@corenel/harness 0.1.0

package/dist/prompts/library/index.js

@@ -0,0 +1,28 @@
+/* Shipped defaults for the Prompd-config workspace. The .md files in this folder
+ * are the source of truth; `defaults.generated.ts` inlines them as pure TS (run
+ * `node generate.mjs` after editing any .md) so this is node-runnable — no Vite
+ * `?raw` / import.meta.glob. CONFIG_DEFAULTS keys are config-workspace paths.
+ *
+ * `systems/system-<ext...>.md` are auto-mapped to per-filetype system prompts:
+ * drop one in systems/, regenerate, and (unless it's `system-base`) it registers
+ * for those extensions. See systemForFile. */
+import { RAW_DEFAULTS } from './defaults.generated';
+/** The single source of truth for seeding the config store + resetting a file. */
+export const CONFIG_DEFAULTS = RAW_DEFAULTS;
+/** Per-extension system prompt: file extension -> config path. Excludes base.
+ * Derived from the systems/system-*.md keys (pure — no bundler glob). */
+export const SYSTEM_BY_EXT = {};
+for (const configPath of Object.keys(CONFIG_DEFAULTS)) {
+    if (!configPath.startsWith('systems/system-'))
+        continue;
+    const file = configPath.split('/').pop(); // system-prmd-md.md
+    const stem = file.replace(/^system-/, '').replace(/\.md$/, ''); // prmd-md | pdflow | base
+    if (stem === 'base')
+        continue;
+    for (const ext of stem.split('-'))
+        if (ext)
+            SYSTEM_BY_EXT[ext] = configPath;
+}
+/** The default selected persona id (matches a personas/<id>.md key). */
+export const DEFAULT_PERSONA = 'default';
+//# sourceMappingURL=index.js.map

package/dist/prompts/library/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../prompts/library/index.ts"],"names":[],"mappings":"AAAA;;;;;;;8CAO8C;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAA2B,YAAY,CAAC;AAEpE;yEACyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAA2B,EAAE,CAAC;AACxD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,SAAS;IACxD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAY,CAAC,CAAU,oBAAoB;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B;IAC1F,IAAI,IAAI,KAAK,MAAM;QAAE,SAAS;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,IAAI,GAAG;YAAE,aAAa,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;AAC9E,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC"}

package/dist/providers/gateway.d.ts

@@ -0,0 +1,58 @@
+import OpenAI from 'openai';
+import type { ChatCompletionMessageParam, ChatCompletionTool } from 'openai/resources/chat/completions';
+import type { IAuthTokenProvider, Usage } from '@corenel/protocol';
+export declare function setGatewayBase(url: string): void;
+export interface StreamCompletionParams {
+    model: string;
+    messages: ChatCompletionMessageParam[];
+    tools?: ChatCompletionTool[];
+    tool_choice?: 'auto' | 'none';
+}
+export interface AccumulatedToolCall {
+    id: string;
+    name: string;
+    arguments: string;
+}
+export interface StreamedCompletion {
+    content: string;
+    toolCalls: AccumulatedToolCall[];
+    usage: Usage;
+    finishReason: string;
+}
+/**
+ * Stream a completion and accumulate it: text deltas are surfaced via onText for
+ * live rendering; streamed tool-call deltas (indexed fragments) are reassembled
+ * into whole tool calls. Returns the finished message + usage.
+ */
+export declare function streamCompletion(client: OpenAI, params: StreamCompletionParams, signal: AbortSignal, onText?: (delta: string) => void): Promise<StreamedCompletion>;
+export declare function createChatClient(auth: IAuthTokenProvider): OpenAI;
+/** Host-injected model→custom-provider lookup. The kernel transport knows how to
+ * build a custom client but NOT how the host decides which model belongs to one
+ * (that lookup reads app storage) — so the app registers it at boot. Default:
+ * always the gateway. Keeps chat.ts free of any prompd/app import. */
+export type CustomProviderResolver = (model: string) => {
+    baseURL: string;
+    apiKey: string;
+} | null | undefined;
+export declare function setCustomProviderResolver(fn: CustomProviderResolver): void;
+/** Route a model to its client: a custom OpenAI-compatible provider's direct
+ * client when the host's resolver claims the model, else the caller's gateway.
+ * The single source of truth for model→client routing (workflow runner, test
+ * runner, …) so custom-provider handling can't drift between features.
+ * Main-thread only — the resolver reads localStorage. */
+export declare function clientForModel(model: string, gateway: OpenAI): OpenAI;
+/** Host-injected proxy for custom-provider fetches. Returns a Response (e.g. routed
+ * through a local sidecar so a loopback LLM dodges browser CORS) or null to fall
+ * back to a direct browser fetch. The kernel knows nothing about the sidecar — the
+ * app wires this; default is always-direct. */
+export type LocalFetchProxy = (url: string, init: RequestInit) => Promise<Response> | null;
+export declare function setLocalFetchProxy(fn: LocalFetchProxy): void;
+/** A client for a custom OpenAI-compatible provider — calls its base URL directly
+ * with the user-supplied key (no gateway), UNLESS the injected local proxy handles
+ * it (loopback via the sidecar). Pure: the caller passes the provider config, so
+ * this stays Worker-safe (no localStorage). */
+export declare function createCustomClient(p: {
+    baseURL: string;
+    apiKey: string;
+}): OpenAI;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/providers/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../providers/gateway.ts"],"names":[],"mappings":"AAIA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACxG,OAAO,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAOnE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEhD;AAUD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAEpF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,KAAK,EAAE,KAAK,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,WAAW,EACnB,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CA2D7B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAwBjE;AAED;;;sEAGsE;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC;AAE/G,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,sBAAsB,GAAG,IAAI,CAE1E;AAED;;;;yDAIyD;AACzD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrE;AAED;;;+CAG+C;AAC/C,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;AAE3F,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,CAA0B;AAEvF;;;+CAG+C;AAC/C,wBAAgB,kBAAkB,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAUjF"}

