@agentdocumentformat/cli 0.7.2 → 0.7.3

package/dist/chunks/{adf-schema-JRU2BTOG.mjs → adf-schema-US4NFHMR.mjs}

@@ -29,10 +29,10 @@ import {
   TriggersConfigV3Schema,
   UmbilicalFilterSchema,
   WsConnectionConfigSchema
-} from "./chunk-HWLWPXQ7.mjs";
+} from "./chunk-HDBPBORT.mjs";
 import "./chunk-ZJKXHM4Q.mjs";
 import "./chunk-RIX34QHC.mjs";
-import "./chunk-WFQUVXML.mjs";
+import "./chunk-CD3ATSXE.mjs";
 import "./chunk-M2RX3S2T.mjs";
 export {
   AdapterInstanceConfigSchema,

package/dist/chunks/{chunk-4MQPTCXY.mjs → chunk-2WSQ7V6K.mjs}

@@ -7,7 +7,7 @@ const __dirname = __adfDirname(__filename);
 import {
   AGENT_DEFAULTS,
   DEFAULT_TOOLS
-} from "./chunk-WFQUVXML.mjs";
+} from "./chunk-CD3ATSXE.mjs";
 import {
   __export
 } from "./chunk-M2RX3S2T.mjs";

package/dist/chunks/{chunk-X34PDRUH.mjs → chunk-3UCKYP7P.mjs}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-SGUTYISF.mjs";
 import {
   daemon_url_exports
-} from "./chunk-G426FACA.mjs";
+} from "./chunk-GKKCMXIZ.mjs";
 
 // src/main/tui/api/sse.ts
 var EventStream = class {
@@ -25,6 +25,10 @@ var EventStream = class {
   attempt = 0;
   hasOpened = !1;
   lastCursor;
+  /** Daemon run the cursor belongs to (`stream.hello`). */
+  epoch = null;
+  /** This connection resumes a dropped one and has not reported how yet. */
+  resumePending = !1;
   seen = /* @__PURE__ */ new Set();
   seenOrder = [];
   idleTimer = null;
@@ -64,7 +68,7 @@ var EventStream = class {
   }
   buildUrl() {
     let params = new URLSearchParams();
-    this.options.agentId && params.set("agentId", this.options.agentId), this.lastCursor >= 0 ? params.set("since", String(this.lastCursor)) : this.options.replay || params.set("since", String(Number.MAX_SAFE_INTEGER));
+    this.options.agentId && params.set("agentId", this.options.agentId), this.lastCursor >= 0 ? (params.set("since", String(this.lastCursor)), this.epoch && params.set("epoch", this.epoch)) : this.options.replay || params.set("since", String(Number.MAX_SAFE_INTEGER));
     let qs = params.toString();
     return `${this.options.baseUrl}/events${qs ? `?${qs}` : ""}`;
   }
@@ -83,7 +87,7 @@ var EventStream = class {
       });
       if (!response.ok || !response.body)
         throw new Error(`HTTP ${response.status} ${response.statusText}`.trim());
-      this.attempt = 0, this.hasOpened = !0, this.setState({ state: "open", attempt: 0, resumed }), this.armIdle(), await this.read(response.body, controller), failure = "stream ended";
+      this.attempt = 0, this.resumePending = resumed, this.hasOpened = !0, this.setState({ state: "open", attempt: 0, resumed }), this.armIdle(), await this.read(response.body, controller), failure = "stream ended";
     } catch (err) {
       failure = controller.signal.aborted && this.closed ? void 0 : errorMessage(err);
     } finally {
@@ -136,14 +140,19 @@ var EventStream = class {
     if (controller.signal.aborted) throw controller.signal.reason instanceof Error ? controller.signal.reason : new Error("aborted");
   }
   handleBlock(block) {
-    let data = [];
+    let data = [], name = "";
     for (let line of block.split(`
 `)) {
       if (!line || line.startsWith(":")) continue;
       let colon = line.indexOf(":"), field = colon < 0 ? line : line.slice(0, colon), value = colon < 0 ? "" : line.slice(colon + 1).replace(/^ /, "");
-      field === "data" && data.push(value);
+      field === "data" ? data.push(value) : field === "event" && (name = value);
     }
     if (data.length === 0) return;
+    if (name === "stream.hello" || name === "stream.gap") {
+      this.handleControl(name, data.join(`
+`));
+      return;
+    }
     let frame;
     try {
       frame = JSON.parse(data.join(`
@@ -163,6 +172,41 @@ var EventStream = class {
     } catch {
     }
   }
+  /**
+   * `stream.hello` carries enough to judge the resume on its own (so a quiet
+   * stream reports at once); `stream.gap` confirms a loss the hello missed.
+   */
+  handleControl(name, raw) {
+    let data;
+    try {
+      data = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    let epoch = typeof data.epoch == "string" ? data.epoch : null;
+    if (!epoch) return;
+    let previous = this.epoch;
+    if (this.epoch = epoch, name === "stream.hello") {
+      if (previous && previous !== epoch) {
+        this.forgetCursorKeys(), this.lastCursor = -1, this.reportResume({ exact: !1, reason: "epoch_changed", epoch });
+        return;
+      }
+      let oldest = typeof data.oldestCursor == "number" ? data.oldestCursor : null, latest = typeof data.latestCursor == "number" ? data.latestCursor : 0, since = this.lastCursor, lost = since >= 0 && since < latest && (oldest === null || since < oldest - 1);
+      this.reportResume(lost ? { exact: !1, reason: "evicted", epoch } : { exact: !0, epoch });
+      return;
+    }
+    let reason = data.reason === "epoch_changed" ? "epoch_changed" : "evicted";
+    reason === "epoch_changed" && (this.forgetCursorKeys(), this.lastCursor = -1), this.reportResume({ exact: !1, reason, epoch });
+  }
+  reportResume(info) {
+    if (this.resumePending) {
+      this.resumePending = !1;
+      try {
+        this.options.onResume?.(info);
+      } catch {
+      }
+    }
+  }
   remember(key) {
     this.seen.add(key), this.seenOrder.push(key);
     let cap = this.options.dedupeWindow ?? 5e3;
@@ -209,7 +253,7 @@ function normalizeRuntime(raw) {
 }
 
