMALL_BASE_URL(){return process.env.AFK_MODEL_SMALL_BASE_URL},get AFK_VISION_MODELS(){return process.env.AFK_VISION_MODELS},get AFK_OVERLOAD_PAUSE_MS(){return process.env.AFK_OVERLOAD_PAUSE_MS},get AFK_PROMPT_CACHE_TTL(){return process.env.AFK_PROMPT_CACHE_TTL},get AFK_SUGGEST_ENABLED(){return process.env.AFK_SUGGEST_ENABLED},get AFK_SUGGEST_GHOST(){return process.env.AFK_SUGGEST_GHOST},get AFK_SUGGEST_MODEL(){return process.env.AFK_SUGGEST_MODEL},get AFK_SUBAGENT_TIMEOUT_MS(){return process.env.AFK_SUBAGENT_TIMEOUT_MS},get AFK_SUBAGENT_IDLE_TIMEOUT_MS(){return process.env.AFK_SUBAGENT_IDLE_TIMEOUT_MS},get AFK_TASK_BUDGET(){return process.env.AFK_TASK_BUDGET},get AFK_TEMPERATURE(){return process.env.AFK_TEMPERATURE},get AFK_THINKING(){return process.env.AFK_THINKING},get AFK_THINKING_UI(){return process.env.AFK_THINKING_UI},get AFK_TIMEOUT_MS(){return process.env.AFK_TIMEOUT_MS},get CLAUDE_MODEL(){return process.env.CLAUDE_MODEL},get AFK_SYSTEM_PROMPT(){return process.env.AFK_SYSTEM_PROMPT},get AFK_DUMP_PROMPT(){return process.env.AFK_DUMP_PROMPT},get ANTHROPIC_API_KEY(){return process.env.ANTHROPIC_API_KEY},get CLAUDE_CODE_OAUTH_TOKEN(){return process.env.CLAUDE_CODE_OAUTH_TOKEN},get OPENAI_API_KEY(){return process.env.OPENAI_API_KEY},get CODEX_API_KEY(){return process.env.CODEX_API_KEY},get AFK_LOCAL_API_KEY(){return process.env.AFK_LOCAL_API_KEY},get AFK_LOCAL_BASE_URL(){return process.env.AFK_LOCAL_BASE_URL},get AFK_OPENAI_BASE_URL(){return process.env.AFK_OPENAI_BASE_URL},get AFK_OPENAI_USE_RESPONSES(){return process.env.AFK_OPENAI_USE_RESPONSES},get AFK_OPENAI_CHATGPT_OAUTH(){return process.env.AFK_OPENAI_CHATGPT_OAUTH},get AFK_PROVIDER(){return process.env.AFK_PROVIDER},get EXA_API_KEY(){return process.env.EXA_API_KEY},get TELEGRAM_BOT_TOKEN(){return process.env.TELEGRAM_BOT_TOKEN},get AFK_TELEGRAM_BOT_TOKEN(){return process.env.AFK_TELEGRAM_BOT_TOKEN},get AFK_TELEGRAM_ALLOWED_CHAT_IDS(){return process.env.AFK_TELEGRAM_ALLOWED_CHAT_IDS},get AFK_TELEGRAM_TAG_ONLY_CHAT_IDS(){return process.env.AFK_TELEGRAM_TAG_ONLY_CHAT_IDS},get AFK_TELEGRAM_PRIMARY_CHAT_ID(){return process.env.AFK_TELEGRAM_PRIMARY_CHAT_ID},get AFK_TELEGRAM_NOTIFY_MODE(){return process.env.AFK_TELEGRAM_NOTIFY_MODE},get TELEGRAM_DATA_DIR(){return process.env.TELEGRAM_DATA_DIR},get TELEGRAM_VERBOSE(){return process.env.TELEGRAM_VERBOSE},get AFK_TELEGRAM_TRACE(){return process.env.AFK_TELEGRAM_TRACE},get AFK_TELEGRAM_CWD(){return process.env.AFK_TELEGRAM_CWD},get AFK_HOME(){return process.env.AFK_HOME},get AFK_STATE_DIR(){return process.env.AFK_STATE_DIR},get AFK_FRAMEWORK_DIR(){return process.env.AFK_FRAMEWORK_DIR},get HOME(){return process.env.HOME},get PATH(){return process.env.PATH},get AFK_DAEMON_CWD(){return process.env.AFK_DAEMON_CWD},get AFK_DAEMON_TASK(){return process.env.AFK_DAEMON_TASK},get AFK_DAEMON_TASK_ID(){return process.env.AFK_DAEMON_TASK_ID},get AFK_DAEMON_HOST(){return process.env.AFK_DAEMON_HOST},get AFK_SESSIONSTART_COOLDOWN_MS(){return process.env.AFK_SESSIONSTART_COOLDOWN_MS},get AFK_WORKTREE_AUTONAME(){return process.env.AFK_WORKTREE_AUTONAME},get AFK_WORKTREE_BRANCH_PREFIX(){return process.env.AFK_WORKTREE_BRANCH_PREFIX},get AFK_WORKTREE_BASE(){return process.env.AFK_WORKTREE_BASE},get AFK_WORKTREE_BOOT_PRUNE(){return process.env.AFK_WORKTREE_BOOT_PRUNE},get AFK_WORKTREE_PRUNE_DISABLE(){return process.env.AFK_WORKTREE_PRUNE_DISABLE},get AFK_WORKTREE_MAX_AGE_CLEAN(){return process.env.AFK_WORKTREE_MAX_AGE_CLEAN},get AFK_WORKTREE_MAX_AGE_DIRTY(){return process.env.AFK_WORKTREE_MAX_AGE_DIRTY},get AFK_WORKTREE_SWEEP_ROOT(){return process.env.AFK_WORKTREE_SWEEP_ROOT},get AFK_ALLOW_PROJECT_MCP(){return process.env.AFK_ALLOW_PROJECT_MCP},get AFK_AUTO_ROUTING(){return process.env.AFK_AUTO_ROUTING},get AFK_INTERNAL(){return process.env.AFK_INTERNAL},get AFK_SHELL_PASSTHROUGH(){return process.env.AFK_SHELL_PASSTHROUGH},get AFK_BG_AUTO_DELIVER(){return process.env.AFK_BG_AUTO_DELIVER},get AFK_BANNER_PLAIN(){return process.env.AFK_BANNER_PLAIN},get AFK_PLAIN_OUTPUT(){return process.env.AFK_PLAIN_OUTPUT},get AFK_SPINNER_TIPS(){return process.env.AFK_SPINNER_TIPS},get AFK_GOBLIN_SPINNER(){return process.env.AFK_GOBLIN_SPINNER},get AFK_TERM_TITLE(){return process.env.AFK_TERM_TITLE},get AFK_NOTIFY(){return process.env.AFK_NOTIFY},get AFK_SHOW_DIFFS(){return process.env.AFK_SHOW_DIFFS},get AFK_SKILL_STREAM_VERBOSE(){return process.env.AFK_SKILL_STREAM_VERBOSE},get FORCE_COLOR(){return process.env.FORCE_COLOR},get NO_COLOR(){return process.env.NO_COLOR},get AFK_THEME(){return process.env.AFK_THEME},get COLORFGBG(){return process.env.COLORFGBG},get AFK_DEBUG(){return process.env.AFK_DEBUG},get AFK_DEBUG_CLIPBOARD(){return process.env.AFK_DEBUG_CLIPBOARD},get AFK_DEBUG_COMPOSITOR(){return process.env.AFK_DEBUG_COMPOSITOR},get AFK_TRACE_DISABLED(){return process.env.AFK_TRACE_DISABLED},get AFK_SESSION_LEDGER_DISABLED(){return process.env.AFK_SESSION_LEDGER_DISABLED},get AFK_RUN_RECEIPT_DISABLED(){return process.env.AFK_RUN_RECEIPT_DISABLED},get DEBUG(){return process.env.DEBUG},get AGENT_AFK_ASCII(){return process.env.AGENT_AFK_ASCII},get AGENT_SURFACE(){return process.env.AGENT_SURFACE},get CI(){return process.env.CI},get NODE_ENV(){return process.env.NODE_ENV},get VITEST(){return process.env.VITEST},get NO_UPDATE_NOTIFIER(){return process.env.NO_UPDATE_NOTIFIER},get AFK_SESSION_ID(){return process.env.AFK_SESSION_ID},get AFK_BROWSER_HEADLESS(){return process.env.AFK_BROWSER_HEADLESS},get AFK_BROWSER_ALLOWED_DOMAINS(){return process.env.AFK_BROWSER_ALLOWED_DOMAINS},get AFK_BROWSER_BLOCKED_DOMAINS(){return process.env.AFK_BROWSER_BLOCKED_DOMAINS},get AFK_BROWSER_DOM_SNAPSHOTS(){return process.env.AFK_BROWSER_DOM_SNAPSHOTS},get AFK_BROWSER_BACKEND(){return process.env.AFK_BROWSER_BACKEND},get AFK_BROWSER_CONFIG(){return process.env.AFK_BROWSER_CONFIG},get AFK_BROWSER_DEFAULT_PROFILE(){return process.env.AFK_BROWSER_DEFAULT_PROFILE},get AFK_WRITE_DENYLIST(){return process.env.AFK_WRITE_DENYLIST},get AFK_READ_DENYLIST(){return process.env.AFK_READ_DENYLIST},get AFK_WRITE_DIFF(){return process.env.AFK_WRITE_DIFF},get AFK_WEB_ALLOW_PRIVATE_HOSTS(){return process.env.AFK_WEB_ALLOW_PRIVATE_HOSTS},get AFK_DEMO_CLEAN(){return process.env.AFK_DEMO_CLEAN},get SCRIPT(){return process.env.SCRIPT},get ASCIINEMA_REC(){return process.env.ASCIINEMA_REC},get SHELL(){return process.env.SHELL},get PAGER(){return process.env.PAGER},get VISUAL(){return process.env.VISUAL},get EDITOR(){return process.env.EDITOR},get AFK_DIFF_LINES(){return process.env.AFK_DIFF_LINES},get AFK_SHELL_WRAPPER(){return process.env.AFK_SHELL_WRAPPER},get AFK_USER_CARD_MAX_ROWS(){return process.env.AFK_USER_CARD_MAX_ROWS}};(function(){for(let e of co){if(!e.secret)continue;let n=Object.getOwnPropertyDescriptor(b,e.name);n&&Object.defineProperty(b,e.name,{...n,enumerable:!1})}})()});function sS(){return b.AFK_DEBUG==="1"||b.DEBUG==="1"}function I(...t){sS()&&console.log(...t)}var ne=be(()=>{"use strict";P()});import{existsSync as Bd,mkdirSync as SS,renameSync as vS,cpSync as kS,rmSync as AS}from"fs";import{join as j,dirname as Ra,basename as ES,isAbsolute as jd}from"path";import{homedir as Wd}from"os";import{fileURLToPath as _S}from"url";function re(){let t=b.AFK_HOME;if(t!==void 0&&t!==""){if(!jd(t)||t==="/")throw new Error(`AFK_HOME must be an absolute path that is not /, got: ${t}`);return t}return j(Wd(),".afk")}function Be(){return j(re(),"agent-framework")}function ko(){return j(Be(),"forge-telemetry.jsonl")}function Kd(){return j(Be(),"briefs")}function Gd(){return j(Be(),"facets")}function Wn(){return j(re(),"skills")}function nn(){return j(re(),"plugins")}function qd(t=process.cwd()){return j(t,".afk")}function zd(t=process.cwd()){return j(qd(t),"skills")}function Jd(t=process.cwd()){return j(qd(t),"plugins")}function Vd(t=process.cwd()){return j(t,".afk","plans")}function Ao(){return j(nn(),".index.json")}function Ia(){return j(Kn(),"schedules.json")}function Yd(){let t=_S(import.meta.url),e=Ra(t);return j(e,"bundled-plugins")}function Kn(){return j(re(),"config")}function he(){let t=b.AFK_STATE_DIR;if(t!==void 0&&t!==""){if(!jd(t)||t==="/")throw new Error(`AFK_STATE_DIR must be an absolute path that is not /, got: ${t}`);return t}return j(re(),"state")}function we(){return j(he(),"sessions")}function Eo(){return j(he(),"presence")}function _o(){return j(he(),"memory")}function To(){return j(he(),"session-grants.jsonl")}function Xd(){return j(re(),"farms")}function Qd(t){return j(Xd(),t)}function xo(t){if(!TS.test(t))throw new Error(`Invalid AFK_SESSION_ID: must match /^[a-zA-Z0-9_-]+$/, got: ${JSON.stringify(t)}`)}function Zd(t){return xo(t),j(he(),"witness",t)}function eu(t){return!t||t.startsWith("in-memory:")?null:ES(Ra(t))}function tu(t="default"){return j(he(),"daemon",`agent-afk@${t}`)}function nu(){return j(he(),"worktree-sweep.lock")}function Ca(){return j(Kn(),"afk.env")}function rn(){return j(Kn(),"afk.config.json")}function Ro(){return j(Wd(),".afk.config.json")}function xS(){return j(re(),"sessions")}function RS(t,e){if(t!==e&&Bd(t)&&!Bd(e))try{SS(Ra(e),{recursive:!0});try{vS(t,e)}catch(n){if(n.code==="EXDEV")try{kS(t,e,{recursive:!0}),AS(t,{recursive:!0,force:!0})}catch(r){process.stderr.write(`[afk] migrateDirOnce: EXDEV fallback failed for ${t} \u2192 ${e}: ${String(r)}
 `)}}}catch{}}function ru(){RS(xS(),we())}function Pa(t){if(typeof t!="string"||t.length===0)throw new Error("Invalid browser profile: must be a non-empty string");if(t.length>Hd)throw new Error(`Invalid browser profile: exceeds ${Hd} chars`);if(!IS.test(t))throw new Error(`Invalid browser profile: ${JSON.stringify(t)} contains characters outside [A-Za-z0-9_-]`)}function CS(){return j(he(),"browser")}function PS(t){return Pa(t),j(CS(),t)}function Ma(t){return j(PS(t),"storageState.json")}function Gn(t){return typeof t=="string"&&t.length>0&&t.length<=OS&&MS.test(t)}function qn(t){if(!Gn(t))throw new Error(`Invalid session id for ledger path: ${JSON.stringify(t)}`);return j(we(),t)}function Io(t){return j(qn(t),"events.jsonl")}function ou(t){return j(qn(t),"session.key")}var TS,IS,Hd,MS,OS,N=be(()=>{"use strict";P();TS=/^[a-zA-Z0-9_-]+$/;IS=/^[A-Za-z0-9_-]+$/,Hd=128;MS=/^[A-Za-z0-9_-]+$/,OS=128});import{readFileSync as w_}from"node:fs";import{join as S_}from"path";function v_(t){let n=t.replace(/[.+?()[\]{}/\\^$|]/g,"\\$&").replace(/\*/g,"[^.]*");return new RegExp(`^${n}$`,"i")}function wf(t,e){return v_(e).test(t)}function E_(t,e){if(t!==void 0){let n=t.trim().toLowerCase();if(n==="1"||n==="true"||n==="yes")return!0;if(n==="0"||n==="false"||n==="no")return!1}if(e!==void 0){if(k_.has(e))return!0;if(A_.has(e))return!1}return!1}function Sf(t){return t===void 0||t.trim()===""?[]:t.split(",").map(e=>e.trim().toLowerCase()).filter(e=>e.length>0)}function __(t){if(t===void 0||t===""||t==="playwright")return"playwright";throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${t}`)}function vf(t){let e=t===void 0||t.trim()===""?"default":t.trim();return Pa(e),e}function T_(t){if(t===void 0)return!1;let e=t.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function x_(t){try{return w_(t,"utf8")}catch(e){if(e.code==="ENOENT")return;throw e}}function R_(t,e){let n={...t};if(typeof e.headless=="boolean"&&(n.headless=e.headless),Array.isArray(e.allowedDomains)&&(n.allowedDomains=e.allowedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),Array.isArray(e.blockedDomains)&&(n.blockedDomains=e.blockedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),typeof e.domSnapshots=="boolean"&&(n.domSnapshots=e.domSnapshots),e.backend==="playwright")n.backend="playwright";else if(e.backend!==void 0)throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${String(e.backend)}`);return typeof e.defaultProfile=="string"&&(n.defaultProfile=vf(e.defaultProfile)),n}function kf(t){let e=t?.env??b,n=t?.readFileSync??x_,r=t?.surface??e.AGENT_SURFACE,o=E_(e.AFK_BROWSER_HEADLESS,r),s=Sf(e.AFK_BROWSER_ALLOWED_DOMAINS),i=Sf(e.AFK_BROWSER_BLOCKED_DOMAINS),a=T_(e.AFK_BROWSER_DOM_SNAPSHOTS),l=__(e.AFK_BROWSER_BACKEND),c=vf(e.AFK_BROWSER_DEFAULT_PROFILE),d={headless:o,allowedDomains:s,blockedDomains:i,domSnapshots:a,backend:l,configPath:null,defaultProfile:c},u=e.AFK_BROWSER_CONFIG,p=u!==void 0&&u.trim()!==""?u.trim():S_(Kn(),"browser.json"),f=n(p);if(f===void 0)return d;let m;try{m=JSON.parse(f)}catch(h){throw new Error(`Failed to parse browser config at ${p}: ${String(h)}`)}if(typeof m!="object"||m===null||Array.isArray(m))throw new Error(`Browser config at ${p} must be a JSON object`);let g=R_(d,m);return g.configPath=p,g}function ps(t,e){let n;try{n=new URL(t).hostname.toLowerCase()}catch{return{allowed:!1,reason:`invalid URL: ${t}`}}for(let r of e.blockedDomains)if(wf(n,r))return{allowed:!1,reason:`blocked by AFK_BROWSER_BLOCKED_DOMAINS: ${r}`};return e.allowedDomains.length>0&&!e.allowedDomains.some(o=>wf(n,o))?{allowed:!1,reason:"not in AFK_BROWSER_ALLOWED_DOMAINS"}:{allowed:!0}}var k_,A_,fs=be(()=>{"use strict";P();N();k_=new Set(["daemon","subagent","telegram","afk"]),A_=new Set(["repl","interactive","cli"])});import{existsSync as I_,readFileSync as C_}from"node:fs";import{createRequire as P_}from"node:module";import{dirname as M_,join as O_}from"node:path";function _f(t){if(typeof t=="string")return t;let e=[],n=t;for(let r=0;r<F_&&n instanceof Error;r++)e.push(n.message),n=n.cause;return e.length>0?e.join(" | "):String(t)}function ye(t){let e=_f(t);return Ef.some(n=>e.includes(n))}function L_(){try{let e=P_(import.meta.url).resolve("playwright/package.json"),n=JSON.parse(C_(e,"utf8"));if(typeof n!="object"||n===null)return;let r=n.bin,o=typeof r=="string"?r:typeof r=="object"&&r!==null?r.playwright:void 0;if(typeof o!="string"||o.length===0)return;let s=O_(M_(e),o);return I_(s)?`node ${/\s/.test(s)?`"${s}"`:s} install chromium`:void 0}catch{return}}function br(){return Af??=L_()??D_,Af}function El(t){return t.includes("install chromium")}function Me(t,e){let n=_f(t),r=e?.latched===!0?` ${N_}`:"";if(n.includes("Executable doesn't exist")){let o="";return e?.headless===!0?o=" This launch was headless, which needs the `chromium_headless_shell-*` build.":e?.headless===!1&&(o=" This launch was headed, which needs the full `chromium-*` build \u2014 the headless shell alone does not satisfy it."),`browser tools require the Playwright chromium binary. Install via: ${br()}.${o}${r}`}return`browser tools require the optional \`playwright\` peer dependency. Install via: pnpm add playwright (then ${br()}). Or pick a different tool.${r}`}function _l(t,e,n=!1){if(!ye(t))return t;let r=t instanceof Error?t.message:String(t);return new Error(`${r}
 
-${Me(t,{headless:e,latched:n})}`,{cause:t})}var Ef,D_,F_,Af,N_,Tl=be(()=>{"use strict";Ef=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],D_="pnpm exec playwright install chromium",F_=4;N_="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Bt from"node:fs";import ms from"node:path";import{randomBytes as U_}from"node:crypto";import{chromium as $_}from"playwright";function B_(){try{return"5.84.11"}catch{}try{let t=ms.resolve(import.meta.dirname,"../../../package.json"),e=Bt.readFileSync(t,"utf8"),n=JSON.parse(e);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var H_,gs,Tf=be(()=>{"use strict";Tl();N();ne();H_=B_(),gs=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(e){this.config=e}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(e){this.launchFailure={error:e}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=$_.launch({headless:this.config.headless}).then(e=>(this.browser=e,this.launchPromise=void 0,this.clearLaunchFailure(),e)).catch(e=>{this.launchPromise=void 0;let n=_l(e,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(e){let n=this.sessions.get(e);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),s=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),i={context:s,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(e,i),s}async ensurePage(e){let n=this.sessions.get(e);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(e);let r=this.sessions.get(e);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${e}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",s=>{s.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",s=>{s.isNavigationRequest()&&s.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",s=>{s.frame()===o.mainFrame()&&s.request().isNavigationRequest()&&(r.lastHttpStatus=s.status())}),o.on("dialog",s=>{r.openDialog=s}),o}getPage(e){return this.sessions.get(e)?.page}async renderHtml(e,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),s;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){s=l,await a.abort("blockedbyclient")}});let i=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",i,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(e,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(p){throw s??p}if(s!==void 0)throw s;let c=await a.content();if(s!==void 0)throw s;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",i),await o.close().catch(()=>{})}}getConsoleErrorCount(e){return this.sessions.get(e)?.consoleErrors??0}getLastHttpStatus(e){return this.sessions.get(e)?.lastHttpStatus??null}hasOpenDialog(e){return this.sessions.get(e)?.openDialog!==void 0}async dismissDialog(e,n=!0){let r=this.sessions.get(e);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(e){this.clearLaunchFailure();let n=this.sessions.get(e);n!==void 0&&(this.sessions.delete(e),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let e=[...this.sessions.keys()];if(await Promise.all(e.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${H_}`}}loadStorageState(e){let n=Ma(e);try{if(!Bt.existsSync(n))return;let r=JSON.parse(Bt.readFileSync(n,"utf8"));return I("[browser/vault] restored session",{profile:e,file:n}),r}catch(r){I("[browser/vault] ignoring unreadable vault",{profile:e,file:n,err:r});return}}async saveStorageState(e,n){try{let r=Ma(e);if(!Bt.existsSync(r))return;let o=await n.storageState(),s=ms.join(ms.dirname(r),`.${ms.basename(r)}.${process.pid}.${U_(4).toString("hex")}.tmp`);Bt.writeFileSync(s,JSON.stringify(o),{mode:384}),Bt.chmodSync(s,384),Bt.renameSync(s,r),I("[browser/vault] saved session",{profile:e,file:r})}catch(r){I("[browser/vault] save failed",{profile:e,err:r})}}}});import{createHash as j_}from"crypto";function xf(t){return!!(t.role==="textbox"&&t.kind==="password"||t.label&&W_.test(t.label))}function Rf(t){return j_("sha256").update(t,"utf8").digest("hex").slice(0,8)}function If(t){let e=t.replace(/\s+/g," ").trim();return e.length<=80?e:e.slice(0,77)+"..."}var W_,hs=be(()=>{"use strict";W_=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as K_}from"node:crypto";function G_(t){return t?t.replace(/\s+/g," ").trim().slice(0,200):""}function q_(t,e,n){return`el_${K_("sha256").update(`${t}:${e}:${n}`).digest("hex").slice(0,6)}`}function z_(t){let e=t.replace(/\s+/g," ").trim(),n=4e3;return e.length<=n?e:e.slice(0,n)+"\u2026[truncated]"}function Cf(t){return t.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function Mf(t,e){let n=t.role??"",r=t.name??"";Pf.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&e.push(t);for(let s of t.children??[])Mf(s,e)}async function J_(t){return t.evaluate(e=>{let n=Array.from(document.querySelectorAll(e)),r=[];for(let o of n){let s=o.getBoundingClientRect(),i=o;if(s.width===0&&s.height===0){let d=window.getComputedStyle(i);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(s.left),y:Math.round(s.top),w:Math.round(s.width),h:Math.round(s.height)}})}return r},Of).catch(()=>[])}async function V_(t){return t.evaluate(e=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(e)),o=[];for(let s of r){let i=s.tagName.toLowerCase(),a=s.getAttribute("role")??"",l=s.getAttribute("aria-label")??s.getAttribute("placeholder")??(s.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[i]??"");if(i==="input"){let g=s.type;g==="checkbox"?c="checkbox":g==="radio"?c="radio":g==="button"||g==="submit"||g==="reset"?c="button":g==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in s?s.value:void 0,u=d!==void 0?String(d):void 0,p=s.disabled??!1,f=i==="input"?s.checked:void 0,m={role:c,name:l,disabled:p};u!==void 0&&(m.value=u),f!==void 0&&(m.checked=f),o.push(m)}return o},Of).catch(()=>[])}function Y_(t){let n=t.accessibility;return n!==null&&typeof n=="object"?n:null}async function ys(t,e){let n=e.maxElements??80,r=e.includeHidden??!1,o=[],s=Y_(t),i=s?s.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=J_(t),l=t.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(t.url()),d=t.title().catch(()=>""),[u,p,f,m,g]=await Promise.all([i,a,l,c,d]),h,y=!1;u!==null?(h=[],Mf(u,h)):(o.push("observation skipped accessibility tree (returned null)"),y=!0,h=(await V_(t)).filter(ee=>Pf.has(ee.role??"")));let w=new Map;for(let A of p){let ee=Cf(A.name),q=w.get(ee);(!q||q.bbox.w===0&&A.bbox.w>0)&&w.set(ee,A)}let k=h.map(A=>({ax:A,dom:w.get(Cf(A.name??""))})),v=r?k:k.filter(A=>A.dom?A.dom.bbox.w>0||A.dom.bbox.h>0:!0);v.sort((A,ee)=>{let q=A.dom?.bbox.y??0,O=ee.dom?.bbox.y??0;if(q!