@0xmaxma/claude-gateway 1.8.13 → 2.0.0

package/dist/orchestration/config.d.ts

@@ -0,0 +1,256 @@
+export interface OrchestrationConfig {
+    /** Derived runtime fields. Configure the mode only at gateway.orchestration. */
+    enabled?: boolean;
+    channels?: string[];
+    conversation?: {
+        backend?: 'inherit';
+        /** Semantic readiness and prepare-while-waiting; opt in during rollout. */
+        semanticIntake?: boolean;
+        /** Silence after the newest incomplete material before one clarification. */
+        intakeWaitMs?: number;
+        maxActiveSessions?: number;
+        notificationPolicy?: 'next_user_turn' | 'existing_receive_path';
+        /** Legacy alias; the original 15000ms template value uses the modern default. */
+        decisionTimeoutMs?: number;
+        /** Maximum silence after inference starts, renewed by meaningful progress. */
+        idleTimeoutMs?: number;
+        startupTimeoutMs?: number;
+        firstResponseTimeoutMs?: number;
+        maxDecisionDurationMs?: number;
+        preemptionGraceMs?: number;
+        maxPendingInputs?: number;
+    };
+    tasks?: {
+        maxConcurrentPerAgent?: number;
+        workerIdleTtlMs?: number;
+        maxConcurrentPerConversation?: number;
+        maxQueuedPerConversation?: number;
+        maxQueuedPerAgent?: number;
+        /** Legacy alias for the inactivity budget, no longer a wall-clock limit. */
+        defaultTimeoutMs?: number;
+        idleTimeoutMs?: number;
+        /** Optional total worker deadline; zero disables it. */
+        maxDurationMs?: number;
+        /** Advisory thresholds; these never terminate a worker. */
+        progressStaleMs?: number;
+        progressNotifyCooldownMs?: number;
+        repeatedToolThreshold?: number;
+        interruptAckTimeoutMs?: number;
+        workspaceMode?: 'isolated-worktree' | 'shared-lock' | 'host' | 'container';
+        /** Optional starting directory; empty uses the agent workspace. */
+        projectRoot?: string;
+        resourceRetentionDays?: number;
+    };
+    events?: {
+        retentionDays?: number;
+        maxSubscriberBufferBytes?: number;
+    };
+    /** @deprecated Read only when migrating old config documents. Use AgentConfig.voice. */
+    voice?: {
+        enabled?: boolean;
+        notes?: {
+            enabled?: boolean;
+            provider?: string;
+            model?: string;
+            replyWithVoice?: boolean;
+        };
+        transport?: 'websocket';
+        maxActiveSessionsPerConversation?: number;
+        /** @deprecated Ignored; voice uses authenticated, origin-bound tickets. */
+        allowedOrigins?: string[];
+        language?: string;
+        stt?: {
+            provider?: string;
+            model?: string;
+        };
+        tts?: {
+            provider?: string;
+            model?: string;
+            voiceId?: string;
+        };
+        turns?: {
+            silenceCommitMs?: number;
+            finalizationTimeoutMs?: number;
+            maxUtteranceMs?: number;
+        };
+        playback?: {
+            maxBufferedAudioMs?: number;
+            bargeIn?: boolean;
+        };
+    };
+}
+export type AgentVoiceConfig = NonNullable<OrchestrationConfig['voice']>;
+export declare const ORCHESTRATION_DEFAULTS: {
+    enabled: boolean;
+    channels: string[];
+    conversation: {
+        backend: "inherit";
+        semanticIntake: boolean;
+        intakeWaitMs: number;
+        maxActiveSessions: number;
+        notificationPolicy: "existing_receive_path";
+        decisionTimeoutMs: number;
+        idleTimeoutMs: number;
+        startupTimeoutMs: number;
+        firstResponseTimeoutMs: number;
+        maxDecisionDurationMs: number;
+        preemptionGraceMs: number;
+        maxPendingInputs: number;
+    };
+    tasks: {
+        maxConcurrentPerAgent: number;
+        maxConcurrentPerConversation: number;
+        workerIdleTtlMs: number;
+        maxQueuedPerConversation: number;
+        maxQueuedPerAgent: number;
+        defaultTimeoutMs: number;
+        idleTimeoutMs: number;
+        maxDurationMs: number;
+        progressStaleMs: number;
+        progressNotifyCooldownMs: number;
+        repeatedToolThreshold: number;
+        interruptAckTimeoutMs: number;
+        workspaceMode: "host";
+        projectRoot: string;
+        resourceRetentionDays: number;
+    };
+    events: {
+        retentionDays: number;
+        maxSubscriberBufferBytes: number;
+    };
+    voice: {
+        enabled: boolean;
+        notes: {
+            enabled: boolean;
+            provider: string;
+            model: string;
+            replyWithVoice: boolean;
+        };
+        transport: "websocket";
+        maxActiveSessionsPerConversation: number;
+        allowedOrigins: string[];
+        language: string;
+        stt: {
+            provider: string;
+            model: string;
+        };
+        tts: {
+            provider: string;
+            model: string;
+            voiceId: string;
+        };
+        turns: {
+            silenceCommitMs: number;
+            finalizationTimeoutMs: number;
+            maxUtteranceMs: number;
+        };
+        playback: {
