zidane 9.1.1 → 9.1.3

package/dist/agent.d.ts

@@ -1,2 +1,2 @@
-import { Aa as RunSummaryError, BP as ReadStateEntry, Bk as CacheDimensionDiff, Da as RunSummaryByModel, Ea as RunSummaryBudget, GP as hydrateReadStateFromSessionAsync, Gk as CacheSystemSection, HP as getReadState, Hk as CacheDimensionSnapshot, Jk as hashMessages, Jo as McpToolWrap, KP as readStateKey, Kk as diffCacheDimensions, Ko as McpConnector, Ma as RunSummaryTokens, Na as RunSummaryValidation, Oa as RunSummaryCollector, Ok as AgentHookMap, Pa as createRunSummaryCollector, Rk as CacheBreakInfo, Ta as RunSummaryBlock, Uk as CacheDriftInfo, VP as ReadStateMap, Vk as CacheDimensionName, WP as hydrateReadStateFromSession, Wk as CachePromptSections, Wo as AgentOptions, Xk as snapshotCacheDimensions, Yk as installCacheBreakLogger, ja as RunSummaryRepeatGuard, ka as RunSummaryCollectorOptions, kk as AgentHooks, ko as createAgent, qP as resolveReadStateMap, qk as fnv1a32, qo as McpToolMeta, wa as RunSummary, zP as HydrateReadStateOptions, zk as CacheBreakLoggerOptions, zo as Agent } from "./index-CGbOWa7y.js";
+import { AA as snapshotCacheDimensions, Aa as RunSummaryError, CA as CacheDriftInfo, CF as getReadState, DA as fnv1a32, DF as readStateKey, Da as RunSummaryByModel, EA as diffCacheDimensions, EF as hydrateReadStateFromSessionAsync, Ea as RunSummaryBudget, Jo as McpToolWrap, Ko as McpConnector, Ma as RunSummaryTokens, Na as RunSummaryValidation, OA as hashMessages, OF as resolveReadStateMap, Oa as RunSummaryCollector, Pa as createRunSummaryCollector, SA as CacheDimensionSnapshot, SF as ReadStateMap, TA as CacheSystemSection, TF as hydrateReadStateFromSession, Ta as RunSummaryBlock, Wo as AgentOptions, bA as CacheDimensionDiff, bF as HydrateReadStateOptions, cA as AgentHookMap, ja as RunSummaryRepeatGuard, kA as installCacheBreakLogger, ka as RunSummaryCollectorOptions, ko as createAgent, lA as AgentHooks, qo as McpToolMeta, vA as CacheBreakInfo, wA as CachePromptSections, wa as RunSummary, xA as CacheDimensionName, xF as ReadStateEntry, yA as CacheBreakLoggerOptions, zo as Agent } from "./index-WlE93Q6d.js";
 export { type Agent, type AgentHookMap, type AgentHooks, type AgentOptions, type CacheBreakInfo, type CacheBreakLoggerOptions, type CacheDimensionDiff, type CacheDimensionName, type CacheDimensionSnapshot, type CacheDriftInfo, type CachePromptSections, type CacheSystemSection, type HydrateReadStateOptions, type McpConnector, type McpToolMeta, type McpToolWrap, type ReadStateEntry, type ReadStateMap, type RunSummary, type RunSummaryBlock, type RunSummaryBudget, type RunSummaryByModel, type RunSummaryCollector, type RunSummaryCollectorOptions, type RunSummaryError, type RunSummaryRepeatGuard, type RunSummaryTokens, type RunSummaryValidation, createAgent, createRunSummaryCollector, diffCacheDimensions, fnv1a32, getReadState, hashMessages, hydrateReadStateFromSession, hydrateReadStateFromSessionAsync, installCacheBreakLogger, readStateKey, resolveReadStateMap, snapshotCacheDimensions };

package/dist/agent.js

@@ -1,4 +1,4 @@
-import { D as hashMessages, O as installCacheBreakLogger, T as fnv1a32, k as snapshotCacheDimensions, n as createAgent, w as diffCacheDimensions } from "./agent-DJhpTS-B.js";
+import { D as hashMessages, O as installCacheBreakLogger, T as fnv1a32, k as snapshotCacheDimensions, n as createAgent, w as diffCacheDimensions } from "./agent-Dh_XZ7fj.js";
 import { a as hydrateReadStateFromSessionAsync, c as readStateKey, i as hydrateReadStateFromSession, l as resolveReadStateMap, t as getReadState } from "./read-state-kgOvuIcp.js";
 import { t as createRunSummaryCollector } from "./run-summary-2d26oMyQ.js";
 export { createAgent, createRunSummaryCollector, diffCacheDimensions, fnv1a32, getReadState, hashMessages, hydrateReadStateFromSession, hydrateReadStateFromSessionAsync, installCacheBreakLogger, readStateKey, resolveReadStateMap, snapshotCacheDimensions };

package/dist/{auth-store-port-DFgf22oo.js → auth-store-port-BKpjlJ8a.js}

@@ -1,4 +1,4 @@
-import { S as writeCredentialEntry, u as readCredentialEntry } from "./credentials-wwETW8rI.js";
+import { S as writeCredentialEntry, u as readCredentialEntry } from "./credentials-Bqg-qNBM.js";
 //#region src/extensions/integrations/auth-store-port.ts
 /** Prefix of an integration's key in the credentials file. */
 const INTEGRATION_CREDENTIAL_PREFIX = "integration:";
@@ -206,4 +206,4 @@ function connection(integrationId, methodId, connectedAt, account, label) {
 //#endregion
 export { integrationCredentialKey as i, createCredentialsAuthStore as n, fromEntries as r, DEFAULT_ACCOUNT as t };
 
-//# sourceMappingURL=auth-store-port-DFgf22oo.js.map
+//# sourceMappingURL=auth-store-port-BKpjlJ8a.js.map

package/dist/{auth-store-port-DFgf22oo.js.map → auth-store-port-BKpjlJ8a.js.map}

@@ -1 +1 @@
-{"version":3,"file":"auth-store-port-DFgf22oo.js","names":[],"sources":["../src/extensions/integrations/auth-store-port.ts"],"sourcesContent":["/**\n * The credentials-file {@link AuthStorePort}: integrations live in the same\n * `<dataDir>/credentials.json` as provider sign-ins, each under its own\n * `integration:<id>` key, written with the file's lock, mode and atomic\n * write (`readCredentialEntry` / `writeCredentialEntry` in\n * `src/chat/credentials.ts`, the namespaced-entry API host tokens use).\n *\n * One entry per integration, holding every connection: the entry itself is\n * the default connection (so a reader by key, and an older build, sees it as\n * before), and the others ride in its `connections` list, each shaped like\n * an entry. `#`-qualified keys are provider slots and can't be used.\n *\n * On disk, OAuth connections are `kind: 'oauth'` entries (`access`,\n * `refresh`, `expires`, the same triple the provider refresh code reads)\n * and API keys and tokens are `kind: 'apikey'` entries. The connection\n * fields ride along: on an OAuth entry as an `integration` extra, on an API\n * key entry in `customFields` (strings only).\n *\n * A legacy provider sign-in (`IntegrationSpec.legacyCredentialKey`) is read\n * from its own key and, once adopted, marked with `integrationAdopted`; its\n * tokens stay for a downgrade.\n */\n\nimport type { ApiKeyCredential, OAuthCredential, ProviderCredential } from '../../chat/credentials'\nimport type { Connection, Credential } from '../api/sessions'\nimport type { AuthStorePort, LegacyGrant, StoredIntegration } from './store'\nimport { readCredentialEntry, writeCredentialEntry } from '../../chat/credentials'\n\n/** Prefix of an integration's key in the credentials file. */\nexport const INTEGRATION_CREDENTIAL_PREFIX = 'integration:'\n\n/** Field of an integration entry listing its non-default connections. */\nconst OTHERS_FIELD = 'connections'\n\n/** Field marking a legacy entry an integration adopted. */\nexport const LEGACY_ADOPTED_FIELD = 'integrationAdopted'\n\n/** Account of a connection whose integration names none. */\nexport const DEFAULT_ACCOUNT = 'default'\n\n/**\n * The credentials-file key of an integration.\n *\n * @param integrationId - The integration id.\n */\nexport function integrationCredentialKey(integrationId: string): string {\n  return `${INTEGRATION_CREDENTIAL_PREFIX}${integrationId}`\n}\n\n/**\n * An {@link AuthStorePort} over `<dataDir>/credentials.json`.\n *\n * @param dataDir - Directory holding `credentials.json` (the host's `config.paths.dir`).\n */\nexport function createCredentialsAuthStore(dataDir: string): AuthStorePort {\n  return {\n    read: (id) => {\n      const entry = readCredentialEntry(dataDir, integrationCredentialKey(id))\n      return entry ? fromEntries(id, entry) : undefined\n    },\n    write: (id, value) => {\n      writeCredentialEntry(dataDir, integrationCredentialKey(id), value?.length ? toEntries(value) : undefined)\n    },\n    readLegacy: (key) => {\n      const entry = readCredentialEntry(dataDir, key)\n      return entry ? legacyGrant(entry) : undefined\n    },\n    markLegacy: (key, integrationId) => {\n      const entry = readCredentialEntry(dataDir, key)\n      if (entry)\n        writeCredentialEntry(dataDir, key, { ...entry, [LEGACY_ADOPTED_FIELD]: integrationId } as ProviderCredential)\n    },\n  }\n}\n\ninterface OAuthExtra {\n  methodId: string\n  account?: string\n  label?: string\n  connectedAt: number\n  scopes?: readonly string[]\n  extra?: Record<string, unknown>\n}\n\n/**\n * The credentials-file entry of an integration's connections: the default's\n * entry with the others under `connections`.\n *\n * @param value - The connections, the default first. Not empty.\n */\nexport function toEntries(value: readonly StoredIntegration[]): ProviderCredential {\n  const [first, ...others] = value\n  const entry = toEntry(first!)\n  return others.length ? { ...entry, [OTHERS_FIELD]: others.map(toEntry) } as ProviderCredential : entry\n}\n\n/**\n * The connections an integration's entry holds, the default first;\n * `undefined` when it holds none this module wrote.