 // src/main/tui/api/client.ts
-var { localDaemonToken, resolveDaemonToken, resolveDaemonUrl } = cjs(daemon_url_exports), enc = encodeURIComponent;
+var { localDaemonToken, localProofHeaders, resolveDaemonToken, resolveDaemonUrl } = cjs(daemon_url_exports), enc = encodeURIComponent;
 function sameOrigin(a, b) {
   try {
     return new URL(a).origin === new URL(b).origin;
@@ -270,7 +314,11 @@ var DaemonClient = class _DaemonClient {
     try {
       response = await this.fetchImpl(this.url(path, options.query), {
         method,
-        headers: this.headers(options.body !== void 0 ? { "Content-Type": "application/json" } : {}),
+        headers: this.headers({
+          ...options.body !== void 0 ? { "Content-Type": "application/json" } : {},
+          // Proxy-mode daemons (ADF_DAEMON_BEHIND_PROXY) need this machine's proof on local-only routes.
+          ...this.options.localToken ? localProofHeaders(this.baseUrl, path, this.options.env ?? process.env) : {}
+        }),
         body: options.body !== void 0 ? JSON.stringify(options.body) : void 0,
         signal: controller.signal
       });

package/dist/chunks/{chunk-WFQUVXML.mjs → chunk-CD3ATSXE.mjs}

@@ -33,7 +33,11 @@ var CODE_EXECUTION_DEFAULTS = {
 }, COMPUTE_DEFAULTS = {
   enabled: !1
 };
-var START_IN_STATES = ["active", "idle", "hibernate"], DEFAULT_NEW_LOOP_TOOLS = ["loop_send", "loop_list", "sys_set_state"], LOOP_PROHIBITED_TOOLS = ["sys_update_config", "loop_manage", "sys_create_adf"];
+var START_IN_STATES = ["active", "idle", "hibernate"];
+function resolveStartInState(config) {
+  return config.start_in_state ?? "active";
+}
+var DEFAULT_NEW_LOOP_TOOLS = ["loop_send", "loop_list", "sys_set_state"], LOOP_PROHIBITED_TOOLS = ["sys_update_config", "loop_manage", "sys_create_adf"];
 var META_PROTECTION_LEVELS = ["none", "readonly", "increment"], FILE_PROTECTION_LEVELS = ["read_only", "no_delete", "none"];
 var DEFAULT_TOOLS = [
   { name: "fs_read", enabled: !0, visible: !0 },
@@ -282,6 +286,7 @@ export {
   RECOVERY_DEFAULTS,
   CODE_EXECUTION_DEFAULTS,
   START_IN_STATES,
+  resolveStartInState,
   DEFAULT_NEW_LOOP_TOOLS,
   LOOP_PROHIBITED_TOOLS,
   META_PROTECTION_LEVELS,

