apphx 1.0.0 → 2.0.0

package/dist/integrations.js

@@ -1,87 +1,87 @@
 import { z } from "zod";
-import { createHash } from "node:crypto";
-import { homedir } from "node:os";
-import { dirname, isAbsolute, join, parse, resolve, sep } from "node:path";
 import { closeSync, constants, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, parse, resolve, sep } from "node:path";
+import { homedir } from "node:os";
 import { fileURLToPath } from "node:url";
+import { createHash } from "node:crypto";
 // src/integrations.ts
-const skill = "apple-app-factory";
-const marker = ".apple-app-factory-install.json";
-const owner = "apple-app-factory";
-const bundledDirectory = fileURLToPath(new URL("../skills/apple-app-factory/", import.meta.url));
+const skill = "apphx";
+const marker = ".apphx-install.json";
+const owner = "apphx";
+const bundledDirectory = fileURLToPath(new URL("../skills/apphx/", import.meta.url));
 const packageFile = fileURLToPath(new URL("../package.json", import.meta.url));
 const hosts = Object.freeze([
 	{
 		id: "codex",
 		name: "Codex",
-		invocation: "$apple-app-factory",
+		invocation: "$apphx",
 		projectDirectory: ".agents/skills",
 		globalDirectory: "~/.agents/skills",
 		source: "https://developers.openai.com/codex/skills",
-		instructions: "Use $apple-app-factory in Codex CLI or the IDE extension; /skills lists skills. Restart if discovery has not refreshed."
+		instructions: "Use $apphx in Codex CLI or the IDE extension; /skills lists skills. Restart if discovery has not refreshed."
 	},
 	{
 		id: "claude",
 		name: "Claude Code",
-		invocation: "/apple-app-factory",
+		invocation: "/apphx",
 		projectDirectory: ".claude/skills",
 		globalDirectory: "$CLAUDE_CONFIG_DIR/skills (default ~/.claude/skills)",
 		source: "https://code.claude.com/docs/en/skills",
-		instructions: "Use /apple-app-factory in a local Claude Code session. Start a new session if the skill is not listed. Cloud sessions do not inherit local user skills."
+		instructions: "Use /apphx in a local Claude Code session. Start a new session if the skill is not listed. Cloud sessions do not inherit local user skills."
 	},
 	{
 		id: "cursor",
 		name: "Cursor",
-		invocation: "/apple-app-factory",
+		invocation: "/apphx",
 		projectDirectory: ".cursor/skills",
 		globalDirectory: "~/.cursor/skills",
 		source: "https://cursor.com/docs/skills",
-		instructions: "In Agent chat, type / and select apple-app-factory. Restart or reopen the project if necessary. Global installation is local, not a Cloud Agent sync."
+		instructions: "In Agent chat, type / and select apphx. Restart or reopen the project if necessary. Global installation is local, not a Cloud Agent sync."
 	},
 	{
 		id: "pi",
 		name: "Pi",
-		invocation: "/skill:apple-app-factory",
+		invocation: "/skill:apphx",
 		projectDirectory: ".pi/skills",
 		globalDirectory: "$PI_CODING_AGENT_DIR/skills (default ~/.pi/agent/skills)",
 		source: "https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/skills.md",
-		instructions: "Grant project trust before using project skills, then /reload and /skill:apple-app-factory. Stock Pi has no native subagents: use a separate human-started reviewer session, not a spawned coding-agent CLI."
+		instructions: "Grant project trust before using project skills, then /reload and /skill:apphx. Stock Pi has no native subagents: use a separate human-started reviewer session, not a spawned coding-agent CLI."
 	},
 	{
 		id: "gemini",
 		name: "Gemini CLI",
-		invocation: "Use the apple-app-factory skill",
+		invocation: "Use the apphx skill",
 		projectDirectory: ".gemini/skills",
 		globalDirectory: "$GEMINI_CLI_HOME/.gemini/skills (default ~/.gemini/skills)",
 		source: "https://geminicli.com/docs/cli/skills/",
-		instructions: "Run /skills reload and /skills list, then ask: Use the apple-app-factory skill. Gemini calls activate_skill; approve its consent prompt. This is not a /apple-app-factory command."
+		instructions: "Run /skills reload and /skills list, then ask: Use the apphx skill. Gemini calls activate_skill; approve its consent prompt. This is not a /apphx command."
 	},
 	{
 		id: "opencode",
 		name: "OpenCode",
-		invocation: "Use the apple-app-factory skill",
+		invocation: "Use the apphx skill",
 		projectDirectory: ".opencode/skills",
 		globalDirectory: "$XDG_CONFIG_HOME/opencode/skills (default ~/.config/opencode/skills)",
 		source: "https://opencode.ai/docs/skills/",
-		instructions: "Ask OpenCode to use apple-app-factory; the agent loads it with its native skill({ name: \"apple-app-factory\" }) tool. Skill permissions must permit loading. Restart if necessary; no custom slash command is installed."
+		instructions: "Ask OpenCode to use apphx; the agent loads it with its native skill({ name: \"apphx\" }) tool. Skill permissions must permit loading. Restart if necessary; no custom slash command is installed."
 	},
 	{
 		id: "deepseek",
 		name: "DeepSeek Harness",
-		invocation: "Use the apple-app-factory skill",
+		invocation: "Use the apphx skill",
 		projectDirectory: ".dsh/skills (nearest Git root, otherwise selected project)",
 		globalDirectory: "$DSH_HOME/skills (default ~/.dsh/skills)",
 		source: "https://deepseek-harness.github.io/deepseek-harness/en/reference/subsystems/skills",
-		instructions: "Ask DeepSeek Harness to use apple-app-factory; its native skill({ name: \"apple-app-factory\" }) tool loads it. Requires the shipped filesystem skill provider and skill tool, with default roots enabled. Custom provider configurations are not modified."
+		instructions: "Ask DeepSeek Harness to use apphx; its native skill({ name: \"apphx\" }) tool loads it. Requires the shipped filesystem skill provider and skill tool, with default roots enabled. Custom provider configurations are not modified."
 	},
 	{
 		id: "hermes",
 		name: "Hermes Agent",
-		invocation: "/apple-app-factory",
+		invocation: "/apphx",
 		projectDirectory: ".hermes/skills",
 		globalDirectory: "$HERMES_HOME/skills (default ~/.hermes/skills)",
 		source: "https://hermes-agent.nousresearch.com/docs/user-guide/features/skills",
-		instructions: "Use /apple-app-factory. Project installation requires a Git root and a separate owner-approved hermes skills trust decision; this installer never grants trust. For non-Git projects or profile-wide cron use --global in the same HERMES_HOME as Hermes. Confirm discovery with hermes skills list; cron must attach the skill and an absolute workdir."
+		instructions: "Use /apphx. Project installation requires a Git root and a separate owner-approved hermes skills trust decision; this installer never grants trust. For non-Git projects or profile-wide cron use --global in the same HERMES_HOME as Hermes. Confirm discovery with hermes skills list; cron must attach the skill and an absolute workdir."
 	}
 ].map((host) => Object.freeze(host)));
 const digest = (bytes) => createHash("sha256").update(bytes).digest("hex");
@@ -260,7 +260,7 @@ function details(target) {
 }
 function bundle(host) {
 	const tree = readTree(bundledDirectory, true);
-	if (!tree.files["SKILL.md"] || tree.files[marker]) throw new Error("Invalid bundled apple-app-factory skill");
+	if (!tree.files["SKILL.md"] || tree.files[marker]) throw new Error("Invalid bundled apphx skill");
 	const files = fileDigests(tree);
 	if (!Object.keys(files).every(safeRelative) || JSON.stringify(tree.directories.sort()) !== JSON.stringify(directoriesFor(files))) throw new Error("Invalid bundled skill resource paths");
 	const version = JSON.parse(readRegular(packageFile, true).toString("utf8")).version;
@@ -315,7 +315,7 @@ function withLock(target, action) {
 	assertPath(directory);
 	mkdirSync(directory, { recursive: true });
 	assertPath(directory);
-	const lock = join(directory, ".apple-app-factory-install.lock");
+	const lock = join(directory, ".apphx-install.lock");
 	let descriptor;
 	try {
 		descriptor = openSync(lock, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 384);
@@ -333,11 +333,11 @@ function applyIntegration(host, options, operation) {
 	const target = location(host, options);
 	const next = bundle(host);
 	assertPath(target.path);
-	if (operation === "update" && !lstatSync(target.path, { throwIfNoEntry: false })) throw new Error(`No installation at ${target.path}; run app-factory install ${host} first with the same scope`);
+	if (operation === "update" && !lstatSync(target.path, { throwIfNoEntry: false })) throw new Error(`No installation at ${target.path}; run apphx install ${host} first with the same scope`);
 	return withLock(target, () => {
 		assertPath(target.path);
 		const previous = lstatSync(target.path, { throwIfNoEntry: false }) ? readOwned(target.path, host) : void 0;
-		if (operation === "update" && !previous) throw new Error(`No installation at ${target.path}; run app-factory install ${host} first with the same scope`);
+		if (operation === "update" && !previous) throw new Error(`No installation at ${target.path}; run apphx install ${host} first with the same scope`);
 		const result = {
 			...details(target),
 			installed: true,
@@ -349,10 +349,10 @@ function applyIntegration(host, options, operation) {
 			...result,
 			changed: false
 		};
-		if (operation === "install" && previous) throw new Error(`An older or different workflow is installed at ${target.path}; use app-factory update ${host} with the same scope`);
+		if (operation === "install" && previous) throw new Error(`An older or different workflow is installed at ${target.path}; use apphx update ${host} with the same scope`);
 		const parent = dirname(target.path);
 		mkdirSync(parent, { recursive: true });
-		const staging = mkdtempSync(join(dirname(parent), ".apple-app-factory-stage-"));
+		const staging = mkdtempSync(join(dirname(parent), ".apphx-stage-"));
 		const replacement = join(staging, skill);
 		const backup = join(staging, "previous");
 		let moved = false;

package/dist/integrations.js.map

@@ -1 +1 @@
-{"version":3,"file":"integrations.js","names":[],"sources":["../src/integrations.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { closeSync, constants, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, parse, resolve, sep } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { z } from 'zod';\n\n// Installation identity follows the skill, not the npm distribution name.