blade-code 0.10.123 → 0.10.125

package/dist/chunk-z5t56vsg.js

@@ -1,44 +0,0 @@
-import{Eh as Y}from"./chunk-kz15jy62.js";import{Fh as on,Gh as F,Hh as o}from"./chunk-9fgkg1vr.js";import{Lh as ct,Mh as bt}from"./chunk-pykxe413.js";import{Th as x}from"./chunk-kzzty3v5.js";import{$h as kn,Uh as Jn,Vh as Xt,Wh as pt,_h as gt,ai as it,bi as Rt,ci as Ct,di as un,ei as zt,fi as Bt,gi as On,hi as Kt,ii as Ut,ji as jn,ki as Ht,li as Yt,mi as qt,ni as Vt,oi as Qt,pi as Gt}from"./chunk-9jtjq50j.js";import{ti as fn}from"./chunk-w4xqaw4h.js";import{wi as $t,zi as J}from"./chunk-r6svhe3w.js";import{Hi as Pn,Ii as Ln}from"./chunk-qmpdjmmz.js";import{Oi as h}from"./chunk-ncqagb27.js";import{Zi as Tn}from"./chunk-spxb931p.js";var Wt=/^[\x21\x23-\x5b\x5d-\x7e]+$/;function Zt(n){return n==="127.0.0.1"||n==="[::1]"||n.toLowerCase()==="localhost"}function R(n,t="MCP OAuth URL"){let M=new URL(n);if(M.username||M.password)throw Error(`${t} must not contain credentials`);if(M.protocol!=="https:"&&!(M.protocol==="http:"&&Zt(M.hostname)))throw Error(`${t} requires HTTPS; HTTP is allowed only for loopback servers`);return M}var U=async(n,t)=>{R(n,"MCP OAuth request URL");let M=await fetch(n,{...t,redirect:"manual"});if(M.status>=300&&M.status<400)throw await M.body?.cancel(),Error("MCP OAuth network requests must not follow redirects");return M};function k(n){let t=n.oauth;if(!t)return;let M=t;for(let u of["clientSecret","authorizationUrl","tokenUrl","redirectUri"])if(M[u]!==void 0)throw Error(`MCP OAuth "${u}" is not supported; use standards-based discovery`);if(t.enabled!==!0)return{enabled:!1};if(n.type!=="http"&&n.type!=="sse")throw Error("MCP OAuth is supported only for HTTP and SSE transports");if(!n.url)throw Error("MCP OAuth requires an MCP server URL");if(R(n.url,"MCP OAuth server URL"),Object.keys(n.headers??{}).find((u)=>u.toLowerCase()==="authorization"))throw Error("MCP OAuth cannot be combined with a configured Authorization header");let _=t.clientId?.trim();if(_&&_.length>4096)throw Error("MCP OAuth clientId exceeds 4096 characters");let S=t.scopes?.map((u)=>u.trim());if(S){if(S.length>32)throw Error("MCP OAuth supports at most 32 scopes");if(S.some((u)=>!u||u.length>128||!Wt.test(u)))throw Error("MCP OAuth scopes contain an invalid value");if(new Set(S).size!==S.length)throw Error("MCP OAuth scopes must not contain duplicates")}let r=t.callbackPort;if(r!==void 0&&(!Number.isInteger(r)||r<1024||r>65535))throw Error("MCP OAuth callbackPort must be between 1024 and 65535");return{enabled:!0,..._?{clientId:_}:{},...S?.length?{scopes:S}:{},...r!==void 0?{callbackPort:r}:{}}}import{randomUUID as v}from"node:crypto";import MM from"node:http";import{auth as cn}from"@modelcontextprotocol/sdk/client/auth.js";import _M from"open";import{createHash as Dt,randomUUID as Jt}from"node:crypto";import{constants as O,promises as L}from"node:fs";import j from"node:path";import kt from"write-file-atomic";var An=1,Ot=1048576,jt=5000,yt=50,Ft=/^[a-f0-9]{64}$/,lt=o.Object({client_id:o.String({minLength:1,maxLength:4096})},{additionalProperties:!0}),vt=o.Object({access_token:o.String({minLength:1,maxLength:65536}),token_type:o.String({minLength:1,maxLength:64}),expires_in:o.Optional(o.Number({minimum:0})),refresh_token:o.Optional(o.String({minLength:1,maxLength:65536})),scope:o.Optional(o.String({maxLength:16384})),id_token:o.Optional(o.String({minLength:1,maxLength:262144}))},{additionalProperties:!1}),nM=o.Unsafe({type:"object",properties:{authorizationServerUrl:o.String({format:"uri"}),resourceMetadataUrl:o.Optional(o.String({format:"uri"})),resourceMetadata:o.Optional(o.Unknown()),authorizationServerMetadata:o.Optional(o.Unknown())},required:["authorizationServerUrl"],additionalProperties:!1}),sn=o.Object({serverUrl:o.String({format:"uri"}),clientId:o.Optional(o.String({minLength:1,maxLength:4096})),clientInformation:o.Optional(lt),tokens:o.Optional(vt),tokenExpiresAt:o.Optional(o.Number({minimum:0})),discoveryState:o.Optional(nM),updatedAt:o.String({format:"date-time"})},{additionalProperties:!1}),En=o.Object({version:o.Literal(An),credentials:o.Record(o.String(),sn)},{additionalProperties:!1});function H(n,t){return n instanceof Error&&"code"in n&&n.code===t}function tM(n){if(!Number.isInteger(n)||n<=0)return!1;try{return process.kill(n,0),!0}catch(t){return H(t,"EPERM")}}function y(n){return structuredClone(n)}function mn(n){if(Object.keys(n.credentials).some((t)=>!Ft.test(t)))throw Error("MCP OAuth credential store contains an invalid identity")}function q(n){let t=new URL(n);return t.hash="",t.toString()}function l(n,t,M=[]){return Dt("sha256").update(JSON.stringify({serverUrl:q(n),clientId:t?.trim()||null,scopes:[...M].sort()})).digest("hex")}class I{static locks=new Y;stateRoot;tokenFilePath;constructor(n=Tn()){this.stateRoot=j.join(n,"mcp"),this.tokenFilePath=j.join(this.stateRoot,"oauth-credentials.json")}static coordinationStatsForTests(){return this.locks.getStats()}async getCredential(n){return I.locks.runExclusive(this.tokenFilePath,async()=>{let M=(await this.readStore()).credentials[n];return M?y(M):null})}async updateCredential(n,t){return this.runMutation(async(M)=>{let e=M.credentials[n],_=await t(e?y(e):null);if(_)M.credentials[n]=F(sn,_);else delete M.credentials[n];return _?y(M.credentials[n]):null})}async deleteCredential(n){await this.updateCredential(n,()=>null)}async listCredentialIds(){return I.locks.runExclusive(this.tokenFilePath,async()=>Object.keys((await this.readStore()).credentials).sort())}async runMutation(n){return I.locks.runExclusive(this.tokenFilePath,async()=>{let t=await this.acquireStoreLock();try{let M=await this.readStore(),e=await n(M);return await this.writeStore(M),e}finally{await t()}})}async ensureStateRoot(){await L.mkdir(this.stateRoot,{recursive:!0,mode:448});let n=await L.lstat(this.stateRoot);if(!n.isDirectory()||n.isSymbolicLink())throw Error("MCP OAuth credential root must be a regular directory");if(process.getuid&&n.uid!==process.getuid())throw Error("MCP OAuth credential root must be owned by the current user");if((n.mode&63)!==0)throw Error("MCP OAuth credential root permissions must not allow group access")}async readStore(){try{let n=await L.lstat(this.tokenFilePath);if(!n.isFile()||n.isSymbolicLink())throw Error("MCP OAuth credential store must be a regular file");if(process.getuid&&n.uid!==process.getuid())throw Error("MCP OAuth credential store must be owned by the current user");if((n.mode&511)!==384)throw Error("MCP OAuth credential store permissions must be 0600");if(n.size>Ot)throw Error("MCP OAuth credential store exceeds the 1 MiB limit");let t=JSON.parse(await L.readFile(this.tokenFilePath,"utf8")),M=on(En,t);if(!M.success)throw Error("MCP OAuth credential store has an invalid schema");return mn(M.data),M.data}catch(n){if(H(n,"ENOENT"))return{version:An,credentials:{}};throw n}}async writeStore(n){await this.ensureStateRoot();let t=F(En,n);mn(t),await kt(this.tokenFilePath,`${JSON.stringify(t,null,2)}
-`,{mode:384,encoding:"utf8"}),await L.chmod(this.tokenFilePath,384)}async acquireStoreLock(){await this.ensureStateRoot();let n=j.join(this.stateRoot,".oauth-credentials.lock"),t=Jt(),M=Date.now()+jt;while(Date.now()<M)try{let e=await L.open(n,O.O_CREAT|O.O_EXCL|O.O_WRONLY,384);return await e.writeFile(`${JSON.stringify({version:1,pid:process.pid,token:t,createdAt:new Date().toISOString()})}
-`,"utf8"),await e.close(),async()=>{try{if(JSON.parse(await L.readFile(n,"utf8")).token===t)await L.unlink(n)}catch(_){if(!H(_,"ENOENT"))throw _}}}catch(e){if(!H(e,"EEXIST"))throw e;await this.removeDeadLock(n),await new Promise((_)=>setTimeout(_,yt))}throw Error("MCP OAuth credential store is busy; retry the operation")}async removeDeadLock(n){let t=await L.lstat(n);if(!t.isFile()||t.isSymbolicLink())throw Error("MCP OAuth credential lock must be a regular file");if(process.getuid&&t.uid!==process.getuid()||(t.mode&511)!==384)throw Error("MCP OAuth credential lock ownership or permissions are invalid");let M=JSON.parse(await L.readFile(n,"utf8"));if(typeof M.pid!=="number"||!Number.isInteger(M.pid)||M.pid<=0)throw Error("MCP OAuth credential lock owner is invalid");if(!tM(M.pid))await L.unlink(n)}}var bn="127.0.0.1",wn=7777,xn="/oauth/callback",eM=300000;class nn extends Error{constructor(n){super(`MCP server "${n}" requires OAuth authorization; run "blade mcp login ${n}" or use the Web MCP panel`);this.name="McpOAuthAuthorizationRequiredError"}}class an extends Error{constructor(n){super(`MCP OAuth credentials are unavailable in this runtime for server "${n}"`);this.name="McpOAuthUnavailableError"}}function rM(n){let t=n?"Authentication complete":"Authentication failed";return`<!doctype html>
