blade-code 0.10.124 → 0.10.126

package/dist/blade.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import{Ae as W}from"./chunk-nz4a0mep.js";import{De as F,Ee as M}from"./chunk-twdfyk78.js";import"./chunk-32z8gkex.js";import"./chunk-v508x7cg.js";import"./chunk-ye4wyq1k.js";import"./chunk-ne9dyvcc.js";import"./chunk-2t6b962t.js";import"./chunk-2824tzwn.js";import"./chunk-kz15jy62.js";import"./chunk-9fgkg1vr.js";import"./chunk-pykxe413.js";import{Sh as N,Th as B}from"./chunk-kzzty3v5.js";import"./chunk-9jtjq50j.js";import{si as T}from"./chunk-w4xqaw4h.js";import"./chunk-r6svhe3w.js";import"./chunk-a4dmw23t.js";import"./chunk-5kg2kvbw.js";import"./chunk-ncqagb27.js";import"./chunk-207s8tns.js";import"./chunk-spxb931p.js";import{$i as J}from"./chunk-m7b779kd.js";import p from"node:path";var E=process.argv.slice(2),I=c(E),u=I!==null;if(I!==null)T.setGlobalDebug(I);function c(Q){for(let Y=0;Y<Q.length;Y+=1){let U=Q[Y];if(U==="--debug"||U==="-d"){let X=Q[Y+1];return X&&!X.startsWith("-")?X:!0}if(U.startsWith("--debug="))return U.slice(8)||!0}return null}function m(Q){return Q.length===1&&(Q[0]==="--version"||Q[0]==="-V")}function q(Q,...Y){return Q.some((U)=>Y.some((X)=>U===X||U.startsWith(`${X}=`)))}function t(Q,...Y){let U=[];for(let X=0;X<Q.length;X+=1){let G=Q[X],z=Y.find(($)=>G.startsWith(`${$}=`));if(z){let $=G.slice(z.length+1);if($)U.push($);continue}if(Y.includes(G)){let $=Q[X+1];if($&&!$.startsWith("-"))U.push($),X+=1}}return U}async function l(){if(m(E)){let{getVersion:K}=await import("./chunk-0t5hvj49.js");console.log(K());return}let Q=process.cwd(),Y=F(Q);M(Y),N(B());let U=t(E,"--plugin-dir","--pluginDir");if(U.length>0){let{configureInvocationPluginDirs:K}=await import("./chunk-07gqhhfd.js");K(U.map((Z)=>p.resolve(Q,Z)))}if(q(E,"--trust-workspace","--trustWorkspace")){let{WorkspaceTrustService:K}=await import("./chunk-a6nz99qf.js");await K.getInstance().trust(B())}if(process.getuid&&process.getuid()===0){let K=!!process.env.SUDO_USER,Z=!!process.env.BLADE_ALLOW_ROOT;if(K&&!Z)console.error(""),console.error("Error: 请不要使用 sudo 运行 blade"),console.error(""),console.error("原因："),console.error("  使用 sudo 会创建属于 root 的配置文件，"),console.error("  导致普通用户无法访问。"),console.error(""),console.error("正确用法："),console.error("  blade           # 直接运行，不要加 sudo"),console.error(""),console.error("如果遇到权限错误，请运行："),console.error("  sudo chown -R $USER:$USER ~/.blade/"),console.error(""),console.error("如果你确实需要以 root 运行（容器/CI），设置环境变量："),console.error("  BLADE_ALLOW_ROOT=1 blade"),console.error(""),process.exit(1)}if(q(E,"--headless")){let{handleHeadlessMode:K}=await import("./chunk-2zewxt27.js");if(await K())return}if(W(),q(E,"--print","-p")){let{handlePrintMode:K}=await import("./chunk-m2ak1nky.js");if(await K())return}if(E.includes("--acp")){let{runAcpIntegration:K}=await import("./chunk-rgqxy1j1.js");await K();return}let[{default:X},{hideBin:G},{cliConfig:z,globalOptions:$},{loadConfiguration:_,validateOutput:D,validatePermissions:R},{browserCommands:S},{doctorCommands:k},{installCommands:O},{mcpCommands:y},{projectsCommands:V},{scheduleCommands:b},{serveCommand:P},{updateCommands:x},{webCommand:A}]=await Promise.all([import("yargs"),import("yargs/helpers"),import("./chunk-sy0x18rq.js"),import("./chunk-5nban6rq.js"),import("./chunk-hgrdsef7.js"),import("./chunk-p89wgwn0.js"),import("./chunk-apssk1cy.js"),import("./chunk-c4aeejq1.js"),import("./chunk-3jdt8kqf.js"),import("./chunk-dcy8s8rz.js"),import("./chunk-jdjmr823.js"),import("./chunk-4a79dppv.js"),import("./chunk-me93hkqv.js")]),h=X(G(process.argv)).scriptName(z.scriptName).usage(z.usage).version(z.version).locale(z.locale).showHelpOnFail(z.showHelpOnFail).demandCommand(0,"").recommendCommands().strict(z.strict).parserConfiguration({"populate--":!0}).options($).middleware([_,R,D]).command(S).command(y).command(V).command(b).command(k).command(x).command(O).command(A).command(P).completion("completion",!1).help("help","Show help").alias("help","h").alias("version","V").fail((K,Z,L)=>{if(Z){if(console.error("An error occurred:"),console.error(Z.message),u&&Z.stack)console.error(`
+import{Ae as W}from"./chunk-1s7gj546.js";import{De as F,Ee as M}from"./chunk-pezzyyyk.js";import"./chunk-t7ymt22d.js";import"./chunk-v508x7cg.js";import"./chunk-ye4wyq1k.js";import"./chunk-fnsq6hk0.js";import"./chunk-2t6b962t.js";import"./chunk-0pnbvv81.js";import"./chunk-y94239bb.js";import"./chunk-cw2b3383.js";import"./chunk-2j2mnzdg.js";import{bi as N,ci as B}from"./chunk-s6562rsq.js";import"./chunk-hbafhk9y.js";import{Di as T}from"./chunk-68sf54n4.js";import"./chunk-sv833k2e.js";import"./chunk-w7n73ag8.js";import"./chunk-nz2cgjww.js";import"./chunk-1g0d9yw0.js";import"./chunk-6kwg4hcv.js";import"./chunk-9xzw649r.js";import{kj as J}from"./chunk-hmwz31tc.js";import p from"node:path";var E=process.argv.slice(2),I=c(E),u=I!==null;if(I!==null)T.setGlobalDebug(I);function c(Q){for(let Y=0;Y<Q.length;Y+=1){let U=Q[Y];if(U==="--debug"||U==="-d"){let X=Q[Y+1];return X&&!X.startsWith("-")?X:!0}if(U.startsWith("--debug="))return U.slice(8)||!0}return null}function m(Q){return Q.length===1&&(Q[0]==="--version"||Q[0]==="-V")}function q(Q,...Y){return Q.some((U)=>Y.some((X)=>U===X||U.startsWith(`${X}=`)))}function t(Q,...Y){let U=[];for(let X=0;X<Q.length;X+=1){let G=Q[X],z=Y.find(($)=>G.startsWith(`${$}=`));if(z){let $=G.slice(z.length+1);if($)U.push($);continue}if(Y.includes(G)){let $=Q[X+1];if($&&!$.startsWith("-"))U.push($),X+=1}}return U}async function l(){if(m(E)){let{getVersion:K}=await import("./chunk-g2q3p5bd.js");console.log(K());return}let Q=process.cwd(),Y=F(Q);M(Y),N(B());let U=t(E,"--plugin-dir","--pluginDir");if(U.length>0){let{configureInvocationPluginDirs:K}=await import("./chunk-5yzs98v1.js");K(U.map((Z)=>p.resolve(Q,Z)))}if(q(E,"--trust-workspace","--trustWorkspace")){let{WorkspaceTrustService:K}=await import("./chunk-54f7t2g3.js");await K.getInstance().trust(B())}if(process.getuid&&process.getuid()===0){let K=!!process.env.SUDO_USER,Z=!!process.env.BLADE_ALLOW_ROOT;if(K&&!Z)console.error(""),console.error("Error: 请不要使用 sudo 运行 blade"),console.error(""),console.error("原因："),console.error("  使用 sudo 会创建属于 root 的配置文件，"),console.error("  导致普通用户无法访问。"),console.error(""),console.error("正确用法："),console.error("  blade           # 直接运行，不要加 sudo"),console.error(""),console.error("如果遇到权限错误，请运行："),console.error("  sudo chown -R $USER:$USER ~/.blade/"),console.error(""),console.error("如果你确实需要以 root 运行（容器/CI），设置环境变量："),console.error("  BLADE_ALLOW_ROOT=1 blade"),console.error(""),process.exit(1)}if(q(E,"--headless")){let{handleHeadlessMode:K}=await import("./chunk-23vx90g5.js");if(await K())return}if(W(),q(E,"--print","-p")){let{handlePrintMode:K}=await import("./chunk-b16dacc5.js");if(await K())return}if(E.includes("--acp")){let{runAcpIntegration:K}=await import("./chunk-ahfe3knk.js");await K();return}let[{default:X},{hideBin:G},{cliConfig:z,globalOptions:$},{loadConfiguration:_,validateOutput:D,validatePermissions:R},{browserCommands:S},{doctorCommands:k},{installCommands:O},{mcpCommands:y},{projectsCommands:V},{scheduleCommands:b},{serveCommand:P},{updateCommands:x},{webCommand:A}]=await Promise.all([import("yargs"),import("yargs/helpers"),import("./chunk-n3hf4p1c.js"),import("./chunk-4fvszzr7.js"),import("./chunk-g2jx4y8f.js"),import("./chunk-cw990f6x.js"),import("./chunk-xdvn6yrd.js"),import("./chunk-z95yvxga.js"),import("./chunk-xvn80fge.js"),import("./chunk-9hm3hy8d.js"),import("./chunk-rmazdhb2.js"),import("./chunk-z1c87ay4.js"),import("./chunk-ybc41bb2.js")]),h=X(G(process.argv)).scriptName(z.scriptName).usage(z.usage).version(z.version).locale(z.locale).showHelpOnFail(z.showHelpOnFail).demandCommand(0,"").recommendCommands().strict(z.strict).parserConfiguration({"populate--":!0}).options($).middleware([_,R,D]).command(S).command(y).command(V).command(b).command(k).command(x).command(O).command(A).command(P).completion("completion",!1).help("help","Show help").alias("help","h").alias("version","V").fail((K,Z,L)=>{if(Z){if(console.error("An error occurred:"),console.error(Z.message),u&&Z.stack)console.error(`
 Stack trace:`),console.error(Z.stack);else console.error(`
 Run with --debug to show the stack trace.`);process.exit(1)}if(K)console.error("Error: Invalid arguments:"),console.error(K),console.error(`
-Hint: Did you mean:`),L.showHelp(),process.exit(1)}).command("$0",!1,()=>{},async(K)=>{let Z=K._.slice(1),L=Z.length>0?Z.join(" "):void 0,f=import("./chunk-javj7p2j.js").then(({checkVersionOnStartup:v})=>v()),[{render:w},{createElement:j},{AppWrapper:C}]=await Promise.all([import("ink"),import("react"),import("./chunk-62c3707d.js")]),H={...K,initialMessage:L,debug:K.debug,print:Boolean(K.print),versionCheckPromise:f};delete H._,delete H.$0,delete H.message,w(j(C,H),{patchConsole:!0,exitOnCtrlC:!1,alternateBuffer:!1})});try{await h.parse()}catch(K){console.error("Error: Parse error:",K),process.exit(1)}}if(J.main==J.module)l().catch(console.error);export{l as main};
+Hint: Did you mean:`),L.showHelp(),process.exit(1)}).command("$0",!1,()=>{},async(K)=>{let Z=K._.slice(1),L=Z.length>0?Z.join(" "):void 0,f=import("./chunk-epn7zsj1.js").then(({checkVersionOnStartup:v})=>v()),[{render:w},{createElement:j},{AppWrapper:C}]=await Promise.all([import("ink"),import("react"),import("./chunk-fstn3r6d.js")]),H={...K,initialMessage:L,debug:K.debug,print:Boolean(K.print),versionCheckPromise:f};delete H._,delete H.$0,delete H.message,w(j(C,H),{patchConsole:!0,exitOnCtrlC:!1,alternateBuffer:!1})});try{await h.parse()}catch(K){console.error("Error: Parse error:",K),process.exit(1)}}if(J.main==J.module)l().catch(console.error);export{l as main};

package/dist/chunk-0pnbvv81.js

@@ -0,0 +1,44 @@
+import{Ph as K}from"./chunk-y94239bb.js";import{Qh as bn,Rh as _n,Sh as T}from"./chunk-cw2b3383.js";import{Wh as wt,Xh as ft}from"./chunk-2j2mnzdg.js";import{ci as I}from"./chunk-s6562rsq.js";import{Ai as yt,di as tt,ei as Dt,fi as Bt,ji as Gt,ki as et,li as Kt,mi as Ht,ni as Yt,oi as cn,pi as Ft,qi as qt,ri as Mt,si as Vt,ti as Jt,ui as _t,vi as Qt,wi as jt,xi as Wt,yi as Zt,zi as kt}from"./chunk-hbafhk9y.js";import{Ei as Un}from"./chunk-68sf54n4.js";import{Hi as zt,Ki as v}from"./chunk-sv833k2e.js";import{Si as xn,Ti as Cn}from"./chunk-nz2cgjww.js";import{Zi as a}from"./chunk-1g0d9yw0.js";import{ij as Ln}from"./chunk-9xzw649r.js";var lt=/^[\x21\x23-\x5b\x5d-\x7e]+$/;function vt(n){return n==="127.0.0.1"||n==="[::1]"||n.toLowerCase()==="localhost"}function p(n,t="MCP OAuth URL"){let e=new URL(n);if(e.username||e.password)throw Error(`${t} must not contain credentials`);if(e.protocol!=="https:"&&!(e.protocol==="http:"&&vt(e.hostname)))throw Error(`${t} requires HTTPS; HTTP is allowed only for loopback servers`);return e}var B=async(n,t)=>{p(n,"MCP OAuth request URL");let e=await fetch(n,{...t,redirect:"manual"});if(e.status>=300&&e.status<400)throw await e.body?.cancel(),Error("MCP OAuth network requests must not follow redirects");return e};function nn(n){let t=n.oauth;if(!t)return;let e=t;for(let E of["clientSecret","authorizationUrl","tokenUrl","redirectUri"])if(e[E]!==void 0)throw Error(`MCP OAuth "${E}" is not supported; use standards-based discovery`);if(t.enabled!==!0)return{enabled:!1};if(n.type!=="http"&&n.type!=="sse")throw Error("MCP OAuth is supported only for HTTP and SSE transports");if(!n.url)throw Error("MCP OAuth requires an MCP server URL");if(p(n.url,"MCP OAuth server URL"),Object.keys(n.headers??{}).find((E)=>E.toLowerCase()==="authorization"))throw Error("MCP OAuth cannot be combined with a configured Authorization header");let _=t.clientId?.trim();if(_&&_.length>4096)throw Error("MCP OAuth clientId exceeds 4096 characters");let S=t.scopes?.map((E)=>E.trim());if(S){if(S.length>32)throw Error("MCP OAuth supports at most 32 scopes");if(S.some((E)=>!E||E.length>128||!lt.test(E)))throw Error("MCP OAuth scopes contain an invalid value");if(new Set(S).size!==S.length)throw Error("MCP OAuth scopes must not contain duplicates")}let r=t.callbackPort;if(r!==void 0&&(!Number.isInteger(r)||r<1024||r>65535))throw Error("MCP OAuth callbackPort must be between 1024 and 65535");return{enabled:!0,..._?{clientId:_}:{},...S?.length?{scopes:S}:{},...r!==void 0?{callbackPort:r}:{}}}import{randomUUID as Sn}from"node:crypto";import Te from"node:http";import{auth as dn}from"@modelcontextprotocol/sdk/client/auth.js";import se from"open";import{createHash as ne,randomUUID as te}from"node:crypto";import{constants as tn,promises as b}from"node:fs";import en from"node:path";import ee from"write-file-atomic";var Nn=1,Me=1048576,_e=5000,re=50,Se=/^[a-f0-9]{64}$/,Ee=T.Object({client_id:T.String({minLength:1,maxLength:4096})},{additionalProperties:!0}),ue=T.Object({access_token:T.String({minLength:1,maxLength:65536}),token_type:T.String({minLength:1,maxLength:64}),expires_in:T.Optional(T.Number({minimum:0})),refresh_token:T.Optional(T.String({minLength:1,maxLength:65536})),scope:T.Optional(T.String({maxLength:16384})),id_token:T.Optional(T.String({minLength:1,maxLength:262144}))},{additionalProperties:!1}),oe=T.Unsafe({type:"object",properties:{authorizationServerUrl:T.String({format:"uri"}),resourceMetadataUrl:T.Optional(T.String({format:"uri"})),resourceMetadata:T.Optional(T.Unknown()),authorizationServerMetadata:T.Optional(T.Unknown())},required:["authorizationServerUrl"],additionalProperties:!1}),an=T.Object({serverUrl:T.String({format:"uri"}),clientId:T.Optional(T.String({minLength:1,maxLength:4096})),clientInformation:T.Optional(Ee),tokens:T.Optional(ue),tokenExpiresAt:T.Optional(T.Number({minimum:0})),discoveryState:T.Optional(oe),updatedAt:T.String({format:"date-time"})},{additionalProperties:!1}),gn=T.Object({version:T.Literal(Nn),credentials:T.Record(T.String(),an)},{additionalProperties:!1});function G(n,t){return n instanceof Error&&"code"in n&&n.code===t}function me(n){if(!Number.isInteger(n)||n<=0)return!1;try{return process.kill(n,0),!0}catch(t){return G(t,"EPERM")}}function Mn(n){return structuredClone(n)}function In(n){if(Object.keys(n.credentials).some((t)=>!Se.test(t)))throw Error("MCP OAuth credential store contains an invalid identity")}function H(n){let t=new URL(n);return t.hash="",t.toString()}function rn(n,t,e=[]){return ne("sha256").update(JSON.stringify({serverUrl:H(n),clientId:t?.trim()||null,scopes:[...e].sort()})).digest("hex")}class f{static locks=new K;stateRoot;tokenFilePath;constructor(n=Ln()){this.stateRoot=en.join(n,"mcp"),this.tokenFilePath=en.join(this.stateRoot,"oauth-credentials.json")}static coordinationStatsForTests(){return this.locks.getStats()}async getCredential(n){return f.locks.runExclusive(this.tokenFilePath,async()=>{let e=(await this.readStore()).credentials[n];return e?Mn(e):null})}async updateCredential(n,t){return this.runMutation(async(e)=>{let M=e.credentials[n],_=await t(M?Mn(M):null);if(_)e.credentials[n]=_n(an,_);else delete e.credentials[n];return _?Mn(e.credentials[n]):null})}async deleteCredential(n){await this.updateCredential(n,()=>null)}async listCredentialIds(){return f.locks.runExclusive(this.tokenFilePath,async()=>Object.keys((await this.readStore()).credentials).sort())}async runMutation(n){return f.locks.runExclusive(this.tokenFilePath,async()=>{let t=await this.acquireStoreLock();try{let e=await this.readStore(),M=await n(e);return await this.writeStore(e),M}finally{await t()}})}async ensureStateRoot(){await b.mkdir(this.stateRoot,{recursive:!0,mode:448});let n=await b.lstat(this.stateRoot);if(!n.isDirectory()||n.isSymbolicLink())throw Error("MCP OAuth credential root must be a regular directory");if(process.getuid&&n.uid!==process.getuid())throw Error("MCP OAuth credential root must be owned by the current user");if((n.mode&63)!==0)throw Error("MCP OAuth credential root permissions must not allow group access")}async readStore(){try{let n=await b.lstat(this.tokenFilePath);if(!n.isFile()||n.isSymbolicLink())throw Error("MCP OAuth credential store must be a regular file");if(process.getuid&&n.uid!==process.getuid())throw Error("MCP OAuth credential store must be owned by the current user");if((n.mode&511)!==384)throw Error("MCP OAuth credential store permissions must be 0600");if(n.size>Me)throw Error("MCP OAuth credential store exceeds the 1 MiB limit");let t=JSON.parse(await b.readFile(this.tokenFilePath,"utf8")),e=bn(gn,t);if(!e.success)throw Error("MCP OAuth credential store has an invalid schema");return In(e.data),e.data}catch(n){if(G(n,"ENOENT"))return{version:Nn,credentials:{}};throw n}}async writeStore(n){await this.ensureStateRoot();let t=_n(gn,n);In(t),await ee(this.tokenFilePath,`${JSON.stringify(t,null,2)}
+`,{mode:384,encoding:"utf8"}),await b.chmod(this.tokenFilePath,384)}async acquireStoreLock(){await this.ensureStateRoot();let n=en.join(this.stateRoot,".oauth-credentials.lock"),t=te(),e=Date.now()+_e;while(Date.now()<e)try{let M=await b.open(n,tn.O_CREAT|tn.O_EXCL|tn.O_WRONLY,384);return await M.writeFile(`${JSON.stringify({version:1,pid:process.pid,token:t,createdAt:new Date().toISOString()})}
+`,"utf8"),await M.close(),async()=>{try{if(JSON.parse(await b.readFile(n,"utf8")).token===t)await b.unlink(n)}catch(_){if(!G(_,"ENOENT"))throw _}}}catch(M){if(!G(M,"EEXIST"))throw M;await this.removeDeadLock(n),await new Promise((_)=>setTimeout(_,re))}throw Error("MCP OAuth credential store is busy; retry the operation")}async removeDeadLock(n){let t=await b.lstat(n);if(!t.isFile()||t.isSymbolicLink())throw Error("MCP OAuth credential lock must be a regular file");if(process.getuid&&t.uid!==process.getuid()||(t.mode&511)!==384)throw Error("MCP OAuth credential lock ownership or permissions are invalid");let e=JSON.parse(await b.readFile(n,"utf8"));if(typeof e.pid!=="number"||!Number.isInteger(e.pid)||e.pid<=0)throw Error("MCP OAuth credential lock owner is invalid");if(!me(e.pid))await b.unlink(n)}}var wn="127.0.0.1",fn=7777,Pn="/oauth/callback",Ae=300000;class En extends Error{constructor(n){super(`MCP server "${n}" requires OAuth authorization; run "blade mcp login ${n}" or use the Web MCP panel`);this.name="McpOAuthAuthorizationRequiredError"}}class hn extends Error{constructor(n){super(`MCP OAuth credentials are unavailable in this runtime for server "${n}"`);this.name="McpOAuthUnavailableError"}}function ce(n){let t=n?"Authentication complete":"Authentication failed";return`<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>${t}</title>
+</head>
+<body>
+  <main>
+    <h1>${t}</h1>
+    <p>${n?"You can close this window and return to Blade.":"Return to Blade and retry the OAuth login."}</p>
+  </main>
+</body>