==O)return q-O;let B=A.dom?.bbox.x??0,M=ee.dom?.bbox.x??0;return B-M}),v.length>200&&o.push("page has 200+ interactive elements; consider scoping");let E=v.slice(0,n).map((A,ee)=>{let q=A.ax.role??"generic",O=A.ax.name??"",B=q_(q,O,ee),M=A.dom?.bbox??{x:0,y:0,w:0,h:0},C=A.dom?.type??null,W=null;A.ax.value!==void 0&&A.ax.value!==null&&(W=String(A.ax.value)),A.ax.checked!==void 0&&(W=String(A.ax.checked)),xf({role:q,kind:C})&&(W="[redacted]");let D={disabled:A.ax.disabled??!1};A.ax.checked!==void 0&&(D.checked=A.ax.checked===!0||A.ax.checked==="mixed"),A.ax.selected!==void 0&&(D.selected=A.ax.selected),A.ax.expanded!==void 0&&(D.expanded=A.ax.expanded);let V;A.dom?.testId?V=`[data-testid="${A.dom.testId}"]`:A.dom?.id&&(V=`#${A.dom.id}`);let Y={id:B,role:q,label:G_(O),kind:C,value:W,state:D,bbox:M};return V!==void 0&&(Y.selector=V),Y}),x="idle";try{let A=await t.evaluate(()=>document.readyState);A==="loading"?x="loading":A==="interactive"?x="navigating":x="idle"}catch{x="navigating"}x!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),y&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let S=z_(f),R=`obs_${e.observationCounter.toString(36)}`,H=new Date().toISOString();return{observationId:R,url:m,title:g,textSummary:S,interactive:E,status:{httpStatus:e.httpStatus??null,loadingState:x,hasDialog:e.hasDialog??!1,consoleErrors:e.consoleErrors??0},warnings:o,screenshotPath:e.screenshotPath??null,capturedAt:H}}var Pf,Of,Df=be(()=>{"use strict";hs();Pf=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);Of="a[href], button, input, select, textarea, [role], [tabindex], label"});async function Ff(t,e){try{let n=await t.nth(e).evaluate(i=>{let a=i,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${e}`,o=0;for(let i=0;i<r.length;i++)o=o*31+r.charCodeAt(i)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function xl(t,e){let n=Math.min(e,5);return(await Promise.all(Array.from({length:n},(o,s)=>Ff(t,s)))).filter(o=>o!==null)}async function X_(t){let e=new Set,n=[];for(let{loc:r,count:o}of t)for(let s=0;s<o;s++){let i;try{i=await r.nth(s).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}e.has(i)||(e.add(i),n.push({key:i,locator:r,index:s}))}return n}async function Rl(t,e,n){switch(e.kind){case"element_id":return Q_(t,e,n);case"selector":return Z_(t,e);case"semantic":return eT(t,e)}}async function Q_(t,e,n){let r=n.get(e.elementId);if(r===void 0)return{outcome:"not_found",query:e};if(r.selector!==void 0){let l=t.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=t.getByRole(r.role,{name:r.label,exact:!0}),s=await o.count();if(s===0)return{outcome:"not_found",query:e};if(s===1)return{outcome:"resolved",locator:o};let i=await xl(o,s);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:i}}async function Z_(t,e){let n=t.locator(e.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:e};if(r===1)return{outcome:"resolved",locator:n};let o=await xl(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${e.selector}]`},candidates:o}}async function eT(t,e){return e.role!==void 0?tT(t,e.text,e.role):nT(t,e.text,e)}async function tT(t,e,n){let r=t.getByRole(n,{name:e}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:e,role:n}};if(o===1)return{outcome:"resolved",locator:r};let s=await xl(r,o);return{outcome:"ambiguous_target",query:{text:e,role:n},candidates:s}}async function nT(t,e,n){let r=t.getByRole("button",{name:e}),o=t.getByRole("link",{name:e}),s=t.getByLabel(e,{exact:!1}),[i,a,l]=await Promise.all([r.count(),o.count(),s.count()]);if(i+a+l===0)return{outcome:"not_found",query:n};let d=[];i>0&&d.push({loc:r,count:i}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:s,count:l});let u=await X_(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let g=u[0];return g===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:g.locator.nth(g.index)}}let p=u.slice(0,5),f=[];for(let g=0;g<p.length;g++){let h=p[g];if(h===void 0)continue;let y=await Ff(h.locator,h.index);if(y!==null){let w=`${y.role}:${y.label}:${g}`,k=0;for(let v=0;v<w.length;v++)k=k*31+w.charCodeAt(v)>>>0;f.push({...y,id:`el_${k.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:e},candidates:f}}var Lf=be(()=>{"use strict"});async function Il(t,e,n,r){let o=t.url();if(o===n)return null;let s=ps(o,e);if(s.allowed)return null;try{await t.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:s.reason}}var Nf=be(()=>{"use strict";fs()});import{randomBytes as rT}from"crypto";import{mkdir as oT,stat as sT,writeFile as iT}from"fs/promises";import{join as Cl}from"path";import{gzip as aT}from"zlib";import{promisify as lT}from"util";function cT(t){return Cl(Zd(t),"browser")}function dT(t){return Cl(cT(t),"screenshots")}function uT(){return new Date().toISOString().replace(/[:.]/g,"-")}function pT(){return rT(3).toString("hex")}async function Pl(t,e,n){if(e.length>Uf)throw new Error(`writeScreenshotSidecar: buffer exceeds ${Uf} byte cap (received ${e.length} bytes). Refusing to write oversized screenshot.`);let r=dT(t);await oT(r,{recursive:!0});let o=`${uT()}-${pT()}-${n}.png`,s=Cl(r,o);await iT(s,e);let{size:i}=await sT(s);return{path:s,bytes:i}}var qB,Uf,$f=be(()=>{"use strict";N();hs();qB=lT(aT);Uf=5*1024*1024});var Hf={};Sd(Hf,{PlaywrightProvider:()=>Ml});function Bf(t){switch(t.kind){case"semantic":return t.role!==void 0?`semantic('${t.text}', role='${t.role}')`:`semantic('${t.text}')`;case"element_id":return`element_id(${t.elementId})`;case"selector":return`selector(${t.selector})`}}var Ml,jf=be(()=>{"use strict";Tf();Df();Lf();fs();Nf();$f();Ml=class{name="playwright";config;launcher;sessions=new Map;constructor(e){this.config=e,this.launcher=new gs(e)}async open(e){let n=ps(e.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:e.url,reason:n.reason};let{sessionId:r}=e,o=await this.launcher.ensurePage(r),s=this.ensureSessionState(r),i=null,a=null;try{await o.goto(e.url,{timeout:e.timeoutMs??3e4,waitUntil:e.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await Il(o,this.config,e.url,()=>this.close({sessionId:r}));if(u!==null)return u}(e.screenshot===!0||a!==null)&&(i=await this.captureScreenshot(o,r,"browser_open")),s.observationCounter+=1;let d=await ys(o,{observationCounter:s.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(s,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),s=null;e.screenshot===!0&&(s=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let i=await ys(r,{observationCounter:o.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:e.includeHidden,maxElements:e.maxElements});return this.updateSessionFromObservation(o,i.interactive,i.url,i.title,"browser_observe"),i}async act(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),s=r.url(),i=e.timeoutMs??3e4,a=await Rl(r,e.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${Bf(e.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(e.action){case"click":await l.click({timeout:i});break;case"fill":await l.fill(e.value??"");break;case"press":await l.press(e.value??"");break;case"select":await l.selectOption(e.value??"");break;case"hover":await l.hover({timeout:i});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:i});break;case"wait_for":await l.waitFor({timeout:i,state:"visible"});break}};try{await d()}catch(g){if(g instanceof Error&&/navigation|net::ERR/i.test(g.message))try{await d()}catch(h){c=h}else c=g}let u=await Il(r,this.config,s,()=>this.close({sessionId:n}));if(u!==null)return u;let p=null;(e.screenshot===!0||c!==null)&&(p=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await ys(r,{observationCounter:o.observationCounter,screenshotPath:p,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),m=`browser_act:${e.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,m),c!==null)throw c;return f}async render(e){return this.launcher.renderHtml(e.url,{timeoutMs:e.timeoutMs??3e4,waitUntil:e.waitFor??"load",signal:e.signal,requestGuard:e.requestGuard})}async screenshot(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),s;if(e.target!==void 0){let d=await Rl(r,e.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${Bf(e.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");s=await d.locator.screenshot()}else s=await r.screenshot({fullPage:e.fullPage??!1});let{path:i,bytes:a}=await Pl(n,s,"browser_screenshot"),l=0,c=0;if(e.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:i,bytes:a,width:l,height:c,dataBase64:s.toString("base64"),mediaType:"image/png"}}async extract(e){throw new Error("browser_extract not implemented in Phase 1")}async close(e){await this.launcher.closeSession(e.sessionId),this.sessions.delete(e.sessionId)}describe(e){let n=this.sessions.get(e);if(n===void 0)return null;let r=this.launcher.getPage(e);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(e){let n=this.sessions.get(e);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(e,r),r}updateSessionFromObservation(e,n,r,o,s){e.knownElements=new Map(n.map(i=>[i.id,i])),e.currentUrl=r,e.currentTitle=o,e.lastAction=s,e.lastActionAt=new Date().toISOString()}async captureScreenshot(e,n,r){try{let o=await e.screenshot({fullPage:!1}),{path:s}=await Pl(n,o,r);return s}catch{return null}}}});var jt={};Sd(jt,{__resetBrowserRegistryForTests:()=>yT,browserProviderActive:()=>gT,closeBrowserProvider:()=>Ol,getBrowserProvider:()=>mT,peekBrowserProvider:()=>hT});function Wf(){Promise.resolve(Ol()).then(()=>{process.exit(130)})}function Kf(){Promise.resolve(Ol()).then(()=>{process.exit(143)})}function Gf(){je=null}function fT(){bs||(process.on("SIGINT",Wf),process.on("SIGTERM",Kf),process.on("exit",Gf),bs=!0)}function qf(){bs&&(process.removeListener("SIGINT",Wf),process.removeListener("SIGTERM",Kf),process.removeListener("exit",Gf),bs=!1)}async function mT(t){return je!==null?je:(Ht!==null||(Ht=(async()=>{let{PlaywrightProvider:e}=await Promise.resolve().then(()=>(jf(),Hf)),n=kf(t),r=new e(n);return fT(),je=r,Ht=null,r})()),Ht)}async function Ol(){if(je===null)return;let t=je;je=null,Ht=null,qf(),await t.shutdown()}function gT(){return je!==null}function hT(){return je}function yT(){je=null,Ht=null,qf()}var je,Ht,bs,Wt=be(()=>{"use strict";fs();je=null,Ht=null,bs=!1});ne();var _e=class extends Error{constructor(e){super(e),this.name="AbortError"}},Te=class extends Error{constructor(n,r){super(n);this.timeoutMs=r;this.name="TimeoutError"}timeoutMs},po=class extends Te{constructor(e,n){super(e,n),this.name="IdleWatchdogError"}},K=class extends Error{constructor(n,r,o,s){super(n);this.event=r;this.reason=o;this.name="HookBlockedError",s?.cause!==void 0&&(this.cause=s.cause)}event;reason;cause},$e=class extends Error{constructor(e){super(e),this.name="StreamIncompleteError"}},it=class extends Error{constructor(n,r,o){super(o??`Budget ceiling reached: $${n.toFixed(4)} cumulative >= $${r.toFixed(4)} limit`);this.runningCostUsd=n;this.maxBudgetUsd=r;this.name="BudgetExceededError"}runningCostUsd;maxBudgetUsd},Yt=class extends Error{constructor(e){super(e),this.name="DenialCircuitBreakerError"}};ne();async function Tt(t,e){if(t)try{await t.write({kind:"tool_call",payload:e})}catch(n){I(`trace.emit tool_call failed: ${qe(n)}`)}}async function at(t,e){if(t)try{await t.write({kind:"hook_decision",payload:e})}catch(n){I(`trace.emit hook_decision failed: ${qe(n)}`)}}async function xt(t,e){if(t)try{await t.write({kind:"subagent_lifecycle",payload:e})}catch(n){I(`trace.emit subagent_lifecycle failed: ${qe(n)}`)}}async function vd(t,e){if(t)try{await t.write({kind:"budget",payload:e})}catch(n){I(`trace.emit budget failed: ${qe(n)}`)}}async function kd(t,e){if(t)try{await t.write({kind:"abort",payload:e})}catch(n){I(`trace.emit abort failed: ${qe(n)}`)}}async function fo(t,e){if(t)try{await t.write({kind:"compaction",payload:e})}catch(n){I(`trace.emit compaction failed: ${qe(n)}`)}}async function Ad(t,e){if(t)try{await t.write({kind:"closure",payload:e})}catch(n){I(`trace.emit closure failed: ${qe(n)}`)}}async function de(t,e){if(t)try{await t.write({kind:"browser_event",payload:e})}catch(n){I(`trace.emit browser_event failed: ${qe(n)}`)}}async function U(t,e){if(t)try{await t.write({kind:"session_phase",payload:e})}catch(n){I(`trace.emit session_phase failed: ${qe(n)}`)}}function qe(t){return t instanceof Error?t.message:String(t)}import LM from"@anthropic-ai/sdk";var _d="extended-cache-ttl-2025-04-11",Ed=`claude-code-20250219,oauth-2025-04-20,interleaved-thinking-2025-05-14,${_d}`,iS="effort-2025-11-24",aS="claude-cli/1.0.0 (external, cli)",lS="x-anthropic-billing-header: cc_version=1.0.0.test; cc_entrypoint=cli; cch=00000;";function mo(t){return t.startsWith("sk-ant-oat01-")?"oauth":"api-key"}function Ln(t,e,n,r){let o=e==="oauth"?{authToken:t}:{apiKey:t},s=typeof n=="string"&&n.length>0?{...o,baseURL:n}:o;return r?{...s,fetch:r}:s}function lt(t,e,n,r,o){return t!=="oauth"?o===!0?{"anthropic-beta":_d}:{}:{"anthropic-beta":r?`${Ed},${iS}`:Ed,"x-app":"cli","User-Agent":aS,"X-Claude-Code-Session-Id":e,"x-client-request-id":n}}function Td(t){return t!=="oauth"?null:[{type:"text",text:lS}]}import pS from"@anthropic-ai/sdk";P();var Nn=["local","small","medium","large"],Rd="claude-haiku-4-5-20251001",ha="claude-sonnet-5",ya="claude-opus-5",wa="claude-fable-5",Rt={local:{id:""},small:{id:Rd},medium:{id:ha},large:{id:ya}},Id="auto",Sa={opus:ya,opus_1m:ya,sonnet:ha,sonnet_1m:ha,haiku:Rd,fable:wa},Qt=[...Nn,...Object.keys(Sa)],ba;function va(t){ba=t}function ga(t){if(t===void 0)return;let e=t.trim();return e.length>0?e:void 0}function go(t,e,n){let r={},o=ga(t);o&&(r.id=o);let s=ga(e);s&&(r.baseUrl=s);let i=ga(n);return i&&(r.apiKey=i),r}function cS(){return{local:go(b.AFK_MODEL_LOCAL,b.AFK_MODEL_LOCAL_BASE_URL,b.AFK_MODEL_LOCAL_API_KEY),small:go(b.AFK_MODEL_SMALL,b.AFK_MODEL_SMALL_BASE_URL,b.AFK_MODEL_SMALL_API_KEY),medium:go(b.AFK_MODEL_MEDIUM,b.AFK_MODEL_MEDIUM_BASE_URL,b.AFK_MODEL_MEDIUM_API_KEY),large:go(b.AFK_MODEL_LARGE,b.AFK_MODEL_LARGE_BASE_URL,b.AFK_MODEL_LARGE_API_KEY)}}function Cd(t){let e=cS(),n={};for(let r of Nn){let o=Rt[r],s=t?.[r],i=e[r],a={id:i.id??s?.id??o.id},l=s?.name;l&&(a.name=l);let c=s?.provider;c&&(a.provider=c);let d=i.baseUrl??s?.baseUrl;d&&(a.baseUrl=d);let u=i.apiKey??s?.apiKey;u&&(a.apiKey=u),n[r]=a}return n}function Zt(t){return t||ba||Cd()}function en(t,e=Zt()){let n=t.trim().toLowerCase();if(!(!n||n===Id)){for(let r of Nn){let o=e[r].name;if(o&&o.trim().toLowerCase()===n)return r}if(n==="local"||n==="small"||n==="medium"||n==="large")return n}}function It(t,e=Zt()){if(t===void 0)return{id:""};let n=en(t,e);if(n)return e[n];let r=Sa[t.trim().toLowerCase()];return r?{id:r}:{id:t}}function ct(t,e=Zt()){if(t!==void 0)return It(t,e).id}function Pd(t,e=Zt()){if(t===void 0)return;let n=en(t,e);if(n&&e[n].id.trim()===""){let r=n.toUpperCase();return`The "${n}" model tier is not configured (no model id). Set AFK_MODEL_${r}=<id> (optionally AFK_MODEL_${r}_BASE_URL / AFK_MODEL_${r}_API_KEY) or "models.${n}" in afk.config.json, then retry.`}}function Md(t){let e={};if(!t||typeof t!="object")return e;let n=t;for(let r of Nn){let o=uS(n[r]);o&&(e[r]=o)}return e}function Od(t){if(typeof t!="string")return;let e=t.trim().toLowerCase();if(e==="anthropic"||e==="anthropic-direct")return"anthropic";if(e==="openai"||e==="openai-compatible")return"openai";if(e==="chatgpt-oauth"||e==="chatgpt")return"chatgpt-oauth"}function Xt(t){return typeof t=="string"?t.trim():""}function xd(t){return/[\x00-\x1f\x7f]/.test(t)}var dS=new Set([...Nn,Id,...Object.keys(Sa)]);function uS(t){if(typeof t=="string"){let e=t.trim();return e?{id:e}:void 0}if(t&&typeof t=="object"){let e=t,n=Xt(e.id);if(!n)return;let r={id:n},o=Xt(e.name);o&&(r.name=o);let s=Od(e.provider);s&&(r.provider=s);let i=Xt(e.baseUrl);i&&(r.baseUrl=i);let a=Xt(e.apiKey);return a&&(r.apiKey=a),r}}function Dd(t){if(!t||typeof t!="object"||Array.isArray(t))return{ok:!1,error:'model binding must be an object with at least an "id"'};let e=t;if("apiKey"in e||"api_key"in e)return{ok:!1,error:"per-slot API keys are credentials; set AFK_MODEL_<TIER>_API_KEY via `afk config env set` instead of afk.config.json"};if("baseUrl"in e||"base_url"in e)return{ok:!1,error:"per-slot baseUrl is an endpoint-redirect credential vector; set AFK_MODEL_<TIER>_BASE_URL via `afk config env set` instead of afk.config.json"};let n=Xt(e.id);if(!n)return{ok:!1,error:'model binding requires a non-empty "id"'};if(xd(n))return{ok:!1,error:'model binding "id" must not contain control characters'};let r={id:n},o=Xt(e.name);if(o){if(xd(o))return{ok:!1,error:'model binding "name" must not contain control characters'};if(dS.has(o.trim().toLowerCase()))return{ok:!1,error:`model binding "name" must not shadow a built-in alias ("${o}")`};r.name=o}if(e.provider!==void 0&&e.provider!==""){let s=Od(e.provider);if(!s)return{ok:!1,error:'model binding "provider" must be one of: anthropic, openai (aliases: anthropic-direct, openai-compatible)'};r.provider=s}return{ok:!0,value:r}}var ka={opus:Rt.large.id,opus_1m:Rt.large.id,sonnet:Rt.medium.id,sonnet_1m:Rt.medium.id,haiku:Rt.small.id,fable:wa};function ho(t){return t in ka}function fe(t){return ct(t)}import{randomUUID as Fd}from"node:crypto";async function Ld(t){let{token:e,model:n,system:r,user:o,maxTokens:s=64,signal:i,clientFactory:a}=t;if(!e)throw new Error("oneShotCompletion: token required");let l=mo(e),c=Ln(e,l),d=a?a(c):new pS(c),u=Fd(),p=Fd(),f=lt(l,u,p),m=fe(n)??n,g={};Object.keys(f).length>0&&(g.headers=f),i&&(g.signal=i);let h=await d.messages.create({model:m,max_tokens:s,system:r,messages:[{role:"user",content:o}]},Object.keys(g).length>0?g:void 0),y=[];for(let k of h.content)k.type==="text"&&y.push(k.text);let w=y.join("").trim();return w.length===0&&console.warn("oneShotCompletion: response contained no text blocks \u2014 returning empty string"),w}import{randomUUID as ib}from"node:crypto";function De(t){return t==="bypassPermissions"||t==="autonomous"}P();var fS="1h";function Un(t){if(typeof t?.baseUrl=="string"&&t.baseUrl.length>0)return!1;let e=b.AFK_DISABLE_PROMPT_CACHE;if(e===void 0||e.length===0)return!0;let n=e.toLowerCase();return!(n==="1"||n==="true"||n==="yes"||n==="on")}function $n(){let t=b.AFK_PROMPT_CACHE_TTL;return t==="5m"?"5m":t==="1h"?"1h":fS}function yo(t){return Un(t)&&$n()==="1h"}function Nd(t,e){if(t.length===0)return t;let n=t[t.length-1],r=$d(n,e);return r===n?t:[...t.slice(0,-1),r]}function Ud(t,e){if(t.length===0)return t;let n=t[t.length-1],r=mS(n,e);return r===n?t:[...t.slice(0,-1),r]}function mS(t,e){let n=t.content;if(typeof n=="string")return n.length===0?t:{...t,content:[{type:"text",text:n,cache_control:{type:"ephemeral",ttl:e}}]};if(!Array.isArray(n)||n.length===0)return t;let r=n[n.length-1],o=$d(r,e);return o===r?t:{...t,content:[...n.slice(0,-1),o]}}function $d(t,e){return t.type==="thinking"||t.type==="redacted_thinking"?t:{...t,cache_control:{type:"ephemeral",ttl:e}}}var bo=["## Plan mode is active","","File and memory write tools (`write_file`, `edit_file`, `memory_update`, `procedure_write`) are refused at the hook layer.","`bash` runs for read-only investigation (git status/log/diff, ls, cat, grep, find \u2014 chained or not); state-mutating bash (file writes, rm, installs, commits, pushes) is refused while planning. The user has asked you to plan, not yet to act \u2014 exit plan mode to make changes.","Treat this turn as planning work.","","Traverse the shape that matches the work \u2014 skip steps the terrain already covers, do not skip steps the terrain hides:","","  unknown field \u2192 ground the current terrain \u2192 gather missing codebase context \u2192","  research missing external context \u2192 reveal chaos / constraints / risks \u2192","  name the failure geometry \u2192 form a candidate plan \u2192 apply adversarial pressure \u2192 embody the final plan","","Reach for these skills (invoke via the `skill` tool) when the cost of skipping exceeds the cost of dispatching:","  - `ground-state` \u2014 survey git, infra, memory before non-trivial work","  - `gather` \u2014 parallel context-gathering for a code area","  - `research` \u2014 parallel external + local context for the current task","  - `devils-advocate` \u2014 generate alternatives and rank them before committing","  - `shadow-verify` \u2014 independently re-derive load-bearing claims","","Do not declare readiness silently. When the plan is ready, state: chosen approach, risks named, and alternatives considered.","","Then, IF the task requires implementation (writing code or files), call the `exit_plan_mode` tool to present your plan. The user picks how to proceed (approve and implement, or keep planning). After calling it, END YOUR TURN \u2014 on approval you will receive a separate instruction to save the plan to a file and implement it. Do NOT use `ask_question` to ask whether the plan is OK; that is exactly what `exit_plan_mode` does \u2014 use `ask_question` only to resolve open requirement questions first. For research / read-only tasks that need no code changes, do NOT call `exit_plan_mode` \u2014 just answer.","","Manual fallbacks remain: the user can exit with `/plan off` (same save-and-implement handoff), and Shift+Tab advances the permission-mode ring without saving or implementing. Keep the plan concrete and complete enough to act on directly."].join(`
