@alashi/cli 0.15.0 → 0.16.0

package/assets/v1/chat.js

@@ -255,9 +255,21 @@
       try {
         const res = await fetch(this._hostApi(`/chat/${encodeURIComponent(id)}/history`));
         if (!res.ok) throw new Error(`HTTP ${res.status}`);
-        const { messages } = await res.json();
+        const { messages, approvals = [] } = await res.json();
         bubble.remove();
-        for (const message of messages) this._appendMsg(message.text, message.role);
+        // Settled approvals interleave by time; transcript messages carry
+        // timestamps, approvals carry requestedAt.
+        const items = [
+          ...messages.map((m) => ({
+            at: m.timestamp ?? '',
+            render: () => this._appendMsg(m.text, m.role),
+          })),
+          ...approvals.map((a) => ({
+            at: a.requestedAt ?? '',
+            render: () => this._renderSettledApproval(a),
+          })),
+        ].sort((x, y) => (x.at < y.at ? -1 : x.at > y.at ? 1 : 0));
+        for (const item of items) item.render();
         this._status.textContent = '';
       } catch (err) {
         this._showError(bubble, false, `Failed to load history: ${String(err)}`);
@@ -421,12 +433,27 @@
       act('Approve', { behavior: 'allow' }, true);
       act('Approve for session', { behavior: 'allow', scope: 'session' });
       act('Always allow', { behavior: 'allow', scope: 'always' });
+      // Grants cover the rule that asked, not the whole tool: say so.
+      const always = actions.querySelectorAll('button')[2];
+      if (always) {
+        always.title = event.reason
+          ? `Always allow: ${event.reason}`
+          : `Always allow ${event.tool}`;
+      }
       act('Deny', { behavior: 'deny' });
       card.append(
         el('div', {
           className: 'approval-title',
           textContent: `Approval required: ${event.tool}`,
         }),
+        ...(event.reason
+          ? [
+              el('div', {
+                className: 'approval-reason',
+                textContent: `Asked by policy: ${event.reason}`,
+              }),
+            ]
+          : []),
         ...(preview ? [el('pre', {}, [el('code', { textContent: preview })])] : []),
         actions,
       );
@@ -472,6 +499,24 @@
       );
     }
 
+    /* A past decision rendered from the approval log (history reload):
+     * the same collapsed line a live approval_resolved produces. */
+    _renderSettledApproval(record) {
+      if (this._approvalCard(record.approvalId)) return;
+      const verdict = record.status === 'allowed' ? 'Approved' : 'Denied';
+      const why = record.status === 'timeout' ? ' · timeout' : '';
+      const card = el('div', { className: 'approval-card resolved' });
+      card.dataset.approvalId = record.approvalId;
+      card.dataset.tool = record.tool;
+      card.append(
+        el('div', {
+          className: 'approval-title',
+          textContent: `${verdict}: ${record.tool}${why}`,
+        }),
+      );
+      this._log.append(card);
+    }
+
     async _loadPendingApprovals() {
       if (!this.conversationId) return;
       const res = await fetch(
@@ -485,6 +530,8 @@
           approvalId: approval.approvalId,
           tool: approval.tool,
           input: approval.input,
+          ...(approval.ruleId ? { ruleId: approval.ruleId } : {}),
+          ...(approval.reason ? { reason: approval.reason } : {}),
         });
       }
     }

package/assets/v1/system.css

@@ -686,6 +686,11 @@ alashi-markdown {
   font-weight: 600;
   margin-bottom: 0.4rem;
 }
+.approval-card .approval-reason {
+  color: var(--muted);
+  font-size: 0.8rem;
+  margin: -0.2rem 0 0.4rem;
+}
 .approval-card pre {
   max-height: 10rem;
   overflow: auto;

package/dist/cli.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { A as UsageRecorder, E as budgetStatus, N as AuthService, O as setAppBudget, b as loadApp, c as installApp, d as updateApp, f as addRegistry, h as removeRegistry, i as resolveAppConfig, n as createServer, o as exportApp, s as importApp, t as Store, u as removeApp } from "./store-dipRcfKX.mjs";
+import { A as UsageRecorder, E as budgetStatus, N as AuthService, O as setAppBudget, b as loadApp, c as installApp, d as updateApp, f as addRegistry, h as removeRegistry, i as resolveAppConfig, n as createServer, o as exportApp, s as importApp, t as Store, u as removeApp } from "./store-DvLX0Kft.mjs";
 import { createRequire } from "node:module";
 import { APP_NAME_PATTERN, AppSdkError } from "@alashi/apps-sdk";
