jishushell 0.6.5 → 0.6.18

package/scripts/check-test-layering.sh

@@ -73,7 +73,7 @@ echo "  ✓ Conservation: $PUB_COUNT + $PANEL_COUNT = $ALL_COUNT (no overlap, no
 # ── Step 3: Purity audit (public tests must not reference private source) ──
 
 # Regex covers all known private source paths that public tests must not import/mock.
-PRIV_RE='src/(routes/|server\.)|runtime/adapters/openclaw-routes|llm-proxy/(index|adapters|sse|rate-limiter|circuit-breaker|usage)|services/(files-manager|system-monitor|external-mounts|suggestions|telemetry/|agent-apps/|webdav/|organize/)'
+PRIV_RE='src/(routes/|server\.)|services/integrations/openclaw/routes|llm-proxy/(index|adapters|sse|rate-limiter|circuit-breaker|usage)|services/(files/files-manager|files/external-mounts|files/webdav/|files/organize/|connections/suggestions|system/system-monitor|telemetry/|integrations/installable/)'
 
 HITS=$(xargs -r grep -lE "$PRIV_RE" < "$D/pub.sorted" 2>/dev/null | sort -u || true)
 if [ -n "$HITS" ]; then

package/scripts/fixtures/instances/hermes-sample/instance.json

@@ -2,10 +2,11 @@
   "id": "hermes-sample",
   "name": "Hermes Sample",
   "description": "Fixture for plan §30.3 contract check",
-  "agentType": "hermes",
+  "integrations": [{ "kind": "hermes" }],
+  "integrationKind": "hermes",
   "paths": {
     "instanceDir": "/tmp/instances/hermes-sample",
-    "agentHome": "/tmp/instances/hermes-sample/agent-home",
+    "integrationHome": "/tmp/instances/hermes-sample/agent-home",
     "primaryConfig": "/tmp/instances/hermes-sample/agent-home/config.yaml",
     "secretEnv": "/tmp/instances/hermes-sample/agent-home/.env"
   },

package/scripts/fixtures/instances/legacy-openclaw-sample/instance.json

@@ -1,7 +1,7 @@
 {
   "id": "legacy-openclaw-sample",
   "name": "Legacy OpenClaw",
-  "description": "Pre-§32.2 instance: no agentType, only openclaw_home. Must backfill to agentType=openclaw.",
+  "description": "Pre-§32.2 instance: no canonical integration ref, only openclaw_home. Must backfill to integration kind openclaw.",
   "openclaw_home": "/tmp/instances/legacy-openclaw-sample/openclaw-home",
   "created_at": "2025-11-01T00:00:00.000Z"
 }

package/scripts/local-web-upgrade-test.README

@@ -71,12 +71,13 @@ JISHUSHELL_FAKE_REGISTRY_PORT
 JISHUSHELL_BUILD_COMMAND
   Local build command run in the repository root. Default: npm run build:pack:gui.
   This creates the Core+Panel GUI tarball, usually
-  jishushell-gui-<version>.tgz.
+  jishushell-<version>.tgz.
 
 JISHUSHELL_BUILT_PACKAGE_NAME
   Package name expected inside the locally built tarball. Default:
-  jishushell-gui. This lets the script pick the GUI artifact even if old CLI
-  tarballs are still present in the repository root.
+  jishushell. The script excludes separately built Panel tarballs when selecting
+  the GUI release artifact, and for jishushell packages it requires the
+  jishushell-gui bin to avoid selecting a CLI-only tarball.
 
 JISHUSHELL_FAKE_REGISTRY_PACKAGE_NAME
   Package name exposed by the fake registry. Historical web-upgrade builds

package/scripts/local-web-upgrade-test.example.env

@@ -32,12 +32,12 @@ JISHUSHELL_RESET_REMOTE_HOME=true
 JISHUSHELL_FAKE_REGISTRY_PORT=48731
 
 # Current GUI package build command, run in the repository root on the development
-# machine. This produces jishushell-gui-<version>.tgz by bundling the prebuilt
+# machine. This produces jishushell-<version>.tgz by bundling the prebuilt
 # Panel tarball from ./dependencies.
 JISHUSHELL_BUILD_COMMAND="npm run build:pack:gui"
 
 # Package name expected inside the locally built tarball before registry rewrite.
-JISHUSHELL_BUILT_PACKAGE_NAME=jishushell-gui
+JISHUSHELL_BUILT_PACKAGE_NAME=jishushell
 
 # Package name exposed by the fake npm registry. Historical web-upgrade builds
 # install from "jishushell", so the fake registry exposes that name while using

package/scripts/local-web-upgrade-test.sh

@@ -92,7 +92,7 @@ REMOTE_WORKDIR="${JISHUSHELL_REMOTE_WORKDIR:-/tmp/jishushell-web-upgrade-test}"
 RESET_REMOTE_HOME="${JISHUSHELL_RESET_REMOTE_HOME:-true}"
 FAKE_REGISTRY_PORT="${JISHUSHELL_FAKE_REGISTRY_PORT:-48731}"
 BUILD_COMMAND="${JISHUSHELL_BUILD_COMMAND:-npm run build:pack:gui}"
-BUILT_PACKAGE_NAME="${JISHUSHELL_BUILT_PACKAGE_NAME-jishushell-gui}"
+BUILT_PACKAGE_NAME="${JISHUSHELL_BUILT_PACKAGE_NAME-jishushell}"
 FAKE_REGISTRY_PACKAGE_NAME="${JISHUSHELL_FAKE_REGISTRY_PACKAGE_NAME:-jishushell}"
 REWRITE_TARBALL_PACKAGE_NAME="${JISHUSHELL_REWRITE_TARBALL_PACKAGE_NAME:-true}"
 AUTO_TRIGGER_WEB_UPDATE="${JISHUSHELL_AUTO_TRIGGER_WEB_UPDATE:-false}"
@@ -187,6 +187,16 @@ process.stdout.write(String(pkg[field] ?? ""));
 NODE
 }
 
+tarball_has_gui_bin() {
+  local tarball="$1"
+  node - "$tarball" <<'NODE'
+const { execFileSync } = require("node:child_process");
+const tarball = process.argv[2];
+const pkg = JSON.parse(execFileSync("tar", ["-xOf", tarball, "package/package.json"], { encoding: "utf8" }));
+process.exit(pkg?.bin?.["jishushell-gui"] ? 0 : 1);
+NODE
+}
+
 find_built_tarball() {
   local expected_name="$1"
   local candidate name
@@ -199,6 +209,9 @@ find_built_tarball() {
     fi
     name="$(read_tarball_package_field "$candidate" name 2>/dev/null || true)"
     if [[ "$name" == "$expected_name" ]]; then
+      if [[ "$expected_name" == "jishushell" ]] && ! tarball_has_gui_bin "$candidate" 2>/dev/null; then
+        continue
+      fi
       echo "$candidate"
       return 0
     fi

