@anhlp/alp 0.0.1-beta.4 → 0.0.1-beta.6

package/packages/core/dist/profiles.js

@@ -1,122 +0,0 @@
-// packages/core/src/profiles.js
-import path from "node:path";
-import os from "node:os";
-import { createHash } from "node:crypto";
-import { MODELS } from "./models.js";
-import { resolveTeam, teamSources } from "./teams.js";
-var userLibrary = () => process.env.ALP_HOME ?? path.join(os.homedir(), ".alp");
-var oracleProfiles = (config) => config?.profiles ?? [config?.claude, config?.codex].filter(Boolean);
-var agentProfiles = (config, name) => {
-  if (!config) return [];
-  if (name === "oracle") return oracleProfiles(config).map(parseProfile);
-  const { autocompact, ...legacy } = config;
-  return (config.profiles ?? [legacy]).map(parseProfile);
-};
-var parseProfile = (profile) => {
-  if (typeof profile !== "string") return profile;
-  const [provider, model, effort] = profile.split(":");
-  return { provider, model, ...effort ? { effort } : {} };
-};
-var profileString = (profile) => `${profileModel(profile)}${profile.effort ? `:${profile.effort}` : ""}`;
-var modelEfforts = (id) => MODELS.find((model) => `${model.runtime}:${model.id}` === id)?.efforts;
-var fitEffort = (id, effort) => {
-  const efforts = modelEfforts(id);
-  if (!efforts?.length || efforts.includes(effort)) return effort;
-  return MODELS.find((model) => `${model.runtime}:${model.id}` === id)?.effort ?? efforts[0];
-};
-var anyModel = (profile) => profile?.model === "*";
-var offers = (profiles, model) => profiles.some((profile) => anyModel(profile) ? model.startsWith(`${profile.provider}:`) && model.length > profile.provider.length + 1 : profileModel(profile) === model);
-var selectedProfile = (profiles, model) => model === void 0 ? profiles.find((config) => !anyModel(config)) : profiles.find((config) => !anyModel(config) && (!config.model || profileModel(config) === model || !model.includes(":") && config.model === model));
-function normalizeAgentProfiles(config, name) {
-  if (config.profiles) return { ...config, profiles: config.profiles.map((profile) => typeof profile === "string" ? profile : profileString(profile)), autocompact: config.autocompact ?? "auto" };
-  const profiles = agentProfiles(config, name);
-  if (!profiles.length || profiles.some((profile) => !profile.model)) return config;
-  return { profiles: profiles.map((profile) => profileString({ ...profile, provider: profile.provider ?? profile.model.split(":")[0] })), autocompact: config.autocompact ?? "auto" };
-}
-var profileModel = (config) => config?.model ? config.model.includes(":") ? config.model : `${config.provider}:${config.model}` : void 0;
-var withEffort = (model, effort) => {
-  if (model.startsWith("acp:") || model.startsWith("antigravity:")) return model;
-  const fitted = fitEffort(model, effort);
-  return fitted ? `${model}:${fitted}` : model;
-};
-async function projectProfiles({ root, library = userLibrary(), templates, runtime, teamIds } = {}) {
-  const profiles = {};
-  for (const id of (await teamSources(root, { library, templates })).keys()) {
-    if (teamIds && !teamIds.includes(id)) continue;
-    const team = await resolveTeam(root, id, { library, templates });
-    const fallback = team.members[team.main].model ?? "codex:gpt-6.1-sol";
-    const profile = {};
-    for (const [name, member] of Object.entries(team.members)) {
-      if (name === "oracle") continue;
-      const chosen = runtime?.model ? runtime.model.includes(":") ? runtime.model : `${runtime.provider ?? "codex"}:${runtime.model}` : runtime?.provider ? runtime.provider === "claude" ? "claude:claude-opus-5-5" : "codex:gpt-6.1-sol" : member.model ?? fallback;
-      profile[name] = { profiles: [withEffort(chosen, runtime?.reasoning ?? member.thinking ?? team.members[team.main].thinking ?? "medium")], autocompact: "auto" };
-    }
-    if (team.supervisor) profile[team.supervisor.agent] = { profiles: [withEffort(team.supervisor.model ?? fallback, team.supervisor.thinking ?? "medium")], autocompact: "auto" };
-    if (team.members.oracle) profile.oracle = { profiles: (team.oracleModels ?? ["claude:claude-fable-5-1", "codex:gpt-6-astra"]).map((model) => withEffort(model, team.oracleThinking?.[model] ?? team.oracleThinking?.[model.split(":")[0]] ?? "high")), autocompact: "auto" };
-    profiles[id] = profile;
-  }
-  return profiles;
-}
-function applyProfile(team, profile) {
-  if (!profile) return team;
-  const next = structuredClone(team);
-  for (const [name, config] of Object.entries(profile)) {
-    if (name === "oracle") {
-      const lenses = oracleProfiles(config).map(parseProfile);
-      next.oracleModels = lenses.map(profileModel);
-      const efforts = lenses.filter((lens) => lens.effort);
-      if (efforts.length) next.oracleThinking = { ...next.oracleThinking, ...Object.fromEntries(efforts.map((lens) => [profileModel(lens), lens.effort])) };
-    } else {
-      const target = next.members[name] ?? (next.supervisor && next.supervisor.agent === name ? next.supervisor : void 0);
-      if (!target) throw new Error(`team.${team.id}.${name}: agent is not in this team`);
-      const first = agentProfiles(config, name).find((profile2) => !anyModel(profile2));
-      if (first?.model) target.model = profileModel(first);
-      if (first?.effort) target.thinking = first.effort;
-    }
-  }
-  return next;
-}
-var profileFingerprint = (config, name) => createHash("sha256").update(JSON.stringify(agentProfiles(config, name).map(profileString))).digest("hex");
-var profileDefaults = (profiles) => Object.fromEntries(Object.entries(profiles).map(([team, agents]) => [team, Object.fromEntries(Object.entries(agents).map(([name, config]) => [name, profileFingerprint(config, name)]))]));
-async function syncTemplateProfiles(settings, options = {}) {
-  const defaults = await projectProfiles({ ...options, runtime: options.replaceModels ? void 0 : settings.runtime });
-  const legacy = settings.templateDefaults ? void 0 : await projectProfiles({ templates: options.templates, library: "", runtime: settings.runtime });
-  const previous = settings.templateDefaults ?? profileDefaults(legacy);
-  const next = structuredClone(settings);
-  next.team = { ...next.profile ?? {}, ...next.team ?? {} };
-  delete next.profile;
-  for (const id of /* @__PURE__ */ new Set([...Object.keys(previous), ...Object.keys(defaults)])) {
-    if (options.teamIds && !options.teamIds.includes(id)) continue;
-    const desired = defaults[id] ?? {};
-    const current = next.team[id] ?? {};
-    for (const name of /* @__PURE__ */ new Set([...Object.keys(previous[id] ?? {}), ...options.replaceModels ? Object.keys(current) : [], ...Object.keys(desired)])) {
-      const config = current[name];
-      if (!options.replaceModels && config && profileFingerprint(config, name) !== previous[id]?.[name]) continue;
-      if (desired[name]) current[name] = { ...desired[name], autocompact: config?.autocompact ?? desired[name].autocompact };
-      else delete current[name];
-    }
-    if (Object.keys(current).length) next.team[id] = current;
-    else delete next.team[id];
-  }
-  next.templateDefaults = options.teamIds ? { ...previous, ...profileDefaults(defaults) } : profileDefaults(defaults);
-  return next;
-}
-export {
-  agentProfiles,
-  anyModel,
-  applyProfile,
-  fitEffort,
-  modelEfforts,
-  normalizeAgentProfiles,
-  offers,
-  oracleProfiles,
-  parseProfile,
-  profileDefaults,
-  profileFingerprint,
-  profileModel,
-  profileString,
-  projectProfiles,
-  selectedProfile,
-  syncTemplateProfiles,
-  userLibrary
-};

