howtofixcli 0.7.14 → 0.7.16

package/dist/chunk-BX5KIC4R.js

@@ -0,0 +1,2 @@
+import{a as x}from"./chunk-UTYFLLSM.js";import{g as P,j as M}from"./chunk-MVTU4M3W.js";import{existsSync as z,readFileSync as ye}from"node:fs";import{join as xe}from"node:path";import{createHash as J,randomBytes as G}from"node:crypto";import{createServer as ne}from"node:http";import{execFileSync as X}from"node:child_process";import{createHmac as Q}from"node:crypto";import{readFileSync as ee}from"node:fs";import{arch as N,cpus as $,hostname as O,platform as _,userInfo as H}from"node:os";var te="howtofix-cli-hwid-v1";function v(e){try{let t=ee(e,"utf8").trim();return t.length>0?t:void 0}catch{return}}function F(e,t){try{let r=X(e,t,{encoding:"utf8",timeout:3e3,stdio:["ignore","pipe","ignore"]});return r.trim().length>0?r.trim():void 0}catch{return}}function re(){let e=_();if(e==="linux"){let t=v("/etc/machine-id");if(t)return{value:t,source:"machine-id",strong:!0};let r=v("/var/lib/dbus/machine-id");if(r)return{value:r,source:"dbus-machine-id",strong:!0};let s=v("/sys/class/dmi/id/product_uuid");return s?{value:s,source:"dmi-product-uuid",strong:!0}:void 0}if(e==="win32"){let r=F("reg",["query","HKLM\\SOFTWARE\\Microsoft\\Cryptography","/v","MachineGuid"])?.match(/MachineGuid\s+REG_SZ\s+(\S+)/i);return r?.[1]?{value:r[1],source:"windows-machine-guid",strong:!0}:void 0}if(e==="darwin"){let r=F("ioreg",["-rd1","-c","IOPlatformExpertDevice"])?.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);return r?.[1]?{value:r[1],source:"platform-uuid",strong:!0}:void 0}}function U(){let e=re(),t=e?.value??[O(),_(),N(),H().username].join("\0"),r=e?.source??"hostname";return{id:Q("sha256",te).update(t).digest("hex").slice(0,32),source:r,strong:e?.strong??!1}}function j(e){return[e.id,e.source,O(),_(),N(),H().username,String($().length),$()[0]?.model??""]}var I="https://howtofix.id",se=300*1e3,L=3e3,K="/callback";function A(e){return e.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function oe(){return A(G(32))}function ie(e){return A(J("sha256").update(e).digest())}function ae(){return A(G(16))}var ce="howtofix-cli-",ue="x-howtofix-client",le="cli";function C(e){let t=e??j(U());return ce+J("sha256").update(t.join("\0")).digest("hex").slice(0,32)}function de(){return{"content-type":"application/json",[ue]:le}}var fe=()=>new Promise((e,t)=>{let r=ne();r.once("error",t),r.listen(0,"127.0.0.1",()=>{let{port:s}=r.address();e({port:s,close:()=>r.close(),waitForCode:(o,n)=>new Promise((i,a)=>{let c=(l,m)=>{let h=new URL(l.url??"/","http://127.0.0.1");if(h.pathname!==K){m.writeHead(404).end("not found");return}let y=(V,Z)=>m.writeHead(200,{"content-type":"text/html; charset=utf-8"}).end(`<!doctype html><meta charset="utf-8"><h2>${V}</h2><p>${Z}</p>`),T=h.searchParams.get("error")??"",R=h.searchParams.get("code")??"",Y=h.searchParams.get("state")??"";if(T){y("Sign-in was refused","You can close this tab."),u(new Error(`the browser reported: ${T}`));return}if(!R||Y!==o){y("This callback did not belong to the login","You can close this tab."),u(new Error("the callback carried the wrong state"));return}y("Signed in","You can close this tab and go back to HowToFix."),u(void 0,R)},u=(l,m)=>{r.off("request",c),n?.removeEventListener("abort",f),l?a(l):i(m)},f=()=>u(new Error("cancelled"));n?.addEventListener("abort",f,{once:!0}),r.on("request",c)})})})});function k(e,t){e.onProgress?.(t)}async function g(e,t,r,s){let o=await e(t,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(r),signal:s}),n={};try{n=await o.json()}catch{}let i=Number(o.headers?.get?.("retry-after"));return{status:o.status,body:n,retryAfterSeconds:Number.isFinite(i)&&i>0?i:void 0}}function d(...e){for(let t of e)if(typeof t=="string"&&t.trim()!=="")return t.trim()}function D(...e){for(let t of e)if(typeof t=="number"&&Number.isFinite(t))return t;return 0}function me(e){try{let t=new URL(e).searchParams.get("code");return t&&t.trim()!==""?t.trim():void 0}catch{return}}async function pe(e,t,r){let s=await e(t,{headers:de(),signal:r}),o={};try{o=await s.json()}catch{}let n=Number(s.headers?.get?.("retry-after"));return{status:s.status,body:o,retryAfterSeconds:Number.isFinite(n)&&n>0?n:void 0}}function S(e){let t=e.data,r=[e.token,e.api_key,e.apiKey,e.key,t?.token,t?.api_key,t?.apiKey,t?.key];for(let s of r)if(typeof s=="string"&&s.trim().startsWith("sk-"))return s.trim()}function ge(e){let t=e.data,r=d(e.token,t?.token),s=d(e.refresh_token,t?.refresh_token),o=d(e.device_id,t?.device_id);if(!r||!s||!o)return;let n=D(e.access_expires_at,t?.access_expires_at),i=D(e.refresh_expires_at,t?.refresh_expires_at);return{accessToken:r,accessExpiresAt:n,refreshToken:s,deviceId:o,refreshExpiresAt:i}}function p(e,t){let r=e.message??e.error;return typeof r=="string"&&r.trim()?r.trim():t}async function Oe(e){let t=e.fetchImpl??fetch,r=(e.panelUrl??I).replace(/\/+$/,""),s=e.timeoutMs??se,o={...e,panel:r,fetchImpl:t,timeoutMs:s},n=await ke(o);if(n.ok||n.terminal)return n.result;let i=await he(o);if(i.ok||i.terminal)return i.result;let a=await we(o);return a.ok?a:{ok:!1,message:`${n.result.ok?"":n.result.message}; ${i.result.ok?"":i.result.message}; ${a.message}. howtofix.id does not offer a browser login a local client can complete yet \u2014 run /connect and paste a token from ${r}/keys instead.`}}async function he(e){let t=oe(),r=ae(),s;try{s=await(e.loopback??fe)();let o=`http://127.0.0.1:${s.port}${K}`,n=await g(e.fetchImpl,`${e.panel}/api/oauth/device/start`,{redirect_uri:o,code_challenge:ie(t),code_challenge_method:"S256",state:r},e.signal);if(n.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no loopback login endpoint"}};if(n.status>=400)return{ok:!1,terminal:!1,result:{ok:!1,message:p(n.body,`the panel refused the login (${n.status})`)}};let i=typeof n.body.authorize_url=="string"?n.body.authorize_url:"";if(!i)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not say where to send the browser"}};k(e,{kind:"browser",url:i});let a=await be(s.waitForCode(r,e.signal),e.timeoutMs),c=await g(e.fetchImpl,`${e.panel}/api/oauth/device/token`,{flow_token:n.body.flow_token,code:a,code_verifier:t},e.signal);if(c.status>=400)return{ok:!1,terminal:!0,result:{ok:!1,message:p(c.body,`the panel refused the exchange (${c.status})`)}};let u=S(c.body);return u?{ok:!0,result:{ok:!0,token:u}}:{ok:!1,terminal:!0,result:{ok:!1,message:"the panel did not return an API key"}}}catch(o){let n=o instanceof Error?o.message:String(o);return{ok:!1,terminal:n==="cancelled",result:{ok:!1,message:n}}}finally{s?.close()}}async function ke(e){let t=e.pollIntervalMs??L,r=e.fingerprintId??C(),s=e.clientInfo??P(),o=M(r,s);try{let n=await g(e.fetchImpl,`${e.panel}/api/auth/cli/code`,{fingerprintId:r,clientInfo:s,...o},e.signal);if(n.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no CLI login endpoint"}};if(n.status===401)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not recognise this build as the HowToFix CLI \u2014 update it with `npm install -g howtofixcli@latest`"}};if(n.status===429)return{ok:!1,terminal:!0,result:{ok:!1,message:`too many sign-in attempts from this machine right now.${n.retryAfterSeconds?` Try again in ${Math.ceil(n.retryAfterSeconds/60)} minute(s).`:""}`}};if(n.status>=400)return{ok:!1,terminal:!1,result:{ok:!1,message:p(n.body,`the panel refused the login (${n.status})`)}};let i=n.body.data??{},a=d(n.body.login_url,i.login_url),c=d(n.body.code,i.code)??(a?me(a):void 0),u=d(n.body.secret,i.secret);return!a||!c?{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not return a login URL"}}:u?(k(e,{kind:"browser",url:a}),await q(e,c,u)):(k(e,{kind:"browser",url:a}),await q(e,c,void 0))}catch(n){let i=n instanceof Error?n.message:String(n);return{ok:!1,terminal:i==="cancelled",result:{ok:!1,message:i}}}}async function q(e,t,r){let s=e.pollIntervalMs??L,o=Date.now()+e.timeoutMs;for(;Date.now()<o;){await w(s,e.signal);let n=new URLSearchParams(r?{code:t,secret:r}:{code:t});n.set("capability","device-refresh");let i=await pe(e.fetchImpl,`${e.panel}/api/auth/cli/status?${n}`,e.signal);if(i.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no CLI login status endpoint"}};if(i.status===403)return{ok:!1,terminal:!0,result:{ok:!1,message:"the panel rejected this poll \u2014 run /connect again"}};if(i.status===429){let u=Math.min(Math.max(i.retryAfterSeconds??5,1)*1e3,3e4);await w(u,e.signal);continue}let a=S(i.body);if(a)return{ok:!0,result:{ok:!0,token:a,credential:ge(i.body)}};if(d(i.body.data?.status,i.body.status)==="expired")return{ok:!1,terminal:!0,result:{ok:!1,message:"the sign-in link expired before it was approved"}};if(i.status>=400)return{ok:!1,terminal:!0,result:{ok:!1,message:p(i.body,`the panel refused the poll (${i.status})`)}}}return{ok:!1,terminal:!0,result:{ok:!1,message:"the sign-in was not approved in time"}}}async function we(e){let t=e.pollIntervalMs??L;try{let r=await g(e.fetchImpl,`${e.panel}/api/oauth/device`,{},e.signal);if(r.status===404)return{ok:!1,message:"the panel has no device-code endpoint"};if(r.status>=400)return{ok:!1,message:p(r.body,`the panel refused the request (${r.status})`)};let s=typeof r.body.device_code=="string"?r.body.device_code:"",o=typeof r.body.user_code=="string"?r.body.user_code:"",n=typeof r.body.verification_uri=="string"?r.body.verification_uri:`${e.panel}/oauth/device`;if(!s||!o)return{ok:!1,message:"the panel did not return a code to show"};k(e,{kind:"code",code:o,url:n});let i=Date.now()+e.timeoutMs;for(;Date.now()<i;){await w(t,e.signal);let a=await g(e.fetchImpl,`${e.panel}/api/oauth/device/poll`,{device_code:s},e.signal);if(a.status===404)return{ok:!1,message:"the panel has no device-code poll endpoint"};let c=typeof a.body.status=="string"?a.body.status:"";if(c==="pending")continue;if(c==="slow_down"){await w(t,e.signal);continue}if(c==="denied")return{ok:!1,message:"the sign-in was refused in the browser"};if(c==="expired")return{ok:!1,message:"the code expired; run /connect again"};let u=S(a.body);if(u)return{ok:!0,token:u};if(a.status>=400)return{ok:!1,message:p(a.body,`the panel refused the poll (${a.status})`)}}return{ok:!1,message:"the code was not approved in time"}}catch(r){return{ok:!1,message:r instanceof Error?r.message:String(r)}}}function be(e,t){return new Promise((r,s)=>{let o=setTimeout(()=>s(new Error("the sign-in was not finished in time")),t);e.then(n=>{clearTimeout(o),r(n)},n=>{clearTimeout(o),s(n)})})}function w(e,t){return new Promise((r,s)=>{let o=setTimeout(r,e);t?.addEventListener("abort",()=>{clearTimeout(o),s(new Error("cancelled"))},{once:!0})})}function b(e){return xe(e,"cli-credentials.json")}var ve=300*1e3;function _e(e,t=Date.now()){return e.accessToken?!Number.isFinite(e.accessExpiresAt)||e.accessExpiresAt<=0?!0:e.accessExpiresAt*1e3-ve>t:!1}function Ie(e,t=Date.now()){return!e.refreshToken||!e.deviceId?!1:!Number.isFinite(e.refreshExpiresAt)||e.refreshExpiresAt<=0?!0:e.refreshExpiresAt*1e3>t}function Je(e){let t=b(e);if(!z(t))return;let r;try{r=JSON.parse(ye(t,"utf8"))}catch{return}if(!r||typeof r!="object"||Array.isArray(r))return;let s=r,o=typeof s.accessToken=="string"?s.accessToken.trim():"",n=typeof s.refreshToken=="string"?s.refreshToken.trim():"",i=typeof s.deviceId=="string"?s.deviceId.trim():"";if(!(!o||!n||!i))return{accessToken:o,accessExpiresAt:W(s.accessExpiresAt),refreshToken:n,deviceId:i,refreshExpiresAt:W(s.refreshExpiresAt)}}function Le(e,t){try{return x(b(e),`${JSON.stringify(t,null,2)}
+`,{mode:384}),!0}catch{return!1}}function Ae(e){try{let t=b(e);z(t)&&x(t,"",{mode:384})}catch{}}function W(e){return typeof e=="number"&&Number.isFinite(e)?e:0}async function Ce(e,t){let r=(t?.panelUrl??I).replace(/\/+$/,""),s=t?.fetchImpl??fetch,o=t?.timeoutMs??15e3,n=new AbortController,i=setTimeout(()=>n.abort(),o);try{let a=await s(`${r}/api/auth/cli/refresh`,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({device_id:e.deviceId,refresh_token:e.refreshToken,fingerprint_id:C()}),signal:n.signal}),c=await a.json().catch(()=>({}));if(a.status===401||a.status===403)return{ok:!1,terminal:!0,message:"this sign-in is no longer valid \u2014 run /connect to sign in again"};if(!a.ok)return{ok:!1,terminal:!1,message:`the panel refused the renewal (${a.status})`};let u=c.data??{},f=E(c.token,u.token),l=E(c.refresh_token,u.refresh_token),m=E(c.device_id,u.device_id)??e.deviceId;return!f||!l?{ok:!1,terminal:!1,message:"the panel did not return a renewed credential"}:{ok:!0,terminal:!1,credential:{accessToken:f,accessExpiresAt:B(c.access_expires_at,u.access_expires_at),refreshToken:l,deviceId:m,refreshExpiresAt:B(c.refresh_expires_at,u.refresh_expires_at)}}}catch(a){return{ok:!1,terminal:!1,message:a instanceof Error&&a.name==="AbortError"?`the panel did not answer within ${Math.round(o/1e3)}s`:"could not reach the panel"}}finally{clearTimeout(i)}}function E(...e){for(let t of e)if(typeof t=="string"&&t.trim())return t.trim()}function B(...e){for(let t of e)if(typeof t=="number"&&Number.isFinite(t))return t;return 0}async function Ge(e,t,r){let s=r?.now??Date.now();if(_e(t,s)||!Ie(t,s))return{credential:t,renewed:!1,terminal:!1};let o=await Ce(t,r);if(!o.ok||!o.credential)return o.terminal&&Ae(e),{credential:t,renewed:!1,terminal:o.terminal,message:o.message};let n=Le(e,o.credential);return{credential:o.credential,renewed:!0,terminal:!1,message:n?void 0:`the renewed sign-in could not be saved to ${b(e)}`}}export{I as a,Oe as b,b as c,ve as d,_e as e,Ie as f,Je as g,Le as h,Ae as i,Ce as j,Ge as k};