-<html lang="en">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width,initial-scale=1">
-  <title>${t}</title>
-</head>
-<body>
-  <main>
-    <h1>${t}</h1>
-    <p>${n?"You can close this window and return to Blade.":"Return to Blade and retry the OAuth login."}</p>
-  </main>
-</body>
-</html>`}function C(n,t,M){n.writeHead(t,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'","X-Content-Type-Options":"nosniff","Referrer-Policy":"no-referrer"}),n.end(rM(M))}class ${serverName;config;static activeFlowIdentity;tokenStorage;serverUrl;identity;callbackUrl;openAuthorizationUrl;codeVerifierValue;activeFlow;lastError;constructor(n,t,M,e={}){this.serverName=n;this.config=M;this.serverUrl=q(t),this.identity=l(this.serverUrl,M.clientId,M.scopes),this.tokenStorage=e.tokenStorage??new I;let _=M.callbackPort??wn;this.callbackUrl=`http://${bn}:${_}${xn}`,this.openAuthorizationUrl=e.openAuthorizationUrl??(async(S)=>{await _M(S,{wait:!1})})}get redirectUrl(){return this.callbackUrl}get clientMetadata(){return{redirect_uris:[this.callbackUrl],token_endpoint_auth_method:"none",grant_types:["authorization_code","refresh_token"],response_types:["code"],client_name:`${Ln()} ${Pn()}`,...this.config.scopes?.length?{scope:this.config.scopes.join(" ")}:{}}}async state(){return this.activeFlow?.state??v()}async clientInformation(){if(this.config.clientId)return{client_id:this.config.clientId};return(await this.readCredential())?.clientInformation}async saveClientInformation(n){await this.updateCredential((t)=>({...this.baseCredential(t),clientInformation:n}))}async tokens(){let n=await this.readCredential();if(!n?.tokens)return;if(n.tokenExpiresAt!==void 0&&n.tokenExpiresAt<=Date.now()&&!n.tokens.refresh_token)return;return structuredClone(n.tokens)}async saveTokens(n){let t=n.expires_in===void 0?void 0:Date.now()+n.expires_in*1000;await this.updateCredential((M)=>({...this.baseCredential(M),tokens:structuredClone(n),...t===void 0?{}:{tokenExpiresAt:t}})),this.lastError=void 0}async redirectToAuthorization(n){let t=this.activeFlow;if(!t)throw new nn(this.serverName);t.authorizationUrl=R(n,"MCP OAuth authorization URL").toString()}async saveCodeVerifier(n){this.codeVerifierValue=n}async codeVerifier(){if(!this.codeVerifierValue)throw Error("MCP OAuth PKCE verifier is unavailable");return this.codeVerifierValue}async saveDiscoveryState(n){await this.updateCredential((t)=>({...this.baseCredential(t),discoveryState:structuredClone(n)}))}async discoveryState(){let n=(await this.readCredential())?.discoveryState;return n?structuredClone(n):void 0}async invalidateCredentials(n){if(n==="verifier"){this.codeVerifierValue=void 0;return}if(n==="all"){await this.tokenStorage.deleteCredential(this.identity),this.codeVerifierValue=void 0;return}await this.updateCredential((t)=>{if(!t)return null;let M={...t};if(n==="client")delete M.clientInformation,delete M.tokens,delete M.tokenExpiresAt;else if(n==="tokens")delete M.tokens,delete M.tokenExpiresAt;else if(n==="discovery")delete M.discoveryState;return{...M,updatedAt:new Date().toISOString()}})}async getStatus(){if(this.activeFlow)return"authorizing";if(this.lastError)return"error";return await this.hasUsableCredentials()?"authenticated":"unauthenticated"}async hasUsableCredentials(){let n=await this.readCredential();if(!n?.tokens?.access_token)return!1;if(n.tokenExpiresAt===void 0||n.tokenExpiresAt>Date.now())return!0;return Boolean(n.tokens.refresh_token)}async beginAuthorization(){if(this.activeFlow)return this.toHandle(this.activeFlow);if(await this.hasUsableCredentials())throw Error(`MCP server "${this.serverName}" already has OAuth credentials`);if($.activeFlowIdentity)throw Error("Another MCP OAuth authorization is already in progress");$.activeFlowIdentity=this.identity,this.lastError=void 0,this.codeVerifierValue=void 0;try{let n=await this.createFlow();if(this.activeFlow=n,await cn(this,{serverUrl:this.serverUrl,fetchFn:U})!=="REDIRECT"||!n.authorizationUrl)throw Error("MCP OAuth server did not start an authorization redirect");return this.toHandle(n)}catch(n){let t=n instanceof Error?n:Error(String(n));throw await this.failActiveFlow(t),t}}async openAuthorization(){let n=await this.beginAuthorization();return await this.openAuthorizationUrl(n.authorizationUrl),n}async logout(){if(this.activeFlow)await this.failActiveFlow(Error("MCP OAuth authorization cancelled"));await this.tokenStorage.deleteCredential(this.identity),this.codeVerifierValue=void 0,this.lastError=void 0}async dispose(){if(this.activeFlow)await this.failActiveFlow(Error("MCP OAuth authorization cancelled"))}async createFlow(){let n,t,M=new Promise((r,u)=>{n=r,t=u});M.catch(()=>{return});let e=v(),_=MM.createServer((r,u)=>{this.handleCallback(r,u)});_.on("clientError",(r,u)=>{u.end(`HTTP/1.1 400 Bad Request\r
-Connection: close\r
-\r
-`)}),await new Promise((r,u)=>{let E=(T)=>u(T);_.once("error",E),_.listen(this.config.callbackPort??wn,bn,()=>{_.off("error",E),r()})});let S={flowId:v(),state:e,callbackUrl:this.callbackUrl,server:_,timeout:setTimeout(()=>{this.failActiveFlow(Error("MCP OAuth authorization timed out"))},eM),completion:M,resolve:n,reject:t,settled:!1};return S.timeout.unref(),S}async handleCallback(n,t){let M=this.activeFlow;if(!M){C(t,410,!1);return}try{if(n.method!=="GET"){t.setHeader("Allow","GET"),C(t,405,!1);return}let e=new URL(n.url??"/",M.callbackUrl);if(e.pathname!==xn){C(t,404,!1);return}let _=e.searchParams.get("state"),S=e.searchParams.get("code");if(e.searchParams.get("error"))throw Error("MCP OAuth authorization was denied");if(!_||_!==M.state)throw Error("MCP OAuth state mismatch");if(!S)throw Error("MCP OAuth callback is missing the authorization code");if(await cn(this,{serverUrl:this.serverUrl,authorizationCode:S,fetchFn:U})!=="AUTHORIZED")throw Error("MCP OAuth token exchange did not complete");C(t,200,!0),await this.completeActiveFlow()}catch(e){C(t,400,!1),await this.failActiveFlow(e instanceof Error?e:Error(String(e)))}}async completeActiveFlow(){let n=this.activeFlow;if(!n||n.settled)return;n.settled=!0,clearTimeout(n.timeout),await new Promise((t)=>n.server.close(()=>t())),this.activeFlow=void 0,$.activeFlowIdentity=void 0,this.codeVerifierValue=void 0,this.lastError=void 0,n.resolve()}async failActiveFlow(n){let t=this.activeFlow;if(this.lastError=n,this.codeVerifierValue=void 0,$.activeFlowIdentity=void 0,!t||t.settled){this.activeFlow=void 0;return}t.settled=!0,clearTimeout(t.timeout),await new Promise((M)=>t.server.close(()=>M())),this.activeFlow=void 0,t.reject(n)}toHandle(n){if(!n.authorizationUrl)throw Error("MCP OAuth authorization URL is unavailable");return{flowId:n.flowId,authorizationUrl:n.authorizationUrl,callbackUrl:n.callbackUrl,completion:n.completion}}readCredential(){return this.tokenStorage.getCredential(this.identity)}updateCredential(n){return this.tokenStorage.updateCredential(this.identity,n)}baseCredential(n){return{...n??{},serverUrl:this.serverUrl,...this.config.clientId?{clientId:this.config.clientId}:{},updatedAt:new Date().toISOString()}}}import{promises as V}from"node:fs";import hn from"node:os";import f from"node:path";import{merge as SM}from"lodash-es";import uM from"write-file-atomic";var