howtofixcli 0.7.8 → 0.7.10

package/dist/chunk-V656XVXV.js

@@ -0,0 +1,8 @@
+import{a as j}from"./chunk-UTYFLLSM.js";import{homedir as we}from"node:os";import{join as $,resolve as Ae}from"node:path";import{cpSync as ue,existsSync as S,mkdirSync as P,mkdtempSync as D,readdirSync as R,readFileSync as O,renameSync as pe,rmSync as k,statSync as x,writeFileSync as T}from"node:fs";import{tmpdir as X}from"node:os";import{dirname as Z,isAbsolute as me,join as l,relative as ge,resolve as N}from"node:path";import{fileURLToPath as de}from"node:url";import{execFileSync as ye}from"node:child_process";import{createHash as U}from"node:crypto";import{existsSync as w,readFileSync as H}from"node:fs";import{dirname as oe,join as L}from"node:path";import{fileURLToPath as ae}from"node:url";function F(e=y){return L(e,"mcp.json")}function z(e){let r=[];if(e===void 0)return r;if(typeof e!="object"||e===null||Array.isArray(e))return["mcp must be an object of server names"];for(let[t,s]of Object.entries(e)){if(!/^[A-Za-z0-9_-]+$/.test(t)){r.push(`mcp server "${t}" must use only letters, digits, _ and -`);continue}if(typeof s!="object"||s===null||Array.isArray(s)){r.push(`mcp server "${t}" must be an object`);continue}let n=s,i=typeof n.command=="string"&&n.command.trim()!=="",o=typeof n.url=="string"&&n.url.trim()!=="";!i&&!o&&r.push(`mcp server "${t}" needs either a command or a url`),n.args!==void 0&&!Array.isArray(n.args)&&r.push(`mcp server "${t}": args must be an array`);for(let c of["env","headers"]){let a=n[c];if(a!==void 0){if(typeof a!="object"||a===null||Array.isArray(a)){r.push(`mcp server "${t}": ${c} must be an object of strings`);continue}for(let[f,u]of Object.entries(a))typeof u!="string"&&r.push(`mcp server "${t}": ${c}.${f} must be a string`)}}}return r}function J(e){if(!w(e))return{mcpServers:{}};try{let r=JSON.parse(H(e,"utf8"));if(!r||typeof r!="object"||Array.isArray(r))return{mcpServers:{}};let t=r.mcpServers;return!t||typeof t!="object"||Array.isArray(t)?{mcpServers:{}}:{mcpServers:t}}catch{return{mcpServers:{}}}}function Te(e,r=y){let t=Object.keys(e);if(t.length===0)return{added:[],skipped:[],problems:[]};let s=F(r),n=[];if(w(s))try{JSON.parse(H(s,"utf8"))}catch{return{added:[],skipped:[],problems:[`${s} is not valid JSON; leaving it alone`]}}let i=J(s),o=[],c=[];for(let a of t){if(i.mcpServers[a]!==void 0){c.push(a);continue}i.mcpServers[a]=e[a],o.push(a)}if(o.length>0)try{j(s,`${JSON.stringify(i,null,2)}
+`)}catch(a){return{added:[],skipped:c,problems:[`could not write ${s}: ${a instanceof Error?a.message:String(a)}`]}}return{added:o,skipped:c,problems:n}}function Ne(e,r=new Set,t=y){let s=F(t),n=[];if(e.length===0||!w(s))return{removed:[],kept:[],problems:n};let i=J(s),o=[],c=[];for(let a of e)if(i.mcpServers[a]!==void 0){if(r.has(a)){c.push(a);continue}delete i.mcpServers[a],o.push(a)}if(o.length>0)try{j(s,`${JSON.stringify(i,null,2)}
+`)}catch(a){return{removed:[],kept:c,problems:[`could not write ${s}: ${a instanceof Error?a.message:String(a)}`]}}return{removed:o,kept:c,problems:n}}function Ce(e){if(typeof e.url=="string"&&e.url)return`http: ${e.url}`;let r=typeof e.command=="string"?e.command:"",t=Array.isArray(e.args)?e.args.filter(s=>typeof s=="string"):[];return`stdio: ${[r,...t].join(" ")}`.trim()}function ce(){return L(oe(ae(import.meta.url)),"presets","mcp-hub.json")}function De(e=ce()){let r=[];if(!w(e))return{entries:[],problems:[`no MCP catalogue at ${e}`]};let t;try{t=JSON.parse(H(e,"utf8"))}catch(i){return{entries:[],problems:[`${e} is not valid JSON: ${i instanceof Error?i.message:String(i)}`]}}let s=t?.entries;if(!Array.isArray(s))return{entries:[],problems:[`${e} has no entries array`]};let n=[];for(let i of s){if(typeof i!="object"||i===null||Array.isArray(i))continue;let o=i,c=typeof o.name=="string"?o.name.trim():"";if(!c){r.push("an entry has no name");continue}if(!/^[A-Za-z0-9_-]+$/.test(c)){r.push(`"${c}" is not a usable server name`);continue}let a=typeof o.command=="string"&&o.command.trim()!=="",f=typeof o.url=="string"&&o.url.trim()!=="";if(!a&&!f){r.push(`"${c}" has neither a command nor a url`);continue}n.push({name:c,title:typeof o.title=="string"?o.title:c,description:typeof o.description=="string"?o.description:"",category:typeof o.category=="string"?o.category:"other",preset:typeof o.preset=="string"?o.preset:void 0,command:typeof o.command=="string"?o.command:void 0,url:typeof o.url=="string"?o.url:void 0,args:Array.isArray(o.args)?o.args.filter(u=>typeof u=="string"):void 0,env:o.env&&typeof o.env=="object"&&!Array.isArray(o.env)?o.env:void 0,needs:Array.isArray(o.needs)?o.needs.filter(u=>typeof u=="string"):void 0,docs:typeof o.docs=="string"?o.docs:void 0})}return{entries:n,problems:r}}function _e(e){return[...new Set(e.map(r=>r.category))].sort()}function Le(e,r){return e.filter(t=>t.category===r).sort((t,s)=>t.title.localeCompare(s.title))}function Fe(e,r){return e.find(t=>t.name===r)}function ze(e){let r={};return e.command&&(r.command=e.command),e.url&&(r.url=e.url),e.args&&e.args.length>0&&(r.args=[...e.args]),e.env&&Object.keys(e.env).length>0&&(r.env={...e.env}),e.description&&(r.description=e.description),r}function Je(e,r=process.env){return(e.needs??