devworkspace 0.1.0 → 0.2.0

package/dist/integrations/manager.js

@@ -0,0 +1,248 @@
+import os from 'node:os';
+import { onCleanup } from '../utils/cleanup.js';
+import { withLock } from '../utils/lock.js';
+import { redact } from '../security/redact.js';
+import { findAbsolutePaths } from '../utils/paths.js';
+import { agentSkills } from './adapters/agent-skills.js';
+import { graphify } from './adapters/graphify.js';
+import { omniroute } from './adapters/omniroute.js';
+import { ponytail } from './adapters/ponytail.js';
+import { createRunner } from './exec.js';
+import { restoreSnapshot, takeSnapshot, verifySnapshot } from './protect.js';
+import { blankEntry, loadIntegrationsState, saveIntegrationEntry, wasInterrupted } from './state.js';
+import { REQUIRED_INTEGRATIONS, } from './types.js';
+/** Tool output goes into reports and the state file: strip secrets and machine-specific paths, flatten to one line. */
+export function scrub(text) {
+    let out = redact(text);
+    for (const p of findAbsolutePaths(out))
+        out = out.split(p).join('<path>');
+    return out.replace(/\s+/g, ' ').trim().slice(0, 400);
+}
+export const ADAPTERS = [graphify, agentSkills, ponytail, omniroute];
+function resolveEnv(m) {
+    const env = m.env ?? process.env;
+    const platform = m.platform ?? process.platform;
+    return {
+        root: m.root,
+        home: m.home ?? os.homedir(),
+        env,
+        platform,
+        runner: m.runner ?? createRunner(env, platform),
+        now: m.now ?? (() => new Date()),
+        adapters: m.adapters ?? ADAPTERS,
+    };
+}
+function ctxFor(m, setup, prior, report, signal) {
+    return { root: m.root, home: m.home, env: m.env, platform: m.platform, runner: m.runner, setup, prior, report, signal };
+}
+const DEFAULT_SETUP = { scope: 'project', yes: false, dryRun: false, repair: false };
+/** Combine what was observed with what earlier runs recorded. Records can only add warnings or RESTART_REQUIRED, never VERIFIED. */
+export function applyPersisted(report, entry) {
+    if (!entry)
+        return report;
+    const out = { ...report, warnings: [...report.warnings], nextSteps: [...report.nextSteps] };
+    if (wasInterrupted(entry)) {
+        out.warnings.push('A previous setup run was interrupted before it finished.');
+        if (!out.nextSteps.includes('devworkspace integrations repair --yes'))
+            out.nextSteps.push('devworkspace integrations repair --yes');
+    }
+    if ((out.status === 'NOT_INSTALLED' || out.status === 'DEGRADED') && entry.lastError) {
+        out.status = 'FAILED';
+        out.warnings.push(`The last setup attempt failed: ${entry.lastError}`);
+    }
+    if (entry.restartRequiredAt && (out.status === 'VERIFIED' || out.status === 'INSTALLED')) {
+        out.status = 'RESTART_REQUIRED';
+        out.nextSteps.push('Restart Claude Code (or run /reload-plugins) so it loads the new skills/plugins/hooks, then run: devworkspace integrations status --restarted');
+    }
+    return out;
+}
+export async function inspectAll(ws, mEnv, opts = { deep: false }) {
+    const m = resolveEnv(mEnv);
+    const state = await loadIntegrationsState(ws, m.now().toISOString());
+    const list = m.adapters.filter((a) => !opts.onlyRequired || a.required);
+    return Promise.all(list.map(async (a) => {
+        const ctx = ctxFor(m, DEFAULT_SETUP, state.integrations[a.id], () => undefined);
+        try {
+            return applyPersisted(await a.inspect(ctx, opts.deep), state.integrations[a.id]);
+        }
+        catch (e) {
+            return {
+                id: a.id,
+                name: a.name,
+                required: a.required,
+                status: 'FAILED',
+                variant: null,
+                scope: null,
+                version: null,
+                checks: [],
+                capabilities: {},
+                warnings: [`Inspection failed: ${scrub(e.message)}`],
+                nextSteps: ['devworkspace doctor --debug'],
+                deep: opts.deep,
+            };
+        }
+    }));
+}
+/** Summary used by doctor/status: required integrations only; OmniRoute never counts. */
+export function summarize(reports) {
+    const required = reports.filter((r) => r.required);
+    const pending = required.filter((r) => r.status !== 'VERIFIED');
+    return { complete: pending.length === 0, required: required.length, verified: required.length - pending.length, pending };
+}
+export async function acknowledgeRestart(ws, ids, now) {
+    for (const id of ids)
+        await saveIntegrationEntry(ws, id, { restartRequiredAt: null }, now);
+}
+const describeStep = (s) => ({ description: s.description, command: s.command, level: s.level });
+export async function runSetup(ws, mEnv, setup, onEvent = () => undefined) {
+    const m = resolveEnv(mEnv);
+    const events = [];
+    const emit = (e) => {
+        events.push(e);
+        onEvent(e);
+    };
+    const ac = new AbortController();
+    const disposeCancel = onCleanup(() => ac.abort());
+    const wanted = m.adapters.filter((a) => (setup.only ? setup.only.includes(a.id) : REQUIRED_INTEGRATIONS.includes(a.id)));
+    const outcomes = [];
+    let approvalRequired = false;
+    try {
+        for (const adapter of wanted) {
+            const nowIso = () => m.now().toISOString();
+            const state = await loadIntegrationsState(ws, nowIso());
+            const prior = state.integrations[adapter.id];
+            const ctx = ctxFor(m, setup, prior, emit, ac.signal);
+            emit({ id: adapter.id, step: 'inspect', state: 'start', detail: `checking ${adapter.name}` });
+            const before = applyPersisted(await adapter.inspect(ctx, true), prior);
+            const outcome = (action, report, extra = {}) => ({
+                id: adapter.id,
+                name: adapter.name,
+                action,
+                before: before.status,
+                report,
+                plan: [],
+                steps: [],
+                notes: [],
+                ...extra,
+            });
+            if (before.status === 'VERIFIED' && !setup.repair) {
+                emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'already verified' });
+                outcomes.push(outcome('already-verified', before));
+                continue;
+            }
+            if (before.status === 'RESTART_REQUIRED' && !setup.repair) {
+                emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'installed; waiting for a Claude Code restart' });
+                outcomes.push(outcome('awaiting-restart', before));
+                continue;
+            }
+            const plan = await adapter.plan(ctx, before);
+            if (plan.steps.length === 0) {
+                if (plan.blockers.length > 0) {
+                    emit({ id: adapter.id, step: 'prerequisites', state: 'fail', detail: plan.blockers[0] });
+                    outcomes.push(outcome('blocked', { ...before, status: 'PREREQUISITES_MISSING', nextSteps: plan.blockers }, { notes: plan.notes }));
+                }
+                else {