dn=fn("Service"),X={models:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},modelProviders:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},currentModelId:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},temperature:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},maxOutputTokens:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},timeout:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},bashForegroundHandoffMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerForegroundRecoveryMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerCircuitBreakerOpenMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerGlobalConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerOwnerConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestAdmissionMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestPendingBytes:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},agentTeamsEnabled:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},codeTheme:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},uiTheme:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},language:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},debug:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},fontSize:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},autoSaveSessions:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifyBuild:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifyErrors:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifySounds:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},privacyTelemetry:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},privacyCrash:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},communicationStyle:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},permissionMode:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},permissions:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},hooks:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},enabledPlugins:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},pluginSourcePolicy:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},env:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},disableAllHooks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxTurns:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxConcurrentTasks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxQueuedTasks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxQueuedTaskBytes:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxResidentSessionRuntimes:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},sessionRuntimeIdleMs:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},mcpServers:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},lspServers:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},stream:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},topP:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},topK:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},mcpEnabled:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},systemPrompt:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},appendSystemPrompt:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},initialMessage:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},resumeSessionId:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},forkSession:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},allowedTools:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},disallowedTools:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},mcpConfigPaths:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},strictMcpConfig:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},addDirs:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},outputFormat:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},inputFormat:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},print:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},includePartialMessages:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},replayUserMessages:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},agentsConfig:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},settingSources:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1}},o_=new Set(Object.entries(X).filter(([n,t])=>t.persistable).map(([n])=>n)),A_=new Set(Object.entries(X).filter(([n,t])=>!t.persistable).map(([n])=>n));class a{static instance=null;pendingUpdates=new Map;timers=new Map;fileLocks=new Y;lastSaveError=null;debounceDelay=300;constructor(){}static getInstance(){if(!a.instance)a.instance=new a;return a.instance}static resetInstance(){if(a.instance)for(let n of a.instance.timers.values())clearTimeout(n);a.instance=null}coordinationStatsForTests(){return this.fileLocks.getStats()}async save(n,t={}){this.validatePersistableFields(n);let M=this.groupUpdatesByTarget(n,t.scope,t.projectDir);if(t.immediate)await Promise.all(Array.from(M.entries()).map(([e,_])=>this.flushTarget(e,_)));else for(let[e,_]of M)this.scheduleSave(e,_)}async flush(){for(let t of this.timers.values())clearTimeout(t);this.timers.clear();let n=Array.from(this.pendingUpdates.entries()).map(([t,M])=>this.flushTarget(t,M));this.pendingUpdates.clear(),await Promise.all(n)}getLastSaveError(){return this.lastSaveError}clearLastSaveError(){this.lastSaveError=null}async appendPermissionRule(n,t={}){await this.appendPermissionRuleForDecision(n,"allow",t)}async appendPermissionDenyRule(n,t={}){await this.appendPermissionRuleForDecision(n,"deny",t)}async appendPermissionRuleForDecision(n,t,M){let e=M.scope??"local",_=this.resolveFilePath("settings",e,M.projectDir);await this.flushTargetWithModifier(_,(S)=>{let r=S.permissions??{allow:[],ask:[],deny:[]},u={allow:t==="allow"?this.dedupeArray([...r.allow||[],n]):r.allow||[],ask:r.ask||[],deny:t==="deny"?this.dedupeArray([...r.deny||[],n]):r.deny||[]};return{...S,permissions:u}})}async appendLocalPermissionRule(n,t={}){await this.appendPermissionRule(n,{...t,scope:"local"})}async appendLocalPermissionDenyRule(n,t={}){await this.appendPermissionDenyRule(n,{...t,scope:"local"})}async removePluginSetting(n,t={}){let M=t.scope??"local",e=this.resolveFilePath("settings",M,t.projectDir);await this.flushTargetWithModifier(e,(_)=>{let S={..._.enabledPlugins??{}};delete S[n];let r={..._};if(Object.keys(S).length>0)r.enabledPlugins=S;else delete r.enabledPlugins;return r})}validatePersistableFields(n){for(let t of Object.keys(n)){let M=X[t];if(!M)throw Error(`Unknown config field: ${t}`);if(!M.persistable)throw Error(`Field "${t}" is non-persistable and cannot be saved to config files. Non-persistable fields are runtime-only and only valid for the current session.`)}}groupUpdatesByTarget(n,t,M){let e=new Map;for(let[_,S]of Object.entries(n)){let r=X[_];if(!r)continue;let u=t??r.defaultScope,E=this.resolveFilePath(r.target,u,M);if(!e.has(E))e.set(E,{});e.get(E)[_]=S}return e}resolveFilePath(n,t,M){let e=M??x();if(n==="config")return t==="global"?f.join(hn.homedir(),".blade","config.json"):f.join(e,".blade","config.json");switch(t){case"local":return f.join(e,".blade","settings.local.json");case"project":return f.join(e,".blade","settings.json");case"global":return f.join(hn.homedir(),".blade","settings.json");default:return f.join(e,".blade","settings.local.json")}}scheduleSave(n,t){let M=this.pendingUpdates.get(n)??{},e=this.mergePendingUpdates(M,t);this.pendingUpdates.set(n,e);let _=this.timers.get(n);if(_)clearTimeout(_);let S=setTimeout(async()=>{let r=this.pendingUpdates.get(n);if(r){this.pendingUpdates.delete(n),this.timers.delete(n);try{await this.flushTarget(n,r),this.lastSaveError=null}catch(u){let E=u instanceof Error?u:Error(String(u));this.lastSaveError=E,dn.error(`Failed to save config to ${n}:`,E.message),dn.error("Stack trace:",E.stack)}}},this.debounceDelay);this.timers.set(n,S)}mergePendingUpdates(n,t){let M={...n};for(let[e,_]of Object.entries(t)){let S=X[e];if(!S){M[e]=_;continue}switch(S.mergeStrategy){case"replace":M[e]=_;break;case"append-dedupe":this.applyAppendDedupe(M,e,_);break;case"deep-merge":this.applyDeepMerge(M,e,_);break}}return M}async flushTarget(n,t){await this.fileLocks.runExclusive(n,async()=>{await this.performWrite(n,t)})}async flushTargetWithModifier(n,t){await this.fileLocks.runExclusive(n,async()=>{await V.mkdir(f.dirname(n),{recursive:!0,mode:493});let M={};try{let _=await V.readFile(n,"utf-8");M=JSON.parse(_)}catch{M={}}let e=t(M);await this.atomicWrite(n,e)})}async performWrite(n,t){await V.mkdir(f.dirname(n),{recursive:!0,mode:493});let M={};try{let _=await V.readFile(n,"utf-8");M=JSON.parse(_)}catch{M={}}let e={...M};if(typeof e.theme==="string"&&e.codeTheme===void 0)e.codeTheme=e.theme;delete e.theme;for(let[_,S]of Object.entries(t)){let r=X[_];if(!r){e[_]=S;continue}switch(r.mergeStrategy){case"replace":e[_]=S;break;case"append-dedupe":this.applyAppendDedupe(e,_,S);break;case"deep-merge":this.applyDeepMerge(e,_,S);break}}await this.atomicWrite(n,e)}applyAppendDedupe(n,t,M){if(t==="permissions"&&typeof M==="object"&&M!==null){let e=n[t]??{allow:[],ask:[],deny:[]},_=M;n[t]={allow:this.dedupeArray([...e.allow||[],..._.allow||[]]),ask:this.dedupeArray([...e.ask||[],..._.ask||[]]),deny:this.dedupeArray([...e.deny||[],..._.deny||[]])}}else if(Array.isArray(M)){let e=Array.isArray(n[t])?n[t]:[];n[t]=this.dedupeArray([...e,...M])}else n[t]=M}applyDeepMerge(n,t,M){if(typeof M==="object"&&M!==null&&!Array.isArray(M)){let e=typeof n[t]==="object"&&n[t]!