yugoo-design 0.2.7 → 0.2.8

package/payload/shared/scripts/{content-archive-CnwVcuWA.mjs → content-archive-BvVmbecb.mjs}

@@ -1,5 +1,5 @@
-import { Lt as DesignBundleVersion, Rt as DesignKitVersion, ft as loadDesignBundle } from "./core-entry-DESmwP78.mjs";
-import { t as loadStudioKit } from "./load-C-RwS23Y.mjs";
+import { Lt as DesignBundleVersion, Rt as DesignKitVersion, ft as loadDesignBundle } from "./core-entry-S65aB8cC.mjs";
+import { t as loadStudioKit } from "./load-D1xLlKL_.mjs";
 import { extname, isAbsolute, relative, resolve, sep } from "node:path";
 import { createHash } from "node:crypto";
 //#region packages/studio/src/content-archive.ts

package/payload/shared/scripts/{core-entry-DESmwP78.mjs → core-entry-S65aB8cC.mjs}

@@ -10256,6 +10256,7 @@ function queryPanelAuthoringReference(material, name, reference, type) {
 			component: name,
 			documentation: {
 				...entry.documentation,
+				sharedStandards: entry.documentation.sharedStandards ?? material.sharedStandards,
 				read: {
 					name,
 					reference: "docs"
@@ -10744,6 +10745,7 @@ function validatePanelManifest(manifest) {
 					"description",
 					"separator",
 					"collapsible",
+					"default_open",
 					"items",
 					"sidecar"
 				];
@@ -10795,6 +10797,7 @@ function validatePanelManifest(manifest) {
 						for (const key of ["title", "description"]) if (item[key] !== void 0 && (typeof item[key] !== "string" || !item[key].trim())) errors.push(`${at}: ${key} must be nonempty text`);
 						if (item.separator !== void 0 && typeof item.separator !== "boolean") errors.push(`${at}: separator must be boolean`);
 						if (item.collapsible !== void 0 && (typeof item.collapsible !== "boolean" || item.collapsible && (typeof item.title !== "string" || !item.title.trim()))) errors.push(`${at}: collapsible group requires boolean and nonempty title`);
+						if (item.default_open !== void 0 && (typeof item.default_open !== "boolean" || item.collapsible !== true)) errors.push(`${at}: default_open requires a collapsible group and boolean value`);
 						if (item.sidecar !== void 0) {
 							const sidecar = item.sidecar;
 							if (!sidecar || typeof sidecar !== "object" || Array.isArray(sidecar) || Object.keys(sidecar).some((key) => ![
@@ -11141,6 +11144,16 @@ function validatePanelManifest(manifest) {
 					"radio",
 					"radio_custom"
 				].includes(fieldOf(component.source, key)?.control ?? "")) errors.push(`${path}: board needs declared text fields`);
+				if (board.overview !== void 0 && typeof board.overview !== "boolean") errors.push(`${path}: board overview must be boolean`);
+				if (board.body_fields !== void 0 && (!isStringList(board.body_fields) || !board.body_fields.length || new Set(board.body_fields).size !== board.body_fields.length || !board.body_fields.includes(board.description) || board.body_fields.some((key) => {
+					const field = fieldOf(component.source, key);
+					return !field || field.hidden || !["text", "textarea"].includes(field.control) || [
+						board.label,
+						board.group,
+						board.badge,
+						board.rejected
+					].includes(key) || board.detail_fields?.includes(key);
+				}))) errors.push(`${path}: board body_fields requires unique visible text fields including description, separate from header/group/details`);
 				if (board.id_field !== void 0) {
 					const identity = fieldOf(component.source, board.id_field);
 					if (!identity || identity.control !== "text" || !identity.readonly || identity.hidden) errors.push(`${path}: board id_field requires a declared visible readonly text field`);
@@ -11474,6 +11487,40 @@ function validatePanelManifest(manifest) {
 			if ((component.children?.length ?? 0) > 0) errors.push(`${path}: panel_workspace uses slots, not children`);
 		}
 		if (component.component === "structured_data" && !isSafeDottedPath(component.source)) errors.push(`${path}: structured_data needs a safe source path`);
+		if (component.read_fields !== void 0) {
+			if (component.component !== "structured_data") errors.push(`${path}: read_fields requires structured_data`);
+			const validateReadFields = (value, at, depth) => {
+				if (!Array.isArray(value) || value.length > 100 || depth >= 8) {
+					errors.push(`${at}: read_fields must be a list of at most 100 fields within eight levels`);
+					return;
+				}
+				const keys = /* @__PURE__ */ new Set();
+				for (const [index, entry] of value.entries()) {
+					const location = `${at}[${index}]`;
+					if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+						errors.push(`${location}: invalid read field`);
+						continue;
+					}
+					if (Object.keys(entry).some((key) => ![
+						"key",
+						"label",
+						"item_label_field",
+						"fields",
+						"options_from_section",
+						"collapsed"
+					].includes(key))) errors.push(`${location}: unknown read field option`);
+					if (!isSafeDottedPath(entry.key) || entry.key.includes(".")) errors.push(`${location}: key must be a safe direct property`);
+					if (keys.has(entry.key)) errors.push(`${location}: duplicate read field ${String(entry.key)}`);
+					keys.add(entry.key);
+					if (typeof entry.label !== "string" || !entry.label.trim()) errors.push(`${location}: label must be nonempty text`);
+					if (entry.item_label_field !== void 0 && (!isSafeDottedPath(entry.item_label_field) || entry.item_label_field.includes("."))) errors.push(`${location}: item_label_field must be a safe direct property`);
+					if (entry.options_from_section !== void 0 && (typeof entry.options_from_section !== "string" || !sectionIds.has(entry.options_from_section))) errors.push(`${location}: options_from_section references an unknown section`);
+					if (entry.collapsed !== void 0 && typeof entry.collapsed !== "boolean") errors.push(`${location}: collapsed must be boolean`);
+					if (entry.fields !== void 0) validateReadFields(entry.fields, `${location}.fields`, depth + 1);
+				}
+			};
+			validateReadFields(component.read_fields, `${path}.read_fields`, 0);
+		}
 		if (component.component === "schema_field" && (!isSafeDottedPath(component.path) || ![
 			"text",
 			"textarea",

