@cjhyy/code-shell-core 0.7.1 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (594) hide show
  1. package/README.md +36 -23
  2. package/dist/agent/agent-definition-registry.d.ts +2 -2
  3. package/dist/agent/agent-definition-registry.js +47 -10
  4. package/dist/agent/agent-definition.d.ts +5 -0
  5. package/dist/agent/agent-definition.js +14 -0
  6. package/dist/automation/index.d.ts +7 -4
  7. package/dist/automation/index.js +4 -2
  8. package/dist/automation/runner.js +3 -1
  9. package/dist/automation/scheduler.d.ts +57 -1
  10. package/dist/automation/scheduler.js +123 -23
  11. package/dist/automation/store.d.ts +6 -2
  12. package/dist/automation/store.js +7 -3
  13. package/dist/capabilities/index.d.ts +109 -0
  14. package/dist/capabilities/index.js +80 -0
  15. package/dist/capability-control/disabled-lists.d.ts +2 -1
  16. package/dist/capability-control/disabled-lists.js +3 -5
  17. package/dist/capability-control/overlay.d.ts +14 -1
  18. package/dist/capability-control/overlay.js +40 -0
  19. package/dist/capability-control/service.js +6 -4
  20. package/dist/cli/agent-server-stdio.d.ts +1 -1
  21. package/dist/cli/agent-server-stdio.js +66 -6
  22. package/dist/cli/agent-server-tcp.js +7 -3
  23. package/dist/context/compaction.d.ts +39 -3
  24. package/dist/context/compaction.js +151 -39
  25. package/dist/context/manager.d.ts +17 -1
  26. package/dist/context/manager.js +36 -1
  27. package/dist/credentials/access.d.ts +3 -1
  28. package/dist/credentials/access.js +24 -3
  29. package/dist/credentials/index.d.ts +1 -1
  30. package/dist/credentials/index.js +1 -1
  31. package/dist/credentials/oauth.d.ts +4 -1
  32. package/dist/credentials/oauth.js +14 -0
  33. package/dist/credentials/store.d.ts +15 -1
  34. package/dist/credentials/store.js +17 -4
  35. package/dist/credentials/types.d.ts +24 -0
  36. package/dist/credentials/use-credential-tool.js +15 -1
  37. package/dist/engine/auxiliary-pipeline.d.ts +40 -0
  38. package/dist/engine/auxiliary-pipeline.js +181 -0
  39. package/dist/{settings → engine}/disk-defaults.d.ts +2 -2
  40. package/dist/{settings → engine}/disk-defaults.js +5 -2
  41. package/dist/engine/dynamic-tool-defs.d.ts +4 -0
  42. package/dist/engine/dynamic-tool-defs.js +4 -0
  43. package/dist/engine/engine.d.ts +254 -195
  44. package/dist/engine/engine.js +1812 -2041
  45. package/dist/engine/file-history-hook.d.ts +11 -0
  46. package/dist/engine/file-history-hook.js +31 -0
  47. package/dist/engine/goal-judge-context.d.ts +9 -0
  48. package/dist/engine/goal-judge-context.js +234 -0
  49. package/dist/engine/injected-context-cache.d.ts +6 -0
  50. package/dist/engine/injected-context-cache.js +13 -0
  51. package/dist/engine/input-attachments.d.ts +1 -1
  52. package/dist/engine/model-facade.d.ts +3 -3
  53. package/dist/engine/model-facade.js +15 -14
  54. package/dist/engine/permission-controller.d.ts +55 -0
  55. package/dist/engine/permission-controller.js +148 -0
  56. package/dist/engine/prompt-cache-diagnostics.d.ts +58 -0
  57. package/dist/engine/prompt-cache-diagnostics.js +178 -0
  58. package/dist/engine/run-accounting.d.ts +41 -0
  59. package/dist/engine/run-accounting.js +126 -0
  60. package/dist/engine/run-context.d.ts +44 -0
  61. package/dist/engine/run-context.js +88 -0
  62. package/dist/engine/run-environment.d.ts +30 -0
  63. package/dist/engine/run-environment.js +77 -0
  64. package/dist/engine/run-finalize.d.ts +58 -0
  65. package/dist/engine/run-finalize.js +245 -0
  66. package/dist/engine/run-goal.d.ts +58 -0
  67. package/dist/engine/run-goal.js +188 -0
  68. package/dist/engine/run-image-input.d.ts +1 -1
  69. package/dist/engine/run-image-input.js +5 -3
  70. package/dist/engine/run-session-open.d.ts +41 -0
  71. package/dist/engine/run-session-open.js +186 -0
  72. package/dist/engine/run-setup.d.ts +42 -0
  73. package/dist/engine/run-setup.js +58 -0
  74. package/dist/engine/run-tooling.d.ts +125 -0
  75. package/dist/engine/run-tooling.js +283 -0
  76. package/dist/engine/run-types.d.ts +139 -0
  77. package/dist/engine/run-types.js +12 -0
  78. package/dist/engine/run-workspace.d.ts +50 -0
  79. package/dist/engine/run-workspace.js +114 -0
  80. package/dist/engine/steer-queue.d.ts +1 -1
  81. package/dist/engine/subagent-spawner.d.ts +32 -0
  82. package/dist/engine/subagent-spawner.js +287 -0
  83. package/dist/engine/tool-summary.d.ts +2 -2
  84. package/dist/engine/tool-summary.js +2 -2
  85. package/dist/engine/turn-loop.d.ts +49 -10
  86. package/dist/engine/turn-loop.js +370 -104
  87. package/dist/engine/types.d.ts +30 -3
  88. package/dist/engine/types.js +1 -1
  89. package/dist/{engine/goal.d.ts → goal/lifecycle.d.ts} +76 -4
  90. package/dist/goal/lifecycle.js +482 -0
  91. package/dist/hooks/events.d.ts +24 -10
  92. package/dist/hooks/goal-stop-hook.d.ts +17 -28
  93. package/dist/hooks/goal-stop-hook.js +110 -465
  94. package/dist/hooks/registry.js +1 -1
  95. package/dist/index.d.ts +48 -108
  96. package/dist/index.extension.d.ts +51 -0
  97. package/dist/index.extension.js +39 -0
  98. package/dist/index.internal.d.ts +86 -0
  99. package/dist/index.internal.js +92 -0
  100. package/dist/index.js +34 -123
  101. package/dist/links/cli.d.ts +48 -0
  102. package/dist/links/cli.js +617 -0
  103. package/dist/links/http.d.ts +40 -0
  104. package/dist/links/http.js +166 -0
  105. package/dist/links/index.d.ts +4 -0
  106. package/dist/links/index.js +3 -0
  107. package/dist/links/link-action-tool.d.ts +5 -0
  108. package/dist/links/link-action-tool.js +241 -0
  109. package/dist/links/providers.d.ts +8 -0
  110. package/dist/links/providers.js +665 -0
  111. package/dist/links/types.d.ts +44 -0
  112. package/dist/llm/client-base.d.ts +7 -0
  113. package/dist/llm/client-base.js +60 -0
  114. package/dist/llm/model-pool.d.ts +1 -1
  115. package/dist/llm/model-pool.js +1 -1
  116. package/dist/llm/providers/anthropic.d.ts +1 -0
  117. package/dist/llm/providers/anthropic.js +9 -0
  118. package/dist/llm/providers/openai.d.ts +1 -0
  119. package/dist/llm/providers/openai.js +17 -0
  120. package/dist/model-catalog/index.js +15 -2
  121. package/dist/model-catalog/resolve.d.ts +13 -1
  122. package/dist/model-catalog/resolve.js +37 -2
  123. package/dist/model-catalog/types.d.ts +74 -48
  124. package/dist/model-catalog/types.js +16 -5
  125. package/dist/model-catalog/upsert.d.ts +3 -1
  126. package/dist/model-catalog/upsert.js +9 -0
  127. package/dist/onboarding.d.ts +0 -1
  128. package/dist/onboarding.js +1 -22
  129. package/dist/panel-apps/bindings.d.ts +24 -0
  130. package/dist/panel-apps/bindings.js +69 -0
  131. package/dist/panel-apps/github-archive.d.ts +21 -0
  132. package/dist/panel-apps/github-archive.js +98 -0
  133. package/dist/panel-apps/index.d.ts +4 -0
  134. package/dist/panel-apps/index.js +4 -0
  135. package/dist/panel-apps/installer.d.ts +68 -0
  136. package/dist/panel-apps/installer.js +622 -0
  137. package/dist/panel-apps/manifest.d.ts +364 -0
  138. package/dist/panel-apps/manifest.js +189 -0
  139. package/dist/panel-apps/paths.d.ts +13 -0