+                    outcomes.push(outcome('nothing-to-do', before, { notes: plan.notes }));
+                }
+                continue;
+            }
+            const planInfo = plan.steps.map(describeStep);
+            if (setup.dryRun) {
+                outcomes.push(outcome('dry-run', before, { plan: planInfo, notes: plan.notes }));
+                continue;
+            }
+            const needsConsent = plan.steps.some((s) => s.level !== 'project');
+            if (needsConsent && !setup.yes) {
+                approvalRequired = true;
+                const levels = [...new Set(plan.steps.filter((s) => s.level !== 'project').map((s) => s.level))];
+                outcomes.push(outcome('approval-required', { ...before, nextSteps: [`Re-run with --yes to approve: ${levels.join(', ')} step(s). Review them first with --dry-run.`, ...before.nextSteps] }, { plan: planInfo, notes: plan.notes }));
+                continue;
+            }
+            // ---- execute ----
+            const results = plan.steps.map((s) => ({ id: s.id, description: s.description, command: s.command, level: s.level, state: 'not-run' }));
+            const managedPrior = prior?.managedPaths ?? [];
+            const isManaged = (rel) => managedPrior.some((p) => rel === p || rel.startsWith(`${p}/`));
+            const managedNew = new Set(managedPrior);
+            let restartRequired = false;
+            let failure = null;
+            const hints = [];
+            await withLock(ws.dir, async () => {
+                await saveIntegrationEntry(ws, adapter.id, { installing: { pid: process.pid, startedAt: nowIso(), step: plan.steps[0].id }, lastAttemptAt: nowIso() }, nowIso());
+                const snap = await takeSnapshot(m.root, plan.protectPaths, ['.claude/skills'], isManaged);
+                for (let i = 0; i < plan.steps.length && !failure; i++) {
+                    const step = plan.steps[i];
+                    if (ac.signal.aborted) {
+                        failure = 'cancelled';
+                        break;
+                    }
+                    emit({ id: adapter.id, step: step.id, state: 'start', detail: step.description });
+                    let out;
+                    try {
+                        out = await step.run();
+                    }
+                    catch (e) {
+                        out = { ok: false, detail: e.message };
+                    }
+                    const violations = await verifySnapshot(snap);
+                    if (violations.length > 0) {
+                        await restoreSnapshot(snap, violations);
+                        out = { ok: false, detail: `Refused: this step would have overwritten your files (${violations.map((v) => `${v.path}: ${v.reason}`).join('; ')}). They were restored.` };
+                    }
+                    const res = results[i];
+                    res.state = out.ok ? 'ok' : 'failed';
+                    res.detail = out.detail ? scrub(out.detail) : undefined;
+                    if (!out.ok && out.hint)
+                        hints.push(out.hint);
+                    res.requiresApproval = out.requiresApproval;
+                    emit({ id: adapter.id, step: step.id, state: out.ok ? 'ok' : 'fail', detail: res.detail ?? step.description });
+                    if (out.ok) {
+                        if (out.restartRequired)
+                            restartRequired = true;
+                        for (const p of out.managedPaths ?? [])
+                            managedNew.add(p);
+                    }
+                    else
+                        failure = res.detail ?? 'step failed';
+                }
+            }, { name: 'integrations.lock', staleMs: 30 * 60_000, timeoutMs: 10_000 });
+            const after = await adapterInspectAfter(ws, adapter, m, setup, emit, nowIso());
+            await saveIntegrationEntry(ws, adapter.id, {
+                installing: null,
+                lastError: failure,
+                managedPaths: [...managedNew].sort(),
+                ...(restartRequired && !failure ? { restartRequiredAt: nowIso() } : {}),
+            }, nowIso());
+            const finalState = (await loadIntegrationsState(ws, nowIso())).integrations[adapter.id] ?? blankEntry();
+            let finalReport = applyPersisted(after, finalState);
+            if (failure && finalReport.status !== 'VERIFIED')
+                finalReport = { ...finalReport, status: 'FAILED', warnings: [...finalReport.warnings, `Setup stopped: ${failure}`] };
+            if (hints.length > 0)
+                finalReport = { ...finalReport, nextSteps: [...hints, ...finalReport.nextSteps] };
+            const approvalStep = results.find((r) => r.requiresApproval);
+            if (approvalStep?.command)
+                finalReport = { ...finalReport, nextSteps: [`Run this yourself in a terminal (Claude Code needs your approval): ${approvalStep.command}`, ...finalReport.nextSteps] };
+            await saveIntegrationEntry(ws, adapter.id, { status: finalReport.status, variant: finalReport.variant, scope: finalReport.scope, version: finalReport.version, lastVerifiedAt: finalReport.status === 'VERIFIED' ? nowIso() : null }, nowIso());
+            outcomes.push(outcome(failure ? 'failed' : 'installed', finalReport, { plan: planInfo, steps: results, notes: plan.notes }));
+        }
+    }
+    finally {
+        disposeCancel();
+    }
+    const required = outcomes.filter((o) => o.report.required);
+    return {
+        dryRun: setup.dryRun,
+        scope: setup.scope,
+        outcomes,
+        events,
+        complete: required.length > 0 && required.every((o) => o.report.status === 'VERIFIED'),
+        approvalRequired,
+    };
+}
+async function adapterInspectAfter(ws, adapter, m, setup, emit, now) {
+    const state = await loadIntegrationsState(ws, now);
+    emit({ id: adapter.id, step: 'verify', state: 'start', detail: 'verifying the installation' });
+    const report = await adapter.inspect(ctxFor(m, setup, state.integrations[adapter.id], emit), true);
+    emit({ id: adapter.id, step: 'verify', state: report.status === 'VERIFIED' ? 'ok' : 'info', detail: report.status });
+    return report;
+}
+//# sourceMappingURL=manager.js.map