package/dist/chunks/chunk-GKKCMXIZ.mjs

@@ -0,0 +1,94 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  readLocalProof
+} from "./chunk-UEZR2CNS.mjs";
+import {
+  daemonSettingsDir,
+  readDaemonToken
+} from "./chunk-IHDDCZBS.mjs";
+import {
+  __export
+} from "./chunk-M2RX3S2T.mjs";
+
+// src/main/cli/daemon-url.ts
+var daemon_url_exports = {};
+__export(daemon_url_exports, {
+  DEFAULT_DAEMON_PORT: () => DEFAULT_DAEMON_PORT,
+  DEFAULT_DAEMON_URL: () => DEFAULT_DAEMON_URL,
+  isLocalDaemonUrl: () => isLocalDaemonUrl,
+  isLocalOnlyRoute: () => isLocalOnlyRoute,
+  localDaemonToken: () => localDaemonToken,
+  localProofHeaders: () => localProofHeaders,
+  loopbackPort: () => loopbackPort,
+  resolveDaemonToken: () => resolveDaemonToken,
+  resolveDaemonUrl: () => resolveDaemonUrl,
+  tunnelTokenHint: () => tunnelTokenHint
+});
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+var DEFAULT_DAEMON_PORT = 7385, DEFAULT_DAEMON_URL = `http://127.0.0.1:${DEFAULT_DAEMON_PORT}`;
+function resolveDaemonUrl(explicit, env = process.env) {
+  return (explicit ?? env.ADF_DAEMON_URL ?? DEFAULT_DAEMON_URL).replace(/\/+$/, "");
+}
+function loopbackPort(url) {
+  try {
+    let parsed = new URL(url), host = parsed.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+    return host === "localhost" || host === "::1" || /^127\./.test(host) ? parsed.port ? Number(parsed.port) : parsed.protocol === "https:" ? 443 : 80 : null;
+  } catch {
+    return null;
+  }
+}
+function pidFileAlive(file) {
+  try {
+    let raw = readFileSync(file, "utf-8").trim(), pid = raw.startsWith("{") ? JSON.parse(raw).pid : Number.parseInt(raw, 10);
+    if (typeof pid != "number" || !Number.isFinite(pid) || pid <= 0) return !1;
+    try {
+      return process.kill(pid, 0), !0;
+    } catch (err) {
+      return err?.code === "EPERM";
+    }
+  } catch {
+    return !1;
+  }
+}
+function isLocalDaemonUrl(url, env = process.env) {
+  let port = loopbackPort(url);
+  return port === null ? !1 : port === DEFAULT_DAEMON_PORT || port === Number(env.ADF_DAEMON_PORT) ? !0 : pidFileAlive(join(daemonSettingsDir(env), `adf-daemon-${port}.pid`));
+}
+function localDaemonToken(url, env = process.env) {
+  if (isLocalDaemonUrl(url, env))
+    return readDaemonToken(daemonSettingsDir(env)) ?? void 0;
+}
+function tunnelTokenHint(url, explicit, env = process.env) {
+  return explicit || env.ADF_DAEMON_TOKEN || loopbackPort(url) === null || isLocalDaemonUrl(url, env) ? null : `${url} is not this machine's daemon port (${Number(env.ADF_DAEMON_PORT) || DEFAULT_DAEMON_PORT}; e.g. an SSH tunnel), so the local token is not sent there. Pass --token or set ADF_DAEMON_TOKEN to the remote daemon's token (print it on that host with: adf daemon token).`;
+}
+function resolveDaemonToken(explicit, env = process.env, url) {
+  let token = explicit ?? env.ADF_DAEMON_TOKEN;
+  return token || (url ? localDaemonToken(url, env) : void 0);
+}
+function isLocalOnlyRoute(path) {
+  let p = path.split("?")[0];
+  return p === "/daemon/shutdown" || /^\/identity\/(create|restore|unlock|lock|confirm-backup)$/.test(p);
+}
+function localProofHeaders(url, path, env = process.env) {
+  if (!isLocalOnlyRoute(path) || !isLocalDaemonUrl(url, env)) return {};
+  let proof = readLocalProof(daemonSettingsDir(env), loopbackPort(url) ?? DEFAULT_DAEMON_PORT);
+  return proof ? { "X-ADF-Local-Proof": proof } : {};
+}
+
+export {
+  DEFAULT_DAEMON_PORT,
+  DEFAULT_DAEMON_URL,
+  resolveDaemonUrl,
+  loopbackPort,
+  isLocalDaemonUrl,
+  tunnelTokenHint,
+  resolveDaemonToken,
+  localProofHeaders,
+  daemon_url_exports
+};

