buckyos 0.7.140 → 0.7.144

package/dist/{executor_client-d2c9e854.mjs → executor_client-4fbf0c3c.mjs}

@@ -35,7 +35,7 @@ var __privateMethod = (obj, member, method) => {
   return method;
 };
 var _listener, _listeners, _cancelled, _allowInsecure, _gzip, _headers, _method, _timeout, _url, _body, _bodyType, _creds, _preflight, _process, _retry, _signal, _throttle, _getUrlFunc, _send, send_fn, _statusCode, _statusMessage, _headers2, _body2, _request, _error, _names, _data, _dataLength, _writeData, writeData_fn, _data2, _offset, _bytesRead, _parent, _maxInflation, _incrementBytesRead, incrementBytesRead_fn, _peekBytes, peekBytes_fn, _r, _s, _v, _networkV, _privateKey, _options, _type, _to, _data3, _nonce, _gasLimit, _gasPrice, _maxPriorityFeePerGas, _maxFeePerGas, _value, _chainId, _sig, _accessList, _maxFeePerBlobGas, _blobVersionedHashes, _kzg, _blobs, _auths, _blobWrapperVersion, _getSerialized, getSerialized_fn, _types, _fullTypes, _encoderCache, _getEncoder, getEncoder_fn, _offset2, _tokens, _subTokenString, subTokenString_fn, _walkAsync, walkAsync_fn, _getCoder, getCoder_fn, _errors, _events, _functions, _abiCoder, _getFunction, getFunction_fn, _getEvent, getEvent_fn, _transactions, _logs, _startBlock, _iface, _iface2, _filter, _a, _supports2544, _resolver, _fetch, fetch_fn, _getResolver, getResolver_fn, _url2, _processFunc, _name, _chainId2, _plugins, _provider, _poller, _interval, _blockNumber, _poll, poll_fn, _provider2, _poll2, _running, _tag, _lastBlock, _filter2, _hash, _provider3, _filter3, _poller2, _running2, _blockNumber2, _poll3, poll_fn2, _subs, _plugins2, _pausedState, _destroyed, _networkPromise, _anyNetwork, _performCache, _lastBlockNumber, _nextTimer, _timers, _disableCcipRead, _requestRate, _requestTimes, _options2, _getDelay, getDelay_fn, _perform, perform_fn, _call, call_fn, _checkNetwork, checkNetwork_fn, _getAccountValue, getAccountValue_fn, _getBlock, getBlock_fn, _hasSub, hasSub_fn, _getSub, getSub_fn, _throwUnsupported, throwUnsupported_fn, _provider4, _filterIdPromise, _poller3, _running3, _network, _hault, _poll4, poll_fn3, _teardown, teardown_fn, _event, _options3, _nextId, _payloads, _drainTimer, _notReady, _network2, _pendingDetectNetwork, _scheduleDrain, scheduleDrain_fn, _pollingInterval, _connect, _signingKey, _data4, _checksum, _words, _loadWords, loadWords_fn, _account, account_fn, _fromSeed, fromSeed_fn, _fromAccount, fromAccount_fn;
-import { v as DID, w as getBrowserIdentityRaw, x as clearBrowserUserInfo, y as saveBrowserIdentity, z as saveBrowserUserInfo, A as getBrowserUserInfo, B as clearBrowserIdentity, q as parseBuckyOSOwnerDocument, h as hashPassword, C as saveLocalAccountInfo, E as cleanLocalAccountInfo, F as canonicalize, G as signJwtEdDSA, H as ChunkId, I as sha256Bytes, J as FileObject, O as ObjId, K as DirObject, S as SimpleChunkList } from "./ndn_types-dcb74613.mjs";
+import { u as DID, v as getBrowserIdentityRaw, w as clearBrowserUserInfo, x as saveBrowserIdentity, y as saveBrowserUserInfo, z as getBrowserUserInfo, A as clearBrowserIdentity, N as NODE_IDENTITY_SCHEMA_V2, f as isBuckyOSLocalNodeIdentityConfig, o as parseBuckyOSOwnerDocument, h as hashPassword, B as saveLocalAccountInfo, C as cleanLocalAccountInfo, E as canonicalize, F as signJwtEdDSA, G as ChunkId, H as sha256Bytes, I as FileObject, O as ObjId, J as DirObject, S as SimpleChunkList } from "./ndn_types-bbb1f6a6.mjs";
 class RPCError extends Error {
   constructor(message, code, data) {
     super(message);
@@ -231,15 +231,15 @@ const DENY_REASONS = [
   "authorization_unavailable"
 ];
 const ACCESS_DENIED_ERROR_CODE = "access_denied";
-function isRecord(value) {
+function isRecord$1(value) {
   return !!value && typeof value === "object" && !Array.isArray(value);