+</html>`}function U(n,t,e){n.writeHead(t,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Content-Security-Policy":"default-src 'none'; style-src 'unsafe-inline'","X-Content-Type-Options":"nosniff","Referrer-Policy":"no-referrer"}),n.end(ce(e))}class C{serverName;config;static activeFlowIdentity;tokenStorage;serverUrl;identity;callbackUrl;openAuthorizationUrl;codeVerifierValue;activeFlow;lastError;constructor(n,t,e,M={}){this.serverName=n;this.config=e;this.serverUrl=H(t),this.identity=rn(this.serverUrl,e.clientId,e.scopes),this.tokenStorage=M.tokenStorage??new f;let _=e.callbackPort??fn;this.callbackUrl=`http://${wn}:${_}${Pn}`,this.openAuthorizationUrl=M.openAuthorizationUrl??(async(S)=>{await se(S,{wait:!1})})}get redirectUrl(){return this.callbackUrl}get clientMetadata(){return{redirect_uris:[this.callbackUrl],token_endpoint_auth_method:"none",grant_types:["authorization_code","refresh_token"],response_types:["code"],client_name:`${Cn()} ${xn()}`,...this.config.scopes?.length?{scope:this.config.scopes.join(" ")}:{}}}async state(){return this.activeFlow?.state??Sn()}async clientInformation(){if(this.config.clientId)return{client_id:this.config.clientId};return(await this.readCredential())?.clientInformation}async saveClientInformation(n){await this.updateCredential((t)=>({...this.baseCredential(t),clientInformation:n}))}async tokens(){let n=await this.readCredential();if(!n?.tokens)return;if(n.tokenExpiresAt!==void 0&&n.tokenExpiresAt<=Date.now()&&!n.tokens.refresh_token)return;return structuredClone(n.tokens)}async saveTokens(n){let t=n.expires_in===void 0?void 0:Date.now()+n.expires_in*1000;await this.updateCredential((e)=>({...this.baseCredential(e),tokens:structuredClone(n),...t===void 0?{}:{tokenExpiresAt:t}})),this.lastError=void 0}async redirectToAuthorization(n){let t=this.activeFlow;if(!t)throw new En(this.serverName);t.authorizationUrl=p(n,"MCP OAuth authorization URL").toString()}async saveCodeVerifier(n){this.codeVerifierValue=n}async codeVerifier(){if(!this.codeVerifierValue)throw Error("MCP OAuth PKCE verifier is unavailable");return this.codeVerifierValue}async saveDiscoveryState(n){await this.updateCredential((t)=>({...this.baseCredential(t),discoveryState:structuredClone(n)}))}async discoveryState(){let n=(await this.readCredential())?.discoveryState;return n?structuredClone(n):void 0}async invalidateCredentials(n){if(n==="verifier"){this.codeVerifierValue=void 0;return}if(n==="all"){await this.tokenStorage.deleteCredential(this.identity),this.codeVerifierValue=void 0;return}await this.updateCredential((t)=>{if(!t)return null;let e={...t};if(n==="client")delete e.clientInformation,delete e.tokens,delete e.tokenExpiresAt;else if(n==="tokens")delete e.tokens,delete e.tokenExpiresAt;else if(n==="discovery")delete e.discoveryState;return{...e,updatedAt:new Date().toISOString()}})}async getStatus(){if(this.activeFlow)return"authorizing";if(this.lastError)return"error";return await this.hasUsableCredentials()?"authenticated":"unauthenticated"}async hasUsableCredentials(){let n=await this.readCredential();if(!n?.tokens?.access_token)return!1;if(n.tokenExpiresAt===void 0||n.tokenExpiresAt>Date.now())return!0;return Boolean(n.tokens.refresh_token)}async beginAuthorization(){if(this.activeFlow)return this.toHandle(this.activeFlow);if(await this.hasUsableCredentials())throw Error(`MCP server "${this.serverName}" already has OAuth credentials`);if(C.activeFlowIdentity)throw Error("Another MCP OAuth authorization is already in progress");C.activeFlowIdentity=this.identity,this.lastError=void 0,this.codeVerifierValue=void 0;try{let n=await this.createFlow();if(this.activeFlow=n,await dn(this,{serverUrl:this.serverUrl,fetchFn:B})!=="REDIRECT"||!n.authorizationUrl)throw Error("MCP OAuth server did not start an authorization redirect");return this.toHandle(n)}catch(n){let t=n instanceof Error?n:Error(String(n));throw await this.failActiveFlow(t),t}}async openAuthorization(){let n=await this.beginAuthorization();return await this.openAuthorizationUrl(n.authorizationUrl),n}async logout(){if(this.activeFlow)await this.failActiveFlow(Error("MCP OAuth authorization cancelled"));await this.tokenStorage.deleteCredential(this.identity),this.codeVerifierValue=void 0,this.lastError=void 0}async dispose(){if(this.activeFlow)await this.failActiveFlow(Error("MCP OAuth authorization cancelled"))}async createFlow(){let n,t,e=new Promise((r,E)=>{n=r,t=E});e.catch(()=>{return});let M=Sn(),_=Te.createServer((r,E)=>{this.handleCallback(r,E)});_.on("clientError",(r,E)=>{E.end(`HTTP/1.1 400 Bad Request\r
+Connection: close\r
+\r
+`)}),await new Promise((r,E)=>{let u=(m)=>E(m);_.once("error",u),_.listen(this.config.callbackPort??fn,wn,()=>{_.off("error",u),r()})});let S={flowId:Sn(),state:M,callbackUrl:this.callbackUrl,server:_,timeout:setTimeout(()=>{this.failActiveFlow(Error("MCP OAuth authorization timed out"))},Ae),completion:e,resolve:n,reject:t,settled:!1};return S.timeout.unref(),S}async handleCallback(n,t){let e=this.activeFlow;if(!e){U(t,410,!1);return}try{if(n.method!=="GET"){t.setHeader("Allow","GET"),U(t,405,!1);return}let M=new URL(n.url??"/",e.callbackUrl);if(M.pathname!==Pn){U(t,404,!1);return}let _=M.searchParams.get("state"),S=M.searchParams.get("code");if(M.searchParams.get("error"))throw Error("MCP OAuth authorization was denied");if(!_||_!==e.state)throw Error("MCP OAuth state mismatch");if(!S)throw Error("MCP OAuth callback is missing the authorization code");if(await dn(this,{serverUrl:this.serverUrl,authorizationCode:S,fetchFn:B})!=="AUTHORIZED")throw Error("MCP OAuth token exchange did not complete");U(t,200,!0),await this.completeActiveFlow()}catch(M){U(t,400,!1),await this.failActiveFlow(M instanceof Error?M:Error(String(M)))}}async completeActiveFlow(){let n=this.activeFlow;if(!n||n.settled)return;n.settled=!0,clearTimeout(n.timeout),await new Promise((t)=>n.server.close(()=>t())),this.activeFlow=void 0,C.activeFlowIdentity=void 0,this.codeVerifierValue=void 0,this.lastError=void 0,n.resolve()}async failActiveFlow(n){let t=this.activeFlow;if(this.lastError=n,this.codeVerifierValue=void 0,C.activeFlowIdentity=void 0,!t||t.settled){this.activeFlow=void 0;return}t.settled=!0,clearTimeout(t.timeout),await new Promise((e)=>t.server.close(()=>e())),this.activeFlow=void 0,t.reject(n)}toHandle(n){if(!n.authorizationUrl)throw Error("MCP OAuth authorization URL is unavailable");return{flowId:n.flowId,authorizationUrl:n.authorizationUrl,callbackUrl:n.callbackUrl,completion:n.completion}}readCredential(){return this.tokenStorage.getCredential(this.identity)}updateCredential(n){return this.tokenStorage.updateCredential(this.identity,n)}baseCredential(n){return{...n??{},serverUrl:this.serverUrl,...this.config.clientId?{clientId:this.config.clientId}:{},updatedAt:new Date().toISOString()}}}import{promises as j}from"node:fs";import $n from"node:os";import w from"node:path";import{merge as ie}from"lodash-es";import ge from"write-file-atomic";var Y=1,Rn=256,F=4096,q=30000,Xn=1800000,V=86400000,TM=30000,sM=30000;function J(n){return Number.isSafeInteger(n)&&n>=1&&n<=4096}function Q(n){return Number.isSafeInteger(n)&&n>=30000&&n<=86400000}var pn=Un("Service"),P={models:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},modelProviders:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},currentModelId:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},temperature:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},maxOutputTokens:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},timeout:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},bashForegroundHandoffMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerForegroundRecoveryMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerCircuitBreakerOpenMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerGlobalConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerOwnerConcurrency:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestAdmissionMs:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},providerRequestPendingBytes:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},agentTeamsEnabled:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},codeTheme:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},uiTheme:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},language:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},debug:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},fontSize:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},autoSaveSessions:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifyBuild:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifyErrors:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},notifySounds:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},privacyTelemetry:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},privacyCrash:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},communicationStyle:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},permissionMode:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},permissions:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},hooks:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},enabledPlugins:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},pluginSourcePolicy:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},env:{target:"settings",defaultScope:"local",mergeStrategy:"deep-merge",persistable:!0},disableAllHooks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxTurns:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxConcurrentTasks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxQueuedTasks:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxQueuedTaskBytes:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!0},maxResidentSessionRuntimes:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},sessionRuntimeIdleMs:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0},maxResidentSessionProjections:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0,allowedScopes:["global"]},sessionProjectionIdleMs:{target:"settings",defaultScope:"global",mergeStrategy:"replace",persistable:!0,allowedScopes:["global"]},mcpServers:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},lspServers:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!0},stream:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},topP:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},topK:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},mcpEnabled:{target:"config",defaultScope:"global",mergeStrategy:"replace",persistable:!1},systemPrompt:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},appendSystemPrompt:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},initialMessage:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},resumeSessionId:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},forkSession:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},allowedTools:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},disallowedTools:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},mcpConfigPaths:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},strictMcpConfig:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},addDirs:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},outputFormat:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},inputFormat:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},print:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},includePartialMessages:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},replayUserMessages:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},agentsConfig:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1},settingSources:{target:"settings",defaultScope:"local",mergeStrategy:"replace",persistable:!1}},fM=new Set(Object.entries(P).filter(([n,t])=>t.persistable).map(([n])=>n)),PM=new Set(Object.entries(P).filter(([n,t])=>!t.persistable).map(([n])=>n));class h extends Error{code;field;constructor(n,t,e){super(t);this.code=n;this.field=e;this.name="ConfigSaveError"}}class N{static instance=null;pendingUpdates=new Map;timers=new Map;fileLocks=new K;lastSaveError=null;debounceDelay=300;constructor(){}static getInstance(){if(!N.instance)N.instance=new N;return N.instance}static resetInstance(){if(N.instance)for(let n of N.instance.timers.values())clearTimeout(n);N.instance=null}coordinationStatsForTests(){return this.fileLocks.getStats()}async save(n,t={}){this.validatePersistableFields(n),this.validateAllowedScopes(n,t.scope),this.validateFieldValues(n);let e=this.groupUpdatesByTarget(n,t.scope,t.projectDir);if(t.immediate)await Promise.all(Array.from(e.entries()).map(([M,_])=>this.flushTarget(M,_)));else for(let[M,_]of e)this.scheduleSave(M,_)}async flush(){for(let t of this.timers.values())clearTimeout(t);this.timers.clear();let n=Array.from(this.pendingUpdates.entries()).map(([t,e])=>this.flushTarget(t,e));this.pendingUpdates.clear(),await Promise.all(n)}getLastSaveError(){return this.lastSaveError}clearLastSaveError(){this.lastSaveError=null}async appendPermissionRule(n,t={}){await this.appendPermissionRuleForDecision(n,"allow",t)}async appendPermissionDenyRule(n,t={}){await this.appendPermissionRuleForDecision(n,"deny",t)}async appendPermissionRuleForDecision(n,t,e){let M=e.scope??"local",_=this.resolveFilePath("settings",M,e.projectDir);await this.flushTargetWithModifier(_,(S)=>{let r=S.permissions??{allow:[],ask:[],deny:[]},E={allow:t==="allow"?this.dedupeArray([...r.allow||[],n]):r.allow||[],ask:r.ask||[],deny:t==="deny"?this.dedupeArray([...r.deny||[],n]):r.deny||[]};return{...S,permissions:E}})}async appendLocalPermissionRule(n,t={}){await this.appendPermissionRule(n,{...t,scope:"local"})}async appendLocalPermissionDenyRule(n,t={}){await this.appendPermissionDenyRule(n,{...t,scope:"local"})}async removePluginSetting(n,t={}){let e=t.scope??"local",M=this.resolveFilePath("settings",e,t.projectDir);await this.flushTargetWithModifier(M,(_)=>{let S={..._.enabledPlugins??{}};delete S[n];let r={..._};if(Object.keys(S).length>0)r.enabledPlugins=S;else delete r.enabledPlugins;return r})}validatePersistableFields(n){for(let t of Object.keys(n)){let e=P[t];if(!e)throw new h("UNKNOWN_CONFIG_FIELD",`Unknown config field: ${t}`);if(!e.persistable)throw new h("NON_PERSISTABLE_FIELD",`Field "${t}" is non-persistable and cannot be saved to config files. Non-persistable fields are runtime-only and only valid for the current session.`,t)}}validateAllowedScopes(n,t){for(let e of Object.keys(n)){let M=P[e];if(!M?.allowedScopes)continue;let _=t??M.defaultScope;if(!M.allowedScopes.includes(_))throw new h("INVALID_CONFIG_SCOPE",`Field "${e}" only supports scopes: ${M.allowedScopes.join(", ")}`,e)}}validateFieldValues(n){if(n.maxResidentSessionProjections!==void 0&&!J(n.maxResidentSessionProjections))throw new h("INVALID_CONFIG_VALUE",`Field "maxResidentSessionProjections" must be a safe integer between ${Y} and ${F}`,"maxResidentSessionProjections");if(n.sessionProjectionIdleMs!==void 0&&!Q(n.sessionProjectionIdleMs))throw new h("INVALID_CONFIG_VALUE",`Field "sessionProjectionIdleMs" must be a safe integer between ${q} and ${V}`,"sessionProjectionIdleMs")}groupUpdatesByTarget(n,t,e){let M=new Map;for(let[_,S]of Object.entries(n)){let r=P[_];if(!r)continue;let E=t??r.defaultScope,u=this.resolveFilePath(r.target,E,e);if(!M.has(u))M.set(u,{});M.get(u)[_]=S}return M}resolveFilePath(n,t,e){let M=e??I();if(n==="config")return t==="global"?w.join($n.homedir(),".blade","config.json"):w.join(M,".blade","config.json");switch(t){case"local":return w.join(M,".blade","settings.local.json");case"project":return w.join(M,".blade","settings.json");case"global":return w.join($n.homedir(),".blade","settings.json");default:return w.join(M,".blade","settings.local.json")}}scheduleSave(n,t){let e=this.pendingUpdates.get(n)??{},M=this.mergePendingUpdates(e,t);this.pendingUpdates.set(n,M);let _=this.timers.get(n);if(_)clearTimeout(_);let S=setTimeout(async()=>{let r=this.pendingUpdates.get(n);if(r){this.pendingUpdates.delete(n),this.timers.delete(n);try{await this.flushTarget(n,r),this.lastSaveError=null}catch(E){let u=E instanceof Error?E:Error(String(E));this.lastSaveError=u,pn.error(`Failed to save config to ${n}:`,u.message),pn.error("Stack trace:",u.stack)}}},this.debounceDelay);this.timers.set(n,S)}mergePendingUpdates(n,t){let e={...n};for(let[M,_]of Object.entries(t)){let S=P[M];if(!S){e[M]=_;continue}switch(S.mergeStrategy){case"replace":e[M]=_;break;case"append-dedupe":this.applyAppendDedupe(e,M,_);break;case"deep-merge":this.applyDeepMerge(e,M,_);break}}return e}async flushTarget(n,t){await this.fileLocks.runExclusive(n,async()=>{await this.performWrite(n,t)})}async flushTargetWithModifier(n,t){await this.fileLocks.runExclusive(n,async()=>{await j.mkdir(w.dirname(n),{recursive:!0,mode:493});let e={};try{let _=await j.readFile(n,"utf-8");e=JSON.parse(_)}catch{e={}}let M=t(e);await this.atomicWrite(n,M)})}async performWrite(n,t){await j.mkdir(w.dirname(n),{recursive:!0,mode:493});let e={};try{let _=await j.readFile(n,"utf-8");e=JSON.parse(_)}catch{e={}}let M={...e};if(typeof M.theme==="string"&&M.codeTheme===void 0)M.codeTheme=M.theme;delete M.theme;for(let[_,S]of Object.entries(t)){let r=P[_];if(!r){M[_]=S;continue}switch(r.mergeStrategy){case"replace":M[_]=S;break;case"append-dedupe":this.applyAppendDedupe(M,_,S);break;case"deep-merge":this.applyDeepMerge(M,_,S);break}}await this.atomicWrite(n,M)}applyAppendDedupe(n,t,e){if(t==="permissions"&&typeof e==="object"&&e!==null){let M=n[t]??{allow:[],ask:[],deny:[]},_=e;n[t]={allow:this.dedupeArray([...M.allow||[],..._.allow||[]]),ask:this.dedupeArray([...M.ask||[],..._.ask||[]]),deny:this.dedupeArray([...M.deny||[],..._.deny||[]])}}else if(Array.isArray(e)){let M=Array.isArray(n[t])?n[t]:[];n[t]=this.dedupeArray([...M,...e])}else n[t]=e}applyDeepMerge(n,t,e){if(typeof e==="object"&&e!==null&&!Array.isArray(e)){let M=typeof n[t]==="object"&&n[t]!==null?n[t]:{};n[t]=ie({},M,e)}else n[t]=e}dedupeArray(n){return Array.from(new Set(n))}async atomicWrite(n,t){await ge(n,JSON.stringify(t,null,2),{mode:384,encoding:"utf-8"})}}function xM(){return N.getInstance()}var On=15000,zn=1000,Dn=300000;function un(n){return n===0||typeof n==="number"&&Number.isSafeInteger(n)&&n>=1000&&n<=300000}function hM(n,t=15000){return un(n)?n:t}var Bn=1,Gn=32,Kn=256,Hn=30000,Yn=300000,Fn=3600000,XM=30000;function qn(n){return Number.isSafeInteger(n)&&n>=1&&n<=256}function Vn(n){return Number.isSafeInteger(n)&&n>=30000&&n<=3600000}var Jn=1,Qn=64,jn=1,Wn=1e4,Zn=67108864,kn=65536,yn=134217728;function ln(n){return Number.isInteger(n)&&n>=1&&n<=64}function vn(n){return Number.isInteger(n)&&n>=1&&n<=1e4}function nt(n){return Number.isSafeInteger(n)&&n>=65536&&n<=134217728}var s={currentModelId:"",models:[],modelProviders:{},temperature:0,maxOutputTokens:void 0,stream:!0,topP:0.9,topK:50,timeout:180000,bashForegroundHandoffMs:On,providerForegroundRecoveryMs:tt,providerCircuitBreakerOpenMs:et,providerRequestAdmissionMs:Mt,agentTeamsEnabled:!1,providerRequestPendingBytes:_t,codeTheme:"dracula",uiTheme:"system",language:"zh-CN",fontSize:14,autoSaveSessions:!0,notifyBuild:!0,notifyErrors:!1,notifySounds:!1,privacyTelemetry:!1,privacyCrash:!0,debug:!1,mcpEnabled:!1,mcpServers:{},lspServers:{},permissions:{allow:["Bash(pwd)","Bash(which *)","Bash(whoami)","Bash(hostname)","Bash(uname *)","Bash(date)","Bash(echo *)","Bash(ls *)","Bash(tree *)","Bash(git status)","Bash(git status -*)","Bash(git log *)","Bash(git diff *)","Bash(git show *)","Bash(git branch -* *)","Bash(git branch)","Bash(git tag -l *)","Bash(git tag --list *)","Bash(git stash list *)","Bash(git stash show *)","Bash(git rev-parse *)","Bash(git describe *)","Bash(git blame *)","Bash(git ls-files *)","Bash(git config --get *)","Bash(git config --list *)","Bash(git shortlog *)","Bash(git merge-base *)","Bash(git cat-file *)","Bash(git for-each-ref *)","Bash(git grep *)","Bash(git worktree list *)","Bash(git reflog show *)","Bash(git reflog)","Bash(git rev-list *)","Bash(git ls-remote *)","Bash(git remote -v)","Bash(git remote --verbose)","Bash(git remote)","Bash(gh pr view *)","Bash(gh pr list *)","Bash(gh pr diff *)","Bash(gh pr checks *)","Bash(gh pr status *)","Bash(gh issue view *)","Bash(gh issue list *)","Bash(gh issue status *)","Bash(gh run list *)","Bash(gh run view *)","Bash(gh repo view *)","Bash(gh auth status)","Bash(npm list *)","Bash(bun pm ls *)","Bash(npm view *)","Bash(npm outdated *)","Bash(pnpm list *)","Bash(yarn list *)","Bash(pip list *)","Bash(pip show *)"],ask:["Bash(curl *)","Bash(wget *)","Bash(aria2c *)","Bash(axel *)","Bash(rm -rf *)","Bash(rm -r *)","Bash(rm --recursive *)","Bash(nc *)","Bash(netcat *)","Bash(telnet *)","Bash(ncat *)"],deny:["Read(./.env)","Read(./.env.