@allin-ai/agent-client 0.1.0

package/dist/capabilities/shell-host.js

@@ -0,0 +1,378 @@
+import { spawn as nodeSpawn, } from "node:child_process";
+import { realpath, stat } from "node:fs/promises";
+import path from "node:path";
+import { TextDecoder } from "node:util";
+import { parseCapabilityEventLine, } from "./shell-wire.js";
+import { MAX_CAPABILITY_TIMEOUT_SECONDS } from "./manifest.js";
+const DEFAULT_MAX_LINE_BYTES = 64 * 1024;
+const DEFAULT_MAX_OUTPUT_BYTES = 1024 * 1024;
+const DEFAULT_KILL_GRACE_MS = 2_000;
+const SAFE_ENVIRONMENT_KEY = /^(PATH|LANG|LC_[A-Z_]+|TZ)$/;
+function isInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return (relative !== "" &&
+        relative !== ".." &&
+        !relative.startsWith(`..${path.sep}`) &&
+        !path.isAbsolute(relative));
+}
+function terminalError(reason) {
+    return { type: "error", payload: { reason } };
+}
+function safeEnvironment(environment) {
+    const result = {
+        PATH: "/usr/bin:/bin",
+        LANG: "C.UTF-8",
+        LC_ALL: "C.UTF-8",
+        TZ: "UTC",
+    };
+    for (const [key, value] of Object.entries(environment ?? {})) {
+        if (SAFE_ENVIRONMENT_KEY.test(key) && typeof value === "string") {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+class EventQueue {
+    values = [];
+    waiting = [];
+    closed = false;
+    push(value) {
+        if (this.closed)
+            return;
+        const next = this.waiting.shift();
+        if (next)
+            next({ done: false, value });
+        else
+            this.values.push(value);
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        for (const next of this.waiting.splice(0))
+            next({ done: true, value: undefined });
+    }
+    async *[Symbol.asyncIterator]() {
+        while (true) {
+            if (this.values.length > 0) {
+                yield this.values.shift();
+                continue;
+            }
+            if (this.closed)
+                return;
+            const result = await new Promise((resolve) => {
+                this.waiting.push(resolve);
+            });
+            if (result.done)
+                return;
+            yield result.value;
+        }
+    }
+}
+/**
+ * The only process boundary available to a direct Shell Capability. The Hub
+ * supplies data, never a command: the installed manifest determines the
+ * executable and a fixed JSON document is the process's sole stdin input.
+ */
+export class ShellCapabilityHost {
+    options;
+    spawn;
+    maxLineBytes;
+    maxOutputBytes;
+    killGraceMs;
+    constructor(options) {
+        this.options = options;
+        this.spawn = options.spawn ?? nodeSpawn;
+        this.maxLineBytes = options.maxLineBytes ?? DEFAULT_MAX_LINE_BYTES;
+        this.maxOutputBytes = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+        this.killGraceMs = options.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
+        if (!Number.isSafeInteger(this.maxLineBytes) || this.maxLineBytes < 1) {
+            throw new TypeError("maxLineBytes must be a positive safe integer");
+        }
+        if (!Number.isSafeInteger(this.maxOutputBytes) || this.maxOutputBytes < 1) {
+            throw new TypeError("maxOutputBytes must be a positive safe integer");
+        }
+        if (!Number.isSafeInteger(this.killGraceMs) || this.killGraceMs < 0) {
+            throw new TypeError("killGraceMs must be a nonnegative safe integer");
+        }
+    }
+    async *invoke(capability, input, context, signal) {
+        const queue = new EventQueue();
+        let stop = () => undefined;
+        let stoppedByConsumer = false;
+        void this.run(capability, input, context, signal, queue, (terminate) => {
+            stop = terminate;
+            if (stoppedByConsumer)
+                stop();
+        });
+        try {
+            for await (const event of queue)
+                yield event;
+        }
+        finally {
+            stoppedByConsumer = true;
+            stop();
+        }
+    }
+    async resolveEntrypoint(capability) {
+        let root;
+        try {
+            root = await realpath(this.options.pluginRoot);
+        }
+        catch {
+            return terminalError("capability_plugin_root_unavailable");
+        }
+        const candidate = path.resolve(root, capability.entry);
+        if (!isInside(root, candidate)) {
+            return terminalError("capability_entry_outside_plugin_root");
+        }
+        let entry;
+        try {
+            entry = await realpath(candidate);
+        }
+        catch {
+            return terminalError("capability_entry_unavailable");