\n *\n * @param integrationId - The integration the entry belongs to.\n * @param entry - The entry read from the file.\n */\nexport function fromEntries(integrationId: string, entry: ProviderCredential): StoredIntegration[] | undefined {\n  const others = (entry as { [OTHERS_FIELD]?: unknown })[OTHERS_FIELD]\n  const list = [entry, ...(Array.isArray(others) ? others : [])]\n    .map(e => (e && typeof e === 'object' ? fromEntry(integrationId, e as ProviderCredential) : undefined))\n    .filter((s): s is StoredIntegration => s !== undefined)\n  // One connection per account: a hand-edited file could repeat one.\n  const seen = new Set<string>()\n  const unique = list.filter(s => !seen.has(s.connection.account) && !!seen.add(s.connection.account))\n  return unique.length ? unique : undefined\n}\n\n/**\n * The credentials-file entry of one stored connection.\n *\n * @param value - The connection to store.\n */\nexport function toEntry(value: StoredIntegration): ProviderCredential {\n  const { connection, credential } = value\n  if (credential.type === 'oauth') {\n    const integration: OAuthExtra = {\n      methodId: connection.methodId,\n      connectedAt: connection.connectedAt,\n      account: connection.account,\n      ...(connection.label !== undefined ? { label: connection.label } : {}),\n      ...(credential.scopes ? { scopes: [...credential.scopes] } : {}),\n      ...(credential.extra ? { extra: { ...credential.extra } } : {}),\n    }\n    const entry: OAuthCredential = {\n      kind: 'oauth',\n      access: credential.accessToken,\n      ...(value.refreshToken !== undefined ? { refresh: value.refreshToken } : {}),\n      ...(credential.expiresAt !== undefined ? { expires: credential.expiresAt } : {}),\n      integration,\n    }\n    return entry\n  }\n  const customFields: Record<string, string> = {\n    credentialType: credential.type,\n    methodId: connection.methodId,\n    connectedAt: String(connection.connectedAt),\n    account: connection.account,\n  }\n  if (connection.label !== undefined)\n    customFields.label = connection.label\n  const entry: ApiKeyCredential = {\n    kind: 'apikey',\n    value: credential.type === 'apiKey' ? credential.key : credential.token,\n    customFields,\n  }\n  return entry\n}\n\n/**\n * The stored connection a credentials-file entry holds. `undefined` for an\n * entry this module did not write.\n *\n * @param integrationId - The integration the entry belongs to.\n * @param entry - The entry read from the file.\n */\nexport function fromEntry(integrationId: string, entry: ProviderCredential): StoredIntegration | undefined {\n  if (entry.kind === 'oauth') {\n    const extra = entry.integration as Partial<OAuthExtra> | undefined\n    if (!extra || typeof extra.methodId !== 'string' || typeof extra.connectedAt !== 'number' || typeof entry.access !== 'string')\n      return undefined\n    const credential: Credential = {\n      type: 'oauth',\n      accessToken: entry.access,\n      ...(typeof entry.expires === 'number' ? { expiresAt: entry.expires } : {}),\n      ...(Array.isArray(extra.scopes) ? { scopes: extra.scopes.filter((s): s is string => typeof s === 'string') } : {}),\n      ...(extra.extra && typeof extra.extra === 'object' && !Array.isArray(extra.extra) ? { extra: extra.extra } : {}),\n    }\n    return {\n      connection: connection(integrationId, extra.methodId, extra.connectedAt, extra.account, extra.label),\n      credential,\n      ...(typeof entry.refresh === 'string' && entry.refresh ? { refreshToken: entry.refresh } : {}),\n    }\n  }\n  if (entry.kind !== 'apikey' || typeof entry.value !== 'string')\n    return undefined\n  const fields = entry.customFields ?? {}\n  const connectedAt = Number(fields.connectedAt)\n  if (typeof fields.methodId !== 'string' || !Number.isFinite(connectedAt))\n    return undefined\n  const credential: Credential = fields.credentialType === 'token'\n    ? { type: 'token', token: entry.value }\n    : { type: 'apiKey', key: entry.value }\n  return { connection: connection(integrationId, fields.methodId, connectedAt, fields.account, fields.label), credential }\n}\n\n/**\n * The grant of a legacy provider entry, when it was not adopted yet.\n *\n * @param entry - The entry under the legacy key.\n */\nexport function legacyGrant(entry: ProviderCredential): LegacyGrant | undefined {\n  const record = entry as unknown as Record<string, unknown>\n  if (record[LEGACY_ADOPTED_FIELD] !== undefined)\n    return undefined\n  const text = (key: string): string | undefined => (typeof record[key] === 'string' && (record[key] as string).trim() ? (record[key] as string).trim() : undefined)\n  const account = text('account') ?? text('email')\n  const label = text('label') ?? text('email')\n  const named = { ...(account ? { account } : {}), ...(label ? { label } : {}) }\n  if (entry.kind === 'oauth') {\n    if (typeof entry.access !== 'string' || !entry.access)\n      return undefined\n    const extra: Record<string, unknown> = {}\n    for (const [key, value] of Object.entries(entry)) {\n      if (!['kind', 'access', 'refresh', 'expires', 'id', 'label', LEGACY_ADOPTED_FIELD].includes(key))\n        extra[key] = value\n    }\n    return {\n      credential: {\n        type: 'oauth',\n        accessToken: entry.access,\n        ...(typeof entry.expires === 'number' ? { expiresAt: entry.expires } : {}),\n        ...(Object.keys(extra).length ? { extra } : {}),\n      },\n      ...(typeof entry.refresh === 'string' && entry.refresh ? { refreshToken: entry.refresh } : {}),\n      ...named,\n    }\n  }\n  if (entry.kind === 'apikey' && typeof entry.value === 'string' && entry.value)\n    return { credential: { type: 'apiKey', key: entry.value }, ...named }\n  return undefined\n}\n\nfunction connection(integrationId: string, methodId: string, connectedAt: number, account: unknown, label: unknown): Connection {\n  return {\n    integrationId,\n    methodId,\n    account: typeof account === 'string' && account ? account : DEFAULT_ACCOUNT,\n    ...(typeof label === 'string' && label ? { label } : {}),\n    connectedAt,\n  }\n}\n"],"mappings":";;;AA6BA,MAAa,gCAAgC;;AAG7C,MAAM,eAAe;;AAGrB,MAAa,uBAAuB;;AAGpC,MAAa,kBAAkB;;;;;;AAO/B,SAAgB,yBAAyB,eAA+B;CACtE,OAAO,GAAG,gCAAgC;AAC5C;;;;;;AAOA,SAAgB,2BAA2B,SAAgC;CACzE,OAAO;EACL,OAAO,OAAO;GACZ,MAAM,QAAQ,oBAAoB,SAAS,yBAAyB,EAAE,CAAC;GACvE,OAAO,QAAQ,YAAY,IAAI,KAAK,IAAI,KAAA;EAC1C;EACA,QAAQ,IAAI,UAAU;GACpB,qBAAqB,SAAS,yBAAyB,EAAE,GAAG,OAAO,SAAS,UAAU,KAAK,IAAI,KAAA,CAAS;EAC1G;EACA,aAAa,QAAQ;GACnB,MAAM,QAAQ,oBAAoB,SAAS,GAAG;GAC9C,OAAO,QAAQ,YAAY,KAAK,IAAI,KAAA;EACtC;EACA,aAAa,KAAK,kBAAkB;GAClC,MAAM,QAAQ,oBAAoB,SAAS,GAAG;GAC9C,IAAI,OACF,qBAAqB,SAAS,KAAK;IAAE,GAAG;KAAQ,uBAAuB;GAAc,CAAuB;EAChH;CACF;AACF;;;;;;;AAiBA,SAAgB,UAAU,OAAyD;CACjF,MAAM,CAAC,OAAO,GAAG,UAAU;CAC3B,MAAM,QAAQ,QAAQ,KAAM;CAC5B,OAAO,OAAO,SAAS;EAAE,GAAG;GAAQ,eAAe,OAAO,IAAI,OAAO;CAAE,IAA0B;AACnG;;;;;;;;AASA,SAAgB,YAAY,eAAuB,OAA4D;CAC7G,MAAM,SAAU,MAAuC;CACvD,MAAM,OAAO,CAAC,OAAO,GAAI,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,CAAE,CAAC,CAC3D,KAAI,MAAM,KAAK,OAAO,MAAM,WAAW,UAAU,eAAe,CAAuB,IAAI,KAAA,CAAU,CAAC,CACtG,QAAQ,MAA8B,MAAM,KAAA,CAAS;CAExD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAS,KAAK,QAAO,MAAK,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,CAAC;CACnG,OAAO,OAAO,SAAS,SAAS,KAAA;AAClC;;;;;;AAOA,SAAgB,QAAQ,OAA8C;CACpE,MAAM,EAAE,YAAY,eAAe;CACnC,IAAI,WAAW,SAAS,SAAS;EAC/B,MAAM,cAA0B;GAC9B,UAAU,WAAW;GACrB,aAAa,WAAW;GACxB,SAAS,WAAW;GACpB,GAAI,WAAW,UAAU,KAAA,IAAY,EAAE,OAAO,WAAW,MAAM,IAAI,CAAC;GACpE,GAAI,WAAW,SAAS,EAAE,QAAQ,CAAC,GAAG,WAAW,MAAM,EAAE,IAAI,CAAC;GAC9D,GAAI,WAAW,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,MAAM,EAAE,IAAI,CAAC;EAC/D;EAQA,OAAO;GANL,MAAM;GACN,QAAQ,WAAW;GACnB,GAAI,MAAM,iBAAiB,KAAA,IAAY,EAAE,SAAS,MAAM,aAAa,IAAI,CAAC;GAC1E,GAAI,WAAW,cAAc,KAAA,IAAY,EAAE,SAAS,WAAW,UAAU,IAAI,CAAC;GAC9E;EAES;CACb;CACA,MAAM,eAAuC;EAC3C,gBAAgB,WAAW;EAC3B,UAAU,WAAW;EACrB,aAAa,OAAO,WAAW,WAAW;EAC1C,SAAS,WAAW;CACtB;CACA,IAAI,WAAW,UAAU,KAAA,GACvB,aAAa,QAAQ,WAAW;CAMlC,OAAO;EAJL,MAAM;EACN,OAAO,WAAW,SAAS,WAAW,WAAW,MAAM,WAAW;EAClE;CAES;AACb;;;;;;;;AASA,SAAgB,UAAU,eAAuB,OAA0D;CACzG,IAAI,MAAM,SAAS,SAAS;EAC1B,MAAM,QAAQ,MAAM;EACpB,IAAI,CAAC,SAAS,OAAO,MAAM,aAAa,YAAY,OAAO,MAAM,gBAAgB,YAAY,OAAO,MAAM,WAAW,UACnH,OAAO,KAAA;EACT,MAAM,aAAyB;GAC7B,MAAM;GACN,aAAa,MAAM;GACnB,GAAI,OAAO,MAAM,YAAY,WAAW,EAAE,WAAW,MAAM,QAAQ,IAAI,CAAC;GACxE,GAAI,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,QAAQ,MAAM,OAAO,QAAQ,MAAmB,OAAO,MAAM,QAAQ,EAAE,IAAI,CAAC;GAChH,GAAI,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,IAAI,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;EAChH;EACA,OAAO;GACL,YAAY,WAAW,eAAe,MAAM,UAAU,MAAM,aAAa,MAAM,SAAS,MAAM,KAAK;GACnG;GACA,GAAI,OAAO,MAAM,YAAY,YAAY,MAAM,UAAU,EAAE,cAAc,MAAM,QAAQ,IAAI,CAAC;EAC9F;CACF;CACA,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,UAAU,UACpD,OAAO,KAAA;CACT,MAAM,SAAS,MAAM,gBAAgB,CAAC;CACtC,MAAM,cAAc,OAAO,OAAO,WAAW;CAC7C,IAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,SAAS,WAAW,GACrE,OAAO,KAAA;CACT,MAAM,aAAyB,OAAO,mBAAmB,UACrD;EAAE,MAAM;EAAS,OAAO,MAAM;CAAM,IACpC;EAAE,MAAM;EAAU,KAAK,MAAM;CAAM;CACvC,OAAO;EAAE,YAAY,WAAW,eAAe,OAAO,UAAU,aAAa,OAAO,SAAS,OAAO,KAAK;EAAG;CAAW;AACzH;;;;;;AAOA,SAAgB,YAAY,OAAoD;CAC9E,MAAM,SAAS;CACf,IAAI,OAAA,0BAAiC,KAAA,GACnC,OAAO,KAAA;CACT,MAAM,QAAQ,QAAqC,OAAO,OAAO,SAAS,YAAa,OAAO,IAAI,CAAY,KAAK,IAAK,OAAO,IAAI,CAAY,KAAK,IAAI,KAAA;CACxJ,MAAM,UAAU,KAAK,SAAS,KAAK,KAAK,OAAO;CAC/C,MAAM,QAAQ,KAAK,OAAO,KAAK,KAAK,OAAO;CAC3C,MAAM,QAAQ;EAAE,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAI,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAAG;CAC7E,IAAI,MAAM,SAAS,SAAS;EAC1B,IAAI,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,QAC7C,OAAO,KAAA;EACT,MAAM,QAAiC,CAAC;EACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAC7C,IAAI,CAAC;GAAC;GAAQ;GAAU;GAAW;GAAW;GAAM;;EAA6B,CAAC,CAAC,SAAS,GAAG,GAC7F,MAAM,OAAO;EAEjB,OAAO;GACL,YAAY;IACV,MAAM;IACN,aAAa,MAAM;IACnB,GAAI,OAAO,MAAM,YAAY,WAAW,EAAE,WAAW,MAAM,QAAQ,IAAI,CAAC;IACxE,GAAI,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;GAC/C;GACA,GAAI,OAAO,MAAM,YAAY,YAAY,MAAM,UAAU,EAAE,cAAc,MAAM,QAAQ,IAAI,CAAC;GAC5F,GAAG;EACL;CACF;CACA,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,MAAM,OACtE,OAAO;EAAE,YAAY;GAAE,MAAM;GAAU,KAAK,MAAM;EAAM;EAAG,GAAG;CAAM;AAExE;AAEA,SAAS,WAAW,eAAuB,UAAkB,aAAqB,SAAkB,OAA4B;CAC9H,OAAO;EACL;EACA;EACA,SAAS,OAAO,YAAY,YAAY,UAAU,UAAU;EAC5D,GAAI,OAAO,UAAU,YAAY,QAAQ,EAAE,MAAM,IAAI,CAAC;EACtD;CACF;AACF"}
+{"version":3,"file":"auth-store-port-BKpjlJ8a.js","names":[],"sources":["../src/extensions/integrations/auth-store-port.ts"],"sourcesContent":["/**\n * The credentials-file {@link AuthStorePort}: integrations live in the same\n * `<dataDir>/credentials.json` as provider sign-ins, each under its own\n * `integration:<id>` key, written with the file's lock, mode and atomic\n * write (`readCredentialEntry` / `writeCredentialEntry` in\n * `src/chat/credentials.ts`, the namespaced-entry API host tokens use).\n *\n * One entry per integration, holding every connection: the entry itself is\n * the default connection (so a reader by key, and an older build, sees it as\n * before), and the others ride in its `connections` list, each shaped like\n * an entry. `#`-qualified keys are provider slots and can't be used.\n *\n * On disk, OAuth connections are `kind: 'oauth'` entries (`access`,\n * `refresh`, `expires`, the same triple the provider refresh code reads)\n * and API keys and tokens are `kind: 'apikey'` entries. The connection\n * fields ride along: on an OAuth entry as an `integration` extra, on an API\n * key entry in `customFields` (strings only).\n *\n * A legacy provider sign-in (`IntegrationSpec.legacyCredentialKey`) is read\n * from its own key and, once adopted, marked with `integrationAdopted`; its\n * tokens stay for a downgrade.\n */\n\nimport type { ApiKeyCredential, OAuthCredential, ProviderCredential } from '../../chat/credentials'\nimport type { Connection, Credential } from '../api/sessions'\nimport type { AuthStorePort, LegacyGrant, StoredIntegration } from './store'\nimport { readCredentialEntry, writeCredentialEntry } from '../../chat/credentials'\n\n/** Prefix of an integration's key in the credentials file. */\nexport const INTEGRATION_CREDENTIAL_PREFIX = 'integration:'\n\n/** Field of an integration entry listing its non-default connections. */\nconst OTHERS_FIELD = 'connections'\n\n/** Field marking a legacy entry an integration adopted. */\nexport const LEGACY_ADOPTED_FIELD = 'integrationAdopted'\n\n/** Account of a connection whose integration names none. */\nexport const DEFAULT_ACCOUNT = 'default'\n\n/**\n * The credentials-file key of an integration.\n *\n * @param integrationId - The integration id.\n */\nexport function integrationCredentialKey(integrationId: string): string {\n  return `${INTEGRATION_CREDENTIAL_PREFIX}${integrationId}`\n}\n\n/**\n * An {@link AuthStorePort} over `<dataDir>/credentials.json`.\n *\n * @param dataDir - Directory holding `credentials.json` (the host's `config.paths.dir`).\n */\nexport function createCredentialsAuthStore(dataDir: string): AuthStorePort {\n  return {\n    read: (id) => {\n      const entry = readCredentialEntry(dataDir, integrationCredentialKey(id))\n      return entry ? fromEntries(id, entry) : undefined\n    },\n    write: (id, value) => {\n      writeCredentialEntry(dataDir, integrationCredentialKey(id), value?.length ? toEntries(value) : undefined)\n    },\n    readLegacy: (key) => {\n      const entry = readCredentialEntry(dataDir, key)\n      return entry ? legacyGrant(entry) : undefined\n    },\n    markLegacy: (key, integrationId) => {\n      const entry = readCredentialEntry(dataDir, key)\n      if (entry)\n        writeCredentialEntry(dataDir, key, { ...entry, [LEGACY_ADOPTED_FIELD]: integrationId } as ProviderCredential)\n    },\n  }\n}\n\ninterface OAuthExtra {\n  methodId: string\n  account?: string\n  label?: string\n  connectedAt: number\n  scopes?: readonly string[]\n  extra?: Record<string, unknown>\n}\n\n/**\n * The credentials-file entry of an integration's connections: the default's\n * entry with the others under `connections`.\n *\n * @param value - The connections, the default first. Not empty.\n */\nexport function toEntries(value: readonly StoredIntegration[]): ProviderCredential {\n  const [first, ...others] = value\n  const entry = toEntry(first!)\n  return others.length ? { ...entry, [OTHERS_FIELD]: others.map(toEntry) } as ProviderCredential : entry\n}\n\n/**\n * The connections an integration's entry holds, the default first;\n * `undefined` when it holds none this module wrote.\n *\n * @param integrationId - The integration the entry belongs to.\n * @param entry - The entry read from the file.\n */\nexport function fromEntries(integrationId: string, entry: ProviderCredential): StoredIntegration[] | undefined {\n  const others = (entry as { [OTHERS_FIELD]?: unknown })[OTHERS_FIELD]\n  const list = [entry, ...(Array.isArray(others) ? others : [])]\n    .map(e => (e && typeof e === 'object' ? fromEntry(integrationId, e as ProviderCredential) : undefined))\n    .filter((s): s is StoredIntegration => s !== undefined)\n  // One connection per account: a hand-edited file could repeat one.\n  const seen = new Set<string>()\n  const unique = list.filter(s => !seen.has(s.connection.account) && !!seen.add(s.connection.account))\n  return unique.length ? unique : undefined\n}\n\n/**\n * The credentials-file entry of one stored connection.\n *\n * @param value - The connection to store.\n */\nexport function toEntry(value: StoredIntegration): ProviderCredential {\n  const { connection, credential } = value\n  if (credential.type === 'oauth') {\n    const integration: OAuthExtra = {\n      methodId: connection.methodId,\n      connectedAt: connection.connectedAt,\n      account: connection.account,\n      ...(connection.label !== undefined ? { label: connection.label } : {}),\n      ...(credential.scopes ? { scopes: [...credential.scopes] } : {}),\n      ...(credential.extra ? { extra: { ...credential.extra } } : {}),\n    }\n    const entry: OAuthCredential = {\n      kind: 'oauth',\n      access: credential.accessToken,\n      ...(value.refreshToken !== undefined ? { refresh: value.refreshToken } : {}),\n      ...(credential.expiresAt !== undefined ? { expires: credential.expiresAt } : {}),\n      integration,\n    }\n    return entry\n  }\n  const customFields: Record<string, string> = {\n    credentialType: credential.type,\n    methodId: connection.methodId,\n    connectedAt: String(connection.connectedAt),\n    account: connection.account,\n  }\n  if (connection.label !== undefined)\n    customFields.label = connection.label\n  const entry: ApiKeyCredential = {\n    kind: 'apikey',\n    value: credential.type === 'apiKey' ? credential.key : credential.token,\n    customFields,\n  }\n  return entry\n}\n\n/**\n * The stored connection a credentials-file entry holds. `undefined` for an\n * entry this module did not write.\n *\n * @param integrationId - The integration the entry belongs to.\n * @param entry - The entry read from the file.\n */\nexport function fromEntry(integrationId: string, entry: ProviderCredential): StoredIntegration | undefined {\n  if (entry.kind === 'oauth') {\n    const extra = entry.integration as Partial<OAuthExtra> | undefined\n    if (!extra || typeof extra.methodId !== 'string' || typeof extra.connectedAt !== 'number' || typeof entry.access !== 'string')\n      return undefined\n    const credential: Credential = {\n      type: 'oauth',\n      accessToken: entry.access,\n      ...(typeof entry.expires === 'number' ? { expiresAt: entry.expires } : {}),\n      ...(Array.isArray(extra.scopes) ? { scopes: extra.scopes.filter((s): s is string => typeof s === 'string') } : {}),\n      ...