package/packages/core/dist/promptsafe.d.ts

@@ -1 +0,0 @@
-export function promptSafe<T>(text: T): T;

package/packages/core/dist/promptsafe.js

@@ -1,13 +0,0 @@
-// packages/core/src/promptsafe.js
-var TAG = /<\s*\/?\s*system-reminder\b[^>]*>/gi;
-function promptSafe(text) {
-  if (typeof text !== "string") return text;
-  for (let current = text; ; ) {
-    const next = current.replace(TAG, "");
-    if (next === current) return next;
-    current = next;
-  }
-}
-export {
-  promptSafe
-};

package/packages/core/dist/providers.d.ts

@@ -1,90 +0,0 @@
-/** Checks a provider definition. */
-export function validateProvider(config: any, source: any, id: any): any;
-/**
- * A provider of the library, with its id; undefined when there is none.
- * @returns {Promise<{ id: string, kind: 'acp' | 'antigravity', label: string, description?: string, command: string, args: string[], env: Record<string, string>, models?: Array<{ id: string, label?: string, description?: string }>, additionalModels?: Array<{ id: string, label?: string, description?: string }>, enabled?: boolean, params?: Record<string, unknown>, readOnlyMode?: 'instructions' | 'reject' } | undefined>}
- */
-export function loadProvider(library: any, id: any): Promise<{
-    id: string;
-    kind: "acp" | "antigravity";
-    label: string;
-    description?: string;
-    command: string;
-    args: string[];
-    env: Record<string, string>;
-    models?: Array<{
-        id: string;
-        label?: string;
-        description?: string;
-    }>;
-    additionalModels?: Array<{
-        id: string;
-        label?: string;
-        description?: string;
-    }>;
-    enabled?: boolean;
-    params?: Record<string, unknown>;
-    readOnlyMode?: "instructions" | "reject";
-} | undefined>;
-/** Every provider of the library, by id. */
-export function listProviders(library: any): Promise<{
-    id: string;
-    kind: "acp" | "antigravity";
-    label: string;
-    description?: string;
-    command: string;
-    args: string[];
-    env: Record<string, string>;
-    models?: Array<{
-        id: string;
-        label?: string;
-        description?: string;
-    }>;
-    additionalModels?: Array<{
-        id: string;
-        label?: string;
-        description?: string;
-    }>;
-    enabled?: boolean;
-    params?: Record<string, unknown>;
-    readOnlyMode?: "instructions" | "reject";
-}[]>;
-/**
- * Splits an ACP model id, `<provider>` or `<provider>/<model>`, as resolveSession keeps it
- * after the `acp:` prefix.
- */
-export function acpModel(model: any): {
-    provider: any;
-    model: any;
-};
-/**
- * How to start a command without a shell. On Windows a bare name installed with npm is a
- * `<name>.cmd` shim, which spawn refuses to run without one; its target runs instead: the
- * native executable it calls, or the Node script, under this Node. A bare name with an .exe or
- * .com on PATH, any other command, and every command elsewhere are returned as they are.
- * @param {string} command @param {string[]} [args] @param {Record<string, string | undefined>} [env]
- * @returns {{ command: string, args: string[] }}
- */
-export function launchCommand(command: string, args?: string[], env?: Record<string, string | undefined>): {
-    command: string;
-    args: string[];
-};
-/**
- * ACP providers (ALPD §46): agents that speak the Agent Client Protocol, such as Gemini
- * CLI or opencode, defined in the user's library as providers/<id>.json. An agent runs
- * on one with `provider: "<id>"` in its agent.json, or with the model `acp:<id>` or
- * `acp:<id>/<model>`. Providers live only in the library: a project's would run a
- * command from its repository on the user's machine.
- *
- *   { "kind": "acp", "label": "Gemini", "command": "gemini", "args": ["--experimental-acp"],
- *     "env": {}, "models": [{ "id": "gemini-2.5-pro" }] }
- *
- * The web app's Providers screen (ALPD §65) adds `enabled` (false turns it off), `additionalModels`
- * (added to the models the agent reports, where `models` replaces them) and `params`, which
- * Paseo's catalog carries and ALP keeps without using.
- */
-export const PROVIDER_SETTINGS: string[];
-/** Runtimes ALP has built in; no provider takes their names. */
-export const BUILTIN_RUNTIMES: string[];
-/** Names no provider takes: the runtimes, and `alp`, which the web app lists ALP's teams under. */
-export const RESERVED_PROVIDERS: string[];