[]).filter(t=>!r[t])}import{gunzipSync as le}from"node:zlib";var v=512;function A(e,r,t){let s=e.subarray(r,r+t),n=s.indexOf(0);return s.subarray(0,n===-1?s.length:n).toString("utf8").trim()}function B(e,r,t){let s=A(e,r,t);if(!s)return 0;let n=Number.parseInt(s,8);return Number.isFinite(n)?n:0}function fe(e){let r={},t=0;for(;t<e.length;){let s=e.indexOf(32,t);if(s===-1)break;let n=Number.parseInt(e.toString("utf8",t,s),10);if(!Number.isFinite(n)||n<=0)break;let i=e.toString("utf8",s+1,t+n-1),o=i.indexOf("=");o>0&&(r[i.slice(0,o)]=i.slice(o+1)),t+=n}return r}function G(e){let r=le(e),t=[],s=0,n,i={};for(;s+v<=r.length;){let o=r.subarray(s,s+v);if(o.every(ie=>ie===0))break;let c=A(o,0,100),a=A(o,345,155),f=B(o,124,12),u=B(o,100,8),m=String.fromCharCode(o[156]??48),p=A(o,157,100),d=f>0?r.subarray(s+v,s+v+f):Buffer.alloc(0);if(s+=v+Math.ceil(f/v)*v,m==="x"||m==="g"){i=fe(d);continue}if(m==="L"){n=d.toString("utf8").replace(/\0.*$/s,"").trim();continue}let h=i.path??n??(a?`${a}/${c}`:c);n=void 0,i={};let g=h.indexOf("/");if(g===-1||(h=h.slice(g+1),h=h.replace(/\/+$/,""),!h))continue;let b=m==="5"?"directory":m==="2"?"symlink":m==="0"||m==="\0"||m===""?"file":"other";t.push({path:h,kind:b,size:f,mode:u&511,...b==="file"?{data:Buffer.from(d)}:{},...b==="symlink"?{link:p}:{}})}return t}function K(e){if(!e||e.startsWith("/")||e.startsWith("\\")||/^[a-zA-Z]:/.test(e))return!1;let r=e.replace(/\/+$/,"");return r?r.split("/").every(s=>s!==""&&s!=="."&&s!==".."):!1}function W(e,r){let t=`${r.replace(/\/+$/,"")}/`,s=[];for(let n of e){if(!n.path.startsWith(t))continue;let i=n.path.slice(t.length);i&&s.push({...n,path:i})}return s}function he(){return l(y,"presets")}function q(e){return l(e,".howtofix","presets")}function V(e){return S(l(e,".disabled"))}function Q(){return l(Z(de(import.meta.url)),"presets")}function M(e){return[q(e),he()]}var Y=/^[a-z0-9][a-z0-9-]*$/,be=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;function C(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function E(e,r){let t=ge(N(e),N(r));return t!==""&&!t.startsWith("..")&&!me(t)}function ee(e,r){let t=[];if(!C(r))return["preset.json must be a JSON object"];let s=p=>{let d=r[p];return typeof d!="string"||d.trim()===""?(t.push(`${p} must be a non-empty string`),""):d.trim()},n=s("name"),i=s("title"),o=s("description"),c=s("category"),a=s("version");n&&!Y.test(n)&&t.push(`name "${n}" must be lowercase letters, digits and dashes`),a&&!be.test(a)&&t.push(`version "${a}" is not a version like 1.0.0`);let f=r.skills;if(!Array.isArray(f)||f.length===0)t.push("skills must be a non-empty array of directory names");else for(let p of f){if(typeof p!="string"||p.trim()===""){t.push("every skills entry must be a non-empty string");continue}let d=l(e,"skills",p.trim());if(!E(l(e,"skills"),d)){t.push(`skill "${p}" escapes the preset directory`);continue}S(l(d,"SKILL.md"))||t.push(`skill "${p}" has no SKILL.md at ${l("skills",p)}`)}let u=r.prompt;if(u!==void 0)if(typeof u!="string"||u.trim()==="")t.push("prompt must be a non-empty string when present");else{let p=l(e,u.trim());E(e,p)?S(p)||t.push(`prompt file "${u}" does not exist`):t.push(`prompt "${u}" escapes the preset directory`)}let m=r.tags;return m!==void 0&&!Array.isArray(m)&&t.push("tags must be an array when present"),t.push(...z(r.mcp)),t}function te(e){let r=l(e,"preset.json");if(!S(r))return{problems:[`no preset.json in ${e}`]};let t;try{t=JSON.parse(O(r,"utf8"))}catch(o){return{problems:[`preset.json is not valid JSON: ${o instanceof Error?o.message:String(o)}`]}}let s=ee(e,t);if(s.length>0)return{problems:s};let n=t,i=Array.isArray(n.tags)?n.tags.filter(o=>typeof o=="string"):[];return{problems:[],manifest:{name:String(n.name),title:String(n.title),description:String(n.description),category:String(n.category),tags:i,version:String(n.version),skills:n.skills.map(o=>String(o)),prompt:typeof n.prompt=="string"?n.prompt:void 0,mcp:n.mcp&&typeof n.mcp=="object"&&!Array.isArray(n.mcp)?n.mcp:void 0,integrates:typeof n.integrates=="string"&&n.integrates.trim()!