grix-connector 4.7.1 → 4.9.0

package/dist/core/upgrade/upgrade-checker.js

@@ -1,3 +1,3 @@
-import{closeSync as C,existsSync as v,mkdirSync as W,openSync as me,readFileSync as P,realpathSync as we,renameSync as ve,writeFileSync as ye}from"node:fs";import{join as _,dirname as be}from"node:path";import{spawn as H}from"node:child_process";import{log as m}from"../log/index.js";import{GRIX_PATHS as y}from"../log/index.js";import{resolveClientVersion as A}from"../util/client-version.js";import{UpgradeError as S,armWindowsUpgradeHandoff as x,archivePendingJournal as Se,armWindowsUpgradeRollback as Te,cleanupPendingBackup as q,collectEnvInfo as Ae,discardPendingStaging as U,finalizePendingTransaction as F,getUpgradeLogTail as $,isVersionAvailable as B,npmInstall as ke,normalizeUpgradeVersion as Re,pendingExists as z,preflightCheck as j,readPending as D,readPendingPackageVersion as K,removeWindowsHandoffFiles as X,rollbackPendingInstall as Pe,updatePending as N,upgradeLog as a,verifyInstalledVersion as $e,writePending as Ee}from"./npm-upgrader.js";import{isRetriableRegistryError as Y,isTransientInstallError as J}from"../installer/npm-registry.js";import{installVersionIntoStore as Ie}from"./npm-upgrader.js";import{ensureLauncher as Ue,healthMarkerPath as De,markHealthy as Ne,pruneVersions as Me,readPointer as M,readRollbackRecord as Ge,readSwitchRecord as Le,resolveLauncherStore as V,rollbackRecordPath as Z,switchCurrent as Oe,switchRecordPath as Q,takeCrashNote as ee,versionDir as te,versionEntry as re,writeSwitchRecord as ae}from"./version-store.js";import{rmSync as k}from"node:fs";import{randomUUID as Ce}from"node:crypto";const We=360*60*1e3,He=300*1e3,ie=1800*1e3,xe=2,qe=3,Fe=10,E="grix-connector",ne=1e4,G=15,se=2e3,oe=8e3,Be=1e3,ze=2e3,je=120*1e3,ce=1e4,Ke=6e4,Xe=3,Ye=600*1e3,Je=9e4,Ve=3e4,Ze=9e4,Qe=new Set(["preparing","staged","handoff_ready","activating","verifying","healthy","rolling_back","rolled_back","finalizing","failed"]),L=600*1e3,O=1800*1e3;function I(d,e=L){const t=Date.parse(d.activation_started_at??d.upgraded_at??"");return Number.isNaN(t)?!0:Date.now()-t>e}function de(d){const e=Date.parse(d.verification_started_at??d.activation_started_at??"");return Number.isNaN(e)||Date.now()-e>je}function et(d){if((d.guardian_handback_count??0)>=Xe)return!1;const e=Date.parse(d.guardian_handback_at??"");return Number.isNaN(e)?!0:Date.now()-e>=Ye}function tt(d){if(!Number.isInteger(d)||(d??0)<=0)return!1;try{return process.kill(d,0),!0}catch{return!1}}function le(d){try{return we(d)}catch{return d}}function ue(){try{W(_(y.base,"log"),{recursive:!0});const d=me(_(y.base,"log","upgrade.log"),"a");return{stdio:["ignore",d,d],logFd:d}}catch{return{stdio:"ignore"}}}function R(){const d=_(y.base,"bin"),e=_(d,"upgrade-guardian.mjs");if(v(e))return le(e);const t=_(d,"upgrade-guardian.fallback.mjs");return v(t)?le(t):null}function he(d){if(!tt(d.guardian_pid))return!1;try{const t=JSON.parse(P(_(y.data,"upgrade-monitor-heartbeat.json"),"utf-8"));if(t.transaction_id===d.transaction_id&&t.pid===d.guardian_pid&&typeof t.updated_at=="number"&&Date.now()-t.updated_at<=ce)return!0}catch{}const e=Date.parse(d.guardian_started_at??"");return Number.isFinite(e)&&Date.now()-e<=ce}function pe(d){return new URL(d.replace(/^wss:/,"https:").replace(/^ws:/,"http:")).origin}function fe(){return _(y.data,"upgrade-state.json")}function ge(){const d=fe();if(!v(d))return{daily_attempts:{},version_attempts:{}};try{return JSON.parse(P(d,"utf-8"))}catch{return{daily_attempts:{},version_attempts:{}}}}function rt(d){const e=fe();W(be(e),{recursive:!0});const t=e+".tmp";ye(t,JSON.stringify(d),"utf-8"),ve(t,e)}function _e(){return new Date().toISOString().slice(0,10)}class mt{agentConfigs;isBusy;closeAdmission;options;timer=null;initialTimer=null;pendingTimer=null;healthyTimer=null;guardianWaitLoggedAt=0;guardianWaitLoggedPhase="";recordedRollbackFailures=new Set;posixGuardianResumeAttempted=new Set;running=!1;stopped=!1;constructor(e,t,r,i={}){this.agentConfigs=e,this.isBusy=t,this.closeAdmission=r,this.options=i}async start(){await this.handleLauncherStartup(),await this.handlePendingOnStartup(),this.initialTimer=setTimeout(()=>{this.stopped||(this.runCheck(),!this.stopped&&(this.timer=setInterval(()=>this.runCheck(),We)))},He)}stop(){this.stopped=!0,this.initialTimer&&(clearTimeout(this.initialTimer),this.initialTimer=null),this.timer&&(clearInterval(this.timer),this.timer=null),this.pendingTimer&&(clearTimeout(this.pendingTimer),this.pendingTimer=null),this.healthyTimer&&(clearTimeout(this.healthyTimer),this.healthyTimer=null)}triggerCheck(){this.stopped||this.runCheck()}async checkForUpdate(){return this.agentConfigs.length===0?{available:!1}:(await Promise.all(this.agentConfigs.map(r=>this.queryUpgrade(r)))).find(r=>r.available&&r.release)??{available:!1}}async handlePendingOnStartup(){if(!z())return;let e=D();if(!e){a("daemon startup: pending journal is unreadable; preserving it and blocking automatic upgrade for manual recovery");return}if(e.phase&&!Qe.has(e.phase)&&(e=N({phase:"failed",error_code:"INVALID_UPGRADE_STATE",error_msg:`Unknown upgrade transaction phase: ${String(e.phase)}`},e.transaction_id)),e.phase==="finalizing"){this.settleTransaction(e)||(a(`terminal transaction ${e.transaction_id??"legacy"} is waiting for its shared lock to be released`),this.schedulePendingReconcile());return}if(e.phase==="preparing"||e.phase==="staged"){const c=!!(e.wrapper_pause_file&&v(e.wrapper_pause_file));if(e.phase==="staged"&&c){this.schedulePendingReconcile();return}U(e),e=N({phase:"rolled_back",error_code:"UPGRADE_INTERRUPTED",error_msg:"Upgrade stopped before Windows activation started"})}if(e.phase==="verifying"){if(he(e)&&!de(e)){this.schedulePendingReconcile();return}if(de(e)&&e.transaction_id&&["win32","darwin"].includes(this.options.platform??process.platform)&&this.options.requestGracefulShutdown){const c=`Target ${e.target_version} did not become healthy before the Windows verification deadline`;Te(e.transaction_id,c),a(`${c}; requesting graceful shutdown for offline rollback`),await this.options.requestGracefulShutdown("upgrade");return}await this.resumeWindowsGuardian(),this.schedulePendingReconcile();return}const t=new Set(["handoff_ready","activating","rolling_back"]);if(e.phase&&t.has(e.phase)){if(he(e)){this.logGuardianWait(e),this.schedulePendingReconcile();return}if(I(e)&&e.transaction_id&&(this.options.platform??process.platform)==="win32"&&this.options.requestGracefulShutdown&&et(e)){const c=`Guardian did not settle ${e.phase} for ${e.target_version} before the Windows activation deadline`;N({guardian_handback_count:(e.guardian_handback_count??0)+1,guardian_handback_at:new Date().toISOString()},e.transaction_id),a(`${c}; requesting graceful shutdown so the wrapper re-runs the guardian`),await this.options.requestGracefulShutdown("upgrade");return}if(I(e))a(`daemon startup: guardian did not settle ${e.phase} for ${e.target_version} and cannot be resumed; collapsing the transaction by version verdict`),X(),U(e);else{await this.resumeWindowsGuardian(),this.logGuardianWait(e),this.schedulePendingReconcile();return}}if(e.phase==="failed"){const c=K(e),l=A();if(!c||c!==l){a(`daemon startup: upgrade transaction requires manual recovery: ${e.error_msg??e.error_code??"unknown error"} (runtime=${l}, active package=${c??"unknown"})`);return}const f=Se(e);a(`daemon startup: failed transaction ${e.transaction_id??"legacy"} (${e.error_code??"unknown error"}) is converging on the runnable ${l}${f?`; diagnostics kept at ${f}`:""}`)}const r=K(e),i=A(),n=e.phase==="healthy",u=e.phase==="rolled_back",o=!r||r===e.target_version,s=n?i===e.target_version&&r===e.target_version:!u&&i===e.target_version&&o;if(!s&&o&&!u){if(!I(e)){if((this.options.platform??process.platform)!=="win32"&&r===e.target_version){const c=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.posixGuardianResumeAttempted.has(c)||(this.posixGuardianResumeAttempted.add(c),a(`resuming POSIX guardian for stalled activation of ${e.target_version}`),this.startGuardian())}this.logThrottled("posix-activation-wait",`daemon startup: runtime ${i} is waiting for guardian activation of ${e.target_version} (active package=${r??"unknown"})`),this.schedulePendingReconcile();return}a(`daemon startup: activation wait for ${e.target_version} expired (> ${L/6e4}min); no guardian will finish the switch, reporting by version verdict`)}const h=s?{from_version:e.from_version,to_version:e.target_version,status:"success"}:{from_version:e.from_version,to_version:e.target_version,status:"rolled_back",error_code:e.error_code??"STARTUP_CRASH",error_msg:e.error_msg,crash_count:e.crash_count};if(a(s?`daemon startup: version matches target ${e.target_version}, upgrade succeeded`:`daemon startup: runtime=${i}, active package=${r??"unknown"}, target=${e.target_version}; rolled back`),!s){const c=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.recordedRollbackFailures.has(c)||(this.recordedRollbackFailures.add(c),this.recordFailure(e.target_version))}if(s){const c=await this.confirmHealthz(oe,n?e.target_version:void 0,n?e.old_pid:void 0,n?e.activation_started_at:void 0);if(n&&!c){if(!I(e)){a("guardian marked healthy but target-version healthz is not yet observable; retrying reconciliation"),this.schedulePendingReconcile();return}a(`guardian marked healthy for ${e.target_version} but healthz stayed unobservable past the ${L/6e4}min activation window; collapsing the transaction by version verdict`)}else a(c?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match (guardian still guards crashes)")}if(!q(e)){a(`terminal transaction ${e.transaction_id??"legacy"} is waiting for antivirus-held artifact cleanup`),this.schedulePendingReconcile();return}if(await this.reportUpgrade(h)){this.settleTransaction(e)||(a(`terminal transaction ${e.transaction_id??"legacy"} could not release its shared lock; retrying reconciliation`),this.schedulePendingReconcile());return}this.retryStartupReport(h,e,!1)}settleTransaction(e){if(!F(e))return!1;try{this.options.onTransactionSettled?.()}catch(t){a(`onTransactionSettled hook failed: ${t instanceof Error?t.message:String(t)}`)}return!0}schedulePendingReconcile(){this.stopped||this.pendingTimer||(this.pendingTimer=setTimeout(()=>{this.pendingTimer=null,!this.stopped&&this.handlePendingOnStartup().catch(e=>{m.warn("upgrade",`Pending reconciliation failed: ${e instanceof Error?e.message:e}`),this.schedulePendingReconcile()})},ze))}logThrottled(e,t){const r=Date.now();e===this.guardianWaitLoggedPhase&&r-this.guardianWaitLoggedAt<Ke||(this.guardianWaitLoggedPhase=e,this.guardianWaitLoggedAt=r,a(t))}logGuardianWait(e){const t=String(e.phase??"");this.logThrottled(`guardian:${t}`,`transaction ${e.transaction_id??"legacy"} is ${t}; waiting for guardian verdict`)}async resumeWindowsGuardian(){if(this.options.resumeWindowsGuardian){await this.options.resumeWindowsGuardian();return}const e=R();if(!e)return;const{stdio:t,logFd:r}=ue();try{H(process.execPath,[e,"activate","--root",y.base],{detached:!0,stdio:t,windowsHide:!0}).unref()}finally{if(r!==void 0)try{C(r)}catch{}}}async retryStartupReport(e,t,r){const i=t?.transaction_id,n=()=>{const u=D();if(!(i&&u?.transaction_id!==i)){if(r&&!q(t)){a(`terminal backup cleanup is still blocked for ${i??"legacy transaction"}`),this.schedulePendingReconcile();return}this.settleTransaction(t)||(a(`terminal shared lock release is still blocked for ${i??"legacy transaction"}`),this.schedulePendingReconcile())}};for(let u=2;u<=G;u++){if(this.stopped)return;const o=se*(u-1)+Math.floor(Math.random()*1e3);if(await new Promise(s=>setTimeout(s,o)),this.stopped)return;if(await this.reportUpgrade(e)){n();return}}a(`startup report (${e.status}) not delivered after ${G} attempts; clearing pending to unblock future checks`),n()}async confirmHealthz(e,t,r,i){let n="19579";try{const s=_(y.data,"health-port");v(s)&&(n=P(s,"utf-8").trim()||n)}catch{}const u=`http://127.0.0.1:${n}/healthz`,o=Date.now()+e;for(;Date.now()<o&&!this.stopped;){try{const s=await fetch(u,{signal:AbortSignal.timeout(2e3)});if(s.ok){if(!t)return!0;const h=await s.json();if(h.status==="ok"&&h.version===t&&typeof h.pid=="number"&&h.pid>0&&h.pid!==r)try{const c=JSON.parse(P(_(y.base,"daemon-status.json"),"utf-8")),l=Date.parse(i??"");return!!(c.state==="running"&&c.pid===h.pid&&typeof c.updated_at=="number"&&Number.isFinite(l)&&c.updated_at>=l)}catch{return!1}}}catch{}await new Promise(s=>setTimeout(s,Be))}return!1}async runCheck(){if(!this.running){this.running=!0;try{await this.check()}catch(e){m.error("upgrade",`Check failed: ${e instanceof Error?e.message:e}`)}finally{this.running=!1}}}async check(){if(z()){await this.handlePendingOnStartup();return}if(this.agentConfigs.length===0)return;const r=(await Promise.all(this.agentConfigs.map(p=>this.queryUpgrade(p)))).find(p=>p.available&&p.release)?.release;if(!r)return;const i=A();let n;try{n=Re(r.version)}catch(p){const g=p;await this.reportUpgrade({from_version:i,to_version:String(r.version),status:"failed",error_code:g.code??"INVALID_VERSION",error_msg:g.message});return}const u=r.force,o=this.options.platform??process.platform,s=this.options.env??process.env,h=V(s);if(h&&this.options.requestGracefulShutdown){await this.runLauncherUpgrade(h,i,n,!!u);return}if(o==="win32"){const p=R(),g=s.GRIX_WRAPPER_SUPERVISED==="1";if(!g||!p||!this.options.requestGracefulShutdown){const b=`Windows automatic upgrade requires a refreshed service installation (${[...g?[]:["managed wrapper"],...p?[]:["external guardian"],...this.options.requestGracefulShutdown?[]:["graceful shutdown hook"]].join(", ")})`;a(b),await this.reportUpgrade({from_version:i,to_version:n,status:"failed",error_code:"WINDOWS_UPGRADE_UNSUPPORTED",error_msg:b});return}}const c=o==="darwin"&&!!R()&&!!this.options.requestGracefulShutdown;if(o==="darwin"&&!c&&a("macOS transactional upgrade prerequisites missing; falling back to the legacy guardian flow"),!u&&!this.checkRateLimit(n))return;const l=j();if(!l.ok){await this.reportUpgrade({from_version:i,to_version:n,status:"failed",error_code:l.errorCode,error_msg:l.errorMsg});return}if(!await B(E,n)){a(`target ${n} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}a(`upgrade start: ${i} -> ${n}`);const f=Date.now();let w;try{w=Ee(i,n,o==="win32"||c?"preparing":void 0).transaction_id,(await ke(E,n,void 0,c?{activationMode:"staged"}:{}))?.activationRequired||$e(n),a("npm install verified, reporting installed"),await this.reportUpgrade({from_version:i,to_version:n,status:"installed",duration_ms:Date.now()-f}),a("shutting down for restart");const g=await this.waitUntilIdle();if(g!=="idle")throw a(`upgrade aborted before lifecycle handoff: ${g}`),this.options.reopenLifecycleAdmission?.(),new S("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${g})`);if(o==="win32"){if(!R())throw new S("WINDOWS_UPGRADE_UNSUPPORTED","Windows external guardian disappeared before lifecycle handoff");x(process.pid,w),a("Windows handoff armed; requesting graceful daemon shutdown"),await this.options.requestGracefulShutdown("upgrade")}else if(c){if(!R())throw new S("MACOS_UPGRADE_UNSUPPORTED","macOS guardian helper disappeared before lifecycle handoff");x(process.pid,w),a("macOS handoff armed; spawning guardian before graceful daemon shutdown"),await this.resumeWindowsGuardian(),await this.options.requestGracefulShutdown("upgrade")}else this.startGuardian(),process.kill(process.pid,"SIGTERM")}catch(p){const g=p instanceof S?p.code:"NPM_INSTALL_FAILED",T=p instanceof Error?p.message:String(p);a(`upgrade failed: ${g} ${T}`);const b=D();if(w&&b?.transaction_id===w&&(o==="win32"||c?(X(),U(b)):Pe(b)&&a("upgrade failed before restart; previous package restored atomically"),F(b)||(a(`failed transaction ${w} is waiting for shared lock release`),this.schedulePendingReconcile()),this.options.reopenLifecycleAdmission?.()),g==="UPGRADE_IN_PROGRESS")return;Y(T)||J(T)||g==="NPM_TIMEOUT"?a(`failure is retriable (${g}); skipping cooldown, will retry next cycle`):this.recordFailure(n),await this.reportUpgrade({from_version:i,to_version:n,status:"failed",error_code:g,error_msg:T,duration_ms:Date.now()-f,upgrade_log:$()})}}async runLauncherUpgrade(e,t,r,i){if(!i&&!this.checkRateLimit(r))return;const n=j();if(!n.ok){await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:n.errorCode,error_msg:n.errorMsg});return}if(!await B(E,r)){a(`target ${r} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}a(`launcher upgrade start: ${t} -> ${r} (store=${e})`);const u=Date.now();try{v(re(e,r))?a(`${r} already present in version store; skipping install`):await Ie(e,E,r),await this.reportUpgrade({from_version:t,to_version:r,status:"installed",duration_ms:Date.now()-u});const o=await this.waitUntilIdle();if(o!=="idle")throw this.options.reopenLifecycleAdmission?.(),new S("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${o})`);const s={transaction_id:Ce(),from_version:t,to_version:r,started_at:new Date().toISOString()};ae(e,{...s,switched:!1}),Oe(e,r),ae(e,{...s,switched:!0}),a(`current pointer switched to ${r}; requesting restart via launcher`),await this.options.requestGracefulShutdown("upgrade-switch")}catch(o){const s=o instanceof S?o.code:"NPM_INSTALL_FAILED",h=o instanceof Error?o.message:String(o);if(a(`launcher upgrade failed: ${s} ${h}`),s==="UPGRADE_ABORTED"){a("machine stayed busy; keeping the verified version dir and retrying next cycle without penalty"),await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:s,error_msg:h,duration_ms:Date.now()-u,upgrade_log:$()});return}if(M(e,"current")!==r)try{k(te(e,r),{recursive:!0,force:!0})}catch{}Y(h)||J(h)||s==="NPM_TIMEOUT"?a(`failure is retriable (${s}); skipping cooldown, will retry next cycle`):this.recordFailure(r),await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:s,error_msg:h,duration_ms:Date.now()-u,upgrade_log:$()})}}async handleLauncherStartup(){const e=this.options.env??process.env,t=V(e);if(!t)return;const r=A();try{Ue(t,te(t,r))}catch(l){a(`failed to refresh launcher: ${l instanceof Error?l.message:String(l)}`)}const i=Date.now(),n=()=>{if(v(De(t,r)))return!1;const l=M(t,"previous");return!!l&&l!==r&&v(re(t,l))},u=l=>{this.healthyTimer=setTimeout(()=>{if(this.healthyTimer=null,!this.stopped){if(this.options.isConnected&&!this.options.isConnected()){if(Date.now()-i>=Ze&&this.options.requestGracefulShutdown&&n()){a(`${r} has been up ${Math.round((Date.now()-i)/1e3)}s without any agent websocket ready; exiting so the launcher counts a crash and can roll back`),this.options.requestGracefulShutdown("launcher-unhealthy");return}a(`uptime reached but no agent websocket is ready yet; deferring health marker for ${r}`),u(Ve);return}try{Ne(t,r),ee(t,r)}catch(f){a(`failed to write health marker: ${f instanceof Error?f.message:String(f)}`)}}},l),this.healthyTimer.unref?.()};u(Je);const o=Ge(t),s=Le(t);if(!o&&!s)return;const h=()=>{try{k(Z(t),{force:!0})}catch{}try{k(Q(t),{force:!0})}catch{}const l=Me(t);l.length>0&&a(`pruned version directories: ${l.join(", ")}`)};let c;if(o&&o.from_version===r){const l=`exit_code=${o.exit_code??"n/a"} crashes=${o.crash_count??"n/a"} uptime_ms=${o.uptime_ms??"n/a"}`;a(`daemon startup: launcher rolled back ${o.to_version} -> ${r} (${l})`),this.recordFailure(o.to_version);const f=ee(t,o.to_version),w=f?.split(/\r?\n/)[0]?.slice(0,200);c={from_version:o.from_version,to_version:o.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Target ${o.to_version} crashed before becoming healthy (${l}); launcher restored ${r}`+(w?`; cause: ${w}`:""),crash_count:o.crash_count,upgrade_log:$()+(f?`
+import{closeSync as x,existsSync as m,mkdirSync as F,openSync as me,readFileSync as P,realpathSync as we,renameSync as ve,writeFileSync as ye}from"node:fs";import{join as w,dirname as be}from"node:path";import{spawn as q}from"node:child_process";import{log as v}from"../log/index.js";import{GRIX_PATHS as y}from"../log/index.js";import{resolveClientVersion as A}from"../util/client-version.js";import{UpgradeError as k,armWindowsUpgradeHandoff as B,archivePendingJournal as Se,armWindowsUpgradeRollback as Te,cleanupPendingBackup as z,collectEnvInfo as ke,discardPendingStaging as N,finalizePendingTransaction as j,getUpgradeLogTail as E,isVersionAvailable as K,npmInstall as Ae,normalizeUpgradeVersion as $e,pendingExists as X,preflightCheck as Y,readPending as M,readPendingPackageVersion as J,removeWindowsHandoffFiles as V,rollbackPendingInstall as Re,updatePending as G,upgradeLog as a,verifyInstalledVersion as Pe,writePending as Ee}from"./npm-upgrader.js";import{isRetriableRegistryError as Z,isTransientInstallError as Q}from"../installer/npm-registry.js";import{installVersionIntoStore as Ie}from"./npm-upgrader.js";import{ensureLauncher as Ue,healthMarkerPath as De,markHealthy as Ne,pruneVersions as Me,readPointer as $,readRollbackRecord as Ge,readSwitchRecord as Le,resolveLauncherStore as ee,rollbackRecordPath as L,switchCurrent as Oe,switchRecordPath as O,takeCrashNote as te,versionDir as re,versionEntry as I,writeSwitchRecord as ae}from"./version-store.js";import{rmSync as T}from"node:fs";import{randomUUID as Ce}from"node:crypto";const We=360*60*1e3,He=300*1e3,ie=1800*1e3,xe=2,Fe=3,qe=10,U="grix-connector",ne=1e4,C=15,se=2e3,oe=8e3,Be=1e3,ze=2e3,je=120*1e3,ce=1e4,Ke=6e4,Xe=3,Ye=600*1e3,Je=9e4,Ve=3e4,Ze=9e4,Qe=3600*1e3,et=new Set(["preparing","staged","handoff_ready","activating","verifying","healthy","rolling_back","rolled_back","finalizing","failed"]),W=600*1e3,H=1800*1e3;function D(c,e=W){const t=Date.parse(c.activation_started_at??c.upgraded_at??"");return Number.isNaN(t)?!0:Date.now()-t>e}function de(c){const e=Date.parse(c.verification_started_at??c.activation_started_at??"");return Number.isNaN(e)||Date.now()-e>je}function tt(c){if((c.guardian_handback_count??0)>=Xe)return!1;const e=Date.parse(c.guardian_handback_at??"");return Number.isNaN(e)?!0:Date.now()-e>=Ye}function rt(c){if(!Number.isInteger(c)||(c??0)<=0)return!1;try{return process.kill(c,0),!0}catch{return!1}}function le(c){try{return we(c)}catch{return c}}function ue(){try{F(w(y.base,"log"),{recursive:!0});const c=me(w(y.base,"log","upgrade.log"),"a");return{stdio:["ignore",c,c],logFd:c}}catch{return{stdio:"ignore"}}}function R(){const c=w(y.base,"bin"),e=w(c,"upgrade-guardian.mjs");if(m(e))return le(e);const t=w(c,"upgrade-guardian.fallback.mjs");return m(t)?le(t):null}function he(c){if(!rt(c.guardian_pid))return!1;try{const t=JSON.parse(P(w(y.data,"upgrade-monitor-heartbeat.json"),"utf-8"));if(t.transaction_id===c.transaction_id&&t.pid===c.guardian_pid&&typeof t.updated_at=="number"&&Date.now()-t.updated_at<=ce)return!0}catch{}const e=Date.parse(c.guardian_started_at??"");return Number.isFinite(e)&&Date.now()-e<=ce}function pe(c){return new URL(c.replace(/^wss:/,"https:").replace(/^ws:/,"http:")).origin}function fe(){return w(y.data,"upgrade-state.json")}function ge(){const c=fe();if(!m(c))return{daily_attempts:{},version_attempts:{}};try{return JSON.parse(P(c,"utf-8"))}catch{return{daily_attempts:{},version_attempts:{}}}}function at(c){const e=fe();F(be(e),{recursive:!0});const t=e+".tmp";ye(t,JSON.stringify(c),"utf-8"),ve(t,e)}function _e(){return new Date().toISOString().slice(0,10)}class wt{agentConfigs;isBusy;closeAdmission;options;timer=null;initialTimer=null;pendingTimer=null;healthyTimer=null;guardianWaitLoggedAt=0;guardianWaitLoggedPhase="";recordedRollbackFailures=new Set;posixGuardianResumeAttempted=new Set;running=!1;stopped=!1;constructor(e,t,r,i={}){this.agentConfigs=e,this.isBusy=t,this.closeAdmission=r,this.options=i}async start(){await this.handleLauncherStartup(),await this.handlePendingOnStartup(),this.initialTimer=setTimeout(()=>{this.stopped||(this.runCheck(),!this.stopped&&(this.timer=setInterval(()=>this.runCheck(),We)))},He)}stop(){this.stopped=!0,this.initialTimer&&(clearTimeout(this.initialTimer),this.initialTimer=null),this.timer&&(clearInterval(this.timer),this.timer=null),this.pendingTimer&&(clearTimeout(this.pendingTimer),this.pendingTimer=null),this.healthyTimer&&(clearTimeout(this.healthyTimer),this.healthyTimer=null)}triggerCheck(){this.stopped||this.runCheck()}async checkForUpdate(){return this.agentConfigs.length===0?