*)","Bash(rm -rf /)","Bash(rm -rf /*)","Bash(sudo *)","Bash(chmod 777 *)","Bash(bash *)","Bash(sh *)","Bash(zsh *)","Bash(fish *)","Bash(dash *)","Bash(eval *)","Bash(source *)","Bash(mkfs *)","Bash(fdisk *)","Bash(dd *)","Bash(format *)","Bash(parted *)","Bash(open http*)","Bash(open https*)","Bash(xdg-open http*)","Bash(xdg-open https*)"]},permissionMode:"default",hooks:{enabled:!1,defaultTimeout:60,timeoutBehavior:"ignore",failureBehavior:"ignore",maxConcurrentHooks:5,PreToolUse:[],PostToolUse:[],PostToolUseFailure:[],PermissionRequest:[],Elicitation:[],ElicitationResult:[],UserPromptSubmit:[],SessionStart:[],SessionEnd:[],Stop:[],SubagentStop:[],Notification:[],Compaction:[]},enabledPlugins:{},pluginSourcePolicy:{restrictToAllowedSources:!1,requireGitCommitSha:!1,allowedGitHosts:[],allowedMarketplaces:[],allowedLocalRoots:[]},env:{},disableAllHooks:!1,maxTurns:-1,maxConcurrentTasks:3,maxQueuedTasks:100,maxQueuedTaskBytes:Zn,maxResidentSessionRuntimes:Gn,sessionRuntimeIdleMs:Yn,maxResidentSessionProjections:Rn,sessionProjectionIdleMs:Xn};var rt=/^[A-Za-z0-9_-]{21}$/;function St(n){return n.trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/^[._-]+|[._-]+$/g,"").slice(0,80)||"model"}function Le(n,t){let e=new Set(t.map((r)=>r.id)),M=St(n.model);if(!e.has(M))return M;let _=`${St(n.provider)}-${M}`.slice(0,120);if(!e.has(_))return _;let S=2;while(e.has(`${_}-${S}`))S++;return`${_}-${S}`}function Et(n,t){let e=n.filter((S)=>!rt.test(S.id)).map((S)=>({id:S.id})),M=new Map;return{models:n.map((S)=>{if(!rt.test(S.id))return{...S};let{id:r,...E}=S,u=Le(E,e);return e.push({id:u}),M.set(r,u),{...S,id:u}}),currentModelId:M.get(t)??t,changed:M.size>0}}import{promises as Ot}from"fs";import{merge as D}from"lodash-es";import i from"os";import o from"path";function ot(n){let t=ut(n.timeout??300000,"MCP timeout"),e=ut(n.idleTimeout??Math.min(60000,t),"MCP idleTimeout");if(e>t)throw Error("MCP idleTimeout must not exceed timeout");return{totalTimeoutMs:t,idleTimeoutMs:e,maxProgressEvents:128}}function VM(n,t,e){if(t.count>=e.maxProgressEvents)return;if(!Number.isFinite(n.progress)||n.progress<0)return;if(n.total!==void 0&&(!Number.isFinite(n.total)||n.total<=0))return;if(t.lastProgress!==void 0&&n.progress<t.lastProgress)return;t.count++,t.lastProgress=n.progress;let M=n.message?.replace(/\0/g,"").trim().slice(0,1000);return{progress:n.progress,...n.total!==void 0?{total:n.total}:{},message:M||be(n.progress,n.total)}}function ut(n,t){if(!Number.isSafeInteger(n)||n<1000||n>1800000)throw Error(`${t} must be an integer between 1000 and 1800000 milliseconds`);return n}function be(n,t){if(t!==void 0)return`MCP progress ${Math.max(0,Math.min(100,n/t*100)).toFixed(0)}%`;return`MCP progress ${n}`}import{createHash as Ne}from"node:crypto";var W=["debug","info","notice","warning","error","critical","alert","emergency"],jM=64,WM=64,ZM=256,ae=8192,At=16384,de=256,we=6,fe=128,mt=64,Tt=64,Pe=128,xe=/authorization|api[-_]?key|cookie|credential|password|secret|token/i;function ct(n){let t=n.logging;if(t!==void 0&&(t===null||typeof t!=="object"||Array.isArray(t)))throw Error("MCP logging configuration must be an object");let e=t?.enabled??!0;if(typeof e!=="boolean")throw Error("MCP logging enabled must be a boolean");let M=t?.level??"warning";if(!Ce(M))throw Error(`MCP logging level must be one of: ${W.join(", ")}`);return{enabled:e,level:M}}function Ce(n){return typeof n==="string"&&W.includes(n)}function kM(n,t){return W.indexOf(n)>=W.indexOf(t)}function he(n,t={}){let e=Re(n.data),M=typeof e.value==="string"?e.value:JSON.stringify(e.value),_=st(M,At),S=_.value,r=Buffer.byteLength(S),E=Ne("sha256").update(S).digest("hex"),u=t.exposeDetails!==!1,m=u?st(S,ae):{value:`[MCP log details omitted; sha256=${E}]`,truncated:!1},A=u&&n.logger?Z(mn(n.logger),de):void 0;return{level:n.level,...A?{logger:A}:{},message:m.value||"[empty MCP log message]",projectedBytes:r,dataSha256:E,truncated:e.truncated||_.truncated||m.truncated,detailsOmitted:!u,timestamp:t.now??Date.now()}}function yM(n,t={}){return{...he({level:"warning",logger:"blade.mcp.logging",data:`MCP log rate exceeded; dropped at least ${Math.max(1,n)} message(s)`},t),synthetic:!0}}function Re(n){let t={nodes:0,remainingStringBytes:At,truncated:!1,seen:new WeakSet};return{value:on(n,0,t),truncated:t.truncated}}function on(n,t,e){if(e.nodes++,e.nodes>fe)return e.truncated=!0,"[node limit reached]";if(n===null||typeof n==="boolean")return n;if(typeof n==="number")return Number.isFinite(n)?n:String(n);if(typeof n==="bigint")return n.toString();if(typeof n==="string"){let M=mn(n),_=Math.max(0,e.remainingStringBytes),S=Z(M,_),r=Buffer.byteLength(S);if(e.remainingStringBytes-=r,r<Buffer.byteLength(M))e.truncated=!0;return S}if(typeof n>"u")return"[undefined]";if(typeof n==="symbol"||typeof n==="function")return`[${typeof n}]`;if(t>=we)return e.truncated=!0,"[depth limit reached]";if(e.seen.has(n))return e.truncated=!0,"[circular]";e.seen.add(n);try{if(Array.isArray(n)){if(n.length>mt)e.truncated=!0;return n.slice(0,mt).map((S)=>on(S,t+1,e))}let M=Object.create(null),_=Object.entries(n);if(_.length>Tt)e.truncated=!0;for(let[S,r]of _.slice(0,Tt)){let E=Z(mn(S),Pe)||"[empty-key]";if(S==="_meta"||xe.test(S))M[E]="[redacted]";else M[E]=on(r,t+1,e)}return M}finally{e.seen.delete(n)}}function mn(n){return[...n.replace(/\bhttps?:\/\/[^\s"'`]+/gi,"[redacted-url]").replace(/\bBearer\s+\S+/gi,"Bearer [redacted]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[redacted]")].filter((e)=>{let M=e.charCodeAt(0);return(M===9||M===10||M===13||M>=32)&&M!==127}).join("")}function Z(n,t){if(t<=0)return"";if(Buffer.byteLength(n)<=t)return n;let e=Buffer.from(n).subarray(0,t).toString("utf8");while(Buffer.byteLength(e)>t)e=e.slice(0,-1);return e}function st(n,t){if(Buffer.byteLength(n)<=t)return{value:n,truncated:!1};let e=`
+...[MCP log truncated]`;return{value:Z(n,t-Buffer.byteLength(e))+e,truncated:!0}}var it=1024,Xe=4096,gt=2,$e=8,It=65536,pe=1048576,Lt=50,bt=16000,Nt=4,Ue=100,at=1048576,Oe=new Set(["image/jpeg","image/png","image/gif","image/webp"]);function Pt(n){if(!n)return{enabled:!1,maxTokens:it,maxRequestsPerToolCall:gt,maxInputBytes:It};if(typeof n.enabled!=="boolean")throw Error("MCP sampling.enabled must be a boolean");return{enabled:n.enabled,maxTokens:k(n.maxTokens??it,1,Xe,"MCP sampling.maxTokens"),maxRequestsPerToolCall:k(n.maxRequestsPerToolCall??gt,1,$e,"MCP sampling.maxRequestsPerToolCall"),maxInputBytes:k(n.maxInputBytes??It,1,pe,"MCP sampling.maxInputBytes")}}function n_(n,t){if(!t.enabled)throw Error("MCP sampling is disabled");if(n.task)throw Error("Task-based MCP sampling is not supported");if(n.tools?.length)throw Error("MCP sampling tools were not negotiated");if(n.includeContext&&n.includeContext!=="none")throw Error("MCP sampling server context was not negotiated");if(n.messages.length===0||n.messages.length>Lt)throw Error(`MCP sampling messages must contain 1-${Lt} entries`);if(n.systemPrompt!==void 0&&n.systemPrompt.length>bt)throw Error(`MCP sampling system prompt exceeds ${bt} characters`);if(n.temperature!==void 0&&(!Number.isFinite(n.temperature)||n.temperature<0||n.temperature>2))throw Error("MCP sampling temperature must be between 0 and 2");let e=n.stopSequences??[];if(e.length>Nt||e.some((m)=>!m||m.length>Ue||m.includes("\x00")))throw Error(`MCP sampling stop sequences must contain at most ${Nt} non-empty bounded values`);let M=[],_=0,S=0,r=0,E=[];if(n.systemPrompt)_+=Buffer.byteLength(n.systemPrompt,"utf8"),M.push({role:"system",content:n.systemPrompt}),E.push(`System: ${dt(n.systemPrompt)}`);for(let m of n.messages){let A=Array.isArray(m.content)?m.content:[m.content],L=[],g=[];for(let c of A){if(c.type==="text"){_+=Buffer.byteLength(c.text,"utf8"),L.push({type:"text",text:c.text}),g.push(dt(c.text));continue}if(c.type==="image"){if(m.role!=="user")throw Error("MCP sampling images are only supported in user messages");if(!Oe.has(c.mimeType))throw Error(`Unsupported MCP sampling image type: ${c.mimeType}`);let $=ze(c.data);S+=$,r++,L.push({type:"image_url",image_url:{url:`data:${c.mimeType};base64,${c.data}`}}),g.push(`[${c.mimeType} image, ${$} bytes]`);continue}throw Error(`Unsupported MCP sampling content type: ${c.type}`)}if(L.length===0)throw Error("MCP sampling message has no supported content");M.push({role:m.role,content:L.length===1&&L[0]?.type==="text"?L[0].text:L}),E.push(`${m.role==="user"?"User":"Assistant"}: ${g.join(" ")}`)}if(_+S>t.maxInputBytes)throw Error(`MCP sampling input exceeds ${t.maxInputBytes} bytes`);if(r>wt||S>ft)throw Error("MCP sampling image input exceeds the shared attachment budget");let u=k(n.maxTokens,1,Number.MAX_SAFE_INTEGER,"MCP sampling maxTokens");return{messages:M,maxTokens:Math.min(u,t.maxTokens),...n.temperature!==void 0?{temperature:n.temperature}:{},stopSequences:[...e],preview:E.join(`
+`).slice(0,8000)}}function t_(n,t,e){if(n.toolCalls?.length)throw Error("Model returned tools for basic MCP sampling");let M=n.content,_=n.finishReason==="length"||n.finishReason==="max_tokens"?"maxTokens":"endTurn",S=-1;for(let r of e.stopSequences){let E=M.indexOf(r);if(E>=0&&(S===-1||E<S))S=E}if(S>=0)M=M.slice(0,S),_="stopSequence";if(Buffer.byteLength(M,"utf8")>at)throw Error(`MCP sampling response exceeds ${at} bytes`);return{model:t,role:"assistant",content:{type:"text",text:M},stopReason:_}}function k(n,t,e,M){if(!Number.isSafeInteger(n)||n<t||n>e)throw Error(`${M} must be an integer between ${t} and ${e}`);return n}function ze(n){if(!n||n.length%4!==0||!/^[A-Za-z0-9+/]*={0,2}$/.test(n))throw Error("MCP sampling image contains invalid base64 data");return Buffer.from(n,"base64").byteLength}function dt(n){return n.replace(/\s+/g," ").trim().slice(0,1000)}var M_=256,__=1e4,r_=86400000;var De=/[\p{Cf}\p{Co}\p{Cn}]/u;function Ct(n){if(!n)return{enabled:!1,defaultTtlMs:600000,pollIntervalMs:500,maxTasksPerSession:32,maxLifetimeMs:1800000};if(typeof n.enabled!=="boolean")throw Error("MCP tasks.enabled must be a boolean");let t=x(n.defaultTtlMs??600000,1e4,86400000,"MCP tasks.defaultTtlMs"),e=x(n.maxLifetimeMs??1800000,1e4,86400000,"MCP tasks.maxLifetimeMs");if(t>e)throw Error("MCP tasks.defaultTtlMs must not exceed tasks.maxLifetimeMs");return{enabled:n.enabled,defaultTtlMs:t,pollIntervalMs:x(n.pollIntervalMs??500,100,1e4,"MCP tasks.pollIntervalMs"),maxTasksPerSession:x(n.maxTasksPerSession??32,1,32,"MCP tasks.maxTasksPerSession"),maxLifetimeMs:e}}function S_(n,t){return x(n??t.defaultTtlMs,1e4,Math.min(86400000,t.maxLifetimeMs),"MCP task ttl")}function E_(n,t,e){let M=Ge(n.taskId,"task ID",512),_=xt(n.createdAt,"createdAt"),S=xt(n.lastUpdatedAt,"lastUpdatedAt");if(Date.parse(S)<Date.parse(_))throw Error("MCP task lastUpdatedAt precedes createdAt");if(e&&(M!==e.taskId||_!==e.createdAt))throw Error("MCP task identity changed across connection generation");let r=n.ttl===null?null:x(n.ttl,0,86400000,"MCP task ttl"),E=n.pollInterval===void 0?t.pollIntervalMs:x(n.pollInterval,0,Number.MAX_SAFE_INTEGER,"MCP task pollInterval"),u=Math.min(1e4,Math.max(100,E)),m=n.statusMessage?Be(n.statusMessage,M):void 0;return{taskId:M,status:n.status,createdAt:_,lastUpdatedAt:S,ttl:r,pollIntervalMs:u,...m?{statusMessage:m}:{}}}function u_(n){return["completed","failed","cancelled"].includes(n)}function o_(n){let t=n instanceof Error?n.message:String(n);return ht(Tn(t.replace(/\bhttps?:\/\/[^\s"'`]+/gi,"[redacted-url]").replace(/\bBearer\s+\S+/gi,"Bearer [redacted]").replace(/\bsk-[A-Za-z0-9_-]{8,}\b/g,"[redacted]")),1024)}function Be(n,t){return ht(Tn(n.replaceAll(t,"[redacted-task-id]")),1024)}function Tn(n){return[...n.normalize("NFKC")].filter((t)=>{let e=t.codePointAt(0)??0;if(e===0||e>=1&&e<=8||e===11||e===12||e>=14&&e<=31||e===127)return!1;return!De.test(t)}).join("").trim()}function xt(n,t){let e=Date.parse(n);if(!Number.isFinite(e))throw Error(`MCP task ${t} is invalid`);return new Date(e).toISOString()}function Ge(n,t,e){if(!n||Buffer.byteLength(n)>e||Tn(n)!==n)throw Error(`MCP ${t} is invalid`);return n}function x(n,t,e,M){if(!Number.isSafeInteger(n)||n<t||n>e)throw Error(`${M} must be an integer between ${t} and ${e}`);return n}function ht(n,t){let e=Buffer.from(n);if(e.length<=t)return n;let M=e.subarray(0,t).toString("utf8");while(Buffer.byteLength(M)>t)M=M.slice(0,-1);return M}var Ke={sonnet:"claude-sonnet-4-20250514",opus:"claude-opus-4-20250514",haiku:"claude-3-5-haiku-20241022",claude:"claude-sonnet-4-20250514",gpt4o:"gpt-4o",gpt4:"gpt-4o",o1:"o1",o3:"o3","o4-mini":"o4-mini",deepseek:"deepseek-chat","deepseek-v3":"deepseek-chat","deepseek-r1":"deepseek-reasoner","deepseek-v4":"deepseek-v4-0324",gemini:"gemini-2.5-pro",flash:"gemini-2.5-flash",qwen:"qwen3-235b-a22b","qwen-max":"qwen-max","qwen-plus":"qwen-plus"};function sn(n){let t=n.toLowerCase().trim();return Ke[t]??n}var He=/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/,Ye=/^\.[A-Za-z0-9_+-]{1,32}$/;function y(n){return n!==null&&typeof n==="object"&&!Array.isArray(n)}function R(n,t,e,M,_){if(n===void 0)return _;if(!Number.isInteger(n)||Number(n)<e||Number(n)>M)throw Error(`${t} must be an integer between ${e} and ${M}`);return Number(n)}function Rt(n,t){if(n===void 0)return;let e;try{e=JSON.stringify(n)}catch{throw Error(`${t} must be JSON serializable`)}if(e===void 0||Buffer.byteLength(e)>262144)throw Error(`${t} exceeds the 256 KiB limit`);return structuredClone(n)}function Fe(n,t){if(n===void 0)return{};if(!y(n))throw Error(`${t} must be an object`);let e={};for(let[M,_]of Object.entries(n)){if(!M||typeof _!=="string"||_.includes("\x00"))throw Error(`${t} must contain non-empty string values`);e[M]=_}return e}function d(n){if(n===void 0)return{};if(!y(n))throw Error("lspServers must be an object");let t=Object.entries(n);if(t.length>32)throw Error("lspServers exceeds the 32-server limit");let e={};for(let[M,_]of t){if(!He.test(M))throw Error(`Invalid LSP server name: ${M}`);if(!y(_))throw Error(`lspServers.${M} must be an object`);let S=new Set(["command","args","extensionToLanguage","env","initializationOptions","settings","enabled","priority","startupTimeout","shutdownTimeout","requestTimeout","diagnosticWaitTimeout","maxRestarts"]),r=Object.keys(_).filter((g)=>!S.has(g));if(r.length>0)throw Error(`Unknown LSP server field: ${M}.${r[0]}`);if(typeof _.command!=="string"||!_.command.trim()||_.command.includes("\x00")||_.command.includes(`
+`))throw Error(`lspServers.${M}.command must be a non-empty command`);if(_.args!==void 0&&!Array.isArray(_.args))throw Error(`lspServers.${M}.args must be an array`);let E=(_.args??[]).map((g,c)=>{if(typeof g!=="string"||g.includes("\x00"))throw Error(`lspServers.${M}.args.${c} must be a string`);return g});if(E.length>128)throw Error(`lspServers.${M}.args exceeds the 128-item limit`);if(!y(_.extensionToLanguage))throw Error(`lspServers.${M}.extensionToLanguage must be an object`);let u=Object.entries(_.extensionToLanguage);if(u.length===0||u.length>64)throw Error(`lspServers.${M}.extensionToLanguage must contain 1-64 entries`);let m={};for(let[g,c]of u){let $=g.startsWith(".")?g.toLowerCase():`.${g.toLowerCase()}`;if(!Ye.test($)||typeof c!=="string"||!c.trim())throw Error(`Invalid lspServers.${M}.extensionToLanguage entry: ${g}`);m[$]=c.trim()}if(_.enabled!==void 0&&typeof _.enabled!=="boolean")throw Error(`lspServers.${M}.enabled must be a boolean`);let A=Rt(_.initializationOptions,`lspServers.${M}.initializationOptions`),L=Rt(_.settings,`lspServers.${M}.settings`);e[M]={command:_.command.trim(),...E.length>0?{args:E}:{},extensionToLanguage:m,..._.env!==void 0?{env:Fe(_.env,`lspServers.${M}.env`)}:{},...A!==void 0?{initializationOptions:A}:{},...L!==void 0?{settings:L}:{},..._.enabled!==void 0?{enabled:_.enabled}:{},priority:R(_.priority,`lspServers.${M}.priority`,-1000,1000,0),startupTimeout:R(_.startupTimeout,`lspServers.${M}.startupTimeout`,100,60000,1e4),shutdownTimeout:R(_.shutdownTimeout,`lspServers.${M}.shutdownTimeout`,100,1e4,2000),requestTimeout:R(_.requestTimeout,`lspServers.${M}.requestTimeout`,100,60000,1e4),diagnosticWaitTimeout:R(_.diagnosticWaitTimeout,`lspServers.${M}.diagnosticWaitTimeout`,0,5000,750),maxRestarts:R(_.maxRestarts,`lspServers.${M}.maxRestarts`,0,10,3)}}return e}function Xt(n){return Number.isInteger(n)&&(n===-1||n>=0)}function $t(){return"-1 (unlimited), 0 (disabled), or any positive integer"}import pt from"node:path";var Ut=/^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$|^[a-z0-9]$/,qe=/^(?:\*\.)?[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)*$/;function O(n){let t=[];for(let[e,M]of Object.entries(n)){if(!Ut.test(e))throw Error(`Invalid plugin name in enabledPlugins: ${e}`);if(typeof M!=="boolean")throw Error(`Invalid enabledPlugins value for ${e}`);t.push([e,M])}return Object.fromEntries(t)}function An(n,t,e){if(!Array.isArray(n))throw Error(`${t} must be an array`);return[...new Set(n.map((M,_)=>{if(typeof M!=="string"||!M.trim())throw Error(`${t}[${_}] must be a non-empty string`);return e(M.trim())}))].sort()}function z(n){let t=new Set(["restrictToAllowedSources","requireGitCommitSha","allowedGitHosts","allowedMarketplaces","allowedLocalRoots"]),e=Object.keys(n).filter((_)=>!t.has(_));if(e.length>0)throw Error(`Unknown pluginSourcePolicy fields: ${e.join(", ")}`);let M={};for(let _ of["restrictToAllowedSources","requireGitCommitSha"]){if(n[_]===void 0)continue;if(typeof n[_]!=="boolean")throw Error(`pluginSourcePolicy.${_} must be boolean`);M[_]=n[_]}if(n.allowedGitHosts!==void 0)M.allowedGitHosts=An(n.allowedGitHosts,"pluginSourcePolicy.allowedGitHosts",(_)=>{let S=_.toLowerCase();if(!qe.test(S))throw Error(`Invalid plugin Git host pattern: ${_}`);return S});if(n.allowedMarketplaces!==void 0)M.allowedMarketplaces=An(n.allowedMarketplaces,"pluginSourcePolicy.allowedMarketplaces",(_)=>{if(!Ut.test(_))throw Error(`Invalid allowed Marketplace name: ${_}`);return _});if(n.allowedLocalRoots!==void 0)M.allowedLocalRoots=An(n.allowedLocalRoots,"pluginSourcePolicy.allowedLocalRoots",(_)=>{if(!pt.isAbsolute(_))throw Error(`Plugin local allowlist root must be absolute: ${_}`);return pt.resolve(_)});return M}function l(n){let t=[];for(let[e,M]of Object.entries(n)){if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(e))throw Error(`Invalid environment variable name: ${e}`);if(typeof M!