remoteclaw 0.1.0-next.da482d8 → 0.1.0-next.db8a792

package/dist/control-auth-CehjYKnL.js

@@ -1,397 +0,0 @@
-import { u as resolveGatewayPort } from "./paths-BTaH3rLn.js";
-import { i as loadConfig, l as writeConfigFile } from "./config-CAa0rZSx.js";
-import { r as isLoopbackHost } from "./net-CNsUGiSw.js";
-import { a as DEFAULT_BROWSER_EVALUATE_ENABLED, c as DEFAULT_REMOTECLAW_BROWSER_PROFILE_NAME, i as DEFAULT_BROWSER_DEFAULT_PROFILE_NAME, o as DEFAULT_REMOTECLAW_BROWSER_COLOR, s as DEFAULT_REMOTECLAW_BROWSER_ENABLED } from "./constants-CRGAZ2ow.js";
-import { a as resolveGatewayAuth } from "./auth-DGqCLaQq.js";
-import crypto from "node:crypto";
-
-//#region src/config/port-defaults.ts
-function isValidPort(port) {
-	return Number.isFinite(port) && port > 0 && port <= 65535;
-}
-function clampPort(port, fallback) {
-	return isValidPort(port) ? port : fallback;
-}
-function derivePort(base, offset, fallback) {
-	return clampPort(base + offset, fallback);
-}
-const DEFAULT_BROWSER_CONTROL_PORT = 18791;
-const DEFAULT_BROWSER_CDP_PORT_RANGE_START = 18800;
-const DEFAULT_BROWSER_CDP_PORT_RANGE_END = 18899;
-function deriveDefaultBrowserControlPort(gatewayPort) {
-	return derivePort(gatewayPort, 2, DEFAULT_BROWSER_CONTROL_PORT);
-}
-function deriveDefaultBrowserCdpPortRange(browserControlPort) {
-	const start = derivePort(browserControlPort, 9, DEFAULT_BROWSER_CDP_PORT_RANGE_START);
-	const end = clampPort(start + (DEFAULT_BROWSER_CDP_PORT_RANGE_END - DEFAULT_BROWSER_CDP_PORT_RANGE_START), DEFAULT_BROWSER_CDP_PORT_RANGE_END);
-	if (end < start) return {
-		start,
-		end: start
-	};
-	return {
-		start,
-		end
-	};
-}
-
-//#endregion
-//#region src/browser/profiles.ts
-/**
-* CDP port allocation for browser profiles.
-*
-* Default port range: 18800-18899 (100 profiles max)
-* Ports are allocated once at profile creation and persisted in config.
-* Multi-instance: callers may pass an explicit range to avoid collisions.
-*
-* Reserved ports (do not use for CDP):
-*   18789 - Gateway WebSocket
-*   18790 - Bridge
-*   18791 - Browser control server
-*   18792-18799 - Reserved for future one-off services (canvas at 18793)
-*/
-const CDP_PORT_RANGE_START = 18800;
-const CDP_PORT_RANGE_END = 18899;
-const PROFILE_NAME_REGEX = /^[a-z0-9][a-z0-9-]*$/;
-function isValidProfileName(name) {
-	if (!name || name.length > 64) return false;
-	return PROFILE_NAME_REGEX.test(name);
-}
-function allocateCdpPort(usedPorts, range) {
-	const start = range?.start ?? CDP_PORT_RANGE_START;
-	const end = range?.end ?? CDP_PORT_RANGE_END;
-	if (!Number.isFinite(start) || !Number.isFinite(end) || start <= 0 || end <= 0) return null;
-	if (start > end) return null;
-	for (let port = start; port <= end; port++) if (!usedPorts.has(port)) return port;
-	return null;
-}
-function getUsedPorts(profiles) {
-	if (!profiles) return /* @__PURE__ */ new Set();
-	const used = /* @__PURE__ */ new Set();
-	for (const profile of Object.values(profiles)) {
-		if (typeof profile.cdpPort === "number") {
-			used.add(profile.cdpPort);
-			continue;
-		}
-		const rawUrl = profile.cdpUrl?.trim();
-		if (!rawUrl) continue;
-		try {
-			const parsed = new URL(rawUrl);