package/dist/chunk-DAPXGSGD.js

@@ -0,0 +1,12 @@
+import"./chunk-WOT6VMZA.js";import{createInterface as A}from"node:readline";var k=1;function v(e){if(!e||Object.keys(e).length===0)return"";let d=c=>JSON.stringify(c).replace(/</g,"\\u003c"),a=[];e.place&&a.push(`place: ${d(e.place)}`),e.selection&&e.selection.length>0&&a.push(`selection: ${d(e.selection)}`),e.connected&&a.push(`connected: ${d(e.connected)}`);for(let[c,f]of Object.entries(e))c==="place"||c==="selection"||c==="connected"||a.push(`${c.replace(/[^\w.-]/g,"_")}: ${d(f)}`);return`<session_context>
+${a.join(`
+`)}
+</session_context>
+
+`}function I(e){return/^(get_|list_|read_|snapshot|diff_|audit|datastore_get|datastore_list|roblox_status)/.test(e)?"read":/^(search|grep|find)/.test(e)?"search":/(execute|run_|luau)/.test(e)?"execute":/^(set_|create_|delete_|clone_|reparent_|edit_|insert_|send_|publish_|upload_|generate_|datastore_set|datastore_delete)/.test(e)?"edit":"other"}function C(e){if(typeof e=="string")return e;let d=e?.content;return Array.isArray(d)?d.map(a=>a.type==="text"?a.text??"":`[${a.type??"?"}]`).join(`
+`):JSON.stringify(e??null)}function O(e){let d=new Map,a=new Map,c=0,f=t=>{e.output.write(`${JSON.stringify({jsonrpc:"2.0",...t})}
+`)},m=(t,i)=>f({id:t,result:i}),l=(t,i,p)=>f({id:t,error:{code:i,message:p}}),y=(t,i)=>f({method:"session/update",params:{sessionId:t,update:i}});async function x(t){let i=t.params??{},p=t.id===void 0;switch(t.method){case"initialize":return m(t.id,{protocolVersion:k,agentCapabilities:{loadSession:!1,promptCapabilities:{image:!1,audio:!1,embeddedContext:!0}},authMethods:[],agentInfo:{name:e.name??"howtofix",title:"HowToFix",version:e.version}});case"session/new":{let s=typeof i.cwd=="string"?i.cwd:process.cwd();try{let r=await e.createAgent(s);c+=1;let u=`sess_${Date.now().toString(36)}_${c}`;return d.set(u,r),m(t.id,{sessionId:u})}catch(r){return l(t.id,-32e3,r instanceof Error?r.message:String(r))}}case"session/prompt":{let s=String(i.sessionId??""),r=d.get(s);if(!r)return l(t.id,-32602,`unknown session ${s}`);if(a.has(s))return l(t.id,-32e3,"a prompt is already running in this session");let g=(Array.isArray(i.prompt)?i.prompt:[]).map(n=>n.type==="text"?n.text??"":n.type==="resource"&&n.resource?.text!==void 0?`<file uri=${JSON.stringify(n.resource.uri??"")}>
+${n.resource.text}
+</file>`:"").filter(n=>n!=="").join(`
+
+`);if(g==="")return l(t.id,-32602,"the prompt has no text");let w=i._meta,b=v(w?.howtofix?.context)+g,_=!1,R=r.subscribe(n=>{if(n.type==="message_update"){let o=n.assistantMessageEvent;o?.type==="text_delta"&&o.delta?y(s,{sessionUpdate:"agent_message_chunk",content:{type:"text",text:o.delta}}):o?.type==="thinking_delta"&&o.delta&&y(s,{sessionUpdate:"agent_thought_chunk",content:{type:"text",text:o.delta}})}else if(n.type==="tool_execution_start"){let o=n;y(s,{sessionUpdate:"tool_call",toolCallId:o.toolCallId,title:o.toolName,kind:I(o.toolName),status:"in_progress",rawInput:o.args??{}})}else if(n.type==="tool_execution_end"){let o=n;y(s,{sessionUpdate:"tool_call_update",toolCallId:o.toolCallId,status:o.isError?"failed":"completed",content:[{type:"content",content:{type:"text",text:C(o.result)}}]})}}),S=r.prompt(b).then(()=>{let n=r.lastStopReason?.(),o=_||n==="aborted"?"cancelled":n==="length"?"max_tokens":"end_turn";m(t.id,{stopReason:o})}).catch(n=>{_?m(t.id,{stopReason:"cancelled"}):l(t.id,-32e3,n instanceof Error?n.message:String(n))}).finally(()=>{R(),a.delete(s)});a.set(s,S),h.set(s,()=>{_=!0});return}case"session/cancel":{let s=String(i.sessionId??"");h.get(s)?.(),await d.get(s)?.abort();return}default:p||l(t.id,-32601,`method not found: ${t.method}`)}}let h=new Map;return new Promise(t=>{let i=A({input:e.input}),p=new Set;i.on("line",s=>{if(s.trim()==="")return;let r;try{r=JSON.parse(s)}catch{l(null,-32700,"parse error");return}let u=x(r).catch(g=>{r.id!==void 0&&l(r.id,-32603,g instanceof Error?g.message:String(g))}).finally(()=>p.delete(u));p.add(u)}),i.on("close",()=>{Promise.allSettled([...p,...a.values()]).then(async()=>{await Promise.allSettled([...d.values()].map(s=>s.dispose())),t()})})})}export{k as ACP_PROTOCOL_VERSION,v as renderSessionContext,O as runAcp};

package/dist/chunk-DOD7MUGX.js

@@ -0,0 +1 @@
+import{a,b}from"./chunk-YW7NORH3.js";import"./chunk-WOT6VMZA.js";export{b as jsonLine,a as toJsonEvent};

package/dist/chunk-DVYH677E.js

@@ -0,0 +1,5 @@
+var a="HowToFix",o="0.7.16",n=["You are HowToFix, a coding agent. The user wants the fix, not a tour of the problem.",'NEVER report a check you did not run. NEVER state a version, path, result or capability you have not verified \u2014 if you did not check it, say you are unsure. "Not found" is not "impossible": a tool missing from PATH is often installed anyway, and one that is truly absent can usually be installed. Exhaust the real options before calling anything unavailable; when you do report a limit, say plainly what you tried and what you could not do. Unexercised behaviour is not evidence.',"NEVER mention the underlying harness, its vendor or its project name to the user.","Every tool is `read`, `write` or `exec`, and each approval mode auto-approves every tier up to its own: `suggest` runs `read` only, `auto-edit` adds `write`, `full-auto` adds `exec`. A read-only shell command runs in every mode, so inspecting the tree asks nothing.","NEVER aim a command at the filesystem root, a block device or a system account file, and NEVER shut down the host: those are refused in EVERY mode, `full-auto` included, so proposing one wastes the turn. This is not a list of things to avoid \u2014 it is a list of things that will not run.","Lead with the diagnosis in one or two sentences, then change the code. SHOULD prefer the smallest correct change over a rewrite. Name the file and the reason in a short line; do not narrate tool calls.","Fix the problem that was asked for. NEVER add features, refactors, validation, error handling or dependencies nobody requested.","Something reported broken: reproduce it first, confirm the fix after. Cannot reproduce it? Say so \u2014 NEVER edit code and call it fixed.","Tests describe intended behaviour. A failing test means fix the code, not the test: NEVER delete, skip or loosen an assertion to get green, and NEVER re-pin an expected value to whatever the code happens to print.","Anything you cannot settle by reading \u2014 a page, a layout, a screenshot, a CLI, a service, a failure \u2014 run it and look at the result. For a visual task, find a browser the way a real one does: `$PUPPETEER_EXECUTABLE_PATH`, `$CHROME_PATH`, then `which` for google-chrome, chromium and chromium-browser, then /usr/bin, /snap/bin and /var/lib/flatpak, then the puppeteer and playwright caches under the home directory. Still empty? `npx -y puppeteer browsers install chrome`, or `npm i puppeteer-core` against a chrome the image already ships outside PATH. Then drive the real artifact \u2014 open it, read the DOM, click the controls, measure at the widths that matter \u2014 instead of describing what you assume it does.","Done means the requested behaviour works end to end and every stated requirement is met \u2014 not a scaffold, a narrowed test or a plausible subset. Genuinely out of reach? Finish everything else, then say exactly what is missing and what you tried.","SHOULD plan multi-step work with `todo` before starting it, and mark each step done as you finish. A plan the user can see is worth more than a narration of what you are about to do.","Genuinely ambiguous design: enter plan mode, write the plan to the plan file, then present it with `exit_plan_mode`. Use it when several reasonable approaches exist or when a restructuring would be hard to undo. In plan mode `edit` and `write` are refused for every path except the plan file itself \u2014 that limit is enforced, not advisory, so plan the work rather than starting it. Plan mode needs an interactive session in which the user can approve it; when there is no UI it is unavailable, so design the approach yourself instead of calling it.","Work that is independent and would flood this conversation belongs in `task` subagents. Give each a self-contained assignment, then verify the file it wrote rather than trusting its summary. When that work has a shape you can script \u2014 many items through the same stages, or fan-out whose results must be combined \u2014 `workflow` states the orchestration in one place and runs it deterministically; `task` is for the one-off you cannot describe in advance.","MUST give each subagent a self-contained assignment: a child starts with none of this conversation, so a brief that says 'the file we discussed' reaches it as nothing. Choose the agent by what the work is \u2014 scout looks something up, architect returns a plan, reviewer reports issues with file evidence, task changes files \u2014 and NEVER send work that needs an edit to scout or reviewer, because neither can make one.","SHOULD delegate only work that is genuinely parallel: a subagent costs its own session and its own requests on the same quota as this conversation. A single lookup, a file you can read yourself, or a step whose result decides the next step stays here. MUST keep one call to at most six agents and the session to twelve live or parked ones \u2014 a larger fan-out is refused, and the refusal is a limit rather than a failure to work around.","Record a decision, a file's role, or a fact you would otherwise re-derive with `context`: notes survive compaction and are visible to the other agents on the task.","Look it up instead of recalling it: `web_search` and `web_fetch` for anything outside this repo, `lsp` for a definition, reference or diagnostic. Name the source you checked.","Before calling changed code done, run `quality` and `slop` over it and act on what they report. A metric you did not measure is a claim you cannot make.","A command runs under a two-minute default timeout. MUST pass a longer timeout for anything that legitimately takes more than that \u2014 a recursive directory walk, a package install, a build, a network fetch \u2014 and SHOULD prefer a bounded command to an unbounded one: 'du -sh' with an explicit path beats the whole profile, and on Windows/MSYS a recursive 'du' over a profile directory takes minutes rather than seconds.","When a choice blocks the task, use `ask` instead of guessing; when you need to work something out, use `think`, whose text stays out of the transcript.","Above all: NEVER claim a check you did not run, and NEVER call done on a subset."].join(`
+`);function s(e){return e===void 0?void 0:e.replace(/Use \/login to log into a provider[^\n]*/gi,"Connect a provider with /connect or /login:").replace(/^[ \t]*\S*hxf-coding-agent[\\/]docs[\\/][^\n]*$/gim,"").replace(/\bhxf-coding-agent\b/gi,"the harness").replace(/\n{3,}/g,`
+
+`).trim()}var i=["# Project notes","","## What this is","","## Commands","- build:","- test:","","## Conventions","-",""].join(`
+`);export{a,o as b,n as c,s as d,i as e};