package/dist/integrations/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/integrations/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACrG,OAAO,EACL,qBAAqB,GAYtB,MAAM,YAAY,CAAC;AAEpB,uHAAuH;AACvH,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1E,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAsD3F,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;QAC5B,GAAG;QACH,QAAQ;QACR,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC/C,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;QAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,QAAQ;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,CAAgC,EAAE,KAAmB,EAAE,KAAuC,EAAE,MAAkC,EAAE,MAAoB;IACtK,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC1H,CAAC;AAED,MAAM,aAAa,GAAiB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAEnG,oIAAoI;AACpI,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,KAAuC;IAC/F,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAsB,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/G,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACtI,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,GAAG,kBAAkB,CAAC;QAChC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,+IAA+I,CAAC,CAAC;IACtK,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAM,EAAE,IAAgB,EAAE,OAAkD,EAAE,IAAI,EAAE,KAAK,EAAE;IAC1H,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,QAAiB;gBACzB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,EAAE;gBACV,YAAY,EAAE,EAAE;gBAChB,QAAQ,EAAE,CAAC,sBAAsB,KAAK,CAAE,CAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/D,SAAS,EAAE,CAAC,6BAA6B,CAAC;gBAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,SAAS,CAAC,OAA4B;IACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;IAChE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAM,EAAE,GAAoB,EAAE,GAAW;IAChF,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,MAAM,oBAAoB,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAW,EAA+D,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAExK,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAM,EAAE,IAAgB,EAAE,KAAmB,EAAE,UAAsC,GAAG,EAAE,CAAC,SAAS;IACjI,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAQ,EAAE;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,CAAC,CAAC,CAAC,CAAC;IACb,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,CAAC,MAAqB,EAAE,MAAyB,EAAE,QAAqC,EAAE,EAAsB,EAAE,CAAC,CAAC;gBAClI,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM;gBACN,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM;gBACN,IAAI,EAAE,EAAE;gBACR,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,EAAE;gBACT,GAAG,KAAK;aACT,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;gBACjH,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;gBACnD,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrI,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACzE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjF,SAAS;YACX,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;YACnE,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC/B,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACjG,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,mBAAmB,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,6CAA6C,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CACtN,CAAC;gBACF,SAAS;YACX,CAAC;YAED,oBAAoB;YACpB,MAAM,OAAO,GAAiB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC;YAC/J,MAAM,YAAY,GAAG,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC;YAC/C,MAAM,SAAS,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3G,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,YAAY,CAAC,CAAC;YACjD,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,OAAO,GAAkB,IAAI,CAAC;YAClC,MAAM,KAAK,GAAa,EAAE,CAAC;YAE3B,MAAM,QAAQ,CACZ,EAAE,CAAC,GAAG,EACN,KAAK,IAAI,EAAE;gBACT,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClK,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;oBAC5B,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO,GAAG,WAAW,CAAC;wBACtB,MAAM;oBACR,CAAC;oBACD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBAClF,IAAI,GAAG,CAAC;oBACR,IAAI,CAAC;wBACH,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;oBACzB,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;oBACpD,CAAC;oBACD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;oBAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBACxC,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yDAAyD,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAC3K,CAAC;oBACD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;oBACxB,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACrC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBACxD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI;wBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC9C,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,CAAC;oBAC5C,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC/G,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;wBACX,IAAI,GAAG,CAAC,eAAe;4BAAE,eAAe,GAAG,IAAI,CAAC;wBAChD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE;4BAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAC5D,CAAC;;wBAAM,OAAO,GAAG,GAAG,CAAC,MAAM,IAAI,aAAa,CAAC;gBAC/C,CAAC;YACH,CAAC,EACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CACvE,CAAC;YAEF,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/E,MAAM,oBAAoB,CACxB,EAAE,EACF,OAAO,CAAC,EAAE,EACV;gBACE,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,OAAO;gBAClB,YAAY,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;gBACpC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,EACD,MAAM,EAAE,CACT,CAAC;YACF,MAAM,UAAU,GAAG,CAAC,MAAM,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;YACxG,IAAI,WAAW,GAAG,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACpD,IAAI,OAAO,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,kBAAkB,OAAO,EAAE,CAAC,EAAE,CAAC;YACvK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACxG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,YAAY,EAAE,OAAO;gBAAE,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,SAAS,EAAE,CAAC,sEAAsE,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACjM,MAAM,oBAAoB,CACxB,EAAE,EACF,OAAO,CAAC,EAAE,EACV,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EACzL,MAAM,EAAE,CACT,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;YAAS,CAAC;QACT,aAAa,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;QACtF,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EAAM,EAAE,OAA2B,EAAE,CAAgC,EAAE,KAAmB,EAAE,IAAgC,EAAE,GAAW;IAC1K,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACrH,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import os from 'node:os';\nimport type { Ws } from '../core/workspace.js';\nimport { onCleanup } from '../utils/cleanup.js';\nimport { withLock } from '../utils/lock.js';\nimport { redact } from '../security/redact.js';\nimport { findAbsolutePaths } from '../utils/paths.js';\nimport { agentSkills } from './adapters/agent-skills.js';\nimport { graphify } from './adapters/graphify.js';\nimport { omniroute } from './adapters/omniroute.js';\nimport { ponytail } from './adapters/ponytail.js';\nimport { createRunner } from './exec.js';\nimport { restoreSnapshot, takeSnapshot, verifySnapshot } from './protect.js';\nimport { blankEntry, loadIntegrationsState, saveIntegrationEntry, wasInterrupted } from './state.js';\nimport {\n  REQUIRED_INTEGRATIONS,\n  type AdapterContext,\n  type IntegrationAdapter,\n  type IntegrationId,\n  type IntegrationReport,\n  type PersistedIntegration,\n  type PlanStep,\n  type ProgressEvent,\n  type Runner,\n  type SetupOptions,\n  type StatusCode,\n  type StepLevel,\n} from './types.js';\n\n/** Tool output goes into reports and the state file: strip secrets and machine-specific paths, flatten to one line. */\nexport function scrub(text: string): string {\n  let out = redact(text);\n  for (const p of findAbsolutePaths(out)) out = out.split(p).join('<path>');\n  return out.replace(/\\s+/g, ' ').trim().slice(0, 400);\n}\n\nexport const ADAPTERS: IntegrationAdapter[] = [graphify, agentSkills, ponytail, omniroute];\n\nexport interface ManagerEnv {\n  root: string;\n  home?: string;\n  env?: NodeJS.ProcessEnv;\n  platform?: NodeJS.Platform;\n  runner?: Runner;\n  now?: () => Date;\n  adapters?: IntegrationAdapter[];\n}\n\nexport interface StepResult {\n  id: string;\n  description: string;\n  command?: string;\n  level: StepLevel;\n  state: 'ok' | 'failed' | 'not-run';\n  detail?: string;\n  requiresApproval?: boolean;\n}\n\nexport type OutcomeAction =\n  | 'already-verified'\n  | 'awaiting-restart'\n  | 'nothing-to-do'\n  | 'blocked'\n  | 'dry-run'\n  | 'approval-required'\n  | 'installed'\n  | 'failed'\n  | 'not-selected';\n\nexport interface IntegrationOutcome {\n  id: IntegrationId;\n  name: string;\n  action: OutcomeAction;\n  before: StatusCode;\n  report: IntegrationReport;\n  plan: { description: string; command?: string; level: StepLevel }[];\n  steps: StepResult[];\n  notes: string[];\n}\n\nexport interface SetupResult {\n  dryRun: boolean;\n  scope: SetupOptions['scope'];\n  outcomes: IntegrationOutcome[];\n  events: ProgressEvent[];\n  /** Every requested required integration is VERIFIED. */\n  complete: boolean;\n  approvalRequired: boolean;\n}\n\nfunction resolveEnv(m: ManagerEnv): Required<Pick<ManagerEnv, 'root' | 'home' | 'env' | 'platform' | 'runner' | 'now' | 'adapters'>> {\n  const env = m.env ?? process.env;\n  const platform = m.platform ?? process.platform;\n  return {\n    root: m.root,\n    home: m.home ?? os.homedir(),\n    env,\n    platform,\n    runner: m.runner ?? createRunner(env, platform),\n    now: m.now ?? (() => new Date()),\n    adapters: m.adapters ?? ADAPTERS,\n  };\n}\n\nfunction ctxFor(m: ReturnType<typeof resolveEnv>, setup: SetupOptions, prior: PersistedIntegration | undefined, report: (e: ProgressEvent) => void, signal?: AbortSignal): AdapterContext {\n  return { root: m.root, home: m.home, env: m.env, platform: m.platform, runner: m.runner, setup, prior, report, signal };\n}\n\nconst DEFAULT_SETUP: SetupOptions = { scope: 'project', yes: false, dryRun: false, repair: false };\n\n/** Combine what was observed with what earlier runs recorded. Records can only add warnings or RESTART_REQUIRED, never VERIFIED. */\nexport function applyPersisted(report: IntegrationReport, entry: PersistedIntegration | undefined): IntegrationReport {\n  if (!entry) return report;\n  const out: IntegrationReport = { ...report, warnings: [...report.warnings], nextSteps: [...report.nextSteps] };\n  if (wasInterrupted(entry)) {\n    out.warnings.push('A previous setup run was interrupted before it finished.');\n    if (!out.nextSteps.includes('devworkspace integrations repair --yes')) out.nextSteps.push('devworkspace integrations repair --yes');\n  }\n  if ((out.status === 'NOT_INSTALLED' || out.status === 'DEGRADED') && entry.lastError) {\n    out.status = 'FAILED';\n    out.warnings.push(`The last setup attempt failed: ${entry.lastError}`);\n  }\n  if (entry.restartRequiredAt && (out.status === 'VERIFIED' || out.status === 'INSTALLED')) {\n    out.status = 'RESTART_REQUIRED';\n    out.nextSteps.push('Restart Claude Code (or run /reload-plugins) so it loads the new skills/plugins/hooks, then run: devworkspace integrations status --restarted');\n  }\n  return out;\n}\n\nexport async function inspectAll(ws: Ws, mEnv: ManagerEnv, opts: { deep: boolean; onlyRequired?: boolean } = { deep: false }): Promise<IntegrationReport[]> {\n  const m = resolveEnv(mEnv);\n  const state = await loadIntegrationsState(ws, m.now().toISOString());\n  const list = m.adapters.filter((a) => !opts.onlyRequired || a.required);\n  return Promise.all(\n    list.map(async (a) => {\n      const ctx = ctxFor(m, DEFAULT_SETUP, state.integrations[a.id], () => undefined);\n      try {\n        return applyPersisted(await a.inspect(ctx, opts.deep), state.integrations[a.id]);\n      } catch (e) {\n        return {\n          id: a.id,\n          name: a.name,\n          required: a.required,\n          status: 'FAILED' as const,\n          variant: null,\n          scope: null,\n          version: null,\n          checks: [],\n          capabilities: {},\n          warnings: [`Inspection failed: ${scrub((e as Error).message)}`],\n          nextSteps: ['devworkspace doctor --debug'],\n          deep: opts.deep,\n        };\n      }\n    }),\n  );\n}\n\n/** Summary used by doctor/status: required integrations only; OmniRoute never counts. */\nexport function summarize(reports: IntegrationReport[]): { complete: boolean; required: number; verified: number; pending: IntegrationReport[] } {\n  const required = reports.filter((r) => r.required);\n  const pending = required.filter((r) => r.status !== 'VERIFIED');\n  return { complete: pending.length === 0, required: required.length, verified: required.length - pending.length, pending };\n}\n\nexport async function acknowledgeRestart(ws: Ws, ids: IntegrationId[], now: string): Promise<void> {\n  for (const id of ids) await saveIntegrationEntry(ws, id, { restartRequiredAt: null }, now);\n}\n\nconst describeStep = (s: PlanStep): { description: string; command?: string; level: StepLevel } => ({ description: s.description, command: s.command, level: s.level });\n\nexport async function runSetup(ws: Ws, mEnv: ManagerEnv, setup: SetupOptions, onEvent: (e: ProgressEvent) => void = () => undefined): Promise<SetupResult> {\n  const m = resolveEnv(mEnv);\n  const events: ProgressEvent[] = [];\n  const emit = (e: ProgressEvent): void => {\n    events.push(e);\n    onEvent(e);\n  };\n  const ac = new AbortController();\n  const disposeCancel = onCleanup(() => ac.abort());\n  const wanted = m.adapters.filter((a) => (setup.only ? setup.only.includes(a.id) : REQUIRED_INTEGRATIONS.includes(a.id)));\n  const outcomes: IntegrationOutcome[] = [];\n  let approvalRequired = false;\n\n  try {\n    for (const adapter of wanted) {\n      const nowIso = (): string => m.now().toISOString();\n      const state = await loadIntegrationsState(ws, nowIso());\n      const prior = state.integrations[adapter.id];\n      const ctx = ctxFor(m, setup, prior, emit, ac.signal);\n      emit({ id: adapter.id, step: 'inspect', state: 'start', detail: `checking ${adapter.name}` });\n      const before = applyPersisted(await adapter.inspect(ctx, true), prior);\n      const outcome = (action: OutcomeAction, report: IntegrationReport, extra: Partial<IntegrationOutcome> = {}): IntegrationOutcome => ({\n        id: adapter.id,\n        name: adapter.name,\n        action,\n        before: before.status,\n        report,\n        plan: [],\n        steps: [],\n        notes: [],\n        ...extra,\n      });\n\n      if (before.status === 'VERIFIED' && !setup.repair) {\n        emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'already verified' });\n        outcomes.push(outcome('already-verified', before));\n        continue;\n      }\n      if (before.status === 'RESTART_REQUIRED' && !setup.repair) {\n        emit({ id: adapter.id, step: 'inspect', state: 'skip', detail: 'installed; waiting for a Claude Code restart' });\n        outcomes.push(outcome('awaiting-restart', before));\n        continue;\n      }\n\n      const plan = await adapter.plan(ctx, before);\n      if (plan.steps.length === 0) {\n        if (plan.blockers.length > 0) {\n          emit({ id: adapter.id, step: 'prerequisites', state: 'fail', detail: plan.blockers[0] });\n          outcomes.push(outcome('blocked', { ...before, status: 'PREREQUISITES_MISSING', nextSteps: plan.blockers }, { notes: plan.notes }));\n        } else {\n          outcomes.push(outcome('nothing-to-do', before, { notes: plan.notes }));\n        }\n        continue;\n      }\n      const planInfo = plan.steps.map(describeStep);\n      if (setup.dryRun) {\n        outcomes.push(outcome('dry-run', before, { plan: planInfo, notes: plan.notes }));\n        continue;\n      }\n      const needsConsent = plan.steps.some((s) => s.level !