  140. package/dist/panel-apps/paths.js +38 -0
  141. package/dist/panel-apps/registry.d.ts +51 -0
  142. package/dist/panel-apps/registry.js +99 -0
  143. package/dist/panel-apps/runtime.d.ts +80 -0
  144. package/dist/panel-apps/runtime.js +154 -0
  145. package/dist/plugins/gitOps.js +8 -1
  146. package/dist/plugins/installedPlugins.d.ts +2 -1
  147. package/dist/plugins/installedPlugins.js +146 -8
  148. package/dist/plugins/installer/codex/convertAgents.d.ts +4 -1
  149. package/dist/plugins/installer/codex/convertAgents.js +62 -8
  150. package/dist/plugins/installer/codex/convertCommands.d.ts +5 -5
  151. package/dist/plugins/installer/codex/convertCommands.js +35 -12
  152. package/dist/plugins/installer/codex/convertHooks.d.ts +10 -0
  153. package/dist/plugins/installer/codex/convertHooks.js +82 -0
  154. package/dist/plugins/installer/codex/convertSkills.js +41 -6
  155. package/dist/plugins/installer/install.d.ts +7 -1
  156. package/dist/plugins/installer/install.js +21 -87
  157. package/dist/plugins/installer/installFromArchive.d.ts +26 -4
  158. package/dist/plugins/installer/installFromArchive.js +44 -27
  159. package/dist/plugins/installer/installFromNpm.d.ts +31 -0
  160. package/dist/plugins/installer/installFromNpm.js +273 -0
  161. package/dist/plugins/installer/loadPluginAgents.js +17 -4
  162. package/dist/plugins/installer/loadPluginMcp.d.ts +14 -0
  163. package/dist/plugins/installer/loadPluginMcp.js +245 -35
  164. package/dist/plugins/installer/normalizeManifest.d.ts +13 -0
  165. package/dist/plugins/installer/normalizeManifest.js +306 -0
  166. package/dist/plugins/installer/npmTar.d.ts +13 -0
  167. package/dist/plugins/installer/npmTar.js +321 -0
  168. package/dist/plugins/installer/parseSource.d.ts +11 -0
  169. package/dist/plugins/installer/parseSource.js +48 -0
  170. package/dist/plugins/installer/preview.d.ts +101 -0
  171. package/dist/plugins/installer/preview.js +336 -0
  172. package/dist/plugins/installer/projectPluginSource.d.ts +14 -0
  173. package/dist/plugins/installer/projectPluginSource.js +140 -0
  174. package/dist/plugins/installer/types.d.ts +775 -0
  175. package/dist/plugins/installer/types.js +100 -0
  176. package/dist/plugins/installer/unzip.d.ts +11 -0
  177. package/dist/plugins/installer/unzip.js +123 -9
  178. package/dist/plugins/installer/update.d.ts +2 -2
  179. package/dist/plugins/installer/update.js +43 -4
  180. package/dist/plugins/loadPluginHooks.d.ts +19 -2
  181. package/dist/plugins/loadPluginHooks.js +97 -86
  182. package/dist/plugins/pluginAutomationTemplates.d.ts +18 -0
  183. package/dist/plugins/pluginAutomationTemplates.js +50 -0
  184. package/dist/plugins/pluginCatalog.d.ts +45 -0
  185. package/dist/plugins/pluginCatalog.js +87 -0
  186. package/dist/plugins/pluginCommandHook.d.ts +6 -0
  187. package/dist/plugins/pluginCommandHook.js +25 -8
  188. package/dist/plugins/pluginCommandsLoader.d.ts +19 -0
  189. package/dist/plugins/pluginCommandsLoader.js +181 -7
  190. package/dist/plugins/pluginContent.d.ts +10 -1
  191. package/dist/plugins/pluginContent.js +87 -30
  192. package/dist/plugins/pluginHookApproval.d.ts +30 -0
  193. package/dist/plugins/pluginHookApproval.js +160 -0
  194. package/dist/plugins/pluginHookIntegrity.d.ts +69 -0
  195. package/dist/plugins/pluginHookIntegrity.js +361 -0
  196. package/dist/plugins/pluginInstaller.js +71 -12
  197. package/dist/plugins/pluginMcpApproval.d.ts +19 -0
  198. package/dist/plugins/pluginMcpApproval.js +110 -0
  199. package/dist/plugins/pluginMcpIntegrity.d.ts +21 -0
  200. package/dist/plugins/pluginMcpIntegrity.js +74 -0
  201. package/dist/plugins/types.d.ts +30 -0
  202. package/dist/plugins/varRewrite.d.ts +9 -5
  203. package/dist/plugins/varRewrite.js +26 -17
  204. package/dist/preset/index.d.ts +11 -8
  205. package/dist/preset/index.js +62 -203
  206. package/dist/product/define.js +9 -3
  207. package/dist/product/types.d.ts +0 -2
  208. package/dist/profile/activation.d.ts +36 -0
  209. package/dist/profile/activation.js +57 -0
  210. package/dist/profile/catalog-store.d.ts +77 -0
  211. package/dist/profile/catalog-store.js +346 -0
  212. package/dist/profile/catalog.d.ts +54 -0
  213. package/dist/profile/catalog.js +152 -0
  214. package/dist/profile/index.d.ts +7 -0
  215. package/dist/profile/index.js +7 -0
  216. package/dist/profile/requirements.d.ts +76 -0
  217. package/dist/profile/requirements.js +117 -0
  218. package/dist/profile/resolve.d.ts +11 -0
  219. package/dist/profile/resolve.js +41 -0
  220. package/dist/profile/store.d.ts +17 -0
  221. package/dist/profile/store.js +167 -0
  222. package/dist/profile/types.d.ts +321 -0
  223. package/dist/profile/types.js +104 -0
  224. package/dist/prompt/composer.d.ts +46 -7
  225. package/dist/prompt/composer.js +78 -48
  226. package/dist/prompt/instruction-scanner.d.ts +6 -5
  227. package/dist/prompt/instruction-scanner.js +8 -23
  228. package/dist/prompt/section-loader.d.ts +2 -2
  229. package/dist/prompt/section-loader.js +7 -4
  230. package/dist/prompt/sections/browser.md +10 -9
  231. package/dist/prompt/sections/harness-base.md +9 -0
  232. package/dist/protocol/chat-session-manager.d.ts +64 -1
  233. package/dist/protocol/chat-session-manager.js +104 -0
  234. package/dist/protocol/chat-session.d.ts +61 -10
  235. package/dist/protocol/chat-session.js +135 -25
  236. package/dist/protocol/client.d.ts +33 -3
  237. package/dist/protocol/client.js +96 -5
  238. package/dist/protocol/index.d.ts +2 -2
  239. package/dist/protocol/index.js +2 -2
  240. package/dist/protocol/mobile-remote-types.d.ts +406 -0
  241. package/dist/protocol/mobile-remote-types.js +1 -0
  242. package/dist/protocol/server.d.ts +127 -3
  243. package/dist/protocol/server.js +1309 -182
  244. package/dist/protocol/types.d.ts +152 -34
  245. package/dist/protocol/types.js +16 -0
  246. package/dist/run/ArtifactTracker.d.ts +6 -1
  247. package/dist/run/ArtifactTracker.js +29 -21
  248. package/dist/run/EngineRunner.d.ts +2 -0
  249. package/dist/run/EngineRunner.js +1 -0
  250. package/dist/run/RunManager.d.ts +26 -0
  251. package/dist/run/RunManager.js +82 -11
  252. package/dist/run/factory.d.ts +3 -0
  253. package/dist/run/factory.js +2 -0
  254. package/dist/runtime/safe-spawn.d.ts +6 -0
  255. package/dist/runtime/safe-spawn.js +8 -13
  256. package/dist/services/auto-dream.d.ts +13 -1
  257. package/dist/services/auto-dream.js +56 -8
  258. package/dist/services/dream-consolidation.js +10 -1
  259. package/dist/services/memory-orchestrator.js +6 -2
  260. package/dist/services/oauth.js +4 -1
  261. package/dist/services/session-memory.d.ts +4 -4
  262. package/dist/services/session-memory.js +13 -10
  263. package/dist/session/memory.d.ts +26 -7
  264. package/dist/session/memory.js +79 -21
  265. package/dist/session/session-manager.d.ts +182 -28
  266. package/dist/session/session-manager.js +910 -130
  267. package/dist/session/session-message.d.ts +22 -0
  268. package/dist/session/session-message.js +1 -0
  269. package/dist/session/transcript.d.ts +46 -5