package/dist/chunks/{chunk-HWLWPXQ7.mjs → chunk-HDBPBORT.mjs}

@@ -13,7 +13,7 @@ import {
   MESSAGING_MODES,
   RESERVED_AGENT_PATH_SEGMENTS,
   START_IN_STATES
-} from "./chunk-WFQUVXML.mjs";
+} from "./chunk-CD3ATSXE.mjs";
 
 // src/shared/types/umbilical-events.ts
 var UMBILICAL_EVENT_TYPES = [
@@ -30,6 +30,11 @@ var UMBILICAL_EVENT_TYPES = [
   "agent.credentials.unlocked",
   // --- turn --------------------------------------------------------------
   "turn.completed",
+  // --- owner chats queued behind a running turn ---------------------------
+  // delivered → put into a running turn (their ids complete with it);
+  // discarded → dropped undelivered by stop/unload/off (never silently).
+  "chat.delivered",
+  "chat.discarded",
   // --- tools -------------------------------------------------------------
   "tool.started",
   "tool.completed",
@@ -491,7 +496,7 @@ var StreamBindEndpointSchema = external_exports.union([
     }).optional(),
     fetch_middleware: external_exports.array(MiddlewareRefSchema).optional(),
     require_middleware_authorization: external_exports.boolean().default(!0),
-    allow_local_fetch: external_exports.boolean().optional().describe("Opt out of the sys_fetch SSRF guard. When false/absent, sys_fetch refuses loopback, link-local and RFC1918/CGNAT destinations (including after DNS resolution and across redirects)."),
+    allow_local_fetch: external_exports.boolean().optional().describe("Allow sys_fetch/ws_connect to reach private (RFC1918) and CGNAT destinations. When false/absent those are refused, including after DNS resolution and across redirects. Loopback is allowed either way, except the local daemon control API; link-local and cloud-metadata addresses are always refused."),
     table_protections: external_exports.record(external_exports.enum(["none", "append_only", "authorized"])).optional()
   }),
   limits: external_exports.object({