package/packages/core/dist/providers.js

@@ -1,101 +0,0 @@
-// packages/core/src/providers.js
-import { existsSync, readFileSync } from "node:fs";
-import { readdir, readFile } from "node:fs/promises";
-import path from "node:path";
-import { AlpError } from "./errors.js";
-import { settingsKeys, unknownMessage } from "./validation.js";
-var PROVIDER_SETTINGS = ["$schema", "kind", "label", "description", "command", "args", "env", "models", "additionalModels", "enabled", "params", "readOnlyMode"];
-var BUILTIN_RUNTIMES = ["codex", "claude", "acp", "antigravity"];
-var RESERVED_PROVIDERS = [...BUILTIN_RUNTIMES, "alp"];
-var object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var nonempty = (value) => typeof value === "string" && value.trim().length > 0;
-var validId = (id) => typeof id === "string" && /^[\w.-]+$/.test(id) && id !== "." && id !== "..";
-function validateProvider(config, source, id) {
-  const check = (ok, message) => {
-    if (!ok) throw new AlpError("INVALID_PROVIDER", `${source}: ${message}`);
-  };
-  if (id !== void 0) check(validId(id) && (!RESERVED_PROVIDERS.includes(id) || id === "antigravity" && config?.kind === "antigravity"), `'${id}' cannot name a provider: ${RESERVED_PROVIDERS.join(", ")} are taken`);
-  check(object(config), "expected an object");
-  const { unknown } = settingsKeys(config, PROVIDER_SETTINGS);
-  check(!unknown.length, unknown.length ? unknownMessage(unknown[0], PROVIDER_SETTINGS) : "");
-  check(["acp", "antigravity"].includes(config.kind), 'kind must be "acp" or "antigravity"');
-  if (config.kind === "antigravity" && id !== void 0) check(id === "antigravity", "Antigravity must use provider ID antigravity");
-  if (config.readOnlyMode !== void 0) check(config.kind === "antigravity" && ["instructions", "reject"].includes(config.readOnlyMode), 'readOnlyMode is only for Antigravity and must be "instructions" or "reject"');
-  for (const key of ["label", "description"]) if (config[key] !== void 0) check(typeof config[key] === "string", `${key} must be a string`);
-  check(nonempty(config.command), "command must be a nonempty string");
-  if (config.args !== void 0) check(Array.isArray(config.args) && config.args.every((arg) => typeof arg === "string"), "args must be a list of strings");
-  if (config.env !== void 0) check(object(config.env) && Object.values(config.env).every((value) => typeof value === "string"), "env must map names to strings");
-  for (const key of ["models", "additionalModels"]) {
-    if (config[key] === void 0) continue;
-    check(Array.isArray(config[key]) && config[key].every((model) => object(model) && nonempty(model.id) && !/\s/.test(model.id) && Object.keys(model).every((field) => ["id", "label", "description"].includes(field)) && ["label", "description"].every((field) => model[field] === void 0 || typeof model[field] === "string")), `${key} must list { id, label?, description? }`);
-    check(new Set(config[key].map((model) => model.id)).size === config[key].length, `${key} lists an id twice`);
-  }
-  if (config.enabled !== void 0) check(typeof config.enabled === "boolean", "enabled must be true or false");
-  if (config.params !== void 0) check(object(config.params), "params must be an object");
-  return config;
-}
-async function loadProvider(library, id) {
-  if (!library || !validId(id) || RESERVED_PROVIDERS.includes(id) && id !== "antigravity") return void 0;
-  const file = path.join(library, "providers", `${id}.json`);
-  let text;
-  try {
-    text = await readFile(file, "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT") return void 0;
-    throw error;
-  }
-  let config;
-  try {
-    config = JSON.parse(text);
-  } catch (cause) {
-    throw new AlpError("INVALID_PROVIDER", `${file}: ${cause.message}`, { cause });
-  }
-  validateProvider(config, file, id);
-  const command = /[\\/]/.test(config.command) ? path.resolve(path.dirname(file), config.command) : config.command;
-  return { id, ...config, label: config.label ?? id, command, args: config.args ?? [], env: config.env ?? {} };
-}
-async function listProviders(library) {
-  if (!library) return [];
-  let names = [];
-  try {
-    names = await readdir(path.join(library, "providers"));
-  } catch (error) {
-    if (error.code !== "ENOENT") throw error;
-  }
-  const providers = [];
-  for (const name of names.filter((name2) => name2.endsWith(".json")).sort()) {
-    const provider = await loadProvider(library, name.slice(0, -5));
-    if (provider) providers.push(provider);
-  }
-  return providers;
-}
-function acpModel(model) {
-  const slash = model.indexOf("/");
-  return slash < 0 ? { provider: model, model: void 0 } : { provider: model.slice(0, slash), model: model.slice(slash + 1) || void 0 };
-}
-function launchCommand(command, args = [], env = process.env) {
-  if (process.platform !== "win32" || /[\\/]/.test(command) || path.extname(command)) return { command, args };
-  const key = Object.keys(env).find((name) => name.toUpperCase() === "PATH");
-  for (const directory of (key ? env[key] ?? "" : "").split(";").filter(Boolean)) {
-    if ([".exe", ".com"].some((extension) => existsSync(path.join(directory, command + extension)))) break;
-    const shim = path.join(directory, `${command}.cmd`);
-    if (!existsSync(shim)) continue;
-    const text = readFileSync(shim, "utf8");
-    const script = /"%_prog%"((?:\s+[^\s"]+)*)\s+"%~?dp0%\\?([^"]+)"\s+%\*/i.exec(text);
-    if (script) return { command: process.execPath, args: [...script[1].split(/\s+/).filter(Boolean), path.join(directory, script[2]), ...args] };
-    const native = /^\s*"%~?dp0%\\?([^"]+\.(?:exe|com))"\s+%\*/im.exec(text);
-    if (native) return { command: path.join(directory, native[1]), args };
-    break;
-  }
-  return { command, args };
-}
-export {
-  BUILTIN_RUNTIMES,
-  PROVIDER_SETTINGS,
-  RESERVED_PROVIDERS,
-  acpModel,
-  launchCommand,
-  listProviders,
-  loadProvider,
-  validateProvider
-};

