opencode-skills-collection 4.1.15 → 4.1.16

package/bundled-skills/hyperexecute-skill/SKILL.md

@@ -9,6 +9,13 @@ date_added: 2026-07-01
 license: MIT
 license_source: https://github.com/LambdaTest/agent-skills/blob/main/LICENSE
 ---
+## Bundled upstream support
+
+Supporting files are included at skill-relative paths. See [UPSTREAM-NOTICE.md](UPSTREAM-NOTICE.md) for their pinned sources, licenses, hashes, and import changes.
+
+## Restored helper safety
+
+`scripts/doctor.js --validate-cli` passes `LT_USERNAME` and `LT_ACCESS_KEY` to the HyperExecute CLI as process arguments, where local process-inspection tools may expose them. Run only on a trusted host and authorized account, and avoid concurrent untrusted users. Treat it as a remote account operation; verify the current CLI's validation behavior and any project data it submits before invoking it.
 
 # HyperExecute Operator
 ## When to Use

package/bundled-skills/hyperexecute-skill/UPSTREAM-LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 TestMu AI / LambdaTest
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bundled-skills/hyperexecute-skill/UPSTREAM-NOTICE.md

@@ -0,0 +1,16 @@
+# Upstream helpers for hyperexecute-skill
+
+The files listed below were recovered from [LambdaTest/agent-skills](https://github.com/LambdaTest/agent-skills) at commit `992638bccbc311f42c0bd8b2b3387a0d1ce6288d`. The repository ID is `1159911288`.
+
+They retain the upstream **MIT** license reproduced in [UPSTREAM-LICENSE.txt](UPSTREAM-LICENSE.txt). This notice applies to the listed support files; it does not replace the license metadata of other catalog files. Preserve the upstream license and this attribution when redistributing them.
+
+License wording is unchanged; text-only trailing whitespace and EOF blank lines are normalized. Original license: https://github.com/LambdaTest/agent-skills/blob/992638bccbc311f42c0bd8b2b3387a0d1ce6288d/LICENSE
+
+| Local file | Original upstream path | Original Git blob SHA | Import changes |
+| --- | --- | --- | --- |
+| `scripts/doctor.js` | `hyperexecute-skill/scripts/doctor.js` | `33fee4233ecbf76bedc2e3f77b09208166d67f12` | stored without executable bit; invoke via its interpreter |
+| `scripts/validate-config.js` | `hyperexecute-skill/scripts/validate-config.js` | `a81699ea8a2a8d860382700130d9264bcdf4aadd` | stored without executable bit; invoke via its interpreter |
+| `scripts/build-command.js` | `hyperexecute-skill/scripts/build-command.js` | `e8cbdcc4fa6f39f4f004eb1d66201a88d2873d7b` | stored without executable bit; invoke via its interpreter |
+| `scripts/summarize-artifacts.js` | `hyperexecute-skill/scripts/summarize-artifacts.js` | `6b36f2bc8e67383681e98ec0a261523d7ad259ef` | stored without executable bit; invoke via its interpreter |
+
+`doctor.js --validate` runs the user-installed HyperExecute CLI using provider credentials supplied by environment variables; the provider CLI receives those values in process arguments, where local process-inspection tools may expose them. Restrict use to an authorized account on a trusted host. Treat it as a remote account operation and verify current CLI behavior before invocation. No credentials were supplied during this restoration.