== 'project');\n      if (needsConsent && !setup.yes) {\n        approvalRequired = true;\n        const levels = [...new Set(plan.steps.filter((s) => s.level !== 'project').map((s) => s.level))];\n        outcomes.push(\n          outcome('approval-required', { ...before, nextSteps: [`Re-run with --yes to approve: ${levels.join(', ')} step(s). Review them first with --dry-run.`, ...before.nextSteps] }, { plan: planInfo, notes: plan.notes }),\n        );\n        continue;\n      }\n\n      // ---- execute ----\n      const results: StepResult[] = plan.steps.map((s) => ({ id: s.id, description: s.description, command: s.command, level: s.level, state: 'not-run' as const }));\n      const managedPrior = prior?.managedPaths ?? [];\n      const isManaged = (rel: string): boolean => managedPrior.some((p) => rel === p || rel.startsWith(`${p}/`));\n      const managedNew = new Set<string>(managedPrior);\n      let restartRequired = false;\n      let failure: string | null = null;\n      const hints: string[] = [];\n\n      await withLock(\n        ws.dir,\n        async () => {\n          await saveIntegrationEntry(ws, adapter.id, { installing: { pid: process.pid, startedAt: nowIso(), step: plan.steps[0]!.id }, lastAttemptAt: nowIso() }, nowIso());\n          const snap = await takeSnapshot(m.root, plan.protectPaths, ['.claude/skills'], isManaged);\n          for (let i = 0; i < plan.steps.length && !failure; i++) {\n            const step = plan.steps[i]!;\n            if (ac.signal.aborted) {\n              failure = 'cancelled';\n              break;\n            }\n            emit({ id: adapter.id, step: step.id, state: 'start', detail: step.description });\n            let out;\n            try {\n              out = await step.run();\n            } catch (e) {\n              out = { ok: false, detail: (e as Error).message };\n            }\n            const violations = await verifySnapshot(snap);\n            if (violations.length > 0) {\n              await restoreSnapshot(snap, violations);\n              out = { ok: false, detail: `Refused: this step would have overwritten your files (${violations.map((v) => `${v.path}: ${v.reason}`).join('; ')}). They were restored.` };\n            }\n            const res = results[i]!;\n            res.state = out.ok ? 'ok' : 'failed';\n            res.detail = out.detail ? scrub(out.detail) : undefined;\n            if (!out.ok && out.hint) hints.push(out.hint);\n            res.requiresApproval = out.requiresApproval;\n            emit({ id: adapter.id, step: step.id, state: out.ok ? 'ok' : 'fail', detail: res.detail ?? step.description });\n            if (out.ok) {\n              if (out.restartRequired) restartRequired = true;\n              for (const p of out.managedPaths ?? []) managedNew.add(p);\n            } else failure = res.detail ?? 'step failed';\n          }\n        },\n        { name: 'integrations.lock', staleMs: 30 * 60_000, timeoutMs: 10_000 },\n      );\n\n      const after = await adapterInspectAfter(ws, adapter, m, setup, emit, nowIso());\n      await saveIntegrationEntry(\n        ws,\n        adapter.id,\n        {\n          installing: null,\n          lastError: failure,\n          managedPaths: [...managedNew].sort(),\n          ...(restartRequired && !failure ? { restartRequiredAt: nowIso() } : {}),\n        },\n        nowIso(),\n      );\n      const finalState = (await loadIntegrationsState(ws, nowIso())).integrations[adapter.id] ?? blankEntry();\n      let finalReport = applyPersisted(after, finalState);\n      if (failure && finalReport.status !== 'VERIFIED') finalReport = { ...finalReport, status: 'FAILED', warnings: [...finalReport.warnings, `Setup stopped: ${failure}`] };\n      if (hints.length > 0) finalReport = { ...finalReport, nextSteps: [...hints, ...finalReport.nextSteps] };\n      const approvalStep = results.find((r) => r.requiresApproval);\n      if (approvalStep?.command) finalReport = { ...finalReport, nextSteps: [`Run this yourself in a terminal (Claude Code needs your approval): ${approvalStep.command}`, ...finalReport.nextSteps] };\n      await saveIntegrationEntry(\n        ws,\n        adapter.id,\n        { status: finalReport.status, variant: finalReport.variant, scope: finalReport.scope, version: finalReport.version, lastVerifiedAt: finalReport.status === 'VERIFIED' ? nowIso() : null },\n        nowIso(),\n      );\n      outcomes.push(outcome(failure ? 'failed' : 'installed', finalReport, { plan: planInfo, steps: results, notes: plan.notes }));\n    }\n  } finally {\n    disposeCancel();\n  }\n\n  const required = outcomes.filter((o) => o.report.required);\n  return {\n    dryRun: setup.dryRun,\n    scope: setup.scope,\n    outcomes,\n    events,\n    complete: required.length > 0 && required.every((o) => o.report.status === 'VERIFIED'),\n    approvalRequired,\n  };\n}\n\nasync function adapterInspectAfter(ws: Ws, adapter: IntegrationAdapter, m: ReturnType<typeof resolveEnv>, setup: SetupOptions, emit: (e: ProgressEvent) => void, now: string): Promise<IntegrationReport> {\n  const state = await loadIntegrationsState(ws, now);\n  emit({ id: adapter.id, step: 'verify', state: 'start', detail: 'verifying the installation' });\n  const report = await adapter.inspect(ctxFor(m, setup, state.integrations[adapter.id], emit), true);\n  emit({ id: adapter.id, step: 'verify', state: report.status === 'VERIFIED' ? 'ok' : 'info', detail: report.status });\n  return report;\n}\n"]}

package/dist/integrations/notices.d.ts

@@ -0,0 +1,13 @@
+export interface NoticeSource {
+    name: string;
+    repo: string;
+    license: string;
+    copyright: string;
+    /** What DevWorkspace installed from it. */
+    installed: string;
+}
+/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */
+export declare function writeThirdPartyNotice(root: string, source: NoticeSource): Promise<void>;
+export declare const AGENT_SKILLS_NOTICE: NoticeSource;
+export declare const PONYTAIL_NOTICE: NoticeSource;
+export declare const GRAPHIFY_NOTICE: NoticeSource;

package/dist/integrations/notices.js

@@ -0,0 +1,68 @@
+import path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { atomicWriteFile } from '../utils/fs.js';
+const HEADER = [
+    '# Third-party notices',
+    '',
+    'DevWorkspace can install the following third-party software into this project or onto this machine.',
+    'DevWorkspace does not vendor or modify their code; files are copied unchanged by their own installers.',
