rea-agents 6.5.0 → 6.7.0

package/dist/cli-runtime/{application__Setup-XpMaRNjy.js → application__Setup-DwQzEewK.js}

@@ -1,12 +1,13 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { compareUnicodeCodePoints, init_unicodeCodePointOrder } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { AnalysisError, init_analysisErrorBase } from "./errorSchemas-CTRmvMl3.js";
-import { analysisErrorWithCleanupFailure, init_analysisErrorCleanup } from "./analysisErrorCleanup-Do6YeeoD.js";
-import { ProviderCleanupError, init_providerCleanupError } from "./providerCleanupError-Ceq8f0wK.js";
-import { appDataRedirection, classifyClientRegistrationCommand, init_ClientRegistrationIdentity, init_MsixPackageStorage, init_SupportedClients, manualRegistrationRemediation, redirectedWriteBlocker, registrationPersistenceDetail } from "./SupportedClients-DaX6Lt2d.js";
-import { init_LinuxHopper, init_MacHopperPaths, linuxHopperInstallDisclosure, macHopperUserApplicationPath } from "./MacHopperPaths-CwL5lYPX.js";
-import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-D5FRNdkq.js";
-import { configureDetectedClients, filterClientsNeedingConfigure, hostRemediation, init_MacHopper, init_SetupClients, init_SetupHost, macHopperInstallDisclosure, systemSetupHost } from "./SetupHost-FkYWswsq.js";
+import { compareUnicodeCodePoints, init_unicodeCodePointOrder } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { AnalysisError, init_analysisErrorBase } from "./errorSchemas-Ixz_q7qt.js";
+import { analysisErrorWithCleanupFailure, init_analysisErrorCleanup } from "./analysisErrorCleanup-COdAmDsb.js";
+import { ProviderCleanupError, init_providerCleanupError } from "./providerCleanupError-BhsJyAhk.js";
+import { appDataRedirection, classifyClientRegistrationCommand, init_ClientRegistrationIdentity, init_MsixPackageStorage, init_SupportedClients, manualRegistrationRemediation, redirectedWriteBlocker, registrationPersistenceDetail } from "./SupportedClients-DMafjitv.js";
+import { init_LinuxHopper, linuxHopperInstallDisclosure } from "./SharedStartupAttempt-BxKyf3Uv.js";
+import { init_MacHopperPaths, macHopperUserApplicationPath } from "./MacHopperPaths-bGzqjF1Z.js";
+import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-m7QCIVN0.js";
+import { configureDetectedClients, filterClientsNeedingConfigure, hostRemediation, init_MacHopper, init_SetupClients, init_SetupHost, macHopperInstallDisclosure, systemSetupHost } from "./SetupHost-CMPmPraB.js";
 