==null?n[t]:{};n[t]=SM({},e,M)}else n[t]=M}dedupeArray(n){return Array.from(new Set(n))}async atomicWrite(n,t){await uM(n,JSON.stringify(t,null,2),{mode:384,encoding:"utf-8"})}}function s_(){return a.getInstance()}var In=15000,Nn=1000,$n=300000;function tn(n){return n===0||typeof n==="number"&&Number.isSafeInteger(n)&&n>=1000&&n<=300000}function b_(n,t=15000){return tn(n)?n:t}var Xn=1,pn=32,gn=256,Rn=30000,Cn=300000,zn=3600000,x_=30000;function Bn(n){return Number.isSafeInteger(n)&&n>=1&&n<=256}function Kn(n){return Number.isSafeInteger(n)&&n>=30000&&n<=3600000}var Un=1,Hn=64,Yn=1,qn=1e4,Vn=67108864,Qn=65536,Gn=134217728;function Wn(n){return Number.isInteger(n)&&n>=1&&n<=64}function Zn(n){return Number.isInteger(n)&&n>=1&&n<=1e4}function Dn(n){return Number.isSafeInteger(n)&&n>=65536&&n<=134217728}var A={currentModelId:"",models:[],modelProviders:{},temperature:0,maxOutputTokens:void 0,stream:!0,topP:0.9,topK:50,timeout:180000,bashForegroundHandoffMs:In,providerForegroundRecoveryMs:Jn,providerCircuitBreakerOpenMs:kn,providerRequestAdmissionMs:On,agentTeamsEnabled:!1,providerRequestPendingBytes:jn,codeTheme:"dracula",uiTheme:"system",language:"zh-CN",fontSize:14,autoSaveSessions:!0,notifyBuild:!0,notifyErrors:!1,notifySounds:!1,privacyTelemetry:!1,privacyCrash:!0,debug:!1,mcpEnabled:!1,mcpServers:{},lspServers:{},permissions:{allow:["Bash(pwd)","Bash(which *)","Bash(whoami)","Bash(hostname)","Bash(uname *)","Bash(date)","Bash(echo *)","Bash(ls *)","Bash(tree *)","Bash(git status)","Bash(git status -*)","Bash(git log *)","Bash(git diff *)","Bash(git show *)","Bash(git branch -* *)","Bash(git branch)","Bash(git tag -l *)","Bash(git tag --list *)","Bash(git stash list *)","Bash(git stash show *)","Bash(git rev-parse *)","Bash(git describe *)","Bash(git blame *)","Bash(git ls-files *)","Bash(git config --get *)","Bash(git config --list *)","Bash(git shortlog *)","Bash(git merge-base *)","Bash(git cat-file *)","Bash(git for-each-ref *)","Bash(git grep *)","Bash(git worktree list *)","Bash(git reflog show *)","Bash(git reflog)","Bash(git rev-list *)","Bash(git ls-remote *)","Bash(git remote -v)","Bash(git remote --verbose)","Bash(git remote)","Bash(gh pr view *)","Bash(gh pr list *)","Bash(gh pr diff *)","Bash(gh pr checks *)","Bash(gh pr status *)","Bash(gh issue view *)","Bash(gh issue list *)","Bash(gh issue status *)","Bash(gh run list *)","Bash(gh run view *)","Bash(gh repo view *)","Bash(gh auth status)","Bash(npm list *)","Bash(bun pm ls *)","Bash(npm view *)","Bash(npm outdated *)","Bash(pnpm list *)","Bash(yarn list *)","Bash(pip list *)","Bash(pip show *)"],ask:["Bash(curl *)","Bash(wget *)","Bash(aria2c *)","Bash(axel *)","Bash(rm -rf *)","Bash(rm -r *)","Bash(rm --recursive *)","Bash(nc *)","Bash(netcat *)","Bash(telnet *)","Bash(ncat *)"],deny:["Read(./.env)","Read(./.env.*)","Bash(rm -rf /)","Bash(rm -rf /*)","Bash(sudo *)","Bash(chmod 777 *)","Bash(bash *)","Bash(sh *)","Bash(zsh *)","Bash(fish *)","Bash(dash *)","Bash(eval *)","Bash(source *)","Bash(mkfs *)","Bash(fdisk *)","Bash(dd *)","Bash(format *)","Bash(parted *)","Bash(open http*)","Bash(open https*)","Bash(xdg-open http*)","Bash(xdg-open https*)"]},permissionMode:"default",hooks:{enabled:!1,defaultTimeout:60,timeoutBehavior:"ignore",failureBehavior:"ignore",maxConcurrentHooks:5,PreToolUse:[],PostToolUse:[],PostToolUseFailure:[],PermissionRequest:[],Elicitation:[],ElicitationResult:[],UserPromptSubmit:[],SessionStart:[],SessionEnd:[],Stop:[],SubagentStop:[],Notification:[],Compaction:[]},enabledPlugins:{},pluginSourcePolicy:{restrictToAllowedSources:!1,requireGitCommitSha:!1,allowedGitHosts:[],allowedMarketplaces:[],allowedLocalRoots:[]},env:{},disableAllHooks:!1,maxTurns:-1,maxConcurrentTasks:3,maxQueuedTasks:100,maxQueuedTaskBytes:Vn,maxResidentSessionRuntimes:pn,sessionRuntimeIdleMs:Cn};var yn=/^[A-Za-z0-9_-]{21}$/;function Fn(n){return n.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^[._-]+|[._-]+$/g,"").slice(0,80)||"model"}function mM(n,t){let M=new Set(t.map((r)=>r.id)),e=Fn(n.model);if(!M.has(e))return e;let _=`${Fn(n.provider)}-${e}`.slice(0,120);if(!M.has(_))return _;let S=2;while(M.has(`${_}-${S}`))S++;return`${_}-${S}`}function ln(n,t){let M=n.filter((S)=>!yn.test(S.id)).map((S)=>({id:S.id})),e=new Map;return{models:n.map((S)=>{if(!yn.test(S.id))return{...S};let{id:r,...u}=S,E=mM(u,M);return M.push({id:E}),e.set(r,E),{...S,id:E}}),currentModelId:e.get(t)??t,changed:e.size>0}}import{promises as Nt}from"fs";import{merge as K}from"lodash-es";import b from"os";import m from"path";function nt(n){let t=vn(n.timeout??300000,"MCP timeout"),M=vn(n.idleTimeout??Math.min(60000,t),"MCP idleTimeout");if(M>t)throw Error("MCP idleTimeout must not exceed timeout");return{totalTimeoutMs:t,idleTimeoutMs:M,maxProgressEvents:128}}function i_(n,t,M){if(t.count>=M.maxProgressEvents)return;if(!Number.isFinite(n.progress)||n.progress<0)return;if(n.total!==void 0&&(!Number.isFinite(n.total)||n.total<=0))return;if(t.lastProgress!==void 0&&n.progress<t.lastProgress)return;t.count++,t.lastProgress=n.progress;let e=n.message?.replace(/\0/g,"").trim().slice(0,1000);return{progress:n.progress,...n.total!==void 0?{total:n.total}:{},message:e||TM(n.progress,n.total)}}function vn(n,t){if(!Number.isSafeInteger(n)||n<1000||n>1800000)throw Error(`${t} must be an integer between 1000 and 1800000 milliseconds`);return n}function TM(n,t){if(t!==void 0)return`MCP progress ${Math.max(0,Math.min(100,n/t*100)).toFixed(0)}%`;return`MCP progress ${n}`}import{createHash as oM}from"node:crypto";var Q=["debug","info","notice","warning","error","critical","alert","emergency"],z_=64,B_=64,K_=256,AM=8192,et=16384,sM=256,cM=6,bM=128,tt=64,Mt=64,wM=128,xM=/authorization|api[-_]?key|cookie|credential|password|secret|token/i;function rt(n){let t=n.logging;if(t!==void 0&&(t===null||typeof t!=="object"||Array.isArray(t)))throw Error("MCP logging configuration must be an object");let M=t?.enabled??!0;if(typeof M!=="boolean")throw Error("MCP logging enabled must be a boolean");let e=t?.level??"warning";if(!PM(e))throw Error(`MCP logging level must be one of: ${Q.join(", ")}`);return{enabled:M,level:e}}function PM(n){return typeof n==="string"&&Q.includes(n)}function U_(n,t){return Q.indexOf(n)>=Q.indexOf(t)}function LM(n,t={}){let M=aM(n.data),e=typeof M.value==="string"?M.value:JSON.stringify(M.value),_=_t(e,et),S=_.value,r=Buffer.byteLength(S),u=oM("sha256").update(S).digest("hex"),E=t.exposeDetails!==!1,T=E?_t(S,AM):{value:`[MCP log details omitted; sha256=${u}]`,truncated:!1},s=E&&n.logger?G(_n(n.logger),sM):void 0;return{level:n.level,...s?{logger:s}:{},message:T.value||"[empty MCP log message]",projectedBytes:r,dataSha256:u,truncated:M.truncated||_.truncated||T.truncated,detailsOmitted:!E,timestamp:t.now??Date.now()}}function H_(n,t={}){return{...LM({level:"warning",logger:"blade.mcp.logging",data:`MCP log rate exceeded; dropped at least ${Math.max(1,n)} message(s)`},t),synthetic:!0}}function aM(n){let t={nodes:0,remainingStringBytes:et,truncated:!1,seen:new WeakSet};return{value:Mn(n,0,t),truncated:t.truncated}}function Mn(n,t,M){if(M.nodes++,M.nodes>bM)return M.truncated=!0,"[node limit reached]";if(n===null||typeof n==="boolean")return n;if(typeof n==="number")return Number.isFinite(n)?n:String(n);if(typeof n==="bigint")return n.toString();if(typeof n==="string"){let e=_n(n),_=Math.max(0,M.remainingStringBytes),S=G(e,_),r=Buffer.byteLength(S);if(M.remainingStringBytes-=r,r<Buffer.byteLength(e))M.truncated=!0;return S}if(typeof n>"u")return"[undefined]";if(typeof n==="symbol"||typeof n==="function")return`[${typeof n}]`;if(t>=cM)return M.truncated=!0,"[depth limit reached]";if(M.seen.has(n))return M.truncated=!0,"[circular]";M.seen.add(n);try{if(Array.isArray(n)){if(n.length>tt)M.truncated=!0;return n.slice(0,tt).map((S)=>Mn(S,t+1,M))}let e=Object.create(null),_=Object.entries(n);if(_.length>Mt)M.truncated=!0;for(let[S,r]of _.slice(0,Mt)){let u=G(_n(S),wM)||"[empty-key]";if(S==="_meta"||xM.test(S))e[u]="[redacted]";else e[u]=Mn(r,t+1,M)}return e}finally{M.seen.delete(n)}}function _n(n){return[...n.replace(/\bhttps?:\/\/[^\s"'`]+/gi,"[redacted-url]").replace(/\bBearer\s+\S+/gi,"Bearer [redacted]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[redacted]")].filter((M)=>{let e=M.charCodeAt(0);return(e===9||e===10||e===13||e>=32)&&e!==127}).join("")}function G(n,t){if(t<=0)return"";if(Buffer.byteLength(n)<=t)return n;let M=Buffer.from(n).subarray(0,t).toString("utf8");while(Buffer.byteLength(M)>t)M=M.slice(0,-1);return M}function _t(n,t){if(Buffer.byteLength(n)<=t)return{value:n,truncated:!1};let M=`
