openmeld 0.3.225 → 0.3.227

package/dist/{entry-B19Dcymp.js → entry-jvTvDBr-.js}

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
 
-import { _t as systemDir, s as releaseLock, t as acquireLock, ut as resolveOpenMeldRootDir } from "./lock-iue1J2xy.js";
-import { d as getAuthSessionState, o as buildStoredAuthSessionIdentity, w as withAdmittedServiceSession } from "./auth-session-uEk_Tx6T.js";
-import { n as ensureDaemonRuntimePaths } from "./daemon-device-id-B1Af2Zmn.js";
-import { i as readProcessStartIdentity } from "./process-identity-BQLdaZdB.js";
-import { o as serviceExecutionHostMethods, r as serveExecutionHost, s as serviceExecutionHostOwnerSchema, t as ExecutionHostError } from "./channel-B2fD2_be.js";
-import { a as resolveBaseUrl } from "./base-url-DvjOkKPs.js";
-import { i as readDaemonServiceContract } from "./daemon-service-contract-GLmAxsq-.js";
-import { n as resolveRuntimeContext } from "./context-Bdh3nAzw.js";
+import { I as resolveOpenMeldRootDir, W as systemDir } from "./paths-DSkUuEu3.js";
+import { d as getAuthSessionState, o as buildStoredAuthSessionIdentity, w as withAdmittedServiceSession } from "./auth-session-Q0B3Nfae.js";
+import { n as ensureDaemonRuntimePaths } from "./daemon-device-id-DEGf1fm6.js";
+import { i as readProcessStartIdentity } from "./process-identity-BRbhGGTM.js";
+import { s as releaseLock, t as acquireLock } from "./lock-CMH9eoS7.js";
+import { o as serviceExecutionHostMethods, r as serveExecutionHost, s as serviceExecutionHostOwnerSchema, t as ExecutionHostError } from "./channel-B1gMWx__.js";
+import { a as resolveBaseUrl } from "./base-url-eck31vC8.js";
+import { i as readDaemonServiceContract } from "./daemon-service-contract-DhEfbzHt.js";
+import { n as resolveRuntimeContext } from "./context-D3kAC8RG.js";
 import { t as createPresenter } from "./presenter-MJ5YgsOT.js";
-import { n as parentExecutionHostChannel } from "./process-channel-CgbduFCz.js";
+import { n as parentExecutionHostChannel } from "./process-channel-BIumgluJ.js";
 import { randomUUID } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { readFile } from "node:fs/promises";
@@ -196,7 +197,7 @@ function runExecutionHost(hostInstanceId) {
 				ownership = verifiedOwnership;
 				session = verified.session;
 				await withAdmittedServiceSession(session, async () => {
-					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-4_VPSImW.js");
+					const { createExecutionHostRuntime, createExecutionHostResources } = await import("./runtime-Du3Az4wt.js");
 					const runtimePaths = await ensureDaemonRuntimePaths();
 					const presenter = createPresenter(await resolveRuntimeContext({ view: "agent" }));
 					runtime = await createExecutionHostRuntime({
@@ -250,4 +251,4 @@ function runExecutionHost(hostInstanceId) {
 //#endregion
 export { runExecutionHost };
 
-//# sourceMappingURL=entry-B19Dcymp.js.map
+//# sourceMappingURL=entry-jvTvDBr-.js.map