package/dist/providers/gateway.js

@@ -0,0 +1,145 @@
+/* Chat transport: the official OpenAI SDK pointed at our same-origin gateway
+ * (/api/v1/chat/completions). The gateway holds the real provider key; the
+ * browser sends the short-lived Clerk token, injected per-request via a custom
+ * fetch (so token refresh is automatic and it works from a Worker later). */
+import OpenAI from 'openai';
+import { alog } from '../log';
+// The gateway base. Injected by the host (the app wires VITE_API_BASE_URL; a node
+// host passes an absolute endpoint like https://api.corenel.ai). Default '/api'
+// (same-origin). The kernel stays env-agnostic — no import.meta.env here.
+let apiBase = '/api';
+export function setGatewayBase(url) {
+    apiBase = (url || '/api').replace(/\/$/, '');
+}
+function gatewayBaseURL() {
+    // The OpenAI SDK needs an absolute baseURL; it appends "/chat/completions".
+    // Use globalThis.location so this works on the main thread AND in a Worker.
+    const v1 = `${apiBase}/v1`;
+    if (/^https?:\/\//.test(v1))
+        return v1;
+    return `${globalThis.location.origin}${v1}`;
+}
+/**
+ * Stream a completion and accumulate it: text deltas are surfaced via onText for
+ * live rendering; streamed tool-call deltas (indexed fragments) are reassembled
+ * into whole tool calls. Returns the finished message + usage.
+ */
+export async function streamCompletion(client, params, signal, onText) {
+    alog('stream:create', { model: params.model, messages: params.messages.length, tools: params.tools?.length ?? 0 });
+    let stream;
+    try {
+        stream = await client.chat.completions.create({
+            model: params.model,
+            messages: params.messages,
+            tools: params.tools,
+            tool_choice: params.tool_choice,
+            stream: true,
+            stream_options: { include_usage: true },
+        }, { signal });
+    }
+    catch (e) {
+        // Surface the real gateway failure. The OpenAI SDK throws an APIError carrying
+        // the HTTP status + parsed body; collapse that into a clear message so it reads
+        // as "Gateway 500: <reason>" in the UI instead of an opaque "internal server
+        // error" (this string is what crosses the worker -> main-thread boundary).
+        const err = e;
+        const raw = err?.error;
+        const detail = (typeof raw === 'string' ? raw : raw?.error || raw?.message) || err?.message || String(e);
+        const msg = typeof err?.status === 'number' ? `Gateway ${err.status}: ${detail}` : detail;
+        alog('stream:create-error', msg);
+        throw new Error(msg);
+    }
+    alog('stream:open');
+    let content = '';
+    let finishReason = 'stop';
+    let chunkN = 0;
+    const usage = { promptTokens: 0, completionTokens: 0 };
+    const byIndex = new Map();
+    for await (const chunk of stream) {
+        if (chunkN++ === 0)
+            alog('stream:first-chunk');
+        const choice = chunk.choices?.[0];
+        if (choice?.delta?.content) {
+            content += choice.delta.content;
+            onText?.(choice.delta.content);
+        }
+        for (const tc of choice?.delta?.tool_calls ?? []) {
+            const cur = byIndex.get(tc.index) ?? { id: '', name: '', arguments: '' };
+            if (tc.id)
+                cur.id = tc.id;
+            if (tc.function?.name)
+                cur.name = tc.function.name;
+            if (tc.function?.arguments)
+                cur.arguments += tc.function.arguments;
+            byIndex.set(tc.index, cur);
+        }
+        if (choice?.finish_reason)
+            finishReason = choice.finish_reason;
+        if (chunk.usage) {
+            usage.promptTokens = chunk.usage.prompt_tokens || 0;
+            usage.completionTokens = chunk.usage.completion_tokens || 0;
+        }
+    }
+    const toolCalls = [...byIndex.entries()].sort((a, b) => a[0] - b[0]).map(([, v]) => v);
+    alog('stream:end', { chunks: chunkN, contentLen: content.length, toolCalls: toolCalls.length, finishReason, usage });
+    return { content, toolCalls, usage, finishReason };
+}
+export function createChatClient(auth) {
+    return new OpenAI({
+        baseURL: gatewayBaseURL(),
+        // Real key lives server-side; this placeholder is replaced per-request by the
+        // Clerk token in the custom fetch below. The SDK requires a non-empty value.
+        apiKey: 'prompd-gateway',
+        dangerouslyAllowBrowser: true,
+        fetch: async (url, init) => {
+            const headers = new Headers(init?.headers);
+            alog('gateway:token-wait');
+            const token = await auth.getToken().catch(() => null);
+            if (token)
+                headers.set('Authorization', `Bearer ${token}`);
+            else
+                headers.delete('Authorization');
+            alog('gateway:fetch', { url: String(url), hasToken: !!token });
+            try {
+                const res = await fetch(url, { ...init, headers });
+                alog('gateway:status', res.status, res.statusText);
+                return res;
+            }
+            catch (e) {
+                alog('gateway:fetch-error', String(e?.message || e));
+                throw e;
+            }
+        },
+    });
+}
+let resolveCustomProvider = () => null;
+export function setCustomProviderResolver(fn) {
+    resolveCustomProvider = fn;
+}
+/** Route a model to its client: a custom OpenAI-compatible provider's direct
+ * client when the host's resolver claims the model, else the caller's gateway.
+ * The single source of truth for model→client routing (workflow runner, test
+ * runner, …) so custom-provider handling can't drift between features.
+ * Main-thread only — the resolver reads localStorage. */
+export function clientForModel(model, gateway) {
+    const cp = resolveCustomProvider(model);
+    return cp ? createCustomClient(cp) : gateway;
+}
+let localFetchProxy = () => null;
+export function setLocalFetchProxy(fn) { localFetchProxy = fn; }
+/** A client for a custom OpenAI-compatible provider — calls its base URL directly
+ * with the user-supplied key (no gateway), UNLESS the injected local proxy handles
+ * it (loopback via the sidecar). Pure: the caller passes the provider config, so
+ * this stays Worker-safe (no localStorage). */
+export function createCustomClient(p) {
+    return new OpenAI({
+        baseURL: p.baseURL.replace(/\/$/, ''),
+        apiKey: p.apiKey || 'no-key',
+        dangerouslyAllowBrowser: true,
+        fetch: async (url, init) => {
+            const proxied = localFetchProxy(String(url), (init ?? {}));
+            return proxied ?? fetch(url, init);
+        },
+    });
+}
+//# sourceMappingURL=gateway.js.map