 //#region dist/application/SetupPlan.js
 var discoverSetupState, planSetupActions, plannedClientWrites, setupPlan, linuxDisclosure, majorVersion, clientConfigurationDetail;
@@ -25,7 +26,7 @@ function init_SetupPlan() {
 			const linuxHopperRepairNeeded = input.hopperLauncherConfigured !== true && initialDoctor.checks.some(({ name, ok, detail }) => !ok && (name === "hopper-demo-runtime" || name === "hopper-version" && detail === "/opt/hopper/bin/Hopper"));
 			const linuxDistribution = input.host.platform === "linux" ? await input.host.linuxDistribution() : undefined;
 			const hopperInstallSupported = input.host.platform === "darwin" && majorVersion(await input.host.macosVersion() ?? "0") >= 12 || input.host.platform === "linux" && linuxDistribution?.hopperSetupSupported === true;
-			const installHopper = input.forceHopperInstall || hopperInstallSupported && input.proposeHopper && (Object.keys(input.providerEnvironment).length === 0 || linuxHopperRepairNeeded);
+			const installHopper = input.forceHopperInstall || hopperInstallSupported && input.proposeHopper && (!input.providerConfigured || linuxHopperRepairNeeded);
 			const [clients, detectedClients] = await Promise.all([input.host.supportedClients(), input.host.detectedClients()]);
 			const detectedIds = new Set(detectedClients.map(({ name }) => name));
 			const registrations = initialDoctor.identity?.registrations ?? [];
@@ -69,6 +70,13 @@ function init_SetupPlan() {
 				const client = byId.get(id);
 				return client === undefined ? [] : [client];
 			});
+			const hopperCache = input.host.linuxHopperReleaseCache;
+			if (input.discovery.installHopper && hopperCache?.ok === false) return {
+				plannedActions: [],
+				selectedClients,
+				clientsToConfigure: [],
+				blocker: hopperCache.error.message
+			};
 			if (selectedClients.length > 0 && input.host.registrationCommandBlocker !== undefined) return {
 				plannedActions: [],
 				selectedClients,
@@ -92,6 +100,7 @@ function init_SetupPlan() {
 			const plannedActions = setupPlan({
 				platform: input.host.platform,
 				homeDirectory: input.host.homeDirectory,
+				...hopperCache?.ok === true ? { hopperCacheDirectory: hopperCache.value } : {},
 				installHopper: input.discovery.installHopper,
 				installSkill: input.installSkill,
 				skillClientIds: input.skillClientIds,
@@ -120,7 +129,7 @@ function init_SetupPlan() {
 				kind: "install_hopper",
 				label: "Hopper deep-analysis provider",
 				target: input.platform === "darwin" ? macHopperUserApplicationPath(input.homeDirectory) : "system package manager",
-				detail: input.platform === "linux" ? "Download, verify, and install Hopper plus its Xvfb demo-session dependencies. For the supported demo build, REA uses a private display and selects Hopper's offered demo mode for each analysis session." : "Download the official Hopper package, verify it, and install it. Hopper may show its demo or license prompt when first opened.",
+				detail: input.platform === "linux" ? `Download the current official Hopper demo, verify its PGP publisher and launcher bytes, and retain archive, public-key.asc and release.json under ${input.hopperCacheDirectory ?? `${input.homeDirectory}/.cache/rea/hopper-releases`}/<launcher-sha256> for offline verification. Preserve replaced damaged evidence beside it as <launcher-sha256>.backup-<id>. Install Hopper plus its Xvfb demo-session dependencies. REA uses a private display and selects Hopper's offered demo mode for each analysis session.` : "Download the official Hopper package, verify it, and install it. Hopper may show its demo or license prompt when first opened.",
 				external: true,
 				operation: "install",
 				...input.platform === "linux" ? input.linuxPackageFamily === undefined ? {} : linuxDisclosure(input.linuxPackageFamily) : {
@@ -151,9 +160,9 @@ function init_SetupPlan() {
 		linuxDisclosure = (family) => {
 			const disclosure = linuxHopperInstallDisclosure(family, process.getuid?.() === 0);
 			return {
-				networkOrigins: [disclosure.downloadUrl],
+				networkOrigins: disclosure.networkOrigins,
 				commands: disclosure.commands,
-				integrity: `${String(disclosure.expectedBytes)} bytes · SHA-1 ${disclosure.expectedSha1}`
+				integrity: disclosure.integrity
 			};
 		};
 		majorVersion = (version) => Number.parseInt(version.split(".")[0] ?? "0", 10);
@@ -232,7 +241,7 @@ function init_Setup() {
 			let { hopperPath, providerEnvironment } = initialState;
 			const discovery = await discoverSetupState({
 				host,
-				providerEnvironment,
+				providerConfigured: initialState.providerConfigured,
 				forceHopperInstall: options.installHopper,
 				hopperLauncherConfigured: initialState.hopperLauncherConfigured === true,
 				proposeHopper: options.proposeHopper ?? (confirm !== undefined && !options.structured),
@@ -241,7 +250,7 @@ function init_Setup() {
 			clientStates = discovery.clientStates;
 			const clientSelectionAllowed = options.clientIds === undefined && options.readinessScope?.clients === undefined && options.allDetectedClients !== true && options.installHopper !== true && options.skillClientIds === undefined && options.installSkill === undefined;
 			const interactiveSelection = confirm !== undefined && !options.structured && clientSelectionAllowed;
-			let selectedClientIds = options.allDetectedClients ? discovery.detectedClientIds : options.clientIds ?? options.readinessScope?.clients ?? discovery.defaultClientIds;
+			let selectedClientIds = [...new Set(options.allDetectedClients ? discovery.detectedClientIds : options.clientIds ?? options.readinessScope?.clients ?? discovery.defaultClientIds)];
 			let selectedSkillClientIds = options.skillClientIds ?? options.readinessScope?.skillClients ?? selectedClientIds;
 			let skillNeedsInstall = await host.skillNeedsInstall(selectedSkillClientIds);
 			let skillSelected = options.installSkill === true || options.installSkill !== false && (selectedClientIds.length > 0 || selectedSkillClientIds.length > 0);
@@ -344,6 +353,7 @@ function init_Setup() {
 				if (!admission.ok) return failSkill(admission.error);
 			}
 			let selectedClients = planSelection.clientsToConfigure;
+			let hopperWarning;
 			if (planSelection.installHopper && (interactiveApproval || options.installHopper)) {
 				const install = await installHopperAction({
 					host,
@@ -357,7 +367,7 @@ function init_Setup() {
 					clientStates
 				});
 				if ("failure" in install) return install.failure;
-				({hopperPath, providerEnvironment, selectedClients} = install);
+				({hopperPath, providerEnvironment, selectedClients, warning: hopperWarning} = install);
 			}
 			const clientFailure = await configureDetectedClients({
 				host,
@@ -376,7 +386,7 @@ function init_Setup() {
 				}
 			}
 			const doctor = summarizeDoctor(await host.doctor(readinessScope));
-			const remediation = combineRemediation(finalSetupRemediation(host.platform, appliedActions.includes("installed_hopper"), doctor.healthy, hopperPath), manualRemediation);
+			const remediation = combineRemediation(finalSetupRemediation(host.platform, appliedActions.includes("installed_hopper"), doctor.healthy, hopperPath), hopperWarning, manualRemediation);
 			return {
 				status: remediation === undefined ? "ready" : "needs_human",
 				plannedActions,
@@ -414,11 +424,12 @@ function init_Setup() {
 				} };
 			}
 			input.appliedActions.push("installed_hopper");
+			const warning = [installed.warning, installed.cleanupFailure].filter((value) => value !== undefined).join(" ");
 			emitProgress(input.options, {
 				actionId: "install_hopper",
 				label,
-				state: installed.cleanupFailure === undefined ? "completed" : "warning",
-				detail: installed.cleanupFailure === undefined ? installed.launcherPath : `${installed.launcherPath}; ${installed.cleanupFailure}`
+				state: warning === "" ? "completed" : "warning",
+				detail: warning === "" ? installed.launcherPath : `${installed.launcherPath}; ${warning}`
 			});
 			const providerEnvironment = {
 				...input.providerEnvironment,
@@ -427,6 +438,7 @@ function init_Setup() {
 			return {
 				hopperPath: installed.launcherPath,
 				providerEnvironment,
+				...warning === "" ? {} : { warning },
 				selectedClients: await filterClientsNeedingConfigure(input.host, input.selectedClients, providerEnvironment, input.host.registrationCommand)
 			};
 		};

package/dist/cli-runtime/{application__Uninstall-_23pU2yB.js → application__Uninstall-BOf9oyvQ.js}