=="string"||M.includes("\x00"))throw Error(`Invalid environment variable value: ${e}`);t.push([e,M])}return Object.fromEntries(t)}class X{static instance=null;runtimePermissionOverrides;lastAdditionalSettings;warnedGlobalOnlyProjectionResidencyFiles=new Set;constructor(){}static getInstance(){if(!X.instance)X.instance=new X;return X.instance}static resetInstance(){X.instance=null}async initialize(n){try{this.lastAdditionalSettings=n,this.runtimePermissionOverrides=n?.permissions;let e=(await a.getInstance().getStatus(I())).state==="trusted",M=await this.loadConfigFiles(e),_=await this.loadSettingsFiles(e),S={...M,..._,enabledPlugins:{...M.enabledPlugins||{},..._.enabledPlugins||{}}};if(n)S=this.mergeSettings(S,n);let r=this.normalizeConfig(S),E={...s,...r};if(E.enabledPlugins=O(E.enabledPlugins),E.lspServers=d(E.lspServers),E.pluginSourcePolicy={...s.pluginSourcePolicy,...z(E.pluginSourcePolicy)},this.resolveEnvInterpolation(E),process.env.BLADE_MODEL&&E.models?.length>0){let u=sn(process.env.BLADE_MODEL),m=E.models.find((A)=>A.id===u||A.model===u||A.id===process.env.BLADE_MODEL||A.model===process.env.BLADE_MODEL);if(m)E.currentModelId=m.id}if(process.env.BLADE_DEBUG)E.debug=process.env.BLADE_DEBUG==="1"||process.env.BLADE_DEBUG==="true"||process.env.BLADE_DEBUG;if(v().configureModelProviders(E.modelProviders,E.models),E.models.length>0)this.validateConfig(E);if(E.debug)console.log("[ConfigManager] Configuration loaded successfully");return E}catch(t){return console.error("[ConfigManager] Failed to initialize:",t),v().configureModelProviders({},[]),s}}async reload(){return this.initialize(this.lastAdditionalSettings)}async loadConfigFiles(n){let t=o.join(i.homedir(),".blade","config.json"),e=o.join(I(),".blade","config.json"),M={},_=await this.loadJsonFile(t),S=_?await this.migrateLegacyUserConfig(_):null;if(S)M={...M,...S};let r=await this.loadJsonFile(e);if(r&&n){let E={...M.mcpServers||{},...r.mcpServers||{}},u={...M.lspServers||{},...r.lspServers||{}},m={...M.modelProviders||{},...r.modelProviders||{}},A={...M.enabledPlugins||{},...r.enabledPlugins||{}};if(M={...M,...r},Object.keys(E).length>0)M.mcpServers=E;if(Object.keys(u).length>0)M.lspServers=d(u);if(Object.keys(m).length>0)M.modelProviders=m;if(Object.keys(A).length>0)M.enabledPlugins=O(A)}else if(r?.hooks)M.hooks=r.hooks;return M}async migrateLegacyUserConfig(n){let t=n,e={...n},M={};if(e.codeTheme===void 0&&typeof t.theme==="string")e.codeTheme=t.theme,M.codeTheme=t.theme;if(Array.isArray(e.models)){let _=Et(e.models,e.currentModelId??"");if(_.changed)e.models=_.models,e.currentModelId=_.currentModelId,M.models=_.models,M.currentModelId=_.currentModelId}if(delete e.theme,Object.keys(M).length>0)try{await N.getInstance().save(M,{scope:"global",immediate:!0})}catch{console.warn("[ConfigManager] Could not persist legacy config migration")}return e}async loadSettingsFiles(n){let t=o.join(i.homedir(),".blade","settings.json"),e=o.join(I(),".blade","settings.json"),M=o.join(I(),".blade","settings.local.json"),_={},S=await this.loadJsonFile(t);if(S)_=this.mergeSettings(_,S);let r=this.stripGlobalOnlyProjectionResidencyFromLayer(await this.loadJsonFile(e),e,"project");if(r&&n)_=this.mergeSettings(_,r);else if(r?.hooks)_=this.mergeSettings(_,{hooks:r.hooks});let E=this.stripGlobalOnlyProjectionResidencyFromLayer(await this.loadJsonFile(M),M,"local");if(E&&n)_=this.mergeSettings(_,E);else if(E?.hooks)_=this.mergeSettings(_,{hooks:E.hooks});return _}stripGlobalOnlyProjectionResidencyFromLayer(n,t,e){if(!n)return n;let M=n.maxResidentSessionProjections!==void 0,_=n.sessionProjectionIdleMs!==void 0;if(!M&&!_)return n;this.warnGlobalOnlyProjectionResidencyOnce(t,e);let S={...n};return delete S.maxResidentSessionProjections,delete S.sessionProjectionIdleMs,S}warnGlobalOnlyProjectionResidencyOnce(n,t){if(this.warnedGlobalOnlyProjectionResidencyFiles.has(n))return;this.warnedGlobalOnlyProjectionResidencyFiles.add(n),console.warn(`[ConfigManager] Ignoring global-only session projection residency settings in ${t} settings file:`,n)}async loadWorkspacePermissions(n,t){let e={allow:[...t.allow],ask:[...t.ask],deny:[...t.deny]};if(o.resolve(n)!==o.resolve(I())){let _=await this.loadWorkspacePermissionOverrides(I(),{includeUntrusted:!0}),S=await this.loadJsonFile(o.join(i.homedir(),".blade","settings.json")),r={allow:Array.from(new Set([...s.permissions.allow,...S?.permissions?.allow||[],...this.runtimePermissionOverrides?.allow||[]])),ask:Array.from(new Set([...s.permissions.ask,...S?.permissions?.ask||[],...this.runtimePermissionOverrides?.ask||[]])),deny:Array.from(new Set([...s.permissions.deny,...S?.permissions?.deny||[],...this.runtimePermissionOverrides?.deny||[]]))};for(let E of["allow","ask","deny"]){let u=new Set(_[E].filter((m)=>!r[E].includes(m)));e[E]=e[E].filter((m)=>!u.has(m))}}let M=await this.loadWorkspacePermissionOverrides(n);for(let _ of["allow","ask","deny"])e[_]=Array.from(new Set([...e[_],...M[_]]));return e}async loadWorkspaceMcpServers(n,t){if(o.resolve(n)===o.resolve(I()))return{...t};let e=await a.getInstance().getStatus(n),M=e.state==="trusted",_=e.projectPath,S={},r=async(u)=>{let m=await this.loadJsonFile(u);if(m?.mcpServers)S={...S,...m.mcpServers}};if(await r(o.join(i.homedir(),".blade","config.json")),await r(o.join(i.homedir(),".blade","settings.json")),M)await r(o.join(_,".blade","config.json")),await r(o.join(_,".blade","settings.json")),await r(o.join(_,".blade","settings.local.json"));if(this.lastAdditionalSettings?.mcpServers)S={...S,...this.lastAdditionalSettings.mcpServers};let E={mcpServers:S};return this.resolveEnvInterpolation(E),E.mcpServers}async loadWorkspaceLspServers(n,t){if(o.resolve(n)===o.resolve(I()))return d(t);let e=await a.getInstance().getStatus(n),M={},_=async(r)=>{let E=await this.loadJsonFile(r);if(E?.lspServers)M={...M,...d(E.lspServers)}};if(await _(o.join(i.homedir(),".blade","config.json")),await _(o.join(i.homedir(),".blade","settings.json")),e.state==="trusted")for(let r of["config.json","settings.json","settings.local.json"])await _(o.join(e.projectPath,".blade",r));if(this.lastAdditionalSettings?.lspServers)M={...M,...d(this.lastAdditionalSettings.lspServers)};let S={lspServers:M};return this.resolveEnvInterpolation(S),d(S.lspServers)}async loadWorkspaceModelConfig(n,t){if(o.resolve(n)===o.resolve(I()))return{currentModelId:t.currentModelId,models:t.models.map((r)=>structuredClone(r)),modelProviders:structuredClone(t.modelProviders),temperature:t.temperature,...t.maxOutputTokens!==void 0?{maxOutputTokens:t.maxOutputTokens}:{},timeout:t.timeout,...t.providerCircuitBreakerOpenMs!==void 0?{providerCircuitBreakerOpenMs:t.providerCircuitBreakerOpenMs}:{},...t.providerRequestConcurrency!==void 0?{providerRequestConcurrency:t.providerRequestConcurrency}:{},...t.providerGlobalConcurrency!==void 0?{providerGlobalConcurrency:t.providerGlobalConcurrency}:{},...t.providerOwnerConcurrency!==void 0?{providerOwnerConcurrency:t.providerOwnerConcurrency}:{},...t.providerRequestAdmissionMs!==void 0?{providerRequestAdmissionMs:t.providerRequestAdmissionMs}:{},...t.providerRequestPendingBytes!==void 0?{providerRequestPendingBytes:t.providerRequestPendingBytes}:{}};let e=await a.getInstance().getStatus(n),M=e.projectPath,_={currentModelId:s.currentModelId,models:s.models.map((r)=>structuredClone(r)),modelProviders:structuredClone(s.modelProviders),temperature:s.temperature,...s.maxOutputTokens!==void 0?{maxOutputTokens:s.maxOutputTokens}:{},timeout:s.timeout,...s.providerCircuitBreakerOpenMs!==void 0?{providerCircuitBreakerOpenMs:s.providerCircuitBreakerOpenMs}:{},...s.providerRequestConcurrency!==void 0?{providerRequestConcurrency:s.providerRequestConcurrency}:{},...s.providerGlobalConcurrency!==void 0?{providerGlobalConcurrency:s.providerGlobalConcurrency}:{},...s.providerOwnerConcurrency!==void 0?{providerOwnerConcurrency:s.providerOwnerConcurrency}:{},...s.providerRequestAdmissionMs!==void 0?{providerRequestAdmissionMs:s.providerRequestAdmissionMs}:{},...s.providerRequestPendingBytes!==void 0?{providerRequestPendingBytes:s.providerRequestPendingBytes}:{}},S=(r)=>{if(!r)return;if(r.modelProviders)_.modelProviders={..._.modelProviders,...structuredClone(r.modelProviders)};if(r.models)_.models=r.models.map((E)=>structuredClone(E));if(r.currentModelId!==void 0)_.currentModelId=r.currentModelId;if(r.temperature!==void 0)_.temperature=r.temperature;if(r.maxOutputTokens!==void 0)_.maxOutputTokens=r.maxOutputTokens;if(r.timeout!==void 0)_.timeout=r.timeout;if(r.providerCircuitBreakerOpenMs!==void 0)_.providerCircuitBreakerOpenMs=r.providerCircuitBreakerOpenMs;if(r.providerRequestConcurrency!==void 0)_.providerRequestConcurrency=r.providerRequestConcurrency;if(r.providerGlobalConcurrency!==void 0)_.providerGlobalConcurrency=r.providerGlobalConcurrency;if(r.providerOwnerConcurrency!==void 0)_.providerOwnerConcurrency=r.providerOwnerConcurrency;if(r.providerRequestAdmissionMs!==void 0)_.providerRequestAdmissionMs=r.providerRequestAdmissionMs;if(r.providerRequestPendingBytes!==void 0)_.providerRequestPendingBytes=r.providerRequestPendingBytes};if(S(await this.loadJsonFile(o.join(i.homedir(),".blade","config.json"))),S(await this.loadJsonFile(o.join(i.homedir(),".blade","settings.json"))),e.state==="trusted")S(await this.loadJsonFile(o.join(M,".blade","config.json"))),S(await this.loadJsonFile(o.join(M,".blade","settings.json"))),S(await this.loadJsonFile(o.join(M,".blade","settings.local.json")));if(S(this.lastAdditionalSettings),_=this.normalizeConfig(_),this.resolveEnvInterpolation(_),process.env.BLADE_MODEL&&_.models.length>0){let r=process.env.BLADE_MODEL,E=sn(r),u=_.models.find((m)=>m.id===E||m.model===E||m.id===r||m.model===r);if(u)_.currentModelId=u.id}if(!_.models.some((r)=>r.id===_.currentModelId))_.currentModelId=_.models[0]?.id??"";return _}async loadWorkspaceRuntimeSettings(n,t){if(o.resolve(n)===o.resolve(I()))return{env:l(t.env),disableAllHooks:t.disableAllHooks,maxTurns:t.maxTurns,permissionMode:t.permissionMode};let e=await a.getInstance().getStatus(n),M=e.projectPath,_={env:{},disableAllHooks:s.disableAllHooks,maxTurns:s.maxTurns,permissionMode:s.permissionMode},S=(u,m)=>{if(!u)return;if(m.allowExecutionSettings){if(u.env)_.env={..._.env,...l(u.env)};if(u.maxTurns!==void 0)_.maxTurns=u.maxTurns;if(u.permissionMode!==void 0)_.permissionMode=u.permissionMode;if(u.disableAllHooks!==void 0)_.disableAllHooks=u.disableAllHooks}else if(u.disableAllHooks===!0)_.disableAllHooks=!0};S(await this.loadJsonFile(o.join(i.homedir(),".blade","config.json")),{allowExecutionSettings:!0}),S(await this.loadJsonFile(o.join(i.homedir(),".blade","settings.json")),{allowExecutionSettings:!0});let r=await Promise.all([this.loadJsonFile(o.join(M,".blade","config.json")),this.loadJsonFile(o.join(M,".blade","settings.json")),this.loadJsonFile(o.join(M,".blade","settings.local.json"))]);for(let u of r)S(u,{allowExecutionSettings:e.state==="trusted"});S(this.lastAdditionalSettings,{allowExecutionSettings:!0});let E={env:_.env};return this.resolveEnvInterpolation(E),_.env=l(E.env),_}async loadWorkspacePluginSettings(n){return(await this.loadWorkspacePluginSettingsResolution(n)).effective}async loadWorkspacePluginSettingsResolution(n){let t=await a.getInstance().getStatus(n),e={},M={},_=(S,r,E)=>{if(!S?.enabledPlugins)return;let u=O(S.enabledPlugins);for(let[m,A]of Object.entries(u)){if(!E&&A!==!1)continue;let L=M[m];e[m]=A,M[m]={effective:A,effectiveScope:r,layers:{...L?.layers??{},[r]:A}}}};_(await this.loadJsonFile(o.join(i.homedir(),".blade","config.json")),"global",!0),_(await this.loadJsonFile(o.join(i.homedir(),".blade","settings.json")),"global",!0);for(let S of["config.json","settings.json"])_(await this.loadJsonFile(o.join(t.projectPath,".blade",S)),"project",t.state==="trusted");return _(await this.loadJsonFile(o.join(t.projectPath,".blade","settings.local.json")),"local",t.state==="trusted"),_(this.lastAdditionalSettings,"invocation",!0),{effective:e,settings:M,workspaceTrusted:t.state==="trusted"}}async loadWorkspacePluginSourcePolicy(n){let t=await a.getInstance().getStatus(n),e={...s.pluginSourcePolicy,allowedGitHosts:[...s.pluginSourcePolicy.allowedGitHosts],allowedMarketplaces:[...s.pluginSourcePolicy.allowedMarketplaces],allowedLocalRoots:[...s.pluginSourcePolicy.allowedLocalRoots]},M=(r)=>{if(!r?.pluginSourcePolicy)return;Object.assign(e,z(r.pluginSourcePolicy))},_=(r,E)=>{if(!E)return r;if(r.length===0&&!e.restrictToAllowedSources)return E;let u=new Set(E);return r.filter((m)=>u.has(m))},S=(r)=>{if(!r?.pluginSourcePolicy)return;let E=z(r.pluginSourcePolicy);e.allowedGitHosts=_(e.allowedGitHosts,E.allowedGitHosts),e.allowedMarketplaces=_(e.allowedMarketplaces,E.allowedMarketplaces),e.allowedLocalRoots=_(e.allowedLocalRoots,E.allowedLocalRoots),e.restrictToAllowedSources=e.restrictToAllowedSources||E.restrictToAllowedSources===!0,e.requireGitCommitSha=e.requireGitCommitSha||E.requireGitCommitSha===!0};M(await this.loadJsonFile(o.join(i.homedir(),".blade","config.json"))),M(await this.loadJsonFile(o.join(i.homedir(),".blade","settings.json")));for(let r of["config.json","settings.json","settings.local.json"])S(await this.loadJsonFile(o.join(t.projectPath,".blade",r)));if(S(this.lastAdditionalSettings),process.env.BLADE_PLUGIN_REQUIRE_SHA==="1"||process.env.BLADE_PLUGIN_REQUIRE_SHA==="true")e.requireGitCommitSha=!0;return e}async loadWorkspaceHooks(n,t,e={}){if(o.resolve(n)===o.resolve(I())&&e.includeBaseForCurrentWorkspace!==!1)return D({},t);let M=D({},s.hooks),_=[o.join(i.homedir(),".blade","settings.json"),o.join(n,".blade","settings.json"),o.join(n,".blade","settings.local.json")];for(let S of _){let r=await this.loadJsonFile(S);if(r?.hooks)M=D({},M,r.hooks)}return M}async loadWorkspacePermissionOverrides(n,t={}){let e={allow:[],ask:[],deny:[]},M=(await a.getInstance().getStatus(n)).state==="trusted",_=[...M||t.includeUntrusted?[o.join(n,".blade","settings.json")]:[],...M||t.includeUntrusted?[o.join(n,".blade","settings.local.json")]:[]];for(let S of _){let r=await this.loadJsonFile(S);if(!r?.permissions)continue;for(let E of["allow","ask","deny"])e[E]=Array.from(new Set([...e[E],...r.permissions[E]||[]]))}return e}mergeSettings(n,t){let e={...JSON.parse(JSON.stringify(n)),...JSON.parse(JSON.stringify(t))};if(t.permissions)e.permissions={allow:Array.from(new Set([...n.permissions?.allow||[],...t.permissions.allow||[]])),ask:Array.from(new Set([...n.permissions?.ask||[],...t.permissions.ask||[]])),deny:Array.from(new Set([...n.permissions?.deny||[],...t.permissions.deny||[]]))};if(t.hooks)e.hooks=D({},e.hooks,t.hooks);if(t.enabledPlugins)e.enabledPlugins={...n.enabledPlugins||{},...O(t.enabledPlugins)};if(t.pluginSourcePolicy)e.pluginSourcePolicy={...n.pluginSourcePolicy??s.pluginSourcePolicy,...z(t.pluginSourcePolicy)};if(t.env)e.env=D({},e.env,t.env);if(t.mcpServers)e.mcpServers={...e.mcpServers||{},...t.mcpServers};if(t.lspServers)e.lspServers={...e.lspServers||{},...d(t.lspServers)};if(t.disableAllHooks!==void 0)e.disableAllHooks=t.disableAllHooks;if(t.permissionMode!==void 0)e.permissionMode=t.permissionMode;if(t.maxTurns!==void 0)e.maxTurns=t.maxTurns;return e}resolveEnvInterpolation(n){let t=/\$\{?([A-Z_][A-Z0-9_]*)(:-([^}]+))?\}?/g,e=(_)=>{if(typeof _==="string")return _.replace(t,(S,r,E,u)=>{return process.env[r]||u||S});if(Array.isArray(_))return _.map(e);if(typeof _==="object"&&_!==null){let S=_;for(let[r,E]of Object.entries(S))S[r]=e(E);return S}return _},M=n;for(let[_,S]of Object.entries(M))M[_]=e(S)}async loadJsonFile(n){try{if(await this.fileExists(n)){let t=await Ot.readFile(n,"utf-8");return JSON.parse(t)}}catch(t){console.warn(`[ConfigManager] Failed to load ${n}:`,t)}return null}async fileExists(n){try{return await Ot.access(n),!0}catch{return!1}}normalizeConfig(n){let t=JSON.parse(JSON.stringify(n));if(t.codeTheme===void 0&&typeof t.theme==="string")t.codeTheme=t.theme;delete t.theme;let e=(_)=>_.trim().replace(/^`|`$/g,""),M=(_)=>{for(let[S,r]of Object.entries(_))if(typeof r==="string")_[S]=e(r);else if(Array.isArray(r))r.forEach((E,u)=>{if(typeof E==="string")r[u]=e(E);else if(typeof E==="object"&&E!==null)M(E)});else if(typeof r==="object"&&r!==null)M(r)};return M(t),t}validateConfig(n,t=v()){let e=[];try{n.lspServers=d(n.lspServers)}catch(M){e.push(M instanceof Error?M.message:"Invalid LSP server configuration")}for(let[M,_]of Object.entries(n.mcpServers||{}))try{ot(_),_.oauth=nn(_);let S=ct(_);if(_.logging!==void 0)_.logging=S;if(_.sampling)_.sampling=Pt(_.sampling);if(_.tasks)_.tasks=Ct(_.tasks)}catch(S){e.push(`MCP server "${M}": ${S instanceof Error?S.message:"invalid sampling policy"}`)}for(let[M,_]of Object.entries(n.modelProviders||{}))if(e.push(...zt(M,_)),t.isReservedProviderId(M))e.push(`modelProviders.${M}: built-in provider ids cannot be overridden`);if(e.length===0)try{t.configureModelProviders(n.modelProviders||{},n.models)}catch(M){e.push(M instanceof Error?M.message:"Failed to configure custom model providers")}if(!n.models||n.models.length===0)e.push("没有可用的模型配置");if(!Xt(n.maxTurns))e.push(`maxTurns 必须是 ${$t()}`);if(!ln(n.maxConcurrentTasks))e.push(`maxConcurrentTasks 必须是 ${Jn}-${Qn} 之间的整数`);if(!vn(n.maxQueuedTasks))e.push(`maxQueuedTasks 必须是 ${jn}-${Wn} 之间的整数`);if(!nt(n.maxQueuedTaskBytes))e.push(`maxQueuedTaskBytes 必须是 ${kn}-${yn} 之间的整数`);if(!qn(n.maxResidentSessionRuntimes))e.push(`maxResidentSessionRuntimes 必须是 ${Bn}-${Kn} 之间的整数`);if(!Vn(n.sessionRuntimeIdleMs))e.push(`sessionRuntimeIdleMs 必须是 ${Hn}-${Fn} 之间的整数`);if(!J(n.maxResidentSessionProjections))e.push("maxResidentSessionProjections 必须是 "+`${Y}-${F} 之间的整数`);if(!Q(n.sessionProjectionIdleMs))e.push(`sessionProjectionIdleMs 必须是 ${q}-${V} 之间的整数`);if(n.bashForegroundHandoffMs!==void 0&&!un(n.bashForegroundHandoffMs))e.push("bashForegroundHandoffMs 必须是 0，或 "+`${zn}-${Dn} 之间的整数`);if(n.providerForegroundRecoveryMs!==void 0&&!Gt(n.providerForegroundRecoveryMs))e.push("providerForegroundRecoveryMs 必须是 0，或 "+`${Dt}-${Bt} 之间的整数`);if(n.providerCircuitBreakerOpenMs!==void 0&&!Yt(n.providerCircuitBreakerOpenMs))e.push("providerCircuitBreakerOpenMs 必须是 0，或 "+`${Kt}-${Ht} 之间的整数`);if(n.providerRequestConcurrency!==void 0&&!Wt(n.providerRequestConcurrency))e.push("providerRequestConcurrency 必须是 "+`${cn}-${Ft} 之间的整数`);for(let[M,_]of[["providerGlobalConcurrency",n.providerGlobalConcurrency],["providerOwnerConcurrency",n.providerOwnerConcurrency]])if(_!==void 0&&!Zt(_))e.push(`${M} 必须是 ${cn}-${qt} 之间的整数`);if(n.providerRequestAdmissionMs!==void 0&&!kt(n.providerRequestAdmissionMs))e.push("providerRequestAdmissionMs 必须是 0，或 "+`${Vt}-${Jt} 之间的整数`);if(n.providerRequestPendingBytes!==void 0&&!yt(n.providerRequestPendingBytes))e.push("providerRequestPendingBytes 必须是 "+`${Qt}-${jt} 之间的整数`);if(n.models&&n.models.length>0){if(!n.currentModelId)e.push("未设置当前模型 ID");else if(!n.models.find((_)=>_.id===n.currentModelId))e.push(`当前模型 ID "${n.currentModelId}" 在 models 列表中不存在`);for(let M of n.models){let _=`模型 "${M.displayName||M.id}"`,S=["name","apiKey","baseUrl","maxContextTokens","maxOutputTokens","supportsThinking","thinkingBudget","thinkingMode"].filter((E)=>(E in M));if(S.length>0)e.push(`${_}: 不再支持旧字段 ${S.join(", ")}；请重新配置模型`);if(!M.model)e.push(`${_}: model 字段必填`);if(!M.provider)e.push(`${_}: provider 字段必填`);if(M.overrides?.baseUrl&&!M.overrides.baseUrl.startsWith("http"))e.push(`${_}: overrides.baseUrl "${M.overrides.baseUrl}" 不是有效的 HTTP URL`);let r=M.overrides?.streamIdleTimeout;if(r!==void 0&&(!Number.isFinite(r)||r<1000))e.push(`${_}: overrides.streamIdleTimeout 必须至少为 1000ms`);try{t.getModel(M.provider,M.model)}catch{e.push(`${_}: 内置 catalog 中不存在 ${M.provider}/${M.model}`)}}}if(e.length>0)throw Error(`配置验证失败:
+${e.map((M)=>`  - ${M}`).join(`
+`)}
+
+`+`请通过以下方式之一提供配置:
+`+`  1. 首次启动: 运行 blade，系统会自动引导配置
+`+`  2. 添加模型: blade 后输入 /model add
+`+`  3. 初始化向导: 输入 /init
+
+`+`配置文件示例 (~/.blade/config.json):
+`+`{
+  "currentModelId": "model-id-123",
+  "models": [
+    {
+      "id": "model-id-123",
+`+`      "displayName": "默认模型",
+`+`      "provider": "deepseek",
+      "model": "deepseek-v4-pro"
+    }
+  ]
+}
+`)}}function W_(n,t={}){let e={...n};if(t.debug!==void 0)e.debug=t.debug===""?!0:t.debug;if(t.model){if(!n.models.some((_)=>_.id===t.model))throw Error(`模型配置未找到: ${t.model}`);e.currentModelId=t.model}if(t.yolo===!0)e.permissionMode="yolo";else if(t.permissionMode!==void 0)e.permissionMode=t.permissionMode;if(t.maxTurns!==void 0)e.maxTurns=t.maxTurns;if(t.maxConcurrentTasks!==void 0)e.maxConcurrentTasks=t.maxConcurrentTasks;if(t.maxQueuedTasks!==void 0)e.maxQueuedTasks=t.maxQueuedTasks;if(t.maxQueuedTaskBytes!==void 0)e.maxQueuedTaskBytes=t.maxQueuedTaskBytes;if(t.maxResidentSessionRuntimes!==void 0)e.maxResidentSessionRuntimes=t.maxResidentSessionRuntimes;if(t.sessionRuntimeIdleMs!==void 0)e.sessionRuntimeIdleMs=t.sessionRuntimeIdleMs;if(t.maxResidentSessionProjections!==void 0)e.maxResidentSessionProjections=t.maxResidentSessionProjections;if(t.sessionProjectionIdleMs!==void 0)e.sessionProjectionIdleMs=t.sessionProjectionIdleMs;return e.systemPrompt=t.systemPrompt,e.appendSystemPrompt=t.appendSystemPrompt,e.model=t.model,e.resumeSessionId=t.sessionId,e.forkSession=t.forkSession,e.allowedTools=t.allowedTools,e.disallowedTools=t.disallowedTools,e.mcpConfigPaths=t.mcpConfig,e.strictMcpConfig=t.strictMcpConfig,e.addDirs=t.addDir,e.outputFormat=t.outputFormat,e.inputFormat=t.inputFormat,e.print=t.print,e.includePartialMessages=t.includePartialMessages,e.replayUserMessages=t.replayUserMessages,e.agentsConfig=t.agents,e.settingSources=t.settingSources,e}