-			const port = parsed.port && Number.parseInt(parsed.port, 10) > 0 ? Number.parseInt(parsed.port, 10) : parsed.protocol === "https:" ? 443 : 80;
-			if (!Number.isNaN(port) && port > 0 && port <= 65535) used.add(port);
-		} catch {}
-	}
-	return used;
-}
-const PROFILE_COLORS = [
-	"#FF4500",
-	"#0066CC",
-	"#00AA00",
-	"#9933FF",
-	"#FF6699",
-	"#00CCCC",
-	"#FF9900",
-	"#6666FF",
-	"#CC3366",
-	"#339966"
-];
-function allocateColor(usedColors) {
-	for (const color of PROFILE_COLORS) if (!usedColors.has(color.toUpperCase())) return color;
-	return PROFILE_COLORS[usedColors.size % PROFILE_COLORS.length] ?? PROFILE_COLORS[0];
-}
-function getUsedColors(profiles) {
-	if (!profiles) return /* @__PURE__ */ new Set();
-	return new Set(Object.values(profiles).map((p) => p.color.toUpperCase()));
-}
-
-//#endregion
-//#region src/browser/config.ts
-function normalizeHexColor(raw) {
-	const value = (raw ?? "").trim();
-	if (!value) return DEFAULT_REMOTECLAW_BROWSER_COLOR;
-	const normalized = value.startsWith("#") ? value : `#${value}`;
-	if (!/^#[0-9a-fA-F]{6}$/.test(normalized)) return DEFAULT_REMOTECLAW_BROWSER_COLOR;
-	return normalized.toUpperCase();
-}
-function normalizeTimeoutMs(raw, fallback) {
-	const value = typeof raw === "number" && Number.isFinite(raw) ? Math.floor(raw) : fallback;
-	return value < 0 ? fallback : value;
-}
-function normalizeStringList(raw) {
-	if (!Array.isArray(raw) || raw.length === 0) return;
-	const values = raw.map((value) => value.trim()).filter((value) => value.length > 0);
-	return values.length > 0 ? values : void 0;
-}
-function resolveBrowserSsrFPolicy(cfg) {
-	const allowPrivateNetwork = cfg?.ssrfPolicy?.allowPrivateNetwork;
-	const dangerouslyAllowPrivateNetwork = cfg?.ssrfPolicy?.dangerouslyAllowPrivateNetwork;
-	const allowedHostnames = normalizeStringList(cfg?.ssrfPolicy?.allowedHostnames);
-	const hostnameAllowlist = normalizeStringList(cfg?.ssrfPolicy?.hostnameAllowlist);
-	const hasExplicitPrivateSetting = allowPrivateNetwork !== void 0 || dangerouslyAllowPrivateNetwork !== void 0;
-	const resolvedAllowPrivateNetwork = dangerouslyAllowPrivateNetwork === true || allowPrivateNetwork === true || !hasExplicitPrivateSetting;
-	if (!resolvedAllowPrivateNetwork && !hasExplicitPrivateSetting && !allowedHostnames && !hostnameAllowlist) return;
-	return {
-		...resolvedAllowPrivateNetwork ? { dangerouslyAllowPrivateNetwork: true } : {},
-		...allowedHostnames ? { allowedHostnames } : {},
-		...hostnameAllowlist ? { hostnameAllowlist } : {}
-	};
-}
-function parseHttpUrl(raw, label) {
-	const trimmed = raw.trim();
-	const parsed = new URL(trimmed);
-	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error(`${label} must be http(s), got: ${parsed.protocol.replace(":", "")}`);
-	const port = parsed.port && Number.parseInt(parsed.port, 10) > 0 ? Number.parseInt(parsed.port, 10) : parsed.protocol === "https:" ? 443 : 80;
-	if (Number.isNaN(port) || port <= 0 || port > 65535) throw new Error(`${label} has invalid port: ${parsed.port}`);
-	return {
-		parsed,
-		port,
-		normalized: parsed.toString().replace(/\/$/, "")
-	};
-}
-/**
-* Ensure the default "remoteclaw" profile exists in the profiles map.
