xtrm-tools 0.7.16 → 0.7.18

package/cli/package.json

@@ -1,6 +1,7 @@
 {
   "name": "xtrm-cli",
-  "version": "0.7.16",
+  "private": true,
+  "version": "0.7.18",
   "description": "Claude Code tools installer (skills, hooks, MCP servers)",
   "main": "./dist/index.js",
   "type": "module",
@@ -36,14 +37,14 @@
     "ora": "^9.3.0",
     "project": "^0.1.6",
     "prompts": "^2.4.2",
-    "tdd-guard": "^1.1.0",
+    "yaml": "^2.4.2",
     "zod": "^4.3.6"
   },
   "devDependencies": {
     "@types/fs-extra": "^11.0.4",
     "@types/node": "^25.3.0",
+    "@types/prompts": "^2.4.9",
     "fast-check": "^4.6.0",
-    "tdd-guard-vitest": "^0.1.6",
     "tsup": "^8.5.1",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
@@ -51,5 +52,10 @@
   },
   "engines": {
     "node": ">=20.0.0"
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "8.0.12"
+    }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xtrm-tools",
-  "version": "0.7.16",
+  "version": "0.7.18",
   "description": "Claude Code tools installer (skills, hooks, MCP servers)",
   "license": "MIT",
   "type": "module",
@@ -32,7 +32,10 @@
     "!packages/pi-extensions/extensions/**/.pi/**",
     "!.xtrm/extensions/**/.pi/**",
     "!.xtrm/**/test_*.py",
-    "!.xtrm/**/tests/**"
+    "!.xtrm/**/tests/**",
+    "!.xtrm/skills/default/**/evals/**",
+    "!.xtrm/skills/default/**/workspace/iteration-*/**",
+    "!packages/*/.serena/**"
   ],
   "publishConfig": {
     "access": "public"
@@ -56,25 +59,37 @@
     "start": "node cli/dist/index.cjs",
     "lint": "echo 'No linting configured'",
     "test": "npm test --workspace cli",
+    "check:package": "node scripts/assert-no-self-dependency.mjs",
     "version": "npm run sync:cli-version && git add cli/package.json packages/pi-extensions/package.json",
-    "prepublishOnly": "npm run sync:cli-version && node scripts/vendor-specialists-skills.mjs && npm run gen-registry && npm run build",
+    "check:skills-ownership": "node scripts/check-skills-ownership.mjs",
+    "check:specialists-vendor": "node scripts/verify-specialists-vendor.mjs",
+    "check:asset-contract": "node scripts/verify-asset-contract.mjs",
+    "check:layout-guards": "node scripts/check-layout-guards.mjs",
+    "check:gitnexus-no-counter": "node scripts/check-gitnexus-no-counter.mjs",
+    "check:skills-symlinks": "node scripts/check-skills-symlinks.mjs",
+    "prepublishOnly": "npm run sync:cli-version && npm run check:package && npm run check:skills-ownership && node scripts/vendor-specialists-skills.mjs --specialists-package specialists --specialists-ref master && npm run gen-registry && npm run check:registry-pack-parity && npm run check:payload-hygiene && npm run check:specialists-vendor && npm run check:layout-guards && npm run check:gitnexus-no-counter && npm run check:skills-symlinks && npm run build",
     "release": "npm publish --tag latest",
     "release:pi-extensions": "npm publish --workspace @jaggerxtrm/pi-extensions --tag latest --access public",
     "release:all": "npm run release && npm run release:pi-extensions",
-    "gen-registry": "node scripts/gen-registry.mjs"
+    "gen-registry": "node scripts/gen-registry.mjs",
+    "check:registry-pack-parity": "node scripts/check-registry-pack-parity.mjs",
+    "check:payload-hygiene": "node scripts/check-payload-hygiene.mjs"
   },
   "engines": {
     "node": ">=20.0.0"
   },
   "dependencies": {
-    "@artale/pi-procs": "^1.1.0",
     "comment-json": "^4.2.3",
     "conf": "^15.1.0",
     "dotenv": "^17.3.1",
     "fs-extra": "^11.2.0",
     "kleur": "^4.1.5",
-    "prompts": "^2.4.2",
-    "xtrm-tools": "^2.0.2"
+    "prompts": "^2.4.2"
+  },
+  "overrides": {
+    "fast-uri": "3.1.2",
+    "@aws-sdk/xml-builder": "3.972.22",
+    "vite": "8.0.12"
   },
   "pi": {
     "extensions": [
@@ -88,5 +103,10 @@
       "npm:@aliou/pi-guardrails",
       "npm:@aliou/pi-processes"
     ]
+  },
+  "pnpm": {
+    "overrides": {
+      "vite": "8.0.12"
+    }
   }
 }