package/payload/shared/scripts/design.mjs

@@ -1,8 +1,8 @@
 import { i as __toESM, n as __exportAll, t as __commonJSMin } from "./rolldown-runtime-B4iAMlE-.mjs";
 import { i as notificationErrorResponse, n as requireThreadId } from "./codex-connection-1RvU1XCj.mjs";
 import { t as callCompanion } from "./connection-file-CNwrHbAG.mjs";
-import { a as openCompanionProject, c as resolveCodexMainTranscript, i as companionFs, l as createClaudeTranscript, n as companionKnowledgeRuntimeUrl, o as assertCompanionKitContributions, r as runtime, s as createCompanionContentLibrary, t as startCompanion, u as createQwenWorkTranscript } from "./server-BnEtfptI.mjs";
-import { A as validateSkillDesign, Ct as PANEL_COMPONENT_CATALOG, D as OFFICIAL_REFLECTION_PROFILE, E as OFFICIAL_GROUNDING_PROFILE, G as parseDesignCommand, K as runDesignProjectCommand, O as officialAdvisoryProfile, St as GENERATED_COMPONENT_KINDS, T as OFFICIAL_ALIGNMENT_PROFILE, at as ensureProjectKit, h as DESIGN_CLARITY_OUTPUT_SCHEMA, it as DesignProjectRegistry, xt as queryPanelAuthoringReference } from "./core-entry-DESmwP78.mjs";
+import { a as openCompanionProject, c as resolveCodexMainTranscript, i as companionFs, l as createClaudeTranscript, n as companionKnowledgeRuntimeUrl, o as assertCompanionKitContributions, r as runtime, s as createCompanionContentLibrary, t as startCompanion, u as createQwenWorkTranscript } from "./server-B6kGo8xO.mjs";
+import { A as validateSkillDesign, Ct as PANEL_COMPONENT_CATALOG, D as OFFICIAL_REFLECTION_PROFILE, E as OFFICIAL_GROUNDING_PROFILE, G as parseDesignCommand, K as runDesignProjectCommand, O as officialAdvisoryProfile, St as GENERATED_COMPONENT_KINDS, T as OFFICIAL_ALIGNMENT_PROFILE, at as ensureProjectKit, h as DESIGN_CLARITY_OUTPUT_SCHEMA, it as DesignProjectRegistry, xt as queryPanelAuthoringReference } from "./core-entry-S65aB8cC.mjs";
 import { n as DESIGN_GIT_READ_DESCRIPTION, r as designGitReadArguments, t as DESIGN_GIT_READ_ACTIONS } from "./design-git-read-BUV0s4TT.mjs";
 import { parseArgs } from "node:util";
 import { dirname, isAbsolute, join, resolve } from "node:path";

package/payload/shared/scripts/git-runtime-check.mjs

@@ -1,4 +1,4 @@
-import { zt as GitVersioning } from "./core-entry-DESmwP78.mjs";
+import { zt as GitVersioning } from "./core-entry-S65aB8cC.mjs";
 import { i as readDesignGit } from "./design-git-read-BUV0s4TT.mjs";
 import { join, resolve } from "node:path";
 import { pathToFileURL } from "node:url";

package/payload/shared/scripts/knowledge-snapshot-query.mjs

@@ -1,4 +1,4 @@
-import { S as queryKnowledgeSnapshot, b as knowledgeQueryFilters, x as knowledgeReadResult } from "./core-entry-DESmwP78.mjs";
+import { S as queryKnowledgeSnapshot, b as knowledgeQueryFilters, x as knowledgeReadResult } from "./core-entry-S65aB8cC.mjs";
 import { pathToFileURL } from "node:url";
 import { readFile } from "node:fs/promises";
 //#region packages/companion/src/knowledge-snapshot-query.mjs

package/payload/shared/scripts/{load-C-RwS23Y.mjs → load-D1xLlKL_.mjs}

@@ -1,4 +1,4 @@
-import { ft as loadDesignBundle, pt as loadDesignKit } from "./core-entry-DESmwP78.mjs";
+import { ft as loadDesignBundle, pt as loadDesignKit } from "./core-entry-S65aB8cC.mjs";
 import { resolve } from "node:path";
 //#region packages/studio/src/load.ts
 /** Studio-owned loading of a Kit from its directory source. */

package/payload/shared/scripts/{panel-preview-BeVRYFk1.mjs → panel-preview-D-OD9mro.mjs}