+            maxBufferedAudioMs: number;
+            bargeIn: boolean;
+        };
+    };
+};
+export declare const AGENT_VOICE_DEFAULTS: {
+    stt: {
+        provider: string;
+        model: string;
+    };
+    tts: {
+        provider: string;
+        model: string;
+        voiceId: string;
+    };
+    notes: {
+        provider: string;
+        model: string;
+        enabled: boolean;
+        replyWithVoice: boolean;
+    };
+    enabled: boolean;
+    transport: "websocket";
+    maxActiveSessionsPerConversation: number;
+    allowedOrigins: string[];
+    language: string;
+    turns: {
+        silenceCommitMs: number;
+        finalizationTimeoutMs: number;
+        maxUtteranceMs: number;
+    };
+    playback: {
+        maxBufferedAudioMs: number;
+        bargeIn: boolean;
+    };
+};
+export type ResolvedOrchestrationConfig = ReturnType<typeof resolveOrchestrationConfig>;
+export declare function validateTree(value: unknown, template: unknown, prefix: string): void;
+export declare function resolveOrchestrationConfig(config?: OrchestrationConfig, agentVoice?: AgentVoiceConfig): {
+    enabled: boolean;
+    channels: string[];
+    conversation: {
+        idleTimeoutMs: number;
+        backend: "inherit";
+        semanticIntake: boolean;
+        intakeWaitMs: number;
+        maxActiveSessions: number;
+        notificationPolicy: "next_user_turn" | "existing_receive_path";
+        decisionTimeoutMs: number;
+        startupTimeoutMs: number;
+        firstResponseTimeoutMs: number;
+        maxDecisionDurationMs: number;
+        preemptionGraceMs: number;
+        maxPendingInputs: number;
+    };
+    tasks: {
+        idleTimeoutMs: number;
+        maxConcurrentPerAgent: number;
+        workerIdleTtlMs: number;
+        maxConcurrentPerConversation: number;
+        maxQueuedPerConversation: number;
+        maxQueuedPerAgent: number;
+        defaultTimeoutMs: number;
+        maxDurationMs: number;
+        progressStaleMs: number;
+        progressNotifyCooldownMs: number;
+        repeatedToolThreshold: number;
+        interruptAckTimeoutMs: number;
+        workspaceMode: "isolated-worktree" | "shared-lock" | "host" | "container";
+        projectRoot: string;
+        resourceRetentionDays: number;
+    };
+    events: {
+        retentionDays: number;
+        maxSubscriberBufferBytes: number;
+    };
+    voice: {
+        notes: {
+            enabled: boolean;
+            provider: string;
+            model: string;
+            replyWithVoice: boolean;
+        };
+        stt: {
+            provider: string;
+            model: string;
+        };
+        tts: {
+            provider: string;
+            model: string;
+            voiceId: string;
+        };
+        turns: {
+            silenceCommitMs: number;
+            finalizationTimeoutMs: number;
+            maxUtteranceMs: number;
+        };
+        playback: {
+            maxBufferedAudioMs: number;
+            bargeIn: boolean;
+        };
+        enabled: boolean;
+        transport: "websocket";
+        maxActiveSessionsPerConversation: number;
+        allowedOrigins: string[];
+        language: string;
+    };
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/orchestration/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/orchestration/config.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,CAAC,EAAE;QACb,OAAO,CAAC,EAAE,SAAS,CAAC;QACpB,2EAA2E;QAC3E,cAAc,CAAC,EAAE,OAAO,CAAC;QACzB,6EAA6E;QAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,kBAAkB,CAAC,EAAE,gBAAgB,GAAG,uBAAuB,CAAC;QAChE,iFAAiF;QACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,8EAA8E;QAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,KAAK,CAAC,EAAE;QACN,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,4BAA4B,CAAC,EAAE,MAAM,CAAC;QACtC,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,4EAA4E;QAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wDAAwD;QACxD,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,2DAA2D;QAC3D,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,wBAAwB,CAAC,EAAE,MAAM,CAAC;QAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,aAAa,CAAC,EAAE,mBAAmB,GAAG,aAAa,GAAG,MAAM,GAAG,WAAW,CAAC;QAC3E,mEAAmE;QACnE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,qBAAqB,CAAC,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,wBAAwB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,wFAAwF;IACxF,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,KAAK,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC3F,SAAS,CAAC,EAAE,WAAW,CAAC;QACxB,gCAAgC,CAAC,EAAE,MAAM,CAAC;QAC1C,2EAA2E;QAC3E,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,GAAG,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,GAAG,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9D,KAAK,CAAC,EAAE;YAAE,eAAe,CAAC,EAAE,MAAM,CAAC;YAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;YAAC,cAAc,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9F,QAAQ,CAAC,EAAE;YAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC/D,CAAC;CACH;AACD,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAQgL,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;CAK1N,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;oBAPkL,MAAM,EAAE;;;;;;;;;;;CAY1N,CAAC;AACF,MAAM,MAAM,2BAA2B,GAAG,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAIxF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAapF;AACD,wBAAgB,0BAA0B,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,UAAU,CAAC,EAAE,gBAAgB;;;;;iBA/FxF,SAAS;wBAEF,OAAO;sBAET,MAAM;2BACD,MAAM;4BACL,gBAAgB,GAAG,uBAAuB;2BAE3C,MAAM;0BAGP,MAAM;gCACA,MAAM;+BACP,MAAM;2BACV,MAAM;0BACP,MAAM;;;;+BAGD,MAAM;yBACZ,MAAM;sCACO,MAAM;kCACV,MAAM;2BACb,MAAM;0BAEP,MAAM;uBAGT,MAAM;yBAEJ,MAAM;kCACG,MAAM;+BACT,MAAM;+BACN,MAAM;uBACd,mBAAmB,GAAG,aAAa,GAAG,MAAM,GAAG,WAAW;qBAE5D,MAAM;+BACI,MAAM;;;uBAEL,MAAM;kCAA6B,MAAM;;;;qBAI9C,OAAO;sBAAa,MAAM;mBAAU,MAAM;4BAAmB,OAAO;;;sBAMrE,MAAM;mBAAU,MAAM;;;sBACtB,MAAM;mBAAU,MAAM;qBAAY,MAAM;;;6BAC/B,MAAM;mCAA0B,MAAM;4BAAmB,MAAM;;;gCACzD,MAAM;qBAAY,OAAO;;iBAVjD,OAAO;mBAEL,WAAW;0CACY,MAAM;wBAExB,MAAM,EAAE;kBACd,MAAM;;EAmFpB"}

package/dist/orchestration/config.js

@@ -0,0 +1,110 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_VOICE_DEFAULTS = exports.ORCHESTRATION_DEFAULTS = void 0;
+exports.validateTree = validateTree;
+exports.resolveOrchestrationConfig = resolveOrchestrationConfig;
+const model_ref_1 = require("../voice/providers/model-ref");
+const types_1 = require("../history/types");
+const types_2 = require("./types");
+const path_1 = require("path");
+exports.ORCHESTRATION_DEFAULTS = {
+    enabled: false,
+    channels: ['api'],
+    conversation: { backend: 'inherit', semanticIntake: false, intakeWaitMs: 2000, maxActiveSessions: 2, notificationPolicy: 'existing_receive_path',
+        decisionTimeoutMs: 120000, idleTimeoutMs: 120000, startupTimeoutMs: 120000, firstResponseTimeoutMs: 120000, maxDecisionDurationMs: 600000, preemptionGraceMs: 250, maxPendingInputs: 100 },
+    tasks: { maxConcurrentPerAgent: 10, maxConcurrentPerConversation: 10, workerIdleTtlMs: 600000, maxQueuedPerConversation: 20,
+        maxQueuedPerAgent: 100, defaultTimeoutMs: 1800000, idleTimeoutMs: 300000, maxDurationMs: 0, progressStaleMs: 180000, progressNotifyCooldownMs: 300000, repeatedToolThreshold: 6, interruptAckTimeoutMs: 5000, workspaceMode: 'host', projectRoot: '', resourceRetentionDays: 7 },
+    events: { retentionDays: 7, maxSubscriberBufferBytes: 1048576 },
+    voice: { enabled: false, notes: { enabled: true, provider: 'elevenlabs', model: 'scribe_v2', replyWithVoice: true }, transport: 'websocket', maxActiveSessionsPerConversation: 1, allowedOrigins: [], language: '',
+        stt: { provider: 'elevenlabs', model: 'scribe_v2_realtime' },
+        tts: { provider: 'elevenlabs', model: 'eleven_v3_conversational', voiceId: '' },
+        turns: { silenceCommitMs: 650, finalizationTimeoutMs: 5000, maxUtteranceMs: 60000 },
+        playback: { maxBufferedAudioMs: 1500, bargeIn: true } },
+};
+// New agents start disabled and choose models explicitly from connected providers.
+exports.AGENT_VOICE_DEFAULTS = {
+    ...exports.ORCHESTRATION_DEFAULTS.voice,
+    stt: { provider: '', model: '' },
+    tts: { provider: '', model: '', voiceId: '' },
+    notes: { ...exports.ORCHESTRATION_DEFAULTS.voice.notes, provider: '', model: '' },
+};
+// Validate the complete tree, including unknown keys: a misspelled capacity or
+// secret field must not be silently accepted as a working configuration.
+function validateTree(value, template, prefix) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', `${prefix} must be an object`);
+    const shape = template;
+    for (const [key, item] of Object.entries(value)) {
+        const where = `${prefix}.${key}`;
+        if (!(key in shape))
+            throw new types_2.OrchestrationError('INVALID_CONFIG', `Unknown field ${where}`);
+        const expected = shape[key];
+        if (Array.isArray(expected)) {
+            if (!Array.isArray(item) || (!item.length && key !== 'allowedOrigins') || item.some(v => typeof v !== 'string'))
+                throw new types_2.OrchestrationError('INVALID_CONFIG', `${where} must be a string array`);
+        }
+        else if (expected && typeof expected === 'object')
+            validateTree(item, expected, where);
+        else if (typeof item !== typeof expected)
+            throw new types_2.OrchestrationError('INVALID_CONFIG', `Invalid ${where}`);
+        else if (typeof item === 'number' && (!Number.isSafeInteger(item) || item < (key === 'maxDurationMs' ? 0 : 1) || item > 2147483647))
+            throw new types_2.OrchestrationError('INVALID_CONFIG', `${where} must be a positive bounded integer`);
+    }
+}
+function resolveOrchestrationConfig(config, agentVoice) {
+    if (agentVoice !== undefined)
+        validateTree(agentVoice, exports.ORCHESTRATION_DEFAULTS.voice, 'voice');
+    const voice = agentVoice ?? config?.voice;
+    if (config !== undefined)
+        validateTree(config, exports.ORCHESTRATION_DEFAULTS, 'orchestration');
+    const d = { ...exports.ORCHESTRATION_DEFAULTS, voice: agentVoice === undefined ? exports.ORCHESTRATION_DEFAULTS.voice : exports.AGENT_VOICE_DEFAULTS };
+    const result = {
+        enabled: config?.enabled ?? d.enabled,
+        channels: [...(config?.channels ?? d.channels)],
+        conversation: { ...d.conversation, ...config?.conversation,
+            idleTimeoutMs: config?.conversation?.idleTimeoutMs ??