package/dist/{entry-B19Dcymp.js.map → entry-jvTvDBr-.js.map}

@@ -1 +1 @@
-{"version":3,"file":"entry-B19Dcymp.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}
+{"version":3,"file":"entry-jvTvDBr-.js","names":[],"sources":["../src/local-service/execution-host/identity.ts","../src/local-service/execution-host/ownership.ts","../src/local-service/execution-host/entry.ts"],"sourcesContent":["import { resolve } from \"node:path\";\nimport type { ServiceExecutionHostIdentity } from \"@openmeld/schemas\";\nimport {\n  buildStoredAuthSessionIdentity,\n  getAuthSessionState,\n} from \"../../config/auth-session\";\nimport { resolveBaseUrl } from \"../../config/base-url\";\nimport { readDaemonServiceContract } from \"../../config/daemon-service-contract\";\nimport { resolveOpenMeldRootDir } from \"../../config/paths\";\nimport { readProcessStartIdentity } from \"../../system/process-identity\";\nimport { ExecutionHostError } from \"./channel\";\n\nexport async function validateExecutionHostIdentity(\n  identity: ServiceExecutionHostIdentity\n) {\n  if (\n    process.ppid !== identity.parentPid ||\n    (process.platform !== \"win32\" &&\n      readProcessStartIdentity(process.ppid) !==\n        identity.parentProcessStartedAt) ||\n    resolve(resolveOpenMeldRootDir()) !== resolve(identity.stateRoot)\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's parent or installation changed.\"\n    );\n  }\n  const [auth, contract, gateway] = await Promise.all([\n    getAuthSessionState(),\n    readDaemonServiceContract(),\n    resolveBaseUrl(),\n  ]);\n  const session = auth.session;\n  if (\n    auth.state !== \"valid\" ||\n    !session ||\n    !contract ||\n    session.user?.id !== identity.ownerUserId ||\n    buildStoredAuthSessionIdentity(session) !== identity.sessionIdentity ||\n    session.authBaseUrl !== identity.authBaseUrl ||\n    gateway !== identity.gatewayBaseUrl ||\n    contract.gatewayUrl !== identity.gatewayBaseUrl ||\n    contract.ownerUserId !== identity.ownerUserId ||\n    contract.deviceId !== identity.deviceId ||\n    contract.lane !== identity.lane ||\n    contract.generation !== identity.serviceContractGeneration\n  ) {\n    throw new ExecutionHostError(\n      \"host.identity_mismatch\",\n      \"The Host's account, device or Service generation changed.\"\n    );\n  }\n  return { session, contract };\n}\n","import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, renameSync, writeFileSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { dirname, join } from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { serviceExecutionHostOwnerSchema } from \"@openmeld/schemas\";\nimport { z } from \"zod/v4\";\nimport { acquireLock, releaseLock } from \"../../config/lock\";\nimport { systemDir } from \"../../config/paths\";\nimport { ExecutionHostError } from \"./channel\";\n\nconst run = promisify(execFile);\nconst WINDOWS_BOOT_EVENT = /^\\d+:\\d+$/;\nconst DECIMAL = /^\\d+$/;\n\nexport async function readExecutionHostBootIdentity(): Promise<string | null> {\n  try {\n    return await readBootIdentity();\n  } catch {\n    // Fresh/quiescent starts do not require reboot evidence. Unknown evidence\n    // can never clear an unsafe previous owner, and is not another boot.\n    console.warn(\n      \"[openmeld.execution_host.boot_unknown] Automatic recovery of unconfirmed work requires operating-system restart evidence.\"\n    );\n    return null;\n  }\n}\n\nasync function readBootIdentity(): Promise<string | null> {\n  if (process.platform === \"linux\") {\n    const id = z\n      .uuid()\n      .parse(\n        (await readFile(\"/proc/sys/kernel/random/boot_id\", \"utf8\")).trim()\n      );\n    return `linux:${id.toLowerCase()}`;\n  }\n  let stdout = \"\";\n  if (process.platform === \"darwin\") {\n    // XNU's immutable boot-session UUID, not its clock-adjustable boot time.\n    ({ stdout } = await run(\n      \"/usr/sbin/sysctl\",\n      [\"-n\", \"kern.bootsessionuuid\"],\n      {\n        timeout: 5000,\n      }\n    ));\n    return `darwin:${z.uuid().parse(stdout.trim()).toLowerCase()}`;\n  }\n  if (process.platform === \"win32\") {\n    ({ stdout } = await run(\n      \"powershell.exe\",\n      [\n        \"-NoProfile\",\n        \"-NonInteractive\",\n        \"-Command\",\n        \"$ErrorActionPreference='Stop'; $e=Get-WinEvent -FilterHashtable @{LogName='System';ProviderName='Microsoft-Windows-Kernel-General';Id=12} -MaxEvents 1; if($null -eq $e.RecordId -or $null -eq $e.TimeCreated){throw 'Boot event unavailable'}; [Console]::WriteLine(([string]$e.RecordId)+':'+([string]$e.TimeCreated.ToUniversalTime().Ticks))\",\n      ],\n      { timeout: 5000, windowsHide: true }\n    ));\n    if (!WINDOWS_BOOT_EVENT.test(stdout.trim())) {\n      throw new Error(\"Invalid Windows boot event\");\n    }\n    return `win32:${stdout.trim()}`;\n  }\n  return null;\n}\n\nfunction confirmsNewBoot(\n  previous: string | null,\n  current: string | null\n): boolean {\n  if (!(previous && current) || previous === current) {\n    return false;\n  }\n  const [priorSource, priorId, priorTime] = previous.split(\":\");\n  const [source, id, time] = current.split(\":\");\n  if (source !== priorSource) {\n    return false;\n  }\n  if (source === \"linux\" || source === \"darwin\") {\n    return (\n      z.uuid().safeParse(id).success && z.uuid().safeParse(priorId).success\n    );\n  }\n  // Kernel-General 12 records OS startup, not EventLog-service restarts or\n  // wall-clock corrections. Require a later retained event in both fields;\n  // missing/cleared/rotated evidence cannot authorize replacing unknown work.\n  if (\n    source !== \"win32\" ||\n    !id ||\n    !time ||\n    !priorId ||\n    !priorTime ||\n    ![id, time, priorId, priorTime].every((value) => DECIMAL.test(value))\n  ) {\n    return false;\n  }\n  return BigInt(id) > BigInt(priorId) && BigInt(time) > BigInt(priorTime);\n}\n\nexport async function acquireExecutionHostOwnership(input: {\n  hostInstanceId: string;\n  ownerUserId: string;\n  deviceId: string;\n  lane: \"prod\" | \"dev-local\" | \"canary\";\n  stateRoot: string;\n  bootIdentity: string | null;\n}) {\n  const lock = await acquireLock({\n    openMeldProfileId: \"service-execution-host\",\n    key: \"process-owner\",\n    pathResolution: { env: { ...process.env, OPENMELD_HOME: input.stateRoot } },\n    meta: {\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n    },\n  });\n  const path = join(\n    systemDir({ env: { OPENMELD_HOME: input.stateRoot } }),\n    \"execution-host-owner.json\"\n  );\n  try {\n    const previous = readOwner(path);\n    if (\n      previous &&\n      !previous.localQuiescent &&\n      !confirmsNewBoot(previous.bootIdentity, input.bootIdentity)\n    ) {\n      throw new ExecutionHostError(\n        \"host.previous_work_unconfirmed\",\n        \"The previous execution host ended before its local work was confirmed stopped. Restart this Computer, then check its connection. If restart evidence is unavailable, inspect the retained Host diagnostics before recovery. Existing results remain saved; no task will be restarted automatically.\"\n      );\n    }\n    let owner = serviceExecutionHostOwnerSchema.parse({\n      schema: \"service-execution-host-owner-v1\",\n      hostInstanceId: input.hostInstanceId,\n      ownerUserId: input.ownerUserId,\n      deviceId: input.deviceId,\n      lane: input.lane,\n      pid: process.pid,\n      bootIdentity: input.bootIdentity,\n      localQuiescent: true,\n    });\n    persist(owner);\n    function persist(next: typeof owner) {\n      mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n      const temporary = `${path}.${randomUUID()}.tmp`;\n      writeFileSync(temporary, JSON.stringify(next), {\n        mode: 0o600,\n        flag: \"wx\",\n      });\n      renameSync(temporary, path);\n    }\n    return {\n      observeLocalQuiescence(quiescent: boolean) {\n        if (owner.localQuiescent === quiescent) {\n          return;\n        }\n        const next = { ...owner, localQuiescent: quiescent };\n        // The unsafe transition is durable before any provider operation. A\n        // failed write refuses that operation rather than weakening the fence.\n        persist(next);\n        owner = next;\n      },\n      release: () => releaseLock(lock),\n    };\n  } catch (error) {\n    await releaseLock(lock);\n    throw error;\n  }\n}\n\nfunction readOwner(path: string) {\n  let raw: string;\n  try {\n    raw = readFileSync(path, \"utf8\");\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n      return null;\n    }\n    throw error;\n  }\n  const parsed = serviceExecutionHostOwnerSchema.safeParse(JSON.parse(raw));\n  if (!parsed.success) {\n    throw new ExecutionHostError(\n      \"host.owner_corrupt\",\n      \"The Host ownership record cannot be verified. Preserve it for diagnostics; automatic replacement is refused.\"\n    );\n  }\n  return parsed.data;\n}\n","import {\n  type ServiceExecutionHostIdentity,\n  serviceExecutionHostMethods,\n} from \"@openmeld/schemas\";\nimport {\n  type StoredAuthSession,\n  withAdmittedServiceSession,\n} from \"../../config/auth-session\";\nimport { resolveRuntimeContext } from \"../../runtime/context\";\nimport { createPresenter } from \"../../runtime/presenter/index\";\nimport { ensureDaemonRuntimePaths } from \"../state/daemon-device-id\";\nimport {\n  ExecutionHostError,\n  type ExecutionHostHandlers,\n  serveExecutionHost,\n} from \"./channel\";\nimport { validateExecutionHostIdentity } from \"./identity\";\nimport {\n  acquireExecutionHostOwnership,\n  readExecutionHostBootIdentity,\n} from \"./ownership\";\nimport { parentExecutionHostChannel } from \"./process-channel\";\n\n// This entry has no public listener and accepts no executable/path override.\n// The inherited pipe, parent incarnation and current Service account are all\n// required before the provider graph or any local runtime state is opened.