\nconst skill = 'apple-app-factory';\nconst marker = '.apple-app-factory-install.json';\nconst owner = 'apple-app-factory';\nconst bundledDirectory = fileURLToPath(new URL('../skills/apple-app-factory/', import.meta.url));\nconst packageFile = fileURLToPath(new URL('../package.json', import.meta.url));\n\nexport const hosts = Object.freeze([\n  { id: 'codex', name: 'Codex', invocation: '$apple-app-factory', projectDirectory: '.agents/skills', globalDirectory: '~/.agents/skills', source: 'https://developers.openai.com/codex/skills', instructions: 'Use $apple-app-factory in Codex CLI or the IDE extension; /skills lists skills. Restart if discovery has not refreshed.' },\n  { id: 'claude', name: 'Claude Code', invocation: '/apple-app-factory', projectDirectory: '.claude/skills', globalDirectory: '$CLAUDE_CONFIG_DIR/skills (default ~/.claude/skills)', source: 'https://code.claude.com/docs/en/skills', instructions: 'Use /apple-app-factory in a local Claude Code session. Start a new session if the skill is not listed. Cloud sessions do not inherit local user skills.' },\n  { id: 'cursor', name: 'Cursor', invocation: '/apple-app-factory', projectDirectory: '.cursor/skills', globalDirectory: '~/.cursor/skills', source: 'https://cursor.com/docs/skills', instructions: 'In Agent chat, type / and select apple-app-factory. Restart or reopen the project if necessary. Global installation is local, not a Cloud Agent sync.' },\n  { id: 'pi', name: 'Pi', invocation: '/skill:apple-app-factory', projectDirectory: '.pi/skills', globalDirectory: '$PI_CODING_AGENT_DIR/skills (default ~/.pi/agent/skills)', source: 'https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/skills.md', instructions: 'Grant project trust before using project skills, then /reload and /skill:apple-app-factory. Stock Pi has no native subagents: use a separate human-started reviewer session, not a spawned coding-agent CLI.' },\n  { id: 'gemini', name: 'Gemini CLI', invocation: 'Use the apple-app-factory skill', projectDirectory: '.gemini/skills', globalDirectory: '$GEMINI_CLI_HOME/.gemini/skills (default ~/.gemini/skills)', source: 'https://geminicli.com/docs/cli/skills/', instructions: 'Run /skills reload and /skills list, then ask: Use the apple-app-factory skill. Gemini calls activate_skill; approve its consent prompt. This is not a /apple-app-factory command.' },\n  { id: 'opencode', name: 'OpenCode', invocation: 'Use the apple-app-factory skill', projectDirectory: '.opencode/skills', globalDirectory: '$XDG_CONFIG_HOME/opencode/skills (default ~/.config/opencode/skills)', source: 'https://opencode.ai/docs/skills/', instructions: 'Ask OpenCode to use apple-app-factory; the agent loads it with its native skill({ name: \"apple-app-factory\" }) tool. Skill permissions must permit loading. Restart if necessary; no custom slash command is installed.' },\n  { id: 'deepseek', name: 'DeepSeek Harness', invocation: 'Use the apple-app-factory skill', projectDirectory: '.dsh/skills (nearest Git root, otherwise selected project)', globalDirectory: '$DSH_HOME/skills (default ~/.dsh/skills)', source: 'https://deepseek-harness.github.io/deepseek-harness/en/reference/subsystems/skills', instructions: 'Ask DeepSeek Harness to use apple-app-factory; its native skill({ name: \"apple-app-factory\" }) tool loads it. Requires the shipped filesystem skill provider and skill tool, with default roots enabled. Custom provider configurations are not modified.' },\n  { id: 'hermes', name: 'Hermes Agent', invocation: '/apple-app-factory', projectDirectory: '.hermes/skills', globalDirectory: '$HERMES_HOME/skills (default ~/.hermes/skills)', source: 'https://hermes-agent.nousresearch.com/docs/user-guide/features/skills', instructions: 'Use /apple-app-factory. Project installation requires a Git root and a separate owner-approved hermes skills trust decision; this installer never grants trust. For non-Git projects or profile-wide cron use --global in the same HERMES_HOME as Hermes. Confirm discovery with hermes skills list; cron must attach the skill and an absolute workdir.' },\n].map(host => Object.freeze(host)));\n\nexport type IntegrationOptions = { project?: string; global?: boolean };\ntype Host = (typeof hosts)[number];\ntype Location = { host: Host; scope: 'project' | 'global'; path: string };\nexport type IntegrationInspection = {\n  host: string; name: string; scope: 'project' | 'global'; path: string;\n  invocation: string; instructions: string; source: string;\n  installed: boolean; status: 'missing' | 'installed' | 'conflict';\n  version?: string; current?: boolean; reason?: string;\n};\n\ntype Tree = { files: Record<string, Buffer>; directories: string[] };\nconst digest = (bytes: string | Buffer) => createHash('sha256').update(bytes).digest('hex');\nconst safeRelative = (path: string) => /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(path) && path.split('/').every(part => part !== '.' && part !== '..' && part.length > 0) && path !== marker;\nconst digestSchema = z.string().regex(/^[a-f0-9]{64}$/);\nconst manifestSchema = z.strictObject({\n  format: z.literal(1), owner: z.literal(owner), skill: z.literal(skill), host: z.string(),\n  version: z.string().regex(/^\\d+\\.\\d+\\.\\d+(?:-[\\w.-]+)?(?:\\+[\\w.-]+)?$/),\n  files: z.record(z.string().refine(safeRelative), digestSchema), metadataDigest: digestSchema,\n});\ntype Manifest = z.infer<typeof manifestSchema>;\n\n// Never follow a symlink, including an existing ancestor of a not-yet-created target.\nfunction assertPath(path: string): void {\n  const absolute = resolve(path);\n  let current = parse(absolute).root;\n  const parts = absolute.slice(current.length).split(sep).filter(Boolean);\n  for (let i = 0; i < parts.length; i++) {\n    current = join(current, parts[i]!);\n    const info = lstatSync(current, { throwIfNoEntry: false });\n    if (!info) return;\n    if (info.isSymbolicLink()) throw new Error(`Refusing symlink path: ${current}. Select its real directory explicitly.`);\n    if (i < parts.length - 1 && !info.isDirectory()) throw new Error(`Not a directory: ${current}`);\n  }\n}\n\nfunction readRegular(path: string, packageSource = false): Buffer {\n  assertPath(path);\n  const descriptor = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n  try {\n    const info = fstatSync(descriptor);\n    if (!info.isFile() || (!packageSource && info.nlink !== 1)) throw new Error(`Refusing non-regular or hard-linked installation file: ${path}`);\n    return readFileSync(descriptor);\n  } finally { closeSync(descriptor); }\n}\n\nfunction readTree(root: string, packageSource = false): Tree {\n  assertPath(root);\n  if (!lstatSync(root).isDirectory()) throw new Error(`Not a skill directory: ${root}`);\n  const tree: Tree = { files: Object.create(null), directories: [] };\n  function visit(directory: string, prefix: string): void {\n    for (const name of readdirSync(directory).sort()) {\n      const path = join(directory, name);\n      const relative = prefix ? `${prefix}/${name}` : name;\n      const info = lstatSync(path);\n      if (info.isSymbolicLink()) throw new Error(`Refusing symlink installation entry: ${path}`);\n      if (info.isDirectory()) { tree.directories.push(relative); visit(path, relative); }\n      else tree.files[relative] = readRegular(path, packageSource);\n    }\n  }\n  visit(root, '');\n  return tree;\n}\n\nfunction fileDigests(tree: Tree): Record<string, string> {\n  return Object.fromEntries(Object.entries(tree.files).filter(([path]) => path !== marker).map(([path, bytes]) => [path, digest(bytes)]));\n}\n\nfunction metadataDigest(value: Omit<Manifest, 'metadataDigest'>): string {\n  return digest(JSON.stringify([value.format, value.owner, value.skill, value.host, value.version, Object.entries(value.files).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)]));\n}\n\nfunction directoriesFor(files: Record<string, unknown>): string[] {\n  const directories = new Set<string>();\n  for (const file of Object.keys(files)) {\n    let parent = file.slice(0, file.lastIndexOf('/'));\n    if (!file.includes('/')) continue;\n    while (parent) { directories.add(parent); parent = parent.includes('/') ? parent.slice(0, parent.lastIndexOf('/')) : ''; }\n  }\n  return [...directories].sort();\n}\n\nfunction readOwned(path: string, host: string): Manifest {\n  const tree = readTree(path);\n  if (!tree.files[marker]) throw new Error(`Foreign skill directory has no ${marker}: ${path}`);\n  let manifest: Manifest;\n  try { manifest = manifestSchema.parse(JSON.parse(tree.files[marker].toString('utf8'))); }\n  catch { throw new Error(`Invalid ownership metadata: ${path}`); }\n  if (manifest.host !== host || manifest.metadataDigest !== metadataDigest(manifest)) throw new Error(`Foreign or edited ownership metadata: ${path}`);\n  if (!manifest.files['SKILL.md'] || JSON.stringify(Object.keys(tree.files).filter(file => file !== marker).sort()) !== JSON.stringify(Object.keys(manifest.files).sort())) throw new Error(`Added or missing files in owned skill: ${path}`);\n  for (const [file, expected] of Object.entries(manifest.files)) {\n    if (digest(tree.files[file]!) !== expected) throw new Error(`User-edited skill file: ${join(path, file)}`);\n  }\n  if (JSON.stringify(tree.directories.sort()) !== JSON.stringify(directoriesFor(manifest.files))) throw new Error(`Unowned directories in skill: ${path}`);\n  return manifest;\n}\n\nfunction selectedHost(id: string): Host {\n  const host = hosts.find(value => value.id === id);\n  if (!host) throw new Error(`Unsupported host ${JSON.stringify(id)}. Supported hosts: ${hosts.map(value => value.id).join(', ')}`);\n  return host;\n}\n\nfunction environmentDirectory(name: string, fallback: string): string {\n  const configured = process.env[name];\n  if (!configured) return fallback;\n  const expanded = configured === '~' ? homedir() : configured.startsWith('~/') ? join(homedir(), configured.slice(2)) : configured;\n  if (!isAbsolute(expanded)) throw new Error(`${name} must be an absolute directory for installation`);\n  return resolve(expanded);\n}\n\nfunction location(id: string, options: IntegrationOptions): Location {\n  const host = selectedHost(id);\n  if (options.global && options.project !== undefined) throw new Error('Choose either project or global installation, not both');\n  if (options.global) {\n    let directory: string;\n    switch (id) {\n      case 'claude': directory = join(environmentDirectory('CLAUDE_CONFIG_DIR', join(homedir(), '.claude')), 'skills'); break;\n      case 'gemini': directory = join(environmentDirectory('GEMINI_CLI_HOME', homedir()), '.gemini', 'skills'); break;\n      case 'pi': directory = join(environmentDirectory('PI_CODING_AGENT_DIR', join(homedir(), '.pi', 'agent')), 'skills'); break;\n      case 'opencode': directory = join(environmentDirectory('XDG_CONFIG_HOME', join(homedir(), '.config')), 'opencode', 'skills'); break;\n      case 'deepseek': directory = join(environmentDirectory('DSH_HOME', join(homedir(), '.dsh')), 'skills'); break;\n      case 'hermes': directory = join(environmentDirectory('HERMES_HOME', join(homedir(), '.hermes')), 'skills'); break;\n      default: directory = join(homedir(), host.projectDirectory);\n    }\n    return { host, scope: 'global', path: join(directory, skill) };\n  }\n  if (options.project !== undefined && !options.project.trim()) throw new Error('Project directory must not be empty');\n  let project = resolve(options.project ?? process.cwd());\n  assertPath(project);\n  if (!lstatSync(project, { throwIfNoEntry: false })?.isDirectory()) throw new Error(`Project directory does not exist: ${project}`);\n  if (id === 'deepseek' || id === 'hermes') {\n    let found = false;\n    for (let candidate = project; ; candidate = dirname(candidate)) {\n      if (lstatSync(join(candidate, '.git'), { throwIfNoEntry: false })) { project = candidate; found = true; break; }\n      if (dirname(candidate) === candidate) break;\n    }\n    if (id === 'hermes' && !found) throw new Error('Hermes project skills require a Git root; use --global for a profile-level installation instead');\n  }\n  return { host, scope: 'project', path: join(project, id === 'deepseek' ? '.dsh/skills' : host.projectDirectory, skill) };\n}\n\nfunction details(target: Location) {\n  return { host: target.host.id, name: target.host.name, scope: target.scope, path: target.path, invocation: target.host.invocation, instructions: target.host.instructions, source: target.host.source };\n}\n\nfunction bundle(host: string): { tree: Tree; manifest: Manifest } {\n  // Package stores may hard-link read-only resources; owned installation targets may not.\n  const tree = readTree(bundledDirectory, true);\n  if (!tree.files['SKILL.md'] || tree.files[marker]) throw new Error('Invalid bundled apple-app-factory skill');\n  const files = fileDigests(tree);\n  if (!Object.keys(files).every(safeRelative) || JSON.stringify(tree.directories.sort()) !