+                (config?.conversation?.decisionTimeoutMs === 15000 ? d.conversation.idleTimeoutMs : config?.conversation?.decisionTimeoutMs ?? d.conversation.idleTimeoutMs) },
+        tasks: { ...d.tasks, ...config?.tasks, idleTimeoutMs: config?.tasks?.idleTimeoutMs ?? config?.tasks?.defaultTimeoutMs ?? d.tasks.idleTimeoutMs },
+        events: { ...d.events, ...config?.events },
+        voice: { ...d.voice, ...voice, notes: { ...d.voice.notes, ...voice?.notes },
+            stt: { ...d.voice.stt, ...voice?.stt }, tts: { ...d.voice.tts, ...voice?.tts },
+            turns: { ...d.voice.turns, ...voice?.turns }, playback: { ...d.voice.playback, ...voice?.playback } },
+    };
+    for (const role of ['tts', 'stt', 'notes'])
+        result.voice[role].provider = (0, model_ref_1.canonicalVoiceProvider)(result.voice[role].provider);
+    if (result.channels.some(c => !['api', ...types_1.CHAT_CHANNELS].includes(c)) || new Set(result.channels).size !== result.channels.length)
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Invalid orchestration.channels');
+    if (result.conversation.backend !== 'inherit' || !['isolated-worktree', 'shared-lock', 'host', 'container'].includes(result.tasks.workspaceMode) || result.voice.transport !== 'websocket')
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Unsupported orchestration backend, workspace mode or transport');
+    if (result.tasks.repeatedToolThreshold > 64)
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'tasks.repeatedToolThreshold must be between 1 and 64');
+    if (!['next_user_turn', 'existing_receive_path'].includes(result.conversation.notificationPolicy))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Invalid notification policy');
+    if (result.tasks.maxConcurrentPerConversation > result.tasks.maxConcurrentPerAgent || result.tasks.maxQueuedPerConversation > result.tasks.maxQueuedPerAgent)
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Conversation task limits exceed agent limits');
+    if (result.tasks.projectRoot && (!(0, path_1.isAbsolute)(result.tasks.projectRoot) || result.tasks.projectRoot.includes('\0') || Buffer.byteLength(result.tasks.projectRoot) > 4096))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'tasks.projectRoot must be an absolute bounded filesystem path');
+    if (result.voice.maxActiveSessionsPerConversation !== 1)
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Only one active voice session per conversation is supported');
+    if (!result.voice.playback.bargeIn)
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Voice currently requires playback.bargeIn:true');
+    if (result.voice.language && !/^[a-z]{2,3}(-[A-Za-z0-9]{2,8})?$/.test(result.voice.language))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Invalid voice.language');
+    for (const origin of result.voice.allowedOrigins) {
+        try {
+            if (new URL(origin).origin !== origin || !/^https?:\/\//.test(origin))
+                throw new Error();
+        }
+        catch {
+            throw new types_2.OrchestrationError('INVALID_CONFIG', 'voice.allowedOrigins must contain exact HTTP(S) origins');
+        }
+    }
+    if (result.voice.enabled && (!result.voice.stt.provider.trim() || !result.voice.tts.provider.trim()))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Voice requires configured providers');
+    if (result.voice.enabled && result.voice.notes.replyWithVoice && !['elevenlabs', 'cartesia', 'upstream:elevenlabs', 'paxalabs', 'upstream:paxalabs', 'managed:paxalabs', 'managed:elevenlabs', 'gemini', 'upstream:gemini', 'openrouter', 'upstream:openrouter'].includes(result.voice.tts.provider))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Voice replies require a supported TTS provider');
+    if (result.voice.enabled && (!result.voice.tts.model.trim() || !result.voice.stt.model.trim() || (result.voice.notes.enabled && (!result.voice.notes.provider.trim() || !result.voice.notes.model.trim()))))
+        throw new types_2.OrchestrationError('INVALID_CONFIG', 'Choose TTS and STT models before enabling voice');
+    return result;
+}
+//# sourceMappingURL=config.js.map

package/dist/orchestration/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/orchestration/config.ts"],"names":[],"mappings":";;;AA2FA,oCAaC;AACD,gEAmCC;AA5ID,4DAAsE;AACtE,4CAAiD;AACjD,mCAA6C;AAC7C,+BAAkC;AA+DrB,QAAA,sBAAsB,GAAG;IACpC,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,YAAY,EAAE,EAAE,OAAO,EAAE,SAAkB,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,kBAAkB,EAAE,uBAAgC;QAChK,iBAAiB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,qBAAqB,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;IAC5L,KAAK,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,4BAA4B,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE;QACzH,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAe,EAAE,WAAW,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE;IAC3R,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE;IAC/D,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,WAAoB,EAAE,gCAAgC,EAAE,CAAC,EAAE,cAAc,EAAE,EAAc,EAAE,QAAQ,EAAE,EAAE;QACrO,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,oBAAoB,EAAE;QAC5D,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,EAAE,EAAE;QAC/E,KAAK,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE;QACnF,QAAQ,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;CAC1D,CAAC;AACF,mFAAmF;AACtE,QAAA,oBAAoB,GAAG;IAClC,GAAG,8BAAsB,CAAC,KAAK;IAC/B,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IAChC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC7C,KAAK,EAAE,EAAE,GAAG,8BAAsB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;CAC1E,CAAC;AAGF,+EAA+E;AAC/E,yEAAyE;AACzE,SAAgB,YAAY,CAAC,KAAc,EAAE,QAAiB,EAAE,MAAc;IAC5E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,GAAG,MAAM,oBAAoB,CAAC,CAAC;IAC/I,MAAM,KAAK,GAAG,QAAmC,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,iBAAiB,KAAK,EAAE,CAAC,CAAC;QAC9F,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,GAAG,KAAK,gBAAgB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACrM,CAAC;aAAM,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;aACpF,IAAI,OAAO,IAAI,KAAK,OAAO,QAAQ;YAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC;aACxG,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,UAAU,CAAC;YAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,GAAG,KAAK,qCAAqC,CAAC,CAAC;IACrO,CAAC;AACH,CAAC;AACD,SAAgB,0BAA0B,CAAC,MAA4B,EAAE,UAA6B;IACpG,IAAI,UAAU,KAAK,SAAS;QAAE,YAAY,CAAC,UAAU,EAAE,8BAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,UAAU,IAAI,MAAM,EAAE,KAAK,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS;QAAE,YAAY,CAAC,MAAM,EAAE,8BAAsB,EAAE,eAAe,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,EAAE,GAAG,8BAAsB,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,8BAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,4BAAoB,EAAE,CAAC;IAC/H,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO;QACrC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/C,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,MAAM,EAAE,YAAY;YACxD,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa;gBAChD,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,iBAAiB,IAAI,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE;QAClK,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,IAAI,MAAM,EAAE,KAAK,EAAE,gBAAgB,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE;QAChJ,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE;QAC1C,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE;YACzE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE;YAC9E,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,EAAE;KACxG,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAU;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAA,kCAAsB,EAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;IACvI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,qBAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,gCAAgC,CAAC,CAAC;IACpN,IAAI,MAAM,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,mBAAmB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,WAAW;