@@ -1,5 +1,5 @@
-import { jt as compileSchema } from "./core-entry-DESmwP78.mjs";
-import "./load-C-RwS23Y.mjs";
+import { jt as compileSchema } from "./core-entry-S65aB8cC.mjs";
+import "./load-D1xLlKL_.mjs";
 import "node:path";
 //#region packages/studio/src/panel-preview.ts
 function failure(code, message) {

package/payload/shared/scripts/{server-BnEtfptI.mjs → server-B6kGo8xO.mjs}

@@ -1,14 +1,14 @@
 import { i as notificationErrorResponse, n as requireThreadId, o as unknownDeliveryError, t as createCodexConnection } from "./codex-connection-1RvU1XCj.mjs";
-import { $ as storedKnowledgeGraph, A as validateSkillDesign, At as writeConfinedText, B as writeDesignClarityAuthority, Bt as designProjectRecordsRoot, C as DesignAdvisoryJournal, D as OFFICIAL_REFLECTION_PROFILE, Dt as removeConfinedFile, E as OFFICIAL_GROUNDING_PROFILE, Et as readConfinedText, F as pendingMustEditAuthorityForSave, Ft as DesignProjectManager, H as designClarityInputMatches, I as DesignExecutionHandoffJournal, It as nodeDesignProjectSpawn, J as saveDesignKnowledgeRecords, L as DesignJournalStorage, M as applyPanelEdit, Mt as parseSchemaYaml, N as buildPanelSaveNote, Nt as validatorFromSchemaYaml, O as officialAdvisoryProfile, Ot as resolveConfinedFilePath, P as parsePanelArtifacts, Q as refreshDesignKnowledge, R as readCommittedDesignClarityAuthority, S as queryKnowledgeSnapshot, T as OFFICIAL_ALIGNMENT_PROFILE, Tt as readConfinedBytes, U as parseDesignClarityInput, V as designClarityDigest, W as parseDesignClarityReported, X as readDesignKnowledgePublication, Y as advanceDesignKnowledgePublication, Z as readPublishedDesignKnowledge, _ as DESIGN_EXECUTOR_EVIDENCE_GUIDANCE, _t as resolveDesignKitPackage, a as autoPanelGenerationPrompt, at as ensureProjectKit, b as knowledgeQueryFilters, bt as resolveSemanticCapability, c as resolveAutoPanel, ct as projectBundleOverrides, d as knowledgeReviewSchema, dt as createDirectoryBundleResolver, et as readSourceDesignKnowledge, f as publishKnowledgeReview, ft as loadDesignBundle, g as DESIGN_CORE_CLARITY_RUBRIC_PROMPT, h as DESIGN_CLARITY_OUTPUT_SCHEMA, i as writeDesignReviewPolicy, j as DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE, k as deriveCurrentDesignExecutionGate, kt as writeConfinedBytes, l as retainResolvedAutoPanel, lt as projectKitContentHash, m as readAdvisoryDesignKnowledge, mt as parseFrontmatter, n as DesignReviewPublicationQueue, nt as DesignKnowledgeRevision, o as publishAutoPanelComponents, ot as DesignContentStore, p as splitKnowledgeReviewResult, pt as loadDesignKit, q as restoreDesignKnowledgeRecords, r as readDesignReviewPolicy, rt as commitDesignProjectRecords, s as assertResolvedAutoPanelSave, st as composeProjectKit, t as DesignContinuousReviewClock, tt as readCompleteDesignKnowledge, u as knowledgeReviewGuidance, ut as sameProjectContentPin, v as DESIGN_WORKER_EVIDENCE_GUIDANCE, vt as designOntologyCoverage, w as renderAdvisoryReviewMemory, wt as requireDesignFileRelativePath, x as knowledgeReadResult, y as KNOWLEDGE_AGENTIC_GUIDANCE, yt as reviewSupportOf, z as readDesignClarityAuthority, zt as GitVersioning } from "./core-entry-DESmwP78.mjs";
+import { $ as storedKnowledgeGraph, A as validateSkillDesign, At as writeConfinedText, B as writeDesignClarityAuthority, Bt as designProjectRecordsRoot, C as DesignAdvisoryJournal, D as OFFICIAL_REFLECTION_PROFILE, Dt as removeConfinedFile, E as OFFICIAL_GROUNDING_PROFILE, Et as readConfinedText, F as pendingMustEditAuthorityForSave, Ft as DesignProjectManager, H as designClarityInputMatches, I as DesignExecutionHandoffJournal, It as nodeDesignProjectSpawn, J as saveDesignKnowledgeRecords, L as DesignJournalStorage, M as applyPanelEdit, Mt as parseSchemaYaml, N as buildPanelSaveNote, Nt as validatorFromSchemaYaml, O as officialAdvisoryProfile, Ot as resolveConfinedFilePath, P as parsePanelArtifacts, Q as refreshDesignKnowledge, R as readCommittedDesignClarityAuthority, S as queryKnowledgeSnapshot, T as OFFICIAL_ALIGNMENT_PROFILE, Tt as readConfinedBytes, U as parseDesignClarityInput, V as designClarityDigest, W as parseDesignClarityReported, X as readDesignKnowledgePublication, Y as advanceDesignKnowledgePublication, Z as readPublishedDesignKnowledge, _ as DESIGN_EXECUTOR_EVIDENCE_GUIDANCE, _t as resolveDesignKitPackage, a as autoPanelGenerationPrompt, at as ensureProjectKit, b as knowledgeQueryFilters, bt as resolveSemanticCapability, c as resolveAutoPanel, ct as projectBundleOverrides, d as knowledgeReviewSchema, dt as createDirectoryBundleResolver, et as readSourceDesignKnowledge, f as publishKnowledgeReview, ft as loadDesignBundle, g as DESIGN_CORE_CLARITY_RUBRIC_PROMPT, h as DESIGN_CLARITY_OUTPUT_SCHEMA, i as writeDesignReviewPolicy, j as DESIGN_PANEL_SAVE_ASSESSMENT_GUIDANCE, k as deriveCurrentDesignExecutionGate, kt as writeConfinedBytes, l as retainResolvedAutoPanel, lt as projectKitContentHash, m as