-* Auto-creates it with the legacy CDP port (from browser.cdpUrl) or first port if missing.
-*/
-function ensureDefaultProfile(profiles, defaultColor, legacyCdpPort, derivedDefaultCdpPort) {
-	const result = { ...profiles };
-	if (!result[DEFAULT_REMOTECLAW_BROWSER_PROFILE_NAME]) result[DEFAULT_REMOTECLAW_BROWSER_PROFILE_NAME] = {
-		cdpPort: legacyCdpPort ?? derivedDefaultCdpPort ?? CDP_PORT_RANGE_START,
-		color: defaultColor
-	};
-	return result;
-}
-/**
-* Ensure a built-in "chrome" profile exists for the Chrome extension relay.
-*
-* Note: this is an RemoteClaw browser profile (routing config), not a Chrome user profile.
-* It points at the local relay CDP endpoint (controlPort + 1).
-*/
-function ensureDefaultChromeExtensionProfile(profiles, controlPort) {
-	const result = { ...profiles };
-	if (result.chrome) return result;
-	const relayPort = controlPort + 1;
-	if (!Number.isFinite(relayPort) || relayPort <= 0 || relayPort > 65535) return result;
-	if (getUsedPorts(result).has(relayPort)) return result;
-	result.chrome = {
-		driver: "extension",
-		cdpUrl: `http://127.0.0.1:${relayPort}`,
-		color: "#00AA00"
-	};
-	return result;
-}
-function resolveBrowserConfig(cfg, rootConfig) {
-	const enabled = cfg?.enabled ?? DEFAULT_REMOTECLAW_BROWSER_ENABLED;
-	const evaluateEnabled = cfg?.evaluateEnabled ?? DEFAULT_BROWSER_EVALUATE_ENABLED;
-	const controlPort = deriveDefaultBrowserControlPort(resolveGatewayPort(rootConfig) ?? DEFAULT_BROWSER_CONTROL_PORT);
-	const defaultColor = normalizeHexColor(cfg?.color);
-	const remoteCdpTimeoutMs = normalizeTimeoutMs(cfg?.remoteCdpTimeoutMs, 1500);
-	const remoteCdpHandshakeTimeoutMs = normalizeTimeoutMs(cfg?.remoteCdpHandshakeTimeoutMs, Math.max(2e3, remoteCdpTimeoutMs * 2));
-	const derivedCdpRange = deriveDefaultBrowserCdpPortRange(controlPort);
-	const rawCdpUrl = (cfg?.cdpUrl ?? "").trim();
-	let cdpInfo;
-	if (rawCdpUrl) cdpInfo = parseHttpUrl(rawCdpUrl, "browser.cdpUrl");
-	else {
-		const derivedPort = controlPort + 1;
-		if (derivedPort > 65535) throw new Error(`Derived CDP port (${derivedPort}) is too high; check gateway port configuration.`);
-		const derived = new URL(`http://127.0.0.1:${derivedPort}`);
-		cdpInfo = {
-			parsed: derived,
-			port: derivedPort,
-			normalized: derived.toString().replace(/\/$/, "")
-		};
-	}
-	const headless = cfg?.headless === true;
-	const noSandbox = cfg?.noSandbox === true;
-	const attachOnly = cfg?.attachOnly === true;
-	const executablePath = cfg?.executablePath?.trim() || void 0;
-	const defaultProfileFromConfig = cfg?.defaultProfile?.trim() || void 0;
-	const legacyCdpPort = rawCdpUrl ? cdpInfo.port : void 0;
-	const profiles = ensureDefaultChromeExtensionProfile(ensureDefaultProfile(cfg?.profiles, defaultColor, legacyCdpPort, derivedCdpRange.start), controlPort);
-	const cdpProtocol = cdpInfo.parsed.protocol === "https:" ? "https" : "http";
-	const defaultProfile = defaultProfileFromConfig ?? (profiles[DEFAULT_BROWSER_DEFAULT_PROFILE_NAME] ? DEFAULT_BROWSER_DEFAULT_PROFILE_NAME : DEFAULT_REMOTECLAW_BROWSER_PROFILE_NAME);
-	const extraArgs = Array.isArray(cfg?.extraArgs) ? cfg.extraArgs.filter((a) => typeof a === "string" && a.trim().length > 0) : [];
-	const ssrfPolicy = resolveBrowserSsrFPolicy(cfg);
-	return {
-		enabled,
-		evaluateEnabled,
-		controlPort,
-		cdpProtocol,
-		cdpHost: cdpInfo.parsed.hostname,
-		cdpIsLoopback: isLoopbackHost(cdpInfo.parsed.hostname),
-		remoteCdpTimeoutMs,
-		remoteCdpHandshakeTimeoutMs,
-		color: defaultColor,
-		executablePath,
-		headless,
-		noSandbox,
-		attachOnly,
-		defaultProfile,
-		profiles,
-		ssrfPolicy,
-		extraArgs
-	};
-}
-/**
-* Resolve a profile by name from the config.