==""?n.integrates.trim():void 0}}}function _(e){return e.filter(r=>{try{return x(r).isDirectory()}catch{return!1}})}function I(e,r){let t=[],s=[],n=(o,c)=>{if(!S(l(o,"preset.json")))return;let{manifest:a,problems:f}=te(o);a?t.push({manifest:a,dir:o,source:r}):s.push(`${c}: ${f.join("; ")}`)},i;try{i=R(e).sort()}catch{return{entries:t,problems:s}}for(let o of i){if(o.startsWith("."))continue;let c=l(e,o);try{if(!x(c).isDirectory())continue}catch{continue}if(S(l(c,"preset.json"))){n(c,o);continue}let a;try{a=R(c).sort()}catch{continue}for(let f of a){if(f.startsWith("."))continue;let u=l(c,f);try{if(!x(u).isDirectory())continue}catch{continue}n(u,l(o,f))}}return{entries:t,problems:s}}function tt(e){let r=I(Q(),"bundled"),t=[...r.entries],s=[...r.problems],n=new Map(t.map(i=>[i.manifest.name,i]));for(let i of _(M(e))){let o=I(i,"installed");s.push(...o.problems);for(let c of o.entries){let a=n.get(c.manifest.name);if(a){let f=t.indexOf(a);f>=0&&(t[f]=c),n.set(c.manifest.name,c)}else t.push(c),n.set(c.manifest.name,c)}}return{entries:t,problems:s}}function rt(e){return[...new Set(e.map(r=>r.manifest.category))].sort()}function nt(e,r){return e.filter(t=>t.manifest.category===r).sort((t,s)=>t.manifest.title.localeCompare(s.manifest.title))}function re(e){let r=[];for(let t of _(M(e))){let{entries:s}=I(t,"installed");for(let n of s)V(n.dir)||r.push(l(n.dir,"skills"))}return r}function st(e){let r=[];for(let t of _(M(e))){let{entries:s}=I(t,"installed");for(let n of s){if(V(n.dir))continue;let i=n.manifest.prompt;if(!i)continue;let o=l(n.dir,i);if(E(n.dir,o))try{let c=O(o,"utf8").trim();c&&r.push({name:n.manifest.name,title:n.manifest.title,text:c})}catch{}}}return r}function it(e,r){let t=0;for(let s of r.skills)try{t+=x(l(e,"skills",s,"SKILL.md")).size}catch{}return t}function ke(e){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,e)}var Se=".install.lock";function ve(e,r){P(e,{recursive:!0});let t=l(e,Se),s=Date.now()+6e4;for(;;)try{T(t,`${process.pid}
+`,{flag:"wx"});break}catch(n){if(n.code!=="EEXIST")throw n;let i=!1;try{i=Date.now()-x(t).mtimeMs>12e4}catch{continue}if(i){k(t,{force:!0});continue}if(Date.now()>s)throw new Error(`another install is holding ${t}; remove it if no install is running`);ke(100)}try{for(let n of R(e))n.startsWith(".staging-")&&k(l(e,n),{recursive:!0,force:!0});return r()}finally{k(t,{force:!0})}}function ne(e,r,t){let s=l(r,t.name);return ve(r,()=>{P(r,{recursive:!0});let n=D(l(r,".staging-"));try{ue(e,n,{recursive:!0}),k(s,{recursive:!0,force:!0}),pe(n,s)}catch(i){throw k(n,{recursive:!0,force:!0}),i}return s})}function se(e,r){if(!S(e))return{ok:!1,problems:[`no such directory: ${e}`]};let{manifest:t,problems:s}=te(e);if(!t)return{ok:!1,problems:s};let n=ne(e,r,t);return{ok:!0,name:t.name,target:n,problems:[]}}function xe(e,r){let t=D(l(X(),"howtofix-preset-"));try{return ye("git",["clone","--depth","1","--quiet",e,t],{stdio:"pipe"}),se(t,r)}catch(s){return{ok:!1,problems:[`git clone failed: ${(s instanceof Error?s.message:String(s)).split(`
+`)[0]}`]}}finally{k(t,{recursive:!0,force:!0})}}function ot(e,r){return/^(https?:\/\/|git@|git:\/\/)/.test(e)?xe(e,r):se(N(e),r)}function at(e,r){let t=[],s=[];if(!Y.test(e))return{removed:t,problems:[`"${e}" is not a preset name`]};for(let n of M(r)){let i=l(n,e);if(S(i)){if(!E(n,i)){s.push(`refusing to remove ${i}: outside ${n}`);continue}k(i,{recursive:!0,force:!0}),t.push(i)}}return t.length===0&&s.push(`"${e}" is not installed`),{removed:t,problems:s}}function ct(e){return q(e)}function $e(e){let r=[],t=(i,o)=>{for(let c of R(i,{withFileTypes:!0}).sort((a,f)=>a.name.localeCompare(f.name))){let a=l(i,c.name),f=o?`${o}/${c.name}`:c.name;c.isSymbolicLink()||(c.isDirectory()?t(a,f):c.isFile()&&r.push([f,U("sha256").update(O(a)).digest("hex")]))}};t(e,"");let s=0;for(let[i]of r)s+=x(l(e,i)).size;let n=r.map(([i,o])=>`${o}  ${i}`).join(`
+`);return{digest:U("sha256").update(n).digest("hex").slice(0,16),fileCount:r.length,bytes:s}}function lt(){let e=l(Q(),"hub.json");try{let r=O(e,"utf8"),t=JSON.parse(r),s=C(t)&&Array.isArray(t.entries)?t.entries:[],n=[];for(let i of s)C(i)&&(typeof i.name!="string"||typeof i.repo!="string"||typeof i.sha!="string"||typeof i.path!="string"||typeof i.category!="string"||n.push({name:i.name,title:typeof i.title=="string"?i.title:i.name,description:typeof i.description=="string"?i.description:"",category:i.category,skill:typeof i.skill=="string"?i.skill:i.name,path:i.path,repo:i.repo,sha:i.sha,license:typeof i.license=="string"?i.license:"unknown",stars:typeof i.stars=="number"?i.stars:0,sizeKb:typeof i.sizeKb=="number"?i.sizeKb:0,...typeof i.digest=="string"?{digest:i.digest}:{},...typeof i.fileCount=="number"?{fileCount:i.fileCount}:{},...typeof i.modelInvocable=="boolean"?{modelInvocable:i.modelInvocable}:{}}));return{entries:n,problems:[]}}catch(r){return r?.code==="ENOENT"?