{available:!1}:(await Promise.all(this.agentConfigs.map(r=>this.queryUpgrade(r)))).find(r=>r.available&&r.release)??{available:!1}}async handlePendingOnStartup(){if(!X())return;let e=M();if(!e){a("daemon startup: pending journal is unreadable; preserving it and blocking automatic upgrade for manual recovery");return}if(e.phase&&!et.has(e.phase)&&(e=G({phase:"failed",error_code:"INVALID_UPGRADE_STATE",error_msg:`Unknown upgrade transaction phase: ${String(e.phase)}`},e.transaction_id)),e.phase==="finalizing"){this.settleTransaction(e)||(a(`terminal transaction ${e.transaction_id??"legacy"} is waiting for its shared lock to be released`),this.schedulePendingReconcile());return}if(e.phase==="preparing"||e.phase==="staged"){const d=!!(e.wrapper_pause_file&&m(e.wrapper_pause_file));if(e.phase==="staged"&&d){this.schedulePendingReconcile();return}N(e),e=G({phase:"rolled_back",error_code:"UPGRADE_INTERRUPTED",error_msg:"Upgrade stopped before Windows activation started"})}if(e.phase==="verifying"){if(he(e)&&!de(e)){this.schedulePendingReconcile();return}if(de(e)&&e.transaction_id&&["win32","darwin"].includes(this.options.platform??process.platform)&&this.options.requestGracefulShutdown){const d=`Target ${e.target_version} did not become healthy before the Windows verification deadline`;Te(e.transaction_id,d),a(`${d}; requesting graceful shutdown for offline rollback`),await this.options.requestGracefulShutdown("upgrade");return}await this.resumeWindowsGuardian(),this.schedulePendingReconcile();return}const t=new Set(["handoff_ready","activating","rolling_back"]);if(e.phase&&t.has(e.phase)){if(he(e)){this.logGuardianWait(e),this.schedulePendingReconcile();return}if(D(e)&&e.transaction_id&&(this.options.platform??process.platform)==="win32"&&this.options.requestGracefulShutdown&&tt(e)){const d=`Guardian did not settle ${e.phase} for ${e.target_version} before the Windows activation deadline`;G({guardian_handback_count:(e.guardian_handback_count??0)+1,guardian_handback_at:new Date().toISOString()},e.transaction_id),a(`${d}; requesting graceful shutdown so the wrapper re-runs the guardian`),await this.options.requestGracefulShutdown("upgrade");return}if(D(e))a(`daemon startup: guardian did not settle ${e.phase} for ${e.target_version} and cannot be resumed; collapsing the transaction by version verdict`),V(),N(e);else{await this.resumeWindowsGuardian(),this.logGuardianWait(e),this.schedulePendingReconcile();return}}if(e.phase==="failed"){const d=J(e),_=A();if(!d||d!==_){a(`daemon startup: upgrade transaction requires manual recovery: ${e.error_msg??e.error_code??"unknown error"} (runtime=${_}, active package=${d??"unknown"})`);return}const l=Se(e);a(`daemon startup: failed transaction ${e.transaction_id??"legacy"} (${e.error_code??"unknown error"}) is converging on the runnable ${_}${l?`; diagnostics kept at ${l}`:""}`)}const r=J(e),i=A(),s=e.phase==="healthy",u=e.phase==="rolled_back",o=!r||r===e.target_version,n=s?i===e.target_version&&r===e.target_version:!u&&i===e.target_version&&o;if(!n&&o&&!u){if(!D(e)){if((this.options.platform??process.platform)!=="win32"&&r===e.target_version){const d=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.posixGuardianResumeAttempted.has(d)||(this.posixGuardianResumeAttempted.add(d),a(`resuming POSIX guardian for stalled activation of ${e.target_version}`),this.startGuardian())}this.logThrottled("posix-activation-wait",`daemon startup: runtime ${i} is waiting for guardian activation of ${e.target_version} (active package=${r??"unknown"})`),this.schedulePendingReconcile();return}a(`daemon startup: activation wait for ${e.target_version} expired (> ${W/6e4}min); no guardian will finish the switch, reporting by version verdict`)}const p=n?{from_version:e.from_version,to_version:e.target_version,status:"success"}:{from_version:e.from_version,to_version:e.target_version,status:"rolled_back",error_code:e.error_code??"STARTUP_CRASH",error_msg:e.error_msg,crash_count:e.crash_count};if(a(n?`daemon startup: version matches target ${e.target_version}, upgrade succeeded`:`daemon startup: runtime=${i}, active package=${r??"unknown"}, target=${e.target_version}; rolled back`),!n){const d=e.transaction_id??`${e.target_version}@${e.upgraded_at}`;this.recordedRollbackFailures.has(d)||(this.recordedRollbackFailures.add(d),this.recordFailure(e.target_version))}if(n){const d=await this.confirmHealthz(oe,s?e.target_version:void 0,s?e.old_pid:void 0,s?e.activation_started_at:void 0);if(s&&!d){if(!D(e)){a("guardian marked healthy but target-version healthz is not yet observable; retrying reconciliation"),this.schedulePendingReconcile();return}a(`guardian marked healthy for ${e.target_version} but healthz stayed unobservable past the ${W/6e4}min activation window; collapsing the transaction by version verdict`)}else a(d?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match (guardian still guards crashes)")}if(!z(e)){a(`terminal transaction ${e.transaction_id??"legacy"} is waiting for antivirus-held artifact cleanup`),this.schedulePendingReconcile();return}if(await this.reportUpgrade(p)){this.settleTransaction(e)||(a(`terminal transaction ${e.transaction_id??"legacy"} could not release its shared lock; retrying reconciliation`),this.schedulePendingReconcile());return}this.retryStartupReport(p,e,!1)}settleTransaction(e){if(!j(e))return!1;try{this.options.onTransactionSettled?.()}catch(t){a(`onTransactionSettled hook failed: ${t instanceof Error?t.message:String(t)}`)}return!0}schedulePendingReconcile(){this.stopped||this.pendingTimer||(this.pendingTimer=setTimeout(()=>{this.pendingTimer=null,!this.stopped&&this.handlePendingOnStartup().catch(e=>{v.warn("upgrade",`Pending reconciliation failed: ${e instanceof Error?e.message:e}`),this.schedulePendingReconcile()})},ze))}logThrottled(e,t){const r=Date.now();e===this.guardianWaitLoggedPhase&&r-this.guardianWaitLoggedAt<Ke||(this.guardianWaitLoggedPhase=e,this.guardianWaitLoggedAt=r,a(t))}logGuardianWait(e){const t=String(e.phase??"");this.logThrottled(`guardian:${t}`,`transaction ${e.transaction_id??"legacy"} is ${t}; waiting for guardian verdict`)}async resumeWindowsGuardian(){if(this.options.resumeWindowsGuardian){await this.options.resumeWindowsGuardian();return}const e=R();if(!e)return;const{stdio:t,logFd:r}=ue();try{q(process.execPath,[e,"activate","--root",y.base],{detached:!0,stdio:t,windowsHide:!0}).unref()}finally{if(r!==void 0)try{x(r)}catch{}}}async retryStartupReport(e,t,r){const i=t?.transaction_id,s=()=>{const u=M();if(!(i&&u?.transaction_id!==i)){if(r&&!z(t)){a(`terminal backup cleanup is still blocked for ${i??"legacy transaction"}`),this.schedulePendingReconcile();return}this.settleTransaction(t)||(a(`terminal shared lock release is still blocked for ${i??"legacy transaction"}`),this.schedulePendingReconcile())}};for(let u=2;u<=C;u++){if(this.stopped)return;const o=se*(u-1)+Math.floor(Math.random()*1e3);if(await new Promise(n=>setTimeout(n,o)),this.stopped)return;if(await this.reportUpgrade(e)){s();return}}a(`startup report (${e.status}) not delivered after ${C} attempts; clearing pending to unblock future checks`),s()}async confirmHealthz(e,t,r,i){let s="19579";try{const n=w(y.data,"health-port");m(n)&&(s=P(n,"utf-8").trim()||s)}catch{}const u=`http://127.0.0.1:${s}/healthz`,o=Date.now()+e;for(;Date.now()<o&&!this.stopped;){try{const n=await fetch(u,{signal:AbortSignal.timeout(2e3)});if(n.ok){if(!t)return!0;const p=await n.json();if(p.status==="ok"&&p.version===t&&typeof p.pid=="number"&&p.pid>0&&p.pid!==r)try{const d=JSON.parse(P(w(y.base,"daemon-status.json"),"utf-8")),_=Date.parse(i??"");return!!(d.state==="running"&&d.pid===p.pid&&typeof d.updated_at=="number"&&Number.isFinite(_)&&d.updated_at>=_)}catch{return!1}}}catch{}await new Promise(n=>setTimeout(n,Be))}return!1}async runCheck(){if(!this.running){this.running=!0;try{await this.check()}catch(e){v.error("upgrade",`Check failed: ${e instanceof Error?e.message:e}`)}finally{this.running=!1}}}async check(){if(X()){await this.handlePendingOnStartup();return}if(this.agentConfigs.length===0)return;const r=(await Promise.all(this.agentConfigs.map(h=>this.queryUpgrade(h)))).find(h=>h.available&&h.release)?.release;if(!r)return;const i=A();let s;try{s=$e(r.version)}catch(h){const g=h;await this.reportUpgrade({from_version:i,to_version:String(r.version),status:"failed",error_code:g.code??"INVALID_VERSION",error_msg:g.message});return}const u=r.force,o=this.options.platform??process.platform,n=this.options.env??process.env,p=ee(n);if(p&&this.options.requestGracefulShutdown){await this.runLauncherUpgrade(p,i,s,!!u);return}if(o==="win32"){const h=R(),g=n.GRIX_WRAPPER_SUPERVISED==="1";if(!g||!h||!this.options.requestGracefulShutdown){const S=`Windows automatic upgrade requires a refreshed service installation (${[...g?[]:["managed wrapper"],...h?[]:["external guardian"],...this.options.requestGracefulShutdown?[]:["graceful shutdown hook"]].join(", ")})`;a(S),await this.reportUpgrade({from_version:i,to_version:s,status:"failed",error_code:"WINDOWS_UPGRADE_UNSUPPORTED",error_msg:S});return}}const d=o==="darwin"&&!!R()&&!!this.options.requestGracefulShutdown;if(o==="darwin"&&!d&&a("macOS transactional upgrade prerequisites missing; falling back to the legacy guardian flow"),!u&&!this.checkRateLimit(s))return;const _=Y();if(!_.ok){await this.reportUpgrade({from_version:i,to_version:s,status:"failed",error_code:_.errorCode,error_msg:_.errorMsg});return}if(!await K(U,s)){a(`target ${s} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}a(`upgrade start: ${i} -> ${s}`);const l=Date.now();let f;try{f=Ee(i,s,o==="win32"||d?"preparing":void 0).transaction_id,(await Ae(U,s,void 0,d?{activationMode:"staged"}:{}))?.activationRequired||Pe(s),a("npm install verified, reporting installed"),await this.reportUpgrade({from_version:i,to_version:s,status:"installed",duration_ms:Date.now()-l}),a("shutting down for restart");const g=await this.waitUntilIdle();if(g!=="idle")throw a(`upgrade aborted before lifecycle handoff: ${g}`),this.options.reopenLifecycleAdmission?.(),new k("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${g})`);if(o==="win32"){if(!R())throw new k("WINDOWS_UPGRADE_UNSUPPORTED","Windows external guardian disappeared before lifecycle handoff");B(process.pid,f),a("Windows handoff armed; requesting graceful daemon shutdown"),await this.options.requestGracefulShutdown("upgrade")}else if(d){if(!R())throw new k("MACOS_UPGRADE_UNSUPPORTED","macOS guardian helper disappeared before lifecycle handoff");B(process.pid,f),a("macOS handoff armed; spawning guardian before graceful daemon shutdown"),await this.resumeWindowsGuardian(),await this.options.requestGracefulShutdown("upgrade")}else this.startGuardian(),process.kill(process.pid,"SIGTERM")}catch(h){const g=h instanceof k?h.code:"NPM_INSTALL_FAILED",b=h instanceof Error?h.message:String(h);a(`upgrade failed: ${g} ${b}`);const S=M();if(f&&S?.transaction_id===f&&(o==="win32"||d?(V(),N(S)):Re(S)&&a("upgrade failed before restart; previous package restored atomically"),j(S)||(a(`failed transaction ${f} is waiting for shared lock release`),this.schedulePendingReconcile()),this.options.reopenLifecycleAdmission?.()),g==="UPGRADE_IN_PROGRESS")return;Z(b)||Q(b)||g==="NPM_TIMEOUT"?a(`failure is retriable (${g}); skipping cooldown, will retry next cycle`):this.recordFailure(s),await this.reportUpgrade({from_version:i,to_version:s,status:"failed",error_code:g,error_msg:b,duration_ms:Date.now()-l,upgrade_log:E()})}}async runLauncherUpgrade(e,t,r,i){if(!i&&!this.checkRateLimit(r))return;const s=Y();if(!s.ok){await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:s.errorCode,error_msg:s.errorMsg});return}if(!await K(U,r)){a(`target ${r} not resolvable on any registry yet; skipping this cycle (no failure recorded)`);return}a(`launcher upgrade start: ${t} -> ${r} (store=${e})`);const u=Date.now();try{m(I(e,r))?a(`${r} already present in version store; skipping install`):await Ie(e,U,r),await this.reportUpgrade({from_version:t,to_version:r,status:"installed",duration_ms:Date.now()-u});const o=await this.waitUntilIdle();if(o!=="idle")throw this.options.reopenLifecycleAdmission?.(),new k("UPGRADE_ABORTED",`Upgrade was aborted before lifecycle handoff (${o})`);const n={transaction_id:Ce(),from_version:t,to_version:r,started_at:new Date().toISOString()};ae(e,{...n,switched:!1}),Oe(e,r),ae(e,{...n,switched:!0}),a(`current pointer switched to ${r}; requesting restart via launcher`),await this.options.requestGracefulShutdown("upgrade-switch")}catch(o){const n=o instanceof k?o.code:"NPM_INSTALL_FAILED",p=o instanceof Error?o.message:String(o);if(a(`launcher upgrade failed: ${n} ${p}`),n==="UPGRADE_ABORTED"){a("machine stayed busy; keeping the verified version dir and retrying next cycle without penalty"),await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:n,error_msg:p,duration_ms:Date.now()-u,upgrade_log:E()});return}if($(e,"current")!==r)try{T(re(e,r),{recursive:!0,force:!0})}catch{}Z(p)||Q(p)||n==="NPM_TIMEOUT"?a(`failure is retriable (${n}); skipping cooldown, will retry next cycle`):this.recordFailure(r),await this.reportUpgrade({from_version:t,to_version:r,status:"failed",error_code:n,error_msg:p,duration_ms:Date.now()-u,upgrade_log:E()})}}async handleLauncherStartup(){const e=this.options.env??process.env,t=ee(e);if(!t)return;const r=A();try{Ue(t,re(t,r))}catch(l){a(`failed to refresh launcher: ${l instanceof Error?l.message:String(l)}`)}const i=Date.now(),s=()=>{if(m(De(t,r)))return!1;const l=$(t,"previous");return!!l&&l!==r&&m(I(t,l))},u=l=>{this.healthyTimer=setTimeout(()=>{if(this.healthyTimer=null,!this.stopped){if(this.options.isConnected&&!this.options.isConnected()){if(Date.now()-i>=Ze&&this.options.requestGracefulShutdown&&s()){a(`${r} has been up ${Math.round((Date.now()-i)/1e3)}s without any agent websocket ready; exiting so the launcher counts a crash and can roll back`),this.options.requestGracefulShutdown("launcher-unhealthy");return}a(`uptime reached but no agent websocket is ready yet; deferring health marker for ${r}`),u(Ve);return}try{Ne(t,r),te(t,r)}catch(f){a(`failed to write health marker: ${f instanceof Error?f.message:String(f)}`)}}},l),this.healthyTimer.unref?.()};u(Je);const o=Ge(t),n=Le(t);if(!o&&!n)return;const p=()=>{try{T(L(t),{force:!0})}catch{}try{T(O(t),{force:!0})}catch{}const l=Me(t,e);l.length>0&&a(`pruned version directories: ${l.join(", ")}`)},d=()=>{const l=g=>{const b=g?Date.parse(g):Number.NaN;return Number.isFinite(b)&&Date.now()-b<Qe},f=!!(o&&o.from_version!==r&&m(I(t,o.from_version))&&l(o.rolled_back_at)),h=!!(n&&n.to_version!==r&&n.from_version!==r&&m(I(t,n.from_version))&&l(n.started_at));if(!f)try{T(L(t),{force:!0})}catch{}if(!h)try{T(O(t),{force:!0})}catch{}(f||h)&&a(`kept launcher records addressed to another installed version (rollback=${f} switch=${h})`)};let _;if(o&&o.from_version===r){const l=`exit_code=${o.exit_code??"n/a"} crashes=${o.crash_count??"n/a"} uptime_ms=${o.uptime_ms??"n/a"}`;a(`daemon startup: launcher rolled back ${o.to_version} -> ${r} (${l})`),this.recordFailure(o.to_version);const f=te(t,o.to_version),h=f?.split(/\r?\n/)[0]?.slice(0,200);_={from_version:o.from_version,to_version:o.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Target ${o.to_version} crashed before becoming healthy (${l}); launcher restored ${r}`+(h?`; cause: ${h}`:""),crash_count:o.crash_count,upgrade_log:E()+(f?`
 --- ${o.to_version} crash note ---
-${f}`:"")}}else if(s&&s.to_version===r&&M(t,"current")===r){a(`daemon startup: running switched target ${r}, upgrade succeeded`);const l=await this.confirmHealthz(oe);a(l?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match"),c={from_version:s.from_version,to_version:s.to_version,status:"success"}}else if(s&&s.from_version===r&&s.switched===!1){a(`daemon startup: switch record for ${s.to_version} was never applied; discarding`);try{k(Q(t),{force:!0})}catch{}try{k(Z(t),{force:!0})}catch{}return}else if(s&&s.from_version===r)a(`daemon startup: expected ${s.to_version} but ${r} is running; reporting rolled_back`),this.recordFailure(s.to_version),c={from_version:s.from_version,to_version:s.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Launcher is running ${r} instead of switched target ${s.to_version}`};else{a(`daemon startup: stale launcher records (self=${r}); discarding`),h();return}if(await this.reportUpgrade(c)){h();return}(async()=>{for(let l=2;l<=G;l++){if(this.stopped||(await new Promise(f=>setTimeout(f,se*(l-1)+Math.floor(Math.random()*1e3))),this.stopped))return;if(await this.reportUpgrade(c))break}h()})()}async waitUntilIdle(){if(this.isBusy?.()){a(`active tasks detected, waiting up to ${Math.round(O/6e4)}min until idle before restart (admission stays open while waiting)`);const e=Date.now()+O,t=5e3,r=600*1e3;let i=Date.now();for(;this.isBusy()&&!this.stopped;){if(Date.now()>=e)return m.warn("upgrade",`Idle wait exceeded ${Math.round(O/6e4)}min; abandoning this upgrade attempt. Admission was never closed, so agents kept serving. A busy state that never clears usually means an adapter leaked its busy flag \u2014 check for a turn that never completed.`),a("idle wait timed out; upgrade attempt abandoned without ever closing admission"),"timeout";await new Promise(n=>setTimeout(n,t)),Date.now()-i>=r&&(i=Date.now(),a("still waiting for active tasks to finish before restart"))}}return this.stopped?"stopped":(this.closeAdmission?.(),this.isBusy?.()?(a("work arrived while closing admission; reopening and abandoning this upgrade attempt"),this.options.reopenLifecycleAdmission?.(),"busy-again"):(a("all tasks completed, proceeding with restart"),"idle"))}checkRateLimit(e){const t=ge();if(t.last_failure_at){const u=Date.now()-new Date(t.last_failure_at).getTime();if(u<ie)return m.info("upgrade",`In cooldown, ${(ie-u)/6e4}m remaining`),!1}const r=t.version_attempts[e]??0;if(r>=qe)return m.info("upgrade",`Version ${e} already tried ${r} times, skipping`),!1;const i=_e(),n=t.daily_attempts[i]??0;return n>=xe?(m.info("upgrade",`Already ${n} attempts today, skipping`),!1):!0}recordFailure(e){const t=ge(),r=_e();t.last_failure_at=new Date().toISOString(),t.last_failure_version=e,t.daily_attempts[r]=(t.daily_attempts[r]??0)+1,t.version_attempts[e]=(t.version_attempts[e]??0)+1;for(const n of Object.keys(t.daily_attempts))n<r&&delete t.daily_attempts[n];const i=Object.keys(t.version_attempts);for(const n of i.slice(0,Math.max(0,i.length-Fe)))n!==e&&delete t.version_attempts[n];rt(t)}async queryUpgrade(e){const r=`${pe(e.wsUrl)}/v1/agent-api/upgrade/check?`+new URLSearchParams({client_type:"grix-connector",client_version:A(),channel:e.channel??"stable",platform:process.platform,arch:process.arch}).toString();try{const i=await fetch(r,{headers:{Authorization:`Bearer ${e.apiKey}`},signal:AbortSignal.timeout(ne)});if(!i.ok)return m.warn("upgrade",`Check API returned ${i.status}`),{available:!1};const n=await i.json();return n.code!==0?{available:!1}:n.data}catch(i){return m.warn("upgrade",`Check API error: ${i instanceof Error?i.message:i}`),{available:!1}}}async reportUpgrade(e){if(this.agentConfigs.length===0)return!1;const t={client_type:"grix-connector",...e.npm_version?e:{...e,...Ae()}};return(await Promise.all(this.agentConfigs.map(async i=>{const u=`${pe(i.wsUrl)}/v1/agent-api/upgrade/report`;try{return(await fetch(u,{method:"POST",headers:{Authorization:`Bearer ${i.apiKey}`,"Content-Type":"application/json"},body:JSON.stringify(t),signal:AbortSignal.timeout(ne)})).ok}catch{return!1}}))).some(i=>i)}startGuardian(){const e=_(y.base,"bin","upgrade-guardian.sh");if(process.platform==="win32"||!v(e)){m.info("upgrade","Guardian not available on this platform, skipping");return}const{stdio:t,logFd:r}=ue();try{const i=H(e,[],{detached:!0,stdio:t});i.unref(),a(`guardian started (pid ${i.pid})`)}catch(i){m.warn("upgrade",`Failed to start guardian: ${i instanceof Error?i.message:i}`)}finally{if(r!==void 0)try{C(r)}catch{}}}}export{mt as UpgradeChecker};
+${f}`:"")}}else if(n&&n.to_version===r&&$(t,"current")===r){a(`daemon startup: running switched target ${r}, upgrade succeeded`);const l=await this.confirmHealthz(oe);a(l?"healthz confirmed healthy, reporting success":"healthz not confirmed within window; reporting success on version-match"),_={from_version:n.from_version,to_version:n.to_version,status:"success"}}else if(n&&n.from_version===r&&n.switched===!1){a(`daemon startup: switch record for ${n.to_version} was never applied; discarding`);try{T(O(t),{force:!0})}catch{}try{T(L(t),{force:!0})}catch{}return}else if(n&&n.from_version===r)a(`daemon startup: expected ${n.to_version} but ${r} is running; reporting rolled_back`),this.recordFailure(n.to_version),_={from_version:n.from_version,to_version:n.to_version,status:"rolled_back",error_code:"STARTUP_CRASH",error_msg:`Launcher is running ${r} instead of switched target ${n.to_version}`};else{a(`daemon startup: launcher records do not match this process (self=${r} current=${$(t,"current")??"<none>"} previous=${$(t,"previous")??"<none>"} switch=${n?`${n.from_version}->${n.to_version}/switched=${n.switched!==!1}`:"<none>"} rollback=${o?`${o.to_version}->${o.from_version}`:"<none>"}); discarding records without pruning`),d();return}if(await this.reportUpgrade(_)){p();return}(async()=>{for(let l=2;l<=C;l++){if(this.stopped||(await new Promise(f=>setTimeout(f,se*(l-1)+Math.floor(Math.random()*1e3))),this.stopped))return;if(await this.reportUpgrade(_))break}p()})()}async waitUntilIdle(){if(this.isBusy?.()){a(`active tasks detected, waiting up to ${Math.round(H/6e4)}min until idle before restart (admission stays open while waiting)`);const e=Date.now()+H,t=5e3,r=600*1e3;let i=Date.now();for(;this.isBusy()&&!this.stopped;){if(Date.now()>=e)return v.warn("upgrade",`Idle wait exceeded ${Math.round(H/6e4)}min; abandoning this upgrade attempt. Admission was never closed, so agents kept serving. A busy state that never clears usually means an adapter leaked its busy flag \u2014 check for a turn that never completed.`),a("idle wait timed out; upgrade attempt abandoned without ever closing admission"),"timeout";await new Promise(s=>setTimeout(s,t)),Date.now()-i>=r&&(i=Date.now(),a("still waiting for active tasks to finish before restart"))}}return this.stopped?"stopped":(this.closeAdmission?.(),this.isBusy?.()?(a("work arrived while closing admission; reopening and abandoning this upgrade attempt"),this.options.reopenLifecycleAdmission?.(),"busy-again"):(a("all tasks completed, proceeding with restart"),"idle"))}checkRateLimit(e){const t=ge();if(t.last_failure_at){const u=Date.now()-new Date(t.last_failure_at).getTime();if(u<ie)return v.info("upgrade",`In cooldown, ${(ie-u)/6e4}m remaining`),!1}const r=t.version_attempts[e]??0;if(r>=Fe)return v.info("upgrade",`Version ${e} already tried ${r} times, skipping`),!1;const i=_e(),s=t.daily_attempts[i]??0;return s>=xe?(v.info("upgrade",`Already ${s} attempts today, skipping`),!1):!0}recordFailure(e){const t=ge(),r=_e();t.last_failure_at=new Date().toISOString(),t.last_failure_version=e,t.daily_attempts[r]=(t.daily_attempts[r]??0)+1,t.version_attempts[e]=(t.version_attempts[e]??0)+1;for(const s of Object.keys(t.daily_attempts))s<r&&delete t.daily_attempts[s];const i=Object.keys(t.version_attempts);for(const s of i.slice(0,Math.max(0,i.length-qe)))s!==e&&delete t.version_attempts[s];at(t)}async queryUpgrade(e){const r=`${pe(e.wsUrl)}/v1/agent-api/upgrade/check?`+new URLSearchParams({client_type:"grix-connector",client_version:A(),channel:e.channel??"stable",platform:process.platform,arch:process.arch}).toString();try{const i=await fetch(r,{headers:{Authorization:`Bearer ${e.apiKey}`},signal:AbortSignal.timeout(ne)});if(!i.ok)return v.warn("upgrade",`Check API returned ${i.status}`),{available:!1};const s=await i.json();return s.code!==0?{available:!1}:s.data}catch(i){return v.warn("upgrade",`Check API error: ${i instanceof Error?i.message:i}`),{available:!1}}}async reportUpgrade(e){if(this.agentConfigs.length===0)return!1;const t={client_type:"grix-connector",...e.npm_version?e:{...e,...ke()}};return(await Promise.all(this.agentConfigs.map(async i=>{const u=`${pe(i.wsUrl)}/v1/agent-api/upgrade/report`;try{return(await fetch(u,{method:"POST",headers:{Authorization:`Bearer ${i.apiKey}`,"Content-Type":"application/json"},body:JSON.stringify(t),signal:AbortSignal.timeout(ne)})).ok}catch{return!1}}))).some(i=>i)}startGuardian(){const e=w(y.base,"bin","upgrade-guardian.sh");if(process.platform==="win32"||!m(e)){v.info("upgrade","Guardian not available on this platform, skipping");return}const{stdio:t,logFd:r}=ue();try{const i=q(e,[],{detached:!0,stdio:t});i.unref(),a(`guardian started (pid ${i.pid})`)}catch(i){v.warn("upgrade",`Failed to start guardian: ${i instanceof Error?i.message:i}`)}finally{if(r!==void 0)try{x(r)}catch{}}}}export{wt as UpgradeChecker};