(extra.extra && typeof extra.extra === 'object' && !Array.isArray(extra.extra) ? { extra: extra.extra } : {}),\n    }\n    return {\n      connection: connection(integrationId, extra.methodId, extra.connectedAt, extra.account, extra.label),\n      credential,\n      ...(typeof entry.refresh === 'string' && entry.refresh ? { refreshToken: entry.refresh } : {}),\n    }\n  }\n  if (entry.kind !== 'apikey' || typeof entry.value !== 'string')\n    return undefined\n  const fields = entry.customFields ?? {}\n  const connectedAt = Number(fields.connectedAt)\n  if (typeof fields.methodId !== 'string' || !Number.isFinite(connectedAt))\n    return undefined\n  const credential: Credential = fields.credentialType === 'token'\n    ? { type: 'token', token: entry.value }\n    : { type: 'apiKey', key: entry.value }\n  return { connection: connection(integrationId, fields.methodId, connectedAt, fields.account, fields.label), credential }\n}\n\n/**\n * The grant of a legacy provider entry, when it was not adopted yet.\n *\n * @param entry - The entry under the legacy key.\n */\nexport function legacyGrant(entry: ProviderCredential): LegacyGrant | undefined {\n  const record = entry as unknown as Record<string, unknown>\n  if (record[LEGACY_ADOPTED_FIELD] !== undefined)\n    return undefined\n  const text = (key: string): string | undefined => (typeof record[key] === 'string' && (record[key] as string).trim() ? (record[key] as string).trim() : undefined)\n  const account = text('account') ?? text('email')\n  const label = text('label') ?? text('email')\n  const named = { ...(account ? { account } : {}), ...(label ? { label } : {}) }\n  if (entry.kind === 'oauth') {\n    if (typeof entry.access !== 'string' || !entry.access)\n      return undefined\n    const extra: Record<string, unknown> = {}\n    for (const [key, value] of Object.entries(entry)) {\n      if (!['kind', 'access', 'refresh', 'expires', 'id', 'label', LEGACY_ADOPTED_FIELD].includes(key))\n        extra[key] = value\n    }\n    return {\n      credential: {\n        type: 'oauth',\n        accessToken: entry.access,\n        ...(typeof entry.expires === 'number' ? { expiresAt: entry.expires } : {}),\n        ...(Object.keys(extra).length ? { extra } : {}),\n      },\n      ...(typeof entry.refresh === 'string' && entry.refresh ? { refreshToken: entry.refresh } : {}),\n      ...named,\n    }\n  }\n  if (entry.kind === 'apikey' && typeof entry.value === 'string' && entry.value)\n    return { credential: { type: 'apiKey', key: entry.value }, ...named }\n  return undefined\n}\n\nfunction connection(integrationId: string, methodId: string, connectedAt: number, account: unknown, label: unknown): Connection {\n  return {\n    integrationId,\n    methodId,\n    account: typeof account === 'string' && account ? account : DEFAULT_ACCOUNT,\n    ...(typeof label === 'string' && label ? { label } : {}),\n    connectedAt,\n  }\n}\n"],"mappings":";;;AA6BA,MAAa,gCAAgC;;AAG7C,MAAM,eAAe;;AAGrB,MAAa,uBAAuB;;AAGpC,MAAa,kBAAkB;;;;;;AAO/B,SAAgB,yBAAyB,eAA+B;CACtE,OAAO,GAAG,gCAAgC;AAC5C;;;;;;AAOA,SAAgB,2BAA2B,SAAgC;CACzE,OAAO;EACL,OAAO,OAAO;GACZ,MAAM,QAAQ,oBAAoB,SAAS,yBAAyB,EAAE,CAAC;GACvE,OAAO,QAAQ,YAAY,IAAI,KAAK,IAAI,KAAA;EAC1C;EACA,QAAQ,IAAI,UAAU;GACpB,qBAAqB,SAAS,yBAAyB,EAAE,GAAG,OAAO,SAAS,UAAU,KAAK,IAAI,KAAA,CAAS;EAC1G;EACA,aAAa,QAAQ;GACnB,MAAM,QAAQ,oBAAoB,SAAS,GAAG;GAC9C,OAAO,QAAQ,YAAY,KAAK,IAAI,KAAA;EACtC;EACA,aAAa,KAAK,kBAAkB;GAClC,MAAM,QAAQ,oBAAoB,SAAS,GAAG;GAC9C,IAAI,OACF,qBAAqB,SAAS,KAAK;IAAE,GAAG;KAAQ,uBAAuB;GAAc,CAAuB;EAChH;CACF;AACF;;;;;;;AAiBA,SAAgB,UAAU,OAAyD;CACjF,MAAM,CAAC,OAAO,GAAG,UAAU;CAC3B,MAAM,QAAQ,QAAQ,KAAM;CAC5B,OAAO,OAAO,SAAS;EAAE,GAAG;GAAQ,eAAe,OAAO,IAAI,OAAO;CAAE,IAA0B;AACnG;;;;;;;;AASA,SAAgB,YAAY,eAAuB,OAA4D;CAC7G,MAAM,SAAU,MAAuC;CACvD,MAAM,OAAO,CAAC,OAAO,GAAI,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,CAAE,CAAC,CAC3D,KAAI,MAAM,KAAK,OAAO,MAAM,WAAW,UAAU,eAAe,CAAuB,IAAI,KAAA,CAAU,CAAC,CACtG,QAAQ,MAA8B,MAAM,KAAA,CAAS;CAExD,MAAM,uBAAO,IAAI,IAAY;CAC7B,MAAM,SAAS,KAAK,QAAO,MAAK,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,CAAC;CACnG,OAAO,OAAO,SAAS,SAAS,KAAA;AAClC;;;;;;AAOA,SAAgB,QAAQ,OAA8C;CACpE,MAAM,EAAE,YAAY,eAAe;CACnC,IAAI,WAAW,SAAS,SAAS;EAC/B,MAAM,cAA0B;GAC9B,UAAU,WAAW;GACrB,aAAa,WAAW;GACxB,SAAS,WAAW;GACpB,GAAI,WAAW,UAAU,KAAA,IAAY,EAAE,OAAO,WAAW,MAAM,IAAI,CAAC;GACpE,GAAI,WAAW,SAAS,EAAE,QAAQ,CAAC,GAAG,WAAW,MAAM,EAAE,IAAI,CAAC;GAC9D,GAAI,WAAW,QAAQ,EAAE,OAAO,EAAE,GAAG,WAAW,MAAM,EAAE,IAAI,CAAC;EAC/D;EAQA,OAAO;GANL,MAAM;GACN,QAAQ,WAAW;GACnB,GAAI,MAAM,iBAAiB,KAAA,IAAY,EAAE,SAAS,MAAM,aAAa,IAAI,CAAC;GAC1E,GAAI,WAAW,cAAc,KAAA,IAAY,EAAE,SAAS,WAAW,UAAU,IAAI,CAAC;GAC9E;EAES;CACb;CACA,MAAM,eAAuC;EAC3C,gBAAgB,WAAW;EAC3B,UAAU,WAAW;EACrB,aAAa,OAAO,WAAW,WAAW;EAC1C,SAAS,WAAW;CACtB;CACA,IAAI,WAAW,UAAU,KAAA,GACvB,aAAa,QAAQ,WAAW;CAMlC,OAAO;EAJL,MAAM;EACN,OAAO,WAAW,SAAS,WAAW,WAAW,MAAM,WAAW;EAClE;CAES;AACb;;;;;;;;AASA,SAAgB,UAAU,eAAuB,OAA0D;CACzG,IAAI,MAAM,SAAS,SAAS;EAC1B,MAAM,QAAQ,MAAM;EACpB,IAAI,CAAC,SAAS,OAAO,MAAM,aAAa,YAAY,OAAO,MAAM,gBAAgB,YAAY,OAAO,MAAM,WAAW,UACnH,OAAO,KAAA;EACT,MAAM,aAAyB;GAC7B,MAAM;GACN,aAAa,MAAM;GACnB,GAAI,OAAO,MAAM,YAAY,WAAW,EAAE,WAAW,MAAM,QAAQ,IAAI,CAAC;GACxE,GAAI,MAAM,QAAQ,MAAM,MAAM,IAAI,EAAE,QAAQ,MAAM,OAAO,QAAQ,MAAmB,OAAO,MAAM,QAAQ,EAAE,IAAI,CAAC;GAChH,GAAI,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,KAAK,IAAI,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;EAChH;EACA,OAAO;GACL,YAAY,WAAW,eAAe,MAAM,UAAU,MAAM,aAAa,MAAM,SAAS,MAAM,KAAK;GACnG;GACA,GAAI,OAAO,MAAM,YAAY,YAAY,MAAM,UAAU,EAAE,cAAc,MAAM,QAAQ,IAAI,CAAC;EAC9F;CACF;CACA,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,UAAU,UACpD,OAAO,KAAA;CACT,MAAM,SAAS,MAAM,gBAAgB,CAAC;CACtC,MAAM,cAAc,OAAO,OAAO,WAAW;CAC7C,IAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,SAAS,WAAW,GACrE,OAAO,KAAA;CACT,MAAM,aAAyB,OAAO,mBAAmB,UACrD;EAAE,MAAM;EAAS,OAAO,MAAM;CAAM,IACpC;EAAE,MAAM;EAAU,KAAK,MAAM;CAAM;CACvC,OAAO;EAAE,YAAY,WAAW,eAAe,OAAO,UAAU,aAAa,OAAO,SAAS,OAAO,KAAK;EAAG;CAAW;AACzH;;;;;;AAOA,SAAgB,YAAY,OAAoD;CAC9E,MAAM,SAAS;CACf,IAAI,OAAA,0BAAiC,KAAA,GACnC,OAAO,KAAA;CACT,MAAM,QAAQ,QAAqC,OAAO,OAAO,SAAS,YAAa,OAAO,IAAI,CAAY,KAAK,IAAK,OAAO,IAAI,CAAY,KAAK,IAAI,KAAA;CACxJ,MAAM,UAAU,KAAK,SAAS,KAAK,KAAK,OAAO;CAC/C,MAAM,QAAQ,KAAK,OAAO,KAAK,KAAK,OAAO;CAC3C,MAAM,QAAQ;EAAE,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;EAAI,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;CAAG;CAC7E,IAAI,MAAM,SAAS,SAAS;EAC1B,IAAI,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,QAC7C,OAAO,KAAA;EACT,MAAM,QAAiC,CAAC;EACxC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,GAC7C,IAAI,CAAC;GAAC;GAAQ;GAAU;GAAW;GAAW;GAAM;;EAA6B,CAAC,CAAC,SAAS,GAAG,GAC7F,MAAM,OAAO;EAEjB,OAAO;GACL,YAAY;IACV,MAAM;IACN,aAAa,MAAM;IACnB,GAAI,OAAO,MAAM,YAAY,WAAW,EAAE,WAAW,MAAM,QAAQ,IAAI,CAAC;IACxE,GAAI,OAAO,KAAK,KAAK,CAAC,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC;GAC/C;GACA,GAAI,OAAO,MAAM,YAAY,YAAY,MAAM,UAAU,EAAE,cAAc,MAAM,QAAQ,IAAI,CAAC;GAC5F,GAAG;EACL;CACF;CACA,IAAI,MAAM,SAAS,YAAY,OAAO,MAAM,UAAU,YAAY,MAAM,OACtE,OAAO;EAAE,YAAY;GAAE,MAAM;GAAU,KAAK,MAAM;EAAM;EAAG,GAAG;CAAM;AAExE;AAEA,SAAS,WAAW,eAAuB,UAAkB,aAAqB,SAAkB,OAA4B;CAC9H,OAAO;EACL;EACA;EACA,SAAS,OAAO,YAAY,YAAY,UAAU,UAAU;EAC5D,GAAI,OAAO,UAAU,YAAY,QAAQ,EAAE,MAAM,IAAI,CAAC;EACtD;CACF;AACF"}

package/dist/{auto-update-restart-BFB7Ek87.js → auto-update-restart-CQJtndMG.js}

@@ -1,5 +1,5 @@
 import { n as __require } from "./rolldown-runtime-BhDjJH2R.js";
-import { $ as interceptProvider, C as resolveTasksDir, E as forgetSessionCacheBaseline, O as installCacheBreakLogger, a as TOOL_USE_CANCELLED_MESSAGE, b as resolveMcpWarningsDir, et as interceptSubmittedPrompt, g as migrateSessionArtifactDirs, n as createAgent, s as turnsToMessages, x as resolvePersistDir } from "./agent-DJhpTS-B.js";
+import { $ as interceptProvider, C as resolveTasksDir, E as forgetSessionCacheBaseline, O as installCacheBreakLogger, a as TOOL_USE_CANCELLED_MESSAGE, b as resolveMcpWarningsDir, et as interceptSubmittedPrompt, g as migrateSessionArtifactDirs, n as createAgent, s as turnsToMessages, x as resolvePersistDir } from "./agent-Dh_XZ7fj.js";
 import { S as resolveWritableRootsAsync, b as resolveUnreadableDirs, h as DEFAULT_UNREADABLE_DIRS, m as registerSessionProcess, v as isolationAvailability, x as resolveWritableRoots, y as parseAllowWriteSetting } from "./owned-processes-DRuGDRmI.js";
 import { a as AgentProviderError, p as errorMessage$1, x as runErrorDetail } from "./errors-C3z7pmOx.js";
 import { g as projectNameOf, x as isThinkingLevel } from "./validate-D--OhUFD.js";
@@ -14,10 +14,11 @@ import { a as facetExtensionOf, c as metadataWithoutFacets, d as storedSessionFa
 import { splitSystemPrompt } from "./prompt.js";
 import { a as isRunOwnerHolding, i as isRunOwnerDead, r as currentRunOwner } from "./send-requests-Bpb99rP5.js";
 import { a as getExtensionSessionState, l as setExtensionSessionState, r as deleteExtensionSessionState, s as loadSession, t as createSession, u as withExtensionSession } from "./session-BORxmqlM.js";