package/packages/core/dist/resolver.d.ts

@@ -1,41 +0,0 @@
-export function optionalText(file: any): Promise<string | undefined>;
-export function jsonObject(file: any, code: any): Promise<any>;
-/** A shipped template file, from `templates` when given (bundles embed them), else from the package. */
-export function builtinText(relative: any, templates: any): Promise<any>;
-/**
- * Where each agent comes from (ALPD §41): ALP's built-ins, then the user's library
- * (`library`, ALP_HOME), then the project's `.alp/agents`. A later layer replaces an
- * agent of the same name entirely.
- * @returns {Promise<Map<string, { source: 'builtin' | 'library' | 'project', directory?: string, overrides?: 'builtin' | 'library' }>>}
- */
-export function agentSources(root: any, { library, templates }?: {}): Promise<Map<string, {
-    source: "builtin" | "library" | "project";
-    directory?: string;
-    overrides?: "builtin" | "library";
-}>>;
-export function discoverAgents(root: any, options?: {}): Promise<string[]>;
-/**
- * Every entry of one kind with where it comes from (ALPD §41): `agents`, `skills`, `mcp`
- * or `hooks`. A project entry overrides a library one of the same name. `usedBy` lists
- * the agents that name a skill, MCP server or hook; for skills it includes the roles
- * role-skills.json gives it.
- * @returns {Promise<Array<{ name: string, source: 'builtin' | 'library' | 'project', path?: string, overrides?: 'builtin' | 'library', description?: string, usedBy?: string[] }>>}
- */
-export function libraryEntries(kind: any, projectRoot: any, { library, templates }?: {}): Promise<Array<{
-    name: string;
-    source: "builtin" | "library" | "project";
-    path?: string;
-    overrides?: "builtin" | "library";
-    description?: string;
-    usedBy?: string[];
-}>>;
-/**
- * `library` is the user's library (ALP_HOME): its agents and the skills, MCP servers and
- * hooks agents name. The agent's own skills/ directory replaces a skill of the same name.
- * @returns {Promise<import('./types.js').ResolvedAgent>}
- */
-export function resolveAgent(projectRoot: any, { agent, library, templates }?: {}): Promise<import("./types.js").ResolvedAgent>;
-export { AlpError } from "./errors.js";
-/** The agents ALP ships; their files come from the package's templates. */
-export const BUILTIN_AGENTS: string[];
-export const LIBRARY_KINDS: string[];