package/dist/core/upgrade/version-store.js

@@ -1,2 +1,2 @@
-import{cpSync as w,existsSync as l,mkdirSync as f,readdirSync as x,readFileSync as i,renameSync as S,rmSync as a,writeFileSync as y}from"node:fs";import{join as o}from"node:path";const m="launcher.mjs",b=75,V=76,C=/LAUNCHER_TEMPLATE_VERSION\s*=\s*(\d+)/;function v(r){return o(r,m)}function g(r,t){return o(r,"versions",t)}function L(r,t){return o(g(r,t),"dist","grix.js")}function O(r,t){return o(r,"health",`${t}.ok`)}function E(r){return o(r,"upgrade.json")}function P(r){return o(r,"rollback.json")}function d(r,t){try{return i(o(r,t),"utf8").trim()||null}catch{return null}}function p(r,t){const e=`${r}.tmp-${process.pid}`;y(e,t,"utf8"),S(e,r)}function R(r,t,e){f(r,{recursive:!0}),p(o(r,t),`${e}
-`)}function N(r){try{const t=i(r,"utf8").match(C);return t?Number(t[1]):0}catch{return-1}}function T(r){for(const t of[o(r,"scripts",m),o(r,"dist",m)])if(l(t))return t;return null}function j(r,t){const e=T(t);if(!e)return!1;const n=v(r),c=N(e);return N(n)>=c||(f(r,{recursive:!0}),p(n,i(e,"utf8"))),!0}function M(r,t,e){const n=g(r,e);if(l(L(r,e)))return n;const c=`${n}.staging-${process.pid}`;a(c,{recursive:!0,force:!0}),f(c,{recursive:!0});try{for(const s of["package.json","dist","node_modules","scripts"]){const u=o(t,s);l(u)&&w(u,o(c,s),{recursive:!0,force:!0})}a(n,{recursive:!0,force:!0}),S(c,n)}finally{a(c,{recursive:!0,force:!0})}return n}function U(r,t){const e=d(r,"current");return e&&e!==t&&R(r,"previous",e),R(r,"current",t),e}function X(r,t){p(E(r),JSON.stringify(t))}function F(r){return _(E(r))}function J(r){return _(P(r))}function _(r){try{return JSON.parse(i(r,"utf8"))}catch{return null}}function G(r){try{y(o(r,"managed-stop"),new Date().toISOString(),"utf8")}catch{}}function B(r,t){f(o(r,"health"),{recursive:!0}),p(O(r,t),new Date().toISOString())}function Y(r){const t=new Set([d(r,"current"),d(r,"previous")].filter(Boolean)),e=o(r,"versions"),n=[];let c=[];try{c=x(e)}catch{return n}for(const u of c)if(!t.has(u))try{a(o(e,u),{recursive:!0,force:!0}),n.push(u)}catch{}const s=o(r,"health");try{for(const u of x(s)){const h=u.replace(/\.ok$/,"");t.has(h)||a(o(s,u),{force:!0})}}catch{}return n}function q(r=process.env){if(r.GRIX_LAUNCHER_MANAGED!=="1")return null;const t=String(r.GRIX_LAUNCHER_STORE??"").trim();return t&&l(v(t))?t:null}function z(r,t){const e=s=>{const[u,h]=s.replace(/^v(?=\d)/,"").split("-",2);return{nums:u.split(".").map(A=>Number.parseInt(A,10)||0),pre:h??""}},n=e(r),c=e(t);for(let s=0;s<Math.max(n.nums.length,c.nums.length);s+=1){const u=(n.nums[s]??0)-(c.nums[s]??0);if(u!==0)return u<0?-1:1}return n.pre===c.pre?0:n.pre?c.pre?n.pre<c.pre?-1:1:-1:1}const I=4096;function k(r,t){return o(r,"crashes",`${t}.txt`)}function K(r,t,e){try{f(o(r,"crashes"),{recursive:!0});const n=`[${new Date().toISOString()}] ${e}`.slice(0,I);p(k(r,t),n)}catch{}}function Q(r,t){const e=k(r,t);try{const n=i(e,"utf8").trim();return a(e,{force:!0}),n||null}catch{return null}}function W(r){try{const t=JSON.parse(i(o(r,"package.json"),"utf8"));return typeof t.version=="string"?t.version.replace(/^v(?=\d)/,""):null}catch{return null}}export{m as LAUNCHER_FILE,b as RESTART_EXIT_CODE,V as UNHEALTHY_EXIT_CODE,M as bootstrapVersionFromPackage,z as compareVersions,k as crashNotePath,j as ensureLauncher,O as healthMarkerPath,v as launcherPath,B as markHealthy,G as markManagedStop,T as packagedLauncherPath,Y as pruneVersions,N as readLauncherTemplateVersion,W as readPackageVersionAt,d as readPointer,J as readRollbackRecord,F as readSwitchRecord,q as resolveLauncherStore,P as rollbackRecordPath,U as switchCurrent,E as switchRecordPath,Q as takeCrashNote,g as versionDir,L as versionEntry,K as writeCrashNote,R as writePointer,X as writeSwitchRecord};
+import{cpSync as C,existsSync as d,mkdirSync as p,readdirSync as v,readFileSync as a,renameSync as g,rmSync as f,writeFileSync as R}from"node:fs";import{dirname as I,isAbsolute as O,join as o,relative as P}from"node:path";import{fileURLToPath as T}from"node:url";const x="launcher.mjs",J=75,B=76,V=/LAUNCHER_TEMPLATE_VERSION\s*=\s*(\d+)/;function y(r){return o(r,x)}function E(r,t){return o(r,"versions",t)}function H(r,t){return o(E(r,t),"dist","grix.js")}function $(r,t){return o(r,"health",`${t}.ok`)}function N(r){return o(r,"upgrade.json")}function b(r){return o(r,"rollback.json")}function S(r,t){try{return a(o(r,t),"utf8").trim()||null}catch{return null}}function l(r,t){const e=`${r}.tmp-${process.pid}`;R(e,t,"utf8"),g(e,r)}function _(r,t,e){p(r,{recursive:!0}),l(o(r,t),`${e}
+`)}function A(r){try{const t=a(r,"utf8").match(V);return t?Number(t[1]):0}catch{return-1}}function U(r){for(const t of[o(r,"scripts",x),o(r,"dist",x)])if(d(t))return t;return null}function W(r,t){const e=U(t);if(!e)return!1;const n=y(r),c=A(e);return A(n)>=c||(p(r,{recursive:!0}),l(n,a(e,"utf8"))),!0}function Y(r,t,e){const n=E(r,e);if(d(H(r,e)))return n;const c=`${n}.staging-${process.pid}`;f(c,{recursive:!0,force:!0}),p(c,{recursive:!0});try{for(const u of["package.json","dist","node_modules","scripts"]){const s=o(t,u);d(s)&&C(s,o(c,u),{recursive:!0,force:!0})}f(n,{recursive:!0,force:!0}),g(c,n)}finally{f(c,{recursive:!0,force:!0})}return n}function q(r,t){const e=S(r,"current");return e&&e!==t&&_(r,"previous",e),_(r,"current",t),e}function z(r,t){l(N(r),JSON.stringify(t))}function K(r){return k(N(r))}function Q(r){return k(b(r))}function k(r){try{return JSON.parse(a(r,"utf8"))}catch{return null}}function Z(r){try{R(o(r,"managed-stop"),new Date().toISOString(),"utf8")}catch{}}function D(r,t){p(o(r,"health"),{recursive:!0}),l($(r,t),new Date().toISOString())}function j(r,t=process.env){const e=I(T(import.meta.url)),n=P(o(r,"versions"),e);if(n&&!n.startsWith("..")&&!O(n)){const[u]=n.split(/[\\/]/);if(u)return u}return String(t.GRIX_LAUNCHER_VERSION??"").trim()||null}function rr(r,t=process.env){const e=j(r,t),n=[S(r,"current"),S(r,"previous")].filter(Boolean);if(n.length===0&&!e)return[];const c=new Set([...n,e].filter(Boolean)),u=o(r,"versions"),s=[];let h=[];try{h=v(u)}catch{return s}for(const i of h)if(!c.has(i))try{f(o(u,i),{recursive:!0,force:!0}),s.push(i)}catch{}const m=o(r,"health");try{for(const i of v(m)){const w=i.replace(/\.ok$/,"");c.has(w)||f(o(m,i),{force:!0})}}catch{}return s}function tr(r=process.env){if(r.GRIX_LAUNCHER_MANAGED!=="1")return null;const t=String(r.GRIX_LAUNCHER_STORE??"").trim();return t&&d(y(t))?t:null}function er(r,t){const e=u=>{const[s,h]=u.replace(/^v(?=\d)/,"").split("-",2);return{nums:s.split(".").map(m=>Number.parseInt(m,10)||0),pre:h??""}},n=e(r),c=e(t);for(let u=0;u<Math.max(n.nums.length,c.nums.length);u+=1){const s=(n.nums[u]??0)-(c.nums[u]??0);if(s!==0)return s<0?-1:1}return n.pre===c.pre?0:n.pre?c.pre?n.pre<c.pre?-1:1:-1:1}const M=4096;function L(r,t){return o(r,"crashes",`${t}.txt`)}function nr(r,t,e){try{p(o(r,"crashes"),{recursive:!0});const n=`[${new Date().toISOString()}] ${e}`.slice(0,M);l(L(r,t),n)}catch{}}function or(r,t){const e=L(r,t);try{const n=a(e,"utf8").trim();return f(e,{force:!0}),n||null}catch{return null}}function cr(r){try{const t=JSON.parse(a(o(r,"package.json"),"utf8"));return typeof t.version=="string"?t.version.replace(/^v(?=\d)/,""):null}catch{return null}}export{x as LAUNCHER_FILE,J as RESTART_EXIT_CODE,B as UNHEALTHY_EXIT_CODE,Y as bootstrapVersionFromPackage,er as compareVersions,L as crashNotePath,W as ensureLauncher,$ as healthMarkerPath,y as launcherPath,D as markHealthy,Z as markManagedStop,U as packagedLauncherPath,rr as pruneVersions,A as readLauncherTemplateVersion,cr as readPackageVersionAt,S as readPointer,Q as readRollbackRecord,K as readSwitchRecord,tr as resolveLauncherStore,j as resolveRunningVersion,b as rollbackRecordPath,q as switchCurrent,N as switchRecordPath,or as takeCrashNote,E as versionDir,H as versionEntry,nr as writeCrashNote,_ as writePointer,z as writeSwitchRecord};

package/dist/core/util/client-version.js

@@ -1 +1 @@
-import{existsSync as i,readFileSync as s}from"node:fs";import o from"node:path";const c="0.1.0",a="grix-connector";function m(n=process.env){return p()??t(n.npm_package_version)??c}function p(){for(const n of u())if(i(n))try{const e=JSON.parse(s(n,"utf8"));if(typeof e.name=="string"&&e.name!==a)continue;const r=t(e.version);if(r)return r}catch{continue}return null}function u(){const n=[];let e=import.meta.dirname??__dirname;for(;;){n.push(o.join(e,"package.json"));const r=o.dirname(e);if(r===e)break;e=r}return n.push(o.resolve(process.cwd(),"package.json")),n}function t(n){if(typeof n!="string")return null;const e=n.trim();return e===""?null:e}export{m as resolveClientVersion};
+import{existsSync as c,readFileSync as a}from"node:fs";import e from"node:path";import{fileURLToPath as u}from"node:url";const l="0.1.0",f="grix-connector";let t=null;function C(n=process.env){if(t)return t;const r=p()??o(n.GRIX_LAUNCHER_MANAGED==="1"?n.GRIX_LAUNCHER_VERSION:void 0)??m()??o(n.npm_package_version);return r?(t=r,r):l}function V(){t=null}function s(n){if(!c(n))return null;try{const r=JSON.parse(a(n,"utf8"));return typeof r.name=="string"&&r.name!==f?null:o(r.version)}catch{return null}}function p(){let n=e.dirname(u(import.meta.url));for(;;){const r=s(e.join(n,"package.json"));if(r)return r;const i=e.dirname(n);if(i===n)return null;n=i}}function m(){return s(e.resolve(process.cwd(),"package.json"))}function o(n){if(typeof n!="string")return null;const r=n.trim();return r===""?null:r}export{V as resetClientVersionCache,C as resolveClientVersion};

package/dist/grix.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import b from"node:path";import{writeFileSync as oe}from"node:fs";import{Manager as Pe}from"./manager.js";import{ensureGrixDirs as Ie,initLogger as Ce,log as i,installProcessLogRotation as _e,setConsoleOutput as ae}from"./core/log/index.js";import{HealthServer as ke,bindPortOrFail as ie}from"./core/runtime/index.js";import{writePidFile as Te,removePidFile as H,readDaemonPid as $e}from"./core/runtime/index.js";import{killOrphanedClaudeProcesses as Ue}from"./core/runtime/index.js";import{resolveRuntimePaths as K}from"./core/config/index.js";import{supportsNonMitmRelayConfig as Le}from"./core/config/provider-env.js";import{ServiceManager as se}from"./service/service-manager.js";import{RESTART_EXIT_CODE as Oe,UNHEALTHY_EXIT_CODE as He,markManagedStop as ce,resolveLauncherStore as X,writeCrashNote as Fe}from"./core/upgrade/version-store.js";import{migrateWindowsWrapper as V}from"./service/windows-wrapper-migration.js";const Me=300*1e3;import{killProcessesByCommandLine as Ne,isWindowsElevated as Ge,shouldSweepWindowsWrappers as Be,getProcessCommandLine as je}from"./service/process-control.js";import{buildServiceID as We}from"./service/service-paths.js";import{acquireDaemonLock as Ke,createHealthzHolderProbe as Xe,DaemonAlreadyServingError as Ve,isLockHolderSameProcess as qe,readDaemonLock as q,releaseDaemonLock as F}from"./runtime/daemon-lock.js";import{writeDaemonStatus as G,removeDaemonStatus as Ye}from"./runtime/service-state.js";import{readDuplicateDaemonRecord as Je,recordDuplicateDaemon as ze}from"./runtime/duplicate-daemon.js";import{AdminServer as Qe,generateToken as Ze,writeTokenFile as et}from"./core/admin/index.js";import{initSentry as tt,closeSentry as Y,reportFatal as J}from"./core/observability/sentry.js";import{initProxyManager as rt,getProxyManager as m,relayHostsForClientType as le,RelayStateStore as nt,SecretStore as ot}from"./core/proxy/index.js";import{stopProxyIfNobodyNeedsIt as de,switchAgentRelayMode as z,reconcileRelayStates as pe}from"./core/proxy/relay-orchestration.js";import{setAgentRelayCredential as ue,RelayCredentialError as ge}from"./core/proxy/relay-credential.js";import{RelayFetchError as fe,RelayToggleCoordinator as at}from"./core/proxy/relay-credential-fetch.js";import{applyHermesProfileRelay as it,clearHermesProfileRelay as st,discoverHermesProfiles as ct}from"./core/proxy/hermes-profile-relay.js";import{disableRelayCredential as lt,enableRelayCredential as dt,RelayRouteError as me}from"./core/proxy/relay-credential-router.js";import{upgradeStatusSnapshot as pt}from"./core/upgrade/npm-upgrader.js";import{resolveClientVersion as ut}from"./core/util/client-version.js";import{parseCliArgs as gt}from"./core/util/cli-args.js";const{command:P,flags:E,unknownFlags:Q}=gt(process.argv.slice(2));if(Q.length>0&&(console.error(`Unknown option${Q.length>1?"s":""}: ${Q.map(t=>`--${t}`).join(", ")}
-Run \`grix-connector --help\` to see the supported commands and options.`),process.exit(1)),E.version&&(console.log(ut()),process.exit(0)),E.help&&(console.log(`grix-connector \u2014 Unified AI Agent Bridge
+import v from"node:path";import{writeFileSync as ae}from"node:fs";import{Manager as Ie}from"./manager.js";import{ensureGrixDirs as Ce,initLogger as _e,log as i,installProcessLogRotation as ke,setConsoleOutput as ie}from"./core/log/index.js";import{HealthServer as Te,bindPortOrFail as se}from"./core/runtime/index.js";import{writePidFile as $e,removePidFile as H,readDaemonPid as Ue}from"./core/runtime/index.js";import{killOrphanedClaudeProcesses as Le}from"./core/runtime/index.js";import{resolveRuntimePaths as X}from"./core/config/index.js";import{supportsNonMitmRelayConfig as Oe}from"./core/config/provider-env.js";import{ServiceManager as ce}from"./service/service-manager.js";import{RESTART_EXIT_CODE as He,UNHEALTHY_EXIT_CODE as Fe,markManagedStop as le,resolveLauncherStore as V,writeCrashNote as Me}from"./core/upgrade/version-store.js";import{migrateWindowsWrapper as q}from"./service/windows-wrapper-migration.js";const Ne=300*1e3;import{killProcessesByCommandLine as Ge,isWindowsElevated as Be,shouldSweepWindowsWrappers as je,getProcessCommandLine as We}from"./service/process-control.js";import{buildServiceID as Ke}from"./service/service-paths.js";import{acquireDaemonLock as Xe,createHealthzHolderProbe as Ve,DaemonAlreadyServingError as qe,isLockHolderSameProcess as Ye,readDaemonLock as Y,releaseDaemonLock as F}from"./runtime/daemon-lock.js";import{writeDaemonStatus as G,removeDaemonStatus as Je}from"./runtime/service-state.js";import{readDuplicateDaemonRecord as ze,recordDuplicateDaemon as Qe}from"./runtime/duplicate-daemon.js";import{RemoteAdminSettingsStore as Ze}from"./core/config/remote-admin-settings.js";import{AdminServer as et,generateToken as tt,writeTokenFile as rt}from"./core/admin/index.js";import{initSentry as nt,closeSentry as J,reportFatal as z}from"./core/observability/sentry.js";import{initProxyManager as ot,getProxyManager as f,relayHostsForClientType as de,RelayStateStore as at,SecretStore as it}from"./core/proxy/index.js";import{stopProxyIfNobodyNeedsIt as pe,switchAgentRelayMode as Q,reconcileRelayStates as ue}from"./core/proxy/relay-orchestration.js";import{setAgentRelayCredential as ge,RelayCredentialError as me}from"./core/proxy/relay-credential.js";import{RelayFetchError as fe,RelayToggleCoordinator as st}from"./core/proxy/relay-credential-fetch.js";import{applyHermesProfileRelay as ct,clearHermesProfileRelay as lt,discoverHermesProfiles as dt}from"./core/proxy/hermes-profile-relay.js";import{disableRelayCredential as pt,enableRelayCredential as ut,RelayRouteError as he}from"./core/proxy/relay-credential-router.js";import{upgradeStatusSnapshot as gt}from"./core/upgrade/npm-upgrader.js";import{resolveClientVersion as mt}from"./core/util/client-version.js";import{parseCliArgs as ft}from"./core/util/cli-args.js";const{command:I,flags:E,unknownFlags:Z}=ft(process.argv.slice(2));if(Z.length>0&&(console.error(`Unknown option${Z.length>1?"s":""}: ${Z.map(t=>`--${t}`).join(", ")}
+Run \`grix-connector --help\` to see the supported commands and options.`),process.exit(1)),E.version&&(console.log(mt()),process.exit(0)),E.help&&(console.log(`grix-connector \u2014 Unified AI Agent Bridge
 
 Usage: grix-connector <command> [options]
 
@@ -34,10 +34,10 @@ Examples:
   grix-connector start                    # Start as system service
   grix-connector status                   # Check service status
   grix-connector restart                  # Restart the service
-`),process.exit(0)),P==="reload"){const t=$e();t||(console.error("reload failed: daemon is not running (no pid file)"),process.exit(1));try{process.kill(t,0)}catch{console.error(`reload failed: daemon process ${t} is not running (stale pid file)`),process.exit(1)}{const c=q(K().daemonLockFile);c&&c.pid===t&&!qe(c)&&(console.error(`reload failed: pid ${t} has been reused by another process (stale pid file)`),process.exit(1))}try{process.kill(t,"SIGHUP"),console.log(JSON.stringify({ok:!0,signaled:t},null,2)),process.exit(0)}catch(c){console.error(`reload failed: ${c instanceof Error?c.message:c}`),process.exit(1)}}const he=["start","stop","restart","status"];if(P&&he.includes(P)){process.platform==="win32"&&["start","stop","restart"].includes(P)&&!Ge()&&console.warn(`Warning: Not running as administrator. Task Scheduler registration is skipped;
+`),process.exit(0)),I==="reload"){const t=Ue();t||(console.error("reload failed: daemon is not running (no pid file)"),process.exit(1));try{process.kill(t,0)}catch{console.error(`reload failed: daemon process ${t} is not running (stale pid file)`),process.exit(1)}{const c=Y(X().daemonLockFile);c&&c.pid===t&&!Ye(c)&&(console.error(`reload failed: pid ${t} has been reused by another process (stale pid file)`),process.exit(1))}try{process.kill(t,"SIGHUP"),console.log(JSON.stringify({ok:!0,signaled:t},null,2)),process.exit(0)}catch(c){console.error(`reload failed: ${c instanceof Error?c.message:c}`),process.exit(1)}}const ye=["start","stop","restart","status"];if(I&&ye.includes(I)){process.platform==="win32"&&["start","stop","restart"].includes(I)&&!Be()&&console.warn(`Warning: Not running as administrator. Task Scheduler registration is skipped;
 using Startup folder auto-start instead. For full Task Scheduler integration,
-right-click the terminal and select "Run as administrator".`);const t=K(),c=E["config-dir"]??(E.profile?b.join(t.configDir,E.profile):void 0),f=b.resolve(process.argv[1]||`${t.rootDir}/dist/grix.js`),g=new se({cliPath:f,nodePath:process.execPath});try{let l;switch(P){case"start":{const h=await g.healLegacyState({rootDir:t.rootDir});(await g.status({rootDir:t.rootDir})).installed?l=await g.start({rootDir:t.rootDir}):l=await g.install({rootDir:t.rootDir,configDir:c??h.configDir}),h.healed&&(l={...l,legacy_heal:h.reasons})}break;case"stop":l=await g.stop({rootDir:t.rootDir});break;case"restart":(await g.status({rootDir:t.rootDir})).installed?l=await g.restart({rootDir:t.rootDir}):l=await g.install({rootDir:t.rootDir,configDir:c});break;case"status":l=await g.status({rootDir:t.rootDir});{const h=Je(t.dataDir);h&&(l={...l,duplicate_daemon:h})}break}console.log(JSON.stringify(l,null,2)),process.exit(0)}catch(l){console.error(`${P} failed: ${l instanceof Error?l.message:l}`),process.exit(1)}}else P&&(console.error(`Unknown command: ${P}
-Valid commands: ${he.join(", ")}`),process.exit(1));const s=K(),ft=E["config-dir"]??(E.profile?`${s.configDir}/${E.profile}`:void 0),n=new Pe({requestGracefulShutdown:t=>{C(t)},onTransactionSettled:()=>{V({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).then(t=>{t.handoffStarted&&i.info("main","Wrapper handoff started after the upgrade transaction settled")}).catch(t=>{i.warn("main",`Post-upgrade wrapper migration failed: ${t instanceof Error?t.message:t}`)})}}),M=new ke,ye=Ze(),I=new Qe(ye);let B=!1,T;function j(t,c){const f=X(),g=process.env.GRIX_LAUNCHER_VERSION;if(!f||!g)return;const l=c instanceof Error?c.stack??c.message:String(c);Fe(f,g,`${t}: ${l}`)}function mt(t){const c=`another grix-connector daemon (pid ${t.pid}) is already serving ${s.rootDir} and answering /healthz; this process yields instead of taking over. A second supervisor is starting duplicate daemons \u2014 check for a leftover wrapper, a duplicate logon task, or a desktop app launching its own copy.`;ze(s.dataDir,{holder_pid:t.pid,holder_command_line:t.command_line,yielded_pid:process.pid,yielded_command_line:je(process.pid)}),process.stderr.write(`${c}
-`),i.warn("main",c);const f=X();f&&ce(f),process.exit(0)}async function we(t){process.stderr.write(t.message+`