-import { n as createDecider } from "./decisions-CXmK0nz9.js";
-import { Ft as resolveExtensionKeybindings, Pt as readKeybindingsRaw, jt as mergeKeybindings } from "./registry-B9INJwJR.js";
-import { n as createAnsiStripper, r as entryPortOf, t as createProcessContext } from "./contexts-C72b0mMa.js";
+import { n as createDecider } from "./decisions-hsw5XS2g.js";
+import { Lt as readKeybindingsRaw, Pt as mergeKeybindings, Rt as resolveExtensionKeybindings } from "./registry-CnnKaY9s.js";
+import { n as entryPortOf, t as createProcessContext } from "./contexts-DLZTSRHU.js";
 import { c as terminalProcesses, r as hasLocalPty } from "./local-terminal-lBMwNIZl.js";
+import { n as createAnsiStripper } from "./types-4q1bFG53.js";
 import { createSandboxContext } from "./contexts/sandbox.js";
 import { t as createDebugLog } from "./debug-log-DiNRNfzw.js";
 import { i as StaleEpochError, n as RunLeaseHeldError, t as RUN_TAKEN_OVER_MESSAGE } from "./errors-VVNmJD8V.js";
@@ -26,59 +27,59 @@ import { i as writeJsonFileAtomic, n as writeFileAtomic } from "./atomic-write-B
 import { n as looksBinary } from "./binary-detect-Dtj5NGns.js";
 import { a as mainCheckoutRoot, c as projectRootOf, n as findGitRoot$1, r as findProjectRoot, t as cachedRepoKeyOf } from "./project-root-BZcgGJMi.js";
 import { r as toolErrorText, t as ToolFailure } from "./failure-_rDKdaLk.js";
-import { t as createNestedCallRecorder } from "./nested-call-record-DlzPeTB7.js";
+import { t as createNestedCallRecorder } from "./nested-call-record-OayszZBQ.js";
 import { toolPrompts } from "./tools/prompts.js";
 import { r as unwrapCallTool } from "./call-tool-6szvNmQR.js";
 import { t as effectiveInputFromTurn } from "./stats-Bmj46D4h.js";
-import { C as isGhRateLimitError, S as createFileGithubStateStore, w as rateLimitResetFromJson } from "./src-BY_ND2xn.js";
-import { p as withIsolatedSpawnTool } from "./write-file-0E6TUJ9A.js";
+import { C as isGhRateLimitError, S as createFileGithubStateStore, w as rateLimitResetFromJson } from "./src-BmTXDta8.js";
+import { p as withIsolatedSpawnTool } from "./write-file-Dquu7MzB.js";
 import { c as formatCount, f as formatTaskSummary, m as shortId, o as fmtTokens, p as previewLine, u as formatElapsed } from "./format-YgaIcuQ5.js";
 import { a as executeCommand, i as createCommandRunRecord, n as commandBlocksToContent, o as mergeCommands, s as parseCommandInvocation, t as commandBlockToEvent } from "./commands-DN_vVnvh.js";
 import { a as textBodyOf, n as generateSessionTitle, r as renderTurnsForPrompt } from "./generate-title-Dqoa17Ff.js";
 import { t as generateStructuredData } from "./generate-data-Cs86LH2u.js";
 import { t as mergeReplyText } from "./reply-text-Qkc6DtEt.js";
 import { m as createModelSearchTool } from "./spawn-result-B9j6GARP.js";
-import { a as listMarkdownDefFiles, i as loadMarkdownCommands, n as applyMarkdownSubagents, o as markdownDefRoots, r as loadMarkdownAgents } from "./headless-CCm-jLLT.js";
+import { a as listMarkdownDefFiles, i as loadMarkdownCommands, n as applyMarkdownSubagents, o as markdownDefRoots, r as loadMarkdownAgents } from "./headless-CQm19BL0.js";
 import { t as projectUserPaths } from "./project-user-paths-Chsi83mp.js";
 import { B as githubTokenSource, F as configureGithubClient, I as createGithubClient, N as clockSkewMs, P as clockTime$1, R as githubClient, V as normalizeGithubHost, r as EMPTY_EXTENSION_REGISTRY } from "./row-fields-CAYcZogp.js";
-import { r as artifacts_default } from "./presets-CBt6rFfS.js";
-import { t as ZIDANE_VERSION } from "./version-DqqqvHDP.js";
-import { n as abortableInstallIo, s as parseInstallSource } from "./source-Bl1Z501r.js";
-import { S as withZidaneSkillEditSkill, a as sectionDigest, c as EXTENSION_EDIT_METADATA_KEY, d as ZIDANE_SKILL_EDIT_SKILL_NAME, g as extensionDirForCwd, i as latestSystemSnapshot, l as SKILL_EDIT_METADATA_KEY, n as announcedDigest, o as sectionDigests, r as catalogChangeNotes, s as systemSnapshotTurn, u as ZIDANE_EXTENSION_SKILL_NAME, v as readSkillEditMarker, x as withZidaneExtensionSkill } from "./system-freeze-m5o1sGIM.js";
+import { r as artifacts_default } from "./presets-CMY43nUP.js";
+import { t as ZIDANE_VERSION } from "./version-szdW1Od9.js";
+import { n as abortableInstallIo, s as parseInstallSource } from "./source-3ZnEPOSa.js";
+import { S as withZidaneSkillEditSkill, a as sectionDigest, c as EXTENSION_EDIT_METADATA_KEY, d as ZIDANE_SKILL_EDIT_SKILL_NAME, g as extensionDirForCwd, i as latestSystemSnapshot, l as SKILL_EDIT_METADATA_KEY, n as announcedDigest, o as sectionDigests, r as catalogChangeNotes, s as systemSnapshotTurn, u as ZIDANE_EXTENSION_SKILL_NAME, v as readSkillEditMarker, x as withZidaneExtensionSkill } from "./system-freeze-XgDPIwQS.js";
 import { d as querySessions } from "./references-DZ5qTYDl.js";
 import { r as createLogger, t as consoleSink } from "./logger-BQj8QCJp.js";
-import { F as extensionRuntimeOf, L as filterRegistryPlugins } from "./extensions-BCx4QuGB.js";
+import { F as extensionRuntimeOf, L as filterRegistryPlugins } from "./extensions-ADlhBQ_1.js";
 import { t as resolveStorageDirs } from "./xdg-DFSAQQG8.js";
 import { l as resolveOAuthApiKey } from "./oauth-7IvbubTT.js";
 import { p as oauthAccountLabel } from "./cred-keys-C0KaSRp7.js";
 import { n as sanitizeProviderDiagnosticMetadata, o as THINKING_BINDING_SETTING_ENV, s as anthropicEffortForLevel } from "./anthropic-Dp6JSSyY.js";
-import { A as getContextWindow, B as restoreModelOptions, D as credKeyOf, F as modelSupportsReasoning, I as modelsForDescriptor, N as modelLabel, O as defaultModelOf, a as ensureCredentialIds, c as providerFactoryOptions, d as readCredentials, i as credentialsPath, k as enabledModelOptions, t as applyApiKeyEnv, w as BUILTIN_PROVIDERS, x as storedCredentialsOf } from "./credentials-wwETW8rI.js";
+import { A as getContextWindow, B as restoreModelOptions, D as credKeyOf, F as modelSupportsReasoning, I as modelsForDescriptor, N as modelLabel, O as defaultModelOf, a as ensureCredentialIds, c as providerFactoryOptions, d as readCredentials, i as credentialsPath, k as enabledModelOptions, t as applyApiKeyEnv, w as BUILTIN_PROVIDERS, x as storedCredentialsOf } from "./credentials-Bqg-qNBM.js";
 import { n as defaultPluginDataRoot, r as loadAgentPlugin } from "./plugins-CNj4kHpO.js";
 import { i as sqliteStoreConnection } from "./sqlite-store-D5y70PuL.js";
-import { a as createGenerateImageTool } from "./tools-CVTGhggj.js";
+import { a as createGenerateImageTool } from "./tools-BsrGQ8K4.js";
 import { d as buildBuildSystem, f as buildPlanSystem, h as replaceEnvSection, m as envSectionDate, p as envSection } from "./agent-prompt-BXVwL89Y.js";
-import { B as selectActiveTodos, C as profileTools, E as singleAgentRegistry, F as getTodosForRun, I as isTodoTool, R as pruneTodosByRun, T as sessionComposition, V as setTodosForRun, _ as availableAgents, a as deleteSessionData, b as compositionFits, d as BUILTIN_AGENTS, f as DEFAULT_AGENT_ID, g as READ_ONLY_TOOLS, i as createSessionInStore, n as isDurabilityMode, s as forkSession, v as builtInPromptOf, w as resolveAgentId, x as compositionTools, z as sanitizeTodoItems } from "./setting-BQBSyUq0.js";
+import { B as selectActiveTodos, C as profileTools, E as singleAgentRegistry, F as getTodosForRun, I as isTodoTool, R as pruneTodosByRun, T as sessionComposition, V as setTodosForRun, _ as availableAgents, a as deleteSessionData, b as compositionFits, d as BUILTIN_AGENTS, f as DEFAULT_AGENT_ID, g as READ_ONLY_TOOLS, i as createSessionInStore, n as isDurabilityMode, s as forkSession, v as builtInPromptOf, w as resolveAgentId, x as compositionTools, z as sanitizeTodoItems } from "./setting-D_FpKFMw.js";
 import { _ as verifyEnvironment, c as environmentMetadata, f as readSessionEnvironment, g as teardownSessionEnvironment, h as runSessionEnvironmentAction, i as assertEnvironmentReady, l as environmentTakesBranch, m as resolveExecution, o as createEnvironmentRegistry, p as requireEnvironmentProvider, r as LOCAL_ENVIRONMENT, s as environmentActionSummaries, u as initialEnvironment, v as workspacePath } from "./environment-DWlIhAKo.js";
 import { E as restoreChainFallbacks, a as replaceTurnTextBlocks, c as SESSION_ACCOUNT_METADATA_KEY, f as buildRunModel, i as referencedRuns, l as modelChainMetadata, n as deleteTurnSafely, o as truncateTurnsAt, u as readSessionAccount } from "./turn-operations-CWoCTC_L.js";
 import { $ as sessionOrchestrationTools, B as isSideSession, D as MAIN_SESSION_TITLE, E as MAIN_PLAYBOOK_FRAGMENT, F as artifactsFromTurns, G as renderProjectsBriefing, H as parseOrchestrationTools, I as capRequestPayload, J as sessionCreator, K as renderSessionEventXml, L as isBackgroundSession, N as SUBSCRIBE_KEY, O as ORCHESTRATED_BY_KEY, P as WORKER_REPORT_FRAGMENT, R as isMainSession, T as CREATED_BY_KEY, V as orchestratedBy, W as parseSessionScope, Z as sessionEventLabel, c as extensionSpace, dt as formatRunReceiptLine, et as sessionSubscription, gt as runReceiptFromRun, j as SESSION_ROLE_KEY, k as ORCHESTRATION_TOOLS_KEY, m as readSessionSpaceId, mt as hasRunReceipt, nt as sideSessionParent, q as scopeMatches, u as isExtensionSpaceId, w as parseModelSetting, z as isOrchestratorSession } from "./spaces-BaE3ZcBx.js";