+${Me(t,{headless:e,latched:n})}`,{cause:t})}var Ef,D_,F_,Af,N_,Tl=be(()=>{"use strict";Ef=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],D_="pnpm exec playwright install chromium",F_=4;N_="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Bt from"node:fs";import ms from"node:path";import{randomBytes as U_}from"node:crypto";import{chromium as $_}from"playwright";function B_(){try{return"5.84.12"}catch{}try{let t=ms.resolve(import.meta.dirname,"../../../package.json"),e=Bt.readFileSync(t,"utf8"),n=JSON.parse(e);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var H_,gs,Tf=be(()=>{"use strict";Tl();N();ne();H_=B_(),gs=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(e){this.config=e}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(e){this.launchFailure={error:e}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=$_.launch({headless:this.config.headless}).then(e=>(this.browser=e,this.launchPromise=void 0,this.clearLaunchFailure(),e)).catch(e=>{this.launchPromise=void 0;let n=_l(e,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(e){let n=this.sessions.get(e);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),s=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),i={context:s,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(e,i),s}async ensurePage(e){let n=this.sessions.get(e);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(e);let r=this.sessions.get(e);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${e}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",s=>{s.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",s=>{s.isNavigationRequest()&&s.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",s=>{s.frame()===o.mainFrame()&&s.request().isNavigationRequest()&&(r.lastHttpStatus=s.status())}),o.on("dialog",s=>{r.openDialog=s}),o}getPage(e){return this.sessions.get(e)?.page}async renderHtml(e,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),s;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){s=l,await a.abort("blockedbyclient")}});let i=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",i,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(e,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(p){throw s??p}if(s!==void 0)throw s;let c=await a.content();if(s!==void 0)throw s;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",i),await o.close().catch(()=>{})}}getConsoleErrorCount(e){return this.sessions.get(e)?.consoleErrors??0}getLastHttpStatus(e){return this.sessions.get(e)?.lastHttpStatus??null}hasOpenDialog(e){return this.sessions.get(e)?.openDialog!==void 0}async dismissDialog(e,n=!0){let r=this.sessions.get(e);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(e){this.clearLaunchFailure();let n=this.sessions.get(e);n!==void 0&&(this.sessions.delete(e),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let e=[...this.sessions.keys()];if(await Promise.all(e.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${H_}`}}loadStorageState(e){let n=Ma(e);try{if(!Bt.existsSync(n))return;let r=JSON.parse(Bt.readFileSync(n,"utf8"));return I("[browser/vault] restored session",{profile:e,file:n}),r}catch(r){I("[browser/vault] ignoring unreadable vault",{profile:e,file:n,err:r});return}}async saveStorageState(e,n){try{let r=Ma(e);if(!Bt.existsSync(r))return;let o=await n.storageState(),s=ms.join(ms.dirname(r),`.${ms.basename(r)}.${process.pid}.${U_(4).toString("hex")}.tmp`);Bt.writeFileSync(s,JSON.stringify(o),{mode:384}),Bt.chmodSync(s,384),Bt.renameSync(s,r),I("[browser/vault] saved session",{profile:e,file:r})}catch(r){I("[browser/vault] save failed",{profile:e,err:r})}}}});import{createHash as j_}from"crypto";function xf(t){return!!(t.role==="textbox"&&t.kind==="password"||t.label&&W_.test(t.label))}function Rf(t){return j_("sha256").update(t,"utf8").digest("hex").slice(0,8)}function If(t){let e=t.replace(/\s+/g," ").trim();return e.length<=80?e:e.slice(0,77)+"..."}var W_,hs=be(()=>{"use strict";W_=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as K_}from"node:crypto";function G_(t){return t?t.replace(/\s+/g," ").trim().slice(0,200):""}function q_(t,e,n){return`el_${K_("sha256").update(`${t}:${e}:${n}`).digest("hex").slice(0,6)}`}function z_(t){let e=t.replace(/\s+/g," ").trim(),n=4e3;return e.length<=n?e:e.slice(0,n)+"\u2026[truncated]"}function Cf(t){return t.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function Mf(t,e){let n=t.role??"",r=t.name??"";Pf.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&e.push(t);for(let s of t.children??[])Mf(s,e)}async function J_(t){return t.evaluate(e=>{let n=Array.from(document.querySelectorAll(e)),r=[];for(let o of n){let s=o.getBoundingClientRect(),i=o;if(s.width===0&&s.height===0){let d=window.getComputedStyle(i);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(s.left),y:Math.round(s.top),w:Math.round(s.width),h:Math.round(s.height)}})}return r},Of).catch(()=>[])}async function V_(t){return t.evaluate(e=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(e)),o=[];for(let s of r){let i=s.tagName.toLowerCase(),a=s.getAttribute("role")??"",l=s.getAttribute("aria-label")??s.getAttribute("placeholder")??(s.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[i]??"");if(i==="input"){let g=s.type;g==="checkbox"?c="checkbox":g==="radio"?c="radio":g==="button"||g==="submit"||g==="reset"?c="button":g==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in s?s.value:void 0,u=d!==void 0?String(d):void 0,p=s.disabled??!1,f=i==="input"?s.checked:void 0,m={role:c,name:l,disabled:p};u!==void 0&&(m.value=u),f!==void 0&&(m.checked=f),o.push(m)}return o},Of).catch(()=>[])}function Y_(t){let n=t.accessibility;return n!==null&&typeof n=="object"?n:null}async function ys(t,e){let n=e.maxElements??80,r=e.includeHidden??!1,o=[],s=Y_(t),i=s?s.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=J_(t),l=t.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(t.url()),d=t.title().catch(()=>""),[u,p,f,m,g]=await Promise.all([i,a,l,c,d]),h,y=!1;u!==null?(h=[],Mf(u,h)):(o.push("observation skipped accessibility tree (returned null)"),y=!0,h=(await V_(t)).filter(ee=>Pf.has(ee.role??"")));let w=new Map;for(let A of p){let ee=Cf(A.name),q=w.get(ee);(!q||q.bbox.w===0&&A.bbox.w>0)&&w.set(ee,A)}let k=h.map(A=>({ax:A,dom:w.get(Cf(A.name??""))})),v=r?k:k.filter(A=>A.dom?A.dom.bbox.w>0||A.dom.bbox.h>0:!0);v.sort((A,ee)=>{let q=A.dom?.bbox.y??0,O=ee.dom?.bbox.y??0;if(q!==O)return q-O;let B=A.dom?.bbox.x??0,M=ee.dom?.bbox.x??0;return B-M}),v.length>200&&o.push("page has 200+ interactive elements; consider scoping");let E=v.slice(0,n).map((A,ee)=>{let q=A.ax.role??"generic",O=A.ax.name??"",B=q_(q,O,ee),M=A.dom?.bbox??{x:0,y:0,w:0,h:0},C=A.dom?.type??null,W=null;A.ax.value!==void 0&&A.ax.value!==null&&(W=String(A.ax.value)),A.ax.checked!==void 0&&(W=String(A.ax.checked)),xf({role:q,kind:C})&&(W="[redacted]");let D={disabled:A.ax.disabled??!1};A.ax.checked!==void 0&&(D.checked=A.ax.checked===!0||A.ax.checked==="mixed"),A.ax.selected!==void 0&&(D.selected=A.ax.selected),A.ax.expanded!==void 0&&(D.expanded=A.ax.expanded);let V;A.dom?.testId?V=`[data-testid="${A.dom.testId}"]`:A.dom?.id&&(V=`#${A.dom.id}`);let Y={id:B,role:q,label:G_(O),kind:C,value:W,state:D,bbox:M};return V!==void 0&&(Y.selector=V),Y}),x="idle";try{let A=await t.evaluate(()=>document.readyState);A==="loading"?x="loading":A==="interactive"?x="navigating":x="idle"}catch{x="navigating"}x!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),y&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let S=z_(f),R=`obs_${e.observationCounter.toString(36)}`,H=new Date().toISOString();return{observationId:R,url:m,title:g,textSummary:S,interactive:E,status:{httpStatus:e.httpStatus??null,loadingState:x,hasDialog:e.hasDialog??!1,consoleErrors:e.consoleErrors??0},warnings:o,screenshotPath:e.screenshotPath??null,capturedAt:H}}var Pf,Of,Df=be(()=>{"use strict";hs();Pf=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);Of="a[href], button, input, select, textarea, [role], [tabindex], label"});async function Ff(t,e){try{let n=await t.nth(e).evaluate(i=>{let a=i,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${e}`,o=0;for(let i=0;i<r.length;i++)o=o*31+r.charCodeAt(i)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function xl(t,e){let n=Math.min(e,5);return(await Promise.all(Array.from({length:n},(o,s)=>Ff(t,s)))).filter(o=>o!==null)}async function X_(t){let e=new Set,n=[];for(let{loc:r,count:o}of t)for(let s=0;s<o;s++){let i;try{i=await r.nth(s).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}e.has(i)||(e.add(i),n.push({key:i,locator:r,index:s}))}return n}async function Rl(t,e,n){switch(e.kind){case"element_id":return Q_(t,e,n);case"selector":return Z_(t,e);case"semantic":return eT(t,e)}}async function Q_(t,e,n){let r=n.get(e.elementId);if(r===void 0)return{outcome:"not_found",query:e};if(r.selector!==void 0){let l=t.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=t.getByRole(r.role,{name:r.label,exact:!0}),s=await o.count();if(s===0)return{outcome:"not_found",query:e};if(s===1)return{outcome:"resolved",locator:o};let i=await xl(o,s);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:i}}async function Z_(t,e){let n=t.locator(e.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:e};if(r===1)return{outcome:"resolved",locator:n};let o=await xl(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${e.selector}]`},candidates:o}}async function eT(t,e){return e.role!==void 0?tT(t,e.text,e.role):nT(t,e.text,e)}async function tT(t,e,n){let r=t.getByRole(n,{name:e}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:e,role:n}};if(o===1)return{outcome:"resolved",locator:r};let s=await xl(r,o);return{outcome:"ambiguous_target",query:{text:e,role:n},candidates:s}}async function nT(t,e,n){let r=t.getByRole("button",{name:e}),o=t.getByRole("link",{name:e}),s=t.getByLabel(e,{exact:!1}),[i,a,l]=await Promise.all([r.count(),o.count(),s.count()]);if(i+a+l===0)return{outcome:"not_found",query:n};let d=[];i>0&&d.push({loc:r,count:i}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:s,count:l});let u=await X_(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let g=u[0];return g===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:g.locator.nth(g.index)}}let p=u.slice(0,5),f=[];for(let g=0;g<p.length;g++){let h=p[g];if(h===void 0)continue;let y=await Ff(h.locator,h.index);if(y!==null){let w=`${y.role}:${y.label}:${g}`,k=0;for(let v=0;v<w.length;v++)k=k*31+w.charCodeAt(v)>>>0;f.push({...y,id:`el_${k.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:e},candidates:f}}var Lf=be(()=>{"use strict"});async function Il(t,e,n,r){let o=t.url();if(o===n)return null;let s=ps(o,e);if(s.allowed)return null;try{await t.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:s.reason}}var Nf=be(()=>{"use strict";fs()});import{randomBytes as rT}from"crypto";import{mkdir as oT,stat as sT,writeFile as iT}from"fs/promises";import{join as Cl}from"path";import{gzip as aT}from"zlib";import{promisify as lT}from"util";function cT(t){return Cl(Zd(t),"browser")}function dT(t){return Cl(cT(t),"screenshots")}function uT(){return new Date().toISOString().replace(/[:.]/g,"-")}function pT(){return rT(3).toString("hex")}async function Pl(t,e,n){if(e.length>Uf)throw new Error(`writeScreenshotSidecar: buffer exceeds ${Uf} byte cap (received ${e.length} bytes). Refusing to write oversized screenshot.`);let r=dT(t);await oT(r,{recursive:!0});let o=`${uT()}-${pT()}-${n}.png`,s=Cl(r,o);await iT(s,e);let{size:i}=await sT(s);return{path:s,bytes:i}}var qB,Uf,$f=be(()=>{"use strict";N();hs();qB=lT(aT);Uf=5*1024*1024});var Hf={};Sd(Hf,{PlaywrightProvider:()=>Ml});function Bf(t){switch(t.kind){case"semantic":return t.role!==void 0?`semantic('${t.text}', role='${t.role}')`:`semantic('${t.text}')`;case"element_id":return`element_id(${t.elementId})`;case"selector":return`selector(${t.selector})`}}var Ml,jf=be(()=>{"use strict";Tf();Df();Lf();fs();Nf();$f();Ml=class{name="playwright";config;launcher;sessions=new Map;constructor(e){this.config=e,this.launcher=new gs(e)}async open(e){let n=ps(e.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:e.url,reason:n.reason};let{sessionId:r}=e,o=await this.launcher.ensurePage(r),s=this.ensureSessionState(r),i=null,a=null;try{await o.goto(e.url,{timeout:e.timeoutMs??3e4,waitUntil:e.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await Il(o,this.config,e.url,()=>this.close({sessionId:r}));if(u!==null)return u}(e.screenshot===!0||a!==null)&&(i=await this.captureScreenshot(o,r,"browser_open")),s.observationCounter+=1;let d=await ys(o,{observationCounter:s.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(s,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),s=null;e.screenshot===!0&&(s=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let i=await ys(r,{observationCounter:o.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:e.includeHidden,maxElements:e.maxElements});return this.updateSessionFromObservation(o,i.interactive,i.url,i.title,"browser_observe"),i}async act(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),s=r.url(),i=e.timeoutMs??3e4,a=await Rl(r,e.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${Bf(e.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(e.action){case"click":await l.click({timeout:i});break;case"fill":await l.fill(e.value??"");break;case"press":await l.press(e.value??"");break;case"select":await l.selectOption(e.value??"");break;case"hover":await l.hover({timeout:i});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:i});break;case"wait_for":await l.waitFor({timeout:i,state:"visible"});break}};try{await d()}catch(g){if(g instanceof Error&&/navigation|net::ERR/i.test(g.message))try{await d()}catch(h){c=h}else c=g}let u=await Il(r,this.config,s,()=>this.close({sessionId:n}));if(u!==null)return u;let p=null;(e.screenshot===!0||c!==null)&&(p=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await ys(r,{observationCounter:o.observationCounter,screenshotPath:p,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),m=`browser_act:${e.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,m),c!==null)throw c;return f}async render(e){return this.launcher.renderHtml(e.url,{timeoutMs:e.timeoutMs??3e4,waitUntil:e.waitFor??"load",signal:e.signal,requestGuard:e.requestGuard})}async screenshot(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),s;if(e.target!==void 0){let d=await Rl(r,e.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${Bf(e.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");s=await d.locator.screenshot()}else s=await r.screenshot({fullPage:e.fullPage??!1});let{path:i,bytes:a}=await Pl(n,s,"browser_screenshot"),l=0,c=0;if(e.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:i,bytes:a,width:l,height:c,dataBase64:s.toString("base64"),mediaType:"image/png"}}async extract(e){throw new Error("browser_extract not implemented in Phase 1")}async close(e){await this.launcher.closeSession(e.sessionId),this.sessions.delete(e.sessionId)}describe(e){let n=this.sessions.get(e);if(n===void 0)return null;let r=this.launcher.getPage(e);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(e){let n=this.sessions.get(e);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(e,r),r}updateSessionFromObservation(e,n,r,o,s){e.knownElements=new Map(n.map(i=>[i.id,i])),e.currentUrl=r,e.currentTitle=o,e.lastAction=s,e.lastActionAt=new Date().toISOString()}async captureScreenshot(e,n,r){try{let o=await e.screenshot({fullPage:!1}),{path:s}=await Pl(n,o,r);return s}catch{return null}}}});var jt={};Sd(jt,{__resetBrowserRegistryForTests:()=>yT,browserProviderActive:()=>gT,closeBrowserProvider:()=>Ol,getBrowserProvider:()=>mT,peekBrowserProvider:()=>hT});function Wf(){Promise.resolve(Ol()).then(()=>{process.exit(130)})}function Kf(){Promise.resolve(Ol()).then(()=>{process.exit(143)})}function Gf(){je=null}function fT(){bs||(process.on("SIGINT",Wf),process.on("SIGTERM",Kf),process.on("exit",Gf),bs=!0)}function qf(){bs&&(process.removeListener("SIGINT",Wf),process.removeListener("SIGTERM",Kf),process.removeListener("exit",Gf),bs=!1)}async function mT(t){return je!==null?je:(Ht!==null||(Ht=(async()=>{let{PlaywrightProvider:e}=await Promise.resolve().then(()=>(jf(),Hf)),n=kf(t),r=new e(n);return fT(),je=r,Ht=null,r})()),Ht)}async function Ol(){if(je===null)return;let t=je;je=null,Ht=null,qf(),await t.shutdown()}function gT(){return je!==null}function hT(){return je}function yT(){je=null,Ht=null,qf()}var je,Ht,bs,Wt=be(()=>{"use strict";fs();je=null,Ht=null,bs=!1});ne();var _e=class extends Error{constructor(e){super(e),this.name="AbortError"}},Te=class extends Error{constructor(n,r){super(n);this.timeoutMs=r;this.name="TimeoutError"}timeoutMs},po=class extends Te{constructor(e,n){super(e,n),this.name="IdleWatchdogError"}},K=class extends Error{constructor(n,r,o,s){super(n);this.event=r;this.reason=o;this.name="HookBlockedError",s?.cause!==void 0&&(this.cause=s.cause)}event;reason;cause},$e=class extends Error{constructor(e){super(e),this.name="StreamIncompleteError"}},it=class extends Error{constructor(n,r,o){super(o??`Budget ceiling reached: $${n.toFixed(4)} cumulative >= $${r.toFixed(4)} limit`);this.runningCostUsd=n;this.maxBudgetUsd=r;this.name="BudgetExceededError"}runningCostUsd;maxBudgetUsd},Yt=class extends Error{constructor(e){super(e),this.name="DenialCircuitBreakerError"}};ne();async function Tt(t,e){if(t)try{await t.write({kind:"tool_call",payload:e})}catch(n){I(`trace.emit tool_call failed: ${qe(n)}`)}}async function at(t,e){if(t)try{await t.write({kind:"hook_decision",payload:e})}catch(n){I(`trace.emit hook_decision failed: ${qe(n)}`)}}async function xt(t,e){if(t)try{await t.write({kind:"subagent_lifecycle",payload:e})}catch(n){I(`trace.emit subagent_lifecycle failed: ${qe(n)}`)}}async function vd(t,e){if(t)try{await t.write({kind:"budget",payload:e})}catch(n){I(`trace.emit budget failed: ${qe(n)}`)}}async function kd(t,e){if(t)try{await t.write({kind:"abort",payload:e})}catch(n){I(`trace.emit abort failed: ${qe(n)}`)}}async function fo(t,e){if(t)try{await t.write({kind:"compaction",payload:e})}catch(n){I(`trace.emit compaction failed: ${qe(n)}`)}}async function Ad(t,e){if(t)try{await t.write({kind:"closure",payload:e})}catch(n){I(`trace.emit closure failed: ${qe(n)}`)}}async function de(t,e){if(t)try{await t.write({kind:"browser_event",payload:e})}catch(n){I(`trace.emit browser_event failed: ${qe(n)}`)}}async function U(t,e){if(t)try{await t.write({kind:"session_phase",payload:e})}catch(n){I(`trace.emit session_phase failed: ${qe(n)}`)}}function qe(t){return t instanceof Error?t.message:String(t)}import LM from"@anthropic-ai/sdk";var _d="extended-cache-ttl-2025-04-11",Ed=`claude-code-20250219,oauth-2025-04-20,interleaved-thinking-2025-05-14,${_d}`,iS="effort-2025-11-24",aS="claude-cli/1.0.0 (external, cli)",lS="x-anthropic-billing-header: cc_version=1.0.0.test; cc_entrypoint=cli; cch=00000;";function mo(t){return t.startsWith("sk-ant-oat01-")?"oauth":"api-key"}function Ln(t,e,n,r){let o=e==="oauth"?{authToken:t}:{apiKey:t},s=typeof n=="string"&&n.length>0?{...o,baseURL:n}:o;return r?{...s,fetch:r}:s}function lt(t,e,n,r,o){return t!=="oauth"?o===!0?{"anthropic-beta":_d}:{}:{"anthropic-beta":r?`${Ed},${iS}`:Ed,"x-app":"cli","User-Agent":aS,"X-Claude-Code-Session-Id":e,"x-client-request-id":n}}function Td(t){return t!=="oauth"?null:[{type:"text",text:lS}]}import pS from"@anthropic-ai/sdk";P();var Nn=["local","small","medium","large"],Rd="claude-haiku-4-5-20251001",ha="claude-sonnet-5",ya="claude-opus-5",wa="claude-fable-5",Rt={local:{id:""},small:{id:Rd},medium:{id:ha},large:{id:ya}},Id="auto",Sa={opus:ya,opus_1m:ya,sonnet:ha,sonnet_1m:ha,haiku:Rd,fable:wa},Qt=[...Nn,...Object.keys(Sa)],ba;function va(t){ba=t}function ga(t){if(t===void 0)return;let e=t.trim();return e.length>0?e:void 0}function go(t,e,n){let r={},o=ga(t);o&&(r.id=o);let s=ga(e);s&&(r.baseUrl=s);let i=ga(n);return i&&(r.apiKey=i),r}function cS(){return{local:go(b.AFK_MODEL_LOCAL,b.AFK_MODEL_LOCAL_BASE_URL,b.AFK_MODEL_LOCAL_API_KEY),small:go(b.AFK_MODEL_SMALL,b.AFK_MODEL_SMALL_BASE_URL,b.AFK_MODEL_SMALL_API_KEY),medium:go(b.AFK_MODEL_MEDIUM,b.AFK_MODEL_MEDIUM_BASE_URL,b.AFK_MODEL_MEDIUM_API_KEY),large:go(b.AFK_MODEL_LARGE,b.AFK_MODEL_LARGE_BASE_URL,b.AFK_MODEL_LARGE_API_KEY)}}function Cd(t){let e=cS(),n={};for(let r of Nn){let o=Rt[r],s=t?.[r],i=e[r],a={id:i.id??s?.id??o.id},l=s?.name;l&&(a.name=l);let c=s?.provider;c&&(a.provider=c);let d=i.baseUrl??s?.baseUrl;d&&(a.baseUrl=d);let u=i.apiKey??s?.apiKey;u&&(a.apiKey=u),n[r]=a}return n}function Zt(t){return t||ba||Cd()}function en(t,e=Zt()){let n=t.trim().toLowerCase();if(!(!n||n===Id)){for(let r of Nn){let o=e[r].name;if(o&&o.trim().toLowerCase()===n)return r}if(n==="local"||n==="small"||n==="medium"||n==="large")return n}}function It(t,e=Zt()){if(t===void 0)return{id:""};let n=en(t,e);if(n)return e[n];let r=Sa[t.trim().toLowerCase()];return r?