\nexport function runExecutionHost(hostInstanceId: string): Promise<void> {\n  const channel = parentExecutionHostChannel();\n  const done = Promise.withResolvers<void>();\n  let runtime: Awaited<\n    ReturnType<typeof import(\"./runtime\").createExecutionHostRuntime>\n  > | null = null;\n  let ownership: Awaited<\n    ReturnType<typeof acquireExecutionHostOwnership>\n  > | null = null;\n  let session: StoredAuthSession | null = null;\n  let acceptedIdentity: ServiceExecutionHostIdentity | null = null;\n  let initializing: Promise<void> | null = null;\n  let closing: Promise<void> | null = null;\n  let disconnected = false;\n\n  const close = (): Promise<void> => {\n    if (!closing) {\n      closing = (async () => {\n        try {\n          await initializing;\n          if (runtime && session) {\n            const currentRuntime = runtime;\n            await withAdmittedServiceSession(session, () =>\n              currentRuntime.closeAfterConnectorLoss()\n            );\n          }\n        } finally {\n          await ownership?.release();\n          server.dispose();\n          if (process.connected) {\n            process.disconnect();\n          }\n        }\n      })();\n      closing.then(\n        () => done.resolve(),\n        (error) => done.reject(error)\n      );\n    }\n    return closing;\n  };\n\n  const handlers = {\n    initialize: async (identity: ServiceExecutionHostIdentity) => {\n      if (\n        acceptedIdentity &&\n        JSON.stringify(acceptedIdentity) !== JSON.stringify(identity)\n      ) {\n        throw new ExecutionHostError(\n          \"host.identity_mismatch\",\n          \"This Host is already assigned to a different Service incarnation.\"\n        );\n      }\n      if (!initializing) {\n        acceptedIdentity = identity;\n        initializing = (async () => {\n          const verified = await validateExecutionHostIdentity(identity);\n          if (disconnected) {\n            throw new ExecutionHostError(\n              \"host.disconnected\",\n              \"The supervising Service left before Host initialization.\"\n            );\n          }\n          const verifiedOwnership = await acquireExecutionHostOwnership({\n            ...identity,\n            hostInstanceId,\n            bootIdentity: await readExecutionHostBootIdentity(),\n          });\n          ownership = verifiedOwnership;\n          session = verified.session;\n          await withAdmittedServiceSession(session, async () => {\n            const { createExecutionHostRuntime, createExecutionHostResources } =\n              await import(\"./runtime\");\n            const runtimePaths = await ensureDaemonRuntimePaths();\n            const presenter = createPresenter(\n              await resolveRuntimeContext({ view: \"agent\" })\n            );\n            runtime = await createExecutionHostRuntime({\n              resources: await createExecutionHostResources({\n                runtimePaths,\n                presenter,\n              }),\n              hostInstanceId,\n              identity,\n              runtimePaths,\n              serviceBundleId: verified.contract.bundleId,\n              profileOwnerName: verified.session.user?.name ?? null,\n              presenter,\n              emit: (event) => {\n                if (!disconnected) {\n                  server.emit(event);\n                }\n              },\n              onWorkStateChange: (quiescent) =>\n                verifiedOwnership.observeLocalQuiescence(quiescent),\n            });\n          });\n        })();\n      }\n      await initializing;\n      if (!runtime || disconnected) {\n        throw new ExecutionHostError(\n          \"host.disconnected\",\n          \"The execution Host is not available.\"\n        );\n      }\n      return runtime.snapshot();\n    },\n  } as ExecutionHostHandlers;\n\n  // Each concrete method is still decoded by the shared method table at both\n  // ends; the forwarding bridge cannot select a new account or mutate identity.\n  for (const method of Object.keys(serviceExecutionHostMethods) as Array<\n    keyof ExecutionHostHandlers\n  >) {\n    if (method === \"initialize\") {\n      continue;\n    }\n    const target = handlers as unknown as Record<\n      string,\n      (payload: unknown) => Promise<unknown>\n    >;\n    target[method] = async (payload) => {\n      if (!(runtime && session) || disconnected) {\n        throw new ExecutionHostError(\n          \"host.not_initialized\",\n          \"Initialize this Host through its supervising Service first.\"\n        );\n      }\n      const invoke = runtime.handlers[method] as (value: unknown) => unknown;\n      return await withAdmittedServiceSession(\n        session,\n        async () => await invoke(payload)\n      );\n    };\n  }\n\n  const server = serveExecutionHost({\n    channel,\n    hostInstanceId,\n    handlers,\n    onFailure: (error) => {\n      console.error(\"[openmeld.execution_host.channel_failed]\", error);\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n    onDisconnect: () => {\n      disconnected = true;\n      close().catch(() => undefined);\n    },\n  });\n  return done.promise;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAYA,eAAsB,8BACpB,UACA;CACA,IACE,QAAQ,SAAS,SAAS,aACzB,QAAQ,aAAa,WACpB,yBAAyB,QAAQ,IAAI,MACnC,SAAS,0BACb,QAAQ,uBAAuB,CAAC,MAAM,QAAQ,SAAS,SAAS,GAEhE,MAAM,IAAI,mBACR,0BACA,4CACF;CAEF,MAAM,CAAC,MAAM,UAAU,WAAW,MAAM,QAAQ,IAAI;EAClD,oBAAoB;EACpB,0BAA0B;EAC1B,eAAe;CACjB,CAAC;CACD,MAAM,UAAU,KAAK;CACrB,IACE,KAAK,UAAU,WACf,CAAC,WACD,CAAC,YACD,QAAQ,MAAM,OAAO,SAAS,eAC9B,+BAA+B,OAAO,MAAM,SAAS,mBACrD,QAAQ,gBAAgB,SAAS,eACjC,YAAY,SAAS,kBACrB,SAAS,eAAe,SAAS,kBACjC,SAAS,gBAAgB,SAAS,eAClC,SAAS,aAAa,SAAS,YAC/B,SAAS,SAAS,SAAS,QAC3B,SAAS,eAAe,SAAS,2BAEjC,MAAM,IAAI,mBACR,0BACA,2DACF;CAEF,OAAO;EAAE;EAAS;CAAS;AAC7B;;;ACzCA,MAAM,MAAM,UAAU,QAAQ;AAC9B,MAAM,qBAAqB;AAC3B,MAAM,UAAU;AAEhB,eAAsB,gCAAwD;CAC5E,IAAI;EACF,OAAO,MAAM,iBAAiB;CAChC,QAAQ;EAGN,QAAQ,KACN,2HACF;EACA,OAAO;CACT;AACF;AAEA,eAAe,mBAA2C;CACxD,IAAI,QAAQ,aAAa,SAMvB,OAAO,SALI,EACR,KAAK,CAAC,CACN,OACE,MAAM,SAAS,mCAAmC,MAAM,EAAA,CAAG,KAAK,CAEpD,CAAC,CAAC,YAAY;CAEjC,IAAI,SAAS;CACb,IAAI,QAAQ,aAAa,UAAU;EAEjC,CAAC,CAAE,UAAW,MAAM,IAClB,oBACA,CAAC,MAAM,sBAAsB,GAC7B,EACE,SAAS,IACX,CACF;EACA,OAAO,UAAU,EAAE,KAAK,CAAC,CAAC,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,YAAY;CAC7D;CACA,IAAI,QAAQ,aAAa,SAAS;EAChC,CAAC,CAAE,UAAW,MAAM,IAClB,kBACA;GACE;GACA;GACA;GACA;EACF,GACA;GAAE,SAAS;GAAM,aAAa;EAAK,CACrC;EACA,IAAI,CAAC,mBAAmB,KAAK,OAAO,KAAK,CAAC,GACxC,MAAM,IAAI,MAAM,4BAA4B;EAE9C,OAAO,SAAS,OAAO,KAAK;CAC9B;CACA,OAAO;AACT;AAEA,SAAS,gBACP,UACA,SACS;CACT,IAAI,EAAE,YAAY,YAAY,aAAa,SACzC,OAAO;CAET,MAAM,CAAC,aAAa,SAAS,aAAa,SAAS,MAAM,GAAG;CAC5D,MAAM,CAAC,QAAQ,IAAI,QAAQ,QAAQ,MAAM,GAAG;CAC5C,IAAI,WAAW,aACb,OAAO;CAET,IAAI,WAAW,WAAW,WAAW,UACnC,OACE,EAAE,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;CAMlE,IACE,WAAW,WACX,CAAC,MACD,CAAC,QACD,CAAC,WACD,CAAC,aACD,CAAC;EAAC;EAAI;EAAM;EAAS;CAAS,CAAC,CAAC,OAAO,UAAU,QAAQ,KAAK,KAAK,CAAC,GAEpE,OAAO;CAET,OAAO,OAAO,EAAE,IAAI,OAAO,OAAO,KAAK,OAAO,IAAI,IAAI,OAAO,SAAS;AACxE;AAEA,eAAsB,8BAA8B,OAOjD;CACD,MAAM,OAAO,MAAM,YAAY;EAC7B,mBAAmB;EACnB,KAAK;EACL,gBAAgB,EAAE,KAAK;GAAE,GAAG,QAAQ;GAAK,eAAe,MAAM;EAAU,EAAE;EAC1E,MAAM;GACJ,gBAAgB,MAAM;GACtB,aAAa,MAAM;EACrB;CACF,CAAC;CACD,MAAM,OAAO,KACX,UAAU,EAAE,KAAK,EAAE,eAAe,MAAM,UAAU,EAAE,CAAC,GACrD,2BACF;CACA,IAAI;EACF,MAAM,WAAW,UAAU,IAAI;EAC/B,IACE,YACA,CAAC,SAAS,kBACV,CAAC,gBAAgB,SAAS,cAAc,MAAM,YAAY,GAE1D,MAAM,IAAI,mBACR,kCACA,qSACF;EAEF,IAAI,QAAQ,gCAAgC,MAAM;GAChD,QAAQ;GACR,gBAAgB,MAAM;GACtB,aAAa,MAAM;GACnB,UAAU,MAAM;GAChB,MAAM,MAAM;GACZ,KAAK,QAAQ;GACb,cAAc,MAAM;GACpB,gBAAgB;EAClB,CAAC;EACD,QAAQ,KAAK;EACb,SAAS,QAAQ,MAAoB;GACnC,UAAU,QAAQ,IAAI,GAAG;IAAE,WAAW;IAAM,MAAM;GAAM,CAAC;GACzD,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,EAAE;GAC1C,cAAc,WAAW,KAAK,UAAU,IAAI,GAAG;IAC7C,MAAM;IACN,MAAM;GACR,CAAC;GACD,WAAW,WAAW,IAAI;EAC5B;EACA,OAAO;GACL,uBAAuB,WAAoB;IACzC,IAAI,MAAM,mBAAmB,WAC3B;IAEF,MAAM,OAAO;KAAE,GAAG;KAAO,gBAAgB;IAAU;IAGnD,QAAQ,IAAI;IACZ,QAAQ;GACV;GACA,eAAe,YAAY,IAAI;EACjC;CACF,SAAS,OAAO;EACd,MAAM,YAAY,IAAI;EACtB,MAAM;CACR;AACF;AAEA,SAAS,UAAU,MAAc;CAC/B,IAAI;CACJ,IAAI;EACF,MAAM,aAAa,MAAM,MAAM;CACjC,SAAS,OAAO;EACd,IAAK,MAAgC,SAAS,UAC5C,OAAO;EAET,MAAM;CACR;CACA,MAAM,SAAS,gCAAgC,UAAU,KAAK,MAAM,GAAG,CAAC;CACxE,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,mBACR,sBACA,8GACF;CAEF,OAAO,OAAO;AAChB;;;ACtKA,SAAgB,iBAAiB,gBAAuC;CACtE,MAAM,UAAU,2BAA2B;CAC3C,MAAM,OAAO,QAAQ,cAAoB;CACzC,IAAI,UAEO;CACX,IAAI,YAEO;CACX,IAAI,UAAoC;CACxC,IAAI,mBAAwD;CAC5D,IAAI,eAAqC;CACzC,IAAI,UAAgC;CACpC,IAAI,eAAe;CAEnB,MAAM,cAA6B;EACjC,IAAI,CAAC,SAAS;GACZ,WAAW,YAAY;IACrB,IAAI;KACF,MAAM;KACN,IAAI,WAAW,SAAS;MACtB,MAAM,iBAAiB;MACvB,MAAM,2BAA2B,eAC/B,eAAe,wBAAwB,CACzC;KACF;IACF,UAAU;KACR,MAAM,WAAW,QAAQ;KACzB,OAAO,QAAQ;KACf,IAAI,QAAQ,WACV,QAAQ,WAAW;IAEvB;GACF,EAAA,CAAG;GACH,QAAQ,WACA,KAAK,QAAQ,IAClB,UAAU,KAAK,OAAO,KAAK,CAC9B;EACF;EACA,OAAO;CACT;CAEA,MAAM,WAAW,EACf,YAAY,OAAO,aAA2C;EAC5D,IACE,oBACA,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,QAAQ,GAE5D,MAAM,IAAI,mBACR,0BACA,mEACF;EAEF,IAAI,CAAC,cAAc;GACjB,mBAAmB;GACnB,gBAAgB,YAAY;IAC1B,MAAM,WAAW,MAAM,8BAA8B,QAAQ;IAC7D,IAAI,cACF,MAAM,IAAI,mBACR,qBACA,0DACF;IAEF,MAAM,oBAAoB,MAAM,8BAA8B;KAC5D,GAAG;KACH;KACA,cAAc,MAAM,8BAA8B;IACpD,CAAC;IACD,YAAY;IACZ,UAAU,SAAS;IACnB,MAAM,2BAA2B,SAAS,YAAY;KACpD,MAAM,EAAE,4BAA4B,iCAClC,MAAM,OAAO;KACf,MAAM,eAAe,MAAM,yBAAyB;KACpD,MAAM,YAAY,gBAChB,MAAM,sBAAsB,EAAE,MAAM,QAAQ,CAAC,CAC/C;KACA,UAAU,MAAM,2BAA2B;MACzC,WAAW,MAAM,6BAA6B;OAC5C;OACA;MACF,CAAC;MACD;MACA;MACA;MACA,iBAAiB,SAAS,SAAS;MACnC,kBAAkB,SAAS,QAAQ,MAAM,QAAQ;MACjD;MACA,OAAO,UAAU;OACf,IAAI,CAAC,cACH,OAAO,KAAK,KAAK;MAErB;MACA,oBAAoB,cAClB,kBAAkB,uBAAuB,SAAS;KACtD,CAAC;IACH,CAAC;GACH,EAAA,CAAG;EACL;EACA,MAAM;EACN,IAAI,CAAC,WAAW,cACd,MAAM,IAAI,mBACR,qBACA,sCACF;EAEF,OAAO,QAAQ,SAAS;CAC1B,EACF;CAIA,KAAK,MAAM,UAAU,OAAO,KAAK,2BAA2B,GAEzD;EACD,IAAI,WAAW,cACb;EAEF,MAAM,SAAS;EAIf,OAAO,UAAU,OAAO,YAAY;GAClC,IAAI,EAAE,WAAW,YAAY,cAC3B,MAAM,IAAI,mBACR,wBACA,6DACF;GAEF,MAAM,SAAS,QAAQ,SAAS;GAChC,OAAO,MAAM,2BACX,SACA,YAAY,MAAM,OAAO,OAAO,CAClC;EACF;CACF;CAEA,MAAM,SAAS,mBAAmB;EAChC;EACA;EACA;EACA,YAAY,UAAU;GACpB,QAAQ,MAAM,4CAA4C,KAAK;GAC/D,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;EACA,oBAAoB;GAClB,eAAe;GACf,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;EAC/B;CACF,CAAC;CACD,OAAO,KAAK;AACd"}