  270. package/dist/session/transcript.js +159 -3
  271. package/dist/settings/feature-flags.d.ts +40 -0
  272. package/dist/settings/feature-flags.js +40 -0
  273. package/dist/settings/manager.d.ts +39 -1
  274. package/dist/settings/manager.js +102 -41
  275. package/dist/settings/migrate-config.js +4 -2
  276. package/dist/settings/schema.d.ts +511 -177
  277. package/dist/settings/schema.js +98 -25
  278. package/dist/skills/scanner.d.ts +6 -2
  279. package/dist/skills/scanner.js +160 -9
  280. package/dist/sources/adapter.d.ts +14 -0
  281. package/dist/sources/adapter.js +7 -0
  282. package/dist/sources/adapters/local-files.d.ts +10 -0
  283. package/dist/sources/adapters/local-files.js +127 -0
  284. package/dist/sources/adapters/mcp-resource.d.ts +17 -0
  285. package/dist/sources/adapters/mcp-resource.js +41 -0
  286. package/dist/sources/adapters/mock.d.ts +3 -0
  287. package/dist/sources/adapters/mock.js +29 -0
  288. package/dist/sources/binding.d.ts +6 -0
  289. package/dist/sources/binding.js +24 -0
  290. package/dist/sources/catalog.d.ts +6 -0
  291. package/dist/sources/catalog.js +64 -0
  292. package/dist/sources/context-summary.d.ts +8 -0
  293. package/dist/sources/context-summary.js +13 -0
  294. package/dist/sources/credential-status.d.ts +2 -0
  295. package/dist/sources/credential-status.js +13 -0
  296. package/dist/sources/index.d.ts +10 -0
  297. package/dist/sources/index.js +10 -0
  298. package/dist/sources/resolve.d.ts +28 -0
  299. package/dist/sources/resolve.js +47 -0
  300. package/dist/sources/truncate-utf8.d.ts +7 -0
  301. package/dist/sources/truncate-utf8.js +18 -0
  302. package/dist/sources/types.d.ts +71 -0
  303. package/dist/sources/types.js +26 -0
  304. package/dist/testing/fetch-stub.d.ts +32 -0
  305. package/dist/testing/fetch-stub.js +24 -0
  306. package/dist/themes/image.d.ts +18 -0
  307. package/dist/themes/image.js +117 -0
  308. package/dist/themes/index.d.ts +4 -0
  309. package/dist/themes/index.js +4 -0
  310. package/dist/themes/installer.d.ts +50 -0
  311. package/dist/themes/installer.js +290 -0
  312. package/dist/themes/manifest.d.ts +102 -0
  313. package/dist/themes/manifest.js +86 -0
  314. package/dist/themes/paths.d.ts +14 -0
  315. package/dist/themes/paths.js +33 -0
  316. package/dist/tool-system/browser-bridge.d.ts +53 -11
  317. package/dist/tool-system/browser-bridge.js +8 -9
  318. package/dist/tool-system/builtin/agent-heartbeat.d.ts +2 -2
  319. package/dist/tool-system/builtin/agent-heartbeat.js +20 -6
  320. package/dist/tool-system/builtin/agent-notifications.d.ts +127 -72
  321. package/dist/tool-system/builtin/agent-notifications.js +291 -101
  322. package/dist/tool-system/builtin/agent-output-file.js +1 -3
  323. package/dist/tool-system/builtin/agent-progress.d.ts +6 -0
  324. package/dist/tool-system/builtin/agent-progress.js +83 -0
  325. package/dist/tool-system/builtin/agent-registry.d.ts +38 -2
  326. package/dist/tool-system/builtin/agent-registry.js +178 -9
  327. package/dist/tool-system/builtin/agent-transcript-translator.js +1 -1
  328. package/dist/tool-system/builtin/agent.d.ts +2 -0
  329. package/dist/tool-system/builtin/agent.js +274 -33
  330. package/dist/tool-system/builtin/background-jobs.d.ts +55 -2
  331. package/dist/tool-system/builtin/background-jobs.js +96 -4
  332. package/dist/tool-system/builtin/background-work.d.ts +6 -0
  333. package/dist/tool-system/builtin/background-work.js +8 -1
  334. package/dist/tool-system/builtin/bash.js +5 -2
  335. package/dist/tool-system/builtin/browser-tools.d.ts +6 -3
  336. package/dist/tool-system/builtin/browser-tools.js +89 -23
  337. package/dist/tool-system/builtin/edit-model-catalog.d.ts +6 -0
  338. package/dist/tool-system/builtin/edit-model-catalog.js +172 -12
  339. package/dist/tool-system/builtin/edit.js +2 -6
  340. package/dist/tool-system/builtin/file-cache.d.ts +2 -0
  341. package/dist/tool-system/builtin/file-cache.js +4 -0
  342. package/dist/tool-system/builtin/generate-image.js +17 -10
  343. package/dist/tool-system/builtin/generate-video.js +26 -7
  344. package/dist/tool-system/builtin/grep.js +2 -2
  345. package/dist/tool-system/builtin/image-uploader.js +7 -1
  346. package/dist/tool-system/builtin/index.d.ts +32 -7
  347. package/dist/tool-system/builtin/index.js +237 -167
  348. package/dist/tool-system/builtin/memory.d.ts +6 -0
  349. package/dist/tool-system/builtin/memory.js +36 -15
  350. package/dist/tool-system/builtin/panel.d.ts +9 -0
  351. package/dist/tool-system/builtin/panel.js +314 -0
  352. package/dist/tool-system/builtin/read.js +5 -1
  353. package/dist/tool-system/builtin/send-message-to-session.d.ts +6 -0
  354. package/dist/tool-system/builtin/send-message-to-session.js +67 -0
  355. package/dist/tool-system/builtin/sources.d.ts +8 -0
  356. package/dist/tool-system/builtin/sources.js +137 -0
  357. package/dist/tool-system/builtin/tool-search.js +7 -2
  358. package/dist/tool-system/builtin/update-automation-memory.js +2 -0
  359. package/dist/tool-system/builtin/web-fetch.js +17 -13
  360. package/dist/tool-system/builtin/web-search.js +1 -3
  361. package/dist/tool-system/capability-module.d.ts +93 -0
  362. package/dist/tool-system/capability-module.js +53 -0
  363. package/dist/tool-system/context.d.ts +77 -19
  364. package/dist/tool-system/executor.js +75 -50
  365. package/dist/tool-system/external-tool-exposure.d.ts +60 -0
  366. package/dist/tool-system/external-tool-exposure.js +304 -0
  367. package/dist/tool-system/mcp-manager.d.ts +11 -1
  368. package/dist/tool-system/mcp-manager.js +19 -4
  369. package/dist/tool-system/mcp-tool-policy.d.ts +9 -0
  370. package/dist/tool-system/mcp-tool-policy.js +34 -0
  371. package/dist/tool-system/panel-bridge.d.ts +53 -0
  372. package/dist/tool-system/panel-bridge.js +1 -0
  373. package/dist/tool-system/permission.d.ts +26 -0
  374. package/dist/tool-system/permission.js +46 -0
  375. package/dist/tool-system/registry.d.ts +12 -1
  376. package/dist/tool-system/registry.js +31 -7
  377. package/dist/tool-system/sandbox/index.js +3 -8
  378. package/dist/tool-system/sandbox/seatbelt.js +2 -6
  379. package/dist/tool-system/session-tool-host.d.ts +139 -0
  380. package/dist/tool-system/session-tool-host.js +167 -0
  381. package/dist/tool-system/testing/tool-registry-harness.d.ts +31 -0
  382. package/dist/tool-system/testing/tool-registry-harness.js +51 -0
  383. package/dist/tool-system/validation.d.ts +14 -7
  384. package/dist/tool-system/validation.js +701 -7
  385. package/dist/types.d.ts +186 -20
  386. package/dist/{cc-orchestrator → utils}/cwd-normalize.d.ts +1 -0
  387. package/dist/{cc-orchestrator → utils}/cwd-normalize.js +1 -0
  388. package/dist/utils/file-mutex.d.ts +65 -0
  389. package/dist/utils/file-mutex.js +145 -0
  390. package/dist/utils/json.d.ts +2 -4
  391. package/dist/utils/json.js +2 -4
  392. package/dist/utils/lockfile.d.ts +30 -1
  393. package/dist/utils/lockfile.js +2 -2
  394. package/dist/utils/secret-scrubber.d.ts +8 -0
  395. package/dist/utils/secret-scrubber.js +227 -0
  396. package/dist/utils/toolDisplay.js +1 -1