{id:r}:{id:t}}function ct(t,e=Zt()){if(t!==void 0)return It(t,e).id}function Pd(t,e=Zt()){if(t===void 0)return;let n=en(t,e);if(n&&e[n].id.trim()===""){let r=n.toUpperCase();return`The "${n}" model tier is not configured (no model id). Set AFK_MODEL_${r}=<id> (optionally AFK_MODEL_${r}_BASE_URL / AFK_MODEL_${r}_API_KEY) or "models.${n}" in afk.config.json, then retry.`}}function Md(t){let e={};if(!t||typeof t!="object")return e;let n=t;for(let r of Nn){let o=uS(n[r]);o&&(e[r]=o)}return e}function Od(t){if(typeof t!="string")return;let e=t.trim().toLowerCase();if(e==="anthropic"||e==="anthropic-direct")return"anthropic";if(e==="openai"||e==="openai-compatible")return"openai";if(e==="chatgpt-oauth"||e==="chatgpt")return"chatgpt-oauth"}function Xt(t){return typeof t=="string"?t.trim():""}function xd(t){return/[\x00-\x1f\x7f]/.test(t)}var dS=new Set([...Nn,Id,...Object.keys(Sa)]);function uS(t){if(typeof t=="string"){let e=t.trim();return e?{id:e}:void 0}if(t&&typeof t=="object"){let e=t,n=Xt(e.id);if(!n)return;let r={id:n},o=Xt(e.name);o&&(r.name=o);let s=Od(e.provider);s&&(r.provider=s);let i=Xt(e.baseUrl);i&&(r.baseUrl=i);let a=Xt(e.apiKey);return a&&(r.apiKey=a),r}}function Dd(t){if(!t||typeof t!="object"||Array.isArray(t))return{ok:!1,error:'model binding must be an object with at least an "id"'};let e=t;if("apiKey"in e||"api_key"in e)return{ok:!1,error:"per-slot API keys are credentials; set AFK_MODEL_<TIER>_API_KEY via `afk config env set` instead of afk.config.json"};if("baseUrl"in e||"base_url"in e)return{ok:!1,error:"per-slot baseUrl is an endpoint-redirect credential vector; set AFK_MODEL_<TIER>_BASE_URL via `afk config env set` instead of afk.config.json"};let n=Xt(e.id);if(!n)return{ok:!1,error:'model binding requires a non-empty "id"'};if(xd(n))return{ok:!1,error:'model binding "id" must not contain control characters'};let r={id:n},o=Xt(e.name);if(o){if(xd(o))return{ok:!1,error:'model binding "name" must not contain control characters'};if(dS.has(o.trim().toLowerCase()))return{ok:!1,error:`model binding "name" must not shadow a built-in alias ("${o}")`};r.name=o}if(e.provider!==void 0&&e.provider!==""){let s=Od(e.provider);if(!s)return{ok:!1,error:'model binding "provider" must be one of: anthropic, openai (aliases: anthropic-direct, openai-compatible)'};r.provider=s}return{ok:!0,value:r}}var ka={opus:Rt.large.id,opus_1m:Rt.large.id,sonnet:Rt.medium.id,sonnet_1m:Rt.medium.id,haiku:Rt.small.id,fable:wa};function ho(t){return t in ka}function fe(t){return ct(t)}import{randomUUID as Fd}from"node:crypto";async function Ld(t){let{token:e,model:n,system:r,user:o,maxTokens:s=64,signal:i,clientFactory:a}=t;if(!e)throw new Error("oneShotCompletion: token required");let l=mo(e),c=Ln(e,l),d=a?a(c):new pS(c),u=Fd(),p=Fd(),f=lt(l,u,p),m=fe(n)??n,g={};Object.keys(f).length>0&&(g.headers=f),i&&(g.signal=i);let h=await d.messages.create({model:m,max_tokens:s,system:r,messages:[{role:"user",content:o}]},Object.keys(g).length>0?g:void 0),y=[];for(let k of h.content)k.type==="text"&&y.push(k.text);let w=y.join("").trim();return w.length===0&&console.warn("oneShotCompletion: response contained no text blocks \u2014 returning empty string"),w}import{randomUUID as ib}from"node:crypto";function De(t){return t==="bypassPermissions"||t==="autonomous"}P();var fS="1h";function Un(t){if(typeof t?.baseUrl=="string"&&t.baseUrl.length>0)return!1;let e=b.AFK_DISABLE_PROMPT_CACHE;if(e===void 0||e.length===0)return!0;let n=e.toLowerCase();return!(n==="1"||n==="true"||n==="yes"||n==="on")}function $n(){let t=b.AFK_PROMPT_CACHE_TTL;return t==="5m"?"5m":t==="1h"?"1h":fS}function yo(t){return Un(t)&&$n()==="1h"}function Nd(t,e){if(t.length===0)return t;let n=t[t.length-1],r=$d(n,e);return r===n?t:[...t.slice(0,-1),r]}function Ud(t,e){if(t.length===0)return t;let n=t[t.length-1],r=mS(n,e);return r===n?t:[...t.slice(0,-1),r]}function mS(t,e){let n=t.content;if(typeof n=="string")return n.length===0?t:{...t,content:[{type:"text",text:n,cache_control:{type:"ephemeral",ttl:e}}]};if(!Array.isArray(n)||n.length===0)return t;let r=n[n.length-1],o=$d(r,e);return o===r?t:{...t,content:[...n.slice(0,-1),o]}}function $d(t,e){return t.type==="thinking"||t.type==="redacted_thinking"?t:{...t,cache_control:{type:"ephemeral",ttl:e}}}var bo=["## Plan mode is active","","File and memory write tools (`write_file`, `edit_file`, `memory_update`, `procedure_write`) are refused at the hook layer.","`bash` runs for read-only investigation (git status/log/diff, ls, cat, grep, find \u2014 chained or not); state-mutating bash (file writes, rm, installs, commits, pushes) is refused while planning. The user has asked you to plan, not yet to act \u2014 exit plan mode to make changes.","Treat this turn as planning work.","","Traverse the shape that matches the work \u2014 skip steps the terrain already covers, do not skip steps the terrain hides:","","  unknown field \u2192 ground the current terrain \u2192 gather missing codebase context \u2192","  research missing external context \u2192 reveal chaos / constraints / risks \u2192","  name the failure geometry \u2192 form a candidate plan \u2192 apply adversarial pressure \u2192 embody the final plan","","Reach for these skills (invoke via the `skill` tool) when the cost of skipping exceeds the cost of dispatching:","  - `ground-state` \u2014 survey git, infra, memory before non-trivial work","  - `gather` \u2014 parallel context-gathering for a code area","  - `research` \u2014 parallel external + local context for the current task","  - `devils-advocate` \u2014 generate alternatives and rank them before committing","  - `shadow-verify` \u2014 independently re-derive load-bearing claims","","Do not declare readiness silently. When the plan is ready, state: chosen approach, risks named, and alternatives considered.","","Then, IF the task requires implementation (writing code or files), call the `exit_plan_mode` tool to present your plan. The user picks how to proceed (approve and implement, or keep planning). After calling it, END YOUR TURN \u2014 on approval you will receive a separate instruction to save the plan to a file and implement it. Do NOT use `ask_question` to ask whether the plan is OK; that is exactly what `exit_plan_mode` does \u2014 use `ask_question` only to resolve open requirement questions first. For research / read-only tasks that need no code changes, do NOT call `exit_plan_mode` \u2014 just answer.","","Manual fallbacks remain: the user can exit with `/plan off` (same save-and-implement handoff), and Shift+Tab advances the permission-mode ring without saving or implementing. Keep the plan concrete and complete enough to act on directly."].join(`
 `);function Aa(t){return t!=="plan"?null:{type:"text",text:bo}}var wo=["## AFK mode is active","","The operator is away from keyboard. Your channel to them is Telegram via the `send_telegram` tool \u2014 not this transcript, which no one is watching live. At the end of each turn, push your terminal state (Done / Blocked / Asking) to Telegram so the operator can review asynchronously.","","Posture \u2014 bounded autonomy, not unchecked action:","  - Proceed autonomously on reversible work. Do not stop to confirm actions you are already authorized to take and can undo (edits, reads, tests, local commits, non-force pushes, installs).","  - At a one-way door \u2014 anything irreversible, externally visible, credential- or payment-touching, or where multiple readings lead to materially different work \u2014 do NOT guess. Push a concise Asking summary to Telegram naming the decision and your recommended default, then stop and end the turn in the Asking state.","  - A mechanical gate refuses high-risk and irreversible operations at the hook layer regardless of this text. Treat a gate refusal as a signal to surface the decision to the operator, not an obstacle to work around.","","Communication discipline:","  - Batch updates. Send a Telegram message at terminal state (and at a genuinely blocking fork), not a play-by-play \u2014 the operator gets a push notification for every message.","  - Keep pushes short and scannable: what happened, what changed, what (if anything) you need. Never paste raw tool output, logs, secrets, or full file contents into a push.","","Exit: the operator returns and runs `/afk off` (or Shift+Tab) to restore default permissions and terminal-channel interaction."].join(`
 `);function Ea(t){return t!=="autonomous"?null:{type:"text",text:wo}}function _a(t,e="all"){switch(e){case"self":return{self:t.getSelf()};case"tools":return{tools:t.getTools()};case"subagents":return{subagents:t.getSubagents()};case"workspace":return{workspace:t.getWorkspace()};default:return{self:t.getSelf(),tools:t.getTools(),subagents:t.getSubagents(),workspace:t.getWorkspace()}}}function Ta(t){return t==="self"||t==="tools"||t==="subagents"||t==="workspace"||t==="all"?t:"all"}function Bn(t){let n=[`- Working directory: ${t.cwd.replace(/[\r\n]/g," ")}`];n.push(`- Date: ${So(t.now??new Date,t.timeZone)}`);let r=typeof t.sessionId=="string"&&t.sessionId.length>0?t.sessionId.slice(0,8):null,o=t.surface&&t.surface!=="unknown"?t.surface:null,s=typeof t.depth=="number"?typeof t.maxDepth=="number"?`depth ${t.depth}/${t.maxDepth}`:`depth ${t.depth}`:null,i=[o,s].filter(a=>typeof a=="string");if(r!==null||i.length>0){let a=["- Session:"];r!==null&&a.push(r),i.length>0&&a.push(`(${i.join(", ")})`),n.push(a.join(" "))}if(t.workspace!==void 0&&t.workspace!==null){let a=t.workspace;if(a.branch!==null||a.headSha!==null){let l=a.branch??"(detached)",c=a.headSha!==null?` @ ${a.headSha}`:"",d;a.dirty===null?d="":a.dirty?d=` (${a.dirtyCount!==null?a.dirtyCount:"?"} dirty)`:d=" (clean)",n.push(`- Workspace: ${l}${c}${d}`)}}return`# Environment
 ${n.join(`

package/dist/telegram.mjs

@@ -865,7 +865,7 @@ Retrying it verbatim will fail the same way. Fix the underlying cause, change th
 
 `).trim()}function UD(t){return(t?.textContent??"").replace(/\s+/g," ").trim().length}async function Ow(t,e){let{JSDOM:n,Readability:r,turndown:o}=await $D(),i=new n(t,{url:e}).window.document,a=(i.title??"").trim(),l=(()=>{try{let p=i.cloneNode(!0);return new r(p).parse()}catch{return null}})();if(l&&typeof l.content=="string"&&l.content.trim().length>0){let p=Mw(o.turndown(l.content)),f=(l.title??"").trim()||a,m=typeof l.length=="number"&&l.length>0?l.length:(l.textContent??"").replace(/\s+/g," ").trim().length;return{title:f,markdown:p,textLength:m,usedFallback:!1}}let c=i.body,d=c?.innerHTML??"",u=Mw(o.turndown(d));return{title:a,markdown:u,textLength:UD(c),usedFallback:!0}}var Xu,Dw=y(()=>{"use strict";Xu=null});function HD(t,e){return new Promise((n,r)=>{if(e?.aborted){r(e.reason??new Error("aborted"));return}let o=()=>{clearTimeout(s),r(e?.reason??new Error("aborted"))},s=setTimeout(()=>{e?.removeEventListener("abort",o),n()},t);e?.addEventListener("abort",o,{once:!0})})}function Fw(t,e,n){let r=Math.min(e*2**t,n);return Math.round(Math.random()*r)}function jD(t,e){let n=t.headers.get("retry-after");if(n===null)return null;let r=Number(n.trim());return!Number.isFinite(r)||r<0?null:Math.min(r*1e3,e)}async function Lw(t,e,n={},r={}){let o=r.retries??3,s=r.baseDelayMs??500,i=r.maxDelayMs??1e4,a=r.sleep??HD,l=n.signal??void 0,c;for(let d=0;d<=o;d++){if(l?.aborted)throw l.reason??new Error("aborted");try{let u=await t(e,n);if(!BD.has(u.status)||d===o)return u;let p=jD(u,i)??Fw(d,s,i);F("[web/retryFetch] retrying",{url:e,attempt:d,status:u.status,waitMs:p}),await u.body?.cancel().catch(()=>{}),await a(p,l)}catch(u){if(l?.aborted||(c=u,d===o))throw u;let p=Fw(d,s,i);F("[web/retryFetch] retrying after error",{url:e,attempt:d,waitMs:p}),await a(p,l)}}throw c??new Error("retryFetch: exhausted without a result")}var BD,Nw=y(()=>{"use strict";fe();BD=new Set([429,502,503,504])});import{BlockList as WD,isIP as Zu}from"node:net";import{lookup as KD}from"node:dns/promises";import{Agent as GD}from"undici";function Uw(){let t=k.AFK_WEB_ALLOW_PRIVATE_HOSTS?.trim().toLowerCase();return t==="1"||t==="true"}function VD(t){return t.startsWith("[")&&t.endsWith("]")?t.slice(1,-1):t}function Qu(t){let e=Zu(t);return e===0?!1:JD.check(t,e===4?"ipv4":"ipv6")}async function Bw(t){return KD(t,{all:!0,verbatim:!0})}async function ep(t,e={}){if(e.allowPrivateHosts??Uw())return{allowed:!0};let n;try{n=new URL(t)}catch{return{allowed:!1,reason:`"${t}" is not a valid absolute URL`}}if(n.protocol!=="http:"&&n.protocol!=="https:")return{allowed:!1,reason:`protocol "${n.protocol}" not supported (http/https only)`};let r=VD(n.hostname),o=(a,l)=>`refusing to fetch ${l} \u2014 internal/private address ${a} (loopback, link-local, cloud metadata, or RFC1918 space). Set AFK_WEB_ALLOW_PRIVATE_HOSTS=1 to allow private-host access.`;if(Zu(r)!==0)return Qu(r)?{allowed:!1,reason:o(r,r)}:{allowed:!0};let s=e.lookupFn??Bw,i;try{i=await s(r)}catch{return{allowed:!0}}for(let a of i)if(Qu(a.address))return{allowed:!1,reason:o(a.address,`${r} (resolved)`)};return{allowed:!0}}async function No(t,e={}){let n=await ep(t,e);if(!n.allowed)throw new it(n.reason)}async function Ca(t,e,n={},r={}){let o={...r.lookupFn!==void 0?{lookupFn:r.lookupFn}:{},...r.allowPrivateHosts!==void 0?{allowPrivateHosts:r.allowPrivateHosts}:{}},s=e;for(let i=0;i<=$w;i++){await No(s,o);let a={...n,redirect:"manual",...t===globalThis.fetch&&!(r.allowPrivateHosts??Uw())?{dispatcher:YD}:{}},l=await Lw(t,s,a,r.retry??{});if(!XD.has(l.status))return l;let c=l.headers.get("location");if(c===null||c.trim()==="")return l;let d;try{d=new URL(c,l.url||s).toString()}catch{return l}await l.body?.cancel().catch(()=>{}),s=d}throw new it(`too many redirects (>${$w}) starting from ${e}`)}var qD,zD,JD,it,YD,$w,XD,tp=y(()=>{"use strict";N();Nw();qD=[["0.0.0.0",8],["10.0.0.0",8],["100.64.0.0",10],["127.0.0.0",8],["169.254.0.0",16],["172.16.0.0",12],["192.168.0.0",16]],zD=[["::",96],["64:ff9b::",96],["fc00::",7],["fe80::",10]],JD=(()=>{let t=new WD;for(let[e,n]of qD)t.addSubnet(e,n,"ipv4");for(let[e,n]of zD)t.addSubnet(e,n,"ipv6");return t})(),it=class extends Error{constructor(e){super(e),this.name="EgressBlockedError"}};YD=new GD({connect:{lookup(t,e,n){Bw(t).then(r=>{let o=r.find(i=>Qu(i.address));if(o!==void 0){n(new it(`refusing to connect to ${t} (resolved) \u2014 internal/private address ${o.address} (loopback, link-local, cloud metadata, or RFC1918 space). Set AFK_WEB_ALLOW_PRIVATE_HOSTS=1 to allow private-host access.`),"",0);return}let s=r[0];if(s===void 0){n(new Error(`DNS lookup returned no addresses for ${t}`),"",0);return}n(null,s.address,Zu(s.address))},r=>n(r,"",0))}}});$w=20,XD=new Set([301,302,303,307,308])});import{readFileSync as QD}from"node:fs";import{join as ZD}from"path";function eF(t){let n=t.replace(/[.+?()[\]{}/\\^$|]/g,"\\$&").replace(/\*/g,"[^.]*");return new RegExp(`^${n}$`,"i")}function Hw(t,e){return eF(e).test(t)}function rF(t,e){if(t!==void 0){let n=t.trim().toLowerCase();if(n==="1"||n==="true"||n==="yes")return!0;if(n==="0"||n==="false"||n==="no")return!1}if(e!==void 0){if(tF.has(e))return!0;if(nF.has(e))return!1}return!1}function jw(t){return t===void 0||t.trim()===""?[]:t.split(",").map(e=>e.trim().toLowerCase()).filter(e=>e.length>0)}function oF(t){if(t===void 0||t===""||t==="playwright")return"playwright";throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${t}`)}function Ww(t){let e=t===void 0||t.trim()===""?"default":t.trim();return ad(e),e}function sF(t){if(t===void 0)return!1;let e=t.trim().toLowerCase();return e==="1"||e==="true"||e==="yes"}function iF(t){try{return QD(t,"utf8")}catch(e){if(e.code==="ENOENT")return;throw e}}function aF(t,e){let n={...t};if(typeof e.headless=="boolean"&&(n.headless=e.headless),Array.isArray(e.allowedDomains)&&(n.allowedDomains=e.allowedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),Array.isArray(e.blockedDomains)&&(n.blockedDomains=e.blockedDomains.filter(r=>typeof r=="string").map(r=>r.trim().toLowerCase()).filter(r=>r.length>0)),typeof e.domSnapshots=="boolean"&&(n.domSnapshots=e.domSnapshots),e.backend==="playwright")n.backend="playwright";else if(e.backend!==void 0)throw new Error(`AFK_BROWSER_BACKEND: only "playwright" is supported in Phase 1, got: ${String(e.backend)}`);return typeof e.defaultProfile=="string"&&(n.defaultProfile=Ww(e.defaultProfile)),n}function Kw(t){let e=t?.env??k,n=t?.readFileSync??iF,r=t?.surface??e.AGENT_SURFACE,o=rF(e.AFK_BROWSER_HEADLESS,r),s=jw(e.AFK_BROWSER_ALLOWED_DOMAINS),i=jw(e.AFK_BROWSER_BLOCKED_DOMAINS),a=sF(e.AFK_BROWSER_DOM_SNAPSHOTS),l=oF(e.AFK_BROWSER_BACKEND),c=Ww(e.AFK_BROWSER_DEFAULT_PROFILE),d={headless:o,allowedDomains:s,blockedDomains:i,domSnapshots:a,backend:l,configPath:null,defaultProfile:c},u=e.AFK_BROWSER_CONFIG,p=u!==void 0&&u.trim()!==""?u.trim():ZD(_t(),"browser.json"),f=n(p);if(f===void 0)return d;let m;try{m=JSON.parse(f)}catch(h){throw new Error(`Failed to parse browser config at ${p}: ${String(h)}`)}if(typeof m!="object"||m===null||Array.isArray(m))throw new Error(`Browser config at ${p} must be a JSON object`);let g=aF(d,m);return g.configPath=p,g}function Ia(t,e){let n;try{n=new URL(t).hostname.toLowerCase()}catch{return{allowed:!1,reason:`invalid URL: ${t}`}}for(let r of e.blockedDomains)if(Hw(n,r))return{allowed:!1,reason:`blocked by AFK_BROWSER_BLOCKED_DOMAINS: ${r}`};return e.allowedDomains.length>0&&!e.allowedDomains.some(o=>Hw(n,o))?{allowed:!1,reason:"not in AFK_BROWSER_ALLOWED_DOMAINS"}:{allowed:!0}}var tF,nF,Pa=y(()=>{"use strict";N();j();tF=new Set(["daemon","subagent","telegram","afk"]),nF=new Set(["repl","interactive","cli"])});import{existsSync as lF,readFileSync as cF}from"node:fs";import{createRequire as dF}from"node:module";import{dirname as uF,join as pF}from"node:path";function zw(t){if(typeof t=="string")return t;let e=[],n=t;for(let r=0;r<mF&&n instanceof Error;r++)e.push(n.message),n=n.cause;return e.length>0?e.join(" | "):String(t)}function Me(t){let e=zw(t);return qw.some(n=>e.includes(n))}function gF(){try{let e=dF(import.meta.url).resolve("playwright/package.json"),n=JSON.parse(cF(e,"utf8"));if(typeof n!="object"||n===null)return;let r=n.bin,o=typeof r=="string"?r:typeof r=="object"&&r!==null?r.playwright:void 0;if(typeof o!="string"||o.length===0)return;let s=pF(uF(e),o);return lF(s)?`node ${/\s/.test(s)?`"${s}"`:s} install chromium`:void 0}catch{return}}function $o(){return Gw??=gF()??fF,Gw}function np(t){return t.includes("install chromium")}function et(t,e){let n=zw(t),r=e?.latched===!0?` ${hF}`:"";if(n.includes("Executable doesn't exist")){let o="";return e?.headless===!0?o=" This launch was headless, which needs the `chromium_headless_shell-*` build.":e?.headless===!1&&(o=" This launch was headed, which needs the full `chromium-*` build \u2014 the headless shell alone does not satisfy it."),`browser tools require the Playwright chromium binary. Install via: ${$o()}.${o}${r}`}return`browser tools require the optional \`playwright\` peer dependency. Install via: pnpm add playwright (then ${$o()}). Or pick a different tool.${r}`}function rp(t,e,n=!1){if(!Me(t))return t;let r=t instanceof Error?t.message:String(t);return new Error(`${r}
 