+export{B as zg,nn as Ag,f as Bg,En as Cg,hn as Dg,C as Eg,ot as Fg,VM as Gg,W as Hg,jM as Ig,WM as Jg,ZM as Kg,ct as Lg,Ce as Mg,kM as Ng,he as Og,yM as Pg,Pt as Qg,n_ as Rg,t_ as Sg,M_ as Tg,__ as Ug,r_ as Vg,Ct as Wg,S_ as Xg,E_ as Yg,u_ as Zg,o_ as _g,Y as $g,Rn as ah,F as bh,q as ch,Xn as dh,V as eh,TM as fh,sM as gh,J as hh,Q as ih,h as jh,xM as kh,zn as lh,Dn as mh,hM as nh,Bn as oh,Gn as ph,Kn as qh,Hn as rh,Yn as sh,Fn as th,XM as uh,qn as vh,Vn as wh,Jn as xh,Qn as yh,jn as zh,Wn as Ah,Zn as Bh,kn as Ch,yn as Dh,ln as Eh,vn as Fh,nt as Gh,s as Hh,d as Ih,Le as Jh,z as Kh,l as Lh,X as Mh,W_ as Nh};

package/dist/{chunk-3jqd18d8.js → chunk-1b2dkwpv.js}

@@ -1,2 +1,2 @@
-import{rg as Q}from"./chunk-85bamng3.js";import{Fh as F,Hh as k,Kh as G}from"./chunk-9fgkg1vr.js";var V=k.String({minLength:1,maxLength:128,pattern:"^[A-Za-z0-9][A-Za-z0-9_-]*$"}),K=k.Array(k.String({minLength:1,maxLength:200,pattern:".*\\S.*"}),{maxItems:128}),W=k.Object({description:k.String({minLength:1,maxLength:4096,pattern:".*\\S.*"}),prompt:k.String({minLength:1,maxLength:1e5,pattern:".*\\S.*"}),tools:k.Optional(K),disallowedTools:k.Optional(K),model:k.Optional(k.String({minLength:1,maxLength:200,pattern:".*\\S.*"})),permissionMode:k.Optional(G(["default","acceptEdits","dontAsk","bypassPermissions","plan","ignore"])),maxTurns:k.Optional(k.Integer({minimum:1})),isolation:k.Optional(G(["none","worktree"]))},{additionalProperties:!1});function Z(R){let w;try{w=JSON.parse(R)}catch{throw Error("Invalid JSON provided to --agents")}if(w===null||Array.isArray(w)||typeof w!=="object")throw Error("--agents must be a JSON object");let H=Object.entries(w);if(H.length>64)throw Error("--agents supports at most 64 definitions");return H.map(([z,U])=>{if(!F(V,z).success)throw Error(`Invalid --agents name "${z}": use letters, numbers, hyphens, or underscores`);let I=F(W,U);if(!I.success)throw Error(`Invalid --agents definition for "${z}"`);let q=I.data;return{name:z,description:q.description.trim(),systemPrompt:q.prompt.trim(),tools:q.tools?[...new Set(q.tools.map((B)=>B.trim()))]:void 0,disallowedTools:q.disallowedTools?[...new Set(q.disallowedTools.map((B)=>B.trim()))]:void 0,model:q.model?.trim(),permissionMode:q.permissionMode===void 0?void 0:Q(q.permissionMode),maxTurns:q.maxTurns,isolation:q.isolation,source:"flag"}})}
+import{rg as Q}from"./chunk-85bamng3.js";import{Qh as F,Sh as k,Vh as G}from"./chunk-cw2b3383.js";var V=k.String({minLength:1,maxLength:128,pattern:"^[A-Za-z0-9][A-Za-z0-9_-]*$"}),K=k.Array(k.String({minLength:1,maxLength:200,pattern:".*\\S.*"}),{maxItems:128}),W=k.Object({description:k.String({minLength:1,maxLength:4096,pattern:".*\\S.*"}),prompt:k.String({minLength:1,maxLength:1e5,pattern:".*\\S.*"}),tools:k.Optional(K),disallowedTools:k.Optional(K),model:k.Optional(k.String({minLength:1,maxLength:200,pattern:".*\\S.*"})),permissionMode:k.Optional(G(["default","acceptEdits","dontAsk","bypassPermissions","plan","ignore"])),maxTurns:k.Optional(k.Integer({minimum:1})),isolation:k.Optional(G(["none","worktree"]))},{additionalProperties:!1});function Z(R){let w;try{w=JSON.parse(R)}catch{throw Error("Invalid JSON provided to --agents")}if(w===null||Array.isArray(w)||typeof w!=="object")throw Error("--agents must be a JSON object");let H=Object.entries(w);if(H.length>64)throw Error("--agents supports at most 64 definitions");return H.map(([z,U])=>{if(!F(V,z).success)throw Error(`Invalid --agents name "${z}": use letters, numbers, hyphens, or underscores`);let I=F(W,U);if(!I.success)throw Error(`Invalid --agents definition for "${z}"`);let q=I.data;return{name:z,description:q.description.trim(),systemPrompt:q.prompt.trim(),tools:q.tools?[...new Set(q.tools.map((B)=>B.trim()))]:void 0,disallowedTools:q.disallowedTools?[...new Set(q.disallowedTools.map((B)=>B.trim()))]:void 0,model:q.model?.trim(),permissionMode:q.permissionMode===void 0?void 0:Q(q.permissionMode),maxTurns:q.maxTurns,isolation:q.isolation,source:"flag"}})}
 export{Z as xe};

package/dist/{chunk-ncqagb27.js → chunk-1g0d9yw0.js}

@@ -1,3 +1,3 @@
-import{Pi as C,Qi as I}from"./chunk-207s8tns.js";import{Zi as _}from"./chunk-spxb931p.js";import{createHash as S}from"node:crypto";import{constants as A,promises as B}from"node:fs";import N from"node:os";import F from"node:path";import{Mutex as w}from"async-mutex";import{LRUCache as k}from"lru-cache";import E from"write-file-atomic";var X=1,j=65536,T=1048576,z=100,R=64;function t(q){return q.state==="trusted"||q.state==="not_required"}function K(q){return q!==null&&typeof q==="object"&&!Array.isArray(q)}function V(q,Q=2048){return q.length<=Q?q:`${q.slice(0,Q-1)}…`}function M(q){if(typeof q!=="string"||!q.trim())return;try{let Q=new URL(q);return V(`${Q.origin}${Q.pathname}`)}catch{return V(q)}}function D(q){return Array.isArray(q)?q.filter((Q)=>typeof Q==="string"):[]}function m(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.type==="string"?$.type:"unknown",G=typeof $.command==="string"?$.command:void 0,J=D($.args),L=H==="stdio"?V([G,...J].filter(Boolean).join(" ")):M($.url);return{kind:"mcp",name:`${Q} (${H})`,...L?{target:L}:{}}})}function g(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.command==="string"?V($.command):void 0,G=K($.extensionToLanguage)?Object.keys($.extensionToLanguage).slice(0,12).join(", "):"unknown extensions";return{kind:"lsp",name:`${Q} (${G})`,...H?{target:H}:{}}})}function P(q){if(!Array.isArray(q))return[];return q.slice(0,z).flatMap((Q)=>{if(!K(Q))return[];let Z=typeof Q.id==="string"?Q.id:"unnamed",$=typeof Q.provider==="string"?Q.provider:"unknown",H=typeof Q.model==="string"?Q.model:"unknown",G=K(Q.overrides)?Q.overrides:{},J=M(G.baseUrl);return[{kind:"model",name:`${Z}: ${$}/${H}`,...J?{target:J}:{}}]})}function y(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.wireApi==="string"?$.wireApi:"unknown",G=M($.baseUrl);return{kind:"model",name:`${Q} (${H})`,...G?{target:G}:{}}})}function f(q){if(!K(q))return[];let Q=[];for(let Z of["allow","ask","deny"])for(let $ of D(q[Z]).slice(0,z))Q.push({kind:"permission",name:`${Z}: ${V($,512)}`});return Q}function h(q){let Q=[...m(q.mcpServers),...g(q.lspServers),...P(q.models),...y(q.modelProviders),...f(q.permissions)];if(K(q.env))for(let Z of Object.keys(q.env).slice(0,z))Q.push({kind:"environment",name:Z});if(typeof q.permissionMode==="string")Q.push({kind:"permission",name:`permissionMode: ${q.permissionMode}`});return Q}function v(q){return q!=="hooks"&&q!=="disableAllHooks"}function l(q){return S("sha256").update(q).digest("hex")}function p(q,Q){let Z=F.relative(q,Q);return Z===""||!Z.startsWith(`..${F.sep}`)&&Z!==".."&&!F.isAbsolute(Z)}class x{storeDir;static instance=null;mutex=new w;statusCache=new k({max:R});constructor(q=F.join(_(),"workspace-trust")){this.storeDir=q}static getInstance(){if(!x.instance)x.instance=new x;return x.instance}static resetInstance(){x.instance=null}async getStatus(q){let Q=await C(q),Z;try{Z=await this.discoverSensitiveSources(Q.projectPath)}catch(Y){let O={...Q,state:"error",sensitiveSources:0,sources:[],decision:"undecided",error:Y instanceof Error?Y.message:"Workspace trust review failed"};return this.cacheStatus(q,O),O}if(Z.length===0){let Y={...Q,state:"not_required",sensitiveSources:0,sources:Z,decision:"undecided"};return this.cacheStatus(q,Y),Y}let $;try{$=await this.readDecisions()}catch(Y){let O={...Q,state:"error",sensitiveSources:Z.length,sources:Z,decision:"undecided",error:Y instanceof Error?Y.message:"Workspace trust store is unavailable"};return this.cacheStatus(q,O),O}let H=$.filter((Y)=>p(Y.path,Q.trustRoot)),G=Math.max(-1,...H.map((Y)=>Y.path.split(F.sep).length)),J=H.filter((Y)=>Y.path.split(F.sep).length===G),L=J.length>0&&J.every((Y)=>Y.trusted),U=J[0],b=U?.path===Q.trustRoot,W={...Q,state:L?"trusted":"untrusted",sensitiveSources:Z.length,sources:Z,decision:U?b?U.trusted?"trusted":"untrusted":"inherited":"undecided",...U?.decidedAt?{decidedAt:U.decidedAt}:{},...!b&&U?.path?{inheritedFrom:U.path}:{}};return this.cacheStatus(q,W),W}cacheStatus(q,Q){this.statusCache.set(F.resolve(q),Q),this.statusCache.set(Q.projectPath,Q)}getCachedStatus(q){return this.statusCache.get(F.resolve(q))}isTrustedCached(q){return this.getCachedStatus(q)?.state==="trusted"}getCacheStats(){return{capacity:R,entries:this.statusCache.size}}async trust(q){return this.recordDecision(q,!0)}async revoke(q){return this.recordDecision(q,!1)}async recordDecision(q,Q){return this.mutex.runExclusive(async()=>{await I(q);let Z=await C(q);await this.assertSafeTrustRoot(Z);let $={version:X,path:Z.trustRoot,trusted:Q,decidedAt:new Date().toISOString()};return await this.writeDecision($),this.statusCache.clear(),this.getStatus(q)})}async assertSafeTrustRoot(q){let Q=F.parse(q.trustRoot).root,Z=await B.realpath(N.homedir()).catch(()=>F.resolve(N.homedir()));if(!F.isAbsolute(q.trustRoot)||q.trustRoot===Q||q.trustRoot===Z)throw Error("Refusing to trust the filesystem root or user home directory")}async discoverSensitiveSources(q){let Q=[],Z=await this.reviewPackageScripts(q);if(Z)Q.push(Z);for(let[$,H]of[[".blade/config.json","config"],[".blade/settings.json","settings"],[".blade/settings.local.json","settings"]]){let G=await this.reviewConfigFile(q,$,H);if(G)Q.push(G)}for(let $ of[".blade/plugins",".claude/plugins"]){let H=await this.reviewResourceDirectory(q,$,"plugins","plugin");if(H)Q.push(H)}for(let $ of[".blade/commands",".claude/commands"]){let H=await this.reviewResourceDirectory(q,$,"commands","command");if(H)Q.push(H)}for(let[$,H,G]of[[".blade/skills","skills","skill"],[".claude/skills","skills","skill"],[".blade/agents","agents","agent"],[".claude/agents","agents","agent"]]){let J=await this.reviewResourceDirectory(q,$,H,G);if(J)Q.push(J)}for(let $ of["CLAUDE.md","AGENTS.md","BLADE.md"]){let H=await this.reviewInstructionFile(q,$);if(H)Q.push(H)}return Q}async reviewPackageScripts(q){let Q=F.join(q,"package.json"),Z;try{Z=await B.stat(Q)}catch(J){if(J.code==="ENOENT")return;throw J}if(!Z.isFile())return;if(Z.size>T)throw Error("package.json exceeds the 1 MiB workspace review limit");let $;try{$=JSON.parse(await B.readFile(Q,"utf8"))}catch{return{path:"package.json",kind:"package",keys:[],effects:[],warning:"Invalid package.json; project scripts will remain blocked"}}if(!K($)||!K($.scripts))return;let H=$.scripts,G=Object.keys(H).filter((J)=>typeof H[J]==="string").sort().slice(0,z);if(G.length===0)return;return{path:"package.json",kind:"package",keys:G,effects:G.map((J)=>({kind:"command",name:`package script: ${J}`}))}}async reviewInstructionFile(q,Q){try{if(!(await B.stat(F.join(q,Q))).isFile())return}catch(Z){if(Z.code==="ENOENT")return;throw Z}return{path:Q,kind:"instructions",keys:[Q],effects:[{kind:"instruction",name:Q}]}}async reviewConfigFile(q,Q,Z){let $=F.join(q,Q),H;try{H=await B.stat($)}catch(b){if(b.code==="ENOENT")return;throw b}if(!H.isFile())return;if(H.size>T)throw Error(`${Q} exceeds the 1 MiB workspace review limit`);let G;try{G=JSON.parse(await B.readFile($,"utf8"))}catch{return{path:Q,kind:Z,keys:[],effects:[],warning:"Invalid JSON; the file will remain blocked"}}if(!K(G))return{path:Q,kind:Z,keys:[],effects:[],warning:"Configuration root is not an object"};let J=Object.keys(G).filter(v).sort();if(J.length===0)return;let L=h(G),U=new Set(["mcpServers","lspServers","models","modelProviders","permissions","env","permissionMode"]);for(let b of J)if(!U.has(b))L.push({kind:"configuration",name:b});return{path:Q,kind:Z,keys:J,effects:L}}async reviewResourceDirectory(q,Q,Z,$){let H=F.join(q,Q),G;try{G=await B.readdir(H,{withFileTypes:!0})}catch(L){if(L.code==="ENOENT")return;throw L}let J=G.filter((L)=>Z==="plugins"||Z==="skills"?L.isDirectory()||L.isSymbolicLink():L.isFile()||L.isDirectory()||L.isSymbolicLink()).slice(0,z);if(J.length===0)return;return{path:Q,kind:Z,keys:J.map((L)=>L.name),effects:J.map((L)=>({kind:$,name:L.name}))}}async readDecisions(){let q;try{q=await B.lstat(this.storeDir)}catch($){if($.code==="ENOENT")return[];throw $}if(!q.isDirectory()||q.isSymbolicLink())throw Error("Workspace trust store must be a regular directory");if(process.getuid&&q.uid!==process.getuid())throw Error("Workspace trust store must be owned by the current user");if((q.mode&511)!==448)throw Error("Workspace trust store permissions must be 0700");let Q=await B.readdir(this.storeDir,{withFileTypes:!0}),Z=[];for(let $ of Q){if(!$.name.endsWith(".json"))continue;if(!$.isFile())throw Error("Workspace trust store entries must be regular files");Z.push(await this.readDecision(F.join(this.storeDir,$.name)))}return Z}async readDecision(q){let Q;try{Q=await B.open(q,A.O_RDONLY|A.O_NOFOLLOW)}catch{throw Error("Workspace trust decision must be a regular file")}try{let Z=await Q.stat();if(!Z.isFile()||Z.size>j)throw Error("Workspace trust decision is invalid");if(process.getuid&&Z.uid!==process.getuid())throw Error("Workspace trust decisions must be owned by the current user");if((Z.mode&511)!==384)throw Error("Workspace trust decision permissions must be 0600");let $=JSON.parse(await Q.readFile("utf8"));if(!K($)||$.version!==X||typeof $.path!=="string"||!F.isAbsolute($.path)||typeof $.trusted!=="boolean"||typeof $.decidedAt!=="string"||!Number.isFinite(Date.parse($.decidedAt))||Object.keys($).some((H)=>H!=="version"&&H!=="path"&&H!=="trusted"&&H!=="decidedAt"))throw Error("Workspace trust decision schema is invalid");return{version:X,path:$.path,trusted:$.trusted,decidedAt:$.decidedAt}}finally{await Q.close()}}async writeDecision(q){await this.ensureStoreDirectoryForWrite();let Q=F.join(this.storeDir,`${l(q.path)}.json`);try{let Z=await B.lstat(Q);if(!Z.isFile()||Z.isSymbolicLink())throw Error("Workspace trust decision must be a regular file");if(process.getuid&&Z.uid!==process.getuid())throw Error("Workspace trust decisions must be owned by the current user");if((Z.mode&511)!==384)throw Error("Workspace trust decision permissions must be 0600")}catch(Z){if(Z.code!=="ENOENT")throw Z}await E(Q,`${JSON.stringify(q,null,2)}
+import{$i as I,_i as C}from"./chunk-6kwg4hcv.js";import{ij as _}from"./chunk-9xzw649r.js";import{createHash as S}from"node:crypto";import{constants as A,promises as B}from"node:fs";import N from"node:os";import F from"node:path";import{Mutex as w}from"async-mutex";import{LRUCache as k}from"lru-cache";import E from"write-file-atomic";var X=1,j=65536,T=1048576,z=100,R=64;function t(q){return q.state==="trusted"||q.state==="not_required"}function K(q){return q!==null&&typeof q==="object"&&!Array.isArray(q)}function V(q,Q=2048){return q.length<=Q?q:`${q.slice(0,Q-1)}…`}function M(q){if(typeof q!=="string"||!q.trim())return;try{let Q=new URL(q);return V(`${Q.origin}${Q.pathname}`)}catch{return V(q)}}function D(q){return Array.isArray(q)?q.filter((Q)=>typeof Q==="string"):[]}function m(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.type==="string"?$.type:"unknown",G=typeof $.command==="string"?$.command:void 0,J=D($.args),L=H==="stdio"?V([G,...J].filter(Boolean).join(" ")):M($.url);return{kind:"mcp",name:`${Q} (${H})`,...L?{target:L}:{}}})}function g(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.command==="string"?V($.command):void 0,G=K($.extensionToLanguage)?Object.keys($.extensionToLanguage).slice(0,12).join(", "):"unknown extensions";return{kind:"lsp",name:`${Q} (${G})`,...H?{target:H}:{}}})}function P(q){if(!Array.isArray(q))return[];return q.slice(0,z).flatMap((Q)=>{if(!K(Q))return[];let Z=typeof Q.id==="string"?Q.id:"unnamed",$=typeof Q.provider==="string"?Q.provider:"unknown",H=typeof Q.model==="string"?Q.model:"unknown",G=K(Q.overrides)?Q.overrides:{},J=M(G.baseUrl);return[{kind:"model",name:`${Z}: ${$}/${H}`,...J?{target:J}:{}}]})}function y(q){if(!K(q))return[];return Object.entries(q).slice(0,z).map(([Q,Z])=>{let $=K(Z)?Z:{},H=typeof $.wireApi==="string"?$.wireApi:"unknown",G=M($.baseUrl);return{kind:"model",name:`${Q} (${H})`,...G?{target:G}:{}}})}function f(q){if(!K(q))return[];let Q=[];for(let Z of["allow","ask","deny"])for(let $ of D(q[Z]).slice(0,z))Q.push({kind:"permission",name:`${Z}: ${V($,512)}`});return Q}function h(q){let Q=[...m(q.mcpServers),...g(q.lspServers),...P(q.models),...y(q.modelProviders),...f(q.permissions)];if(K(q.env))for(let Z of Object.keys(q.env).slice(0,z))Q.push({kind:"environment",name:Z});if(typeof q.permissionMode==="string")Q.push({kind:"permission",name:`permissionMode: ${q.permissionMode}`});return Q}function v(q){return q!=="hooks"&&q!=="disableAllHooks"}function l(q){return S("sha256").update(q).digest("hex")}function p(q,Q){let Z=F.relative(q,Q);return Z===""||!Z.startsWith(`..${F.sep}`)&&Z!==".."&&!F.isAbsolute(Z)}class x{storeDir;static instance=null;mutex=new w;statusCache=new k({max:R});constructor(q=F.join(_(),"workspace-trust")){this.storeDir=q}static getInstance(){if(!x.instance)x.instance=new x;return x.instance}static resetInstance(){x.instance=null}async getStatus(q){let Q=await C(q),Z;try{Z=await this.discoverSensitiveSources(Q.projectPath)}catch(Y){let O={...Q,state:"error",sensitiveSources:0,sources:[],decision:"undecided",error:Y instanceof Error?Y.message:"Workspace trust review failed"};return this.cacheStatus(q,O),O}if(Z.length===0){let Y={...Q,state:"not_required",sensitiveSources:0,sources:Z,decision:"undecided"};return this.cacheStatus(q,Y),Y}let $;try{$=await this.readDecisions()}catch(Y){let O={...Q,state:"error",sensitiveSources:Z.length,sources:Z,decision:"undecided",error:Y instanceof Error?Y.message:"Workspace trust store is unavailable"};return this.cacheStatus(q,O),O}let H=$.filter((Y)=>p(Y.path,Q.trustRoot)),G=Math.max(-1,...H.map((Y)=>Y.path.split(F.sep).length)),J=H.filter((Y)=>Y.path.split(F.sep).length===G),L=J.length>0&&J.every((Y)=>Y.trusted),U=J[0],b=U?.path===Q.trustRoot,W={...Q,state:L?"trusted":"untrusted",sensitiveSources:Z.length,sources:Z,decision:U?b?U.trusted?"trusted":"untrusted":"inherited":"undecided",...U?.decidedAt?{decidedAt:U.decidedAt}:{},...!b&&U?.path?{inheritedFrom:U.path}:{}};return this.cacheStatus(q,W),W}cacheStatus(q,Q){this.statusCache.set(F.resolve(q),Q),this.statusCache.set(Q.projectPath,Q)}getCachedStatus(q){return this.statusCache.get(F.resolve(q))}isTrustedCached(q){return this.getCachedStatus(q)?.state==="trusted"}getCacheStats(){return{capacity:R,entries:this.statusCache.size}}async trust(q){return this.recordDecision(q,!0)}async revoke(q){return this.recordDecision(q,!1)}async recordDecision(q,Q){return this.mutex.runExclusive(async()=>{await I(q);let Z=await C(q);await this.assertSafeTrustRoot(Z);let $={version:X,path:Z.trustRoot,trusted:Q,decidedAt:new Date().toISOString()};return await this.writeDecision($),this.statusCache.clear(),this.getStatus(q)})}async assertSafeTrustRoot(q){let Q=F.parse(q.trustRoot).root,Z=await B.realpath(N.homedir()).catch(()=>F.resolve(N.homedir()));if(!F.isAbsolute(q.trustRoot)||q.trustRoot===Q||q.trustRoot===Z)throw Error("Refusing to trust the filesystem root or user home directory")}async discoverSensitiveSources(q){let Q=[],Z=await this.reviewPackageScripts(q);if(Z)Q.push(Z);for(let[$,H]of[[".blade/config.json","config"],[".blade/settings.json","settings"],[".blade/settings.local.json","settings"]]){let G=await this.reviewConfigFile(q,$,H);if(G)Q.push(G)}for(let $ of[".blade/plugins",".claude/plugins"]){let H=await this.reviewResourceDirectory(q,$,"plugins","plugin");if(H)Q.push(H)}for(let $ of[".blade/commands",".claude/commands"]){let H=await this.reviewResourceDirectory(q,$,"commands","command");if(H)Q.push(H)}for(let[$,H,G]of[[".blade/skills","skills","skill"],[".claude/skills","skills","skill"],[".blade/agents","agents","agent"],[".claude/agents","agents","agent"]]){let J=await this.reviewResourceDirectory(q,$,H,G);if(J)Q.push(J)}for(let $ of["CLAUDE.md","AGENTS.md","BLADE.md"]){let H=await this.reviewInstructionFile(q,$);if(H)Q.push(H)}return Q}async reviewPackageScripts(q){let Q=F.join(q,"package.json"),Z;try{Z=await B.stat(Q)}catch(J){if(J.code==="ENOENT")return;throw J}if(!Z.isFile())return;if(Z.size>T)throw Error("package.json exceeds the 1 MiB workspace review limit");let $;try{$=JSON.parse(await B.readFile(Q,"utf8"))}catch{return{path:"package.json",kind:"package",keys:[],effects:[],warning:"Invalid package.json; project scripts will remain blocked"}}if(!K($)||!K($.scripts))return;let H=$.scripts,G=Object.keys(H).filter((J)=>typeof H[J]==="string").sort().slice(0,z);if(G.length===0)return;return{path:"package.json",kind:"package",keys:G,effects:G.map((J)=>({kind:"command",name:`package script: ${J}`}))}}async reviewInstructionFile(q,Q){try{if(!