fraim 2.0.202 → 2.0.204

package/dist/src/ai-hub/hub-latest-version.js

@@ -1,52 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.getLatestPublishedVersion = getLatestPublishedVersion;
-exports.__resetLatestVersionCache = __resetLatestVersionCache;
-const https_1 = __importDefault(require("https"));
-// Issue #755: best-effort "latest published fraim version" for the Hub's
-// update-available nudge. Cached in-process (1h TTL) and never throws — returns
-// null when offline or the registry is unreachable, so the nudge simply hides.
-const TTL_MS = 60 * 60 * 1000;
-const REGISTRY_URL = 'https://registry.npmjs.org/fraim/latest';
-let cache = { value: null, at: 0 };
-async function getLatestPublishedVersion() {
-    const now = Date.now();
-    if (cache.at !== 0 && now - cache.at < TTL_MS)
-        return cache.value;
-    const value = await fetchNpmLatest();
-    // Only cache successful lookups; a failed fetch retries next call rather than
-    // caching a null for an hour.
-    if (value !== null)
-        cache = { value, at: now };
-    return value ?? cache.value;
-}
-/** Test-only: reset the module cache. */
-function __resetLatestVersionCache() {
-    cache = { value: null, at: 0 };
-}
-function fetchNpmLatest() {
-    return new Promise((resolve) => {
-        const req = https_1.default.get(REGISTRY_URL, { timeout: 4000 }, (res) => {
-            if (res.statusCode !== 200) {
-                res.resume();
-                return resolve(null);
-            }
-            let body = '';
-            res.on('data', (chunk) => { body += chunk; });
-            res.on('end', () => {
-                try {
-                    const version = JSON.parse(body).version;
-                    resolve(typeof version === 'string' ? version : null);
-                }
-                catch {
-                    resolve(null);
-                }
-            });
-        });
-        req.on('error', () => resolve(null));
-        req.on('timeout', () => { req.destroy(); resolve(null); });
-    });
-}

package/dist/src/ai-hub/hub-launch-decision.js

@@ -1,57 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.decideHubLaunch = decideHubLaunch;
-const semver = __importStar(require("semver"));
-function decideHubLaunch(input) {
-    const { running, pidAlive, cliVersion, restart, noRestart } = input;
-    if (!running || !pidAlive) {
-        return { action: 'launch-fresh', reason: 'no live Hub instance is running' };
-    }
-    if (noRestart) {
-        return { action: 'focus-existing', reason: '--no-restart: keeping the running instance' };
-    }
-    if (restart) {
-        return { action: 'replace', reason: '--restart: replacing the running instance' };
-    }
-    // Only treat as stale when BOTH versions are valid semver and the running one is
-    // strictly older. On any uncertainty (unknown/unparseable version) do not kill —
-    // conservative default is to focus the existing instance.
-    const comparable = !!semver.valid(running.version) && !!semver.valid(cliVersion);
-    if (comparable && semver.lt(running.version, cliVersion)) {
-        return { action: 'replace', reason: `running ${running.version} is older than ${cliVersion}; replacing with the newer build` };
-    }
-    return { action: 'focus-existing', reason: `running ${running.version} is current or not comparable to ${cliVersion}` };
-}

package/dist/src/ai-hub/hub-runtime-file.js

@@ -1,43 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.hubRuntimeFilePath = hubRuntimeFilePath;
-exports.writeHubRuntimeFile = writeHubRuntimeFile;
-exports.readHubRuntimeFile = readHubRuntimeFile;
-exports.removeHubRuntimeFile = removeHubRuntimeFile;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-// Issue #755: the running desktop Hub writes ~/.fraim/hub-runtime.json so the
-// `fraim hub` CLI can discover a live instance (pid/port/version) before deciding
-// whether to replace a stale build. `fraimDir` is injected (never hard-coded to
-// the real ~/.fraim) so tests isolate via a temp directory.