-* Returns null if the profile doesn't exist.
-*/
-function resolveProfile(resolved, profileName) {
-	const profile = resolved.profiles[profileName];
-	if (!profile) return null;
-	const rawProfileUrl = profile.cdpUrl?.trim() ?? "";
-	let cdpHost = resolved.cdpHost;
-	let cdpPort = profile.cdpPort ?? 0;
-	let cdpUrl = "";
-	const driver = profile.driver === "extension" ? "extension" : "remoteclaw";
-	if (rawProfileUrl) {
-		const parsed = parseHttpUrl(rawProfileUrl, `browser.profiles.${profileName}.cdpUrl`);
-		cdpHost = parsed.parsed.hostname;
-		cdpPort = parsed.port;
-		cdpUrl = parsed.normalized;
-	} else if (cdpPort) cdpUrl = `${resolved.cdpProtocol}://${resolved.cdpHost}:${cdpPort}`;
-	else throw new Error(`Profile "${profileName}" must define cdpPort or cdpUrl.`);
-	return {
-		name: profileName,
-		cdpPort,
-		cdpUrl,
-		cdpHost,
-		cdpIsLoopback: isLoopbackHost(cdpHost),
-		color: profile.color,
-		driver
-	};
-}
-
-//#endregion
-//#region src/gateway/startup-auth.ts
-function mergeGatewayTailscaleConfig(base, override) {
-	const merged = { ...base };
-	if (!override) return merged;
-	if (override.mode !== void 0) merged.mode = override.mode;
-	if (override.resetOnExit !== void 0) merged.resetOnExit = override.resetOnExit;
-	return merged;
-}
-function resolveGatewayAuthFromConfig(params) {
-	const tailscaleConfig = mergeGatewayTailscaleConfig(params.cfg.gateway?.tailscale, params.tailscaleOverride);
-	return resolveGatewayAuth({
-		authConfig: params.cfg.gateway?.auth,
-		authOverride: params.authOverride,
-		env: params.env,
-		tailscaleMode: tailscaleConfig.mode ?? "off"
-	});
-}
-function shouldPersistGeneratedToken(params) {
-	if (!params.persistRequested) return false;
-	if (params.resolvedAuth.modeSource === "override") return false;
-	return true;
-}
-async function ensureGatewayStartupAuth(params) {
-	const env = params.env ?? process.env;
-	const persistRequested = params.persist === true;
-	const resolved = resolveGatewayAuthFromConfig({
-		cfg: params.cfg,
-		env,
-		authOverride: params.authOverride,
-		tailscaleOverride: params.tailscaleOverride
-	});
-	if (resolved.mode !== "token" || (resolved.token?.trim().length ?? 0) > 0) {
-		assertHooksTokenSeparateFromGatewayAuth({
-			cfg: params.cfg,
-			auth: resolved
-		});
-		return {
-			cfg: params.cfg,
-			auth: resolved,
-			persistedGeneratedToken: false
-		};
-	}
-	const generatedToken = crypto.randomBytes(24).toString("hex");
-	const nextCfg = {
-		...params.cfg,
-		gateway: {
-			...params.cfg.gateway,
-			auth: {
-				...params.cfg.gateway?.auth,
-				mode: "token",
-				token: generatedToken
-			}
-		}
-	};
-	const persist = shouldPersistGeneratedToken({
-		persistRequested,
-		resolvedAuth: resolved
-	});
-	if (persist) await writeConfigFile(nextCfg);
-	const nextAuth = resolveGatewayAuthFromConfig({
-		cfg: nextCfg,
-		env,
-		authOverride: params.authOverride,
-		tailscaleOverride: params.tailscaleOverride
-	});
-	assertHooksTokenSeparateFromGatewayAuth({
-		cfg: nextCfg,
-		auth: nextAuth
-	});
-	return {
-		cfg: nextCfg,
-		auth: nextAuth,
-		generatedToken,
-		persistedGeneratedToken: persist
-	};
-}
-function assertHooksTokenSeparateFromGatewayAuth(params) {