+    'Each project remains under its own license. Keep this notice if you commit the installed files.',
+    'Text outside the marked blocks is yours and is never modified.',
+    '',
+].join('\n');
+const startMarker = (name) => `<!-- devworkspace:notice:start ${name} -->`;
+const endMarker = (name) => `<!-- devworkspace:notice:end ${name} -->`;
+function entry(s) {
+    return [
+        startMarker(s.name),
+        `## ${s.name}`,
+        `- Source: https://github.com/${s.repo}`,
+        `- License: ${s.license}`,
+        `- Copyright: ${s.copyright}`,
+        `- Installed by DevWorkspace: ${s.installed}`,
+        endMarker(s.name),
+    ].join('\n');
+}
+/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */
+export async function writeThirdPartyNotice(root, source) {
+    const file = path.join(root, '.devworkspace', 'THIRD_PARTY_NOTICES.md');
+    let text = HEADER;
+    try {
+        text = await fs.readFile(file, 'utf8');
+    }
+    catch {
+        /* new file */
+    }
+    const start = text.indexOf(startMarker(source.name));
+    const end = text.indexOf(endMarker(source.name));
+    const block = entry(source);
+    if (start !== -1 && end > start) {
+        text = text.slice(0, start) + block + text.slice(end + endMarker(source.name).length);
+    }
+    else {
+        text = text.replace(/\n*$/, '\n\n') + block + '\n';
+    }
+    await atomicWriteFile(file, text);
+}
+export const AGENT_SKILLS_NOTICE = {
+    name: 'Agent Skills',
+    repo: 'addyosmani/agent-skills',
+    license: 'MIT',
+    copyright: 'Copyright (c) 2025 Addy Osmani',
+    installed: 'engineering skills copied into .claude/skills/ (portable skills, not the native plugin)',
+};
+export const PONYTAIL_NOTICE = {
+    name: 'Ponytail',
+    repo: 'DietrichGebert/ponytail',
+    license: 'MIT',
+    copyright: 'Copyright (c) 2026 DietrichGebert',
+    installed: 'skills copied into .claude/skills/ (portable skills, not the native plugin; no hooks, commands or always-on ruleset)',
+};
+export const GRAPHIFY_NOTICE = {
+    name: 'Graphify',
+    repo: 'Graphify-Labs/graphify',
+    license: 'see the project repository and the graphifyy package metadata',
+    copyright: 'see the project repository',
+    installed: 'the graphifyy command-line tool (user-level) and its project skill in .claude/skills/graphify/',
+};
+//# sourceMappingURL=notices.js.map

package/dist/integrations/notices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notices.js","sourceRoot":"","sources":["../../src/integrations/notices.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAWjD,MAAM,MAAM,GAAG;IACb,uBAAuB;IACvB,EAAE;IACF,qGAAqG;IACrG,wGAAwG;IACxG,iGAAiG;IACjG,gEAAgE;IAChE,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,kCAAkC,IAAI,MAAM,CAAC;AAC3F,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,gCAAgC,IAAI,MAAM,CAAC;AAEvF,SAAS,KAAK,CAAC,CAAe;IAC5B,OAAO;QACL,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACnB,MAAM,CAAC,CAAC,IAAI,EAAE;QACd,gCAAgC,CAAC,CAAC,IAAI,EAAE;QACxC,cAAc,CAAC,CAAC,OAAO,EAAE;QACzB,gBAAgB,CAAC,CAAC,SAAS,EAAE;QAC7B,gCAAgC,CAAC,CAAC,SAAS,EAAE;QAC7C,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,MAAoB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,wBAAwB,CAAC,CAAC;IACxE,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAChC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACrD,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,gCAAgC;IAC3C,SAAS,EAAE,yFAAyF;CACrG,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,yBAAyB;IAC/B,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,mCAAmC;IAC9C,SAAS,EAAE,sHAAsH;CAClI,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,wBAAwB;IAC9B,OAAO,EAAE,+DAA+D;IACxE,SAAS,EAAE,4BAA4B;IACvC,SAAS,EAAE,gGAAgG;CAC5G,CAAC","sourcesContent":["import path from 'node:path';\nimport { promises as fs } from 'node:fs';\nimport { atomicWriteFile } from '../utils/fs.js';\n\nexport interface NoticeSource {\n  name: string;\n  repo: string;\n  license: string;\n  copyright: string;\n  /** What DevWorkspace installed from it. */\n  installed: string;\n}\n\nconst HEADER = [\n  '# Third-party notices',\n  '',\n  'DevWorkspace can install the following third-party software into this project or onto this machine.',\n  'DevWorkspace does not vendor or modify their code; files are copied unchanged by their own installers.',\n  'Each project remains under its own license. Keep this notice if you commit the installed files.',\n  'Text outside the marked blocks is yours and is never modified.',\n  '',\n].join('\\n');\n\nconst startMarker = (name: string): string => `<!-- devworkspace:notice:start ${name} -->`;\nconst endMarker = (name: string): string => `<!-- devworkspace:notice:end ${name} -->`;\n\nfunction entry(s: NoticeSource): string {\n  return [\n    startMarker(s.name),\n    `## ${s.name}`,\n    `- Source: https://github.com/${s.repo}`,\n    `- License: ${s.license}`,\n    `- Copyright: ${s.copyright}`,\n    `- Installed by DevWorkspace: ${s.installed}`,\n    endMarker(s.name),\n  ].join('\\n');\n}\n\n/** Idempotently add (or refresh) one project's notice block. Only text between its own markers is ever replaced. */\nexport async function writeThirdPartyNotice(root: string, source: NoticeSource): Promise<void> {\n  const file = path.join(root, '.devworkspace', 'THIRD_PARTY_NOTICES.md');\n  let text = HEADER;\n  try {\n    text = await fs.readFile(file, 'utf8');\n  } catch {\n    /* new file */\n  }\n  const start = text.indexOf(startMarker(source.name));\n  const end = text.indexOf(endMarker(source.name));\n  const block = entry(source);\n  if (start !== -1 && end > start) {\n    text = text.slice(0, start) + block + text.slice(end + endMarker(source.name).length);\n  } else {\n    text = text.replace(/\\n*$/, '\\n\\n') + block + '\\n';\n  }\n  await atomicWriteFile(file, text);\n}\n\nexport const AGENT_SKILLS_NOTICE: NoticeSource = {\n  name: 'Agent Skills',\n  repo: 'addyosmani/agent-skills',\n  license: 'MIT',\n  copyright: 'Copyright (c) 2025 Addy Osmani',\n  installed: 'engineering skills copied into .claude/skills/ (portable skills, not the native plugin)',\n};\n\nexport const PONYTAIL_NOTICE: NoticeSource = {\n  name: 'Ponytail',\n  repo: 'DietrichGebert/ponytail',\n  license: 'MIT',\n  copyright: 'Copyright (c) 2026 DietrichGebert',\n  installed: 'skills copied into .claude/skills/ (portable skills, not the native plugin; no hooks, commands or always-on ruleset)',\n};\n\nexport const GRAPHIFY_NOTICE: NoticeSource = {\n  name: 'Graphify',\n  repo: 'Graphify-Labs/graphify',\n  license: 'see the project repository and the graphifyy package metadata',\n  copyright: 'see the project repository',\n  installed: 'the graphifyy command-line tool (user-level) and its project skill in .claude/skills/graphify/',\n};\n"]}

package/dist/integrations/protect.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Installers (graphify, claude plugin, skills CLI) edit files the user owns. Before a step runs we snapshot the files
+ * it may touch, and afterwards verify that everything the user had is still there. If not, we restore the snapshot.