-const RUNTIME_FILE = 'hub-runtime.json';
-function hubRuntimeFilePath(fraimDir) {
-    return path_1.default.join(fraimDir, RUNTIME_FILE);
-}
-function writeHubRuntimeFile(fraimDir, info) {
-    fs_1.default.mkdirSync(fraimDir, { recursive: true });
-    fs_1.default.writeFileSync(hubRuntimeFilePath(fraimDir), JSON.stringify(info, null, 2));
-}
-function readHubRuntimeFile(fraimDir) {
-    try {
-        const parsed = JSON.parse(fs_1.default.readFileSync(hubRuntimeFilePath(fraimDir), 'utf8'));
-        if (typeof parsed.pid !== 'number' || typeof parsed.port !== 'number' || typeof parsed.version !== 'string') {
-            return null;
-        }
-        return { pid: parsed.pid, port: parsed.port, version: parsed.version, startedAt: String(parsed.startedAt ?? '') };
-    }
-    catch {
-        return null;
-    }
-}
-function removeHubRuntimeFile(fraimDir) {
-    try {
-        fs_1.default.rmSync(hubRuntimeFilePath(fraimDir), { force: true });
-    }
-    catch {
-        /* no-op: absent file is fine */
-    }
-}

package/dist/src/ai-hub/managed-browser.js

@@ -1,269 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ManagedBrowser = void 0;
-exports.browserExecutableCandidates = browserExecutableCandidates;
-exports.resolveBrowserExecutable = resolveBrowserExecutable;
-exports.buildBrowserLaunchArgs = buildBrowserLaunchArgs;
-exports.buildBrowserContextNote = buildBrowserContextNote;
-exports.defaultBrowserProfileDir = defaultBrowserProfileDir;
-exports.probeCdpEndpoint = probeCdpEndpoint;
-/**
- * #521 — FRAIM-managed persistent browser.
- *
- * Problem: the Hub runs each agent turn as a one-shot process (`claude -p …`).
- * When a turn ends, that process exits and any browser it launched (a child of
- * the agent) is torn down — so "open a browser, I'll log in, then continue"
- * never works: the window dies at the turn boundary before the manager can log in.
- *
- * Fix: FRAIM owns ONE long-lived Chromium browser (Chrome or Edge) launched with
- * a remote-debugging port and a persistent profile. It outlives agent turns.
- * Agents `connectOverCDP` to it instead of launching their own, so the session —
- * including a manual login — survives across turns. One shared browser, one
- * persistent profile; concurrency isolation is intentionally NOT solved here
- * (see persistent-browser-session skill) to keep this simple.
- */
-const child_process_1 = require("child_process");
-const http_1 = __importDefault(require("http"));
-const os_1 = __importDefault(require("os"));
-const path_1 = __importDefault(require("path"));
-const fs_1 = __importDefault(require("fs"));
-/**
- * Known install locations for Chrome and Edge per platform. Pure + injectable so
- * resolution can be unit-tested without the browsers actually being installed.
- */
-function browserExecutableCandidates(platform = process.platform, env = process.env) {
-    if (platform === 'win32') {
-        const pf = env['ProgramFiles'] || 'C:\\Program Files';
-        const pf86 = env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)';
-        const local = env['LOCALAPPDATA']
-            || path_1.default.join(env['USERPROFILE'] || 'C:\\Users\\Default', 'AppData', 'Local');
-        return {
-            chrome: [
-                path_1.default.join(pf, 'Google', 'Chrome', 'Application', 'chrome.exe'),
-                path_1.default.join(pf86, 'Google', 'Chrome', 'Application', 'chrome.exe'),
-                path_1.default.join(local, 'Google', 'Chrome', 'Application', 'chrome.exe'),
-            ],
-            msedge: [
-                path_1.default.join(pf86, 'Microsoft', 'Edge', 'Application', 'msedge.exe'),
-                path_1.default.join(pf, 'Microsoft', 'Edge', 'Application', 'msedge.exe'),
-            ],
-        };
-    }
-    if (platform === 'darwin') {
-        return {
-            chrome: ['/Applications/Google Chrome.app/Contents/MacOS/Google Chrome'],
-            msedge: ['/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge'],
-        };
-    }
-    // linux + anything else
-    return {
-        chrome: ['/usr/bin/google-chrome', '/usr/bin/google-chrome-stable', '/usr/bin/chromium', '/usr/bin/chromium-browser'],
-        msedge: ['/usr/bin/microsoft-edge', '/usr/bin/microsoft-edge-stable'],
-    };
-}
-/**
- * Resolve a Chromium executable. Returns null when neither Chrome nor Edge is
- * found (caller surfaces a clear "install Chrome or Edge" error).