-...[MCP log truncated]`;return{value:G(n,t-Buffer.byteLength(M))+M,truncated:!0}}var St=1024,hM=4096,ut=2,dM=8,Et=65536,fM=1048576,mt=50,Tt=16000,ot=4,IM=100,At=1048576,NM=new Set(["image/jpeg","image/png","image/gif","image/webp"]);function wt(n){if(!n)return{enabled:!1,maxTokens:St,maxRequestsPerToolCall:ut,maxInputBytes:Et};if(typeof n.enabled!=="boolean")throw Error("MCP sampling.enabled must be a boolean");return{enabled:n.enabled,maxTokens:W(n.maxTokens??St,1,hM,"MCP sampling.maxTokens"),maxRequestsPerToolCall:W(n.maxRequestsPerToolCall??ut,1,dM,"MCP sampling.maxRequestsPerToolCall"),maxInputBytes:W(n.maxInputBytes??Et,1,fM,"MCP sampling.maxInputBytes")}}function V_(n,t){if(!t.enabled)throw Error("MCP sampling is disabled");if(n.task)throw Error("Task-based MCP sampling is not supported");if(n.tools?.length)throw Error("MCP sampling tools were not negotiated");if(n.includeContext&&n.includeContext!=="none")throw Error("MCP sampling server context was not negotiated");if(n.messages.length===0||n.messages.length>mt)throw Error(`MCP sampling messages must contain 1-${mt} entries`);if(n.systemPrompt!==void 0&&n.systemPrompt.length>Tt)throw Error(`MCP sampling system prompt exceeds ${Tt} characters`);if(n.temperature!==void 0&&(!Number.isFinite(n.temperature)||n.temperature<0||n.temperature>2))throw Error("MCP sampling temperature must be between 0 and 2");let M=n.stopSequences??[];if(M.length>ot||M.some((T)=>!T||T.length>IM||T.includes("\x00")))throw Error(`MCP sampling stop sequences must contain at most ${ot} non-empty bounded values`);let e=[],_=0,S=0,r=0,u=[];if(n.systemPrompt)_+=Buffer.byteLength(n.systemPrompt,"utf8"),e.push({role:"system",content:n.systemPrompt}),u.push(`System: ${st(n.systemPrompt)}`);for(let T of n.messages){let s=Array.isArray(T.content)?T.content:[T.content],P=[],w=[];for(let c of s){if(c.type==="text"){_+=Buffer.byteLength(c.text,"utf8"),P.push({type:"text",text:c.text}),w.push(st(c.text));continue}if(c.type==="image"){if(T.role!=="user")throw Error("MCP sampling images are only supported in user messages");if(!NM.has(c.mimeType))throw Error(`Unsupported MCP sampling image type: ${c.mimeType}`);let i=$M(c.data);S+=i,r++,P.push({type:"image_url",image_url:{url:`data:${c.mimeType};base64,${c.data}`}}),w.push(`[${c.mimeType} image, ${i} bytes]`);continue}throw Error(`Unsupported MCP sampling content type: ${c.type}`)}if(P.length===0)throw Error("MCP sampling message has no supported content");e.push({role:T.role,content:P.length===1&&P[0]?.type==="text"?P[0].text:P}),u.push(`${T.role==="user"?"User":"Assistant"}: ${w.join(" ")}`)}if(_+S>t.maxInputBytes)throw Error(`MCP sampling input exceeds ${t.maxInputBytes} bytes`);if(r>ct||S>bt)throw Error("MCP sampling image input exceeds the shared attachment budget");let E=W(n.maxTokens,1,Number.MAX_SAFE_INTEGER,"MCP sampling maxTokens");return{messages:e,maxTokens:Math.min(E,t.maxTokens),...n.temperature!==void 0?{temperature:n.temperature}:{},stopSequences:[...M],preview:u.join(`
-`).slice(0,8000)}}function Q_(n,t,M){if(n.toolCalls?.length)throw Error("Model returned tools for basic MCP sampling");let e=n.content,_=n.finishReason==="length"||n.finishReason==="max_tokens"?"maxTokens":"endTurn",S=-1;for(let r of M.stopSequences){let u=e.indexOf(r);if(u>=0&&(S===-1||u<S))S=u}if(S>=0)e=e.slice(0,S),_="stopSequence";if(Buffer.byteLength(e,"utf8")>At)throw Error(`MCP sampling response exceeds ${At} bytes`);return{model:t,role:"assistant",content:{type:"text",text:e},stopReason:_}}function W(n,t,M,e){if(!Number.isSafeInteger(n)||n<t||n>M)throw Error(`${e} must be an integer between ${t} and ${M}`);return n}function $M(n){if(!n||n.length%4!==0||!/^[A-Za-z0-9+/]*={0,2}$/.test(n))throw Error("MCP sampling image contains invalid base64 data");return Buffer.from(n,"base64").byteLength}function st(n){return n.replace(/\s+/g," ").trim().slice(0,1000)}var W_=256,Z_=1e4,D_=86400000;var XM=/[\p{Cf}\p{Co}\p{Cn}]/u;function Pt(n){if(!n)return{enabled:!1,defaultTtlMs:600000,pollIntervalMs:500,maxTasksPerSession:32,maxLifetimeMs:1800000};if(typeof n.enabled!=="boolean")throw Error("MCP tasks.enabled must be a boolean");let t=N(n.defaultTtlMs??600000,1e4,86400000,"MCP tasks.defaultTtlMs"),M=N(n.maxLifetimeMs??1800000,1e4,86400000,"MCP tasks.maxLifetimeMs");if(t>M)throw Error("MCP tasks.defaultTtlMs must not exceed tasks.maxLifetimeMs");return{enabled:n.enabled,defaultTtlMs:t,pollIntervalMs:N(n.pollIntervalMs??500,100,1e4,"MCP tasks.pollIntervalMs"),maxTasksPerSession:N(n.maxTasksPerSession??32,1,32,"MCP tasks.maxTasksPerSession"),maxLifetimeMs:M}}function J_(n,t){return N(n??t.defaultTtlMs,1e4,Math.min(86400000,t.maxLifetimeMs),"MCP task ttl")}function k_(n,t,M){let e=gM(n.taskId,"task ID",512),_=xt(n.createdAt,"createdAt"),S=xt(n.lastUpdatedAt,"lastUpdatedAt");if(Date.parse(S)<Date.parse(_))throw Error("MCP task lastUpdatedAt precedes createdAt");if(M&&(e!==M.taskId||_!==M.createdAt))throw Error("MCP task identity changed across connection generation");let r=n.ttl===null?null:N(n.ttl,0,86400000,"MCP task ttl"),u=n.pollInterval===void 0?t.pollIntervalMs:N(n.pollInterval,0,Number.MAX_SAFE_INTEGER,"MCP task pollInterval"),E=Math.min(1e4,Math.max(100,u)),T=n.statusMessage?pM(n.statusMessage,e):void 0;return{taskId:e,status:n.status,createdAt:_,lastUpdatedAt:S,ttl:r,pollIntervalMs:E,...T?{statusMessage:T}:{}}}function O_(n){return["completed","failed","cancelled"].includes(n)}function j_(n){let t=n instanceof Error?n.message:String(n);return Lt(en(t.replace(/\bhttps?:\/\/[^\s"'`]+/gi,"[redacted-url]").replace(/\bBearer\s+\S+/gi,"Bearer [redacted]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[redacted]")),1024)}function pM(n,t){return Lt(en(n.replaceAll(t,"[redacted-task-id]")),1024)}function en(n){return[...n.normalize("NFKC")].filter((t)=>{let M=t.codePointAt(0)??0;if(M===0||M>=1&&M<=8||M===11||M===12||M>=14&&M<=31||M===127)return!1;return!XM.test(t)}).join("").trim()}function xt(n,t){let M=Date.parse(n);if(!Number.isFinite(M))throw Error(`MCP task ${t} is invalid`);return new Date(M).toISOString()}function gM(n,t,M){if(!n||Buffer.byteLength(n)>M||en(n)!==n)throw Error(`MCP ${t} is invalid`);return n}function N(n,t,M,e){if(!Number.isSafeInteger(n)||n<t||n>M)throw Error(`${e} must be an integer between ${t} and ${M}`);return n}function Lt(n,t){let M=Buffer.from(n);if(M.length<=t)return n;let e=M.subarray(0,t).toString("utf8");while(Buffer.byteLength(e)>t)e=e.slice(0,-1);return e}var iM={sonnet:"claude-sonnet-4-20250514",opus:"claude-opus-4-20250514",haiku:"claude-3-5-haiku-20241022",claude:"claude-sonnet-4-20250514",gpt4o:"gpt-4o",gpt4:"gpt-4o",o1:"o1",o3:"o3","o4-mini":"o4-mini",deepseek:"deepseek-chat","deepseek-v3":"deepseek-chat","deepseek-r1":"deepseek-reasoner","deepseek-v4":"deepseek-v4-0324",gemini:"gemini-2.5-pro",flash:"gemini-2.5-flash",qwen:"qwen3-235b-a22b","qwen-max":"qwen-max","qwen-plus":"qwen-plus"};function rn(n){let t=n.toLowerCase().trim();return iM[t]??n}var RM=/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/,CM=/^\.[A-Za-z0-9_+-]{1,32}$/;function Z(n){return n!==null&&typeof n==="object"&&!Array.isArray(n)}function p(n,t,M,e,_){if(n===void 0)return _;if(!Number.isInteger(n)||Number(n)<M||Number(n)>e)throw Error(`${t} must be an integer between ${M} and ${e}`);return Number(n)}function at(n,t){if(n===void 0)return;let M;try{M=JSON.stringify(n)}catch{throw Error(`${t} must be JSON serializable`)}if(M===void 0||Buffer.byteLength(M)>262144)throw Error(`${t} exceeds the 256 KiB limit`);return structuredClone(n)}function zM(n,t){if(n===void 0)return{};if(!Z(n))throw Error(`${t} must be an object`);let M={};for(let[e,_]of Object.entries(n)){if(!e||typeof _!=="string"||_.includes("\x00"))throw Error(`${t} must contain non-empty string values`);M[e]=_}return M}function d(n){if(n===void 0)return{};if(!Z(n))throw Error("lspServers must be an object");let t=Object.entries(n);if(t.length>32)throw Error("lspServers exceeds the 32-server limit");let M={};for(let[e,_]of t){if(!RM.test(e))throw Error(`Invalid LSP server name: ${e}`);if(!Z(_))throw Error(`lspServers.${e} must be an object`);let S=new Set(["command","args","extensionToLanguage","env","initializationOptions","settings","enabled","priority","startupTimeout","shutdownTimeout","requestTimeout","diagnosticWaitTimeout","maxRestarts"]),r=Object.keys(_).filter((w)=>!S.has(w));if(r.length>0)throw Error(`Unknown LSP server field: ${e}.${r[0]}`);if(typeof _.command!=="string"||!_.command.trim()||_.command.includes("\x00")||_.command.includes(`