package/scripts/pack-gui-and-send-pi.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+PANEL_ROOT="/home/eriyu01/work/jishushell-panel"
+CORE_ROOT="/home/eriyu01/work/jishushell"
+VERSION="0.6.16"
+
+PANEL_TARBALL_NAME="jishushell-panel-${VERSION}.tgz"
+CORE_TARBALL_NAME="jishushell-${VERSION}.tgz"
+
+PANEL_TARBALL="${PANEL_ROOT}/${PANEL_TARBALL_NAME}"
+CORE_PANEL_TARBALL="${CORE_ROOT}/dependencies/${PANEL_TARBALL_NAME}"
+CORE_TARBALL="${CORE_ROOT}/${CORE_TARBALL_NAME}"
+REMOTE_TARGET="raspberrypi:/home/pi/eric/work/"
+
+run() {
+  printf '\n==> %s\n' "$*"
+  "$@"
+}
+
+require_file() {
+  local file="$1"
+  if [[ ! -f "$file" ]]; then
+    printf 'Missing expected file: %s\n' "$file" >&2
+    exit 1
+  fi
+}
+
+run npm --prefix "$PANEL_ROOT" run build:pack
+require_file "$PANEL_TARBALL"
+
+run mkdir -p "${CORE_ROOT}/dependencies"
+run mv -f "$PANEL_TARBALL" "$CORE_PANEL_TARBALL"
+require_file "$CORE_PANEL_TARBALL"
+
+run npm --prefix "$CORE_ROOT" run build:pack:gui -- --panel-tarball "$CORE_PANEL_TARBALL"
+require_file "$CORE_TARBALL"
+
+run scp -o StrictHostKeyChecking=no "$CORE_TARBALL" "$REMOTE_TARGET"
+
+printf '\nDone: sent %s to %s\n' "$CORE_TARBALL" "$REMOTE_TARGET"

package/scripts/perf/instances.js

@@ -81,7 +81,7 @@ export default function (data) {
       id: instanceId,
       name: `Perf Test ${instanceId}`,
       description: "Created by k6 performance test",
-      agentType: "openclaw",
+      app_spec_id: "openclaw",
     });
     const res = http.post(`${BASE_URL}/api/instances`, payload, {
       headers,

package/scripts/prune-open-core-dist.mjs

@@ -1,4 +1,91 @@
 #!/usr/bin/env node
 
-// Core builds now keep the Fastify server and route artifacts. This script is
-// intentionally a no-op so existing build scripts do not need a separate branch.
+import { existsSync, readFileSync, readdirSync, rmSync, rmdirSync, statSync } from "node:fs";
+import { dirname, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const DIST_DIR = join(ROOT, "dist");
+const SRC_DIR = join(ROOT, "src");
+const PACKAGE_PATH = join(ROOT, "package.json");
+
+const GENERATED_SUFFIXES = [".js.map", ".d.ts", ".js"];
+
+function walk(dir) {
+  if (!existsSync(dir)) return [];
+  const out = [];
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    const abs = join(dir, entry.name);
+    if (entry.isDirectory()) out.push(...walk(abs));
+    else if (entry.isFile()) out.push(abs);
+  }
+  return out;
+}
+
+function generatedSourcePath(distFile) {
+  const rel = relative(DIST_DIR, distFile).replaceAll("\\", "/");
+  const suffix = GENERATED_SUFFIXES.find((item) => rel.endsWith(item));
+  if (!suffix) return null;
+  return join(SRC_DIR, `${rel.slice(0, -suffix.length)}.ts`);
+}
+
+function removeEmptyDirs(dir) {
+  if (!existsSync(dir)) return;
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (entry.isDirectory()) removeEmptyDirs(join(dir, entry.name));
+  }
+  if (dir !== DIST_DIR && readdirSync(dir).length === 0) {
+    rmdirSync(dir);
+  }
+}
+
+function pruneStaleGeneratedFiles() {
+  const removed = [];
+  for (const file of walk(DIST_DIR)) {
+    const source = generatedSourcePath(file);
+    if (!source || existsSync(source)) continue;
+    rmSync(file);
+    removed.push(relative(ROOT, file).replaceAll("\\", "/"));
+  }
+  removeEmptyDirs(DIST_DIR);
+  if (removed.length > 0) {
+    console.log(`[prune-open-core-dist] removed ${removed.length} stale generated files`);
+  }
+}
+
+function collectExportTargets(value, out = []) {
+  if (typeof value === "string") {
+    if (value.startsWith("./dist/")) out.push(value);
+    return out;
+  }
+  if (value && typeof value === "object") {
+    for (const child of Object.values(value)) collectExportTargets(child, out);
+  }
+  return out;
+}
+
+function validatePackageExports() {
+  const pkg = JSON.parse(readFileSync(PACKAGE_PATH, "utf8"));
+  const exportsMap = pkg.exports ?? {};
+  const failures = [];
+  for (const [name, target] of Object.entries(exportsMap)) {
+    for (const distTarget of collectExportTargets(target)) {
+      const abs = join(ROOT, distTarget.slice("./".length));
+      if (!existsSync(abs) || !statSync(abs).isFile()) {
+        failures.push(`${name} -> ${distTarget}`);
+      }
+      const declaration = abs.replace(/\.js$/, ".d.ts");
+      if (abs.endsWith(".js") && (!existsSync(declaration) || !statSync(declaration).isFile())) {
+        failures.push(`${name} -> ${distTarget} (missing ${relative(ROOT, declaration).replaceAll("\\", "/")})`);
+      }
+    }
+  }
+  if (failures.length > 0) {
+    console.error("[prune-open-core-dist] package.json exports point to missing build artifacts:");
+    for (const failure of failures) console.error(`  - ${failure}`);
+    process.exitCode = 1;
+  }
+}
+
+pruneStaleGeneratedFiles();
+validatePackageExports();

package/scripts/smoke/hermes-bootstrap.sh

@@ -4,7 +4,7 @@
 #
 # Drives the complete lifecycle against a running jishushell core:
 #   1. install Hermes runtime (docker pull + shim + core.json catalog)
-#   2. create a Hermes instance via POST /api/instances {"agentType":"hermes"}
+#   2. create a Hermes instance via POST /api/instances {"app_spec_id":"hermes"}
 #   3. start the instance
 #   4. poll /health until 200 OK (or timeout)
 #   5. stop + delete the instance
@@ -102,11 +102,11 @@ done
 # ── 2. Create Hermes instance ────────────────────────────────────────
 
 log "creating instance $INSTANCE_ID..."
-CREATE_BODY=$(printf '{"id":"%s","name":"%s","agentType":"hermes"}' "$INSTANCE_ID" "$INSTANCE_NAME")
+CREATE_BODY=$(printf '{"id":"%s","name":"%s","app_spec_id":"hermes"}' "$INSTANCE_ID" "$INSTANCE_NAME")
 CREATE_RESP=$(api POST "/api/instances" -d "$CREATE_BODY")
-AGENT_TYPE=$(printf '%s' "$CREATE_RESP" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d.get('agentType',''))" 2>/dev/null || echo "")
-if [ "$AGENT_TYPE" != "hermes" ]; then
-  fail "created instance has wrong agentType: expected 'hermes', got '$AGENT_TYPE'. Response: $CREATE_RESP"
+INTEGRATION_KIND=$(printf '%s' "$CREATE_RESP" | python3 -c "import json,sys; d=json.load(sys.stdin); print(d.get('integrationKind',''))" 2>/dev/null || echo "")
+if [ "$INTEGRATION_KIND" != "hermes" ]; then
+  fail "created instance has wrong integrationKind: expected 'hermes', got '$INTEGRATION_KIND'. Response: $CREATE_RESP"
 fi
 ok "instance created"
 

package/templates/hermes-entrypoint.sh

@@ -11,10 +11,10 @@
 #      venv, so after `docker restart` the instance boots the upgraded
 #      version — exactly like `npm install openclaw@latest` on OpenClaw.
 #
-# Implements §32.1 decisions from docs/multi-agent-runtime-generalization-plan.md:
-#   §32.1.2 — incomplete venv recovery via .installed-ref sentinel
-#   §32.1.3 — baseline mode detected by ABSENCE of JISHUSHELL_HERMES_SOURCE_REF env,
-#              not by any literal "image-baseline" string
+# Compatibility behavior:
+#   - incomplete venv recovery via .installed-ref sentinel
+#   - baseline mode detected by ABSENCE of JISHUSHELL_HERMES_SOURCE_REF env,
+#     not by any literal "image-baseline" string
 set -e
 