 }
 function parseAccessDenial(value) {
-  if (!isRecord(value) || typeof value.reason !== "string")
+  if (!isRecord$1(value) || typeof value.reason !== "string")
     return null;
   if (!DENY_REASONS.includes(value.reason))
     return null;
-  const adjust = isRecord(value.adjust) && typeof value.adjust.party === "string" ? value.adjust : null;
+  const adjust = isRecord$1(value.adjust) && typeof value.adjust.party === "string" ? value.adjust : null;
   if (!adjust)
     return null;
   return value;
@@ -251,7 +251,7 @@ function accessDenialOf(error) {
 }
 const ANONYMOUS_IDENTITY = { kind: "anonymous" };
 function parseCurrentIdentity(value) {
-  if (!isRecord(value))
+  if (!isRecord$1(value))
     return null;
   if (value.kind === "anonymous")
     return ANONYMOUS_IDENTITY;
@@ -497,21 +497,6 @@ class VerifyHubClient {
     }
     return this.rpcClient.call("verify_token", payload);
   }
-  static normalizeLoginResponse(response) {
-    if ("user_info" in response) {
-      return {
-        user_name: response.user_info.show_name,
-        user_id: response.user_info.user_id,
-        user_type: response.user_info.user_type,
-        session_token: response.session_token,
-        refresh_token: response.refresh_token
-      };
-    }
-    if (!response.session_token) {
-      throw new RPCError("login_by_password response missing session_token");
-    }
-    return response;
-  }
 }
 const TASK_MANAGER_SERVICE_UNIQUE_ID = "task-manager";
 const TASK_MANAGER_SERVICE_NAME = "task-manager";
@@ -3926,27 +3911,22 @@ class BuckyOSRuntime {
     }, claims, material.keyPem);
   }
   async loadLocalSigningMaterial() {
-    await importNodeModule$1("node:fs/promises");
     const path = await importNodeModule$1("node:path");
     const configuredUserId = this.getOwnerUserId();
     if (!configuredUserId) {
       const etcDir = await this.getBuckyOSEtcDir();
-      const deviceName = await this.readDeviceNameFromNodeIdentityPath(path.join(etcDir, "node_identity.json"));
-      if (!deviceName) {
-        throw new Error(`failed to resolve userid from ${path.join(etcDir, "node_identity.json")} device_mini_doc_jwt`);
+      const nodeIdentityPath = path.join(etcDir, "node_identity.json");
+      const metadata = await this.readNodeIdentityMetadata(nodeIdentityPath);
+      if (!metadata) {
+        throw new Error(`failed to load ${NODE_IDENTITY_SCHEMA_V2} node identity from ${nodeIdentityPath}`);
       }
-      const keyPem = await this.readPemFile(path.join(etcDir, "node_private_key.pem"));
-      if (!keyPem) {
-        throw new Error(`failed to load node_private_key.pem from ${etcDir}`);
+      const material = await this.loadDeviceSigningMaterial(etcDir, metadata);
+      if (!material) {
+        throw new Error(`failed to load authentication private key of ${metadata.deviceDid}`);
       }
-      this.config.userid = deviceName;
-      this.config.ownerUserId = deviceName;
-      return {
-        keyPem,
-        issuer: deviceName,
-        subject: deviceName,
-        sourcePath: path.join(etcDir, "node_private_key.pem")
-      };
+      this.config.userid = metadata.deviceName;
+      this.config.ownerUserId = metadata.deviceName;
+      return material;
     }
     const roots = await this.getPrivateKeySearchRoots();
     const deviceMaterial = await this.tryLoadDeviceSigningMaterial(configuredUserId, roots);
@@ -4005,45 +3985,19 @@ class BuckyOSRuntime {
   async readNodeIdentityMetadata(nodeIdentityPath) {
     const fs = await importNodeModule$1("node:fs/promises");
     try {
-      const raw = await fs.readFile(nodeIdentityPath, "utf8");
-      const parsed = JSON.parse(raw);
-      const deviceName = this.extractDeviceNameFromIdentityPayload(parsed);