 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { AIProvider, AgentEvent, AppContext, AppDefinition, AppManifest, AppSdkError, AppUsageSummary, ApprovalDecision, ApprovalScope, ConfigObject, ModelTokenUsage, UsageDay, UsageMonth, UsageQuery, UsageTurn } from "@alashi/apps-sdk";
+import { AIProvider, AgentEvent, AppContext, AppDefinition, AppManifest, AppSdkError, AppUsageSummary, ApprovalDecision, ApprovalScope, CompiledPolicy, ConfigObject, ModelTokenUsage, PolicyDecision, PolicyRule, ToolGate, UsageDay, UsageMonth, UsageQuery, UsageTurn } from "@alashi/apps-sdk";
 import { Context, Hono, MiddlewareHandler } from "hono";
 //#region src/sources.d.ts
 type AppSourceSpec = {
@@ -104,6 +104,10 @@ interface ApprovalRecord {
   status: "pending" | "allowed" | "denied" | "timeout";
   decidedAt?: string;
   scope?: ApprovalScope;
+  /** The policy rule that asked, when the tool gateway decided. */
+  ruleId?: string;
+  /** Human-readable why, e.g. `Bash with command starting with "curl "`. */
+  reason?: string;
 }
 /** The persisted approval decision log for an app (capped, oldest dropped first). */
 interface ApprovalLog {
@@ -117,6 +121,29 @@ interface ApprovalLog {
 interface GrantsState {
   tools: string[];
 }
+/**
+ * The user's policy overrides for an app (`apps/<name>/policy.json`),
+ * evaluated before the manifest's rules. They may tighten anything but only
+ * loosen `ask` to `allow` — never past a manifest `deny` (see ToolGateway).
+ * "Always allow" decisions are appended here. Legacy `grants.json` tools
+ * still count, as tool-wide allow rules.
+ */
+interface UserPolicy {
+  rules: PolicyRule[];
+}
+/** One gated tool call, as a single line of `apps/<name>/tool-calls.jsonl`. */
+interface ToolCallRecord {
+  at: string;
+  tool: string;
+  toolUseId: string;
+  /** JSON of the input, truncated — enough to audit, bounded in size. */
+  inputPreview: string;
+  decision: PolicyDecision;
+  /** Which layer decided: a manifest rule, a user rule, a session grant, or the default. */
+  source: "manifest" | "user" | "session" | "default";
+  ruleId?: string;
+  reason: string;
+}
 interface Conversation {
   id: string;
   /** Provider session backing this conversation; set after the first turn. */
@@ -217,6 +244,8 @@ declare class Store {
   appJobStatePath(name: string): string;
   appApprovalLogPath(name: string): string;
   appGrantsPath(name: string): string;
+  appPolicyPath(name: string): string;
+  appToolCallsPath(name: string): string;
   appUsagePath(name: string): string;
   appTurnsPath(name: string): string;
   registryCachePath(name: string): string;
@@ -232,6 +261,17 @@ declare class Store {
   writeApprovalLog(name: string, log: ApprovalLog): Promise<void>;
   readGrants(name: string): Promise<GrantsState>;
   writeGrants(name: string, state: GrantsState): Promise<void>;
+  readUserPolicy(name: string): Promise<UserPolicy>;
+  writeUserPolicy(name: string, policy: UserPolicy): Promise<void>;
+  /** Appends one line to the app's tool-call audit ledger. */
+  appendToolCall(name: string, record: ToolCallRecord): Promise<void>;
+  /**
+   * Parseable lines of the tool-call ledger, oldest first. Like the turn
+   * ledger, a truncated or hand-mangled line costs only itself.
+   */
+  readToolCalls(name: string): Promise<ToolCallRecord[]>;
+  /** Replaces the tool-call ledger atomically (tmp file + rename), for trimming. */
+  writeToolCalls(name: string, records: ToolCallRecord[]): Promise<void>;
   readJobState(name: string): Promise<JobState>;
   writeJobState(name: string, state: JobState): Promise<void>;
   readUsageState(name: string): Promise<UsageState>;
@@ -802,6 +842,49 @@ declare class ApprovalRegistry {
   flush(): Promise<void>;
 }
 //#endregion
+//#region src/tool-gateway.d.ts
+/** What a session's gate needs to know; one per createSession. */
+interface GateSession {
+  gate: ToolGate;
+  /** Forget this session's grants (call when the session closes). */
+  end: () => void;
+}
+/**
+ * The host's tool gateway: every tool call any app session makes — chat,
+ * cron, app routes; built-in, MCP, subagent — is decided here (see
+ * `SessionOptions.toolGate`). Layers, in order:
+ *
+ * 1. the manifest policy (rules, then `allowedTools`/`askTools` sugar);
+ * 2. the user's overrides (`policy.json`, plus legacy `grants.json`) — which
+ *    may tighten anything but never loosen past a manifest `deny`;
+ * 3. session grants ("approve for session"), keyed by the rule that asked;
+ *
+ * and every decision is appended to the app's `tool-calls.jsonl` audit
+ * ledger. `ask` verdicts go on to the provider's interactive approval flow;
+ * `applyDecision` turns the user's answer into a session grant or a
+ * persistent user rule.