package/packages/core/dist/resolver.js

@@ -1,240 +0,0 @@
-// packages/core/src/resolver.js
-import { shippedTemplateRoot } from "./template-path.js";
-import { readFile, readdir, stat } from "node:fs/promises";
-import path from "node:path";
-import { AlpError } from "./errors.js";
-import { validateAgentConfig, validateHook, validateSettings, normalizeMcp, validateResolvedAgent } from "./validation.js";
-import { librarySkills } from "./library.js";
-import { AlpError as AlpError2 } from "./errors.js";
-async function optionalText(file) {
-  try {
-    return await readFile(file, "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT") return void 0;
-    throw error;
-  }
-}
-async function jsonObject(file, code) {
-  const text = await optionalText(file);
-  if (text === void 0) return {};
-  try {
-    const value = JSON.parse(text);
-    if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("expected a JSON object");
-    return value;
-  } catch (cause) {
-    throw new AlpError(code, `${file}: ${cause.message}`, { cause });
-  }
-}
-async function entries(directory) {
-  try {
-    return (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name));
-  } catch (error) {
-    if (error.code === "ENOENT") return [];
-    throw error;
-  }
-}
-var BUILTIN_AGENTS = ["main", "lead", "peer", "oracle", "reviewer", "supervisor"];
-var templateRoot = () => {
-  try {
-    return shippedTemplateRoot();
-  } catch {
-    return void 0;
-  }
-};
-var validName = (name) => typeof name === "string" && /^[\w.-]+$/.test(name) && name !== "." && name !== "..";
-async function builtinText(relative, templates) {
-  if (templates) return templates[relative];
-  const root = templateRoot();
-  if (!root) return void 0;
-  try {
-    return await readFile(new URL(relative, root), "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT" || error.code === "ENOTDIR") return void 0;
-    throw error;
-  }
-}
-async function agentSources(root, { library, templates } = {}) {
-  const found = /* @__PURE__ */ new Map();
-  for (const name of BUILTIN_AGENTS) if (await builtinText(`agents/${name}/AGENT.md`, templates) !== void 0) found.set(name, { source: "builtin" });
-  const layer = async (directory, source) => {
-    for (const entry of await entries(directory)) {
-      if (!entry.isDirectory() || !validName(entry.name)) continue;
-      if (source === "library" && await optionalText(path.join(directory, entry.name, "AGENT.md")) === void 0) continue;
-      const previous = found.get(entry.name);
-      found.set(entry.name, { source, directory: path.join(directory, entry.name), ...previous ? { overrides: previous.source } : {} });
-    }
-  };
-  if (library) await layer(path.join(library, "agents"), "library");
-  if (root !== void 0) await layer(path.join(path.resolve(root), ".alp", "agents"), "project");
-  return found;
-}
-async function discoverAgents(root, options = {}) {
-  return [...(await agentSources(root, options)).keys()].sort((a, b) => a.localeCompare(b));
-}
-var KINDS = {
-  skills: (name) => path.join(name, "SKILL.md"),
-  mcp: (name) => `${name}.json`,
-  hooks: (name) => `${name}.json`,
-  // ACP providers (ALPD §46) live only in the library.
-  providers: (name) => `${name}.json`
-};
-var LIBRARY_KINDS = ["agents", ...Object.keys(KINDS)];
-async function libraryEntries(kind, projectRoot, { library, templates } = {}) {
-  const root = projectRoot === void 0 ? void 0 : path.resolve(projectRoot);
-  if (kind === "agents") {
-    const rows = [];
-    for (const [name, source] of await agentSources(root, { library, templates })) {
-      const text = source.directory ? await optionalText(path.join(source.directory, "agent.json")) : await builtinText(`agents/${name}/agent.json`, templates);
-      let description;
-      try {
-        description = text === void 0 ? void 0 : JSON.parse(text).description;
-      } catch {
-      }
-      rows.push({ name, source: source.source, ...source.directory ? { path: source.directory } : {}, ...source.overrides ? { overrides: source.overrides } : {}, ...typeof description === "string" ? { description } : {} });
-    }
