agent-relay 12.2.5 → 12.2.6

package/dist/cli/commands/product-surfaces.d.ts

@@ -8,6 +8,7 @@
  */
 import type { Command } from 'commander';
 import { type RelayCliSurface } from '@agent-relay/cli-surface';
+import { type SurfacePackage } from '../lib/product-surface-store.js';
 import { type RelayCliSurfaceDependencies } from '../lib/relay-cli-surface.js';
 /** How one product group is mounted. */
 export interface ProductSurfaceDefinition {
@@ -46,9 +47,58 @@ export interface ProductSurfaceDependencies extends RelayCliSurfaceDependencies
 }
 /** The product groups `agent-relay` mounts. */
 export declare const PRODUCT_SURFACES: readonly ProductSurfaceDefinition[];
+/**
+ * The npm spec behind each mounted surface, mirroring `packages/cli/package.json`.
+ *
+ * Only the compiled standalone binary reads this: it has no `node_modules` and
+ * no manifest on disk, so when a specifier does not resolve it installs the
+ * package itself, and the version it installs has to be the one the npm
+ * distribution would have had. `product-surfaces.test.ts` asserts these ranges
+ * still match the manifest, because a pin bumped in one place and not the other
+ * is invisible until someone runs the binary.
+ */
+export declare const SURFACE_PACKAGES: Readonly<Record<string, SurfacePackage>>;
+/** Seams for the standalone fallback; the defaults are the real store. */
+export interface SurfaceImportDependencies {
+    /** Plain `import()`. The only path the npm distribution ever takes. */
+    importSpecifier: (specifier: string) => Promise<unknown>;
+    /** Whether this process is the compiled binary, which carries no packages. */
+    isStandalone: () => boolean;
+    /** Install the package on demand; returns the directory holding it. */
+    provision: (pkg: SurfacePackage) => Promise<string>;
+    /** Import the specifier out of a provisioned directory. */
+    importFromStore: (installRoot: string, specifier: string) => Promise<unknown>;
+}
+/**
+ * Injectable dependencies for surface import, with optional context for provisioned options.
+ */
+export interface SurfaceImportDependenciesWithContext extends SurfaceImportDependencies {
+    /** Optional product name for which to create options (e.g., 'sessions'). */
+    optionsFor?: string;
+}
+/**
+ * Import a mounted surface, provisioning it first if this binary has to.
+ *
+ * On npm — every install, every CI runner, every test in this repo — the first
+ * `import()` resolves and this returns exactly what `import(specifier)` returns.
+ * Nothing below the `catch` runs, and no directory is created.
+ *
+ * The compiled standalone binary is the one caller that falls through: it is a
+ * single file with no `node_modules`, so a mounted SDK has to be installed
+ * before it can be imported (#1795). Only a specifier this CLI pins is eligible
+ * — a caller naming something else (the end-to-end test mounts product builds
+ * by absolute path) gets its original error back.
+ *
+ * @param specifier - Package subpath exporting `createRelayCliSurface`.
+ * @param overrides - Optional dependencies and context (including optionsFor for provisioned surfaces).
+ */
+export declare function importProductSurface(specifier: string, overrides?: Partial<SurfaceImportDependenciesWithContext>): Promise<unknown>;
 /**
  * Import a product's surface and prepare it for mounting.
  *
+ * For the compiled standalone binary, passes context (optionsFor) to ensure
+ * provisioned surfaces are created with the same options as the npm distribution.
+ *
  * @param definition - The group being loaded.
  * @param deps - Import hook and output sink.
  * @returns The surface, extended when the definition asks for it.

package/dist/cli/commands/product-surfaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"product-surfaces.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/product-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAoC,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlG,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAErG,wCAAwC;AACxC,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;CAChF;AAOD,oFAAoF;AACpF,MAAM,WAAW,0BAA2B,SAAQ,2BAA2B;IAC7E,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAqBD,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,EAAE,SAAS,wBAAwB,EAqB/D,CAAC;AA+EF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,eAAe,CAAC,CAkB1B;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,OAAO,CAAC,0BAA0B,CAAM,EACnD,WAAW,GAAE,SAAS,wBAAwB,EAAqB,GAClE,IAAI,CAmBN"}
+{"version":3,"file":"product-surfaces.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/product-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAoC,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMlG,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAErG,wCAAwC;AACxC,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC;CAChF;AAOD,oFAAoF;AACpF,MAAM,WAAW,0BAA2B,SAAQ,2BAA2B;IAC7E,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvD;AAqBD,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,EAAE,SAAS,wBAAwB,EAqB/D,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAWrE,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,yBAAyB;IACxC,uEAAuE;IACvE,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,8EAA8E;IAC9E,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B,uEAAuE;IACvE,SAAS,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACpD,2DAA2D;IAC3D,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED;;GAEG;AACH,MAAM,WAAW,oCAAqC,SAAQ,yBAAyB;IACrF,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,SAAS,GAAE,OAAO,CAAC,oCAAoC,CAAM,GAC5D,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAoLD;;;;;;;;;;;GAWG;AACH,wBAAsB,kBAAkB,CACtC,UAAU,EAAE,wBAAwB,EACpC,IAAI,EAAE,0BAA0B,GAC/B,OAAO,CAAC,eAAe,CAAC,CAmB1B;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,OAAO,CAAC,0BAA0B,CAAM,EACnD,WAAW,GAAE,SAAS,wBAAwB,EAAqB,GAClE,IAAI,CAmBN"}