-`),i.error("main",t.message.replace(/\n/g," \u2014 ")),j("port_bind",t.message);const c=q(s.daemonLockFile);c?.pid===process.pid&&c.instance_id===T&&await G(s.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:T,updated_at:Date.now(),reason:`port_bind_${t.kind}:${t.label}:${t.port}`}).catch(()=>{}),await Y(),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(1)}async function C(t){if(B)return;B=!0,i.info("main",`Received ${t}, shutting down...`),M.markShuttingDown();const c=X();c&&ce(c);const f=t==="upgrade-switch"?Oe:t==="launcher-unhealthy"?He:null,g=f??2,l=t==="uncaughtException"||t==="unhandledRejection",h=setTimeout(()=>{i.error("main","Shutdown timed out, forcing exit"),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(g)},1e4);try{await n.stop(),await m()?.stop().catch(()=>{}),await I.stop(),await M.stop(),await Y(),await F(s.daemonLockFile),await Ye(s.daemonStatusFile).catch(()=>{}),clearTimeout(h),H(),i.info("main","Shutdown complete"),process.exit(f??(l?2:0))}catch(v){i.error("main",`Shutdown error: ${v}`),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(g)}}async function ht(){Ie(),Ce(),_e(s.stdoutLogFile,s.stderrLogFile),ae(!1);try{T=(await Ke(s.daemonLockFile,s.rootDir,2,{isHolderServing:Xe(s.dataDir)})).instance_id}catch(e){e instanceof Ve&&mt(e.holder),console.error(e instanceof Error?e.message:e),process.exit(1)}if(Be()){const e=We(s.rootDir,"win32");await Ne(e,{platform:"win32"})}await tt(),Te(),i.info("main",`grix-connector starting (PID ${process.pid})`);try{Ue({info:e=>i.info("main",e),warn:e=>i.warn("main",e)})}catch(e){i.warn("main",`orphan Claude cleanup failed: ${e instanceof Error?e.message:String(e)}`)}if(await G(s.daemonStatusFile,{state:"starting",pid:process.pid,instance_id:T,updated_at:Date.now()}),process.env.GRIX_LAUNCHER_MANAGED!=="1"&&await new se({cliPath:b.resolve(process.argv[1]??""),nodePath:process.execPath}).adoptLauncher(s.rootDir).then(e=>{e&&i.info("main","Service definition now points at the version-store launcher")}).catch(e=>{i.warn("main",`Launcher adoption failed: ${e instanceof Error?e.message:e}`)}),(await V({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).catch(e=>(i.warn("main",`Windows wrapper migration failed: ${e instanceof Error?e.message:e}`),null)))?.handoffStarted)return;process.platform==="win32"&&process.env.GRIX_LAUNCHER_MANAGED!=="1"&&setInterval(()=>{B||V({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).then(o=>{o.handoffStarted&&i.info("main","Wrapper handoff started by the periodic migration retry")}).catch(o=>{i.warn("main",`Periodic wrapper migration failed: ${o instanceof Error?o.message:o}`)})},Me).unref();const c=parseInt(E["health-port"]??process.env.GRIX_HEALTH_PORT??"19579",10);{const e=await ie({label:"health",port:c,envVar:"GRIX_HEALTH_PORT",cliFlag:"health-port",start:o=>M.start(o)});e&&await we(e)}const f=b.join(s.dataDir,"health-port");oe(f,String(c),"utf-8"),process.on("SIGINT",()=>C("SIGINT")),process.on("SIGTERM",()=>C("SIGTERM")),process.on("SIGHUP",()=>{B||(i.info("main","Received SIGHUP, reloading config..."),n.reload().then(e=>i.info("main",`reload done: ${JSON.stringify(e)}`)).catch(e=>i.error("main",`reload failed: ${e instanceof Error?e.message:e}`)))});let g="",l=0,h;process.on("uncaughtException",e=>{const o=e instanceof Error?e.stack??e.message:String(e);o===g?(l++,(l<=3||l%100===0)&&i.error("main",`Uncaught exception (x${l}): ${o}`)):(l>3&&i.error("main",`Previous exception repeated ${l} times total`),g=o,l=1,i.error("main",`Uncaught exception: ${e instanceof Error?e.stack:e}`),h||(h=setTimeout(()=>{l>3&&i.error("main",`Previous exception repeated ${l} times total`),g="",l=0,h=void 0},1e4).unref())),!Se(e)&&(J(e,"uncaughtException"),j("uncaughtException",e),C("uncaughtException"))}),process.on("unhandledRejection",e=>{i.error("main",`Unhandled rejection: ${e}`),!Se(e)&&(J(e,"unhandledRejection"),j("unhandledRejection",e),C("unhandledRejection"))});const v=rt(s.dataDir);await v.clearRuntimeState();const _=new nt(b.join(s.dataDir,"proxy","relay-state.json"),{warn:e=>i.warn("main",e)}),N=new ot(b.join(s.dataDir,"secrets"));n.setRelaySecretResolver(e=>N.get(e));const $={hasDirectConfig:e=>n.hasDirectRelayConfig(e),clearDirectConfig:(e,o)=>n.setAgentProvider(e,void 0,{deferRestart:o?.deferRestart===!0})},W=()=>({pm:m(),agents:n,direct:$,store:_,secrets:N}),U=v.getRelayAgents();if(U.length>0)try{await v.startIfAnyRelayAgent(),i.info("main",`mitm proxy started for relay agents: ${U.join(", ")} (per-agent; others stay direct)`)}catch(e){i.error("main",`mitm proxy FAILED to start (relay agents: ${U.join(", ")}): ${e}. These agents will REFUSE to start (they must not silently fall back to your own account). Fix the proxy or turn relay off for them. Other agents are unaffected.`)}else i.info("main",'mitm proxy idle (no agent has Grix relay enabled; enable: PUT /api/proxy/agents/<name>/enabled {"enabled":true})');let L=null;if(m()){const e=async()=>{const r=m();r&&await de(r,n)&&i.info("main","no agent uses Grix relay anymore; mitm proxy stopped")};n.setRelayEnvSettledHandler(()=>{const r=m();r&&pe(r,$,_),e().catch(a=>{i.warn("main",`failed to stop idle mitm proxy: ${a}`)})});const o=()=>{const r=m(),a=r.getRelayAgents(),d=r.getDegradedRelayAgents();return{enabled:a.length>0,relayAgents:a,staleRelayAgents:n.getAgentsWithStaleRelayEnv(),degradedRelayAgents:d,relayState:_.list(),runtime:r.getRuntimeInfo(),config:r.getConfigSnapshot()}},p=new at,D={status:()=>o(),setAgentRelay:async(r,a,d)=>{const u=m(),R={info:w=>i.info("main",w),warn:w=>i.warn("main",w)},S=w=>n.getAgentsStatus().find(A=>A.name===w),y=S(r);if(!a){p.cancel(r);const w=await p.runExclusive(r,async()=>{const A=await z(W(),R,{agentName:r,target:"off"});return{...o(),restarted:A.restarted,busy:A.busy,...A.pending?{pending:A.pending}:{}}});return n.reportRelayStateLocalChange(r),w}if(!y)throw Object.assign(new Error(`Agent "${r}" not found`),{code:"NOT_FOUND"});if(!Le(y.clientType)&&le(y.clientType).length===0)throw Object.assign(new Error(`client type "${y.clientType??""}" does not support Grix relay`),{code:"UNSUPPORTED_CLIENT_TYPE"});const O=await p.runExclusive(r,async()=>{const w=p.epoch(r),A=S(r);if(!A)throw Object.assign(new Error(`Agent "${r}" not found`),{code:"NOT_FOUND"});const te=String(A.agentId??"").trim();if(!te)throw new ge(`local agent "${r}" has no agent_id registered`,"MISSING_AGENT_ID");const re=p.waitCancelled(r,w);let k;try{k=await Promise.race([n.fetchRelayCredential(r,{model:d}),re.promise.then(()=>{throw new fe("relay enable cancelled by a later disable","CANCELLED")})])}finally{re.dispose()}p.assertCurrent(r,w);const{restarted:De,busy:Ae,pending:ne}=await ue(u,n,S,R,{localName:r,agentId:te,virtualKey:k.apiKey,anthropicBaseUrl:k.anthropicBaseUrl,openaiBaseUrl:k.openaiBaseUrl,model:d,...k.directRelay!==void 0?{directRelay:k.directRelay}:{}},(ve,xe,be)=>n.setAgentProvider(ve,xe,{deferRestart:be?.deferRestart===!0}),{store:_,secrets:N,direct:$});if(p.epoch(r)!==w)throw await z(W(),R,{agentName:r,target:"off"}),new fe("relay enable cancelled by a later disable","CANCELLED");return{...o(),restarted:De,busy:Ae,...ne?{pending:ne}:{}}});return n.reportRelayStateLocalChange(r),O},setAgentRelayCredential:async(r,a)=>{const d=m(),u=n.getAgentsStatus(),{restarted:R,busy:S,pending:y}=await ue(d,n,x=>u.find(O=>O.name===x),{info:x=>i.info("main",x),warn:x=>i.warn("main",x)},{localName:r,agentId:a.agentId,virtualKey:a.virtualKey,anthropicBaseUrl:a.anthropicBaseUrl,openaiBaseUrl:a.openaiBaseUrl,model:a.model,...a.directRelay!==void 0?{directRelay:a.directRelay}:{}},(x,O,w)=>n.setAgentProvider(x,O,{deferRestart:w?.deferRestart===!0}),{store:_,secrets:N,direct:$});return n.reportRelayStateLocalChange(r),{...o(),restarted:R,busy:S,...y?{pending:y}:{}}},disableAll:async()=>{const r=m(),a={info:u=>i.info("main",u),warn:u=>i.warn("main",u)},d=new Set([...r.getRelayAgents(),...n.getDirectRelayConfigAgentNames(),...Object.keys(_.list())]);for(const u of d)p.cancel(u);for(const u of d)await p.runExclusive(u,()=>z(W(),a,{agentName:u,target:"off"})),n.reportRelayStateLocalChange(u);return await de(r,n),o()},setRoute:async(r,a)=>{const d=a,u=m();return u.setRoute({routeKey:r,targetBaseUrl:d.targetBaseUrl,...d.headers?{headers:d.headers}:{},...d.model?{model:d.model}:{},...d.modelMap?{modelMap:d.modelMap}:{},...d.passthrough?{passthrough:!0}:{},...d.relayOnly?{relayOnly:!0}:{},...d.codexResponsesToChat?{codexResponsesToChat:!0}:{}}),await u.persistConfig(),o()},deleteRoute:async r=>{const a=m();a.deleteRoute(r),await a.persistConfig()},setDefaultRoute:async r=>{const a=m();return a.setDefaultRouteKey(r),await a.persistConfig(),o()},setInterceptHosts:async r=>{const a=m();return a.setInterceptHosts(r),await a.persistConfig(),o()}};L=D,I.setProxyHandler(D),n.setRelayStateApplier({getLocalState:r=>{const a=m();if(a.getRelayAgents().includes(r)){const u=n.getAgentsStatus().find(y=>y.name===r),R=`grix-gateway-${String(u?.clientType??"").trim().toLowerCase()}`;return{enabled:!0,model:a.getConfigSnapshot().routes?.find(y=>y.routeKey===R)?.model?.trim()||void 0}}const d=n.getAgentProvider(r);return d?.api_key?.trim()?{enabled:!0,model:d.model?.trim()||void 0}:{enabled:!1}},applyEnable:async(r,a,d)=>{const u=n.getAgentsStatus().find(y=>y.name===r),R=String(u?.agentId??"").trim();if(!R)throw new ge(`local agent "${r}" has no agent_id registered`,"MISSING_AGENT_ID");const S=await D.setAgentRelayCredential(r,{agentId:R,virtualKey:a.apiKey,anthropicBaseUrl:a.anthropicBaseUrl,openaiBaseUrl:a.openaiBaseUrl,model:d??a.model,...a.directRelay!==void 0?{directRelay:a.directRelay}:{}});return{restarted:S.restarted===!0,busy:S.busy===!0,...S.pending?{pending:S.pending}:{}}},applyDisable:async r=>{const a=await D.setAgentRelay(r,!1);return{restarted:a.restarted===!0,busy:a.busy===!0,...a.pending?{pending:a.pending}:{}}}})}if(M.setStatusProvider(()=>n.getAgentsStatus()),M.setMetaProvider(()=>{const e=n.getAgentsStatus();return{ws:{connected:e.filter(o=>o.wsConnected===!0).length,total:e.length},upgrade:pt()}}),await n.start(ft),U.length>0){const e=n.getAgentsStatus();for(const o of U){const p=e.find(r=>r.name===o);if(!p)continue;const D=le(p.clientType);D.length!==0&&await v.setAgentRelayEnabled(o,!0,{relayHosts:D}).catch(r=>{i.warn("main",`failed to reconcile relay hosts for "${o}": ${r}`)})}}pe(v,$,_);const Z=parseInt(E["admin-port"]??process.env.GRIX_ADMIN_PORT??"19580",10);I.setAgentHandler({list:()=>n.getAgentsStatus(),add:e=>n.addAgent(e),remove:e=>n.removeAgent(e),restart:e=>n.restartAgent(e),reload:()=>n.reload()}),I.setUpgradeHandler({check:()=>n.checkUpgrade(),trigger:()=>n.triggerUpgrade()}),I.setProbeHandler({probeAll:e=>n.probeAll(e),probeOne:(e,o)=>n.probeOne(e,o)}),I.setInstallHandler({listInstallable:()=>n.listInstallable(),installAgent:e=>n.installAgent(e),getInstallProgress:e=>n.getInstallProgress(e)});const ee={listAgents:()=>n.getAgentsStatus(),enableManaged:(e,o,p)=>{if(!L)throw new me(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelayCredential(e,{agentId:o,virtualKey:p.virtualKey,anthropicBaseUrl:p.anthropicBaseUrl,openaiBaseUrl:p.openaiBaseUrl,model:p.model,...p.directRelay!==void 0?{directRelay:p.directRelay}:{}})},disableManaged:e=>{if(!L)throw new me(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelay(e,!1)},enableHermesProfile:(e,o)=>it({agentId:e,baseUrl:o.openaiBaseUrl??"",virtualKey:o.virtualKey,model:o.model??""}),disableHermesProfile:e=>st(e)};I.setRelayCredentialHandler({listHermesProfiles:()=>ct(),enable:async(e,o)=>{const{target:p,result:D}=await dt(ee,e,o);return{target:p,...D}},disable:async e=>{const{target:o,result:p}=await lt(ee,e);return{target:o,...p}}});{const e=await ie({label:"admin",port:Z,envVar:"GRIX_ADMIN_PORT",cliFlag:"admin-port",start:o=>I.start(o)});e&&await we(e)}const Re=b.join(s.dataDir,"admin-token"),Ee=b.join(s.dataDir,"admin-port");et(Re,ye),oe(Ee,String(Z),"utf-8"),await G(s.daemonStatusFile,{state:"running",pid:process.pid,instance_id:T,updated_at:Date.now()}),process.send&&process.send("ready"),i.info("main","grix-connector ready")}ht().catch(async t=>{const c=`Fatal: ${t instanceof Error?t.stack??t.message:String(t)}`;try{process.stderr.write(`${c}
-`)}catch{}ae(!1),i.error("main",c),J(t,"startup"),j("startup",t);const f=q(s.daemonLockFile);f?.pid===process.pid&&f.instance_id===T&&await G(s.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:f.instance_id,updated_at:Date.now(),reason:"startup_error"}).catch(()=>{}),await Y(),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(1)});const yt=new Set(["ECONNRESET","ECONNREFUSED","ETIMEDOUT","EPIPE","EAI_AGAIN","ENOTFOUND","EHOSTUNREACH","ENETUNREACH","EIO"]);function Se(t){return t instanceof Error&&"code"in t?yt.has(t.code):!1}
+right-click the terminal and select "Run as administrator".`);const t=X(),c=E["config-dir"]??(E.profile?v.join(t.configDir,E.profile):void 0),m=v.resolve(process.argv[1]||`${t.rootDir}/dist/grix.js`),g=new ce({cliPath:m,nodePath:process.execPath});try{let l;switch(I){case"start":{const h=await g.healLegacyState({rootDir:t.rootDir});(await g.status({rootDir:t.rootDir})).installed?l=await g.start({rootDir:t.rootDir}):l=await g.install({rootDir:t.rootDir,configDir:c??h.configDir}),h.healed&&(l={...l,legacy_heal:h.reasons})}break;case"stop":l=await g.stop({rootDir:t.rootDir});break;case"restart":(await g.status({rootDir:t.rootDir})).installed?l=await g.restart({rootDir:t.rootDir}):l=await g.install({rootDir:t.rootDir,configDir:c});break;case"status":l=await g.status({rootDir:t.rootDir});{const h=ze(t.dataDir);h&&(l={...l,duplicate_daemon:h})}break}console.log(JSON.stringify(l,null,2)),process.exit(0)}catch(l){console.error(`${I} failed: ${l instanceof Error?l.message:l}`),process.exit(1)}}else I&&(console.error(`Unknown command: ${I}
+Valid commands: ${ye.join(", ")}`),process.exit(1));const s=X(),ht=E["config-dir"]??(E.profile?`${s.configDir}/${E.profile}`:void 0),o=new Ie({requestGracefulShutdown:t=>{C(t)},onTransactionSettled:()=>{q({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).then(t=>{t.handoffStarted&&i.info("main","Wrapper handoff started after the upgrade transaction settled")}).catch(t=>{i.warn("main",`Post-upgrade wrapper migration failed: ${t instanceof Error?t.message:t}`)})}}),M=new Te,we=tt(),x=new et(we);let B=!1,T;function j(t,c){const m=V(),g=process.env.GRIX_LAUNCHER_VERSION;if(!m||!g)return;const l=c instanceof Error?c.stack??c.message:String(c);Me(m,g,`${t}: ${l}`)}function yt(t){const c=`another grix-connector daemon (pid ${t.pid}) is already serving ${s.rootDir} and answering /healthz; this process yields instead of taking over. A second supervisor is starting duplicate daemons \u2014 check for a leftover wrapper, a duplicate logon task, or a desktop app launching its own copy.`;Qe(s.dataDir,{holder_pid:t.pid,holder_command_line:t.command_line,yielded_pid:process.pid,yielded_command_line:We(process.pid)}),process.stderr.write(`${c}
+`),i.warn("main",c);const m=V();m&&le(m),process.exit(0)}async function Se(t){process.stderr.write(t.message+`
+`),i.error("main",t.message.replace(/\n/g," \u2014 ")),j("port_bind",t.message);const c=Y(s.daemonLockFile);c?.pid===process.pid&&c.instance_id===T&&await G(s.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:T,updated_at:Date.now(),reason:`port_bind_${t.kind}:${t.label}:${t.port}`}).catch(()=>{}),await J(),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(1)}async function C(t){if(B)return;B=!0,i.info("main",`Received ${t}, shutting down...`),M.markShuttingDown();const c=V();c&&le(c);const m=t==="upgrade-switch"?He:t==="launcher-unhealthy"?Fe:null,g=m??2,l=t==="uncaughtException"||t==="unhandledRejection",h=setTimeout(()=>{i.error("main","Shutdown timed out, forcing exit"),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(g)},1e4);try{await o.stop(),await f()?.stop().catch(()=>{}),await x.stop(),await M.stop(),await J(),await F(s.daemonLockFile),await Je(s.daemonStatusFile).catch(()=>{}),clearTimeout(h),H(),i.info("main","Shutdown complete"),process.exit(m??(l?2:0))}catch(b){i.error("main",`Shutdown error: ${b}`),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(g)}}async function wt(){Ce(),_e(),ke(s.stdoutLogFile,s.stderrLogFile),ie(!1);try{T=(await Xe(s.daemonLockFile,s.rootDir,2,{isHolderServing:Ve(s.dataDir)})).instance_id}catch(e){e instanceof qe&&yt(e.holder),console.error(e instanceof Error?e.message:e),process.exit(1)}if(je()){const e=Ke(s.rootDir,"win32");await Ge(e,{platform:"win32"})}await nt(),$e(),i.info("main",`grix-connector starting (PID ${process.pid})`);try{Le({info:e=>i.info("main",e),warn:e=>i.warn("main",e)})}catch(e){i.warn("main",`orphan Claude cleanup failed: ${e instanceof Error?e.message:String(e)}`)}if(await G(s.daemonStatusFile,{state:"starting",pid:process.pid,instance_id:T,updated_at:Date.now()}),process.env.GRIX_LAUNCHER_MANAGED!=="1"&&await new ce({cliPath:v.resolve(process.argv[1]??""),nodePath:process.execPath}).adoptLauncher(s.rootDir).then(e=>{e&&i.info("main","Service definition now points at the version-store launcher")}).catch(e=>{i.warn("main",`Launcher adoption failed: ${e instanceof Error?e.message:e}`)}),(await q({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).catch(e=>(i.warn("main",`Windows wrapper migration failed: ${e instanceof Error?e.message:e}`),null)))?.handoffStarted)return;process.platform==="win32"&&process.env.GRIX_LAUNCHER_MANAGED!=="1"&&setInterval(()=>{B||q({rootDir:s.rootDir,requestGracefulShutdown:()=>{C("wrapper-migration")}}).then(n=>{n.handoffStarted&&i.info("main","Wrapper handoff started by the periodic migration retry")}).catch(n=>{i.warn("main",`Periodic wrapper migration failed: ${n instanceof Error?n.message:n}`)})},Ne).unref();const c=parseInt(E["health-port"]??process.env.GRIX_HEALTH_PORT??"19579",10);{const e=await se({label:"health",port:c,envVar:"GRIX_HEALTH_PORT",cliFlag:"health-port",start:n=>M.start(n)});e&&await Se(e)}const m=v.join(s.dataDir,"health-port");ae(m,String(c),"utf-8"),process.on("SIGINT",()=>C("SIGINT")),process.on("SIGTERM",()=>C("SIGTERM")),process.on("SIGHUP",()=>{B||(i.info("main","Received SIGHUP, reloading config..."),o.reload().then(e=>i.info("main",`reload done: ${JSON.stringify(e)}`)).catch(e=>i.error("main",`reload failed: ${e instanceof Error?e.message:e}`)))});let g="",l=0,h;process.on("uncaughtException",e=>{const n=e instanceof Error?e.stack??e.message:String(e);n===g?(l++,(l<=3||l%100===0)&&i.error("main",`Uncaught exception (x${l}): ${n}`)):(l>3&&i.error("main",`Previous exception repeated ${l} times total`),g=n,l=1,i.error("main",`Uncaught exception: ${e instanceof Error?e.stack:e}`),h||(h=setTimeout(()=>{l>3&&i.error("main",`Previous exception repeated ${l} times total`),g="",l=0,h=void 0},1e4).unref())),!Re(e)&&(z(e,"uncaughtException"),j("uncaughtException",e),C("uncaughtException"))}),process.on("unhandledRejection",e=>{i.error("main",`Unhandled rejection: ${e}`),!Re(e)&&(z(e,"unhandledRejection"),j("unhandledRejection",e),C("unhandledRejection"))});const b=ot(s.dataDir);await b.clearRuntimeState();const _=new at(v.join(s.dataDir,"proxy","relay-state.json"),{warn:e=>i.warn("main",e)}),N=new it(v.join(s.dataDir,"secrets"));o.setRelaySecretResolver(e=>N.get(e));const $={hasDirectConfig:e=>o.hasDirectRelayConfig(e),clearDirectConfig:(e,n)=>o.setAgentProvider(e,void 0,{deferRestart:n?.deferRestart===!0})},W=()=>({pm:f(),agents:o,direct:$,store:_,secrets:N}),U=b.getRelayAgents();if(U.length>0)try{await b.startIfAnyRelayAgent(),i.info("main",`mitm proxy started for relay agents: ${U.join(", ")} (per-agent; others stay direct)`)}catch(e){i.error("main",`mitm proxy FAILED to start (relay agents: ${U.join(", ")}): ${e}. These agents will REFUSE to start (they must not silently fall back to your own account). Fix the proxy or turn relay off for them. Other agents are unaffected.`)}else i.info("main",'mitm proxy idle (no agent has Grix relay enabled; enable: PUT /api/proxy/agents/<name>/enabled {"enabled":true})');let L=null;if(f()){const e=async()=>{const r=f();r&&await pe(r,o)&&i.info("main","no agent uses Grix relay anymore; mitm proxy stopped")};o.setRelayEnvSettledHandler(()=>{const r=f();r&&ue(r,$,_),e().catch(a=>{i.warn("main",`failed to stop idle mitm proxy: ${a}`)})});const n=()=>{const r=f(),a=r.getRelayAgents(),d=r.getDegradedRelayAgents();return{enabled:a.length>0,relayAgents:a,staleRelayAgents:o.getAgentsWithStaleRelayEnv(),degradedRelayAgents:d,relayState:_.list(),runtime:r.getRuntimeInfo(),config:r.getConfigSnapshot()}},p=new st,A={status:()=>n(),setAgentRelay:async(r,a,d)=>{const u=f(),R={info:w=>i.info("main",w),warn:w=>i.warn("main",w)},S=w=>o.getAgentsStatus().find(D=>D.name===w),y=S(r);if(!a){p.cancel(r);const w=await p.runExclusive(r,async()=>{const D=await Q(W(),R,{agentName:r,target:"off"});return{...n(),restarted:D.restarted,busy:D.busy,...D.pending?{pending:D.pending}:{}}});return o.reportRelayStateLocalChange(r),w}if(!y)throw Object.assign(new Error(`Agent "${r}" not found`),{code:"NOT_FOUND"});if(!Oe(y.clientType)&&de(y.clientType).length===0)throw Object.assign(new Error(`client type "${y.clientType??""}" does not support Grix relay`),{code:"UNSUPPORTED_CLIENT_TYPE"});const O=await p.runExclusive(r,async()=>{const w=p.epoch(r),D=S(r);if(!D)throw Object.assign(new Error(`Agent "${r}" not found`),{code:"NOT_FOUND"});const re=String(D.agentId??"").trim();if(!re)throw new me(`local agent "${r}" has no agent_id registered`,"MISSING_AGENT_ID");const ne=p.waitCancelled(r,w);let k;try{k=await Promise.race([o.fetchRelayCredential(r,{model:d}),ne.promise.then(()=>{throw new fe("relay enable cancelled by a later disable","CANCELLED")})])}finally{ne.dispose()}p.assertCurrent(r,w);const{restarted:De,busy:ve,pending:oe}=await ge(u,o,S,R,{localName:r,agentId:re,virtualKey:k.apiKey,anthropicBaseUrl:k.anthropicBaseUrl,openaiBaseUrl:k.openaiBaseUrl,model:d,...k.directRelay!==void 0?{directRelay:k.directRelay}:{}},(xe,be,Pe)=>o.setAgentProvider(xe,be,{deferRestart:Pe?.deferRestart===!0}),{store:_,secrets:N,direct:$});if(p.epoch(r)!==w)throw await Q(W(),R,{agentName:r,target:"off"}),new fe("relay enable cancelled by a later disable","CANCELLED");return{...n(),restarted:De,busy:ve,...oe?{pending:oe}:{}}});return o.reportRelayStateLocalChange(r),O},setAgentRelayCredential:async(r,a)=>{const d=f(),u=o.getAgentsStatus(),{restarted:R,busy:S,pending:y}=await ge(d,o,P=>u.find(O=>O.name===P),{info:P=>i.info("main",P),warn:P=>i.warn("main",P)},{localName:r,agentId:a.agentId,virtualKey:a.virtualKey,anthropicBaseUrl:a.anthropicBaseUrl,openaiBaseUrl:a.openaiBaseUrl,model:a.model,...a.directRelay!==void 0?{directRelay:a.directRelay}:{}},(P,O,w)=>o.setAgentProvider(P,O,{deferRestart:w?.deferRestart===!0}),{store:_,secrets:N,direct:$});return o.reportRelayStateLocalChange(r),{...n(),restarted:R,busy:S,...y?{pending:y}:{}}},disableAll:async()=>{const r=f(),a={info:u=>i.info("main",u),warn:u=>i.warn("main",u)},d=new Set([...r.getRelayAgents(),...o.getDirectRelayConfigAgentNames(),...Object.keys(_.list())]);for(const u of d)p.cancel(u);for(const u of d)await p.runExclusive(u,()=>Q(W(),a,{agentName:u,target:"off"})),o.reportRelayStateLocalChange(u);return await pe(r,o),n()},setRoute:async(r,a)=>{const d=a,u=f();return u.setRoute({routeKey:r,targetBaseUrl:d.targetBaseUrl,...d.headers?{headers:d.headers}:{},...d.model?{model:d.model}:{},...d.modelMap?{modelMap:d.modelMap}:{},...d.passthrough?{passthrough:!0}:{},...d.relayOnly?{relayOnly:!0}:{},...d.codexResponsesToChat?{codexResponsesToChat:!0}:{}}),await u.persistConfig(),n()},deleteRoute:async r=>{const a=f();a.deleteRoute(r),await a.persistConfig()},setDefaultRoute:async r=>{const a=f();return a.setDefaultRouteKey(r),await a.persistConfig(),n()},setInterceptHosts:async r=>{const a=f();return a.setInterceptHosts(r),await a.persistConfig(),n()}};L=A,x.setProxyHandler(A),o.setRelayStateApplier({getLocalState:r=>{const a=f();if(a.getRelayAgents().includes(r)){const u=o.getAgentsStatus().find(y=>y.name===r),R=`grix-gateway-${String(u?.clientType??"").trim().toLowerCase()}`;return{enabled:!0,model:a.getConfigSnapshot().routes?.find(y=>y.routeKey===R)?.model?.trim()||void 0}}const d=o.getAgentProvider(r);return d?.api_key?.trim()?{enabled:!0,model:d.model?.trim()||void 0}:{enabled:!1}},applyEnable:async(r,a,d)=>{const u=o.getAgentsStatus().find(y=>y.name===r),R=String(u?.agentId??"").trim();if(!R)throw new me(`local agent "${r}" has no agent_id registered`,"MISSING_AGENT_ID");const S=await A.setAgentRelayCredential(r,{agentId:R,virtualKey:a.apiKey,anthropicBaseUrl:a.anthropicBaseUrl,openaiBaseUrl:a.openaiBaseUrl,model:d??a.model,...a.directRelay!==void 0?{directRelay:a.directRelay}:{}});return{restarted:S.restarted===!0,busy:S.busy===!0,...S.pending?{pending:S.pending}:{}}},applyDisable:async r=>{const a=await A.setAgentRelay(r,!1);return{restarted:a.restarted===!0,busy:a.busy===!0,...a.pending?{pending:a.pending}:{}}}})}M.setStatusProvider(()=>o.getAgentsStatus()),M.setMetaProvider(()=>{const e=o.getAgentsStatus();return{ws:{connected:e.filter(n=>n.wsConnected===!0).length,total:e.length},upgrade:gt()}});const K=new Ze(v.join(s.dataDir,"remote-admin.json"));if(o.setRemoteAdminGate(()=>K.isEnabled()),await o.start(ht),U.length>0){const e=o.getAgentsStatus();for(const n of U){const p=e.find(r=>r.name===n);if(!p)continue;const A=de(p.clientType);A.length!==0&&await b.setAgentRelayEnabled(n,!0,{relayHosts:A}).catch(r=>{i.warn("main",`failed to reconcile relay hosts for "${n}": ${r}`)})}}ue(b,$,_);const ee=parseInt(E["admin-port"]??process.env.GRIX_ADMIN_PORT??"19580",10);x.setAgentHandler({list:()=>o.getAgentsStatus(),add:e=>o.addAgent(e),remove:e=>o.removeAgent(e),restart:e=>o.restartAgent(e),reload:()=>o.reload()}),x.setUpgradeHandler({check:()=>o.checkUpgrade(),trigger:()=>o.triggerUpgrade()}),x.setProbeHandler({probeAll:e=>o.probeAll(e),probeOne:(e,n)=>o.probeOne(e,n)}),x.setRemoteAdminHandler({isEnabled:()=>K.isEnabled(),setEnabled:e=>{const n=K.setEnabled(e);return i.info("main",`remote admin ${n?"enabled":"disabled"} via admin API`),n}}),x.setInstallHandler({listInstallable:()=>o.listInstallable(),installAgent:e=>o.installAgent(e),getInstallProgress:e=>o.getInstallProgress(e)});const te={listAgents:()=>o.getAgentsStatus(),enableManaged:(e,n,p)=>{if(!L)throw new he(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelayCredential(e,{agentId:n,virtualKey:p.virtualKey,anthropicBaseUrl:p.anthropicBaseUrl,openaiBaseUrl:p.openaiBaseUrl,model:p.model,...p.directRelay!==void 0?{directRelay:p.directRelay}:{}})},disableManaged:e=>{if(!L)throw new he(`agent "${e}" needs the MITM proxy for relay, but it is not running`,"PROXY_UNAVAILABLE");return L.setAgentRelay(e,!1)},enableHermesProfile:(e,n)=>ct({agentId:e,baseUrl:n.openaiBaseUrl??"",virtualKey:n.virtualKey,model:n.model??""}),disableHermesProfile:e=>lt(e)};x.setRelayCredentialHandler({listHermesProfiles:()=>dt(),enable:async(e,n)=>{const{target:p,result:A}=await ut(te,e,n);return{target:p,...A}},disable:async e=>{const{target:n,result:p}=await pt(te,e);return{target:n,...p}}});{const e=await se({label:"admin",port:ee,envVar:"GRIX_ADMIN_PORT",cliFlag:"admin-port",start:n=>x.start(n)});e&&await Se(e)}const Ee=v.join(s.dataDir,"admin-token"),Ae=v.join(s.dataDir,"admin-port");rt(Ee,we),ae(Ae,String(ee),"utf-8"),await G(s.daemonStatusFile,{state:"running",pid:process.pid,instance_id:T,updated_at:Date.now()}),process.send&&process.send("ready"),i.info("main","grix-connector ready")}wt().catch(async t=>{const c=`Fatal: ${t instanceof Error?t.stack??t.message:String(t)}`;try{process.stderr.write(`${c}
