@clawmasons/shared 0.1.0

package/dist/toolfilter.js

@@ -0,0 +1,55 @@
+/** Known chapter package type prefixes. */
+const TYPE_PREFIXES = ["app-", "member-", "agent-", "role-", "task-", "skill-"];
+/**
+ * Extract a short name from a chapter package name.
+ * Strips the npm scope and any known chapter type prefix.
+ *
+ * Examples:
+ *   "@clawmasons/app-github" → "github"
+ *   "@clawmasons/member-note-taker" → "note-taker"
+ *   "@clawmasons/slack-server" → "slack-server"
+ *   "app-github" → "github"
+ */
+export function getAppShortName(packageName) {
+    // Strip scope (e.g., "@clawmasons/app-github" → "app-github")
+    const parts = packageName.split("/");
+    const unscoped = parts[parts.length - 1] ?? packageName;
+    // Strip known type prefix if present
+    for (const prefix of TYPE_PREFIXES) {
+        if (unscoped.startsWith(prefix)) {
+            return unscoped.slice(prefix.length);
+        }
+    }
+    return unscoped;
+}
+/**
+ * Compute per-app toolFilter allow-lists from the union of all role
+ * permissions in a resolved agent.
+ *
+ * For each app referenced by any role, collects all `allow` lists and
+ * computes the set union. Returns a Map keyed by full app package name.
+ */
+export function computeToolFilters(agent) {
+    const toolSets = new Map();
+    for (const role of agent.roles) {
+        for (const [appName, perms] of Object.entries(role.permissions)) {
+            let toolSet = toolSets.get(appName);
+            if (!toolSet) {
+                toolSet = new Set();
+                toolSets.set(appName, toolSet);
+            }
+            for (const tool of perms.allow) {
+                toolSet.add(tool);
+            }
+        }
+    }
+    const result = new Map();
+    for (const [appName, toolSet] of toolSets) {
+        result.set(appName, {
+            mode: "allow",
+            list: [...toolSet],
+        });
+    }
+    return result;
+}
+//# sourceMappingURL=toolfilter.js.map

package/dist/toolfilter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolfilter.js","sourceRoot":"","sources":["../src/toolfilter.ts"],"names":[],"mappings":"AAUA,2CAA2C;AAC3C,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAEhF;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,WAAmB;IACjD,8DAA8D;IAC9D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC;IAExD,qCAAqC;IACrC,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;gBAC5B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE;YAClB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/types/role.d.ts

@@ -0,0 +1,14 @@
+import type { z } from "zod";
+import type { roleSchema, roleMetadataSchema, taskRefSchema, appConfigSchema, skillRefSchema, containerRequirementsSchema, governanceConfigSchema, resourceFileSchema, roleSourceSchema, mountConfigSchema, toolPermissionsSchema } from "../schemas/role-types.js";
+export type Role = z.infer<typeof roleSchema>;
+export type RoleMetadata = z.infer<typeof roleMetadataSchema>;
+export type TaskRef = z.infer<typeof taskRefSchema>;
+export type AppConfig = z.infer<typeof appConfigSchema>;
+export type SkillRef = z.infer<typeof skillRefSchema>;
+export type ContainerRequirements = z.infer<typeof containerRequirementsSchema>;
+export type GovernanceConfig = z.infer<typeof governanceConfigSchema>;
+export type ResourceFile = z.infer<typeof resourceFileSchema>;
+export type RoleSource = z.infer<typeof roleSourceSchema>;
+export type MountConfig = z.infer<typeof mountConfigSchema>;
+export type ToolPermissions = z.infer<typeof toolPermissionsSchema>;
+//# sourceMappingURL=role.d.ts.map

package/dist/types/role.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.d.ts","sourceRoot":"","sources":["../../src/types/role.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EACV,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,cAAc,EACd,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACtB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAC9C,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/types/role.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=role.js.map

package/dist/types/role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../../src/types/role.ts"],"names":[],"mappings":""}

package/dist/types.d.ts

@@ -0,0 +1,106 @@
+import type { ChapterField } from "./schemas/index.js";
+/**
+ * A chapter package discovered on the filesystem.
+ */
+export interface DiscoveredPackage {
+    name: string;
+    version: string;
+    packagePath: string;
+    chapterField: ChapterField;
+}
+/**
+ * A fully-resolved app (MCP server) in the dependency graph.
+ */
+export interface ResolvedApp {
+    name: string;
+    version: string;
+    transport: "stdio" | "sse" | "streamable-http";
+    command?: string;
+    args?: string[];
+    url?: string;
+    env?: Record<string, string>;
+    tools: string[];
+    capabilities: string[];
+    credentials: string[];
+    description?: string;
+}
+/**
+ * A fully-resolved skill (knowledge artifact) in the dependency graph.
+ */
+export interface ResolvedSkill {
+    name: string;
+    version: string;
+    artifacts: string[];
+    description: string;
+}
+/**
+ * A fully-resolved task in the dependency graph.
+ */
+export interface ResolvedTask {
+    name: string;
+    version: string;
+    taskType: "subagent" | "script" | "composite" | "human";
+    prompt?: string;
+    timeout?: string;
+    approval?: "auto" | "confirm" | "review";
+    requiredApps?: string[];
+    requiredSkills?: string[];
+    apps: ResolvedApp[];
+    skills: ResolvedSkill[];
+    subTasks: ResolvedTask[];
+}
+/**
+ * A fully-resolved role (permission boundary) in the dependency graph.
+ */
+export interface ResolvedRole {
+    name: string;
+    version: string;
+    description?: string;
+    instructions?: string;
+    risk: "HIGH" | "MEDIUM" | "LOW";
+    permissions: Record<string, {
+        allow: string[];
+        deny: string[];
+    }>;
+    constraints?: {
+        maxConcurrentTasks?: number;
+        requireApprovalFor?: string[];
+    };
+    mounts?: Array<{
+        source: string;
+        target: string;
+        readonly: boolean;
+    }>;
+    baseImage?: string;
+    aptPackages?: string[];
+    tasks: ResolvedTask[];
+    apps: ResolvedApp[];
+    skills: ResolvedSkill[];
+}
+/**
+ * A fully-resolved agent — the top-level deployable unit.
+ */
+export interface ResolvedAgent {
+    name: string;
+    version: string;
+    agentName: string;
+    slug: string;
+    description?: string;
+    runtimes: string[];
+    credentials: string[];
+    roles: ResolvedRole[];
+    resources?: Array<{
+        type: string;
+        ref: string;
+        access: string;
+    }>;
+    proxy?: {
+        port?: number;
+        type?: "sse" | "streamable-http";
+    };
+    llm?: {
+        provider: string;
+        model: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,GAAG,KAAK,GAAG,iBAAiB,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAC;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE;QACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC;KAClC,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@clawmasons/shared",
+  "version": "0.1.0",
+  "description": "Shared types, schemas, and utilities for mason command line",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit"
+  },
+  "files": [
+    "dist"
+  ],
+  "license": "MIT",
+  "dependencies": {
+    "js-yaml": "^4.1.1",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@types/js-yaml": "^4.0.9"
+  }
+}