package/dist/chunk-FFNDHUCQ.js

@@ -0,0 +1,5 @@
+import{b as k}from"./chunk-AGGIYXN7.js";import{D as p}from"./chunk-V656XVXV.js";import{a as E}from"./chunk-PCALBZOO.js";import"./chunk-UTYFLLSM.js";import{a as g}from"./chunk-DVYH677E.js";import"./chunk-WOT6VMZA.js";import{spawnSync as A}from"node:child_process";import{readdirSync as j,readFileSync as S,statSync as D,writeFileSync as C,unlinkSync as v}from"node:fs";import{join as m}from"node:path";var x=[22,19];async function J(e="https://api.howtofix.id/api/status"){let s=[],[n,t]=process.versions.node.split(".").map(Number),r=n>x[0]||n===x[0]&&t>=x[1];s.push({name:"node",ok:r,detail:`${process.versions.node} (needs >= ${x[0]}.${x[1]})`});let a=A("git",["--version"],{encoding:"utf8"});s.push({name:"git",ok:a.status===0,detail:a.status===0?a.stdout.trim():"not found on PATH"});let o=E();s.push({name:"sandbox",ok:!!o,detail:o??"no working bubblewrap (Linux) or sandbox-exec (macOS); --sandbox unavailable",optional:!0});let c=!1,i=p;try{let l=m(p,`.doctor-${process.pid}`);C(l,"ok"),v(l),c=!0}catch(l){i=`${p} is not writable: ${l instanceof Error?l.message:String(l)}`}s.push({name:"state dir",ok:c,detail:i});let u=m(p,"auth.json"),f="no auth.json \u2014 run `howtofix` and sign in",h=!1;try{let l=JSON.parse(S(u,"utf8")),d=Object.keys(l).length;h=d>0,f=h?`${d} provider credential${d===1?"":"s"}`:f}catch{}s.push({name:"auth",ok:h,detail:f,optional:!0});try{let l=Date.now(),d=await fetch(e,{signal:AbortSignal.timeout(5e3)});s.push({name:"gateway",ok:d.ok,detail:`${e} \u2192 ${d.status} in ${Date.now()-l}ms`,optional:!0})}catch(l){s.push({name:"gateway",ok:!1,detail:`${e} unreachable: ${l instanceof Error?l.message:String(l)}`,optional:!0})}return s}async function Z(){let e=await J(),s=Math.max(...e.map(t=>t.name.length));for(let t of e){let r=t.ok?"ok  ":t.optional?"warn":"FAIL";console.log(`  ${r}  ${t.name.padEnd(s)}  ${t.detail}`)}let n=e.filter(t=>!t.ok&&!t.optional);return n.length>0?(console.log(`
+${n.length} problem${n.length===1?"":"s"} must be fixed before a session will work.`),1):0}function K(e=p){let s=m(e,"models.json"),n;try{n=S(s,"utf8")}catch(o){return o.code==="ENOENT"?console.log(`  no models.json at ${s} \u2014 run \`howtofix /connect\` to pull the catalogue`):k(g,"models",o),1}let t;try{t=JSON.parse(n)}catch(o){return console.error(`${g}: models: ${s} is not valid JSON (${o instanceof Error?o.message:String(o)})`),console.error("  fix the file, or delete it and run `howtofix /connect` to write a new one"),1}let r=t.providers??{},a=0;for(let[o,c]of Object.entries(r)){let i=(c.models??[]).map(u=>u.id).filter(Boolean);a+=i.length,console.log(`  ${o} (${i.length})`);for(let u of i)console.log(`    ${u}`)}return a===0?(console.log("  no models configured"),1):0}function N(e=15,s=p){let n=m(s,"sessions"),t;try{t=j(n)}catch{return[]}let r=[];for(let a of t){let o=m(n,a),c;try{c=j(o)}catch{continue}for(let i of c){if(!i.endsWith(".jsonl"))continue;let u=m(o,i);try{let f=D(u);r.push({file:u,project:a,modified:f.mtimeMs,bytes:f.size})}catch{}}}return r.sort((a,o)=>o.modified-a.modified).slice(0,e)}function Q(e){let s=e.indexOf("--search");if(s>=0){let o=e[s+1]?.trim();if(!o)return console.error(`${g}: sessions: --search needs a word or phrase`),2;let c=P(o);if(c.length===0)return console.log(`  no session mentions "${o}"`),0;for(let i of c){let u=new Date(i.row.modified).toISOString().replace("T"," ").slice(0,16),f=`${i.matches} hit${i.matches===1?"":"s"}`;console.log(`  ${u}  ${i.row.project}  (${f})`),console.log(`                     ${i.row.file}`),console.log(`                     ${i.snippet}`)}return 0}let n=e.indexOf("--limit"),t=n>=0&&Number(e[n+1])||15,r=N(t);if(r.length===0)return console.log(`  no saved sessions under ${m(p,"sessions")}`),e.includes("--export")?1:0;let a=e.indexOf("--export");if(a>=0){let o=Number(e[a+1]);if(!Number.isInteger(o)||o<1||o>r.length)return console.error(`${g}: sessions: --export needs a number from the list (1-${r.length})`),2;let c=r[o-1];try{console.log(_(c.file))}catch(i){return k(g,"sessions",i),1}return 0}return r.forEach((o,c)=>{let i=new Date(o.modified).toISOString().replace("T"," ").slice(0,16),u=Math.round(o.bytes/1024);console.log(`  ${String(c+1).padStart(2)}  ${i}  ${String(u).padStart(6)}k  ${o.project}`),console.log(`                     ${o.file}`)}),0}function R(e){try{let s=JSON.parse(e),n=s.message?.content??s.content;if(typeof n=="string"&&n.trim())return O(n).replace(/\s+/g," ").trim();if(Array.isArray(n)){let t=O(n.map(r=>r&&typeof r=="object"&&"text"in r?String(r.text):"").join(" ")).replace(/\s+/g," ").trim();if(t)return t}}catch{}return O(e).replace(/\s+/g," ").trim()}function O(e){return e.replace(/\u001b\[[0-9;?]*[ -/]*[@-~]|\u001b\][^\u0007]*\u0007|\u001b[@-Z\\-_]/g,"")}function L(e,s,n=80){let t=e.toLowerCase().indexOf(s);if(t<0)return e.slice(0,n*2).trim();let r=Math.max(0,t-n),a=Math.min(e.length,t+s.length+n);return`${r>0?"\u2026":""}${e.slice(r,a).trim()}${a<e.length?"\u2026":""}`}function P(e,s=10,n=p){let t=e.toLowerCase(),r=new RegExp(`\\b${t.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\b`,"i"),a=[];for(let o of N(Number.MAX_SAFE_INTEGER,n)){let c;try{c=S(o.file,"utf8")}catch{continue}let i=0,u=0,f=0,h=0,l=!1,d="";for(let y of c.split(`
+`)){let w=y.toLowerCase(),b=w.indexOf(t);if(b<0)continue;let $=0;for(;b>=0;)$++,b=w.indexOf(t,b+t.length);i+=$;let M=w.includes('"role":"user"'),T=w.includes('"role":"toolresult"')||w.includes('"role":"tool"');M?u+=$:T?h+=$:f+=$,r.test(y)&&(l=!0),d||(d=L(R(y),t))}if(i===0)continue;let I=(u>0?100:0)+(f>0?10:0)+Math.min(h,5)+(l?5:0)+Math.min(i,10)/100;a.push({row:o,matches:i,score:I,snippet:d})}return a.sort((o,c)=>c.score-o.score||c.row.modified-o.row.modified).slice(0,s)}function _(e){let s=[`# Session ${e.split(/[\\/]/).pop()??e}`,""];for(let n of S(e,"utf8").split(`
+`)){if(!n.trim())continue;let t;try{t=JSON.parse(n)}catch{continue}if(t.type!=="message")continue;let r=R(n);r&&s.push(`## ${t.message?.role??"unknown"}`,"",r,"")}return s.join(`
+`).trimEnd()}export{J as collectChecks,_ as exportSessionMarkdown,N as listSessionFiles,Z as runDoctor,K as runModels,Q as runSessions,P as searchSessions};

package/dist/chunk-FPXVDP32.js

@@ -0,0 +1,8 @@
+import{m as p,n as d}from"./chunk-V656XVXV.js";import"./chunk-UTYFLLSM.js";import"./chunk-WOT6VMZA.js";import{execFileSync as v}from"node:child_process";import{existsSync as m,mkdirSync as x,readFileSync as S,readdirSync as j,statSync as $,writeFileSync as z}from"node:fs";import{join as r,relative as b,resolve as u}from"node:path";function F(o){let e=o.replace(/-/g," ").replace(/\b\w/g,t=>t.toUpperCase());return[{path:"preset.json",body:`${JSON.stringify({name:o,title:e,description:"One line saying what this preset is for.",category:"engineering",version:"1.0.0",skills:[`${o}-skill`]},null,2)}
+`},{path:"prompt.md",body:["Rules the model should follow while this preset is active.","","This text is appended to the system prompt, never substituted for it, so it","adds to the agent's own rules rather than replacing them. Delete this file if","the preset only needs skills.",""].join(`
+`)},{path:r("skills",`${o}-skill`,"SKILL.md"),body:["---",`name: ${o}-skill`,"description: When the model should reach for this skill. This line is what","  the model reads when deciding, so say when to use it, not what it contains.","---","",`# ${e}`,"","What the model should do, as instructions. A skill is read on demand: only the","frontmatter above is in every request, so the body costs nothing until used.","","Do not add `disable-model-invocation: true` unless the skill must only ever run","from `/skill:<name>` \u2014 it keeps the skill out of the model's catalogue entirely.",""].join(`
+`)}]}function g(){return["usage:","  howtofix preset new <name> [dir]   write a preset skeleton","  howtofix preset check [dir]        validate a preset with the installer's rules","  howtofix preset pack [dir]         build <name>-<version>.tar.gz for publishing","","A preset is a directory holding preset.json, an optional prompt.md, and a","skills/ tree. `check` runs the same validation the installer runs, so a preset","that passes here will not be refused at install."].join(`
+`)}function w(o){let e=[],t=s=>{for(let l of j(s,{withFileTypes:!0}).sort((n,i)=>n.name.localeCompare(i.name))){let n=r(s,l.name);l.isDirectory()?t(n):e.push(b(o,n).split("\\").join("/"))}};return t(o),e}function C(o){let{manifest:e,problems:t}=d(o);if(!e){console.log(`not installable: ${o}`);for(let a of t)console.log(`  - ${a}`);return!1}let s=p(o,e);if(s.length>0){console.log(`not installable: ${o}`);for(let a of s)console.log(`  - ${a}`);return!1}let l=e.skills??[],n=0,i=0;for(let a of l){let f=r(o,"skills",a,"SKILL.md"),k=m(f)?/^---\r?\n([\s\S]*?)\r?\n---/.exec(S(f,"utf8")):null,y=k&&/^disable-model-invocation:\s*(.*)$/m.exec(k[1]);y&&y[1].trim().replace(/^["']|["']$/g,"").toLowerCase()==="true"?i+=1:n+=1}let h=w(o),c=h.reduce((a,f)=>a+$(r(o,f)).size,0);return console.log(`installable: ${e.name} ${e.version??""}`.trim()),console.log(`  ${h.length} files, ${(c/1024).toFixed(1)} KB`),console.log(`  ${l.length} skill(s): ${n} the model can choose`),i>0&&console.log(`  ${i} invoke-only \u2014 reachable only as /skill:<name>`),!0}function L(o){let{manifest:e,problems:t}=d(o);if(!e){console.log(`cannot pack: ${o}`);for(let c of t)console.log(`  - ${c}`);return!1}let s=p(o,e);if(s.length>0){console.log("cannot pack: the preset does not validate");for(let c of s)console.log(`  - ${c}`);return!1}let l=e.version??"1.0.0",n=u(`${e.name}-${l}.tar.gz`),i=w(o);v("tar",["-czf",n,"-C",o,...i]);let h=$(n).size;return console.log(`packed ${n}`),console.log(`  ${i.length} files, ${(h/1024).toFixed(1)} KB`),console.log(""),console.log("to offer it to the community registry, open a pull request adding an entry"),console.log("that names the repo, a pinned commit, and the skill directory inside it."),!0}function A(o){let[e,t]=o;if(!e||e==="--help"||e==="-h")return console.log(g()),e?0:2;if(e==="new"){if(!t)return console.log(`preset new: a name is required
+`),console.log(g()),2;if(!/^[a-z0-9][a-z0-9-]*$/.test(t))return console.log(`preset new: "${t}" is not a usable name.`),console.log("  lower-case letters, digits and hyphens; must start with a letter or digit."),console.log("  The installer refuses anything else, and it refuses at install time."),2;let s=o[2]?u(o[2]):u("."),l=r(s,t);if(m(l))return console.log(`preset new: ${l} already exists.`),1;for(let n of F(t)){let i=r(l,n.path);x(r(i,".."),{recursive:!0}),z(i,n.body),console.log(`  wrote ${b(l,i)}`)}return console.log(`
+wrote ${l}`),console.log(`  edit preset.json and the skill, then: howtofix preset check ${t}`),0}if(e==="check"||e==="pack"){let s=u(t??".");return m(r(s,"preset.json"))?(e==="check"?C(s):L(s))?0:1:(console.log(`${e}: no preset.json in ${s}`),2)}return console.log(`preset: unknown subcommand "${e}"
+`),console.log(g()),2}export{A as runPresetCommand};

package/dist/chunk-GXB7RZHH.js

@@ -0,0 +1 @@
+import{D as a,E as b,F as c,G as d,H as e,I as f,J as g,K as h}from"./chunk-V656XVXV.js";import"./chunk-UTYFLLSM.js";import"./chunk-WOT6VMZA.js";export{e as AGENTS_STORE_DIR,a as AGENT_DIR,f as USAGE_CACHE_PATH,b as USER_SKILLS_DIR,g as WORKFLOWS_DIR,d as additionalSkillPaths,h as pinAgentDir,c as projectSkillsDir};

package/dist/chunk-ILDDDLRC.js

@@ -0,0 +1 @@
+import{a,b,c}from"./chunk-WX3V5P7U.js";import"./chunk-V656XVXV.js";import"./chunk-UTYFLLSM.js";import"./chunk-WOT6VMZA.js";export{c as formatSkillList,b as skillInvocation,a as skillSearchPaths};

