cli-jaw 2.17.43 → 2.17.44

package/public/locales/ko.json

@@ -938,5 +938,38 @@
   "onboarding.hint.discord.guildId": "개발자 모드를 켠 뒤 서버를 우클릭해 ID 복사.",
   "onboarding.hint.slack.botToken": "OAuth & Permissions의 Bot User OAuth Token (xoxb-로 시작).",
   "onboarding.hint.slack.appToken": "Basic Information → App-Level Tokens (xapp-, connections:write).",
-  "onboarding.progressLabel": "{total}단계 중 {step}단계"
+  "onboarding.progressLabel": "{total}단계 중 {step}단계",
+  "slack.progress.title": "요청 진행 상황",
+  "slack.progress.activityTitle": "최근 작업",
+  "slack.progress.deliveryTitle": "답변 전달",
+  "slack.progress.queued": "대기열에서 대기 중",
+  "slack.progress.running": "작업 활동 관찰 중",
+  "slack.progress.waiting": "다음 업데이트를 기다리는 중",
+  "slack.progress.delivering": "답변 전달 중",
+  "slack.progress.complete": "작업 관찰 종료",
+  "slack.progress.error": "요청 실패",
+  "slack.progress.cancelled": "요청 취소됨",
+  "slack.progress.expired": "진행 표시가 종료되었습니다. 실행은 계속될 수 있습니다.",
+  "slack.progress.merged": "다른 요청과 합쳐짐",
+  "slack.progress.removed": "요청 제거됨",
+  "slack.progress.restored": "이전 진행 표시가 종료되었습니다. 실행 결과는 확인되지 않았습니다.",
+  "slack.progress.failure": "응답을 완료하지 못했습니다.",
+  "slack.progress.elapsed": "경과: {seconds}초",
+  "slack.progress.lastActivity": "마지막 활동: {seconds}초 전",
+  "slack.progress.category.read": "파일 읽기",
+  "slack.progress.category.write": "파일 편집",
+  "slack.progress.category.search": "검색",
+  "slack.progress.category.web": "웹페이지 읽기",
+  "slack.progress.category.command": "명령 실행",
+  "slack.progress.category.external": "외부 도구",
+  "slack.progress.category.tool": "도구 활동",
+  "slack.progress.status.observed": "관찰됨",
+  "slack.progress.status.in_progress": "진행 중",
+  "slack.progress.status.complete": "완료",
+  "slack.progress.status.error": "오류",
+  "slack.progress.status.stopped": "중단됨",
+  "slack.progress.status.unconfirmed": "완료 미확인",
+  "slack.progress.deliveryComplete": "답변 전달 완료",
+  "slack.progress.deliveryFailed": "답변 전달을 확인하지 못했습니다",
+  "slack.progress.deliveryUnconfirmed": "답변 전달 여부 미확인"
 }

package/public/locales/zh.json

@@ -938,5 +938,38 @@
   "settings.channel.testSend": "测试发送",
   "settings.channel.testSendFail": "发送失败：{error}",
   "settings.channel.testSendOk": "发送成功",
-  "onboarding.progressLabel": "第 {step} 步，共 {total} 步"
+  "onboarding.progressLabel": "第 {step} 步，共 {total} 步",
+  "slack.progress.title": "请求进度",
+  "slack.progress.activityTitle": "最近的工作",
+  "slack.progress.deliveryTitle": "答复发送",
+  "slack.progress.queued": "排队中",
+  "slack.progress.running": "正在观察活动",
+  "slack.progress.waiting": "等待下一次更新",
+  "slack.progress.delivering": "正在发送答复",
+  "slack.progress.complete": "工作观察已结束",
+  "slack.progress.error": "请求失败",
+  "slack.progress.cancelled": "请求已取消",
+  "slack.progress.expired": "进度显示已结束，执行可能仍在继续。",
+  "slack.progress.merged": "已合并至其他请求",
+  "slack.progress.removed": "请求已移除",
+  "slack.progress.restored": "之前的进度显示已结束，执行结果尚未确认。",
+  "slack.progress.failure": "未能完成回复。",
+  "slack.progress.elapsed": "已用时：{seconds}秒",
+  "slack.progress.lastActivity": "上次活动：{seconds}秒前",
+  "slack.progress.category.read": "读取文件",
+  "slack.progress.category.write": "编辑文件",
+  "slack.progress.category.search": "搜索",
+  "slack.progress.category.web": "读取网页",
+  "slack.progress.category.command": "执行命令",
+  "slack.progress.category.external": "外部工具",
+  "slack.progress.category.tool": "工具活动",
+  "slack.progress.status.observed": "已观察",
+  "slack.progress.status.in_progress": "运行中",
+  "slack.progress.status.complete": "完成",
+  "slack.progress.status.error": "错误",
+  "slack.progress.status.stopped": "已停止",
+  "slack.progress.status.unconfirmed": "完成未确认",
+  "slack.progress.deliveryComplete": "答复已发送",
+  "slack.progress.deliveryFailed": "无法确认答复已发送",
+  "slack.progress.deliveryUnconfirmed": "答复发送情况未确认"
 }

