ugly-app 0.1.743 → 0.1.745

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.743";
+export declare const CLI_VERSION = "0.1.745";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.743";
+export const CLI_VERSION = "0.1.745";
 //# sourceMappingURL=version.js.map

package/dist/markdown/client/ProseMirrorEditor/schema.d.ts

@@ -5,13 +5,14 @@
  * Supports GFM (tables, task lists, strikethrough) and custom nodes (mentions, bot tags).
  */
 import { Schema } from 'prosemirror-model';
-export declare const schema: Schema<"text" | "image" | "blockquote" | "table" | "svg" | "heading" | "paragraph" | "latex" | "mermaid" | "mention" | "table_row" | "table_cell" | "table_header" | "doc" | "code_block" | "horizontal_rule" | "bullet_list" | "ordered_list" | "list_item" | "hard_break" | "bot_tag" | "vegalite" | "markmap", "code" | "strong" | "link" | "em" | "strikethrough" | "highlight" | "comment_anchor">;
+export declare const schema: Schema<"text" | "image" | "blockquote" | "table" | "svg" | "doc" | "heading" | "paragraph" | "latex" | "mermaid" | "mention" | "table_row" | "table_cell" | "table_header" | "code_block" | "horizontal_rule" | "bullet_list" | "ordered_list" | "list_item" | "hard_break" | "bot_tag" | "vegalite" | "markmap", "code" | "strong" | "link" | "em" | "strikethrough" | "highlight" | "comment_anchor">;
 export declare const nodeTypes: {
     readonly text: import("prosemirror-model").NodeType;
     readonly image: import("prosemirror-model").NodeType;
     readonly blockquote: import("prosemirror-model").NodeType;
     readonly table: import("prosemirror-model").NodeType;
     readonly svg: import("prosemirror-model").NodeType;
+    readonly doc: import("prosemirror-model").NodeType;
     readonly heading: import("prosemirror-model").NodeType;
     readonly paragraph: import("prosemirror-model").NodeType;
     readonly latex: import("prosemirror-model").NodeType;
@@ -20,7 +21,6 @@ export declare const nodeTypes: {
     readonly table_row: import("prosemirror-model").NodeType;
     readonly table_cell: import("prosemirror-model").NodeType;
     readonly table_header: import("prosemirror-model").NodeType;
-    readonly doc: import("prosemirror-model").NodeType;
     readonly code_block: import("prosemirror-model").NodeType;
     readonly horizontal_rule: import("prosemirror-model").NodeType;
     readonly bullet_list: import("prosemirror-model").NodeType;

package/dist/native/bundledTools.d.ts

@@ -0,0 +1,15 @@
+export interface BundledTool {
+    /** Request/grant key and default spawn name, e.g. 'pnpm'. */
+    name: string;
+    /** Executable basename when it differs from `name` (e.g. imagemagick → magick). */
+    exe?: string;
+    category: 'toolchain' | 'media' | 'data' | 'doc' | 'net';
+    /** Must be on PATH for `bash -lc` invocations (node/git/pnpm/uv/python). */
+    shellTool?: boolean;
+    /** Shown in the permission prompt, like mic/camera copy. */
+    description: string;
+}
+export declare const BUNDLED_TOOLS: readonly BundledTool[];
+/** Look up a tool descriptor by its request/grant name. */
+export declare function bundledTool(name: string): BundledTool | undefined;
+//# sourceMappingURL=bundledTools.d.ts.map

package/dist/native/bundledTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledTools.d.ts","sourceRoot":"","sources":["../../src/native/bundledTools.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAAC;IACzD,4EAA4E;IAC5E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAyB9C,CAAC;AAIH,2DAA2D;AAC3D,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAEjE"}