package/dist/providers/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../providers/gateway.ts"],"names":[],"mappings":"AAAA;;;6EAG6E;AAC7E,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,kFAAkF;AAClF,gFAAgF;AAChF,0EAA0E;AAC1E,IAAI,OAAO,GAAG,MAAM,CAAC;AACrB,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc;IACrB,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,EAAE,GAAG,GAAG,OAAO,KAAK,CAAC;IAC3B,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;AAC9C,CAAC;AAkBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAA8B,EAC9B,MAAmB,EACnB,MAAgC;IAEhC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACnH,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAC3C;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,IAAI;YACZ,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;SACxC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,+EAA+E;QAC/E,gFAAgF;QAChF,6EAA6E;QAC7E,2EAA2E;QAC3E,MAAM,GAAG,GAAG,CAAiG,CAAC;QAC9G,MAAM,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC;QACvB,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,EAAE,OAAO,CAAC,IAAI,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,OAAO,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1F,IAAI,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,YAAY,GAAG,MAAM,CAAC;IAC1B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAU,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,MAAM,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAC3B,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAChC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YACzE,IAAI,EAAE,CAAC,EAAE;gBAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1B,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI;gBAAE,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnD,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS;gBAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;YACnE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,EAAE,aAAa;YAAE,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;QAC/D,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;YACpD,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACrH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAwB;IACvD,OAAO,IAAI,MAAM,CAAC;QAChB,OAAO,EAAE,cAAc,EAAE;QACzB,8EAA8E;QAC9E,6EAA6E;QAC7E,MAAM,EAAE,gBAAgB;QACxB,uBAAuB,EAAE,IAAI;QAC7B,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAkC,CAAC,CAAC;YACtE,IAAI,CAAC,oBAAoB,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;;gBACtD,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACrC,IAAI,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAkB,EAAE,EAAE,GAAI,IAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;gBACnF,IAAI,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnD,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,qBAAqB,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,CAAC,CAAC;YACV,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAOD,IAAI,qBAAqB,GAA2B,GAAG,EAAE,CAAC,IAAI,CAAC;AAC/D,MAAM,UAAU,yBAAyB,CAAC,EAA0B;IAClE,qBAAqB,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;;yDAIyD;AACzD,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,OAAe;IAC3D,MAAM,EAAE,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/C,CAAC;AAOD,IAAI,eAAe,GAAoB,GAAG,EAAE,CAAC,IAAI,CAAC;AAClD,MAAM,UAAU,kBAAkB,CAAC,EAAmB,IAAU,eAAe,GAAG,EAAE,CAAC,CAAC,CAAC;AAEvF;;;+CAG+C;AAC/C,MAAM,UAAU,kBAAkB,CAAC,CAAsC;IACvE,OAAO,IAAI,MAAM,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,QAAQ;QAC5B,uBAAuB,EAAE,IAAI;QAC7B,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAgB,CAAC,CAAC;YAC1E,OAAO,OAAO,IAAI,KAAK,CAAC,GAAkB,EAAE,IAAmB,CAAC,CAAC;QACnE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/services.d.ts

@@ -0,0 +1,29 @@
+/** Result of a server-side compile (the browser can't resolve package refs/binary
+ * assets; the backend does). Only `output` is consumed here; the host impl may
+ * carry more. */
+export interface BuildResult {
+    output: string;
+}
+/** Backend health-check result. */
+export interface PingResult {
+    ok: boolean;
+    version?: string;
+    error?: string;
+}
+export interface HostServices {
+    /** Bearer token for the backend/gateway, or null when unauthenticated. */
+    getToken(): Promise<string | null>;
+    /** Base URL for the backend API (e.g. '/api' or an absolute origin). */
+    getApiBase(): string;
+    /** Server-side compile (resolves package refs + binary assets a browser can't). */
+    build(content: string, parameters: Record<string, unknown>, opts?: {
+        signal?: AbortSignal;
+    }): Promise<BuildResult>;
+    /** Reachability + version check for the backend. */
+    ping(): Promise<PingResult>;
+}
+/** Inject the host's backend access. Called once at boot (see the host's wiring). */
+export declare function setHostServices(s: Partial<HostServices>): void;
+/** The injected host services (defaults: no token, '/api'). */
+export declare function hostServices(): HostServices;
+//# sourceMappingURL=services.d.ts.map