package/scripts/check-native-load.cjs

@@ -98,14 +98,27 @@ if (!ptyRoot) {
 
     // 2. spawn-helper must be present AND executable, or every pty dies at
     //    runtime with a permission error that no import check would catch.
-    const helper = join(ptyRoot, 'build', 'Release', 'spawn-helper');
+    //
+    //    Resolved the same way the binary above is, and for the same reason.
+    //    node-pty's install is `prebuild.js || node-gyp rebuild`: when the
+    //    prebuilds match, prebuild.js exits 0, the source build never runs and
+    //    build/Release is never created, so post-install.js has nothing to move
+    //    there. Looking only in build/Release therefore failed the gate on a
+    //    prebuild-only install even though node-pty itself would have loaded
+    //    the prebuilt helper. Both locations are real; the executable bit is
+    //    what actually has to hold.
     if (process.platform !== 'win32') {
-      if (!existsSync(helper)) {
-        fail(`missing spawn-helper: ${helper}`);
+      const helperCandidates = [
+        join(ptyRoot, 'build', 'Release', 'spawn-helper'),
+        join(ptyRoot, 'prebuilds', `${process.platform}-${process.arch}`, 'spawn-helper'),
+      ];
+      const helper = helperCandidates.find((candidate) => existsSync(candidate));
+      if (!helper) {
+        fail(`missing spawn-helper: none of\n   ${helperCandidates.join('\n   ')}`);
       } else {
         try {
           accessSync(helper, constants.X_OK);
-          note(`spawn-helper executable: mode ${(statSync(helper).mode & 0o777).toString(8)}`);
+          note(`spawn-helper executable: ${helper} (mode ${(statSync(helper).mode & 0o777).toString(8)})`);
         } catch {
           fail(`spawn-helper is not executable: ${helper} (mode ${(statSync(helper).mode & 0o777).toString(8)})`);
         }

package/scripts/release-gates.mjs

@@ -68,6 +68,70 @@ function readFile(rel) {
     return fs.readFileSync(path.join(repoRoot, rel), 'utf8');
 }
 