package/dist/{installation-inventory-BmZVMUzJ.js → installation-inventory-Bf1SvGVh.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 
-import { ht as skillsDir } from "./lock-iue1J2xy.js";
-import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-CP88BnLy.js";
-import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-B7JOni3p.js";
-import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-DvjOkKPs.js";
+import { H as skillsDir } from "./paths-DSkUuEu3.js";
+import { $ as canManageRegistryAgentSkillTargets, et as detectInstalledSkillsAgents, tt as resolveSkillsAgentRegistry } from "./prepare-provider-runtime-DSKQFj-R.js";
+import { n as resolveSkillsInstallStates, r as ensureLocalSkills, t as resolveSkillInstallStateForTarget } from "./state-ClTXLNB3.js";
+import { T as updateConfiguredSkillsConfig, g as getConfiguredSkillsConfig, y as resolveRuntimeSkillsCustomTargetId } from "./base-url-eck31vC8.js";
 import { stat } from "node:fs/promises";
 //#region src/skills/installation-inventory.ts
 async function collectSkillsReadinessSnapshot() {
@@ -240,4 +240,4 @@ function normalizeInstallRecordForCompare(input) {
 //#endregion
 export { mergeTargetsByDir as a, summarizeSkillState as c, filterTargetsWithInstalledOpenMeldSkills as i, collectSkillsReadinessSnapshot as n, persistDetectedInstallStateFromCheck as o, compareInstallRecords as r, resolveTrackedInstallTargets as s, buildAgentTargets as t };
 
-//# sourceMappingURL=installation-inventory-BmZVMUzJ.js.map
+//# sourceMappingURL=installation-inventory-Bf1SvGVh.js.map