package/dist/cli/commands/product-surfaces.js

@@ -10,6 +10,7 @@ import { composeSurfaces } from '@agent-relay/cli-surface';
 import { describeError } from '../lib/describe-error.js';
 import { redactCredentialValues } from '@agent-relay/cloud/redact';
 import { defaultExit } from '../lib/exit.js';
+import { loadSurfaceFromStore, isCompiledStandalone, provisionSurfacePackage, PROVISION_ERROR_CODE, SurfaceProvisionError, } from '../lib/product-surface-store.js';
 import { mountRelayCliSurface } from '../lib/relay-cli-surface.js';
 /**
  * The real process streams, with credentials masked on stderr.
@@ -51,6 +52,121 @@ export const PRODUCT_SURFACES = [
         extend: composeSessionReplay,
     },
 ];
+/**
+ * The npm spec behind each mounted surface, mirroring `packages/cli/package.json`.
+ *
+ * Only the compiled standalone binary reads this: it has no `node_modules` and
+ * no manifest on disk, so when a specifier does not resolve it installs the
+ * package itself, and the version it installs has to be the one the npm
+ * distribution would have had. `product-surfaces.test.ts` asserts these ranges
+ * still match the manifest, because a pin bumped in one place and not the other
+ * is invisible until someone runs the binary.
+ */
+export const SURFACE_PACKAGES = {
+    '@relayfile/sdk/relay-cli': { name: '@relayfile/sdk', range: '^0.10.64' },
+    '@relayflows/sdk/relay-cli': { name: '@relayflows/sdk', range: '^2.0.19' },
+    'ai-hist/relay-cli': {
+        name: 'ai-hist',
+        range: '^0.18.1',
+        // The cloud client is an optional dependency of this CLI, not of ai-hist,
+        // so provisioning ai-hist alone leaves the child unable to build it and
+        // `sessions cloud …` vanishes in the standalone binary only.
+        companions: [{ name: '@relayhistory/cloud-client', range: '^0.1.1' }],
+    },
+};
+function withImportDefaults(overrides) {
+    return {
+        importSpecifier: overrides.importSpecifier ?? ((specifier) => import(specifier)),
+        isStandalone: overrides.isStandalone ?? (() => isCompiledStandalone()),
+        provision: overrides.provision ?? ((pkg) => provisionSurfacePackage(pkg)),
+        optionsFor: overrides.optionsFor,
+        // Wrapped as a module so the caller's shape does not change: the store
+        // returns a ready surface, because `run` crosses a process boundary and
+        // cannot be reconstructed from an imported module.
+        importFromStore: overrides.importFromStore ??
+            (async (installRoot, specifier) => {
+                // Derived from the specifier, not taken from overrides: nothing in the
+                // command registration sets `optionsFor`, so relying on it meant the
+                // runner was always told "no options" and `sessions cloud …` was
+                // missing from the standalone binary while present on npm — the two
+                // distributions declaring different command trees. The override stays
+                // as a test seam.
+                const optionsFor = overrides.optionsFor ?? (specifier === 'ai-hist/relay-cli' ? 'sessions' : undefined);
+                let relayhistoryConfig;
+                if (optionsFor === 'sessions') {
+                    try {
+                        // Get the Relayhistory configuration that would be used in the normal flow
+                        const { readStoredRelayhistoryAuth, resolveRelayhistoryConfig } = await import('./session.js');
+                        const config = resolveRelayhistoryConfig(readStoredRelayhistoryAuth());
+                        if (config.baseUrl && config.token) {
+                            relayhistoryConfig = config;
+                        }
+                    }
+                    catch {
+                        // If helpers can't be imported, continue without config
+                    }
+                }
+                return {
+                    createRelayCliSurface: await loadSurfaceFromStore(installRoot, specifier, optionsFor, relayhistoryConfig).then((surface) => () => surface),
+                };
+            }),
+    };
+}
+/**
+ * Whether the import failed because nothing answered to the specifier.
+ *
+ * Node reports this as a code; Bun's compiled runtime words it as a resolution
+ * failure and does not always carry one. Anything else — a package that exists
+ * and threw while evaluating, say — must propagate untouched, since installing
+ * a second copy of it would not help and would hide the real error.
+ */
+function isUnresolvedSpecifier(error) {
+    const code = error?.code;
+    if (code === 'ERR_MODULE_NOT_FOUND' || code === 'MODULE_NOT_FOUND')
+        return true;
+    const message = error?.message ?? '';
+    return /Cannot find (module|package)|Could not resolve/i.test(message);
+}
+/**
+ * Import a mounted surface, provisioning it first if this binary has to.
+ *
+ * On npm — every install, every CI runner, every test in this repo — the first
+ * `import()` resolves and this returns exactly what `import(specifier)` returns.
+ * Nothing below the `catch` runs, and no directory is created.
+ *
+ * The compiled standalone binary is the one caller that falls through: it is a
+ * single file with no `node_modules`, so a mounted SDK has to be installed
+ * before it can be imported (#1795). Only a specifier this CLI pins is eligible
+ * — a caller naming something else (the end-to-end test mounts product builds
+ * by absolute path) gets its original error back.
+ *
+ * @param specifier - Package subpath exporting `createRelayCliSurface`.
+ * @param overrides - Optional dependencies and context (including optionsFor for provisioned surfaces).
+ */
+export async function importProductSurface(specifier, overrides = {}) {
+    const deps = withImportDefaults(overrides);
+    try {
+        return await deps.importSpecifier(specifier);
+    }
+    catch (error) {
+        const pkg = SURFACE_PACKAGES[specifier];
+        if (!pkg || !isUnresolvedSpecifier(error) || !deps.isStandalone())
+            throw error;
+        const installRoot = await deps.provision(pkg);
+        try {
+            return await deps.importFromStore(installRoot, specifier);
+        }
+        catch (storeError) {
+            // The package is on disk now, so "not installed" — what the generic
+            // handler would say about an ERR_MODULE_NOT_FOUND — is simply false, and
+            // sends the operator to reinstall something already there.
+            if (!isUnresolvedSpecifier(storeError))
+                throw storeError;
+            throw new SurfaceProvisionError(`${pkg.name} is installed at ${installRoot}, but this build cannot import it from there.\n` +
+                `${describeError(storeError)}`, { cause: storeError });
+        }
+    }
+}
 /**
  * Specifier for the optional cloud client.
  *
@@ -92,6 +208,61 @@ async function composeSessionReplay(base) {
         parts: [base, createSessionReplaySurface(base.version)],
     });
 }
+/**
+ * The package Node says it could not find, when it says so.
+ *
+ * ERR_MODULE_NOT_FOUND covers multiple situations and the code alone does
+ * not separate them:
+ *
+ *   Cannot find package '@relayfile/sdk' imported from …   -> genuinely absent
+ *   Cannot find module '/abs/path/…/dist/index.js'         -> present, incomplete
+ *   Cannot find module 'some-dep'                           -> missing dependency
+ *
+ * The second and third happen while an install is still writing or a dependency
+ * is missing, and misreporting them as "not installed" sends the operator
+ * to reinstall the wrong thing.
+ */
+function missingPackageFrom(error) {
+    const message = error?.message ?? '';
+    return /Cannot find package '([^']+)'/.exec(message)?.[1];
+}
+/**
+ * Whether Node named a file rather than a package.
+ *
+ * Detected positively on POSIX (/path/to/file), Windows (C:\path\to\file),
+ * and UNC (\\server\share\path) paths. An error shape this does not recognise
+ * should fall through to the plain "not installed" advice, which is right far
+ * more often than "incomplete" would be.
+ */
+function missingFileFrom(error) {
+    const message = error?.message ?? '';
+    // Match POSIX paths (/), Windows paths (C:\), and UNC paths (\\)
+    return /Cannot find module '((?:\/|[A-Za-z]:\\|\\\\)[^']*)'/.exec(message)?.[1];
+}
+/**
+ * Whether the module import failed because a transitive dependency is missing.
+ *
+ * Bare module names in CommonJS errors indicate missing dependencies, distinct
+ * from package exports (which are qualified names). A CommonJS module that was
+ * present but incomplete would name a file instead.
+ */
+function missingDependencyFrom(error) {
+    const message = error?.message ?? '';
+    const named = /Cannot find module '([^']+)'/.exec(message)?.[1];
+    if (named === undefined)
+        return undefined;
+    // Reject anything path-shaped rather than trusting the first character. A
+    // leading-character test reads `C:\\Users\\...` as a bare name starting with
+    // "C", so a Windows incomplete install was reported as a missing dependency
+    // called `C:\\Users\\...`. Excluding paths here also makes the order of the
+    // checks below irrelevant, which is one less thing to get wrong.
+    if (/^(?:\/|[A-Za-z]:[\\/]|\\\\)/.test(named))
+        return undefined;
+    // A specifier may contain forward slashes (`@scope/pkg`), never a backslash.
+    if (named.includes('\\'))
+        return undefined;
+    return named;
+}
 /**
  * Explain an import failure in terms the operator can act on.
  *
@@ -105,7 +276,41 @@ function describeLoadFailure(definition, error) {
         .split('/')
         .slice(0, definition.specifier.startsWith('@') ? 2 : 1)
         .join('/');
+    // Provisioning already composed the operator-facing text — which package,
+    // which directory, and what to do about it. Re-describing it here would only
+    // bury that behind a second framing.
+    if (code === PROVISION_ERROR_CODE) {
+        return `\`agent-relay ${definition.as}\` could not be prepared.\n${describeError(error)}`;
+    }
     if (code === 'ERR_MODULE_NOT_FOUND' || code === 'MODULE_NOT_FOUND') {
+        // Check what Node said is missing: a package name, a file path, or a bare module
+        const missingPackage = missingPackageFrom(error);
+        const missingFile = missingFileFrom(error);
+        const missingDependency = missingDependencyFrom(error);
+        // A package import that failed: a dependency of the product, not the product itself.
+        // Reinstalling the product alone would not fix it, and naming the wrong package
+        // wastes the operator.
+        if (missingPackage !== undefined && missingPackage !== packageName) {
+            return (`\`agent-relay ${definition.as}\` could not load ${packageName}: ` +
+                `it depends on ${missingPackage}, which is not installed.\n` +
+                `Reinstall agent-relay to repair the dependency tree.`);
+        }
+        // A CommonJS bare module name: a transitive dependency is missing. Likely caused
+        // by an interrupted install or version mismatch in the dependency tree.
+        if (missingDependency !== undefined) {
+            return (`\`agent-relay ${definition.as}\` could not load ${packageName}: ` +
+                `it depends on ${missingDependency}, which is not installed.\n` +
+                `Reinstall agent-relay to repair the dependency tree.`);
+        }
+        // Node named a file path rather than a package name, so the package directory
+        // exists but its contents do not. An interrupted or concurrent install looks like
+        // this, and it resolves itself once the install finishes.
+        if (missingFile !== undefined) {
+            return (`\`agent-relay ${definition.as}\` could not load ${packageName}: ` +
+                `it is installed but incomplete.\n` +
+                `If an install is running, wait for it to finish and retry; ` +
+                `otherwise reinstall agent-relay.\n${describeError(error)}`);
+        }
         return (`\`agent-relay ${definition.as}\` needs ${packageName}, which is not installed.\n` +
             `Reinstall agent-relay, or install ${packageName} alongside it.`);
     }
@@ -118,6 +323,9 @@ function describeLoadFailure(definition, error) {
 /**
  * Import a product's surface and prepare it for mounting.
  *
+ * For the compiled standalone binary, passes context (optionsFor) to ensure
+ * provisioned surfaces are created with the same options as the npm distribution.
+ *
  * @param definition - The group being loaded.
  * @param deps - Import hook and output sink.
  * @returns The surface, extended when the definition asks for it.
@@ -149,7 +357,7 @@ export async function loadProductSurface(definition, deps) {
  */
 export function registerProductSurfaceCommands(program, overrides = {}, definitions = PRODUCT_SURFACES) {
     const deps = {
-        importModule: overrides.importModule ?? ((specifier) => import(specifier)),
+        importModule: overrides.importModule ?? importProductSurface,
         io: overrides.io ?? processIo(),
         exit: overrides.exit ?? defaultExit,
     };