+/**
+ * Lines only a git merge conflict produces. A bare `=======` is deliberately
+ * absent: it is also a Markdown setext H1 underline, so matching it would fail
+ * this gate on ordinary prose. Every real conflict carries the anchored
+ * `<<<<<<<`/`>>>>>>>` pair, so the pair is enough to see one.
+ */
+const CONFLICT_MARKER_RE = '^(<<<<<<< |\\|\\|\\|\\|\\|\\|\\| |>>>>>>> )';
+
+/**
+ * tests/fixtures/manager-notes-wysiwyg holds canned conflict text on purpose —
+ * it is the INPUT to the notes conflict-rendering tests, not a merge leftover.
+ */
+const CONFLICT_SCAN_EXCLUDE = ':(exclude)tests/fixtures/manager-notes-wysiwyg/';
+
+/**
+ * Tracked files still carrying merge markers. `git grep` reads only tracked
+ * paths, so an untracked scratch file cannot fail the build, and `-I` skips
+ * binaries. A status other than 0 (found) or 1 (clean) means the scan did not
+ * actually run, which is reported rather than silently passed.
+ */
+function grepConflictMarkers(cwd, prefix) {
+    const r = run('git', ['grep', '-n', '-I', '-E', CONFLICT_MARKER_RE, '--', '.', CONFLICT_SCAN_EXCLUDE],
+        { timeout: 60_000, cwd });
+    if (r.status === 1) return { hits: [] };
+    if (r.status !== 0) {
+        const why = [r.stderr, r.stdout].filter(Boolean).join(' ').trim() || `status ${r.status}`;
+        return { error: `conflict-marker scan could not run in ${prefix || '.'}: ${why}` };
+    }
+    const hits = String(r.stdout || '').split('\n').filter(Boolean)
+        .map(line => (prefix ? `${prefix}/${line}` : line));
+    return { hits };
+}
+
+/**
+ * `git grep` stops at a gitlink, and a marker committed inside a submodule
+ * ships when that submodule is published — the same reason
+ * check-private-boundary.mjs enumerates submodule contents instead of trusting
+ * `ls-files`. So each CHECKED-OUT submodule is scanned in its own right. An
+ * uninitialised one holds no working tree to read; it is named in the detail
+ * rather than counted as clean, because "nothing to scan" is not "scanned and
+ * clean".
+ */
+function trackedConflictMarkers() {
+    const root = grepConflictMarkers(repoRoot, '');
+    if (root.error) return root;
+    const hits = [...root.hits];
+    const unscanned = [];
+    const listed = run('git', ['submodule', 'status'], { timeout: 30_000 });
+    if (listed.status === 0) {
+        for (const line of String(listed.stdout || '').split('\n').filter(Boolean)) {
+            // ' <sha> <path> (<describe>)', where a leading '-' means the
+            // submodule was never initialised in this checkout.
+            const parsed = line.match(/^(.)[0-9a-f]+\s+(\S+)/);
+            if (!parsed) continue;
+            const [, state, rel] = parsed;
+            if (state === '-') { unscanned.push(rel); continue; }
+            const nested = grepConflictMarkers(path.join(repoRoot, rel), rel);
+            if (nested.error) return nested;
+            hits.push(...nested.hits);
+        }
+    }
+    return { hits, unscanned };
+}
+
 const FORBIDDEN_IN_READY = [
     /external[-\s]?cdp/i,
     /remote[-\s]?cdp/i,
@@ -417,13 +481,30 @@ const GATES = {
         },
     },
     'doc-drift': {
-        description: 'structure docs match live inventory (docs:check TS extractors + legacy bash checks)',
+        description: 'no tracked file carries merge conflict markers (every run) + structure docs match live inventory (local only)',
         check() {
+            // A merge that commits its own conflict markers is the one docs
+            // failure CI has to catch, and nothing did: the #660 merge landed 14
+            // unresolved blocks on dev (README.md, AGENTS.md, CLAUDE.md,
+            // structure/str_func.md) and gate:all still went green, because the
+            // inventory steps below are skipped on CI and nothing else reads
+            // those files' contents. This scan is a string match on tracked
+            // paths — platform-neutral — so it runs before that skip.
+            const markers = trackedConflictMarkers();
+            if (markers.error) return { ok: false, detail: markers.error };
+            if (markers.hits.length) {
+                const sample = markers.hits.slice(0, 5).join('; ');
+                const more = markers.hits.length > 5 ? ` (+${markers.hits.length - 5} more)` : '';
+                return { ok: false, detail: `${markers.hits.length} unresolved conflict marker line(s): ${sample}${more}` };
+            }
+            const unscanned = markers.unscanned?.length
+                ? ` (not scanned, uninitialised submodule(s): ${markers.unscanned.join(', ')})`
+                : '';
             // CI runners produce platform-dependent file/line inventories
             // (no public/dist, different tracked-file set) that this gate
             // cannot reconcile; it stays a local/pre-release discipline gate.
             if (process.env.CI) {
-                return { ok: true, detail: 'skipped on CI (local/pre-release gate only)' };
+                return { ok: true, detail: `conflict-marker scan clean${unscanned}; inventory steps skipped on CI (local/pre-release only)` };
             }
             const steps = [
                 { name: 'docs:check', cmd: 'npm', args: ['run', 'docs:check', '--silent'], timeout: 120_000 },
@@ -435,7 +516,7 @@ const GATES = {
                     return { ok: false, detail: `${s.name} failed:\n${[r.stdout, r.stderr].filter(Boolean).join('\n').slice(-1500)}` };
                 }
             }
-            return { ok: true, detail: 'docs:check + check-doc-drift.sh clean' };
+            return { ok: true, detail: `conflict-marker scan clean${unscanned}; docs:check + check-doc-drift.sh clean` };
         },
     },
     'path-length': {