  397. package/package.json +20 -5
  398. package/THIRD_PARTY_NOTICES.md +0 -206
  399. package/dist/arena/arena.d.ts +0 -45
  400. package/dist/arena/arena.js +0 -362
  401. package/dist/arena/context/context-tools.d.ts +0 -16
  402. package/dist/arena/context/context-tools.js +0 -272
  403. package/dist/arena/context/within-root.d.ts +0 -7
  404. package/dist/arena/context/within-root.js +0 -15
  405. package/dist/arena/detect-mode.d.ts +0 -20
  406. package/dist/arena/detect-mode.js +0 -78
  407. package/dist/arena/digest-builder.d.ts +0 -25
  408. package/dist/arena/digest-builder.js +0 -120
  409. package/dist/arena/index.d.ts +0 -29
  410. package/dist/arena/index.js +0 -29
  411. package/dist/arena/iterate/convergence.d.ts +0 -25
  412. package/dist/arena/iterate/convergence.js +0 -103
  413. package/dist/arena/iterate/formats/index.d.ts +0 -22
  414. package/dist/arena/iterate/formats/index.js +0 -283
  415. package/dist/arena/iterate/index.d.ts +0 -11
  416. package/dist/arena/iterate/index.js +0 -9
  417. package/dist/arena/iterate/iterative-arena.d.ts +0 -23
  418. package/dist/arena/iterate/iterative-arena.js +0 -237
  419. package/dist/arena/iterate/parse.d.ts +0 -42
  420. package/dist/arena/iterate/parse.js +0 -123
  421. package/dist/arena/iterate/phases/argue.d.ts +0 -22
  422. package/dist/arena/iterate/phases/argue.js +0 -165
  423. package/dist/arena/iterate/phases/revise.d.ts +0 -16
  424. package/dist/arena/iterate/phases/revise.js +0 -62
  425. package/dist/arena/iterate/phases/tournament.d.ts +0 -34
  426. package/dist/arena/iterate/phases/tournament.js +0 -113
  427. package/dist/arena/iterate/tools/web-tools.d.ts +0 -13
  428. package/dist/arena/iterate/tools/web-tools.js +0 -54
  429. package/dist/arena/iterate/types.d.ts +0 -152
  430. package/dist/arena/iterate/types.js +0 -8
  431. package/dist/arena/ledger.d.ts +0 -47
  432. package/dist/arena/ledger.js +0 -159
  433. package/dist/arena/lenses/architecture.d.ts +0 -5
  434. package/dist/arena/lenses/architecture.js +0 -22
  435. package/dist/arena/lenses/engineering.d.ts +0 -5
  436. package/dist/arena/lenses/engineering.js +0 -22
  437. package/dist/arena/lenses/general.d.ts +0 -5
  438. package/dist/arena/lenses/general.js +0 -20
  439. package/dist/arena/lenses/index.d.ts +0 -16
  440. package/dist/arena/lenses/index.js +0 -47
  441. package/dist/arena/lenses/product.d.ts +0 -5
  442. package/dist/arena/lenses/product.js +0 -22
  443. package/dist/arena/model-presets.d.ts +0 -23
  444. package/dist/arena/model-presets.js +0 -44
  445. package/dist/arena/phases/adjudication.d.ts +0 -25
  446. package/dist/arena/phases/adjudication.js +0 -142
  447. package/dist/arena/phases/build-consensus.d.ts +0 -30
  448. package/dist/arena/phases/build-consensus.js +0 -85
  449. package/dist/arena/phases/claim-registry.d.ts +0 -26
  450. package/dist/arena/phases/claim-registry.js +0 -60
  451. package/dist/arena/phases/cross-review.d.ts +0 -47
  452. package/dist/arena/phases/cross-review.js +0 -224
  453. package/dist/arena/phases/debate-rounds.d.ts +0 -28
  454. package/dist/arena/phases/debate-rounds.js +0 -161
  455. package/dist/arena/phases/participant-research.d.ts +0 -39
  456. package/dist/arena/phases/participant-research.js +0 -316
  457. package/dist/arena/phases/planning-detail-expansion.d.ts +0 -39
  458. package/dist/arena/phases/planning-detail-expansion.js +0 -120
  459. package/dist/arena/planner.d.ts +0 -28
  460. package/dist/arena/planner.js +0 -312
  461. package/dist/arena/providers/docs.d.ts +0 -7
  462. package/dist/arena/providers/docs.js +0 -111
  463. package/dist/arena/providers/git.d.ts +0 -8
  464. package/dist/arena/providers/git.js +0 -174
  465. package/dist/arena/providers/index.d.ts +0 -32
  466. package/dist/arena/providers/index.js +0 -132
  467. package/dist/arena/providers/none.d.ts +0 -7
  468. package/dist/arena/providers/none.js +0 -11
  469. package/dist/arena/providers/repo.d.ts +0 -7
  470. package/dist/arena/providers/repo.js +0 -258
  471. package/dist/arena/render/session.d.ts +0 -17
  472. package/dist/arena/render/session.js +0 -190
  473. package/dist/arena/render/terminal.d.ts +0 -34
  474. package/dist/arena/render/terminal.js +0 -286
  475. package/dist/arena/strategies/discussion.d.ts +0 -25
  476. package/dist/arena/strategies/discussion.js +0 -143
  477. package/dist/arena/strategies/index.d.ts +0 -15
  478. package/dist/arena/strategies/index.js +0 -28
  479. package/dist/arena/strategies/language-wrapper.d.ts +0 -17
  480. package/dist/arena/strategies/language-wrapper.js +0 -102
  481. package/dist/arena/strategies/lens-wrapper.d.ts +0 -16
  482. package/dist/arena/strategies/lens-wrapper.js +0 -236
  483. package/dist/arena/strategies/planning.d.ts +0 -30
  484. package/dist/arena/strategies/planning.js +0 -225
  485. package/dist/arena/strategies/review.d.ts +0 -26
  486. package/dist/arena/strategies/review.js +0 -168
  487. package/dist/arena/strategies/utils.d.ts +0 -36
  488. package/dist/arena/strategies/utils.js +0 -603
  489. package/dist/arena/tools/selector.d.ts +0 -17
  490. package/dist/arena/tools/selector.js +0 -61
  491. package/dist/arena/transitions.d.ts +0 -53
  492. package/dist/arena/transitions.js +0 -97
  493. package/dist/arena/types.d.ts +0 -518
  494. package/dist/arena/types.js +0 -27
  495. package/dist/cc-orchestrator/agent-adapter.d.ts +0 -54
  496. package/dist/cc-orchestrator/agent-adapter.js +0 -143
  497. package/dist/cc-orchestrator/cc-capability.d.ts +0 -19
  498. package/dist/cc-orchestrator/cc-capability.js +0 -53
  499. package/dist/cc-orchestrator/codex-session-discovery.d.ts +0 -24
  500. package/dist/cc-orchestrator/codex-session-discovery.js +0 -191
  501. package/dist/cc-orchestrator/codex-session-history.d.ts +0 -38
  502. package/dist/cc-orchestrator/codex-session-history.js +0 -247
  503. package/dist/cc-orchestrator/external-agent-bindings.d.ts +0 -27
  504. package/dist/cc-orchestrator/external-agent-bindings.js +0 -150
  505. package/dist/cc-orchestrator/external-agent-changes.d.ts +0 -19
  506. package/dist/cc-orchestrator/external-agent-changes.js +0 -231
  507. package/dist/cc-orchestrator/external-agent-driver.d.ts +0 -19
  508. package/dist/cc-orchestrator/external-agent-driver.js +0 -284
  509. package/dist/cc-orchestrator/external-agent-session-store.d.ts +0 -23
  510. package/dist/cc-orchestrator/external-agent-session-store.js +0 -146
  511. package/dist/cc-orchestrator/index.d.ts +0 -8
  512. package/dist/cc-orchestrator/index.js +0 -8
  513. package/dist/cc-orchestrator/relevance-judge.d.ts +0 -15
  514. package/dist/cc-orchestrator/relevance-judge.js +0 -29
  515. package/dist/cc-orchestrator/session-discovery.d.ts +0 -46
  516. package/dist/cc-orchestrator/session-discovery.js +0 -125
  517. package/dist/cc-orchestrator/session-history.d.ts +0 -54
  518. package/dist/cc-orchestrator/session-history.js +0 -150
  519. package/dist/cron/cron-runtime.d.ts +0 -2
  520. package/dist/cron/cron-runtime.js +0 -2
  521. package/dist/cron/cron-store.d.ts +0 -2
  522. package/dist/cron/cron-store.js +0 -2