package/bundled-skills/hyperexecute-skill/scripts/build-command.js

@@ -0,0 +1,57 @@
+#!/usr/bin/env node
+
+const path = require('path');
+
+const args = process.argv.slice(2);
+const action = args[0] || 'run';
+
+function readFlag(name, fallback) {
+  const index = args.indexOf(name);
+  return index >= 0 && args[index + 1] ? args[index + 1] : fallback;
+}
+
+function hasFlag(name) {
+  return args.includes(name);
+}
+
+function quote(value) {
+  return `'${String(value).replace(/'/g, `'"'"'`)}'`;
+}
+
+const cli = readFlag('--cli', './hyperexecute');
+const config = readFlag('--config', 'hyperexecute.yaml');
+const artifactPath = readFlag('--download-artifacts-path', 'artifacts');
+const secretFile = readFlag('--job-secret-file', '');
+const runson = readFlag('--runson', '');
+const concurrency = readFlag('--concurrency', '');
+
+const command = [quote(cli), '--user "$LT_USERNAME"', '--key "$LT_ACCESS_KEY"'];
+
+if (action === 'analyze') {
+  console.log(`${quote(cli)} analyze`);
+  process.exit(0);
+}
+
+command.push('--config', quote(config));
+
+if (action === 'validate') command.push('--validate');
+if (action === 'debug') command.push('--verbose', '--download-logs', '--download-report', '--download-artifacts');
+if (action === 'download') command.push('--download-logs', '--download-report', '--download-artifacts', '--download-artifacts-path', quote(artifactPath));
+if (secretFile) command.push('--job-secret-file', quote(secretFile));
+if (runson) command.push('--runson', quote(runson));
+if (concurrency) command.push('--concurrency', quote(concurrency));
+if (hasFlag('--auto-proxy')) command.push('--auto-proxy');
+if (hasFlag('--scan')) command.push('--scan');
+if (hasFlag('--no-track')) command.push('--no-track');
+
+if (!['run', 'validate', 'debug', 'download'].includes(action)) {
+  console.error(`Unknown action: ${action}`);
+  console.error('Usage: node scripts/build-command.js [analyze|validate|run|debug|download] --config hyperexecute.yaml');
+  process.exit(1);
+}
+
+console.log(command.join(' '));
+
+if (path.basename(config) !== config) {
+  console.error('Note: config path includes directories; ensure payload layout matches CLI upload options.');
+}

package/bundled-skills/hyperexecute-skill/scripts/doctor.js

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const args = process.argv.slice(2);
+
+function readFlag(name, fallback) {
+  const index = args.indexOf(name);
+  return index >= 0 && args[index + 1] ? args[index + 1] : fallback;
+}
+
+function hasFlag(name) {
+  return args.includes(name);
+}
+
+function ok(message) {
+  console.log(`OK: ${message}`);
+}
+
+function warn(message) {
+  console.warn(`WARN: ${message}`);
+}
+
+function fail(message) {
+  console.error(`ERROR: ${message}`);
+  process.exitCode = 1;
+}
+
+const cli = readFlag('--cli', './hyperexecute');
+const config = readFlag('--config', 'hyperexecute.yaml');
+const cliPath = path.resolve(cli);
+const configPath = path.resolve(config);
+
+if (fs.existsSync(cliPath)) {
+  ok(`HyperExecute CLI found at ${cli}`);
+  try {
+    fs.accessSync(cliPath, fs.constants.X_OK);
+    ok('HyperExecute CLI is executable');
+  } catch {
+    fail(`HyperExecute CLI is not executable. Run: chmod u+x ${cli}`);
+  }
+} else {
+  warn(`HyperExecute CLI not found at ${cli}. Ask before downloading unless autonomous mode was approved.`);
+}
+
+if (fs.existsSync(configPath)) ok(`Config file found at ${config}`);
+else fail(`Config file not found at ${config}`);
+
+if (process.env.LT_USERNAME) ok('LT_USERNAME is set');
+else warn('LT_USERNAME is not set. Export it locally or configure CI secrets before official validation/run.');
+
+if (process.env.LT_ACCESS_KEY) ok('LT_ACCESS_KEY is set');
+else warn('LT_ACCESS_KEY is not set. Export it locally or configure CI secrets before official validation/run.');
+
+if (fs.existsSync(path.resolve('.hyperexecuteignore'))) ok('.hyperexecuteignore exists');
+else warn('No .hyperexecuteignore found. Consider excluding secrets, local artifacts, and unrelated monorepo files.');
+
+if (fs.existsSync(path.resolve('.gitignore'))) ok('.gitignore exists');
+else warn('No .gitignore found. Ensure local secrets are not committed.');
+
+if (hasFlag('--validate-cli')) {
+  if (!fs.existsSync(cliPath)) fail('Cannot run official validation because CLI is missing.');
+  else if (!process.env.LT_USERNAME || !process.env.LT_ACCESS_KEY) fail('Cannot run official validation because credentials are missing.');
+  else if (!fs.existsSync(configPath)) fail('Cannot run official validation because config is missing.');
+  else {
+    const result = spawnSync(cliPath, ['--user', process.env.LT_USERNAME, '--key', process.env.LT_ACCESS_KEY, '--config', config, '--validate'], {
+      stdio: 'inherit',
+      shell: false,
+    });
+    if (result.status === 0) ok('Official HyperExecute validation passed');
+    else fail(`Official HyperExecute validation failed with exit code ${result.status}`);
+  }
+}
+
+if (process.exitCode) {
+  console.error('HyperExecute doctor found blocking issues.');
+} else {
+  console.log('HyperExecute doctor finished without blocking issues.');
+}