 IMAGE_INSTALL_DIR=/opt/hermes
@@ -23,25 +23,17 @@ HERMES_HOME=/opt/data
 PERSISTENT_VENV_DIR=/opt/data/.venv
 OVERLAY_DIR=/opt/data/hermes-overlay
 
-# ── UID/GID remap (keep bind-mount permissions controllable) ──────────────────
+# ── User model ────────────────────────────────────────────────────────────────
+# JishuShell starts the container directly as the host service uid:gid, matching
+# the OpenClaw runtime model. The shim must not run as root: doing so would
+# create root-owned files in the bind-mounted agent-home and break future
+# upgrades/config edits from the service user.
 if [ "$(id -u)" = "0" ]; then
-  if [ -n "$HERMES_UID" ] && [ "$HERMES_UID" != "$(id -u hermes)" ]; then
-    echo "[jishushell-shim] remapping hermes uid → $HERMES_UID"
-    usermod -u "$HERMES_UID" hermes
-  fi
-  if [ -n "$HERMES_GID" ] && [ "$HERMES_GID" != "$(id -g hermes)" ]; then
-    echo "[jishushell-shim] remapping hermes gid → $HERMES_GID"
-    groupmod -g "$HERMES_GID" hermes
-  fi
-  chown -R hermes:hermes "$HERMES_HOME"
-  # Re-exec under hermes user. Use `bash "$0"` instead of `"$0"` directly —
-  # Nomad/Docker bind-mounts sometimes drop the exec bit, so execve on the
-  # shim file fails with EACCES. Invoking bash as the interpreter bypasses
-  # that check entirely (bash reads the file, no execve on the script).
-  exec gosu hermes bash "$0" "$@"
+  echo "[jishushell-shim] refusing to run as root; start with the host service uid:gid" >&2
+  exit 1
 fi
 
-# ── Mode selection (§32.1.3): overlay requires BOTH non-empty SOURCE_REF AND
+# ── Mode selection: overlay requires BOTH non-empty SOURCE_REF AND
 #    the overlay source pyproject.toml to exist; no "image-baseline" sentinel ──
 if [ -n "$JISHUSHELL_HERMES_SOURCE_REF" ] && [ -f "$OVERLAY_DIR/source/pyproject.toml" ]; then
   # ── overlay mode: use per-instance upgraded version ──────────────────────
@@ -49,7 +41,7 @@ if [ -n "$JISHUSHELL_HERMES_SOURCE_REF" ] && [ -f "$OVERLAY_DIR/source/pyproject
   INSTALL_DIR="$OVERLAY_DIR/source"
   VENV_DIR="$OVERLAY_DIR/.venv"
 
-  # §32.1.2: incomplete venv recovery — venv dir exists but sentinel missing
+  # Incomplete venv recovery: venv dir exists but sentinel is missing.
   if [ -d "$VENV_DIR" ] && [ ! -f "$VENV_DIR/.installed-ref" ]; then
     echo "[jishushell-shim] incomplete venv detected, rebuilding"
     rm -rf "$VENV_DIR"
@@ -96,13 +88,10 @@ cat > "$UPGRADE_HELPER" <<'HELPER'
 #!/bin/bash
 # In-container Hermes upgrade helper (auto-generated by jishushell shim).
 #
-# Privilege model — never escalate:
-#   - If invoked as root (e.g. plain `docker exec`), re-exec under the
-#     hermes service account via gosu. All writes go through the unprivileged
-#     user so files on the mounted volume end up with hermes:hermes
-#     ownership, matching the service that actually runs the agent.
-#   - All filesystem writes stay inside the bind-mounted /opt/data volume.
-#     The read-only image layers at /opt/hermes are never touched.
+# Privilege model — never escalate. JishuShell-created containers already run
+# as the host service uid:gid, and all filesystem writes stay inside the
+# bind-mounted /opt/data volume. The read-only image layers at /opt/hermes are
+# never touched.
 #
 # First run: seeds persistent venv from image baseline (~5-10s cp + sed).
 # Subsequent runs: fast (venv already persistent).
@@ -110,7 +99,8 @@ cat > "$UPGRADE_HELPER" <<'HELPER'
 set -e
 
 if [ "$(id -u)" = "0" ]; then
-  exec gosu hermes bash "$0" "$@"
+  echo "[jishushell-upgrade] refusing to run as root; exec as the container service user" >&2
+  exit 1
 fi
 
 TARGET="${1:-hermes-agent}"