@@ -1,30 +1,34 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { PRODUCT_IDENTITY, init_identity } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { ArtifactResourceScope, init_ArtifactResourceScope } from "./ArtifactResourceScope-DQWTcUwE.js";
-import { InvalidUtf8FileError, RegularFileCleanupFailure, init_RegularFileRead, readRegularFileText } from "./RegularFileRead-DVlC5faM.js";
-import { appDataRedirection, homeDirectoryFromEnvironment, init_ClientRegistrationIdentity, init_MsixPackageStorage, init_SupportedClients, init_homeDirectory, isOwnedClientRegistrationCommand, manualRegistrationRemediation, redirectedWriteBlocker, registrationWriteBlocker, supportedClients } from "./SupportedClients-DaX6Lt2d.js";
+import { PRODUCT_IDENTITY, init_identity } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { RegularFileCleanupFailure, init_OwnedRegularFile } from "./OwnedRegularFile-D1f5nUCx.js";
+import { ArtifactResourceScope, init_ArtifactResourceScope } from "./ArtifactResourceScope-CokZGcII.js";
+import { InvalidUtf8FileError, init_RegularFileRead, readRegularFileText } from "./RegularFileRead-mbgGYtxe.js";
+import { appDataRedirection, classifyClientRegistrationCommand, init_ClientRegistrationIdentity, init_MsixPackageStorage, init_SupportedClients, manualRegistrationRemediation, redirectedWriteBlocker, registrationWriteBlocker, supportedClients } from "./SupportedClients-DMafjitv.js";
+import { homeDirectoryFromEnvironment, init_homeDirectory } from "./homeDirectory-DC_DeJIg.js";
+import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-m7QCIVN0.js";
 import { init_UninstallFailure, isUninstallFailure } from "./UninstallFailure-1blyKXHE.js";
-import { CURRENT_ENTRYPOINT_PATH, init_CurrentEntrypointPath } from "./CurrentEntrypointPath-D5FRNdkq.js";
-import { ClientConfigurationShapeError, MANAGED_SKILL_FILES, clientServerPath, dshDocument, init_ClientConfigurationDocument, init_DshCordisPatch, init_SetupSkill, isManagedSkillManifest, legacyClientServerPath, parseClientConfiguration, readSkillFile, serializeClientConfiguration, skillDestinations, withClientServers } from "./ClientConfigurationDocument-ffQ9X0Se.js";
-import { init_ClientConfigPath, resolveClientConfigTransactionPath } from "./ClientConfigPath-c6jr6INc.js";
+import { ClientConfigurationShapeError, MANAGED_SKILL_FILES, clientServerPath, dshDocument, init_ClientConfigurationDocument, init_DshCordisPatch, init_SetupRecoveryBackup, init_SetupSkill, isManagedSkillManifest, legacyClientServerPath, parseClientConfiguration, preserveCurrentRecoveryBackup, readSkillFile, serializeClientConfiguration, skillDestinations, withClientServers } from "./ClientConfigurationDocument-C9T8MNGc.js";
+import { ClientConfigurationPublication, init_ClientConfigPath, init_ClientConfigurationCleanup, init_ClientConfigurationPublication, isClientConfigurationCleanupFailure, resolveClientConfigTransactionPath, retryClientConfigurationCleanup } from "./ClientConfigPath-Dn-V_GUf.js";
 import { z } from "zod";
 import { join } from "node:path";
-import { copyFile, lstat, realpath, rm, rmdir } from "node:fs/promises";
 import { constants } from "node:fs";
-import writeFileAtomic from "write-file-atomic";
+import { copyFile, lstat, realpath, rm, rmdir } from "node:fs/promises";
 