+        }
+        if (!isInside(root, entry)) {
+            return terminalError("capability_entry_outside_plugin_root");
+        }
+        try {
+            const entryStat = await stat(entry);
+            if (!entryStat.isFile() || (entryStat.mode & 0o111) === 0) {
+                return terminalError("capability_entry_not_executable");
+            }
+        }
+        catch {
+            return terminalError("capability_entry_unavailable");
+        }
+        return { root, entry };
+    }
+    async run(capability, input, context, signal, queue, setStop) {
+        try {
+            if (!Number.isSafeInteger(capability.timeoutSeconds) ||
+                capability.timeoutSeconds < 1 ||
+                capability.timeoutSeconds > MAX_CAPABILITY_TIMEOUT_SECONDS) {
+                queue.push(terminalError("capability_timeout_invalid"));
+                return;
+            }
+            const resolved = await this.resolveEntrypoint(capability);
+            if ("type" in resolved) {
+                queue.push(resolved);
+                return;
+            }
+            if (signal.aborted) {
+                queue.push(terminalError("capability_cancelled"));
+                return;
+            }
+            let request;
+            try {
+                request = JSON.stringify({ input, context });
+            }
+            catch {
+                queue.push(terminalError("capability_input_invalid"));
+                return;
+            }
+            if (typeof request !== "string") {
+                queue.push(terminalError("capability_input_invalid"));
+                return;
+            }
+            try {
+                const document = JSON.parse(request);
+                if (!Object.hasOwn(document, "input") ||
+                    !Object.hasOwn(document, "context")) {
+                    queue.push(terminalError("capability_input_invalid"));
+                    return;
+                }
+            }
+            catch {
+                queue.push(terminalError("capability_input_invalid"));
+                return;
+            }
+            let child;
+            try {
+                child = this.spawn(resolved.entry, [], {
+                    cwd: resolved.root,
+                    env: safeEnvironment(this.options.environment),
+                    shell: false,
+                    stdio: ["pipe", "pipe", "ignore"],
+                    windowsHide: true,
+                    detached: process.platform !== "win32",
+                });
+            }
+            catch {
+                queue.push(terminalError("capability_spawn_failed"));
+                return;
+            }
+            if (!child.stdout || !child.stdin) {
+                queue.push(terminalError("capability_spawn_failed"));
+                child.kill();
+                return;
+            }
+            await this.streamChild(child, request, capability.timeoutSeconds, signal, queue, setStop);
+        }
+        catch {
+            queue.push(terminalError("capability_host_failed"));
+        }
+        finally {
+            queue.close();
+        }
+    }
+    async streamChild(child, request, timeoutSeconds, signal, queue, setStop) {
+        await new Promise((resolve) => {
+            const decoder = new TextDecoder("utf-8", { fatal: true });
+            let remaining = "";
+            let totalOutputBytes = 0;
+            let terminal = null;
+            let invalidOutput = false;
+            let abortReason = null;
+            let closed = false;
+            let terminating = false;
+            let killTimer;
+            const finish = (event) => {
+                if (closed)
+                    return;
+                closed = true;
+                if (killTimer)
+                    clearTimeout(killTimer);
+                signal.removeEventListener("abort", onAbort);
+                queue.push(event);
+                resolve();
+            };
+            const sendSignal = (name) => {
+                try {
+                    if (child.pid && process.platform !== "win32") {
+                        process.kill(-child.pid, name);
+                    }
+                    else {
+                        child.kill(name);
+                    }
+                }
+                catch {
+                    try {
+                        child.kill(name);
+                    }
+                    catch {
+                        // The child may have exited between output and cancellation.
+                    }
+                }
+            };
+            const terminate = () => {