package/apps/openwebui-container.yaml

@@ -1,97 +0,0 @@
-id: openwebui-container
-name: Open WebUI
-version: "1.0.0"
-jishushell:
-  min_version: "0.4.30"
-description: "使用 Open WebUI 提供自托管的大模型 Web 界面，容器模式由 Nomad 管理生命周期"
-singleInstance: false
-
-tasks:
-  - name: openwebui
-    role: service
-    runtime: container
-    image: "ghcr.io/open-webui/open-webui:main"
-    # Run as the panel user's uid:gid (typically pi=1000:1000). Bind-mount
-    # source `~/.jishushell/apps/${app_id}/data` is owned by the panel user,
-    # so the container can read/write it directly — no chown, no
-    # CAP_DAC_OVERRIDE, no DB readonly errors. Mirrors hermes / openclaw.
-    user: "host"
-    env:
-      HOME: "/app/backend/data"
-      PORT: "8080"
-      TMPDIR: "/app/backend/data/tmp"
-      XDG_CACHE_HOME: "/app/backend/data/.cache"
-      HF_HOME: "/app/backend/data/.cache/huggingface"
-      TRANSFORMERS_CACHE: "/app/backend/data/.cache/huggingface/transformers"
-      SENTENCE_TRANSFORMERS_HOME: "/app/backend/data/.cache/sentence-transformers"
-      # OpenWebUI's start.sh writes a generated WEBUI_SECRET_KEY to a key
-      # file. The default path is `.webui_secret_key` in the image's
-      # /app/backend WORKDIR, which is owned by root and unwritable when
-      # running as uid 1000. Redirect to the bind-mounted (and writable)
-      # data dir so the key persists across restarts and survives image
-      # upgrades.
-      WEBUI_SECRET_KEY_FILE: "/app/backend/data/.webui_secret_key"
-      # Open WebUI marks OPENAI_API_BASE_URL / OPENAI_API_KEY as PersistentConfig:
-      # without this flag, the first start writes them to the internal DB and
-      # subsequent restarts ignore env, defeating Connections "Save & Restart"
-      # rebinds. Disabling persistent config means the Admin UI's manual
-      # OpenAI config doesn't survive restarts — that's the trade-off
-      # JishuShell takes to own LLM configuration via Connections (§13.3.2.1).
-      ENABLE_PERSISTENT_CONFIG: "False"
-      # JishuShell ships Open WebUI as a chat front-end only — RAG /
-      # reranker / Whisper STT all need ML model downloads from
-      # HuggingFace at first boot (~500 MB – 1.5 GB). On slow outbound
-      # networks (Raspberry Pi behind throttled NAT) this blocks
-      # health checks for hours. Bypassing them keeps the boot path
-      # to "FastAPI up in <30s". Users who want RAG/STT can flip these
-      # back from Admin UI and accept the one-time download.
-      BYPASS_EMBEDDING_AND_RETRIEVAL: "True"
-      RAG_EMBEDDING_MODEL: ""
-      RAG_RERANKING_MODEL: ""
-      WHISPER_MODEL: ""
-      AUDIO_STT_ENGINE: ""
-    resources:
-      cpu: "1000m"
-      memory: "1024Mi"
-    ports:
-      - name: http
-        port: 3000
-        container_port: 8080
-        visibility: external
-    volumes:
-      - source: "~/.jishushell/apps/${app_id}/data"
-        target: "/app/backend/data"
-    health:
-      http:
-        path: /
-        port: 8080
-      interval: "15s"
-      timeout: "5s"
-      retries: 6
-      start_period: "40s"
-
-provides:
-  - capability: "openwebui-web"
-    task: "openwebui"
-    port: 3000
-    protocol: "http"
-    description: "Open WebUI Web 界面（legacy capability，请改用 web-openwebui）"
-  - capability: "web-openwebui"
-    task: "openwebui"
-    port: 3000
-    protocol: "http"
-    description: "Open WebUI Web 界面"
-
-requires:
-  - capability: "llm"
-    inject_as: "OPENAI_API_BASE_URL"
-    apply: "openai-env"
-    cardinality: "one"
-    required: false
-
-lifecycle:
-  install:
-    - downloadImage: "ghcr.io/open-webui/open-webui:main"
-    - mkdir: "~/.jishushell/apps/${app_id}/data"
-    - mkdir: "~/.jishushell/apps/${app_id}/data/tmp"
-    - mkdir: "~/.jishushell/apps/${app_id}/data/.cache"

package/apps/playwright-container.yaml

@@ -1,126 +0,0 @@
-id: playwright-container
-name: Playwright
-version: "1.0.0"
-jishushell:
-  min_version: "0.4.30"
-description: "在容器中启动 Playwright UI，通过浏览器查看和管理测试运行"
-singleInstance: false
-
-tasks:
-  - name: playwright-ui
-    role: service
-    runtime: container
-    image: "mcr.microsoft.com/playwright:v1.55.0-noble"
-    env:
-      HOME: "/tmp/playwright-home"
-      NPM_CONFIG_CACHE: "/tmp/playwright-home/.npm"
-    command: /bin/sh
-    args:
-      - -lc
-      # 1. Stub xdg-open so playwright UI's auto-browser-open attempt doesn't
-      #    throw "spawn xdg-open ENOENT" on a headless container (unhandled
-      #    error kills the Node process before the UI server is reachable).
-      # 2. Invoke cli.js via `node` directly: `npx --no-install playwright`
-      #    resolves to node_modules/.bin/playwright -> ../@playwright/test/cli.js,
-      #    and a host-side `npm install --prefix` sometimes skips the +x bit
-      #    on that target. Going through node sidesteps the exec-bit dance.
-      # 3. `--ui` makes the intent explicit; `--ui-host`/`--ui-port` alone
-      #    leave behaviour at the mercy of playwright CLI detection.
-      - >-
-        ln -sf /bin/true /usr/local/bin/xdg-open 2>/dev/null;
-        cd /workspace &&
-        exec node ./node_modules/@playwright/test/cli.js test
-        --ui --ui-host=0.0.0.0 --ui-port=14567
-    resources:
-      cpu: "1000m"
-      memory: "1024Mi"
-    ports:
-      - name: http
-        port: 14567
-        visibility: external
-    volumes:
-      - source: "~/.jishushell/apps/${app_id}/workspace"
-        target: "/workspace"
-    health:
-      http:
-        path: /
-        port: 14567
-      interval: "15s"
-      timeout: "5s"
-      retries: 6
-      start_period: "30s"
-
-provides:
-  - capability: "playwright-ui"
-    task: "playwright-ui"
-    port: 14567
-    protocol: "http"
-    description: "Playwright UI Web 界面"
-  # browser-playwright (CDP endpoint) is TODO — needs a sidecar task that runs
-  # `npx playwright launch-server --browser chromium --hostname 0.0.0.0`,
-  # captures the token-bearing ws URL into a file/env, and registers it as a
-  # capability with protocol=ws. Until the sidecar lands, OpenClaw / Hermes
-  # browser slots cannot bind to this app via the Connections UI.
-
-lifecycle:
-  install:
-    - downloadImage: "mcr.microsoft.com/playwright:v1.55.0-noble"
-    - mkdir: "~/.jishushell/apps/${app_id}/workspace"
-    - mkdir: "~/.jishushell/apps/${app_id}/workspace/tests"
-    - run: |
-        WORKSPACE="$HOME/.jishushell/apps/${app_id}/workspace"
-
-        if [ ! -f "$WORKSPACE/package.json" ]; then
-          cat > "$WORKSPACE/package.json" <<'EOF'
-        {
-          "name": "playwright-ui-workspace",
-          "private": true
-        }
-        EOF
-        fi
-
-        if [ ! -f "$WORKSPACE/playwright.config.ts" ]; then
-          cat > "$WORKSPACE/playwright.config.ts" <<'EOF'
-        import { defineConfig } from '@playwright/test';
-
-        export default defineConfig({
-          testDir: './tests',
-          use: {
-            headless: true,
-          },
-        });
-        EOF
-        fi
-
-        if [ ! -f "$WORKSPACE/tests/example.spec.ts" ]; then
-          cat > "$WORKSPACE/tests/example.spec.ts" <<'EOF'
-        import { test, expect } from '@playwright/test';
-
-        test('homepage smoke', async ({ page }) => {
-          await page.goto('https://example.com');
-          await expect(page).toHaveTitle(/Example Domain/);
-        });
-        EOF
-        fi
-    - run: |
-        WORKSPACE="$HOME/.jishushell/apps/${app_id}/workspace"
-        PLAYWRIGHT_HOME="/tmp/playwright-home"
-
-        if [ ! -d "$WORKSPACE/node_modules/@playwright/test" ]; then
-          mkdir -p "$PLAYWRIGHT_HOME"
-          export HOME="$PLAYWRIGHT_HOME"
-          export NPM_CONFIG_CACHE="$PLAYWRIGHT_HOME/.npm"
-          npm install --prefix "$WORKSPACE" @playwright/test
-        fi
-
-        # npm install --prefix on the host side occasionally leaves the
-        # playwright CLI targets without +x (the bin symlink exists, but
-        # kernel exec on the target file fails). Re-assert here so both
-        # `npx playwright` and the bin-direct path work.
-        for cli in \
-          "$WORKSPACE/node_modules/@playwright/test/cli.js" \
-          "$WORKSPACE/node_modules/playwright-core/cli.js" \
-          "$WORKSPACE/node_modules/playwright/cli.js"; do
-          [ -f "$cli" ] && chmod +x "$cli"
-        done
-      timeout_ms: 900000