 //#region dist/application/Uninstall.js
-var systemFileSystem, runUninstall, removeAll, systemUninstallHost, uninstallConfigPaths, registrationPresent, readClientConfiguration, itemRead, clientRegistrationRemoval, removeClient, resolveUninstallConfigPath, isOwnedRegistration, purgeManagedData, removeManagedPath, removeManagedSkills, inspectManagedSkill, removeManagedSkill, MANAGED_SKILL_DIRECTORIES, removeEmptyManagedDirectories, isKeptDirectory, removeManagedSkillFile, item, collapseUninstallItems, mergeUninstallItems, preferredUninstallStatus, uninstallStatusPriority, registrationSchema, isMissing;
+var systemFileSystem, runUninstall, removeAll, systemUninstallHost, uninstallConfigPaths, registrationPresent, readClientConfiguration, itemRead, clientRegistrationRemoval, backupClientConfiguration, removeClient, resolveUninstallConfigPath, isOwnedRegistration, purgeManagedData, removeManagedPath, removeManagedSkills, inspectManagedSkill, removeManagedSkill, MANAGED_SKILL_DIRECTORIES, removeEmptyManagedDirectories, isKeptDirectory, removeManagedSkillFile, item, collapseUninstallItems, mergeUninstallItems, preferredUninstallStatus, uninstallStatusPriority, registrationSchema, isMissing;
 function init_Uninstall() {
 	return (init_Uninstall = __esmMin((() => {
+		init_ClientConfigurationCleanup();
 		init_ClientConfigurationDocument();
 		init_homeDirectory();
+		init_ClientConfigurationPublication();
 		init_identity();
 		init_SetupSkill();
 		init_ClientRegistrationIdentity();
 		init_CurrentEntrypointPath();
 		init_DshCordisPatch();
 		init_ClientConfigPath();
+		init_SetupRecoveryBackup();
 		init_RegularFileRead();
 		init_ArtifactResourceScope();
 		init_SupportedClients();
@@ -34,7 +38,7 @@ function init_Uninstall() {
 			readText: (path) => readRegularFileText(path, { resources }),
 			readRegularText: (path) => readSkillFile(path, resources),
 			copy: (source, destination) => copyFile(source, destination, constants.COPYFILE_EXCL),
-			writeText: (path, contents) => writeFileAtomic(path, contents, { encoding: "utf8" }),
+			publishConfiguration: (path, contents, original) => ClientConfigurationPublication.write(path, contents, original),
 			stat: (path) => lstat(path),
 			realpath: (path) => realpath(path),
 			remove: (path, recursive = true) => rm(path, { recursive }),
@@ -100,6 +104,7 @@ function init_Uninstall() {
 		systemUninstallHost = (selectedHome = undefined, selectedFileSystem = undefined, environment = process.env, platform = process.platform) => {
 			const home = selectedHome ?? homeDirectoryFromEnvironment(environment, platform);
 			const resources = new ArtifactResourceScope();
+			const configurationOperations = new ArtifactResourceScope();
 			const fileSystem = selectedFileSystem ?? systemFileSystem(resources);
 			let redirection;
 			const clientWriteBlocker = (client) => registrationWriteBlocker(client, "uninstall") ?? redirectedWriteBlocker(redirection, [client.configPath], "uninstall");
@@ -117,15 +122,15 @@ function init_Uninstall() {
 						format: "zcode_fallback"
 					}]]));
 				},
-				inspectClient: async (client) => {
-					const read = await readClientConfiguration(client, fileSystem);
+				inspectClient: (client) => configurationOperations.run(async () => {
+					const read = await readClientConfiguration(client, fileSystem, resources);
 					if (read.kind === "item") return read.item.status === "failed" ? read.item : undefined;
 					const removal = clientRegistrationRemoval(read.parsed, client);
 					if (!removal.removeNative && removal.legacyPath === undefined) return undefined;
 					const blocker = clientWriteBlocker(client);
 					return blocker === undefined ? undefined : item(client.name, "failed", blocker);
-				},
-				removeClient: (client) => removeClient(client, fileSystem, () => clientWriteBlocker(client)),
+				}),
+				removeClient: (client) => configurationOperations.run(() => removeClient(client, fileSystem, resources, () => clientWriteBlocker(client))),
 				inspectSkill: async () => {
 					for (const destination of skillDestinations(home, undefined, environment, platform)) {
 						const inspected = await inspectManagedSkill(destination.path, destination.client, fileSystem);
@@ -140,6 +145,7 @@ function init_Uninstall() {
 				purgeData: () => purgeManagedData(join(home, ".rea"), fileSystem),
 				close: async () => {
 					try {
+						await configurationOperations.close();
 						await resources.close();
 						return undefined;
 					} catch (cause) {
@@ -153,7 +159,7 @@ function init_Uninstall() {
 			const name = PRODUCT_IDENTITY.mcpServerKey;
 			return Object.hasOwn(parsed.servers, name) || legacyClientServerPath(parsed, name) !== undefined || parsed.dialect === "dsh" && dshDocument(parsed.document).carriesEntry;
 		};
-		readClientConfiguration = async (client, fileSystem) => {
+		readClientConfiguration = async (client, fileSystem, resources) => {
 			if (client.configPathError !== undefined) return itemRead(item(client.name, "failed", client.configPathError));
 			if (client.format === "unsupported") return itemRead(item(client.name, "skipped", manualRegistrationRemediation(client.name) ?? "This client has no documented local MCP configuration boundary."));
 			const resolved = await resolveUninstallConfigPath(client, fileSystem);
@@ -163,8 +169,12 @@ function init_Uninstall() {
 			try {
 				original = await fileSystem.readText(transactionPath);
 			} catch (cause) {
-				const readFailure = cause instanceof RegularFileCleanupFailure ? cause.cause : cause;
-				return itemRead(isMissing(cause) ? item(client.name, "skipped", "Configuration does not exist.") : item(client.name, "failed", readFailure instanceof InvalidUtf8FileError ? "Configuration is not valid UTF-8 and was not changed. Repair it, then rerun uninstall." : "Configuration could not be read. Check file permissions, then rerun uninstall."));
+				if (isClientConfigurationCleanupFailure(cause)) {
+					const cleanup = await retryClientConfigurationCleanup(cause, resources);
+					return itemRead(item(client.name, "failed", cleanup.primary instanceof InvalidUtf8FileError ? "Configuration is not valid UTF-8 and was not changed; its resources could not be released. Repair it, then rerun uninstall." : "Configuration could not be read or its resources could not be released. Check file permissions, then rerun uninstall."));
+				}
+				const readFailure = cause;
+				return itemRead(isMissing(readFailure) ? item(client.name, "skipped", "Configuration does not exist.") : item(client.name, "failed", readFailure instanceof InvalidUtf8FileError ? "Configuration is not valid UTF-8 and was not changed. Repair it, then rerun uninstall." : "Configuration could not be read. Check file permissions, then rerun uninstall."));