package/packages/pi-extensions/extensions/xtrm-ui/index.ts

@@ -33,7 +33,8 @@ import {
 } from "@mariozechner/pi-coding-agent";
 import { Box, Text, truncateToWidth, visibleWidth } from "@mariozechner/pi-tui";
 import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, join } from "node:path";
+import { basename, dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import {
   cleanOutputLines,
   countPrefixedItems,
@@ -66,6 +67,7 @@ export interface XtrmUiPrefs {
   forceTheme: boolean; // When false, skip setTheme (allow external theme override)
   toolRowBg: boolean; // Subtle background behind tool text rows (no padding)
   compactExternalToolResults: boolean; // Compact extension tool results (disables full expand output)
+  hideThinkingPlaceholder: boolean; // When false, hidden thinking blocks render no placeholder text
 }
 
 // ============================================================================
@@ -83,6 +85,7 @@ export const DEFAULT_PREFS: XtrmUiPrefs = {
   forceTheme: true,
   toolRowBg: false,
   compactExternalToolResults: true,
+  hideThinkingPlaceholder: false,
 };
 
 // ============================================================================
@@ -108,6 +111,7 @@ function normalizePrefs(input: unknown): XtrmUiPrefs {
     toolRowBg: source.toolRowBg ?? DEFAULT_PREFS.toolRowBg,
     compactExternalToolResults:
       source.compactExternalToolResults ?? DEFAULT_PREFS.compactExternalToolResults,
+    hideThinkingPlaceholder: source.hideThinkingPlaceholder ?? DEFAULT_PREFS.hideThinkingPlaceholder,
   };
 }
 
@@ -125,6 +129,74 @@ function persistPrefs(pi: ExtensionAPI, prefs: XtrmUiPrefs): void {
   pi.appendEntry(XTRM_UI_PREFS_ENTRY, prefs);
 }
 
+
+// ============================================================================
+// Thinking Chrome
+// ============================================================================
+
+type AssistantMessageComponentCtor = {
+  prototype: {
+    updateContent?: (message: AssistantMessageLike) => void;
+    setExpanded?: (expanded: boolean) => void;
+  };
+};
+
+type AssistantContentBlock = { type?: string; thinking?: string };
+type AssistantMessageLike = { content?: AssistantContentBlock[] };
+type PatchableAssistantMessage = {
+  hideThinkingBlock?: boolean;
+  hiddenThinkingLabel?: string;
+  lastMessage?: AssistantMessageLike;
+  __xtrmThinkingExpanded?: boolean;
+  updateContent?: (message: AssistantMessageLike) => void;
+};
+
+const PATCHED_ASSISTANT_MESSAGE = "__xtrmUiSilentHiddenThinking";
+
+async function installSilentHiddenThinkingPatch(): Promise<void> {
+  const entryPath = fileURLToPath(import.meta.resolve("@mariozechner/pi-coding-agent"));
+  const componentPath = join(dirname(entryPath), "modes", "interactive", "components", "assistant-message.js");
+  const mod = await import(pathToFileURL(componentPath).href) as {
+    AssistantMessageComponent?: AssistantMessageComponentCtor;
+  };
+  const proto = mod.AssistantMessageComponent?.prototype as
+    | (AssistantMessageComponentCtor["prototype"] & { [PATCHED_ASSISTANT_MESSAGE]?: boolean })
+    | undefined;
+  if (!proto?.updateContent || proto[PATCHED_ASSISTANT_MESSAGE]) return;
+
+  const updateContent = proto.updateContent;
+  proto.updateContent = function patchedUpdateContent(this: PatchableAssistantMessage, message: AssistantMessageLike) {
+    if (this.hiddenThinkingLabel === "" && Array.isArray(message.content)) {
+      if (!this.__xtrmThinkingExpanded) {
+        updateContent.call(this, {
+          ...message,
+          content: message.content.filter((block) => block.type !== "thinking" || !block.thinking?.trim()),
+        });
+        return;
+      }
+
+      const previousHideThinking = this.hideThinkingBlock;
+      this.hideThinkingBlock = false;
+      updateContent.call(this, message);
+      this.hideThinkingBlock = previousHideThinking;
+      return;
+    }
+    updateContent.call(this, message);
+  };
+
+  proto.setExpanded = function setExpanded(this: PatchableAssistantMessage, expanded: boolean) {
+    this.__xtrmThinkingExpanded = expanded;
+    if (this.lastMessage) this.updateContent?.(this.lastMessage);
+  };
+  proto[PATCHED_ASSISTANT_MESSAGE] = true;
+}
+
+function applyThinkingChrome(ctx: ExtensionContext, prefs: XtrmUiPrefs): void {
+  (ctx.ui as { setHiddenThinkingLabel?: (label?: string) => void }).setHiddenThinkingLabel?.(
+    prefs.hideThinkingPlaceholder ? undefined : "",
+  );
+}
+
 // ============================================================================
 // Chrome Application
 // ============================================================================
@@ -1190,6 +1262,8 @@ function isXtrmTheme(name: string | undefined): boolean {
 }
 