package/scripts/service-artifact.mjs

@@ -0,0 +1,157 @@
+#!/usr/bin/env node
+// Local release launcher. No package imports: verification runs before the CLI.
+// node scripts/service-artifact.mjs --root /absolute/release --manifest-sha256 HEX [--check] -- [CLI args]
+// artifact-manifest.json: {schemaVersion:1,version:"2.17.42",entrypoint:"dist/bin/cli-jaw.js",files:{"relative/file":"sha256"}}
+// The inventory covers every regular file, including this launcher, except the
+// manifest itself. Package a runtime tree without symlinks (including .bin links).
+// The digest is anchored outside the release, e.g. in launchd ProgramArguments.
+// This detects drift, not a malicious owner changing both launcher and anchor.
+// Keep releases immutable during verification/import; this is not a JS sandbox.
+import { constants } from 'node:fs';
+import { lstat, open, readdir, realpath } from 'node:fs/promises';
+import { createHash } from 'node:crypto';
+import { delimiter, dirname, isAbsolute, join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+const MANIFEST = 'artifact-manifest.json';
+const MAX_MANIFEST_BYTES = 16 * 1024 * 1024;
+const MAX_FILES = 100_000;
+const MAX_FILE_BYTES = 2 * 1024 * 1024 * 1024;
+const SHA256 = /^[a-f0-9]{64}$/;
+const ZSH_FILES = ['.zshenv', '.zprofile', '.zshrc', '.zlogin', '.zlogout'];
+const ZSH_DIR = 'scripts/service-shell/zsh';
+const fail = code => { throw new Error(code); };
+const record = value => value !== null && typeof value === 'object' && !Array.isArray(value);
+const exactKeys = (value, keys) => record(value) && Object.keys(value).length === keys.length
+    && keys.every(key => Object.hasOwn(value, key));
+
+function relativePath(value) {
+    return typeof value === 'string' && value.length > 0 && value.length <= 4096
+        && !/[\\:\p{Cc}\p{Cf}]/u.test(value)
+        && value.split('/').every(part => part && part !== '.' && part !== '..' && part === part.trim());
+}
+
+function argumentsOf(args) {
+    const result = { check: false, cliArgs: [] };
+    const seen = new Set();
+    for (let i = 0; i < args.length; i++) {
+        const flag = args[i];
+        if (flag === '--') { result.cliArgs = args.slice(i + 1); break; }
+        if (!['--root', '--manifest-sha256', '--check'].includes(flag) || seen.has(flag)) fail('invalid_arguments');
+        seen.add(flag);
+        if (flag === '--check') result.check = true;
+        else {
+            const value = args[++i];
+            if (!value || value.startsWith('--')) fail('invalid_arguments');
+            result[flag === '--root' ? 'root' : 'digest'] = value;
+        }
+    }
+    if (!result.root || !isAbsolute(result.root) || !SHA256.test(result.digest ?? '')) fail('invalid_arguments');
+    return result;
+}
+
+async function readRegular(file, limit, collect = false) {
+    const before = await lstat(file);
+    if (!before.isFile() || before.isSymbolicLink() || before.size > limit) fail('non_regular_or_oversized_file');
+    const handle = await open(file, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    try {
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.dev !== before.dev || opened.ino !== before.ino) fail('file_changed');
+        const hash = createHash('sha256'), chunks = [];
+        const buffer = Buffer.alloc(64 * 1024);
+        let bytes = 0;
+        for (;;) {
+            const { bytesRead } = await handle.read(buffer, 0, buffer.length, null);
+            if (!bytesRead) break;
+            bytes += bytesRead;
+            if (bytes > limit) fail('oversized_file');
+            hash.update(buffer.subarray(0, bytesRead));
+            if (collect) chunks.push(Buffer.from(buffer.subarray(0, bytesRead)));
+        }
+        const after = await handle.stat();
+        if (bytes !== before.size || after.size !== before.size || after.mtimeMs !== before.mtimeMs
+            || after.ctimeMs !== before.ctimeMs) fail('file_changed');
+        return { digest: hash.digest('hex'), bytes, ...(collect ? { data: Buffer.concat(chunks) } : {}) };
+    } finally { await handle.close(); }
+}
+
+async function verify(options) {
+    const root = resolve(options.root);
+    if (await realpath(root) !== root || !(await lstat(root)).isDirectory()) fail('invalid_release_root');
+    const manifest = await readRegular(join(root, MANIFEST), MAX_MANIFEST_BYTES, true);
+    if (manifest.digest !== options.digest) fail('manifest_digest_mismatch');
+    let spec;
+    try { spec = JSON.parse(manifest.data.toString('utf8')); } catch { fail('invalid_manifest_json'); }