 			}
 			try {
 				const parsed = parseClientConfiguration(original, client.format);
@@ -194,8 +204,19 @@ function init_Uninstall() {
 				legacyPath: legacyPath !== undefined && isOwnedRegistration(parsed.legacyServers[name], client) ? legacyPath : undefined
 			};
 		};
-		removeClient = async (client, fileSystem, writeBlocker) => {
-			const read = await readClientConfiguration(client, fileSystem);
+		backupClientConfiguration = async (client, transactionPath, original, options) => {
+			const failed = (detail) => item(client.name, "failed", `Configuration could not be backed up, so no change was made. ${detail}`);
+			try {
+				const preserved = await preserveCurrentRecoveryBackup(`${client.configPath}.rea.backup`, transactionPath, original, options);
+				if (preserved.ok) return preserved.value;
+				if (preserved.error.kind === "occupied") return failed(`${preserved.error.detail}. Move that file aside, then rerun uninstall.`);
+			} catch (cause) {
+				if (!(cause instanceof RegularFileCleanupFailure)) throw cause;
+			}
+			return failed("Check file permissions, then rerun uninstall.");
+		};
+		removeClient = async (client, fileSystem, resources, writeBlocker) => {
+			const read = await readClientConfiguration(client, fileSystem, resources);
 			if (read.kind === "item") return read.item;
 			const { transactionPath, original, parsed } = read;
 			const name = PRODUCT_IDENTITY.mcpServerKey;
@@ -210,26 +231,46 @@ function init_Uninstall() {
 			if (removeNative) delete remaining[name];
 			const document = withClientServers(parsed, remaining, removeLegacy ? name : undefined);
 			const editedPaths = [...removeNative ? [clientServerPath(parsed, name)] : [], ...legacyPath === undefined ? [] : [legacyPath]];
-			const backupPath = `${client.configPath}.rea.backup`;
+			let serialized;
 			try {
-				await fileSystem.copy(transactionPath, backupPath);
+				serialized = serializeClientConfiguration(document, client.format, original, editedPaths);
+			} catch {
+				return item(client.name, "failed", "Configuration could not be updated, so no change was made. Repair the configuration, then rerun uninstall.");
+			}
+			if (!serialized.ok) return item(client.name, "failed", `Configuration repeats the member at ${JSON.stringify(serialized.error.path)}; removing the registration the client reads would activate an earlier duplicate, so no change was made. Remove the duplicate members manually, then rerun uninstall.`);
+			const backupPath = await backupClientConfiguration(client, transactionPath, original, {
+				copy: (source, destination) => fileSystem.copy(source, destination),
+				resources
+			});
+			if (typeof backupPath !== "string") return backupPath;
+			const manualRecovery = () => item(client.name, "failed", `Configuration could not be updated or restored. Restore the backup at ${backupPath} manually, then rerun uninstall.`);
+			let publication;
+			try {
+				publication = await fileSystem.publishConfiguration(transactionPath, serialized.value, original);
 			} catch (cause) {
-				if (!(cause instanceof Error && "code" in cause && cause.code === "EEXIST")) return item(client.name, "failed", "Configuration could not be backed up, so no change was made. Check file permissions, then rerun uninstall.");
+				if (isClientConfigurationCleanupFailure(cause)) await retryClientConfigurationCleanup(cause, resources);
+				return manualRecovery();
 			}
 			try {
-				await fileSystem.writeText(transactionPath, serializeClientConfiguration(document, client.format, original, editedPaths));
-				const readback = parseClientConfiguration(await fileSystem.readText(transactionPath), client.format);
-				if (removeNative && Object.hasOwn(readback.servers, name) || readback.dialect === "dsh" && dshDocument(readback.document).carriesEntry || removeLegacy && Object.hasOwn(readback.legacyServers, name)) throw new Error("registration readback mismatch");
-				return item(client.name, "removed", `Removed registration from ${client.configPath}.`);
+				return await publication.verify(async () => {
+					try {
+						const readback = parseClientConfiguration(await fileSystem.readText(publication.path), client.format);
+						await publication.assertCurrent();
+						if (removeNative && Object.hasOwn(readback.servers, name) || readback.dialect === "dsh" && dshDocument(readback.document).carriesEntry || removeLegacy && Object.hasOwn(readback.legacyServers, name)) throw new Error("registration readback mismatch");
+						return item(client.name, "removed", `Removed registration from ${client.configPath}.`);
+					} catch (cause) {
+						if (isClientConfigurationCleanupFailure(cause)) await retryClientConfigurationCleanup(cause, resources);
+						try {
+							await publication.restore(original);
+						} catch {
+							return manualRecovery();
+						}
+						return item(client.name, "failed", `Configuration could not be updated. The original was restored and its backup at ${backupPath} was retained. Repair the configuration or restore that backup, then rerun uninstall.`);
+					}
+				});
 			} catch (cause) {
-				void cause;
-				try {
-					await fileSystem.writeText(transactionPath, original);
-				} catch (restoreCause) {
-					void restoreCause;
-					return item(client.name, "failed", "Configuration could not be updated or restored. Restore its `.rea.backup` manually, then rerun uninstall.");
-				}
-				return item(client.name, "failed", "Configuration could not be updated. The original was restored and its `.rea.backup` was retained. Repair the configuration or restore the backup, then rerun uninstall.");
+				if (isClientConfigurationCleanupFailure(cause)) await retryClientConfigurationCleanup(cause, resources);
+				return item(client.name, "failed", `Configuration verification or resource cleanup failed. The backup at ${backupPath} was retained. Check the configuration and rerun uninstall.`);
 			}
 		};
 		resolveUninstallConfigPath = async (client, fileSystem) => {
@@ -247,12 +288,12 @@ function init_Uninstall() {
 				}).passthrough().safeParse(value);
 				if (!parsed.success) return false;
 				const command = parsed.data.command;
-				return isOwnedClientRegistrationCommand(command, CURRENT_ENTRYPOINT_PATH);
+				return classifyClientRegistrationCommand(command, CURRENT_ENTRYPOINT_PATH) === "owned";
 			}
 			const parsed = registrationSchema.safeParse(value);
 			if (!parsed.success) return false;
 			const { command, args } = parsed.data;
-			return isOwnedClientRegistrationCommand([command, ...args], CURRENT_ENTRYPOINT_PATH);
+			return classifyClientRegistrationCommand([command, ...args], CURRENT_ENTRYPOINT_PATH) === "owned";
 		};
 		purgeManagedData = async (root, fileSystem) => {
 			const names = ["cache", "state"];