  523. package/dist/cron/scheduler.d.ts +0 -7
  524. package/dist/cron/scheduler.js +0 -7
  525. package/dist/engine/goal.js +0 -206
  526. package/dist/external-agents/config.d.ts +0 -2
  527. package/dist/external-agents/config.js +0 -15
  528. package/dist/external-agents/types.d.ts +0 -31
  529. package/dist/git/parse-log.d.ts +0 -13
  530. package/dist/git/parse-log.js +0 -21
  531. package/dist/git/utils.d.ts +0 -49
  532. package/dist/git/utils.js +0 -161
  533. package/dist/git/worktree/crud.d.ts +0 -72
  534. package/dist/git/worktree/crud.js +0 -235
  535. package/dist/git/worktree/diff.d.ts +0 -14
  536. package/dist/git/worktree/diff.js +0 -82
  537. package/dist/git/worktree/git-exec.d.ts +0 -7
  538. package/dist/git/worktree/git-exec.js +0 -87
  539. package/dist/git/worktree/index.d.ts +0 -5
  540. package/dist/git/worktree/index.js +0 -5
  541. package/dist/git/worktree/query.d.ts +0 -43
  542. package/dist/git/worktree/query.js +0 -128
  543. package/dist/git/worktree/slug.d.ts +0 -11
  544. package/dist/git/worktree/slug.js +0 -58
  545. package/dist/git/worktree.d.ts +0 -1
  546. package/dist/git/worktree.js +0 -5
  547. package/dist/lsp/client.d.ts +0 -41
  548. package/dist/lsp/client.js +0 -186
  549. package/dist/lsp/manager.d.ts +0 -40
  550. package/dist/lsp/manager.js +0 -155
  551. package/dist/lsp/root-path.d.ts +0 -9
  552. package/dist/lsp/root-path.js +0 -12
  553. package/dist/lsp/servers.d.ts +0 -16
  554. package/dist/lsp/servers.js +0 -60
  555. package/dist/prompt/sections/coding.md +0 -35
  556. package/dist/quota/credentials.d.ts +0 -3
  557. package/dist/quota/credentials.js +0 -80
  558. package/dist/quota/index.d.ts +0 -36
  559. package/dist/quota/index.js +0 -155
  560. package/dist/quota/types.d.ts +0 -48
  561. package/dist/quota/types.js +0 -13
  562. package/dist/review/review-prompt.d.ts +0 -28
  563. package/dist/review/review-prompt.js +0 -81
  564. package/dist/state.d.ts +0 -160
  565. package/dist/state.js +0 -267
  566. package/dist/tool-system/builtin/apply-patch/applier.d.ts +0 -26
  567. package/dist/tool-system/builtin/apply-patch/applier.js +0 -308
  568. package/dist/tool-system/builtin/apply-patch/backup-targets.d.ts +0 -10
  569. package/dist/tool-system/builtin/apply-patch/backup-targets.js +0 -30
  570. package/dist/tool-system/builtin/apply-patch/index.d.ts +0 -20
  571. package/dist/tool-system/builtin/apply-patch/index.js +0 -105
  572. package/dist/tool-system/builtin/apply-patch/parser.d.ts +0 -17
  573. package/dist/tool-system/builtin/apply-patch/parser.js +0 -212
  574. package/dist/tool-system/builtin/apply-patch/seek-sequence.d.ts +0 -18
  575. package/dist/tool-system/builtin/apply-patch/seek-sequence.js +0 -123
  576. package/dist/tool-system/builtin/apply-patch/types.d.ts +0 -49
  577. package/dist/tool-system/builtin/apply-patch/types.js +0 -13
  578. package/dist/tool-system/builtin/arena.d.ts +0 -31
  579. package/dist/tool-system/builtin/arena.js +0 -416
  580. package/dist/tool-system/builtin/brief.d.ts +0 -6
  581. package/dist/tool-system/builtin/brief.js +0 -41
  582. package/dist/tool-system/builtin/check-quota.d.ts +0 -15
  583. package/dist/tool-system/builtin/check-quota.js +0 -34
  584. package/dist/tool-system/builtin/drive-claude-code.d.ts +0 -51
  585. package/dist/tool-system/builtin/drive-claude-code.js +0 -698
  586. package/dist/tool-system/builtin/lsp.d.ts +0 -7
  587. package/dist/tool-system/builtin/lsp.js +0 -144
  588. package/dist/tool-system/builtin/notebook-edit.d.ts +0 -7
  589. package/dist/tool-system/builtin/notebook-edit.js +0 -127
  590. package/dist/tool-system/builtin/worktree.d.ts +0 -11
  591. package/dist/tool-system/builtin/worktree.js +0 -363
  592. /package/dist/{external-agents → links}/types.js +0 -0
  593. /package/dist/{engine/session-usage.d.ts → session/usage.d.ts} +0 -0
  594. /package/dist/{engine/session-usage.js → session/usage.js} +0 -0
@@ -0,0 +1,364 @@
1
+ import { z } from "zod";
2
+ export declare const PANEL_APP_MANIFEST_FILE = ".codeshell-panel/panel.json";
3
+ export declare const PANEL_APP_PERMISSIONS: readonly ["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send"];
4
+ export declare const PANEL_APP_ICONS: readonly ["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"];
5
+ export declare const PanelAppAgentTool: z.ZodEffects<z.ZodObject<{
6
+ name: z.ZodString;
7
+ description: z.ZodString;
8
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
9
+ readOnly: z.ZodDefault<z.ZodBoolean>;
10
+ }, "strict", z.ZodTypeAny, {
11
+ name: string;
12
+ description: string;
13
+ inputSchema: Record<string, unknown>;
14
+ readOnly: boolean;
15
+ }, {
16
+ name: string;
17
+ description: string;
18
+ inputSchema: Record<string, unknown>;
19
+ readOnly?: boolean | undefined;
20
+ }>, {
21
+ name: string;
22
+ description: string;
23
+ inputSchema: Record<string, unknown>;
24
+ readOnly: boolean;
25
+ }, {
26
+ name: string;
27
+ description: string;
28
+ inputSchema: Record<string, unknown>;
29
+ readOnly?: boolean | undefined;
30
+ }>;
31
+ export declare const PanelAppAgentContribution: z.ZodEffects<z.ZodObject<{
32
+ tools: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
33
+ name: z.ZodString;
34
+ description: z.ZodString;
35
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
36
+ readOnly: z.ZodDefault<z.ZodBoolean>;
37
+ }, "strict", z.ZodTypeAny, {
38
+ name: string;
39
+ description: string;
40
+ inputSchema: Record<string, unknown>;
41
+ readOnly: boolean;
42
+ }, {
43
+ name: string;
44
+ description: string;
45
+ inputSchema: Record<string, unknown>;
46
+ readOnly?: boolean | undefined;
47
+ }>, {
48
+ name: string;
49
+ description: string;
50
+ inputSchema: Record<string, unknown>;
51
+ readOnly: boolean;
52
+ }, {
53
+ name: string;
54
+ description: string;
55
+ inputSchema: Record<string, unknown>;
56
+ readOnly?: boolean | undefined;
57
+ }>, "many">>;
58
+ skills: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
59
+ }, "strict", z.ZodTypeAny, {
60
+ skills: string[];
61
+ tools: {
62
+ name: string;
63
+ description: string;
64
+ inputSchema: Record<string, unknown>;
65
+ readOnly: boolean;
66
+ }[];
67
+ }, {
68
+ skills?: string[] | undefined;
69
+ tools?: {
70
+ name: string;
71
+ description: string;
72
+ inputSchema: Record<string, unknown>;
73
+ readOnly?: boolean | undefined;
74
+ }[] | undefined;
75
+ }>, {
76
+ skills: string[];
77
+ tools: {
78
+ name: string;
79
+ description: string;
80
+ inputSchema: Record<string, unknown>;
81
+ readOnly: boolean;
82
+ }[];
83
+ }, {
84
+ skills?: string[] | undefined;
85
+ tools?: {
86
+ name: string;
87
+ description: string;
88
+ inputSchema: Record<string, unknown>;
89
+ readOnly?: boolean | undefined;
90
+ }[] | undefined;
91
+ }>;
92
+ /**
93
+ * Schema v2 keeps one installable Panel App identity while allowing it to
94
+ * declare a narrow Agent surface. UI code still runs in the sandboxed panel;
95
+ * tool handlers are invoked through the host bridge, and bundled skills are
96
+ * read-only prompt resources rather than executable plugin code.