+`)}catch{}ie(!1),i.error("main",c),z(t,"startup"),j("startup",t);const m=Y(s.daemonLockFile);m?.pid===process.pid&&m.instance_id===T&&await G(s.daemonStatusFile,{state:"failed",pid:process.pid,instance_id:m.instance_id,updated_at:Date.now(),reason:"startup_error"}).catch(()=>{}),await J(),F(s.daemonLockFile).catch(()=>{}),H(),process.exit(1)});const St=new Set(["ECONNRESET","ECONNREFUSED","ETIMEDOUT","EPIPE","EAI_AGAIN","ENOTFOUND","EHOSTUNREACH","ENETUNREACH","EIO"]);function Re(t){return t instanceof Error&&"code"in t?St.has(t.code):!1}

package/dist/manager.js

@@ -1 +1 @@
-import{join as k}from"node:path";import{homedir as le}from"node:os";import{AgentInstance as F}from"./bridge/bridge.js";import{buildSharedInstanceConfig as de,diffSharedOwners as he,sharedInstanceKey as ue,SharedOwnersCache as pe}from"./manager-share-config.js";import{AgentDeletedError as me,isAgentDeletedError as I}from"./core/aibot/errors.js";import{GRIX_PATHS as A,log as m}from"./core/log/index.js";import{resolveClientVersion as ge}from"./core/util/client-version.js";import{UpgradeChecker as fe}from"./core/upgrade/upgrade-checker.js";import{SkillSyncer as _e}from"./core/skill-sync/skill-syncer.js";import{AgentGlobalConfigStore as ye}from"./core/persistence/agent-global-config-store.js";import{resolveSkillScanMode as we}from"./adapter/claude/skill-scanner.js";import{buildWireSkills as Ae}from"./core/skill-sync/sync-state.js";import{buildLibrarySkills as Se}from"./core/skill-sync/library-skills.js";import{AUDIT_LOCAL_ACTION_TYPES as ke}from"./core/aibot/types.js";import{buildReportedSkills as ve,logDefaultSkillsCheck as be,cleanupProjectedSkills as B}from"./default-skills/index.js";import{buildProviderEnv as Ce,supportsKiroCwRelay as W,supportsNonMitmRelayConfig as Ie}from"./core/config/provider-env.js";import{resolveHermesHomeDir as Ee}from"./adapter/shared/native-provider-config.js";import{ensureKiroRelay as Q,stopKiroRelay as K}from"./core/proxy/kiro-relay.js";import{resolveCopilotCommand as z}from"./core/runtime/copilot-resolve.js";import{resolveCursorCommand as V}from"./core/runtime/cursor-resolve.js";import{getCliVersion as $e,resolveCliPath as Te}from"./core/util/cli-probe.js";import{AgentInstaller as Pe}from"./core/installer/installer.js";import{reportInstallFailure as Me}from"./core/observability/sentry.js";import{createDefaultAuditProducer as xe}from"./audit/runtime/default-audit-recorder.js";import{normalizeCodexConfigOverrides as De}from"./adapter/codex/config-overrides.js";import{resolveCodexDirectHome as Oe}from"./adapter/codex/direct-home.js";import{AgentConfigRepository as X}from"./core/config/agent-config-repository.js";function Y(r){if(r)return{...r.provider_id?.trim()?{providerId:r.provider_id.trim()}:{},...r.base_url?.trim()?{baseUrl:r.base_url.trim()}:{},...r.quota_base_url?.trim()?{quotaBaseUrl:r.quota_base_url.trim()}:{},...r.api_key?.trim()?{apiKey:r.api_key.trim()}:{},...r.model?.trim()?{model:r.model.trim()}:{},...r.fast_model?.trim()?{fastModel:r.fast_model.trim()}:{},...r.effort?.trim()?{effort:r.effort.trim()}:{}}}const Re=8e3,je=1e4,Le=8e3;function Ne(){const r=z();return[{clientType:"openclaw",command:"openclaw"},{clientType:"claude",command:"claude"},{clientType:"codex",command:"codex"},{clientType:"qwen",command:"qwen"},{clientType:"hermes",command:"hermes"},{clientType:"reasonix",command:"reasonix"},{clientType:"codewhale",command:"codewhale"},{clientType:"opencode",command:"opencode"},{clientType:"cursor",command:V()},{clientType:"pi",command:"pi"},{clientType:"openhuman",command:"openhuman-core"},{clientType:"kiro",command:"kiro-cli"},{clientType:"kimi",command:"kimi"},{clientType:"copilot",command:r.command},{clientType:"agy",command:"agy"},{clientType:"deepseek",command:"dsh"}]}async function Ue(){return Promise.all(Ne().map(async r=>{const e=await Te(r.command);if(!e)return{client_type:r.clientType,command:r.command,installed:!1,path:null,version:null};const n=await $e(e,r.versionArgs??["--version"]);return{client_type:r.clientType,command:r.command,installed:!0,path:e,version:n.version,error:n.error}}))}function Ge(r){switch(r){case"claude":return{adapterType:"claude",command:"claude"};case"codex":return{adapterType:"codex",command:"codex",options:{sandboxMode:"danger-full-access"}};case"gemini":return{adapterType:"acp",command:"gemini",autoInjectArgs:{acp:!0},enableSessionBinding:!0};case"qwen":return{adapterType:"acp",command:"qwen",adapterHint:"qwen/base",autoInjectArgs:{acp:!0},enableSessionBinding:!0};case"pi":return{adapterType:"pi",command:"pi"};case"cursor":return{adapterType:"cursor",command:V()};case"reasonix":return{adapterType:"acp",command:"reasonix",args:["acp"],enableSessionBinding:!0};case"codewhale":return{adapterType:"codewhale",command:"codewhale",enableSessionBinding:!0};case"openhuman":return{adapterType:"openhuman",command:"openhuman-core",enableSessionBinding:!0};case"kiro":return{adapterType:"acp",command:"kiro-cli",args:["acp"],enableSessionBinding:!0};case"kimi":return{adapterType:"acp",command:"kimi",args:["acp"],options:{initial_mode:"yolo"},enableSessionBinding:!0};case"opencode":return{adapterType:"opencode",command:"opencode",args:["serve"],enableSessionBinding:!0};case"copilot":{const e=z();return{adapterType:"acp",command:e.command,args:[...e.prefixArgs,"--acp"],enableSessionBinding:!0}}case"agy":return{adapterType:"agy",command:"agy",enableSessionBinding:!0};case"deepseek":return{adapterType:"deepseek-harness",command:"dsh",adapterHint:"deepseek/grix-bridge-v1",options:{integrationMode:"profile_bridge",dshProfile:"web",autoInstallBridge:!0,autoStartProfile:!0},enableSessionBinding:!0};case"hermes":return{adapterType:"acp",command:"hermes",args:["acp"],enableSessionBinding:!0};default:throw new Error(`Unsupported client_type: ${r}`)}}function v(r,e){return String(r??"").trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,"")||String(e??"").trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,"")||"default"}function qe(r){return k(A.data,`session-bindings-${v(r,"unknown")}.json`)}function He(r,e){return k(A.data,`session-bindings-${v(r,e)}.json`)}function Fe(r,e){return k(A.data,`active-events-${v(r,e)}.json`)}function Be(r){return k(A.data,`pending-events-${v(r,"unknown")}.json`)}function We(r,e){const n=v(r,"agent"),t=v(e,"unknown");return k(A.data,`terminal-outbox-${n}-${t}.json`)}function Qe(...r){const e=[],n=new Set;for(const t of r)for(const s of t??[]){const i=String(s??"").trim(),c=i.toLowerCase();!i||n.has(c)||(n.add(c),e.push(i))}return e.length>0?e:void 0}function Ke(r,e){const n={claude:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},codex:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},cursor:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},acp:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},pi:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},codewhale:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},openhuman:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},opencode:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},agy:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},"deepseek-harness":{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0}},t=n[r]??n.acp;return{maxConcurrent:e?.max_concurrent??t.maxConcurrent??1,maxQueued:e?.max_queued??t.maxQueued??99,queueTimeoutMs:e?.queue_timeout_ms??t.queueTimeoutMs??0,cancelableQueued:!0,cancelableRunning:!0}}function ze(r,e={}){const n=ge(),t=String(r.client_type??"").trim().toLowerCase(),s=Ge(t),i=t==="deepseek"?r.dsh?.integration_mode??"profile_bridge":void 0,c=i==="embedded_jsonrpc",o=String(r.ws_url??"").trim(),p=typeof r.name=="string"?r.name:"",a=p.trim(),l="get_session_usage",g="get_rate_limits",h="get_agent_global_config",d=ke;if(!a)throw new Error("agent name is required");if(p!==a)throw new Error(`agent name must not contain leading or trailing whitespace: "${p}"`);if(!o)throw new Error(`agent ${r.name}: ws_url is required`);if(!r.agent_id?.trim())throw new Error(`agent ${r.name}: agent_id is required`);if(!r.api_key?.trim())throw new Error(`agent ${r.name}: api_key is required`);const u=s.adapterType,f=u==="acp",_=t==="qwen",w={...s.options??{}};if(u==="deepseek-harness"&&(w.integrationMode=i,w.dshProfile=r.dsh?.profile?.trim()||"web",w.autoInstallBridge=r.dsh?.auto_install_bridge??!c,w.autoStartProfile=r.dsh?.auto_start_profile??!c),u==="deepseek-harness"&&r.provider?.model?.trim()&&(w.defaultModel=r.provider.model.trim()),r.codex_config_overrides!==void 0){if(u!=="codex")throw new Error(`agent ${r.name}: codex_config_overrides is only supported for client_type=codex`);De(r.codex_config_overrides,`agent ${r.name}: codex_config_overrides`),w.codexConfigOverrides=r.codex_config_overrides}if(u==="codex"&&r.provider?.wire_api!==void 0){const y=r.provider;if(y.wire_api!=="responses"||!y.base_url?.trim()||!y.api_key?.trim()||!y.model?.trim()||!y.catalog_version?.trim()||!y.catalog_sha256?.trim()||!y.catalog_json?.trim())throw Object.assign(new Error(`agent ${r.name}: incomplete Codex direct relay config`),{code:"INVALID_CODEX_DIRECT_CONFIG"});const H=Oe(A.data,r.name);w.codexHome=H,w.codexDirect={codexHome:H,config:{baseUrl:y.base_url.trim(),model:y.model.trim(),...y.reasoning_effort?.trim()?{reasoningEffort:y.reasoning_effort.trim()}:{},token:y.api_key.trim()},catalog:{version:y.catalog_version.trim(),sha256:y.catalog_sha256.trim(),json:y.catalog_json}}}const S=u==="codex"?{capabilities:["local_action_v1","agent_invoke"],localActions:["session_control","get_context","set_model","set_mode","set_reasoning_effort","set_service_tier","set_sandbox_mode","exec_approve","exec_reject","file_list","create_folder","turn_interrupt","permission_approve","permission_reject","thread_compact",l,g]}:null,Z=u==="claude"?{localActions:["session_control","set_mode","set_model","set_reasoning_effort","claude_interaction_reply","exec_approve","exec_reject","file_list","create_folder","thread_compact",l,g]}:null,T=_?{capabilities:["stream_chunk","local_action_v1"],localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","file_list","create_folder",l],adapterHint:"qwen/base"}:null,P=u==="pi"?{adapterHint:"pi/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_provider","set_model","get_context","file_list","create_folder",l,g]}:null,M=u==="openhuman"?{adapterHint:"openhuman/base",capabilities:["local_action_v1"],localActions:["session_control","set_model","file_list","create_folder"]}:null,x=u==="cursor"?{adapterHint:"cursor/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","set_mode","get_context","file_list","create_folder","thread_compact","claude_interaction_reply",g]}:null,L=u==="codewhale"?{capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","file_list","create_folder",l]}:null,D=u==="opencode"?{adapterHint:"opencode/base",capabilities:["stream_chunk","local_action_v1"],localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","claude_interaction_reply","file_list","create_folder"]}:null,O=u==="agy"?{adapterHint:"agy/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","file_list","create_folder",g]}:null,R=u==="deepseek-harness"?{adapterHint:c?"deepseek/jsonrpc-v1":"deepseek/grix-bridge-v1",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_provider","set_model","set_mode","set_thinking","set_reasoning_effort","set_preset","set_profile","create_profile",l,g,"exec_approve","exec_reject","permission_approve","permission_reject","file_list","create_folder","dsh_bridge_status","dsh_install_bridge","dsh_list_plugins","dsh_enable_plugin","dsh_disable_plugin","dsh_refresh_plugins","dsh_list_skills","dsh_enable_skill","dsh_disable_skill","dsh_list_mcp","dsh_list_tools","dsh_list_jobs","dsh_list_goals"]}:null,N=new Set(["hermes","reasonix","kimi","copilot"]),ee=f&&!N.has(t),te=f&&!_?{localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","claude_interaction_reply","file_list","create_folder",...ee?[l]:[]]}:null,ne=t==="kiro"?{localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","file_list","create_folder","thread_compact",l,g]}:null,se=u==="codex"||u==="claude"||u==="opencode"||u==="deepseek-harness"||t==="gemini"?["session_control","set_model","set_mode",...u==="deepseek-harness"?["set_provider","set_thinking","set_reasoning_effort","set_preset","set_profile","create_profile","dsh_list_plugins","dsh_enable_plugin","dsh_disable_plugin","dsh_refresh_plugins","dsh_list_skills","dsh_enable_skill","dsh_disable_skill"]:[],...u==="claude"?["set_reasoning_effort"]:[]]:void 0,re=u==="cursor"||u==="opencode"||u==="openhuman"||u==="agy"||f&&N.has(t)?[g]:[l,g];f&&w.raw_transport===void 0&&(w.raw_transport=t==="gemini");const ae=`${t}/base`,C=we(u,t),ie=C==="kiro"?void 0:process.cwd(),j=Y(r.provider),b={...process.env,...r.env};if(C==="hermes"&&!b.HERMES_HOME?.trim()){const y=Ce(t,j);b.HERMES_HOME=Ee({...y,...b},r.name)}const U=ve({mode:C,projectDir:ie,env:b}),G=U.filter(y=>y.source==="connector").map(y=>y.name);G.length>0&&!e.quiet&&m.info("manager",`[${r.name}] injecting connector skills: [${G.join(", ")}]`);const q=Ae(U,A.skills);let oe=q.length>0?q:void 0;const ce=Se({skillsDir:A.skills,mode:C,home:le(),env:b});return{name:a,adapterType:u,aibot:{url:o,agentId:r.agent_id,apiKey:r.api_key,clientType:t,clientVersion:n,adapterHint:R?.adapterHint??s.adapterHint??T?.adapterHint??P?.adapterHint??M?.adapterHint??x?.adapterHint??D?.adapterHint??O?.adapterHint??ae,capabilities:R?.capabilities??S?.capabilities??L?.capabilities??P?.capabilities??M?.capabilities??x?.capabilities??D?.capabilities??O?.capabilities??T?.capabilities??["stream_chunk","local_action_v1","connector_upgrade"],localActions:Qe(R?.localActions??S?.localActions??L?.localActions??Z?.localActions??P?.localActions??M?.localActions??x?.localActions??D?.localActions??O?.localActions??T?.localActions??ne?.localActions??te?.localActions??["exec_approve","exec_reject"],se,re,["connector_rollback","connector_upgrade_push",h,"configure_gateway_provider","skill_upload","skill_delete","skill_enable","skill_disable","skill_refresh",...d]),skills:oe,librarySkills:ce,terminalOutboxPath:We(r.name,r.agent_id)},agent:{command:c?"dsh-jsonrpc-agent":s.command,args:[...s.args??[],...r.args??[]],env:r.env,clientType:t,...j?{provider:j}:{}},adapterOptions:w,acpAuthMethod:w.auth_method,acpInitialMode:w.initial_mode,acpMcpTools:w.acp_mcp_tools,promptTimeoutMs:r.prompt_timeout_ms,bindingsPath:qe(r.agent_id),legacyBindingsPath:He(r.name,r.agent_id),activeEventStorePath:Fe(r.name,r.agent_id),pendingEventStorePath:Be(r.agent_id),...s.enableSessionBinding||f?{enableSessionBinding:!0}:{},...s.autoInjectArgs||t==="reasonix"&&r.provider?.model?.trim()?{autoInjectArgs:{...s.autoInjectArgs??{},...t==="reasonix"&&r.provider?.model?.trim()?{model:r.provider.model.trim()}:{}}}:{},poolMaxSize:r.pool?.maxSize??(u==="deepseek-harness"?4:void 0),poolIdleTimeoutMs:r.pool?.idleTimeoutMs,eventQueue:Ke(u,r.event_queue),logDir:A.log,providerBaseUrl:r.provider_base_url?.trim()||void 0,providerApiKey:r.provider_api_key?.trim()||void 0}}function J(){const r=process.env.GRIX_AGENT_STARTUP_WAIT_MS,e=Number(r);return Number.isFinite(e)&&e>=500?Math.floor(e):Re}function E(){const r=process.env.GRIX_AGENT_STOP_WAIT_MS,e=Number(r);return Number.isFinite(e)&&e>=500?Math.floor(e):je}function Ve(){return Math.min(E(),Le)}function $(r){if(r===null||typeof r!="object")return JSON.stringify(r)??"null";if(Array.isArray(r))return`[${r.map($).join(",")}]`;const e=r;return`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${$(e[t])}`).join(",")}}`}function Xe(r,e){return $(r)===$(e)}class It{options;instances=[];configMap=new Map;rawConfigMap=new Map;mutationTail=Promise.resolve();startingInstances=new Set;failedStartAgents=new Set;removingAgents=new Set;instanceGenerations=new WeakMap;sharedInstances=new Map;shareSyncChains=new Map;stopping=!1;lifecycleAdmissionClosed=!1;deletedAgentCleanups=new Set;pendingPlatformDeletes=new Map;upgradeChecker=null;skillSyncer=null;globalConfigStore;configRepository=new X(A.config);sharedOwnersCache=new pe(A.data);installer=new Pe;relaySecretResolver;auditProducer=xe();constructor(e={}){this.options=e}runMutation(e,n=[]){const t=this.mutationTail.catch(()=>{}).then(async()=>{if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});await this.retryPendingPlatformDeletesUnlocked();const s=new Set([...this.pendingPlatformDeletes.values()].map(c=>c.name)),i=n.find(c=>s.has(c.trim()));if(i)throw Object.assign(new Error(`Agent "${i}" is pending permanent platform-deletion cleanup`),{code:"AGENT_DELETE_PENDING"});return e()});return this.mutationTail=t.then(()=>{},()=>{}),t}async startTrackedInstance(e){this.startingInstances.add(e);try{await e.start()}finally{this.startingInstances.delete(e)}}requestStartCancellation(e){const n=e.requestStop;typeof n=="function"&&n.call(e)}async stopInstance(e,n,t=E()){let s;try{await Promise.race([e.stop(n),new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`Agent "${e.name}" stop timed out after ${t}ms`),{code:"AGENT_STOP_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}async waitForLifecycleDrain(e,n,t=E()){let s;try{await Promise.race([Promise.allSettled([...e]).then(()=>{}),new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`${n} timed out after ${t}ms`),{code:"LIFECYCLE_DRAIN_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}async waitForShutdownOperation(e,n,t){let s;try{return await Promise.race([e,new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`${n} timed out after ${t}ms`),{code:"SHUTDOWN_OPERATION_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}isActiveGeneration(e){const n=this.instanceGenerations.get(e);return!!n&&!n.retired&&this.instances.find(t=>t.name===n.name)===e}retireInstance(e){const n=this.instanceGenerations.get(e);n&&(n.retired=!0)}async start(e){return this.runMutation(()=>this.startUnlocked(e))}async startUnlocked(e){const n=e??A.config;this.configRepository=new X(n),m.info("manager",`Loading configs from ${n}`),be(),B(),this.globalConfigStore=new ye(k(A.data,"agent-global-configs.json")),this.globalConfigStore.load();const{entries:t,fileErrors:s,skipped:i}=this.configRepository.scan();for(const a of s)m.error("manager",`Failed to load ${a.file}: ${a.error}`);for(const a of i)m.info("manager",`Skipped ${a}: not an agent config (no "agents" key)`);if(t.length===0&&s.length===0&&i.length===0){m.warn("manager",`No agent configurations found in ${n}; daemon idle (waiting for config). Add agents under this directory then run: grix-connector reload`);return}const c=[];let o=s.length;for(const{entry:a,file:l}of t)try{const g=this.toRuntimeInstanceConfig(a);c.push({config:g,entry:a,file:l}),m.info("manager",`Loaded ${g.name} (${g.adapterType??"acp"}) from ${l}`)}catch(g){const h=typeof a?.name=="string"?a.name:"<unknown>";m.error("manager",`Invalid agent config in ${l} (name=${h}): ${g}`),o++}let p=0;if(c.length>0){const a=J();m.info("manager",`Starting ${c.length} agent(s), startup wait=${a}ms`);const l=d=>{this.instances=this.instances.filter(u=>u!==d)},g=c.map(({config:d,entry:u,file:f})=>{const _=this.createConfiguredInstance(d);return this.instances.push(_),this.configMap.set(d.name,d),this.rawConfigMap.set(d.name,{entry:u,file:f}),{config:d,instance:_,startPromise:this.prepareProviderRuntime(d,u).then(()=>{if(this.stopping)throw this.requestStartCancellation(_),Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});return this.startTrackedInstance(_)})}}),h=await Promise.all(g.map(async d=>{const u=await new Promise(f=>{let _=!1;const w=setTimeout(()=>{_||(_=!0,f({kind:"timeout"}))},a);d.startPromise.then(()=>{_||(_=!0,clearTimeout(w),f({kind:"started"}))}).catch(S=>{_||(_=!0,clearTimeout(w),f({kind:"failed",error:S}))})});return{task:d,outcome:u}}));for(const{task:d,outcome:u}of h){if(u.kind==="started"){this.restoreCachedSharedInstances(d.config);continue}if(u.kind==="failed"){if(I(u.error)){this.onAgentDeletedByPlatform(d.instance);continue}try{await this.stopInstance(d.instance),l(d.instance),this.failedStartAgents.delete(d.config.name)}catch(f){this.failedStartAgents.add(d.config.name),m.error("manager",`Failed to clean up partially started ${d.config.name}: ${f}`)}m.error("manager",`Failed to start ${d.config.name}: ${u.error}`);continue}p++,m.warn("manager",`Startup pending for ${d.config.name}, continue retrying in background`),d.startPromise.then(()=>{this.stopping||this.removingAgents.has(d.config.name)||this.isActiveGeneration(d.instance)&&(m.info("manager",`Delayed start succeeded: ${d.config.name}`),this.restoreCachedSharedInstances(d.config))}).catch(async f=>{if(I(f)){this.onAgentDeletedByPlatform(d.instance);return}if(!