package/dist/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../services.ts"],"names":[],"mappings":"AAQA;;iBAEiB;AACjB,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mCAAmC;AACnC,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACnC,wEAAwE;IACxE,UAAU,IAAI,MAAM,CAAC;IACrB,mFAAmF;IACnF,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnH,oDAAoD;IACpD,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;CAC7B;AASD,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAE9D;AAED,+DAA+D;AAC/D,wBAAgB,YAAY,IAAI,YAAY,CAE3C"}

package/dist/services.js

@@ -0,0 +1,22 @@
+/* HostServices — the seam by which a host supplies backend access (auth token +
+ * API base) to Corenel modules that are NOT React components (the runners, the
+ * agent assembly, the console), so they don't import the host's services/api
+ * directly. Mirrors setGatewayBase: the host injects once at boot; corenel code
+ * reads via hostServices(). The gateway has its own token/base injection
+ * (setGatewayBase + the per-client getToken); this covers the non-gateway uses
+ * (e.g. a runner attaching a bearer token to a direct fetch). */
+let services = {
+    getToken: async () => null,
+    getApiBase: () => '/api',
+    build: async () => ({ output: '' }),
+    ping: async () => ({ ok: false, error: 'no backend configured' }),
+};
+/** Inject the host's backend access. Called once at boot (see the host's wiring). */
+export function setHostServices(s) {
+    services = { ...services, ...s };
+}
+/** The injected host services (defaults: no token, '/api'). */
+export function hostServices() {
+    return services;
+}
+//# sourceMappingURL=services.js.map

package/dist/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../services.ts"],"names":[],"mappings":"AAAA;;;;;;iEAMiE;AA2BjE,IAAI,QAAQ,GAAiB;IAC3B,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;IAC1B,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM;IACxB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;CAClE,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,CAAwB;IACtD,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,YAAY;IAC1B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/sidecar/host.d.ts

@@ -0,0 +1,69 @@
+import type { AgentTool, IMemoryProvider, IKeyValueStore, ISearchProvider, ISessionStore, PermissionRequest, AskQuestion, AskAnswers } from '@corenel/protocol';
+import type { FileService } from '@corenel/protocol';
+import { type SidecarChannel } from '@corenel/protocol';
+/** The host's live capabilities a connected sidecar may proxy into. Only the ones
+ * provided are reachable; a proxy call to a missing one is rejected. */
+export interface HostProviders {
+    memory?: IMemoryProvider;
+    kv?: IKeyValueStore;
+    search?: ISearchProvider;
+    sessions?: ISessionStore;
+    /** The host's active file workspace (virtual or a real folder). */
+    files?: FileService;
+    /** Ask the user to approve a side-effecting action. */
+    confirm?: (req: PermissionRequest) => Promise<boolean>;
+    /** Ask the user one or more questions. */
+    ask?: (questions: AskQuestion[]) => Promise<AskAnswers | null>;
+}
+export interface SidecarHostOptions {
+    channel: SidecarChannel;
+    /** Pairing token presented to the sidecar (surface B — authenticates the
+     * connection; does NOT grant policy authority, which stays with the host). */
+    token: string;
+    /** The host's live stores. Only the ones provided are reachable; a proxy call
+     * to a missing provider is rejected. */
+    providers: HostProviders;
+    /** Register an imported proxy tool (wire to the kernel `registerTool`). */
+    registerTool: (tool: AgentTool) => void;
+    /** Remove a proxy tool on disconnect (wire to `unregisterTool`). */
+    unregisterTool?: (name: string) => void;
+}
+export declare class SidecarHost {
+    private readonly ch;
+    private readonly opts;
+    private invokeSeq;
+    private readonly invokePending;
+    private httpSeq;
+    private readonly httpPending;
+    private features;
+    private readonly imported;
+    private welcome;
+    constructor(opts: SidecarHostOptions);
+    /** Authenticate, then import the sidecar's tools. Resolves with their names,
+     * or rejects if the sidecar denies the token / protocol. */
+    connect(): Promise<string[]>;
+    /** Drop the connection: unregister imported tools and fail anything in flight. */
+    disconnect(reason?: string): void;
+    private onMessage;
+    /** Whether the connected sidecar advertised the loopback HTTP proxy. */
+    supportsHttpProxy(): boolean;
+    /** Fetch a (loopback) URL THROUGH the sidecar — a server-side fetch on the user's
+     * machine, so the browser dodges CORS. Returns a streaming Response: it resolves
+     * as soon as headers arrive (http-res) and the body streams in via http-chunk. */
+    httpFetch(req: {
+        method: string;
+        url: string;
+        headers: Record<string, string>;
+        body?: string;
+    }): Promise<Response>;
+    private invoke;
+    /** Answer a sidecar's proxy-provider call from the host's live store. The
+     * allowlist (HOST_METHODS) is the least-privilege boundary — a sidecar can
+     * never call an unlisted method, nor a provider the host didn't expose. */
+    private serveHostCall;
+    /** The dispatch object for a host-call: the stores/files expose their methods
+     * directly; confirm/ask are single functions wrapped so the method dispatch
+     * (`obj[method](...args)`) is uniform. */
+    private resolveProvider;
+}
+//# sourceMappingURL=host.d.ts.map