package/dist/native/bundledTools.js

@@ -0,0 +1,36 @@
+// The catalog of bundled command-line tools an app may request through the
+// permission system (like mic/camera). This is VOCABULARY ONLY — names and
+// static metadata. Versions, download sources, install, PATH, and upgrade all
+// live in the host (ugly-studio); ugly-app never touches a binary.
+export const BUNDLED_TOOLS = Object.freeze([
+    // toolchain — needed on PATH so shells (`bash -lc 'pnpm dev'`) resolve them.
+    { name: 'node', category: 'toolchain', shellTool: true, description: 'Node.js runtime — runs your project and its build tools.' },
+    { name: 'git', category: 'toolchain', shellTool: true, description: 'Git — version control for your project.' },
+    { name: 'pnpm', category: 'toolchain', shellTool: true, description: 'pnpm — installs your project’s dependencies.' },
+    { name: 'uv', category: 'toolchain', shellTool: true, description: 'uv — fast Python package manager.' },
+    { name: 'python', exe: 'python3', category: 'toolchain', shellTool: true, description: 'Python runtime.' },
+    // net
+    { name: 'gh', category: 'net', description: 'GitHub CLI — sign in and manage repositories.' },
+    { name: 'cloudflared', category: 'net', description: 'Cloudflare tunnel — exposes your local preview at a public URL.' },
+    { name: 'nats', category: 'net', description: 'NATS CLI — messaging server tooling.' },
+    // data
+    { name: 'postgres', category: 'data', description: 'PostgreSQL — local database for your project.' },
+    { name: 'jq', category: 'data', description: 'jq — command-line JSON processor.' },
+    { name: 'yq', category: 'data', description: 'yq — command-line YAML processor.' },
+    { name: 'pup', category: 'data', description: 'pup — command-line HTML parser.' },
+    { name: 'sqlite3', category: 'data', description: 'SQLite — command-line database shell.' },
+    // media
+    { name: 'ffmpeg', category: 'media', description: 'FFmpeg — audio/video processing.' },
+    { name: 'imagemagick', exe: 'magick', category: 'media', description: 'ImageMagick — image conversion and editing.' },
+    { name: 'yt-dlp', category: 'media', description: 'yt-dlp — download media from the web.' },
+    // doc
+    { name: 'pandoc', category: 'doc', description: 'Pandoc — document format conversion.' },
+    { name: 'pdftotext', category: 'doc', description: 'pdftotext — extract text from PDFs.' },
+    { name: 'tesseract', category: 'doc', description: 'Tesseract — OCR text from images.' },
+]);
+const BY_NAME = new Map(BUNDLED_TOOLS.map((t) => [t.name, t]));
+/** Look up a tool descriptor by its request/grant name. */
+export function bundledTool(name) {
+    return BY_NAME.get(name);
+}
+//# sourceMappingURL=bundledTools.js.map

package/dist/native/bundledTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundledTools.js","sourceRoot":"","sources":["../../src/native/bundledTools.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2EAA2E;AAC3E,8EAA8E;AAC9E,mEAAmE;AAcnE,MAAM,CAAC,MAAM,aAAa,GAA2B,MAAM,CAAC,MAAM,CAAC;IACjE,6EAA6E;IAC7E,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,0DAA0D,EAAE;IACjI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,yCAAyC,EAAE;IAC/G,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,8CAA8C,EAAE;IACrH,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,mCAAmC,EAAE;IACxG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAC1G,MAAM;IACN,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,+CAA+C,EAAE;IAC7F,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,iEAAiE,EAAE;IACxH,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,sCAAsC,EAAE;IACtF,OAAO;IACP,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,+CAA+C,EAAE;IACpG,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,mCAAmC,EAAE;IAClF,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,mCAAmC,EAAE;IAClF,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,iCAAiC,EAAE;IACjF,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,uCAAuC,EAAE;IAC3F,QAAQ;IACR,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,kCAAkC,EAAE;IACtF,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,6CAA6C,EAAE;IACrH,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,uCAAuC,EAAE;IAC3F,MAAM;IACN,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,sCAAsC,EAAE;IACxF,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qCAAqC,EAAE;IAC1F,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,mCAAmC,EAAE;CACzF,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/D,2DAA2D;AAC3D,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC"}