(this.stopping||this.removingAgents.has(d.config.name))&&this.isActiveGeneration(d.instance)){try{await this.stopInstance(d.instance),l(d.instance),this.failedStartAgents.delete(d.config.name)}catch(_){this.failedStartAgents.add(d.config.name),m.error("manager",`Failed to clean up delayed start ${d.config.name}: ${_}`)}m.error("manager",`Delayed start failed: ${d.config.name}: ${f}`)}})}if(this.instances.length>0){const d=Math.max(0,this.instances.length-p);m.info("manager",`${d}/${c.length} agent(s) running now`)}p>0&&m.warn("manager",`${p} agent(s) still connecting in background`)}if(this.instances.length===0&&c.length>0)throw new Error("All agent configurations failed to start");await this.ensureAuxServices()}async ensureAuxServices(){if(this.stopping||this.configMap.size===0)return;const e=[...this.configMap.values()].map(n=>({apiKey:n.aibot.apiKey,wsUrl:n.aibot.url}));if(!this.upgradeChecker&&(this.upgradeChecker=new fe(e,()=>this.hasAnyPendingOrBackgroundWork(),()=>this.closeAllLifecycleAdmission(),{requestGracefulShutdown:this.options.requestGracefulShutdown,reopenLifecycleAdmission:()=>this.reopenAllLifecycleAdmission(),isConnected:()=>this.instances.length===0||this.instances.some(n=>n.getStatus().wsConnected),onTransactionSettled:this.options.onTransactionSettled}),await this.upgradeChecker.start(),this.stopping)){this.upgradeChecker.stop();return}this.skillSyncer||(this.skillSyncer=new _e(e,A.skills),this.skillSyncer.setOnSyncSuccess(()=>this.refreshOwnerLibrarySkills()),await this.skillSyncer.start(),this.stopping&&this.skillSyncer.stop())}refreshOwnerLibrarySkills(){const e=new Map,n=t=>{let s;try{s=t.skillsSyncGroupKey()}catch(c){m.warn("manager",`skillsSyncGroupKey failed for ${t.name}: ${c}`);return}const i=e.get(s)??[];i.push(t),e.set(s,i)};for(const t of this.instances)n(t);for(const t of this.sharedInstances.values())n(t);for(const[t,s]of e){let i=!1;const c=[];for(const o of s){if(i){c.push(o);continue}let p=!1;try{p=o.forceRefreshSkills(void 0,{force:!0,ownerLibrarySync:!0})===!0}catch(a){m.warn("manager",`owner library skills reporter threw group=${t} agent=${o.name}: ${a}`)}if(p){i=!0;continue}m.warn("manager",`owner library skills reporter failed group=${t} agent=${o.name}; trying next`)}if(!i){m.warn("manager",`owner library skills: no reporter succeeded group=${t}`);continue}for(const o of c)try{o.adoptSkillsWireHashFromDisk()}catch(p){m.warn("manager",`adoptSkillsWireHashFromDisk failed for ${o.name}: ${p}`)}}}async stop(){m.info("manager","Stopping all agents..."),this.stopping=!0;const e=Ve(),n=Date.now()+e,t=()=>Math.max(1,n-Date.now()),s=new Set([...this.instances,...this.sharedInstances.values(),...this.startingInstances]);for(const o of s)this.requestStartCancellation(o);const i=new Map([...s].map(o=>[o,this.stopInstance(o,void 0,e)])),c=[];this.upgradeChecker?.stop(),this.skillSyncer?.stop();try{await this.waitForLifecycleDrain([this.mutationTail,...this.shareSyncChains.values(),...i.values()],"manager shutdown lifecycle drain",t())}catch(o){c.push(o)}this.upgradeChecker?.stop(),this.skillSyncer?.stop(),this.shareSyncChains.clear(),await Promise.all([...[...this.instances].map(async o=>{try{await(i.get(o)??this.stopInstance(o,void 0,t())),this.retireInstance(o),this.instances=this.instances.filter(p=>p!==o),this.startingInstances.delete(o)}catch(p){c.push(p)}}),...[...this.sharedInstances.entries()].map(async([o,p])=>{try{await(i.get(p)??this.stopInstance(p,void 0,t())),this.sharedInstances.get(o)===p&&this.sharedInstances.delete(o),this.startingInstances.delete(p)}catch(a){c.push(a)}})]);try{await this.waitForLifecycleDrain([this.retryPendingPlatformDeletesUnlocked(n)],"platform-delete shutdown drain",t())}catch(o){c.push(o)}try{await this.waitForShutdownOperation(Promise.resolve().then(()=>this.globalConfigStore?.flush()),"global config shutdown flush",t())}catch(o){c.push(o)}if(await this.auditProducer.stop({timeoutMs:Math.min(5e3,t())}).catch(()=>!1),B(),c.length>0)throw new AggregateError(c,"Failed to stop all agents completely");m.info("manager","All stopped")}onShareSet(e,n,t){if(this.stopping||this.removingAgents.has(n.name)||!this.isActiveGeneration(e))return;this.sharedOwnersCache.save(n.name,t);const i=(this.shareSyncChains.get(n.name)??Promise.resolve()).catch(()=>{}).then(()=>{if(!(this.stopping||this.removingAgents.has(n.name))&&this.isActiveGeneration(e))return this.syncSharedInstances(n,t,e)});this.shareSyncChains.set(n.name,i)}async syncSharedInstances(e,n,t){if(this.stopping||this.removingAgents.has(e.name)||t&&!this.isActiveGeneration(t))return;const{toAdd:s,toRemove:i}=he(e.name,this.sharedInstances.keys(),n);for(const c of s){if(this.stopping||this.removingAgents.has(e.name)||t&&!this.isActiveGeneration(t))break;const o=ue(e.name,c);let p;try{const a=de(e,c);p=new F(a,this.globalConfigStore,this.auditProducer),p.setLifecycleBusyChecker(()=>this.hasAnyPendingOrBackgroundWork()),p.setLifecycleAdmissionCloser(()=>this.closeAllLifecycleAdmission()),p.setLifecycleAdmissionRestorer(()=>this.reopenAllLifecycleAdmission()),this.options.requestGracefulShutdown&&p.setDaemonShutdownRequester(this.options.requestGracefulShutdown),this.lifecycleAdmissionClosed&&p.closeLifecycleAdmission(),this.sharedInstances.set(o,p),await this.startTrackedInstance(p),p.forceRefreshSkills(void 0,{force:!0}),m.info("manager",`shared instance started: ${o}`)}catch(a){if(p&&!this.stopping&&!this.removingAgents.has(e.name))try{await this.stopInstance(p),this.sharedInstances.get(o)===p&&this.sharedInstances.delete(o)}catch(g){m.error("manager",`cleanup shared instance failed ${o}: ${g}`)}const l=a instanceof Error?a.message:String(a);/Auth failed/i.test(l)?(this.sharedOwnersCache.remove(e.name,c),m.warn("manager",`shared instance auth rejected, removed from cache: ${o}`)):m.error("manager",`start shared instance failed ${o}: ${a}`)}}for(const{key:c}of i){const o=this.sharedInstances.get(c);if(o)try{await this.stopInstance(o),this.sharedInstances.get(c)===o&&this.sharedInstances.delete(c),m.info("manager",`shared instance stopped: ${c}`)}catch(p){m.error("manager",`stop shared instance failed ${c}: ${p}`)}}}restoreCachedSharedInstances(e){const n=this.sharedOwnersCache.load(e.name);if(n.length===0)return;const t=this.instances.find(s=>s.name===e.name);!t||!this.isActiveGeneration(t)||(m.info("manager",`restoring ${n.length} cached shared instance(s) for ${e.name}`),this.onShareSet(t,e,n))}getAgentsStatus(){return this.instances.map(e=>e.getStatus())}async addAgent(e){return this.runMutation(()=>this.addAgentUnlocked(e),[String(e.name??"")])}async addAgentUnlocked(e){const n=this.toRuntimeInstanceConfig(e,{quiet:!0});if(this.instances.some(t=>t.name===n.name))throw new Error(`Agent "${n.name}" already exists`);this.configRepository.assertCanAdd(e),await this.addAgentInternal(e,"agents.json",{targetPersisted:!1});try{const t=this.configRepository.insert(e);this.rawConfigMap.set(e.name,t);const s=this.instances.find(c=>c.name===e.name),i=s?this.instanceGenerations.get(s):void 0;if(i){i.persisted=!0;const c=this.configMap.get(e.name);c&&this.restoreCachedSharedInstances(c)}}catch(t){try{await this.removeAgentInternal(e.name)}catch(s){throw new AggregateError([t,s],`Failed to persist and roll back agent "${e.name}"`)}throw t}await this.ensureAuxServices(),m.info("manager",`Added agent: ${e.name}`)}async addAgentInternal(e,n,t){const s=this.toRuntimeInstanceConfig(e);if(this.instances.some(i=>i.name===s.name))throw new Error(`Agent "${s.name}" already exists`);await this.startInstanceFromConfig(s,e,n,t)}createConfiguredInstance(e,n=!0){const t=new F(e,this.globalConfigStore,this.auditProducer);return this.instanceGenerations.set(t,{name:e.name,agentId:e.aibot.agentId,persisted:n,retired:!1,platformDeletedObserved:!1}),t.setUpgradeTrigger(()=>this.upgradeChecker?.triggerCheck()),this.options.requestGracefulShutdown&&t.setDaemonShutdownRequester(this.options.requestGracefulShutdown),t.setLifecycleBusyChecker(()=>this.hasAnyPendingOrBackgroundWork()),t.setLifecycleAdmissionCloser(()=>this.closeAllLifecycleAdmission()),t.setLifecycleAdmissionRestorer(()=>this.reopenAllLifecycleAdmission()),this.lifecycleAdmissionClosed&&t.closeLifecycleAdmission(),t.setInstallAgentHandler(s=>this.installAgent(s)),t.setShareSetHandler(s=>this.onShareSet(t,e,s)),t.setAgentDeletedHandler(()=>this.onAgentDeletedByPlatform(t)),t.setSkillSyncHandler(()=>this.skillSyncer?.triggerSync()),t.setProviderConfigHandler(s=>this.setAgentProvider(e.name,s)),t.setRelayStateApplyPorts({getLocalState:()=>this.relayStateApplier?.getLocalState(e.name)??{enabled:!1},applyEnable:(s,i)=>{const c=this.relayStateApplier;return c?c.applyEnable(e.name,s,i):Promise.reject(new Error("relay state applier is not configured"))},applyDisable:()=>{const s=this.relayStateApplier;return s?s.applyDisable(e.name):Promise.reject(new Error("relay state applier is not configured"))}}),t.setRelayEnvSettledHandler(()=>this.relayEnvSettledHandler?.()),t.setProviderResolver(()=>Y(this.getAgentProvider(e.name))),t}hasAnyPendingOrBackgroundWork(){return this.instances.some(e=>e.hasPendingOrBackgroundWork())||[...this.sharedInstances.values()].some(e=>e.hasPendingOrBackgroundWork())}closeAllLifecycleAdmission(){this.lifecycleAdmissionClosed=!0;for(const e of this.instances)e.closeLifecycleAdmission();for(const e of this.sharedInstances.values())e.closeLifecycleAdmission()}reopenAllLifecycleAdmission(){if(!this.stopping){this.lifecycleAdmissionClosed=!1;for(const e of this.instances)e.openLifecycleAdmission();for(const e of this.sharedInstances.values())e.openLifecycleAdmission()}}async prepareProviderRuntime(e,n){const t=this.resolveAgentProvider(n.provider);W(n.client_type)&&t?.base_url?.trim()&&t?.api_key?.trim()&&t?.model?.trim()&&await Q(e.name,{baseUrl:t.base_url.trim(),apiKey:t.api_key.trim(),model:t.model.trim()})}async startInstanceFromConfig(e,n,t,s){if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});if(await this.prepareProviderRuntime(e,n),this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});const i=this.createConfiguredInstance(e,s.targetPersisted);this.instances.push(i);const c=this.startTrackedInstance(i),o=J(),p=await new Promise(h=>{let d=!1;const u=setTimeout(()=>{d||(d=!0,h({kind:"timeout"}))},o);c.then(()=>{d||(d=!0,clearTimeout(u),h({kind:"started"}))},f=>{d||(d=!0,clearTimeout(u),h({kind:"failed",error:f}))})}),a=this.instanceGenerations.get(i);if(a?.platformDeletedObserved&&!a.persisted){const h=new me(`Agent "${e.name}" was deleted before its local configuration commit`);try{await this.stopInstance(i),this.retireInstance(i),this.instances=this.instances.filter(d=>d!==i),this.failedStartAgents.delete(e.name)}catch(d){throw this.failedStartAgents.add(e.name),new AggregateError([h,d],`Failed to clean up uncommitted deleted agent "${e.name}"`)}throw h}if(p.kind==="started"){this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t}),this.failedStartAgents.delete(e.name),s.targetPersisted&&this.restoreCachedSharedInstances(e),this.relayEnvSettledHandler?.();return}if(p.kind==="timeout"){this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t}),m.warn("manager",`Start pending for ${e.name}, continue retrying in background`),c.then(async()=>{if(!this.removingAgents.has(e.name)&&this.isActiveGeneration(i)){if(this.stopping){try{await this.stopInstance(i),this.instances=this.instances.filter(h=>h!==i)}catch(h){this.failedStartAgents.add(e.name),m.error("manager",`Failed to stop late-started ${e.name}: ${h}`)}return}this.failedStartAgents.delete(e.name),this.instanceGenerations.get(i)?.persisted&&this.restoreCachedSharedInstances(e),this.relayEnvSettledHandler?.(),m.info("manager",`Delayed start succeeded: ${e.name}`)}},async h=>{if(I(h)){this.onAgentDeletedByPlatform(i);return}if(!(this.stopping||this.removingAgents.has(e.name))&&this.isActiveGeneration(i)){try{await this.stopInstance(i),this.instances=this.instances.filter(d=>d!==i),this.failedStartAgents.delete(e.name)}catch(d){this.failedStartAgents.add(e.name),m.error("manager",`Failed to clean up delayed start ${e.name}: ${d}`)}m.error("manager",`Delayed start failed ${e.name}: ${h}`)}}).catch(h=>{m.error("manager",`Delayed start finalizer failed ${e.name}: ${h}`)});return}const l=p.error;I(l)&&this.onAgentDeletedByPlatform(i);let g;try{await this.stopInstance(i),this.instances=this.instances.filter(h=>h!==i),this.failedStartAgents.delete(e.name)}catch(h){g=h,this.failedStartAgents.add(e.name)}throw s.targetPersisted&&(this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t})),g!==void 0?new AggregateError([l,g],`Failed to start and clean up agent "${e.name}"`):l}async removeAgent(e){return this.runMutation(()=>this.removeAgentUnlocked(e),[e])}async removeAgentUnlocked(e){if(!(this.instances.some(t=>t.name===e)||this.rawConfigMap.has(e)||[...this.sharedInstances.keys()].some(t=>t.startsWith(`${e}#shared:`))))throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});this.configRepository.remove(e),await this.removeAgentInternal(e),m.info("manager",`Removed agent: ${e}`),this.relayEnvSettledHandler?.()}async removeAgentInternal(e,n){this.removingAgents.add(e);try{const t=()=>n?.deadlineMs===void 0?E():Math.max(1,n.deadlineMs-Date.now()),s=this.instances.findIndex(h=>h.name===e),i=s===-1?void 0:this.instances[s],c=`${e}#shared:`,o=n?.keepShareCache?void 0:{dropPendingEvents:!0},p=new Map;i&&(this.requestStartCancellation(i),this.startingInstances.has(i)&&p.set(i,this.stopInstance(i,o,t())));for(const[h,d]of this.sharedInstances)h.startsWith(c)&&(this.requestStartCancellation(d),this.startingInstances.has(d)&&p.set(d,this.stopInstance(d,o,t())));const a=this.shareSyncChains.get(e);this.shareSyncChains.delete(e);const l=[];try{await this.waitForLifecycleDrain([...a?[a]:[],...p.values()],`agent "${e}" shared lifecycle drain`,t())}catch(h){l.push(h)}const g=[];for(const[h,d]of[...this.sharedInstances.entries()])h.startsWith(c)&&g.push((p.get(d)??this.stopInstance(d,o,t())).then(()=>{this.sharedInstances.get(h)===d&&this.sharedInstances.delete(h),this.startingInstances.delete(d)}).catch(u=>{l.push(u),m.error("manager",`stop shared instance failed ${h}: ${u}`)}));if(i)try{await(p.get(i)??this.stopInstance(i,o,t())),this.retireInstance(i);const h=this.instances.indexOf(i);h!==-1&&this.instances.splice(h,1),this.startingInstances.delete(i)}catch(h){l.push(h)}if(await Promise.all(g),!n?.keepShareCache){const h=K(e).catch(()=>{});if(n?.deadlineMs===void 0)await h;else try{await this.waitForLifecycleDrain([h],`agent "${e}" relay shutdown`,t())}catch(d){l.push(d)}}if(l.length>0)throw new AggregateError(l,`Failed to stop agent "${e}" completely`);this.configMap.delete(e),this.rawConfigMap.delete(e),this.failedStartAgents.delete(e),n?.keepShareCache||this.sharedOwnersCache.delete(e)}finally{this.removingAgents.delete(e)}}onAgentDeletedByPlatform(e){const n=this.instanceGenerations.get(e);if(!n||(n.platformDeletedObserved=!0,this.requestStartCancellation(e),!n.persisted))return;const t={source:e,name:n.name,agentId:n.agentId};this.pendingPlatformDeletes.set(e,t),!this.stopping&&(this.deletedAgentCleanups.has(e)||(this.deletedAgentCleanups.add(e),this.runMutation(async()=>{}).catch(()=>{}).finally(()=>{this.deletedAgentCleanups.delete(e)})))}async retryPendingPlatformDeletesUnlocked(e){if(this.pendingPlatformDeletes.size!==0)for(const[n,t]of[...this.pendingPlatformDeletes])try{await this.cleanupPlatformDeletedUnlocked(t,e),this.pendingPlatformDeletes.delete(n)}catch(s){m.error("manager",`cleanup for deleted agent "${t.name}" failed: ${s}`)}}async cleanupPlatformDeletedUnlocked(e,n){const{source:t,name:s,agentId:i}=e,c=this.instances.find(g=>g.name===s),o=c?this.instanceGenerations.get(c)?.agentId??String(this.rawConfigMap.get(s)?.entry.agent_id??"").trim():void 0;if(c&&c!==t&&o!==i)return;m.warn("manager",`Agent "${s}" \u5DF2\u5728\u5E73\u53F0\u5220\u9664\uFF0C\u505C\u6B62\u5B9E\u4F8B\u5E76\u6E05\u7406\u672C\u5730\u914D\u7F6E`);const p=this.rawConfigMap.get(s),a=this.configMap.get(s),l=[];if(c&&o===i)try{await this.removeAgentInternal(s,{deadlineMs:n})}catch(g){l.push(g)}try{const g=this.configRepository.scan();if(g.fileErrors.length>0){const u=g.fileErrors.map(f=>`${f.file}: ${f.error}`).join("; ");throw new Error(`cannot inspect deleted agent generation [${u}]`)}const h=g.entries.filter(u=>String(u.entry?.name??"").trim()===s);if(!h.some(u=>String(u.entry?.agent_id??"").trim()!==i)&&h.length>0&&this.configRepository.remove(s),l.length===0){const u=String(this.rawConfigMap.get(s)?.entry.agent_id??"").trim();(!u||u===i)&&(this.rawConfigMap.delete(s),this.configMap.delete(s),this.failedStartAgents.delete(s))}}catch(g){l.push(g),p&&this.rawConfigMap.set(s,p),a&&this.configMap.set(s,a)}if(l.length>0)throw new AggregateError(l,`Failed to fully clean up deleted agent "${s}"`);m.info("manager",`Agent "${s}" \u5DF2\u5728\u5E73\u53F0\u5220\u9664\uFF0C\u672C\u5730\u914D\u7F6E\u5DF2\u6E05\u7406`)}isAgentBusy(e){return this.instances.find(t=>t.name===e)?.hasPendingWork()??!1}getAgentsWithStaleRelayEnv(){return this.instances.filter(e=>e.hasStaleRelayEnv()).map(e=>e.name)}markAgentRelayEnvStale(e){const n=this.instances.find(t=>t.name===e);return n?(n.markRelayEnvStale(),!0):!1}relayEnvSettledHandler;setRelayEnvSettledHandler(e){this.relayEnvSettledHandler=e}relayStateApplier;setRelayStateApplier(e){this.relayStateApplier=e}reportRelayStateLocalChange(e){this.instances.find(t=>t.name===e)?.reportRelayStateLocalChange()}setRelaySecretResolver(e){this.relaySecretResolver=e}resolveAgentProvider(e){if(!e?.api_key_ref?.trim())return e;const n=e.api_key_ref.trim(),t=this.relaySecretResolver?.(n);if(!t)throw Object.assign(new Error(`relay credential "${n}" is unavailable`),{code:"RELAY_SECRET_UNAVAILABLE"});return{...e,api_key:t}}toRuntimeInstanceConfig(e,n={}){const t=this.resolveAgentProvider(e.provider);return ze(t===e.provider?e:{...e,provider:t},n)}getAgentProvider(e){return this.resolveAgentProvider(this.rawConfigMap.get(e)?.entry.provider)}async restartAgent(e){return this.runMutation(()=>this.restartAgentUnlocked(e),[e])}async restartAgentUnlocked(e){const n=this.rawConfigMap.get(e);if(!n)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});await this.replaceInstance(e,n.entry,n.file),m.info("manager",`Restarted agent: ${e}`)}async setAgentProvider(e,n,t){return this.runMutation(()=>this.setAgentProviderUnlocked(e,n,t),[e])}async setAgentProviderUnlocked(e,n,t){if(!this.rawConfigMap.get(e))throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});const i=n?.api_key_ref?.trim()?Object.fromEntries(Object.entries(n).filter(([a])=>a!=="api_key")):n,c=this.configRepository.updateExisting(e,a=>{const l={...a};return i===void 0?delete l.provider:l.provider=i,this.toRuntimeInstanceConfig(l,{quiet:!0}),l}),o=c.entry;this.rawConfigMap.set(e,c);const p=String(o.client_type??"").trim().toLowerCase();try{W(p)&&(n?.base_url?.trim()&&n?.api_key?.trim()&&n?.model?.trim()?await Q(e,{baseUrl:n.base_url.trim(),apiKey:n.api_key.trim(),model:n.model.trim()}):await K(e))}catch(a){throw this.failedStartAgents.add(e),this.instances.find(l=>l.name===e)?.markRelayEnvStale(),a}if(t?.deferRestart){this.instances.find(a=>a.name===e)?.markRelayEnvStale(),m.info("manager",`Updated provider config for agent (deferred restart): ${e}`);return}try{await this.replaceInstance(e,o,c.file)}catch(a){throw this.failedStartAgents.add(e),this.instances.find(l=>l.name===e)?.markRelayEnvStale(),a}m.info("manager",`Updated provider config for agent: ${e}`)}hasDirectRelayConfig(e){const n=this.rawConfigMap.get(e)?.entry.provider;return!!(n?.api_key_ref?.trim()||n?.api_key?.trim())}getDirectRelayConfigAgentNames(){return[...this.rawConfigMap.entries()].filter(([,e])=>!!e.entry.provider&&(Ie(e.entry.client_type)||["claude","codex"].includes(String(e.entry.client_type??"").trim().toLowerCase()))).map(([e])=>e)}async fetchRelayCredential(e,n){const t=this.instances.find(s=>s.name===e);if(!t)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});return t.fetchRelayCredential(n)}async clearDirectProviderConfigs(){const e=this.getDirectRelayConfigAgentNames(),n=[];for(const t of e)try{await this.setAgentProvider(t,void 0,{deferRestart:this.isAgentBusy(t)}),n.push(t)}catch(s){m.warn("manager",`Failed to clear provider config for "${t}": ${s instanceof Error?s.message:String(s)}`)}return n}async replaceInstance(e,n,t){const s=this.toRuntimeInstanceConfig(n);try{await this.removeAgentInternal(e,{keepShareCache:!0})}catch(o){throw this.failedStartAgents.add(e),o}const i=String(n.agent_id??"").trim();if([...this.pendingPlatformDeletes.values()].some(o=>o.name===e&&o.agentId===i))throw await this.retryPendingPlatformDeletesUnlocked(),Object.assign(new Error(`Agent "${e}" was permanently deleted while its instance was stopping`),{code:"AGENT_DELETE_PENDING"});try{await this.startInstanceFromConfig(s,n,t,{targetPersisted:!0})}catch(o){throw this.configMap.set(e,s),this.rawConfigMap.set(e,{entry:n,file:t}),o}}async reload(){return this.runMutation(()=>this.doReload())}async doReload(){if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"RELOAD_UNSAFE"});const{entries:e,fileErrors:n,skipped:t}=this.configRepository.scan();for(const a of t)m.info("manager",`reload: skipped ${a}: not an agent config (no "agents" key)`);if(n.length>0){const a=n.map(l=>`${l.file}: ${l.error}`).join("; ");throw Object.assign(new Error(`reload aborted: ${n.length} config file(s) failed to parse [${a}]`),{code:"RELOAD_UNSAFE"})}if(e.length===0)throw Object.assign(new Error("reload aborted: no valid agent config found"),{code:"RELOAD_UNSAFE"});const s=[];for(const{entry:a}of e)try{this.toRuntimeInstanceConfig(a,{quiet:!0})}catch(l){const g=a?.name,h=typeof g=="string"&&g.trim()?g:"<unknown>";s.push({name:h,error:l instanceof Error?l.message:String(l)})}if(s.length>0){const a=s.map(l=>`${l.name}: ${l.error}`).join("; ");throw Object.assign(new Error(`reload aborted: ${s.length} agent config(s) invalid [${a}]`),{code:"RELOAD_UNSAFE"})}const i=new Map,c=new Set([...this.pendingPlatformDeletes.values()].map(a=>a.name));for(const a of e){const l=String(a.entry?.name??"").trim();l&&(c.has(l)||(i.has(l)&&m.warn("manager",`reload: duplicate agent name "${l}", last one wins`),i.set(l,a)))}const o={added:[],removed:[],restarted:[],unchanged:[],failed:[]},p=new Set([...this.rawConfigMap.keys()].filter(a=>!c.has(a)));for(const a of p)if(!i.has(a))try{await this.removeAgentInternal(a),o.removed.push(a)}catch(l){o.failed.push({name:a,error:l instanceof Error?l.message:String(l)})}for(const[a,l]of i){const g=this.rawConfigMap.get(a);if(g)if(!Xe(g.entry,l.entry)||!this.instances.some(h=>h.name===a)||this.failedStartAgents.has(a))try{await this.replaceInstance(a,l.entry,l.file),o.restarted.push(a)}catch(h){o.failed.push({name:a,error:h instanceof Error?h.message:String(h)})}else this.rawConfigMap.set(a,l),o.unchanged.push(a);else try{await this.addAgentInternal(l.entry,l.file,{targetPersisted:!0}),o.added.push(a)}catch(h){o.failed.push({name:a,error:h instanceof Error?h.message:String(h)})}}return m.info("manager",`reload done: +${o.added.length} -${o.removed.length} ~${o.restarted.length} =${o.unchanged.length} !${o.failed.length}`),await this.ensureAuxServices(),o}async checkUpgrade(){return this.upgradeChecker?this.upgradeChecker.checkForUpdate():{available:!1}}triggerUpgrade(){this.upgradeChecker?.triggerCheck()}async probeAll(e={}){return Ye(this.instances,e)}async probeOne(e,n={}){return Je(this.instances,e,n)}listInstallable(){return this.installer.listInstallable()}async installAgent(e){const n=await this.installer.install(e);return Me(n),n}getInstallProgress(e){return this.installer.getProgress(e)??null}}async function Ye(r,e){const n=e.concurrency??4,t=Date.now(),s=new Array(r.length);await new Promise(a=>{let l=0,g=0;const h=r.length;if(h===0){a();return}function d(_){const w=r[_];w.probe(e).then(S=>{s[_]=S,u()},S=>{s[_]={agent_name:w.name,client_type:"unknown",adapter_type:"acp",ok:!1,status:"error",probed_at:Date.now(),duration_ms:0,cached:!1,cli:{command:"",installed:!1,path:null,version:null,error:{code:"internal",message:S?.message??String(S)}},conversation:{attempted:!1,ok:!1,latency_ms:null},config:{model:null,base_url:null,source:{model:"unknown",base_url:"unknown"}},process:{started:!1,alive:!1,busy:!1}},u()})}function u(){g++,l<h?d(l++):g===h&&a()}const f=Math.min(n,h);for(let _=0;_<f;_++)d(l++)});const i=s.filter(a=>a.status==="healthy").length,c=s.filter(a=>a.status==="degraded").length,o=s.filter(a=>a.status==="unavailable").length,p=await Ue();return{ok:i===s.length&&s.length>0,total:s.length,healthy:i,degraded:c,unavailable:o,installed_clients:p,agents:s,probed_at:t,duration_ms:Date.now()-t}}async function Je(r,e,n){const t=r.find(s=>s.name===e);if(!t)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});return t.probe(n)}export{It as Manager,Y as normalizeAgentProviderForRuntime,Ue as probeInstalledClientCommands,Ye as probeInstances,Je as probeOneInstance};