readAdvisoryDesignKnowledge, mt as parseFrontmatter, n as DesignReviewPublicationQueue, nt as DesignKnowledgeRevision, o as publishAutoPanelComponents, ot as DesignContentStore, p as splitKnowledgeReviewResult, pt as loadDesignKit, q as restoreDesignKnowledgeRecords, r as readDesignReviewPolicy, rt as commitDesignProjectRecords, s as assertResolvedAutoPanelSave, st as composeProjectKit, t as DesignContinuousReviewClock, tt as readCompleteDesignKnowledge, u as knowledgeReviewGuidance, ut as sameProjectContentPin, v as DESIGN_WORKER_EVIDENCE_GUIDANCE, vt as designOntologyCoverage, w as renderAdvisoryReviewMemory, wt as requireDesignFileRelativePath, x as knowledgeReadResult, y as KNOWLEDGE_AGENTIC_GUIDANCE, yt as reviewSupportOf, z as readDesignClarityAuthority, zt as GitVersioning } from "./core-entry-S65aB8cC.mjs";
 import { i as readDesignGit } from "./design-git-read-BUV0s4TT.mjs";
 import { l as withWindowsInspection, o as windowsProcess, r as windowsCommandArgs, t as createWindowsProcessInspector } from "./windows-native-platform-DLm-tedp.mjs";
-import { r as normalizeStudioInstanceChanges, t as createStudioDraftPorts } from "./studio-panel-drafts-Dq171F6x.mjs";
-import { t as loadStudioKit } from "./load-C-RwS23Y.mjs";
-import { TextDecoder, isDeepStrictEqual } from "node:util";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep, win32 } from "node:path";
+import { r as normalizeStudioInstanceChanges, t as createStudioDraftPorts } from "./studio-panel-drafts-DSxfgHfk.mjs";
+import { t as loadStudioKit } from "./load-D1xLlKL_.mjs";
+import { TextDecoder, isDeepStrictEqual, promisify } from "node:util";
+import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { link, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, realpath, rename, rm, rmdir, stat, unlink, writeFile } from "node:fs/promises";
-import { spawn } from "node:child_process";
+import { execFile, spawn } from "node:child_process";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { homedir, tmpdir } from "node:os";
 import { closeSync, constants, createReadStream, fstatSync, lstatSync, openSync, readSync, realpathSync } from "node:fs";
@@ -4535,32 +4535,114 @@ function createWorkBuddyTranscript({ path, threadId, projectRoot, startBoundary,
 //#endregion
 //#region packages/companion/src/qwenwork-connection.mjs
 /** QwenWork WorkerTransport uses a worker thread inside the desktop main process. */
+const execute = promisify(execFile);
+function nativePaths(platform) {
+	if (platform === "win32") return win32;
+	if (platform === "darwin") return posix;
+	throw Error("QwenWork adapter requires native Windows or macOS.");
+}
+const samePath = (a, b, platform) => typeof a === "string" && typeof b === "string" && (platform === "win32" ? win32.normalize(a).toLowerCase() === win32.normalize(b).toLowerCase() : posix.normalize(a) === posix.normalize(b));
+/** Inspect one PID using system tools. ps lstart is only a consistency check;
+* the desktop generation comes from the native application's AppKit launch date. */
+async function qwenWorkDarwinProcess(pid, { executable, run = execute, uid = process.getuid?.() } = {}) {
+	if (!Number.isSafeInteger(pid) || pid < 2) throw Error("Invalid native PID.");
+	const options = {
+		encoding: "utf8",
+		timeout: 15e3,
+		maxBuffer: 262144,
+		env: {
+			...process.env,
+			LC_ALL: "C",
+			TZ: "UTC"
+		}
+	};
+	const ps = async () => {
+		const { stdout } = await run("/bin/ps", [
+			"-ww",
+			"-p",
+			String(pid),
+			"-o",
+			"pid=,ppid=,uid=,lstart=,comm="
+		], options);
+		const match = stdout.match(/^\s*(\d+)\s+(\d+)\s+(\d+)\s+([A-Za-z]{3}\s+[A-Za-z]{3}\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})\s+([^\r\n]+)\s*$/);
+		if (!match || Number(match[1]) !== pid || Number(match[3]) !== uid) throw Error("Incomplete native macOS process identity.");
+		return {
+			pid,
+			parent: Number(match[2]),
+			uid: Number(match[3]),
+			observedStart: match[4],
+			executable: match[5].trim()
+		};
+	};
+	const before = await ps();
+	if (before.executable !== executable) return {
+		...before,
+		procStart: void 0,
+		commandLine: ""
+	};
+	const { stdout: args } = await run("/bin/ps", [
+		"-ww",
+		"-p",
+		String(pid),
+		"-o",
+		"args="
+	], options);
+	const commandLine = args.trim();
+	if (commandLine !== executable) return {
+		...before,
+		procStart: void 0,
+		commandLine
+	};
+	const script = `ObjC.import('AppKit'); var a=$.NSRunningApplication.runningApplicationWithProcessIdentifier(${pid}); if(a.isNil()) throw Error('Native macOS application unavailable'); if(a.executableURL.isNil() || a.launchDate.isNil()) throw Error('Native macOS application identity unavailable'); JSON.stringify({pid:Number(a.processIdentifier),executable:ObjC.unwrap(a.executableURL.path),start:Number(a.launchDate.timeIntervalSince1970),terminated:Boolean(a.terminated)})`;
+	let app;
+	try {