+      const parsed = JSON.parse(await fs.readFile(nodeIdentityPath, "utf8"));
+      if (!isBuckyOSLocalNodeIdentityConfig(parsed)) {
+        return null;
+      }
       return {
-        deviceName,
-        deviceDid: typeof parsed.device_did === "string" ? parsed.device_did.trim() || null : null,
-        zoneDid: typeof parsed.zone_did === "string" ? parsed.zone_did.trim() || null : null,
-        zoneName: typeof parsed.zone_name === "string" ? parsed.zone_name.trim() || null : null
+        deviceName: parsed.device_name,
+        deviceDid: parsed.device_did,
+        zoneDid: parsed.zone_did
       };
     } catch {
       return null;
     }
   }
-  extractDeviceNameFromIdentityPayload(payload) {
-    const directName = typeof payload.device_name === "string" ? payload.device_name.trim() : "";
-    if (directName) {
-      return directName;
-    }
-    const miniDocJwt = typeof payload.device_mini_doc_jwt === "string" ? payload.device_mini_doc_jwt : null;
-    const miniDocClaims = parseSessionTokenClaims(miniDocJwt);
-    const miniDocName = typeof (miniDocClaims == null ? void 0 : miniDocClaims.n) === "string" ? miniDocClaims.n.trim() : "";
-    if (miniDocName) {
-      return miniDocName;
-    }
-    const deviceDocJwt = typeof payload.device_doc_jwt === "string" ? payload.device_doc_jwt : null;
-    const deviceDocClaims = parseSessionTokenClaims(deviceDocJwt);
-    for (const claimKey of ["name", "sub"]) {
-      const claimValue = deviceDocClaims == null ? void 0 : deviceDocClaims[claimKey];
-      const candidate = typeof claimValue === "string" ? claimValue.trim() : "";
-      if (candidate) {
-        return candidate;
-      }
-    }
-    return null;
-  }
-  async readDeviceNameFromNodeIdentityPath(nodeIdentityPath) {
-    const metadata = await this.readNodeIdentityMetadata(nodeIdentityPath);
-    return (metadata == null ? void 0 : metadata.deviceName) ?? null;
-  }
   async tryLoadDeviceSigningMaterial(userId, roots) {
     const path = await importNodeModule$1("node:path");
     const candidateDirs = [
@@ -4052,44 +4006,41 @@ class BuckyOSRuntime {
     ];
     for (const dir of Array.from(new Set(candidateDirs))) {
       const metadata = await this.readNodeIdentityMetadata(path.join(dir, "node_identity.json"));
-      const deviceName = (metadata == null ? void 0 : metadata.deviceName) ?? null;
-      if (!deviceName || deviceName !== userId) {
+      if (!metadata || metadata.deviceName !== userId) {
         continue;
       }
-      for (const keyPath of await this.deviceKeyPathCandidates(dir, (metadata == null ? void 0 : metadata.deviceDid) ?? null)) {
-        const keyPem = await this.readPemFile(keyPath);
-        if (!keyPem) {
-          continue;
-        }
-        return {
-          keyPem,
-          issuer: deviceName,
-          subject: deviceName,
-          sourcePath: keyPath
-        };
+      const material = await this.loadDeviceSigningMaterial(dir, metadata);
+      if (material) {
+        return material;
       }
     }
     return null;
   }
-  // node_identity schema v2 stores the device authentication key in the
-  // identity-roots security dir (keyed by the device DID); v1 layouts keep a
-  // node_private_key.pem next to node_identity.json.
-  async deviceKeyPathCandidates(identityDir, deviceDid) {
+  // The device authentication key lives in the identity-roots security dir,
+  // keyed by the device DID.
+  async loadDeviceSigningMaterial(identityDir, metadata) {
     const path = await importNodeModule$1("node:path");
-    const candidates = [];
-    if (deviceDid) {
-      try {
-        const dirName = DID.fromStr(deviceDid).toFilename();