+import{join as k}from"node:path";import{homedir as ce}from"node:os";import{AgentInstance as F}from"./bridge/bridge.js";import{buildSharedInstanceConfig as le,diffSharedOwners as de,sharedInstanceKey as he,SharedOwnersCache as ue}from"./manager-share-config.js";import{AgentDeletedError as ge,isAgentDeletedError as C}from"./core/aibot/errors.js";import{GRIX_PATHS as A,log as p}from"./core/log/index.js";import{resolveClientVersion as pe}from"./core/util/client-version.js";import{UpgradeChecker as me}from"./core/upgrade/upgrade-checker.js";import{SkillSyncer as fe}from"./core/skill-sync/skill-syncer.js";import{AgentGlobalConfigStore as _e}from"./core/persistence/agent-global-config-store.js";import{resolveSkillScanMode as we}from"./adapter/claude/skill-scanner.js";import{buildWireSkills as ye}from"./core/skill-sync/sync-state.js";import{buildLibrarySkills as Ae}from"./core/skill-sync/library-skills.js";import{AUDIT_LOCAL_ACTION_TYPES as Se}from"./core/aibot/types.js";import{buildReportedSkills as ke,logDefaultSkillsCheck as ve,cleanupProjectedSkills as B}from"./default-skills/index.js";import{buildProviderEnv as be,supportsKiroCwRelay as W,supportsNonMitmRelayConfig as Ie}from"./core/config/provider-env.js";import{resolveHermesHomeDir as Ce}from"./adapter/shared/native-provider-config.js";import{ensureKiroRelay as Q,stopKiroRelay as K}from"./core/proxy/kiro-relay.js";import{resolveCopilotCommand as Ee}from"./core/runtime/copilot-resolve.js";import{resolveCursorCommand as $e}from"./core/runtime/cursor-resolve.js";import{probeInstalledClientCommands as z}from"./core/probe/installed-clients.js";import{AgentInstaller as Pe}from"./core/installer/installer.js";import{reportInstallFailure as Me}from"./core/observability/sentry.js";import{createDefaultAuditProducer as Te}from"./audit/runtime/default-audit-recorder.js";import{normalizeCodexConfigOverrides as xe}from"./adapter/codex/config-overrides.js";import{resolveCodexDirectHome as De}from"./adapter/codex/direct-home.js";import{AgentConfigRepository as V}from"./core/config/agent-config-repository.js";function X(r){if(r)return{...r.provider_id?.trim()?{providerId:r.provider_id.trim()}:{},...r.base_url?.trim()?{baseUrl:r.base_url.trim()}:{},...r.quota_base_url?.trim()?{quotaBaseUrl:r.quota_base_url.trim()}:{},...r.api_key?.trim()?{apiKey:r.api_key.trim()}:{},...r.model?.trim()?{model:r.model.trim()}:{},...r.fast_model?.trim()?{fastModel:r.fast_model.trim()}:{},...r.effort?.trim()?{effort:r.effort.trim()}:{}}}const Re=8e3,Oe=1e4,je=8e3;function Le(r,e){switch(r){case"claude":return{adapterType:"claude",command:"claude"};case"codex":return{adapterType:"codex",command:"codex",options:{sandboxMode:"danger-full-access"}};case"gemini":return{adapterType:"acp",command:"gemini",autoInjectArgs:{acp:!0},enableSessionBinding:!0};case"qwen":return{adapterType:"acp",command:"qwen",adapterHint:"qwen/base",autoInjectArgs:{acp:!0},enableSessionBinding:!0};case"pi":return{adapterType:"pi",command:"pi"};case"cursor":return{adapterType:"cursor",command:$e()};case"reasonix":return{adapterType:"acp",command:"reasonix",args:["acp"],enableSessionBinding:!0};case"codewhale":return{adapterType:"codewhale",command:"codewhale",enableSessionBinding:!0};case"openhuman":return{adapterType:"openhuman",command:"openhuman-core",enableSessionBinding:!0};case"kiro":return{adapterType:"acp",command:"kiro-cli",args:["acp"],enableSessionBinding:!0};case"kimi":return{adapterType:"acp",command:"kimi",args:["acp"],options:{initial_mode:"yolo"},enableSessionBinding:!0};case"opencode":return{adapterType:"opencode",command:"opencode",args:["serve"],enableSessionBinding:!0};case"copilot":{const n=Ee();return{adapterType:"acp",command:n.command,args:[...n.prefixArgs,"--acp"],enableSessionBinding:!0}}case"agy":return{adapterType:"agy",command:"agy",enableSessionBinding:!0};case"deepseek":return{adapterType:"deepseek-harness",command:"dsh",adapterHint:"deepseek/grix-bridge-v1",options:{integrationMode:"profile_bridge",dshProfile:"web",autoInstallBridge:!0,autoStartProfile:!0},enableSessionBinding:!0};case"hermes":return{adapterType:"acp",command:"hermes",args:["acp"],enableSessionBinding:!0};case"acp":{const n=typeof e?.command=="string"?e.command.trim():"";if(!n)throw new Error(`agent ${e?.name??"<unknown>"}: client_type=acp requires "command" (the ACP CLI executable) in the agent config; put its ACP subcommand or flag in "args"`);return{adapterType:"acp",command:n,adapterHint:"acp/base",enableSessionBinding:!0}}default:throw new Error(`Unsupported client_type: ${r}`)}}function v(r,e){return String(r??"").trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,"")||String(e??"").trim().toLowerCase().replace(/[^a-z0-9._-]+/g,"-").replace(/-+/g,"-").replace(/^-|-$/g,"")||"default"}function Ne(r){return k(A.data,`session-bindings-${v(r,"unknown")}.json`)}function Ge(r,e){return k(A.data,`session-bindings-${v(r,e)}.json`)}function Ue(r,e){return k(A.data,`active-events-${v(r,e)}.json`)}function qe(r){return k(A.data,`pending-events-${v(r,"unknown")}.json`)}function He(r,e){const n=v(r,"agent"),t=v(e,"unknown");return k(A.data,`terminal-outbox-${n}-${t}.json`)}function Fe(...r){const e=[],n=new Set;for(const t of r)for(const s of t??[]){const i=String(s??"").trim(),c=i.toLowerCase();!i||n.has(c)||(n.add(c),e.push(i))}return e.length>0?e:void 0}function Be(r,e){const n={claude:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},codex:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},cursor:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},acp:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},pi:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},codewhale:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},openhuman:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},opencode:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},agy:{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0},"deepseek-harness":{maxConcurrent:1,maxQueued:99,queueTimeoutMs:0}},t=n[r]??n.acp;return{maxConcurrent:e?.max_concurrent??t.maxConcurrent??1,maxQueued:e?.max_queued??t.maxQueued??99,queueTimeoutMs:e?.queue_timeout_ms??t.queueTimeoutMs??0,cancelableQueued:!0,cancelableRunning:!0}}function We(r,e={}){const n=pe(),t=String(r.client_type??"").trim().toLowerCase(),s=Le(t,r),i=t==="deepseek"?r.dsh?.integration_mode??"profile_bridge":void 0,c=i==="embedded_jsonrpc",o=String(r.ws_url??"").trim(),g=typeof r.name=="string"?r.name:"",a=g.trim(),l="get_session_usage",m="get_rate_limits",h="get_agent_global_config",d=Se;if(!a)throw new Error("agent name is required");if(g!==a)throw new Error(`agent name must not contain leading or trailing whitespace: "${g}"`);if(!o)throw new Error(`agent ${r.name}: ws_url is required`);if(!r.agent_id?.trim())throw new Error(`agent ${r.name}: agent_id is required`);if(!r.api_key?.trim())throw new Error(`agent ${r.name}: api_key is required`);const u=s.adapterType,f=u==="acp",_=t==="qwen",y={...s.options??{}};if(u==="deepseek-harness"&&(y.integrationMode=i,y.dshProfile=r.dsh?.profile?.trim()||"web",y.autoInstallBridge=r.dsh?.auto_install_bridge??!c,y.autoStartProfile=r.dsh?.auto_start_profile??!c),u==="deepseek-harness"&&r.provider?.model?.trim()&&(y.defaultModel=r.provider.model.trim()),r.codex_config_overrides!==void 0){if(u!=="codex")throw new Error(`agent ${r.name}: codex_config_overrides is only supported for client_type=codex`);xe(r.codex_config_overrides,`agent ${r.name}: codex_config_overrides`),y.codexConfigOverrides=r.codex_config_overrides}if(u==="codex"&&r.provider?.wire_api!==void 0){const w=r.provider;if(w.wire_api!=="responses"||!w.base_url?.trim()||!w.api_key?.trim()||!w.model?.trim()||!w.catalog_version?.trim()||!w.catalog_sha256?.trim()||!w.catalog_json?.trim())throw Object.assign(new Error(`agent ${r.name}: incomplete Codex direct relay config`),{code:"INVALID_CODEX_DIRECT_CONFIG"});const H=De(A.data,r.name);y.codexHome=H,y.codexDirect={codexHome:H,config:{baseUrl:w.base_url.trim(),model:w.model.trim(),...w.reasoning_effort?.trim()?{reasoningEffort:w.reasoning_effort.trim()}:{},token:w.api_key.trim()},catalog:{version:w.catalog_version.trim(),sha256:w.catalog_sha256.trim(),json:w.catalog_json}}}const S=u==="codex"?{capabilities:["local_action_v1","agent_invoke"],localActions:["session_control","get_context","set_model","set_mode","set_reasoning_effort","set_service_tier","set_sandbox_mode","exec_approve","exec_reject","file_list","create_folder","turn_interrupt","permission_approve","permission_reject","thread_compact",l,m]}:null,J=u==="claude"?{localActions:["session_control","set_mode","set_model","set_reasoning_effort","claude_interaction_reply","exec_approve","exec_reject","file_list","create_folder","thread_compact",l,m]}:null,P=_?{capabilities:["stream_chunk","local_action_v1"],localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","file_list","create_folder",l],adapterHint:"qwen/base"}:null,M=u==="pi"?{adapterHint:"pi/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_provider","set_model","get_context","file_list","create_folder",l,m]}:null,T=u==="openhuman"?{adapterHint:"openhuman/base",capabilities:["local_action_v1"],localActions:["session_control","set_model","file_list","create_folder"]}:null,x=u==="cursor"?{adapterHint:"cursor/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","set_mode","get_context","file_list","create_folder","thread_compact","claude_interaction_reply",m]}:null,L=u==="codewhale"?{capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","file_list","create_folder",l]}:null,D=u==="opencode"?{adapterHint:"opencode/base",capabilities:["stream_chunk","local_action_v1"],localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","claude_interaction_reply","file_list","create_folder"]}:null,R=u==="agy"?{adapterHint:"agy/base",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_model","file_list","create_folder",m]}:null,O=u==="deepseek-harness"?{adapterHint:c?"deepseek/jsonrpc-v1":"deepseek/grix-bridge-v1",capabilities:["stream_chunk","local_action_v1"],localActions:["session_control","set_provider","set_model","set_mode","set_thinking","set_reasoning_effort","set_preset","set_profile","create_profile",l,m,"exec_approve","exec_reject","permission_approve","permission_reject","file_list","create_folder","dsh_bridge_status","dsh_install_bridge","dsh_list_plugins","dsh_enable_plugin","dsh_disable_plugin","dsh_refresh_plugins","dsh_list_skills","dsh_enable_skill","dsh_disable_skill","dsh_list_mcp","dsh_list_tools","dsh_list_jobs","dsh_list_goals"]}:null,N=new Set(["hermes","reasonix","kimi","copilot","acp"]),Z=f&&!N.has(t),ee=f&&!_?{localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","claude_interaction_reply","file_list","create_folder",...Z?[l]:[]]}:null,te=t==="kiro"?{localActions:["exec_approve","exec_reject","permission_approve","permission_reject","session_control","set_model","set_mode","file_list","create_folder","thread_compact",l,m]}:null,ne=u==="codex"||u==="claude"||u==="opencode"||u==="deepseek-harness"||t==="gemini"?["session_control","set_model","set_mode",...u==="deepseek-harness"?["set_provider","set_thinking","set_reasoning_effort","set_preset","set_profile","create_profile","dsh_list_plugins","dsh_enable_plugin","dsh_disable_plugin","dsh_refresh_plugins","dsh_list_skills","dsh_enable_skill","dsh_disable_skill"]:[],...u==="claude"?["set_reasoning_effort"]:[]]:void 0,se=u==="cursor"||u==="opencode"||u==="openhuman"||u==="agy"||f&&N.has(t)?[m]:[l,m];f&&y.raw_transport===void 0&&(y.raw_transport=t==="gemini");const re=`${t}/base`,I=we(u,t),ae=I==="kiro"?void 0:process.cwd(),j=X(r.provider),b={...process.env,...r.env};if(I==="hermes"&&!b.HERMES_HOME?.trim()){const w=be(t,j);b.HERMES_HOME=Ce({...w,...b},r.name)}const G=ke({mode:I,projectDir:ae,env:b}),U=G.filter(w=>w.source==="connector").map(w=>w.name);U.length>0&&!e.quiet&&p.info("manager",`[${r.name}] injecting connector skills: [${U.join(", ")}]`);const q=ye(G,A.skills);let ie=q.length>0?q:void 0;const oe=Ae({skillsDir:A.skills,mode:I,home:ce(),env:b});return{name:a,adapterType:u,aibot:{url:o,agentId:r.agent_id,apiKey:r.api_key,clientType:t,clientVersion:n,adapterHint:O?.adapterHint??s.adapterHint??P?.adapterHint??M?.adapterHint??T?.adapterHint??x?.adapterHint??D?.adapterHint??R?.adapterHint??re,capabilities:O?.capabilities??S?.capabilities??L?.capabilities??M?.capabilities??T?.capabilities??x?.capabilities??D?.capabilities??R?.capabilities??P?.capabilities??["stream_chunk","local_action_v1","connector_upgrade"],localActions:Fe(O?.localActions??S?.localActions??L?.localActions??J?.localActions??M?.localActions??T?.localActions??x?.localActions??D?.localActions??R?.localActions??P?.localActions??te?.localActions??ee?.localActions??["exec_approve","exec_reject"],ne,se,["connector_rollback","connector_upgrade_push",h,"configure_gateway_provider","skill_upload","skill_delete","skill_enable","skill_disable","skill_refresh",...d]),skills:ie,librarySkills:oe,terminalOutboxPath:He(r.name,r.agent_id)},agent:{command:c?"dsh-jsonrpc-agent":s.command,args:[...s.args??[],...r.args??[]],env:r.env,clientType:t,...j?{provider:j}:{}},adapterOptions:y,acpAuthMethod:y.auth_method,acpInitialMode:y.initial_mode,acpMcpTools:y.acp_mcp_tools,promptTimeoutMs:r.prompt_timeout_ms,bindingsPath:Ne(r.agent_id),legacyBindingsPath:Ge(r.name,r.agent_id),activeEventStorePath:Ue(r.name,r.agent_id),pendingEventStorePath:qe(r.agent_id),...s.enableSessionBinding||f?{enableSessionBinding:!0}:{},...s.autoInjectArgs||t==="reasonix"&&r.provider?.model?.trim()?{autoInjectArgs:{...s.autoInjectArgs??{},...t==="reasonix"&&r.provider?.model?.trim()?{model:r.provider.model.trim()}:{}}}:{},poolMaxSize:r.pool?.maxSize??(u==="deepseek-harness"?4:void 0),poolIdleTimeoutMs:r.pool?.idleTimeoutMs,eventQueue:Be(u,r.event_queue),logDir:A.log,providerBaseUrl:r.provider_base_url?.trim()||void 0,providerApiKey:r.provider_api_key?.trim()||void 0}}function Y(){const r=process.env.GRIX_AGENT_STARTUP_WAIT_MS,e=Number(r);return Number.isFinite(e)&&e>=500?Math.floor(e):Re}function E(){const r=process.env.GRIX_AGENT_STOP_WAIT_MS,e=Number(r);return Number.isFinite(e)&&e>=500?Math.floor(e):Oe}function Qe(){return Math.min(E(),je)}function $(r){if(r===null||typeof r!="object")return JSON.stringify(r)??"null";if(Array.isArray(r))return`[${r.map($).join(",")}]`;const e=r;return`{${Object.keys(e).sort().map(t=>`${JSON.stringify(t)}:${$(e[t])}`).join(",")}}`}function Ke(r,e){return $(r)===$(e)}class vt{options;instances=[];configMap=new Map;rawConfigMap=new Map;mutationTail=Promise.resolve();startingInstances=new Set;failedStartAgents=new Set;removingAgents=new Set;instanceGenerations=new WeakMap;sharedInstances=new Map;shareSyncChains=new Map;stopping=!1;lifecycleAdmissionClosed=!1;deletedAgentCleanups=new Set;pendingPlatformDeletes=new Map;upgradeChecker=null;skillSyncer=null;globalConfigStore;configRepository=new V(A.config);sharedOwnersCache=new ue(A.data);installer=new Pe;relaySecretResolver;auditProducer=Te();constructor(e={}){this.options=e}runMutation(e,n=[]){const t=this.mutationTail.catch(()=>{}).then(async()=>{if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});await this.retryPendingPlatformDeletesUnlocked();const s=new Set([...this.pendingPlatformDeletes.values()].map(c=>c.name)),i=n.find(c=>s.has(c.trim()));if(i)throw Object.assign(new Error(`Agent "${i}" is pending permanent platform-deletion cleanup`),{code:"AGENT_DELETE_PENDING"});return e()});return this.mutationTail=t.then(()=>{},()=>{}),t}async startTrackedInstance(e){this.startingInstances.add(e);try{await e.start()}finally{this.startingInstances.delete(e)}}requestStartCancellation(e){const n=e.requestStop;typeof n=="function"&&n.call(e)}async stopInstance(e,n,t=E()){let s;try{await Promise.race([e.stop(n),new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`Agent "${e.name}" stop timed out after ${t}ms`),{code:"AGENT_STOP_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}async waitForLifecycleDrain(e,n,t=E()){let s;try{await Promise.race([Promise.allSettled([...e]).then(()=>{}),new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`${n} timed out after ${t}ms`),{code:"LIFECYCLE_DRAIN_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}async waitForShutdownOperation(e,n,t){let s;try{return await Promise.race([e,new Promise((i,c)=>{s=setTimeout(()=>{c(Object.assign(new Error(`${n} timed out after ${t}ms`),{code:"SHUTDOWN_OPERATION_TIMEOUT"}))},t)})])}finally{s!==void 0&&clearTimeout(s)}}isActiveGeneration(e){const n=this.instanceGenerations.get(e);return!!n&&!n.retired&&this.instances.find(t=>t.name===n.name)===e}retireInstance(e){const n=this.instanceGenerations.get(e);n&&(n.retired=!0)}async start(e){return this.runMutation(()=>this.startUnlocked(e))}async startUnlocked(e){const n=e??A.config;this.configRepository=new V(n),p.info("manager",`Loading configs from ${n}`),ve(),B(),this.globalConfigStore=new _e(k(A.data,"agent-global-configs.json")),this.globalConfigStore.load();const{entries:t,fileErrors:s,skipped:i}=this.configRepository.scan();for(const a of s)p.error("manager",`Failed to load ${a.file}: ${a.error}`);for(const a of i)p.info("manager",`Skipped ${a}: not an agent config (no "agents" key)`);if(t.length===0&&s.length===0&&i.length===0){p.warn("manager",`No agent configurations found in ${n}; daemon idle (waiting for config). Add agents under this directory then run: grix-connector reload`);return}const c=[];let o=s.length;for(const{entry:a,file:l}of t)try{const m=this.toRuntimeInstanceConfig(a);c.push({config:m,entry:a,file:l}),p.info("manager",`Loaded ${m.name} (${m.adapterType??"acp"}) from ${l}`)}catch(m){const h=typeof a?.name=="string"?a.name:"<unknown>";p.error("manager",`Invalid agent config in ${l} (name=${h}): ${m}`),o++}let g=0;if(c.length>0){const a=Y();p.info("manager",`Starting ${c.length} agent(s), startup wait=${a}ms`);const l=d=>{this.instances=this.instances.filter(u=>u!==d)},m=c.map(({config:d,entry:u,file:f})=>{const _=this.createConfiguredInstance(d);return this.instances.push(_),this.configMap.set(d.name,d),this.rawConfigMap.set(d.name,{entry:u,file:f}),{config:d,instance:_,startPromise:this.prepareProviderRuntime(d,u).then(()=>{if(this.stopping)throw this.requestStartCancellation(_),Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});return this.startTrackedInstance(_)})}}),h=await Promise.all(m.map(async d=>{const u=await new Promise(f=>{let _=!1;const y=setTimeout(()=>{_||(_=!0,f({kind:"timeout"}))},a);d.startPromise.then(()=>{_||(_=!0,clearTimeout(y),f({kind:"started"}))}).catch(S=>{_||(_=!0,clearTimeout(y),f({kind:"failed",error:S}))})});return{task:d,outcome:u}}));for(const{task:d,outcome:u}of h){if(u.kind==="started"){this.restoreCachedSharedInstances(d.config);continue}if(u.kind==="failed"){if(C(u.error)){this.onAgentDeletedByPlatform(d.instance);continue}try{await this.stopInstance(d.instance),l(d.instance),this.failedStartAgents.delete(d.config.name)}catch(f){this.failedStartAgents.add(d.config.name),p.error("manager",`Failed to clean up partially started ${d.config.name}: ${f}`)}p.error("manager",`Failed to start ${d.config.name}: ${u.error}`);continue}g++,p.warn("manager",`Startup pending for ${d.config.name}, continue retrying in background`),d.startPromise.then(()=>{this.stopping||this.removingAgents.has(d.config.name)||this.isActiveGeneration(d.instance)&&(p.info("manager",`Delayed start succeeded: ${d.config.name}`),this.restoreCachedSharedInstances(d.config))}).catch(async f=>{if(C(f)){this.onAgentDeletedByPlatform(d.instance);return}if(!(this.stopping||this.removingAgents.has(d.config.name))&&this.isActiveGeneration(d.instance)){try{await this.stopInstance(d.instance),l(d.instance),this.failedStartAgents.delete(d.config.name)}catch(_){this.failedStartAgents.add(d.config.name),p.error("manager",`Failed to clean up delayed start ${d.config.name}: ${_}`)}p.error("manager",`Delayed start failed: ${d.config.name}: ${f}`)}})}if(this.instances.length>0){const d=Math.max(0,this.instances.length-g);p.info("manager",`${d}/${c.length} agent(s) running now`)}g>0&&p.warn("manager",`${g} agent(s) still connecting in background`)}if(this.instances.length===0&&c.length>0)throw new Error("All agent configurations failed to start");await this.ensureAuxServices()}async ensureAuxServices(){if(this.stopping||this.configMap.size===0)return;const e=[...this.configMap.values()].map(n=>({apiKey:n.aibot.apiKey,wsUrl:n.aibot.url}));if(!this.upgradeChecker&&(this.upgradeChecker=new me(e,()=>this.hasAnyPendingOrBackgroundWork(),()=>this.closeAllLifecycleAdmission(),{requestGracefulShutdown:this.options.requestGracefulShutdown,reopenLifecycleAdmission:()=>this.reopenAllLifecycleAdmission(),isConnected:()=>this.instances.length===0||this.instances.some(n=>n.getStatus().wsConnected),onTransactionSettled:this.options.onTransactionSettled}),await this.upgradeChecker.start(),this.stopping)){this.upgradeChecker.stop();return}this.skillSyncer||(this.skillSyncer=new fe(e,A.skills),this.skillSyncer.setOnSyncSuccess(()=>this.refreshOwnerLibrarySkills()),await this.skillSyncer.start(),this.stopping&&this.skillSyncer.stop())}refreshOwnerLibrarySkills(){const e=new Map,n=t=>{let s;try{s=t.skillsSyncGroupKey()}catch(c){p.warn("manager",`skillsSyncGroupKey failed for ${t.name}: ${c}`);return}const i=e.get(s)??[];i.push(t),e.set(s,i)};for(const t of this.instances)n(t);for(const t of this.sharedInstances.values())n(t);for(const[t,s]of e){let i=!1;const c=[];for(const o of s){if(i){c.push(o);continue}let g=!1;try{g=o.forceRefreshSkills(void 0,{force:!0,ownerLibrarySync:!0})===!0}catch(a){p.warn("manager",`owner library skills reporter threw group=${t} agent=${o.name}: ${a}`)}if(g){i=!0;continue}p.warn("manager",`owner library skills reporter failed group=${t} agent=${o.name}; trying next`)}if(!i){p.warn("manager",`owner library skills: no reporter succeeded group=${t}`);continue}for(const o of c)try{o.adoptSkillsWireHashFromDisk()}catch(g){p.warn("manager",`adoptSkillsWireHashFromDisk failed for ${o.name}: ${g}`)}}}async stop(){p.info("manager","Stopping all agents..."),this.stopping=!0;const e=Qe(),n=Date.now()+e,t=()=>Math.max(1,n-Date.now()),s=new Set([...this.instances,...this.sharedInstances.values(),...this.startingInstances]);for(const o of s)this.requestStartCancellation(o);const i=new Map([...s].map(o=>[o,this.stopInstance(o,void 0,e)])),c=[];this.upgradeChecker?.stop(),this.skillSyncer?.stop();try{await this.waitForLifecycleDrain([this.mutationTail,...this.shareSyncChains.values(),...i.values()],"manager shutdown lifecycle drain",t())}catch(o){c.push(o)}this.upgradeChecker?.stop(),this.skillSyncer?.stop(),this.shareSyncChains.clear(),await Promise.all([...[...this.instances].map(async o=>{try{await(i.get(o)??this.stopInstance(o,void 0,t())),this.retireInstance(o),this.instances=this.instances.filter(g=>g!==o),this.startingInstances.delete(o)}catch(g){c.push(g)}}),...