{entries:[],problems:[]}:{entries:[],problems:[`registry unreadable: ${r instanceof Error?r.message:String(r)}`]}}}function ft(e){return[...new Set(e.map(r=>r.category))].sort()}function ut(e,r){return e.filter(t=>t.category===r).sort((t,s)=>s.stars-t.stars||t.name.localeCompare(s.name))}function pt(e,r){return e.find(t=>t.name===r)}function Ee(e){return`https://codeload.github.com/${e.repo}/tar.gz/${e.sha}`}async function mt(e,r,t=12e4){let s=D(l(X(),"howtofix-hub-"));try{let n=await fetch(Ee(e),{signal:AbortSignal.timeout(t),redirect:"follow"});if(!n.ok)return{ok:!1,problems:[`${e.repo}: HTTP ${n.status} from codeload`]};let i=Buffer.from(await n.arrayBuffer()),o=G(i),c=W(o,e.path).filter(g=>g.kind==="file"||g.kind==="directory");if(!c.some(g=>g.path==="SKILL.md"))return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)} has no ${e.path}/SKILL.md`]};let a=l(s,"preset",e.name),f=l(a,"skills",e.skill),u=0;for(let g of c){if(!K(g.path))return{ok:!1,problems:[`refusing unsafe path in archive: ${g.path}`]};let b=l(f,g.path);if(!E(f,b))return{ok:!1,problems:[`refusing path outside the skill: ${g.path}`]};if(g.kind==="directory"){P(b,{recursive:!0});continue}P(Z(b),{recursive:!0}),T(b,g.data??Buffer.alloc(0)),u+=1}let m={name:e.name,title:e.title,description:e.description,category:e.category,version:"1.0.0",skills:[e.skill],source:`${e.repo}@${e.sha}`,license:e.license};if(T(l(a,"preset.json"),`${JSON.stringify(m,null,2)}
+`),!e.digest)return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)}: registry entry has no digest`,"refusing to install; content cannot be verified against what was reviewed"]};let p=$e(f);if(p.digest!==e.digest)return{ok:!1,problems:[`${e.repo}@${e.sha.slice(0,7)}: content changed under a pinned commit`,`expected ${e.digest} (${e.fileCount??"?"} files), got ${p.digest} (${p.fileCount} files)`,"refusing to install; the registry needs regenerating"]};let d=ee(a,m);if(d.length>0)return{ok:!1,problems:d};let h=ne(a,r,m);return{ok:!0,name:e.name,target:h,problems:[],skill:e.skill,modelInvocable:e.modelInvocable}}catch(n){return{ok:!1,problems:[`download failed: ${(n instanceof Error?n.message:String(n)).split(`
+`)[0]}`]}}finally{k(s,{recursive:!0,force:!0})}}function Pe(){let e=(process.env.HOWTOFIX_HOME??process.env.HOME??"").trim();return Ae(e||we())}var y=process.env.HOWTOFIX_CODING_AGENT_DIR?.trim()||$(Pe(),".howtofix","agent"),bt=$(y,"skills");function Re(e){return $(e,".howtofix","skills")}function kt(e){let r=[Re(e)];return r.push(...re(e)),r}var St=$(y,"agents"),vt=$(y,"usage-cache.json"),xt=$(y,"workflows");function $t(){process.env.HXF_CODING_AGENT_DIR=y}export{F as a,Te as b,Ne as c,Ce as d,De as e,_e as f,Le as g,Fe as h,ze as i,Je as j,V as k,Q as l,ee as m,te as n,tt as o,rt as p,nt as q,re as r,st as s,it as t,se as u,ot as v,at as w,ct as x,lt as y,ft as z,ut as A,pt as B,mt as C,y as D,bt as E,Re as F,kt as G,St as H,vt as I,xt as J,$t as K};

package/dist/chunk-VICEM5Y2.js

@@ -0,0 +1,2 @@
+import{a as x}from"./chunk-UTYFLLSM.js";import{g as P,j as M}from"./chunk-WZKWT757.js";import{existsSync as z,readFileSync as ye}from"node:fs";import{join as xe}from"node:path";import{createHash as J,randomBytes as G}from"node:crypto";import{createServer as ne}from"node:http";import{execFileSync as X}from"node:child_process";import{createHmac as Q}from"node:crypto";import{readFileSync as ee}from"node:fs";import{arch as N,cpus as $,hostname as O,platform as _,userInfo as H}from"node:os";var te="howtofix-cli-hwid-v1";function v(e){try{let t=ee(e,"utf8").trim();return t.length>0?t:void 0}catch{return}}function F(e,t){try{let r=X(e,t,{encoding:"utf8",timeout:3e3,stdio:["ignore","pipe","ignore"]});return r.trim().length>0?r.trim():void 0}catch{return}}function re(){let e=_();if(e==="linux"){let t=v("/etc/machine-id");if(t)return{value:t,source:"machine-id",strong:!0};let r=v("/var/lib/dbus/machine-id");if(r)return{value:r,source:"dbus-machine-id",strong:!0};let s=v("/sys/class/dmi/id/product_uuid");return s?{value:s,source:"dmi-product-uuid",strong:!0}:void 0}if(e==="win32"){let r=F("reg",["query","HKLM\\SOFTWARE\\Microsoft\\Cryptography","/v","MachineGuid"])?.match(/MachineGuid\s+REG_SZ\s+(\S+)/i);return r?.[1]?{value:r[1],source:"windows-machine-guid",strong:!0}:void 0}if(e==="darwin"){let r=F("ioreg",["-rd1","-c","IOPlatformExpertDevice"])?.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);return r?.[1]?{value:r[1],source:"platform-uuid",strong:!0}:void 0}}function U(){let e=re(),t=e?.value??[O(),_(),N(),H().username].join("\0"),r=e?.source??"hostname";return{id:Q("sha256",te).update(t).digest("hex").slice(0,32),source:r,strong:e?.strong??!1}}function j(e){return[e.id,e.source,O(),_(),N(),H().username,String($().length),$()[0]?.model??""]}var I="https://howtofix.id",se=300*1e3,L=3e3,K="/callback";function A(e){return e.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function oe(){return A(G(32))}function ie(e){return A(J("sha256").update(e).digest())}function ae(){return A(G(16))}var ce="howtofix-cli-",ue="x-howtofix-client",le="cli";function C(e){let t=e??j(U());return ce+J("sha256").update(t.join("\0")).digest("hex").slice(0,32)}function de(){return{"content-type":"application/json",[ue]:le}}var fe=()=>new Promise((e,t)=>{let r=ne();r.once("error",t),r.listen(0,"127.0.0.1",()=>{let{port:s}=r.address();e({port:s,close:()=>r.close(),waitForCode:(o,n)=>new Promise((i,a)=>{let c=(l,m)=>{let h=new URL(l.url??"