-    return rows.sort((a, b) => a.name.localeCompare(b.name));
-  }
-  const file = KINDS[kind];
-  if (!file) throw new AlpError("INVALID_KIND", `Unknown library kind '${kind}'; use one of ${LIBRARY_KINDS.join(", ")}`);
-  const found = /* @__PURE__ */ new Map();
-  const layer = async (directory, source) => {
-    for (const entry of await entries(directory)) {
-      const name = kind === "skills" ? entry.isDirectory() ? entry.name : void 0 : entry.isFile() && entry.name.endsWith(".json") ? entry.name.slice(0, -5) : void 0;
-      if (!name || !validName(name)) continue;
-      const entryPath = path.join(directory, file(name));
-      if (!await stat(entryPath).then((info) => info.isFile(), () => false)) continue;
-      const previous = found.get(name);
-      found.set(name, { name, source, path: entryPath, ...previous ? { overrides: previous.source } : {} });
-    }
-  };
-  if (library) await layer(path.join(library, kind), "library");
-  if (root !== void 0 && kind !== "providers") await layer(path.join(root, ".alp", kind), "project");
-  const users = /* @__PURE__ */ new Map();
-  const use = (name, agent) => users.set(name, [.../* @__PURE__ */ new Set([...users.get(name) ?? [], agent])]);
-  for (const [agent, source] of await agentSources(root, { library, templates })) {
-    const text = source.directory ? await optionalText(path.join(source.directory, "agent.json")) : await builtinText(`agents/${agent}/agent.json`, templates);
-    try {
-      const config = text === void 0 ? {} : JSON.parse(text);
-      for (const name of kind === "providers" ? [config.provider].filter(Boolean) : config[kind] ?? []) use(name, agent);
-    } catch {
-    }
-  }
-  if (kind === "skills" && library) {
-    try {
-      for (const [role, names] of Object.entries(JSON.parse(await optionalText(path.join(library, "role-skills.json")) ?? "{}"))) for (const name of Array.isArray(names) ? names : []) use(name, role);
-    } catch {
-    }
-  }
-  return [...found.values()].map((row) => ({ ...row, ...users.has(row.name) ? { usedBy: users.get(row.name).sort() } : {} })).sort((a, b) => a.name.localeCompare(b.name));
-}
-async function namedEntry(root, library, kind, name, file) {
-  const candidates = [path.join(root, ".alp", kind, file(name)), ...library ? [path.join(library, kind, file(name))] : []];
-  for (const candidate of candidates) if (await stat(candidate).then((info) => info.isFile(), () => false)) return candidate;
-  return void 0;
-}
-async function resolveAgent(projectRoot, { agent, library, templates } = {}) {
-  const root = path.resolve(projectRoot);
-  const settingsPath = path.join(root, ".alp", "settings.json");
-  const settings = await jsonObject(settingsPath, "INVALID_SETTINGS");
-  const projectRuntime = validateSettings(settings, settingsPath);
-  const name = agent ?? settings.defaultAgent ?? "main";
-  if (typeof name !== "string" || !name.trim() || name === "." || name === ".." || /[\\/\x00]/.test(name)) {
-    throw new AlpError("INVALID_AGENT", "Agent name must be a single nonempty directory name");
-  }
-  const source = (await agentSources(root, { library, templates })).get(name);
-  if (!source) throw new AlpError("AGENT_NOT_FOUND", `Agent '${name}' not found: it is not built in, nor under ${library ? `${path.join(library, "agents")} or ` : ""}${path.join(root, ".alp", "agents")}`);
-  const directory = source.directory;
-  const agentPath = directory ? path.join(directory, "AGENT.md") : `built-in agents/${name}/AGENT.md`;
-  const instructions = directory ? await optionalText(agentPath) : await builtinText(`agents/${name}/AGENT.md`, templates);
-  if (instructions === void 0) throw new AlpError("AGENT_INSTRUCTIONS_MISSING", `Missing ${agentPath}`);
-  const configPath = directory ? path.join(directory, "agent.json") : `built-in agents/${name}/agent.json`;
-  const configText = directory ? await optionalText(configPath) : await builtinText(`agents/${name}/agent.json`, templates);
-  let config = {};
-  if (configText !== void 0) {
-    try {
-      config = JSON.parse(configText);
-    } catch (cause) {
-      throw new AlpError("INVALID_AGENT_CONFIG", `${configPath}: ${cause.message}`, { cause });