-        const keyFileName = "authentication.private.pem";
-        candidates.push(path.join(identityDir, "security", dirName, keyFileName));
-        const env = getProcessEnv();
-        const securityRoot = trimToNull$2(env.BUCKYOS_SECURITY_ROOT) ?? path.join(trimToNull$2(env.BUCKYOS_ROOT) ?? "/opt/buckyos", "security");
-        candidates.push(path.join(securityRoot, dirName, keyFileName));
-      } catch {
+    const dirName = DID.fromStr(metadata.deviceDid).toFilename();
+    const keyFileName = "authentication.private.pem";
+    const securityRoot = trimToNull$2(getProcessEnv().BUCKYOS_SECURITY_ROOT) ?? path.join(await this.getBuckyOSRootDir(), "security");
+    const keyPaths = [
+      // dev/test layout: security root under the node dir itself
+      path.join(identityDir, "security", dirName, keyFileName),
+      // deployed layout: $BUCKYOS_SECURITY_ROOT or $BUCKYOS_ROOT/security
+      path.join(securityRoot, dirName, keyFileName)
+    ];
+    for (const keyPath of keyPaths) {
+      const keyPem = await this.readPemFile(keyPath);
+      if (keyPem) {
+        return {
+          keyPem,
+          issuer: metadata.deviceName,
+          subject: metadata.deviceName,
+          sourcePath: keyPath
+        };
       }
     }
-    candidates.push(path.join(identityDir, "node_private_key.pem"));
-    return candidates;
+    return null;
   }
   async tryLoadUserSigningMaterial(userId, roots) {
     var _a2;
@@ -4121,35 +4072,6 @@ class BuckyOSRuntime {
     }
     return null;
   }
-  async tryResolveDeviceNameFromSearchRoots(roots) {
-    const path = await importNodeModule$1("node:path");
-    const env = getProcessEnv();
-    const fromEnv = trimToNull$2(env.BUCKYOS_THIS_DEVICE_NAME);
-    if (fromEnv) {
-      return fromEnv;
-    }
-    for (const key of ["BUCKYOS_THIS_DEVICE", "BUCKYOS_THIS_DEVICE_INFO"]) {
-      const raw = trimToNull$2(env[key]);
-      if (!raw) {
-        continue;
-      }
-      try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed.name === "string" && parsed.name.trim().length > 0) {
-          return parsed.name.trim();
-        }
-      } catch {
-      }
-    }
-    for (const root of roots) {
-      const nodeIdentityPath = path.join(root, "node_identity.json");
-      const deviceName = await this.readDeviceNameFromNodeIdentityPath(nodeIdentityPath);
-      if (deviceName) {
-        return deviceName;
-      }
-    }
-    return null;
-  }
   async tryResolveZoneHostFromSearchRoots(roots) {
     var _a2;
     const fs = await importNodeModule$1("node:fs/promises");
@@ -4162,16 +4084,9 @@ class BuckyOSRuntime {
     for (const root of roots) {
       const nodeIdentityPath = path.join(root, "node_identity.json");
       const metadata = await this.readNodeIdentityMetadata(nodeIdentityPath);
-      if (!metadata) {
-        continue;
-      }
-      if (metadata.zoneName) {
-        return metadata.zoneName;
+      if (metadata) {
+        return resolveZoneHostFromDid(metadata.zoneDid);
       }
-      if (!metadata.zoneDid) {
-        continue;
-      }
-      return resolveZoneHostFromDid(metadata.zoneDid);
     }
     for (const root of roots) {
       const userConfigPath = path.join(root, "user_config.json");
@@ -4954,6 +4869,86 @@ class KEventClient {
     };
   }
 }
+const APP_LOGIN_ISSUE_METHOD = "user.app_login.issue";
+const APP_LOGIN_EXCHANGE_METHOD = "auth.app_login.exchange";
+const APP_LOGIN_SETTINGS_GET_METHOD = "apps.app_login.get";
+const APP_LOGIN_SETTINGS_SET_METHOD = "apps.app_login.set";
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+async function issue(client, params, kind) {
+  const result = await client.call(APP_LOGIN_ISSUE_METHOD, { ...params, kind });