== JSON.stringify(directoriesFor(files))) throw new Error('Invalid bundled skill resource paths');\n  const version = JSON.parse(readRegular(packageFile, true).toString('utf8')).version;\n  const value: Omit<Manifest, 'metadataDigest'> = { format: 1, owner, skill, host, version, files };\n  const manifest = manifestSchema.parse({ ...value, metadataDigest: metadataDigest(value) });\n  tree.files[marker] = Buffer.from(`${JSON.stringify(manifest, null, 2)}\\n`);\n  return { tree, manifest };\n}\n\nexport function inspectIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection {\n  const target = location(host, options);\n  const result = details(target);\n  try {\n    assertPath(target.path);\n    if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, installed: false, status: 'missing' };\n    const manifest = readOwned(target.path, host);\n    const current = bundle(host).manifest.metadataDigest === manifest.metadataDigest;\n    return { ...result, installed: true, status: 'installed', version: manifest.version, current };\n  } catch (error) {\n    return { ...result, installed: false, status: 'conflict', reason: error instanceof Error ? error.message : String(error) };\n  }\n}\n\nfunction withLock<T>(target: Location, action: () => T): T {\n  const directory = dirname(dirname(target.path));\n  assertPath(directory);\n  mkdirSync(directory, { recursive: true });\n  assertPath(directory);\n  const lock = join(directory, '.apple-app-factory-install.lock');\n  let descriptor: number;\n  try { descriptor = openSync(lock, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600); }\n  catch { throw new Error(`Installation is locked at ${lock}; if an earlier installer stopped, inspect it before removing its lock`); }\n  try { return action(); }\n  finally { closeSync(descriptor); unlinkSync(lock); }\n}\n\nfunction applyIntegration(host: string, options: IntegrationOptions, operation: 'install' | 'update'): IntegrationInspection & { changed: boolean } {\n  const target = location(host, options);\n  const next = bundle(host);\n  assertPath(target.path);\n  if (operation === 'update' && !lstatSync(target.path, { throwIfNoEntry: false })) throw new Error(`No installation at ${target.path}; run app-factory install ${host} first with the same scope`);\n  return withLock(target, () => {\n    assertPath(target.path);\n    const previous = lstatSync(target.path, { throwIfNoEntry: false }) ? readOwned(target.path, host) : undefined;\n    if (operation === 'update' && !previous) throw new Error(`No installation at ${target.path}; run app-factory install ${host} first with the same scope`);\n    const result = { ...details(target), installed: true, status: 'installed' as const, version: next.manifest.version, current: true };\n    if (previous?.metadataDigest === next.manifest.metadataDigest) return { ...result, changed: false };\n    if (operation === 'install' && previous) throw new Error(`An older or different workflow is installed at ${target.path}; use app-factory update ${host} with the same scope`);\n    const parent = dirname(target.path);\n    mkdirSync(parent, { recursive: true });\n    const staging = mkdtempSync(join(dirname(parent), '.apple-app-factory-stage-'));\n    const replacement = join(staging, skill);\n    const backup = join(staging, 'previous');\n    let moved = false;\n    try {\n      mkdirSync(replacement);\n      for (const [file, bytes] of Object.entries(next.tree.files)) {\n        const path = join(replacement, file);\n        mkdirSync(dirname(path), { recursive: true });\n        writeFileSync(path, bytes, { flag: 'wx', mode: 0o644 });\n      }\n      assertPath(target.path);\n      if (previous) {\n        if (readOwned(target.path, host).metadataDigest !== previous.metadataDigest) throw new Error('Installation changed during upgrade');\n        renameSync(target.path, backup);\n        moved = true;\n      } else if (lstatSync(target.path, { throwIfNoEntry: false })) throw new Error('Skill appeared during installation; refusing overwrite');\n      try { renameSync(replacement, target.path); }\n      catch (error) { if (moved) { renameSync(backup, target.path); moved = false; } throw error; }\n      if (moved) { readOwned(backup, host); rmSync(backup, { recursive: true }); moved = false; }\n      return { ...result, changed: true };\n    } finally {\n      // Keep a displaced install intact if rollback or cleanup was interrupted.\n      if (!moved) rmSync(staging, { recursive: true, force: true });\n    }\n  });\n}\n\nexport function installIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  return applyIntegration(host, options, 'install');\n}\n\nexport function updateIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  return applyIntegration(host, options, 'update');\n}\n\nexport function uninstallIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  const target = location(host, options);\n  assertPath(target.path);\n  const result = { ...details(target), installed: false, status: 'missing' as const };\n  if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, changed: false };\n  return withLock(target, () => {\n    assertPath(target.path);\n    if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, changed: false };\n    readOwned(target.path, host);\n    rmSync(target.path, { recursive: true });\n    return { ...result, changed: true };\n  });\n}\n"],"mappings":";;;;;;;AAQA,MAAM,QAAQ;AACd,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,mBAAmB,cAAc,IAAI,IAAI,gCAAgC,YAAY,GAAG,CAAC;AAC/F,MAAM,cAAc,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AAE7E,MAAa,QAAQ,OAAO,OAAO;CACjC;EAAE,IAAI;EAAS,MAAM;EAAS,YAAY;EAAsB,kBAAkB;EAAkB,iBAAiB;EAAoB,QAAQ;EAA8C,cAAc;CAA0H;CACvU;EAAE,IAAI;EAAU,MAAM;EAAe,YAAY;EAAsB,kBAAkB;EAAkB,iBAAiB;EAAwD,QAAQ;EAA0C,cAAc;CAA0J;CAC9Y;EAAE,IAAI;EAAU,MAAM;EAAU,YAAY;EAAsB,kBAAkB;EAAkB,iBAAiB;EAAoB,QAAQ;EAAkC,cAAc;CAAwJ;CAC3V;EAAE,IAAI;EAAM,MAAM;EAAM,YAAY;EAA4B,kBAAkB;EAAc,iBAAiB;EAA4D,QAAQ;EAAsF,cAAc;CAA+M;CACxe;EAAE,IAAI;EAAU,MAAM;EAAc,YAAY;EAAmC,kBAAkB;EAAkB,iBAAiB;EAA8D,QAAQ;EAA0C,cAAc;CAAqL;CAC3b;EAAE,IAAI;EAAY,MAAM;EAAY,YAAY;EAAmC,kBAAkB;EAAoB,iBAAiB;EAAwE,QAAQ;EAAoC,cAAc;CAA0N;CACte;EAAE,IAAI;EAAY,MAAM;EAAoB,YAAY;EAAmC,kBAAkB;EAA8D,iBAAiB;EAA4C,QAAQ;EAAsF,cAAc;CAA4P;CAChlB;EAAE,IAAI;EAAU,MAAM;EAAgB,YAAY;EAAsB,kBAAkB;EAAkB,iBAAiB;EAAkD,QAAQ;EAAyE,cAAc;CAA2V;AAC3mB,CAAC,CAAC,KAAI,SAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;AAalC,MAAM,UAAU,UAA2B,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAC1F,MAAM,gBAAgB,SAAiB,gCAAgC,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,OAAM,SAAQ,SAAS,OAAO,SAAS,QAAQ,KAAK,SAAS,CAAC,KAAK,SAAS;AACjL,MAAM,eAAe,EAAE,OAAO,CAAC,CAAC,MAAM,gBAAgB;AACtD,MAAM,iBAAiB,EAAE,aAAa;CACpC,QAAQ,EAAE,QAAQ,CAAC;CAAG,OAAO,EAAE,QAAQ,KAAK;CAAG,OAAO,EAAE,QAAQ,KAAK;CAAG,MAAM,EAAE,OAAO;CACvF,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4CAA4C;CACtE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,YAAY,GAAG,YAAY;CAAG,gBAAgB;AAClF,CAAC;AAID,SAAS,WAAW,MAAoB;CACtC,MAAM,WAAW,QAAQ,IAAI;CAC7B,IAAI,UAAU,MAAM,QAAQ,CAAC,CAAC;CAC9B,MAAM,QAAQ,SAAS,MAAM,QAAQ,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;CACtE,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,UAAU,KAAK,SAAS,MAAM,EAAG;EACjC,MAAM,OAAO,UAAU,SAAS,EAAE,gBAAgB,MAAM,CAAC;EACzD,IAAI,CAAC,MAAM;EACX,IAAI,KAAK,eAAe,GAAG,MAAM,IAAI,MAAM,0BAA0B,QAAQ,wCAAwC;EACrH,IAAI,IAAI,MAAM,SAAS,KAAK,CAAC,KAAK,YAAY,GAAG,MAAM,IAAI,MAAM,oBAAoB,SAAS;CAChG;AACF;AAEA,SAAS,YAAY,MAAc,gBAAgB,OAAe;CAChE,WAAW,IAAI;CACf,MAAM,aAAa,SAAS,MAAM,UAAU,WAAW,UAAU,aAAa,UAAU,UAAU;CAClG,IAAI;EACF,MAAM,OAAO,UAAU,UAAU;EACjC,IAAI,CAAC,KAAK,OAAO,KAAM,CAAC,iBAAiB,KAAK,UAAU,GAAI,MAAM,IAAI,MAAM,0DAA0D,MAAM;EAC5I,OAAO,aAAa,UAAU;CAChC,UAAU;EAAE,UAAU,UAAU;CAAG;AACrC;AAEA,SAAS,SAAS,MAAc,gBAAgB,OAAa;CAC3D,WAAW,IAAI;CACf,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,0BAA0B,MAAM;CACpF,MAAM,OAAa;EAAE,OAAO,OAAO,OAAO,IAAI;EAAG,aAAa,CAAC;CAAE;CACjE,SAAS,MAAM,WAAmB,QAAsB;EACtD,KAAK,MAAM,QAAQ,YAAY,SAAS,CAAC,CAAC,KAAK,GAAG;GAChD,MAAM,OAAO,KAAK,WAAW,IAAI;GACjC,MAAM,WAAW,SAAS,GAAG,OAAO,GAAG,SAAS;GAChD,MAAM,OAAO,UAAU,IAAI;GAC3B,IAAI,KAAK,eAAe,GAAG,MAAM,IAAI,MAAM,wCAAwC,MAAM;GACzF,IAAI,KAAK,YAAY,GAAG;IAAE,KAAK,YAAY,KAAK,QAAQ;IAAG,MAAM,MAAM,QAAQ;GAAG,OAC7E,KAAK,MAAM,YAAY,YAAY,MAAM,aAAa;EAC7D;CACF;CACA,MAAM,MAAM,EAAE;CACd,OAAO;AACT;AAEA,SAAS,YAAY,MAAoC;CACvD,OAAO,OAAO,YAAY,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AACxI;AAEA,SAAS,eAAe,OAAiD;CACvE,OAAO,OAAO,KAAK,UAAU;EAAC,MAAM;EAAQ,MAAM;EAAO,MAAM;EAAO,MAAM;EAAM,MAAM;EAAS,OAAO,QAAQ,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC;CAAC,CAAC,CAAC;AAC/K;AAEA,SAAS,eAAe,OAA0C;CAChE,MAAM,8BAAc,IAAI,IAAY;CACpC,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG;EACrC,IAAI,SAAS,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC;EAChD,IAAI,CAAC,KAAK,SAAS,GAAG,GAAG;EACzB,OAAO,QAAQ;GAAE,YAAY,IAAI,MAAM;GAAG,SAAS,OAAO,SAAS,GAAG,IAAI,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG,CAAC,IAAI;EAAI;CAC3H;CACA,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK;AAC/B;AAEA,SAAS,UAAU,MAAc,MAAwB;CACvD,MAAM,OAAO,SAAS,IAAI;CAC1B,IAAI,CAAC,KAAK,MAAM,SAAS,MAAM,IAAI,MAAM,kCAAkC,OAAO,IAAI,MAAM;CAC5F,IAAI;CACJ,IAAI;EAAE,WAAW,eAAe,MAAM,KAAK,MAAM,KAAK,MAAM,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;CAAG,QAClF;EAAE,MAAM,IAAI,MAAM,+BAA+B,MAAM;CAAG;CAChE,IAAI,SAAS,SAAS,QAAQ,SAAS,mBAAmB,eAAe,QAAQ,GAAG,MAAM,IAAI,MAAM,yCAAyC,MAAM;CACnJ,IAAI,CAAC,SAAS,MAAM,eAAe,KAAK,UAAU,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,QAAO,SAAQ,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,OAAO,KAAK,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,0CAA0C,MAAM;CAC1O,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAC1D,IAAI,OAAO,KAAK,MAAM,KAAM,MAAM,UAAU,MAAM,IAAI,MAAM,2BAA2B,KAAK,MAAM,IAAI,GAAG;CAE3G,IAAI,KAAK,UAAU,KAAK,YAAY,KAAK,CAAC,MAAM,KAAK,UAAU,eAAe,SAAS,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,iCAAiC,MAAM;CACvJ,OAAO;AACT;AAEA,SAAS,aAAa,IAAkB;CACtC,MAAM,OAAO,MAAM,MAAK,UAAS,MAAM,OAAO,EAAE;CAChD,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,EAAE,EAAE,qBAAqB,MAAM,KAAI,UAAS,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG;CAChI,OAAO;AACT;AAEA,SAAS,qBAAqB,MAAc,UAA0B;CACpE,MAAM,aAAa,QAAQ,IAAI;CAC/B,IAAI,CAAC,YAAY,OAAO;CACxB,MAAM,WAAW,eAAe,MAAM,QAAQ,IAAI,WAAW,WAAW,IAAI,IAAI,KAAK,QAAQ,GAAG,WAAW,MAAM,CAAC,CAAC,IAAI;CACvH,IAAI,CAAC,WAAW,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,gDAAgD;CACnG,OAAO,QAAQ,QAAQ;AACzB;AAEA,SAAS,SAAS,IAAY,SAAuC;CACnE,MAAM,OAAO,aAAa,EAAE;CAC5B,IAAI,QAAQ,UAAU,QAAQ,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,wDAAwD;CAC7H,IAAI,QAAQ,QAAQ;EAClB,IAAI;EACJ,QAAQ,IAAR;GACE,KAAK;IAAU,YAAY,KAAK,qBAAqB,qBAAqB,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,QAAQ;IAAG;GAClH,KAAK;IAAU,YAAY,KAAK,qBAAqB,mBAAmB,QAAQ,CAAC,GAAG,WAAW,QAAQ;IAAG;GAC1G,KAAK;IAAM,YAAY,KAAK,qBAAqB,uBAAuB,KAAK,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,QAAQ;IAAG;GACrH,KAAK;IAAY,YAAY,KAAK,qBAAqB,mBAAmB,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,YAAY,QAAQ;IAAG;GAC9H,KAAK;IAAY,YAAY,KAAK,qBAAqB,YAAY,KAAK,QAAQ,GAAG,MAAM,CAAC,GAAG,QAAQ;IAAG;GACxG,KAAK;IAAU,YAAY,KAAK,qBAAqB,eAAe,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,QAAQ;IAAG;GAC5G,SAAS,YAAY,KAAK,QAAQ,GAAG,KAAK,gBAAgB;EAC5D;EACA,OAAO;GAAE;GAAM,OAAO;GAAU,MAAM,KAAK,WAAW,KAAK;EAAE;CAC/D;CACA,IAAI,QAAQ,YAAY,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,qCAAqC;CACnH,IAAI,UAAU,QAAQ,QAAQ,WAAW,QAAQ,IAAI,CAAC;CACtD,WAAW,OAAO;CAClB,IAAI,CAAC,UAAU,SAAS,EAAE,gBAAgB,MAAM,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,IAAI,MAAM,qCAAqC,SAAS;CACjI,IAAI,OAAO,cAAc,OAAO,UAAU;EACxC,IAAI,QAAQ;EACZ,KAAK,IAAI,YAAY,UAAW,YAAY,QAAQ,SAAS,GAAG;GAC9D,IAAI,UAAU,KAAK,WAAW,MAAM,GAAG,EAAE,gBAAgB,MAAM,CAAC,GAAG;IAAE,UAAU;IAAW,QAAQ;IAAM;GAAO;GAC/G,IAAI,QAAQ,SAAS,MAAM,WAAW;EACxC;EACA,IAAI,OAAO,YAAY,CAAC,OAAO,MAAM,IAAI,MAAM,iGAAiG;CAClJ;CACA,OAAO;EAAE;EAAM,OAAO;EAAW,MAAM,KAAK,SAAS,OAAO,aAAa,gBAAgB,KAAK,kBAAkB,KAAK;CAAE;AACzH;AAEA,SAAS,QAAQ,QAAkB;CACjC,OAAO;EAAE,MAAM,OAAO,KAAK;EAAI,MAAM,OAAO,KAAK;EAAM,OAAO,OAAO;EAAO,MAAM,OAAO;EAAM,YAAY,OAAO,KAAK;EAAY,cAAc,OAAO,KAAK;EAAc,QAAQ,OAAO,KAAK;CAAO;AACxM;AAEA,SAAS,OAAO,MAAkD;CAEhE,MAAM,OAAO,SAAS,kBAAkB,IAAI;CAC5C,IAAI,CAAC,KAAK,MAAM,eAAe,KAAK,MAAM,SAAS,MAAM,IAAI,MAAM,yCAAyC;CAC5G,MAAM,QAAQ,YAAY,IAAI;CAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,YAAY,KAAK,KAAK,UAAU,KAAK,YAAY,KAAK,CAAC,MAAM,KAAK,UAAU,eAAe,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,sCAAsC;CACxL,MAAM,UAAU,KAAK,MAAM,YAAY,aAAa,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC;CAC5E,MAAM,QAA0C;EAAE,QAAQ;EAAG;EAAO;EAAO;EAAM;EAAS;CAAM;CAChG,MAAM,WAAW,eAAe,MAAM;EAAE,GAAG;EAAO,gBAAgB,eAAe,KAAK;CAAE,CAAC;CACzF,KAAK,MAAM,UAAU,OAAO,KAAK,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE,GAAG;CACzE,OAAO;EAAE;EAAM;CAAS;AAC1B;AAEA,SAAgB,mBAAmB,MAAc,UAA8B,CAAC,GAA0B;CACxG,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,MAAM,SAAS,QAAQ,MAAM;CAC7B,IAAI;EACF,WAAW,OAAO,IAAI;EACtB,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAO,QAAQ;EAAU;EAChH,MAAM,WAAW,UAAU,OAAO,MAAM,IAAI;EAC5C,MAAM,UAAU,OAAO,IAAI,CAAC,CAAC,SAAS,mBAAmB,SAAS;EAClE,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAM,QAAQ;GAAa,SAAS,SAAS;GAAS;EAAQ;CAC/F,SAAS,OAAO;EACd,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAO,QAAQ;GAAY,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAE;CAC3H;AACF;AAEA,SAAS,SAAY,QAAkB,QAAoB;CACzD,MAAM,YAAY,QAAQ,QAAQ,OAAO,IAAI,CAAC;CAC9C,WAAW,SAAS;CACpB,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;CACxC,WAAW,SAAS;CACpB,MAAM,OAAO,KAAK,WAAW,iCAAiC;CAC9D,IAAI;CACJ,IAAI;EAAE,aAAa,SAAS,MAAM,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU,YAAY,GAAK;CAAG,QACtH;EAAE,MAAM,IAAI,MAAM,6BAA6B,KAAK,uEAAuE;CAAG;CACpI,IAAI;EAAE,OAAO,OAAO;CAAG,UACf;EAAE,UAAU,UAAU;EAAG,WAAW,IAAI;CAAG;AACrD;AAEA,SAAS,iBAAiB,MAAc,SAA6B,WAA+E;CAClJ,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,MAAM,OAAO,OAAO,IAAI;CACxB,WAAW,OAAO,IAAI;CACtB,IAAI,cAAc,YAAY,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,sBAAsB,OAAO,KAAK,4BAA4B,KAAK,2BAA2B;CAChM,OAAO,SAAS,cAAc;EAC5B,WAAW,OAAO,IAAI;EACtB,MAAM,WAAW,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,IAAI,UAAU,OAAO,MAAM,IAAI,IAAI,KAAA;EACpG,IAAI,cAAc,YAAY,CAAC,UAAU,MAAM,IAAI,MAAM,sBAAsB,OAAO,KAAK,4BAA4B,KAAK,2BAA2B;EACvJ,MAAM,SAAS;GAAE,GAAG,QAAQ,MAAM;GAAG,WAAW;GAAM,QAAQ;GAAsB,SAAS,KAAK,SAAS;GAAS,SAAS;EAAK;EAClI,IAAI,UAAU,mBAAmB,KAAK,SAAS,gBAAgB,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAM;EAClG,IAAI,cAAc,aAAa,UAAU,MAAM,IAAI,MAAM,kDAAkD,OAAO,KAAK,2BAA2B,KAAK,qBAAqB;EAC5K,MAAM,SAAS,QAAQ,OAAO,IAAI;EAClC,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;EACrC,MAAM,UAAU,YAAY,KAAK,QAAQ,MAAM,GAAG,2BAA2B,CAAC;EAC9E,MAAM,cAAc,KAAK,SAAS,KAAK;EACvC,MAAM,SAAS,KAAK,SAAS,UAAU;EACvC,IAAI,QAAQ;EACZ,IAAI;GACF,UAAU,WAAW;GACrB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,KAAK,KAAK,GAAG;IAC3D,MAAM,OAAO,KAAK,aAAa,IAAI;IACnC,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;IAC5C,cAAc,MAAM,OAAO;KAAE,MAAM;KAAM,MAAM;IAAM,CAAC;GACxD;GACA,WAAW,OAAO,IAAI;GACtB,IAAI,UAAU;IACZ,IAAI,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC,mBAAmB,SAAS,gBAAgB,MAAM,IAAI,MAAM,qCAAqC;IAClI,WAAW,OAAO,MAAM,MAAM;IAC9B,QAAQ;GACV,OAAO,IAAI,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,wDAAwD;GACtI,IAAI;IAAE,WAAW,aAAa,OAAO,IAAI;GAAG,SACrC,OAAO;IAAE,IAAI,OAAO;KAAE,WAAW,QAAQ,OAAO,IAAI;KAAG,QAAQ;IAAO;IAAE,MAAM;GAAO;GAC5F,IAAI,OAAO;IAAE,UAAU,QAAQ,IAAI;IAAG,OAAO,QAAQ,EAAE,WAAW,KAAK,CAAC;IAAG,QAAQ;GAAO;GAC1F,OAAO;IAAE,GAAG;IAAQ,SAAS;GAAK;EACpC,UAAU;GAER,IAAI,CAAC,OAAO,OAAO,SAAS;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EAC9D;CACF,CAAC;AACH;AAEA,SAAgB,mBAAmB,MAAc,UAA8B,CAAC,GAAiD;CAC/H,OAAO,iBAAiB,MAAM,SAAS,SAAS;AAClD;AAEA,SAAgB,kBAAkB,MAAc,UAA8B,CAAC,GAAiD;CAC9H,OAAO,iBAAiB,MAAM,SAAS,QAAQ;AACjD;AAEA,SAAgB,qBAAqB,MAAc,UAA8B,CAAC,GAAiD;CACjI,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,WAAW,OAAO,IAAI;CACtB,MAAM,SAAS;EAAE,GAAG,QAAQ,MAAM;EAAG,WAAW;EAAO,QAAQ;CAAmB;CAClF,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;EAAE,GAAG;EAAQ,SAAS;CAAM;CAC3F,OAAO,SAAS,cAAc;EAC5B,WAAW,OAAO,IAAI;EACtB,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAM;EAC3F,UAAU,OAAO,MAAM,IAAI;EAC3B,OAAO,OAAO,MAAM,EAAE,WAAW,KAAK,CAAC;EACvC,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAK;CACpC,CAAC;AACH"}
+{"version":3,"file":"integrations.js","names":[],"sources":["../src/integrations.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\nimport { closeSync, constants, fstatSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, renameSync, rmSync, unlinkSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, isAbsolute, join, parse, resolve, sep } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { z } from 'zod';\n\nconst skill = 'apphx';\nconst marker = '.apphx-install.json';\nconst owner = 'apphx';\nconst bundledDirectory = fileURLToPath(new URL('../skills/apphx/', import.meta.url));\nconst packageFile = fileURLToPath(new URL('../package.json', import.meta.url));\n\nexport const hosts = Object.freeze([\n  { id: 'codex', name: 'Codex', invocation: '$apphx', projectDirectory: '.agents/skills', globalDirectory: '~/.agents/skills', source: 'https://developers.openai.com/codex/skills', instructions: 'Use $apphx in Codex CLI or the IDE extension; /skills lists skills. Restart if discovery has not refreshed.' },\n  { id: 'claude', name: 'Claude Code', invocation: '/apphx', projectDirectory: '.claude/skills', globalDirectory: '$CLAUDE_CONFIG_DIR/skills (default ~/.claude/skills)', source: 'https://code.claude.com/docs/en/skills', instructions: 'Use /apphx in a local Claude Code session. Start a new session if the skill is not listed. Cloud sessions do not inherit local user skills.' },\n  { id: 'cursor', name: 'Cursor', invocation: '/apphx', projectDirectory: '.cursor/skills', globalDirectory: '~/.cursor/skills', source: 'https://cursor.com/docs/skills', instructions: 'In Agent chat, type / and select apphx. Restart or reopen the project if necessary. Global installation is local, not a Cloud Agent sync.' },\n  { id: 'pi', name: 'Pi', invocation: '/skill:apphx', projectDirectory: '.pi/skills', globalDirectory: '$PI_CODING_AGENT_DIR/skills (default ~/.pi/agent/skills)', source: 'https://github.com/badlogic/pi-mono/blob/main/packages/coding-agent/docs/skills.md', instructions: 'Grant project trust before using project skills, then /reload and /skill:apphx. Stock Pi has no native subagents: use a separate human-started reviewer session, not a spawned coding-agent CLI.' },\n  { id: 'gemini', name: 'Gemini CLI', invocation: 'Use the apphx skill', projectDirectory: '.gemini/skills', globalDirectory: '$GEMINI_CLI_HOME/.gemini/skills (default ~/.gemini/skills)', source: 'https://geminicli.com/docs/cli/skills/', instructions: 'Run /skills reload and /skills list, then ask: Use the apphx skill. Gemini calls activate_skill; approve its consent prompt. This is not a /apphx command.' },\n  { id: 'opencode', name: 'OpenCode', invocation: 'Use the apphx skill', projectDirectory: '.opencode/skills', globalDirectory: '$XDG_CONFIG_HOME/opencode/skills (default ~/.config/opencode/skills)', source: 'https://opencode.ai/docs/skills/', instructions: 'Ask OpenCode to use apphx; the agent loads it with its native skill({ name: \"apphx\" }) tool. Skill permissions must permit loading. Restart if necessary; no custom slash command is installed.' },\n  { id: 'deepseek', name: 'DeepSeek Harness', invocation: 'Use the apphx skill', projectDirectory: '.dsh/skills (nearest Git root, otherwise selected project)', globalDirectory: '$DSH_HOME/skills (default ~/.dsh/skills)', source: 'https://deepseek-harness.github.io/deepseek-harness/en/reference/subsystems/skills', instructions: 'Ask DeepSeek Harness to use apphx; its native skill({ name: \"apphx\" }) tool loads it. Requires the shipped filesystem skill provider and skill tool, with default roots enabled. Custom provider configurations are not modified.' },\n  { id: 'hermes', name: 'Hermes Agent', invocation: '/apphx', projectDirectory: '.hermes/skills', globalDirectory: '$HERMES_HOME/skills (default ~/.hermes/skills)', source: 'https://hermes-agent.nousresearch.com/docs/user-guide/features/skills', instructions: 'Use /apphx. Project installation requires a Git root and a separate owner-approved hermes skills trust decision; this installer never grants trust. For non-Git projects or profile-wide cron use --global in the same HERMES_HOME as Hermes. Confirm discovery with hermes skills list; cron must attach the skill and an absolute workdir.' },\n].map(host => Object.freeze(host)));\n\nexport type IntegrationOptions = { project?: string; global?: boolean };\ntype Host = (typeof hosts)[number];\ntype Location = { host: Host; scope: 'project' | 'global'; path: string };\nexport type IntegrationInspection = {\n  host: string; name: string; scope: 'project' | 'global'; path: string;\n  invocation: string; instructions: string; source: string;\n  installed: boolean; status: 'missing' | 'installed' | 'conflict';\n  version?: string; current?: boolean; reason?: string;\n};\n\ntype Tree = { files: Record<string, Buffer>; directories: string[] };\nconst digest = (bytes: string | Buffer) => createHash('sha256').update(bytes).digest('hex');\nconst safeRelative = (path: string) => /^[a-zA-Z0-9][a-zA-Z0-9._/-]*$/.test(path) && path.split('/').every(part => part !== '.' && part !== '..' && part.length > 0) && path !== marker;\nconst digestSchema = z.string().regex(/^[a-f0-9]{64}$/);\nconst manifestSchema = z.strictObject({\n  format: z.literal(1), owner: z.literal(owner), skill: z.literal(skill), host: z.string(),\n  version: z.string().regex(/^\\d+\\.\\d+\\.\\d+(?:-[\\w.-]+)?(?:\\+[\\w.-]+)?$/),\n  files: z.record(z.string().refine(safeRelative), digestSchema), metadataDigest: digestSchema,\n});\ntype Manifest = z.infer<typeof manifestSchema>;\n\n// Never follow a symlink, including an existing ancestor of a not-yet-created target.\nfunction assertPath(path: string): void {\n  const absolute = resolve(path);\n  let current = parse(absolute).root;\n  const parts = absolute.slice(current.length).split(sep).filter(Boolean);\n  for (let i = 0; i < parts.length; i++) {\n    current = join(current, parts[i]!);\n    const info = lstatSync(current, { throwIfNoEntry: false });\n    if (!info) return;\n    if (info.isSymbolicLink()) throw new Error(`Refusing symlink path: ${current}. Select its real directory explicitly.`);\n    if (i < parts.length - 1 && !info.isDirectory()) throw new Error(`Not a directory: ${current}`);\n  }\n}\n\nfunction readRegular(path: string, packageSource = false): Buffer {\n  assertPath(path);\n  const descriptor = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);\n  try {\n    const info = fstatSync(descriptor);\n    if (!info.isFile() || (!packageSource && info.nlink !== 1)) throw new Error(`Refusing non-regular or hard-linked installation file: ${path}`);\n    return readFileSync(descriptor);\n  } finally { closeSync(descriptor); }\n}\n\nfunction readTree(root: string, packageSource = false): Tree {\n  assertPath(root);\n  if (!lstatSync(root).isDirectory()) throw new Error(`Not a skill directory: ${root}`);\n  const tree: Tree = { files: Object.create(null), directories: [] };\n  function visit(directory: string, prefix: string): void {\n    for (const name of readdirSync(directory).sort()) {\n      const path = join(directory, name);\n      const relative = prefix ? `${prefix}/${name}` : name;\n      const info = lstatSync(path);\n      if (info.isSymbolicLink()) throw new Error(`Refusing symlink installation entry: ${path}`);\n      if (info.isDirectory()) { tree.directories.push(relative); visit(path, relative); }\n      else tree.files[relative] = readRegular(path, packageSource);\n    }\n  }\n  visit(root, '');\n  return tree;\n}\n\nfunction fileDigests(tree: Tree): Record<string, string> {\n  return Object.fromEntries(Object.entries(tree.files).filter(([path]) => path !== marker).map(([path, bytes]) => [path, digest(bytes)]));\n}\n\nfunction metadataDigest(value: Omit<Manifest, 'metadataDigest'>): string {\n  return digest(JSON.stringify([value.format, value.owner, value.skill, value.host, value.version, Object.entries(value.files).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)]));\n}\n\nfunction directoriesFor(files: Record<string, unknown>): string[] {\n  const directories = new Set<string>();\n  for (const file of Object.keys(files)) {\n    let parent = file.slice(0, file.lastIndexOf('/'));\n    if (!file.includes('/')) continue;\n    while (parent) { directories.add(parent); parent = parent.includes('/') ? parent.slice(0, parent.lastIndexOf('/')) : ''; }\n  }\n  return [...directories].sort();\n}\n\nfunction readOwned(path: string, host: string): Manifest {\n  const tree = readTree(path);\n  if (!tree.files[marker]) throw new Error(`Foreign skill directory has no ${marker}: ${path}`);\n  let manifest: Manifest;\n  try { manifest = manifestSchema.parse(JSON.parse(tree.files[marker].toString('utf8'))); }\n  catch { throw new Error(`Invalid ownership metadata: ${path}`); }\n  if (manifest.host !== host || manifest.metadataDigest !