package/dist/crypto-shim.d.ts

@@ -1 +0,0 @@
-export declare const CRYPTO_SHIM_JS = "\"use strict\";(()=>{function gt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name===\"Uint8Array\"}function P(e,t,n=\"\"){let r=gt(e),o=e?.length,c=t!==void 0;if(!r||c&&o!==t){let f=n&&`\"${n}\" `,i=c?` of length ${t}`:\"\",x=r?`length=${o}`:`type=${typeof e}`;throw new Error(f+\"expected Uint8Array\"+i+\", got \"+x)}return e}function R(e,t=!0){if(e.destroyed)throw new Error(\"Hash instance has been destroyed\");if(t&&e.finished)throw new Error(\"Hash#digest() has already been called\")}function nt(e,t){P(e,void 0,\"digestInto() output\");let n=t.outputLen;if(e.length<n)throw new Error('\"digestInto() output\" expected to be of length >='+n)}function I(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function M(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function y(e,t){return e<<32-t|e>>>t}function J(e,t={}){let n=(o,c)=>e(c).update(o).digest(),r=e(void 0);return n.outputLen=r.outputLen,n.blockLen=r.blockLen,n.create=o=>e(o),Object.assign(n,t),Object.freeze(n)}var z=e=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});function rt(e,t,n){return e&t^~e&n}function ot(e,t,n){return e&t^e&n^t&n}var V=class{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(t,n,r,o){this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(t),this.view=M(this.buffer)}update(t){R(this),P(t);let{view:n,buffer:r,blockLen:o}=this,c=t.length;for(let f=0;f<c;){let i=Math.min(o-this.pos,c-f);if(i===o){let x=M(t);for(;o<=c-f;f+=o)this.process(x,f);continue}r.set(t.subarray(f,f+i),this.pos),this.pos+=i,f+=i,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){R(this),nt(t,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:c}=this,{pos:f}=this;n[f++]=128,I(this.buffer.subarray(f)),this.padOffset>o-f&&(this.process(r,0),f=0);for(let s=f;s<o;s++)n[s]=0;r.setBigUint64(o-8,BigInt(this.length*8),c),this.process(r,0);let i=M(t),x=this.outputLen;if(x%4)throw new Error(\"_sha2: outputLen must be aligned to 32bit\");let h=x/4,b=this.get();if(h>b.length)throw new Error(\"_sha2: outputLen bigger than state\");for(let s=0;s<h;s++)i.setUint32(4*s,b[s],c)}digest(){let{buffer:t,outputLen:n}=this;this.digestInto(t);let r=t.slice(0,n);return this.destroy(),r}_cloneInto(t){t||=new this.constructor,t.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:c,destroyed:f,pos:i}=this;return t.destroyed=f,t.finished=c,t.length=o,t.pos=i,o%n&&t.buffer.set(r),t}clone(){return this._cloneInto()}},L=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var l=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var W=BigInt(4294967295),ct=BigInt(32);function yt(e,t=!1){return t?{h:Number(e&W),l:Number(e>>ct&W)}:{h:Number(e>>ct&W)|0,l:Number(e&W)|0}}function st(e,t=!1){let n=e.length,r=new Uint32Array(n),o=new Uint32Array(n);for(let c=0;c<n;c++){let{h:f,l:i}=yt(e[c],t);[r[c],o[c]]=[f,i]}return[r,o]}var q=(e,t,n)=>e>>>n,Q=(e,t,n)=>e<<32-n|t>>>n,D=(e,t,n)=>e>>>n|t<<32-n,_=(e,t,n)=>e<<32-n|t>>>n,T=(e,t,n)=>e<<64-n|t>>>n-32,O=(e,t,n)=>e>>>n-32|t<<64-n;function A(e,t,n,r){let o=(t>>>0)+(r>>>0);return{h:e+n+(o/2**32|0)|0,l:o|0}}var ft=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),it=(e,t,n,r)=>t+n+r+(e/2**32|0)|0,xt=(e,t,n,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0),at=(e,t,n,r,o)=>t+n+r+o+(e/2**32|0)|0,dt=(e,t,n,r,o)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0)+(o>>>0),ht=(e,t,n,r,o,c)=>t+n+r+o+c+(e/2**32|0)|0;var At=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),S=new Uint32Array(64),X=class extends V{constructor(t){super(64,t,8,!1)}get(){let{A:t,B:n,C:r,D:o,E:c,F:f,G:i,H:x}=this;return[t,n,r,o,c,f,i,x]}set(t,n,r,o,c,f,i,x){this.A=t|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=c|0,this.F=f|0,this.G=i|0,this.H=x|0}process(t,n){for(let s=0;s<16;s++,n+=4)S[s]=t.getUint32(n,!1);for(let s=16;s<64;s++){let d=S[s-15],u=S[s-2],g=y(d,7)^y(d,18)^d>>>3,p=y(u,17)^y(u,19)^u>>>10;S[s]=p+S[s-7]+g+S[s-16]|0}let{A:r,B:o,C:c,D:f,E:i,F:x,G:h,H:b}=this;for(let s=0;s<64;s++){let d=y(i,6)^y(i,11)^y(i,25),u=b+d+rt(i,x,h)+At[s]+S[s]|0,p=(y(r,2)^y(r,13)^y(r,22))+ot(r,o,c)|0;b=h,h=x,x=i,i=f+u|0,f=c,c=o,o=r,r=u+p|0}r=r+this.A|0,o=o+this.B|0,c=c+this.C|0,f=f+this.D|0,i=i+this.E|0,x=x+this.F|0,h=h+this.G|0,b=b+this.H|0,this.set(r,o,c,f,i,x,h,b)}roundClean(){I(S)}destroy(){this.set(0,0,0,0,0,0,0,0),I(this.buffer)}},Y=class extends X{A=L[0]|0;B=L[1]|0;C=L[2]|0;D=L[3]|0;E=L[4]|0;F=L[5]|0;G=L[6]|0;H=L[7]|0;constructor(){super(32)}};var