package/dist/cli/commands/product-surfaces.js.map

@@ -1 +1 @@
-{"version":3,"file":"product-surfaces.js","sourceRoot":"","sources":["../../../src/cli/commands/product-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,eAAe,EAAyC,MAAM,0BAA0B,CAAC;AAElG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAoC,MAAM,6BAA6B,CAAC;AA4CrG;;;;;;;;GAQG;AACH,SAAS,SAAS;IAChB,OAAO;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9C,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE;QACE,EAAE,EAAE,MAAM;QACV,WAAW,EAAE,iEAAiE;QAC9E,SAAS,EAAE,0BAA0B;KACtC;IACD;QACE,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,6DAA6D;QAC1E,SAAS,EAAE,2BAA2B;KACvC;IACD;QACE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,kEAAkE;QAC/E,SAAS,EAAE,mBAAmB;QAC9B,0EAA0E;QAC1E,+CAA+C;QAC/C,aAAa,EAAE,CAAC,SAAS,CAAC;QAC1B,aAAa,EAAE,4BAA4B;QAC3C,MAAM,EAAE,oBAAoB;KAC7B;CACF,CAAC;AAOF;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAE/D;;;;;;GAMG;AACH,KAAK,UAAU,4BAA4B;IACzC,MAAM,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/F,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,yBAAyB,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAkC,CAAC;QAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,6BAA6B,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,oBAAoB,CAAC,IAAqB;IACvD,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACpE,OAAO,eAAe,CAAC;QACrB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,UAAoC,EAAE,KAAc;IAC/E,MAAM,IAAI,GAAI,KAAuC,EAAE,IAAI,CAAC;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS;SACrC,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACtD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnE,OAAO,CACL,iBAAiB,UAAU,CAAC,EAAE,YAAY,WAAW,6BAA6B;YAClF,qCAAqC,WAAW,gBAAgB,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,+BAA+B,EAAE,CAAC;QAC7C,OAAO,CACL,iBAAiB,WAAW,iCAAiC,UAAU,CAAC,EAAE,MAAM;YAChF,sBAAsB,UAAU,CAAC,SAAS,cAAc,WAAW,aAAa,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,UAAU,CAAC,EAAE,WAAW,UAAU,CAAC,SAAS,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AACjH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAoC,EACpC,IAAgC;IAEhC,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAkB,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,SAAS,4CAA4C;YACjE,iBAAiB,UAAU,CAAC,EAAE,uBAAuB,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAgB,EAChB,YAAiD,EAAE,EACnD,cAAmD,gBAAgB;IAEnE,MAAM,IAAI,GAA+B;QACvC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC,SAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClF,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,SAAS,EAAE;QAC/B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,WAAW;KACpC,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,oBAAoB,CAClB,OAAO,EACP;YACE,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC;SACjD,EACD,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"product-surfaces.js","sourceRoot":"","sources":["../../../src/cli/commands/product-surfaces.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,eAAe,EAAyC,MAAM,0BAA0B,CAAC;AAElG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,GAEtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAoC,MAAM,6BAA6B,CAAC;AA4CrG;;;;;;;;GAQG;AACH,SAAS,SAAS;IAChB,OAAO;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9C,sEAAsE;QACtE,sEAAsE;QACtE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAAwC;IACnE;QACE,EAAE,EAAE,MAAM;QACV,WAAW,EAAE,iEAAiE;QAC9E,SAAS,EAAE,0BAA0B;KACtC;IACD;QACE,EAAE,EAAE,OAAO;QACX,WAAW,EAAE,6DAA6D;QAC1E,SAAS,EAAE,2BAA2B;KACvC;IACD;QACE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,kEAAkE;QAC/E,SAAS,EAAE,mBAAmB;QAC9B,0EAA0E;QAC1E,+CAA+C;QAC/C,aAAa,EAAE,CAAC,SAAS,CAAC;QAC1B,aAAa,EAAE,4BAA4B;QAC3C,MAAM,EAAE,oBAAoB;KAC7B;CACF,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA6C;IACxE,0BAA0B,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE;IACzE,2BAA2B,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,SAAS,EAAE;IAC1E,mBAAmB,EAAE;QACnB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,0EAA0E;QAC1E,wEAAwE;QACxE,6DAA6D;QAC7D,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;KACtE;CACF,CAAC;AAsBF,SAAS,kBAAkB,CACzB,SAAwD;IAExD,OAAO;QACL,eAAe,EAAE,SAAS,CAAC,eAAe,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChF,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,CAAC;QACtE,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACzE,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,uEAAuE;QACvE,wEAAwE;QACxE,mDAAmD;QACnD,eAAe,EACb,SAAS,CAAC,eAAe;YACzB,CAAC,KAAK,EAAE,WAAmB,EAAE,SAAiB,EAAE,EAAE;gBAChD,uEAAuE;gBACvE,qEAAqE;gBACrE,iEAAiE;gBACjE,oEAAoE;gBACpE,sEAAsE;gBACtE,kBAAkB;gBAClB,MAAM,UAAU,GACd,SAAS,CAAC,UAAU,IAAI,CAAC,SAAS,KAAK,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAEvF,IAAI,kBAAkE,CAAC;gBACvE,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACH,2EAA2E;wBAC3E,MAAM,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;wBAC/F,MAAM,MAAM,GAAG,yBAAyB,CAAC,0BAA0B,EAAE,CAAC,CAAC;wBACvE,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;4BACnC,kBAAkB,GAAG,MAA4C,CAAC;wBACpE,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wDAAwD;oBAC1D,CAAC;gBACH,CAAC;gBAED,OAAO;oBACL,qBAAqB,EAAE,MAAM,oBAAoB,CAC/C,WAAW,EACX,SAAS,EACT,UAAU,EACV,kBAAkB,CACnB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;iBACnC,CAAC;YACJ,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,IAAI,GAAI,KAAwC,EAAE,IAAI,CAAC;IAC7D,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,OAAO,GAAI,KAA0C,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3E,OAAO,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,YAA2D,EAAE;IAE7D,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YAAE,MAAM,KAAK,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,oEAAoE;YACpE,yEAAyE;YACzE,2DAA2D;YAC3D,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC;gBAAE,MAAM,UAAU,CAAC;YACzD,MAAM,IAAI,qBAAqB,CAC7B,GAAG,GAAG,CAAC,IAAI,oBAAoB,WAAW,iDAAiD;gBACzF,GAAG,aAAa,CAAC,UAAU,CAAC,EAAE,EAChC,EAAE,KAAK,EAAE,UAAU,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG,4BAA4B,CAAC;AAE/D;;;;;;GAMG;AACH,KAAK,UAAU,4BAA4B;IACzC,MAAM,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC/F,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,yBAAyB,CAAC,0BAA0B,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAkC,CAAC;QAC1F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,6BAA6B,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,oBAAoB,CAAC,IAAqB;IACvD,MAAM,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACpE,OAAO,eAAe,CAAC;QACrB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;KACxD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,OAAO,GAAI,KAA0C,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3E,OAAO,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,OAAO,GAAI,KAA0C,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3E,iEAAiE;IACjE,OAAO,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,OAAO,GAAI,KAA0C,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE1C,0EAA0E;IAC1E,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,iEAAiE;IACjE,IAAI,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,6EAA6E;IAC7E,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,UAAoC,EAAE,KAAc;IAC/E,MAAM,IAAI,GAAI,KAAuC,EAAE,IAAI,CAAC;IAC5D,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS;SACrC,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACtD,IAAI,CAAC,GAAG,CAAC,CAAC;IAEb,0EAA0E;IAC1E,6EAA6E;IAC7E,qCAAqC;IACrC,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,OAAO,iBAAiB,UAAU,CAAC,EAAE,8BAA8B,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnE,iFAAiF;QACjF,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAEvD,qFAAqF;QACrF,gFAAgF;QAChF,uBAAuB;QACvB,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YACnE,OAAO,CACL,iBAAiB,UAAU,CAAC,EAAE,qBAAqB,WAAW,IAAI;gBAClE,iBAAiB,cAAc,6BAA6B;gBAC5D,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,iFAAiF;QACjF,wEAAwE;QACxE,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CACL,iBAAiB,UAAU,CAAC,EAAE,qBAAqB,WAAW,IAAI;gBAClE,iBAAiB,iBAAiB,6BAA6B;gBAC/D,sDAAsD,CACvD,CAAC;QACJ,CAAC;QAED,8EAA8E;QAC9E,kFAAkF;QAClF,0DAA0D;QAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CACL,iBAAiB,UAAU,CAAC,EAAE,qBAAqB,WAAW,IAAI;gBAClE,mCAAmC;gBACnC,6DAA6D;gBAC7D,qCAAqC,aAAa,CAAC,KAAK,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;QAED,OAAO,CACL,iBAAiB,UAAU,CAAC,EAAE,YAAY,WAAW,6BAA6B;YAClF,qCAAqC,WAAW,gBAAgB,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,+BAA+B,EAAE,CAAC;QAC7C,OAAO,CACL,iBAAiB,WAAW,iCAAiC,UAAU,CAAC,EAAE,MAAM;YAChF,sBAAsB,UAAU,CAAC,SAAS,cAAc,WAAW,aAAa,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,gCAAgC,UAAU,CAAC,EAAE,WAAW,UAAU,CAAC,SAAS,KAAK,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AACjH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAoC,EACpC,IAAgC;IAEhC,IAAI,MAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAkB,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,CAAC,SAAS,4CAA4C;YACjE,iBAAiB,UAAU,CAAC,EAAE,uBAAuB,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAgB,EAChB,YAAiD,EAAE,EACnD,cAAmD,gBAAgB;IAEnE,MAAM,IAAI,GAA+B;QACvC,YAAY,EAAE,SAAS,CAAC,YAAY,IAAI,oBAAoB;QAC5D,EAAE,EAAE,SAAS,CAAC,EAAE,IAAI,SAAS,EAAE;QAC/B,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,WAAW;KACpC,CAAC;IAEF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,oBAAoB,CAClB,OAAO,EACP;YACE,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC;SACjD,EACD,IAAI,CACL,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/lib/product-surface-store.d.ts