package/dist/{installation-inventory-BmZVMUzJ.js.map → installation-inventory-Bf1SvGVh.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installation-inventory-BmZVMUzJ.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}
+{"version":3,"file":"installation-inventory-Bf1SvGVh.js","names":[],"sources":["../src/skills/installation-inventory.ts"],"sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { skillsDir } from \"../config/paths\";\nimport {\n  getConfiguredSkillsConfig,\n  type RuntimeSkillsConfig,\n  type RuntimeSkillsCustomTarget,\n  type RuntimeSkillsInstallRecord,\n  resolveRuntimeSkillsCustomTargetId,\n  updateConfiguredSkillsConfig,\n} from \"../config/runtime-config\";\nimport {\n  canManageRegistryAgentSkillTargets,\n  detectInstalledSkillsAgents,\n  resolveSkillsAgentRegistry,\n} from \"./agents\";\nimport type { SkillsInstallTarget } from \"./installer\";\nimport {\n  resolveSkillInstallStateForTarget,\n  resolveSkillsInstallStates,\n  type SkillInstallStateResult,\n} from \"./state\";\nimport { ensureLocalSkills, type LocalSkill } from \"./store\";\n\nexport type SkillsReadinessSnapshot = {\n  status: \"up_to_date\" | \"action_required\" | \"no_targets\";\n  targetCount: number;\n  summary: {\n    upToDate: number;\n    outdated: number;\n    missing: number;\n    externalConflict: number;\n  };\n};\n\nexport async function collectSkillsReadinessSnapshot(): Promise<SkillsReadinessSnapshot> {\n  const skillsConfig = await getConfiguredSkillsConfig();\n  const registry = resolveSkillsAgentRegistry(skillsConfig);\n  const installedAgents = await detectInstalledSkillsAgents(registry);\n  const localSkills = await ensureLocalSkills();\n  const detectedAgentTargets = buildAgentTargets(installedAgents, registry);\n  const trackedTargets = await resolveTrackedInstallTargets({\n    skillsConfig,\n    registry,\n    localSkills,\n    onlyOpenMeldInstalledTargets: false,\n  });\n  const checkTargets = mergeTargetsByDir({\n    primary: detectedAgentTargets,\n    secondary: trackedTargets,\n  });\n  const states = await resolveSkillsInstallStates({\n    skills: localSkills,\n    targets: checkTargets,\n  });\n  await persistDetectedInstallStateFromCheck({ states });\n  const summary = summarizeSkillState(states);\n  const hasIssues =\n    summary.outdated > 0 || summary.missing > 0 || summary.externalConflict > 0;\n  let status: SkillsReadinessSnapshot[\"status\"] = \"up_to_date\";\n  if (checkTargets.length === 0) {\n    status = \"no_targets\";\n  } else if (hasIssues) {\n    status = \"action_required\";\n  }\n  return {\n    status,\n    targetCount: checkTargets.length,\n    summary,\n  };\n}\n\nexport function buildAgentTargets(\n  agents: string[],\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>\n): SkillsInstallTarget[] {\n  return agents.flatMap((agentName) => {\n    const config = registry[agentName];\n    if (!config?.globalSkillsDir || config.skillsInstallable !== true) {\n      return [];\n    }\n    return [\n      {\n        id: agentName,\n        dir: config.globalSkillsDir,\n        type: \"agent\" as const,\n      },\n    ];\n  });\n}\n\nfunction isLikelyCustomTargetId(value: string): boolean {\n  return value.startsWith(\"custom-\");\n}\n\nexport function resolveTrackedInstallTargets(input: {\n  skillsConfig: RuntimeSkillsConfig | null;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const installs = input.skillsConfig?.installs ?? [];\n  const customTargets = input.skillsConfig?.customTargets ?? [];\n  const customTargetByDir = buildCustomTargetByDir(customTargets);\n  const byTargetDir = new Map<string, SkillsInstallTarget>();\n  seedTrackedTargetsFromCustomTargets({\n    byTargetDir,\n    customTargetByDir,\n  });\n  seedTrackedTargetsFromInstallRecords({\n    byTargetDir,\n    installs,\n    registry: input.registry,\n    customTargetByDir,\n  });\n\n  const candidates = sortTrackedTargets([...byTargetDir.values()]);\n  const allowRegistryDefaults = canManageRegistryAgentSkillTargets();\n  const laneSafeCandidates = allowRegistryDefaults\n    ? candidates\n    : candidates.filter(\n        (target) =>\n          target.type === \"custom\" ||\n          input.registry[target.id]?.globalSkillsDirSource === \"config-override\"\n      );\n  return filterTrackedTargetsByState({\n    candidates: laneSafeCandidates,\n    localSkills: input.localSkills,\n    onlyOpenMeldInstalledTargets: input.onlyOpenMeldInstalledTargets,\n  });\n}\n\nfunction buildCustomTargetByDir(\n  customTargets: RuntimeSkillsCustomTarget[]\n): Map<string, RuntimeSkillsCustomTarget> {\n  const customTargetByDir = new Map<string, RuntimeSkillsCustomTarget>();\n  for (const customTarget of customTargets) {\n    const id = resolveRuntimeSkillsCustomTargetId({\n      dir: customTarget.dir,\n      ...(customTarget.id ? { id: customTarget.id } : {}),\n    });\n    customTargetByDir.set(customTarget.dir, {\n      id,\n      name: customTarget.name,\n      dir: customTarget.dir,\n    });\n  }\n  return customTargetByDir;\n}\n\nfunction seedTrackedTargetsFromCustomTargets(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const customTarget of input.customTargetByDir.values()) {\n    input.byTargetDir.set(customTarget.dir, {\n      id:\n        customTarget.id ??\n        resolveRuntimeSkillsCustomTargetId({ dir: customTarget.dir }),\n      dir: customTarget.dir,\n      type: \"custom\",\n    });\n  }\n}\n\nfunction seedTrackedTargetsFromInstallRecords(input: {\n  byTargetDir: Map<string, SkillsInstallTarget>;\n  installs: RuntimeSkillsInstallRecord[];\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): void {\n  for (const install of input.installs) {\n    const trackedTarget = buildTrackedTargetFromInstallRecord({\n      install,\n      registry: input.registry,\n      customTargetByDir: input.customTargetByDir,\n    });\n    input.byTargetDir.set(install.targetDir, trackedTarget);\n  }\n}\n\nfunction buildTrackedTargetFromInstallRecord(input: {\n  install: RuntimeSkillsInstallRecord;\n  registry: ReturnType<typeof resolveSkillsAgentRegistry>;\n  customTargetByDir: Map<string, RuntimeSkillsCustomTarget>;\n}): SkillsInstallTarget {\n  const knownAgentDir = input.registry[input.install.targetId]?.globalSkillsDir;\n  const targetType: SkillsInstallTarget[\"type\"] =\n    knownAgentDir && knownAgentDir === input.install.targetDir\n      ? \"agent\"\n      : \"custom\";\n  if (targetType === \"agent\") {\n    return {\n      id: input.install.targetId,\n      dir: input.install.targetDir,\n      type: \"agent\",\n    };\n  }\n\n  const customTarget = input.customTargetByDir.get(input.install.targetDir);\n  const fallbackCustomId = isLikelyCustomTargetId(input.install.targetId)\n    ? input.install.targetId\n    : undefined;\n  const resolvedCustomId = customTarget?.id ?? fallbackCustomId;\n  return {\n    id: resolveRuntimeSkillsCustomTargetId({\n      dir: input.install.targetDir,\n      ...(resolvedCustomId ? { id: resolvedCustomId } : {}),\n    }),\n    dir: input.install.targetDir,\n    type: \"custom\",\n  };\n}\n\nfunction sortTrackedTargets(\n  targets: SkillsInstallTarget[]\n): SkillsInstallTarget[] {\n  return [...targets].sort((a, b) =>\n    `${a.id}:${a.dir}`.localeCompare(`${b.id}:${b.dir}`)\n  );\n}\n\nexport function mergeTargetsByDir(input: {\n  primary: SkillsInstallTarget[];\n  secondary: SkillsInstallTarget[];\n}): SkillsInstallTarget[] {\n  const byDir = new Map<string, SkillsInstallTarget>();\n  for (const target of input.secondary) {\n    byDir.set(target.dir, target);\n  }\n  for (const target of input.primary) {\n    byDir.set(target.dir, target);\n  }\n  return sortTrackedTargets([...byDir.values()]);\n}\n\nasync function filterInstalledTrackedTargets(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const installedOnly: SkillsInstallTarget[] = [];\n  for (const candidate of input.candidates) {\n    const hasInstalledOpenMeldSkill = await targetHasInstalledOpenMeldSkill({\n      target: candidate,\n      localSkills: input.localSkills,\n    });\n    if (!hasInstalledOpenMeldSkill) {\n      continue;\n    }\n    installedOnly.push(candidate);\n  }\n  return installedOnly;\n}\n\nexport async function filterTargetsWithInstalledOpenMeldSkills(input: {\n  targets: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.targets);\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterTrackedTargetsByState(input: {\n  candidates: SkillsInstallTarget[];\n  localSkills: LocalSkill[];\n  onlyOpenMeldInstalledTargets: boolean;\n}): Promise<SkillsInstallTarget[]> {\n  const existingTargets = await filterExistingTargetDirs(input.candidates);\n  if (!input.onlyOpenMeldInstalledTargets) {\n    return existingTargets;\n  }\n\n  return filterInstalledTrackedTargets({\n    candidates: existingTargets,\n    localSkills: input.localSkills,\n  });\n}\n\nasync function filterExistingTargetDirs(\n  candidates: SkillsInstallTarget[]\n): Promise<SkillsInstallTarget[]> {\n  const existing: SkillsInstallTarget[] = [];\n  for (const candidate of candidates) {\n    const targetDirStats = await stat(candidate.dir).catch(() => null);\n    if (!targetDirStats?.isDirectory()) {\n      continue;\n    }\n    existing.push(candidate);\n  }\n  return existing;\n}\n\nexport function summarizeSkillState(states: SkillInstallStateResult[]): {\n  upToDate: number;\n  outdated: number;\n  missing: number;\n  externalConflict: number;\n} {\n  return {\n    upToDate: states.filter((state) => state.state === \"up_to_date\").length,\n    outdated: states.filter((state) => state.state === \"outdated\").length,\n    missing: states.filter((state) => state.state === \"missing\").length,\n    externalConflict: states.filter(\n      (state) => state.state === \"external_conflict\"\n    ).length,\n  };\n}\n\nasync function targetHasInstalledOpenMeldSkill(input: {\n  target: SkillsInstallTarget;\n  localSkills: LocalSkill[];\n}): Promise<boolean> {\n  const targetDirStats = await stat(input.target.dir).catch(() => null);\n  if (!targetDirStats?.isDirectory()) {\n    return false;\n  }\n\n  for (const skill of input.localSkills) {\n    const state = await resolveSkillInstallStateForTarget({\n      skill,\n      target: input.target,\n    });\n    if (state.state === \"up_to_date\" || state.state === \"outdated\") {\n      return true;\n    }\n  }\n\n  return false;\n}\n\nexport async function persistDetectedInstallStateFromCheck(input: {\n  states: SkillInstallStateResult[];\n}): Promise<void> {\n  const discoveredByTargetDir = new Map<string, SkillInstallStateResult[]>();\n  for (const state of input.states) {\n    if (!