-${et(t,{headless:e,latched:n})}`,{cause:t})}var qw,fF,mF,Gw,hF,op=y(()=>{"use strict";qw=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],fF="pnpm exec playwright install chromium",mF=4;hF="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Fn from"node:fs";import Ma from"node:path";import{randomBytes as yF}from"node:crypto";import{chromium as bF}from"playwright";function wF(){try{return"5.84.11"}catch{}try{let t=Ma.resolve(import.meta.dirname,"../../../package.json"),e=Fn.readFileSync(t,"utf8"),n=JSON.parse(e);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var SF,Oa,Jw=y(()=>{"use strict";op();j();fe();SF=wF(),Oa=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(e){this.config=e}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(e){this.launchFailure={error:e}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=bF.launch({headless:this.config.headless}).then(e=>(this.browser=e,this.launchPromise=void 0,this.clearLaunchFailure(),e)).catch(e=>{this.launchPromise=void 0;let n=rp(e,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(e){let n=this.sessions.get(e);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),s=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),i={context:s,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(e,i),s}async ensurePage(e){let n=this.sessions.get(e);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(e);let r=this.sessions.get(e);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${e}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",s=>{s.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",s=>{s.isNavigationRequest()&&s.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",s=>{s.frame()===o.mainFrame()&&s.request().isNavigationRequest()&&(r.lastHttpStatus=s.status())}),o.on("dialog",s=>{r.openDialog=s}),o}getPage(e){return this.sessions.get(e)?.page}async renderHtml(e,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),s;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){s=l,await a.abort("blockedbyclient")}});let i=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",i,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(e,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(p){throw s??p}if(s!==void 0)throw s;let c=await a.content();if(s!==void 0)throw s;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",i),await o.close().catch(()=>{})}}getConsoleErrorCount(e){return this.sessions.get(e)?.consoleErrors??0}getLastHttpStatus(e){return this.sessions.get(e)?.lastHttpStatus??null}hasOpenDialog(e){return this.sessions.get(e)?.openDialog!==void 0}async dismissDialog(e,n=!0){let r=this.sessions.get(e);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(e){this.clearLaunchFailure();let n=this.sessions.get(e);n!==void 0&&(this.sessions.delete(e),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let e=[...this.sessions.keys()];if(await Promise.all(e.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${SF}`}}loadStorageState(e){let n=ld(e);try{if(!Fn.existsSync(n))return;let r=JSON.parse(Fn.readFileSync(n,"utf8"));return F("[browser/vault] restored session",{profile:e,file:n}),r}catch(r){F("[browser/vault] ignoring unreadable vault",{profile:e,file:n,err:r});return}}async saveStorageState(e,n){try{let r=ld(e);if(!Fn.existsSync(r))return;let o=await n.storageState(),s=Ma.join(Ma.dirname(r),`.${Ma.basename(r)}.${process.pid}.${yF(4).toString("hex")}.tmp`);Fn.writeFileSync(s,JSON.stringify(o),{mode:384}),Fn.chmodSync(s,384),Fn.renameSync(s,r),F("[browser/vault] saved session",{profile:e,file:r})}catch(r){F("[browser/vault] save failed",{profile:e,err:r})}}}});import{createHash as vF}from"crypto";function Vw(t){return!!(t.role==="textbox"&&t.kind==="password"||t.label&&kF.test(t.label))}function Yw(t){return vF("sha256").update(t,"utf8").digest("hex").slice(0,8)}function Xw(t){let e=t.replace(/\s+/g," ").trim();return e.length<=80?e:e.slice(0,77)+"..."}var kF,Da=y(()=>{"use strict";kF=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as EF}from"node:crypto";function AF(t){return t?t.replace(/\s+/g," ").trim().slice(0,200):""}function _F(t,e,n){return`el_${EF("sha256").update(`${t}:${e}:${n}`).digest("hex").slice(0,6)}`}function TF(t){let e=t.replace(/\s+/g," ").trim(),n=4e3;return e.length<=n?e:e.slice(0,n)+"\u2026[truncated]"}function Qw(t){return t.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function eS(t,e){let n=t.role??"",r=t.name??"";Zw.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&e.push(t);for(let s of t.children??[])eS(s,e)}async function xF(t){return t.evaluate(e=>{let n=Array.from(document.querySelectorAll(e)),r=[];for(let o of n){let s=o.getBoundingClientRect(),i=o;if(s.width===0&&s.height===0){let d=window.getComputedStyle(i);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(s.left),y:Math.round(s.top),w:Math.round(s.width),h:Math.round(s.height)}})}return r},tS).catch(()=>[])}async function RF(t){return t.evaluate(e=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(e)),o=[];for(let s of r){let i=s.tagName.toLowerCase(),a=s.getAttribute("role")??"",l=s.getAttribute("aria-label")??s.getAttribute("placeholder")??(s.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[i]??"");if(i==="input"){let g=s.type;g==="checkbox"?c="checkbox":g==="radio"?c="radio":g==="button"||g==="submit"||g==="reset"?c="button":g==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in s?s.value:void 0,u=d!==void 0?String(d):void 0,p=s.disabled??!1,f=i==="input"?s.checked:void 0,m={role:c,name:l,disabled:p};u!==void 0&&(m.value=u),f!==void 0&&(m.checked=f),o.push(m)}return o},tS).catch(()=>[])}function CF(t){let n=t.accessibility;return n!==null&&typeof n=="object"?n:null}async function Fa(t,e){let n=e.maxElements??80,r=e.includeHidden??!1,o=[],s=CF(t),i=s?s.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=xF(t),l=t.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(t.url()),d=t.title().catch(()=>""),[u,p,f,m,g]=await Promise.all([i,a,l,c,d]),h,w=!1;u!==null?(h=[],eS(u,h)):(o.push("observation skipped accessibility tree (returned null)"),w=!0,h=(await RF(t)).filter(L=>Zw.has(L.role??"")));let v=new Map;for(let I of p){let L=Qw(I.name),q=v.get(L);(!q||q.bbox.w===0&&I.bbox.w>0)&&v.set(L,I)}let A=h.map(I=>({ax:I,dom:v.get(Qw(I.name??""))})),E=r?A:A.filter(I=>I.dom?I.dom.bbox.w>0||I.dom.bbox.h>0:!0);E.sort((I,L)=>{let q=I.dom?.bbox.y??0,D=L.dom?.bbox.y??0;if(q!==D)return q-D;let B=I.dom?.bbox.x??0,$=L.dom?.bbox.x??0;return B-$}),E.length>200&&o.push("page has 200+ interactive elements; consider scoping");let _=E.slice(0,n).map((I,L)=>{let q=I.ax.role??"generic",D=I.ax.name??"",B=_F(q,D,L),$=I.dom?.bbox??{x:0,y:0,w:0,h:0},P=I.dom?.type??null,O=null;I.ax.value!==void 0&&I.ax.value!==null&&(O=String(I.ax.value)),I.ax.checked!==void 0&&(O=String(I.ax.checked)),Vw({role:q,kind:P})&&(O="[redacted]");let H={disabled:I.ax.disabled??!1};I.ax.checked!==void 0&&(H.checked=I.ax.checked===!0||I.ax.checked==="mixed"),I.ax.selected!==void 0&&(H.selected=I.ax.selected),I.ax.expanded!==void 0&&(H.expanded=I.ax.expanded);let Y;I.dom?.testId?Y=`[data-testid="${I.dom.testId}"]`:I.dom?.id&&(Y=`#${I.dom.id}`);let ee={id:B,role:q,label:AF(D),kind:P,value:O,state:H,bbox:$};return Y!==void 0&&(ee.selector=Y),ee}),R="idle";try{let I=await t.evaluate(()=>document.readyState);I==="loading"?R="loading":I==="interactive"?R="navigating":R="idle"}catch{R="navigating"}R!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),w&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let S=TF(f),x=`obs_${e.observationCounter.toString(36)}`,C=new Date().toISOString();return{observationId:x,url:m,title:g,textSummary:S,interactive:_,status:{httpStatus:e.httpStatus??null,loadingState:R,hasDialog:e.hasDialog??!1,consoleErrors:e.consoleErrors??0},warnings:o,screenshotPath:e.screenshotPath??null,capturedAt:C}}var Zw,tS,nS=y(()=>{"use strict";Da();Zw=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);tS="a[href], button, input, select, textarea, [role], [tabindex], label"});async function rS(t,e){try{let n=await t.nth(e).evaluate(i=>{let a=i,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${e}`,o=0;for(let i=0;i<r.length;i++)o=o*31+r.charCodeAt(i)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function sp(t,e){let n=Math.min(e,5);return(await Promise.all(Array.from({length:n},(o,s)=>rS(t,s)))).filter(o=>o!==null)}async function IF(t){let e=new Set,n=[];for(let{loc:r,count:o}of t)for(let s=0;s<o;s++){let i;try{i=await r.nth(s).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}e.has(i)||(e.add(i),n.push({key:i,locator:r,index:s}))}return n}async function ip(t,e,n){switch(e.kind){case"element_id":return PF(t,e,n);case"selector":return MF(t,e);case"semantic":return OF(t,e)}}async function PF(t,e,n){let r=n.get(e.elementId);if(r===void 0)return{outcome:"not_found",query:e};if(r.selector!==void 0){let l=t.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=t.getByRole(r.role,{name:r.label,exact:!0}),s=await o.count();if(s===0)return{outcome:"not_found",query:e};if(s===1)return{outcome:"resolved",locator:o};let i=await sp(o,s);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:i}}async function MF(t,e){let n=t.locator(e.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:e};if(r===1)return{outcome:"resolved",locator:n};let o=await sp(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${e.selector}]`},candidates:o}}async function OF(t,e){return e.role!==void 0?DF(t,e.text,e.role):FF(t,e.text,e)}async function DF(t,e,n){let r=t.getByRole(n,{name:e}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:e,role:n}};if(o===1)return{outcome:"resolved",locator:r};let s=await sp(r,o);return{outcome:"ambiguous_target",query:{text:e,role:n},candidates:s}}async function FF(t,e,n){let r=t.getByRole("button",{name:e}),o=t.getByRole("link",{name:e}),s=t.getByLabel(e,{exact:!1}),[i,a,l]=await Promise.all([r.count(),o.count(),s.count()]);if(i+a+l===0)return{outcome:"not_found",query:n};let d=[];i>0&&d.push({loc:r,count:i}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:s,count:l});let u=await IF(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let g=u[0];return g===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:g.locator.nth(g.index)}}let p=u.slice(0,5),f=[];for(let g=0;g<p.length;g++){let h=p[g];if(h===void 0)continue;let w=await rS(h.locator,h.index);if(w!==null){let v=`${w.role}:${w.label}:${g}`,A=0;for(let E=0;E<v.length;E++)A=A*31+v.charCodeAt(E)>>>0;f.push({...w,id:`el_${A.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:e},candidates:f}}var oS=y(()=>{"use strict"});async function ap(t,e,n,r){let o=t.url();if(o===n)return null;let s=Ia(o,e);if(s.allowed)return null;try{await t.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:s.reason}}var sS=y(()=>{"use strict";Pa()});import{randomBytes as LF}from"crypto";import{mkdir as NF,stat as $F,writeFile as UF}from"fs/promises";import{join as lp}from"path";import{gzip as BF}from"zlib";import{promisify as HF}from"util";function jF(t){return lp(ti(t),"browser")}function WF(t){return lp(jF(t),"screenshots")}function KF(){return new Date().toISOString().replace(/[:.]/g,"-")}function GF(){return LF(3).toString("hex")}async function cp(t,e,n){if(e.length>iS)throw new Error(`writeScreenshotSidecar: buffer exceeds ${iS} byte cap (received ${e.length} bytes). Refusing to write oversized screenshot.`);let r=WF(t);await NF(r,{recursive:!0});let o=`${KF()}-${GF()}-${n}.png`,s=lp(r,o);await UF(s,e);let{size:i}=await $F(s);return{path:s,bytes:i}}var d8,iS,aS=y(()=>{"use strict";j();Da();d8=HF(BF);iS=5*1024*1024});var cS={};ed(cS,{PlaywrightProvider:()=>dp});function lS(t){switch(t.kind){case"semantic":return t.role!==void 0?`semantic('${t.text}', role='${t.role}')`:`semantic('${t.text}')`;case"element_id":return`element_id(${t.elementId})`;case"selector":return`selector(${t.selector})`}}var dp,dS=y(()=>{"use strict";Jw();nS();oS();Pa();sS();aS();dp=class{name="playwright";config;launcher;sessions=new Map;constructor(e){this.config=e,this.launcher=new Oa(e)}async open(e){let n=Ia(e.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:e.url,reason:n.reason};let{sessionId:r}=e,o=await this.launcher.ensurePage(r),s=this.ensureSessionState(r),i=null,a=null;try{await o.goto(e.url,{timeout:e.timeoutMs??3e4,waitUntil:e.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await ap(o,this.config,e.url,()=>this.close({sessionId:r}));if(u!==null)return u}(e.screenshot===!0||a!==null)&&(i=await this.captureScreenshot(o,r,"browser_open")),s.observationCounter+=1;let d=await Fa(o,{observationCounter:s.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(s,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),s=null;e.screenshot===!0&&(s=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let i=await Fa(r,{observationCounter:o.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:e.includeHidden,maxElements:e.maxElements});return this.updateSessionFromObservation(o,i.interactive,i.url,i.title,"browser_observe"),i}async act(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),s=r.url(),i=e.timeoutMs??3e4,a=await ip(r,e.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${lS(e.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(e.action){case"click":await l.click({timeout:i});break;case"fill":await l.fill(e.value??"");break;case"press":await l.press(e.value??"");break;case"select":await l.selectOption(e.value??"");break;case"hover":await l.hover({timeout:i});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:i});break;case"wait_for":await l.waitFor({timeout:i,state:"visible"});break}};try{await d()}catch(g){if(g instanceof Error&&/navigation|net::ERR/i.test(g.message))try{await d()}catch(h){c=h}else c=g}let u=await ap(r,this.config,s,()=>this.close({sessionId:n}));if(u!==null)return u;let p=null;(e.screenshot===!0||c!==null)&&(p=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await Fa(r,{observationCounter:o.observationCounter,screenshotPath:p,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),m=`browser_act:${e.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,m),c!==null)throw c;return f}async render(e){return this.launcher.renderHtml(e.url,{timeoutMs:e.timeoutMs??3e4,waitUntil:e.waitFor??"load",signal:e.signal,requestGuard:e.requestGuard})}async screenshot(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),s;if(e.target!==void 0){let d=await ip(r,e.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${lS(e.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");s=await d.locator.screenshot()}else s=await r.screenshot({fullPage:e.fullPage??!1});let{path:i,bytes:a}=await cp(n,s,"browser_screenshot"),l=0,c=0;if(e.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:i,bytes:a,width:l,height:c,dataBase64:s.toString("base64"),mediaType:"image/png"}}async extract(e){throw new Error("browser_extract not implemented in Phase 1")}async close(e){await this.launcher.closeSession(e.sessionId),this.sessions.delete(e.sessionId)}describe(e){let n=this.sessions.get(e);if(n===void 0)return null;let r=this.launcher.getPage(e);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(e){let n=this.sessions.get(e);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(e,r),r}updateSessionFromObservation(e,n,r,o,s){e.knownElements=new Map(n.map(i=>[i.id,i])),e.currentUrl=r,e.currentTitle=o,e.lastAction=s,e.lastActionAt=new Date().toISOString()}async captureScreenshot(e,n,r){try{let o=await e.screenshot({fullPage:!1}),{path:s}=await cp(n,o,r);return s}catch{return null}}}});var Nn={};ed(Nn,{__resetBrowserRegistryForTests:()=>YF,browserProviderActive:()=>JF,closeBrowserProvider:()=>up,getBrowserProvider:()=>zF,peekBrowserProvider:()=>VF});function uS(){Promise.resolve(up()).then(()=>{process.exit(130)})}function pS(){Promise.resolve(up()).then(()=>{process.exit(143)})}function fS(){St=null}function qF(){La||(process.on("SIGINT",uS),process.on("SIGTERM",pS),process.on("exit",fS),La=!0)}function mS(){La&&(process.removeListener("SIGINT",uS),process.removeListener("SIGTERM",pS),process.removeListener("exit",fS),La=!1)}async function zF(t){return St!==null?St:(Ln!==null||(Ln=(async()=>{let{PlaywrightProvider:e}=await Promise.resolve().then(()=>(dS(),cS)),n=Kw(t),r=new e(n);return qF(),St=r,Ln=null,r})()),Ln)}async function up(){if(St===null)return;let t=St;St=null,Ln=null,mS(),await t.shutdown()}function JF(){return St!==null}function VF(){return St}function YF(){St=null,Ln=null,mS()}var St,Ln,La,$n=y(()=>{"use strict";Pa();St=null,Ln=null,La=!1});async function gS(t,e){try{return await Ow(t,e)}catch(n){return F("[web/scrape] extraction failed",{url:e,err:n}),{title:"",markdown:"",textLength:0,usedFallback:!0}}}async function nL(t,e){let{getBrowserProvider:n}=await Promise.resolve().then(()=>($n(),Nn));return(await n()).render({url:t,timeoutMs:e.timeoutMs,signal:e.signal,requestGuard:e.requestGuard})}async function hS(t,e){let n=e.fetchFn??globalThis.fetch,r=e.renderFn??nL,o=e.lookupFn!==void 0?{lookupFn:e.lookupFn}:{},s=null,i=t,a=null,l=null;try{let d=await Ca(n,t,{headers:tL,signal:e.signal},o);a=d.status,i=d.url||t;let u=d.headers.get("content-type")??"";if(d.ok){if(eL.test(u))throw new Error(`web_scrape markdown mode received binary content (${u.split(";")[0]}). Use mode: "raw" to fetch the bytes, or a different tool.`);let p=await d.text();if(ZF.test(u)&&!QF.test(u))return{title:"",markdown:p.trim(),finalUrl:i,usedRender:!1};if(s=await gS(p,i),e.signal.aborted)throw e.signal.reason??new Error("aborted")}}catch(d){if(e.signal.aborted||d instanceof it||d instanceof Error&&d.message.startsWith("web_scrape markdown mode received binary"))throw d;l=d}if(!(s===null||s.textLength<200)&&s!==null)return{title:s.title,markdown:s.markdown,finalUrl:i,usedRender:!1};try{await No(t,o);let d=await r(t,{timeoutMs:e.timeoutMs,signal:e.signal,requestGuard:p=>No(p,o)});d.finalUrl!==t&&/^https?:\/\//i.test(d.finalUrl)&&await No(d.finalUrl,o);let u=await gS(d.html,d.finalUrl);if(e.signal.aborted)throw e.signal.reason??new Error("aborted");if(s===null||u.textLength>=s.textLength)return{title:u.title,markdown:u.markdown,finalUrl:d.finalUrl,usedRender:!0}}catch(d){if(e.signal.aborted||d instanceof it)throw d;if(s===null){let u=d instanceof Error?d.message:String(d),p=l instanceof Error?l.message:`HTTP ${a??"error"}`,f=new Error(`web_scrape could not retrieve ${t}: fetch failed (${p}) and render failed (${u}).`);throw f.cause=d,f}}if(s!==null)return{title:s.title,markdown:s.markdown,finalUrl:i,usedRender:!1};throw new Error(`web_scrape could not retrieve any content from ${t} (HTTP ${a??"error"}).`)}var QF,ZF,eL,tL,yS=y(()=>{"use strict";Dw();tp();fe();QF=/(text\/html|application\/xhtml\+xml)/i,ZF=/(application\/json|\/xml|\+xml|text\/|application\/(java|ecma)script|csv)/i,eL=/(image\/|audio\/|video\/|application\/pdf|application\/zip|application\/octet-stream|font\/)/i,tL={"User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/web_scrape",Accept:"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"}});function sL(t){let e=t.fetchFn??globalThis.fetch;return{name:"exa",async search(n,{limit:r,signal:o}){let s=await e(rL,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","x-api-key":t.apiKey,"User-Agent":"agent-afk/web_scrape"},body:JSON.stringify({query:n,type:"auto",numResults:Math.min(Math.max(r,1),oL),contents:{highlights:{numSentences:3,highlightsPerUrl:1}}}),signal:o});if(!s.ok){let l="";try{let d=await s.text(),u=hr(d);u&&(l=`: ${u.length>200?u.slice(0,200)+"\u2026":u}`)}catch{}let c=s.statusText?` ${s.statusText}`:"";throw new Error(`Exa Search HTTP ${s.status}${c}${l}`)}let i;try{i=await s.json()}catch(l){throw new Error(`Exa Search response was not JSON: ${l instanceof Error?l.message:String(l)}`)}return(i.results??[]).slice(0,r).map(l=>({title:(l.title??"").trim()||"(untitled)",url:l.url??"",description:(l.highlights?.[0]??"").trim()})).filter(l=>l.url.length>0)}}}function bS(t){return t.exaApiKey!==void 0&&t.exaApiKey.trim()!==""?sL({apiKey:t.exaApiKey,fetchFn:t.fetchFn}):{error:'web_scrape search mode requires a search backend. Set EXA_API_KEY (free tier at https://exa.ai) to enable it. Use mode: "markdown" to read a known URL, or mode: "raw" for a direct fetch.'}}function wS(t,e){if(e.length===0)return`# Search results for "${t}"