@@ -0,0 +1,126 @@
+/**
+ * On-demand package tree for the mounted product SDKs.
+ *
+ * The npm distribution needs none of this: `@relayfile/sdk`, `@relayflows/sdk`
+ * and `ai-hist` are ordinary dependencies of `agent-relay`, so
+ * `import('@relayfile/sdk/relay-cli')` resolves and nothing here ever runs.
+ *
+ * The compiled standalone binary is the problem (#1795). It is one file with no
+ * node_modules, so every mounted group failed with MODULE_NOT_FOUND — reported
+ * as "not installed", in a distribution where installing cannot help. Bundling
+ * the SDKs does not fix it, and was tried:
+ *
+ *   - `@relayfile/sdk/relay-cli` locates and spawns a Go binary; exec needs a
+ *     real path on disk, not a bundled module
+ *   - `ai-hist` dlopens a native addon through a *variable* specifier, which no
+ *     bundler can see
+ *   - all three read data files relative to `import.meta.url`, which relocates
+ *     into Bun's `/$bunfs/root` once compiled
+ *
+ * So instead of pulling the packages into the binary, the binary puts them back
+ * on disk: a real `npm install` of the version pinned in
+ * `packages/cli/package.json`, under `~/.agentworkforce/relay/surfaces`, and the
+ * surface is imported from there. Real files satisfy dlopen, exec,
+ * `import.meta.url` and variable specifiers at once.
+ */
+import type { RelayCliSurface } from '@agent-relay/cli-surface';
+/** How long a single provisioning install may take before it is abandoned. */
+export declare const INSTALL_TIMEOUT_MS: number;
+/** A product SDK to provision, named exactly as the CLI manifest pins it. */
+export interface SurfacePackage {
+    /** Bare package name, e.g. `@relayfile/sdk`. */
+    name: string;
+    /** Version range copied from `packages/cli/package.json`, e.g. `^0.10.64`. */
+    range: string;
+    /**
+     * Packages the surface needs but does not depend on.
+     *
+     * `sessions` builds its Relayhistory cloud client from
+     * `@relayhistory/cloud-client`, which is an optional dependency of the CLI
+     * rather than of `ai-hist`. Installing only the surface leaves the child
+     * unable to import it, so `sessions cloud …` silently disappears in the
+     * standalone binary while working on npm — the two distributions would
+     * declare different command trees.
+     */
+    companions?: readonly SurfacePackage[];
+}
+/** Injectable seams; the defaults are the real store on the real filesystem. */
+export interface SurfaceStoreDependencies {
+    /** Directory holding every provisioned tree. */
+    root: string;
+    /** Install `pkg` into an already-created `directory`. */
+    install: (pkg: SurfacePackage, directory: string) => Promise<void>;
+    /** Progress and failure notices. Never stdout: that is the caller's data. */
+    notify: (line: string) => void;
+}
+/** Error code carried by every failure this module reports to the mount. */
+export declare const PROVISION_ERROR_CODE = "ERR_RELAY_SURFACE_PROVISION";
+/**
+ * A provisioning failure with an operator-facing message.
+ *
+ * Tagged with a code so `describeLoadFailure` can print {@link Error.message}
+ * verbatim. The message already names the package, the directory and the fix;
+ * wrapping it in "Could not load … :" or letting a stack through would bury
+ * that.
+ */
+export declare class SurfaceProvisionError extends Error {
+    readonly code = "ERR_RELAY_SURFACE_PROVISION";
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
+}
+/** `~/.agentworkforce/relay/surfaces`, or the configured data directory. */
+export declare function defaultSurfaceStoreRoot(): string;
+/**
+ * Whether this process is the compiled standalone binary.
+ *
+ * Both halves matter. `isBunRuntime` alone is true for anyone running the CLI
+ * under `bun`, where node_modules exists and provisioning would be pure waste;
+ * the `/$bunfs/root` entrypoint is what distinguishes `bun build --compile`
+ * output, which has no node_modules at all.
+ */
+export declare function isCompiledStandalone(argv?: readonly string[]): boolean;
+/**
+ * Where `pkg` is provisioned under `root`.
+ *
+ * Keyed by name *and* range, so upgrading the pin provisions a fresh tree
+ * rather than reusing a stale one. The readable prefix is for whoever opens the
+ * directory; the digest is what actually separates `^0.10.64` from `~0.10.64`,
+ * which sanitizing alone collapses onto the same name.
+ */
+export declare function surfaceInstallPath(root: string, pkg: SurfacePackage): string;
+/**
+ * Ensure `pkg` is installed in the store and return the directory holding it.
+ *
+ * @param pkg - Package name and the range pinned by the CLI manifest.
+ * @param overrides - Test seams for the store root, installer, and notices.
+ * @returns Absolute path to a directory with `node_modules` and the loader.
+ * @throws {SurfaceProvisionError} When the install cannot be completed, with a
+ *   message naming the fix rather than a stack.
+ */
+export declare function provisionSurfacePackage(pkg: SurfacePackage, overrides?: Partial<SurfaceStoreDependencies>): Promise<string>;
+/**
+ * The surface's declared command tree, read out of a provisioned tree.
+ *
+ * Only the declaration crosses the process boundary — `run` cannot, so the
+ * returned surface's `run` delegates to another child process.
+ *
+ * @param installRoot - Directory holding the provisioned package.
+ * @param specifier - Package subpath exporting `createRelayCliSurface`.
+ * @param optionsFor - Optional product name for which to create options (e.g., 'sessions').
+ * @param relayhistoryConfig - Optional Relayhistory cloud client config for sessions.
+ */
+export declare function loadSurfaceFromStore(installRoot: string, specifier: string, optionsFor?: string, relayhistoryConfig?: {
+    baseUrl: string;
+    token: string;
+}): Promise<RelayCliSurface>;
+/**
+ * Turn a failed `npm install` into one actionable line.
+ *
+ * npm's own output is dozens of lines ending in a path to a debug log the user
+ * of a standalone binary has no reason to read. What decides their next move is
+ * the first error npm reported — `ENOTFOUND`, `E403`, `ETARGET` — so that is
+ * what gets lifted out.
+ */
+export declare function describeInstallFailure(command: string, error: unknown): string;
+//# sourceMappingURL=product-surface-store.d.ts.map

package/dist/cli/lib/product-surface-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-surface-store.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/product-surface-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AASH,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAU5E,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,QAAiB,CAAC;AAiGjD,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CACxC;AAED,gFAAgF;AAChF,MAAM,WAAW,wBAAwB;IACvC,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,yDAAyD;IACzD,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,6EAA6E;IAC7E,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,4EAA4E;AAC5E,eAAO,MAAM,oBAAoB,gCAAgC,CAAC;AAElE;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,iCAAwB;gBAEzB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI3D;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,IAAI,MAAM,CAGhD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,SAAS,MAAM,EAAiB,GAAG,OAAO,CAEpF;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,MAAM,CAM5E;AAmBD;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,cAAc,EACnB,SAAS,GAAE,OAAO,CAAC,wBAAwB,CAAM,GAChD,OAAO,CAAC,MAAM,CAAC,CAajB;AA6ID;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,kBAAkB,CAAC,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC,eAAe,CAAC,CAkC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAc9E"}