/","http://127.0.0.1");if(h.pathname!==K){m.writeHead(404).end("not found");return}let y=(V,Z)=>m.writeHead(200,{"content-type":"text/html; charset=utf-8"}).end(`<!doctype html><meta charset="utf-8"><h2>${V}</h2><p>${Z}</p>`),T=h.searchParams.get("error")??"",R=h.searchParams.get("code")??"",Y=h.searchParams.get("state")??"";if(T){y("Sign-in was refused","You can close this tab."),u(new Error(`the browser reported: ${T}`));return}if(!R||Y!==o){y("This callback did not belong to the login","You can close this tab."),u(new Error("the callback carried the wrong state"));return}y("Signed in","You can close this tab and go back to HowToFix."),u(void 0,R)},u=(l,m)=>{r.off("request",c),n?.removeEventListener("abort",f),l?a(l):i(m)},f=()=>u(new Error("cancelled"));n?.addEventListener("abort",f,{once:!0}),r.on("request",c)})})})});function k(e,t){e.onProgress?.(t)}async function g(e,t,r,s){let o=await e(t,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(r),signal:s}),n={};try{n=await o.json()}catch{}let i=Number(o.headers?.get?.("retry-after"));return{status:o.status,body:n,retryAfterSeconds:Number.isFinite(i)&&i>0?i:void 0}}function d(...e){for(let t of e)if(typeof t=="string"&&t.trim()!=="")return t.trim()}function D(...e){for(let t of e)if(typeof t=="number"&&Number.isFinite(t))return t;return 0}function me(e){try{let t=new URL(e).searchParams.get("code");return t&&t.trim()!==""?t.trim():void 0}catch{return}}async function pe(e,t,r){let s=await e(t,{headers:de(),signal:r}),o={};try{o=await s.json()}catch{}let n=Number(s.headers?.get?.("retry-after"));return{status:s.status,body:o,retryAfterSeconds:Number.isFinite(n)&&n>0?n:void 0}}function S(e){let t=e.data,r=[e.token,e.api_key,e.apiKey,e.key,t?.token,t?.api_key,t?.apiKey,t?.key];for(let s of r)if(typeof s=="string"&&s.trim().startsWith("sk-"))return s.trim()}function ge(e){let t=e.data,r=d(e.token,t?.token),s=d(e.refresh_token,t?.refresh_token),o=d(e.device_id,t?.device_id);if(!r||!s||!o)return;let n=D(e.access_expires_at,t?.access_expires_at),i=D(e.refresh_expires_at,t?.refresh_expires_at);return{accessToken:r,accessExpiresAt:n,refreshToken:s,deviceId:o,refreshExpiresAt:i}}function p(e,t){let r=e.message??e.error;return typeof r=="string"&&r.trim()?r.trim():t}async function Oe(e){let t=e.fetchImpl??fetch,r=(e.panelUrl??I).replace(/\/+$/,""),s=e.timeoutMs??se,o={...e,panel:r,fetchImpl:t,timeoutMs:s},n=await ke(o);if(n.ok||n.terminal)return n.result;let i=await he(o);if(i.ok||i.terminal)return i.result;let a=await we(o);return a.ok?a:{ok:!1,message:`${n.result.ok?"":n.result.message}; ${i.result.ok?"":i.result.message}; ${a.message}. howtofix.id does not offer a browser login a local client can complete yet \u2014 run /connect and paste a token from ${r}/keys instead.`}}async function he(e){let t=oe(),r=ae(),s;try{s=await(e.loopback??fe)();let o=`http://127.0.0.1:${s.port}${K}`,n=await g(e.fetchImpl,`${e.panel}/api/oauth/device/start`,{redirect_uri:o,code_challenge:ie(t),code_challenge_method:"S256",state:r},e.signal);if(n.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no loopback login endpoint"}};if(n.status>=400)return{ok:!1,terminal:!1,result:{ok:!1,message:p(n.body,`the panel refused the login (${n.status})`)}};let i=typeof n.body.authorize_url=="string"?n.body.authorize_url:"";if(!i)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not say where to send the browser"}};k(e,{kind:"browser",url:i});let a=await be(s.waitForCode(r,e.signal),e.timeoutMs),c=await g(e.fetchImpl,`${e.panel}/api/oauth/device/token`,{flow_token:n.body.flow_token,code:a,code_verifier:t},e.signal);if(c.status>=400)return{ok:!1,terminal:!0,result:{ok:!1,message:p(c.body,`the panel refused the exchange (${c.status})`)}};let u=S(c.body);return u?{ok:!0,result:{ok:!0,token:u}}:{ok:!1,terminal:!0,result:{ok:!1,message:"the panel did not return an API key"}}}catch(o){let n=o instanceof Error?o.message:String(o);return{ok:!1,terminal:n==="cancelled",result:{ok:!1,message:n}}}finally{s?.close()}}async function ke(e){let t=e.pollIntervalMs??L,r=e.fingerprintId??C(),s=e.clientInfo??P(),o=M(r,s);try{let n=await g(e.fetchImpl,`${e.panel}/api/auth/cli/code`,{fingerprintId:r,clientInfo:s,...o},e.signal);if(n.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no CLI login endpoint"}};if(n.status===401)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not recognise this build as the HowToFix CLI \u2014 update it with `npm install -g howtofixcli@latest`"}};if(n.status===429)return{ok:!1,terminal:!0,result:{ok:!1,message:`too many sign-in attempts from this machine right now.