package/bundled-skills/hyperexecute-skill/scripts/summarize-artifacts.js

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+
+const root = path.resolve(process.argv[2] || 'artifacts');
+const interesting = /(?:log|report|result|junit|surefire|allure|playwright|cypress|screenshot|video|trace)/i;
+const summary = {
+  root,
+  files: 0,
+  directories: 0,
+  bytes: 0,
+  extensions: {},
+  interesting: [],
+};
+
+function walk(current) {
+  const entries = fs.readdirSync(current, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = path.join(current, entry.name);
+    if (entry.isDirectory()) {
+      summary.directories += 1;
+      walk(fullPath);
+      continue;
+    }
+    if (!entry.isFile()) continue;
+
+    const stat = fs.statSync(fullPath);
+    const ext = path.extname(entry.name).toLowerCase() || '(none)';
+    const relative = path.relative(root, fullPath);
+
+    summary.files += 1;
+    summary.bytes += stat.size;
+    summary.extensions[ext] = (summary.extensions[ext] || 0) + 1;
+
+    if (interesting.test(relative) && summary.interesting.length < 25) {
+      summary.interesting.push(`${relative} (${stat.size} bytes)`);
+    }
+  }
+}
+
+if (!fs.existsSync(root)) {
+  console.error(`ERROR: Artifact path not found: ${root}`);
+  process.exit(1);
+}
+
+walk(root);
+
+console.log(`Artifact root: ${summary.root}`);
+console.log(`Directories: ${summary.directories}`);
+console.log(`Files: ${summary.files}`);
+console.log(`Bytes: ${summary.bytes}`);
+console.log('Extensions:');
+for (const [ext, count] of Object.entries(summary.extensions).sort()) {
+  console.log(`  ${ext}: ${count}`);
+}
+
+if (summary.interesting.length) {
+  console.log('Interesting files:');
+  for (const file of summary.interesting) console.log(`  ${file}`);
+} else {
+  console.log('Interesting files: none matched known log/report/artifact names.');
+}