package/dist/chunks/{chunk-3M4ZPOA3.mjs → chunk-J74STFKE.mjs}

@@ -268,7 +268,20 @@ function resultText(value) {
   }
   return value === void 0 ? void 0 : JSON.stringify(value);
 }
+function markOwnTurns(items, event) {
+  let p = event.payload ?? {}, ids = (value) => Array.isArray(value) ? value.filter((id) => typeof id == "string") : [], terminal = event.event_type === "turn.completed" || event.event_type === "agent.error", absorbed = terminal ? ids(p.absorbed_turn_ids) : [], delivered = event.event_type === "chat.delivered" ? ids(p.turn_ids) : [], discarded = event.event_type === "chat.discarded" ? ids(p.turn_ids) : [], cutOff = event.event_type === "chat.discarded" ? ids(p.unanswered_turn_ids) : [];
+  if (!event.turn_id && absorbed.length + delivered.length + discarded.length + cutOff.length === 0) return items;
+  let answeredNow = event.event_type === "turn.completed" && p.interrupted !== !0, next = null;
+  for (let i = items.length - 1; i >= 0; i--) {
+    let item = items[i];
+    if (item.kind !== "user" || !item.turnId || item.answered) continue;
+    let patch = null;
+    absorbed.includes(item.turnId) ? patch = { taken: !0, answered: !0, pending: !1 } : discarded.includes(item.turnId) ? patch = { taken: !0, pending: !1, discarded: !0 } : cutOff.includes(item.turnId) ? patch = { taken: !0, pending: !1 } : delivered.includes(item.turnId) ? patch = item.taken ? null : { taken: !0 } : item.turnId === event.turn_id && (terminal ? patch = answeredNow ? { taken: !0, answered: !0, pending: !1 } : event.event_type === "agent.error" ? { taken: !0, pending: !1 } : null : item.taken || (patch = { taken: !0 })), patch && (next ??= items.slice(), next[i] = { ...item, ...patch });
+  }
+  return next ?? items;
+}
 function applyEventToItems(items, event) {
+  items = markOwnTurns(items, event);
   let p = event.payload ?? {}, at = event.timestamp || Date.now();
   switch (event.event_type) {
     case "turn.delta": {
@@ -388,6 +401,10 @@ function noticeFor(event) {
       return { text: `Model call failed${p.model ? ` (${String(p.model)})` : ""}`, level: "warn" };
     case "error.recovery_suppressed":
       return { text: "Error recovery suppressed \u2014 triggers are being dropped", level: "warn" };
+    case "chat.discarded": {
+      let count = typeof p.count == "number" ? p.count : 0;
+      return count === 0 ? null : { text: `${count} queued message${count === 1 ? "" : "s"} discarded undelivered (${p.reason === "off" ? "agent turned off" : "agent stopped"})`, level: "warn" };
+    }
     default:
       return null;
   }
@@ -669,7 +686,9 @@ var TRANSCRIPT_EVENTS = /* @__PURE__ */ new Set([
   "provider.retry_scheduled",
   "provider.retry_cancelled",
   "llm.failed",
-  "error.recovery_suppressed"
+  "error.recovery_suppressed",
+  "chat.delivered",
+  "chat.discarded"
 ]);
 function applyEvent(state, event) {
   let agentId = event.agent_id ?? null, loop = eventLoop(event), next = {
@@ -873,9 +892,9 @@ function serverText(server) {
 }
 