+                if (closed || terminating)
+                    return;
+                terminating = true;
+                sendSignal("SIGTERM");
+                killTimer = setTimeout(() => sendSignal("SIGKILL"), this.killGraceMs);
+                killTimer.unref();
+            };
+            const onAbort = () => {
+                if (!abortReason)
+                    abortReason = "capability_cancelled";
+                terminate();
+            };
+            signal.addEventListener("abort", onAbort, { once: true });
+            const timeout = setTimeout(() => {
+                if (!abortReason)
+                    abortReason = "capability_timeout";
+                terminate();
+            }, capabilityTimeoutMilliseconds(timeoutSeconds));
+            timeout.unref();
+            const rejectOutput = () => {
+                invalidOutput = true;
+                terminate();
+            };
+            const acceptLine = (line) => {
+                if (invalidOutput)
+                    return;
+                if (Buffer.byteLength(line) > this.maxLineBytes || line.length === 0) {
+                    rejectOutput();
+                    return;
+                }
+                const event = parseCapabilityEventLine(line);
+                if (!event || terminal) {
+                    rejectOutput();
+                    return;
+                }
+                if (event.type === "result" || event.type === "error") {
+                    terminal = event;
+                    return;
+                }
+                queue.push(event);
+            };
+            const consumeText = (text) => {
+                remaining += text;
+                let lineEnd = remaining.indexOf("\n");
+                while (lineEnd >= 0) {
+                    const rawLine = remaining.slice(0, lineEnd);
+                    remaining = remaining.slice(lineEnd + 1);
+                    acceptLine(rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine);
+                    lineEnd = remaining.indexOf("\n");
+                }
+                if (Buffer.byteLength(remaining) > this.maxLineBytes)
+                    rejectOutput();
+            };
+            child.stdout.on("data", (chunk) => {
+                if (closed || invalidOutput)
+                    return;
+                totalOutputBytes += chunk.byteLength;
+                if (totalOutputBytes > this.maxOutputBytes) {
+                    rejectOutput();
+                    return;
+                }
+                try {
+                    consumeText(decoder.decode(chunk, { stream: true }));
+                }
+                catch {
+                    rejectOutput();
+                }
+            });
+            child.stdout.once("end", () => {
+                if (invalidOutput || closed)
+                    return;
+                try {
+                    consumeText(decoder.decode());
+                    if (remaining.length > 0) {
+                        const finalLine = remaining.endsWith("\r")
+                            ? remaining.slice(0, -1)
+                            : remaining;
+                        remaining = "";
+                        acceptLine(finalLine);
+                    }
+                }
+                catch {
+                    rejectOutput();
+                }
+            });
+            child.once("error", () => {
+                clearTimeout(timeout);
+                finish(terminalError("capability_spawn_failed"));
+            });
+            child.once("close", (code) => {
+                clearTimeout(timeout);
+                if (abortReason) {
+                    finish(terminalError(abortReason));
+                    return;
+                }
+                if (invalidOutput) {
+                    finish(terminalError("capability_output_invalid"));
+                    return;
+                }
+                if (code !== 0) {
+                    finish(terminal?.type === "error"
+                        ? terminal
+                        : terminalError("capability_process_failed"));
+                    return;
+                }
+                finish(terminal ?? terminalError("capability_missing_terminal_event"));
+            });
+            child.stdin.once("error", () => rejectOutput());
+            child.stdin.end(`${request}\n`);
+            if (signal.aborted)
+                onAbort();
+            setStop(onAbort);
+        });
+    }
+}
+function capabilityTimeoutMilliseconds(timeoutSeconds) {
+    return timeoutSeconds * 1_000;
+}
+//# sourceMappingURL=shell-host.js.map