package/dist/cli/lib/product-surface-store.js

@@ -0,0 +1,404 @@
+/**
+ * On-demand package tree for the mounted product SDKs.
+ *
+ * The npm distribution needs none of this: `@relayfile/sdk`, `@relayflows/sdk`
+ * and `ai-hist` are ordinary dependencies of `agent-relay`, so
+ * `import('@relayfile/sdk/relay-cli')` resolves and nothing here ever runs.
+ *
+ * The compiled standalone binary is the problem (#1795). It is one file with no
+ * node_modules, so every mounted group failed with MODULE_NOT_FOUND — reported
+ * as "not installed", in a distribution where installing cannot help. Bundling
+ * the SDKs does not fix it, and was tried:
+ *
+ *   - `@relayfile/sdk/relay-cli` locates and spawns a Go binary; exec needs a
+ *     real path on disk, not a bundled module
+ *   - `ai-hist` dlopens a native addon through a *variable* specifier, which no
+ *     bundler can see
+ *   - all three read data files relative to `import.meta.url`, which relocates
+ *     into Bun's `/$bunfs/root` once compiled
+ *
+ * So instead of pulling the packages into the binary, the binary puts them back
+ * on disk: a real `npm install` of the version pinned in
+ * `packages/cli/package.json`, under `~/.agentworkforce/relay/surfaces`, and the
+ * surface is imported from there. Real files satisfy dlopen, exec,
+ * `import.meta.url` and variable specifiers at once.
+ */
+import { execFile, spawn } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { promisify } from 'node:util';
+import { redactCredentialValues } from '@agent-relay/cloud/redact';
+import { describeError } from './describe-error.js';
+import { isBundledBunEntrypointPath } from './agent-relay-mcp-command.js';
+import { isBunRuntime } from './node-definition-loader.js';
+const execFileAsync = promisify(execFile);
+/** How long a single provisioning install may take before it is abandoned. */
+export const INSTALL_TIMEOUT_MS = 10 * 60 * 1000;
+/** Largest npm output we will buffer while waiting for the install. */
+const INSTALL_MAX_BUFFER = 16 * 1024 * 1024;
+/**
+ * Name of the generated module that performs the import.
+ *
+ * It has to live *inside* the provisioned directory. A bare specifier resolves
+ * against the `node_modules` directories above the importing module, so an
+ * `import()` written in the CLI's own source could never see this tree no
+ * matter where it is; one written next to it sees nothing else.
+ */
+const RUNNER_FILENAME = 'run-surface.mjs';
+const RUNNER_SOURCE = `// Generated by agent-relay. Do not edit.
+//
+// Entry point for a child process that runs one mounted product surface out
+// of the node_modules beside this file.
+//
+// Why a child process rather than importing into the CLI: inside the compiled
+// standalone binary, Bun cannot resolve bare specifiers from a tree it loaded
+// by absolute path. Resolving the surface entry point by hand gets as far as
+// the entry point; its own imports then fail the same way, and there is no
+// bottom to that. NODE_PATH does not change it. Running under the node that
+// performed the install sidesteps module resolution entirely, and costs one
+// process per invocation.
+//
+// Two modes, because the host renders help from the declared command tree and
+// must not forward it — help has to say agent-relay, not the product's name:
+//
+//   describe [--options-for=surface] specifier
+//   run [--options-for=surface] specifier [argv...]
+import process from 'node:process';
+
+const rawArgs = process.argv.slice(2);
+let optionsFor = undefined;
+let argIndex = 0;
+
+// Parse --options-for flag
+if (rawArgs[0]?.startsWith('--options-for=')) {
+  optionsFor = rawArgs[0].slice('--options-for='.length);
+  argIndex = 1;
+}
+
+const [mode, specifier, ...argv] = rawArgs.slice(argIndex);
+
+const module = await import(specifier);
+if (typeof module.createRelayCliSurface !== 'function') {
+  process.stderr.write(specifier + ' does not export createRelayCliSurface()\\n');
+  process.exit(1);
+}
+
+// Resolve options from environment if the parent provided them.
+// The parent passes cloud client configuration through environment variables so the
+// child can create the client without importing from the parent's module tree.
+let options = undefined;
+if (optionsFor === 'sessions') {
+  const baseUrl = process.env['RELAY_RELAYHISTORY_BASE_URL'];
+  const token = process.env['RELAY_RELAYHISTORY_TOKEN'];
+  if (baseUrl && token) {
+    try {
+      const cloudClientModule = await import('@relayhistory/cloud-client');
+      options = {
+        cloud: cloudClientModule.createRelayhistoryCloudClient({ baseUrl, token })
+      };
+    } catch {
+      // Cloud client is optional; local session commands still work without it
+    }
+  }
+}
+
+const surface = await module.createRelayCliSurface(options);
+
+if (mode === 'describe') {
+  // Write JSON description and let streams flush before exiting.
+  // process.exit does not wait for pipe buffers, so output can be truncated.
+  const json = JSON.stringify({
+    id: surface.id,
+    version: surface.version,
+    contract: surface.contract,
+    commands: surface.commands,
+  });
+  process.stdout.write(json, () => process.exit(0));
+} else {
+  // stdout and stderr are written straight through: the host pipes them into
+  // its own io sink, and chunks stay bytes so a binary payload survives.
+  const code = await surface.run(argv, {
+    stdout: (chunk) => process.stdout.write(chunk),
+    stderr: (chunk) => process.stderr.write(chunk),
+  });
+  // Exit only after all writes have been flushed.
+  process.stdout.write('', () => process.exit(typeof code === 'number' ? code : 0));
+}
+`;
+/** Error code carried by every failure this module reports to the mount. */
+export const PROVISION_ERROR_CODE = 'ERR_RELAY_SURFACE_PROVISION';
+/**
+ * A provisioning failure with an operator-facing message.
+ *
+ * Tagged with a code so `describeLoadFailure` can print {@link Error.message}
+ * verbatim. The message already names the package, the directory and the fix;
+ * wrapping it in "Could not load … :" or letting a stack through would bury
+ * that.
+ */
+export class SurfaceProvisionError extends Error {
+    code = PROVISION_ERROR_CODE;
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'SurfaceProvisionError';
+    }
+}
+/** `~/.agentworkforce/relay/surfaces`, or the configured data directory. */
+export function defaultSurfaceStoreRoot() {
+    const dataDir = process.env['AGENT_RELAY_DATA_DIR'] || path.join(os.homedir(), '.agentworkforce/relay');
+    return path.join(dataDir, 'surfaces');
+}
+/**
+ * Whether this process is the compiled standalone binary.
+ *
+ * Both halves matter. `isBunRuntime` alone is true for anyone running the CLI
+ * under `bun`, where node_modules exists and provisioning would be pure waste;
+ * the `/$bunfs/root` entrypoint is what distinguishes `bun build --compile`
+ * output, which has no node_modules at all.
+ */
+export function isCompiledStandalone(argv = process.argv) {
+    return isBunRuntime() && isBundledBunEntrypointPath(argv[1] ?? '');
+}
+/**
+ * Where `pkg` is provisioned under `root`.
+ *
+ * Keyed by name *and* range, so upgrading the pin provisions a fresh tree
+ * rather than reusing a stale one. The readable prefix is for whoever opens the
+ * directory; the digest is what actually separates `^0.10.64` from `~0.10.64`,
+ * which sanitizing alone collapses onto the same name.
+ */
+export function surfaceInstallPath(root, pkg) {
+    const digest = createHash('sha256').update(`${pkg.name}@${pkg.range}`).digest('hex').slice(0, 8);
+    // `-` is deliberately not in the kept set: leaving it in makes `sdk-^0.10.64`
+    // read as `sdk--0.10.64`, since the separator and the range operator are adjacent.
+    const readable = `${pkg.name}-${pkg.range}`.replace(/[^A-Za-z0-9.]+/g, '-').replace(/^-+|-+$/g, '');
+    return path.join(root, `${readable}-${digest}`);
+}
+/**
+ * Provisioning runs already in flight, keyed by their destination.
+ *
+ * Two groups invoked in one process, or one group whose loader is retried,
+ * must not start two npm installs of the same package. Cross-process races are
+ * handled separately, by the atomic rename in {@link provisionOnce}.
+ */
+const inFlight = new Map();
+function defaults(overrides) {
+    return {
+        root: overrides.root ?? defaultSurfaceStoreRoot(),
+        install: overrides.install ?? npmInstall,
+        notify: overrides.notify ?? ((line) => process.stderr.write(`${line}\n`)),
+    };
+}
+/**
+ * Ensure `pkg` is installed in the store and return the directory holding it.
+ *
+ * @param pkg - Package name and the range pinned by the CLI manifest.
+ * @param overrides - Test seams for the store root, installer, and notices.
+ * @returns Absolute path to a directory with `node_modules` and the loader.
+ * @throws {SurfaceProvisionError} When the install cannot be completed, with a
+ *   message naming the fix rather than a stack.
+ */
+export async function provisionSurfacePackage(pkg, overrides = {}) {
+    const deps = defaults(overrides);
+    const target = surfaceInstallPath(deps.root, pkg);
+    if (fs.existsSync(path.join(target, RUNNER_FILENAME)))
+        return target;
+    const existing = inFlight.get(target);
+    if (existing)
+        return existing;