 import { A as readProjects, C as addToSafelistForCwd, E as isOnSafelist, M as safelistProjectKey, N as suggestSafelistEntries, T as getSafelistForCwd, _ as rulerSkillScanPaths, a as renderSystemMdSeed, b as parseClaudeState, c as buildMcpServers, d as discoverProjectMcps, f as parseJsonTolerant, g as rulerInstructionFiles, h as isRulerGenerated, i as discoverSystemMd, m as withSessionStdioCwd, o as userScopeOverridesLoad, p as parseMcpsFile, s as userSystemMdPath, t as createFileEnvironmentSecrets, u as defaultMcpsConfigPaths, v as foreignMcpConfigFiles, y as foreignSkillScanPaths } from "./environment-credentials-C8jkOGQ6.js";
-import { a as commandNoteText, c as noteDisplay, i as commandHeaderBlock, n as nestedResultEvent, o as commandStepLabel, r as nestedToolEvent } from "./nested-call-events-BYk8XvGX.js";
+import { C as commandNoteText, E as noteDisplay, S as commandHeaderBlock, b as nestedResultEvent, i as createScriptProgressTracker, w as commandStepLabel, x as nestedToolEvent } from "./script-progress-CrZ507Qq.js";
 import { C as buildEditOutcomesAnnotation, D as resolveApprovalForPayload, E as parseEditOutcomesFromResult, O as rewriteMultiEditHeader, T as mergeApprovalAndBodyOutcomes, _ as extractEditPayload, a as isDenyChoice, c as inferPromptRefs, i as autoDenyReason, k as stripEditOutcomesAnnotation, r as MODEL_APPROVAL_CHOICES, t as oneLineTitle, y as previewEditPayload } from "./session-title-text-CQvgo3yS.js";
-import { T as toolResultText, b as sessionEnvironmentSummary, g as runInProgress, i as deriveSessionTitle, m as readSessionHeader, n as compactSummaryEvent, p as noticeTurnContent, r as createStateStore, s as getSessionMeta, w as toolCallPreview, x as stripSpawnTokensLine, y as serverToolResultSummary } from "./store-C6gI7FfZ.js";
+import { T as toolResultText, b as sessionEnvironmentSummary, g as runInProgress, i as deriveSessionTitle, m as readSessionHeader, n as compactSummaryEvent, p as noticeTurnContent, r as createStateStore, s as getSessionMeta, w as toolCallPreview, x as stripSpawnTokensLine, y as serverToolResultSummary } from "./store-ByCDaKgJ.js";
 import { n as buildSpawnQueuedEvent, r as buildSpawnStartEvent, t as buildSpawnEndEvent } from "./spawn-markers-Dn8JJJFW.js";
-import { $ as machineKind, C as ENTRY_EMPTY_DIRS_LIMIT, K as splitStreamFailure, L as BROWSER_MAX_WAIT_MS, O as createEntryOps, R as BROWSER_OPEN_MOUNT_MS, S as TerminalError, V as BROWSER_REQUEST_SLACK_MS, X as MachineErrorCode, Y as MACHINE_STREAM_CHUNK_BYTES, Z as isValidMachineName, _ as TERMINAL_OUTPUT_WINDOW, at as REASONING_NOTICE_LABEL, et as parseMachineKind, it as EDIT_TOOL_NAMES, m as TERMINAL_HISTORY_MAX_CHARS, mt as promptTurnRefs, n as HOST_TOOLS, o as mediaTypeOfPath, q as MACHINE_IDEMPOTENT_METHODS, rt as CACHE_NOTICE_LABEL, s as OutputHistory, t as parseRepoInput, u as isMouseTracking, v as TERMINAL_READ_MAX_CHARS, y as TERMINAL_TEXT_MAX_LINES } from "./repo-url-D4Dr8NfZ.js";
+import { C as ENTRY_EMPTY_DIRS_LIMIT, J as BLOCK_RUN_TIMEOUT_MS, K as BLOCK_RUNS_METADATA_KEY, L as BROWSER_MAX_WAIT_MS, O as createEntryOps, Ot as promptTurnRefs, Q as blockRunKey, R as BROWSER_OPEN_MOUNT_MS, S as TerminalError, V as BROWSER_REQUEST_SLACK_MS, Z as blockRunCommand, _ as TERMINAL_OUTPUT_WINDOW, _t as CACHE_NOTICE_LABEL, dt as isValidMachineName, et as capBlockOutput, it as withBlockRun, lt as MACHINE_STREAM_CHUNK_BYTES, m as TERMINAL_HISTORY_MAX_CHARS, mt as parseMachineKind, n as HOST_TOOLS, nt as readBlockRuns, o as mediaTypeOfPath, ot as splitStreamFailure, pt as machineKind, q as BLOCK_RUN_OUTPUT_CAP, rt as shellBlockPlan, s as OutputHistory, st as MACHINE_IDEMPOTENT_METHODS, t as parseRepoInput, u as isMouseTracking, ut as MachineErrorCode, v as TERMINAL_READ_MAX_CHARS, vt as EDIT_TOOL_NAMES, y as TERMINAL_TEXT_MAX_LINES, yt as REASONING_NOTICE_LABEL } from "./repo-url-DLjjuVk_.js";
 import { A as chatWindowBehavior, C as isModelInteraction, D as planRejectionReason, E as pendingInteractionsFromTurns, M as EditOutcomeLedger, _ as PRESENT_PLAN_TOOL, a as TITLE_SOURCE_KEY, b as createInteractionTools, c as inTitleFailureCooldown, f as normalizeLaunchOverrides, g as HOST_INTERACTION_ID_PREFIX, i as TITLE_CHECK_KEY, j as runEndNotice, k as chatAutoCompactBehavior, l as isTitleStale, m as ASK_USER_TOOL, n as createSessionExecutionCache, o as autoTitleAction, p as toTodosSnapshot, r as TITLE_CHECKED_KEY, u as userPromptCount, v as buildResumedToolResultsTurn, w as isRefusedInteraction, x as interactionAwakeableKey, y as createAutomaticInteractionResponse } from "./model-test-CAtJ76kM.js";
-import { A as decisionsEnabled, E as DEFAULT_SETTINGS, M as settingsFromStored } from "./settings-catalog-4IU2i_jG.js";
+import { A as decisionsEnabled, E as DEFAULT_SETTINGS, M as settingsFromStored } from "./settings-catalog-DEZlXP51.js";
 import { i as applySessionBudget, s as sessionPolicyOf } from "./session-policy-Bo7rDcG5.js";
-import { At as chatReferenceTokensFromText, Gt as remoteHostsGate, H as providerBrand, Nt as cacheBreakChip, Pt as cacheBreakNoticeText, Q as nativeExtensionByName, St as workedMs, W as DEFAULT_EXTENSION_SOURCE_UNREACHABLE, X as NATIVE_EXTENSIONS_REPO, Y as NATIVE_EXTENSIONS, _t as percentileMs, bt as scoreToMs, mt as estimateLevelLabel, pt as calibrationFactor, q as nativeExtensionListing, rt as classifyMcpTest, ut as ESTIMATE_LEVEL_MINUTES, vt as runEstimateView, wt as buildTextModel } from "./usage-summary-BfcXjiSM.js";
+import { At as chatReferenceTokensFromText, Gt as remoteHostsGate, H as providerBrand, Nt as cacheBreakChip, Pt as cacheBreakNoticeText, Q as nativeExtensionByName, St as workedMs, W as DEFAULT_EXTENSION_SOURCE_UNREACHABLE, X as NATIVE_EXTENSIONS_REPO, Y as NATIVE_EXTENSIONS, _t as percentileMs, bt as scoreToMs, mt as estimateLevelLabel, pt as calibrationFactor, q as nativeExtensionListing, rt as classifyMcpTest, ut as ESTIMATE_LEVEL_MINUTES, vt as runEstimateView, wt as buildTextModel } from "./usage-summary-BM7B3JdI.js";
 import { t as StreamQueue } from "./stream-queue-Cd9OJxl7.js";
 import { t as createDaytonaProvider } from "./daytona-CgC8wQzg.js";
 import { n as hostWorkspaceMounts, t as createDockerContext } from "./docker-D3CARts8.js";
 import { t as createE2BProvider } from "./e2b-4ByYdO1e.js";
-import { g as fieldsReadBy, s as modelKey, t as accountModelKey } from "./providers-Z0TaBp1O.js";
+import { g as fieldsReadBy, s as modelKey, t as accountModelKey } from "./providers-CpXV_uLE.js";
 import { n as sqliteRuntimeForStore } from "./sqlite-runtime-DUtWWIVu.js";
-import { a as integrationCredentialsOf, i as detectAuth, o as isIntegrationCredentialKey, r as activeAccountOf, t as createCliExecution } from "./cli-shared-CabruH8Z.js";
-import { d as isEnvironmentEnabled, p as resolveProviderConfig, u as describeEnvironments } from "./host-scoped-settings-CrbcqOkP.js";
+import { a as integrationCredentialsOf, i as detectAuth, o as isIntegrationCredentialKey, r as activeAccountOf, t as createCliExecution } from "./cli-shared-DeRHgYvl.js";
+import { d as isEnvironmentEnabled, p as resolveProviderConfig, u as describeEnvironments } from "./host-scoped-settings-WBYaCork.js";
 import { Buffer } from "node:buffer";
 import { basename, delimiter, dirname, isAbsolute, join, normalize, posix, relative, resolve, sep } from "node:path";
 import { accessSync, appendFileSync, chmodSync, closeSync, constants, cpSync, createReadStream, createWriteStream, existsSync, linkSync, mkdirSync, mkdtempSync, openSync, readFileSync, readSync, readdirSync, realpathSync, renameSync, rmSync, statSync, statfsSync, unlinkSync, watch, writeFileSync } from "node:fs";
@@ -12252,6 +12253,7 @@ function withExtensionInstructions(fragments, runtime, sessionId) {
 function extensionSnapshot(runtime, sessionId) {
 	const { catalogs } = runtime;
 	return [
+		runtime.withdrawals(),
 		runtime.instructions.list(sessionId).join("\0"),
 		catalogs.agents.read(),
 		catalogs.providers.read(),
@@ -12262,8 +12264,10 @@ function extensionSnapshot(runtime, sessionId) {
 }
 /**
 * `reads`, also stale (`'extensions.runtime'`) once an extension catalog or the
-* session's instructions changed since the build: the next dispatch rebuilds
-* the agent with them, as after a settings change. Returns `reads` itself
+* session's instructions changed since the build, or registrations were
+* withdrawn (the registry disposed, an extension unloaded): the next dispatch
+* rebuilds the agent with them, against the host's live registry, as after a
+* settings change. Returns `reads` itself
 * when there is no extension runtime.