-`))throw Error(`lspServers.${e}.command must be a non-empty command`);if(_.args!==void 0&&!Array.isArray(_.args))throw Error(`lspServers.${e}.args must be an array`);let u=(_.args??[]).map((w,c)=>{if(typeof w!=="string"||w.includes("\x00"))throw Error(`lspServers.${e}.args.${c} must be a string`);return w});if(u.length>128)throw Error(`lspServers.${e}.args exceeds the 128-item limit`);if(!Z(_.extensionToLanguage))throw Error(`lspServers.${e}.extensionToLanguage must be an object`);let E=Object.entries(_.extensionToLanguage);if(E.length===0||E.length>64)throw Error(`lspServers.${e}.extensionToLanguage must contain 1-64 entries`);let T={};for(let[w,c]of E){let i=w.startsWith(".")?w.toLowerCase():`.${w.toLowerCase()}`;if(!CM.test(i)||typeof c!=="string"||!c.trim())throw Error(`Invalid lspServers.${e}.extensionToLanguage entry: ${w}`);T[i]=c.trim()}if(_.enabled!==void 0&&typeof _.enabled!=="boolean")throw Error(`lspServers.${e}.enabled must be a boolean`);let s=at(_.initializationOptions,`lspServers.${e}.initializationOptions`),P=at(_.settings,`lspServers.${e}.settings`);M[e]={command:_.command.trim(),...u.length>0?{args:u}:{},extensionToLanguage:T,..._.env!==void 0?{env:zM(_.env,`lspServers.${e}.env`)}:{},...s!==void 0?{initializationOptions:s}:{},...P!==void 0?{settings:P}:{},..._.enabled!==void 0?{enabled:_.enabled}:{},priority:p(_.priority,`lspServers.${e}.priority`,-1000,1000,0),startupTimeout:p(_.startupTimeout,`lspServers.${e}.startupTimeout`,100,60000,1e4),shutdownTimeout:p(_.shutdownTimeout,`lspServers.${e}.shutdownTimeout`,100,1e4,2000),requestTimeout:p(_.requestTimeout,`lspServers.${e}.requestTimeout`,100,60000,1e4),diagnosticWaitTimeout:p(_.diagnosticWaitTimeout,`lspServers.${e}.diagnosticWaitTimeout`,0,5000,750),maxRestarts:p(_.maxRestarts,`lspServers.${e}.maxRestarts`,0,10,3)}}return M}function ht(n){return Number.isInteger(n)&&(n===-1||n>=0)}function dt(){return"-1 (unlimited), 0 (disabled), or any positive integer"}import ft from"node:path";var It=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,BM=/^(?:\*\.)?[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/;function z(n){let t=[];for(let[M,e]of Object.entries(n)){if(!It.test(M))throw Error(`Invalid plugin name in enabledPlugins: ${M}`);if(typeof e!=="boolean")throw Error(`Invalid enabledPlugins value for ${M}`);t.push([M,e])}return Object.fromEntries(t)}function Sn(n,t,M){if(!Array.isArray(n))throw Error(`${t} must be an array`);return[...new Set(n.map((e,_)=>{if(typeof e!=="string"||!e.trim())throw Error(`${t}[${_}] must be a non-empty string`);return M(e.trim())}))].sort()}function B(n){let t=new Set(["restrictToAllowedSources","requireGitCommitSha","allowedGitHosts","allowedMarketplaces","allowedLocalRoots"]),M=Object.keys(n).filter((_)=>!t.has(_));if(M.length>0)throw Error(`Unknown pluginSourcePolicy fields: ${M.join(", ")}`);let e={};for(let _ of["restrictToAllowedSources","requireGitCommitSha"]){if(n[_]===void 0)continue;if(typeof n[_]!=="boolean")throw Error(`pluginSourcePolicy.${_} must be boolean`);e[_]=n[_]}if(n.allowedGitHosts!==void 0)e.allowedGitHosts=Sn(n.allowedGitHosts,"pluginSourcePolicy.allowedGitHosts",(_)=>{let S=_.toLowerCase();if(!BM.test(S))throw Error(`Invalid plugin Git host pattern: ${_}`);return S});if(n.allowedMarketplaces!==void 0)e.allowedMarketplaces=Sn(n.allowedMarketplaces,"pluginSourcePolicy.allowedMarketplaces",(_)=>{if(!It.test(_))throw Error(`Invalid allowed Marketplace name: ${_}`);return _});if(n.allowedLocalRoots!==void 0)e.allowedLocalRoots=Sn(n.allowedLocalRoots,"pluginSourcePolicy.allowedLocalRoots",(_)=>{if(!ft.isAbsolute(_))throw Error(`Plugin local allowlist root must be absolute: ${_}`);return ft.resolve(_)});return e}function D(n){let t=[];for(let[M,e]of Object.entries(n)){if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(M))throw Error(`Invalid environment variable name: ${M}`);if(typeof e!=="string"||e.includes("\x00"))throw Error(`Invalid environment variable value: ${M}`);t.push([M,e])}return Object.fromEntries(t)}class g{static instance=null;runtimePermissionOverrides;lastAdditionalSettings;constructor(){}static getInstance(){if(!g.instance)g.instance=new g;return g.instance}static resetInstance(){g.instance=null}async initialize(n){try{this.lastAdditionalSettings=n,this.runtimePermissionOverrides=n?.permissions;let M=(await h.getInstance().getStatus(x())).state==="trusted",e=await this.loadConfigFiles(M),_=await this.loadSettingsFiles(M),S={...e,..._,enabledPlugins:{...e.enabledPlugins||{},..._.enabledPlugins||{}}};if(n)S=this.mergeSettings(S,n);let r=this.normalizeConfig(S),u={...A,...r};if(u.enabledPlugins=z(u.enabledPlugins),u.lspServers=d(u.lspServers),u.pluginSourcePolicy={...A.pluginSourcePolicy,...B(u.pluginSourcePolicy)},this.resolveEnvInterpolation(u),process.env.BLADE_MODEL&&u.models?.length>0){let E=rn(process.env.BLADE_MODEL),T=u.models.find((s)=>s.id===E||s.model===E||s.id===process.env.BLADE_MODEL||s.model===process.env.BLADE_MODEL);if(T)u.currentModelId=T.id}if(process.env.BLADE_DEBUG)u.debug=process.env.BLADE_DEBUG==="1"||process.env.BLADE_DEBUG==="true"||process.env.BLADE_DEBUG;if(J().configureModelProviders(u.modelProviders,u.models),u.models.length>0)this.validateConfig(u);if(u.debug)console.log("[ConfigManager] Configuration loaded successfully");return u}catch(t){return console.error("[ConfigManager] Failed to initialize:",t),J().configureModelProviders({},[]),A}}async reload(){return this.initialize(this.lastAdditionalSettings)}async loadConfigFiles(n){let t=m.join(b.homedir(),".blade","config.json"),M=m.join(x(),".blade","config.json"),e={},_=await this.loadJsonFile(t),S=_?await this.migrateLegacyUserConfig(_):null;if(S)e={...e,...S};let r=await this.loadJsonFile(M);if(r&&n){let u={...e.mcpServers||{},...r.mcpServers||{}},E={...e.lspServers||{},...r.lspServers||{}},T={...e.modelProviders||{},...r.modelProviders||{}},s={...e.enabledPlugins||{},...r.enabledPlugins||{}};if(e={...e,...r},Object.keys(u).length>0)e.mcpServers=u;if(Object.keys(E).length>0)e.lspServers=d(E);if(Object.keys(T).length>0)e.modelProviders=T;if(Object.keys(s).length>0)e.enabledPlugins=z(s)}else if(r?.hooks)e.hooks=r.hooks;return e}async migrateLegacyUserConfig(n){let t=n,M={...n},e={};if(M.codeTheme===void 0&&typeof t.theme==="string")M.codeTheme=t.theme,e.codeTheme=t.theme;if(Array.isArray(M.models)){let _=ln(M.models,M.currentModelId??"");if(_.changed)M.models=_.models,M.currentModelId=_.currentModelId,e.models=_.models,e.currentModelId=_.currentModelId}if(delete M.theme,Object.keys(e).length>0)try{await a.getInstance().save(e,{scope:"global",immediate:!0})}catch{console.warn("[ConfigManager] Could not persist legacy config migration")}return M}async loadSettingsFiles(n){let t=m.join(b.homedir(),".blade","settings.json"),M=m.join(x(),".blade","settings.json"),e=m.join(x(),".blade","settings.local.json"),_={},S=await this.loadJsonFile(t);if(S)_=this.mergeSettings(_,S);let r=await this.loadJsonFile(M);if(r&&n)_=this.mergeSettings(_,r);else if(r?.hooks)_=this.mergeSettings(_,{hooks:r.hooks});let u=await this.loadJsonFile(e);if(u&&n)_=this.mergeSettings(_,u);else if(u?.hooks)_=this.mergeSettings(_,{hooks:u.hooks});return _}async loadWorkspacePermissions(n,t){let M={allow:[...t.allow],ask:[...t.ask],deny:[...t.deny]};if(m.resolve(n)!==m.resolve(x())){let _=await this.loadWorkspacePermissionOverrides(x(),{includeUntrusted:!0}),S=await this.loadJsonFile(m.join(b.homedir(),".blade","settings.json")),r={allow:Array.from(new Set([...A.permissions.allow,...S?.permissions?.allow||[],...this.runtimePermissionOverrides?.allow||[]])),ask:Array.from(new Set([...A.permissions.ask,...S?.permissions?.ask||[],...this.runtimePermissionOverrides?.ask||[]])),deny:Array.from(new Set([...A.permissions.deny,...S?.permissions?.deny||[],...this.runtimePermissionOverrides?.deny||[]]))};for(let u of["allow","ask","deny"]){let E=new Set(_[u].filter((T)=>!r[u].includes(T)));M[u]=M[u].filter((T)=>!E.has(T))}}let e=await this.loadWorkspacePermissionOverrides(n);for(let _ of["allow","ask","deny"])M[_]=Array.from(new Set([...M[_],...e[_]]));return M}async loadWorkspaceMcpServers(n,t){if(m.resolve(n)===m.resolve(x()))return{...t};let M=await h.getInstance().getStatus(n),e=M.state==="trusted",_=M.projectPath,S={},r=async(E)=>{let T=await this.loadJsonFile(E);if(T?.mcpServers)S={...S,...T.mcpServers}};if(await r(m.join(b.homedir(),".blade","config.json")),await r(m.join(b.homedir(),".blade","settings.json")),e)await r(m.join(_,".blade","config.json")),await r(m.join(_,".blade","settings.json")),await r(m.join(_,".blade","settings.local.json"));if(this.lastAdditionalSettings?.mcpServers)S={...S,...this.lastAdditionalSettings.mcpServers};let u={mcpServers:S};return this.resolveEnvInterpolation(u),u.mcpServers}async loadWorkspaceLspServers(n,t){if(m.resolve(n)===m.resolve(x()))return d(t);let M=await h.getInstance().getStatus(n),e={},_=async(r)=>{let u=await this.loadJsonFile(r);if(u?.lspServers)e={...e,...d(u.lspServers)}};if(await _(m.join(b.homedir(),".blade","config.json")),await _(m.join(b.homedir(),".blade","settings.json")),M.state==="trusted")for(let r of["config.json","settings.json","settings.local.json"])await _(m.join(M.projectPath,".blade",r));if(this.lastAdditionalSettings?.lspServers)e={...e,...d(this.lastAdditionalSettings.lspServers)};let S={lspServers:e};return this.resolveEnvInterpolation(S),d(S.lspServers)}async loadWorkspaceModelConfig(n,t){if(m.resolve(n)===m.resolve(x()))return{currentModelId:t.currentModelId,models:t.models.map((r)=>structuredClone(r)),modelProviders:structuredClone(t.modelProviders),temperature:t.temperature,...t.maxOutputTokens!