+ */
+declare class ToolGateway {
+  #private;
+  constructor(store: Store);
+  /** Builds the gate for one new session of `app`. */
+  session(app: string, manifestPolicy: CompiledPolicy): GateSession;
+  /** The user override layer as stored: policy.json rules, then legacy grants. */
+  userPolicy(app: string): Promise<UserPolicy>;
+  /**
+   * Applies the scope of a user's answer to a call this gateway sent to
+   * `ask`: `session` grants the asking rule for the rest of the session,
+   * `always` appends an allow rule with the asking rule's scope to the app's
+   * policy.json. Returns false for approvals this gateway never saw (legacy
+   * name-level sessions), so the caller can fall back.
+   */
+  applyDecision(approvalId: string, decision: ApprovalDecision): Promise<boolean>;
+  /** The newest audit lines for an app, newest last. */
+  recentCalls(app: string, limit?: number): Promise<ToolCallRecord[]>;
+  /** Resolves when queued ledger and policy writes have landed (tests). */
+  flush(): Promise<void>;
+}
+//#endregion
 //#region src/runtime.d.ts
 /**
  * Builds the AppContext for an installed app: merges the config layers
@@ -820,7 +903,7 @@ declare class ApprovalRegistry {
  * `ctx.usage` answers "nothing recorded" — the member is required by the
  * contract, so it is always present.
  */
-declare function buildAppContext(store: Store, manifest: AppManifest, provider: AIProvider, usage?: UsageRecorder, approvals?: ApprovalRegistry): Promise<AppContext>;
+declare function buildAppContext(store: Store, manifest: AppManifest, provider: AIProvider, usage?: UsageRecorder, approvals?: ApprovalRegistry, gateway?: ToolGateway): Promise<AppContext>;
 //#endregion
 //#region src/scheduler.d.ts
 interface SchedulableApp {
@@ -940,8 +1023,11 @@ interface ServerOptions {
  *                               optionally adopting an existing provider session (e.g. an
  *                               app-run investigation) so chat continues where it left off
  *   GET  /api/apps/:name/chat/:conversationId/history  past turns from the provider transcript
+ *                               plus the conversation's settled approval records
  *   GET  /api/apps/:name/jobs           manifest-declared jobs with schedule/status
  *   POST /api/apps/:name/jobs/:job/run  trigger a job now (409 while already running)
+ *   GET  /api/apps/:name/policy         effective tool policy: user overrides + manifest rules
+ *   GET  /api/apps/:name/tool-calls?limit=  newest gated tool calls (audit ledger)
  *   GET  /api/apps/:name/manifest       read-only app definition: instructions, agents,