97
+ */
98
+ export declare const PanelAppManifest: z.ZodEffects<z.ZodDiscriminatedUnion<"schemaVersion", [z.ZodObject<{
99
+ id: z.ZodString;
100
+ version: z.ZodString;
101
+ title: z.ZodObject<{
102
+ default: z.ZodString;
103
+ en: z.ZodOptional<z.ZodString>;
104
+ "zh-CN": z.ZodOptional<z.ZodString>;
105
+ }, "strict", z.ZodTypeAny, {
106
+ default: string;
107
+ en?: string | undefined;
108
+ "zh-CN"?: string | undefined;
109
+ }, {
110
+ default: string;
111
+ en?: string | undefined;
112
+ "zh-CN"?: string | undefined;
113
+ }>;
114
+ description: z.ZodOptional<z.ZodString>;
115
+ entry: z.ZodEffects<z.ZodString, string, string>;
116
+ icon: z.ZodDefault<z.ZodEnum<["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"]>>;
117
+ placement: z.ZodDefault<z.ZodLiteral<"right-dock">>;
118
+ singleton: z.ZodDefault<z.ZodBoolean>;
119
+ permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send"]>, "many">>;
120
+ schemaVersion: z.ZodLiteral<1>;
121
+ }, "strict", z.ZodTypeAny, {
122
+ id: string;
123
+ version: string;
124
+ permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[];
125
+ entry: string;
126
+ title: {
127
+ default: string;
128
+ en?: string | undefined;
129
+ "zh-CN"?: string | undefined;
130
+ };
131
+ schemaVersion: 1;
132
+ icon: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table";
133
+ placement: "right-dock";
134
+ singleton: boolean;
135
+ description?: string | undefined;
136
+ }, {
137
+ id: string;
138
+ version: string;
139
+ entry: string;
140
+ title: {
141
+ default: string;
142
+ en?: string | undefined;
143
+ "zh-CN"?: string | undefined;
144
+ };
145
+ schemaVersion: 1;
146
+ description?: string | undefined;
147
+ permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[] | undefined;
148
+ icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
149
+ placement?: "right-dock" | undefined;
150
+ singleton?: boolean | undefined;
151
+ }>, z.ZodObject<{
152
+ agent: z.ZodOptional<z.ZodEffects<z.ZodObject<{
153
+ tools: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodObject<{
154
+ name: z.ZodString;
155
+ description: z.ZodString;
156
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
157
+ readOnly: z.ZodDefault<z.ZodBoolean>;
158
+ }, "strict", z.ZodTypeAny, {
159
+ name: string;
160
+ description: string;
161
+ inputSchema: Record<string, unknown>;
162
+ readOnly: boolean;
163
+ }, {
164
+ name: string;
165
+ description: string;
166
+ inputSchema: Record<string, unknown>;
167
+ readOnly?: boolean | undefined;
168
+ }>, {
169
+ name: string;
170
+ description: string;
171
+ inputSchema: Record<string, unknown>;
172
+ readOnly: boolean;
173
+ }, {
174
+ name: string;
175
+ description: string;
176
+ inputSchema: Record<string, unknown>;
177
+ readOnly?: boolean | undefined;
178
+ }>, "many">>;
179
+ skills: z.ZodDefault<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
180
+ }, "strict", z.ZodTypeAny, {
181
+ skills: string[];
182
+ tools: {
183
+ name: string;
184
+ description: string;
185
+ inputSchema: Record<string, unknown>;
186
+ readOnly: boolean;
187
+ }[];
188
+ }, {
189
+ skills?: string[] | undefined;
190
+ tools?: {
191
+ name: string;
192
+ description: string;
193
+ inputSchema: Record<string, unknown>;
194
+ readOnly?: boolean | undefined;
195
+ }[] | undefined;
196
+ }>, {
197
+ skills: string[];
198
+ tools: {
199
+ name: string;
200
+ description: string;
201
+ inputSchema: Record<string, unknown>;
202
+ readOnly: boolean;
203
+ }[];
204
+ }, {
205
+ skills?: string[] | undefined;
206
+ tools?: {
207
+ name: string;
208
+ description: string;
209
+ inputSchema: Record<string, unknown>;
210
+ readOnly?: boolean | undefined;
211
+ }[] | undefined;
212
+ }>>;
213
+ id: z.ZodString;
214
+ version: z.ZodString;
215
+ title: z.ZodObject<{
216
+ default: z.ZodString;
217
+ en: z.ZodOptional<z.ZodString>;
218
+ "zh-CN": z.ZodOptional<z.ZodString>;
219
+ }, "strict", z.ZodTypeAny, {
220
+ default: string;
221
+ en?: string | undefined;
222
+ "zh-CN"?: string | undefined;
223
+ }, {
224
+ default: string;
225
+ en?: string | undefined;
226
+ "zh-CN"?: string | undefined;
227
+ }>;
228
+ description: z.ZodOptional<z.ZodString>;
229
+ entry: z.ZodEffects<z.ZodString, string, string>;
230
+ icon: z.ZodDefault<z.ZodEnum<["panel", "activity", "bar-chart-3", "chart", "file-text", "globe", "image", "layout-dashboard", "line-chart", "palette", "pie-chart", "table", "terminal"]>>;
231
+ placement: z.ZodDefault<z.ZodLiteral<"right-dock">>;
232
+ singleton: z.ZodDefault<z.ZodBoolean>;
233
+ permissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["context.session", "context.workspace", "storage", "external.open", "agent.submitPrompt", "workspace.info", "workspace.read", "workspace.write", "notifications.send"]>, "many">>;
234
+ schemaVersion: z.ZodLiteral<2>;
235
+ }, "strict", z.ZodTypeAny, {
236
+ id: string;
237
+ version: string;
238
+ permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[];
239
+ entry: string;
240
+ title: {
241
+ default: string;
242
+ en?: string | undefined;
243
+ "zh-CN"?: string | undefined;
244
+ };
245
+ schemaVersion: 2;
246
+ icon: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table";
247
+ placement: "right-dock";
248
+ singleton: boolean;
249
+ agent?: {
250
+ skills: string[];
251
+ tools: {
252
+ name: string;
253
+ description: string;
254
+ inputSchema: Record<string, unknown>;
255
+ readOnly: boolean;
256
+ }[];
257
+ } | undefined;
258
+ description?: string | undefined;
259
+ }, {
260
+ id: string;
261
+ version: string;
262
+ entry: string;
263
+ title: {
264
+ default: string;
265
+ en?: string | undefined;
266
+ "zh-CN"?: string | undefined;
267
+ };
268
+ schemaVersion: 2;
269
+ agent?: {
270
+ skills?: string[] | undefined;
271
+ tools?: {
272
+ name: string;
273
+ description: string;
274
+ inputSchema: Record<string, unknown>;
275
+ readOnly?: boolean | undefined;
276
+ }[] | undefined;
277
+ } | undefined;
278
+ description?: string | undefined;
279
+ permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[] | undefined;
280
+ icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
281
+ placement?: "right-dock" | undefined;
282
+ singleton?: boolean | undefined;
283
+ }>]>, {
284
+ id: string;
285
+ version: string;
286
+ permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[];
287
+ entry: string;
288
+ title: {
289
+ default: string;
290
+ en?: string | undefined;
291
+ "zh-CN"?: string | undefined;
292
+ };
293
+ schemaVersion: 1;
294
+ icon: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table";
295
+ placement: "right-dock";
296
+ singleton: boolean;
297
+ description?: string | undefined;
298
+ } | {
299
+ id: string;
300
+ version: string;
301
+ permissions: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[];
302
+ entry: string;
303
+ title: {
304
+ default: string;
305
+ en?: string | undefined;
306
+ "zh-CN"?: string | undefined;
307
+ };
308