package/dist/cli-runtime/{application__UpdateRuntime-DPvY8ohd.js → application__UpdateRuntime-CzWkRJHa.js}

@@ -1,22 +1,92 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { PRODUCT_IDENTITY, err, init_identity, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { ArtifactResourceScope, init_ArtifactResourceScope } from "./ArtifactResourceScope-DQWTcUwE.js";
+import { PRODUCT_IDENTITY, err, init_identity, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { RegularFileCleanupFailure, init_OwnedRegularFile } from "./OwnedRegularFile-D1f5nUCx.js";
+import { ArtifactResourceScope, init_ArtifactResourceScope } from "./ArtifactResourceScope-CokZGcII.js";
 import { init_safeJson, safeParseJson } from "./safeJson-DKKACtdy.js";
-import { homeDirectoryFromEnvironment, init_ClientRegistrationIdentity, init_homeDirectory, isOwnedClientRegistrationCommand, withoutPackageRunnerIdentity } from "./SupportedClients-DaX6Lt2d.js";
-import { existingSkillDestinations, init_SetupSkill } from "./ClientConfigurationDocument-ffQ9X0Se.js";
-import { init_ClientRegistrationStatus, readClientRegistrationInspections } from "./ClientRegistrationStatus-DszCyPEU.js";
-import { init_Update, updateInstallCommand } from "./Update-CbTC_eg1.js";
+import { ProviderProcessSupervisor, init_ProviderProcess } from "./ProviderProcess-D87A7ctp.js";
+import { init_RegularFileRead } from "./RegularFileRead-mbgGYtxe.js";
+import { classifyClientRegistrationCommand, init_ClientRegistrationIdentity, withoutPackageRunnerIdentity } from "./SupportedClients-DMafjitv.js";
+import { homeDirectoryFromEnvironment, init_homeDirectory } from "./homeDirectory-DC_DeJIg.js";
+import { existingSkillDestinations, init_SetupSkill } from "./ClientConfigurationDocument-C9T8MNGc.js";
+import { init_ClientRegistrationStatus, readClientRegistrationInspections } from "./ClientRegistrationStatus-PnD29RTX.js";
+import { init_Update, updateInstallCommand } from "./Update-DAsASWlE.js";
 import { z } from "zod";
 import { basename, dirname, join, resolve } from "node:path";
 import { realpath, stat } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
+import { finished } from "node:stream/promises";
+import { Writable } from "node:stream";
 import { lt, valid } from "semver";
 import spawn from "cross-spawn";
 
+//#region dist/application/UpdateCommandProgress.js
+var UpdateCommandProgress;
+function init_UpdateCommandProgress() {
+	return (init_UpdateCommandProgress = __esmMin((() => {
+		UpdateCommandProgress = class {
+			destination;
+			#streams = [];
+			#sink;
+			#finished;
+			#closing;
+			#failed = false;
+			#pendingWrites = 0;
+			#closed = false;
+			#onDestinationError = (cause) => {
+				this.#sink.destroy(cause);
+			};
+			constructor(destination) {
+				this.destination = destination;
+				this.#sink = new Writable({ write: (chunk, encoding, callback) => {
+					this.#pendingWrites++;
+					destination.write(chunk, encoding, (cause) => {
+						this.#pendingWrites--;
+						callback(cause);
+						setImmediate(() => this.#releaseDestination());
+					});
+				} });
+				this.#finished = finished(this.#sink, { cleanup: true }).then(() => undefined, (cause) => {
+					this.#failed = true;
+					for (const stream of this.#streams) {
+						stream.unpipe(this.#sink);
+						stream.resume();
+					}
+					return cause instanceof Error ? cause : new Error(String(cause));
+				});
+				destination.on("error", this.#onDestinationError);
+			}
+			pipe(stream) {
+				this.#streams.push(stream);
+				if (this.#failed) stream.resume();
+				else stream.pipe(this.#sink, { end: false });
+			}
+			close() {
+				this.#closing ??= this.#close();
+				return this.#closing;
+			}
+			async #close() {
+				for (const stream of this.#streams) stream.unpipe(this.#sink);
+				this.#sink.end();
+				try {
+					return await this.#finished;
+				} finally {
+					this.#closed = true;
+					setImmediate(() => this.#releaseDestination());
+				}
+			}
+			#releaseDestination() {
+				if (this.#closed && this.#pendingWrites === 0) this.destination.off("error", this.#onDestinationError);
+			}
+		};
+	})))();
+}
+
+//#endregion
 //#region dist/application/UpdateMaintenance.js
 var setupPlanSchema, existingMaintenanceScope, planIntegrationMaintenance;
 function init_UpdateMaintenance() {
 	return (init_UpdateMaintenance = __esmMin((() => {
+		init_RegularFileRead();
 		init_ClientRegistrationIdentity();
 		init_ClientRegistrationStatus();
 		init_SetupSkill();
@@ -45,7 +115,7 @@ function init_UpdateMaintenance() {
 			});
 			const clients = [];
 			for (const { status: registration, activation } of registrations) {
-				if (activation !== "enabled" || registration.state !== "aligned" && registration.state !== "stale" || !isOwnedClientRegistrationCommand(registration.command, entryPoint)) continue;
+				if (activation !== "enabled" || registration.state !== "aligned" && registration.state !== "stale" || classifyClientRegistrationCommand(registration.command, entryPoint) !== "owned") continue;
 				clients.push(registration.client);
 			}
 			const skillDestinations = await existingSkillDestinations(home, environment, process.platform, resources);
@@ -106,6 +176,7 @@ function init_UpdateMaintenance() {
 					}))
 				};
 			} catch (cause) {
+				if (resources === undefined && cause instanceof RegularFileCleanupFailure) throw cause;
 				return {
 					status: "unavailable",
 					remediation: cause instanceof Error ? cause.message : String(cause)
@@ -117,10 +188,12 @@ function init_UpdateMaintenance() {
 