(state.state === \"up_to_date\" || state.state === \"outdated\")) {\n      continue;\n    }\n    const list = discoveredByTargetDir.get(state.targetDir) ?? [];\n    list.push(state);\n    discoveredByTargetDir.set(state.targetDir, list);\n  }\n\n  if (discoveredByTargetDir.size === 0) {\n    return;\n  }\n\n  await updateConfiguredSkillsConfig((currentSkillsConfig) => {\n    const byTargetDir = new Map<string, RuntimeSkillsInstallRecord>();\n    for (const record of currentSkillsConfig?.installs ?? []) {\n      byTargetDir.set(record.targetDir, record);\n    }\n\n    const now = new Date().toISOString();\n    for (const [targetDir, group] of discoveredByTargetDir) {\n      const first = group[0];\n      if (!first) {\n        continue;\n      }\n      const mode: RuntimeSkillsInstallRecord[\"mode\"] = group.some(\n        (state) => state.targetMode === \"copy\"\n      )\n        ? \"copy\"\n        : \"symlink\";\n      const skillIds = Array.from(\n        new Set(group.map((state) => state.skillId))\n      ).sort((a, b) => a.localeCompare(b));\n\n      byTargetDir.set(targetDir, {\n        targetId: first.targetId,\n        targetDir,\n        mode,\n        status: \"installed\",\n        skillIds,\n        updatedAt: now,\n      });\n    }\n\n    const nextInstalls = [...byTargetDir.values()].sort(compareInstallRecords);\n    const previousInstalls = [...(currentSkillsConfig?.installs ?? [])]\n      .sort(compareInstallRecords)\n      .map(normalizeInstallRecordForCompare);\n    const nextComparable = nextInstalls.map(normalizeInstallRecordForCompare);\n    if (JSON.stringify(previousInstalls) === JSON.stringify(nextComparable)) {\n      return currentSkillsConfig;\n    }\n\n    return {\n      storeDir: currentSkillsConfig?.storeDir ?? skillsDir(),\n      ...(currentSkillsConfig?.agents\n        ? { agents: currentSkillsConfig.agents }\n        : {}),\n      ...(currentSkillsConfig?.customTargets\n        ? { customTargets: currentSkillsConfig.customTargets }\n        : {}),\n      installs: nextInstalls,\n    };\n  });\n}\n\nexport function compareInstallRecords(\n  left: RuntimeSkillsInstallRecord,\n  right: RuntimeSkillsInstallRecord\n): number {\n  const byTargetId = left.targetId.localeCompare(right.targetId);\n  if (byTargetId !== 0) {\n    return byTargetId;\n  }\n  return left.targetDir.localeCompare(right.targetDir);\n}\n\nfunction normalizeInstallRecordForCompare(\n  input: RuntimeSkillsInstallRecord\n): Omit<RuntimeSkillsInstallRecord, \"updatedAt\"> {\n  return {\n    targetId: input.targetId,\n    targetDir: input.targetDir,\n    mode: input.mode,\n    status: input.status,\n    skillIds: [...input.skillIds].sort((a, b) => a.localeCompare(b)),\n    ...(input.reason ? { reason: input.reason } : {}),\n  };\n}\n"],"mappings":";;;;;;;;AAkCA,eAAsB,iCAAmE;CACvF,MAAM,eAAe,MAAM,0BAA0B;CACrD,MAAM,WAAW,2BAA2B,YAAY;CACxD,MAAM,kBAAkB,MAAM,4BAA4B,QAAQ;CAClE,MAAM,cAAc,MAAM,kBAAkB;CAQ5C,MAAM,eAAe,kBAAkB;EACrC,SAR2B,kBAAkB,iBAAiB,QAQlC;EAC5B,WAAW,MARgB,6BAA6B;GACxD;GACA;GACA;GACA,8BAA8B;EAChC,CAAC;CAID,CAAC;CACD,MAAM,SAAS,MAAM,2BAA2B;EAC9C,QAAQ;EACR,SAAS;CACX,CAAC;CACD,MAAM,qCAAqC,EAAE,OAAO,CAAC;CACrD,MAAM,UAAU,oBAAoB,MAAM;CAC1C,MAAM,YACJ,QAAQ,WAAW,KAAK,QAAQ,UAAU,KAAK,QAAQ,mBAAmB;CAC5E,IAAI,SAA4C;CAChD,IAAI,aAAa,WAAW,GAC1B,SAAS;MACJ,IAAI,WACT,SAAS;CAEX,OAAO;EACL;EACA,aAAa,aAAa;EAC1B;CACF;AACF;AAEA,SAAgB,kBACd,QACA,UACuB;CACvB,OAAO,OAAO,SAAS,cAAc;EACnC,MAAM,SAAS,SAAS;EACxB,IAAI,CAAC,QAAQ,mBAAmB,OAAO,sBAAsB,MAC3D,OAAO,CAAC;EAEV,OAAO,CACL;GACE,IAAI;GACJ,KAAK,OAAO;GACZ,MAAM;EACR,CACF;CACF,CAAC;AACH;AAEA,SAAS,uBAAuB,OAAwB;CACtD,OAAO,MAAM,WAAW,SAAS;AACnC;AAEA,SAAgB,6BAA6B,OAKV;CACjC,MAAM,WAAW,MAAM,cAAc,YAAY,CAAC;CAElD,MAAM,oBAAoB,uBADJ,MAAM,cAAc,iBAAiB,CAAC,CACE;CAC9D,MAAM,8BAAc,IAAI,IAAiC;CACzD,oCAAoC;EAClC;EACA;CACF,CAAC;CACD,qCAAqC;EACnC;EACA;EACA,UAAU,MAAM;EAChB;CACF,CAAC;CAED,MAAM,aAAa,mBAAmB,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC;CAS/D,OAAO,4BAA4B;EACjC,YAT4B,mCACiB,IAC3C,aACA,WAAW,QACR,WACC,OAAO,SAAS,YAChB,MAAM,SAAS,OAAO,GAAG,EAAE,0BAA0B,iBACzD;EAGF,aAAa,MAAM;EACnB,8BAA8B,MAAM;CACtC,CAAC;AACH;AAEA,SAAS,uBACP,eACwC;CACxC,MAAM,oCAAoB,IAAI,IAAuC;CACrE,KAAK,MAAM,gBAAgB,eAAe;EACxC,MAAM,KAAK,mCAAmC;GAC5C,KAAK,aAAa;GAClB,GAAI,aAAa,KAAK,EAAE,IAAI,aAAa,GAAG,IAAI,CAAC;EACnD,CAAC;EACD,kBAAkB,IAAI,aAAa,KAAK;GACtC;GACA,MAAM,aAAa;GACnB,KAAK,aAAa;EACpB,CAAC;CACH;CACA,OAAO;AACT;AAEA,SAAS,oCAAoC,OAGpC;CACP,KAAK,MAAM,gBAAgB,MAAM,kBAAkB,OAAO,GACxD,MAAM,YAAY,IAAI,aAAa,KAAK;EACtC,IACE,aAAa,MACb,mCAAmC,EAAE,KAAK,aAAa,IAAI,CAAC;EAC9D,KAAK,aAAa;EAClB,MAAM;CACR,CAAC;AAEL;AAEA,SAAS,qCAAqC,OAKrC;CACP,KAAK,MAAM,WAAW,MAAM,UAAU;EACpC,MAAM,gBAAgB,oCAAoC;GACxD;GACA,UAAU,MAAM;GAChB,mBAAmB,MAAM;EAC3B,CAAC;EACD,MAAM,YAAY,IAAI,QAAQ,WAAW,aAAa;CACxD;AACF;AAEA,SAAS,oCAAoC,OAIrB;CACtB,MAAM,gBAAgB,MAAM,SAAS,MAAM,QAAQ,SAAS,EAAE;CAK9D,KAHE,iBAAiB,kBAAkB,MAAM,QAAQ,YAC7C,UACA,cACa,SACjB,OAAO;EACL,IAAI,MAAM,QAAQ;EAClB,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;CAGF,MAAM,eAAe,MAAM,kBAAkB,IAAI,MAAM,QAAQ,SAAS;CACxE,MAAM,mBAAmB,uBAAuB,MAAM,QAAQ,QAAQ,IAClE,MAAM,QAAQ,WACd,KAAA;CACJ,MAAM,mBAAmB,cAAc,MAAM;CAC7C,OAAO;EACL,IAAI,mCAAmC;GACrC,KAAK,MAAM,QAAQ;GACnB,GAAI,mBAAmB,EAAE,IAAI,iBAAiB,IAAI,CAAC;EACrD,CAAC;EACD,KAAK,MAAM,QAAQ;EACnB,MAAM;CACR;AACF;AAEA,SAAS,mBACP,SACuB;CACvB,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,GAAG,MAC3B,GAAG,EAAE,GAAG,GAAG,EAAE,MAAM,cAAc,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,CACrD;AACF;AAEA,SAAgB,kBAAkB,OAGR;CACxB,MAAM,wBAAQ,IAAI,IAAiC;CACnD,KAAK,MAAM,UAAU,MAAM,WACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,KAAK,MAAM,UAAU,MAAM,SACzB,MAAM,IAAI,OAAO,KAAK,MAAM;CAE9B,OAAO,mBAAmB,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC;AAC/C;AAEA,eAAe,8BAA8B,OAGV;CACjC,MAAM,gBAAuC,CAAC;CAC9C,KAAK,MAAM,aAAa,MAAM,YAAY;EAKxC,IAAI,CAAC,MAJmC,gCAAgC;GACtE,QAAQ;GACR,aAAa,MAAM;EACrB,CAAC,GAEC;EAEF,cAAc,KAAK,SAAS;CAC9B;CACA,OAAO;AACT;AAEA,eAAsB,yCAAyC,OAG5B;CAEjC,OAAO,8BAA8B;EACnC,YAAY,MAFgB,yBAAyB,MAAM,OAAO;EAGlE,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,4BAA4B,OAIR;CACjC,MAAM,kBAAkB,MAAM,yBAAyB,MAAM,UAAU;CACvE,IAAI,CAAC,MAAM,8BACT,OAAO;CAGT,OAAO,8BAA8B;EACnC,YAAY;EACZ,aAAa,MAAM;CACrB,CAAC;AACH;AAEA,eAAe,yBACb,YACgC;CAChC,MAAM,WAAkC,CAAC;CACzC,KAAK,MAAM,aAAa,YAAY;EAElC,IAAI,EAAC,MADwB,KAAK,UAAU,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC5C,YAAY,GAC/B;EAEF,SAAS,KAAK,SAAS;CACzB;CACA,OAAO;AACT;AAEA,SAAgB,oBAAoB,QAKlC;CACA,OAAO;EACL,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,YAAY,CAAC,CAAC;EACjE,UAAU,OAAO,QAAQ,UAAU,MAAM,UAAU,UAAU,CAAC,CAAC;EAC/D,SAAS,OAAO,QAAQ,UAAU,MAAM,UAAU,SAAS,CAAC,CAAC;EAC7D,kBAAkB,OAAO,QACtB,UAAU,MAAM,UAAU,mBAC7B,CAAC,CAAC;CACJ;AACF;AAEA,eAAe,gCAAgC,OAG1B;CAEnB,IAAI,EAAC,MADwB,KAAK,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,IAAI,EAAA,EAC/C,YAAY,GAC/B,OAAO;CAGT,KAAK,MAAM,SAAS,MAAM,aAAa;EACrC,MAAM,QAAQ,MAAM,kCAAkC;GACpD;GACA,QAAQ,MAAM;EAChB,CAAC;EACD,IAAI,MAAM,UAAU,gBAAgB,MAAM,UAAU,YAClD,OAAO;CAEX;CAEA,OAAO;AACT;AAEA,eAAsB,qCAAqC,OAEzC;CAChB,MAAM,wCAAwB,IAAI,IAAuC;CACzE,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,IAAI,EAAE,MAAM,UAAU,gBAAgB,MAAM,UAAU,aACpD;EAEF,MAAM,OAAO,sBAAsB,IAAI,MAAM,SAAS,KAAK,CAAC;EAC5D,KAAK,KAAK,KAAK;EACf,sBAAsB,IAAI,MAAM,WAAW,IAAI;CACjD;CAEA,IAAI,sBAAsB,SAAS,GACjC;CAGF,MAAM,8BAA8B,wBAAwB;EAC1D,MAAM,8BAAc,IAAI,IAAwC;EAChE,KAAK,MAAM,UAAU,qBAAqB,YAAY,CAAC,GACrD,YAAY,IAAI,OAAO,WAAW,MAAM;EAG1C,MAAM,uBAAM,IAAI,KAAK,EAAA,CAAE,YAAY;EACnC,KAAK,MAAM,CAAC,WAAW,UAAU,uBAAuB;GACtD,MAAM,QAAQ,MAAM;GACpB,IAAI,CAAC,OACH;GAEF,MAAM,OAA2C,MAAM,MACpD,UAAU,MAAM,eAAe,MAClC,IACI,SACA;GACJ,MAAM,WAAW,MAAM,KACrB,IAAI,IAAI,MAAM,KAAK,UAAU,MAAM,OAAO,CAAC,CAC7C,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;GAEnC,YAAY,IAAI,WAAW;IACzB,UAAU,MAAM;IAChB;IACA;IACA,QAAQ;IACR;IACA,WAAW;GACb,CAAC;EACH;EAEA,MAAM,eAAe,CAAC,GAAG,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,qBAAqB;EACzE,MAAM,mBAAmB,CAAC,GAAI,qBAAqB,YAAY,CAAC,CAAE,CAAC,CAChE,KAAK,qBAAqB,CAAC,CAC3B,IAAI,gCAAgC;EACvC,MAAM,iBAAiB,aAAa,IAAI,gCAAgC;EACxE,IAAI,KAAK,UAAU,gBAAgB,MAAM,KAAK,UAAU,cAAc,GACpE,OAAO;EAGT,OAAO;GACL,UAAU,qBAAqB,YAAY,UAAU;GACrD,GAAI,qBAAqB,SACrB,EAAE,QAAQ,oBAAoB,OAAO,IACrC,CAAC;GACL,GAAI,qBAAqB,gBACrB,EAAE,eAAe,oBAAoB,cAAc,IACnD,CAAC;GACL,UAAU;EACZ;CACF,CAAC;AACH;AAEA,SAAgB,sBACd,MACA,OACQ;CACR,MAAM,aAAa,KAAK,SAAS,cAAc,MAAM,QAAQ;CAC7D,IAAI,eAAe,GACjB,OAAO;CAET,OAAO,KAAK,UAAU,cAAc,MAAM,SAAS;AACrD;AAEA,SAAS,iCACP,OAC+C;CAC/C,OAAO;EACL,UAAU,MAAM;EAChB,WAAW,MAAM;EACjB,MAAM,MAAM;EACZ,QAAQ,MAAM;EACd,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,CAAC;EAC/D,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;CACjD;AACF"}