- */
-function resolveBrowserExecutable(opts = {}) {
-    const exists = opts.exists || ((p) => fs_1.default.existsSync(p));
-    if (opts.explicitPath) {
-        if (exists(opts.explicitPath)) {
-            const channel = /edge|msedge/i.test(opts.explicitPath) ? 'msedge' : 'chrome';
-            return { channel, path: opts.explicitPath };
-        }
-        return null;
-    }
-    const candidates = browserExecutableCandidates(opts.platform, opts.env);
-    const order = opts.channel === 'msedge'
-        ? ['msedge', 'chrome']
-        : ['chrome', 'msedge']; // 'chrome' and 'auto' both prefer Chrome first
-    for (const channel of order) {
-        for (const candidate of candidates[channel]) {
-            if (exists(candidate))
-                return { channel, path: candidate };
-        }
-    }
-    return null;
-}
-/**
- * Args that put Chrome/Edge into a debuggable, prompt-free, persistent-profile
- * state. Headed (no --headless) so the manager can log in by hand.
- */
-function buildBrowserLaunchArgs(opts) {
-    return [
-        `--remote-debugging-port=${opts.port}`,
-        `--user-data-dir=${opts.userDataDir}`,
-        '--no-first-run',
-        '--no-default-browser-check',
-        // Required so Playwright's CDP WebSocket handshake is accepted by recent Chromium.
-        '--remote-allow-origins=*',
-        'about:blank',
-    ];
-}
-/**
- * The runtime guidance the Hub injects into an agent's start message so it uses
- * the shared browser. This is intentionally a UI/Hub-layer injection — it is NOT
- * baked into any registry job or skill. Returns '' when the shared browser is not
- * available (so the note only appears when there is something to connect to).
- */
-function buildBrowserContextNote(cdpEndpoint, hubBaseUrl) {
-    if (!cdpEndpoint || !hubBaseUrl)
-        return '';
-    return [
-        '',
-        '[FRAIM shared browser] A persistent shared browser is available — use it instead of launching your own.',
-        `Before using a browser, ensure it is running: \`POST ${hubBaseUrl}/api/ai-hub/browser/start\` (idempotent — it reuses the running browser, or relaunches it if it was closed).`,
-        `Then drive the shared browser at ${cdpEndpoint}: your Playwright/browser tools are pointed at it on supported agents; if your tools would otherwise open their own browser, connect to the shared one with \`connectOverCDP("${cdpEndpoint}")\` and reuse its existing context/tab.`,
-        'Never close the shared browser or sign me out. If a site needs login, open it there and ask me to log in — the session persists to your next turn.',
-    ].join('\n');
-}
-/** Default persistent profile directory — sandboxed from the user's daily browser. */
-function defaultBrowserProfileDir(env = process.env) {
-    const home = env['FRAIM_HOME'] || os_1.default.homedir();
-    return path_1.default.join(home, '.fraim', 'browser-profile');
-}
-/**
- * Probe a CDP endpoint's /json/version. Resolves true only when it answers with a
- * Chromium DevTools payload. Uses node http (no fetch dependency).
- */
-function probeCdpEndpoint(endpoint, timeoutMs = 1500) {
-    return new Promise((resolve) => {
-        let url;
-        try {
-            url = new URL('/json/version', endpoint);
-        }
-        catch {
-            resolve(false);
-            return;
-        }
-        const req = http_1.default.get(url, { timeout: timeoutMs }, (res) => {
-            let body = '';
-            res.on('data', (chunk) => { body += chunk.toString(); });
-            res.on('end', () => {
-                try {
-                    const data = JSON.parse(body);
-                    resolve(!!(data && (data.webSocketDebuggerUrl || data.Browser)));
-                }
-                catch {
-                    resolve(false);
-                }
-            });
-        });
-        req.on('error', () => resolve(false));
-        req.on('timeout', () => { req.destroy(); resolve(false); });
-    });
-}
-const DEFAULT_PORT = 9222;
-/**
- * Owns the lifecycle of the single shared browser. start() is idempotent — it
- * reuses an already-running browser on the port — so multiple callers (and Hub
- * restarts) converge on one instance.