package/dist/native/index.d.ts

@@ -20,6 +20,7 @@ export { taskEntryUrl } from './facades/task.js';
 export { defineTask, taskContext } from './defineTask.js';
 export type { TaskDefinition, TaskContext } from './defineTask.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
+export { BUNDLED_TOOLS, bundledTool, type BundledTool } from './bundledTools.js';
 export { createProxyClient, nativeSigner } from './proxyClient.js';
 export { createProxyHost } from './proxyHost.js';
 export type { ProxyHost, ProxyHostOpts } from './proxyHost.js';

package/dist/native/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/D,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvI,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,cAAc,EACd,OAAO,EACP,WAAW,EACX,SAAS,EACT,QAAQ,EACR,MAAM,EACN,SAAS,EACT,cAAc,EACd,aAAa,EACb,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,EACT,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,aAAa,EACb,aAAa,EACb,QAAQ,EACR,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,eAAe,EACf,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGjF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/D,YAAY,EACV,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACvI,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/index.js

@@ -10,6 +10,7 @@ export { taskEntryUrl } from './facades/task.js';
 // Background-task authoring SDK (used inside a task bundle, not the app shell).
 export { defineTask, taskContext } from './defineTask.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
+export { BUNDLED_TOOLS, bundledTool } from './bundledTools.js';
 // ── Ugly Proxy (remote UglyNative over WebRTC) ──
 export { createProxyClient, nativeSigner } from './proxyClient.js';
 export { createProxyHost } from './proxyHost.js';

package/dist/native/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,0EAA0E;AAC1E,wFAAwF;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUtF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,mDAAmD;AACnD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEvI,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/native/index.ts"],"names":[],"mappings":"AA0CA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE/E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,0EAA0E;AAC1E,wFAAwF;AACxF,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUtF,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,gFAAgF;AAChF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAEjF,mDAAmD;AACnD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEvI,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/native/server/index.d.ts

@@ -12,5 +12,4 @@ export { CapabilityGate, type GateConfig, PermissionDenied } from './permissions
 export { GrantStore, type GrantSnapshot } from './permissions/grants.js';
 export { isWithinScope, originScopeDir, resolveScopedPath, ScopeViolation } from './permissions/scope.js';
 export { type CapabilityRequest, EMPTY_GRANT, type OriginGrant, type PermissionDecision, } from './permissions/types.js';
-export { type BinaryProvisionConfig, ensureBundledTool, findBundledTool, resolveBundledBinary, } from './binaries.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/native/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EACL,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,KAAK,UAAU,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EACL,KAAK,iBAAiB,EACtB,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAC"}

package/dist/native/server/index.js

@@ -12,5 +12,4 @@ export { CapabilityGate, PermissionDenied } from './permissions/gate.js';
 export { GrantStore } from './permissions/grants.js';
 export { isWithinScope, originScopeDir, resolveScopedPath, ScopeViolation } from './permissions/scope.js';
 export { EMPTY_GRANT, } from './permissions/types.js';
-export { ensureBundledTool, findBundledTool, resolveBundledBinary, } from './binaries.js';
 //# sourceMappingURL=index.js.map

package/dist/native/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAmB,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAmB,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAEL,WAAW,GAGZ,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,oBAAoB,GACrB,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/native/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAmB,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAmB,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAsB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAEL,WAAW,GAGZ,MAAM,wBAAwB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.743",
+  "version": "0.1.745",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.743";
+export const CLI_VERSION = "0.1.745";

package/src/native/bundledTools.test.ts

@@ -0,0 +1,26 @@
+import { describe, it, expect } from 'vitest';
+import { BUNDLED_TOOLS, bundledTool } from './bundledTools';
+
+describe('bundled tool catalog', () => {
+  it('includes the core toolchain as shell tools', () => {
+    for (const n of ['node', 'git', 'pnpm', 'uv']) {
+      const t = bundledTool(n);
+      expect(t, `${n} missing`).toBeDefined();
+      expect(t!.category).toBe('toolchain');
+      expect(t!.shellTool).toBe(true);
+    }
+  });
+
+  it('every tool has a non-empty description and unique name', () => {
+    const names = new Set<string>();
+    for (const t of BUNDLED_TOOLS) {
+      expect(t.description.length, `${t.name} desc`).toBeGreaterThan(0);
+      expect(names.has(t.name), `dup ${t.name}`).toBe(false);
+      names.add(t.name);
+    }
+  });
+
+  it('returns undefined for unknown tools', () => {
+    expect(bundledTool('definitely-not-a-tool')).toBeUndefined();
+  });
+});