 // src/main/tui/state/store.tsx
-var import_jsx_runtime = __toESM(require_jsx_runtime(), 1), REFRESH_DEBOUNCE_MS = 120, WEB_EVENT_DEBOUNCE_MS = 900, WEB_POLL_MS = 2e4, TRACKED_POLL_MS = 15e3, FOLDER_OVERLAY = "fleet.track", PROMPT_PREFILL_KEY = "shell.prompt.prefill", CHAT_VIEW_ID = "chat";
+var import_jsx_runtime = __toESM(require_jsx_runtime(), 1), REFRESH_DEBOUNCE_MS = 120, WEB_EVENT_DEBOUNCE_MS = 900, RESUME_VERDICT_MS = 1500, WEB_POLL_MS = 2e4, TRACKED_POLL_MS = 15e3, FOLDER_OVERLAY = "fleet.track", PROMPT_PREFILL_KEY = "shell.prompt.prefill", CHAT_VIEW_ID = "chat";
 function createTuiStore(options) {
-  let client = options.client, pageSize = options.pageSize ?? 100, state = initialState(client.baseUrl, options.initialView), listeners = /* @__PURE__ */ new Set(), confirmResolvers = /* @__PURE__ */ new Map(), toastTimers = /* @__PURE__ */ new Map(), debounced = /* @__PURE__ */ new Map(), stream = null, webTick = null, trackedTick = null, stopped = !1, needsResync = !1, getState = () => state, dispatch = (action) => {
+  let client = options.client, pageSize = options.pageSize ?? 100, state = initialState(client.baseUrl, options.initialView), listeners = /* @__PURE__ */ new Set(), confirmResolvers = /* @__PURE__ */ new Map(), toastTimers = /* @__PURE__ */ new Map(), debounced = /* @__PURE__ */ new Map(), stream = null, webTick = null, trackedTick = null, stopped = !1, needsResync = !1, resumeFallback = null, getState = () => state, dispatch = (action) => {
     let next = tuiReducer(state, action);
     if (next !== state) {
       state = next;
@@ -1138,7 +1157,8 @@ function createTuiStore(options) {
       let loop = target.loop ?? selectedLoopOf(agentId), key = transcriptKey(agentId, loop), item = { id: localId(), at: Date.now(), local: !0, kind: "user", text: trimmed, origin: "owner", pending: !0 };
       dispatch({ type: "transcript/append", key, item });
       try {
-        return await client.chat(agentId, trimmed, loop), dispatch({ type: "transcript/update", key, id: item.id, patch: { accepted: !0 } }), !0;
+        let accepted = await client.chat(agentId, trimmed, loop);
+        return dispatch({ type: "transcript/update", key, id: item.id, patch: { accepted: !0, ...accepted?.turnId ? { turnId: accepted.turnId } : {} } }), !0;
       } catch (err) {
         return dispatch({ type: "transcript/update", key, id: item.id, patch: { pending: !1 } }), dispatch({ type: "transcript/append", key, item: { id: localId(), at: Date.now(), local: !0, kind: "error", text: `Not sent: ${describe(err)}` } }), !1;
       }
@@ -1369,7 +1389,16 @@ function createTuiStore(options) {
     options.live !== !1 && (stream = client.events({
       onEvent: onFrame,
       onState: (info) => {
-        dispatch({ type: "connection", info }), info.state === "reconnecting" && (needsResync = !0, info.error && dispatch({ type: "daemon/reachable", reachable: !1 })), info.state === "open" && (info.resumed || needsResync) && (needsResync = !1, toast(info.resumed ? "Reconnected to daemon \u2014 resyncing" : "Connected to daemon", "info", 2500), resync());
+        dispatch({ type: "connection", info }), info.state === "reconnecting" && (needsResync = !0, info.error && dispatch({ type: "daemon/reachable", reachable: !1 })), info.state === "open" && info.resumed ? (needsResync = !1, resumeFallback && clearTimeout(resumeFallback), resumeFallback = setTimeout(() => {
+          resumeFallback = null, toast("Reconnected to daemon \u2014 resyncing", "info", 2500), resync();
+        }, RESUME_VERDICT_MS)) : info.state === "open" && needsResync && (needsResync = !1, toast("Connected to daemon", "info", 2500), resync());
+      },
+      onResume: (info) => {
+        if (resumeFallback && (clearTimeout(resumeFallback), resumeFallback = null), info.exact) {
+          toast("Reconnected to daemon \u2014 no events missed", "info", 2500), Promise.all([actions.refreshIdentity(), actions.refreshAuth(), actions.refreshAgents(), actions.refreshWeb()]);
+          return;
+        }
+        toast(info.reason === "epoch_changed" ? "The daemon restarted \u2014 reloading" : "Events were missed while disconnected \u2014 reloading", "warn", 4e3), resync();
       }
     }).start(), webTick && clearInterval(webTick), webTick = setInterval(() => {
       stopped || actions.refreshWeb();
@@ -1385,7 +1414,7 @@ function createTuiStore(options) {
     }
   }
   function stop() {
-    stopped = !0, stream?.close(), stream = null, webTick && (clearInterval(webTick), webTick = null), trackedTick && (clearInterval(trackedTick), trackedTick = null), pendingFrames = [];
+    stopped = !0, stream?.close(), stream = null, resumeFallback && (clearTimeout(resumeFallback), resumeFallback = null), webTick && (clearInterval(webTick), webTick = null), trackedTick && (clearInterval(trackedTick), trackedTick = null), pendingFrames = [];
     for (let timer of toastTimers.values()) clearTimeout(timer);
     for (let timer of debounced.values()) clearTimeout(timer);
     toastTimers.clear(), debounced.clear();

package/dist/chunks/{chunk-TMT32MXT.mjs → chunk-TPRZQ7Z4.mjs}

@@ -21,7 +21,7 @@ import {
   getCommand,
   notifyToolCallObservers,
   shellReadFile
-} from "./chunk-7MTRVW2U.mjs";
+} from "./chunk-ZROSGV65.mjs";
 