-	if (params.cfg.hooks?.enabled !== true) return;
-	const hooksToken = typeof params.cfg.hooks.token === "string" ? params.cfg.hooks.token.trim() : "";
-	if (!hooksToken) return;
-	const gatewayToken = params.auth.mode === "token" && typeof params.auth.token === "string" ? params.auth.token.trim() : "";
-	if (!gatewayToken) return;
-	if (hooksToken !== gatewayToken) return;
-	throw new Error("Invalid config: hooks.token must not match gateway auth token. Set a distinct hooks.token for hook ingress.");
-}
-
-//#endregion
-//#region src/browser/control-auth.ts
-function resolveBrowserControlAuth(cfg, env = process.env) {
-	const auth = resolveGatewayAuth({
-		authConfig: cfg?.gateway?.auth,
-		env,
-		tailscaleMode: cfg?.gateway?.tailscale?.mode
-	});
-	const token = typeof auth.token === "string" ? auth.token.trim() : "";
-	const password = typeof auth.password === "string" ? auth.password.trim() : "";
-	return {
-		token: token || void 0,
-		password: password || void 0
-	};
-}
-function shouldAutoGenerateBrowserAuth(env) {
-	if ((env.NODE_ENV ?? "").trim().toLowerCase() === "test") return false;
-	const vitest = (env.VITEST ?? "").trim().toLowerCase();
-	if (vitest && vitest !== "0" && vitest !== "false" && vitest !== "off") return false;
-	return true;
-}
-async function ensureBrowserControlAuth(params) {
-	const env = params.env ?? process.env;
-	const auth = resolveBrowserControlAuth(params.cfg, env);
-	if (auth.token || auth.password) return { auth };
-	if (!shouldAutoGenerateBrowserAuth(env)) return { auth };
-	if (params.cfg.gateway?.auth?.mode === "password") return { auth };
-	if (params.cfg.gateway?.auth?.mode === "none") return { auth };
-	if (params.cfg.gateway?.auth?.mode === "trusted-proxy") return { auth };
-	const latestCfg = loadConfig();
-	const latestAuth = resolveBrowserControlAuth(latestCfg, env);
-	if (latestAuth.token || latestAuth.password) return { auth: latestAuth };
-	if (latestCfg.gateway?.auth?.mode === "password") return { auth: latestAuth };
-	if (latestCfg.gateway?.auth?.mode === "none") return { auth: latestAuth };
-	if (latestCfg.gateway?.auth?.mode === "trusted-proxy") return { auth: latestAuth };
-	const ensured = await ensureGatewayStartupAuth({
-		cfg: latestCfg,
-		env,
-		persist: true
-	});
-	return {
-		auth: resolveBrowserControlAuth(ensured.cfg, env),
-		generatedToken: ensured.generatedToken
-	};
-}
-
-//#endregion
-export { parseHttpUrl as a, allocateCdpPort as c, getUsedPorts as d, isValidProfileName as f, mergeGatewayTailscaleConfig as i, allocateColor as l, resolveBrowserControlAuth as n, resolveBrowserConfig as o, deriveDefaultBrowserCdpPortRange as p, ensureGatewayStartupAuth as r, resolveProfile as s, ensureBrowserControlAuth as t, getUsedColors as u };

package/dist/control-ui-assets-D8F383Mo.js

@@ -1,186 +0,0 @@
-import { _ as defaultRuntime } from "./entry.js";
-import { t as runCommandWithTimeout } from "./exec-D_s-zAtY.js";
-import { n as resolveRemoteClawPackageRootSync, t as resolveRemoteClawPackageRoot } from "./remoteclaw-root-CgNyrbxc.js";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-import fs from "node:fs";
-
-//#region src/infra/control-ui-assets.ts