package/src/native/bundledTools.ts

@@ -0,0 +1,50 @@
+// The catalog of bundled command-line tools an app may request through the
+// permission system (like mic/camera). This is VOCABULARY ONLY — names and
+// static metadata. Versions, download sources, install, PATH, and upgrade all
+// live in the host (ugly-studio); ugly-app never touches a binary.
+
+export interface BundledTool {
+  /** Request/grant key and default spawn name, e.g. 'pnpm'. */
+  name: string;
+  /** Executable basename when it differs from `name` (e.g. imagemagick → magick). */
+  exe?: string;
+  category: 'toolchain' | 'media' | 'data' | 'doc' | 'net';
+  /** Must be on PATH for `bash -lc` invocations (node/git/pnpm/uv/python). */
+  shellTool?: boolean;
+  /** Shown in the permission prompt, like mic/camera copy. */
+  description: string;
+}
+
+export const BUNDLED_TOOLS: readonly BundledTool[] = Object.freeze([
+  // toolchain — needed on PATH so shells (`bash -lc 'pnpm dev'`) resolve them.
+  { name: 'node', category: 'toolchain', shellTool: true, description: 'Node.js runtime — runs your project and its build tools.' },
+  { name: 'git', category: 'toolchain', shellTool: true, description: 'Git — version control for your project.' },
+  { name: 'pnpm', category: 'toolchain', shellTool: true, description: 'pnpm — installs your project’s dependencies.' },
+  { name: 'uv', category: 'toolchain', shellTool: true, description: 'uv — fast Python package manager.' },
+  { name: 'python', exe: 'python3', category: 'toolchain', shellTool: true, description: 'Python runtime.' },
+  // net
+  { name: 'gh', category: 'net', description: 'GitHub CLI — sign in and manage repositories.' },
+  { name: 'cloudflared', category: 'net', description: 'Cloudflare tunnel — exposes your local preview at a public URL.' },
+  { name: 'nats', category: 'net', description: 'NATS CLI — messaging server tooling.' },
+  // data
+  { name: 'postgres', category: 'data', description: 'PostgreSQL — local database for your project.' },
+  { name: 'jq', category: 'data', description: 'jq — command-line JSON processor.' },
+  { name: 'yq', category: 'data', description: 'yq — command-line YAML processor.' },
+  { name: 'pup', category: 'data', description: 'pup — command-line HTML parser.' },
+  { name: 'sqlite3', category: 'data', description: 'SQLite — command-line database shell.' },
+  // media
+  { name: 'ffmpeg', category: 'media', description: 'FFmpeg — audio/video processing.' },
+  { name: 'imagemagick', exe: 'magick', category: 'media', description: 'ImageMagick — image conversion and editing.' },
+  { name: 'yt-dlp', category: 'media', description: 'yt-dlp — download media from the web.' },
+  // doc
+  { name: 'pandoc', category: 'doc', description: 'Pandoc — document format conversion.' },
+  { name: 'pdftotext', category: 'doc', description: 'pdftotext — extract text from PDFs.' },
+  { name: 'tesseract', category: 'doc', description: 'Tesseract — OCR text from images.' },
+]);
+
+const BY_NAME = new Map(BUNDLED_TOOLS.map((t) => [t.name, t]));
+
+/** Look up a tool descriptor by its request/grant name. */
+export function bundledTool(name: string): BundledTool | undefined {
+  return BY_NAME.get(name);
+}

package/src/native/index.ts

@@ -65,6 +65,8 @@ export { defineTask, taskContext } from './defineTask.js';
 export type { TaskDefinition, TaskContext } from './defineTask.js';
 export { MCP_CATALOG } from './mcp-catalog.js';
 