(await B.stat(F.join(q,Q))).isFile())return}catch(Z){if(Z.code==="ENOENT")return;throw Z}return{path:Q,kind:"instructions",keys:[Q],effects:[{kind:"instruction",name:Q}]}}async reviewConfigFile(q,Q,Z){let $=F.join(q,Q),H;try{H=await B.stat($)}catch(b){if(b.code==="ENOENT")return;throw b}if(!H.isFile())return;if(H.size>T)throw Error(`${Q} exceeds the 1 MiB workspace review limit`);let G;try{G=JSON.parse(await B.readFile($,"utf8"))}catch{return{path:Q,kind:Z,keys:[],effects:[],warning:"Invalid JSON; the file will remain blocked"}}if(!K(G))return{path:Q,kind:Z,keys:[],effects:[],warning:"Configuration root is not an object"};let J=Object.keys(G).filter(v).sort();if(J.length===0)return;let L=h(G),U=new Set(["mcpServers","lspServers","models","modelProviders","permissions","env","permissionMode"]);for(let b of J)if(!U.has(b))L.push({kind:"configuration",name:b});return{path:Q,kind:Z,keys:J,effects:L}}async reviewResourceDirectory(q,Q,Z,$){let H=F.join(q,Q),G;try{G=await B.readdir(H,{withFileTypes:!0})}catch(L){if(L.code==="ENOENT")return;throw L}let J=G.filter((L)=>Z==="plugins"||Z==="skills"?L.isDirectory()||L.isSymbolicLink():L.isFile()||L.isDirectory()||L.isSymbolicLink()).slice(0,z);if(J.length===0)return;return{path:Q,kind:Z,keys:J.map((L)=>L.name),effects:J.map((L)=>({kind:$,name:L.name}))}}async readDecisions(){let q;try{q=await B.lstat(this.storeDir)}catch($){if($.code==="ENOENT")return[];throw $}if(!q.isDirectory()||q.isSymbolicLink())throw Error("Workspace trust store must be a regular directory");if(process.getuid&&q.uid!==process.getuid())throw Error("Workspace trust store must be owned by the current user");if((q.mode&511)!==448)throw Error("Workspace trust store permissions must be 0700");let Q=await B.readdir(this.storeDir,{withFileTypes:!0}),Z=[];for(let $ of Q){if(!$.name.endsWith(".json"))continue;if(!$.isFile())throw Error("Workspace trust store entries must be regular files");Z.push(await this.readDecision(F.join(this.storeDir,$.name)))}return Z}async readDecision(q){let Q;try{Q=await B.open(q,A.O_RDONLY|A.O_NOFOLLOW)}catch{throw Error("Workspace trust decision must be a regular file")}try{let Z=await Q.stat();if(!Z.isFile()||Z.size>j)throw Error("Workspace trust decision is invalid");if(process.getuid&&Z.uid!==process.getuid())throw Error("Workspace trust decisions must be owned by the current user");if((Z.mode&511)!==384)throw Error("Workspace trust decision permissions must be 0600");let $=JSON.parse(await Q.readFile("utf8"));if(!K($)||$.version!==X||typeof $.path!=="string"||!F.isAbsolute($.path)||typeof $.trusted!=="boolean"||typeof $.decidedAt!=="string"||!Number.isFinite(Date.parse($.decidedAt))||Object.keys($).some((H)=>H!=="version"&&H!=="path"&&H!=="trusted"&&H!=="decidedAt"))throw Error("Workspace trust decision schema is invalid");return{version:X,path:$.path,trusted:$.trusted,decidedAt:$.decidedAt}}finally{await Q.close()}}async writeDecision(q){await this.ensureStoreDirectoryForWrite();let Q=F.join(this.storeDir,`${l(q.path)}.json`);try{let Z=await B.lstat(Q);if(!Z.isFile()||Z.isSymbolicLink())throw Error("Workspace trust decision must be a regular file");if(process.getuid&&Z.uid!==process.getuid())throw Error("Workspace trust decisions must be owned by the current user");if((Z.mode&511)!==384)throw Error("Workspace trust decision permissions must be 0600")}catch(Z){if(Z.code!=="ENOENT")throw Z}await E(Q,`${JSON.stringify(q,null,2)}
 `,{mode:384}),await B.chmod(Q,384)}async ensureStoreDirectoryForWrite(){try{let q=await B.lstat(this.storeDir);if(!q.isDirectory()||q.isSymbolicLink())throw Error("Workspace trust store must be a regular directory");if(process.getuid&&q.uid!==process.getuid())throw Error("Workspace trust store must be owned by the current user");if((q.mode&511)!==448)throw Error("Workspace trust store permissions must be 0700")}catch(q){if(q.code!=="ENOENT")throw q;await B.mkdir(this.storeDir,{recursive:!0,mode:448}),await B.chmod(this.storeDir,448)}}}
-export{R as Mi,t as Ni,x as Oi};
+export{R as Xi,t as Yi,x as Zi};

package/dist/{chunk-nz4a0mep.js → chunk-1s7gj546.js}

@@ -1,4 +1,4 @@
-import{Qe as N}from"./chunk-32z8gkex.js";import{ug as $}from"./chunk-ne9dyvcc.js";import{Th as _}from"./chunk-kzzty3v5.js";import{ri as Y,ti as Z}from"./chunk-w4xqaw4h.js";function X(){if(process.stdin.isTTY&&typeof process.stdin.setRawMode==="function")try{process.stdin.setRawMode(!1)}catch{}process.stdout.write("\x1B[<u"),process.stdout.write("\x1B[>4;0m"),process.stdout.write("\x1B[?2004l"),process.stdout.write("\x1B[?1004l"),process.stdout.write("\x1B[?1l\x1B>"),process.stdout.write("\x1B[?25h"),process.stdout.write("\x1B[0m")}var z=Z("Service");function E(b){switch(b){case"SIGINT":return"ctrl_c";case"esc":return"esc";case"uncaughtException":case"unhandledRejection":return"error";case"SIGTERM":case"normal":default:return"user_exit"}}class B{static instance=null;cleanupHandlers=[];isShuttingDown=!1;initialized=!1;lastSigintTime=0;SIGINT_DOUBLE_CLICK_WINDOW=3000;constructor(){}static getInstance(){if(!B.instance)B.instance=new B;return B.instance}initialize(){if(this.initialized){z.debug("[GracefulShutdown] 已初始化，跳过重复初始化");return}process.on("uncaughtException",(b)=>{this.handleFatalError("uncaughtException",b)}),process.on("unhandledRejection",(b)=>{let q=b instanceof Error?b:Error(String(b));this.handleFatalError("unhandledRejection",q)}),process.on("SIGTERM",()=>{z.info("[GracefulShutdown] 收到 SIGTERM 信号"),this.shutdown("SIGTERM",0)}),process.on("SIGINT",()=>{let b=Date.now();if(b-this.lastSigintTime<this.SIGINT_DOUBLE_CLICK_WINDOW)z.info("[GracefulShutdown] 收到第二次 SIGINT 信号，执行退出"),this.shutdown("SIGINT",0);else z.info("[GracefulShutdown] 收到第一次 SIGINT 信号，再按一次退出"),this.lastSigintTime=b,console.log(`
+import{Qe as N}from"./chunk-t7ymt22d.js";import{ug as $}from"./chunk-fnsq6hk0.js";import{ci as _}from"./chunk-s6562rsq.js";import{Ci as Y,Ei as Z}from"./chunk-68sf54n4.js";function X(){if(process.stdin.isTTY&&typeof process.stdin.setRawMode==="function")try{process.stdin.setRawMode(!1)}catch{}process.stdout.write("\x1B[<u"),process.stdout.write("\x1B[>4;0m"),process.stdout.write("\x1B[?2004l"),process.stdout.write("\x1B[?1004l"),process.stdout.write("\x1B[?1l\x1B>"),process.stdout.write("\x1B[?25h"),process.stdout.write("\x1B[0m")}var z=Z("Service");function E(b){switch(b){case"SIGINT":return"ctrl_c";case"esc":return"esc";case"uncaughtException":case"unhandledRejection":return"error";case"SIGTERM":case"normal":default:return"user_exit"}}class B{static instance=null;cleanupHandlers=[];isShuttingDown=!1;initialized=!1;lastSigintTime=0;SIGINT_DOUBLE_CLICK_WINDOW=3000;constructor(){}static getInstance(){if(!B.instance)B.instance=new B;return B.instance}initialize(){if(this.initialized){z.debug("[GracefulShutdown] 已初始化，跳过重复初始化");return}process.on("uncaughtException",(b)=>{this.handleFatalError("uncaughtException",b)}),process.on("unhandledRejection",(b)=>{let q=b instanceof Error?b:Error(String(b));this.handleFatalError("unhandledRejection",q)}),process.on("SIGTERM",()=>{z.info("[GracefulShutdown] 收到 SIGTERM 信号"),this.shutdown("SIGTERM",0)}),process.on("SIGINT",()=>{let b=Date.now();if(b-this.lastSigintTime<this.SIGINT_DOUBLE_CLICK_WINDOW)z.info("[GracefulShutdown] 收到第二次 SIGINT 信号，执行退出"),this.shutdown("SIGINT",0);else z.info("[GracefulShutdown] 收到第一次 SIGINT 信号，再按一次退出"),this.lastSigintTime=b,console.log(`
 再按一次 Ctrl+C 退出
 `)}),this.initialized=!0,z.debug("[GracefulShutdown] 全局错误处理器已初始化")}registerCleanup(b){return this.cleanupHandlers.push(b),z.debug(`[GracefulShutdown] 注册清理函数，当前共 ${this.cleanupHandlers.length} 个`),()=>{let q=this.cleanupHandlers.indexOf(b);if(q!==-1)this.cleanupHandlers.splice(q,1),z.debug(`[GracefulShutdown] 取消注册清理函数，剩余 ${this.cleanupHandlers.length} 个`)}}handleFatalError(b,q){if(this.isShuttingDown){console.error(`[GracefulShutdown] 退出过程中发生额外错误 (${b}):`,q);return}if(console.error(""),console.error("═".repeat(60)),console.error(`Uncaught error (${b})`),console.error("═".repeat(60)),console.error(""),console.error("错误信息:",q.message),console.error(""),q.stack)console.error("堆栈跟踪:"),console.error(q.stack);console.error(""),console.error("═".repeat(60)),console.error(""),this.shutdown(b,1)}async shutdown(b,q=0){if(this.isShuttingDown){z.debug("[GracefulShutdown] 已在退出过程中，跳过重复退出");return}this.isShuttingDown=!0;try{N().command.actions.abort("process-shutdown")}catch(A){z.warn("[GracefulShutdown] Failed to abort the active command",A)}z.info(`[GracefulShutdown] 开始优雅退出 (原因: ${b})`);let Q=setTimeout(()=>{X(),process.exit(q)},5000);Q.unref?.();let U=4000,K;try{await Promise.race([this.runCleanupHandlers(),new Promise((A,J)=>{K=setTimeout(()=>{J(Error(`清理超时 (${U}ms)`))},U),K.unref?.()})])}catch(A){console.error("[GracefulShutdown] 清理过程中发生错误:",A)}finally{if(K)clearTimeout(K)}try{let A=$.getInstance(),J=N(),V=J.session?.sessionId||"unknown",W=J.session?.workspaceRoot||_();if(A.isEnabled(W,V)){let v=J.config?.config?.permissionMode||"default";await A.executeSessionEndHooks(E(b),{projectDir:W,sessionId:V,permissionMode:v})}}catch(A){console.error("[GracefulShutdown] SessionEnd hooks 执行失败:",A)}try{await Y()}catch{}clearTimeout(Q),X(),setTimeout(()=>{process.exit(q)},100)}async runCleanupHandlers(){let b=[...this.cleanupHandlers].reverse();for(let q of b)try{let F=q();if(F instanceof Promise)await F}catch(F){console.error("[GracefulShutdown] 清理函数执行失败:",F)}}isExiting(){return this.isShuttingDown}reset(){this.isShuttingDown=!1,this.cleanupHandlers=[],this.initialized=!1}}var O=()=>{return B.getInstance()},y=(b)=>{return O().registerCleanup(b)},j=()=>{O().initialize()},C=(b=0)=>{O().shutdown("normal",b)};
 export{O as ye,y as ze,j as Ae,C as Be};

package/dist/{chunk-4x0xm63t.js → chunk-1zqaq7vw.js}

@@ -1,4 +1,4 @@
-import{ua as F,wa as L}from"./chunk-6bvc4z1c.js";import{Kd as $,Md as B,Ud as Q}from"./chunk-e7va75fw.js";import{Wf as y}from"./chunk-wvq95qx6.js";import{Th as V}from"./chunk-kzzty3v5.js";async function j(){await y(V())}async function I(b){let q=b.message||b._?.[0];if(typeof q==="string"&&q.trim())return q;let z=b.stdin??process.stdin;if(!z.isTTY){let G=[];for await(let K of z)G.push(K);return Buffer.concat(G).toString("utf-8").trim()}if(b.defaultMessage!==void 0)return b.defaultMessage;throw Error("No input provided")}async function M(b){let q=b.message||b._?.[0];if(typeof q==="string"&&q.trim())return q;let z=b.stdin??process.stdin;if(z.isTTY)return;let G=[];for await(let Z of z)G.push(Buffer.isBuffer(Z)?Z:Buffer.from(Z));return Buffer.concat(G).toString("utf-8").trim()||void 0}async function R(b){if(!F(b))return{mode:"agent",content:b};let q=await L(b,{cwd:V(),surface:"headless",workspaceRoot:V()});if(!q.success)return{mode:"output",content:`Error: ${q.error||"未知错误"}`,exitCode:1};let z=q.data;if(z?.action==="invoke_skill"){let{skillName:G,skillArgs:K}=z;return{mode:"agent",content:K?`Please use the "${G}" skill to help me with: ${K}`:`Please use the "${G}" skill.`}}if(z?.action==="invoke_custom_command"||z?.action==="invoke_plugin_command"){let G=z.processedContent;return{mode:"agent",content:`# Custom Command: /${z.commandName}
+import{ua as F,wa as L}from"./chunk-24teyrer.js";import{Kd as $,Md as B,Ud as Q}from"./chunk-ay1w6zhg.js";import{Wf as y}from"./chunk-g6gp6m3m.js";import{ci as V}from"./chunk-s6562rsq.js";async function j(){await y(V())}async function I(b){let q=b.message||b._?.[0];if(typeof q==="string"&&q.trim())return q;let z=b.stdin??process.stdin;if(!z.isTTY){let G=[];for await(let K of z)G.push(K);return Buffer.concat(G).toString("utf-8").trim()}if(b.defaultMessage!==void 0)return b.defaultMessage;throw Error("No input provided")}async function M(b){let q=b.message||b._?.[0];if(typeof q==="string"&&q.trim())return q;let z=b.stdin??process.stdin;if(z.isTTY)return;let G=[];for await(let Z of z)G.push(Buffer.isBuffer(Z)?Z:Buffer.from(Z));return Buffer.concat(G).toString("utf-8").trim()||void 0}async function R(b){if(!F(b))return{mode:"agent",content:b};let q=await L(b,{cwd:V(),surface:"headless",workspaceRoot:V()});if(!q.success)return{mode:"output",content:`Error: ${q.error||"未知错误"}`,exitCode:1};let z=q.data;if(z?.action==="invoke_skill"){let{skillName:G,skillArgs:K}=z;return{mode:"agent",content:K?`Please use the "${G}" skill to help me with: ${K}`:`Please use the "${G}" skill.`}}if(z?.action==="invoke_custom_command"||z?.action==="invoke_plugin_command"){let G=z.processedContent;return{mode:"agent",content:`# Custom Command: /${z.commandName}
 
 ${G}`}}return{mode:"output",content:q.content||q.message||"",exitCode:0}}import{readFile as D,stat as H}from"node:fs/promises";import J from"node:path";function x(b,q){let z;try{z=JSON.parse(b)}catch(G){throw Error(`Invalid JSON output schema from ${q}`,{cause:G})}return B(z).schema}async function _(b){if(b.jsonSchema!==void 0&&b.outputSchema!==void 0)throw Error("--json-schema cannot be combined with --output-schema");if(b.jsonSchema!==void 0)return x(b.jsonSchema,"--json-schema");if(b.outputSchema===void 0)return;let q=J.resolve(b.outputSchema),z=await H(q);if(!z.isFile())throw Error(`Output schema path is not a regular file: ${q}`);if(z.size>$)throw Error(`Output schema exceeds ${$} bytes: ${q}`);return x(await D(q,"utf8"),q)}function N(b){if(!(b instanceof Error))return!1;return b.message.includes("未找到会话")||b.message.includes("ENOENT")||b.message.includes("no such file")}async function W(b){try{return await Q.loadSessionModelContext(b,V())}catch(q){if(N(q))return null;throw q}}async function C(b){if(b.resume===!0||b.resume==="true")throw Error("--resume without a session ID is only supported in interactive UI mode");if(typeof b.resume==="string"&&b.resume.length>0){if(b.forkSession){let G=V(),K=await Q.forkSession(b.resume,{newSessionId:b.sessionId,sourceProjectPath:G,targetProjectPath:G});return{...K,messages:await Q.loadSessionModelContext(K.sessionId,G)}}let[q,z]=await Promise.all([Q.loadSessionModelContext(b.resume),Q.findSessionMetadata(b.resume)]);return{sessionId:b.resume,messages:q,metadata:z}}if(b.continue){let q=b.forkSession?await Q.listSessions({cwd:V()}):await Q.listSessions();if(q.length>0){let z=q[0].sessionId;if(b.forkSession){let G=V(),K=await Q.forkSession(z,{newSessionId:b.sessionId,sourceProjectPath:G,targetProjectPath:G});return{...K,messages:await Q.loadSessionModelContext(K.sessionId,G)}}return{sessionId:z,messages:await Q.loadSessionModelContext(z),metadata:q[0]}}if(b.forkSession)throw Error("Cannot fork: no sessions are available to continue")}if(b.sessionId){let q=await W(b.sessionId);return{sessionId:b.sessionId,messages:q??[],...q?{metadata:await Q.findSessionMetadata(b.sessionId,V())}:{}}}return{sessionId:`${b.fallbackSessionPrefix}-${Date.now()}`,messages:[]}}
 export{j as m,I as n,M as o,R as p,_ as q,C as r};

package/dist/{chunk-2zewxt27.js → chunk-23vx90g5.js}

@@ -1,4 +1,4 @@
-import{m as yH,n as bH,o as IH,p as RH,q as gH,r as kH}from"./chunk-4x0xm63t.js";import{A as KH,B as VH,C as p,D as ZH,y as TH,z as JH}from"./chunk-tg54jbta.js";import{$ as PH,E as XH,Z as GH,aa as FH,ea as EH}from"./chunk-6bvc4z1c.js";import"./chunk-dabq8kdx.js";import"./chunk-fneerm4v.js";import"./chunk-fpjhg6ce.js";import{Hb as UH,Qb as _H,vb as r}from"./chunk-1kbx9es5.js";import"./chunk-sca5q3tt.js";import{Jd as m,Ud as s,ud as jH,yd as xH}from"./chunk-e7va75fw.js";import"./chunk-q265drks.js";import"./chunk-7dykmcjj.js";import{se as zH}from"./chunk-8nsv9gpn.js";import{ue as fH,ve as AH,we as SH}from"./chunk-w6cg2fnz.js";import{xe as MH}from"./chunk-3jqd18d8.js";import"./chunk-twdfyk78.js";import{Xe as WH}from"./chunk-32z8gkex.js";import"./chunk-v508x7cg.js";import"./chunk-ye4wyq1k.js";import"./chunk-kpqdfn9z.js";import"./chunk-b41den40.js";import"./chunk-8qp8v96d.js";import"./chunk-9fntcgem.js";import"./chunk-wvq95qx6.js";import{ig as qH}from"./chunk-0zzh482s.js";import"./chunk-adkpwx6c.js";import"./chunk-85bamng3.js";import"./chunk-ne9dyvcc.js";import"./chunk-2t6b962t.js";import"./chunk-2824tzwn.js";import{Dh as DH}from"./chunk-kz15jy62.js";import{Fh as LH,Hh as H,Ih as $H,Kh as N}from"./chunk-9fgkg1vr.js";import{Oh as i,Ph as o}from"./chunk-pykxe413.js";import{Th as k}from"./chunk-kzzty3v5.js";import"./chunk-9jtjq50j.js";import"./chunk-w4xqaw4h.js";import"./chunk-r6svhe3w.js";import"./chunk-a4dmw23t.js";import"./chunk-5kg2kvbw.js";import"./chunk-ncqagb27.js";import"./chunk-207s8tns.js";import"./chunk-spxb931p.js";import"./chunk-m7b779kd.js";import IJ from"yargs";import{hideBin as RJ}from"yargs/helpers";function v(K,V,Q){if(K.off){K.off(V,Q);return}K.removeListener?.(V,Q)}function dH(K,V){if(!K.once&&!K.on||!K.off&&!K.removeListener)throw Error("Writable returned false without an observable drain contract");return new Promise((Q,X)=>{let J=!1,Z=()=>{v(K,"drain",x),v(K,"error",j),V.removeEventListener("abort",P)},W=(F)=>{if(J)return;J=!0,Z(),F()},x=()=>W(Q),j=(F)=>W(()=>X(F??Error("Writable emitted an error"))),P=()=>W(()=>X(V.reason??Error("Writable drain aborted")));if(V.aborted){P();return}let T=K.once?.bind(K)??K.on?.bind(K);T?.("drain",x),T?.("error",j),V.addEventListener("abort",P,{once:!0})})}async function pH(K,V,Q){if(K.destroyed||K.writableEnded)throw Error("Writable is already closed");if(K.write(V)===!1)await dH(K,Q)}class l{options;queues;sinkErrorListeners=[];failed=!1;closing=!1;handleAbort=()=>{this.fail(new p("aborted","Headless output was aborted",{cause:this.options.signal?.reason}))};constructor(K,V={}){this.options=V;let Q=(X)=>new ZH({maxPendingItems:V.maxPendingItems??JH,maxPendingBytes:V.maxPendingBytes??KH,writeTimeoutMs:V.writeTimeoutMs??VH,sizeOf:(J)=>Buffer.byteLength(J),write:(J,Z)=>pH(K[X],J,Z),onFailure:(J)=>this.fail(J)});if(this.queues={stdout:Q("stdout"),stderr:Q("stderr")},this.observeSinkErrors(K.stdout),K.stderr!==K.stdout)this.observeSinkErrors(K.stderr);if(V.signal?.addEventListener("abort",this.handleAbort,{once:!0}),V.signal?.aborted)this.handleAbort()}write(K,V){return this.queues[K].offer(V).accepted}async flush(){await Promise.all([this.queues.stdout.flush(),this.queues.stderr.flush()])}close(K){if(this.closing||this.failed)return;this.closing=!0,this.options.signal?.removeEventListener("abort",this.handleAbort),this.removeSinkErrorListeners(),this.queues.stdout.close(K),this.queues.stderr.close(K)}stats(){return{stdout:this.queues.stdout.stats(),stderr:this.queues.stderr.stats()}}observeSinkErrors(K){if(!K.on||!K.off&&!K.removeListener)return;let V=(Q)=>{this.fail(new p("write_failed","Headless writable failed",{cause:Q??Error("Writable emitted an error")}))};K.on("error",V),this.sinkErrorListeners.push({writer:K,listener:V})}fail(K){if(this.closing||this.failed)return;this.failed=!0,this.options.signal?.removeEventListener("abort",this.handleAbort),this.removeSinkErrorListeners(),this.queues.stdout.close(K),this.queues.stderr.close(K),this.options.onFailure?.