 export default function xtrmUiExtension(pi: ExtensionAPI): void {
+  void installSilentHiddenThinkingPatch().catch(() => undefined);
+
   let prefs: XtrmUiPrefs = { ...DEFAULT_PREFS };
   let previousThemeName: string | null = null;
   const extensionThemeDir = join(__dirname, "../../themes/xtrm-ui");
@@ -1203,6 +1277,7 @@ export default function xtrmUiExtension(pi: ExtensionAPI): void {
 
   const refresh = (ctx: ExtensionContext) => {
     applyXtrmChrome(ctx, prefs, getThinkingLevel);
+    applyThinkingChrome(ctx, prefs);
   };
 
   pi.on("resources_discover", async () => ({

package/packages/pi-extensions/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jaggerxtrm/pi-extensions",
-  "version": "0.7.16",
+  "version": "0.7.18",
   "description": "Unified Pi extension entrypoint for xtrm-managed extensions",
   "type": "module",
   "publishConfig": {

package/.xtrm/config/pi/extensions/custom-footer/.pi/structured-returns/83051fe4-97da-4e2c-bdaa-343b32f4e714.combined.log

@@ -1,7 +0,0 @@
-../core/lib.ts(1,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './logger.js'?
-../core/lib.ts(2,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './runner.js'?
-../core/lib.ts(3,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './adapter.js'?
-index.ts(13,10): error TS2305: Module '"@xtrm/pi-core"' has no exported member 'SubprocessRunner'.
-index.ts(13,28): error TS2305: Module '"@xtrm/pi-core"' has no exported member 'EventAdapter'.
-index.ts(359,59): error TS2339: Property 'sessionId' does not exist on type 'ExtensionContext'.
-index.ts(359,76): error TS2339: Property 'session_id' does not exist on type 'ExtensionContext'.

package/.xtrm/config/pi/extensions/custom-footer/.pi/structured-returns/83051fe4-97da-4e2c-bdaa-343b32f4e714.stdout.log

@@ -1,7 +0,0 @@
-../core/lib.ts(1,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './logger.js'?
-../core/lib.ts(2,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './runner.js'?
-../core/lib.ts(3,15): error TS2835: Relative import paths need explicit file extensions in ECMAScript imports when '--moduleResolution' is 'node16' or 'nodenext'. Did you mean './adapter.js'?
-index.ts(13,10): error TS2305: Module '"@xtrm/pi-core"' has no exported member 'SubprocessRunner'.
-index.ts(13,28): error TS2305: Module '"@xtrm/pi-core"' has no exported member 'EventAdapter'.
-index.ts(359,59): error TS2339: Property 'sessionId' does not exist on type 'ExtensionContext'.
-index.ts(359,76): error TS2339: Property 'session_id' does not exist on type 'ExtensionContext'.