package/dist/capabilities/shell-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-host.js","sourceRoot":"","sources":["../../src/capabilities/shell-host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,IAAI,SAAS,GAGnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EACL,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,eAAe,CAAC;AAoB/D,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAE3D,SAAS,QAAQ,CAAC,IAAY,EAAE,SAAiB;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChD,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,QAAQ,KAAK,IAAI;QACjB,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CACtB,WAAyD;IAEzD,MAAM,MAAM,GAAsB;QAChC,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,EAAE,EAAE,KAAK;KACV,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7D,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU;IACG,MAAM,GAAQ,EAAE,CAAC;IACjB,OAAO,GAA8C,EAAE,CAAC;IACjE,MAAM,GAAG,KAAK,CAAC;IAEvB,IAAI,CAAC,KAAQ;QACX,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI;YAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;;YAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3B,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;gBAC9D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI;gBAAE,OAAO;YACxB,MAAM,MAAM,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAID;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAMD;IALZ,KAAK,CAAkB;IACvB,YAAY,CAAS;IACrB,cAAc,CAAS;IACvB,WAAW,CAAS;IAErC,YAA6B,OAAmC;QAAnC,YAAO,GAAP,OAAO,CAA4B;QAC9D,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACnE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACzE,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CACX,UAA2B,EAC3B,KAAc,EACd,OAAgC,EAChC,MAAmB;QAEnB,MAAM,KAAK,GAAG,IAAI,UAAU,EAAmB,CAAC;QAChD,IAAI,IAAI,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;QACvC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE;YACrE,IAAI,GAAG,SAAS,CAAC;YACjB,IAAI,iBAAiB;gBAAE,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK;gBAAE,MAAM,KAAK,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACT,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,EAAE,CAAC;QACT,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,UAA2B;QAE3B,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,oCAAoC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/B,OAAO,aAAa,CAAC,sCAAsC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,8BAA8B,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,aAAa,CAAC,sCAAsC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,aAAa,CAAC,iCAAiC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,CAAC,8BAA8B,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,UAA2B,EAC3B,KAAc,EACd,OAAgC,EAChC,MAAmB,EACnB,KAAkC,EAClC,OAAwC;QAExC,IAAI,CAAC;YACH,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;gBAChD,UAAU,CAAC,cAAc,GAAG,CAAC;gBAC7B,UAAU,CAAC,cAAc,GAAG,8BAA8B,EAC1D,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC1D,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YAED,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAChE,IACE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC;oBACjC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,EACnC,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACtD,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE;oBACrC,GAAG,EAAE,QAAQ,CAAC,IAAI;oBAClB,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;oBAC9C,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;oBACjC,WAAW,EAAE,IAAI;oBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;iBACvC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBACrD,KAAK,CAAC,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAED,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,EACL,OAAO,EACP,UAAU,CAAC,cAAc,EACzB,MAAM,EACN,KAAK,EACL,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAmB,EACnB,OAAe,EACf,cAAsB,EACtB,MAAmB,EACnB,KAAkC,EAClC,OAAwC;QAExC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,SAAS,GAAG,EAAE,CAAC;YACnB,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzB,IAAI,QAAQ,GAA2B,IAAI,CAAC;YAC5C,IAAI,aAAa,GAAG,KAAK,CAAC;YAC1B,IAAI,WAAW,GACb,IAAI,CAAC;YACP,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,SAAqC,CAAC;YAE1C,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAQ,EAAE;gBAC9C,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,SAAS;oBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAClB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YAEF,MAAM,UAAU,GAAG,CAAC,IAAoB,EAAQ,EAAE;gBAChD,IAAI,CAAC;oBACH,IAAI,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;wBAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;oBACjC,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnB,CAAC;oBAAC,MAAM,CAAC;wBACP,6DAA6D;oBAC/D,CAAC;gBACH,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,SAAS,GAAG,GAAS,EAAE;gBAC3B,IAAI,MAAM,IAAI,WAAW;oBAAE,OAAO;gBAClC,WAAW,GAAG,IAAI,CAAC;gBACnB,UAAU,CAAC,SAAS,CAAC,CAAC;gBACtB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;gBACtE,SAAS,CAAC,KAAK,EAAE,CAAC;YACpB,CAAC,CAAC;YAEF,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,CAAC,WAAW;oBAAE,WAAW,GAAG,sBAAsB,CAAC;gBACvD,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,IAAI,CAAC,WAAW;oBAAE,WAAW,GAAG,oBAAoB,CAAC;gBACrD,SAAS,EAAE,CAAC;YACd,CAAC,EAAE,6BAA6B,CAAC,cAAc,CAAC,CAAC,CAAC;YAClD,OAAO,CAAC,KAAK,EAAE,CAAC;YAEhB,MAAM,YAAY,GAAG,GAAS,EAAE;gBAC9B,aAAa,GAAG,IAAI,CAAC;gBACrB,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;YAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAQ,EAAE;gBACxC,IAAI,aAAa;oBAAE,OAAO;gBAC1B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACrE,YAAY,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;oBACvB,YAAY,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACtD,QAAQ,GAAG,KAAK,CAAC;oBACjB,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC,CAAC;YAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAQ,EAAE;gBACzC,SAAS,IAAI,IAAI,CAAC;gBAClB,IAAI,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACtC,OAAO,OAAO,IAAI,CAAC,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC5C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;oBACzC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBACpE,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpC,CAAC;gBACD,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,YAAY;oBAAE,YAAY,EAAE,CAAC;YACvE,CAAC,CAAC;YAEF,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,MAAM,IAAI,aAAa;oBAAE,OAAO;gBACpC,gBAAgB,IAAI,KAAK,CAAC,UAAU,CAAC;gBACrC,IAAI,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;oBAC3C,YAAY,EAAE,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,MAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;gBAC7B,IAAI,aAAa,IAAI,MAAM;oBAAE,OAAO;gBACpC,IAAI,CAAC;oBACH,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;4BACxC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;4BACxB,CAAC,CAAC,SAAS,CAAC;wBACd,SAAS,GAAG,EAAE,CAAC;wBACf,UAAU,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC3B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBACf,MAAM,CACJ,QAAQ,EAAE,IAAI,KAAK,OAAO;wBACxB,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAC/C,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,mCAAmC,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,KAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACjD,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,6BAA6B,CAAC,cAAsB;IAC3D,OAAO,cAAc,GAAG,KAAK,CAAC;AAChC,CAAC"}