${n.retryAfterSeconds?` Try again in ${Math.ceil(n.retryAfterSeconds/60)} minute(s).`:""}`}};if(n.status>=400)return{ok:!1,terminal:!1,result:{ok:!1,message:p(n.body,`the panel refused the login (${n.status})`)}};let i=n.body.data??{},a=d(n.body.login_url,i.login_url),c=d(n.body.code,i.code)??(a?me(a):void 0),u=d(n.body.secret,i.secret);return!a||!c?{ok:!1,terminal:!1,result:{ok:!1,message:"the panel did not return a login URL"}}:u?(k(e,{kind:"browser",url:a}),await q(e,c,u)):(k(e,{kind:"browser",url:a}),await q(e,c,void 0))}catch(n){let i=n instanceof Error?n.message:String(n);return{ok:!1,terminal:i==="cancelled",result:{ok:!1,message:i}}}}async function q(e,t,r){let s=e.pollIntervalMs??L,o=Date.now()+e.timeoutMs;for(;Date.now()<o;){await w(s,e.signal);let n=new URLSearchParams(r?{code:t,secret:r}:{code:t});n.set("capability","device-refresh");let i=await pe(e.fetchImpl,`${e.panel}/api/auth/cli/status?${n}`,e.signal);if(i.status===404)return{ok:!1,terminal:!1,result:{ok:!1,message:"the panel has no CLI login status endpoint"}};if(i.status===403)return{ok:!1,terminal:!0,result:{ok:!1,message:"the panel rejected this poll \u2014 run /connect again"}};if(i.status===429){let u=Math.min(Math.max(i.retryAfterSeconds??5,1)*1e3,3e4);await w(u,e.signal);continue}let a=S(i.body);if(a)return{ok:!0,result:{ok:!0,token:a,credential:ge(i.body)}};if(d(i.body.data?.status,i.body.status)==="expired")return{ok:!1,terminal:!0,result:{ok:!1,message:"the sign-in link expired before it was approved"}};if(i.status>=400)return{ok:!1,terminal:!0,result:{ok:!1,message:p(i.body,`the panel refused the poll (${i.status})`)}}}return{ok:!1,terminal:!0,result:{ok:!1,message:"the sign-in was not approved in time"}}}async function we(e){let t=e.pollIntervalMs??L;try{let r=await g(e.fetchImpl,`${e.panel}/api/oauth/device`,{},e.signal);if(r.status===404)return{ok:!1,message:"the panel has no device-code endpoint"};if(r.status>=400)return{ok:!1,message:p(r.body,`the panel refused the request (${r.status})`)};let s=typeof r.body.device_code=="string"?r.body.device_code:"",o=typeof r.body.user_code=="string"?r.body.user_code:"",n=typeof r.body.verification_uri=="string"?r.body.verification_uri:`${e.panel}/oauth/device`;if(!s||!o)return{ok:!1,message:"the panel did not return a code to show"};k(e,{kind:"code",code:o,url:n});let i=Date.now()+e.timeoutMs;for(;Date.now()<i;){await w(t,e.signal);let a=await g(e.fetchImpl,`${e.panel}/api/oauth/device/poll`,{device_code:s},e.signal);if(a.status===404)return{ok:!1,message:"the panel has no device-code poll endpoint"};let c=typeof a.body.status=="string"?a.body.status:"";if(c==="pending")continue;if(c==="slow_down"){await w(t,e.signal);continue}if(c==="denied")return{ok:!1,message:"the sign-in was refused in the browser"};if(c==="expired")return{ok:!1,message:"the code expired; run /connect again"};let u=S(a.body);if(u)return{ok:!0,token:u};if(a.status>=400)return{ok:!1,message:p(a.body,`the panel refused the poll (${a.status})`)}}return{ok:!1,message:"the code was not approved in time"}}catch(r){return{ok:!1,message:r instanceof Error?r.message:String(r)}}}function be(e,t){return new Promise((r,s)=>{let o=setTimeout(()=>s(new Error("the sign-in was not finished in time")),t);e.then(n=>{clearTimeout(o),r(n)},n=>{clearTimeout(o),s(n)})})}function w(e,t){return new Promise((r,s)=>{let o=setTimeout(r,e);t?.addEventListener("abort",()=>{clearTimeout(o),s(new Error("cancelled"))},{once:!0})})}function b(e){return xe(e,"cli-credentials.json")}var ve=300*1e3;function _e(e,t=Date.now()){return e.accessToken?!Number.isFinite(e.accessExpiresAt)||e.accessExpiresAt<=0?!0:e.accessExpiresAt*1e3-ve>t:!1}function Ie(e,t=Date.now()){return!e.refreshToken||!e.deviceId?!1:!Number.isFinite(e.refreshExpiresAt)||e.refreshExpiresAt<=0?!0:e.refreshExpiresAt*1e3>t}function Je(e){let t=b(e);if(!z(t))return;let r;try{r=JSON.parse(ye(t,"utf8"))}catch{return}if(!r||typeof r!="object"||Array.isArray(r))return;let s=r,o=typeof s.accessToken=="string"?s.accessToken.trim():"",n=typeof s.refreshToken=="string"?s.refreshToken.trim():"",i=typeof s.deviceId=="string"?s.deviceId.trim():"";if(!(!o||!n||!i))return{accessToken:o,accessExpiresAt:W(s.accessExpiresAt),refreshToken:n,deviceId:i,refreshExpiresAt:W(s.refreshExpiresAt)}}function Le(e,t){try{return x(b(e),`${JSON.stringify(t,null,2)}