+ schemaVersion: 2;
309
+ icon: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table";
310
+ placement: "right-dock";
311
+ singleton: boolean;
312
+ agent?: {
313
+ skills: string[];
314
+ tools: {
315
+ name: string;
316
+ description: string;
317
+ inputSchema: Record<string, unknown>;
318
+ readOnly: boolean;
319
+ }[];
320
+ } | undefined;
321
+ description?: string | undefined;
322
+ }, {
323
+ id: string;
324
+ version: string;
325
+ entry: string;
326
+ title: {
327
+ default: string;
328
+ en?: string | undefined;
329
+ "zh-CN"?: string | undefined;
330
+ };
331
+ schemaVersion: 1;
332
+ description?: string | undefined;
333
+ permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[] | undefined;
334
+ icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
335
+ placement?: "right-dock" | undefined;
336
+ singleton?: boolean | undefined;
337
+ } | {
338
+ id: string;
339
+ version: string;
340
+ entry: string;
341
+ title: {
342
+ default: string;
343
+ en?: string | undefined;
344
+ "zh-CN"?: string | undefined;
345
+ };
346
+ schemaVersion: 2;
347
+ agent?: {
348
+ skills?: string[] | undefined;
349
+ tools?: {
350
+ name: string;
351
+ description: string;
352
+ inputSchema: Record<string, unknown>;
353
+ readOnly?: boolean | undefined;
354
+ }[] | undefined;
355
+ } | undefined;
356
+ description?: string | undefined;
357
+ permissions?: ("context.session" | "context.workspace" | "storage" | "external.open" | "agent.submitPrompt" | "workspace.info" | "workspace.read" | "workspace.write" | "notifications.send")[] | undefined;
358
+ icon?: "terminal" | "image" | "panel" | "activity" | "bar-chart-3" | "chart" | "file-text" | "globe" | "layout-dashboard" | "line-chart" | "palette" | "pie-chart" | "table" | undefined;
359
+ placement?: "right-dock" | undefined;
360
+ singleton?: boolean | undefined;
361
+ }>;
362
+ export type PanelAppAgentTool = z.infer<typeof PanelAppAgentTool>;
363
+ export type PanelAppAgentContribution = z.infer<typeof PanelAppAgentContribution>;
364
+ export type PanelAppManifest = z.infer<typeof PanelAppManifest>;
@@ -0,0 +1,189 @@
1
+ import { z } from "zod";
2
+ import { validateToolInputSchemaStrict } from "../tool-system/validation.js";
3
+ export const PANEL_APP_MANIFEST_FILE = ".codeshell-panel/panel.json";
4
+ export const PANEL_APP_PERMISSIONS = [
5
+ "context.session",
6
+ "context.workspace",
7
+ "storage",
8
+ "external.open",
9
+ "agent.submitPrompt",
10
+ "workspace.info",
11
+ "workspace.read",
12
+ "workspace.write",
13
+ "notifications.send",
14
+ ];
15
+ export const PANEL_APP_ICONS = [
16
+ "panel",
17
+ "activity",
18
+ "bar-chart-3",
19
+ "chart",
20
+ "file-text",
21
+ "globe",
22
+ "image",
23
+ "layout-dashboard",
24
+ "line-chart",
25
+ "palette",
26
+ "pie-chart",
27
+ "table",
28
+ "terminal",
29
+ ];
30
+ const SafePanelAppEntry = z.string().superRefine((value, ctx) => {
31
+ if (value.length === 0 ||
32
+ value.length > 1_024 ||
33
+ !value.includes("/") ||
34
+ value.startsWith("/") ||
35
+ value.includes("\\") ||
36
+ value.includes("\0") ||
37
+ value.includes("?") ||
38
+ value.includes("#") ||
39
+ value
40
+ .split("/")
41
+ .some((segment) => segment === "" || segment === "." || segment === ".." || segment.startsWith(".")) ||
42
+ !value.toLowerCase().endsWith(".html")) {
43
+ ctx.addIssue({
44
+ code: z.ZodIssueCode.custom,
45
+ message: "panel app entry must be a nested, safe POSIX-relative .html path without traversal, query, hash, or hidden segments",
46
+ });
47
+ }
48
+ });
49
+ const SafePanelAppSkillEntry = z.string().superRefine((value, ctx) => {
50
+ const segments = value.split("/");
51
+ if (value.length === 0 ||
52
+ value.length > 1_024 ||
53
+ value.startsWith("/") ||
54
+ value.includes("\\") ||
55
+ value.includes("\0") ||
56
+ segments.length !== 4 ||
57
+ segments[0] !== "agent" ||
58
+ segments[1] !== "skills" ||
59
+ !/^[a-z][a-z0-9-]{0,63}$/.test(segments[2] ?? "") ||
60
+ segments[3] !== "SKILL.md") {
61
+ ctx.addIssue({
62
+ code: z.ZodIssueCode.custom,
63
+ message: "panel app skills must use agent/skills/<skill-id>/SKILL.md",
64
+ });
65
+ }
66
+ });
67
+ const LocalizedTitle = z
68
+ .object({
69
+ default: z.string().min(1).max(80),
70
+ en: z.string().min(1).max(80).optional(),
71
+ "zh-CN": z.string().min(1).max(80).optional(),
72
+ })
73
+ .strict();
74
+ export const PanelAppAgentTool = z
75
+ .object({
76
+ name: z.string().regex(/^[a-z][a-z0-9_]{0,63}$/),
77
+ description: z.string().min(1).max(500),
78
+ inputSchema: z.record(z.unknown()),
79
+ readOnly: z.boolean().default(false),
80
+ })
81
+ .strict()
82
+ .superRefine((value, ctx) => {
83
+ if (value.inputSchema.type !== "object") {
84
+ ctx.addIssue({
85
+ code: z.ZodIssueCode.custom,
86
+ path: ["inputSchema", "type"],
87
+ message: "panel app tool inputSchema must describe a JSON object",
88
+ });
89
+ return;
90
+ }
91
+ const schemaError = validateToolInputSchemaStrict(value.inputSchema);
92
+ if (schemaError) {
93
+ ctx.addIssue({
94
+ code: z.ZodIssueCode.custom,
95
+ path: ["inputSchema"],
96
+ message: `panel app tool inputSchema is invalid: ${schemaError}`,
97
+ });
98
+ }
99
+ });
100
+ export const PanelAppAgentContribution = z
101
+ .object({
102
+ tools: z.array(PanelAppAgentTool).max(16).default([]),
103
+ skills: z.array(SafePanelAppSkillEntry).max(8).default([]),
104
+ })
105
+ .strict()
106
+ .superRefine((value, ctx) => {
107
+ const toolNames = new Set();
108
+ for (const [index, tool] of value.tools.entries()) {
109
+ if (toolNames.has(tool.name)) {
110
+ ctx.addIssue({
111
+ code: z.ZodIssueCode.custom,
112
+ path: ["tools", index, "name"],
113
+ message: `duplicate panel app tool name '${tool.name}'`,
114
+ });
115
+ }
116
+ toolNames.add(tool.name);
117
+ }
118
+ const skillEntries = new Set();
119
+ for (const [index, skill] of value.skills.entries()) {
120
+ if (skillEntries.has(skill)) {
121
+ ctx.addIssue({
122
+ code: z.ZodIssueCode.custom,
123
+ path: ["skills", index],
124
+ message: `duplicate panel app skill entry '${skill}'`,
125
+ });
126
+ }
127
+ skillEntries.add(skill);
128
+ }
129
+ });
130
+ const PanelAppManifestFields = {
131
+ id: z.string().regex(/^[a-z][a-z0-9-]{0,63}$/),
132
+ version: z.string().min(1).max(80),
133
+ title: LocalizedTitle,
134
+ description: z.string().min(1).max(500).optional(),
135
+ entry: SafePanelAppEntry,
136
+ icon: z.enum(PANEL_APP_ICONS).default("panel"),
137
+ placement: z.literal("right-dock").default("right-dock"),
138
+ singleton: z.boolean().default(true),
139
+ permissions: z.array(z.enum(PANEL_APP_PERMISSIONS)).max(8).default([]),
140
+ };
141
+ /**
142
+ * Schema v2 keeps one installable Panel App identity while allowing it to
143
+ * declare a narrow Agent surface. UI code still runs in the sandboxed panel;
144
+ * tool handlers are invoked through the host bridge, and bundled skills are
145
+ * read-only prompt resources rather than executable plugin code.