-    }
-  }
-  validateAgentConfig(config, configPath);
-  const skills = [];
-  for (const skill of library ? await librarySkills(library, name) : []) {
-    skills.push({ name: skill.name, path: await namedEntry(root, void 0, "skills", skill.name, (entry) => path.join(entry, "SKILL.md")) ?? skill.path });
-  }
-  const addSkill = (skillName, skillPath) => {
-    const shadowed = skills.findIndex((skill) => skill.name === skillName);
-    if (shadowed >= 0) skills.splice(shadowed, 1);
-    skills.push({ name: skillName, path: skillPath });
-  };
-  for (const skillName of config.skills ?? []) {
-    const skillPath = await namedEntry(root, library, "skills", skillName, (entry) => path.join(entry, "SKILL.md"));
-    if (!skillPath) throw new AlpError("SKILL_NOT_FOUND", `${configPath}: skill '${skillName}' is neither in ${path.join(root, ".alp", "skills")} nor in the library`);
-    addSkill(skillName, skillPath);
-  }
-  if (directory) {
-    for (const entry of await entries(path.join(directory, "skills"))) {
-      if (!entry.isDirectory()) continue;
-      const skillPath = path.join(directory, "skills", entry.name, "SKILL.md");
-      try {
-        if ((await stat(skillPath)).isFile()) addSkill(entry.name, skillPath);
-      } catch (error) {
-        if (error.code !== "ENOENT") throw error;
-      }
-    }
-  }
-  skills.sort((a, b) => a.name.localeCompare(b.name));
-  const hooks = directory ? (await entries(path.join(directory, "hooks"))).filter((e) => e.isFile()).map((e) => ({ name: e.name, path: path.join(directory, "hooks", e.name) })) : [];
-  for (const hookName of config.hooks ?? []) {
-    const hookPath = await namedEntry(root, library, "hooks", hookName, (entry) => `${entry}.json`);
-    if (!hookPath) throw new AlpError("HOOK_NOT_FOUND", `${configPath}: hook '${hookName}' is neither in ${path.join(root, ".alp", "hooks")} nor in the library`);
-    validateHook(await jsonObject(hookPath, "INVALID_HOOK"), hookPath);
-    hooks.push({ name: hookName, path: hookPath });
-  }
-  const servers = {};
-  for (const serverName of config.mcp ?? []) {
-    const serverPath = await namedEntry(root, library, "mcp", serverName, (entry) => `${entry}.json`);
-    if (!serverPath) throw new AlpError("MCP_NOT_FOUND", `${configPath}: MCP server '${serverName}' is neither in ${path.join(root, ".alp", "mcp")} nor in the library`);
-    const definition = await jsonObject(serverPath, "INVALID_MCP");
-    Object.assign(servers, normalizeMcp({ mcpServers: { [serverName]: definition } }, path.dirname(serverPath), serverPath).mcpServers);
-  }
-  const mcpPath = directory ? path.join(directory, ".mcp.json") : void 0;
-  const own = mcpPath ? normalizeMcp(await jsonObject(mcpPath, "INVALID_MCP"), directory, mcpPath).mcpServers : {};
-  for (const [serverName, server] of Object.entries(own)) {
-    if (Object.hasOwn(servers, serverName)) throw new AlpError("INVALID_MCP", `${mcpPath}: MCP server '${serverName}' is also named in ${configPath}`);
-    servers[serverName] = server;
-  }
-  const runtime = {
-    ...config.provider !== void 0 ? { provider: config.provider } : {},
-    ...config.model !== void 0 ? { model: config.model } : {},
-    ...config.thinking !== void 0 ? { reasoning: config.thinking } : {},
-    ...projectRuntime
-  };
-  return validateResolvedAgent({
-    name,
-    projectRoot: root,
-    source: source.source,
-    instructions: { project: await optionalText(path.join(root, "ALP.md")) ?? "", agent: instructions },
-    skills,
-    hooks,
-    runtime,
-    projectRuntime: { ...projectRuntime },
-    ...config.mode !== void 0 ? { mode: config.mode } : {},
-    ...config.description !== void 0 ? { description: config.description } : {},
-    ...typeof config.context === "number" ? { context: config.context } : {},
-    ...config.autocompact !== void 0 ? { autocompact: config.autocompact } : {},
-    mcp: { mcpServers: servers }
-  });
-}
-export {
-  AlpError2 as AlpError,
-  BUILTIN_AGENTS,
-  LIBRARY_KINDS,
-  agentSources,
-  builtinText,
-  discoverAgents,
-  jsonObject,
-  libraryEntries,
-  optionalText,
-  resolveAgent
-};