 *
 * @param reads - The build's settings reads.
@@ -12589,6 +12593,104 @@ function installNestedCallHooks({ sessionId, broadcast, agent }, input) {
 		});
 	}
 }
+/** Ended scripts remembered, so a report that lands late starts no tracker. */
+const MAX_ENDED = 256;
+function installScriptProgressHooks({ sessionId, broadcast, agent }) {
+	const live = /* @__PURE__ */ new Map();
+	const ended = /* @__PURE__ */ new Set();
+	/** Call ids are only unique within one agent, so keys carry the subagent. */
+	const keyOf = (ctx, callId) => `${ctx.childId ?? ""}\u0000${callId}`;
+	const send = (entry) => {
+		clearTimeout(entry.timer);
+		entry.timer = void 0;
+		entry.sentAt = Date.now();
+		broadcast({
+			kind: "event",
+			sessionId,
+			event: {
+				kind: "tool-progress",
+				text: "",
+				callId: entry.callId,
+				scriptProgress: entry.tracker.snapshot(),
+				...entry.tag
+			}
+		});
+	};
+	const schedule = (entry) => {
+		if (entry.timer) return;
+		const wait = 150 - (Date.now() - entry.sentAt);
+		if (wait <= 0) {
+			send(entry);
+			return;
+		}
+		entry.timer = setTimeout(send, wait, entry);
+		entry.timer.unref?.();
+	};
+	/** The script `callId` belongs to, started on its first report. None once it ended. */
+	const scriptOf = (ctx, callId) => {
+		const key = keyOf(ctx, callId);
+		let entry = live.get(key);
+		if (!entry) {
+			if (ended.has(key)) return void 0;
+			entry = {
+				tracker: createScriptProgressTracker(),
+				tag: {
+					...ctx.turnId ? { turnId: ctx.turnId } : {},
+					...ctx.childId !== void 0 ? { childId: ctx.childId } : {},
+					...ctx.depth !== void 0 ? { depth: ctx.depth } : {}
+				},
+				callId,
+				sentAt: 0,
+				timer: void 0
+			};
+			live.set(key, entry);
+		}
+		return entry;
+	};
+	const started = (ctx) => {
+		if (ctx.parentToolCallId === void 0 || ctx.scriptLine === void 0) return;
+		const entry = scriptOf(ctx, ctx.parentToolCallId);
+		if (!entry) return;
+		entry.tracker.start(ctx.callId, ctx.scriptLine);
+		schedule(entry);
+	};
+	const finished = (ctx, ok) => {
+		if (ctx.parentToolCallId === void 0) {
+			const key = keyOf(ctx, ctx.callId);
+			ended.add(key);
+			if (ended.size > MAX_ENDED) ended.delete(ended.values().next().value);
+			const entry = live.get(key);
+			if (entry) {
+				live.delete(key);
+				entry.tracker.end(ok);
+				send(entry);
+			}
+			return;
+		}
+		const entry = live.get(keyOf(ctx, ctx.parentToolCallId));
+		if (!entry) return;
+		entry.tracker.finish(ctx.callId, ok);
+		schedule(entry);
+	};
+	for (const prefix of ["", "child:"]) {
+		agent.hooks.hook(`${prefix}tool:before`, (ctx) => started(ctx));
+		agent.hooks.hook(`${prefix}tool:after`, (ctx) => finished(ctx, ctx.isError !== true));
+		agent.hooks.hook(`${prefix}tool:cancelled`, (ctx) => finished(ctx, false));
+		agent.hooks.hook(`${prefix}tool:dispatched`, (ctx) => {
+			if (ctx.outcome === "execute" || ctx.outcome === "gate-substitute" || ctx.parentToolCallId === void 0) return;
+			started(ctx);
+			finished(ctx, false);
+		});
+		agent.hooks.hook(`${prefix}tool:progress`, (ctx) => {
+			const nested = ctx.parentToolCallId !== void 0;
+			if (!nested && ctx.progress.stream !== "output" && ctx.progress.stream !== "console") return;
+			const entry = scriptOf(ctx, nested ? ctx.parentToolCallId : ctx.callId);
+			if (!entry) return;
+			entry.tracker.output(ctx.progress.stream, ctx.progress.text, nested ? ctx.scriptLine : void 0);
+			schedule(entry);
+		});
+	}
+}
 //#endregion
 //#region src/chat/host/transcript/spawn.ts
 function installSpawnHooks({ sessionId, agent, broadcast }, emitNotice) {
@@ -13299,6 +13401,7 @@ function installSessionHooks(input) {
 		readPriorContent
 	});
 	installNestedCallHooks(hookContext, { readSettings: () => env.readSettings() });
+	installScriptProgressHooks(hookContext);
 	installEditAnnotationHooks(agent, ledger);
 	installToolResultHooks(hookContext, {
 		ledger,
@@ -13698,6 +13801,17 @@ function mergeAgentTools({ settings, interactionTools, orchestrationTools, orche
 */
 const CHAT_PROVIDER_STREAM_IDLE_TIMEOUT_MS = 3e5;
 /**
+* `behavior.codemode` with codemode on: the preset's own mode (`true` when it
+* sets none), plus `streamProgress` when the setting asks for live progress.
+*/
+function codemodeBehavior(preset, streamProgress) {
+	if (!streamProgress) return preset || true;
+	return {
+		...typeof preset === "object" ? preset : {},
+		streamProgress: true
+	};
+}
+/**
 * The behavior a chat session's agent is built with: the preset's, plus the
 * host's settings and defaults.
 */
@@ -13714,7 +13828,7 @@ function composeAgentBehavior({ presetBehavior, persistBehavior, settings, tasks
 			mode: settings.stableToolList ? "dispatch" : "unlock",
 			...settings.compactToolCatalog ? { catalog: "names" } : {}
 		},
-		...settings.codemode ? { codemode: presetBehavior?.codemode || true } : { codemode: void 0 },
+		...settings.codemode ? { codemode: codemodeBehavior(presetBehavior?.codemode, settings.codemodeStreamProgress) } : { codemode: void 0 },
 		tasksDir
 	};
 }
@@ -14839,6 +14953,123 @@ async function maybeAutoTitle(deps, input) {
 	}
 }
 //#endregion
+//#region src/chat/host/block-runs.ts
+function createBlockRunMethods({ host, store, broadcast, now = Date.now, timeoutMs = BLOCK_RUN_TIMEOUT_MS }) {
+	/** Saves of a session, one after another. */
+	const saving = /* @__PURE__ */ new Map();
+	const queued = (sessionId, work) => {
+		const next = (saving.get(sessionId) ?? Promise.resolve()).then(work, work);
+		const settled = next.catch(() => void 0);
+		saving.set(sessionId, settled);
+		settled.then(() => {
+			if (saving.get(sessionId) === settled) saving.delete(sessionId);
+		});
+		return next;
+	};
+	/** The session's metadata and the ids of its turns (the live session's when it is loaded). */
+	async function read(sessionId) {
+		const live = host().getLiveSession(sessionId);
+		if (live) return {
+			metadata: live.metadata,
+			turnIds: new Set(live.turns.map((turn) => turn.id))
+		};
+		const data = await store.load(sessionId);
+		if (!data) throw new Error(`Session "${sessionId}" not found.`);
+		return {
+			metadata: data.metadata,
+			turnIds: new Set(data.turns.map((turn) => turn.id))
+		};
+	}
+	const write = async (sessionId, runs) => {
+		await host().patchSessionMeta(sessionId, { [BLOCK_RUNS_METADATA_KEY]: Object.keys(runs).length > 0 ? runs : void 0 }, { bumpUpdatedAt: false });
+		broadcast({
+			kind: "block-runs:changed",
+			sessionId
+		});
+	};
+	return {
+		async runBlock(sessionId, request, { onOutput, signal } = {}) {
+			const plan = shellBlockPlan(request.code, request.language);
+			if (!plan) throw new Error("This block does not run: only bash, sh, shell, zsh and console blocks with a command do.");
+			const command = blockRunCommand(plan);
+			const startedAt = now();
+			let output = "";
+			let stopped;
+			const take = (stream, text) => {
+				if (text === "") return;
+				output += text;
+				if (output.length > 131072) output = output.slice(-BLOCK_RUN_OUTPUT_CAP - 1);
+				try {
+					onOutput?.(stream, text);
+				} catch {}
+			};
+			let exitCode = null;
+			const stream = signal?.aborted ? null : await host().workspaceExecStream(sessionId, command);
+			if (signal?.aborted) stopped = "cancelled";
+			else if (stream) {
+				const stop = (why) => {
+					stopped ??= why;
+					stream.kill();
+				};
+				const onAbort = () => stop("cancelled");
+				signal?.addEventListener("abort", onAbort, { once: true });
+				const timer = setTimeout(stop, timeoutMs, "timeout");
+				const drain = async (source, name) => {
+					if (!source) return;
+					const decoder = new TextDecoder();
+					try {
+						for await (const bytes of source) take(name, decoder.decode(bytes, { stream: true }));
+						take(name, decoder.decode());
+					} catch {}
+				};
+				try {
+					const [code] = await Promise.all([
+						stream.exited,
+						drain(stream.stdout, "stdout"),
+						drain(stream.stderr, "stderr")
+					]);
+					exitCode = code;
+				} finally {
+					clearTimeout(timer);
+					signal?.removeEventListener("abort", onAbort);
+				}
+			} else try {
+				const result = await host().workspaceExec(sessionId, command, { timeoutSeconds: Math.ceil(timeoutMs / 1e3) });
+				take("stdout", result.stdout);
+				take("stderr", result.stderr);
+				exitCode = result.exitCode;
+			} catch (err) {
+				take("stderr", err instanceof Error ? err.message : String(err));
+			}
+			const run = {
+				key: blockRunKey(request.turnId, request.code),
+				turnId: request.turnId,
+				...capBlockOutput(output),
+				exitCode: stopped ? null : exitCode,
+				...stopped ? { stopped } : {},
+				durationMs: Math.max(0, now() - startedAt),
+				finishedAt: now()
+			};
+			await queued(sessionId, async () => {
+				const { metadata, turnIds } = await read(sessionId);
+				await write(sessionId, withBlockRun(readBlockRuns(metadata), run, turnIds));
+			});
+			return run;
+		},
+		async listBlockRuns(sessionId) {
+			return readBlockRuns((await read(sessionId)).metadata);
+		},
+		async removeBlockRun(sessionId, key) {
+			await queued(sessionId, async () => {
+				const runs = readBlockRuns((await read(sessionId)).metadata);
+				if (!(key in runs)) return;
+				delete runs[key];
+				await write(sessionId, runs);
+			});
+		}
+	};
+}
+//#endregion
 //#region src/chat/host/broadcast.ts
 function createHostBroadcast(env) {
 	const debugStream = env.debugStream ?? process.env.ZIDANE_IPC_DEBUG_STREAM === "1";
@@ -19514,12 +19745,8 @@ function createChatHost(env) {
 				running: isSessionBusy(sessionId)
 			}));
 		},
-		getLiveTurns(sessionId) {
-			return active.get(sessionId)?.agent.session?.turns ?? null;
-		},
-		getLiveSession(sessionId) {
-			return active.get(sessionId)?.agent.session ?? null;
-		},
+		getLiveTurns: (sessionId) => active.get(sessionId)?.agent.session?.turns ?? null,
+		getLiveSession: (sessionId) => active.get(sessionId)?.agent.session ?? null,
 		hasActiveWork() {
 			return hasActiveRuns() || terminals.hasRunningLocal();
 		},
@@ -19563,6 +19790,11 @@ function createChatHost(env) {
 			active,
 			agentSwitchRebuilds: sessionOps.methods.agentSwitchRebuilds
 		}),
+		...createBlockRunMethods({
+			host: () => host,
+			store: env.store,
+			broadcast
+		}),
 		compactSessionNow: createCompactSessionNow({
 			active,
 			broadcast,
@@ -19644,16 +19876,19 @@ function closeAfter(detach, close) {
 /**
 * {@link ChatHost.hasActiveRuns}, background tasks counted only with `tasks`
 * (a forced restart skips them); with `cwd`, only the sessions reading that
-* folder's extensions ({@link ChatHost.hasActiveRunsIn}).