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;IAC7S,IAAI,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,EAAE;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,sDAAsD,CAAC,CAAC;IACpJ,IAAI,CAAC,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,kBAAkB,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACjL,IAAI,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,IAAI,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;IAC7P,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,IAAA,iBAAU,EAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,+DAA+D,CAAC,CAAC;IAC1R,IAAI,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,6DAA6D,CAAC,CAAC;IACvK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;IACrI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACvK,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;QACjD,IAAI,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAAC,CAAC;QACjG,MAAM,CAAC;YAAC,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,yDAAyD,CAAC,CAAC;QAAC,CAAC;IACtH,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IAC5L,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC,YAAY,EAAC,UAAU,EAAC,qBAAqB,EAAC,UAAU,EAAC,mBAAmB,EAAC,kBAAkB,EAAC,oBAAoB,EAAC,QAAQ,EAAC,iBAAiB,EAAC,YAAY,EAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;IAC7X,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;IAC/S,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/orchestration/container.d.ts

@@ -0,0 +1,21 @@
+import type { AgentConfig } from '../types';
+import type { RuntimeProfile } from '../session/runtime-profile';
+export declare function assertContainerBinding(agent: Pick<AgentConfig, 'type' | 'container'>, profile?: Pick<RuntimeProfile, 'containerExecution'>): void;
+/** All executable operations go through docker exec; never retry on the host. */
+export declare function validateContainer(agent: AgentConfig): Promise<void>;
+/** Shared by admission and the legacy-container migration preflight. */
+export declare function hasNoNewPrivileges(options: unknown): boolean;
+export declare function validateContainerInspection(agent: AgentConfig, c: any, options?: {
+    requireRunning?: boolean;
+}): Promise<void>;
+export declare function containerNode(container: string, script: string, args?: string[], input?: string): Promise<string>;
+export declare function prepareContainerProfile(agent: AgentConfig, profile: RuntimeProfile): Promise<{
+    config: string;
+    directory: string;
+}>;
+/** Read files INSIDE the container, then import bytes into a gateway-owned spool.
+ * Never resolve an app-controlled symlink in the host namespace. */
+export declare function importContainerFile(agent: AgentConfig, spool: string, attempt: string, action: string, candidate: unknown): Promise<string>;
+export declare const CONTAINER_SUPERVISOR: string;
+export declare function stopContainerProfile(container: string, directory: string): Promise<boolean>;
+//# sourceMappingURL=container.d.ts.map

package/dist/orchestration/container.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/orchestration/container.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAMjE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,oBAAoB,CAAC,GAAG,IAAI,CAEjJ;AAED,iFAAiF;AACjF,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAY5D;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBvI;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAWjH;AAkBD,wBAAsB,uBAAuB,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BzI;AAED;oEACoE;AACpE,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAMjJ;AAED,eAAO,MAAM,oBAAoB,QAMhC,CAAC;AACF,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAajG"}

package/dist/orchestration/container.js

@@ -0,0 +1,195 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONTAINER_SUPERVISOR = void 0;
+exports.assertContainerBinding = assertContainerBinding;
+exports.validateContainer = validateContainer;
+exports.hasNoNewPrivileges = hasNoNewPrivileges;
+exports.validateContainerInspection = validateContainerInspection;
+exports.containerNode = containerNode;
+exports.prepareContainerProfile = prepareContainerProfile;
+exports.importContainerFile = importContainerFile;
+exports.stopContainerProfile = stopContainerProfile;
+const checkpoint_hook_1 = require("./tasks/checkpoint-hook");
+const child_process_1 = require("child_process");
+const util_1 = require("util");
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const crypto_1 = require("crypto");
+const os_1 = require("os");
+const types_1 = require("./types");
+// Resolve subprocess support only when this feature is invoked.
+const exec = (file, args, options = {}) => (0, util_1.promisify)(child_process_1.execFile)(file, args, { ...options, encoding: 'utf8' });
+function assertContainerBinding(agent, profile) {
+    if ((agent.type === 'app-agent' && !agent.container) || (profile?.containerExecution && agent.type !== 'app-agent'))
+        throw new types_1.OrchestrationError('CONTAINER_REQUIRED', 'Host fallback is forbidden');
+}
+/** All executable operations go through docker exec; never retry on the host. */
+async function validateContainer(agent) {
+    if (!agent.container || !/^[a-zA-Z0-9][a-zA-Z0-9_.-]+$/.test(agent.container))
+        throw new types_1.OrchestrationError('CONTAINER_REQUIRED');
+    const { stdout } = await exec('docker', ['inspect', agent.container], { timeout: 10000 });
+    await validateContainerInspection(agent, JSON.parse(stdout)[0]);
+}
+/** Shared by admission and the legacy-container migration preflight. */
+function hasNoNewPrivileges(options) {
+    if (!Array.isArray(options))
+        return false;
+    let enabled = false;
+    for (const option of options) {
+        if (typeof option !== 'string')
+            return false;
+        if (!option.startsWith('no-new-privileges'))
+            continue;
+        if (option === 'no-new-privileges') {
+            enabled = true;
+            continue;
+        }
+        const match = /^no-new-privileges[=:](true|True|TRUE|1|false|False|FALSE|0)$/.exec(option);
+        if (!match)
+            return false;
+        enabled = ['true', 'True', 'TRUE', '1'].includes(match[1]);
+    }
+    return enabled;
+}
+async function validateContainerInspection(agent, c, options = {}) {
+    const h = c.HostConfig;
+    if ((options.requireRunning !== false && !c.State?.Running) || !h || h.Privileged || (h.NetworkMode === 'host' || String(h.NetworkMode).startsWith('container:')) || h.PidMode || !['private', 'none', ''].includes(h.IpcMode ?? '') || h.CapAdd?.length || !(h.CapDrop ?? []).includes('ALL') || !hasNoNewPrivileges(h.SecurityOpt) || h.Devices?.length)
+        throw new types_1.OrchestrationError('CONTAINER_ISOLATION_REQUIRED');
+    const workspace = await (0, promises_1.realpath)(agent.workspace);
+    const media = await (0, promises_1.realpath)((0, path_1.join)(agent.workspace, '..', 'media')).catch(() => (0, path_1.join)(agent.workspace, '..', 'media'));
+    const ro = new Map();
+    for (const [destination, source] of [['/usr/local/bin/claude', '/usr/local/bin/claude'], ['/usr/bin/node', process.execPath], [(0, path_1.join)((0, path_1.dirname)((0, path_1.dirname)(process.execPath)), 'lib/node_modules'), (0, path_1.join)((0, path_1.dirname)((0, path_1.dirname)(process.execPath)), 'lib/node_modules')], [(0, path_1.join)((0, os_1.homedir)(), '.claude-seed'), (0, path_1.join)(agent.workspace, '..', '.claude-seed')]]) {
+        try {
+            ro.set(destination, await (0, promises_1.realpath)(source));
+        }
+        catch { /* absent optional installer mount */ }
+    }
+    let workspaceFound = false;
+    for (const m of c.Mounts ?? []) {
+        if (/docker\.sock|containerd\.sock/.test(m.Source + m.Destination))
+            throw new types_1.OrchestrationError('CONTAINER_HOST_MOUNT_DENIED');
+        const source = await (0, promises_1.realpath)(m.Source);
+        if (m.Destination === '/workspace' && source === workspace) {
+            workspaceFound = true;
+            continue;
+        }
+        // Existing app-agent installer mounts its own media, CLI/runtime and sanitized seed only.