- */
-class ManagedBrowser {
-    constructor(opts = {}) {
-        this.child = null;
-        this.ownsProcess = false;
-        this.resolved = null;
-        this.opts = opts;
-        this.channel = opts.channel || 'auto';
-        this.port = opts.port || DEFAULT_PORT;
-        this.host = opts.host || '127.0.0.1';
-        this.userDataDir = opts.userDataDir || defaultBrowserProfileDir(opts.env);
-    }
-    cdpEndpoint() {
-        return `http://${this.host}:${this.port}`;
-    }
-    probe() {
-        return this.opts.probeFn ? this.opts.probeFn(this.cdpEndpoint()) : probeCdpEndpoint(this.cdpEndpoint());
-    }
-    /** Live check — does a Chromium CDP endpoint answer on the port right now. */
-    isRunning() {
-        return this.probe();
-    }
-    async start() {
-        // 1. Reuse a browser already listening on the port (idempotent across callers
-        //    and Hub restarts; also lets the manager pre-launch their own).
-        if (await this.probe()) {
-            return { endpoint: this.cdpEndpoint(), reused: true, executable: this.resolved?.path || null, channel: this.resolved?.channel || null };
-        }
-        // Already spawned by us but not yet reachable → just wait for it.
-        if (this.child && this.ownsProcess) {
-            await this.waitForRunning();
-            return { endpoint: this.cdpEndpoint(), reused: false, executable: this.resolved?.path || null, channel: this.resolved?.channel || null };
-        }
-        // 2. Resolve the executable.
-        const exe = resolveBrowserExecutable({
-            channel: this.channel,
-            explicitPath: this.opts.explicitPath,
-            platform: this.opts.platform,
-            env: this.opts.env,
-            exists: this.opts.exists,
-        });
-        if (!exe) {
-            throw new Error('No Chrome or Edge found. Install Google Chrome or Microsoft Edge, or set FRAIM_BROWSER_PATH to a Chromium executable.');
-        }
-        this.resolved = exe;
-        // 3. Ensure the profile dir exists, then spawn the browser long-lived. It is a
-        //    child of the Hub server (so it dies with the Hub) but NOT of any agent
-        //    turn — that is the whole point.
-        try {
-            if (!this.opts.exists)
-                fs_1.default.mkdirSync(this.userDataDir, { recursive: true });
-        }
-        catch { /* best-effort; browser will create it */ }
-        const args = buildBrowserLaunchArgs({ port: this.port, userDataDir: this.userDataDir });
-        const spawnFn = this.opts.spawnFn || ((c, a, o) => (0, child_process_1.spawn)(c, a, o));
-        const child = spawnFn(exe.path, args, { stdio: 'ignore', windowsHide: false });
-        this.child = child;
-        this.ownsProcess = true;
-        if (typeof child.on === 'function') {
-            child.on('exit', () => {
-                if (this.child === child) {
-                    this.child = null;
-                    this.ownsProcess = false;
-                }
-            });
-        }
-        // 4. Wait until the CDP endpoint is reachable before returning the endpoint.