+export { BUNDLED_TOOLS, bundledTool, type BundledTool } from './bundledTools.js';
+
 // ── Ugly Proxy (remote UglyNative over WebRTC) ──
 export { createProxyClient, nativeSigner } from './proxyClient.js';
 export { createProxyHost } from './proxyHost.js';

package/src/native/server/index.ts

@@ -18,10 +18,3 @@ export {
   type OriginGrant,
   type PermissionDecision,
 } from './permissions/types.js';
-
-export {
-  type BinaryProvisionConfig,
-  ensureBundledTool,
-  findBundledTool,
-  resolveBundledBinary,
-} from './binaries.js';

package/dist/native/server/binaries.d.ts

@@ -1,23 +0,0 @@
-export interface BinaryProvisionConfig {
-    /** Where bundled tools are installed, e.g. `~/.ugly-studio/binaries`. */
-    root: string;
-    /** Base URL hosting `binaries-manifest.json` (the R2 mirror). */
-    manifestBase: string;
-}
-/** The installed executable for `tool` under `root`, version-agnostic, or null. */
-export declare function findBundledTool(root: string, tool: string): string | null;
-/**
- * Resolve a tool name to a path: a downloaded binary under `cfg.root` when
- * present, else the bare name so the daemon's spawn resolves it on the system
- * PATH. `downloadable` lists tools the host actually mirrors (others always
- * fall through to PATH without a directory probe).
- */
-export declare function resolveBundledBinary(name: string, cfg: Pick<BinaryProvisionConfig, 'root'>, downloadable?: readonly string[]): string;
-/**
- * Best-effort: download `tool` from the mirror into `cfg.root` on first use.
- * Never fetches from the upstream project at runtime (the binary is mirrored to
- * R2 by the host's publish step). Never throws (falls back to a system tool);
- * idempotent + single-flight per tool.
- */
-export declare function ensureBundledTool(tool: string, cfg: BinaryProvisionConfig): Promise<void>;
-//# sourceMappingURL=binaries.d.ts.map

package/dist/native/server/binaries.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binaries.d.ts","sourceRoot":"","sources":["../../../src/native/server/binaries.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;CACtB;AAgBD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWzE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAC,EACxC,YAAY,GAAE,SAAS,MAAM,EAAW,GACvC,MAAM,CAMR;AAsBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsDzF"}