package/dist/sidecar/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../sidecar/host.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAC1E,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAC3C,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAE3B;wEACwE;AACxE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,EAAE,CAAC,EAAE,cAAc,CAAC;IACpB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,mEAAmE;IACnE,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,uDAAuD;IACvD,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,0CAA0C;IAC1C,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,cAAc,CAAC;IACxB;kFAC8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd;4CACwC;IACxC,SAAS,EAAE,aAAa,CAAC;IACzB,2EAA2E;IAC3E,YAAY,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;IACxC,oEAAoE;IACpE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAkBD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;IAC1C,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA8B;IAC5D,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgB;IACzC,OAAO,CAAC,OAAO,CAAmF;gBAEtF,IAAI,EAAE,kBAAkB;IAMpC;gEAC4D;IAC5D,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAO5B,kFAAkF;IAClF,UAAU,CAAC,MAAM,SAAiB,GAAG,IAAI;IAYzC,OAAO,CAAC,SAAS;IAsCjB,wEAAwE;IACxE,iBAAiB,IAAI,OAAO;IAE5B;;sFAEkF;IAClF,SAAS,CAAC,GAAG,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAoBlH,OAAO,CAAC,MAAM;IAQd;;+EAE2E;YAC7D,aAAa;IAe3B;;8CAE0C;IAC1C,OAAO,CAAC,eAAe;CAWxB"}