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/LICENSE

@@ -1,22 +0,0 @@
-MIT License
-
-Copyright (c) 2025 Peter Steinberger
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/README.md

@@ -1,29 +0,0 @@
-# @steipete/sweet-cookie
-
-Inline-first browser cookie extraction for local tooling (no native addons).
-
-Supports:
-- Inline payloads (JSON / base64 / file) — most reliable path.
-- Local browser reads (best effort): Chrome, Edge, Firefox, Safari (macOS).
-
-Install:
-```bash
-npm i @steipete/sweet-cookie
-```
-
-Usage:
-```ts
-import { getCookies, toCookieHeader } from '@steipete/sweet-cookie';
-
-const { cookies, warnings } = await getCookies({
-  url: 'https://example.com/',
-  names: ['session', 'csrf'],
-  browsers: ['chrome', 'edge', 'firefox', 'safari'],
-});
-
-for (const w of warnings) console.warn(w);
-const cookieHeader = toCookieHeader(cookies, { dedupeByName: true });
-```
-
-Docs + extension exporter: see the repo root README.
-

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/index.d.ts

@@ -1,3 +0,0 @@
-export { getCookies, toCookieHeader } from './public.js';
-export type { BrowserName, Cookie, CookieHeaderOptions, CookieMode, CookieSameSite, GetCookiesOptions, GetCookiesResult, } from './types.js';
-//# sourceMappingURL=index.d.ts.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EACX,WAAW,EACX,MAAM,EACN,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,gBAAgB,GAChB,MAAM,YAAY,CAAC"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/index.js

@@ -1,2 +0,0 @@
-export { getCookies, toCookieHeader } from './public.js';
-//# sourceMappingURL=index.js.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chrome.d.ts

@@ -1,8 +0,0 @@
-import type { GetCookiesResult } from '../types.js';
-export declare function getCookiesFromChrome(options: {
-    profile?: string;
-    timeoutMs?: number;
-    includeExpired?: boolean;
-    debug?: boolean;
-}, origins: string[], allowlistNames: Set<string> | null): Promise<GetCookiesResult>;
-//# sourceMappingURL=chrome.d.ts.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chrome.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chrome.d.ts","sourceRoot":"","sources":["../../src/providers/chrome.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK5D,wBAAsB,oBAAoB,CACzC,OAAO,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EAC5F,OAAO,EAAE,MAAM,EAAE,EACjB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA0B3B"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chrome.js

@@ -1,27 +0,0 @@
-import { getCookiesFromChromeSqliteLinux } from './chromeSqliteLinux.js';
-import { getCookiesFromChromeSqliteMac } from './chromeSqliteMac.js';
-import { getCookiesFromChromeSqliteWindows } from './chromeSqliteWindows.js';
-export async function getCookiesFromChrome(options, origins, allowlistNames) {
-    const warnings = [];
-    // Platform dispatch only. All real logic lives in the per-OS providers.
-    if (process.platform === 'darwin') {
-        const r = await getCookiesFromChromeSqliteMac(options, origins, allowlistNames);
-        warnings.push(...r.warnings);
-        const cookies = r.cookies;
-        return { cookies, warnings };
-    }
-    if (process.platform === 'linux') {
-        const r = await getCookiesFromChromeSqliteLinux(options, origins, allowlistNames);
-        warnings.push(...r.warnings);
-        const cookies = r.cookies;
-        return { cookies, warnings };
-    }
-    if (process.platform === 'win32') {
-        const r = await getCookiesFromChromeSqliteWindows(options, origins, allowlistNames);
-        warnings.push(...r.warnings);
-        const cookies = r.cookies;
-        return { cookies, warnings };
-    }
-    return { cookies: [], warnings };
-}
-//# sourceMappingURL=chrome.js.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chrome.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chrome.js","sourceRoot":"","sources":["../../src/providers/chrome.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAE7E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAA4F,EAC5F,OAAiB,EACjB,cAAkC;IAElC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,wEAAwE;IACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,6BAA6B,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAa,CAAC,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,+BAA+B,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QAClF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAa,CAAC,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,MAAM,iCAAiC,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACpF,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAa,CAAC,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/crypto.d.ts