+    if (!exactKeys(spec, ['schemaVersion', 'version', 'entrypoint', 'files']) || spec.schemaVersion !== 1
+        || typeof spec.version !== 'string' || !/^[0-9]+\.[0-9]+\.[0-9]+(?:[-+][A-Za-z0-9.+-]+)?$/.test(spec.version)
+        || !relativePath(spec.entrypoint) || !/\.(?:mjs|js)$/.test(spec.entrypoint) || !record(spec.files)) fail('invalid_manifest');
+    const entries = Object.entries(spec.files);
+    if (!entries.length || entries.length > MAX_FILES || !Object.hasOwn(spec.files, spec.entrypoint)) fail('invalid_inventory');
+    for (const [file, digest] of entries) {
+        if (!relativePath(file) || file === MANIFEST || typeof digest !== 'string' || !SHA256.test(digest)) fail('invalid_inventory');
+    }
+    const seen = new Set();
+    const dirs = [''];
+    let directoryCount = 0, bytes = 0;
+    while (dirs.length) {
+        const relative = dirs.pop();
+        if (++directoryCount > MAX_FILES) fail('inventory_limit');
+        for (const name of await readdir(join(root, relative))) {
+            const file = relative ? `${relative}/${name}` : name;
+            if (!relativePath(file)) fail('unsafe_path');
+            const full = join(root, file), stat = await lstat(full);
+            if (stat.isSymbolicLink()) fail('symlink_not_allowed');
+            if (stat.isDirectory()) { dirs.push(file); continue; }
+            if (!stat.isFile()) fail('non_regular_file');
+            if (file === MANIFEST) continue;
+            if (!Object.hasOwn(spec.files, file)) fail('unlisted_file');
+            const verified = await readRegular(full, MAX_FILE_BYTES);
+            if (verified.digest !== spec.files[file]) fail('file_digest_mismatch');
+            seen.add(file); bytes += verified.bytes;
+        }
+    }
+    if (seen.size !== entries.length) fail('missing_file');
+    const zshCount = ZSH_FILES.filter(name => seen.has(`${ZSH_DIR}/${name}`)).length;
+    if (zshCount && zshCount !== ZSH_FILES.length) fail('incomplete_shell_shims');
+    return { root, spec, receipt: { ok: true, schemaVersion: 1, version: spec.version,
+        manifestSha256: manifest.digest, entrypoint: spec.entrypoint, files: seen.size, bytes } };
+}
+
+try {
+    const options = argumentsOf(process.argv.slice(2));
+    const { root, spec, receipt } = await verify(options);
+    if (options.check) console.log(JSON.stringify(receipt));
+    else {
+        const entry = join(root, spec.entrypoint);
+        process.argv = [process.execPath, entry, ...options.cliArgs];
+        process.env.CLI_JAW_BIN = entry;
+        // Packaging supplies hashed, regular-file jaw/cli-jaw aliases beside the
+        // entrypoint. Child tools must resolve those before npm's mutable bin.
+        const inheritedPath = process.env.PATH;
+        process.env.PATH = dirname(entry) + (inheritedPath ? delimiter + inheritedPath : '');
+        if (ZSH_FILES.every(name => Object.hasOwn(spec.files, `${ZSH_DIR}/${name}`))) {
+            // Forward the caller's ZDOTDIR, including unset versus explicitly empty.
+            // On launcher reentry retain the original user directory, not our shim.
+            const reentry = process.env.CLI_JAW_ZSH_SHIMS
+                && process.env.ZDOTDIR === process.env.CLI_JAW_ZSH_SHIMS
+                && ['0', '1'].includes(process.env.CLI_JAW_USER_ZDOTDIR_SET ?? '');
+            if (!reentry) {
+                process.env.CLI_JAW_USER_ZDOTDIR_SET = Object.hasOwn(process.env, 'ZDOTDIR') ? '1' : '0';
+                process.env.CLI_JAW_USER_ZDOTDIR = process.env.ZDOTDIR ?? '';
+            }
+            process.env.CLI_JAW_VERIFIED_BIN = dirname(entry);
+            process.env.CLI_JAW_ZSH_SHIMS = join(root, ZSH_DIR);
+            process.env.ZDOTDIR = process.env.CLI_JAW_ZSH_SHIMS;
+        }
+        await import(pathToFileURL(entry).href);
+    }
+} catch (error) {
+    // Do not serialize paths, imported exception text or environment values.
+    const known = new Set(['invalid_arguments', 'non_regular_or_oversized_file', 'file_changed', 'oversized_file',
+        'invalid_release_root', 'manifest_digest_mismatch', 'invalid_manifest_json', 'invalid_manifest',
+        'invalid_inventory', 'inventory_limit', 'unsafe_path', 'symlink_not_allowed', 'non_regular_file',
+        'unlisted_file', 'file_digest_mismatch', 'missing_file', 'incomplete_shell_shims']);
+    const code = known.has(error?.message) ? error.message : error?.code === 'ENOENT' ? 'missing_file' : 'artifact_launch_failed';
+    console.error(JSON.stringify({ ok: false, error: code }));
+    process.exitCode = 1;
+}