 // src/main/tools/shell/executor/pipeline-executor.ts
 function vfsPath(p) {

package/dist/chunks/chunk-UEZR2CNS.mjs

@@ -0,0 +1,65 @@
+import { createRequire as __adfCreateRequire } from 'node:module';
+import { fileURLToPath as __adfFileURLToPath } from 'node:url';
+import { dirname as __adfDirname } from 'node:path';
+const require = __adfCreateRequire(import.meta.url);
+const __filename = __adfFileURLToPath(import.meta.url);
+const __dirname = __adfDirname(__filename);
+import {
+  tokensEqual
+} from "./chunk-IHDDCZBS.mjs";
+
+// src/main/daemon/local-access.ts
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+var LOCAL_PROOF_FILENAME = "daemon-local-proof", LOCAL_PROOF_HEADER = "x-adf-local-proof", BEHIND_PROXY_ENV = "ADF_DAEMON_BEHIND_PROXY", PROXY_HEADERS = ["forwarded", "x-forwarded-for", "x-forwarded-host", "x-forwarded-proto", "x-real-ip", "via"];
+function isLoopbackAddress(address) {
+  return address ? address === "::1" || address.startsWith("127.") || address.startsWith("::ffff:127.") : !1;
+}
+function hasProxyHeaders(headers) {
+  return PROXY_HEADERS.some((name) => headers[name] !== void 0);
+}
+function behindProxyFromEnv(env = process.env) {
+  return /^(1|true|yes|on)$/i.test((env[BEHIND_PROXY_ENV] ?? "").trim());
+}
+var DEFAULT_PORT = 7385;
+function localProofPath(settingsDir, port = DEFAULT_PORT) {
+  return join(settingsDir, port === DEFAULT_PORT ? LOCAL_PROOF_FILENAME : `${LOCAL_PROOF_FILENAME}-${port}`);
+}
+function mintLocalProof(settingsDir, port = DEFAULT_PORT) {
+  mkdirSync(settingsDir, { recursive: !0 });
+  let proof = randomBytes(32).toString("base64url"), path = localProofPath(settingsDir, port);
+  writeFileSync(path, `${proof}
+`, { mode: 384 });
+  try {
+    chmodSync(path, 384);
+  } catch {
+  }
+  return { proof, path };
+}
+function readLocalProof(settingsDir, port = DEFAULT_PORT) {
+  try {
+    let proof = readFileSync(localProofPath(settingsDir, port), "utf-8").trim();
+    return /^[A-Za-z0-9_-]{32,}$/.test(proof) ? proof : null;
+  } catch {
+    return null;
+  }
+}
+function localAccessRefusal(request, opts) {
+  if (!isLoopbackAddress(request.remoteAddress)) return "the request did not come from this machine";
+  if (hasProxyHeaders(request.headers)) return "the request came through a proxy (forwarded headers)";
+  if (opts.behindProxy) {
+    let raw = request.headers[LOCAL_PROOF_HEADER], presented = (Array.isArray(raw) ? raw[0] : raw)?.trim();
+    if (!presented || !opts.localProof || !tokensEqual(presented, opts.localProof))
+      return `the daemon runs behind a proxy (${BEHIND_PROXY_ENV}) and the request lacks this machine's local proof`;
+  }
+  return null;
+}
+
+export {
+  BEHIND_PROXY_ENV,
+  behindProxyFromEnv,
+  mintLocalProof,
+  readLocalProof,
+  localAccessRefusal
+};