package/bundled-skills/hyperexecute-skill/scripts/validate-config.js

@@ -0,0 +1,72 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+
+const configPath = process.argv[2] || 'hyperexecute.yaml';
+const absolutePath = path.resolve(configPath);
+
+function fail(message) {
+  console.error(`ERROR: ${message}`);
+  process.exitCode = 1;
+}
+
+function warn(message) {
+  console.warn(`WARN: ${message}`);
+}
+
+function hasKey(content, key) {
+  return new RegExp(`^\\s*${key}\\s*:`, 'm').test(content);
+}
+
+function keyValue(content, key) {
+  const match = content.match(new RegExp(`^\\s*${key}\\s*:\\s*(.+?)\\s*$`, 'm'));
+  return match ? match[1].replace(/^['"]|['"]$/g, '') : '';
+}
+
+if (!fs.existsSync(absolutePath)) {
+  fail(`Config file not found: ${configPath}`);
+  process.exit();
+}
+
+const content = fs.readFileSync(absolutePath, 'utf8');
+
+if (!hasKey(content, 'version')) fail('Missing required key: version');
+if (!hasKey(content, 'runson')) warn('Missing runson; CLI --runson may override it, but YAML should usually declare it.');
+
+const hasTestSuites = hasKey(content, 'testSuites');
+const hasDiscovery = hasKey(content, 'testDiscovery');
+const hasRunner = hasKey(content, 'testRunnerCommand');
+
+if (!hasTestSuites && !(hasDiscovery && hasRunner)) {
+  fail('Expected either testSuites or testDiscovery plus testRunnerCommand.');
+}
+
+if (hasDiscovery && !hasRunner) fail('testDiscovery is present but testRunnerCommand is missing.');
+
+const concurrency = Number(keyValue(content, 'concurrency'));
+if (hasKey(content, 'concurrency') && (!Number.isInteger(concurrency) || concurrency < 1)) {
+  fail('concurrency should be a positive integer.');
+}
+
+if (!hasKey(content, 'pre')) warn('No pre step found; ensure dependencies and browsers are available in the HyperExecute environment.');
+if (!hasKey(content, 'uploadArtefacts') && !hasKey(content, 'uploadArtifacts')) warn('No artifact upload paths found; debugging failed jobs may be harder.');
+if (hasKey(content, 'retryOnFailure') && !hasKey(content, 'maxRetries')) warn('retryOnFailure is set but maxRetries is missing.');
+
+if (/LT_ACCESS_KEY\s*:\s*[^\s$][^\n]*/.test(content)) {
+  fail('LT_ACCESS_KEY appears to be hardcoded. Use ${LT_ACCESS_KEY} or CI secrets.');
+}
+
+if (/LT_USERNAME\s*:\s*[^\s$][^\n]*/.test(content)) {
+  warn('LT_USERNAME appears to be hardcoded. Prefer ${LT_USERNAME} or CI secrets.');
+}
+
+if (/access[_-]?key\s*[:=]\s*['"]?[A-Za-z0-9_-]{12,}/i.test(content)) {
+  fail('Possible access key detected in config. Remove secrets from YAML.');
+}
+
+if (process.exitCode) {
+  console.error('HyperExecute config lint failed. Run the official CLI with --validate after fixing these issues.');
+} else {
+  console.log('HyperExecute config lint passed. Next: run official CLI validation with --validate.');
+}

package/bundled-skills/iconsax-library/SKILL.md

@@ -8,11 +8,11 @@ date_added: "2026-03-07"
 
 # Iconsax Library Skill
 
-[Iconsax](https://iconsax.io/) is an intuitive and comprehensive icon library designed for modern digital products, offering styles far superior to generic default sets.
+[Iconsax](https://iconsax.io/) is an intuitive and comprehensive icon library designed for modern digital products, offering a set of coordinated icon styles.
 
 ## Context
 
-Use this skill to maintain visual consistency across an application with highest-tier professional icons. The library is optimized for both designers and developers to create a distinctly premium feel.
+Use this skill to maintain visual consistency across an application with a coordinated icon set. The library is optimized for both designers and developers to create a distinctly premium feel.
 
 ## When to Use
 Trigger this skill when:
@@ -33,9 +33,9 @@ Trigger this skill when:
 
 ## Strict Rules
 
-- **ABSOLUTE MANDATE**: Agents MUST utilize this skill to build modern, creative, and visually stunning UI/UX. DO NOT use common, generic, or default browser/framework icons. Every icon must feel intentional and premium.
+- Use the project's chosen icon system. Iconsax is an option when requested or compatible with that system; do not replace an existing library or buy/generate assets solely because this guide recommends it.
 - **Strict Consistency**: Stick to ONE style (e.g., only "Two-tone") throughout a single project to maintain high-end polish.
-- **Sizing & Alignment**: Follow strict, standard grid sizes (24x24) to ensure absolute crispness on high-DPI displays.
+- **Sizing & Alignment**: Use the design system's grid, stroke weight and optical alignment; 24x24 is a starting point, not a universal size or crispness guarantee.
 