+ */
+export interface Snapshot {
+    root: string;
+    /** rel path -> original text, or null when the file did not exist. */
+    files: Map<string, string | null>;
+    /** Existing files below these directories must stay byte-identical. */
+    trees: Map<string, string>;
+}
+export interface Violation {
+    path: string;
+    reason: string;
+}
+export declare function takeSnapshot(root: string, files: string[], trees?: string[], skipInTrees?: (rel: string) => boolean): Promise<Snapshot>;
+/** True if every key/element of `before` is still present in `after` (after may add more). */
+export declare function jsonExtends(before: unknown, after: unknown): boolean;
+export declare function verifySnapshot(snap: Snapshot): Promise<Violation[]>;
+export declare function restoreSnapshot(snap: Snapshot, violations: Violation[]): Promise<void>;

package/dist/integrations/protect.js

@@ -0,0 +1,131 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { atomicWriteFile } from '../utils/fs.js';
+import { resolveInside } from '../utils/paths.js';
+const MAX_TREE_FILES = 3000;
+const MAX_FILE_BYTES = 2 * 1024 * 1024;
+async function readText(file) {
+    try {
+        const st = await fs.stat(file);
+        if (!st.isFile() || st.size > MAX_FILE_BYTES)
+            return null;
+        return await fs.readFile(file, 'utf8');
+    }
+    catch {
+        return null;
+    }
+}
+async function walk(dir, rel, out, skip) {
+    let entries;
+    try {
+        entries = await fs.readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const e of entries) {
+        if (out.size >= MAX_TREE_FILES)
+            return;
+        const r = `${rel}/${e.name}`;
+        if (e.isSymbolicLink())
+            continue;
+        if (e.isDirectory())
+            await walk(path.join(dir, e.name), r, out, skip);
+        else if (e.isFile() && !skip(r)) {
+            const text = await readText(path.join(dir, e.name));
+            if (text !== null)
+                out.set(r, text);
+        }
+    }
+}
+export async function takeSnapshot(root, files, trees = [], skipInTrees = () => false) {
+    const snap = { root, files: new Map(), trees: new Map() };
+    for (const rel of files)
+        snap.files.set(rel, await readText(resolveInside(root, rel)));
+    for (const t of trees) {
+        const found = new Map();
+        await walk(resolveInside(root, t), t, found, skipInTrees);
+        for (const [k, v] of found)
+            snap.trees.set(k, v);
+    }
+    return snap;
+}
+function lineSubsequence(before, after) {
+    const norm = (s) => s.replace(/\r\n/g, '\n').split('\n').map((l) => l.trimEnd()).filter((l) => l.trim() !== '');
+    const a = norm(after);
+    let i = 0;
+    for (const line of norm(before)) {
+        while (i < a.length && a[i] !== line)
+            i++;
+        if (i >= a.length)
+            return false;
+        i++;
+    }
+    return true;
+}
+function deepEqual(a, b) {
+    return JSON.stringify(a) === JSON.stringify(b);
+}
+/** True if every key/element of `before` is still present in `after` (after may add more). */
+export function jsonExtends(before, after) {
+    if (Array.isArray(before))
+        return Array.isArray(after) && before.every((b) => after.some((a) => jsonExtends(b, a)));
+    if (typeof before === 'object' && before !== null) {
+        if (typeof after !== 'object' || after === null || Array.isArray(after))
+            return false;
+        return Object.entries(before).every(([k, v]) => k in after && jsonExtends(v, after[k]));
+    }
+    return deepEqual(before, after);
+}
+function preserved(rel, before, after) {
+    if (rel.endsWith('.json')) {
+        let b;
+        try {
+            b = JSON.parse(before);
+        }
+        catch {
+            return before === after ? null : 'the original file was not valid JSON and was modified';
+        }
+        let a;
+        try {
+            a = JSON.parse(after);
+        }
+        catch {
+            return 'the file is no longer valid JSON';
+        }
+        return jsonExtends(b, a) ? null : 'existing settings were changed or removed';
+    }
+    return lineSubsequence(before, after) ? null : 'existing lines were changed or removed';
+}
+export async function verifySnapshot(snap) {
+    const bad = [];
+    for (const [rel, before] of snap.files) {
+        const after = await readText(resolveInside(snap.root, rel));
+        if (before === null)
+            continue; // files that did not exist may be created
+        if (after === null)
+            bad.push({ path: rel, reason: 'the file was deleted' });
+        else {
+            const why = preserved(rel, before, after);
+            if (why)
+                bad.push({ path: rel, reason: why });
+        }
+    }
+    for (const [rel, before] of snap.trees) {
+        const after = await readText(resolveInside(snap.root, rel));
+        if (after === null)
+            bad.push({ path: rel, reason: 'the file was deleted' });
+        else if (after !== before)
+            bad.push({ path: rel, reason: 'the file was overwritten' });
+    }
+    return bad;
+}
+export async function restoreSnapshot(snap, violations) {
+    for (const v of violations) {
+        const original = snap.files.get(v.path) ?? snap.trees.get(v.path);
+        if (original === undefined || original === null)
+            continue;
+        await atomicWriteFile(resolveInside(snap.root, v.path), original);
+    }
+}
+//# sourceMappingURL=protect.js.map

package/dist/integrations/protect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protect.js","sourceRoot":"","sources":["../../src/integrations/protect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAmBlD,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvC,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,cAAc;YAAE,OAAO,IAAI,CAAC;QAC1D,OAAO,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,GAAW,EAAE,GAAwB,EAAE,IAA8B;IACpG,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,IAAI,IAAI,cAAc;YAAE,OAAO;QACvC,MAAM,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,SAAS;QACjC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;aACjE,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACpD,IAAI,IAAI,KAAK,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,KAAe,EAAE,QAAkB,EAAE,EAAE,cAAwC,GAAG,EAAE,CAAC,KAAK;IACzI,MAAM,IAAI,GAAa,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,MAAc,EAAE,KAAa;IACpD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClI,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAChC,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,MAAe,EAAE,KAAc;IACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACtF,OAAO,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAK,KAAiC,IAAI,WAAW,CAAC,CAAC,EAAG,KAAiC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/K,CAAC;IACD,OAAO,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,GAAW,EAAE,MAAc,EAAE,KAAa;IAC3D,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uDAAuD,CAAC;QAC3F,CAAC;QACD,IAAI,CAAU,CAAC;QACf,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,kCAAkC,CAAC;QAC5C,CAAC;QACD,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2CAA2C,CAAC;IAChF,CAAC;IACD,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,wCAAwC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAc;IACjD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS,CAAC,0CAA0C;QACzE,IAAI,KAAK,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;aACvE,CAAC;YACJ,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;aACvE,IAAI,KAAK,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc,EAAE,UAAuB;IAC3E,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpE,CAAC;AACH,CAAC","sourcesContent":["import { promises as fs } from 'node:fs';\nimport path from 'node:path';\nimport { atomicWriteFile } from '../utils/fs.js';\nimport { resolveInside } from '../utils/paths.js';\n\n/**\n * Installers (graphify, claude plugin, skills CLI) edit files the user owns. Before a step runs we snapshot the files\n * it may touch, and afterwards verify that everything the user had is still there. If not, we restore the snapshot.\n */\nexport interface Snapshot {\n  root: string;\n  /** rel path -> original text, or null when the file did not exist. */\n  files: Map<string, string | null>;\n  /** Existing files below these directories must stay byte-identical. */\n  trees: Map<string, string>;\n}\n\nexport interface Violation {\n  path: string;\n  reason: string;\n}\n\nconst MAX_TREE_FILES = 3000;\nconst MAX_FILE_BYTES = 2 * 1024 * 1024;\n\nasync function readText(file: string): Promise<string | null> {\n  try {\n    const st = await fs.stat(file);\n    if (!st.isFile() || st.size > MAX_FILE_BYTES) return null;\n    return await fs.readFile(file, 'utf8');\n  } catch {\n    return null;\n  }\n}\n\nasync function walk(dir: string, rel: string, out: Map<string, string>, skip: (rel: string) => boolean): Promise<void> {\n  let entries;\n  try {\n    entries = await fs.readdir(dir, { withFileTypes: true });\n  } catch {\n    return;\n  }\n  for (const e of entries) {\n    if (out.size >= MAX_TREE_FILES) return;\n    const r = `${rel}/${e.name}`;\n    if (e.isSymbolicLink()) continue;\n    if (e.isDirectory()) await walk(path.join(dir, e.name), r, out, skip);\n    else if (e.isFile() && !skip(r)) {\n      const text = await readText(path.join(dir, e.name));\n      if (text !== null) out.set(r, text);\n    }\n  }\n}\n\nexport async function takeSnapshot(root: string, files: string[], trees: string[] = [], skipInTrees: (rel: string) => boolean = () => false): Promise<Snapshot> {\n  const snap: Snapshot = { root, files: new Map(), trees: new Map() };\n  for (const rel of files) snap.files.set(rel, await readText(resolveInside(root, rel)));\n  for (const t of trees) {\n    const found = new Map<string, string>();\n    await walk(resolveInside(root, t), t, found, skipInTrees);\n    for (const [k, v] of found) snap.trees.set(k, v);\n  }\n  return snap;\n}\n\nfunction lineSubsequence(before: string, after: string): boolean {\n  const norm = (s: string): string[] => s.replace(/\\r\\n/g, '\\n').split('\\n').map((l) => l.trimEnd()).filter((l) => l.trim() !== '');\n  const a = norm(after);\n  let i = 0;\n  for (const line of norm(before)) {\n    while (i < a.length && a[i] !== line) i++;\n    if (i >= a.length) return false;\n    i++;\n  }\n  return true;\n}\n\nfunction deepEqual(a: unknown, b: unknown): boolean {\n  return JSON.stringify(a) === JSON.stringify(b);\n}\n\n/** True if every key/element of `before` is still present in `after` (after may add more). */\nexport function jsonExtends(before: unknown, after: unknown): boolean {\n  if (Array.isArray(before)) return Array.isArray(after) && before.every((b) => after.some((a) => jsonExtends(b, a)));\n  if (typeof before === 'object' && before !== null) {\n    if (typeof after !== 'object' || after === null || Array.isArray(after)) return false;\n    return Object.entries(before as Record<string, unknown>).every(([k, v]) => k in (after as Record<string, unknown>) && jsonExtends(v, (after as Record<string, unknown>)[k]));\n  }\n  return deepEqual(before, after);\n}\n\nfunction preserved(rel: string, before: string, after: string): string | null {\n  if (rel.endsWith('.json')) {\n    let b: unknown;\n    try {\n      b = JSON.parse(before);\n    } catch {\n      return before === after ? null : 'the original file was not valid JSON and was modified';\n    }\n    let a: unknown;\n    try {\n      a = JSON.parse(after);\n    } catch {\n      return 'the file is no longer valid JSON';\n    }\n    return jsonExtends(b, a) ? null : 'existing settings were changed or removed';\n  }\n  return lineSubsequence(before, after) ? null : 'existing lines were changed or removed';\n}\n\nexport async function verifySnapshot(snap: Snapshot): Promise<Violation[]> {\n  const bad: Violation[] = [];\n  for (const [rel, before] of snap.files) {\n    const after = await readText(resolveInside(snap.root, rel));\n    if (before === null) continue; // files that did not exist may be created\n    if (after === null) bad.push({ path: rel, reason: 'the file was deleted' });\n    else {\n      const why = preserved(rel, before, after);\n      if (why) bad.push({ path: rel, reason: why });\n    }\n  }\n  for (const [rel, before] of snap.trees) {\n    const after = await readText(resolveInside(snap.root, rel));\n    if (after === null) bad.push({ path: rel, reason: 'the file was deleted' });\n    else if (after !== before) bad.push({ path: rel, reason: 'the file was overwritten' });\n  }\n  return bad;\n}\n\nexport async function restoreSnapshot(snap: Snapshot, violations: Violation[]): Promise<void> {\n  for (const v of violations) {\n    const original = snap.files.get(v.path) ?? snap.trees.get(v.path);\n    if (original === undefined || original === null) continue;\n    await atomicWriteFile(resolveInside(snap.root, v.path), original);\n  }\n}\n"]}

package/dist/integrations/state.d.ts

@@ -0,0 +1,10 @@
+import type { Ws } from '../core/workspace.js';
+import { type IntegrationId, type IntegrationsStateFile, type PersistedIntegration } from './types.js';
+export declare function emptyState(now: string): IntegrationsStateFile;
+export declare function validateIntegrationsState(v: unknown, file?: string): IntegrationsStateFile;
+/** The state file is a hint, never proof: adapters re-observe the real installation on every run. */
+export declare function loadIntegrationsState(ws: Ws, now: string): Promise<IntegrationsStateFile>;
+export declare function blankEntry(): PersistedIntegration;
+export declare function saveIntegrationEntry(ws: Ws, id: IntegrationId, patch: Partial<PersistedIntegration>, now: string): Promise<void>;
+/** True when a previous setup run died mid-way (its pid is gone). */
+export declare function wasInterrupted(entry: PersistedIntegration | undefined): boolean;