bt=st([\"0x428a2f98d728ae22\",\"0x7137449123ef65cd\",\"0xb5c0fbcfec4d3b2f\",\"0xe9b5dba58189dbbc\",\"0x3956c25bf348b538\",\"0x59f111f1b605d019\",\"0x923f82a4af194f9b\",\"0xab1c5ed5da6d8118\",\"0xd807aa98a3030242\",\"0x12835b0145706fbe\",\"0x243185be4ee4b28c\",\"0x550c7dc3d5ffb4e2\",\"0x72be5d74f27b896f\",\"0x80deb1fe3b1696b1\",\"0x9bdc06a725c71235\",\"0xc19bf174cf692694\",\"0xe49b69c19ef14ad2\",\"0xefbe4786384f25e3\",\"0x0fc19dc68b8cd5b5\",\"0x240ca1cc77ac9c65\",\"0x2de92c6f592b0275\",\"0x4a7484aa6ea6e483\",\"0x5cb0a9dcbd41fbd4\",\"0x76f988da831153b5\",\"0x983e5152ee66dfab\",\"0xa831c66d2db43210\",\"0xb00327c898fb213f\",\"0xbf597fc7beef0ee4\",\"0xc6e00bf33da88fc2\",\"0xd5a79147930aa725\",\"0x06ca6351e003826f\",\"0x142929670a0e6e70\",\"0x27b70a8546d22ffc\",\"0x2e1b21385c26c926\",\"0x4d2c6dfc5ac42aed\",\"0x53380d139d95b3df\",\"0x650a73548baf63de\",\"0x766a0abb3c77b2a8\",\"0x81c2c92e47edaee6\",\"0x92722c851482353b\",\"0xa2bfe8a14cf10364\",\"0xa81a664bbc423001\",\"0xc24b8b70d0f89791\",\"0xc76c51a30654be30\",\"0xd192e819d6ef5218\",\"0xd69906245565a910\",\"0xf40e35855771202a\",\"0x106aa07032bbd1b8\",\"0x19a4c116b8d2d0c8\",\"0x1e376c085141ab53\",\"0x2748774cdf8eeb99\",\"0x34b0bcb5e19b48a8\",\"0x391c0cb3c5c95a63\",\"0x4ed8aa4ae3418acb\",\"0x5b9cca4f7763e373\",\"0x682e6ff3d6b2b8a3\",\"0x748f82ee5defb2fc\",\"0x78a5636f43172f60\",\"0x84c87814a1f0ab72\",\"0x8cc702081a6439ec\",\"0x90befffa23631e28\",\"0xa4506cebde82bde9\",\"0xbef9a3f7b2c67915\",\"0xc67178f2e372532b\",\"0xca273eceea26619c\",\"0xd186b8c721c0c207\",\"0xeada7dd6cde0eb1e\",\"0xf57d4f7fee6ed178\",\"0x06f067aa72176fba\",\"0x0a637dc5a2c898a6\",\"0x113f9804bef90dae\",\"0x1b710b35131c471b\",\"0x28db77f523047d84\",\"0x32caab7b40c72493\",\"0x3c9ebe0a15c9bebc\",\"0x431d67c49c100d4c\",\"0x4cc5d4becb3e42b6\",\"0x597f299cfc657e2a\",\"0x5fcb6fab3ad6faec\",\"0x6c44198c4a475817\"].map(e=>BigInt(e))),Ht=bt[0],mt=bt[1],U=new Uint32Array(80),C=new Uint32Array(80),Z=class extends V{constructor(t){super(128,t,16,!1)}get(){let{Ah:t,Al:n,Bh:r,Bl:o,Ch:c,Cl:f,Dh:i,Dl:x,Eh:h,El:b,Fh:s,Fl:d,Gh:u,Gl:g,Hh:p,Hl:w}=this;return[t,n,r,o,c,f,i,x,h,b,s,d,u,g,p,w]}set(t,n,r,o,c,f,i,x,h,b,s,d,u,g,p,w){this.Ah=t|0,this.Al=n|0,this.Bh=r|0,this.Bl=o|0,this.Ch=c|0,this.Cl=f|0,this.Dh=i|0,this.Dl=x|0,this.Eh=h|0,this.El=b|0,this.Fh=s|0,this.Fl=d|0,this.Gh=u|0,this.Gl=g|0,this.Hh=p|0,this.Hl=w|0}process(t,n){for(let a=0;a<16;a++,n+=4)U[a]=t.getUint32(n),C[a]=t.getUint32(n+=4);for(let a=16;a<80;a++){let B=U[a-15]|0,E=C[a-15]|0,N=D(B,E,1)^D(B,E,8)^q(B,E,7),$=_(B,E,1)^_(B,E,8)^Q(B,E,7),H=U[a-2]|0,m=C[a-2]|0,j=D(H,m,19)^T(H,m,61)^q(H,m,6),K=_(H,m,19)^O(H,m,61)^Q(H,m,6),k=xt($,K,C[a-7],C[a-16]),v=at(k,N,j,U[a-7],U[a-16]);U[a]=v|0,C[a]=k|0}let{Ah:r,Al:o,Bh:c,Bl:f,Ch:i,Cl:x,Dh:h,Dl:b,Eh:s,El:d,Fh:u,Fl:g,Gh:p,Gl:w,Hh:F,Hl:G}=this;for(let a=0;a<80;a++){let B=D(s,d,14)^D(s,d,18)^T(s,d,41),E=_(s,d,14)^_(s,d,18)^O(s,d,41),N=s&u^~s&p,$=d&g^~d&w,H=dt(G,E,$,mt[a],C[a]),m=ht(H,F,B,N,Ht[a],U[a]),j=H|0,K=D(r,o,28)^T(r,o,34)^T(r,o,39),k=_(r,o,28)^O(r,o,34)^O(r,o,39),v=r&c^r&i^c&i,pt=o&f^o&x^f&x;F=p|0,G=w|0,p=u|0,w=g|0,u=s|0,g=d|0,{h:s,l:d}=A(h|0,b|0,m|0,j|0),h=i|0,b=x|0,i=c|0,x=f|0,c=r|0,f=o|0;let et=ft(j,k,pt);r=it(et,m,K,v),o=et|0}({h:r,l:o}=A(this.Ah|0,this.Al|0,r|0,o|0)),{h:c,l:f}=A(this.Bh|0,this.Bl|0,c|0,f|0),{h:i,l:x}=A(this.Ch|0,this.Cl|0,i|0,x|0),{h,l:b}=A(this.Dh|0,this.Dl|0,h|0,b|0),{h:s,l:d}=A(this.Eh|0,this.El|0,s|0,d|0),{h:u,l:g}=A(this.Fh|0,this.Fl|0,u|0,g|0),{h:p,l:w}=A(this.Gh|0,this.Gl|0,p|0,w|0),{h:F,l:G}=A(this.Hh|0,this.Hl|0,F|0,G|0),this.set(r,o,c,f,i,x,h,b,s,d,u,g,p,w,F,G)}roundClean(){I(U,C)}destroy(){I(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},tt=class extends Z{Ah=l[0]|0;Al=l[1]|0;Bh=l[2]|0;Bl=l[3]|0;Ch=l[4]|0;Cl=l[5]|0;Dh=l[6]|0;Dl=l[7]|0;Eh=l[8]|0;El=l[9]|0;Fh=l[10]|0;Fl=l[11]|0;Gh=l[12]|0;Gl=l[13]|0;Hh=l[14]|0;Hl=l[15]|0;constructor(){super(64)}};var ut=J(()=>new Y,z(1));var lt=J(()=>new tt,z(3));if(typeof window<\"u\"&&window.crypto&&!window.crypto.subtle)try{Object.defineProperty(window.crypto,\"subtle\",{value:{digest(e,t){let n=typeof e==\"string\"?e:e?.name,r=new Uint8Array(t);return n===\"SHA-256\"?Promise.resolve(ut(r).buffer):n===\"SHA-512\"?Promise.resolve(lt(r).buffer):Promise.reject(new Error(\"unsupported: \"+n))}},configurable:!0})}catch{}})();\n/*! Bundled license information:\n\n@noble/hashes/utils.js:\n  (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)\n*/\n";