@@ -1,11 +0,0 @@
-export declare function deriveAes128CbcKeyFromPassword(password: string, options: {
-    iterations: number;
-}): Buffer;
-export declare function decryptChromiumAes128CbcCookieValue(encryptedValue: Uint8Array, keyCandidates: readonly Buffer[], options: {
-    stripHashPrefix: boolean;
-    treatUnknownPrefixAsPlaintext?: boolean;
-}): string | null;
-export declare function decryptChromiumAes256GcmCookieValue(encryptedValue: Uint8Array, key: Buffer, options: {
-    stripHashPrefix: boolean;
-}): string | null;
-//# sourceMappingURL=crypto.d.ts.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/crypto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../../src/providers/chromeSqlite/crypto.ts"],"names":[],"mappings":"AAIA,wBAAgB,8BAA8B,CAC7C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7B,MAAM,CAIR;AAED,wBAAgB,mCAAmC,CAClD,cAAc,EAAE,UAAU,EAC1B,aAAa,EAAE,SAAS,MAAM,EAAE,EAChC,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAC;IAAC,6BAA6B,CAAC,EAAE,OAAO,CAAA;CAAE,GAC5E,MAAM,GAAG,IAAI,CA2Bf;AAED,wBAAgB,mCAAmC,CAClD,cAAc,EAAE,UAAU,EAC1B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,GACnC,MAAM,GAAG,IAAI,CAyBf"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/crypto.js

@@ -1,100 +0,0 @@
-import { createDecipheriv, pbkdf2Sync } from 'node:crypto';
-const UTF8_DECODER = new TextDecoder('utf-8', { fatal: true });
-export function deriveAes128CbcKeyFromPassword(password, options) {
-    // Chromium derives the AES-128-CBC key from "Chrome Safe Storage" using PBKDF2.
-    // The salt/length/digest are fixed by Chromium ("saltysalt", 16 bytes, sha1).
-    return pbkdf2Sync(password, 'saltysalt', options.iterations, 16, 'sha1');
-}
-export function decryptChromiumAes128CbcCookieValue(encryptedValue, keyCandidates, options) {
-    const buf = Buffer.from(encryptedValue);
-    if (buf.length < 3)
-        return null;
-    // Chromium prefixes encrypted cookies with `v10`, `v11`, ... (three bytes).
-    const prefix = buf.subarray(0, 3).toString('utf8');
-    const hasVersionPrefix = /^v\d\d$/.test(prefix);
-    if (!hasVersionPrefix) {
-        // Some platforms (notably macOS) can store plaintext values in `encrypted_value`.
-        // Callers decide whether unknown prefixes should be treated as plaintext.
-        if (options.treatUnknownPrefixAsPlaintext === false)
-            return null;
-        return decodeCookieValueBytes(buf, false);
-    }
-    const ciphertext = buf.subarray(3);
-    if (!ciphertext.length)
-        return '';
-    for (const key of keyCandidates) {
-        // Try multiple candidates because Linux may fall back to empty passwords depending on keyring state.
-        const decrypted = tryDecryptAes128Cbc(ciphertext, key);
-        if (!decrypted)
-            continue;
-        const decoded = decodeCookieValueBytes(decrypted, options.stripHashPrefix);
-        if (decoded !== null)
-            return decoded;
-    }
-    return null;
-}
-export function decryptChromiumAes256GcmCookieValue(encryptedValue, key, options) {
-    const buf = Buffer.from(encryptedValue);
-    if (buf.length < 3)
-        return null;
-    const prefix = buf.subarray(0, 3).toString('utf8');
-    if (!/^v\d\d$/.test(prefix))
-        return null;
-    // AES-256-GCM layout:
-    // - 12-byte nonce
-    // - ciphertext
-    // - 16-byte authentication tag
-    const payload = buf.subarray(3);
-    if (payload.length < 12 + 16)
-        return null;
-    const nonce = payload.subarray(0, 12);
-    const authenticationTag = payload.subarray(payload.length - 16);
-    const ciphertext = payload.subarray(12, payload.length - 16);
-    try {
-        const decipher = createDecipheriv('aes-256-gcm', key, nonce);
-        decipher.setAuthTag(authenticationTag);
-        const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-        return decodeCookieValueBytes(plaintext, options.stripHashPrefix);
-    }
-    catch {
-        return null;
-    }
-}
-function tryDecryptAes128Cbc(ciphertext, key) {
-    try {
-        // Chromium's legacy AES-128-CBC uses an IV of 16 spaces.
-        const iv = Buffer.alloc(16, 0x20);
-        const decipher = createDecipheriv('aes-128-cbc', key, iv);
-        decipher.setAutoPadding(false);
-        const plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-        return removePkcs7Padding(plaintext);
-    }
-    catch {
-        return null;
-    }
-}
-function removePkcs7Padding(value) {
-    if (!value.length)
-        return value;
-    const padding = value[value.length - 1];
-    if (!padding || padding > 16)
-        return value;
-    return value.subarray(0, value.length - padding);
-}
-function decodeCookieValueBytes(value, stripHashPrefix) {
-    // Chromium >= 24 prepends a 32-byte hash to cookie values.
-    const bytes = stripHashPrefix && value.length >= 32 ? value.subarray(32) : value;
-    try {
-        return stripLeadingControlChars(UTF8_DECODER.decode(bytes));
-    }
-    catch {
-        return null;
-    }
-}
-function stripLeadingControlChars(value) {
-    let i = 0;
-    while (i < value.length && value.charCodeAt(i) < 0x20)
-        i += 1;
-    return value.slice(i);
-}
-//# sourceMappingURL=crypto.js.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../src/providers/chromeSqlite/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/D,MAAM,UAAU,8BAA8B,CAC7C,QAAgB,EAChB,OAA+B;IAE/B,gFAAgF;IAChF,8EAA8E;IAC9E,OAAO,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,cAA0B,EAC1B,aAAgC,EAChC,OAA8E;IAE9E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhC,4EAA4E;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACvB,kFAAkF;QAClF,0EAA0E;QAC1E,IAAI,OAAO,CAAC,6BAA6B,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACjE,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAElC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,qGAAqG;QACrG,MAAM,SAAS,GAAG,mBAAmB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3E,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mCAAmC,CAClD,cAA0B,EAC1B,GAAW,EACX,OAAqC;IAErC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,sBAAsB;IACtB,kBAAkB;IAClB,eAAe;IACf,+BAA+B;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAE7D,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7D,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,GAAW;IAC3D,IAAI,CAAC;QACJ,yDAAyD;QACzD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1D,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,kBAAkB,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,eAAwB;IACtE,2DAA2D;IAC3D,MAAM,KAAK,GAAG,eAAe,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,IAAI,CAAC;QACJ,OAAO,wBAAwB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC9C,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI;QAAE,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/linuxKeyring.d.ts