+		const { stdout } = await run("/usr/bin/osascript", [
+			"-l",
+			"JavaScript",
+			"-e",
+			script
+		], options);
+		app = JSON.parse(stdout);
+	} catch (error) {
+		throw Error("QwenWork macOS application identity is unobservable in this process context; native generation could not be verified.", { cause: error });
+	}
+	if (app.pid !== pid || app.executable !== executable || !Number.isFinite(app.start) || app.start <= 0 || app.terminated !== false) throw Error("QwenWork macOS application identity unavailable.");
+	const after = await ps();
+	if (JSON.stringify(after) !== JSON.stringify(before)) throw Error("QwenWork process changed during verification.");
+	return {
+		...after,
+		procStart: `appkit:${app.start}`,
+		commandLine
+	};
+}
 async function fileHash(path) {
 	const hash = createHash("sha256");
 	for await (const chunk of createReadStream(path)) hash.update(chunk);
 	return hash.digest("hex");
 }
 async function readQwenWorkRuntimePins({ platform = process.platform, environment = process.env, read = readFile } = {}) {
-	if (platform !== "win32") throw Error("QwenWork adapter currently requires native Windows.");
+	const paths = nativePaths(platform);
 	const configured = environment.YUGOO_QWENWORK_RUNTIME_CONFIG;
-	if (configured !== void 0 && (typeof configured !== "string" || !win32.isAbsolute(configured) || /[\r\n\0]/.test(configured))) throw Error("Exact absolute QwenWork runtime configuration required.");
+	if (configured !== void 0 && (typeof configured !== "string" || !paths.isAbsolute(configured) || /[\r\n\0]/.test(configured))) throw Error("Exact absolute QwenWork runtime configuration required.");
 	return JSON.parse(await read(configured ?? new URL("./qwenwork-runtime.json", import.meta.url), "utf8"));
 }
-function matchesQwenWorkMain(snapshot, pins) {
-	const same = (a, b) => typeof a === "string" && typeof b === "string" && win32.normalize(a).toLowerCase() === win32.normalize(b).toLowerCase();
+function matchesQwenWorkMain(snapshot, pins, { platform = process.platform } = {}) {
+	const paths = nativePaths(platform);
+	if (platform === "darwin") return paths.isAbsolute(pins.executable) && samePath(snapshot.executable, pins.executable, platform) && snapshot.commandLine === pins.executable && /^appkit:[0-9]+(?:\.[0-9]+)?$/.test(snapshot.procStart ?? "");
 	const args = windowsCommandArgs(snapshot.commandLine);
-	return win32.isAbsolute(pins.executable) && args.length === 1 && same(snapshot.executable, pins.executable) && same(args[0], pins.executable);
+	return paths.isAbsolute(pins.executable) && args.length === 1 && samePath(snapshot.executable, pins.executable, platform) && samePath(args[0], pins.executable, platform);
 }
-async function inspectQwenWorkProcess(pid, pins, { snapshot = windowsProcess, canonical = realpath, bytes, initial } = {}) {
+async function inspectQwenWorkProcess(pid, pins, { platform = process.platform, snapshot = platform === "darwin" ? (pid) => qwenWorkDarwinProcess(pid, { executable: pins.executable }) : windowsProcess, canonical = realpath, bytes, initial } = {}) {
+	const paths = nativePaths(platform);
 	for (const k of ["executableSha256", "workerSha256"]) if (!/^[a-f0-9]{64}$/.test(pins[k] ?? "")) throw Error("Exact QwenWork runtime pins required.");
-	if (!win32.isAbsolute(pins.worker)) throw Error("Exact QwenWork worker path required.");
+	if (!paths.isAbsolute(pins.worker)) throw Error("Exact QwenWork worker path required.");
 	const before = initial ?? await snapshot(pid);
-	if (!matchesQwenWorkMain(before, pins)) return {
+	if (!matchesQwenWorkMain(before, pins, { platform })) return {
 		...before,
 		supported: false
 	};
 	for (const [path, hash] of [[pins.executable, pins.executableSha256], [pins.worker, pins.workerSha256]]) {
-		if (win32.normalize(await canonical(path)).toLowerCase() !== win32.normalize(path).toLowerCase()) throw Error("QwenWork runtime path resolves outside its pins.");
+		if (!samePath(await canonical(path), path, platform)) throw Error("QwenWork runtime path resolves outside its pins.");
 		if ((bytes ? createHash("sha256").update(await bytes(path)).digest("hex") : await fileHash(path)) !== hash) throw Error("QwenWork runtime bytes changed; refresh the verified installation pins.");
 	}
 	const after = await snapshot(pid);
@@ -4570,8 +4652,8 @@ async function inspectQwenWorkProcess(pid, pins, { snapshot = windowsProcess, ca
 		supported: true
 	};
 }
-async function qwenworkProcess(pid, options) {
-	return inspectQwenWorkProcess(pid, await readQwenWorkRuntimePins(), options);
+async function qwenworkProcess(pid, options = {}) {
+	return inspectQwenWorkProcess(pid, await readQwenWorkRuntimePins({ platform: options.platform ?? process.platform }), options);
 }
 async function findQwenWorkAncestor(startPid, inspect, snapshot) {
 	const seen = /* @__PURE__ */ new Set();
@@ -4589,11 +4671,31 @@ async function findQwenWorkAncestor(startPid, inspect, snapshot) {