(K)}removeSinkErrorListeners(){for(let{writer:K,listener:V}of this.sinkErrorListeners.splice(0))v(K,"error",V)}}var YH=1;function D(K){return H.Object({event_version:H.Literal(YH),...K})}var vH=D({type:H.Literal("content_delta"),delta:H.String()}),lH=D({type:H.Literal("thinking_delta"),delta:H.String()}),aH=D({type:H.Literal("thinking"),content:H.String()}),iH=D({type:H.Literal("stream_end")}),oH=D({type:H.Literal("content"),content:H.String()}),sH=D({type:H.Literal("structured_output"),output:H.Record(H.String(),H.Unknown()),schema_digest:H.String({pattern:"^[a-f0-9]{64}$"})}),a=N(["readonly","write","execute"]),rH=H.Object({kind:a,scope:N(["global","session"]),queue_position:H.Integer({minimum:1}),in_flight:H.Integer({minimum:0}),limit:H.Integer({minimum:1})}),nH=D({type:H.Literal("tool_start"),tool_name:H.String(),summary:H.String(),target:H.Optional(H.String()),tool_kind:H.Optional(a)}),tH=D({type:H.Literal("tool_progress"),tool_name:H.String(),message:H.String(),progress:H.Optional(H.Number()),total:H.Optional(H.Number()),admission:H.Optional(rH)}),eH=H.Object({auto_backgrounded:H.Literal(!0),background_reason:H.Literal("foreground_budget"),foreground_budget_ms:H.Integer({minimum:1}),shell_id:H.String({minLength:1,maxLength:128,pattern:"^bash_[A-Za-z0-9-]+$"}),pid:H.Optional(H.Integer({minimum:1})),terminal_transport:N(["local","acp"])}),HJ=D({type:H.Literal("tool_result"),tool_name:H.String(),summary:H.String(),target:H.Optional(H.String()),tool_kind:H.Optional(a),success:H.Optional(H.Boolean()),error_type:H.Optional(H.String()),error_message:H.Optional(H.String()),background:H.Optional(eH)}),JJ=D({type:H.Literal("mcp_catalog_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),added:H.Array(H.String()),removed:H.Array(H.String()),updated:H.Array(H.String())}),KJ=D({type:H.Literal("mcp_content_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),content_kind:N(["resources","resource_templates","prompts"]),added:H.Array(H.String()),removed:H.Array(H.String()),updated:H.Array(H.String())}),VJ=D({type:H.Literal("mcp_resource_updated"),revision:H.Integer({minimum:1}),server_name:H.String(),uri:H.String()}),ZJ=D({type:H.Literal("mcp_connection_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),phase:N(["reconnecting","recovered","failed"]),reason:H.String(),attempt:H.Integer({minimum:0}),max_attempts:H.Integer({minimum:0}),next_retry_at:H.Optional(H.Integer({minimum:0})),error:H.Optional(H.String())}),$J=D({type:H.Literal("mcp_log"),revision:H.Integer({minimum:1}),server_name:H.String(),level:N(["debug","info","notice","warning","error","critical","alert","emergency"]),logger:H.Optional(H.String()),message:H.String(),projected_bytes:H.Integer({minimum:0}),data_sha256:H.String(),truncated:H.Boolean(),details_omitted:H.Boolean(),timestamp:H.Integer({minimum:0}),synthetic:H.Optional(H.Boolean())}),qJ=D({type:H.Literal("mcp_instructions_changed"),revision:H.Integer({minimum:0}),server_name:H.String(),action:N(["added","removed"]),reason:N(["snapshot","connection","disconnection"]),text:H.Optional(H.String()),source_bytes:H.Optional(H.Integer({minimum:0})),projected_bytes:H.Optional(H.Integer({minimum:0})),sha256:H.Optional(H.String()),truncated:H.Optional(H.Boolean()),details_omitted:H.Optional(H.Boolean())}),XJ=D({type:H.Literal("mcp_task_changed"),revision:H.Integer({minimum:0}),task_id:H.String(),server_name:H.String(),tool_name:H.String(),status:N(["working","input_required","interrupted","completed","failed","cancelled"]),status_message:H.Optional(H.String()),created_at:H.Integer({minimum:0}),updated_at:H.Integer({minimum:0}),completed_at:H.Optional(H.Integer({minimum:0})),has_result:H.Boolean(),error:H.Optional(H.String())}),YJ=D({type:H.Literal("project_rules_loaded"),files:H.Array(H.Object({id:H.String(),relative_path:H.String(),source:N(["project","local"]),conditional:H.Boolean(),content_sha256:H.String({pattern:"^[a-f0-9]{64}$"})})),trigger_paths:H.Array(H.String()),blocked_write:H.Boolean()}),BJ=D({type:H.Literal("user_shell_started"),execution_id:H.String(),command:H.String(),auxiliary:H.Boolean()}),NJ=D({type:H.Literal("user_shell_output"),execution_id:H.String(),stream:N(["stdout","stderr"]),chunk:H.String(),stream_truncated:H.Boolean()}),QJ=D({type:H.Literal("user_shell_completed"),execution_id:H.String(),message_id:H.String(),status:N(["completed","failed","aborted","timed_out","spawn_error"]),exit_code:H.Union([H.Integer(),H.Null()]),duration_ms:H.Number({minimum:0}),stdout:H.String(),stderr:H.String(),truncated:H.Boolean(),auxiliary:H.Boolean()}),DJ=D({type:H.Literal("phase"),phase:N(["turn","searching","inspecting","target_hit","executing","completed"]),status:N(["ongoing","hit","done"]),message:H.String(),turn:H.Optional(H.Number()),tool_name:H.Optional(H.String()),target:H.Optional(H.String())}),LJ=D({type:H.Literal("tool_detail"),tool_name:H.String(),detail:H.String()}),WJ=D({type:H.Literal("task_update"),tasks:H.Array(XH)}),jJ=D({type:H.Literal("goal_frontier"),goal_id:H.String({minLength:1}),status:N(["active","verifying","paused","blocked","usage_limited","budget_limited","complete"]),task_list_id:H.String({minLength:1,maxLength:256}),total:H.Integer({minimum:0}),completed:H.Integer({minimum:0}),in_progress:H.Integer({minimum:0}),pending:H.Integer({minimum:0}),blocked:H.Integer({minimum:0}),next_task:H.Optional(H.Object({id:H.String({minLength:1}),subject:H.String({minLength:1,maxLength:512}),priority:N(["high","medium","low"])})),digest_sha256:H.String({pattern:"^[a-f0-9]{64}$"}),observed_at:H.String(),stall_category:H.Optional(N(["waiting_dependency","same_task_no_effect","repeated_deferral"])),stall_count:H.Optional(H.Integer({minimum:1,maximum:3}))}),xJ=D({type:H.Literal("goal"),state:N(["updated","cleared"]),goal_id:H.Optional(H.String()),status:H.Optional(N(["active","verifying","paused","blocked","usage_limited","budget_limited","complete"])),verification_attempt:H.Optional(H.Integer({minimum:1})),verification_status:H.Optional(N(["pending","pass","fail","partial"])),verifier_session_id:H.Optional(H.String()),verification_evidence_sha256:H.Optional(H.String({pattern:"^[a-f0-9]{64}$"})),verification_summary:H.Optional(H.String()),verification_stall_count:H.Optional(H.Integer({minimum:1})),premature_stop_pattern:H.Optional(N(qH)),premature_stop_count:H.Optional(H.Integer({minimum:1})),frontier_stall_category:H.Optional(N(["waiting_dependency","same_task_no_effect","repeated_deferral"])),frontier_stall_count:H.Optional(H.Integer({minimum:1,maximum:3}))}),UJ=D({type:H.Literal("subagent"),state:N(["spawned","completed"]),session_id:H.String(),subagent_type:H.Optional(H.String()),success:H.Optional(H.Boolean()),summary:H.Optional(H.String()),verification_verdict:H.Optional(N(["pass","fail","partial"])),resumed_from:H.Optional(H.String()),root_agent_id:H.Optional(H.String()),resume_depth:H.Optional(H.Integer({minimum:0}))}),_J=D({type:H.Literal("token_usage"),input_tokens:H.Number(),output_tokens:H.Number(),total_tokens:H.Number(),max_context_tokens:H.Number(),cache_read_tokens:H.Optional(H.Number()),cache_write_tokens:H.Optional(H.Number()),prompt_cache_break:H.Optional(H.Object({reason:N(["model_changed","system_prompt_changed","tools_changed","request_policy_changed","ttl_expired","server_side"]),previous_cache_read_tokens:H.Number(),cache_read_tokens:H.Number(),cache_write_tokens:H.Number(),token_drop:H.Number(),elapsed_ms:H.Number(),call_number:H.Number(),system_prompt_changed:H.Boolean(),system_char_delta:H.Number(),tools_changed:H.Boolean(),added_tool_count:H.Number(),removed_tool_count:H.Number(),changed_tool_count:H.Number(),model_changed:H.Boolean(),request_policy_changed:H.Boolean()})),cost_usd:H.Optional(H.Number())}),GJ=D({type:H.Literal("compacting"),state:N(["started","completed"]),reason:H.Optional(N(["threshold","context_limit","turn_limit","manual"])),strategy:H.Optional(N(["llm","fallback","snip"])),outcome:H.Optional(N(["completed","fallback","failed"])),pre_tokens:H.Optional(H.Number({minimum:0})),pre_token_source:H.Optional(N(["provider","provider_plus_estimate","local_estimate"])),estimated_pending_tokens:H.Optional(H.Number({minimum:0})),post_tokens:H.Optional(H.Number({minimum:0})),sample_attempts:H.Optional(H.Integer({minimum:0})),input_reductions:H.Optional(H.Integer({minimum:0})),messages_omitted:H.Optional(H.Integer({minimum:0})),files_omitted:H.Optional(H.Integer({minimum:0})),images_omitted:H.Optional(H.Integer({minimum:0})),fallback_target_tokens:H.Optional(H.Integer({minimum:0})),fallback_messages_omitted:H.Optional(H.Integer({minimum:0})),fallback_messages_truncated:H.Optional(H.Integer({minimum:0})),failure_reason:H.Optional(N(["circuit_open","context_exhausted","deterministic","empty_exhausted","insufficient_reduction","transient_exhausted"]))}),PJ=D({type:H.Literal("provider_retry"),phase:N(["scheduled","waiting","attempt","recovered","exhausted"]),attempt:H.Integer({minimum:0}),max_retries:H.Integer({minimum:0}),reason:N(["rate_limit","server_error","timeout","transport","stream_closed"]),status_code:H.Optional(H.Integer({minimum:100,maximum:599})),delay_ms:H.Optional(H.Integer({minimum:0})),next_retry_at:H.Optional(H.Integer({minimum:0})),mode:H.Optional(N(["standard","bounded_foreground"])),recovery_budget_ms:H.Optional(H.Integer({minimum:0})),recovery_elapsed_ms:H.Optional(H.Integer({minimum:0})),recovery_remaining_ms:H.Optional(H.Integer({minimum:0})),exhausted_by:H.Optional(N(["attempt_limit","recovery_budget"]))}),FJ=D({type:H.Literal("provider_admission"),phase:N(["queued","admitted","rejected"]),request_class:N(["foreground","background","internal"]),resource:N(["stream","pending_count","pending_bytes"]),scope:N(["global","domain","owner","class"]),reason:H.Optional(N(["capacity","queue_full","wait_timeout","closed"])),queue_position:H.Integer({minimum:0}),queue_depth:H.Integer({minimum:0}),in_flight:H.Integer({minimum:0}),limit:H.Integer({minimum:0}),wait_ms:H.Integer({minimum:0}),max_wait_ms:H.Integer({minimum:0}),recovery_remaining_ms:H.Optional(H.Integer({minimum:0}))}),EJ=D({type:H.Literal("provider_circuit"),phase:N(["opened","waiting","probe","closed","reopened","rejected"]),reason:N(["rate_limit","server_error","transport","stream_closed"]),status_code:H.Optional(H.Integer({minimum:100,maximum:599})),retry_after_ms:H.Optional(H.Integer({minimum:0})),next_probe_at:H.Optional(H.Integer({minimum:0})),open_duration_ms:H.Integer({minimum:0}),sample_count:H.Optional(H.Integer({minimum:0})),failure_count:H.Optional(H.Integer({minimum:0})),recovery_remaining_ms:H.Optional(H.Integer({minimum:0}))}),MJ=D({type:H.Literal("provider_stall"),phase:N(["detected","recovered"]),stall_count:H.Integer({minimum:1}),duration_ms:H.Integer({minimum:0}),warning_after_ms:H.Integer({minimum:1}),timeout_ms:H.Integer({minimum:1}),output_started:H.Boolean()}),zJ=D({type:H.Literal("action_stationarity"),phase:N(["detected","recovered","halted"]),tool_name:H.String(),run_length:H.Integer({minimum:1}),nudge_threshold:H.Integer({minimum:1}),halt_threshold:H.Integer({minimum:1}),progress_aware:H.Boolean()}),fJ=D({type:H.Literal("turn_recovery"),state:N(["completed","resumable","requires_attention"]),turn_id:H.String({minLength:1}),input_message_count:H.Integer({minimum:0}),reason:H.Optional(N(["successful_tool_result","interrupted_tool_call"]))}),AJ=D({type:H.Literal("turn_limit"),turns_count:H.Number(),action:H.Literal("continue")}),SJ=D({type:H.Literal("task_session"),session_id:H.String(),project_path:H.String(),source_project_path:H.String(),isolation:N(["local","worktree"]),worktree_branch:H.Optional(H.String()),base_commit:H.Optional(H.String())}),TJ=D({type:H.Literal("task_admission"),state:N(["queued","running"]),queue_position:H.Optional(H.Integer({minimum:1})),queue_depth:H.Integer({minimum:0}),in_flight:H.Integer({minimum:0}),max_concurrent_tasks:H.Integer({minimum:1})}),yJ=D({type:H.Literal("output"),content:H.String(),exit_code:H.Number()}),bJ=D({type:H.Literal("error"),message:H.String()}),eJ=$H(H.Union([vH,lH,aH,iH,oH,sH,nH,tH,HJ,JJ,KJ,VJ,ZJ,$J,qJ,XJ,YJ,BJ,NJ,QJ,DJ,LJ,WJ,jJ,xJ,UJ,_J,GJ,FJ,EJ,PJ,MJ,zJ,fJ,AJ,SJ,TJ,yJ,bJ]));function BH(K,V){return{event_version:YH,type:K,...V}}function gJ(K){if(!K||typeof K!=="object"||Array.isArray(K))return;let V=K;if(V.auto_backgrounded!==!0||V.background_reason!=="foreground_budget"||!Number.isSafeInteger(V.foreground_budget_ms)||V.foreground_budget_ms<=0||typeof V.shell_id!=="string"||!/^bash_[A-Za-z0-9-]+$/.test(V.shell_id)||V.shell_id.length>128||V.terminal_transport!=="local"&&V.terminal_transport!=="acp"||V.pid!==void 0&&(!Number.isSafeInteger(V.pid)||V.pid<=0))return;return{auto_backgrounded:!0,background_reason:"foreground_budget",foreground_budget_ms:V.foreground_budget_ms,shell_id:V.shell_id,...V.pid===void 0?{}:{pid:V.pid},terminal_transport:V.terminal_transport}}function kJ(K){let V=new AbortController,Q=(Z)=>{if(!V.signal.aborted)V.abort(Z)},X=()=>Q("interrupt"),J=()=>Q(K?.signal?.reason);if(K?.signal){if(K.signal.addEventListener("abort",J,{once:!0}),K.signal.aborted)J()}else process.once("SIGINT",X),process.once("SIGTERM",X);return{signal:V.signal,abort:Q,dispose:()=>{K?.signal?.removeEventListener("abort",J),process.removeListener("SIGINT",X),process.removeListener("SIGTERM",X)}}}var CJ=N(["text","jsonl"]),hJ=H.Object({headless:H.Optional(H.Boolean()),message:H.Optional(H.String()),_:H.Optional(H.Array(H.Union([H.String(),H.Number()]))),model:H.Optional(H.String()),systemPrompt:H.Optional(H.String()),appendSystemPrompt:H.Optional(H.String()),verificationAgent:H.Optional(H.Boolean()),maxTurns:H.Optional(H.Refine(H.Integer(),(K)=>K===-1||K>0,()=>"must be -1 (unlimited) or a positive integer")),permissionMode:H.Optional(H.Enum(DH)),mcpConfig:H.Optional(H.Array(H.String())),strictMcpConfig:H.Optional(H.Boolean()),sessionId:H.Optional(H.String()),allowedTools:H.Optional(H.Array(H.String())),disallowedTools:H.Optional(H.Array(H.String())),agents:H.Optional(H.String()),continue:H.Optional(H.Boolean()),resume:H.Optional(H.Union([H.String(),H.Boolean()])),forkSession:H.Optional(H.Boolean()),taskIsolation:H.Optional(N(["local","worktree"])),outputFormat:H.Optional(CJ),jsonSchema:H.Optional(H.String()),outputSchema:H.Optional(H.String())});class CH{openedThinking=!1;wroteAssistantContent=!1;markAssistantContent(){this.wroteAssistantContent=!0}setThinkingOpened(K){this.openedThinking=K}hasOpenThinking(){return this.openedThinking}completeStream(){let K={openedThinking:this.openedThinking,wroteAssistantContent:this.wroteAssistantContent};return this.openedThinking=!1,this.wroteAssistantContent=!1,K}}function OJ(K){return K.issues.map((V)=>`${V.path.join(".")||"options"}: ${V.message}`).join("; ")}function wJ(K){let V=LH(hJ,K);if(!V.success)throw Error(`Invalid headless options: ${OJ(V.error)}`);return V.data}function mJ(K){return K.command("* [message]","Run full agent loop without Ink UI and print events to the terminal",(V)=>V.positional("message",{describe:"Message to process",type:"string"}).option("headless",{type:"boolean",describe:"Run full agent loop without Ink UI and print events to the terminal"}).option("model",{describe:"Model ID for this run",type:"string"}).option("system-prompt",{describe:"Replace the default system prompt",type:"string"}).option("append-system-prompt",{describe:"Append a system prompt to the default system prompt",type:"string"}).option("verification-agent",{describe:"Run the built-in independent verification agent after non-trivial changes",type:"boolean",default:!0}).option("max-turns",{alias:["maxTurns"],describe:"Maximum conversation turns (-1: unlimited, N>0: limit to N turns)",type:"number"}).option("output-format",{alias:["outputFormat"],choices:["text","jsonl"],describe:"Headless output format",type:"string"}).option("json-schema",{alias:["jsonSchema"],describe:"Inline JSON Schema for the structured final response",type:"string"}).option("output-schema",{alias:["outputSchema"],describe:"Path to a JSON Schema file for the structured final response",type:"string"}).option("task-isolation",{alias:["taskIsolation"],choices:["local","worktree"],describe:"Dispatch a new durable task in the selected workspace mode",type:"string"}),async(V)=>{if(!V.headless)return;let Q=await lJ(V);process.exit(Q)})}function L(K,V=""){K.write(`${V}
+import{m as yH,n as bH,o as IH,p as RH,q as gH,r as kH}from"./chunk-1zqaq7vw.js";import{A as KH,B as VH,C as p,D as ZH,y as TH,z as JH}from"./chunk-qkdbfqfd.js";import{$ as PH,E as XH,Z as GH,aa as FH,ea as EH}from"./chunk-24teyrer.js";import"./chunk-zm2bbagg.js";import"./chunk-c39pbp9r.js";import"./chunk-z1zr4wts.js";import{Hb as UH,Qb as _H,vb as r}from"./chunk-k3pe267k.js";import"./chunk-sca5q3tt.js";import{Jd as m,Ud as s,ud as jH,yd as xH}from"./chunk-ay1w6zhg.js";import"./chunk-q265drks.js";import"./chunk-xnbzrh8b.js";import{se as zH}from"./chunk-dekgf9sw.js";import{ue as fH,ve as AH,we as SH}from"./chunk-a4angs22.js";import{xe as MH}from"./chunk-1b2dkwpv.js";import"./chunk-pezzyyyk.js";import{Xe as WH}from"./chunk-t7ymt22d.js";import"./chunk-v508x7cg.js";import"./chunk-ye4wyq1k.js";import"./chunk-7n7swtwg.js";import"./chunk-dh03cybw.js";import"./chunk-8qp8v96d.js";import"./chunk-z4rx2bgb.js";import"./chunk-g6gp6m3m.js";import{ig as qH}from"./chunk-0zzh482s.js";import"./chunk-adkpwx6c.js";import"./chunk-85bamng3.js";import"./chunk-fnsq6hk0.js";import"./chunk-2t6b962t.js";import"./chunk-0pnbvv81.js";import{Oh as DH}from"./chunk-y94239bb.js";import{Qh as LH,Sh as H,Th as $H,Vh as N}from"./chunk-cw2b3383.js";import{Zh as i,_h as o}from"./chunk-2j2mnzdg.js";import{ci as k}from"./chunk-s6562rsq.js";import"./chunk-hbafhk9y.js";import"./chunk-68sf54n4.js";import"./chunk-sv833k2e.js";import"./chunk-w7n73ag8.js";import"./chunk-nz2cgjww.js";import"./chunk-1g0d9yw0.js";import"./chunk-6kwg4hcv.js";import"./chunk-9xzw649r.js";import"./chunk-hmwz31tc.js";import IJ from"yargs";import{hideBin as RJ}from"yargs/helpers";function v(K,V,Q){if(K.off){K.off(V,Q);return}K.removeListener?.(V,Q)}function dH(K,V){if(!K.once&&!K.on||!K.off&&!K.removeListener)throw Error("Writable returned false without an observable drain contract");return new Promise((Q,X)=>{let J=!1,Z=()=>{v(K,"drain",x),v(K,"error",j),V.removeEventListener("abort",P)},W=(F)=>{if(J)return;J=!0,Z(),F()},x=()=>W(Q),j=(F)=>W(()=>X(F??Error("Writable emitted an error"))),P=()=>W(()=>X(V.reason??Error("Writable drain aborted")));if(V.aborted){P();return}let T=K.once?.bind(K)??K.on?.bind(K);T?.("drain",x),T?.("error",j),V.addEventListener("abort",P,{once:!0})})}async function pH(K,V,Q){if(K.destroyed||K.writableEnded)throw Error("Writable is already closed");if(K.write(V)===!1)await dH(K,Q)}class l{options;queues;sinkErrorListeners=[];failed=!1;closing=!1;handleAbort=()=>{this.fail(new p("aborted","Headless output was aborted",{cause:this.options.signal?.reason}))};constructor(K,V={}){this.options=V;let Q=(X)=>new ZH({maxPendingItems:V.maxPendingItems??JH,maxPendingBytes:V.maxPendingBytes??KH,writeTimeoutMs:V.writeTimeoutMs??VH,sizeOf:(J)=>Buffer.byteLength(J),write:(J,Z)=>pH(K[X],J,Z),onFailure:(J)=>this.fail(J)});if(this.queues={stdout:Q("stdout"),stderr:Q("stderr")},this.observeSinkErrors(K.stdout),K.stderr!