@@ -1,25 +0,0 @@
-export type LinuxKeyringBackend = 'gnome' | 'kwallet' | 'basic';
-/**
- * Read the "Safe Storage" password from a Linux keyring.
- *
- * Chromium browsers typically store their cookie encryption password under:
- * - service: "<Browser> Safe Storage"
- * - account: "<Browser>"
- *
- * We keep this logic in JS (no native deps) and return an empty password on failure
- * (Chromium may still have v10 cookies, and callers can use inline/export escape hatches).
- */
-export declare function getLinuxChromiumSafeStoragePassword(options: {
-    backend?: LinuxKeyringBackend;
-    app: 'chrome' | 'edge';
-}): Promise<{
-    password: string;
-    warnings: string[];
-}>;
-export declare function getLinuxChromeSafeStoragePassword(options?: {
-    backend?: LinuxKeyringBackend;
-}): Promise<{
-    password: string;
-    warnings: string[];
-}>;
-//# sourceMappingURL=linuxKeyring.d.ts.map

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/linuxKeyring.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"linuxKeyring.d.ts","sourceRoot":"","sources":["../../../src/providers/chromeSqlite/linuxKeyring.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhE;;;;;;;;;GASG;AACH,wBAAsB,mCAAmC,CAAC,OAAO,EAAE;IAClE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,GAAG,EAAE,QAAQ,GAAG,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CA8DpD;AAED,wBAAsB,iCAAiC,CACtD,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAO,GAC7C,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAInD"}

package/.xtrm/skills/default/last30days/scripts/lib/vendor/bird-search/node_modules/@steipete/sweet-cookie/dist/providers/chromeSqlite/linuxKeyring.js