+    const run = provisionOnce(pkg, target, deps).finally(() => {
+        inFlight.delete(target);
+    });
+    inFlight.set(target, run);
+    return run;
+}
+/**
+ * Install into a private staging directory, then publish it with one rename.
+ *
+ * The rename is what makes a concurrent second process safe: the destination
+ * either does not exist or is a finished tree, never a half-written one, so a
+ * reader can never import from an install that is still running. The loser of
+ * the race discards its own work and adopts the winner's — both trees hold the
+ * same pinned version, so there is nothing to reconcile.
+ */
+async function provisionOnce(pkg, target, deps) {
+    const spec = `${pkg.name}@${pkg.range}`;
+    fs.mkdirSync(deps.root, { recursive: true });
+    // Unique per attempt, so two processes never write into the same staging
+    // tree and npm never sees another install's partial node_modules.
+    const staging = `${target}.staging-${process.pid}-${randomBytes(4).toString('hex')}`;
+    fs.mkdirSync(staging, { recursive: true });
+    try {
+        // npm walks up from its cwd looking for a manifest; without this it would
+        // find the user's project (or this repo) and install into that instead.
+        fs.writeFileSync(path.join(staging, 'package.json'), `${JSON.stringify({
+            name: 'agent-relay-surface',
+            version: '0.0.0',
+            private: true,
+            dependencies: { [pkg.name]: pkg.range },
+        }, null, 2)}\n`);
+        fs.writeFileSync(path.join(staging, RUNNER_FILENAME), RUNNER_SOURCE);
+        // A silent multi-second npm install is indistinguishable from a hang, and
+        // this one is minutes on a cold cache.
+        deps.notify(`agent-relay: ${spec} is not bundled into the standalone binary; installing it now.\n` +
+            `  -> ${target}\n` +
+            `  This runs once per version. Later runs reuse it.`);
+        const started = Date.now();
+        try {
+            await deps.install(pkg, staging);
+        }
+        catch (error) {
+            throw new SurfaceProvisionError(`${spec} could not be installed into ${deps.root}.\n` +
+                `${describeError(error)}\n` +
+                `The standalone agent-relay binary installs the product SDKs on first use, ` +
+                `so this needs \`npm\` on PATH and network access to the npm registry.\n` +
+                `Retry when online, or install agent-relay from npm (\`npm i -g agent-relay\`), ` +
+                `which ships ${pkg.name} directly.`, { cause: error });
+        }
+        try {
+            fs.renameSync(staging, target);
+        }
+        catch (error) {
+            // Another process published the same version between our existence check
+            // and this rename. Its tree is the same install, so use it.
+            if (!fs.existsSync(path.join(target, RUNNER_FILENAME)))
+                throw error;
+        }
+        deps.notify(`agent-relay: ${spec} ready (${Math.round((Date.now() - started) / 1000)}s).`);
+        return target;
+    }
+    finally {
+        // A no-op after a successful rename; on any failure it is what keeps a
+        // dead staging tree from accumulating in the store.
+        fs.rmSync(staging, { recursive: true, force: true });
+    }
+}
+/**
+ * Run the surface runner in a child process and collect its result.
+ *
+ * `node` is the interpreter because `node` is what performed the install: a
+ * provisioned tree exists only if npm ran, and npm implies node. The compiled
+ * binary cannot run these itself — see RUNNER_SOURCE.
+ */
+function runnerProcess(installRoot, args, io, optionsFor, relayhistoryConfig) {
+    const runner = path.join(installRoot, RUNNER_FILENAME);
+    const runnerArgs = optionsFor ? [`--options-for=${optionsFor}`, ...args] : args;
+    // Pass cloud client config through environment if configured.
+    const env = { ...process.env };
+    if (relayhistoryConfig) {
+        env['RELAY_RELAYHISTORY_BASE_URL'] = relayhistoryConfig.baseUrl;
+        env['RELAY_RELAYHISTORY_TOKEN'] = relayhistoryConfig.token;
+    }
+    return new Promise((resolve, reject) => {
+        const child = spawn(process.execPath.endsWith('node') ? process.execPath : 'node', [runner, ...runnerArgs], {
+            // Do not change cwd: product commands may read relative paths (e.g., mount roots,
+            // output files), and those should be relative to where the user invoked the CLI.
+            cwd: process.cwd(),
+            // stdin inherited so an interactive product prompt still works.
+            stdio: ['inherit', 'pipe', 'pipe'],
+            env,
+        });
+        let stdout = '';
+        let stderr = '';
+        child.stdout?.on('data', (chunk) => {
+            if (io)
+                io.stdout(chunk);
+            else
+                stdout += chunk.toString('utf8');
+        });
+        child.stderr?.on('data', (chunk) => {
+            const text = typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+            stderr += text;
+            if (io) {
+                // Redact credentials in stderr before passing to io, since the child's
+                // stderr may contain argv that the npm path masks.
+                io.stderr(redactCredentialValues(text));
+            }
+        });
+        child.on('error', reject);
+        child.on('close', (code) => {
+            // Let all pending writes flush before resolving.
+            setImmediate(() => resolve({ code: code ?? 1, stdout, stderr }));
+        });
+    });
+}
+/**
+ * The surface's declared command tree, read out of a provisioned tree.
+ *
+ * Only the declaration crosses the process boundary — `run` cannot, so the
+ * returned surface's `run` delegates to another child process.
+ *
+ * @param installRoot - Directory holding the provisioned package.
+ * @param specifier - Package subpath exporting `createRelayCliSurface`.
+ * @param optionsFor - Optional product name for which to create options (e.g., 'sessions').
+ * @param relayhistoryConfig - Optional Relayhistory cloud client config for sessions.
+ */
+export async function loadSurfaceFromStore(installRoot, specifier, optionsFor, relayhistoryConfig) {
+    const described = await runnerProcess(installRoot, ['describe', specifier], undefined, optionsFor, relayhistoryConfig);
+    if (described.code !== 0) {
+        // If describe failed, show the child's stderr so the operator sees the real error
+        // (missing Go binary, native addon not compiled, factory threw, etc.) instead of
+        // just being told to reinstall. Only suggest reinstall if stderr is empty.
+        const detail = described.stderr.trim();
+        throw new SurfaceProvisionError(detail
+            ? `The provisioned package tree at ${installRoot} could not describe ${specifier}:\n${detail}`
+            : `The provisioned package tree at ${installRoot} could not describe ${specifier}.\n` +
+                'Delete that directory and retry; it will be reinstalled.');
+    }
+    const declaration = JSON.parse(described.stdout);
+    return {
+        ...declaration,
+        run: async (argv, io) => {
+            const result = await runnerProcess(installRoot, ['run', specifier, ...argv], io, optionsFor, relayhistoryConfig);
+            return result.code;
+        },
+    };
+}
+/**
+ * Turn a failed `npm install` into one actionable line.
+ *
+ * npm's own output is dozens of lines ending in a path to a debug log the user
+ * of a standalone binary has no reason to read. What decides their next move is
+ * the first error npm reported — `ENOTFOUND`, `E403`, `ETARGET` — so that is
+ * what gets lifted out.
+ */
+export function describeInstallFailure(command, error) {
+    const code = error?.code;
+    if (code === 'ENOENT') {
+        return `\`${command}\` is not on PATH.`;
+    }
+    if (error?.killed === true) {
+        return `\`${command} install\` timed out after ${Math.round(INSTALL_TIMEOUT_MS / 60_000)} minutes.`;
+    }
+    const lines = String(error?.stderr ?? '')
+        .split('\n')
+        .map((line) => line.trim())
+        .filter((line) => line !== '')
+        .slice(0, 3);
+    return lines.length > 0 ? redactCredentialValues(lines.join('\n')) : describeError(error);
+}
+/** The real installer: one `npm install` scoped to the staging directory. */
+async function npmInstall(pkg, directory) {
+    const command = process.platform === 'win32' ? 'npm.cmd' : 'npm';
+    try {
+        await execFileAsync(command, [
+            'install',
+            `${pkg.name}@${pkg.range}`,
+            ...(pkg.companions ?? []).map((companion) => `${companion.name}@${companion.range}`),
+            '--no-audit',
+            '--no-fund',
+            '--loglevel=error',
+        ], {
+            cwd: directory,
+            timeout: INSTALL_TIMEOUT_MS,
+            maxBuffer: INSTALL_MAX_BUFFER,
+            // The update notifier writes to stderr and can outlive the install.
+            env: { ...process.env, npm_config_update_notifier: 'false' },
+        });
+    }
+    catch (error) {
+        throw new Error(describeInstallFailure(command, error), { cause: error });
+    }
+}
+//# sourceMappingURL=product-surface-store.js.map