package/dist/crypto-shim.js

@@ -1,2 +0,0 @@
-export const CRYPTO_SHIM_JS = "\"use strict\";(()=>{function gt(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name===\"Uint8Array\"}function P(e,t,n=\"\"){let r=gt(e),o=e?.length,c=t!==void 0;if(!r||c&&o!==t){let f=n&&`\"${n}\" `,i=c?` of length ${t}`:\"\",x=r?`length=${o}`:`type=${typeof e}`;throw new Error(f+\"expected Uint8Array\"+i+\", got \"+x)}return e}function R(e,t=!0){if(e.destroyed)throw new Error(\"Hash instance has been destroyed\");if(t&&e.finished)throw new Error(\"Hash#digest() has already been called\")}function nt(e,t){P(e,void 0,\"digestInto() output\");let n=t.outputLen;if(e.length<n)throw new Error('\"digestInto() output\" expected to be of length >='+n)}function I(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function M(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function y(e,t){return e<<32-t|e>>>t}function J(e,t={}){let n=(o,c)=>e(c).update(o).digest(),r=e(void 0);return n.outputLen=r.outputLen,n.blockLen=r.blockLen,n.create=o=>e(o),Object.assign(n,t),Object.freeze(n)}var z=e=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});function rt(e,t,n){return e&t^~e&n}function ot(e,t,n){return e&t^e&n^t&n}var V=class{blockLen;outputLen;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(t,n,r,o){this.blockLen=t,this.outputLen=n,this.padOffset=r,this.isLE=o,this.buffer=new Uint8Array(t),this.view=M(this.buffer)}update(t){R(this),P(t);let{view:n,buffer:r,blockLen:o}=this,c=t.length;for(let f=0;f<c;){let i=Math.min(o-this.pos,c-f);if(i===o){let x=M(t);for(;o<=c-f;f+=o)this.process(x,f);continue}r.set(t.subarray(f,f+i),this.pos),this.pos+=i,f+=i,this.pos===o&&(this.process(n,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){R(this),nt(t,this),this.finished=!0;let{buffer:n,view:r,blockLen:o,isLE:c}=this,{pos:f}=this;n[f++]=128,I(this.buffer.subarray(f)),this.padOffset>o-f&&(this.process(r,0),f=0);for(let s=f;s<o;s++)n[s]=0;r.setBigUint64(o-8,BigInt(this.length*8),c),this.process(r,0);let i=M(t),x=this.outputLen;if(x%4)throw new Error(\"_sha2: outputLen must be aligned to 32bit\");let h=x/4,b=this.get();if(h>b.length)throw new Error(\"_sha2: outputLen bigger than state\");for(let s=0;s<h;s++)i.setUint32(4*s,b[s],c)}digest(){let{buffer:t,outputLen:n}=this;this.digestInto(t);let r=t.slice(0,n);return this.destroy(),r}_cloneInto(t){t||=new this.constructor,t.set(...this.get());let{blockLen:n,buffer:r,length:o,finished:c,destroyed:f,pos:i}=this;return t.destroyed=f,t.finished=c,t.length=o,t.pos=i,o%n&&t.buffer.set(r),t}clone(){return this._cloneInto()}},L=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var l=Uint32Array.from([1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209]);var W=BigInt(4294967295),ct=BigInt(32);function yt(e,t=!1){return t?{h:Number(e&W),l:Number(e>>ct&W)}:{h:Number(e>>ct&W)|0,l:Number(e&W)|0}}function st(e,t=!1){let n=e.length,r=new Uint32Array(n),o=new Uint32Array(n);for(let c=0;c<n;c++){let{h:f,l:i}=yt(e[c],t);[r[c],o[c]]=[f,i]}return[r,o]}var q=(e,t,n)=>e>>>n,Q=(e,t,n)=>e<<32-n|t>>>n,D=(e,t,n)=>e>>>n|t<<32-n,_=(e,t,n)=>e<<32-n|t>>>n,T=(e,t,n)=>e<<64-n|t>>>n-32,O=(e,t,n)=>e>>>n-32|t<<64-n;function A(e,t,n,r){let o=(t>>>0)+(r>>>0);return{h:e+n+(o/2**32|0)|0,l:o|0}}var ft=(e,t,n)=>(e>>>0)+(t>>>0)+(n>>>0),it=(e,t,n,r)=>t+n+r+(e/2**32|0)|0,xt=(e,t,n,r)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0),at=(e,t,n,r,o)=>t+n+r+o+(e/2**32|0)|0,dt=(e,t,n,r,o)=>(e>>>0)+(t>>>0)+(n>>>0)+(r>>>0)+(o>>>0),ht=(e,t,n,r,o,c)=>t+n+r+o+c+(e/2**32|0)|0;var At=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),S=new Uint32Array(64),X=class extends V{constructor(t){super(64,t,8,!1)}get(){let{A:t,B:n,C:r,D:o,E:c,F:f,G:i,H:x}=this;return[t,n,r,o,c,f,i,x]}set(t,n,r,o,c,f,i,x){this.A=t|0,this.B=n|0,this.C=r|0,this.D=o|0,this.E=c|0,this.F=f|0,this.G=i|0,this.H=x|0}process(t,n){for(let s=0;s<16;s++,n+=4)S[s]=t.getUint32(n,!1);for(let s=16;s<64;s++){let d=S[s-15],u=S[s-2],g=y(d,7)^y(d,18)^d>>>3,p=y(u,17)^y(u,19)^u>>>10;S[s]=p+S[s-7]+g+S[s-16]|0}let{A:r,B:o,C:c,D:f,E:i,F:x,G:h,H:b}=this;for(let s=0;s<64;s++){let d=y(i,6)^y(i,11)^y(i,25),u=b+d+rt(i,x,h)+At[s]+S[s]|0,p=(y(r,2)^y(r,13)^y(r,22))+ot(r,o,c)|0;b=h,h=x,x=i,i=f+u|0,f=c,c=o,o=r,r=u+p|0}r=r+this.A|0,o=o+this.B|0,c=c+this.C|0,f=f+this.D|0,i=i+this.E|0,x=x+this.F|0,h=h+this.G|0,b=b+this.H|0,this.set(r,o,c,f,i,x,h,b)}roundClean(){I(S)}destroy(){this.set(0,0,0,0,0,0,0,0),I(this.buffer)}},Y=class extends X{A=L[0]|0;B=L[1]|0;C=L[2]|0;D=L[3]|0;E=L[4]|0;F=L[5]|0;G=L[6]|0;H=L[7]|0;constructor(){super(32)}};var