 }
 async function nativeQwenWorkHookProcess() {
 	const pins = await readQwenWorkRuntimePins();
+	if (process.platform === "darwin") return findQwenWorkAncestor(process.ppid, (pid, initial) => inspectQwenWorkProcess(pid, pins, { initial }), (pid) => qwenWorkDarwinProcess(pid, { executable: pins.executable }));
 	return withWindowsInspection(() => findQwenWorkAncestor(process.ppid, (pid, initial) => inspectQwenWorkProcess(pid, pins, { initial }), windowsProcess));
 }
 //#endregion
 //#region packages/companion/src/native-hook-transport.mjs
 /** Shared native FileChanged/asyncRewake inbox. Host adapters supply identity, not a scheduler. */
+const windowsStorage = process.platform === "win32" ? import("./windows-private-storage-Q0cTolE3.mjs") : void 0;
+async function assertPrivate(path, stat) {
+	if (windowsStorage) {
+		const checked = await (await windowsStorage).assertWindowsPrivate(path);
+		if (checked.dev !== stat.dev || checked.ino !== stat.ino) throw new Error("Private notification path changed during inspection.");
+	} else if (stat.mode & 63 || process.getuid && stat.uid !== process.getuid()) throw new Error("Invalid private notification.");
+}
+/** The same bounded, no-follow native private-file read serves Hooks and desktop control. */
+async function readNativePrivateFile(path) {
+	const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+	try {
+		const stat = await file.stat();
+		if (!stat.isFile() || stat.size > 262144) throw new Error("Invalid private notification.");
+		await assertPrivate(path, stat);
+		return await file.readFile("utf8");
+	} finally {
+		await file.close();
+	}
+}
 function createNativeHookTransport({ host, label, noticeFile, inspectProcess, nativeHookProcess, registrationEvents = ["SessionStart"], requireTranscript = false, resumeEvents = [] }) {
 	const prefix = {
 		qoder: "qoder",
@@ -4605,13 +4707,6 @@ function createNativeHookTransport({ host, label, noticeFile, inspectProcess, na
 	const resumeRetentionMs = 864e5;
 	const marker = `design-system-${prefix}-hook:`;
 	const defaultRoot = () => join(homedir(), ".local/state/design-system", `${prefix}-hooks`);
-	const windowsStorage = process.platform === "win32" ? import("./windows-private-storage-Q0cTolE3.mjs") : void 0;
-	async function assertPrivate(path, stat) {
-		if (windowsStorage) {
-			const checked = await (await windowsStorage).assertWindowsPrivate(path);
-			if (checked.dev !== stat.dev || checked.ino !== stat.ino) throw new Error("Private notification path changed during inspection.");
-		} else if (stat.mode & 63 || process.getuid && stat.uid !== process.getuid()) throw new Error("Invalid private notification.");
-	}
 	async function privateDirectory(path) {
 		if (windowsStorage) await (await windowsStorage).ensureWindowsPrivateDirectory(path);
 		else await mkdir(path, {
@@ -4629,15 +4724,7 @@ function createNativeHookTransport({ host, label, noticeFile, inspectProcess, na
 		return { directory: join(hookRoot, sessionId) };
 	}
 	async function privateJson(path) {
-		const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
-		try {
-			const stat = await file.stat();
-			if (!stat.isFile() || stat.size > 262144) throw new Error("Invalid private notification.");
-			await assertPrivate(path, stat);
-			return JSON.parse(await file.readFile("utf8"));
-		} finally {
-			await file.close();
-		}
+		return JSON.parse(await readNativePrivateFile(path));
 	}
 	async function createConnection(options) {
 		const location = await paths(options);
@@ -4995,29 +5082,46 @@ async function createDesktopInputConnection({ sessionId, nativeCwd, request, ver
 		}
 	};
 }
-async function createQwenWorkDesktopInput(options) {
-	if (process.platform !== "win32" || !process.env.APPDATA) throw Error("Native Windows QwenWork desktop input required.");
-	const { assertWindowsPrivate } = await import("./windows-private-storage-Q0cTolE3.mjs");
-	const root = join(process.env.APPDATA, "QwenWorkCN");
+function qwenWorkUserDataRoot({ platform = process.platform, environment = process.env, home = homedir() } = {}) {
+	if (platform === "win32" && typeof environment.APPDATA === "string" && win32.isAbsolute(environment.APPDATA)) return win32.join(environment.APPDATA, "QwenWorkCN");
+	if (platform === "darwin" && typeof home === "string" && posix.isAbsolute(home)) return posix.join(home, "Library/Application Support/QwenWorkCN");
+	throw Error("Native Windows or macOS QwenWork user-data path required.");
+}
+async function createQwenWorkDesktopInput(options, { platform = process.platform, environment = process.env, home = homedir(), canonical = realpath, readPrivate = readNativePrivateFile, inspectProcess = qwenworkProcess, createInspector = createWindowsProcessInspector, fetchRequest = fetch, openDatabase = async (path) => {
+	const { DatabaseSync } = await import("node:sqlite");
+	return new DatabaseSync(path, { readOnly: true });