+  if (!isRecord(result) || typeof result[kind] !== "string" || typeof result.user_id !== "string") {
+    throw new Error(`invalid ${APP_LOGIN_ISSUE_METHOD} response`);
+  }
+  return result;
+}
+async function issueAppLoginCode(client, params) {
+  const result = await issue(client, params, "code");
+  return {
+    user_id: result.user_id,
+    code: result.code,
+    expires_at: Number(result.expires_at ?? 0),
+    new_account: result.new_account === true,
+    invite: isRecord(result.invite) ? result.invite : {}
+  };
+}
+async function issueAppCustomerLink(client, params) {
+  const result = await issue(client, params, "link");
+  return {
+    user_id: result.user_id,
+    link: result.link,
+    expires_at: Number(result.expires_at ?? 0),
+    new_account: result.new_account === true,
+    invite: isRecord(result.invite) ? result.invite : {}
+  };
+}
+function parseAppLoginExchangeResult(value) {
+  if (!isRecord(value))
+    return null;
+  if (value.status === "ready") {
+    if (typeof value.callback_url !== "string" || typeof value.user_id !== "string")
+      return null;
+    return { status: "ready", callback_url: value.callback_url, user_id: value.user_id };
+  }
+  if (value.status === "denied") {
+    const denial = parseAccessDenial(value.denial);
+    return denial ? { status: "denied", denial } : null;
+  }
+  return null;
+}
+function randomAppLoginNonce() {
+  var _a2;
+  const bytes2 = new Uint8Array(16);
+  if (typeof ((_a2 = globalThis.crypto) == null ? void 0 : _a2.getRandomValues) === "function") {
+    globalThis.crypto.getRandomValues(bytes2);
+  } else {
+    for (let i = 0; i < bytes2.length; i += 1)
+      bytes2[i] = Math.floor(Math.random() * 256);
+  }
+  return Array.from(bytes2, (b2) => b2.toString(16).padStart(2, "0")).join("");
+}
+async function loginByAppAccessToken(params) {
+  const client = params.client ?? new kRPCClient(params.controlPanelUrl ?? "/kapi/control-panel");
+  const request = {
+    code: params.code,
+    nonce: params.nonce ?? randomAppLoginNonce()
+  };
+  if (params.return_path)
+    request.return_path = params.return_path;
+  const result = parseAppLoginExchangeResult(await client.call(APP_LOGIN_EXCHANGE_METHOD, request));
+  if (!result)
+    throw new Error(`invalid ${APP_LOGIN_EXCHANGE_METHOD} response`);
+  return result;
+}
+async function completeAppAccessTokenLogin(params, navigate = (url) => {
+  window.location.assign(url);
+}) {
+  const result = await loginByAppAccessToken(params);
+  if (result.status === "ready")
+    navigate(result.callback_url);
+  return result;
+}
 const WEB3_BRIDGE_HOST = "web3.buckyos.ai";
 const BS_SERVICE_VERIFY_HUB = "verify-hub";
 const BS_SERVICE_TASK_MANAGER = "task-manager";
@@ -5129,7 +5124,6 @@ class BuckyOSSDK {
     var _a2;
     const finalConfig = this.buildRuntimeConfig(appid, config);
     if (this.target !== "node" && isBrowserRuntime() && !config) {
-      localStorage.removeItem("zone_host_name");
       let zoneHostName = localStorage.getItem("zone_host_name_v2");
       if (zoneHostName) {
         finalConfig.zoneHost = zoneHostName;
@@ -5269,20 +5263,19 @@ class BuckyOSSDK {
     try {
       const verifyHubClient = this.getVerifyHubClient();
       verifyHubClient.setSeq(loginNonce);
-      const accountResponse = await verifyHubClient.loginByPassword({
+      const response = await verifyHubClient.loginByPassword({
         username,
         password: passwordHash,
         target: resolvedTarget,
         login_nonce: loginNonce,
         source_url: typeof window !== "undefined" ? window.location.href : void 0
       });
-      const normalized = VerifyHubClient.normalizeLoginResponse(accountResponse);
       const accountInfo = {
-        user_name: normalized.user_name,