+${et(t,{headless:e,latched:n})}`,{cause:t})}var qw,fF,mF,Gw,hF,op=y(()=>{"use strict";qw=["Cannot find package","ERR_MODULE_NOT_FOUND","Executable doesn't exist"],fF="pnpm exec playwright install chromium",mF=4;hF="This session already latched the failure, so browser tools keep fast-failing with this same error \u2014 after installing, call browser_close once to retry."});import Fn from"node:fs";import Ma from"node:path";import{randomBytes as yF}from"node:crypto";import{chromium as bF}from"playwright";function wF(){try{return"5.84.12"}catch{}try{let t=Ma.resolve(import.meta.dirname,"../../../package.json"),e=Fn.readFileSync(t,"utf8"),n=JSON.parse(e);return typeof n.version=="string"?n.version:"unknown"}catch{return"unknown"}}var SF,Oa,Jw=y(()=>{"use strict";op();j();fe();SF=wF(),Oa=class{config;browser;sessions=new Map;launchPromise;launchFailure;shutdownComplete=!1;constructor(e){this.config=e}clearLaunchFailure(){this.launchFailure=void 0}latchLaunchFailure(e){this.launchFailure={error:e}}async ensureBrowser(){if(this.browser!==void 0&&this.browser.isConnected())return this.browser;if(this.launchFailure!==void 0)throw this.launchFailure.error;return this.browser!==void 0&&!this.browser.isConnected()&&(this.browser=void 0,this.launchPromise=void 0),this.launchPromise!==void 0?this.launchPromise:(this.launchPromise=bF.launch({headless:this.config.headless}).then(e=>(this.browser=e,this.launchPromise=void 0,this.clearLaunchFailure(),e)).catch(e=>{this.launchPromise=void 0;let n=rp(e,this.config.headless,!0);throw this.latchLaunchFailure(n),n}),this.launchPromise)}isBrowserActive(){return this.browser!==void 0&&this.browser.isConnected()}async ensureContext(e){let n=this.sessions.get(e);if(n!==void 0)return n.context;let r=await this.ensureBrowser(),o=this.loadStorageState(this.config.defaultProfile),s=await r.newContext({...this.contextOptions(),...o!==void 0?{storageState:o}:{}}),i={context:s,page:void 0,consoleErrors:0,lastHttpStatus:null,openDialog:void 0};return this.sessions.set(e,i),s}async ensurePage(e){let n=this.sessions.get(e);if(n!==void 0&&n.page!==void 0)return n.page;await this.ensureContext(e);let r=this.sessions.get(e);if(r===void 0)throw new Error(`[BrowserLauncher] session entry disappeared for sessionId=${e}`);if(r.page!==void 0)return r.page;let o=await r.context.newPage();return r.page=o,o.on("console",s=>{s.type()==="error"&&(r.consoleErrors+=1)}),o.on("request",s=>{s.isNavigationRequest()&&s.frame()===o.mainFrame()&&(r.lastHttpStatus=null)}),o.on("response",s=>{s.frame()===o.mainFrame()&&s.request().isNavigationRequest()&&(r.lastHttpStatus=s.status())}),o.on("dialog",s=>{r.openDialog=s}),o}getPage(e){return this.sessions.get(e)?.page}async renderHtml(e,n){let o=await(await this.ensureBrowser()).newContext(this.contextOptions()),s;n.requestGuard!==void 0&&await o.route("**/*",async a=>{try{await n.requestGuard(a.request().url()),await a.continue()}catch(l){s=l,await a.abort("blockedbyclient")}});let i=()=>{o.close().catch(()=>{})};if(n.signal?.aborted===!0)throw await o.close().catch(()=>{}),new Error("render aborted");n.signal!==void 0&&n.signal.addEventListener("abort",i,{once:!0});try{let a=await o.newPage(),l;try{l=await a.goto(e,{timeout:n.timeoutMs,waitUntil:n.waitUntil})}catch(p){throw s??p}if(s!==void 0)throw s;let c=await a.content();if(s!==void 0)throw s;let d=a.url(),u=l!==null?l.status():null;return{html:c,finalUrl:d,httpStatus:u}}finally{n.signal!==void 0&&n.signal.removeEventListener("abort",i),await o.close().catch(()=>{})}}getConsoleErrorCount(e){return this.sessions.get(e)?.consoleErrors??0}getLastHttpStatus(e){return this.sessions.get(e)?.lastHttpStatus??null}hasOpenDialog(e){return this.sessions.get(e)?.openDialog!==void 0}async dismissDialog(e,n=!0){let r=this.sessions.get(e);if(r===void 0||r.openDialog===void 0)return;let o=r.openDialog;r.openDialog=void 0,n?await o.accept():await o.dismiss()}async closeSession(e){this.clearLaunchFailure();let n=this.sessions.get(e);n!==void 0&&(this.sessions.delete(e),await this.saveStorageState(this.config.defaultProfile,n.context),n.page!==void 0&&await n.page.close().catch(()=>{}),await n.context.close().catch(()=>{}))}async shutdown(){if(this.clearLaunchFailure(),this.shutdownComplete)return;this.shutdownComplete=!0;let e=[...this.sessions.keys()];if(await Promise.all(e.map(n=>this.closeSession(n))),this.browser!==void 0){let n=this.browser;this.browser=void 0,await n.close().catch(()=>{})}}activeSessions(){return this.sessions.size}contextOptions(){return{viewport:{width:1280,height:800},userAgent:`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/${SF}`}}loadStorageState(e){let n=ld(e);try{if(!Fn.existsSync(n))return;let r=JSON.parse(Fn.readFileSync(n,"utf8"));return F("[browser/vault] restored session",{profile:e,file:n}),r}catch(r){F("[browser/vault] ignoring unreadable vault",{profile:e,file:n,err:r});return}}async saveStorageState(e,n){try{let r=ld(e);if(!Fn.existsSync(r))return;let o=await n.storageState(),s=Ma.join(Ma.dirname(r),`.${Ma.basename(r)}.${process.pid}.${yF(4).toString("hex")}.tmp`);Fn.writeFileSync(s,JSON.stringify(o),{mode:384}),Fn.chmodSync(s,384),Fn.renameSync(s,r),F("[browser/vault] saved session",{profile:e,file:r})}catch(r){F("[browser/vault] save failed",{profile:e,err:r})}}}});import{createHash as vF}from"crypto";function Vw(t){return!!(t.role==="textbox"&&t.kind==="password"||t.label&&kF.test(t.label))}function Yw(t){return vF("sha256").update(t,"utf8").digest("hex").slice(0,8)}function Xw(t){let e=t.replace(/\s+/g," ").trim();return e.length<=80?e:e.slice(0,77)+"..."}var kF,Da=y(()=>{"use strict";kF=/password|secret|token|api[_-]?key|otp|2fa/i});import{createHash as EF}from"node:crypto";function AF(t){return t?t.replace(/\s+/g," ").trim().slice(0,200):""}function _F(t,e,n){return`el_${EF("sha256").update(`${t}:${e}:${n}`).digest("hex").slice(0,6)}`}function TF(t){let e=t.replace(/\s+/g," ").trim(),n=4e3;return e.length<=n?e:e.slice(0,n)+"\u2026[truncated]"}function Qw(t){return t.replace(/\s+/g," ").trim().toLowerCase().slice(0,100)}function eS(t,e){let n=t.role??"",r=t.name??"";Zw.has(n)&&(n!=="searchbox"&&n!=="spinbutton"||r!=="")&&e.push(t);for(let s of t.children??[])eS(s,e)}async function xF(t){return t.evaluate(e=>{let n=Array.from(document.querySelectorAll(e)),r=[];for(let o of n){let s=o.getBoundingClientRect(),i=o;if(s.width===0&&s.height===0){let d=window.getComputedStyle(i);if(d.display==="none"||d.visibility==="hidden")continue}let a=o.tagName.toLowerCase(),l=o.getAttribute("aria-label")??o.getAttribute("placeholder")??(o.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a==="input"?o.type||null:o.getAttribute("type");r.push({name:l,tagName:a,type:c,id:o.id||null,testId:o.getAttribute("data-testid"),bbox:{x:Math.round(s.left),y:Math.round(s.top),w:Math.round(s.width),h:Math.round(s.height)}})}return r},tS).catch(()=>[])}async function RF(t){return t.evaluate(e=>{let n={button:"button",a:"link",input:"textbox",textarea:"textbox",select:"combobox"},r=Array.from(document.querySelectorAll(e)),o=[];for(let s of r){let i=s.tagName.toLowerCase(),a=s.getAttribute("role")??"",l=s.getAttribute("aria-label")??s.getAttribute("placeholder")??(s.textContent??"").replace(/\s+/g," ").trim().slice(0,100),c=a||(n[i]??"");if(i==="input"){let g=s.type;g==="checkbox"?c="checkbox":g==="radio"?c="radio":g==="button"||g==="submit"||g==="reset"?c="button":g==="search"?c="searchbox":c="textbox"}if(!c)continue;let d="value"in s?s.value:void 0,u=d!==void 0?String(d):void 0,p=s.disabled??!1,f=i==="input"?s.checked:void 0,m={role:c,name:l,disabled:p};u!==void 0&&(m.value=u),f!==void 0&&(m.checked=f),o.push(m)}return o},tS).catch(()=>[])}function CF(t){let n=t.accessibility;return n!==null&&typeof n=="object"?n:null}async function Fa(t,e){let n=e.maxElements??80,r=e.includeHidden??!1,o=[],s=CF(t),i=s?s.snapshot({interestingOnly:!1}).catch(()=>null):Promise.resolve(null),a=xF(t),l=t.evaluate(()=>document.body?.innerText??"").catch(()=>""),c=Promise.resolve(t.url()),d=t.title().catch(()=>""),[u,p,f,m,g]=await Promise.all([i,a,l,c,d]),h,w=!1;u!==null?(h=[],eS(u,h)):(o.push("observation skipped accessibility tree (returned null)"),w=!0,h=(await RF(t)).filter(L=>Zw.has(L.role??"")));let v=new Map;for(let I of p){let L=Qw(I.name),q=v.get(L);(!q||q.bbox.w===0&&I.bbox.w>0)&&v.set(L,I)}let A=h.map(I=>({ax:I,dom:v.get(Qw(I.name??""))})),E=r?A:A.filter(I=>I.dom?I.dom.bbox.w>0||I.dom.bbox.h>0:!0);E.sort((I,L)=>{let q=I.dom?.bbox.y??0,D=L.dom?.bbox.y??0;if(q!==D)return q-D;let B=I.dom?.bbox.x??0,$=L.dom?.bbox.x??0;return B-$}),E.length>200&&o.push("page has 200+ interactive elements; consider scoping");let _=E.slice(0,n).map((I,L)=>{let q=I.ax.role??"generic",D=I.ax.name??"",B=_F(q,D,L),$=I.dom?.bbox??{x:0,y:0,w:0,h:0},P=I.dom?.type??null,O=null;I.ax.value!==void 0&&I.ax.value!==null&&(O=String(I.ax.value)),I.ax.checked!==void 0&&(O=String(I.ax.checked)),Vw({role:q,kind:P})&&(O="[redacted]");let H={disabled:I.ax.disabled??!1};I.ax.checked!==void 0&&(H.checked=I.ax.checked===!0||I.ax.checked==="mixed"),I.ax.selected!==void 0&&(H.selected=I.ax.selected),I.ax.expanded!==void 0&&(H.expanded=I.ax.expanded);let Y;I.dom?.testId?Y=`[data-testid="${I.dom.testId}"]`:I.dom?.id&&(Y=`#${I.dom.id}`);let ee={id:B,role:q,label:AF(D),kind:P,value:O,state:H,bbox:$};return Y!==void 0&&(ee.selector=Y),ee}),R="idle";try{let I=await t.evaluate(()=>document.readyState);I==="loading"?R="loading":I==="interactive"?R="navigating":R="idle"}catch{R="navigating"}R!=="idle"&&o.push("page is still loading \u2014 observation may be incomplete"),w&&!o.includes("observation skipped accessibility tree (returned null)")&&o.push("observation skipped accessibility tree (returned null)");let S=TF(f),x=`obs_${e.observationCounter.toString(36)}`,C=new Date().toISOString();return{observationId:x,url:m,title:g,textSummary:S,interactive:_,status:{httpStatus:e.httpStatus??null,loadingState:R,hasDialog:e.hasDialog??!1,consoleErrors:e.consoleErrors??0},warnings:o,screenshotPath:e.screenshotPath??null,capturedAt:C}}var Zw,tS,nS=y(()=>{"use strict";Da();Zw=new Set(["button","link","textbox","combobox","checkbox","radio","tab","menuitem","menuitemcheckbox","menuitemradio","switch","option","searchbox","spinbutton"]);tS="a[href], button, input, select, textarea, [role], [tabindex], label"});async function rS(t,e){try{let n=await t.nth(e).evaluate(i=>{let a=i,l=a.getAttribute("role")??a.tagName.toLowerCase(),c=a.getAttribute("aria-label")??a.getAttribute("placeholder")??(a.innerText!=null?a.innerText.trim().slice(0,200):"")??a.getAttribute("title")??"",d=a.getBoundingClientRect();return{role:l,label:c,x:Math.round(d.x),y:Math.round(d.y),w:Math.round(d.width),h:Math.round(d.height)}}),r=`${n.role}:${n.label}:${e}`,o=0;for(let i=0;i<r.length;i++)o=o*31+r.charCodeAt(i)>>>0;return{id:`el_${o.toString(16).padStart(6,"0").slice(0,6)}`,role:n.role,label:n.label,kind:null,value:null,state:{disabled:!1},bbox:{x:n.x,y:n.y,w:n.w,h:n.h}}}catch{return null}}async function sp(t,e){let n=Math.min(e,5);return(await Promise.all(Array.from({length:n},(o,s)=>rS(t,s)))).filter(o=>o!==null)}async function IF(t){let e=new Set,n=[];for(let{loc:r,count:o}of t)for(let s=0;s<o;s++){let i;try{i=await r.nth(s).evaluate(a=>{let l=a,c=l.getBoundingClientRect();return`${l.tagName}@${Math.round(c.x)},${Math.round(c.y)}`})}catch{continue}e.has(i)||(e.add(i),n.push({key:i,locator:r,index:s}))}return n}async function ip(t,e,n){switch(e.kind){case"element_id":return PF(t,e,n);case"selector":return MF(t,e);case"semantic":return OF(t,e)}}async function PF(t,e,n){let r=n.get(e.elementId);if(r===void 0)return{outcome:"not_found",query:e};if(r.selector!==void 0){let l=t.locator(r.selector);if(await l.count()===1)return{outcome:"resolved",locator:l}}let o=t.getByRole(r.role,{name:r.label,exact:!0}),s=await o.count();if(s===0)return{outcome:"not_found",query:e};if(s===1)return{outcome:"resolved",locator:o};let i=await sp(o,s);return{outcome:"ambiguous_target",query:{text:r.label,role:r.role},candidates:i}}async function MF(t,e){let n=t.locator(e.selector),r=await n.count();if(r===0)return{outcome:"not_found",query:e};if(r===1)return{outcome:"resolved",locator:n};let o=await sp(n,r);return{outcome:"ambiguous_target",query:{text:`[selector: ${e.selector}]`},candidates:o}}async function OF(t,e){return e.role!==void 0?DF(t,e.text,e.role):FF(t,e.text,e)}async function DF(t,e,n){let r=t.getByRole(n,{name:e}),o=await r.count();if(o===0)return{outcome:"not_found",query:{kind:"semantic",text:e,role:n}};if(o===1)return{outcome:"resolved",locator:r};let s=await sp(r,o);return{outcome:"ambiguous_target",query:{text:e,role:n},candidates:s}}async function FF(t,e,n){let r=t.getByRole("button",{name:e}),o=t.getByRole("link",{name:e}),s=t.getByLabel(e,{exact:!1}),[i,a,l]=await Promise.all([r.count(),o.count(),s.count()]);if(i+a+l===0)return{outcome:"not_found",query:n};let d=[];i>0&&d.push({loc:r,count:i}),a>0&&d.push({loc:o,count:a}),l>0&&d.push({loc:s,count:l});let u=await IF(d);if(u.length===0)return{outcome:"not_found",query:n};if(u.length===1){let g=u[0];return g===void 0?{outcome:"not_found",query:n}:{outcome:"resolved",locator:g.locator.nth(g.index)}}let p=u.slice(0,5),f=[];for(let g=0;g<p.length;g++){let h=p[g];if(h===void 0)continue;let w=await rS(h.locator,h.index);if(w!==null){let v=`${w.role}:${w.label}:${g}`,A=0;for(let E=0;E<v.length;E++)A=A*31+v.charCodeAt(E)>>>0;f.push({...w,id:`el_${A.toString(16).padStart(6,"0").slice(0,6)}`})}}return{outcome:"ambiguous_target",query:{text:e},candidates:f}}var oS=y(()=>{"use strict"});async function ap(t,e,n,r){let o=t.url();if(o===n)return null;let s=Ia(o,e);if(s.allowed)return null;try{await t.goBack()}catch{await r()}return{outcome:"blocked_by_policy",url:o,reason:s.reason}}var sS=y(()=>{"use strict";Pa()});import{randomBytes as LF}from"crypto";import{mkdir as NF,stat as $F,writeFile as UF}from"fs/promises";import{join as lp}from"path";import{gzip as BF}from"zlib";import{promisify as HF}from"util";function jF(t){return lp(ti(t),"browser")}function WF(t){return lp(jF(t),"screenshots")}function KF(){return new Date().toISOString().replace(/[:.]/g,"-")}function GF(){return LF(3).toString("hex")}async function cp(t,e,n){if(e.length>iS)throw new Error(`writeScreenshotSidecar: buffer exceeds ${iS} byte cap (received ${e.length} bytes). Refusing to write oversized screenshot.`);let r=WF(t);await NF(r,{recursive:!0});let o=`${KF()}-${GF()}-${n}.png`,s=lp(r,o);await UF(s,e);let{size:i}=await $F(s);return{path:s,bytes:i}}var d8,iS,aS=y(()=>{"use strict";j();Da();d8=HF(BF);iS=5*1024*1024});var cS={};ed(cS,{PlaywrightProvider:()=>dp});function lS(t){switch(t.kind){case"semantic":return t.role!==void 0?`semantic('${t.text}', role='${t.role}')`:`semantic('${t.text}')`;case"element_id":return`element_id(${t.elementId})`;case"selector":return`selector(${t.selector})`}}var dp,dS=y(()=>{"use strict";Jw();nS();oS();Pa();sS();aS();dp=class{name="playwright";config;launcher;sessions=new Map;constructor(e){this.config=e,this.launcher=new Oa(e)}async open(e){let n=Ia(e.url,this.config);if(!n.allowed)return{outcome:"blocked_by_policy",url:e.url,reason:n.reason};let{sessionId:r}=e,o=await this.launcher.ensurePage(r),s=this.ensureSessionState(r),i=null,a=null;try{await o.goto(e.url,{timeout:e.timeoutMs??3e4,waitUntil:e.waitFor??"load"})}catch(u){a=u}let l=o.url();if(!(a!==null&&(l===""||l==="about:blank"))){let u=await ap(o,this.config,e.url,()=>this.close({sessionId:r}));if(u!==null)return u}(e.screenshot===!0||a!==null)&&(i=await this.captureScreenshot(o,r,"browser_open")),s.observationCounter+=1;let d=await Fa(o,{observationCounter:s.observationCounter,screenshotPath:i,consoleErrors:this.launcher.getConsoleErrorCount(r),httpStatus:this.launcher.getLastHttpStatus(r),hasDialog:this.launcher.hasOpenDialog(r)});if(this.updateSessionFromObservation(s,d.interactive,d.url,d.title,"browser_open"),a!==null)throw a;return d}async observe(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_observe: no page open for session ${n}`);let o=this.ensureSessionState(n),s=null;e.screenshot===!0&&(s=await this.captureScreenshot(r,n,"browser_observe")),o.observationCounter+=1;let i=await Fa(r,{observationCounter:o.observationCounter,screenshotPath:s,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n),includeHidden:e.includeHidden,maxElements:e.maxElements});return this.updateSessionFromObservation(o,i.interactive,i.url,i.title,"browser_observe"),i}async act(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_act: no page open for session ${n}`);let o=this.ensureSessionState(n),s=r.url(),i=e.timeoutMs??3e4,a=await ip(r,e.target,o.knownElements);if(a.outcome==="not_found")throw new Error(`browser_act: target not found: ${lS(e.target)}`);if(a.outcome==="ambiguous_target")return a;let{locator:l}=a,c=null,d=async()=>{switch(e.action){case"click":await l.click({timeout:i});break;case"fill":await l.fill(e.value??"");break;case"press":await l.press(e.value??"");break;case"select":await l.selectOption(e.value??"");break;case"hover":await l.hover({timeout:i});break;case"scroll_to":await l.scrollIntoViewIfNeeded({timeout:i});break;case"wait_for":await l.waitFor({timeout:i,state:"visible"});break}};try{await d()}catch(g){if(g instanceof Error&&/navigation|net::ERR/i.test(g.message))try{await d()}catch(h){c=h}else c=g}let u=await ap(r,this.config,s,()=>this.close({sessionId:n}));if(u!==null)return u;let p=null;(e.screenshot===!0||c!==null)&&(p=await this.captureScreenshot(r,n,"browser_act")),o.observationCounter+=1;let f=await Fa(r,{observationCounter:o.observationCounter,screenshotPath:p,consoleErrors:this.launcher.getConsoleErrorCount(n),httpStatus:this.launcher.getLastHttpStatus(n),hasDialog:this.launcher.hasOpenDialog(n)}),m=`browser_act:${e.action}`;if(this.updateSessionFromObservation(o,f.interactive,f.url,f.title,m),c!==null)throw c;return f}async render(e){return this.launcher.renderHtml(e.url,{timeoutMs:e.timeoutMs??3e4,waitUntil:e.waitFor??"load",signal:e.signal,requestGuard:e.requestGuard})}async screenshot(e){let{sessionId:n}=e,r=this.launcher.getPage(n);if(r===void 0)throw new Error(`browser_screenshot: no page open for session ${n}`);let o=this.ensureSessionState(n),s;if(e.target!==void 0){let d=await ip(r,e.target,o.knownElements);if(d.outcome==="not_found")throw new Error(`browser_screenshot: target not found: ${lS(e.target)}`);if(d.outcome==="ambiguous_target")throw new Error("screenshot target ambiguous; specify element_id or selector");s=await d.locator.screenshot()}else s=await r.screenshot({fullPage:e.fullPage??!1});let{path:i,bytes:a}=await cp(n,s,"browser_screenshot"),l=0,c=0;if(e.fullPage===!0)try{let d=await r.evaluate(()=>({w:document.documentElement.scrollWidth,h:document.documentElement.scrollHeight}));l=d.w,c=d.h}catch{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}else{let d=r.viewportSize();l=d?.width??0,c=d?.height??0}return{path:i,bytes:a,width:l,height:c,dataBase64:s.toString("base64"),mediaType:"image/png"}}async extract(e){throw new Error("browser_extract not implemented in Phase 1")}async close(e){await this.launcher.closeSession(e.sessionId),this.sessions.delete(e.sessionId)}describe(e){let n=this.sessions.get(e);if(n===void 0)return null;let r=this.launcher.getPage(e);return{active:r!==void 0,url:n.currentUrl,title:n.currentTitle,lastAction:n.lastAction,lastActionAt:n.lastActionAt,openTabs:r!==void 0?1:0}}async shutdown(){this.sessions.clear(),await this.launcher.shutdown()}ensureSessionState(e){let n=this.sessions.get(e);if(n!==void 0)return n;let r={observationCounter:0,knownElements:new Map,lastAction:null,lastActionAt:null,currentUrl:null,currentTitle:null};return this.sessions.set(e,r),r}updateSessionFromObservation(e,n,r,o,s){e.knownElements=new Map(n.map(i=>[i.id,i])),e.currentUrl=r,e.currentTitle=o,e.lastAction=s,e.lastActionAt=new Date().toISOString()}async captureScreenshot(e,n,r){try{let o=await e.screenshot({fullPage:!1}),{path:s}=await cp(n,o,r);return s}catch{return null}}}});var Nn={};ed(Nn,{__resetBrowserRegistryForTests:()=>YF,browserProviderActive:()=>JF,closeBrowserProvider:()=>up,getBrowserProvider:()=>zF,peekBrowserProvider:()=>VF});function uS(){Promise.resolve(up()).then(()=>{process.exit(130)})}function pS(){Promise.resolve(up()).then(()=>{process.exit(143)})}function fS(){St=null}function qF(){La||(process.on("SIGINT",uS),process.on("SIGTERM",pS),process.on("exit",fS),La=!0)}function mS(){La&&(process.removeListener("SIGINT",uS),process.removeListener("SIGTERM",pS),process.removeListener("exit",fS),La=!1)}async function zF(t){return St!==null?St:(Ln!==null||(Ln=(async()=>{let{PlaywrightProvider:e}=await Promise.resolve().then(()=>(dS(),cS)),n=Kw(t),r=new e(n);return qF(),St=r,Ln=null,r})()),Ln)}async function up(){if(St===null)return;let t=St;St=null,Ln=null,mS(),await t.shutdown()}function JF(){return St!==null}function VF(){return St}function YF(){St=null,Ln=null,mS()}var St,Ln,La,$n=y(()=>{"use strict";Pa();St=null,Ln=null,La=!1});async function gS(t,e){try{return await Ow(t,e)}catch(n){return F("[web/scrape] extraction failed",{url:e,err:n}),{title:"",markdown:"",textLength:0,usedFallback:!0}}}async function nL(t,e){let{getBrowserProvider:n}=await Promise.resolve().then(()=>($n(),Nn));return(await n()).render({url:t,timeoutMs:e.timeoutMs,signal:e.signal,requestGuard:e.requestGuard})}async function hS(t,e){let n=e.fetchFn??globalThis.fetch,r=e.renderFn??nL,o=e.lookupFn!==void 0?{lookupFn:e.lookupFn}:{},s=null,i=t,a=null,l=null;try{let d=await Ca(n,t,{headers:tL,signal:e.signal},o);a=d.status,i=d.url||t;let u=d.headers.get("content-type")??"";if(d.ok){if(eL.test(u))throw new Error(`web_scrape markdown mode received binary content (${u.split(";")[0]}). Use mode: "raw" to fetch the bytes, or a different tool.`);let p=await d.text();if(ZF.test(u)&&!QF.test(u))return{title:"",markdown:p.trim(),finalUrl:i,usedRender:!1};if(s=await gS(p,i),e.signal.aborted)throw e.signal.reason??new Error("aborted")}}catch(d){if(e.signal.aborted||d instanceof it||d instanceof Error&&d.message.startsWith("web_scrape markdown mode received binary"))throw d;l=d}if(!(s===null||s.textLength<200)&&s!==null)return{title:s.title,markdown:s.markdown,finalUrl:i,usedRender:!1};try{await No(t,o);let d=await r(t,{timeoutMs:e.timeoutMs,signal:e.signal,requestGuard:p=>No(p,o)});d.finalUrl!==t&&/^https?:\/\//i.test(d.finalUrl)&&await No(d.finalUrl,o);let u=await gS(d.html,d.finalUrl);if(e.signal.aborted)throw e.signal.reason??new Error("aborted");if(s===null||u.textLength>=s.textLength)return{title:u.title,markdown:u.markdown,finalUrl:d.finalUrl,usedRender:!0}}catch(d){if(e.signal.aborted||d instanceof it)throw d;if(s===null){let u=d instanceof Error?d.message:String(d),p=l instanceof Error?l.message:`HTTP ${a??"error"}`,f=new Error(`web_scrape could not retrieve ${t}: fetch failed (${p}) and render failed (${u}).`);throw f.cause=d,f}}if(s!==null)return{title:s.title,markdown:s.markdown,finalUrl:i,usedRender:!1};throw new Error(`web_scrape could not retrieve any content from ${t} (HTTP ${a??"error"}).`)}var QF,ZF,eL,tL,yS=y(()=>{"use strict";Dw();tp();fe();QF=/(text\/html|application\/xhtml\+xml)/i,ZF=/(application\/json|\/xml|\+xml|text\/|application\/(java|ecma)script|csv)/i,eL=/(image\/|audio\/|video\/|application\/pdf|application\/zip|application\/octet-stream|font\/)/i,tL={"User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 agent-afk/web_scrape",Accept:"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"}});function sL(t){let e=t.fetchFn??globalThis.fetch;return{name:"exa",async search(n,{limit:r,signal:o}){let s=await e(rL,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json","x-api-key":t.apiKey,"User-Agent":"agent-afk/web_scrape"},body:JSON.stringify({query:n,type:"auto",numResults:Math.min(Math.max(r,1),oL),contents:{highlights:{numSentences:3,highlightsPerUrl:1}}}),signal:o});if(!s.ok){let l="";try{let d=await s.text(),u=hr(d);u&&(l=`: ${u.length>200?u.slice(0,200)+"\u2026":u}`)}catch{}let c=s.statusText?` ${s.statusText}`:"";throw new Error(`Exa Search HTTP ${s.status}${c}${l}`)}let i;try{i=await s.json()}catch(l){throw new Error(`Exa Search response was not JSON: ${l instanceof Error?l.message:String(l)}`)}return(i.results??[]).slice(0,r).map(l=>({title:(l.title??"").trim()||"(untitled)",url:l.url??"",description:(l.highlights?.[0]??"").trim()})).filter(l=>l.url.length>0)}}}function bS(t){return t.exaApiKey!==void 0&&t.exaApiKey.trim()!==""?sL({apiKey:t.exaApiKey,fetchFn:t.fetchFn}):{error:'web_scrape search mode requires a search backend. Set EXA_API_KEY (free tier at https://exa.ai) to enable it. Use mode: "markdown" to read a known URL, or mode: "raw" for a direct fetch.'}}function wS(t,e){if(e.length===0)return`# Search results for "${t}"
 