[...this.sharedInstances.entries()].map(async([o,g])=>{try{await(i.get(g)??this.stopInstance(g,void 0,t())),this.sharedInstances.get(o)===g&&this.sharedInstances.delete(o),this.startingInstances.delete(g)}catch(a){c.push(a)}})]);try{await this.waitForLifecycleDrain([this.retryPendingPlatformDeletesUnlocked(n)],"platform-delete shutdown drain",t())}catch(o){c.push(o)}try{await this.waitForShutdownOperation(Promise.resolve().then(()=>this.globalConfigStore?.flush()),"global config shutdown flush",t())}catch(o){c.push(o)}if(await this.auditProducer.stop({timeoutMs:Math.min(5e3,t())}).catch(()=>!1),B(),c.length>0)throw new AggregateError(c,"Failed to stop all agents completely");p.info("manager","All stopped")}onShareSet(e,n,t){if(this.stopping||this.removingAgents.has(n.name)||!this.isActiveGeneration(e))return;this.sharedOwnersCache.save(n.name,t);const i=(this.shareSyncChains.get(n.name)??Promise.resolve()).catch(()=>{}).then(()=>{if(!(this.stopping||this.removingAgents.has(n.name))&&this.isActiveGeneration(e))return this.syncSharedInstances(n,t,e)});this.shareSyncChains.set(n.name,i)}async syncSharedInstances(e,n,t){if(this.stopping||this.removingAgents.has(e.name)||t&&!this.isActiveGeneration(t))return;const{toAdd:s,toRemove:i}=de(e.name,this.sharedInstances.keys(),n);for(const c of s){if(this.stopping||this.removingAgents.has(e.name)||t&&!this.isActiveGeneration(t))break;const o=he(e.name,c);let g;try{const a=le(e,c);g=new F(a,this.globalConfigStore,this.auditProducer),g.setLifecycleBusyChecker(()=>this.hasAnyPendingOrBackgroundWork()),g.setLifecycleAdmissionCloser(()=>this.closeAllLifecycleAdmission()),g.setLifecycleAdmissionRestorer(()=>this.reopenAllLifecycleAdmission()),this.options.requestGracefulShutdown&&g.setDaemonShutdownRequester(this.options.requestGracefulShutdown),this.lifecycleAdmissionClosed&&g.closeLifecycleAdmission(),this.sharedInstances.set(o,g),await this.startTrackedInstance(g),g.forceRefreshSkills(void 0,{force:!0}),p.info("manager",`shared instance started: ${o}`)}catch(a){if(g&&!this.stopping&&!this.removingAgents.has(e.name))try{await this.stopInstance(g),this.sharedInstances.get(o)===g&&this.sharedInstances.delete(o)}catch(m){p.error("manager",`cleanup shared instance failed ${o}: ${m}`)}const l=a instanceof Error?a.message:String(a);/Auth failed/i.test(l)?(this.sharedOwnersCache.remove(e.name,c),p.warn("manager",`shared instance auth rejected, removed from cache: ${o}`)):p.error("manager",`start shared instance failed ${o}: ${a}`)}}for(const{key:c}of i){const o=this.sharedInstances.get(c);if(o)try{await this.stopInstance(o),this.sharedInstances.get(c)===o&&this.sharedInstances.delete(c),p.info("manager",`shared instance stopped: ${c}`)}catch(g){p.error("manager",`stop shared instance failed ${c}: ${g}`)}}}restoreCachedSharedInstances(e){const n=this.sharedOwnersCache.load(e.name);if(n.length===0)return;const t=this.instances.find(s=>s.name===e.name);!t||!this.isActiveGeneration(t)||(p.info("manager",`restoring ${n.length} cached shared instance(s) for ${e.name}`),this.onShareSet(t,e,n))}getAgentsStatus(){return this.instances.map(e=>e.getStatus())}async addAgent(e){return this.runMutation(()=>this.addAgentUnlocked(e),[String(e.name??"")])}async addAgentUnlocked(e){const n=this.toRuntimeInstanceConfig(e,{quiet:!0});if(this.instances.some(t=>t.name===n.name))throw new Error(`Agent "${n.name}" already exists`);this.configRepository.assertCanAdd(e),await this.addAgentInternal(e,"agents.json",{targetPersisted:!1});try{const t=this.configRepository.insert(e);this.rawConfigMap.set(e.name,t);const s=this.instances.find(c=>c.name===e.name),i=s?this.instanceGenerations.get(s):void 0;if(i){i.persisted=!0;const c=this.configMap.get(e.name);c&&this.restoreCachedSharedInstances(c)}}catch(t){try{await this.removeAgentInternal(e.name)}catch(s){throw new AggregateError([t,s],`Failed to persist and roll back agent "${e.name}"`)}throw t}await this.ensureAuxServices(),p.info("manager",`Added agent: ${e.name}`)}async addAgentInternal(e,n,t){const s=this.toRuntimeInstanceConfig(e);if(this.instances.some(i=>i.name===s.name))throw new Error(`Agent "${s.name}" already exists`);await this.startInstanceFromConfig(s,e,n,t)}createConfiguredInstance(e,n=!0){const t=new F(e,this.globalConfigStore,this.auditProducer);return this.instanceGenerations.set(t,{name:e.name,agentId:e.aibot.agentId,persisted:n,retired:!1,platformDeletedObserved:!1}),t.setUpgradeTrigger(()=>this.upgradeChecker?.triggerCheck()),this.options.requestGracefulShutdown&&t.setDaemonShutdownRequester(this.options.requestGracefulShutdown),t.setLifecycleBusyChecker(()=>this.hasAnyPendingOrBackgroundWork()),t.setLifecycleAdmissionCloser(()=>this.closeAllLifecycleAdmission()),t.setLifecycleAdmissionRestorer(()=>this.reopenAllLifecycleAdmission()),this.lifecycleAdmissionClosed&&t.closeLifecycleAdmission(),t.setInstallAgentHandler(s=>this.installAgent(s)),t.setRemoteAdminPorts({isEnabled:()=>this.remoteAdminGate?.()??!1,listInstallable:()=>this.listInstallable(),installAgent:s=>this.installAgent(s),getInstallProgress:s=>this.getInstallProgress(s),addAgent:s=>this.addAgent(s),probeAll:s=>this.probeAll(s)}),t.setShareSetHandler(s=>this.onShareSet(t,e,s)),t.setAgentDeletedHandler(()=>this.onAgentDeletedByPlatform(t)),t.setSkillSyncHandler(()=>this.skillSyncer?.triggerSync()),t.setProviderConfigHandler(s=>this.setAgentProvider(e.name,s)),t.setRelayStateApplyPorts({getLocalState:()=>this.relayStateApplier?.getLocalState(e.name)??{enabled:!1},applyEnable:(s,i)=>{const c=this.relayStateApplier;return c?c.applyEnable(e.name,s,i):Promise.reject(new Error("relay state applier is not configured"))},applyDisable:()=>{const s=this.relayStateApplier;return s?s.applyDisable(e.name):Promise.reject(new Error("relay state applier is not configured"))}}),t.setRelayEnvSettledHandler(()=>this.relayEnvSettledHandler?.()),t.setProviderResolver(()=>X(this.getAgentProvider(e.name))),t}hasAnyPendingOrBackgroundWork(){return this.instances.some(e=>e.hasPendingOrBackgroundWork())||[...this.sharedInstances.values()].some(e=>e.hasPendingOrBackgroundWork())}closeAllLifecycleAdmission(){this.lifecycleAdmissionClosed=!0;for(const e of this.instances)e.closeLifecycleAdmission();for(const e of this.sharedInstances.values())e.closeLifecycleAdmission()}reopenAllLifecycleAdmission(){if(!this.stopping){this.lifecycleAdmissionClosed=!1;for(const e of this.instances)e.openLifecycleAdmission();for(const e of this.sharedInstances.values())e.openLifecycleAdmission()}}async prepareProviderRuntime(e,n){const t=this.resolveAgentProvider(n.provider);W(n.client_type)&&t?.base_url?.trim()&&t?.api_key?.trim()&&t?.model?.trim()&&await Q(e.name,{baseUrl:t.base_url.trim(),apiKey:t.api_key.trim(),model:t.model.trim()})}async startInstanceFromConfig(e,n,t,s){if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});if(await this.prepareProviderRuntime(e,n),this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"MANAGER_STOPPING"});const i=this.createConfiguredInstance(e,s.targetPersisted);this.instances.push(i);const c=this.startTrackedInstance(i),o=Y(),g=await new Promise(h=>{let d=!1;const u=setTimeout(()=>{d||(d=!0,h({kind:"timeout"}))},o);c.then(()=>{d||(d=!0,clearTimeout(u),h({kind:"started"}))},f=>{d||(d=!0,clearTimeout(u),h({kind:"failed",error:f}))})}),a=this.instanceGenerations.get(i);if(a?.platformDeletedObserved&&!a.persisted){const h=new ge(`Agent "${e.name}" was deleted before its local configuration commit`);try{await this.stopInstance(i),this.retireInstance(i),this.instances=this.instances.filter(d=>d!==i),this.failedStartAgents.delete(e.name)}catch(d){throw this.failedStartAgents.add(e.name),new AggregateError([h,d],`Failed to clean up uncommitted deleted agent "${e.name}"`)}throw h}if(g.kind==="started"){this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t}),this.failedStartAgents.delete(e.name),s.targetPersisted&&this.restoreCachedSharedInstances(e),this.relayEnvSettledHandler?.();return}if(g.kind==="timeout"){this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t}),p.warn("manager",`Start pending for ${e.name}, continue retrying in background`),c.then(async()=>{if(!this.removingAgents.has(e.name)&&this.isActiveGeneration(i)){if(this.stopping){try{await this.stopInstance(i),this.instances=this.instances.filter(h=>h!==i)}catch(h){this.failedStartAgents.add(e.name),p.error("manager",`Failed to stop late-started ${e.name}: ${h}`)}return}this.failedStartAgents.delete(e.name),this.instanceGenerations.get(i)?.persisted&&this.restoreCachedSharedInstances(e),this.relayEnvSettledHandler?.(),p.info("manager",`Delayed start succeeded: ${e.name}`)}},async h=>{if(C(h)){this.onAgentDeletedByPlatform(i);return}if(!(this.stopping||this.removingAgents.has(e.name))&&this.isActiveGeneration(i)){try{await this.stopInstance(i),this.instances=this.instances.filter(d=>d!==i),this.failedStartAgents.delete(e.name)}catch(d){this.failedStartAgents.add(e.name),p.error("manager",`Failed to clean up delayed start ${e.name}: ${d}`)}p.error("manager",`Delayed start failed ${e.name}: ${h}`)}}).catch(h=>{p.error("manager",`Delayed start finalizer failed ${e.name}: ${h}`)});return}const l=g.error;C(l)&&this.onAgentDeletedByPlatform(i);let m;try{await this.stopInstance(i),this.instances=this.instances.filter(h=>h!==i),this.failedStartAgents.delete(e.name)}catch(h){m=h,this.failedStartAgents.add(e.name)}throw s.targetPersisted&&(this.configMap.set(e.name,e),this.rawConfigMap.set(e.name,{entry:n,file:t})),m!==void 0?new AggregateError([l,m],`Failed to start and clean up agent "${e.name}"`):l}async removeAgent(e){return this.runMutation(()=>this.removeAgentUnlocked(e),[e])}async removeAgentUnlocked(e){if(!(this.instances.some(t=>t.name===e)||this.rawConfigMap.has(e)||[...this.sharedInstances.keys()].some(t=>t.startsWith(`${e}#shared:`))))throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});this.configRepository.remove(e),await this.removeAgentInternal(e),p.info("manager",`Removed agent: ${e}`),this.relayEnvSettledHandler?.()}async removeAgentInternal(e,n){this.removingAgents.add(e);try{const t=()=>n?.deadlineMs===void 0?E():Math.max(1,n.deadlineMs-Date.now()),s=this.instances.findIndex(h=>h.name===e),i=s===-1?void 0:this.instances[s],c=`${e}#shared:`,o=n?.keepShareCache?void 0:{dropPendingEvents:!0},g=new Map;i&&(this.requestStartCancellation(i),this.startingInstances.has(i)&&g.set(i,this.stopInstance(i,o,t())));for(const[h,d]of this.sharedInstances)h.startsWith(c)&&(this.requestStartCancellation(d),this.startingInstances.has(d)&&g.set(d,this.stopInstance(d,o,t())));const a=this.shareSyncChains.get(e);this.shareSyncChains.delete(e);const l=[];try{await this.waitForLifecycleDrain([...a?[a]:[],...g.values()],`agent "${e}" shared lifecycle drain`,t())}catch(h){l.push(h)}const m=[];for(const[h,d]of[...this.sharedInstances.entries()])h.startsWith(c)&&m.push((g.get(d)??this.stopInstance(d,o,t())).then(()=>{this.sharedInstances.get(h)===d&&this.sharedInstances.delete(h),this.startingInstances.delete(d)}).catch(u=>{l.push(u),p.error("manager",`stop shared instance failed ${h}: ${u}`)}));if(i)try{await(g.get(i)??this.stopInstance(i,o,t())),this.retireInstance(i);const h=this.instances.indexOf(i);h!==-1&&this.instances.splice(h,1),this.startingInstances.delete(i)}catch(h){l.push(h)}if(await Promise.all(m),!n?.keepShareCache){const h=K(e).catch(()=>{});if(n?.deadlineMs===void 0)await h;else try{await this.waitForLifecycleDrain([h],`agent "${e}" relay shutdown`,t())}catch(d){l.push(d)}}if(l.length>0)throw new AggregateError(l,`Failed to stop agent "${e}" completely`);this.configMap.delete(e),this.rawConfigMap.delete(e),this.failedStartAgents.delete(e),n?.keepShareCache||this.sharedOwnersCache.delete(e)}finally{this.removingAgents.delete(e)}}onAgentDeletedByPlatform(e){const n=this.instanceGenerations.get(e);if(!n||(n.platformDeletedObserved=!0,this.requestStartCancellation(e),!n.persisted))return;const t={source:e,name:n.name,agentId:n.agentId};this.pendingPlatformDeletes.set(e,t),!this.stopping&&(this.deletedAgentCleanups.has(e)||(this.deletedAgentCleanups.add(e),this.runMutation(async()=>{}).catch(()=>{}).finally(()=>{this.deletedAgentCleanups.delete(e)})))}async retryPendingPlatformDeletesUnlocked(e){if(this.pendingPlatformDeletes.size!==0)for(const[n,t]of[...this.pendingPlatformDeletes])try{await this.cleanupPlatformDeletedUnlocked(t,e),this.pendingPlatformDeletes.delete(n)}catch(s){p.error("manager",`cleanup for deleted agent "${t.name}" failed: ${s}`)}}async cleanupPlatformDeletedUnlocked(e,n){const{source:t,name:s,agentId:i}=e,c=this.instances.find(m=>m.name===s),o=c?this.instanceGenerations.get(c)?.agentId??String(this.rawConfigMap.get(s)?.entry.agent_id??"").trim():void 0;if(c&&c!==t&&o!==i)return;p.warn("manager",`Agent "${s}" \u5DF2\u5728\u5E73\u53F0\u5220\u9664\uFF0C\u505C\u6B62\u5B9E\u4F8B\u5E76\u6E05\u7406\u672C\u5730\u914D\u7F6E`);const g=this.rawConfigMap.get(s),a=this.configMap.get(s),l=[];if(c&&o===i)try{await this.removeAgentInternal(s,{deadlineMs:n})}catch(m){l.push(m)}try{const m=this.configRepository.scan();if(m.fileErrors.length>0){const u=m.fileErrors.map(f=>`${f.file}: ${f.error}`).join("; ");throw new Error(`cannot inspect deleted agent generation [${u}]`)}const h=m.entries.filter(u=>String(u.entry?.name??"").trim()===s);if(!h.some(u=>String(u.entry?.agent_id??"").trim()!==i)&&h.length>0&&this.configRepository.remove(s),l.length===0){const u=String(this.rawConfigMap.get(s)?.entry.agent_id??"").trim();(!u||u===i)&&(this.rawConfigMap.delete(s),this.configMap.delete(s),this.failedStartAgents.delete(s))}}catch(m){l.push(m),g&&this.rawConfigMap.set(s,g),a&&this.configMap.set(s,a)}if(l.length>0)throw new AggregateError(l,`Failed to fully clean up deleted agent "${s}"`);p.info("manager",`Agent "${s}" \u5DF2\u5728\u5E73\u53F0\u5220\u9664\uFF0C\u672C\u5730\u914D\u7F6E\u5DF2\u6E05\u7406`)}isAgentBusy(e){return this.instances.find(t=>t.name===e)?.hasPendingWork()??!1}getAgentsWithStaleRelayEnv(){return this.instances.filter(e=>e.hasStaleRelayEnv()).map(e=>e.name)}markAgentRelayEnvStale(e){const n=this.instances.find(t=>t.name===e);return n?(n.markRelayEnvStale(),!0):!1}relayEnvSettledHandler;setRelayEnvSettledHandler(e){this.relayEnvSettledHandler=e}remoteAdminGate;setRemoteAdminGate(e){this.remoteAdminGate=e}relayStateApplier;setRelayStateApplier(e){this.relayStateApplier=e}reportRelayStateLocalChange(e){this.instances.find(t=>t.name===e)?.reportRelayStateLocalChange()}setRelaySecretResolver(e){this.relaySecretResolver=e}resolveAgentProvider(e){if(!e?.api_key_ref?.trim())return e;const n=e.api_key_ref.trim(),t=this.relaySecretResolver?.(n);if(!t)throw Object.assign(new Error(`relay credential "${n}" is unavailable`),{code:"RELAY_SECRET_UNAVAILABLE"});return{...e,api_key:t}}toRuntimeInstanceConfig(e,n={}){const t=this.resolveAgentProvider(e.provider);return We(t===e.provider?e:{...e,provider:t},n)}getAgentProvider(e){return this.resolveAgentProvider(this.rawConfigMap.get(e)?.entry.provider)}async restartAgent(e){return this.runMutation(()=>this.restartAgentUnlocked(e),[e])}async restartAgentUnlocked(e){const n=this.rawConfigMap.get(e);if(!n)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});await this.replaceInstance(e,n.entry,n.file),p.info("manager",`Restarted agent: ${e}`)}async setAgentProvider(e,n,t){return this.runMutation(()=>this.setAgentProviderUnlocked(e,n,t),[e])}async setAgentProviderUnlocked(e,n,t){if(!this.rawConfigMap.get(e))throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});const i=n?.api_key_ref?.trim()?Object.fromEntries(Object.entries(n).filter(([a])=>a!=="api_key")):n,c=this.configRepository.updateExisting(e,a=>{const l={...a};return i===void 0?delete l.provider:l.provider=i,this.toRuntimeInstanceConfig(l,{quiet:!0}),l}),o=c.entry;this.rawConfigMap.set(e,c);const g=String(o.client_type??"").trim().toLowerCase();try{W(g)&&(n?.base_url?.trim()&&n?.api_key?.trim()&&n?.model?.trim()?await Q(e,{baseUrl:n.base_url.trim(),apiKey:n.api_key.trim(),model:n.model.trim()}):await K(e))}catch(a){throw this.failedStartAgents.add(e),this.instances.find(l=>l.name===e)?.markRelayEnvStale(),a}if(t?.deferRestart){this.instances.find(a=>a.name===e)?.markRelayEnvStale(),p.info("manager",`Updated provider config for agent (deferred restart): ${e}`);return}try{await this.replaceInstance(e,o,c.file)}catch(a){throw this.failedStartAgents.add(e),this.instances.find(l=>l.name===e)?.markRelayEnvStale(),a}p.info("manager",`Updated provider config for agent: ${e}`)}hasDirectRelayConfig(e){const n=this.rawConfigMap.get(e)?.entry.provider;return!!(n?.api_key_ref?.trim()||n?.api_key?.trim())}getDirectRelayConfigAgentNames(){return[...this.rawConfigMap.entries()].filter(([,e])=>!!e.entry.provider&&(Ie(e.entry.client_type)||["claude","codex"].includes(String(e.entry.client_type??"").trim().toLowerCase()))).map(([e])=>e)}async fetchRelayCredential(e,n){const t=this.instances.find(s=>s.name===e);if(!t)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});return t.fetchRelayCredential(n)}async clearDirectProviderConfigs(){const e=this.getDirectRelayConfigAgentNames(),n=[];for(const t of e)try{await this.setAgentProvider(t,void 0,{deferRestart:this.isAgentBusy(t)}),n.push(t)}catch(s){p.warn("manager",`Failed to clear provider config for "${t}": ${s instanceof Error?s.message:String(s)}`)}return n}async replaceInstance(e,n,t){const s=this.toRuntimeInstanceConfig(n);try{await this.removeAgentInternal(e,{keepShareCache:!0})}catch(o){throw this.failedStartAgents.add(e),o}const i=String(n.agent_id??"").trim();if([...this.pendingPlatformDeletes.values()].some(o=>o.name===e&&o.agentId===i))throw await this.retryPendingPlatformDeletesUnlocked(),Object.assign(new Error(`Agent "${e}" was permanently deleted while its instance was stopping`),{code:"AGENT_DELETE_PENDING"});try{await this.startInstanceFromConfig(s,n,t,{targetPersisted:!0})}catch(o){throw this.configMap.set(e,s),this.rawConfigMap.set(e,{entry:n,file:t}),o}}async reload(){return this.runMutation(()=>this.doReload())}async doReload(){if(this.stopping)throw Object.assign(new Error("manager is stopping"),{code:"RELOAD_UNSAFE"});const{entries:e,fileErrors:n,skipped:t}=this.configRepository.scan();for(const a of t)p.info("manager",`reload: skipped ${a}: not an agent config (no "agents" key)`);if(n.length>0){const a=n.map(l=>`${l.file}: ${l.error}`).join("; ");throw Object.assign(new Error(`reload aborted: ${n.length} config file(s) failed to parse [${a}]`),{code:"RELOAD_UNSAFE"})}if(e.length===0)throw Object.assign(new Error("reload aborted: no valid agent config found"),{code:"RELOAD_UNSAFE"});const s=[];for(const{entry:a}of e)try{this.toRuntimeInstanceConfig(a,{quiet:!0})}catch(l){const m=a?.name,h=typeof m=="string"&&m.trim()?m:"<unknown>";s.push({name:h,error:l instanceof Error?l.message:String(l)})}if(s.length>0){const a=s.map(l=>`${l.name}: ${l.error}`).join("; ");throw Object.assign(new Error(`reload aborted: ${s.length} agent config(s) invalid [${a}]`),{code:"RELOAD_UNSAFE"})}const i=new Map,c=new Set([...this.pendingPlatformDeletes.values()].map(a=>a.name));for(const a of e){const l=String(a.entry?.name??"").trim();l&&(c.has(l)||(i.has(l)&&p.warn("manager",`reload: duplicate agent name "${l}", last one wins`),i.set(l,a)))}const o={added:[],removed:[],restarted:[],unchanged:[],failed:[]},g=new Set([...this.rawConfigMap.keys()].filter(a=>!c.has(a)));for(const a of g)if(!i.has(a))try{await this.removeAgentInternal(a),o.removed.push(a)}catch(l){o.failed.push({name:a,error:l instanceof Error?l.message:String(l)})}for(const[a,l]of i){const m=this.rawConfigMap.get(a);if(m)if(!Ke(m.entry,l.entry)||!this.instances.some(h=>h.name===a)||this.failedStartAgents.has(a))try{await this.replaceInstance(a,l.entry,l.file),o.restarted.push(a)}catch(h){o.failed.push({name:a,error:h instanceof Error?h.message:String(h)})}else this.rawConfigMap.set(a,l),o.unchanged.push(a);else try{await this.addAgentInternal(l.entry,l.file,{targetPersisted:!0}),o.added.push(a)}catch(h){o.failed.push({name:a,error:h instanceof Error?h.message:String(h)})}}return p.info("manager",`reload done: +${o.added.length} -${o.removed.length} ~${o.restarted.length} =${o.unchanged.length} !${o.failed.length}`),await this.ensureAuxServices(),o}async checkUpgrade(){return this.upgradeChecker?this.upgradeChecker.checkForUpdate():{available:!1}}triggerUpgrade(){this.upgradeChecker?.triggerCheck()}async probeAll(e={}){return ze(this.instances,e)}async probeOne(e,n={}){return Ve(this.instances,e,n)}listInstallable(){return this.installer.listInstallable()}async installAgent(e){const n=await this.installer.install(e);return Me(n),n}getInstallProgress(e){return this.installer.getProgress(e)??null}}async function ze(r,e){const n=e.concurrency??4,t=Date.now(),s=new Array(r.length);await new Promise(a=>{let l=0,m=0;const h=r.length;if(h===0){a();return}function d(_){const y=r[_];y.probe(e).then(S=>{s[_]=S,u()},S=>{s[_]={agent_name:y.name,client_type:"unknown",adapter_type:"acp",ok:!1,status:"error",probed_at:Date.now(),duration_ms:0,cached:!1,cli:{command:"",installed:!1,path:null,version:null,error:{code:"internal",message:S?.message??String(S)}},conversation:{attempted:!1,ok:!1,latency_ms:null},config:{model:null,base_url:null,source:{model:"unknown",base_url:"unknown"}},process:{started:!1,alive:!1,busy:!1}},u()})}function u(){m++,l<h?d(l++):m===h&&a()}const f=Math.min(n,h);for(let _=0;_<f;_++)d(l++)});const i=s.filter(a=>a.status==="healthy").length,c=s.filter(a=>a.status==="degraded").length,o=s.filter(a=>a.status==="unavailable").length,g=await z();return{ok:i===s.length&&s.length>0,total:s.length,healthy:i,degraded:c,unavailable:o,installed_clients:g,agents:s,probed_at:t,duration_ms:Date.now()-t}}async function Ve(r,e,n){const t=r.find(s=>s.name===e);if(!t)throw Object.assign(new Error(`Agent "${e}" not found`),{code:"NOT_FOUND"});return t.probe(n)}export{vt as Manager,X as normalizeAgentProviderForRuntime,z as probeInstalledClientCommands,ze as probeInstances,Ve as probeOneInstance};

package/dist/mcp/stream-http/security.js

@@ -1 +1 @@
-function a(e){const t=new Set([`http://127.0.0.1:${e.serverPort}`,`http://localhost:${e.serverPort}`,...e.allowedOrigins]),o=new Set([`127.0.0.1:${e.serverPort}`,`localhost:${e.serverPort}`,...e.allowedHosts]);return{validateRequest(s){const r=i(s,t);if(!r.ok)return r;const n=l(s,o);return n.ok?{ok:!0}:n}}}function i(e,t){const o=e.headers.origin;return o?t.has(o)?{ok:!0}:{ok:!1,statusCode:403,message:`Origin not allowed: ${o}`}:{ok:!0}}function l(e,t){const o=e.headers.host;return o?t.has(o)?{ok:!0}:{ok:!1,statusCode:403,message:`Host not allowed: ${o}`}:{ok:!1,statusCode:403,message:"Missing Host header"}}export{a as createSecurityPolicy};
+function a(t){const o=new Set([`http://127.0.0.1:${t.serverPort}`,`http://localhost:${t.serverPort}`,...t.allowedOrigins]),e=new Set([`127.0.0.1:${t.serverPort}`,`localhost:${t.serverPort}`,...t.allowedHosts]);return{validateRequest(s){const r=i(s,o);if(!r.ok)return r;const n=l(s,e);return n.ok?{ok:!0}:n}}}function i(t,o){const e=t.headers.origin;return e?o.has(e)?{ok:!0}:{ok:!1,statusCode:403,message:`Origin not allowed: ${e}`}:{ok:!0}}function l(t,o){const e=t.headers.host;return e?o.has(e)?{ok:!0}:{ok:!1,statusCode:403,message:`Host not allowed: ${e}`}:{ok:!1,statusCode:403,message:"Missing Host header"}}export{a as createSecurityPolicy};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "grix-connector",
-  "version": "4.7.1",
+  "version": "4.9.0",
   "description": "Connect local AI coding agents (Claude, Codex, Gemini, Qwen, DeepSeek, Cursor, OpenCode, Pi, OpenHuman, Reasonix) to the Grix scheduling platform. Also serves as an OpenClaw plugin for Grix channel transport.",
   "type": "module",
   "main": "dist/index.js",