package/scripts/service-shell/zsh/.zlogin

@@ -0,0 +1,23 @@
+# Service-only zsh forwarding. Keep user configs at top level (no function scope).
+# Reapply the verified bin after each usual config; this is not a shell sandbox.
+# Bash/other shells, zsh -f, config exit/exec, and later PATH edits are not covered.
+if [[ -n ${CLI_JAW_ZSH_SHIMS-} && -n ${CLI_JAW_VERIFIED_BIN-} ]]; then
+    if [[ ${CLI_JAW_USER_ZDOTDIR_SET-0} == 1 ]]; then
+        export ZDOTDIR="${CLI_JAW_USER_ZDOTDIR-}"
+    else
+        unset ZDOTDIR
+    fi
+    _CLI_JAW_ZSH_USER_FILE="${ZDOTDIR-${HOME}}/.zlogin"
+    if [[ -r "$_CLI_JAW_ZSH_USER_FILE" && "${_CLI_JAW_ZSH_USER_FILE:A}" != "${CLI_JAW_ZSH_SHIMS:A}/.zlogin" ]]; then
+        source "$_CLI_JAW_ZSH_USER_FILE"
+    fi
+    # Honor a user's ZDOTDIR reassignment for subsequent config files.
+    if (( ${+ZDOTDIR} )); then
+        export CLI_JAW_USER_ZDOTDIR_SET=1 CLI_JAW_USER_ZDOTDIR="$ZDOTDIR"
+    else
+        export CLI_JAW_USER_ZDOTDIR_SET=0 CLI_JAW_USER_ZDOTDIR=''
+    fi
+    unset _CLI_JAW_ZSH_USER_FILE
+    export ZDOTDIR="$CLI_JAW_ZSH_SHIMS"
+    export PATH="$CLI_JAW_VERIFIED_BIN${PATH:+:$PATH}"
+fi

package/scripts/service-shell/zsh/.zlogout

@@ -0,0 +1,23 @@
+# Service-only zsh forwarding. Keep user configs at top level (no function scope).
+# Reapply the verified bin after each usual config; this is not a shell sandbox.
+# Bash/other shells, zsh -f, config exit/exec, and later PATH edits are not covered.
+if [[ -n ${CLI_JAW_ZSH_SHIMS-} && -n ${CLI_JAW_VERIFIED_BIN-} ]]; then
+    if [[ ${CLI_JAW_USER_ZDOTDIR_SET-0} == 1 ]]; then
+        export ZDOTDIR="${CLI_JAW_USER_ZDOTDIR-}"
+    else
+        unset ZDOTDIR
+    fi
+    _CLI_JAW_ZSH_USER_FILE="${ZDOTDIR-${HOME}}/.zlogout"
+    if [[ -r "$_CLI_JAW_ZSH_USER_FILE" && "${_CLI_JAW_ZSH_USER_FILE:A}" != "${CLI_JAW_ZSH_SHIMS:A}/.zlogout" ]]; then
+        source "$_CLI_JAW_ZSH_USER_FILE"
+    fi
+    # Honor a user's ZDOTDIR reassignment for subsequent config files.
+    if (( ${+ZDOTDIR} )); then
+        export CLI_JAW_USER_ZDOTDIR_SET=1 CLI_JAW_USER_ZDOTDIR="$ZDOTDIR"
+    else
+        export CLI_JAW_USER_ZDOTDIR_SET=0 CLI_JAW_USER_ZDOTDIR=''
+    fi
+    unset _CLI_JAW_ZSH_USER_FILE
+    export ZDOTDIR="$CLI_JAW_ZSH_SHIMS"
+    export PATH="$CLI_JAW_VERIFIED_BIN${PATH:+:$PATH}"
+fi