package/dist/chunks/{chunk-7MTRVW2U.mjs → chunk-ZROSGV65.mjs}

@@ -7,7 +7,7 @@ const __dirname = __adfDirname(__filename);
 import {
   META_PROTECTION_LEVELS,
   SETTABLE_STATES
-} from "./chunk-WFQUVXML.mjs";
+} from "./chunk-CD3ATSXE.mjs";
 import {
   __esm
 } from "./chunk-M2RX3S2T.mjs";
@@ -15,12 +15,19 @@ import {
 // src/main/runtime/execution-context.ts
 import { AsyncLocalStorage } from "node:async_hooks";
 function withSource(source, agentIdOrFn, maybeFn) {
-  let agentId = typeof agentIdOrFn == "function" ? void 0 : agentIdOrFn, fn = typeof agentIdOrFn == "function" ? agentIdOrFn : maybeFn, parent = store.getStore(), loop = parent?.loop && (agentId === void 0 || agentId === parent.agentId) ? parent.loop : void 0;
-  return store.run(loop ? { source, agentId, loop } : { source, agentId }, fn);
+  let agentId = typeof agentIdOrFn == "function" ? void 0 : agentIdOrFn, fn = typeof agentIdOrFn == "function" ? agentIdOrFn : maybeFn, parent = store.getStore(), sameAgent = agentId === void 0 || agentId === parent?.agentId, loop = parent?.loop && sameAgent ? parent.loop : void 0, turnId = parent?.turnId && sameAgent ? parent.turnId : void 0;
+  return store.run({ source, agentId, ...loop ? { loop } : {}, ...turnId ? { turnId } : {} }, fn);
 }
 function withLoop(loop, fn) {
   let parent = store.getStore();
-  return store.run({ source: parent?.source ?? "system:unknown", agentId: parent?.agentId, loop }, fn);
+  return store.run({ ...parent, source: parent?.source ?? "system:unknown", agentId: parent?.agentId, loop }, fn);
+}
+function withTurn(turnId, fn) {
+  let parent = store.getStore();
+  return store.run({ ...parent, source: parent?.source ?? "system:unknown", turnId }, fn);
+}
+function currentTurnId() {
+  return store.getStore()?.turnId;
 }
 function currentLoop() {
   return store.getStore()?.loop;
@@ -1455,7 +1462,7 @@ var xargsHandler = {
       batchSize = n;
     }
     if (!text) return ok("");
-    let { parse } = await import("./parser-JVY2PWSM.mjs"), { executeNode } = await import("./pipeline-executor-BHBSJX2K.mjs"), subCtx = {
+    let { parse } = await import("./parser-JVY2PWSM.mjs"), { executeNode } = await import("./pipeline-executor-U6IMCCP3.mjs"), subCtx = {
       workspace: ctx.workspace,
       toolRegistry: ctx.toolRegistry,
       config: ctx.config,
@@ -2275,7 +2282,7 @@ async function executeShellScript(path, ctx) {
     authorized = ctx.workspace.isFileAuthorized(path);
   } catch {
   }
-  let gate = { ...ctx.gate ?? {}, authorized }, base = baseRegistry(ctx.toolRegistry), toolRegistry = gate.authorized ? authorizedRegistry(base) : base, { parse } = await import("./parser-JVY2PWSM.mjs"), { executeNode, MAX_SHELL_DEPTH } = await import("./pipeline-executor-BHBSJX2K.mjs"), depth = (ctx.depth ?? 0) + 1;
+  let gate = { ...ctx.gate ?? {}, authorized }, base = baseRegistry(ctx.toolRegistry), toolRegistry = gate.authorized ? authorizedRegistry(base) : base, { parse } = await import("./parser-JVY2PWSM.mjs"), { executeNode, MAX_SHELL_DEPTH } = await import("./pipeline-executor-U6IMCCP3.mjs"), depth = (ctx.depth ?? 0) + 1;
   if (depth > MAX_SHELL_DEPTH)
     return err(`./${path}: script nesting too deep (${MAX_SHELL_DEPTH}) \u2014 possible infinite recursion`);
   try {
@@ -3016,7 +3023,7 @@ var CATEGORY_ORDER = [
   resolvedTools: [],
   async execute(ctx) {
     if (ctx.args.length > 0) {
-      let { getCommand: getCommand2 } = await import("./commands-DTEKM4ZL.mjs"), handler = getCommand2(ctx.args[0]);
+      let { getCommand: getCommand2 } = await import("./commands-XNJMCD5L.mjs"), handler = getCommand2(ctx.args[0]);
       return handler ? ok(handler.helpText) : ok(`Unknown command: ${ctx.args[0]}`);
     }
     let commands = getAllCommands(), grouped = /* @__PURE__ */ new Map();
@@ -3076,6 +3083,8 @@ function hasCommand(name) {
 export {
   withSource,
   withLoop,
+  withTurn,
+  currentTurnId,
   currentLoop,
   currentAgentId,
   currentSourceOrUnknown,