-const CONTROL_UI_DIST_PATH_SEGMENTS = [
-	"dist",
-	"control-ui",
-	"index.html"
-];
-function resolveControlUiDistIndexPathForRoot(root) {
-	return path.join(root, ...CONTROL_UI_DIST_PATH_SEGMENTS);
-}
-async function resolveControlUiDistIndexHealth(opts = {}) {
-	const indexPath = opts.root ? resolveControlUiDistIndexPathForRoot(opts.root) : await resolveControlUiDistIndexPath({
-		argv1: opts.argv1 ?? process.argv[1],
-		moduleUrl: opts.moduleUrl
-	});
-	return {
-		indexPath,
-		exists: Boolean(indexPath && fs.existsSync(indexPath))
-	};
-}
-function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
-	if (!argv1) return null;
-	const normalized = path.resolve(argv1);
-	const parts = normalized.split(path.sep);
-	const srcIndex = parts.lastIndexOf("src");
-	if (srcIndex !== -1) {
-		const root = parts.slice(0, srcIndex).join(path.sep);
-		if (fs.existsSync(path.join(root, "ui", "vite.config.ts"))) return root;
-	}
-	let dir = path.dirname(normalized);
-	for (let i = 0; i < 8; i++) {
-		if (fs.existsSync(path.join(dir, "package.json")) && fs.existsSync(path.join(dir, "ui", "vite.config.ts"))) return dir;
-		const parent = path.dirname(dir);
-		if (parent === dir) break;
-		dir = parent;
-	}
-	return null;
-}
-async function resolveControlUiDistIndexPath(argv1OrOpts) {
-	const argv1 = typeof argv1OrOpts === "string" ? argv1OrOpts : argv1OrOpts?.argv1 ?? process.argv[1];
-	const moduleUrl = typeof argv1OrOpts === "object" ? argv1OrOpts?.moduleUrl : void 0;
-	if (!argv1) return null;
-	const normalized = path.resolve(argv1);
-	const distDir = path.dirname(normalized);
-	if (path.basename(distDir) === "dist") return path.join(distDir, "control-ui", "index.html");
-	const packageRoot = await resolveRemoteClawPackageRoot({
-		argv1: normalized,
-		moduleUrl
-	});
-	if (packageRoot) return path.join(packageRoot, "dist", "control-ui", "index.html");
-	let dir = path.dirname(normalized);
-	for (let i = 0; i < 8; i++) {
-		const pkgJsonPath = path.join(dir, "package.json");
-		const indexPath = path.join(dir, "dist", "control-ui", "index.html");
-		if (fs.existsSync(pkgJsonPath)) try {
-			const raw = fs.readFileSync(pkgJsonPath, "utf-8");
-			if (JSON.parse(raw).name === "remoteclaw") return fs.existsSync(indexPath) ? indexPath : null;
-			return null;
-		} catch {
-			return null;
-		}
-		const parent = path.dirname(dir);
-		if (parent === dir) break;
-		dir = parent;
-	}
-	return null;
-}
-function addCandidate(candidates, value) {
-	if (!value) return;
-	candidates.add(path.resolve(value));
-}
-function resolveControlUiRootOverrideSync(rootOverride) {
-	const resolved = path.resolve(rootOverride);
-	try {
-		const stats = fs.statSync(resolved);
-		if (stats.isFile()) return path.basename(resolved) === "index.html" ? path.dirname(resolved) : null;
-		if (stats.isDirectory()) {
-			const indexPath = path.join(resolved, "index.html");
-			return fs.existsSync(indexPath) ? resolved : null;
-		}
-	} catch {
-		return null;
-	}
-	return null;
-}
-function resolveControlUiRootSync(opts = {}) {
-	const candidates = /* @__PURE__ */ new Set();
-	const argv1 = opts.argv1 ?? process.argv[1];
-	const cwd = opts.cwd ?? process.cwd();