package/scripts/service-shell/zsh/.zprofile

@@ -0,0 +1,23 @@
+# Service-only zsh forwarding. Keep user configs at top level (no function scope).
+# Reapply the verified bin after each usual config; this is not a shell sandbox.
+# Bash/other shells, zsh -f, config exit/exec, and later PATH edits are not covered.
+if [[ -n ${CLI_JAW_ZSH_SHIMS-} && -n ${CLI_JAW_VERIFIED_BIN-} ]]; then
+    if [[ ${CLI_JAW_USER_ZDOTDIR_SET-0} == 1 ]]; then
+        export ZDOTDIR="${CLI_JAW_USER_ZDOTDIR-}"
+    else
+        unset ZDOTDIR
+    fi
+    _CLI_JAW_ZSH_USER_FILE="${ZDOTDIR-${HOME}}/.zprofile"
+    if [[ -r "$_CLI_JAW_ZSH_USER_FILE" && "${_CLI_JAW_ZSH_USER_FILE:A}" != "${CLI_JAW_ZSH_SHIMS:A}/.zprofile" ]]; then
+        source "$_CLI_JAW_ZSH_USER_FILE"
+    fi
+    # Honor a user's ZDOTDIR reassignment for subsequent config files.
+    if (( ${+ZDOTDIR} )); then
+        export CLI_JAW_USER_ZDOTDIR_SET=1 CLI_JAW_USER_ZDOTDIR="$ZDOTDIR"
+    else
+        export CLI_JAW_USER_ZDOTDIR_SET=0 CLI_JAW_USER_ZDOTDIR=''
+    fi
+    unset _CLI_JAW_ZSH_USER_FILE
+    export ZDOTDIR="$CLI_JAW_ZSH_SHIMS"
+    export PATH="$CLI_JAW_VERIFIED_BIN${PATH:+:$PATH}"
+fi

package/scripts/service-shell/zsh/.zshenv

@@ -0,0 +1,23 @@
+# Service-only zsh forwarding. Keep user configs at top level (no function scope).
+# Reapply the verified bin after each usual config; this is not a shell sandbox.
+# Bash/other shells, zsh -f, config exit/exec, and later PATH edits are not covered.
+if [[ -n ${CLI_JAW_ZSH_SHIMS-} && -n ${CLI_JAW_VERIFIED_BIN-} ]]; then
+    if [[ ${CLI_JAW_USER_ZDOTDIR_SET-0} == 1 ]]; then
+        export ZDOTDIR="${CLI_JAW_USER_ZDOTDIR-}"
+    else
+        unset ZDOTDIR
+    fi
+    _CLI_JAW_ZSH_USER_FILE="${ZDOTDIR-${HOME}}/.zshenv"
+    if [[ -r "$_CLI_JAW_ZSH_USER_FILE" && "${_CLI_JAW_ZSH_USER_FILE:A}" != "${CLI_JAW_ZSH_SHIMS:A}/.zshenv" ]]; then
+        source "$_CLI_JAW_ZSH_USER_FILE"
+    fi
+    # Honor a user's ZDOTDIR reassignment for subsequent config files.
+    if (( ${+ZDOTDIR} )); then
+        export CLI_JAW_USER_ZDOTDIR_SET=1 CLI_JAW_USER_ZDOTDIR="$ZDOTDIR"
+    else
+        export CLI_JAW_USER_ZDOTDIR_SET=0 CLI_JAW_USER_ZDOTDIR=''
+    fi
+    unset _CLI_JAW_ZSH_USER_FILE
+    export ZDOTDIR="$CLI_JAW_ZSH_SHIMS"
+    export PATH="$CLI_JAW_VERIFIED_BIN${PATH:+:$PATH}"
+fi