package/dist/native/server/binaries.js

@@ -1,142 +0,0 @@
-/**
- * Bundled-binary provisioning for the native daemon (lifted from Ugly Studio so
- * the daemon AND the test harness share one implementation). A host (Ugly
- * Studio) bundles a small set of tools by downloading them from its own R2
- * mirror on first launch; everything else resolves on the system PATH.
- *
- * Pure fs/child_process/fetch (no Electron) and fully parameterized — the
- * install root + manifest mirror are injected via `BinaryProvisionConfig`, so
- * nothing here hardcodes a particular app's paths or hostnames.
- *
- * The mirror exposes `<manifestBase>/binaries-manifest.json`:
- *   { "<tool>": { "version": "x", "archives": { "<platform>-<arch>": { "url" } } } }
- * One `tar -xf` covers every platform's asset (bsdtar on mac/win unpacks zip).
- */
-import { basename, join } from 'node:path';
-import { chmodSync, existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-const execFileP = promisify(execFile);
-const exeName = (tool) => (process.platform === 'win32' ? `${tool}.exe` : tool);
-function safeReaddir(dir) {
-    try {
-        return readdirSync(dir);
-    }
-    catch {
-        return [];
-    }
-}
-/** The installed executable for `tool` under `root`, version-agnostic, or null. */
-export function findBundledTool(root, tool) {
-    const toolRoot = join(root, tool);
-    if (!existsSync(toolRoot))
-        return null;
-    for (const ver of safeReaddir(toolRoot)) {
-        const verDir = join(toolRoot, ver);
-        for (const sub of safeReaddir(verDir)) {
-            const p = join(verDir, sub, 'bin', exeName(tool));
-            if (existsSync(p))
-                return p;
-        }
-    }
-    return null;
-}
-/**
- * Resolve a tool name to a path: a downloaded binary under `cfg.root` when
- * present, else the bare name so the daemon's spawn resolves it on the system
- * PATH. `downloadable` lists tools the host actually mirrors (others always
- * fall through to PATH without a directory probe).
- */
-export function resolveBundledBinary(name, cfg, downloadable = ['gh']) {
-    if (downloadable.includes(name)) {
-        const found = findBundledTool(cfg.root, name);
-        if (found)
-            return found;
-    }
-    return name;
-}
-/** Look up a tool's archive for this platform in the mirror's manifest. */
-async function toolFromManifest(cfg, tool) {
-    try {
-        const res = await fetch(`${cfg.manifestBase}/binaries-manifest.json`, { cache: 'no-store' });
-        if (!res.ok)
-            return null;
-        const m = (await res.json());
-        const entry = m[tool];
-        const archive = entry?.archives[`${process.platform}-${process.arch}`];
-        if (!entry || !archive?.url)
-            return null;
-        return { version: entry.version, url: archive.url };
-    }
-    catch {
-        return null;
-    }
-}
-const ensuring = new Map();
-/**
- * Best-effort: download `tool` from the mirror into `cfg.root` on first use.
- * Never fetches from the upstream project at runtime (the binary is mirrored to
- * R2 by the host's publish step). Never throws (falls back to a system tool);
- * idempotent + single-flight per tool.
- */
-export function ensureBundledTool(tool, cfg) {
-    const key = `${cfg.root}:${tool}`;
-    const inflight = ensuring.get(key);
-    if (inflight)
-        return inflight;
-    const run = (async () => {
-        // Every failure below leaves the tool UNINSTALLED and is best-effort (spawns
-        // fall back to the system PATH). But when there's no system fallback either —
-        // the common case for pnpm/node on a fresh host — the miss surfaces much later
-        // as a cryptic `command not found` / ENOENT (-2) at spawn time with no trace.
-        // So log each failure to console.error/warn (the desktop shells ship these to
-        // studio.ugly.bot's errorLog) with the tool + reason, making bundle-binary
-        // provisioning issues findable remotely instead of silent.
-        const plat = `${process.platform}-${process.arch}`;
-        try {
-            if (findBundledTool(cfg.root, tool))
-                return;
-            const man = await toolFromManifest(cfg, tool);
-            if (!man) {
-                console.warn(`[binaries] ${tool}: not in the mirror manifest for ${plat} — falling back to system PATH (spawns will fail if it isn't installed)`);
-                return;
-            }
-            const dir = join(cfg.root, tool, man.version);
-            mkdirSync(dir, { recursive: true });
-            const archive = join(dir, basename(new URL(man.url).pathname));
-            const res = await fetch(man.url);
-            if (!res.ok) {
-                console.error(`[binaries] ${tool} ${man.version}: download failed HTTP ${res.status} ${res.statusText} from ${man.url} — tool will be UNAVAILABLE`);
-                return;
-            }
-            writeFileSync(archive, Buffer.from(await res.arrayBuffer()));
-            await execFileP('tar', ['-xf', archive, '-C', dir]);
-            try {
-                rmSync(archive);
-            }
-            catch {
-                /* leave it */
-            }
-            const bin = findBundledTool(cfg.root, tool);
-            if (!bin) {
-                console.error(`[binaries] ${tool} ${man.version}: archive extracted to ${dir} but no runnable binary was found (corrupt download or unexpected layout) — tool will be UNAVAILABLE`);
-                return;
-            }
-            if (process.platform !== 'win32') {
-                try {
-                    chmodSync(bin, 0o755);
-                }
-                catch (e) {
-                    console.warn(`[binaries] ${tool}: could not chmod +x ${bin} (${e?.message ?? e}) — spawns may fail with EACCES`);
-                }
-            }
-        }
-        catch (e) {
-            // Network / tar-extract / disk failure. Previously swallowed entirely.
-            console.error(`[binaries] ${tool} (${plat}): provisioning failed — ${e?.message ?? String(e)} — tool will be UNAVAILABLE, spawns fall back to system PATH`);
-        }
-    })();
-    ensuring.set(key, run);
-    return run;
-}
-//# sourceMappingURL=binaries.js.map