-        user_id: normalized.user_id,
-        user_type: normalized.user_type,
-        session_token: normalized.session_token,
-        refresh_token: normalized.refresh_token
+        user_name: response.user_info.show_name,
+        user_id: response.user_info.user_id,
+        user_type: response.user_info.user_type,
+        session_token: response.session_token,
+        refresh_token: response.refresh_token
       };
       if (isBrowserStorageAvailable()) {
         saveLocalAccountInfo(appId, accountInfo);
@@ -5290,7 +5283,7 @@ class BuckyOSSDK {
         saveBrowserUserInfo({
           user_name: accountInfo.user_name,
           user_id: accountInfo.user_id,
-          user_type: normalized.user_type
+          user_type: response.user_info.user_type
         });
       }
       this.currentAccountInfo = accountInfo;
@@ -5573,16 +5566,7 @@ class BuckyOSSDK {
       }
       const doc = await response.json();
       const hostname = typeof doc.hostname === "string" ? doc.hostname.trim() : "";
-      if (hostname.length > 0) {
-        return hostname;
-      }
-      if (typeof doc.id === "string") {
-        const match = doc.id.match(/^did:web:([^/?#]+)/);
-        if (match && match[1]) {
-          return match[1];
-        }
-      }
-      return null;
+      return hostname.length > 0 ? hostname : null;
     } catch {
       return null;
     }
@@ -28627,7 +28611,7 @@ async function uploadChunkViaTus(endpoint, file, chunkInfo, chunkIndex, fileHash
   const logicalPath = chunkInfo.chunkId;
   let tusModule;
   try {
-    tusModule = await import("./tus_client-8fd4d937.mjs");
+    tusModule = await import("./tus_client-d313689e.mjs");
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     throw new NdmError("UPLOAD_FAILED", `Failed to load tus-js-client: ${message}`);
@@ -29758,7 +29742,7 @@ export {
   ZONE_USER_TYPES as Z,
   CONTACT_TAG_ZONE_AGENT as _,
   ndm_proxy as a,
-  TaskExecutorKind as a$,
+  TASK_ERR_CONTROL_ALREADY_PENDING as a$,
   CONTACT_CHANGED_EVENT_BOX as a0,
   WELL_KNOWN_CONTACT_TAGS as a1,
   USER_TYPE_GROUP_REF_PREFIX as a2,
@@ -29769,33 +29753,33 @@ export {
   DENY_REASONS as a7,
   ACCESS_DENIED_ERROR_CODE as a8,
   parseAccessDenial as a9,
-  AGENT_DELEGATE_TASK_SCHEMA_ID as aA,
-  HUMAN_INPUT_TASK_SCHEMA_ID as aB,
-  OPENDAN_ASYNC_TOOL_TASK_SCHEMA_ID as aC,
-  OPENDAN_COMMAND_TASK_SCHEMA_ID as aD,
-  TOOL_EXEC_BASH_TASK_SCHEMA_ID as aE,
-  AICC_COMPUTE_TASK_SCHEMA_ID as aF,
-  APP_INSTALL_TASK_SCHEMA_ID as aG,
-  APP_UNINSTALL_TASK_SCHEMA_ID as aH,
-  APP_START_TASK_SCHEMA_ID as aI,
-  APP_UPDATE_TASK_SCHEMA_ID as aJ,
-  APP_UPDATE_BATCH_TASK_SCHEMA_ID as aK,
-  TASK_ERR_NOT_FOUND as aL,
-  TASK_ERR_PERMISSION_DENIED as aM,
-  TASK_ERR_REVISION_CONFLICT as aN,
-  TASK_ERR_STALE_RUNNER_EPOCH as aO,
-  TASK_ERR_INVALID_PHASE as aP,
-  TASK_ERR_CONTROL_NOT_AVAILABLE as aQ,
-  TASK_ERR_CONTROL_ALREADY_PENDING as aR,
-  TASK_ERR_ALREADY_COMPLETED as aS,
-  TASK_ERR_INPUT_SCHEMA_MISMATCH as aT,
-  TASK_ERR_RESULT_SCHEMA_MISMATCH as aU,
-  TASK_ERR_IDEMPOTENCY_CONFLICT as aV,
-  TASK_ERR_SCHEMA_NOT_FOUND as aW,
-  TASK_MGR_ERROR_CODES as aX,
-  taskMgrTaskEventPath as aY,
-  taskMgrTreeEventPath as aZ,
-  taskMgrErrorCode as a_,
+  DOWNLOAD_TASK_SCHEMA_ID as aA,
+  SCHEDULER_DISPATCH_THUNK_TASK_SCHEMA_ID as aB,
+  WORKFLOW_RUN_TREE_TASK_SCHEMA_ID as aC,
+  WORKFLOW_STEP_TASK_SCHEMA_ID as aD,
+  WORKFLOW_MAP_SHARD_TASK_SCHEMA_ID as aE,
+  WORKFLOW_THUNK_TASK_SCHEMA_ID as aF,
+  WORKFLOW_SCHEDULE_TASK_SCHEMA_ID as aG,
+  WORKFLOW_SEND_MESSAGE_TASK_SCHEMA_ID as aH,
+  WORKFLOW_EXECUTE_RPC_TASK_SCHEMA_ID as aI,
+  WORKFLOW_RUN_TARGET_TASK_SCHEMA_ID as aJ,
+  AGENT_DELEGATE_TASK_SCHEMA_ID as aK,
+  HUMAN_INPUT_TASK_SCHEMA_ID as aL,