 //#endregion
 //#region dist/application/UpdateRuntime.js
-var runUpdateCommand, requireCommandOutput, detectNpmInstallation, nonemptyEnvironment, bunGlobalDirectory, detectBunInstallation, INVALID_NPM_RELEASE_METADATA, BUN_LATEST_VERSION_COMMAND, npmLatestVersionCommand, parseNpmLatestVersion, readNpmLatestVersion, nonemptyVersion, npmReleaseLookup, isFile, packageManagerContext, systemUpdateHost;
+var UPDATE_COMMAND_OUTPUT_BYTES, runUpdateCommand, runUpdateProcess, requireCommandOutput, detectNpmInstallation, nonemptyEnvironment, bunGlobalDirectory, detectBunInstallation, INVALID_NPM_RELEASE_METADATA, BUN_LATEST_VERSION_COMMAND, npmLatestVersionCommand, parseNpmLatestVersion, readNpmLatestVersion, nonemptyVersion, npmReleaseLookup, isFile, packageManagerContext, systemUpdateHost;
 function init_UpdateRuntime() {
 	return (init_UpdateRuntime = __esmMin((() => {
 		init_homeDirectory();
+		init_ProviderProcess();
+		init_UpdateCommandProgress();
 		init_identity();
 		init_ArtifactResourceScope();
 		init_result();
@@ -128,12 +201,11 @@ function init_UpdateRuntime() {
 		init_Update();
 		init_UpdateMaintenance();
 		init_ClientRegistrationIdentity();
-		runUpdateCommand = (command, selectedEnvironment, output = "structured", workingDirectory = undefined) => new Promise((resolveResult) => {
+		UPDATE_COMMAND_OUTPUT_BYTES = 4 * 1024 * 1024;
+		runUpdateCommand = (command, selectedEnvironment, output = "structured", workingDirectory = undefined) => runUpdateProcess(command, selectedEnvironment, output, workingDirectory, "complete");
+		runUpdateProcess = async (command, selectedEnvironment, output, workingDirectory, retention) => {
 			const [executable, ...args] = command;
-			if (executable === undefined) {
-				resolveResult(err("No executable supplied."));
-				return;
-			}
+			if (executable === undefined) return err("No executable supplied.");
 			const environment = withoutPackageRunnerIdentity(selectedEnvironment);
 			const child = spawn(executable, args, {
 				stdio: [
@@ -145,21 +217,39 @@ function init_UpdateRuntime() {
 				windowsHide: true,
 				...workingDirectory === undefined ? {} : { cwd: workingDirectory }
 			});
-			let stdout = "";
-			let stderr = "";
-			child.stdout?.setEncoding("utf8");
-			child.stderr?.setEncoding("utf8");
-			child.stdout?.on("data", (chunk) => {
-				stdout += chunk;
-				if (output === "human") process.stderr.write(chunk);
-			});
-			child.stderr?.on("data", (chunk) => {
-				stderr += chunk;
-				if (output === "human") process.stderr.write(chunk);
+			let processFailure;
+			const supervisor = new ProviderProcessSupervisor({
+				process: child,
+				ownsProcessLifetime: true
+			}, {
+				maxDiagnosticBytes: UPDATE_COMMAND_OUTPUT_BYTES,
+				onDiagnostic: (event) => {
+					if (event.type === "error") processFailure ??= event.message;
+				}
 			});
-			child.once("error", (cause) => resolveResult(err(cause.message)));
-			child.once("close", (code, signal) => resolveResult(code === 0 ? ok(stdout.trim()) : err(stderr.trim() || stdout.trim() || (signal === null ? `Process exited with code ${String(code)}.` : `Process terminated by ${signal}.`))));
-		});
+			const progress = output === "human" ? new UpdateCommandProgress(process.stderr) : undefined;
+			if (progress !== undefined) {
+				for (const stream of [child.stdout, child.stderr]) if (stream !== null) progress.pipe(stream);
+			}
+			try {
+				await supervisor.waitForOutputClose();
+				const progressFailure = await progress?.close();
+				const snapshot = supervisor.snapshot();
+				if (processFailure !== undefined) return err(processFailure);
+				if (snapshot.outputIncomplete === true) return err("Update command output did not close completely.");
+				if (retention === "complete" && snapshot.diagnosticTruncated === true) return err(`Update command output exceeded the ${UPDATE_COMMAND_OUTPUT_BYTES}-byte complete-output retention budget; reply was not accepted.`);
+				if (snapshot.exitCode !== 0 || snapshot.signal !== null) {
+					const detail = snapshot.stderr.text.trim() || snapshot.stdout.text.trim() || (typeof snapshot.signal === "string" ? `Process terminated by ${snapshot.signal}.` : typeof snapshot.exitCode === "number" ? `Process exited with code ${snapshot.exitCode}.` : "Update command failed without a recorded exit status.");
+					return err(snapshot.diagnosticTruncated ? `${detail}\n[Update diagnostics truncated at ${UPDATE_COMMAND_OUTPUT_BYTES} bytes; later output omitted.]` : detail);
+				}
+				if (retention === "complete" && (snapshot.stdout.invalidUtf8 || snapshot.stderr.invalidUtf8)) return err("Update command returned invalid UTF-8; complete output is unavailable.");
+				if (progressFailure !== undefined) return err(`Update progress output failed: ${progressFailure.message}`);
+				return ok(retention === "diagnostics" ? "" : snapshot.stdout.text.trim());
+			} finally {
+				supervisor.dispose();
+				await progress?.close();
+			}
+		};
 		requireCommandOutput = async (command, environment) => {
 			const result = await runUpdateCommand(command, environment);
 			if (!result.ok) throw new Error(result.error);
@@ -318,7 +408,7 @@ function init_UpdateRuntime() {
 				},
 				installVersion: async (installation, version, output) => {
 					const context = packageManagerContext(installation, environment);
-					const result = await runUpdateCommand(updateInstallCommand(installation, version), context.environment, output, context.workingDirectory);
+					const result = await runUpdateProcess(updateInstallCommand(installation, version), context.environment, output, context.workingDirectory, "diagnostics");
 					return result.ok ? ok(undefined) : result;
 				},
 				installedVersion: (installation) => runUpdateCommand([
@@ -342,4 +432,4 @@ function init_UpdateRuntime() {
 