package/dist/chunk-JFYVRWJI.js

@@ -0,0 +1,2 @@
+var C=new Set(["think"]),l;function E(n){let t=new WeakSet,o=e=>{if(e===null||typeof e!="object")return e;if(t.has(e))return"[circular]";if(t.add(e),Array.isArray(e))return e.map(o);let r=e,s={};for(let i of Object.keys(r).sort())s[i]=o(r[i]);return s};try{return JSON.stringify(o(n))??""}catch{return""}}function x(n,t){if(C.has(n))return;let o=`${n}\0${E(t)}`,e=l&&l.signature===o?l.count+1:1;return l={signature:o,count:e},e>=3?{repeats:e}:void 0}function Q(){l=void 0}function v(n,t){return`Refused: ${n} has been called ${t} times in a row with identical arguments, so the last attempt cannot have changed anything. Do not repeat it. Either use different arguments, use a different tool, or stop and report what you found and what is blocking you.`}var $=/^-[a-zA-Z0-9_-]/;function h(n,t){switch(t){case"number":return/^\d+$/.test(n);case"string":return!0;default:return!1}}function O(n,t){if(!/^-[^-]/.test(n)||n.includes("="))return!1;for(let o=1;o<n.length;o++){let e=t[`-${n[o]}`];if(!e)return!1;if(e!=="none")return h(n.slice(o+1),e)}return!0}function L(n,t,o){let e=t;for(;e<n.length;){let r=n[e];if(!r){e++;continue}if(r==="--")break;if($.test(r)){if(/^-\d+$/.test(r)&&o.safeFlags["-n"]){e++;continue}let s=r.includes("="),[i="",...c]=r.split("="),a=o.safeFlags[i];if(!a){if(!O(r,o.safeFlags))return!1;e++;continue}if(a==="none"){if(s)return!1;e++;continue}if(a==="optional"){e++;continue}if(s){if(!h(c.join("="),a))return!1;e++;continue}let y=n[e+1];if(y===void 0||!h(y,a))return!1;e+=2;continue}if(o.allowPositional===!1)return!1;e++}return!0}var M={"--all":"none","--branches":"none","--tags":"none","--remotes":"none"},u={"--oneline":"none","--graph":"none","--decorate":"none","--no-decorate":"none","--date":"string","--relative-date":"none"},g={"--max-count":"number","-n":"number"},p={"--stat":"none","--numstat":"none","--shortstat":"none","--name-only":"none","--name-status":"none"},d={"--color":"none","--no-color":"none"},m={"--patch":"none","-p":"none","--no-patch":"none","--no-ext-diff":"none","-s":"none"},A={"--author":"string","--committer":"string","--grep":"string"},I={"-l":"none","--list":"none","-a":"none","-r":"none","-v":"none","-vv":"none","-i":"none"},F={"git status":{safeFlags:{"-s":"none","--short":"none","-b":"none","--branch":"none","-u":"optional","--untracked-files":"optional","--porcelain":"optional","--ignored":"none","--long":"none","--no-renames":"none",...d}},"git diff":{safeFlags:{...p,...d,...m,"--cached":"none","--staged":"none","--word-diff":"none","--check":"none","--quiet":"none","--exit-code":"none","--no-renames":"none","--diff-filter":"string","--relative":"string","--full-index":"none","--binary":"none","--abbrev":"number","--unified":"number","-U":"number","--ignore-all-space":"none","--ignore-space-change":"none","--ignore-blank-lines":"none"}},"git log":{safeFlags:{...u,...g,...p,...d,...m,...A,...M,"--since":"string","--after":"string","--until":"string","--before":"string","--follow":"none","--no-merges":"none","--merges":"none","--first-parent":"none","--reverse":"none","--skip":"number","--all":"none","--format":"string","--pretty":"string","--abbrev-commit":"none","--no-abbrev-commit":"none","--left-right":"none"}},"git show":{safeFlags:{...p,...d,...m,...u,"--format":"string","--pretty":"string","--abbrev-commit":"none","--no-patch":"none","-q":"none"}},"git shortlog":{safeFlags:{...g,"-s":"none","--summary":"none","-n":"none","--numbered":"none","-e":"none","--email":"none","-sn":"none","-ns":"none","--all":"none"}},"git reflog":{safeFlags:{...g,...u,...A,"--all":"none","--date":"string"}},"git blame":{safeFlags:{"-L":"string","-w":"none","-c":"none","-n":"none","-s":"none","-e":"none","-p":"none","--porcelain":"none","--line-porcelain":"none","--date":"string","--since":"string","-C":"none","-M":"none"}},"git ls-files":{safeFlags:{"-m":"none","--modified":"none","-o":"none","--others":"none","-i":"none","--ignored":"none","-s":"none","--stage":"none","-d":"none","--deleted":"none","-c":"none","--cached":"none","-u":"none","--unmerged":"none","--exclude-standard":"none","--error-unmatch":"none","-z":"none"}},"git ls-remote":{safeFlags:{"--heads":"none","--tags":"none","--refs":"none","--symref":"none"}},"git rev-parse":{safeFlags:{"--short":"optional","--abbrev-ref":"none","--verify":"none","--quiet":"none","--git-dir":"none","--show-toplevel":"none","--show-cdup":"none","--is-inside-work-tree":"none","--is-bare-repository":"none","--symbolic-full-name":"none","--abbrev":"optional"}},"git rev-list":{safeFlags:{...g,"--count":"none","--all":"none","--objects":"none","--reverse":"none","--max-parents":"number","--min-parents":"number","--no-merges":"none","--first-parent":"none","--abbrev-commit":"none"}},"git describe":{safeFlags:{"--tags":"none","--all":"none","--long":"none","--always":"none","--dirty":"none","--abbrev":"number","--match":"string","--exclude":"string","--first-parent":"none"}},"git cat-file":{safeFlags:{"-p":"none","-t":"none","-s":"none","-e":"none","--batch-check":"none"}},"git for-each-ref":{safeFlags:{"--format":"string","--count":"number","--sort":"string","--points-at":"string","--merged":"string","--no-merged":"string"}},"git grep":{safeFlags:{"-n":"none","--line-number":"none","-i":"none","--ignore-case":"none","-l":"none","--files-with-matches":"none","-c":"none","--count":"none","-w":"none","--word-regexp":"none","-E":"none","--extended-regexp":"none","-F":"none","--fixed-strings":"none","--cached":"none","--untracked":"none","-e":"string","--and":"none","--or":"none","--not":"none"}},"git merge-base":{safeFlags:{"--all":"none","--is-ancestor":"none","--fork-point":"none","--octopus":"none"}},"git stash list":{safeFlags:{...u}},"git worktree list":{safeFlags:{"--porcelain":"none","-v":"none","--verbose":"none","-z":"none"}},"git branch":{safeFlags:{...I,"--merged":"string","--no-merged":"string","--contains":"string","--no-contains":"string","--sort":"string","--format":"string","--points-at":"string","--column":"none","--show-current":"none"},dangerous:n=>{let t=new Set(["--merged","--no-merged","--contains","--no-contains","--sort","--format","--points-at"]),o=!1;for(let e of n){if(o){o=!1;continue}if(t.has(e)){o=!0;continue}if(!e.startsWith("-"))return!0}return!1}},"git tag":{safeFlags:{"-l":"none","--list":"none","-n":"number","--contains":"string","--no-contains":"string","--merged":"string","--sort":"string","--points-at":"string","--column":"none"},dangerous:n=>{let t=new Set(["--contains","--no-contains","--merged","--sort","--points-at"]),o=!1;for(let e of n){if(o){o=!1;continue}if(t.has(e)){o=!0;continue}if(!e.startsWith("-"))return!0}return!1}},"git remote":{safeFlags:{"-v":"none","--verbose":"none"},dangerous:n=>n.some(t=>!t.startsWith("-"))},"git config --get":{safeFlags:{"--local":"none","--global":"none","--system":"none","--get-all":"none","--get-regexp":"none","--list":"none","-l":"none","--show-origin":"none","--null":"none","-z":"none"}}},S=["ls","pwd","cat","head","tail","wc","which","whoami","date","echo","sleep","true","false","type","test","seq","basename","dirname","realpath","stat","file","du","df","tree","uname","hostname","id","groups","tty","cal","uptime","free","locale","printf","grep","rg","fd","jq","bat","column","paste","nl","expand","fold","fmt","md5sum","sha1sum","sha256sum","sha512sum","b2sum","cksum","diff","cmp"],P={find:{safeFlags:{"-name":"string","-iname":"string","-type":"string","-maxdepth":"number","-mindepth":"number","-newer":"string","-path":"string","-not":"none","-print":"none","-print0":"none","-empty":"none","-size":"string","-mtime":"number","-atime":"number","-perm":"string","-L":"none","-H":"none","-P":"none"},dangerous:n=>n.some(t=>/^-(delete|exec|execdir|ok|okdir|fprint0?|fls|fprintf)$/.test(t))},sort:{safeFlags:{"-n":"none","-r":"none","-u":"none","-k":"string","-t":"string","-f":"none","-h":"none","-V":"none","-s":"none","-c":"none","-m":"none","-b":"none","-z":"none"}},uniq:{safeFlags:{"-c":"none","-d":"none","-u":"none","-i":"none","-f":"number","-s":"number","-w":"number"}},cut:{safeFlags:{"-d":"string","-f":"string","-c":"string","-b":"string","-s":"none","--complement":"none","-z":"none"}},tr:{safeFlags:{"-d":"none","-s":"none","-c":"none"}},node:{safeFlags:{"-v":"none","--version":"none"},allowPositional:!1},python:{safeFlags:{"--version":"none"},allowPositional:!1},python3:{safeFlags:{"--version":"none"},allowPositional:!1},npm:{safeFlags:{"--version":"none","-v":"none"},allowPositional:!1},sed:{safeFlags:{"-n":"none","--quiet":"none","-e":"string","-E":"none","-r":"none","--regexp-extended":"none","-s":"none","-u":"none","-z":"none","--posix":"none"},dangerous:n=>n.some(t=>/^-i|^--in-place/.test(t)||/\b[we]\s/.test(t)||/^[we]$/.test(t))},awk:{safeFlags:{"-F":"string","-v":"string","-f":"string"},dangerous:n=>n.some(t=>/\bsystem\s*\(|\|\s*"|>\s*"/.test(t))},xxd:{safeFlags:{"-l":"number","-s":"string","-c":"number","-g":"number","-p":"none","-i":"none","-u":"none","-b":"none","-e":"none","-o":"number"},dangerous:n=>n.some(t=>t==="-r"||/^-[a-z]*r/.test(t))}},k={"npm ls":{safeFlags:{"--depth":"number","--json":"none","--long":"none","--parseable":"none","--all":"none","--prod":"none","--dev":"none","--omit":"string","--link":"none","--global":"none","-g":"none","--silent":"none"}},"npm view":{safeFlags:{"--json":"none","--registry":"string"}},"docker ps":{safeFlags:{"-a":"none","--all":"none","-q":"none","--quiet":"none","--no-trunc":"none","--format":"string","-n":"number","--last":"number","-s":"none","--size":"none","--filter":"string"}},"docker images":{safeFlags:{"-a":"none","--all":"none","-q":"none","--quiet":"none","--no-trunc":"none","--format":"string","--filter":"string","--digests":"none"}},"docker inspect":{safeFlags:{"--format":"string","-f":"string","-s":"none","--size":"none","--type":"string"}},"kubectl get":{safeFlags:{"-o":"string","--output":"string","-n":"string","--namespace":"string","-A":"none","--all-namespaces":"none","--no-headers":"none","-l":"string","--selector":"string","--show-labels":"none","-w":"none","--watch":"none","--sort-by":"string"}},"kubectl describe":{safeFlags:{"-n":"string","--namespace":"string","-l":"string","--selector":"string"}},"cargo tree":{safeFlags:{"--depth":"number","-e":"string","--edges":"string","--no-dev-dependencies":"none","--prefix":"string","-i":"string","--invert":"string","-p":"string","--package":"string"}},"go version":{safeFlags:{}}},z=["cd","alias","history","arch","ip addr","ifconfig"];function G(n){if(!/\$\(|`|\$\{|>|</.test(n)&&!/(?<!&)&(?!&)/.test(n))return n.split(/\|\||&&|;|\|/).map(t=>t.trim()).filter(t=>t.length>0)}function D(n){let t=n.some(e=>/^cd\b/.test(e)),o=n.some(e=>/^git\b/.test(e));return t&&o}function q(n){let t=[],o=/'[^']*'|"[^"]*"|\S+/g;for(let e of n.match(o)??[])t.push(e.length>=2&&/^['"]/.test(e)?e.slice(1,-1):e);return t}function N(n){if(n.length===0)return;let[t="",o=""]=n,e=`${t} ${o}`;if(t==="git"&&o==="config"){let r=n[2];return r==="--get"||r==="--get-all"||r==="--get-regexp"||r==="-l"||r==="--list"?{name:"git config --get",rest:n.slice(3)}:void 0}return t==="git"&&o==="stash"?n[2]==="list"?{name:"git stash list",rest:n.slice(3)}:void 0:t==="git"&&o==="worktree"?n[2]==="list"?{name:"git worktree list",rest:n.slice(3)}:void 0:t==="git"&&F[`git ${o}`]?{name:`git ${o}`,rest:n.slice(2)}:k[e]?{name:e,rest:n.slice(2)}:{name:t,rest:n.slice(1)}}var j=new Set(["echo","printf"]);function U(n){let t=q(n),o=N(t);if(!o)return!1;let{name:e,rest:r}=o;if(j.has(e)&&r.some(i=>i.includes("$")||i.includes("`")))return!1;let s=F[e]??P[e]??k[e];return s?s.dangerous?.(r)?!1:L(r,0,s):!!(S.includes(e)||z.includes(e))}function b(n){let t=G(n);return!t||t.length===0||D(t)?!1:t.every(U)}var W=["suggest","auto-edit","full-auto"],rn={suggest:"suggest: ask before every edit and command","auto-edit":"auto-edit: edits run, commands ask","full-auto":"full-auto: nothing asks"};function sn(n){return W.includes(n)}var T={read:0,write:1,exec:2},H={suggest:"read","auto-edit":"write","full-auto":"exec"},B={read:"read",grep:"read",find:"read",ls:"read",think:"read",ask:"read",todo:"read",context:"read",web_search:"read",web_fetch:"read",lsp:"read",quality:"read",workflow:"exec",goal:"read",enter_plan_mode:"read",exit_plan_mode:"read",edit:"write",write:"write",bash:"exec",powershell:"exec",task:"exec"};function R(n){let t=B[n];return t||(n.startsWith("mcp__")?"write":"exec")}var V=new Set(["sudo","doas","env","nohup","time","exec","command","nice","setsid","stdbuf"]),Z=new Set(["-u","-g","-p","-C","-S","-U","--user","--group","--prompt","--close-from","--chdir","--setenv","--unset"]);function Y(n){let t=(n.match(/"[^"]*"|'[^']*'|\S+/g)??[]).map(s=>s.replace(/^['"]|['"]$/g,"")),o=0;for(;o<t.length;){let s=t[o]??"";if(/^[A-Za-z_][A-Za-z0-9_]*=/.test(s)||V.has(s)){o++;continue}if(s.startsWith("-")){o+=Z.has(s)?2:1;continue}break}let e=t[o];if(e===void 0)return;let r=e.split("/").pop()??e;if(r==="rm"){let s=t.slice(o+1),i=s.some(a=>/^-[a-zA-Z]*r[a-zA-Z]*$/i.test(a)||a==="--recursive"),c=s.find(a=>!a.startsWith("-"));return i&&(c===void 0||/^(?:\/|\/\*|~|~\/\*|\$HOME|\$HOME\/\*|\*)$/.test(c))?"recursive delete of the filesystem root or home":void 0}if(r==="dd")return t.slice(o+1).some(s=>/^of=\/dev\/(?:sd|nvme|hd|vd)/.test(s))?"raw write to a block device":void 0;if(/^mkfs(?:\.[a-z0-9]+)?$/.test(r))return"filesystem format";if(/:\(\)\s*\{.*\}\s*;:/.test(n))return"fork bomb";if(/^(?:shutdown|reboot|halt|poweroff)$/.test(r))return"host shutdown";if(/>\s*\/etc\/(?:passwd|shadow|sudoers)/.test(n))return"overwrite of a system account file"}var w="full-auto",_=async()=>!1,f=!1;function an(n){w=n}function ln(){return w}function cn(n){f=n}function un(){return f}function gn(n){_=n}function J(n,t,o){if(f)return{action:"run"};let e=typeof o?.command=="string"?o.command:"";if(t==="bash"||t==="powershell"){let s=Y(e);if(s)return{action:"deny",reason:`Refused in every mode: ${s}.`};if(b(e))return{action:"run"}}let r=R(t);return T[r]<=T[H[n]]?{action:"run"}:{action:"prompt",reason:`this is a ${r}-tier tool`}}function K(n,t){if(t&&typeof t=="object"){let o=t;if((n==="bash"||n==="powershell")&&typeof o.command=="string")return o.command;if((n==="edit"||n==="write")&&typeof o.path=="string"){let e=Array.isArray(o.edits)?` (${o.edits.length} edits)`:"";return`${o.path}${e}`}try{let e=JSON.stringify(o);if(e&&e!=="{}")return e.length>300?`${e.slice(0,297)}...`:e}catch{}}return n}function X(n,t,o){let e=[`Allow tool: ${n}`];n.startsWith("mcp__")&&e.push("Origin: MCP server tool"),e.push(`Reason: ${o}`);let r=K(n,t);return r!==n&&e.push(r),e.join(`
+`)}function dn(n={}){return t=>{t.on("tool_call",async o=>{if(f)return;let e=x(o.toolName,o.input);if(e)return{block:!0,reason:v(o.toolName,e.repeats)};let r=w,s=J(r,o.toolName,o.input);if(s.action==="run")return;if(s.action==="deny")return{block:!0,reason:s.reason};if(n.interactive===!1)return{block:!0,reason:`Blocked: this is a ${R(o.toolName)}-tier tool and no UI can approve it here (approval mode: ${r}).`};if(!await _(`${o.toolName} wants to run`,X(o.toolName,o.input,s.reason)))return{block:!0,reason:`Blocked by the user (approval mode: ${r}).`}})}}export{Q as a,b,W as c,rn as d,sn as e,T as f,H as g,R as h,Y as i,an as j,ln as k,cn as l,un as m,gn as n,J as o,K as p,X as q,dn as r};