+  OPENDAN_ASYNC_TOOL_TASK_SCHEMA_ID as aM,
+  OPENDAN_COMMAND_TASK_SCHEMA_ID as aN,
+  TOOL_EXEC_BASH_TASK_SCHEMA_ID as aO,
+  AICC_COMPUTE_TASK_SCHEMA_ID as aP,
+  APP_INSTALL_TASK_SCHEMA_ID as aQ,
+  APP_UNINSTALL_TASK_SCHEMA_ID as aR,
+  APP_START_TASK_SCHEMA_ID as aS,
+  APP_UPDATE_TASK_SCHEMA_ID as aT,
+  APP_UPDATE_BATCH_TASK_SCHEMA_ID as aU,
+  TASK_ERR_NOT_FOUND as aV,
+  TASK_ERR_PERMISSION_DENIED as aW,
+  TASK_ERR_REVISION_CONFLICT as aX,
+  TASK_ERR_STALE_RUNNER_EPOCH as aY,
+  TASK_ERR_INVALID_PHASE as aZ,
+  TASK_ERR_CONTROL_NOT_AVAILABLE as a_,
   accessDenialOf as aa,
   ANONYMOUS_IDENTITY as ab,
   parseCurrentIdentity as ac,
@@ -29806,103 +29790,113 @@ export {
   normalizeZoneHostname as ah,
   zoneActionUrl as ai,
   buildJumpUrl as aj,
-  TASK_MANAGER_SERVICE_UNIQUE_ID as ak,
-  TASK_MANAGER_SERVICE_NAME as al,
-  TASK_MANAGER_SERVICE_PORT as am,
-  TASK_POLICY_PRESET_COLLABORATIVE_TREE_V1 as an,
-  RAW_TASK_SCHEMA_ID as ao,
-  HUMAN_APPROVAL_SCHEMA_ID as ap,
-  DOWNLOAD_TASK_SCHEMA_ID as aq,
-  SCHEDULER_DISPATCH_THUNK_TASK_SCHEMA_ID as ar,
-  WORKFLOW_RUN_TREE_TASK_SCHEMA_ID as as,
-  WORKFLOW_STEP_TASK_SCHEMA_ID as at,
-  WORKFLOW_MAP_SHARD_TASK_SCHEMA_ID as au,
-  WORKFLOW_THUNK_TASK_SCHEMA_ID as av,
-  WORKFLOW_SCHEDULE_TASK_SCHEMA_ID as aw,
-  WORKFLOW_SEND_MESSAGE_TASK_SCHEMA_ID as ax,
-  WORKFLOW_EXECUTE_RPC_TASK_SCHEMA_ID as ay,
-  WORKFLOW_RUN_TARGET_TASK_SCHEMA_ID as az,
+  APP_LOGIN_ISSUE_METHOD as ak,
+  APP_LOGIN_EXCHANGE_METHOD as al,
+  APP_LOGIN_SETTINGS_GET_METHOD as am,
+  APP_LOGIN_SETTINGS_SET_METHOD as an,
+  issueAppLoginCode as ao,
+  issueAppCustomerLink as ap,
+  parseAppLoginExchangeResult as aq,
+  randomAppLoginNonce as ar,
+  loginByAppAccessToken as as,
+  completeAppAccessTokenLogin as at,
+  TASK_MANAGER_SERVICE_UNIQUE_ID as au,
+  TASK_MANAGER_SERVICE_NAME as av,
+  TASK_MANAGER_SERVICE_PORT as aw,
+  TASK_POLICY_PRESET_COLLABORATIVE_TREE_V1 as ax,
+  RAW_TASK_SCHEMA_ID as ay,
+  HUMAN_APPROVAL_SCHEMA_ID as az,
   bns_client as b,
-  BNS_DNS_TXT_DEFAULT_TTL as b$,
-  TaskPhase as b0,
-  isTerminalTaskPhase as b1,
-  TaskWaitReasonKind as b2,
-  TaskOutcome as b3,
-  TaskControlAction as b4,
-  baselineTaskControlProfile as b5,
-  DEFAULT_CHILD_CONTROL_POLICY as b6,
-  TaskAction as b7,
-  TaskGrantScope as b8,
-  TaskDataScope as b9,
-  AICC_POLICY_REFUSAL_CODES as bA,
-  aiccRefusalOf as bB,
-  isAiccAiMethod as bC,
-  aiccTextMessage as bD,
-  aiccMessageTextContent as bE,
-  aiccMessageFirstText as bF,
-  validateAiccMessage as bG,
-  AiccClient as bH,
-  decisionRequirements as bI,
-  validateDecisionRequest as bJ,
-  validateDecisionAnswers as bK,
-  parseVideoPrompt as bL,
-  validateVideoOutput as bM,
-  validateVideoGeneration as bN,
-  validateVideoEdit as bO,
-  videoGenerationRequirement as bP,
-  KEventReader as bQ,
-  KEventClient as bR,
-  appIdFromDid as bS,
-  parseAppId as bT,
-  appDidFromId as bU,
-  createAppInstanceId as bV,
-  parseAppInstanceId as bW,
-  BNS_EVM_DEFAULT_GAS_LIMIT as bX,
-  BNS_EVM_DEFAULT_MAX_FEE_PER_GAS as bY,
-  BNS_EVM_DEFAULT_MAX_PRIORITY_FEE_PER_GAS as bZ,
-  BNS_MAX_INLINE_DOCUMENT_BYTES as b_,
-  StorageDomain as ba,
-  TaskEventType as bb,
-  TaskManagerClient as bc,
-  WORKFLOW_SERVICE_NAME as bd,
-  WorkflowStepType as be,
-  WorkflowOutputMode as bf,
-  WorkflowJoinMode as bg,
-  WorkflowRetryFallback as bh,
-  WorkflowDefinitionStatus as bi,
-  WorkflowRunStatus as bj,
-  WorkflowNodeRunState as bk,
-  WorkflowHumanActionKind as bl,
-  WorkflowScheduledTaskStatus as bm,
-  WorkflowScheduledTaskMisfirePolicy as bn,
-  WorkflowScheduledTaskFireStatus as bo,
-  WorkflowClient as bp,
-  AICC_SERVICE_UNIQUE_ID as bq,
-  AICC_SERVICE_SERVICE_NAME as br,