@@ -1,104 +0,0 @@
-import { execCapture } from '../../util/exec.js';
-/**
- * Read the "Safe Storage" password from a Linux keyring.
- *
- * Chromium browsers typically store their cookie encryption password under:
- * - service: "<Browser> Safe Storage"
- * - account: "<Browser>"
- *
- * We keep this logic in JS (no native deps) and return an empty password on failure
- * (Chromium may still have v10 cookies, and callers can use inline/export escape hatches).
- */
-export async function getLinuxChromiumSafeStoragePassword(options) {
-    const warnings = [];
-    // Escape hatch: if callers already know the password (or want deterministic CI behavior),
-    // they can bypass keyring probing entirely.
-    const overrideKey = options.app === 'edge'
-        ? 'SWEET_COOKIE_EDGE_SAFE_STORAGE_PASSWORD'
-        : 'SWEET_COOKIE_CHROME_SAFE_STORAGE_PASSWORD';
-    const override = readEnv(overrideKey);
-    if (override !== undefined)
-        return { password: override, warnings };
-    const backend = options.backend ?? parseLinuxKeyringBackend() ?? chooseLinuxKeyringBackend();
-    // `basic` means "don't try keyrings" (Chrome will fall back to older/less-secure schemes on some setups).
-    if (backend === 'basic')
-        return { password: '', warnings };
-    const service = options.app === 'edge' ? 'Microsoft Edge Safe Storage' : 'Chrome Safe Storage';
-    const account = options.app === 'edge' ? 'Microsoft Edge' : 'Chrome';
-    const folder = `${account} Keys`;
-    if (backend === 'gnome') {
-        // GNOME keyring: `secret-tool` is the simplest way to read libsecret entries.
-        const res = await execCapture('secret-tool', ['lookup', 'service', service, 'account', account], { timeoutMs: 3_000 });
-        if (res.code === 0)
-            return { password: res.stdout.trim(), warnings };
-        warnings.push('Failed to read Linux keyring via secret-tool; v11 cookies may be unavailable.');
-        return { password: '', warnings };
-    }
-    // KDE keyring: query KWallet via `kwallet-query`, but the wallet name differs across KDE versions.
-    const kdeVersion = (readEnv('KDE_SESSION_VERSION') ?? '').trim();
-    const serviceName = kdeVersion === '6'
-        ? 'org.kde.kwalletd6'
-        : kdeVersion === '5'
-            ? 'org.kde.kwalletd5'
-            : 'org.kde.kwalletd';
-    const walletPath = kdeVersion === '6'
-        ? '/modules/kwalletd6'
-        : kdeVersion === '5'
-            ? '/modules/kwalletd5'
-            : '/modules/kwalletd';
-    const wallet = await getKWalletNetworkWallet(serviceName, walletPath);
-    const passwordRes = await execCapture('kwallet-query', ['--read-password', service, '--folder', folder, wallet], { timeoutMs: 3_000 });
-    if (passwordRes.code !== 0) {
-        warnings.push('Failed to read Linux keyring via kwallet-query; v11 cookies may be unavailable.');
-        return { password: '', warnings };
-    }
-    if (passwordRes.stdout.toLowerCase().startsWith('failed to read'))
-        return { password: '', warnings };
-    return { password: passwordRes.stdout.trim(), warnings };
-}
-export async function getLinuxChromeSafeStoragePassword(options = {}) {
-    const args = { app: 'chrome' };
-    if (options.backend !== undefined)
-        args.backend = options.backend;
-    return await getLinuxChromiumSafeStoragePassword(args);
-}
-function parseLinuxKeyringBackend() {
-    const raw = readEnv('SWEET_COOKIE_LINUX_KEYRING');
-    if (!raw)
-        return undefined;
-    const normalized = raw.toLowerCase();
-    if (normalized === 'gnome')
-        return 'gnome';
-    if (normalized === 'kwallet')
-        return 'kwallet';
-    if (normalized === 'basic')
-        return 'basic';
-    return undefined;
-}
-function chooseLinuxKeyringBackend() {
-    const xdg = readEnv('XDG_CURRENT_DESKTOP') ?? '';
-    const isKde = xdg.split(':').some((p) => p.trim().toLowerCase() === 'kde') || !!readEnv('KDE_FULL_SESSION');
-    return isKde ? 'kwallet' : 'gnome';
-}
-async function getKWalletNetworkWallet(serviceName, walletPath) {
-    const res = await execCapture('dbus-send', [
-        '--session',
-        '--print-reply=literal',
-        `--dest=${serviceName}`,
-        walletPath,
-        'org.kde.KWallet.networkWallet',
-    ], { timeoutMs: 3_000 });
-    const fallback = 'kdewallet';
-    if (res.code !== 0)
-        return fallback;
-    const raw = res.stdout.trim();
-    if (!raw)
-        return fallback;
-    return raw.replaceAll('"', '').trim() || fallback;
-}
-function readEnv(key) {
-    const value = process.env[key];
-    const trimmed = typeof value === 'string' ? value.trim() : '';
-    return trimmed.length ? trimmed : undefined;
-}
-//# sourceMappingURL=linuxKeyring.js.map