== metadataDigest(manifest)) throw new Error(`Foreign or edited ownership metadata: ${path}`);\n  if (!manifest.files['SKILL.md'] || JSON.stringify(Object.keys(tree.files).filter(file => file !== marker).sort()) !== JSON.stringify(Object.keys(manifest.files).sort())) throw new Error(`Added or missing files in owned skill: ${path}`);\n  for (const [file, expected] of Object.entries(manifest.files)) {\n    if (digest(tree.files[file]!) !== expected) throw new Error(`User-edited skill file: ${join(path, file)}`);\n  }\n  if (JSON.stringify(tree.directories.sort()) !== JSON.stringify(directoriesFor(manifest.files))) throw new Error(`Unowned directories in skill: ${path}`);\n  return manifest;\n}\n\nfunction selectedHost(id: string): Host {\n  const host = hosts.find(value => value.id === id);\n  if (!host) throw new Error(`Unsupported host ${JSON.stringify(id)}. Supported hosts: ${hosts.map(value => value.id).join(', ')}`);\n  return host;\n}\n\nfunction environmentDirectory(name: string, fallback: string): string {\n  const configured = process.env[name];\n  if (!configured) return fallback;\n  const expanded = configured === '~' ? homedir() : configured.startsWith('~/') ? join(homedir(), configured.slice(2)) : configured;\n  if (!isAbsolute(expanded)) throw new Error(`${name} must be an absolute directory for installation`);\n  return resolve(expanded);\n}\n\nfunction location(id: string, options: IntegrationOptions): Location {\n  const host = selectedHost(id);\n  if (options.global && options.project !== undefined) throw new Error('Choose either project or global installation, not both');\n  if (options.global) {\n    let directory: string;\n    switch (id) {\n      case 'claude': directory = join(environmentDirectory('CLAUDE_CONFIG_DIR', join(homedir(), '.claude')), 'skills'); break;\n      case 'gemini': directory = join(environmentDirectory('GEMINI_CLI_HOME', homedir()), '.gemini', 'skills'); break;\n      case 'pi': directory = join(environmentDirectory('PI_CODING_AGENT_DIR', join(homedir(), '.pi', 'agent')), 'skills'); break;\n      case 'opencode': directory = join(environmentDirectory('XDG_CONFIG_HOME', join(homedir(), '.config')), 'opencode', 'skills'); break;\n      case 'deepseek': directory = join(environmentDirectory('DSH_HOME', join(homedir(), '.dsh')), 'skills'); break;\n      case 'hermes': directory = join(environmentDirectory('HERMES_HOME', join(homedir(), '.hermes')), 'skills'); break;\n      default: directory = join(homedir(), host.projectDirectory);\n    }\n    return { host, scope: 'global', path: join(directory, skill) };\n  }\n  if (options.project !== undefined && !options.project.trim()) throw new Error('Project directory must not be empty');\n  let project = resolve(options.project ?? process.cwd());\n  assertPath(project);\n  if (!lstatSync(project, { throwIfNoEntry: false })?.isDirectory()) throw new Error(`Project directory does not exist: ${project}`);\n  if (id === 'deepseek' || id === 'hermes') {\n    let found = false;\n    for (let candidate = project; ; candidate = dirname(candidate)) {\n      if (lstatSync(join(candidate, '.git'), { throwIfNoEntry: false })) { project = candidate; found = true; break; }\n      if (dirname(candidate) === candidate) break;\n    }\n    if (id === 'hermes' && !found) throw new Error('Hermes project skills require a Git root; use --global for a profile-level installation instead');\n  }\n  return { host, scope: 'project', path: join(project, id === 'deepseek' ? '.dsh/skills' : host.projectDirectory, skill) };\n}\n\nfunction details(target: Location) {\n  return { host: target.host.id, name: target.host.name, scope: target.scope, path: target.path, invocation: target.host.invocation, instructions: target.host.instructions, source: target.host.source };\n}\n\nfunction bundle(host: string): { tree: Tree; manifest: Manifest } {\n  // Package stores may hard-link read-only resources; owned installation targets may not.\n  const tree = readTree(bundledDirectory, true);\n  if (!tree.files['SKILL.md'] || tree.files[marker]) throw new Error('Invalid bundled apphx skill');\n  const files = fileDigests(tree);\n  if (!Object.keys(files).every(safeRelative) || JSON.stringify(tree.directories.sort()) !== JSON.stringify(directoriesFor(files))) throw new Error('Invalid bundled skill resource paths');\n  const version = JSON.parse(readRegular(packageFile, true).toString('utf8')).version;\n  const value: Omit<Manifest, 'metadataDigest'> = { format: 1, owner, skill, host, version, files };\n  const manifest = manifestSchema.parse({ ...value, metadataDigest: metadataDigest(value) });\n  tree.files[marker] = Buffer.from(`${JSON.stringify(manifest, null, 2)}\\n`);\n  return { tree, manifest };\n}\n\nexport function inspectIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection {\n  const target = location(host, options);\n  const result = details(target);\n  try {\n    assertPath(target.path);\n    if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, installed: false, status: 'missing' };\n    const manifest = readOwned(target.path, host);\n    const current = bundle(host).manifest.metadataDigest === manifest.metadataDigest;\n    return { ...result, installed: true, status: 'installed', version: manifest.version, current };\n  } catch (error) {\n    return { ...result, installed: false, status: 'conflict', reason: error instanceof Error ? error.message : String(error) };\n  }\n}\n\nfunction withLock<T>(target: Location, action: () => T): T {\n  const directory = dirname(dirname(target.path));\n  assertPath(directory);\n  mkdirSync(directory, { recursive: true });\n  assertPath(directory);\n  const lock = join(directory, '.apphx-install.lock');\n  let descriptor: number;\n  try { descriptor = openSync(lock, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600); }\n  catch { throw new Error(`Installation is locked at ${lock}; if an earlier installer stopped, inspect it before removing its lock`); }\n  try { return action(); }\n  finally { closeSync(descriptor); unlinkSync(lock); }\n}\n\nfunction applyIntegration(host: string, options: IntegrationOptions, operation: 'install' | 'update'): IntegrationInspection & { changed: boolean } {\n  const target = location(host, options);\n  const next = bundle(host);\n  assertPath(target.path);\n  if (operation === 'update' && !lstatSync(target.path, { throwIfNoEntry: false })) throw new Error(`No installation at ${target.path}; run apphx install ${host} first with the same scope`);\n  return withLock(target, () => {\n    assertPath(target.path);\n    const previous = lstatSync(target.path, { throwIfNoEntry: false }) ? readOwned(target.path, host) : undefined;\n    if (operation === 'update' && !previous) throw new Error(`No installation at ${target.path}; run apphx install ${host} first with the same scope`);\n    const result = { ...details(target), installed: true, status: 'installed' as const, version: next.manifest.version, current: true };\n    if (previous?.metadataDigest === next.manifest.metadataDigest) return { ...result, changed: false };\n    if (operation === 'install' && previous) throw new Error(`An older or different workflow is installed at ${target.path}; use apphx update ${host} with the same scope`);\n    const parent = dirname(target.path);\n    mkdirSync(parent, { recursive: true });\n    const staging = mkdtempSync(join(dirname(parent), '.apphx-stage-'));\n    const replacement = join(staging, skill);\n    const backup = join(staging, 'previous');\n    let moved = false;\n    try {\n      mkdirSync(replacement);\n      for (const [file, bytes] of Object.entries(next.tree.files)) {\n        const path = join(replacement, file);\n        mkdirSync(dirname(path), { recursive: true });\n        writeFileSync(path, bytes, { flag: 'wx', mode: 0o644 });\n      }\n      assertPath(target.path);\n      if (previous) {\n        if (readOwned(target.path, host).metadataDigest !== previous.metadataDigest) throw new Error('Installation changed during upgrade');\n        renameSync(target.path, backup);\n        moved = true;\n      } else if (lstatSync(target.path, { throwIfNoEntry: false })) throw new Error('Skill appeared during installation; refusing overwrite');\n      try { renameSync(replacement, target.path); }\n      catch (error) { if (moved) { renameSync(backup, target.path); moved = false; } throw error; }\n      if (moved) { readOwned(backup, host); rmSync(backup, { recursive: true }); moved = false; }\n      return { ...result, changed: true };\n    } finally {\n      // Keep a displaced install intact if rollback or cleanup was interrupted.\n      if (!moved) rmSync(staging, { recursive: true, force: true });\n    }\n  });\n}\n\nexport function installIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  return applyIntegration(host, options, 'install');\n}\n\nexport function updateIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  return applyIntegration(host, options, 'update');\n}\n\nexport function uninstallIntegration(host: string, options: IntegrationOptions = {}): IntegrationInspection & { changed: boolean } {\n  const target = location(host, options);\n  assertPath(target.path);\n  const result = { ...details(target), installed: false, status: 'missing' as const };\n  if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, changed: false };\n  return withLock(target, () => {\n    assertPath(target.path);\n    if (!lstatSync(target.path, { throwIfNoEntry: false })) return { ...result, changed: false };\n    readOwned(target.path, host);\n    rmSync(target.path, { recursive: true });\n    return { ...result, changed: true };\n  });\n}\n"],"mappings":";;;;;;;AAOA,MAAM,QAAQ;AACd,MAAM,SAAS;AACf,MAAM,QAAQ;AACd,MAAM,mBAAmB,cAAc,IAAI,IAAI,oBAAoB,YAAY,GAAG,CAAC;AACnF,MAAM,cAAc,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AAE7E,MAAa,QAAQ,OAAO,OAAO;CACjC;EAAE,IAAI;EAAS,MAAM;EAAS,YAAY;EAAU,kBAAkB;EAAkB,iBAAiB;EAAoB,QAAQ;EAA8C,cAAc;CAA8G;CAC/S;EAAE,IAAI;EAAU,MAAM;EAAe,YAAY;EAAU,kBAAkB;EAAkB,iBAAiB;EAAwD,QAAQ;EAA0C,cAAc;CAA8I;CACtX;EAAE,IAAI;EAAU,MAAM;EAAU,YAAY;EAAU,kBAAkB;EAAkB,iBAAiB;EAAoB,QAAQ;EAAkC,cAAc;CAA4I;CACnU;EAAE,IAAI;EAAM,MAAM;EAAM,YAAY;EAAgB,kBAAkB;EAAc,iBAAiB;EAA4D,QAAQ;EAAsF,cAAc;CAAmM;CAChd;EAAE,IAAI;EAAU,MAAM;EAAc,YAAY;EAAuB,kBAAkB;EAAkB,iBAAiB;EAA8D,QAAQ;EAA0C,cAAc;CAA6J;CACvZ;EAAE,IAAI;EAAY,MAAM;EAAY,YAAY;EAAuB,kBAAkB;EAAoB,iBAAiB;EAAwE,QAAQ;EAAoC,cAAc;CAAkM;CAClc;EAAE,IAAI;EAAY,MAAM;EAAoB,YAAY;EAAuB,kBAAkB;EAA8D,iBAAiB;EAA4C,QAAQ;EAAsF,cAAc;CAAoO;CAC5iB;EAAE,IAAI;EAAU,MAAM;EAAgB,YAAY;EAAU,kBAAkB;EAAkB,iBAAiB;EAAkD,QAAQ;EAAyE,cAAc;CAA+U;AACnlB,CAAC,CAAC,KAAI,SAAQ,OAAO,OAAO,IAAI,CAAC,CAAC;AAalC,MAAM,UAAU,UAA2B,WAAW,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,KAAK;AAC1F,MAAM,gBAAgB,SAAiB,gCAAgC,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,CAAC,CAAC,OAAM,SAAQ,SAAS,OAAO,SAAS,QAAQ,KAAK,SAAS,CAAC,KAAK,SAAS;AACjL,MAAM,eAAe,EAAE,OAAO,CAAC,CAAC,MAAM,gBAAgB;AACtD,MAAM,iBAAiB,EAAE,aAAa;CACpC,QAAQ,EAAE,QAAQ,CAAC;CAAG,OAAO,EAAE,QAAQ,KAAK;CAAG,OAAO,EAAE,QAAQ,KAAK;CAAG,MAAM,EAAE,OAAO;CACvF,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,4CAA4C;CACtE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,YAAY,GAAG,YAAY;CAAG,gBAAgB;AAClF,CAAC;AAID,SAAS,WAAW,MAAoB;CACtC,MAAM,WAAW,QAAQ,IAAI;CAC7B,IAAI,UAAU,MAAM,QAAQ,CAAC,CAAC;CAC9B,MAAM,QAAQ,SAAS,MAAM,QAAQ,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;CACtE,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,UAAU,KAAK,SAAS,MAAM,EAAG;EACjC,MAAM,OAAO,UAAU,SAAS,EAAE,gBAAgB,MAAM,CAAC;EACzD,IAAI,CAAC,MAAM;EACX,IAAI,KAAK,eAAe,GAAG,MAAM,IAAI,MAAM,0BAA0B,QAAQ,wCAAwC;EACrH,IAAI,IAAI,MAAM,SAAS,KAAK,CAAC,KAAK,YAAY,GAAG,MAAM,IAAI,MAAM,oBAAoB,SAAS;CAChG;AACF;AAEA,SAAS,YAAY,MAAc,gBAAgB,OAAe;CAChE,WAAW,IAAI;CACf,MAAM,aAAa,SAAS,MAAM,UAAU,WAAW,UAAU,aAAa,UAAU,UAAU;CAClG,IAAI;EACF,MAAM,OAAO,UAAU,UAAU;EACjC,IAAI,CAAC,KAAK,OAAO,KAAM,CAAC,iBAAiB,KAAK,UAAU,GAAI,MAAM,IAAI,MAAM,0DAA0D,MAAM;EAC5I,OAAO,aAAa,UAAU;CAChC,UAAU;EAAE,UAAU,UAAU;CAAG;AACrC;AAEA,SAAS,SAAS,MAAc,gBAAgB,OAAa;CAC3D,WAAW,IAAI;CACf,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,GAAG,MAAM,IAAI,MAAM,0BAA0B,MAAM;CACpF,MAAM,OAAa;EAAE,OAAO,OAAO,OAAO,IAAI;EAAG,aAAa,CAAC;CAAE;CACjE,