+} } = {}) {
+	const root = qwenWorkUserDataRoot({
+		platform,
+		environment,
+		home
+	});
+	if (!/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/i.test(options.sessionId ?? "")) throw Error("Exact QwenWork session UUID required.");
 	const endpointFile = join(root, "cli-control/endpoint.json");
-	await assertWindowsPrivate(endpointFile);
-	const endpoint = JSON.parse(await readFile(endpointFile, "utf8"));
+	let endpoint;
+	try {
+		endpoint = JSON.parse(await readPrivate(endpointFile));
+	} catch (error) {
+		if (error.code === "ENOENT") throw Error("QwenWork desktop control endpoint is unavailable; enable only through authorized host setup, or explicitly select --qwenwork-events-only.", { cause: error });
+		throw error;
+	}
 	if (endpoint.protocol !== "qwenwork.desktop.v1" || !/^[a-f0-9]{32}$/.test(endpoint.instance_id) || !Number.isInteger(endpoint.port) || endpoint.port < 1 || endpoint.port > 65535) throw Error("Invalid QwenWork desktop endpoint.");
 	const tokenFile = join(root, "cli-control", endpoint.instance_id, "token");
-	await assertWindowsPrivate(tokenFile);
-	const token = await readFile(tokenFile, "utf8");
+	const token = await readPrivate(tokenFile);
 	if (!/^[a-f0-9]{64}$/.test(token)) throw Error("Invalid QwenWork desktop credential.");
-	const nativeCwd = await realpath(options.nativeCwd);
-	const transcriptPath = await realpath(options.transcriptPath);
-	const bindingFile = join(homedir(), ".local/state/design-system/qwenwork-hooks", options.sessionId, "binding.json");
-	await assertWindowsPrivate(bindingFile);
-	const original = JSON.parse(await readFile(bindingFile, "utf8"));
-	const { DatabaseSync } = await import("node:sqlite");
-	const inspector = createWindowsProcessInspector();
+	const nativeCwd = await canonical(options.nativeCwd);
+	const transcriptPath = await canonical(options.transcriptPath);
+	const bindingFile = join(home, ".local/state/design-system/qwenwork-hooks", options.sessionId, "binding.json");
+	const original = JSON.parse(await readPrivate(bindingFile));
+	const inspector = platform === "win32" ? createInspector() : { close() {} };
 	const verifyBinding = async () => {
-		const processInfo = await qwenworkProcess(original.pid, { snapshot: inspector.snapshot });
-		if (!processInfo.supported || processInfo.procStart !== original.procStart || original.cwd !== nativeCwd || original.transcriptPath !== transcriptPath) throw Error("QwenWork native identity changed; reopen the Panel.");
-		const db = new DatabaseSync(join(root, "data/agents.db"), { readOnly: true });
+		const current = JSON.parse(await readPrivate(bindingFile));
+		const processInfo = await inspectProcess(original.pid, {
+			platform,
+			...inspector.snapshot ? { snapshot: inspector.snapshot } : {}
+		});
+		if (!processInfo.supported || processInfo.procStart !== original.procStart || current.pid !== original.pid || current.procStart !== original.procStart || current.cwd !== nativeCwd || current.transcriptPath !== transcriptPath || original.cwd !== nativeCwd || original.transcriptPath !== transcriptPath) throw Error("QwenWork native identity changed; reopen the Panel.");
+		const db = await openDatabase(join(root, "data/agents.db"));
 		try {
 			db.exec("PRAGMA query_only=ON");
 			const rows = db.prepare("SELECT id FROM sub_chats WHERE session_id=?").all(options.sessionId);
@@ -5028,9 +5132,9 @@ async function createQwenWorkDesktopInput(options) {
 		}
 	};
 	const request = async (method, params) => {
-		const current = JSON.parse(await readFile(endpointFile, "utf8"));
-		if (current.instance_id !== endpoint.instance_id || current.port !== endpoint.port) throw Error("QwenWork desktop instance changed; reopen the Panel.");
-		const response = await fetch(`http://127.0.0.1:${endpoint.port}/v1/control`, {
+		const current = JSON.parse(await readPrivate(endpointFile));
+		if (current.protocol !== endpoint.protocol || current.instance_id !== endpoint.instance_id || current.port !== endpoint.port || await readPrivate(tokenFile) !== token) throw Error("QwenWork desktop instance changed; reopen the Panel.");
+		const response = await fetchRequest(`http://127.0.0.1:${endpoint.port}/v1/control`, {
 			method: "POST",
 			redirect: "error",
 			headers: {
@@ -5605,7 +5709,7 @@ function createCompanionContentLibrary({ fs, kitRoot, stateRoot, trustedContentS
 		},
 		/** The shared Studio store owns current library edits; projects take a copy. */
 		async studio() {
-			return studio ??= import("./studio-CFUWk0vJ.mjs").then(({ createCompanionStudio }) => createCompanionStudio(() => this.loadInstalled(), kitRoot, stateRoot, this)).catch((error) => {
+			return studio ??= import("./studio-DumCCbFT.mjs").then(({ createCompanionStudio }) => createCompanionStudio(() => this.loadInstalled(), kitRoot, stateRoot, this)).catch((error) => {
 				studio = void 0;
 				throw error;
 			});