-  AICC_SERVICE_SERVICE_PORT as bs,
-  AICC_AI_METHODS as bt,
-  AICC_CORE_METHODS as bu,
-  AICC_MANAGEMENT_METHODS as bv,
-  AICC_QUOTA_METHODS as bw,
-  AICC_METHODS as bx,
-  AICC_FEATURES as by,
-  AICC_EXECUTION_MODES as bz,
+  KEventClient as b$,
+  TASK_ERR_ALREADY_COMPLETED as b0,
+  TASK_ERR_INPUT_SCHEMA_MISMATCH as b1,
+  TASK_ERR_RESULT_SCHEMA_MISMATCH as b2,
+  TASK_ERR_IDEMPOTENCY_CONFLICT as b3,
+  TASK_ERR_SCHEMA_NOT_FOUND as b4,
+  TASK_MGR_ERROR_CODES as b5,
+  taskMgrTaskEventPath as b6,
+  taskMgrTreeEventPath as b7,
+  taskMgrErrorCode as b8,
+  TaskExecutorKind as b9,
+  AICC_SERVICE_UNIQUE_ID as bA,
+  AICC_SERVICE_SERVICE_NAME as bB,
+  AICC_SERVICE_SERVICE_PORT as bC,
+  AICC_AI_METHODS as bD,
+  AICC_CORE_METHODS as bE,
+  AICC_MANAGEMENT_METHODS as bF,
+  AICC_QUOTA_METHODS as bG,
+  AICC_METHODS as bH,
+  AICC_FEATURES as bI,
+  AICC_EXECUTION_MODES as bJ,
+  AICC_POLICY_REFUSAL_CODES as bK,
+  aiccRefusalOf as bL,
+  isAiccAiMethod as bM,
+  aiccTextMessage as bN,
+  aiccMessageTextContent as bO,
+  aiccMessageFirstText as bP,
+  validateAiccMessage as bQ,
+  AiccClient as bR,
+  decisionRequirements as bS,
+  validateDecisionRequest as bT,
+  validateDecisionAnswers as bU,
+  parseVideoPrompt as bV,
+  validateVideoOutput as bW,
+  validateVideoGeneration as bX,
+  validateVideoEdit as bY,
+  videoGenerationRequirement as bZ,
+  KEventReader as b_,
+  TaskPhase as ba,
+  isTerminalTaskPhase as bb,
+  TaskWaitReasonKind as bc,
+  TaskOutcome as bd,
+  TaskControlAction as be,
+  baselineTaskControlProfile as bf,
+  DEFAULT_CHILD_CONTROL_POLICY as bg,
+  TaskAction as bh,
+  TaskGrantScope as bi,
+  TaskDataScope as bj,
+  StorageDomain as bk,
+  TaskEventType as bl,
+  TaskManagerClient as bm,
+  WORKFLOW_SERVICE_NAME as bn,
+  WorkflowStepType as bo,
+  WorkflowOutputMode as bp,
+  WorkflowJoinMode as bq,
+  WorkflowRetryFallback as br,
+  WorkflowDefinitionStatus as bs,
+  WorkflowRunStatus as bt,
+  WorkflowNodeRunState as bu,
+  WorkflowHumanActionKind as bv,
+  WorkflowScheduledTaskStatus as bw,
+  WorkflowScheduledTaskMisfirePolicy as bx,
+  WorkflowScheduledTaskFireStatus as by,
+  WorkflowClient as bz,
   createSDKModule as c,
-  BNS_DNS_TXT_DOC_TYPE as c0,
-  BNS_PUBLISH_DOCUMENT_ABI as c1,
-  BnsEvmTxError as c2,
-  BnsEvmTxBuilder as c3,
-  decodeBnsPublishDocumentCalldata as c4,
-  BnsTxExecutorError as c5,
-  walletUserHasSnAccount as c6,
-  BnsTxExecutor as c7,
-  ExecutorClient as c8,
-  ExecutorStreamError as c9,
-  encodeExecutorControl as ca,
-  ExecutorCommandStream as cb,
-  AIWORKSPACE_SERVICE_NAME as cc,
-  AiwsFailure as cd,
-  AiWorkspaceClient as ce,
+  appIdFromDid as c0,
+  parseAppId as c1,
+  appDidFromId as c2,
+  createAppInstanceId as c3,
+  parseAppInstanceId as c4,
+  BNS_EVM_DEFAULT_GAS_LIMIT as c5,
+  BNS_EVM_DEFAULT_MAX_FEE_PER_GAS as c6,
+  BNS_EVM_DEFAULT_MAX_PRIORITY_FEE_PER_GAS as c7,
+  BNS_MAX_INLINE_DOCUMENT_BYTES as c8,
+  BNS_DNS_TXT_DEFAULT_TTL as c9,
+  BNS_DNS_TXT_DOC_TYPE as ca,
+  BNS_PUBLISH_DOCUMENT_ABI as cb,
+  BnsEvmTxError as cc,
+  BnsEvmTxBuilder as cd,
+  decodeBnsPublishDocumentCalldata as ce,
+  BnsTxExecutorError as cf,
+  walletUserHasSnAccount as cg,
+  BnsTxExecutor as ch,
+  ExecutorClient as ci,
+  ExecutorStreamError as cj,
+  encodeExecutorControl as ck,
+  ExecutorCommandStream as cl,
+  AIWORKSPACE_SERVICE_NAME as cm,
+  AiwsFailure as cn,
+  AiWorkspaceClient as co,
   BS_SERVICE_TASK_MANAGER as d,
   getActiveRuntimeType as e,
   getActiveZoneGatewayOrigin as f,
@@ -29927,4 +29921,4 @@ export {
   NOTIFY_TEXT_CONTROL_ID as y,
   NOTIFY_ACTION_ANSWER as z
 };
-//# sourceMappingURL=executor_client-d2c9e854.mjs.map
+//# sourceMappingURL=executor_client-4fbf0c3c.mjs.map