+`,{mode:384}),!0}catch{return!1}}function Ae(e){try{let t=b(e);z(t)&&x(t,"",{mode:384})}catch{}}function W(e){return typeof e=="number"&&Number.isFinite(e)?e:0}async function Ce(e,t){let r=(t?.panelUrl??I).replace(/\/+$/,""),s=t?.fetchImpl??fetch,o=t?.timeoutMs??15e3,n=new AbortController,i=setTimeout(()=>n.abort(),o);try{let a=await s(`${r}/api/auth/cli/refresh`,{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({device_id:e.deviceId,refresh_token:e.refreshToken,fingerprint_id:C()}),signal:n.signal}),c=await a.json().catch(()=>({}));if(a.status===401||a.status===403)return{ok:!1,terminal:!0,message:"this sign-in is no longer valid \u2014 run /connect to sign in again"};if(!a.ok)return{ok:!1,terminal:!1,message:`the panel refused the renewal (${a.status})`};let u=c.data??{},f=E(c.token,u.token),l=E(c.refresh_token,u.refresh_token),m=E(c.device_id,u.device_id)??e.deviceId;return!f||!l?{ok:!1,terminal:!1,message:"the panel did not return a renewed credential"}:{ok:!0,terminal:!1,credential:{accessToken:f,accessExpiresAt:B(c.access_expires_at,u.access_expires_at),refreshToken:l,deviceId:m,refreshExpiresAt:B(c.refresh_expires_at,u.refresh_expires_at)}}}catch(a){return{ok:!1,terminal:!1,message:a instanceof Error&&a.name==="AbortError"?`the panel did not answer within ${Math.round(o/1e3)}s`:"could not reach the panel"}}finally{clearTimeout(i)}}function E(...e){for(let t of e)if(typeof t=="string"&&t.trim())return t.trim()}function B(...e){for(let t of e)if(typeof t=="number"&&Number.isFinite(t))return t;return 0}async function Ge(e,t,r){let s=r?.now??Date.now();if(_e(t,s)||!Ie(t,s))return{credential:t,renewed:!1,terminal:!1};let o=await Ce(t,r);if(!o.ok||!o.credential)return o.terminal&&Ae(e),{credential:t,renewed:!1,terminal:o.terminal,message:o.message};let n=Le(e,o.credential);return{credential:o.credential,renewed:!0,terminal:!1,message:n?void 0:`the renewed sign-in could not be saved to ${b(e)}`}}export{I as a,Oe as b,b as c,ve as d,_e as e,Ie as f,Je as g,Le as h,Ae as i,Ce as j,Ge as k};

package/dist/chunk-WKUJ7CFO.js

@@ -0,0 +1 @@
+import{a,b,c,d,e}from"./chunk-3FYCFLNK.js";import"./chunk-WOT6VMZA.js";export{a as PROXY_SETTING_KEY,b as configuredProxy,c as environmentProxy,e as installProxy,d as validateProxyUrl};

package/dist/chunk-WOT6VMZA.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var e=(c,a)=>{for(var b in a)d(c,b,{get:a[b],enumerable:!0})};export{e as a};

package/dist/chunk-WUPU6LTD.js

@@ -0,0 +1,4 @@
+import{execFile as M}from"node:child_process";import{closeSync as v,existsSync as f,mkdirSync as N,openSync as C,readFileSync as w,realpathSync as k,statSync as T,unlinkSync as E,writeFileSync as _}from"node:fs";import{homedir as p}from"node:os";import{delimiter as I,dirname as $,join as d,sep as m}from"node:path";var l="howtofixcli",g=["npm","npm.cmd","npm.exe"],A=2e4,O=2,P=12e4,R=600*1e3,U=5*1e3;function F(e,t){let r=s=>{let i=s.trim().split("-")[0]?.split("+")[0]??"";if(/^\d+(\.\d+)*$/.test(i))return i.split(".").map(c=>Number(c))},n=r(e),o=r(t);if(!n||!o)return 0;let a=Math.max(n.length,o.length);for(let s=0;s<a;s+=1){let i=n[s]??0,c=o[s]??0;if(i>c)return 1;if(i<c)return-1}return 0}function L(e,t){return e.includes("-")?!1:F(e,t)>0}var h=(e,t,r)=>new Promise(n=>{M(e,t,{cwd:r.cwd,timeout:r.timeoutMs,windowsHide:!0},(o,a,s)=>{let i=o?o.code:void 0,c=typeof i=="number"?i:o?1:0,u=typeof i=="string"?i:void 0;n({code:c,stdout:String(a??""),stderr:String(s??""),...u?{errorCode:u}:{}})})}),H=new Set(["ENOENT","EACCES","EINVAL","EPERM"]);function b(){let e=$(process.execPath);for(let r of[["..","lib","node_modules","npm","bin","npm-cli.js"],["node_modules","npm","bin","npm-cli.js"]]){let n=d(e,...r);if(f(n))return{command:process.execPath,args:[n]}}let t=process.env.PATH?.split(I).filter(Boolean)??[];for(let r of t)for(let n of g){let o=d(r,n);if(!(n.endsWith(".cmd")||n.endsWith(".bat"))&&f(o))return{command:o,args:[]}}if(process.platform==="win32")for(let r of t)for(let n of g){if(!n.endsWith(".cmd")&&!n.endsWith(".bat"))continue;let o=d(r,n);if(f(o))return{command:process.env.ComSpec||"cmd.exe",args:["/d","/s","/c",`"${o}"`]}}}var D="could not check for a newer version: npm was not found, so run `npm install -g howtofixcli@latest` yourself",G="could not check for a newer version: the registry did not answer";function Q(e){if(e.latest===void 0)return`${e.message} (this is why no update was offered; /update retries it)`}function K(e){if(e.code===-2)return!0;let t=e.errorCode??(e.stderr??"").trim();return H.has(t)}function x(){let t=process.env.HOWTOFIX_CODING_AGENT_DIR?.trim()||d(p(),".howtofix","agent");try{N(t,{recursive:!0})}catch{}return d(t,"update.lock")}function B(e){if(!Number.isInteger(e)||e<=0)return!1;try{return process.kill(e,0),!0}catch(t){return t?.code==="EPERM"}}function S(e,t){try{let r=t-T(e).mtimeMs,n=w(e,"utf8").trim();return{pid:/^\d+$/.test(n)?Number.parseInt(n,10):void 0,ageMs:r}}catch{return}}function W(e){return e?e.pid===void 0?e.ageMs<U:B(e.pid)?e.ageMs<R:!1:!1}function j(e=Date.now()){let t=x();for(let r=0;r<2;r+=1)try{let n=C(t,"wx",384);try{_(n,String(process.pid))}finally{v(n)}return!0}catch(n){if(n.code!=="EEXIST")return!0;if(W(S(t,e)))return!1;try{E(t)}catch{return!1}}return!1}function J(){let e=x();try{let t=S(e,Date.now());if(t&&t.pid!==void 0&&t.pid!==process.pid)return;E(e)}catch{}}async function y(e){let t=e?.runner??h,r=b();if(!r)return{reason:"no-npm"};let n="no-answer";for(let o=0;o<O;o+=1){let a;try{a=await t(r.command,[...r.args,"view",`${l}@latest`,"version","--prefer-online"],{cwd:p(),timeoutMs:e?.timeoutMs??A})}catch{n="no-answer";continue}if(a.code!==0){if(K(a))return{reason:"no-npm"};n="no-answer";continue}let s=a.stdout.trim().split(`