  *                                       skills (with dir contents), allowed tools,
  *                                       MCP servers (with configured state), jobs, model

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/sources.ts","../src/store.ts","../src/auth.ts","../src/usage.ts","../src/budget.ts","../src/compat.ts","../src/installer.ts","../src/loader.ts","../src/portability.ts","../src/registry.ts","../src/approvals.ts","../src/runtime.ts","../src/scheduler.ts","../src/server.ts"],"mappings":";;;KAQY;EACN;EAAa;EAAa;;EAC1B;EAAe;;;KAGT,YAAY;EAAkB;EAAkB;;iBAE5C,eAAe,cAAc;;iBAwBvB,YAAY,MAAM,eAAe,kBAAkB;;iBAanD,aAAa,MAAM,eAAe,kBAAkB;;;UCrCzD;EACf;EACA;;;UAIe;;;;;EAKf;;;;;;;;;;;;;;KAeU;;UAGK;EACf,OAAO;;;;;;EAMP;;;;;;;EAOA;;UAGe;EACf,YAAY;EACZ;;EAEA;;EAEA,OAAO;;EAEP,OAAO,eAAe;;;;;;;;;EAStB,UAAU,eAAe;;;;;EAKzB;;;;;;;;UASe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;;;UAIO;EACf,WAAW;;;;;;;UAQI;EACf;;UAGe;EACf;;EAEA;EACA;EACA;;;UAIe;EACf,eAAe;;UAGA;EACf;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf,SAAS;EACT,MAAM;;;;;;;;UAwBS;EACf,MAAM;EACN,SAAS;;;;;;;;;;;;;;KAeC,aAAa;;UAGR;EACf;EACA;EACA;EACA;EACA;;;UAIe;EACf;;EAEA;EACA;EACA;EACA;;;UAIe;EACf,QAAQ;EACR,UAAU;;UAGK;EACf;EACA;;EAEA;EACA,QAAQ;EACR;EACA;;;;;;;cAwBW;WACF;EAET,YAAY;MAIR;MAIA;MAIA;MAIA;;EAKJ,OAAO;EAOP,WAAW;EAIX,WAAW;EAIX,cAAc;EAId,cAAc;EAId,iBAAiB;EAIjB,gBAAgB;EAIhB,mBAAmB;EAInB,cAAc;EAId,aAAa;EAIb,aAAa;EAIb,kBAAkB;EAOlB,oBAA0B,QAAQ;EAIlC,kBAAwB,QAAQ,eAAe;EAI/C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,QAAQ,gBAAgB;EAI7C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,cAAc,QAAQ,eAAe;EAI1D,cAAoB,eAAe,QAAQ;EAK3C,eAAqB,cAAc,OAAO,YAAY;EAItD,gBAAsB,eAAe,QAAQ;EAK7C,iBAAuB,cAAc,KAAK,cAAc;EAIxD,WAAiB,eAAe,QAAQ;EAKxC,YAAkB,cAAc,OAAO,cAAc;EAIrD,aAAmB,eAAe,QAAQ;EAK1C,cAAoB,cAAc,OAAO,WAAW;EAIpD,eAAqB,eAAe,QAAQ;EAW5C,gBAAsB,cAAc,OAAO,aAAa;;EAKxD,iBAAuB,cAAc,QAAQ,aAAa;;;;;;;;;;EAe1D,gBAAsB,eAAe,QAAQ;;EAwB7C,iBAAuB,cAAc,SAAS,eAAe;MAQzD;EAIJ,iBAAuB,QAAQ;EAK/B,eAAqB,OAAO,YAAY;EAIxC,iBAAuB,QAAQ;;;;cCjcpB;;UAMI;EACf;EACA;;EAEA;;;KAIU;;YAGA;IACR,WAAW;;;;;;;;;;;;;;;;;;;iBAmDC,iBACd,kBACA;EAAW,IAAI;GACf;;;;;;;iBAcc,cAAc,cAAc,gCAAgC;;UAoB3D;EACf;EACA;EACA;EACA;;;;;;;cAQW;mBAIC;UAHJ;UACA;EAER,YAAY,OAAwB;;;;;;EAOpC;;EAOA,UAAgB,iBAAiB;IAAU;IAAY;;EAcvD,cAAoB,QAAQ;;EAM5B,YAAkB,aAAa;;;;;EAc/B,kBAAwB,iBAAiB,QAAQ;;EAUjD,eAAqB,oCAAoC,QAAQ;UAOnD;;EAad,cAAoB,UAAU,UAAU,KAAI,OAAoB;;EAgBhE,gBACE,2BACA,KAAI,OACH,QAAQ;;EAUX,eAAqB,gBAAgB;;UAQ7B;;;KAgBE,yBAAyB,GAAG;UAEvB;EACf,mBAAmB;;;;;;;;iBAqBL,qBACd,OAAO,OACP,MAAM,aACN,UAAS,wBACR;;;;;;;;iBAwFa,mBAAmB,KAAK,MAAM,MAAM;;;;cC9WvC;;iBAQG,OAAO,KAAI;;iBAcX,UAAU;;UAKT;EACf;;EAEA,aAAa,eAAe;;EAE5B;;EAEA;;;;;;;KAQU,YAAY;;;;;;;;;;;;;;;KA0CZ,eAAe;;;;;;;;;;;;;;;;;;;;cAmId;mBAQT;mBACA;;mBAPe;;mBAGA;EAEjB,YACE,OAAwB,OACxB;;;;;;;;;;;;EAcF,OAAO,iBAAiB,MAAM,WAAW,KAAI,OAAoB;;EA6CjE,KAAW,iBAAiB,KAAI,OAAoB,QAAQ,SAAS;;EAKrE,QAAc,iBAAiB,KAAI,OAAoB,QAAQ;;;;;;;;;;EA+B/D,MACE,iBACA,QAAO,WACP,KAAI,OACH,QAAQ;;;;;;;;;;;EAsBX,QAAQ,iBAAiB,KAAI,OAAoB;;;;;;;;;;;;;;;;;;EA0BjD,QAAQ,iBAAiB,KAAI,OAAoB,QAAQ,SAAS;;UAqC1D;UAIA;;UAKM;;;;;;;UAgBA;UAUN;;;;;;;UAmBA;;UAmBA;UAsCA;;;;;;;;;cCzgBG;;UAGI;;EAEf;;EAEA;;;;;;EAMA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;cAYW,4BAA4B;WAC9B,aAAa;WACb;;WAEA;;WAEA;;WAEA;EAET,YAAY,iBAAiB;IAAU;IAAc;IAAkB;;;SAchE,GAAG,eAAe,OAAO;;;;;;;;;;;;;iBAkBlB,UAAU,QAAQ,cAAc;;iBAYhC,gBAAgB,SAAS,cAAc,+BAA+B;;iBAchE,aACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH,QAAQ;;;;;;iBAUW,mBACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH;;;;;;iBAemB,aACpB,OAAO,OACP,cACA,+BACC;;;;;;;iBC5Ia,sBAAsB,UAAU,KAAK;;;;iBCkB/B,oBAAoB,cAAc;UAevC;;EAEf;;;;;;;;UASe;EACf,QAAQ;;EAER;;;;;;;iBAQoB,WACpB,OAAO,OACP,iBAAiB,eACjB,UAAS,iBACR,QAAQ;iBA0EW,UAAU,OAAO,OAAO,eAAe,QAAQ;UAsBpD;;EAEf;;iBAGoB,UACpB,OAAO,OACP,cACA,UAAS,gBACR;;;UCxIc;EACf,YAAY;EACZ,UAAU;EACV;;;;;;EAMA;;UAGe;;;;;;;EAOf,QAAQ;;;;;;;iBAQY,QAAQ,iBAAiB,UAAS,iBAAsB,QAAQ;;;;;;;;;;;;;;;cCvBzE;UAaI;EACf;EACA;EACA,KAAK;;EAEL;;UAGe;;EAEf;;UAGe;EACf;EACA,QAAQ;EACR;EACA;;UAGe;EACf,QAAQ;EACR;EACA;;;;;;iBA8CoB,UACpB,OAAO,OACP,UAAU,YACV,cACA,UAAS,gBACR,QAAQ;;iBAgMW,UACpB,OAAO,OACP,UAAU,YACV,sBACC,QAAQ;;;UC3TM;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf,MAAM;;;;;;;iBAkCc,gBAAgB,OAAO,OAAO,UAAU,cAAc,QAAQ;iBAuB9D,gBACpB,OAAO,OACP,eACC,QAAQ;iBASW,YAAY,OAAO,OAAO,cAAc,cAAc,QAAQ;iBAW9D,eAAe,OAAO,OAAO,eAAe;UAWjD;EACf;EACA,KAAK;;;iBAIe,WAAW,OAAO,OAAO,kBAAkB,QAAQ;;;KCxGpE,mBAAmB,QAAQ;EAAc;;KACzC,mBAAmB,QAAQ;EAAc;;;;;;;;;;;;;;;cAqBjC;;EAQX,YAAY,OAAO,OAAO;IAAW;;;EAMrC,QAAc;;EASd,MACE,aACA,OAAO,kBACP,UAAU,UAAU,qBAAqB;;EAoB3C,SAAS,oBAAoB;IAAU;;;EAQvC,IAAI,qBAAqB;;EAKzB,QAAQ;IAAU;IAAc;MAAiC;;;;;;;EAkBjE,QAAQ,oBAAoB,UAAU;;;;;;EAmBtC,SAAS,OAAO;;;;;EAYhB,QAAQ;;EAOR,OAAa,cAAc;;;;;;EAS3B,SAAe,aAAa,cAAc,qBAAqB;;EAW/D;;EAoDA,SAAS;;;;;;;;;;;;;;;;;;;;;iBCyIW,gBACpB,OAAO,OACP,UAAU,aACV,UAAU,YACV,QAAQ,eACR,YAAY,mBACX,QAAQ;;;UCrWM;EACf,UAAU;EACV,KAAK;EACL,cAAc,gBAAgB,KAAK,eAAe;;UAGnC;EACf;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,YAAY;;;;;;;;cAiBD;mBAQT;mBACA;UARM;UACA;UACA;;UAEA;EAER,YACE,OAAwB,OACxB,SAA0B,iBAAiB,QAAQ;EAGrD,SAAe;EAuCf;;MAOI;;;;;EAQJ,IACE,iBACA,iBACA,UAAS,oBACR,QAAQ;;EAmCX,OAAa,kBAAkB,QAAQ;UA4B/B;;;;UClDO;;EAEf,KAAK;;EAEL,WAAW;;EAEX,MAAM;;EAEN,SAAS;;UAGM;;EAEf,OAAO;;;;;;EAMP