 (no results)`;let n=[`# Search results for "${t}"`,""];return e.forEach((r,o)=>{n.push(`## ${o+1}. ${r.title}`),r.url&&n.push(r.url),r.description&&n.push(r.description),n.push("")}),n.join(`
 `).trimEnd()}var rL,oL,SS=y(()=>{"use strict";kn();rL="https://api.exa.ai/search",oL=10});function Na(t){if(t instanceof Error&&t.name==="TimeoutError")return"timeout";let e=t instanceof Error?t.message:String(t);return/Timeout\s+\d+\s*ms exceeded/i.test(e)?"timeout":void 0}var Un=y(()=>{"use strict";op()});function uL(t){if(!t||typeof t!="object")return{error:"Invalid input: expected an object"};let e=t,n=e.mode??"markdown";if(n!=="markdown"&&n!=="raw"&&n!=="search")return{error:`Invalid input: mode must be one of "markdown", "raw", "search" (got ${JSON.stringify(n)})`};let r=n,o,s;if(r==="search"){if(typeof e.query!="string"||e.query.length===0)return{error:'Invalid input: search mode requires a non-empty "query" string'};s=e.query}else{if(typeof e.url!="string"||e.url.length===0)return{error:`Invalid input: ${r} mode requires a non-empty "url" string`};let l;try{l=new URL(e.url)}catch{return{error:`Invalid input: "${e.url}" is not a valid absolute URL`}}if(l.protocol!=="http:"&&l.protocol!=="https:")return{error:`Invalid input: protocol "${l.protocol}" not supported (http/https only)`};o=l.toString()}let i=iL;if(e.timeout_ms!==void 0){if(typeof e.timeout_ms!="number"||!Number.isFinite(e.timeout_ms)||e.timeout_ms<=0)return{error:"Invalid input: timeout_ms must be a positive finite number"};i=Math.min(e.timeout_ms,aL)}let a=lL;if(e.max_bytes!==void 0){if(typeof e.max_bytes!="number"||!Number.isFinite(e.max_bytes)||e.max_bytes<=0)return{error:"Invalid input: max_bytes must be a positive finite number"};a=Math.min(e.max_bytes,cL)}return{mode:r,url:o,query:s,timeoutMs:i,maxBytes:a}}function pp(t,e){return Buffer.byteLength(t,"utf8")<=e?{content:t,truncated:!1}:{content:Mt(t,e),truncated:!0}}function pL(t={}){let e=t.fetchFn??globalThis.fetch,n=t.env??process.env,r=t.lookupFn!==void 0?{lookupFn:t.lookupFn}:{};return async(o,s)=>{if(typeof e!="function")return{content:"web_scrape unavailable: global fetch() is not present in this runtime (agent-afk requires Node 20+).",isError:!0};let i=uL(o);if("error"in i)return{content:i.error,isError:!0};if(s.aborted){let u=s.reason;return{content:`web_scrape aborted: ${u instanceof Error?u.message:String(u??"aborted")}`,isError:!0}}let a=new AbortController,l=()=>{a.abort(s.reason)},c,d=()=>{let u=a.signal.reason;return u instanceof Error?u.message:String(u??"aborted")};try{if(s.addEventListener("abort",l,{once:!0}),c=setTimeout(()=>{a.abort(new Error(`web_scrape timeout after ${i.timeoutMs}ms`))},i.timeoutMs),i.url!==void 0){let p=await ep(i.url,r);if(a.signal.aborted)return{content:`web_scrape aborted: ${d()}`,isError:!0};if(!p.allowed)return{content:`web_scrape blocked: ${p.reason}`,isError:!0}}if(i.mode==="raw"){let p;try{let g={method:"GET",headers:{"User-Agent":"agent-afk/web_scrape",Accept:"*/*"},signal:a.signal};p=await Ca(e,i.url,g,r)}catch(g){return a.signal.aborted?{content:`web_scrape aborted: ${d()}`,isError:!0}:g instanceof it?{content:`web_scrape blocked: ${g.message}`,isError:!0}:{content:`web_scrape network error: ${g instanceof Error?g.message:String(g)}`,isError:!0}}if(!p.ok)return{content:`web_scrape HTTP ${p.status} ${p.statusText||""}`.trimEnd()+` for ${i.url}`,isError:!0};let f;try{f=await p.text()}catch(g){return{content:`web_scrape read error: ${g instanceof Error?g.message:String(g)}`,isError:!0}}let m=pp(f,i.maxBytes);return{content:m.content,...m.truncated?{truncated:!0}:{}}}if(i.mode==="markdown")try{let p=await hS(i.url,{fetchFn:e,renderFn:t.renderFn,timeoutMs:i.timeoutMs,signal:a.signal,...t.lookupFn!==void 0?{lookupFn:t.lookupFn}:{}});if(p.markdown.trim().length===0)return{content:`web_scrape extracted no readable content from ${i.url}.`,isError:!0};let f=pp(p.markdown,i.maxBytes);return{content:f.content,...f.truncated?{truncated:!0}:{}}}catch(p){if(a.signal.aborted)return{content:`web_scrape aborted: ${d()}`,isError:!0};if(p instanceof it)return{content:`web_scrape blocked: ${p.message}`,isError:!0};let f=p instanceof Error?p.message:String(p),m=Me(p)&&!np(f)?` (the render fallback needs the optional Playwright browser \u2014 run \`${$o()}\`)`:"";return{content:`web_scrape markdown error: ${f}${m}`,isError:!0}}let u=bS({exaApiKey:n.EXA_API_KEY,fetchFn:e});if("error"in u)return{content:u.error,isError:!0};try{let p=await u.search(i.query,{limit:dL,timeoutMs:i.timeoutMs,signal:a.signal}),f=pp(wS(i.query,p),i.maxBytes);return{content:f.content,...f.truncated?{truncated:!0}:{}}}catch(p){return a.signal.aborted?{content:`web_scrape aborted: ${d()}`,isError:!0}:{content:`web_scrape search error (${u.name}): ${p instanceof Error?p.message:String(p)}`,isError:!0}}}finally{c!==void 0&&clearTimeout(c),s.removeEventListener("abort",l)}}}var iL,aL,lL,cL,dL,vS,kS=y(()=>{"use strict";yS();SS();tp();Cn();Un();iL=3e4,aL=12e4,lL=1e5,cL=1e6,dL=10;vS=pL()});import{existsSync as AS,mkdirSync as fL,readFileSync as mL,renameSync as gL,unlinkSync as hL,writeFileSync as yL}from"node:fs";import{dirname as ES,join as bL}from"node:path";import{randomBytes as wL}from"node:crypto";function Ar(t){let e=t??od();if(!AS(e))return[];try{let n=mL(e,"utf-8");return JSON.parse(n)}catch(n){let r=n instanceof Error?n.message:String(n);return console.error(`[schedule-store] failed to parse ${e}: ${r}`),[]}}function $a(t,e){let n=e??od();fL(ES(n),{recursive:!0});let r=bL(ES(n),`.schedules.json.${process.pid}.${wL(4).toString("hex")}.tmp`),o=JSON.stringify(t,null,2);try{yL(r,o,"utf-8"),gL(r,n)}catch(s){try{AS(r)&&hL(r)}catch{}throw s}}function _S(t,e){let n=Ar(e),r=n.map(l=>l.id),o=SL(t.name),s=vL(o,r),i=new Date().toISOString(),a={...t,notifyOn:t.notifyOn??"failure",id:s,createdAt:i,updatedAt:i};return n.push(a),$a(n,e),a}function TS(t,e){let n=Ar(e),r=n.length,o=n.filter(s=>s.id!==t);return o.length===r?!1:($a(o,e),!0)}function xS(t,e){return Ar(e).find(n=>n.id===t)}function SL(t){return t.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/-{2,}/g,"-").replace(/^-+|-+$/g,"")}function vL(t,e){if(!e.includes(t))return t;let n=2;for(;e.includes(`${t}-${n}`);)n+=1;return`${t}-${n}`}var RS=y(()=>{"use strict";j()});import{existsSync as kL,readFileSync as EL}from"node:fs";import{join as AL}from"node:path";async function Uo(t,e,n){let r;try{let o=AL(kg("default"),"port");if(!kL(o))return{synced:!1,detail:"daemon-not-detected (no port file)"};let s=EL(o,"utf-8").trim();if(r=parseInt(s,10),Number.isNaN(r))return{synced:!1,detail:"daemon-not-detected (invalid port file)"}}catch{return{synced:!1,detail:"daemon-not-detected (unreadable port file)"}}try{let o=await fetch(`http://localhost:${r}${e}`,{method:t,headers:{"Content-Type":"application/json"},body:n!==void 0?JSON.stringify(n):void 0,signal:AbortSignal.timeout(2e3)});return o.ok?{synced:!0,detail:"synced"}:t==="POST"&&o.status===409?{synced:!0,detail:"already-registered"}:t==="DELETE"&&o.status===404?{synced:!0,detail:"not-registered"}:{synced:!1,detail:`daemon-rejected (HTTP ${o.status})`}}catch{return{synced:!1,detail:"daemon-unreachable (stale port file or network error)"}}}var fp,CS=y(()=>{"use strict";j();fp="Change saved to schedules.json, but a running daemon (if any) did not pick it up \u2014 it will apply on the next daemon (re)start."});import{existsSync as _L}from"node:fs";import{readFile as TL}from"node:fs/promises";var IS,PS,MS,OS,DS=y(()=>{"use strict";RS();j();CS();IS=async(t,e)=>{if(!t||typeof t!="object")return{content:"Invalid input: expected object",isError:!0};let n=t;if(typeof n.name!="string"||!n.name)return{content:"Invalid input: name required",isError:!0};if(typeof n.command!="string"||!n.command)return{content:"Invalid input: command required",isError:!0};if(typeof n.cron!="string"||!n.cron)return{content:"Invalid input: cron required",isError:!0};let r=n.cron.trim().split(/\s+/);if(r.length!==5&&r.length!==6)return{content:"Invalid input: cron must be a 5 or 6-field expression",isError:!0};let o=n.notifyChat;if(o!==void 0&&typeof o!="number"&&typeof o!="string")return{content:"Invalid input: notifyChat must be a number (chat id) or string (chat id or alias name)",isError:!0};let s=_S({name:n.name,command:n.command,cron:n.cron,trigger:n.trigger??"cron",notifyOn:n.notifyOn,...o!==void 0?{notifyChat:o}:{},enabled:typeof n.enabled=="boolean"?n.enabled:!0}),i=s.enabled?await Uo("POST","/tasks",{taskId:s.id,command:s.command,cron:s.cron,trigger:s.trigger,notifyOn:s.notifyOn,...s.notifyChat!==void 0?{notifyChat:s.notifyChat}:{}}):await Uo("DELETE",`/tasks/${s.id}`);return{content:JSON.stringify({id:s.id,name:s.name,cron:s.cron,enabled:s.enabled,daemonSynced:i.synced,syncDetail:i.detail,...i.synced?{}:{syncNote:fp}})}},PS=async(t,e)=>{let n=Ar();return{content:JSON.stringify(n.map(r=>({id:r.id,name:r.name,cron:r.cron,trigger:r.trigger,enabled:r.enabled,notifyOn:r.notifyOn})))}},MS=async(t,e)=>{if(!t||typeof t!="object")return{content:"Invalid input: expected object",isError:!0};let n=t;if(typeof n.taskId!="string"||!n.taskId)return{content:"Invalid input: taskId required",isError:!0};let r=n.taskId,o=typeof n.limit=="number"?Math.min(Math.max(1,n.limit),50):10,s=Js();if(!_L(s))return{content:JSON.stringify([])};let i;try{let c=await TL(s);i=(c.length>1048576?c.subarray(c.length-1048576):c).toString("utf-8")}catch{return{content:JSON.stringify([])}}let a=i.split(`
@@ -1223,7 +1223,7 @@ The sub-agent that just finished returned output that reads like **decision-driv
 Single-pass sub-agent reports are prone to confident hallucination \u2014 polished output that falls apart on re-derivation. Before acting on these conclusions, consider dispatching \`/shadow-verify\`. Independent verifiers will re-derive the 2\u20133 most load-bearing claims from scratch (without seeing the original reasoning) and flag any that don't hold up.
 
 Skip when: the findings are purely exploratory, the sub-agent ran inside an already-verifying orchestrator, the user is about to dismiss the report, or the stakes are low (read-only Q&A).`,f1=c1.map(t=>new RegExp(`(?:^|-)${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}(?:-|$)`,"i"));function m1(t){return t?f1.some(e=>e.test(t)):!1}function g1(t){return u1.some(e=>e.test(t))}function h1(t){let e=0;for(let n of d1)n.test(t)&&e++;return e}function kR(){let t=!1,e=new Set;return n=>{if(n.event==="Stop")return t=!1,{};if(n.event!=="SubagentStop")return{};let r=n.lastMessage??"";return r.length<600?{}:m1(n.agentType)?{}:g1(r)?{}:h1(r)<2?{}:t||e.has(n.subagentId)?{}:(t=!0,e.add(n.subagentId),{injectContext:p1})}}bn();Ro();var ER=300,y1="ask_question gate: no interactive operator is attached to this surface (no elicitation handler \u2014 daemon/scheduled/one-shot run), so the question cannot be answered now. The operator has been notified asynchronously. Do not re-ask or wait. Choose the most reasonable interpretation, state the assumption explicitly in your final report for async review, and proceed. If no safe assumption exists and the next action would be irreversible, end the turn with a Blocked terminal state naming exactly what the operator must supply.";function b1(t){xo(t).catch(()=>{})}function AR(t={}){let e=t.hasHandler??(()=>He.hasHandler()),n=t.notify??b1;return function(o){if(o.event!=="PreToolUse")return{};if(o.toolName!=="ask_question")return{};if(e())return{};try{let i=(typeof o.input=="object"&&o.input!==null?String(o.input.question??""):"").trim(),a=i.length<=ER?i:`${i.slice(0,ER)}\u2026(truncated)`;n(`\u{1F514} AFK question (auto-gated; agent proceeds on a stated assumption):
-`+(a!==""?a:"(question text unavailable)"))}catch{}return{decision:"block",reason:y1}}}var w1="safe-destruct observe-only: destructive-command attempt",S1=[{id:"rm-recursive-force",re:/\brm\s+-(?=[a-z]*r)(?=[a-z]*f)[a-z]+/i},{id:"rm-recursive-force-split",re:/\brm\s+-[a-z]*r[a-z]*\s+-[a-z]*f|\brm\s+-[a-z]*f[a-z]*\s+-[a-z]*r/i},{id:"rm-recursive-force-long",re:/\brm\s+[^|&;\n]*--recursive\b[^|&;\n]*--force\b|\brm\s+[^|&;\n]*--force\b[^|&;\n]*--recursive\b/i},{id:"rm-no-preserve-root",re:/\brm\b[^|&;\n]*--no-preserve-root\b/i},{id:"git-reset-hard",re:/\bgit\s+reset\s+--hard\b/i},{id:"git-clean-force",re:/\bgit\s+clean\s+-[a-z]*f|\bgit\s+clean\s+[^|&;\n]*--force\b/i},{id:"git-push-force",re:/\bgit\s+push\b[^|&;\n]*--force\b|\bgit\s+push\b[^|&;\n]*(?<![\w-])-f\b/i},{id:"git-branch-force-delete",re:/\bgit\s+branch\s+[^|&;\n]*-D\b/},{id:"dd-to-device",re:/\bof=\/dev\/(?!null\b|zero\b|random\b|urandom\b|stdout\b|stderr\b|tty\b)\S/i},{id:"mkfs",re:/\bmkfs(\.\w+)?\b/i},{id:"redirect-to-block-device",re:/>\s*\/dev\/(sd|nvme|hd|disk|mmcblk|vd)\w*/i},{id:"find-delete",re:/\bfind\b[^|&;\n]*-delete\b|\bfind\b[^|&;\n]*-exec\s+rm\b/i},{id:"shred",re:/\bshred\b/i},{id:"sql-drop-truncate-delete",re:/\b(drop\s+(table|database|schema|index)\b|truncate\s+table\b|delete\s+from\b)/i},{id:"docker-destructive",re:/\bdocker\s+(system\s+prune|volume\s+(rm|prune)|image\s+prune|container\s+prune|network\s+prune)\b|\bdocker\b[^|&;\n]*\brmi?\s+[^|&;\n]*-f/i},{id:"kubectl-delete",re:/\bkubectl\s+delete\b/i},{id:"terraform-destroy",re:/\bterraform\s+destroy\b/i}];function v1(t){if(!t)return[];let e=[];for(let{id:n,re:r}of S1)r.test(t)&&e.push(n);return e}function _R(){return function(e){if(e.event!=="PreToolUse")return{};if(e.toolName!=="bash")return{};let n=e.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=v1(r);return o.length===0?{}:{decision:"approve",reason:`${w1} [${o.join(", ")}]`}}}var k1="release-boundary observe-only: publish/deploy/sync-boundary command",E1=[{id:"npm-publish",re:/\bnpm\s+publish\b/i},{id:"pnpm-publish",re:/\bpnpm\s+publish\b/i},{id:"yarn-publish",re:/\byarn\s+(?:npm\s+)?publish\b/i},{id:"cargo-publish",re:/\bcargo\s+publish\b/i},{id:"pypi-twine-upload",re:/\btwine\s+upload\b/i},{id:"poetry-publish",re:/\bpoetry\s+publish\b/i},{id:"gem-push",re:/\bgem\s+push\b/i},{id:"docker-push",re:/\bdocker\s+(?:image\s+)?push\b/i},{id:"gh-release-create",re:/\bgh\s+release\s+create\b/i},{id:"terraform-apply",re:/\bterraform\s+apply\b/i},{id:"kubectl-apply",re:/\bkubectl\s+apply\b/i},{id:"git-push-mirror",re:/\bgit\s+push\b[^|&;\n]*--mirror\b/i},{id:"git-push-tags",re:/\bgit\s+push\b[^|&;\n]*--(?:tags|follow-tags)\b/i}];function A1(t){if(!t)return[];let e=[];for(let{id:n,re:r}of E1)r.test(t)&&e.push(n);return e}function TR(){return function(e){if(e.event!=="PreToolUse")return{};if(e.toolName!=="bash")return{};let n=e.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=A1(r);return o.length===0?{}:{decision:"approve",reason:`${k1} [${o.join(", ")}]`}}}xt();Rl();Ru();function xR(t){return function(n){if(n.event!=="PreToolUse")return{};if(n.parentSessionId)return{};if(t()!=="plan")return{};let{toolName:r}=n;if(xl(r)==="write")return{decision:"block",reason:`plan mode: ${r} is refused. Use /plan off to exit plan mode.`};if(r==="worktree"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.action??""):"";if(o!=="list")return{decision:"block",reason:`plan mode: worktree "${o}" is refused (mutates the worktree registry). Only action "list" is allowed in plan mode. Use /plan off to act.`}}if(r==="bash"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.command??""):"",s=ba(o);if(s.mutating)return{decision:"block",reason:`plan mode: bash refused \u2014 command looks state-mutating (${s.reason??"mutation detected"}). Read-only investigation (git status/log/diff, ls, cat, grep, find) is allowed. Use /plan off to act.`}}return{}}}import Vr from"path";vr();Rl();import RR from"path";var _1=["rm -rf","rm ","sudo","eval ","chmod","chown","git push --force","git push -f","git reset --hard","mkfs","fdisk","diskutil eraseDisk","dd if=","dd of=","| sh","| bash","|sh","|bash"],T1=["git push","git reset","git commit","git stash drop","git stash clear","npm install","pnpm install","yarn","pip install","apt ","apt-get ","brew install","tee "," > "," >> ","mv ","cp ","mkdir","touch","pnpm build","tsc ","eslint --fix"],x1=["pnpm test","vitest","jest","pytest","cargo test","go test","git status","git log","git diff","git show","ls ","cat ","head ","tail ","find ","grep ","echo ","printf "];function R1(t){return typeof t=="object"&&t!==null&&"command"in t?String(t.command??""):typeof t=="string"?t:""}function C1(t){if(typeof t!="object"||t===null)return"";let e=t;return typeof e.file_path=="string"?e.file_path:typeof e.path=="string"?e.path:""}function I1(t){for(let e of _1)if(t.includes(e))return"high";for(let e of T1)if(t.includes(e))return"medium";for(let e of x1)if(t.includes(e))return"safe";return"medium"}function P1(t,e){if(!t)return"safe";let n=ge(RR.resolve(e.cwd,t)),r=Bu();for(let o of r)if(n===o||n.startsWith(o+"/"))return"high";if(n.includes("/.git/"))return"high";if(e.workspaceRoot!==void 0){let o=ge(e.workspaceRoot);if(RR.relative(o,n).startsWith(".."))return"high"}return n.includes("/node_modules/")?"medium":"safe"}var M1=new Set(["delete","drop","remove","destroy","truncate","purge","wipe","write","create","update","insert","upsert","patch","rename","exec","execute","run","eval","send","push","publish","deploy","post","merge","rollback","reset","terminate","provision","scale","disable","charge","refund","revoke"]);function O1(t){return t.split("__").slice(1).join("__").split(/[_-]+/).filter(Boolean)}function CR(t,e,n){let r=t.toLowerCase();if(r==="bash"){let o=R1(e);return I1(o)}if(r==="write_file"||r==="edit_file"){let o=C1(e);return P1(o,n)}if(xl(t)==="read")return"safe";if(r==="send_telegram")return"medium";if(r.startsWith("mcp__"))return O1(r).some(s=>M1.has(s))?"high":"medium";if(r==="create_schedule"||r==="cancel_schedule")return"high";if(r==="worktree"){let o=typeof e=="object"&&e!==null?e:{},s=typeof o.action=="string"?o.action:"";return s==="list"?"safe":s==="remove"&&o.force===!0?"high":"medium"}return r==="browser_act"||r==="browser_open"||r==="web_scrape"?"medium":"safe"}bn();Q();Sm();_u();vr();import Um from"path";import{lstatSync as D1}from"fs";import{spawnSync as F1}from"child_process";var L1=new Set(["node_modules","dist","build",".next","coverage",".cache","__pycache__",".turbo",".parcel-cache","out","target"]),N1=/[*?$`(){};|&<>'"\\]/;function $1(t){return t==="--recursive"?!0:t.startsWith("--")?!1:/^-[A-Za-z]+$/.test(t)&&/[rR]/.test(t)}function U1(t){if(!/^rm\b/.test(t)||N1.test(t))return null;let e=t.trim().split(/\s+/),n=[],r=!1,o=!1;for(let s of e.slice(1)){if(!o&&s==="--"){o=!0;continue}if(!o&&s.startsWith("-")){$1(s)&&(r=!0);continue}n.push(s)}return n.length===0?null:{targets:n,recursive:r}}function B1(t,e){try{return D1(t).isDirectory()?F1("git",["check-ignore","--quiet","--",t],{cwd:e,stdio:"ignore"}).status===0:!1}catch(n){return n.code==="ENOENT"}}function IR(t,e,n){let r=U1(t);if(r===null||!r.recursive)return!1;let o=ge(n);for(let s of r.targets){if(s==="/"||s==="."||s===".."||s==="~"||s.startsWith("~/")||s==="$HOME"||s.startsWith("$HOME/")||s===".git"||s.startsWith(".git/"))return!1;let i=ge(Um.resolve(e,s));if(i===o||!i.startsWith(o+Um.sep)||!L1.has(Um.basename(i))||!B1(i,o))return!1}return!0}var H1=3e5,PR=300;function MR(t,e,n,r){let o=r?.approvalTimeoutMs??H1,s=r?.promptForApproval??!0,i=r?.traceWriter,a=r?.sessionId,l=r?.route??((d,u)=>He.route(d,u));async function c(d,u,p,f){let m=Date.now(),g=j1(d,u),h=new AbortController,w=()=>h.abort();p&&(p.aborted?h.abort():p.addEventListener("abort",w,{once:!0}));let v=Symbol("afk-approval-timeout"),A,E,T=new Promise(x=>{E=()=>{A||(A=setTimeout(()=>{h.abort(),x(v)},o),A.unref?.())}});function _(x,C){let I=Date.now()-m,L=x.decision==="block";return Ve(i,{hookEvent:"PreToolUse",...L?{decision:"block"}:{},...L&&x.reason!==void 0?{reason:x.reason}:{},...L?{blockedTool:d}:{},durationMs:I,approvalOutcome:C}),x}let R;try{let x=f??a;R=await Promise.race([l(g,{signal:h.signal,onActive:E,...x!==void 0?{sessionId:x}:{}}),T])}finally{A&&clearTimeout(A),p&&p.removeEventListener("abort",w)}if(R===v)return _($s(d,`no approval arrived within ${Math.round(o/1e3)}s`),"timeout");if(R.action!=="accept")return _($s(d,R.action==="cancel"?"the operator cancelled the approval prompt":"no operator approval was available"),R.action==="cancel"?"cancel":"decline");let S=String(R.content?.choice??"").toLowerCase();return S==="approve"?_({},"approved"):S==="deny"?_($s(d,"the operator denied it"),"denied"):_($s(d,"the approval prompt returned an unrecognised choice"),"unrecognised")}return function(u,p){if(u.event!=="PreToolUse")return{};if(t()!=="autonomous")return{};let{toolName:f}=u,m=Date.now();if(f==="send_telegram")return{};let g=n?.()??e??process.cwd(),h=u.cwd,w=h??g,A=(h!==void 0?K1(h,g):void 0)??g,E=CR(f,u.input,{cwd:w,workspaceRoot:A});if(E==="high"&&f==="bash"){let T=typeof u.input=="object"&&u.input!==null&&"command"in u.input?String(u.input.command??""):"";if(T&&IR(T,w,A))return Ve(i,{hookEvent:"PreToolUse",blockedTool:f,durationMs:Date.now()-m,approvalOutcome:"carve-out"}),{}}if(E!=="high")return{};if(u.parentSessionId!==void 0||!s){let T=$s(f,"AFK mode runs autonomously without a human watching");return Ve(i,{hookEvent:"PreToolUse",decision:"block",...T.reason!==void 0?{reason:T.reason}:{},blockedTool:f,durationMs:Date.now()-m,approvalOutcome:"hard-block"}),T}return c(f,u.input,p,u.sessionId)}}function j1(t,e){let n=W1(e);return{serverName:"agent-afk",message:`AFK: \`${t}\` is high-risk / irreversible and AFK mode runs unattended. Approve this single call?`+(n?`