package/dist/sidecar/host.js

@@ -0,0 +1,228 @@
+import { SIDECAR_PROTOCOL, HOST_METHODS, errMessage, } from '@corenel/protocol';
+/** Decode a base64 chunk to bytes (atob is available in the browser and Node 18+). */
+function b64ToBytes(b64) {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export class SidecarHost {
+    constructor(opts) {
+        Object.defineProperty(this, "ch", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "opts", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "invokeSeq", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+        Object.defineProperty(this, "invokePending", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Map()
+        });
+        Object.defineProperty(this, "httpSeq", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+        Object.defineProperty(this, "httpPending", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Map()
+        });
+        Object.defineProperty(this, "features", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: []
+        });
+        Object.defineProperty(this, "imported", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: []
+        });
+        Object.defineProperty(this, "welcome", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: null
+        });
+        this.opts = opts;
+        this.ch = opts.channel;
+        this.ch.onMessage((m) => this.onMessage(m));
+    }
+    /** Authenticate, then import the sidecar's tools. Resolves with their names,
+     * or rejects if the sidecar denies the token / protocol. */
+    connect() {
+        return new Promise((resolve, reject) => {
+            this.welcome = { resolve, reject };
+            this.ch.send({ t: 'hello', protocol: SIDECAR_PROTOCOL, token: this.opts.token });
+        });
+    }
+    /** Drop the connection: unregister imported tools and fail anything in flight. */
+    disconnect(reason = 'disconnected') {
+        for (const name of this.imported)
+            this.opts.unregisterTool?.(name);
+        this.imported.length = 0;
+        for (const p of this.invokePending.values())
+            p.reject(new Error(reason));
+        this.invokePending.clear();
+        for (const p of this.httpPending.values())
+            p.onErr(reason);
+        this.httpPending.clear();
+        this.welcome?.reject(new Error(reason));
+        this.welcome = null;
+        this.ch.close();
+    }
+    onMessage(m) {
+        switch (m.t) {
+            case 'welcome': {
+                this.features = m.features ?? [];
+                for (const decl of m.tools) {
+                    const tool = { ...decl, run: (args) => this.invoke(decl.name, args) };
+                    this.opts.registerTool(tool);
+                    this.imported.push(decl.name);
+                }
+                this.welcome?.resolve([...this.imported]);
+                this.welcome = null;
+                return;
+            }
+            case 'denied': {
+                this.welcome?.reject(new Error(`sidecar denied connection: ${m.reason}`));
+                this.welcome = null;
+                return;
+            }
+            case 'invoke-result': {
+                const p = this.invokePending.get(m.id);
+                if (!p)
+                    return;
+                this.invokePending.delete(m.id);
+                if (m.ok)
+                    p.resolve(m.result ?? '');
+                else
+                    p.reject(new Error(m.error || 'sidecar tool failed'));
+                return;
+            }
+            case 'host-call':
+                void this.serveHostCall(m);
+                return;
+            case 'http-res': {
+                this.httpPending.get(m.id)?.onRes(m.status, m.statusText, m.headers);
+                return;
+            }
+            case 'http-chunk': {
+                this.httpPending.get(m.id)?.onChunk(b64ToBytes(m.b64));
+                return;
+            }
+            case 'http-end': {
+                this.httpPending.get(m.id)?.onEnd();
+                return;
+            }