package/dist/native/server/binaries.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"binaries.js","sourceRoot":"","sources":["../../../src/native/server/binaries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/F,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAatC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEhG,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAClD,IAAI,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,GAAwC,EACxC,eAAkC,CAAC,IAAI,CAAC;IAExC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,gBAAgB,CAC7B,GAA0B,EAC1B,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,YAAY,yBAAyB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,GAAG;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAA0B;IACxE,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,6EAA6E;QAC7E,8EAA8E;QAC9E,+EAA+E;QAC/E,8EAA8E;QAC9E,8EAA8E;QAC9E,2EAA2E;QAC3E,2DAA2D;QAC3D,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO;YAC5C,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,oCAAoC,IAAI,yEAAyE,CAAC,CAAC;gBAClJ,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,GAAG,CAAC,OAAO,0BAA0B,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,SAAS,GAAG,CAAC,GAAG,6BAA6B,CAAC,CAAC;gBACpJ,OAAO;YACT,CAAC;YACD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI,GAAG,CAAC,OAAO,0BAA0B,GAAG,sGAAsG,CAAC,CAAC;gBACpL,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,wBAAwB,GAAG,KAAM,CAAW,EAAE,OAAO,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC9H,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,uEAAuE;YACvE,OAAO,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,IAAI,4BAA6B,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,8DAA8D,CAAC,CAAC;QACzK,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/src/native/server/binaries.ts