==void 0?{maxOutputTokens:t.maxOutputTokens}:{},timeout:t.timeout,...t.providerCircuitBreakerOpenMs!==void 0?{providerCircuitBreakerOpenMs:t.providerCircuitBreakerOpenMs}:{},...t.providerRequestConcurrency!==void 0?{providerRequestConcurrency:t.providerRequestConcurrency}:{},...t.providerGlobalConcurrency!==void 0?{providerGlobalConcurrency:t.providerGlobalConcurrency}:{},...t.providerOwnerConcurrency!==void 0?{providerOwnerConcurrency:t.providerOwnerConcurrency}:{},...t.providerRequestAdmissionMs!==void 0?{providerRequestAdmissionMs:t.providerRequestAdmissionMs}:{},...t.providerRequestPendingBytes!==void 0?{providerRequestPendingBytes:t.providerRequestPendingBytes}:{}};let M=await h.getInstance().getStatus(n),e=M.projectPath,_={currentModelId:A.currentModelId,models:A.models.map((r)=>structuredClone(r)),modelProviders:structuredClone(A.modelProviders),temperature:A.temperature,...A.maxOutputTokens!==void 0?{maxOutputTokens:A.maxOutputTokens}:{},timeout:A.timeout,...A.providerCircuitBreakerOpenMs!==void 0?{providerCircuitBreakerOpenMs:A.providerCircuitBreakerOpenMs}:{},...A.providerRequestConcurrency!==void 0?{providerRequestConcurrency:A.providerRequestConcurrency}:{},...A.providerGlobalConcurrency!==void 0?{providerGlobalConcurrency:A.providerGlobalConcurrency}:{},...A.providerOwnerConcurrency!==void 0?{providerOwnerConcurrency:A.providerOwnerConcurrency}:{},...A.providerRequestAdmissionMs!==void 0?{providerRequestAdmissionMs:A.providerRequestAdmissionMs}:{},...A.providerRequestPendingBytes!==void 0?{providerRequestPendingBytes:A.providerRequestPendingBytes}:{}},S=(r)=>{if(!r)return;if(r.modelProviders)_.modelProviders={..._.modelProviders,...structuredClone(r.modelProviders)};if(r.models)_.models=r.models.map((u)=>structuredClone(u));if(r.currentModelId!==void 0)_.currentModelId=r.currentModelId;if(r.temperature!==void 0)_.temperature=r.temperature;if(r.maxOutputTokens!==void 0)_.maxOutputTokens=r.maxOutputTokens;if(r.timeout!==void 0)_.timeout=r.timeout;if(r.providerCircuitBreakerOpenMs!==void 0)_.providerCircuitBreakerOpenMs=r.providerCircuitBreakerOpenMs;if(r.providerRequestConcurrency!==void 0)_.providerRequestConcurrency=r.providerRequestConcurrency;if(r.providerGlobalConcurrency!==void 0)_.providerGlobalConcurrency=r.providerGlobalConcurrency;if(r.providerOwnerConcurrency!==void 0)_.providerOwnerConcurrency=r.providerOwnerConcurrency;if(r.providerRequestAdmissionMs!==void 0)_.providerRequestAdmissionMs=r.providerRequestAdmissionMs;if(r.providerRequestPendingBytes!==void 0)_.providerRequestPendingBytes=r.providerRequestPendingBytes};if(S(await this.loadJsonFile(m.join(b.homedir(),".blade","config.json"))),S(await this.loadJsonFile(m.join(b.homedir(),".blade","settings.json"))),M.state==="trusted")S(await this.loadJsonFile(m.join(e,".blade","config.json"))),S(await this.loadJsonFile(m.join(e,".blade","settings.json"))),S(await this.loadJsonFile(m.join(e,".blade","settings.local.json")));if(S(this.lastAdditionalSettings),_=this.normalizeConfig(_),this.resolveEnvInterpolation(_),process.env.BLADE_MODEL&&_.models.length>0){let r=process.env.BLADE_MODEL,u=rn(r),E=_.models.find((T)=>T.id===u||T.model===u||T.id===r||T.model===r);if(E)_.currentModelId=E.id}if(!_.models.some((r)=>r.id===_.currentModelId))_.currentModelId=_.models[0]?.id??"";return _}async loadWorkspaceRuntimeSettings(n,t){if(m.resolve(n)===m.resolve(x()))return{env:D(t.env),disableAllHooks:t.disableAllHooks,maxTurns:t.maxTurns,permissionMode:t.permissionMode};let M=await h.getInstance().getStatus(n),e=M.projectPath,_={env:{},disableAllHooks:A.disableAllHooks,maxTurns:A.maxTurns,permissionMode:A.permissionMode},S=(E,T)=>{if(!E)return;if(T.allowExecutionSettings){if(E.env)_.env={..._.env,...D(E.env)};if(E.maxTurns!==void 0)_.maxTurns=E.maxTurns;if(E.permissionMode!==void 0)_.permissionMode=E.permissionMode;if(E.disableAllHooks!==void 0)_.disableAllHooks=E.disableAllHooks}else if(E.disableAllHooks===!0)_.disableAllHooks=!0};S(await this.loadJsonFile(m.join(b.homedir(),".blade","config.json")),{allowExecutionSettings:!0}),S(await this.loadJsonFile(m.join(b.homedir(),".blade","settings.json")),{allowExecutionSettings:!0});let r=await Promise.all([this.loadJsonFile(m.join(e,".blade","config.json")),this.loadJsonFile(m.join(e,".blade","settings.json")),this.loadJsonFile(m.join(e,".blade","settings.local.json"))]);for(let E of r)S(E,{allowExecutionSettings:M.state==="trusted"});S(this.lastAdditionalSettings,{allowExecutionSettings:!0});let u={env:_.env};return this.resolveEnvInterpolation(u),_.env=D(u.env),_}async loadWorkspacePluginSettings(n){return(await this.loadWorkspacePluginSettingsResolution(n)).effective}async loadWorkspacePluginSettingsResolution(n){let t=await h.getInstance().getStatus(n),M={},e={},_=(S,r,u)=>{if(!S?.enabledPlugins)return;let E=z(S.enabledPlugins);for(let[T,s]of Object.entries(E)){if(!u&&s!==!1)continue;let P=e[T];M[T]=s,e[T]={effective:s,effectiveScope:r,layers:{...P?.layers??{},[r]:s}}}};_(await this.loadJsonFile(m.join(b.homedir(),".blade","config.json")),"global",!0),_(await this.loadJsonFile(m.join(b.homedir(),".blade","settings.json")),"global",!0);for(let S of["config.json","settings.json"])_(await this.loadJsonFile(m.join(t.projectPath,".blade",S)),"project",t.state==="trusted");return _(await this.loadJsonFile(m.join(t.projectPath,".blade","settings.local.json")),"local",t.state==="trusted"),_(this.lastAdditionalSettings,"invocation",!0),{effective:M,settings:e,workspaceTrusted:t.state==="trusted"}}async loadWorkspacePluginSourcePolicy(n){let t=await h.getInstance().getStatus(n),M={...A.pluginSourcePolicy,allowedGitHosts:[...A.pluginSourcePolicy.allowedGitHosts],allowedMarketplaces:[...A.pluginSourcePolicy.allowedMarketplaces],allowedLocalRoots:[...A.pluginSourcePolicy.allowedLocalRoots]},e=(r)=>{if(!r?.pluginSourcePolicy)return;Object.assign(M,B(r.pluginSourcePolicy))},_=(r,u)=>{if(!u)return r;if(r.length===0&&!M.restrictToAllowedSources)return u;let E=new Set(u);return r.filter((T)=>E.has(T))},S=(r)=>{if(!r?.pluginSourcePolicy)return;let u=B(r.pluginSourcePolicy);M.allowedGitHosts=_(M.allowedGitHosts,u.allowedGitHosts),M.allowedMarketplaces=_(M.allowedMarketplaces,u.allowedMarketplaces),M.allowedLocalRoots=_(M.allowedLocalRoots,u.allowedLocalRoots),M.restrictToAllowedSources=M.restrictToAllowedSources||u.restrictToAllowedSources===!0,M.requireGitCommitSha=M.requireGitCommitSha||u.requireGitCommitSha===!0};e(await this.loadJsonFile(m.join(b.homedir(),".blade","config.json"))),e(await this.loadJsonFile(m.join(b.homedir(),".blade","settings.json")));for(let r of["config.json","settings.json","settings.local.json"])S(await this.loadJsonFile(m.join(t.projectPath,".blade",r)));if(S(this.lastAdditionalSettings),process.env.BLADE_PLUGIN_REQUIRE_SHA==="1"||process.env.BLADE_PLUGIN_REQUIRE_SHA==="true")M.requireGitCommitSha=!0;return M}async loadWorkspaceHooks(n,t,M={}){if(m.resolve(n)===m.resolve(x())&&M.includeBaseForCurrentWorkspace!==!1)return K({},t);let e=K({},A.hooks),_=[m.join(b.homedir(),".blade","settings.json"),m.join(n,".blade","settings.json"),m.join(n,".blade","settings.local.json")];for(let S of _){let r=await this.loadJsonFile(S);if(r?.hooks)e=K({},e,r.hooks)}return e}async loadWorkspacePermissionOverrides(n,t={}){let M={allow:[],ask:[],deny:[]},e=(await h.getInstance().getStatus(n)).state==="trusted",_=[...e||t.includeUntrusted?[m.join(n,".blade","settings.json")]:[],...e||t.includeUntrusted?