package/dist/capabilities/shell-wire.d.ts

@@ -0,0 +1,13 @@
+export declare const CAPABILITY_EVENT_TYPES: readonly ["progress", "log", "result", "error"];
+export type CapabilityEventType = (typeof CAPABILITY_EVENT_TYPES)[number];
+export type CapabilityEvent = {
+    type: CapabilityEventType;
+    payload: Record<string, unknown>;
+};
+/**
+ * A capability process may emit only `{ type, payload }` JSONL frames. The
+ * payload intentionally remains application-defined, while the envelope stays
+ * fixed so a plugin cannot inject a new control message into the client.
+ */
+export declare function parseCapabilityEventLine(line: string): CapabilityEvent | null;
+//# sourceMappingURL=shell-wire.d.ts.map

package/dist/capabilities/shell-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-wire.d.ts","sourceRoot":"","sources":["../../src/capabilities/shell-wire.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,sBAAsB,iDAKzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC,CAAC;AAgCF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAuB7E"}

package/dist/capabilities/shell-wire.js

@@ -0,0 +1,60 @@
+export const CAPABILITY_EVENT_TYPES = [
+    "progress",
+    "log",
+    "result",
+    "error",
+];
+const UNSAFE_KEYS = new Set(["__proto__", "constructor", "prototype"]);
+const MAX_PAYLOAD_DEPTH = 16;
+function isPlainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function isJsonValue(value, depth = 0) {
+    if (value === null ||
+        typeof value === "string" ||
+        typeof value === "boolean" ||
+        (typeof value === "number" && Number.isFinite(value))) {
+        return true;
+    }
+    if (depth >= MAX_PAYLOAD_DEPTH || !value || typeof value !== "object") {
+        return false;
+    }
+    if (Array.isArray(value)) {
+        return value.every((item) => isJsonValue(item, depth + 1));
+    }
+    if (!isPlainObject(value))
+        return false;
+    return Object.entries(value).every(([key, item]) => !UNSAFE_KEYS.has(key) && isJsonValue(item, depth + 1));
+}
+/**
+ * A capability process may emit only `{ type, payload }` JSONL frames. The
+ * payload intentionally remains application-defined, while the envelope stays
+ * fixed so a plugin cannot inject a new control message into the client.
+ */
+export function parseCapabilityEventLine(line) {
+    let value;
+    try {
+        value = JSON.parse(line);
+    }
+    catch {
+        return null;
+    }
+    if (!isPlainObject(value) ||
+        Object.keys(value).length !== 2 ||
+        !Object.hasOwn(value, "type") ||
+        !Object.hasOwn(value, "payload") ||
+        typeof value.type !== "string" ||
+        !CAPABILITY_EVENT_TYPES.includes(value.type) ||
+        !isPlainObject(value.payload) ||
+        !isJsonValue(value.payload)) {
+        return null;
+    }
+    return {
+        type: value.type,
+        payload: value.payload,
+    };
+}
+//# sourceMappingURL=shell-wire.js.map