+        if (source === media && m.Destination === media)
+            continue;
+        const readOnlyAllowed = !m.RW && ro.get(m.Destination) === source;
+        if (!readOnlyAllowed)
+            throw new types_1.OrchestrationError('CONTAINER_HOST_MOUNT_DENIED');
+    }
+    if (!workspaceFound)
+        throw new types_1.OrchestrationError('CONTAINER_WORKSPACE_REQUIRED');
+}
+function containerNode(container, script, args = [], input = '') {
+    return new Promise((resolve, reject) => {
+        const p = (0, child_process_1.spawn)('docker', ['exec', '-i', '--workdir', '/workspace', '--user', String((0, os_1.userInfo)().uid), container, 'node', '-e', script, ...args], { stdio: ['pipe', 'pipe', 'pipe'] });
+        const chunks = [];
+        let size = 0;
+        let error = '';
+        const timer = setTimeout(() => { p.kill(); reject(new Error('Container operation timeout')); }, 15000);
+        p.stdout.on('data', b => { size += b.length; if (size > 72 * 1024 * 1024) {
+            p.kill();
+            reject(new Error('Container output too large'));
+        }
+        else
+            chunks.push(b); });
+        p.stderr.on('data', b => { if (error.length < 4096)
+            error += b; });
+        p.on('error', e => { clearTimeout(timer); reject(e); });
+        p.on('exit', code => { clearTimeout(timer); code === 0 ? resolve(Buffer.concat(chunks).toString()) : reject(new Error(`Container operation failed (${code}): ${error}`)); });
+        p.stdin.on('error', () => { });
+        p.stdin.end(input);
+    });
+}
+// A deliberately small MCP surface: no host module loader, shell endpoint or credentials.
+const MCP_CLIENT = String.raw `
+const fs=require('fs'),http=require('http'),readline=require('readline');
+const c=JSON.parse(fs.readFileSync(process.argv[1],'utf8'));
+const reply=(id,result,error)=>process.stdout.write(JSON.stringify({jsonrpc:'2.0',id,...(error?{error}:{result})})+'\n');
+readline.createInterface({input:process.stdin}).on('line',async line=>{let q;try{q=JSON.parse(line);if(q.id===undefined)return;
+if(q.method==='initialize')return reply(q.id,{protocolVersion:q.params.protocolVersion,capabilities:{tools:{}},serverInfo:{name:'gateway',version:'1.0.0'}});
+if(q.method==='ping')return reply(q.id,{});
+if(q.method==='tools/list')return reply(q.id,{tools:c.tools});
+if(q.method!=='tools/call'||!c.tools.some(t=>t.name===q.params.name))return reply(q.id,null,{code:-32601,message:'Tool unavailable'});
+const body=JSON.stringify({tool:q.params.name,args:q.params.arguments||{},action_id:String(q.id)});
+const request=http.request({socketPath:c.socket,path:'/call',method:'POST',headers:{Authorization:'Bearer '+c.token,'Content-Type':'application/json'}},r=>{let body='';r.on('data',b=>body+=b);r.on('end',()=>reply(q.id,{content:[{type:'text',text:body}],isError:r.statusCode!==200}));});
+request.on('error',()=>reply(q.id,{content:[{type:'text',text:'Task bridge unavailable'}],isError:true}));request.setTimeout(20000,()=>request.destroy());request.end(body);
+}catch(e){if(q?.id!==undefined)reply(q.id,null,{code:-32603,message:'Invalid MCP request'});}});
+`;
+async function prepareContainerProfile(agent, profile) {
+    await validateContainer(agent);
+    const original = JSON.parse(await (0, promises_1.readFile)(profile.mcpConfigPath, 'utf8')).mcpServers.gateway;
+    const ticket = JSON.parse(await (0, promises_1.readFile)(original.env.GATEWAY_ORCHESTRATION_TICKET_FILE, 'utf8'));
+    if (!ticket.socket)
+        throw new types_1.OrchestrationError('CONTAINER_BRIDGE_REQUIRED');
+    const role = profile.role;
+    // Schemas are data copied from the existing gateway MCP inventory, not executable host modules.