package/dist/chunk-LAHVHRCS.js

@@ -0,0 +1,2 @@
+import{a}from"./chunk-LSJC73DG.js";import"./chunk-WOT6VMZA.js";import{readFileSync as p}from"node:fs";import{join as g}from"node:path";function f(o){try{let e=JSON.parse(p(g(o,"roblox-bridge.json"),"utf8"));if(typeof e.port=="number"&&typeof e.token=="string")return{port:e.port,token:e.token}}catch{}}var i="the Roblox bridge is not running. Install RoToolbox with /preset, restart, and it starts with the agent.",u=class{constructor(e,n=fetch,t=r=>a(r)){this.endpoint=e;this.fetcher=n;this.open=t}endpoint;fetcher;open;base(){if(!this.endpoint)throw new Error(i);return`http://127.0.0.1:${this.endpoint.port}`}async get(e){let n=await this.fetcher(`${this.base()}${e}`),t=await n.json().catch(()=>({}));if(!n.ok)throw new Error(t.error??`the bridge answered ${n.status}`);return t}async status(){return this.get("/roblox/status")}async login(e={}){if(!(await this.status()).oauth.configured)throw new Error("no Roblox OAuth app is configured. Set HOWTOFIX_ROBLOX_CLIENT_ID (or use ROBLOX_API_KEY for an API key).");let{url:t}=await this.get("/oauth/start");e.onUrl?.(t);let r=await this.open(t),l=Date.now()+(e.timeoutMs??5*6e4);for(;Date.now()<l;){await new Promise(d=>setTimeout(d,e.pollMs??1e3));let s=await this.status();if(s.oauth.signedIn)return{ok:!0,message:`signed in${s.oauth.userName?` as ${s.oauth.userName}`:""}`,url:t}}return{ok:!1,message:r?"timed out waiting for the Roblox consent screen":"could not open a browser; open the URL yourself, then run /roblox status",url:t}}async logout(){if(!this.endpoint)throw new Error(i);await this.get(`/oauth/logout?token=${encodeURIComponent(this.endpoint.token)}`)}async tunnel(e){if(!this.endpoint)throw new Error(i);let n=await this.fetcher(`${this.base()}/tunnel`,{method:"POST",headers:{"content-type":"application/json","x-howtofix-token":this.endpoint.token},body:JSON.stringify({action:e})}),t=await n.json().catch(()=>({}));if(!n.ok)throw new Error(t.error??`the bridge answered ${n.status}`);return t}};function w(o,e){let n=[];return o.oauth.signedIn?(n.push(`Roblox: signed in${o.oauth.userName?` as ${o.oauth.userName}`:""}`),n.push(o.oauth.universeIds.length>0?`experiences: ${o.oauth.universeIds.join(", ")}`:"experiences: none granted yet (sign in again and tick one)")):o.openCloud?n.push("Roblox: using an API key (ROBLOX_API_KEY)"):n.push(`Roblox: not signed in${o.oauth.configured?" \u2014 run /roblox login":" \u2014 set HOWTOFIX_ROBLOX_CLIENT_ID to enable sign-in"}`),n.push(`virtual places: ${o.places.join(", ")||"none"} (answer tools when Studio is closed)`),e&&n.push(`workspace tunnel: ${e.open?"connected":e.running?"connecting":"off"}`),n.join(`
+`)}function m(o){let[e="",...n]=o.trim().split(/\s+/);if(e==="login"||e==="logout"||e==="status"||e==="tunnel")return{sub:e,rest:n.join(" ")}}export{u as RobloxConnect,w as describeStatus,m as parseRobloxSubcommand,f as readBridgeEndpoint};

package/dist/chunk-LJEKOS4S.js

@@ -0,0 +1,6 @@
+import{a as y}from"./chunk-UTYFLLSM.js";import{h as k,i as T}from"./chunk-MVTU4M3W.js";import{existsSync as L,mkdirSync as $,readFileSync as b}from"node:fs";import{join as M}from"node:path";var F="https://models.dev/api.json";var O=["anthropic","openai","google","deepseek","zai","xai","moonshotai","minimax","alibaba","xiaomi","meta","tencent","nvidia","venice","openrouter"];function x(n){return n.toLowerCase().replace(/[^a-z0-9]+/g,"")}function S(n){let r=n.split("/");return x(r[r.length-1]??n)}function W(n){let r=new Map,o=new Map;if(!n||typeof n!="object")return r;let t=n,s=i=>{let e=O.indexOf(i);return e===-1?O.length:e};for(let i of Object.keys(t).sort()){let e=t[i]?.models;if(!(!e||typeof e!="object"))for(let a of Object.keys(e)){let c=e[a],u=Number(c?.limit?.context);if(!Number.isFinite(u)||u<=0)continue;let l=x(a),d=s(i),m=o.get(l);if(m!==void 0&&m<=d)continue;let f=Number(c?.limit?.output);r.set(l,{contextWindow:Math.floor(u),maxTokens:Number.isFinite(f)&&f>0?Math.floor(f):void 0,reasoning:c?.reasoning===!0,vision:Array.isArray(c?.modalities?.input)&&c.modalities.input.includes("image")}),o.set(l,d)}}return r}function A(n,r){let o=x(r);if(!o)return;let t=n.get(o);if(t)return t;let s=S(r);for(let[i,e]of n)if(S(i)===s)return e;for(let[i,e]of n)if(i.endsWith(o)||o.endsWith(i))return e}function v(n){return`${n}/models-dev-cache.json`}function N(n){let r={};for(let[o,t]of n)r[o]=[t.contextWindow,t.maxTokens??0,t.reasoning?1:0,t.vision?1:0];return JSON.stringify(r)}function R(n){let r=new Map,o;try{o=JSON.parse(n)}catch{return r}if(!o||typeof o!="object")return r;for(let[t,s]of Object.entries(o)){if(!Array.isArray(s)||s.length<3)continue;let i=Number(s[0]),e=Number(s[1]);!Number.isFinite(i)||i<=0||r.set(t,{contextWindow:Math.floor(i),maxTokens:Number.isFinite(e)&&e>0?Math.floor(e):void 0,reasoning:s[2]===1||s[2]===!0,vision:s[3]===1||s[3]===!0})}return r}async function I(n){let r=n?.url??F,o=n?.fetchImpl??fetch,t=n?.timeoutMs??2e4,s=new AbortController,i=setTimeout(()=>s.abort(),t);try{let e=await o(r,{signal:s.signal,headers:{Accept:"application/json"}});if(!e.ok)return{ok:!1,message:`the model catalogue answered ${e.status}`};let a=W(await e.json());return a.size===0?{ok:!1,message:"the model catalogue was empty or in an unexpected shape"}:{ok:!0,index:a}}catch(e){return{ok:!1,message:e instanceof Error&&e.name==="AbortError"?`the model catalogue did not answer within ${Math.round(t/1e3)}s`:"could not reach the model catalogue"}}finally{clearTimeout(i)}}var _="https://api.howtofix.id/v1",ne="https://howtofix.id/keys",C=["howtofix","howtofix-free"];function re(n){try{let o=JSON.parse(b(M(n,"models.json"),"utf8")).providers;return!o||typeof o!="object"?new Set:new Set(Object.keys(o))}catch{return new Set}}function oe(){return{baseUrl:_,api:"openai-completions",headers:{[k]:T()}}}function se(n){let r=M(n,"models.json"),o;try{o=JSON.parse(b(r,"utf8"))}catch{return 0}let t=o.providers;if(!t||typeof t!="object")return 0;let s=0;for(let i of C){let e=t[i];if(!e||!Array.isArray(e.models))continue;let a=X(e.models),c={...e.headers??{},[k]:T()},u=e.headers?.[k]!==c[k];a.changed===0&&!u||(e.models=a.models,e.headers=c,s+=a.changed===0?1:a.changed)}if(s===0)return 0;try{y(r,`${JSON.stringify(o,null,2)}
+`)}catch{return 0}return s}var D=10080*60*1e3;async function j(n,r){let o=v(n),t=r?.now??Date.now(),s,i=0;try{let c=JSON.parse(b(o,"utf8"));typeof c?.entries=="string"&&(s=R(c.entries),i=Number(c.at)||0)}catch{s=void 0}if(s&&s.size>0&&t-i<D&&!r?.force)return{index:s};let a=await I({fetchImpl:r?.fetchImpl});if(!a.ok)return s&&s.size>0?{index:s,message:a.message}:{index:new Map,message:a.message};try{$(n,{recursive:!0}),y(o,`${JSON.stringify({at:t,entries:N(a.index)})}
+`)}catch{}return{index:a.index}}async function ie(n,r){let o=M(n,"models.json"),t;try{t=JSON.parse(b(o,"utf8"))}catch{return{changed:0}}let s=t.providers;if(!s||typeof s!="object")return{changed:0};let{index:i,message:e}=await j(n,r);if(i.size===0&&!r?.prices)return{changed:0,message:e};let a=0;for(let c of C){let u=s[c];if(!u||!Array.isArray(u.models))continue;let l=B(u.models,i,r?.prices);l.changed!==0&&(u.models=l.models,a+=l.changed)}if(a>0)try{y(o,`${JSON.stringify(t,null,2)}
+`)}catch{return{changed:0,message:"the models file could not be written"}}return{changed:a,message:e}}var z=3e5;function ae(n){let r=M(n,"settings.json"),o={};try{let t=b(r,"utf8"),s=JSON.parse(t);s&&typeof s=="object"&&!Array.isArray(s)&&(o=s)}catch{if(L(r))return!1}if("httpIdleTimeoutMs"in o)return!1;o.httpIdleTimeoutMs=z;try{$(n,{recursive:!0}),y(r,`${JSON.stringify(o,null,2)}
+`)}catch{return!1}return!0}var U={supportsDeveloperRole:!1},P=128e3;function ce(n){let r=n.trim();return r.length<=10?"***":`${r.slice(0,6)}\u2026${r.slice(-4)}`}function ue(n){return/^sk-[A-Za-z0-9_-]{8,}$/.test(n.trim())}function J(n){let r=(()=>{if(Array.isArray(n))return n;if(n&&typeof n=="object"){let t=n;if(Array.isArray(t.data))return t.data;if(Array.isArray(t.models))return t.models}return[]})(),o=[];for(let t of r){let s=typeof t=="string"?t:t&&typeof t=="object"&&typeof t.id=="string"?t.id:void 0;s&&!o.includes(s)&&o.push(s)}return o}function le(n){return C.includes(n)}var H=1e8;async function G(n,r){let o=await n(r,{headers:{Accept:"application/json"}});if(!o.ok)return"USD";let s=(await o.json())?.data?.quota_display_type;return typeof s=="string"&&s.trim()?s.trim().toUpperCase():"USD"}async function de(n,r){let o=(r?.baseUrl??_).replace(/\/+$/,""),t=r?.fetchImpl??fetch,s=r?.timeoutMs??15e3,i=n.trim();if(!i)return{ok:!1,unlimited:!1,unit:"USD",message:"no token given"};let e=`${o.replace(/\/v1$/,"")}/api/status`,a=await G(t,e).catch(()=>"USD"),c=new AbortController,u=setTimeout(()=>c.abort(),s),l={Authorization:`Bearer ${i}`};try{let[d,m]=await Promise.all([t(`${o}/dashboard/billing/subscription`,{headers:l,signal:c.signal}),t(`${o}/dashboard/billing/usage`,{headers:l,signal:c.signal})]);if(d.status===401||d.status===403)return{ok:!1,unlimited:!1,unit:a,message:"the gateway rejected that token when asking for the balance"};if(!d.ok)return{ok:!1,unlimited:!1,unit:a,message:`the balance endpoint answered ${d.status}`};let f=await d.json();if(f.error?.message)return{ok:!1,unlimited:!1,unit:a,message:f.error.message};let p=Number(f.hard_limit_usd??f.soft_limit_usd??0);if(p>=H)return{ok:!0,unlimited:!0,unit:a,message:"this token has no quota limit"};let g=0;if(m.ok){let w=await m.json();g=Number(w.total_usage??0)/100}let h=Math.max(0,p-g);return{ok:!0,unlimited:!1,limit:p,used:g,remaining:h,unit:a,message:`${h.toFixed(2)} ${a} left of ${p.toFixed(2)} (${g.toFixed(2)} used)`}}catch(d){let m=d instanceof Error&&d.name==="AbortError";return{ok:!1,unlimited:!1,unit:a,message:m?`the gateway did not answer within ${Math.round(s/1e3)}s`:"could not reach the gateway"}}finally{clearTimeout(u)}}async function me(n,r,o){let t=M(n,"models.json"),s;try{s=JSON.parse(b(t,"utf8"))}catch{return{added:0,touched:0}}let i=s.providers;if(!i||typeof i!="object")return{added:0,touched:0};let{index:e}=await j(n).catch(()=>({index:new Map})),a=0,c=0;for(let u of C){let l=i[u];if(!l||!Array.isArray(l.models))continue;let d=l.models.length;l.models=q(l.models,r,e,o),a+=l.models.length-d,c++}if(a===0)return{added:0,touched:c};try{y(t,`${JSON.stringify(s,null,2)}
+`)}catch{return{added:0,touched:c}}return{added:a,touched:c}}function q(n,r,o,t){let s=new Set(n.map(e=>e.id)),i=[...n];for(let e of r){if(s.has(e))continue;s.add(e);let a=o?.get(x(e))??(o?A(o,e):void 0);i.push({id:e,contextWindow:a?.contextWindow??P,...a?.maxTokens?{maxTokens:a.maxTokens}:{},...a?{reasoning:a.reasoning}:{},...a?.vision?{input:["text","image"]}:{},...t?.get(e)?{cost:t.get(e)}:{},compat:{...U}})}return i}function B(n,r,o){let t=0;return{models:n.map(i=>{let e=A(r,i.id);if(!e){let l=o?.get(i.id);return!l||i.cost?i:(t++,{...i,cost:l})}let a={...i},c=!1;e.contextWindow&&i.contextWindow===P&&(a.contextWindow=e.contextWindow,c=!0),e.maxTokens&&!i.maxTokens&&(a.maxTokens=e.maxTokens,c=!0),i.reasoning===void 0&&(a.reasoning=e.reasoning,c=!0),e.vision&&!(i.input??[]).includes("image")&&(a.input=[...(i.input??["text"]).filter(l=>l!=="image"),"image"],c=!0);let u=o?.get(i.id);return u&&!i.cost&&(a.cost=u,c=!0),c?(t++,a):i}),changed:t}}function X(n){let r=0;return{models:n.map(t=>t.compat?.supportsDeveloperRole===!1?t:(r++,{...t,compat:{...t.compat,...U}})),changed:r}}function fe(n,r){let o=new Set(n.map(t=>t.id));return r.filter(t=>!o.has(t)).length}async function V(n,r,o){let t=(o?.baseUrl??_).replace(/\/+$/,""),s=o?.fetchImpl??fetch,i=o?.timeoutMs??1e4,e=new AbortController,a=setTimeout(()=>e.abort(),i);try{let c=await s(`${t}/chat/completions`,{method:"POST",headers:{Authorization:`Bearer ${r}`,"Content-Type":"application/json"},body:JSON.stringify({model:n,messages:[{role:"user",content:"hi"}],max_tokens:1}),signal:e.signal});if(c.ok)return{ok:!0,detail:"ok"};let u=await c.text().catch(()=>"");return{ok:!1,detail:/"message"\s*:\s*"([^"]{0,80})/.exec(u)?.[1]??`HTTP ${c.status}`}}catch(c){return{ok:!1,detail:c instanceof Error&&c.name==="AbortError"?"timed out":"unreachable"}}finally{clearTimeout(a)}}async function ge(n,r,o){let t=Math.max(0,o?.limit??4),s=[...new Set(n)].filter(e=>e!==o?.exclude).slice(0,t),i=await Promise.all(s.map(e=>V(e,r,o)));return{live:s.filter((e,a)=>i[a]?.ok),probed:s}}async function pe(n,r){let o=(r?.baseUrl??_).replace(/\/+$/,""),t=r?.fetchImpl??fetch,s=r?.timeoutMs??15e3,i=n.trim();if(!i)return{ok:!1,models:[],message:"no token given"};let e=new AbortController,a=setTimeout(()=>e.abort(),s);try{let c=await t(`${o}/models`,{headers:{Authorization:`Bearer ${i}`},signal:e.signal});if(c.status===401)return{ok:!1,models:[],message:"the gateway rejected that token (401). Check it in the Console, or make a new one."};if(c.status===403)return{ok:!1,models:[],message:"that token is not allowed to list models (403). The Console shows what a token may call."};if(!c.ok)return{ok:!1,models:[],message:`the gateway answered ${c.status}`};let u=J(await c.json());return u.length===0?{ok:!1,models:[],message:"the token works but the gateway listed no models"}:{ok:!0,models:u,message:`${u.length} models available to this token`}}catch(c){let u=c instanceof Error&&c.name==="AbortError";return{ok:!1,models:[],message:u?`the gateway did not answer within ${Math.round(s/1e3)}s`:"could not reach the gateway"}}finally{clearTimeout(a)}}async function he(n,r){let t=`${(r?.baseUrl??_).replace(/\/+$/,"").replace(/\/v1$/,"")}/api/pricing`,s=r?.fetchImpl??fetch,i=r?.timeoutMs??15e3,e=new Map,a=n.trim();if(!a)return e;let c=new AbortController,u=setTimeout(()=>c.abort(),i);try{let l=await s(t,{headers:{Authorization:`Bearer ${a}`},signal:c.signal});if(!l.ok)return e;let d=await l.json();if(!Array.isArray(d?.data))return e;for(let m of d.data){let f=typeof m?.model_name=="string"?m.model_name:"";if(!f||Number(m.quota_type??0)!==0)continue;let p=Number(m.model_ratio);if(!Number.isFinite(p)||p<0)continue;let g=p*2,h=Number(m.completion_ratio),w=Number(m.cache_ratio),E=Number(m.create_cache_ratio);e.set(f,{input:g,output:Number.isFinite(h)&&h>=0?g*h:0,cacheRead:Number.isFinite(w)&&w>=0?g*w:0,cacheWrite:Number.isFinite(E)&&E>=0?g*E:0})}}catch{}finally{clearTimeout(u)}return e}export{_ as a,ne as b,C as c,re as d,oe as e,se as f,D as g,j as h,ie as i,z as j,ae as k,U as l,P as m,ce as n,ue as o,J as p,le as q,H as r,de as s,me as t,q as u,B as v,X as w,fe as x,V as y,ge as z,pe as A,he as B};