package/dist/cli/lib/product-surface-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product-surface-store.js","sourceRoot":"","sources":["../../../src/cli/lib/product-surface-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE5C;;;;;;;GAOG;AAEH,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAE1C,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+ErB,CAAC;AA+BF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,GAAG,oBAAoB,CAAC;IAErC,YAAY,OAAe,EAAE,OAA6B;QACxD,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;IACxG,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA0B,OAAO,CAAC,IAAI;IACzE,OAAO,YAAY,EAAE,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAmB;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpG,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEpD,SAAS,QAAQ,CAAC,SAA4C;IAC5D,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,uBAAuB,EAAE;QACjD,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,UAAU;QACxC,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,YAA+C,EAAE;IAEjD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAErE,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACxD,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAmB,EACnB,MAAc,EACd,IAA8B;IAE9B,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;IACxC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,OAAO,GAAG,GAAG,MAAM,YAAY,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACrF,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,IAAI,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAClC,GAAG,IAAI,CAAC,SAAS,CACf;YACE,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE;SACxC,EACD,IAAI,EACJ,CAAC,CACF,IAAI,CACN,CAAC;QACF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC;QAErE,0EAA0E;QAC1E,uCAAuC;QACvC,IAAI,CAAC,MAAM,CACT,gBAAgB,IAAI,kEAAkE;YACpF,QAAQ,MAAM,IAAI;YAClB,oDAAoD,CACvD,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,qBAAqB,CAC7B,GAAG,IAAI,gCAAgC,IAAI,CAAC,IAAI,KAAK;gBACnD,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI;gBAC3B,4EAA4E;gBAC5E,yEAAyE;gBACzE,iFAAiF;gBACjF,eAAe,GAAG,CAAC,IAAI,YAAY,EACrC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yEAAyE;YACzE,4DAA4D;YAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,uEAAuE;QACvE,oDAAoD;QACpD,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,WAAmB,EACnB,IAAuB,EACvB,EAAe,EACf,UAAmB,EACnB,kBAAuD;IAEvD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,iBAAiB,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,8DAA8D;IAC9D,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,kBAAkB,EAAE,CAAC;QACvB,GAAG,CAAC,6BAA6B,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAChE,GAAG,CAAC,0BAA0B,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC;IAC7D,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CACjB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAC7D,CAAC,MAAM,EAAE,GAAG,UAAU,CAAC,EACvB;YACE,kFAAkF;YAClF,iFAAiF;YACjF,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,gEAAgE;YAChE,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,GAAG;SACJ,CACF,CAAC;QACF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,IAAI,EAAE;gBAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,MAAM,IAAI,IAAI,CAAC;YACf,IAAI,EAAE,EAAE,CAAC;gBACP,uEAAuE;gBACvE,mDAAmD;gBACnD,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,iDAAiD;YACjD,YAAY,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,SAAiB,EACjB,UAAmB,EACnB,kBAAuD;IAEvD,MAAM,SAAS,GAAG,MAAM,aAAa,CACnC,WAAW,EACX,CAAC,UAAU,EAAE,SAAS,CAAC,EACvB,SAAS,EACT,UAAU,EACV,kBAAkB,CACnB,CAAC;IACF,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,kFAAkF;QAClF,iFAAiF;QACjF,2EAA2E;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAC7B,MAAM;YACJ,CAAC,CAAC,mCAAmC,WAAW,uBAAuB,SAAS,MAAM,MAAM,EAAE;YAC9F,CAAC,CAAC,mCAAmC,WAAW,uBAAuB,SAAS,KAAK;gBACjF,0DAA0D,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAiC,CAAC;IACjF,OAAO;QACL,GAAG,WAAW;QACd,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,WAAW,EACX,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAC3B,EAAE,EACF,UAAU,EACV,kBAAkB,CACnB,CAAC;YACF,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAc;IACpE,MAAM,IAAI,GAAI,KAAwC,EAAE,IAAI,CAAC;IAC7D,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,KAAK,OAAO,oBAAoB,CAAC;IAC1C,CAAC;IACD,IAAK,KAA0C,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QACjE,OAAO,KAAK,OAAO,8BAA8B,IAAI,CAAC,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,WAAW,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAE,KAA0C,EAAE,MAAM,IAAI,EAAE,CAAC;SAC5E,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,UAAU,CAAC,GAAmB,EAAE,SAAiB;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,aAAa,CACjB,OAAO,EACP;YACE,SAAS;YACT,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE;YAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACpF,YAAY;YACZ,WAAW;YACX,kBAAkB;SACnB,EACD;YACE,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,kBAAkB;YAC3B,SAAS,EAAE,kBAAkB;YAC7B,oEAAoE;YACpE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,0BAA0B,EAAE,OAAO,EAAE;SAC7D,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}