SAAS,MAAM,WAAmB,QAAsB;EACtD,KAAK,MAAM,QAAQ,YAAY,SAAS,CAAC,CAAC,KAAK,GAAG;GAChD,MAAM,OAAO,KAAK,WAAW,IAAI;GACjC,MAAM,WAAW,SAAS,GAAG,OAAO,GAAG,SAAS;GAChD,MAAM,OAAO,UAAU,IAAI;GAC3B,IAAI,KAAK,eAAe,GAAG,MAAM,IAAI,MAAM,wCAAwC,MAAM;GACzF,IAAI,KAAK,YAAY,GAAG;IAAE,KAAK,YAAY,KAAK,QAAQ;IAAG,MAAM,MAAM,QAAQ;GAAG,OAC7E,KAAK,MAAM,YAAY,YAAY,MAAM,aAAa;EAC7D;CACF;CACA,MAAM,MAAM,EAAE;CACd,OAAO;AACT;AAEA,SAAS,YAAY,MAAoC;CACvD,OAAO,OAAO,YAAY,OAAO,QAAQ,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AACxI;AAEA,SAAS,eAAe,OAAiD;CACvE,OAAO,OAAO,KAAK,UAAU;EAAC,MAAM;EAAQ,MAAM;EAAO,MAAM;EAAO,MAAM;EAAM,MAAM;EAAS,OAAO,QAAQ,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC;CAAC,CAAC,CAAC;AAC/K;AAEA,SAAS,eAAe,OAA0C;CAChE,MAAM,8BAAc,IAAI,IAAY;CACpC,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,GAAG;EACrC,IAAI,SAAS,KAAK,MAAM,GAAG,KAAK,YAAY,GAAG,CAAC;EAChD,IAAI,CAAC,KAAK,SAAS,GAAG,GAAG;EACzB,OAAO,QAAQ;GAAE,YAAY,IAAI,MAAM;GAAG,SAAS,OAAO,SAAS,GAAG,IAAI,OAAO,MAAM,GAAG,OAAO,YAAY,GAAG,CAAC,IAAI;EAAI;CAC3H;CACA,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,KAAK;AAC/B;AAEA,SAAS,UAAU,MAAc,MAAwB;CACvD,MAAM,OAAO,SAAS,IAAI;CAC1B,IAAI,CAAC,KAAK,MAAM,SAAS,MAAM,IAAI,MAAM,kCAAkC,OAAO,IAAI,MAAM;CAC5F,IAAI;CACJ,IAAI;EAAE,WAAW,eAAe,MAAM,KAAK,MAAM,KAAK,MAAM,OAAO,CAAC,SAAS,MAAM,CAAC,CAAC;CAAG,QAClF;EAAE,MAAM,IAAI,MAAM,+BAA+B,MAAM;CAAG;CAChE,IAAI,SAAS,SAAS,QAAQ,SAAS,mBAAmB,eAAe,QAAQ,GAAG,MAAM,IAAI,MAAM,yCAAyC,MAAM;CACnJ,IAAI,CAAC,SAAS,MAAM,eAAe,KAAK,UAAU,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,QAAO,SAAQ,SAAS,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,OAAO,KAAK,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,0CAA0C,MAAM;CAC1O,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAC1D,IAAI,OAAO,KAAK,MAAM,KAAM,MAAM,UAAU,MAAM,IAAI,MAAM,2BAA2B,KAAK,MAAM,IAAI,GAAG;CAE3G,IAAI,KAAK,UAAU,KAAK,YAAY,KAAK,CAAC,MAAM,KAAK,UAAU,eAAe,SAAS,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,iCAAiC,MAAM;CACvJ,OAAO;AACT;AAEA,SAAS,aAAa,IAAkB;CACtC,MAAM,OAAO,MAAM,MAAK,UAAS,MAAM,OAAO,EAAE;CAChD,IAAI,CAAC,MAAM,MAAM,IAAI,MAAM,oBAAoB,KAAK,UAAU,EAAE,EAAE,qBAAqB,MAAM,KAAI,UAAS,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,GAAG;CAChI,OAAO;AACT;AAEA,SAAS,qBAAqB,MAAc,UAA0B;CACpE,MAAM,aAAa,QAAQ,IAAI;CAC/B,IAAI,CAAC,YAAY,OAAO;CACxB,MAAM,WAAW,eAAe,MAAM,QAAQ,IAAI,WAAW,WAAW,IAAI,IAAI,KAAK,QAAQ,GAAG,WAAW,MAAM,CAAC,CAAC,IAAI;CACvH,IAAI,CAAC,WAAW,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,gDAAgD;CACnG,OAAO,QAAQ,QAAQ;AACzB;AAEA,SAAS,SAAS,IAAY,SAAuC;CACnE,MAAM,OAAO,aAAa,EAAE;CAC5B,IAAI,QAAQ,UAAU,QAAQ,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,wDAAwD;CAC7H,IAAI,QAAQ,QAAQ;EAClB,IAAI;EACJ,QAAQ,IAAR;GACE,KAAK;IAAU,YAAY,KAAK,qBAAqB,qBAAqB,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,QAAQ;IAAG;GAClH,KAAK;IAAU,YAAY,KAAK,qBAAqB,mBAAmB,QAAQ,CAAC,GAAG,WAAW,QAAQ;IAAG;GAC1G,KAAK;IAAM,YAAY,KAAK,qBAAqB,uBAAuB,KAAK,QAAQ,GAAG,OAAO,OAAO,CAAC,GAAG,QAAQ;IAAG;GACrH,KAAK;IAAY,YAAY,KAAK,qBAAqB,mBAAmB,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,YAAY,QAAQ;IAAG;GAC9H,KAAK;IAAY,YAAY,KAAK,qBAAqB,YAAY,KAAK,QAAQ,GAAG,MAAM,CAAC,GAAG,QAAQ;IAAG;GACxG,KAAK;IAAU,YAAY,KAAK,qBAAqB,eAAe,KAAK,QAAQ,GAAG,SAAS,CAAC,GAAG,QAAQ;IAAG;GAC5G,SAAS,YAAY,KAAK,QAAQ,GAAG,KAAK,gBAAgB;EAC5D;EACA,OAAO;GAAE;GAAM,OAAO;GAAU,MAAM,KAAK,WAAW,KAAK;EAAE;CAC/D;CACA,IAAI,QAAQ,YAAY,KAAA,KAAa,CAAC,QAAQ,QAAQ,KAAK,GAAG,MAAM,IAAI,MAAM,qCAAqC;CACnH,IAAI,UAAU,QAAQ,QAAQ,WAAW,QAAQ,IAAI,CAAC;CACtD,WAAW,OAAO;CAClB,IAAI,CAAC,UAAU,SAAS,EAAE,gBAAgB,MAAM,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,IAAI,MAAM,qCAAqC,SAAS;CACjI,IAAI,OAAO,cAAc,OAAO,UAAU;EACxC,IAAI,QAAQ;EACZ,KAAK,IAAI,YAAY,UAAW,YAAY,QAAQ,SAAS,GAAG;GAC9D,IAAI,UAAU,KAAK,WAAW,MAAM,GAAG,EAAE,gBAAgB,MAAM,CAAC,GAAG;IAAE,UAAU;IAAW,QAAQ;IAAM;GAAO;GAC/G,IAAI,QAAQ,SAAS,MAAM,WAAW;EACxC;EACA,IAAI,OAAO,YAAY,CAAC,OAAO,MAAM,IAAI,MAAM,iGAAiG;CAClJ;CACA,OAAO;EAAE;EAAM,OAAO;EAAW,MAAM,KAAK,SAAS,OAAO,aAAa,gBAAgB,KAAK,kBAAkB,KAAK;CAAE;AACzH;AAEA,SAAS,QAAQ,QAAkB;CACjC,OAAO;EAAE,MAAM,OAAO,KAAK;EAAI,MAAM,OAAO,KAAK;EAAM,OAAO,OAAO;EAAO,MAAM,OAAO;EAAM,YAAY,OAAO,KAAK;EAAY,cAAc,OAAO,KAAK;EAAc,QAAQ,OAAO,KAAK;CAAO;AACxM;AAEA,SAAS,OAAO,MAAkD;CAEhE,MAAM,OAAO,SAAS,kBAAkB,IAAI;CAC5C,IAAI,CAAC,KAAK,MAAM,eAAe,KAAK,MAAM,SAAS,MAAM,IAAI,MAAM,6BAA6B;CAChG,MAAM,QAAQ,YAAY,IAAI;CAC9B,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,MAAM,YAAY,KAAK,KAAK,UAAU,KAAK,YAAY,KAAK,CAAC,MAAM,KAAK,UAAU,eAAe,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,sCAAsC;CACxL,MAAM,UAAU,KAAK,MAAM,YAAY,aAAa,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC;CAC5E,MAAM,QAA0C;EAAE,QAAQ;EAAG;EAAO;EAAO;EAAM;EAAS;CAAM;CAChG,MAAM,WAAW,eAAe,MAAM;EAAE,GAAG;EAAO,gBAAgB,eAAe,KAAK;CAAE,CAAC;CACzF,KAAK,MAAM,UAAU,OAAO,KAAK,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,EAAE,GAAG;CACzE,OAAO;EAAE;EAAM;CAAS;AAC1B;AAEA,SAAgB,mBAAmB,MAAc,UAA8B,CAAC,GAA0B;CACxG,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,MAAM,SAAS,QAAQ,MAAM;CAC7B,IAAI;EACF,WAAW,OAAO,IAAI;EACtB,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAO,QAAQ;EAAU;EAChH,MAAM,WAAW,UAAU,OAAO,MAAM,IAAI;EAC5C,MAAM,UAAU,OAAO,IAAI,CAAC,CAAC,SAAS,mBAAmB,SAAS;EAClE,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAM,QAAQ;GAAa,SAAS,SAAS;GAAS;EAAQ;CAC/F,SAAS,OAAO;EACd,OAAO;GAAE,GAAG;GAAQ,WAAW;GAAO,QAAQ;GAAY,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAAE;CAC3H;AACF;AAEA,SAAS,SAAY,QAAkB,QAAoB;CACzD,MAAM,YAAY,QAAQ,QAAQ,OAAO,IAAI,CAAC;CAC9C,WAAW,SAAS;CACpB,UAAU,WAAW,EAAE,WAAW,KAAK,CAAC;CACxC,WAAW,SAAS;CACpB,MAAM,OAAO,KAAK,WAAW,qBAAqB;CAClD,IAAI;CACJ,IAAI;EAAE,aAAa,SAAS,MAAM,UAAU,UAAU,UAAU,SAAS,UAAU,WAAW,UAAU,YAAY,GAAK;CAAG,QACtH;EAAE,MAAM,IAAI,MAAM,6BAA6B,KAAK,uEAAuE;CAAG;CACpI,IAAI;EAAE,OAAO,OAAO;CAAG,UACf;EAAE,UAAU,UAAU;EAAG,WAAW,IAAI;CAAG;AACrD;AAEA,SAAS,iBAAiB,MAAc,SAA6B,WAA+E;CAClJ,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,MAAM,OAAO,OAAO,IAAI;CACxB,WAAW,OAAO,IAAI;CACtB,IAAI,cAAc,YAAY,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,sBAAsB,OAAO,KAAK,sBAAsB,KAAK,2BAA2B;CAC1L,OAAO,SAAS,cAAc;EAC5B,WAAW,OAAO,IAAI;EACtB,MAAM,WAAW,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,IAAI,UAAU,OAAO,MAAM,IAAI,IAAI,KAAA;EACpG,IAAI,cAAc,YAAY,CAAC,UAAU,MAAM,IAAI,MAAM,sBAAsB,OAAO,KAAK,sBAAsB,KAAK,2BAA2B;EACjJ,MAAM,SAAS;GAAE,GAAG,QAAQ,MAAM;GAAG,WAAW;GAAM,QAAQ;GAAsB,SAAS,KAAK,SAAS;GAAS,SAAS;EAAK;EAClI,IAAI,UAAU,mBAAmB,KAAK,SAAS,gBAAgB,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAM;EAClG,IAAI,cAAc,aAAa,UAAU,MAAM,IAAI,MAAM,kDAAkD,OAAO,KAAK,qBAAqB,KAAK,qBAAqB;EACtK,MAAM,SAAS,QAAQ,OAAO,IAAI;EAClC,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;EACrC,MAAM,UAAU,YAAY,KAAK,QAAQ,MAAM,GAAG,eAAe,CAAC;EAClE,MAAM,cAAc,KAAK,SAAS,KAAK;EACvC,MAAM,SAAS,KAAK,SAAS,UAAU;EACvC,IAAI,QAAQ;EACZ,IAAI;GACF,UAAU,WAAW;GACrB,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,KAAK,KAAK,KAAK,GAAG;IAC3D,MAAM,OAAO,KAAK,aAAa,IAAI;IACnC,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;IAC5C,cAAc,MAAM,OAAO;KAAE,MAAM;KAAM,MAAM;IAAM,CAAC;GACxD;GACA,WAAW,OAAO,IAAI;GACtB,IAAI,UAAU;IACZ,IAAI,UAAU,OAAO,MAAM,IAAI,CAAC,CAAC,mBAAmB,SAAS,gBAAgB,MAAM,IAAI,MAAM,qCAAqC;IAClI,WAAW,OAAO,MAAM,MAAM;IAC9B,QAAQ;GACV,OAAO,IAAI,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,MAAM,IAAI,MAAM,wDAAwD;GACtI,IAAI;IAAE,WAAW,aAAa,OAAO,IAAI;GAAG,SACrC,OAAO;IAAE,IAAI,OAAO;KAAE,WAAW,QAAQ,OAAO,IAAI;KAAG,QAAQ;IAAO;IAAE,MAAM;GAAO;GAC5F,IAAI,OAAO;IAAE,UAAU,QAAQ,IAAI;IAAG,OAAO,QAAQ,EAAE,WAAW,KAAK,CAAC;IAAG,QAAQ;GAAO;GAC1F,OAAO;IAAE,GAAG;IAAQ,SAAS;GAAK;EACpC,UAAU;GAER,IAAI,CAAC,OAAO,OAAO,SAAS;IAAE,WAAW;IAAM,OAAO;GAAK,CAAC;EAC9D;CACF,CAAC;AACH;AAEA,SAAgB,mBAAmB,MAAc,UAA8B,CAAC,GAAiD;CAC/H,OAAO,iBAAiB,MAAM,SAAS,SAAS;AAClD;AAEA,SAAgB,kBAAkB,MAAc,UAA8B,CAAC,GAAiD;CAC9H,OAAO,iBAAiB,MAAM,SAAS,QAAQ;AACjD;AAEA,SAAgB,qBAAqB,MAAc,UAA8B,CAAC,GAAiD;CACjI,MAAM,SAAS,SAAS,MAAM,OAAO;CACrC,WAAW,OAAO,IAAI;CACtB,MAAM,SAAS;EAAE,GAAG,QAAQ,MAAM;EAAG,WAAW;EAAO,QAAQ;CAAmB;CAClF,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;EAAE,GAAG;EAAQ,SAAS;CAAM;CAC3F,OAAO,SAAS,cAAc;EAC5B,WAAW,OAAO,IAAI;EACtB,IAAI,CAAC,UAAU,OAAO,MAAM,EAAE,gBAAgB,MAAM,CAAC,GAAG,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAM;EAC3F,UAAU,OAAO,MAAM,IAAI;EAC3B,OAAO,OAAO,MAAM,EAAE,WAAW,KAAK,CAAC;EACvC,OAAO;GAAE,GAAG;GAAQ,SAAS;EAAK;CACpC,CAAC;AACH"}

package/dist/isolation.js

@@ -0,0 +1,190 @@
+import { canonicalPath, normalizeIsolationPaths } from "./config.js";
+import { accessSync, constants, existsSync, lstatSync, mkdirSync, mkdtempSync, realpathSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+import { delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
+// src/isolation.ts
+function failure(message) {
+	return Object.assign(new Error(message), { code: "SETUP_REQUIRED" });
+}
+function contains(parent, child) {
+	const path = relative(parent, child);
+	return path === "" || path !== ".." && !path.startsWith(`..${sep}`) && !isAbsolute(path);
+}
+function executablePath(command, cwd, env) {
+	const candidates = command.includes("/") ? [resolve(cwd, command)] : (env.PATH ?? "").split(delimiter).filter(Boolean).map((path) => resolve(cwd, path, command));
+	for (const candidate of candidates) try {
+		accessSync(candidate, constants.X_OK);
+		const path = realpathSync(candidate);
+		if (lstatSync(path).isFile()) return path;
+	} catch {}
+	throw failure(`Cannot resolve isolated executable ${command}; select an existing executable in the approved worker PATH`);
+}
+function pathRule(path) {
+	const info = lstatSync(path);
+	if (info.isSymbolicLink() || !info.isFile() && !info.isDirectory()) throw failure(`Isolation grant requires a regular canonical file or directory: ${path}`);
+	return `(${info.isDirectory() ? "subpath" : "literal"} ${JSON.stringify(path)})`;
+}
+/** Keep deletion authority on the original trusted root, never a re-resolved target or its parent. */
+function removeConfinedPath(path, root) {
+	if (process.platform !== "darwin") throw failure("Confined cleanup requires the selected macOS backend");
+	const boundary = resolve(root), target = resolve(path);
+	if (boundary === "/" || !contains(boundary, target)) throw failure("Cleanup target must stay within its original isolation root");
+	const ancestors = /* @__PURE__ */ new Set([
+		"/",
+		"/bin",
+		"/usr",
+		"/System"
+	]);
+	for (let parent = dirname(boundary); !ancestors.has(parent); parent = dirname(parent)) ancestors.add(parent);
+	const profile = [
+		"(version 1)",
+		"(deny default)",
+		"(allow process-exec)",
+		"(allow sysctl-read)",
+		"(allow file-read* (literal \"/\") (literal \"/bin/rm\") (subpath \"/System/Library\") (subpath \"/usr/lib\") (literal \"/dev/null\"))",
+		`(allow file-read-metadata ${[...ancestors].map((parent) => `(literal ${JSON.stringify(parent)})`).join(" ")})`,
+		`(allow file-read* file-write* (subpath ${JSON.stringify(boundary)}))`,
+		"(allow file-write* (literal \"/dev/null\"))"
+	].join("\n");
+	const result = spawnSync("/usr/bin/sandbox-exec", [
+		"-p",
+		profile,
+		"/bin/rm",
+		"-rf",
+		"--",
+		target
+	], {
+		cwd: "/",
+		env: {
+			PATH: "/usr/bin:/bin",
+			LANG: "C"
+		},
+		encoding: "utf8",
+		timeout: 1e4,
+		maxBuffer: 65536
+	});
+	if (result.error || result.signal || result.status !== 0) throw Object.assign(/* @__PURE__ */ new Error(`Confined cleanup did not complete; outside paths were not granted: ${result.error?.message ?? result.stderr ?? result.signal}`), { code: "PROCESS_CLEANUP_BLOCKED" });
+}
+/** This confines spawned commands, not the host agent, resource consumption or GUI/device services. */
+function prepareIsolatedCommand(argv, context) {
+	if (!context.config.isolation) throw failure("No subprocess isolation mode was selected");
+	if (process.platform !== "darwin") throw failure("macos-sandbox isolation requires macOS; execution was not downgraded to trusted mode");
+	try {
+		accessSync("/usr/bin/sandbox-exec", constants.X_OK);
+	} catch {
+		throw failure("The selected macos-sandbox backend is unavailable; no command was started");
+	}
+	const config = {
+		...context.config,
+		isolation: {
+			...context.config.isolation,
+			readOnlyPaths: [...context.config.isolation.readOnlyPaths]
+		}
+	};
+	normalizeIsolationPaths(config);