+            case 'http-err': {
+                this.httpPending.get(m.id)?.onErr(m.error);
+                return;
+            }
+            default:
+                return; // hello / invoke / host-call-result are handled on the sidecar side
+        }
+    }
+    /** Whether the connected sidecar advertised the loopback HTTP proxy. */
+    supportsHttpProxy() { return this.features.includes('http-proxy'); }
+    /** Fetch a (loopback) URL THROUGH the sidecar — a server-side fetch on the user's
+     * machine, so the browser dodges CORS. Returns a streaming Response: it resolves
+     * as soon as headers arrive (http-res) and the body streams in via http-chunk. */
+    httpFetch(req) {
+        const id = ++this.httpSeq;
+        return new Promise((resolve, reject) => {
+            let ctrl = null;
+            let settled = false;
+            const stream = new ReadableStream({ start(c) { ctrl = c; } });
+            this.httpPending.set(id, {
+                onRes: (status, statusText, headers) => { settled = true; resolve(new Response(stream, { status, statusText, headers })); },
+                onChunk: (bytes) => { try {
+                    ctrl?.enqueue(bytes);
+                }
+                catch { /* stream already closed */ } },
+                onEnd: () => { this.httpPending.delete(id); try {
+                    ctrl?.close();
+                }
+                catch { /* already closed */ } },
+                onErr: (msg) => {
+                    this.httpPending.delete(id);
+                    if (!settled)
+                        reject(new Error(msg));
+                    else
+                        try {
+                            ctrl?.error(new Error(msg));
+                        }
+                        catch { /* already closed */ }
+                },
+            });
+            this.ch.send({ t: 'http-req', id, method: req.method, url: req.url, headers: req.headers, body: req.body });
+        });
+    }
+    invoke(name, args) {
+        const id = ++this.invokeSeq;
+        return new Promise((resolve, reject) => {
+            this.invokePending.set(id, { resolve, reject });
+            this.ch.send({ t: 'invoke', id, name, args });
+        });
+    }
+    /** Answer a sidecar's proxy-provider call from the host's live store. The
+     * allowlist (HOST_METHODS) is the least-privilege boundary — a sidecar can
+     * never call an unlisted method, nor a provider the host didn't expose. */
+    async serveHostCall(m) {
+        try {
+            const provider = this.resolveProvider(m.provider);
+            if (!HOST_METHODS[m.provider].includes(m.method)) {
+                throw new Error(`method ${m.provider}.${m.method} is not permitted`);
+            }
+            const fn = provider[m.method];
+            if (typeof fn !== 'function')
+                throw new Error(`method ${m.provider}.${m.method} is unavailable`);
+            const result = await fn.apply(provider, m.args);
+            this.ch.send({ t: 'host-call-result', id: m.id, ok: true, result });
+        }
+        catch (e) {
+            this.ch.send({ t: 'host-call-result', id: m.id, ok: false, error: errMessage(e) });
+        }
+    }
+    /** The dispatch object for a host-call: the stores/files expose their methods
+     * directly; confirm/ask are single functions wrapped so the method dispatch
+     * (`obj[method](...args)`) is uniform. */
+    resolveProvider(p) {
+        const pv = this.opts.providers;
+        let found;
+        switch (p) {
+            case 'confirm':
+                found = pv.confirm ? { confirm: pv.confirm } : undefined;
+                break;
+            case 'ask':
+                found = pv.ask ? { ask: pv.ask } : undefined;
+                break;
+            default:
+                found = pv[p];
+                break;
+        }
+        if (!found)
+            throw new Error(`capability ${p} is not available on this host`);
+        return found;
+    }
+}
+//# sourceMappingURL=host.js.map