package/scripts/service-shell/zsh/.zshrc

@@ -0,0 +1,23 @@
+# Service-only zsh forwarding. Keep user configs at top level (no function scope).
+# Reapply the verified bin after each usual config; this is not a shell sandbox.
+# Bash/other shells, zsh -f, config exit/exec, and later PATH edits are not covered.
+if [[ -n ${CLI_JAW_ZSH_SHIMS-} && -n ${CLI_JAW_VERIFIED_BIN-} ]]; then
+    if [[ ${CLI_JAW_USER_ZDOTDIR_SET-0} == 1 ]]; then
+        export ZDOTDIR="${CLI_JAW_USER_ZDOTDIR-}"
+    else
+        unset ZDOTDIR
+    fi
+    _CLI_JAW_ZSH_USER_FILE="${ZDOTDIR-${HOME}}/.zshrc"
+    if [[ -r "$_CLI_JAW_ZSH_USER_FILE" && "${_CLI_JAW_ZSH_USER_FILE:A}" != "${CLI_JAW_ZSH_SHIMS:A}/.zshrc" ]]; then
+        source "$_CLI_JAW_ZSH_USER_FILE"
+    fi
+    # Honor a user's ZDOTDIR reassignment for subsequent config files.
+    if (( ${+ZDOTDIR} )); then
+        export CLI_JAW_USER_ZDOTDIR_SET=1 CLI_JAW_USER_ZDOTDIR="$ZDOTDIR"
+    else
+        export CLI_JAW_USER_ZDOTDIR_SET=0 CLI_JAW_USER_ZDOTDIR=''
+    fi
+    unset _CLI_JAW_ZSH_USER_FILE
+    export ZDOTDIR="$CLI_JAW_ZSH_SHIMS"
+    export PATH="$CLI_JAW_VERIFIED_BIN${PATH:+:$PATH}"
+fi

package/public/dist/assets/bgtask-badge-DHA2OQm8.js

@@ -1 +0,0 @@
-import{r as e,t}from"./bgtask-badge-DAcWaUfS.js";export{t as applyBgtaskUpdate,e as refreshBgtaskBadge};

package/public/dist/assets/iframe-renderer-RpvBly2x.js

@@ -1 +0,0 @@
-import{a as e}from"./iframe-renderer-DCDKBMb7.js";export{e as refreshFileWidget};

package/public/dist/assets/memory-4YH8sz0L.js

@@ -1 +0,0 @@
-import{a as e}from"./memory-DhNdKZLO.js";export{e as refreshMemorySidebar};

package/public/dist/assets/message-history-lVcLpAw8.js

@@ -1 +0,0 @@
-import{o as e,s as t}from"./message-history-DbRTl1P0.js";export{e as historyReloadInFlight,t as loadMessages};

package/public/dist/assets/settings--EGy3_B9.js

@@ -1 +0,0 @@
-import{c as e,n as t}from"./settings-core-BcVD2FgV.js";import"./settings-C9_D-pn0.js";export{t as loadSettings,e as updateSettings};

package/public/dist/assets/settings-core-8wBl1mg-.js

@@ -1 +0,0 @@
-import{a as e}from"./settings-core-BcVD2FgV.js";export{e as refreshHeaderFromSettingsChange};

package/public/dist/assets/skills-6GFkHTlQ.js

@@ -1 +0,0 @@
-import{n as e}from"./skills-X7qxmHka.js";export{e as loadSkills};

package/public/dist/assets/slash-commands-qu8fPAZ3.js

@@ -1 +0,0 @@
-import{a as e}from"./slash-commands-BnDH4IU_.js";export{e as loadCommands};

package/public/dist/assets/ui-BucJ1zMA.js

@@ -1 +0,0 @@
-import{p as e}from"./iframe-renderer-DCDKBMb7.js";import{I as t,s as n}from"./message-history-DbRTl1P0.js";import{r}from"./ui-BtiBTXng.js";export{r as cleanupToolActivity,n as loadMessages,e as reconcileChatBottomAfterRestore,t as updateQueueBadge};