146
+ */
147
+ export const PanelAppManifest = z
148
+ .discriminatedUnion("schemaVersion", [
149
+ z
150
+ .object({
151
+ schemaVersion: z.literal(1),
152
+ ...PanelAppManifestFields,
153
+ })
154
+ .strict(),
155
+ z
156
+ .object({
157
+ schemaVersion: z.literal(2),
158
+ ...PanelAppManifestFields,
159
+ agent: PanelAppAgentContribution.optional(),
160
+ })
161
+ .strict(),
162
+ ])
163
+ .superRefine((value, ctx) => {
164
+ const permissionSet = new Set(value.permissions);
165
+ if (permissionSet.size !== value.permissions.length) {
166
+ ctx.addIssue({
167
+ code: z.ZodIssueCode.custom,
168
+ path: ["permissions"],
169
+ message: "panel app permissions must not contain duplicates",
170
+ });
171
+ }
172
+ if (value.permissions.includes("agent.submitPrompt") &&
173
+ !value.permissions.includes("context.session")) {
174
+ ctx.addIssue({
175
+ code: z.ZodIssueCode.custom,
176
+ path: ["permissions"],
177
+ message: "agent.submitPrompt requires context.session",
178
+ });
179
+ }
180
+ if ((value.permissions.includes("workspace.read") ||
181
+ value.permissions.includes("workspace.write")) &&
182
+ !value.permissions.includes("context.workspace")) {
183
+ ctx.addIssue({
184
+ code: z.ZodIssueCode.custom,
185
+ path: ["permissions"],
186
+ message: "workspace.read and workspace.write require context.workspace",
187
+ });
188
+ }
189
+ });
@@ -0,0 +1,13 @@
1
+ export declare class PanelAppInstallError extends Error {
2
+ constructor(message: string);
3
+ }
4
+ export declare class PanelAppReviewChangedError extends PanelAppInstallError {
5
+ constructor();
6
+ }
7
+ export declare class PanelAppAlreadyInstalledError extends PanelAppInstallError {
8
+ constructor(id: string);
9
+ }
10
+ export declare function assertSafePanelAppId(id: string): void;
11
+ export declare function panelAppsRoot(): string;
12
+ export declare function panelAppInstallDir(id: string): string;
13
+ export declare function panelAppsRegistryPath(): string;
@@ -0,0 +1,38 @@
1
+ import { homedir } from "node:os";
2
+ import { join } from "node:path";
3
+ export class PanelAppInstallError extends Error {
4
+ constructor(message) {
5
+ super(message);
6
+ this.name = "PanelAppInstallError";
7
+ }
8
+ }
9
+ export class PanelAppReviewChangedError extends PanelAppInstallError {
10
+ constructor() {
11
+ super("Panel App source changed after review. Review it again before installing.");
12
+ this.name = "PanelAppReviewChangedError";
13
+ }
14
+ }
15
+ export class PanelAppAlreadyInstalledError extends PanelAppInstallError {
16
+ constructor(id) {
17
+ super(`Panel App '${id}' is already installed`);
18
+ this.name = "PanelAppAlreadyInstalledError";
19
+ }
20
+ }
21
+ function userHome() {
22
+ return process.env.HOME ?? homedir();
23
+ }
24
+ export function assertSafePanelAppId(id) {
25
+ if (!/^[a-z][a-z0-9-]{0,63}$/.test(id)) {
26
+ throw new PanelAppInstallError(`invalid Panel App id: ${JSON.stringify(id)}`);
27
+ }
28
+ }
29
+ export function panelAppsRoot() {
30
+ return join(userHome(), ".code-shell", "panel-apps");
31
+ }
32
+ export function panelAppInstallDir(id) {
33
+ assertSafePanelAppId(id);
34
+ return join(panelAppsRoot(), id);
35
+ }
36
+ export function panelAppsRegistryPath() {
37
+ return join(panelAppsRoot(), "installed.json");
38
+ }
@@ -0,0 +1,51 @@
1
+ import { z } from "zod";
2
+ declare const RegistryEntry: z.ZodObject<{
3
+ id: z.ZodString;
4
+ version: z.ZodString;
5
+ source: z.ZodUnion<[z.ZodString, z.ZodObject<{
6
+ kind: z.ZodLiteral<"git">;
7
+ url: z.ZodString;
8
+ ref: z.ZodOptional<z.ZodString>;
9
+ subdir: z.ZodOptional<z.ZodString>;
10
+ }, "strict", z.ZodTypeAny, {
11
+ url: string;
12
+ kind: "git";
13
+ ref?: string | undefined;
14
+ subdir?: string | undefined;
15
+ }, {
16
+ url: string;
17
+ kind: "git";
18
+ ref?: string | undefined;
19
+ subdir?: string | undefined;
20
+ }>]>;
21
+ installedAt: z.ZodString;
22
+ lastUpdated: z.ZodString;
23
+ }, "strict", z.ZodTypeAny, {
24
+ id: string;
25
+ version: string;
26
+ source: string | {
27
+ url: string;
28
+ kind: "git";
29
+ ref?: string | undefined;
30
+ subdir?: string | undefined;
31
+ };
32
+ installedAt: string;
33
+ lastUpdated: string;
34
+ }, {
35
+ id: string;
36
+ version: string;
37
+ source: string | {
38
+ url: string;
39
+ kind: "git";
40
+ ref?: string | undefined;
41
+ subdir?: string | undefined;
42
+ };
43
+ installedAt: string;
44
+ lastUpdated: string;
45
+ }>;
46
+ export type InstalledPanelAppRecord = z.infer<typeof RegistryEntry>;
47
+ export declare function readInstalledPanelAppsRegistry(): Promise<InstalledPanelAppRecord[]>;
48
+ export declare function writeInstalledPanelAppsRegistry(apps: InstalledPanelAppRecord[]): Promise<void>;
49
+ export declare function upsertInstalledPanelAppRecord(record: InstalledPanelAppRecord): Promise<void>;
50
+ export declare function removeInstalledPanelAppRecord(id: string): Promise<void>;
51
+ export {};