package/payload/shared/scripts/{studio-CFUWk0vJ.mjs → studio-DumCCbFT.mjs}

@@ -1,7 +1,7 @@
-import { Pt as require_dist } from "./core-entry-DESmwP78.mjs";
-import { t as loadStudioKit } from "./load-C-RwS23Y.mjs";
-import { r as readStudioContentArchive } from "./content-archive-CnwVcuWA.mjs";
-import { t as finalizeStudioPanelPreview } from "./panel-preview-BeVRYFk1.mjs";
+import { Pt as require_dist } from "./core-entry-S65aB8cC.mjs";
+import { t as loadStudioKit } from "./load-D1xLlKL_.mjs";
+import { r as readStudioContentArchive } from "./content-archive-BvVmbecb.mjs";
+import { t as finalizeStudioPanelPreview } from "./panel-preview-D-OD9mro.mjs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { lstat, readFile, readdir, realpath } from "node:fs/promises";
 //#region packages/studio/src/composition.ts
@@ -583,7 +583,7 @@ async function createCompanionStudio(kit, kitRoot, stateRoot, contentLibrary) {
 				const retained = contentLibrary ? await contentLibrary.store.resolveBundle(bundlePin) : void 0;
 				const base = retained?.resourceRoot ?? selected.resourceRoot;
 				if (!base) throw new Error("Independent Bundle source is unavailable.");
-				const { createStudioInstanceAdapters } = await import("./studio-instance-composition-BJzYMyvV.mjs");
+				const { createStudioInstanceAdapters } = await import("./studio-instance-composition-DfbZVetl.mjs");
 				const { composition } = createStudioInstanceAdapters({
 					listBundles: async () => [bundlePin],
 					captureKit: async () => {
@@ -717,7 +717,7 @@ async function createCompanionStudio(kit, kitRoot, stateRoot, contentLibrary) {
 	};
 	const instances = () => {
 		if (!stateRoot) throw new Error("Studio authoring storage is not configured.");
-		return instanceService ??= Promise.all([import("./studio-instances-gQFR9yqL.mjs"), import("./studio-instance-composition-BJzYMyvV.mjs")]).then(async ([{ createStudioInstances }, { createStudioInstanceAdapters }]) => {
+		return instanceService ??= Promise.all([import("./studio-instances-BnVSHNCf.mjs"), import("./studio-instance-composition-DfbZVetl.mjs")]).then(async ([{ createStudioInstances }, { createStudioInstanceAdapters }]) => {
 			return createStudioInstances({
 				stateRoot,
 				...createStudioInstanceAdapters({

package/payload/shared/scripts/{studio-instance-composition-BJzYMyvV.mjs → studio-instance-composition-DfbZVetl.mjs}

@@ -1,5 +1,5 @@
-import { Pt as require_dist, ft as loadDesignBundle, gt as parseMindsetSkillNames, ht as parseKitMounts, mt as parseFrontmatter, pt as loadDesignKit } from "./core-entry-DESmwP78.mjs";
-import { t as finalizeStudioPanelPreview } from "./panel-preview-BeVRYFk1.mjs";
+import { Pt as require_dist, ft as loadDesignBundle, gt as parseMindsetSkillNames, ht as parseKitMounts, mt as parseFrontmatter, pt as loadDesignKit } from "./core-entry-S65aB8cC.mjs";
+import { t as finalizeStudioPanelPreview } from "./panel-preview-D-OD9mro.mjs";
 import { isAbsolute, relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
 //#region packages/studio/src/node/studio-instance-composition.mjs

package/payload/shared/scripts/{studio-instances-gQFR9yqL.mjs → studio-instances-BnVSHNCf.mjs}

@@ -1,6 +1,6 @@
-import { Pt as require_dist, ht as parseKitMounts } from "./core-entry-DESmwP78.mjs";
-import { n as STUDIO_INSTANCE_CHANGE_LIMITS, r as normalizeStudioInstanceChanges, t as createStudioDraftPorts } from "./studio-panel-drafts-Dq171F6x.mjs";
-import { n as readStudioArchiveResource, t as exportStudioSourceArchive } from "./content-archive-CnwVcuWA.mjs";
+import { Pt as require_dist, ht as parseKitMounts } from "./core-entry-S65aB8cC.mjs";
+import { n as STUDIO_INSTANCE_CHANGE_LIMITS, r as normalizeStudioInstanceChanges, t as createStudioDraftPorts } from "./studio-panel-drafts-DSxfgHfk.mjs";
+import { n as readStudioArchiveResource, t as exportStudioSourceArchive } from "./content-archive-BvVmbecb.mjs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { createHash, randomUUID } from "node:crypto";
 //#region packages/studio/src/node/studio-instances.mjs

package/payload/shared/scripts/{studio-panel-drafts-Dq171F6x.mjs → studio-panel-drafts-DSxfgHfk.mjs}

@@ -1,4 +1,4 @@
-import { n as readStudioArchiveResource } from "./content-archive-CnwVcuWA.mjs";
+import { n as readStudioArchiveResource } from "./content-archive-BvVmbecb.mjs";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { lstat, mkdir, open, readFile, readdir, realpath, rename, rmdir, unlink } from "node:fs/promises";
 import { createHash, randomUUID } from "node:crypto";

package/payload/shared/scripts/workbuddy-panel-service.mjs

@@ -1,5 +1,5 @@
 import { n as requireThreadId } from "./codex-connection-1RvU1XCj.mjs";
-import { t as startCompanion } from "./server-BnEtfptI.mjs";
+import { t as startCompanion } from "./server-B6kGo8xO.mjs";
 import { isAbsolute, join } from "node:path";
 import { writeFile } from "node:fs/promises";
 import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";