@@ -1,155 +0,0 @@
-/**
- * Bundled-binary provisioning for the native daemon (lifted from Ugly Studio so
- * the daemon AND the test harness share one implementation). A host (Ugly
- * Studio) bundles a small set of tools by downloading them from its own R2
- * mirror on first launch; everything else resolves on the system PATH.
- *
- * Pure fs/child_process/fetch (no Electron) and fully parameterized — the
- * install root + manifest mirror are injected via `BinaryProvisionConfig`, so
- * nothing here hardcodes a particular app's paths or hostnames.
- *
- * The mirror exposes `<manifestBase>/binaries-manifest.json`:
- *   { "<tool>": { "version": "x", "archives": { "<platform>-<arch>": { "url" } } } }
- * One `tar -xf` covers every platform's asset (bsdtar on mac/win unpacks zip).
- */
-import { basename, join } from 'node:path';
-import { chmodSync, existsSync, mkdirSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-
-const execFileP = promisify(execFile);
-
-export interface BinaryProvisionConfig {
-  /** Where bundled tools are installed, e.g. `~/.ugly-studio/binaries`. */
-  root: string;
-  /** Base URL hosting `binaries-manifest.json` (the R2 mirror). */
-  manifestBase: string;
-}
-
-interface BinariesManifest {
-  [tool: string]: { version: string; archives: Record<string, { url: string }> } | undefined;
-}
-
-const exeName = (tool: string): string => (process.platform === 'win32' ? `${tool}.exe` : tool);
-
-function safeReaddir(dir: string): string[] {
-  try {
-    return readdirSync(dir);
-  } catch {
-    return [];
-  }
-}
-
-/** The installed executable for `tool` under `root`, version-agnostic, or null. */
-export function findBundledTool(root: string, tool: string): string | null {
-  const toolRoot = join(root, tool);
-  if (!existsSync(toolRoot)) return null;
-  for (const ver of safeReaddir(toolRoot)) {
-    const verDir = join(toolRoot, ver);
-    for (const sub of safeReaddir(verDir)) {
-      const p = join(verDir, sub, 'bin', exeName(tool));
-      if (existsSync(p)) return p;
-    }
-  }
-  return null;
-}
-
-/**
- * Resolve a tool name to a path: a downloaded binary under `cfg.root` when
- * present, else the bare name so the daemon's spawn resolves it on the system
- * PATH. `downloadable` lists tools the host actually mirrors (others always
- * fall through to PATH without a directory probe).
- */
-export function resolveBundledBinary(
-  name: string,
-  cfg: Pick<BinaryProvisionConfig, 'root'>,
-  downloadable: readonly string[] = ['gh'],
-): string {
-  if (downloadable.includes(name)) {
-    const found = findBundledTool(cfg.root, name);
-    if (found) return found;
-  }
-  return name;
-}
-
-/** Look up a tool's archive for this platform in the mirror's manifest. */
-async function toolFromManifest(
-  cfg: BinaryProvisionConfig,
-  tool: string,
-): Promise<{ version: string; url: string } | null> {
-  try {
-    const res = await fetch(`${cfg.manifestBase}/binaries-manifest.json`, { cache: 'no-store' });
-    if (!res.ok) return null;
-    const m = (await res.json()) as BinariesManifest;
-    const entry = m[tool];
-    const archive = entry?.archives[`${process.platform}-${process.arch}`];
-    if (!entry || !archive?.url) return null;
-    return { version: entry.version, url: archive.url };
-  } catch {
-    return null;
-  }
-}
-
-const ensuring = new Map<string, Promise<void>>();
-
-/**
- * Best-effort: download `tool` from the mirror into `cfg.root` on first use.
- * Never fetches from the upstream project at runtime (the binary is mirrored to
- * R2 by the host's publish step). Never throws (falls back to a system tool);
- * idempotent + single-flight per tool.
- */
-export function ensureBundledTool(tool: string, cfg: BinaryProvisionConfig): Promise<void> {
-  const key = `${cfg.root}:${tool}`;
-  const inflight = ensuring.get(key);
-  if (inflight) return inflight;
-  const run = (async () => {
-    // Every failure below leaves the tool UNINSTALLED and is best-effort (spawns
-    // fall back to the system PATH). But when there's no system fallback either —
-    // the common case for pnpm/node on a fresh host — the miss surfaces much later
-    // as a cryptic `command not found` / ENOENT (-2) at spawn time with no trace.
-    // So log each failure to console.error/warn (the desktop shells ship these to
-    // studio.ugly.bot's errorLog) with the tool + reason, making bundle-binary
-    // provisioning issues findable remotely instead of silent.
-    const plat = `${process.platform}-${process.arch}`;
-    try {
-      if (findBundledTool(cfg.root, tool)) return;
-      const man = await toolFromManifest(cfg, tool);
-      if (!man) {
-        console.warn(`[binaries] ${tool}: not in the mirror manifest for ${plat} — falling back to system PATH (spawns will fail if it isn't installed)`);
-        return;
-      }
-      const dir = join(cfg.root, tool, man.version);
-      mkdirSync(dir, { recursive: true });
-      const archive = join(dir, basename(new URL(man.url).pathname));
-      const res = await fetch(man.url);
-      if (!res.ok) {
-        console.error(`[binaries] ${tool} ${man.version}: download failed HTTP ${res.status} ${res.statusText} from ${man.url} — tool will be UNAVAILABLE`);
-        return;
-      }
-      writeFileSync(archive, Buffer.from(await res.arrayBuffer()));
-      await execFileP('tar', ['-xf', archive, '-C', dir]);
-      try {
-        rmSync(archive);
-      } catch {
-        /* leave it */
-      }
-      const bin = findBundledTool(cfg.root, tool);
-      if (!bin) {
-        console.error(`[binaries] ${tool} ${man.version}: archive extracted to ${dir} but no runnable binary was found (corrupt download or unexpected layout) — tool will be UNAVAILABLE`);
-        return;
-      }
-      if (process.platform !== 'win32') {
-        try {
-          chmodSync(bin, 0o755);
-        } catch (e) {
-          console.warn(`[binaries] ${tool}: could not chmod +x ${bin} (${(e as Error)?.message ?? e}) — spawns may fail with EACCES`);
-        }
-      }
-    } catch (e) {
-      // Network / tar-extract / disk failure. Previously swallowed entirely.
-      console.error(`[binaries] ${tool} (${plat}): provisioning failed — ${(e as Error)?.message ?? String(e)} — tool will be UNAVAILABLE, spawns fall back to system PATH`);
-    }
-  })();
-  ensuring.set(key, run);
-  return run;
-}