package/dist/capabilities/shell-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-wire.js","sourceRoot":"","sources":["../../src/capabilities/shell-wire.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,UAAU;IACV,KAAK;IACL,QAAQ;IACR,OAAO;CACC,CAAC;AASX,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACvE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5C,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,IAAI,iBAAiB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAChC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CACvE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,CAAC,aAAa,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;QAC7B,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC;QAChC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAA2B,CAAC;QACnE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAC3B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAA2B;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;AACJ,CAAC"}

package/dist/capabilities/types.d.ts

@@ -0,0 +1,46 @@
+export declare const CAPABILITY_CONTEXT_KEYS: readonly ["execution", "workspace", "projectConfig"];
+export type CapabilityContextKey = (typeof CAPABILITY_CONTEXT_KEYS)[number];
+export declare const CAPABILITY_PERMISSIONS: readonly ["workspace:write", "network"];
+export type CapabilityPermission = (typeof CAPABILITY_PERMISSIONS)[number];
+type JsonSchemaDescription = {
+    description?: string;
+};
+export type JsonSchema = JsonSchemaDescription & {
+    type: "object";
+    properties?: Record<string, JsonSchemaValue>;
+    required?: string[];
+    additionalProperties?: boolean;
+    minProperties?: number;
+    maxProperties?: number;
+};
+export type JsonSchemaValue = JsonSchema | (JsonSchemaDescription & {
+    type: "array";
+    items: JsonSchemaValue;
+    minItems?: number;
+    maxItems?: number;
+}) | (JsonSchemaDescription & {
+    type: "string";
+    minLength?: number;
+    maxLength?: number;
+}) | (JsonSchemaDescription & {
+    type: "number" | "integer";
+    minimum?: number;
+    maximum?: number;
+}) | (JsonSchemaDescription & {
+    type: "boolean" | "null";
+});
+/** A fixed plugin entrypoint. Hub input is JSON only; it is never a command. */
+export type ShellCapability = {
+    id: string;
+    entry: string;
+    inputSchema: JsonSchema;
+    contextKeys: CapabilityContextKey[];
+    permissions: CapabilityPermission[];
+    timeoutSeconds: number;
+};
+export type PolicyDecision = {
+    mode: "auto" | "approval" | "deny";
+    reason: string;
+};
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/capabilities/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/capabilities/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,sDAI1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,eAAO,MAAM,sBAAsB,yCAA0C,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE3E,KAAK,qBAAqB,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,MAAM,MAAM,UAAU,GAAG,qBAAqB,GAAG;IAC/C,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,CAAC,qBAAqB,GAAG;IACvB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,CAAC,qBAAqB,GAAG;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC,GACF,CAAC,qBAAqB,GAAG;IACvB,IAAI,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC,GACF,CAAC,qBAAqB,GAAG;IAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3D,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,UAAU,CAAC;IACxB,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC"}

package/dist/capabilities/types.js

@@ -0,0 +1,7 @@
+export const CAPABILITY_CONTEXT_KEYS = [
+    "execution",
+    "workspace",
+    "projectConfig",
+];
+export const CAPABILITY_PERMISSIONS = ["workspace:write", "network"];
+//# sourceMappingURL=types.js.map

package/dist/capabilities/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/capabilities/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,WAAW;IACX,WAAW;IACX,eAAe;CACP,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAU,CAAC"}