package/packages/core/dist/safe-path.d.ts

@@ -1,2 +0,0 @@
-/** Preflight static repository paths. Does not isolate concurrent same-user processes. */
-export function assertNoSymlinks(directory: any, relative: any): Promise<void>;

package/packages/core/dist/safe-path.js

@@ -1,24 +0,0 @@
-// packages/core/src/safe-path.js
-import { lstat } from "node:fs/promises";
-import path from "node:path";
-import { AlpError } from "./errors.js";
-async function assertNoSymlinks(directory, relative) {
-  const root = path.resolve(directory);
-  const target = path.resolve(root, relative);
-  const tail = path.relative(root, target);
-  if (tail === ".." || tail.startsWith(`..${path.sep}`) || path.isAbsolute(tail)) {
-    throw new AlpError("UNSAFE_PATH", "Path escapes its scope");
-  }
-  let current = root;
-  for (const part of ["", ...tail.split(path.sep).filter(Boolean)]) {
-    if (part) current = path.join(current, part);
-    const info = await lstat(current).catch((error) => {
-      if (error.code !== "ENOENT") throw error;
-    });
-    if (!info) return;
-    if (info.isSymbolicLink()) throw new AlpError("UNSAFE_PATH", `Refusing symlink in scoped path: ${current}`);
-  }
-}
-export {
-  assertNoSymlinks
-};

package/packages/core/dist/shell.d.ts

@@ -1,16 +0,0 @@
-/**
- * Starts `command` through the platform's shell: /bin/sh -c in its own process group, or on
- * Windows cmd.exe /d /s /c with the line quoted whole (cmd strips only the outermost quotes,
- * and Node would otherwise escape the quotes inside it).
- * @param {string} command
- * @param {import('node:child_process').SpawnOptions} options
- */
-export function spawnShell(command: string, options: import("node:child_process").SpawnOptions): import("child_process").ChildProcess;
-/**
- * Signals a command `spawnShell` started and everything it started. Windows has no signals and
- * cmd.exe's children outlive it, so there the whole tree is ended at once by the first signal
- * and no cleanup runs.
- * @param {import('node:child_process').ChildProcess} child
- * @param {NodeJS.Signals} name
- */
-export function signalShell(child: import("node:child_process").ChildProcess, name: NodeJS.Signals): void;