+`+(a!==""?a:"(question text unavailable)"))}catch{}return{decision:"block",reason:y1}}}var w1="safe-destruct observe-only: destructive-command attempt",S1=[{id:"rm-recursive-force",re:/\brm\s+-(?=[a-z]*r)(?=[a-z]*f)[a-z]+/i},{id:"rm-recursive-force-split",re:/\brm\s+-[a-z]*r[a-z]*\s+-[a-z]*f|\brm\s+-[a-z]*f[a-z]*\s+-[a-z]*r/i},{id:"rm-recursive-force-long",re:/\brm\s+[^|&;\n]*--recursive\b[^|&;\n]*--force\b|\brm\s+[^|&;\n]*--force\b[^|&;\n]*--recursive\b/i},{id:"rm-no-preserve-root",re:/\brm\b[^|&;\n]*--no-preserve-root\b/i},{id:"git-reset-hard",re:/\bgit\s+reset\s+--hard\b/i},{id:"git-clean-force",re:/\bgit\s+clean\s+-[a-z]*f|\bgit\s+clean\s+[^|&;\n]*--force\b/i},{id:"git-push-force",re:/\bgit\s+push\b[^|&;\n]*--force\b|\bgit\s+push\b[^|&;\n]*(?<![\w-])-f\b/i},{id:"git-branch-force-delete",re:/\bgit\s+branch\s+[^|&;\n]*-D\b/},{id:"dd-to-device",re:/\bof=\/dev\/(?!null\b|zero\b|random\b|urandom\b|stdout\b|stderr\b|tty\b)\S/i},{id:"mkfs",re:/\bmkfs(\.\w+)?\b/i},{id:"redirect-to-block-device",re:/>\s*\/dev\/(sd|nvme|hd|disk|mmcblk|vd)\w*/i},{id:"find-delete",re:/\bfind\b[^|&;\n]*-delete\b|\bfind\b[^|&;\n]*-exec\s+rm\b/i},{id:"shred",re:/\bshred\b/i},{id:"sql-drop-truncate-delete",re:/\b(drop\s+(table|database|schema|index)\b|truncate\s+table\b|delete\s+from\b)/i},{id:"docker-destructive",re:/\bdocker\s+(system\s+prune|volume\s+(rm|prune)|image\s+prune|container\s+prune|network\s+prune)\b|\bdocker\b[^|&;\n]*\brmi?\s+[^|&;\n]*-f/i},{id:"kubectl-delete",re:/\bkubectl\s+delete\b/i},{id:"terraform-destroy",re:/\bterraform\s+destroy\b/i}];function v1(t){if(!t)return[];let e=[];for(let{id:n,re:r}of S1)r.test(t)&&e.push(n);return e}function _R(){return function(e){if(e.event!=="PreToolUse")return{};if(e.toolName!=="bash")return{};let n=e.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=v1(r);return o.length===0?{}:{decision:"approve",reason:`${w1} [${o.join(", ")}]`}}}var k1="release-boundary observe-only: publish/deploy/sync-boundary command",E1=[{id:"npm-publish",re:/\bnpm\s+publish\b/i},{id:"pnpm-publish",re:/\bpnpm\s+publish\b/i},{id:"yarn-publish",re:/\byarn\s+(?:npm\s+)?publish\b/i},{id:"cargo-publish",re:/\bcargo\s+publish\b/i},{id:"pypi-twine-upload",re:/\btwine\s+upload\b/i},{id:"poetry-publish",re:/\bpoetry\s+publish\b/i},{id:"gem-push",re:/\bgem\s+push\b/i},{id:"docker-push",re:/\bdocker\s+(?:image\s+)?push\b/i},{id:"gh-release-create",re:/\bgh\s+release\s+create\b/i},{id:"terraform-apply",re:/\bterraform\s+apply\b/i},{id:"kubectl-apply",re:/\bkubectl\s+apply\b/i},{id:"git-push-mirror",re:/\bgit\s+push\b[^|&;\n]*--mirror\b/i},{id:"git-push-tags",re:/\bgit\s+push\b[^|&;\n]*--(?:tags|follow-tags)\b/i}];function A1(t){if(!t)return[];let e=[];for(let{id:n,re:r}of E1)r.test(t)&&e.push(n);return e}function TR(){return function(e){if(e.event!=="PreToolUse")return{};if(e.toolName!=="bash")return{};let n=e.input,r=typeof n?.command=="string"?n.command:"";if(!r)return{};let o=A1(r);return o.length===0?{}:{decision:"approve",reason:`${k1} [${o.join(", ")}]`}}}xt();Rl();Ru();function xR(t){return function(n){if(n.event!=="PreToolUse")return{};if(n.parentSessionId)return{};if(t()!=="plan")return{};let{toolName:r}=n;if(xl(r)==="write")return{decision:"block",reason:`plan mode: ${r} is refused. Use /plan off to exit plan mode.`};if(r==="worktree"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.action??""):"";if(o!=="list")return{decision:"block",reason:`plan mode: worktree "${o}" is refused (mutates the worktree registry). Only action "list" is allowed in plan mode. Use /plan off to act.`}}if(r==="bash"){let o=typeof n.input=="object"&&n.input!==null?String(n.input.command??""):"",s=ba(o);if(s.mutating)return{decision:"block",reason:`plan mode: bash refused \u2014 command looks state-mutating (${s.reason??"mutation detected"}). Read-only investigation (git status/log/diff, ls, cat, grep, find) is allowed. Use /plan off to act.`}}return{}}}import Vr from"path";vr();Rl();import RR from"path";var _1=["rm -rf","rm ","sudo","eval ","chmod","chown","git push --force","git push -f","git reset --hard","mkfs","fdisk","diskutil eraseDisk","dd if=","dd of=","| sh","| bash","|sh","|bash"],T1=["git push","git reset","git commit","git stash drop","git stash clear","npm install","pnpm install","yarn","pip install","apt ","apt-get ","brew install","tee "," > "," >> ","mv ","cp ","mkdir","touch","pnpm build","tsc ","eslint --fix"],x1=["pnpm test","vitest","jest","pytest","cargo test","go test","git status","git log","git diff","git show","ls ","cat ","head ","tail ","find ","grep ","echo ","printf "];function R1(t){return typeof t=="object"&&t!==null&&"command"in t?String(t.command??""):typeof t=="string"?t:""}function C1(t){if(typeof t!="object"||t===null)return"";let e=t;return typeof e.file_path=="string"?e.file_path:typeof e.path=="string"?e.path:""}function I1(t){for(let e of _1)if(t.includes(e))return"high";for(let e of T1)if(t.includes(e))return"medium";for(let e of x1)if(t.includes(e))return"safe";return"medium"}function P1(t,e){if(!t)return"safe";let n=ge(RR.resolve(e.cwd,t)),r=Bu();for(let o of r)if(n===o||n.startsWith(o+"/"))return"high";if(n.includes("/.git/"))return"high";if(e.workspaceRoot!==void 0){let o=ge(e.workspaceRoot);if(RR.relative(o,n).startsWith(".."))return"high"}return n.includes("/node_modules/")?"medium":"safe"}var M1=new Set(["delete","drop","remove","destroy","truncate","purge","wipe","write","create","update","insert","upsert","patch","rename","exec","execute","run","eval","send","push","publish","deploy","post","merge","rollback","reset","terminate","provision","scale","disable","charge","refund","revoke"]);function O1(t){return t.split("__").slice(1).join("__").split(/[_-]+/).filter(Boolean)}function CR(t,e,n){let r=t.toLowerCase();if(r==="bash"){let o=R1(e);return I1(o)}if(r==="write_file"||r==="edit_file"){let o=C1(e);return P1(o,n)}if(xl(t)==="read")return"safe";if(r==="send_telegram")return"medium";if(r.startsWith("mcp__"))return O1(r).some(s=>M1.has(s))?"high":"medium";if(r==="create_schedule"||r==="cancel_schedule")return"high";if(r==="worktree"){let o=typeof e=="object"&&e!==null?e:{},s=typeof o.action=="string"?o.action:"";return s==="list"?"safe":s==="remove"&&o.force===!0?"high":"medium"}return r==="browser_act"||r==="browser_open"||r==="web_scrape"?"medium":"safe"}bn();Q();Sm();_u();vr();import Um from"path";import{lstatSync as D1}from"fs";import{spawnSync as F1}from"child_process";var L1=new Set(["node_modules","dist","build",".next","coverage",".cache","__pycache__",".turbo",".parcel-cache","out","target"]),N1=/[*?$`(){};|&<>'"\\\r\n]/;function $1(t){return t==="--recursive"?!0:t.startsWith("--")?!1:/^-[A-Za-z]+$/.test(t)&&/[rR]/.test(t)}function U1(t){if(!/^rm\b/.test(t)||N1.test(t))return null;let e=t.trim().split(/\s+/),n=[],r=!1,o=!1;for(let s of e.slice(1)){if(!o&&s==="--"){o=!0;continue}if(!o&&s.startsWith("-")){$1(s)&&(r=!0);continue}n.push(s)}return n.length===0?null:{targets:n,recursive:r}}function B1(t,e){try{return D1(t).isDirectory()?F1("git",["check-ignore","--quiet","--",t],{cwd:e,stdio:"ignore"}).status===0:!1}catch(n){return n.code==="ENOENT"}}function IR(t,e,n){let r=U1(t);if(r===null||!r.recursive)return!1;let o=ge(n);for(let s of r.targets){if(s==="/"||s==="."||s===".."||s==="~"||s.startsWith("~/")||s==="$HOME"||s.startsWith("$HOME/")||s===".git"||s.startsWith(".git/"))return!1;let i=ge(Um.resolve(e,s));if(i===o||!i.startsWith(o+Um.sep)||!L1.has(Um.basename(i))||!B1(i,o))return!1}return!0}var H1=3e5,PR=300;function MR(t,e,n,r){let o=r?.approvalTimeoutMs??H1,s=r?.promptForApproval??!0,i=r?.traceWriter,a=r?.sessionId,l=r?.route??((d,u)=>He.route(d,u));async function c(d,u,p,f){let m=Date.now(),g=j1(d,u),h=new AbortController,w=()=>h.abort();p&&(p.aborted?h.abort():p.addEventListener("abort",w,{once:!0}));let v=Symbol("afk-approval-timeout"),A,E,T=new Promise(x=>{E=()=>{A||(A=setTimeout(()=>{h.abort(),x(v)},o),A.unref?.())}});function _(x,C){let I=Date.now()-m,L=x.decision==="block";return Ve(i,{hookEvent:"PreToolUse",...L?{decision:"block"}:{},...L&&x.reason!==void 0?{reason:x.reason}:{},...L?{blockedTool:d}:{},durationMs:I,approvalOutcome:C}),x}let R;try{let x=f??a;R=await Promise.race([l(g,{signal:h.signal,onActive:E,...x!==void 0?{sessionId:x}:{}}),T])}finally{A&&clearTimeout(A),p&&p.removeEventListener("abort",w)}if(R===v)return _($s(d,`no approval arrived within ${Math.round(o/1e3)}s`),"timeout");if(R.action!=="accept")return _($s(d,R.action==="cancel"?"the operator cancelled the approval prompt":"no operator approval was available"),R.action==="cancel"?"cancel":"decline");let S=String(R.content?.choice??"").toLowerCase();return S==="approve"?_({},"approved"):S==="deny"?_($s(d,"the operator denied it"),"denied"):_($s(d,"the approval prompt returned an unrecognised choice"),"unrecognised")}return function(u,p){if(u.event!=="PreToolUse")return{};if(t()!=="autonomous")return{};let{toolName:f}=u,m=Date.now();if(f==="send_telegram")return{};let g=n?.()??e??process.cwd(),h=u.cwd,w=h??g,A=(h!==void 0?K1(h,g):void 0)??g,E=CR(f,u.input,{cwd:w,workspaceRoot:A});if(E==="high"&&f==="bash"){let T=typeof u.input=="object"&&u.input!==null&&"command"in u.input?String(u.input.command??""):"";if(T&&IR(T,w,A))return Ve(i,{hookEvent:"PreToolUse",blockedTool:f,durationMs:Date.now()-m,approvalOutcome:"carve-out"}),{}}if(E!=="high")return{};if(u.parentSessionId!==void 0||!s){let T=$s(f,"AFK mode runs autonomously without a human watching");return Ve(i,{hookEvent:"PreToolUse",decision:"block",...T.reason!==void 0?{reason:T.reason}:{},blockedTool:f,durationMs:Date.now()-m,approvalOutcome:"hard-block"}),T}return c(f,u.input,p,u.sessionId)}}function j1(t,e){let n=W1(e);return{serverName:"agent-afk",message:`AFK: \`${t}\` is high-risk / irreversible and AFK mode runs unattended. Approve this single call?`+(n?`
 
 Input: ${n}`:""),mode:"form",title:"AFK high-risk approval",requestedSchema:{type:"object",properties:{choice:{type:"string",title:"Approve this high-risk operation?",enum:["approve","deny"],description:"'approve' runs this single call. 'deny' refuses it (the model gets an error and should push an Asking summary or take a safe path)."}},required:["choice"]}}}function W1(t){let e;try{e=typeof t=="string"?t:JSON.stringify(t)}catch{e=String(t)}return e?(e=wm(e),e.length>PR?`${e.slice(0,PR)}\u2026 [truncated]`:e):""}function $s(t,e){return{decision:"block",reason:`AFK mode: ${t} is refused \u2014 this op is high-risk or irreversible, and ${e}. Push an Asking summary to Telegram (send_telegram) and stop, or have the operator run /afk off and take over.`}}function K1(t,e){let n=Vr.resolve(t),r=Vr.resolve(e);if(n===r)return r;let o=Vr.relative(r,n);if(o!==""&&!o.startsWith("..")&&!Vr.isAbsolute(o))return yr(n)??n;let s=yr(r),i=yr(n);if(s!==void 0&&i!==void 0&&Vr.dirname(s)===Vr.dirname(i))return i}be();Rn();import{mkdirSync as z1,rmSync as J1,writeFileSync as V1}from"fs";import{join as Bm}from"path";de();ha();function G1(t){let e=new Set;for(let a of t.nodes){if(e.has(a.id))throw new Error(`Duplicate node ID: ${a.id}`);e.add(a.id)}let n=new Set;for(let a of t.edges){if(!e.has(a.from))throw new Error(`Edge references non-existent node: ${a.from}`);if(!e.has(a.to))throw new Error(`Edge references non-existent node: ${a.to}`);let l=`${a.from}->${a.to}`;if(n.has(l))throw new Error(`Duplicate edge: ${a.from} -> ${a.to}`);n.add(l)}let r=OR(t),o=new Map(r.inDegree),s=[];for(let[a,l]of o)l===0&&s.push(a);let i=0;for(;s.length>0;){let a=s.shift();i+=1;for(let l of r.downstream.get(a)??[]){let c=o.get(l)-1;o.set(l,c),c===0&&s.push(l)}}if(i!==e.size)throw new Error("Cycle detected in DAG")}function OR(t){let e=new Map,n=new Map,r=new Map;for(let o of t.nodes)e.set(o.id,new Set),n.set(o.id,new Set),r.set(o.id,0);for(let o of t.edges)e.get(o.from).add(o.to),n.get(o.to).add(o.from),r.set(o.to,r.get(o.to)+1);return{downstream:e,upstream:n,inDegree:r}}function q1(t,e,n){let r=[t];for(;r.length>0;){let o=r.shift();for(let s of e.get(o)??[])n.has(s)||(n.add(s),r.push(s))}}async function DR(t,e,n={}){if(t.nodes.length===0)return{outputs:{},failed:[],skipped:[]};G1(t);let{failFast:r=!0,nodeTimeoutMs:o,maxConcurrency:s=8}=n,i=o!==void 0&&Number.isFinite(o)&&o>0,a=OR(t),l=new Map(t.nodes.map(h=>[h.id,h])),c={},d=[],u=new Set,p=new Set,f=new Map(a.inDegree),m=new AbortController,g=()=>{m.signal.aborted||m.abort(e.reason)};e.aborted?m.abort(e.reason):e.addEventListener("abort",g,{once:!0});try{for(;!m.signal.aborted;){let h=[];for(let[v,A]of f)A===0&&!p.has(v)&&!u.has(v)&&h.push(v);if(h.length===0)break;let w=await br(h,s,async v=>{let A=l.get(v),E=new AbortController,T=()=>{E.signal.aborted||E.abort(m.signal.reason)};m.signal.aborted?E.abort(m.signal.reason):m.signal.addEventListener("abort",T,{once:!0});let _;i&&!E.signal.aborted&&(_=setTimeout(()=>{E.signal.aborted||E.abort(new Ie(`DAG node "${v}" exceeded nodeTimeoutMs of ${o}ms`,o))},o));let R={};for(let S of a.upstream.get(v)??[])R[S]=c[S];try{let S=await A.run(R,E.signal);return{id:v,result:S}}finally{_!==void 0&&clearTimeout(_),m.signal.removeEventListener("abort",T)}});for(let v=0;v<w.length;v++){let A=w[v];if(A.status==="fulfilled"){let{id:E,result:T}=A.value;c[E]=T,p.add(E),f.delete(E);for(let _ of a.downstream.get(E)??[])f.set(_,f.get(_)-1)}else{let E=A.reason instanceof Error?A.reason:new Error(String(A.reason)),T=h[v];d.push({id:T,error:E}),p.add(T),f.delete(T),q1(T,a.downstream,u),r&&m.abort("fail-fast")}}}}finally{e.removeEventListener("abort",g)}return{outputs:c,failed:d,skipped:Array.from(u)}}Ce();de();async function FR(t){let{manager:e,parentSession:n,nodes:r,edges:o,failFast:s,nodeTimeoutMs:i}=t,a=n.abortSignal??new AbortController().signal,l=r.map(c=>({id:c.id,async run(d,u){let p=await e.forkSubagent({parent:{sessionId:n.sessionId},config:{model:c.model??"sonnet",systemPrompt:c.systemPrompt,...c.canUseTool!==void 0?{canUseTool:c.canUseTool}:{},...c.cwd!==void 0?{cwd:c.cwd}:{},...c.readRoots!==void 0?{readRoots:c.readRoots}:{},...c.writeRoots!==void 0?{writeRoots:c.writeRoots}:{},...c.apiKey!==void 0?{apiKey:c.apiKey}:{},...c.maxToolUseIterations!==void 0?{maxToolUseIterations:c.maxToolUseIterations}:{}},idPrefix:c.idPrefix??`dag-${c.id}`,...c.outputSchema!==void 0?{outputSchema:c.outputSchema}:{},agentType:c.agentType??c.idPrefix??`dag-${c.id}`,...c.parentId!==void 0?{parentId:c.parentId}:{}}),f=()=>{p.cancel().catch(()=>{})};u.aborted?p.cancel().catch(()=>{}):u.addEventListener("abort",f,{once:!0});try{if(u.aborted)throw new DOMException("Aborted","AbortError");let m=c.promptBuilder(d),g=await p.runToResult(m);if(g.status!=="succeeded"){let w,v=u.reason;throw v instanceof Ie?w=new Error(`Subagent ${c.id} aborted: ${v.message}`,g.error?{cause:g.error}:{}):w=g.error??new Error(`Subagent ${c.id} ${g.status}`),PE(w,{partialOutput:g.partialOutput,subagentId:g.id})}if(g.output!==void 0)return g.output;let h=g.message?.content;return typeof h=="string"?Br(h,g.stopReason):h}finally{u.removeEventListener("abort",f),await p.teardown().catch(()=>{})}}}));return DR({nodes:l,edges:o},a,{failFast:s,nodeTimeoutMs:i})}ke();ht();un();Tn();j();var LR=1e3,qc=36e5,NR=1,$R=1e3;function Y1(t){if(typeof t!="object"||t===null)throw new Error("Compose tool input must be an object");let e=t,n=e.nodes;if(!Array.isArray(n)||n.length===0)throw new Error('Compose tool requires a non-empty "nodes" array');let r=20;if(n.length>r)throw new Error(`Compose tool supports at most ${r} nodes (got ${n.length}). Split into multiple compose calls for larger workloads.`);let o=[],s=new Set;for(let m of n){if(typeof m!="object"||m===null)throw new Error("Each node must be an object");let g=m,h=g.id;if(typeof h!="string"||h.trim().length===0)throw new Error('Each node must have a non-empty "id" string');if(!/^[A-Za-z0-9_-]+$/.test(h)){let A=h.replace(/[\x00-\x1f\x7f]/g,"?").slice(0,32);throw new Error(`Node id "${A}" must match /^[A-Za-z0-9_-]+$/ (alphanumeric, underscore, hyphen)`)}if(s.has(h))throw new Error(`Duplicate node ID: ${h}`);s.add(h);let w=g.prompt;if(typeof w!="string"||w.trim().length===0)throw new Error(`Node "${h}" must have a non-empty "prompt" string`);let v;if(g.model!==void 0){if(typeof g.model!="string")throw new Error(`Node "${h}" model must be a string`);v=g.model}o.push({id:h,prompt:w,model:v})}let i;if(e.edges!==void 0){if(!Array.isArray(e.edges))throw new Error('"edges" must be an array');i=[];for(let m of e.edges){if(typeof m!="object"||m===null)throw new Error("Each edge must be an object");let g=m;if(typeof g.from!="string"||typeof g.to!="string")throw new Error('Each edge must have "from" and "to" strings');if(!s.has(g.from))throw new Error(`Edge references non-existent node: ${g.from}`);if(!s.has(g.to))throw new Error(`Edge references non-existent node: ${g.to}`);i.push({from:g.from,to:g.to})}}let a;if(e.fail_fast!==void 0){if(typeof e.fail_fast!="boolean")throw new Error('"fail_fast" must be a boolean');a=e.fail_fast}let l=[],c;if(e.node_timeout_ms!==void 0){let m=e.node_timeout_ms;if(typeof m!="number"||!Number.isFinite(m)||m<=0)throw new Error('"node_timeout_ms" must be a positive finite number (milliseconds)');if(m<LR)throw new Error(`"node_timeout_ms" must be at least ${LR}ms (got ${m}). Sub-second timeouts are almost always a unit mistake.`);c=Math.min(qc,m),m>qc&&l.push(`node_timeout_ms clamped: requested ${m}ms exceeds the maximum ${qc}ms; using ${qc}ms.`)}let d="max_tool_rounds_per_node",u="max_tool_calls_per_node",p=e[d]!==void 0?d:u;e[d]!==void 0&&e[u]!==void 0?l.push(`both "${d}" and the deprecated "${u}" were supplied; using "${d}" and ignoring the deprecated key.`):e[u]!==void 0&&l.push(`"${u}" is deprecated \u2014 use "${d}". The unit is tool-use ROUNDS (a round with N parallel calls costs 1), and spending the budget now triggers a tools-stripped wind-down round instead of cancelling the node.`);let f;if(e[p]!==void 0){let m=e[p];if(typeof m!="number"||!Number.isFinite(m)||m<=0)throw new Error(`"${p}" must be a positive finite number`);if(!Number.isInteger(m))throw new Error(`"${p}" must be an integer (got ${m}). Tool-use rounds are discrete events; fractional budgets are not meaningful.`);if(m<NR)throw new Error(`"${p}" must be at least ${NR}`);if(m>$R)throw new Error(`"${p}" must be at most ${$R} (got ${m}). A larger budget no longer constrains useful work.`);f=m}return{parsed:{nodes:o,edges:i,fail_fast:a,node_timeout_ms:c,max_tool_rounds_per_node:f},warnings:l}}var Us=8e3,UR=500,BR=4e3;function X1(t){if(t==null)return;let e=typeof t=="string"?t:JSON.stringify(t);if(e.length!==0)return e.length>BR?e.slice(0,BR)+`
 \u2026 (truncated)`:e}function Q1(t,e,n,r){try{let o=Bm(_e(),t,"compose",e);z1(o,{recursive:!0});let s=Bm(o,`${n}.txt`);return V1(s,r,"utf8"),s}catch{return}}function Z1(t,e){let n=[],r=[];for(let[o,s]of Object.entries(t.outputs)){let i=typeof s=="string"?s:s!=null?JSON.stringify(s):"(no output)",a;if(i.length>Us){let l=Q1(e.sessionId,e.callId,o,i);r.push({nodeId:o,emittedChars:Us,totalChars:i.length,...l!==void 0?{spillPath:l}:{}});let c=l!==void 0?`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-afk",
-  "version": "5.84.11",
+  "version": "5.84.12",
   "description": "Open-source coding-agent harness you can actually change — own the loop (prompts, gates, routing, skills, terminal states), use any model, run long tasks while you're away.",
   "main": "dist/index.mjs",
   "types": "dist/index.d.ts",