-        await this.waitForRunning();
-        return { endpoint: this.cdpEndpoint(), reused: false, executable: exe.path, channel: exe.channel };
-    }
-    async waitForRunning() {
-        const timeoutMs = this.opts.waitTimeoutMs ?? 15000;
-        const intervalMs = this.opts.waitIntervalMs ?? 250;
-        const startedAt = Date.now();
-        for (;;) {
-            if (await this.probe())
-                return;
-            if (Date.now() - startedAt > timeoutMs) {
-                throw new Error(`Browser did not become reachable on ${this.cdpEndpoint()} within ${timeoutMs}ms.`);
-            }
-            await new Promise((r) => setTimeout(r, intervalMs));
-        }
-    }
-    /** Kill the browser only if WE launched it — never a browser the manager owns. */
-    stop() {
-        if (this.child && this.ownsProcess && typeof this.child.kill === 'function') {
-            try {
-                this.child.kill();
-            }
-            catch { /* ignore */ }
-        }
-        this.child = null;
-        this.ownsProcess = false;
-    }
-    status() {
-        return {
-            ownsProcess: this.ownsProcess,
-            endpoint: this.cdpEndpoint(),
-            channel: this.resolved?.channel || this.channel,
-            userDataDir: this.userDataDir,
-            executable: this.resolved?.path || null,
-        };
-    }
-}
-exports.ManagedBrowser = ManagedBrowser;

package/dist/src/ai-hub/manager-turns.js

@@ -1,64 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractExplicitFraimInvocation = extractExplicitFraimInvocation;
-exports.fraimInvocationFor = fraimInvocationFor;
-exports.buildCommunicationStyleNote = buildCommunicationStyleNote;
-exports.buildSameJobContinueMessage = buildSameJobContinueMessage;
-exports.buildManagerMessage = buildManagerMessage;
-function extractExplicitFraimInvocation(text) {
-    const raw = String(text || '');
-    const match = raw.match(/(?:^|\n|\s)([$/@]fraim)\s+([a-z0-9][a-z0-9-]*)(?=\s|$)/i);
-    if (!match || match.index == null)
-        return null;
-    const before = raw.slice(0, match.index).trim();
-    const after = raw.slice(match.index + match[0].length).trim();
-    const remainder = [before, after].filter(Boolean).join('\n\n').trim();
-    return {
-        symbol: match[1].toLowerCase(),
-        jobId: match[2].toLowerCase(),
-        remainder,
-    };
-}
-function fraimInvocationFor(employeeId, jobId) {
-    if (jobId === '__freeform__')
-        return null;
-    const symbol = employeeId === 'codex' ? '$fraim' : '/fraim';
-    return `${symbol} ${jobId}`;
-}
-// #521: a Hub-injected communication-style note so the employee's messages to the
-// manager stay about the JOB and its outcomes — not the FRAIM machinery (seeking
-// mentoring, tool calls, git, phase switches). The structured signals (the
-// tracker's seekMentoring events, the review_handoff) still flow as tool calls
-// behind the scenes, so this only shapes the human-facing prose. Injected at the
-// Hub layer — it never edits the jobs.
-function buildCommunicationStyleNote() {
-    return [
-        '',
-        '[How to talk to me] In your messages to me, report ONLY on the job and its outcome — what you found, what you changed, the decisions you made, blockers, and what you need from me. Do NOT narrate the FRAIM machinery: don\'t announce that you are talking to FRAIM, asking your mentor, following the process, moving between phases, or calling tools (git, playwright, etc.). I can see the raw tool activity separately if I want it. Keep your updates short and about the work, not the process.',
-    ].join('\n');
-}
-// Issue #732: a plain continue of the SAME active job must not re-load the job.
-// Continue turns resume the existing agent session, which already has the job
-// loaded, so this message carries NO `/fraim <job>` invocation — the headless
-// transform therefore does not re-instruct get_fraim_job (which is slow and
-// mints a fresh UUID job id every call). The manager coaching still reaches the
-// agent, which advances the workflow via seekMentoring using its resumed context.
-function buildSameJobContinueMessage(coaching) {
-    const remainder = String(coaching || '').trim();
-    return remainder
-        ? `Continue the active FRAIM job with this manager coaching:\n\n${remainder}`
-        : 'Continue the active FRAIM job using the current session context.';
-}
-function buildManagerMessage(employeeId, jobId, kind, instructions, stubPath) {
-    const trimmed = String(instructions || '').trim();
-    const explicit = extractExplicitFraimInvocation(trimmed);
-    const effectiveJobId = explicit?.jobId || jobId;
-    const invocation = fraimInvocationFor(employeeId, effectiveJobId);
-    if (!invocation)
-        return explicit?.remainder || trimmed;
-    const remainder = explicit ? explicit.remainder : trimmed;
-    const stub = (kind === 'start' && stubPath) ? `\n[Job stub: ${stubPath}]` : '';
-    if (!remainder)
-        return `${invocation}${stub}`;
-    return `${invocation}${stub}\n\n${remainder}`;
-}

package/dist/src/ai-hub/office-sideload.js

@@ -1,156 +0,0 @@
-"use strict";
-/**
- * Sideloads Office add-in manifests (Word + PowerPoint) so they appear under
- * Insert > My Add-ins > Developer Add-ins without admin rights or AppSource.