package/dist/index.cjs

@@ -303,7 +303,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // ../../node_modules/@relaycast/sdk/dist/version.js
-var SDK_VERSION = "8.11.1";
+var SDK_VERSION = "8.11.3";
 
 // ../../node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -21338,6 +21338,9 @@ var FleetNodeRegisterMessageSchema = external_exports.object({
   capabilities: external_exports.array(FleetCapabilitySchema),
   // Provider-level capacity; the node figure is the aggregate across providers.
   max_agents: external_exports.number().int().nonnegative(),
+  // `cloud:*` is reserved for control-plane lifecycle tags set at enrollment.
+  // The engine ignores (and logs) any `cloud:*` entry here and keeps the
+  // node's enrolled `cloud:*` tags instead.
   tags: external_exports.array(FleetNodeTagSchema),
   // Placement-safe repository identities. The engine persists these as
   // `repo:<owner/name>` tags so existing node roster readers can consume them.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay",
-  "version": "12.2.5",
+  "version": "12.2.6",
   "description": "Real-time agent-to-agent communication system",
   "type": "module",
   "main": "dist/index.cjs",
@@ -43,22 +43,22 @@
     "pack:validate": "npm pack --dry-run"
   },
   "dependencies": {
-    "@agent-relay/cli-surface": "12.2.5",
-    "@agent-relay/cloud": "12.2.5",
-    "@agent-relay/config": "12.2.5",
-    "@agent-relay/fleet": "12.2.5",
-    "@agent-relay/harness-driver": "12.2.5",
-    "@agent-relay/harnesses": "12.2.5",
-    "@agent-relay/sdk": "12.2.5",
-    "@agent-relay/session": "12.2.5",
-    "@agent-relay/utils": "12.2.5",
+    "@agent-relay/cli-surface": "12.2.6",
+    "@agent-relay/cloud": "12.2.6",
+    "@agent-relay/config": "12.2.6",
+    "@agent-relay/fleet": "12.2.6",
+    "@agent-relay/harness-driver": "12.2.6",
+    "@agent-relay/harnesses": "12.2.6",
+    "@agent-relay/sdk": "12.2.6",
+    "@agent-relay/session": "12.2.6",
+    "@agent-relay/utils": "12.2.6",
     "@modelcontextprotocol/sdk": "^1.23.0",
     "@relayfile/client": "^0.10.27",
-    "@relayfile/sdk": "^0.10.63",
+    "@relayfile/sdk": "^0.10.64",
     "@relayflows/cli": "1.0.1",
-    "@relayflows/sdk": "^2.0.16",
+    "@relayflows/sdk": "^2.0.19",
     "@xterm/headless": "^6.0.0",
-    "ai-hist": "^0.18.0",
+    "ai-hist": "^0.18.1",
     "commander": "^12.1.0",
     "dotenv": "^17.2.3",
     "jiti": "^2.6.1",