package/dist/cli/commands.d.ts

@@ -0,0 +1,83 @@
+import { startAgentControlServer, type AgentControlClient } from "../control.js";
+import { type CredentialStore } from "../credentials.js";
+import { type AgentConfig } from "../config.js";
+import { type AgentPaths } from "../paths.js";
+import { ClientStateStore } from "../client/state-store.js";
+import type { ClientTransport } from "../client/transport.js";
+import { type PlatformProbe, type RunnerManager } from "../runtime/index.js";
+type Writable = (line: string) => void;
+export type RuntimeProbeResult = {
+    id: string;
+    probe: PlatformProbe;
+};
+export type LocalAgentDaemon = {
+    health(): Promise<{
+        status: "ok" | "degraded" | "unpaired";
+    }>;
+    status(): Promise<Record<string, unknown>>;
+    sync(): Promise<void>;
+    close(): Promise<void>;
+    /** Resolves after an OS shutdown signal. Kept injectable so CLI tests never hang. */
+    wait(): Promise<void>;
+};
+export type UserServiceInput = {
+    platform: NodeJS.Platform;
+    homeDir: string;
+    configDir: string;
+    executable: string;
+};
+export type CliResult = {
+    exitCode: 0 | 1;
+    output: string[];
+};
+export type RunCliOptions = {
+    homeDir?: string;
+    configDir?: string;
+    platform?: NodeJS.Platform;
+    executable?: string;
+    uid?: number;
+    write?: Writable;
+    which?: (name: string) => Promise<string | null>;
+    probeRuntimes?: () => Promise<RuntimeProbeResult[]>;
+    createDaemon?: (options: LocalAgentDaemonOptions) => Promise<LocalAgentDaemon>;
+    createControlClient?: (endpoint: string) => AgentControlClient;
+    installService?: (input: UserServiceInput) => Promise<void>;
+    uninstallService?: (input: UserServiceInput) => Promise<void>;
+    restartService?: (input: UserServiceInput) => Promise<void>;
+    readLog?: (file: string) => Promise<string>;
+    followLog?: (file: string, write: Writable, signal?: AbortSignal) => Promise<void>;
+    signal?: AbortSignal;
+    credentials?: CredentialStore;
+};
+export type LocalAgentDaemonOptions = {
+    homeDir?: string;
+    configDir?: string;
+    platform?: NodeJS.Platform;
+    credentials?: CredentialStore;
+    createControlServer?: typeof startAgentControlServer;
+    createStore?: (stateDb: string) => ClientStateStore;
+    createTransport?: (input: {
+        hubBaseUrl: string;
+        token: string;
+        clientId: string;
+    }) => ClientTransport;
+    createRunner?: () => RunnerManager;
+    loadConfig?: (paths: Pick<AgentPaths, "configFile">) => AgentConfig;
+    mkdir?: (dir: string, options: {
+        recursive: true;
+    }) => Promise<string | undefined>;
+    readPluginManifest?: (file: string) => Promise<string>;
+};
+/**
+ * Testable command dispatcher. All system and local-daemon effects cross an
+ * explicit option port, so tests never register an actual user service.
+ */
+export declare function runCli(args: readonly string[], options?: RunCliOptions): Promise<CliResult>;
+/**
+ * Compose the local daemon once. The Unix control socket is acquired before
+ * SQLite and transports, which makes it the single-instance lock per Agent
+ * home. Shutdown closes control, transport, database, and active children.
+ */
+export declare function createLocalAgentDaemon(options?: LocalAgentDaemonOptions): Promise<LocalAgentDaemon>;
+export {};
+//# sourceMappingURL=commands.d.ts.map

package/dist/cli/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,uBAAuB,EACvB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAMtB,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAKjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAY7B,KAAK,QAAQ,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEvC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,aAAa,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,qFAAqF;IACrF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjD,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpD,YAAY,CAAC,EAAE,CACb,OAAO,EAAE,uBAAuB,KAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/B,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,kBAAkB,CAAC;IAC/D,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,QAAQ,EACf,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IACrD,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACpD,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,KAAK,eAAe,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,aAAa,CAAC;IACnC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,KAAK,WAAW,CAAC;IACpE,KAAK,CAAC,EAAE,CACN,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,KACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD,CAAC;AAgRF;;;GAGG;AACH,wBAAsB,MAAM,CAC1B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,SAAS,CAAC,CA0LpB;AA+DD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,gBAAgB,CAAC,CAyK3B"}