,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoEL,aACd,OAAO,OACP,UAAU,YACV,UAAS,gBACR"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/sources.ts","../src/store.ts","../src/auth.ts","../src/usage.ts","../src/budget.ts","../src/compat.ts","../src/installer.ts","../src/loader.ts","../src/portability.ts","../src/registry.ts","../src/approvals.ts","../src/tool-gateway.ts","../src/runtime.ts","../src/scheduler.ts","../src/server.ts"],"mappings":";;;KAQY;EACN;EAAa;EAAa;;EAC1B;EAAe;;;KAGT,YAAY;EAAkB;EAAkB;;iBAE5C,eAAe,cAAc;;iBAwBvB,YAAY,MAAM,eAAe,kBAAkB;;iBAanD,aAAa,MAAM,eAAe,kBAAkB;;;UCnCzD;EACf;EACA;;;UAIe;;;;;EAKf;;;;;;;;;;;;;;KAeU;;UAGK;EACf,OAAO;;;;;;EAMP;;;;;;;EAOA;;UAGe;EACf,YAAY;EACZ;;EAEA;;EAEA,OAAO;;EAEP,OAAO,eAAe;;;;;;;;;EAStB,UAAU,eAAe;;;;;EAKzB;;;;;;;;UASe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;;EAER;;EAEA;;;UAIe;EACf,WAAW;;;;;;;UAQI;EACf;;;;;;;;;UAUe;EACf,OAAO;;;UAIQ;EACf;EACA;EACA;;EAEA;EACA,UAAU;;EAEV;EACA;EACA;;UAGe;EACf;;EAEA;EACA;EACA;;;UAIe;EACf,eAAe;;UAGA;EACf;EACA;EACA;EACA;EACA;EACA;;;UAIe;EACf,SAAS;EACT,MAAM;;;;;;;;UAwBS;EACf,MAAM;EACN,SAAS;;;;;;;;;;;;;;KAeC,aAAa;;UAGR;EACf;EACA;EACA;EACA;EACA;;;UAIe;EACf;;EAEA;EACA;EACA;EACA;;;UAIe;EACf,QAAQ;EACR,UAAU;;UAGK;EACf;EACA;;EAEA;EACA,QAAQ;EACR;EACA;;;;;;;cAwBW;WACF;EAET,YAAY;MAIR;MAIA;MAIA;MAIA;;EAKJ,OAAO;EAOP,WAAW;EAIX,WAAW;EAIX,cAAc;EAId,cAAc;EAId,iBAAiB;EAIjB,gBAAgB;EAIhB,mBAAmB;EAInB,cAAc;EAId,cAAc;EAId,iBAAiB;EAIjB,aAAa;EAIb,aAAa;EAIb,kBAAkB;EAOlB,oBAA0B,QAAQ;EAIlC,kBAAwB,QAAQ,eAAe;EAI/C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,QAAQ,gBAAgB;EAI7C,cAAoB,eAAe,QAAQ;EAI3C,eAAqB,cAAc,QAAQ,eAAe;EAI1D,cAAoB,eAAe,QAAQ;EAK3C,eAAqB,cAAc,OAAO,YAAY;EAItD,gBAAsB,eAAe,QAAQ;EAK7C,iBAAuB,cAAc,KAAK,cAAc;EAIxD,WAAiB,eAAe,QAAQ;EAKxC,YAAkB,cAAc,OAAO,cAAc;EAIrD,eAAqB,eAAe,QAAQ;EAK5C,gBAAsB,cAAc,QAAQ,aAAa;;EAKzD,eAAqB,cAAc,QAAQ,iBAAiB;;;;;EAU5D,cAAoB,eAAe,QAAQ;;EAsB3C,eAAqB,cAAc,SAAS,mBAAmB;EAQ/D,aAAmB,eAAe,QAAQ;EAK1C,cAAoB,cAAc,OAAO,WAAW;EAIpD,eAAqB,eAAe,QAAQ;EAW5C,gBAAsB,cAAc,OAAO,aAAa;;EAKxD,iBAAuB,cAAc,QAAQ,aAAa;;;;;;;;;;EAe1D,gBAAsB,eAAe,QAAQ;;EAwB7C,iBAAuB,cAAc,SAAS,eAAe;MAQzD;EAIJ,iBAAuB,QAAQ;EAK/B,eAAqB,OAAO,YAAY;EAIxC,iBAAuB,QAAQ;;;;cC1hBpB;;UAMI;EACf;EACA;;EAEA;;;KAIU;;YAGA;IACR,WAAW;;;;;;;;;;;;;;;;;;;iBAmDC,iBACd,kBACA;EAAW,IAAI;GACf;;;;;;;iBAcc,cAAc,cAAc,gCAAgC;;UAoB3D;EACf;EACA;EACA;EACA;;;;;;;cAQW;mBAIC;UAHJ;UACA;EAER,YAAY,OAAwB;;;;;;EAOpC;;EAOA,UAAgB,iBAAiB;IAAU;IAAY;;EAcvD,cAAoB,QAAQ;;EAM5B,YAAkB,aAAa;;;;;EAc/B,kBAAwB,iBAAiB,QAAQ;;EAUjD,eAAqB,oCAAoC,QAAQ;UAOnD;;EAad,cAAoB,UAAU,UAAU,KAAI,OAAoB;;EAgBhE,gBACE,2BACA,KAAI,OACH,QAAQ;;EAUX,eAAqB,gBAAgB;;UAQ7B;;;KAgBE,yBAAyB,