+`).pop()?.trim()??"";if(/^\d+\.\d+/.test(s))return{version:s};n="no-answer"}return{reason:n}}async function Z(e){return(await y(e)).version}async function ee(e,t){let r=await y(t);if(!r.version)return{current:e,available:!1,message:r.reason==="no-npm"?D:G};let n=r.version;return L(n,e)?{current:e,latest:n,available:!0,message:`HowToFix ${n} is available (you have ${e})`}:{current:e,latest:n,available:!1,message:`HowToFix ${e} is up to date`}}function V(e,t,r){let n=`${t}
+${e}`.split(`
+`).map(u=>u.trim()).filter(Boolean).filter(u=>!/^npm warn\b/i.test(u)),o=n.filter(u=>/^npm error\b/i.test(u)||/\bERR!/i.test(u)),s=(o.find(u=>/^npm error code\b/i.test(u))??o.at(-1)??n.at(-1)??r??"").replace(/^npm error\s*/i,"").trim(),i=`${n.join(" ")} ${r??""}`,c="";return/EACCES|EPERM|permission denied/i.test(i)?c=" \u2014 npm could not write its files (permission denied); close other HowToFix windows and run the terminal as Administrator":/EBUSY|EEXIST|ENOTEMPTY|resource busy|being used by another process/i.test(i)?c=" \u2014 a file is in use; close other HowToFix windows and try again":/ENOSPC/i.test(i)?c=" \u2014 the disk is full":/ETIMEDOUT|ENOTFOUND|EAI_AGAIN|ECONNREFUSED/i.test(i)&&(c=" \u2014 npm could not reach the registry"),{detail:s,hint:c}}async function ne(e){let t=e?.runner??h;if(!j())return{ok:!1,message:"another HowToFix is already installing an update"};try{let r=b();if(!r)return{ok:!1,message:"npm was not found, so run `npm install -g howtofixcli@latest` yourself"};let n=e?.version?`${l}@${e.version}`:`${l}@latest`,o=await t(r.command,[...r.args,"install","-g",n],{cwd:p(),timeoutMs:e?.timeoutMs??P});if(o.code!==0){let{detail:a,hint:s}=V(o.stdout,o.stderr,o.errorCode);return{ok:!1,message:`the update did not install${s}${a?`: ${a}`:""}`}}return{ok:!0,version:e?.version,message:"updated; it takes effect the next time HowToFix starts"}}catch(r){return{ok:!1,message:`the update failed: ${r instanceof Error?r.message:String(r)}`}}finally{J()}}function te(e=process.argv[1]){if(!e)return!1;let t=e;try{t=k(e)}catch{}return t.includes(`${m}node_modules${m}${l}${m}`)}function re(e){try{return JSON.parse(w(e,"utf8")).autoUpdate!==!1}catch{return!0}}export{l as a,A as b,O as c,P as d,R as e,U as f,F as g,L as h,b as i,D as j,G as k,Q as l,B as m,j as n,J as o,Z as p,ee as q,V as r,ne as s,te as t,re as u};

package/dist/chunk-WX3V5P7U.js

@@ -0,0 +1,5 @@
+import{E as s,F as l}from"./chunk-V656XVXV.js";function c(i){return[s,l(i)]}function d(i,n){let t=i.trim(),r=/^\/skill:([^\s]+)(?:\s+([\s\S]*))?$/.exec(t)??/^\/skill\s+([^\s]+)(?:\s+([\s\S]*))?$/.exec(t);if(!r)return;let e=r[1]??"";if(!n.includes(e))return;let o=(r[2]??"").trim();return o?`/skill:${e} ${o}`:`/skill:${e}`}function u(i){if(i.length===0){let[n,t]=c(process.cwd());return["no skills loaded.",`put a SKILL.md in ${n}`,`or in ${t}`,"invoke with /skill:<name>"].join(`
+`)}return i.map(n=>{let t=n.disableModelInvocation?" (invoke only)":"";return`${n.name}${t}
+  ${n.description}
+  ${n.filePath}`}).join(`
+`)}export{c as a,d as b,u as c};

package/dist/chunk-WZKWT757.js

@@ -0,0 +1,2 @@
+import{b as o}from"./chunk-4BWDGEXH.js";import{createPrivateKey as p,createPublicKey as f,createHash as l,randomBytes as y,sign as m}from"node:crypto";import{arch as s,cpus as I,hostname as d,platform as c}from"node:os";var a="hf-cli-1",x="MC4CAQAwBQYDK2VwBCIEIDmKoNgInS7oDpncee1d1+Mnci1R/q4aE5xxHeCKq4Dc",C="howtofix-cli-auth-v1",i;function u(){return i||(i=p({key:Buffer.from(x,"base64"),format:"der",type:"pkcs8"})),i}function g(){return f(u())}function K(t,e,n,r){return Buffer.from([C,t,e,n,r].join(`
+`),"utf8")}function h(){return y(16).toString("hex")}var E="tQ91uspGl0sw5Y8x+soLYnFNX6a9vEzSzCuuvalzdKk=";function P(){let t=g().export({format:"der",type:"spki"});return t.subarray(t.length-32).toString("base64")===E}function N(){let t=g().export({format:"der",type:"spki"});return l("sha256").update(t).digest("hex").slice(0,16)}function $(){let e=(I()[0]?.model??"").replace(/\s+/g," ").trim(),n=d(),r=e?`${n} (${c()}/${s()}, ${e})`:`${n} (${c()}/${s()})`;return`CLI (${o}, ${r})`}var k="X-HowToFix-Client";function A(){return`CLI (${o})`}function B(t,e){let n=h(),r=m(null,K(a,t,e,n),u());return{keyId:a,nonce:n,signature:r.toString("base64")}}export{a,g as b,K as c,h as d,P as e,N as f,$ as g,k as h,A as i,B as j};