package/dist/{installer-DAZpeNXo.js → installer-IVAr1ZD-.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-B7JOni3p.js";
+import { c as replaceSkillDirectory, f as withSkillsInstallLock, o as writeOpenMeldSkillMarker, s as recoverSkillReplacement, t as resolveSkillInstallStateForTarget } from "./state-ClTXLNB3.js";
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { cp, mkdir, readFile, realpath, symlink } from "node:fs/promises";
 import process from "node:process";
@@ -122,4 +122,4 @@ async function tryCreateSymlink(input) {
 //#endregion
 export { installSkillsToTargets as t };
 
-//# sourceMappingURL=installer-DAZpeNXo.js.map
+//# sourceMappingURL=installer-IVAr1ZD-.js.map

package/dist/{installer-DAZpeNXo.js.map → installer-IVAr1ZD-.js.map}

@@ -1 +1 @@
-{"version":3,"file":"installer-DAZpeNXo.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}
+{"version":3,"file":"installer-IVAr1ZD-.js","names":[],"sources":["../src/skills/installer.ts"],"sourcesContent":["import { cp, mkdir, readFile, realpath, symlink } from \"node:fs/promises\";\nimport { dirname, isAbsolute, join, relative, resolve } from \"node:path\";\nimport process from \"node:process\";\nimport { withSkillsInstallLock } from \"./install-lock\";\n\n// biome-ignore lint/performance/noBarrelFile: Keep the existing installer lock API while the source store shares its owner.\nexport { withSkillsInstallLock } from \"./install-lock\";\n\nimport {\n  recoverSkillReplacement,\n  replaceSkillDirectory,\n} from \"./replace-directory\";\nimport type { SkillInstallStateResult } from \"./state\";\nimport { resolveSkillInstallStateForTarget } from \"./state\";\nimport type { LocalSkill } from \"./store\";\nimport { writeOpenMeldSkillMarker } from \"./store\";\n\nexport type SkillsInstallMode = \"symlink\" | \"copy\" | \"unknown\";\nexport type SkillsInstallStatus = \"installed\" | \"skipped\" | \"failed\";\n\nexport type SkillsInstallTarget = {\n  id: string;\n  dir: string;\n  type: \"agent\" | \"custom\";\n};\n\nexport type SkillsInstallResult = {\n  targetId: string;\n  targetDir: string;\n  targetType: \"agent\" | \"custom\";\n  skillId: string;\n  status: SkillsInstallStatus;\n  mode: SkillsInstallMode;\n  degraded: boolean;\n  reason?: string;\n};\n\nexport function installSkillsToTargets(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  return withSkillsInstallLock(() => installSkillsToTargetsLocked(input));\n}\n\nasync function installSkillsToTargetsLocked(input: {\n  skills: LocalSkill[];\n  targets: SkillsInstallTarget[];\n}): Promise<SkillsInstallResult[]> {\n  const results: SkillsInstallResult[] = [];\n\n  for (const target of input.targets) {\n    for (const skill of input.skills) {\n      const result = await installOneSkillToTarget({\n        skill,\n        target,\n      });\n      results.push(result);\n    }\n  }\n\n  return results;\n}\n\nasync function installOneSkillToTarget(input: {\n  skill: LocalSkill;\n  target: SkillsInstallTarget;\n}): Promise<SkillsInstallResult> {\n  const targetDir = input.target.dir;\n  const failInstall = (reason: string): SkillsInstallResult => ({\n    targetId: input.target.id,\n    targetDir,\n    targetType: input.target.type,\n    skillId: input.skill.id,\n    status: \"failed\",\n    mode: \"unknown\",\n    degraded: false,\n    reason,\n  });\n\n  if (!isAbsolute(targetDir)) {\n    return failInstall(\"target dir must be an absolute path\");\n  }\n\n  const skillId = input.skill.id;\n  if (\n    skillId.trim().length === 0 ||\n    isAbsolute(skillId) ||\n    skillId === \".\" ||\n    skillId === \"..\" ||\n    skillId.includes(\"/\") ||\n    skillId.includes(\"\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const resolvedTargetDir = resolve(targetDir);\n  const resolvedSkillDir = resolve(resolvedTargetDir, skillId);\n  const skillRelativePath = relative(resolvedTargetDir, resolvedSkillDir);\n  if (\n    skillRelativePath === \"..\" ||\n    skillRelativePath.startsWith(\"../\") ||\n    skillRelativePath.startsWith(\"..\\\\\")\n  ) {\n    return failInstall(\"skill id would escape target dir\");\n  }\n\n  const skillTargetDir = resolvedSkillDir;\n\n  await mkdir(targetDir, { recursive: true });\n  await recoverSkillReplacement(skillTargetDir);\n  const state = await resolveSkillInstallStateForTarget({\n    skill: input.skill,\n    target: input.target,\n  });\n  if (state.state === \"external_conflict\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  if (state.state === \"up_to_date\") {\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"skipped\",\n      mode: resolveSkippedInstallMode(state),\n      degraded: false,\n      reason: state.reason,\n    };\n  }\n\n  const installation: { mode: SkillsInstallMode } = { mode: \"symlink\" };\n  try {\n    await readFile(join(input.skill.absolutePath, \"SKILL.md\"), \"utf8\");\n    await replaceSkillDirectory(skillTargetDir, async (stagedDir) => {\n      const symlinked = await tryCreateSymlink({\n        sourceDir: input.skill.absolutePath,\n        targetDir: stagedDir,\n      });\n      if (symlinked) {\n        return;\n      }\n      installation.mode = \"copy\";\n      await cp(input.skill.absolutePath, stagedDir, {\n        recursive: true,\n        errorOnExist: true,\n        force: false,\n      });\n      await writeOpenMeldSkillMarker({\n        skillDir: stagedDir,\n        skillId: input.skill.id,\n        mode: \"copy\",\n        ...(input.skill.contentHash\n          ? { contentHash: input.skill.contentHash }\n          : {}),\n        ...(input.skill.version ? { version: input.skill.version } : {}),\n      });\n    });\n    return {\n      targetId: input.target.id,\n      targetDir,\n      targetType: input.target.type,\n      skillId: input.skill.id,\n      status: \"installed\",\n      mode: installation.mode,\n      degraded: installation.mode === \"copy\",\n      ...(installation.mode === \"copy\"\n        ? { reason: \"symlink failed; fell back to copy\" }\n        : {}),\n    };\n  } catch (error) {\n    return failInstall(\n      error instanceof Error\n        ? error.message\n        : \"failed to install skill to target\"\n    );\n  }\n}\n\nfunction resolveSkippedInstallMode(\n  state: SkillInstallStateResult\n): SkillsInstallMode {\n  if (state.targetMode === \"copy\") {\n    return \"copy\";\n  }\n  if (state.targetMode === \"symlink\") {\n    return \"symlink\";\n  }\n  return \"unknown\";\n}\n\nasync function tryCreateSymlink(input: {\n  sourceDir: string;\n  targetDir: string;\n}): Promise<boolean> {\n  try {\n    await mkdir(dirname(input.targetDir), { recursive: true });\n\n    const targetParentDir = dirname(input.targetDir);\n    const resolvedTargetParentDir = await realpath(targetParentDir).catch(\n      () => targetParentDir\n    );\n    const resolvedSourceDir = await realpath(input.sourceDir).catch(\n      () => input.sourceDir\n    );\n    const relativeTarget = relative(resolvedTargetParentDir, resolvedSourceDir);\n    await symlink(\n      process.platform === \"win32\" ? resolvedSourceDir : relativeTarget,\n      input.targetDir,\n      process.platform === \"win32\" ? \"junction\" : undefined\n    );\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;;;;;AAqCA,SAAgB,uBAAuB,OAGJ;CACjC,OAAO,4BAA4B,6BAA6B,KAAK,CAAC;AACxE;AAEA,eAAe,6BAA6B,OAGT;CACjC,MAAM,UAAiC,CAAC;CAExC,KAAK,MAAM,UAAU,MAAM,SACzB,KAAK,MAAM,SAAS,MAAM,QAAQ;EAChC,MAAM,SAAS,MAAM,wBAAwB;GAC3C;GACA;EACF,CAAC;EACD,QAAQ,KAAK,MAAM;CACrB;CAGF,OAAO;AACT;AAEA,eAAe,wBAAwB,OAGN;CAC/B,MAAM,YAAY,MAAM,OAAO;CAC/B,MAAM,eAAe,YAAyC;EAC5D,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM;EACN,UAAU;EACV;CACF;CAEA,IAAI,CAAC,WAAW,SAAS,GACvB,OAAO,YAAY,qCAAqC;CAG1D,MAAM,UAAU,MAAM,MAAM;CAC5B,IACE,QAAQ,KAAK,CAAC,CAAC,WAAW,KAC1B,WAAW,OAAO,KAClB,YAAY,OACZ,YAAY,QACZ,QAAQ,SAAS,GAAG,KACpB,QAAQ,SAAS,IAAI,GAErB,OAAO,YAAY,kCAAkC;CAGvD,MAAM,oBAAoB,QAAQ,SAAS;CAC3C,MAAM,mBAAmB,QAAQ,mBAAmB,OAAO;CAC3D,MAAM,oBAAoB,SAAS,mBAAmB,gBAAgB;CACtE,IACE,sBAAsB,QACtB,kBAAkB,WAAW,KAAK,KAClC,kBAAkB,WAAW,MAAM,GAEnC,OAAO,YAAY,kCAAkC;CAGvD,MAAM,iBAAiB;CAEvB,MAAM,MAAM,WAAW,EAAE,WAAW,KAAK,CAAC;CAC1C,MAAM,wBAAwB,cAAc;CAC5C,MAAM,QAAQ,MAAM,kCAAkC;EACpD,OAAO,MAAM;EACb,QAAQ,MAAM;CAChB,CAAC;CACD,IAAI,MAAM,UAAU,qBAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,IAAI,MAAM,UAAU,cAClB,OAAO;EACL,UAAU,MAAM,OAAO;EACvB;EACA,YAAY,MAAM,OAAO;EACzB,SAAS,MAAM,MAAM;EACrB,QAAQ;EACR,MAAM,0BAA0B,KAAK;EACrC,UAAU;EACV,QAAQ,MAAM;CAChB;CAGF,MAAM,eAA4C,EAAE,MAAM,UAAU;CACpE,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,MAAM,cAAc,UAAU,GAAG,MAAM;EACjE,MAAM,sBAAsB,gBAAgB,OAAO,cAAc;GAK/D,IAAI,MAJoB,iBAAiB;IACvC,WAAW,MAAM,MAAM;IACvB,WAAW;GACb,CAAC,GAEC;GAEF,aAAa,OAAO;GACpB,MAAM,GAAG,MAAM,MAAM,cAAc,WAAW;IAC5C,WAAW;IACX,cAAc;IACd,OAAO;GACT,CAAC;GACD,MAAM,yBAAyB;IAC7B,UAAU;IACV,SAAS,MAAM,MAAM;IACrB,MAAM;IACN,GAAI,MAAM,MAAM,cACZ,EAAE,aAAa,MAAM,MAAM,YAAY,IACvC,CAAC;IACL,GAAI,MAAM,MAAM,UAAU,EAAE,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC;GAChE,CAAC;EACH,CAAC;EACD,OAAO;GACL,UAAU,MAAM,OAAO;GACvB;GACA,YAAY,MAAM,OAAO;GACzB,SAAS,MAAM,MAAM;GACrB,QAAQ;GACR,MAAM,aAAa;GACnB,UAAU,aAAa,SAAS;GAChC,GAAI,aAAa,SAAS,SACtB,EAAE,QAAQ,oCAAoC,IAC9C,CAAC;EACP;CACF,SAAS,OAAO;EACd,OAAO,YACL,iBAAiB,QACb,MAAM,UACN,mCACN;CACF;AACF;AAEA,SAAS,0BACP,OACmB;CACnB,IAAI,MAAM,eAAe,QACvB,OAAO;CAET,IAAI,MAAM,eAAe,WACvB,OAAO;CAET,OAAO;AACT;AAEA,eAAe,iBAAiB,OAGX;CACnB,IAAI;EACF,MAAM,MAAM,QAAQ,MAAM,SAAS,GAAG,EAAE,WAAW,KAAK,CAAC;EAEzD,MAAM,kBAAkB,QAAQ,MAAM,SAAS;EAC/C,MAAM,0BAA0B,MAAM,SAAS,eAAe,CAAC,CAAC,YACxD,eACR;EACA,MAAM,oBAAoB,MAAM,SAAS,MAAM,SAAS,CAAC,CAAC,YAClD,MAAM,SACd;EACA,MAAM,iBAAiB,SAAS,yBAAyB,iBAAiB;EAC1E,MAAM,QACJ,QAAQ,aAAa,UAAU,oBAAoB,gBACnD,MAAM,WACN,QAAQ,aAAa,UAAU,aAAa,KAAA,CAC9C;EACA,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF"}