GAAG;UAEvB;EACf,mBAAmB;;;;;;;;iBAqBL,qBACd,OAAO,OACP,MAAM,aACN,UAAS,wBACR;;;;;;;;iBAwFa,mBAAmB,KAAK,MAAM,MAAM;;;;cC9WvC;;iBAQG,OAAO,KAAI;;iBAcX,UAAU;;UAKT;EACf;;EAEA,aAAa,eAAe;;EAE5B;;EAEA;;;;;;;KAQU,YAAY;;;;;;;;;;;;;;;KA0CZ,eAAe;;;;;;;;;;;;;;;;;;;;cAmId;mBAQT;mBACA;;mBAPe;;mBAGA;EAEjB,YACE,OAAwB,OACxB;;;;;;;;;;;;EAcF,OAAO,iBAAiB,MAAM,WAAW,KAAI,OAAoB;;EA6CjE,KAAW,iBAAiB,KAAI,OAAoB,QAAQ,SAAS;;EAKrE,QAAc,iBAAiB,KAAI,OAAoB,QAAQ;;;;;;;;;;EA+B/D,MACE,iBACA,QAAO,WACP,KAAI,OACH,QAAQ;;;;;;;;;;;EAsBX,QAAQ,iBAAiB,KAAI,OAAoB;;;;;;;;;;;;;;;;;;EA0BjD,QAAQ,iBAAiB,KAAI,OAAoB,QAAQ,SAAS;;UAqC1D;UAIA;;UAKM;;;;;;;UAgBA;UAUN;;;;;;;UAmBA;;UAmBA;UAsCA;;;;;;;;;cCzgBG;;UAGI;;EAEf;;EAEA;;;;;;EAMA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;cAYW,4BAA4B;WAC9B,aAAa;WACb;;WAEA;;WAEA;;WAEA;EAET,YAAY,iBAAiB;IAAU;IAAc;IAAkB;;;SAchE,GAAG,eAAe,OAAO;;;;;;;;;;;;;iBAkBlB,UAAU,QAAQ,cAAc;;iBAYhC,gBAAgB,SAAS,cAAc,+BAA+B;;iBAchE,aACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH,QAAQ;;;;;;iBAUW,mBACpB,OAAO,OACP,OAAO,eACP,cACA,KAAI,OACH;;;;;;iBAemB,aACpB,OAAO,OACP,cACA,+BACC;;;;;;;iBC5Ia,sBAAsB,UAAU,KAAK;;;;iBCkB/B,oBAAoB,cAAc;UAevC;;EAEf;;;;;;;;UASe;EACf,QAAQ;;EAER;;;;;;;iBAQoB,WACpB,OAAO,OACP,iBAAiB,eACjB,UAAS,iBACR,QAAQ;iBA0EW,UAAU,OAAO,OAAO,eAAe,QAAQ;UAsBpD;;EAEf;;iBAGoB,UACpB,OAAO,OACP,cACA,UAAS,gBACR;;;UCxIc;EACf,YAAY;EACZ,UAAU;EACV;;;;;;EAMA;;UAGe;;;;;;;EAOf,QAAQ;;;;;;;iBAQY,QAAQ,iBAAiB,UAAS,iBAAsB,QAAQ;;;;;;;;;;;;;;;cCvBzE;UAaI;EACf;EACA;EACA,KAAK;;EAEL;;UAGe;;EAEf;;UAGe;EACf;EACA,QAAQ;EACR;EACA;;UAGe;EACf,QAAQ;EACR;EACA;;;;;;iBA8CoB,UACpB,OAAO,OACP,UAAU,YACV,cACA,UAAS,gBACR,QAAQ;;iBAgMW,UACpB,OAAO,OACP,UAAU,YACV,sBACC,QAAQ;;;UC3TM;EACf;EACA;EACA;EACA;EACA;;UAGe;EACf,MAAM;;;;;;;iBAkCc,gBAAgB,OAAO,OAAO,UAAU,cAAc,QAAQ;iBAuB9D,gBACpB,OAAO,OACP,eACC,QAAQ;iBASW,YAAY,OAAO,OAAO,cAAc,cAAc,QAAQ;iBAW9D,eAAe,OAAO,OAAO,eAAe;UAWjD;EACf;EACA,KAAK;;;iBAIe,WAAW,OAAO,OAAO,kBAAkB,QAAQ;;;KCxGpE,mBAAmB,QAAQ;EAAc;;KACzC,mBAAmB,QAAQ;EAAc;;;;;;;;;;;;;;;cAqBjC;;EAQX,YAAY,OAAO,OAAO;IAAW;;;EAMrC,QAAc;;EASd,MACE,aACA,OAAO,kBACP,UAAU,UAAU,qBAAqB;;EAsB3C,SAAS,oBAAoB;IAAU;;;EAQvC,IAAI,qBAAqB;;EAKzB,QAAQ;IAAU;IAAc;MAAiC;;;;;;;EAkBjE,QAAQ,oBAAoB,UAAU;;;;;;EAmBtC,SAAS,OAAO;;;;;EAYhB,QAAQ;;EAOR,OAAa,cAAc;;;;;;EAS3B,SAAe,aAAa,cAAc,qBAAqB;;EAW/D;;EAoDA,SAAS;;;;;UC5LM;EACf,MAAM;;EAEN;;;;;;;;;;;;;;;;;cAkBW;;EAQX,YAAY,OAAO;;EAKnB,QAAQ,aAAa,gBAAgB,iBAAiB;;EAOtD,WAAiB,cAAc,QAAQ;;;;;;;;EAsBvC,cAAoB,oBAAoB,UAAU,mBAAmB;;EAkBrE,YAAkB,aAAa,iBAAc,QAAQ;;EAOrD,SAAS;;;;;;;;;;;;;;;;;;;;;iBC4RW,gBACpB,OAAO,OACP,UAAU,aACV,UAAU,YACV,QAAQ,eACR,YAAY,kBACZ,UAAU,cACT,QAAQ;;;UCvZM;EACf,UAAU;EACV,KAAK;EACL,cAAc,gBAAgB,KAAK,eAAe;;UAGnC;EACf;EACA;EACA;;EAEA;EACA;EACA;EACA;EACA,YAAY;;;;;;;;cAiBD;mBAQT;mBACA;UARM;UACA;UACA;;UAEA;EAER,YACE,OAAwB,OACxB,SAA0B,iBAAiB,QAAQ;EAGrD,SAAe;EAuCf;;MAOI;;;;;EAQJ,IACE,iBACA,iBACA,UAAS,oBACR,QAAQ;;EAmCX,OAAa,kBAAkB,QAAQ;UA4B/B;;;;UC9CO;;EAEf,KAAK;;EAEL,WAAW;;EAEX,MAAM;;EAEN,SAAS;;UAGM;;EAEf,OAAO;;;;;;EAMP,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAuEL,aACd,OAAO,OACP,UAAU,YACV,UAAS,gBACR"}

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import { A as UsageRecorder, C as BudgetExceededError, D as budgetStatusFor, E as budgetStatus, F as createAuthMiddleware, I as isConsoleRequest, L as registerAuthRoutes, M as utcDay, N as AuthService, O as setAppBudget, P as SESSION_COOKIE, R as requiredLevel, S as BUDGET_EXCEEDED_CODE, T as assertWithinBudget, _ as fetchSource, a as EXPORT_FORMAT_VERSION, b as loadApp, c as installApp, d as updateApp, f as addRegistry, g as resolveApp, h as removeRegistry, j as formatUsd, k as USAGE_RETENTION_DAYS, l as installDependencies, m as refreshRegistry, n as createServer, o as exportApp, p as readCachedIndex, r as buildAppContext, s as importApp, t as Store, u as removeApp, v as parseSourceArg, w as appBudget, x as checkSdkCompatibility, y as updateSource } from "./store-dipRcfKX.mjs";
+import { A as UsageRecorder, C as BudgetExceededError, D as budgetStatusFor, E as budgetStatus, F as createAuthMiddleware, I as isConsoleRequest, L as registerAuthRoutes, M as utcDay, N as AuthService, O as setAppBudget, P as SESSION_COOKIE, R as requiredLevel, S as BUDGET_EXCEEDED_CODE, T as assertWithinBudget, _ as fetchSource, a as EXPORT_FORMAT_VERSION, b as loadApp, c as installApp, d as updateApp, f as addRegistry, g as resolveApp, h as removeRegistry, j as formatUsd, k as USAGE_RETENTION_DAYS, l as installDependencies, m as refreshRegistry, n as createServer, o as exportApp, p as readCachedIndex, r as buildAppContext, s as importApp, t as Store, u as removeApp, v as parseSourceArg, w as appBudget, x as checkSdkCompatibility, y as updateSource } from "./store-DvLX0Kft.mjs";
 export { AuthService, BUDGET_EXCEEDED_CODE, BudgetExceededError, EXPORT_FORMAT_VERSION, SESSION_COOKIE, Store, USAGE_RETENTION_DAYS, UsageRecorder, addRegistry, appBudget, assertWithinBudget, budgetStatus, budgetStatusFor, buildAppContext, checkSdkCompatibility, createAuthMiddleware, createServer, exportApp, fetchSource, formatUsd, importApp, installApp, installDependencies, isConsoleRequest, loadApp, parseSourceArg, readCachedIndex, refreshRegistry, registerAuthRoutes, removeApp, removeRegistry, requiredLevel, resolveApp, setAppBudget, updateApp, updateSource, utcDay };