 //#endregion
 init_UpdateRuntime();
-export { BUN_LATEST_VERSION_COMMAND, bunGlobalDirectory, detectBunInstallation, detectNpmInstallation, npmLatestVersionCommand, npmReleaseLookup, parseNpmLatestVersion, runUpdateCommand, systemUpdateHost };
+export { BUN_LATEST_VERSION_COMMAND, UPDATE_COMMAND_OUTPUT_BYTES, bunGlobalDirectory, detectBunInstallation, detectNpmInstallation, npmLatestVersionCommand, npmReleaseLookup, parseNpmLatestVersion, runUpdateCommand, systemUpdateHost };

package/dist/cli-runtime/{application__android__AndroidApplicationService-CFgIFPM4.js → application__android__AndroidApplicationService-shW_aKlj.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { androidApplicationProjectionInputSchema, init_androidApplication, projectAndroidApplication } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { ANDROID_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-DoQRIHii.js";
-import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DIsI4DJ6.js";
+import { androidApplicationProjectionInputSchema, init_androidApplication, projectAndroidApplication } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { ANDROID_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-CFh4a64d.js";
+import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DTH5QAqL.js";
 
 //#region dist/application/android/AndroidApplicationService.js
 var OPERATION, projectAndroidApplicationEvidence;

package/dist/cli-runtime/{application__apple__AppleApplicationService-Db6QCsun.js → application__apple__AppleApplicationService-DIv6d3wB.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { appleApplicationProjectionInputSchema, init_appleApplication, projectAppleApplication } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { APPLE_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-DoQRIHii.js";
-import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DIsI4DJ6.js";
+import { appleApplicationProjectionInputSchema, init_appleApplication, projectAppleApplication } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { APPLE_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-CFh4a64d.js";
+import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DTH5QAqL.js";
 
 //#region dist/application/apple/AppleApplicationService.js
 var OPERATION, projectAppleApplicationEvidence;

package/dist/cli-runtime/{application__harmony__HarmonyApplicationService-CFjocHoK.js → application__harmony__HarmonyApplicationService-OIUFVQFV.js}

@@ -1,7 +1,7 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { harmonyApplicationProjectionInputSchema, init_harmonyApplication, projectHarmonyApplication } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { HARMONY_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-DoQRIHii.js";
-import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DIsI4DJ6.js";
+import { harmonyApplicationProjectionInputSchema, init_harmonyApplication, projectHarmonyApplication } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { HARMONY_APPLICATION_PROVIDER, init_InvestigationProviders } from "./InvestigationProviders-CFh4a64d.js";
+import { init_InventoryProjectionEvidence, projectInventoryEvidence } from "./InventoryProjectionEvidence-DTH5QAqL.js";
 
 //#region dist/application/harmony/HarmonyApplicationService.js
 var OPERATION, projectHarmonyApplicationEvidence;

package/dist/cli-runtime/{application__javascript__ElectronActiveObservationService-CmVDUI_Z.js → application__javascript__ElectronActiveObservationService-wvCh72hK.js}

@@ -1,9 +1,9 @@
 import { __esmMin } from "./rolldown-runtime-DXoylpqc.js";
-import { createEvidence, digestCanonicalValue, err, init_canonicalDigest, init_evidence, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bao0xMr-.js";
-import { AnalysisCapabilityUnavailableError, AnalysisInputError, init_analysisErrorCore, init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-CTRmvMl3.js";
+import { createEvidence, digestCanonicalValue, err, init_canonicalDigest, init_evidence, init_result, ok } from "./reconstructionObligationLedgerSchemas-Bi6sect1.js";
+import { AnalysisCapabilityUnavailableError, AnalysisInputError, init_analysisErrorCore, init_jsonValue, jsonObjectSchema, jsonValueSchema } from "./errorSchemas-Ixz_q7qt.js";
 import { dirname } from "node:path";
-import { access, realpath, stat } from "node:fs/promises";
 import { constants } from "node:fs";
+import { access, realpath, stat } from "node:fs/promises";
 
 //#region dist/application/javascript/ElectronActiveEvidence.js
 var createElectronActiveEvidence, parameters;