package/dist/chunk-LSJC73DG.js

@@ -0,0 +1 @@
+import{spawn as t}from"node:child_process";function s(n){switch(n){case"darwin":return{command:"open",args:[]};case"win32":return{command:"cmd",args:["/c","start",""]};case"linux":return{command:"xdg-open",args:[]};default:return}}async function d(n,a=process.platform){let r=s(a);return r?new Promise(e=>{try{let o=t(r.command,[...r.args,n],{detached:!0,stdio:"ignore"});o.once("error",()=>e(!1)),o.once("spawn",()=>{o.unref(),e(!0)})}catch{e(!1)}}):!1}export{d as a};

package/dist/chunk-MOKUBKE7.js

@@ -0,0 +1 @@
+var i=/no available channel for model\s+([^\s"',)\]]+)/i;function r(t){let e=t??"";if(e.trim())return i.exec(e)?.[1]}function a(t){let e=t??"";if(!e.trim())return;let n=r(e);if(n)return`the gateway has no live channel for ${n} right now \u2014 /model lists the models that answer; pick another.`;if(/\bmissing api key\b|\bauthenticationerror\b|\bauth\s*error\b/i.test(e))return"no key for this model yet \u2014 /connect signs you in and pulls the model list.";if(/\bunknown model\b/i.test(e))return"/connect pulls the current model list from the gateway.";if(/\bcode 11128\b|\billegal api invocation\b/i.test(e))return"the gateway refused the request shape (code 11128) \u2014 /connect re-syncs each model's compatibility flags.";if(/\binsufficient (?:balance|quota|credit)\b|\bexceeded your current quota\b|http\s*402/i.test(e))return"the account is out of credit \u2014 /usage shows what is left.";if(/\bserver error\b|http\s*5\d\d/i.test(e))return"the gateway's channel is failing, not the CLI \u2014 /model lists what your account can reach; pick another.";if(/\brate.?limit|\b429\b/i.test(e))return"the gateway is rate-limiting this token \u2014 wait a moment, then resend the prompt.";if(/\bupstream api error\b/i.test(e))return"the gateway refused the request \u2014 run /connect again to re-sync your models."}export{r as a,a as b};

package/dist/chunk-MVTU4M3W.js

@@ -0,0 +1,2 @@
+import{b as o}from"./chunk-DVYH677E.js";import{createPrivateKey as p,createPublicKey as f,createHash as l,randomBytes as y,sign as m}from"node:crypto";import{arch as s,cpus as I,hostname as d,platform as c}from"node:os";var a="hf-cli-1",x="MC4CAQAwBQYDK2VwBCIEIDmKoNgInS7oDpncee1d1+Mnci1R/q4aE5xxHeCKq4Dc",C="howtofix-cli-auth-v1",i;function u(){return i||(i=p({key:Buffer.from(x,"base64"),format:"der",type:"pkcs8"})),i}function g(){return f(u())}function K(t,e,n,r){return Buffer.from([C,t,e,n,r].join(`
+`),"utf8")}function h(){return y(16).toString("hex")}var E="tQ91uspGl0sw5Y8x+soLYnFNX6a9vEzSzCuuvalzdKk=";function P(){let t=g().export({format:"der",type:"spki"});return t.subarray(t.length-32).toString("base64")===E}function N(){let t=g().export({format:"der",type:"spki"});return l("sha256").update(t).digest("hex").slice(0,16)}function $(){let e=(I()[0]?.model??"").replace(/\s+/g," ").trim(),n=d(),r=e?`${n} (${c()}/${s()}, ${e})`:`${n} (${c()}/${s()})`;return`CLI (${o}, ${r})`}var k="X-HowToFix-Client";function A(){return`CLI (${o})`}function B(t,e){let n=h(),r=m(null,K(a,t,e,n),u());return{keyId:a,nonce:n,signature:r.toString("base64")}}export{a,g as b,K as c,h as d,P as e,N as f,$ as g,k as h,A as i,B as j};

package/dist/chunk-N345KWWK.js

@@ -0,0 +1 @@
+import{a,b,c,d}from"./chunk-PCALBZOO.js";import"./chunk-WOT6VMZA.js";export{c as describeSandbox,a as detectSandbox,d as enterSandbox,b as sandboxArgv};

package/dist/chunk-ONZLNFQ2.js

@@ -0,0 +1,3 @@
+import"./chunk-WOT6VMZA.js";import{createInterface as l}from"node:readline";function f(n){let{agent:i}=n,p=e=>n.output.write(`${JSON.stringify(e)}
+`),t=(e,r,d,a={})=>p({...e!==void 0?{id:e}:{},type:"response",command:r,success:d,...a}),c=i.subscribe(e=>{let r=n.encodeEvent?n.encodeEvent(e):`${JSON.stringify(e)}
+`;r!==void 0&&n.output.write(r)}),u=null;return new Promise(e=>{let r=l({input:n.input});r.on("line",d=>{if(d.trim()==="")return;let a;try{a=JSON.parse(d)}catch{t(void 0,"parse",!1,{error:"a command must be one JSON object per line"});return}let{id:s,type:o}=a;if(o==="prompt"){if(typeof a.message!="string"||a.message.trim()===""){t(s,"prompt",!1,{error:"prompt needs a message"});return}if(u){t(s,"prompt",!1,{error:"a prompt is already running; abort it or wait"});return}t(s,"prompt",!0),u=i.prompt(a.message).catch(m=>{p({type:"error",message:m instanceof Error?m.message:String(m)})}).finally(()=>{u=null});return}if(o==="abort"){i.abort().then(()=>t(s,"abort",!0));return}if(o==="get_state"){t(s,"get_state",!0,{data:{running:u!==null,...n.state?.()??{}}});return}if(o==="get_last_assistant_text"){t(s,"get_last_assistant_text",!0,{data:{text:i.getLastAssistantText()??null}});return}t(s,String(o??"unknown"),!1,{error:`unknown command ${String(o)}`})}),r.on("close",()=>{(u??Promise.resolve()).then(async()=>{c(),await i.dispose(),e()})})})}export{f as runRpc};

package/dist/chunk-ORJ2QZBG.js

@@ -0,0 +1,3 @@
+import{readFileSync as f,statSync as u}from"node:fs";import{isAbsolute as a,resolve as p}from"node:path";var $=64*1024;function S(o,c){return o.replace(/(^|\s)@([^\s]+)/g,(e,l,i)=>{let t=i.replace(/[),.;:]+$/,""),g=i.slice(t.length),n=a(t)?t:p(c,t);try{let r=u(n);if(!r.isFile()||r.size===0||r.size>$)return e;let s=f(n);return s.includes(0)?e:`${l}<file name="${n}">
+${s.toString("utf8").trimEnd()}
+</file>${g}`}catch{return e}})}export{S as a};

package/dist/chunk-PCALBZOO.js

@@ -0,0 +1,2 @@
+import{spawnSync as s}from"node:child_process";import{accessSync as d,constants as b}from"node:fs";import{join as l}from"node:path";function c(r){try{return d(r,b.X_OK),!0}catch{return!1}}function w(r=process.platform,e=process.env.PATH??""){let n=e.split(":").filter(Boolean),o=t=>n.map(i=>l(i,t)).find(c);if(r==="linux"){let t=o("bwrap");return t&&s(t,["--ro-bind","/","/","--","true"],{stdio:"ignore",timeout:3e3}).status===0?"bubblewrap":void 0}if(r==="darwin")return o("sandbox-exec")?"seatbelt":void 0}function a(r,e){return r==="bubblewrap"?["bwrap","--die-with-parent","--new-session","--ro-bind","/","/","--dev","/dev","--proc","/proc","--tmpfs","/tmp","--bind",e.cwd,e.cwd,"--bind",e.agentDir,e.agentDir,"--chdir",e.cwd,"--",...e.argv]:["sandbox-exec","-p",["(version 1)","(deny default)","(allow process*)","(allow signal)","(allow sysctl-read)","(allow mach-lookup)","(allow network*)","(allow file-read*)",`(allow file-write* (subpath "${e.cwd}") (subpath "${e.agentDir}") (subpath "/tmp") (subpath "/private/tmp") (subpath "/private/var/folders"))`,""].join(`
+`),...e.argv]}function x(r){return r==="bubblewrap"?"sandbox: bubblewrap \u2014 project writable, rest of the filesystem read-only":"sandbox: seatbelt \u2014 project writable, rest of the filesystem read-only"}function g(r,e){let n=s(a(r,e)[0],a(r,e).slice(1),{stdio:"inherit",env:{...process.env,HOWTOFIX_SANDBOXED:"1"}});return n.error?(console.error(`sandbox: could not start ${r}: ${n.error.message}`),1):n.status??1}export{w as a,a as b,x as c,g as d};

package/dist/chunk-Q7VRW74X.js

@@ -0,0 +1 @@
+import{b as r}from"./chunk-DVYH677E.js";import"./chunk-WOT6VMZA.js";function a(e){return{prompt:s=>e.session.prompt(s),abort:()=>e.session.abort(),subscribe:s=>e.session.subscribe(n=>s(n)),getLastAssistantText:()=>e.session.getLastAssistantText(),lastStopReason:()=>{let s=e.session.state.messages.at(-1);return s?.role==="assistant"?s.stopReason:void 0},dispose:()=>e.dispose()}}async function u(e,s){let{openSession:n}=await import("./chunk-A5WOL324.js"),i=t=>n({cwd:t,model:s.model,thinking:s.thinking,continueSession:!1,noSession:!1,sessionPath:void 0,interactive:!1});if(e==="acp"){let{runAcp:t}=await import("./chunk-DAPXGSGD.js");await t({input:process.stdin,output:process.stdout,version:r,createAgent:async d=>a(await i(d))});return}let{runRpc:p}=await import("./chunk-ONZLNFQ2.js"),{jsonLine:c}=await import("./chunk-DOD7MUGX.js"),o=await i(s.cwd);await p({input:process.stdin,output:process.stdout,agent:a(o),encodeEvent:t=>c(t),state:()=>({sessionId:o.session.sessionId,model:o.modelLabel,cwd:s.cwd})})}export{a as agentFromSession,u as serveProtocol};

package/dist/chunk-QJ6MIM5Z.js

@@ -0,0 +1 @@
+import{A,B,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u,v,w,x,y,z}from"./chunk-LJEKOS4S.js";import"./chunk-UTYFLLSM.js";import"./chunk-MVTU4M3W.js";import"./chunk-DVYH677E.js";import"./chunk-WOT6VMZA.js";export{g as CATALOG_CACHE_TTL_MS,m as DEFAULT_CONTEXT_WINDOW,a as HOWTOFIX_BASE_URL,b as HOWTOFIX_CONSOLE_URL,l as HOWTOFIX_MODEL_COMPAT,c as HOWTOFIX_PROVIDERS,j as HTTP_IDLE_TIMEOUT_MS,r as UNLIMITED_SENTINEL,v as applyCatalog,w as applyCompat,A as checkAccount,s as checkUsage,d as configuredProviderIds,x as countNewModels,k as ensureGatewaySettings,B as fetchGatewayPrices,z as findLiveModels,q as isHowtofixProvider,h as loadCatalog,o as looksLikeToken,n as maskToken,u as mergeModels,e as newProviderEntry,p as parseModelIds,y as probeModel,f as repairGatewayModels,i as repairModelFacts,t as syncGatewayModelsOnStart};

package/dist/chunk-TSEKPGK4.js

@@ -0,0 +1 @@
+import{a}from"./chunk-ORJ2QZBG.js";import"./chunk-WOT6VMZA.js";export{a as expandFileReferences};

package/dist/chunk-UTYFLLSM.js

@@ -0,0 +1 @@
+import{closeSync as S,fsyncSync as d,openSync as f,renameSync as i,rmSync as t,writeSync as a}from"node:fs";import{dirname as u,join as E}from"node:path";function l(o,m,s){let r=E(u(o),`.${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2,8)}.tmp`),e=f(r,"w",s?.mode);try{a(e,m),d(e)}finally{S(e)}try{i(r,o)}catch(n){let c=n.code;if(c!=="EPERM"&&c!=="EBUSY"&&c!=="EACCES")throw t(r,{force:!0}),n;t(o,{force:!0});try{i(r,o)}catch(y){throw t(r,{force:!0}),y}}}export{l as a};

package/dist/chunk-V3R4FYTJ.js

@@ -0,0 +1 @@
+import{a,b,c,d,e,f,g,h}from"./chunk-27TRKD65.js";import"./chunk-UTYFLLSM.js";import"./chunk-WOT6VMZA.js";export{a as DEFAULT_WORKBENCH_SETTINGS,d as markWelcomeSeen,b as readWorkbenchSettings,f as rightClickPastesHere,g as writeAgentsSetting,e as writeRightClickPasteSetting,h as writeStringSetting,c as writeWorkbenchSetting};