+* folder's extensions ({@link ChatHost.hasActiveRunsIn}), both sides mapped
+* through `keyOf`.
 */
-function runsInFlight({ active, dispatches, lifecycleWork }, { tasks, cwd }) {
+function runsInFlight({ active, dispatches, lifecycleWork }, { tasks, cwd, keyOf = (folder) => folder }) {
 	if (lifecycleWork.size > 0) return true;
+	const key = cwd === void 0 ? void 0 : keyOf(cwd);
+	const reads = (entry) => key === void 0 || keyOf(entry.discoveryCwd) === key;
 	for (const sessionId of dispatches.keys()) {
 		const entry = active.get(sessionId);
-		if (cwd === void 0 || !entry || entry.discoveryCwd === cwd) return true;
+		if (!entry || reads(entry)) return true;
 	}
 	for (const entry of active.values()) {
-		if (cwd !== void 0 && entry.discoveryCwd !== cwd) continue;
+		if (!reads(entry)) continue;
 		if (entry.agent.isRunning || entry.compacting || entry.commandAbort !== void 0) return true;
 		for (const item of entry.work.values()) if (tasks || item.kind !== "task") return true;
 	}
@@ -19663,9 +19898,10 @@ function runsInFlight({ active, dispatches, lifecycleWork }, { tasks, cwd }) {
 function activeRunChecks(ctx) {
 	return {
 		hasActiveRuns: () => runsInFlight(ctx, { tasks: true }),
-		hasActiveRunsIn: (cwd) => runsInFlight(ctx, {
+		hasActiveRunsIn: (cwd, keyOf) => runsInFlight(ctx, {
 			tasks: true,
-			cwd
+			cwd,
+			...keyOf ? { keyOf } : {}
 		})
 	};
 }
@@ -20431,7 +20667,7 @@ function pickOAuthSelectOption(options, input) {
 */
 async function runIntegrationSignIn(descriptor, options) {
 	if (!descriptor.integration) throw new Error(`${descriptor.label} does not sign in with an integration.`);
-	const { signInWithIntegration } = await import("./registry-BKjeBnoy.js").then((n) => n.r);
+	const { signInWithIntegration } = await import("./registry-CJHvmvaP.js").then((n) => n.r);
 	return signInWithIntegration(descriptor.integration, loginCallbacks(descriptor, options), options.signal ? { signal: options.signal } : {});
 }
 /**
@@ -27983,4 +28219,4 @@ function hasUpdateAppliedMarker(cacheDir) {
 //#endregion
 export { CLAUDE_IMPORT_NOTES as $, buildPluginContributions as $n, createExtensionMcpHost as $t, clearProviderUsageCache as A, renderAgentsMdBlock as An, writeWorkspaceFile as At, exportFilename as B, prepareWorktree as Bn, mcpsWritePath as Bt, parseSemver as C, discoverProjectSkills as Cn, confineToWorkspace as Ct, resolvePlatformPackage as D, createChatTurnsReadTool as Dn, gitStatusOf as Dt, reinstallHint as E, chatReferenceTokensForPrompt as En, gitStatus as Et, redeemProviderReset as F, insideDeclaredRoots as Fn, supersededTools as Ft, detectOnboardingEnvironment as G, recordAgentHooksFanout as Gn, runIntegrationSignIn as Gt, resolveSessionExportTarget as H, readRemoteSandboxRef as Hn, upsertMcpServer as Ht, usageChecksOptedOut as I, builtinEnvironmentProviders as In, makeToolContext as It, probeLocalModelServers as J, resolveCwdPath as Jn, supportsOAuth as Jt, detectOtherAgents as K, extractEditPayloadForGate as Kn, runOAuthLogin as Kt, usageSourceFor as L, localEnvironmentProvider as Ln, fileEntriesFromPaths as Lt, fetchProviderUsage as M, resolveSessionModel as Mn, invalidateDiagnostics as Mt, fetchProviderUsageAccounts as N, discoverSessionMcpServers as Nn, listDiagnosticsTools as Nt, updateChecksOptedOut as O, installProviderDiagnosticHook as On, listWorkspace as Ot, providerUsageSupported as P, machineDiscoveryCwd as Pn, runDiagnostics as Pt, listExtensionSource as Q, scopeCwd as Qn, createArtifactKindsHost as Qt, fetchGithubUsage as R, WORKTREE_ENVIRONMENT_KIND as Rn, listProjectFiles as Rt, overrideManager as S, defaultSkillScanPaths as Sn, assembleDiff as St, performSelfUpdate as T, applyThinkingBindingSetting as Tn, gitShowHead as Tt, writeSessionExport as U, MachineLinkLostError as Un, oauthUsesManualCodePaste as Ut, renderSession as V, teardownWorktree as Vn, removeMcpServer as Vt, connectorGithubToken as W, createAgentHooksFanout as Wn, pickOAuthSelectOption as Wt, onboardingProviders as X, folderlessCwd as Xn, tryRevealPath as Xt, FEATURED_PROVIDERS as Y, serializePreview as Yn, tryOpenBrowser as Yt, clearExtensionSourceCache as Z, resolveSessionCwd as Zn, createMcpStatusTracker as Zt, checkForUpdate as _, storeHasDurability as _n, liveAgentProfiles as _r, gitOriginUrl as _t, updateAppliedMarkerPath as a, sandboxUnreadableDirs as an, refreshMcpToolsCatalog as ar, createGitWatches as at, detectLibc as b, buildSkillsConfig as bn, createMemoryApprovalsStore as br, WORKSPACE_MAX_ENTRIES as bt, UPDATE_LOCK_FILE as c, patchMcpCredential as cn, imageGenerationTools as cr, forgetGitCaches as ct, describeUpdateLockHolder as d, isInside$1 as dn, listDecisionModels as dr, gitCreateBranch as dt, resolveConfig as en, discoverProjectPlugins as er, claudeImportHostNote as et, isUpdateLockStale as f, createCatalogPorts as fn, parseDecisionModel as fr, gitInfo as ft, SELF_UPDATE_TIMEOUT_MS as g, readPinnedSkills as gn, changedCatalogItems as gr, cloneRepository as gt, findInstalledCompanion as h, pinnedSkillsValue as hn, applyExtensionAgents as hr, gitSwitch as ht, readUpdateAppliedMarker as i, resolveSandboxForRoots as in, mcpToolsCachePath as ir, previewClaudeImport as it, fetchAllProviderUsage as j, createProviderBuilder as jn, resolvePaths as jt, USAGE_CACHE_TTL_MS as k, discoverAgentsMd as kn, readWorkspaceFile as kt, UPDATE_LOCK_STALE_MS as l, provisionSessionEnvironment as ln, imageModelSources as lr, gitBranches as lt, updateLockPath as m, PINNED_SKILLS_META_KEY as mn, testDecisionModel as mr, gitPrList as mt, hasUpdateAppliedMarker as n, createChatHost as nn, clearMcpToolsCache as nr, hasClaudeCodeSetup as nt, watchInstalledVersion as o, createFileMcpCredentialStore as on, saveMcpToolsCache as or, watchGitRepository as ot, readUpdateLock as p, linkCatalogs as pn, resolveDecisionsOption as pr, gitPr as pt, onboardingInstallSignals as q, readFileSafe as qn, signsInWithIntegration as qt, probeInstalledVersion as r, createInteractionHub as rn, loadMcpToolsCache as rr, importFromClaudeCode as rt, writeUpdateAppliedMarker as s, mcpCredentialsPath as sn, subscribeMcpToolsCache as sr, gitSync as st, UPDATE_APPLIED_MARKER as t, resolveStoragePaths as tn, parsePluginScanPathEnv as tr, countClaudeSessionFiles as tt, acquireUpdateLock as u, createWorkspaceConfinement as un, listImageModels as ur, gitCommit as ut, checkTarballAvailable as v, isStaleRunMarker as vn, runCompaction as vr, createCapabilityProbe as vt, performInPlaceSelfUpdate as w, createBuiltinCommands as wn, gitDiff as wt, detectPackageManager as x, createSkillNameProbe as xn, WORKSPACE_MAX_FILE_BYTES as xt, compareSemver as y, createPromptSubmissions as yn, createApprovalHub as yr, searchWorkspace as yt, aggregateUsage as z, createWorktreeEnvironmentProvider as zn, isMcpServerName as zt };
 
-//# sourceMappingURL=auto-update-restart-BFB7Ek87.js.map
+//# sourceMappingURL=auto-update-restart-CQJtndMG.js.map