==K.stdout)this.observeSinkErrors(K.stderr);if(V.signal?.addEventListener("abort",this.handleAbort,{once:!0}),V.signal?.aborted)this.handleAbort()}write(K,V){return this.queues[K].offer(V).accepted}async flush(){await Promise.all([this.queues.stdout.flush(),this.queues.stderr.flush()])}close(K){if(this.closing||this.failed)return;this.closing=!0,this.options.signal?.removeEventListener("abort",this.handleAbort),this.removeSinkErrorListeners(),this.queues.stdout.close(K),this.queues.stderr.close(K)}stats(){return{stdout:this.queues.stdout.stats(),stderr:this.queues.stderr.stats()}}observeSinkErrors(K){if(!K.on||!K.off&&!K.removeListener)return;let V=(Q)=>{this.fail(new p("write_failed","Headless writable failed",{cause:Q??Error("Writable emitted an error")}))};K.on("error",V),this.sinkErrorListeners.push({writer:K,listener:V})}fail(K){if(this.closing||this.failed)return;this.failed=!0,this.options.signal?.removeEventListener("abort",this.handleAbort),this.removeSinkErrorListeners(),this.queues.stdout.close(K),this.queues.stderr.close(K),this.options.onFailure?.(K)}removeSinkErrorListeners(){for(let{writer:K,listener:V}of this.sinkErrorListeners.splice(0))v(K,"error",V)}}var YH=1;function D(K){return H.Object({event_version:H.Literal(YH),...K})}var vH=D({type:H.Literal("content_delta"),delta:H.String()}),lH=D({type:H.Literal("thinking_delta"),delta:H.String()}),aH=D({type:H.Literal("thinking"),content:H.String()}),iH=D({type:H.Literal("stream_end")}),oH=D({type:H.Literal("content"),content:H.String()}),sH=D({type:H.Literal("structured_output"),output:H.Record(H.String(),H.Unknown()),schema_digest:H.String({pattern:"^[a-f0-9]{64}$"})}),a=N(["readonly","write","execute"]),rH=H.Object({kind:a,scope:N(["global","session"]),queue_position:H.Integer({minimum:1}),in_flight:H.Integer({minimum:0}),limit:H.Integer({minimum:1})}),nH=D({type:H.Literal("tool_start"),tool_name:H.String(),summary:H.String(),target:H.Optional(H.String()),tool_kind:H.Optional(a)}),tH=D({type:H.Literal("tool_progress"),tool_name:H.String(),message:H.String(),progress:H.Optional(H.Number()),total:H.Optional(H.Number()),admission:H.Optional(rH)}),eH=H.Object({auto_backgrounded:H.Literal(!0),background_reason:H.Literal("foreground_budget"),foreground_budget_ms:H.Integer({minimum:1}),shell_id:H.String({minLength:1,maxLength:128,pattern:"^bash_[A-Za-z0-9-]+$"}),pid:H.Optional(H.Integer({minimum:1})),terminal_transport:N(["local","acp"])}),HJ=D({type:H.Literal("tool_result"),tool_name:H.String(),summary:H.String(),target:H.Optional(H.String()),tool_kind:H.Optional(a),success:H.Optional(H.Boolean()),error_type:H.Optional(H.String()),error_message:H.Optional(H.String()),background:H.Optional(eH)}),JJ=D({type:H.Literal("mcp_catalog_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),added:H.Array(H.String()),removed:H.Array(H.String()),updated:H.Array(H.String())}),KJ=D({type:H.Literal("mcp_content_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),content_kind:N(["resources","resource_templates","prompts"]),added:H.Array(H.String()),removed:H.Array(H.String()),updated:H.Array(H.String())}),VJ=D({type:H.Literal("mcp_resource_updated"),revision:H.Integer({minimum:1}),server_name:H.String(),uri:H.String()}),ZJ=D({type:H.Literal("mcp_connection_changed"),revision:H.Integer({minimum:1}),server_name:H.String(),phase:N(["reconnecting","recovered","failed"]),reason:H.String(),attempt:H.Integer({minimum:0}),max_attempts:H.Integer({minimum:0}),next_retry_at:H.Optional(H.Integer({minimum:0})),error:H.Optional(H.String())}),$J=D({type:H.Literal("mcp_log"),revision:H.Integer({minimum:1}),server_name:H.String(),level:N(["debug","info","notice","warning","error","critical","alert","emergency"]),logger:H.Optional(H.String()),message:H.String(),projected_bytes:H.Integer({minimum:0}),data_sha256:H.String(),truncated:H.Boolean(),details_omitted:H.Boolean(),timestamp:H.Integer({minimum:0}),synthetic:H.Optional(H.Boolean())}),qJ=D({type:H.Literal("mcp_instructions_changed"),revision:H.Integer({minimum:0}),server_name:H.String(),action:N(["added","removed"]),reason:N(["snapshot","connection","disconnection"]),text:H.Optional(H.String()),source_bytes:H.Optional(H.Integer({minimum:0})),projected_bytes:H.Optional(H.Integer({minimum:0})),sha256:H.Optional(H.String()),truncated:H.Optional(H.Boolean()),details_omitted:H.Optional(H.Boolean())}),XJ=D({type:H.Literal("mcp_task_changed"),revision:H.Integer({minimum:0}),task_id:H.String(),server_name:H.String(),tool_name:H.String(),status:N(["working","input_required","interrupted","completed","failed","cancelled"]),status_message:H.Optional(H.String()),created_at:H.Integer({minimum:0}),updated_at:H.Integer({minimum:0}),completed_at:H.Optional(H.Integer({minimum:0})),has_result:H.Boolean(),error:H.Optional(H.String())}),YJ=D({type:H.Literal("project_rules_loaded"),files:H.Array(H.Object({id:H.String(),relative_path:H.String(),source:N(["project","local"]),conditional:H.Boolean(),content_sha256:H.String({pattern:"^[a-f0-9]{64}$"})})),trigger_paths:H.Array(H.String()),blocked_write:H.Boolean()}),BJ=D({type:H.Literal("user_shell_started"),execution_id:H.String(),command:H.String(),auxiliary:H.Boolean()}),NJ=D({type:H.Literal("user_shell_output"),execution_id:H.String(),stream:N(["stdout","stderr"]),chunk:H.String(),stream_truncated:H.Boolean()}),QJ=D({type:H.Literal("user_shell_completed"),execution_id:H.String(),message_id:H.String(),status:N(["completed","failed","aborted","timed_out","spawn_error"]),exit_code:H.Union([H.Integer(),H.Null()]),duration_ms:H.Number({minimum:0}),stdout:H.String(),stderr:H.String(),truncated:H.Boolean(),auxiliary:H.Boolean()}),DJ=D({type:H.Literal("phase"),phase:N(["turn","searching","inspecting","target_hit","executing","completed"]),status:N(["ongoing","hit","done"]),message:H.String(),turn:H.Optional(H.Number()),tool_name:H.Optional(H.String()),target:H.Optional(H.String())}),LJ=D({type:H.Literal("tool_detail"),tool_name:H.String(),detail:H.String()}),WJ=D({type:H.Literal("task_update"),tasks:H.Array(XH)}),jJ=D({type:H.Literal("goal_frontier"),goal_id:H.String({minLength:1}),status:N(["active","verifying","paused","blocked","usage_limited","budget_limited","complete"]),task_list_id:H.String({minLength:1,maxLength:256}),total:H.Integer({minimum:0}),completed:H.Integer({minimum:0}),in_progress:H.Integer({minimum:0}),pending:H.Integer({minimum:0}),blocked:H.Integer({minimum:0}),next_task:H.Optional(H.Object({id:H.String({minLength:1}),subject:H.String({minLength:1,maxLength:512}),priority:N(["high","medium","low"])})),digest_sha256:H.String({pattern:"^[a-f0-9]{64}$"}),observed_at:H.String(),stall_category:H.Optional(N(["waiting_dependency","same_task_no_effect","repeated_deferral"])),stall_count:H.Optional(H.Integer({minimum:1,maximum:3}))}),xJ=D({type:H.Literal("goal"),state:N(["updated","cleared"]),goal_id:H.Optional(H.String()),status:H.Optional(N(["active","verifying","paused","blocked","usage_limited","budget_limited","complete"])),verification_attempt:H.Optional(H.Integer({minimum:1})),verification_status:H.Optional(N(["pending","pass","fail","partial"])),verifier_session_id:H.Optional(H.String()),verification_evidence_sha256:H.Optional(H.String({pattern:"^[a-f0-9]{64}$"})),verification_summary:H.Optional(H.String()),verification_stall_count:H.Optional(H.Integer({minimum:1})),premature_stop_pattern:H.Optional(N(qH)),premature_stop_count:H.Optional(H.Integer({minimum:1})),frontier_stall_category:H.Optional(N(["waiting_dependency","same_task_no_effect","repeated_deferral"])),frontier_stall_count:H.Optional(H.Integer({minimum:1,maximum:3}))}),UJ=D({type:H.Literal("subagent"),state:N(["spawned","completed"]),session_id:H.String(),subagent_type:H.Optional(H.String()),success:H.Optional(H.Boolean()),summary:H.Optional(H.String()),verification_verdict:H.Optional(N(["pass","fail","partial"])),resumed_from:H.Optional(H.String()),root_agent_id:H.Optional(H.String()),resume_depth:H.Optional(H.Integer({minimum:0}))}),_J=D({type:H.Literal("token_usage"),input_tokens:H.Number(),output_tokens:H.Number(),total_tokens:H.Number(),max_context_tokens:H.Number(),cache_read_tokens:H.Optional(H.Number()),cache_write_tokens:H.Optional(H.Number()),prompt_cache_break:H.Optional(H.Object({reason:N(["model_changed","system_prompt_changed","tools_changed","request_policy_changed","ttl_expired","server_side"]),previous_cache_read_tokens:H.Number(),cache_read_tokens:H.Number(),cache_write_tokens:H.Number(),token_drop:H.Number(),elapsed_ms:H.Number(),call_number:H.Number(),system_prompt_changed:H.Boolean(),system_char_delta:H.Number(),tools_changed:H.Boolean(),added_tool_count:H.Number(),removed_tool_count:H.Number(),changed_tool_count:H.Number(),model_changed:H.Boolean(),request_policy_changed:H.Boolean()})),cost_usd:H.Optional(H.Number())}),GJ=D({type:H.Literal("compacting"),state:N(["started","completed"]),reason:H.Optional(N(["threshold","context_limit","turn_limit","manual"])),strategy:H.Optional(N(["llm","fallback","snip"])),outcome:H.Optional(N(["completed","fallback","failed"])),pre_tokens:H.Optional(H.Number({minimum:0})),pre_token_source:H.Optional(N(["provider","provider_plus_estimate","local_estimate"])),estimated_pending_tokens:H.Optional(H.Number({minimum:0})),post_tokens:H.Optional(H.Number({minimum:0})),sample_attempts:H.Optional(H.Integer({minimum:0})),input_reductions:H.Optional(H.Integer({minimum:0})),messages_omitted:H.Optional(H.Integer({minimum:0})),files_omitted:H.Optional(H.Integer({minimum:0})),images_omitted:H.Optional(H.Integer({minimum:0})),fallback_target_tokens:H.Optional(H.Integer({minimum:0})),fallback_messages_omitted:H.Optional(H.Integer({minimum:0})),fallback_messages_truncated:H.Optional(H.Integer({minimum:0})),failure_reason:H.Optional(N(["circuit_open","context_exhausted","deterministic","empty_exhausted","insufficient_reduction","transient_exhausted"]))}),PJ=D({type:H.Literal("provider_retry"),phase:N(["scheduled","waiting","attempt","recovered","exhausted"]),attempt:H.Integer({minimum:0}),max_retries:H.Integer({minimum:0}),reason:N(["rate_limit","server_error","timeout","transport","stream_closed"]),status_code:H.Optional(H.Integer({minimum:100,maximum:599})),delay_ms:H.Optional(H.Integer({minimum:0})),next_retry_at:H.Optional(H.Integer({minimum:0})),mode:H.Optional(N(["standard","bounded_foreground"])),recovery_budget_ms:H.Optional(H.Integer({minimum:0})),recovery_elapsed_ms:H.Optional(H.Integer({minimum:0})),recovery_remaining_ms:H.Optional(H.Integer({minimum:0})),exhausted_by:H.Optional(N(["attempt_limit","recovery_budget"]))}),FJ=D({type:H.Literal("provider_admission"),phase:N(["queued","admitted","rejected"]),request_class:N(["foreground","background","internal"]),resource:N(["stream","pending_count","pending_bytes"]),scope:N(["global","domain","owner","class"]),reason:H.Optional(N(["capacity","queue_full","wait_timeout","closed"])),queue_position:H.Integer({minimum:0}),queue_depth:H.Integer({minimum:0}),in_flight:H.Integer({minimum:0}),limit:H.Integer({minimum:0}),wait_ms:H.Integer({minimum:0}),max_wait_ms:H.Integer({minimum:0}),recovery_remaining_ms:H.Optional(H.Integer({minimum:0}))}),EJ=D({type:H.Literal("provider_circuit"),phase:N(["opened","waiting","probe","closed","reopened","rejected"]),reason:N(["rate_limit","server_error","transport","stream_closed"]),status_code:H.Optional(H.Integer({minimum:100,maximum:599})),retry_after_ms:H.Optional(H.Integer({minimum:0})),next_probe_at:H.Optional(H.Integer({minimum:0})),open_duration_ms:H.Integer({minimum:0}),sample_count:H.Optional(H.Integer({minimum:0})),failure_count:H.Optional(H.Integer({minimum:0})),recovery_remaining_ms:H.Optional(H.Integer({minimum:0}))}),MJ=D({type:H.Literal("provider_stall"),phase:N(["detected","recovered"]),stall_count:H.Integer({minimum:1}),duration_ms:H.Integer({minimum:0}),warning_after_ms:H.Integer({minimum:1}),timeout_ms:H.Integer({minimum:1}),output_started:H.Boolean()}),zJ=D({type:H.Literal("action_stationarity"),phase:N(["detected","recovered","halted"]),tool_name:H.String(),run_length:H.Integer({minimum:1}),nudge_threshold:H.Integer({minimum:1}),halt_threshold:H.Integer({minimum:1}),progress_aware:H.Boolean()}),fJ=D({type:H.Literal("turn_recovery"),state:N(["completed","resumable","requires_attention"]),turn_id:H.String({minLength:1}),input_message_count:H.Integer({minimum:0}),reason:H.Optional(N(["successful_tool_result","interrupted_tool_call"]))}),AJ=D({type:H.Literal("turn_limit"),turns_count:H.Number(),action:H.Literal("continue")}),SJ=D({type:H.Literal("task_session"),session_id:H.String(),project_path:H.String(),source_project_path:H.String(),isolation:N(["local","worktree"]),worktree_branch:H.Optional(H.String()),base_commit:H.Optional(H.String())}),TJ=D({type:H.Literal("task_admission"),state:N(["queued","running"]),queue_position:H.Optional(H.Integer({minimum:1})),queue_depth:H.Integer({minimum:0}),in_flight:H.Integer({minimum:0}),max_concurrent_tasks:H.Integer({minimum:1})}),yJ=D({type:H.Literal("output"),content:H.String(),exit_code:H.Number()}),bJ=D({type:H.Literal("error"),message:H.String()}),eJ=$H(H.Union([vH,lH,aH,iH,oH,sH,nH,tH,HJ,JJ,KJ,VJ,ZJ,$J,qJ,XJ,YJ,BJ,NJ,QJ,DJ,LJ,WJ,jJ,xJ,UJ,_J,GJ,FJ,EJ,PJ,MJ,zJ,fJ,AJ,SJ,TJ,yJ,bJ]));function BH(K,V){return{event_version:YH,type:K,...V}}function gJ(K){if(!K||typeof K!=="object"||Array.isArray(K))return;let V=K;if(V.auto_backgrounded!==!0||V.background_reason!=="foreground_budget"||!Number.isSafeInteger(V.foreground_budget_ms)||V.foreground_budget_ms<=0||typeof V.shell_id!=="string"||!/^bash_[A-Za-z0-9-]+$/.test(V.shell_id)||V.shell_id.length>128||V.terminal_transport!=="local"&&V.terminal_transport!=="acp"||V.pid!==void 0&&(!Number.isSafeInteger(V.pid)||V.pid<=0))return;return{auto_backgrounded:!0,background_reason:"foreground_budget",foreground_budget_ms:V.foreground_budget_ms,shell_id:V.shell_id,...V.pid===void 0?{}:{pid:V.pid},terminal_transport:V.terminal_transport}}function kJ(K){let V=new AbortController,Q=(Z)=>{if(!V.signal.aborted)V.abort(Z)},X=()=>Q("interrupt"),J=()=>Q(K?.signal?.reason);if(K?.signal){if(K.signal.addEventListener("abort",J,{once:!0}),K.signal.aborted)J()}else process.once("SIGINT",X),process.once("SIGTERM",X);return{signal:V.signal,abort:Q,dispose:()=>{K?.signal?.removeEventListener("abort",J),process.removeListener("SIGINT",X),process.removeListener("SIGTERM",X)}}}var CJ=N(["text","jsonl"]),hJ=H.Object({headless:H.Optional(H.Boolean()),message:H.Optional(H.String()),_:H.Optional(H.Array(H.Union([H.String(),H.Number()]))),model:H.Optional(H.String()),systemPrompt:H.Optional(H.String()),appendSystemPrompt:H.Optional(H.String()),verificationAgent:H.Optional(H.Boolean()),maxTurns:H.Optional(H.Refine(H.Integer(),(K)=>K===-1||K>0,()=>"must be -1 (unlimited) or a positive integer")),permissionMode:H.Optional(H.Enum(DH)),mcpConfig:H.Optional(H.Array(H.String())),strictMcpConfig:H.Optional(H.Boolean()),sessionId:H.Optional(H.String()),allowedTools:H.Optional(H.Array(H.String())),disallowedTools:H.Optional(H.Array(H.String())),agents:H.Optional(H.String()),continue:H.Optional(H.Boolean()),resume:H.Optional(H.Union([H.String(),H.Boolean()])),forkSession:H.Optional(H.Boolean()),taskIsolation:H.Optional(N(["local","worktree"])),outputFormat:H.Optional(CJ),jsonSchema:H.Optional(H.String()),outputSchema:H.Optional(H.String())});class CH{openedThinking=!1;wroteAssistantContent=!1;markAssistantContent(){this.wroteAssistantContent=!0}setThinkingOpened(K){this.openedThinking=K}hasOpenThinking(){return this.openedThinking}completeStream(){let K={openedThinking:this.openedThinking,wroteAssistantContent:this.wroteAssistantContent};return this.openedThinking=!1,this.wroteAssistantContent=!1,K}}function OJ(K){return K.issues.map((V)=>`${V.path.join(".")||"options"}: ${V.message}`).join("; ")}function wJ(K){let V=LH(hJ,K);if(!V.success)throw Error(`Invalid headless options: ${OJ(V.error)}`);return V.data}function mJ(K){return K.command("* [message]","Run full agent loop without Ink UI and print events to the terminal",(V)=>V.positional("message",{describe:"Message to process",type:"string"}).option("headless",{type:"boolean",describe:"Run full agent loop without Ink UI and print events to the terminal"}).option("model",{describe:"Model ID for this run",type:"string"}).option("system-prompt",{describe:"Replace the default system prompt",type:"string"}).option("append-system-prompt",{describe:"Append a system prompt to the default system prompt",type:"string"}).option("verification-agent",{describe:"Run the built-in independent verification agent after non-trivial changes",type:"boolean",default:!0}).option("max-turns",{alias:["maxTurns"],describe:"Maximum conversation turns (-1: unlimited, N>0: limit to N turns)",type:"number"}).option("output-format",{alias:["outputFormat"],choices:["text","jsonl"],describe:"Headless output format",type:"string"}).option("json-schema",{alias:["jsonSchema"],describe:"Inline JSON Schema for the structured final response",type:"string"}).option("output-schema",{alias:["outputSchema"],describe:"Path to a JSON Schema file for the structured final response",type:"string"}).option("task-isolation",{alias:["taskIsolation"],choices:["local","worktree"],describe:"Dispatch a new durable task in the selected workspace mode",type:"string"}),async(V)=>{if(!V.headless)return;let Q=await lJ(V);process.exit(Q)})}function L(K,V=""){K.write(`${V}
 `)}function cJ(K){return`[task] [${K.status}] ${K.subject}`}function uJ(){return{requestConfirmation:async(K)=>K.type==="mcpElicitation"?{approved:!1,reason:"headless-mcp-elicitation-unavailable",elicitation:{action:"cancel"}}:K.type==="mcpSampling"?{approved:!1,reason:"headless-mcp-sampling-unavailable"}:{approved:!0,reason:"headless-auto-approved",scope:"session"}}}function dJ(K){if(!(K instanceof Error))return"Unknown error";let X=K.lastError??K;if(X.responseBody)try{let W=JSON.parse(X.responseBody)?.error?.message;if(W)return X.statusCode?`${W} (HTTP ${X.statusCode})`:W}catch{}let J=K.message.match(/Last error:\s*(.+)$/);if(J)return J[1];return K.message}function pJ(K){return K==="jsonl"?"jsonl":"text"}function NH(K,V){let Q=(...X)=>{for(let J of X){let Z=V[J];if(typeof Z==="string"&&Z.trim()!=="")return Z}return};switch(K){case"Read":case"Edit":case"Write":case"UndoEdit":return Q("file_path");case"ApplyPatch":return"multi-file patch";case"NotebookEdit":return Q("notebook_path");case"Grep":return Q("path","pattern");case"Glob":return Q("pattern");case"WebFetch":return Q("url");case"WebSearch":return Q("query");case"Bash":return Q("command","description");case"Task":return Q("description");case"LSP":return Q("filePath","operation");case"EnterWorktree":return Q("name");case"ExitWorktree":return Q("action");default:return}}function vJ(K,V,Q,X){let J=new Set(["Glob","Grep","WebSearch","LS"]),Z=new Set(["Read","WebFetch"]);if(new Set(["Edit","Write","ApplyPatch","NotebookEdit","Bash","LSP","UndoEdit","EnterWorktree","ExitWorktree"]).has(K)&&!X.targetLocked)return{phase:"target_hit",status:"hit",message:`Target locked: ${V}`,shouldLockTarget:!0};if(X.targetLocked)return{phase:"executing",status:"hit",message:Q?`Working within target: ${V}`:`Executing: ${V}`,shouldLockTarget:!1};if(J.has(K))return{phase:"searching",status:"ongoing",message:`Still searching: ${V}`,shouldLockTarget:!1};if(Z.has(K))return{phase:"inspecting",status:"ongoing",message:`Inspecting candidate: ${V}`,shouldLockTarget:!1};return{phase:"executing",status:X.targetLocked?"hit":"ongoing",message:`Executing: ${V}`,shouldLockTarget:!1}}function QH(K,V,Q=!1){let X=(J,Z)=>{K.stdout.write(`${JSON.stringify(BH(J,Z))}
 `)};return{contentDelta(J){if(V==="jsonl"){X("content_delta",{delta:J});return}if(Q)return;K.stdout.write(J)},thinkingDelta(J,Z){if(V==="jsonl")return X("thinking_delta",{delta:J}),Z;if(!Z)K.stderr.write("[thinking] ");return K.stderr.write(J),!0},thinking(J){if(V==="jsonl"){X("thinking",{content:J});return}L(K.stderr,`[thinking] ${J}`)},streamEnd(J,Z){if(V==="jsonl"){X("stream_end",{});return}if(Z)K.stderr.write(`
 `);if(J)K.stdout.write(`