package/dist/chunk-V656XVXV.js

@@ -0,0 +1,8 @@
+import{a as j}from"./chunk-UTYFLLSM.js";import{homedir as we}from"node:os";import{join as $,resolve as Ae}from"node:path";import{cpSync as ue,existsSync as S,mkdirSync as P,mkdtempSync as D,readdirSync as R,readFileSync as O,renameSync as pe,rmSync as k,statSync as x,writeFileSync as T}from"node:fs";import{tmpdir as X}from"node:os";import{dirname as Z,isAbsolute as me,join as l,relative as ge,resolve as N}from"node:path";import{fileURLToPath as de}from"node:url";import{execFileSync as ye}from"node:child_process";import{createHash as U}from"node:crypto";import{existsSync as w,readFileSync as H}from"node:fs";import{dirname as oe,join as L}from"node:path";import{fileURLToPath as ae}from"node:url";function F(e=y){return L(e,"mcp.json")}function z(e){let r=[];if(e===void 0)return r;if(typeof e!="object"||e===null||Array.isArray(e))return["mcp must be an object of server names"];for(let[t,s]of Object.entries(e)){if(!/^[A-Za-z0-9_-]+$/.test(t)){r.push(`mcp server "${t}" must use only letters, digits, _ and -`);continue}if(typeof s!="object"||s===null||Array.isArray(s)){r.push(`mcp server "${t}" must be an object`);continue}let n=s,i=typeof n.command=="string"&&n.command.trim()!=="",o=typeof n.url=="string"&&n.url.trim()!=="";!i&&!o&&r.push(`mcp server "${t}" needs either a command or a url`),n.args!==void 0&&!Array.isArray(n.args)&&r.push(`mcp server "${t}": args must be an array`);for(let c of["env","headers"]){let a=n[c];if(a!==void 0){if(typeof a!="object"||a===null||Array.isArray(a)){r.push(`mcp server "${t}": ${c} must be an object of strings`);continue}for(let[f,u]of Object.entries(a))typeof u!="string"&&r.push(`mcp server "${t}": ${c}.${f} must be a string`)}}}return r}function J(e){if(!w(e))return{mcpServers:{}};try{let r=JSON.parse(H(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{mcpServers:{}};let t=r.mcpServers;return!t||typeof t!="object"||Array.isArray(t)?{mcpServers:{}}:{mcpServers:t}}catch{return{mcpServers:{}}}}function Te(e,r=y){let t=Object.keys(e);if(t.length===0)return{added:[],skipped:[],problems:[]};let s=F(r),n=[];if(w(s))try{JSON.parse(H(s,"utf8"))}catch{return{added:[],skipped:[],problems:[`${s} is not valid JSON; leaving it alone`]}}let i=J(s),o=[],c=[];for(let a of t){if(i.mcpServers[a]!==void 0){c.push(a);continue}i.mcpServers[a]=e[a],o.push(a)}if(o.length>0)try{j(s,`${JSON.stringify(i,null,2)}
+`)}catch(a){return{added:[],skipped:c,problems:[`could not write ${s}: ${a instanceof Error?a.message:String(a)}`]}}return{added:o,skipped:c,problems:n}}function Ne(e,r=new Set,t=y){let s=F(t),n=[];if(e.length===0||!w(s))return{removed:[],kept:[],problems:n};let i=J(s),o=[],c=[];for(let a of e)if(i.mcpServers[a]!==void 0){if(r.has(a)){c.push(a);continue}delete i.mcpServers[a],o.push(a)}if(o.length>0)try{j(s,`${JSON.stringify(i,null,2)}
+`)}catch(a){return{removed:[],kept:c,problems:[`could not write ${s}: ${a instanceof Error?a.message:String(a)}`]}}return{removed:o,kept:c,problems:n}}function Ce(e){if(typeof e.url=="string"&&e.url)return`http: ${e.url}`;let r=typeof e.command=="string"?e.command:"",t=Array.isArray(e.args)?e.args.filter(s=>typeof s=="string"):[];return`stdio: ${[r,...t].join(" ")}`.trim()}function ce(){return L(oe(ae(import.meta.url)),"presets","mcp-hub.json")}function De(e=ce()){let r=[];if(!w(e))return{entries:[],problems:[`no MCP catalogue at ${e}`]};let t;try{t=JSON.parse(H(e,"utf8"))}catch(i){return{entries:[],problems:[`${e} is not valid JSON: ${i instanceof Error?i.message:String(i)}`]}}let s=t?.entries;if(!Array.isArray(s))return{entries:[],problems:[`${e} has no entries array`]};let n=[];for(let i of s){if(typeof i!="object"||i===null||Array.isArray(i))continue;let o=i,c=typeof o.name=="string"?o.name.trim():"";if(!c){r.push("an entry has no name");continue}if(!/^[A-Za-z0-9_-]+$/.test(c)){r.push(`"${c}" is not a usable server name`);continue}let a=typeof o.command=="string"&&o.command.trim()!=="",f=typeof o.url=="string"&&o.url.trim()!=="";if(!a&&!f){r.push(`"${c}" has neither a command nor a url`);continue}n.push({name:c,title:typeof o.title=="string"?o.title:c,description:typeof o.description=="string"?o.description:"",category:typeof o.category=="string"?o.category:"other",preset:typeof o.preset=="string"?o.preset:void 0,command:typeof o.command=="string"?o.command:void 0,url:typeof o.url=="string"?o.url:void 0,args:Array.isArray(o.args)?o.args.filter(u=>typeof u=="string"):void 0,env:o.env&&typeof o.env=="object"&&!Array.isArray(o.env)?o.env:void 0,needs:Array.isArray(o.needs)?o.needs.filter(u=>typeof u=="string"):void 0,docs:typeof o.docs=="string"?o.docs:void 0})}return{entries:n,problems:r}}function _e(e){return[...new Set(e.map(r=>r.category))].sort()}function Le(e,r){return e.filter(t=>t.category===r).sort((t,s)=>t.title.localeCompare(s.title))}function Fe(e,r){return e.find(t=>t.name===r)}function ze(e){let r={};return e.command&&(r.command=e.command),e.url&&(r.url=e.url),e.args&&e.args.length>0&&(r.args=[...e.args]),e.env&&Object.keys(e.env).length>0&&(r.env={...e.env}),e.description&&(r.description=e.description),r}function Je(e,r=process.env){return(e.needs??[]).filter(t=>!r[t])}import{gunzipSync as le}from"node:zlib";var v=512;function A(e,r,t){let s=e.subarray(r,r+t),n=s.indexOf(0);return s.subarray(0,n===-1?s.length:n).toString("utf8").trim()}function B(e,r,t){let s=A(e,r,t);if(!s)return 0;let n=Number.parseInt(s,8);return Number.isFinite(n)?n:0}function fe(e){let r={},t=0;for(;t<e.length;){let s=e.indexOf(32,t);if(s===-1)break;let n=Number.parseInt(e.toString("utf8",t,s),10);if(!Number.isFinite(n)||n<=0)break;let i=e.toString("utf8",s+1,t+n-1),o=i.indexOf("=");o>0&&(r[i.slice(0,o)]=i.slice(o+1)),t+=n}return r}function G(e){let r=le(e),t=[],s=0,n,i={};for(;s+v<=r.length;){let o=r.subarray(s,s+v);if(o.every(ie=>ie===0))break;let c=A(o,0,100),a=A(o,345,155),f=B(o,124,12),u=B(o,100,8),m=String.fromCharCode(o[156]??48),p=A(o,157,100),d=f>0?r.subarray(s+v,s+v+f):Buffer.alloc(0);if(s+=v+Math.ceil(f/v)*v,m==="x"||m==="g"){i=fe(d);continue}if(m==="L"){n=d.toString("utf8").replace(/\0.*$/s,"").trim();continue}let h=i.path??n??(a?`${a}/${c}`:c);n=void 0,i={};let g=h.indexOf("/");if(g===-1||(h=h.slice(g+1),h=h.replace(/\/+$/,""),!h))continue;let b=m==="5"?"directory":m==="2"?"symlink":m==="0"||m==="\0"||m===""?"file":"other";t.push({path:h,kind:b,size:f,mode:u&511,...b==="file"?{data:Buffer.from(d)}:{},...b==="symlink"?{link:p}:{}})}return t}function K(e){if(!e||e.startsWith("/")||e.startsWith("\\")||/^[a-zA-Z]:/.test(e))return!1;let r=e.replace(/\/+$/,"");return r?r.split("/").every(s=>s!==""&&s!=="."&&s!==".."):!1}function W(e,r){let t=`${r.replace(/\/+$/,"")}/`,s=[];for(let n of e){if(!n.path.startsWith(t))continue;let i=n.path.slice(t.length);i&&s.push({...n,path:i})}return s}function he(){return l(y,"presets")}function q(e){return l(e,".howtofix","presets")}function V(e){return S(l(e,".disabled"))}function Q(){return l(Z(de(import.meta.url)),"presets")}function M(e){return[q(e),he()]}var Y=/^[a-z0-9][a-z0-9-]*$/,be=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;function C(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function E(e,r){let t=ge(N(e),N(r));return t!==""&&!t.startsWith("..")&&!me(t)}function ee(e,r){let t=[];if(!C(r))return["preset.json must be a JSON object"];let s=p=>{let d=r[p];return typeof d!="string"||d.trim()===""?(t.push(`${p} must be a non-empty string`),""):d.trim()},n=s("name"),i=s("title"),o=s("description"),c=s("category"),a=s("version");n&&!Y.test(n)&&t.push(`name "${n}" must be lowercase letters, digits and dashes`),a&&!be.test(a)&&t.push(`version "${a}" is not a version like 1.0.0`);let f=r.skills;if(!Array.isArray(f)||f.length===0)t.push("skills must be a non-empty array of directory names");else for(let p of f){if(typeof p!="string"||p.trim()===""){t.push("every skills entry must be a non-empty string");continue}let d=l(e,"skills",p.trim());if(!E(l(e,"skills"),d)){t.push(`skill "${p}" escapes the preset directory`);continue}S(l(d,"SKILL.md"))||t.push(`skill "${p}" has no SKILL.md at ${l("skills",p)}`)}let u=r.prompt;if(u!==void 0)if(typeof u!="string"||u.trim()==="")t.push("prompt must be a non-empty string when present");else{let p=l(e,u.trim());E(e,p)?S(p)||t.push(`prompt file "${u}" does not exist`):t.push(`prompt "${u}" escapes the preset directory`)}let m=r.tags;return m!==void 0&&!Array.isArray(m)&&t.push("tags must be an array when present"),t.push(...z(r.mcp)),t}function te(e){let r=l(e,"preset.json");if(!S(r))return{problems:[`no preset.json in ${e}`]};let t;try{t=JSON.parse(O(r,"utf8"))}catch(o){return{problems:[`preset.json is not valid JSON: ${o instanceof Error?o.message:String(o)}`]}}let s=ee(e,t);if(s.length>0)return{problems:s};let n=t,i=Array.isArray(n.tags)?n.tags.filter(o=>typeof o=="string"):[];return{problems:[],manifest:{name:String(n.name),title:String(n.title),description:String(n.description),category:String(n.category),tags:i,version:String(n.version),skills:n.skills.map(o=>String(o)),prompt:typeof n.prompt=="string"?n.prompt:void 0,mcp:n.mcp&&typeof n.mcp=="object"&&!Array.isArray(n.mcp)?n.mcp:void 0,integrates:typeof n.integrates=="string"&&n.integrates.trim()!==""?n.integrates.trim():void 0}}}function _(e){return e.filter(r=>{try{return x(r).isDirectory()}catch{return!1}})}function I(e,r){let t=[],s=[],n=(o,c)=>{if(!S(l(o,"preset.json")))return;let{manifest:a,problems:f}=te(o);a?t.push({manifest:a,dir:o,source:r}):s.push(`${c}: ${f.join("; ")}`)},i;try{i=R(e).sort()}catch{return{entries:t,problems:s}}for(let o of i){if(o.startsWith("."))continue;let c=l(e,o);try{if(!x(c).isDirectory())continue}catch{continue}if(S(l(c,"preset.json"))){n(c,o);continue}let a;try{a=R(c).sort()}catch{continue}for(let f of a){if(f.startsWith("."))continue;let u=l(c,f);try{if(!x(u).isDirectory())continue}catch{continue}n(u,l(o,f))}}return{entries:t,problems:s}}function tt(e){let r=I(Q(),"bundled"),t=[...r.entries],s=[...r.problems],n=new Map(t.map(i=>[i.manifest.name,i]));for(let i of _(M(e))){let o=I(i,"installed");s.push(...o.problems);for(let c of o.entries){let a=n.get(c.manifest.name);if(a){let f=t.indexOf(a);f>=0&&(t[f]=c),n.set(c.manifest.name,c)}else t.push(c),n.set(c.manifest.name,c)}}return{entries:t,problems:s}}function rt(e){return[...new Set(e.map(r=>r.manifest.category))].sort()}function nt(e,r){return e.filter(t=>t.manifest.category===r).sort((t,s)=>t.manifest.title.localeCompare(s.manifest.title))}function re(e){let r=[];for(let t of _(M(e))){let{entries:s}=I(t,"installed");for(let n of s)V(n.dir)||r.push(l(n.dir,"skills"))}return r}function st(e){let r=[];for(let t of _(M(e))){let{entries:s}=I(t,"installed");for(let n of s){if(V(n.dir))continue;let i=n.manifest.prompt;if(!i)continue;let o=l(n.dir,i);if(E(n.dir,o))try{let c=O(o,"utf8").trim();c&&r.push({name:n.manifest.name,title:n.manifest.title,text:c})}catch{}}}return r}function it(e,r){let t=0;for(let s of r.skills)try{t+=x(l(e,"skills",s,"SKILL.md")).size}catch{}return t}function ke(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}var Se=".install.lock";function ve(e,r){P(e,{recursive:!0});let t=l(e,Se),s=Date.now()+6e4;for(;;)try{T(t,`${process.pid}
+`,{flag:"wx"});break}catch(n){if(n.code!=="EEXIST")throw n;let i=!1;try{i=Date.now()-x(t).mtimeMs>12e4}catch{continue}if(i){k(t,{force:!0});continue}if(Date.now()>s)throw new Error(`another install is holding ${t}; remove it if no install is running`);ke(100)}try{for(let n of R(e))n.startsWith(".staging-")&&k(l(e,n),{recursive:!0,force:!0});return r()}finally{k(t,{force:!0})}}function ne(e,r,t){let s=l(r,t.name);return ve(r,()=>{P(r,{recursive:!0});let n=D(l(r,".staging-"));try{ue(e,n,{recursive:!0}),k(s,{recursive:!0,force:!0}),pe(n,s)}catch(i){throw k(n,{recursive:!0,force:!0}),i}return s})}function se(e,r){if(!S(e))return{ok:!1,problems:[`no such directory: ${e}`]};let{manifest:t,problems:s}=te(e);if(!t)return{ok:!1,problems:s};let n=ne(e,r,t);return{ok:!0,name:t.name,target:n,problems:[]}}function xe(e,r){let t=D(l(X(),"howtofix-preset-"));try{return ye("git",["clone","--depth","1","--quiet",e,t],{stdio:"pipe"}),se(t,r)}catch(s){return{ok:!1,problems:[`git clone failed: ${(s instanceof Error?s.message:String(s)).split(`
+`)[0]}`]}}finally{k(t,{recursive:!0,force:!0})}}function ot(e,r){return/^(https?:\/\/|git@|git:\/\/)/.test(e)?xe(e,r):se(N(e),r)}function at(e,r){let t=[],s=[];if(!Y.test(e))return{removed:t,problems:[`"${e}" is not a preset name`]};for(let n of M(r)){let i=l(n,e);if(S(i)){if(!E(n,i)){s.push(`refusing to remove ${i}: outside ${n}`);continue}k(i,{recursive:!0,force:!0}),t.push(i)}}return t.length===0&&s.push(`"${e}" is not installed`),{removed:t,problems:s}}function ct(e){return q(e)}function $e(e){let r=[],t=(i,o)=>{for(let c of R(i,{withFileTypes:!0}).sort((a,f)=>a.name.localeCompare(f.name))){let a=l(i,c.name),f=o?`${o}/${c.name}`:c.name;c.isSymbolicLink()||(c.isDirectory()?t(a,f):c.isFile()&&r.push([f,U("sha256").update(O(a)).digest("hex")]))}};t(e,"");let s=0;for(let[i]of r)s+=x(l(e,i)).size;let n=r.map(([i,o])=>`${o}  ${i}`).join(`
+`);return{digest:U("sha256").update(n).digest("hex").slice(0,16),fileCount:r.length,bytes:s}}function lt(){let e=l(Q(),"hub.json");try{let r=O(e,"utf8"),t=JSON.parse(r),s=C(t)&&Array.isArray(t.entries)?t.entries:[],n=[];for(let i of s)C(i)&&(typeof i.name!="string"||typeof i.repo!="string"||typeof i.sha!="string"||typeof i.path!="string"||typeof i.category!="string"||n.push({name:i.name,title:typeof i.title=="string"?i.title:i.name,description:typeof i.description=="string"?i.description:"",category:i.category,skill:typeof i.skill=="string"?i.skill:i.name,path:i.path,repo:i.repo,sha:i.sha,license:typeof i.license=="string"?i.license:"unknown",stars:typeof i.stars=="number"?i.stars:0,sizeKb:typeof i.sizeKb=="number"?i.sizeKb:0,...typeof i.digest=="string"?{digest:i.digest}:{},...typeof i.fileCount=="number"?{fileCount:i.fileCount}:{},...typeof i.modelInvocable=="boolean"?{modelInvocable:i.modelInvocable}:{}}));return{entries:n,problems:[]}}catch(r){return r?.code==="ENOENT"?{entries:[],problems:[]}:{entries:[],problems:[`registry unreadable: ${r instanceof Error?r.message:String(r)}`]}}}function ft(e){return[...new Set(e.map(r=>r.category))].sort()}function ut(e,r){return e.filter(t=>t.category===r).sort((t,s)=>s.stars-t.stars||t.name.localeCompare(s.name))}function pt(e,r){return e.find(t=>t.name===r)}function Ee(e){return`https://codeload.github.com/${e.repo}/tar.gz/${e.sha}`}async function mt(e,r,t=12e4){let s=D(l(X(),"howtofix-hub-"));try{let n=await fetch(Ee(e),{signal:AbortSignal.timeout(t),redirect:"follow"});if(!n.ok)return{ok:!1,problems:[`${e.repo}: HTTP ${n.status} from codeload`]};let i=Buffer.from(await n.arrayBuffer()),o=G(i),c=W(o,e.path).filter(g=>g.kind==="file"||g.kind==="directory");if(!c.some(g=>g.path==="SKILL.md"))return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)} has no ${e.path}/SKILL.md`]};let a=l(s,"preset",e.name),f=l(a,"skills",e.skill),u=0;for(let g of c){if(!K(g.path))return{ok:!1,problems:[`refusing unsafe path in archive: ${g.path}`]};let b=l(f,g.path);if(!E(f,b))return{ok:!1,problems:[`refusing path outside the skill: ${g.path}`]};if(g.kind==="directory"){P(b,{recursive:!0});continue}P(Z(b),{recursive:!0}),T(b,g.data??Buffer.alloc(0)),u+=1}let m={name:e.name,title:e.title,description:e.description,category:e.category,version:"1.0.0",skills:[e.skill],source:`${e.repo}@${e.sha}`,license:e.license};if(T(l(a,"preset.json"),`${JSON.stringify(m,null,2)}
+`),!e.digest)return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)}: registry entry has no digest`,"refusing to install; content cannot be verified against what was reviewed"]};let p=$e(f);if(p.digest!==e.digest)return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)}: content changed under a pinned commit`,`expected ${e.digest} (${e.fileCount??"?"} files), got ${p.digest} (${p.fileCount} files)`,"refusing to install; the registry needs regenerating"]};let d=ee(a,m);if(d.length>0)return{ok:!1,problems:d};let h=ne(a,r,m);return{ok:!0,name:e.name,target:h,problems:[],skill:e.skill,modelInvocable:e.modelInvocable}}catch(n){return{ok:!1,problems:[`download failed: ${(n instanceof Error?n.message:String(n)).split(`
+`)[0]}`]}}finally{k(s,{recursive:!0,force:!0})}}function Pe(){let e=(process.env.HOWTOFIX_HOME??process.env.HOME??"").trim();return Ae(e||we())}var y=process.env.HOWTOFIX_CODING_AGENT_DIR?.trim()||$(Pe(),".howtofix","agent"),bt=$(y,"skills");function Re(e){return $(e,".howtofix","skills")}function kt(e){let r=[Re(e)];return r.push(...re(e)),r}var St=$(y,"agents"),vt=$(y,"usage-cache.json"),xt=$(y,"workflows");function $t(){process.env.HXF_CODING_AGENT_DIR=y}export{F as a,Te as b,Ne as c,Ce as d,De as e,_e as f,Le as g,Fe as h,ze as i,Je as j,V as k,Q as l,ee as m,te as n,tt as o,rt as p,nt as q,re as r,st as s,it as t,se as u,ot as v,at as w,ct as x,lt as y,ft as z,ut as A,pt as B,mt as C,y as D,bt as E,Re as F,kt as G,St as H,vt as I,xt as J,$t as K};