- *
- * Windows: writes HKCU\SOFTWARE\Microsoft\Office\16.0\WEF\Developer\<guid> =
- *          ABSOLUTE FILE PATH to manifest.xml. This is exactly what Microsoft's
- *          `office-addin-dev-settings register` writes. A URL value is for
- *          SharePoint/network-share catalogs and yields "catalog access denied"
- *          for a developer sideload — do NOT use a URL here.
- * macOS:   copies the manifest into each app's
- *          ~/Library/Containers/<bundle>/Data/Documents/wef/<guid>.xml
- *
- * NOTE: the manifest XML itself must be ASCII-clean (no smart quotes, em/en
- * dashes, or BOM) or Office's parser hard-fails with -1072894428 and the pane
- * silently never appears. See project_rules.md.
- *
- * Both paths are non-admin and survive app updates (keyed by manifest GUID).
- * Safe to call multiple times — idempotent.
- */
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.manifestXmlForPort = manifestXmlForPort;
-exports.isSideloaded = isSideloaded;
-exports.sideloadManifest = sideloadManifest;
-exports.removeSideload = removeSideload;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const os_1 = __importDefault(require("os"));
-const child_process_1 = require("child_process");
-const WEF_DEVELOPER_KEY = 'HKCU\\SOFTWARE\\Microsoft\\Office\\16.0\\WEF\\Developer';
-const MANIFESTS = [
-    {
-        guid: 'd1090951-50cf-4cf2-9d12-b0f8541d265c',
-        candidates: (base) => [
-            path_1.default.resolve(base, 'extensions/office-word/manifest.xml'),
-            path_1.default.resolve(__dirname, '..', '..', 'extensions/office-word/manifest.xml'),
-            path_1.default.resolve(__dirname, '..', '..', '..', 'extensions/office-word/manifest.xml'),
-        ],
-        macContainer: 'com.microsoft.Word',
-    },
-    {
-        guid: 'e7a3c812-91fd-4b2e-8c15-d4f6a903b71e',
-        candidates: (base) => [
-            path_1.default.resolve(base, 'public/ai-hub/powerpoint-taskpane/manifest.xml'),
-            path_1.default.resolve(__dirname, '..', '..', 'public/ai-hub/powerpoint-taskpane/manifest.xml'),
-            path_1.default.resolve(__dirname, '..', '..', '..', 'public/ai-hub/powerpoint-taskpane/manifest.xml'),
-        ],
-        macContainer: 'com.microsoft.Powerpoint',
-    },
-];
-function resolveManifestPath(entry, projectPath) {
-    return entry.candidates(projectPath).find(c => fs_1.default.existsSync(c)) ?? null;
-}
-function macWefPath(container, guid) {
-    return path_1.default.join(os_1.default.homedir(), 'Library', 'Containers', container, 'Data', 'Documents', 'wef', `${guid}.xml`);
-}
-function generatedManifestPath(entry, userDataDir) {
-    return path_1.default.join(userDataDir, 'office-manifests', entry.guid, 'manifest.xml');
-}
-function manifestXmlForPort(xml, httpPort) {
-    return xml.replace(/(https?:\/\/(?:localhost|127\.0\.0\.1)):43091/g, `$1:${httpPort}`);
-}
-function prepareManifestForSideload(entry, sourcePath, options) {
-    if (!options.httpPort)
-        return sourcePath;
-    const userDataDir = options.userDataDir || path_1.default.join(os_1.default.homedir(), '.fraim');
-    const dest = generatedManifestPath(entry, userDataDir);
-    const rendered = manifestXmlForPort(fs_1.default.readFileSync(sourcePath, 'utf8'), options.httpPort);
-    fs_1.default.mkdirSync(path_1.default.dirname(dest), { recursive: true });
-    fs_1.default.writeFileSync(dest, rendered, { encoding: 'utf8' });
-    return dest;
-}
-// ---------------------------------------------------------------------------
-// Windows registry helpers