+	for (let index = 0; index < config.isolation.readOnlyPaths.length; index++) if (config.isolation.readOnlyPaths[index] !== context.config.isolation.readOnlyPaths[index]) throw failure("An isolation read-only path changed identity; review the owner configuration before retrying");
+	const workspaceInfo = lstatSync(context.workspace);
+	if (!workspaceInfo.isDirectory() || workspaceInfo.isSymbolicLink()) throw failure("Isolation requires a real owned workspace directory");
+	const workspace = realpathSync(context.workspace);
+	const state = canonicalPath(config.stateDir), workspaceRoot = canonicalPath(config.workspaceRoot);
+	if (workspace === workspaceRoot || contains(workspace, state) || contains(state, workspace)) throw failure("Isolation workspace must not expose control state or the whole workspace root");
+	const cwd = realpathSync(context.cwd);
+	if (![workspace, ...config.isolation.readOnlyPaths].some((path) => contains(path, cwd))) throw failure("Isolated command cwd must stay in its workspace or an approved read-only root");
+	const executable = executablePath(argv[0] ?? "", cwd, context.env);
+	if (contains(state, executable) || contains(workspaceRoot, executable) && !contains(workspace, executable)) throw failure("An isolated command cannot execute control state or another task workspace");
+	const readable = [
+		...config.isolation.readOnlyPaths,
+		executable,
+		realpathSync(process.execPath)
+	];
+	for (const file of context.readableFiles ?? []) {
+		if (!lstatSync(file).isFile() || lstatSync(file).isSymbolicLink()) throw failure(`Harness isolation capability requires a regular file: ${file}`);
+		readable.push(realpathSync(file));
+	}
+	const extraWritable = (context.writableDirectories ?? []).map((path) => {
+		if (!lstatSync(path).isDirectory() || lstatSync(path).isSymbolicLink()) throw failure(`Harness isolation capability requires a real directory: ${path}`);
+		return realpathSync(path);
+	});
+	const scratchParent = context.scratchParent ?? state;
+	mkdirSync(scratchParent, {
+		recursive: true,
+		mode: 448
+	});
+	const scratch = realpathSync(mkdtempSync(join(scratchParent, "isolated-command-")));
+	const cleanup = () => removeConfinedPath(scratch, scratch);
+	try {
+		const home = join(scratch, "home"), temporary = join(scratch, "tmp"), cache = join(scratch, "cache");
+		for (const path of [
+			home,
+			temporary,
+			cache
+		]) mkdirSync(path, { mode: 448 });
+		const env = {
+			...context.env,
+			HOME: home,
+			TMPDIR: `${temporary}${sep}`,
+			TMP: temporary,
+			TEMP: temporary,
+			XDG_CACHE_HOME: cache,
+			GRADLE_USER_HOME: join(cache, "gradle"),
+			npm_config_cache: join(cache, "npm")
+		};
+		for (const [name, fallback] of [["GOCACHE", join(cache, "go-build")], ["GOMODCACHE", join(cache, "go-mod")]]) if (!env[name] || contains(state, canonicalPath(resolve(cwd, env[name])))) env[name] = fallback;
+		const systemPaths = ["/System/Library", "/usr/lib"].filter(existsSync);
+		const devices = [
+			"/dev/urandom",
+			"/dev/random",
+			"/dev/null"
+		].filter(existsSync);
+		const readablePaths = [.../* @__PURE__ */ new Set([...systemPaths, ...readable])];
+		const writablePaths = [.../* @__PURE__ */ new Set([
+			workspace,
+			scratch,
+			...extraWritable
+		])];
+		const ancestors = /* @__PURE__ */ new Set(["/"]);
+		for (const path of [
+			...readablePaths,
+			...writablePaths,
+			...devices,
+			cwd
+		]) {
+			let parent = dirname(path);
+			while (true) {
+				ancestors.add(parent);
+				const next = dirname(parent);
+				if (next === parent) break;
+				parent = next;
+			}
+		}
+		return {
+			argv: [
+				"/usr/bin/sandbox-exec",
+				"-p",
+				[
+					"(version 1)",
+					"(deny default)",
+					"(allow process-exec)",
+					"(allow process-fork)",
+					"(allow sysctl-read)",
+					"(allow file-read* (literal \"/\"))",
+					`(allow file-read-metadata ${[...ancestors].map((path) => `(literal ${JSON.stringify(path)})`).join(" ")})`,
+					`(allow file-read* ${readablePaths.map(pathRule).join(" ")} ${devices.map((path) => `(literal ${JSON.stringify(path)})`).join(" ")})`,
+					`(allow file-read* file-write* ${writablePaths.map(pathRule).join(" ")})`,
+					"(allow file-write* (literal \"/dev/null\"))",
+					...config.isolation.network === "allow" ? ["(allow network*)"] : []
+				].join("\n"),
+				executable,
+				...argv.slice(1)
+			],
+			env,
+			cleanup
+		};
+	} catch (cause) {
+		cleanup();
+		throw cause;
+	}
+}
+export { prepareIsolatedCommand, removeConfinedPath };
+
+//# sourceMappingURL=isolation.js.map

package/dist/isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolation.js","names":[],"sources":["../src/isolation.ts"],"sourcesContent":["import { accessSync, constants, existsSync, lstatSync, mkdirSync, mkdtempSync, realpathSync } from 'node:fs';\nimport { spawnSync } from 'node:child_process';\nimport { delimiter, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';\nimport { canonicalPath, normalizeIsolationPaths } from './config.js';\nimport type { Config } from './schemas.js';\n\nexport interface IsolationCapabilities {\n  /** Narrow capabilities for trusted harness utilities; never populated from project command data. */\n  readableFiles?: readonly string[];\n  writableDirectories?: readonly string[];\n}\n\nexport interface IsolationContext extends IsolationCapabilities {\n  config: Config;\n  workspace: string;\n  cwd: string;\n  env: NodeJS.ProcessEnv;\n  scratchParent?: string;\n}\n\nexport interface IsolatedCommand {\n  argv: string[];\n  env: NodeJS.ProcessEnv;\n  cleanup(): void;\n}\n\nfunction failure(message: string): Error & { code: string } {\n  return Object.assign(new Error(message), { code: 'SETUP_REQUIRED' });\n}\n\nfunction contains(parent: string, child: string): boolean {\n  const path = relative(parent, child);\n  return path === '' || path !== '..' && !path.startsWith(`..${sep}`) && !isAbsolute(path);\n}\n\nfunction executablePath(command: string, cwd: string, env: NodeJS.ProcessEnv): string {\n  const candidates = command.includes('/') ? [resolve(cwd, command)] : (env.PATH ?? '').split(delimiter).filter(Boolean).map(path => resolve(cwd, path, command));\n  for (const candidate of candidates) {\n    try {\n      accessSync(candidate, constants.X_OK);\n      const path = realpathSync(candidate);\n      if (lstatSync(path).isFile()) return path;\n    } catch {}\n  }\n  throw failure(`Cannot resolve isolated executable ${command}; select an existing executable in the approved worker PATH`);\n}\n\nfunction pathRule(path: string): string {\n  const info = lstatSync(path);\n  if (info.isSymbolicLink() || !info.isFile() && !info.isDirectory()) throw failure(`Isolation grant requires a regular canonical file or directory: ${path}`);\n  return `(${info.isDirectory() ? 'subpath' : 'literal'} ${JSON.stringify(path)})`;\n}\n\n/** Keep deletion authority on the original trusted root, never a re-resolved target or its parent. */\nexport function removeConfinedPath(path: string, root: string): void {\n  if (process.platform !== 'darwin') throw failure('Confined cleanup requires the selected macOS backend');\n  const boundary = resolve(root), target = resolve(path);\n  if (boundary === '/' || !contains(boundary, target)) throw failure('Cleanup target must stay within its original isolation root');\n  const ancestors = new Set<string>(['/', '/bin', '/usr', '/System']);\n  for (let parent = dirname(boundary); !ancestors.has(parent); parent = dirname(parent)) ancestors.add(parent);\n  const profile = [\n    '(version 1)', '(deny default)', '(allow process-exec)', '(allow sysctl-read)',\n    '(allow file-read* (literal \"/\") (literal \"/bin/rm\") (subpath \"/System/Library\") (subpath \"/usr/lib\") (literal \"/dev/null\"))',\n    `(allow file-read-metadata ${[...ancestors].map(parent => `(literal ${JSON.stringify(parent)})`).join(' ')})`,\n    `(allow file-read* file-write* (subpath ${JSON.stringify(boundary)}))`,\n    '(allow file-write* (literal \"/dev/null\"))',\n  ].join('\\n');\n  const result = spawnSync('/usr/bin/sandbox-exec', ['-p', profile, '/bin/rm', '-rf', '--', target], {\n    cwd: '/', env: { PATH: '/usr/bin:/bin', LANG: 'C' }, encoding: 'utf8', timeout: 10000, maxBuffer: 65536,\n  });\n  if (result.error || result.signal || result.status !== 0) throw Object.assign(new Error(`Confined cleanup did not complete; outside paths were not granted: ${result.error?.message ?? result.stderr ?? result.signal}`), { code: 'PROCESS_CLEANUP_BLOCKED' });\n}\n\n/** This confines spawned commands, not the host agent, resource consumption or GUI/device services. */\nexport function prepareIsolatedCommand(argv: string[], context: IsolationContext): IsolatedCommand {\n  if (!context.config.isolation) throw failure('No subprocess isolation mode was selected');\n  if (process.platform !== 'darwin') throw failure('macos-sandbox isolation requires macOS; execution was not downgraded to trusted mode');\n  try { accessSync('/usr/bin/sandbox-exec', constants.X_OK); }\n  catch { throw failure('The selected macos-sandbox backend is unavailable; no command was started'); }\n  const config = { ...context.config, isolation: { ...context.config.isolation, readOnlyPaths: [...context.config.isolation.readOnlyPaths] } };\n  normalizeIsolationPaths(config);\n  for (let index = 0; index < config.isolation.readOnlyPaths.length; index++) {\n    if (config.isolation.readOnlyPaths[index] !== context.config.isolation.readOnlyPaths[index]) throw failure('An isolation read-only path changed identity; review the owner configuration before retrying');\n  }\n  const workspaceInfo = lstatSync(context.workspace);\n  if (!workspaceInfo.isDirectory() || workspaceInfo.isSymbolicLink()) throw failure('Isolation requires a real owned workspace directory');\n  const workspace = realpathSync(context.workspace);\n  const state = canonicalPath(config.stateDir), workspaceRoot = canonicalPath(config.workspaceRoot);\n  if (workspace === workspaceRoot || contains(workspace, state) || contains(state, workspace)) throw failure('Isolation workspace must not expose control state or the whole workspace root');\n  const cwd = realpathSync(context.cwd);\n  const approved = [workspace, ...config.isolation.readOnlyPaths];\n  if (!approved.some(path => contains(path, cwd))) throw failure('Isolated command cwd must stay in its workspace or an approved read-only root');\n  const executable = executablePath(argv[0] ?? '', cwd, context.env);\n  if (contains(state, executable) || contains(workspaceRoot, executable) && !contains(workspace, executable)) throw failure('An isolated command cannot execute control state or another task workspace');\n  const readable = [...config.isolation.readOnlyPaths, executable, realpathSync(process.execPath)];\n  for (const file of context.readableFiles ?? []) {\n    if (!lstatSync(file).isFile() || lstatSync(file).isSymbolicLink()) throw failure(`Harness isolation capability requires a regular file: ${file}`);\n    readable.push(realpathSync(file));\n  }\n  const extraWritable = (context.writableDirectories ?? []).map(path => {\n    if (!lstatSync(path).isDirectory() || lstatSync(path).isSymbolicLink()) throw failure(`Harness isolation capability requires a real directory: ${path}`);\n    return realpathSync(path);\n  });\n  const scratchParent = context.scratchParent ?? state;\n  mkdirSync(scratchParent, { recursive: true, mode: 0o700 });\n  const scratch = realpathSync(mkdtempSync(join(scratchParent, 'isolated-command-')));\n  const cleanup = () => removeConfinedPath(scratch, scratch);\n  try {\n    const home = join(scratch, 'home'), temporary = join(scratch, 'tmp'), cache = join(scratch, 'cache');\n    for (const path of [home, temporary, cache]) mkdirSync(path, { mode: 0o700 });\n    const env: NodeJS.ProcessEnv = { ...context.env, HOME: home, TMPDIR: `${temporary}${sep}`, TMP: temporary, TEMP: temporary, XDG_CACHE_HOME: cache, GRADLE_USER_HOME: join(cache, 'gradle'), npm_config_cache: join(cache, 'npm') };\n    for (const [name, fallback] of [['GOCACHE', join(cache, 'go-build')], ['GOMODCACHE', join(cache, 'go-mod')]] as const) {\n      if (!env[name] || contains(state, canonicalPath(resolve(cwd, env[name]!)))) env[name] = fallback;\n    }\n    const systemPaths = ['/System/Library', '/usr/lib'].filter(existsSync);\n    const devices = ['/dev/urandom', '/dev/random', '/dev/null'].filter(existsSync);\n    const readablePaths = [...new Set([...systemPaths, ...readable])];\n    const writablePaths = [...new Set([workspace, scratch, ...extraWritable])];\n    const ancestors = new Set<string>(['/']);\n    for (const path of [...readablePaths, ...writablePaths, ...devices, cwd]) {\n      let parent = dirname(path);\n      while (true) {\n        ancestors.add(parent);\n        const next = dirname(parent);\n        if (next === parent) break;\n        parent = next;\n      }\n    }\n    const profile = [\n      '(version 1)', '(deny default)', '(allow process-exec)', '(allow process-fork)', '(allow sysctl-read)',\n      '(allow file-read* (literal \"/\"))',\n      `(allow file-read-metadata ${[...ancestors].map(path => `(literal ${JSON.stringify(path)})`).join(' ')})`,\n      `(allow file-read* ${readablePaths.map(pathRule).join(' ')} ${devices.map(path => `(literal ${JSON.stringify(path)})`).join(' ')})`,\n      `(allow file-read* file-write* ${writablePaths.map(pathRule).join(' ')})`,\n      '(allow file-write* (literal \"/dev/null\"))',\n      ...