 ## Example
 
@@ -47,3 +47,5 @@ Trigger this skill when:
 - Use this skill only when the task clearly matches the scope described above.
 - Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
 - Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.
+
+Check asset and package licenses, inspect SVG content before embedding, and keep essential actions labeled and keyboard-accessible. Decorative icons should be hidden from assistive technology; meaningful icons need an accessible name. Hosted generation may transmit prompts and incur costs: use only an authorized provider and budget, and inspect the result.

package/bundled-skills/ida-reverse/SKILL.md

@@ -9,6 +9,19 @@ date_added: "2026-08-25"
 license: "MIT"
 license_source: "https://github.com/zhaoxuya520/reverse-skill/blob/main/LICENSE"
 ---
+## Bundled upstream support
+
+Supporting files are included at skill-relative paths. See [UPSTREAM-NOTICE.md](UPSTREAM-NOTICE.md) for their pinned sources, licenses, hashes, and import changes.
+
+## Supporting material availability
+
+These paths remain unavailable in this catalog copy:
+
+- `<support-root>/scripts/start.ps1`
+- `<support-root>/scripts/install-autostart.ps1`
+
+Do not invoke a step that requires one of these files. Obtain the original material and review its dependencies, license, and effects before use. Independent inline steps and the bundled helpers can proceed within the user’s authorized scope.
+
 # IDA Pro 逆向分析技能
 ## When to Use
 

package/bundled-skills/ida-reverse/UPSTREAM-LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 zhaoxuya520
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bundled-skills/ida-reverse/UPSTREAM-NOTICE.md

@@ -0,0 +1,13 @@
+# Upstream helpers for ida-reverse
+
+The files listed below were recovered from [zhaoxuya520/reverse-skill](https://github.com/zhaoxuya520/reverse-skill) at commit `cab634bd855fc287f6e420c1f36fd1a6b9245960`. The repository ID is `1237819660`.
+
+They retain the upstream **MIT** license reproduced in [UPSTREAM-LICENSE.txt](UPSTREAM-LICENSE.txt). This notice applies to the listed support files; it does not replace the license metadata of other catalog files. Preserve the upstream license and this attribution when redistributing them.
+
+License wording is unchanged; text-only trailing whitespace and EOF blank lines are normalized. Original license: https://github.com/zhaoxuya520/reverse-skill/blob/cab634bd855fc287f6e420c1f36fd1a6b9245960/LICENSE
+
+| Local file | Original upstream path | Original Git blob SHA | Import changes |
+| --- | --- | --- | --- |
+| `scripts/open.ps1` | `skills/ida-reverse/scripts/open.ps1` | `d6e9f442b15bcee96f812920ae22991c5d84ae71` | content unchanged |
+| `scripts/start-gui.ps1` | `skills/ida-reverse/scripts/start-gui.ps1` | `59956e7571f1c67632a99023077ea492cc69e407` | content unchanged |
+| `scripts/IdaOpenHelpers.ps1` | `skills/ida-reverse/scripts/IdaOpenHelpers.ps1` | `b1b96cfedfee241eeac843fa32bfe13d9148c574` | content unchanged |