package/dist/{lock-iue1J2xy.js → lock-CMH9eoS7.js}

@@ -1,278 +1,13 @@
 #!/usr/bin/env node
 
-import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, r as isProcessIdentityAlive, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-BQLdaZdB.js";
+import { F as resolveOpenMeldEnvPreset, I as resolveOpenMeldRootDir, V as sessionsDir, b as normalizeOpenMeldProfileId, v as locksDir, z as runtimeDir } from "./paths-DSkUuEu3.js";
+import { i as readProcessStartIdentity, n as isPreciseProcessStartIdentity, r as isProcessIdentityAlive, t as CURRENT_PROCESS_START_IDENTITY } from "./process-identity-BRbhGGTM.js";
 import { createHash, randomUUID } from "node:crypto";
-import { homedir } from "node:os";
-import { basename, dirname, join, parse, resolve } from "node:path";
+import { join } from "node:path";
 import { lstat, mkdir, open, readFile, readdir, rename, rm, rmdir, unlink, writeFile } from "node:fs/promises";
 import * as z$1 from "zod/v4";
 import { rmdirSync, unlinkSync } from "node:fs";
 import process$1 from "node:process";
-//#region src/config/paths.ts
-const MAX_ACCOUNT_PATH_SEGMENT_LENGTH = 128;
-const OPAQUE_CACHE_PATH_SEGMENT_RE = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/u;
-const FALLBACK_ACCOUNT_HOST_KEY = "unauthenticated";
-const FALLBACK_ACCOUNT_USER_KEY = "local";
-const OPENMELD_HOME_ENV_KEY = "OPENMELD_HOME";
-const OPENMELD_ENV_PRESET_ENV_KEY = "OPENMELD_ENV_PRESET";
-const DEFAULT_OPENMELD_ENV_PRESET = "prod";
-const OPENMELD_DEFAULT_HOME_DIR_BY_PRESET = {
-	prod: ".openmeld",
-	"dev-local": ".openmeld-dev",
-	canary: ".openmeld-canary"
-};
-const OPENMELD_ENV_PRESET_BY_ENTRY_NAME = {
-	openmeld: "prod",
-	"openmeld-dev": "dev-local",
-	"openmeld-canary": "canary"
-};
-function normalizeOpenMeldProfileId(value) {
-	const raw = String(value ?? "").trim();
-	if (raw.length === 0) throw new Error("openMeldProfileId is required");
-	const safe = raw.replace(/[^a-zA-Z0-9._-]+/g, "_").toLowerCase();
-	if (!safe || safe === "." || safe === "..") throw new Error("openMeldProfileId is invalid");
-	if (safe.length > MAX_ACCOUNT_PATH_SEGMENT_LENGTH) throw new Error("openMeldProfileId is too long");
-	return safe;
-}
-function resolveOpenMeldEnvPreset(input = {}) {
-	const fromEnv = normalizeOpenMeldEnvPreset((input.env ?? process.env)[OPENMELD_ENV_PRESET_ENV_KEY]);
-	if (fromEnv) return fromEnv;
-	return resolveOpenMeldEnvPresetFromArgv(input.argv ?? process.argv);
-}
-function resolveExplicitOpenMeldEnvPreset(input = {}) {
-	return normalizeOpenMeldEnvPreset((input.env ?? process.env)[OPENMELD_ENV_PRESET_ENV_KEY]);
-}
-function resolveDefaultOpenMeldHomeDirname(preset) {
-	return OPENMELD_DEFAULT_HOME_DIR_BY_PRESET[preset];
-}
-function resolveOpenMeldRootDir(input = {}) {
-	const env = input.env ?? process.env;
-	const fromEnv = String(env["OPENMELD_HOME"] ?? "").trim();
-	if (fromEnv) return fromEnv;
-	const preset = resolveOpenMeldEnvPreset(input);
-	return join(resolveHomeDirectory(input), resolveDefaultOpenMeldHomeDirname(preset));
-}
-/** Development OS resources follow the same root already carried by setup
-* and persisted in service registrations. No cwd or transient lane variable
-* may change the identity of an installed service. */
-function resolveOpenMeldServiceScope(input = {}) {
-	if (resolveOpenMeldEnvPreset(input) !== "dev-local") return null;
-	const root = resolve(resolveOpenMeldRootDir(input));
-	return createHash("sha256").update(root).digest("hex").slice(0, 16);
-}
-function resolveOpenMeldServiceOwnedPathInput(input = {}) {
-	const env = { ...input.env ?? process.env };
-	if (resolveOpenMeldServiceScope(input)) return {
-		...input,
-		env
-	};
-	delete env[OPENMELD_HOME_ENV_KEY];
-	return {
-		...input,
-		env
-	};
-}
-function openMeldRootDir() {
-	return resolveOpenMeldRootDir();
-}
-/**
-* Whether the effective OpenMeld home is the published `~/.openmeld` user lane.
-* Lane-specific homes (`openmeld-dev`, `openmeld-canary`, isolated dev lanes,
-* and other `OPENMELD_HOME` overrides) resolve elsewhere and must not manage
-* shared real-user state that the published lane owns.
-*/
-function isPublishedOpenMeldHome(input = {}) {
-	const publishedRootDir = join(resolveHomeDirectory(input), OPENMELD_DEFAULT_HOME_DIR_BY_PRESET.prod);
-	return resolve(resolveOpenMeldRootDir(input)) === resolve(publishedRootDir);
-}
-function openMeldBackupsDir() {
-	const root = openMeldRootDir();
-	return join(dirname(root), `${basename(root)}-backups`);
-}
-function openMeldManagedBinaryName() {
-	return process.platform === "win32" ? "openmeld.exe" : "openmeld";
-}
-function openMeldVersionsDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "versions");
-}
-function openMeldManagedVersionDir(version, input = {}) {
-	return join(openMeldVersionsDir(input), normalizePathSegment(version, "unknown"));
-}
-function openMeldManagedVersionBinaryPath(version, input = {}) {
-	return join(openMeldManagedVersionDir(version, input), openMeldManagedBinaryName());
-}
-function openMeldBinDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "bin");
-}
-function openMeldManagedBinaryPath(input = {}) {
-	return join(openMeldBinDir(input), openMeldManagedBinaryName());
-}
-function accountsDir() {
-	return join(openMeldRootDir(), "accounts");
-}
-function deviceDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "device");
-}
-function deviceSkillsDir(input = {}) {
-	return join(deviceDir(input), "skills");
-}
-function devicePreferencesPath(input = {}) {
-	return join(deviceDir(input), "preferences.json");
-}
-function deviceAgentRuntimePath(input = {}) {
-	return join(deviceDir(input), "agent-runtime.json");
-}
-function deviceProvidersDir(input = {}) {
-	return join(deviceDir(input), "providers");
-}
-function deviceProviderDir(providerId, input = {}) {
-	return join(deviceProvidersDir(input), normalizePathSegment(providerId, "unknown"));
-}
-function deviceProviderProfilesDir(providerId, input = {}) {
-	return join(deviceProviderDir(providerId, input), "profiles");
-}
-function deviceProviderProfileDir(providerId, profileId, input = {}) {
-	return join(deviceProviderProfilesDir(providerId, input), normalizePathSegment(profileId, "unknown"));
-}
-function deviceOpenClawProfileDir(profileId, input = {}) {
-	return deviceProviderProfileDir("openclaw", profileId, input);
-}
-function deviceOpenClawProfileWorkspaceDir(profileId, input = {}) {
-	return join(deviceOpenClawProfileDir(profileId, input), "workspace");
-}
-function deviceOpenClawProfileBootstrapPath(profileId, input = {}) {
-	return join(deviceOpenClawProfileDir(profileId, input), "bootstrap.json");
-}
-function deviceSkillsStorePath(input = {}) {
-	return join(deviceSkillsDir(input), "store.json");
-}
-function deviceSkillsCustomTargetsPath(input = {}) {
-	return join(deviceSkillsDir(input), "custom-targets.json");
-}
-function deviceSkillsInstallsPath(input = {}) {
-	return join(deviceSkillsDir(input), "installs.json");
-}
-function legacyRuntimeConfigPath(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "config.json");
-}
-function normalizeAccountHostKey(value) {
-	return normalizePathSegment(value, FALLBACK_ACCOUNT_HOST_KEY);
-}
-function normalizeAccountUserKey(value) {
-	return normalizePathSegment(value, FALLBACK_ACCOUNT_USER_KEY);
-}
-function normalizeAccountKey(input) {
-	return {
-		hostKey: normalizeAccountHostKey(input.hostKey),
-		userKey: normalizeAccountUserKey(input.userKey)
-	};
-}
-function accountDir(account) {
-	const normalized = normalizeAccountKey(account);
-	return join(accountsDir(), normalized.hostKey, normalized.userKey);
-}
-function accountProfilesDir(account) {
-	return join(accountDir(account), "profiles");
-}
-function accountProfileDir(account, openMeldProfileId) {
-	return join(accountProfilesDir(account), normalizeOpenMeldProfileId(openMeldProfileId));
-}
-function accountProfileViewPath(account, openMeldProfileId) {
-	return join(accountProfileDir(account, openMeldProfileId), "view.json");
-}
-function accountProfileLocalMetaPath(account, openMeldProfileId) {
-	return join(accountProfileDir(account, openMeldProfileId), "local-meta.json");
-}
-function accountProfileWorkspacePath(account, openMeldProfileId) {
-	return join(accountProfileDir(account, openMeldProfileId), "workspace");
-}
-function accountProfileSpaceCacheDir(account, openMeldProfileId) {
-	return join(accountProfileDir(account, openMeldProfileId), "space-cache");
-}
-function legacyAccountProfileSpacesDir(account, openMeldProfileId) {
-	return join(accountProfileDir(account, openMeldProfileId), "spaces");
-}
-function profileDir(openMeldProfileId) {
-	return join(openMeldRootDir(), "profiles", openMeldProfileId);
-}
-function runtimeDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "runtime");
-}
-function runtimeLogsDir() {
-	return join(runtimeDir(), "logs");
-}
-function sessionsDir() {
-	return join(runtimeDir(), "sessions");
-}
-function systemDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "system");
-}
-function skillsDir() {
-	return join(openMeldRootDir(), "skills");
-}
-function organizationSkillsDir(input = {}) {
-	return join(resolveOpenMeldRootDir(input), "organization-skills");
-}
-function organizationSkillReleaseDir(organizationId, skillId, releaseId, input = {}) {
-	return join(organizationSkillsDir(input), requireOpaqueCachePathSegment(organizationId, "organizationId"), requireOpaqueCachePathSegment(skillId, "skillId"), requireOpaqueCachePathSegment(releaseId, "releaseId"));
-}
-function spacesDir(openMeldProfileId) {
-	return join(profileDir(openMeldProfileId), "spaces");
-}
-function locksDir(openMeldProfileId, input = {}) {
-	return join(runtimeDir(input), "locks", openMeldProfileId);
-}
-function profileViewPath(openMeldProfileId) {
-	return join(profileDir(openMeldProfileId), "view.json");
-}
-function normalizePathSegment(value, fallback) {
-	const normalized = String(value ?? "").trim().toLowerCase();
-	if (!normalized) return fallback;
-	const safe = normalized.replace(/[^a-z0-9._-]+/g, "_");
-	if (!safe) return fallback;
-	if (safe === "." || safe === "..") return fallback;
-	return safe.slice(0, MAX_ACCOUNT_PATH_SEGMENT_LENGTH);
-}
-function requireOpaqueCachePathSegment(value, label) {
-	const normalized = String(value ?? "").trim();
-	if (normalized.length === 0 || normalized.length > 256 || normalized === "." || normalized === ".." || !OPAQUE_CACHE_PATH_SEGMENT_RE.test(normalized)) throw new Error(`${label} is not safe for the Organization Skills cache`);
-	return normalized;
-}
-function resolveOpenMeldEnvPresetFromArgv(argv) {
-	return resolveKnownOpenMeldEnvPresetFromArgv(argv) ?? DEFAULT_OPENMELD_ENV_PRESET;
-}
-function resolveKnownOpenMeldEnvPresetFromArgv(argv) {
-	const entryName = resolveOpenMeldCliEntryNameFromArgv(argv);
-	if (!entryName) return null;
-	return OPENMELD_ENV_PRESET_BY_ENTRY_NAME[entryName] ?? null;
-}
-function resolveOpenMeldCliEntryNameFromArgv(argv) {
-	return resolveCliEntryName(argv[1]);
-}
-function resolveCliEntryName(value) {
-	const raw = String(value ?? "").trim();
-	if (!raw) return null;
-	const normalizedName = parse(raw).name.trim().toLowerCase();
-	if (!normalizedName) return null;
-	if (!isOpenMeldCliEntryName(normalizedName)) return null;
-	return normalizedName;
-}
-function isOpenMeldCliEntryName(value) {
-	return value in OPENMELD_ENV_PRESET_BY_ENTRY_NAME;
-}
-function normalizeOpenMeldEnvPreset(value) {
-	const normalized = String(value ?? "").trim().toLowerCase();
-	if (normalized === "prod" || normalized === "dev-local" || normalized === "canary") return normalized;
-	return null;
-}
-function resolveHomeDirectory(input) {
-	if (input.homeDir) return input.homeDir;
-	const env = input.env ?? process.env;
-	const fromEnv = String(env.HOME ?? "").trim();
-	if (fromEnv) return fromEnv;
-	return homedir();
-}
-//#endregion
 //#region ../../packages/schemas/dist/schemas/local-machine/recovery.js
 const localMachineIssueCodeSchema = z$1.enum([
 	"local_machine.storage.exhausted",
@@ -1218,6 +953,6 @@ function toErrorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 //#endregion
-export { openMeldManagedVersionBinaryPath as $, OPENMELD_HOME_ENV_KEY as A, devicePreferencesPath as B, assessLocalMachineFailure as C, isLocalMachineFailureError as D, createServiceSpawnPendingIssue as E, accountsDir as F, legacyAccountProfileSpacesDir as G, deviceSkillsInstallsPath as H, deviceAgentRuntimePath as I, normalizeOpenMeldProfileId as J, legacyRuntimeConfigPath as K, deviceOpenClawProfileBootstrapPath as L, accountProfileSpaceCacheDir as M, accountProfileViewPath as N, toRecognizedLocalMachineFailureError as O, accountProfileWorkspacePath as P, openMeldManagedBinaryPath as Q, deviceOpenClawProfileDir as R, LocalMachineFailureError as S, createOrphanedSetupConcurrencyIssue as T, deviceSkillsStorePath as U, deviceSkillsCustomTargetsPath as V, isPublishedOpenMeldHome as W, openMeldBinDir as X, openMeldBackupsDir as Y, openMeldManagedBinaryName as Z, resolveCliContext as _, systemDir as _t, isOpenMeldOrphanedLockError as a, profileViewPath as at, formatLaneScopeSentence as b, releaseLockSync as c, resolveOpenMeldCliEntryNameFromArgv as ct, runWithHeldLock as d, resolveOpenMeldServiceOwnedPathInput as dt, openMeldManagedVersionDir as et, tryCleanupStaleLock as f, resolveOpenMeldServiceScope as ft, readCliContextState as g, spacesDir as gt, listCliContextStates as h, skillsDir as ht, isOpenMeldLockError as i, profileDir as it, accountProfileLocalMetaPath as j, formatLocalMachineIssueMessage as k, repairOrphanedLegacyLocks as l, resolveOpenMeldEnvPreset as lt, OPENMELD_CLI_CONTEXT_ENV_KEY as m, runtimeLogsDir as mt, attachLockProcess as n, openMeldVersionsDir as nt, readLockMeta as o, resolveDefaultOpenMeldHomeDirname as ot, LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY as p, runtimeDir as pt, normalizeAccountKey as q, buildOpenMeldOrphanedLockAction as r, organizationSkillReleaseDir as rt, releaseLock as s, resolveExplicitOpenMeldEnvPreset as st, acquireLock as t, openMeldRootDir as tt, resolveOpenMeldOrphanedLockIssue as u, resolveOpenMeldRootDir as ut, resolveCliContextId as v, createActiveSetupConcurrencyIssue as w, resolveOpenMeldLaneDescriptor as x, writeCliContextState as y, deviceOpenClawProfileWorkspaceDir as z };
+export { assessLocalMachineFailure as C, isLocalMachineFailureError as D, createServiceSpawnPendingIssue as E, toRecognizedLocalMachineFailureError as O, LocalMachineFailureError as S, createOrphanedSetupConcurrencyIssue as T, resolveCliContext as _, isOpenMeldOrphanedLockError as a, formatLaneScopeSentence as b, releaseLockSync as c, runWithHeldLock as d, tryCleanupStaleLock as f, readCliContextState as g, listCliContextStates as h, isOpenMeldLockError as i, formatLocalMachineIssueMessage as k, repairOrphanedLegacyLocks as l, OPENMELD_CLI_CONTEXT_ENV_KEY as m, attachLockProcess as n, readLockMeta as o, LEGACY_OPENMELD_AGENT_SESSION_ENV_KEY as p, buildOpenMeldOrphanedLockAction as r, releaseLock as s, acquireLock as t, resolveOpenMeldOrphanedLockIssue as u, resolveCliContextId as v, createActiveSetupConcurrencyIssue as w, resolveOpenMeldLaneDescriptor as x, writeCliContextState as y };
 
-//# sourceMappingURL=lock-iue1J2xy.js.map
+//# sourceMappingURL=lock-CMH9eoS7.js.map