[m.join(n,".blade","settings.local.json")]:[]];for(let S of _){let r=await this.loadJsonFile(S);if(!r?.permissions)continue;for(let u of["allow","ask","deny"])M[u]=Array.from(new Set([...M[u],...r.permissions[u]||[]]))}return M}mergeSettings(n,t){let M={...JSON.parse(JSON.stringify(n)),...JSON.parse(JSON.stringify(t))};if(t.permissions)M.permissions={allow:Array.from(new Set([...n.permissions?.allow||[],...t.permissions.allow||[]])),ask:Array.from(new Set([...n.permissions?.ask||[],...t.permissions.ask||[]])),deny:Array.from(new Set([...n.permissions?.deny||[],...t.permissions.deny||[]]))};if(t.hooks)M.hooks=K({},M.hooks,t.hooks);if(t.enabledPlugins)M.enabledPlugins={...n.enabledPlugins||{},...z(t.enabledPlugins)};if(t.pluginSourcePolicy)M.pluginSourcePolicy={...n.pluginSourcePolicy??A.pluginSourcePolicy,...B(t.pluginSourcePolicy)};if(t.env)M.env=K({},M.env,t.env);if(t.mcpServers)M.mcpServers={...M.mcpServers||{},...t.mcpServers};if(t.lspServers)M.lspServers={...M.lspServers||{},...d(t.lspServers)};if(t.disableAllHooks!==void 0)M.disableAllHooks=t.disableAllHooks;if(t.permissionMode!==void 0)M.permissionMode=t.permissionMode;if(t.maxTurns!==void 0)M.maxTurns=t.maxTurns;return M}resolveEnvInterpolation(n){let t=/\$\{?([A-Z_][A-Z0-9_]*)(:-([^}]+))?\}?/g,M=(_)=>{if(typeof _==="string")return _.replace(t,(S,r,u,E)=>{return process.env[r]||E||S});if(Array.isArray(_))return _.map(M);if(typeof _==="object"&&_!==null){let S=_;for(let[r,u]of Object.entries(S))S[r]=M(u);return S}return _},e=n;for(let[_,S]of Object.entries(e))e[_]=M(S)}async loadJsonFile(n){try{if(await this.fileExists(n)){let t=await Nt.readFile(n,"utf-8");return JSON.parse(t)}}catch(t){console.warn(`[ConfigManager] Failed to load ${n}:`,t)}return null}async fileExists(n){try{return await Nt.access(n),!0}catch{return!1}}normalizeConfig(n){let t=JSON.parse(JSON.stringify(n));if(t.codeTheme===void 0&&typeof t.theme==="string")t.codeTheme=t.theme;delete t.theme;let M=(_)=>_.trim().replace(/^`|`$/g,""),e=(_)=>{for(let[S,r]of Object.entries(_))if(typeof r==="string")_[S]=M(r);else if(Array.isArray(r))r.forEach((u,E)=>{if(typeof u==="string")r[E]=M(u);else if(typeof u==="object"&&u!==null)e(u)});else if(typeof r==="object"&&r!==null)e(r)};return e(t),t}validateConfig(n,t=J()){let M=[];try{n.lspServers=d(n.lspServers)}catch(e){M.push(e instanceof Error?e.message:"Invalid LSP server configuration")}for(let[e,_]of Object.entries(n.mcpServers||{}))try{nt(_),_.oauth=k(_);let S=rt(_);if(_.logging!==void 0)_.logging=S;if(_.sampling)_.sampling=wt(_.sampling);if(_.tasks)_.tasks=Pt(_.tasks)}catch(S){M.push(`MCP server "${e}": ${S instanceof Error?S.message:"invalid sampling policy"}`)}for(let[e,_]of Object.entries(n.modelProviders||{}))if(M.push(...$t(e,_)),t.isReservedProviderId(e))M.push(`modelProviders.${e}: built-in provider ids cannot be overridden`);if(M.length===0)try{t.configureModelProviders(n.modelProviders||{},n.models)}catch(e){M.push(e instanceof Error?e.message:"Failed to configure custom model providers")}if(!n.models||n.models.length===0)M.push("没有可用的模型配置");if(!ht(n.maxTurns))M.push(`maxTurns 必须是 ${dt()}`);if(!Wn(n.maxConcurrentTasks))M.push(`maxConcurrentTasks 必须是 ${Un}-${Hn} 之间的整数`);if(!Zn(n.maxQueuedTasks))M.push(`maxQueuedTasks 必须是 ${Yn}-${qn} 之间的整数`);if(!Dn(n.maxQueuedTaskBytes))M.push(`maxQueuedTaskBytes 必须是 ${Qn}-${Gn} 之间的整数`);if(!Bn(n.maxResidentSessionRuntimes))M.push(`maxResidentSessionRuntimes 必须是 ${Xn}-${gn} 之间的整数`);if(!Kn(n.sessionRuntimeIdleMs))M.push(`sessionRuntimeIdleMs 必须是 ${Rn}-${zn} 之间的整数`);if(n.bashForegroundHandoffMs!==void 0&&!tn(n.bashForegroundHandoffMs))M.push("bashForegroundHandoffMs 必须是 0，或 "+`${Nn}-${$n} 之间的整数`);if(n.providerForegroundRecoveryMs!==void 0&&!gt(n.providerForegroundRecoveryMs))M.push("providerForegroundRecoveryMs 必须是 0，或 "+`${Xt}-${pt} 之间的整数`);if(n.providerCircuitBreakerOpenMs!==void 0&&!Ct(n.providerCircuitBreakerOpenMs))M.push("providerCircuitBreakerOpenMs 必须是 0，或 "+`${it}-${Rt} 之间的整数`);if(n.providerRequestConcurrency!==void 0&&!qt(n.providerRequestConcurrency))M.push("providerRequestConcurrency 必须是 "+`${un}-${zt} 之间的整数`);for(let[e,_]of[["providerGlobalConcurrency",n.providerGlobalConcurrency],["providerOwnerConcurrency",n.providerOwnerConcurrency]])if(_!==void 0&&!Vt(_))M.push(`${e} 必须是 ${un}-${Bt} 之间的整数`);if(n.providerRequestAdmissionMs!==void 0&&!Qt(n.providerRequestAdmissionMs))M.push("providerRequestAdmissionMs 必须是 0，或 "+`${Kt}-${Ut} 之间的整数`);if(n.providerRequestPendingBytes!==void 0&&!Gt(n.providerRequestPendingBytes))M.push("providerRequestPendingBytes 必须是 "+`${Ht}-${Yt} 之间的整数`);if(n.models&&n.models.length>0){if(!n.currentModelId)M.push("未设置当前模型 ID");else if(!n.models.find((_)=>_.id===n.currentModelId))M.push(`当前模型 ID "${n.currentModelId}" 在 models 列表中不存在`);for(let e of n.models){let _=`模型 "${e.displayName||e.id}"`,S=["name","apiKey","baseUrl","maxContextTokens","maxOutputTokens","supportsThinking","thinkingBudget","thinkingMode"].filter((u)=>(u in e));if(S.length>0)M.push(`${_}: 不再支持旧字段 ${S.join(", ")}；请重新配置模型`);if(!e.model)M.push(`${_}: model 字段必填`);if(!e.provider)M.push(`${_}: provider 字段必填`);if(e.overrides?.baseUrl&&!e.overrides.baseUrl.startsWith("http"))M.push(`${_}: overrides.baseUrl "${e.overrides.baseUrl}" 不是有效的 HTTP URL`);let r=e.overrides?.streamIdleTimeout;if(r!==void 0&&(!Number.isFinite(r)||r<1000))M.push(`${_}: overrides.streamIdleTimeout 必须至少为 1000ms`);try{t.getModel(e.provider,e.model)}catch{M.push(`${_}: 内置 catalog 中不存在 ${e.provider}/${e.model}`)}}}if(M.length>0)throw Error(`配置验证失败:
-${M.map((e)=>`  - ${e}`).join(`
-`)}
-
-`+`请通过以下方式之一提供配置:
-`+`  1. 首次启动: 运行 blade，系统会自动引导配置
-`+`  2. 添加模型: blade 后输入 /model add
-`+`  3. 初始化向导: 输入 /init
-
-`+`配置文件示例 (~/.blade/config.json):
-`+`{
-  "currentModelId": "model-id-123",
-  "models": [
-    {
-      "id": "model-id-123",
-`+`      "displayName": "默认模型",
-`+`      "provider": "deepseek",
-      "model": "deepseek-v4-pro"
-    }
-  ]
-}
-`)}}function ze(n,t={}){let M={...n};if(t.debug!==void 0)M.debug=t.debug===""?!0:t.debug;if(t.model){if(!n.models.some((_)=>_.id===t.model))throw Error(`模型配置未找到: ${t.model}`);M.currentModelId=t.model}if(t.yolo===!0)M.permissionMode="yolo";else if(t.permissionMode!==void 0)M.permissionMode=t.permissionMode;if(t.maxTurns!==void 0)M.maxTurns=t.maxTurns;if(t.maxConcurrentTasks!==void 0)M.maxConcurrentTasks=t.maxConcurrentTasks;if(t.maxQueuedTasks!==void 0)M.maxQueuedTasks=t.maxQueuedTasks;if(t.maxQueuedTaskBytes!==void 0)M.maxQueuedTaskBytes=t.maxQueuedTaskBytes;if(t.maxResidentSessionRuntimes!==void 0)M.maxResidentSessionRuntimes=t.maxResidentSessionRuntimes;if(t.sessionRuntimeIdleMs!==void 0)M.sessionRuntimeIdleMs=t.sessionRuntimeIdleMs;return M.systemPrompt=t.systemPrompt,M.appendSystemPrompt=t.appendSystemPrompt,M.model=t.model,M.resumeSessionId=t.sessionId,M.forkSession=t.forkSession,M.allowedTools=t.allowedTools,M.disallowedTools=t.disallowedTools,M.mcpConfigPaths=t.mcpConfig,M.strictMcpConfig=t.strictMcpConfig,M.addDirs=t.addDir,M.outputFormat=t.outputFormat,M.inputFormat=t.inputFormat,M.print=t.print,M.includePartialMessages=t.includePartialMessages,M.replayUserMessages=t.replayUserMessages,M.agentsConfig=t.agents,M.settingSources=t.settingSources,M}
-export{U as zg,k as Ag,I as Bg,nn as Cg,an as Dg,$ as Eg,nt as Fg,i_ as Gg,Q as Hg,z_ as Ig,B_ as Jg,K_ as Kg,rt as Lg,PM as Mg,U_ as Ng,LM as Og,H_ as Pg,wt as Qg,V_ as Rg,Q_ as Sg,W_ as Tg,Z_ as Ug,D_ as Vg,Pt as Wg,J_ as Xg,k_ as Yg,O_ as Zg,j_ as _g,s_ as $g,Nn as ah,$n as bh,b_ as ch,Xn as dh,pn as eh,gn as fh,Rn as gh,Cn as hh,zn as ih,x_ as jh,Bn as kh,Kn as lh,Un as mh,Hn as nh,Yn as oh,qn as ph,Vn as qh,Qn as rh,Gn as sh,Wn as th,Zn as uh,Dn as vh,A as wh,d as xh,mM as yh,B as zh,D as Ah,g as Bh,ze as Ch};

package/dist/chunk-zp065txw.js

@@ -1 +0,0 @@
-import{Bb as c,Fb as d,Gb as e,Hb as f,Ib as g,Jb as h,Kb as i,Lb as j,Mb as k,Tb as l,Ub as m,Vb as n,Wb as o,Yb as p,Zb as q,_b as r,yb as a,zb as b}from"./chunk-f90evsjc.js";import"./chunk-sca5q3tt.js";import"./chunk-3jnkhqa9.js";import"./chunk-q265drks.js";import"./chunk-7dykmcjj.js";import"./chunk-ye4wyq1k.js";import"./chunk-kpqdfn9z.js";import"./chunk-8qp8v96d.js";import"./chunk-0zzh482s.js";import"./chunk-adkpwx6c.js";import"./chunk-encs9pxs.js";import"./chunk-2t6b962t.js";import"./chunk-kz15jy62.js";import"./chunk-9fgkg1vr.js";import"./chunk-pykxe413.js";import"./chunk-kzzty3v5.js";import"./chunk-9jtjq50j.js";import"./chunk-w4xqaw4h.js";import"./chunk-r6svhe3w.js";import"./chunk-a4dmw23t.js";import"./chunk-qmpdjmmz.js";import"./chunk-207s8tns.js";import"./chunk-spxb931p.js";import"./chunk-m7b779kd.js";export{g as saveUserMessage,i as saveToolUse,j as saveToolResult,k as saveCompaction,h as saveAssistantMessage,d as isRootSystemPrompt,m as handleTaskListUpdate,n as handleSkillActivation,o as extractModelSwitch,r as executeLoopGenerator,f as drainLoop,c as checkStopHook,a as checkOutputRecovery,b as checkIncompleteIntent,q as checkAndCompactInLoop,p as applyToolDomainEffects,l as StreamingToolExecutor,e as ConversationState};