+    const dir = '/tmp/gateway-orch-' + (0, crypto_1.randomUUID)();
+    const payload = { role, socket: '/workspace/' + (0, path_1.basename)(ticket.socket), token: ticket.token, tools: ticket.tools };
+    const config = { mcpServers: { gateway: { command: 'node', args: ['-e', MCP_CLIENT, dir + '/ticket.json'] } } };
+    await containerNode(agent.container, `const fs=require('fs');let s='';process.stdin.on('data',b=>s+=b);process.stdin.on('end',()=>{const p=JSON.parse(s);fs.mkdirSync(p.dir,{mode:448});fs.writeFileSync(p.dir+'/ticket.json',JSON.stringify(p.ticket),{mode:384});fs.writeFileSync(p.dir+'/mcp.json',JSON.stringify(p.config),{mode:384});});`, [], JSON.stringify({ dir, ticket: payload, config }));
+    if (profile.checkpointCommand)
+        await containerNode(agent.container, "require('fs').writeFileSync(process.argv[1],process.argv[2],{mode:384})", [dir + '/checkpoint.cjs', checkpoint_hook_1.CHECKPOINT_HOOK]);
+    if (profile.skillPluginDir) {
+        const files = {};
+        let bytes = 0;
+        const visit = async (base, rel = '') => {
+            for (const name of await (0, promises_1.readdir)(base)) {
+                const p = (0, path_1.join)(base, name), r = rel ? rel + '/' + name : name, stat = await (0, promises_1.lstat)(p);
+                if (stat.isSymbolicLink())
+                    throw new types_1.OrchestrationError('SKILL_RESOURCE_SYMLINK_DENIED');
+                if (stat.isDirectory())
+                    await visit(p, r);
+                else if (stat.isFile()) {
+                    bytes += stat.size;
+                    if (bytes > 10 * 1024 * 1024)
+                        throw new types_1.OrchestrationError('SKILL_RESOURCES_TOO_LARGE');
+                    files[r] = (await (0, promises_1.readFile)(p)).toString('base64');
+                }
+            }
+        };
+        await visit(profile.skillPluginDir);
+        await containerNode(agent.container, `const fs=require('fs'),path=require('path');let s='';process.stdin.on('data',b=>s+=b);process.stdin.on('end',()=>{for(const [name,data] of Object.entries(JSON.parse(s))){const p=path.join(process.argv[1],name);fs.mkdirSync(path.dirname(p),{recursive:true,mode:448});fs.writeFileSync(p,Buffer.from(data,'base64'),{mode:384});}});`, [dir + '/skill-plugin'], JSON.stringify(files));
+    }
+    return { config: dir + '/mcp.json', directory: dir };
+}
+/** Read files INSIDE the container, then import bytes into a gateway-owned spool.
+ * Never resolve an app-controlled symlink in the host namespace. */
+async function importContainerFile(agent, spool, attempt, action, candidate) {
+    if (typeof candidate !== 'string' || candidate.length > 4096)
+        throw new types_1.OrchestrationError('ARTIFACT_PATH_DENIED');
+    const data = await containerNode(agent.container, `const fs=require('fs');const p=fs.realpathSync(process.argv[1]);if(!p.startsWith('/workspace/')&&!p.startsWith('/tmp/'))throw Error('ARTIFACT_PATH_DENIED');const fd=fs.openSync(p,fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);const s=fs.fstatSync(fd);if(!s.isFile()||s.size>50*1024*1024)throw Error('ARTIFACT_PATH_DENIED');const b=fs.readFileSync(fd);if(b.length>50*1024*1024)throw Error('ARTIFACT_PATH_DENIED');process.stdout.write(b.toString('base64'));`, [candidate]);
+    const directory = (0, path_1.join)(spool, attempt);
+    await (0, promises_1.mkdir)(directory, { recursive: true, mode: 0o700 });
+    const dest = (0, path_1.join)(directory, (0, crypto_1.createHash)('sha256').update(action).digest('hex').slice(0, 16) + '-' + (0, path_1.basename)(candidate).replace(/[^a-zA-Z0-9._-]/g, '_').slice(-100));
+    await (0, promises_1.writeFile)(dest, Buffer.from(data, 'base64'), { mode: 0o600 });
+    return dest;
+}
+exports.CONTAINER_SUPERVISOR = String.raw `
+const fs=require('fs'),{spawn}=require('child_process');const [dir,bin,...args]=process.argv.slice(1);
+const child=spawn(bin,args,{stdio:'inherit',detached:true,env:{...process.env,GATEWAY_CONTAINER_ATTEMPT:dir}});
+child.on('error',()=>process.exit(1));
+fs.writeFileSync(dir+'/process.json',JSON.stringify({pid:child.pid,start:fs.readFileSync('/proc/'+child.pid+'/stat','utf8').split(') ')[1].split(' ')[19]}));
+child.on('exit',code=>process.exit(code||0));
+`;
+async function stopContainerProfile(container, directory) {
+    try {
+        await containerNode(container, String.raw `const fs=require('fs');const d=process.argv[1];
+if(!/^\/tmp\/gateway-orch-[a-f0-9-]+$/.test(d))throw Error('Invalid attempt');
+let saved;try{saved=JSON.parse(fs.readFileSync(d+'/process.json','utf8'));}catch{throw Error('Process identity missing');}
+const alive=()=>{try{return fs.readFileSync('/proc/'+saved.pid+'/stat','utf8').split(') ')[1].split(' ')[19]===saved.start;}catch{return false;}};
+if(alive()){try{process.kill(-saved.pid,'SIGKILL');}catch(e){if(e.code!=='ESRCH')throw e;}}
+// Include detached descendants which retain the attempt marker (e.g. tool shells).