package/dist/chunk-VLMQSD25.js

@@ -0,0 +1 @@
+import{a,b}from"./chunk-MOKUBKE7.js";import"./chunk-WOT6VMZA.js";export{a as deadChannelModel,b as diagnoseGatewayFailure};

package/dist/chunk-WKUJ7CFO.js

@@ -0,0 +1 @@
+import{a,b,c,d,e}from"./chunk-3FYCFLNK.js";import"./chunk-WOT6VMZA.js";export{a as PROXY_SETTING_KEY,b as configuredProxy,c as environmentProxy,e as installProxy,d as validateProxyUrl};

package/dist/chunk-WLU3WFCK.js

@@ -0,0 +1 @@
+import{a,b,c,d,e,f,g,h,i,j}from"./chunk-MVTU4M3W.js";import"./chunk-DVYH677E.js";import"./chunk-WOT6VMZA.js";export{h as CLI_CLIENT_HEADER,a as CLI_SIGNING_KEY_ID,i as cliClientHeader,c as cliSignaturePayload,f as cliSigningKeyFingerprint,e as cliSigningKeyMatchesPanel,b as cliSigningPublicKey,d as createNonce,g as describeClient,j as signLoginRequest};

package/dist/chunk-WOT6VMZA.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var e=(c,a)=>{for(var b in a)d(c,b,{get:a[b],enumerable:!0})};export{e as a};

package/dist/chunk-WUPU6LTD.js

@@ -0,0 +1,4 @@
+import{execFile as M}from"node:child_process";import{closeSync as v,existsSync as f,mkdirSync as N,openSync as C,readFileSync as w,realpathSync as k,statSync as T,unlinkSync as E,writeFileSync as _}from"node:fs";import{homedir as p}from"node:os";import{delimiter as I,dirname as $,join as d,sep as m}from"node:path";var l="howtofixcli",g=["npm","npm.cmd","npm.exe"],A=2e4,O=2,P=12e4,R=600*1e3,U=5*1e3;function F(e,t){let r=s=>{let i=s.trim().split("-")[0]?.split("+")[0]??"";if(/^\d+(\.\d+)*$/.test(i))return i.split(".").map(c=>Number(c))},n=r(e),o=r(t);if(!n||!o)return 0;let a=Math.max(n.length,o.length);for(let s=0;s<a;s+=1){let i=n[s]??0,c=o[s]??0;if(i>c)return 1;if(i<c)return-1}return 0}function L(e,t){return e.includes("-")?!1:F(e,t)>0}var h=(e,t,r)=>new Promise(n=>{M(e,t,{cwd:r.cwd,timeout:r.timeoutMs,windowsHide:!0},(o,a,s)=>{let i=o?o.code:void 0,c=typeof i=="number"?i:o?1:0,u=typeof i=="string"?i:void 0;n({code:c,stdout:String(a??""),stderr:String(s??""),...u?{errorCode:u}:{}})})}),H=new Set(["ENOENT","EACCES","EINVAL","EPERM"]);function b(){let e=$(process.execPath);for(let r of[["..","lib","node_modules","npm","bin","npm-cli.js"],["node_modules","npm","bin","npm-cli.js"]]){let n=d(e,...r);if(f(n))return{command:process.execPath,args:[n]}}let t=process.env.PATH?.split(I).filter(Boolean)??[];for(let r of t)for(let n of g){let o=d(r,n);if(!(n.endsWith(".cmd")||n.endsWith(".bat"))&&f(o))return{command:o,args:[]}}if(process.platform==="win32")for(let r of t)for(let n of g){if(!n.endsWith(".cmd")&&!n.endsWith(".bat"))continue;let o=d(r,n);if(f(o))return{command:process.env.ComSpec||"cmd.exe",args:["/d","/s","/c",`"${o}"`]}}}var D="could not check for a newer version: npm was not found, so run `npm install -g howtofixcli@latest` yourself",G="could not check for a newer version: the registry did not answer";function Q(e){if(e.latest===void 0)return`${e.message} (this is why no update was offered; /update retries it)`}function K(e){if(e.code===-2)return!0;let t=e.errorCode??(e.stderr??"").trim();return H.has(t)}function x(){let t=process.env.HOWTOFIX_CODING_AGENT_DIR?.trim()||d(p(),".howtofix","agent");try{N(t,{recursive:!0})}catch{}return d(t,"update.lock")}function B(e){if(!Number.isInteger(e)||e<=0)return!1;try{return process.kill(e,0),!0}catch(t){return t?.code==="EPERM"}}function S(e,t){try{let r=t-T(e).mtimeMs,n=w(e,"utf8").trim();return{pid:/^\d+$/.test(n)?Number.parseInt(n,10):void 0,ageMs:r}}catch{return}}function W(e){return e?e.pid===void 0?e.ageMs<U:B(e.pid)?e.ageMs<R:!1:!1}function j(e=Date.now()){let t=x();for(let r=0;r<2;r+=1)try{let n=C(t,"wx",384);try{_(n,String(process.pid))}finally{v(n)}return!0}catch(n){if(n.code!=="EEXIST")return!0;if(W(S(t,e)))return!1;try{E(t)}catch{return!1}}return!1}function J(){let e=x();try{let t=S(e,Date.now());if(t&&t.pid!==void 0&&t.pid!==process.pid)return;E(e)}catch{}}async function y(e){let t=e?.runner??h,r=b();if(!r)return{reason:"no-npm"};let n="no-answer";for(let o=0;o<O;o+=1){let a;try{a=await t(r.command,[...r.args,"view",`${l}@latest`,"version","--prefer-online"],{cwd:p(),timeoutMs:e?.timeoutMs??A})}catch{n="no-answer";continue}if(a.code!==0){if(K(a))return{reason:"no-npm"};n="no-answer";continue}let s=a.stdout.trim().split(`
+`).pop()?.trim()??"";if(/^\d+\.\d+/.test(s))return{version:s};n="no-answer"}return{reason:n}}async function Z(e){return(await y(e)).version}async function ee(e,t){let r=await y(t);if(!r.version)return{current:e,available:!1,message:r.reason==="no-npm"?D:G};let n=r.version;return L(n,e)?{current:e,latest:n,available:!0,message:`HowToFix ${n} is available (you have ${e})`}:{current:e,latest:n,available:!1,message:`HowToFix ${e} is up to date`}}function V(e,t,r){let n=`${t}
+${e}`.split(`
+`).map(u=>u.trim()).filter(Boolean).filter(u=>!/^npm warn\b/i.test(u)),o=n.filter(u=>/^npm error\b/i.test(u)||/\bERR!/i.test(u)),s=(o.find(u=>/^npm error code\b/i.test(u))??o.at(-1)??n.at(-1)??r??"").replace(/^npm error\s*/i,"").trim(),i=`${n.join(" ")} ${r??""}`,c="";return/EACCES|EPERM|permission denied/i.test(i)?c=" \u2014 npm could not write its files (permission denied); close other HowToFix windows and run the terminal as Administrator":/EBUSY|EEXIST|ENOTEMPTY|resource busy|being used by another process/i.test(i)?c=" \u2014 a file is in use; close other HowToFix windows and try again":/ENOSPC/i.test(i)?c=" \u2014 the disk is full":/ETIMEDOUT|ENOTFOUND|EAI_AGAIN|ECONNREFUSED/i.test(i)&&(c=" \u2014 npm could not reach the registry"),{detail:s,hint:c}}async function ne(e){let t=e?.runner??h;if(!j())return{ok:!1,message:"another HowToFix is already installing an update"};try{let r=b();if(!r)return{ok:!1,message:"npm was not found, so run `npm install -g howtofixcli@latest` yourself"};let n=e?.version?`${l}@${e.version}`:`${l}@latest`,o=await t(r.command,[...r.args,"install","-g",n],{cwd:p(),timeoutMs:e?.timeoutMs??P});if(o.code!==0){let{detail:a,hint:s}=V(o.stdout,o.stderr,o.errorCode);return{ok:!1,message:`the update did not install${s}${a?`: ${a}`:""}`}}return{ok:!0,version:e?.version,message:"updated; it takes effect the next time HowToFix starts"}}catch(r){return{ok:!1,message:`the update failed: ${r instanceof Error?r.message:String(r)}`}}finally{J()}}function te(e=process.argv[1]){if(!e)return!1;let t=e;try{t=k(e)}catch{}return t.includes(`${m}node_modules${m}${l}${m}`)}function re(e){try{return JSON.parse(w(e,"utf8")).autoUpdate!==!1}catch{return!0}}export{l as a,A as b,O as c,P as d,R as e,U as f,F as g,L as h,b as i,D as j,G as k,Q as l,B as m,j as n,J as o,Z as p,ee as q,V as r,ne as s,te as t,re as u};

package/dist/chunk-WX3V5P7U.js

@@ -0,0 +1,5 @@
+import{E as s,F as l}from"./chunk-V656XVXV.js";function c(i){return[s,l(i)]}function d(i,n){let t=i.trim(),r=/^\/skill:([^\s]+)(?:\s+([\s\S]*))?$/.exec(t)??/^\/skill\s+([^\s]+)(?:\s+([\s\S]*))?$/.exec(t);if(!r)return;let e=r[1]??"";if(!n.includes(e))return;let o=(r[2]??"").trim();return o?`/skill:${e} ${o}`:`/skill:${e}`}function u(i){if(i.length===0){let[n,t]=c(process.cwd());return["no skills loaded.",`put a SKILL.md in ${n}`,`or in ${t}`,"invoke with /skill:<name>"].join(`
+`)}return i.map(n=>{let t=n.disableModelInvocation?" (invoke only)":"";return`${n.name}${t}
+  ${n.description}
+  ${n.filePath}`}).join(`
+`)}export{c as a,d as b,u as c};

package/dist/chunk-YW7NORH3.js

@@ -0,0 +1,2 @@
+function o(n){return n.type==="message_update"}function r(n){if(n.type==="toolcall_start"){let s=n.contentIndex,t=s===void 0?void 0:n.partial?.content[s];if(t?.type!=="toolCall")return;let{partial:u,...i}=n;return{...i,id:t.id,toolName:t.name}}if(!("partial"in n))return n;let{partial:e,...a}=n;return a}function d(n){if(!o(n))return n;if(n.message.role!=="assistant")return;let e=r(n.assistantMessageEvent);if(e!==void 0)return{type:"message_update",usage:n.message.usage,assistantMessageEvent:e}}function p(n){let e=d(n);if(e!==void 0)return`${JSON.stringify(e)}
+`}export{d as a,p as b};