-// ---------------------------------------------------------------------------
-function winRegisteredValue(guid) {
-    const r = (0, child_process_1.spawnSync)('reg', ['query', WEF_DEVELOPER_KEY, '/v', guid], { encoding: 'utf8' });
-    if (r.status !== 0 || !r.stdout.includes('REG_SZ'))
-        return null;
-    // Output line looks like: "    <guid>    REG_SZ    C:\path\to\manifest.xml"
-    const line = r.stdout.split(/\r?\n/).find(l => l.includes('REG_SZ'));
-    if (!line)
-        return null;
-    const idx = line.indexOf('REG_SZ');
-    return line.slice(idx + 'REG_SZ'.length).trim() || null;
-}
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/** Returns true when ALL manifests are sideloaded with the correct value. */
-function isSideloaded() {
-    return MANIFESTS.every(m => isManifestSideloaded(m));
-}
-function isManifestSideloaded(m) {
-    if (process.platform === 'win32') {
-        const value = winRegisteredValue(m.guid);
-        // Must be a real file path that exists — a URL or a stale/missing path
-        // means we have NOT correctly sideloaded and should re-register.
-        return !!value && !/^https?:\/\//i.test(value) && fs_1.default.existsSync(value);
-    }
-    if (process.platform === 'darwin')
-        return fs_1.default.existsSync(macWefPath(m.macContainer, m.guid));
-    return false;
-}
-/**
- * Sideloads all manifests. Returns ok:true if every manifest was registered.
- * Returns ok:false with the first failure reason.
- */
-function sideloadManifest(projectPath, options = {}) {
-    for (const entry of MANIFESTS) {
-        const manifestPath = resolveManifestPath(entry, projectPath);
-        if (!manifestPath) {
-            return { ok: false, reason: `Manifest not found for GUID ${entry.guid} — check extensions/office-word/ and public/ai-hub/powerpoint-taskpane/` };
-        }
-        const sideloadPath = prepareManifestForSideload(entry, manifestPath, options);
-        if (process.platform === 'win32') {
-            // Developer-key value = absolute file path to manifest.xml (NOT a URL).
-            const r = (0, child_process_1.spawnSync)('reg', [
-                'add', WEF_DEVELOPER_KEY,
-                '/v', entry.guid, '/t', 'REG_SZ', '/d', sideloadPath, '/f',
-            ], { encoding: 'utf8' });
-            if (r.status !== 0)
-                return { ok: false, reason: r.stderr || `reg add failed for ${entry.guid}` };
-            continue;
-        }
-        if (process.platform === 'darwin') {
-            const dest = macWefPath(entry.macContainer, entry.guid);
-            try {
-                fs_1.default.mkdirSync(path_1.default.dirname(dest), { recursive: true });
-                fs_1.default.copyFileSync(sideloadPath, dest);
-            }
-            catch (err) {
-                return { ok: false, reason: String(err) };
-            }
-            continue;
-        }
-        return { ok: false, reason: `Unsupported platform: ${process.platform}` };
-    }
-    return { ok: true };
-}
-/** Removes all sideloaded manifests. */
-function removeSideload() {
-    for (const entry of MANIFESTS) {
-        if (process.platform === 'win32') {
-            (0, child_process_1.spawnSync)('reg', ['delete', WEF_DEVELOPER_KEY, '/v', entry.guid, '/f'], { encoding: 'utf8' });
-        }
-        else if (process.platform === 'darwin') {
-            const target = macWefPath(entry.macContainer, entry.guid);
-            if (fs_1.default.existsSync(target))
-                fs_1.default.unlinkSync(target);
-        }
-    }
-}