bt=st([\"0x428a2f98d728ae22\",\"0x7137449123ef65cd\",\"0xb5c0fbcfec4d3b2f\",\"0xe9b5dba58189dbbc\",\"0x3956c25bf348b538\",\"0x59f111f1b605d019\",\"0x923f82a4af194f9b\",\"0xab1c5ed5da6d8118\",\"0xd807aa98a3030242\",\"0x12835b0145706fbe\",\"0x243185be4ee4b28c\",\"0x550c7dc3d5ffb4e2\",\"0x72be5d74f27b896f\",\"0x80deb1fe3b1696b1\",\"0x9bdc06a725c71235\",\"0xc19bf174cf692694\",\"0xe49b69c19ef14ad2\",\"0xefbe4786384f25e3\",\"0x0fc19dc68b8cd5b5\",\"0x240ca1cc77ac9c65\",\"0x2de92c6f592b0275\",\"0x4a7484aa6ea6e483\",\"0x5cb0a9dcbd41fbd4\",\"0x76f988da831153b5\",\"0x983e5152ee66dfab\",\"0xa831c66d2db43210\",\"0xb00327c898fb213f\",\"0xbf597fc7beef0ee4\",\"0xc6e00bf33da88fc2\",\"0xd5a79147930aa725\",\"0x06ca6351e003826f\",\"0x142929670a0e6e70\",\"0x27b70a8546d22ffc\",\"0x2e1b21385c26c926\",\"0x4d2c6dfc5ac42aed\",\"0x53380d139d95b3df\",\"0x650a73548baf63de\",\"0x766a0abb3c77b2a8\",\"0x81c2c92e47edaee6\",\"0x92722c851482353b\",\"0xa2bfe8a14cf10364\",\"0xa81a664bbc423001\",\"0xc24b8b70d0f89791\",\"0xc76c51a30654be30\",\"0xd192e819d6ef5218\",\"0xd69906245565a910\",\"0xf40e35855771202a\",\"0x106aa07032bbd1b8\",\"0x19a4c116b8d2d0c8\",\"0x1e376c085141ab53\",\"0x2748774cdf8eeb99\",\"0x34b0bcb5e19b48a8\",\"0x391c0cb3c5c95a63\",\"0x4ed8aa4ae3418acb\",\"0x5b9cca4f7763e373\",\"0x682e6ff3d6b2b8a3\",\"0x748f82ee5defb2fc\",\"0x78a5636f43172f60\",\"0x84c87814a1f0ab72\",\"0x8cc702081a6439ec\",\"0x90befffa23631e28\",\"0xa4506cebde82bde9\",\"0xbef9a3f7b2c67915\",\"0xc67178f2e372532b\",\"0xca273eceea26619c\",\"0xd186b8c721c0c207\",\"0xeada7dd6cde0eb1e\",\"0xf57d4f7fee6ed178\",\"0x06f067aa72176fba\",\"0x0a637dc5a2c898a6\",\"0x113f9804bef90dae\",\"0x1b710b35131c471b\",\"0x28db77f523047d84\",\"0x32caab7b40c72493\",\"0x3c9ebe0a15c9bebc\",\"0x431d67c49c100d4c\",\"0x4cc5d4becb3e42b6\",\"0x597f299cfc657e2a\",\"0x5fcb6fab3ad6faec\",\"0x6c44198c4a475817\"].map(e=>BigInt(e))),Ht=bt[0],mt=bt[1],U=new Uint32Array(80),C=new Uint32Array(80),Z=class extends V{constructor(t){super(128,t,16,!1)}get(){let{Ah:t,Al:n,Bh:r,Bl:o,Ch:c,Cl:f,Dh:i,Dl:x,Eh:h,El:b,Fh:s,Fl:d,Gh:u,Gl:g,Hh:p,Hl:w}=this;return[t,n,r,o,c,f,i,x,h,b,s,d,u,g,p,w]}set(t,n,r,o,c,f,i,x,h,b,s,d,u,g,p,w){this.Ah=t|0,this.Al=n|0,this.Bh=r|0,this.Bl=o|0,this.Ch=c|0,this.Cl=f|0,this.Dh=i|0,this.Dl=x|0,this.Eh=h|0,this.El=b|0,this.Fh=s|0,this.Fl=d|0,this.Gh=u|0,this.Gl=g|0,this.Hh=p|0,this.Hl=w|0}process(t,n){for(let a=0;a<16;a++,n+=4)U[a]=t.getUint32(n),C[a]=t.getUint32(n+=4);for(let a=16;a<80;a++){let B=U[a-15]|0,E=C[a-15]|0,N=D(B,E,1)^D(B,E,8)^q(B,E,7),$=_(B,E,1)^_(B,E,8)^Q(B,E,7),H=U[a-2]|0,m=C[a-2]|0,j=D(H,m,19)^T(H,m,61)^q(H,m,6),K=_(H,m,19)^O(H,m,61)^Q(H,m,6),k=xt($,K,C[a-7],C[a-16]),v=at(k,N,j,U[a-7],U[a-16]);U[a]=v|0,C[a]=k|0}let{Ah:r,Al:o,Bh:c,Bl:f,Ch:i,Cl:x,Dh:h,Dl:b,Eh:s,El:d,Fh:u,Fl:g,Gh:p,Gl:w,Hh:F,Hl:G}=this;for(let a=0;a<80;a++){let B=D(s,d,14)^D(s,d,18)^T(s,d,41),E=_(s,d,14)^_(s,d,18)^O(s,d,41),N=s&u^~s&p,$=d&g^~d&w,H=dt(G,E,$,mt[a],C[a]),m=ht(H,F,B,N,Ht[a],U[a]),j=H|0,K=D(r,o,28)^T(r,o,34)^T(r,o,39),k=_(r,o,28)^O(r,o,34)^O(r,o,39),v=r&c^r&i^c&i,pt=o&f^o&x^f&x;F=p|0,G=w|0,p=u|0,w=g|0,u=s|0,g=d|0,{h:s,l:d}=A(h|0,b|0,m|0,j|0),h=i|0,b=x|0,i=c|0,x=f|0,c=r|0,f=o|0;let et=ft(j,k,pt);r=it(et,m,K,v),o=et|0}({h:r,l:o}=A(this.Ah|0,this.Al|0,r|0,o|0)),{h:c,l:f}=A(this.Bh|0,this.Bl|0,c|0,f|0),{h:i,l:x}=A(this.Ch|0,this.Cl|0,i|0,x|0),{h,l:b}=A(this.Dh|0,this.Dl|0,h|0,b|0),{h:s,l:d}=A(this.Eh|0,this.El|0,s|0,d|0),{h:u,l:g}=A(this.Fh|0,this.Fl|0,u|0,g|0),{h:p,l:w}=A(this.Gh|0,this.Gl|0,p|0,w|0),{h:F,l:G}=A(this.Hh|0,this.Hl|0,F|0,G|0),this.set(r,o,c,f,i,x,h,b,s,d,u,g,p,w,F,G)}roundClean(){I(U,C)}destroy(){I(this.buffer),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}},tt=class extends Z{Ah=l[0]|0;Al=l[1]|0;Bh=l[2]|0;Bl=l[3]|0;Ch=l[4]|0;Cl=l[5]|0;Dh=l[6]|0;Dl=l[7]|0;Eh=l[8]|0;El=l[9]|0;Fh=l[10]|0;Fl=l[11]|0;Gh=l[12]|0;Gl=l[13]|0;Hh=l[14]|0;Hl=l[15]|0;constructor(){super(64)}};var ut=J(()=>new Y,z(1));var lt=J(()=>new tt,z(3));if(typeof window<\"u\"&&window.crypto&&!window.crypto.subtle)try{Object.defineProperty(window.crypto,\"subtle\",{value:{digest(e,t){let n=typeof e==\"string\"?e:e?.name,r=new Uint8Array(t);return n===\"SHA-256\"?Promise.resolve(ut(r).buffer):n===\"SHA-512\"?Promise.resolve(lt(r).buffer):Promise.reject(new Error(\"unsupported: \"+n))}},configurable:!0})}catch{}})();\n/*! Bundled license information:\n\n@noble/hashes/utils.js:\n  (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)\n*/\n";
-//# sourceMappingURL=crypto-shim.js.map

package/dist/crypto-shim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto-shim.js","sourceRoot":"","sources":["../src/crypto-shim.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAG,ghTAAghT,CAAC"}