(config.isolation.network === 'allow' ? ['(allow network*)'] : []),\n    ].join('\\n');\n    return { argv: ['/usr/bin/sandbox-exec', '-p', profile, executable, ...argv.slice(1)], env, cleanup };\n  } catch (cause) {\n    cleanup();\n    throw cause;\n  }\n}\n"],"mappings":";;;;;AA0BA,SAAS,QAAQ,SAA2C;CAC1D,OAAO,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,EAAE,MAAM,iBAAiB,CAAC;AACrE;AAEA,SAAS,SAAS,QAAgB,OAAwB;CACxD,MAAM,OAAO,SAAS,QAAQ,KAAK;CACnC,OAAO,SAAS,MAAM,SAAS,QAAQ,CAAC,KAAK,WAAW,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI;AACzF;AAEA,SAAS,eAAe,SAAiB,KAAa,KAAgC;CACpF,MAAM,aAAa,QAAQ,SAAS,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,IAAI,QAAQ,GAAA,CAAI,MAAM,SAAS,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAI,SAAQ,QAAQ,KAAK,MAAM,OAAO,CAAC;CAC9J,KAAK,MAAM,aAAa,YACtB,IAAI;EACF,WAAW,WAAW,UAAU,IAAI;EACpC,MAAM,OAAO,aAAa,SAAS;EACnC,IAAI,UAAU,IAAI,CAAC,CAAC,OAAO,GAAG,OAAO;CACvC,QAAQ,CAAC;CAEX,MAAM,QAAQ,sCAAsC,QAAQ,4DAA4D;AAC1H;AAEA,SAAS,SAAS,MAAsB;CACtC,MAAM,OAAO,UAAU,IAAI;CAC3B,IAAI,KAAK,eAAe,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,YAAY,GAAG,MAAM,QAAQ,mEAAmE,MAAM;CAC3J,OAAO,IAAI,KAAK,YAAY,IAAI,YAAY,UAAU,GAAG,KAAK,UAAU,IAAI,EAAE;AAChF;;AAGA,SAAgB,mBAAmB,MAAc,MAAoB;CACnE,IAAI,QAAQ,aAAa,UAAU,MAAM,QAAQ,sDAAsD;CACvG,MAAM,WAAW,QAAQ,IAAI,GAAG,SAAS,QAAQ,IAAI;CACrD,IAAI,aAAa,OAAO,CAAC,SAAS,UAAU,MAAM,GAAG,MAAM,QAAQ,6DAA6D;CAChI,MAAM,4BAAY,IAAI,IAAY;EAAC;EAAK;EAAQ;EAAQ;CAAS,CAAC;CAClE,KAAK,IAAI,SAAS,QAAQ,QAAQ,GAAG,CAAC,UAAU,IAAI,MAAM,GAAG,SAAS,QAAQ,MAAM,GAAG,UAAU,IAAI,MAAM;CAC3G,MAAM,UAAU;EACd;EAAe;EAAkB;EAAwB;EACzD;EACA,6BAA6B,CAAC,GAAG,SAAS,CAAC,CAAC,KAAI,WAAU,YAAY,KAAK,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;EAC3G,0CAA0C,KAAK,UAAU,QAAQ,EAAE;EACnE;CACF,CAAC,CAAC,KAAK,IAAI;CACX,MAAM,SAAS,UAAU,yBAAyB;EAAC;EAAM;EAAS;EAAW;EAAO;EAAM;CAAM,GAAG;EACjG,KAAK;EAAK,KAAK;GAAE,MAAM;GAAiB,MAAM;EAAI;EAAG,UAAU;EAAQ,SAAS;EAAO,WAAW;CACpG,CAAC;CACD,IAAI,OAAO,SAAS,OAAO,UAAU,OAAO,WAAW,GAAG,MAAM,OAAO,uBAAO,IAAI,MAAM,sEAAsE,OAAO,OAAO,WAAW,OAAO,UAAU,OAAO,QAAQ,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC/P;;AAGA,SAAgB,uBAAuB,MAAgB,SAA4C;CACjG,IAAI,CAAC,QAAQ,OAAO,WAAW,MAAM,QAAQ,2CAA2C;CACxF,IAAI,QAAQ,aAAa,UAAU,MAAM,QAAQ,sFAAsF;CACvI,IAAI;EAAE,WAAW,yBAAyB,UAAU,IAAI;CAAG,QACrD;EAAE,MAAM,QAAQ,2EAA2E;CAAG;CACpG,MAAM,SAAS;EAAE,GAAG,QAAQ;EAAQ,WAAW;GAAE,GAAG,QAAQ,OAAO;GAAW,eAAe,CAAC,GAAG,QAAQ,OAAO,UAAU,aAAa;EAAE;CAAE;CAC3I,wBAAwB,MAAM;CAC9B,KAAK,IAAI,QAAQ,GAAG,QAAQ,OAAO,UAAU,cAAc,QAAQ,SACjE,IAAI,OAAO,UAAU,cAAc,WAAW,QAAQ,OAAO,UAAU,cAAc,QAAQ,MAAM,QAAQ,8FAA8F;CAE3M,MAAM,gBAAgB,UAAU,QAAQ,SAAS;CACjD,IAAI,CAAC,cAAc,YAAY,KAAK,cAAc,eAAe,GAAG,MAAM,QAAQ,qDAAqD;CACvI,MAAM,YAAY,aAAa,QAAQ,SAAS;CAChD,MAAM,QAAQ,cAAc,OAAO,QAAQ,GAAG,gBAAgB,cAAc,OAAO,aAAa;CAChG,IAAI,cAAc,iBAAiB,SAAS,WAAW,KAAK,KAAK,SAAS,OAAO,SAAS,GAAG,MAAM,QAAQ,+EAA+E;CAC1L,MAAM,MAAM,aAAa,QAAQ,GAAG;CAEpC,IAAI,CAAC,CADa,WAAW,GAAG,OAAO,UAAU,aACrC,CAAC,CAAC,MAAK,SAAQ,SAAS,MAAM,GAAG,CAAC,GAAG,MAAM,QAAQ,+EAA+E;CAC9I,MAAM,aAAa,eAAe,KAAK,MAAM,IAAI,KAAK,QAAQ,GAAG;CACjE,IAAI,SAAS,OAAO,UAAU,KAAK,SAAS,eAAe,UAAU,KAAK,CAAC,SAAS,WAAW,UAAU,GAAG,MAAM,QAAQ,4EAA4E;CACtM,MAAM,WAAW;EAAC,GAAG,OAAO,UAAU;EAAe;EAAY,aAAa,QAAQ,QAAQ;CAAC;CAC/F,KAAK,MAAM,QAAQ,QAAQ,iBAAiB,CAAC,GAAG;EAC9C,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,GAAG,MAAM,QAAQ,yDAAyD,MAAM;EAChJ,SAAS,KAAK,aAAa,IAAI,CAAC;CAClC;CACA,MAAM,iBAAiB,QAAQ,uBAAuB,CAAC,EAAA,CAAG,KAAI,SAAQ;EACpE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,GAAG,MAAM,QAAQ,2DAA2D,MAAM;EACvJ,OAAO,aAAa,IAAI;CAC1B,CAAC;CACD,MAAM,gBAAgB,QAAQ,iBAAiB;CAC/C,UAAU,eAAe;EAAE,WAAW;EAAM,MAAM;CAAM,CAAC;CACzD,MAAM,UAAU,aAAa,YAAY,KAAK,eAAe,mBAAmB,CAAC,CAAC;CAClF,MAAM,gBAAgB,mBAAmB,SAAS,OAAO;CACzD,IAAI;EACF,MAAM,OAAO,KAAK,SAAS,MAAM,GAAG,YAAY,KAAK,SAAS,KAAK,GAAG,QAAQ,KAAK,SAAS,OAAO;EACnG,KAAK,MAAM,QAAQ;GAAC;GAAM;GAAW;EAAK,GAAG,UAAU,MAAM,EAAE,MAAM,IAAM,CAAC;EAC5E,MAAM,MAAyB;GAAE,GAAG,QAAQ;GAAK,MAAM;GAAM,QAAQ,GAAG,YAAY;GAAO,KAAK;GAAW,MAAM;GAAW,gBAAgB;GAAO,kBAAkB,KAAK,OAAO,QAAQ;GAAG,kBAAkB,KAAK,OAAO,KAAK;EAAE;EACjO,KAAK,MAAM,CAAC,MAAM,aAAa,CAAC,CAAC,WAAW,KAAK,OAAO,UAAU,CAAC,GAAG,CAAC,cAAc,KAAK,OAAO,QAAQ,CAAC,CAAC,GACzG,IAAI,CAAC,IAAI,SAAS,SAAS,OAAO,cAAc,QAAQ,KAAK,IAAI,KAAM,CAAC,CAAC,GAAG,IAAI,QAAQ;EAE1F,MAAM,cAAc,CAAC,mBAAmB,UAAU,CAAC,CAAC,OAAO,UAAU;EACrE,MAAM,UAAU;GAAC;GAAgB;GAAe;EAAW,CAAC,CAAC,OAAO,UAAU;EAC9E,MAAM,gBAAgB,CAAC,mBAAG,IAAI,IAAI,CAAC,GAAG,aAAa,GAAG,QAAQ,CAAC,CAAC;EAChE,MAAM,gBAAgB,CAAC,mBAAG,IAAI,IAAI;GAAC;GAAW;GAAS,GAAG;EAAa,CAAC,CAAC;EACzE,MAAM,4BAAY,IAAI,IAAY,CAAC,GAAG,CAAC;EACvC,KAAK,MAAM,QAAQ;GAAC,GAAG;GAAe,GAAG;GAAe,GAAG;GAAS;EAAG,GAAG;GACxE,IAAI,SAAS,QAAQ,IAAI;GACzB,OAAO,MAAM;IACX,UAAU,IAAI,MAAM;IACpB,MAAM,OAAO,QAAQ,MAAM;IAC3B,IAAI,SAAS,QAAQ;IACrB,SAAS;GACX;EACF;EAUA,OAAO;GAAE,MAAM;IAAC;IAAyB;IATzB;KACd;KAAe;KAAkB;KAAwB;KAAwB;KACjF;KACA,6BAA6B,CAAC,GAAG,SAAS,CAAC,CAAC,KAAI,SAAQ,YAAY,KAAK,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;KACvG,qBAAqB,cAAc,IAAI,QAAQ,CAAC,CAAC,KAAK,GAAG,EAAE,GAAG,QAAQ,KAAI,SAAQ,YAAY,KAAK,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE;KACjI,iCAAiC,cAAc,IAAI,QAAQ,CAAC,CAAC,KAAK,GAAG,EAAE;KACvE;KACA,GAAI,OAAO,UAAU,YAAY,UAAU,CAAC,kBAAkB,IAAI,CAAC;IACrE,CAAC,CAAC,KAAK,IAC8C;IAAG;IAAY,GAAG,KAAK,MAAM,CAAC;GAAC;GAAG;GAAK;EAAQ;CACtG,SAAS,OAAO;EACd,QAAQ;EACR,MAAM;CACR;AACF"}

package/dist/macos.js

@@ -0,0 +1,57 @@
+import { artifactOutputPath } from "./workspace.js";
+import { closeSync, lstatSync, openSync, readSync } from "node:fs";
+import { basename, join } from "node:path";
+// src/macos.ts
+/** Validate native output with system tooling, not just the file extension. */
+async function validateMacOSArtifact(path, target, exec) {
+	if (target === "dmg") {
+		const result = await exec([
+			"/usr/bin/hdiutil",
+			"verify",
+			path
+		]);
+		if (result.code !== 0) throw new Error(`Invalid macOS disk image: ${result.stderr || result.stdout}`);
+		return;
+	}
+	const info = artifactOutputPath(path, "Contents/Info.plist");
+	if (!lstatSync(info).isFile()) throw new Error("macOS application requires a regular Contents/Info.plist");
+	const result = await exec([
+		"/usr/bin/plutil",
+		"-extract",
+		"CFBundleExecutable",
+		"raw",
+		"-o",
+		"-",
+		info
+	]);
+	const executable = result.stdout.trim();
+	if (result.code !== 0 || !executable || executable === "." || executable === ".." || basename(executable) !== executable || executable.includes("\\")) throw new Error("macOS Info.plist must identify an in-bundle executable by file name");
+	const binary = artifactOutputPath(path, join("Contents", "MacOS", executable));
+	const stat = lstatSync(binary);
+	if (!stat.isFile() || stat.size < 32 || !(stat.mode & 73)) throw new Error("macOS application executable is missing, empty or not executable");
+	const header = Buffer.allocUnsafe(4);
+	const descriptor = openSync(binary, "r");
+	try {
+		if (readSync(descriptor, header, 0, 4, 0) !== 4 || ![
+			"feedfacf",
+			"cffaedfe",
+			"cafebabe",
+			"bebafeca",
+			"cafebabf",
+			"bfbafeca"
+		].includes(header.toString("hex"))) throw new Error("macOS application executable must be a Mach-O binary, not a script or placeholder");
+	} finally {
+		closeSync(descriptor);
+	}
+	const signed = await exec([
+		"/usr/bin/codesign",
+		"--verify",
+		"--deep",
+		"--strict",
+		path
+	]);
+	if (signed.code !== 0) throw new Error(`macOS local application signature is invalid: ${signed.stderr || signed.stdout}`);
+}
+export { validateMacOSArtifact };
+
+//# sourceMappingURL=macos.js.map

package/dist/macos.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos.js","names":[],"sources":["../src/macos.ts"],"sourcesContent":["import { basename, join } from 'node:path';\nimport { closeSync, lstatSync, openSync, readSync } from 'node:fs';\nimport { artifactOutputPath } from './workspace.js';\nimport type { Run } from './process.js';\n\n\n/** Validate native output with system tooling, not just the file extension. */\nexport async function validateMacOSArtifact(path: string, target: 'app' | 'dmg', exec: Run): Promise<void> {\n  if (target === 'dmg') {\n    const result = await exec(['/usr/bin/hdiutil', 'verify', path]);\n    if (result.code !== 0) throw new Error(`Invalid macOS disk image: ${result.stderr || result.stdout}`);\n    return;\n  }\n  const info = artifactOutputPath(path, 'Contents/Info.plist');\n  if (!lstatSync(info).isFile()) throw new Error('macOS application requires a regular Contents/Info.plist');\n  const result = await exec(['/usr/bin/plutil', '-extract', 'CFBundleExecutable', 'raw', '-o', '-', info]);\n  const executable = result.stdout.trim();\n  if (result.code !== 0 || !executable || executable === '.' || executable === '..' || basename(executable) !== executable || executable.includes('\\\\')) throw new Error('macOS Info.plist must identify an in-bundle executable by file name');\n  const binary = artifactOutputPath(path, join('Contents', 'MacOS', executable));\n  const stat = lstatSync(binary);\n  if (!stat.isFile() || stat.size < 32 || !(stat.mode & 0o111)) throw new Error('macOS application executable is missing, empty or not executable');\n  const header = Buffer.allocUnsafe(4);\n  const descriptor = openSync(binary, 'r');\n  try {\n    if (readSync(descriptor, header, 0, 4, 0) !== 4 || !['feedfacf', 'cffaedfe', 'cafebabe', 'bebafeca', 'cafebabf', 'bfbafeca'].includes(header.toString('hex'))) throw new Error('macOS application executable must be a Mach-O binary, not a script or placeholder');\n  } finally { closeSync(descriptor); }\n  const signed = await exec(['/usr/bin/codesign', '--verify', '--deep', '--strict', path]);\n  if (signed.code !== 0) throw new Error(`macOS local application signature is invalid: ${signed.stderr || signed.stdout}`);\n}\n"],"mappings":";;;;;AAOA,eAAsB,sBAAsB,MAAc,QAAuB,MAA0B;CACzG,IAAI,WAAW,OAAO;EACpB,MAAM,SAAS,MAAM,KAAK;GAAC;GAAoB;GAAU;EAAI,CAAC;EAC9D,IAAI,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,6BAA6B,OAAO,UAAU,OAAO,QAAQ;EACpG;CACF;CACA,MAAM,OAAO,mBAAmB,MAAM,qBAAqB;CAC3D,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,IAAI,MAAM,0DAA0D;CACzG,MAAM,SAAS,MAAM,KAAK;EAAC;EAAmB;EAAY;EAAsB;EAAO;EAAM;EAAK;CAAI,CAAC;CACvG,MAAM,aAAa,OAAO,OAAO,KAAK;CACtC,IAAI,OAAO,SAAS,KAAK,CAAC,cAAc,eAAe,OAAO,eAAe,QAAQ,SAAS,UAAU,MAAM,cAAc,WAAW,SAAS,IAAI,GAAG,MAAM,IAAI,MAAM,qEAAqE;CAC5O,MAAM,SAAS,mBAAmB,MAAM,KAAK,YAAY,SAAS,UAAU,CAAC;CAC7E,MAAM,OAAO,UAAU,MAAM;CAC7B,IAAI,CAAC,KAAK,OAAO,KAAK,KAAK,OAAO,MAAM,EAAE,KAAK,OAAO,KAAQ,MAAM,IAAI,MAAM,kEAAkE;CAChJ,MAAM,SAAS,OAAO,YAAY,CAAC;CACnC,MAAM,aAAa,SAAS,QAAQ,GAAG;CACvC,IAAI;EACF,IAAI,SAAS,YAAY,QAAQ,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC;GAAC;GAAY;GAAY;GAAY;GAAY;GAAY;EAAU,CAAC,CAAC,SAAS,OAAO,SAAS,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,mFAAmF;CACpQ,UAAU;EAAE,UAAU,UAAU;CAAG;CACnC,MAAM,SAAS,MAAM,KAAK;EAAC;EAAqB;EAAY;EAAU;EAAY;CAAI,CAAC;CACvF,IAAI,OAAO,SAAS,GAAG,MAAM,IAAI,MAAM,iDAAiD,OAAO,UAAU,OAAO,QAAQ;AAC1H"}