+for(const p of fs.readdirSync('/proc').filter(p=>/^\d+$/.test(p))){try{if(fs.readFileSync('/proc/'+p+'/environ').toString().split('\0').includes('GATEWAY_CONTAINER_ATTEMPT='+d))process.kill(Number(p),'SIGKILL');}catch(e){if(!['ENOENT','ESRCH','EACCES'].includes(e.code))throw e;}}
+setTimeout(()=>{if(alive()){const stat=fs.readFileSync('/proc/'+saved.pid+'/stat','utf8');if(stat.split(') ')[1][0]!=='Z')process.exit(1);}},100);
+`, [directory]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=container.js.map

package/dist/orchestration/container.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/orchestration/container.ts"],"names":[],"mappings":";;;AAcA,wDAEC;AAGD,8CAIC;AAGD,gDAYC;AAED,kEAoBC;AAED,sCAWC;AAkBD,0DA0BC;AAID,kDAMC;AASD,oDAaC;AArJD,6DAA0D;AAC1D,iDAAgD;AAChD,+BAAiC;AACjC,0CAAmF;AACnF,+BAA+C;AAC/C,mCAAgD;AAChD,2BAAuC;AAGvC,mCAA6C;AAC7C,gEAAgE;AAChE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,UAAmD,EAAE,EAAE,EAAE,CACnG,IAAA,gBAAS,EAAC,wBAAQ,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAe,EAAE,CAAC,CAAC;AAE7E,SAAgB,sBAAsB,CAAC,KAA8C,EAAE,OAAoD;IACzI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;AACxM,CAAC;AAED,iFAAiF;AAC1E,KAAK,UAAU,iBAAiB,CAAC,KAAkB;IACxD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,0BAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClI,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,MAAM,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wEAAwE;AACxE,SAAgB,kBAAkB,CAAC,OAAgB;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QACjE,MAAM,KAAK,GAAG,+DAA+D,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,OAAO,GAAG,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAAC,KAAkB,EAAE,CAAM,EAAE,UAAwC,EAAE;IACtH,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;IACvB,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,WAAW,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,EAAC,MAAM,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM;QAAE,MAAM,IAAI,0BAAkB,CAAC,8BAA8B,CAAC,CAAC;IACtZ,MAAM,SAAS,GAAG,MAAM,IAAA,mBAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACrH,MAAM,EAAE,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,KAAK,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,EAAE,CAAC,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,IAAA,cAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,IAAA,cAAO,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,cAAc,CAAC,EAAE,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5U,IAAI,CAAC;YAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,IAAA,mBAAQ,EAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,qCAAqC,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC/B,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,0BAAkB,CAAC,6BAA6B,CAAC,CAAC;QAChI,MAAM,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,WAAW,KAAK,YAAY,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,cAAc,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAChG,0FAA0F;QAC1F,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,KAAK;YAAE,SAAS;QAC1D,MAAM,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC;QAClE,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,0BAAkB,CAAC,6BAA6B,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,cAAc;QAAE,MAAM,IAAI,0BAAkB,CAAC,8BAA8B,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,aAAa,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAiB,EAAE,EAAE,KAAK,GAAG,EAAE;IAC9F,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CAAC,GAAG,IAAA,qBAAK,EAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAA,aAAQ,GAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAC,MAAM,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpL,MAAM,MAAM,GAAa,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAAC,CAAC;;YAAM,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7K,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;CAa5B,CAAC;AAEK,KAAK,UAAU,uBAAuB,CAAC,KAAkB,EAAE,OAAuB;IACvF,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,GAAG,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,0BAAkB,CAAC,2BAA2B,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,gGAAgG;IAChG,MAAM,GAAG,GAAG,oBAAoB,GAAG,IAAA,mBAAU,GAAE,CAAC;IAChD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,GAAG,IAAA,eAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpH,MAAM,MAAM,GAAG,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC;IAChH,MAAM,aAAa,CAAC,KAAK,CAAC,SAAU,EAAE,0SAA0S,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACxY,IAAI,OAAO,CAAC,iBAAiB;QAAE,MAAM,aAAa,CAAC,KAAK,CAAC,SAAU,EAAE,yEAAyE,EAAE,CAAC,GAAG,GAAG,iBAAiB,EAAE,iCAAe,CAAC,CAAC,CAAC;IAC5L,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,KAAK,GAA2B,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,EAAiB,EAAE;YAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,IAAA,kBAAO,EAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,IAAA,gBAAK,EAAC,CAAC,CAAC,CAAC;gBACrF,IAAI,IAAI,CAAC,cAAc,EAAE;oBAAE,MAAM,IAAI,0BAAkB,CAAC,+BAA+B,CAAC,CAAC;gBACzF,IAAI,IAAI,CAAC,WAAW,EAAE;oBAAE,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;qBACrC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;oBAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;oBAAC,IAAI,KAAK,GAAG,EAAE,GAAC,IAAI,GAAC,IAAI;wBAAE,MAAM,IAAI,0BAAkB,CAAC,2BAA2B,CAAC,CAAC;oBAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAA,mBAAQ,EAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;YACzL,CAAC;QACH,CAAC,CAAC;QACF,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACpC,MAAM,aAAa,CAAC,KAAK,CAAC,SAAU,EAAE,0UAA0U,EAAE,CAAC,GAAG,GAAG,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACpa,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AACvD,CAAC;AAED;oEACoE;AAC7D,KAAK,UAAU,mBAAmB,CAAC,KAAkB,EAAE,KAAa,EAAE,OAAe,EAAE,MAAc,EAAE,SAAkB;IAC9H,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,0BAAkB,CAAC,sBAAsB,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,SAAU,EAAE,ycAAyc,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3gB,MAAM,SAAS,GAAG,IAAA,WAAI,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,IAAA,gBAAK,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,IAAA,WAAI,EAAC,SAAS,EAAE,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAA,eAAQ,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpK,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AACnF,CAAC;AAEY,QAAA,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;CAM7C,CAAC;AACK,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,SAAiB;IAC7E,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAA;;;;;;;;CAQ5C,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC"}

package/dist/orchestration/control-delivery.d.ts

@@ -0,0 +1,5 @@
+import type { AgentConfig } from '../types';
+import type { ControlMenu } from './channel-controls';
+/** Provider adapters keep menus native; LINE replaces quick replies instead of editing old messages. */
+export declare function sendControlMenu(agent: AgentConfig, channel: string, chatId: string, menu: ControlMenu, meta: Record<string, string>, request?: typeof fetch): Promise<void>;
+//# sourceMappingURL=control-delivery.d.ts.map