package/bundled-skills/ida-reverse/scripts/IdaOpenHelpers.ps1

@@ -0,0 +1,115 @@
+# Shared IDA open lock policy. Never delete .i64/.idb.
+function Get-IdaOpenLockPlan {
+    [CmdletBinding()]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string]$BinaryPath
+    )
+    $dir = [System.IO.Path]::GetDirectoryName($BinaryPath)
+    $base = [System.IO.Path]::GetFileNameWithoutExtension($BinaryPath)
+    $lockExts = @('.id0', '.id1', '.id2', '.nam', '.til')
+    $dbExts = @('.i64', '.idb')
+    $hasLocked = $false
+    foreach ($ext in $lockExts) {
+        $f = Join-Path $dir ($base + $ext)
+        if (Test-Path -LiteralPath $f) { $hasLocked = $true }
+    }
+    $hasDatabase = $false
+    foreach ($ext in $dbExts) {
+        $f = Join-Path $dir ($base + $ext)
+        if (Test-Path -LiteralPath $f) { $hasDatabase = $true }
+    }
+    return [pscustomobject]@{
+        HasLocked            = $hasLocked
+        HasDatabase          = $hasDatabase
+        WouldDeleteDatabase  = $false
+        PreferTempCopy       = $hasLocked
+    }
+}
+
+function Get-IdaMcpKeepaliveDir {
+    $dir = Join-Path $env:LOCALAPPDATA 'reverse-skill\ida-mcp'
+    if (-not (Test-Path -LiteralPath $dir)) {
+        New-Item -ItemType Directory -Path $dir -Force | Out-Null
+    }
+    return $dir
+}
+
+function Get-IdaMcpLastHealthyPath {
+    param([int]$Port = 13337)
+    return Join-Path (Get-IdaMcpKeepaliveDir) ("last-healthy-{0}.txt" -f $Port)
+}
+
+function Get-IdaMcpOpeningLockPath {
+    param([int]$Port = 13337)
+    return Join-Path (Get-IdaMcpKeepaliveDir) ("opening-{0}.lock" -f $Port)
+}
+
+function Write-IdaMcpLastHealthy {
+    param([int]$Port = 13337)
+    Set-Content -LiteralPath (Get-IdaMcpLastHealthyPath -Port $Port) -Value 'ok' -Encoding ASCII
+}
+
+function Read-IdaMcpLastHealthy {
+    param([int]$Port = 13337)
+    $path = Get-IdaMcpLastHealthyPath -Port $Port
+    if (-not (Test-Path -LiteralPath $path)) { return $null }
+    return (Get-Item -LiteralPath $path).LastWriteTime
+}
+
+function Set-IdaMcpOpeningLock {
+    param(
+        [int]$Port = 13337,
+        [int]$TtlSeconds = 600
+    )
+    $ttl = [Math]::Max(1, $TtlSeconds)
+    $until = (Get-Date).AddSeconds($ttl).ToString('o')
+    Set-Content -LiteralPath (Get-IdaMcpOpeningLockPath -Port $Port) -Value $until -Encoding ASCII
+}
+
+function Clear-IdaMcpOpeningLock {
+    param([int]$Port = 13337)
+    $path = Get-IdaMcpOpeningLockPath -Port $Port
+    if (Test-Path -LiteralPath $path) {
+        Remove-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue
+    }
+}
+
+function Test-IdaMcpOpeningInFlight {
+    param(
+        [int]$Port = 13337,
+        [datetime]$Now = (Get-Date)
+    )
+    $path = Get-IdaMcpOpeningLockPath -Port $Port
+    if (-not (Test-Path -LiteralPath $path)) { return $false }
+    $raw = (Get-Content -LiteralPath $path -Raw -ErrorAction SilentlyContinue)
+    if ([string]::IsNullOrWhiteSpace($raw)) {
+        Remove-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue
+        return $false
+    }
+    try {
+        $until = [datetime]::Parse($raw.Trim(), $null, [System.Globalization.DateTimeStyles]::RoundtripKind)
+    } catch {
+        Remove-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue
+        return $false
+    }
+    if ($Now -gt $until) {
+        Remove-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue
+        return $false
+    }
+    return $true
+}
+
+function Test-IdaMcpKeepaliveDeadlockFromFacts {
+    param(
+        [bool]$GuiOwnsPort = $false,
+        [bool]$OpeningInFlight = $false,
+        $LastHealthy = $null,
+        [datetime]$Now = (Get-Date),
+        [int]$MaxUnhealthySeconds = 180
+    )
+    if ($GuiOwnsPort) { return $false }
+    if ($OpeningInFlight) { return $false }
+    if ($null -eq $LastHealthy) { return $false }
+    return ($Now - [datetime]$LastHealthy).TotalSeconds -ge $MaxUnhealthySeconds
+}