package/dist/sidecar/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../sidecar/host.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,gBAAgB,EAAE,YAAY,EAAE,UAAU,GAE3C,MAAM,mBAAmB,CAAC;AAuC3B,sFAAsF;AACtF,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,WAAW;IAWtB,YAAY,IAAwB;QAVnB;;;;;WAAmB;QACnB;;;;;WAAyB;QAClC;;;;mBAAY,CAAC;WAAC;QACL;;;;mBAAgB,IAAI,GAAG,EAAmB;WAAC;QACpD;;;;mBAAU,CAAC;WAAC;QACH;;;;mBAAc,IAAI,GAAG,EAAuB;WAAC;QACtD;;;;mBAAqB,EAAE;WAAC;QACf;;;;mBAAqB,EAAE;WAAC;QACjC;;;;mBAAqF,IAAI;WAAC;QAGhG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACvB,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;gEAC4D;IAC5D,OAAO;QACL,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,IAAI,CAAC,OAAO,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC;IAED,kFAAkF;IAClF,UAAU,CAAC,MAAM,GAAG,cAAc;QAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;YAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAEO,SAAS,CAAC,CAAa;QAC7B,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACZ,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;gBACjC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBAC3B,MAAM,IAAI,GAAc,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;oBACjF,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,CAAC;gBACD,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,CAAC,CAAC;oBAAE,OAAO;gBACf,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,CAAC,CAAC,EAAE;oBAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;;oBAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,qBAAqB,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,KAAK,WAAW;gBACd,KAAK,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC3B,OAAO;YACT,KAAK,UAAU,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAClG,KAAK,YAAY,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtF,KAAK,UAAU,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjE,KAAK,UAAU,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxE;gBACE,OAAO,CAAC,oEAAoE;QAChF,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,iBAAiB,KAAc,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAE7E;;sFAEkF;IAClF,SAAS,CAAC,GAAoF;QAC5F,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;QAC1B,OAAO,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC/C,IAAI,IAAI,GAAuD,IAAI,CAAC;YACpE,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa,EAAE,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE;gBACvB,KAAK,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3H,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC;oBAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;gBAC3F,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAC,IAAI,EAAE,KAAK,EAAE,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;gBACnG,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACb,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC5B,IAAI,CAAC,OAAO;wBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;;wBAChC,IAAI,CAAC;4BAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;gBAC1E,CAAC;aACF,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,IAAY,EAAE,IAA6B;QACxD,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC;QAC5B,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;+EAE2E;IACnE,KAAK,CAAC,aAAa,CAAC,CAA0C;QACpE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,mBAAmB,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,EAAE,GAAI,QAA+C,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACtE,IAAI,OAAO,EAAE,KAAK,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC;YACjG,MAAM,MAAM,GAAG,MAAO,EAA4C,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3F,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED;;8CAE0C;IAClC,eAAe,CAAC,CAAe;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,KAAyB,CAAC;QAC9B,QAAQ,CAAC,EAAE,CAAC;YACV,KAAK,SAAS;gBAAE,KAAK,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAC,MAAM;YAChF,KAAK,KAAK;gBAAE,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAC,MAAM;YAChE;gBAAS,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM;QAChC,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,gCAAgC,CAAC,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}