-	const moduleDir = opts.moduleUrl ? path.dirname(fileURLToPath(opts.moduleUrl)) : null;
-	const argv1Dir = argv1 ? path.dirname(path.resolve(argv1)) : null;
-	const execDir = (() => {
-		try {
-			const execPath = opts.execPath ?? process.execPath;
-			return path.dirname(fs.realpathSync(execPath));
-		} catch {
-			return null;
-		}
-	})();
-	const packageRoot = resolveRemoteClawPackageRootSync({
-		argv1,
-		moduleUrl: opts.moduleUrl,
-		cwd
-	});
-	addCandidate(candidates, execDir ? path.join(execDir, "control-ui") : null);
-	if (moduleDir) {
-		addCandidate(candidates, path.join(moduleDir, "control-ui"));
-		addCandidate(candidates, path.join(moduleDir, "../control-ui"));
-		addCandidate(candidates, path.join(moduleDir, "../../dist/control-ui"));
-	}
-	if (argv1Dir) {
-		addCandidate(candidates, path.join(argv1Dir, "dist", "control-ui"));
-		addCandidate(candidates, path.join(argv1Dir, "control-ui"));
-	}
-	if (packageRoot) addCandidate(candidates, path.join(packageRoot, "dist", "control-ui"));
-	addCandidate(candidates, path.join(cwd, "dist", "control-ui"));
-	for (const dir of candidates) {
-		const indexPath = path.join(dir, "index.html");
-		if (fs.existsSync(indexPath)) return dir;
-	}
-	return null;
-}
-function summarizeCommandOutput(text) {
-	const lines = text.split(/\r?\n/g).map((l) => l.trim()).filter(Boolean);
-	if (!lines.length) return;
-	const last = lines.at(-1);
-	if (!last) return;
-	return last.length > 240 ? `${last.slice(0, 239)}…` : last;
-}
-async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
-	const health = await resolveControlUiDistIndexHealth({ argv1: process.argv[1] });
-	const indexFromDist = health.indexPath;
-	if (health.exists) return {
-		ok: true,
-		built: false
-	};
-	const repoRoot = resolveControlUiRepoRoot(process.argv[1]);
-	if (!repoRoot) return {
-		ok: false,
-		built: false,
-		message: `${indexFromDist ? `Missing Control UI assets at ${indexFromDist}` : "Missing Control UI assets"}. Build them with \`pnpm ui:build\` (auto-installs UI deps).`
-	};
-	const indexPath = resolveControlUiDistIndexPathForRoot(repoRoot);
-	if (fs.existsSync(indexPath)) return {
-		ok: true,
-		built: false
-	};
-	const uiScript = path.join(repoRoot, "scripts", "ui.js");
-	if (!fs.existsSync(uiScript)) return {
-		ok: false,
-		built: false,
-		message: `Control UI assets missing but ${uiScript} is unavailable.`
-	};
-	runtime.log("Control UI assets missing; building (ui:build, auto-installs UI deps)…");
-	const build = await runCommandWithTimeout([
-		process.execPath,
-		uiScript,
-		"build"
-	], {
-		cwd: repoRoot,
-		timeoutMs: opts?.timeoutMs ?? 10 * 6e4
-	});
-	if (build.code !== 0) return {
-		ok: false,
-		built: false,
-		message: `Control UI build failed: ${summarizeCommandOutput(build.stderr) ?? `exit ${build.code}`}`
-	};
-	if (!fs.existsSync(indexPath)) return {
-		ok: false,
-		built: true,
-		message: `Control UI build completed but ${indexPath} is still missing.`
-	};
-	return {
-		ok: true,
-		built: true
-	};
-}
-
-//#endregion
-export { resolveControlUiRootSync as a, resolveControlUiRootOverrideSync as i, resolveControlUiDistIndexHealth as n, resolveControlUiDistIndexPathForRoot as r, ensureControlUiAssetsBuilt as t };